[Samba] Roaming profile & f-secure problem
Hi, are there any know problems with f-secure scanner and roaming profiles? We have a lot of users with problems syncing their roaming profile from the domain server. It seems to be a problem with f-secure's on-access scanning (may be timeout problem?). Some users have to login three or four times, before getting their roaming profile and not the default profile. System: 3.0.24-6etch9 Ciao, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] recycle module creates empty files (0 KB)
Am Freitag, den 22.02.2008, 01:05 +0100 schrieb Marcus Sobchak : > Am Donnerstag, den 21.02.2008, 17:40 +0100 schrieb Marcus Sobchak : > > Hi, > > > > I have a strange behaviour when creating new files. When opening word, > > excel, ppt or txt to create a new document (e.g. I use the word icon on > > the desktop to start word) and save the file to the home share H: an > > empty (0 KB) file with the same name as the saved document is created in > > the trash folder. Why this second empty file in the trash folder? > > > > Going directly to the home share H: and create a new document using > > right mouse click "new / word document" and save to H: no empty file is > > found in the trash folder. Strange? > > I found this message in the list with a patch to fix this problem using > the recycle:minsize parameter > > http://lists.samba.org/archive/samba-technical/2006-July/048054.html > > After looking to the source of the Debian package 3.0.24-6etch9 is seems > that the minsize feature doesn't come with the 3.0.24 version. Is there > a patch for version 3.0.24? I've tested the path against debian's samba version and it seems to be stable :-) To avoid empty (0 KB) files I set minsize to the minimum of 1 byte: recycle: minsize = 1 Thanks SATOH Fumiyasu for the patch and helping, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] recycle module creates empty files (0 KB)
Am Donnerstag, den 21.02.2008, 17:40 +0100 schrieb Marcus Sobchak : > Hi, > > I have a strange behaviour when creating new files. When opening word, > excel, ppt or txt to create a new document (e.g. I use the word icon on > the desktop to start word) and save the file to the home share H: an > empty (0 KB) file with the same name as the saved document is created in > the trash folder. Why this second empty file in the trash folder? > > Going directly to the home share H: and create a new document using > right mouse click "new / word document" and save to H: no empty file is > found in the trash folder. Strange? I found this message in the list with a patch to fix this problem using the recycle:minsize parameter http://lists.samba.org/archive/samba-technical/2006-July/048054.html After looking to the source of the Debian package 3.0.24-6etch9 is seems that the minsize feature doesn't come with the 3.0.24 version. Is there a patch for version 3.0.24? Ciao! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] recycle module creates empty files (0 KB)
Am Donnerstag, den 21.02.2008, 17:57 -0500 schrieb Charles Marcus: > Marcus Sobchak <[EMAIL PROTECTED]>, on 2/21/2008 11:40 AM, said the > following: > > I have a strange behaviour when creating new files. When opening word, > > excel, ppt or txt to create a new document (e.g. I use the word icon on > > the desktop to start word) and save the file to the home share H: an > > empty (0 KB) file with the same name as the saved document is created in > > the trash folder. Why this second empty file in the trash folder? > > It may something to do with the way Windows/Office works. > > When you create a new file or open an existing one, it creates a weird > hidden file with ~ at the beginning of the name, then deletes this when > the file is saved/closed. It just happens when creating a new file using "save as" to share H: I've already excluded ~$* and *.tmp files. The empty file in the trash folder seems not to be a temporary file. Ciao! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] recycle module creates empty files (0 KB)
Hi, I have a strange behaviour when creating new files. When opening word, excel, ppt or txt to create a new document (e.g. I use the word icon on the desktop to start word) and save the file to the home share H: an empty (0 KB) file with the same name as the saved document is created in the trash folder. Why this second empty file in the trash folder? Going directly to the home share H: and create a new document using right mouse click "new / word document" and save to H: no empty file is found in the trash folder. Strange? Here is my config running on 3.0.24-6etch9 Samba: [...] recycle: repository=Trash recycle: keeptree=True recycle: versions=True recycle: touch=True recycle:exclude = *.tmp *.temp *.o *.obj ~$* *.~?? [...] Any help is welcome! Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] vscan module: looking for a quick virus scanner?
Hi, which virus scanner is a good choice to use with VFS vcan module on a samba 3.0.24 with 350 users? I played with clamd. It's working, but the scanning seems to be quite slow. :-( I searched the web, but couldn't find any good performance tests for linux antivirus scanners. The scanner should run as daemon, not just as command line scanner. Any ideas? Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and CUPS accouting with HP 1320
Hi, I've problems to get accounting information for print jobs. I'm using samba and CUPs on debian etch. For the HP 1320 printer I use this PPD: http://openprinting.org/foomatic-db/db/source/PPD/HP/HP_LaserJet_1320_Series.ppd Which PS print driver do I have to use at windows client side? Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Big problems with 3.0.24-6etch6 Debian packages
Hi, Am Dienstag, den 27.11.2007, 09:58 +0100 schrieb Marco De Vitis: > Hi, > I'm using Samba as a PDC with roaming profiles on a Debian Etch machine, > the clients are Windows XP/2000 machines. > > I just installed security upgrades with aptitude, and this upgraded all > samba 3.0.24-6etch4 packages to 3.0.24-6etch6 (except for samba-doc > which was upgraded to 3.0.24-6etch7). > Immediately after the upgrade, my users could not load their profiles at > login anymore. Errors popped out regarding problems loading > insignificant files from their profiles, such as cookies, links to > recently opened files, Java cache files, etc. > This caused Windows to open up a new temporary profile, making everyone > lose their settings. PANIC!! > > I now downgraded back to all 3.0.24-6etch4 packages, and things seem to > be working fine again. > > What's happening with Samba packages for Debian Etch? > I saw a security announce yesterday by Steve Kemp, but it's a bit > confusing, for Etch it lists some 6etch6 packages and some 6etch7 others. > Are the current packages broken? > > And... is there anyone officially working on more up-to-date Samba > packages for Debian Etch? Or will we have to live with 3.0.24 until the > next Debian stable upgrade? >From time to time we still have broken profiles although I've downgraded our machine back to a working debian package on 27th Nov. to avoid more damage. At the moment a samba 3.0.24-6etch9 is installed. But it seems that the broken samba package has crashed the profiles of those users, which were logged in when the broken package was installed. Those users have problems to load their profiles. At the first login the default profile is loaded, because the client has problems to sync files from the server. The user has to log out and start a second login, which works fine then. In some hard cases we have to remove the local and the server profile to get it working again. Any idea how to fix this? It's a kind of horror the get up to ten calls a day to fix roaming profiles. Ciao! Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] ExcludeProfileDirs and broken roaming profiles
Hi, since rolling out roaming profiles, some user profiles are growing very fast. I like to keep the profiles small and think about changing ExcludeProfileDirs default settings in Software\Microsoft\Windows NT \CurrentVersion\Winlogon by System Policies to remove caches, cookies, recent and other "useless" stuff. Which paths could be excluded without "killing" the benefits of roaming profiles? Could your send me your settings and/or a working .adm? A second problem which comes up one or two times a day - and doesn't depend on the size of the profiles - are broken profiles at the _first_ login. In most cases Thunderbird and Firefox paths couldn't be loaded and the user is droped to the "Default User" profile. At a second login everything works fine and the profile could be loaded without problems. Thanks, Marcus system information: samba3.0.24-6etch9 samba-common 3.0.24-6etch9 [profile$] comment = Network Profiles Service path = /vol/profiles read only = no create mask=0600 directory mask=0770 hide files = /desktop.ini/Desktop.ini/ntuser.ini/NTUSER.*/ Debian etch: Linux 2.6.18-5-686 #1 SMP Wed Oct 3 00:12:50 UTC 2007 i686 GNU/Linux client side: 100% WinXP SP2, F-Secure 7.10 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] uploading printer driver using APW changes printer share name
Hi, I've set up a printer called "UREW-EDV" using the cups webinterface. After that an enumprinters give the following output: rpcclient $> enumprintershp LaserJet 1320 PCL 6 flags:[0x80] name:[\\server\UREW-EDV] description:[\\server\UREW-EDV,,Netzwerkdrucker-EDV] comment:[Netzwerkdrucker-EDV] Next step is uploading a driver using APW: http://samba.org/samba/docs/man/Samba-HOWTO-Collection/classicalprinting.html#id388469 This works fine, but afterwards the name of the printer is changed to the name _of the driver_ (in this case from "UREW-EDV" to "hp LaserJet 1320 PCL 6"): rpcclient $> enumprinters flags:[0x80] name:[\\server\hp LaserJet 1320 PCL 6] <- ??? description:[\\server\hp LaserJet 1320 PCL 6,hp LaserJet 1320 PCL 6,Netzwerkdrucker-EDV] comment:[Netzwerkdrucker-EDV] Now the printer is shown as "hp LaserJet 1320 PCL 6" under \\server -> "Printer and Faxes". Why that? To correct this I have to open the printer properties and set the name back to "UREW-EDV" manually. Without this correction the PrintandPoint feature for this printer doesn't work. It took me a hole night to figure this out. Is this a normal behaviour or is this my mistake? System info: samba3.0.24-6etch8 samba-common 3.0.24-6etch8 cupsys 1.2.7-4etch1 cupsys-bsd 1.2.7-4etch1 cupsys-client1.2.7-4etch1 cupsys-common1.2.7-4etch1 libcupsimage21.2.7-4etch1 libcupsys2 1.2.7-4etch1 [global] . load printers = yes printing = cups printcap name = cups [printers] comment = All Printers browseable = no path = /var/spool/samba printable = yes public = no writable = no create mode = 0700 [print$] comment = Drucker Treiber path = /var/lib/samba/printers browseable = yes read only = yes guest ok = no write list = root Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] blocked ports 445 and 139 make printer-shares very slow
Am Samstag, den 01.12.2007, 08:06 +0100 schrieb Helmut Hullen: > Hallo, Marcus, > > Du (lists) meintest am 30.11.07: > > > here is a part of the samba log for the connecting WinXP client to > > the local samba domain, trying to open the spool for a print share. > > Port 445 is blocked by the WinXP client, so samba can't connect, > > which seems to be the reason for aboved slow behavior at client side. > > > > > [2007/11/30 23:07:49, 2] lib/access.c:check_access(323) > > Allowed connection from (192.168.239) > > [2007/11/30 23:07:49, 2] lib/access.c:check_access(323) > > Allowed connection from (192.168.239) > > [2007/11/30 23:07:57, 1] lib/util_sock.c:open_socket_out(896) > > timeout connecting to 192.168.239:445 > ^a ^b ^c ^port > > Where ist the 4th byte of the ip address? Ups, sorry, just I typo. Didn't want to post my public IPs. All IPs are correct. Ciao! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] blocked ports 445 and 139 make printer-shares very slow
Am Freitag, den 30.11.2007, 17:58 +0100 schrieb Marcus Sobchak : > Hi, > > do ports 445 and 139 (incoming) have to be open for the samba server's > IP on WinXP client side (all WinXP clients are using netbios over > TCP/IP)? F-Secure 7.10 blocks all incoming microsoft-ds (445) and > netbios-ssn (139) by default, which ends up in very slow printer-shares > behaviour (for example opening the properties or the spool window of a > samba-printer takes up to 30 seconds). > > For testing I opened ports 445 and 139 in the F-Secure firewall for the > IP of the samba server. This pushes the samba-print shares to a very > good speed at WinXP client side. Could someone explain that to me > please? here is a part of the samba log for the connecting WinXP client to the local samba domain, trying to open the spool for a print share. Port 445 is blocked by the WinXP client, so samba can't connect, which seems to be the reason for aboved slow behavior at client side. [2007/11/30 23:07:49, 2] lib/access.c:check_access(323) Allowed connection from (192.168.239) [2007/11/30 23:07:49, 2] lib/access.c:check_access(323) Allowed connection from (192.168.239) [2007/11/30 23:07:57, 1] lib/util_sock.c:open_socket_out(896) timeout connecting to 192.168.239:445 [2007/11/30 23:08:06, 1] lib/util_sock.c:open_socket_out(896) timeout connecting to 192.168.239:139 [2007/11/30 23:08:06, 1] libsmb/cliconnect.c:cli_connect(1369) Error connecting to 192.168.239 (Die Operation wird bereits ausgef [2007/11/30 23:08:06, 1] libsmb/cliconnect.c:cli_start_connection(1430) cli_start_connection: failed to connect to VM-RC01<20> (192.168.239) [2007/11/30 23:08:06, 2] rpc_server/srv_spoolss_nt.c:spoolss_connect_to_client(2551) spoolss_connect_to_client: connection to [VM-RC01] failed! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] blocked ports 445 and 139 make printer-shares very slow
Hi James, thanks for your answer. Am Freitag, den 30.11.2007, 13:54 -0500 schrieb James Kosin: > Marcus Sobchak <[EMAIL PROTECTED]> wrote: > > > > do ports 445 and 139 (incoming) have to be open for the samba server's > > IP on WinXP client side (all WinXP clients are using netbios over > > TCP/IP)? F-Secure 7.10 blocks all incoming microsoft-ds (445) and > > netbios-ssn (139) by default, which ends up in very slow printer-shares > > behaviour (for example opening the properties or the spool window of a > > samba-printer takes up to 30 seconds). > > > > For testing I opened ports 445 and 139 in the F-Secure firewall for the > > IP of the samba server. This pushes the samba-print shares to a very > > good speed at WinXP client side. Could someone explain that to me > > please? > > > (1) You don't want to open file sharing from the internet, you should > really restrict either to the local IP range on your private-network or > rethink your plan. Either get a hardware firewall or a good hardware > router to help restrict your network from the outside. I don't have the plan to open F-Secure's firewall on each XP client on ports 139 and 445 to the whole network (0.0.0.0), just to the single IP of the local samba server. This should not be a big security risk. Please correct me if I'm wrong! > (2) You need to have at least one of those ports open 139 or 445 on > your network. You can have both as well. 139 and 445 are the back ends > for the NETBIOS protocol. I'm sure someone will correct me here, but > basically without it things will get very sluggish. Yes, right, but this doesn't explain to me in detail, why especially the printing shares do work very slowly if ports 139 and 445 are blocked for incoming traffic. Every thing else like domain login, roaming profiles and share mapping works very well?! Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] blocked ports 445 and 139 make printer-shares very slow
Hi, do ports 445 and 139 (incoming) have to be open for the samba server's IP on WinXP client side (all WinXP clients are using netbios over TCP/IP)? F-Secure 7.10 blocks all incoming microsoft-ds (445) and netbios-ssn (139) by default, which ends up in very slow printer-shares behaviour (for example opening the properties or the spool window of a samba-printer takes up to 30 seconds). For testing I opened ports 445 and 139 in the F-Secure firewall for the IP of the samba server. This pushes the samba-print shares to a very good speed at WinXP client side. Could someone explain that to me please? Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Point-and-Print driver problems with unprivileged users on XP
Hi, Am Montag, den 26.11.2007, 23:50 +0100 schrieb Marcus Sobchak : > I've problems to install printer drivers as a normal user with > unprivileged rights on WinXP in a samba 3.0.24 domain (debian etch) > using the "Point-and-Print" mechanism. I've read Volker Lendecke's Samba > book on page 131 footnote 1, which mention to enable "point and print". > Which reg keys do I have to set to install drivers by "Point and Print"? > I've set keys like described in > > http://support.microsoft.com/kb/319939/en > > but this does not work? Installing the drives from the print$ share > working as domain admin works works fine. Therefore I think, I've > forgotten to set some rights on the local XP machine. I disabled point and print restriction. Don't want to send an exported reg key to the list. See attached screeenshot. Ciao! Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] access to samba shares through the web
Hi, I'm looking for a good and stable webclient to access to my samba share through a webinterface. I found SSLBridge Samba Web Client [1]. Any experiences with this software or other ideas? Ciao! Marcus [1] http://sourceforge.net/projects/sbrdg/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Big problems with 3.0.24-6etch6 Debian packages
Am Dienstag, den 27.11.2007, 09:58 +0100 schrieb Marco De Vitis: > Hi, > I'm using Samba as a PDC with roaming profiles on a Debian Etch machine, > the clients are Windows XP/2000 machines. > > I just installed security upgrades with aptitude, and this upgraded all > samba 3.0.24-6etch4 packages to 3.0.24-6etch6 (except for samba-doc > which was upgraded to 3.0.24-6etch7). > Immediately after the upgrade, my users could not load their profiles at > login anymore. Errors popped out regarding problems loading > insignificant files from their profiles, such as cookies, links to > recently opened files, Java cache files, etc. > This caused Windows to open up a new temporary profile, making everyone > lose their settings. PANIC!! > > I now downgraded back to all 3.0.24-6etch4 packages, and things seem to > be working fine again. > > What's happening with Samba packages for Debian Etch? > I saw a security announce yesterday by Steve Kemp, but it's a bit > confusing, for Etch it lists some 6etch6 packages and some 6etch7 others. > Are the current packages broken? > > And... is there anyone officially working on more up-to-date Samba > packages for Debian Etch? Or will we have to live with 3.0.24 until the > next Debian stable upgrade? We have exactly the same problem here. Greets from hell, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Point-and-Print driver problems with unprivileged users on XP
Hi, I've problems to install printer drivers as a normal user with unprivileged rights on WinXP in a samba 3.0.24 domain (debian etch) using the "Point-and-Print" mechanism. I've read Volker Lendecke's Samba book on page 131 footnote 1, which mention to enable "point and print". Which reg keys do I have to set to install drivers by "Point and Print"? I've set keys like described in http://support.microsoft.com/kb/319939/en but this does not work? Installing the drives from the print$ share working as domain admin works works fine. Therefore I think, I've forgotten to set some rights on the local XP machine. smb.conf: [global] load printers = yes printing = cups printcap name = cups [printers] comment = All Printers browseable = no path = /var/spool/samba printable = yes public = no writable = no create mode = 0700 [print$] comment = Drucker Treiber path = /var/lib/samba/printers browseable = yes read only = yes guest ok = no write list = root, ntadmin Cheers, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] remove machine account automatically
Hi, is there a way to remove a machine account (passwd and tdbsam) automatically like adding a machine using add machine script = /usr/sbin/useradd -g machines -c Machine -d /dev/null -s /bin/false %u Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] setting Profile Path with pdbedit
Hi, I'v problems to set the profile path using pdbedit. The profile should be saved into the %a directory (e.g. WinXP), like set in smb.conf global section: logon path = \\server\profile$\%U\%a If I set the path like pdbedit myusername -p "\\\server\profile$\myusername" the profile is not saved in e.g. WinXP subdir if working on a XP Client. New created users have the correct path, which looks like: Profile Path: \\server\profile$\anotherusername\UNKNOWN "UNKNOWN" seems to be the placeholder for %a. How to I set this by hand? Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] moving from local profiles to roaming profiles
Hi, I'm runnung samba 3.0.24-6etch4 as PDC with local profiles in a 100% Windows XP environment (about 250 clients). Now I'd like to use samba's roaming profiles feature. I'v deployed "User Profile Hive Cleanup Service" on each client and plan to add the following entries to my smb.conf: [global] logon path = \\server\profile$\%U\%a [profile$] comment = Network Profiles Service path = /vol/profiles read only = no create mask = 0600 directory mask = 0700 Did I forget something or is there anything special to pay attention to (read something about cache files)? And is it possibility to start with a small number of users? If I understud the documentation correctly, the above configuration would affect to all users when log in/off the next time. Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] deny second or multiple logins
Hello Helmut, Am Mittwoch, den 04.04.2007, 08:55 +0200 schrieb Helmut Hullen: > Hallo, Marcus, > > Du meintest am 04.04.07 zum Thema Re: [Samba] deny second or multiple logins: > > >>> test "$RESULT" -eq 1 || exit 1 > >>> --- > > >> That's no good idea. > >> Try > >> > >> test "$RESULT" -eq 0 > >> > >> Then the return level is 0 (= ok) for 0 , and it's 1 (not ok) for 1 > >> or higher. > > > Hmmm, if the value of RESULUT is not 1 or higher, > > That's the DOS way ... > > > the scipt has to "exit 1" (not ok), which is correct, because in this > > case the same userid tries to connect from different IPs. > > Your script returns with 1 also if $RESULT is 0. > My version returns with 0 if $RESULT is 0, otherwise with 1 (if it's the > last line in the script). Okay, let's finish this 1 or 0 result question, because this is not the main problem. The preexec parameter thing does not solve the problem of denying multiple logins. The user is still able to login, but no shares are mounted. And as I wrote in of my last emails, windows reconnects its shares every few minutes. In this case, the script doesn't know anymore which client PC was the user's first and therefore the script is blocking all client PCs, the first client and all following clients (of the user). To avoid this one has to set lock files with username and IP. These lock files could be removed with the postexec parameter. But what happens if a client PCs crashes and doesn't disconnect its shares? The postexec command will not run and if the user tries to connect from a different machine (or his machine is getting a new IP by dhcp after restart), the existing lock file is blocking the complete user. Any other ideas? Did nobody solve this problem? Ciao, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] deny second or multiple logins
Am Dienstag, den 03.04.2007, 21:47 +0200 schrieb Helmut Hullen:
> Hallo, Marcus,
>
> Du meintest am 03.04.07 zum Thema Re: [Samba] deny second or multiple logins:
>
> > RESULT=$(smbstatus -d0 -b -u $1 2> /dev/null | grep $1 | awk '{print
> > $5}' | uniq | wc -l)
>
> > test "$RESULT" -eq 1 || exit 1
> > ---
>
> That's no good idea.
> Try
>
> test "$RESULT" -eq 0
>
> Then the return level is 0 (= ok) for 0 , and it's 1 (not ok) for 1 or
> higher.
Hmmm, if the value of RESULUT is not 1 or higher, the scipt has to "exit
1" (not ok), which is correct, because in this case the same userid
tries to connect from different IPs.
Ciao!
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] deny second or multiple logins
Hi,
Am Montag, den 02.04.2007, 14:33 +0200 schrieb Helmut Hullen:
> Hallo, Marcus,
>
> Du (lists) meintest am 02.04.07:
>
> >>> http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/Advanced
> >>> NetworkManagement.html#id386516
>
> > my script:
>
> > preexec script = /path/PermitSingleLogon.sh '%U'
> > preexec close = Yes
[...]
The block mechnism itself ist working fine. I use this scipt to check if
there are connects to a share with the same userid form differnet IPs:
---
RESULT=$(smbstatus -d0 -b -u $1 2> /dev/null | grep $1 | awk '{print
$5}' | uniq | wc -l)
test "$RESULT" -eq 1 || exit 1
---
But it seems, that windows reconnects the shares every few minutes. In
this case, the script doesn't know anymore which client PC was first and
is blocking both client PCs, the client first and all other clients :-(
Ciao,
Marcus
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] deny second or multiple logins
Hei,
Am Sonntag, den 01.04.2007, 20:28 +0200 schrieb Thomas Bork:
> Freitas wrote:
>
> > You can try here.
> > http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/AdvancedNetworkManagement.html#id386516
> >
>
> Sorry for being so stupid but how should this working?
I think the scipt is just an idea how to handle this problem. Here is my
script:
preexec script = /path/PermitSingleLogon.sh '%U'
preexec close = Yes
--
#!/bin/bash
RESULT=$(smbstatus -d0 -b -u $1 2> /dev/null | grep $1)
if [ "X${RESULT}" == X ]; then
exit 0
else
exit 1
fi
--
But I still don't know how to combine this script with my existing logon
script.
Ciao,
Marcus
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] deny second or multiple logins
Am Sonntag, den 01.04.2007, 16:10 +0200 schrieb Helmut Hullen: > Hallo, Marcus, > > Du (lists) meintest am 01.04.07: > > > I'd like to deny multiple logins to a samba domain. I already > > searched the archive and found some threads about it. This one seems > > to be a good idea: > > > http://lists.samba.org/archive/samba/2006-April/119867.html > > > Does anyone know where to find such scipt examples? > > What about "max connections" for the desired shares? But then the user is already logged in :-) The user should be stoped one step before. Ciao! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] deny second or multiple logins
Hi, Am Sonntag, den 01.04.2007, 10:49 -0300 schrieb Freitas: > > I'd like to deny multiple logins to a samba domain. I already searched > > the archive and found some threads about it. This one seems to be a good > > idea: > > > > http://lists.samba.org/archive/samba/2006-April/119867.html > > > > Does anyone know where to find such scipt examples? > > You can try here. > http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/AdvancedNetworkManagement.html#id386516 Ah, great link. I was playing with smbstatus in these minutes :-) I'd like to put the preexec script paramteter to global or to netlogon section, not to a user's share section. What's best location?. At my netlogon section there is already the following line to create dynamic login scripts: root preexec = /usr/local/bin/make_logon_script '%m' '%U' '%a' '%g' '% L' How do I combine these two lines? The script PermitSingleLogon.sh should be executed before my old make_logon_script and if the return is 1 the login process should be aborted completely. Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] deny second or multiple logins
Hi, I'd like to deny multiple logins to a samba domain. I already searched the archive and found some threads about it. This one seems to be a good idea: http://lists.samba.org/archive/samba/2006-April/119867.html Does anyone know where to find such scipt examples? Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba groupware integration
Hi, I'd like to install a groupware server in our institute and looking for a software, which connects samba and the groupware server, for example for authentication (may be LDAP) and (more importent) to see the samba shares (user and groups) in the groupware web-front-end. I've talked this week to the open-xchange people at CeBit, and if I understud them right, the samba integration is not opensource. Any other ideas or experiences? Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] directory mask and vfs object recycle
Hi, I'm using vfs object recycle with samba 3.0.14a on Debian sarge and can't figure out, why the trash folder is created with the rights drwx-- 3 admin2 admin 4096 2007-02-06 17:49 Trash and not with the directory mask 0775. [vol] comment = share vol path = /vol/ create mask = 0664 force create mode = 0664 force group = admin directory mask = 0775 writable = Yes browseable = No valid users = @admin write list = admin1, admin2, admin3 veto files = /.forward/ vfs objects = vscan-clamav recycle recycle: repository=Trash recycle: keeptree=True recycle: versions=True vscan-clamav: config-file = /etc/samba/vscan-clamav.conf Any ideas? Thanks, Marcus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
