[Samba] Raising DomainAdmin privileges

2009-03-08 Thread Peter Gordon
I have the following problem:

As DomainAdmin I want to be able to mount a Windows directory, do a
complete directory listing, read and possibly write all files in that
directory. And all that even if the user has not included the
DomainAdmin in the list of permitted users.

To do this properly, I need to raise the following DomainAdmin
privileges:

  SE_CHANGE_NOTIFY_NAME
  SE_BACKUP_NAME
  SE_RESTORE_NAME

Is is possible to add these privileges in samba, and if so, does anyone
know how?

Thanks,

Peter

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba from Linux

2006-01-19 Thread Peter Gordon
I have Samba running on a Linux computer and I can connect to it from
Windows. It also appears in Explorer as one of the workstations of our
domain.

When I try to mount from another Linux computer:
 
smbmount //samba/software /aaa -o username=me,workgroup=wg,password=pass

I get an error 
11127: session setup failed: ERRDOS - ERRnoaccess (Access denied.)

On the Samba server, winbindd is running, as are smbd and nmbd.

Does anyone have any suggestion for finding out what the problem is?

Thanks

Peter


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem getting share list from NetApp

2006-01-17 Thread Peter Gordon
I have just downloaded the latest version of Samba:

svn co svn://svnanon.samba.org/samba/branches/SAMBA_3_0 samba-3_0

and have built, compiled and installed it.

I installed it in /sw/SAMBA_3_0

I created a file smb.conf in the ./lib directory 
[global]
workgroup = MYDOMAIN
server string = Samba Server


>From /sw/SAMBA_3_0/bin

Access to the Active Directory Master

# ./rpcclient  -U MYDOMAIN\\user%password MYDC
rpcclient $>


Access to a client PC 

# ./rpcclient  -U MYDOMAIN\\user%password MYWINDOWS
rpcclient $>


Access to NetApp

# ./rpcclient  -U MYDOMAIN\\user%password NETAPP
could not obtain sid for domain MYDOMAIN
error: NT_STATUS_ACCESS_DENIED

If you need dumps, ethereal, whatever, just ask.

Peter



On Wed, 2006-01-18 at 00:24 -0600, Gerald (Jerry) Carter wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Peter Gordon wrote:
> > Using telnet/rsh/ssh is not an option for us. We need 
> > to understand why the rpc protocol with NetApp does not
> > work, and if possible, try to fix it.
> 
> I think Derrell fixed this in the latest SAMBA_3_0 libsmbclient
> code.  So something like smbtree should work now.
> 
> 
> 
> 
> 
> cheers, jerry
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.2 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFDzd8FIR7qMdg1EfYRAm3nAJ9nq9FqGLekbu15P5riYGXkl3dFJwCfQnxk
> WVH5kxwBX0nV73raJIpjWEk=
> =2csG
> -END PGP SIGNATURE-
> 
> 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem getting share list from NetApp

2006-01-17 Thread Peter Gordon
Using telnet/rsh/ssh is not an option for us. We need to understand why
the rpc protocol with NetApp does not work, and if possible, try to fix
it.

Peter

On Tue, 2006-01-17 at 17:46 -0600, Mike Partyka wrote:
> Do you have access to the Filer console via telnet/rsh/ssh? That is
> the easiest method i can think of off the top of my head, then you
> just issue the command "cifs shares", and you'll get a list of the
> CIFS shares on the storage applicance. 
> 
> On 1/16/06, Peter Gordon <[EMAIL PROTECTED]> wrote:
> We defined a share, sales_cifs_test, on our NetApp server.
> Note that the
> length ofour the name is longer than 13 characters.
> 
> We can see the share with Microsoft Explorer.
> 
> We can mount the share from Linux using smbmount. 
> 
> What we want to do is to get a list of shares from NetApp. The
> tools
> that can do this are the samba programs smbclient and net.
> 
>   Smbclient will not show names longer than 13 characters.
> 
>   The following command gives a share list, but again, does
> not include 
> names longer than 13 characters.
> 
>   net  net -W YOURDOMAIN --user='user%password' -w YOURDOMANIN
> -S
> NETAPP_SERVER_IP rap share
> 
> The command
> net  net -W YOURDOMAIN --user='user%password' -w YOURDOMANIN -
> S 
> NETAPP_SERVER_IP rpc share
> 
> is the samba command that gives a list of shares, even if they
> have
> long names. The problem is that we can't get it to access
> NetApp
> successfully.
> 
> We have searched both the Netapp site and the Samba site and
> can't find 
> anything that is relevant.
> 
>     We would really appreciate an answer as to why the command is
> failing.
> 
> Thanks,
> 
> Peter
> 
> --
> Peter Gordon
> Phone: +972 544 438029
> Email: [EMAIL PROTECTED]
> Web: www.pg-consultants.com
> 
> --
> To unsubscribe from this list go to the following URL and read
> the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba - getting long share names from Netapp

2006-01-17 Thread Peter Gordon
Hi Adam,

That works for me as well, usually.

The problem is NetApp specific in that  

  net -S server -U username rpc share

fails against Netapp.

Peter


On Tue, 2006-01-17 at 17:24 +1000, Adam Nielsen wrote:
> Hi Peter,
> 
> If you create a share >12 chars long testparm gives you this message:
> 
> WARNING: You have some share names that are longer than 12 characters.
> These may not be accessible to some older clients.
> 
> So I imagine that in the past this hasn't worked at all.  It is strange
> though that smbclient would ignore the name entirely without even
> printing some of it (at least this is what happens in 3.0.21rc2.)
> 
> For me though the 'net' command worked, I ran:
> 
>   $ net -S server -U username rpc share
> 
> And providing 'username' was a member of the domain it gave me a list of
> shares, including those longer than 12 characters (however this may be
> because I was connecting to a Samba machine that had joined the domain.)
> 
> Cheers,
> Adam.
> 
> 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba - getting long share names from Netapp

2006-01-16 Thread Peter Gordon
We defined a share, sales_cifs_test, on our NetApp server. Note that the
length of the name is longer than 13 characters. 

We can see the share with Microsoft Explorer.

We can mount the share from Linux using smbmount.

What we want to do is to get a list of shares from NetApp. The tools
that can do this are the samba programs smbclient and net. 

  Smbclient will not show names longer than 13 characters.

  The following command gives a share list, but again, does not include
names longer than 13 characters.

  net  net -W YOURDOMAIN --user='user%password' -w YOURDOMAIN -S
NETAPP_SERVER_IP rap share

 The command 
 net  net -W YOURDOMAIN --user='user%password' -w YOURDOMAIN -S
NETAPP_SERVER_IP rpc share

 is the samba command that gives a list of shares, even if they have
long names. The problem is that we can't get it to access NetApp
successfully.

We have searched both the Netapp site and the Samba site and can't find
anything that is relevant.

We would really appreciate an answer as to why the command is failing.


Peter

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problem getting share list from NetApp

2006-01-16 Thread Peter Gordon
We defined a share, sales_cifs_test, on our NetApp server. Note that the
length of the name is longer than 13 characters. 

We can see the share with Microsoft Explorer.

We can mount the share from Linux using smbmount.

What we want to do is to get a list of shares from NetApp. The tools
that can do this are the samba programs smbclient and net. 

  Smbclient will not show names longer than 13 characters.

  The following command gives a share list, but again, does not include
names longer than 13 characters.

  net  net -W YOURDOMAIN --user='user%password' -w YOURDOMANIN -S
NETAPP_SERVER_IP rap share

 The command 
 net  net -W YOURDOMAIN --user='user%password' -w YOURDOMANIN -S
NETAPP_SERVER_IP rpc share

 is the samba command that gives a list of shares, even if they have
long names. The problem is that we can't get it to access NetApp
successfully.

We have searched both the Netapp site and the Samba site and can't find
anything that is relevant.

We would really appreciate an answer as to why the command is failing.

Thanks,

Peter

-- 
Peter Gordon
Phone: +972 544 438029
Email: [EMAIL PROTECTED]
Web: www.pg-consultants.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba