[Samba] Re: Samba Server [Solaris 8] on Windows 2K/2003 [ADS] network

2005-04-26 Thread TimS
CHRISTOPH:

I've never done that. How do you do it?

Tim


Christoph Kaegi [EMAIL PROTECTED] wrote in message 
news:[EMAIL PROTECTED]
 On 22.04-10:18, Eric Boehm wrote:

 Tim  -Is it possible to
 Tim set up a test environment for the new Samba release in
 Tim another location on the same UNIX box?

 Not sure what you mean here. Do you mean you want to separate Samba
 installs on the same box? If so, you would need at least two network
 interfaces. You can't run two instances of Samba on the same
 interface/IP address.


 You don't need a second network interface, you can just define
 a second IPaddress on the same interface.

 -- 
 --
 Christoph Kaegi   [EMAIL PROTECTED]
 --
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Samba Server [Solaris 8] on Windows 2K/2003 [ADS] network

2005-04-26 Thread Eric Boehm
On Tue, Apr 26, 2005 at 06:11:15AM -0500, TimS wrote:
 Tim == TimS  [EMAIL PROTECTED] writes:
 Christoph == Christoph Kaegi [EMAIL PROTECTED] 

Tim CHRISTOPH: I've never done that. How do you do it?

Using ip aliases. See man ifconfig, see the section on logical interfaces.

Briefly

   LOGICAL INTERFACES

   Solaris TCP/IP allows multiple logical interfaces to be associated
   with a physical network interface. This allows a single machine to be
   assigned multiple IP addresses, even though it may have only one
   network interface. Physical network interfaces have names of the form
   driver-name physical-unit-number, while logical interfaces have names
   of the form driver-name physical-unit-number:logical-unit-number. A
   physical interface is configured into the system using the plumb
   command. For example:

Tim  -Is it possible to
Tim set up a test environment for the new Samba release in
Tim another location on the same UNIX box?

Eric  Not sure what you mean here. Do you mean you want to
Eric separate Samba installs on the same box? If so, you would
Eric need at least two network interfaces. You can't run two
Eric instances of Samba on the same interface/IP address.

Christoph You don't need a second network interface, you can just
Christoph define a second IPaddress on the same interface.

-- 
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba Server [Solaris 8] on Windows 2K/2003 [ADS] network

2005-04-22 Thread TimS
ERIC:

Thanks for taking pity... :-)

This is great news! I knew

from the reading I've done

that the ADS features code

was put into Samba 3; but

what I didn't pick up on is

that it would work whether

the Samba server is on the

Windows domain or not.

Our Solaris box has two

network adapters, one RJ-45 and

one fiber, but but we can only

use the RJ-45 connection due to

the powers-that-be nixing our

request to drop a line for the

fiber connection -- even though

There is a vacant fiber plug-in

on the switch.

However...,

we also have a Linux Box [RedHat 9] in

our unit. Couldn't we upgrade the

Samba installation on it [...come to

think of it, one of our other guys

just rebuilt that box a few weeks ago, and

I don't know for sure which Samba release

is on it now...] and do the testing there?

Speaking of that, can you tell me

off the top of your head the quickest

way to determine which Samba release

is currently running on the Linux box?

Thanks again,

Tim


Eric Boehm [EMAIL PROTECTED] wrote in message 
news:[EMAIL PROTECTED]
 On Fri, Apr 22, 2005 at 08:22:14AM -0500, TimS wrote:
 Tim == TimS  [EMAIL PROTECTED] writes:

Tim ALL: Please forgive my ignorance. I am not just naive
Tim regarding Samba..., or Solaris..., or UNIX, or Windows
Tim Networking..., the naivity courses through my veins
Tim abundantly in all IT related matters. :-)

Tim Our work unit is the lone UNIX [Samba server 2.2 on Solaris
Tim 8] installation on the organizational Windows WAN. None of
Tim the analysts in our unit have domain admin rights. The sys
Tim manager in our unit [my boss] has steadfastly refused to add
Tim our UNIX [Samba] server to the windows domain.

Tim Password synchronization has been a thorn in our side from
Tim day one. A SSO solution is the ultimate, but from what I'm
Tim reading, that isn't possible unless/until our Samba server is
Tim added to the domain.

Tim QUESTIONS: -Would upgrading to the lastest Samba release help
Tim at all on this issue?  -I don't see a binary available at the
Tim Samba download site for Solaris 8.  Our SysMgr could

 You just need Samba 3.

Tim certainly do the upgrade without the binary, but I have not
Tim ever done the make/build routine before.

 That could be tricky. I've built Samba 3 with kerberos and ldap and
 the various components needs for ADS but it is decidedly non-trivial.

 However, you don't need to use 'security = ads' to participate. You
 can use just 'security = domain' which would be a plain vanilla
 build. We have several servers participating in an ADS network with
 'security=domain'. You would then be able to pass authentication
 through to the Windows domain controllers.

Tim  -Is it possible to
Tim set up a test environment for the new Samba release in
Tim another location on the same UNIX box?

 Not sure what you mean here. Do you mean you want to separate Samba
 installs on the same box? If so, you would need at least two network
 interfaces. You can't run two instances of Samba on the same
 interface/IP address.

 I hope this helps.

 -- 
 Eric M. Boehm  /\  ASCII Ribbon Campaign
 [EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
 Respect Open Standards / \  files in mail
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Samba Server [Solaris 8] on Windows 2K/2003 [ADS] network

2005-04-22 Thread Eric Boehm
On Fri, Apr 22, 2005 at 10:03:46AM -0500, TimS wrote:
 Tim == TimS  [EMAIL PROTECTED] writes:

ERIC:

Tim Thanks for taking pity... :-) This is great news! I knew from
Tim the reading I've done that the ADS features code was put into
Tim Samba 3; but what I didn't pick up on is that it would work
Tim whether the Samba server is on the Windows domain or not.

Yes, you do have to create a machine account for the Samba server in
the Windows domain in order for security = domain to work. However,
Active Directory domain controllers will talk to the Samba
server. You may have to have your domain admins check a box that says
something like 

Allow pre-Windows 2000 authentication 

when they create the machine account.

Tim Our Solaris box has two network adapters, one RJ-45 and one
Tim fiber, but but we can only use the RJ-45 connection due to
Tim the powers-that-be nixing our request to drop a line for the
Tim fiber connection -- even though There is a vacant fiber
Tim plug-in on the switch.

Tim However..., we also have a Linux Box [RedHat 9] in our
Tim unit. Couldn't we upgrade the Samba installation on it
Tim [...come to think of it, one of our other guys just rebuilt
Tim that box a few weeks ago, and I don't know for sure which
Tim Samba release is on it now...] and do the testing there?
 
You certainly could. BTW, I forgot to mention that you could also use
Samba 2.2.8a in your environment if you couldn't find a binary for
Samba 3. Samba 2.x can work in an ADS environment -- we're using
2.2.8a with a Native Active Directory environment.

Tim Speaking of that, can you tell me off the top of your head
Tim the quickest way to determine which Samba release is
Tim currently running on the Linux box?

/path/to/smbd -V -- e.g., /usr/local/samba/bin/smbd -V

As a side note, I made a presentation about setting up Samba
(including building it) with ClearCase. However, the material is
applicable even if you aren't using ClearCase.

You can find it at

http://www-128.ibm.com/developerworks/rational/library/5769.html

If you follow the link at the right hand side that says Related
Presentation Files

http://www-128.ibm.com/developerworks/rational/library/content/04August/3033/3033_SCM04.zip

you can download the presentation and related templates and the web
site that I developed and that the presentation is based on. Again,
much of the material is applicable even if you aren't using
ClearCase. You can browse the web files through the filesystem -- you
don't need a web server. Any browser will work.


-- 
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba