RE: [Samba] LDAP + Samba + Windows2003

[Nick Sharp]

John,

If you don't want samba to be the pdc, you can use winbindd to join it to
the windows domain and I am pretty sure authentication requests are via the
domain PDC (whichever way it's configured)

We have a secondary samba machine, which does just this, but against a
samba/ldap pdc. The secondary (with winbindd) has no configuration for ldap
in smb.conf but users authenticate against their domain credentials.

man windbindd

-- 
Regards
Nick Sharp

e [EMAIL PROTECTED]
p 08 8373 5522


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
FC Mario Patty
Sent: Wednesday, December 10, 2008 12:39 PM
To: samba
Subject: Re: [Samba] LDAP + Samba + Windows2003

Hi John,

I'm not an expert in this field (you can see I've thrown a lot of questions
into this mailing list), but I think if you just want to use ldap as
linux/samba password backend, then you don't have to build a PDC. In my case
it's just happen that my domain PDC installed into the same server that I
use as my openLDAP server either, but to let my other samba server to
authenticate against the openLDAP server, it's the pam_ldap and
nsswitch.conf + ldap.conf that matter (if you use RedHat, the authconfig
command and 'smbpasswd -w LDAP-ADMIN-PASSWORD-HERE will handle this for
you). Another prove is my samba server workgroups differs from that of my
PDC.

Other point, if you want samba to authenticate against the ldap server, you
do need sambaSamAccount. Posix only affects linux or unix authentication.
And with your Windows 2003, linux samba PDC doesn't have to join your
Windows server domain if you just want them authenticating against the ldap
server. It's your windows pcs/servers that have to join samba PDC before you
can authenticate against it. But if what you meant was windows to
authenticate straight to ldap, I've never heard it before (in my case, it's
the PDC that confirms the authentication to the ldap as its password backend
- windows machines don't do that them-selves).

Well, that's my little thought. But still I don't want to misslead you.
Samba or Linux Gurus, please correct this. :)

Cheers,




On Tue, Dec 9, 2008 at 9:29 PM, Allgood, John <[EMAIL PROTECTED]> wrote:

> Hello All
>
>
>
> I am new to the list and have some questions. I want to setup ldap to
> authenticate for Samba and Windows 2003 server. I have done a lot of
> research and everything seems to indicate that I will need to setup
> Samba to be a PDC and have it join the Windows 2003 server domain and
> build samba with a ldap backend. Is there another way to do this so as I
> will not have to setup samba to be a PDC. I have already setup my ldap
> server using posix types accounts. Is this different that the Samba
> accounts.
>
>
>
> Thanks
>
>
>
> John Allgood
> Senior Systems Administrator
> Turbo, division of OHL
> 2251 Jesse Jewell Pky. NE
> Gainesville, GA 30507
> tel: (678) 989-3051  fax: (770) 531-7878
> [EMAIL PROTECTED]
>
> www.ohl.com
>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] LDAP + Samba + Windows2003

[FC Mario Patty]

Hi John,

I'm not an expert in this field (you can see I've thrown a lot of questions
into this mailing list), but I think if you just want to use ldap as
linux/samba password backend, then you don't have to build a PDC. In my case
it's just happen that my domain PDC installed into the same server that I
use as my openLDAP server either, but to let my other samba server to
authenticate against the openLDAP server, it's the pam_ldap and
nsswitch.conf + ldap.conf that matter (if you use RedHat, the authconfig
command and 'smbpasswd -w LDAP-ADMIN-PASSWORD-HERE will handle this for
you). Another prove is my samba server workgroups differs from that of my
PDC.

Other point, if you want samba to authenticate against the ldap server, you
do need sambaSamAccount. Posix only affects linux or unix authentication.
And with your Windows 2003, linux samba PDC doesn't have to join your
Windows server domain if you just want them authenticating against the ldap
server. It's your windows pcs/servers that have to join samba PDC before you
can authenticate against it. But if what you meant was windows to
authenticate straight to ldap, I've never heard it before (in my case, it's
the PDC that confirms the authentication to the ldap as its password backend
- windows machines don't do that them-selves).

Well, that's my little thought. But still I don't want to misslead you.
Samba or Linux Gurus, please correct this. :)

Cheers,




On Tue, Dec 9, 2008 at 9:29 PM, Allgood, John <[EMAIL PROTECTED]> wrote:

> Hello All
>
>
>
> I am new to the list and have some questions. I want to setup ldap to
> authenticate for Samba and Windows 2003 server. I have done a lot of
> research and everything seems to indicate that I will need to setup
> Samba to be a PDC and have it join the Windows 2003 server domain and
> build samba with a ldap backend. Is there another way to do this so as I
> will not have to setup samba to be a PDC. I have already setup my ldap
> server using posix types accounts. Is this different that the Samba
> accounts.
>
>
>
> Thanks
>
>
>
> John Allgood
> Senior Systems Administrator
> Turbo, division of OHL
> 2251 Jesse Jewell Pky. NE
> Gainesville, GA 30507
> tel: (678) 989-3051  fax: (770) 531-7878
> [EMAIL PROTECTED]
>
> www.ohl.com
>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Connectivity issues

[Jeremy Allison]

On Tue, Dec 09, 2008 at 11:20:42AM -0600, [EMAIL PROTECTED] wrote:
> Samba 3.2.5
> 
> I'm running into an issue when using Vista to access Samba shares.  I'm 
> able to connect intermitently and it stays connected for a brief period of 
> time (under 60 seconds) before I get the following error on the Vista box:
> 
> "Network path was not found"
> 
> In syslog it shows:
> 
> [begin]
> [2008/12/09 11:09:03,  2] auth/auth.c:check_ntlm_password(308)
>   check_ntlm_password:  authentication for user [matt] -> [matt] -> [matt] 
> succeeded
> 
> [2008/12/09 11:09:03,  1] smbd/service.c:make_connection_snum(1190)
>   mpc (10.0.0.58) connect to service data initially as user matt 
> (uid=1005, gid=1006) (pid 19637)
> 
> [2008/12/09 11:11:02,  0] lib/util_sock.c:read_socket_with_timeout(939)
> 
> [2008/12/09 11:11:02,  0] lib/util_sock.c:get_peer_addr_internal(1607)
>   getpeername failed. Error was Transport endpoint is not connected
>   read_socket_with_timeout: client 0.0.0.0 read error = Connection reset 
> by peer.

This means the client disconnected. We (smbd) don't know
why. Do you have a reliable network ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Any possibility to apply policies on WinXP machines using samba 3.2.3 ?

[Nick Sharp]

http://www.pcc-services.com/articles/implement_sys_policies.html is pretty
good (linked from the samba policies page) I'm testing it right now!

-- 
Regards
Nick Sharp

e [EMAIL PROTECTED]
p 08 8373 5522


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Michael Heydon
Sent: Wednesday, December 10, 2008 11:24 AM
To: hamacker
Cc: samba@lists.samba.org
Subject: Re: [Samba] Any possibility to apply policies on WinXP machines
using samba 3.2.3 ?

hamacker wrote:
> Any possibility to apply policies on WinXP machines using samba 3.2.3 ?
>
> I was create a local policies using gpedit.msc and I  would like to
> apply to entire network.
>   
All versions of samba prior to 4 (which is still in testing) implement 
an NT4 style domain. NT4 does not have support for active directory 
style group policies, but it does support older poledit policies.

Grab a copy of Poledit from MS, get some templates (either from admin 
packs from MS or from one of several websites around the place) and make 
an NTConfig.POL file, save it to your netlogon share and you are done.

*Michael Heydon - IT Administrator *
[EMAIL PROTECTED] 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Any possibility to apply policies on WinXP machines using samba 3.2.3 ?

[Michael Heydon]

hamacker wrote:

Any possibility to apply policies on WinXP machines using samba 3.2.3 ?

I was create a local policies using gpedit.msc and I  would like to
apply to entire network.
  
All versions of samba prior to 4 (which is still in testing) implement 
an NT4 style domain. NT4 does not have support for active directory 
style group policies, but it does support older poledit policies.


Grab a copy of Poledit from MS, get some templates (either from admin 
packs from MS or from one of several websites around the place) and make 
an NTConfig.POL file, save it to your netlogon share and you are done.


*Michael Heydon - IT Administrator *
[EMAIL PROTECTED] 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] AD controller problems.

[Derek Harkness]

I did check that by doing a time sync against both of the other DCs.   
Ntpdate adjusted the clock by a couple of milliseconds, not enough to  
through off kerberos.


Thanks,
Derek

On Dec 9, 2008, at 12:29 PM, Giovanni Cambria wrote:


What about the time syncronization of the RTC clock of every DCs?

G.
- Original Message - From: "Derek Harkness" <[EMAIL PROTECTED] 
>

To: "Samba List" 
Sent: Monday, December 08, 2008 4:40 PM
Subject: [Samba] AD controller problems.


In my AD setup I have 3 domain controllers (dc1, dc2, dc3) when  
samba/ winbind are talking to dc1 everything is great when talking  
to dc2 or  dc3 I get this error "kinit succeeded but  
ads_sasl_spnego_krb5_bind  failed: Strong(er) authentication  
required" and nothing works.  I  don't think its a samba config  
problem but my AD admins aren't real  helpful in getting samba  
working.

Has anybody else seen this or maybe got a solution/work around?
Thanks,
Derek
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows can see Ubuntu netbios names but not access or even ping

[Volker Lendecke]

On Tue, Dec 09, 2008 at 03:21:37PM +0100, Otto Krüse wrote:
> Here's the funny thing: when my I browse the local network on my
> windows machine I can see the server (called ubuntuserver1). So
> somehow my windows pc can resolve the name. But when I try to access
> it (by double clicking) windows complains it cannot find the name.
> Also ping ubuntuserver1 does not work.

The fact that "ubuntuserver1" shows up in the list of
machines in your workgroup does not mean that you can "see"
it yourself. It means that your local master browser somehow
got wind of it.

Volker


pgp1z3QvVFIUQ.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: samba on quad core vs dual core

[Volker Lendecke]

On Tue, Dec 09, 2008 at 03:17:53PM -0500, Andy Liebman wrote:
> 
> >Samba will use all the cores you can give it - so long as
> >you have at least more clients than cores.
> >
> >Jeremy.
> >  
> While I have found that to be true in my environment, I have also found 
> that MOST smbd's end up on Core 0 MOST of the time.  This is true even 
> if I am hammering a 10 Gigabit network adapter (i.e., sending out 700 
> MB/sec via Samba distributed to 30 users), with total CPU utilization 
> only about 70 percent of one core.

Have you measured how much you can pump out over that
adapter using raw tcp using, say, iperf or so? My guess
would be that 700MBytes/second are not way off what it can
do.

> Maybe this is optimal behavior.  I tried to start a thread on this  list 
> a while back about understanding what WOULD be optimal, and nobody had 
> much to say.

If you really only use 70% of one core, then my feeling
would be that this is indeed what you should expect for
cache locality. But to say for sure a *lot* deeper
investigations are necessary.

Volker


pgpN5HSmsd737.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: samba on quad core vs dual core

[Jeremy Allison]

On Tue, Dec 09, 2008 at 03:17:53PM -0500, Andy Liebman wrote:
>
>> Samba will use all the cores you can give it - so long as
>> you have at least more clients than cores.
>>
>> Jeremy.
>>   
> While I have found that to be true in my environment, I have also found  
> that MOST smbd's end up on Core 0 MOST of the time.  This is true even  
> if I am hammering a 10 Gigabit network adapter (i.e., sending out 700  
> MB/sec via Samba distributed to 30 users), with total CPU utilization  
> only about 70 percent of one core.
>
> Maybe this is optimal behavior.  I tried to start a thread on this  list  
> a while back about understanding what WOULD be optimal, and nobody had  
> much to say.
>
> I think it would be an interesting discussion. NFS seems to make use of  
> multicores in a more even way. That doesn't mean the NFS behavior is  
> better.

smbd is a userspace process, so we don't do anything
clever w.r.t. distributing ourselves across cores, only
let the OS do it's stuff.

I'm guessing in your case you're seeing the effects
of the OS accumulating the network interrupt traffic
on the one processor that's handling that card.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: samba on quad core vs dual core

[Andy Liebman]

Samba will use all the cores you can give it - so long as
you have at least more clients than cores.

Jeremy.
  
While I have found that to be true in my environment, I have also found 
that MOST smbd's end up on Core 0 MOST of the time.  This is true even 
if I am hammering a 10 Gigabit network adapter (i.e., sending out 700 
MB/sec via Samba distributed to 30 users), with total CPU utilization 
only about 70 percent of one core.


Maybe this is optimal behavior.  I tried to start a thread on this  list 
a while back about understanding what WOULD be optimal, and nobody had 
much to say.


I think it would be an interesting discussion. NFS seems to make use of 
multicores in a more even way. That doesn't mean the NFS behavior is 
better.


Andy
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Any possibility to apply policies on WinXP machines u sing samba 3.2.3 ?

[Hoover, Tony]

We make use of NT4 policies on our Samba domain.  NTconfig.POL needs to be
in \\domaincontroller\netlogon.  I don't believe that you can use Active
Directory GPOs (group policy objects) with a Samba domain.


 
Tony Hoover, Network Administrator
KSU - Salina, College of Technology and Aviation
(785) 826-2660

"Don't Blend in..."


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
hamacker
Sent: Tuesday, December 09, 2008 11:46 AM
To: samba@lists.samba.org
Subject: [Samba] Any possibility to apply policies on WinXP machines using
samba 3.2.3 ?

Any possibility to apply policies on WinXP machines using samba 3.2.3 ?

In samba documentation in :
http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/PolicyMgmt.html

There is references to apply policies in NT/2000 Server and winxp clients,
but it's not clear to me that will run fine or not using samba 3.2.3+winxp
machines.

If exist a way, How ?

I was create a local policies using gpedit.msc and I  would like to apply to
entire network.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Any possibility to apply policies on WinXP machines using samba 3.2.3 ?

[hamacker]

Any possibility to apply policies on WinXP machines using samba 3.2.3 ?

In samba documentation in :
http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/PolicyMgmt.html

There is references to apply policies in NT/2000 Server and winxp
clients, but it's not clear to me that will run fine or not using
samba 3.2.3+winxp machines.

If exist a way, How ?

I was create a local policies using gpedit.msc and I  would like to
apply to entire network.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] AD controller problems.

[Giovanni Cambria]

What about the time syncronization of the RTC clock of every DCs?

G.
- Original Message - 
From: "Derek Harkness" <[EMAIL PROTECTED]>

To: "Samba List" 
Sent: Monday, December 08, 2008 4:40 PM
Subject: [Samba] AD controller problems.


In my AD setup I have 3 domain controllers (dc1, dc2, dc3) when samba/ 
winbind are talking to dc1 everything is great when talking to dc2 or  
dc3 I get this error "kinit succeeded but ads_sasl_spnego_krb5_bind  
failed: Strong(er) authentication required" and nothing works.  I  
don't think its a samba config problem but my AD admins aren't real  
helpful in getting samba working.


Has anybody else seen this or maybe got a solution/work around?

Thanks,
Derek
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Connectivity issues

[mjb]

Samba 3.2.5

I'm running into an issue when using Vista to access Samba shares.  I'm 
able to connect intermitently and it stays connected for a brief period of 
time (under 60 seconds) before I get the following error on the Vista box:

"Network path was not found"

In syslog it shows:

[begin]
[2008/12/09 11:09:03,  2] auth/auth.c:check_ntlm_password(308)
  check_ntlm_password:  authentication for user [matt] -> [matt] -> [matt] 
succeeded

[2008/12/09 11:09:03,  1] smbd/service.c:make_connection_snum(1190)
  mpc (10.0.0.58) connect to service data initially as user matt 
(uid=1005, gid=1006) (pid 19637)

[2008/12/09 11:11:02,  0] lib/util_sock.c:read_socket_with_timeout(939)

[2008/12/09 11:11:02,  0] lib/util_sock.c:get_peer_addr_internal(1607)
  getpeername failed. Error was Transport endpoint is not connected
  read_socket_with_timeout: client 0.0.0.0 read error = Connection reset 
by peer.

[2008/12/09 11:11:02,  0] lib/util_sock.c:write_data(1059)

[2008/12/09 11:11:02,  0] lib/util_sock.c:get_peer_addr_internal(1607)
  getpeername failed. Error was Transport endpoint is not connected
  write_data: write failure in writing to client 0.0.0.0. Error Broken 
pipe

[2008/12/09 11:11:02,  0] smbd/process.c:srv_send_smb(74)
  Error writing 75 bytes to client. -1. (Transport endpoint is not 
connected)
[end]


My smb.conf is pretty straight forward.. here are the global settings:

[global]
workgroup = 
netbios name = NAS
log level = 2
log file = /var/log/samba/%U
smb ports = 445
local master = No
domain master = No

This problem occures regardless of if I access the NAS by its name, or by 
IP.

Any ideas?  It seems that no matter what is in my smb.conf file, I cannot 
get Vista and Samba to live in harmony..

Thanks,
Matt
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Group membership not being honored

[Eric Diven]

Well, the source of the problem appears to be that the AD users were
members of too many groups to map successfully, so none were being
mapped except for the primary group.  At least that was my best-gues
interpretation of the "sys_setgroups failed" message I was seeing in the
logs.

Since Solaris only supports membership in 16 groups, and the AD users
were in >100 each, I think that's the problem.  getent group returns the
correct list of users because it's going group->users instead of
user->groups, and so the limitation doesn't come into play.

Thankfully the group we had to set this up for was small enough to just
do the access individually.

~Eric

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED]
>  On Behalf Of Eric Diven
> Sent: Tuesday, December 02, 2008 10:28 AM
> To: samba@lists.samba.org
> Subject: RE: [Samba] Group membership not being honored
> 
> This works if I assign the permissions to the primary group 
> that the user belongs to.  I seem to remember this working 
> for arbitrary groups in the past.  Can anybody clarify?
> 
> Thanks,
> 
> ~Eric 
> 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Printer upload problem

[François Legal]

I don't know of this particular WorkCenter model, but I had a similar issue
with a 7328 and samba 3.2.X

The problem is that Xerox drivers install a print processor (other than the
ones natively available in Windows like WinPrint) which requires a windows
machine to be run.

I think (I don't know what is possible with samba 4 but I doubt this could
be possible) that setting up point'n print for this kind of printer with
samba is not possible. You require a Windows machine.

I don't know if you have any kind of support services available by Xerox
(that may help you solving the issue) but the only answer I could get from
their support is "Buy the PostScript option first, then we'll see".

I finally decided to not have the drivers uploaded to the server, and use
the server only as a print queue and select the right driver when
installing the printer on the client machine (with all the drawbacks that
come along with this method like having to setup the printer parameters and
options each time on each machine) which, I guess, is not an option to you.

If you can get this to work with (maybe) the help of Xerox, I'm interested
in the solution.

François

On Tue, 09 Dec 2008 15:25:15 +0100, Nicolas HAHN <[EMAIL PROTECTED]>
wrote:
> 
> 
>Hi there,
> 
>We have 4 samba print servers we use for our 3000 users. they're  
> configured to automatically distribute printer drivers to our windows  
> clients.
> 
>Recently, we have added a Xerox WorkCenter 5638 monster.
> 
>But we're unable to upload the driver to the samba server throught  
> print wizzard as windows admin. We've tried PCL, PCL 6, and PS drivers  
> available on Xerox web site, without success. It is still the same:  
> various alert boxes appears, some with very strange numbers (ie:  
> 040:000:0466). In samba logs, I can see several STATUS_BUFFER_OVERFLOW  
> messages.
> 
>I've tried with samba version 3.0.22 and 3.0.27, on RHEL 5.1  
> installed on x64 architecture.
> 
>Furthemore, we experiment printer wizard crashes with various  
> printer drivers, and for most of them (we have almost 300 printers!),  
> we found a combination PRINTER MODEL <-> PRINTER DRIVER which finally  
> works, but it's not the panacee because the drivers don't really  
> correspond to the printer (ie: we use HP LJ 8050 driver for a HP LJ  
> 9550 printer to have things working).
> 
>We really need help about this problem, and we'd like to thank by  
> advance for any help provided (or bug fix!) as this is a kind of  
> emergency for us.
> 
>Thanks a lot :-)
> 
>--
> Nicolas HAHN
> X-Itools project manager
> 
> 
> This message was sent using IMP, the Internet Messaging Program.
> 
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Printer upload problem

[Nicolas HAHN]

  Hi there,

  We have 4 samba print servers we use for our 3000 users. they're  
configured to automatically distribute printer drivers to our windows  
clients.


  Recently, we have added a Xerox WorkCenter 5638 monster.

  But we're unable to upload the driver to the samba server throught  
print wizzard as windows admin. We've tried PCL, PCL 6, and PS drivers  
available on Xerox web site, without success. It is still the same:  
various alert boxes appears, some with very strange numbers (ie:  
040:000:0466). In samba logs, I can see several STATUS_BUFFER_OVERFLOW  
messages.


  I've tried with samba version 3.0.22 and 3.0.27, on RHEL 5.1  
installed on x64 architecture.


  Furthemore, we experiment printer wizard crashes with various  
printer drivers, and for most of them (we have almost 300 printers!),  
we found a combination PRINTER MODEL <-> PRINTER DRIVER which finally  
works, but it's not the panacee because the drivers don't really  
correspond to the printer (ie: we use HP LJ 8050 driver for a HP LJ  
9550 printer to have things working).


  We really need help about this problem, and we'd like to thank by  
advance for any help provided (or bug fix!) as this is a kind of  
emergency for us.


  Thanks a lot :-)

  --
Nicolas HAHN
X-Itools project manager


This message was sent using IMP, the Internet Messaging Program.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] LDAP + Samba + Windows2003

[Allgood, John]

Hello All

 

I am new to the list and have some questions. I want to setup ldap to
authenticate for Samba and Windows 2003 server. I have done a lot of
research and everything seems to indicate that I will need to setup
Samba to be a PDC and have it join the Windows 2003 server domain and
build samba with a ldap backend. Is there another way to do this so as I
will not have to setup samba to be a PDC. I have already setup my ldap
server using posix types accounts. Is this different that the Samba
accounts.

 

Thanks

 

John Allgood
Senior Systems Administrator
Turbo, division of OHL 
2251 Jesse Jewell Pky. NE 
Gainesville, GA 30507
tel: (678) 989-3051  fax: (770) 531-7878 
[EMAIL PROTECTED]

www.ohl.com

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Windows can see Ubuntu netbios names but not access or even ping

[Otto Krüse]

Hi All,

Situation:
Ubuntu 8.10
Samba 2:3.2.3-1ubuntu3.3
Samba Server acting as WINS and file server
All Windows clients are setup with the reference to the WINS server
nsswitch.conf setup: files wins dns
smb.conf setup: lmhosts wins host bcast
If I use IP adresses all works fine so it's clearly a name resolution
issue
Also bind9 DNS is installed (don't know if this matters)

Problem:
Here's the funny thing: when my I browse the local network on my
windows machine I can see the server (called ubuntuserver1). So
somehow my windows pc can resolve the name. But when I try to access
it (by double clicking) windows complains it cannot find the name.
Also ping ubuntuserver1 does not work.

It seems netbios name resolution works fine for some applications
(browse) but not for others (ping, access).

This used to work fine a while ago, also in 8.10. But for some odd
reason it doens't any more and I haven't even touched samba setup. Is
this a regression in the new samba version propagated a few weeks ago?

Note: Name resolution works fine for other linux machines in the
network. So it has something to do with Windows (both XP and Vista)
compatibility.

Help is highly appreciated, I have been breaking my head on this...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] 32 bit samba libraries on 64 bit OS

[Har Gagan Sahai]

Greetings, 

I am using 3.0.32 version of Samba. Please help with my problem described as 
follows: 

I am having an application in which I am using the libsmbsharedmodes.so. The 
purpose of 
using this library is to get the status of the lock acquired on the file. The 
function we use to 
get the lock status is "smb_get_share_mode_entries()". 

On a 32 bit machine, when we are using this library to get the lock status of a 
file, it works fine. 
But on a 64 bit machine, where my application runs as a 32 bit application so 
we are using the 
32 bit version of the library libsmbsharedmodes.so, the same function fails to 
return the lock 
status of the file properly. But 32 bit library on 32 bit OS and 64 bit library 
on 64 bit OS works fine. 

So the use case of file access in write mode by two user is not working 
properly when I am using the 
32 bit version of library libsmbsharedmodes.so with a 32 bit application which 
runs on a 64 bit OS. 
The value of the "share_access" is coming as 0 (zero) in this scenarios. For 
other combination it returns 
the value properly. 


Has anybody seen this kind of issue before or is there any similar kind of 
issue fixed in the later versions ? 

Thanks and regards, 
Har Gagan 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Issue with SambaNTPassword not replicating

[stephen mulcahy]

Hi,

I set up a Samba PDC/BDC configuration some time ago using LDAP as 
configured here - http://www.atlanticlinux.ie/blog/?p=25


The configuration has been working without problems for a few months now 
but we have noticed one issue. When users take their laptop from the 
network the PDC is serving to the networking the BDC is serving - they 
sometimes have problems logging in.


A dig through the BDC logs indicates the following error

[2008/12/09 12:02:30, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478)
  _net_auth2: creds_server_check failed. Rejecting auth request from 
client  machine account $


Comparing the LDAP records on the PDC and the BDC for system  I see 
that the following fields are different


sambaNTPassword: 64AF0BD8913B5BD2F6B92201B2AFD071
sambaPwdLastSet: 1226922777

on the PDC and BDC LDAP servers. It looks like the PDC has a newer 
sambaNTPassword than the BDC which would seem to explain the domain 
authentication problems.


I'm wondering why only the sambaNTPassword field is not getting 
replicated properly though. Is this a known issue with Samba in PDC/BDC 
config or do I need to look to OpenLDAP? I'll post some config files if 
someone has any input but didn't want to clutter this mail with excess 
detail.


Thanks for any comment,

-stephen




--
Stephen Mulcahy   Applepie Solutions Ltd.  http://www.aplpi.com
Registered in Ireland, no. 289353 (5 Woodlands Avenue, Renmore, Galway)
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problem with ldap backend.

[BOURIAUD]

Hello !
I've the following problem on my samba+ldap installation :
The samba server (version 3.0.28-1.el5_2.1) is running on a machine named 
luke. The ldap server runs on a machine named anakin.
Both of them seems to be setup correctly, since I can log in on the samba 
domain, but when I try to get an entry from the ldap database using the 
pdbedit command on luke, I get the following :


smbldap_open_connection: connection opened
ldap_connect_system: succesful connection to the LDAP server
The LDAP server is succesfully connected
init_sam_from_ldap: Entry found for user: david
Unix username:david
NT username:  david
Account Flags:[UX ]
User SID: S-1-5-21-215069222-2822928016-2390355089-3032
init_group_from_ldap: Entry found for group: 666
ldapsam_getsampwsid: Unable to locate SID 
[S-1-5-21-215069222-2822928016-2390355089-666] count=0
init_group_from_ldap: Entry found for group: 666
Primary Group SID:S-1-5-21-215069222-2822928016-2390355089-666
Full Name:david
Home Directory:   \\LUKE27\david
HomeDir Drive:P:
Logon Script: logon.bat
Profile Path: \\LUKE27\profiles\david
Domain:   DOMIA27
Account desc:
Workstations:
Munged dial:
Logon time:   0
Logoff time:  Tue, 19 Jan 2038 04:14:07 CET
Kickoff time: Tue, 19 Jan 2038 04:14:07 CET
Password last set:Fri, 05 Dec 2008 15:16:12 CET
Password can change:  Fri, 05 Dec 2008 15:16:12 CET
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours : FF

So, there is an error with ldapsam_getsampwsid, and I don't understant what it 
means. I've searched the web, found many messages, but even if I follow the 
instructions given, I can't get rid of this message.
What can be wrong in my installation ? 
Thanks for any help provided.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba