[Samba] Samba 3.0.7 PDC + W2K terminal server + profiles

2004-09-28 Thread Zylo
Hello,

I'm a bit unclear about domain control with Samba3 and windows terminal
server.

I would like to have a samba PDC + shares for roaming terminal server
profiles (W2K).
I'm trying now with tdbsam backend ; after that I will try with ldap.
With pdbedit I can modify the roaming profile path, but I can't modify the
terminal server profile path ?

Has anybody tried this configuration, does it work, did I missed something
in the manual ?

Thanks.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Cluster Samba print servers

2004-03-30 Thread Zylo
According to the samba howto collection, dynamic load balancing seems to be
a bad solution : one printer should have only one queue.
If you want to have failover : usually a shared disk is used. The disk is
mounted by the active machine. On this disk, you may have all your
executables and config files, and spool space. You may start the daemons
with a script (problem with swat).
The names of the queues should be the same on the 2 machines. (the same, the
better : hard / soft / users) Of course one instance of samba should be
working at a time.
It's better if you are able to take the IP of the failed machine. If you
have no shared disk, may be regular copy of all the files is sufficient.
Your problem is not only a printer problem, it's a general samba failover
problem.
My 2cts.

HTH.


"Tim" <[EMAIL PROTECTED]> a écrit dans le message de
news:[EMAIL PROTECTED]
> I should add that we have no intention of using these servers for file
sharing
> (except for the hidden print$ share). These are strictly print servers.
>
> I noticed Red Hat Cluster Manager states it doesn't support failover of
printer
> shareshow come?
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Canon multifunction printers / samba 3.0.2a / AIX 5.2ML2

2004-03-29 Thread Zylo
BTW I gorgot to mention that I use classical printing, not CUPS.

To be complete, here is my smb.conf :
[global]
 workgroup = mydomain
 netbios name = samba
 security = DOMAIN
 algorithmic rid base = 3000
 username map = /usr/local/samba/etc/mapusers.txt
 log level = 2
 debug hires timestamp = Yes
 debug pid = Yes
 debug uid = Yes
 os level = 0
 preferred master = No
 local master = No
 domain master = No
 wins server = x.x.x.15
 ldap ssl = no
 printer admin = y

[printers]
 path = /share/spool
 printable = Yes
 browseable = No

[print$]
 comment = Upload and download drivers
 path = /share/drivers
 admin users = y
 read only = No
 browseable = No


> I have problems setting up a canon multifunction ir7200. When I print the
> windows test page, I have something like "smiley" "arrow" "arow" "smiley"
> "arrow" name_of_the_samba_spool "smileys" driver.dll etc,etc,etc, on a
> single line.
>
> Did somebody used such a multifunction with Samba ? Below is a (long)
> description of what I did.
>
> I get the drivers files from  an NT server. Samba is in domain mode, the
pdc
> is a NT4 server.
>
> samba:/usr/local/samba/bin > ./rpcclient -Uadministrateur%passwd -c
> 'getdriv>
> added interface ip=x.x.x.173 bcast=x.x.x.255 nmask=255.255.255.0
> Got a positive name query response from x.x.x.15 ( x.x.x.15 )
> error connecting to x.x.x.15:445 (Un appel système a reçu un paramètre
> erroné.)
>
> [Windows NT x86]
> Printer Driver Info 3:
> Version: [2]
> Driver Name: [Canon iR7200 PCL6]
> Architecture: [Windows NT x86]
> Driver Path: [\\NTSERVER\print$\W32X86\2\CNPXLF.DLL]
> Datafile: [\\NTSERVER\print$\W32X86\2\IR7200XF.XPD]
> Configfile: [\\NTSERVER\print$\W32X86\2\CNPXLFUI.DLL]
> Helpfile: [\\NTSERVER\print$\W32X86\2\CNPXLF.HLP]
>
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\IR7200XF.XPD]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXLF.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXLFUI.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXLFUM.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXL40c.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\UCSKMP.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\TNL32.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXLF.HLP]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXLF.CNT]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPPDCE.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNNBAPIF.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNNSCORE.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXCMKM.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CMDFPXK.DAT]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CANLKN.PRF]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZN15N.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZN18N.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZN21N.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZE15N.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZE18N.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZE21N.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZP15N.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZP18N.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZP21N.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZ005N.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZ006N.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZ007N.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\CANSRGBA.ICC]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\AUCPLMNT.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\NBAPI.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\NBIPC.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\AUSSDRV.DLL]
> Dependentfiles: [\\NTSERVER\print$\W32X86\2\AUSSAPI.DAT]
>
> Monitorname: [CPCA Language Monitor2]
> Defaultdatatype: []
>
> smbclient //ntserver/print\$ -Uadministrateur%passwd -c 'cd W32X86/2;mget
> CNPXLF.DLL IR7200XF.XPD CNPXLFUI.DLL CNPXLF.HLP CNPX*DLL UCSKMP.DLL
> TNL32.DLL CNPXLF.HLP CNPXLF.CNT CNPPDCE.DLL  CNNBAPIF.DLL CNNSCORE.DLL
> CNPXCMKM.DLL CMDFPXK.DAT CANLKN.PRF CNZ*N.ICC CANSRGBA.ICC AUCPLMNT.DLL
> NBAPI.DLL NBIPC.DLL AUSSDRV.DLL AUSSAPI.DAT'
>
> rpcclient -Uadministrateur%passwd -c 'adddriver "Windows NT x86" "Canon
> iR7200
>
PCL6:CNPXLF.DLL:IR7200XF.XPD:CNPXLFUI.DLL:CNPXLF.HLP:NULL:RAW:IR7200XF.XPD,C
>
NPXLF.DLL,CNPXLFUI.DLL,CNPXLFUM.DLL,CNPXL40c.DLL,UCSKMP.DLL,TNL32.DLL,CNPXLF
>
.HLP,CNPXLF.CNT,CNPPDCE.DLL,CNNBAPIF.DLL,CNNSCORE.DLL,CNPXCMKM.DLL,CMDFPXK.D
>
AT,CANLKN.PRF,CNZN15N.ICC,CNZN18N.ICC,CNZN21N.ICC,CNZE15N.ICC,CNZE18N.ICC,CN
>
ZE21N.ICC,CNZP15N.ICC,CNZP18N.ICC,CNZP21N.ICC,CNZ005N.ICC,CNZ006N.ICC,CNZ007
>
N.ICC,CANSRGBA.ICC,AUCPLMNT.DLL,NBAPI.DLL,NBIPC.DLL,AUSSDRV.DLL,AUSSAPI.DAT"
> ' S

[Samba] Canon multifunction printers / samba 3.0.2a / AIX 5.2ML2

2004-03-29 Thread Zylo
Hello,

I have problems setting up a canon multifunction ir7200. When I print the
windows test page, I have something like "smiley" "arrow" "arow" "smiley"
"arrow" name_of_the_samba_spool "smileys" driver.dll etc,etc,etc, on a
single line.

Did somebody used such a multifunction with Samba ? Below is a (long)
description of what I did.

I get the drivers files from  an NT server. Samba is in domain mode, the pdc
is a NT4 server.

samba:/usr/local/samba/bin > ./rpcclient -Uadministrateur%passwd -c
'getdriv>
added interface ip=x.x.x.173 bcast=x.x.x.255 nmask=255.255.255.0
Got a positive name query response from x.x.x.15 ( x.x.x.15 )
error connecting to x.x.x.15:445 (Un appel système a reçu un paramètre
erroné.)

[Windows NT x86]
Printer Driver Info 3:
Version: [2]
Driver Name: [Canon iR7200 PCL6]
Architecture: [Windows NT x86]
Driver Path: [\\NTSERVER\print$\W32X86\2\CNPXLF.DLL]
Datafile: [\\NTSERVER\print$\W32X86\2\IR7200XF.XPD]
Configfile: [\\NTSERVER\print$\W32X86\2\CNPXLFUI.DLL]
Helpfile: [\\NTSERVER\print$\W32X86\2\CNPXLF.HLP]

Dependentfiles: [\\NTSERVER\print$\W32X86\2\IR7200XF.XPD]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXLF.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXLFUI.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXLFUM.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXL40c.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\UCSKMP.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\TNL32.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXLF.HLP]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXLF.CNT]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPPDCE.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNNBAPIF.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNNSCORE.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNPXCMKM.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CMDFPXK.DAT]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CANLKN.PRF]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZN15N.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZN18N.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZN21N.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZE15N.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZE18N.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZE21N.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZP15N.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZP18N.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZP21N.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZ005N.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZ006N.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CNZ007N.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\CANSRGBA.ICC]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\AUCPLMNT.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\NBAPI.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\NBIPC.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\AUSSDRV.DLL]
Dependentfiles: [\\NTSERVER\print$\W32X86\2\AUSSAPI.DAT]

Monitorname: [CPCA Language Monitor2]
Defaultdatatype: []

smbclient //ntopac2/print\$ -Uadministrateur%passwd -c 'cd W32X86/2;mget
CNPXLF.DLL IR7200XF.XPD CNPXLFUI.DLL CNPXLF.HLP CNPX*DLL UCSKMP.DLL
TNL32.DLL CNPXLF.HLP CNPXLF.CNT CNPPDCE.DLL  CNNBAPIF.DLL CNNSCORE.DLL
CNPXCMKM.DLL CMDFPXK.DAT CANLKN.PRF CNZ*N.ICC CANSRGBA.ICC AUCPLMNT.DLL
NBAPI.DLL NBIPC.DLL AUSSDRV.DLL AUSSAPI.DAT'

rpcclient -Uadministrateur%passwd -c 'adddriver "Windows NT x86" "Canon
iR7200
PCL6:CNPXLF.DLL:IR7200XF.XPD:CNPXLFUI.DLL:CNPXLF.HLP:NULL:RAW:IR7200XF.XPD,C
NPXLF.DLL,CNPXLFUI.DLL,CNPXLFUM.DLL,CNPXL40c.DLL,UCSKMP.DLL,TNL32.DLL,CNPXLF
.HLP,CNPXLF.CNT,CNPPDCE.DLL,CNNBAPIF.DLL,CNNSCORE.DLL,CNPXCMKM.DLL,CMDFPXK.D
AT,CANLKN.PRF,CNZN15N.ICC,CNZN18N.ICC,CNZN21N.ICC,CNZE15N.ICC,CNZE18N.ICC,CN
ZE21N.ICC,CNZP15N.ICC,CNZP18N.ICC,CNZP21N.ICC,CNZ005N.ICC,CNZ006N.ICC,CNZ007
N.ICC,CANSRGBA.ICC,AUCPLMNT.DLL,NBAPI.DLL,NBIPC.DLL,AUSSDRV.DLL,AUSSAPI.DAT"
' SAMBASERVER

rpcclient -Uadministrateur%passwd -c 'setdriver lpK3 "Canon iR7200 PCL6"'
SAMBASERVER

And then with a getdriver I have :

samba:/usr/local/samba/bin > teur%passwd -c 'getdriver "lpK3" 3' SAMBASERVER
<
added interface ip=x.x.x.173 bcast=x.x.x.255 nmask=255.255.255.0

[Windows NT x86]
Printer Driver Info 3:
Version: [2]
Driver Name: [Canon iR7200 PCL6]
Architecture: [Windows NT x86]
Driver Path: [\\SAMBASERVER\print$\W32X86\2\CNPXLF.DLL]
Datafile: [\\SAMBASERVER\print$\W32X86\2\IR7200XF.XPD]
Configfile: [\\SAMBASERVER\print$\W32X86\2\CNPXLFUI.DLL]
Helpfile: [\\SAMBASERVER\print$\W32X86\2\CNPXLF.HLP]

Dependentfiles: [\\SAMBASERVER\print$\W32X86\2\AUSSAPI.DAT]
Dependentfiles: [\\SAMBASERVER\print$\W32X86\2\AUSSD

[Samba] Re: AIX 5.2 / ACL support

2004-03-11 Thread Zylo
OK, after reading carefully the howto-collection, it seems that it is a
problem of the filesystem's ACL of AIX.
On Linux I used the "default" ACL entry of XFS. On AIX I'm still searching a
mean to inherit extended ACLs...

"Zylo" <[EMAIL PROTECTED]> a écrit dans le message news:
[EMAIL PROTECTED]
> Hello,
>
> I am testing the ACL support on AIX, and I have some results I do not
> understand.
> Config : AIX 5.2, samba 3.0.2a, compiled with gcc 2.9
> and --with-acl-support.
>
> I create a share test :
>
> [test]
> path = /usr/tests/testpartage
> read only = No
> inherit permissions = Yes
> inherit acls = YesOn Unix side, I put the ACLs :attributes:base
permissions
> owner(test):  rwxgroup(testtoto):  rwxothers:  ---extended
> permissionsenabledpermit   rwx u:totoThen I create, whith a
> widows client , a directory doss and a file txt.txt. The ACL are
> :/usr/tests/testpartage>#aclget txt.txtattributes:base permissions
> owner(test):  rwxgroup(testtoto):  rw-others:  ---extended
> permissionsdisabled /usr/tests/testpartage>#aclget dossattributes:base
> permissionsowner(test):  rwxgroup(testtoto):  rwx
>   others:  ---extended permissionsdisabledThis behaviour seems not
> consistant in comparison with linux/XFS/ACLs.Is that "normal" ?If you have
> any idea, thanx in advance !
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] AIX 5.2 / ACL support

2004-03-04 Thread Zylo
Hello,

I am testing the ACL support on AIX, and I have some results I do not
understand.
Config : AIX 5.2, samba 3.0.2a, compiled with gcc 2.9
and --with-acl-support.

I create a share test :

[test]
path = /usr/tests/testpartage
read only = No
inherit permissions = Yes
inherit acls = YesOn Unix side, I put the ACLs :attributes:base permissions
owner(test):  rwxgroup(testtoto):  rwxothers:  ---extended
permissionsenabledpermit   rwx u:totoThen I create, whith a
widows client , a directory doss and a file txt.txt. The ACL are
:/usr/tests/testpartage>#aclget txt.txtattributes:base permissions
owner(test):  rwxgroup(testtoto):  rw-others:  ---extended
permissionsdisabled /usr/tests/testpartage>#aclget dossattributes:base
permissionsowner(test):  rwxgroup(testtoto):  rwx
  others:  ---extended permissionsdisabledThis behaviour seems not
consistant in comparison with linux/XFS/ACLs.Is that "normal" ?If you have
any idea, thanx in advance !



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Trying to put a MS SQL 7.0 database on a samba share

2004-03-04 Thread Zylo
I can only confirm that it is a very bad idea. DB works with "block" access
to the disks, and samba (or CIFS, NAS, ...) works with "file" access. You
may have caching problems, oplocks problems, and coming with that database
corruption problems.
If you want to centralize data, consider using a SAN on which you build your
NAS and your SQL database.

Regards.

"Warren Green" <[EMAIL PROTECTED]> a écrit dans le message de
news:[EMAIL PROTECTED]
> The app can only run on MS SQL. It is our accounting package.
>
> Anyone done this?
>
> Thanx
> Warren
>
>
>
> > Why not running Mysql ??
> > save's you the trouble of storing it trough samba ..
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: wbinfo -u returns 0xc0000022

2004-03-03 Thread Zylo
You should use wbinfo -A user%password
You need only a valid user, not an administrator user.

HTH.

"Salmons, Michael" <[EMAIL PROTECTED]> a écrit dans le message de
news:[EMAIL PROTECTED]
Hello,

I am attempting to add a Redhat 9 box to our NT4 domain as a member
server. I want to enumerate user and group info so I don't have to make
two sets of user and group accounts. I've setup samba (version 2.2.7a)
and pamd the way I think I'm supposed to, but wbinfo -u always returns
0xc022. I've found this particular error mentioned in a few
articles, but applying the various remedies offered has resulted in no
change.

wbinfo -t: the secret was good, but over the weekend (and after a reboot
of the pdc and bdc) it's now bad. it returns 0xc0e5.

I've used wbinfo -a to authenticate to the domain as the domain admin-
it authenticated successfully- no change in response of wbinfo -u. (also
i noticed it was passing the password in cleartext, something i'd rather
not do..)

in case this is an issue: RestrictAnonymous is set to 1 on the pdc.

I had no trouble adding the machine to the domain. I don't think I did,
at least. I started in the Server Manager of the pdc, then ran
smbpasswd. I can use smbmount to view shares in the domain on the redhat
box, plus test shares I've setup on the redhat box are viewable by
others if I've established a local account for them.

--various files, with a few things changed to protect privacy:

/etc/samba/smb.conf

NOTE: wins server is numeric ip and is correct; hosts allow does match
our subnet; password server and remote announce are the netbios names of
our pdc and bdc

[global]
 log file = /var/log/samba/%m.log
 smb passwd file = /etc/samba/smbpasswd
 load printers = yes
 passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 obey pam restrictions = yes
 wins server = xx.xx.xx.xx
 encrypt passwords = yes
 hosts allow = xx.xx
 passwd program = /usr/bin/passwd %u
 dns proxy = no
 netbios name = netname
 server string = serverstring
 printing = cups
 password server = pdc bdc
 unix password sync = Yes
 local master = no
 remote announce = pdc
 workgroup = DOMAIN
 os level = 2
 printcap name = /etc/printcap
 security = domain
 preferred master = no
 max log size = 0
 pam password change = yes
username map = /etc/samba/smbusers
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
template homedir = /home/%U
winbind separator = +
winbind uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes
template shell = /bin/bash
add user script = /usr/sbin/adduser -d /home/%D/%U %u



/etc/pam.d/login

#%PAM-1.0
auth   required pam_securetty.so
auth   required pam_stack.so service=system-auth
auth   required pam_nologin.so
accountrequired pam_stack.so service=system-auth
password   required pam_stack.so service=system-auth
sessionrequired pam_stack.so service=system-auth
sessionoptional pam_console.so
accountsufficient  /lib/security/pam_winbind.so
sessionrequired/lib/security/pam_mkhomedir.so skel=/etc/skel
umask=0022


/etc/pam.d/samba

#%PAM-1.0
auth   required pam_nologin.so
auth   required pam_env.so
auth   required pam_stack.so service=system-auth
auth   sufficient   pam_ldap.so
auth   sufficient   pam_smb_auth.so use_first_pass
auth   sufficient   pam_unix.so likeauth nullok try_first_pass
auth   required pam_deny.so
accountrequired pam_stack.so service=system-auth
sessionrequired pam_stack.so service=system-auth
password   required pam_stack.so service=system-auth


/etc/pam.d/system-auth

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
authrequired  /lib/security/$ISA/pam_env.so
authsufficient/lib/security/$ISA/pam_unix.so likeauth nullok
authrequired  /lib/security/$ISA/pam_deny.so

account required  /lib/security/$ISA/pam_unix.so

passwordrequired  /lib/security/$ISA/pam_cracklib.so retry=3
type=
passwordsufficient/lib/security/$ISA/pam_unix.so nullok
use_authtok md5 shadow
passwordrequired  /lib/security/$ISA/pam_deny.so

session required  /lib/security/$ISA/pam_limits.so
session required  /lib/security/$ISA/pam_unix.so



/etc/pam_smb.conf

DOMAIN
pdc
bdc

(substitute actual domain and netbios names of pdc and bdc)



What should I check next? Any help would be appreciated.

Michael Salmons
[EMAIL PROTECTED]











-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind and AIX 5.2

2004-03-02 Thread Zylo
Hello,

Does anybody know if Winbind works on AIX 5.2, and how ?
I did not find any usable documentation to set up the config...

./configure builds winbind
Winbind seems to have specific options for AIX (cf manpage)
The source code says that enumeration of users and groups is not yet
possible (what impact ?)
The Howto Collection says that that may work.
Somebody said me a long time ago that samba3 / winbind / aix 5.2 should work
But nobody says howto do that !

Any help / good (not NULL) pointer is appreciated !

Thanx in advance.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: NT groups vs Unix Groups

2004-02-18 Thread Zylo
> > Some NT users and groups have more than 8 cars.
> > For the users, we have the "usermap" file, seems to work fine.
> > What is the solution for the groups ?
>
> Upgrade to samba 3, which has 'true' group mapping support.
>
Any other solution ? I had bad experience with 3.0.1 (if I remember well) on
french localized AIX... (iconv ?), either swat is unusable (huge problems
with special caracters) or everything crashes (core dump) :(.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] NT groups vs Unix Groups

2004-02-18 Thread Zylo
Hello,

I'm not clear withs groups mapping between NT and Unix Groups.
Configuration :
PDC : NT4 box (PDC won't migrate to samba)
Samba 2.2.8a (UCLA binary) / AIX 5.2
Security = domain.

Some NT users and groups have more than 8 cars.
For the users, we have the "usermap" file, seems to work fine.
What is the solution for the groups ?

On the other hand, is the NT group membership enough, or shall I maintain
the groups memberships on both sides (NT and Unix) ? Tests I did let me
think that NT membership is enough, but docs on the web says the opposite.

Any help or good link is appreciated !

Thanx in advance.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba