Re: [Samba] Fedora Core 3 and Samba

2004-11-23 Thread Paul Espinosa

.[ Jeremy Allison wrote ]
|  
|  

SNIP
|  
|  Have you logged a bug with RedHat ? This would seem the best thing to do
|  as it doesn't look like a Samba problem.
|  
|  Jeremy.
|  


I know it's not a samba problem per se.  I'm giving a heads up in case this
is a purposeful shift by Redhat and also in case other distros go this route
also.

And yes, I've logged a bug with RedHat.

-- 
Paul Espinosa
[EMAIL PROTECTED]
IT Supervisor
The World Company
785/312-6912
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Fedora Core 3 and Samba

2004-11-22 Thread Paul Espinosa
Over the last week I've upgraded one of my samba servers to FC3.  I ran into
some problems joining XP machines to the domain.  Tracing back the problem
I've found that FC3 has changed the behavior of the useradd/adduser script. 
It will no longer allow a UNIX account to be added to the system that has a
'$' in it.  I've verified this behavior by trying it at the command line, it
doesn't work there and give the error:

[EMAIL PROTECTED](~): useradd newer\$
useradd: invalid user name 'newer$

Upon speculation we believe this might be to bring Fedora/Redhat user utils
in line with POSIX standards.  Under POSIX this is the Portable Filename
Charcterset which is as follows:

ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
0123456789._-

Notice no '$'.  But the standard goes on to say extended characters are
allowed, but it will result in noncompliant use...

This is behaving this way on a test server and the latest Redhat ES (running
on our production server) still works fine.  But I'm concerned that they'll
move ES/AS etc. to behaving the same way.

If this is a direction that Redhat moves to, and possibly other
distributions (assuming it's truly POSIX standards driving this), this seems
like it may have a big impact on Samba when trying to add a machine to the
domain.

I don't know if this is something Fedora/Redhat has done on purpose or by
accident, but it seems to hurt Samba.

Any help or info would be appreciated.

-- 
Paul Espinosa
[EMAIL PROTECTED]
IT Supervisor
The World Company
785/312-6912
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Fw: Re: [Samba] Cant fetch on Window network due to special characters in filename.

2004-10-07 Thread Paul Espinosa


.[ R K wrote ]
|  
|  
|  Hi All,
|  
|  I am new to this group :) . Please accept my warm regards!
|  
|  While I am trying to access files on Windows share that contains special 
|  names the smbclient fails up as shown below:
|  
|  Lets say the filename is  Bryan Adams - Let's Make a Night to
|  Remember.mp3
|  
|  I get following error:
|  
|  Domain=[MYDOMAIN] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]
|  
|  NT_STATUS_OBJECT_NAME_NOT_FOUND opening remote file \\bryan adams\Bryan 
|  Adams - Lets
|  
|  How do I take care of this problem?

Put quotes  around the file name.  That should take care of it.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Fw: Re: [Samba] windows small buisness server and SMB

2004-10-07 Thread Paul Espinosa


.[ Shaun Feeley wrote ]
|  
|  
|  hi guys,
|  

SNIP

|  
|  now im pretty sure ive been told that windows small buisness server 2003
|  cannot be a member of a domain without needing to be the PDC is this
|  true.  i cannot find where i read this so i was hoping one of you may be
|  able to confirm this either way.
|  
|  thanks for your help
|  
|  

That is true.  We ran into the same problem.  However, you can turn off that
functionality.  And then join it to a Samba domain without a problem.  I
don't know what effect that would have on Exchange running on the Small
Business server as we are only using it for a MSSQL/application server.

Unfortunalely it was one of my windows admins that turned off that feature
that requires it to be a PDC and he's since left the company and I don't
know how to do it.  But it definately can be done.  I think it was had to be
done through a commandline command and not through a gui of any kind.

-- 
Paul Espinosa
[EMAIL PROTECTED]
IT Supervisor
The World Company
785/312-6912


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Getting the SID

2004-10-05 Thread Paul Espinosa
Hello all,

I'm getting ready to upgrade an old outdated Samba installation.  Moving to
new hardware and Samba 3.0.7.

And now I've got a little conundrum.  How to I get the local SID from the
old samba server.  It's running Samba 2.2.2 and it doesn't appear to have
the -X flag for smbpasswd that is supposed to be in 2.2.8 and it obviously
doesn't have the net getlocalsid command.

Any help is appreciated.

Thanks,

-- 
Paul Espinosa
[EMAIL PROTECTED]
IT Supervisor
The World Company
785/312-6912
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem using Windows User Manager

2004-06-17 Thread Paul Espinosa
I am using Samba 3.0.4-1 and am seeing some odd behavior using Windows User
Manager.

I have Domain Users mapped to users using net groupmap.  And have my
add user to group command mapped correctly.

I can add users just fine to the Linux users group using User Manager.  But
when I go back to look at membership in User Manager it says the first 31
users are members and the rest of the users are not members.

In /etc/group all the users are members of the users group.  User Manager is
just reporting it wrong.

Any ideas, anyone seen this before?

-- 
Paul Espinosa
[EMAIL PROTECTED]
IT Supervisor
The World Company
785/312-6912
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with SAMBA

2004-06-16 Thread Paul Espinosa
Instead of using /etc/hosts.allow and /etc/hosts.deny use the hosts allow
and interfaces directive in the smb.conf.

I use (in smb.conf [global] section): 

   hosts allow = 192.168.1.0/24 127.0.0.1

   interfaces=192.168.1.0/24 127.0.0.1/32

   (Replace with your internal network values)

To ensure that only my internal network has access to the samba service.

-- 
Paul Espinosa
[EMAIL PROTECTED]
IT Supervisor
The World Company
785/312-6912


.[ Rodrigo Haces wrote ]
|  
|  
|  Hi, i have a debian box connected to internet by ADSL, in that box i
|  share internet to all my local network, i also have to share 3
|  directories with samba with full read/write permissions.
|  
|  my hosts.deny is ALL:ALL and my hosts.allow is ALL:127. AND
|  ALL:192.168.0. so that i only accept connections from inside my local
|  network.
|  
|  Here is the problem, i cannot ask for a password to let them write in my
|  directories because im using them as a database location so that my CRM
|  application connects there, but with this, intruders from outside my
|  network can write virus programs (And are actually doing it, writing a
|  Xi.exe program). So, how can i prevent this? here is my smb.conf:
|  
|  [global]
|  log file = /var/log/samba/log.%m
|  passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
|  *Retype\snew\sUNIX\spassword:* %n\n
|  socket options = TCP_NODELAY
|  obey pam restrictions = yes
|  null passwords = yes
|  encrypt passwords = true
|  passdb backend = tdbsam guest
|  passwd program = /usr/bin/passwd %u
|  dns proxy = no
|  netbios name = Servidor
|  server string = %h server (Samba %v)
|  invalid users = root
|  workgroup = infosys
|  debug level = 0
|  os level = 20
|  syslog = 0
|  security = share
|  panic action = /usr/share/samba/panic-action %d
|  max log size = 1000
|  
|  [bitacora]
| writeable = yes
| public = yes
| path = /files/bitacora
|  
|  
|  [comun]
| writeable = yes
| public = yes
| path = /files/comun
|  
|  [admivi]
|  writeable = yes
|  public = yes
|  path = /files/admivi
|  
|  Thank in advanced
|  Rodrigo
|  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [SPAMPROB:50%] RE: [Samba] Problem with SAMBA

2004-06-16 Thread Paul Espinosa
If you use those directives there is an implicit deny all and only the
specified hosts/network etc. will be allowed.

-- 
Paul Espinosa
[EMAIL PROTECTED]
IT Supervisor
The World Company
785/312-6912


.[ Rodrigo Haces wrote ]
|  
|  
|  Thanks, that's greate, but how do i say tu deny all??
|  hosts deny = ALL
|  ??
|  or how?
|  Thanks!
|  Rodrigo
|  
|   -Mensaje original-
|   De: [EMAIL PROTECTED]
|   [mailto:[EMAIL PROTECTED]
|   nombre de Paul Espinosa
|   Enviado el: Miercoles, 16 de Junio de 2004 11:17 a.m.
|   Para: [EMAIL PROTECTED]
|   Asunto: Re: [Samba] Problem with SAMBA
|  
|  
|   Instead of using /etc/hosts.allow and /etc/hosts.deny use the
|   hosts allow
|   and interfaces directive in the smb.conf.
|  
|   I use (in smb.conf [global] section):
|  
|  hosts allow = 192.168.1.0/24 127.0.0.1
|  
|  interfaces=192.168.1.0/24 127.0.0.1/32
|  
|  (Replace with your internal network values)
|  
|   To ensure that only my internal network has access to the samba
|   service.
|  
|   --
|   Paul Espinosa
|   [EMAIL PROTECTED]
|   IT Supervisor
|   The World Company
|   785/312-6912
|  
|  
|   ..[ Rodrigo Haces wrote ]
|   |
|   |
|   |  Hi, i have a debian box connected to internet by ADSL, in that box i
|   |  share internet to all my local network, i also have to share 3
|   |  directories with samba with full read/write permissions.
|   |
|   |  my hosts.deny is ALL:ALL and my hosts.allow is ALL:127. AND
|   |  ALL:192.168.0. so that i only accept connections from inside my
|   |  local network.
|   |
|   |  Here is the problem, i cannot ask for a password to let them
|   write in my
|   |  directories because im using them as a database location so that my
|   |  CRM application connects there, but with this, intruders from
|   |  outside my network can write virus programs (And are actually doing
|   |  it, writing a Xi.exe program). So, how can i prevent this? here is
|   |  my smb.conf:
|   |
|   |  [global]
|   |  log file = /var/log/samba/log.%m
|   |  passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
|   |  *Retype\snew\sUNIX\spassword:* %n\n
|   |  socket options = TCP_NODELAY
|   |  obey pam restrictions = yes
|   |  null passwords = yes
|   |  encrypt passwords = true
|   |  passdb backend = tdbsam guest
|   |  passwd program = /usr/bin/passwd %u
|   |  dns proxy = no
|   |  netbios name = Servidor
|   |  server string = %h server (Samba %v)
|   |  invalid users = root
|   |  workgroup = infosys
|   |  debug level = 0
|   |  os level = 20
|   |  syslog = 0
|   |  security = share
|   |  panic action = /usr/share/samba/panic-action %d
|   |  max log size = 1000
|   |
|   |  [bitacora]
|   | writeable = yes
|   | public = yes
|   | path = /files/bitacora
|   |
|   |
|   |  [comun]
|   | writeable = yes
|   | public = yes
|   | path = /files/comun
|   |
|   |  [admivi]
|   |  writeable = yes
|   |  public = yes
|   |  path = /files/admivi
|   |
|   |  Thank in advanced
|   |  Rodrigo
|   |
|   --
|   To unsubscribe from this list go to the following URL and read the
|   instructions:  http://lists.samba.org/mailman/listinfo/samba
|  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] How do I make win file explorer not to show Printers and Faxes

2004-06-16 Thread Paul Espinosa
You might try adding

disable spoolss = yes

To your smb.conf.

-- 
Paul Espinosa
[EMAIL PROTECTED]
IT Supervisor
The World Company
785/312-6912


.[ Ephi Dror wrote ]
|  
|  
|  Hi All,
|  
|  How do I make windows file explorer to not show Printers and Faxes when
|  clicking on SAMBA server while browsing for Microsoft Windows Network.
|  Also, once I click on it, the Add Printer icon shows up.
|  
|  In smb.conf I have:
|  
|   show add printer wizard = no
|   load printers = no
|  
|  But it doesn't seems to help.
|  Any idea?
|  
|  Am I missing something in smb.conf or something else?
|  
|  Cheers,
|  Ephi
|  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [3.0.4] Problem with strange characters in file names

2004-06-14 Thread Paul Espinosa
I had this problem also.  I added:

Dos charset = 850
Unix charset = ISO8859-1

To my smb.conf and it cleared it up.

-- 
Paul Espinosa
[EMAIL PROTECTED]
IT Supervisor
The World Company
785/312-6912


.[ Martin Hermanowski wrote ]
|  
|  
|  Hi,
|  
|  I'm using samba 3.0.4, with XP clients and server-side-profiles.
|  Sometimes, my users save bookmarks with strange characters in them.
|  These files are saved flawlessly on the server, but Windows is unable to
|  copy them back to the local profile, and so the user can not log in.
|  
|  I'm using a iso8859-15 charset.
|  
|  I hope this is not a common question, I looked in the archive but I had
|  been unable to find a similar one.
|  
|  One example for a strange characters is in the title of the home page of
|  the US Department of State (http://www.state.gov/), in firebird, it is
|  shown as \2013, on the linux server, is is shown as `^S'.
|  
|  Is there any way I could modify change these characters to spaces, or
|  any other solution?
|  
|  LLAP, Martin
|  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [3.0.4] Problem with strange characters in file names

2004-06-14 Thread Paul Espinosa
I forgot to add, this cleared it up for subsequent files, the one's that
can't be read, I had delete or rename manually to get XP to read them.

-- 
Paul Espinosa
[EMAIL PROTECTED]
IT Supervisor
The World Company
785/312-6912


.[ Paul Espinosa wrote ]
|  
|  
|  I had this problem also.  I added:
|  
|   Dos charset = 850
|   Unix charset = ISO8859-1
|  
|  To my smb.conf and it cleared it up.
|  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Weird Domain listings

2004-06-08 Thread Paul Espinosa
I'm having an issue with my samba Domains.  When I browse to Microsoft
Windows Network with either Windows 2000 or WinXP I see two copies of the
Domain.  I see the proper domain (I'm using Matrix for testing) Matrix and
I see another Matrix   that appears to have 5 or 6 spaces or a tab
appended onto the end.  The domain w/o the spaces is the proper one, the one
with the spaces doesn't contain any servers or workstation.

This seems to have started after upgrading to samba 3.0.4.

Has anyone seen this before?  And if so what's the solution to this, I don't
want my users to get confused.

Thanks,

Paul Espinosa

I'm using samba 3.0.4-1 and here is the relevant portion of my smb.conf:

#=== Global Settings

[global]

   #== Services 
   wins support = no
   wins server = 10.10.10.10
   time server = yes
   #== Logging 
   log file = /var/log/samba/%m.log
   max log size = 0
   loglevel=0
   syslog=0
   #== Server Definitions ==
   workgroup = MATRIX
   server string =
   netbios name = zion
   security = user
   encrypt passwords = yes
   dns proxy = no
   preserve case = yes
   short preserve case = yes
   case sensitive = no
   username map = /etc/samba/smbusers

   Dos charset = 850
   Unix charset = ISO8859-1

   passdb backend = tdbsam

   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

   local master = yes
   domain master = yes
   preferred master = yes
   domain logons = yes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] uid and gid problems with linux as client and server

2004-06-08 Thread Paul Espinosa
Laurence,

This is how I mount a samba share on my Linux workstation(all on one line):

sudo mount -t smbfs -o uid=username, ip=10.10.10.10, username=username,
password=password//server/share /home/mydir/dir

This works for me just fine.

-- 
Paul Espinosa
[EMAIL PROTECTED]
IT Supervisor
The World Company
785/312-6912


.[ Laurence Rowe wrote ]
|  
|  
|  Hi,
|  
|  I'm using samba 3.0.4 (stock debian packages) as a client and a server. 
|  The problem is I have a different uid on server (1001) to my client 
|  (1000) so when I try and access a file I appear to the client as not 
|  being the owner. I have tried the uid and gid options in smbmount, but 
|  they do not seem to have any affect (I assume the unix cifs extensions 
|  are overiding them).
|  
|  On the server side I have a create mask and a directory mask of 775 but 
|  this also has no affect.
|  
|  This is driving me spare! Is there any way to disable the unix cifs 
|  extensions or to map between uids?
|  
|  Thanks,
|  
|  Laurence
|  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Creating directories as a group.

2004-02-21 Thread Paul Espinosa
Use:

force user = username
  and
force group = group

Paul Espinosa

-- 
They that would give up freedom to obtain a little temporary
safety deserve neither freedom nor safety

--Benjamin Franklin


.[ Leonardo Boselli wrote ]
|
| Fri, 20 Feb 2004 19:13:50 +0100
|
| I have this section on smb.conf :
| 
| [pub]
|   comment = Public area
|   path = /pub
|   public = no
|   writable = yes
|   read only = no
|   valid users = fabio leo
|   preserve case  = yes
|   create mode = 0760
| 
| When, from win2k a directory is creadetd there it get owner:group the 
| same of the user that access, but i cannot change from windows the 
| group. (actually i would like to change fabio leo in admingroup, where 
| admingroup is an unix group)
| How to change smb.conf so any file/directory created there is created 
| as
| fixuser:admingroup or even user:admingroup (fix user and fix gropup 
| are a fixed uid, valid for every user ...)
| 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Sync win2k local user list with samba user list

2004-02-14 Thread Paul Espinosa

.[ John H Terpstra wrote ]

 Sun, 15 Feb 2004 01:36:08 + (GMT)

 On Sat, 14 Feb 2004 [EMAIL PROTECTED] wrote:
 
  Hi all,
 
  I want to be able to at logon sync the windows 2000 userlist with the
  samba user list, so that each user that is added to the samba server is
  automatically added to each workstation with appropriate permisions ie
  admin, power users, etc. Is it possible to do this and if so how.
  I am running latest samba as PDC with roaming profiles.
 
 Why in goodness name would you want to add accounts to workstations that
 already exist on the server? The whole purpose of having domain accounts
 is so that you do not need user accounts on the individual workstations.
 
 Baffled! 

I think what's he's saying is adding a local domain user to a box in order
to upgrade permissions.  In other words have Bob have a domain logon, but
also be able to be a local admin for the Windows box.

 
  Any help is greatly appreciated
 
 Avoid pain! Do NOT have local workstation accounts. Instead, use domain
 accounts.
 
 
 - John T.

I would also like to know if this is possible as there is a lot of software
out there that still requires elevated privs to run on Windows boxen.

Paul Espinosa

-- 
They that would give up freedom to obtain a little temporary
safety deserve neither freedom nor safety

--Benjamin Franklin
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Sync win2k local user list with samba user list

2004-02-14 Thread Paul Espinosa
Well, I just went and tried Andrew Bartlett's suggestion.  Works like a
champ!

Guess I'm just used to not being able to nest groups.  heh

Thanks all,

Paul Espinosa

BTW

John,

Really getting a lot out of your book The Official Samba-3 HOWTO and
Reference Guide.  I bought it for work and am planning on buying it for my
personal bookshelf.

.[ John H Terpstra wrote ]
|
| Sun, 15 Feb 2004 02:43:17 + (GMT)
|
| On Sat, 14 Feb 2004, Paul Espinosa wrote:
| 
| 
|  .[ John H Terpstra wrote ]
|  
|   Sun, 15 Feb 2004 01:36:08 + (GMT)
|  
|   On Sat, 14 Feb 2004 [EMAIL PROTECTED] wrote:
|  
|Hi all,
|   
|I want to be able to at logon sync the windows 2000 userlist with
|the samba user list, so that each user that is added to the samba
|server is automatically added to each workstation with appropriate
|permisions ie admin, power users, etc. Is it possible to do this
|and if so how. I am running latest samba as PDC with roaming
|profiles.
|  
|   Why in goodness name would you want to add accounts to workstations
|   that already exist on the server? The whole purpose of having domain
|   accounts is so that you do not need user accounts on the individual
|   workstations.
|  
|   Baffled! 
| 
|  I think what's he's saying is adding a local domain user to a box in
|  order to upgrade permissions.  In other words have Bob have a domain
|  logon, but also be able to be a local admin for the Windows box.
| 
| Doh! John T. Read it again next time! :(
| 
| As Andrew Bartlett has said, that's easy. Simply add the Domain Users
| group to your local Administrators group on each workstation.
| 
| Sorry - I should not shoot from the hip so fast.
| 
| 
|  
|Any help is greatly appreciated
|  
|   Avoid pain! Do NOT have local workstation accounts. Instead, use
|   domain accounts.
|  
|  
|   - John T.
| 
|  I would also like to know if this is possible as there is a lot of
|  software out there that still requires elevated privs to run on Windows
|  boxen.
| 
|  Paul Espinosa
| 
| 
| 
| Cheers,
| John T.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba