[Samba] smbldap-groupmod problem

2010-07-12 Thread Leonardo Carneiro - Veltrac
Hi, i'm having a problem with the smbldap-groupmod. I tried to change 
the users of some groups, i get an error message. The action indeed 
execute, as the users was removed or added from the group, but an error 
is throwed in the output:


   server:~# smbldap-groupmod -x user1 -m user2 testgroup
   Can't call method "get_value" on an undefined value at
   /usr/sbin/smbldap-groupmod line 146.

The line in question is:

   if ($group_entry->get_value('sambaSID') eq
   $user_entry->get_value('sambaPrimaryGroupSID')) {

What this means? Tks in advance.
--
Leonardo Carneiro
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba entry in ldap

2010-07-07 Thread Leonardo Carneiro - Veltrac

Hello everyone,

I have a object in the first level of my LDAP database. It's name is 
sambaDomainName=MyDomain. It's a sambaDomain class object.


When i installed LAM this week, it complained that there is no 
"ou=Domains" entry in my base, and offered to create it. All blue until 
here.


Now, when i try to access the samba3 configs of some user, it says that 
i do not have a samba3 domain, but i do have. I think that LAM only 
check the existance of a sambaDomain object inside the ou=Domains entry.


My question is: there is any problem in having the sambaDomainName 
object in the first level of the ldap tree instead of having it inside 
of the ou=Domains? Is this an LAM issue or something that can affect the 
operation of my domain in someway?


Tks in advance.
--
Leonardo Carneiro
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] sambaLogonScript [another] problem

2010-07-05 Thread Leonardo Carneiro - Veltrac
Hi there, i'm having another problem with the samba logon scripts. Like 
i said in the previous thread, in my smb.conf is defined to users use 
group defined logon scripts:


logon script = %G.bat

In the previous thread we also reached the conclusion that when the 
desired logon script of the users matches the logon script defined in 
the smb.conf, i can't have it defined in the ldap database, otherwise 
the script would not load.


But it happens that when i create a new user, the sambaLogonScript entry 
in the ldap database is set to %G.bat, exactly the entry i MUST NOT have 
to load the script. Since i'm expanding my network and tons of new users 
are coming, i trying to keep things very organized. I'll need to change 
this entry for every new user or there is a smarter way to do this?


I'm using Samba 3.4.7.

Tks in advance and sorry for my poor english.
--
Leonardo Carneiro
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba group members

2010-07-05 Thread Leonardo Carneiro - Veltrac

Hi everyone,

When i add someone to a group using

   smbldap-usermod -G +(groupname) (username)

it does not add the user to the group in the ldap backend:

   smbldap-groupshow (groupname) | grep memberUid

The new member is not there! I have to mannualy add it to the user to 
the groups again. This is the expected behavior or i'm missing something?

--
Leonardo Carneiro
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] sambaLogonScript problem [SOLVED]

2010-07-05 Thread Leonardo Carneiro - Veltrac


On 07/05/2010 08:21 AM, Leonardo Carneiro - Veltrac wrote:

On 07/03/2010 12:38 PM, Steve Thompson wrote:

On Sat, 3 Jul 2010, Miguel Medalha wrote:

One thing I once noticed was that the Samba account attribute 
"sambaLogonScript" must ONLY be set for a user if it DIFFERS from 
what is specified in "smb.conf". Otherwise, the script wouldn't run. 
I found this with the Samba 3.1x family, I don't know if that still 
applies.


I am using both Samba 3.0.33 and 3.5.1, and this does not apply to me 
for both versions. Every user has sambaLogonScript set to the same 
value as that which appears in smb.conf, and it does get run (using 
ldapsam).


Steve


Hi Steve and Miguel,

This is something that i haven't tried yet, and definitely worths a 
shot. I'll try and comment the results here.

Hello everyone,

Miguel tip worked for me. In my smb.conf i't specified that users should 
run "%G.bat", so i removed this attribute ( "smbldap-usermod -E "" user" 
) and WORKED. This is something that is documented somewhere and i missed?


It's interesting that this works for me in the 3.4.7 version and does 
not work for Steve in 3.0.33 and 3.5.1 versions.


Anyway, tks to everyone who help me to solve this riddle, specially to 
Miguel Medalha who gave me the killing tip.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] sambaLogonScript problem

2010-07-05 Thread Leonardo Carneiro - Veltrac

On 07/05/2010 08:28 AM, Miguel Medalha wrote:

Did you verify that end lines of the scripts are in DOS format (CR+LF)?

You can use unix2dos to convert them from Unix format (LF) to DOS 
format (CR+LF).


%G.bat is working correctly for me. Samba PDC over CentOS 5.5 with 
LDAP back end.


Pardon me for being so obvious, but of course your scripts have the 
exact same name as the groups, don't they?


Regards
Miguel
Hi Miguel, i doubt that this could be the problem, since when i specify 
the name of the script, it runs OK. And yes, the names of the scripts 
are ok. Tks again.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] sambaLogonScript problem

2010-07-05 Thread Leonardo Carneiro - Veltrac

On 07/03/2010 12:38 PM, Steve Thompson wrote:

On Sat, 3 Jul 2010, Miguel Medalha wrote:

One thing I once noticed was that the Samba account attribute 
"sambaLogonScript" must ONLY be set for a user if it DIFFERS from 
what is specified in "smb.conf". Otherwise, the script wouldn't run. 
I found this with the Samba 3.1x family, I don't know if that still 
applies.


I am using both Samba 3.0.33 and 3.5.1, and this does not apply to me 
for both versions. Every user has sambaLogonScript set to the same 
value as that which appears in smb.conf, and it does get run (using 
ldapsam).


Steve


Hi Steve and Miguel,

This is something that i haven't tried yet, and definitely worths a 
shot. I'll try and comment the results here.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] sambaLogonScript problem

2010-07-05 Thread Leonardo Carneiro - Veltrac

On 07/03/2010 12:22 PM, Chris Smith wrote:

On Sat, Jul 3, 2010 at 10:10 AM, Leonardo Carneiro - Veltrac
  wrote:
   

I'm having trouble in deploying by group sambaLogonScript.

My scripts consist only im mapping network folders.

I'm using Samba 3.4.7. Is there a way to debug this? The logs does not show
anything about the logon scripts.

All my users are set with "%G.bat" in the ldap backend, but the vast
majority of the users are not running the scripts, or running partially.
 

First debugging step, if you haven't done this already, would be to
verify a specifically named logon script, that is one that doesn't use
a variable, such as "testlogon.cmd" runs properly.

Chris
   

Hi Chris, tks for your answer.

I've already done that, and it works. In fact, that's the way is used to 
work, but i want to keep the things a little more organized, so i'm 
trying to setup by groups.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] sambaLogonScript problem

2010-07-03 Thread Leonardo Carneiro - Veltrac

On 07/03/2010 11:42 AM, Leonardo Carneiro - Veltrac wrote:

On 07/03/2010 11:23 AM, Leonardo Carneiro - Veltrac wrote:

On 07/03/2010 11:13 AM, John Drescher wrote:

On Sat, Jul 3, 2010 at 10:10 AM, Leonardo Carneiro - Veltrac
  wrote:

Hi everyone,

I'm having trouble in deploying by group sambaLogonScript.

My scripts consist only im mapping network folders.

I'm using Samba 3.4.7. Is there a way to debug this? The logs does 
not show

anything about the logon scripts.

All my users are set with "%G.bat" in the ldap backend, but the vast
majority of the users are not running the scripts, or running 
partially.



Put a pause command at the end of the login script. That way the
window will not close.

John

Hi John, tks for the idea. Is actually pretty useful.

But for the users who are not running the script at all, i wish i 
could see in the log files what script they are loading, or at least 
what they are trying to load.


Leonardo Carneiro


Hmm, it looks like that there are no users running the scripts 
partially. What happens is some users that have manually mapped their 
drives. None of the users are really running the scripts.

Tried with "%g.bat" instead of "%G.bat", but not worked.

Using the name of the group does works like a charm (like "dev.bat").
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] sambaLogonScript problem

2010-07-03 Thread Leonardo Carneiro - Veltrac

On 07/03/2010 11:23 AM, Leonardo Carneiro - Veltrac wrote:

On 07/03/2010 11:13 AM, John Drescher wrote:

On Sat, Jul 3, 2010 at 10:10 AM, Leonardo Carneiro - Veltrac
  wrote:

Hi everyone,

I'm having trouble in deploying by group sambaLogonScript.

My scripts consist only im mapping network folders.

I'm using Samba 3.4.7. Is there a way to debug this? The logs does 
not show

anything about the logon scripts.

All my users are set with "%G.bat" in the ldap backend, but the vast
majority of the users are not running the scripts, or running 
partially.



Put a pause command at the end of the login script. That way the
window will not close.

John

Hi John, tks for the idea. Is actually pretty useful.

But for the users who are not running the script at all, i wish i 
could see in the log files what script they are loading, or at least 
what they are trying to load.


Leonardo Carneiro


Hmm, it looks like that there are no users running the scripts 
partially. What happens is some users that have manually mapped their 
drives. None of the users are really running the scripts.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] sambaLogonScript problem

2010-07-03 Thread Leonardo Carneiro - Veltrac

On 07/03/2010 11:27 AM, John H Terpstra wrote:

On 07/03/2010 09:10 AM, Leonardo Carneiro - Veltrac wrote:
   

Hi everyone,

I'm having trouble in deploying by group sambaLogonScript.

My scripts consist only im mapping network folders.

I'm using Samba 3.4.7. Is there a way to debug this? The logs does not
show anything about the logon scripts.

All my users are set with "%G.bat" in the ldap backend, but the vast
majority of the users are not running the scripts, or running partially.

Tks in advance.
 

Leonardo,

How are you using a local account on the MS Windows client, or are your
users logging into the MS Windows client using the Samba user account?

- John T.
   

Hello Another John,

The accounts that i'm using are all Samba users accounts. I don't use 
roaming profiles, but i don't think this matters anything in this 
scenario, right?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] sambaLogonScript problem

2010-07-03 Thread Leonardo Carneiro - Veltrac

On 07/03/2010 11:13 AM, John Drescher wrote:

On Sat, Jul 3, 2010 at 10:10 AM, Leonardo Carneiro - Veltrac
  wrote:
   

Hi everyone,

I'm having trouble in deploying by group sambaLogonScript.

My scripts consist only im mapping network folders.

I'm using Samba 3.4.7. Is there a way to debug this? The logs does not show
anything about the logon scripts.

All my users are set with "%G.bat" in the ldap backend, but the vast
majority of the users are not running the scripts, or running partially.

 

Put a pause command at the end of the login script. That way the
window will not close.

John
   

Hi John, tks for the idea. Is actually pretty useful.

But for the users who are not running the script at all, i wish i could 
see in the log files what script they are loading, or at least what they 
are trying to load.


Leonardo Carneiro
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] sambaLogonScript problem

2010-07-03 Thread Leonardo Carneiro - Veltrac

Hi everyone,

I'm having trouble in deploying by group sambaLogonScript.

My scripts consist only im mapping network folders.

I'm using Samba 3.4.7. Is there a way to debug this? The logs does not 
show anything about the logon scripts.


All my users are set with "%G.bat" in the ldap backend, but the vast 
majority of the users are not running the scripts, or running partially.


Tks in advance.
--
Leonardo Carneiro
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] file "time-to-live"

2010-06-29 Thread Leonardo Carneiro - Veltrac
Hi Brian, tks for your answer. I'm confident that my goal could be 
achieved through the use of some third-party tool, like a script or 
something like it, like you sugested. But what i really need to know is 
if there is some feature in samba that would allow me to do just that.


But tks anyway for your answer.


On 06/29/2010 11:49 AM, Brian Cuttler wrote:

You could write something to check file create times and
delete files older than 36 hours, and run if from cron
several times per day.

I'd suggest # find, but it doesn't have the granularity
you are looking for, you could run it at 00:01 and remove
files there where 2 days old.

I did somethign similar on a VMS system I was managing, worked
well until some enterprising student found (I don't believe
they wrote it themselves) a program to reset the time stamp
on their files (which your users may start doing as well, perhaps
using # touch). At which point I started looking for files with
creation dates in the future... many users of the date reset
program wheren't quite as smart as they thought they where.




On Tue, Jun 29, 2010 at 11:32:52AM -0300, Leonardo Carneiro - Veltrac wrote:
   

Hi everyone,

There is a way to make files being automatically deleted some time after
they have been created?
I know that, with some scripting wizardry i could achieve this, but i
wanna know if samba has this kind of feature.

I have a temp folder that users insist in use like a backup folder, so i
want to files to be deleted 24 hours after they have been created.

I cannot just delete everything at midnight because this folder is used
in full time, so if a user create a file at 23h59, it would be deleted a
minute later.

Sorry for my poor english and tks in advance.
--
Leonardo Carneiro
--
 

---
Brian R Cuttler brian.cutt...@wadsworth.org
Computer Systems Support(v) 518 486-1697
Wadsworth Center(f) 518 473-6384
NYS Department of HealthHelp Desk 518 473-077

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] file "time-to-live"

2010-06-29 Thread Leonardo Carneiro - Veltrac

Hi everyone,

There is a way to make files being automatically deleted some time after 
they have been created?
I know that, with some scripting wizardry i could achieve this, but i 
wanna know if samba has this kind of feature.


I have a temp folder that users insist in use like a backup folder, so i 
want to files to be deleted 24 hours after they have been created.


I cannot just delete everything at midnight because this folder is used 
in full time, so if a user create a file at 23h59, it would be deleted a 
minute later.


Sorry for my poor english and tks in advance.
--
Leonardo Carneiro
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] new users, new group, can't access share

2010-05-12 Thread Leonardo Carneiro - Veltrac

Leonardo Carneiro - Veltrac wrote:

Leonardo Carneiro - Veltrac wrote:
Hi everyone. I have a Samba 3.4.7 (bpo) on a debian box running as 
PDC with a LDAP backend. i have added a new group, 2 new users and 
created a new group share for them, but by some unknown reason they 
cannon access the share. the client is running windows vista. here's 
what i did:


   smbldap-groupadd -a office
   smbldap-useradd -a -m user1
   smbldap-useradd -a -m user2
   smbldap-passwd user1
   smbldap-passwd user2
   smbldap-usermod -G +office user1
   smbldap-usermod -G +office user2

and added the following entry to my smb.conf:

   [office]
   writeable = yes
   map acl inherit = yes
   inherit permissions = yes
   path = /home/grupos/office
   force directory mode = 02777
   force create mode = 0777
   create mask = 0777
   directory mask = 02777
   valid users = @office

here is the folder permissions:

   fileserver:~# ls -ld /home/grupos/office/
   drwxrwx--- 2 root office 4096 2010-05-12 09:30 /home/grupos/office/

did i missed something?

Tks in advance.
I forgot to tell, this particular machine has not joined the domain, 
but this never has been a problem with other machines so far.
Giving full permission to the folder (chmod -R +rwx /home/grupos/office) 
permit the user to access, but i rather not use like this. There is 
another way out?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] new users, new group, can't access share

2010-05-12 Thread Leonardo Carneiro - Veltrac

Leonardo Carneiro - Veltrac wrote:
Hi everyone. I have a Samba 3.4.7 (bpo) on a debian box running as PDC 
with a LDAP backend. i have added a new group, 2 new users and created 
a new group share for them, but by some unknown reason they cannon 
access the share. the client is running windows vista. here's what i did:


   smbldap-groupadd -a office
   smbldap-useradd -a -m user1
   smbldap-useradd -a -m user2
   smbldap-passwd user1
   smbldap-passwd user2
   smbldap-usermod -G +office user1
   smbldap-usermod -G +office user2

and added the following entry to my smb.conf:

   [office]
   writeable = yes
   map acl inherit = yes
   inherit permissions = yes
   path = /home/grupos/office
   force directory mode = 02777
   force create mode = 0777
   create mask = 0777
   directory mask = 02777
   valid users = @office

here is the folder permissions:

   fileserver:~# ls -ld /home/grupos/office/
   drwxrwx--- 2 root office 4096 2010-05-12 09:30 /home/grupos/office/

did i missed something?

Tks in advance.
I forgot to tell, this particular machine has not joined the domain, but 
this never has been a problem with other machines so far.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] new users, new group, can't access share

2010-05-12 Thread Leonardo Carneiro - Veltrac
Hi everyone. I have a Samba 3.4.7 (bpo) on a debian box running as PDC 
with a LDAP backend. i have added a new group, 2 new users and created a 
new group share for them, but by some unknown reason they cannon access 
the share. the client is running windows vista. here's what i did:


   smbldap-groupadd -a office
   smbldap-useradd -a -m user1
   smbldap-useradd -a -m user2
   smbldap-passwd user1
   smbldap-passwd user2
   smbldap-usermod -G +office user1
   smbldap-usermod -G +office user2

and added the following entry to my smb.conf:

   [office]
   writeable = yes
   map acl inherit = yes
   inherit permissions = yes
   path = /home/grupos/office
   force directory mode = 02777
   force create mode = 0777
   create mask = 0777
   directory mask = 02777
   valid users = @office

here is the folder permissions:

   fileserver:~# ls -ld /home/grupos/office/
   drwxrwx--- 2 root office 4096 2010-05-12 09:30 /home/grupos/office/

did i missed something?

Tks in advance.
--
Leonardo Carneiro
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Upgrade from Vista to 7 + samba = error [SOLVED]

2010-04-26 Thread Leonardo Carneiro - Veltrac
Sorry from my lack of reading. The problem got solved by ensuring that 
the "requirestrongkey" was set to '1'.


Tks



Leonardo Carneiro - Veltrac wrote:

Hello everyone,

I'm using Ldap + Samba PDC 3.4.7 in a Debian Lenny machine 
(backported). I've been able add successfully 3 hosts with windows 7 
on my domain. Now i upgraded a notebook from windows vista to windows 7.


I could not log on the domain (the trust relationship was broken), So 
i tried to remove and re-add (after applying the registry patch file) 
the machine in the domain (several times), but i still cannot log in 
the domain.


Here's the some log:

[2010/04/26 17:12:03,  2] passdb/pdb_ldap.c:571(init_sam_from_ldap)
 init_sam_from_ldap: Entry found for user: tecnologia001$
[2010/04/26 17:12:03,  2] passdb/pdb_ldap.c:2434(init_group_from_ldap)
 init_group_from_ldap: Entry found for group: 515
[2010/04/26 17:12:03,  2] 
libsmb/credentials.c:223(netlogon_creds_server_check)

 netlogon_creds_server_check: credentials check failed.
[2010/04/26 17:12:03,  0] 
rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3)
 _netr_ServerAuthenticate3: netlogon_creds_server_check failed. 
Rejecting auth request from client TECNOLOGIA001 machine account 
TECNOLOGIA001$



What can i do to solve this? Tks in advance.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Upgrade from Vista to 7 + samba = error

2010-04-26 Thread Leonardo Carneiro - Veltrac

Hello everyone,

I'm using Ldap + Samba PDC 3.4.7 in a Debian Lenny machine (backported). 
I've been able add successfully 3 hosts with windows 7 on my domain. Now 
i upgraded a notebook from windows vista to windows 7.


I could not log on the domain (the trust relationship was broken), So i 
tried to remove and re-add (after applying the registry patch file) the 
machine in the domain (several times), but i still cannot log in the domain.


Here's the some log:

[2010/04/26 17:12:03,  2] passdb/pdb_ldap.c:571(init_sam_from_ldap)
 init_sam_from_ldap: Entry found for user: tecnologia001$
[2010/04/26 17:12:03,  2] passdb/pdb_ldap.c:2434(init_group_from_ldap)
 init_group_from_ldap: Entry found for group: 515
[2010/04/26 17:12:03,  2] 
libsmb/credentials.c:223(netlogon_creds_server_check)

 netlogon_creds_server_check: credentials check failed.
[2010/04/26 17:12:03,  0] 
rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3)
 _netr_ServerAuthenticate3: netlogon_creds_server_check failed. 
Rejecting auth request from client TECNOLOGIA001 machine account 
TECNOLOGIA001$



What can i do to solve this? Tks in advance.
--

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba over VPN

2010-04-22 Thread Leonardo Carneiro - Veltrac
The W2K3 server is the VPN client or is a host behind a vpn client that 
have a route to the remote network? Is the server IS the vpn client, 
does the connection is being made by a service (prior to the user login) 
or you just connect to the VPN after login?



Gaiseric Vandal wrote:
How do the clients get IP addresses?   You could try adding the WINS 
server value to the client ip address (either statically or via 
DHCP.)  Then they should be able to get the necessary netbios name 
info even tho they are on a separate subnet.


Why do you have the DC "distant"  from the clients that it supports?





On 04/22/2010 09:41 AM, Mike A. Leonetti wrote:

Yeah.  I don't think it's the VPN blocking traffic.  I think my WINS
server is not functioning properly.  I'll keep working at it.

Daniel Müller wrote:
  

Are you sure,

I thought with ipsec there could be netbios bypassing the tunnel.
Shares and dns are always working.



---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---

-Ursprüngliche Nachricht-
Von: Mike A. Leonetti [mailto:mleone...@evolutionce.com]
Gesendet: Mittwoch, 14. April 2010 16:47
An: muel...@tropenklinik.de
Cc: samba Mailing
Betreff: Re: AW: [Samba] Samba over VPN

Daniel,

I'm using ipsec for a VPN.  Since all shares are working and name
resolution all netbios packets seem to be traversing the VPN no 
problem.


Thanks.

Daniel Müller wrote:



Hello,

as far I know you need a vpn with netbios  enabled. This can be 
done witch

openvpn in briding mode. Or with a router having this option.

Greetings
Daniel

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---

-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org 
[mailto:samba-boun...@lists.samba.org]


   

Im



Auftrag von Mike A. Leonetti
Gesendet: Dienstag, 13. April 2010 22:27
An: Samba Mailing
Betreff: [Samba] Samba over VPN

Have a 2003 server located outside of the Domain network over a VPN.
The server originally existed inside the network (10.1.1.0/24) but now
exists on 10.10.12.0/24.  I can access shares over the VPN to the 
domain
controller, but when I try to log in as a domain user it says the 
domain

is unavailable.

I added the domain controller as a WINS server on the 2003 server.
nbtstat -c on the 2003 does list the domain controller and the domain.

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>nbtstat -c

Local Area Connection 2:
Node IpAddress: [10.10.12.244] Scope Id: []

   NetBIOS Remote Cache Name Table

 Name  Type   Host AddressLife [sec]
 
 CRCOMPUTER<1C>   GROUP   10.1.1.1390
 CRCOMPUTER<1B>   UNIQUE  10.1.1.1387
 FORTISSIMO<20>   UNIQUE  10.1.1.1430

C:\Documents and Settings\Administrator>

Is there a way I can test the WINS server to definitely make sure it's
working?  Is it that SAMBA isn't broadcasting itself over the 
10.10.12.0

(VPN) network?


   


 



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Windows 7 and samba 3.0.28

2010-04-16 Thread Leonardo Carneiro - Veltrac

No, you didn't searched. Go to google and try "samba windows7"



vishesh kumar wrote:

Dear all
 May be this question asked earlier in list but i didn't able to search
exact . I have samba+ldap domain setup on RHEL 5.1 and samba version is
3.0.28. Today i got a windows 7 system , but i am not able to join that
system in our samba+ldap domain. Do i need to do any registry tweaking. I
can't upgrade own samba version beyond 3.0.33 because this maximum version i
get if i update my system to RHEL 5.5.

Thanks
  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Compile Samba 3.5 for lenny

2010-04-09 Thread Leonardo Carneiro - Veltrac
You can use the backports repo to install samba 3.4 and add Windows 7 
machines, also windows Vista machines.


Also: *http://tinyurl.com/y9cbaxc*



Eliano Leão wrote:

Hi.

I need adding machines with Windows Vista in my domain.
My system:Debian Lenny ,Samba 3.2.15 and LDAP.
How to compiler Samba 3.5 for Lenny?
how to start samba after compiled?

Thanks.

Eliano
  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Migration from 3.0.23d to 3.4.5 failed

2010-03-24 Thread Leonardo Carneiro - Veltrac
After a migration from 3.2.5 to 3.4.7 i'm still having issues. My 
windows XP users randomly loses their access to the server and cannot 
open the share list. =S




Volker Lendecke wrote:

On Wed, Mar 24, 2010 at 05:39:15PM +0100, Bastien Semene wrote:
  

Yes I'm using this one.

Actually the module has been upgraded for 3.4 (and 3.5) in February 2010  
: http://sourceforge.net/projects/pdbsql/files/
I plan to switch to another backend at short term, but I can't do it now  
as all my services uses this backend currently, and I need to upgrade  
Samba service to integrate Windows 7 workstations.


Anyway I don't think that it is the source of the problem according to  
the tests I made with pdbedit in my previous mail (but I'm a newbie in  
Samba services).
If you can point me a test to confirm (or unconfirm) that this module is  
the problem, I'll be glad.



Ok, what we need then is a debug level 10 log of smbd that
you can't connect to.

Volker
  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ham,Re: samba PDC upgrade from 3.2.5 to 3.4.7

2010-03-23 Thread Leonardo Carneiro - Veltrac

Hi John. It worked well just before the upgrade. I'm not saying that

this is correct, but is the reason why users aren't accessing? Also, 
should'n this give some specific error in the logs?


Tks in advance.

John H Terpstra wrote:

On 03/23/2010 02:35 PM, Leonardo Carneiro - Veltrac wrote:
  

Hi Dale and others. I had already checked the release notes. Only users
in eth0 (192.168.0.x) are having trouble. Here is some info and some logs:

smb.conf:


   [global]
   workgroup = DOMINIO
   netbios name = DOMINIO



It is not at all surprizing that users are having difficulty accessing
this server!  It's workgroup name and hostname are the SAME!

Please read the Samba-HOWTO.  These two names MUST differ.

What you have is broken.

- John T.


  

   server string = Samba Server
   hosts allow = 192.168.1. 192.168.0. 127.
   smb ports = 139
   load printers = no
   log file = /var/log/samba/%m.log
   max log size = 50
   log level = 2 winbind:3
   security = user
   encrypt passwords = true
   username map = /etc/samba/smbusers
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   interfaces = eth0 eth1
   local master = yes
   os level = 90
   domain master = yes
   preferred master = yes
   domain logons = yes
   logon script = %G.bat
   logon path =
   name resolve order = wins bcast lmhosts
   wins support = yes
   dns proxy = no
   ldap passwd sync = yes
   ldap ssl = off
   ldap delete dn = yes
   passdb backend = ldapsam:ldap://127.0.0.1/
   ldap admin dn = cn=root,dc=dominio,dc=com,dc=br
   ldap suffix = dc=dominio,dc=com,dc=br
   ldap group suffix = ou=Grupos
   ldap user suffix = ou=Usuarios
   ldap machine suffix = ou=Computadores
   ldap idmap suffix = ou=ldapidmapsuffix
   idmap backend = ldap://127.0.0.1
   idmap alloc backend = ldap
   idmap alloc config : ldap_user_dn = cn=root,dc=dominio,dc=com,dc=br
   idmap alloc config : ldap_base_dn =
   ou=Usuarios,dc=dominio,dc=com,dc=br
   idmap alloc config : ldap_url = ldap://127.0.0.1
   idmap uid = 1-2
   idmap gid = 1-2
   enable privileges = yes
   nt acl support = yes
   add machine script = /usr/sbin/smbldap-useradd -w "%u"
   add user script = /usr/sbin/smbldap-useradd -m "%u"
   delete user script = /usr/sbin/smbldap-userdel "%u"
   add group script = /usr/sbin/smbldap-groupadd -p "%g"
   delete group script = /usr/sbin/smbldap-groupdel "%g"
   add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
   delete user from group script = /usr/sbin/smbldap-groupmod -x
   "%u" "%g"
   set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
   dos charset = CP850
   Unix charset = ISO8859-1
   admin users = root
   time server = yes
   template shell = /bin/false
   winbind use default domain = no
   map acl inherit = Yes





Dale Schroeder wrote:


On 03/23/2010 1:48 PM, Leonardo Carneiro - Veltrac wrote:
  

Also, i found out that only users running windows xp in one of the
two interfaces that samba is being accessed are having this trouble.

Leonardo Carneiro - Veltrac wrote:


Hello everyone.

Yesterday i did an almost painless upgrade from samba pdc from 3.2.5
to 3.4.7. I'm running in a Debian Lenny (upgraded from the original
package to the backported one).

After a few tweaks i found on the web my users, including those who
run win7, where able to log in the domain. But now the cannot access
the shared folders on the server. Some users can't even open the
server share list.

There is any major change that prevent users to access the shares
that i'm skipping it?

Tks in advance and sorry for my poor english.
  

You could check the release notes for changes:
http://www.samba.org/samba/history/ ,
or consider posting your smb.conf.

Dale

  



  




--

*Leonardo de Souza Carneiro*
*Veltrac - Tecnologia em Logística.*
lscarne...@veltrac.com.br <mailto:lscarne...@veltrac.com.br>
http://www.veltrac.com.br <http://www.veltrac.com.br/>
/Fone Com.: (43)2105-5011/
/R. Pará 162 - CENTRO/
/Londrina- PR/
/Cep: 86010-450/

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] usuários não consegues acessar pastar compartilhadas após upgrade do samba

2010-03-23 Thread Leonardo Carneiro - Veltrac

sorry, wrong list

Leonardo Carneiro - Veltrac wrote:

Oi Fábio.

Pelo IP também não acessa. A minha suspeita de que era um problema 
ligado a interface está errada. Aleatóriamente usuários nas duas 
interfaces perdem o acesso. Ainda assim, somente usuários com Windows 
XP tem esse problema. Vou testar suas indicações.


Fábio Rabelo wrote:



2010/3/23 Leonardo Carneiro - Veltrac <mailto:lscarne...@veltrac.com.br>>


Não existem regras de firewall para nenhuma interface. Tenho as
seguinte regra sobre interfaces e redes:

hosts allow = 192.168.0. 192.168.1. 127.
interfaces = eth0 eth1


E estas linhas acima estão no smb.conf ?!?

Se sim, o Sr. tem que acrescentar o loopback

interfaces = lo eth1 eth2

e a linha

bind interfaces only = yes

TEM que existir


Uma pergunta, se o Sr. tentar acessar o compartilhamento usando o ip 
ele coneta ?


Se a resposta for sim, o Sr. pode estar com problemas de resolução de 
nomes, já tentou colocar esta linha no smb.conf :


wins support = yes

Fábio Rabelo


Não localizei nenhum erro nos logs. Os usuários não conseguem nem
acessar a lista de shares. Ao tentar acessar \\[ip_do_server], já
recebo a mensagem de caminho de rede não encontrado.



Fábio Rabelo wrote:

Existem várias possíveis causas, vamos tentar duas delas :

O Sr. verificou as regras do firewall, se são idênticas para
ambas as placas ??

E se o Sr. tem alguma coisa assim no seu smb.conf :

interfaces = eth1, lo
bind interfaces only = yes

Se sim, amas as placas de rede TEM que estar presentes na
primeira linha .

E a "dica" básica de todos os dias, o Sr. já verificou se existe
alguma msg de erro no log ?!?


Fábio Rabelo


    2010/3/23 Leonardo Carneiro - Veltrac mailto:lscarne...@veltrac.com.br>>

Olá pessoALL,

Fiz um upgrade quase 'painless' do samba 3.2.5 para a versão
3.4.7 do backports, para permitir máquinas com windows 7 no
domínio. Após algumas pequenas mudanças, todos estavam
logando normalmente no domínio. Porém, vários usuários não
conseguem acessar as pastas compartilhadas.

Este samba atende em duas interfaces (eth0 e eth1) com duas
subredes diferentes. Em uma interface, todos estão acessando
normal. Na outra, os clientes com windows xp não conseguem
nem abrir a lista de shares do servidor.

O que pode estar errado?


-- To UNSUBSCRIBE, email to
debian-user-portuguese-requ...@lists.debian.org
<mailto:debian-user-portuguese-requ...@lists.debian.org>
with a subject of "unsubscribe". Trouble? Contact
listmas...@lists.debian.org 
<mailto:listmas...@lists.debian.org>
Archive: 
http://lists.debian.org/4ba90c70.2020...@veltrac.com.br






--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] usuários não consegues acessar pastar compartilhadas após upgrade do samba

2010-03-23 Thread Leonardo Carneiro - Veltrac

Oi Fábio.

Pelo IP também não acessa. A minha suspeita de que era um problema 
ligado a interface está errada. Aleatóriamente usuários nas duas 
interfaces perdem o acesso. Ainda assim, somente usuários com Windows XP 
tem esse problema. Vou testar suas indicações.


Fábio Rabelo wrote:



2010/3/23 Leonardo Carneiro - Veltrac <mailto:lscarne...@veltrac.com.br>>


Não existem regras de firewall para nenhuma interface. Tenho as
seguinte regra sobre interfaces e redes:

hosts allow = 192.168.0. 192.168.1. 127.
interfaces = eth0 eth1


E estas linhas acima estão no smb.conf ?!?

Se sim, o Sr. tem que acrescentar o loopback

interfaces = lo eth1 eth2

e a linha

bind interfaces only = yes

TEM que existir


Uma pergunta, se o Sr. tentar acessar o compartilhamento usando o ip 
ele coneta ?


Se a resposta for sim, o Sr. pode estar com problemas de resolução de 
nomes, já tentou colocar esta linha no smb.conf :


wins support = yes

Fábio Rabelo


Não localizei nenhum erro nos logs. Os usuários não conseguem nem
acessar a lista de shares. Ao tentar acessar \\[ip_do_server], já
recebo a mensagem de caminho de rede não encontrado.



Fábio Rabelo wrote:

Existem várias possíveis causas, vamos tentar duas delas :

O Sr. verificou as regras do firewall, se são idênticas para
ambas as placas ??

E se o Sr. tem alguma coisa assim no seu smb.conf :

interfaces = eth1, lo
bind interfaces only = yes

Se sim, amas as placas de rede TEM que estar presentes na
primeira linha .

E a "dica" básica de todos os dias, o Sr. já verificou se existe
alguma msg de erro no log ?!?


Fábio Rabelo


    2010/3/23 Leonardo Carneiro - Veltrac mailto:lscarne...@veltrac.com.br>>

Olá pessoALL,

Fiz um upgrade quase 'painless' do samba 3.2.5 para a versão
3.4.7 do backports, para permitir máquinas com windows 7 no
domínio. Após algumas pequenas mudanças, todos estavam
logando normalmente no domínio. Porém, vários usuários não
conseguem acessar as pastas compartilhadas.

Este samba atende em duas interfaces (eth0 e eth1) com duas
subredes diferentes. Em uma interface, todos estão acessando
normal. Na outra, os clientes com windows xp não conseguem
nem abrir a lista de shares do servidor.

O que pode estar errado?


-- 
To UNSUBSCRIBE, email to

debian-user-portuguese-requ...@lists.debian.org
<mailto:debian-user-portuguese-requ...@lists.debian.org>
with a subject of "unsubscribe". Trouble? Contact
listmas...@lists.debian.org <mailto:listmas...@lists.debian.org>
Archive: http://lists.debian.org/4ba90c70.2020...@veltrac.com.br





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ham,Re: samba PDC upgrade from 3.2.5 to 3.4.7

2010-03-23 Thread Leonardo Carneiro - Veltrac
Hi Dale and others. I had already checked the release notes. Only users 
in eth0 (192.168.0.x) are having trouble. Here is some info and some logs:


smb.conf:


   [global]
   workgroup = DOMINIO
   netbios name = DOMINIO
   server string = Samba Server
   hosts allow = 192.168.1. 192.168.0. 127.
   smb ports = 139
   load printers = no
   log file = /var/log/samba/%m.log
   max log size = 50
   log level = 2 winbind:3
   security = user
   encrypt passwords = true
   username map = /etc/samba/smbusers
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   interfaces = eth0 eth1
   local master = yes
   os level = 90
   domain master = yes
   preferred master = yes
   domain logons = yes
   logon script = %G.bat
   logon path =
   name resolve order = wins bcast lmhosts
   wins support = yes
   dns proxy = no
   ldap passwd sync = yes
   ldap ssl = off
   ldap delete dn = yes
   passdb backend = ldapsam:ldap://127.0.0.1/
   ldap admin dn = cn=root,dc=dominio,dc=com,dc=br
   ldap suffix = dc=dominio,dc=com,dc=br
   ldap group suffix = ou=Grupos
   ldap user suffix = ou=Usuarios
   ldap machine suffix = ou=Computadores
   ldap idmap suffix = ou=ldapidmapsuffix
   idmap backend = ldap://127.0.0.1
   idmap alloc backend = ldap
   idmap alloc config : ldap_user_dn = cn=root,dc=dominio,dc=com,dc=br
   idmap alloc config : ldap_base_dn =
   ou=Usuarios,dc=dominio,dc=com,dc=br
   idmap alloc config : ldap_url = ldap://127.0.0.1
   idmap uid = 1-2
   idmap gid = 1-2
   enable privileges = yes
   nt acl support = yes
   add machine script = /usr/sbin/smbldap-useradd -w "%u"
   add user script = /usr/sbin/smbldap-useradd -m "%u"
   delete user script = /usr/sbin/smbldap-userdel "%u"
   add group script = /usr/sbin/smbldap-groupadd -p "%g"
   delete group script = /usr/sbin/smbldap-groupdel "%g"
   add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
   delete user from group script = /usr/sbin/smbldap-groupmod -x
   "%u" "%g"
   set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
   dos charset = CP850
   Unix charset = ISO8859-1
   admin users = root
   time server = yes
   template shell = /bin/false
   winbind use default domain = no
   map acl inherit = Yes





Dale Schroeder wrote:

On 03/23/2010 1:48 PM, Leonardo Carneiro - Veltrac wrote:
Also, i found out that only users running windows xp in one of the 
two interfaces that samba is being accessed are having this trouble.


Leonardo Carneiro - Veltrac wrote:

Hello everyone.

Yesterday i did an almost painless upgrade from samba pdc from 3.2.5 
to 3.4.7. I'm running in a Debian Lenny (upgraded from the original 
package to the backported one).


After a few tweaks i found on the web my users, including those who 
run win7, where able to log in the domain. But now the cannot access 
the shared folders on the server. Some users can't even open the 
server share list.


There is any major change that prevent users to access the shares 
that i'm skipping it?


Tks in advance and sorry for my poor english.
You could check the release notes for changes: 
http://www.samba.org/samba/history/ ,

or consider posting your smb.conf.

Dale


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba PDC upgrade from 3.2.5 to 3.4.7

2010-03-23 Thread Leonardo Carneiro - Veltrac
Also, i found out that only users running windows xp in one of the two 
interfaces that samba is being accessed are having this trouble.


Leonardo Carneiro - Veltrac wrote:

Hello everyone.

Yesterday i did an almost painless upgrade from samba pdc from 3.2.5 
to 3.4.7. I'm running in a Debian Lenny (upgraded from the original 
package to the backported one).


After a few tweaks i found on the web my users, including those who 
run win7, where able to log in the domain. But now the cannot access 
the shared folders on the server. Some users can't even open the 
server share list.


There is any major change that prevent users to access the shares that 
i'm skipping it?


Tks in advance and sorry for my poor english.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba PDC upgrade from 3.2.5 to 3.4.7

2010-03-23 Thread Leonardo Carneiro - Veltrac

Hello everyone.

Yesterday i did an almost painless upgrade from samba pdc from 3.2.5 to 
3.4.7. I'm running in a Debian Lenny (upgraded from the original package 
to the backported one).


After a few tweaks i found on the web my users, including those who run 
win7, where able to log in the domain. But now the cannot access the 
shared folders on the server. Some users can't even open the server 
share list.


There is any major change that prevent users to access the shares that 
i'm skipping it?


Tks in advance and sorry for my poor english.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba