[Samba] Logon script via GPO

2013-05-13 Thread Luc Lalonde
Hello Folks,

I'm trying to get a logon script to execute via a GPO with Samba 4.0.5.

I used the Group Policy Editor that came with the Administration tools and 
linked a simple 'logon.bat' batch file to automatically mount a network share 
for a given 'OU=students'.

When I log in with a user that's in this container, it does not seem to execute 
the login script.   

Anyone have an idea why this isn't working?

Here's the Policy on the Samba4 server:

[root@foo Logon]# pwd
/usr/local/samba/var/locks/sysvol/foobar.com/Policies/{A9793D9B-1FCF-4F7E-BB12-33F9383F8B92}/User/Scripts/Logon

[root@foo Logon]# ls
logon.bat

I've done this before on a regular non-samba AD domain...   What's missing to 
get this to work?

Thank You!
-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
If you are not paying for it, you're not the customer; you're the product being 
sold. (Andrew Lewis)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Logon script via GPO

2013-05-13 Thread Chris Rowson
On 13 May 2013 17:38, Luc Lalonde luc.lalo...@polymtl.ca wrote:

 Hello Folks,

 I'm trying to get a logon script to execute via a GPO with Samba 4.0.5.

 I used the Group Policy Editor that came with the Administration tools
and linked a simple 'logon.bat' batch file to automatically mount a network
share for a given 'OU=students'.

 When I log in with a user that's in this container, it does not seem to
execute the login script.

 Anyone have an idea why this isn't working?

 Here's the Policy on the Samba4 server:

 [root@foo Logon]# pwd
 /usr/local/samba/var/locks/sysvol/
foobar.com/Policies/{A9793D9B-1FCF-4F7E-BB12-33F9383F8B92}/User/Scripts/Logon

 [root@foo Logon]# ls
 logon.bat

 I've done this before on a regular non-samba AD domain...   What's
missing to get this to work?

 Thank You!
 --
 Luc Lalonde, analyste
 -
 Département de génie informatique:
 École polytechnique de Montréal
 (514) 340-4711 x5049
 luc.lalo...@polymtl.ca
 -
 If you are not paying for it, you're not the customer; you're the product
being sold. (Andrew Lewis)
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

Any logs on the client machine? Just wonder if it's seeing the policy.
Also,  have you tried gpresult on the client?

Cheers,

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Logon script via GPO

2013-05-13 Thread Luc Lalonde
Hello Chris,

Thanks for the hint... I looked in the client's event logs.   There was a 
permission problem accessing the 'Netlogon' share on the Samba4 server.

Problem solved, Thank You!

- Original Message -
From: Chris Rowson christopherrow...@gmail.com
Cc: samba@lists.samba.org
Sent: Monday, May 13, 2013 12:57:55 PM GMT -05:00 US/Canada Eastern
Subject: Re: [Samba] Logon script via GPO

On 13 May 2013 17:38, Luc Lalonde luc.lalo...@polymtl.ca wrote:

 Hello Folks,

 I'm trying to get a logon script to execute via a GPO with Samba 4.0.5.

 I used the Group Policy Editor that came with the Administration tools
and linked a simple 'logon.bat' batch file to automatically mount a network
share for a given 'OU=students'.

 When I log in with a user that's in this container, it does not seem to
execute the login script.

 Anyone have an idea why this isn't working?

 Here's the Policy on the Samba4 server:

 [root@foo Logon]# pwd
 /usr/local/samba/var/locks/sysvol/
foobar.com/Policies/{A9793D9B-1FCF-4F7E-BB12-33F9383F8B92}/User/Scripts/Logon

 [root@foo Logon]# ls
 logon.bat

 I've done this before on a regular non-samba AD domain...   What's
missing to get this to work?

 Thank You!
 --
 Luc Lalonde, analyste
 -
 Département de génie informatique:
 École polytechnique de Montréal
 (514) 340-4711 x5049
 luc.lalo...@polymtl.ca
 -
 If you are not paying for it, you're not the customer; you're the product
being sold. (Andrew Lewis)
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

Any logs on the client machine? Just wonder if it's seeing the policy.
Also,  have you tried gpresult on the client?

Cheers,

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
Luc Lalonde, analyste
-
Département de génie informatique:
École polytechnique de Montréal
(514) 340-4711 x5049
luc.lalo...@polymtl.ca
-
If you are not paying for it, you're not the customer; you're the product being 
sold. (Andrew Lewis)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Logon script via GPO

2013-05-13 Thread Chris Rowson
*Il n'y a pas de quoi.*

Sometimes it is difficult to see the wood for the trees :-)

Chris



On Mon, May 13, 2013 at 7:12 PM, Luc Lalonde luc.lalo...@polymtl.ca wrote:

 Hello Chris,

 Thanks for the hint... I looked in the client's event logs.   There was a
 permission problem accessing the 'Netlogon' share on the Samba4 server.

 Problem solved, Thank You!

 - Original Message -
 From: Chris Rowson christopherrow...@gmail.com
 Cc: samba@lists.samba.org
 Sent: Monday, May 13, 2013 12:57:55 PM GMT -05:00 US/Canada Eastern
 Subject: Re: [Samba] Logon script via GPO

 On 13 May 2013 17:38, Luc Lalonde luc.lalo...@polymtl.ca wrote:
 
  Hello Folks,
 
  I'm trying to get a logon script to execute via a GPO with Samba 4.0.5.
 
  I used the Group Policy Editor that came with the Administration tools
 and linked a simple 'logon.bat' batch file to automatically mount a network
 share for a given 'OU=students'.
 
  When I log in with a user that's in this container, it does not seem to
 execute the login script.
 
  Anyone have an idea why this isn't working?
 
  Here's the Policy on the Samba4 server:
 
  [root@foo Logon]# pwd
  /usr/local/samba/var/locks/sysvol/

 foobar.com/Policies/{A9793D9B-1FCF-4F7E-BB12-33F9383F8B92}/User/Scripts/Logon
 
  [root@foo Logon]# ls
  logon.bat
 
  I've done this before on a regular non-samba AD domain...   What's
 missing to get this to work?
 
  Thank You!
  --
  Luc Lalonde, analyste
  -
  Département de génie informatique:
  École polytechnique de Montréal
  (514) 340-4711 x5049
  luc.lalo...@polymtl.ca
  -
  If you are not paying for it, you're not the customer; you're the product
 being sold. (Andrew Lewis)
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba

 Any logs on the client machine? Just wonder if it's seeing the policy.
 Also,  have you tried gpresult on the client?

 Cheers,

 Chris
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

 --
 Luc Lalonde, analyste
 -
 Département de génie informatique:
 École polytechnique de Montréal
 (514) 340-4711 x5049
 luc.lalo...@polymtl.ca
 -
 If you are not paying for it, you're not the customer; you're the product
 being sold. (Andrew Lewis)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Logon script as administrator

2012-08-22 Thread Андрей Гребенников
I'm running samba 3 server as PDC. Sometimes I get a reg-file or a 
command which should be run on the user's machine during the logon 
process as an administrator. How could I do that except adding these 
things to the netlogon directory directly?


--
Andrey Grebennikov,
Russia

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Logon script will not run in Samba 3.3.4 PDC

2009-12-01 Thread David Whitney
Greetings, all.

I have a Samba 3.3.4 PDC up and running on my small home network,
having migrated from an older 2.2.8 configuration. My XP Pro and Vista
clients have remained as members of this migrated domain, logging with
no problem. Client logins have worked precisely as expected. All seems
to be happy - with one exception.

My only problem, which I've spent the last two or three days Googling
and even trying to read through the Samba sources to resolve, is that
the logon script I have defined will not run. I even hardcoded the
script name to eliminate any issues arising from variable
substitution, to no avail, eg

[global]
..
..
logon script = logon.bat
..

The testparm file shows no errors in the configuration file.

I have researched this issue myself, and have seen various causes of
this problem. I have checked the following so far, but to no avail in
my circumstance:

* The path parameter of the [netlogon] service points to a directory
with r-x privs.
* The logon.bat file specified in the logon script parameter of
smb.conf has r-x privs.
* The file specified in the logon script parameter of smb.conf has
been created from a DOS-style client with CR/LF's.
* The batch file can be executed *manually* from any client after
logging in, and can even be opened in a tool like Notepad.
* The batch file's location is located in the directory indicated in
the [netlogon] path parameter.

The log files show absolutely no attempt to access the file. They do
show a (failed) attempt to access NTConfig.pol (which didn't exist),
and to that end I created a simple policy file and placed it in the
netlogon share. The logs confirm that the policy file is accessed.
(The Policy file defines only a machine policy not to check for slow
connections, because I had also read that a slow net connection check
would inhibit logon script execution). This made no difference,
either.

Despite my research, I'm sure I have overlooked something simple, and
I've just been staring at things so long I just can't see it. If
anyone could offer any suggestions, I'd be most appreciative. I'm
running Slackware 13.0, but compiled and installed Samba 3.3.4 in the
hopes of supporting future WIndows 7 clients, which other research has
said is the proper version of Samba for that goal. But that's a next
step in the process

Many thanks in advance,
David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] logon script

2009-06-03 Thread Liutauras Adomaitis
On Mon, Jun 1, 2009 at 1:09 PM, Christian Rost c...@rocon-it.de wrote:
 Hi,

 you don't have access to Samba variables from within your logon script. The 
 most convenient way to solve this is by using the ifmember.exe executable 
 from the Windows Server 2003 toolkit and to place it into your netlogon share 
 - you need to google for ifmember.

 With ifmember.exe you can test, if the user who is running the logon script, 
 belongs to the specified group. Use the following lines as an example and add 
 it to your logon script:

 snip
 \\%SERVER01%\netlogon\ifmember.exe /verbose tech
 if errorlevel 1 goto TECH
 :STOPTECH

 \\%SERVER01%\netlogon\ifmember.exe /verbose mktg
 if errorlevel 1 goto MKTG
 :STOPMKTG

 goto END

 ##
 ## TECH group
 ##
 :TECH
 if exist k:\nul net use /delete k: /yes
 if not exist k:\nul net use k: \\%SERVER01%\tech /persistent:no
 goto STOPTECH

 ##
 ## MKTG group
 ##
 :MKTG
 if exist l:\nul net use /delete l: /yes
 if not exist l:\nul net use l: \\%SERVER01%\tech /persistent:no
 goto STOPMKTG

 :END
 rem This is the End of your script

 ...snip...

 Cheers,

 Christian


I would suggest use ntlogon python script. Together with root
preexec and root postexec configuration options you can set up your
logon scripts to generated upon connecting to netlogon share.
I found this utility very useful and works very well. It supports
samba variables.
Mandriva ships this utility, so must other distributions.
There is problems with groups with spaces and capital letters, but it
is very easy to fix.

Liutauras
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] logon script

2009-06-03 Thread johnh
What about something like this in the logon script:

Function IsMember(strGroup)
Dim objUser, objGroup, objGroupDict

Set objGroup = GetObject(WinNT://  strDomain  /  strGroup  
,group)
Set objGroupDict = CreateObject(Scripting.Dictionary)

objGroupDict.RemoveAll
For Each objUser In objGroup.Members
objGroupDict.Add objUser.Name, -
Next

IsMember = objGroupDict.Exists(strUserName)

Set objUser = Nothing
Set objGroup = Nothing
Set objGroupDict = Nothing
End Function

-John



From:
Liutauras Adomaitis liutauras.adomai...@gmail.com
To:
c...@rocon-it.de
Cc:
samba@lists.samba.org, Santhosh Kumar Gulla santy4li...@gmail.com
Date:
06/03/2009 02:58 PM
Subject:
Re: [Samba] logon script



On Mon, Jun 1, 2009 at 1:09 PM, Christian Rost c...@rocon-it.de wrote:
 Hi,

 you don't have access to Samba variables from within your logon script. 
The most convenient way to solve this is by using the ifmember.exe 
executable from the Windows Server 2003 toolkit and to place it into your 
netlogon share - you need to google for ifmember.

 With ifmember.exe you can test, if the user who is running the logon 
script, belongs to the specified group. Use the following lines as an 
example and add it to your logon script:

 snip
 \\%SERVER01%\netlogon\ifmember.exe /verbose tech
 if errorlevel 1 goto TECH
 :STOPTECH

 \\%SERVER01%\netlogon\ifmember.exe /verbose mktg
 if errorlevel 1 goto MKTG
 :STOPMKTG

 goto END

 ##
 ## TECH group
 ##
 :TECH
 if exist k:\nul net use /delete k: /yes
 if not exist k:\nul net use k: \\%SERVER01%\tech /persistent:no
 goto STOPTECH

 ##
 ## MKTG group
 ##
 :MKTG
 if exist l:\nul net use /delete l: /yes
 if not exist l:\nul net use l: \\%SERVER01%\tech /persistent:no
 goto STOPMKTG

 :END
 rem This is the End of your script

 ...snip...

 Cheers,

 Christian


I would suggest use ntlogon python script. Together with root
preexec and root postexec configuration options you can set up your
logon scripts to generated upon connecting to netlogon share.
I found this utility very useful and works very well. It supports
samba variables.
Mandriva ships this utility, so must other distributions.
There is problems with groups with spaces and capital letters, but it
is very easy to fix.

Liutauras
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



--
Please consider the environment before printing this e-mail.
 
This e-mail is intended only for the named person or entity to which it
is addressed and contains valuable business information that is
privileged, confidential and/or otherwise protected from disclosure.
Dissemination, distribution or copying of this e-mail or the information
herein by anyone other than the intended recipient, or an employee, or
agent responsible for delivering the message to the intended recipient,
is strictly prohibited.  All contents are the copyright property of the
sender.  If you are not the intended recipient, you are nevertheless
bound to respect the sender's worldwide legal rights.  We require that
unintended recipients delete the e-mail and destroy all electronic
copies in their system, retaining no copies in any media.  If you have
received this e-mail in error, please immediately notify us by calling
our Help Desk at (603) 433-1143, or e-mail to i...@primebuchholz.com.
We appreciate your cooperation.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] logon script

2009-06-03 Thread johnh
Sorry - didn't notice before that last message that you weren't using a VB 
login script.

-John




From:
Liutauras Adomaitis liutauras.adomai...@gmail.com
To:
c...@rocon-it.de
Cc:
samba@lists.samba.org, Santhosh Kumar Gulla santy4li...@gmail.com
Date:
06/03/2009 02:58 PM
Subject:
Re: [Samba] logon script



On Mon, Jun 1, 2009 at 1:09 PM, Christian Rost c...@rocon-it.de wrote:
 Hi,

 you don't have access to Samba variables from within your logon script. 
The most convenient way to solve this is by using the ifmember.exe 
executable from the Windows Server 2003 toolkit and to place it into your 
netlogon share - you need to google for ifmember.

 With ifmember.exe you can test, if the user who is running the logon 
script, belongs to the specified group. Use the following lines as an 
example and add it to your logon script:

 snip
 \\%SERVER01%\netlogon\ifmember.exe /verbose tech
 if errorlevel 1 goto TECH
 :STOPTECH

 \\%SERVER01%\netlogon\ifmember.exe /verbose mktg
 if errorlevel 1 goto MKTG
 :STOPMKTG

 goto END

 ##
 ## TECH group
 ##
 :TECH
 if exist k:\nul net use /delete k: /yes
 if not exist k:\nul net use k: \\%SERVER01%\tech /persistent:no
 goto STOPTECH

 ##
 ## MKTG group
 ##
 :MKTG
 if exist l:\nul net use /delete l: /yes
 if not exist l:\nul net use l: \\%SERVER01%\tech /persistent:no
 goto STOPMKTG

 :END
 rem This is the End of your script

 ...snip...

 Cheers,

 Christian


I would suggest use ntlogon python script. Together with root
preexec and root postexec configuration options you can set up your
logon scripts to generated upon connecting to netlogon share.
I found this utility very useful and works very well. It supports
samba variables.
Mandriva ships this utility, so must other distributions.
There is problems with groups with spaces and capital letters, but it
is very easy to fix.

Liutauras
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



--
Please consider the environment before printing this e-mail.
 
This e-mail is intended only for the named person or entity to which it
is addressed and contains valuable business information that is
privileged, confidential and/or otherwise protected from disclosure.
Dissemination, distribution or copying of this e-mail or the information
herein by anyone other than the intended recipient, or an employee, or
agent responsible for delivering the message to the intended recipient,
is strictly prohibited.  All contents are the copyright property of the
sender.  If you are not the intended recipient, you are nevertheless
bound to respect the sender's worldwide legal rights.  We require that
unintended recipients delete the e-mail and destroy all electronic
copies in their system, retaining no copies in any media.  If you have
received this e-mail in error, please immediately notify us by calling
our Help Desk at (603) 433-1143, or e-mail to i...@primebuchholz.com.
We appreciate your cooperation.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


RE: [Samba] logon script

2009-06-01 Thread Christian Rost
Hi,

you don't have access to Samba variables from within your logon script. The 
most convenient way to solve this is by using the ifmember.exe executable 
from the Windows Server 2003 toolkit and to place it into your netlogon share - 
you need to google for ifmember.

With ifmember.exe you can test, if the user who is running the logon script, 
belongs to the specified group. Use the following lines as an example and add 
it to your logon script:

snip
\\%SERVER01%\netlogon\ifmember.exe /verbose tech 
if errorlevel 1 goto TECH
:STOPTECH

\\%SERVER01%\netlogon\ifmember.exe /verbose mktg 
if errorlevel 1 goto MKTG
:STOPMKTG

goto END

##
## TECH group 
##
:TECH
if exist k:\nul net use /delete k: /yes
if not exist k:\nul net use k: \\%SERVER01%\tech /persistent:no
goto STOPTECH

##
## MKTG group 
##
:MKTG
if exist l:\nul net use /delete l: /yes
if not exist l:\nul net use l: \\%SERVER01%\tech /persistent:no
goto STOPMKTG

:END
rem This is the End of your script

...snip...

Cheers,

Christian

===
Christian Rost
roCon - Informationstechnologie
Glatzer Weg 4

44534 Lünen

fon: +49 (0) 2306 910 658
fax: +49 (0) 2306 910 664
url: http://www.rocon-it.de



Santhosh Kumar Gulla santy4li...@gmail.com wrote
Subject: [Samba] logon script
Date: 31.05.2009 00:35

Hi,

I have configured a samba PDC with a logon script. The logon script
includes
dos commands to map a drive letter for different shares. One share has
user
home directory, one has common folder for all the users and other share
is
group share. For assigning a drive letter to group share I have used the
command net use g: \\%L\group\%G but group share drive is not mounting
for
any of the users. I have three groups tech,mktg and sales. I want to
mount
tech share for tech group and that particular share only should be
mounted
as group share for tech group users and same for mktg and sales. Can you
please help me out in solving this issue. please assist me in giving
correct
parameters and path.

Thank You.
Regards,
Santy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] logon script

2009-05-30 Thread Santhosh Kumar Gulla
Hi,

I have configured a samba PDC with a logon script. The logon script includes
dos commands to map a drive letter for different shares. One share has user
home directory, one has common folder for all the users and other share is
group share. For assigning a drive letter to group share I have used the
command net use g: \\%L\group\%G but group share drive is not mounting for
any of the users. I have three groups tech,mktg and sales. I want to mount
tech share for tech group and that particular share only should be mounted
as group share for tech group users and same for mktg and sales. Can you
please help me out in solving this issue. please assist me in giving correct
parameters and path.

Thank You.
Regards,
Santy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] logon script

2009-05-30 Thread Miguel Medalha



I have configured a samba PDC with a logon script. The logon script includes
dos commands to map a drive letter for different shares. One share has user
home directory, one has common folder for all the users and other share is
group share. For assigning a drive letter to group share I have used the
command net use g: \\%L\group\%G but group share drive is not mounting for
any of the users. I have three groups tech,mktg and sales. I want to mount
tech share for tech group and that particular share only should be mounted
as group share for tech group users and same for mktg and sales. Can you
please help me out in solving this issue. please assist me in giving correct
parameters and path.
  


Put the following parameter in your smb.conf:

logon script = %G.bat

Then, create a script named after each group in your netlogon share, 
in your case tech.bat, mktg.bat and sales.bat.



The script corresponding to the group the particular user belongs to will be 
executed upon logon.

To map the shares to drives, the script should contain commands in the 
folllowing format:

net use g: \\server\sharename

(The drive letter to use depends, of course, on your particular case).


See Variable substitutions on the smb.conf man page.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] logon script question

2009-01-14 Thread wes
If there a way to configure samba to have a logon script run with
administrator privileges upon login?

thanks,
-wes
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] logon script question

2009-01-14 Thread Michael Heydon
I use cpau, there is an associated security risk, but we decided it was 
acceptable.


You could possibly also use WPKG, depending on what you are trying to 
achieve.


*Michael Heydon - IT Administrator *
micha...@jaswin.com.au mailto:micha...@jaswin.com.au


wes wrote:

If there a way to configure samba to have a logon script run with
administrator privileges upon login?

thanks,
-wes
  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logon Script Via Group

2008-10-20 Thread Jeff L
Hello, 

In order to use Samba and migrate our Windows domain we need to be able to map 
users to a drive based on the Unix groups they are a member of.

IE:

If user is a member of finance, map drive f:\ finance
If user is a a member of domainusers, run logon script logon.bat


I tried placing differnet logon scripts in a directory named after the 
groupname and using the %g variable in Samba but it did not work.
It only looks up the FIRST group ignoring the rest. 

Please let us know a easy way to do this. 

Thanks





=
New York Film Academy
Study Abroad Filmmaking  Acting. London, Paris, Florence, USA.
http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=160d32aa7f559fb3e9e7cf46485a3294


-- 
Powered by Outblaze
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon Script Via Group

2008-10-20 Thread Robert Schetterer
Jeff L schrieb:
 Hello, 
 
 In order to use Samba and migrate our Windows domain we need to be able to 
 map users to a drive based on the Unix groups they are a member of.
 
 IE:
 
 If user is a member of finance, map drive f:\ finance
 If user is a a member of domainusers, run logon script logon.bat
 
 
 I tried placing differnet logon scripts in a directory named after the 
 groupname and using the %g variable in Samba but it did not work.
 It only looks up the FIRST group ignoring the rest. 
 
 Please let us know a easy way to do this. 
 
 Thanks
 
 
 
 
 
 =
 New York Film Academy
 Study Abroad Filmmaking  Acting. London, Paris, Florence, USA.
 http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=160d32aa7f559fb3e9e7cf46485a3294
 
 
Hi,
you might give all users a default.bat
in this you may split running
other scripts by hostname username groupname
group can be matched with the ifmember.exe util
i.e default.bat

@echo off
REM default login script [EMAIL PROTECTED]
REM
---
REM exec bat for logged in machine ( maybe software status for machine )
echo %COMPUTERNAME%
call %COMPUTERNAME%.bat
REM
---
REM exec bat for login user
echo %USERNAME%
call %USERNAME%.bat
REM
-
REM exec bat for different groups
REM ifmember.exe must be in the netlogon share download it at m$
REM be aware that ifmember will give result in the current win language
REM unlike normal dos
REM positive result from ifmember will match in errorlevel 1
ifmember /v /l DOMAINNAME\Domain Users
if errorlevel 1 call domainusers.bat
ifmember /v /l DOMAINNAME\Domain Admins
if errorlevel 1 call domainadmins.bat

and domainusers.bat

@echo off
REM install the pdfprinter drivers must allready be uploaded
REM typical use with cups-pdf
rundll32 printui.dll,PrintUIEntry /dn /n \\YOUR-PDC-NAME\pdfprinter /q
rundll32 printui.dll,PrintUIEntry /in /n \\YOUR-PDC-NAME\pdfprinter
net use z: \\YOUR-PDC-NAME\users /persistent:no

with such logic you should be able to solve
login stuff NT Group related

-- 
Best Regards

MfG Robert Schetterer

Germany/Munich/Bavaria
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon Script Via Group

2008-10-20 Thread Rune Tønnesen

Please take a look here
http://lists.samba.org/archive/samba/2004-February/079796.html

--
Venlig Hilsen
Rune TønnesenQuoting Jeff L [EMAIL PROTECTED]:


Hello,

In order to use Samba and migrate our Windows domain we need to be  
able to map users to a drive based on the Unix groups they are a  
member of.


IE:

If user is a member of finance, map drive f:\ finance
If user is a a member of domainusers, run logon script logon.bat


I tried placing differnet logon scripts in a directory named after  
the groupname and using the %g variable in Samba but it did not

work.

It only looks up the FIRST group ignoring the rest.

Please let us know a easy way to do this.

Thanks





=
New York Film Academy
Study Abroad Filmmaking  Acting. London, Paris, Florence, USA.


http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=160d32aa7f559fb3e9e7cf46485a3294



--
Powered by Outblaze
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] logon script to start a website

2007-11-05 Thread Lukasz Szybalski
Hello,
Is there a way in logonscript.bat to start a website with some address.

@start  my current default browser http://google.com;

?

How would a script line for that look? Does anybody have one done
already and if so could you sent it to me?

Thank you,
Lucas
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] logon script to start a website

2007-11-05 Thread Dennis McLeod

From an XP prompt, you can open a website with START.
I don't have any other clients to try

h:\|► start http:\\www.linux.com

and the browser window will open.
should be all you need, I think...



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lukasz Szybalski
Sent: Monday, November 05, 2007 6:03 AM
To: samba@lists.samba.org
Subject: [Samba] logon script to start a website

Hello,
Is there a way in logonscript.bat to start a website with some address.

@start  my current default browser http://google.com;

?

How would a script line for that look? Does anybody have one done already and 
if so could you sent it to me?

Thank you,
Lucas
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] logon script sometimes doesn't run

2007-08-30 Thread Patrick DUBAU

Hi,

i just upgrade samba  3.0.14a-3sarge to 3.0.24-6etch4
i didn't change anything in smb.conf

my problem  :  i noticed  that for some stations (all are on windows xp 
sp2) the logon.bat is not run (= no network mapping)


in this case, when i go to DOS and try to map like : net use g: 
\\admin\netlogon (where admin is the netbios name) i got the error 
system error 53
When i repeat this command like : net use g: 
\\mei-admin.alsace.iufm.fr\netlogon (FQDN from the server) it works 
(always!)


I noticed that at login the logon.bat is launched by : 
\\admin\netlogon\logon.bat, but as this syntax is not working at first 
boot the script is not run


Does someone have a solution ?
Can the call of the logon.bat be changed so that it works with this 
syntax : \\FDDN of server\netlogon\logon.bat ?





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] logon script problem

2007-05-03 Thread Fabio Marcone
Hi,
I've a problem with logon script parameter: client doesn't run this
script and i've no error in samba logs. I'm using samba 3.0.24 (etch)
with windows XP SP2 client side.


workstation was joined in domain and user login (using roaming profiles)
is executed without errors.
I used unix2dos tool to transform the script in dos way and if I run the
script in widows with double click, it is executed without errors.

Anyone can help me? I searched a lot but I get no infos about this problem.

Thanks in advance,
Fabio


riporto la parte di interesse di smb.conf:

[global]
logon home = \\%L\%U\.profiles
logon script = backup.bat
max protocol = NT1
delete user script = /usr/sbin/smbldap-userdel %u
passwd chat = *new*password* %n\n *new*password* %n\n *successfully*
add user script = /usr/sbin/smbldap-useradd -m %u
add user to group script = /usr/sbin/smbldap-groupmod -m %u %g
ldap group suffix = ou=Groups
syslog = 1
passdb backend = ldapsam:ldap://127.0.0.1
ldap delete dn = Yes
load printers = no
create mask = 0770
domain logons = yes
logon path = \\%L\profiles\%U
netbios name = pdc-server
server signing = Auto
guest account = nobody
directory mask = 0770
unix charset = ISO8859-1
preferred master = yes
set primary group script = /usr/sbin/smbldap-usermod -g %g %u
printcap name = cups
smb ports = 139 445
passwd program = /usr/local/sbin/smbldap-passwd  %u
workgroup = Oikos
enable privileges = yes
encrypt passwords = yes
delete group script = /usr/sbin/smbldap-groupdel %g
ldap user suffix = ou=People
ldap admin dn = cn=admin,dc=duet,dc=it
name resolve order = wins bcast
ldap passwd sync = Yes

add group script = /usr/sbin/smbldap-groupadd -p %g
delete user from group script = /usr/sbin/smbldap-groupmod -x %u %g
ldap ssl = No
max log size = 1000
unix password sync = no
obey pam restrictions = no
socket options = TCP_NODELAY
panic action = /usr/share/samba/panic-action %d
restrict anonymous = no
add machine script = /usr/sbin/smbldap-useradd -w %u
dns proxy = no
server string = %h server (Samba %v)
logon drive = H:
os level = 34
invalid users = root
ldap suffix = dc=duet,dc=it
printing = cups
wins support = no
map to guest = Bad User
ldap machine suffix = ou=Computers
security = user
domain master = yes
log file = /var/log/samba/log.%m

[profiles]
browseable = yes
store dos attributes = yes
directory mask = 0700
guest ok = no
printable = no
path = /shares/profiles
read only = no
create mask = 0600

[netlogon]
comment = Network Logon Service
path = /shares/netlogon
browseable = no
guest ok = yes
read only = yes
path = /shares/netlogon
valid users = %U





-- 

Dott. Fabio Marcone

2T srl
Telefono+39 - 0871- 540154
Fax +39 - 0871- 571594
Email   fabio.marcone(AT)duet.it
Indirizzo   Viale B. Croce 573
66013 Chieti Scalo (CH)
GNU/Linux registered user   #400424
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] logon script problem

2007-05-03 Thread Fabio Marcone
Hi!

Rune Tønnesen wrote:
 hi Fabio
 
 Can you browse the netlogon share from the client?
 set browseable = yes
 set available = yes

yes

 as root try from a windows client
  \\servername\netlogon file://\\servername\netlogon

I can't log as root on clients

Fabio

-- 

Dott. Fabio Marcone

2T srl
Telefono+39 - 0871- 540154
Fax +39 - 0871- 571594
Email   fabio.marcone(AT)duet.it
Indirizzo   Viale B. Croce 573
66013 Chieti Scalo (CH)
GNU/Linux registered user   #400424
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script change failure

2007-03-28 Thread Wendell Dingus
Thanks, I've got basically the same type of thing configured now but the PCs 
were initially joined to the domain and have been signing on and receiving 
login scripts in the form of %U.bat for years.
Now though I modify smb.conf to point them to logon.bat and for some reason 
they continue to look for %U.bat and fail to process the logon.bat file. I've 
patched around this via symlinking all
possible usernames as {username}.bat to logon.bat in the netlogon directory. 
Frustrating to have to do this. I've tried stopping samba and removing .tdb 
files with no luck as well.

The other thing I had asked about, upgrading RedHat9 machines from Samba2 to 
Samba3 we've approached again. We've been successful in doing so, but not 
without some pain.

The section titled Linux clients printing to Windows XP machine at the end of 
this article is relevant: http://www.wlug.org.nz/SambaPrinting

The symlink of smb - smbspool had to be made. Afterwards we could not add a 
printer pointing to a WinXP share via the graphical system-config-printer GUI 
tool but could using the text version,
system-config-printer-tui. Strange...

Also, we discovered that even if Samba was set to pass on print data raw, 
configuring the printer in CUPS with a printer driver appeared to cause the 
data received from the PC to have print driver
rules applied to it twice. We setup the printer as RAW in CUPS and it's working 
now. Also strange...

Hi Wendel,

I've this in my smb.conf, and it works for any M$ windows in my domain

[global]
logon path =
logon home =
logon script = logon.bat
#   logon path = \\%L\profiles\%U
#   logon home = \\%L\%U\.9xprofile
#   logon drive = H:

[netlogon]
comment = NLService
path = /var/lib/samba/netlogon/%U
valid users = %U
browseable = no
writeable = no

In this configuration, each user will have their own logon.bat,  but of
course you can change it to suit your needs.

Regards,

sato




On 3/20/07, Wendell Dingus wendell at bisonline.com wrote:

 I've got a bunch of servers which for a long time now have provided
 domain logon scripts of the form %u.bat or %m.bat   I've recently
 created a more capable logon script in Kixtart and have changed smb.conf
 to launch it for all users as just logon.bat  So no more per-machine or
 per-user scripts, everybody runs the same one, and inside it it does
 per-machine and/or per-user things. At maybe 2/3rds of the sites this
 works fine. For the others I'm getting errors in logs where the PC is
 trying to find {machinename}.bat or {username}.bat and failing and
 thusly *not* processing the logon script at all. As if the change in
 smb.conf is being totally ignored. I've restarted samba, rebooted, etc..
 In a few cases I've even tried renaming the entire /var/cache/samba/
 directory and restarting samba so that it creates new copies of all the
 .tdb's. I'm not certain that *all* instances of this are Samba2 but am
 kind of suspecting they are. We've still got a bunch of customers with
 RH9 and Samba 2.2.12  Hey it's doing what we ask and besides this latest
 problem is working fine.

 So, any suggestions how to get a bunch of WinXP PCs to start looking for
 logon.bat instead of %u.bat? In testing I've simply symlinked
 logon.bat to all the usernames in netlogon and that works, as a band-aid.

 If Samba2 turns out to be the issue and an upgrade to Samba3 is to be
 suggested, something else that's been a problem for me I could ask
 about. I've tried the Samba3 RPMs provided at samba.org and they worked
 great, except... The ability to define a printer in cups pointing to a
 shared printer on a PC as  \\{PCNAME}\{SHARENAME} ceased to work and I
 ended up having to revert back to Samba2. I'd love to resolve this one
 as well and breathe a bit more life into the RH9 boxes we may not get
 upgraded for a long time still. They're all stock RH9 with the Fedora
 Legacy updates all applied.

 # rpm -qa | grep -i 'samba\|cups' | sort
 cups-1.1.17-13.3.0.14.legacy
 cups-devel-1.1.17-13.3.0.14.legacy
 cups-libs-1.1.17-13.3.0.14.legacy
 gimp-print-cups-4.2.4-5
 qtcups-2.0-15
 qtcups-devel-2.0-15
 redhat-config-samba-1.0.4-1
 samba-2.2.12-0.90.6.legacy
 samba-client-2.2.12-0.90.6.legacy
 samba-common-2.2.12-0.90.6.legacy
 samba-swat-2.2.12-0.90.6.legacy

 Thanks!
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script change failure

2007-03-25 Thread sato x

Hi Wendel,

I've this in my smb.conf, and it works for any M$ windows in my domain

[global]
   logon path =
   logon home =
   logon script = logon.bat
#   logon path = \\%L\profiles\%U
#   logon home = \\%L\%U\.9xprofile
#   logon drive = H:

[netlogon]
   comment = NLService
   path = /var/lib/samba/netlogon/%U
   valid users = %U
   browseable = no
   writeable = no

In this configuration, each user will have their own logon.bat,  but of
course you can change it to suit your needs.

Regards,

sato




On 3/20/07, Wendell Dingus [EMAIL PROTECTED] wrote:


I've got a bunch of servers which for a long time now have provided
domain logon scripts of the form %u.bat or %m.bat   I've recently
created a more capable logon script in Kixtart and have changed smb.conf
to launch it for all users as just logon.bat  So no more per-machine or
per-user scripts, everybody runs the same one, and inside it it does
per-machine and/or per-user things. At maybe 2/3rds of the sites this
works fine. For the others I'm getting errors in logs where the PC is
trying to find {machinename}.bat or {username}.bat and failing and
thusly *not* processing the logon script at all. As if the change in
smb.conf is being totally ignored. I've restarted samba, rebooted, etc..
In a few cases I've even tried renaming the entire /var/cache/samba/
directory and restarting samba so that it creates new copies of all the
.tdb's. I'm not certain that *all* instances of this are Samba2 but am
kind of suspecting they are. We've still got a bunch of customers with
RH9 and Samba 2.2.12  Hey it's doing what we ask and besides this latest
problem is working fine.

So, any suggestions how to get a bunch of WinXP PCs to start looking for
logon.bat instead of %u.bat? In testing I've simply symlinked
logon.bat to all the usernames in netlogon and that works, as a band-aid.

If Samba2 turns out to be the issue and an upgrade to Samba3 is to be
suggested, something else that's been a problem for me I could ask
about. I've tried the Samba3 RPMs provided at samba.org and they worked
great, except... The ability to define a printer in cups pointing to a
shared printer on a PC as  \\{PCNAME}\{SHARENAME} ceased to work and I
ended up having to revert back to Samba2. I'd love to resolve this one
as well and breathe a bit more life into the RH9 boxes we may not get
upgraded for a long time still. They're all stock RH9 with the Fedora
Legacy updates all applied.

# rpm -qa | grep -i 'samba\|cups' | sort
cups-1.1.17-13.3.0.14.legacy
cups-devel-1.1.17-13.3.0.14.legacy
cups-libs-1.1.17-13.3.0.14.legacy
gimp-print-cups-4.2.4-5
qtcups-2.0-15
qtcups-devel-2.0-15
redhat-config-samba-1.0.4-1
samba-2.2.12-0.90.6.legacy
samba-client-2.2.12-0.90.6.legacy
samba-common-2.2.12-0.90.6.legacy
samba-swat-2.2.12-0.90.6.legacy

Thanks!
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script change failure

2007-03-20 Thread Wendell Dingus
I've got a bunch of servers which for a long time now have provided
domain logon scripts of the form %u.bat or %m.bat   I've recently
created a more capable logon script in Kixtart and have changed smb.conf
to launch it for all users as just logon.bat  So no more per-machine or
per-user scripts, everybody runs the same one, and inside it it does
per-machine and/or per-user things. At maybe 2/3rds of the sites this
works fine. For the others I'm getting errors in logs where the PC is
trying to find {machinename}.bat or {username}.bat and failing and
thusly *not* processing the logon script at all. As if the change in
smb.conf is being totally ignored. I've restarted samba, rebooted, etc..
In a few cases I've even tried renaming the entire /var/cache/samba/
directory and restarting samba so that it creates new copies of all the
.tdb's. I'm not certain that *all* instances of this are Samba2 but am
kind of suspecting they are. We've still got a bunch of customers with
RH9 and Samba 2.2.12  Hey it's doing what we ask and besides this latest
problem is working fine.

So, any suggestions how to get a bunch of WinXP PCs to start looking for
logon.bat instead of %u.bat? In testing I've simply symlinked
logon.bat to all the usernames in netlogon and that works, as a band-aid.

If Samba2 turns out to be the issue and an upgrade to Samba3 is to be
suggested, something else that's been a problem for me I could ask
about. I've tried the Samba3 RPMs provided at samba.org and they worked
great, except... The ability to define a printer in cups pointing to a
shared printer on a PC as  \\{PCNAME}\{SHARENAME} ceased to work and I
ended up having to revert back to Samba2. I'd love to resolve this one
as well and breathe a bit more life into the RH9 boxes we may not get
upgraded for a long time still. They're all stock RH9 with the Fedora
Legacy updates all applied.

# rpm -qa | grep -i 'samba\|cups' | sort
cups-1.1.17-13.3.0.14.legacy
cups-devel-1.1.17-13.3.0.14.legacy
cups-libs-1.1.17-13.3.0.14.legacy
gimp-print-cups-4.2.4-5
qtcups-2.0-15
qtcups-devel-2.0-15
redhat-config-samba-1.0.4-1
samba-2.2.12-0.90.6.legacy
samba-client-2.2.12-0.90.6.legacy
samba-common-2.2.12-0.90.6.legacy
samba-swat-2.2.12-0.90.6.legacy

Thanks!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script problem

2007-01-15 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 01/12/2007 03:00 AM, Christophe Raluy escreveu:
 Hello,
 I've changed my Samba Server 2.2.7a on a Mandrake 9.1 (2.4.21) for a
 Samba server 3.0.20-3.1 (with samba-vscan-clamav-3.0.20-3.1) on a
 Mandrake 2006 (2.6.12). I've always used for the samba clients (WXP pro)
 the logon scripts created by make_logon_script. In this script, I used
 to use the commands  listed below:
 net use K: \\PDC\share
 route add network mask mask gateway
 Now the command 'net use' always works fine but the route command 
 returns an error message like (i translate from french, sorry :-)
 Route add has failed: network access denied
 Does anybody knows this problem ?

Any policies that could limit the privileges of your users?


 Thanks for reply
 Best regards
 Chris

Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFq5N4Cj65ZxU4gPQRAjsBAJwJ2h+zWB7X5TQDTzW8yTHS/UAgQwCfbQDr
5icgV2oeptlfcu5P9ntkS1Q=
=BF7/
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script problem

2007-01-11 Thread Christophe Raluy

Hello,
I've changed my Samba Server 2.2.7a on a Mandrake 9.1 (2.4.21) for a 
Samba server 3.0.20-3.1 (with samba-vscan-clamav-3.0.20-3.1) on a 
Mandrake 2006 (2.6.12). I've always used for the samba clients (WXP pro) 
the logon scripts created by make_logon_script. In this script, I used 
to use the commands  listed below:

net use K: \\PDC\share
route add network mask mask gateway
Now the command 'net use' always works fine but the route command  
returns an error message like (i translate from french, sorry :-)

Route add has failed: network access denied
Does anybody knows this problem ?
Thanks for reply
Best regards
Chris
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script with Administrator rights

2006-10-26 Thread Toni Casueps


Thanks.
BeyondExec worked really well, and is freeware
The only problem I found is that you don't see the network shares that the 
user at that computer is using, but I guess it's normal since you are 
connecting as another user.


_
Horóscopo, tarot, numerología... Escucha lo que te dicen los astros. 
http://astrocentro.msn.es/


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script with Administrator rights

2006-10-25 Thread Toni Casueps
I am using a .bat logon script (the same for all users) and it avoids that I 
have to configure each user manually. But now I have to run a command that 
requires administrator rights on two files, and the command I write in the 
.bat file doesn't work.
Do you know how to run the logon script as the local machine Administrator? 
After all, the logon script is on the server and only me can change it so it 
wouldn't be dangerous.


_
¿Estás pensando en cambiar de coche? Todas los modelos de serie y extras en 
MSN Motor. http://motor.msn.es/researchcentre/


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script with Administrator rights

2006-10-25 Thread Michael Gasch

hi,

you can use runasspc

greez

Toni Casueps wrote:
I am using a .bat logon script (the same for all users) and it avoids 
that I have to configure each user manually. But now I have to run a 
command that requires administrator rights on two files, and the command 
I write in the .bat file doesn't work.
Do you know how to run the logon script as the local machine 
Administrator? After all, the logon script is on the server and only me 
can change it so it wouldn't be dangerous.


_
¿Estás pensando en cambiar de coche? Todas los modelos de serie y extras 
en MSN Motor. http://motor.msn.es/researchcentre/




--
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT Staff)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
   49 (0)341 - 3550 374

Fax:   49 (0)341 - 3550 399

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script with Administrator rights

2006-10-25 Thread Cleber P. de Souza

I've some suggestions for you, choose the best that apply:

1) Use poledit to change the Run or Run_Once registry keys to execute
your commands.
2) Use beyondexec
(http://www.beyondlogic.org/solutions/remoteprocess/BeyondExec.htm) to
execute all the command you want with Administrator rights on all the
up machines directly from your machine.
3) Choose other methods such as runasspc
(http://robotronic.de/runasspc/) or PsExec
(http://www.sysinternals.com/Utilities/PsExec.html) to delivery
packages that execute your commands or programs as Administrator.

On 10/25/06, Toni Casueps [EMAIL PROTECTED] wrote:

I am using a .bat logon script (the same for all users) and it avoids that I
have to configure each user manually. But now I have to run a command that
requires administrator rights on two files, and the command I write in the
.bat file doesn't work.
Do you know how to run the logon script as the local machine Administrator?
After all, the logon script is on the server and only me can change it so it
wouldn't be dangerous.

_
¿Estás pensando en cambiar de coche? Todas los modelos de serie y extras en
MSN Motor. http://motor.msn.es/researchcentre/

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba




--
***
Cleber P. de Souza
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] logon script does not get executed

2006-04-23 Thread Secretary
Hi,
Did you solve this problem?
I have recently upgraded Samba and have the same issue.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logon Script Not Working

2006-03-17 Thread mallapadi niranjan
Hi all

I have a samba pdc with openldap (samba 3.0.21c with Openldap 2.3.19).
i have some file servers(samba domain member server) .
using logon script, i map drives to my clients. so that they can access
 domain member server share declared through samba,
but when users login, some times, the logon script doesn't run at all, if
the system is rebooted,
it runs, but all the drives are not mapped. why is it so, please guide me.

the following is the logon script


@ echo off
net time \\mypdc /set /yes
net use p: /delete /yes
net use p: \\prjsrv01\projects file://prjsrv01/projects
net use o: /delete /yes
net use o: \\dbsvr01\newprjs file://dbsvr01/newprjs
net use v: /delete /yes
net use v: \\dbsvr01\signals file://dbsvr01/signals
net use q: /delete /yes
net use q: \\dbsvr01\quality file://dbsvr01/quality
net use h: /delete /yes
net use h: \\dbsvr01\intrmdls file://dbsvr01/intrmdls
net use i: /delete /yes
net use i: \\prjsrv01\datalib file://prjsrv01/datalib
net use t: /delete /yes
net use t: \\dbsvr01\training file://dbsvr01/training


The above logon script is called dcdrvs.bat which is in netlogon share
ie netlogon share declared in smb.conf of my PDC.
the dcdrvs.bat file is in

 dcdrvs.bat: ASCII text, with CRLF line terminators

i have more than 50 users, whose logon script is dcdrvs.bat, ie for all 50
users i have one logon

script.

Regards

Niranjan
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logon Script not executing upon login

2005-07-25 Thread Otto Müller

chris rothgeb schrieb am 19.07.2005 19:31:

Hi,

I am trying to execute a logon script when a user access the domain.
For some reason the following is not executing. I don't want to enable
roaming profiles so I have set 'logon home' and logon path' to null -
I thought perhaps that this was causing a problem; but it hasn't made
a difference. I also verified that my logon.bat is a DOS formatted
file.


I'm experiencing the same phenomen:

Until before, I had a NT4-based domain (i.e. NT-PDC, WinXP clients), 
with samba as a member-server and a logon script residing at the NT-PDC. 
It works right well to connect the users to the shares of the samba 
server. The NT-PDC does only user-authentication, as the roaming 
profiles already reside at samba.


Now I copy this logon script to the netlogon share of samba, cut the old
NT-PDC off the Lan and propagate samba to be the PDC
(security=domain-user, domain master=no-yes, local master=no-yes,
preferred master=no-yes, os level=20-255).

The user logs in sucessfully into the domain, but the logon script is 
not executed. I even don't find any hint in the log.smb (debug level = 
3) that an attempt is made to access my login.cmd.

Right from the complete UNC-Path \\dbtgvamelhu002\netlogon\login.cmd the
user can execute the script and it works well.

This malpractice (or better nonpractice) is mentioned in the mail
archives about 1-2 times every last four years, but I never found some
definitve solution (The one mentioned in Jan 2005: guest ok = yes is
included in the netlogon share).

BTW:
I have server-generated print jobs to be spooled by cups (via 
smb-backend) to printers locally attached at the WinXP-clients. The 
backend hangs with Unable to connect to SAMBA host. I hope the answer 
to my problem above will solve this too...


Any new ideas?

I'm running SuSE 9.0 Prof with samba 3.0.14a

Otto
# smb.conf is the main Samba configuration file. You find a full commented
# version at /usr/share/doc/packages/samba3/examples/smb.conf.SUSE if the
# samba-doc package is installed.
#
# modified by Otto Mueller [EMAIL PROTECTED] 2005-07-25 10:28:44

# Global parameters
[global]
netbios name = DBTGVAMELHU002
server string = VarialServer ZA2 [MELH]
workgroup = ZA02

# Samba always offers NetBIOS time service.
# This causes it to also be advertised:
time server = Yes

# Run a WINS server
wins support = Yes

interfaces = 127.0.0.1, eth0
bind interfaces only = Yes

log level = 1
syslog = 0

#   map to guest = Bad User

passwd program = /usr/bin/passwd %u
unix password sync = Yes
encrypt passwords = Yes
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false 
-M %u

load printers = Yes
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
printer admin = @ntadmin, root

unix charset = iso8859-15

# The logon script used for all users, Relative to [netlogon] share directory
logon script = login.cmd

logon path = \\%L\profiles\%u
logon home = 
ldap ssl = no

# Client-PC-abhaengige Protokoll-Einstellung
include = /etc/samba/smb.conf.%m

# The group identifying administrative users.
domain admin group = root

# Server role: ROLE_DOMAIN_MEMBER
security = DOMAIN
domain master = No
local master = No
preferred master = No
os level = 20

# Server role: ROLE_DOMAIN_PDC
# Perform domain authentication.
security = user
domain logons = Yes
# Always act as the local master browser and domain master browser.
# Do not allow any other system to take over these roles!
domain master = Yes
local master = Yes
preferred master = Yes
os level = 255

#
# Einkopieren der Dienstposten-Freigaben
#
include = /etc/samba/smb.conf.work

[profiles]
comment = Roaming Profiles
path = /var/opt/samba/profiles
create mask = 0600
security mask = 0700
directory mask = 0700
directory security mask = 0700
profile acls = Yes
csc policy = disable
read only = No
store dos attributes = Yes

[netlogon]
comment = Domain logon service
path = /var/opt/samba/netlogon
read only = Yes
locking = No
guest ok = Yes

[homes]
comment = Home Directories
valid users = %S
create mask = 0700
security mask = 0700
directory mask = 0700
directory security mask = 0700
inherit permissions = Yes
case sensitive = Yes
hide dot files = Yes
locking = Yes
browseable = No
read only = No
inherit acls = Yes

[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0600
printable = Yes
browseable = No

[print$]
comment = 

Re: [Samba] Logon Script not executing upon login

2005-07-25 Thread Gavin Henry
quote who=Otto Müller
 chris rothgeb schrieb am 19.07.2005 19:31:
 Hi,

 I am trying to execute a logon script when a user access the domain.
 For some reason the following is not executing. I don't want to enable
 roaming profiles so I have set 'logon home' and logon path' to null -
 I thought perhaps that this was causing a problem; but it hasn't made
 a difference. I also verified that my logon.bat is a DOS formatted
 file.

 I'm experiencing the same phenomen:

Try:

chmod 744 logon.bat

and:

perl -pi -e 's/\r\n/\n/g' logon.bat

just to confirm it's on dos format.


The permissions setting doesn't appear to be listed in the Samba Guide.

-- 
Kind Regards,

Gavin Henry.
Managing Director.

T +44 (0) 1224 279484
M +44 (0) 7930 323266
F +44 (0) 1224 742001
E [EMAIL PROTECTED]

Open Source. Open Solutions(tm).

http://www.suretecsystems.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon Script not executing upon login

2005-07-20 Thread Gerald (Jerry) Carter

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

chris rothgeb wrote:

| logon script = scripts\logon.bat

Probably should make this:

logon script = scripts\logon.bat





cheers, jerry


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC3mzVIR7qMdg1EfYRAue3AKCfHZyLdowKJ9FLADO6/A+Lk17SiACfdf8I
An+18sPcK7uWheiv55mBJaI=
=ui+F
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon Script not executing upon login

2005-07-20 Thread Gavin Henry
On Wednesday 20 Jul 2005 16:25, Gerald (Jerry) Carter wrote:
 chris rothgeb wrote:
 | logon script = scripts\logon.bat

 Probably should make this:

   logon script = scripts\logon.bat


I think:

http://us2.samba.org/samba/docs/man/Samba-Guide/happy.html#sbehap-massive-smbconfb

Needs to reflect this change then ;-)



 cheers, jerry

-- 
Kind Regards,

Gavin Henry.
Managing Director.

T +44 (0) 1224 279484
M +44 (0) 7930 323266
F +44 (0) 1224 742001
E [EMAIL PROTECTED]

Open Source. Open Solutions(tm).

http://www.suretecsystems.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logon Script not executing upon login

2005-07-19 Thread chris rothgeb
Hi,

I am trying to execute a logon script when a user access the domain. For
some reason the following is not executing. I don't want to enable
roaming profiles so I have set 'logon home' and logon path' to null - I
thought perhaps that this was causing a problem; but it hasn't made a
difference. I also verified that my logon.bat is a DOS formatted file.

Here's my smb.conf (FC4, Samba 3.0.14a):

# Global parameters
[global]
unix charset = LOCALE
workgroup = STRATA-G
interfaces = eth0, lo
bind interfaces only = Yes
passdb backend = ldapsam:ldap://sg-pdc.strata-g.com
enable privileges = Yes
username map = /etc/samba/smbusers
log level = 1
syslog = 0
log file = /var/log/samba/%m
max log size = 50
smb ports = 137 138 139 445
name resolve order = wins bcast hosts
time server = Yes
printcap name = CUPS
show add printer wizard = No
add user script = /opt/IDEALX/sbin/smbldap-useradd -m %u
delete user script = /opt/IDEALX/sbin/smbldap-userdel %u
add group script = /opt/IDEALX/sbin/smbldap-groupadd -p %g
delete group script = /opt/IDEALX/sbin/smbldap-groupdel %g
add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m %u
%g
delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x
%u %g
set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g %g %u
add machine script = /opt/IDEALX/sbin/smbldap-useradd -w %u
logon script = scripts\logon.bat
logon path =
logon drive = Z:
logon home =
domain logons = Yes
preferred master = Yes
wins support = Yes
ldap admin dn = cn=Manager,dc=strata-g,dc=com
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=People
ldap suffix = dc=strata-g,dc=com
ldap user suffix = ou=People
idmap backend = ldap:ldap://sg-pdc.strata-g.com
idmap uid = 1-2
idmap gid = 1-2
printer admin = root, chrisr
map acl inherit = Yes

[homes]
comment = %U Home Directory
path = /mnt/home/%U
valid users = %S
read only = No
browseable = No

[printers]
comment = SMB Print Spool
path = /var/spool/samba
guest ok = Yes
printable = Yes
browseable = No

[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
guest ok = Yes
locking = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = root, chrisr

Am I missing something really elementary??!

thanks,
-c.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] logon script not working

2005-06-24 Thread Matt Schwartz
I cannot figure out why my logon script does not work.  Here are my 
settings.  Here is my smb.conf:


login script = netlogon\logon.bat
[netlogon]
comment = Network Logon Service
path = /home/netlogon
admin users = @ntadmins
write list = @ntadmins
guest ok = Yes
locking = No

Here is my logon.bat:

@echo off
net time \\servername /set /yes
net use p: \\servername\profiles\%username%

When I execute logon.bat from a command line, the drive is properly 
mounted.  I want this script to execute at logon time like it is 
supposed to.  Any ideas as to why this fails? 


Thanks,
Matt


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] logon script not working

2005-06-24 Thread Guido Lorenzutti

login script = netlogon\logon.bat

wrong!

login script = logon.bat

right :)

Matt Schwartz escribió:

I cannot figure out why my logon script does not work.  Here are my 
settings.  Here is my smb.conf:


login script = netlogon\logon.bat
[netlogon]
comment = Network Logon Service
path = /home/netlogon
admin users = @ntadmins
write list = @ntadmins
guest ok = Yes
locking = No

Here is my logon.bat:

@echo off
net time \\servername /set /yes
net use p: \\servername\profiles\%username%

When I execute logon.bat from a command line, the drive is properly 
mounted.  I want this script to execute at logon time like it is 
supposed to.  Any ideas as to why this fails?

Thanks,
Matt




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] logon script not working

2005-06-24 Thread Mark Sarria

Matt,

Just curious, why are you mapping the profiles?

in almost all situations you would hide the profile share. I think what you 
intended to map is a share folder, not the users profile share.


if this is a windows 98 machine then you would need to add

net use H:\\server\home

to map the home folder, on XP it maps automatically

--mark

- Original Message - 
From: Matt Schwartz [EMAIL PROTECTED]

To: samba@lists.samba.org
Sent: Friday, June 24, 2005 4:30 PM
Subject: [Samba] logon script not working


I cannot figure out why my logon script does not work.  Here are my 
settings.  Here is my smb.conf:


login script = netlogon\logon.bat
[netlogon]
comment = Network Logon Service
path = /home/netlogon
admin users = @ntadmins
write list = @ntadmins
guest ok = Yes
locking = No

Here is my logon.bat:

@echo off
net time \\servername /set /yes
net use p: \\servername\profiles\%username%

When I execute logon.bat from a command line, the drive is properly 
mounted.  I want this script to execute at logon time like it is supposed 
to.  Any ideas as to why this fails?

Thanks,
Matt


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script execution intermittent

2005-06-03 Thread Robert Schetterer

Douglas Sterner schrieb:

Using Suse Enterprise 9.1 and Samba 3.013 and Win XP SP1 and SP2 
workstations. Users logon scripts are not being run during logon in a 
reliable fashion. The could run without issue for 10 logons and on the 
11th no mapped drives doesn't seem to be a specific workstation or XP 
version. Currently running with cranked up logging levels looking for a 
needle in a haystack. Anyone run into this?



Douglas Sterner 
 


Hi,
i am using samba on many servers with suse system, never had this 
failures with any type of windows

so i guess a typo in your netlogon scripts or something like this
maybe a double use of a driver letter , permissions problems etc , look 
at your log with tail -f at execute time

of the script and check event log of the win client
Regards
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script execution intermittent

2005-06-02 Thread Douglas Sterner
Using Suse Enterprise 9.1 and Samba 3.013 and Win XP SP1 and SP2 
workstations. Users logon scripts are not being run during logon in a 
reliable fashion. The could run without issue for 10 logons and on the 
11th no mapped drives doesn't seem to be a specific workstation or XP 
version. Currently running with cranked up logging levels looking for a 
needle in a haystack. Anyone run into this?


Douglas Sterner 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script

2005-03-09 Thread Jean-Jacques Moulis
On Tue,  8 Mar 2005 11:43:08 -0600 [EMAIL PROTECTED] wrote:

 
 
 Hi, i'm having roubles with samba as PDC, i want to modify some registry keys
 (relates with windows update) in  XP  2000 clients. I've tryed logons scripts
 but  it seems that i don have enough permissions to do that, so i tried to do 
 a
 ntconfig.pol but when the client logs on domain y just get the file
 (ntconfig.pol) and any changes are made.
 
 So how can i modify windows registry keys?
 
 Thanks


Go the ntconfig.pol way ! 
I assure you it works.

Use poledit from W2k to create the NTConfig.pol
Use the joined adm file.

After installation of ntconfig.pol in the netlogon share
the changes are applied in HKLM Software\Policies
the first time somebody logon on a client machine.

you can check with regedit.

Reboot the machine and the changes are in effect.

I'm using the same method to configure the XP firewall.


---SUS.ADM---

Go the ntconfig.pol way ! 
I assure you it works.

Use poledit from W2k to create the NTConfig.pol
Use the joined adm file.

After installation of ntconfig.pol in the netlogon share
the changes are applied in HKLM Software\Policies
the first time somebody logon on a client machine.

you can check with regedit.

Reboot the machine and the changes are in effect.

I'm using the same method to configure the XP firewall.

CLASS MACHINE

CATEGORY Windows Components

 CATEGORY Windows Update
KEYNAME Software\Policies\Microsoft\Windows\WindowsUpdate\AU

POLICY Configure Automatic Updates
VALUENAME NoAutoUpdate
VALUEOFF NUMERIC 1
VALUEON NUMERIC 0
 
PART Configure automatic updating: DROPDOWNLIST REQUIRED
   VALUENAME AUOptions
   ITEMLIST
NAME 2 - Notify for download and notify for install   
VALUE NUMERIC   2 
NAME 3 - Auto download and notify for install 
VALUE NUMERIC   3 DEFAULT
NAME 4 - Auto download and schedule the install   
VALUE NUMERIC   4 
   END ITEMLIST
END PART

PART The following settings are only required TEXT
END PART

PART and applicable if 4 is selected. TEXT
END PART

PART Scheduled install day:  DROPDOWNLIST REQUIRED
   VALUENAME ScheduledInstallDay
   ITEMLIST
NAME 0 - Every dayVALUE NUMERIC   
0 DEFAULT   
NAME 1 - Every Sunday VALUE NUMERIC   
1 
NAME 2 - Every Monday VALUE NUMERIC   
2 
NAME 3 - Every TuesdayVALUE NUMERIC   
3 
NAME 4 - Every Wednesday  VALUE NUMERIC   
4 
NAME 5 - Every Thursday   VALUE NUMERIC   
5 
NAME 6 - Every Friday VALUE NUMERIC   
6 
NAME 7 - Every Saturday   VALUE NUMERIC   
7 
   END ITEMLIST
END PART

PART Scheduled install time: DROPDOWNLIST REQUIRED
   VALUENAME ScheduledInstallTime
   ITEMLIST
NAME 00:00VALUE NUMERIC   0 
NAME 01:00VALUE NUMERIC   1
NAME 02:00VALUE NUMERIC   2
NAME 03:00VALUE NUMERIC   3 DEFAULT   

NAME 04:00VALUE NUMERIC   4
NAME 05:00VALUE NUMERIC   5
NAME 06:00VALUE NUMERIC   6
NAME 07:00VALUE NUMERIC   7
NAME 08:00VALUE NUMERIC   8
NAME 09:00VALUE NUMERIC   9
NAME 10:00VALUE NUMERIC   10
NAME 11:00VALUE NUMERIC   11
NAME 12:00VALUE NUMERIC   12
NAME 13:00VALUE NUMERIC   13
NAME 14:00VALUE NUMERIC   14
NAME 15:00VALUE NUMERIC   15
NAME 16:00VALUE NUMERIC   16
NAME 17:00VALUE NUMERIC   17
NAME 18:00VALUE NUMERIC   18
NAME 19:00VALUE NUMERIC   19
NAME 20:00VALUE NUMERIC   20
NAME 21:00VALUE NUMERIC   21
NAME 22:00VALUE NUMERIC   22
NAME 23:00VALUE NUMERIC   23
   END ITEMLIST
END PART

END POLICY

POLICY Use corporate SUS server instead of Windows Update

KEYNAME 

RE: [Samba] Logon script

2005-03-09 Thread Nathan Vidican

Logon scripts are supposed to be msdos batch files, check documentation on
regedit, but you should be able to do a line something like this:

C:\windows\regedit.exe \\server\name\dir\someregimports.reg

You'll need to figure out how to get regedit NOT to display a warning before
it changes the registry or imports the file - check help, documentation,
google on that one.

--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate  Tool Ltd.
http://www.wmplt.com/

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, March 08, 2005 12:43 PM
To: samba@lists.samba.org
Subject: [Samba] Logon script




Hi, i'm having roubles with samba as PDC, i want to modify some registry
keys (relates with windows update) in  XP  2000 clients. I've tryed logons
scripts but  it seems that i don have enough permissions to do that, so i
tried to do a ntconfig.pol but when the client logs on domain y just get the
file
(ntconfig.pol) and any changes are made.

So how can i modify windows registry keys?

Thanks

---
Este mensaje fue enviado por el servidor de correo de RedIFE:
correo.ife.org.mx
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script

2005-03-09 Thread Collen
Hmm, not quite true..
you can configure windows not to be able to use regedit, or to modify 
your registry! so useing regedit to modify your registry will not always 
work this way..

also logon scripts are not alway's batch files. we use VBS for example, 
but you can also use kix..!
windows simply executes the file from the logon script. !! so makeing, 
lets say an exe with vb would also work, or startingup an aplication!!

the only nice way is indeed poledit, or to have an update service 
running as admin in the background!!
NT recource kit provides good registry altering tools! you could use 
that as well..

Have fun..
Collen.
Nathan Vidican wrote:
Logon scripts are supposed to be msdos batch files, check documentation on
regedit, but you should be able to do a line something like this:
C:\windows\regedit.exe \\server\name\dir\someregimports.reg
You'll need to figure out how to get regedit NOT to display a warning before
it changes the registry or imports the file - check help, documentation,
google on that one.
--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate  Tool Ltd.
http://www.wmplt.com/
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, March 08, 2005 12:43 PM
To: samba@lists.samba.org
Subject: [Samba] Logon script

Hi, i'm having roubles with samba as PDC, i want to modify some registry
keys (relates with windows update) in  XP  2000 clients. I've tryed logons
scripts but  it seems that i don have enough permissions to do that, so i
tried to do a ntconfig.pol but when the client logs on domain y just get the
file
(ntconfig.pol) and any changes are made.
So how can i modify windows registry keys?
Thanks
---
Este mensaje fue enviado por el servidor de correo de RedIFE:
correo.ife.org.mx
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Logon script

2005-03-09 Thread Neal Chant
Hi

REGEDIT /S \\servername\netlogon\proxy.reg
runs here to import proxy.reg, .bat file, thou the clients are Win98 so
YMMV.

HTH
Neal

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf
Of Collen
Sent: 10 March 2005 12:20 AM
To: Nathan Vidican; samba@lists.samba.org
Subject: Re: [Samba] Logon script


Hmm, not quite true..
you can configure windows not to be able to use regedit, or to modify
your registry! so useing regedit to modify your registry will not always
work this way..

also logon scripts are not alway's batch files. we use VBS for example,
but you can also use kix..!
windows simply executes the file from the logon script. !! so makeing,
lets say an exe with vb would also work, or startingup an aplication!!

the only nice way is indeed poledit, or to have an update service
running as admin in the background!!
NT recource kit provides good registry altering tools! you could use
that as well..

Have fun..
Collen.

Nathan Vidican wrote:
 Logon scripts are supposed to be msdos batch files, check
documentation on
 regedit, but you should be able to do a line something like this:

 C:\windows\regedit.exe \\server\name\dir\someregimports.reg

 You'll need to figure out how to get regedit NOT to display a
warning before
 it changes the registry or imports the file - check help, documentation,
 google on that one.

 --
 Nathan Vidican
 [EMAIL PROTECTED]
 Windsor Match Plate  Tool Ltd.
 http://www.wmplt.com/

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of
 [EMAIL PROTECTED]
 Sent: Tuesday, March 08, 2005 12:43 PM
 To: samba@lists.samba.org
 Subject: [Samba] Logon script




 Hi, i'm having roubles with samba as PDC, i want to modify some registry
 keys (relates with windows update) in  XP  2000 clients. I've
tryed logons
 scripts but  it seems that i don have enough permissions to do that, so i
 tried to do a ntconfig.pol but when the client logs on domain y
just get the
 file
 (ntconfig.pol) and any changes are made.

 So how can i modify windows registry keys?

 Thanks

 ---
 Este mensaje fue enviado por el servidor de correo de RedIFE:
 correo.ife.org.mx
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Logon script

2005-03-09 Thread Van Sickler, Jim
You can also use regini.exe to paste
registry entries during logon.
One of our admins set up a batch
file to update the proxy settings this way.
(both files need to be in the NETLOGON share dir)

From logon.bat (logon script):

REM * Requirements: Network access to %LOGONSERVER%\NETLOGON, regini.exe
*
REM * Restrictions: NT Intel
*
REM
*
if %CMDPATH%== set CMDPATH=%LOGONSERVER%\NETLOGON
%CMDPATH%\regini.exe %CMDPATH%\proxy.ini

From proxy.ini:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings
ProxyEnable = REG_DWORD 0x0001
ProxyHttp1.1 = REG_DWORD 0x0001
ProxyServer = XXX.XXX.XXX.XXX:80
ProxyOverride = LOCAL; *.mycompany.com; intranetserver.mycompany.com

Hope this helps,
  Jim

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of
 [EMAIL PROTECTED]
 Sent: Tuesday, March 08, 2005 12:43 PM
 To: samba@lists.samba.org
 Subject: [Samba] Logon script
 
 
 
 
 Hi, i'm having troubles with samba as PDC, i want to modify 
 some registry
 keys (relates with windows update) in  XP  2000 clients. 
 I've tryed logons
 scripts but  it seems that i don have enough permissions to 
 do that, so i
 tried to do a ntconfig.pol but when the client logs on domain 
 y just get the
 file
 (ntconfig.pol) and any changes are made.
 
 So how can i modify windows registry keys?
 
 Thanks
 
 --
 -
 Este mensaje fue enviado por el servidor de correo de RedIFE:
 correo.ife.org.mx
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script

2005-03-09 Thread Jan Kellerhoff
Collen wrote:

 Hmm, not quite true..
 you can configure windows not to be able to use regedit, or to modify
 your registry! so useing regedit to modify your registry will not
 always work this way..

 also logon scripts are not alway's batch files. we use VBS for
 example, but you can also use kix..!
 windows simply executes the file from the logon script. !! so makeing,
 lets say an exe with vb would also work, or startingup an aplication!!

 the only nice way is indeed poledit, or to have an update service
 running as admin in the background!!
 NT recource kit provides good registry altering tools! you could use
 that as well..

 Have fun..
 Collen.

 Nathan Vidican wrote:

 Logon scripts are supposed to be msdos batch files, check
 documentation on
 regedit, but you should be able to do a line something like this:

 C:\windows\regedit.exe \\server\name\dir\someregimports.reg

 You'll need to figure out how to get regedit NOT to display a warning
 before
 it changes the registry or imports the file - check help, documentation,
 google on that one.

 -- 
 Nathan Vidican
 [EMAIL PROTECTED]
 Windsor Match Plate  Tool Ltd.
 http://www.wmplt.com/

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of
 [EMAIL PROTECTED]
 Sent: Tuesday, March 08, 2005 12:43 PM
 To: samba@lists.samba.org
 Subject: [Samba] Logon script




 Hi, i'm having roubles with samba as PDC, i want to modify some registry
 keys (relates with windows update) in  XP  2000 clients. I've tryed
 logons
 scripts but  it seems that i don have enough permissions to do that,
 so i
 tried to do a ntconfig.pol but when the client logs on domain y just
 get the
 file
 (ntconfig.pol) and any changes are made.

 So how can i modify windows registry keys?

 Thanks

 ---
 Este mensaje fue enviado por el servidor de correo de RedIFE:
 correo.ife.org.mx
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba



There is the issue with permissions, but you may use cpau.exe it is like
runas  but more features, then run it as the local system account.
It works fine, here is an example like I used it.
For the systemaccountpassword enter an empty space

%windir%\system32\cpau -u localhost\system -p  -ex reg DELETE
HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v Information Update /f


Kelly

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logon Script - edit registry

2005-03-09 Thread Jan Kellerhoff
There is the issue with permissions, but you may use cpau.exe it is like
runas  but more features, then run it as the local system account.
It works fine, here is an example like I used it.
For the systemaccountpassword enter an empty space

%windir%\system32\cpau -u localhost\system -p  -ex reg DELETE
HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v Information Update /f


Kelly

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script

2005-03-08 Thread csanab


Hi, i'm having roubles with samba as PDC, i want to modify some registry keys
(relates with windows update) in  XP  2000 clients. I've tryed logons scripts
but  it seems that i don have enough permissions to do that, so i tried to do a
ntconfig.pol but when the client logs on domain y just get the file
(ntconfig.pol) and any changes are made.

So how can i modify windows registry keys?

Thanks

---
Este mensaje fue enviado por el servidor de correo de RedIFE:
correo.ife.org.mx
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script

2005-03-03 Thread Torsten Wendav
Hey everybody;

I've got a problem with a Windows 98 machine on my network. I use Samba as a
storage server with a folder for every user. To create network drives I use
a script that will be copied to the client and then executed whenever a
machine logs on to the domain.
So far everything works fine. The script is being executed on logon.
However, the network drive can never be found afterwards. The funny thing
about all this is that if I execute the same script on a client later on, it
creates the network drive just fine. I assume it has something to do with
the timing of the logon process and the creation of the network drive.

Has anybody experienced similar problems or can give me a hint where to look
for a solution?
Thanks for all your help in advance,


Torsten





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon Script

2004-12-12 Thread Christoph Scheeder
Norman Zhang schrieb:
Hi,
Is [netlogon] only applicable for Samba Domain Controllers? I like to 
create use root preexec script to create home folders for first time 
users. I'm currently running ADS mode, and using KiXtart logon script. 
Would this work?

Regards,
Norman Zhang
Hi,
Creating homedirs for firsttime users is much better achived using the 
pam_mkhomdir.so pam module. This way the homedir gets created the first 
time the user authenticates by the pam system.
You don't need to script this process, which can be tricky...
Christoph
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon Script

2004-12-12 Thread Norman Zhang
Hi Christoph,
Is [netlogon] only applicable for Samba Domain Controllers? I like to 
create use root preexec script to create home folders for first time 
users. I'm currently running ADS mode, and using KiXtart logon script. 
Would this work?
Creating homedirs for firsttime users is much better achived using the 
pam_mkhomdir.so pam module. This way the homedir gets created the first 
time the user authenticates by the pam system.
You don't need to script this process, which can be tricky...
Thanks for your suggestion. Unfortunately, I had to disable 'obey pam 
restrictions' because https://bugzilla.samba.org/show_bug.cgi?id=1860. 
With it and security = ADS, machine_name home folders are created 
instead user_name home folders in homedir.

I think for now root preexec is the way to go? I need something to check 
for username, create folder if not existed, then assign permission?

Regards,
Norman Zhang
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Logon Script

2004-12-11 Thread Norman Zhang
Hi,
Is [netlogon] only applicable for Samba Domain Controllers? I like to 
create use root preexec script to create home folders for first time 
users. I'm currently running ADS mode, and using KiXtart logon script. 
Would this work?

Regards,
Norman Zhang
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] logon script, sometimes is no executed!!! Why?!?

2004-10-05 Thread Bruno David Rodrigues

Hello,

I don't know what to do anymore. I've set up a Samba server domain and
some windows clients (some XP, ME, 9x). The BIG problem arises on XP.
Sometimes, some users (random) just can't login, other it logs in but
don't run the logon script. Windows Me and 9x works good...

Thanks
bruno rodrigues
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon Script to go down one folder?

2004-09-25 Thread John H Terpstra
On Friday 24 September 2004 23:15, W. D. wrote:
 Hi Folks,

 Got Samba 3.0.7,1 running on FreeBSD--yippee!

 One thing that I noticed is that when a Windows
 user clicks on his folder named something like
 'username', there are a bunch of files there
 that he might 'accidently' delete:

 .cshrc
 .login
 .login_conf
 .mail_aliases
 .mailrc
 .profile
 .rhosts
 .shrc

 Is there some way to automatically log on the
 user to folder just below 'username' named
 something like 'username-folder'?  That way
 there would be a lot smaller chance that those
 configuration files might dissapear.

My network solution is:

[homes]
comment = User SMB Homes
path = /home/users/%U/Documents
valid users = %S
read only = No
browseable = No

No-one gets to the root of their home directory.

- John T.


 I guess the logon script could be something as
 simple as:

 cd %u-folder

 Where would I put it?  What would it be called?

 Thank you so kindly for your assistance!



 Start Here to Find It Fast!™ -
 http://www.US-Webmasters.com/best-start-page/ $8.77 Domain Names -
 http://domains.us-webmasters.com/

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
OpenLDAP by Example, ISBN: 0131488732
Other books in production.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] logon script running for xp clients but not 2000 clients

2004-09-01 Thread Mark Reidenbach
I've run across a problem where the windows 2000 clients do not run the 
netlogon script when they log in to my domain although the windows xp 
sp2 clients run the script fine.  If I run \\server\netlogon\logon.cmd 
from the run box once the 2000 machines are logged in, it runs the 
script and maps drives fine.  The other strange thing is that on the 
affected machines, \\server\homes maps to what is actually the netlogon 
share (the logon.cmd file is there).

Any help would be greatly appreciated.  Would this problem show up in 
any of the log files?  I'm running samba 3.0.6 as a PDC and here  my 
smb.conf file:

[global]
   workgroup = SAMBA
   netbios name = SERVER
   passdb backend = tdbsam
   restrict anonymous = 1
   lanman auth = No
   client NTLMv2 auth = Yes
   client lanman auth = No
   client plaintext auth = No
   disable netbios = Yes
   log file = /var/log/samba/%m.log
   log level = 3
   min protocol = NT1
   name resolve order = host bcast
   server signing = required
   add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s 
/bin/false -M %u
   logon script = logon.cmd
   logon drive = z:
   logon path =
   logon home = \\server\%U
   domain logons = Yes
   os level = 50
   lm announce = No
   preferred master = Yes
   domain master = Yes
   dns proxy = No
   wins support = No
   ldap ssl = no
   hosts allow = 127.0.0.1, 192.168.13.0/255.255.255.0, 
192.168.2.0/255.255.255.0, 192.168.100.0/255.255.255.0
   hosts deny = 0.0.0.0/0.0.0.0

[netlogon]
   comment = Network Logon Service
   path = /home/samba/netlogon
   guest ok = Yes
   browseable = No
[homes]
   comment = Home Directories
   path = /home/samba/homes/%u
   read only = No
   create mask = 0700
[printers]
   comment = All Printers
   path = /tmp
   read only = No
   create mask = 0777
   guest ok = Yes
   printable = Yes
   browseable = No
[public]
   comment = Public Files
   path = /home/samba/public
   read only = No
   create mask = 0777
   directory mask = 0777
[profiles]
   comment = Profiles
   path = /home/samba/profiles/%u
   read only = No
   browseable = No
[websites]
   comment = Websites
   path = /home/vhost
   force user = backup
   force group = web
   read only = No
   create mask = 0775
   force create mode = 0775
   security mask = 00
   directory mask = 0775
   force directory mode = 0775
   directory security mask = 00
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script problem

2004-07-01 Thread rruegner
Hi i ,sometimes got trouble with auto home mapping
and solved this with a logon script for this usersgroup
with this parameters loginscript
@echo off
echo %USERNAME%
REM expands to the inlogging user
net use x: \\bdc\%USERNAME% /persistent:no
REM will make sure that the users home is mounted to x:
Perhaps this is a way to solve your problem
Regards
Jason Lieurance schrieb:
Hello,
I'm running samba 3.02 on freebsd 4.7. Client systems are WinXP Pro Srv Pk 1.
Anyway, the logon script has issues, I added a pause statement to view it.
It says:
There are open files and/or incomplete directory searches pending on the
connection to Z:
The command completed successfully.
Z:\NET USE H: /HOME
The current directory is invalid.
END.
Where did Z: come from??? I never modified any path statements in the environment
varibles on the XP systems. I figured it was because the novell client was
installed at one time on a few systems and it had to do with that but it does the
same thing on a system with fresh install of WinXP PRO.
The weird thing is that with the novell client on one of the systems, if you check
workstation only and login with your domain UN  PW, it logs with the login script
just fine.
Any help would be greatly appreciated.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script problem

2004-06-30 Thread Jason Lieurance
Hello,

I'm running samba 3.02 on freebsd 4.7. Client systems are WinXP Pro Srv Pk 1.

Anyway, the logon script has issues, I added a pause statement to view it.

It says:

There are open files and/or incomplete directory searches pending on the
connection to Z:

The command completed successfully.

Z:\NET USE H: /HOME
The current directory is invalid.

END.


Where did Z: come from??? I never modified any path statements in the environment
varibles on the XP systems. I figured it was because the novell client was
installed at one time on a few systems and it had to do with that but it does the
same thing on a system with fresh install of WinXP PRO.

The weird thing is that with the novell client on one of the systems, if you check
workstation only and login with your domain UN  PW, it logs with the login script
just fine.

Any help would be greatly appreciated.

-- 
Jason



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script problem

2004-06-30 Thread Jason Lieurance
Hello,

Thanks for the reply. Yes, I have a line like that. It's a path problem as there is
no Z: drive, I believe it needs to be C: to execute.

Logon.bat:

NET TIME \\COMPAQ /SET /YES
NET USE * /D /Y
NET USE H: /HOME
NET USE M: \\COMPAQ\DRIVERS
NET USE P: \\COMPAQ\PROGRAMS
NET USE T: \\COMPAQ\TEMP
NET USE V: \\COMPAQ\VIPER

PAUSE

I don't know what to do next.

-- 
Jason

- Original Message -
From: Jason Lieurance [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, June 30, 2004 3:57 PM
Subject: [Samba] Logon script problem


Hello,

I'm running samba 3.02 on freebsd 4.7. Client systems are WinXP Pro Srv Pk
1.

Anyway, the logon script has issues, I added a pause statement to view it.

It says:

There are open files and/or incomplete directory searches pending on the
connection to Z:

The command completed successfully.

Z:\NET USE H: /HOME
The current directory is invalid.

END.


Where did Z: come from??? I never modified any path statements in the
environment
varibles on the XP systems. I figured it was because the novell client was
installed at one time on a few systems and it had to do with that but it
does the
same thing on a system with fresh install of WinXP PRO.

The weird thing is that with the novell client on one of the systems, if you
check
workstation only and login with your domain UN  PW, it logs with the login
script
just fine.

Any help would be greatly appreciated.

-- 
Jason



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Logon script problem

2004-06-30 Thread John H Terpstra
  Original Message 
 Subject: Re: [Samba] Logon script problem
 From: Jason Lieurance [EMAIL PROTECTED]
 Date: Wed, June 30, 2004 7:28 am
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 
 Hello,
 
 Thanks for the reply. Yes, I have a line like that. It's a path problem as there is
 no Z: drive, I believe it needs to be C: to execute.

When a user logs onto a domain member machine a drive connection is
automatically set up to the NETLOGON share.
The drive letter used is the last letter available (usually Z:). This
connection is mostly dropped on completion of logon.

Files can be executed off any drive mapping that is made. What makes you
believe otherwise?

Cheers,
John T.


 
 Logon.bat:
 
 NET TIME \\COMPAQ /SET /YES
 NET USE * /D /Y
 NET USE H: /HOME
 NET USE M: \\COMPAQ\DRIVERS
 NET USE P: \\COMPAQ\PROGRAMS
 NET USE T: \\COMPAQ\TEMP
 NET USE V: \\COMPAQ\VIPER
 
 PAUSE
 
 I don't know what to do next.
 
 -- 
 Jason
 
 - Original Message -
 From: Jason Lieurance [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Wednesday, June 30, 2004 3:57 PM
 Subject: [Samba] Logon script problem
 
 
 Hello,
 
 I'm running samba 3.02 on freebsd 4.7. Client systems are WinXP Pro Srv Pk
 1.
 
 Anyway, the logon script has issues, I added a pause statement to view it.
 
 It says:
 
 There are open files and/or incomplete directory searches pending on the
 connection to Z:
 
 The command completed successfully.
 
 Z:\NET USE H: /HOME
 The current directory is invalid.
 
 END.
 
 
 Where did Z: come from??? I never modified any path statements in the
 environment
 varibles on the XP systems. I figured it was because the novell client was
 installed at one time on a few systems and it had to do with that but it
 does the
 same thing on a system with fresh install of WinXP PRO.
 
 The weird thing is that with the novell client on one of the systems, if you
 check
 workstation only and login with your domain UN  PW, it logs with the login
 script
 just fine.
 
 Any help would be greatly appreciated.
 
 -- 
 Jason
 
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Logon script problem

2004-06-30 Thread Jason Lieurance

John H Terpstra said:

 When a user logs onto a domain member machine a drive connection is automatically
 set up to the NETLOGON share.
 The drive letter used is the last letter available (usually Z:). This connection
 is mostly dropped on completion of logon.

 Files can be executed off any drive mapping that is made. What makes you believe
 otherwise?


I understand that, but I don't know why it says:

Z:\NET USE H: /HOME
The current directory is invalid.

to every 'net use' line.

But with the novell client installed, it works fine.

Like I said, this is on a fresh installed of WinXP Pro with SRV PK 1 with admin
access on the clients. Now, if I load the novell client(the server the samba server
will replace), the logon script will work fine when checking 'workstation only' and
setting the domain tab to 'my domain' and putting in my UN  PW for the domain in
the client login box.

Doesn't make sense and log doesn't help



 Hello,

 I'm running samba 3.02 on freebsd 4.7. Client systems are WinXP Pro Srv Pk 1.

 Anyway, the logon script has issues, I added a pause statement to view it.

 It says:

 There are open files and/or incomplete directory searches pending on the
 connection to Z:

 The command completed successfully.

 Z:\NET USE H: /HOME
 The current directory is invalid.

 END.


 Where did Z: come from??? I never modified any path statements in the
 environment
 varibles on the XP systems. I figured it was because the novell client was
 installed at one time on a few systems and it had to do with that but it does
 the
 same thing on a system with fresh install of WinXP PRO.

 The weird thing is that with the novell client on one of the systems, if you
 check
 workstation only and login with your domain UN  PW, it logs with the login
 script
 just fine.

 Any help would be greatly appreciated.

 --
 Jason



 --
 To unsubscribe from this list go to the following URL and read the instructions:
  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script problem

2004-06-29 Thread Jason Lieurance
Hello,

I'm running samba 3.02 on freebsd 4.7. Client systems are WinXP Pro Srv Pk 1.

Anyway, the logon script has issues, I added a pause statement to view it.

It says:

There are open files and/or incomplete directory searches pending on the
connection to Z:

The command completed successfully.

Z:\NET USE H: /HOME
The current directory is invalid.

END.


Where did Z: come from??? I never modified any path statements in the environment
varibles on the XP systems. I figured it was because the novell client was
installed at one time on a few systems and it had to do with that but it does the
same thing on a system with fresh install of WinXP PRO.

The weird thing is that with the novell client on one of the systems, if you check
workstation only and login with your domain UN  PW, it logs with the login script
just fine.

Any help would be greatly appreciated.

-- 
Jason



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Logon Script Path problem

2004-06-05 Thread Honey Bajaj
Hi,

I was using Samba 3.0.2 on Redhat 9 with windows 98 clients with immense success, now 
with the incorporation of windows xp with in our network, I am facing few problems 
related to logon script, in windows 98 we used to use winset.exe to set users path, 
but windows xp didn,t support this, how can I enable to same feature with windows xp, 
I need to include path of few binaries in the logon script. Please help me out.

Thanks,
Honey
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script, help please

2004-05-05 Thread Mike Stewart
Ah, thanks John (and others).

You are correct... it is just a fileserver.  I hadn't realised that just connecting to 
a share was not the same as logging in (I'm quite new to Linux/Samba).  So I will now 
look at whether I need to set it up as a domain controller or if I will just leave a 
batch file in a common directory for users to sync their clocks when needed.

Again, many thanks for your assistance.

Mike
  - Original Message - 
  From: [EMAIL PROTECTED] 
  To: Mike Stewart 
  Sent: Friday, April 30, 2004 8:14 PM
  Subject: Re: [Samba] Logon script, help please



  I'm having trouble getting a logon script to work... 

  I think you've got at least two problems that I can identify... 

  I have created a DOS batch file (timesync.bat) and placed it in the scripts
  directory of the server. 

  What is the scripts directory?  You can't just put the login script in an 
arbitrary directory which happens to be named scripts. 

  Looking at the Samba/SWAT help file it mentions The script must be a
  relative path to the [netlogon] service but I don't have/can't find
  anything to do with netlogon ! 

  Exactly.  [netlogon] must be a file share defined on your samba server.  Then you 
need to put the logon script somewhere in that share, so that client PCs can connect 
to [netlogon] to access it. 

  My smb.conf Globals section is:- 

  You can't use the login script unless users are actually logging on to the 
server. Perhaps I'm missing something, but this doesn't look like a domain controller 
(or win9x logon server) configuration to me.  It looks like an ordinary fileserver 
setup.  Connecting to a share on a fileserver is not logging in. 



  ---
  Outgoing mail is certified Virus Free.
  Checked by AVG anti-virus system (http://www.grisoft.com).
  Version: 6.0.659 / Virus Database: 423 - Release Date: 21/04/2004
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script, help please

2004-04-30 Thread Mike Stewart
Hi,

I'm having trouble getting a logon script to work...

I have created a DOS batch file (timesync.bat) and placed it in the scripts
directory of the server.

The file contains only one line - net time \\ptlserver /SET /y

My smb.conf Globals section is:-

[global]
 workgroup = PTLTRAIN
 netbios name = PTLSERVER
 server string = Llandrindod Trainee Server
 encrypt passwords = Yes
 ssl CA certDir = /etc/ssl/certs
 log file = /var/log/samba.%m
 max log size = 50
 time server = Yes
 load printers = No
 disable spoolss = Yes
 show add printer wizard = No
 logon script = scripts\timesync.bat
 dns proxy = No
 wins server = 172.16.1.50
 hosts allow = 172.16.15. 127.
 veto files = /*.mp3/

Looking at the Samba/SWAT help file it mentions The script must be a
relative path to the [netlogon] service but I don't have/can't find
anything to do with netlogon !

I was hoping that the file would load and run as soon as the user logged in
to the server but nothing seems to happen, no error message either...am I
doing something wrong ?   I can run the command net time \\ptlserver /SET
/y from W2k Start/Run and it works.

Using Slackware 9.0/Samba 2.2.8a

Thanks

Mike Stewart


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.659 / Virus Database: 423 - Release Date: 16/04/2004


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script, help please

2004-04-30 Thread Mike Stewart
Thanks Frode.

I didn't see anything in the help files about netlogon being crucial, or
even what it was for !

Here's what I have so far

(/etc/samba is where my installation has put smb.conf)

So...

I've created /etc/samba/netlogon and the share..

[netlogon]
path = /etc/samba/netlogon
browseable = No
writeable = No

I've created a subdirectory under netlogon named scripts and placed
timesync.bat  in there.

In my Global section I havelogon script = scripts\timesync.bat


Well, it still doesn't seem to be doing anything at all when the user logs
in :-(

If I use the Windows Start,Run, \\ptlserver\netlogon\scripts\timesync.bat
after the user has logged in it does run the batch file and sync the clock.

I'm running this system purely as a file server for w2k clients, it's not in
any sort of domain... is that going to make a difference ?

I was hoping to automate this sync but if I can't get it to work I'll just
put the batch file into the \home\masters directory and tell users to run it
manually.

Thanks

Mike







- Original Message - 
From: Frode Lillerud [EMAIL PROTECTED]
To: 'Mike Stewart' [EMAIL PROTECTED]
Sent: Friday, April 30, 2004 12:27 PM
Subject: RE: [Samba] Logon script, help please


 The [netlogon] share is crucial when using logon-scripts.

 Add this in your smb.conf and restart samba:
 [netlogon]
 path = /var/lib/samba/netlogon
 browseable = no
 writable = no

 And since you've added 'logon script = scripts\timesync.bat' in your
 global section, it means you need to copy the timesync.bat file into
 /var/lib/samba/netlogon/scripts.

 Frode

 |-Original Message-
 |From: Mike Stewart [mailto:[EMAIL PROTECTED]
 |Sent: 30. april 2004 13:23
 |To: Frode Lillerud
 |Subject: Re: [Samba] Logon script, help please
 |
 |Thanks, I'll add the pause so I can see what's happening.
 |
 |Netlogon share ?  Ummm... I have not created one and can't see anything
 in
 |the Samba help about it.
 |
 |Mike
 |
 |- Original Message -
 |From: Frode Lillerud [EMAIL PROTECTED]
 |To: 'Mike Stewart' [EMAIL PROTECTED]
 |Sent: Friday, April 30, 2004 12:18 PM
 |Subject: RE: [Samba] Logon script, help please
 |
 |
 | You should add the command 'pause' to the end of your script, it's
 makes
 | it easier to see if it's started.
 |
 | Have you made a [netlogon] share in your smb.conf?
 |
 | You should be able to run \\server\netlogon\login.bat from your
 Windows
 | computer when everything is set up correctly.
 |
 | Frode
 |
 | |-Original Message-
 | |From: [EMAIL PROTECTED] [mailto:samba-
 | |[EMAIL PROTECTED] On Behalf Of Mike Stewart
 | |Sent: 30. april 2004 11:24
 | |To: Samba
 | |Subject: [Samba] Logon script, help please
 | |
 | |Hi,
 | |
 | |I'm having trouble getting a logon script to work...
 | |
 | |I have created a DOS batch file (timesync.bat) and placed it in the
 | scripts
 | |directory of the server.
 | |
 | |The file contains only one line - net time \\ptlserver /SET /y
 | |
 | |My smb.conf Globals section is:-
 | |
 | |[global]
 | | workgroup = PTLTRAIN
 | | netbios name = PTLSERVER
 | | server string = Llandrindod Trainee Server
 | | encrypt passwords = Yes
 | | ssl CA certDir = /etc/ssl/certs
 | | log file = /var/log/samba.%m
 | | max log size = 50
 | | time server = Yes
 | | load printers = No
 | | disable spoolss = Yes
 | | show add printer wizard = No
 | | logon script = scripts\timesync.bat
 | | dns proxy = No
 | | wins server = 172.16.1.50
 | | hosts allow = 172.16.15. 127.
 | | veto files = /*.mp3/
 | |
 | |Looking at the Samba/SWAT help file it mentions The script must be
 a
 | |relative path to the [netlogon] service but I don't have/can't find
 | |anything to do with netlogon !
 | |
 | |I was hoping that the file would load and run as soon as the user
 | logged in
 | |to the server but nothing seems to happen, no error message
 either...am
 | I
 | |doing something wrong ?   I can run the command net time
 \\ptlserver
 | /SET
 | |/y from W2k Start/Run and it works.
 | |
 | |Using Slackware 9.0/Samba 2.2.8a
 | |
 | |Thanks
 | |
 | |Mike Stewart
 | |
 | |
 | |---
 | |Outgoing mail is certified Virus Free.
 | |Checked by AVG anti-virus system (http://www.grisoft.com).
 | |Version: 6.0.659 / Virus Database: 423 - Release Date: 16/04/2004
 | |
 | |
 | |--
 | |To unsubscribe from this list go to the following URL and read the
 | |instructions:  http://lists.samba.org/mailman/listinfo/samba
 |
 |
 |
 |
 |
 |---
 |Outgoing mail is certified Virus Free.
 |Checked by AVG anti-virus system (http://www.grisoft.com).
 |Version: 6.0.659 / Virus Database: 423 - Release Date: 16/04/2004





---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.659 / Virus Database: 423 - Release Date: 16/04/2004


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] logon script question

2004-03-15 Thread Lukas Meyer
Hi list

I'm wondering if it and how it is possible to add printers to a 
workstation with a logon script like mounting shares. I can't find 
anything about this on the inetnet so is this possible?

regards
lm
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


AW: [Samba] logon script question

2004-03-15 Thread Stumpfl Markus
yes:

@echo Installing Printers ...
rundll32 printui.dll,PrintUIEntry /dn /n \\server\printer /q
rundll32 printui.dll,PrintUIEntry /in /n \\server\printer /q /u

Markus


 -Ursprüngliche Nachricht-
 Von: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Im
 Auftrag von Lukas Meyer
 Gesendet: Montag, 15. März 2004 12:20
 An: [EMAIL PROTECTED]
 Betreff: [Samba] logon script question
 
 Hi list
 
 I'm wondering if it and how it is possible to add printers to a
 workstation with a logon script like mounting shares. I can't find
 anything about this on the inetnet so is this possible?
 
 regards
 lm
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] logon script question

2004-03-15 Thread Mailing-OIT
Hi Lukas!

Am Montag, 15. März 2004 12:19 schrieb Lukas Meyer:
 Hi list

 I'm wondering if it and how it is possible to add printers to a
 workstation with a logon script like mounting shares. I can't find
 anything about this on the inetnet so is this possible?

use the net command in the logon scripit like so: 
net use LPTX:  \\MASCHINENAME\PRINTERSHARENAME

e.g.
net use LPT1: \\myserver\my1stprinter

will connect your my1stprinter an server myserver to your local Windows 
PrinterPort 1.

HTH


 regards
 lm
Greets
Wolfgang

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script

2004-01-16 Thread Gilberto Nunes
Hi

   I make a perl script, to build on the fly login script to my users.
   In this script, there's some group that called, to mount specif shares.
   However, when logged on to the domain, with the student group, for
example,
   I received this message, for the syslog:

 [2004/01/16 16:37:13, 0] groupdb/mapping.c:init_group_mapping(139)
Jan 16 16:37:13 samba smbd[8299]:   Failed to open group mapping database
Jan 16 16:37:13 samba smbd[8299]: [2004/01/16 16:37:13, 0]
groupdb/mapping.c:get_group_from_gid(655)
Jan 16 16:37:13 samba smbd[8299]:   failed to initialize group
mappingFailed to open group mapping database
Jan 16 16:37:13 samba smbd[8299]: [2004/01/16 16:37:13, 0]
groupdb/mapping.c:get_group_from_gid(655)
Jan 16 16:37:13 samba smbd[8299]:   failed to initialize group
mappingget_alias_user_groups: gid of user gnunes doesn't exist. Check your
/etc/passwd and /etc/group files
Jan 16 16:39:46 samba sshd(pam_unix)[8405]: session opened for user root
by (uid=0)

  Note that users gnunes, is enclosed in the student group.

  What's wrong with this?

This the logon script:

#!/usr/bin/perl

$server=samba;

# Log Start
($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time);
open LOG, /var/log/samba/netlogon.log;
print LOG $mon/$mday/$year $hour:$min:$sec - User $ARGV[0] logged into
$ARGV[1]\n;
close LOG;

# login script start

open (LOGON,/home/netlogon/.$ARGV[0].bat);

print LOGON [EMAIL PROTECTED] OFF\r\n;
print LOGON NET TIME $server /SET /YES\r\n;
print LOGON NET USE H: /HOME\r\n;


if ($ARGV[1] eq student || $ARVG[0] eq student)
{
print LOGON NET USE M: $server\\publico\\pub_student\r\n;
}


print LOGON $server\\NETLOGON\\.logon.bat\r\n;
close LOGON;



-- 
Gilberto Nunes
Suporte Rede Bonja - Bom Jesus/Ielusc
Fone: 433-0155 - ramal 235
www.ielusc.br - [EMAIL PROTECTED]
Linux User nº 199930
ICQ #136176504
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script and XP

2003-12-15 Thread Wayne Dozier(Samba)
Here is the problem.  I am running samba 3.0 and I cannot 
seem to get my logon script to work with XP.  I want to to 
be able to map a drive for a share which is called 
coursefolders.  I am including a copy of my smb.conf file. 
I have created the necessary netlogon.bat file in a 
folder called netlogon.  I may have my syntax wrong in the 
actual netlogon.bat file but i am not sure.

smb.conf file:

[global]
	log file = /var/log/samba/log.%m
	smb passwd file = /etc/samba/smbpasswd
	load printers = yes
	admin users = billybob
	socket options = TCP_NODELAY
	interfaces = eth0.2
	domain master = yes
	encrypt passwords = yes
	add machine script = /usr/sbin/useradd -d /dev/null -g 
100 -s /bin/false -M %u
	share modes = no
	printer admin = billybob 
	passwd program = /usr/bin/passwd %u
	dns proxy = no
	netbios name = DARWIN2
	server string = Darwin Print Server
	printing = bsd
	local master = yes
	remote announce = 10.1.255.255
	workgroup = GCNET2
	logon drive = h:
	logon script = netlogon.bat
	os level = 65
	printcap name = /etc/printcap
	security = user
	max log size = 200
	domain logons = yes

[homes]
writable = yes
comment = Home Directories
guest ok = no
browseable = no
locking = no
create mask = 0755
directory mask = 0755
oplocks = yes

 [netlogon]
   comment = Network Logon Service
   path = /etc/samba/netlogon
   guest ok = no
   read only = yes
   oplocks = no
   writable = no
   share modes = no
# NOTE: If you have a BSD-style print system there is no 
need to 
# specifically define each individual printer
[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   printable = yes
   
[coursefolders]
	path = /home/coursefolders
	writable = yes
	comment = Course Folders
	locking = no

and for my netlogon.bat file:

net use f:\\darwin2\coursefolders /yes

Any help would be greatly appreciated.  I have been 
searchig online with everything I have tried leading only 
to failure.

Thanks in advance.

Wayne
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script and XP

2003-12-15 Thread Edd Payne

 and for my netlogon.bat file:

 net use f:\\darwin2\coursefolders /yes

Try net use F: \\darwin2\coursefolders
note the space between the : and the \\

HTH
edd
-- 
Edd Payne
IT Co-ordinator
University of London Union
Malet Street, London WC1E 7HY

tel: 020 7664 2060
fax: 020 7436 4604

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script and XP

2003-12-15 Thread Wayne Dozier(Samba)
Thanks, this fixed it.  I did not even notice that typo. 
Great eye Edd.

Thanks

Wayne

On Mon, 15 Dec 2003 15:59:36 +
 Edd Payne [EMAIL PROTECTED] wrote:

and for my netlogon.bat file:

net use f:\\darwin2\coursefolders /yes
Try net use F: \\darwin2\coursefolders
note the space between the : and the \\
HTH
edd
--
Edd Payne
IT Co-ordinator
University of London Union
Malet Street, London WC1E 7HY
tel: 020 7664 2060
fax: 020 7436 4604
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script based on group

2003-11-04 Thread Gémes Géza
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] írta:
| Hi there
|
| Is it possible to have a logon script that checks which groups the
users are a part of and then runs a logon script based on that? I've
tried %G.bat but it doesn't work, %U.bat works though, but that's not
what I want
|
| Thanks in advance
| Roy
|
| -
| WebMail fra Tele2 http://www.tele2.no
| -
|
I would suggest to try a dinamicaly generated logon script, with
specifying in your netlogon share root preexec = logonscriptgenerator,
root postexec = remove all logon scripts
and in logonscriptgenerator you could check for UNIX group membership,
e.g. with getent group | grep username 
Good Luck!

Geza Gemes
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/p/Ej/PxuIn+i1pIRAmuzAKCYW+BL2FzCZCJhfwqLOLB2HH2h5wCdHVtO
Z23i39dk8DgFWHwkit22xYo=
=IGnp
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script pausing logon?

2003-09-08 Thread Max Harvey
Hi,

On our (now replaced) Win2k PDC, the logon script run form netlogon
would have to finish before the user would continue to log on.

This doesn't seem to be the case for my samba PDC (2.2.8a, RH7.3, Win2k
Clients).

To questions...


1:Is this normal to not wait for the script to finish, or have I messed
up?

2:If I did want the previous behaviour, is there a way of forcing it?


Cheers


Max.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] logon script won't start anymore after update 2.2.3a-2.2.8.a

2003-08-20 Thread Sistemas
Hello Carsten:

I am a newbie to linux and samba, so maybe what I say is stupid, but I use
Suse linux, and when I upgraded to Samba 2.2.8a and rebooted (I configured
Samba to use the startup script smb that comes with the binaries), I cood
not access Samba anymore. At last I realized that the script was only
starting smbd and not nmbd, so I modified the script so it starts nmbd too,
and had no more problems.

Hope its useful to you.
Regards,
LauZ

- Original Message -
From: Carsten Springenberg [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, August 18, 2003 5:18 AM
Subject: [Samba] logon script won't start anymore after update
2.2.3a -2.2.8.a


 Dear list,

 last friday I had a frustrating experience during the update of my samba
 server. I've been running samba since 1998, now there are 50 users with
 win2k-boxes attached - the samba server acting as PDC. Becauce of a swap
 of the old server I finally decided to update to 2.2.8a. What I did (in
 general):

 - installed the new server with suse 8.2 prof
 - Installed the suse-rpms for 2.2.8a on the new server.
 - shut down smdb/nmdb on the old server and changed ip and name
 - copied smb.conf, smbpasswd, secrets.tdb to the new server
 - added all the unix users
 - changed ip and name on the new server to the values of the old server
 - started smdb/nmdb on the new server

 Everything seemed to work. I could logon and got my samba-shares - but
 as I found out I got my samba-shares because they have been mapped
 previously and not because of my logon script. Further experiments
 brought up that the logon scripts didn't run at all at logon-time.

 I tried a lot concerning logon script (%u instead %U, changed it to a
 f. e. to logon.bat) but without success. The logon script just sets
 the time and maps the shars. The [netlogon]-share doesn't seem to be the
 problem either. I read all in the archives concerning this point (and
 also googled) but couldn't find something usefull.

 I am not that new to samba but am at a loss anyway.

 So I reversed the changes and fired up my old samba server and am
 looking for ideas now.

 Here my smb.conf:

 [global]
 workgroup = workgroup-name
 netbios name = SAMBA01
 server string = SambaPDC 2.2.3a
 interfaces = ip-address/24
 security = DOMAIN
 encrypt passwords = Yes
 map to guest = Bad User
 passwd program = /usr/bin/passwd
 username map = /etc/user.map
 log level = 1
 log file = /var/log/log.%m
 name resolve order = host wins bcast lmhosts
 socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
 character set = ISO8859-1
 add user script = /usr/sbin/useradd -g machines -c Machine -d /dev/null
 -s /bin/false %m$
 logon script = %U.bat
 logon path = \\%L\profiles\%U
 logon drive = U:
 domain logons = Yes
 os level = 65
 domain master = True
 wins proxy = Yes
 wins support = Yes
 kernel oplocks = No
 winbind uid = 1-2
 winbind gid = 1-2
 winbind separator = +
 admin users = root otheruser
 force create mode = 022
 directory mask = 0777
 force directory mode = 0777
 nt acl support = No
 printing = lprng

 [profiles]
 comment = Admins Profiles
 path = /data/smbprofiles
 read only = No
 nt acl support = No
 guest ok = Yes
 browseable = No

 [homes]
 comment = Heimatverzeichnis
 path = /data/user/%u
 read only = No
 create mask = 0750

 [netlogon]
 path = /data/netlogon
 read only = No
 guest ok = Yes

 ... some share-defs ...


 Any ideas would be welcome, thanks,

 Carsten


 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] logon script won't start anymore after update 2.2.3a -2.2.8.a

2003-08-18 Thread Carsten Springenberg
Dear list,

last friday I had a frustrating experience during the update of my samba 
server. I've been running samba since 1998, now there are 50 users with 
win2k-boxes attached - the samba server acting as PDC. Becauce of a swap 
of the old server I finally decided to update to 2.2.8a. What I did (in 
general):

- installed the new server with suse 8.2 prof
- Installed the suse-rpms for 2.2.8a on the new server.
- shut down smdb/nmdb on the old server and changed ip and name
- copied smb.conf, smbpasswd, secrets.tdb to the new server
- added all the unix users
- changed ip and name on the new server to the values of the old server
- started smdb/nmdb on the new server
Everything seemed to work. I could logon and got my samba-shares - but 
as I found out I got my samba-shares because they have been mapped 
previously and not because of my logon script. Further experiments 
brought up that the logon scripts didn't run at all at logon-time.

I tried a lot concerning logon script (%u instead %U, changed it to a 
f. e. to logon.bat) but without success. The logon script just sets 
the time and maps the shars. The [netlogon]-share doesn't seem to be the 
problem either. I read all in the archives concerning this point (and 
also googled) but couldn't find something usefull.

I am not that new to samba but am at a loss anyway.

So I reversed the changes and fired up my old samba server and am 
looking for ideas now.

Here my smb.conf:

[global]
	workgroup = workgroup-name
	netbios name = SAMBA01
	server string = SambaPDC 2.2.3a
	interfaces = ip-address/24
	security = DOMAIN
	encrypt passwords = Yes
	map to guest = Bad User
	passwd program = /usr/bin/passwd
	username map = /etc/user.map
	log level = 1
	log file = /var/log/log.%m
	name resolve order = host wins bcast lmhosts
	socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
	character set = ISO8859-1
	add user script = /usr/sbin/useradd -g machines -c Machine -d /dev/null 
-s /bin/false %m$
	logon script = %U.bat
	logon path = \\%L\profiles\%U
	logon drive = U:
	domain logons = Yes
	os level = 65
	domain master = True
	wins proxy = Yes
	wins support = Yes
	kernel oplocks = No
	winbind uid = 1-2
	winbind gid = 1-2
	winbind separator = +
	admin users = root otheruser
	force create mode = 022
	directory mask = 0777
	force directory mode = 0777
	nt acl support = No
	printing = lprng

[profiles]
comment = Admins Profiles
path = /data/smbprofiles
read only = No
nt acl support = No
guest ok = Yes
browseable = No
[homes]
comment = Heimatverzeichnis
path = /data/user/%u
read only = No
create mask = 0750
[netlogon]
path = /data/netlogon
read only = No
guest ok = Yes
... some share-defs ...

Any ideas would be welcome, thanks,

Carsten

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] logon script won't start anymore after update 2.2.3a - 2.2.8.a

2003-08-18 Thread Kopmann, Goetz

Hi Carsten,

maybe I had a similar problem. Try to rejoin the domain with 1 workstation.
Is the logonscript executed now ?

Götz


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] logon script won't start anymore after update 2.2.3a

2003-08-18 Thread Martin Thomas



Message: 26
Date: Mon, 18 Aug 2003 10:18:24 +0200
From: Carsten Springenberg [EMAIL PROTECTED]
Subject: [Samba] logon script won't start anymore after update 2.2.3a
- 2.2.8.a
To: [EMAIL PROTECTED]
Message-ID: [EMAIL PROTECTED]
Content-Type: text/plain; charset=us-ascii; format=flowed

Dear list,

last friday I had a frustrating experience during the update of my samba 
server. I've been running samba since 1998, now there are 50 users with 
win2k-boxes attached - the samba server acting as PDC. Becauce of a swap 
of the old server I finally decided to update to 2.2.8a. What I did (in 
general):

- installed the new server with suse 8.2 prof
- Installed the suse-rpms for 2.2.8a on the new server.
- shut down smdb/nmdb on the old server and changed ip and name
- copied smb.conf, smbpasswd, secrets.tdb to the new server
- added all the unix users
- changed ip and name on the new server to the values of the old server
- started smdb/nmdb on the new server

Everything seemed to work. I could logon and got my samba-shares - but 
as I found out I got my samba-shares because they have been mapped 
previously and not because of my logon script. Further experiments 
brought up that the logon scripts didn't run at all at logon-time.

I tried a lot concerning logon script (%u instead %U, changed it to a 
f. e. to logon.bat) but without success. The logon script just sets 
the time and maps the shars. The [netlogon]-share doesn't seem to be the 
problem either. I read all in the archives concerning this point (and 
also googled) but couldn't find something usefull.

I am not that new to samba but am at a loss anyway.

So I reversed the changes and fired up my old samba server and am 
looking for ideas now.

...

It seems that you forgot the transfer the Machine and Domain SID to
the new configuration. The domain logon does not work correctly
if the Server SID is not the one that is cached in the clients registry
during domain join.

There are several possibilities:
* use smbpasswd to get the SIDs from a running Domain controller,
  see the documentation of smbpasswd, the options where added
  in 2.2.8 (or 2.2.7). Although this is the recommended method it did not 
  work for me,  I could transfer the Domain SID with smbpasswd but 
  somehow the Machine-SID seems to be importat to but did not
  transfer correctly
* get the SID from the file MACHINE.SID (only available in older
  Samba versions, I think your 2.2.3a used this file) on your old server, 
  transfer the SID to the new server and  import the SID using smbpasswd.
* since you used an old Samba the SID should be in the file MACHINE.SID,
  copy this file to your new box in the directory where secrets.tbd
  is located, stop Samba, move the file secrets.tdb away (backup),
  restart Samba. On startup Samba can not find secrets.tbd which
  you moved away and should look for the file MACHINE.SID,
  import its contents (the SID) into a newly created secrets.tdb and
  delete MACHINE.SID (I'm not shure but you can grep the
  Samba source code for MACHINE.SID and see how this is
  implemented)
* The method that worked me, since I already had a secrets.tdb
  on the old server:
  - copy the file secrets.tdb on your new server to another directory
  - stop Samba
  - replace the file secrets.tdb on your new machine with the
file secrets.tdb from your old server (the SIDs are in this file)
  - start Samba

Another reason for your problem might be that the the startup scripts 
are not accessable for the user that logs in.

Hope this helps, good luck
Martin


---
Martin THOMAS
University of Kaiserslautern, Institute of Environmental Engineering,
Kaiserslautern (ZIP 67663), Germany
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon Script

2003-06-08 Thread D. Rick Anderson
Create a share [netlogon] that your users only have read access to. The
logon script = parameter will then be relative to the path designated in
that share.

For instance, if [netlogon] points to /usr/local/samba/netlogon and you
have login script = %U.bat then /usr/local/samba/netlogon/fred.bat will be
launched when the user fred authenticates.

HTH

Rick



 I created script files for users and the machines to execute when the
 machines connected or the users logged on to the server.  I wasn't sure
 where the files were suppose to go, so I put logon script =
 path%U.bat and logon script = path%I.bat.  Would that syntax work
 and how do I test it?  Do the files need to be executable?

 --
 Note: When you reply to this message, please include the mailing
   list address and my email address in To: and/or Cc: with
   any proper combination

 *
 Signed,
 SoloCDM
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] logon script not working

2003-03-16 Thread Woerns Urstmann
Hi,

my logon.bat was working for weeks now (since i created it) - and recently i 
recompiled my samba with ldap support. now ldap and everything works really 
well, but: the logon.bat won't get executed! i tried changing the folder, 
changing the rights of the file, renaming it and everything. but the thing 
won't execute! samba is not givin any error, nor does my winxp client.
when i browse to \\linux\netlogon and double click logon.bat everything gets 
mapped wonderful. but not automatically.

-rwxrwxrwx1 root root  471 Mar  9 
15:12 /samba/netlogon/logon.bat

smb.conf:

domain logons = Yes
logon script = logon.bat
[netlogon]
comment = Domnenanmeldedienst
path= /samba/netlogon
public  = no
locking = no
writeable   = no
browseable  = no

#also tried the following:
#[netlogon]
#comment = Network Logon Service
#path = /samba/netlogon
#public = no
#writeable = no
#browseable = no
#[netlogon]
#comment = Network Logon Service
#path = /samba/netlogon
#write list = 101
#create mask = 0640
#hide unreadable = Yes

thanks a log
woerns

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] logon script not working

2003-03-16 Thread Stéphane Purnelle
Le dim 16/03/2003 à 19:00, Woerns Urstmann a écrit :
 Hi,
 
 my logon.bat was working for weeks now (since i created it) - and recently i 
 recompiled my samba with ldap support. now ldap and everything works really 
 well, but: the logon.bat won't get executed! i tried changing the folder, 
 changing the rights of the file, renaming it and everything. but the thing 
 won't execute! samba is not givin any error, nor does my winxp client.
 when i browse to \\linux\netlogon and double click logon.bat everything gets 
 mapped wonderful. but not automatically.
 
 -rwxrwxrwx1 root root  471 Mar  9 
 15:12 /samba/netlogon/logon.bat
 
 smb.conf:
 
 domain logons = Yes
 logon script = logon.bat
 [netlogon]
 comment = Domänenanmeldedienst
 path= /samba/netlogon
 public  = no
 locking = no
 writeable   = no
 browseable  = no
 
 #also tried the following:
 #[netlogon]
 #comment = Network Logon Service
 #path = /samba/netlogon
 #public = no
 #writeable = no
 #browseable = no
 #[netlogon]
 #comment = Network Logon Service
 #path = /samba/netlogon
 #write list = @101
 #create mask = 0640
 #hide unreadable = Yes
 
 thanks a log
 woerns

The samba schéma contain a scriptpath field wich contain your command.
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Logon Script Doesn't

2003-03-13 Thread Bob Crandell
Hi,

I've finally been dragged kicking and screaming into the wonderful world of XP.
I've been able to join a domain and login with the help of the docs on samba.org and
gleaning info from this list.  Google and I don't get along.

My question is How do I get the logon script to run when XP logs in?  Win 98 doesn't
have a problem running the logon script.

Here is part of the smb.conf:
[global]
comment = Home based server
server string = Samba Server v2.2.7
netbios name = OciCat
workgroup = CRANDELL
security = server
encrypt passwords = yes
preferred master = yes
domain logons = yes
domain master = yes
local master = yes

logon script = %U.bat
logon drive = H:
logon path =
add user script = /usr/sbin/useradd -d /dev/null -g users -s /dev/false
-M %u

The batch files exist and are working with Win98.

I miss DOS.

Thanks

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon Script Doesn't

2003-03-13 Thread Kyle Loree
see bottom

Bob Crandell [EMAIL PROTECTED] writes:
Hi,

I've finally been dragged kicking and screaming into the wonderful world
of XP.
I've been able to join a domain and login with the help of the docs on
samba.org and
gleaning info from this list.  Google and I don't get along.

My question is How do I get the logon script to run when XP logs in?  Win
98 doesn't
have a problem running the logon script.

Here is part of the smb.conf:
[global]
comment = Home based server
server string = Samba Server v2.2.7
netbios name = OciCat
workgroup = CRANDELL
security = server
encrypt passwords = yes
preferred master = yes
domain logons = yes
domain master = yes
local master = yes

logon script = %U.bat
logon drive = H:
logon path =
add user script = /usr/sbin/useradd -d /dev/null -g users -s
/dev/false
-M %u

The batch files exist and are working with Win98.

I miss DOS.

Thanks

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

I have it working using

logon script = %u.bat

my netlogon script was created on a 2k machine and is as follows

@echo off
net use o: \\foo\bar /persistent:no
net use p: \\servername\sharename /persistent:no

the persistent is mainly for nt machines or machines that leave the
network.  it turns off reconnect.

it matters that the script has the proper line breaks
place the file in the netlogon dir and login with the matching user.
It should work well.

Also logon path is where you want to store profiles, usually
logon path = \\crandell\profiles\%u

that would create a dir for each user that logs in.
also recomend using
logon home = \\crandell\profiles\%u

I don't totally understand why they haven't been integrated into one, but
the logon home handles 9x machines.
Good luck, hope this works.

Kyle Loree
Rendek Communications
[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Logon Script Doesn't

2003-03-13 Thread Bob Crandell
If I change
logon script = %U.bat
to
logon script = %U.cmd
Will the login script still work for Win 98?

Thanks

Zuber Sidiyot ([EMAIL PROTECTED]) wrote*:

Bob

Try Extension .cmd instead .bat


Zuber

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Bob Crandell
Sent: Friday, March 14, 2003 12:09 PM
To: Samba List
Subject: [Samba] Logon Script Doesn't

Hi,

I've finally been dragged kicking and screaming into the wonderful world
of XP.
I've been able to join a domain and login with the help of the docs on
samba.org and
gleaning info from this list.  Google and I don't get along.

My question is How do I get the logon script to run when XP logs in?
Win 98 doesn't
have a problem running the logon script.

Here is part of the smb.conf:
[global]
comment = Home based server
server string = Samba Server v2.2.7
netbios name = OciCat
workgroup = CRANDELL
security = server
encrypt passwords = yes
preferred master = yes
domain logons = yes
domain master = yes
local master = yes

logon script = %U.bat
logon drive = H:
logon path =
add user script = /usr/sbin/useradd -d /dev/null -g users -s
/dev/false
-M %u

The batch files exist and are working with Win98.

I miss DOS.

Thanks






-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon Script Doesn't

2003-03-13 Thread Bob Crandell
Kyle Loree ([EMAIL PROTECTED]) wrote*:

see bottom

Bob Crandell [EMAIL PROTECTED] writes:
Hi,

I've finally been dragged kicking and screaming into the wonderful world
of XP.
I've been able to join a domain and login with the help of the docs on
samba.org and
gleaning info from this list.  Google and I don't get along.

My question is How do I get the logon script to run when XP logs in?  Win
98 doesn't
have a problem running the logon script.

Here is part of the smb.conf:
[global]
comment = Home based server
server string = Samba Server v2.2.7
netbios name = OciCat
workgroup = CRANDELL
security = server
encrypt passwords = yes
preferred master = yes
domain logons = yes
domain master = yes
local master = yes

logon script = %U.bat
logon drive = H:
logon path =
add user script = /usr/sbin/useradd -d /dev/null -g users -s
/dev/false
-M %u

The batch files exist and are working with Win98.

I miss DOS.

Thanks

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

I have it working using

logon script = %u.bat

my netlogon script was created on a 2k machine and is as follows

@echo off
net use o: \\foo\bar /persistent:no
net use p: \\servername\sharename /persistent:no

the persistent is mainly for nt machines or machines that leave the
network.  it turns off reconnect.

it matters that the script has the proper line breaks
place the file in the netlogon dir and login with the matching user.
It should work well.

Also logon path is where you want to store profiles, usually
logon path = \\crandell\profiles\%u

that would create a dir for each user that logs in.
also recomend using
logon home = \\crandell\profiles\%u

I don't totally understand why they haven't been integrated into one, but
the logon home handles 9x machines.
Good luck, hope this works.

Kyle Loree
Rendek Communications
[EMAIL PROTECTED]

The persistent option breaks Win 98 script processing.
I keep profiles local so logon path needs to be as I have it.
The problem here is that the login script does not run with XP.  It does run with
Win 98.  What's the difference and why me?

Thanks

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] logon script to adjust time on workstation

2003-02-24 Thread Gabriel D. Preston
Hey everyone,

I have what I think is a fairly simple question.  In the logon script 
for users, I have it set to map some drives and set the time on the 
user's workstation, all Win2K machines.  Now, shy of putting everyone in 
the Administrator's group, how can I have it set the time on that 
machine?  It only successfully works when myself or the other 
administrator log on to a machine since we have Administrative 
privileges, but for everyone else, it says they don't have enough 
privileges and doesn't do it.  Anybody have any suggestions?  Below is 
our logon script:

@echo off

NET TIME \\SGI-FILE /SET /YES

NET USE I: \\SGI-FILE\Install /YES
NET USE F: \\SGI-FILE\Data /YES
IF NOT %OS%==Windows_NT goto endit
   NET START Automatic Updates
:endit

-Gabriel Preston

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] logon script to adjust time on workstation

2003-02-24 Thread Khanh Tran
You'd have to set the policy for the Everyone group to change the time on
the workstation.  I don't remember exactly where it is in Win2k, but I know
it was possible in NT.

Khanh Tran
Network Operations
Sarah Lawrence College


-Original Message-
From: Gabriel D. Preston [mailto:[EMAIL PROTECTED]
Sent: Monday, February 24, 2003 9:28 AM
To: [EMAIL PROTECTED]
Subject: [Samba] logon script to adjust time on workstation


Hey everyone,

I have what I think is a fairly simple question.  In the logon script 
for users, I have it set to map some drives and set the time on the 
user's workstation, all Win2K machines.  Now, shy of putting everyone in 
the Administrator's group, how can I have it set the time on that 
machine?  It only successfully works when myself or the other 
administrator log on to a machine since we have Administrative 
privileges, but for everyone else, it says they don't have enough 
privileges and doesn't do it.  Anybody have any suggestions?  Below is 
our logon script:

@echo off

NET TIME \\SGI-FILE /SET /YES

NET USE I: \\SGI-FILE\Install /YES
NET USE F: \\SGI-FILE\Data /YES

IF NOT %OS%==Windows_NT goto endit
NET START Automatic Updates

:endit

-Gabriel Preston

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] logon script to adjust time on workstation

2003-02-24 Thread Gabriel D. Preston
Okay, I just found it.  For future reference, Go to: Start-Run-gpedit.msc

Once the Group Policy editor opens, find:

Computer Configuration - Windows Settings - Security Settings - Local 
Policies - User Rights Assignments

Then select the Policy Change the System Time and add Everyone to the 
list.

Thanks for the help Khanh.

-Gabriel

Khanh Tran wrote:

You'd have to set the policy for the Everyone group to change the time on
the workstation.  I don't remember exactly where it is in Win2k, but I know
it was possible in NT.
Khanh Tran
Network Operations
Sarah Lawrence College


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script never runs in 2.2.7a, but does in 2.2.4

2003-01-30 Thread Peter Schuller
  we tried upgrading from 2.2.4 to 2.2.7a in order to fix a problem. We
  believe it fixes it, BUT, 2.2.7a causes logon scripts to never run.
  
  That is, we have 2.2.4 installed and the logon procedure works
  perfectly. We then upgrade the samba/samba-common (debian) packages, and
  everything works *except* that logon scripts never run.
  
  What are the possible causes for such a thing?
 
 What is the logon script setting in smb.conf? 

logon script = scripts\users\%U.bat

But since I saw that there was a %U related bugfix in 2.2.6 (but I don't
know what) I also tried:

logon script = scripts\test.bat

Which did not help.

In both cases, switching back to 2.2.4 without changing the
configuration fixes the problem.

-- 
/ Peter Schuller, InfiDyne Technologies HB

PGP userID: 0xE9758B7D or 'Peter Schuller [EMAIL PROTECTED]'
Key retrival: Send an E-Mail to [EMAIL PROTECTED]
E-Mail: [EMAIL PROTECTED] Web: http://www.scode.org






signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Logon script never runs in 2.2.7a, but does in 2.2.4

2003-01-29 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 28 Jan 2003, Peter Schuller wrote:

 Hello,
 
 we tried upgrading from 2.2.4 to 2.2.7a in order to fix a problem. We
 believe it fixes it, BUT, 2.2.7a causes logon scripts to never run.
 
 That is, we have 2.2.4 installed and the logon procedure works
 perfectly. We then upgrade the samba/samba-common (debian) packages, and
 everything works *except* that logon scripts never run.
 
 What are the possible causes for such a thing?

What is the logon script setting in smb.conf? 



jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+OC2TIR7qMdg1EfYRAi6zAJ9zDBMuQsg7UsqPLYHAR3eHqTH27ACeMvyV
8vfR36HAyhUQeeXdS99Xwpw=
=Gohd
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Logon script never runs in 2.2.7a, but does in 2.2.4

2003-01-28 Thread Peter Schuller
Hello,

we tried upgrading from 2.2.4 to 2.2.7a in order to fix a problem. We
believe it fixes it, BUT, 2.2.7a causes logon scripts to never run.

That is, we have 2.2.4 installed and the logon procedure works
perfectly. We then upgrade the samba/samba-common (debian) packages, and
everything works *except* that logon scripts never run.

What are the possible causes for such a thing?

Thanks!

-- 
/ Peter Schuller, InfiDyne Technologies HB

PGP userID: 0xE9758B7D or 'Peter Schuller [EMAIL PROTECTED]'
Key retrival: Send an E-Mail to [EMAIL PROTECTED]
E-Mail: [EMAIL PROTECTED] Web: http://www.scode.org






signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] logon script client configuration?

2003-01-24 Thread Leroy van Logchem
 i have two clients, connecting to the same domain, both are w2k sp3,
 one is running the logon script, the other not.

Both users have same permissions? Try using the NETLOGON share
to see if your logon script can be started manualy. Turn up the debug level
temp to see any hints there..

Goodluck,
Leroy

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] logon script does not get executed

2002-04-24 Thread sebastien


Hi, 

I just migrated my samba PDC from Samba 2.2.1a on HP-UX to Samba 2.2.3a on 
RH7.2 (using the rawhide rpms). My clients are Win2kSP2, and there are no 
BDC's on the network. The server should do PDC, homes, profiles and logon 
script. 

The idea was initially just to move the the Samba service to the linux box, 
but i ended up upgrading it because of profile problems (needed the 'nt acl 
support = no' share option, even though the server is a PDC). Note that i 
used to have these on HP-UX too but just stumbled on a solution to it 
(README.Win2kSP2) while installing samba on the linux box. 

However, i now have a new problem. My clients can login to the domain (login 
accepted, profile loaded and saved correctly on logout), but my 'logon 
script' does not get executed (automatically) anymore. 

I copied the configuration script from my initial server and made some minor 
changes to it (mostly the paths). I still have my [netlogon] share, the path 
exists, the logon script exists and is readable by any unix user, etc... 

After a login i can access the [netlogon] share from the client just fine. 
Actually, i can just do a Start-Run-\\circus\netlogon\cdlogon.bat and 
everything works fine. 

So i assume there must be something going wrong when the client tries to 
figure out if there is a logon script to run. I'm not a samba expert, but i 
can see in the log files that the [netlogon] share is never mapped, file 
'cdlogon.bat' never accessed, whereas this used to happen on the HP-UX samba 
server. It looks like the client is asking the server to resolve 
\\MAILSLOT\NET\NETLOGON, the server finds out this ' logon svr' should be 
\\CIRCUS, but then the client starts all over again. (see log excerpt 
below). I've been playing with WINS to see what is registered and though i 
don't know the exact meaning of each Type, it looks like the linux server 
registers the same (local and domain) names/types as the HP-UX one. 

Also, i still have my HP-UX server on the side. If i stop the linux one, 
startup the old HP-UX one again, and reboot the clients, they still work 
fine -- with login script. 

Of course, there might be some non-smb.conf issues, things i forgot to 
transfer from the old server to the new one. I copied the smbpasswd, passwd 
and group entries, MACHINE.SID etc... but maybe i forgot something else? 

Or is this a problem related to 2.2.3a nmbd? 

One more remark: the clients i tested are on the same subnet as the new 
linux server, and the HP-UX box is on another subnet. Might this make a 
difference... 

Any advice would be greatly appreciated,
tia,
 -seb. 

=== 


Some output: 

a) my smb.conf file:
# Global parameters
[global]
   workgroup = CIRQUEDIGITAL
   netbios name = CIRCUS
   encrypt passwords = Yes
   smb passwd file = /etc/smbpasswd
   log file = /var/log/samba/%m.log
   max log size = 50
   log level = 7
   domain admin group = adm
;   add user script = /usr/sbin/useradd -g 1003 -s /usr/bin/false -c
;   delete user script = /usr/sbin/userdel -r %u
   logon script = cdlogon.bat
   logon path = \\%N\profiles\%u
   logon drive = H:
   domain logons = Yes
   os level = 65
   preferred master = Yes
   domain master = Yes
   wins support = Yes
   guest account = nobody
   lock dir = /var/lock/samba 

[netlogon]
   comment = Network Logon Service
   path = /volume1/cd/settings/win-ix86/netlogon
   guest ok = yes
   writable = no
   share modes = no
   browseable = no
   blocking locks = No 

[homes]
   path = /volume1/cd/homes/%u
   read only = No
   blocking locks = No 

[allhomes]
   path = /volume1/cd/homes
   read only = No
   blocking locks = No 

[tmp]
   path = /volume1/cd/tmp
   read only = No
   blocking locks = No 

[data]
   path = /volume1/cd
   read only = No 

   blocking locks = No 

[profiles]
   path = /volume1/cd/homes/profiles
   read only = No
   blocking locks = No
   oplocks = No
   nt acl support = No 


b) some nmbd.log output: 

 process_dgram: datagram from CDWW-200 to CIRQUEDIGITAL1c IP 
10.231.101.102 for \MAILSLOT\NET\NETLOGON of type 18 l
en=100
[2002/04/24 11:34:55, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69)
 process_logon_packet: Logon from 10.231.101.102: code = 0x12
[2002/04/24 11:34:55, 3] nmbd/nmbd_processlogon.c:process_logon_packet(210)
 process_logon_packet: SAMLOGON sidsize 24, len = 100
[2002/04/24 11:34:55, 3] nmbd/nmbd_processlogon.c:process_logon_packet(217)
 process_logon_packet: len = 100 PTR_DIFF(q, buf) = 92
[2002/04/24 11:34:55, 3] nmbd/nmbd_processlogon.c:process_logon_packet(237)
 process_logon_packet: SAMLOGON sidsize 24 ntv 11
[2002/04/24 11:34:55, 3] nmbd/nmbd_processlogon.c:process_logon_packet(246)
 process_logon_packet: SAMLOGON user CDWW-2$
[2002/04/24 11:34:55, 3] nmbd/nmbd_processlogon.c:process_logon_packet(251)
 process_logon_packet: SAMLOGON