[Samba] logon script question

2004-03-15 Thread Lukas Meyer
Hi list

I'm wondering if it and how it is possible to add printers to a 
workstation with a logon script like mounting shares. I can't find 
anything about this on the inetnet so is this possible?

regards
lm
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] add machine script problem

2004-03-11 Thread Lukas Meyer
Hello

I set up a Samba 3 PDC with ldap backend. I created an script that adds 
machine accounts. First it adds the machine account to /etc/passwd and 
then it creates the user in ldap with smbpasswd -a -m machine.

If I run the script by hand, it works and the account has been added. 
After that I can join the domain without any problems. Now I want to 
make this machine account creation on the fly. So I added the script to 
smb.conf as add user script = /path/to/createmachineaccount.sh.

If I try to join a domain with a workstation that hasn't any account, 
the script creates the machine account but on error occurs that I can't 
log in because the account doesn't exist. After that if I try to join 
again, the logon process works because it found the machine account. So 
I have to join every workstation twice, first for user creation and 
second for joining the domain.

Why doesn't this work in one step? On our old samba 2.2.8a PDC with ldap 
backend, the whole things worked with the same machine add script.

I welcome any suggestions.

best regards
Lukas
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] add machine script problem

2004-03-11 Thread Lukas Meyer
Beast wrote:

* Lukas Meyer [EMAIL PROTECTED] nulis:

 

Hello

I set up a Samba 3 PDC with ldap backend. I created an script that adds 
machine accounts. First it adds the machine account to /etc/passwd and 
then it creates the user in ldap with smbpasswd -a -m machine.

If I run the script by hand, it works and the account has been added. 
After that I can join the domain without any problems. Now I want to 
make this machine account creation on the fly. So I added the script to 
smb.conf as add user script = /path/to/createmachineaccount.sh.

If I try to join a domain with a workstation that hasn't any account, 
the script creates the machine account but on error occurs that I can't 
log in because the account doesn't exist. After that if I try to join 
again, the logon process works because it found the machine account. 
   

IMO it was because samba can not 'see' changes in ldap. You have to set sleep time in add machine script?

btw, why not putting posix account in ldap directory intead of file?

--beast
 

Hello

I added a sleep time to the add machine script but there's no success. 
How do you mean putting a posix account in ldap instead of file? If I 
add a posix account to the machine-account, what file won't I need?

regards
lm
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba 3 ldap pdc

2004-03-11 Thread Lukas Meyer
Craig White wrote:

On Thu, 2004-03-11 at 00:51, Lukas Meyer wrote:
 

Hi list!

I set up a new Samba 3 PDC with ldap backend. In our network, there 
already exists an old samba 2.2.8 PDC with ldap backend. Now I have two 
PDC named DOMAIN1 and DOMAIN2. Because in our network, there are a lot 
of windows NT4 and W2k workstations that are loggin on to DOMAIN1, I 
don't want to join every workstation to DOMAIN2.

Is it possible to shut down DOMAIN1, and configure the new PDC DOMAIN2 
as DOMAIN1 so the workstations don't have to join again btw wouldn't get 
new profiles? I migrated all workstation and user accounts to the new 
one, so every workstation and user has also access to the new PDC. Or 
exists any other method of migrating to the new PDC? The big problem is 
that I want to keep the profiles of every user.
   


I am a bit surprised by this question since it would seem that someone
that has already set up LDAP on both samba 2.2x  3 has a pretty good
working knowledge of the differences in schema/attributes of the two and
could probably slapcat their LDAP from the 2.2x version (machine
accounts) - find  replace fix the changes and import them into the LDAP
store for 3.0.x
Obviously the DOMAIN NAME, localSID, GID's etc will differ and those
must also be fixed.
There is a section about conversion from 2.2x to 3.0.x in the how-to

Craig
 

Hi Craig

I think you miss understood me. I still migrated the ldap entries and 
group entries. But I have the problem with the profiles. I don't want to 
use roaming profiles so If I join a workstation to the new DOMAIN, there 
will be created a new profile and I want to keep them. So I've got the 
idea of shutting down DOMAIN1 and configure the new samba 3 domain to 
DOMAIN1 and the workstations won't recognize if the PDC is the old 
samba2 or the new one. Or are there any profile migration scripts or 
anything else?

regards
Lukas
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] weird home share problem

2004-03-11 Thread Lukas Meyer
Hi list

During my samba3 pdc ldap backend set up I encountered a new problem. I 
configured in smb.conf the mounting of the home share as followed:

logon path =# I don't want roaming profiles
logon drive = H:
logon home = \\homeserver\%u
logon script = logon.bat
[homes]
   comment = Home dirs
   valid users = %S
   read only = No
   browseable = No
Well after logging in it executes the login.bat or the defined one in 
ldap tree and mounts the \\server\user to H:. Now it works perfectly but 
the weird thing is, after logging in, I log out and log in again, and 
the home share isn't there. I restart the workstation and log in again 
and it isn't still there. But if I log off or shut down the workstation 
and wait approximate 5 minutes, the home share appears after the login 
process. It looks like there is a timeout or something else. The other 
strange thing is, that sometimes, the logon script won't be executed.

Are there any problems between the logon script in the smb.conf and the 
one stored in ldap tree?

Best regards
Lukas
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba 3 ldap pdc

2004-03-10 Thread Lukas Meyer
Hi list!

I set up a new Samba 3 PDC with ldap backend. In our network, there 
already exists an old samba 2.2.8 PDC with ldap backend. Now I have two 
PDC named DOMAIN1 and DOMAIN2. Because in our network, there are a lot 
of windows NT4 and W2k workstations that are loggin on to DOMAIN1, I 
don't want to join every workstation to DOMAIN2.

Is it possible to shut down DOMAIN1, and configure the new PDC DOMAIN2 
as DOMAIN1 so the workstations don't have to join again btw wouldn't get 
new profiles? I migrated all workstation and user accounts to the new 
one, so every workstation and user has also access to the new PDC. Or 
exists any other method of migrating to the new PDC? The big problem is 
that I want to keep the profiles of every user.

best regards
Lukas
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba3 smbpasswd search filter

2004-03-05 Thread Lukas Meyer
Hi list

I set up a samba 3 PDC with ldap authentification. Now i have some 
troubles concerning the machine account creation on the fly while 
joining the domain. I'm using the smbldap-tools 8.4 for user creation. 
According to the smbldap-tools howto and the samba3-ldap howto: 
http://www.unav.es/cti/ldap-smb/smb-ldap-3-howto.html, the ordinary way 
of creating a machine account is: /path/to/smbldap-tools/smbldap-useradd 
-w machinename$

That works without any problem but I can't join the domain. Now I could 
find the problem why it won't work. If I call smbpasswd to change the 
machines password in debug mode. I can see that this script has this 
search filter for ldap entries:

((uid=machinename$)(objectclass=sambaSamAccount))

However the entry that was done by the smbldap-useradd -w hasn't any 
objectclass sambaSamAccount. And as i thought after adding a 
sambaSamAccount objectclass to this machine account, I could join the 
domain. So where's the fault? I think the machine account don't need any 
objectclass sambaSamAccount so I have to change the search filter for 
smbpasswd or samba? And how to do this?

I really welcome any suggestions

best regards
Lukas
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba and Roaming Profiles

2003-10-30 Thread Lukas Meyer
Hi there

I've got a question concerning samba and roaming profiles. Is it possible to enable 
roaming profiles only for specific users? For example that I can enable Roaming 
Profiles for user1 and user2 but not for user3 and user4.

Best regards
lukas

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba