Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-19 Thread Necos Secon
  environment.
 
 Another important thing to me would be a configuration example of
  somebody out there using Winbind in an actual version 3.5.x with backend ad
  and SFU for Shell and Home Directories. Anybody?
 
 Thank you.
 
 Tobias
 
 
 
 LFK-Lenkflugkörpersysteme GmbH
 Serverpool, FCI4
 Landshuter Straße 26, 85716 Unterschleißheim, GERMANY
 Phone: +49 89 3179 8438
 Fax: +49 89 3179 8927
 Mobile: +49 170 635 3830
 E-Mail: tobias.mu...@mbda-systems.de
 
 http://www.mbda.net
 
 Chairman of the Supervisory Board: Antoine Bouvier
 Managing Director: Werner Kaltenegger
 Registered Office: Schrobenhausen
 Commercial Register: Amtsgericht Ingolstadt, HRB 4365
 
 -Ursprüngliche Nachricht-
 Von: samba-boun...@lists.samba.org [mailto:
  samba-boun...@lists.samba.org] Im Auftrag von Necos Secon
 Gesendet: Montag, 19. Juli 2010 01:50
 An: samba@lists.samba.org
 Betreff: Re: [Samba] Samba + Winbind + Windows 2003 AD
 
 
 I accidentally deleted the first set of messages in my email for
  this thread, but does your DNS resolve properly? What does your resolv.conf
  look like? Also, what do these files look like:
 
 krb5.conf
 smb.conf
 
 There's an option in smb.conf, winbind enum users, which needs to be
  set in order for getent to function properly. There is a corresponding
  option for groups as well. Look at them and let us know.
 
  Date: Mon, 19 Jul 2010 01:12:41 +0200
  From: h...@semark.dk
  To: esiot...@gmail.com
  CC: samba@lists.samba.org
  Subject: Re: [Samba] Samba + Winbind + Windows 2003 AD
 
  Hi Micheal
 
  Sorry for not sending that information in the first place, but I
  though that it was so basic that it wasn't necessary.
 
  My nsswitch.conf:
  # cat /etc/nsswitch.conf
  # /etc/nsswitch.conf
  #
  # Example configuration of GNU Name Service Switch functionality.
  # If you have the `glibc-doc-reference' and `info' packages
  installed, try:
  # `info libc Name Service Switch' for information about this
  file.
 
  passwd: compat winbind
  group:  compat winbind
  shadow: compat winbind
 
  hosts:  files mdns4_minimal [NOTFOUND=return] dns mdns4
  networks:   files
 
  services:   db files
  ethers: db files
  protocols:  db files
  rpc:db files
 
  netgroup:   nis
 
  I will mean that it is the way to do this (and it works just fine
  on
  the UNIX servers that run there own Domain Controller)
 
  Med Venlig Hilsen / Best Regards
  Henrik Dige Semark
 
  Den 18-07-2010 17:03, Michael Wood skrev:
   On 18 July 2010 01:34, Henrik Dige Semarkh...@semark.dk
   wrote:
  
   Hey out there.
  
   I have to join my UNIX server with an existing Win2k3 AD
  network.
  
   My system info:
   Debian Lenny
   Samba   - 3.4.8
   Winbind - 3.4.8
  
   Windows Server 2003 with 2000-style-AD
  
   My problem is that, I have en UNIX server that have to run auth
  up
   against our existing windows 2003 AD.
  
   I have successfully joined my UNIX server to the AD, without
  problems.
   # net ads join -U Administrator
   Enter Administrator's password:
   Using short domain name -- TEST
   Joined 'MAIL' to realm 'TEST.LOCAL'
  
   My Samba config: http://pastebin.com/ZqaA0Ypn
  
   After the join I'm able to lookup peoples with # wbinfo -u
  
   [...]
  
   # wbinfo -g
  
   [...]
  
   Now the problem, getent only returns the local users and not
  the
   users from the AD The funny thing is that if a user is local on
  the
   UNIX and in the AD, I can login with the password from both
  local
   and AD, so I know that it can lookup people and passwords
  
   # getent passwd hs ; echo $?
   2
  
   When I debug on getent it returns 2, witch means that it can't
  find
   the user.
  
   Do you have winbind specified in your nsswitch.conf file as
  mentioned here:
  
  
  http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/winbind.h
   tml#id2654732
  
  
 
 _
 The New Busy is not the old busy. Search, chat and e-mail from your
  inbox.
 
  http://www.windowslive.com/campaign

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-18 Thread Necos Secon

I accidentally deleted the first set of messages in my email for this thread, 
but does your DNS resolve properly? What does your resolv.conf look like? Also, 
what do these files look like:

krb5.conf
smb.conf

There's an option in smb.conf, winbind enum users, which needs to be set in 
order for getent to function properly. There is a corresponding option for 
groups as well. Look at them and let us know.

 Date: Mon, 19 Jul 2010 01:12:41 +0200
 From: h...@semark.dk
 To: esiot...@gmail.com
 CC: samba@lists.samba.org
 Subject: Re: [Samba] Samba + Winbind + Windows 2003 AD
 
 Hi Micheal
 
 Sorry for not sending that information in the first place, but I though 
 that it was so basic that it wasn't necessary.
 
 My nsswitch.conf:
 # cat /etc/nsswitch.conf
 # /etc/nsswitch.conf
 #
 # Example configuration of GNU Name Service Switch functionality.
 # If you have the `glibc-doc-reference' and `info' packages installed, try:
 # `info libc Name Service Switch' for information about this file.
 
 passwd: compat winbind
 group:  compat winbind
 shadow: compat winbind
 
 hosts:  files mdns4_minimal [NOTFOUND=return] dns mdns4
 networks:   files
 
 services:   db files
 ethers: db files
 protocols:  db files
 rpc:db files
 
 netgroup:   nis
 
 I will mean that it is the way to do this (and it works just fine on the 
 UNIX servers that run there own Domain Controller)
 
 Med Venlig Hilsen / Best Regards
 Henrik Dige Semark
 
 Den 18-07-2010 17:03, Michael Wood skrev:
  On 18 July 2010 01:34, Henrik Dige Semarkh...@semark.dk  wrote:
 
  Hey out there.
 
  I have to join my UNIX server with an existing Win2k3 AD network.
 
  My system info:
  Debian Lenny
  Samba   - 3.4.8
  Winbind - 3.4.8
 
  Windows Server 2003 with 2000-style-AD
 
  My problem is that, I have en UNIX server that have to run auth up against
  our existing windows 2003 AD.
 
  I have successfully joined my UNIX server to the AD, without problems.
  # net ads join -U Administrator
  Enter Administrator's password:
  Using short domain name -- TEST
  Joined 'MAIL' to realm 'TEST.LOCAL'
 
  My Samba config: http://pastebin.com/ZqaA0Ypn
 
  After the join I'm able to lookup peoples with
  # wbinfo -u
   
  [...]
 
  # wbinfo -g
   
  [...]
 
  Now the problem, getent only returns the local users and not the users from
  the AD
  The funny thing is that if a user is local on the UNIX and in the AD, I can
  login with the password from both local and AD, so I know that it can 
  lookup
  people and passwords
 
  # getent passwd hs ; echo $?
  2
 
  When I debug on getent it returns 2, witch means that it can't find the
  user.
   
  Do you have winbind specified in your nsswitch.conf file as mentioned here:
 
  http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/winbind.html#id2654732
 
 
  
_
The New Busy is not the old busy. Search, chat and e-mail from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


RE: [Samba] Can I limit my browsing of share between clients?

2007-12-26 Thread Necos Secon


Well, as part of SMB, I believe the broadcasting of shares is limited to the 
local workgroup. However, what you could do is, make the share not browseable, 
use hosts allow, and add the share as a network drive in the logon scripts. 
This is what I do at my job (without the hosts allow).

 From: [EMAIL PROTECTED]
 To: samba@lists.samba.org
 Date: Thu, 27 Dec 2007 00:33:39 +0100
 Subject: [Samba] Can I limit my browsing of share between clients?


 Hi,

 I have a share like this:

 [Accounts]
 comments = Accounting Dep common files
 browseable = yes
 writable = yes
 locking = no
 path = /mnt/accounts
 guest ok = no
 hide ureadable = yes
 create mask = 0777
 directory mask = 0777
 host allowed = 192.168.0.20 192.168.0.25 192.168.0.27 192.168.0.28

 I wan't 'Accounts' to only be visable on the client's WORKGROUP listed in 
 'host allowed'.
 As it is now all clients can see Accounts but only the listed IP's can use it.
 If I set 'browseable=no' then nobody can see it.

 Is it possible or is it of the nature of M$.

 /Pelle




 _
 Spara, redigera och organisera dina foton enkelt med Photo Gallery!
 http://get.live.com/photogallery/overview--
 To unsubscribe from this list go to the following URL and read the
 instructions: https://lists.samba.org/mailman/listinfo/samba

_
Share life as it happens with the new Windows Live.
http://www.windowslive.com/share.html?ocid=TXT_TAGHM_Wave2_sharelife_122007--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Simple File I/O benchmark tool for NT clients

2007-12-25 Thread Necos Secon

Have you tried looking in to file monitoring utilities in Linux? There are 
plenty of them around. From: [EMAIL PROTECTED] To: samba@lists.samba.org 
Date: Tue, 25 Dec 2007 23:10:31 +0100 Subject: [Samba] Simple File I/O 
benchmark tool for NT clientsHi,  I need a simple tool for 
benchmarking my NT client against my Ubuntu Samba server. I get 20MB/s during 
a file copy but I think my limit is the client's hard disk.  Dose anyone know 
a simple exe tool which simulate file I/O agains the Samba server. I like to 
avoid using my lokal disk during the test.  Have looked around but can't find 
a simpe tool which dose the job without the need of installing cygwin, .NET, 
ect. just a pure simple exe   /Thanks Pelle 
_ Spara, 
redigera och organisera dina foton enkelt med Photo Gallery! 
http://get.live.com/photogallery/overview--  To unsubscribe from this list go 
to the following URL and read the instructions: 
https://lists.samba.org/mailman/listinfo/samba
_
Share life as it happens with the new Windows Live.
http://www.windowslive.com/share.html?ocid=TXT_TAGHM_Wave2_sharelife_122007--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


FW: Re: [Samba] Simple File I/O benchmark tool for NT clients

2007-12-25 Thread Necos Secon




From: [EMAIL PROTECTED]: [EMAIL PROTECTED]: RE: [Samba] Simple File I/O 
benchmark tool for NT clientsDate: Tue, 25 Dec 2007 21:44:34 -0800


Well, you could try installing SiSoft Sandra, which comes with utilities to 
help measure performance.  From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]; 
samba@lists.samba.org Subject: RE: [Samba] Simple File I/O benchmark tool for 
NT clients Date: Wed, 26 Dec 2007 01:21:09 +0100 
  From: [EMAIL PROTECTED]  To: [EMAIL 
PROTECTED]; samba@lists.samba.org  Subject: RE: [Samba] Simple File I/O 
benchmark tool for NT clients  Date: Tue, 25 Dec 2007 15:17:01 -0800
Have you tried looking in to file monitoring utilities in Linux? There are 
plenty of them around.From: [EMAIL PROTECTED]  To: 
samba@lists.samba.org  Date: Tue, 25 Dec 2007 23:10:31 +0100  Subject: 
[Samba] Simple File I/O benchmark tool for NT clients Hi,  
 I need a simple tool for benchmarking my NT client against my Ubuntu Samba 
server.  I get 20MB/s during a file copy but I think my limit is the 
client's hard disk.   Dose anyone know a simple exe tool which simulate 
file I/O agains the Samba server.  I like to avoid using my lokal disk 
during the test.   Have looked around but can't find a simpe tool which 
dose the job without the  need of installing cygwin, .NET, ect.  just 
a pure simple exe/Thanks  Pelle  
_  Spara, 
redigera och organisera dina foton enkelt med Photo Gallery!  
http://get.live.com/photogallery/overview--  To unsubscribe from this list 
go to the following URL and read the  instructions: 
https://lists.samba.org/mailman/listinfo/samba
  Share life as it happens with the new 
Windows Live. Share now!  No, thing is, I only need it for the Windows NT 
client as a binary. I don't want to compile, or install a bunch of stuff. 
Only need the simplest tool I can find for simulation of Read/Write 
performance in MB/s  /Pelle  
_ Spara, 
redigera och organisera dina foton enkelt med Photo Gallery! 
http://get.live.com/photogallery/overview

Share life as it happens with the new Windows Live. Share now! 
_
Share life as it happens with the new Windows Live.
http://www.windowslive.com/share.html?ocid=TXT_TAGHM_Wave2_sharelife_122007--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Question on number of winbindd demons

2007-11-23 Thread Necos Secon

Have you checked to see if any users are connected in smbstatus?  Date: Fri, 
23 Nov 2007 14:56:40 +0100 From: [EMAIL PROTECTED] Subject: Re: [Samba] 
Question on number of winbindd demons To: [EMAIL PROTECTED]; 
samba@lists.samba.org  I forgot to mention: Samba Version is 3.026a!  
 Original-Nachricht   Datum: Fri, 23 Nov 2007 14:28:41 +0100 
 Von: Jens Nissen [EMAIL PROTECTED]  An: samba@lists.samba.org  Betreff: 
[Samba] Question on number of winbindd demons   Winbindd is supposed to have 
2 processes running according to the  documentation.  When I start my samba 
server (security=ADS), I can see at least 4  Winbindd demons?  (A) Is this 
intended?  (B) How can I limit the number of winbindd processes?Kind 
regards,Jens  --   To unsubscribe from this list go to the 
following URL and read the  instructions: 
https://lists.samba.org/mailman/listinfo/samba  --  Der GMX SmartSurfer 
hilft bis zu 70% Ihrer Onlinekosten zu sparen!  Ideal für Modem und ISDN: 
http://www.gmx.net/de/go/smartsurfer --  To unsubscribe from this list go to 
the following URL and read the instructions: 
https://lists.samba.org/mailman/listinfo/samba
_
Your smile counts. The more smiles you share, the more we donate.  Join in.
www.windowslive.com/smile?ocid=TXT_TAGLM_Wave2_oprsmilewlhmtagline--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Howto modify samba printer ACLs without Windows?

2007-11-22 Thread Necos Secon

 Date: Mon, 19 Nov 2007 18:56:10 -0300 From: [EMAIL PROTECTED] To: [EMAIL 
 PROTECTED] Subject: Re: [Samba] Re: Howto modify samba printer ACLs without 
 Windows? CC: samba@lists.samba.org  Christoph Peus wrote:  Jim McDonough 
 wrote:  On Nov 19, 2007 10:27 AM, Christoph Peus [EMAIL PROTECTED] 
 wrote:  I would like to limit access to our samba shared printers to 
 certain  user groups by commandline without using Windows. Is this 
 possible?  see smbcacls   
 http://us1.samba.org/samba/docs/man/manpages-3/smbcacls.1.html   Thanks, 
 but the manpage says:   The smbcacls program manipulates NT Access 
 Control Lists (ACLs) on  SMB file shares.   Is there a trick to make 
 this work for printer shares?   Christoph   Yes, you have to create a 
 share per printer... saddly... I have the same problem. I have 400 printers 
 and I need to do the same thing you are trying to do with no luck.  Tell 
 me if you find a solution to this.  --  To unsubscribe from this list go 
 to the following URL and read the instructions: 
 https://lists.samba.org/mailman/listinfo/samba
Have either of you tried setting the permissions on \\server\Printer? Since 
this is the way that I see WinXP try to do when I access a printer. 
_
Connect and share in new ways with Windows Live.
http://www.windowslive.com/connect.html?ocid=TXT_TAGLM_Wave2_newways_112007--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] SETGID not being inherited

2007-11-22 Thread Necos Secon

If you read the smb.conf manpage, you'll notice this:
 
 
inherit acls (S)  This parameter can be used to ensure that if 
default acls  exist  on  parent  directories, they are always 
honored when creating a  subdirectory. The default behavior is to 
use the mode  specified  when  creating the directory. Enabling 
this option sets the mode  to 0777, thus guaranteeing that default 
directory acls are prop-  agated.
  Default: inherit acls = noSo, in essense, inherit acls and 
inherit permissions are at odds with one another. Seems as if you'll have to 
pick one or the other. 
_
You keep typing, we keep giving. Download Messenger and join the i’m Initiative 
now.
http://im.live.com/messenger/im/home/?source=TAGLM--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Howto modify samba printer ACLs without Windows?

2007-11-22 Thread Necos Secon

You don't have to write a script, as the wonderful CUPS team already did. It's 
called cupsaddsmb. Refer to its manpage for instructions.  Date: Thu, 22 Nov 
2007 05:51:42 -0300 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] CC: [EMAIL 
PROTECTED]; samba@lists.samba.org Subject: Re: [Samba] Re: Howto modify samba 
printer ACLs without Windows?  Necos Secon wrote: Date: Mon, 19 
Nov 2007 18:56:10 -0300   From: [EMAIL PROTECTED]   To: [EMAIL 
PROTECTED]   Subject: Re: [Samba] Re: Howto modify samba printer ACLs 
without  Windows?   CC: samba@lists.samba.org Christoph Peus 
wrote:Jim McDonough wrote:On Nov 19, 2007 10:27 AM, Christoph 
Peus [EMAIL PROTECTED] wrote:I would like to limit access to our 
samba shared printers to certainuser groups by commandline without 
using Windows. Is this possible?see smbcacls   
http://us1.samba.org/samba/docs/man/manpages-3/smbcacls.1.html   
Thanks, but the manpage says:   The smbcacls program manipulates 
NT Access Control Lists (ACLs) onSMB file shares.   Is 
there a trick to make this work for printer shares?   Christoph  
  Yes, you have to create a share per printer... saddly... I have 
the same   problem.   I have 400 printers and I need to do the same thing 
you are trying to do   with no luck. Tell me if you find a 
solution to this. --   To unsubscribe from this list go to the 
following URL and read the   instructions: 
https://lists.samba.org/mailman/listinfo/samba   Have either of you tried 
setting the permissions on \\server\Printer  file://%5C%5Cserver%5CPrinter? 
Since this is the way that I see  WinXP try to do when I access a printer. 
   
 Connect and share in new ways with Windows Live. Connect now!  
http://www.windowslive.com/connect.html?ocid=TXT_TAGLM_Wave2_newways_112007 
 Yes! I found this! Is great. Know im working on a script to parse the 
printers.conf from the cups and make the shares in samba. You need a share per 
printer to assing privilegies like you suggest.  Tnxs. 
_
Share life as it happens with the new Windows Live.Download today it's FREE!
http://www.windowslive.com/share.html?ocid=TXT_TAGLM_Wave2_sharelife_112007--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Howto modify samba printer ACLs without Windows?

2007-11-22 Thread Necos Secon

Someone mentioned the use of the smbacls program, which is what I was referring 
to. So, if you use smbacls on \\server\share or //server/share (I forget which 
format it uses), it should work.
_
Connect and share in new ways with Windows Live.
http://www.windowslive.com/connect.html?ocid=TXT_TAGLM_Wave2_newways_112007--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Howto modify samba printer ACLs without Windows?

2007-11-22 Thread Necos Secon

This would be great, but the cupsaddsmb dosen't make the share insamba... I 
will read again the manpage, but as far as I know..
 
Well, it does create a share, sort of... It adds an entry in the printing 
database for the printer, allowing it to be accessable from the [printers] 
share. So, in essense, you could use a script to loop over the output of this 
command:
 
smbclient -L //server | grep -i 'printer'
 
and then use smbacls to do the actual work. It's 1am where I live, so I'm not 
really good with the code right now.
_
You keep typing, we keep giving. Download Messenger and join the i’m Initiative 
now.
http://im.live.com/messenger/im/home/?source=TAGLM--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] username with @ (at character) - problems with authentication (CUPS)

2007-10-27 Thread Necos Secon

Woohoo! Congrats on getting it working. I figured it would be worth a shot. 
Glad I could be of help.

Theodore Charles III
Network Administrator
Los Angeles Senior High
www.lahigh.org

 Date: Fri, 26 Oct 2007 09:15:52 +0200
 From: [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 CC: [EMAIL PROTECTED]; samba@lists.samba.org
 Subject: Re: [Samba] username with @ (at character) - problems with   
 authentication (CUPS)
 
 Hey Necos!
 
 Thank you, it works! I used DOMAIN\username notation.
 -- 
---   Piotr Kierklo   ---
   Systems Engineer at World IT Systems
 -- [EMAIL PROTECTED] --

_
Climb to the top of the charts!  Play Star Shuffle:  the word scramble 
challenge with star power.
http://club.live.com/star_shuffle.aspx?icid=starshuffle_wlmailtextlink_oct--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] getent passwd not listing domain users, nsswitch.conf is configured

2007-10-21 Thread Necos Secon

This is one that took me a while to figure out. By default, the newer versions 
of samba tell winbind not to enumerate users or groups, because this could 
cause a performance drop for large (1+ users I believe) networks. The way 
to fix this is to set these two options in smb.conf:
 
winbind enum users = yes
winbind enum groups = yes
 
Hope that helps some. Date: Wed, 17 Oct 2007 11:03:13 -0600 From: [EMAIL 
PROTECTED] To: samba@lists.samba.org Subject: [Samba] getent passwd not 
listing domain users, nsswitch.conf is configured  Using Samba 3.0.25c on 
OpenSolaris nv72.  wbinfo -u lists domain users as expected. getent passwd 
only lists local users. nsswitch.conf has the following lines: passwd: files 
winbind group: files winbind  My smb.conf is below. Where should I start to 
troubleshoot?  [global] realm = FNB.LOCAL workgroup = FNB security = ADS 
use kerberos keytab = true ; password server = my-server.fnb.local encrypt 
passwords = yes server string = Samba ADS client use spnego = yes  # 
winbind configuration: winbind use default domain = yes winbind nested groups 
= yes idmap backend = ad winbind nss info = rfc2307 winbind separator = / 
winbind enum users = yes winbind enum groups = yes # idmap uid = 1-2 
# idmap gid = 1-2 ; template homedir = /samba/pchome/%D/%U  # idmap 
domains = FNB # idmap config FNB:default = yes # idmap config FNB:backend = 
tdb # idmap config FNB:range = 1-2 # this tells Samba to use a 
separate log file for each machine # that connects log file = 
/var/samba/log/log.%m log level = 10 # Put a capping on the size of the log 
files (in Kb). max log size = 1024  # Most people will find that this option 
gives better performance. # See the chapter 'Samba performance issues' in the 
Samba HOWTO Collection # and the manual pages for details. ; socket options = 
TCP_NODELAY --  To unsubscribe from this list go to the following URL and 
read the instructions: https://lists.samba.org/mailman/listinfo/samba
_
Climb to the top of the charts!  Play Star Shuffle:  the word scramble 
challenge with star power.
http://club.live.com/star_shuffle.aspx?icid=starshuffle_wlmailtextlink_oct--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] username with @ (at character) - problems with authentication (CUPS)

2007-10-21 Thread Necos Secon

In most cases, Windows provides a short-form of your user name (netbios 
compatible), so if you're at [EMAIL PROTECTED], then you might actually be able 
to connect as DOMAIN\abc. Try leaving off the extra stuff, and just using abc. 
Worth a shot. Date: Wed, 17 Oct 2007 10:18:31 +0200 From: [EMAIL PROTECTED] 
To: [EMAIL PROTECTED] Subject: Re: [Samba] username with @ (at character) - 
problems with authentication (CUPS) CC: samba@lists.samba.org  herman 
wrote:   Yup, Samba doesn't like funny characters. In general, if you stick 
to   the POSIX portable character set then you'll be OK. For anything   
outside of that, you are on your own.  Does the same refers to the space in 
printer's name? I have no way to change the username nor printer's name, 
because I am  not the administrator on that Windows machine. Isn't there any 
way to  escape the special characters?   --  --- Piotr Kierklo --- 
Systems Engineer at World IT Systems -- [EMAIL PROTECTED] -- --  To 
unsubscribe from this list go to the following URL and read the instructions: 
https://lists.samba.org/mailman/listinfo/samba
_
Help yourself to FREE treats served up daily at the Messenger Café. Stop by 
today.
http://www.cafemessenger.com/info/info_sweetstuff2.html?ocid=TXT_TAGLM_OctWLtagline--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] How to make Add permission for folder in system with ntacl support?

2007-10-15 Thread Necos Secon

Yes, it is possible to do this in Samba with Linux ACL support.

You have to look at setfacl. There are two types of permissions that you can 
set using setfacl. The first are permissions on the directory or file itself. 
For example, this sets the group ntadmins to read/write/execute on the 
directory /home/ntadmins:

setfacl -m g:ntadmins:rwx -R /home/ntadmins

Now, the second type of permissions apply to any file (or directory) that is 
created in /home/ntadmins:

setfacl -m d:g:ntusers:--- -R /home/ntadmins

The effect of the second setfacl command says that the group ntusers will be 
explicitly given no access to any file or directory created in /home/ntadmins.

So, if you're trying to create a dropbox for a group staff, it would look 
something like this:

setfacl -m g:staff:rwx -R /home/dropbox
setfacl -m d:g:staff:--- -R /home/dropbox

What this does is allow them to add files to the directory, but immediately 
strip their permissions once the file is uploaded. Try this out. I hope it does 
what you want.

 From: [EMAIL PROTECTED]
 To: samba@lists.samba.org
 Subject: Fw: [Samba] How to make Add permission for folder in system with   
 ntacl support?
 Date: Sun, 14 Oct 2007 22:49:34 +0300
 
 Is it too simple and therefore noone will answer? :) Or it is not possible 
 with Samba on Linux?
 
 Thanks,
 G.
 
 
 
 - Original Message - 
 From: Georgy Goshin [EMAIL PROTECTED]
 To: samba@lists.samba.org
 Sent: Thursday, October 11, 2007 6:34 PM
 Subject: [Samba] How to make Add permission for folder in system with 
 ntacl support?
 
 
  Hi,
 
  On windows nt is possible to configure permission when users can add files 
  to share or folder but can't read and even list files in this share or 
  filder. Is it possible to make this with samba fileserver?
 
 
  Thanks,
  G.
  -- 
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/listinfo/samba
  
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba

_
Climb to the top of the charts!  Play Star Shuffle:  the word scramble 
challenge with star power.
http://club.live.com/star_shuffle.aspx?icid=starshuffle_wlmailtextlink_oct--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] kinit works, net join ads fails

2007-09-03 Thread Necos Secon
I actually had this happen to me not too long ago with Samba 3.0.25c. My 
problem was that I didn't set the ADS mode properly. You're always warned to 
set workgroup equal to the the pre-windows2000 domain name.


So, just a few things to check:

1.) Typo's in the realm name.
2.) Typo's in the krb5.conf file (I use heimdal)
3.) Try running the net ads join with the administrator account (if you're 
using another account).
4.) Checking the the AD server to make sure that you don't have an old 
machine account for the Samba machine.


Hope that helps.

Theodore Charles III
Network Administrator
Los Angeles Senior High (www.lahigh.org)



From: Peter Baumgartner [EMAIL PROTECTED]
To: samba@lists.samba.org
Subject: [Samba] kinit works, net join ads fails
Date: Wed, 29 Aug 2007 15:55:28 -0600

I running 3.0.25c on OpenSolaris. I can succesfully do a kinit and see
the ticket via klist, but am unable to join the domain.

/usr/sfw/sbin/net -d 5 ads join -U [EMAIL PROTECTED]

gives the following error...

[2007/08/29 15:49:24, 3] libsmb/clikrb5.c:(593)
  ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache
file found)
[2007/08/29 15:49:24, 0] libads/kerberos.c:(228)
  kerberos_kinit_password [EMAIL PROTECTED] failed: Preauthentication 
failed

[2007/08/29 15:49:24, 1] utils/net_ads.c:(1470)
  error on ads_startup: Preauthentication failed
Failed to join domain: Logon failure
[2007/08/29 15:49:24, 2] utils/net.c:(1032)

I have synced the time on the Samba box with my domain controller. Any
thoughts on what is wrong?

--
Pete
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


_
Get a FREE small business Web site and more from Microsoft® Office Live! 
http://clk.atdmt.com/MRT/go/aub0930003811mrt/direct/01/


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Change print job priority

2007-07-07 Thread Necos Secon
I believe the problem is that only users in the sys group can modify job 
priorities. So, this includes root. If your user is not part of an admin 
group (done with net groupmap or using /etc/group), then I suspect that you 
will get access denied errors. All members of Domain Admins have this 
right, as they are directly mapped to root.


Hope that helps.



From: Martin Werthmoeller [EMAIL PROTECTED]
To: samba@lists.samba.org
Subject: [Samba] Change print job priority
Date: Sat, 7 Jul 2007 13:07:46 +0200

Hi list members,

I've a problem with a printer in a samba network like the following

  client  samba dc  cups  network plotter

Client: Windows XP Professional
Samba:  3.0.20b on SLES 9, SP3
Cups:   1.1.20
Printer:HP DesignJet 1050C

The plotter is installed as a windows network printer on the samba server.

Cups is directly connected to samba:

   printing = cups
   printcap name = cups
   cups options = raw

No I send a print job from the windows client to the plotter and try to
change the priority of the print job. The graphical interface of the
printer driver shows a slider to set the priority of the current job from
1 to 100. But if I clicked 'Apply', the program shows a message, that it
is not possible to change the job.

I enabled the debug logging at the cups daemon. There's no message shown
about this. It seems to be a problem between the client and the samba -
cups connections.

I've recorded the communication between client and samba server with
tcpdump and disassembled the traffic with wireshark (ethereal). I see many
many smb rpc messages interchanged. I could not find any message to change
the priority of the print job.

Could anbody tell me, how I can debug this?

Is it possible to increment the samba logging only for printer
communication?

Whats the name of the smb rpc call to change the job priorty. Is the
syntax documented somewhere?

Best regards,
Martin Werthmoeller

--
LWsystems - IT-Service and Consulting
[EMAIL PROTECTED] * http://www.lw-systems.de
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


_
Local listings, incredible imagery, and driving directions - all in one 
place! http://maps.live.com/?wip=69FORM=MGAC01


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Change print job priority

2007-07-07 Thread Necos Secon
The printer_admins group does not exist by default (unless you created it 
and assigned it the proper rights via net groupmap). CUPS sets the default 
administration group to be sys. If you change that group, you have to make 
sure that it exists via winbindd or /etc/password. I've found that you have 
to do a groupmap for Domain Admins to root. I forget the syntax of the 
command, but it's in the samba3 howto. Are you using the cups-samba drivers 
for your clients or are you using the vendor drivers on the client side? It 
may be an incompatibility issue.






From: Martin Werthmoeller [EMAIL PROTECTED]
To: samba@lists.samba.org
Subject: Re: [Samba] Change print job priority
Date: Sat, 7 Jul 2007 15:06:47 +0200

Am Sat, 07 Jul 2007 um 05:22 GMT -0700 schrieb Necos Secon:

Hi Necos,

 I believe the problem is that only users in the sys group can modify job
 priorities.

  So, this includes root. If your user is not part of an admin
 group (done with net groupmap or using /etc/group), then I suspect that
 you will get access denied errors. All members of Domain Admins have
 this right, as they are directly mapped to root.


On samba or do you mean the cups default?
On cups, the cupsd.conf directive is set to the group printer_admins.
The user I used for the operation was a member of this group. On samba,
the printer admin directive was set to

 printer admin = @domain admins, @printer_admins, administrator


Best regards,
Martin Werthmoeller

--
LWsystems - IT-Service and Consulting
[EMAIL PROTECTED] * http://www.lw-systems.de
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


_
Need a brain boost? Recharge with a stimulating game. Play now!  
http://club.live.com/home.aspx?icid=club_hotmailtextlink1


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Domain authentication not working

2007-05-20 Thread Necos Secon
You need to look at chapter 6 of the Samba 3 HOWTO on samba.org. You need to 
setup domain pass-through authentication. Are you using winbind? You should 
be getting all the domain accounts when you do wbinfo -u and getent passwd. 
If not, please refer to the above document.


Good luck



From: Daniel Kasak [EMAIL PROTECTED]
To: samba@lists.samba.org
Subject: Re: [Samba] Domain authentication not working
Date: Mon, 21 May 2007 13:56:18 +1000

On Mon, 2007-05-21 at 11:46 +1000, Daniel Kasak wrote:

 Hi all.

 I'm trying to share a printer out via samba, and it's suddenly stopped
 working. Samba says it's connecting to the DC, but then returning
 NT_STATUS_NO_SUCH_USER.

Right. I have things 'working'. I added a 'dkasak' account on the samba
server, and NOW it authenticates. Is there a way to allow clients to
authenticate against DOMAIN accounts from an NT4 PDC to access services
on a SAMBA server WITHOUT having a user account with a matching name on
the samba server?

--
Daniel Kasak
IT Developer
NUS Consulting Group
Level 5, 77 Pacific Highway
North Sydney, NSW, Australia 2060
T: (+61) 2 9922-7676 / F: (+61) 2 9922 7989
email: [EMAIL PROTECTED]
website: http://www.nusconsulting.com.au

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


_
More photos, more messages, more storage—get 2GB with Windows Live Hotmail. 
http://imagine-windowslive.com/hotmail/?locale=en-usocid=TXT_TAGHM_migration_HM_mini_2G_0507


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] UID, GID access query

2007-04-30 Thread Necos Secon
If you have a filesystem that supports ACLs, then you can just add there 
ACLs to the directory. If Samba was compiled with ACL support, then it will 
read those ACLs when a user tries to access a resource.


Theodore Charles
Network Administrator
Los Angeles Senior High



From: JM Fraser [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
To: samba@lists.samba.org
Subject: [Samba] UID, GID access query
Date: Sun, 29 Apr 2007 10:59:29 +0100

Is it possible that I can setup Samba to allow access to certain
directories dependent on the UID or GID? I may have various directories
owned by someone else but will still need to be accessed by the logged in
Samba member.

Is this possible?

Jules

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


_
Interest Rates NEAR 39yr LOWS!  $430,000 Mortgage for $1,299/mo - Calculate 
new payment 
http://www.lowermybills.com/lre/index.jsp?sourceid=lmb-9632-19132moid=14888


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] ACLS, inherit owner=yes

2007-04-21 Thread Necos Secon
Do you have the acl/xattr utilities installed and necessary kernel support? 
(I'm going to assume yes for a moment). While I can't confirm the inherit 
owner issue with RHEL4 (don't run the distro), I can definitely say that 
inherit owner _WILL_ work in versions after 3.0.15 properly. I am using .23c 
with little to no issues. I believe that you should upgrade to a newer RHEL 
rpm of Samba if at all possible. Hope that works out for you.


Theodore Charles III
Network Administrator
Los Angeles Senior High



From: Pierig Le Saux [EMAIL PROTECTED]
To: samba@lists.samba.org
Subject: [Samba] ACLS, inherit owner=yes
Date: Fri, 20 Apr 2007 16:15:04 +0200

Hello,

I am currently migrating data from NT4 to Samba, and ownership is not
preserved.

Could someone please confirm the option inherit owner does not work on
RHEL4 (samba-3.0.10-1.4E.11)?

How can I get this working?

Regards



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


_
Mortgage refinance is Hot. *Terms. Get a 5.375%* fix rate. Check savings 
https://www2.nextag.com/goto.jsp?product=10035url=%2fst.jsptm=ysearch=mortgage_text_links_88_h2bbbdisc=yvers=925s=4056p=5117


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Print queues not emptying

2007-03-16 Thread Necos Secon
The last time I had this problem, it was with CUPS 1.1.x, and the problem 
had to do with the PreserveJobHistory and PreserveJobFiles settings (as well 
as a couple of others in the same general area). I had initially set them to 
No (thinking it was wise not to let students re-print items). We experienced 
print jobs stuck in queues. I'd suggest reverting those printing settings 
back to the defaults and see if the problems go away.


Theodore Charles III
System Administrator
Los Angeles Senior High



From: Lutieri G. [EMAIL PROTECTED]
To: samba samba@lists.samba.org
Subject: [Samba] Print queues not emptying
Date: Mon, 12 Mar 2007 16:44:06 -0300

i'm having this problem:

https://bugzilla.samba.org/show_bug.cgi?id=2220

But. i'm running samba 3.0.24 not 3.0.11 as in bug page.

take a look:
# smbd  -b
Build environment:
  Built by:[EMAIL PROTECTED]
  Built on:Wed Feb  7 23:52:44 EST 2007
  Built using: gcc
  Build host:  Linux hs20-bc1-7.build.redhat.com 2.6.9-34.ELsmp #1
SMP Fri Feb 24 16:56:28 EST 2006 i686 i686 i386 GNU/Linux
  SRCDIR:  /builddir/build/BUILD/samba-3.0.24/source
  BUILDDIR:/builddir/build/BUILD/samba-3.0.24/source
...

Some printers, not all, keep the jobs in queue when viewing from
windows client. Cups(1.2.5) has no jobs in queue.

What can I do?!


tanx


--
Att.
Lutieri G. B.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


_
5.5%* 30 year fixed mortgage rate. Good credit refinance. Up to 5 free 
quotes - *Terms 
https://www2.nextag.com/goto.jsp?product=10035url=%2fst.jsptm=ysearch=mortgage_text_links_88_h2a5ds=4056p=5117disc=yvers=910


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] CUPS errors when not using CUPS - Breaks printing

2007-03-16 Thread Necos Secon
Did you run the configure using --without-cups? I know Samba really likes 
CUPS now, and is the default printing system. Maybe it's stopping after not 
being able to get to CUPS (since CUPS doesn't exist there).

From: Mac [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: [Samba] CUPS errors when not using CUPS - Breaks printing
Date: Thu, 8 Mar 2007 12:25:42 + (GMT)

Hi All,

We appear to have a CUPS problem that is breaking our (LPRng)
based printing.


We now have loads of errors of the form:_

[2007/03/08 12:21:36, 0, pid=23877] 
printing/print_cups.c:cups_cache_reload(85)

  Unable to connect to CUPS server localhost - Connection refused


filling up the log.smbd file


We using
printing=lprng
in smb.conf, and there isn't (nor has there ever been) any CUPS on the
server.

Any attempt to connect to a printer (e.g. Start|Run|\\server\printer )
results in an XP error message 'Incorrect Function'.


This is Samba 3.0.24 compiled from source on Solaris 9.




   Mac
  Assistant Systems Administrator @nibsc.ac.uk
   [EMAIL PROTECTED]
   Work: +44 1707 641565  Everything else: +44 7956 237670 
(anytime)

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


_
Get a FREE Web site, company branded e-mail and more from Microsoft Office 
Live! http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Exceeding Idle Connections...

2007-02-10 Thread Necos Secon
I have a machine running 3.0.23c that has been patched to use 700 
connections before running out. However, I'm still having issues with idle 
connections running out. I have roughly 1000 machines on the network that 
need to access this server (it's a printer server for the high school with 
~120 printers shared through CUPS). I'm wondering how I could go about 
solving the idle connection issue. Should I just keep increasing the number 
of idle connections?


I'm running Slackware 10.2 with 2.4.31 kernel. Has anyone been able to 
reproduce this issue? Any help would be appreciated


Theodore Charles III
Network Administrator -- Los Angeles Senior High

_
Invite your Hotmail contacts to join your friends list with Windows Live 
Spaces 
http://clk.atdmt.com/MSN/go/msnnkwsp007001msn/direct/01/?href=http://spaces.live.com/spacesapi.aspx?wx_action=createwx_url=/friends.aspxmkt=en-us


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba v3.0.23a BROKE my network

2007-01-27 Thread Necos Secon
If I recall, in the release notes for .23, there was a note about requiring 
the groupmaps since all accounts that were local to the machine running 
Samba would be given a new SID (S-1-22 or something similar). I believe this 
is to emulate the same local/global account setup that exists in NT4 
domains.



From: Brian H. Nelson [EMAIL PROTECTED]
To: Chris Hall [EMAIL PROTECTED]
CC: samba@lists.samba.org
Subject: Re: [Samba] Samba v3.0.23a BROKE my network
Date: Fri, 26 Jan 2007 15:36:23 -0500

Chris Hall wrote:

On Wed, 24 Jan 2007 you wrote
  *snip*
I had a configuration that worked pre .23 but now suddenly did not work.

What I needed to know was that with .23 it is ESSENTIAL that groupmap
settings are made for a small number of groups.

Even better, it would have been good to know that without those groupmap
settings, users would not be able to log on.



Could someone explain why these group maps are essential, and exactly why 
the lack of them made logins break for Chris's network? Does it have 
anything to do with roaming profiles?


I ask because I have a very similar setup. I am running 3.0.23c (upgraded 
from .21something, and .14 before that). I have never mapped any groups by 
hand and I have not experienced any problems with logins. I double checked 
today, and both 'net group' and 'net groupmap list' return nothing (no 
groups defined).


I'm not trying to be devil's advocate here. It really seems like Chris may 
have had a special situation that caused his problems. If that is the case, 
it would be beneficial to identify it, and perhaps that info could go into 
the release notes for future versions.


On the other hand, if I'm the special case, I'd like to figure out why so I 
don't have problems in the future.


-Brian

--
---
Brian H. Nelson Youngstown State University
System Administrator   Media and Academic Computing
 bnelson[at]cis.ysu.edu
---

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


_
Check out all that glitters with the MSN Entertainment Guide to the Academy 
Awards®   http://movies.msn.com/movies/oscars2007/?icid=ncoscartagline2


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Windows clients cannot print in color

2006-05-28 Thread Necos Secon
Hmmm... Be careful with the 1.2 series of CUPS. I've noticed problems with 
color printer ppds in this version. I've been using 1.1.23 with 
foomatic/postscript drivers (downloaded from linuxprinting.org) with no real 
problems. What kind of color laser printers do you have? At my job, we use 
HP 4550Ns. Also, make sure you're using the CUPS windows driver with your 
Windows clients. That may help a bit.


Theodore Charles III
Network Administrator
Los Angeles Senior High



From: Dale Schroeder [EMAIL PROTECTED]
To: samba@lists.samba.org
Subject: [Samba] Windows clients cannot print in color
Date: Fri, 26 May 2006 13:59:05 -0500

I have a Samba 3.0.22 server running as security = ADS on a Debian Sarge 
3.1 system and operating as expected.  I recently added print server 
functions via CUPS 1.2.1.  The drivers appear to install properly on the 
clients.  Test pages print flawlessly from the CUPS server, but will only 
print grayscale from the Windows 2000/XP clients.  It is a universal 
phenomenon, applying to all 3 color laser printers.  PDF's are also a 
problem - either mangled or nothing at all.


Three days on Google hasn't been able to help me, maybe one of you can.
Thanks,
--
Dale Schroeder

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] How to force XP to use an unqualified username?

2005-05-29 Thread Necos Secon
The other thing that you can do is use the password manager in XP to tell it 
to use a specific user when connecting to that server. Also, you can use the 
guest ok = yes on the share definition to allow any user to connect 
without a password.


Hope this is of some help,

Theodore Charles III
Network Administrator
Los Angeles Senior High


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Listing all users in a remote Samba server

2005-04-09 Thread Necos Secon
If you're using perl, you could always use the backticks to get the output 
of a command. For example:

my $userlist = `net rpc user -S $server -P $pass`;
or
my @userlist = `net rpc user -S $server -P $pass`;
I forget if the net commands support passing a password to it, but if it 
does, then your job is done. Also, if I recall, the output of net rpc user 
is newline delimited, so you'll have to parse it with a couple of regexes. 
Something like this might work:

my @users;
my $go = 1;
while ($go)
{
 my $temp;
 $temp = ($userlist =~ m/\n/);
 my $chopper = length($temp) + 1;
 reverse($userlist);
 while ($chopper)
 {
   chop($userlist);
   $chopper--;
 }
 reverse($userlist);
 if ( length($userlist) = 1 )
 {
   $go = 0;
 }
}
Untested and I know the algorithm could be a lot better. But, maybe this'll 
give you some direction.

Theodore Charles III
Network Administrator
Los Angeles High School
gt;From: Erik Torres Serrano lt;[EMAIL PROTECTED]gt;
gt;Reply-To: [EMAIL PROTECTED]
gt;To: samba@lists.samba.org
gt;Subject: Re: [Samba] Listing all users in a remote Samba server
gt;Date: Sat, 09 Apr 2005 15:02:22 -0400
gt;
gt;Paul Gienger wrote:
gt;
gt;gt;
gt;gt;gt;I'm trying to develop a service for retrieving the entire user
gt;gt;gt;list of a remote samba server. The expected result is the same
gt;gt;gt;expected from the use of the samba command:
gt;gt;gt;
gt;gt;gt;net rpc user
gt;gt;gt;
gt;gt;Depending on your backend, there's several ways to go about it,
gt;gt;including querying LDAP for the entries with an appropriate filter
gt;gt;and parsing the smbpasswd file.  I believe you could also get some
gt;gt;info out of pdbedit, but that could be a bit tedious.
gt;gt;What is your backend?
gt;
gt;Ok, what I have is a standalone Samba server without ADS or LDAP.
gt;Users are managed in a smbpasswd file. In the other side I have a
gt;Linux box running webmin. Both servers are in the same LAN. What I
gt;need is an App to be included in webmin (that's why I need Perl) in
gt;the second box for listing all users in the Samba server.
gt;I saw that net command use a RPC request but I didn't find how to do
gt;the same.
gt;That's all I have :(
gt;
gt;Regards,
gt;
gt;Erik
gt;
gt;--
gt;To unsubscribe from this list go to the following URL and read the
gt;instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Listing all users in a remote Samba server

2005-04-09 Thread Necos Secon
If you're really concerned about security, you can run the code on Samba 
server itself and pipe the output to SSH (if you're running a *nix variant). 
There's a Net::SSH module available for just this purpose. Combine this with 
scp and you can get the output you desire.

Theodore Charles III
Network Administrator
Los Angeles High School
gt;From: Erik Torres Serrano lt;[EMAIL PROTECTED]gt;
gt;Reply-To: [EMAIL PROTECTED]
gt;To: samba@lists.samba.org
gt;Subject: Re: [Samba] Listing all users in a remote Samba server
gt;Date: Sat, 09 Apr 2005 17:38:22 -0400
gt;
gt;Thanks a lot for your answer.
gt;
gt;As a matter of security I really don't want to install network
gt;client applications on the box. In the other hand this job is part
gt;of a new webmin module, so the use of external commands unassociate
gt;with webmin are not available for me :(
gt;
gt;Regards,
gt;
gt;Erik
gt;
gt;Necos Secon wrote:
gt;
gt;gt;If you're using perl, you could always use the backticks to get the
gt;gt;output of a command. For example:
gt;gt;
gt;gt;my $userlist = `net rpc user -S $server -P $pass`;
gt;gt;
gt;gt;or
gt;gt;
gt;gt;my @userlist = `net rpc user -S $server -P $pass`;
gt;gt;
gt;gt;I forget if the net commands support passing a password to it, but
gt;gt;if it does, then your job is done. Also, if I recall, the output of
gt;gt;net rpc user is newline delimited, so you'll have to parse it with
gt;gt;a couple of regexes. Something like this might work:
gt;gt;
gt;gt;my @users;
gt;gt;my $go = 1;
gt;gt;while ($go)
gt;gt;{
gt;gt;  my $temp;
gt;gt;  $temp = ($userlist =~ m/\n/);
gt;gt;  my $chopper = length($temp) + 1;
gt;gt;  reverse($userlist);
gt;gt;  while ($chopper)
gt;gt;  {
gt;gt;chop($userlist);
gt;gt;$chopper--;
gt;gt;  }
gt;gt;  reverse($userlist);
gt;gt;  if ( length($userlist) lt;= 1 )
gt;gt;  {
gt;gt;$go = 0;
gt;gt;  }
gt;gt;}
gt;gt;
gt;gt;Untested and I know the algorithm could be a lot better. But, maybe
gt;gt;this'll give you some direction.
gt;gt;
gt;gt;Theodore Charles III
gt;gt;Network Administrator
gt;gt;Los Angeles High School
gt;gt;
gt;
gt;--
gt;To unsubscribe from this list go to the following URL and read the
gt;instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Can't mount samba share, Access denied

2005-04-09 Thread Necos Secon
I'm curious to see the output of: 'ls -ld /export/myshare'. The directory 
should have at least r-xr-x--- to be able to access it properly. If you want 
to write, you'll need rwxr-x---.

Theodore Charles III
Network Administrator
Los Angeles High School
gt;From: Mike Mercier lt;[EMAIL PROTECTED]gt;
gt;Reply-To: Mike Mercier lt;[EMAIL PROTECTED]gt;
gt;To: samba@lists.samba.org
gt;Subject: [Samba] Can't mount samba share, Access denied
gt;Date: Tue, 5 Apr 2005 11:36:59 -0700
gt;
gt;Hello,
gt;
gt;I have samba configured with the following smb.conf file:
gt;
gt;[global]
gt;workgroup = mydomain
gt;netbios name = servername
gt;security = domain
gt;printcap name = cups
gt;disable spoolss = yes
gt;show add printer wizard = no
gt;idmap uid = 15000-2
gt;idmap gid = 15000-2
gt;winbind use default domain = yes
gt;use sendfile = yes
gt;printing = cups
gt;
gt;[myshare]
gt;comment = My new share
gt;path = /export/myshare
gt;valid users = myusername
gt;read only = no
gt;
gt;
gt;If I try to:
gt;mount -t smbfs -o username=myusername,workgroup=mydomain
gt;//servername/myshare /mnt/samba
gt;After typing in my password I see:
gt;25744: tree connect failed: ERRDOS - ERRnoaccess (Access denied)
gt;SMB connection failed
gt;
gt;I also get an access denied error when trying to quot;net usequot; the 
share from a
gt;windows machine
gt;
gt;but, I can:
gt;smbclient -L servername -U myusername
gt;After typing password I see:
gt;
gt;Domain=[MYDOMAIN] OS=[UNIX] Server=[Samba 3.0.7-1.3E.1]
gt;
gt;Sharename   Type   Comment
gt;---  --  --
gt;myshare   disk  my new share
gt;IPC$ IPC  IPC Service (Samba 
3.0.7-1.3E.1)
gt;ADMIN$IPC  IPC Service (Samba 3.0.7-1.3E.1)
gt;Domain=[MYDOMAIN] OS=[UNIX] Server=[Samba 3.0.7-1.3E.1]
gt;ServerComment
gt; ---
gt;mypdcPDC
gt;servername samba 3.0.7-1.E3.1
gt;
gt;WorkgroupMaster
gt;--- --
gt;mydomain mypdc
gt;
gt;I can also run the following commands successfully
gt;wbinfo -u
gt;wbinfo -g
gt;getent passwd myusername
gt;getent groups
gt;
gt;Anyone have any idea what is going on here?
gt;
gt;Thanks,
gt;--
gt;To unsubscribe from this list go to the following URL and read the
gt;instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba and CUPS driver download

2005-04-04 Thread Necos Secon
I've set up the automatic driver download as per the instructions in the 
Official Samba-3 HOWTO. The printers are browseable on the Samba/CUPS server 
(named Venus in this case), however, when I try to connect to the printer 
via a Windows 2000 or XP machine, I get an error: The server on which the 
printer resides does not have the correct printer driver installed. If you 
want to install the driver on your local computer, click OK.

The driver on the Venus is the cups-samba driver (version 5.0rc3), and is 
using the Lexmark Optra E312 Foomatic/Postscript (recommended) driver from 
Linuxprinting.org. The printer name is Printer_CLC_Sat_212 (in CUPS and 
Samba). What makes things more interesting is that another printer, 
Printer_CLC_Sat_220 (the last number is the classroom number) also resides 
on Venus, and when I try to connect to this printer (using the same Windows 
2000 machine), it connects just fine. If I try to connect to yet another 
printer, Printer_AUX_HP (this is the printer in my office), again, it 
connects just fine, and prints. Is 212's configuration corrupted in Samba? I 
also run netatalk on this server to provide print services to our OS 9 and 
10 clients, but I've yet to see any sort of headbutting between the two 
services.

Any tips would be appreciated,
Theodore Charles III
Network Administrator
Los Angeles Senior High
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba