RE: [Samba] samba + linux subdirectory 'other' permissions

2005-02-04 Thread Don Zajic
It looks somewhat obvious to change the create mask = 0660 which is
-rw-rw to 0775 which would be -rwxrwxr-x.  Then any file that is created
in the /home/public directory will have the appropriate permissions.

Am I off base here?

Don

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Justin
Sent: Thursday, February 03, 2005 9:52 PM
To: samba@lists.samba.org
Subject: Re: [Samba] samba + linux subdirectory 'other' permissions

Still struggling with this issue ... anyone able to provide some feedback
please?


On Tue, 2005-02-01 at 15:18, Justin wrote:

 Hi All
 
 I'm sure this is a fairly basic question out there for someone however 
 I haven't had much luck googling for an answer hence I thought I'd try 
 here. I'm having issues getting the correct permissions on a directory 
 for the 'other' users. Each time a file is created in this 
 subdirectory the permissions are set as -rw-rw and what I want to 
 achieve is -rwxrwx-r-x In other words, read/write/execute for user and 
 group but read only for other users.
 
 I have one parent directory shared as follows:
 
 [public]
 comment = Staff file sharing folders
 path = /home/public
 create mask = 0660
 directory mask = 770
 force create mode = 020
 force directory mode = 020
 read only = no
 writeable = yes
 guest ok = yes
 
 I want to create a sub directory under this parent directory with the 
 permissions as indicated in my opening paragraph. Is that possible?
 
 
 
 TIA,
 
 Justin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] samba

2003-07-24 Thread Don Zajic
I am not saying that this is the solution, however, if you were to post
a copy of your smb.conf file, it may allow us to shed some light on your
problem.

It may have something to do with your hosts allow parameter.  My line
looks like this:   hosts allow = 192.168.1. 192.168.2. 127.

This allows hosts from the specified class c networks and localhost to
use the smb/nmb services.

Here is the guidance from the smb.conf man page:

   hosts allow (S)
  A synonym for this parameter is allow hosts.

  This  parameter is a comma, space, or tab delimited set of
hosts
  which are permitted to access a service.

  If specified in the [global] section then it will apply
to  all
  services,  regardless  of  whether  the individual service
has a
  different setting.

  You can specify the hosts by name or IP number. For
example, you
  could restrict access to only the hosts on a Class C
subnet with
  something like allow hosts = 150.203.5.  . The  full
syntax  of
  the list is described in the man page hosts_access(5).
Note that
  this man page may not be present on  your  system,  so  a
brief
  description will be given here also.

  Note that the localhost address 127.0.0.1 will always be
allowed
  access unless specifically denied by a hosts deny option.

  You can also specify hosts by network/netmask pairs and by
net-
  group  names  if your system supports netgroups. The
EXCEPT key-
  word can also be used to limit a wildcard  list.  The
following
  examples may provide some help:

  Example 1: allow all IPs in 150.203.*.*; except one

  hosts allow = 150.203. EXCEPT 150.203.6.66

  Example 2: allow hosts that match the given
network/netmask

  hosts allow = 150.203.15.0/255.255.255.0

  Example 3: allow a couple of hosts

  hosts allow = lapland, arvidsjaur

  Example  4:  allow only hosts in NIS netgroup foonet,
but deny
  access from one particular host

  hosts allow = @foonet

 Don Zajic

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of vinod
Sent: Thursday, July 24, 2003 10:29 AM
To: [EMAIL PROTECTED]
Subject: [Samba] samba




I have configured samba server on my Red Hat Linux 8.0
Samba server is visible in the network neighbour hood of windows 9*
based 
machines. 
IP of samba server is 192.168.17.199   netmask is 255.255.255.0 on eth0.
This samba server is visible in network 192.168.17.0 and working fine.

My problem is I can not see the samba server in other subnetworks like
192.168.1.0 or 192.168.3.0 etc. (in network neighbourhood). Whereas
other windows95 based machines of 192.168.17.0 network are browsable
from the network neighbourhood of 192.168.1.0 sunetwork. Only samba
server 192.168.17.199 is not browsable rom 192.168.1.0 subnet. Kindly
guide what to do.

Thanks

Vinod Garg
[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Changed from (no subject) to root account access

2003-07-03 Thread Don Zajic
Michael,

You need to set up your root user account in Samba.  Enter the
following command:

Smbpasswd -a root

You will be prompted to enter the root password and retype to verify as
follows:

New SMB password:
Retype new SMB password:
Added user root.

I would recommend that you adduser to your linux router then add the
same users to samba with smbpasswd -a instead of using the root account
for normal file access.  Your call.

In my experience, I use root account only when adding machines to my
domain controller.

Don Zajic

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Michael Bailey
Sent: Thursday, July 03, 2003 9:12 AM
To: [EMAIL PROTECTED]
Subject: [Samba] (no subject)


Hi I have installed samba 2.2.8 on a box running Fresco as a router and
Web server. On my Win2000 box I can see the router but when I try to get
in and access the shared files it asks for a password I don't know what
it is I never set that up. What password does it come with by default? I
ran the command smbpasswd and get the following msg

Failed to find entry for user Root
Failed to modify password entry for user Root

Can anyone pleas help?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Windows XP SP1

2003-06-30 Thread Don Zajic
I have been using 2.2.8 with XP Pro SP1 without any problems.

My config is 2 XP Pro SP1 boxes authenticated to a Redhat 8 box

Linux molokai 2.4.18-14 #1 Wed Sep 4 11:57:57 EDT 2002 i586 i586 i386
GNU/Linux
Version 2.2.8

Don Zajic

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Magnus Sundberg
Sent: Monday, June 30, 2003 4:51 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Windows XP SP1


Does samba work with windows XP Service Pack 1?

Any experiences?

regards,

Magnus Sundberg



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] 95 and NT cannot access shares

2003-02-24 Thread Don Zajic
Off the top of my head, I would say that using Encrypted passwords is
greate for W2K and XP, however, 95 does not use encrypted passwords and
unless you are using SP3 or above on NT, it also does not use encrypted
password.  Since you are mixing your flavors of Windows from 95 to XP,
you probably need to disable encrypted password and use plain text
passwords throughout your domain.

encrypt password = no

You also need to apply the .reg files to change from encrypted to
plaintext according to your windows version.  These .reg files are
located in your docs/Registry directory.

Don Zajic


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Dave Ansell
Sent: Sunday, February 23, 2003 4:07 AM
To: [EMAIL PROTECTED]
Subject: [Samba] 95 and NT cannot access shares


I have file and print sharing set up on Linux (Mandrake 9.0).

It all works fine with 2000 and XP clients, but 95 and NT clients don't
seem to be able to access.

Any ideas?
Thanks,
Dave


Typical log entry from Samba:

[2003/02/22 16:21:37, 0] smbd/service.c:make_connection(599)
  wvo1314904 (192.168.1.10) Can't change directory to /home/samba/public
(Permission denied)

My sbm.conf is:

[global]
 workgroup = Waterlooville
 security = SHARE
 encrypt passwords = Yes
 passwd program = /usr/bin/passwd %u
 passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
unix password sync = Yes  log file = /var/log/samba/log.%m  max log size
= 50  socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192  dns
proxy = No

[public]
 comment = Public Stuff
 path = /home/samba/public
 write list = @staff
 read only = No
 guest ok = Yes

[printers]
 comment = All Printers
 path = /var/spool/samba
 create mask = 0700
 guest ok = Yes
 printable = Yes
 print command = /usr/bin/lpr -r -s -P%p %s
 browseable = No
 printer admin = davea


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] 95 and NT cannot access shares

2003-02-24 Thread Don Zajic
Bill and John, I stand VERY corrected.  Long days, short nights, new
job, no other good excuses.  I will make an effort to thoroughly
research the issue prior to making a response.

Dave, I hope that my response did not cause you too much confusion or
frustration.

Don Zajic

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of John H Terpstra
Sent: Monday, February 24, 2003 12:55 PM
To: William R. Knox
Cc: [EMAIL PROTECTED]; Don Zajic
Subject: RE: [Samba] 95 and NT cannot access shares


On Mon, 24 Feb 2003, William R. Knox wrote:

Bill,

Thanks for jumping in here. I'd like to reinforce your correction. Would
everyone please take note!

Someone who does a search on the samba mailing lists on this subject
will find many incorrect assertions regarding encrypted password support
in MW Windows products. Bill, your comments here are absolutely correct.

 The information provided here about the use of encrypted passwords is 
 not true.

NOTE THIS NEXT STATEMENT!!

 NT began to ENFORCE the use of encrypted passwords with SP3, and Win95

 the same with (I believe) OSR2, but ALL versions of these OSes 
 supported encrypted passwords.

Please note also, that it is possible to use the PlainText registry
hacks to re-enable support for clear text passwords, but MS Windows
clients will cache only the encrypted password. This means that when the
Windows client drops a share connection (through time-out or for any
other reason) then on attempt to re-use the share the Windows client
will send the encrypted password in the attempt to reconnect (it does
not have the plain text password in it's cache). This can cause a blue
screen problem and may cause nasty application failures.

SO:

It is best NOT to use plain text passwords, instead use only encrypted
passwords - PARTICULARLY given that ALL MS Windows network clients
support encrypted passwords.

- John T.


   Bill Knox
   Senior Operating Systems Programmer/Analyst
   The MITRE Corporation

 On Mon, 24 Feb 2003, Don Zajic wrote:

  Date: Mon, 24 Feb 2003 04:22:44 -0500
  From: Don Zajic [EMAIL PROTECTED]
  To: 'Dave Ansell' [EMAIL PROTECTED], [EMAIL PROTECTED]
  Subject: RE: [Samba] 95 and NT cannot access shares
 
  Off the top of my head, I would say that using Encrypted passwords 
  is greate for W2K and XP, however, 95 does not use encrypted 
  passwords and unless you are using SP3 or above on NT, it also does 
  not use encrypted password.  Since you are mixing your flavors of 
  Windows from 95 to XP, you probably need to disable encrypted 
  password and use plain text passwords throughout your domain.
 
  encrypt password = no
 
  You also need to apply the .reg files to change from encrypted to 
  plaintext according to your windows version.  These .reg files are 
  located in your docs/Registry directory.
 
  Don Zajic
 
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On 
  Behalf Of Dave Ansell
  Sent: Sunday, February 23, 2003 4:07 AM
  To: [EMAIL PROTECTED]
  Subject: [Samba] 95 and NT cannot access shares
 
 
  I have file and print sharing set up on Linux (Mandrake 9.0).
 
  It all works fine with 2000 and XP clients, but 95 and NT clients 
  don't seem to be able to access.
 
  Any ideas?
  Thanks,
  Dave
 
 
  Typical log entry from Samba:
 
  [2003/02/22 16:21:37, 0] smbd/service.c:make_connection(599)
wvo1314904 (192.168.1.10) Can't change directory to 
  /home/samba/public (Permission denied)
 
  My sbm.conf is:
 
  [global]
   workgroup = Waterlooville
   security = SHARE
   encrypt passwords = Yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* 
  %n\n unix password sync = Yes  log file = /var/log/samba/log.%m  max

  log size = 50  socket options = TCP_NODELAY SO_RCVBUF=8192 
  SO_SNDBUF=8192  dns proxy = No
 
  [public]
   comment = Public Stuff
   path = /home/samba/public
   write list = @staff
   read only = No
   guest ok = Yes
 
  [printers]
   comment = All Printers
   path = /var/spool/samba
   create mask = 0700
   guest ok = Yes
   printable = Yes
   print command = /usr/bin/lpr -r -s -P%p %s
   browseable = No
   printer admin = davea
 
 
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba
 
 
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba
 




-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Phasing out windows

2003-02-19 Thread Don Zajic
I must disagree with you.  Samba does handle encrypted passwords.  I
have been using that feature for at least two years if not longer.  I
have had WinNT, Win2K and WinXP clients authenticated by my samba server
for a long time.

The Win2K systems are pretty straight forward, the WinXP clients do need
a patch to the security, but that is easy to apply.

Don Zajic
Samba 2.2.7a (Domain Controller)
Clients, WinNT, Win2K and WinXP

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On
Behalf Of Kees Damen
Sent: Wednesday, February 19, 2003 7:28 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [Samba] Phasing out windows


Hi, 

If you have Windows 2000 or XP clients than you are 
getting into troubles as these clients work better
if you use encrypted passwords. Samba can't process
an encrypted password and hands it over to a Windows 2000 server for
verification. If you don't have them any more than you must patch the
registry in every client to give a non encrypted password to the Samba
server. And the 
clients, Win 2k  XP, doesn't like that and give a login
screen every time it wants to connect to a Samba share. 
If you have Win 98 clients than you don't have these
problems.

 The company I ma working for us willing to phase out it's windows 
 servers. We are using Windows 2000 servers for file and print sharing.

 we also have
 an exchange server for our intra  external mails.

Best regards, Kees
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] RE: Phasing out windows

2003-02-19 Thread Don Zajic
When you untar the source file, you will have a file called
WinXP_SignOrSeal.reg in the following directory
/samba-2.2.7/docs/Registry

In XP use the Start Menu, Run and in the dialog, run this file
WinXP_SignOrSeal.reg and it will make the necessary changes to your XP
registry to allow you to have the WinXP machine join the Samba domain.

This is a requirement and this is the patch I mentioned.

Don

-Original Message-
From: Brett [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, February 19, 2003 12:45 PM
To: Don Zajic
Subject: Re: Phasing out windows


What patch are you referering to.  Also the samba 2.2.7a release
specifies a change of requiresignoreseal=0.  What is that for and is
that really needed.

Thanks,
Brett

P.S.  I had problems when I tried to change the passwords to unencrypted
and am using the server with encrypted passwords.

Don Zajic [EMAIL PROTECTED] wrote in message
01c2d821$965af920$6701a8c0@hawaii">news:01c2d821$965af920$6701a8c0@hawaii...
 I must disagree with you.  Samba does handle encrypted passwords.  I 
 have been using that feature for at least two years if not longer.  I 
 have had WinNT, Win2K and WinXP clients authenticated by my samba 
 server for a long time.

 The Win2K systems are pretty straight forward, the WinXP clients do 
 need a patch to the security, but that is easy to apply.

 Don Zajic
 Samba 2.2.7a (Domain Controller)
 Clients, WinNT, Win2K and WinXP

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On 
 Behalf Of Kees Damen
 Sent: Wednesday, February 19, 2003 7:28 AM
 To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Subject: Re: [Samba] Phasing out windows


 Hi,

 If you have Windows 2000 or XP clients than you are
 getting into troubles as these clients work better
 if you use encrypted passwords. Samba can't process
 an encrypted password and hands it over to a Windows 2000 server for 
 verification. If you don't have them any more than you must patch the 
 registry in every client to give a non encrypted password to the Samba

 server. And the clients, Win 2k  XP, doesn't like that and give a 
 login screen every time it wants to connect to a Samba share.
 If you have Win 98 clients than you don't have these
 problems.

  The company I ma working for us willing to phase out it's windows 
  servers. We are using Windows 2000 servers for file and print 
  sharing.

  we also have
  an exchange server for our intra  external mails.

 Best regards, Kees
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba






-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Access Denied when trying to login to samba PDC

2003-02-16 Thread Don Zajic
One of the main things you need to remember when joining a system to the
domain is, when prompted for a username and password, always use root
as the user.  

Don Zajic


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On
Behalf Of Thomas Graham
Sent: Sunday, February 16, 2003 6:45 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Access Denied when trying to login to samba PDC


While trying to set up samba as a PDC, I followed O'Reillys Using Samba.
This resulted in the following smb.conf:

[global]
workgroup = GRAHAM
encrypt passwords = true
log level = 1
max log size = 1000
hosts allow = 192.168.0/24 192.168.1/24
hosts deny = 1.1.1.1/0.0.0.0
domain logons = yes

security = user
os level = 34
local master = yes
preferred master = yes
domain master = yes

[temp]
comment = shared temporary directory
path = /usr/tmp
readonly = no
guest ok = yes

[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
create mode = 0664
directory mode = 0775
map to guest = bad user

If I try to join the domain GRAHAM from any of the WinXP(NT5.1)
machines, by changing from workgroup GRAHAM to Domain GRAHAM, then click
OK, I am prompted to Enter the name and password of an account with
permission to join the domain.

If I enter a valid username and password (that allows access to the
shared drives) I get the
response:
The following error occurred attempting to access the domain
GRAHAM: ACCESS IS DENIED.

[2003/02/16 11:30:47, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
  unable to open passdb database.

If I enter a bad username/pass I get the response:
The following error occurred attempting to access the domain
GRAHAM: Logon failure: Unknown username/bad password

[2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:17, 1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'tg-1998': authentication failed
[2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:18, 1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'tg-1998': authentication failed


nmbd.log:
[2003/02/16 11:45:15, 0] nmbd/nmbd_logonnames.c:add_logon_names(156)
  add_domain_logon_names:
  Attempting to become logon server for workgroup GRAHAM on subnet
192.168.0.108 [2003/02/16 11:45:15, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup GRAHAM on
subnet 192.168.0.108 [2003/02/16 11:45:15, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305)
  become_domain_master_browser_bcast: querying subnet 192.168.0.108 for
domain master browser on workgroup GRAHAM [2003/02/16 11:45:19, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(115)
  become_logon_server_success: Samba is now a logon server for workgroup
GRAHAM on subnet 192.168.0.108 [2003/02/16 11:45:19, 0]
nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 30328 received with no
matching record. [2003/02/16 11:45:19, 0]
nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 30329 received with no
matching record. [2003/02/16 11:45:24, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(115)
  *

  Samba server SUN is now a domain master browser for workgroup GRAHAM
on subnet 192.168.0.108

  *
[2003/02/16 11:45:38, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(404)
  *

  Samba name server SUN is now a local master browser for workgroup
GRAHAM on subnet 192.168.0.108

  *
[2003/02/16 11:46:34, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:34, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x7

I am running samba 2.2.3a-12 on a Sun Sparc64 running Debian GNU/Linux
3.0 woody. All the client machines will be running windows XP pro/home

RE: [Samba] Access Denied when trying to login to samba PDC

2003-02-16 Thread Don Zajic
Have you created both a linux user account and samba user account for
the username you are attempting with?

On your linux system prompt type:  adduser -u nnn username  
Where nnn is the userid number that you want to assign to this user and
of course username is a valid domain user name
This will create the entry in the /etc/passwd file
Then on your linux system type:  smbadduser -a username
Again where user name is the user name you just created in the passwd
file.

Now attempt to login to the domain from a Windows system with that user
name.

The short of it is the user must exist in both the linux passwd file and
the samba smbpasswd file with the same UID value.

Don

-Original Message-
From: Thomas Graham [mailto:[EMAIL PROTECTED]] 
Sent: Sunday, February 16, 2003 9:25 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Access Denied when trying to login to samba PDC


Having managed to join my system to the domain using the root user, when
I try to logon from the WinNT login screen, I get the response Windows
cannot connect to the domain, either because the domain controller is
down or otherwise unavailable, or because your computer account was not
found.

nmbd.log:
[2003/02/16 14:25:58, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12

---

On 16th Feb Don Zaijic said:

One of the main things you need to remember when joining a system to 
the domain is, when prompted
for a username and password, always use root as the
user.

---

While trying to set up samba as a PDC, I followed O'Reillys Using Samba.
This resulted in the following smb.conf:

[global]
workgroup = GRAHAM
encrypt passwords = true
log level = 1
max log size = 1000
hosts allow = 192.168.0/24 192.168.1/24
hosts deny = 1.1.1.1/0.0.0.0
domain logons = yes

security = user
os level = 34
local master = yes
preferred master = yes
domain master = yes

[temp]
comment = shared temporary directory
path = /usr/tmp
readonly = no
guest ok = yes

[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
create mode = 0664
directory mode = 0775
map to guest = bad user





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Samba problem

2003-02-07 Thread Don Zajic
When you say you checked the samba version, what did you do to get the
version?
At your prompt type 'smbd -V' without the quotes, is should come back
with Version 2.2.7a
Do the same for nmbd.

If it come back with Version 2.0.7, then you probably have two copies of
samba on your system, one copy in your path and another copy in the
default location of a samba install.  The one being executed in your
path.

When you did the ./configure what switches did you pass?

Here is how I configured samba:
./configure  --prefix=/usr --with-lockdir=/var/lock/samba
--with-privatedir=/etc/samba --with-swatdir=/usr/share/swat
--with-smbmount --with-configdir=/etc/samba

This will place the binaries in the /usr/sbin directory.

Don Zajic

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On
Behalf Of Angie Yee
Sent: Friday, February 07, 2003 9:58 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Samba problem


Hi there:

My problem is (I have asked this question for lots of time but no one
can give me the answer):

I have a Redhat 7.0 server with Samba 2.0.7-2 ssl.  We have upgraded
Samba to 2.2.7a by using tar.gz.. Before I upgrade to 2.2.7a, I checked
the samba version as below:

Samba-2.0.7-2 ssl
Samba-common-2.0.7-2 ssl
Samba-client-2.0.7-2 ssl

Then after I upgraded to Samba 2.2.7a, I check the samba version as
below:

Samba-2.2.7a (upgrade)
Samba-common-2.0.7-2 ssl (still the same)
Samba-client-2.0.7-2 ssl (still the same)

 I supposed that the Samba is upgraded.After 2 weeks, the users
reported
that they cannot talk with Samba.  Also, they told me that someone has
been checked with the samba.  That's a library has missing.  I have no
idea why's that since I am a newbie for samba and linux system.

BR,
Angie


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] PDC.

2003-01-15 Thread Don Zajic
Fabien,

When you are asked for a user name and password when adding a
workstation to the domain controller, do not use Administrator,
instead use root (no quotes in your response) as the user name and the
appropriate password for root.

This should help.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
On Behalf Of Fabien Combernous
Sent: Wednesday, January 15, 2003 4:59 AM
To: [EMAIL PROTECTED]
Subject: [Samba] PDC.


Lo,

I'm wanting to set up a samba pdc with win2k stations.

Actually when a when to add a station in the domaine i have configurer 
on my samba server i have this type of answer in client side : 
immpossible to enter in this domaine becuase user or passwd is not
correct.

So but i have in smbd log :
this in first :
[2003/01/14 19:09:36, 4] smbd/password.c:smb_password_ok(467)
   smb_password_ok: Checking SMB password for user administrateur
[2003/01/14 19:09:36, 5] smbd/password.c:smb_password_ok(481)
   smb_password_ok: challenge received
[2003/01/14 19:09:36, 4] smbd/password.c:smb_password_ok(491)
   smb_password_ok: Checking NT MD4 password
[2003/01/14 19:09:36, 4] smbd/password.c:smb_password_ok(493)
   smb_password_ok: NT MD4 password check succeeded

this is second :
[2003/01/14 19:21:14, 2] passdb/pdb_smbpasswd.c:startsmbfilepwent(170)
   startsmbfilepwent_internal: unable to open file /etc/samba/smbpasswd.

Error was Permission denied
[2003/01/14 19:21:14, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
   unable to open passdb database.
[2003/01/14 19:21:14, 5] rpc_parse/parse_prs.c:prs_debug(60)
   00 samr_io_r_set_userinfo
[2003/01/14 19:21:14, 5] rpc_parse/parse_prs.c:prs_ntstatus(588)
    status: NT_STATUS_ACCESS_DENIED
[2003/01/14 19:21:14, 5] rpc_server/srv_pipe.c:api_rpcTNP(1218)
   api_rpcTNP: called api_samr_rpc successfully

My configuration file is :

[global]

workgroup = EPROCESS
server string = e'process Samba Server

invalid users = root
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
smb passwd file = /etc/samba/smbpasswd

security = user
encrypt passwords = true
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

domain logons = yes
local master = yes
os level = 99
domain master = yes
preferred master = yes

wins support = yes
dns proxy = yes


Any idea ? What is wrong ?
Any help will be appreciated :o)

Thank's Fabien.


-- 

Fabien COMBERNOUS - IT Engineer
eProcess - Parc Club du Millénaire Batiment n° 6
1025 rue Henri Becquerel - 34000 Montpellier FRANCE
http://www.eprocess.tv - +33 (0)4 67 13 84 50

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] newbie problem: can't mount win xp disk into linux (regkey is set)

2002-10-23 Thread Don Zajic
I don't know if you received a response to this, however, do you have an
entry in your /etc/hosts file for XERXES?

192.168.x.x XERXES

Without this, your linux box does not know who XESRES is.

Here is my /etc/hosts

127.0.0.1 localhost.localdomain localhost
192.168.1.190 niihau
192.168.1.100 oahu
192.168.1.104 molokai
192.168.1.102 hawaii
192.168.1.103 lanai

My Mount command in the same format as yours:

[root@molokai donald]# mount -t smbfs -o
username=myname,password=mypassword //hawaii/C_drive /mnt/share

Listing the contents of my Windows XP Pro C Drive

[root@molokai donald]# ls /mnt/share
09 2002 Revised Resume.doc  MAT540 Project Proposal.doc  RedHat Iso
AUTOEXEC.BATMSDOS.SYSSofsource
BK5 NTDETECT.COM
srsc_41_sp5_4199_win2k_des
boot.inintldrSTAT
CONFIG.SYS  oracle   System Volume
Information
Documents and Settings  pagefile.sys WINDOWS
FOWIN   Program FilesWUTemp
hiberfil.sysProject Preposal.doc 
IO.SYS  RECYCLER

My smb.conf file

[root@molokai donald]# cat /etc/samba/smb.conf
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash) 
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command
testparm
# to check that you have not many any basic syntactic errors. 
#
#=== Global Settings
=
[global]

   workgroup = zajic
   server string = Molokai - PDC Samba Server
   hosts allow = 192.168.1. 127.
;  guest account = pcguest

   log file = /var/log/samba/%m.log
   max log size = 50
   security = user
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd

   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

   local master = yes
   os level = 64
   domain master = yes 
   preferred master = yes
   domain logons = yes
   domain admin group = @ntadmins
   time server = true
   logon script = login.bat

# Where to store roving profiles (only for Win95 and WinNT)
#%L substitutes for this servers netbios name, %U is username
#You must uncomment the [Profiles] share below
   logon path = \\%L\profiles\%U
   logon drive = H:
   logon home = \\%L\%U
   dns proxy = no
# Share Definitions
==
[homes]
   comment = Home Directories
   browseable = no
   writable = yes

# Un-comment the following and create the netlogon directory for Domain
Logons
[netlogon]
   comment = Network Logon Service
   path = /usr/local/samba/lib/netlogon
   writable = no
   write list = @ntadmins
   ;share modes = no


# Un-comment the following to provide a specific roving profile share
# the default is to use the user's home directory
[profiles]
path = /usr/local/samba/profiles
;path = /home
writeable = yes
create mask = 0600
directory mask = 0700

# A publicly accessible directory, but read only, except for people in
# the staff group
[public]
   comment = Public Stuff
   path = /public
   public = yes
   writable = yes
   browseable = yes
   printable = no 
   write list = donald debra tasha christie
[cdrom]
   comment = Molokai CDRom
   path = /mnt/cdrom
   public = yes
   writeable = no
   browseable = yes

-Original Message-
From: [EMAIL PROTECTED] [mailto:samba-admin;lists.samba.org]
On Behalf Of Dexter Filmore
Sent: Thursday, October 17, 2002 12:15 PM
To: samba
Subject: [Samba] newbie problem: can't mount win xp disk into linux
(regkey is set)



Got two machines connected via a 10MBit Hub:
One Slackware Linux 8.1 with eth0 = Realtek8139 (working fine), one
WindowsXP Pro, same NIC, registry key for proper auth is set.

The Windows machine is called xerxes on which the C dir is shared, and
there is /mnt/xerxes/ on the Linux box.

The command:
# mount -t smbfs -o username=(username on win machine),password=(passwd
on win # machine) //XERXES/C /mnt/xerxes/ gives me the following errors:

2251: session request to XERXES failed (Not listening on called name)
2251: session request to *SMBSERVER failed (Not listening on called
name)

Am clueless. Should mention I'm familiar with Linux but a network
newbie.

Dex
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] share a linux box with win2K

2002-10-22 Thread Don Zajic
Yes, this is normal.  The files in /usr/bin are the programs that you
execute and the files in the /etc and /etc/samba directories contain
user information.

Don Zajic

-Original Message-
From: [EMAIL PROTECTED] [mailto:samba-admin;lists.samba.org]
On Behalf Of Daniel Bertin
Sent: Tuesday, October 22, 2002 1:51 PM
To: [EMAIL PROTECTED]
Subject: Re: [Samba] share a linux box with win2K



I found 2 passwd files one in /usr/bin/ and one in /etc/
then 2 smbpasswd files one in /usr/bin/ and one in /etc/samba/

is this normal or should there only be one of each??


At 01:31 PM 10/22/2002 -0300, you wrote:
another clue maybe
when I do   net use //testl/danielb in windows run dialog

the password  or user name is invalid for //testl/danielb



I applied the signorseal patch. just now, rebooted windows. same error

the credentials supplied conflict with an existing set of credentials

isn't this what samba is supposed to do ?? share a linux box on a 
windows
network?

what am I doing out of the ordinary?



At 09:47 AM 10/22/2002 -0400, you wrote:
Daniel, have you applied the signorseal patch AFTER you put service 
pack 3?

FYI: I've had nothing but problems with SAMBA and service pack 3 so I 
had to remove the service pack.  But you can try it with signorseal.

-Original Message-
From: Daniel Bertin [mailto:danielb;theorix.com]
Sent: Tuesday, October 22, 2002 6:52 AM
To: Irving Carrion
Subject: RE: [Samba] can't add w2K client to samba domain

Morning
I re-installed samba and applied service pack 3 on win2K. same thing;

when I try and login with any user
the credentials supplied conflict with an existing set of credentials

what else can I do.
   what would be the steps to follow for a new install. rpm  from the 
mandrake 9.0 distribution?

help?
Daniel

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] smbpasswd

2002-06-11 Thread Don Zajic



Lorac, 
it appears that you are attempting to execute the smbpasswd (password) file, not 
the smbpasswd (script) located in /usr/bin.

type 
this:

/usr/bin/smbpasswd 

this 
should make a difference

Don

  -Original Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]]On Behalf Of loracSent: 
  Tuesday, June 11, 2002 5:52 PMTo: 
  [EMAIL PROTECTED]Subject: [Samba] 
  smbpasswdWhenever I try to run smbpasswd I get the 
  following 
  error:root:0:::[U: 
  command not foundI generated the file as per the instructions at http://ca.samba.org/samba/docs/ENCRYPTION.htmlI'm not 
  sure what it is that is going wrong.The first few lines of my 
  smbpasswd file look like this...## SMB password 
  file.#root:0:::[U 
  ]:LCT-:rootdaemon:1:::[U 
  ]:LCT-:daemonI'm using debian 3.0, with kernel 2.4.18 and 
  samba 2.2.4lorac
  -"Violence is the last refuge of the incompetent." - Salvor 
  Hardin ICQ UIN 2123136 Get ICQ http://www.icq.com