Re: [Samba] Problem with Desktop
sato x schrieb: > I guess it means that your roaming profiles are not working. So each time > users logon to their workstation, windows makes a temporary profile, then > delete them when they log out. :) Same guess from me. Jason, you might start with looking at the contents of the user's profile folder. If it's empty after logout something prevents the storage. If you need further assistance, just send a mail. timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Dueling master browsers...
Eric Knudstrup schrieb: > Server NITIN at IP 192.168.1.126 is announcing itself as a local master > browser for workgroup DVC and we think we are master. Forcing election. > Mar 27 09:10:05 macallan nmbd[3481]: [2007/03/27 09:10:05, 0] > nmbd/nmbd_become_lmb.c:unbecome_local_master_success(149) > Mar 27 09:10:05 macallan nmbd[3481]: * > Mar 27 09:10:05 macallan nmbd[3481]: Mar 27 09:10:05 macallan > nmbd[3481]: Samba name server MACALLAN has stopped being a local > master browser for workgroup DVC on subnet 192.168.1.2 > os level = 255 Tell the dork with the XP machine to stop that. YOU are the network's master, aren't you? (Pity if not...) AFAIK he must have tweaked his registry for that, but i'm not completely sure. timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] libnss_winbind.so AIX 5.3
Hello Markus, Markus PASCHINGER schrieb: > When i look into the source/nsswitch directory after the make, i do not > have a libnss_winbind.so. > What am i doing wrong? Has anyone an idea how i could solve the problem? You installed strictly following the source documentation of the package? Are there any log files which were produced during compiling? timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba+LDAP wrong domain name
Luis Filipe Lobo schrieb: > [global] >workgroup = ALUNOS >server string = %h Did you test the behaviour with an unset "server string" option, i.e. commented out? Or with a netbios name = PUKEBOX timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Cannot Join Client to Domain
Jason Baker schrieb: > When I try to join a workstation to the > domain I get an error that tells me the "user name could not be found". What's the output of "net groupmap list" and "smbldap-usershow Manager" (resp. the user who tries to add the client)? > add user script = /etc/smbldap-tools/smbldap-useradd -m "%u" > #delete user script = /etc/smbldap-tools/smbldap-userdel "%u" > add machine script = /etc/smbldap-tools/smbldap-useradd -w "%u" > add group script = /etc/smbldap-tools/smbldap-groupadd -p "%g" > #delete group script = /etc/smbldap-tools/smbldap-groupdel "%g" > add user to group script = /etc/smbldap-tools/smbldap-groupmod -m > "%u" "%g" > delete user from group script = /etc/smbldap-tools/smbldap-groupmod > -x "%u" "%g" > set primary group script = /etc/smbldap-tools/smbldap-usermod -g > "%g" "%u" Try removing the "" signs around the variables and restart samba. Hth, timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba+ldap: Simu.- login of 2 different users => user rejected
>>> obey pam restrictions = yes >>> pam password change = yes I reconfigured the server at these points (and profile acls = yes). At least it improved the unaccessible profile: One of the 2 concurrent clients gets its profile instantly, the other one has a minute of waiting before getting its data. I'll still have to increase the log level. Didn't have time for much the past few days. Thanks again, timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba+ldap: Simu.- login of 2 different users => user rejected
Felipe Augusto van de Wiel schrieb: > PAM: UNKNOWN PAM ERROR is not something nice to see > on your longs. That's sad but true... > Did you already increase the log level of Samba? I'll check that tomorrow (hopefully). > Simultaneously should be interpreted "at the exactly > same time", or should be interpreted as "a user logs in the > morning and the same user logs in the afternoon". They hit the return key at the same second. Found it out when i did some performance tuning and testing (which showed that the SO_xBUF options indeed increased it. I'm at 8 MB/sec netto data rate on a 100Mbit net. Is that acceptable for you?) >> obey pam restrictions = yes >> pam password change = yes > > You are using PAM, so you really should check > there, it could be the problem. OK, I'll try it tomorrow. I'm not sure why these options are set, must have been me some months ago... darn amateurs... Many thanks for your hints, i'll let you know the effects! timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba+ldap: Simu.- login of 2 different users => user rejected
Has anybody had this problem before? If not, where should i start digging? I'm running Samba 3.0.24 on Debian stable with slapd-2.2.23 backend. smb.conf is attached below. When two different users log in at the same moment, the login process seems to freeze for a minute and the client (win2k) complains about missing profile or missing access to profile. A single user login works perfectly. The log.smbd contains this: krake smbd[28474]: [2007/03/05 15:06:09, 0] auth/pampass.c:smb_pam_account(573) krake smbd[28474]: smb_pam_account: PAM: UNKNOWN PAM ERROR (9) during Account Management for User: ws13 krake smbd[28474]: [2007/03/05 15:06:09, 0] auth/pampass.c:smb_pam_accountcheck(781) krake smbd[28474]: smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User ws13! Nothing interesting in auth.log and the same message in syslog (where slapd logs to). I don't know if this is a samba issue or ldap or network... Any suggestions are highly welcome. We've got 20+ clients and users typically log in simultaneously. timbo smb.conf: panic action = /usr/share/samba/panic-action %d dos charset = 850 unix charset = ISO-8859-15 display charset = ISO-8859-15 netbios name = KRAKE workgroup = GHSWA hosts allow = 192.168. inherit acls = yes update encrypted = yes obey pam restrictions = yes pam password change = yes socket options =IPTOS_LOWDELAY SO_SNDBUF=32768 SO_RCVBUF=32768 passdb backend =ldapsam:ldap://127.0.0.1 os level = 65 preferred master = yes domain master = yes local master = yes wins support = yes time server = yes security = user admin users = supervisor add user script = smbldap-useradd -m -a %u delete user script =smbldap-userdel %u add group script = smbldap-groupadd -p %g delete group script = smbldap-groupdel %g add user to group script = smbldap-groupmod -m %u %g delete user from group script = smbldap-groupmod -x %u %g set primary group script = smbldap-usermod -g %u %g add machine script = smbldap-useradd -w %u domain logons = yes logon path =\\KRAKE\%U\.winprofile logon home =\\%L\%U logon script = logon.bat preserve case = yes short preserve case = yes case sensitive =no guest ok = no printcap = cups ldap admin dn = cn=supervisor,dc=ghswa ldap delete dn =yes ldap user suffix = ou=Users ldap group suffix = ou=Groups ldap machine suffix = ou=Machines ldap passwd sync = yes ldap suffix = dc=ghswa ldap ssl = no host msdfs =yes [netlogon] path = /ghswa/home/netlogon write list = supervisor browseable = yes [profiles] path = /ghswa/home/%u writeable = yes write list = %u browseable = no [...other shares...] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] "gid of user xxx doesn't exist" error repeatedly posted to /var/messages
Fred Nuffer schrieb: > Feb 20 09:35:50 SUMSRVR smbd[27950]: get_alias_user_groups: gid of > user xxx doesn't exist. Check your /etc/passwd and /etc/group files Only to make sure i got it right: You create your users with their own group name, i.e. user fred is member of the group fred. This group name cannot be found by samba because samba only knows your domain groups. Is that right? If so, do you need these "private groups"? I create my users with primary group "users" which is hinted at by my "Domain Users" group. I see the downside of home directories being group accessible, but you can still do "chmod 700" on a home directory which lets in only the owner. Samba allows manifold policy settings, share specific or global. If you can't or won't put your users into a common group, i will try to find a different solution. Will be tricky - the thinking most of all ;-) timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Windows cannot add samba domain
newsgroup schrieb: > But when I try to add the domain to the > windows machine it fails and says "the specified domain either doesn't > exist or could not be contacted". I take it you add the computer to the domain, not vice versa. A [netlogon] share might help. If it still doesn't work, mail some output from the samba logs. Hth, timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Authentication incompatibility?
Jon Foster schrieb: > What would cause the password exchange to fail between two different > version of Samba? Its almost as if the encryption algorithm has changed. Does it work with the SuSE samba? If so, you might find the compilation options SuSE used to build samba (package docs). Maybe you were missing some encryption algorithm when compiling. timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.24 + OpenLDAP
[EMAIL PROTECTED] schrieb: > # Adding a User (doesn't work) > smbldap-useradd -a -s /bin/false -c'Test User' -A 1 -N'Test User' test_user I configured my domain by the howto on this website: www.samba-ldap.de Adding users works perfectly without creating a unix account beforehand. It's offline right now, so i can't check if there's an english version of it. Good luck! timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] MS Vista Home
Dennis McLeod schrieb: > My understaning is that only Vista Business, Vista Enterprise or Vista > Ultimate can join domains. That's right. Joining a domain is considered a professional feature, so you have to pay even more for this. Let's see when the limitations for the "lower" versions are broken - i'm just glad i don't run windows. timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Joining a SAMBA 4 TP4 Active Directory with WinXP
Mag. Leonhard Landrock schrieb: > *) smbclient //localhost/test -Uadministrator%k6exst Did this part succeed? I.e. did you get a prompt? > *) Start a virtual machine with WinXP SP2 and trying to join the domain > LEOSENDE.FUN. Might all this virtualisation be a bit too much? Maybe you can check with a real client. After all, i didn't run any VMs lately and don't know much about that. > NOTE: I have an german WinXP and I'am not sure what the right username for > joining the domain would be. I even tried "root" as usernam, but htat didn't > work either. To join with user "root", you have to set up the samba password for root (at least in samba < 4) > Is it possible to join the Domain "LEOSENDE.FUN"? Does the documentation of the package say anything about it? The STATUS and README file are mentioned on the samba website. timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] cygwin and linux permissions?
mikee schrieb: >> On linux if I 'chmod 0600 $file' and then 'ls -l $file' on windows the >> file permissions still show 0644. No change, like the file permissions ar >> cached somewhere. I had the very same problem during the last weeks. I kept trying and testing and in the end i finally had working ACLs (hooray!), but this didn't help. I created a file from Windows and set the permissions really restrictive (like "0600", no access to anyone but me). OpenSSH still complained. My "solution": Putty. Runs perfectly now. Make sure to download the puttygen packet if you want to use your existing ssh keys - the program converts them to .ppk keys used in putty. Couldn't find any downsides except for the key conversion. http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html timbo -- In the Top 40, half the songs are secret messages to the teen world to drop out, turn on, and groove with the chemicals and light shows at discotheques. -- Art Linkletter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Profile problems
Adam Tauno Williams schrieb: > Is the profile created on the client? Is there a Default User profile > on the client? Do you have any domain policies? Is there a start menu in the client's "c:\Documents and Settings\All Users\Start Menu" folder? (Whatever it is called, my folder names are german...) timbo -- In the Top 40, half the songs are secret messages to the teen world to drop out, turn on, and groove with the chemicals and light shows at discotheques. -- Art Linkletter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba v3.0.23a BROKE my network
Chris Hall schrieb: > ...but doesn't change my opinion that software should be written to > avoid obscure failure caused by obvious misconfiguration -- particularly > in the case of an upgrade which turns a previously working configuration > into a broken one ! I think you might tell this your package maintainer at [RedHat|Fedora|whoever released the package into distribution] > Sure. But I'm not trying to run a nuclear power station here. I'm afraid you'll have to expect these kinds of trouble, especially in a software which is constantly evolving (here and there still following M$ technology) Greetz, timbo -- In those days he was wiser than he is now -- he used to frequently take my advice. -- Winston Churchill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Monitor samba per user ?
Vladimir Strycek schrieb: > Hi all > > Is there a way to monitor samba per user ? Like what user > downloaded/uploaded and when ... You might try per-user logging. This implies monitoring log files, of course... [Global] log file = /var/log/samba/%u.log I'm not sure if this is the appropriate parameter. YMMV. timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Assign different shells to
M Azer schrieb: > However, there are some users that require shell > access. How can I set a real shell for those domain > users that need a shell on the machine ? Hello! I don't have winbind installed and can't test it, but what about this idea: If winbind allowed to use some sort of default shell setting (like reading the shell from /etc/passwd), it should be possible to set a different shell for each user there and configure a "winbind default shell" like /bin/false for the rest of the users. The english section of my brain seems a bit sleepy today. Did you get my idea? And: is it any worth? timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] W2K3 server unable to join samba PDC
Winanjaya - CBN schrieb: > I am running samba (samba-3.0.21b-2) as PDC on FC5 .. why my Windows 2003 > Server x64 (R2) unable to join to samba domain? .. > > pls help Do you expect us to visit you? Post some info (e.g. logs) and you might be helped. timbo -- Die Briefmarken einer Sammlung wirbeln bei plötzlichem Durchzug nicht mehr wirr durcheinander, wenn man mehrere Tuben Klebstoff über ihnen ausdrückt. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Unable to browse PDC from WIN2000 clients or clints from PDC
[EMAIL PROTECTED] schrieb: > /var/log/samba/pc23.log< what machine is this - this is not my > server name? > log file = /var/log/samba/%m.log This entry produces a separate log file for every client connecting. Be alarmed if you ever see a log file with a name like 87-193-10-181.ipool.celox.de ! Your browsing problem might be dns- related. Do you have network ip, host name and short name in /etc/hosts? Like: 192.168.123.1 samba.marathon samba How are names and addresses managed in your subnet? Static, dhcp? Can you resolve a hostname of a client? timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Error: STATUS_OBJECT_NAME_NOT_FOUND
Kevin Layer schrieb: > [I didn't see any replies to my 12/27 post... so reposting it] It's a bad time of year if you need help... >bad: >oob2 -> relay: NT Trans Request, NT CREATE >relay -> oob2: Nt Trans Response, NT CREATE, > Error: STATUS_OBJECT_NAME_NOT_FOUND Try it the other way round, i.e. from relay: smbclient -L oob2 ...and to itself, as a user with smb access: smbclient -L localhost This won't help much, but maybe you find out something interesting. Good luck! timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Migrate to Debian Etch - nogo
Hello André! André Jee schrieb: > sweetums:/# net groupmap list > sweetums:/# That's definitely an error. Did you try testparm? If not, please do so and quote the output. > So I can't do 'net groupmap modify ntgroup="Domain Admins" > unixgroup=admin' either because there are no such group. That's obvious... Was Samba running when you ran "net groupmap list"? timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba+ldap windows problem
Hello Sermodi & happy new year to all! sermodi schrieb: > The logon is working the only trouble is that I > can't get the option for changing the password, when I press the ctrl-alt-del, > the change password button is "unclickable". I`m looking for the declaration of a password change command in smb.conf (global). "passwd program" looks like what you need; a line like passwd program = /usr/bin/smbldap-passwd %u in smb.conf might help. WARNING: unchecked! I'm at home, no windows system available :-] timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba+ldap windows problem
Hello Sermodi & happy new year to all! sermodi schrieb: > The logon is working the only trouble is that I > can't get the option for changing the password, when I press the ctrl-alt-del, > the change password button is "unclickable". I`m looking for the declaration of a password change command in smb.conf (global). "passwd program" looks like what you need; a line like passwd program = /usr/bin/smbldap-passwd %u in smb.conf might help. WARNING: unchecked! I'm at home, no windows system available :-] timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Migrate to Debian Etch - nogo
Hello André! André Jee schrieb: > sweetums:/# net groupmap list > sweetums:/# That's definitely an error. Did you try testparm? If not, please do so and quote the output. > So I can't do 'net groupmap modify ntgroup="Domain Admins" > unixgroup=admin' either because there are no such group. That's obvious... Was Samba running when you ran "net groupmap list"? timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba and cups printing
Dr.Peer-Joachim Koch schrieb: > Ok, restart of samba brings up two printers - but both we the same name > and the same discription ! Could you post your smbd.conf? > I'll tried to install "I'll" is future, better use "I've" :-) timbo (being very teacher- like today) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Windows XP and Samba 2.0.5a
Hello Frank, Do, Frank C schrieb: > I am looking for the answer for the same subject. Currently I have Linux > 2.0.36 running on my linux box. > > > I would like to install Samba server on the box. I am expecting the > Windows XP client will access to the box for file transfer. i assume you _have_ to use ancient software - production server, right? Debian is "bleeding edge" compared to this ;-) Like Volker said, don't expect more than basic functionality. Copying files to a Samba server should work. Even your neighbours from Redmond know about backwards compatibility. I think you should give it a try. A basic samba installation is set up in minutes and deleted even faster! Greets to Seattle (loved it!), timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Cannot create writeable share - tried many different things
Oscar Sodani schrieb: > The write list workaround mentioned in those links didn't work for me, > but I think I'm just going to start over with Fedora Core 4, or maybe > CentOS. Bad news are often better than no news at all... > Thanks for the help - I very much appreciate it! You're welcome! timbo (should really prepare his last lesson for tomorrow now...) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] can't add user to samba
stas khromoy schrieb: > here is the output Hm, can't find anything unusual here. I guessed you might have a domain ID error, but this looks fine. Any ideas, anybody? timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 LDAP backend cannot authenticate
Brad Askew schrieb: > Aside from using smbldap-populate, the directory is pretty flat, I used > smbldap-useradd to add one user to the directory. I have set up the > indices as follows. I'm pretty new to the LDAP stuff and probably can't help you much, but: One mean detail i forgot when setting up my users was to set their passwords with smbldap-passwd. You certainly did so, didn't you? timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Facing Problem for Window XP Client On Samba PDC
Junaid schrieb: > Hi, > i want to make Samba PDC, i have created domain > and now when i give name of domain in WindowXP it > requires the password, i do it by user name=root & its > password. But it gives error. "Unknown User or bad password". Did you set the smbpasswd for root? timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] can join a domain, but users are not able to log in
Chris Hellwig schrieb: > - the attached log file is the clients log (log.clientname) > - in that log-file one can find "Checking password for unmapped user > [EMAIL PROTECTED] with the new password interface" where poseidon is the > clients name. > > But there is nothing in the log-file which points to a users name. did you set the smbpasswd for the user? And: I got it from your mail that you added the client to the domain on the server. Is that right? I add my clients from the client machine (Win2K: System settings -> System -> Domain membership or whatever, don't have windows at home :-) This works good for me and i didn't know there was a different way; i figured that the domain settings need to be processed by the client. Maybe you should join the domain from the client and try again. But these are amateur thougts of course ;-) Hth, timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Users that can add computers to Domain
timothy johnson schrieb: > have every else in samba working right now, except printers, but since I > havent tried that, nor do I know how I can benefit from using samba for > printing. Anyways any help in the right direction would help. A little hint on your printing system would have been helpful. If you use cups, this link (and the whole domain, of course...) might be interesting: http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/CUPS-printing.html timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Trouble with moving to a domain
Hi Daniel, Daniel Davidson schrieb: > I have attempted to follow the directions in a couple of walkthroughs to > no avail. My problem seems to be coming from mapping the windows group > names to a linux group name and/or adding the domain member to the ldap > database. > > Here is the error I am getting: > > [EMAIL PROTECTED] samba]# net -d2 groupmap add rid=512 ntgroup="Domain > Admins" unixgroup=cnrg I guess you are using the smbldap- tools. If so, what does smbldap-groupshow "Domain Admins" say? I had similar problems in mapping my group names and helped myself by redirecting the group names with the smbldap- tools. "smbldap-groupmod" was very helpful. This is my output of kiste:/etc/bind# net groupmap list Domain Admins (S-1-5-21-4175331462-3411459466-2109793049-512) -> domain Domain Users (S-1-5-21-4175331462-3411459466-2109793049-513) -> users Domain Guests (S-1-5-21-4175331462-3411459466-2109793049-514) -> Domain Guests Domain Computers (S-1-5-21-4175331462-3411459466-2109793049-515) -> Machines Administrators (S-1-5-32-544) -> Administrators Account Operators (S-1-5-32-548) -> Account Operators Print Operators (S-1-5-32-550) -> Print Operators Backup Operators (S-1-5-32-551) -> Backup Operators Replicators (S-1-5-32-552) -> Replicators I created the groups "domain" and "users" with smbldap-groupadd and the respective RIDs. timbo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
