[Samba] Samba 2.2 + CUPS driver download work for anyone?

2003-04-05 Thread Brian Wiese
I have tried everything I could possibly think of to get printer driver
download working with Samba 2.2.3a-6 and CUPS 1.1.15-4 (latest Debian
unstable packages).  I am wondering if anyone else has go this to work at
all (with newer versions of samba or cups?)  -- if so please let me know to
give me some hope.  Or else I am thinking this is officially 'broken'.

CUPS is working perfectly with the printers installed, even Win98 clients
can print using the shared network HP8100N printer via Samba with their own
locally installed printer drivers (from manufacture disks).  I would simply
like to automated the printer driver selection and installation for the
Win98 clients. (right click on printer -> install should "just work").  What
else do I need to do?  Can I just place some actual drivers files in the
[print$] share manually??

Thanks in advance! ...

I've setup the [print$] share:
http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection.html#AEN798
and am trying to setup CUPS for driver download:
http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection.html#AEN1050

// These printers work fine, from UNIX and Win98 clients

[EMAIL PROTECTED]:/var/log/samba# lpstat -v
device for HP8100N: socket://192.168.2.27:9100/
device for HP8100Nps: socket://192.168.2.27:9100/

// PPD files used for CUPS Printers, both work

[EMAIL PROTECTED]:/etc/cups/ppd# ls -l
total 248
-rw-r--r--1 root root   122039 Apr  6 14:19 HP8100N.ppd
-rw-r--r--1 root root   122039 Apr  6 14:23 HP8100Nps.ppd


// ADOBE Postscript drivers

[EMAIL PROTECTED]:/usr/share/cups/drivers# ls -l
total 2232
-rwxr--r--1 root root   575573 Mar 30 12:38 ADFONTS.MFM
-rwxr--r--1 root root  1295840 Mar 30 12:38 ADOBEPS4.DRV
-rwxr--r--1 root root   196460 Mar 30 12:38 ADOBEPS4.HLP
-rwxr--r--1 root root13492 Mar 30 12:39 DEFPRTR2.PPD
-rwxr--r--1 root root   118128 Mar 30 12:38 ICONLIB.DLL
-rwxr--r--1 root root57344 Mar 30 12:39 PSMON.DLL

/* ADOBEPS5.DLL, ADOBEPSU.DLL, ADOBEPSU.HLP were not found on the
/* adobe.com website for either their Universal 1.0.6 drivers
/* (winsteng.exe) or their Postscript 4.2.6 drivers for Win9x
/* (aps426eng.exe).  These files where copied over from a Windows 98
/* machine, are the missing files necessary for CUPS driver download??

// Running the cupsaddsmb program to copy the CUPS printer drivers
// to the samba [print$] share -- unsuccessfully.

[EMAIL PROTECTED]:~# cupsaddsmb -U root -a
Warning: No PPD file for printer "HP8100N"!

/* Why is it giving this error? The proper PPD files are in 
/* /etc/cups/ppd/ as shown above and placed there by the CUPS
/* web-based install and command line "lpadmin -p HP8100N -v  \
/* socket://192.168.2.27:9100 -E -P /usr/share/cups/model/HP8100N.PPD"
/* printer install process.

// PPD files of course not added to the [print$] share

[EMAIL PROTECTED]:/etc/samba/drivers# ls -lR
.:
total 8
drwxr-xr-x2 root root 4096 Apr  6 15:37 W32X86
drwxr-xr-x2 root root 4096 Apr  6 15:37 WIN40

./W32X86:
total 0

./WIN40:
total 0

  relevant pieces of smb.conf file -
[global]
   workgroup = linuxtest
   netbios name = WS-072
   ## lines here snipped for brevity

   load printers = yes
   printing = cups
   printcap name = cups

[printers]
   comment = All Printers
   browseable = yes
   path = /var/spool/samba
   printable = yes
   public = no
   writable = no
   create mode = 0700
   printer admin = root

[print$]
comment  = Printer Drivers
path = /etc/samba/drivers
browseable = yes
guest ok = no
read only = yes
write list = root,usertest
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] cant set up a no password login

2003-03-31 Thread Brian Wiese
I think you want to send this back to the list (cc'd), and not just
myself. So, is it working now... or not?  Yes samba must run as root first
to bind to those low ports 137-139 and such... there was a big
vulnerablitiy lately in samba, so make sure you have an up to date/patched
version.  As you did below, you can only run "smbclient -L //hostname" not
just that without the -L, if you want to browse a share with smbclient you
need "smbclient //hostname/sharename".  I prefer to just attempt to mount
the stuff though (smbmount, mount -t smbfs //path/share /mnt/point)

On Mon, 31 Mar 2003 16:58:21 +0200
julius <[EMAIL PROTECTED]> wrote:

|hi
|nothing worked until now :(
|just to get sure, yes i restart my samba daemons nmbd/smbd every time i 
|changed the conf...they run as root, is that okay ?
|
|ive made some test :
|
|/usr/local/samba/bin/smbclient //localhost/added interface 
|ip=192.168.0.1 bcast=192.168.0.255 nmask=255.255.255.0
|Password: Domain=[LANSTRIKE] OS=[Unix] Server=[Samba 2.2.5]
|tree connect failed: NT_STATUS_BAD_NETWORK_NAME
|
|/usr/local/samba/bin/smbclient //DEATHB/   added interface 
|ip=192.168.0.1 bcast=192.168.0.255 nmask=255.255.255.0
|error connecting to 62.146.79.130:139 (Connection refused)
|Error connecting to 62.146.79.130 (Connection refused)
|Connection to DEATHB failed
|
|cant find me only with my ip or localhost ??
|
|heres my actual conf file :
|
|[global]
|netbios name = DEATHB
|server string = Samba %v on (%L)
|workgroup = LANSTRIKE
|encrypt passwords = yes
|security = share
|guest account = mp3
|null passwords = yes
|
|[homes]
|browseable = no
|
|[mp3]
|comment = lmh
|path = /mp3
|public = yes
|force user = mp3
|force group = mp3
|
|
|and heres the mp3 dir under / that i want to offer, or just use for 
|testing
|
|drwxr-xr-x2 mp3  mp3  4096 Mar 31 16:38 mp3
|
|
|only the -L option from smbclient works...
|i can just press enter at the password prompt
|
|/usr/local/samba/bin/smbclient -L localhost
|added interface ip=192.168.0.1 bcast=192.168.0.255 nmask=255.255.255.0
|Password: Domain=[LANSTRIKE] OS=[Unix] Server=[Samba 2.2.5]
|
| Sharename  Type  Comment
| -    ---
| mp3Disk  lmh
| IPC$   IPC   IPC Service (Samba 2.2.5 on 
|(localhost))
| ADMIN$ Disk  IPC Service (Samba 2.2.5 on 
|(localhost))
| deathb Disk  Home directory of deathb
|
| Server   Comment
| ----
| DEATHB   Samba 2.2.5 on (deathb)
|
| WorkgroupMaster
| ----
| LANSTRIKE
|
|thx for your awnsers
|
|
|On 2003.03.31 06:39 Brian Wiese wrote:
|> By default, samba disallows null passwords.  man smb.conf
|> So you might want to set:
|> 
|> null passwords = yes
|> 
|> hth, peace
|> Brian
|> 
|> On Sun, 30 Mar 2003 09:42:41 -0500
|> Joel Hammer <[EMAIL PROTECTED]> wrote:
|> 
|> |You might make this work with just:
|> |
|> |guest account = nobody
|> |
|> |in [global]
|> |
|> |You could use other users like root (not very secure but it all
|> depends
|> |on your needs) or any regular user you have defined on this server.
|> |
|> |Joel
|> |
|> |On Sun, Mar 30, 2003 at 10:59:05AM +0200, julius wrote:
|> |> hi
|> |> have problems to get an samba server up that offers shares for all
|> |> without a password
|> |>
|> |> heres my smb.conf file located under /usr/local/samba/lib/smb.conf
|> |>
|> |> [global]
|> |> netbios name = DEATHB
|> |> server string = Samba pv on (pL)
|> |> workgroup = LANSTRIKE
|> |> encrypt passwords = yes
|> |> security = share
|> |>
|> |> [homes]
|> |> browseable = no
|> |>
|> |> [mp3]
|> |> comment = lmh
|> |> path = /var/glftpd/site/mp3/lame.r3mix/
|> |> browseable = yes
|> |> read only = yes
|> |> guest ok = yes
|> |>
|> |> has anybody an idea ?
|> |> --
|> |> To unsubscribe from this list go to the following URL and read the
|> |> instructions:  http://lists.samba.org/mailman/listinfo/samba
|> |--
|> |To unsubscribe from this list go to the following URL and read the
|> |instructions:  http://lists.samba.org/mailman/listinfo/samba
|> |
|> 
|> 
|>   Brian Wiese | [EMAIL PROTECTED] | aim: unolinuxguru
|> --
|>   GnuPG/PGP key 0xF3220030 | "FREEDOM!" - Braveheart
|> --
|> This is not about Napster or DVDs. It's about your Freedom.
|>   I'll see your DMCA and raise you a First Amendment.
|>   http://www.anti-dmca.org
|> 
|> 
|


  Brian Wiese | [EMAIL PROTECTED] | 

Re: [Samba] cant set up a no password login

2003-03-30 Thread Brian Wiese
By default, samba disallows null passwords.  man smb.conf
So you might want to set:

null passwords = yes

hth, peace
Brian

On Sun, 30 Mar 2003 09:42:41 -0500
Joel Hammer <[EMAIL PROTECTED]> wrote:

|You might make this work with just:
|
|guest account = nobody
|
|in [global]
|
|You could use other users like root (not very secure but it all depends
|on your needs) or any regular user you have defined on this server.
|
|Joel
|
|On Sun, Mar 30, 2003 at 10:59:05AM +0200, julius wrote:
|> hi
|> have problems to get an samba server up that offers shares for all 
|> without a password
|> 
|> heres my smb.conf file located under /usr/local/samba/lib/smb.conf
|> 
|> [global]
|> netbios name = DEATHB
|> server string = Samba pv on (pL)
|> workgroup = LANSTRIKE
|> encrypt passwords = yes
|> security = share
|> 
|> [homes]
|> browseable = no
|> 
|> [mp3]
|> comment = lmh
|> path = /var/glftpd/site/mp3/lame.r3mix/
|> browseable = yes
|> read only = yes
|> guest ok = yes
|> 
|> has anybody an idea ?
|> -- 
|> To unsubscribe from this list go to the following URL and read the
|> instructions:  http://lists.samba.org/mailman/listinfo/samba
|-- 
|To unsubscribe from this list go to the following URL and read the
|instructions:  http://lists.samba.org/mailman/listinfo/samba
|


  Brian Wiese | [EMAIL PROTECTED] | aim: unolinuxguru
--
  GnuPG/PGP key 0xF3220030 | "FREEDOM!" - Braveheart 
--  
This is not about Napster or DVDs. It's about your Freedom.
  I'll see your DMCA and raise you a First Amendment.
  http://www.anti-dmca.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Single shared directory, with a universal password

2003-03-26 Thread Brian Wiese
On 17 Mar 2003 12:07:39 +1100
Andrew Bartlett <[EMAIL PROTECTED]> wrote:

|On Mon, 2003-03-17 at 11:37, [EMAIL PROTECTED] wrote:
|> Hello,
|> 
|> I am using Samba "Version 2.2.3a-12 for Debian" on a Debian 3.0 system.
|> I have looked at lots of Samba documentation and have not been able to
|> find anything explaining what I need. I want to create a single
|> directory on my Samba server that is ok for any user (e.g. 'guest ok =
|> yes'), but is password protected. Meaning, I want a share that any user
|> can access as long as they have the password to that specific
|> directory. I haven't seen how to do this anywhere, so any assistance
|> that you could offer would be most appreciative. Thanks a lot!
|
|Set 'security=share' on the server, and create an account in smbpasswd
|for a new user 'share_user' (or whatever you like to call it).
|
|Then put 'user = share_user' and 'valid users = share_user' in the
|declaration for that share. 

Might also want to add "force user = share_user"
>From 'man smb.conf'...
   force user (S)
  This  specifies  a  UNIX  user  name  that  will be
  assigned as the default user for all users connect­
  ing  to  this  service.  This is useful for sharing
  files. You should also use it carefully as using it
  incorrectly can cause security problems.

  This  user name only gets used once a connection is
  established.  Thus clients still need to connect as
  a valid user and supply a valid password. Once con­
  nected, all file operations will  be  performed  as
  the  "forced  user",  no  matter  what username the
  client connected as. This can be very useful.

|This gets you pretty close to the 'share level' password on Win9X.  Not
|quite (because we map to unix users) but pretty close.
|
|Note that setting 'security=share' will affect other shares on the
|server, so you might want to look into a %L include to host this on a
|separate virtual hostname.
|
|Andrew Bartlett
|
|-- 
|Andrew Bartlett [EMAIL PROTECTED]
|Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
|Student Network Administrator, Hawker College   [EMAIL PROTECTED]
|http://samba.org http://build.samba.org http://hawkerc.net
|


  Brian Wiese | [EMAIL PROTECTED] | aim: unolinuxguru
--
  GnuPG/PGP key 0xF3220030 | "FREEDOM!" - Braveheart 
--  
This is not about Napster or DVDs. It's about your Freedom.
  I'll see your DMCA and raise you a First Amendment.
  http://www.anti-dmca.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Fw: share a folder rw, but not deletable?

2003-03-26 Thread Brian Wiese
Is there a way in UNIX to make a folder with read+write permissions for
some group of users, but only allow them to read and write to the
folder... not actually delete the folder itself?

I have some samba shares, and directories inside them that I want to
remain with their current structure and permission settings -- with many
similiar group-specific files inside each folder, but I don't want the
users to be able to delete the folders themselves! =)  

I've tried setting the directories with the sticky bit (i) with "chattr +i
dir/" and that didn't work... as now the users could not r/w data within
the directory.  I don't want the directories to be renamed or deleted. 
Windows has the "delete" permissions available -- but not samba?

Any UNIX/Samba suggestions?

thanks, peace

  Brian Wiese | [EMAIL PROTECTED] | aim: unolinuxguru
--
  GnuPG/PGP key 0xF3220030 | "FREEDOM!" - Braveheart 
--  
This is not about Napster or DVDs. It's about your Freedom.
  I'll see your DMCA and raise you a First Amendment.
  http://www.anti-dmca.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Sync Linux <-> NT Domain passwords

2003-03-15 Thread Brian Wiese
On Fri, 14 Mar 2003 09:15:54 +1100
"Simeonidis, Steve" <[EMAIL PROTECTED]> wrote:

|I've tried synchronising their passwords so when they change their
|Windows password it changes their
|Linux password, but unfortunately that doesn't happen.

Though I understand "unix password sync" will provide this functionality
(sync the unix password when the samba password changes), is there a
procedure to do the reverse (sync the samba password when the user's unix
password is changed)?

Someone mentioned earlier on the list that a script or alias could be used
to do this, would anyone care to elaborate??  

What I am eventually looking for is a single sign-on functionality with
samba and how best to achieve it, would PAM help with this?

peace

  Brian Wiese | [EMAIL PROTECTED] | aim: unolinuxguru
--
  GnuPG/PGP key 0x1E820A73 | "FREEDOM!" - Braveheart 
--  
This is not about Napster or DVDs. It's about your Freedom.
  I'll see your DMCA and raise you a First Amendment.
  http://www.anti-dmca.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] subdirectory of home

2003-03-15 Thread Brian Wiese
On Fri, 14 Mar 2003 09:59:45 +0100
Mar <[EMAIL PROTECTED]> wrote:

|What I want is to share a subdirectory of home instead the home itself. 
|In this manner, when a user try connect to his home directory, he really 
|will connect with, by example, /home/user/subdir.
|
|I don't now if it's possible to do that in the [homes] section, or I 
|must create a new different section for every user.

See if adding this to your smb.conf would work...

|> --
|> [homes]
|>  comment = Home Directories

path = %H/subdir

|>  read only = No
|>  browseable = No

peace

  Brian Wiese | [EMAIL PROTECTED] | aim: unolinuxguru
--
  GnuPG/PGP key 0x1E820A73 | "FREEDOM!" - Braveheart 
--  
This is not about Napster or DVDs. It's about your Freedom.
  I'll see your DMCA and raise you a First Amendment.
  http://www.anti-dmca.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] want to access a Windows Share from a Red Hat 8 linux box

2003-03-15 Thread Brian Wiese
On Thu, 13 Mar 2003 18:16:11 -0500
"David Jackson" <[EMAIL PROTECTED]> wrote:

|I have a domain and both servers are members of the domain.
|
|I want to access a windows share from the Red hat 8 server?
|
|Do I use mount or smbmount?

You could use either.  You should be able to mount and unmount samba
shares with smbmount and smbumount commands given you have all of the
permissions (to mount, to use the mount point, samba share user access). 
You can also use the mount command with the "-t smbfs" option that
specifies the fs type to be smbfs.  You could even add this line to your
/etc/fstab to automount the share, and let normal users mount the share.

//windows_server/shared_folder /linux_local_folder smbfs rw,auto,user 0 0

|I have been trying to use smbmount with the username option.
|However, it keeps denying me access.
|Here is what i type:
|smbmount //windows_server/shared_folder /linux_local_folder
|username=davidj After it asks for password, it rejects me with ErrMsg.

What is the error message? Bad password?

First, try to add "-o" to your command to specify the option "username=",
I've forgotten this before...

smbmount service mount-point [ -o options ]

If the share is restricted access (unix perms or samba perms), you also
need to make sure you have the proper permissions.  Try to mount it as the
samba user on the server who would have access to mount it (as specified
with your "username=davidj" option), and then provide the samba password
for it.  Reset your samba password with the smbpasswd command as root
(smbpasswd davidj) or user davidj (smbpasswd).

peace

  Brian Wiese | [EMAIL PROTECTED] | aim: unolinuxguru
--
  GnuPG/PGP key 0x1E820A73 | "FREEDOM!" - Braveheart 
--  
This is not about Napster or DVDs. It's about your Freedom.
  I'll see your DMCA and raise you a First Amendment.
  http://www.anti-dmca.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Setting up PDC with PAM

2003-03-12 Thread Brian Wiese
On 11 Mar 2003 22:43:22 +1100
Andrew Bartlett <[EMAIL PROTECTED]> wrote:

|On Mon, 2003-03-10 at 17:09, Paul Cabot wrote:
|> According to the documentation on setting up Samba to be a PDC.  It
|> says that you have to enable encrypted passwords for it to work!
|> 
|> Now for Samba with PAM to work the documentation says that you can't 
|> have encrypted passwords enabled!
|
|Correct, for authentication.  The 'obey pam restrictions' is about
|'account' and 'session' properties like 'expired' and 'too many users'.

Does this apply for the 'password' properties as well?  Can one enforce
the PAM cracklib or passwdqc[1] modules to ensure strong passwords are
being used or not?  Would anyone be willing to contribute a working Samba
PAM config file to the list please?

[1] http://www.openwall.com/passwdqc/

|> So does that mean that I can't set up Samba has a PDC and use PAM to 
|> authenticate the users!
|
|Yes.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba+pam

2003-03-08 Thread Brian Wiese
On Fri, 7 Mar 2003 20:50:55 -0300
Rodrigo Schmidt N <[EMAIL PROTECTED]> wrote:

|Hi
|Can anybody give me a hand to setup a samba server with pam support?

I also would appreciate if someone had a samba PAM config file to post to
the list, preferably an example of samba passwords working with the
cracklib module to enforce strong passwords?   Is this possible?-- I know
you can't use PAM for 'authentication' with encrypted passwords, but the
smb.conf man page that 'obey pam restrictions = yes' only applies for
'session' and 'session' management... how about 'passwords'? (require use
of unix /etc/passwd passwords?)

Would appreciate any guidance on this. Thanks.

peace

  Brian Wiese | [EMAIL PROTECTED] | aim: unolinuxguru
--
  GnuPG/PGP key 0x1E820A73 | "FREEDOM!" - Braveheart 
--  
This is not about Napster or DVDs. It's about your Freedom.
  I'll see your DMCA and raise you a First Amendment.
  http://www.anti-dmca.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] domain pswd policy? single-sign on?

2003-02-24 Thread Brian Wiese
I've set up a samba domain controller and am reading that PAM
authentication modules (cracklib) cannot be used with encrypted passwords
in Samba.  Is there any way to enforce password policies then for samba
accounts? (i.e. min length 8 chars, letters+nums+special, new pswd not
similiar to last pswd)

Also, is there any way to do a single signon with samba accounts with
encrypted passwords? (permit samba/domain authenticated users to access
their pop/smtp services on another unix server)

I currently only have restriced unix accounts (no shell, no home dir,
account disabled) setup on the PDC just to create the samba users, there
is currently no need for them to access any unix services on the samba
domain server.

thanks, peace

  Brian Wiese | [EMAIL PROTECTED] | aim: unolinuxguru
--
  GnuPG/PGP key 0x1E820A73 | "FREEDOM!" - Braveheart 
--  
This is not about Napster or DVDs. It's about your Freedom.
  I'll see your DMCA and raise you a First Amendment.
  http://www.anti-dmca.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba