[Samba] samba AD integration

2009-03-22 Thread Chris Henderson
I was looking at:
http://wiki.samba.org/index.php/Samba_&_Active_Directory - the
Configuring Windows part says: "I am still working on that ... " -
could someone point me to a documentation on the Windows 2003 end of
things? I have done the Linux end and now need to do the Windows part
(groups, users, permissions etc.)

Thanks.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] directory permission - access denied

2009-03-22 Thread Chris Henderson
When I try to write to my directory, it says: access denied.

smb.conf (v3.0):

[global]
workgroup = AD
security = ADS
realm = AD.COMPANY.COM
encrypt passwords = yes
preferred master = no
log level = 3
auth methods = winbind
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
idmap uid = 10-20
idmap gid = 10-20
netbios name = test
password server = 192.168.25.25
template homedir = /home/%D/%U
template shell = /bin/bash
winbind enum groups = Yes
winbind enum users = Yes

[mkt]
path = /mkt/
comment = mkt Data Share
directory mask = 0770
read only = no
available = yes
browseable = yes
writable = yes
guest ok = no
public = no
printable = no
share modes = no
locking = no

The directory /mkt/ has 775 permission and is owned by root and group
mkt (I added group using the groupadd command). In /etc/group I have
added active directory user to the mkt group.

Now I log on to Windows using AD user name and password and mount
\\server\mkt and it doesn't ask for any user name and password. I then
try to create a file and it says denied.

I can log on using my AD account with smbclient ( smbclient
server\\mkt -U AD_USER_NAME)

I can see the shares using  smbclient -L server -U 

Thanks for any help.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba 3.0 AD Integration restrict users

2009-03-01 Thread Chris Henderson
I have configured a Linux server so users can log in with their AD
credentials. However, I have a directory I would like to share and
restrict it to a few AD users. All these users will have read and
execute access but only two users will have write access.

The /srv/www/vhosts/marketing is the directory I would like to share.
It is owned by root:marketing both have 777 permission to that dir. I
have edited the /etc/group file and added one of the users to the
marketing group but while trying to log in I can see permission denied
when connecting to [marketing] in /var/log/messages

Following is my smb.conf file. Thanks for any help;

[global]
workgroup = AD
security = ADS
realm = domain.com
encrypt passwords = yes
preferred master = no
log level = 3
auth methods = winbind
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
idmap uid = 10-20
idmap gid = 10-20
netbios name = gandalf
password server = 172.16.20.34
template homedir = /home/%D/%U
template shell = /bin/bash

[marketing]
comment = Marketing Internal Web
inherit acls = No
path = /srv/www/vhosts/marketing
read only = No
guest ok = No
browseable = Yes
create mask = 4755
directory mask = 0770

Thanks.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba AD authentication: not prompting for password

2008-12-10 Thread Chris Henderson
I'm using Samba to authenticate against Active Directory. After the
initial setup, I mounted the
UNIX drive under XP using my AD credentials. Now every time I mount
the drives under XP, I am not
being asked for a username and password anymore. I have re-booted my
XP, deleted the share from My
Network Places under XP with no luck. I tried from another XP machine
with a different AD user
credentials and the first time I mounted the drive, I was asked for a
username and password and now I can
login withone one!

I have done "kdestroy" to destory kerberos cache, restarted smb, nmb,
winbind with no luck.

Any help would be much appreciated. Thanks.

My versions:
===

samba 3.0
krb5-1.6
samba-winbind 3.0
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba