[Samba] Two questions

2008-10-20 Thread John Oliver
1) A lot (but not all) of my smbd / nmbd logs are going to
/var/log/messages instead of /var/log/samba/  I tried a couple of things
in syslog.conf, but just don't know the magic word for samba logs.

2) I'm getting lots of couldn't find service errors.  I had:

[data]
path = /data
read only = no
public = yes
browseable = yes
writeable = yes
force user = nfsnobody
force group = nfsnobody
guest ok = yes

The netbios name is stb-data, and it was complaining about couldn't
find service stb-data.  I changed the stanza to:

[stb-data]
path = /data
comment = STB Group file server
read only = no
public = yes
browseable = yes
writeable = yes
force user = nfsnobody
force group = nfsnobody
guest ok = yes

And now I get couldn't find service data  Everything seems to work OK,
but I get dozens of lines about this, and it would be nice to just not
have to see them.  How do I get rid of the couldn't find service
errors?

-- 
***
* John Oliver http://www.john-oliver.net/ *
* *
***
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions

2008-10-20 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

The first one I believe is in the manual, and/or it is a compile flag.
Look for syslog in the Samba manual.

John Oliver wrote:
 1) A lot (but not all) of my smbd / nmbd logs are going to
 /var/log/messages instead of /var/log/samba/  I tried a couple of things
 in syslog.conf, but just don't know the magic word for samba logs.
 
 2) I'm getting lots of couldn't find service errors.  I had:
 
 [data]
 path = /data
 read only = no
 public = yes
 browseable = yes
 writeable = yes
 force user = nfsnobody
 force group = nfsnobody
 guest ok = yes
 
 The netbios name is stb-data, and it was complaining about couldn't
 find service stb-data.  I changed the stanza to:
 
 [stb-data]
 path = /data
 comment = STB Group file server
 read only = no
 public = yes
 browseable = yes
 writeable = yes
 force user = nfsnobody
 force group = nfsnobody
 guest ok = yes
 
 And now I get couldn't find service data  Everything seems to work OK,
 but I get dozens of lines about this, and it would be nice to just not
 have to see them.  How do I get rid of the couldn't find service
 errors?
 

- --
  _  _ _  _ ___  _  _  _
 |Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Systems Programmer II
 |$| |__| |  | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922)
 \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFI/OmJmb+gadEcsb4RArb6AKCXNjy/QxePvYaWfvVBMq39g0cUKQCg05rq
aSUz9QJ5b2oc69n8MnyGpXw=
=wuaV
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions

2008-10-20 Thread John Oliver
On Mon, Oct 20, 2008 at 04:26:49PM -0400, Ryan Novosielski wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 The first one I believe is in the manual, and/or it is a compile flag.
 Look for syslog in the Samba manual.
 
 John Oliver wrote:
  1) A lot (but not all) of my smbd / nmbd logs are going to
  /var/log/messages instead of /var/log/samba/  I tried a couple of things
  in syslog.conf, but just don't know the magic word for samba logs.

That doesn't really help.

I'm using CentOS 5.2 and the Samba that comes with... 3.0.28  There's a
/var/log/samba/ which contains an smbd.log and an nmbd.log  Some stuff
is logged to them... other stuff is not.  The fact that those files
exist strongly suggests that all Samba-related logs are intended to go
to those files.  Using Samba is a five-year old book, and it's
reference to syslog is to do:

daemon.*/var/log/daemon.log

which is using a very heavy, very blunt instrument that doesn't really
do what it looks like newer OSes and versions of Samba ought to be able
to do.

-- 
***
* John Oliver http://www.john-oliver.net/ *
* *
***
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions

2008-10-20 Thread Kyle

John,

read the 'syslog' and 'syslog only' params in smb.conf on CentOS 5.2.

Basically set 'syslog = 0' to send everything to /var/log/samba

You'll still get a start up  line of some sort in /var/log/messages, but 
otherwise everything else will go to the samba specific logs



Kind Regards

Kyle

Tel: +61 (0)431 88 3978



John Oliver wrote:

On Mon, Oct 20, 2008 at 04:26:49PM -0400, Ryan Novosielski wrote:
  

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

The first one I believe is in the manual, and/or it is a compile flag.
Look for syslog in the Samba manual.

John Oliver wrote:


1) A lot (but not all) of my smbd / nmbd logs are going to
/var/log/messages instead of /var/log/samba/  I tried a couple of things
in syslog.conf, but just don't know the magic word for samba logs.
  


That doesn't really help.

I'm using CentOS 5.2 and the Samba that comes with... 3.0.28  There's a
/var/log/samba/ which contains an smbd.log and an nmbd.log  Some stuff
is logged to them... other stuff is not.  The fact that those files
exist strongly suggests that all Samba-related logs are intended to go
to those files.  Using Samba is a five-year old book, and it's
reference to syslog is to do:

daemon.*/var/log/daemon.log

which is using a very heavy, very blunt instrument that doesn't really
do what it looks like newer OSes and versions of Samba ought to be able
to do.

  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] two questions

2008-05-07 Thread Dan Guo
1. I just found out port 445 and 139 are both blocked by my ISP (cablevision). 
   i use Vista Ultimate. 
   Is there a way to solve my problem? see my email below.
2. I am a new user of this mailing list. how can i read the postings and reply 
to a post? it does not seem allow me to reply to a post in your archive page.
thanks,
Dan
--
I read the posting below. but I have not figured out why my vista pc won't work.
here is what I did - 
1. I disable window file sharing;
2. in putty, i add a tunnel: 
 source port: 445
 destination port: my linux box IP: 139
   I forward 80. i see http://127.0.0.1 yields my web server's start page.
3 i also use secpol.msc and change local policies - security options.
By default Windows Vista sets the policy to NTVLM2 responses only. Change 
this to LM and NTLM – use NTLMV2 session security if negotiated.

4. i start a putty session and login in.
5. i try to use this command: 
  net use Z:  \\127.0.0.1\myid /user:myid
    i was prompted to input the password. I input the right passwords. it 
failed. i got again asked about passwd. I input again and fail again. this 
time, it shows an error msg: 
    System error 86 has occurred.
    The specificed network password is not correct. 
6. for my vista pc, i use a cisco 800 router from my cable company. 
Can anyone help find out what is wrong? 
thank you,
Dan
-
Well, it looks like I needed to forward port 445. I have it working now. 
Thanks!



Charles Bueche wrote:
Hi,

I would check to forward port 445. XP tries this one before 139 and 
friends.

Are you sure that your remote Samba listen on 127.0.0.1 ?

Show us your smb.conf

Charles

On 5 mars 07, at 07:47, Richard D. Morey wrote:

After having scoured the net for a way to do SMB over SSH with Windows,
I've tried everything I have found and I still can't get it to work.

I'm using Windows Vista as the client and FC6 with Samba 3.0.24-1 as the
server. I have set up a share and can successfully connect to that share
with no ssh tunnel.

I would like to tunnel SMB over SSH, so here is what I have tried:

1. Disabling Windows File Sharing with net stop server. Then, using
puTTY, I connect with my ports forwarded. I forward 80 and 139.
http://127.0.0.1; yields my web server's start page, so I know
forwarding is working. When I telnet 127.0.0.1 139 it connects to the
SMB server successfully. netstat -ano reveals that 127.0.0.1:80 and
127.0.0.1:139 are listening with puTTY.

However, trying to map a network drive fails. \\127.0.0.1\share yields
the error The specified network name is no longer available. or 
Network path not found. I know the share is working because I can 
access it without SSH at the same time.

Here are two lines from netstat when I have the telnet session open:
tcp    0  0 127.0.0.1:45535 127.0.0.1:139 
ESTABLISHED
tcp    0  0 127.0.0.1:139   127.0.0.1:45535 
ESTABLISHED


2. I have tried adding the loopback device as detailed all over the web
(ie http://www.blisstonia.com/eolson/notes/smboverssh.php ,
http://www.cheswick.com/ches/cheap/tunnelprob.html)
When I do this, I can access the webserver via the loopback device but
telnet 10.0.0.1 139 times out. However, puTTY appears to be listening
on 10.0.0.1:80 and 10.0.0.1:139. I cannot add the share either. I have 
done everything I can think of to get this to work.

In addition, I have disabled Windows listening on port 445 (as 
suggested in one of the guides) I have tried giving puTTY the actually 
IP of the samba server as the destination, I have ensured that 127. is 
allowed by the smb.conf...

What could be going wrong here? Any ideas?


Thanks,
Richard

--Richard D. Morey, M.A.
Research Assistant, Perception and Cognition Lab
University of Missouri-Columbia


--To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--Charles Bueche charles at bueche.ch
sand, snow, wave, wind and net -surfer
A-Cat SUI 192






* Previous message: [Samba] Samba and Win98 
* Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] 

More informat
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] two questions

2008-05-07 Thread Adam Williams
i've never tunned ports over putty, have you tried a better VPN client 
such as vtun or openvpn?


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] two questions about samba

2007-06-26 Thread Jack Mendez
thanks for the info about the workstations option
i have workstations that are named student01 02 03, etc
and staf01 02 03
when i specify staf* or student*
it does not allow the account access.
if i specify staf01 it will allow that machine to log on.
know of a way to specify groups of workstations?

On Fri, June 22, 2007 3:35 pm, Chris Smith said:
 On Friday 22 June 2007, Jack Mendez wrote:
 I would like to deny users access to the pdc based on the hostname.
 so if username1 logs into computer1, that is allowed, if the user logs
 of,
 and goes on to computer2, it will be denied because computer2 is a staff
 machine

 I don't think this is valid with the smbpasswd backend With but a tdbsam
 backend you can use:

 net sam set workstations

 Ldap has a entry for this as well (don't know it off the top of my head).

 we have students that will sometimes try to use staff machines and i
 want
 the login to fail.

 i have lots of log entries that look like.

 Hmmm...don't know what those entries have to do with it.

 Chris

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] two questions about samba

2007-06-26 Thread Chris Smith
On Tuesday 26 June 2007, Jack Mendez wrote:
 i have workstations that are named student01 02 03, etc
 and staf01 02 03
 when i specify staf* or student*
 it does not allow the account access.
 if i specify staf01 it will allow that machine to log on.
 know of a way to specify groups of workstations?

You can put multiple workstations in the argument:
net sam set workstations stafusername staf01,staf02,staf03

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] two questions about samba

2007-06-22 Thread Jack Mendez
I would like to deny users access to the pdc based on the hostname.
so if username1 logs into computer1, that is allowed, if the user logs of,
and goes on to computer2, it will be denied because computer2 is a staff
machine
we have students that will sometimes try to use staff machines and i want
the login to fail.
i have lots of log entries that look like.


[2007/06/21 15:44:44, 0] auth/auth_util.c:create_builtin_administrators(785)
  create_builtin_administrators: Failed to create Administrators
[2007/06/21 15:44:44, 2] auth/auth_util.c:create_local_nt_token(899)
  create_local_nt_token: Failed to create BUILTIN\Administrators group!
[2007/06/21 15:44:44, 0] auth/auth_util.c:create_builtin_users(751)
  create_builtin_users: Failed to create Users
  create_local_nt_token: Failed to create BUILTIN\Users group!
the system is working fine but the logs are filling up with this data.

ideas?


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] two questions about samba

2007-06-22 Thread Chris Smith
On Friday 22 June 2007, Jack Mendez wrote:
 I would like to deny users access to the pdc based on the hostname.
 so if username1 logs into computer1, that is allowed, if the user logs of,
 and goes on to computer2, it will be denied because computer2 is a staff
 machine

I don't think this is valid with the smbpasswd backend With but a tdbsam 
backend you can use:

net sam set workstations

Ldap has a entry for this as well (don't know it off the top of my head).

 we have students that will sometimes try to use staff machines and i want
 the login to fail.

 i have lots of log entries that look like.

Hmmm...don't know what those entries have to do with it.

Chris

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Two questions on winbind and nsswitch.conf

2005-05-18 Thread Etienne Goyer
Greetings folks,

I am using winbind in /etc/nsswitch.conf for the passwd database
(passwd file winbind).  I have two little problems :

1. winbind return what look like machine trust account, ie
WORKSTATION1$, when running wbinfo -u.  These account also show when I
do getent passwd.  Is it possible to make winbind not return these ?

2. The domain to which I connect have username in both upper- and
lowercase, ie user1 and USER2.  Is there a way to make winbind lowercase
all username ?

I am running Samba 3.0.10 on RHEL 4.

Thanks very much for any tips !

Etienne Goyer

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions on winbind and nsswitch.conf

2005-05-18 Thread John H Terpstra
On Wednesday 18 May 2005 12:45, Etienne Goyer wrote:
 Greetings folks,

 I am using winbind in /etc/nsswitch.conf for the passwd database
 (passwd file winbind).  I have two little problems :

 1. winbind return what look like machine trust account, ie
 WORKSTATION1$, when running wbinfo -u.  These account also show when I
 do getent passwd.  Is it possible to make winbind not return these ?

No.


 2. The domain to which I connect have username in both upper- and
 lowercase, ie user1 and USER2.  Is there a way to make winbind lowercase
 all username ?

 I am running Samba 3.0.10 on RHEL 4.

Suggest you update to 3.0.14a (current stable) or 3.0.15pre3 (current SVN)
as I believe we made a few changes in this code. If I am not mistaken all user 
names are now returned in lower case. Domain names remain in uppercase as I 
recall.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Two questions

2005-03-16 Thread Bart Hendrix
Hi All, 

I have the following questions:


We have some folders / shares where we store for example only .doc files. But 
some users also saves the .jpg files in this share. We don't want this and we 
wondered if we can block saving .jpg files with samba. Is there an option to 
set in smb.conf so we can block the saving of .jpg files?

Second one: 

Some users saves the .doc files for example as 
thisisanexampleforarealylongnameforawordfile.doc

Is there an option to prevent these long names?

Thanx

Met vriendelijke groeten,

Bart Hendrix
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions

2005-03-16 Thread Bill Arlofski
Bart Hendrix wrote:
Hi All, 

I have the following questions:
We have some folders / shares where we store for example only .doc files. 
But some users also saves the .jpg files in this share. We don't want this and 
we wondered if we can block saving .jpg files with samba. Is there an option to 
set in smb.conf so we can block the saving of .jpg files?
Second one: 

Some users saves the .doc files for example as 
thisisanexampleforarealylongnameforawordfile.doc
Is there an option to prevent these long names?
Thanx
Met vriendelijke groeten,
Bart Hendrix

Hi Bart..  This sounds to me like two training issues, and possibly one 
scripting issue.

What I mean is, users should be trained to create intelligently named 
files that are also sensible names to other users. What would you have 
Samba do with that long name for example?

Truncate it?
Perform the idiotic Micrsofttrncat~1   deal on it?
I think those options would make your life more miserable. :)
Next, tell the users not to put .jpg files in that share. Follow up with 
 pain and suffering for those that don't follow directions.  grin

And optionally, for those that still can not follow simple directions, 
write a cron job to

rm -f *.jpg
in that directory weekly/nightly/hourly
Just some thoughts.
-
Bill Arlofski
Reverse Polarity
860-824-2433
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions

2005-03-16 Thread OrvUx
Bart Hendrix wrote:
Hi All, 

I have the following questions:
We have some folders / shares where we store for example only .doc files. 
But some users also saves the .jpg files in this share. We don't want this and 
we wondered if we can block saving .jpg files with samba. Is there an option to 
set in smb.conf so we can block the saving of .jpg files?
Second one: 

Some users saves the .doc files for example as 
thisisanexampleforarealylongnameforawordfile.doc
Is there an option to prevent these long names?
Thanx
Met vriendelijke groeten,
Bart Hendrix
 

To restric the .jpg files the veto files option is for you...
|veto files = /*.mp3/ /*.wav/ /*.mpeg/ /*.avi/
Check this link...
http://www.faqs.org/docs/samba/ch08.html
For the long names i don't know... :D
|
--
OrvUx
Making the Hard...Soft with GNU/Linux ;)
Usuario Linux #16088
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions

2005-03-16 Thread Bill Arlofski
OrvUx wrote:
Bart Hendrix wrote:
Hi All,
I have the following questions:
We have some folders / shares where we store for example only .doc 
files. But some users also saves the .jpg files in this share. We 
don't want this and we wondered if we can block saving .jpg files with 
samba. Is there an option to set in smb.conf so we can block the 
saving of .jpg files?

Second one:
Some users saves the .doc files for example as 
thisisanexampleforarealylongnameforawordfile.doc

Is there an option to prevent these long names?
Thanx
Met vriendelijke groeten,
Bart Hendrix
 

To restric the .jpg files the veto files option is for you...
|veto files = /*.mp3/ /*.wav/ /*.mpeg/ /*.avi/
Check this link...
http://www.faqs.org/docs/samba/ch08.html
For the long names i don't know... :D
From that link:
---
If you want to prevent users from seeing files completely, you can 
instead use the veto files option. This option, which takes the same 
syntax as the hide files option, specifies a list of files that should 
never be seen by the user. For example, let's change the [data] share to 
the following:

[data]
veto files = /*.java/*README*/
--
This will only prevent them from seeing these files.
I know that end users are always looking for ways to get around any 
technical solution that is put in place to enforce a company policy.

Based on my experience with end users (mostly K-12 students), I'd still 
opt for training followed by ramifications for violators. :)

Cheers.
-
Bill Arlofski
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Two Questions concerning samba - file access times - two instances on one server

2004-10-13 Thread Laurenz, Dirk
Hi,

-|  
-|  Da wäre dann noch von Interesse was sich den sonst noch 
-|  unterscheidet,
-|  1. Dateisystem
-|  2. Filelocking
-|  3. Ist dos filetime gesetzt?
-|  
-|  Wurde mit dem gleichen Client getestet?
-|  Bei 3.0.7 wie unterschiedlich sind die Zeiten denn?

i compared the share options and applied an additional share option
to the 3.0.7 box. It was: nt acl support = yes and now it works...

Mit freundlichem Gruß,



Dirk Laurenz
Systems Engineer

Fujitsu Siemens Computers
Sales Central Europe Deutschland 
Professional Service Organisation Nord / Ost

Hildesheimer Strasse 25
30880 Laatzen
Germany

Telephone:  +49 (511) 84 89 - 18 08
Telefax:+49 (511) 84 89 - 25 18 08
Mobile: +49 (170) 22 10 781
Email:  mailto:[EMAIL PROTECTED]
Internet:   http://www.fujitsu-siemens.com

http://www.fujitsu-siemens.de/rl/servicesupport/itdienstleistungen/competencecenter.html
***
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Two Questions concerning samba - file access times - two instances on one server

2004-10-13 Thread Laurenz, Dirk
Hello,
  

-|  -Original Message-
-|  From: Holger Krull [mailto:[EMAIL PROTECTED] 
-|  Sent: Tuesday, October 12, 2004 9:57 AM
-|  To: Laurenz, Dirk
-|  Subject: Re: [Samba] Two Questions concerning samba - file 
-|  access times - two instances on one server
-|  
-|  
-| a file. If i access a file on a samba share,
-| the access time will be modified correctly,
-| but if i resave a file, the create time is
-| also changed although i would expect that only
-| the change time will be modified.
-|  
-|  That's because most applications (all MS Office apps) 
-|  create a new file, 
-|  delete the old one and rename the new one. The in reality 
-|  it is a new 
-|  file, therefore new create time.
-|  MS Servers cache the old attributes for some while, and 
-|  reapply them, 
-|  samba does not.

on another box (in this case 3.0.4) this happens not.
on the other (3.0.7) times won't be set correctly...

Mit freundlichem Gruß,



Dirk Laurenz
Systems Engineer

Fujitsu Siemens Computers
Sales Central Europe Deutschland 
Professional Service Organisation Nord / Ost

Hildesheimer Strasse 25
30880 Laatzen
Germany

Telephone:  +49 (511) 84 89 - 18 08
Telefax:+49 (511) 84 89 - 25 18 08
Mobile: +49 (170) 22 10 781
Email:  mailto:[EMAIL PROTECTED]
Internet:   http://www.fujitsu-siemens.com

http://www.fujitsu-siemens.de/rl/servicesupport/itdienstleistungen/competencecenter.html
***
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Two Questions concerning samba - file access times - two instances on one server

2004-10-12 Thread Laurenz, Dirk
Hello everybody,

i have two questions concerning samba.

1st Topic - file times
NTFS has three file times for each file,
the create time, the change time and the
access time. The create time will never be
modified, the change time will be changed
every time you save a file, the access time
will be changed every time you access (read)
a file. If i access a file on a samba share,
the access time will be modified correctly,
but if i resave a file, the create time is
also changed although i would expect that only
the change time will be modified. I found some
parameters concerning file times, but none
of them changes the behaviour. I used the following
parameters:
dos filetimes = yes
dos filetime resolution = yes
Has anyone a suggestion, which parameters must be
set, to get the NTFS behaviour? B.t.w., the underlying
filesystem is an ext3 with acl,user_xattr mount options.

2nd Topic - two instances on one server
I have successfully running two instances on one server.
Both are members in an NT4 Domain and every thing works
right, but local username resolution and groupmappings.
Normal startup order is:
- Instance A
- Instance B
Setting some groupmappings works fine for Instance B.
if i restart Instance A but not B, the groupmappings/usermappings 
from Instance A get effective. And thats very bad
If i restart afterwards Instance B, everything is fine.
I guess, this is a winbind issue. The problem is, I think,
the last started winbindd wins...

Here are my conf's (INSTANCE A and B)

INSTANCE A
##
[global]
name resolve order = lmhosts, wins, bcast
private dir = /samba/ages001/conf/private/
idmap gid = 1-4
debug uid = yes
host msdfs = yes
wtmp directory = /samba/ages001/conf/wtmp
lock directory = /samba/ages001/conf/locks/
netbios name = ages001
printing = none
idmap uid = 1-4
workgroup = XX
os level = 20
socket address = 192.168.84.34
security = domain
winbind separator = +
log file = /samba/ages001/conf/log/%m.log
load printers = yes
smb passwd file = /samba/ages001/conf/private/smbpasswd
loglevel = 10
wins server = 193.29.124.81 193.29.122.75
pid directory = /samba/ages001/conf/pids/
interfaces = 192.168.84.34/24
username map = /samba/ages001/conf/private/smbusers
domain master = No
encrypt passwords = yes
template shell = /bin/bash
winbind enum users = yes
password server = SRVA SRVB SRVC
template homedir = /samba/ages001/data/winbindjail
winbind enum groups = yes
preferred master = no
unix charset = UTF-8
utmp directory = /samba/ages001/conf/utmp
winbind cache time = 300
socket options = SO_KEEPALIVE TCP_NODELAY IPTOS_LOWDELAY IPTOS_THROUGHPUT

[dfsroot]
comment = XX
msdfs root  = yes
path= /samba/ages001/data/dfsroot/dfsroot_a
hide files  = /lost+found/
hide dot files = yes
read only   = yes
###

INSTANCE B
###
[global]
private dir = /samba/ages002/conf/private
name resolve order = lmhosts, wins, bcast
idmap gid = 1-2
wtmp directory = /samba/ages002/conf/wtmp
lock directory = /samba/ages002/conf/locks
netbios name = AGES002
writeable = yes
idmap uid = 1-2
workgroup = X
os level = 20
socket address = 192.168.84.35
security = domain
winbind separator = +

log level = 1
log file = /samba/ages002/conf/log/%m.log
smb passwd file = /samba/ages002/conf/private/smbpasswd
load printers = No
map hidden = yes
socket options = SO_SNDBUF=4096 SO_KEEPALIVE TCP_NODELAY IPTOS_LOWDELAY 
IPTOS_THROUGHPUT
pid directory = /samba/ages002/conf/pids
wins server = 193.29.124.81, 193.29.122.75
username map = /samba/ages002/conf/private/smbusers
interfaces = 192.168.84.35/255.255.255.0
domain master = No
encrypt passwords = yes
template shell = /bin/bash
password server = SRVA SRVB SRVC
winbind nested groups = Yes
template homedir = /samba/ages002/data/tmp/winbindjail
preferred master = no
unix charset = UTF8
utmp directory = /samba/ages002/conf/utmp
winbind enum users = no
winbind 

[Samba] Two questions about smbldap-tools

2004-06-07 Thread Dan Hill
Hi all.
1.  Are they any web based interfaces to smbldap-passwd.pl?
2.  Is www.idealx.org still a valid site for the smbldap-tools and 
related info?  When I go there, no matter the URL I enter, I get a login 
screen prompting for a username and password or a message that page can 
not be found on the server.

Thanks,
~Dan
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions about smbldap-tools

2004-06-07 Thread Erik Holst Trans
Hi Dan,
1. Yes, ther is a cgi sctipt in the documentation under 
examples/LDAP/smb-tools/cgi/ldappass.cgi
But i have not used it yet.

2. Yes, works great here.
Using this URL: http://www.idealx.org/index.en.html
Best regards
Erik Holst Trans
Dan Hill wrote:
Hi all.
1.  Are they any web based interfaces to smbldap-passwd.pl?
2.  Is www.idealx.org still a valid site for the smbldap-tools and 
related info?  When I go there, no matter the URL I enter, I get a login 
screen prompting for a username and password or a message that page can 
not be found on the server.

Thanks,
~Dan
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions about smbldap-tools

2004-06-07 Thread Dan Hill
Hi Erik.
1.  Doh!  Guess I missed that. :-/
2.  Very odd.  I've been trying to get to Idealx all morning and was 
always prompted for a username/password.  I was trying to access pages I 
bookmarked and even went to links via google and was presented w/ same 
result.  But you are right now.  The link is working.

Thanks,
~Dan
Erik Holst Trans wrote:
Hi Dan,
1. Yes, ther is a cgi sctipt in the documentation under 
examples/LDAP/smb-tools/cgi/ldappass.cgi
But i have not used it yet.

2. Yes, works great here.
Using this URL: http://www.idealx.org/index.en.html
Best regards
Erik Holst Trans
Dan Hill wrote:
Hi all.
1.  Are they any web based interfaces to smbldap-passwd.pl?
2.  Is www.idealx.org still a valid site for the smbldap-tools and 
related info?  When I go there, no matter the URL I enter, I get a 
login screen prompting for a username and password or a message that 
page can not be found on the server.

Thanks,
~Dan
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re. : [Samba] Two questions about smbldap-tools

2004-06-07 Thread stephane . purnelle




Hi



   
   
   




Hi all.

1.  Are they any web based interfaces to smbldap-passwd.pl?

No

2.  Is www.idealx.org still a valid site for the smbldap-tools and
related info?  When I go there, no matter the URL I enter, I get a login
screen prompting for a username and password or a message that page can
not be found on the server.

www.idealx.org is a valid URL, but you can use this url
http://samba.idealx.org/ for accesc directly to smbldap-tools page.

Thanks,

~Dan

---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions about smbldap-tools

2004-06-07 Thread Jérôme Tournier
Le Mon, Jun 07, 2004 at 10:05:52AM -0400, Dan Hill a ecrit:
 2.  Is www.idealx.org still a valid site for the smbldap-tools and 
 related info?  When I go there, no matter the URL I enter, I get a login 
 screen prompting for a username and password or a message that page can 
 not be found on the server.
if a login/password is asked to you, there's certainly a problem. In that
case, please send me the url you want to access.
Thanks.
The smbldap-tools page is http://samba.idealx.org/
-- 
Jérôme

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions about smbldap-tools

2004-06-07 Thread Dan Hill
Jérôme Tournier wrote:
Le Mon, Jun 07, 2004 at 10:05:52AM -0400, Dan Hill a ecrit:
2.  Is www.idealx.org still a valid site for the smbldap-tools and 
related info?  When I go there, no matter the URL I enter, I get a login 
screen prompting for a username and password or a message that page can 
not be found on the server.
if a login/password is asked to you, there's certainly a problem. In that
case, please send me the url you want to access.
Thanks.
The smbldap-tools page is http://samba.idealx.org/
That is the first page I attempted to access.  I've had it bookmarked 
for a while now.  I then tried http://www.idlealx.org and some others. 
I then searched on Google for smbldap-tools and tried that way.  This 
afternoon though, the links started working normally again.  Maybe some 
work was being done on the server?  I have no idea.  All is fine at the 
moment though.

Thanks for the great tools!
~Dan
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Two questions on Samba

2003-09-03 Thread Jason Williams
Morning everyone.

I have two quick questions that im trying to find out.

First one is on logging. What log file to go through to see why a 
particular client cannot gain access to a certain share? For example: Im 
using samba as a test server in our company. I have setup two users and 
added them both to the same group. I then assigned the option ' valid 
useres = @group' and both users are part of the @group.

However, only one can access it, while the other one cannot.
Also, when I navigate to /var/log/samba/ and look inside, I see logs for 
all the computers on our network. That normal?

Lastly, anyone have any idea as to why one of my users can access a share 
why the other one cannot, in the referenced issue above?

Thank you.

Jason

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions on Samba

2003-09-03 Thread claudio
Hi,
I try to respond to your questions
Jason Williams wrote:

Morning everyone.

I have two quick questions that im trying to find out.

First one is on logging. What log file to go through to see why a 
particular client cannot gain access to a certain share? For example: 
Im using samba as a test server in our company. I have setup two users 
and added them both to the same group. I then assigned the option ' 
valid useres = @group' and both users are part of the @group.

However, only one can access it, while the other one cannot. 
Seems a problem of  permissions on the directory are you sure they 
are right? must be 770 or something similar to permit all the users in 
the group to access to the share...

Also, when I navigate to /var/log/samba/ and look inside, I see logs 
for all the computers on our network. That normal? 
Depends how you have selected to log into the smb.conf. Example:
If in smb.conf you write
log file = /varlog//log.%m
Samba writes the log for each machine (%m is the name of the machine 
contacts samba, so a file log.machinename is generated for each machine)



Lastly, anyone have any idea as to why one of my users can access a 
share why the other one cannot, in the referenced issue above?

Thank you.

Jason

Best Regards.

Claudio.



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two questions: 'wbinfo -a' NT/2k APW

2002-04-15 Thread Gerald (Jerry) Carter

On Fri, 12 Apr 2002, Manuel Gomez wrote:

 OK, the second issue is more interesting (to me).  I'm trying to set up
 a printer for use with my NT4  2k clients.  I have CUPS set up as the
 spooling subsystem, and I have confirmed that it works properly.  If I
 set 'disable spoolss = yes' then I can print successfully from 2k
 (haven't tested NT).  I can even print when I set 'disable spoolss =
 no'.  However, problems arise when trying to use the NT/2k Add Printer
 Wizard: it never appears in the Printers share on my server.  When I

If the APW does not show up, it is because smbd rejected a 
OpenPrinterEx() call with SERVER_ALL_ACCESS rigths.
Set the printer admin parameters in the [global] section 
of smb.conf.

 tail the log.smbd I see:
 
 [TIMESTAMP]  smbd/service.c:make_connection(239)
   [client hostname] ([client IP address]) couldn't find service
 ::{[mysterious SID]}
 (substitutions are surrounded by [])

It's not a SID.  It;'s a GUID IIRC.

 Finally, I tried resolving the SID in the log to a domain group or user,
 to no avail.  My current thinking is that my domain group is not
 resolving properly to a Linux GID.  In my smb.conf, I have 'printer
 admin = root,DOMAIN+Domain Admins.  SWAT does not like those double
 quotes one bit, and I haven't confirmed that it's working at all (see
 above, as well).

I haven't tested SWAT but this should work if you edit smb.conf by hand.









cheers, jerry
 -
 Hewlett-Packard http://www.hp.com
 SAMBA Team   http://www.samba.org
 --http://www.plainjoe.org
 Sam's Teach Yourself Samba in 24 Hours 2ed.  ISBN 0-672-32269-2
 --I never saved anything for the swim back. Ethan Hawk in Gattaca--


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba