Re: [Samba] Samba3+OpenLDAP - Samba4 implications.
Hi, On 19.06.2012 22:31, Adam Tauno Williams wrote: On Wed, 2012-06-13 at 18:33 +1000, Alex Ferrara wrote: I might be going over old stuff, and if so, I apologise. I administer a network that uses Samba 3 with an OpenLDAP backend for domain logons, printing and file sharing. I am interested in moving to Samba4 for the domain control side of things, but the twist is that I have many other things relying on OpenLDAP for authentication and configuration, with several custom schemas. Is there a samba4 schema for OpenLDAP or is there a migration path for networks like mine? There is an upgrade path; the proceedure for doing upgrade provisioning is on the Samba4 wiki. At this point it works pretty well. I currently ask myself the same question as Alex, so thanks for (re-)pointing us at the wiki. After reading both the normal samba4/howto and the upgrade-howto, here are my questions: - If I understand it correctly, s4 will replace the currently running openldap-server? - Did anyone ever think about setups where the slapd is not running on the same machine as the samba3? (And where joining both on a single machine is not wanted?) - Did anyone ever think about setups where two or more machines run slapd with multi-master replication? Even if we could go on without multi-master and be content with having one (virtual) machine serving both as master for all the ldap-based authentication (with read-only mirrors) and as the master for the windows-domain: - The migration-howto doesn't mention at all what happens with the additional schemes installed on the ldap and seems to only assume that standard samba3-schema and posix/inetorgperson is active? - Is it possible to read-only replicate at least the unix (and custom) schemes to second servers? How would that be configured? Thanks for answering and have a good day, Arnold -- bcs kommunikationslösungen Inh. Carsten Burkhardt Harz 51 * 06108 Halle tel +49 345 29849-0 fax +49 345 29849-22 mailto:i...@b-c-s.de http://www.b-c-s.de -- Sent from our Linuxterminalserver. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Slave DNS for a DLZ zone
On 07.06.2012 10:13, German Molano wrote: Can I setup a slave server for dlz zone create with samba4 installation ? I can't give a definitive answer due to a lack of experience with s4, but I have successfully slaved a linux bind9 to a win-ad, so I think at least using the windows admin tools you should be able to allow enslaving your bind to s4-dns. Have fun, Arnold -- bcs kommunikationslösungen Inh. Carsten Burkhardt Harz 51 * 06108 Halle tel +49 345 29849-0 fax +49 345 29849-22 mailto:i...@b-c-s.de http://www.b-c-s.de -- Sent from our Linuxterminalserver. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Tools
On 30.04.2012 21:06, Charles Tryon wrote: There are some very nice NAS appliances, but these are essentially GUI front ends for Samba 3. Then there are also complete solutions such as ClearOS, which try to do the whole small business server thing, including an embedded Samba server. They have plans to support Samba4, but I don't know their timeline. The down side of this is, it pretty much locks you in to whatever Alpha version they choose to include. There is also the univention corporate server (aka UCS) that nowadays comes as a S4 AD. Have fun, Arnold -- bcs kommunikationslösungen Inh. Carsten Burkhardt Harz 51 * 06108 Halle tel +49 345 29849-0 fax +49 345 29849-22 mailto:i...@b-c-s.de http://www.b-c-s.de -- Sent from our Linuxterminalserver. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] SerNet has created an open source Samba4 appliance for early testing
Hi, On 13.04.2012 12:49, Michael Adam wrote: The Samba Team is working towards getting a Version 4.0 released. In oder to ease testing of the Active Directory features of Samba4, even for people who don't want to download and compile the source code, SerNet (http://www.sernet.de/) has created a software appliance based on current Samba master snapshots. By pure coincidence (and because it was announced at cebit) I downloaded that appliance yesterday and took it for a first test drive. First problem: I can't change /etc/resolv.conf, neither as user sernet nor as user root nor from a grml-cd. And as the dns resolving is wrong, I can't access the appliance from anything but the (virtual) local gui. And I can't install/update other packages. Which leaves me rather clueless with the whole package... Any advice? Have fun, Arnold -- bcs kommunikationslösungen Inh. Carsten Burkhardt Harz 51 * 06108 Halle tel +49 345 29849-0 fax +49 345 29849-22 mailto:i...@b-c-s.de http://www.b-c-s.de -- Sent from our Linuxterminalserver. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Suggestions for moving a PDC function
Hi, On 03/24/2012 08:09 PM, Simon Matthews wrote: I currently have a server which is both the PDC for my domain and the file server for the network. I need to split these functions and move the PDC function to another box, while leaving the original server as the file server on which home directories and roaming profiles are stored. User credentials are stored in a tdbsam database and I am running Samba 3.5. I can't comment on the actually samba-internal files as I haven't yet moved a samba server from one machine to the other. But as far as my understanding of windows-domains (and the excellent samba3.5 docs) goes, the pdc has its special role for two things: providing the login-information and providing at least the logon-share, maybe even the profiles-share. So I doubt that you can completely separate your servers. Of course you can set up a second samba-server (as bdc or normal domain-member) to provide additional shares. Wouldn't it be easier on your case to just move some of the shares to the second machine? Have fun, Arnold -- bcs kommunikationslösungen Inh. Carsten Burkhardt Harz 51 * 06108 Halle tel +49 345 29849-0 fax +49 345 29849-22 mailto:i...@b-c-s.de http://www.b-c-s.de -- Sent from our Linuxterminalserver. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Diagnosing Performance Issues
Hi All, First off my apologies if this is the wrong place to be asking. I seem to have a problem where the smbd process is using a massive amount of CPU for network transfers. It averages about 70-90% usage on both cores of a dual-core machine when transferring between disks (or over the network) using samba/cifs shares. Along with this I also notice the transfers going from a steady 30-40mb/sec to anywhere from 1-4MB/sec. It seems to resolve itself then re-occur multiple times during a transfer. I have tried tweaking buffer settings and the like with no success. iostat shows corresponding transfer rates that match what Windows is reporting for transfer speeds. Any ideas where I can start looking? I've done a fair bit of looking, but I'm not quite ready to say it's a hardware problem just yet. Cheers :) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Diagnosing Performance Issues
Unfortunately an strace of the smbd process provides me with nothing useful as I am not a samba developer. However I'll happily provide the strace output for anyone interested :) On 04/10/2010 2:05 PM, Volker Lendecke wrote: On Mon, Oct 04, 2010 at 01:21:39PM +0800, Shane Arnold wrote: First off my apologies if this is the wrong place to be asking. I seem to have a problem where the smbd process is using a massive amount of CPU for network transfers. It averages about 70-90% usage on both cores of a dual-core machine when transferring between disks (or over the network) using samba/cifs shares. Along with this I also notice the transfers going from a steady 30-40mb/sec to anywhere from 1-4MB/sec. It seems to resolve itself then re-occur multiple times during a transfer. I have tried tweaking buffer settings and the like with no success. iostat shows corresponding transfer rates that match what Windows is reporting for transfer speeds. Any ideas where I can start looking? I've done a fair bit of looking, but I'm not quite ready to say it's a hardware problem just yet. strace'ing the smbd might be a start... Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba 4 and password policy pwsetting error
Hello, When I tried to change the password policy on a samba 4 domain controller I get the following error. r...@server01:/usr/local/samba/lib/python2.6/site-packages/samba/netcmd# ./pwsettings.py --complexity=off Traceback (most recent call last): File ./pwsettings.py, line 25, in module import samba.getopt as options ImportError: No module named samba.getopt r...@lcsdc01:/usr/local/samba/lib/python2.6/site-packages/samba/netcmd# What am I doing wrong when running this command? Thanks -Glenn -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 4 and password policy pwsetting error
Luk, Thanks that is what I needed. I did internet search on the proper syntax for the command and just could not figure out how run the command. -Glenn - Original Message - From: Lukasz Zalewski lu...@dcs.qmul.ac.uk To: Glenn T. Arnold garn...@unrealsolutions.com Cc: samba samba@lists.samba.org Sent: Thursday, August 26, 2010 1:06:13 PM Subject: Re: [Samba] Samba 4 and password policy pwsetting error On 08/26/2010 05:51 PM, Glenn T. Arnold wrote: Hello, When I tried to change the password policy on a samba 4 domain controller I get the following error. r...@server01:/usr/local/samba/lib/python2.6/site-packages/samba/netcmd# ./pwsettings.py --complexity=off Traceback (most recent call last): File ./pwsettings.py, line 25, inmodule import samba.getopt as options ImportError: No module named samba.getopt r...@lcsdc01:/usr/local/samba/lib/python2.6/site-packages/samba/netcmd# What am I doing wrong when running this command? Thanks -Glenn Glenn, run it as follows: /usr/local/samba/bin/net pwsettings your options HTH Luk -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Is winbindd required for Windows 7 clients
Hi, I thought I saw something that resembled the issue you are having previously. Apparently, Vista and Windows 7 require an additional profiles share called [profiles.V2]. Please refer to the following link for more information: http://lists.samba.org/archive/samba-technical/2007-April/052674.html Regards, Arnold Andrews -- Forwarded message -- From: John Drescher dresche...@gmail.com To: r...@gmx.at Date: Sat, 20 Mar 2010 10:29:06 -0400 Subject: Re: [Samba] Is winbindd required for Windows 7 clients On Sat, Mar 20, 2010 at 7:56 AM, r...@gmx.at wrote: I'm having problems to et windows 7 clients running in my samba 3.4.2 PDC. They always load temporary profiles. WinXP clients are working perfectly. Is winbindd with an LDAP backend required for windows 7 clients? I didn't configure it because it was not necessary for winXP. Did you create the profiles.v2 share? John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] printcap cache time using registry config on Ubuntu 9.04 samba 3.3.2
I went back to smb.conf file instead of registry, because the printers were delayed showing when you browsed for the server on the network or if the printer is already connected it would take a while tell the printer would say ready instead of opening. when using the registry config. Has anybody seen this before? Thanks -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: Samba samba@lists.samba.org Sent: Tuesday, January 12, 2010 4:17:47 PM Subject: [Samba] printcap cache time using registry config on Ubuntu 9.04 samba 3.3.2 I have been reading the man page on printcap cache time setting and have some questions. How much load does this put on a server if you have the setting less then 60? The reason I have this setting less than 60 is when I use an all registry samba configuration the printers do not show up if you browse the server or when you goto the Windows XP pc with the printer already connect shows printer status opening, but if you wait the default time period that samba sets for the printcap cache time the printer will eventually show up under the server. When I used the smb.conf file I did not observer this behavior. The reason I am using the all registry conf is to save some memory on the server. I have observed this behavior on another customers server with the same version ubuntu. The printcap cache time setting less than 60 seems to fix the issue or mask the issue enough to be liveable, but I want to make sure that I am not missing anything in configuring samba. Here is my config. [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\global] server string= dos charset=850 unix charset=ISO8859-1 workgroup=MYDOMAIN interfaces=bond0, lo passdb backend=ldapsam:ldap://myserver01.mthcs.net; passwd program=/usr/sbin//smbldap-passwd %u username map=/etc/samba/smbusers syslog=0 time server=Yes socket options=IPTOS_THROUGHPUT TCP_NODELAY add user script=/usr/sbin//smbldap-useradd -m \%u\ delete user script=/usr/sbin//smbldap-userdel \%u\ add group script=/usr/sbin//smbldap-groupadd -p \%g\ delete group script=/usr/sbin//smbldap-groupdel \%g\ add user to group script=/usr/sbin//smbldap-groupmod -m \%u\ \%g\ delete user from group script=/usr/sbin//smbldap-groupmod -x \%u\ \%g\ set primary group script=/usr/sbin//smbldap-usermod -g \%g\ \%u\ add machine script=/usr/sbin//smbldap-useradd -w \%u\ logon script=wkix32.exe logon.kix logon path= logon drive=h: logon home= domain logons=Yes os level=60 preferred master=Yes domain master=No wins server=10.100.0.10 lanman auth=yes ldap admin dn=cn=admin,dc=mthcs,dc=net ldap delete dn=Yes ldap group suffix=ou=Groups ldap idmap suffix=ou=Users ldap machine suffix=ou=Computers ldap passwd sync=Yes ldap suffix=dc=mthcs,dc=net ldap user suffix=ou=Users ldap ssl=no add share command=/usr/bin/modify_samba_config.pl change share command=/usr/bin/modify_samba_config.pl delete share command=/usr/bin/modify_samba_config.pl utmp=Yes idmap uid=1-2 idmap gid=1-2 printing=cups printcap name=cups force printername=Yes default devmode=no wins support=no smb ports=139 usershare max shares=0 log level=0 printcap cache time=30 [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] comment=Printer Drivers path=/var/lib/samba/printers write list=\@Domain Admins\, root [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printers] comment=All Printers path=/var/spool/samba guest ok=Yes printable=Yes browseable=No Thanks -Glenn -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do
I finally fixed my problem by removing samba completely removing samba and reinstalling it. What I discovered is it appears to be an issue with rights. When I reinstalled samba the /var/lib/samba had rights like this. drwxrwxr-x+ 5 root root 4096 2010-01-11 23:27 samba On my original install where the 5 is it was a 6. After the reinstall the rights the rights on /var/lib/samba was reset to 5 and I made Domain Admins have read write execute rights on the folder with setfacl. Now everything is working. -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: Samba samba@lists.samba.org Sent: Thursday, July 16, 2009 4:16:48 PM Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do Dale, Yes, I have the right assigned to my Domain Admins group and I just added it to my account just encase there is a group rights problem. Here is my user id rights. net rpc rights list Domain\myaccount Enter root's password: SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege Thanks for the suggestion! -Glenn - Original Message - From: Dale Schroeder d...@briannassaladdressing.com To: Glenn T. Arnold garn...@unrealsolutions.com Cc: Samba samba@lists.samba.org Sent: Thursday, July 16, 2009 3:58:08 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do Glenn, Have you granted your user Print Operator privileges? net rpc rights grant user SePrintOperatorPrivilege -U root http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html#id2601337 Dale Glenn T. Arnold wrote: Initially when I posted my access problems to print$ I was using the new registry based smb.conf I had my whole configuration in the registry. Now I move my printers and print$ back to the text based smb.conf and I copied the standard ubuntu debian [printers] and [print$] out of the original ubuntu package smb.conf and the only modification that I made was under the [print$] I change read only to no instead of yes. I can not write to the share. Simply renaming print$ section to print I can access the share and write to it with no problems. Any more suggestions? I need to get this resolved. Here is my smb.conf now: [global] # configbackend = registry include = registry [printers] comment = All Printers browseable = no path = /var/spool/samba printable = yes guest ok = no read only = yes create mask = 0700 [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes read only = no guest ok = no Thanks -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba@lists.samba.org Sent: Wednesday, July 8, 2009 1:17:21 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) I did the suggested updates to app armor and this did not solve the problem. -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: Harry Jede walk2...@arcor.de Cc: samba@lists.samba.org Sent: Monday, July 6, 2009 10:05:14 AM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) Well, I did read the fine documentation and the documentation for this current situation it was no help. The reason I am using the registry for the smb.conf is memory savings, instance changes of smb.conf going into effect, and maybe future clustering. Also, I will state if using the samba registry method is not the proper way of doing things then why would the Samba developers add this feature into Samba? ;-) The reason I set the share with the current rights, is to troubleshoot the problem and prove that my file rights were correct. When I setup the print$ share the proper way it is still read-only even though I had writelist in effect. I currently have 1200 pc connect to a samba-ldap servers with the proper setup with no problems. I will investigate the app armor settings Thanks -Glenn - Original Message - From: Harry Jede walk2...@arcor.de To: samba@lists.samba.org Sent: Friday, July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: I just made my print$ share settings to match my print drivers share which should work same This is what you believe. and I still cannot create folders or files on the print$ share, but I can all day on the print drivers share. Would someone explain why this is happening? Here is my share settings. [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] path=/var/lib/samba/printers comment=Printer Drivers read only
[Samba] printcap cache time using registry config on Ubuntu 9.04 samba 3.3.2
I have been reading the man page on printcap cache time setting and have some questions. How much load does this put on a server if you have the setting less then 60? The reason I have this setting less than 60 is when I use an all registry samba configuration the printers do not show up if you browse the server or when you goto the Windows XP pc with the printer already connect shows printer status opening, but if you wait the default time period that samba sets for the printcap cache time the printer will eventually show up under the server. When I used the smb.conf file I did not observer this behavior. The reason I am using the all registry conf is to save some memory on the server. I have observed this behavior on another customers server with the same version ubuntu. The printcap cache time setting less than 60 seems to fix the issue or mask the issue enough to be liveable, but I want to make sure that I am not missing anything in configuring samba. Here is my config. [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\global] server string= dos charset=850 unix charset=ISO8859-1 workgroup=MYDOMAIN interfaces=bond0, lo passdb backend=ldapsam:ldap://myserver01.mthcs.net; passwd program=/usr/sbin//smbldap-passwd %u username map=/etc/samba/smbusers syslog=0 time server=Yes socket options=IPTOS_THROUGHPUT TCP_NODELAY add user script=/usr/sbin//smbldap-useradd -m \%u\ delete user script=/usr/sbin//smbldap-userdel \%u\ add group script=/usr/sbin//smbldap-groupadd -p \%g\ delete group script=/usr/sbin//smbldap-groupdel \%g\ add user to group script=/usr/sbin//smbldap-groupmod -m \%u\ \%g\ delete user from group script=/usr/sbin//smbldap-groupmod -x \%u\ \%g\ set primary group script=/usr/sbin//smbldap-usermod -g \%g\ \%u\ add machine script=/usr/sbin//smbldap-useradd -w \%u\ logon script=wkix32.exe logon.kix logon path= logon drive=h: logon home= domain logons=Yes os level=60 preferred master=Yes domain master=No wins server=10.100.0.10 lanman auth=yes ldap admin dn=cn=admin,dc=mthcs,dc=net ldap delete dn=Yes ldap group suffix=ou=Groups ldap idmap suffix=ou=Users ldap machine suffix=ou=Computers ldap passwd sync=Yes ldap suffix=dc=mthcs,dc=net ldap user suffix=ou=Users ldap ssl=no add share command=/usr/bin/modify_samba_config.pl change share command=/usr/bin/modify_samba_config.pl delete share command=/usr/bin/modify_samba_config.pl utmp=Yes idmap uid=1-2 idmap gid=1-2 printing=cups printcap name=cups force printername=Yes default devmode=no wins support=no smb ports=139 usershare max shares=0 log level=0 printcap cache time=30 [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] comment=Printer Drivers path=/var/lib/samba/printers write list=\@Domain Admins\, root [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printers] comment=All Printers path=/var/spool/samba guest ok=Yes printable=Yes browseable=No Thanks -Glenn -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)
Jeremy, I do not think you got my log files, because I went through the log and I did not see the error you are referencing. When I went through the logs I did see references to print$ in the logs. What is a the proper way to post a log? I got bounced by the Samba List server when I paste the information in a post. I sent the log gziped did not get a bounce message, but I am not sure you got the log files. The file that I sent gzip was named print$level10.tar.gz Here is what I found under the two log files for print$ [2009/07/16 16:33:14, 2] param/loadparm.c:do_section(7498) Processing section [print$] [2009/07/16 16:33:14, 8] param/loadparm.c:add_a_service(5830) add_a_service: Creating snum = 1 for print$ [2009/07/16 16:33:14, 10] param/loadparm.c:hash_a_service(5877) hash_a_service: hashing index 1 for service name print$ -Glenn - Original Message - From: Jeremy Allison j...@samba.org To: Glenn T. Arnold garn...@unrealsolutions.com Cc: Jeremy Allison j...@samba.org, samba@lists.samba.org Sent: Thursday, July 16, 2009 6:01:44 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) On Thu, Jul 16, 2009 at 05:31:21PM -0400, Glenn T. Arnold wrote: Here is the level 10 log files I sent the first one as attachments which look like did not make it through. I don't see any attempts to open the print$ share in these logs. I do see an error : netlogon_creds_server_check: challenge : 14D0450551344C93 calculated: BAB7D8066C1D3129 netlogon_creds_server_check: credentials check failed. _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client WIN7 machine account WIN7$ Is this a Win7 machine ? 3.3.2 doesn't have the fixes for Win7 netlogon credentials in it (hardly suprising as Win7 wasn't even a twinkle in Microsoft's release schedule when 3.3.2 was shipped :-). Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)
Initially when I posted my access problems to print$ I was using the new registry based smb.conf I had my whole configuration in the registry. Now I move my printers and print$ back to the text based smb.conf and I copied the standard ubuntu debian [printers] and [print$] out of the original ubuntu package smb.conf and the only modification that I made was under the [print$] I change read only to no instead of yes. I can not write to the share. Simply renaming print$ section to print I can access the share and write to it with no problems. Any more suggestions? I need to get this resolved. Here is my smb.conf now: [global] # configbackend = registry include = registry [printers] comment = All Printers browseable = no path = /var/spool/samba printable = yes guest ok = no read only = yes create mask = 0700 [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes read only = no guest ok = no Thanks -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba@lists.samba.org Sent: Wednesday, July 8, 2009 1:17:21 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) I did the suggested updates to app armor and this did not solve the problem. -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: Harry Jede walk2...@arcor.de Cc: samba@lists.samba.org Sent: Monday, July 6, 2009 10:05:14 AM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) Well, I did read the fine documentation and the documentation for this current situation it was no help. The reason I am using the registry for the smb.conf is memory savings, instance changes of smb.conf going into effect, and maybe future clustering. Also, I will state if using the samba registry method is not the proper way of doing things then why would the Samba developers add this feature into Samba? ;-) The reason I set the share with the current rights, is to troubleshoot the problem and prove that my file rights were correct. When I setup the print$ share the proper way it is still read-only even though I had writelist in effect. I currently have 1200 pc connect to a samba-ldap servers with the proper setup with no problems. I will investigate the app armor settings Thanks -Glenn - Original Message - From: Harry Jede walk2...@arcor.de To: samba@lists.samba.org Sent: Friday, July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: I just made my print$ share settings to match my print drivers share which should work same This is what you believe. and I still cannot create folders or files on the print$ share, but I can all day on the print drivers share. Would someone explain why this is happening? Here is my share settings. [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] path=/var/lib/samba/printers comment=Printer Drivers read only=no [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] path=/var/lib/samba/printers read only=no Why are you doing this? I think you should reread the excellent Samba docu again. Thanks -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba samba@lists.samba.org Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-) Harry, You did give me an idea though. For grins I just set rights to 0777 even on the extended acls and I still get access denied when trying to upload print drivers. Here is the updated rights on /var/lib/samba/printers. You make your own changes. That's really fine. -- Gruss Harry Jede -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do
Dale, Yes, I have the right assigned to my Domain Admins group and I just added it to my account just encase there is a group rights problem. Here is my user id rights. net rpc rights list Domain\myaccount Enter root's password: SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege Thanks for the suggestion! -Glenn - Original Message - From: Dale Schroeder d...@briannassaladdressing.com To: Glenn T. Arnold garn...@unrealsolutions.com Cc: Samba samba@lists.samba.org Sent: Thursday, July 16, 2009 3:58:08 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do Glenn, Have you granted your user Print Operator privileges? net rpc rights grant user SePrintOperatorPrivilege -U root http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html#id2601337 Dale Glenn T. Arnold wrote: Initially when I posted my access problems to print$ I was using the new registry based smb.conf I had my whole configuration in the registry. Now I move my printers and print$ back to the text based smb.conf and I copied the standard ubuntu debian [printers] and [print$] out of the original ubuntu package smb.conf and the only modification that I made was under the [print$] I change read only to no instead of yes. I can not write to the share. Simply renaming print$ section to print I can access the share and write to it with no problems. Any more suggestions? I need to get this resolved. Here is my smb.conf now: [global] # configbackend = registry include = registry [printers] comment = All Printers browseable = no path = /var/spool/samba printable = yes guest ok = no read only = yes create mask = 0700 [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes read only = no guest ok = no Thanks -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba@lists.samba.org Sent: Wednesday, July 8, 2009 1:17:21 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) I did the suggested updates to app armor and this did not solve the problem. -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: Harry Jede walk2...@arcor.de Cc: samba@lists.samba.org Sent: Monday, July 6, 2009 10:05:14 AM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) Well, I did read the fine documentation and the documentation for this current situation it was no help. The reason I am using the registry for the smb.conf is memory savings, instance changes of smb.conf going into effect, and maybe future clustering. Also, I will state if using the samba registry method is not the proper way of doing things then why would the Samba developers add this feature into Samba? ;-) The reason I set the share with the current rights, is to troubleshoot the problem and prove that my file rights were correct. When I setup the print$ share the proper way it is still read-only even though I had writelist in effect. I currently have 1200 pc connect to a samba-ldap servers with the proper setup with no problems. I will investigate the app armor settings Thanks -Glenn - Original Message - From: Harry Jede walk2...@arcor.de To: samba@lists.samba.org Sent: Friday, July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: I just made my print$ share settings to match my print drivers share which should work same This is what you believe. and I still cannot create folders or files on the print$ share, but I can all day on the print drivers share. Would someone explain why this is happening? Here is my share settings. [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] path=/var/lib/samba/printers comment=Printer Drivers read only=no [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] path=/var/lib/samba/printers read only=no Why are you doing this? I think you should reread the excellent Samba docu again. Thanks -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba samba@lists.samba.org Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-) Harry, You did give me an idea though. For grins I just set rights to 0777 even on the extended acls and I still get access denied when trying to upload print drivers. Here is the updated rights on /var/lib/samba/printers. You make your own changes. That's really fine
Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)
I did the suggested updates to app armor and this did not solve the problem. -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: Harry Jede walk2...@arcor.de Cc: samba@lists.samba.org Sent: Monday, July 6, 2009 10:05:14 AM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) Well, I did read the fine documentation and the documentation for this current situation it was no help. The reason I am using the registry for the smb.conf is memory savings, instance changes of smb.conf going into effect, and maybe future clustering. Also, I will state if using the samba registry method is not the proper way of doing things then why would the Samba developers add this feature into Samba? ;-) The reason I set the share with the current rights, is to troubleshoot the problem and prove that my file rights were correct. When I setup the print$ share the proper way it is still read-only even though I had writelist in effect. I currently have 1200 pc connect to a samba-ldap servers with the proper setup with no problems. I will investigate the app armor settings Thanks -Glenn - Original Message - From: Harry Jede walk2...@arcor.de To: samba@lists.samba.org Sent: Friday, July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: I just made my print$ share settings to match my print drivers share which should work same This is what you believe. and I still cannot create folders or files on the print$ share, but I can all day on the print drivers share. Would someone explain why this is happening? Here is my share settings. [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] path=/var/lib/samba/printers comment=Printer Drivers read only=no [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] path=/var/lib/samba/printers read only=no Why are you doing this? I think you should reread the excellent Samba docu again. Thanks -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba samba@lists.samba.org Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-) Harry, You did give me an idea though. For grins I just set rights to 0777 even on the extended acls and I still get access denied when trying to upload print drivers. Here is the updated rights on /var/lib/samba/printers. You make your own changes. That's really fine. -- Gruss Harry Jede -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)
Well, I did read the fine documentation and the documentation for this current situation it was no help. The reason I am using the registry for the smb.conf is memory savings, instance changes of smb.conf going into effect, and maybe future clustering. Also, I will state if using the samba registry method is not the proper way of doing things then why would the Samba developers add this feature into Samba? ;-) The reason I set the share with the current rights, is to troubleshoot the problem and prove that my file rights were correct. When I setup the print$ share the proper way it is still read-only even though I had writelist in effect. I currently have 1200 pc connect to a samba-ldap servers with the proper setup with no problems. I will investigate the app armor settings Thanks -Glenn - Original Message - From: Harry Jede walk2...@arcor.de To: samba@lists.samba.org Sent: Friday, July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: I just made my print$ share settings to match my print drivers share which should work same This is what you believe. and I still cannot create folders or files on the print$ share, but I can all day on the print drivers share. Would someone explain why this is happening? Here is my share settings. [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] path=/var/lib/samba/printers comment=Printer Drivers read only=no [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] path=/var/lib/samba/printers read only=no Why are you doing this? I think you should reread the excellent Samba docu again. Thanks -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba samba@lists.samba.org Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-) Harry, You did give me an idea though. For grins I just set rights to 0777 even on the extended acls and I still get access denied when trying to upload print drivers. Here is the updated rights on /var/lib/samba/printers. You make your own changes. That's really fine. -- Gruss Harry Jede -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)
I am setting up a OpenLdap PDC with file and print services on Ubuntu Jaunty. Jaunty ships with samba 3.3.2. I configured samba to just use the registry back in which I think is pretty cool! What happend when I use the Add print wizard to add my Windows XP drivers I get the famous unable to install driver access denied message. I can ssh into the box with my user id and create files in the /var/lib/samba/printers folder with no problem. I have gave the Domain Admins and root all privileges to manage the domain see bellow. r...@server01:/var/lib/samba/printers# net rpc rights list root Enter root's password: SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege net rpc rights list Domain Admins Enter root's password: SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege Here is the rights on the /var/lib/samba/printers directory r...@server01:/var/lib/samba# getfacl printers -R # file: printers # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/W32X86 # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/W32ALPHA # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/showtrueconfig # owner: root # group: root user::rw- group::r-x #effective:r-- group:Domain\040Admins:rwx #effective:rw- mask::rw- other::r-- # file: printers/W32MIPS # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/x64 # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/W32PPC # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/IA64 # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/WIN40 # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/COLOR # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x I created a second share called printer drivers to prove I have rights to write to the /var/lib/samba/printers folder from a windows xp. Which I can create and copy files and folders with no problems through the print drivers share, but when I connect to the /var/lib/samba/printers folder through print$ I get access denied. But, I can add workstations to the domain with no problems, I can change security on the printer I am trying to upload a print driver with no problems. If you run smbstatus you can see when I connect with root that it only shows read only rights here is my smbstatus ouptput . Locked files: Pid Uid DenyMode Access R/W Oplock SharePath Name Time -- 12885 0 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 13:13:34 2009 12885 0 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 13:13:34 2009 12471 1 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 13:06:46 2009 12471 1 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 13:06:46 2009 12471 1 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 13:35:05 2009 12471 1 DENY_NONE 0x100081 RDONLY NONE /home/gtarnold . Thu Jul 2 13:39:55 2009 Below is my
Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)
I found in the samba log for my machine the following error: [2009/07/02 13:13:34, 0] groupdb/mapping.c:pdb_create_builtin_alias(802) pdb_create_builtin_alias: Could not add group mapping entry for alias 545 (NT_STATUS_GROUP_EXISTS) Any input on this would be appreciated! I researching this error now. -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba samba@lists.samba.org Sent: Thursday, July 2, 2009 2:09:15 PM GMT -05:00 US/Canada Eastern Subject: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-) I am setting up a OpenLdap PDC with file and print services on Ubuntu Jaunty. Jaunty ships with samba 3.3.2. I configured samba to just use the registry back in which I think is pretty cool! What happend when I use the Add print wizard to add my Windows XP drivers I get the famous unable to install driver access denied message. I can ssh into the box with my user id and create files in the /var/lib/samba/printers folder with no problem. I have gave the Domain Admins and root all privileges to manage the domain see bellow. r...@server01:/var/lib/samba/printers# net rpc rights list root Enter root's password: SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege net rpc rights list Domain Admins Enter root's password: SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege Here is the rights on the /var/lib/samba/printers directory r...@server01:/var/lib/samba# getfacl printers -R # file: printers # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/W32X86 # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/W32ALPHA # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/showtrueconfig # owner: root # group: root user::rw- group::r-x #effective:r-- group:Domain\040Admins:rwx #effective:rw- mask::rw- other::r-- # file: printers/W32MIPS # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/x64 # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/W32PPC # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/IA64 # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/WIN40 # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x # file: printers/COLOR # owner: root # group: Domain\040Admins user::rwx group::r-x group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x I created a second share called printer drivers to prove I have rights to write to the /var/lib/samba/printers folder from a windows xp. Which I can create and copy files and folders with no problems through the print drivers share, but when I connect to the /var/lib/samba/printers folder through print$ I get access denied. But, I can add workstations to the domain with no problems, I can change security on the printer I am trying to upload a print driver with no problems. If you run smbstatus you can see when I connect with root that it only shows read only rights here is my smbstatus ouptput . Locked files: Pid Uid DenyMode Access R/W Oplock SharePath Name Time
Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)
Harry, You did give me an idea though. For grins I just set rights to 0777 even on the extended acls and I still get access denied when trying to upload print drivers. Here is the updated rights on /var/lib/samba/printers. r...@server01:/var/lib/samba# getfacl printers/* # file: printers/COLOR # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/IA64 # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/showtrueconfig # owner: root # group: root user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx # file: printers/W32ALPHA # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/W32MIPS # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/W32PPC # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/W32X86 # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/WIN40 # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/x64 # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx r...@server01:/var/lib/samba# -Glenn - Original Message - From: Harry Jede walk2...@arcor.de To: samba@lists.samba.org Sent: Thursday , July 2, 2009 2:53:41 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) On Donnerstag, 2. Juli 2009 wrote Glenn T. Arnold: Here is the rights on the /var/lib/samba/printers directory r...@server01:/var/lib/samba# getfacl printers -R # file: printers # owner: root # group: Domain\040Admins user::rwx group::r-x # grant Domain\040Admins write access group::rwx group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x -- Harry Jede -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba samba@lists.samba.org Sent: Thursday, July 2, 2009 2:49:27 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-) I found in the samba log for my machine the following error: [2009/07/02 13:13:34, 0] groupdb/mapping.c:pdb_create_builtin_alias(802) pdb_create_builtin_alias: Could not add group mapping entry for alias 545 (NT_STATUS_GROUP_EXISTS) Any input on this would be appreciated! I researching this error now. -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba samba@lists.samba.org Sent: Thursday, July 2, 2009 2:09:15 PM GMT -05:00 US/Canada Eastern Subject: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-) I am setting up a OpenLdap PDC with file and print services on Ubuntu Jaunty. Jaunty ships with samba 3.3.2. I configured samba to just use the registry back in which I think is pretty cool! What happend when I use the Add print wizard to add my Windows XP drivers I get the famous unable to install driver access denied message. I can ssh into the box with my user id and create files in the /var/lib/samba/printers folder with no problem. I have gave the Domain Admins and root all privileges to manage the domain see bellow. r...@server01:/var/lib/samba/printers# net rpc rights list root Enter root's password: SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege
Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)
I just made my print$ share settings to match my print drivers share which should work same and I still cannot create folders or files on the print$ share, but I can all day on the print drivers share. Would someone explain why this is happening? Here is my share settings. [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] path=/var/lib/samba/printers comment=Printer Drivers read only=no [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] path=/var/lib/samba/printers read only=no Thanks -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba samba@lists.samba.org Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-) Harry, You did give me an idea though. For grins I just set rights to 0777 even on the extended acls and I still get access denied when trying to upload print drivers. Here is the updated rights on /var/lib/samba/printers. r...@server01:/var/lib/samba# getfacl printers/* # file: printers/COLOR # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/IA64 # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/showtrueconfig # owner: root # group: root user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx # file: printers/W32ALPHA # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/W32MIPS # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/W32PPC # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/W32X86 # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/WIN40 # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx # file: printers/x64 # owner: root # group: Domain\040Admins user::rwx group::rwx group:Domain\040Admins:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:Domain\040Admins:rwx default:mask::rwx default:other::rwx r...@server01:/var/lib/samba# -Glenn - Original Message - From: Harry Jede walk2...@arcor.de To: samba@lists.samba.org Sent: Thursday , July 2, 2009 2:53:41 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) On Donnerstag, 2. Juli 2009 wrote Glenn T. Arnold: Here is the rights on the /var/lib/samba/printers directory r...@server01:/var/lib/samba# getfacl printers -R # file: printers # owner: root # group: Domain\040Admins user::rwx group::r-x # grant Domain\040Admins write access group::rwx group:Domain\040Admins:rwx mask::rwx other::r-x default:user::rwx default:group::r-x default:group:Domain\040Admins:rwx default:mask::rwx default:other::r-x -- Harry Jede -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba samba@lists.samba.org Sent: Thursday, July 2, 2009 2:49:27 PM GMT -05:00 US/Canada Eastern Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-) I found in the samba log for my machine the following error: [2009/07/02 13:13:34, 0] groupdb/mapping.c:pdb_create_builtin_alias(802) pdb_create_builtin_alias: Could not add group mapping entry for alias 545 (NT_STATUS_GROUP_EXISTS) Any input on this would be appreciated! I researching this error now. -Glenn - Original Message - From: Glenn T. Arnold garn...@unrealsolutions.com To: samba samba@lists.samba.org Sent: Thursday, July 2, 2009 2:09:15 PM GMT -05:00 US/Canada Eastern Subject
RE: [Samba] HP Deskjet 6940 and 6988
Thanks Mark, I will take a look at that option. -Glenn -Original Message- From: Mark Gannon [mailto:[EMAIL PROTECTED] Sent: Monday, March 17, 2008 1:35 AM To: samba@lists.samba.org Subject: Re: [Samba] HP Deskjet 6940 and 6988 Glenn, You might consider changing your printing architecture so that instead of using the Windows print driver for the HP Deskjet, you create the printer in Linux using the standard CUPS procedures for that printer and then share the standard Postscript driver on the samba share. In this configuration, you avoid any problems with the HP Deskjet driver for windows. My experience is that the HPIJS driver bundled with most versions of Linux is quite good. A pretty good description of how to make this configuration work can be found at: http://www.enterprisenetworkingplanet.com/netsysm/article.php/3621876 Regards, Mark Gannon -- Why dont you write books people can read? Nora Joyce, to her husband James -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] HP Deskjet 6940 and 6988
Michael, Yes, I am trying to use point an print. I will look at the net command to set printer rights. Thanks -Glenn -Original Message- From: Michael Heydon [mailto:[EMAIL PROTECTED] Sent: Monday, March 17, 2008 2:15 AM To: Glenn Arnold Cc: samba@lists.samba.org Subject: Re: [Samba] HP Deskjet 6940 and 6988 Glenn Arnold wrote: I tried Centos 5.1 samba version 3.0.25b with my samba smb.conf and I still get the General Protection fault when I click on the Paper\Quality tab under Print Preferences on the HP Deskjet 6940. Here is the config that I used on Ubuntu and Centos. I just want to make sure that I have everything configured right with samba. Will samba 3.2 fix this issue? General Protection fault is an actual crash, short of (somehow) overwriting memory, it is not possible for one process to cause another one to crash. Crashes occur because the program that crashed, failed. If the Windows driver has a bug then that isn't something that can be fixed by samba (samba might impliment a work around by not doing something that induces the crash, but the flaw in the crashing program will still exist it will just be hidden). Are you using point and print? Is the user on the client a local administrator? snip printer admin = @lpadmin garnold snip This is depreciated, have you granted permissions using net? *Michael Heydon - IT Administrator * [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] HP Deskjet 6940 and 6988
Roel, Do you know if Microsoft has a driver for HP Deskjet 6940? The only OS that I know of new of too have this driver is probably Vista. Eek! Probably would not work with XP and W2k. Thanks -Glenn -Original Message- From: Roel van Meer [mailto:[EMAIL PROTECTED] Sent: Monday, March 17, 2008 4:58 AM To: samba Subject: Re: [Samba] HP Deskjet 6940 and 6988 Adam Tauno Williams writes: issue is when my users try to print multiple copies they can not through the samba server. Yep, never been able to make multiple copies work. Quite frustrating. In our experience the drivers provided by HP do have this problem, but the drivers which are bundled with various windowsen usually don't; these drivers usually work without problems. You might try those. Regards, roel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] HP Deskjet 6940 and 6988
Hello all, Does anybody share HP Deskjet 6940 and HP Deskjet 6988 off a samba server successfully? I currently using Samba versions 3.0.24 Ubuntu Fiesty Fawn in my production environment. I also the issue occurs on my laptop which is running Gutsy Gibbon 7.10 which uses Samba 3.0.26. The issue is when my users try to print multiple copies they can not through the samba server. These printers are hooked directly to the network and cups is printing directly to the print through raw queue and using sockets. When I did further investigation I found with the driver initialized if I click on printing preferences and click Paper\Quality Tab I get the following message Function address 0x77c47efe caused a protection fault. (exception code 0xc0005) The application property sheet page(s) may not function properly. I tried adding the driver with default devmode = yes which I have had to use in the past to get some HP Deskjet printers to work. Here is smb.conf for my Gutsy setup. Any ideas on how to troubleshoot this further? I will try to install 3.0.28 with a vm session of Hardy ubuntu and see if I get the same results. Thanks -Glenn [global] ## Browsing/Identification ### workgroup = HACKERVILLE server string = %h server (Samba, Ubuntu) log file = /var/log/samba/log.%m # Put a capping on the size of the log files (in Kb). max log size = 1000 # If you want Samba to only log through syslog then set the following # parameter to 'yes'. ; syslog only = no syslog = 0 panic action = /usr/share/samba/panic-action %d security = user encrypt passwords = true passdb backend = tdbsam obey pam restrictions = yes ; guest account = nobody invalid users = root load printers = yes printcap name = cups printer admin = @lpadmin garnold Misc # Using the following line enables you to customise your configuration # on a per machine basis. The %m gets replaced with the netbios name # of the machine that is connecting ; include = /home/samba/etc/smb.conf.%m username map = /etc/samba/smbusers [homes] comment = Home Directories browseable = no valid users = %S writable = yes create mask = 0770 [printers] comment = All Printers browseable = no path = /var/spool/samba printable = yes public = no writable = no create mode = 0700 [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes read only = yes default devmode = yes ; guest ok = no # Uncomment to allow remote administration of Windows print drivers. # Replace 'ntadmin' with the name of the group your admin users are # members of. write list = root, garnold, @ntadmin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] HP Deskjet 6940 and 6988
By, to work you mean they don't print at all? Ours print just fine except from certain versions of Acrobat Reader. Just no multiple copies and the advanced features tab of the printer dialog is inaccessible. However, neither of those features work with most [all?] printers in a Samba/CUPS rig. Yes, the printers print fine, just can not print multiple pages. What is interesting with Adobe reader 8.1 opening a pdf document we can print multiple pages. Yep, but I think *all* print drivers crash in such a manner when used with a Samba printer server. At least all the HP drivers crash when accessing advanced features, as do the drivers for Lanier, Ricoh, and Toshiba document centers. When I have problems like this it is usually with Inkjet printers. I have had success with Ricoh and Xerox multifunction copiers. Since samba you have manual setup the copier features to get the copiers to work. For must part I have had success Canon copiers except send print jobs to the mailbox on copiers. I have tried Hardy Heron 8.04 which has samba 3.0.28 same result. Well time to try another distro of Linux. I will download Centos see if it does the same thing. Thanks -Glenn -Original Message- From: Adam Tauno Williams [mailto:[EMAIL PROTECTED] Sent: Sunday, March 16, 2008 8:40 PM To: samba Subject: Re: [Samba] HP Deskjet 6940 and 6988 Does anybody share HP Deskjet 6940 and HP Deskjet 6988 off a samba server successfully? Yes, we have over a dozen HP6940s shared from a Samba/CUPS print server. issue is when my users try to print multiple copies they can not through the samba server. Yep, never been able to make multiple copies work. Quite frustrating. These printers are hooked directly to the network and cups is printing directly to the print through raw queue and using sockets. Yep, same here. When I did further investigation I found with the driver initialized if I click on printing preferences and click Paper\Quality Tab I get the following message Function address 0x77c47efe caused a protection fault. (exception code 0xc0005) The application property sheet page(s) may not function properly. Yep, but I think *all* print drivers crash in such a manner when used with a Samba printer server. At least all the HP drivers crash when accessing advanced features, as do the drivers for Lanier, Ricoh, and Toshiba document centers. I tried adding the driver with default devmode = yes which I have had to use in the past to get some HP Deskjet printers to work. No, that doesn't help. By, to work you mean they don't print at all? Ours print just fine except from certain versions of Acrobat Reader. Just no multiple copies and the advanced features tab of the printer dialog is inaccessible. However, neither of those features work with most [all?] printers in a Samba/CUPS rig. There have been innumerable posts around the internet about the multiple copies issues. I've never found a resolution. I will try to install 3.0.28 with a vm session of Hardy ubuntu and see if I get the same results. You will. -- Adam Tauno Williams, Network Systems Administrator Consultant - http://www.whitemiceconsulting.com Developer - http://www.opengroupware.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] HP Deskjet 6940 and 6988
I have had no problems with HP Laser printers or Lexmark Laser printers with the point-n-print on Samba. The only time I have had problems has been HP Deskjet or Business jet printers and Canon copiers detecting the features of the copier. On the Canon Copier I have worked out most of the problems with manual setting the options of the copier on the servers. -Glenn -Original Message- From: Michael Heydon [mailto:[EMAIL PROTECTED] Sent: Sunday, March 16, 2008 9:28 PM To: [EMAIL PROTECTED] Cc: samba Subject: Re: [Samba] HP Deskjet 6940 and 6988 Adam Tauno Williams wrote: Does anybody share HP Deskjet 6940 and HP Deskjet 6988 off a samba server successfully? snip When I did further investigation I found with the driver initialized if I click on printing preferences and click Paper\Quality Tab I get the following message Function address 0x77c47efe caused a protection fault. (exception code 0xc0005) The application property sheet page(s) may not function properly. Yep, but I think *all* print drivers crash in such a manner when used with a Samba printer server. At least all the HP drivers crash when accessing advanced features, as do the drivers for Lanier, Ricoh, and Toshiba document centers. snip This certainly isn't the case here. We have about a dozen Lexmark printers, about half a dozen HP LJ2430s and LJ4250s and one Konica copier. All of them work fine, I can access all tabs on the driver settings (the HP ones are a little slow to come up but they do work). Are you using point-n-print or are you loading drivers onto each machine? *Michael Heydon - IT Administrator * [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] HP Deskjet 6940 and 6988
I tried Centos 5.1 samba version 3.0.25b with my samba smb.conf and I still get the General Protection fault when I click on the Paper\Quality tab under Print Preferences on the HP Deskjet 6940. Here is the config that I used on Ubuntu and Centos. I just want to make sure that I have everything configured right with samba. Will samba 3.2 fix this issue? -Glenn [global] ## Browsing/Identification ### workgroup = HACKERVILLE server string = %h server (Samba, Ubuntu) log file = /var/log/samba/log.%m # Put a capping on the size of the log files (in Kb). max log size = 1000 # If you want Samba to only log through syslog then set the following # parameter to 'yes'. ; syslog only = no syslog = 0 panic action = /usr/share/samba/panic-action %d security = user encrypt passwords = true passdb backend = tdbsam obey pam restrictions = yes ; guest account = nobody invalid users = root load printers = yes printcap name = cups printer admin = @lpadmin garnold Misc # Using the following line enables you to customise your configuration # on a per machine basis. The %m gets replaced with the netbios name # of the machine that is connecting ; include = /home/samba/etc/smb.conf.%m username map = /etc/samba/smbusers [homes] comment = Home Directories browseable = no valid users = %S writable = yes create mask = 0770 [printers] comment = All Printers browseable = no path = /var/spool/samba printable = yes public = no writable = no create mode = 0700 [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes read only = yes default devmode = yes ; guest ok = no # Uncomment to allow remote administration of Windows print drivers. # Replace 'ntadmin' with the name of the group your admin users are # members of. write list = root, garnold, @ntadmin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Add printer in cups but is not being shared by samba
I added a printer to cups and samba is not sharing the printer. I have twenty some printers shared with no problems until this one. How long can a printer name be in samba? How long a printer name can be cups. I think in windows it is 31 characters in windows. The printer name is 18 characters long. Any ideas? Thanks -Glenn -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Delete printer from cups but will not delete from samba
I am running ubuntu feisty 64-bit samba 3.0.24 and I deleted a printer from cups. In the past when I deleted the printer in cups it would delete it in samba. For some reason the printer did not get deleted in samba and when you browse the server you still see the printer. I did a net rpc printer and the deleted printer still showed up shared on the server. How do you delete a printer that still in samba, but was deleted from cups? Do I need tdbedit to remove the printer? If I need tdbedit do I have to compile samba to create this tool? I could not find it ubuntu's binary version. Thanks in advance -Glenn -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] AD passwd change
- Message from Azher Amin [EMAIL PROTECTED] on Tue, 09 Jan 2007 16:19:08 +0500 - Is there any cgi script for the smbpasswd, so that i can change the password from the web. Isn't that functionality built into SWAT? The client/server password management section allows the entry of a remote machine. Hope that helps. Regards, Arnold Andrews Sr. Systems Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Usrmgr cannot add groups with ldap backend
I get the following errors when I try to remove group from a user with usrmgr smb_create_group: Running the command `/usr/local/sbin/smbldap-groupadd -p 'test'' gave 111 [2006/10/20 19:53:29, 0] groupdb/mapping.c:smb_delete_user_group(1087) smb_delete_user_group: Running the command `/usr/local/sbin/smbldap-groupmod -x hmiller' 'hsstaff'' gave 2 I am running redhat es3 with samba 3.0.22 with ldap backend. Any ideas? Here is the Global part of my smb.conf Thanks in advance! -Glenn [global] interfaces = eth* netbios name = Server workgroup = Domain server string = security = user os level = 64 domain master = yes local master = yes preferred master = yes time server = yes ldappasswd sync =yes passdb backend = ldapsam:ldap://server.somewhere.com ldap admin dn = cn=samba,ou=DSA,dc=somewhere,dc=com #ldap admin dn = cn=Manager,dc=somewhere,dc=com ldap suffix = dc=somewhere,dc=com ldap group suffix = ou=Groups ldap user suffix = ou=Users ldap machine suffix = ou=Computers ldap idmap suffix = ou=Users ldap ssl = no unix extensions = yes encrypt passwords = yes domain logons = yes logon script = logon.bat logon drive = H: logon home = \\%L\%U logon path = socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins support = no wins server = 10.100.0.10 #veto files = /*.eml/*.nws/ lanman auth = yes add user script = /usr/local/sbin/smbldap-useradd -m '%u' delete user script = /usr/local/sbin/smbldap-userdel '%u' ldap delete dn = yes add group script = /usr/local/sbin/smbldap-groupadd -p '%g' delete group script = /usr/local/sbin/smbldap-groupdel '%g' add machine script = /usr/local/sbin/smbldap-useradd -w '%u' add user to group script = /usr/local/sbin/smbldap-groupmod -m '%u' '%g' delete user from group script = /usr/local/sbin/smbldap-groupmod -x %u' '%g' set primary group script = /usr/local/sbin/smbldap-usermod -g '%g' '%u' dos charset = 850 unix charset = ISO8859-1 oplocks = yes load printers = yes ;default devmode = yes printing = cups force printername = yes idmap uid = 15000-2 idmap gid = 15000-2 winbind separator = - winbind use default domain = No enable privileges = yes eventlog list = Application System Security SyslogLinux log level = 1 admin users =@Domain Admins ;map acl inherit = Yes -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] slapd.conf samba schema question
I am running samba 3.0.22 on RHES 3.0 and I currently have slapd.conf configured to use include /etc/openldap/schema/samba.schema do I need to change the schema to samba3.schema? Why I ask this I have bought Samba 3 by example and the example for Suse Linuxhas use the samba3.schema. Logical I would think I would want to do this. Should I update the slapd.conf to include samba3.schema? Do I need to do anything to my LDAP database like reindex to the updated samba3.schema? Without this samba3.schema is this why I am having problems changing passwords from windows workstations and User Manager for Domains not able to update user accounts in my Samba Domain? Thanks for your help in Advance! -Glenn -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] User Manger for Domains can not reset user password.
I am running RHES 3.0 with Samba 3.0.22 and Open Ldap 2.1.22 ldapsam and when I use User Manager for Domains and try to change a user password as root or any other Domain Admin account I get the following error: The following error occurred changing the properties of the user jcampbell. The group name could not be found. When you look at groups under user manager Domain Users is set default group. Any ideas? Thanks -Glenn smb.conf [global] interfaces = eth* netbios name = SERVER workgroup = EXAMPLE server string = security = user os level = 64 domain master = yes local master = yes preferred master = yes time server = yes #passdb backend = tdbsam ldappasswd sync =yes passdb backend = ldapsam:ldap://127.0.0.1/ ldap admin dn = cn=samba,ou=DSA,dc=example,dc=net #ldap admin dn = cn=Manager,dc=example,dc=net ldap suffix = dc=example,dc=net ldap group suffix = ou=Groups ldap user suffix = ou=Users ldap machine suffix = ou=Computers ldap ssl = no unix extensions = yes encrypt passwords = yes domain logons = yes logon script = logon.bat logon drive = H: logon home = \\%L\%U logon path = socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/local/sbin/smbldap-useradd -m '%u' delete user script = /usr/local/sbin/smbldap-userdel '%u' add group script = /usr/local/sbin/smbldap-groupadd -p '%g' delete group script = /usr/local/sbin/smbldap-groupdel '%g' add user to group script = /usr/local/sbin/smbldap-groupmod -m '%u' '%g' delete user from group script = /usr/local/sbin/smbldap-usermod -g '%g' '%u' set primary group script = /usr/local/sbin/smbldap-usermod -g '%g' '%u' add machine script = /usr/local/sbin/smbldap-useradd -w '%u' logon script = logon.bat logon path = logon drive = H: logon home = \\%L\%U domain logons = Yes os level = 64 preferred master = Yes domain master = Yes wins server = 10.100.0.10 ldap admin dn = cn=samba,ou=DSA,dc=example,dc=net ldap delete dn = Yes ldap group suffix = ou=Groups ldap machine suffix = ou=Computers ldap passwd sync = Yes ldap suffix = dc=example,dc=net ldap ssl = no ldap user suffix = ou=Users idmap uid = 15000-2 idmap gid = 15000-2 winbind separator = - force printername = Yes [netlogon] path = /smbsrvr/netlogon/scripts write list = Domain, Admins guest ok = Yes browseable = No [homes] comment = Home Directories force group = Domain Admins read only = No create mask = 0770 force create mode = 0770 directory mask = 0770 force directory mode = 0770 veto files = /*.mp3/*.exe/*.com/*.js/*.bat/*.cmd/*.wsh/*.scr/*.zip/.*/testfile/ browseable = No [C$] path = /smbsrvr valid users = @Domain Admins force group = Domain Admins read only = No create mask = 0770 directory mask = 0770 force directory mode = 0770 veto files = /fnksvc32.exe/testfile/ [tftpboot$] path = /tftpboot valid users = @Domain Admins force group = root read only = No create mask = 0775 directory mask = 0775 force directory mode = 0775 [Apps] path = /smbsrvr/Apps read only = No create mask = 0770 force create mode = 0770 directory mask = 0770 force directory mode = 0770 inherit permissions = Yes veto files = /fnksvc32.exe/testfile/ [Students] path = /smbsrvr/Students force group = hsstudents read only = No create mask = 0770 force create mode = 0770 directory mask = 0770 force directory mode = 0770 veto files = /fnksvc32.exe/testfile/ [AdminTools$] path = /smbsrvr/AdminTools read only = No veto files = /fnksvc32.exe/testfile/ [printers] comment = All Printers path = /var/spool/samba guest ok = Yes printable = Yes default devmode = Yes veto files = /fnksvc32.exe/testfile/ browseable = No [print$] comment = Printer Drivers path = /var/lib/samba/drivers write list = root, @@Domain Admins read only = No veto files = /fnksvc32.exe/testfile/ [home$] path = /home valid users = Domain Admins, +ntadmins, +root, @MTHS-Domain Admins, @ntadmin, @root write list = +ntadmin, @MTHS-Domain Admins, @ntadmin, @root force group = Domain Admins read only = No create mask = 0770 force create mode = 0770 directory mask = 0770 force directory mode = 0770 veto files = /fnksvc32.exe/testfile/ [ezaudit] path = /smbsrvr/ezaudit force group = Domain Users read only = No
Re: [Samba] Adding a windows user to unix group?
18 Aug 2005 13:51:15 +0100 - To: samba@lists.samba.org Subject: [Samba] Adding a windows user to unix group? Hi All, Running version 3.0.14a on freebsd 5.4. configured as a member server of a 2k domain. the directory i need access to is for public websites /usr/local/www/sites and permissions are drwxr-xr-x www www. A single share is configured as below: # FTP share [ftp_share] comment = FTP Share path = /usr/local/www/sites valid users = domain\user browseable = no read only = no writable = yes printable = no public = no write list = domain\user This share is to allow ftp access from a central ftp server which serves several webservers (all windows until now) via a mysql database and UNC paths. I can access the folder but have no permissions in it. I believe i need to add the windows user account the the unix www group but have no idea how to do it. This is my first experience of samba and all went really well...this is the last thing to sort! Paul Just create a group mapping between one of the Windows groups (or create a new windows domain group) using net groupmap functions. Then you'll need to add the Unix usernames of your Samba users you want to give access to the Unix group. Check out: http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html Hope that helps, Arnold Andrews Systems Sr. Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] uid + gid mapping problem
Hi everyone, Ok I can log in locally as a windows user. I can su to a windows user as well. But once I'm there: [EMAIL PROTECTED] ~]# su mluich bash-3.00$ whoami whoami: cannot find username for UID 16777253 bash-3.00$ ls -l total 4 drwxr-xr-x 2 16777253 16777218 4096 Jul 28 16:21 Desktop -rwxr--r-- 1 16777253 167772180 Jul 28 15:31 test.txt Getent passwd returns: mluich:*:16777253:16777218:Mike Luich:/home/mluich:/bin/bash I found this in the passwd(4) man page (Solaris 8): The maximum value of the uid and gid fields is 2147483647. To maximize interoperability and compatibility, administra- tors are recommended to assign users a range of UIDs and GIDs below 6 where possible. Perhaps you should try to set your UIDs and GIDs below 6? Maybe whoami isn't capable of mapping UIDs/GIDs higher than 6? idmap uid = 1-5 idmap gid = 1-5 Looks like these settings are for an LDAP backend, to give a range of IDs to be allocated for use by Samba in mapping Unix IDs to NT SIDs? Why did you set these? Just a few thoughts (that might help). Regards, Arnold Andrews Sr. Systems Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba ACL and '+' on a 'ls - l'
Dear Guys, I have noticed that one of our domain users folder in /var/lib/samba/profiles has a '+' on the end of their username folder and all the files in their profile too. I know this is to do with ACL's and I know Samba can translate Windows ACL's to filesystem acls, but where can I find out where/how they are getting created and remove them. They should be know different then anyone else. Although, all the users are setup as Admins on their own computer, but noone else seems to be picking up or have a '+' sign on a 'ls -l' I can only speak for what the commands to handle ACL's are for Solaris; getfacl (to see what the current settings on a file or directory are, and setfacl (to set ACL settings). If those aren't the same commands used on your Samba server's OS to handle ACL settings, try using apropos acl to see a list of man pages regarding acl's. Anyway, I recently found myself wanting to remove ACL settings acquired from granting permissions through windows myself. I found that I had to use setfacl to replace the ACL entries and reset them to standard type entries in order to lose the + sign (signifying that there are additional ACL entries on a file). Setting the permissions on a file or directory with chmod alone is not enough to clear the ACLs. Example: I have a file that has ACL's set: % ls -l acl_test -rw-r--r--+ 1 user1usergroup 0 Jul 28 08:31 acl_test % getfacl acl_test # file: acl_test # owner: user1 # group: DGROUP user::rw- user:user2:rwx#effective:rwx group::r-- #effective:r-- mask:rwx other:r-- ( In the example above, the ACL's shown grant user2 full access to the file, even though user2 is not the owner. Clearing the permissions from the file does not (completely) remove the ACL setting. % chmod 000 acl_test % ls -l acl_test --+ 1 user1usergroup 0 Jul 28 08:31 acl_test To get rid of the + sign altogether, use setfacl with the -s option to reset the permission: % setfacl -s u::rw-,g::r--,o:r-- acl_test % ls -l acl_test -rw-r--r-- 1 user1usergroup 0 Jul 28 08:31 acl_test As you can see, the ACL's have been replaced by default entries (as if chmod was the only thing that ever touched it). Hope that helps. Regards, Arnold Andrews Sr. Systems Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE : [Samba] Executable 'username map'
- Message from François LAUPRETRE [EMAIL PROTECTED] com on Thu, 21 Jul 2005 16:29:36 + (UTC) - To: samba@lists.samba.org Subject: [Samba] Executable 'username map' Hi, I currently manage an environment where my Unix and Windows usernames are defined, but different. So, I must use a username map. But I have several Samba servers (one for each NFS package) and I must maintain all these username map files. As we want everybody to map the same way on every Samba servers in a NIS domain, we added the 'Windows user' information to the NIS 'passwd' map (by adding a string like 'win=xxx' to the gecos field). Now, as the only way for Samba to get this mapping information is through a flat file, I have to push this file onto every samba server every time I build the NIS passwd map. And, in order to do that, I must maintain a listof these servers on the NIS master server (assuming a standard path for storing this file on each samba server). Seems like a lot of trouble to maintain all those separate username map files. Why not just use a single copy of the file and nfs mount it via automounting so that all your Samba servers read the same file, then you only have to update a single file and all your Samba servers see the changes immediately. No push necessary. Regards, Arnold Andrews Sr. Systems Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] can see XP shares from Linux but not from an XP box on other NIC
[EMAIL PROTECTED] wrote on 07/21/2005 08:42:54 AM: My network:- DSL 4 port router 1 port is my Linux box eth1 and other 3 ports are used by others all on subnet 192.168.1.x DHCP. Off my linux box eth0 I have an XP machine diff subnet 192.168.3.x I can see + access shares on the other peoples XP machines - no probs there BUT my XP box can see BUT NOT access shares on the other peoples' machines? Is this a networking thing or does Samba need special set up to allow different subnets? Sounds like you've got firewall issues going on. Do you possibly have your Internet Connection Firewall enabled? Check under Control Panel - Network Connections - Local Area Connection (properties). Go to the advanced tab and make sure that the firewall is not checked. Hope that helps, Arnold Andrews Sr. Systems Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] i can't delete groupmap
[EMAIL PROTECTED] wrote on 07/21/2005 09:19:03 AM: Hi, i can't delete groupmap in my samba 3.0.12: # net groupmap list Domain Users (S-1-5-21-3984604316-2900431957-2958281145-513) - products Domain Admins (S-1-5-21-3984604316-2900431957-2958281145-513) - man Domain Admins (S-1-5-21-3984604316-2900431957-2958281145-512) - domadmin Domain Users (S-1-5-21-3984604316-2900431957-2958281145-513) - domuser # net groupmap delete ntgroup=Domain Users NT Group Domain Users doesn't exist in mapping DB Unable to resolve group Domain Users to a SID # net groupmap delete ntgroup=Domain Users sid=S-1-5-21-3984604316-2900431957-2958281145-513 [2005/07/21 16:14:24, 0] passdb/pdb_ldap.c:ldapsam_delete_entry(276) ldapsam_delete_entry: Entry must exist exactly once! try this: net groupmap delete sid=S-1-5-21-3984604316-2900431957-2958281145-513 I'm guessing that you used net groupmap add instead of net groupmap modify, so you wound up with multiple group mappings using the same ntgroup name. Regards, Arnold Andrews Sr. Systems Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem uploading printer driver in Samba 3.0.14a
Hi, I recently upgraded my Samba server from 3.0.2a to 3.0.14a running on Solaris 8. I made the assumption that all my printer definitions would be retained including driver information/files as long as the share containing all the files was still there. Although I still see the actual printers in the list of printers, it seems that they no longer know what drivers they use. When I attempt to upload the drivers now, it just seems to hang and doesn't ever do anything. Any help would be greatly appreciated. Does anybody know what changed between 3.0.2a and 3.0.14a that might explain why it worked before but doesn't work now? My smb.conf # Global parameters [global] workgroup = ENGMCAD netbios aliases = hydra1 passdb backend = tdbsam username map = /usr/local/lib/samba/smbusers log file = /var/log/samba_log.%m logon script = logon.cmd logon path = \\%L\profiles\%U logon drive = K: logon home = \\%L\home domain logons = Yes os level = 66 preferred master = Yes domain master = Yes wins support = Yes ldap ssl = no printer admin = @ntadmins create mask = 0755 [print$] path = /usr/local/samba/printers write list = @ntadmins, root Permissions on the print$ share directory and all subdirectories are set at 775, owned by root and the group set to ntadmins Best regards, Arnold Andrews Sr. Systems Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem uploading printer driver in Samba 3.0.14a
Additional information... It seems to hang when tried from XP Pro, but seems to work when done from Win2K. I left the XP attempt running (hanged) and went to lunch and came back. It appeared to have finally done something when I returned to check on it over an hour later. I sure would like to know what is causing it to hang on XP, but for now, I guess my workaround is to use Win2K to upload the drivers. [EMAIL PROTECTED] wrote on 07/20/2005 12:02:04 PM: Hi, I recently upgraded my Samba server from 3.0.2a to 3.0.14a running on Solaris 8. I made the assumption that all my printer definitions would be retained including driver information/files as long as the share containing all the files was still there. Although I still see the actual printers in the list of printers, it seems that they no longer know what drivers they use. When I attempt to upload the drivers now, it just seems to hang and doesn't ever do anything. Any help would be greatly appreciated. Does anybody know what changed between 3.0.2a and 3.0.14a that might explain why it worked before but doesn't work now? My smb.conf # Global parameters [global] workgroup = ENGMCAD netbios aliases = hydra1 passdb backend = tdbsam username map = /usr/local/lib/samba/smbusers log file = /var/log/samba_log.%m logon script = logon.cmd logon path = \\%L\profiles\%U logon drive = K: logon home = \\%L\home domain logons = Yes os level = 66 preferred master = Yes domain master = Yes wins support = Yes ldap ssl = no printer admin = @ntadmins create mask = 0755 [print$] path = /usr/local/samba/printers write list = @ntadmins, root Permissions on the print$ share directory and all subdirectories are set at 775, owned by root and the group set to ntadmins Best regards, Arnold Andrews Sr. Systems Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba stops working after moving machines
A client changed offices. Upon connecting the machines at the new location samba is not working. In particular I am getting an error: Workgroup is not accessible. You may not have permissions to use this network resource. Network path is not found. The only difference between the previous location and the current is that they have not gotten internet connection in the new location yet. Other than that all the equipment is the same. Any suggestions would be greatly appreciated. It sounds like your client's new office location is now on a different subnet then your Samba server. Are you using WINS? If not, try using wins support = Yes in the global section of your smb.conf file. Restart your Samba server, then point all your clients to the IP address of your Samba server for their WINS configuration (under the TCP/IP properties -- advanced -- WINS tab). You should only need 1 entry for the WINS server, make sure that Enable NETBIOS over TCP/IP is checked on. Regards, Arnold Andrews Sr. Systems Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: nmbd as wins server
wins server = 192.168.53.180, 192.168.53.181 wins support = Yes Setting wins server or not does not change anything. The problem I have is, that a system from a different subnet can't query the wins server and wins.dat is empty (should be the pdc itself be in there?) Never use both wins server and wins support at the same time. When you specify a wins server, you are telling Samba to go somewhere else to get it's WINS data. When you tell it wins support = Yes, you are telling Samba to be the WINS server. Just remove the wins support entry from your config, then point your clients to the IP address of your Samba server. That should do the trick for you. Regards, Arnold Andrews Sr. Systems Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] What happened to the Solaris packaging between 3.0.2a and 3.0.14a?
Hi, The last time I compiled Samba was at version 3.0.2a. It included a nice packaging section to bundle up the compiled programs for easy installation/removal. Now I have just downloaded the source for the latest stable release, 3.0.14 a. Although there is still a Solaris packaging section with this version, it seems to be missing some of the things that it did before. When using pkgadd to install Samba, it no longer prompts the installer whether or not it should install swat, and whether or not it should configure Samba to auto-start upon boot up. Previously, if the user accepted these options, it would automatically place the entries needed into the /etc/services and /etc/inetd.conf files (SWAT), and place a startup script into /etc/init.d along with a link to the script located in /etc/rc3.d (Samba). I'm just missing the former functionality. Can anyone explain why this was changed and if it is possible to get it back? Best Regards, Arnold Andrews Sr. Systems Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] NetBIOS needed?
Sorry if this sounds like I'm confused. I am. I am new to Samba and Solaris. I've got Samba 3.0.10 running on Solaris 9. The only windows box I can see or access the shares from is my Windows 2003 ADC which happens to be the only box running NetBIOS in the domain. I have started up a WINS server and added the servers IP to the samba.conf file. The samba server has registered in WINS but I still can not get to the Samba server via my XP client. If I turn NetBIOS on for the client it works. Is there a way to make this work without turning on NetBIOS? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] STOP PAYING FEDERAL TAXES - LEGALLY!
is your report still available ? Joe Arnold/Program Mgr. Glass Mountain Optics 9517 Old McNeil Rd. Austin,TX 78758 (p) 512-339-7442 (f ) 512-339-0589 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] tru64 samba3.0.8 unresolved
Hello, I have compiled samba 2.2.7 with the following compiler Compaq C V6.5-011 on Compaq Tru64 UNIX V5.1B. It works well. Now I trie to compile samba 3.0.8 and I have several unresolved warnings: Compiling rpc_parse/parse_shutdown.c with -fPIC Compiling registry/reg_objects.c with -fPIC Compiling passdb/pdb_get_set.c with -fPIC Linking libsmbclient non-shared library bin/libsmbclient.a Linking libsmbclient shared library bin/libsmbclient.so Compiling modules/vfs_recycle.c with -fPIC Building plugin bin/recycle.so ld: Warning: Unresolved: dbgtext dbghdr DEBUGLEVEL_CLASS .. .. .. Compiling modules/vfs_audit.c with -fPIC Building plugin bin/audit.so ld: Warning: Unresolved: smb_register_vfs Compiling modules/vfs_extd_audit.c with -fPIC Building plugin bin/extd_audit.so ld: Warning: Unresolved: dbgtext dbghdr DEBUGLEVEL_CLASS DEBUGLEVEL_CLASS_ISSET and so on. The FLAGS are: Using FLAGS = -g -I./popt -Iinclude -I/xxx//samba-3.0.8/source/include -I/xxx//samba-3.0.8/source/ubiqx -I/xxx//samba-3.0.8/source/smbwrapper -I. -I/usr/local/include -I/xxx/x/samba-3.0.8/source LIBS = -lsecurity -lresolv -liconv LDSHFLAGS = -shared -L/usr/local/lib LDFLAGS = -L/usr/local/lib Has any one an idea ? Are some libraries missing ? Thank you for your help. Claude -- Claude Arnold L2MP-POLYTECH, UMR 6137 C/O IMT-Technopôle de Château-Gombert 13451 Marseille Cedex 20 Tél: 04.91.05.47.79 fax: 04.91.05.47.82 email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbldap_search_suffix: Problem during the LDAP search
Hello, I need some help with the following errors that I have in my log.smbd: [2004/09/01 21:14:39, 0] lib/smbldap.c:smbldap_search_suffix(1126) smbldap_search_suffix: Problem during the LDAP search: (Size limit exceeded) [2004/09/01 21:14:39, 0] passdb/pdb_ldap.c:ldapsam_setsampwent(1078) ldapsam_setsampwent: LDAP search failed: Size limit exceeded [2004/09/01 21:14:39, 0] rpc_server/srv_samr_nt.c:load_sampwd_entries(232) load_sampwd_entries: Unable to open passdb. I notice the problem Monday. If I use User Manager to view user in my Samba-LDAP PDC I get the following error The stub received bad data Then I get the prompt Do I want to select another domain to administer. If I run Server Manager I get the same error. One problem I discovered was that I had exceeded the size limit for openldap search. The default SIZELIMIT 500 I increased the size to 1 which I thought this would solve the problem which it has not. I can login to domain with and access resource on the server with no problems. I search this list and google and did not come up with anything conclusive. I am running samba 3.04, openldap-2.1.22-8, and Redhat AS 3.0. Any insight on these errors would be appreciated. Here is smb.conf [global] netbios name = HSFNP01 workgroup = MTHCS server string = security = user os level = 64 domain master = yes local master = yes preferred master = yes time server = yes #passdb backend = tdbsam ldappasswd sync =yes passdb backend = ldapsam:ldap://127.0.0.1/ ldap admin dn = cn=samba,ou=DSA,dc=mthcs,dc=net #ldap admin dn = cn=Manager,dc=mthcs,dc=net ldap suffix = dc=mthcs,dc=net ldap group suffix = ou=Groups ldap user suffix = ou=Users ldap machine suffix = ou=Computers ldap ssl = no unix extensions = yes encrypt passwords = yes domain logons = yes logon script = logon.bat logon drive = H: logon home = \\%L\%U logon path = socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins support = no wins server = 10.100.0.10 veto files = /*.eml/*.nws/riched20.dll/ lanman auth = yes add user script = /usr/local/sbin/smbldap-useradd -m %u delete user script = /usr/local/sbin/smbldap-userdel %u ldap delete dn = yes add group script = /usr/local/sbin/smbldap-groupadd -p %g delete group script = /usr/local/sbin/smbldap-groupadd %g add machine script = /usr/local/sbin/smbldap-useradd -w %u add user to group script = /usr/local/sbin/smbldap-groupmod -m %u %g delete user from group script = /usr/local/sbin/smbldap-usermod -g %g %u set primary group script = /usr/local/sbin/smbldap-usermod -g %g %u dos charset = 850 unix charset = ISO8859-1 oplocks = yes load printers = yes printing = cups printer admin = Administrator, @Domain Admins idmap uid = 15000-2 idmap gid = 15000-2 winbind separator = - winbind use default domain = No [netlogon] path = /smbsrvr/netlogon/scripts browsable = no guest ok = yes write list = Domain Admins [homes] comment = Home Directories browseable = no read only = no hide dot files = yes veto files = /*.mp3/*.exe/*.com/*.js/*.bat/*.cmd/*.wsh/*.lnk/*.scr/*.zip/.*/ dos file times = yes [C$] valid users = @root path = /smbsrvr read only = no create mask = 0770 directory mask = 0770 force group = Domain Admins force directory mode = 0770 dos file times = yes [Apps] read only = no path = /smbsrvr/Apps create mask = 0770 directory mask = 0770 force create mode = 0770 force directory mode = 0770 dos filetimes = yes inherit permissions = yes [Students] path = /smbsrvr/Students read only = no create mask = 0770 directory mask = 0770 force group = hsstudents force create mode = 0770 force directory mode = 0770 dos filetimes = yes [AdminTools$] path = /smbsrvr/AdminTools read only = no dos filetimes = yes [printers] comment = All Printers path = /var/spool/samba printable = yes browseable = no guest ok = yes [print$] comment = Printer Drivers path = /var/lib/samba/drivers browseable = yes guest ok = no read only = yes write list = root, @ntadmin #[%G] #path = /home/groups/%G/ #read only = no #force group = %G [home$] writeable = yes write list = +ntadmin,@MTHS-Domain Admins,@ntadmin,@root path = /home force directory mode = 0770 force group = +ntadmin dos file times = yes create mask = 0770 directory mask = 0770 valid users = +ntadmins,+root,@MTHS-Domain Admins,@ntadmin,@root [ezaudit] path = /smbsrvr/ezaudit read only = no browsable = no guest ok = yes [HSGUIDANCE] path = /smbsrvr/Guidance read only = no dos filetimes = yes [HS PRINCIPAL] path = /smbsrvr/hsprincipal read only = no dos filetimes = yes [CIP] path = /smbsrvr/CIP read only = no dos filetimes = yes [POISE ISSUES] path = /smbsrvr/Poise Issues read only = no dos filetimes = yes [HSDISCIPLINE] path = /smbsrvr/Discipline read only = no dos filetimes = yes [YEARBOOK] path = /smbsrvr/yearbook read only = no dos filetimes = yes [INSTALL] comment = Mt. Healthy Software path = /smbsrvr/Install read only =
[Samba] RedHat Enterprise 3.0 RPMs
I currently have a Redhat 9 server running Samba 3.0.4. I need to move the Samba data to a different server that I installed the Redhat Enterprise 3.0, because Redhat Enterprise will not upgrade Redhat 9. The problem is that Redhat Enterprise 3.0 comes with samba-3.0.2-6.3E which I assume that this version based of 3.0.2 with the printer and security patches. The problem is I do not think I can down grade to 3.0.2 since I am at 3.0.4 is this correct? If I upgrade the Redhat Enterprise 3.0 to samba 3.0.4 can I use a Redhat 9 RPM or Fedora RPM or would I be better off to build my own? Thanks -Glenn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Is there prefered version of OpenLDAP to use with Samba 3?
Should I have to upgrade the version of LDAP that came with Red Hat Enterprise 3.0? The version I have is openldap-2.0.27-11. Thanks -Glenn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Trust Relationship 3.0.4
I just recreated a trust relationship I get the following message on the samba pdc Could not connect to server server1 should I be concerned about this? The trust realationship appears to be working. Here is the console screen message. Could not connect to server server1 Trust to domain domain established Thanks -Glenn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.5 pre1 cannot ad windows xp machine to domain
Hi all, I can add my W2K machines to the Samba 3.0.5pre1 with no problems, but I can not add my XP machines. Existing XP machines work fine, but when I try to add new XP machine it does not work. Here is my smb.conf and pc from the log.smbd Thanks -Glenn [global] netbios name = HSFNP01 workgroup = MTHCS security = user os level = 64 domain master = yes local master = yes preferred master = yes time server = yes ;passdb backend = tdbsam passdb backend = tdbsam unix extensions = yes encrypt passwords = yes domain logons = yes logon script = logon.bat logon drive = H: logon home = \\%L\%U logon path = socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins support = no wins server = 10.100.0.10 veto files = /*.eml/*.nws/riched20.dll/ lanman auth = yes add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g add user script = /usr/sbin/useradd -d /dev/null -g 502 -c 'Machine Account' -s /bin/false -M %u oplocks = yes load printers = yes printing = cups printer admin = Administrator, @ntadmin idmap uid = 15000-2 idmap gid = 15000-2 winbind separator = - winbind use default domain = No [netlogon] path = /smbsrvr/netlogon/scripts guest ok = yes write list = ntadmin [homes] comment = Home Directories browseable = no read only = no hide dot files = yes veto files = /*.mp3/*.exe/*.com/*.js/*.bat/*.cmd/*.wsh/*.lnk/*.scr/*.zip/.*/ dos file times = yes [C$] valid users = @root path = /smbsrvr read only = no create mask = 0770 directory mask = 0770 force group = +ntadmin force directory mode = 0770 dos file times = yes [Apps] read only = no path = /smbsrvr/Apps [Students] path = /smbsrvr/Students read only = no create mask = 0770 directory mask = 0770 force group = +HSSTUDENTS force create mode = 0770 force directory mode = 0770 dos filetimes = yes [AdminTools$] path = /smbsrvr/AdminTools read only = no create mask = 0770 directory mask = 0770 force group = Domain Administrators force create mode = 0770 force directory mode = 0770 dos filetimes = yes [printers] comment = All Printers path = /var/spool/samba printable = yes browseable = no guest ok = yes [print$] comment = Printer Drivers path = /var/lib/samba/drivers browseable = yes guest ok = no read only = yes write list = root, @ntadmin [%G] path = /home/groups/%G/ read only = no force group = %G [home$] writeable = yes write list = +ntadmin,@MTHS-Domain Admins,@ntadmin,@root path = /home force directory mode = 0770 force group = +ntadmin dos file times = yes create mask = 0770 directory mask = 0770 valid users = +ntadmins,+root,@MTHS-Domain Admins,@ntadmin,@root [ezaudit] path = /smbsrvr/ezaudit read only = no browseable = yes available = yes write list = +HSBUILDING,+HSSTAFF,+HSSTUDENTS admin users = +ntadmin,+wheel [HSGUIDANCE] path = /smbsrvr/Guidance writelist = +HSGUIDANCE read only = no create mask = 0770 directory mask = 0770 force group = +HSGUIDANCE force create mode = 0770 force directory mode = 0770 dos filetimes = yes [HS PRINCIPAL] path = /smbsrvr/hsprincipal writelist = +HSPRINCIPAL read only = no create mask = 0770 directory mask = 0770 force group = +HSPRINCIPAL force create mode = 0770 force directory mode = 0770 dos filetimes = yes [CIP] path = /smbsrvr/CIP writelist = +HSSTAFF read only = no create mask = 0770 directory mask = 0770 force group = +HSSTAFF force create mode = 0770 force directory mode = 0770 dos filetimes = yes [POISE ISSUES] path = /smbsrvr/Poise Issues writelist = +BUILDING SECRETARIES read only = no create mask = 0770 directory mask = 0770 force group = +BUILDING SECRETARIES force create mode = 0770 force directory mode = 0770 dos filetimes = yes [HSDISCIPLINE] path = /smbsrvr/Discipline writelist = +BUILDING SECRETARIES read only = no create mask = 0770 directory mask = 0770 force group = +BUILDING SECRETARIES force create mode = 0770 force directory mode = 0770 dos filetimes = yes [YEARBOOK] path = /smbsrvr/yearbook writelist = +HSYEARBOOK read only = no create mask = 0770 directory mask = 0770 force group = +HSYEARBOOK force create mode = 0770 force directory mode = 0770 dos filetimes = yes [INSTALL] comment = Mt. Healthy Software path = /smbsrvr/Install read only = No guest only = Yes [ADMINTOOLS$] path = /smbsrvr/AdminTools writelist = +ntadmin read only = no create mask = 0770 directory mask = 0770 force group = +ntadmin force create mode = 0770 dos filetimes = yes [2004/06/09 20:34:13, 0] lib/util_sock.c:send_smb(630) Error writing 4 bytes to client. -1. (Connection reset by peer) [2004/06/09 20:37:41, 0] lib/util_sock.c:get_peer_addr(978) getpeername failed. Error was Transport endpoint is not connected [2004/06/09 20:37:41, 0] lib/util_sock.c:get_peer_addr(978) getpeername failed. Error was Transport endpoint is not connected [2004/06/09 20:37:41, 0]
[Samba] Problem since switching to 3.0.2/3.0.2a
Dear Samba Team, I have recently upgraded from Samba 2.2.8a to Samba 3.0.2 where I first noticed the issue. I have also installed 3.0.2a to check if the problem I found may have already been fixed before submitting this issue. Here's the problem: After migrating and switching from passdb backend smbpasswd to the new tdbsam backend, I started having problems with user's profiles. I was getting error messages about not being able to download the user's profile from the server and such. So upon checking the profile directory on the server, I noticed that there was a directory there named %u which had never been there before. I used User Manager for domains (after authenticating to the Samba domain as root), and found that the user's profile was actually being stored in the tdbsam database with the %u at the end of the User Profile Path instead of making the substitution to the actual username. My workaround for now is to use user manager and manually switch the %u in the user profile for each user to the actual username. I believe the fix would be to change the behavior of pdbedit so that when the database is migrated from smbpasswd to tdbsam (or whatever other databases that may apply) that the pdbedit program actually substitute the %u to the actual username as it populates the destination database. The smbpasswd program should also do this when it creates a new user account. I have been a long time user of Samba and really appreciate all the hard work that all of you do there. Thank you for making such a wonderful tool. Keep up the great work! Best regards, Arnold Andrews Sr. Systems Administrator Seagate Technology -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Samba 2.2.8a to 3.0.1
Hello! I hope someone can help me out; I am trying to update from samba 2 to 3. When i type the following command: cvs update -d -P I get this error: pserver:unknown user I am following the guide from the pserver.samba.org site. Thanks for any help or response. This is what i am doing from the konsole: 1.. Install a recent copy of cvs. All you really need is a copy of the cvs client binary. 2.. run the command cvs -d :pserver:[EMAIL PROTECTED]:/cvsroot login 3.. when it asks you for a password type cvs 4.. run the command cvs -z5 -d :pserver:[EMAIL PROTECTED]:/cvsroot co samba This will create a directory called samba containing the latest samba source code. This corresponds to the HEAD development branch. If you want the latest 3.0 development code, use the SAMBA_3_0 tag. cvs -z5 -d :pserver:[EMAIL PROTECTED]:/cvsroot co -r SAMBA_3_0 samba 5.. Whenever you want to merge in the latest code changes use the following command from within the samba directory: cvs update -d -P Chris
[Samba] Samba 3.0 PDC, exchange 5.5 installing service pack 4 fails.
I created a brand new nt 4.0 server with exchange 5.5 server in my samba 3.0 pdc domain with no problems. The exchange server runs fine under the samba 3.0 pdc, but when I try to install exchange 5.5 sp4 on the exchange server the service pack gives me an Dr. Watson error. The exchange service pack makes it through the copying of the service pack files and then modifies the registry settings for exchange directory service and information store. Then service pack starts these services and tries to modify the registry for other services and then the sp bombs with Dr. Watson error. For grins I removed the exchange server out of the samba domain and readded to old nt 4.0 domain and reinstalled exchange. Then I reapplied exchange 5.5 service pack. The service pack installed fine under the NT 4.0 domain with no problems which it should since it is native Microsoft. Then I removed the exchange box and re-added back into the samba 3.0 domain and reinstalled exchange which the installs went fine. Try to install Service Pack 4 for Exchange and it bomb again during the modifying the registry. I believe that I was able to do this with samba 2.7 and it worked fine. I realize need to start look at a Linux e-mail solution, but I would like to switch to Samba first and then look at switching the e-mail later. One thing would be helpful is if someone could point me to an article on how to switch the service account exchange user id and password. So, I could apply the service pack into the NT 4.0 domain and then add the server back to the samba 3.0 pdc or if some one has experienced this problem give me so help here. Which I realize this situation is unique. Here is Dr. Watson error and smb.conf. Thanks in advance for help! -Glenn [global] netbios name = fs1 workgroup = domain security = user os level = 64 domain master = yes local master = yes preferred master = yes time server = yes passdb backend = tdbsam smbpasswd unix extensions = yes encrypt passwords = yes domain logons = yes logon script = logon.bat logon drive = H: logon home = \\%L\%u logon path = socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY wins support = yes #character set = ISO8859-15 #client code page = 850 veto files = /*.eml/*.nws/riched20.dll/ lanman auth = yes add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u ;add machine script = /usr/sbin/useradd -d /dev/null -g 502 \ -s /bin/false -M %u ;add user script = /usr/bin/sudo /usr/sbin/useradd -d /dev/null -g ntmach -c 'Machine Account' -s /bin/false -M %u oplocks = yes load printers = yes printing = cups printcap name = cups [netlogon] path = /smbsrvr/netlogon/scripts guest ok = yes write list = ntadmin [homes] comment = Home Directories browseable = no read only = no hide dot files = yes veto files = /*.mp3/*.exe/*.com/*.js/*.bat/*.cmd/*.wsh/*.lnk/*.scr/.*/ dos file times = yes [C$] valid users = @root path = /smbsrvr read only = no create mask = 0770 directory mask = 0770 force group = +ntadmin force directory mode = 0770 dos file times = yes [Apps] path = /smbsrvr/Apps read only = no create mask = 0770 directory mask = 0770 force create mode = 0770 force directory mode = 0770 dos filetimes = yes guest ok = no guest account = 220836E browseable = yes available = yes write list = +HSSTAFF,+HSSTUDENTS inherit permissions = no root preexec close = no short preserve case = no case sensitive = no strict locking = no set directory = no guest only = no status = no follow symlinks = no map system = no locking = no only user = no sync always = no fake oplocks = no blocking locks = no hide dot files = no mangled names = no msdfs root = no strip dot = no map hidden = no posix locking = no fake directory create times = no strict sync = no level2 oplocks = no strict allocate = no dos filemode = no share modes = no wide links = no preexec close = no map archive = no hide unreadable = no mangle case = no preserve case = no dos filetime resolution = no oplock contention limit = 0 max connections = 0 write cache size = 0 [Students] path = /smbsrvr/Students read only = no create mask = 0770 directory mask = 0770 force group = +HSSTUDENTS force create mode = 0770 force directory mode = 0770 dos filetimes = yes [AdminTools$] path = /smbsrvr/AdminTools read only = no create mask = 0770 directory mask = 0770 force group = Domain Administrators force create mode = 0770 force directory mode = 0770 dos filetimes = yes [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = yes read only = yes printable = yes printer admin = root, @ntadmin [print$] comment = Printer Drivers path = /smbsrvr/printers browseable = yes guest ok = no read only = yes write list = root create mask = 0755 directory mask = 0777 [%G] path = /home/groups/%G/ read only = no force group = %G [home$] valid users = @root path = /home read only = no create mask = 0770 directory mask = 0770 force group = apps force directory mode = 0770 dos file times = yes [ezaudit] path =
[Samba] Samba with two linux computers: wrong password in one direction,
I am working with two computer with Linux. One is the master of the workgroup and the other is the slave. The master is also password server. Both machines have the same user with same password. My problem is that I can mount anything with smbmount from slave to master (//master/tmp) with correct password. Trying the other way (mounting on master something of slave (//slave/tmp) will no work with following message: master: smbmount //slave/tmp /mnt username=user [...] pm_process() returned Yes added interface ip=192.168.0.6 bcast=192.168.0.255 nmask=255.255.255.0 not adding duplicate interface 192.168.0.6 resolve_lmhosts: Attempting lmhosts lookup for name haribo0x20 resolve_hosts: Attempting host lookup for name haribo0x20 Connecting to 192.168.0.3 at port 139 session request ok Password: session setup ok tree connect failed: ERRSRV - ERRbadpw (Bad password - name/password pair in a Tree Connect or Session Setup are invalid.) SMB connection failed Please can anyone help me ! Thank you Harald --- configuration files: MASTER: SuSE V 7.1 (IP 192.168.0.6. samba 2.0.7) === [global] debug level = 4 workgroup = ARNOLD guest account = nobody keep alive = 30 os level = 65 kernel oplocks = false security = server client code page = 850 netbios name = saruman server string = saruman: samba-V.2.0.7 interfaces = eth1 192.168.0.1/24 bind interfaces only = yes min password length = 6 password level = 8 username level = 8 null passwords = no default case = lower case sensitive = No preserve case = Yes short preserve case = Yes mangle case = No mangling char = ~ admin users = harald admin hosts allow = 192.168.0. hosts deny = allow trusted domains = no announce as = NT Server dns proxy = yes domain logons = yes time server = yes dont descend = /proc, /dev follow symlinks = no hide dot files = yes username map = /etc/smbusermap valid users = harald erika nobody password server = 192.168.0.6 encrypt passwords = yes printcap name = /etc/printcap printing = bsd load printers = yes socket options = TCP_NODELAY map to guest = Bad User local master = yes prefered master = yes wins support = yes domain master = yes [tmp] comment = saruman: /tmp guest ok = no path = /tmp read only = no browseable = yes create mode = 0750 valid users = harald erika icb SLAVE (SuSE V 8.1, IP 192.168.0.3, samba 2.2.5-SuSE) == [global] workgroup = ARNOLD guest account = nobody keep alive = 30 os level = 64 kernel oplocks = false security = server client code page = 850 netbios name = haribo server string = haribo: samba-V.2.2.5 interfaces = eth0 192.168.0.3/24 bind interfaces only = yes min password length = 6 password level = 8 username level = 8 null passwords = no default case = lower case sensitive = No preserve case = Yes short preserve case = Yes mangle case = No mangling char = ~ admin users = harald root hosts allow = 192.168.0. hosts deny = allow trusted domains = yes announce as = NT Server dns proxy = yes domain logons = yes time server = no dont descend = /proc, /dev follow symlinks = no hide dot files = yes username map = /etc/samba/smbusermap valid users = harald nobody root password server = 192.168.0.6 encrypt passwords = yes update encrypted = yes printcap name = /etc/printcap printing = bsd load printers = yes socket options = TCP_NODELAY map to guest = Bad User local master = no prefered master = no wins support = yes domain master = no [tmp] comment = haribo: /tmp guest ok = no path = /tmp read only = no browseable = yes create mode = 0750 valid users = harald root -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with three machines (two linux, one win2k)
My computer area is a descript below: 1 SuSE V 7.1 with samba 2.0.7 (samba and passwort server) 1 SuSE V 8.1 with samba 2.2.5-SuSE 1 Win2000-Computer 1) I can mount every share from Linux V7.1 on my Win2K-Computer 2) From V8.1 I can mount from V7.1 with smbmount /tmp 3) But from V7.1 I cannot mount anything on W2K or V81. With debug-level 4 I always get following message: doing parameter load printers = yes doing parameter socket options = TCP_NODELAY doing parameter map to guest = Bad User doing parameter local master = yes doing parameter prefered master = yes doing parameter wins support = yes doing parameter domain master = yes pm_process() returned Yes added interface ip=192.168.0.6 bcast=192.168.0.255 nmask=255.255.255.0 not adding duplicate interface 192.168.0.1 resolve_lmhosts: Attempting lmhosts lookup for name saruman0x20 resolve_hosts: Attempting host lookup for name saruman0x20 Connecting to 192.168.0.6 at port 139 session request ok Password: session setup ok tree connect failed: ERRSRV - ERRbadpw (Bad password - name/password pair in a Tree Connect or Session Setup are invalid.) SMB connection failed Can anybody help my with my problem ? thanks Harald Configuration files: 1) SuSE V 7.1 (192.168.0.6) [global] debug level = 4 workgroup = ARNOLD guest account = nobody keep alive = 30 os level = 65 kernel oplocks = false security = server client code page = 850 netbios name = saruman server string = saruman: samba-V.2.0.7 interfaces = eth1 192.168.0.1/24 bind interfaces only = yes min password length = 6 password level = 8 username level = 8 null passwords = no default case = lower case sensitive = No preserve case = Yes short preserve case = Yes mangle case = No mangling char = ~ admin users = harald admin hosts allow = 192.168.0. hosts deny = allow trusted domains = no announce as = NT Server dns proxy = yes domain logons = yes time server = yes dont descend = /proc, /dev follow symlinks = no hide dot files = yes username map = /etc/smbusermap valid users = harald erika nobody password server = 192.168.0.6 encrypt passwords = yes printcap name = /etc/printcap printing = bsd load printers = yes socket options = TCP_NODELAY map to guest = Bad User local master = yes prefered master = yes wins support = yes domain master = yes [tmp] comment = saruman: /tmp guest ok = no path = /tmp read only = no browseable = yes create mode = 0750 valid users = harald erika icb 2) SuSE V8.1 (192.168.0.3) [global] workgroup = ARNOLD guest account = nobody keep alive = 30 os level = 64 kernel oplocks = false security = server client code page = 850 netbios name = haribo server string = haribo: samba-V.2.2.5 interfaces = eth0 192.168.0.3/24 bind interfaces only = yes min password length = 6 password level = 8 username level = 8 null passwords = no default case = lower case sensitive = No preserve case = Yes short preserve case = Yes mangle case = No mangling char = ~ admin users = harald root hosts allow = 192.168.0. hosts deny = allow trusted domains = yes announce as = NT Server dns proxy = yes domain logons = yes time server = no dont descend = /proc, /dev follow symlinks = no hide dot files = yes username map = /etc/samba/smbusermap valid users = harald nobody root password server = 192.168.0.6 encrypt passwords = yes update encrypted = yes printcap name = /etc/printcap printing = bsd load printers = yes socket options = TCP_NODELAY map to guest = Bad User local master = no prefered master = no wins support = yes domain master = no [tmp] comment = haribo: /tmp guest ok = no path = /tmp read only = no browseable = yes create mode = 0750 valid users = harald root -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3 reports 'directory does not exist' when trying creating an already existing directory
This would be a bug in the error code we are returning. I'll try to reproduce it. Can you open an issue in https://bugzilla.samba.org/ so it doesn't get lost. Thanks. I have reported it as bug #559. If you need any more help or info, let me know. It seems that even when commenting out the offending options, wincvs still complains, although mkdir returns the proper error codes. I had to downgrade to a 2.2.x version to get stuff working again (there were also some problems overwriting existing files on a network share, haven't looked into that yet), but I can do a bit more testing in the weekend if you have any pointer where to look for these issues. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3 reports 'directory does not exist' when trying to creating an already existing directory
Hi, since an upgrade to Samba 3 (the binary rpms samba-3.0.0-1from a samba download site, redhat 7.3) this morning, we've been experiencing problems with WinCVS on mounted network drives. apparently, (one of) the following options is causing the problems (I can't do more detailed testings right now because too many people are working on the server) - we use these options to ensure proper permissions on all drives: ; create mode = 0664 ; directory mode = 0774 ; force create mode = 0664 ; force directory mode = 0775 ; force security mode = 0644 ; force directory security mode = 0775 when these options are not commented out, the following occurs when trying to mkdir an already existing directory: Z:\dir 02-10-2003 13:43 DIR palm Z:\mkdir palm The system cannot find the file specified. when these options are commented out, we get the 'normal' error: Z:\mkdir palm A subdirectory or file palm already exists. are the options we use deprecated, or is this just a problem in the new samba release? -- Arnold Hendriks [EMAIL PROTECTED] B-Lex Information Technologies http://www.b-lex.com/ Postbus 545, 7500 AM Enschede, The Netherlands B-Lex: +31 (0)53 4836543 Mobile: +31 (0)6 51710159 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] add machine account with sudo instead of root account
Is this possible to add machine account from several different tech user accounts. What I have been reading on the Internet sounds like it is possible. In my smb.conf file I tried to do it like this. add user script = /usr/bin/sudo /usr/sbin/useradd -d /dev/null -g ntmach -c 'Machine Account' -s /bin/false -M %u The reason I want to do this I use sysprep to automate the installation of w2k computers to add the machine account into the domain without user assistance. The main reason to do this is the text file that sysprep uses does not encrypt the user account password for adding the machine account to the domain in the sysprep config file. So, I would like to setup an account to just have rights to add computer accounts and nothing else which sounds like sudo can do this. I am I right? I believe I got sudo configured right, because I can use it to do things with my user account that normally can't do without sudo. Any help would be appreciate! Thanks -Glenn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Setting up Pointing and Click Printing through APW on Win2kMachine
First off I have read the SAMBA 2.2 printer documetation and Samba Printing Documentation for 3.0. And searched the Internet through Google and did not come up with much. Maybe it is how I am doing search I don't know. I had some success using CUPS for Point and Click printing using cupaddsmb command. I could get the print drivers to download on W2K and XP. But, I could not get the the Adobe Drivers to download to my Win9x machines. When I tried to download the print drivers through APW to the Samba server you would see the drivers copy to the server, but when you click OK I get the message Printer settings could not be saved. Access is denied. Here is the rights on my printer directory. drwxrwxrwx 37 root root 4096 Jul 1 20:12 Apps drwx--2 root root16384 Jun 22 10:44 lost+found drwxrwxrwx3 root root 4096 Jun 24 17:12 netlogon drwxrwxrwx4 root root 4096 Jun 27 18:49 printers Here is the rights for the directories under printers drwxrwxrwt5 root root 4096 Jul 2 19:58 w32x86 drwxrwxrwx3 root garnold 4096 Jul 2 19:31 win40 Here is rights for the directories under w32x86-- Notice __SKIP_0184 drwxrwxrwt2 root root 4096 Jul 2 19:20 2 drwxrwxrwt2 root root 4096 Jul 2 16:17 3 drwxrwxrwx2 root root 4096 Jul 2 19:58 __SKIP_0184 Also through W2K APW I tried to add printers that are not setup on the Red 9.0 linux box and created them trough APW I get the error message Printer settings could not be saved. Access is denied. I also noticed that this weird directory would pop-up in my printers directory it is named __SKIP_0184. When adding the printer fails I click cancel and it disappears. I truly believe it is rights issue I just do not know where to look. My background is in NT, so I just begun to start learning Linux and using for server applications. I have been real happy with Linux and Samba just stuck on this printer problem. Also, I need some help with the addprinter command and delprinter command. What goes after the command? Most examples I see are addprinter command is like this addprinter = I know there is more to that command than this just blank. Would some give me a good example of addprinter and delprinter command that works on Red Hat 9. Here is my smb.conf file. Thanks -Glenn [Golbal] netbios name = SERVER01 workgroup = domain security = user os level = 64 domain master = yes local master = yes prefered master = yes time server = yes unix extensions = yes encrypt passwords = yes domain logons = yes logon script = logon.bat socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY wins support = yes character set = ISO8859-15 client code page = 850 veto files = /*.eml/*.nws/riched20.dll/ lanman auth = yes add user script = /usr/sbin/useradd -d /ev/null -g ntmach -c 'Machine Account' -s /bin/false -M %u oplocks = yes load printers = yes printing = CUPS printcap name = CUPS addprinter command = /usr/sbin/redhat-config-printer-tui --Xadd-local [netlogon] path = /smbsrvr/netlogon/scripts read only = yes public = no [homes] comment = Home Directories valid users = %S browseable = no writeable = yes create mask = 0640 directory mask = 0750 hide dot files = yes veto files = /*.mp3/*.exe/*.com/*.js/*.bat/*.cmd/*.wsh/*.lnk/*.scr/.*/ dos file times = yes [C$] valid users = @root path = /smbsrvr read only = no create mode = 0770 directory mode = 0770 force group = apps force directory mode = 0770 dos file times = yes [Apps] path = /smbsrvr/Apps read only = no create mode = 0770 directory mode = 0770 force group = apps force create mode = 0770 force directory mode = 0770 dos filetimes = yes [printers] comment = All Printers path = /var/spool/samba browseable = no public=yes writable = no printable = yes printer admin = root [print$] comment = Printer Drivers path = /smbsrvr/printers browseable = yes guest ok = no read only = yes write list = root create mask = 0755 directory mask = 0777 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
hi, do somebody tell me, where i could find information about samba restrictions compared with Windows Server. I' m trying to write a small paper for school, which describe a comarison between samba and Windows Server. I heard for example, that 1-Samba is not adapted for great nets? 2-Samba has not a system management server like windows? 3-Remote Procedure Calls (RPCs) has been not yet implemented and this make dificulties to management of Samba in Nets?? ?? I' m apreciated for your help arn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] which one is better samba or
hi, do somebody tell me, where i could find information about samba restrictions compared with Windows Server. I' m trying to prepare a paper for school, which describe a comarison between samba and Windows Server. I heard for example, that 1-Samba is not adapted for great nets? 2-Samba has not a system management server like windows? 3-Remote Procedure Calls (RPCs) has been not yet implemented and this make dificulties to management of Samba in Nets?? ?? I' m appreciated for your help arn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] why printer strike!
hi, I'm trying to print with Samba in Network. I installed Printer driver at Client(win2000) and at Linux Server 8.2 and i can print with both of them. Now i try to print via samba from the client. There is no Error message on my Client computer. It seems all run ok at Client side but samba won't print! There is a bit of my smb.conf: [printers] comment = All Printers path = /var/spool/samba browseable = yes public = use this Printer guest ok = yes writable = no printable = yes . and a list of all my Samba directories /etc/samba /opt/kde3/share/doc/HTML/de/kinfocenter/samba /opt/kde3/share/doc/HTML/en/kinfocenter/samba /var/lib/samba /var/log/samba /var/run/samba /var/spool/samba /usr/lib/samba /usr/local/samba /usr/share/doc/packages/samba /usr/share/samba I 'm grateful for your help thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] how run samba in background?
hi, I'm trying to run samba from console with an Startup Script in background. (i can start this script manuel with /etc/init.d/./samba.init but after reboot samba daemons are stoped) the Startup Script is in /etc/init.d/samba.init. I run this Script with chkconfig in runlevel 35 : #chkconfig samba.init 35 I get no Errors, but samba is runing too. ??? Thank you, henry -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] how run samba in background?
hi, Is there a symlink to the script in your rcX.d directory? No, could you tell me how do i make some symlink(a sample please) ?? Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] password aging
Hi, I recently upgraded to Samba 2.2.8 running on Solaris 8. Since doing so, I have noticed that I get a message telling me my password will expire in x days, and if I want to change it now. I never had this message show up before. In looking through the archives, I saw that password aging is supposed to go into Samba 3.x but hasn't made it into the 2.2.x branch. So why am I getting these messages now? How can I manage it? I would like to be able to do the equivelent of checking the box that makes it so that the passwords will never expire, then let Novell force the user to change their password. The user would then synch (change both) when they change their novell password. I appreciate your help. Regards, Arnold Andrews MCAD/Unix Systems Administrator Seagate Technology, LLC -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] password aging
I recently upgraded to Samba 2.2.8 running on Solaris 8. Since doing so, I have noticed that I get a message telling me my password will expire in x days, and if I want to change it now. I never had this message show up before. check date and time on client and samba machine. My christal ball say, your Solaris is your PDC. Yes, my Solaris host is the PDC. ??? The date and time are within a minute of each other on the Samba server and the PC. What does the date and time have to do with the epiration message? Thanks again, Arnold -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
