Re: [Samba] RE: install opt-samba-base on aix 5.3

2007-05-14 Thread Hillel Seltzer
On Mon, 14 May 2007 14:07:54 -0700 (PDT), Steve Romanow wrote
> Just to add a little more detail, we tried to install the package
> pware.samba-3.0.24 first, thinking it would install its prerequisites.
> 
> There is a .toc file in the pwd that seems to be for the 3.0.24, did 
> it come from the tar.gz file?
> 
> I think it ight be getting in the way of the subsequent attempts to install
> pware.base 5.2.2.0
> 

The .toc file was created by installp when you ran it the first time.
Assuming you are in a temp directory, just delete that .toc file.
Untzip and untar the opt-samba-3.0.24-AIX5.tar.gz and opt-samba-base
packages from http://us1.samba.org/samba/ftp/Binary_Packages/AIX/
in the same directory.  Then follow the instructions from the README
file with the "installp -lE -d." and "installp -agYX -d. all" commands.

Hope this helps.
---Hillel

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAMBA on AIX --> nsswitch.conf?

2007-05-14 Thread Hillel Seltzer
On Mon, 14 May 2007 10:34:32 +0200, Urs Golla wrote
> nsswitch.conf does not exist on AIX! It works after changing
> /etc/security/user and copying WINBIND etc...
> 

On AIX, instead of nsswitch, there is /etc/netsvc.conf.
There is a nice description commented in the default file
installed with AIX.

It is also overriden with the NSORDER environment variable.

---Hillel

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Link AD to pre-existing UNIX accounts

2007-04-23 Thread Hillel Seltzer
Are there AD users who need Samba access and do not have Unix accounts?
If so, is there a problem giving them Unix accounts?

I have a server set up to do this, but all of the users
have local Unix accounts as well as AD accounts.  Basically,
set up Samba as an AD member server and just do not use windbindd.
All permission information for the shares in smb.conf can then 
use the Unix user and group names instead of those in AD, and
Samba will still use the AD credentials for Windows client access.
You will have to map DOMAIN\administrator to root (if you want
adminstrator to have Samba access) and any other domain user 
with a different domain login than their Unix login in the 
Samba usermap file.

Hope this helps.
---Hillel

On Mon, 23 Apr 2007 14:17:42 + (UTC), CG wrote
> I'm trying to use winbindd to enumerate and link AD users to their 
> pre- existing UNIX accounts. Right now, winbindd creates new "users" 
> for UNIX based on windows username and groups.
> 
> What I can't figure out is how to explicitly map the AD users to 
> their pre- existing UNIX accounts. I'd like the users to be able to 
> access their UNIX accounts with their UNIX authentication 
> information /and/ their AD authentication information. I had hung my 
> hat on the "username map" smb.conf directive, but I find now that it 
> doesn't apply to winbindd.
> 
> Has anyone worked out a strategy for this scenario?
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.24 on AIX

2007-03-27 Thread Hillel Seltzer
OK.  I tried it with "unset LIBPATH" and it works.  However, AFAICT it 
is not mentioned anywhere in the README on the samba.org AIX binary
web page or in any README file that came with the pware samba packages.

Thanks.
---Hillel

On Tue, 27 Mar 2007 15:09:55 -0400 (EDT), William Jojo wrote
> 
> If you check the README, there should be a section that says you 
> should "unset LIBPATH" prior to running the software and this will 
> force the software to use the libraries and paths embedded in the executable.
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.24 on AIX

2007-03-27 Thread Hillel Seltzer
That was it?  Cool, it works now!  Thanks for fixing it.
See previous posts on Swat not working with root on AIX.

There is still one issue with the pware samba distribution.
To use the samba programs and utilities, the library files
sitting in /opt/pware/lib are required to be in the LIBPATH
ahead of any directories that might have libraries with the
same names.  However, setting the LIBPATH environment
variable as such messes with just about everything else
outside of samba (or, more accurately, outside of pware
provided packages).

For running smbd, nmbd, winbindd, and swat, I wrote a
short script in /opt/pware/sbin that just sets PATH and
LIBPATH evironment variables and then runs the corresponding
program with all the desired arguments.  I then set this
script as the startup for nmbd and smbd in the AIX system
resource controller and for swat in inetd.conf.  This gets
around the environment problem of having to start or restart
the daemon processes or swat.  However, any user on an AIX
terminal window who sets the environment to use the samba
command line utilities cannot do anything else in that terminal window.

---Hillel

On Tue, 27 Mar 2007 10:07:26 -0400 (EDT), William Jojo wrote
>
> Yeah, that's my bad. Please go to
>
> ftp://ftp.hvcc.edu/pub/pware/aix52
>
> And download 3.0.24 from there. I put the PAM version on the Samba
> site by mistake. I'll get a new one to Jerry today to move to the
> download site.
>
> Apologies for the screw up...
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] SWAT not logging in with root

2007-02-22 Thread Hillel Seltzer
Hello,

I am trying to set up a samba server for a few shared directories on AIX 5.3.
 It is running in a Windows 2000 domain.  It now seems to share properly, but
swat does not accept any login ID.  I set up swat with the /etc/services and
/etc/inetd.conf entries as per the manual.  When I use a browser to
"http://myserver:901"; I get a login box for name and password, but it does not
accept the root password.

My system is configured to authenticate with ADS, but I am not using winbindd
as I still want to maintain permissions with the local Unix users and groups.

The swat log file shows the error:
auth/pampass.c:smb_pam_passcheck(810)
  smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User root !


Here is the global section of my smb.conf:

[global]
workgroup = MYDOMAIN
realm = MYDOMAIN.COM
server string = Samba Server
security = ADS
log file = /var/log/samba/log.%m
max log size = 50
local master = No
dns proxy = No
hosts allow = 172.16.2., 172.16.100., 127.
username map = /opt/pware/samba/3.0.24/lib/usermap.conf


Thanks.
---Hillel

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Active Directory Migration

2003-08-29 Thread Hillel Seltzer
I see there is some detailed information on migrating
from an NT4 PDC to a Samba PDC.

I there any documented procedure for migrating from
Active Directory to a Samba PDC?  Can it be done?

Thanks.
---Hillel


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smb.conf variables not substituting

2003-08-21 Thread Hillel Seltzer
Hello,

I am running Samba 3.0.0rc1 on Red Hat 8 with a 2.4.21 kernel
patched for ACL support.  I am trying to set up Samba to work
as a member of a Win2k domain with AD.  It seems to be
authenticating users off of AD for connecting to the server, but
I am having some trouble setting up the home share.

It seems that the single character variables used in smb.conf
(%U, %D, etc.) are not substituting their values.  For example, the
line "template homedir = /usr/export/user/%u" in the [global] section
caused the creation of a directory called "%u" under "/usr/export/user"
when it should have been substituted with the user name.
If I try "%U" instead in smb.conf, it seems to have no value.
For example, in the [homes] share section,
"path = /usr/export/user/%U" is mapping to "/usr/export/user/".

Any ideas on what would cause this?

Thanks.
---Hillel


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba