[Samba] Issue with Oplocks

2013-03-11 Thread Greg Zartman
I've been using Samba for a number of years and suddenly Samba started
throwing oplock errors and I simply can't figure out why.  I've not changed
any config parameters in some time, but have updated my version of samba as
new packages become available for my distro.

I'm running Centos 5.9 and the following versions of samba from stock
Centos:

samba3x-common-3.6.6-0.129.el5
samba3x-winbind-3.6.6-0.129.el5
samba3x-client-3.6.6-0.129.el5
samba3x-3.6.6-0.129.el5

Suddenly, over the last 2 weeks or so, I started to get the following types
of oplock errors:

Mar 11 08:57:38 fileserver smbd[22536]: [2013/03/11 08:57:38.925861,  0]
smbd/oplock_linux.c:104(linux_oplock_signal_handler)
Mar 11 08:57:38 fileserver smbd[22536]:   linux_oplock_signal_handler:
failed to find fsp for file fd=51 (file was closed ?)
Mar 11 08:57:49 fileserver smbd[22536]: [2013/03/11 08:57:49.685736,  0]
smbd/oplock_linux.c:158(linux_release_kernel_oplock)
Mar 11 08:57:49 fileserver smbd[22536]:   linux_release_kernel_oplock:
Error when removing kernel oplock on file Bids and
Proposals/2011/11-Nov/someproject/sol/Project White Paper - 2.1.docx,
file_id = fd05:70045:0, gen_id = 3041820832. Error was Bad file descriptor

My samba machine is setup as as a domain member of a legacy (win nt 4) type
domain against a another Samba server that is running authentication.

I have the following oplock options set is my smb.conf file:

oplocks = true
kernel oplocks = true
level2 oplocks = true

and the share is setup with the following config:

[management]
comment = Management Drive
path = /home/files/dir/management/files
read only = no
writable = yes
force group = shared
printable = no
inherit permissions = yes
create mode = 0660

Any suggestions would be much appreciated.

Greg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] domain provision error

2013-01-25 Thread Greg Sloop
I didn't get any configure or make errors (at least any I was aware of)

The make test appears to bomb horribly, but I can't find any docs about it,
so I don't know if its still a valid test, or when/how to run it etc.

The real problem appears to be that it can't load any of the SAM modules.
As noted above, the files are there and exist, and appear to have the
correct permissions.

Has anyone gotten it to compile, install and provision properly on Ubuntu
12.04?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4.0 released - The First Free Software Active Directory Compatible Server is now available !

2012-12-11 Thread Greg Dickie
Congrats!

This is great!

regards,
Greg


On Tue, 2012-12-11 at 09:32 -0800, Jeremy Allison wrote:
>   Samba Team Releases Samba 4.0
>   =
> 
> December 11th 2012.
> 
> The Samba Team is proud to announce the release of Samba 4.0, a major
> new release of the award-winning Free Software file, print and
> authentication server suite for Microsoft Windows clients.
> 
> 
> The First Free Software Active Directory Compatible Server
> ==
> 
> As the culmination of ten years' work, the Samba Team has created the
> first compatible Free Software implementation of Microsoft’s Active
> Directory protocols. Familiar to all network administrators, the
> Active Directory protocols are the heart of modern directory service
> implementations.
> 
> Samba 4.0 comprises an LDAP directory server, Heimdal Kerberos
> authentication server, a secure Dynamic DNS server, and
> implementations of all necessary remote procedure calls for Active
> Directory. Samba 4.0 provides everything needed to serve as an Active
> Directory Compatible Domain Controller for all versions of Microsoft
> Windows clients currently supported by Microsoft, including the
> recently released Windows 8.
> 
> The Samba 4.0 Active Directory Compatible Server provides support for
> features such as Group Policy, Roaming Profiles, Windows
> Administration tools and integrates with Microsoft Exchange and Free
> Software compatible services such as OpenChange.
> 
> The Samba 4.0 Active Directory Compatible Server can also be joined to
> an existing Microsoft Active Directory domain, and Microsoft Active
> Directory Domain Controllers can be joined to a Samba 4.0 Active
> Directory Compatible Server, showing true peer-to-peer
> interoperability of the Microsoft and Samba implementations of the
> Active Directory protocols.
> 
> Acknowledging the value of the interoperability of the Samba 4.0
> Active Directory Compatible Server, Steve van Maanen, the co-founder
> of Starsphere LLC, an IT services company in Tokyo, said:
> 
> "Thanks to Samba4, I have two fully replicating Active Directory
> Domain controllers that boot in under 10 seconds ! It is nice to have
> alternatives, and Samba4 is a great one."
> 
> Upgrade scripts are also provided for organizations using the previous
> Microsoft Windows NT Domain Controller functionality in Samba 3.x, to
> allow them to migrate smoothly to Samba 4.0.
> 
> Suitable for low-power and embedded applications, yet scaling to large
> clusters, Samba 4.0 is efficient and flexible. Its Python programming
> interface and administration toolkit help in enterprise deployments.
> 
> 
> Created Using Microsoft Documentation
> =
> 
> The Samba 4.0 Active Directory Compatible Server was created with help
> from the official protocol documentation published by Microsoft
> Corporation and the Samba Team would like acknowledge the
> documentation help and interoperability testing by Microsoft engineers
> that made our implementation interoperable.
> 
> "Active Directory is a mainstay of enterprise IT environments, and
> Microsoft is committed to support for interoperability across
> platforms," said Thomas Pfenning, director of development, Windows
> Server. "We are pleased that the documentation and interoperability
> labs that Microsoft has provided have been key in the development of
> the Samba 4.0 Active Directory functionality."
> 
> 
> Introducing SMB2.1 File Serving Support
> ===
> 
> Samba 4.0 includes the first Free Software implementation of
> Microsoft's SMB2.1 file serving protocol. Building on the success of
> the SMB2.0 server in Samba 3.6, the Samba 4.0 file server component is
> an evolution of the trusted Samba file serving code that is used
> worldwide by vendors of file servers, such as IBM's clustered Scale
> Out Network Attached Storage (SONAS), and many other commercial
> products.
> 
> In addition, the Samba 4.0 file server contains an initial
> implementation of SMB3, which will be further developed in later Samba
> 4 releases into a fully-featured SMB3 clustered file server
> implementation.
> 
> Future developments of our SMB3 server and client suite, in
> combination with our expanding number of SMB3 tests, will keep driving
> the performance improvements and improved compatibility with Microsoft
> Windows that Samba users have come to expect from our software.
> 
> 
> Integrated Clustered File Server Support
> 
> 
> Building on our 

[Samba] samba 4 alpha 19 cannot join existing AD

2012-02-29 Thread Greg Dickie
   1: DRSUAPI_SUPPORTED_EXTENSION_REMOVEAPI
   1: DRSUAPI_SUPPORTED_EXTENSION_MOVEREQ_V2
   1:
DRSUAPI_SUPPORTED_EXTENSION_GETCHG_COMPRESS
   1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V1
   1:
DRSUAPI_SUPPORTED_EXTENSION_RESTORE_USN_OPTIMIZATION
   0: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY
   1:
DRSUAPI_SUPPORTED_EXTENSION_KCC_EXECUTE
   1:
DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY_V2
   1:
DRSUAPI_SUPPORTED_EXTENSION_LINKED_VALUE_REPLICATION
   1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V2
   1:
DRSUAPI_SUPPORTED_EXTENSION_INSTANCE_TYPE_NOT_REQ_ON_MOD
   1:
DRSUAPI_SUPPORTED_EXTENSION_CRYPTO_BIND
   1:
DRSUAPI_SUPPORTED_EXTENSION_GET_REPL_INFO
   1:
DRSUAPI_SUPPORTED_EXTENSION_STRONG_ENCRYPTION
   1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V01
   1:
DRSUAPI_SUPPORTED_EXTENSION_TRANSITIVE_MEMBERSHIP
   1:
DRSUAPI_SUPPORTED_EXTENSION_ADD_SID_HISTORY
   1: DRSUAPI_SUPPORTED_EXTENSION_POST_BETA3
   0:
DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V5
   1:
DRSUAPI_SUPPORTED_EXTENSION_GET_MEMBERSHIPS2
   1:
DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V6
   1:
DRSUAPI_SUPPORTED_EXTENSION_NONDOMAIN_NCS
   1:
DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8
   1:
DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V5
   1:
DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V6
   1:
DRSUAPI_SUPPORTED_EXTENSION_ADDENTRYREPLY_V3
   1:
DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V7
   1:
DRSUAPI_SUPPORTED_EXTENSION_VERIFY_OBJECT
   0:
DRSUAPI_SUPPORTED_EXTENSION_XPRESS_COMPRESS
   0:
DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V10
   0:
DRSUAPI_SUPPORTED_EXTENSION_RESERVED_PART2
   0:
DRSUAPI_SUPPORTED_EXTENSION_RESERVED_PART3
site_guid:
----
pid  : 0x (0)
repl_epoch   : 0x (0)
Join failed - cleaning up
checking sAMAccountName
Deleted CN=ADS,OU=Domain Controllers,DC=tribalnova,DC=local
Deleted
CN=ADS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tribalnova,DC=local
ERROR(runtime): uncaught exception - (-1073741790, 'Access denied')
  File
"/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 
162, in _run
return self.run(*args, **kwargs)
  File
"/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/domain.py",
line 180, in run
machinepass=machinepass)
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py",
line 966, in join_DC
ctx.do_join()
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py",
line 871, in do_join
ctx.join_add_objects()
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py",
line 467, in join_add_objects
ctx.join_add_ntdsdsa()
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py",
line 416, in join_add_ntdsdsa
ctx.DsAddEntry([rec])
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py",
line 326, in DsAddEntry
ctx.drsuapi_connect()
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py",
line 305, in drsuapi_connect
(ctx.drsuapi_handle, ctx.bind_supported_extensions) =
drs_utils.drs_DsBind(ctx.drsuapi)
  File
"/usr/local/samba/lib64/python2.6/site-packages/samba/drs_utils.py",
line 144, in drs_DsBind
(info, handle) = drs.DsBind(misc.GUID(drsuapi.DRSUAPI_DS_BIND_GUID),
bind_info)

Any idea what I'm doing wrong or where to look?

Thanks,
Greg


-- 
Greg Dickie
just a guy
514-983-5400

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] cant login with my samba password only with my linux password

2012-02-13 Thread Greg Nick
Ok, I found the answer myself:
the mechanism that set samba password same as linux password is pam!

Commenting lines with pam_smbpass.so from /etc/pam.d/common-auth and  
/etc/pam.d/common-password solved my problem. Maybe Harmut problem to.




 From: Greg Nick 
To: "samba@lists.samba.org"  
Sent: Monday, February 13, 2012 10:37 AM
Subject: Re: [Samba] cant login with my samba password only with my linux 
password
 

I have same situation. Samba 3.5 Ubuntu 11.10. 

When user login in
their linux account (desktop environment, or via ssh, or whatever...)
samba password is reset to linux password. This is very annoying if
you wish to keep different passwords.

Can anybody tell me what mechanism set samba password same as
linux password, when user login? 
-- 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] cant login with my samba password only with my linux password

2012-02-13 Thread Greg Nick
 
I have same situation. Samba 3.5 Ubuntu 11.10. 

When user login in
their linux account (desktop environment, or via ssh, or whatever...)
samba password is reset to linux password. This is very annoying if
you wish to keep different passwords.

Can anybody tell me what mechanism set samba password same as
linux password, when user login? 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Permissions vs Linux Permissions

2011-11-26 Thread Greg Byshenk
On Sat, Nov 26, 2011 at 04:46:02PM -, Stephen Elliott wrote:
 
> I understand that Linux permissions override Samba permissions. But is it
> also the case that the Samba permissions override the Linux permissions?
> 
> Example:
> 
> I have a samba share called "SHARE". This is disabled by default and is
> configured for write access by group "MY_GROUP".
> 
> The permissions of all files and folders within /c/SHARE are 777
> (rwxrwxrwx). 
> 
> Now, if a user called "David" belonging to group "users" tried to access
> "\\READYNAS\SHARE\document.doc" would they have permission? I believe not
> but am looking for confirmation?
 
> My testing and understanding, leads me to the conclusion that both Samba and
> Linux permissions override each other. The most restrictive set win. Am I
> correct?

Your understanding is basically correct.

That said, "override each other", is not really correct, though your
second summary is close to the truth. That is, Samba permissions may
be more restrictive than filesystem (Linux or otherwise) permissions,
but may not be more open; in the end the filesystem is the master.


-- 
greg byshenk  -  gbysh...@byshenk.net  -  Leiden, NL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] windows 7 64 bit xerox print drivers

2011-09-19 Thread Greg Saunders
I would like to respond to my own question ... yes ... one year later :-)

My answer to this problem is * don't use Samba * to solve this type of
problem.

Instead I created a ".dat" file (using printui.dll) for each printer I
wanted to install, scripted the creation of an LPR port (
objWMIService.Get("Win32_TCPIPPrinterPort") and install print drivers using
printui.dll. I'm running LPD on the cups server.

Works like a charm. No hassles joining this server to the domain, no wonky
error messages, 500 desktops up and running at login, it just works.

I'm posting this here because I'm genuinely curious if there has been any
large scale success with Samba, Win 7 and Xerox (or other) 64 bit print
drivers.

Greg


On Mon, Aug 9, 2010 at 5:47 PM, Greg Saunders  wrote:

> Samba 3.4.7
> Ubuntu 10.04
>
> Has anyone out there got Xerox 64 bit drivers working in a point and print
> samba set up? And if so, which Xerox drivers? And which method of driver
> installation?
>
> I'm at a complete loss. We currently have an environment with 500 +
> desktops and a couple dozen Xerox workgroup docucolor MFPs that are running
> fine now with XP clients and a Samba print server. We're moving to Win 7 64
> bit clients over the next couple of months and this is going to be a huge
> stumbling block.
>
> Several months ago I posted a problem I was having installing 64 bit Xerox
> drivers into a shared samba queue. 32 bit drivers seem to be fine but the 64
> bit are a world of pain. There didn't seem to be any resolution at that time
> and hoping things may have changed in the last few months.
>
> I've had success with 64 bit HP drivers ... just not Xerox.
>
> When adding the 64 bit driver as an "additional driver" under the sharing
> tab of the queue of the samba server, it complains, "The specified location
> does not contain the driver  for the requested processor
> architecture." It clearly is a 64 version, it will install locally.
>
> As far as "cupsaddsmb" is concerned ... it just doesn't seem to work with
> 64 bit ... unless I'm doing something wrong ... which is completely likely
> :)
>
> If anyone could shed some light on this, it would be immensely appreciated.
>
> Thanking you all in advance.
> Greg
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Mapping Attributes While Using Winbind?

2011-09-09 Thread Wojtak, Greg
I'm working on testing out using winbind in our environment for user info and 
authentication.  Our 2K8 R2 AD DS set up has all of the rfc2307 attributes 
populated for objects that need to appear on the Unix machines and everything 
is working splendidly.  One thing I'd like to know is, we have some instances 
where users' AD accounts are not the same as their unix id's (matching them up 
at this point is not an option).  Is there a way to tell winbind to look at the 
uid attribute in AD rather than the sAMAccountName for a Unix user name?  For 
example, if my AD login is JUser but my uid in AD is defined as juser1, is it 
possible to tell the unix systems running winbind to log me in with juser1 
instead of juser?

If not, I can simply use the LDAP interface into AD for those systems, but I'd 
like to try and keep everything consistent, if possible.

Thanks!

Greg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Issues With User Info and Authentication

2011-09-01 Thread Wojtak, Greg
Hello,

I'm new to the list and hope this is the appropriate place to post this
type of question.  We've got our environment set up where all of our Unix
and Linux hosts get user information and perform authentication against an
LDAP directory.  I am working on a project to migrate these hosts to
instead authenticate against our Active Directory environment (Win 2k8
R2).  So far, I've been able to get direct LDAP authentication working
against AD, but I'd like to use winbind instead.  I've been working with
our CentOS Linux hosts first.  Since the POSIX attributes are already
populated on the AD objects (the ones that need them, anyways), I'd like
to configure winbind to pull that information from AD where available.
CentOS 5 (samba 3.0.33) seems to work as advertised; I'm able to join the
domain and get user information just fine.  CentOS 6, however, is giving
me fits.  The samba packages installed are version 3.5.4.

Here is the data I've observed:
 - Joining to domain works properly
 - wbinfo -u brings back a full list of all domain users
 - wbinfo -g brings back a full list of all domain groups
 - wbinfo -n testerx returns the appropriate SID
 - wbinfo -U  returns the same SID
 - wbinfo -S  returns the appropriate numeric uid
 - wbinfo -i  testerx returns 'Could not get info for user testerx'
 - getent passwd returns only local accounts
- getent group returns only local groups
- I've verified that winbind is in the nsswitch.conf

I've got the following in my [global] section in my smb.conf:

workgroup = MYDOMAIN
password server = mydc.mydomain.com
realm = MYDOMAIN.COM
security = ads
   idmap backend = ad
   idmap uid = 1000-2147483647
   idmap gid = 1000-2147483647
   idmap domains = MYDOMAIN
   idmap config MYDOMAIN:backend = ad
   idmap config MYDOMAIN:range = 1000-2147483647
   idmap config MYDOMAIN:schema_mode = rfc2307
   idmap config MYDOMAIN:readonly = yes
   winbind nss info = rfc2307
   template shell = /bin/bash
winbind use default domain = yes
   winbind offline logon = true
   winbind enum users = yes
   winbind enum groups = yes
   winbind nested groups = no
   encrypt passwords = yes
   log level = 7 passdb:2 auth:10 winbind:10 tdb:10 idmap:10
   winbind trusted domains only = no
   client use spnego = yes
   allow trusted domains = no


I've tried (rather randomly) changing some of the values of the latter
entries as well as the value of the idmap backend parameter to use tdb
while specifying the config for MYDOMAIN to use ad backend.  I'm rather
stumped at this point.  I've Googled around and it seems I'm not the only
one having issues, but nobody seems to have posted a solution.

Does anyone have any ideas?  Am I hitting a bug in the Cent 6 package that
has nothing to do with my config?  Is there something potentially screwy
with AD (I've mostly ruled this possibility out due to the fact that the
Cent 5 hosts are working fine)?

Any help is appreciated!

Thanks!

Greg 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Trouble Using Samba 3.5.6 in ADS Domain

2011-02-24 Thread Greg Byshenk
On Thu, Feb 24, 2011 at 01:00:36AM +0100, Robert Einsle wrote:

[...]
 
> nsswitch.conf:
> --- cut ---
> passwd: compat winbind
> group:  compat winbind
> shadow: compat winbind
> --- cut ---
> 
> But a "getent passwd" dont shows me users from the ADS.
> 
> Is anything missing?
> 
> I've done it with this article:
> http://www.enterprisenetworkingplanet.com/netos/article.php/3487081/Join-Samba-3-to-Your--Active-Directory-Domain.htm
> 
> Any hints?


That article doesn't want to load for me at the moment, so I can't see what
it says, but your 'nsswitch.conf' looks wrong.

If you are using 'compat', then it needs to be the only entry for the database;
you can't use 'compat' + something. 

I think you want either:
 
passwd: winbind
group:  winbind
shadow: winbind

or:
 
passwd: compat
passwd_compat:  winbind
group:  compat
group_compat:   winbind
shadow: compat
shadow_compat:  winbind


-- 
greg byshenk  -  gbysh...@byshenk.net  -  Leiden, NL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] GPLv3 and Mac OS X

2010-10-31 Thread Greg Byshenk
On Sat, Oct 30, 2010 at 08:48:19PM -0700, Jeremy Allison wrote:
 
> People only go to court if they think they can invalidate
> the license - it's a testiment to the GPL that so few
> actions actually make it that far.
> 
> Eventually someone will make similar mistakes with GPLv3
> that were made with GPLv3 and it'll end up being enforced
> by a court, just as GPLv2 was. But I hope that isn't with
> Samba - court cases are exhausting for everyone involved.

If I may comment, this bit of the message seems a bit cavalier.

Yes, it may be that someone goes to court "if they think they can 
invalidate the license", but it is just as likely that a court
case results when two parties disagree about what a particular
license (or contract, or whatever) actually requires. In such
cases, it can be stipulated that there is a misunderstaning on
the part of at least one of the parties, but which of the parties
is indeed 'misunderstanding' is for the court to decide.

The goal of a legal action is to enforce one party's
interpretation of the license; it the court that decides whether
that interpretation actually -is- enforceable.

And this is why some (people, companies, etc.) like to have a
judgment by the courts: because there is then an official, 
legally "correct" and enforceable interpretation.

-- 
greg byshenk  -  gbysh...@byshenk.net  -  Leiden, NL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] bogus file times in samba 3.5.4

2010-10-07 Thread Greg Dickie
Hey Jeremy,

  Thank you for the super quick response. I was not aware that they were
stored in an EA. Is there anyway to see the contents of the EA? (attr -l
shows nothing). This is an XFS filesystem.  I'm pretty sure the user
told me that those files were only put on the server on the 5th but I
will verify that.

So if a file is created outside samba I assume it will use the POSIX
dates right? That's confusing

Thanks,
Greg


On Thu, 2010-10-07 at 12:44 -0700, Jeremy Allison wrote:
> On Thu, Oct 07, 2010 at 03:41:04PM -0400, Greg Dickie wrote:
> > 
> > Hi,
> > 
> >   I am seeing some very dodgy behavior from samba where the files times
> > displayed to the client seem to have no basis in reality. In the example
> > below The file was created on Oct. 5th but samba is saying the file time
> > was way back on Sep. 30th.
> > 
> > [r...@tungsten KOSRCFLM]# ls -l 1321-538.dpn
> > -rw-rw-r-- 1 resin resin 387 Oct  5 15:49 1321-538.dpn
> > [r...@tungsten KOSRCFLM]# stat 1321-538.dpn
> >   File: `1321-538.dpn'
> >   Size: 387 Blocks: 8  IO Block: 4096   regular file
> > Device: fd08h/64776dInode: 268583304   Links: 1
> > Access: (0664/-rw-rw-r--)  Uid: (  500/   resin)   Gid: (  500/   resin)
> > Access: 2010-10-05 15:49:16.025314771 -0400
> > Modify: 2010-10-05 15:49:16.025314771 -0400
> > Change: 2010-10-05 15:49:16.025314771 -0400
> > [r...@tungsten KOSRCFLM]# smbclient //tungsten/pro-orders -Ugreg
> > Enter greg's password: 
> > Domain=[36PIX] OS=[Unix] Server=[Samba 3.5.4-GREG]
> > smb: \> cd 54378-1
> > smb: \54378-1\> cd KOSRCFLM
> > smb: \54378-1\KOSRCFLM\> ls 1321-538.dpn
> >   1321-538.dpn   387  Thu Sep 30 14:30:19
> > 2010
> > 
> > 4 blocks of size 262144. 3 blocks available
> > smb: \54378-1\KOSRCFLM\> 
> > 
> > 
> > 
> > Any ideas?
> > Thanks,
> > Greg
> 
> They probably do have a basis in reality. That's probably the
> real create time (which UNIX doesn't store). Remember, in 3.5.x
> we now store the Windows create time in an EA which gets updated
> according to Windows rules.
> 
> Jeremy.

-- 
Greg Dickie
just a guy

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] bogus file times in samba 3.5.4

2010-10-07 Thread Greg Dickie

Hi,

  I am seeing some very dodgy behavior from samba where the files times
displayed to the client seem to have no basis in reality. In the example
below The file was created on Oct. 5th but samba is saying the file time
was way back on Sep. 30th.

[r...@tungsten KOSRCFLM]# ls -l 1321-538.dpn
-rw-rw-r-- 1 resin resin 387 Oct  5 15:49 1321-538.dpn
[r...@tungsten KOSRCFLM]# stat 1321-538.dpn
  File: `1321-538.dpn'
  Size: 387 Blocks: 8  IO Block: 4096   regular file
Device: fd08h/64776dInode: 268583304   Links: 1
Access: (0664/-rw-rw-r--)  Uid: (  500/   resin)   Gid: (  500/   resin)
Access: 2010-10-05 15:49:16.025314771 -0400
Modify: 2010-10-05 15:49:16.025314771 -0400
Change: 2010-10-05 15:49:16.025314771 -0400
[r...@tungsten KOSRCFLM]# smbclient //tungsten/pro-orders -Ugreg
Enter greg's password: 
Domain=[36PIX] OS=[Unix] Server=[Samba 3.5.4-GREG]
smb: \> cd 54378-1
smb: \54378-1\> cd KOSRCFLM
smb: \54378-1\KOSRCFLM\> ls 1321-538.dpn
  1321-538.dpn   387  Thu Sep 30 14:30:19
2010

4 blocks of size 262144. 3 blocks available
smb: \54378-1\KOSRCFLM\> 



Any ideas?
Thanks,
Greg


-- 
Greg Dickie
just a guy

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] id mapping

2010-08-24 Thread Greg Dickie

Hi Robert,

  Thanks for the response. You are referring to 
idmap backend = rid

correct?

Greg

On Tue, 2010-08-24 at 09:10 -0400, Robert Freeman-Day wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> I have been the most happy with the hash idmap.  It really is the least
> invasive and "just works" (does that need to be trademarked these
> days?).  Since it hashes the SID with the same algorithm, all members
> get the same UID/GID mappings, which is a big win.
> 
> Robert
> 
> On 08/23/2010 05:21 PM, Greg Dickie wrote:
> > Hi,
> > 
> >   Today I'm trying to debug a problem on samba 3.5.4 where a domain
> > member server is having trouble mapping UIDs to SIDs. I must admit I
> > never really looked at this before as everything seemed to "just work".
> > Today I discovered that idmap backend on the PDC and the member server
> > were both defaulted to tdb. This means they have independent views of
> > UID to SID mappings I guess. That sucks. So I'm looking at the ldap
> > backend but I notice that it uses a special ou in the LDAP tree to store
> > mappings. Why do we need that if the sambaSamAccount schema also has
> > SIDs and UIDs for each user. Also, how is that tree populated?
> > 
> > Looking at my PDC it seems to just pull everything out of gencache.tdb
> > or say that no mapping exists. Doing a tdbdump of winbind_idmap.tdb
> > shows only a few entries. This seems to be more complicated than I
> > expected. I'm sorry if this is a silly question but what am I doing
> > wrong?
> > 
> > Thanks a lot,
> > Greg
> > 
> > 
> 
> 
> - -- 
> 
> 
> Robert Freeman-Day
> 
> https://launchpad.net/~presgas
> GPG Public Key:
> http://keyserver.ubuntu.com:11371/pks/lookup?op=get&search=0xBA9DF9ED3E4C7D36
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.10 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> 
> iEYEARECAAYFAkxzxMMACgkQup357T5MfTY0VACfSGOY2vXg05lUplINAeqxr42s
> iR0AnA3P/DdGApB0+WIJZTzNN99qiv/z
> =ddTf
> -END PGP SIGNATURE-

-- 
Greg Dickie
just a guy

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] id mapping

2010-08-23 Thread Greg Dickie
Hi,

  Today I'm trying to debug a problem on samba 3.5.4 where a domain
member server is having trouble mapping UIDs to SIDs. I must admit I
never really looked at this before as everything seemed to "just work".
Today I discovered that idmap backend on the PDC and the member server
were both defaulted to tdb. This means they have independent views of
UID to SID mappings I guess. That sucks. So I'm looking at the ldap
backend but I notice that it uses a special ou in the LDAP tree to store
mappings. Why do we need that if the sambaSamAccount schema also has
SIDs and UIDs for each user. Also, how is that tree populated?

Looking at my PDC it seems to just pull everything out of gencache.tdb
or say that no mapping exists. Doing a tdbdump of winbind_idmap.tdb
shows only a few entries. This seems to be more complicated than I
expected. I'm sorry if this is a silly question but what am I doing
wrong?

Thanks a lot,
Greg


-- 
Greg Dickie
just a guy

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] windows 7 64 bit xerox print drivers

2010-08-18 Thread Greg Saunders
Samba 3.4.7
Ubuntu 10.04

Has anyone out there got Xerox 64 bit drivers working in a point and print
samba set up? And if so, which Xerox drivers? And which method of driver
installation?

I'm at a complete loss. We currently have an environment with 500 + desktops
and a couple dozen Xerox workgroup docucolor MFPs that are running fine now
with XP clients and a Samba print server. We're moving to Win 7 64 bit
clients over the next couple of months and this is going to be a huge
stumbling block.

Several months ago I posted a problem I was having installing 64 bit Xerox
drivers into a shared samba queue. 32 bit drivers seem to be fine but the 64
bit are a world of pain. There didn't seem to be any resolution at that time
and hoping things may have changed in the last few months.

I've had success with 64 bit HP drivers ... just not Xerox.

When adding the 64 bit driver as an "additional driver" under the sharing
tab of the queue of the samba server, it complains, "The specified location
does not contain the driver  for the requested processor
architecture." It clearly is a 64 version, it will install locally.

As far as "cupsaddsmb" is concerned ... it just doesn't seem to work with 64
bit ... unless I'm doing something wrong ... which is completely likely :)

If anyone could shed some light on this, it would be immensely appreciated.

Thanking you all in advance.
Greg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] windows 7 64 bit xerox print drivers

2010-08-09 Thread Greg Saunders
Samba 3.4.7
Ubuntu 10.04

Has anyone out there got Xerox 64 bit drivers working in a point and print
samba set up? And if so, which Xerox drivers? And which method of driver
installation?

I'm at a complete loss. We currently have an environment with 500 + desktops
and a couple dozen Xerox workgroup docucolor MFPs that are running fine now
with XP clients and a Samba print server. We're moving to Win 7 64 bit
clients over the next couple of months and this is going to be a huge
stumbling block.

Several months ago I posted a problem I was having installing 64 bit Xerox
drivers into a shared samba queue. 32 bit drivers seem to be fine but the 64
bit are a world of pain. There didn't seem to be any resolution at that time
and hoping things may have changed in the last few months.

I've had success with 64 bit HP drivers ... just not Xerox.

When adding the 64 bit driver as an "additional driver" under the sharing
tab of the queue of the samba server, it complains, "The specified location
does not contain the driver  for the requested processor
architecture." It clearly is a 64 version, it will install locally.

As far as "cupsaddsmb" is concerned ... it just doesn't seem to work with 64
bit ... unless I'm doing something wrong ... which is completely likely :)

If anyone could shed some light on this, it would be immensely appreciated.

Thanking you all in advance.
Greg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Windows 7 64-bit drivers

2010-05-27 Thread Greg Saunders
Hello All, I'm having trouble with 64 bit Xerox drivers on my Samba server.

The below quote if from another thread which I have followed but on the
client Win 7 64 bit machine, I get an error:

"The specified location does not contain the driver for the Xerox WorkCentre
7675 rev2 PS for the requested processor architecture."

Trying to add the driver from at 64 bit client first also fails with the
same error.

For sure the driver is x64, I can install the driver locally on the Win 7 64
client.

I have HP 64 bit drivers installed, no problem ... any ideas?

Thanks
Greg


We support 32bit and 64bit XP, Vista, and Windows7.  We upload drivers

from a windows client instead of using cupsaddsmb since we found this

method solved alot of printing issues when we were using cupsaddsmb:

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/classicalprinting.html#id2627720


> With this method there are a few options to support both 32 and 64bit

clients, based on how point and print works.


> 1. Upload a driver from the Windows 32bit client's local driver store.

When a 64bit client tries to connect, point and print does not find the

appropriate driver on the samba server.  Instead, it will attempt to

find and install an appropriate driver with the correct filename from

it's own local driver store or Windows Update.  This is our preferred

method since it's easier to manage.


> 2. For cases where drivers for a specific printer model is not available

in a clients local driver store then we upload both 32bit and 64bit

drivers to the samba queue.  First we upload 32bit then go into the

driver properties, into the 'Sharing' tab, and click on 'Additional

Drivers' to install 64bit drivers from a 64bit client.


> Check out the Windows Point and Print Technical Overview for reference

http://bit.ly/cGpqn8


> hope this helps,

Ryan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] windows 7 machine account fails to authenticate against samba PDC

2010-02-28 Thread Greg Dickie


Hi,

   I've just been debugging something related to this. Environment is
samba 3.4.6 with LDAP backend and windows 7 clients. In my case the user
in passdb but getpwnam() fails led me to adjust /etc/ldap.conf so that
machine accounts were also listed as valid users on the system.

I don't really understand why this is required since ldapsam:trusted =
yes  in my case and I thought that parameter would bypass the getpwnam()
check.

No idea about the credentials failing, I'm just happy I can give domain
users privilege on the win7 machines ;-)

hope this helps,
Greg 


On Sat, 2010-02-06 at 13:58 +, graham wrote:
> Re. the ongoing failure of the windows7 client to authenticate its 
> machine account, I've upped the log level and added an extra debug 
> statement to getpwnam_alloc().
> 
> There are a couple of discrepancies which I very much hope someone can 
> explain, or at least point me in the direction of how to resolve!
> 
> 
> Comparing the output for a winXP client (successful) and the win7 client 
> (unsuccessful), it seems that:
> 
> 1 - the challenge-response mechanism is different for the win7 machine 
> to that of the winXp machine (and the win7 machine fails this 
> authentication).
> 
> Can anyone enlighten me as to why the different challenge, and why the 
> client might fail it?
> 
> This is the trace for the unsuccessful win7 machine:
> 
> [2010/02/05 22:55:10,  5] libsmb/credentials.c:70(creds_init_128)
>creds_init_128
> [2010/02/05 22:55:10,  5] libsmb/credentials.c:71(creds_init_128)
>   clnt_chal_in: 444EA615F23340F2
> [2010/02/05 22:55:10,  5] libsmb/credentials.c:72(creds_init_128)
>   srv_chal_in : DE62C1B8DCC1E4AD
> [2010/02/05 22:55:10,  5] 
> libsmb/credentials.c:221(netlogon_creds_server_check)
>netlogon_creds_server_check: challenge : 2818DBF48BE4EBC0
> [2010/02/05 22:55:10,  5] 
> libsmb/credentials.c:222(netlogon_creds_server_check)
>calculated: EDC837F244BC1EBB
> [2010/02/05 22:55:10,  2] 
> libsmb/credentials.c:223(netlogon_creds_server_check)
>netlogon_creds_server_check: credentials check failed.
> 
> This is the trace for the successful winXP machine:
> 
> [2010/02/05 23:06:44,  5] libsmb/credentials.c:121(creds_init_64)
>   clnt_chal_in: DF0D76C6D2BF3CDB
> [2010/02/05 23:06:44,  5] libsmb/credentials.c:122(creds_init_64)
>   srv_chal_in : EE4404370EE4219C
> [2010/02/05 23:06:44,  5] libsmb/credentials.c:123(creds_init_64)
>   clnt+srv : CD527AFDE0A35E77
> [2010/02/05 23:06:44,  5] libsmb/credentials.c:124(creds_init_64)
>   sess_key_out : 6D4885F56283E87B
> 
> 
> 
> 
> 
> 2 - later, (perhaps as some fallback authentication?) the get_pwnam() is 
> called a number of times for this machine account, initially it succeeds 
> then in a later call fails NOT because the machine account isn't in 
> /etc/passwd, but because it is looked up in UPPER case.
> 
> Is this a bug?
> 
> Here's the trace for the failure:
> 
> [2010/02/05 22:55:18,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2010/02/05 22:55:18,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
> [2010/02/05 22:55:18,  3] smbd/uid.c:428(push_conn_ctx)
>push_conn_ctx(0) : conn_ctx_stack_ndx = 0
> [2010/02/05 22:55:18,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
> [2010/02/05 22:55:18,  5] auth/token_util.c:522(debug_nt_user_token)
>NT user token: (NULL)
> [2010/02/05 22:55:18,  5] auth/token_util.c:548(debug_unix_user_token)
>UNIX token of user 0
>Primary group is 0 and contains 0 supplementary groups
> [2010/02/05 22:55:18,  1] lib/util_pw.c:59(getpwnam_alloc)
>my extra debug: sys_getpwnam(WIN7HOST$) failed
> ^ *the name as passed to getpwnam_alloc*
> [2010/02/05 22:55:18,  1] auth/auth_util.c:577(make_server_info_sam)
>User WIN7HOST$ in passdb, but getpwnam() fails!
> 
> 
> rgds,
> graham.
> 
> 

-- 
Greg Dickie
just a guy

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] (no subject)

2010-02-06 Thread Greg Byshenk
On Sat, Feb 06, 2010 at 11:31:31AM +0100, kornel kornatka wrote:

> I Have a problem:
> 
> I'm sharing ~600 folders on my samba server:
> 
> [SHARE 192.168.0.20]
> comment =  Private share for host 192.168.0.20
> browseable = yes
> writable = yes
> path = /var/archives/USERS/192.168.0.20
> public=yes
> hosts deny = 192.168. EXCEPT 192.168.0.20
> 
> [SHARE 192.168.0.21]
> comment =  Private share for host 192.168.0.21
> browseable = yes
> writable = yes
> path = /var/archives/USERS/192.168.0.21
> public=yes
> hosts deny = 192.168. EXCEPT 192.168.0.21
> .
> .
> .
> 
> But any user can see all shares even those without permissions (each host
> can see ~600 shares and only one is working for him)
> I don't know how to hide shares for each host so that he can see only share
> created for him.
> 
> For Example host 192.168.0.10 will see only "SHARE 192.168.0.10"


I'm not a samba expert, but what you're doing seems clumsy to me.

Why not create a single share something like this:

[privateshare]
   comment =  Private share for local machines
   browseable = yes
   writable = yes
   path = /var/archives/USERS/%I
   public = yes
   hosts deny = 192.168. EXCEPT %I

This allows every host to see just a single folder of its own -- and also
makes for a much simpler smb.conf.


-- 
greg byshenk  -  gbysh...@byshenk.net  -  Leiden, NL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-14 Thread Greg
I was finally able to resolve these error messages. I was missing the
winbind settings in /etc/nsswitch.conf:
   passwd: compat winbind
   group:  compat winbind
This is in addition to the settings that I had made to /etc/samba/smb.conf:
   idmap backend = tdb
   idmap alloc backend = tdb
   idmap uid = 1-11000
   idmap gid = 1-11000
   winbind enum users = yes
   winbind enum groups = yes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-10 Thread Greg
>Test a users SID to UID mapping:
>
># /apps/samba/bin/wbinfo -n SOMEUSER
>S-1-5-21-3147950943-2271782263-395470419-4610 User (1)
># /apps/samba/bin/wbinfo -S S-1-5-21-3147950943-2271782263-395470419-4610
>46318

That works fine. I'm using a local user name, it resolved the NT style SID
which could then resolve the local UID.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-08 Thread Greg
I updated my smb.conf to include the following parameters:
[global]
   idmap backend = tdb
   idmap alloc backend = tdb
   idmap uid = 1-11000
   idmap gid = 1-11000
   winbind enum users = yes
   winbind enum groups = yes

This seems to have fixed some of the errors, but I still get the following
errors in log.winbindd-idmap (repeated many times):
[2009/12/08 16:41:48,  0] winbindd/idmap_tdb.c:341(idmap_tdb_alloc_init)
  idmap will be unable to map foreign SIDs: NT_STATUS_UNSUCCESSFUL
[2009/12/08 16:41:48,  0] winbindd/idmap.c:589(idmap_alloc_init)
  ERROR: Initialization failed for alloc backend, deferred!
[2009/12/08 16:41:48,  0] winbindd/idmap.c:201(smb_register_idmap_alloc)
  idmap_alloc module tdb already registered!
[2009/12/08 16:41:48,  0] winbindd/idmap.c:149(smb_register_idmap)
  Idmap module passdb already registered!
[2009/12/08 16:41:48,  0] winbindd/idmap.c:149(smb_register_idmap)
  Idmap module nss already registered!
[2009/12/08 16:41:48,  1] winbindd/idmap_tdb.c:214(idmap_tdb_load_ranges)
  idmap uid missing

I tried with and without the backend parameters getting the same result. I'm
not sure if those or the 'enum' parameters are necessary. FWIW, there exitst
a file /var/lib/samba/winbindd_idmap.tdb but the timestamp on it is over two
years ago.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-07 Thread Greg
Hmmm. Well, I don't have any of the idmap settings in smb.conf so it would
be whatever is default. I am using winbind just for the name resolution
functionality. But is this a misconfiguration? What other settings are
critical?

-Original Message-
From: Ryan Suarez [mailto:ryan.sua...@sheridanc.on.ca]
Sent: Saturday, December 05, 2009 1:17 AM
To: isk...@gmail.com
Cc: samba@lists.samba.org
Subject: Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full


Greg wrote:
> I get these same sort of errors repeated in my log files. They are present
> when I start samba and everything seems to work fine. However, after some
> long period of time, I won't be able to connect to the samba shares from a
> client. If I restart samba (/etc/init.d/samba restart), these errors are
> entered again at that time but I will then be able to connect. I haven't
> been able to find many answers yet...
>
What do you have idmap gid set to in smb.conf?  And have you used up
this range?

No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.5.426 / Virus Database: 270.14.92/2543 - Release Date: 12/04/09
19:34:00

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-07 Thread Greg Carroll
I get these same sort of errors repeated in my log files. They are present
when I start samba and everything seems to work fine. However, after some
long period of time, I won't be able to connect to the samba shares from a
client. If I restart samba (/etc/init.d/samba restart), these errors are
entered again at that time but I will then be able to connect. I haven't
been able to find many answers yet...

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-04 Thread Greg
I get these same sort of errors repeated in my log files. They are present
when I start samba and everything seems to work fine. However, after some
long period of time, I won't be able to connect to the samba shares from a
client. If I restart samba (/etc/init.d/samba restart), these errors are
entered again at that time but I will then be able to connect. I haven't
been able to find many answers yet...

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] windows 7 in 3.4.3

2009-11-16 Thread Greg Dickie
I figured it out. Should have gone right to the source the first time


http://wiki.samba.org/index.php/Windows7

In my case I had set the netlogon parameters  as the other articles on
the internet had suggested. That actually breaks it.

Setting them back to default makes everything work great.

thanks!
Greg

On Mon, 2009-11-16 at 16:02 +, Chris Hall wrote:
> Greg Dickie wrote (on 15-Nov-2009 at 19:36) 
> >Sorry in advance if this is a FAQ but I have not been watching the
> > list for a while. I have a customer who is foolish enough to want to use
> > windows 7 so I updated them to a samba 3.4.3 PDC and successfully joined
> > the domain however domain users cannot log in due to trust relationship
> > failure.
> 
> I have exactly the same experience with 3.4.3 running as a PDC.
> 
> I assume there is something I haven't configured properly, because I cannot
> imagine that Samba does not support Domain Login for Windows 7.  I just wish
> I could divine the right spells to cast :-(
> 
> Chris
> 


-- 
Greg Dickie
just a guy

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] windows 7 in 3.4.3

2009-11-15 Thread Greg Dickie
Hi,

   Sorry in advance if this is a FAQ but I have not been watching the
list for a while. I have a customer who is foolish enough to want to use
windows 7 so I updated them to a samba 3.4.3 PDC and successfully joined
the domain however domain users cannot log in due to trust relationship
failure. I've seen postings that look related that seem to have been
fixed by moving to 3.3.6 but somehow I thought the new 3.4.3 would also
work. Is that not the case?

thanks,
Greg 

-- 
Greg Dickie
just a guy

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] stop winbind writes to disk

2009-04-28 Thread Greg
I'm trying to eliminate disk read/writes (as much as possible). Winbind is
one of the last problems for me. I was hoping that the -n switch would
disable caching and thus eliminate the writes to
/var/cache/samba/winbindd_cache.tdb. But I haven't had much luck.

To debug, I use the command string winbindd -i -d10 -n -s
/etc/samba/smb.conf and I get the following output:
[ 6796]: list trusted domains
secrets_get_trusted_domains: got 0 domains
Storing response for pid 6797, len 3240
fork_domain_child: domain PICTURE-FRAME no longer in 'startup' mode.
Destroying timed event 82e24d8 "async_request_timeout"
Retrieving response for pid 6797
Added timed event "async_request_timeout": 82e24d8
timed_events_timeout: 299/38
child daemon request 19
process_request: request fn LIST_TRUSTDOM
[ 6796]: list trusted domains
secrets_get_trusted_domains: got 0 domains
Storing response for pid 6797, len 3240
Destroying timed event 82e24d8 "async_request_timeout"
Retrieving response for pid 6797
Added timed event "async_request_timeout": 82e24d8
timed_events_timeout: 299/37
child daemon request 19
process_request: request fn LIST_TRUSTDOM

This repeats indefinitely as far as I can tell. Each of these sections
corresponds to a write action to the winbindd_cache.tdb file. Should I be
able to stop writes to winbindd_cache.tdb? Am I missing something?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba profiles for Win XP Pro

2009-03-10 Thread Greg Charles
Hello,

I am new to Samba. I have not actually set it up yet aside from a test bed.
I'm wanting set up a Samba server in which Windows XP boxes will
authenticating to, as a Domain Controller. Is it possible to set up Samba to
have some profiles that are roaming while having other profiles that are not
roaming?

Thank you for your time,

Greg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Bizarre - How did windows user setfacl for a file??

2008-11-13 Thread Greg Byshenk
On Wed, Nov 12, 2008 at 01:46:45AM -0600, David C. Rankin wrote:
 
>   In 8 years, since 2.02 (I think), I have never seen this behavior out of
> samba. I run a stand-alone server with WinXP clients. Somehow a legal 
> assistant
> created (not intentionally mind you) files and directories with ACL 
> attributes set:
> 
> -rwxrwx---+ 1 cyndy ochiltree 21504 2008-10-28 16:48 AUTHORIZATION -
> employment.doc*
> -rwxrwx---+ 1 cyndy ochiltree 12804 2008-10-28 16:48 AUTHORIZATION -
> employment.pdf*
> drwxrwx---+ 2 cyndy ochiltree  4096 2008-10-29 16:56 Gregg, Joy/
> -rwxrwx---+ 1 cyndy ochiltree 44544 2008-10-28 16:32 POA - BG Contingency 
> New.doc*
> -rwxrwx---+ 1 cyndy ochiltree 48309 2008-10-28 16:31 POA - BG Contingency 
> New.pdf*
> drwxrwx---+ 2 cyndy ochiltree  4096 2008-10-29 16:51 Roper, Buddy/
> 
>   What in the heck? I found the setfacl --remove-all
> command that gets rid of this, but I'm still left wondering WTF happened in 
> the
> first place? Moreover, how do I configure samba to make sure this never 
> happens
> again? My config is: [...]


I'm not sure for exactly how long, but Samba has supported extended ACLs
for quite some time (if the underlying OS/filesystem has such support).

To ensure that it is not there, you can either a) build samba without
acl support; or b) disable extended ACLs on the filesystem.

As for why it changed for you, I notice that the default configuration
is now (for Samba-3.2.4, at least)

   --with-acl-support  Include ACL support (default=auto)

... which I believe means that it will build in ACL support if the 
system has it.  Perhaps this has changed recently?


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba 3.4.2 Installation Issue

2008-10-09 Thread Greg WOLD
OK. Thanks! 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Of Charles Marcus
Sent: Thursday, October 09, 2008 2:06 PM
To: Samba Maillist
Subject: Re: [Samba] Samba 3.4.2 Installation Issue

On 10/9/2008, Greg WOLD ([EMAIL PROTECTED]) wrote:
> I'm having difficulty installing samba v3.2.4 on my CentOS 5 box. I've

> downloaded the samba-3.2.4.tar.gz file to /usr/tmp (svn gave a timeout

> so I decided to download the gz file instead). I ran tar xvzf
> samba-3.2.4 to unpack it. Then I followed the directions here:
> <http://svnanon.samba.org/samba/docs/man/Samba-HOWTO-Collection/compil
> ing.html>, beginning in the Verifying Samba's PGP Signature section.
> Everything compiles and runs w/out issue. But when I run smbclient -V,

> I get Version 3.0.28.el5_2.1 instead of something w/3.2.4. What could 
> I be doing wrong?

Sounds to me like you already had the Centos version installed.

If you want to install from source and are up to it, thats fine, but
you'll need to be very careful for this very reason...

-- 

Best regards,

Charles
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-
 NOTE:
This e-mail message contains PRIVILEGED and CONFIDENTIAL
information and is intended only for the use of the specific
individual or individuals to which it is addressed. If you are not
an intended recipient of this e-mail, you are hereby notified that
any unauthorized use, dissemination or copying of this e-mail or
the information contained herein or attached hereto is strictly
prohibited. If you receive this e-mail in error, notify the person
named above by reply e-mail and please delete it. Thank you.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.4.2 Installation Issue

2008-10-09 Thread Greg WOLD
> All,
> 
> I'm having difficulty installing samba v3.2.4 on my CentOS 5 box. I've
> downloaded the samba-3.2.4.tar.gz file to /usr/tmp (svn gave a timeout
> so I decided to download the gz file instead). I ran tar xvzf
> samba-3.2.4 to unpack it. Then I followed the directions here:
> <http://svnanon.samba.org/samba/docs/man/Samba-HOWTO-Collection/compil
> ing.html>, beginning in the Verifying Samba's PGP Signature section.
> Everything compiles and runs w/out issue. But when I run smbclient -V,
> I get Version 3.0.28.el5_2.1 instead of something w/3.2.4. What could
> I be doing wrong?
> 
> Also, could someone supply me w/a repository addy so I can add it to
> my list? That would make it easier to get the updates.
> 
> Thanks in advance!
> 
> Greg Wold


 NOTE:
This e-mail message contains PRIVILEGED and CONFIDENTIAL
information and is intended only for the use of the specific
individual or individuals to which it is addressed. If you are not
an intended recipient of this e-mail, you are hereby notified that
any unauthorized use, dissemination or copying of this e-mail or
the information contained herein or attached hereto is strictly
prohibited. If you receive this e-mail in error, notify the person
named above by reply e-mail and please delete it. Thank you.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ads authentication and Solaris

2008-09-30 Thread Greg Byshenk
On Mon, Sep 29, 2008 at 10:05:17AM -0700, William Wilson wrote:

> We have a number of Solaris servers that we run samba shares off of.  
> So far, even using ads for authentication, we have to set up accounts  
> so an entry is in the passwd file for the user. Is there any way to  
> bypass passwd completely and just authenticate via the domain?

I'm not currently running samba on Solaris, but have been playing a
bit with using pure ADS auth on a FreeBSD machine, and it seems to
work.

What is required is to enable pam_winbind for ssh (and presumably
for anything else desired, but I've only done ssh connections so
far), set winbind for 'passwd' and 'group' entries in nsswitch.conf,
and mount /home at /home/.

Currently you have to login as \user, but I believe that
setting 'winbind use default domain = yes' in smb.conf should 
allow "bare" usernames. (I haven't got so far as testing this, yet.)


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] long delay accessing print properties on client

2008-09-11 Thread Greg Saunders
I've seen a proposed fix for this problem

http://lists.samba.org/archive/samba/2005-September/110571.html

and it has no influence on my installation.

client workstations: XP Pro SP 2
number of clients: about 500
server O/S: ubuntu hardy 8.04

ha1 ~: uname -a
Linux ha1 2.6.24-19-xen #1 SMP Wed Aug 20 21:08:51 UTC 2008 x86_64 GNU/Linux

ha1 ~: dpkg -l samba*
||/ Name   VersionDescription
ii  samba  3.0.28a-1ubunt a LanManager-like file and printer server
fo
ii  samba-common   3.0.28a-1ubunt Samba common files used by both the server
a

I have some drivers that take 30 to 60 seconds to access the properties from
the client; typically seem to be Xerox and a few HP Designjet drivers. I
have other drivers, Ricoh as an example, that do not exhibit this behaviour
and function properly. I have other installations with different server O/S
(Open Suse 10.2) and older versions of Samba with the same problem.

The samba process on the server ramps the CPU up to 90+% when the client
operation is taking place.

Help / suggestions is much appreciated.

Greg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Unable to Join Domain

2008-09-07 Thread Greg Koch
I just wanted to let everyone that helped me with this issue know that I
solved it.  I used the root user to add the systems to the domain, and it
worked perfectly!  Apparently the user I was using wasn't allowed to add
domain machines...

Thanks for all your help though!



On Mon, 01 Sep 2008 22:26:05 -0600, Greg Koch <[EMAIL PROTECTED]> wrote:
> I recently setup a new server with CentOS 5.2.  Everything works great on
> the server except when I try to join the domain it simply tells me:
> 
> "The following error occurred attempting to join the domain "Domain":
> 
> The user name could not be found.
> 
> I have researched this error and attempted a number of fixes but have
been
> unable to resolve the issue.  I am able to connect to the server with the
> user name and password that I am using to join the domain (I know that
> isn't the user name its really talking about) and browse (read/write) the
> network shares.  I have read the last entry in the log pertaining to the
> domain join request, and it is telling me that useradd could not write to
> the password file...  Anyone have an idea of what is causing this?  Below
> is the error and my smb.conf.  I created the smb.conf from a guide at
>
http://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-samba-servers.html
> and added some settings based on previous servers.
> 
> 
> smbd.log
> [2008/09/01 22:07:44, 0]
> passdb/pdb_interface.c:pdb_default_create_user(329)
>   _samr_create_user: Running the command `/usr/sbin/useradd -s /bin/false
> -d /dev/null -g machines sy01$' gave 1
> 
> 
> smb.conf
> [global]
> workgroup = NMTWeb
> netbios name = devserver
> time server = yes
> security = user
> add user script = /usr/sbin/useradd -m %u
> delete user script = /usr/sbin/userdel -r %u
> add group script = /usr/sbin/groupadd %g
> delete group script = /usr/sbin/groupdel %g
> add user to group script = /usr/sbin/usermod -G %g %u
> add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null
> -g machines %u
> logon drive = U:
> domain logons = Yes
> oslevel = 35
> preferred master = Yes
> domain master = Yes
> local master =yes
> domain logons = yes
> printing = cups
> load printers = yes
> hide unreadable = yes
> map to guest = Never
> hide dot files = yes
> wins support = yes
> server string = devserver
> logon path = \\%L\%U\windowsprofile
> bind interfaces only = yes
> 
> [homes]
> comment = Home Directories
> valid users = %S
> read only = No
> [netlogon]
> comment = Network Logon Service
> path = /var/lib/samba/netlogon
> guest ok = no
> browseable = No
> read only = Yes
> 
> [Public]
> comment = Public Document Share
> writeable = yes
> path = /home/public
> force directory mode = 777
> force group = users
> force create mode = 777
> force user = root
> valid users = @users
> create mode = 777
> directory mode = 777
> 
> [www]
> Comment = Development Website Directory
> writeable = yes
> path = /www
> force directory mode = 777
> force group = users
> force create mode = 777
> force user = root
> valid users = @users
> create mode = 777
> directory mode = 777

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] The specified network name is no longer available

2008-09-05 Thread Greg Koch
I feel stupid even asking, and I have a feeling the solution is something
that has been staring me right in the face for hours.  I can't seem to
access network shared on my samba PDC.  I've done this before, and I am
using a similar smb.conf file and I am just at the point where I can't get
anything else to happen with this thing.  My original problem was that I
could not get WINXP machines to join the domain and I upgraded my version
of Samba in hopes that it was just a fluke.

It made things worse.  Everytime I navigate to \\server I just receive the
error "The specified network name is no longer available".  Same thing when
I try to join the domain.  It does prompt me for a username and password,
but beyond that, I have nothing.

I need help!!

Thank you!!

current versions: CentOS 5.2 Samba 3.0.28-1.el5_2.1.x86_64
/etc/samba/smb.conf
[global]
log file = /var/log/samba/log.%m
max log size = 50
workgroup = NMTWebDev
netbios name = Server
passdb backend = tdbsam
security = user
add user script = /usr/sbin/useradd -m %u
delete user script = /usr/sbin/userdel -r %u
add group script = /usr/sbin/groupadd %g
delete group script = /usr/sbin/groupdel %g
add user to group script = /usr/sbin/usermod -G %g %u
add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null 
-g machines %u
# The following specifies the default logon script
# Per user logon scripts can be specified in the user
# account using pdbedit logon script = logon.bat
# This sets the default profile path.
# Set per user paths with pdbedit
logon drive = U:
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
local master = Yes
wins support = Yes
name resolve order = wins lmhosts hosts bcast
dns proxy = Yes
socket options = IPTOS_LOWDELAY TCP_NODELAY
load printers = Yes
printing = cups
printcap name = cups
#   bind interfaces only = yes
logon path = \\%L\%U\windowsprofile
server string = PDC
encrypt passwords = yes
null passwords = no
#   interfaces = lo eth0
map to guest = Never
hide unreadable = yes
[homes]
comment = Home Directory for %u
browseable = no
valid users = %S
read only = no
guest ok = no
create mask = 0600
directory mask = 0700
inherit permissions = yes
[netlogon]
path = /var/lib/samba/netlogon
guest ok = no
read only = yes
browseable = no
[Public]
comment = Public File Share
writeable = yes
path = /home/public
force directory mode = 777
force group = users
force create mode = 777
force user = root
valid users = @users
create mode = 777
directory mode = 777
[www]
comment = Website Share
writeable = yes
path = /www
force directory mode = 777
force group = users
force create mode = 777
force user = root
valid users = @users
create mode = 777
directory mode = 777
[printers]
comment = All Printers
path = /var/spool/samba/print
printer = IBMInfoP
browseable = No
public = Yes
guest ok = Yes
writable = No
printable = Yes
[print$]
comment = Printer Drivers Share
path = /var/lib/samba/drivers
write list = @users

Greg Koch

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Unable to Join Domain

2008-09-04 Thread Greg Koch
Well, the good news is that I was able to install version 3.0.32-36, but
now I seem to have some sort of name resolution error because I can't
access the server at all!  When I navigate either to \\server or \\IP it
doesn't seem to make a connection, much less allow me to join the domain! 
AH!  I will see what I can work out.  Thanks for your help thus far!

On Thu, 4 Sep 2008 08:26:30 -0500, "Hoover, Tony" <[EMAIL PROTECTED]>
wrote:
> from : http://ftp.sernet.de/pub/services/samba/yum.txt
> 
> Howto use SerNet Samba packages with Yum:
> -
> 
> For example for RHEL 5 (tested packages):
> 
> - cd /etc/yum.repos.d
> - wget http://ftp.sernet.de/pub/samba/tested/rhel/5/sernet-samba.repo
> - yum install samba3
> 
> To use the latest packages, use
>   wget http://ftp.sernet.de/pub/samba/recent/rhel/5/sernet-samba.repo
> 
> 
> SerNet Samba Team
> 
> -
> -- www.sambaxp.org -- www.enterprisesamba.com -- www.sernet.de --
> -
> 
> 
> 
> CentOS 5.2 would use the same instructions.  except use the:
> http://ftp.sernet.de/pub/samba/recent/centos/5/sernet-samba.repo
> repo.
> 
> You may [want to|have to] uninstall your samba before installing samba3
> from
> the sernet repo.
> 
>  
> Tony Hoover, Network Administrator
> KSU - Salina, College of Technology and Aviation
> (785) 826-2660
> 
> "Don't Blend in..."
> 
> 
> -Original Message-
> From: Greg Koch [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, September 03, 2008 5:15 PM
> To: Hoover, Tony
> Cc: Mike Eggleston; samba@lists.samba.org
> Subject: RE: [Samba] Unable to Join Domain
> 
> I had 3.0.28a but when I attempt to install from yum the most current
> version it supplies is 3.0.28-1.el5_2.1.  I realize it is a different
> package, but it didn't seem to solve my issue.  Any help with getting yum
> to
> give me a more current version, or other ideas to solve this issue?
> 
> On Wed, 3 Sep 2008 16:29:16 -0500, "Hoover, Tony" <[EMAIL PROTECTED]>
> wrote:
>> Samba 3.0.28a (from CentOS 5.2) would not allow me to add my new
>> domain controller to the domain that it was supposed to be
>> controlling.  I uninstalled 3.0.28a and installed the 3.0.31 version
>> (which was current
> at
>> that time).
>>
>> After the upgrade, I was able to join the domain with out difficulty.
>>
>> I submitted a bug-report to CentOS about this issue.
>>
>>
>>
>> --
>> --
>> Tony Hoover, Network Administrator
>> KSU - Salina, College of Technology and Aviation
>> (785) 826-2660
>>
>> "Don't Blend in..."
>> --
>> --
>>
>> -Original Message-
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] On Behalf Of
>> Greg Koch
>> Sent: Wednesday, September 03, 2008 2:33 PM
>> To: Mike Eggleston
>> Cc: samba@lists.samba.org
>> Subject: Re: [Samba] Unable to Join Domain
>>
>> The server is a WINS server, and I tried adding the server IP to the
>> Advanced/WINS tab and I have the same problem.
>>
>> Any other ideas?
>>
>> On Tue, 2 Sep 2008 06:14:55 -0500, Mike Eggleston <[EMAIL PROTECTED]>
>> wrote:
>>> On Mon, 01 Sep 2008, Greg Koch might have said:
>>>
>>>> I recently setup a new server with CentOS 5.2.  Everything works
>>>> great
>>> on
>>>> the server except when I try to join the domain it simply tells me:
>>>>
>>>> "The following error occurred attempting to join the domain
>>> "Domain":
>>>>
>>>> The user name could not be found.
>>>
>>> I have configured my samba box as a wins server and placed tht IP
>>> address in the wins configuration dialog on the windows box I'm
>>> joining to my samba PDC. (Start->Settings->Control Panel->Network
>>> Connections->right-click on active network connection and choose
>>> properties->double-click in TCP/IP (at the bottom)->Advanced->WINS
> tab).
>>>
>>> Mike
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Unable to Join Domain

2008-09-03 Thread Greg Koch
I had 3.0.28a but when I attempt to install from yum the most current
version it supplies is 3.0.28-1.el5_2.1.  I realize it is a different
package, but it didn't seem to solve my issue.  Any help with getting yum
to give me a more current version, or other ideas to solve this issue?

On Wed, 3 Sep 2008 16:29:16 -0500, "Hoover, Tony" <[EMAIL PROTECTED]>
wrote:
> Samba 3.0.28a (from CentOS 5.2) would not allow me to add my new domain
> controller to the domain that it was supposed to be controlling.  I
> uninstalled 3.0.28a and installed the 3.0.31 version (which was current
at
> that time).
> 
> After the upgrade, I was able to join the domain with out difficulty.
> 
> I submitted a bug-report to CentOS about this issue.
> 
> 
>  
> Tony Hoover, Network Administrator
> KSU - Salina, College of Technology and Aviation
> (785) 826-2660
> 
> "Don't Blend in..."
> 
> 
> -----Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Greg
> Koch
> Sent: Wednesday, September 03, 2008 2:33 PM
> To: Mike Eggleston
> Cc: samba@lists.samba.org
> Subject: Re: [Samba] Unable to Join Domain
> 
> The server is a WINS server, and I tried adding the server IP to the
> Advanced/WINS tab and I have the same problem.
> 
> Any other ideas?
> 
> On Tue, 2 Sep 2008 06:14:55 -0500, Mike Eggleston <[EMAIL PROTECTED]>
> wrote:
>> On Mon, 01 Sep 2008, Greg Koch might have said:
>>
>>> I recently setup a new server with CentOS 5.2.  Everything works
>>> great
>> on
>>> the server except when I try to join the domain it simply tells me:
>>>
>>> "The following error occurred attempting to join the domain
>> "Domain":
>>>
>>> The user name could not be found.
>>
>> I have configured my samba box as a wins server and placed tht IP
>> address in the wins configuration dialog on the windows box I'm
>> joining to my samba PDC. (Start->Settings->Control Panel->Network
>> Connections->right-click on active network connection and choose
>> properties->double-click in TCP/IP (at the bottom)->Advanced->WINS tab).
>>
>> Mike
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Unable to Join Domain

2008-09-03 Thread Greg Koch
The server is a WINS server, and I tried adding the server IP to the
Advanced/WINS tab and I have the same problem.

Any other ideas?

On Tue, 2 Sep 2008 06:14:55 -0500, Mike Eggleston <[EMAIL PROTECTED]> wrote:
> On Mon, 01 Sep 2008, Greg Koch might have said:
> 
>> I recently setup a new server with CentOS 5.2.  Everything works great
> on
>> the server except when I try to join the domain it simply tells me:
>>
>> "The following error occurred attempting to join the domain
> "Domain":
>>
>> The user name could not be found.
> 
> I have configured my samba box as a wins server and placed tht IP
> address in the wins configuration dialog on the windows box I'm
> joining to my samba PDC. (Start->Settings->Control Panel->Network
> Connections->right-click on active network connection and choose
> properties->double-click in TCP/IP (at the bottom)->Advanced->WINS tab).
> 
> Mike

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Unable to Join Domain

2008-09-03 Thread Greg Koch
The command can be executed manually on the command line, but then when I
attempt to join the domain I receive the error of "Access Denied" and
nothing is in the error logs then.

On Tue, 2 Sep 2008 07:45:17 +0200, Volker Lendecke
<[EMAIL PROTECTED]> wrote:
> On Mon, Sep 01, 2008 at 10:26:05PM -0600, Greg Koch wrote:
>> smbd.log
>> [2008/09/01 22:07:44, 0]
>> passdb/pdb_interface.c:pdb_default_create_user(329)
>>   _samr_create_user: Running the command `/usr/sbin/useradd -s
> /bin/false
>> -d /dev/null -g machines sy01$' gave 1
> 
> What happens if you call that command manually? Any error
> message?
> 
> Volker

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Unable to Join Domain

2008-09-01 Thread Greg Koch
No error message if I run that same command manually. If I try to join  
the domain after creating the user manually, I just get an access  
denied error on the client with no log in smbd.log.


Sent from my iPhone

On Sep 1, 2008, at 11:45 PM, Volker Lendecke  
<[EMAIL PROTECTED]> wrote:



On Mon, Sep 01, 2008 at 10:26:05PM -0600, Greg Koch wrote:

smbd.log
[2008/09/01 22:07:44, 0]
passdb/pdb_interface.c:pdb_default_create_user(329)
 _samr_create_user: Running the command `/usr/sbin/useradd -s /bin/ 
false

-d /dev/null -g machines sy01$' gave 1


What happens if you call that command manually? Any error
message?

Volker

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Unable to Join Domain

2008-09-01 Thread Greg Koch
I recently setup a new server with CentOS 5.2.  Everything works great on
the server except when I try to join the domain it simply tells me:

"The following error occurred attempting to join the domain "Domain":

The user name could not be found.

I have researched this error and attempted a number of fixes but have been
unable to resolve the issue.  I am able to connect to the server with the
user name and password that I am using to join the domain (I know that
isn't the user name its really talking about) and browse (read/write) the
network shares.  I have read the last entry in the log pertaining to the
domain join request, and it is telling me that useradd could not write to
the password file...  Anyone have an idea of what is causing this?  Below
is the error and my smb.conf.  I created the smb.conf from a guide at
http://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-samba-servers.html
and added some settings based on previous servers.


smbd.log
[2008/09/01 22:07:44, 0]
passdb/pdb_interface.c:pdb_default_create_user(329)
  _samr_create_user: Running the command `/usr/sbin/useradd -s /bin/false
-d /dev/null -g machines sy01$' gave 1


smb.conf
[global]
workgroup = NMTWeb
netbios name = devserver
time server = yes
security = user
add user script = /usr/sbin/useradd -m %u
delete user script = /usr/sbin/userdel -r %u
add group script = /usr/sbin/groupadd %g
delete group script = /usr/sbin/groupdel %g
add user to group script = /usr/sbin/usermod -G %g %u
add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null
-g machines %u
logon drive = U:
domain logons = Yes
oslevel = 35
preferred master = Yes
domain master = Yes
local master =yes
domain logons = yes
printing = cups
load printers = yes
hide unreadable = yes
map to guest = Never
hide dot files = yes
wins support = yes
server string = devserver
logon path = \\%L\%U\windowsprofile
bind interfaces only = yes

[homes]
comment = Home Directories
valid users = %S
read only = No
[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
guest ok = no
browseable = No
read only = Yes

[Public]
comment = Public Document Share
writeable = yes
path = /home/public
force directory mode = 777
force group = users
force create mode = 777
force user = root
valid users = @users
create mode = 777
directory mode = 777

[www]
Comment = Development Website Directory
writeable = yes
path = /www
force directory mode = 777
force group = users
force create mode = 777
force user = root
valid users = @users
create mode = 777
directory mode = 777

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Vanishing work group on samba 2.2.8

2008-07-28 Thread Greg Hitchcock
Hello
 
I have a small problem which I hope you can help with.
 
We are running samba 2.2.8a on a V880 using Solaris 9. Up until today there 
were, as far as we know, no problems with the service.
 
Today a change was done to add 6 additional shares to the system. This was done 
by editing the configuration file and issuing a kill -HUP to the samba service.
 
All appeared to be OK until access was attempted to the new shares - as it 
turns out the list of authorised users was incorrect but that was not the cause 
of the problem.
 
Further investigation using 'map network drive' in windows xp explorer showed 
that the work group was no longer listed. 
 
The first thought was a configuration file error so the original configuration 
file was restored and the samba service re-started. The workgroup was still not 
visible.
 
Users already connected to the samba shares seem to be working without a 
problem but no new connections seem to be possible.
 
Has anybody come across this particular situation before ? and if so what is 
the solution please?
 
I have included the samba configuration file below for information.
 
Any suggestions would be much appreciated.
 
Regards
 
Greg Hitchcock
 
# Samba config file created from copy of smb.conf.saturn
# Global parametersworkgroup = xnetbios name = xx   
 server string = %hinterfaces = 192.168.1.84/255.255.255.0
log file = /var/samba/log/log.%mmax open files = 128socket 
options = TCP_NODELAYprintcap name = /etc/printcapcomment = 
SunV880security = share
[homes]comment = home [%H]read only = Nocreate mask = 
0750
[printers]comment = All Printerspath = /tmpcreate mask 
= 0700guest ok = Yesprint ok = Yesbrowseable = No
[STIMPY$]comment = STIMPY SQL Backupspath = /home/STIMPY
read only = noguest ok = yescreate mask = 0700
[INVENSYS]comment = Invensys Job Analysis Reportpath = 
/home/invensysread only = noguest ok = yes
[Share]comment = Public Sharepath = /home/shareread 
only = noguest ok = yes
[tmp$]comment = Hidden temp sharepath = /tmpread only = 
Nocreate mask = 0666guest ok = Yes
[temp$]comment = Another hidden temp sharepath = /temp
read only = Nocreate mask = 0666guest ok = Yes
[FTP$]comment = EDI FTP root directorypath = /usr1/ftp
read only = Nocreate mask = 0666guest ok = Yes
[FTP_DEV$]comment = Development EDI FTP root directorypath = 
/usr1/ftp_devread only = Nocreate mask = 0666guest ok = 
Yes[FTP2$]comment = EDI FTP root directorypath = /usr2/ftp  
  read only = Nocreate mask = 0666guest ok = Yes
[UDT DOCS]comment = Unidata Documentationpath = 
/usr1/ud/udtdoc/udt41read only = Noguest ok = Yes
[KARDEX.IN]comment = Kardex incoming filespath = 
/usr1/ud/AN/ORB.KARDEX.INread only = Noguest ok = Yes
[KARDEX.OUT]comment = Kardex outgoing filespath = 
/usr1/ud/AN/ORB.KARDEX.OUTread only = Noguest ok = Yes
[ASTROWEB$]path = /usr1/ud/AN/INCOMINGread only = No
create mask = 0666guest ok = Yes
[ASTROWEB.OUT]path = /usr1/ud/AN/OUTGOINGread only = No
create mask = 0666guest ok = Yes
[INCOMING]path = /usr1/ud/AN/INCOMINGread only = No
guest ok = Yes
[INCOMING_ARC$]path = /usr1/ud/AN/INCOMING.ARCread only = No
guest ok = Yes
[usr1$]comment = usr1 directorypath = /usr1read only = 
Nocreate mask = 0666guest ok = Yes
[work$]comment = work directorypath = /workread only = 
Nocreate mask = 0666guest ok = Yes
## Thomas Cook input/output directories#[TC_INCOMING$]path = 
/usr1/ud/AN/TC_INCOMINGread only = Nocreate mask = 0666
guest ok = Yes
[TC_OUTGOING$]path = /usr1/ud/AN/TC_OUTGOINGread only = No  
  create mask = 0666guest ok = Yes
[TX_OUTGOING$]path = /usr1/ud/AN/TX_OUTGOINGread only = No  
  create mask = 0666guest ok = Yes
## #[LC_INCOMING$]path = /usr1/ud/AN/LCCI_INCOMINGread only = 
Nocreate mask = 0666guest ok = Yes
## Development INCOMING directory#[DEVINCOMING$]path = 
/usr1/ud/SOPDEV/INCOMINGread only = Nocreate mask = 0666
guest ok = Yes
[DEVOUTGOING$]path = /usr1/ud/SOPDEV/OUTGOINGread only = No 
   create mask = 0666guest ok = Yes
[DEV_INPUT$]path = /usr1/ud/SOPDEV/ATP_INPUTread only = No  
  create mask = 0666gues

Re: [Samba] Samba and XP

2008-06-10 Thread Greg J. Zartman, P.E.

On Tue, Jun 10, 2008 at 09:38:37PM +0200, Deon Steyn wrote:
Is it possible to run Samba on Xp Pro 


No.




You could run Samba in a *nix VM sitting on top of a XP host. 
Performance is going to suck, but it can be done.


Greg
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Roaming Profiles Load Very Slowly

2008-05-28 Thread Greg Koch
The particular login that had that error was several logins ago.  The 
current logins are not producing any errors on the server side.  Logoff 
is almost instantaneous.  I am having problems with it even with editing 
NTUSER.dat and redirecting the folders to shares.  There has been a 
suggestion that it is name server related - WINS NMBD and DNS are 
working without error.  As I said before, I can access the shares from 
any computer without any problem, its just the login that takes forever, 
and as I have it right now with the redirected files, it should only be 
reading the NTUSER.DAT file from the server, and it STILL takes forever.




Greg Koch wrote:
I have checked the samba logs, and I don't see any errors.  I have no 
problems reading files once logged in, or if I mount the shares 
through linux or macos, or even if I connect to the shares from a 
computer outside the domain.  I can resolve the computers NetBIOS name 
(power).  See some of my log below (chris is the machine, gregory is 
the username I've tested with).  I have also tried changing the 
NTUSER.dat file to set it to read files directly from the server, but 
no luck there either, it still takes a LONG time to login (see other 
subthread of this conversation: 
https://lists.samba.org/archive/samba/2008-May/140933.html)


[2008/05/28 13:26:57, 1] param/loadparm.c:set_server_role(4279)
 Server's Role (logon server) NOT ADVISED with domain-level security
[2008/05/28 13:47:30, 0] lib/util_sock.c:read_data(534)
 read_data: read failure for 4 bytes to client 192.168.0.250. Error = 
No route to host

[2008/05/28 13:59:09, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26439)

[2008/05/28 14:04:28, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:04:28, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service netlogon initially as user 
gregory (uid=500, gid=502) (pid 26473)

[2008/05/28 14:04:38, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service netlogon
[2008/05/28 14:11:32, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:11:32, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service netlogon initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:17:35, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:18:10, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:22:17, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service netlogon
[2008/05/28 14:23:20, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service netlogon initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:23:30, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service netlogon
[2008/05/28 14:28:18, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:28:18, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service netlogon initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:28:18, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:28:18, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:28:48, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:29:41, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:29:48, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service netlogon
[2008/05/28 14:29:48, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:29:48, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:32:37, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:34:02, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:34:02, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service netlogon initially as user 
gregory (uid=500, gid=

Re: [Samba] Roaming Profiles Load Very Slowly

2008-05-28 Thread Greg Koch
I have checked the samba logs, and I don't see any errors.  I have no 
problems reading files once logged in, or if I mount the shares through 
linux or macos, or even if I connect to the shares from a computer 
outside the domain.  I can resolve the computers NetBIOS name (power).  
See some of my log below (chris is the machine, gregory is the username 
I've tested with).  I have also tried changing the NTUSER.dat file to 
set it to read files directly from the server, but no luck there either, 
it still takes a LONG time to login (see other subthread of this 
conversation: https://lists.samba.org/archive/samba/2008-May/140933.html)


[2008/05/28 13:26:57, 1] param/loadparm.c:set_server_role(4279)
 Server's Role (logon server) NOT ADVISED with domain-level security
[2008/05/28 13:47:30, 0] lib/util_sock.c:read_data(534)
 read_data: read failure for 4 bytes to client 192.168.0.250. Error = 
No route to host

[2008/05/28 13:59:09, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26439)

[2008/05/28 14:04:28, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:04:28, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service netlogon initially as user 
gregory (uid=500, gid=502) (pid 26473)

[2008/05/28 14:04:38, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service netlogon
[2008/05/28 14:11:32, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:11:32, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service netlogon initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:17:35, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:18:10, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:22:17, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service netlogon
[2008/05/28 14:23:20, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service netlogon initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:23:30, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service netlogon
[2008/05/28 14:28:18, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:28:18, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service netlogon initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:28:18, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:28:18, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:28:48, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:29:41, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:29:48, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service netlogon
[2008/05/28 14:29:48, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:29:48, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:32:37, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:34:02, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service gregory
[2008/05/28 14:34:02, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service netlogon initially as user 
gregory (uid=500, gid=502) (pid 26528)

[2008/05/28 14:34:12, 1] smbd/service.c:close_cnum(1230)
 chris (192.168.0.250) closed connection to service netlogon
[2008/05/28 14:50:10, 1] smbd/service.c:make_connection_snum(1033)
 chris (192.168.0.250) connect to service gregory initially as user 
gregory (uid=500, gid=502) (pid 26748)





Greg Koch wrote:
The profiles are 1.1MB (Just the default files and a few other things 
to test with).  The server is 1000MB and the clients are 100MB.  This 
is why it has baffled me so much!


Adam Williams wrote:
how big are the profiles?  what speeds are the NICs in the server and 
client PCs operating at?





--
To unsubscribe from this list go t

Re: [Samba] Roaming Profiles Load Very Slowly

2008-05-28 Thread Greg Koch
I was considering doing this, but wanted to see if I could get them to 
work regularly.  After fighting with Windows for days, I decided to just 
do it this way, but it still takes a very LONG time (5 min) to login - I 
tested it, and it is using the samba shares for the directories (the 
files are written to the server almost instantaneously, which I think is 
the best way for the profiles to work anyway).


I updated NTUSER.DAT to use the files on the server directly, disabled 
loading the files with gpedit.msc, and disabled offline file sync.


There is obviously some sort of disconnect between the clients and the 
server.


Any ideas??


Gar Nelson wrote:
Greg, this is old, but I found it quite useful. 
http://www.css.taylor.edu/~nehresma/samba.html


We've had two problems with roaming profiles. The first is that staff 
members store all kinds of stuff in their profile. The above document, 
about halfway down, "Profile changes" helped out here greatly.


The second problem that we had was Windows XP offline file 
synchronization. You can find that in Start -> All Programs -> 
Accessories -> Synchronization.  Our systems defaulted to turning it 
on. Manually going in and turning it all off (use the "setup" button 
too, more stuff there) made a dramatic difference.


Good Luck.
Gar

Greg Koch wrote:

Hi!

Looking for a bit of help!

I have been using Linux for a while as a hobby, and can get around it 
pretty quickly.  I have created a Gentoo Samba server and set it as 
PDC with roaming profiles (there are several other services running 
on the server as well).  I can login with my XP machines and the 
profile is downloaded to the machine but it is VERY VERY VERY slow.  
After a login is started, there is a blank blue screen (~4min), then 
the dialog that says "Loading your personal settings..."(~7min), and 
another that says "Applying your personal settings..."(~6min).  The 
whole login process takes ~15 minutes with any user.  The server is 
running an AMD64 2GHz and the client is AMD Athlon 1.32GHz.  I have 
used these clients on a Windows 2003 Server with AD and roaming 
profiles before and it didn't take anywhere near this amount of time 
(usually logon was <1Min).All network drives are mapped properly 
(home and other shares through login.bat) Logoff seems to only take 
~30sec and IS storing the information to the server correctly.


I have searched and searched through Samba docs and Google, and I 
just can't find anyone that has a viable solution for me.


Does anyone have a suggestion or solution?


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [ANNOUNCE] Samba 3.2.0pre3

2008-04-25 Thread Greg Freemyer
On Fri, Apr 25, 2008 at 10:55 AM, Karolin Seeger <[EMAIL PROTECTED]> wrote:
> -BEGIN PGP SIGNED MESSAGE-
>  Hash: SHA1
>
>  Release Announcements
>  =
>
>  This is the third preview release of Samba 3.2.0.  This is *not*
>  intended for production environments and is designed for testing
>  purposes only.  Please report any defects via the Samba bug reporting
>  system at https://bugzilla.samba.org/.
>


>  Major enhancements in Samba 3.2.0 include:
>
>   File Serving:
>   o Use of IDL generated parsing layer for several DCE/RPC
> interfaces.
>   o Removal of the 1024 byte limit on pathnames and 256 byte limit on
> filename components to honor the MAX_PATH setting from the host OS.

Can someone explain that some more.  Is that a tightening or loosing
of the restriction?
Or point me do a discussion about how it was decided to do this?

=== My concern
IIRC MAX_PATH is 512 under Windows, but it is a lie that cannot be
trusted.  It is just the limit for the old API.  The new Unicode APIs
do not honor that define.  I'm concerned this may be true of other
filesystems / OSes.

In particular with Robocopy that comes with Windows 2003 Resource Kit
you can work with pathnames up to 32K I believe it is.  (See the
Robocopy release notes for details).  A lot of tools are still
restricted to 512 chars, but I am fairly confident that 512 is no
longer a fundamental limitation with newer Windows products.

Greg
-- 
Greg Freemyer
Litigation Triage Solutions Specialist
http://www.linkedin.com/in/gregfreemyer
First 99 Days Litigation White Paper -
http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf

The Norcross Group
The Intersection of Evidence & Technology
http://www.norcrossgroup.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Bad file modification date/time stamps created from windows clients

2008-04-23 Thread Greg Barry
I did post to samba bugzilla  ...   The bug ID is:  5379


Here is the smb.conf file:


; smb.conf - configuration file for smb
;

[global]
  debug level = 10
  max log size = 1000
  dead time = 15
  log file = /usr/local/samba/var/log.%I
  printing = HPUX
  print command = /usr/bin/lp -c -d%p %s; rm %s
  lpq command = /usr/bin/lpstat -p%p
  lprm command = /usr/bin/cancel -p%p
  load printers = yes
  encrypt passwords = Yes
  local master = No
  unix password sync = Yes
  passwd program = /usr/bin/passwd %u
  passwd chat = *password* %n\n *password* %n\n
  browseable = no
create mask = 755
null passwords = yes
security = user
server signing = auto
map to guest = bad user
dos filemode = yes
workgroup = MYGROUP

[public]
comment = public
browseable = yes
available = yes
path = /tmp/public
public = yes
username = wrapform
writable = yes
revalidate = true

[cdrom]
comment = orasys's cdrom
browseable = yes
available = yes
only user = no
path = /cdrom
public = yes
username = guest
writeable = no
create mask = 775
revalidate = true


[pcs-backup]
  comment = Home PCS-BACKUP Directories
  browseable = yes
  path = /dmp/pcs-backup
#  guest account = guest
  user = @devlpr
  read only = No
#  public = No
#  guest ok = No
  create mode = 0764
  writable = Yes
  write ok = Yes

[h]
  comment = Home Directories
   guest ok = yes
   available = yes
  browseable = no
  public = no
  writable = yes
  path = /h/%U
  create mode = 0750
  read only = no
  write ok = yes

[homes]
comment = wrapper User's home directories
guest ok = no
read only = no
browseable = no
available = yes

[dmscom]
  comment = Home DMSCOM Directories
  browseable = yes
  public = yes
  writable = yes
  path = /h/dmscom
  create mode = 0764
  read only = no
  write ok = yes

[oraload]
  comment = Home ORALOAD Directories
  browseable = yes
  public = yes
  writable = yes
  path = /h/oraload
  guest ok = Yes
  create mode = 0764
  read only = no
  write ok = yes

[ldaload]
  comment = Home LDALOAD Directories
  browseable = yes
  public = yes
  writable = yes
  path = /ldaload
  guest ok = Yes
  create mode = 0764
  read only = no
  write ok = yes

[rldaload]
  comment = Home LDALOAD Directories
  browseable = yes
  public = yes
  writable = no
  path = /ldaload
  guest ok = Yes
  create mode = 0700
  read only = yes
  write ok = no
  revalidate = yes

[printers]
  comment = All Printers
#  postscript = true
  printable = yes
  public = yes
  writable = no
  browseable = yes
  create mode = 0700

[IPC$]
  hosts deny = 0.0.0.0/0



I attached the smbd.log file




Greg Barry,Systems Analyst
Unix Systems Management
Lockheed Martin Information Technology
Email: [EMAIL PROTECTED] 

[2008/04/21 07:08:36, 0] smbd/server.c:main(944)
  smbd version 3.0.28a started.
  Copyright Andrew Tridgell and the Samba Team 1992-2008
[2008/04/21 07:08:36, 5] lib/debug.c:debug_dump_status(391)
  INFO: Current debug levels:
all: True/10
tdb: False/0
printdrivers: False/0
lanman: False/0
smb: False/0
rpc_parse: False/0
rpc_srv: False/0
rpc_cli: False/0
passdb: False/0
sam: False/0
auth: False/0
winbind: False/0
vfs: False/0
idmap: False/0
quota: False/0
acls: False/0
locking: False/0
msdfs: False/0
dmapi: False/0
  doing parameter max log size = 1000
  doing parameter dead time = 15
  doing parameter log file = /usr/local/samba/var/log.%I
  doing parameter printing = HPUX
  doing parameter print command = /usr/bin/lp -c -d%p %s; rm %s
  doing parameter lpq command = /usr/bin/lpstat -p%p
  doing parameter lprm command = /usr/bin/cancel -p%p
  doing parameter load printers = yes
  doing parameter encrypt passwords = Yes
  doing parameter local master = No
  doing parameter unix password sync = Yes
  doing parameter passwd program = /usr/bin/passwd %u
  doing parameter passwd chat = *password* %n\n *password* %n\n
  doing parameter browseable = no
  doing parameter create mask = 755
  doing parameter null passwords = yes
  doing parameter security = user
  doing parameter server signing = auto
  doing parameter map to guest = bad user
  doing parameter dos filemode = yes
  doing parameter workgroup = MYGROUP
[2008/04/21 07:08:36, 2] param/loadparm.c:do_section(3811)
  Processing section "[public]"
[2008/04/21 07:08:36, 8] param/loadparm.c:add_a_service(2590)
  add_a_service: Creating snum = 0 for public
[2008/04/21 07:08:36, 10] param/loadparm.c:hash_a_service(2627)
  hash_a_service: creating tdb servicehash
[2008/04/21 07:08:36, 10] param/loadparm.c:hash_a_service(2637)
  hash_a_service: hashing index 0 for service name public
  doing parameter comment = public
  doing parameter browseable = yes
  doing parameter available = yes
  doing parameter path = /tmp/public
  doing parameter public = yes
  doing parameter username = wrapform
  doing parameter writable = yes
  doing parameter revalidate =

[Samba] Bad file modification date/time stamps created from windows clients

2008-04-17 Thread Greg Barry

I'm running samba server version 3.0.28a on an HP-UX pa-risc machine
with XP-pro
windows clients.

When a windows client creates a new file on the samba share the
modification
time is not set correctly. 

On the HP-UX side date/time stamp shows as:

   % ls -l README
   -rwxr--r--   1 e6b564 users 1081 Dec 13  1901 README

  The date/time stamp is always "Dec 13  1901" ?


On the windows side from dos it shows:

   Y:\> dir README
   10/29/6250  05:35  AM  1,081 README

   This date/time stamp will vary

   In file explorer, the "Date Modified" field is blank


A snippet from running debug level 10 on the samba server shows:

[2008/04/08 10:03:45, 6] smbd/trans2.c:smb_set_file_time(4122)
  smb_set_file_time: actime: Tue Apr  8 10:03:44 2008
   smb_set_file_time: modtime: Fri Dec 13 12:45:52 1901
   smb_set_file_time: setting pending modtime to Fri Dec 13 12:45:52
1901


The compile on the server was done using gcc ver 4.0.1:

./configure --without-ldap
make
make install


Is there an smb.conf setting which might correct this?


Thanks

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] WINS and Subnets [was: Help: justification for Linux PDC vs Windows...]

2008-04-11 Thread Greg J. Zartman, P.E.
You only need 1 WINS server for your organization (or 2 for redundancy). 
We have multiple subnets here at OSU and only 2 WINS servers.  Our DHCP 
servers had out the WINS server IP addresses to all clients, and Samba 
is configured to use them as well.  You DO need a master browser on each 
subnet.


Are you pointing your clients on a given subnet to the "local master" 
for WINS queries or the primary WINS server?


I have a couple subnets, but hand out the Primary WINS ip to ALL of my 
clients.  WINS browsing across the subnets fine, but updates from the 
subnets tend to be really slow.


Greg


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Help: justification for Linux PDC vs Windows...

2008-04-11 Thread Greg J. Zartman, P.E.

Yep - which is why I think your bosses are correct.  Deploying a *new*
NT4 domain in 2008 is just nuts.  When most clients are XP or Vista and
many applications have integration with AD.  


You've been brainwashed by M$.  It is not nuts to deploy a new Samba 
server in 2008.  Samba 3.x configured with an LDAP auth backend and 
Winbind offers at least 80% of the functionality that the typical 
windows network admin and user needs.


As a file server, Samba walks all over Windows in terms of performance 
and cost.


Neither Windows XP nor Vista require AD and I've yet to see a mainstream 
application that REQUIRES it either.


If your network configuration demands that deploy AD, then let windows 
handle that function and plug Samba in where it excels.


I've been following this list since before Samba could do NT4 DC 
functionality.  One thing that is a constraint is users trying to 
implement extremely complex network configurations when they likely 
don't need them.  Much of this is rooted in the fact that M$ tends to 
throw loads of functionality options at its users and make these 
functionalities seem easy to implement by front ending them with some 
type of wizard.  Users attempt to blindly deploy things without asking 
themselves "Do I really need this."


Fact is, most of us don't have farms of domain controllers and hundreds 
and hundreds of users.  Most of us manage small to medium sized networks 
that can benefit hugely by the cost savings of deploying Samba instead 
of Windows.  I'm not talking about just costs of software licenses; but 
cost of hardware, sys admin staff, and down time.


Greg
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Multiple IP addresses

2008-04-03 Thread Greg J. Zartman, P.E.

I have been trying to connect to Samba over the Internet as I have static IP 
that is publicly available for connection.  I can use this IP to connect to our 
Intranet web site but Samba doesn't work correctly when trying to connect to it 
from outside.  Our internal network addresses work fine.  Even a VPN 
connection, which gets our internal address scheme works.  But, when trying to 
use the publicly available IP address to connect to Samba it can't find it.


There are likely a couple things preventing access:

1. Did you open the Samba ports on your firewall?  Most firewalls have 
these ports closed by default.


2. Hosts allow/Hosts deny parameter.  Is this set so that Samba will 
actually respond to the subnet that you are trying to access Samba from?


IMO, opening Samba up to the internet is an inherently bad thing to do 
and something that very rarely really needs to be done.  Instead, you 
should look at an ssh tunnel or an IPSec VPN.


I use IPsec VPN routers to connect my two offices, which are both on 
different subnets and in different Citys.  The routers I used are fairly 
inexpensive, but work wonderfully and are very easy to setup: 
http://www.netgear.com/Products/VPNandSSL/WiredVPNFirewallRouters/FVS114.aspx


Greg

---
Greg J. Zartman, P.E.
President, Principal Engineer

LEI Engineering & Surveying
2468 West 11th Avenue
Eugene, Oregon 97402
Voice 541-683-8383Fax 541-683-8144
www.leiinc.com
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Samba 3.0.25b as a domain member to a Samba PDC

2008-03-30 Thread Greg J. Zartman, P.E.

A user cannot access a Linux machine unless he is authenticated by the
machine.


Jamrock,

Many thanks for your very informative response.  The makes complete 
sense really.


Ultimately, I'm sure LDAP is the best solution and one I intend to look 
at in more detail.


A message to the Samba Howto/Docs maintainers:

This would be VERY good topic to include in Chapter 6/7 Samba Docs. 
There is very little information about this topic.


Thanks again jamrock!

Greg

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Administration Tool recommendations

2008-03-28 Thread Greg Zartman

Matt Arnilo S. Baluyos (Mailing Lists) wrote:

Hi All,

I have a project which is to build a customized Linux distribution
with a focus on deploying a Samba as Primary Domain Controller. It's
pretty much like Trixbox but instead of Asterisk and VOIP, will be
focused on Samba.

Right now, I am looking for a solution for an administrator to easily
manage the service. Of particular importance would be to easily add
workstations and set up users for Roaming Profiles.


Have you had a look at SME Server?  www.contribs.org

This distro is based on Centos (RHEL).  It is a real turnkey distro and 
installs out of the box ready to configure via a web interface.  You 
never need to even look at the commandline.  Setup of Samba as a PDC is 
just a matter of plugging in the workgroup name and checking a box sayin 
you want SME to be a PDC.


Greg

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Difference Between ver 3.2.x and ver 3.0.x

2008-03-27 Thread Greg Zartman

I want to Know the Difference between version 3.2 and 3.0.x.
I know as 3.2.x support GPLv3 But other then that is there any difference ?


http://us3.samba.org/samba/ftp/pre/WHATSNEW-3-2-0pre2.txt


When can we expect the stable release of  version 3.2 as it is in
pre-release verion ?


You good at reading tea leaves?  That is about as good an answer as you 
are going to get from this list is my guess.


Greg




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.25b as a domain member to a Samba PDC

2008-03-27 Thread Greg Zartman
I've been using Samba for about 7 years of so, but have hit a hurdle I 
just can't seem to figure out.


I want to setup samba domain member servers to be members of a samba 
3.0.25 (NT4 type) domain.  No windbind, LDAP, or any other of the more 
complex authentication mechanism. This is the same functionality going 
way back to Samba 2.2, or so.  In fact, I successfully did this on samba 
2.2, but simply can't get it to work on samba 3.  I've been hammering 
away for two days and


I'm running Centos 4.5 (RHEL 4.5) host OSs with Samba 3.0.35b-1 RH rpms. 
 Both machines are fairly high end Core 2 Duo machines with plenty of 
memory and hard drive space.


I've tried to widdle the smb.conf files to their bare essentials just 
until I get this working.



Samba Domain Client (smb.conf):

[global]
workgroup = testnet
netbios name = client
security = domain
wins server = 90.0.0.25
log level = 10
encrypt passwords = yes


Samba PDC (smb.conf):

[global]
workgroup = testnet
netbios name = nameserver
passdb backend = smbpasswd:/etc/samba/smbpasswd
security = user
os level = 35
preferred master = Yes
domain master = Yes
encrypt passwords = Yes
domain logons = yes

[Note:  IP of PDC is 90.0.0.25]

I am able to join the Samba Domain Client to the Samba domain, Testnet, 
and can see that the machine account was successfully created on the PDC.


When I attempt to access a share on the Domain Client from the PDC using 
a domain user, here is what I get:


[EMAIL PROTECTED] samba]# smbclient //client/public -U greg
Password:
session setup failed: NT_STATUS_LOGON_FAILURE

Running the log level up to 10, it appears that the domain client is 
being authenticated by the PDC as a domain member:


[2008/03/27 17:35:35, 10] libsmb/credentials.c:creds_client_check(327)
  creds_client_check: credentials check OK.
[2008/03/27 17:35:35, 5] 
rpc_client/cli_netlogon.c:rpccli_netlogon_setup_creds(346)
  rpccli_netlogon_setup_creds: server NAMESERVER credential chain 
established.


However, the Domain Client (Client) can't seem to authenticate the 
domain user (greg) from the PDC.  I know this user account is a valid 
Samba account as I can's run smbclient activities on the PDC itself 
using this account.  Following is the portion of the log level 10 output 
where the Domain Client seems to be looking for domain user on the PDC, 
but can't find it:


[2008/03/27 17:35:35, 5] lib/username.c:Get_Pwnam_alloc(131)
 Finding user TESTNET\greg
[2008/03/27 17:35:35, 5] lib/username.c:Get_Pwnam_internals(75)
  Trying _Get_Pwnam(), username as lowercase is testnet\greg
[2008/03/27 17:35:35, 5] lib/username.c:Get_Pwnam_internals(83)
  Trying _Get_Pwnam(), username as given is TESTNET\greg
[2008/03/27 17:35:35, 5] lib/username.c:Get_Pwnam_internals(93)
  Trying _Get_Pwnam(), username as uppercase is TESTNET\GREG
[2008/03/27 17:35:35, 5] lib/username.c:Get_Pwnam_internals(102)
  Checking combinations of 0 uppercase letters in testnet\greg
[2008/03/27 17:35:35, 5] lib/username.c:Get_Pwnam_internals(108)
  Get_Pwnam_internals didn't find user [TESTNET\greg]!


The only thing that works for me is to create the domain user account on 
the domain client that mirrors what is on the PDC, which is basically 
USER level authentication.


Any suggestions would be GREATLY appreciated.

Thank you.

Greg
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba vs ActiveDirectory Kerberos error message

2008-02-26 Thread Greg Hanks
RE:

The message above comes at every request from the Linux machine (every 5

minutes on this installation). If I am validating a user, the same

message is shown for the user like this (user name validated=test):

 

Pre-authentication failed:

  User Name:test$

  User ID:  KK\test$

  Service Name:   krbtgt/KK.LOCAL

  Pre-Authentication Type:  0x0

  Failure Code:   0x19

  Client Address: 1.2.3.4

 

Messages logged on behalf of a user may be disabled by deactivating

pre-authentification for each user. But I cannot find any place in

ActiveDirectory to disable it for the machine account.

 

What is missing ?

 

Is it possible to deactivate pre-authentification on the Linux (or

Windows) side to avoid these messages ?

 

The Solution is to use the Active Directory tool "Users and Computers"
Select "Computers" and open the SAMBA computer entry. Select Properties
| Delegation and "Trust this computer for delegation to any service [or
get granuloar and trust it to specific services only..] (Default is "Do
not trust this computer for delegation)

 

Greg Hanks



+001 (860) 349-4440

Fax  (860) 349-4442

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Standalone Server with Wins -- Password Not Required onWin/XP

2008-01-16 Thread Greg Sims
All,

This incorrect behavior is caused as a result of "preferred master = yes" in
the smb.conf file.  If I comment this line out in smb.conf, everything works
fine.  My thanks to Chris Smith for the offline help getting this resolved!

Thanks! Greg

-Original Message-
From: Chris Smith [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, January 16, 2008 12:50 PM
To: Greg Sims
Subject: Re: [Samba] Standalone Server with Wins -- Password Not Required
onWin/XP

On Wednesday 16 January 2008, you wrote:
> This is an offline email with respect to this issue.  What makes you
> believe that I have created a domain controller -- this was clearly
> not my intent. Would it be possible to discuss this by telephone for
> 5 minutes?

I saw the domain master line, but I guess you need domain logons enabled 
as well to make it a PDC. Sorry, my mistake.

-- 
Chris Smith
The Computer Guy
586-435-3135
http://www.realcomputerguy.com/

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


FW: [Samba] Standalone Server with Wins -- Password Not Required onWin/XP

2008-01-16 Thread Greg Sims
I wish this was the case Chris. Win/XP presents a login box that requests
userid and password.  Here are a couple of the cases I have tried:

(1) If I enter userid Only, I gain full access to the share without Ever
entering a password

(2) If I enter userid and samba password, the combination is rejected and
the share is not visible

This is not consistent with "the user authenticates with the server" as the
user Can't Even Enter the password.  See what I mean?

Thanks!  Greg

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chris
Smith
Sent: Wednesday, January 16, 2008 7:20 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Standalone Server with Wins -- Password Not Required
onWin/XP

On Wednesday 16 January 2008, Greg Sims wrote:
> The first access to the samba server requests a userid -- this likely
> allows samba to understand which home share should be displayed.

It's more than that - the user authenticates with the server and is now 
allowed access to all shares the user has proper permissions for.

-- 
Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Standalone Server with Wins -- Password Not Required on Win/XP

2008-01-16 Thread Greg Sims
Hi All,

 

We posted the following over the weekend and have not received any feedback
to help us move forward.  There seems to be much more activity during the
week so I thought I would re-post the original email.  Perhaps we're seeing
a defect in this level of the code - if this is the case, what action should
we take next.  Thanks!

 

I created a standalone server on CentOS 5.1 with samba at 25b on an x86_64
system. The shares defined below are available to the windows xp clients on
the 10.43.10.x/24 subnet.  Samba also provides win server support to this
subnet.

 

We are having problems with password protection associated with the shares.
The first access to the samba server requests a userid -- this likely allows
samba to understand which home share should be displayed.  At this point,
the client can access both the 'homes' share and the 'orr' share without
ever entering a password -- this is a security issue for us.

 

We need to figure out how to configure samba to enforce userid & password
protection prior to allowing access to a share. Below is a copy of the
smb.conf file that we are using for testing.

 

  [global]

 

 # workgroup and server identification

 workgroup = ORRRANCH

 server string =

 netbios name = ORR00

 

 interfaces = 10.43.10.0/24 lo

 bind interfaces only = yes

 hosts allow = 10.43.10. 127.0.0.

 

 # logs split per machine; max 50KB per log file, then rotate

 log file = /var/log/samba/%m.log

 max log size = 50

 

 # default user security, encrypted passwords and tdbsam

 security = user

 encrypt passwords = yes

 passdb backend = tdbsam

 

 # allow samba to be the domain master browser if possible

 local master = yes

 os level = 33

 preferred master = yes

 domain master = yes

 

 # samba is a wins server for the system; use wins first

 wins support =yes

 name resolve order = wins hosts bcast

 

  [homes]

 comment = Home Directories

 browseable = no

 writable = yes

 valid users = %S

 path = /samba/home/%S

 

  [orr]

 comment = Orr Ranch Share

 path = /samba/orr

 valid users = greg catherine sarah brandon

 guest ok = no

 writable = yes

 printable = no

 create mask = 0765

 

 

Each of the 'valid users' have ids on the system and have used smbpasswd to
create samba passwords. Nsswitch.conf has been modified to add 'wins' to the
'hosts' line to assist with names resolution.

 

Any assistance would be appreciated!!  Thanks, Greg

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Reproducible samba bug with directory name

2008-01-15 Thread Greg Freemyer
On Jan 15, 2008 12:46 PM, simo <[EMAIL PROTECTED]> wrote:
>
> On Tue, 2008-01-15 at 12:34 -0500, Greg Freemyer wrote:
> > Simo,
> >
> > I just tried to create a directory name ending with a dot from XP.
> > You're correct, it silently truncates the dot.
> >
> > And I tried creating a simple test directory "asdf." from Linux on my
> > filesystem, and only the mangled name is showing up from XP.
> >
> > Still seems like a bug to me especially since a cifs client shows the
> > correct name, but if this is "works as expected", I'll just be quiet
> > about it.
>
> Greg, we simply can't return a name that ends with a ".", Windows
> clients can't cope with that. As you are working on a unix machine you
> can do that but samba has to change that before returning it to Windows
> clients. Just dropping the dot is not possible it would be way too easy
> to have conflicts. Mangling is the only option.
>
> Of course the best thing is for you to make up a policy of not creating
> windows-incompatible file names at all.
>
> CIFS works probably just because you are using the unix extensions.
> If you disable them you will probably see the same mangled name from
> CIFS as well.
>
> Simo.

I'll implement a work-around for my situation, but I suggest a Samba
enhancement would be to change the behavior to be more obvious of
what's going on.

Maybe:

Linux name:   .
Windows Short Name: 
Windows Long Name:
Illegal-Directory-Name-Encountered-Access-via-mangled-short-name-

Greg
-- 
Greg Freemyer
Litigation Triage Solutions Specialist
http://www.linkedin.com/in/gregfreemyer
First 99 Days Litigation White Paper -
http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf

The Norcross Group
The Intersection of Evidence & Technology
http://www.norcrossgroup.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Reproducible samba bug with directory name

2008-01-15 Thread Greg Freemyer
Simo,

I just tried to create a directory name ending with a dot from XP.
You're correct, it silently truncates the dot.

And I tried creating a simple test directory "asdf." from Linux on my
filesystem, and only the mangled name is showing up from XP.

Still seems like a bug to me especially since a cifs client shows the
correct name, but if this is "works as expected", I'll just be quiet
about it.

Greg

On Jan 15, 2008 11:51 AM, simo <[EMAIL PROTECTED]> wrote:
> Not a samba bug really, what you see is a "mangled name".
> That happens because you put a "." as the last character which is not
> allowed in windows IIRC.
>
> Simo.
>
>
> On Tue, 2008-01-15 at 11:28 -0500, Greg Freemyer wrote:
> > I just recreated this bug in samba-3.0.26a-3.3.
> >
> > It is as simple as creating a directory named "F-08-6104 International
> > Management Assoc." (without the quotes), then looking at the name of
> > the directory via XP.
> >
> > I've done it twice now:
> > OpenSUSE 10.2 + Samba 3.0.23d-19.7 + XFS, all from Novell
> > OpenSUSE 10.3 + samba-3.0.26a-3.3 + XFS, all from Novell
> >
> > With both I get the same wrong name "FMIJ1P~A".
> >
> > I don't have any other environments to test, maybe someone could try
> > other filesystems / OSes / Samba versions.
> >
> > Thanks
> > Greg
> >
> > On Jan 14, 2008 5:50 PM, Greg Freemyer <[EMAIL PROTECTED]> wrote:
> > > All,
> > >
> > > I have a stable fileserver that had a burp this morning.  (OpenSUSE
> > > 10.2 + Samba 3.0.23d-19.7 + XFS, all from Novell)
> > >
> > > A directory was created via a Rails App.  (like always on this machine).
> > >
> > > Normally a traditional long filename and mangled short name are
> > > created.  All is good even though I don't use short names for
> > > anything.
> > >
> > > Today, the longname somehow is reflecting what I assume is the mangled
> > > short name?  Very strange.
> > >
> > > From Linux Local, I see the long name I expect.
> > >
> > > From a OpenSUSE 10.3 cifs client, I see the long name I expect.
> > >
> > > From XP and possibly some other Windows OSes, I see just the mangled
> > > short name?
> > >
> > > Ie.  "dir /X" only has one name and its the mangled short name in the
> > > long name column.
> > >
> > > I have not yet tried to remedy this.  I'm guessing from a Windows
> > > client, I could do a rename to a random name, then rename back to what
> > > XFS has named it and all will be good.
> > >
> > > I can do that at any time, but if there is any diagnostic value in
> > > analyzing this, I'll hold off.
> > >
> > > Thanks
> > > Greg
> > > --
> > > Greg Freemyer
> > > Litigation Triage Solutions Specialist
> > > http://www.linkedin.com/in/gregfreemyer
> > > First 99 Days Litigation White Paper -
> > > http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf
> > >
> > > The Norcross Group
> > > The Intersection of Evidence & Technology
> > > http://www.norcrossgroup.com
> > >
> >
> >
> >
> > --
> > Greg Freemyer
> > Litigation Triage Solutions Specialist
> > http://www.linkedin.com/in/gregfreemyer
> > First 99 Days Litigation White Paper -
> > http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf
> >
> > The Norcross Group
> > The Intersection of Evidence & Technology
> > http://www.norcrossgroup.com
> --
> Simo Sorce
> Samba Team GPL Compliance Officer <[EMAIL PROTECTED]>
> Senior Software Engineer at Red Hat Inc. <[EMAIL PROTECTED]>
>
>



-- 
Greg Freemyer
Litigation Triage Solutions Specialist
http://www.linkedin.com/in/gregfreemyer
First 99 Days Litigation White Paper -
http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf

The Norcross Group
The Intersection of Evidence & Technology
http://www.norcrossgroup.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Reproducible samba bug with directory name

2008-01-15 Thread Greg Freemyer
I just recreated this bug in samba-3.0.26a-3.3.

It is as simple as creating a directory named "F-08-6104 International
Management Assoc." (without the quotes), then looking at the name of
the directory via XP.

I've done it twice now:
OpenSUSE 10.2 + Samba 3.0.23d-19.7 + XFS, all from Novell
OpenSUSE 10.3 + samba-3.0.26a-3.3 + XFS, all from Novell

With both I get the same wrong name "FMIJ1P~A".

I don't have any other environments to test, maybe someone could try
other filesystems / OSes / Samba versions.

Thanks
Greg

On Jan 14, 2008 5:50 PM, Greg Freemyer <[EMAIL PROTECTED]> wrote:
> All,
>
> I have a stable fileserver that had a burp this morning.  (OpenSUSE
> 10.2 + Samba 3.0.23d-19.7 + XFS, all from Novell)
>
> A directory was created via a Rails App.  (like always on this machine).
>
> Normally a traditional long filename and mangled short name are
> created.  All is good even though I don't use short names for
> anything.
>
> Today, the longname somehow is reflecting what I assume is the mangled
> short name?  Very strange.
>
> From Linux Local, I see the long name I expect.
>
> From a OpenSUSE 10.3 cifs client, I see the long name I expect.
>
> From XP and possibly some other Windows OSes, I see just the mangled
> short name?
>
> Ie.  "dir /X" only has one name and its the mangled short name in the
> long name column.
>
> I have not yet tried to remedy this.  I'm guessing from a Windows
> client, I could do a rename to a random name, then rename back to what
> XFS has named it and all will be good.
>
> I can do that at any time, but if there is any diagnostic value in
> analyzing this, I'll hold off.
>
> Thanks
> Greg
> --
> Greg Freemyer
> Litigation Triage Solutions Specialist
> http://www.linkedin.com/in/gregfreemyer
> First 99 Days Litigation White Paper -
> http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf
>
> The Norcross Group
> The Intersection of Evidence & Technology
> http://www.norcrossgroup.com
>



-- 
Greg Freemyer
Litigation Triage Solutions Specialist
http://www.linkedin.com/in/gregfreemyer
First 99 Days Litigation White Paper -
http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf

The Norcross Group
The Intersection of Evidence & Technology
http://www.norcrossgroup.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] One time samba short name issue

2008-01-14 Thread Greg Freemyer
All,

I have a stable fileserver that had a burp this morning.  (OpenSUSE
10.2 + Samba 3.0.23d-19.7 + XFS, all from Novell)

A directory was created via a Rails App.  (like always on this machine).

Normally a traditional long filename and mangled short name are
created.  All is good even though I don't use short names for
anything.

Today, the longname somehow is reflecting what I assume is the mangled
short name?  Very strange.

>From Linux Local, I see the long name I expect.

>From a OpenSUSE 10.3 cifs client, I see the long name I expect.

>From XP and possibly some other Windows OSes, I see just the mangled
short name?

Ie.  "dir /X" only has one name and its the mangled short name in the
long name column.

I have not yet tried to remedy this.  I'm guessing from a Windows
client, I could do a rename to a random name, then rename back to what
XFS has named it and all will be good.

I can do that at any time, but if there is any diagnostic value in
analyzing this, I'll hold off.

Thanks
Greg
-- 
Greg Freemyer
Litigation Triage Solutions Specialist
http://www.linkedin.com/in/gregfreemyer
First 99 Days Litigation White Paper -
http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf

The Norcross Group
The Intersection of Evidence & Technology
http://www.norcrossgroup.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Standalone Server with Wins -- Password Not RequiredonWin/XP

2008-01-13 Thread Greg Sims

The results are exactly the same if I use IP Address or Hostname.

-- Original Message --

Try access your linux samba box by IP from windows (\\1.2.3.4) instead of by
name (\\servername).  Same result? 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Standalone Server with Wins -- Password Not Required onWin/XP

2008-01-13 Thread Greg Sims
I tried adding "guest ok = no" in the [homes] section below and got the same
results. 

On first access from a WinXP Client, the system requests a userid and
password.  If you provide a userid and password, the system will Not allow
you to view the shares.  The only way (that I've found) to get passed this
is to provide the userid Only -- this allows access to a window that
contains the shares. Clicking on one of the share icons provides access to
the shares without ever entering a password.  This is the security issue we
need help fixing.

I'm looking forward to some feedback on this.  Thanks!  Greg

-Original Message-

Hi There,

I created a standalone server on CentOS 5.1 with samba at 25b on an x86_64
system. The shares defined below are available to the windows xp clients on
the 10.43.10.x/24 subnet.  Samba also provides win server support to this
subnet.

We are having problems with password protection associated with the shares.
The first access to the samba server requests a userid -- this likely allows
samba to understand which home share should be displayed.  At this point,
the client can access both the 'homes' share and the 'orr' share without
ever entering a password -- this is a security issue for us.

We need to figure out how to configure samba to enforce userid & password
protection prior to allowing access to a share. Below is a copy of the
smb.conf file that we are using for testing.

  [global]

# workgroup and server identification
workgroup = ORRRANCH
server string =
netbios name = ORR00

interfaces = 10.43.10.0/24 lo
bind interfaces only = yes
hosts allow = 10.43.10. 127.0.0.

# logs split per machine; max 50KB per log file, then rotate
log file = /var/log/samba/%m.log
max log size = 50

# default user security, encrypted passwords and tdbsam
security = user 
encrypt passwords = yes
passdb backend = tdbsam

# allow samba to be the domain master browser if possible
local master = yes
os level = 33
preferred master = yes
domain master = yes

# samba is a wins server for the system; use wins first
wins support =yes
name resolve order = wins hosts bcast

  [homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
path = /samba/home/%S

  [orr]
comment = Orr Ranch Share
path = /samba/orr
valid users = greg catherine sarah brandon
guest ok = no
writable = yes
printable = no
create mask = 0765


Each of the 'valid users' have ids on the system and have used smbpasswd to
create samba passwords. Nsswitch.conf has been modified to add 'wins' to the
'hosts' line to assist with names resolution.

Any assistance would be appreciated!!  Thanks, Greg

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Standalone Server with Wins -- Password Not Required on Win/XP

2008-01-12 Thread Greg Sims
Hi There,

I created a standalone server on CentOS 5.1 with samba at 25b on an x86_64
system. The shares defined below are available to the windows xp clients on
the 10.43.10.x/24 subnet.  Samba also provides win server support to this
subnet.

We are having problems we password protection associated with the shares.
The first access to the samba server requests a userid -- this likely allows
samba to understand which home share should be displayed.  At this point,
the client can access both the 'homes' share and the 'orr' share without
ever entering a password -- this is a security issue for us.

We need to figure out how to configure samba to enforce userid & password
protection prior to allowing access to a share. Below is a copy of the
smb.conf file that we are using for testing.

  [global]

# workgroup and server identification
workgroup = ORRRANCH
server string =
netbios name = ORR00

interfaces = 10.43.10.0/24 lo
bind interfaces only = yes
hosts allow = 10.43.10. 127.0.0.

# logs split per machine; max 50KB per log file, then rotate
log file = /var/log/samba/%m.log
max log size = 50

# default user security, encrypted passwords and tdbsam
security = user 
encrypt passwords = yes
passdb backend = tdbsam

# allow samba to be the domain master browser if possible
local master = yes
os level = 33
preferred master = yes
domain master = yes

# samba is a wins server for the system; use wins first
wins support =yes
name resolve order = wins hosts bcast

  [homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
path = /samba/home/%S

  [orr]
comment = Orr Ranch Share
path = /samba/orr
    valid users = greg catherine sarah brandon
guest ok = no
writable = yes
printable = no
create mask = 0765


Each of the 'valid users' have ids on the system and have used smbpasswd to
create samba passwords. Nsswitch.conf has been modified to add 'wins' to the
'hosts' line to assist with names resolution.

Any assistance would be appreciated!!  Thanks, Greg

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba locking with NFS backend.

2008-01-07 Thread Greg Byshenk
On Mon, Jan 07, 2008 at 10:38:30PM +0100, Jan Hugo Prins wrote:
 
> I'm in a bit of a loss at the moment.
> We have the following situation, we are running Samba for a lot of small 
> companies that need fileservices for there Windows Terminal Servers that 
> they use through a thin client on a Fiber / Lan extention to our datacentre.
> We have this samba running on 2 linux hosts (Fedora Core 5 and Fedora 7) 
> with a ldap backend for all the domains.
> This works ok, except for 1 thing.
> In the past we synced server1 to server2 every hour and when there was a 
> problems with a server, the users would only loose 1 hour of work at 
> most and server 2 would take over all configurations. So far so good, 
> when there are not too much customers.
> But we have had some growth recently and we added a central NFS server 
> to our setup. This server (Isilon IQ9000) is fully redundant so in 
> theory we could put any number of Samba frontend servers in front of it, 
> and we don't have to sync anymore.
> But now the problem, when we put the user data on the NFS backend, users 
> are complaining that they are not able to edit documents in Word because 
> they get a error that they can only open the file readonly. Excell the 
> same problem. But copying a file for example works ok. In general you 
> can divide the applications in 2 groups, 1 only readonly access to the 
> data, and 1 no problem.

[...]
 
> Is this a known issue with a sollution, or have I fould a problem here 
> without a current sollution?

I'm no Samba or Linux kernel expert, but in my experience, re-exporting
is almost always a bad idea.

I could be mistaken, but it strikes me that the best solution, if you have
something like the Isilon system, would be to use the Isilon's own CIFS
capabilities. What is the gain from exporting from the Isilon via NFS and
then trying to re-export using a separate Samba server?


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] HTTP authentication

2007-12-31 Thread Greg Byshenk
On Mon, Dec 31, 2007 at 11:02:05PM +0200, Tero M?ntyvaara wrote:
 
> Is it possible to authenticate at WWW page/site by Samba server?

Assuming you mean using a Samba DC as an authentication backend for
Apache... (and with the caveat that I've never used these modules), then
I think the answer is problably "yes".

Check out mod_ntlm <http://modntlm.sourceforge.net/> or auth_ldap
<http://www.rudedog.org/auth_ldap/> (and there may be other options, as
well).

-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] print command is ignored after upgrade

2007-12-27 Thread Greg Saunders
I use to have a working custom "print command =" in my smb.conf until an
upgrade to 3.0.28.

OS: Suse 10.2
Samba: 3.0.28
Cups: 1.2.7

relevant smb.conf snippet

[global]
lpq command = lpstat -o%p
ldap ssl = no
name resolve order = host lmhosts bcast
idmap gid = 15000-2
include = /etc/samba/dhcp.conf
logon drive = P:
map to guest = Bad User
public = yes
winbind use default domain = Yes
realm = CANWEST.IBIGROUP.COM
lprm command = cancel %p-%j
printer admin = CANWEST\mvanderleest, mvanderleest, admin,
administrator, root
logon home = \\%L\%U\.9xprofile
cups options = raw
lpresume command = lp -i %p-%j -H resume
print command = /usr/local/bin/printaccountserver.py '%f' '%p' '%m'
'%I' '%U' '%u' '%s' '%J' '%z' '%a' &
printing = sysv
server string = SCA040002PS01
password server = 10.120.80.4
idmap uid = 15000-2
queuepause command = disable %p
workgroup = CANWEST
logon path = \\%L\profiles\.msprofile
os level = 65
queueresume command = enable %p
lppause command = lp -i %p-%j -H hold
printcap name = cups
security = ADS
usershare allow guests = Yes
winbind enum users = yes
winbind enum groups = yes

[printers]
comment = All Printers
path = /var/tmp
create mask = 0600
printable = Yes
browseable = No
#browseable = Yes
guest ok = Yes

[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = CANWEST\mvanderleest, mvanderleest, admin,
administrator, @ntadmin, root
force group = ntadmin
create mask = 0664
directory mask = 0775

now testparm reveals:

SCA040002PS01:~ # testparm
Load smb config files from /etc/samba/smb.conf
Can't find include file /etc/samba/dhcp.conf
WARNING: The "printer admin" option is deprecated
Processing section "[profiles]"
Processing section "[users]"
Processing section "[groups]"
Processing section "[printers]"
Processing section "[print$]"
Processing section "[printclient]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

[global]
workgroup = CANWEST
realm = CANWEST.IBIGROUP.COM
server string = SCA040002PS01
security = ADS
map to guest = Bad User
password server = 10.120.80.4
name resolve order = host lmhosts bcast
printcap name = cups
logon path = \\%L\profiles\.msprofile
logon drive = P:
logon home = \\%L\%U\.9xprofile
os level = 65
ldap ssl = no
usershare allow guests = Yes
idmap uid = 15000-2
idmap gid = 15000-2
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
printer admin = CANWEST\mvanderleest, mvanderleest, admin,
administrator, root
guest ok = Yes
printing = sysv
cups options = raw
print command = lp -c -d%p %s; rm %s
lpq command = lpstat -o%p
lprm command = cancel %p-%j
lppause command = lp -i %p-%j -H hold
lpresume command = lp -i %p-%j -H resume
queuepause command = disable %p
queueresume command = enable %p
include = /etc/samba/dhcp.conf

Restared samba, the works and still can't figure out why "print command = lp
-c -d%p %s; rm %s" is showing up as my print command instead of the one
specified in the smb.conf file.

Any help would be appreciated.

Thanks!
Greg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with ACL and Samba

2007-12-19 Thread Greg Byshenk
On Wed, Dec 19, 2007 at 08:57:41AM -0200, Felipe Tocchetto wrote:
 
> I put the defaults acls in my previous email, take a look:
> 
> [EMAIL PROTECTED] /home/smb/adm]# getfacl -d teste
> #file:teste
> #owner:1002
> #group:1006
> user::rwx
> group::rwx
> group:suporte:rwx
> group:administ:rwx
> mask::rwx
> other::---
 
> The default acls have the entries:
 
> group:suporte:rwx
> group:administ:rwx

Sorry, my mistake (they were there, but I misread).

 
> But after I edit the file, one of these disapear.
 
> I read something about a samba bug:
> https://bugzilla.samba.org/show_bug.cgi?id=2346
> 
> But it has been fixed a long time ago.
 
> Any tips?

Not certain. Are there any masks set in your smb.conf?  If you create
a new file within Excel, what are the permissions on it?

I've just tested this myself, and cannot recreate the problem.  I can
copy in an Excel file, edit it (WinXP SP2), and save it, and I get the
correct ACLs on the server. Server is very slightly different than 
yours, but not much:

   FreeBSD 6.3-PRERELEASE (Nov 12 2007)
   samba-3.0.26a_1,1

Also, you could try turning up the log level and then looking for 
errors.

-greg

 
> On Dec 19, 2007 8:50 AM, Greg Byshenk <[EMAIL PROTECTED]> wrote:
> 
> > On Tue, Dec 18, 2007 at 10:15:42PM -0200, Felipe Tocchetto wrote:
> >
> > > I am facing a strange problem that I could not solve, so, maybe you can
> > help
> > > me.
> > >
> > > Look at this situation:
> > >
> > > I created a new directory with those ACLs (through Samba using Windows
> > XP)
> > >
> > > [EMAIL PROTECTED] /home/smb/adm]# getfacl teste
> > > #file:teste
> > > #owner:1002
> > > #group:1006
> > > user::rwx
> > > group::rwx
> > > group:suporte:rwx
> > > group:administ:rwx
> > > mask::rwx
> > > other::---
> > >
> > > [EMAIL PROTECTED] /home/smb/adm]# getfacl -d teste
> > > #file:teste
> > > #owner:1002
> > > #group:1006
> > > user::rwx
> > > group::rwx
> > > group:suporte:rwx
> > > group:administ:rwx
> > > mask::rwx
> > > other::---
> > >
> > > My ACLs are right, ok, now I will copy a XLS file to that folder:
> > >
> > > [EMAIL PROTECTED] /home/smb/adm]# getfacl teste/excel-test.xls
> > > #file:teste/excel-test.xls
> > > #owner:1002
> > > #group:1006
> > > user::rwx
> > > group::rw-
> > > group:suporte:rwx
> > > group:administ:rwx
> > > mask::rwx
> > > other::---
> > >
> > > OK, the samba server inhert the permissions and the ACLs, everything is
> > fine
> > > until now.
> > >
> > > But when I edit this file with MS Excel, and save it, look what happen
> > to
> > > the ACLs:
> > >
> > > [EMAIL PROTECTED] /home/smb/adm]# getfacl teste/excel-test.xls
> > > #file:teste/excel-test.xls
> > > #owner:1002
> > > #group:1006
> > > user::rwx
> > > group::---
> > > group:suporte:rwx
> > > mask::rwx
> > > other::---
> > >
> > > The ACL entry "group:administ:rwx" just have gone after I save the file.
> > >
> > > It happens with Windows XP, Vista, Office 2003 and 2007. My samba
> > version is
> > > Samba version 3.0.26a, my SO is FreeBSD 6.2. I installed samba through
> > > Ports.
> > >
> > > Anybody knows what is wrong?
> >
> >
> > I'm not sure if it is the cause, but what are your default ACLs for the
> > directory in question?
> >
> > When you copy in a file from Windows, I think that it will preserve its
> > permissions, but if you edit and save, you are actually creating a new
> > file, which will be created based on the defaults for that location/user.
> >
> > Check the output of 'gefacl -d teste'.

-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with ACL and Samba

2007-12-19 Thread Greg Byshenk
On Tue, Dec 18, 2007 at 10:15:42PM -0200, Felipe Tocchetto wrote:
 
> I am facing a strange problem that I could not solve, so, maybe you can help
> me.
> 
> Look at this situation:
> 
> I created a new directory with those ACLs (through Samba using Windows XP)
> 
> [EMAIL PROTECTED] /home/smb/adm]# getfacl teste
> #file:teste
> #owner:1002
> #group:1006
> user::rwx
> group::rwx
> group:suporte:rwx
> group:administ:rwx
> mask::rwx
> other::---
> 
> [EMAIL PROTECTED] /home/smb/adm]# getfacl -d teste
> #file:teste
> #owner:1002
> #group:1006
> user::rwx
> group::rwx
> group:suporte:rwx
> group:administ:rwx
> mask::rwx
> other::---
> 
> My ACLs are right, ok, now I will copy a XLS file to that folder:
> 
> [EMAIL PROTECTED] /home/smb/adm]# getfacl teste/excel-test.xls
> #file:teste/excel-test.xls
> #owner:1002
> #group:1006
> user::rwx
> group::rw-
> group:suporte:rwx
> group:administ:rwx
> mask::rwx
> other::---
> 
> OK, the samba server inhert the permissions and the ACLs, everything is fine
> until now.
> 
> But when I edit this file with MS Excel, and save it, look what happen to
> the ACLs:
> 
> [EMAIL PROTECTED] /home/smb/adm]# getfacl teste/excel-test.xls
> #file:teste/excel-test.xls
> #owner:1002
> #group:1006
> user::rwx
> group::---
> group:suporte:rwx
> mask::rwx
> other::---
> 
> The ACL entry "group:administ:rwx" just have gone after I save the file.
> 
> It happens with Windows XP, Vista, Office 2003 and 2007. My samba version is
> Samba version 3.0.26a, my SO is FreeBSD 6.2. I installed samba through
> Ports.
> 
> Anybody knows what is wrong?


I'm not sure if it is the cause, but what are your default ACLs for the 
directory in question?

When you copy in a file from Windows, I think that it will preserve its
permissions, but if you edit and save, you are actually creating a new
file, which will be created based on the defaults for that location/user.

Check the output of 'gefacl -d teste'.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] RE: configure: error: C compiler cannot create executables

2007-11-16 Thread Greg Byshenk
On Thu, Nov 15, 2007 at 01:00:19PM -0800, Morimoto, Mark K wrote:

> > I get this when I run ./configure.  I have searched for other problems
> > and others who had the problem say its due to cc not being installed.
> > Well its not but I have gcc. 
> > 
> > So I saw where someone put define CC=gcc and then ran the ./configure
> > command.  I tried it but still the same error.
> > 
> > So what is the solution?  Should I install C?  I am running this on a
> > solaris 9 on x86.

What does the 'config.log' say?  Does it indicate exactly what it is
trying to do or which compiler it is trying to use?

I've seen this error ("C compiler cannot create executables") when 
someone has attempted to use the Intel compilers when they don't have
a license for them. I think that you might also see it if you are
missing some libraries.

But the log should provide at least some hints.



> > # ./configure 
> > SAMBA VERSION: 3.0.26a 
> > LIBREPLACE_LOCATION_CHECKS: START 
> > checking build system type... i386-pc-solaris2.10 
> > checking host system type... i386-pc-solaris2.10 
> > checking target system type... i386-pc-solaris2.10 
> > LIBREPLACE_LOCATION_CHECKS: END 
> > LIBREPLACE_CC_CHECKS: START 
> > checking for gcc... gcc 
> > checking for C compiler default output file name... 
> > configure: error: C compiler cannot create executables 
> > See `config.log' for more details. 
> > # echo $PATH 
> > /bin:/usr/bin:/usr/ucb:/etc:/usr/atria/bin:/usr/dt/bin:/usr/sbin:/usr/
> > openwin/bin:/opt/gcc/bin 
> instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Mail loops... [was Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?]

2007-10-16 Thread Greg Byshenk
My apologies for this continuing flood of messages, but they are not coming
from me.  Rather, as indicated in the mail headers (included below) it appears
that they are coming from a news-to-mail gateway at UseNetServer.com (a group
with which I have no connection).

I have sent a message to UseNetServer.com, but so far have recieved only a
meaningless response from a "support" person who appears not even to have
_read_ the messag.

If anyone has any contacts with UseNetServer.com and would care to contact them
regarding this matter, I would have no complaints.

Again, my apologgies, but despite these messages coming "From:" me, I do not
see anything more I can do to stop them.

-greg byshenk


#

>From [EMAIL PROTECTED] Tue Oct 16 11:47:25 2007
Return-Path: <[EMAIL PROTECTED]>
Received: from lists.samba.org (mail.samba.org [66.70.73.150])
by core.byshenk.net (8.14.1/8.14.1) with ESMTP id l9G9lHsF046518
for <[EMAIL PROTECTED]>; Tue, 16 Oct 2007 11:47:18 +0200 (CEST)
(envelope-from [EMAIL PROTECTED])
Received: from dp.samba.org (localhost [127.0.0.1])
by lists.samba.org (Postfix) with ESMTP id 45A27162AE7
for <[EMAIL PROTECTED]>; Tue, 16 Oct 2007 09:47:17 + (GMT)
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on core.byshenk.net
X-Spam-Level: 
X-Spam-Status: No, score=-4.0 required=5.0 tests=RCVD_IN_DNSWL_MED
autolearn=failed version=3.2.3
X-Original-To: samba@lists.samba.org
Delivered-To: samba@lists.samba.org
Received: from eweka2.usenetserver.com (eweka2.usenetserver.com
[208.49.80.202])
by lists.samba.org (Postfix) with ESMTP id 9839F162ABE
for ; Tue, 16 Oct 2007 09:46:34 + (GMT)
Received: from eweka2.usenetserver.com (eweka2.usenetserver.com [127.0.0.1])
by eweka2.usenetserver.com (8.12.11/8.12.11) with ESMTP id
l9G9kXT7005960
for ; Tue, 16 Oct 2007 09:46:33 GMT
Received: (from [EMAIL PROTECTED])
by eweka2.usenetserver.com (8.12.11/8.12.11/Submit) id l9G9kXRG005959; 
Tue, 16 Oct 2007 09:46:33 GMT
Resent-Date: Tue, 16 Oct 2007 09:46:33 GMT
Resent-From: news <[EMAIL PROTECTED]>
Resent-Message-Id: <[EMAIL PROTECTED]>
Path: EVERESTKC.NET-a2kHrUvQQWlmc!not-for-mail
From: Greg Byshenk <[EMAIL PROTECTED]>
Newsgroups: linux.samba
Subject: Re: [Samba] Re: can I configure smb.conf to always publish share
files with -rw-rw-rw- permission ?
Date: Tue, 16 Oct 2007 10:50:12 +0200
Message-ID: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
X-Original-To: [EMAIL PROTECTED]
X-Greylist: delayed 419 seconds by postgrey-1.24 at dp.samba.org;
Mon, 15 Oct 2007 23:11:50 GMT
X-Greylist: delayed 990 seconds by postgrey-1.24 at dp.samba.org;
Mon, 15 Oct 2007 18:06:03 GMT
X-Greylist: delayed 1313 seconds by postgrey-1.24 at dp.samba.org;
Mon, 15 Oct 2007 17:10:54 GMT
X-Greylist: delayed 3359 seconds by postgrey-1.24 at dp.samba.org;
Mon, 15 Oct 2007 15:56:01 GMT
X-Greylist: delayed 2740 seconds by postgrey-1.24 at dp.samba.org;
Mon, 15 Oct 2007 13:58:41 GMT
X-Greylist: delayed 2819 seconds by postgrey-1.24 at dp.samba.org;
Mon, 15 Oct 2007 12:37:35 GMT
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.2.3i
Resent-To: samba@lists.samba.org
Organization: linux.* mail to news gateway
X-Original-Cc: KLEIN St?phane <[EMAIL PROTECTED]>
X-Original-Date: Mon, 15 Oct 2007 11:31:12 +0200
X-Original-Message-ID: <[EMAIL PROTECTED]>
X-Original-References: <[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
X-Original-Lines: 56
X-Original-Date: Mon, 15 Oct 2007 13:30:18 +0200
X-Original-Newsgroups: linux.samba
X-Original-X-Complaints-To: [EMAIL PROTECTED]
X-Original-X-Trace: 52ff547135407ef7b7d1a31521
X-Original-Date: Mon, 15 Oct 2007 14:40:05 +0200
X-Original-Newsgroups: linux.samba
X-Original-X-Original-X-Complaints-To: [EMAIL PROTECTED]
X-Original-X-Trace: 6a8094713675cef7b7d1a25423
X-Original-Date: Mon, 15 Oct 2007 16:00:16 +0200
X-Original-Newsgroups: linux.samba
X-Original-X-Complaints-To: [EMAIL PROTECTED]
X-Original-X-Trace: 6712047138071ef7b7d1a14067
X-Original-Date: Mon, 15 Oct 2007 18:00:20 +0200
X-Original-Newsgroups: linux.samba
X-Original-X-Original-X-Complaints-To: [EMAIL PROTECTED]
X-Original-X-Trace: bfb87471399faef7b7d1a18790
X-Original-Date: Mon, 15 Oct 2007 19:20:09 +0200
X-Original-Newsgroups: linux.samba
X-Original-X-Complaints-To: [EMAIL PROTECTED]
X-Original-X-Trace: 503df4713a82cef7b7d1a28730
X-Original-Date: Mon, 15 Oct 2007 20:10:12 +0200
X-Original-Newsgroups: linux.samba
X-Original-X-Original-X-Complaints-To: [EMAIL PROTECTED]
X-Original-X-Trace: 630c14713b63bef7b7d1a12634
X-Original-Date: Mon, 15 Oct 2007 21:00:22 +0200
X-Original-Newsgroups: linux.samba
X-Original-X-Complaints-To: 

Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-16 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following 

Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-16 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instruct

Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-16 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lis

Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-16 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/ma

Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-16 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samb

Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-16 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsu

Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


  1   2   3   4   5   >