[Samba] ntlm_auth authentication to two different domains

[flubu]

Hi,

I'm wondering if it is possible to use NTLM authentication in squid for
users in two different Windows domains. So basically, I would need that
ntlm_auth --username=user_in_domain1 --domain=domain1
and
ntlm_auth --username=user_in_domain2 --domain=domain2
work at the same time. Is that possible ? What would one need to
configure to make this work ?

Thanks

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] creating a master share

[Michael Heydon]

sharif islam wrote:


I tried this but gave read-only access. Also in the linux level, I
don't have this master group as the owner. Any idea?
  
If the users don't have write access at the unix level, they won't get 
write access through samba.

You can use ACLs to grant them write access.

[master share]
comment = All of WWW read/write access
path = /www
valid users = "@DOMAIN\My master group"
write list =  "@DOMAIN\My master group"
force group = "My Master group"
  
Or you can use the above "force group" option to access the files as a 
group that does have access.

read only = No
create mask = 0775
directory mask = 0775
  



*Michael Heydon - IT Administratorr *
[EMAIL PROTECTED] 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as nonroot

[Michael Heydon]

[EMAIL PROTECTED] wrote:

Hi,

Im trying to run samba as a non-root user and I was wondering if this is
even possible

No, it's not.


and if not what is preventing it from being ran as a normal
user??
  
You couldn't bind to privileged ports would be the big one. You might be 
able to modify the source so it runs on different ports (although that 
would mean windows systems couldn't connect, you might be able to coax 
another samba machine into it), you would then have issues with 
permissions (you couldn't suid/sgid to the connecting user).


*Michael Heydon - IT Administratorr *
[EMAIL PROTECTED] 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] User invalid SID with home directory - Bueller?

[Charlie]

If you do a "net getlocalsid" at your shell prompt on the samba server
that hosts the share, does the preamble of the SID returned match that
of the SID you see in your error messages?

I'm betting not...

--Charlie

On Tue, May 13, 2008 at 2:39 PM, Wes Modes <[EMAIL PROTECTED]> wrote:
> So even though I see this popping up in tons of posts, no one has
> encountered it and successfully solved the problem or can illuminate the
> issue?
>
>  Here's what I did not knowing what else to do:
>
>   1. Deleted the account.  (smbldap-userdel)
>   2. Recreated the account  (smbldap-useradd)
>   3. Searched for any files owned by the old user, and chown'd them to
>  the new user
>
>  It is not an elegant solution, but it is the only one I have now.  So far I
> haven't gotten any accounts that have had the problem reoccur.  But I'm
> waiting to see.
>
>  Wes
>
>
>  Wes Modes wrote:
>
> > I'm having the problem in which users can access their group shares, but
> not their home shares.  These two shares are defined thusly in smb.conf:
> >
> >   [seref]
> >   comment = Science & Engineering Reference Section
> >   path = /data/group/seref
> >   valid users = @seref, @seref-read, @admin
> >   read list = @seref-read
> >   write list = @seref, @admin
> >   force group = seref
> >   create mask = 0664
> >   directory mask = 0770
> >
> >   [home]
> >   comment = %u's Personal Share Directory
> >   path = /data/home/%U
> >   valid users = %U, @admin
> >   write list = %U, @admin
> >   create mask = 0600
> >   directory mask = 0700
> >   browseable = No
> >
> >
> > It seems that the %U variable, causes Samba to do a lookup_global_sam_name
> which fails.
> >   [EMAIL PROTECTED] smbclient -Ujoeblow
> >   '\\edgar.library.ucsc.edu\home' 
> >  tree connect failed: NT_STATUS_ACCESS_DENIED
> >
> >
> > Here's the relevant section of the log:
> >
> >   passdb/pdb_ldap.c:init_sam_from_ldap(545)
> >   init_sam_from_ldap: Entry found for user: joeblow
> >   passdb/pdb_ldap.c:init_group_from_ldap(2158)
> >   init_group_from_ldap: Entry found for group: 30023
> >   passdb/passdb.c:lookup_global_sam_name(596)
> >   User joeblow with invalid SID
> >   S-1-5-21-2642364908-3785178431-1037763545-61756 in passdb
> >   passdb/pdb_ldap.c:init_group_from_ldap(2158)
> > init_group_from_ldap: Entry found for group: 1001
> >   smbd/service.c:make_connection_snum(616)
> >   user 'joeblow' (from session setup) not permitted to access this
> >   share (home)
> >
> >
> > Please note that I am not using the ADS security model, nor do I care to
> at the moment.  Here's the significant part of my smb.conf:
> >
> >   ### Basic information for server
> >   workgroup = MCHSTAFF
> >   netbios name = EDGAR
> >   server string = Library Samba Server
> >   hosts allow = 169.233.
> >   hosts allow = 128.114.
> >   enable privileges = yes
> >   security = user
> >   encrypt passwords = yes
> >   preferred master = yes
> >   domain master = yes
> >   domain logons = yes
> >   local master = yes
> >   username map = /etc/samba/smbusers
> >   logon path =
> >   wins support = yes
> >   dns proxy = no
> >
> > So why I am I getting the failure "User joeblow with invalid SID"?
> >
> > Wes
> >
> >
> >
>
>  --
>
>  Wes Modes
>  Server Administrator & Programmer Analyst
>  McHenry Library
>  Computing & Network Services
>  Information and Technology Services
>  459-5208
>  --
>  To unsubscribe from this list go to the following URL and read the
>  instructions:  https://lists.samba.org/mailman/listinfo/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Samba segs when serving files from a windows partition on OpenBSD-4.2

[Volker Lendecke]

On Tue, May 13, 2008 at 01:10:29PM -0700, Jeremy Allison wrote:
> > Certain? I think mbalmer wanted to send a Samba-patch for
> > systems without his bugfix (i.e. all bsd systems in
> > production right now). Or did I miss that patch?
> 
> I thouhgt the patch he wanted was removing that code,
> but I could be mistaken.

Right now I've got a little chat with mbalmer on irc. It
seems that we can indeed remove that code completely.

Volker


pgpu2IcNNWm2W.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problem with UID

[Markova Olga]

Hello!
I have two linux-based server (eg. server1 and server2) that are members of 
Windows-2000-domain TEST.
On Server1 there's folder EXCHANGE with ACL permission shared through 
samba-3.0.10:
drwxr-xr-- "TEST\user" "TEST\domain users"  EXCHANGE
it works OK for domain users and the owner (TEST\user) can control permissions.
Now I want to copy the data from this folder (EXCHANGE) to Server2 with the 
same ACL-permissions for domain users.
For this I've done:
1. Server2 joined to domain TEST (net rpc join -S PDC -U admin)
wbinfo -g --> OK
wbinfo -u --> OK
2. mount //server1/EXCHANGE to server2 to folder /mountExchange
BUT!
mounted folder has permission like this: 
#drwxr-xr-- 15878 TEST\domain users   /mountExchange
So, when I copy  the data from mounted folder to local folder (cp -rpa 
 ), files are also copied with unrecognized UID:
#drwxr-xr-- 15892 TEST\domain users   /mount/Exchange/soft
# cd ./soft
#rwxr-xr-- 15892 TEST\domain users   /mountExchange/soft/README.txt

as you can see UID doesn't match on servers.

some conf files:
Server1
smb.conf (samba-3.0.14)
[global]
workgroup = TEST
server string =
security = DOMAIN
log file = /var/log/samba/%m.log
max log size = 50
acl compatibility = win2k
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = No
idmap uid = 15000-2
idmap gid = 15000-2
map acl inherit = Yes
[exchange]
path = /public/exchange
valid users = "TEST\domain users"
admin users = TEST\admin
read only = No
vfs objects = recycle, extd_audit
recycle:touch = yes
recycle:keeptree = yes
recycle:repository = Trash/%U

Server2
smb.conf (samba-3.0.25b)
[global]
workgroup = TEST
server string =
security = DOMAIN
log file = /var/log/samba/%m.log
max log size = 50
acl compatibility = win2k
idmap uid = 15000-2
idmap gid = 15000-2
map acl inherit = Yes
 
SID of domain users are the same on both servers:
Server1
#wbinfo -n "TEST\user"
#wbinfo -S S-1-5-21-4219080837-1407974555-4163626113-1379
15342
Server2
#wbinfo -n "TEST\user"
#wbinfo -S S-1-5-21-4219080837-1407974555-4163626113-1379
15002

Does anybody know why UID doesn't migrate from one server to another?
Thanks for any idea!
Igor
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Samba segs when serving files from a windows partition on OpenBSD-4.2

[Jeremy Allison]

On Tue, May 13, 2008 at 09:44:03PM +0200, Volker Lendecke wrote:
> On Tue, May 13, 2008 at 10:20:47AM -0700, Jeremy Allison wrote:
> > > https://bugzilla.samba.org/attachment.cgi?id=2905 does not work, nor does 
> > > removing repdir.m4 entirely. I ended up editing source/Makefile and 
> > > removing the .o files from LIBREPLACE_OBJ.
> > 
> > We'll remove lib/replace/repdir_getdirentries.c for 3.0.29 and
> > 3.2 final. Thanks.
> 
> Certain? I think mbalmer wanted to send a Samba-patch for
> systems without his bugfix (i.e. all bsd systems in
> production right now). Or did I miss that patch?

I thouhgt the patch he wanted was removing that code,
but I could be mistaken.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Samba segs when serving files from a windows partition on OpenBSD-4.2

[Volker Lendecke]

On Tue, May 13, 2008 at 10:20:47AM -0700, Jeremy Allison wrote:
> > https://bugzilla.samba.org/attachment.cgi?id=2905 does not work, nor does 
> > removing repdir.m4 entirely. I ended up editing source/Makefile and 
> > removing the .o files from LIBREPLACE_OBJ.
> 
> We'll remove lib/replace/repdir_getdirentries.c for 3.0.29 and
> 3.2 final. Thanks.

Certain? I think mbalmer wanted to send a Samba-patch for
systems without his bugfix (i.e. all bsd systems in
production right now). Or did I miss that patch?

Volker


pgpD5HF5OLqPU.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] is there a bandwidth limit per file?

[Michael]

Hello!
Sorry for late answer but, i was on travel until sunday. I tried with 
Ubuntu Live CD but still with similiar limit. So, I decided to upgrade 
to Gigabit Interface (Switch & NICs).


Here, the results for the case someone is curious.

Now I get around 160MBit on average from and to the server. This does 
not change when copying several files in parallel. With NETIO around 
250MBit (linx-win) and 500MBit (win-win) are possible. I guess 20MB/s is 
what i can get with this slow computer and Samba.


Thank you, Jeremy for the fast and good support,
   Michael

Jeremy Allison schrieb:

On Fri, Apr 25, 2008 at 12:20:19AM +0200, Michael wrote:
  

Hello Everybody!

I set up a fileserver:
   - Pentium II, 350 Mhz,
   - 256MB RAM,
   - Intel Fast Ethernet PCI
   - VIA-SATA Controller
   - 2x500GB SATA HDD RAID 1
   - Debian 4, Samba 3
   - Samba set up in user shares mode without special options, but with
the suggested optimizations

Clients:
   - Windows XP Prof SP2

So far it works fine. I can read and write files without problem. But my
bandwith seems to be limited somehow. When i copy one file i get a
nearly constant transfer rate of about 6.8 MB/s (read and write).
Do i copy two files in parallel i get a total transfer rate of about
10MB/s (again for read and write)
with 3 files it is even around 11MB/s. Why i can't reach this transfer
rate with just one file? It is the same from both windows pc.

I benchmarked my network around 11.5MB/s are reached using netio
(Win-Win,Win-Debian).
The HDDs are reaching 60MB/s with hdparm -t /dev/sd?

I search for such an issue, but didn't find something useful. I looked into 
the documentation, but didn't find some hints for that issue.


How can i find the bootleneck in the system?



I'd guess the problem is the Windows redirector only
allowing one outstanding 64k read/write request on
the wire at a time. This is a known problem with
XP. To test is this is the case, try using smbclient
from another Linux box to write a file and see
if the throughput rises. We allow up to max mux
(protocol limit) outstanding requests on the
wire.

Jeremy.

  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Does samba modify print queues?

[jax]

Oddly enough I wrote back once to this list, but it's not yet shown up. Now
I'm here to say I was wrong, and that Jerry is right...
Setting the print driver on the windows XP client side to NT EMF enables
perfect prints.
thanks for the patient assistance!  you rock.

On Tue, 13 May 2008 13:10:37 -0500, "Gerald (Jerry) Carter"
<[EMAIL PROTECTED]> wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Jax,
> 
>> Dang... apparently I was not specific enough.  I'm not using RAW drivers
> on
>> the windows clients - ONLY in cups. My intention is for the users to
> change
>> nothing and to just have the samba/cups combo do routing.  It would seem
>> easy, however everyone I've tried to talk with has given some
> linux-centric
>> answer or whatever.  Okay, well, guess I'll just do this without samba
> as
>> it's the culprit.  without samba, all works fine, with samba things go
>> wrong.  I'm not sure how you came to the conclusion that it must be the
>> windows client.  Poor writing on my part I must presume.  Well thanks
> for
>> the effort.
> 
> Understand there are two different ways to generate print jobs on Windows
> clients.  Raw (client side rebdered) and EMF which is basically
> encapsulated GDI calls (server side rendered).  When using EMF it is
> possible that certain Windows print drivers do not pass the job through
> the local Win32 print processor for that driver and hence generate
> different output.  That is what I was referring to when I said RAW vs.
> EMF printing.  Has nothing to do with cups.
> 
> 
> 
> 
> 
> 
> cheers, jerry
> 
> - --
> =
> Samba--- http://www.samba.org
> Likewise Software  --

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] User invalid SID with home directory - Bueller?

[Wes Modes]

So even though I see this popping up in tons of posts, no one has 
encountered it and successfully solved the problem or can illuminate the 
issue?


Here's what I did not knowing what else to do:

  1. Deleted the account.  (smbldap-userdel)
  2. Recreated the account  (smbldap-useradd)
  3. Searched for any files owned by the old user, and chown'd them to
 the new user

It is not an elegant solution, but it is the only one I have now.  So 
far I haven't gotten any accounts that have had the problem reoccur.  
But I'm waiting to see.


Wes


Wes Modes wrote:
I'm having the problem in which users can access their group shares, 
but not their home shares.  These two shares are defined thusly in 
smb.conf:


   [seref]
   comment = Science & Engineering Reference Section
   path = /data/group/seref
   valid users = @seref, @seref-read, @admin
   read list = @seref-read
   write list = @seref, @admin
   force group = seref
   create mask = 0664
   directory mask = 0770

   [home]
   comment = %u's Personal Share Directory
   path = /data/home/%U
   valid users = %U, @admin
   write list = %U, @admin
   create mask = 0600
   directory mask = 0700
   browseable = No


It seems that the %U variable, causes Samba to do a 
lookup_global_sam_name which fails.

   [EMAIL PROTECTED] smbclient -Ujoeblow
   '\\edgar.library.ucsc.edu\home' 
  tree connect failed: NT_STATUS_ACCESS_DENIED


Here's the relevant section of the log:

   passdb/pdb_ldap.c:init_sam_from_ldap(545)
   init_sam_from_ldap: Entry found for user: joeblow
   passdb/pdb_ldap.c:init_group_from_ldap(2158)
   init_group_from_ldap: Entry found for group: 30023
   passdb/passdb.c:lookup_global_sam_name(596)
   User joeblow with invalid SID
   S-1-5-21-2642364908-3785178431-1037763545-61756 in passdb
   passdb/pdb_ldap.c:init_group_from_ldap(2158)
 init_group_from_ldap: Entry found for group: 1001
   smbd/service.c:make_connection_snum(616)
   user 'joeblow' (from session setup) not permitted to access this
   share (home)


Please note that I am not using the ADS security model, nor do I care 
to at the moment.  Here's the significant part of my smb.conf:


   ### Basic information for server
   workgroup = MCHSTAFF
   netbios name = EDGAR
   server string = Library Samba Server
   hosts allow = 169.233.
   hosts allow = 128.114.
   enable privileges = yes
   security = user
   encrypt passwords = yes
   preferred master = yes
   domain master = yes
   domain logons = yes
   local master = yes
   username map = /etc/samba/smbusers
   logon path =
   wins support = yes
   dns proxy = no

So why I am I getting the failure "User joeblow with invalid SID"?

Wes




--

Wes Modes
Server Administrator & Programmer Analyst
McHenry Library
Computing & Network Services
Information and Technology Services
459-5208
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Does samba modify print queues?

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jax,

> Dang... apparently I was not specific enough.  I'm not using RAW drivers on
> the windows clients - ONLY in cups. My intention is for the users to change
> nothing and to just have the samba/cups combo do routing.  It would seem
> easy, however everyone I've tried to talk with has given some linux-centric
> answer or whatever.  Okay, well, guess I'll just do this without samba as
> it's the culprit.  without samba, all works fine, with samba things go
> wrong.  I'm not sure how you came to the conclusion that it must be the
> windows client.  Poor writing on my part I must presume.  Well thanks for
> the effort.

Understand there are two different ways to generate print jobs on Windows
clients.  Raw (client side rebdered) and EMF which is basically
encapsulated GDI calls (server side rendered).  When using EMF it is
possible that certain Windows print drivers do not pass the job through
the local Win32 print processor for that driver and hence generate
different output.  That is what I was referring to when I said RAW vs.
EMF printing.  Has nothing to do with cups.






cheers, jerry

- --
=
Samba--- http://www.samba.org
Likewise Software  -  http://www.likewisesoftware.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIKdmdIR7qMdg1EfYRAtfeAKDZysCLk/WAgYmeHRGwBDBfgg0/6gCfZwu3
pCJzeGY1zC/j8roHfSI7bYA=
=zXFx
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Does samba modify print queues?

[Lukasz Szybalski]

On Tue, May 13, 2008 at 12:26 PM,  <[EMAIL PROTECTED]> wrote:
>
>  Dang... apparently I was not specific enough.  I'm not using RAW drivers on
>  the windows clients - ONLY in cups. My intention is for the users to change
>  nothing and to just have the samba/cups combo do routing.  It would seem
>  easy, however everyone I've tried to talk with has given some linux-centric
>  answer or whatever.  Okay, well, guess I'll just do this without samba as
>  it's the culprit.  without samba, all works fine, with samba things go
>  wrong.  I'm not sure how you came to the conclusion that it must be the
>  windows client.  Poor writing on my part I must presume.  Well thanks for
>  the effort.
>
>

Doesn't samba/cups printing happens this way?

So from winxp (pcl6 or pcl5 or ps) -> to samba (cups) -> to printer
using PPD to raw?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Does samba modify print queues?

[jax]

Dang... apparently I was not specific enough.  I'm not using RAW drivers on
the windows clients - ONLY in cups. My intention is for the users to change
nothing and to just have the samba/cups combo do routing.  It would seem
easy, however everyone I've tried to talk with has given some linux-centric
answer or whatever.  Okay, well, guess I'll just do this without samba as
it's the culprit.  without samba, all works fine, with samba things go
wrong.  I'm not sure how you came to the conclusion that it must be the
windows client.  Poor writing on my part I must presume.  Well thanks for
the effort.

On Tue, 13 May 2008 09:25:45 -0500, "Gerald (Jerry) Carter"
<[EMAIL PROTECTED]> wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Jack Downes wrote:
> 
>> So somewhere in the line of windowsXPclient -> samba ->cups
>> ->Win2k3printserver -> printer, we are changing the output.
> 
> smbd does not modify any bits in the print job itself.  My guess is
> that the Windows drivers are operating differently when using RAW
> vs. EMF printing modes.
> 
> 
> 
> 
> 
> 
> cheers, jerry
> - --
> =
> Samba--- http://www.samba.org
> Likewise Software  --

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Samba segs when serving files from a windows partition on OpenBSD-4.2

[Jeremy Allison]

On Tue, May 13, 2008 at 05:56:56PM +0100, Stephen Borrill wrote:
>
> As a data point, I'm getting crashes on NetBSD 3.1 and samba 3.0.28a on a 
> FFSv2 partition.
>
> Removing the lib/replace/repdir_getdirentries.c gets it working (even 
> without "directory name cache size = 0"). I'm not sure of the canonical 
> way to remove it, the patch at 
> https://bugzilla.samba.org/attachment.cgi?id=2905 does not work, nor does 
> removing repdir.m4 entirely. I ended up editing source/Makefile and 
> removing the .o files from LIBREPLACE_OBJ.

We'll remove lib/replace/repdir_getdirentries.c for 3.0.29 and
3.2 final. Thanks.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Samba segs when serving files from a windows partition on OpenBSD-4.2

[Stephen Borrill]

On Tue, Apr 29, Jeremy Allison wrote:

On Mon, Apr 28, 2008 at 09:05:29PM +0100, Edd Barrett wrote:

I am sure that the OpenBSD team will be interested in fixing these bugs
if they still exist, as they take pride making good quality code. I
can't speak for NetBSD or FreeBSD.



As for the "directory name cache size = 0" it does not work for me. On
OpenBSD. I used this configuration:



[global]
workgroup = MYGROUP
server string = Samba Server
security = share
log file = /var/log/smbd.%m
directory name cache size = 0



[public]
   comment = Public Stuff
   path = /mnt/hot/sd0i
   public = yes
   writable = yes
   printable = no



I tested this with samba-latest.tgz from your web-page.



If I change the path to someplace else on a UFS slice, all is well.


Did you remove the lib/replace/repdir_getdirentries.c code as
well ? The aborts will still trigger even with "directory name cache
size = 0" if that code is in place.


As a data point, I'm getting crashes on NetBSD 3.1 and samba 3.0.28a on a FFSv2 
partition.


Removing the lib/replace/repdir_getdirentries.c gets it working (even without 
"directory name cache size = 0"). I'm not sure of the canonical way to remove 
it, the patch at https://bugzilla.samba.org/attachment.cgi?id=2905 does not 
work, nor does removing repdir.m4 entirely. I ended up editing source/Makefile 
and removing the .o files from LIBREPLACE_OBJ.


I note the changes in OpenBSD and NetBSD to fix the seekdir() problem, but they 
didn't seem to help me.


--
Dr. Stephen Borrill
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Can't get 3.0.23d from SuSE RPM to be a member in an NT4 domain

[Jay R. Ashworth]

On Tue, May 13, 2008 at 09:40:07AM -0500, Sunny wrote:
> Which version of opensuse you are running. I had similar problems with
> 10.2, but with 10.3 and samba 3.0.26a-3.5 everything is OK.

I am, in fact, using 10.2 and 3.0.23.  I'll upgrade the machine after
we get the hardware problems sorted, and see if it plays.  Thanks.

Cheers,
-- jra
-- 
Jay R. Ashworth   Baylink  [EMAIL PROTECTED]
Designer The Things I Think   RFC 2100
Ashworth & Associates http://baylink.pitas.com '87 e24
St Petersburg FL USA  http://photo.imageinc.us +1 727 647 1274

 Those who cast the vote decide nothing.
 Those who count the vote decide everything.
   -- (Joseph Stalin)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] creating a master share

[sharif islam]

I am trying to create  a master share that contains all the other
shares. I created a group that needs read+write permission to all the
other shares. However, rather than adding this group in each share
configuration, I was wondering if there is a way to overwrite the
permission.

I tried this but gave read-only access. Also in the linux level, I
don't have this master group as the owner. Any idea?

[master share]
comment = All of WWW read/write access
path = /www
valid users = "@DOMAIN\My master group"
write list =  "@DOMAIN\My master group"
force group = "My Master group"
read only = No
create mask = 0775
directory mask = 0775
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba as nonroot

[lordm]

Hi,

Im trying to run samba as a non-root user and I was wondering if this is
even possible, and if not what is preventing it from being ran as a normal
user??

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Can't get 3.0.23d from SuSE RPM to be a member in an NT4 domain

[Sunny]

On Mon, May 12, 2008 at 10:49 AM, Jay R. Ashworth <[EMAIL PROTECTED]> wrote:
>
> A week ago, May 06, 2008 at 11:22:24AM -0400, I wrote:
> > I followed (I think) the instructions on how to do this in TOSHARG
> > (which are about as disjointed as the book, which I took back), but I
> > continue to be unable to get the box, running winbind, to reliably
> > authenticate users off the PDC, which is running NT4 (and I'm not sure
> > which SP, if it matters) and Exchange 5.5, which precludes me from
> > simply vampiring it and decommissioning it... unless there's no
> > solution on the Samba front.
>
> [ ... ]
>
> > I'll be happy to supply smb.conf and any other information that seems
> > warranted, but hopefully this is enough to provide a start to some
> > helpful person... :-)  This seems to be a question that is much-asked
> > and little-answered, based on all my googling...
>
> No help on this at all, huh?  Is "Samba 3 as a member server in an NT
> domain" not a supported configuration, then?
>

Which version of opensuse you are running. I had similar problems with
10.2, but with 10.3 and samba 3.0.26a-3.5 everything is OK.

--
Svetoslav Milenov (Sunny)

Even the most advanced equipment in the hands of the ignorant is just
a pile of scrap.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Does samba modify print queues?

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jack Downes wrote:

> So somewhere in the line of windowsXPclient -> samba ->cups
> ->Win2k3printserver -> printer, we are changing the output.

smbd does not modify any bits in the print job itself.  My guess is
that the Windows drivers are operating differently when using RAW
vs. EMF printing modes.






cheers, jerry
- --
=
Samba--- http://www.samba.org
Likewise Software  -  http://www.likewisesoftware.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIKaTpIR7qMdg1EfYRAlGzAJwOsF7M18gdb3VL6hLd+t2FTUf1MACgvhup
r2ayevYCF9SwZjHEG5dRIh8=
=QdLw
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Group quotas on shares

[sgbarrett]

Many thanks, the 'valid users' option is exactly what was missing.

Regards,

Simon


Pat Riehecky <[EMAIL PROTECTED]> wrote:

<  
<  Hey,
<  
<  We have a similar setup here.  I have all the users of a share in a
<  secondary group together.  
<  
<  chown whomever:sharegroup on the share directory
<  chmod 2770 on the share directory
<  
<  Here is the relevant bit of my smb.conf
<  [IT]
<   comment = IT Test Share
<   path = /home/it
<   valid users = @it
<   force group = it
<   read only = No
<   create mask = 0770
<   directory mask = 0770
<   strict allocate = Yes
<   use sendfile = Yes
<   preserve case = No
<   hide special files = Yes
<   hide unreadable = Yes
<   browseable = No
<   fstype = FAT
<   wide links = No
<  
<  
<  For maintainability I would recommend reading up on the copy option of
<  smb.conf for shares.  I have 20+ shares which are all setup identically
<  and have but one place to make changes to all of them.
<  
<  As a side note for a shortcut I suspect you are looking for the valid
<  users option of smb.conf.
<  
<  Pat
<  
<  On Mon, 2008-05-12 at 11:24 +0100, [EMAIL PROTECTED] wrote:
<  > Hello,
<  > 
<  > Samba 3.0.23d PDC on CentOS 4.4, smbpasswd backend, Windows XP clients.
<  > 
<  > I recently took over the administration of a small LAN (~35 hosts).  The 
shared drives had been implemented in a hurry and the configuration had never 
been revisited.  Linux groups had been enabled for different shares, but this 
had never been enforced on the file server.
<  > 
<  > I have implemented linux group quotas on the file system that contains our 
shared folders, but it has not worked according to my expectations.  
<  > 
<  > I changed the group ownership of each share and its contents according to 
the relevant role and appropriate access level, and set the group sticky on 
each share and its subfolders.  I also added the default create modes for each 
share into smb.conf:
<  > 
<  > force create mode = 0770
<  > force directory mode = 0770
<  > 
<  > After this I enabled quotas on the filesystem for the specific group that 
owns each share.  However, in Windows every folder shows with the same usage 
and quota regardless of the assigned quota, and that quota seems to be the 
quota assigned to the primary group that each user belongs to i.e. users.  If I 
remove the quota on the users group then the full filesystem space is displayed 
in Windows Explorer for every share.
<  > 
<  > If I add the option:
<  > 
<  > force group = +sales 
<  > 
<  > to the sales share, for example, the correct quota for sales is visible in 
explorer, however any user can then access the sales folder regardless of the 
groups that they belong to.
<  > 
<  > Is there a way I can enable group quotas that are displayed correctly in 
Explorer and also limit access to only the members of the appropriate groups 
for each share?
<  > 
<  > Best regards,
<  > 
<  > Simon Barrett
<  > 
<  > 
<  > 



-
Find the home of your dreams with eircom net property
Sign up for email alerts now http://www.eircom.net/propertyalerts


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba