[Samba] NT_STATUS_ACCESS_DENIED
I'm stumped. Same configuration in Debian sarge with kernel 2.4 works fine, however, with kernel 2.6, breaks. boddingtons2:/var# smbclient -U THREESPOT+mgonzalez //10.0.6.41/www -c 'ls' Password: Domain=[THREESPOT] OS=[Unix] Server=[Samba 3.0.24] tree connect failed: NT_STATUS_ACCESS_DENIED /etc/samba/smb.conf [global] workgroup = THREESPOT server string = boddingtons2 password server = 10.0.6.13 realm = THREESPOT.COM wins support = no wins server = 10.0.6.13 dns proxy = no name resolve order = wins lmhosts hosts bcast log level =3 log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action %d security = ads encrypt passwords = true # passdb backend = tdbsam guest This is the only that changes from the 2.4 sarge configuration, running it with guest support gives me a core passdb backend = tdbsam obey pam restrictions = no invalid users = root passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . socket options = TCP_NODELAY winbind separator = + winbind use default domain = true idmap uid = 1-2 idmap gid = 1-2 winbind enum users = yes winbind enum groups = yes # template homedir = /home/%D/%u template shell = /bin/bash load printers = No #=== Share Definitions === [www] comment = Apache2 webroot path = /var/www writable = yes read only = no admin users = THREESPOT+3SpotAdmin valid users = THREESPOT+Technology create mask=0777 directory mask=0777 force user = samba force group = samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] AD Integrated authentication
I think you should be aware that some changes on Debian (and therefore Ubuntu packages) has been going on in etch (current stable). I don't know in terms of RH, but at least in my case, ADS didn't work. I have to test the new packages that has been posted on the samba website and will be included soon on stable branch of Debian Just to point out that might be something broken Miguel Michael Smith escribió: Hello Michael: On May 28, 2007, at 2:31 AM, Michael Cleghorn wrote: Hello list, i'm going to try very hard not to rant here, but i've been trying to get Samba working for 3 days, and it's just not happening. Let me start from the beginning. i'm just a lowly Windows admin but i've been doing this for 10 years, so i'm pretty sure i know what i'm doing (present situation excepted, clearly). i've got RedHat AS4 and a primarily Windows 2000 domain. i want to be able to transparently browse to the shares on the RH server from a Windows client without having to authenticate again, which is exactly what the AD integrated authentication is for, right? If i do wbinfo -u i get a list of AD objects, but without the AD domain name prepended which is my first clue that something isn't right. If i do wbinfo -a username%password both plaintext and challenge response authentication work. If i do getent passwd i get only local usernames. Same for getent group except i get local groups, obviously. From everything i've read in the man pages and god only know how many online troubleshooting and/or help docs, this just doesn't happen. Everything that mentions using wbinfo and getent for testing just says and you can try this and oh, look it works. i'm paraphrasing slightly. i have joined the RH server to the domain. i can get a Kerberos ticket issued if i want one. i have been through smb.conf, nsswitch.conf and /etc/pam.d so often, i no longer remember what my originals looked like. i'm happy to post excerpts from any or all of these of they will help (i'm not going to do it now in case 1 - it's an easy fix, in which case i'm not sure if i'll laugh or cry and 2 - to keep things relatively short). The logs have been less than ideally helpful since i already know that authentication isn't working... somewhere. Can someone help? Please? sig snip Would you post the following (sanitized, of course). smb.conf nsswitch.conf krb5.conf resolv.conf /pam.d/whatever services you want authenticated Regards, Mike --To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Debian Etch bug?
You might want to check this. I'm experiencing ADS problems. I haven't checked myself whether these etch samba packages actually work for me, but you might give them a try Miguel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Bulk] [Samba] Trying to mount a Linux share on Windows
You can mount Linux file systems on Windows you just have to have the right utilities to do so. Linux supports NTFS (NTVFS is another matter) with ntfs-3g now. So for instance, I could take a partition on a Windows server (NTFS) and share it using Samba instead of the Windows share service? Miguel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Bulk] [Samba] Trying to mount a Linux share on Windows
bhoomikasc escribió: Hi, I am trying to mount a Linux directory onto the Windows box. I think this is not possible, you can't mount a ntfs partition of a Windows box from linux Am I right? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Binary_Packages/Debian
simo escribió: Dear users, I have uploaded the new 3.0.25a packages compiled for sarge. At the same time I have removed older 2.2.x and 3.0.x packages for Woody. Support for back porting packages to Woody was already discontinued, but older packages were still provided. As these packages were not updated after the recent security issues, I decided to remove them to avoid pushing people to use outdated and insecure packages with the believe they are ok because they are hosted on samba.org I am looking to see if I have time to start publishing packages for Etch, I am undecided yet, and I may discontinue this service. If someone is highly motivated and wants to give a hand, please contact me privately. Simo. I am pretty confused. Etch is the latest stable version, why this service would be discontinued? The sarge package is already in the official debian oldstable repository? Miguel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Binary_Packages/Debian
simo escribió: On Tue, 2007-05-29 at 11:36 -0400, Miguel Gonzalez Castaños wrote: I am pretty confused. Etch is the latest stable version, why this service would be discontinued? The sarge package is already in the official debian oldstable repository? I have historically backported new versions to debian stable, as the Debian policy is to never upgrade packages in stable but just do security updates or fix bugs in that version. Etch is the new stable release so I should stop providing packages for Sarge and start to provide packages for Etch. I am not yet sure I have time to do this. If I can't I will discontinue the service of providing packages for Debian Stable (Etch currently). I am an average linux sysadmin, I have compiled tarballs, kernels, etc, but I have never created any RPM or debian package. If it is not a very complicated process I might help you out a bit. Anyway, current Samba etch package seems not to work with ADS, so this can be lay on the fixing tasks you mentioned. Miguel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] nsupdate-gss
Hi, I have seen this link in the samba website: http://de.samba.org/samba/ftp/tsig-gss/nsupdate-gss about a tool for updating DNS Windows Servers from linux clients. I would like to know: - whether this works with Windows 2003 DNS Servers. - Any tutorial, documentation or similar. I have googled a bit for some references but I couldn't find anything. Thanks, Miguel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] nsupdate-gss
- Any tutorial, documentation or similar. I have googled a bit for some references but I couldn't find anything. See --with-dnsupdate in the 3.0.25 release. Works with Windows 2000 SP4 and Windows 2003 DNS. Which command? smbclient? I have Debian sarge packages (3.0.14a-3sarge) , since Samba Debian 4 packages seems not to work fine with Active Directory authentication. Miguel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
debian etch samba and ADS --- was Re: [Samba] nsupdate-gss
I have Debian sarge packages (3.0.14a-3sarge) , since Samba Debian 4 packages seems not to work fine with Active Directory authentication. You should be able to just use the net command from 3.0.25 for the DNS update. This then this raises my question, why Samba packages on Debian 4 (etch) are not working with ADS? I have seen forums commenting that the package lacks of any kerberos compilation but they talk about 3.0.25, but not 3.0.24 which is the etch Debian package. I know this is a Samba and not Debian mailing list, but maybe I could get more help here, am I wrong? Miguel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
