[Samba] Printing XP -> 3.2 Now really slow (just like the old days)

2008-08-13 Thread David C. Rankin

Guys,

	My wife needed to print something this evening to our normal HP 4 attached to 
our cups server running samba-3.2.1-0.1.126. Nothing has changed in the last 
two months going from 3.0.28a to the 3.2.x flavor of samba. However, something 
has brought printing to its knees.


	I pulled out all the old tricks, hacked the registry to delete any entries in 
HKCU\Printers\DevModes and DevModes2 of the type \\server\printer. Removal of 
the entries didn't change a thing. I captured an ethereal/wireshark trace and I 
have that available to anyone if interested.


	Have there been any changes in 3.2.x that would effect printing? It does seem 
to print once every conceivable timer in window times out, but were talking 
120-150 seconds. Any Ideas?


--
David C. Rankin, J.D., P.E.
Rankin Law Firm, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
Telephone: (936) 715-9333
Facsimile: (936) 715-9339
www.rankinlawfirm.com
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: What affects file locking?

2008-08-13 Thread Doug Germann
Doug Germann <76066.515  CompuServe.com> writes:


> Jeremy writes:
> Ok, deny_none should conflict with deny_write, so you should
> see "someone else has this file open" between WinXP and
> the Ubuntu clients.
> 
> However, for UNIX clients they need to provide mutual exclusion
> using byte range locks (the traditional UNIX way) not deny
> modes. I'm not sure if OpenOffice on Ubuntu does this (it
> should).
> 
> Jeremy.
> 
Jeremy--

Many thanks.

You are right--between Ubuntu and WinXP, the files are locked appropriately.

But how do I get these byte-range locks between the Ubuntu clients? I have
searched in Google and on Ubuntuforums without luck.

Thanks, Jeremy!

:- Doug.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Ubuntu 8.04 breaks samba file locking

2008-08-13 Thread Jeremy Allison
On Tue, Aug 12, 2008 at 10:21:56PM -0400, douglas germann wrote:
> Jeremy--
> 
> Thanks! Had not thought of using smbstatus. 
> 
> What is happening is that the Ubuntu clients are establishing a lock of
> deny_none, and the WinXP client is establishing deny_write. 
> 
> I have tried changing oplocks and kernel oplocks to yes, and all else to
> the defaults shown here, but there is no change in this behavior:
> http://www.physiol.ox.ac.uk/Computing/Online_Documentation/using_samba/ch05_05.htmll
> 
> What else should I try, please?

Ok, deny_none should conflict with deny_write, so you should
see "someone else has this file open" between WinXP and
the Ubuntu clients.

However, for UNIX clients they need to provide mutual exclusion
using byte range locks (the traditional UNIX way) not deny
modes. I'm not sure if OpenOffice on Ubuntu does this (it
should).

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] CIFS mount problems

2008-08-13 Thread Marian Neagul
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Some more dmesg messages from the client:
> [34823.658350]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c: neg 
> dentry 0x88001b80c560 name = .hushlogin
> [34823.658356]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c: CIFS 
> VFS: in cifs_lookup as Xid: 919 with uid: 12212
> [34823.658359]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c:  
> parent inode = 0x88001b812cb8 name is: .hushlogin and dentry = 
> 0x88001fbbfa40
> [34823.658362]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c:  
> NULL inode in lookup
> [34823.658365]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c:  
> Full path: /.hushlogin inode = 0x
> [34823.658367]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> Getting info on /.hushlogin
> [34823.658370]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/cifssmb.c: 
> In QPathInfo (Unix) the path /.hushlogin
> [34823.658373]  CIFS VFS: Error 0xfffb on cifs_get_inode_info in lookup 
> of /.hushlogin
> [34823.658379]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c: CIFS 
> VFS: leaving cifs_lookup (xid = 919) rc = -5
> [34823.658643]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c: CIFS 
> VFS: in cifs_lookup as Xid: 920 with uid: 12212
> [34823.658646]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c:  
> parent inode = 0x88001b812cb8 name is: .hushlogin and dentry = 
> 0x88001fbbfa40
> [34823.658649]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c:  
> NULL inode in lookup
> [34823.658651]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c:  
> Full path: /.hushlogin inode = 0x
> [34823.658653]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> Getting info on /.hushlogin
> [34823.658655]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/cifssmb.c: 
> In QPathInfo (Unix) the path /.hushlogin
> [34823.658658]  CIFS VFS: Error 0xfffb on cifs_get_inode_info in lookup 
> of /.hushlogin
> [34823.658662]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c: CIFS 
> VFS: leaving cifs_lookup (xid = 920) rc = -5
> [34823.665622]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c: CIFS 
> VFS: in cifs_lookup as Xid: 921 with uid: 12212
> [34823.665626]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c:  
> parent inode = 0x88001b812cb8 name is: .pam_environment and dentry = 
> 0x88001b80c560
> [34823.665630]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c:  
> NULL inode in lookup
> [34823.665632]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c:  
> Full path: /.pam_environment inode = 0x
> [34823.665635]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> Getting info on /.pam_environment
> [34823.665637]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/cifssmb.c: 
> In QPathInfo (Unix) the path /.pam_environment
> [34823.665640]  CIFS VFS: Error 0xfffb on cifs_get_inode_info in lookup 
> of /.pam_environment
> [34823.665645]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c: CIFS 
> VFS: leaving cifs_lookup (xid = 921) rc = -5
> [34823.666924]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c: CIFS 
> VFS: in cifs_lookup as Xid: 922 with uid: 12212
> [34823.666927]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c:  
> parent inode = 0x88001b812cb8 name is: .pam_environment and dentry = 
> 0x88001b80c560
> [34823.666930]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c:  
> NULL inode in lookup
> [34823.666933]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c:  
> Full path: /.pam_environment inode = 0x
> [34823.666935]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> Getting info on /.pam_environment
> [34823.666937]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/cifssmb.c: 
> In QPathInfo (Unix) the path /.pam_environment
> [34823.666939]  CIFS VFS: Error 0xfffb on cifs_get_inode_info in lookup 
> of /.pam_environment
> [34823.666944]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/dir.c: CIFS 
> VFS: leaving cifs_lookup (xid = 922) rc = -5
> [34872.967930]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> CIFS VFS: in cifs_revalidate as Xid: 923 with uid: 0
> [34872.967937]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/in

[Samba] CIFS mount problems

2008-08-13 Thread Marian Neagul
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello,

We have `some` problems related to the samba daemon, or possibly with
the Linux kernel CIFS filesystem.

We have 2 server (for this example):
- - Storage Server, running Samba 3.0.28a on Ubuntu Linux (Samba version
3.0.28a-1ubuntu4.4) with ldap authentication.
- - Client, running Linux 2.6.24 as a XEN domU. This server mounts on
demand user home directory's from the Storage Server (via pam_mount)

Initially the mounts work normally but at some point all get
"disconnected", see below for an example.

Eg.

1. The Client

Kernel Version:
> [EMAIL PROTECTED]:~# uname -a
> Linux blue.info.uvt.ro 2.6.24-19-xen #1 SMP Sat Jul 12 00:15:59 UTC 2008 
> x86_64 GNU/Linux

Mount information:
> [EMAIL PROTECTED]:~# cat /proc/mounts | grep cifs
> //10.9.0.11/neagul /users/legacy/Pro03/neagul cifs 
> rw,mand,relatime,unc=\\10.9.0.11\neagul,username=neagul,domain=TERRA,uid=12212,posixpaths,rsize=16384,wsize=57344
>  0 0
> //10.9.0.11/gligor /users/legacy/math/gligor cifs 
> rw,mand,relatime,unc=\\10.9.0.11\gligor,username=gligor,domain=TERRA,uid=42023,posixpaths,rsize=16384,wsize=57344
>  0 0

Test case:
> [EMAIL PROTECTED]:~# ls /users/legacy/Pro03/neagul
> ls: cannot access /users/legacy/Pro03/neagul: Input/output error
> [EMAIL PROTECTED]:~# ls /users/legacy/math/gligor
> ls: cannot access /users/legacy/math/gligor: Input/output error

CIFS DebugData:
> [EMAIL PROTECTED]:~# cat /proc/fs/cifs/DebugData
> Display Internal CIFS Data Structures for Debugging
> ---
> CIFS Version 1.52
> Active VFS Requests: 0
> Servers:
> 1) Name: 10.9.0.11  Domain: TERRA Mounts: 1 OS: Unix
> NOS: Samba 3.0.28a  Capability: 0x80f3fd
> SMB session status: 2
> 2) Name: 10.9.0.11  Domain: TERRA Mounts: 1 OS: Unix
>   NOS: Samba 3.0.28a  Capability: 0x80f3fd
>   SMB session status: 2
> Shares:
> 1) \\10.9.0.11\gligor Uses: 1 Type: NTFS DevInfo: 0x0 Attributes: 0x2f
> PathComponentMax: 255 Status: 1 type: 0
> 2) \\10.9.0.11\neagul Uses: 1 Type: NTFS DevInfo: 0x0 Attributes: 0x2f
> PathComponentMax: 255 Status: 1 type: 0

dmesg information:
> [EMAIL PROTECTED]:~# dmesg | tail -11
> [31033.555969]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/cifssmb.c: 
> In QPathInfo (Unix) the path
> [31033.555972]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> error on getting revalidate info -5
> [31033.555974]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> cifs_revalidate - inode unchanged
> [31033.555977]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> CIFS VFS: leaving cifs_revalidate (xid = 910) rc = -5
> [31332.152628]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> CIFS VFS: in cifs_revalidate as Xid: 911 with uid: 0
> [31332.152635]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> Revalidate:  inode 0x88001b812cb8 count 1 dentry: 0x88001b817560 
> d_time 0 jiffies 4302758578
> [31332.152638]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> Getting info on
> [31332.152641]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/cifssmb.c: 
> In QPathInfo (Unix) the path
> [31332.152643]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> error on getting revalidate info -5
> [31332.152645]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> cifs_revalidate - inode unchanged
> [31332.152649]  
> /build/buildd/linux-2.6.24/debian/build/custom-source-xen/fs/cifs/inode.c: 
> CIFS VFS: leaving cifs_revalidate (xid = 911) rc = -5

2. On the server side:

smb.conf
> [global]
> idmap uid = 4-5
> add user script = /usr/sbin/smbldap-useradd -m "%u"
> delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" 
> "%g"
> ldap group suffix = ou=Groups
> hosts allow = 10.5.0., 10.5.1., 10.9.0.
> client NTLMv2 auth = Yes
> add machine script = /usr/sbin/smbldap-useradd -w "%u"
> domain logons = Yes
> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> logon path =
> netbios name = BLUE
> ldap suffix = dc=info,dc=uvt,dc=ro
> auth methods = guest, sam
> utmp = Yes
> bind interfaces only = Yes
> preferred master = Yes
> set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
> idmap gid = 4-5
> ldapsam:editposix = yes
> ldap idmap suffix = ou=Idmap
> passdb backend = ldapsam:ldap://xxx.xxx.xxx.ro/
> workgroup = TERRA
> interfaces = eth0.30, eth0.31, eth0.18
> ldap user suffix = ou=Users
> ldap admin dn = uid=root,dc=info,dc=uvt,dc=ro
> hide unreadable = Yes
> add use

Re: [Samba] [ANNOUNCE] Samba 3.2.1 Available for Download.eml

2008-08-13 Thread Michael Adam
Hi James,

James Kosin wrote:
> Hmmm
> 
> I attempted to fix the INSTALL part; however, I'm having difficulty
> getting the version numbers after the fact for the install process when
> installing the libraries and rebuilding the symbolic links.
> I heard from someone else that this has already been fixed in the 3.3
> branch; but there has been little or NO feedback.  Could someone email
> me a patch file with the changes to the project to fix this in the 3.2
> branch???  I'm willing to try out the patch and validate anything that
> is required.
> 
> I know this seems to be a dead issue; but, the install is BROKEN for
> most people compiling solely from source.  I've fixed my own packaging
> but again this only makes the .spec file that much more difficult to
> maintain.

No, this issue is not dead. Thanks for insisting! :-)
I will push the necessary changes to v3-2-test tomorrow,
for the 3.2.2 release.

Cheers - Michael

-- 
Michael Adam <[EMAIL PROTECTED]>  <[EMAIL PROTECTED]>
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.SerNet.DE, mailto: Info @ SerNet.DE


pgpoe5IpXOXXd.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] config-file for recycle bin

2008-08-13 Thread Chuck Kollars
> config-file = /etc/samba/recycle.conf
> vfs object = recycle
> recycle:subdir_mode = 0770
> recycle:keeptree = Yes
> recycle:repository = Recycle Bin
> recycle:versions = Yes
> recycle:directory_mode = 0770
> Ignoring unknown parameter "config-file"

My working system has all the same lines in it _except_ the "config-file" line. 
I think you missed something like a change of font that was supposed to 
indicate instructions and instead interpreted it as something literal to go in 
the file. 

-Chuck Kollars


  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [ANNOUNCE] Samba 3.2.1 Available for Download

2008-08-13 Thread Michael Adam
George R. Kasica wrote:
> >On Wed, 06 Aug 2008 08:01:40 -0700, you wrote:
> >Michael Adam wrote:
> >
> >> That is right: the link creation in source/bin is fixed,
> >> but the installation of the links is still broken.
> >> 
> >> It _is_ fixed in the v3-3-test branch which will be used for
> >> 3.3.0 (scheduled for December). The changes to the Make file
> >> and configure were just to profound to go into 3.2.X.
> >
> >If "make install" does not work correctly, it should be patched
> >in 3.2.x I believe.  But I haven't followed the discussion thoroughly
> >so feel to disregard this if it is out of context.
> >
> 
> I'm just a lowly user/sysadmin out here with about 50-70 boxes running
> samba not a developer, but I have to agree with Jerry - PLEASE fix the
> install - we don't run off RPMS here and build/install from source
> here and right now what we have is a package that doesn't install. 
> 
> I realize that this is freeware but if it was a commercial product you
> couldn't ship it with a broken install routine I don't think.

Yeah, thanks for your feedback, folks
I will do it. 

Cheers - Michael

-- 
Michael Adam <[EMAIL PROTECTED]>  <[EMAIL PROTECTED]>
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.SerNet.DE, mailto: Info @ SerNet.DE


pgp8lCzUIDAGc.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] syslog only broken on 3.2.0 (debian lenny)?

2008-08-13 Thread Chris Hiestand
I can't really imagine syslog only is broken, otherwise other people  
would have complained about this already. I am using syslog-ng, and  
other daemon facility messages get routed to /var/log/daemon.log - but  
I get absolutely no samba messages - to any log except the default  
samba logs.



lines from smb.conf:
syslog only = yes
syslog = 3


If I comment out these lines and use (log level = 3), I get correct  
logging in the smbd and nmbd logs. Further, we have a different  
machine running debian etch (samba 3.0.24) with a nearly identical  
configuration and syslogging works fine.


Any ideas would be greatly appreciated!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] [ANNOUNCE] Samba 3.2.1 Available for Download

2008-08-13 Thread George R . Kasica
>On Wed, 06 Aug 2008 08:01:40 -0700, you wrote:

>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA1
>
>Michael Adam wrote:
>
>> That is right: the link creation in source/bin is fixed,
>> but the installation of the links is still broken.
>> 
>> It _is_ fixed in the v3-3-test branch which will be used for
>> 3.3.0 (scheduled for December). The changes to the Make file
>> and configure were just to profound to go into 3.2.X.
>
>If "make install" does not work correctly, it should be patched
>in 3.2.x I believe.  But I haven't followed the discussion thoroughly
>so feel to disregard this if it is out of context.
>

I'm just a lowly user/sysadmin out here with about 50-70 boxes running
samba not a developer, but I have to agree with Jerry - PLEASE fix the
install - we don't run off RPMS here and build/install from source
here and right now what we have is a package that doesn't install. 

I realize that this is freeware but if it was a commercial product you
couldn't ship it with a broken install routine I don't think.

George

-- 
===[George R. Kasica]===+1 262 677 0766
President   +1 206 374 6482 FAX 
Netwrx Consulting Inc.  Jackson, WI USA 
http://www.netwrx1.com
[EMAIL PROTECTED]
ICQ #12862186
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Groups not showing in Win2K Control Panel "Users and Passwords"

2008-08-13 Thread Chris


On Aug 13, 2008, at 12:50 PM, William Strucke wrote:

I don't know if it helps or not, but OS X automatically hides groups  
with gid numbers less than 500 -- you might try changing the  
gidNumber to something above that (mine is like 1024 or something)  
and see if it then shows up.




While that test group is 99, the groups I have added using Workgroup  
manager are all above 2000.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Groups not showing in Win2K Control Panel "Users and Passwords"

2008-08-13 Thread William Strucke
I don't know if it helps or not, but OS X automatically hides groups  
with gid numbers less than 500 -- you might try changing the gidNumber  
to something above that (mine is like 1024 or something) and see if it  
then shows up.




On Aug 12, 2008, at 3:58 PM, Chris wrote:


That gets me looking in the right direction.  Thanks.

I added the domadmins group as outlined and set SMBRID, but "net sam  
list groups" still shows no groups.  I wonder what the opern  
directory criteria for a group to be listed there is.


Can anyone do a:

dscl -u [LDAP Node Admin] -P [LDAP Node Admin Password]  / 
LDAPv3/127.0.0.1 -read /Groups/groupname


for a leopard server group that DOES show up on the Windows client  
and compare it with this:


# dscl -u odadmin -P x  /LDAPv3/127.0.0.1 -read /Groups/domadmins
dsAttrTypeNative:apple-generateduid: ---- 


dsAttrTypeNative:cn: domadmins
dsAttrTypeNative:gidNumber: 99
dsAttrTypeNative:objectClass: posixGroup apple-group  
extensibleObject top

dsAttrTypeNative:rid: 512
AppleMetaNodeLocation: /LDAPv3/127.0.0.1
GeneratedUID: ----
PasswordPlus: 
PrimaryGroupID: 99
RecordName: domadmins
RecordType: dsRecTypeStandard:Groups
SMBRID: 512

Does "net sam list groups" show said group?

On Aug 12, 2008, at 12:09 PM, William Strucke wrote:


Maybe not what you are looking for, but this is what I used:

http://www.afp548.com/article.php?story=200608252114039



ws


On Aug 5, 2008, at 8:54 PM, Chris wrote:


Leopard Server 10.5.4, Samba Version 3.0.25b-apple

I am attempting to do something similar to that described in the  
Samba HOWTO and Reference Guide on page 157 Section 11.4.3.  I  
have configured an "Admins" group on the server and would like to  
tell the local workstation to treat users in that group as  
Administrators.


This used to work in 10.4.

When I check the user after logging into the Windows 2000  
workstation with WHOAMI.EXE /GROUP the DOMAIN\Admins group is  
listed, but when I log in as the workstation's local administrator  
to map the group to Administrators, I select the domain, and I get  
a list of users which appears to be complete, but there are no  
groups.  When I manually type in DOMAIN\Admins in the lower  
section, Windows says the group cannot be found.


"net groupmap list" shows that the mapping is there, and the SID  
looks correct.


"net sam list groups" does not list any groups.

"net sam list users" shows the list of users I see in the Users  
and Passwords block.


Any suggestions appreciated.
___
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list  ([EMAIL PROTECTED])
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/strucke.1%40osu.edu

This email sent to [EMAIL PROTECTED]







--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] RE: ldap secondary/auxillary groups not available

2008-08-13 Thread Montenegro, Michael H (Michael)
I believe there is a bug report on this issue.

https://bugzilla.samba.org/show_bug.cgi?id=395

 



From: Montenegro, Michael H (Michael) 
Sent: Tuesday, August 12, 2008 11:30 AM
To: 'samba@lists.samba.org'
Subject: ldap secondary/auxillary groups not available 

 

 

I have a samba 3.0.20 installation that authenticates users using ntlm
to a MS DC. The samba installation was correctly able authenticate users
and map them to their unix uids and gids without an issue.  The solaris
box that samba was running on was also using NIS for its naming
services.

 

I have recently migrated this machine that was using NIS for its naming
services to LDAP which is running on a separate server and running SUN
DSEE 6.2 ldap software. I did not modify any lines in the smb.conf and
all is working fine except that only the uid and primary gid are
available to the samba server.  Users can no longer rely on their
secondary unix assigned groups to access any shares that are restricted
to secondary groups via their unix group permissions. I expected the
samba software to be able to identify all of a user's groups since the
groups command accurately returns the correct listing of groups for a
user. I would like to maintain my authentication using ntlm to my MS DC
but have samba correctly identify all the groups a user belongs to. Is
there a sample smb.conf available for this?

 

I saw the post
http://lists.samba.org/archive/samba/2004-January/078106.html 

It advised to make sure the nsswtich.conf uses ldap for groups and I
made sure mine is correct:

/etc/nsswitch.conf:

...

group:  files ldap

...

 

Thanks,

Michael

 

 

 

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] [ANNOUNCE] Samba 3.2.1 Available for Download.eml

2008-08-13 Thread James Kosin
Hmmm

I attempted to fix the INSTALL part; however, I'm having difficulty
getting the version numbers after the fact for the install process when
installing the libraries and rebuilding the symbolic links.
I heard from someone else that this has already been fixed in the 3.3
branch; but there has been little or NO feedback.  Could someone email
me a patch file with the changes to the project to fix this in the 3.2
branch???  I'm willing to try out the patch and validate anything that
is required.

I know this seems to be a dead issue; but, the install is BROKEN for
most people compiling solely from source.  I've fixed my own packaging
but again this only makes the .spec file that much more difficult to
maintain.

James Kosin

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cannot Redirect some windows xp folders to samba share?

2008-08-13 Thread Adam Williams

see page 211 of samba 3 by example.pdf

Alberto Moreno wrote:

  Hi people.

   I have some issues, I setup a samba server(3.0.28) with gentoo,
samba + ldap. Is working, I can create users, change, add, mod,
etc,etc.
   I setup each home drive, using smbldap-tools. Everything is working good.

   But I have 1 problem, I want to setup my windows xp pro sp2 users
to have roaming + folder redirection to my samba server. Some folders
are very easy to move to be in a redirect or roaming environment like:

  My Documents
  My Pictures
  Favorites
  My Music
  Start Up

   To make this possible, I use tweakUI from windows site, is a easy tool.

   The main problem I have is that, some folders: Application Data and
Local Settings, wont let me redirect them to each user profile share.

   TweakUI doesn't show this folders.

   Some sites just show examples but using a AD which is not my case,
some sites say that I will see a link inside gpedit.msc where I can
setup folder redirection, but In my case, I don't see anything related
to "Folder Redirection", the other option they say is to change the
register for each user.

  I already try to change the register ("Shell Folders") but each time
the user restart there computer, the settings for Application Data +
Local Settings get back to the default state(C:\Docum and
See\UserName\..)

  I was thinking is windows xp pro, have some option that prevent a
user to change this settings like a protection and prevent me to
change the settings for this special folders?

  Does someone succesfully implement Folder Redirection for this
folders inside windows xp pro sp2 or sp3, how do u did it?

   I will appreciated a lot all the info u could give, thanks all for
your time!!!

  P.S. I came from a lot of windows forums, but I still cannot fix this.


  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.28a integration with 2003 AD and password lockout policy?

2008-08-13 Thread Guenther Deschner

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Braebaum, Neil wrote:
| I'm encountering some oddness using Samba 3.0.28a, MIT kerberos (1.6.3)
| for user authentication on Linux, to 2003 Active Directory.
|
| The password policy dictated by AD should lock accounts after 6
| incorrect login attempts within a 30 minute period. However, it seems to
| halve that when logging in to these Linux boxes via ssh - so after 3
| incorrect login attempts, the AD account gets locked.
|
| Looking in log.wb- seems to show double attempts /
| authentication failures when submitting the login with an incorrect
| password (to test this).
|
| I have noted password level in smb.conf (it's not set in my smb.conf),
| but as I'm using encrypt passwords = yes, I thought it was irrelevant.
|
| It would appear that two submissions are being made, though, is that a
| Samba version thing, something I may have not got spot on with my pam
| configuration, or an issue with the Samba version?

This area of code hasn't been reworked a lot since then, so, can you
please file a bug and upload your correct log.wb-* files ?

Thanks,

Guenther

- --
Günther DeschnerGPG-ID: 8EE11688
Red Hat [EMAIL PROTECTED]
Samba Team  [EMAIL PROTECTED]
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkijDEgACgkQSOk3aI7hFoi4CwCfd73W9y0elpD0+R96n/b9HbTH
lt8AnRtwoFSES/m7uvIrZfgywlCWwg8e
=oGtJ
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cannot Redirect some windows xp folders to samba share?

2008-08-13 Thread Alberto Moreno
On Wed, Aug 13, 2008 at 8:22 AM, Charles Marcus
<[EMAIL PROTECTED]> wrote:
> On 8/13/2008, Alberto Moreno ([EMAIL PROTECTED]) wrote:
>>
>> The main problem I have is that, some folders: Application Data and
>> Local Settings, wont let me redirect them to each user profile share.
>
> Application Data should work fine, but why on earth would you want to do
> Local Settings?
>
> --
>
> Best regards,
>
> Charles
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>


 Thanks all for your quick answer.

  I will check today the User Shell Folder and let u know.

  Will Charles, this is just my "Test" enviroment.

  Thanks and I let u know ASAP.

-- 
LIving the dream...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] What does this error mean?

2008-08-13 Thread Ryan Novosielski

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Looks like missingok is no longer a valid PAM parameter. This is a
Ubuntu-supplied package? You might want to file a bug with them.

Jose Maria wrote:
|
| I installed Ubuntu with samba and I get this error:
|
|
| login: pam_smbpass(login:auth): unrecognized option [missingok]: 1 Time(s)
| su: pam_smbpass(su:auth): unrecognized option [missingok]: 2 Time(s)

- --
~  _  _ _  _ ___  _  _  _
~ |Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Systems Programmer II
~ |$&| |__| |  | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922)
~ \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIovzKmb+gadEcsb4RAlZFAJ44U8kCIySjFRLFx/fOIyzlArjF7ACfUjZ2
30GDrBLi9k9Td/0qTQlx9oo=
=1rbc
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cannot Redirect some windows xp folders to samba share?

2008-08-13 Thread Charles Marcus

On 8/13/2008, Alberto Moreno ([EMAIL PROTECTED]) wrote:

The main problem I have is that, some folders: Application Data and
Local Settings, wont let me redirect them to each user profile share.


Application Data should work fine, but why on earth would you want to do 
Local Settings?


--

Best regards,

Charles
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Cannot Redirect some windows xp folders to samba share?

2008-08-13 Thread Braebaum, Neil
> -Original Message-
> From: 
> [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED]
> .org] On Behalf Of Alberto Moreno
> Sent: 13 August 2008 15:51
> To: samba@lists.samba.org
> Subject: [Samba] Cannot Redirect some windows xp folders to 
> samba share?
> 
>The main problem I have is that, some folders: Application 
> Data and Local Settings, wont let me redirect them to each 
> user profile share.
> 
>TweakUI doesn't show this folders.
> 
>Some sites just show examples but using a AD which is not 
> my case, some sites say that I will see a link inside 
> gpedit.msc where I can setup folder redirection, but In my 
> case, I don't see anything related to "Folder Redirection", 
> the other option they say is to change the register for each user.
> 
>   I already try to change the register ("Shell Folders") but 
> each time the user restart there computer, the settings for 
> Application Data + Local Settings get back to the default 
> state(C:\Docum and
> See\UserName\..)

If you're going to do this via the registry, don't use "Shell Folders",
use "User Shell Folders". "Shell Folders" get's dynamically populated
using (typically) REG_EXPAND_SZ values from "User Shell Folders".

Neil



*

This email and its attachments are confidential  to the intended recipient. If 
this has come to you in error, please notify the sender immediately and delete 
this email from your system. You must take no action based on this, nor must 
you copy or disclose it or any part of its contents to any person or 
organisation.  Please note that email communications may be monitored.  The 
registered office of Shop Direct Limited is 1st Floor, Skyways House, Speke 
Road, Speke, Liverpool, L70 1AB, registered number 04730752.

Subsidiary companies within Shop Direct Limited include:

Shop Direct Financial Services Limited (SDFS), Shop Direct Group Financial 
Services Limited (SDGFS) and Littlewoods Finance Company Limited (LFCo). The 
registered office of SDFS, SDGFS and LFCo is Aintree Innovation Centre, Park 
Lane, Netherton, Bootle, L30 1SL, registered numbers 04730706 (SDFS), 5200103 
(SDGFS) and 04660974 (LFCo). SDFS and LFCo are authorised and regulated by the 
Financial Services Authority in respect of insurance mediation activities only.

Shop Direct Contact Centres Limited (SDCC) and Shop Direct Home Shopping 
Limited (SDHS).  The registered office of SDCC and SDHS is 1st Floor, Skyways 
House, Speke Road, Speke, Liverpool, L70 1AB, registered numbers 05330323 
(SDCC), 04663281 (SDHS).

All companies registered in England.



*




This message has been scanned for viruses by BlackSpider MailControl - 
www.blackspider.com
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Cannot Redirect some windows xp folders to samba share?

2008-08-13 Thread Alberto Moreno
  Hi people.

   I have some issues, I setup a samba server(3.0.28) with gentoo,
samba + ldap. Is working, I can create users, change, add, mod,
etc,etc.
   I setup each home drive, using smbldap-tools. Everything is working good.

   But I have 1 problem, I want to setup my windows xp pro sp2 users
to have roaming + folder redirection to my samba server. Some folders
are very easy to move to be in a redirect or roaming environment like:

  My Documents
  My Pictures
  Favorites
  My Music
  Start Up

   To make this possible, I use tweakUI from windows site, is a easy tool.

   The main problem I have is that, some folders: Application Data and
Local Settings, wont let me redirect them to each user profile share.

   TweakUI doesn't show this folders.

   Some sites just show examples but using a AD which is not my case,
some sites say that I will see a link inside gpedit.msc where I can
setup folder redirection, but In my case, I don't see anything related
to "Folder Redirection", the other option they say is to change the
register for each user.

  I already try to change the register ("Shell Folders") but each time
the user restart there computer, the settings for Application Data +
Local Settings get back to the default state(C:\Docum and
See\UserName\..)

  I was thinking is windows xp pro, have some option that prevent a
user to change this settings like a protection and prevent me to
change the settings for this special folders?

  Does someone succesfully implement Folder Redirection for this
folders inside windows xp pro sp2 or sp3, how do u did it?

   I will appreciated a lot all the info u could give, thanks all for
your time!!!

  P.S. I came from a lot of windows forums, but I still cannot fix this.


-- 
LIving the dream...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.28a integration with 2003 AD and password lockout policy?

2008-08-13 Thread Braebaum, Neil
I'm encountering some oddness using Samba 3.0.28a, MIT kerberos (1.6.3)
for user authentication on Linux, to 2003 Active Directory.

The password policy dictated by AD should lock accounts after 6
incorrect login attempts within a 30 minute period. However, it seems to
halve that when logging in to these Linux boxes via ssh - so after 3
incorrect login attempts, the AD account gets locked.

Looking in log.wb- seems to show double attempts /
authentication failures when submitting the login with an incorrect
password (to test this).

I have noted password level in smb.conf (it's not set in my smb.conf),
but as I'm using encrypt passwords = yes, I thought it was irrelevant.

It would appear that two submissions are being made, though, is that a
Samba version thing, something I may have not got spot on with my pam
configuration, or an issue with the Samba version?

testparm output follows:-

Load smb config files from /usr/lib/smb.conf
Loaded services file OK.
'winbind separator = +' might cause problems with group membership.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

[global]
workgroup = XX
realm = XX
server string = Linux AD authentication
security = ADS
auth methods = winbind, sam
allow trusted domains = No
obey pam restrictions = Yes
use kerberos keytab = Yes
server signing = auto
socket options = IPTOS_LOWDELAY TCP_NODELAY
load printers = No
printcap cache time = 0
printcap name = /dev/null
disable spoolss = Yes
preferred master = No
local master = No
domain master = No
idmap domains = XX
template shell = /bin/ksh
winbind separator = +
winbind use default domain = Yes
winbind refresh tickets = Yes
idmap config XX:backend = rid
idmap config XX:range = 1-200

Neil



*

This email and its attachments are confidential  to the intended recipient. If 
this has come to you in error, please notify the sender immediately and delete 
this email from your system. You must take no action based on this, nor must 
you copy or disclose it or any part of its contents to any person or 
organisation.  Please note that email communications may be monitored.  The 
registered office of Shop Direct Limited is 1st Floor, Skyways House, Speke 
Road, Speke, Liverpool, L70 1AB, registered number 04730752.

Subsidiary companies within Shop Direct Limited include:

Shop Direct Financial Services Limited (SDFS), Shop Direct Group Financial 
Services Limited (SDGFS) and Littlewoods Finance Company Limited (LFCo). The 
registered office of SDFS, SDGFS and LFCo is Aintree Innovation Centre, Park 
Lane, Netherton, Bootle, L30 1SL, registered numbers 04730706 (SDFS), 5200103 
(SDGFS) and 04660974 (LFCo). SDFS and LFCo are authorised and regulated by the 
Financial Services Authority in respect of insurance mediation activities only.

Shop Direct Contact Centres Limited (SDCC) and Shop Direct Home Shopping 
Limited (SDHS).  The registered office of SDCC and SDHS is 1st Floor, Skyways 
House, Speke Road, Speke, Liverpool, L70 1AB, registered numbers 05330323 
(SDCC), 04663281 (SDHS).

All companies registered in England.



*




This message has been scanned for viruses by BlackSpider MailControl - 
www.blackspider.com
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] config-file for recycle bin

2008-08-13 Thread David Kuntadi
On Wed, Aug 13, 2008 at 7:09 PM, Günter Kukkukk <[EMAIL PROTECTED]> wrote:
> to check for the right syntax
>  - use 'man smb.conf'
>  - 'testparm -vs' will list _all_ options set (also the default ones)
>
> So 'testparm -vs | grep config' could lead you in the right
> direction:
>  ...
>  config file =
>  ...
>

Thanks, I will check that and see what kidn of "config-file" or "vfs
option" available there.

But actually I have removed config-file as it is not the right syntax
as pointed out by Ryan. By the way I am using Samba 3.0.28a on ubuntu
hardy.

Regards,
David
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] realm does not exist error

2008-08-13 Thread Yoho, Cindy
Hi All, 

I am trying to get Freeradius 1.1.7 on RHEL5 to authenticate using
Active Directory.  I have installed samba 3.0.28 and ran net join -U
administrator, entered my password, and got this:

Using short domain name -- UMPH
Joined 'ITRADIUS' to realm 'UMPUBLISHING.ORG'

When I do wbinfo -u I get users listed with the short domain name:

UMPH\jdoe
UMPH\mjohonson
UMPH\ldaniel
UMPH\
.
.
etc

If I put the following line in my /etc/raddb/users file,

[EMAIL PROTECTED] Auth-Type :- ntlm_auth

AD authentication works for jdoe (or whatever user I put in users file)
using radtest, NTradping, modem dialup, and just plain ntlm_auth on the
command line.

However, if I comment that line out, everything (radtest, dialup,
NTradping, etc) fails with the following error in the debug output:

rlm_realm: Looking up realm "umpublishing.org" for User-Name =
"[EMAIL PROTECTED]"

rlm_realm: No such realm "umpublishing.org"

I enter the username as 

[EMAIL PROTECTED] 

when attempting to login.

I tried logging in using UMPH\jdoe, but that does not work either.  I'd
like to get it to work using the long realm, since our AD admin says
that is our realm and our domain.

Thanks in advance~
Cindy

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] config-file for recycle bin

2008-08-13 Thread Günter Kukkukk
Am Mittwoch, 13. August 2008 schrieb David Kuntadi:
> I make a recycle bin as follow:
>   
> config-file = /etc/samba/recycle.conf
> vfs object = recycle
> recycle:subdir_mode = 0770
> recycle:keeptree = Yes
> recycle:repository = Recycle Bin
> recycle:versions = Yes
> recycle:directory_mode = 0770
> 
> But testparm shows:
> 
> Unknown parameter encounter: "config-file"
> Ignoring unknown parameter "config-file"
> 
> What could be the problem and the solution?
> 
> Regards,
> David

to check for the right syntax
  - use 'man smb.conf'
  - 'testparm -vs' will list _all_ options set (also the default ones)

So 'testparm -vs | grep config' could lead you in the right
direction:
  ...
  config file =
  ...

Cheers, Günter
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [ANNOUNCE] Samba 3.2.1 Available for Download

2008-08-13 Thread James Kosin

Michael,

I believe one of the reasons why noone seems to want to back-port the 
changes in the 3.3 branch to the 3.2 branch is because the changes are so 
dramatic.  Granted, they do seem to be needed and they are benificial to the 
build.
At the same time; I don't believe someone should have to always wait for the 
packages to get built or have to stray to terrible lengths to get the shared 
libraries for samba to run properly in the system.
I've started another patch that is a bit less dramatic in changes.  I 
believe we can get away with a few changes to the 3.2 branch without making 
such sweeping changes to the make and install process.
In the end, I hope both source builders and packagers alike will like the 
compromise without going straight into the experimental development branch 
right away.


Thanks for the excellent information.
James Kosin 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] What does this error mean?

2008-08-13 Thread Jose Maria


I installed Ubuntu with samba and I get this error:
 
 
login: pam_smbpass(login:auth): unrecognized option [missingok]: 1 Time(s)
su: pam_smbpass(su:auth): unrecognized option [missingok]: 2 Time(s)
 
 
 
How can I solved It?
 
Bye. Thanks.
 
 
_
¿Quieres los emoticonos y guiños más divertidos? Descárgate Internet Explorer 
7, y consigue contenidos exclusivos cada semana. ¡Gratis!
http://www.vivelive.com/IEAK7--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Printer driver interface different

2008-08-13 Thread Martin Zielinski

Matthew Forrest schrieb:


On 12-Aug-08, at 9:45 AM, Martin Zielinski wrote:

Matthew,

The reason for the gui that is different from the local installation 
is a missing registry value.

It's: "PrinterDriverData\DocUiHideFlags" REG_DWORD 01

I didn't succeed in copying the settings via printui.dll, but I wrote 
a little program to set the missing value. I think, this list cuts off 
the attachments, so I put it inline. If you cannot compile it, I can 
send you a binary as well.


I can't test, if the printer will work as expected, cause I have no 
ricoh printer - but the GUI looks the same as the local installation.


Greets,
Martin



Adding that value to the registry on the samba server makes things work 
much better.  Thanks!
I didn't get a chance to try the code as my access to a dev box is 
limited right now.  I just used the registry editor to add the value on 
the remote server.


It does not give any options to change the Job Type on the Job/Log tab.

What did you look at to find that particular entry?

Thanks,
Matt


Upps, I didn't even know that one can use the registry editor remote ...

I looked at all registry entries. I know, that some HP Printers need an 
entry "PrinterData\CombinedMediaStatus" to work properly. Similar things 
with other drivers.


So I copy the whole registry from a local printer to the remote printer 
- and if that helps, the rest is just try and error.


On my system, I can change the Job Type. So I really do not know, why it 
doesn't work for you. Perhaps you just need to delete the printer 
connection and create a new one.


Greets,

Martin

--
Martin Zielinski[EMAIL PROTECTED]   
Softwareentwicklung T +49 (0)521 94226 76   

SEH Computertechnik GmbHwww.seh.de

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba