Re: [Samba] samba 3.5.6 - ''smbclient -U% -Llocalhost' results in error - using hostname works fine, new feature?

2011-01-14 Thread David C. Rankin
On 12/18/2010 09:02 PM, Günter Kukkukk wrote:
> Am Samstag 18 Dezember 2010, 22:04:34 schrieb David C. Rankin:
>> Guys,
>>
>>  I have probably missed an announcement or overlooked something in a 
>> changelog,
>> but I just want to confirm what I'm seeing is expected behavior. I run samba 
>> in
>> standalone mode and I have always checked operation with
>>
>> smbclient -U% -Llocalhost
>>
>>  Now the faithful command returns an error:
>>
>> Connection to localhost failed (Error NT_STATUS_BAD_NETWORK_NAME)
>>
>> 
>>
>>  So what say the experts? New security feature?
>>
>>
> 
> The returned error NT_STATUS_BAD_NETWORK_NAME just says, that for
> some reason(s) "localhost" is not a known network name anymore.
> 
> Have you looked at your smb.conf option setting of  "name resolve order = ..."
> The default is:
>   name resolve order = lmhosts wins host bcast

Thanks Günter -- you nailed it -- but I still don't understand why???

23:02 providence:~> smbclient -U% -Llocalhost
Connection to localhost failed (Error NT_STATUS_BAD_NETWORK_NAME)
23:02 providence:~> grep resolv /etc/samba/smb.conf
  name resolve order = wins lmhosts bcast
23:03 providence:~> sudo vi /etc/samba/smb.conf
23:05 providence:~> grep resolv /etc/samba/smb.conf
  name resolve order = host wins lmhosts bcast
23:05 providence:~> sudo /etc/rc.d/samba restart
:: Stopping Samba Server   [DONE]
:: Starting Samba Server   [DONE]
23:05 providence:~> smbclient -U% -Llocalhost
Domain=[RLFPLLC] OS=[Unix] Server=[Samba 3.5.6]

Sharename   Type  Comment
-     ---
samba   Disk  Base Samba Share
print$  Disk
pdf-gen Printer   PDF Generator (only valid users)

Son-of-a-...

That's amazing. I've been using 'name resolve order = wins lmhosts 
bcast' since
2.0.2 and never run into this issue. What could have changed? Dunno, but it is
simple enough to add host back to name resolve order.

Thank you sir :p


-- 
David C. Rankin, J.D.,P.E.
Rankin Law Firm, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
Telephone: (936) 715-9333
Facsimile: (936) 715-9339
www.rankinlawfirm.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] SAMBA / CUPS Printserver

2011-01-14 Thread Jack Downes

To answer my own question/problem here in case anyone else needs to know...

Turns out I had a permission issue with where I was storing the drivers. 
I had that owned by printserver:printserver, and the user I was 
attempting to write with was KRH\jdown.


So... it ended up being a perms issue. I've since fixed this, and all is 
working correctly now!


thanks,
Jack



On 01/14/2011 13:15, Jack Downes wrote:

Aw, geez, forgot to mention essentials:
Samba 3.5.6
Freebsd 8.1
Cups 1.4.6

smb.conf:
[global]
log level = 6
workgroup = KRH
realm = KRH.INT
netbios aliases = freecups-2 freecups samba
server string = FreeBSD Server %v
security = ADS
password server = kal-dc3.krh.int, kal-dc4.krh.int, 
kal-dc2.krh.int, *

ntlm auth = No
client NTLMv2 auth = Yes
smb ports = 139
printcap cache time = 10
printcap name = cups
cups server = localhost
addprinter command = /usr/local/sbin/smbaddprinter.pl
deleteprinter command = /usr/local/sbin/smbdelprinter.pl
local master = No
domain master = No
browse list = No
wins server = 10.6.1.21
idmap uid = 1-2
idmap gid = 1-2
winbind cache time = 300
winbind use default domain = Yes
winbind refresh tickets = Yes
guest ok = Yes
cups options = raw

[homes]
comment = PDF files
read only = No
browseable = No
browsable = No

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
browsable = No

[print$]
comment = Printer Drivers
path = /usr/home/KRH_drivers
write list = root, printserver,KRH\jdown
force user = printserver
force group = printserver
guest ok = No


I kind of get the impression that printing is either not important to 
this list, or not many people find it difficult to sort out at all.  
If you are in the second category, please let me know where I'm going 
wrong, or what further information I should post to make the problem a 
bit clearer.


thanks,
Jack

On 01/14/2011 12:40, Jack Downes wrote:
Okay, I've got some progress now.  Have fairly decent printserver 
working.  I've been able to reproduce the same postive and negative 
results in two physical servers and now (finaly destination) a vmware 
server.


What's working:
ADS integration, this is a domain member
Printer driver installation (for a few drivers)
Printer installation / removal
Printing.

What's not working:
Most of the time, it will not let me install new printer drivers.  In 
particular I'm not having any luck getting HP's Universal Print 
Driver v5.2 to load.


Everything is close, simpler drivers work well.  I'm going to attempt 
to get this driver to load on another samba server 3.4.9 and then 
copy the tdb information over.  Not sure at all if this will work.




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Some direction of Samba4 Sid to Uid/Gid ?

2011-01-14 Thread Wei-Tsun Sun

On 15/01/2011 1:50 p.m., Taylor, Jonn wrote:


On 01/14/2011 02:04 PM, Wei-Tsun Sun wrote:

Did a git-pull and built samba4, up and running with winbind.

I have a file server, which will be access by windows. Say I have a
user named "abcde" (uid = 1000), under group "abcde) (gid = 1000).

When I created a user with samba-too (samba-tool newuser abcde x),
it creates an account "abcde" with mapped uid 300018 under group user
users.

I am really wondering if there is anyway to make the "abcde" created
under samba to link with the "abcde" in my local linux.

I have :
 idmap config SAMDOM: default = yes
 idmap config SAMDOM: backend = tdb
 idmap config SAMDOM: range = 1000-2

in my smb.conf

But it seems the uid goes anywhere not near 1000.

Cheers.

Have a look at http://wiki.samba.org/index.php/Samba4/Winbind

Jonn


I did, that is why I am bringing this up. In the "Testing" section:

#id Administrator
uid=0(root) gid=100(users) groupes=0(root),100(users),304(Group 
Policy Creator Owners),308(Domain Admins)


ID Administrator is not duplicated with the user name in the system.
However, "abcde", which is already in my system with uid 1000, and the 
one created by the samba-tool is with uid 300018.

When I
$id abcde
, I get abcde from the system but not from the samba4. Furthermore, 
files created via samba by the uid 300018 is not deletable by user uid 1000.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Some direction of Samba4 Sid to Uid/Gid ?

2011-01-14 Thread Taylor, Jonn


On 01/14/2011 02:04 PM, Wei-Tsun Sun wrote:
> Did a git-pull and built samba4, up and running with winbind.
>
> I have a file server, which will be access by windows. Say I have a
> user named "abcde" (uid = 1000), under group "abcde) (gid = 1000).
>
> When I created a user with samba-too (samba-tool newuser abcde x),
> it creates an account "abcde" with mapped uid 300018 under group user
> users.
>
> I am really wondering if there is anyway to make the "abcde" created
> under samba to link with the "abcde" in my local linux.
>
> I have :
> idmap config SAMDOM: default = yes
> idmap config SAMDOM: backend = tdb
> idmap config SAMDOM: range = 1000-2
>
> in my smb.conf
>
> But it seems the uid goes anywhere not near 1000.
>
> Cheers.

Have a look at http://wiki.samba.org/index.php/Samba4/Winbind

Jonn
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] creds_server_check: credentials check failed on Win7-32bit and samba-3.0.28a on ubuntu-8.04.4

2011-01-14 Thread Bob Tanner

On 2011-01-13 13:11:07 -0600, TAKAHASHI Motonobu said:


Windows 7 can join to Samba domain built by only Samba 3.3.2 or higher.

Look at:
  http://lists.samba.org/archive/samba/2011-January/160341.html
  http://lists.samba.org/archive/samba/2011-January/160445.html


Thank for the response, but as I stated in my initial post.:

On 2011-01-13 02:39:02 -0600, Bob Tanner said:


I have other Win7 32-bit and Win7 64-bit system authenticating to this
server with no problems.


If what you state is true I don't know how my other Win7 systems are in 
the domain and DOMAIN\user is working properly.


--
Bob Tanner   | Phone : (952 943-8700
http://www.real-time.com, Linux, OSX, VMware | Fax   : (952)943-8500
Key fingerprint = F785 DDFC CF94 7CE8 AA87 3A9D 3895 26F1 0DDB E378


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] SAMBA / CUPS Printserver

2011-01-14 Thread Jack Downes

Aw, geez, forgot to mention essentials:
Samba 3.5.6
Freebsd 8.1
Cups 1.4.6

smb.conf:
[global]
log level = 6
workgroup = KRH
realm = KRH.INT
netbios aliases = freecups-2 freecups samba
server string = FreeBSD Server %v
security = ADS
password server = kal-dc3.krh.int, kal-dc4.krh.int, 
kal-dc2.krh.int, *

ntlm auth = No
client NTLMv2 auth = Yes
smb ports = 139
printcap cache time = 10
printcap name = cups
cups server = localhost
addprinter command = /usr/local/sbin/smbaddprinter.pl
deleteprinter command = /usr/local/sbin/smbdelprinter.pl
local master = No
domain master = No
browse list = No
wins server = 10.6.1.21
idmap uid = 1-2
idmap gid = 1-2
winbind cache time = 300
winbind use default domain = Yes
winbind refresh tickets = Yes
guest ok = Yes
cups options = raw

[homes]
comment = PDF files
read only = No
browseable = No
browsable = No

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
browsable = No

[print$]
comment = Printer Drivers
path = /usr/home/KRH_drivers
write list = root, printserver,KRH\jdown
force user = printserver
force group = printserver
guest ok = No


I kind of get the impression that printing is either not important to 
this list, or not many people find it difficult to sort out at all.  If 
you are in the second category, please let me know where I'm going 
wrong, or what further information I should post to make the problem a 
bit clearer.


thanks,
Jack

On 01/14/2011 12:40, Jack Downes wrote:
Okay, I've got some progress now.  Have fairly decent printserver 
working.  I've been able to reproduce the same postive and negative 
results in two physical servers and now (finaly destination) a vmware 
server.


What's working:
ADS integration, this is a domain member
Printer driver installation (for a few drivers)
Printer installation / removal
Printing.

What's not working:
Most of the time, it will not let me install new printer drivers.  In 
particular I'm not having any luck getting HP's Universal Print Driver 
v5.2 to load.


Everything is close, simpler drivers work well.  I'm going to attempt 
to get this driver to load on another samba server 3.4.9 and then copy 
the tdb information over.  Not sure at all if this will work.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Some direction of Samba4 Sid to Uid/Gid ?

2011-01-14 Thread Wei-Tsun Sun

Did a git-pull and built samba4, up and running with winbind.

I have a file server, which will be access by windows. Say I have a
user named "abcde" (uid = 1000), under group "abcde) (gid = 1000).

When I created a user with samba-too (samba-tool newuser abcde x),
it creates an account "abcde" with mapped uid 300018 under group user
users.

I am really wondering if there is anyway to make the "abcde" created
under samba to link with the "abcde" in my local linux.

I have :
idmap config SAMDOM: default = yes
idmap config SAMDOM: backend = tdb
idmap config SAMDOM: range = 1000-2

in my smb.conf

But it seems the uid goes anywhere not near 1000.

Cheers.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] SAMBA / CUPS Printserver

2011-01-14 Thread Jack Downes
Okay, I've got some progress now.  Have fairly decent printserver 
working.  I've been able to reproduce the same postive and negative 
results in two physical servers and now (finaly destination) a vmware 
server.


What's working:
ADS integration, this is a domain member
Printer driver installation (for a few drivers)
Printer installation / removal
Printing.

What's not working:
Most of the time, it will not let me install new printer drivers.  In 
particular I'm not having any luck getting HP's Universal Print Driver 
v5.2 to load.


Everything is close, simpler drivers work well.  I'm going to attempt to 
get this driver to load on another samba server 3.4.9 and then copy the 
tdb information over.  Not sure at all if this will work.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [samba] same uid - RID

2011-01-14 Thread TAKAHASHI Motonobu
2011/1/14 sisu . :
>
> Hi all,
>
> Does anybody know if could have any conflict give to a machine the same uid 
> number and RID? I guess that it does not matter but I would like to be sure .
>
> Example:
>
> User ID: 1001
> SambaSId: S-1-5-21-2019295574-2912910430-3808223165-1001
>
> Thanks a lot

No, RID and uid have completely different semantics.

---
TAKAHASHI Motonobu 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Upgrading samba 3.3.x to 3.5.x old smbpasswd file and domainaccounts

2011-01-14 Thread Gaiseric Vandal
I would have thought you needed to have "unix" machine accounts in the 
passwd/shadow file.  Or are they using some sore of idmap allocation?


On 01/14/2011 04:34 AM, Götz Reinicke - IT-Koordinator wrote:

Hi,

I plan to update our main RedHat EL 5.6 samba server from samba 3.3.x to
3.5.x .

What I noticed as our main challenge so far, is migrating the user and
machine accounts from our old smbpasswd file to a tdbsam-.tdm fileformat.

pdbedit -i smbpasswd:/etc/samba/smbpasswd -e tdbsam:/etc/samba/passwd.tdb

throws a lot of errors regarding useraccounts which did not exist on the
posix passwd/shadow side.

If I remove the deleted accounts from the sambapasswd file as well, the
convertion goes on.

But what about the machine accounts which are in the smbpasswdfile and
not in the passwd/shadow file?

Thanks for any suggestion and comment.

Regards . Götz
   


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] upgrade from 3.4.3 to 3.5.4 disables access for Windows CE 3.0 client

2011-01-14 Thread Volker Lendecke
On Fri, Jan 14, 2011 at 04:44:34PM +0100, Volker Lendecke wrote:
> On Fri, Jan 14, 2011 at 10:55:57AM +0100, Michael Hanscho wrote:
> > On 01/14/2011 09:13 AM, Volker Lendecke wrote:
> > >Can you send a wireshark trace of that CE client trying
> > >against Samba and running against a Windows box?
> > 
> > Attached:
> > ce-samba.pcap.gz - gzipped wireshark trace ce-samba
> > ce-windows-pcap - gzipped wireshark trace ce - windowsxp
> 
> Can you try the attached patch?

For reference: The mailing list has eaten the patch. See

https://bugzilla.samba.org/show_bug.cgi?id=7917

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] upgrade from 3.4.3 to 3.5.4 disables access for Windows CE 3.0 client

2011-01-14 Thread Volker Lendecke
On Fri, Jan 14, 2011 at 10:55:57AM +0100, Michael Hanscho wrote:
> On 01/14/2011 09:13 AM, Volker Lendecke wrote:
> >Can you send a wireshark trace of that CE client trying
> >against Samba and running against a Windows box?
> 
> Attached:
> ce-samba.pcap.gz - gzipped wireshark trace ce-samba
> ce-windows-pcap - gzipped wireshark trace ce - windowsxp

Can you try the attached patch?

Thanks,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba PDC

2011-01-14 Thread Robert Fitzpatrick
On 1/13/2011 12:04 PM, TAKAHASHI Motonobu wrote:
> You must not set these 2 entries below:
> 
> -
> DWORD  RequireSignOrSeal = 0
> DWORD  RequireStrongKey = 0
> -

Thanks, I completely overlooked this and that was the trick. All issues
resolved now and have joined my Win7, Win2003 server and Ubuntu Linux
boxes all to my new Samba PDC :)

This Samba PDC seems more robust than any NT4 network I remember,
browsing is flawless, works great, nice work to the team and contributors ;)

--
Robert
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] upgrade from 3.4.3 to 3.5.4 disables access for Windows CE 3.0 client

2011-01-14 Thread Volker Lendecke
On Fri, Jan 14, 2011 at 10:22:53AM +0100, Michael Hanscho wrote:
> Hi!
> 
> On 01/14/2011 09:13 AM, Volker Lendecke wrote:
> >Can you send a wireshark trace of that CE client trying
> >against Samba and running against a Windows box?
> 
> Attached:
> ce-samba.pcap - wireshark trace ce-samba
> ce-windows-pcap - wireshark trace ce - windowsxp

Thanks!

Can you also get us a debug level 10 log of smbd of the
failure?

Thanks,

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] [samba] same uid - RID

2011-01-14 Thread sisu .

Hi all,

Does anybody know if could have any conflict give to a machine the same uid 
number and RID? I guess that it does not matter but I would like to be sure .

Example:

User ID: 1001
SambaSId: S-1-5-21-2019295574-2912910430-3808223165-1001

Thanks a lot
  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] upgrade from 3.4.3 to 3.5.4 disables access for Windows CE 3.0 client

2011-01-14 Thread Michael Hanscho

Hi!

On 01/14/2011 09:13 AM, Volker Lendecke wrote:

Can you send a wireshark trace of that CE client trying
against Samba and running against a Windows box?


Attached:
ce-samba.pcap.gz - gzipped wireshark trace ce-samba
ce-windows-pcap - gzipped wireshark trace ce - windowsxp

Thanks a lot
Michael

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Upgrading samba 3.3.x to 3.5.x old smbpasswd file and domainaccounts

2011-01-14 Thread Götz Reinicke - IT-Koordinator
Hi,

I plan to update our main RedHat EL 5.6 samba server from samba 3.3.x to
3.5.x .

What I noticed as our main challenge so far, is migrating the user and
machine accounts from our old smbpasswd file to a tdbsam-.tdm fileformat.

pdbedit -i smbpasswd:/etc/samba/smbpasswd -e tdbsam:/etc/samba/passwd.tdb

throws a lot of errors regarding useraccounts which did not exist on the
posix passwd/shadow side.

If I remove the deleted accounts from the sambapasswd file as well, the
convertion goes on.

But what about the machine accounts which are in the smbpasswdfile and
not in the passwd/shadow file?

Thanks for any suggestion and comment.

Regards . Götz
-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 420
Fax  +49 7141 969 55 420
E-Mail goetz.reini...@filmakademie.de

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016
Vorsitzende des Aufsichtsrats:
Prof. Dr. Claudia Hübner

Geschäftsführer:
Prof. Thomas Schadt

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] upgrade from 3.4.3 to 3.5.4 disables access for Windows CE 3.0 client

2011-01-14 Thread Volker Lendecke
On Thu, Jan 13, 2011 at 10:35:15PM +0100, Michael Hanscho wrote:
> After upgrading samba from 3.4.3 to 3.5.4 (during upgrade opensuse
> 11.2 to 11.3) wince3.0 client does not see any files/dirs in the
> user share; The config is the same as worked with 3.4.3.

Can you send a wireshark trace of that CE client trying
against Samba and running against a Windows box?

Information how to create useful traces can be found under
http://wiki.samba.org/index.php/Capture_Packets. To take the
trace against Windows, you might want to install wireshark
on the Windows "server" box.

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Error compiling Samba 3.5.5 on HP-UX 11.11

2011-01-14 Thread Volker Lendecke
On Thu, Jan 13, 2011 at 04:39:07PM -0500, stan.pietkiew...@statcan.gc.ca wrote:
> I managed to track down a bunch of missing include files,
> and made sure they were visible via symbolic links in
> /usr/include. That only generated a different set of
> errors
> 
> One thing I noticed, is that the makefile generated when I
> ran configure is "Makefile-noincludes". Is that
> significant?

That's something for non-GNU make. We've got over that with
3.6.

Sorry, but without access to such a box it's relatively
difficult to give proper support. We should be able to build
on HP/UX, but we don't have that specific environment around
to make sure it works out of the box.

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba PDC

2011-01-14 Thread Martin Hochreiter

Am 2011-01-14 07:55, schrieb Daniel Müller:

For some reasons and tried it many times. I did not have any problems
joining windows 7 with samba 3.2.15 and up with:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Para
meters]
"DomainCompatibilityMode"=dword:0001
"DNSNameResolutionRequired"=dword:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\]
“LmCompatibilityLevel”=dword:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters]
"Update"="no"
"DisablePasswordChange"=dword:
"MaximumPasswordAge"=dword:001e
"RequireSignOrSeal"=dword:0001
"RequireStrongKey"=dword:0001
"SealSecureChannel"=dword:0001
"SignSecureChannel"=dword:0001



Hi Daniel!

Can you tell me what "update=no" does?

regards
Martin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba