Re: [Samba] Forcing RIDs to desired value

2004-09-10 Thread Radek Svoboda
Michael Gasch wrote:
what about the
algorithmic rid base (G)
parameter?
I gave it a try. But even with this disabled, the pdbedit still 
complains about mismatched RIDs.

I used tdbdump to get a view what is inside the tbdsam database. To my 
surprise, the mappings from RID to usernames are there (key = RID_), 
but contains still 2*UID+1000 values, regardless of the last number of 
user's SID! Probably the cause of the complains.

Is the format of this tdb database somewhere documented, so I could 
manually correct it? For example, I *REALLY* want to have the 
possibility to change the DOMAIN the user is marked in.
(pdbedit -Lv | grep Domain)

  Best regards
Radek Svoboda
Neovision s.r.o., Prague
[EMAIL PROTECTED]
http://www.neovision.cz
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Announcing to ourselves ???

2004-09-10 Thread Radek Svoboda
I found this i our log.nmbd, occurs each hour:
[2004/09/10 16:03:36, 2] 
nmbd/nmbd_browsesync.c:announce_local_master_browser_to
_domain_master_browser(109)
  announce_local_master_browser_to_domain_master_browser:
  We are both a domain and a local master browser for workgroup 
NEOVISION.  Do not announce to ourselves.
[2004/09/10 16:03:36, 2] nmbd/nmbd_browsesync.c:sync_with_dmb(151)
  sync_with_dmb:
  Initiating sync with domain master browser SERVER20 at IP 
192.168.0.1 for workgroup NEOVISION

One cause for this I can imagine is that we joined by SERVER machine our 
own domain controlled by the same machine. Do you know how to *left* 
joined domain, e.g. by using net command?

Radek Svoboda
Neovision s.r.o., Prague
[EMAIL PROTECTED]
http://www.neovision.cz
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Forcing RIDs to desired value

2004-09-06 Thread Radek Svoboda
Radek Svoboda wrote:
Why don't you use your old samba-databases from /var/lib/samba ?
matze

Actually I did. But this copies only SID of the server (stored in 
secrets.tdb), not the RIDs. It seems that samba calculates them by
the fixed algorithm as 2*UID+1000. And because I must have different
UIDs on the new system, the profile mapping in Windows does not work.

I found the possibility to force RID using -U option (with full SID and
RID) of pdbedit program. Unfortunately, samba really *DISLIKES* the RIDs
being different from the algorithmic ones:
# smbpasswd someuser
New SMB password:
Retype new SMB password:
Unable to modify TDB passwd ! Error: Record does not exist
 occured while storing the RID index (RID_07da)
Failed to modify entry for user someuser.
Failed to modify password entry for user someuser
Luckily, even with such complaints, the password has been changed
succesfully. Is this normal? No-one is moving samba to different UIDs
server and having similar problems
Radek Svoboda
Neovision s.r.o., Prague
[EMAIL PROTECTED]
http://www.neovision.cz
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Modifying Domain field of pdbedit dump

2004-09-05 Thread Radek Svoboda
I have Debian server with NetBios name SERVER and domain NEOVISION. The 
created user accounts in the tdbsam backed shows (when listed by pdbedit 
-Lv) that the domain is SERVER, not NEOVISION. Newly added users 
however, has domain specified correctly as NEOVISION. I have a 
suspection that it is because the installation script which created the 
accounts based on old smbpasswd file was using unfinished smb.conf file 
(the SERVER was not yet set as PDC).

1) How to change the listed domain of the existing user/machine?
2) What is the role of the Domain field in pdbedit dump?
Thanks for help
Radek Svoboda
Neovision s.r.o., Prague
[EMAIL PROTECTED]
http://www.neovision.cz
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Forcing RIDs to desired value

2004-09-03 Thread Radek Svoboda
I found that after moving my samba server to different hardware (and
diferent Linux installation), domain logons cannot find their Windows
profiles and created new ones. This is caused by the different RID of
the users. It seems these are calculated as 2*UID + 1000. And my UID's
on new server do not match those on the old one. How to force SAMBA to
provide different RIDs for the users? I do not want to run LDAP for
our 20 stations and 20 users here.
   Thanks for help
Radek Svoboda
Neovision s.r.o., Prague
[EMAIL PROTECTED]
http://www.neovision.cz
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Forcing RIDs to desired value

2004-09-03 Thread Radek Svoboda

On Fri, 3 Sep 2004, Matthias Spork wrote:
Radek Svoboda schrieb:
I found that after moving my samba server to different hardware (and
diferent Linux installation), domain logons cannot find their Windows
profiles and created new ones. This is caused by the different RID of
the users. It seems these are calculated as 2*UID + 1000. And my UID's
on new server do not match those on the old one. How to force SAMBA to
provide different RIDs for the users? I do not want to run LDAP for
our 20 stations and 20 users here.
Why don't you use your old samba-databases from /var/lib/samba ?
matze
Actually I did. But this copies only SID of the server (stored in 
secrets.tdb), not the RIDs. It seems that samba calculates them by the 
fixed algorithm as 2*UID+1000. And because I must have different UIDs on 
the new system, the profile mapping in Windows does not work.

  Best regards
 Radek Svoboda
 [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba