Re: [Samba] Very slow write performance to RAID

2011-07-25 Thread simo
On Tue, 2011-07-26 at 00:32 +0100, Jonathan Buzzard wrote:
> Jeremy Allison wrote:
> 
> [SNIP]
> 
> > 
> > Test using a modern (i.e. much later than 3.0.33) smbclient.
> > 
> 
> To back that up he is using CentOS 5, so there is no excuse for using 
> such an old version. Needs to switch to the samba3x packages that have 
> been present since CentOS 5.5 asap. From recollection it is getting on 
> now for a year since CentOS 5.5 came out which gave you version 3.3.8 in 
> the samba3x packages and CentOS 5.6 bumped that to 3.5.4, which has been 
> out for several months now.
> 
> For those that say upgrade to CentOS 6, you won't get any newer samba as 
> the samba3x packages in CentOS 5.6 are at the same level as the samba 
> packages in CentOS 6.

FWIW RHEL 6.1 has a newer version with a ton of patches on top.

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer 
Principal Software Engineer at Red Hat, Inc. 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Very slow write performance to RAID

2011-07-25 Thread Jonathan Buzzard

Jeremy Allison wrote:

[SNIP]



Test using a modern (i.e. much later than 3.0.33) smbclient.



To back that up he is using CentOS 5, so there is no excuse for using 
such an old version. Needs to switch to the samba3x packages that have 
been present since CentOS 5.5 asap. From recollection it is getting on 
now for a year since CentOS 5.5 came out which gave you version 3.3.8 in 
the samba3x packages and CentOS 5.6 bumped that to 3.5.4, which has been 
out for several months now.


For those that say upgrade to CentOS 6, you won't get any newer samba as 
the samba3x packages in CentOS 5.6 are at the same level as the samba 
packages in CentOS 6.



JAB.

--
Jonathan A. Buzzard Email: jonathan (at) buzzard.me.uk
Fife, United Kingdom.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] How to detect active users

2011-07-25 Thread Chris Weiss
On Mon, Jul 25, 2011 at 3:50 PM, Pascal Valois  wrote:
> Le 25/07/11 22:44, Jeremy Allison a écrit :
>>
>> On Mon, Jul 25, 2011 at 10:21:35PM +0200, Malte Forkel wrote:
>>>
>>> Hi,
>>>
>>> I'm running Samba 3.2.5 on a server which I'd like to shut down when it
>>> is not used by any client.
>>>
>>> Is there a way to detect whether any user has opened a file on the
>>> server?
>>
>> smbstatus will tell you.
>
> slight correction,
>
> smbstatus tells you what file are used and by who, currently.
> not who HAS opened a file.

smbstatus will also tell you who has an active connection to what
shares, even if they have yet to actually open some file.

while it's possible for someone to open a file in app that reads to
ram then closes, such as notepad.exe, making edits and letting them
sit without saving for long enough that an smb client would disconnect
the session is unlikely given the "save often" mentality that most
have gotten from using PC's.  From application crashes, to power
outages, to 2 year old kids pressing buttons, save often!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] How to detect active users

2011-07-25 Thread Pascal Valois

Le 25/07/11 22:44, Jeremy Allison a écrit :

On Mon, Jul 25, 2011 at 10:21:35PM +0200, Malte Forkel wrote:

Hi,

I'm running Samba 3.2.5 on a server which I'd like to shut down when it
is not used by any client.

Is there a way to detect whether any user has opened a file on the server?

smbstatus will tell you.

slight correction,

smbstatus tells you what file are used and by who, currently.
not who HAS opened a file.

so depending on what you mean by "has opened" (opened before and still 
use it, or opened before and may have close it), smbstatus may be the 
answer or not.


--
Pascal Valois
Service Informatique
Pôle Universitaire Léonard de Vinci

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] How to detect active users

2011-07-25 Thread Jeremy Allison
On Mon, Jul 25, 2011 at 10:21:35PM +0200, Malte Forkel wrote:
> Hi,
> 
> I'm running Samba 3.2.5 on a server which I'd like to shut down when it
> is not used by any client.
> 
> Is there a way to detect whether any user has opened a file on the server?

smbstatus will tell you.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] How to detect active users

2011-07-25 Thread Malte Forkel
Hi,

I'm running Samba 3.2.5 on a server which I'd like to shut down when it
is not used by any client.

Is there a way to detect whether any user has opened a file on the server?

Thanks,
Malte

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Very slow write performance to RAID

2011-07-25 Thread Jeremy Allison
On Mon, Jul 25, 2011 at 01:06:48PM -0400, Kevin Taylor wrote:
> 
> We have a RAID set up as our main fileserver (running samba 3.0.33 on linux, 
> CentOS 5). The main disk area is an XFS partition of about 8TB. I'm using 
> iostat to monitor disk I/O since we've gotten complaints about speed and I'm 
> noticing that when I write something to the samba share, the write speed is 
> horrible. For a 15GB file it is reporting to finish in about 20 minutes.
> 
> iostat reports very little write I/O...on the level of maybe 7 write i/o's 
> every 5 seconds or so.
> 
> If I were to read .5GB of data off of the samba share, it transfers quickly 
> (and I see 300 reads/s through iostat)...which would be about normal.
> 
> Any idea of why I'm getting such lousy write speed? 

Test using a modern (i.e. much later than 3.0.33) smbclient.

This pipelines writes so you should see much greater
throughput if it's the client that's at fault. What
client are you using ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Cannot see linux machines from XP

2011-07-25 Thread Al Schapira
Thanks for your reply.  Yes,  "nmbd -D" is running on the linux
machines.  No, on DRS2 in firefox and chrome  \\ADS1\... and \\DRS2\...
do not work. 

-Al

On Mon, 2011-07-25 at 21:29 +0800, youngjohn04 wrote:
> Is the nmbd deamon started on ads1 and ads2? Can you access share when
> typing \\ads1\other in address bar of explorer on DRS2?
> 
> yj
> -Original Message-
> From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
> On Behalf Of Al Schapira
> Sent: Monday, July 25, 2011 12:29 PM
> To: samba@lists.samba.org
> Subject: [Samba] Cannot see linux machines from XP
> 
> I'll try to spell out the problem as best I can.
> 
> There are three computers on a LAN,  "ADS1", "ADS2" and "DRS2".
> ADS1 and ADS2 run samba-3.5.8-76.fc14.i686 under Fedora 14.
> DRS2 runs Windows XP professional, SP3.
> 
> Each of them can successfully ping all the others by name.
> They are all in the same WORKGROUP (GAMMA5).
> 
> The Fedora machines (ADS1, ADS2) can see all three machines (including
> the XP machine) in their Network places, and in the Windows Network,
> and can successfully read and write designated shared files on the all
> the other machines (including the XP machine).
> 
> The Windows machine (DRS2) cannot even see the linux machines in its
> network places. (It sees only itself, DRS2 in the WORKGROUP GAMMA5)
> Naturally, therefore, it cannot see files on the linux machines.
> 
> Where do I start to solve this?
> 
> Thanks in advance for you help.
> 
>   -Al
> 
> Here is the non-comment part of smb.conf on ADS2
> 
> [global]
>   workgroup = gamma5
>   security = share
>   idmap uid = 16777216-33554431
>   idmap gid = 16777216-33554431
>   winbind use default domain = false
>   winbind offline logon = false
> 
>   server string = Samba Server Version %v
> 
>   netbios name = ADS2
> 
>   log file = /var/log/samba/log.%m
>   max log size = 50
> 
>   cups options = raw
> 
>   encrypt passwords = no
>   guest ok = yes
>   guest account = guest
> 
> [homes]
>   comment = Home Directories
>   browseable = no
>   writable = yes
> 
> [printers]
>   comment = All Printers
>   path = /var/spool/samba
>   browseable = no
>   printable = yes
> 
> [other]
>   path = /other
>   read only = no
>   guest ok = yes
> 
> ... other shares, nothing else.
> 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Very slow write performance to RAID

2011-07-25 Thread Kevin Taylor


This system is a hardware RAID 6 with I believe 256k strip size set up on it, 
but a default xfs filesystem on it (mounted with nobarrier, noatime, 
nodiratime). We do have write-caching enabled on the RAID controller.



> From: cwe...@gmail.com
> Date: Mon, 25 Jul 2011 12:45:02 -0500
> To: samba@lists.samba.org
> Subject: Re: [Samba] Very slow write performance to RAID
> 
> On Mon, Jul 25, 2011 at 12:06 PM, Kevin Taylor
>  wrote:
> >
> > We have a RAID set up as our main fileserver (running samba 3.0.33 on 
> > linux, CentOS 5). The main disk area is an XFS partition of about 8TB. I'm 
> > using iostat to monitor disk I/O since we've gotten complaints about speed 
> > and I'm noticing that when I write something to the samba share, the write 
> > speed is horrible. For a 15GB file it is reporting to finish in about 20 
> > minutes.
> >
> > With the command:   dd if=/dev/zero of=/data/testfile bs=1024k count=1
> >
> > I saw the 10GB write with a speed of 270MB/s, which is decent, so I'm not 
> > thinking there's anything wrong with the disk or raid controller.
> >
> 
> dd isn't really a great test since it's heavily uses caches, and it's
> about as sequential as you can get, where samba access is more likely
> to be highly random.  iometer with dynamo  can get you a more "real
> workload" type benchmark.
> 
> That said, to me this sounds like a block size and alignment plus
> write-back type of issue.  Here's some background and examples with
> xfs+lvm+mdadm, the base concept apply to hardware raid too
> http://www.linux.sgi.com/archives/xfs/2007-06/msg00411.html .  Even if
> you are getting acceptable perf local, you may be able to get better
> if you aren't doing these things, and anything remote will amplify any
> latency greatly.
> Next toss in windows wanting to flush at 4k or 64k, which should pass
> on through to the disk, causing a 128K stripe to flush again with
> every 4K, and multiple 128K stripes if things aren't aligned just
> right.  Then add in the read+modify+write+hash+write operation that
> raid5 does and you can start to see where performance can fail.
> Hardware raid with battery backed write cache can alleviate this since
> it won't wait for the disk spindles.
> 
> Possibly Samba can be tweaked to match your stripe size, I don't know
> how off-hand.
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Very slow write performance to RAID

2011-07-25 Thread Chris Weiss
On Mon, Jul 25, 2011 at 12:06 PM, Kevin Taylor
 wrote:
>
> We have a RAID set up as our main fileserver (running samba 3.0.33 on linux, 
> CentOS 5). The main disk area is an XFS partition of about 8TB. I'm using 
> iostat to monitor disk I/O since we've gotten complaints about speed and I'm 
> noticing that when I write something to the samba share, the write speed is 
> horrible. For a 15GB file it is reporting to finish in about 20 minutes.
>
> With the command:   dd if=/dev/zero of=/data/testfile bs=1024k count=1
>
> I saw the 10GB write with a speed of 270MB/s, which is decent, so I'm not 
> thinking there's anything wrong with the disk or raid controller.
>

dd isn't really a great test since it's heavily uses caches, and it's
about as sequential as you can get, where samba access is more likely
to be highly random.  iometer with dynamo  can get you a more "real
workload" type benchmark.

That said, to me this sounds like a block size and alignment plus
write-back type of issue.  Here's some background and examples with
xfs+lvm+mdadm, the base concept apply to hardware raid too
http://www.linux.sgi.com/archives/xfs/2007-06/msg00411.html .  Even if
you are getting acceptable perf local, you may be able to get better
if you aren't doing these things, and anything remote will amplify any
latency greatly.
Next toss in windows wanting to flush at 4k or 64k, which should pass
on through to the disk, causing a 128K stripe to flush again with
every 4K, and multiple 128K stripes if things aren't aligned just
right.  Then add in the read+modify+write+hash+write operation that
raid5 does and you can start to see where performance can fail.
Hardware raid with battery backed write cache can alleviate this since
it won't wait for the disk spindles.

Possibly Samba can be tweaked to match your stripe size, I don't know
how off-hand.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Very slow write performance to RAID

2011-07-25 Thread Kevin Taylor

We have a RAID set up as our main fileserver (running samba 3.0.33 on linux, 
CentOS 5). The main disk area is an XFS partition of about 8TB. I'm using 
iostat to monitor disk I/O since we've gotten complaints about speed and I'm 
noticing that when I write something to the samba share, the write speed is 
horrible. For a 15GB file it is reporting to finish in about 20 minutes.

iostat reports very little write I/O...on the level of maybe 7 write i/o's 
every 5 seconds or so.

If I were to read .5GB of data off of the samba share, it transfers quickly 
(and I see 300 reads/s through iostat)...which would be about normal.

Any idea of why I'm getting such lousy write speed? 

If generate some data to write on the fileserver itself (not going through 
samba) I can get some decent numbers.

With the command:   dd if=/dev/zero of=/data/testfile bs=1024k count=1

I saw the 10GB write with a speed of 270MB/s, which is decent, so I'm not 
thinking there's anything wrong with the disk or raid controller.





  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] MDB Files

2011-07-25 Thread Miguel Medalha



I have a problem with Ms Access *.MDB files.



Are you using Access 2007? Of course you are aware that Access 2007 
files have the ".accdb" extension?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] MDB Files

2011-07-25 Thread Kaz _
Hi.
I have a problem with Ms Access *.MDB files.
When I tried to edit forms it takes at least 60 seconds  to edit that forms
also to edit query. Application is working fine. But editing ... horrible.
I added these lines in my smb.conf file but nothing
 oplocks = no
level2 oplocks = no
strict locking = no
fake oplocks = no
veto oplock files =
/*.MDB/*.mdb/*.LDB/*.ldb/*.DOC/*.doc/*.XLS/*.xls/*.DOCX/*.docx/*.XLSX/*.xlsx


many tables are linked to another databases located on the network. There is
no problem to edit file locally.
samba version :3x 3.5.4.
os rhel5.7
Thank you.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Integrating samba with existing AD

2011-07-25 Thread Thibaut POUZET
Hi all,

I just suceed in configuring my new samba server. My users in Active
Directory (Win2k3 R2) can successfully browse the shares they are able to
view, write in their home directory, etc.
But… when trying to copy something inside one of the shared folder, I got an
error message  saying “You are not allowed to edit this share”.
I searched and found that when I do change the owner of the shared folder to
the user trying to copy something inside, it works !

Now the question is : how do I do to allow everyone to write in my shared
folders ?

This issue might be connected to another one I had. With this conf in
nsswitch :
/etc/nsswitch.conf
passwd file ldap winbind
group file ldap winbind
shadow file ldap
I have the following results : 

# wbinfo -n alfred
S-1-5-21-725345543-507921405-1202660629-3262 SID_USER (1)
# wbinfo -s S-1-5-21-725345543-507921405-1202660629-3262
WORKGROUP+alfred 1
# wbinfo -S S-1-5-21-725345543-507921405-1202660629-3262
502
# getent passwd |grep alfred
alfred:*:2033:1500:alfred Test:/home/alfred:/bin/bash
alfred:*:502:500:alfred Test:/home/WORKGROUP/alfred:/bin/false
# wbinfo -U 2033
Could not convert uid 2033 to sid
# wbinfo -U 502
S-1-5-21-725345543-507921405-1202660629-3262
And I can’t do anything with my shares, whatever is the user I use to
connect to them through explorer.

And with this conf : 
/etc/nsswitch.conf
passwd file ldap
group file ldap
shadow file ldap

# wbinfo -n alfred
S-1-5-21-725345543-507921405-1202660629-3262 SID_USER (1)
# wbinfo -s S-1-5-21-725345543-507921405-1202660629-3262
WORKGROUP+alfred 1
# wbinfo -S S-1-5-21-725345543-507921405-1202660629-3262
502
# getent passwd |grep alfred
alfred:*:2033:1500:alfred Test:/home/alfred:/bin/bash
# wbinfo -U 2033
Could not convert uid 2033 to sid
# wbinfo -U 502
S-1-5-21-725345543-507921405-1202660629-3262
And I have the situation described at the beginning of the mail : users can
view their shares, but cannot copy smthg inside of them. Furthermore, only
users with uid and gid given in LDAP can do that. 
# getent passwd | grep alfred2
alfred2:*:573:500:alfred2 Scow:/home/LYRA/alfred2:/bin/false

Alfred has uid&gid (in LDAP) and can connect, and Alfred2 doesn’t have
iud&gid (in LDAP), and he cannot connect.

I have an active directory synchronized with a LDAP server. Half of my users
have unix accounts (eg with uid-gid), and the other should not have uid-gid,
and therefore do not have ones.


Any sort of help would be appreciated !

Thank’s, Thibaut.

-Message d'origine-
De : samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] De
la part de Thibaut POUZET
Envoyé : jeudi 21 juillet 2011 09:50
À : samba@lists.samba.org
Objet : Re: [Samba] Integrating samba with existing AD

I found an interesting thing this morning, just look at the commands :

# wbinfo -a alfred%Password1234
plaintext password authentication succeeded
challenge/response password authentication succeeded
# smbclient -L localhost -Ualfred%Password1234 -d 2> debug.log
session setup failed: NT_STATUS_LOGON_FAILURE

Gives me this output (I removed the useless beginning of the output).
http://pastebin.com/ScCVGsBK

But, I have this line in smb.conf :
hosts allow = 192.168.206., 127.

So, where is the trick ?

Thibaut POUZET

-Message d'origine-
De : samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] De
la part de Thibaut POUZET
Envoyé : mercredi 20 juillet 2011 17:13
À : samba@lists.samba.org
Objet : Re: [Samba] Integrating samba with existing AD

Well thank you for noticing this error Jonathan, I didn't paid attention to
my samba version. We have quite a lot of centos machines on the network and
a poor internet connexion additionned with strong security policy.
Therefore, we have a rpm proxy and I did not noticed that the samba packages
available were out of date. Anyway, I fixed this issue and ran some more
tests. 

I still can observe my problem though : I can connect to the server with
smbclient or windows clients, but cannot parse my folders. I also created a
dummy user named Alfred in my active directory, but he cannot connect in any
way.

But now that I made this change, "# getent groups" does not gives me all my
local + ad groups (just some of them). 
I managed to connect to one of my folder by having "valid users = thibaut"
in my settings, but I don't really like this solution since I have a lot of
users which will have access to this server.

[2011/07/20 16:59:01.751433,  1] smbd/service.c:1070(make_connection_snum)
  192.168.206.145 (192.168.206.145) connect to service commercial initially
as user thibaut (uid=2032, gid=1500) (pid 3039)
[2011/07/20 16:59:02.771747,  1] smbd/sesssetup.c:332(reply_spnego_kerberos)
  Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!

And when accessing to another folder with "valid users = %S" :
[2011/07/20 16:58:53.584947,  2]
smbd/service.c:598(create_connection_server_info)
  user 'thibaut' (from session setup) n

Re: [Samba] Can't rename win7 machine in samba domain

2011-07-25 Thread Vytautas Kasparavicius

Not, just changing machine name via control panel

2011.07.25 17:04, Gaiseric Vandal rašė:

On 07/25/2011 03:41 AM, Vytautas Kasparavicius wrote:

Hello,
Samba 3.5.8-68 on F15 64bit with all latest updates.
Part of smb.conf file:

set primary group script = /usr/sbin/usermod -g %g %u
add user script = /usr/sbin/useradd -g 100 %u
add group script = /usr/sbin/groupadd %g
add user to group script = /usr/bin/gpasswd -a %u %g
add machine script = /usr/sbin/useradd -d /var/lib/nobody -g 100 -s 
/bin/false -M %u

delete user script = /usr/sbin/userdel %u -r
delete user from group script = /usr/bin/gpasswd -d %u %g
delete group script = /usr/sbin/groupdel %g
rename user script = /usr/sbin/usermod --login='%unew' '%uold'

I can rename WinXP machines in domain without any problem, but if I 
try to rename Win7 machine in domain I getting error


"The specified domain either does not exist or could not be contacted"




Are you removing the machine from the domain 1st, then renaming the 
machine, then rejoining?


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Can't rename win7 machine in samba domain

2011-07-25 Thread Gaiseric Vandal

On 07/25/2011 03:41 AM, Vytautas Kasparavicius wrote:

Hello,
Samba 3.5.8-68 on F15 64bit with all latest updates.
Part of smb.conf file:

   set primary group script = /usr/sbin/usermod -g %g %u
   add user script = /usr/sbin/useradd -g 100 %u
   add group script = /usr/sbin/groupadd %g
   add user to group script = /usr/bin/gpasswd -a %u %g
   add machine script = /usr/sbin/useradd -d /var/lib/nobody -g 100 -s 
/bin/false -M %u

   delete user script = /usr/sbin/userdel %u -r
   delete user from group script = /usr/bin/gpasswd -d %u %g
   delete group script = /usr/sbin/groupdel %g
   rename user script = /usr/sbin/usermod --login='%unew' '%uold'

I can rename WinXP machines in domain without any problem, but if I 
try to rename Win7 machine in domain I getting error


"The specified domain either does not exist or could not be contacted"




Are  you removing the machine from the domain 1st, then renaming the 
machine, then rejoining?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Cannot see linux machines from XP

2011-07-25 Thread youngjohn04
Is the nmbd deamon started on ads1 and ads2? Can you access share when
typing \\ads1\other in address bar of explorer on DRS2?

yj
-Original Message-
From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
On Behalf Of Al Schapira
Sent: Monday, July 25, 2011 12:29 PM
To: samba@lists.samba.org
Subject: [Samba] Cannot see linux machines from XP

I'll try to spell out the problem as best I can.

There are three computers on a LAN,  "ADS1", "ADS2" and "DRS2".
ADS1 and ADS2 run samba-3.5.8-76.fc14.i686 under Fedora 14.
DRS2 runs Windows XP professional, SP3.

Each of them can successfully ping all the others by name.
They are all in the same WORKGROUP (GAMMA5).

The Fedora machines (ADS1, ADS2) can see all three machines (including
the XP machine) in their Network places, and in the Windows Network,
and can successfully read and write designated shared files on the all
the other machines (including the XP machine).

The Windows machine (DRS2) cannot even see the linux machines in its
network places. (It sees only itself, DRS2 in the WORKGROUP GAMMA5)
Naturally, therefore, it cannot see files on the linux machines.

Where do I start to solve this?

Thanks in advance for you help.

-Al

Here is the non-comment part of smb.conf on ADS2

[global]
workgroup = gamma5
security = share
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
winbind use default domain = false
winbind offline logon = false

server string = Samba Server Version %v

netbios name = ADS2

log file = /var/log/samba/log.%m
max log size = 50

cups options = raw

encrypt passwords = no
guest ok = yes
guest account = guest

[homes]
comment = Home Directories
browseable = no
writable = yes

[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
printable = yes

[other]
path = /other
read only = no
guest ok = yes

... other shares, nothing else.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba + LDAP + SMBLDAP-Tools + Roaming Profiles

2011-07-25 Thread J. Echter
Am 22.07.2011 17:48, schrieb TAKAHASHI Motonobu:
> From: "J. Echter" 
> Date: Thu, 21 Jul 2011 08:51:25 +0200
> 
>> Am 20.07.2011 18:08, schrieb TAKAHASHI Motonobu:
>> hi,
>>
>> tried all your hints. still now profiles found...
> 
> H...
> 
> My testing environment is available at 
>   
> ftp://ftp.ring.gr.jp/pub/net/samba-jp/vmware_player_images/sambapdc-squeeze-20110713.zip
> 
> In this environment, 
> 
> 1) # chmod 1777 /var/lib/samba/shares/profiles 
> 2) changing "hide files" and "profiles acls" same as yours
> 3) # pdbedit -p \\sambapdc\profiles\username username
> 4) Logging on as the user, roaming profiles is successfully created.
> 
> I'm using "ldapsam:editposix" instead of smbldap-tools, so this may
> not help you...
> 
> ---
> TAKAHASHI Motonobu 

Hi,

there's something wrong with my config... the successful logins are only
able because the users are already there as local unix accounts.

i created a new user 'test' and this one can't even login.

something with nsswitch seems configured wrong, imho. i get an error
like 'no unix account found'.

i will post the details about that later, i have to wait till i can
switch the smb.conf again.

cheers

juergen.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4, Windows 7, Roaming profiles and Folder redirection

2011-07-25 Thread Linda Walsh
John H Terpstra wrote:
> On 07/21/2011 10:07 AM, Tanuki uk wrote:
>> Hello,
>> I'm quite new to Samba administration and I've inherited a working samba
>> setup with roaming profiles however the login and logout times for
>> users has
>> been growing and I'm starting to think it's time do something about
>> it. I'm
>> thinking redirect some folders to a samba share on the network will
>> speed up
>> the login and logout times.
> 
> The increasing logon and logoff times are most frequently caused by
> people storing files on their desktops (a VERY bad practice in corporate
> environments) - the entire desktop is written to the server when the
> user logs off from a machine.  This is particularly problematic when
> people log onto multiple machines at the same time.
> 
> Additionally, the files that are stored under "My Documents" are also
> copied from the profile server to the workstation at logon and are
> written back to the profile server at logoff.
> 
> PS: I came across one site where users had up to 120GB files in their
> "My Documents" and up to 20GB on their desktop.  Needless to say, they
> could not afford the long logon and logoff times. :-)
---
Yeppers 
In my Win7 setup, I have my domain user sharing some files
with the local user (which was setup first), so:
domainuser in their 'homedir: (along with registry, and 'appdata/roaming')
is:

lrwxrwxrwx  1   18 2011-02-14 17:40 Contacts -> Documents/Contacts/
lrwxrwxrwx  1   17 2010-01-26 03:55 Desktop -> Documents/Desktop/
lrwxrwxrwx  1   16 2010-07-08 13:59 Documents -> ../law/Documents/
lrwxrwxrwx  1   19 2011-02-14 17:37 Downloads -> Documents/Downloads/
lrwxrwxrwx  1   19 2011-06-27 16:19 Favorites -> Documents/Favorites/
lrwxrwxrwx  1   15 2011-06-27 16:36 Links -> Documents/Links/
lrwxrwxrwx  1   15 2011-07-12 04:25 Music -> Documents/Music/
lrwxrwxrwx  1   18 2010-07-08 13:59 Pictures -> Documents/Pictures/



The ../law (local user) has:

%lrwxrwxrwx 2011-02-14 17:40 Contacts -> Documents/Contacts/
%lrwxrwxrwx 2010-02-08 14:41 Cookies ->
Appdata/Roaming/Microsoft/Windows/Cookies/
lrwxrwxrwx  2010-04-01 22:25 Desktop -> Documents/Desktop/
lrwxrwxrwx  2010-04-06 00:13 Documents -> //Bliss/home/law/Documents/
lrwxrwxrwx  2011-02-14 17:37 Downloads -> Documents/Downloads/
lrwxrwxrwx  2011-06-27 16:19 Favorites -> Documents/Favorites/
%lrwxrwxrwx 2011-07-12 04:26 Links -> Documents/Links/
lrwxrwxrwx  2011-07-12 04:27 Music -> Documents/Music/
lrwxrwxrwx  2010-04-06 00:15 Pictures -> Documents/Pictures/
%lrwxrwxrwx 2010-02-08 14:44 Recent -> AppData/Roaming/Microsoft/Windows/Recent/
%lrwxrwxrwx 2010-02-08 14:45 SendTo -> AppData/Roaming/Microsoft/Windows/SendTo/
%lrwxrwxrwx 2010-02-08 14:45 Start Menu ->
AppData/Roaming/Microsoft/Windows/Start Menu/

Note: the % entries were attempts to provide compat with XP, client, BUT,
the XP client doesn't understand 'mklink' style symlinks...
(I think the kernel doesn't understand them, so even if you created them,
they wouldn't work).
instead, you have ntfs hardlinks, and 'junctions', which are more limited
but can be made to work -- like my 'Documents directory, is a separate Share
I can mount it by //Bliss/Documents, and it will mount the user-specific
share, for their doc dir, (same dir as //Bliss/home/law/Documents in above).
I then can mount it at a rootdir -- something junctions seemed to have some
requirement for)...

Since things work 'flakey' (links are sometimes turned into files, so windows
will try to access things via other means), I setup cross-user links for
dirs I wanted shared -- don't share the appdirs!  (it isn't that you can't, or
that it won't work, but it isn't reliable, and you have to keep the apps on the
different clients in sync  if you don't or you have a workstation that doesn't
read a profile in on login for some reason (I've had it happen more than once),
but it *DOES* write the full profile out on logout), and if that workstation
was recently reformatted and doesn't have all the same settings
as the more current workstations, your 'unconfig'ed settings 'overwrite' your
newer settings .. then when they login on the new workstations...they get
settings that don't make sense or are months old or in a default config.

Backups and keeping a recent lsm snapshot going in the background can allow
quick recovery, it can still be a royal pain and certainly a nightmare on a
larger site.

The things that work well -- keeping my Desktop inside Documents, and keeping
Documents on the network share -- that way it's never updated via the roaming
profile.

Still have some 'wayward', ill behaved apps (Adobe apps in particular, but
also some personal backup SW, -- Thunderbird 3.x or above ... that download
huge amounts of data into the user's local-roaming profile.  (Adobe 2-3G,
Backup SW .. varies, Tbird -- will download an entire network-share of
email (IMAP) -- designed so network users could share 1 mail depot, into their
appdir -- by 

[Samba] Can't rename win7 machine in samba domain

2011-07-25 Thread Vytautas Kasparavicius

Hello,
Samba 3.5.8-68 on F15 64bit with all latest updates.
Part of smb.conf file:

   set primary group script = /usr/sbin/usermod -g %g %u
   add user script = /usr/sbin/useradd -g 100 %u
   add group script = /usr/sbin/groupadd %g
   add user to group script = /usr/bin/gpasswd -a %u %g
   add machine script = /usr/sbin/useradd -d /var/lib/nobody -g 100 -s 
/bin/false -M %u

   delete user script = /usr/sbin/userdel %u -r
   delete user from group script = /usr/bin/gpasswd -d %u %g
   delete group script = /usr/sbin/groupdel %g
   rename user script = /usr/sbin/usermod --login='%unew' '%uold'

I can rename WinXP machines in domain without any problem, but if I try 
to rename Win7 machine in domain I getting error


"The specified domain either does not exist or could not be contacted"


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Integrate Samba with Active Directory

2011-07-25 Thread Harry Jede
On 09:07:40 wrote Bruno Martins - GALILEU LISBOA:
> Hello guys,
> 
> 
> 
> I am setting up a Samba server (based on CentOS 5.6) on my company
> which will act as a print and file server. Also, it has dropbox
> installed.
> 
> 
> 
> I have set up everything regarding to CUPS and Samba itself, but I'm
> not being able to integrate my shares with Active Directory.
> 
> 
> 
> All I want is that access control to Samba shares is made through
> Active Directory users and their respective passwords, and not
> through Unix-style users and groups. Is this possible?
> 
> 
> 
> Some configuration files:
> 
> /etc/nsswitch.conf - http://pastebin.com/rPgXSL6G
your config:
passwd: files ldap
shadow: files winbind
group:  files winbind

should be all the same ;-) ie
files winbind

> /etc/samba/smb.conf - http://pastebin.com/9uffAyjV
> 
> /etc/krb5.conf - http://pastebin.com/9zJFQR6J
> 
> 
> 
> Can someone please give me some lights on this?
> 
> 
> 
> If you need more information, just tell me. ;-)
> 
> 
> 
> Thanks for your cooperation.
> 
> 
> 
> Best regards,
> 
> 
> 
> Bruno Martins


-- 

Gruss
Harry Jede
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba