[Samba] Re: Samba-LDAP TLS problems with inofficial Debian OpenLDAP 2.2 packages

2005-03-23 Thread Paul Coray

 > Anyway, if you have those packages from the Debian openldap2 sources
 > handy, I would gladly test them.
I just built them. I don't think it will help though. Looking at the
source I wonder why it doesn't fail consistently. So I have to ask you
another question: Are you using that SASL stuff? (I never used it...)
I could switch it off which would completely eliminate the errorneous
code path.
No, I never used SASL, since I want TLS for LDAP transport ;-).
Cheers
Paul
--
Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba-LDAP TLS problems with inofficial Debian OpenLDAP 2.2 packages

2005-03-23 Thread Paul Coray
Torsten,
Thanks for your quick response!
 >
 > Package: slapd
 > Version: 2.2.20-1.hrz.1
 >
 > Package: libldap2.2
 > Version: 2.2.20-1.hrz.1
 >
 > Package: ldap-utils
 > Version: 2.2.20-1.hrz.1
Where are those available? I did not know about that fork and perhaps I
can share some work with the maintainer.
Sorry, as the Packages file at ftp://ftp.uni-marburg.de/linux/debian 
mentions your name as maintainer, I thought you made those, but I'm glad 
you are willing to deal with them anyway :-)


 > smbd:
 > 
/home/roland/debian/openldap/build/2.1.30/openldap2-2.1.30/libraries/libldap/cyrus.c:468: 

 > ldap_int_sasl_open: Assertio
 > n `lc->lconn_sasl_ctx == ((void *)0)' failed.
This is a known bug in the Debian packages. Have a look at
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=273620
If you can reproduce it we might be able to track it down finally.
Not so easy, as this happened only twice in the morning when the load 
from user authenticating, maybe also changing attributes (passwords) was 
high. Difficult to simulate this in a testing environment...

 > Is samba using the 'original' OpenLDAP 2.1.30 TLS libraries, even if I
 > have the ldap libraries linked to 2.2?
Yes. It will use the 2.1.30 libraries as they are incompatible with
2.2.x
 > And, why does this go away as soon as I stop slurpd on the master and
 > slapd on the slave?
No idea.
 > This is critical to us, as this is the first major step migrating ~200
 > users away from NT-desktops to Linux thin clients, and I don't want to
 > give them something to argue against OSS...
My guess how to fix this: Get the openldap2 sources from the Debian
package and build it against OpenSSL. I can make packages available if
you can't build them.
You should change debian/changelog so that apt can differentiate between
the official and your packages and debian/configure.options so it uses
OpenSSL. Ah, and remove gnutls from Build-Depends in debian/control and
add libssl-dev. Make sure no gnutls dev package is installed as the
configure script had a bug to use it even if you'd rather use OpenSSL.
Hmm... Ok, I'll give it a shot. Problem though is, this is a productive 
server as from last monday. In my testing environment, the mentioned 
packages worked flawlessly, so this HAS to work, once I use it in 
production, or my users might get upset, if you know what I mean... ;-)

Anyway, if you have those packages from the Debian openldap2 sources 
handy, I would gladly test them.

Cheers
Paul
--
Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba-LDAP TLS problems with inofficial Debian OpenLDAP 2.2 packages

2005-03-23 Thread Paul Coray
03-22 20:22 /usr/lib/libldap_r.so -> 
libldap_r-2.2.so.7.0.13
lrwxrwxrwx  1 root root 23 2005-03-22 20:23 /usr/lib/libldap_r.so.2 
-> libldap_r-2.2.so.7.0.13
-rw-r--r--  1 root root 221844 2004-07-27 08:07 
/usr/lib/libldap_r.so.2.0.130
lrwxrwxrwx  1 root root 21 2005-03-22 20:24 /usr/lib/libldap.so -> 
libldap-2.2.so.7.0.13
lrwxrwxrwx  1 root root 21 2005-03-22 20:24 /usr/lib/libldap.so.2 -> 
libldap-2.2.so.7.0.13
-rw-r--r--  1 root root 209400 2004-07-27 08:07 /usr/lib/libldap.so.2.0.130

And, why does this go away as soon as I stop slurpd on the master and 
slapd on the slave?

This is critical to us, as this is the first major step migrating ~200 
users away from NT-desktops to Linux thin clients, and I don't want to 
give them something to argue against OSS...

Please put my e-mail on cc, as don't read the list on a regular basis.
Thanks
Paul


--
Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] NT Domain to Samba-LDAP just disabling netlogon on NT PDC?

2005-03-08 Thread Paul Coray
Hi group
Quick question before I switch my domain from NT4 PDC to Samba-LDAP:
Can I leave the old NT-PDC in my subnet, if I just disable it's netlogon 
service?

Reason: This old NT-Server has a database running which is still needed 
after the migration to samba, but it doesn't need to have any 
NETBIOS-NTDomain functionality after the switch, just TCP-IP.

I know of third-party tools like UPromote, but if I can avoid them, I 
think this is a much easier and transparent way of doing it.

Thanks for comments
Paul
--
Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] pdbedit syntax for forcing user to change password

2005-01-06 Thread Paul Coray
Hi all
Maybe a stupid question, but I'm not able to figure this out from the 
manpage nor from the HOWTOs...

How can I force a user to change his password at next logon?
I tried:
# pdbedit -P "user must logon to change password" -C 0 -u username
# pdbedit -u username -P "user must logon to change password" -C 0
# pdbedit -P "user must logon to change password" -C 0 username
+ these without -C 0
-> Incompatible or insufficient options on command line! Usage: [...]
When I use the command without the username argument (# pdbedit -P "user 
must logon to change password" -C 0), I get:

Account policy value for user must logon to change password was 0
Account policy value for user must logon to change password is now 0
Makes no sense to me: Which user's account policy?? Is this a bug?
I use Samba 3.0.9 with ldapsam backend.
TIA for clarifying!
Paul
--
Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Machine accounts disabled when created on the fly

2004-11-19 Thread Paul Coray
Hi all
How can I prevent my Samba PDC from setting the D flag (Disabled) in 
SambaAcctFlags of all machine accounts created on the fly? 
smbldap-useradd -w from Idealx which is called by the add machine script 
directive doesn't do that, so i must be Samba...

I use Samba 3.0.7, Debian Sarge, ldapsam Backend (OpenLDAP 2.1.30).
Here is my conf:
[global]
workgroup = UB
server string = %h server (Samba %v)
map to guest = Bad User
passdb backend = ldapsam:ldap://127.0.0.1/
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
add user script = /usr/sbin/smbldap-useradd -m "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x 
"%u" "%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"
logon path =
logon drive = U:
logon home = \\%L\%U
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
ldap admin dn = cn=manager,dc=ub,dc=unibas,dc=ch
ldap group suffix = ou=Groups
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=ub,dc=unibas,dc=ch
    ldap user suffix = ou=Users
case sensitive = No

Thanks and regards
Paul
--
Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Migrating NT4 Domain with Idealx tools

2004-11-17 Thread Paul Coray
Marcel de Riedmatten schrieb:

Now I realize this works when i configure LDAP and Idealx-Tools to store 
machine accounts in the same container as useraccounts. Although this 
makes my directory look somewhat messy, I can live with it if I have to. 
Still I can't add machines doing smbldap-useradd -w, nor when I try to 
join the domain from a client.

you can have them separated. What count is that the machines account are
visible on domain controllers (PDC BDC) ie getent passwd must show the
machine (posix) account. This is nss_ldap configuration. If samba
doesn't see the machine (posix) account it won't work . 
So can I specify more then one nss base for passwd in libnss-ldap.conf?
i.e.
nss_base_passwd ou=Users,dc=mydomain,dc=ch
nss_base_passwd ou=Computers,dc=mydomain,dc=ch
nss_base_group  ou=Groups,dc=mydomain,dc=ch

 So I would suspect some problem in the communication with the
PDC and double check that on the samba box 

1) you have the domain SID as local SID
Do SIDS for the PDC and for the domain have to be the same?

yes the domain SID _is_ the (local) SID of the PDC and all domain
controllers must have the same SID.
Thanks Marcel, this is very valuable information to me! I think these 
should be pointed out more clearly in the docs.

Cheers
Paul
--
Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Transfer winbind idmap to LDAP

2004-11-13 Thread Paul Coray
Marcel de Riedmatten wrote:
Le mer 10/11/2004 à 11:21, Paul Coray a écrit :
Hi all
This seems simple, but I can't figure how tho acheive it.
I have:
- NT4-PDC
- Fileserver (Solaris 9), Samba 3.0.2 member server with winbind
I want to migrate my NT4-PDC to Samba PDC with ldapsam. How can I make 
sure that after vamprie my old PDC to Samba-PDC, the user and group ids 
will be the same as in the winbind-idmap of my Samba member server?


Hi Paul 

this is my suggestion:
1) get the winbind-idmap in text form with a getent passwd for example
I did that with # net idmap dump winbindd_idmap.tdb > 
/tmp/winbindd_idmap.dump on the member server. the resulting file looks 
like:

...
UID 10013 S-1-5-21-98201057-1281969052-1085559986-1608
UID 10202 S-1-5-21-98201057-1281969052-1085559986-1436
UID 10138 S-1-5-21-98201057-1281969052-1085559986-1011
UID 10105 S-1-5-21-98201057-1281969052-1085559986-1418
UID 10067 S-1-5-21-98201057-1281969052-1085559986-1137
...
2) remove the nss_winbind from the nssswitch.conf or what it is on
solaris; this is because the vampire will look in the unix database to
see if the account exist and if the account already exist it w'ont be
added.
No need for that, as on my new PDC-LDAP system no winbind nss is 
configured in the first place.
3) hack the script defined under "user add script" who will be adding
the users to use the information of 1). With the ldap backend this is
usually smbldap-useradd .
Well, I'd like to, but my knowledge of Perl is still too limited :-( So 
if any body can help, I think I'm not the only one who would appreciate 
highly! Another way would be to modify the IDs of each user and Group in 
LDAP after the vampire process.

4) do the usual procedure 

Anyone has a better idea !
Cheers

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Migrating NT4 Domain with Idealx tools

2004-11-13 Thread Paul Coray
Marcel de Riedmatten wrote:
Le mar 09/11/2004 à 17:57, Paul Coray a écrit :
Hi all
For several days I've been doing tests for our upcoming migration from 
an NT domain to Samba PDC with ldapsam. We have ~200 clients, mostly NT4 
and some Win2k. We want all of our users eventually switch from Windows 
to KDE on Linux with thin clients through NX :-)

I managed to net rpc vampire all user and machine accounts into LDAP, 
but then I realized some problems:

- The migrated machine accounts have no samba attributes. I can 
reproduce this behavior adding a machine account doing smbldap-useradd 
-w [machinename], just as in the 'add machine script' line in smb.conf 
suggested by Idealx. The machine account  machinename$ will exist then, 
but without sambaSAMAccount object class nor any other samba attribute. 
Only after adding these by hand and joning the machine to my samba 
domain, users can login. I tried also using smbldap-useradd with 
multiple options, -w for workstation account and -a for samba 
attributes, but no luck. I wish I shouldn't add 200 machines to an 
already existing domain after the migration...

This doesn't seem normal.  The samba attribute should be added by the
vampire.
But I my case it doesn't... net rpc vampire says 'Couldn't create Posix 
information for machinename$'. Well in reality, it did, but without 
samba atrrs.

Now I realize this works when i configure LDAP and Idealx-Tools to store 
machine accounts in the same container as useraccounts. Although this 
makes my directory look somewhat messy, I can live with it if I have to. 
Still I can't add machines doing smbldap-useradd -w, nor when I try to 
join the domain from a client.

 So I would suspect some problem in the communication with the
PDC and double check that on the samba box 

1) you have the domain SID as local SID
Do SIDS for the PDC and for the domain have to be the same?
2) you have joined the domain as BDC
3) you can see the attribute with net samdump 


- Users, once logged in to Linux, cannot change their password with 
smbldap-passwd. They get 'user [username] doesn't exist.' Well, I'm 
talking about a logged in user...

At distance this is a hard guess. I suggest that you look at the ldap
log to get an idea what happend. 

Rgds
Paul
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Transfer winbind idmap to LDAP

2004-11-10 Thread Paul Coray
Hi all
This seems simple, but I can't figure how tho acheive it.
I have:
- NT4-PDC
- Fileserver (Solaris 9), Samba 3.0.2 member server with winbind
I want to migrate my NT4-PDC to Samba PDC with ldapsam. How can I make 
sure that after vamprie my old PDC to Samba-PDC, the user and group ids 
will be the same as in the winbind-idmap of my Samba member server?

Thanks and regards
Paul
--
Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Migrating NT4 Domain with Idealx tools

2004-11-09 Thread Paul Coray
ibas,dc=ch" read
by * auth
# egrep -v '^$|^#' smbldap_bind.conf
slaveDN="cn=manager,dc=ub,dc=unibas,dc=ch"
slavePw="XXX"
masterDN="cn=manager,dc=ub,dc=unibas,dc=ch"
masterPw="XX"
# egrep -v '^$|^#' smbldap.conf
SID="S-1-5-21-98201057-1281969052-1085559986"
slaveLDAP="127.0.0.1"
slavePort="389"
masterLDAP="127.0.0.1"
masterPort="389"
ldapTLS="0"
suffix="dc=ub,dc=unibas,dc=ch"
usersdn="ou=Users,${suffix}"
computersdn="ou=Computers,${suffix}"
groupsdn="ou=Groups,${suffix}"
sambaUnixIdPooldn="cn=NextFreeUnixId,${suffix}"
scope="sub"
hash_encrypt="MD5"
crypt_salt_format="%s"
userLoginShell="/bin/bash"
userHome="/home/%U"
userGecos="UB Domain User"
defaultUserGid="513"
defaultComputerGid="515"
skeletonDir="/etc/skel"
userSmbHome="\\sarge-ts\%U"
userProfile="\\sarge-ts\%U\winprofile"
userHomeDrive="H:"
mailDomain="unibas.ch"
with_smbpasswd="0"
smbpasswd="/usr/bin/smbpasswd"
Thanks for any suggestions!
Paul

--
Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Creation of Domain- and PDC-SID in samba

2004-01-29 Thread Paul Coray
rofile acls = Yes
browseable = No
csc policy = disable
[printers]
comment = All Printers
path = /tmp
create mask = 0700
printable = Yes
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/printer
I guess this does not help you, but I did want to clear the air that
Vampire is not that big a monster - at all.
Hopefully I will overcome this beast or whatsoever... ;-)

Thanks, Cheers

Paul



--
Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Add user script, with winbind, without PAM (Solaris 9)

2004-01-21 Thread Paul Coray
Gerald (Jerry) Carter wrote:

On Fri, 16 Jan 2004, Paul Coray wrote:

Dear all

We've been running sucessfully a 2.2.8a Fileserver, member of our NT 
domain, authentication with winbind, on a Solaris box. As I've 
experienced stability issues with winbind and some minor problems with 
missing unicode support, I'm very happy that these problems hopefully 
will be gone with version 3.

Now I noticed, that it seems not to be possible any longer to have an 
add user script creating homedirs on the fly without a local user 
repository (smbpasswd or LDAP and PAM), which worked just fine before. 
The problem might also be the missing support for pam_mkhomedir.so in 
Solaris.


You can do anything you want in an 'add user script' including creating
the user's home directory.  Maybe I misuderstood you question.
Jerry,

Fact is, on my still running production systen (Samba 2.2.8a on Solaris 
9, Sparc) this works great. Each User in our NT-PDC Domainuser database 
will get a home and a backupdirectory, when he connects to the Samba box 
for the first time.

[global]
workgroup = UB
netbios name = UB-FILES
server string = Home- and Backupserver
security = DOMAIN
encrypt passwords = Yes
map to guest = Bad User
show add printer wizard = No
password server = *
->add user script = /opt/csw/samba/bin/add_user %u
obey pam restrictions = Yes
log file = /opt/csw/samba/var/userlog/%m.log
log level = 0
max log size = 500
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
preferred master = False
local master = No
domain master = False
wins server = xxx.xxx.xxx.xxx
winbind separator = +
winbind uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes
template homedir = /export/home/UB/ub+%U
deadtime = 15
hide dot files = yes
create mask = 664
directory mask = 775
[homes]
comment = Home Directory for %U
path = /export/home/UB/ub+%U
read only = No
create mask = 0640
directory mask = 0750
browseable = No
[backup]
comment = Backup Directory for %U
path = /export/userbackup/UB/ub+%U
force user = %u
read only = No
browseable = No
# cat /opt/csw/samba/bin/add_user
#!/bin/sh
# Script preparing the environment for a Win Domain member
# accessing the Samba server
# Paul Coray, [EMAIL PROTECTED], March 6th, 2003

USER=$1
HOME=/export/home/UB/${USER}
BACKUP=/export/userbackup/UB/${USER}
LOG=/opt/csw/samba/var/add_user.log
if [ -d ${HOME} ]; then
# echo `date` Directory for user ${USER} exists. >> ${LOG}
 exit 0
fi
/usr/bin/mkdir -p ${HOME} ${BACKUP}
/usr/bin/chown -R ${USER}:other ${HOME} ${BACKUP}
/usr/bin/chmod 700  ${HOME} ${BACKUP}
echo `date` created homedir for ${USER} >> ${LOG}
/usr/sbin/edquota -p quota-proto ${USER}
echo `date` set quota for ${USER} >> ${LOG}


With Samba 3.0.1, this script never runs. In the documentation, I read 
that an add machine script is needed in  order to have an add user 
script to be working. So I tried to add the line
	
add machine script = /path/tothesame/adduserscript %u

... but no success.

So my only solution by now is to have a script I need to call _manually_ 
each time a new user is created on the PDC. It just extracts the new 
usernames from the output of wbinfo -u:

# cat add_smbuser
#!/sbin/sh
# This script must be invoked each time a new user
# is added to the UB-Domain (SAM), so he will find his home and
# a backup directory on our Samba-server.
OLDSAM=/etc/samba/oldsam.db
NEWSAM=/etc/samba/`isodate`sam.db
SMBBIN=/usr/local/samba/bin
HOMEDIR=/export/home/UB/
BUDIR=/export/userbackup/UB/
USERLIST=/tmp/newdomuser
# Get list of new users:

$SMBBIN/wbinfo -u > $NEWSAM
diff $OLDSAM $NEWSAM | grep '^>' | awk '{print $2}' | tr "[:upper:]" 
"[:lower:]" > $USERLIST

# Create the user's directories:

if [ -s $USERLIST ]
then
 for i in `cat $USERLIST`; do
  mkdir $HOMEDIR$i $BUDIR$i
  chown $i:other $HOMEDIR$i $BUDIR$i
  chmod 700 $HOMEDIR$i $BUDIR$i
  echo Successfully created directories for $i
 done
 cp $NEWSAM $OLDSAM

else

 echo No new users in SAM

fi

rm $USERLIST



Am I missing something?

Cheers

Paul

--

Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Add user script, with winbind, without PAM (Solaris 9)

2004-01-16 Thread Paul Coray
Dear all

We've been running sucessfully a 2.2.8a Fileserver, member of our NT 
domain, authentication with winbind, on a Solaris box. As I've 
experienced stability issues with winbind and some minor problems with 
missing unicode support, I'm very happy that these problems hopefully 
will be gone with version 3.

Now I noticed, that it seems not to be possible any longer to have an 
add user script creating homedirs on the fly without a local user 
repository (smbpasswd or LDAP and PAM), which worked just fine before. 
The problem might also be the missing support for pam_mkhomedir.so in 
Solaris.

In the archives I found this discussion: 
http://marc.theaimsgroup.com/?t=10482447132&r=1&w=2
So there seems to be some disagreement within the developpers, whether 
the old behavior should be restored or not...

I think there should be at least some sort of workaround, letting this 
configuration (security = domain) create homedirs on an automated base.

Anybody found the trick?

--
Mit freundlichen Gruessen
Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] still missing ISO8859-1.so in RC4 on solaris 9

2003-09-15 Thread Paul Coray
Hi all.

I've been struggling for weeks now to get Samba 3 working on Solaris 9...
At least, configure is happy now with my iconv, but still I get these:
# testparm
Error loading module 
'/usr/local/samba-3.0.0rc4/lib/charset/ISO8859-1.so': ld.so.1: testparm: 
fatal: /usr/local/samba-3.0.0rc4/lib/charset/ISO8859-1.so: open failed: 
No such file or directory

In fact:

# ls -l /usr/local/samba-3.0.0rc4/lib/charset
total 18
-rwxr-xr-x1 root other8648 Sep 15 10:28 CP437.so
-rwxr-xr-x1 root other8528 Sep 15 10:28 CP850.so
# testparm -v
[global]
dos charset = CP850
unix charset = UTF-8
display charset = LOCALE
Anyway, a big thank you to all you hard working Samba developpers!! 
Great piece of software...
--
Mit freundlichen Gruessen

Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Why are the binaries so huge?

2003-08-28 Thread Paul Coray
Hi list

I just compiled 3.0rc1 on Solaris 9 (UltraSparc IIe) with gcc 3.3. Seems 
to work fine but I am surprised by the enormous size of the binaries:

(ub-blade1):/usr/local/samba/sbin # ll
total 232272
-rwxr-xr-x1 root other44719632 Aug 28 15:07 nmbd
-rwxr-xr-x1 root other89726544 Aug 28 15:07 smbd
-rwxr-xr-x1 root other44807356 Aug 28 15:07 swat
-rwxr-xr-x1 root other58420628 Aug 28 15:08 winbindd
In comparison 3.0b1 on Debian Woody (3.0) from packages:

ub-edv05:~# ll /usr/sbin/smbd /usr/sbin/nmbd /usr/sbin/winbindd
-rwxr-xr-x1 root root   690636 Jul  8 00:37 /usr/sbin/nmbd
-rwxr-xr-x1 root root  2141228 Jul  8 00:37 /usr/sbin/smbd
-rwxr-xr-x1 root root  1241420 Jul  8 00:37 /usr/sbin/winbindd
2.2.8a on Solaris 9 (UltraSparc IIe), self compiled with gcc 3.2:

(ub-files):/usr/local/samba/bin # ll
total 14141
-rwxr-xr-x1 root other  798684 Apr 15 11:37 nmbd
-rwxr-xr-x1 root other 1931248 Apr 15 11:37 smbd
-rwxr-xr-x1 root other 1216364 Apr 15 11:37 winbindd
Can anybody shed some light?

Cheers
Paul
--
Mit freundlichen Gruessen
Paul Coray
Administrator Server und Netzwerk
Oeffentliche Bibliothek der Universitaet Basel
EDV-Abteilung
Schoenbeinstrasse 18-20
CH-4056 Basel
Tel: +41 61 267 05 13
Fax: +41 61 267 31 03
mailto:[EMAIL PROTECTED]
http://www.ub.unibas.ch
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] no charset ver. 3.0.0beta3 on solaris

2003-07-29 Thread Paul Coray
Hi all

This question came up several times in this list in the last couple of 
weeks, but nobody seems to have found a solution... so I post this 
again, hoping that anybody out there has the answer.

I compiled Samba 3.0.0beta3 on Solaris 9 with the following options:

--with-winbind --with-acl-support --with-included-popt --with-pam

Starting the daemon or doing testparm gives me always:

Error loading module '/usr/local/samba/lib/charset/.so': ld.so.1: 
testparm: fatal: /usr/local/samba/lib/charset/646.so: open failed: No 
such file or directory

or:

Error loading module '/usr/local/samba/lib/charset/ISO8859.so': ld.so.1: 
testparm: fatal: /usr/local/samba/lib/charset/ISO8859-1.so: open failed: 
No such file or directory

The /usr/local/samba/lib/charset directory is empty. Then I added the 
path to my GNU iconv libraries for configure : --with-libiconv=/opt/csw, 
but still no success...

I use gcc 3.3. I tried gmake as well as Solaris make in /usr/ccs/bin.

Here is a list of installed iconv and locale packages on the compiling 
system (Sun Blade 150 Sparc):

(ub-blade1):~ # pkginfo | grep iconv
system  CSWiconv libiconv - GNU iconv library
ALE SUNWciu8 Simplified Chinese (EUC) 
iconv modules for UTF-8
ALE SUNWciu8xSimplified Chinese (EUC) 
iconv modules for UTF-8 (64-bit)
ALE SUNWhiu8 Traditional Chinese iconv 
modules for UTF-8
ALE SUNWhiu8xTraditional Chinese (EUC) 
iconv modules for UTF-8 (64-bit)
system  SUNWiniu8Indic UTF-8 iconv modules 
for UTF-8
system  SUNWiniu8x   Indic UTF-8 iconv modules 
for UTF-8 (64-bit)
system  SUNWislcx64-bit iconv conversion for 
Eastern European locales
system  SUNWisolx64-bit iconv conversion for 
ISO Latin character sets
system  SUNWjiu8 Japanese iconv modules for 
UTF-8
system  SUNWjiu8xJapanese iconv modules for 
UTF-8 (64-bit)
ALE SUNWkiu8 Korean UTF-8 iconv modules 
for UTF-8
ALE SUNWkiu8xKorean (UTF-8) iconv 
modules for UTF-8 (64-bit)
system  SUNWtiu8 Thai UTF-8 iconv modules 
for UTF-8
system  SUNWtiu8xThai UTF-8 iconv modules 
for UTF-8 (64-bit)
(ub-blade1):~ # pkginfo | grep locale
system  SUNWctlu Print utilities for CTL locales
system  SUNWislccXSH4 conversion for Eastern 
European locales
system  SUNWislcx64-bit iconv conversion for 
Eastern European locales
system  SUNWplowrRoot pkg partial locales.

Remove 'spamblock.' from the reply address.

Thanks in advance for any hint

Paul

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba