[Samba] Re: Logon scripts not working on all users
Matt Anderson wrote: > Boaz Bezborodko mirrotek.com> writes: > >> I have set up a logon script to run when users login. It works for me >> when I log in, but my user ID is mapped to a root group as well as >> administrative privileges. But it is not executing for regular users. >> >> What am I doing wrong? >> >> Thanks in advance, >> Boaz >> >> logon script = stdlogon.bat >> logon home = >> logon path = >> security = user >> preferred master = yes >> domain logons = yes >> time server = yes >> guest ok = no >> domain master = yes >> writable = no >> path = /data/printspool >> >> [netlogon] >> >> ; comment = Network Logon Service >> path = /var/lib/samba/netlogon >> > > Hi Boaz, > > A couple things to check: > 1) Check out the file system permissions on the folder /var/lib/samba/netlogon > on the server (cd to /var/lib/samba/ and do an ls -l). Make sure that > everyone > has Read access... it should look something like drwxr-xr-x. (It should look > the same for stdlogon.bat inside that folder as well, or -rwxr--r-- instead) > 2) If that's setup correctly, then, do you have any BDCs setup as well? If > so, > then the login script needs to be in both in the netlogon share for both the > PDC > and BDC. > > Hopefully that helps... > > -Matt stdlogon.bat was -rwxr-xr-x (755), but /var/lib/samba/netlogon was drwxr-xr-- (754). When I changed it to drwxr-xr-x (755) then it worked. It looks like the version of Samba I'm using (RHEL's 3.10.) requires the executable bit be set in order to run. Thanks for the help. Boaz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Do I need Winbind?
Scott Lovenberg wrote: Sounds like a bug I filed a couple of weeks ago. Do you have the line msdfs proxy = no in your config, perchance? Ref: 0002554: "msdfs proxy = no" in smb.conf causes shares to be unavailable. http://bugs.centos.org/view.php?id=2554 No. This is my config. [global] workgroup = MWG netbios name = MWG-SERVER server string = MWG-Samba interfaces = 192.168.1.0/24 debug uid = Yes time server = Yes printcap name = cups add user script = /usr/sbin/useradd -m '%u' delete user script = /usr/sbin/userdel -r '%u' add group script = /usr/sbin/groupadd '%g' delete group script = /usr/sbin/groupdel '%g' add user to group script = /usr/sbin/gpasswd -a '%u' '%g' add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u' logon script = stdlogon.bat logon path = logon drive = q: logon home = domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes path = /data/printspool admin users = "@Domain Admins" printer admin = @smbadmins, root hide dot files = No share modes = No [netlogon] path = /var/lib/samba/netlogon [homes] read only = No browseable = No [printers] path = /home/smbprint printer admin = @smbadmins create mask = 0700 guest ok = Yes printable = Yes browseable = No [print$] comment = Printer Driver Download Area path = /data/printers write list = @smbadmins, root guest ok = Yes [DATA] path = /data read only = No create mask = 0770 oplocks = No level2 oplocks = No vfs objects = recycle recycle:exclude_dir = /tmp recycle:exclude = *.tmp rp* recycle:maxsixe = 0 recycle:versions = Yes recycle:touch = Yes recycle:keeptree = Yes recycle:repository = Trash/%U -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can't change password change dates with PDBEDIT
Felipe Augusto van de Wiel wrote: > Hi Boaz, > > I'm using LDAP as a backend so YMMV. > > > On 03/16/2007 12:10 PM, Boaz Bezborodko wrote: >> I'm setting up a Samba server using CentOS 4's (RedHat >> Enterprise Linux) standard version (v.3.0101411). I > > Hmmm, you should upgrade your samba version. Not sure > if it will solve your problem, but I'm using 3.0.24 and the > information of this message is based on this version. Anyway, > 3.0.14 and 3.0.2x has lots of improvements and fixes that are > worthwhile. > > >> want to be able to force users to change their password >> upon first logging in and to have to change them after >> a certain period of time (per user, not system-wide). > OK, for those who may have found this on a search I found that the easiest way to do this was to use the NT4 User Manager tool to set the flag that forces the user to change password at the next login. Just search for SRVTOOLS.EXE, download them and execute the file in the directory in which you want them to be installed. Boaz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Opening "Printers" causes incoming packets from different ports
When I open the "Printers and Faxes" folder in Windows to view print queues my firewall gets a bunch of incoming packets from the server each from an ever increasing port number. (It is now up to 32840.) These are going to local ports 139 and 445. (The netbios ports.) Is this normal behavior? Should I be allowing these access to the system? Thanks in advance -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] After printing I see strange IP traffic
After I run a print job or I open "Printers and Faxes" I see new activity in my PC's firewall. I see about 200KB/s both inbound and outbound for 3 seconds out of every 10 between a port on my machine (a different port after every shutdown or after shutting down network traffic) and port 445 on the Samba server. Is this normal? (I hadn't noticed this before, but I'm noticing new information ever since upgrading to the latest version of Kerio's Firewall--now owned by Sunbelt software.) Boaz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Logon scripts not working on all users
I have set up a logon script to run when users login. It works for me when I log in, but my user ID is mapped to a root group as well as administrative privileges. But it is not executing for regular users. What am I doing wrong? Thanks in advance, Boaz logon script = stdlogon.bat logon home = logon path = security = user preferred master = yes domain logons = yes time server = yes guest ok = no domain master = yes writable = no path = /data/printspool [netlogon] ; comment = Network Logon Service path = /var/lib/samba/netlogon -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Do I need Winbind?
With a recent upgrade to Centos 4.6 my system's Samba was also upgraded to 3.0.25b. But now I get a series of auth/auth_util.c:create_builtin_administrators(792) and auth/auth_util.c:create_builtin_users(758) errors every day. As I understand it winbind allows users to be logged in as Linux users when they log in as Windows users. But since I don't want them to have access to the Linux server can I simply disable Winbind and how would I do it? Would I need Winbind if I want to upgrade the server to handle ACL? Boaz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Unmatched entries - Failed to Create Administrators/Users/
With a recent upgrade to Centos 4.6 my system's Samba was also upgraded to 3.0.25b. Now I get the following errors in my log every day. **Unmatched Entries** auth/auth_util.c:create_builtin_administrators(792) create_builtin_administrators: Failed to create Administrators : 1430 Time(s) auth/auth_util.c:create_builtin_users(758) create_builtin_users: Failed to create Users : 1430 Time(s) lib/util_sock.c:get_peer_addr(1232) getpeername failed. Error was Transport endpoint is not connected : 30 Time(s) libsmb/clientgen.c:cli_receive_smb(112) Receiving SMB: Server stopped responding : 774 Time(s) nsswitch/idmap.c:idmap_alloc_init(679) ERROR: Initialization failed for alloc backend, deferred! : 2860 Time(s) param/loadparm.c:lp_do_parameter(3523) Global parameter guest account found in service section! : 2 Time(s) Here is my config: [global] workgroup = MWG netbios name = MWG-SERVER server string = MWG-Samba interfaces = 192.168.1.0/24 debug uid = Yes time server = Yes printcap name = cups add user script = /usr/sbin/useradd -m '%u' delete user script = /usr/sbin/userdel -r '%u' add group script = /usr/sbin/groupadd '%g' delete group script = /usr/sbin/groupdel '%g' add user to group script = /usr/sbin/gpasswd -a '%u' '%g' add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u' logon script = stdlogon.bat logon path = logon drive = q: logon home = domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes path = /data/printspool admin users = "@Domain Admins" printer admin = @smbadmins hide dot files = No share modes = No Currently the system seems to be working properly except for the errors. What do I need to do to fix this? Boaz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Newbie looking to move from Netware to Linux/Samba
I'm looking to move my companies server from an old Netware 5.0 file server to a Linux/Samba server on new hardware. Since my companies' systems are not mission critical (I can afford to be down for a few hours at a time after a switch-over) I feel I have the tolerance for some problems in getting it installed. Is this something I should be able to handle on my own (I installed the NW 5.0 box on my own) and can I depend on support from the community in doing so? Thanks in advance, Boaz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Newbie looking to move from Netware to Linux/Samba
Gary Dale wrote: > Boaz Bezborodko wrote: >> I'm looking to move my companies server from an old Netware 5.0 file >> server to a Linux/Samba server on new hardware. >> >> Since my companies' systems are not mission critical (I can afford to be >> down for a few hours at a time after a switch-over) I feel I have the >> tolerance for some problems in getting it installed. >> >> Is this something I should be able to handle on my own (I installed the >> NW 5.0 box on my own) and can I depend on support from the community in >> doing so? >> >> Thanks in advance, >> Boaz >> > Most distributions install a working Samba by default or as a > selectable option. However, you will have to set up users and shares. > You may find SWAT handy for doing this. > > You haven't told us a lot about your setup but is sounds like you > don't have too much going on. It should be a piece of cake. > Current hardware: PII-350 on an ASUS P2BL motherboard, Compaq Smart Array 3200 SCSI controller, Compaq Storage array UE, Sony 20GB Tape backup SDT-1 OS: Netware 5.0 Backup Software: Backup Exec Major Application: FilePro Database The critical application is the FilePro database which, I understand, might take some adjustments to the file locking configuration on Samba. I'll also need to have a backup solution. I wanted to stick with an industrial-class SCSI Array and was thinking of picking up some used HP SCSI hardware on ebay. The Smart Array 3200 has saved me on a number of occasions and was pretty easy to use so I like the idea of sticking with it unless others know why not to do so or have suggestions they think are better. I only have about 10 users so even moving stuff manually shouldn't be that difficult. Boaz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Should I upgrade Samba?
Currently I have a new server being set up with CentOS 4.4 (RedHat Enterprise Linux 4.4) and the Samba binaries that come with it which are version 3.010149. I am something of a Linux newbie so I wanted to know if I should upgrade to 3.0.24 and, if I should, why doesn't CentOS upgrade their binaries to the latest Samba? Thanks in advance. Boaz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] How to I clean up Samba to start over?
I've been working on setting up Samba, but after playing around with it for some time and probably messing things up I'm getting all sorts of permission problems. Plus, when I look in Webmin, I find duplicate and triplicate listings of Samba groups. What I would like to is wipe it clean and try and start over since I now know a lot more about what works and what doesn't. But how do I do this? Boaz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] How to I clean up Samba to start over?
I've been working on setting up Samba, but after playing around with it for some time and probably messing things up I'm getting all sorts of permission problems. Plus, when I look in Webmin, I find duplicate and triplicate listings of Samba groups. What I would like to is wipe it clean and try and start over since I now know a lot more about what works and what doesn't. But how do I do this? Boaz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Can't change password change dates with PDBEDIT
I'm setting up a Samba server using CentOS 4's (RedHat Enterprise Linux) standard version (v.3.0101411). I want to be able to force users to change their password upon first logging in and to have to change them after a certain period of time (per user, not system-wide). The problem is that the pdbedit commands don't seem to be registering at all in the database. If I enter the following command: pdbedit --pwd-must-change-time="2010-01-01" --time-format="%Y-%m-%d" I still get: Password last set:Fri, 16 Mar 2007 10:02:06 GMT Password can change: Fri, 16 Mar 2007 10:02:06 GMT Password must change: Mon, 18 Jan 2038 22:14:07 GMT How do I control login times? (I'm moving from a Novel Netware server where these kind of administration tasks were very easy. I'm disappointed that it is taking me so long to get this done.) Boaz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can't change password change dates with PDBEDIT
Felipe Augusto van de Wiel wrote: > Hi Boaz, > Thanks for the reply, Felipe. > I'm using LDAP as a backend so YMMV. > I've been thinking about using LDAP, but I don't have a very large installation (maybe 15 computers) so I wanted to avoid getting overly complicated. But it seems that tdbSAM is not much better as it is very difficult to get good information on how to get things done. > > On 03/16/2007 12:10 PM, Boaz Bezborodko wrote: >> I'm setting up a Samba server using CentOS 4's (RedHat >> Enterprise Linux) standard version (v.3.0101411). I > > Hmmm, you should upgrade your samba version. Not sure > if it will solve your problem, but I'm using 3.0.24 and the > information of this message is based on this version. Anyway, > 3.0.14 and 3.0.2x has lots of improvements and fixes that are > worthwhile. > I was sticking with the official RedHat release if only because previous advice was that I should probably stick with it unless I specifically needed new features as it was likely the most stable version with this OS. I did not anticipate that what seem like basic operations would be so difficult to apply. Is this a version thing? I would think that adjusting dates in a database would be an easy thing to do. > >> want to be able to force users to change their password >> upon first logging in and to have to change them after >> a certain period of time (per user, not system-wide). > >> The problem is that the pdbedit commands don't seem to >> be registering at all in the database. If I enter the >> following command: >> pdbedit --pwd-must-change-time="2010-01-01" --time-format="%Y-%m-%d" > > Not sure if it is a bug in pdbedit, but there is an > unusual behaviour of samba with regards to passwd fields, > here is a message where I explain the behaviour: > > http://lists.samba.org/archive/samba/2007-February/129890.html > I'll try this out. Thanks for the assistance. Boaz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
