[Samba] Winbind machine accounts
Dear all, I want to ask if I can hide the machine accounts shown in getent passwd ? I know it is harmless but they are not user accounts after all. I am using security = ads and using libnss_winbind. Thanks. Cheers, Jacky Hui -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] [IDMAP AD] Strange questions on uid/gid resolution.
Dear all, I am using Win2003 with SFU 3.5 (not R2) as domain controller. I enabled the UNIX attributes of several users and groups. I use idmap = ad to connect to my Win2003 box and setup the winbind / nss accordingly. wbinfo -u / -g work fine, getent passwd / group works fine, chown works fine, id works fine. But when I tries to use ls or groups , it returns the error "id: cannot find name for " and ls just shows the uid/gid instead of the name. Any ideas? The config files / output are as follow: Platform: Debian sarge samba from backports.org samba version (smbd -V): Version 3.0.22 smb.conf idmap backend = ad:ldap://192.168.0.201 idmap uid = 5-51000 idmap gid = 5-51000 template shell = /bin/bash template homedir = /home/%U #winbind trusted domains only = Yes winbind use default domain = yes winbind nested groups = Yes #winbind separator = "\" winbind cache time = 10 winbind enum groups = Yes winbind enum users = Yes winbind nss info = template sfu /etc/nsswitch.conf: passwd: compat winbind group: compat winbind shadow: compat wbinfo -u: Administrator Guest DC1$ krbtgt testuser01 fileserver$ PC1$ PC2$ testuser02 testuser03 wbinfo -g: HelpServicesGroup TelnetClients Domain Computers Domain Controllers Schema Admins Enterprise Admins Cert Publishers Domain Admins Domain Users Domain Guests Group Policy Creator Owners RAS and IAS Servers DnsAdmins DnsUpdateProxy WINS Users Local_Staff IT_Team Counselling_Team PasswordPropDeny getent passwd: administrator:x:10002:10002:Administrator:/home/administrator:/bin/sh testuser01:x:1:10002:User 01:/home/testuser01:/bin/sh testuser02:x:10001:10002:User 02:/home/testuser02:/bin/sh testuser03:x:10003:10002:User 03:/home/testuser03:/bin/sh getent group: Domain Users:x:10002: Local_Staff:x:10004:testuser02 IT_Team:x:1: chown and chgrp succeeds ls /home: drwxr-xr-x 5 1 1 4096 2006-08-22 23:50 testuser01 drwxr-xr-x 3 10001 1 4096 2006-08-22 11:31 testuser02 drwxr-xr-x 2 10003 1 4096 2006-08-23 00:13 testuser03 groups testuser01: id: cannot find name for group ID 10002 Sorry for a very very long appendix. :P Any help will be highly appreciated! Jacky in desperate -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] adding samba3 to Active Directory Domain
Dear, Did you read the section "Samba ADS domain membership" within the Official HOWTO? You may want to have a read there. ( http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html#ads-member ) Besides, it is also good for you to read the Idmap and Winbind section. Hope this help. Best Rgds, Jacky Hui Chun Kit On 8/16/06, Kevin Gowan <[EMAIL PROTECTED]> wrote: To Whom It May Concern: I really admire the dedication and effort your group has. I am glad more and more people aren't buying into the Microsoft licensing schemes. Keep up the good work! I would like to add the server I have installed to our Active Directory Domain. We have one Win2003 PDC no subnets very basic stuff. I have read many chapters in the official how to guide and would like to zero in on the appropriate section/s that will allow me to configure this appropriately. All my supervisor would like me to do is create a fileserver where no one has to type in their user name and password again when they click on any of the shares. I have tried (on the test bed) configurations from different chapters and I still get user name and password when I click on the server or share. The Server I have installed is Suse 10.0enterprise. I would appreciate any help that you can provide. Thank you for your time and I look forward to hearing from you soon! Best regards, Kevin G -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Documentation for Idmap backend?
Dear all, I want to ask if there are any documentation on the behavior of idmap backend = ad and winbind nss info = template | sfu | rfc2307 I cannot find much information on samba HOWTO/Book/etc. I want to know if these options is useful in solving the SID maps to existing UID problem I posted earlier. Cheers, Jacky Hui -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Install Applications via Logon Scripts?
Dear, IMHO, this is not really related to samba. Some applications comes with a silent mode for installation, you may try to figure it out whether the applications you want to install support the use of silent mode. Under Windows 2k/2003 domain, GPO does help to install software but the real work is largely being down on the client side by the MSI service component. Just my 2 cents. Cheers, Jacky Hui On 8/9/06, Aaron Souza <[EMAIL PROTECTED]> wrote: Is there a way to install a windows (XP) application via a logon script? I'm not sure how to do it because most applications will require interaction (next,next,next and etc). Has anyone figured out a way to 'push out' programs via logon script or something else relating to a Samba domain? Thanks, Aaron - Disclaimer If you have received this email in error, please delete it and do not divulge this information in any way. Troy C.C.S.D. 30-C cannot accept responsibility for any loss or damage arising from the transmission to the recipient or from the recipient's use of this email or its attachments. Any opinions presented in this email are solely those of the author and do not necessarily represent those of Troy. The person who sent this email is personally responsible for any damages or other liability arising from its contents and the distribution of that content to others. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Idmap: How to Map SID to existing UIDs?
Dear all, I've got a question concerning winbind and idmap. I've been googling for days and read through the official HOWTO but yet cannot find the answer. My situation is as follow: I have a UNIX infrastructure (including NFS) with all user information stored in LDAP for distributed passwd/group/shadow using nsswitch. I also have Windows 2003 AD (MYREALM) set up. I want to setup a samba DMS under the realm MYREALM. Everything works fine. However, I also want to allow the windows users to manipulate the ACLs of the files on the samba share. This creates a problem. If I don't use winbind, the ACEs on the files cannot contains any SIDs from the AD domain (MYREALM). If I use winbind with tdb or LDAP backend, winbind will map the SID to a new UID different from the existing UIDs for the UNIX user accounts. I want to ask how can I map SID to existing UIDs if the username is identical between the Unix world and the AD world? Any suggestions?? or Any pointers to documentation/HOWTO ? Thanks x 10 Cheers, Jacky Hui -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Move Samba to another server
At the moment, I am using simple passwd for local users, but I intend to set up LDAP on the 'new server'. However, due to the number of users (10), it might be simpler to re-create the entire organisation from the ground up. With a single auth system, it might be easier to manage samba, pop3-ssl (different server), pop3 (another server) and other services. -Oorspronkelijk bericht- Van: Andrew Bartlett [mailto:[EMAIL PROTECTED] Verzonden: dinsdag 23 augustus 2005 12:35 Aan: Kit Gerrits CC: 'Kit Gerrits'; samba@lists.samba.org Onderwerp: RE: [Samba] Move Samba to another server On Tue, 2005-08-23 at 12:16 +0200, Kit Gerrits wrote: > Thanks for the reply! > > Great, so I can just copy the Data... > > Can you tell me how uer mapping is done? > Does it map by username or by userID? (planning on some restructuring). You should really try and keep the same usernames and userids. It is possible to change UIDs, and provided you used ldap or tdbsam (I think, but I've never done it there) you can have arbitrary rids. Keeping this constant is the way to ask for less trouble... Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Samba Developer, SuSE Labs, Novell Inc.http://suse.de Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Move Samba to another server
Thanks for the reply! Great, so I can just copy the Data... Can you tell me how uer mapping is done? Does it map by username or by userID? (planning on some restructuring). Thnx, Kit -Oorspronkelijk bericht- Van: Andrew Bartlett [mailto:[EMAIL PROTECTED] Verzonden: zondag 21 augustus 2005 23:37 Aan: Kit Gerrits CC: samba@lists.samba.org Onderwerp: Re: [Samba] Move Samba to another server On Thu, 2005-08-18 at 22:15 +0200, Kit Gerrits wrote: > Hello all, > > I am intending to install a new server and migrate all my data to it > (the server was severely underpowered and the O/S needed to be upgraded anyway). > > Now, I need to move the user database and Samba Server. > > I can easily move the data and (kinda) re-create the users, but I > don't know what data needs to be migrated to the new server? > It would be nice to migrate things like Profiles, et al. > Would it be better to create a new domain or should I build the new > server next to the old one. The best option is to copy the whole lot - every Samba TDB (but particularly secrets.tdb, passdb.tdb), every user directory, as well as the system user database (if using /etc/passwd, just the non-system entries). If you are a DC, then it should just 'drop in', once you get the users back in place. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Samba Developer, SuSE Labs, Novell Inc.http://suse.de Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Move Samba to another server
Hello all, I am intending to install a new server and migrate all my data to it (the server was severely underpowered and the O/S needed to be upgraded anyway). Now, I need to move the user database and Samba Server. I can easily move the data and (kinda) re-create the users, but I don't know what data needs to be migrated to the new server? It would be nice to migrate things like Profiles, et al. Would it be better to create a new domain or should I build the new server next to the old one. Any thoughts would be appreciated. Kit -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba PDC not adding machines
samba-3.0.7-1.3E.1 Last time I checked (about 2 weeks ago), I could log machines onto the domain using the automated join in 2000 (and smbpasswd -a) Now, when I try to make a machine join the domain, Windows will show success, but I can't log in with a domain account! On adding the machine, I get: Dec 8 10:40:31 RedHat01 smbd[16299]: [2004/12/08 10:40:31, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(786) Dec 8 10:40:31 RedHat01 smbd[16299]: api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO. On logging in I get: Dec 8 11:04:26 RedHat01 smbd[21553]: [2004/12/08 11:04:26, 0] rpc_server/srv_netlog_nt.c:get_md4pw(244) Dec 8 11:04:26 RedHat01 smbd[21553]: get_md4pw: Workstation WS-07-2K$: no account in domain I have tried disabling secure encryption in Policy Settings, but that didn't help (The error in the log goes away, but I still can't log in). I have also tried manually removign and re-adding the machine, to no avail. Any ideas? My smb.conf: # Global parameters [global] workgroup = AA-AUDIT-IT server string = Server password server = None log file = /var/log/samba/%m.log max log size = 50 log level = 0 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/sbin/useradd -d /dev/null -g samba -s /bin/bash -M %u add machine script = /usr/sbin/adduser -n -g workstations -c Machine -d /dev/null -s /bin/false %u logon script = logon.bat logon path = \\%L\Profiles\%U logon drive = I: domain logons = Yes os level = 65 preferred master = Yes local master = Yes domain master = Yes dns proxy = Yes wins support = Yes guest ok = No create mask= 0777 force directory mode = 0777 force create mode = 0777 printer admin = @administrators ... the rest is shares / printer definition -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Make Samba 3.0.4 PDC server as Windows update server
Just one little trick that might provide a piece of the puzzle: There is a Windows tool, called hfnetchk (should be in the resource kit), that checks the system for installed patches. NoteMS03-030819696 Warning MS04-011835732 PATCH NOT FOUND MS99-99 99 Note means that there is new information on the patch Warning (usually) means that the patch has been re-released You can guess what PATCH NOT FOUND means... After the message comes the patch number and the associated MS Q-number Filtering can be done with the NT command find (replacement for grep) Ex: @echo off echo running update check... hfnetchk.exe > exchange.log type exchange.log | find "Patch NOT Found" >note.log for /F "tokens=3 delims=" %a in (note.log) DO @echo %a /Ex An administrator would have to keep all patches in a repository. Patches can then be downloaded by either MS patchnumber or Q_number -Oorspronkelijk bericht- Van: cep welly [mailto:[EMAIL PROTECTED] Verzonden: zaterdag 17 juli 2004 3:05 Aan: Samba Onderwerp: Re: [Samba] Make Samba 3.0.4 PDC server as Windows update server rruegner wrote: > Hi , > you can make any win2k, winxp prof workstation make a > sus server , you only have to fix a few parameters ( lines )in the > downloaded > sus package vom ms ( the line which check the install to the version > of windows cause normaly you can only install it on server versions ) > Then you install iis ( ms-webserver ) from your win cd (included on > win2k, winxp), > install the modified package , setup the sus server ( language, > download rotation time ) download your updates , aprove them. > Make a ntconfig.pol in your netlogon at smb pdc, and > configure daily internal check to the ip of the sus server. > You can also outroll a tool forcesus.exe and start it > with psexec on every domain computer to force the sus update anytime. > The only problem is the win sus station has to be up the whole time. ( > or at last the update time ) That' might be a problem. Is windows designed to be up for a long time ( without reboot or blue screen ? --- ;-) ) > A duron/celeron 800 or so with 128MB Ram will do the job nicly. > There are a few other possiblities ( some with linux via wget and so > on ), but this is i found the best way. > YOu will found all information about that at > http://www.susserver.com/ in the forums. Thanks for your valuable information. I haven't got enough time to google for additional info, but I think deploying susserver behind proxy firewall won't be a problem ( isn't it ??? ) Cheers all ... > It is no hard job to do and works 100 % > Regards Robert > > cep welly schrieb: > >> hi, guys... I'm a noobie around here and first come first ask ;-) >> well, I have successfully made my linux box ( debian sid kernel 2.426 >> ) as a PDC >> ( I can connect my winxp box to this pdc --> that's what i mean >> success ) >> I'm using Samba 3.0.4. I wonder if I can make my pdc to be a windows >> update server. >> As we know, updating windows always goes through the internet, which >> in my >> consideration is not good internet bandwidth management ( assume if >> there's >> a hundred or even thousand windows clients in a network ... ) >> So, if one machine can provide that need, it would be a great >> improvement. >> I've heard about SUS which can provide this, but since it need a >> windows server >> I guess I should ignore that ( I'd experienced a bad time when one of >> our server >> being compromised several months ago --- that's why I turn to Linux >> platform ) >> Maybe providing a script to execute the update files is not enough, >> since users >> have to involved to the installation, answering some questions, etc >> which >> might be boring them ( in case there'll not just only one update ). >> And there will >> be a chance where users will give a wrong answer. >> Updating windows without asking anything, after user log in just : go >> copying files, >> changin' registry, etc ( restart after the whole process defenetely >> can't be avoided, >> isn't it ? :D ) >> Or I just to much to hope . >> >> cheers, >> >> --me-- >> > -- -BEGIN PGP PUBLIC KEY BLOCK- Version: GnuPG v1.2.4 (GNU/Linux) mQGiBEDato0RBADHD8bKvVCTORppg/pot1Zuyx4Joz/IC34aZlLkG7/JNEVemqiB jSVgnwxa9UNs9Chz9CT6vqzw1pgPXDAb1rD91kbupatgaFUlNEwAW/v2eH8LQEYz 3NicbaysYeeJLBOYlwtmbZWrV8KKoSNrHWxZRjfl4a7TGggllou6+sAQTwCg/2Q2 lLLdPjuaXGiRHqpHFuFWVT8D/Rfzi89GrGWwharBm
RE: [Samba] Does "Admin Users =" accept groups?
As I recall, there are 2 things to bear in mind: 1/ Samba 3.0 has dropped the admin users= setting. There is only one true domain administrator: root. 2/ Also, Samba now uses NT Groups the way it is supposed to, with SID and all. More info can be found by looking up the 'net groupmap' command. If you map the default NT group Domain Administrators, you can do admin users the official way. Also, you'll notice that the number of errors about groups in the samba log falls considerably ;-) Good luck! Kit -Oorspronkelijk bericht- Van: Michael Lueck [mailto:[EMAIL PROTECTED] Verzonden: donderdag 15 juli 2004 18:20 Aan: [EMAIL PROTECTED] Onderwerp: [Samba] Does "Admin Users =" accept groups? man smb.conf does not specifically say admin users supports @groupname syntax. Google turns up lots of examples of it being used, but everyone hanging their smb.conf's up to air does not mean they are 100% accurate either. Here, Samba 3.0.4 in PDC mode, I can not get it to accept the name of a group in /etc/group, user ID's only. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Failed to decode PDU?
Eversince the last RPM, my Samba is producing a few errors: rpc_server/srv_pipe.c:api_pipe_netsec_process(1371) failed to decode PDU : 21 Time(s) rpc_server/srv_pipe_hnd.c:process_request_pdu(605) process_request_pdu: failed to do schannel processing. : 21 Time(s) Can anyone tell me what these mean? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: Re[4]: [Samba] a better smbstatus for monitoring samba ?
There is a 'short description' on the Novell monitor at: http://www.novell.com/documentation/lg/nw6p/utlrfenu/data/h74jxvbx.html and: http://www.eits.uga.edu/lans/novell/nw5admn/day1.html (and day2, day3) The simplest 'quick fix': Build a list of users currently logged on Make a menu based on this userlist 'grep' the list from smbstatus with the selected username. ...and refresh (ad nauseum) This can be done with a 'simple' 2-pane window (it was simple back in the old Pascal days, don't ask me how to do it now...). Perhaps switch to file-list with [enter] and revert to user list on [escape] Good luck! -Oorspronkelijk bericht- Van: Collen Blijenberg [mailto:[EMAIL PROTECTED] Verzonden: dinsdag 29 juni 2004 15:31 Aan: Becskei Robert CC: samba mailing list Onderwerp: Re[4]: [Samba] a better smbstatus for monitoring samba ? does someone have some screen dumps or more tech info on the Novel file server tools, where he's talking about.. l8r - Collen Blijenberg (Montessori Lyceum Herman Jordan) Wednesday, June 16, 2004, 3:02:13 PM, you wrote: BR> Hi, BR> well I think it should be able to run in a console, just like Midnight BR> Commander (so it's also usefull without X), BR> it should have a menu for info about the system, like cpu BR> usage, network card usage,memory, how many users are currently attached to BR> the system, up time. BR> A menu from which you can see that what user is attached to what share, and BR> if you press enter on the user name you can see what files are currently in BR> use. BR> It's almost like smbstatus, only that it's a bit more organized, and is BR> easier to view what is happening on the system in case someone causes BR> trouble it is easier to find what user had that file open. Also it would be BR> nice if in this same menu besides the username and what share that user is BR> using there would be information about user logon time. BR> Sincerely BR> Robert B BR> - Original Message - BR> From: "Collen Blijenberg " <[EMAIL PROTECTED]> BR> To: "Jeremy Allison" <[EMAIL PROTECTED]> BR> Cc: "samba mailing list" <[EMAIL PROTECTED]> BR> Sent: Wednesday, June 16, 2004 08:50 BR> Subject: Re[2]: [Samba] a better smbstatus for monitoring samba ? >> depends on it... >> what needs to be in the tool ??? >> what options, and all... >> >> (got a big holyday comming up, so got some time to crack!) >> >> l8r >> - >> Collen Blijenberg (Montessori Lyceum Herman Jordan) >> >> Wednesday, June 16, 2004, 3:26:43 AM, you wrote: >> >> JA> On Tue, Jun 15, 2004 at 09:56:04PM +0200, Becskei Robert wrote: >> >> Hello, >> >> >> >> does anyone know if there is a tool in existence that can >> >> monitor samba shares like smbstatus >> >> but is much more advanced (and runs in console) , I mean a tool that BR> has menues, some search >> >> options, and things sorted out nice. A Samba realtime monitor >> >> would be the best thing with lots >> >> of details and lots of options. >> >> >> >> >> >> I tried Swat, but that aint really a solution to watch who is >> >> connected to where, neither is smbstatus >> >> since when to many people are connected you can't see in >> >> realtime who is using what. And that I think >> >> is one major problem. >> >> >> >> I would like to have such a tool because I'm throwing the >> >> Novell File Server out and using a Whitebox 3.0EL >> >> instead. I wonder,...is there such a tool like Novell Monitor >> >> ... for linux ? I mean if there aint one for samba >> >> maybe another tool that is more advanced would be able to view >> >> who is connected to what ? what is their IP >> >> adress, what time did they logged on, what is the current system BR> status, etc... >> >> JA> No tool I know of currently. If anyone wants to write one (maybe a gui BR> tool >> JA> written in python ?) I'd be happy to integrate it into the source BR> code. >> >> JA> There are lots of admin options that could be added to Samba via TDB BR> messaging >> JA> to perform admin operations - we just need programmer enthusiasm to BR> write such >> JA> a tool. Anyone game ? >> >> JA> Jeremy. >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: http://lists.samba.org/mailman/listinfo/samba >> -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can anyone tell me what this means?
Jun 21 08:48:55 RedHat01 smbd[8226]: [2004/06/21 08:48:55, 0] lib/fault.c:fault_report(36) Jun 21 08:48:55 RedHat01 smbd[8226]: === Jun 21 08:48:55 RedHat01 smbd[8226]: [2004/06/21 08:48:55, 0] lib/fault.c:fault_report(37) Jun 21 08:48:55 RedHat01 smbd[8226]: INTERNAL ERROR: Signal 11 in pid 8226 (3.0.2-6.3E) Jun 21 08:48:55 RedHat01 smbd[8226]: Please read the appendix Bugs of the Samba HOWTO collection Jun 21 08:48:55 RedHat01 smbd[8226]: [2004/06/21 08:48:55, 0] lib/fault.c:fault_report(39) Jun 21 08:48:55 RedHat01 smbd[8226]: === Jun 21 08:48:55 RedHat01 smbd[8226]: [2004/06/21 08:48:55, 0] lib/util.c:smb_panic(1422) Jun 21 08:48:55 RedHat01 smbd[8226]: PANIC: internal error Jun 21 08:48:55 RedHat01 smbd[8226]: [2004/06/21 08:48:55, 0] lib/util.c:smb_panic(1430) Jun 21 08:48:55 RedHat01 smbd[8226]: BACKTRACE: 22 stack frames: Jun 21 08:48:55 RedHat01 smbd[8226]:#0 smbd(smb_panic+0x13f) [0x801a608f] Jun 21 08:48:55 RedHat01 smbd[8226]:#1 smbd [0x80191b48] Jun 21 08:48:55 RedHat01 smbd[8226]:#2 /lib/tls/libc.so.6 [0xb7264de8] Jun 21 08:48:55 RedHat01 smbd[8226]:#3 smbd(print_queue_status+0x186) [0x801c7246] Jun 21 08:48:56 RedHat01 smbd[8226]:#4 smbd(_spoolss_enumjobs+0x119) [0x800f9439] Jun 21 08:48:56 RedHat01 smbd[8226]:#5 smbd [0x800e7164] Jun 21 08:48:56 RedHat01 smbd[8226]:#6 smbd(api_rpcTNP+0x189) [0x8011ea09] Jun 21 08:48:56 RedHat01 smbd[8226]:#7 smbd(api_pipe_request+0xc8) [0x8011e788] Jun 21 08:48:56 RedHat01 smbd[8226]:#8 smbd [0x80117456] Jun 21 08:48:56 RedHat01 smbd[8226]:#9 smbd [0x801177e9] Jun 21 08:48:56 RedHat01 smbd[8226]:#10 smbd [0x80117a69] Jun 21 08:48:56 RedHat01 smbd[8226]:#11 smbd [0x80117ca8] Jun 21 08:48:56 RedHat01 smbd[8226]:#12 smbd(write_to_pipe+0x115) [0x80117be5] Jun 21 08:48:56 RedHat01 smbd[8226]:#13 smbd [0x8004bb01] Jun 21 08:48:56 RedHat01 smbd[8226]:#14 smbd(reply_trans+0x5ab) [0x8004c53b] Jun 21 08:48:56 RedHat01 smbd[8226]:#15 smbd [0x800901f0] Jun 21 08:48:56 RedHat01 smbd[8226]:#16 smbd [0x80090403] Jun 21 08:48:56 RedHat01 smbd[8226]:#17 smbd(process_smb+0xa6) [0x80090656] Jun 21 08:48:56 RedHat01 smbd[8226]:#18 smbd(smbd_process+0x192) [0x800913d2] Jun 21 08:48:56 RedHat01 smbd[8226]:#19 smbd(main+0x505) [0x8021d345] Jun 21 08:48:56 RedHat01 smbd[8226]:#20 /lib/tls/libc.so.6(__libc_start_main+0xf8) [0xb7252768] Jun 21 08:48:56 RedHat01 smbd[8226]:#21 smbd [0x80035a32] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Modify but not create permissions
I'm not sure if someone answered this already, but NFS incorporates _no security_ whatsoever, so any file you open on the remote server is opened with _root_ permissions, if I recall correctly. That means that, is you require no special authentication on Samba-level, there is no protection at file-level, either. Perhaps you should look into the Valid users Statement Good luck! -Oorspronkelijk bericht- Van: Bill Chmura [mailto:[EMAIL PROTECTED] Verzonden: woensdag 16 juni 2004 9:34 Aan: [EMAIL PROTECTED] Onderwerp: Re: [Samba] Modify but not create permissions So I figured out what the problem was... the local machine did not have my user with the same UID as the server... This is strange for a few reasons... In my fstab file I had always specified the UID and GID to connect as... Which had always worked. Now if it was an outright wrong thing, why did it let me create and stuff in the top of the share... but not in subdirectories. Is this a bug? I installed NFS earlier tonight to share between linux boxes. I still need samba for a few windows boxes so I have that working anyway. Well, I'm glad its working On Tuesday 15 June 2004 06:25 pm, Bill Chmura wrote: > I am still trying to figure out why samba wont let me create in > subdirectories > > I've tripple checked everything and a few things leapt out at me. > > *) I can modify a file inside a directory that I cannot create a file in. > I did not know it was possible under linux to do that. > > *) If I set all perms on 777 I can create. But neither 775 or 755 will > allow it. > > *) When I go into a mount through a terminal, and I do an ls -l I get raw > UID numbers back instead of actual owners. Is this normal? I could not > remember. > > The logs show me being accepted as UID 500 which is what the files and > directories are owned by > > I am still baffled by the being able to modify, but not delete or create... > > Any help would be greatly appreciated at this point! > > > > -- > > Bill Chmura > > w. http://www.fistfullofcode.com > w. http://www.explosivo.com > > -- > Without good motivation, science and technology, instead of helping, bring > more fear and threaten global destruction. Compassionate thought is very > important for humankind. > -His Holiness the Dalai Lama > > Wisdom does not mean knowledge but experiential understanding. Wisdom helps > you to change radically your habits and perceptions, as you discover the > constantly changing, interconnected nature of the whole of existence. > -Martine Batchelor, "Meditation For Life" > --- -- Bill Chmura Director of Internet Technology Explosivo ITG Wolcott, CT p: 888.560.YWEB (9932) e: [EMAIL PROTECTED] w. http://www.explosivo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problem with symlinks
This is because of the behavious of certain Office Applications (excel is especially guilty) It will notice that fact that another user owns the file. To rectify this, it will delete the file and re-write it. Because, in this case, you are using a symlink, you are deleting the symlink (the original file stays where it is) and saving the _new file_ the same place you had the symlink. Unfortunately, the only solution can think of is making a symlink to the directory the file is in, so the file itself can me _replaced_ If you use group shares, you will also notice, that windows grants only 700 rights (full user, but no group or world rights). This can be rectified in the smb.conf with the force create mask and force group mask settings. Also, keep in mind, that the DOS Hidden, system and read-only attributes are stored as unix _executable_ fags in the files. If you don't include these flags in your file mask, they will be stripped off. Good luck! -Oorspronkelijk bericht- Van: minnoce [mailto:[EMAIL PROTECTED] Verzonden: woensdag 16 juni 2004 17:55 Aan: [EMAIL PROTECTED] Onderwerp: [Samba] Problem with symlinks I'm using samba 3.0.4 compiled from sources on a linux box (RH 7.3). My smb.conf contains in a share section the setting: follow symlinks = yes In that share I created a symlink to a local file. When I open the symlink from Windows box (the symlink appear as a regular file) I access correctly the target file, but when I edit&save the file, sometime the symlink is deleted and a regular file with same name is created in place (as a duplicate of the target file). The behaviour seem's to be Windows specific editor's dependent: using UltraEdit all work fine, using other editors (e.g.: HTMLKit) the duplicated file is created... Why? Thanks in advance... Minnoce -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: Re[4]: [Samba] a better smbstatus for monitoring samba ?
Just a thought, but have you looked into the [net] functions lately You might be able to get some useful information with commands like net rpc file //open files net rap file //different command, same purpose net rap session //open sessions, does not seem to exist in rpc just my 2c -Oorspronkelijk bericht- Van: Collen Blijenberg [mailto:[EMAIL PROTECTED] Verzonden: donderdag 17 juni 2004 8:50 Aan: Becskei Robert CC: samba mailing list Onderwerp: Re[4]: [Samba] a better smbstatus for monitoring samba ? isn't there a smbstatus -u=, to show activities from 1 user ?? dunno, guess the -u is a way to sort out what a user is up to! i'll try to lookin to the rest.. l8r - Collen Blijenberg (Montessori Lyceum Herman Jordan) Wednesday, June 16, 2004, 3:02:13 PM, you wrote: BR> Hi, BR> well I think it should be able to run in a console, just like Midnight BR> Commander (so it's also usefull without X), BR> it should have a menu for info about the system, like cpu BR> usage, network card usage,memory, how many users are currently attached to BR> the system, up time. BR> A menu from which you can see that what user is attached to what share, and BR> if you press enter on the user name you can see what files are currently in BR> use. BR> It's almost like smbstatus, only that it's a bit more organized, and is BR> easier to view what is happening on the system in case someone causes BR> trouble it is easier to find what user had that file open. Also it would be BR> nice if in this same menu besides the username and what share that user is BR> using there would be information about user logon time. BR> Sincerely BR> Robert B BR> - Original Message - BR> From: "Collen Blijenberg " <[EMAIL PROTECTED]> BR> To: "Jeremy Allison" <[EMAIL PROTECTED]> BR> Cc: "samba mailing list" <[EMAIL PROTECTED]> BR> Sent: Wednesday, June 16, 2004 08:50 BR> Subject: Re[2]: [Samba] a better smbstatus for monitoring samba ? >> depends on it... >> what needs to be in the tool ??? >> what options, and all... >> >> (got a big holyday comming up, so got some time to crack!) >> >> l8r >> - >> Collen Blijenberg (Montessori Lyceum Herman Jordan) >> >> Wednesday, June 16, 2004, 3:26:43 AM, you wrote: >> >> JA> On Tue, Jun 15, 2004 at 09:56:04PM +0200, Becskei Robert wrote: >> >> Hello, >> >> >> >> does anyone know if there is a tool in existence that can >> >> monitor samba shares like smbstatus >> >> but is much more advanced (and runs in console) , I mean a tool that BR> has menues, some search >> >> options, and things sorted out nice. A Samba realtime monitor >> >> would be the best thing with lots >> >> of details and lots of options. >> >> >> >> >> >> I tried Swat, but that aint really a solution to watch who is >> >> connected to where, neither is smbstatus >> >> since when to many people are connected you can't see in >> >> realtime who is using what. And that I think >> >> is one major problem. >> >> >> >> I would like to have such a tool because I'm throwing the >> >> Novell File Server out and using a Whitebox 3.0EL >> >> instead. I wonder,...is there such a tool like Novell Monitor >> >> ... for linux ? I mean if there aint one for samba >> >> maybe another tool that is more advanced would be able to view >> >> who is connected to what ? what is their IP >> >> adress, what time did they logged on, what is the current system BR> status, etc... >> >> JA> No tool I know of currently. If anyone wants to write one (maybe a gui BR> tool >> JA> written in python ?) I'd be happy to integrate it into the source BR> code. >> >> JA> There are lots of admin options that could be added to Samba via TDB BR> messaging >> JA> to perform admin operations - we just need programmer enthusiasm to BR> write such >> JA> a tool. Anyone game ? >> >> JA> Jeremy. >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: http://lists.samba.org/mailman/listinfo/samba >> -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Browse list issues with Windows XP
The delay in XP might be due to XP using Direct Hosting, instead of NBT Some information about Windows Direct Hosting (port 445) can be found at: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q204279 Here you will see that, by disabling port 445 (direct hosting), all traffic reverts back to NBT. >From what I can see, Direct Hosting is no more than SMB over TCP/IP, instead of using NBT (NetBIOS over TCP) as an intermediary transport. Blocking Direct Hosting should not break anything (it is merely a 'short-cut') but, once it gets implemented, it should reduce overhead on server and network. -Oorspronkelijk bericht- Van: Mike Cisar [mailto:[EMAIL PROTECTED] Verzonden: woensdag 2 juni 2004 17:58 Aan: [EMAIL PROTECTED] Onderwerp: [Samba] Browse list issues with Windows XP To further the discussion (or lack thereof) of the browse list issues (systems not showing up in the browse list, even though their shares are accessable with //system/sharename) that 5 or 10 people on the list have been having over the past month or so... I was out to this client the other day, had the opportunity to try the few things that had been suggested, all to no avail. I then proceeded to join a new machine to the domain, after I had it all set up I happened to stumble into Network Neighborhood and to my shock and awe there was the new system showing up (along with the server which had always been visible). The other workstations are still not visible however. I went on to the server and ran smbtree and it happily listed the shares on the server, and on the new workstation... but no others. There have been no changes to the samba configuration, so that can safely be eliminated as the cause... likewise both the new and old machines have all updates applied, so that reduces (it's microsoft so can't guarantee that it eliminates completely) the chances that its caused by a microsoft patch. I have checked wins.dat and browse.dat (browse.txt, the exact name escapes me) and I can't see any obvious differences for the entries for the new machine vs. the existing systems. This should be relatively easy to troubleshoot now that I have working and non-working examples on the same server... if someone has suggestions of where to look? Is there anything in any of the .tdb files that would have any bearing on a machine showing in network neighborhood or not? A viewer to peek at those files and look for any differences at all? Any ideas? Thanks, > Mike < -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: films on Desktops and roaming profiles
http://www.microsoft.com/technet/prodtechnol/winntas/maintain/featusability/ prof_pol.mspx and http://www.winnetmag.com/Article/ArticleID/14888/14888.html Everything you EVER wanted to know, and oodles more. More info on policy templates: http://www.microsoft.com/office/ork/xp/appndx/appa18.htm -Oorspronkelijk bericht- Van: Keppler [mailto:[EMAIL PROTECTED] Verzonden: zaterdag 29 mei 2004 20:07 Aan: [EMAIL PROTECTED] Onderwerp: [Samba] Re: films on Desktops and roaming profiles ... or it knows some site that teaches as if it makes? "Adam Tauno Williams" <[EMAIL PROTECTED]> escreveu na mensagem news:[EMAIL PROTECTED] > > I'd like to ask you what do you limit Desktops syncing in case users > > put large files on them, e.g. films. > > > > Downloading / uploading such large files can generate lots of > > unnecessary traffic. Is there any kind of filtering possible ? > > Other solutions ? > > Via policies, just like with a Windows DC. > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] File already in use?
Do you, by chance run a virus scanner and Win2000 or WinXP? Windows 2000 and XP have a tendency to examine files in a directory when you open an Explorer window. This triggers the virus scanner, which, in turn, opens the file and keeps it locked until it has finished scanning the file. I have no experience with Linux virus scanners (I still scan on user-side only), but the same problem could apply on the Linux side. I hope this helps. Greetz, kit -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Using domain logons with 2 controllers and wireless LAN
Laptops are a pain, because they can catch a virus when outside the network and broadcast it on the inside. If you don't run a decent virus-scanner on all fronts and use a firewall, a copy of blaster from home might play havoc _inside_ the network. But, about your questions: 1) The way I solved it is by having the laptop detect what network it is logged into (by subnet mask) and mount shares automatically using: net use [drive]: \\[servername]\[sharename] /user:[username] [password] THIS WILL NOT LOG YOU ONTO THE DOMAIN ITSELF, but it will allow you to use shares and printers. Any Logon scripts will have to be called from this script. This will automatically authenticate you on the server, but it will show the user's password in the file, necessitating specific permissions on the boot-script. As an added bonus, it will allow you to log onto each server as a different user. You might need to enable the run-as service in your respective Windows version. For extra security, you can leave out the password and [net] will ask for it when it connects. Instead of auto-detecting, you could also use separate scripts for each location and have the user log on. (home.bat, office.bat) It is usually OK to simply close all programs and pull the plug, but it is not recommended, as some programs keep running in the background. If you specifically want the user to be able to log off, you ould use the command: Net use * /d This will disconnect the user from any servers. 2) see 1 3) I'm not too sure about XP, but 2K usually requires special apps to log you onyo the domain, which will only run after logging on. I have raised this issue with 3Com (guilty), but they refuse to comment. The trick is, to locate your Wireless settings in the registry and make sure those settings are loaded upon booting Windows. Seeing as the settings of my card are over 200 lines, I will not paste them here. They can be found by going to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\ And browse through the keys (the card name is listed among the settings) 4) If both ends have permanent IP's you could consider a low-cost VPN solution like Linksys' BEFVP41 (VPN Router) or ZyXEL's Prestige 650H series (DSL modem AND Router). Keep in mind, that VPN Routers and Firewalls don't mix well: you need to either use the VPN router AS firewall or consult with your network administrator. (there are also a few slow-link policies in Windows you could tinker with, but I can't recomment it). Well, sorry to go on like this, I hope this was of any use to you (or other people).# Cheers, Kit -- a copy-paste from the auto-detect script, totaling 5 different locations -- -= section cut =- :test4 echo HvA fail echo . ipconfig -all |find "10.1.1" >NUL if errorlevel 1 goto test5 if errorlevel 0 goto otter -= section cut =- :otter echo location Otter found! echo . echo merging registry... regedit /s otter.reg goto end -= section cut =- -- end of the copy-paste from the auto-detect script-- A full copy of the script was posted a few days ago and is available upon request. --Original Message -- -= section cut =- 1) What do I need to do in order to logon to my company network when I am at work, and logon to my home network when I am at home? They have different domain names. Do I need to join/leave the domains everytime before I can use the network shares? Or did I designed the network wrongly? 2) If it is not possible to join both domains in the same machine, what changes could I make to the network(s)? I am asking this question because I saw a pull down combo box in the Windows logon screen. 3) Can I logon using wireless LAN? 'coz someone told me that wireless LAN drivers have to be loaded and activated after logged on to the machine.. If this is possible, what nic and access points are needed? Or Perhaps could this be a limitation in Windows so that these wlan nic must be started after user logon? Could anyone having experience on this matter share with me? I would like to hear from both success and failed ones. 4) Is it possible to logon to my company network over Internet or whatever mechanism from remote places? so that I can gain access to those file shares when I am at home. Sorry to ask so many questions. I am a newbie to windows networking..and I hope these are not off-list questions. Thanks.. Cheers! mc. -- Original Message -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] SUSE 9.1 & Samba
I am not a fully qualified Pro at this, but there are a few caveats to windows / samba integration: Samba does not use encrypted passwords by default, but NT-based windows (4.0SP3+ 2000, XP, 2003), will use encrypted passwords by default. As you can imagine, the encrypted password does not match its plain-text original, thus causing a password failure. More info on this can be found in the Samba Documentation (even in SWAT) and on: http://samba.linuxbe.org/en/samba/learn/encryption.html The rest, unfortunately, I cannot help you with. Regards, Kit Gerrits -Oorspronkelijk bericht- Van: Art Fore [mailto:[EMAIL PROTECTED] Verzonden: woensdag 26 mei 2004 22:35 Aan: [EMAIL PROTECTED] Onderwerp: [Samba] SUSE 9.1 & Samba I still have not gotten samba client to work right on SUSE 9.1l. I finally got to join the domain, but it changed the smb.conf from ADS to Domain. If I do smbclient -L servername and put in my login and password, it comes back access denied. I have a couple of questions though that maybe someone can answer. The Servers are Win2K with Active Directory running. I know the domain controller and password werver is named mailman and can ping it. The security is with ldap. 1. Going to Yast, system, runlevel editor, it shows smb running. All of the documentation I read says smbd. Has this changed or is this something peculiar to SUSE? 2. From what I have read, it seams winbind is for PAM security. Is it also used for ldap? 3. Do I need winbind on this machine that is only a client? Art -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Merely Opening Excel Files Increments Last-Modification date on Samba Shares
I have had the same problem: Shared files, not owned by the user in question, were being deleted and re-written upon saving the file. Because Excel only gives user (not group) permission, it will muck up access for other users in the group. In my case, I was not enforcing anything (when the problem occurred) and my .conf only had the bare minimum of information, I also used method 3, but put a back-up in place by re-enforcing permissions at 3 am every morning. This enforced write mode and group, to make absolutely sure everything works. Kit -Oorspronkelijk bericht- Van: Eric Heintzberger [mailto:[EMAIL PROTECTED] Verzonden: dinsdag 25 mei 2004 0:28 Aan: Terry L. Eleiott CC: [EMAIL PROTECTED] Onderwerp: RE: [Samba] Merely Opening Excel Files Increments Last-Modificationdate on Samba Shares I have found the following regarding this problem: 1. It occurs only on files that (a) the user does not own AND (b) samba is forcing write permissions on (e.g. with the "force group" or "force create mode"). 2. Problem does *not* occur when "force create mode" and similar are left out of share definition, and you rely on the default standard 644 file modes and 755 directory modes. 3. Problem does *not* occur if you use the "force user" options, even if you also use "force group" and "force create mode" -- though these are porbably unnedded in that scenario. I opted for solution (3), because all valid users of the share in question need write access to all files. Though it results in a lack fine-grained access control. --- "Terry L. Eleiott" <[EMAIL PROTECTED]> wrote: > Has this issue, Excel file date modification being > updated upon opening and > closing without modification, been resolved? I am > experiencing the same > problem with samba 3.0.2-6.3E. > > Thanks, > Terry > > -Original Message- > From: > [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > On Behalf > Of Eric Heintzberger > Sent: Saturday, April 17, 2004 8:17 PM > To: RRuegner > Cc: [EMAIL PROTECTED] > Subject: Re: [Samba] Merely Opening Excel Files > Increments > Last-Modificationdate on Samba Shares > > Thanks for the information. The problems and > solutions > you cite *are* related, I think, because I have > found > that my problem occurs only on Excel files that the > user does not own -- an important fact I didn't see > before. > > --- RRuegner <[EMAIL PROTECTED]> wrote: > > Eric Heintzberger schrieb: > > > > > Thank you for responding to my post. > > > > > > As for your question, my concern is not that (as > > you > > > put it) "the date of last modification [is] the > > date > > > of the file". It is, rather, this: > > > > > > If today I do "cat file.txt" on a text file > whose > > > last-modifiation date is December 23, 2003, I > > would > > > not expect "ls -l file.txt" to display April 17, > > 2004 > > > as the last-modification date. > > > > > > Similarly, if right now I simply open, then > close > > an > > > xls file, without saving any changes, I would > not > > > expect its last-modification date to change to > > now. > > > > > > The last-modification date should not change as > a > > > result of just reading the file. There would > have > > to > > > be some writing too. > > > > > > Are you saying that MS-Excel is designed so that > > > reading an xls file in MS-excel actually writes > > > changes to the file, even if the end-user does > not > > > save or auto-save any changes? > > > > > > Regards, > > > > > > --- RRuegner <[EMAIL PROTECTED]> wrote: > > > > > >>Eric Heintzberger schrieb: > > >> > > >>>Hello Everyone! > > >>> > > >>>Perhaps some of you have some advice for > dealing > > >> > > >>with > > >> > > >>>this problem? I've done quite a bit of googling > > on > > >>>this one, but I can't find anything useful. > > >>> > > >>>Ever since I started using Samba as PDC, I have > > >> > > >>had > > >> > > >>>this problem: when users merely open MS-Excel > > >> > > >>files on > > >> > > >>>samba shares, the file's Last-Modification date > > > >> > > >>is > > >> > > >>>incremented to the current
RE: [Samba] Re: Windows XP machine not connecting to Samba 3.04 afterupgrade
Usually, problems with network access come from a lack of authentication. This springs from the fact, that users don't want to log on to \\server every time they log on. Also, you can't put it in an autoexec, because the laptop is not always at the office. I have found a little trick, allowing a laptop to recognize what network it is connected to, and responding accordingly. There are a few tricks: 1) determining location by ipconfig. (usually by recognizing subnet mask). 2) storing global variables in environment. (by importing them in the registry) 3) Setting preferences (defult printer, proxy, etc...) 4) mounting drives (with /user password, so it authenticates automagically) You can even use the global variables set by this script in other programs (a batch file that starts Outlook with the correct profile). http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B296192 -= The startup script =- echo off echo testing... c: cd \settings echo . ipconfig |find "10.0.4" >NUL if errorlevel 1 goto test2 if errorlevel 0 goto punter :test2 ipconfig |find "10.2.1." >NUL if errorlevel 1 goto test3 if errorlevel 0 goto hoflaan :test3 ipconfig |find "145.92" >NUL if errorlevel 1 goto test4 if errorlevel 0 goto hva :test4 ipconfig |find "10.1.1" >NUL if errorlevel 1 goto test5 if errorlevel 0 goto havendijk :test5 ipconfig |find "10.2.2." >NUL if errorlevel 1 goto test6 if errorlevel 0 goto westplein :test6 echo no location found! echo . echo merging registry... regedit /s xs4all.reg goto end :punter echo location Punter found! echo . echo merging registry... regedit /s punter.reg rem net use k: \\xbak\download if exist l:. net use l: /delete goto end :hoflaan echo location Hoflaan found! echo . echo merging registry... regedit /s hoflaan.reg if exist k:. echo unmounting drives... if exist k:. net use k: /delete >NUL rem net use l: \\2kotter01\gerrits net use p: \\piii450\media /user:X Y >NUL ping tbird -n 1 -w 100 |find "Reply" >NUL if errorlevel 1 goto end echo mounting drives... net use k: \\tbird\d$ >NUL goto end :havendijk echo location Havendijk found! echo . echo merging registry... set location=havendijk regedit /s havendijk.reg if exist k:. net use k: /delete if exist i:\hfnc.bat goto AlIngelogd net use i: \\2kotter01\install /user: net use l: \\2kotter01\gerrits rem net use h: \\xbak\download /user: Y goto end :hva echo location HvA found! echo . echo merging registry... regedit /s hva.reg if exist k:. net use k: /delete if exist l:. net use l: /delete goto end :westplein echo location Westplein found! echo . echo merging registry... set location=westplein regedit /s westplein.reg if exist i:. goto AlIngelogd net use * /d /y net use i: \\redhat01\kit /user: Y >nul net use j: \\redhat01\Algemeen >nul net use k: \\redhat01\NetApps >nul net use l: \\redhat01\install >nul net use w: \\redhat01\gerrits >nul net use x: \\ws-d01\backups /user: Y >nul rem net use h: \\xbak\download /user: Y goto end :AlIngelogd echo Already logged in! goto end :end echo all done! sleep 1 -= End startup script =- -= The .reg file =- Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Environment] "location"="westplein" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings] "ProxyEnable"=dword: [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] "Device"="WPL - LJ 5N,winspool,Ne00:" -= End .reg file =- -Oorspronkelijk bericht- Van: Wolfgang Riedmann [mailto:[EMAIL PROTECTED] Verzonden: maandag 24 mei 2004 11:19 Aan: [EMAIL PROTECTED] Onderwerp: [Samba] Re: Windows XP machine not connecting to Samba 3.04 afterupgrade Hi, as I wrote before: I'm not able to connect a Windows XP Pro notebook to a Samba 3.0.4 server. All the other machines (most Windows XP Pro, but also a few Windows 2000 and Windows 98) can connect without any problem. This one machine is not part of the NT domain because it needs to connect 1 or 2 times a week only, and is on the road most of the time. The machine could connect flawlessy when the server was Samba 2.2.8a, and even to 3.0.2. I have searched with Google the internet and the newsgroups, but couldn't find anything usable. I have set log level to 2 but nothing usable could be found. I have disabled packet signing on this machine - no change. I have tried other users. All users can connect from all machines, from this machine no user can connect. Wolfgang -- -- Wolfgang Riedmann -- Individuelle EDV-Lösungen - Soluzioni informatiche personalizzate -- I-39012 Meran, V. Laurin-Str. 2d -- http://www.riedmann.it - [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Pointer to ACL enabled Red Hat 9 kernel RPM?
Special Note: The ACL support added to the kernel in the first two public beta releases proved to be unstable and caused the kernel to regress. Red Hat has therefore removed that ACL support from the kernel for Red Hat Linux 9. http://www.redhat.com/archives/shrike-list/2003-July/msg00571.html -Oorspronkelijk bericht- Van: Michael St. Laurent [mailto:[EMAIL PROTECTED] Verzonden: maandag 24 mei 2004 18:12 Aan: '[EMAIL PROTECTED]' Onderwerp: [Samba] Pointer to ACL enabled Red Hat 9 kernel RPM? Does anyone know of an ACL/extended attributes enabled version of the Red Hat 9 kernel exist in RPM form? -- Michael St. Laurent Hartwell Corporation -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Doman Group in new version of samba
Actually, there is... What it means: The group NT group the user belongs to is not defined. As backup measure, Samba will give the Unix groupname. Groups are now maintained by the [net] command. [Taken from http://www.osnews.com/story.php?news_id=6684&page=2 ] net groupmap modify ntgroup="Domain Admins" unixgroup=admins net groupmap modify ntgroup="Domain Users" unixgroup=users net groupmap add ntgroup="Teachers" unixgroup=teachers net groupmap add ntgroup="Students" unixgroup=students Have fun! -Oorspronkelijk bericht- Van: Patrick Nelson [mailto:[EMAIL PROTECTED] Verzonden: zondag 16 mei 2004 20:43 Aan: Samba List Onderwerp: Re: [Samba] Doman Group in new version of samba On Sat, 2004-05-15 at 13:52, Patrick Nelson wrote: > New to list sorry if this has been address but didn't see it in recent > archives. > > FC1 with Samba 3.0.2 > > I had an older RH73 system running samba 2 on it and recent moved up to > FC and samba 3. Most everything transfered over well. I just took my > smb.comf from the old system and put it on the new system and then ran > swat making sure I didn't forget anything. Restarted server and wow... > It worked. However, I get errors in my .log files like: > > rpc_server/srv_util.c:get_domain_user_groups(372) > get_domain_user_groups: > primary gid of user [fa.bohema] is not a Domain group ! > get_domain_user_groups: You should fix it, NT doesn't like that : 2 > Time(s) > > I have tried to figure out how to correct this, but I'm at a loss... > > Anyone know what I'm missing? How about a specific place I could research? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] WINS / port 445 question
Some information about Windows Direct Hosting (port 445) can be found at: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q204279 Here you will see that, by disabling port 445 (direct hosting), all traffic reverts back to NBT. >From what I can see, Direct Hosting is no more than SMB over TCP/IP, instead of using NBT (NetBIOS over TCP) as an intermediary transport. Blocking Direct Hosting should not break anything (it is merely a 'short-cut') but, once it gets implemented, it should reduce overhead on server and network. Kit -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
