Re: [Samba] request for a security problem
thanx, my backend is smbpasswd not ldapsam , i used this capability on another server with ldapsam so. Is it possible to do it with smbpasswd ? Miguel Medalha a écrit : I have a samba server acting as a pdc I search for creating some users who will have access on some machines and not on others , so login is not possible everywhere! Is it possible?? ; the server comes with samba 3.2.8-0.27 with smbpasswd as backend thanx for answers I am using the capability you describe. It is possible with a LDAP backend. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] request for a security problem
I have a samba server acting as a pdc I search for creating some users who will have access on some machines and not on others , so login is not possible everywhere! Is it possible?? ; the server comes with samba 3.2.8-0.27 with smbpasswd as backend thanx for answers I am using the capability you describe. It is possible with a LDAP backend. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] request for a security problem
hi, I have a samba server acting as a pdc I search for creating some users who will have access on some machines and not on others , so login is not possible everywhere! Is it possible?? ; the server comes with samba 3.2.8-0.27 with smbpasswd as backend thanx for answers -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] usrmgr.exe does not show any Samba groups
Hi, We are running samba 3.0.28 on RHEL 5 as a PDC serving around 1000 active users . This domain was vampired from aWindows NT 4 domain a few years ago. OpenLDAP 2.2.13 is used as the back end user database. One of the problems we have is that usrmgr.exe does not display any groups. I can use usrmgr to create users, delete users and create groups. But I cannot use it to delete groups or add users to groups. I am running usrmgr.exe version 5.1 Service Pack 3 on Windows XP SP3. On the server, "net groupmap list" lists the groups correctly. If I select a user from the usgmgr panel, it shows the user's primary group correctly but it does not list any groups to make this user a member of. I have googled around but did not find any thing helpful. I can post my configuration if that is needed. Thanks! John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Dynamic Home Shares
That will work for my dynamic creation. Does anyone know why the %U variable
returns username + underscore(username_) instead of just username?
On Wed, Apr 8, 2009 at 2:27 PM, Brian Gregorcy wrote:
> Here is the script that we use to create the home directory when the user
> first logs in.
>
>
>
> humboldt samba # cat mkhomedir.sh
>> #!/bin/bash
>> # Creates home directories when account is created
>> # gregorcy
>> # Created: 03/21/2008
>> # Last Mod: 06/10/2008 - Added the if for is fac and cleanup
>> ###
>> #
>> # Variables
>> hostname=`hostname`
>> blessed="The permissions have been fixed "
>> subject1="does not have valid email in our LDAP"
>> subject2="A user is missing their homedir on $hostname the home dir has
>> been created but the old homedirs should be checked for data"
>> emailto="supp...@che.utah.edu"
>> emailmes="/tmp/emailmessage.txt"
>> ldapmail=`ldapsearch -D "cn=***,ou=***,dc=*,dc=utah,dc=edu" -b
>> "ou=***,dc=***,dc=utah,dc=edu" -w * -x -LLL "(sAMAccountName=$1)" mail |
>> grep mail | sed 's/..//'`
>> ldapfac=`ldapsearch -D "cn=***,ou=***,dc=,dc=utah,dc=edu" -b
>> "ou=***,dc=***,dc=utah,dc=edu" -w * -x -LLL "(sAMAccountName=$1)"
>> memberof >> /tmp/testfac`
>>
>>
>>
>>
>> grep -q Faculty /tmp/testfac isfac=$?
>> echo $isfac
>>
>> # functionville
>> function createbless () {
>>touch /home/CHEMENG/$1/.blessed
>>echo "$blessed" >> /home/CHEMENG/$1/.blessed
>>#chown root:root /home/CHEMENG/$1/.blessed
>>chmod 700 /home/CHEMENG/$1/.blessed
>> }
>>
>>
>>
>> # scriptage
>> if [ ! -e /home/CHEMENG/$1 ]; thenecho "The home dir for "$1 "was
>> not found probably was not migrated "> $emailmes
>>mkdir /home/CHEMENG/$1echo "Created the home directory but
>> should check trashheap or CHE-2551-30 for old stuff" >> $emailmes
>>mail -s "$subject2" supp...@***.utah.edu < $emailmes
>>rm -r $emailmes
>> fi
>>
>> if [ ! -e /home/CHEMENG/$1/.blessed ]; then
>>mkdir /home/CHEMENG/$1
>>if [ $isfac = 0 ]; then
>>xfs_quota -x -c "limit bsoft=61440M bhard=63000M
>> $1" /home
>>fi
>>
>>
>>if [ $isfac != 0 ]; thenxfs_quota
>> -x -c "limit bsoft=3072M bhard=3200M $1" /home
>>fi
>>#cp -r /etc/skel/* /home/CHEMENG/$1/*
>>chown "$1:CHEMENG+Domain Users" /home/CHEMENG/$1
>>chmod -R 711 /home/CHEMENG/$1
>>if [ -z $ldapmail ]; then
>>echo "Add the attribute mail to the user $1">
>> $emailmes
>>echo "then manually :( create the .forward in
>> /home/CHEMENG/$1" >> $emailmes
>>echo "Or add the email attribute to the AD and
>> delete the .blessed file " >> $emailmes
>>mail -s "$1 $subject1" supp...@***.utah.edu <
>> $emailmes
>>rm -r $emailmes
>>createbless $1
>>exit 0
>>fi
>>touch /home/CHEMENG/$1/.forward
>>echo "$ldapmail" >> /home/CHEMENG/$1/.forward
>>#chown root:root /home/CHEMENG/$1/.forward
>>chmod 700 /home/CHEMENG/$1/.forward
>>createbless $1
>># mod the public_html folder so apache can see it
>>chown -R "$1:apache" /home/CHEMENG/$1/public_html
>>chmod -R 751 /home/CHEMENG/$1/public_html
>>chmod -R g+s /home/CHEMENG/$1/public_html
>>
>>
>> fi
>>
>> # Clean Up
>> rm /tmp/testfac
>>
>> exit 0
>>
>>
>> # Notes
>> # Basic premise for the .forward add
>> # touch /home/CHEMENG/$1/foo.txt
>> # echo "grego...@***.utah.edu" >> /home/CHEMENG/$1/foo.txt
>>
>> # LDAP Search String
>> # ldapsearch -D "cn=***,ou=,dc=*,dc=utah,dc=edu" -b
>> "ou=*8,dc=,dc=utah,dc=edu" -w -x -LLL
>> "(sAMAccountName=)" mail | grep mail
>> # Output looks like this:
>> # mail: j...@***.utah.edu
>>
>
>
> Adam Williams wrote:
>
>> see root preexec = in the man page. so when they go to %U$ (such as using
>> logon home = z: ) it will run a script that creates the required directory
>> in /home/pc/
>>
>> Ken Lupo wrote:
>>
>>> Hello,
>>>
>>> I am attempting to dynamically create user shares when they connect to
>>> the
>>> server based on their username. I cannot use [homes]. My reasoning for
>>> this
>>> is that the users require a $ at the end of the share or it becomes
>>> confusing to them(long story). What I'm seeing is that some Windows XP
>>> clients will connect to /home/ but other clients try to connect
>>> to
>>> /home/_ (with an underscore). For a work around I have
>>> symlinked
>>> all home folders from to _
>>>
>>> Here is my smb.conf file:
>>>
>>> [global]
>>>workgroup = PC
>>>realm = PC.DOMAIN.COM
>>>server string = FILE
>>>security = ADS
>>>log file = /var/log/samba/%m.log
>>>
[Samba] LDAP Account Manager 2.6.0 released
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 LDAP Account Manager (LAM) 2.6.0 - April 8th, 2009 == LAM is a web frontend for managing accounts stored in an LDAP directory. Announcement: - - This release adds support for the management of NIS netgroups and EDU person accounts. The LAM admin users can now be searched in LDAP instead of providing a static list. The LAM Pro self service can be customized to match your corporate design. Full changelog: http://lam.sourceforge.net/changelog/index.htm Features: - - * management of Unix user and group accounts (posixAccount/posixGroup) * management of Samba 2.x/3 user and host accounts (sambaAccount/sambaSamAccount) * management of Kolab 2 accounts (kolabInetorgPerson) * profiles for account creation * account creation via file upload * automatic creation/deletion of home directories * setting quotas * PDF output for all accounts * editor for organizational units (OU) * schema browser * tree view * multiple configuration files * multi-language support: Catalan, Chinese (Traditional + Simplified), Czech, Dutch, English, French, German, Hungarian, Italian, Japanese, Polish, Portuguese, Russian and Spanish * support for LDAP+SSL/TLS Availability: - - This software is available under the GNU General Public License V2.0. You can get the newest version at http://lam.sf.net. File formats: DEB, RPM, tar.gz There is also a FreeBSD port. Debian users may use the packages in unstable. Demo installation: - -- You can try our demo installation online. http://lam.sf.net/live-demo/index.htm Support: - If you find a bug please file a bug report. For questions or implementing new features please use the forum and feature request tracker at our Sourceforge homepage http://www.sf.net/projects/lam. Authors & Copyright: - Copyright (C) 2003 - 2009: Michael Duergner Roland Gruber Tilo Lutz LAM is published under the GNU General Public License. The comlete list of licenses can be found in the copyright file. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAknc/WAACgkQq/ywNCsrGZ4lTACfegheoCrskTryqQdwNbQZqPmH npEAmwTriKrcp/MPmRzCFmRhGx0915JV =WvhR -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba 3.0.28 not enforcing password expiration
I'm having trouble with Samba 3.0.28 not enforcing password expiration when it worked perfectly on 3.0.10. If I roll the system back to the previous version all is well again. I get an error "valid account policy, but unable to fetch value!" when I execute the command "pdbedit -P "maximum password age". And I can see that the file account_policy.tdb will be updated on 3.0.10 and not on 3.0.28. I am running RHEL4 AS patched as of today. I would really appreciate any input I could get from the community. Thank You!! -- Robin Polak E-Mail: robin.po...@gmail.com V. 917-494-2080 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Dynamic Home Shares
Here is the script that we use to create the home directory when the user first
logs in.
humboldt samba # cat mkhomedir.sh
#!/bin/bash
# Creates home directories when account is created
# gregorcy
# Created: 03/21/2008
# Last Mod: 06/10/2008 - Added the if for is fac and cleanup
###
#
# Variables
hostname=`hostname`
blessed="The permissions have been fixed "
subject1="does not have valid email in our LDAP"
subject2="A user is missing their homedir on $hostname the home dir has been
created but the old homedirs should be checked for data"
emailto="supp...@che.utah.edu"
emailmes="/tmp/emailmessage.txt"
ldapmail=`ldapsearch -D "cn=***,ou=***,dc=*,dc=utah,dc=edu" -b
"ou=***,dc=***,dc=utah,dc=edu" -w * -x -LLL "(sAMAccountName=$1)" mail | grep mail |
sed 's/..//'`
ldapfac=`ldapsearch -D "cn=***,ou=***,dc=,dc=utah,dc=edu" -b "ou=***,dc=***,dc=utah,dc=edu"
-w * -x -LLL "(sAMAccountName=$1)" memberof >> /tmp/testfac`
grep -q Faculty /tmp/testfac
isfac=$?
echo $isfac
# functionville
function createbless () {
touch /home/CHEMENG/$1/.blessed
echo "$blessed" >> /home/CHEMENG/$1/.blessed
#chown root:root /home/CHEMENG/$1/.blessed
chmod 700 /home/CHEMENG/$1/.blessed
}
# scriptage
if [ ! -e /home/CHEMENG/$1 ]; then
echo "The home dir for "$1 "was not found probably was not migrated "> $emailmes
mkdir /home/CHEMENG/$1
echo "Created the home directory but should check trashheap or CHE-2551-30 for old stuff" >> $emailmes
mail -s "$subject2" supp...@***.utah.edu < $emailmes
rm -r $emailmes
fi
if [ ! -e /home/CHEMENG/$1/.blessed ]; then
mkdir /home/CHEMENG/$1
if [ $isfac = 0 ]; then
xfs_quota -x -c "limit bsoft=61440M bhard=63000M $1"
/home
fi
if [ $isfac != 0 ]; then
xfs_quota -x -c "limit bsoft=3072M bhard=3200M $1" /home
fi
#cp -r /etc/skel/* /home/CHEMENG/$1/*
chown "$1:CHEMENG+Domain Users" /home/CHEMENG/$1
chmod -R 711 /home/CHEMENG/$1
if [ -z $ldapmail ]; then
echo "Add the attribute mail to the user $1"> $emailmes
echo "then manually :( create the .forward in
/home/CHEMENG/$1" >> $emailmes
echo "Or add the email attribute to the AD and delete the .blessed
file " >> $emailmes
mail -s "$1 $subject1" supp...@***.utah.edu <
$emailmes
rm -r $emailmes
createbless $1
exit 0
fi
touch /home/CHEMENG/$1/.forward
echo "$ldapmail" >> /home/CHEMENG/$1/.forward
#chown root:root /home/CHEMENG/$1/.forward
chmod 700 /home/CHEMENG/$1/.forward
createbless $1
# mod the public_html folder so apache can see it
chown -R "$1:apache" /home/CHEMENG/$1/public_html
chmod -R 751 /home/CHEMENG/$1/public_html
chmod -R g+s /home/CHEMENG/$1/public_html
fi
# Clean Up
rm /tmp/testfac
exit 0
# Notes
# Basic premise for the .forward add
# touch /home/CHEMENG/$1/foo.txt
# echo "grego...@***.utah.edu" >> /home/CHEMENG/$1/foo.txt
# LDAP Search String
# ldapsearch -D "cn=***,ou=,dc=*,dc=utah,dc=edu" -b
"ou=*8,dc=,dc=utah,dc=edu" -w -x -LLL
"(sAMAccountName=)" mail | grep mail
# Output looks like this:
# mail: j...@***.utah.edu
Adam Williams wrote:
see root preexec = in the man page. so when they go to %U$ (such as
using logon home = z: ) it will run a script that creates the required
directory in /home/pc/
Ken Lupo wrote:
Hello,
I am attempting to dynamically create user shares when they connect to the
server based on their username. I cannot use [homes]. My reasoning for this
is that the users require a $ at the end of the share or it becomes
confusing to them(long story). What I'm seeing is that some Windows XP
clients will connect to /home/ but other clients try to connect to
/home/_ (with an underscore). For a work around I have symlinked
all home folders from to _
Here is my smb.conf file:
[global]
workgroup = PC
realm = PC.DOMAIN.COM
server string = FILE
security = ADS
log file = /var/log/samba/%m.log
local master = No
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
winbind use default domain = Yes
winbind offline logon = false
store dos attributes = Yes
ea support = Yes
dns proxy = no
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
SO_RCVBUF=8192 SO_KEEPALIVE
inherit acls = yes
inherit permissions = yes
map acl inherit = yes
[%U$]
path = /home/PC/%U
comment = Homes
read only = No
Any help would be greatly appreicated.
Thank you,
Ken
--
To
Re: [Samba] Dynamic Home Shares
On Wed, Apr 8, 2009 at 2:13 PM, Adam Williams wrote: > see root preexec = in the man page. so when they go to %U$ (such as using > logon home = z: ) it will run a script that creates the required directory > in /home/pc/ > > > Ken Lupo wrote: > >> Hello, >> >> I am attempting to dynamically create user shares when they connect to the >> server based on their username. I cannot use [homes]. My reasoning for >> this >> is that the users require a $ at the end of the share or it becomes >> confusing to them(long story). What I'm seeing is that some Windows XP >> clients will connect to /home/ but other clients try to connect >> to >> /home/_ (with an underscore). For a work around I have symlinked >> all home folders from to _ >> >> Here is my smb.conf file: >> >> [global] >>workgroup = PC >>realm = PC.DOMAIN.COM >>server string = FILE >>security = ADS >>log file = /var/log/samba/%m.log >>local master = No >>idmap uid = 16777216-33554431 >>idmap gid = 16777216-33554431 >>winbind use default domain = Yes >>winbind offline logon = false >>store dos attributes = Yes >>ea support = Yes >>dns proxy = no >>socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 >> SO_RCVBUF=8192 SO_KEEPALIVE >>inherit acls = yes >>inherit permissions = yes >>map acl inherit = yes >> >> [%U$] >>path = /home/PC/%U >>comment = Homes >>read only = No >> >> >> Any help would be greatly appreicated. >> >> Thank you, >> Ken >> >> > That will work for my dynamic creation. Does anyone know why the %U variable returns username + undeerscore(username_)? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Dynamic Home Shares
see root preexec = in the man page. so when they go to %U$ (such as using logon home = z: ) it will run a script that creates the required directory in /home/pc/ Ken Lupo wrote: Hello, I am attempting to dynamically create user shares when they connect to the server based on their username. I cannot use [homes]. My reasoning for this is that the users require a $ at the end of the share or it becomes confusing to them(long story). What I'm seeing is that some Windows XP clients will connect to /home/ but other clients try to connect to /home/_ (with an underscore). For a work around I have symlinked all home folders from to _ Here is my smb.conf file: [global] workgroup = PC realm = PC.DOMAIN.COM server string = FILE security = ADS log file = /var/log/samba/%m.log local master = No idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 winbind use default domain = Yes winbind offline logon = false store dos attributes = Yes ea support = Yes dns proxy = no socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192 SO_KEEPALIVE inherit acls = yes inherit permissions = yes map acl inherit = yes [%U$] path = /home/PC/%U comment = Homes read only = No Any help would be greatly appreicated. Thank you, Ken -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Dynamic Home Shares
Hello, I am attempting to dynamically create user shares when they connect to the server based on their username. I cannot use [homes]. My reasoning for this is that the users require a $ at the end of the share or it becomes confusing to them(long story). What I'm seeing is that some Windows XP clients will connect to /home/ but other clients try to connect to /home/_ (with an underscore). For a work around I have symlinked all home folders from to _ Here is my smb.conf file: [global] workgroup = PC realm = PC.DOMAIN.COM server string = FILE security = ADS log file = /var/log/samba/%m.log local master = No idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 winbind use default domain = Yes winbind offline logon = false store dos attributes = Yes ea support = Yes dns proxy = no socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192 SO_KEEPALIVE inherit acls = yes inherit permissions = yes map acl inherit = yes [%U$] path = /home/PC/%U comment = Homes read only = No Any help would be greatly appreicated. Thank you, Ken -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Failed to join domain
Hello, I am joining my samba server to active dorectory domain but i have this error and i don't know what to do: Failed to join domain: Invalid configuration and configuration modification was not requested Thank you for your help -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3 versions
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey Ray, > What are the roles of the different 3 versions? > > 3.0 Legacy? > 3.2 Legacy +GPL3? > 3.3 The continuing adventures? Take a look at the Release Planning section at http://wiki.samba.org/ That should answer your questions. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJ3NObIR7qMdg1EfYRAsRhAKDkx4UVPX/vPTK4zxu/FhCpm5aoKgCgjhcb 12KY4HPWSOeG4ib2eefufLM= =yhHw -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba 3 versions
What are the roles of the different 3 versions? 3.0 Legacy? 3.2 Legacy +GPL3? 3.3 The continuing adventures? Thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Update on bugzilla.samba.org
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Scott Lovenberg wrote: > I figure this request dovetails the bugzilla maintenance, > sorry if it seems like I'm thread hijacking. Nah. It's fine. > Would it be possible to turn on the 'vote for bug' feature > (or remove the reference to it all together)? I wanted to > flag a bug the other week and followed the bugzilla link to > vote for it, only to find out it was disabled. > Would enabling this be a productive use of resources? I've never used that feature. Is it a "me too" counter? cheers, jerry - -- = "What man is a man who does not make the world better?" --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJ3LoRIR7qMdg1EfYRAuK3AJ4ycCbEUEA1GVMrteEoZ7ISaED9dACgiAHf ZDJD8XQu2n2UcNScAmf3xY4= =KadP -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Update on bugzilla.samba.org
jerry wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fyi... We can into some db connection issues last night (about 10pm GMT-5 I think). This issue has been temporarily resolved, but I expect that we'll be taking the server offline for a short period sometime this week for further db maintenance. Also Deryck and I will be exploring some potential improvements to Samba's bugzilla service in the coming weeks. I'll try to keep everyone updated. cheers, jerry - -- = "What man is a man who does not make the world better?" --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJ20t1IR7qMdg1EfYRAv2HAJ47xw8Kn5co40X7do0UPcczvM2+LgCg5bPZ P10yo+Wy/Co8DuActPbosUQ= =imcZ -END PGP SIGNATURE- I figure this request dovetails the bugzilla maintenance, sorry if it seems like I'm thread hijacking. Would it be possible to turn on the 'vote for bug' feature (or remove the reference to it all together)? I wanted to flag a bug the other week and followed the bugzilla link to vote for it, only to find out it was disabled. Would enabling this be a productive use of resources? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba PDC and Kerberos
Hi, This is with reference to kerberos mailing list ( http://mailman.mit.edu/pipermail/kerberos/2004-December/006868.html) on the Samba PDC and Kerberos. I am trying to make Samba PDC in a AD (LDAP + KRB) domain. Could you please answer few of my queries on the same issue. 1. Whats the problem with Samba 3 to work as PDC in an AD domain? 2. What has been fixed to make Samba 4 work as PDC in an AD domain? 3. When would Samba 4 be available? Also it would be really help full if you can direct me to release notes of Samba 4. Thanks! Regards, Shahid Shaikh. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba Undesirable Behavior
I have security=share and I think it is the perfect solution. Windows clients can browse all public shares just fine and you get prompted for a password when trying to browse a private share. In Linux it doesn't work, here is what happens even when you enter a valid username and password: Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.0.28-0.el4.9] Server not using user level security and no password supplied. Server requested LANMAN password (share-level security) but 'client lanman auth' is disabled tree connect failed: SUCCESS - 0 It seems that you can't authenticate with the client when you have security=share. Does anyone have a solution? Thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Re: A question about BDC
"Germán Bobr" wrote in message news:1238684268.6802.1.ca...@german64... ¿Is it possible to set up a PDC in the office and a BDC in a datacenter to allow remote clients connect at high speed? Yes it is. You can use a LDAP database to store your usernames and passwords. You can use the native LDAP replication to update your BDC when changes to user accounts are made on the PDC. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
