[Samba] Samba packages for debian squeeze

2010-06-15 Thread Matthew Delves
Hey all,
I'm trying to hook a debian squeeze server up to a windows active directory 
domain, though the packages provided with Debian Squeeze don't have the net 
command. Is there a package available that I can use to install the net command 
from?

Thanks,
Matt


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] issues with pam_winbind and ability to use old windows password

2010-06-08 Thread Matthew Delves
I'm currently using an implementation of pam_winbind to authenticate users on 
linux servers via Active Directory. This works as expected apart from an issue 
whereby after changing a password, a user can login with both their old and 
their new password.

Having done a bit of investigation, it appears that this is a 'feature' from 
Microsoft as described in http://support.microsoft.com/kb/906305/en-us and 
http://community.ca.com/blogs/securityadvisor/archive/2007/12/11/microsoft-ntlm-authentication-behavior-allows-using-of-old-passwords.aspx
 

The systems that currently use pam_winbind are a combination of RHEL 4/5 and 
SLES 10/11 servers with the samba packages that are released with the distro.

If anyone is aware of a way to address the issue without having to modify 
anything on the windows domain controller, it would be greatly appreciated.

Thanks,
Matt Delves
-- 

-
Matthew Delves
System Administrator
Information Systems
Networks  Infrastructure
University of Ballarat
ph: 03 5327 9732
email: m.del...@ballarat.edu.au


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] pam_winbind and krb5_auth

2010-06-08 Thread Matthew Delves
Hey list,
I'm wondering if there is any advantage to be gained by using kerberos with 
pam_winbind.

I've configured pam_winbind and enabled krb5_auth though apart from being 
granted a ticket, I'm unsure as to any advantage that would be gained by 
enabling Kerberos.

Thanks,
Matt Delves
-- 

-
Matthew Delves
System Administrator
Information Systems
Networks  Infrastructure
University of Ballarat
ph: 03 5327 9732
email: m.del...@ballarat.edu.au


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] pam_winbind and krb5_auth

2010-06-08 Thread Matthew Delves


 On 9/06/2010 at 1:22 pm, Robert LeBlanc rob...@leblancnet.us wrote:
 If you configure SSH and NFS, you get passwords logins and mounts. I think
 mount.smb can use it as well as smbclient. I know that KDE auto logs me into
 Samba/WIndows file shares without a password just like Windows. If you have
 Kerberos websites, you can configure your browser to pass tickets and get
 single-signon. There are quiet a few things you can do. If you have to enter
 a password, there is usually a way to enable Kerberos for it.
 

Thanks for that explanation. That's more when using Linux as a workstation. I'm 
using Linux as a server and am wanting to use Kerberos authentication as a way 
of achieving SSO.

Currently I have the linux server setup so that it retrieves a kerberos ticket 
when a user logs in via ssh, though when I tell PuTTY to authenticate using 
kerberos, it still asks for a password.

Is there a way to track down just what is going on there?

Thanks,
Matt Delves.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] problems with old and new passwords being accessible

2010-06-07 Thread Matthew Delves
Hey All,
I'm using samba and winbind for user authentication, though I'm seeing a 
problem whereby the users are able to still login with their old passwords for 
up to 12 hours when they change their password.

Is anyone familiar with why this would be occurring?

Thanks,
Matt Delves
-- 

-
Matthew Delves
System Administrator
Information Systems
Networks  Infrastructure
University of Ballarat
ph: 03 5327 9732
email: m.del...@ballarat.edu.au


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Issues with Samba, LDAP and file shares

2008-10-25 Thread Matthew Delves

Greeting all.

I'm having some issues getting access to the shares that I've setup  
under samba.


Going through the log files I've come across this line which indicates  
what the error is.


'/shares/data' does not exist or permission denied when connecting to  
[data] Error was Permission denied


Though when I examine the information relating to the permissions on  
the share I get:


-rw-rw-r-- 1 root Domain Users 0 Oct 23 12:41 data

As far as the configuration within smb.conf it is:

[data]
comment = data
path = /shares/data
public = yes
writable = yes
printable = no
browseable = yes

If it helps, I'm seeing this same error message for all of the shares  
I've got setup. It just so happens that the data one is the one that  
I'm using in this example.


If anyone could please help me out as to what the problem is with this  
it would be greatly appreciated.


Thanks,
Matthew Delves
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Question about switching from Windows 2k Server to SAMBA 3 under Centos

2008-10-20 Thread Matthew Delves


On Oct 21, 2008, at 10:49 AM, Norberto Bensa wrote:


Quoting Charles Marcus [EMAIL PROTECTED]:

On 10/20/2008, Matthew Delves ([EMAIL PROTECTED])  
wrote:

My questions are:
1) What is required for the smb.conf to get it talking to the  
windows

  2k server?


My understanding is that vampire will NOT work with a Windows 2k  
server,

only an NT4 server...


That's my understanding too. Samba (3.x) can't act as a AD domain  
server. It can be a member of an AD domain, thou.


Thanks for both of the replies. If the samba service is a member of  
the AD domain, is it possible to setup the server as a BDC and  
transfer the information that way. If that is possible, are there any  
documents as to how this can be done?


Thanks,
Matthew Delves
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Question about switching from Windows 2k Server to SAMBA 3 under Centos

2008-10-19 Thread Matthew Delves

Greetings List,

I'll begin by outlining what it is that I have to do. First, I have a  
windows 2k server that is currently on its last legs. It holds a list  
of users, groups and shares that are still required after the  
migration to a Linux based server.


I've heard of a command called 'vampire' that extracts the required  
users and groups, though as of yet have been unsuccessful in getting  
this to work.


I've also setup an OpenLDAP server with LDAP Account Manager and can  
input data manually, though for some weird reason, vampire just  
doesn't want to work.


My questions are:
1) What is required for the smb.conf to get it talking to the windows  
2k server?
2) What other environment configuration is required to get vampire to  
work correctly?


Thanks,
Matthew Delves

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] After some help with Samba and LDAP

2008-10-15 Thread Matthew Delves

Hey Folks,
I'm running into what appears to be a known configuration problem  
though am at a lost end with trying to resolve it.


The problem is that when following the SAMBA and LDAP configuration  
guide on http://wiki.samba.org/index.php/3.0._Initialization_LDAP_Database 
 I'm getting errors running the ldiff part.


The error that is occuring is due to the sambaDomainName.

slapadd:  
dn 
= 
sambaDomainName 
=pumppower2,ou=Domains,dc=pumppower,dc=com,dc=au (line=65): (64)  
value of naming attribute 'sambaDomainName' is not present in entry



The environment is a centos 5 box that will take the place of a  
windows 2k server.


Any help will be greatly appreciated.

Thanks,
Matthew Delves
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba