RE: [Samba] smbpasswd -d nobody, listing still possible?

2005-11-27 Thread Jeroen van Meeuwen
Julius,

Set 'security = user'.

Kind regards,

Jeroen van Meeuwen

--
kanarip



 -Original Message-
 Subject: [Samba] smbpasswd -d nobody, listing still possible?
 
 hi,
 
 i wondered why i can still list my shares with smbclient -NL localip,
 security = SHARE i just disable the user nobody?

 my conf:
 
 [global]
 workgroup = MIDEARTH
 netbios name = GANDALF
 security = SHARE
 message command = sh -c '/usr/kde/3.4/bin/winpopup-send.sh %s %m' 
 
 
 bind interfaces only = yes
 interfaces = eth0 lo
 
 passdb backend = tdbsam
 guest account = nobody
 
 #logging
 log file = /tmp/samba.log
 log level = 3
 
 
 [data]
 comment = Data
 path = /home/metalfan/Windows
 guest only = Yes
 writeable = Yes
 
 
 and the smbclient  -NL localip output:
 
 Domain=[MIDEARTH] OS=[Unix] Server=[Samba 3.0.20b]
 
 Sharename   Type  Comment
 -     ---
 dataDisk  Data
 data2   Disk
 IPC$IPC   IPC Service (Samba 3.0.20b)
 ADMIN$  IPC   IPC Service (Samba 3.0.20b)
 Domain=[MIDEARTH] OS=[Unix] Server=[Samba 3.0.20b]
 
 Server   Comment
 ----
 GANDALF  Samba 3.0.20b
 
 WorkgroupMaster
 ----
 MIDEARTH
 
 
 
 shouldnt i just get some error like..no user.. ?
 
 greets
 Julius
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] The single WINS problem

2005-11-25 Thread Jeroen van Meeuwen
I don't understand what you mean with DOMAIN1B or DOMAIN1C... Does
it concern, for example, machine 1B in domain DOMAIN? If it is, you're still
in the Netbios context, which I don't use... My queries are alike 1B.DOMAIN.

Please clarify for I find it a very interesting issue...

Kind regards,

Jeroen van Meeuwen

--
kanarip


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:samba-
 [EMAIL PROTECTED] On Behalf Of Andreas
 Sent: Thursday, November 24, 2005 23:43
 To: samba@lists.samba.org
 Subject: Re: [Samba] The single WINS problem
 
 On Thu, Nov 24, 2005 at 10:31:01PM +0100, Jeroen van Meeuwen wrote:
   So you can't use DNS for that sixteenth field of netbios names (like
   1C, 1B, etc). Or can you?
 
  Dynamic DNS is a setup primarily for networks with DHCP. Using DHCP, you
can
  only have 1 IP lease per physical interface. This IP, along with the
  system's hostname, are registered in DNS, and that's were we resolve the
  names you currently use in a Netbios/WINS environment.
 
 I understood this part. What I didn't understand is how a DNS server can
 answer queries like DOMAIN1C and DOMAIN1B.
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] The single WINS problem

2005-11-25 Thread Jeroen van Meeuwen
You seem to forget that my 'master browsers' are in fact DNS Servers, and
there is no such thing as Netbios querying for logon servers. That is DNS
integrated in Windows 2003.

Kind regards,

Jeroen van Meeuwen

--
kanarip



 -Original Message-
 From: [EMAIL PROTECTED] [mailto:samba-
 [EMAIL PROTECTED] On Behalf Of Andreas
 Hasenack
 Sent: Friday, November 25, 2005 11:44
 To: samba@lists.samba.org
 Subject: Re: [Samba] The single WINS problem
 
 On Fri, Nov 25, 2005 at 11:11:50AM +0100, Jeroen van Meeuwen wrote:
  I don't understand what you mean with DOMAIN1B or DOMAIN1C...
 Does
 
 It means finding the Domain Master Browser (PDC) and all the logon
 servers (1C) for DOMAIN. It is done with a netbios query, but since you
 don't use netbios I was wondering how these netbios specific attributes
 (1C, 1B, 00, 20, etc) are stored in DNS.
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] The single WINS problem

2005-11-24 Thread Jeroen van Meeuwen

 Subject: [Samba] The single WINS problem
 
 Everybody encourages Samba admins to enable WINS whenever possible, and
 I agree that it helps a lot to solve these networks' problems. It's so
 good that, when it fails, it's a disaster.
 
 How are people coping with the samba limitation of not being able to
 replicate the WINS database and thus its inability to have more than one
 WINS server in a domain?
 

I'm in a hybrid environment using both linux and Windows, and I prefer not
to use WINS. It would mess up the DDNS environment I currently have set up,
since at some point Windows still gives WINS a higher priority over DNS.
Linux, of course, doesn't really care ;)

Kind regards,

Jeroen van Meeuwen

--
kanarip

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] The single WINS problem

2005-11-24 Thread Jeroen van Meeuwen


 Subject: Re: [Samba] The single WINS problem
 
 On Thu, Nov 24, 2005 at 09:38:29PM +0100, Jeroen van Meeuwen wrote:
 
   Subject: [Samba] The single WINS problem
  
   Everybody encourages Samba admins to enable WINS whenever possible,
 and
   I agree that it helps a lot to solve these networks' problems. It's so
   good that, when it fails, it's a disaster.
  
   How are people coping with the samba limitation of not being able to
   replicate the WINS database and thus its inability to have more than
one
   WINS server in a domain?
  
 
  I'm in a hybrid environment using both linux and Windows, and I prefer
not
 
 Who is the PDC? Linux or Windows?
 

In fact, there is no real PDC, but I understand what you mean. My two
Windows 2003 boxes are Domain Controllers, DNS runs on a bind-9.3.1 linux
box.

  to use WINS. It would mess up the DDNS environment I currently have set
up,
  since at some point Windows still gives WINS a higher priority over DNS.
  Linux, of course, doesn't really care ;)
 
 So you use DNS for netbios name resolution? Or have you configured samba
 to not use netbios? Is it a single network (i.e., broadcast name
 resolution works)?

The Netbios names that are set in smbd/nmbd, are already registered with DNS
when the network comes up (Dynamic DNS). This will only work properly if you
have one single Netbios name per machine (Or run several instances on a
multi-homed box).

Windows boxes (NT 5.1 and later) are used to primarily look up 'simple
hostnames' (hostnames without a DNS suffix, whether in a Netbios context or
not), suffixed with the system DNS Domain suffix (list), or connection
specific domain suffix (set by, for example, DHCP). I find that Windows is
'confused' as soon as I also provide a WINS server (but hey, didn't I expect
at least one undocumented feature??).

Kind regards,

Jeroen van Meeuwen

--
kanarip

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] The single WINS problem

2005-11-24 Thread Jeroen van Meeuwen
 
 On Thu, Nov 24, 2005 at 10:04:10PM +0100, Jeroen van Meeuwen wrote:
  The Netbios names that are set in smbd/nmbd, are already registered with
DNS
  when the network comes up (Dynamic DNS). This will only work properly if
you
  have one single Netbios name per machine (Or run several instances on a
  multi-homed box).
 
 So you can't use DNS for that sixteenth field of netbios names (like
 1C, 1B, etc). Or can you?

Dynamic DNS is a setup primarily for networks with DHCP. Using DHCP, you can
only have 1 IP lease per physical interface. This IP, along with the
system's hostname, are registered in DNS, and that's were we resolve the
names you currently use in a Netbios/WINS environment.

What I said, though, is not entirely true. I could of course add interfaces
with different MAC addresses, which would be considered spoofing, and thus
lease more IP's and register more DNS records.

Or I create interface aliases with static IPs and configure a static IN A
record.

I could also use a multi-homed box with several NICs, thus lease more IPs,
thus registering more DNS records.

In all these setups, I also could run several instances of smbd/nmbd, each
bound to one interface (or one IP, if you will).

Kind regards,

Jeroen van Meeuwen

--
kanarip

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba