Re: [Samba] Reduntant Samba servers?

2006-04-19 Thread Jonas Jochum
Am Mittwoch, 19. April 2006 15:25 schrieb Linus Hedström:
 I am trying to setup two redundant Samba Servers.

 The file shares are on both servers and needs to be synced.
 My best solution is to run an rsync between them every 5 min ?
 Are there any smarter solution to this?

 Another problem is how I could solve the kerberos authentication in the
 best possible way?
 We have a Windows AD server and authenticate through kerberos.

 If server1 is down I want to switch to server2 but use the same DNS /
 Computer name because all users have it mapped. It also saves the profiles.

 I have tried to set up a DNS alias on the AD server's DNS and my idea
 was that I just could switch the alias to the server I want to use.

 But that doesn't work because it is the alias name that tries to
 authenticate to kerberos and I then get: Server not found in Kerberos
 database on the kerberos server.
 I hope someone has a smart solution to this?

drbd and carp. that should imho even work with kerberos. not sure, though :)

HTH,
 Jonas Jochum
 archIT - Faculty of Architecture - University of Karlsruhe


pgpIEF63C3mAE.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Homes on different server...

2005-11-11 Thread Jonas Jochum
Am Friday 11 November 2005 15:15 schrieb Olivier Houde:
 Hi list
 is there any way to specify on wich server a user's home is ?   Let me
 explain myself...   I have a Samba3 PDC here at the head office using
 LDAP as an authentication backend. We have offices in other cities and
 we would like them to be on the same domain. All those offices are
 linked using VPNs. I have no problem to configure LDAP and Samba to work
 together. The problem is that i want all those offices to be completely
 independant in case the VPN link goes down. For that, i need to split
 all my user's home between the BDCs and the PDC (depending in wich
 office the user is working), if want the users to still have an access
 to their home and profiles. I have an LDAP master here and a LDAP slave
 in each office. How can i tell samba that depending on the user, its
 home is on a different server ?  Can i use LDAP for that ?  If it's
 possible, how can i do that ?  Should i use an other solution ?  Trusted
 domain instead ?

 Thanks
 Olivier Houde

Have a look at the LDAP attributes sambaHomePath and sambaProfilePath.

Regards,
 Jonas Jochum
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] 3.0.20b seems to ignore ldap user suffix

2005-10-28 Thread Jonas Jochum
Excerpts from smb.conf:   

 passdb backend = ldapsam:ldap://localhost   
 ldap admin dn = cn=admin,dc=arch,dc=uni-karlsruhe,dc=de   
 ldap group suffix = ou=groups   
 ldap machine suffix = ou=computer   
 ldap suffix = o=archipool,dc=arch,dc=uni-karlsruhe,dc=de   
 ldap ssl = no   
 ldap user suffix = ou=aktiv,ou=Accounts   

 The system wide ldap suffix is a different one   
 (ou=accounts,o=archipool,dc=arch,dc=uni-karlsruhe,dc=de). Samba, however,   
 should only search for users in the specified user suffix, since not all   
 system users are supposed to be able to use samba.
 
slapd.log:   
 
 Oct 28 12:17:30 far-poolserver64 slapd[9499]: SRCH   
 o=archipool,dc=arch,dc=uni-karlsruhe,dc=de 2 3   
 [debug output snipped]   
 Oct 28 12:17:30 far-poolserver64 slapd[9499]: filter: ((uid=dummy)  
 (objectClass=sambaSamAccount))   

 Should I file a bug report, does anybody spot a config error or is more info 
needed?   

 Regards,   
  Jonas Jochum   
  archIT - Faculty of Architecture   

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 3.0.20b seems to ignore ldap user suffix

2005-10-28 Thread Jonas Jochum
Am Friday 28 October 2005 16:00 schrieb Craig White:
 does this match what is in padl's ldap.conf ?

Do you mean pam_ldap.conf?
No, it doesn't:

base ou=aktiv,ou=accounts,o=archipool,dc=arch,dc=uni-karlsruhe,dc=de

libnss-ldap.conf uses
base o=archipool,dc=arch,dc=uni-karlsruhe,dc=de

The reason for this is that we're temporarily moving disabled accounts to
ou=inakt,ou=accounts,o=archipool,dc=arch,dc=uni-karlsruhe,dc=de.
Due to samba using the wrong search base, they're still able to log in (don't
tell me to use sambaAcctFlags - I know they can be used for accomplishing the
same thing).

Bye,
 Jonas
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] can i change the pwd bby parameter with pdbedit?

2005-10-28 Thread Jonas Jochum
Am Friday 28 October 2005 17:40 schrieb Rodrigo De la Pena:
 i need to change the password of my users using an script, not by
 prompt, but y tried the pdbedit and smbpasswd commands and didn't work,
 they prompt for password, is there a flag or something to set the
 password in the command to avoid the prompt? i read man pages of these
 commands and there are nothing to do what i need.

[EMAIL PROTECTED]:~$ smbpasswd -h
When run by root:
smbpasswd [options] [username]
otherwise:
smbpasswd [options]

options:
  -L   local mode (must be first option)
  -h   print this usage message
  -s   use stdin for password prompt

 that's the option you want to use...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba