Re: [Samba] Digitially Signed Communications [SOLVED]

[support]

Hello Shaun,

You are wellcome.

Software been evolving over the Years , i.e Samba its self has an different 
Support lines then RHEL Has.
i.e RHEL evolved allready to PROD version 6.4 :-) .

Most of the Distrubions today add 2 or more samba releases - i.e with or 
without AD



--
Mit freundlichen Grüßen / Best Regards

Horst Venzke ; PGP NET : 1024G/082F2E6D ;  http://www.remsnet.de

Legal Notice: This transmittal and/or attachments may be privileged or 
confidential. It is intended solely for the addressee named above. Any review, 
dissemination, or copying is strictly prohibited. If you received this 
transmittal in error, please notify us immediately by reply and immediately 
delete this message and all its attachments. Thank you.


> Gesendet: Dienstag, 25. Juni 2013 um 13:27 Uhr
> Von: "Shaun Glass - Business Connexion" 
> An: "Horst Venzke-Fa Remsnet Ltd" 
> Cc: "sa...@lists.samba.or" 
> Betreff: RE: [Samba] Digitially Signed Communications [SOLVED]
>
> Dear Horst,
>
> I have done as requested and can now see the shares ... thanks. Unfortunately 
> somebody else had done the installs so I was unaware of the availability of 
> two separate versions for RHEL 5.x.
>
> Regards
>
> 
> From: Horst Venzke-Fa Remsnet Ltd [supp...@remsnet.de]
> Sent: Tuesday, June 25, 2013 12:35 PM
> To: Shaun Glass - Business Connexion
> Cc: sa...@lists.samba.or
> Subject: Aw: [Samba] Digitially Signed Communications
>
> Hello Shaun,
>
>
> The samba 3.0.x release are allmost unsupported since it EOL at 2009.
>
>
> Withing RHEL 5.9 the 3.6.x releases are provided, please update and try again.
>
>
>
> --
> Mit freundlichen Grüßen / Best Regards
>
> Horst Venzke ; PGP NET : 1024G/082F2E6D ;  http://www.remsnet.de
>
> Legal Notice: This transmittal and/or attachments may be privileged or 
> confidential. It is intended solely for the addressee named above. Any 
> review, dissemination, or copying is strictly prohibited. If you received 
> this transmittal in error, please notify us immediately by reply and 
> immediately delete this message and all its attachments. Thank you.
>
>
> > Gesendet: Dienstag, 25. Juni 2013 um 12:05 Uhr
> > Von: "Shaun Glass - Business Connexion" 
> > An: "samba@lists.samba.org" 
> > Betreff: [Samba] Digitially Signed Communications
> >
> > Dear All,
> >
> > The below are snippets of the policies that are causing connection issues 
> > for me from Windows 7 workstations, connected to a Domain, to Samba Shares :
> >
> > Microsoft network client: Digitally sign communications (always)Enabled
> > Microsoft network client: Digitally sign communications (if server agrees)  
> >   Enabled
> >
> > Microsoft network server: Digitally sign communications (always)Disabled
> > Microsoft network server: Digitally sign communications (if client agrees)  
> >   Enabled
> >
> > Now the above cannot be altered due to security audit requirements.
> >
> > From trouble shooting it seems the following may also be relevant, but as 
> > before more than likely cannot be changed :
> >
> > Network security: LAN Manager authentication levelSend NTLMv2 response 
> > only
> >
> > Network security: Minimum session security for NTLM SSP based (including 
> > secure RPC) clientsRequire NTLMv2 session security,Require 128-bit 
> > encryption
> > Network security: Minimum session security for NTLM SSP based (including 
> > secure RPC) serversRequire NTLMv2 session security,Require 128-bit 
> > encryption
> >
> > The Samba configuration is as follows :
> >
> > [global]
> > netbios name = SRV002769
> > socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384
> > idmap uid = 1-5
> > winbind enum users = yes
> > winbind gid = 1-5
> > workgroup = MUD
> > os level = 20
> > winbind enum groups = yes
> > socket address = 10.12.18.160
> > password server = *
> > preferred master = no
> > winbind separator = +
> > max log size = 50
> > log file = /var/log/samba/log.%m
> > dns proxy = no
> > realm = MUD.INTERNAL.CO.ZA
> > security = ADS
> > wins server = 10.11.1.13
> > wins proxy = no
> > client use spnego = yes
> > client ntlmv2 auth = yes
> > encrypt passwords = yes
> > server signing = yes
> > client signing = yes
> >
> > Error

Re: [Samba] Fwd: Shadow copy in Samba 4.0.3

[SerNet Support Björn Baumbach]

Hello,

On 04/30/2013 09:51 PM, Ambika Arunachalam wrote:
> As discussed in the call, our configuration mounts the snapshot
> directory in parallel to the original mount point.(like
> /FILESYSTEMS/test and /FILESYSTEMS/snaptest)
> But it looks like the shadow copy module expects that the snapshot to be
> mounted under the original mount point's path tree. Hence it fails to
> find the snapshot directory.
> Please let me know if you need more information

yes, the default way using the shadow_copy2 module is to have a
.snapshot directory next to the stored data (or under the original mount
point), including the timestamp directories where snapshots are mounted.
The shadow:snapdir option does currently not work with absolute paths.
As far as I understand the code it's only possible to specify an
alternate name to ".snapshot".

With the current configuration (shadow:snapdir = /FILESYSTEMS) the
module searches for a snapshot directory "/FILESYSTEMS".
Trying to get older versions (snap shots/shadow copies) for a file
stored in e.g. /FILESYSTEMS/test/some/sub/dir/test.txt triggers the
module to search for the specified snap-dir in the the following way:
First the module checks for a snap-dir at
/FILESYSTEMS/test/some/sub/dir/test.txt/FILESYSTEMS

and then, if there is no path found, it walks through the path:
/FILESYSTEMS/test/some/sub/dir//FILESYSTEMS
/FILESYSTEMS/test/some//FILESYSTEMS
/FILESYSTEMS/test//FILESYSTEMS
/FILESYSTEMS//FILESYSTEMS
-> exit with "no snapshots found"

I'll discuss this issue with my colleagues Michael Adam and Volker
Lendecke to find the proper solution.

Best regards,
Björn

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba crash

[SerNet Support Björn Baumbach]

Hi Amir,

this is a known and fixed issue in Samba 3.6.6.
It was known as Bug 9004 https://bugzilla.samba.org/show_bug.cgi?id=9004

and has been fixed by
o   Andreas Schneider 
* BUG 8944 and 8567: Don't lookup the system user in pdb.

Do you need a patch for 3.6.1?

As far as I know (I would need to test it) with this patch Samba logs
that the configured guest user is not available and does not start up
instead of crashing later.

Best regards,
Björn

On 11/07/2012 08:59 PM, Amir Shimoni wrote:
> Hi,
> 
> We are using the following configuration:
> 
> [global]
> workgroup = FBX
> passdb backend = tdbsam:/etc/samba/passdb.tdb
> map to guest = Bad User
> guest account = nasuser
> security = user
> syslog = 0
> debuglevel = 2
> debug pid = yes
> kernel oplocks = no
> create mask = 0777
> time_audit:timeout = 1
> async smb echo handler  = yes
> log writeable files on exit  = yes
> 
> [FABRIX]
> path = /mnt/fbx/
> comment = Fabrix LI4 Share
> available = yes
> browseable = yes
> writable = yes
> locking = no
> oplocks = no
> level2 oplocks = no
> dos filemode = yes
> kernel change notify = no
> force directory mode = 0777
> guest ok = yes
> case sensitive = yes
> vfs objects = time_audit fxfs_o_direct aio_pthread
> admin users = nasuser
> aio write size = 1
> aio read size = 1
> dfree cache time = 10
> 
> When the guest account does not exists on the server, init_guest_info()
> failing to init the guest_info and later when passing it from
> make_server_info_guest() to copy_serverinfo() the process crash on
> segmentation fault when trying to access it (dst->guest = src->guest;),
> you can see the crash stack below:
> 
> #0  0x2b15679e4265 in raise () from /lib64/libc.so.6
> (gdb) bt
> #0  0x2b15679e4265 in raise () from /lib64/libc.so.6
> #1  0x2b15679e5d10 in abort () from /lib64/libc.so.6
> #2  0x2b15647fbd7d in dump_core () at lib/fault.c:391
> #3  0x2b156480ac65 in smb_panic (why=) at
> lib/util.c:1133
> #4  0x2b15647fc2ac in fault_report (sig=11) at lib/fault.c:53
> #5  sig_fault (sig=11) at lib/fault.c:76
> #6  
> #7  copy_serverinfo (mem_ctx=, src=0x0) at
> auth/auth_util.c:861
> #8  0x2b156485bead in make_server_info_guest
> (mem_ctx=0x2b15798b5a40, server_info=0x7d11d3a8) at auth/auth_util.c:939
> #9  0x2b15645375a4 in do_map_to_guest (status=,
> server_info=0x7d11d3a8, user=0x2b15798b5910 "myurukov",
> domain=0x2b15798b5870 "myurukov-PC") at smbd/sesssetup.c:64
> #10 0x2b15645376c4 in reply_spnego_ntlmssp (req=0x2b15798b65b0,
> vuid=100, auth_ntlmssp_state=0x2b15798a6970,
> ntlmssp_blob=0x7d11d470, nt_status=..., OID=0x0, wrap=true) at
> smbd/sesssetup.c:497
> #11 0x2b15645388ce in reply_spnego_auth (req=0x2b15798b65b0) at
> smbd/sesssetup.c:810
> #12 reply_sesssetup_and_X_spnego (req=0x2b15798b65b0) at
> smbd/sesssetup.c:1196
> #13 0x2b1564538bd0 in reply_sesssetup_and_X (req=0x2b15798b65b0) at
> smbd/sesssetup.c:1358
> #14 0x2b156456ea15 in switch_message (type=115 's',
> req=0x2b15798b65b0, size=292) at smbd/process.c:1573
> #15 0x2b1564572cfb in construct_reply (sconn=0x2b1579899a50,
> inbuf=, nread=292, unread_bytes=0, seqnum=0,
> encrypted=false, deferred_pcd=0x0) at smbd/process.c:1609
> #16 process_smb (sconn=0x2b1579899a50, inbuf=,
> nread=292, unread_bytes=0, seqnum=0, encrypted=false, deferred_pcd=0x0)
> at smbd/process.c:1687
> #17 0x2b1564572fcc in smbd_server_connection_read_handler
> (conn=0x2b1579899a50, fd=) at smbd/process.c:2316
> #18 0x2b156457303d in smbd_server_connection_handler (ev= optimized out>, fde=, flags=1, private_data= optimized out>) at smbd/process.c:2333
> #19 0x2b1564818f5a in run_events_poll (ev=0x2b157980,
> pollrtn=, pfds=0x2b15798b3520, num_pfds=3) at
> lib/events.c:286
> #20 0x2b1564571d0a in smbd_server_connection_loop_once
> (sconn=0x2b1579899a50) at smbd/process.c:1016
> #21 smbd_process (sconn=0x2b1579899a50) at smbd/process.c:3157
> #22 0x2b1564a8936f in smbd_accept_connection (ev= out>, fde=, flags=,
> private_data=) at smbd/server.c:505
> #23 0x2b1564818f5a in run_events_poll (ev=0x2b157980,
> pollrtn=, pfds=0x2b15798c2a40, num_pfds=5) at
> lib/events.c:286
> #24 0x2b156481938f in s3_event_loop_once (ev=0x2b157980,
> location=) at lib/events.c:349
> #25 0x2b15648196a9 in _tevent_loop_once (ev=0x2b157980,
> location=0x2b1564cae624 "smbd/server.c:838") at ../lib/tevent/tevent.c:494
> #26 0x2b1564a8ac03 in smbd_parent_loop (argc=,
> argv=) at smbd/server.c:838
> #27 main (argc=, argv=) at
> smbd/server.c:1320
> 
> Thanks,
> Amir.


-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mail

[Samba] Problems with Windows7-Clients and Samba-Shares

[Support]

Hi there,

i have an samba-server with several users and several shares and Windows 
7 clients. The logon-script for each user are automatically generated by 
a litte program (called connect.exe) and depending on the username will 
be different network shares connected. These little Visual Basic program 
is on a guest share on the linux server. The logoff from the network 
shares on the Windows 7 clients is realised by a simple "net use * /d 
/yes" so some different users can access their files on the same 
computer. The little programm sends username und password to the server 
and the server creates then the *.bat file with the net use-command to 
connect the shares. To do so the connection uses the linux-server ip 
adress e.g. "\\10.94.1.3\login$\connect.exe" and user nobody as guest. 
The created *.bat file contains the net use commands as 
"\\servername\share" with the username and individual password. If it 
happens that different users log on and off or the same user logs on and 
off windows brings up the following error message: "Error 1219. Multiple 
connections to a server or shared resource by the same user, using more 
than one user name, are not allowed.". But before all shares from other 
users were disconnected with the "net use * /d /yes"-command. At the 
moment we have to restart those windows 7 clients to have the 
possibility to log on again and get the same message after a few log 
on/off again.


It seems that the shares are not completely disconnected and so this 
error appears. Anyone knows a solution to this? It only happens on 
Windows 7 maschines (WinXP an Win2k works without problems) and the 
local users of the Windows 7 clients don't exists as any linux/samba 
users. Do I missed a important setting in the smb.conf which is 
necessarily for Windows 7?


This is my smb.conf global-section:

[global]
workgroup = server28
interfaces = 10.28.7.1
follow symlinks = yes
unix extensions = no
netbios name = server28
security = USER
encrypt passwords = Yes
update encrypted = Yes
os level = 1
preferred master = False
local master = No
domain master = False
map to guest = Bad user
guest account = Nobody

Best Regards,

Sabine
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Migrations-Fortschritte

[Samba Support - Björn JACKE]

Hallo Herr Lüttecke,

unser Umzug in Berlin ist zum Großteil über die Bühne. Herr Adam hatte während
desser auch heute mit mir telefoniert um die letzten Änderungen die wir in
Ihrem Setup durchgeführt hatten und die danach aufgetretenen Probleme, von
denen Sie heute berichtet haben, zu besprechen. In dem Telefonat und der
Remote-Session anschließend konnte er Ihnen offensichtlich sehr gut helfen.

Er hat aber auch berichtet, dass Sie unzufrieden sind mit einigen Punkten.
Inhaltlich gehe ich an dieser Stelle darauf nicht weiter ein, weil das wohl
Dinge sind, die schon zuvor Thema waren.

Auch wenn Ihre Kritik die sonst nicht am Projekt beteidigten Mitarbeiter nicht
treffen soll, so hinterlässt sie bei denen doch u.U. ein schlechtes
Bauchgefühl. Sprechen Sie deshalb bitte lieber mich oder auch Herrn Dr. Loxen
zu solchen Themen direkt an, nicht zuletzt ist das auch effektiver.

Ansonsten habe ich jedenfalls den Eindruck, dass wir gute Fortschritte im
Projekt machen. Zum Ergebinis Ihrer Tests und evtl. noch zu bearbeitender
Dinge, telefonieren wir Montag am besten.

Viele Grüße aus Berlin
Björn Jacke
-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba 3.2.4

[Jesse D Hernandez II (AIX Support)]

I have downloaded the source code to my AIX 5.3 server and have compiled it. 
I'm trying to mount some dfs windows shares to my unix/AIX server using samba. 
However, I think I'm looking for a smbmount command so that I can mount these 
shares on my AIX server. I ran the configure command with the -with-smbmount 
option, but I just don't see the smbmount command at all. What am I missing or 
what other options do I need?


Jesse D Hernandez II | Sr. System Administrator | Blue Cross Blue Shield of 
Kansas City | Phone 816.349.6041 | [EMAIL PROTECTED] 
| http://www.bcbskc.com


The BCBSKC Mail System made the following annotations:

CONFIDENTIALITY NOTICE: This email message and any
attachments are for the sole use of the intended
recipient(s) and may contain proprietary, confidential,
trade secret or privileged information. Any unauthorized
review, use, disclosure or distribution is prohibited
and may be a violation of law.  If you are not the
intended recipient or a person responsible for
delivering this message to an intended recipient, please
contact the sender by reply email and destroy all copies
of the original message.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] "inherit acls" only works with "inherit permissions"

[FLW Tech Support]

Posting the results of your suggestion -

With "inherit acls = yes" --
test.doc (file) and TEST (directory) were created with "inherit permissions
= no"
test2.doc (file) and TEST2 (directory) were created with "inherit
permissions = yes"
comp was a pre-existing directory with acl's set.
I restarted Samba after the change to smb.conf was made.
As you can see, there are no acl's assigned when "inherit permissions = no"

from the linux console --


[EMAIL PROTECTED] Stuff]# ls -rlat
total 72
drwxrws---+  2 hanna dig  4096 Dec 20 09:15 comp
drwxr-s---  16 smbadmin dig  4096 Dec 20 16:09 ..
-rw-rw1 mark  dig 10752 Dec 22 11:14 test.doc
drwxrws---   2 mark  dig  4096 Dec 22 11:14 TEST
drwxrws---+  2 mark  dig  4096 Dec 22 11:30 TEST2
-rwxrwx---+  1 mark  dig 10752 Dec 22 11:30 test2.doc
drwxrws---+  5 smbadmin dig   4096 Dec 22 11:30 .


# getfacl *
# file: comp
# owner: hanna
# group: dig
user::rwx
user:mark:rwx
user:jack:r-x
user:linda:r-x
user:hanna:rwx
group::rwx
mask::rwx
other::---

# file: TEST
# owner: mark
# group: dig
user::rwx
group::rwx
other::---

# file: TEST2
# owner: mark
# group: dig
user::rwx
user:mark:rwx
user:jack:r-x
user:linda:r-x
user:hanna:rwx
group::rwx
mask::rwx
other::---

# file: test2.doc
# owner: mark
# group: dig
user::rwx
user:mark:rwx
user:jack:r-x
user:linda:r-x
user:hanna:rwx
group::rw-
mask::rwx
other::---

# file: test.doc
# owner: mark
# group: dig
user::rw-
group::rw-
other::---

On 12/22/06, James A. Dinkel <[EMAIL PROTECTED] > wrote:


You might try this:  Set 'inherit permissions' to no, create a new file,
then from the console use getfacl to see what acls the file has.  See
what permissions and ACLs it is actually getting.  I just have them both
set to 'yes' here.

James Dinkel
Network Engineer
Butler County of Kansas


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] "inherit acls" only works with "inherit permissions"

[FLW Tech Support]

We are running a fileserver (Samba version 3.0.10-1.4E.9) on CentOS 4.4.

No AD, clients are Windows XP and OS X.

Linux acl's are used for access to directories and files.  Each top-level
folder belongs to a primary group with mode 2770.  The acl's restrict access
to lower level directories.  We need to pass the acl's down the directory
tree or else users may have unexpected access to lower-level subdirectories
if they have access to the top-level directory.

Two problems - "inherit acls = yes" ONLY works if "inherit permissions =
yes" AND all FILES and directories then inherit the execute bit.  We do want
the execute bit set to make directories readable, we do not want to default
on the execute bit on all files.
When "inherit permissions" is not set, then "inherit acls = yes" appears to
have no effect.

Relevant section of smb.conf --

[DIG]
  path = /home/DFT
  writeable = yes
  browseable = no
  create mask = 660
  directory mask = 2770
  inherit acls = yes
  inherit permissions = yes
  valid users = xxx, xxx1

I have tried various other options such as "map acl inherit = yes", "dos
filemode = yes" to no avail.  Setting a default acl for the primary group
has no effect.

Thanks in advance.
Mark Kerman
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] RE: Re: Excel file

[Customer Support at www.fogdog.com]

Dear Valued Customer,

Thank you for contacting Customer Support at www.fogdog.com.

Your questions and concerns are important to us and we are dedicated to 
assisting you in anyway possible. In order to assist you in the most 
efficient and timely manner, all email correspondence must be submitted 
through our online email form. To locate our online email form, we ask 
that you visit our Help Desk at Customer Support at 
www.fogdog.com/helpdesk  and choose FAQ/Contact Us under Online Store 
Information. Then, choose the subject that will address your question 
and send us an email through our online email form.  

We apologize for any inconvenience this may cause you.  

Sincerely,

Customer Support at www.fogdog.com





Original Message Follows:


Please read the attached file.


[ Attachment 1.2Type: application/octet-stream]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Unable to connect to the SAMBA Shares

[AFT Support]

SAMBA was installed on a SCO 5.0.6 several years ago. Logins were validated 
by an NT server ("DOMAIN") at the time. In March, the NT 4 server was 
replaced with a Windows 2003 server and the SAMBA sercurity was changed to 
"SERVER". Most of the users are not listed in the smbpasswd file and 
security is set to use the Samba user.

Since then, most users can attach to the shares without any problems.
I have one user who IS in the smbpasswd file but cannot attach to any of 
the shares. This user uses a Windows XPpro PC. Every time they try to 
connect, they get a Samba login box, the window's password is entered but 
the connection is refused and an entry in the /var/adm/syslog file like 
below is logged:

Nov 17 12:38:43 lsisysv smbd[16491]: [2005/11/17 12:38:43, 0] 
smbd/password.c:server_cryptkey(1054)
Nov 17 12:38:43 lsisysv smbd[16491]:   password server not available


I tried several times to reset the SAMBA Password using SWAT to no avail!
This users needs special rights to some the shares - that is the reason for 
the security.
###
the smb.conf file is below:

# Global parameters
[global]
workgroup = LANDSCAPESUPPLY
security = SERVER
encrypt passwords = Yes
min passwd length = 0
map to guest = Bad User
null passwords = Yes
password server = %m
os level = 0
preferred master = False
local master = No
domain master = False
guest account = samba
create mask = 0666
directory mask = 0777

[apps]
path = /apps/bin
read only = No
guest ok = Yes

[public]
path = /home/public
force user = samba
read only = No
guest ok = Yes

[tmp]
path = /tmp
read only = No
guest ok = Yes

[home]
path = %H
read only = No

[siqoutput]
path = /home/output
read only = No
guest ok = Yes

[photos]
path = /home/public/photos
force user = samba
read only = No
guest ok = Yes
###

Any ideas on how to solve this issue

Rob Schultz
Randall Data Systems, Inc.
v 248.488.9700
f 248.488.3600

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] 3.0.20a winbind getent problem...

[VR-Bug Support]

Hi all,

I have successfully setup squid on 1 host to authenticate users against win2k 
AD using Samba+Winbind.

On a second host I now wish to do the same and have installed from source using 
the same options, but cannot get any getent calls to work with winbind, even 
though wbinfo -t shows the trust being OK, wbinfo -g shows domain groups and 
wbinfo -i shows domain users.

This is level 10 debug for winbind:

[2005/10/13 09:23:34, 6] nsswitch/winbindd.c:new_connection(596)
  accepted socket 17
[2005/10/13 09:23:34, 0] nsswitch/winbindd.c:request_len_recv(566)
  request_len_recv: Invalid request size received: 1824
[2005/10/13 09:23:34, 6] nsswitch/winbindd.c:new_connection(596)
  accepted socket 17
[2005/10/13 09:23:34, 0] nsswitch/winbindd.c:request_len_recv(566)
  request_len_recv: Invalid request size received: 1824

This happens whenever I run getent group / getent passwd

Any clues as to why would be much appreciated.

Regards,

Luke


Victoria Real, creators of pioneering interactivity
www.victoriareal.com

Award winners...
Victoria Real and Endemol were awarded the global mobile content award 
for Celebrity Big Brother 3 at the Mobile Entertainment Forum Awards 2005.  
 Also shortlisted was All New Cosmetic Surgery Live, a production for FIVE 
which featured user-generated mobile content.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] 3.0.20a winbind getent problem...

[VR-Bug Support]

Many thanks - i had indeed upgraded from 3.0.14a and neglected to copy the 
module.

> make sure you update /lib/libnss_winbind.so.2.  This was
> pointed out in the WHATSNEW for 3.0.20 IIRC.



Victoria Real, creators of pioneering interactivity
www.victoriareal.com

Award winners...
Victoria Real and Endemol were awarded the global mobile content award 
for Celebrity Big Brother 3 at the Mobile Entertainment Forum Awards 2005.  
 Also shortlisted was All New Cosmetic Surgery Live, a production for FIVE 
which featured user-generated mobile content.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] 3.0.20a winbind getent problem...

[VR-Bug Support]

Hi all,

I have successfully setup squid on 1 host to authenticate users against win2k 
AD using Samba+Winbind.

On a second host I now wish to do the same and have installed from source using 
the same options, but cannot get any getent calls to work with winbind, even 
though wbinfo -t shows the trust being OK, wbinfo -g shows domain groups and 
wbinfo -i shows domain users.

This is level 10 debug for winbind:

[2005/10/13 09:23:34, 6] nsswitch/winbindd.c:new_connection(596)
  accepted socket 17
[2005/10/13 09:23:34, 0] nsswitch/winbindd.c:request_len_recv(566)
  request_len_recv: Invalid request size received: 1824
[2005/10/13 09:23:34, 6] nsswitch/winbindd.c:new_connection(596)
  accepted socket 17
[2005/10/13 09:23:34, 0] nsswitch/winbindd.c:request_len_recv(566)
  request_len_recv: Invalid request size received: 1824

This happens whenever I run getent group / getent passwd

Any clues as to why would be much appreciated.

Regards,

Luke


Victoria Real, creators of pioneering interactivity
www.victoriareal.com

Award winners...
Victoria Real and Endemol were awarded the global mobile content award 
for Celebrity Big Brother 3 at the Mobile Entertainment Forum Awards 2005.  
 Also shortlisted was All New Cosmetic Surgery Live, a production for FIVE 
which featured user-generated mobile content.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Your Support Inquiries -- Attention Required

[inKline Global Sales Support Auto Reply]

Dear Customer,
 
Thank you for writing to inKline Global, Inc.! We appreciate your business and 
look forward to exceeding your expectations.
 
If you are unable to download the product you purchased, please view your
purchase confirmation that you received in your email. Your personal download
link is in it! If you are still unable to receive your purchased software,
please view our software download/re-download FAQ at
http://inklineglobal.com/support/technical_common_download.html to resolve
your problems.

If you run into product installation problems please go to
http://inklineglobal.com/support/technical_common_installation.html to learn
how to install your products easily.

Additionally, if you wish to learn how to uninstall programs correctly, please
view http://inklineglobal.com/support/technical_common_uninstallation.html

If you have submitted technical and sales support emails at this address, 
please use our NEW web support system at http://www.inklineglobal.com/support/ 
to resubmit your queries. We no longer accept email questions at this email 
address as we have upgraded to the new web support system, which provides us 
with more detailed technical information to support you better. The new system 
also streamlines the information required by our support team in order to serve 
you promptly.
 
Generally our personnel will answer all support requests within 24-48 hours.  
If your support request has been assigned during non-business hours, please be 
informed that we will reply as soon as possible on a first come, first serve 
basis.
 
In the meantime, please visit our support site at 
http://www.inklineglobal.com/support and select the technical or sales support 
that you need. You will be able to view the extensive knowledgebase and FAQ 
sections that we have posted for your product. You can even find the answers 
that you require before we attend to your requests.
 
We look forward to helping you!

inKline Global Product Support
http://www.inklineglobal.com
inKline Global, Inc.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Notification of Undelivered Mail (VIS)

[c&it . support]

An email that you sent to [EMAIL PROTECTED] the subject title: Re: List has 
been blocked because it appears to contain a Virus/Worm.
Please note : the recipient has been notified that your email has been blocked. 
In order to protect our systems the email has been deleted.
Please clean and resend the email
C&IT Services
Napier University
MailMarshal Rule: Anti-Virus (Inbound) : Block Virus : W32/Flcss
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Notice: **Last Warning**

[support]

We regret to inform you that your account has been suspended due to the 
violation of our site policy, more info is attached.

** Message from InterScan E-Mail VirusWall NT **

** WARNING! Attached file email-info.zip contains:

 WORM_MYTOB.FC virus in compressed file email-info.htm  
.exe

   Attempted to clean the file but it is not cleanable.
   It has been deleted.
* End of message ***

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] [ #HNP-63953-355]: read it immediately

[Viewpoint Search Support]

Thank you for contacting the Viewpoint Help Desk.
 
There is no need to reply to this message.  Your e-mail has generated ticket ID 
HNP-63953-355 and will be assigned to the next available Viewpoint Customer 
Support representative.  Any future correspondence regarding this issue should 
reference the ticket ID HNP-63953-355 in the subject.
 
Our 'Help Desk' office hours (Eastern Time) are:
Monday through Friday: 9am to 6pm
 
Our standard response time is within 2 hours. However, it may take up to a day 
to reply under heavy loads.  In the meantime, please feel free to visit our 
Viewpoint support forums at:  http://viewpoint.infopop.cc/eve/ubb.x
 
Thanks!

Viewpoint Help Desk
Viewpoint, Inc. (NASDAQ: VWPT)
[EMAIL PROTECTED]
http://www.viewpoint.com/

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] A probably silly thought but...

[Matthew Western, IT Support, Lonsdale]

Not a silly thought.

I've instead of spending x hunderd thousand on brandname ibm servers and
sans, how you could create a RAID array of PCs running IDE hard drives.
If a PC dies just plug in some more and rebuild.   If you want to add
more space just add more PCs.  :)  that would be cool.

Obviously you wouldn't use it still for critical data like databases
etc, but our user directory would be a good candidate. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
S Clark
Sent: Thursday, 3 March 2005 8:09 AM
To: samba@lists.samba.org
Subject: [Samba] A probably silly thought but...

Here's a completely off-the-wall thought.

I have no idea if it would work, but would it be possible for you to
combine the two RAID5 systems into a "software" RAID1 system?  Perhaps
via iSCSI?

Kind of an overcomplicated method for doing what you need, but it WOULD
keep both sets of RAID5 arrays in sync with each other in realtime, and
would allow things to keep running without a pause even if one of the
RAID5 systems failed.

If it's even possible...

(Told you it was a silly thought...)


On Wednesday 02 March 2005 09:19 am, Greg Freemyer wrote:
> On Wed, 02 Mar 2005 10:33:34 +0100, Michael Gasch wrote:
> > hi,
> >
> > well, i was also wondering how to build up a very redundant solution

> > for my samba installations
> >
> > at the moment i'm using rsync twice a day to sync about 2TB amount 
> > of data between two hardware raids (both raid5 with 2 hot spare)
> >
> > advantage: if filesystem is corrupt on one raid, the other raid is 
> > normaly not affected
> >
> > disadvantage: because analyzing data to sync by rsync takes time 
> > it's senseless to sync every our so you have no realtime backup 
> > (only 12h
> > before)
> >
> > how do you avoid this filesystem issue with drbd? doing rsync every 
> > night seperatly? i don't know of statistics about filesystem damages
> >
> > cheerz
>
> DRBD would not help this problem.  As you say the filesystem 
> corruption would immediately be duplicated to the alternate server.
>
> OTOH a good journelled filesystem combined with dual-power supplies 
> and dual ups's should have a very high relaibility rate.  EXT3 seems 
> to get mentioned as the most reliable linux filesystem, so go with 
> that if reliability is your top concern.
>
> Greg
> --
> Greg Freemyer
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Winbind & ssh

[Matthew Western, IT Support, Lonsdale]

Hi All,

I've got winbind happening and can telnet into the box using my NT
account (have manually made home directory) and it works a treat.
When I try to ssh in I get access denied. 

As you can see from the log winbind is granting access but it seems that
sshd is blocking access before winbind can get to it?  That's a guess of
course.

Any ideas?
Matthew

/var/log/messages
Mar  4 08:56:18 bluegum sshd(pam_unix)[12419]: check pass; user unknown
Mar  4 08:56:18 bluegum sshd(pam_unix)[12419]: authentication failure;
logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=bodj.ap.sola.com
Mar  4 08:56:18 bluegum pam_winbind[12419]: user 'mwestern' granted
access


Smb.conf
[global]
workgroup = AUSTRALIA
realm = AP.SOLA.COM
server string = Sola EB2 Enterprise Linux Box
security = ADS
password server = wattle.ap.sola.com
log file = /var/log/samba/smbd.log
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = /etc/printcap
dns proxy = No
idmap uid = 1-2
idmap gid = 1-2
template homedir = /home/%U
template shell = /bin/bash
winbind separator = +
winbind use default domain = Yes
cups options = raw

/etc/pam.d/sshd--
auth   required pam_stack.so service=system-auth
auth   sufficient   pam_winbind.so
auth   required pam_nologin.so
accountrequired pam_stack.so service=system-auth
accountsufficient   pam_winbind.so
password   required pam_stack.so service=system-auth
#password   sufficient   pam_winbind.so   (tried it with or without the
password option)
sessionrequired pam_stack.so service=system-auth
sessionrequired pam_limits.so
sessionoptional pam_console.so

/etc/pam.d/login-
auth   required pam_securetty.so
auth   sufficient   pam_winbind.so
auth   required pam_stack.so service=system-auth
auth   required pam_nologin.so
accountsufficient   pam_winbind.so
accountrequired pam_stack.so service=system-auth
password   required pam_stack.so service=system-auth
sessionrequired pam_stack.so service=system-auth
sessionoptional pam_console.so

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] [abuse #255766] Systems Support Online Autoreply

[Support Online]

* This an automatic response to confirm that we have 
received your recent report regarding a Network Abuse or 
Security incident involving an IKANO Communications 
Branded 
partner, and are taking the following actions to resolve 
the issue. *
  
The subject of your e-mail was:
  
Postmaster, Ġėţ ready for Romáňćė in 15 
míns - Ġėţ  Ċĩàĺĩŝ  softatábs at  upto  
 80℅Ðĩŝćõùʼnţ
  
The information that you have provided will be used to 
investigate the incident for violations of our our User 
Agreement and Appropriate Use Policy. 
  
Once the investigation is complete, action in accordance 
with our policies will be taken against the offending 
account. IKANO Communications maintains a "zero tolerance" 
policy towards spam and network abuse at all times and 
with 
all users.
  
Please note that e-mail and news abuse complaints that are 
received without the complete header information will be 
ignored and deleted from the system. This is because we 
cannot investigate your complaint without this information.
  
The header information must include the following 
information:
  
1. The IP Address of the original sender.
2. The time and date the message was received by each e-
mail server. This must include the time zone or GMT time 
stamp.
  
Please refer to your e-mail program's help file for 
instructions on how to send the headers. Please be aware 
that simply attaching an e-mail or forwarding an e-mail 
does not send us the headers. These messages will be 
automatically deleted from the system.
  
You may also read more about properly reporting SPAM by 
going to the following URL:
  
http://spam.abuse.net/userhelp/howtocomplain.shtml
  
If you are a member of our MailRover program and are 
reporting a message that you received that was not blocked 
by MailRover, please forward the message, again it must 
include headers, to [EMAIL PROTECTED]
  
If you are reporting an active network attack, please send 
a copy of your report to [EMAIL PROTECTED]
  
This may be the last reply that you receive regarding your 
complaint.  Please do not, however, interpret a lack of 
response as a lack of action taken. Please be assured that 
if we find that a customer is in violation of our 
policies, 
that we will take the necessary action to stop the 
activity 
in question.
  
Thank you,
  
Network Security and Abuse Response Team
IKANO Communications  
...the Internet Branding Company
[EMAIL PROTECTED]  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Unknown sender

[support]

RSVP can't send your email, because we don't have any record
of a member with your email address. RSVP can only send
emails from your registered email address.

If you haven't registered at all, please go to
http://www.rsvp.com.au and join our Free Trial to try out
our service.

If you are a member, you may have registered using a
different email address. Please log in to RSVP at
http://www.rsvp.com.au and check your registration details.
If your email address has changed since you registered, you
can update it, and we will send you a confirmation email to
make sure we can contact you at the new email address. Once
you've returned that email to us, you'll be able to send and
receive email again.

If you have registered, but haven't confirmed your membership
by returning the email we sent you containing your
confirmation code, you won't be able to send any RSVP email.
If you don't have a copy of that confirmation email, please
contact us at [EMAIL PROTECTED], and we'll send you another
one.

Thanks from RSVP.
http://www.rsvp.com.au

Sent by RSVP in relation to your account with RSVP. If you believe you have 
received this email in error, please contact [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] WIndows Error messages each write access

[support]

Hello, 

just a quick message via my Webmailer, a more detailed explaination will 
follow when I am at home. I was fighting two days with a brand new Samba 
3.0.10 Installation on a SuSE 9.2 Box. At the end I had to give up to catch 
my flight home: 

The problem is, that each write access (like creating, deleting, changing 
file) a Windows popup comes up informing me, that the network name is not 
valid anymore, and that the file is not found. After confirming the message, 
the file action is done anyway (e.g. its deleted or created). 

I tried the same in a MS DOS Command line window and there I can do the same 
actions (like "edit test" to create a file and "del test" to delete it) 
without any questions or problems. 

The client is getting the IP via DHCP with a Dyn DNS Entry. The resolving of 
IP and/or Name is working on both sites (I trible checked that). 

Any idea so far ? 

I will post detailed config files later when I am home. I am so fed up... 

cu
stonki 

--
www.stonki.de
www.kbarcode.net
www.krename.net
www.proftpd.de 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Re: Question [#2157030]

[support]

Dear XO Customer:

 

Thank you submitting your request to XO Communications.  Please note that the address 
you have entered is no longer valid.  You can reach XO Customer Care by submitting 
your request at http://www.xo.com/contact/care/  or by calling our customer service 
department at 1-888-575-6398 and selecting the appropriate options.

 

We thank you for your business and look forward to hearing from you.

 

Sincerely,
Customer Care
XO Communications




-  Wrote -
I have corrected your document.




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Someone is researching your background via our website

[Experience Support]

 
Important message.
Please print and keep this for your records. 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= 

An individual at our website is sharing Opinions and Information regarding you in our 
online community. 

Why did we send you this email?

When people find out others are talking about them, whether it is good or bad, they 
usually want to know. We feel that is is our responsibility to try to inform subjects 
so they have an opportunity to find out what is being said.

To examine requests regarding you use this link:

http://4.sye1.com/lx.php?a=search&b=5&[EMAIL PROTECTED]

Our Identity Protection System is a simple system in which this website sends email 
messages to the Experience Request author on your behalf, and vice versa. This website 
will never reveal the identity of the Experience Request author to you, nor will it 
reveal your identity to the author of the Experience Request.

You can avoid future notification emails like this by adding your email address(es) to 
our Do Not Email List.  

Just use the following link:

http://9.sye3.org/lx.php?a=donotemail&[EMAIL PROTECTED]

Once you understand how our website works you will realize that it is really very 
simple.  Although it may seem confusing or complicated at first glance, in reality it 
is very simple.

Regards,

Support Department


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] [OZS-14917]: Re: Thank you for delivery

[VyPRESS Support]

== Please reply above this line ==

[EMAIL PROTECTED],

Your ticket has been submitted to our General department, one of the staff members 
will review it and reply accordingly. Listed below are details of this ticket, you 
will need to use the ticket key listed below to update the status of this ticket from 
web.

Ticket ID: OZS-14917
Ticket Key: 2084d8
Subject: Re: Thank you for delivery
Department: General

You can check the status or reply to this ticket online at 
http://support.vypress.com/index.php?_a=tickets&_m=viewmain&[EMAIL 
PROTECTED]&ticketkeyre=2084d8&_i=OZS-14917



Please let us know if we can assist you any further,

VyPRESS


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Second Copy 2000 problem

[Matthew Western, IT Support, Lonsdale]

Yep.  I did actually.  :)   I pointed it to the same place and it still
had a winge.It just did the access denied...   

Thakns for the suggestion tho.

Take care
Matthew 

-Original Message-
From: Patrick McSwiggen [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 15 September 2004 11:46 AM
To: [EMAIL PROTECTED]
Subject: Re: [Samba] Second Copy 2000 problem

On Sep 14, 2004, at 8:46 PM, Matthew Western, IT Support, Lonsdale
wrote:
> Basically we have a share called data.When trying to access the
> share from second copy the log says can't see service 'dat'.
> Bizzaire

Did you try duplicating the share but this time calling it [dat] (make
it "browseable = no") and see if that fools it into working?

-- 
Patrick D. McSwiggen[EMAIL PROTECTED]
Mathematical Sciences513-556-4080
University of Cincinnati 513-556-3417 FAX

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Second Copy 2000 problem

[Matthew Western, IT Support, Lonsdale]

Hi All,

I have upgraded a customer from windows 2000 to samba 3.0.4 on fedora
core 2. Second copy refuses to work.   The log files seem to
indicate that it's trying to access the sharename minus one character.
Second Copy tech support are idiots, of course

Basically we have a share called data.When trying to access the
share from second copy the log says can't see service 'dat'.
Bizzaire

Here is the log.I said I'd post in the off chance that anybody would
know something

Here is what I sent to second copy
-----

Hi Support People, I have a client who has just put in a linux server
running samba (version 3.0.3 which is a very recent version) which is
working perfectly for everything. The probelm is they use Second Copy
(license attached for proof of purchase) for backing up the server to a
removable hard drive to take home and it fails to connect to the server.
It pops up an Access Denied message when I can browse happily from
windows explorer. I consulted the samba log file and it appears to be
concatinating the share name somehow, so i thought, OK i'll create a
'fake' share to get around this problem, but the problem still appears.
I have two shares, one called data and one called retailm. you can see
from the log file that both shares are exibiting the same behaviour. Can
you point me to either a work around or let me know when a fix will be
available?

 -smb.log- 
[2004/07/05 15:03:05, 0] smbd/service.c:make_connection(771)
server1 (10.0.2.2) couldn't find service dat
[2004/07/05 15:03:05, 0] smbd/service.c:make_connection(771)
server1 (10.0.2.2) couldn't find service dat
[2004/07/05 15:03:07, 0] smbd/service.c:make_connection(771)
server1 (10.0.2.2) couldn't find service dat

[2004/07/05 15:06:35, 0] smbd/service.c:make_connection(771)
server1 (10.0.2.2) couldn't find service retail
[2004/07/05 15:06:35, 0] smbd/service.c:make_connection(771)
server1 (10.0.2.2) couldn't find service retail
[2004/07/05 15:06:37, 0] smbd/service.c:make_connection(771)
server1 (10.0.2.2) couldn't find service retail
-

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Active Directory Migration Tools - breaks samba 2.x.x?

[Matthew Western, IT Support, Lonsdale]

Sadly it's not a typo.   I think we've worked around it for the time
being.

We have to upgrade to 3.x.x anyway to validate off the AD domain.   It
was the SID migration that was causing it grief.  

This box is an alpha running HP Unix and samba 2.0.6. can you
believe this systems is an in house system that uses both sockets and
lots of mapped drives to chuck it's data everywhere.  It's a complete
nightmare...   

-Original Message-
From: Paul Gienger [mailto:[EMAIL PROTECTED] 
Sent: Thursday, 19 August 2004 11:31 AM
To: Matthew Western, IT Support, Lonsdale
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Active Directory Migration Tools - breaks samba
2.x.x?



Matthew Western, IT Support, Lonsdale wrote:

> <>Hi,
>
> We are migrating from an NT domain to a 2003 AD and using the 
> migration tools to nicely move the users across. However, we have just

> realized that a user created manually can see a samba 2.0.6 server no 
> worries, but a user that has been migrated using the Migration Tools 
> gets an access denied.

Is this a typo?  *2*.0.6?  I doubt that an old version of that vintage
has any chance with Windows 2003-AD.

-- 
Paul Gienger Office: 701-281-1884
Applied Engineering Inc. 
Information Systems Consultant   Fax:701-281-1322
URL: www.ae-solutions.commailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Active Directory Migration Tools - breaks samba 2.x.x?

[Matthew Western, IT Support, Lonsdale]

OK.   Further info.  If I don't migrate the SID on a new user it allows
access to the box. Now I've gotta figure out how to generate new
SIDs for the users already moved across... And test to see if access
still works when the SID isn't migrated across 

-Original Message-
From: Matthew Western, IT Support, Lonsdale 
Sent: Thursday, 19 August 2004 11:05 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Active Directory Migration Tools - breaks samba 2.x.x?

Hi,

We are migrating from an NT domain to a 2003 AD and using the migration
tools to nicely move the users across.However, we have just realized
that a user created manually can see a samba 2.0.6 server no worries,
but a user that has been migrated using the Migration Tools gets an
access denied.  

Anybody come across this one before? It's probably some bodj work
around from microsoft that they've plonked in to make it work and samba
playing by all the normal rules goes 'huh, that's now allowed'.

I thought it might be the SID migration option that we have turned on so
all the permissions come across nicely but the test user I migrated,
with no SID mig, still did the same thing?

Anybody had this and figured a fix?  I know how to work around it, but
each user migration suddenly becomes a headache if I can't use the
migration tools.

Thanks
Matthew
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Active Directory Migration Tools - breaks samba 2.x.x?

[Matthew Western, IT Support, Lonsdale]

Hi,

We are migrating from an NT domain to a 2003 AD and using the migration
tools to nicely move the users across.However, we have just realized
that a user created manually can see a samba 2.0.6 server no worries,
but a user that has been migrated using the Migration Tools gets an
access denied.  

Anybody come across this one before? It's probably some bodj work
around from microsoft that they've plonked in to make it work and samba
playing by all the normal rules goes 'huh, that's now allowed'.

I thought it might be the SID migration option that we have turned on so
all the permissions come across nicely but the test user I migrated,
with no SID mig, still did the same thing?

Anybody had this and figured a fix?  I know how to work around it, but
each user migration suddenly becomes a headache if I can't use the
migration tools.

Thanks
Matthew
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] RE: Can I get the GPL source for the Samba version used in the Gu ardian OS?

[Support, Snap]

Hello Tom,


The update has been posted to http://oss.snapappliance.com 

We apologize for the delay in updating the source code page. 

Have a nice day

-Sean 


-Original Message-
From: Tom Dickson [mailto:[EMAIL PROTECTED]
Sent: Friday, July 23, 2004 7:20 AM
To: Support, Snap
Subject: Re: Can I get the GPL source for the Samba version used in the
Gu ardian OS?


Thank you very much! I was sure it was just a simple misunderstanding.

Congratulations on your purchase by Adaptec! I look forward to seeing 
great improvements in your equipment and software with added resources 
you now have.

-Tom
On 2004 Jul 23, at 07:09, Support, Snap wrote:

> Tom,
>Yes, you are correct we are in violation and are presently 
> addressing it.
> Once we have the source code available you will be contacted.
>
> Robert T.
>
> Level 2 Technician
> Advanced Technical Support
> SnapAppliance
>
>
> -Original Message-
> From: Tom Dickson [mailto:[EMAIL PROTECTED]
> Sent: Friday, July 16, 2004 11:07 AM
> To: Support, Snap
> Cc: [EMAIL PROTECTED]
> Subject: RE: Can I get the GPL source for the Samba version used in the
> Gu ardian OS?
>
>
> Then you are in violation of section 3 of the GPL as printed at
> http://oss.snapappliance.com/license.html
>
> Samba is licensed under the GPL, and the version in SNAP is modified. 
> I'd
> like the modifications.
>
> The modifications available at oss.snapappliance.com are old.
>
> -Tom
>
>> Hi Tom,
>>
>> I am terribly sorry but this is Confidential information that cannot 
>> be
>> distributed outside of Snap appliances.
>>
>> Thanks,
>>
>> Rodney
>>
>> -Original Message-
>> From: Support, Snap
>> Sent: Thursday, July 15, 2004 2:46 PM
>> To: Support, Snap
>> Subject: Can I get the GPL source for the Samba version used in the
>> Guardian OS?
>>
>>
>> Form Submission: Contact Support
>> 
>>
>> - First Name:
>> Tom
>>
>>
>>
>>
>> - Last Name:
>> Dickson
>>
>>
>>
>>
>> - Title:
>>
>>
>>
>>
>>
>> - Company Name:
>>
>>
>>
>>
>>
>> - Address 1:
>> 2757 Chaffee St
>>
>>
>>
>>
>> - Address 2:
>>
>>
>>
>>
>>
>> - City:
>> National City
>>
>>
>>
>>
>> - State:
>> CA
>>
>>
>>
>>
>> - Zip/Postal Code:
>> 91950
>>
>>
>>
>>
>> - Country:
>> United States
>>
>>
>>
>>
>> - Location:
>> Americas
>>
>>
>>
>>
>> - Phone:
>> 858-726-1846
>>
>>
>>
>>
>> - Email:
>> [EMAIL PROTECTED]
>>
>>
>>
>>
>> - Product Model:
>> Snap Server 4500
>>
>>
>>
>>
>> - Snap Server OS Version:
>> GuardianOS 3.0.099
>>
>>
>>
>>
>> - Serial Number:
>> 411138
>>
>>
>>
>>
>> - Network Operating System Environment:
>> Windows
>>
>>
>>
>>
>> - Client Workstation Types:
>> Windows
>>
>>
>>
>>
>> - Detailed description of your problem (include error messages,
>> symptoms, etc.):
>> Can I get the GPL source for the Samba version used in the Guardian 
>> OS?
>>
>> Thank you.
>>
>>
>>
>>
>>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] vBulletin Issue - Do you? [SID-192982-7b7b7ec0]

[vBulletin Support Team]

Hello,

Your email has been received, and your query has been logged into
the vBulletin issue system.  A representative will be in touch
within 2 working days.

To view your query (and post followups), please visit this page:
http://www.vbulletin.com/contact/issue.php?issueid=192982&authcode=7b7b7ec0

If you would like to post a followup (or reply) to your query via
email, please email mailto:[EMAIL PROTECTED] being sure to
include this text in the subject:
[SID-192982-7b7b7ec0]

Thanks,

James Limm
vBulletin Support Team

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] [Devlan #315] Systems Support Online Autoreply

[Support Online]

Your request of the subject

Auslaendergewalt: Herr Rau, wo waren Sie? (Key:9438)

has been received. Please refer to request #315
when you need to check its status in the job queue
through the URL: http://www-devlan/wreq

http://devlan.jpl.nasa.gov/cgi-bin/wreq/req?list-1

Thank you.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Thank you for contacting Symantec

[Symantec support]

Dear Symantec Customer,

E-Mail technical support is not available for your product. However, Symantec offers a 
wide variety of online and telephone support options including technical tips, 
frequently-asked-questions documents, fax-on-demand documents, and an online 
knowledgebase with every known issue regarding your Symantec software.  For a list of 
these options, please refer to your product manual, or point your
web browser to Symantec's main Technical Support web page at:

http://www.symantec.com/techsupp/



Thank you for choosing Symantec Software.

Symantec Online Services

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Win2k AD with LDAP unix auth

[VR-Bug Support]

Hi,

I'd like to know if this is actually possible, a simple yes or no would suffice, but 
any pointers would be more helpful...

I'd like to have windows users within the AD be able to access a linux server share 
(having been authenticated by AD), and read / write / execute files within that share 
according to unix permissions (obtained by an Open LDAP server running on another 
Linux server)

Firstly, is that possible?

Secondly, is this scenario / method unusual?

Thanks

Luke.


_
A winner every minute of the day - The 24 Hour Drop www.24hourgames.tv

Any views or opinions expressed in this e-mail are solely those of the author and do 
not necessarily represent those of ENDEMOL UK plc unless specifically stated.
This email and the information it contains are confidential and intended solely for 
the use of the individual or entity to which it is addressed. If you have received 
this email in error please notify us immediately and delete the copy you have received 
from your system.
You should not copy it for any purpose, re-transmit it, use it or disclose its 
contents to any other person. If you suspect the message may have been intercepted or 
amended please call the sender.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Automated response

[MKS Toolkit Support]

This is an automated e-mail response and is for notification purposes
only, please do not reply.

The Technical Support organization at MKS Interoperability Business Unit
has received your correspondence and you will be contacted to discuss
this matter further.
 
Please note that our web site (<http://www.mkssoftware.com/support>) has
many technical references including Frequently Asked Questions (FAQ), a
list of supported APIs and utilities, as well as the resource kit and
directions for obtaining your free copy of the porting guide.  Also note
that you can submit service request through the web at:
<http://www.mkssoftware.com/support/support.asp>

Thank you for contacting MKS Technical Support

--

MKS Software, 
12450 Fair Lakes Circle, 
Fairfax, VA  22033 USA
+1-703-803-7660 voice, +1-703-803-3344 fax
Mail to: [EMAIL PROTECTED], <http://www.mkssoftware.com>
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] 10 X Linux boxes - join win2k AD (mixed mode)

[VR-Bug Support]

Hi All,

I'd like to know your views on the following:

I have around 10 Linux servers, any that run samba or on version 2.2.* they have there 
own smbpasswd files, but are within the same win2k browse domain.

I'd like to upgrade to samba 3.0.* and currently use openldap to authenticate Unix 
users to any of the Linux boxes.

I'd like to get rid of using multiple smbpasswd files, and start to authenticate 
against the win2k AD controllers or openldap.

I've been looking at the various discussions on this list for some time now to see if 
there was a preferred way of doing this but haven't come to a conclusion, does anyone 
have one?

Thanks

Luke.

BTW - Great work, samba 2.2.* has been so stable and quick for us, if it were my 
choice I'd ditch windoze altogether :)



_
A winner every minute of the day - The 24 Hour Drop www.24hourgames.tv

Any views or opinions expressed in this e-mail are solely those of the author and do 
not necessarily represent those of ENDEMOL UK plc unless specifically stated.
This email and the information it contains are confidential and intended solely for 
the use of the individual or entity to which it is addressed. If you have received 
this email in error please notify us immediately and delete the copy you have received 
from your system.
You should not copy it for any purpose, re-transmit it, use it or disclose its 
contents to any other person. If you suspect the message may have been intercepted or 
amended please call the sender.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] [MSM.RU #36082] : Re: approved application

[support]

Ваше письмо с темой:

" Re: approved application "

было получено (2004-4-1 8:46:7).

ID: #36082
Очередь: Support

Пожалуйста, сохраняйте строку [MSM.RU #36082] в теме письма при переписке.

Настоящее письмо сгенерировано автоматически и в ответе не нуждается.


   ЗАО "Диджитал Нетворк"

tel:  +7 095 723 8333
  +7 095 723 8332
fax:  +7 095 723 8332


---English-

Your message

" Re: approved application "

was successfuly received (2004-4-1 8:46:7).

ID: #36082
Queue: Support

Please include line [MSM.RU #36082] in next letters for this topic thread.


  "Digital Network" JSC

tel:  +7 095 723 8333
  +7 095 723 8332
fax:  +7 095 723 8332
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Win 98 loosing it.

[VR-Bug Support]

This may have something to do with it, but as the article states Win9x timeouts can't 
be changed, and it doesn't explain why 2 of your 4 systems are OK - just a thought.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;297684

Regards,

Luke.

> Simon
>
>
That was one of the first things I checked.  Power save and screen savers are
the first to go when I troubleshoot a Windoze issue.

Thanks


__
Any views or opinions expressed in this e-mail are solely those of the author and do 
not necessarily represent those of ENDEMOL UK plc unless specifically stated.
This email and the information it contains are confidential and intended solely for 
the use of the individual or entity to which it is addressed. If you have received 
this email in error please notify us immediately and delete the copy you have received 
from your system.
You should not copy it for any purpose, re-transmit it, use it or disclose its 
contents to any other person. If you suspect the message may have been intercepted or 
amended please call the sender.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Young site :)

[Support]

Hello !

Just take a look! Don't pass by.

http://zone.hoha.ru/modelgirls
^^^  ^^^  ^^^  ^^^
Click here to join 


We know, that you are looking for. And we appreciate your taste.

Fascinating beauty of nude Russian teens will not leave you indifferent.
The most frank suxual orgies, the most sensual couples -- the hornies ones!

Make a New Year present for yourself or to you friend ;) . Take a wonderful sex trip.
It is here: http://zone.hoha.ru/modelgirls


.An amazing secrets of youngest (forbiden) girls...

http://zone.hoha.ru/modelgirls
^^^  ^^^  ^^^  ^^^
Click here to join 



--
Note:
This is not a spam email. This email was sent to you because your
email was entered in on a website requesting to be a registered
subscriber

http://zone.hoha.ru/unsubscribe
^^^  ^^^  ^^^  ^^^
Click here to unsubscribe



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Notice to members

[Support]

   ..:: VIRGINS FILM ::..

http://210.101.95.254/virginsfilm

Every day you see a lot you teens on the streets but you never know what 
do they usually do when alone! You think studying and learning poems? 
You're wrong then. When young hot girls are alone - they lose their 
"good girls" face and show their lascivious nature! Have you ever seen 
young boy and girls fucking like mad beasts on the floor in the bathroom? 
Have you ever seen them sucking one another's crotches right on the white 
leather sofa? Be sure - soon you will get this chance!

So, here is the new website making your sexual dreams a reality all over again. 
We got young girls doing blow-job to the older men.
Hot lesbians, wild blowjobs, horny sex babes, threesomes and all ready for
instant download. 
We have highest quality long movies and user friendly site navigation.
Constant updates!
Get all the updates to meet your sexual desires and find out what'sthe buzz in adult 
industry 
with the most popular XXX Videosite on the Web!

http://210.101.95.254/virginsfilm
  
Click here to Join


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Notice for you

[Support]

..::: Drunk Young :::... 

http://210.101.95.254/drunk-young
  
Click here to Join

Drunk Young will take you to the new level of excitement. 
It is a guarantee of Your pleasure, because we choose models very 
seriously & carefully, depending on you offers and suggestions. 
'Drunk Young' is regularly updates to bring you more and more sweet 
nymphets 100% satisfaction guarantee, with unique content of shiny 
floral girls. That's why we have very high percentage of monthly rebills. 
Every day we take new pictures and videos at our own studio. 
At summer we often making photo sessions in country side, villages and also in 
another countys. Every week we update site content with fresh faces never been 
seen before. 

We offer you. 

1. Exclusive content, just from our studio, with young pretty (some of them drunk :) 
girls: at least more than 66 boys and girls models.
2. Thousands of original pictures are the crystal clear quality and hi-resolution 1024 
X 768 or more. All videos are in DivX format(DVD quality). 
3. We choose models depending on you offers and suggestions. 
4. EVERY 3-5 DAYS we add new content with new girls and boys! 
5. All video in the members area can be saved directly to your hard-drive.
6. 24*7 responsive support: you can ask questions and express your wishes any time at 
our forum, we have what to discuss. I control support team everyday.
7. Many thanks for our hoster, you'll have super-fast and reliable connection with our 
server. 
and the last, but not the least reason:
8. 100 % confidentiality of your personal data. All transactions are 100% safe & 
secure.
 
http://210.101.95.254/drunk-young
  
Click here to Join

zone.hoha.ru/unsubscribe
  
Click here to unsubscribe


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Notice for you

[Support]

..::: Drunk Young :::... 

http://210.101.95.254/drunk-young
  
Click here to Join

Drunk Young will take you to the new level of excitement. 
It is a guarantee of Your pleasure, because we choose models very 
seriously & carefully, depending on you offers and suggestions. 
'Drunk Young' is regularly updates to bring you more and more sweet 
nymphets 100% satisfaction guarantee, with unique content of shiny 
floral girls. That's why we have very high percentage of monthly rebills. 
Every day we take new pictures and videos at our own studio. 
At summer we often making photo sessions in country side, villages and also in 
another countys. Every week we update site content with fresh faces never been 
seen before. 

We offer you. 

1. Exclusive content, just from our studio, with young pretty (some of them drunk :) 
girls: at least more than 66 boys and girls models.
2. Thousands of original pictures are the crystal clear quality and hi-resolution 1024 
X 768 or more. All videos are in DivX format(DVD quality). 
3. We choose models depending on you offers and suggestions. 
4. EVERY 3-5 DAYS we add new content with new girls and boys! 
5. All video in the members area can be saved directly to your hard-drive.
6. 24*7 responsive support: you can ask questions and express your wishes any time at 
our forum, we have what to discuss. I control support team everyday.
7. Many thanks for our hoster, you'll have super-fast and reliable connection with our 
server. 
and the last, but not the least reason:
8. 100 % confidentiality of your personal data. All transactions are 100% safe & 
secure.
 
http://210.101.95.254/drunk-young
  
Click here to Join

zone.hoha.ru/unsubscribe
  
Click here to unsubscribe


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Advice needed for Samba 3 setup for multiple Linux boxes in established Win2k AD domain...

[VR-Bug Support]

Thanks John,

It was my understanding that Samba would not synchronize with Unix accounts, and as 
such presumed that winbind was the way to go, but on setting up a server using Samba 
3.0.0-2 from either source or RPM I found that, whilst I could successfully add the 
server to the AD and groupmap an AD group to a local UNIX group, when I accessed the 
share from a win2k client logged in as a user within the mapped AD group I did not 
have access rights to the share.

I have probably missed something in your HOW-TO which would enable me to access the 
share, any pointers would be helpful.

Regards,

Luke.

-Original Message-
From: John H Terpstra [mailto:[EMAIL PROTECTED]
Sent: 24 October 2003 15:55
To: VR-Bug Support
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Advice needed for Samba 3 setup for multiple Linux
boxes in established Win2k AD domain...


On Fri, 24 Oct 2003, VR-Bug Support wrote:

>
> Hi all,
>
> I have the lucky task of being able to set-up a DEV environment for our
> developers. We plan on using redhat 9 with Samba 3 and making each
> server an AD domain member of an established Win2K domain.
>
> The advice I would like is the best way to implement this, I'd like to
> hopefully leave the Win2K domain admins power to create users on the
> Win2K domain, and automatically add users to the Linux Samba servers, if
> it's possible.

Samba does not do account synchronisation with UNIX. That would be a bad
solution from an administrative perspective.

Samba allows you to use NT4 domain, or Active Directory, accounts without
requiring local /etc/passwd entries. Winbind is the tool that handles
that.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]

_
This e-mail and all attachments have been scanned by the HighSpeed Office virus 
scanning service powered by MessageLabs and no known viruses were detected.

__
Any views or opinions expressed in this e-mail are solely those of the author and do 
not necessarily represent those of ENDEMOL UK plc unless specifically stated.
This email and the information it contains are confidential and intended solely for 
the use of the individual or entity to which it is addressed. If you have received 
this email in error please notify us immediately and delete the copy you have received 
from your system.
You should not copy it for any purpose, re-transmit it, use it or disclose its 
contents to any other person. If you suspect the message may have been intercepted or 
amended please call the sender.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Advice needed for Samba 3 setup for multiple Linux boxes in established Win2k AD domain...

[VR-Bug Support]

Hi all,

I have the lucky task of being able to set-up a DEV environment for our developers. We 
plan on using redhat 9 with Samba 3 and making each server an AD domain member of an 
established Win2K domain.

The advice I would like is the best way to implement this, I'd like to hopefully leave 
the Win2K domain admins power to create users on the Win2K domain, and automatically 
add users to the Linux Samba servers, if it's possible.

All thoughts appreciated.

Regards,

Luke.

__
Any views or opinions expressed in this e-mail are solely those of the author and do 
not necessarily represent those of ENDEMOL UK plc unless specifically stated.
This email and the information it contains are confidential and intended solely for 
the use of the individual or entity to which it is addressed. If you have received 
this email in error please notify us immediately and delete the copy you have received 
from your system.
You should not copy it for any purpose, re-transmit it, use it or disclose its 
contents to any other person. If you suspect the message may have been intercepted or 
amended please call the sender.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Why does fstab fail when command line mount works?

[VR-Bug Support]

I suspect this is something to do with the kernel not being aware of smbfs as a kernel 
FS (check /proc/filesystems) , you could try putting your mount string in rc.local 
instead perhaps...

Regards,

Luke.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: 21 October 2003 14:58
To: [EMAIL PROTECTED]
Subject: [Samba] Why does fstab fail when command line mount works?


Okay; I'm stumped.  My old boss just asked me a question, and I thought I had
an easy answer, but no.  I also apologize if this has been hashed
out, but I'm unable to find the answers after several pages of Google hits. 
Anyway, if I try to do this:

mount -t smbfs -o username=kend,password=blah,workgroup=xanoptix
//freedom/kend /mnt/smb/

from the command line, it works fine.  [Sorry for the wrappage.]  However, if
I plug what appears to be the complementary info into fstab, thusly:

//freedom/kend  /mnt/smb smbfs   user=kend,password=blah,domain=xanoptix 0 0

it dies horribly with the following:

# mount -a
16731: session setup failed: ERRSRV - ERRbadpw (Bad password - name/password
pair in a Tree Connect or Session Setup are invalid.)
SMB connection failed

Am I missing something really obvious, here?

Thanks,

Ken D'Ambrosio
Sr. SysAdmin,
Xanoptix, Inc.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

_
This e-mail and all attachments have been scanned by the HighSpeed Office virus 
scanning service powered by MessageLabs and no known viruses were detected.

__
Any views or opinions expressed in this e-mail are solely those of the author and do 
not necessarily represent those of ENDEMOL UK plc unless specifically stated.
This email and the information it contains are confidential and intended solely for 
the use of the individual or entity to which it is addressed. If you have received 
this email in error please notify us immediately and delete the copy you have received 
from your system.
You should not copy it for any purpose, re-transmit it, use it or disclose its 
contents to any other person. If you suspect the message may have been intercepted or 
amended please call the sender.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

FW: [Samba] Re: domain groups accessing samba share

[VR-Bug Support]

-Original Message-
From: VR-Bug Support 
Sent: 15 October 2003 13:42
To: 'Gavin Davenport'
Subject: RE: [Samba] Re: domain groups accessing samba share


Hi Gavin,

This is what I have for my /etc/pam.d/login

#%PAM-1.0
auth   required pam_securetty.so
auth   sufficient   /lib/security/pam_winbind.so
auth   sufficient   /lib/security/pam_unix.so nodelay use_first_pass
auth   sufficient   /lib/security/pam_krb5.so
auth   required pam_stack.so service=system-auth
auth   required pam_nologin.so
accountsufficient   /lib/security/pam_winbind.so
accountsufficient   /lib/security/pam_krb5.so
accountrequired pam_stack.so service=system-auth
password   required pam_stack.so service=system-auth
sessionrequired pam_stack.so service=system-auth
sessionoptional pam_console.so

And when I issue getent group or getent passwd it lists both local and ADS users.

Regards,

Luke


-Original Message-
From: Gavin Davenport [mailto:[EMAIL PROTECTED]
Sent: 15 October 2003 09:05
To: [EMAIL PROTECTED]
Cc: Tim Jordan, Network Services
Subject: RE: [Samba] Re: domain groups accessing samba share


Hiya Tim, Thanks for helping.


Can you post your
smb.conf 
/etc/pam.d/login
wbinfo -g
wbinfo -u
getent passwd
getent group

Here we go:
# Global parameters
[global]
workgroup = MYDOMAIN
realm = MYNETWORK.ISP.CO.UK
server string = Linux Samba Server
security = ADS
password server = bashful
log level = 3
log file = /var/log/samba/log.%m
max log size = 100
smb ports = 445
announce as = NT Workstation
name resolve order = host bcast
wins server = 10.0.0.104
client signing = Yes
server signing = Yes
client use spnego = Yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
load printers = No
os level = 10
preferred master = No
local master = No
domain master = No
dns proxy = No
idmap uid = 1-2
idmap gid = 1-2
template shell = /bin/bash
#   winbind separator = +
winbind cache time = 2
#   winbind use default domain = Yes
comment = Redhat 7.1 Samba
hosts allow = 127., 10.0.0.

[homes]
comment = Home Directories
read only = No
browseable = No

[Software]
comment = Software Library
path = /mnt/largeprimary/software
#   valid users = @MYNETWORK.ISP.CO.UK\"Domain Users"
#   Admin users = @MYNETWORK.ISP.CO.UK\gavdav

[EMAIL PROTECTED] /root]# more /etc/pam.d/login
#%PAM-1.0
auth   required /lib/security/pam_securetty.so
auth   required /lib/security/pam_stack.so service=system-auth
auth   required /lib/security/pam_nologin.so
accountrequired /lib/security/pam_stack.so service=system-auth
password   required /lib/security/pam_stack.so service=system-auth
sessionrequired /lib/security/pam_stack.so service=system-auth
sessionoptional /lib/security/pam_console.so

wbinfo -u
[EMAIL PROTECTED] /root]# wbinfo -u
MYDOMAIN\gavdav
MYDOMAIN\Guest
MYDOMAIN\Administrator
MYDOMAIN\krbtgt
MYDOMAIN\SUPPORT_388945a0
MYDOMAIN\fbloggs


wbinfo -g
[EMAIL PROTECTED] /root]# wbinfo -g
MYDOMAIN\Domain Computers
MYDOMAIN\Cert Publishers
MYDOMAIN\Domain Users
MYDOMAIN\Domain Guests
MYDOMAIN\RAS and IAS Servers
MYDOMAIN\Group Policy Creator Owners
MYDOMAIN\Schema Admins
MYDOMAIN\Enterprise Admins
MYDOMAIN\Domain Admins
MYDOMAIN\Domain Controllers


[EMAIL PROTECTED] /root]# getent passwd
root:x:0:0:root:/root:/bin/bash

xfs:x:43:43:X Font Server:/etc/X11/fs:/bin/false
gdm:x:42:42::/home/gdm:/bin/bash
gavdav:x:500:500:Gavin Davenport:/home/gavdav:/bin/bash
named:x:200:200:Nameserver:/var/named:/bin/false
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin

[EMAIL PROTECTED] /root]# getent group
root:x:0:root

nobody:x:99:
users:x:100:gavdav

xfs:x:43:
gdm:x:42:
gavdav:x:500:
vcsa:x:69:

getent and setent are listing local users and groups.

What do I need to change in /etc/pam.d/login to fix it ?
Where should I be looking for help ?

Thanks very much

Gavin Davenport
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

_
This e-mail and all attachments have been scanned by the HighSpeed Office virus 
scanning service powered by MessageLabs and no known viruses were detected.

__
Any views or opinions expressed in this e-mail are solely those of the author and do 
not necessarily represent those of ENDEMOL UK plc unless specifically stated.
This email and the information it contains are confidential and intended solely for 
the use of the individual or entity to which it is addressed. If you have 

[Samba] 3.0.0-2 on RH9 as domain member of win2k domain - not able to write to shares...

[VR-Bug Support]

Hi,

I'm unable to write to shares on the RH9 box from win2k clients.

Have successfully joined domain with 'net join ads'
getent passwd lists local unix users and win2k domain users successfully
I've mapped a DOMAIN+user_group to unix user_group, which 'net groupmap list' shows 
successfully
I have tried various ways to give DOMAIN+user.name access to the share, by changing 
the 'valid users =' line to inlcude: DOMAIN+user_group, user_group, DOMAIN+user.name
Can browse successfully to share, but not able to write to share unless I give write 
permissions to other/world
Logs show user from win2k client connecting to service as DOMAIN+user.name
win2k client recieves error: access denied.

[global]
   realm = DOMAIN.COM
   workgroup = DOMAIN
   server string = Samba Server
   hosts allow = 192.168. 127.
   printcap name = /etc/printcap
   load printers = yes
   log file = /var/log/samba/log.%m
   max log size = 50
   security = ads
   password server = DC1 DC2 DC3
# Password Level allows matching of _n_ characters of the password for
# all combinations of upper and lower case.
;  password level = 8
;  username level = 8
  encrypt passwords = yes
  smb passwd file = /etc/samba/smbpasswd
  unix password sync = yes
  passwd program = /usr/bin/passwd %u
;  passwd debug = yes
  passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n 
*passwd:*all*authentication*tokens*updated*successfully*
;  username map = /etc/samba/smbusers
;   include = /etc/samba/smb.conf.%m
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   local master = no
   domain master = no 
   preferred master = no
   name resolve order = host wins lmhosts bcast
   dns proxy = yes 
# separate domain and username with '+', like DOMAIN+username
 winbind separator = +
 # use uids from 1 to 2 for domain users
 winbind uid = 1-2
 # use gids from 1 to 2 for domain groups
 winbind gid = 1-2
 # allow enumeration of winbind users and groups
 winbind enum users = yes
 winbind enum groups = yes

 [share]
   comment = Test Dir
   path = /home/share
   guest ok = no
   browseable = yes
   writable = yes
   share modes = yes
   valid users = DOMAIN+user_group
   hide dot files = yes

What I'd like to be able to do is control access to shares using DOMAIN+user_group to 
unix user_group mappings - do I need to map DOMAIN+user.name to a unix user.name as 
well, for every user within the group?

Hope you can help.

Luke.

__
Any views or opinions expressed in this e-mail are solely those of the author and do 
not necessarily represent those of ENDEMOL UK plc unless specifically stated.
This email and the information it contains are confidential and intended solely for 
the use of the individual or entity to which it is addressed. If you have received 
this email in error please notify us immediately and delete the copy you have received 
from your system.
You should not copy it for any purpose, re-transmit it, use it or disclose its 
contents to any other person. If you suspect the message may have been intercepted or 
amended please call the sender.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Thank you!

[support]

See the attached file for details-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Please provide a valid license key [T2003090204CB]

[support-l1]

Dear Customer,

We received your e-mail requesting support for our BlackIce  Defender product, however 
we did not receive your license key which we will need to provide Technical Support. 
To obtain your License key please do the following:

Version 2.9 and later:

-Click on the BlackICE icon in the task tray to bring up the BlackICE screen.
-Go to "Help" and then "About BlackICE".
-This will tell you your license key number and which version of BlackICE  you are 
running.

Version 1.9.25 and earlier:

-Click on the BlackIce tray icon to bring up the BlackICE screen
-In the very top left corner of the BlackICE screen you will see another BlackICE icon
-Click on this to pull down a small menu.
-Go to 'Help', then go to 'About BlackICE'
-This will give you both, your license key and the version number of BlackICE.

You may also want to check http://www.networkice.com/support/defender_support.html for 
further support information.

If BlackICE is not yet installed you can get the license key from your receipt page 
that you received at the end of your purchase transaction.  If you have lost your 
license key or didn't receive this page, please contact the e-commerce provider that 
you purchased BlackICE from.  Digital River can be contacted at  (800)  656-5426 or 
(612)  252-8400 or E-Mail them at [EMAIL PROTECTED]  They handle all issues related to 
purchasing and downloading.
If you have haven't yet purchased BlackICE and have questions regarding this product 
please include the word "QUESTION" in the subject line of a new E-Mail message and a 
Technical Support Agent will respond to your questions.

Thank you
Technical Support
NetworkICE Corp.
[EMAIL PROTECTED]-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Your details

[Support address]

Hi,

Thanks for your question or comment.  We normally respond within 48hours.  If 
you don't hear anything after this time then there has been a problem with Internet 
mail, and please re-send the e-mail.
 
 If you need an extension to the RunCoach trial period then send a message to [EMAIL 
PROTECTED]
 
 If you need training or program advice then please check the discussion database or 
the training tips as they may help immediately.
 
 http://www.sportscoach.com.au/runcoachdiscus
 
 http://www.sportscoach.com.au/contents.html

Regards

Paul
   
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] smbmount krb option?

[support]

Hi how does this option work should I just type:
./smbmount //mypath/to/share '/my/mountpoint/' krb ?
or is that not the way
I can see the share when I do:
 
./smbclient -L \\mypath\   -k
 
so that means I have a ticket but the mount commando doesn't work even
after checking the rights on it.
 
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Zgloszenie na support@gts.pl przyjete/inquiry sent tosupport@gts.pl delivered

[Internet Partners Support]

English version below

[[ Ta informacja zostala przeslana automatycznie . Prosimy nie wysylac
odpowiedzi na ten list ]]

Szanowni Panstwo,

Dziekujemy za przeslanie zgloszenia na adres [EMAIL PROTECTED] 
Prosimy o kazdorazowe podawanie kodu klienta w temacie wiadomosci 
e-mail. 8-cyfrowy kod klienta dostepny jest na kazdej fakturze w jej 
lewym gornym rogu. Ten wymog wynika z koniecznosci ochrony Panstwa 
danych oraz umozliwia usprawnienie obslugi.

Dolozymy wszelkich staran, aby termin uzyskania odpowiedzi nie 
przekraczal jednego dnia roboczego w przypadku podania prawidlowego 
numeru klienta w temacie listu.

Zapraszamy tez na strone WWW pomocy technicznej 
http://www.pomoc.gts.pl, na ktorej znajduje sie szereg pomocnych 
informacji technicznych.

Dziekujemy za korzystanie z uslug Internet Partners,
Dzial Technicznej Obslugi Klienta



---



[[ This is an automatically generated response. Please do not reply to this
e-mail]]


Dear Customer,

Thank you for sending your inquire to [EMAIL PROTECTED] We kindly 
ask for entering your customer code in the subject of every e-mail 
message. Your 8-digit customer code can be found in the upper left 
corner of every invoice. This requirement is caused by the necesity to
protect your personal data and it helps to process your inquiries more 
efficient.

We do our best to ensure that the timely response to this e-mail is
given within one working day in case of providing us with proper 
account number.

In the meantime please visit our tech support web page 
http://www.support.gts.pl for additional information.


Thank you for using Internet Partners,
Technical Customer Care
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Wicked screensaver

[support]

Dear Verotel Customer,

Thank you for your email. We appreciate your business
and would like to point the following out:

1. Cancellation of your subscription

If you would like to cancel your membership or
subscription you previously purchased with
Verza or Verotel and you wish not to be billed 
again, please login to

http://cancel.verotel.com


2. If your codes or username/password do not work
-
If you are provided a 'usercode' and a 'passcode'
then enter these codes as 'username' and 'password'
when the pop-up box appears.

If the codes still don't work then please send us 
a detailed email to [EMAIL PROTECTED]
and include in this email:
* your usercode or username
* your email address
* the website where you purchased the codes

Please mention that your codes or your username/password
are not working and we will correct them as soon as possible!


3. You are not happy with your subscription
---
If you are not happy with your purchase, please let us 
know. Please send a detailed email to [EMAIL PROTECTED]
and include in this email:
* your usercode or username
* your email address
* the website where you purchased the codes
* your complaint


4. My transaction is DECLINED 
-
If you are a new Verotel customer and you receive 'Your
credit card is DECLINED' when you want to sign up for
the website of your choice, then please check the following:

a. did you fill out all the fields in the order form?
b. did you enter the correct expiration date?
c. did you leave any spaces or dashes in your credit
card number or phone number?
d. did you use your home phone number as the phone number entered?
e. did you enter your complete email address?
f. did you fill out the correct address and cardholder information?
g. are you currently in the country where your credit card 
was issued?
h. do you have sufficient funds in your credit card account?

If all your answers are YES on above questions, please
visit our live chat support. We can help you out instantly
and solve the problem online in a one-to-one chat session.

http://chat.verotel.com/helpdesk01.html

Due to security reasons you are only able to do a transaction once
per 10 minutes. So please wait at least 10 minutes before 
submitting your information again.


5. All other questions
--
Please send us a detailed message by email to [EMAIL PROTECTED]

Thank you for your co-operation.

With kind regards,


Verotel Support.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Online Support Form Pilot Project

[IT . Support . Centre]

We are piloting a new support request process.  To ensure your issue is
queued and responded to as quickly as possible, this service has been
replaced with a new and improved way of submitting support requests
directly to the IT Support Centre.  All support requests must now be
entered directly by clicking on the link below:

http://www.its.queensu.ca/itsc/helpform.html

After submitting your request, you will receive a confirmation email
containing an issue number, which should be used for all further contact
regarding this issue.

Thank you for participating in this pilot project.  Please send any 
comments to [EMAIL PROTECTED]

IT Support Centre
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] SurfControl Technical Support Auto Response

[Tech Support (CO)]

Thank you for emailing SurfControl Technical Support.  Your call has been
has assigned to an engineer who will respond to your request within 1-2
business days. If you have an urgent problem, please contact us by phone on
+44 (0)1260 296 259.

In the meantime, please visit our new Knowledge Base at
http://kb.surfcontrol.com which should find an answer to many common
questions.

If your technical question is in regard to CyberPatrol then please refer to
http://www.cyberpatrol.com/support/contact_support.aspx.

For information regarding pricing or licensing information you will need to
contact your local account manager. SurfControl sales can be contacted by
phone on +44 (0)1260 296 150 or by email at [EMAIL PROTECTED]


Thank you for your interest in SurfControl.


The Technical Support Staff

* * * * * * * * * *

 
SurfControl Technical Support Email: [EMAIL PROTECTED]
  Tel:   +44 (0)1260 296 259
WWW: http://www.surfcontrol.com   Fax:   +44 (0)1260 296 201
 
SurfControl - the World's #1 Web & Email Filtering Company 
 

Get the latest news on SurfControl and our products,
subscribe to our monthly e-newsletter, SurfAdvisory at:
http://surfcontrol.us-hosts.com/sc/subscribe

*
The information in this email is confidential and may be legally
privileged. It is intended solely for the addressee. Access to this
email by anyone else is unauthorized. If you are not the intended
recipient, any disclosure, copying, distribution or any action taken
or omitted to  be taken in reliance on it, is prohibited and may be
unlawful. If you believe that you have received this email in error,
please contact the sender.
*

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] mcafee antivirus ?

[Nathaniel N. Petersen (CNS Student Support)]

Well, I hate to admit it, but I use Norton AntiVirus.  I have played
long and hard at getting the corporate edition running on a Samba
domain.  Unfortunately, no amounts of tweaking with Wine was able to get
it to work properly.  I've had to run a vmware session with the Norton
AV installed on a w2k vm.  As for day-to-day linux virus protection, I
use host.all ;).

On Wed, Jun 04, 2003 at 10:00:49PM +1000, ipguy wrote:
> nobody is using mcafee for antivirus ?
> what do you guys use ?
> 
> 
> 
> 
> > hi all...
> > anyone using mcafee antivirus with there samba server ?
> > just wanted your comments, suggestions
> > how did you intergrate it into samba ?
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Nathaniel N. Petersen
CNS Computing 
University of Northern Iowa
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Users/Machines Unable to Logon to Samba PDC

[Support]

I have Samba 2.2.7 running on RedHat Linux 7.3 (kernel 2.4.18)...  the system has been 
running just fine since the initial install four plus months ago.  All of a sudden, 
starting this mid-morning, users are unable to logon to their Windows 2000 machines.  
They receive the following message:

"The system cannot log you on to this domain because the system's computer account in 
its primary domain is missing or the password on that account is incorrect."

These same users were able to logon just fine yesterday...  and some were able to 
logon just fine this morning...  but now nobody can logon.

Thinking that the computer account had gone bad for some reason, I changed the 
workstation from being a member of a domain to a member of a workgroup, then I deleted 
the account from Samba (using "smbpasswd -x computer$"), then from Linux (using 
"userdel computer$").  I then had the computer join the domain, and was welcomed to 
the domain.  After reboot, the same error message.

If I logon locally to the computer, I am able to map drives (using "net use x: 
\\server\share /user:username password).  I am also able to perform a "net use" on the 
server.

What can I do and/or test to further determine what the problem is?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Beginner problems

[CNS Student Support]

"secrets.tdb" does not exist yet because you have not created the
smbpasswd file yet.  In other words, you have not added user names and
passwords for those that are allowed to access the samba system.  There
are a few ways to fix this.  The first is to create the smbpasswd file
from the existing users on your system.  To do this, you must have the
file "mksmbpasswd.sh" script (usually found in the source/script
directory).  To use this file (and this may be different with Caldera
Open Unix - I'm not sure) type (as root)

$ cat /etc/passwd | bin/sh ./source/script/mksmbpasswd.sh > 
/usr/local/samba/private/smbpasswd

Note that these paths may be different on your system.  What is
important is the location of the unix passwd, the location of the
mksmbpasswd.sh script, and the destination of the finished smbpasswd.

After you have created the new smbpasswd, you may need to set the passwords
for the users (I can't remember if the script passes the passwords in
addition to the users or not - sorry).  Once this is done, it should
create a secrets.tdb, getting rid of the error 43.

Error 163 may be related to this as well.  IF you are creating a PDC,
there need to be machine accounts added to the smpasswd (they also have
to exist in the systems password database).  You can differentiate a
machine account from a user account by the $ symbol.  The $ symbol will
appear after system accounts.  To add a machine account to the smbpasswd
database, type:
$ smbpasswd -a -m machine_name

I am uncertain what is causing the error 793.  This may simply be
related to the two above errors, or it may be the configuration of the
samba system.  To answer this, I would need more informaion on what you
are trying to accomplish with the samba system (is it a server, a PDC, a
BDC, etc.)

On Tue, Jun 18, 2002 at 10:41:02AM +0100, Nash Computer Technology wrote:
> Hi
> 
> I hope I've posted this to the correct place.  I've installed Samba 2.2.4 on a 
>Caldera 
> Open Unix 8 server, and created a basic smbd.conf file.  When I launch smbd as a 
> daemon, I'm getting the following in the log file:
> 
> passdb/secrets.c: (43)
> failed to open /usr/lib/samba/private/secrets.tdb
> passdb/machine_sid.c: (163)
> pdb_generate_sam_sid: Failed to store generated machine SID
> smbd/server.c: (793)
> ERROR: Samba cannot create a SAM SID
> 
> Is it something to do with a password file???  I'd appreciate some help with this.  
>I'm 
> new to Unix and Samba.
> 
> David Nash
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Win2k-Pro and MacOS X

[CNS Student Support]

Do not use plain text passwords.  This is a security issue.  If it is
set to plain text, any individual with a packet sniffer can get this
password (pretty easy stuff).

No, this sounds like an smbpasswd issue.  Make sure that the user you
use to log on is in the smbpasswd database.  You can check this
(assuming default directories) by typing:

$vim /usr/local/samba/private/smbpasswd

You are looking for a line that begins with the user name you plan to
use and a collection of undistinguished jibberish.  For example, for the
user "bobo":

bobo:0:2D5545077D7B7D2AAAD3B435B51404EE:7C53CFA5EA7D0F9B3B968AA0FB51A3F5:[UX
]:LCT-3D07A39F:

This indicates that the user is within the password database and that a
password has been set.  If you do not find the user you plan on using,
or if the area where there should be jibberish say [NO PASSWORDX...] (or 
so such), then use the smbpasswd command to remedy the situation:

If no user in database, type:   $smbpasswd -a username password
If no password for user, type:  $smbpasswd username (then follow the
prompts)

Remeber, the user also has to exist on the linux box.  In other words,
the user has to be in passwd, as well as smbpasswd (although the
passwords do not have to be the same).  If the user is not in the linux
box, he will have to be added here first.  Use "adduser" for this.

On Mon, Jun 17, 2002 at 05:05:42PM -0500, Jim W. wrote:
> I have a MacOS X server and I am trying to get it to connect to the Samba
> Services that is now bundled in X server. I can see the machine in My
> Network Places but I can not get a user to log in. Guest works but nothing
> else. Keeps stating user/pass incorrect. I don't know if there are any Users
> out there can point me in the correct place or not. One suggestion I was
> given was to change the win boxes to plain text password. This had no
> effect. 
> 
> Any suggestions?
> 
> Thanks again
> 
> -J
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] can't access samba shares

[CNS Student Support]

Leave the encypt-password = yes in your smb.conf.  What I would double
check is the smbpasswd file.  Make sure that you have a working user
account added and that there is a password for that account.  You may
want to go so far as to change the password for the account you plan to
use, just to be ceratin that it has a passowrd and that you know that
password.

If you are doing this on a domain (ie - the Samba system is the PDC),
make sure that you have a machine account for the NT server.  Otherwise,
even with a valid user account, you won't be able to log into the
domain.  (However, you should be able to get into a public share.)

On Fri, Jun 14, 2002 at 09:29:12AM -0500, Raymond Norton wrote:
> The firewall problem seems to be fine now.
> Second question, I am on a NT server trying to access samba shares. If I
> add encrypt-passwords = yes to smb.conf I get a login box for username and
> password. It starts by telling me the username or password is wrong. I can
> enter any username, but the box keeps coming back. If I remove encrypt-
> passwords I get "The account is not authorized to login from this station"
> 
> 
> -- 
> Raymond Norton
> Little Crow Telemedia Network
> 320-234-0270
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] locking files...

[CNS Student Support]

Does Samba have the ability to lock a specific file after a given number
of users has accessed that file?

For example: You have 5 liscenses for a given program that is run from a
Samba share.  After 5 people have accessed the file, the file is locked
so that no more individuals have access to the file.

-Nathaniel N. Petersen
CNS Computing
University of Northern Iowa

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] RE: NORESIZE

[AVG Technical support]

Dear AVG user,

This is an automatic response service. We have received your e-mail
message and will reply to your query as soon as possible.

Note: For the Free edition users there is NO guarantee that their
e-mail will be answered, as the AVG Free edition does NOT include
technical support, as stated in the Free Edition license agreement.
Paid commercial customers have priority for technical support.

You can also go to our Frequently Asked Questions (FAQ) at our web
site http://www.grisoft.com/html/us_faq.php and find your
information there.

In  case  of  any  problems  (you are a paid AVG-commercial user and have
not
received the answer)  please  re-send your request and type your serial
number in the subject line of the message the following way:
 Example: [SerNo: 60-1-234567-ABC]

For more information on how to place technical support request or
where to find a correct Serial Number please go here:
http://www.grisoft.com/html/sup_contact.htm

Thank you for using AVG.

Grisoft Technical Support Team
[EMAIL PROTECTED]


-Original Message-
From: [EMAIL PROTECTED]
Sent: 12.6.2002 12:31:19
To: [EMAIL PROTECTED]
Subject: NORESIZE








--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Appology

[CNS Student Support]

After talking this over with a friend, I realize that I have made a
mistake.  I should never have responded in the manner that I did.  I
was the one who asked for help.  You don't know the situation, and you
are correct in that most people who do have problems either didn't read
the existing information, or didn't understand what they read.

I should not have taken the standard responses so personally.  I'm
sorry.

I inicially wrote in because I thought the errors I was receiving were
rather unique.  My past problems with Samba were never this bad.  They
WERE solved most times by just doing a quite search on google or reading
other individual's posts.

But this time, with authentication working fine, I was perplexed.  Why
the corrupt write from the W2K client?  Why did the NT machine write a
profile but not use it?  Or more precisely, why did it use it but say it
didn't?

Again, my frustration exists more from my lack of progress than from the
comments I received.  I humbly submit my whole-hearted appologies to
those I may have angered and/or offended.

-Nathaniel N. Petersen

PS - I will look into the 'Z' drive issue as well as the location of the
profile.  Thank you for giving me some direction to research.

On Fri, May 31, 2002 at 04:02:35PM +0200, Simo Sorce wrote:
> On Fri, 2002-05-31 at 15:15, Nathaniel N.Petersen wrote:
> > Note that from the client's point of view security = domain is the same
> > as security = user . It only affects how the server deals with the
> > authentication, it does not in any way affect what the client sees.
> > 
> > Since the systems are able to authenticate, this is not an issue.
> 
> 
> I have yet not understood if your server is a PDC or not.
> If it is, these 4 parameters MUST be set this way:
> 
> domain logons = yes
> domain master = yes
> security = user
> encrypt password = yes
> 
> 
> > > try a path with no leading '.'
> > > logon path = \\student\homes\%u\ntprofile
> > 
> > Even if you were correct, it worked before (and still is working
> > elsewhere), it should work now.
> 
> I think this is not a problem.
> 
> > I thought about dealing with this diplomaticly - but enough is enough.
> > There is nothing wrong with using the homes directories like I do.  The
> > lines refered to in the man pages simply don't recommend it.  Well, if
> > you have ever worked for a University, you would understand the amount
> > of overhead involved.  Creating essentially two account locations for
> > evey user is ridiculous.
> 
> I have an my setup involved a simple [profile] share with 1777
> permissions on it, and that's not a lot of work to do (I had more than
> 1000 users).
> Recommendations exist for a purpose ... it's up to you to decide if they
> match your case.
> 
> thinking a bit more in this case I think you may have 2 combined
> problems:
> 1. the use of the home directory to store profiles
> 2. the use of letter Z to map the home directory
> 
> unfortunately I do not have handing any url, but I remember clearly that
> with later clients (w2k, XP) there are problems with the Z drive.
> In fact it is not available to be mapped until the user logged in and at
> that point the profile thing is yet over!
> It is not a samba problem, Microsoft changed it this way (can't remember
> why).
> 
> So I would advice you do 2 things:
> change the home drive letter or setup a profile share and change the
> logon path directive.
> 
> > Furthermore, this PDC is set to "local master = no" for a reason.
> > Election.  I have 14 other colleges at this university that are NOT
> > running Linux (yes, there are still people out there that use Windows).
> > Windows PDC's have fits when this is set to yes.  They lose out on
> > elections.  If set to false then nmbd will not attempt to become a
> > local master browser on a subnet and will also lose in all browsing
> > elections.  With a class B subnet, this is a GOOD THING.
> 
> a class B NOT subnetted to C classes? That's should be a broadcast
> nightmare ... 
> 
> (if your server is not a PDc you should NOT made it be a domain master!,
> local master should be ok, and would be better to use a wins server)
> 
> > And finally, as far as that whole '.a = patch' thing goes - NO SH!T.
> > REALLY?  Well, I'll be... I thought only M$ released patches.
> > Seriously,  I was trying (appearantly not hard enough) to make light of 
> > my supervisor's lack of knowledge about Samba (AND all the extra work 
> > it forced me to do). Lord knows I would much rather be seen 
> > a fool by the Samba community.  This should never have been 
> > an issue.
> ?? you are stressed, take a breath
> 
> > I want to appologize to those of you who work tirelessly on the Samba
> > project.  I also want to thank the attempts at trying to help me.  But,
> > they were of ZERO aid.  Nit-picking at these minor issues does not help
> > me with the big picture.  Just answer me this - If the windows systems
> > are able to verify the domain and authenticate, why does t

[Samba] Re: Profile creation

[CNS Student Support]

On Fri, May 31, 2002 at 12:09:25PM +0530, Navneet Karnani wrote:
> Should you be deleting the user profile completely from the server, including
> the user credentials. The problem you encounter, looks like, windows is not able
> to find the directory. So, if you want to simulate a new user, do it in style.
> Create a new user the right way and do it. I think it should work.
> 
> - Navneet
>

While you are correct on the point of creating a new user in style, it
is still important to find a solution to corrupted profile creation.
Consider:  User logs in using an NT system.  The *cough* idiot downloads
an infected email, or better yet, just found this nifty program called
regedit.  When the user logs off, this corrupted registry information is
saved to the PDC.  I get a complaint a few hours later that the user
can't log in again.  The obvious fix is to back up his/her profile info
and then delete it.  Next time the user logs on, the profile is
recreated (without reg errors).  Then all I have to do is copy over the
users favorites, My Documents, etc.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Profile creation - thanks for the (lack) of help

[CNS Student Support]

On Fri, May 31, 2002 at 10:07:37AM +0200, Stefan (metze) Metzmacher wrote:
> If you want to be a PDC set 'security = User' ,
> this means that samba uses it's own smbpasswd( or tdb or ldap...) as SAM 
> Database, read 'man smb.conf' !!!

http://us1.samba.org/samba/ftp/docs/htmldocs/smb.conf.5.html#SECURITYEQUALSUSER:

Note that from the client's point of view security = domain is the same
as security = user . It only affects how the server deals with the
authentication, it does not in any way affect what the client sees.

Since the systems are able to authenticate, this is not an issue.

> I don't now if this fix your problem!?

No, it didn't.

> try a path with no leading '.'
> logon path = \\student\homes\%u\ntprofile

Even if you were correct, it worked before (and still is working
elsewhere), it should work now.

> I'm not really sure,  but try it! I remember this solves my problems on 
> this.
> I seems that NT doesn't like this.

NT does like this.  I had over 500 computers (2500+ users) using this
process for the last three years.

> 
> And read Simo's comments on this parameter...

Oh, believe me, I have.  And while we are on that, let me say this...
If you found my comments to be abrasive, GOOD.  I can't believe how
insulting you people are.  I've spent the better part of three work
weeks researching this rebuild.  Don't you think the FIRST thing I did
was READ THE MAN PAGES!! >:(

I thought about dealing with this diplomaticly - but enough is enough.
There is nothing wrong with using the homes directories like I do.  The
lines refered to in the man pages simply don't recommend it.  Well, if
you have ever worked for a University, you would understand the amount
of overhead involved.  Creating essentially two account locations for
evey user is ridiculous.

Furthermore, this PDC is set to "local master = no" for a reason.
Election.  I have 14 other colleges at this university that are NOT
running Linux (yes, there are still people out there that use Windows).
Windows PDC's have fits when this is set to yes.  They lose out on
elections.  If set to false then nmbd will not attempt to become a
local master browser on a subnet and will also lose in all browsing
elections.  With a class B subnet, this is a GOOD THING.

And finally, as far as that whole '.a = patch' thing goes - NO SH!T.
REALLY?  Well, I'll be... I thought only M$ released patches.
Seriously,  I was trying (appearantly not hard enough) to make light of 
my supervisor's lack of knowledge about Samba (AND all the extra work 
it forced me to do). Lord knows I would much rather be seen 
a fool by the Samba community.  This should never have been 
an issue.

I want to appologize to those of you who work tirelessly on the Samba
project.  I also want to thank the attempts at trying to help me.  But,
they were of ZERO aid.  Nit-picking at these minor issues does not help
me with the big picture.  Just answer me this - If the windows systems
are able to verify the domain and authenticate, why does the w2k system
right corrupt profile data?  If the NT system is able to create a
profile, why can't it us it?  That's it.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Profile creation

[CNS Student Support]

SAMBA VERSION: 2.2.4
ERROR(S): Profile Creation

I have recently been assigned to create a Samba PDC.  Earlier in the 
week, I thought I was successful.  I was able to log in, load (or create) 
the test user's .ntprofile, etc.  Went home that night, happy as could be.
Came back the next day - and nothing was working correctly.  The systems 
could not find the domain.  The domain was not reporting any errors in the 
logs (including, and most importantly, log.nmbd and log.smbd).  

I reported this to my supervisor, and he asked what version of Samba I
was using.  I told him version 2.2.3a.  Well, he says that I shouldn't
use an "alpha" version of Samba.  So I nuke samba off the system (after
making backups of smb.conf and other vital files).  So I download and
compile from the source.  I included the needed "--with" options in
Configure.  Came back after a cup of coffee to test the install.

Here is were things get bad.  I set up my smb.conf file, recreate my
smbpasswd, etc.  I start to add computers using the "blind" method.  All
things seem good (was able to add all the computers I wanted).  I was
able to log on using my test account, and my profile was loaded properly
for WinNT4, Win2K, and WinXP.  (Note: this .ntprofile/ was saved back
when things worked fine.)

So as a final test, I back up my .ntprofile/ and then delete it to
simulate the creation for a new user.  I go to log on with the WinNT4
system, and get the error:

"A domain controller for your domain could not be contacted. You have
been logged on using cached account information.  Changes to your
profile since you last logged on may not be availible."

The funny thing is that it creates the profile and lets me use the
system as if it worked fine.  I verified the newly created .ntprofile/
and it is as it should be.  Then, after logging off, I tried logging in
again, and the same error is given.  So I rm -r .ntprofile/ and restore
from the backup.  Same error, but it loads the profile fine (there is a
visible difference between the two, so I can visually verify that the
.ntprofile/ is being loaded correctly.

So I move on the Win2K system.  This one is even worse.  Here is the
error that I receive when I try to log on:

"Your roaming profile is not available.  You are logged on with the locally 
stored profile. Changes to the profile will not be propagated to the server. 
Contact your network administrator.

DETAIL - The system cannot find the path specified."

I THINK it tries to create the profile, but instead I get a folder
called "?" (\242) or .  To make matters worse, it acts perfectly fine from 
the .ntprofile/ backup.  No error, nothing.  It simply can't make the profile.

I have not been able to test with XP (made the mistake of starting this
email from the only system that has XP loaded on it).  However, I am
confident that it will behave in the same manner as Win2K (...minus the
candy collored shell).

I have attached my smb.conf file.  I did not attach my logs because they
are at level 5 and are figgin' huge.  I will mail upon request.

Nathaniel N. Petersen
CNS Computing
University of Northern Iowa

--[smb.conf]--

[global]
workgroup = CNS_TESTING
netbios name = TEST_SMB_SERVER
client code page = 437
log level = 5
hosts allow = xxx.xxx.xxx

security = DOMAIN

os level = 64
preferred master = yes
domain master = yes
local master = no

encrypt passwords = yes
domain logons = yes

logon path = \\student\%u\.ntprofile
logon drive = Z:
logon home = \\student\%u

admin users = root cthulu
[netlogon]
path = /usr/local/samba/lib/netlogon
writeable = no
write list = ntadmin
[homes]
guest ok = no
writable = yes


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Microsystems

[support]

<>