Re: [Samba] Samba PDC: Only one User can't log in

2010-04-15 Thread Daniel Spannbauer
Andy schrieb:
 Hi Daniel,

 When the user attempts to login what message does he get?
   

I only have the Message in German, I try to translate:

you cant get logged on. please check username and domain and retype your 
password

have you checked the account flags?

AccountFlag is UX.

Regards

Daniel


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] NMB is flooding logfile

2010-03-09 Thread Daniel Spannbauer

Hello,

I have a litle strnge problem with 3.0.23d on a SuSE 10.2.
In Messages, I have hundreds of Messages like:
=
Mar  9 14:59:19 v-gate nmbd[3664]: [2010/03/09 14:59:19, 0] 
nmbd/nmbd_incomingrequests.c:process_name_refresh_request(172)
Mar  9 14:59:19 v-gate nmbd[3664]:   process_name_refresh_request: 
unicast name registration request received for name VXP00 from IP 
10.17.28.1 on subnet UNICAST_SUBNET.
Mar  9 14:59:19 v-gate nmbd[3664]: [2010/03/09 14:59:19, 0] 
nmbd/nmbd_incomingrequests.c:process_name_refresh_request(173)

Mar  9 14:59:19 v-gate nmbd[3664]:   Error - should be sent to WINS server
Mar  9 14:59:19 v-gate nmbd[3664]: [2010/03/09 14:59:19, 0] 
nmbd/nmbd_incomingrequests.c:process_name_refresh_request(172)
Mar  9 14:59:19 v-gate nmbd[3664]:   process_name_refresh_request: 
unicast name registration request received for name WORKGROUP00 from 
IP 10.17.28.1 on subnet UNICAST_SUBNET.
Mar  9 14:59:19 v-gate nmbd[3664]: [2010/03/09 14:59:19, 0] 
nmbd/nmbd_incomingrequests.c:process_name_refresh_request(173)

Mar  9 14:59:19 v-gate nmbd[3664]:   Error - should be sent to WINS server


I don't know the cause for this Messages.
Here my smb.conf:

[global]
; speed optimierungen
socket options = TCP_NODELAY
share modes = no
debug level = 0
getwd cache = yes
preserve case = yes

encrypt passwords = no
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
smb ports = 139
local master = no

; - same as umask 2
create mask = 0775
; - disconnect after N minutes inactive
dead time = 300
; - check whether clients are alive [seconds]
keep alive = 300
; - may delete readonly files
delete readonly = yes
; - logfiles grow up to N kByte
max log size = 100
; - don't map archive bit to execute bit
map archive = no
; - umask 2 setting for files and directories
create mask = 0775
directory mask = 0775
; - do NOT use oplocks
oplocks = false
; - WINS support
wins support = yes
preferred master = yes
os level = 32
;
wins server = gate
name resolve order = wins host bcast
security = user
==
The Network is small, only the suse 10.2, a WIN-XP Professional an a 
Network printer.


Does anybody know what causes this messages?

Regards

Daniel



--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] NMB is flooding logfile

2010-03-09 Thread Daniel Spannbauer



Dale Schroeder schrieb:

Daniel,

It looks like you have both wins support and wins server configured.
 From the rest of your smb.conf, it appears you want wins support = 
Yes, so try disabling the wins server = gate.
Ensure that your XP system knows where to find the WINS server.  You 
might even be able to do the same for your network printer.
The source of your log problem can probably be deduced by knowing which 
system has ip 10.17.28.1.

http://old.nabble.com/Error-should-be-sent-to-WINS-server-td8938043.html

Dale



Hello Dale,

the IP 10.17.28.1 is the XP-Machine.
I think I simply disable the winssupport completly.

Thanks

Daniel





On 03/09/2010 8:06 AM, Daniel Spannbauer wrote:

Hello,

I have a litle strnge problem with 3.0.23d on a SuSE 10.2.
In Messages, I have hundreds of Messages like:
=
Mar  9 14:59:19 v-gate nmbd[3664]: [2010/03/09 14:59:19, 0] 
nmbd/nmbd_incomingrequests.c:process_name_refresh_request(172)
Mar  9 14:59:19 v-gate nmbd[3664]:   process_name_refresh_request: 
unicast name registration request received for name VXP00 from IP 
10.17.28.1 on subnet UNICAST_SUBNET.
Mar  9 14:59:19 v-gate nmbd[3664]: [2010/03/09 14:59:19, 0] 
nmbd/nmbd_incomingrequests.c:process_name_refresh_request(173)
Mar  9 14:59:19 v-gate nmbd[3664]:   Error - should be sent to WINS 
server
Mar  9 14:59:19 v-gate nmbd[3664]: [2010/03/09 14:59:19, 0] 
nmbd/nmbd_incomingrequests.c:process_name_refresh_request(172)
Mar  9 14:59:19 v-gate nmbd[3664]:   process_name_refresh_request: 
unicast name registration request received for name WORKGROUP00 from 
IP 10.17.28.1 on subnet UNICAST_SUBNET.
Mar  9 14:59:19 v-gate nmbd[3664]: [2010/03/09 14:59:19, 0] 
nmbd/nmbd_incomingrequests.c:process_name_refresh_request(173)
Mar  9 14:59:19 v-gate nmbd[3664]:   Error - should be sent to WINS 
server



I don't know the cause for this Messages.
Here my smb.conf:

[global]
; speed optimierungen
socket options = TCP_NODELAY
share modes = no
debug level = 0
getwd cache = yes
preserve case = yes

encrypt passwords = no
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
smb ports = 139
local master = no

; - same as umask 2
create mask = 0775
; - disconnect after N minutes inactive
dead time = 300
; - check whether clients are alive [seconds]
keep alive = 300
; - may delete readonly files
delete readonly = yes
; - logfiles grow up to N kByte
max log size = 100
; - don't map archive bit to execute bit
map archive = no
; - umask 2 setting for files and directories
create mask = 0775
directory mask = 0775
; - do NOT use oplocks
oplocks = false
; - WINS support
*wins support = yes *
preferred master = yes
os level = 32
;
*wins server = gate *
name resolve order = wins host bcast
security = user
==
The Network is small, only the suse 10.2, a WIN-XP Professional an a 
Network printer.


Does anybody know what causes this messages?

Regards

Daniel





--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba PDC: not permitted to access this share

2010-02-10 Thread Daniel Spannbauer
  523 Feb 10 08:59 browse.dat
-rw-r--r-- 1 root root 8192 Feb 10 08:53 connections.tdb
drwxrwxr-x 9 root ntadmin  4096 Nov 17  2008 drivers
-rw-r--r-- 1 root root 8192 Aug  6  2007 gencache.tdb
-rw--- 1 root root 8192 Aug 10  2007 group_mapping.tdb
-rw-r--r-- 1 root root49152 Feb 10 09:03 locking.tdb
-rw-r--r-- 1 root root  696 Jul 31  2009 login_cache.tdb
-rw--- 1 root root 8192 Jan 27 15:21 messages.tdb
drwxr-xr-x 3 root root 4096 Feb  5 13:55 netlogon
-rw--- 1 root root 8192 Aug 10  2007 ntdrivers.tdb
-rw--- 1 root root  696 Aug 10  2007 ntforms.tdb
-rw--- 1 root root16384 Feb  8  2008 ntprinters.tdb
drwxr-xr-x 2 root root 4096 Aug 10  2007 perfmon
drwxr-xr-x 2 root root 4096 Oct 30 12:15 printing
drwxrwx--- 2 root users4096 Nov 27  2006 profiles
-rw--- 1 root root16384 Aug 10  2007 registry.tdb
-rw-r--r-- 1 root root24576 Feb 10 08:53 sessionid.tdb
-rw--- 1 root root 8192 Aug 10  2007 share_info.tdb
-rw-r--r-- 1 root root16384 Jan 28 03:02 unexpected.tdb
drwxrwx--T 2 root users4096 Jul 31  2009 usershares
--

ll on /var/lib/samba/netlogon:

-
drwxrwxrwx+ 14 root root 4096 Nov  3 16:05 Default User
-rw-r--r--   1 root root  515 Dec  6 17:57 logon.bat




Can anybody help me to figure out why there is a permission denied?
If you need more information, please let me know.


Regards

Daniel




--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Desktop.ini in Startmenue

2009-11-02 Thread Daniel Spannbauer

Hello,

I've setup a PDC with Samba 3.0.23 and a ldap-backend.
Roaming Profiles are working, but I always have the desktop.ini visible 
in some folders of the Windows-Startmenue.
I found several hints for the dos-attributes in smb.conf, buit notthing 
seems to work.


Any hints?
Here is my smb.conf:

[global]
workgroup = example
server string = b-login
passdb backend = ldapsam:ldap://10.3.1.3;
username map = /etc/samba/smb-user-map
log level = 10
debug uid = Yes
smb ports = 139
name resolve order = wins host bcast
deadtime = 300
printcap name = cups
add machine script = /usr/sbin/useradd  -c Machine -d 
/var/lib/nobody -s /bin/false %m$

logon path = \\%L\%U\.ntprofile
logon drive = H:
logon home = \\%L\%U
preferred master = Yes
local master = No
domain master = No
wins server = gate
kernel oplocks = No
ldap admin dn = cn=Administrator,dc=example,dc=de
ldap group suffix = ou=group
ldap machine suffix = ou=Computers
ldap suffix = dc=example,dc=de
ldap ssl = no
ldap user suffix = ou=people
create mask = 0775
directory mask = 0775
profile acls = Yes
map acl inherit = Yes
hide unreadable = Yes
map archive = No
map readonly = no
store dos attributes = Yes
share modes = No
delete readonly = Yes

[homes]
comment = Home Directory
read only = No
create mask = 0711
hide files = /Desktop.ini/ntuser.ini/NTUSER.*/tmp/RECYCLER/
map hidden = Yes
map system = Yes
browseable = No

Regards

Daniel




--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Desktop.ini in Startmenue

2009-11-02 Thread Daniel Spannbauer



Miguel Medalha schrieb:




Roaming Profiles are working, but I always have the desktop.ini 
visible in some folders of the Windows-Startmenue.
I found several hints for the dos-attributes in smb.conf, buit 
notthing seems to work.




You have  hide files = /Desktop.ini/

In any Windows computer, you will find both desktop.ini and 
Desktop.ini.


Linux is case-sensitive, so desktop.ini is not covered by your 
configuration.


I would advise you to use hide files = /desktop.ini/Desktop.ini/.
That's what I am doing and it works.
I use it on the global section of smb.conf in order to cover all 
shares.



Added the line hide files = 
/Desktop.ini/desktop.ini/ntuser.ini/NTUSER.*/tmp/RECYCLER/ to the 
global-section, but this seems to has no effect. There is still visible.


Regards

Daniel


--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Can't run an application as normaler USer in Samba-Domain

2009-09-28 Thread Daniel Spannbauer

Hello,

I installed a Samba-PDC with LDAP-Backand,. WIth a XP-Machine I joined 
the domain sucessfully, can login as a Domain-User and also as Domain-Admin.
As Domain-User I can't start any Application. Windows says I have 
insufficent rights.

But I'm in the group of normal Domain Users.

Here is the Group-Mapping:
net groupmap list
[2009/09/28 13:56:34, 0, effective(0, 0), real(0, 0)] 
lib/smbldap_util.c:smbldap_search_domain_info(249)
  smbldap_search_domain_info: Adding domain info for MARCO failed with 
NT_STATUS_UNSUCCESSFUL

Domain Users (S-1-5-21-1503800369-2525905260-2224306923-513) - entw
Domain Guests (S-1-5-21-1503800369-2525905260-2224306923-514) - Domain 
Guests
Domain Computers (S-1-5-21-1503800369-2525905260-2224306923-515) - 
Domain Computers
Administrators (S-1-5-21-1503800369-2525905260-2224306923-2089) - 
Administrators
Account Operators (S-1-5-21-1503800369-2525905260-2224306923-2097) - 
Account Operators
Print Operators (S-1-5-21-1503800369-2525905260-2224306923-2101) - 
Print Operators
Backup Operators (S-1-5-21-1503800369-2525905260-2224306923-2103) - 
Backup Operators

Replicators (S-1-5-21-1503800369-2525905260-2224306923-2105) - Replicators
Domain Admins (S-1-5-21-1503800369-2525905260-2224306923-512) - root

I'm in the unix-Group entw, which is mapped to Domain Users.

Anny Ideas?

Regards

Daniel




--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] No Admin-Rights in SMB-PDC-Domain

2009-09-23 Thread Daniel Spannbauer



Daniel Spannbauer schrieb:

Hello,

I've build a domain with Samba 3.0.23 and sucessfully joined this domain 
with a Windows-XP-Machine. I can log in to that machine as User Root, 
wich is in the Group Domain Admins (rid=512). But I have no 
admin-rights on that machine.

Also, normal User can not log in over the Remotesession (RDP).

Can anybody help me to figure out why?

Here is my smb.conf:



[global]
server string = b-login
workgroup = marco
; speed optimierungen
socket options = TCP_NODELAY
share modes = no
debug level = 10
debug uid = yes
getwd cache = yes
;   read size = 65536
preserve case = yes
log level = 10

printer admin = ds
domain logons = yes
domain master = yes
local master = Yes
preferred master = Yes
ldap admin dn = cn=Administrator,dc=marco,dc=de
ldap delete dn = No
ldap group suffix = ou=group
ldap ssl = off
ldap suffix = dc=marco,dc=de
ldap user suffix = ou=people
ldap machine suffix = ou=Computers
ldap idmap suffix = ou=idmap
;   ldap passwd sync = yes
logon path = \\%L\%U\.ntprofile
logon home = \\%L\%U\.ntprofile
logon drive = H:
passdb backend = ldapsam:ldap://10.3.1.3;
security = user
add machine script = /usr/sbin/useradd  -c Machine -d 
/var/lib/nobody -s /bin/false %m$

printing = cups
printcap name = cups
printcap cache time = 750
cups options =
smb ports = 139
local master = no
kernel oplocks = No

; - same as umask 2
create mask = 0775
; - disconnect after N minutes inactive
dead time = 300
; - check whether clients are alive [seconds]
keep alive = 300
; - may delete readonly files
delete readonly = yes
; - logfiles grow up to N kByte
;   max log size = 100
; - don't map archive bit to execute bit
map archive = no
; - umask 2 setting for files and directories
create mask = 0775
directory mask = 0775
; - WINS support
; note: on SuSE 8samba is patched so that
;   if (wins server == localhost)
;   wins support = yes
;   preferred master = yes
;   os level = 32
;

wins server = gate

name resolve order = wins host bcast

security = user

netbios aliases = homedirs



Hmmm, when I log in on the Workstation as Administrator (which is mapped 
to User root) then I get a Groupsid which ends to 513, so I get as 
Administrator the Rights of the normals Domain USer. But in LDAP the 
PrimaryGroupSid for root is set to 512 (DomainAdmins).
In the Group-Entry for the Group of the DomainAdmins root is also in 
MemberUID.


Can anybody tell me why the PrimaryGropSid isn't used by samba?


Regards

Daniel









Regards

Daniel



--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] No Admin-Rights in SMB-PDC-Domain

2009-09-23 Thread Daniel Spannbauer



Volker Lendecke schrieb:

On Wed, Sep 23, 2009 at 12:33:24PM +0200, Daniel Spannbauer wrote:
Hmmm, when I log in on the Workstation as Administrator (which is mapped  
to User root) then I get a Groupsid which ends to 513, so I get as  
Administrator the Rights of the normals Domain USer. But in LDAP the  
PrimaryGroupSid for root is set to 512 (DomainAdmins).
In the Group-Entry for the Group of the DomainAdmins root is also in  
MemberUID.


Can anybody tell me why the PrimaryGropSid isn't used by samba?


Samba uses the gidNumber of the account and maps it via the
group mapping entries to a SID. We only have the
primaryGroupSid still in our schema because removing it
would have made upgrades almost impossible.



Hello Volker,

that means if the user Root has an Entry primaryGroupSID with the sid 
512 then the User should have Admin-Rights because hes in the 
Domain-Admin-Group?


Regards

Daniel




Volker


--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] No Admin-Rights in SMB-PDC-Domain

2009-09-21 Thread Daniel Spannbauer

Hello,

I've build a domain with Samba 3.0.23 and sucessfully joined this domain 
with a Windows-XP-Machine. I can log in to that machine as User Root, 
wich is in the Group Domain Admins (rid=512). But I have no 
admin-rights on that machine.

Also, normal User can not log in over the Remotesession (RDP).

Can anybody help me to figure out why?

Here is my smb.conf:



[global]
server string = b-login
workgroup = marco
; speed optimierungen
socket options = TCP_NODELAY
share modes = no
debug level = 10
debug uid = yes
getwd cache = yes
;   read size = 65536
preserve case = yes
log level = 10

printer admin = ds
domain logons = yes
domain master = yes
local master = Yes
preferred master = Yes
ldap admin dn = cn=Administrator,dc=marco,dc=de
ldap delete dn = No
ldap group suffix = ou=group
ldap ssl = off
ldap suffix = dc=marco,dc=de
ldap user suffix = ou=people
ldap machine suffix = ou=Computers
ldap idmap suffix = ou=idmap
;   ldap passwd sync = yes
logon path = \\%L\%U\.ntprofile
logon home = \\%L\%U\.ntprofile
logon drive = H:
passdb backend = ldapsam:ldap://10.3.1.3;
security = user
add machine script = /usr/sbin/useradd  -c Machine -d 
/var/lib/nobody -s /bin/false %m$

printing = cups
printcap name = cups
printcap cache time = 750
cups options =
smb ports = 139
local master = no
kernel oplocks = No

; - same as umask 2
create mask = 0775
; - disconnect after N minutes inactive
dead time = 300
; - check whether clients are alive [seconds]
keep alive = 300
; - may delete readonly files
delete readonly = yes
; - logfiles grow up to N kByte
;   max log size = 100
; - don't map archive bit to execute bit
map archive = no
; - umask 2 setting for files and directories
create mask = 0775
directory mask = 0775
; - WINS support
; note: on SuSE 8samba is patched so that
;   if (wins server == localhost)
;   wins support = yes
;   preferred master = yes
;   os level = 32
;

wins server = gate

name resolve order = wins host bcast

security = user

netbios aliases = homedirs


Regards

Daniel

--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba-PDC: One fresh installed XP-Machine can't load the Profiles

2009-09-09 Thread Daniel Spannbauer



John Doe schrieb:

From: Daniel Spannbauer d...@marco.de

But one freh installed XP-Machine can't load my profile.


Tried?

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
CompatibleRUPSecurity=dword:0001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netlogon\parameters]
RequireSignOrSeal=dword:


Yes, tried that. But it's the same result. Joining the domian works 
fine, but my profile is not loaded. I always get a temporary Profile.


Regards

Daniel






JD


  



--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba-PDC: One fresh installed XP-Machine can't load the Profiles

2009-09-03 Thread Daniel Spannbauer

Hello,

I have a Samba-PDC (Samba 3.0.23d) with a ldap-Backend.
On serveral XP-Machines I can log in with my domain-account, everything 
is running fine. But one freh installed XP-Machine can't load my profile.
I can't find anything in the Logs (loglevel 5) that seems to point to 
the problem of my PDC:


Can anybody help me to fix this?

Heres the smb.conf:

b-login# cat /etc/samba/smb.conf

; Configuration file for smbd.
; 


; For the format of this file and comprehensive descriptions of all the
; configuration option, please refer to the man page for smb.conf(5).

[global]
server string = b-login
workgroup = marco
; speed optimierungen
socket options = TCP_NODELAY
share modes = no
debug level = 5
debug uid = yes
getwd cache = yes
;   read size = 65536
preserve case = yes
log level = 3

printer admin = ds
domain logons = yes
domain master = yes
local master = Yes
preferred master = Yes
ldap admin dn = cn=Administrator,dc=marco,dc=de
ldap delete dn = No
ldap group suffix = ou=group
ldap ssl = off
ldap suffix = dc=marco,dc=de
ldap user suffix = ou=people
ldap machine suffix = ou=Computers
ldap idmap suffix = ou=idmap
ldap passwd sync = yes
logon path = \\%L\%U\.ntprofile
logon home = \\%L\%U\.ntprofile
logon drive = H:
passdb backend = ldapsam:ldap://10.3.1.3;
security = user
add machine script = /usr/sbin/useradd  -c Machine -d 
/var/lib/nobody -s /bin/false %m$

printing = cups
printcap name = cups
printcap cache time = 750
cups options =
smb ports = 139
local master = no
kernel oplocks = No
wins server = gate
name resolve order = wins host bcast
security = user
netbios aliases = homedirs

[homes]
comment = Home Directory
browseable = no
writable = yes

[printers]
comment = All Printers
browseable = no
printable = yes
public = yes
writable = no
path = /tmp
create mode = 0700
guest only = Yes
guest ok = Yes


[print$]
comment = Printer Driver Download Area
path = /etc/samba/drivers
browsable = yes
guest ok = yes
read only = yes
write list = ds



[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
write list = root ds


Thanks

Regards

Daniel


--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba is deleting samba-passwords out of ldap-tree

2009-07-20 Thread Daniel Spannbauer

Hello,

I try to install a PDC with Samba 3.0.23 and openldap 2.3.27.
I can join the domain with a win-xp-Machine, the User-Accounts are in 
ldap and looks like the following:


dn: uid=ds,ou=people,dc=marco,dc=de
userPassword: {crypt}RVp32Kd9mkUek
sambaLogonTime: 0
sambaLogoffTime: 0
sambaPwdLastSet: 0
sambaProfilePath: \\homedirs\ds\.ntprofile
sambaPwdCanChange: 0
sambaSID: S-1-5-21-2539381339-996027264-670411106-2015
sambaHomePath: \\homedirs\ds
uid: ds
cn: Daniel Spannbauer
telephoneNumber: 27
roomNumber: bab
givenName: Daniel
sn: Spannbauer
mail: d...@marco.de
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: shadowAccount
objectClass: posixAccount
objectClass: top
businessCategory: Software Entwicklung
street: Rechbergstr. 4 - 6
postalCode: 87727
registeredAddress: Babenhausen
loginShell: /usr/uti/bash
uidNumber: 2015
gidNumber: 52
homeDirectory: /node/test/ds
gecos: Daniel Spannbauer,bab,27
sambaAcctFlags: [U  ]
sambaHomeDrive: H:
sambaKickoffTime: 2147483647
sambaPwdMustChange: 2147483647
sambaLMPassword: 590C5C5A8C08D6692CC208E556B42461
sambaNTPassword: 5B43D9E033AF01F1AC8AAA97751AE14E


Each time I try to login on the xp-machine both, sambaLMPassword and 
sambaNTPassword are deleted from the ldaptree.

I increased the loglevel, but can't find anything that gives me a hint.


Any clues how to find the error?
Loglevel etc.?

Regards

Daniel



--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba is deleting samba-passwords out of ldap-tree

2009-07-20 Thread Daniel Spannbauer



Jonathon Doran schrieb:

Could you be running an out of data samba.schema?



Hmmm, don't think so. It runned with this schema on a test a while ago.

Regards

Daniel





Quoting Daniel Spannbauer d...@marco.de:


Hello,

I try to install a PDC with Samba 3.0.23 and openldap 2.3.27.
I can join the domain with a win-xp-Machine, the User-Accounts are in
ldap and looks like the following:

dn: uid=ds,ou=people,dc=marco,dc=de
userPassword: {crypt}RVp32Kd9mkUek
sambaLogonTime: 0
sambaLogoffTime: 0
sambaPwdLastSet: 0
sambaProfilePath: \\homedirs\ds\.ntprofile
sambaPwdCanChange: 0
sambaSID: S-1-5-21-2539381339-996027264-670411106-2015
sambaHomePath: \\homedirs\ds
uid: ds
cn: Daniel Spannbauer
telephoneNumber: 27
roomNumber: bab
givenName: Daniel
sn: Spannbauer
mail: d...@marco.de
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: shadowAccount
objectClass: posixAccount
objectClass: top
businessCategory: Software Entwicklung
street: Rechbergstr. 4 - 6
postalCode: 87727
registeredAddress: Babenhausen
loginShell: /usr/uti/bash
uidNumber: 2015
gidNumber: 52
homeDirectory: /node/test/ds
gecos: Daniel Spannbauer,bab,27
sambaAcctFlags: [U  ]
sambaHomeDrive: H:
sambaKickoffTime: 2147483647
sambaPwdMustChange: 2147483647
sambaLMPassword: 590C5C5A8C08D6692CC208E556B42461
sambaNTPassword: 5B43D9E033AF01F1AC8AAA97751AE14E


Each time I try to login on the xp-machine both, sambaLMPassword and
sambaNTPassword are deleted from the ldaptree.
I increased the loglevel, but can't find anything that gives me a hint.


Any clues how to find the error?
Loglevel etc.?

Regards

Daniel



--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba




--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Can't connect to Samba-Server with WIndowsXP

2009-07-02 Thread Daniel Spannbauer

Hello,

I've runnig Samba 3.0.23 on SuSE 10.2.
No, I've set up samba as a PDC with LDAP-Backend. The Machiones can join 
the Domain.
There's one PC with XP which is not in the Domain (a Notebook). With 
this one I wan#T to connect to a share on the PDC.
I get a user/pass-Query, fill in my data. After this the user/pass-Query 
is shown again.


I increased the loglevel on the samba-Server and found the following:

[2009/07/02 12:22:11,  5] smbd/reply.c:reply_special(472)
  init msg_type=0x81 msg_flags=0x0
[2009/07/02 12:22:11,  0] lib/util_sock.c:write_data(1059)
[2009/07/02 12:22:11,  0] lib/util_sock.c:get_peer_addr_internal(1596)
  getpeername failed. Error was Transport endpoint is not connected
  write_data: write failure in writing to client 0.0.0.0. Error 
Connection reset by peer

[2009/07/02 12:22:11,  0] smbd/process.c:srv_send_smb(74)
  Error writing 4 bytes to client. -1. (Transport endpoint is not 
connected)

[2009/07/02 12:22:11,  5] lib/util_sock.c:read_socket_with_timeout(928)
  read_socket_with_timeout: blocking read. EOF from client.
[2009/07/02 12:22:11, 10] smbd/process.c:receive_smb_raw_talloc(276)
  receive_smb_raw: NT_STATUS_END_OF_FILE



Can anybody help me to figure out where the problem is?

Regards

Daniel


--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] PDC With samba und OpenLDAP...strange behavior

2009-04-30 Thread Daniel Spannbauer
Hello,

I`ve installed on a Box with SuSE 10.2 a PDC with OpenLDAP as Backend for
testing.
I put a Xp-Machine in that domain, logged me in. Everything looks fine.
After the logout from Windows there is a dir .ntprofile in my home.
Everythings seems to work as expected.
Now, I put a file under Unix in My Pictures in my .ntprofile. In Windows,
I can see the file. If I delete it, the file seems to be in the Trash, on
Linux it is still existing. After Logout from Windows the file is still
there, also when I log in to XP. 

It seems that files, which are created under Unix, can`t be deleted und
windows. If I create a file under Windows, I can delete it under Windows and
Unix.

The rights on the file are in both cases the same (according to ls -l and
the Windows-File-manager).

Any hints about that?

Samba: 3.0.23d
OpenLDAP: 2.3.27

Regards

Daniel
 
 

__ Hinweis von ESET NOD32 Antivirus, Signaturdatenbank-Version 4044
(20090430) __

E-Mail wurde gepruft mit ESET NOD32 Antivirus.

http://www.eset.com
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba with ldap-Backend as PDC: Changing SMB-Password under Unix?

2009-03-17 Thread Daniel Spannbauer
Hello,

I have a working PDC with ldap-Backend under SUSE 10.2. Everything is
working fine, except 2 thing:

Can I change the sambaNTpassword and sambaLMpassword under Unix so that the
User can change the samba-Passwords and the Unix-Password with one single
command?

Can I automaticly connect the Home-Networkshare to a Network-Drive? Without
a Logon-Script?

Regards

Daniel
 
 

__ Hinweis von ESET NOD32 Antivirus, Signaturdatenbank-Version 3941
(20090317) __

E-Mail wurde gepruft mit ESET NOD32 Antivirus.

http://www.eset.com
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


AW: [Samba] Samba with ldap-Backend as PDC: Changing SMB-Password under Unix?

2009-03-17 Thread Daniel Spannbauer


 An: samba
 Betreff: Re: [Samba] Samba with ldap-Backend as PDC: Changing SMB-
 Password under Unix?
 
 On Tue, 2009-03-17 at 10:12 +0100, Daniel Spannbauer wrote:
  Hello,
  I have a working PDC with ldap-Backend under SUSE 10.2. Everything is
  working fine, except 2 thing:
  Can I change the sambaNTpassword and sambaLMpassword under Unix so
 that the
  User can change the samba-Passwords and the Unix-Password with one
 single
  command?
 
 Yes, using ldap passwd sync (although it has been rather argumentative
 on recent versions; not certain why).
 

I think ldap passwd sync changes also the unix_password when I change my
Password under Windows. 
But I want to change my sambaNTpassword and sambaLMpassword und Unix.
So, when I do a passwd horst I want to change the Unix_password AND the
sambaNTpassword and the sambaLMpassword 
For the user horst.

So, it doesn't matter where I change my password (unix or Windows), all my
passwords are changed. 



  Can I automaticly connect the Home-Networkshare to a Network-Drive?
 Without
  a Logon-Script?
 
  I don't think so.  Buy you can use policies (via POLEDIT.EXE) to
 redirect My Documents transparently to the user's network home
 directory.  I think this is covered in the Samba HOWTO/ByExample and
 you
 can go to Google and search 'site:lists.samba.org folder redirection'
 to get lots of references.

Hmmm, Ok. But what does the switch logon drive exactly? 


Regards

Daniel

 
 

__ Hinweis von ESET NOD32 Antivirus, Signaturdatenbank-Version 3942
(20090317) __

E-Mail wurde gepruft mit ESET NOD32 Antivirus.

http://www.eset.com
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Networkdrives with samba 3.5.5

2008-03-17 Thread Daniel Spannbauer
Hello,

in the past we had running samba2. On our W2K-Terminalserver we have
Login-Script which are connecting Networkdrives persistent. On Samba2 I
only have to put in my passwort once for all drives.  On Samba 3.5.5 on
our SuSE 10.2-Host I have to put in my passwort for each Networkdrive.

Does anybody know how to get the old behaviour?

Regards

Daniel

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba