[Samba] User list

2005-10-07 Thread Scott Mayo

I have a samba server setup with LDAP.  Before I was using LDAP, I could
get a list of users and groups with my perl script by using the getgrent
and getpwent routines.  I cannot use this anymore, because for some
reason, these routines do not see all of my users.  They only see up to
a certain point.  If I do a 'getent passwd' from the command line, it
only shows up to certain number of users.  The others are there though
and they work fine.

IE:  I created the user 'johnsonz' as one of my last users.  If I do a 
'gentent passwd | grep johnsonz', then I do not see this user anywhere 
at all, but if I do 'id johnsonz', it shows his information.


Anyone have any ideas why this would happen?  Everything seems to be 
working alright besides this, but I would like to be able to extract a 
list of users or groups at certain times.  At this point, I see no way 
to do it since there is no /etc/passwd or /etc/group to check.


Thanks

--
Scott Mayo
Technology Coordinator
Bloomfield Schools
PH: 573-568-5669
FA: 573-568-4565
Pager: 800-264-2535 X2549

Duct tape is like the force, it has a light side and a dark side and it
holds the universe together.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] User list

2005-10-07 Thread John H Terpstra
On Friday 07 October 2005 07:32, Scott Mayo wrote:
 I have a samba server setup with LDAP.  Before I was using LDAP, I could
 get a list of users and groups with my perl script by using the getgrent
 and getpwent routines.  I cannot use this anymore, because for some
 reason, these routines do not see all of my users.  They only see up to
 a certain point.  If I do a 'getent passwd' from the command line, it
 only shows up to certain number of users.  The others are there though
 and they work fine.

 IE:  I created the user 'johnsonz' as one of my last users.  If I do a
 'gentent passwd | grep johnsonz', then I do not see this user anywhere
 at all, but if I do 'id johnsonz', it shows his information.

 Anyone have any ideas why this would happen?  Everything seems to be

Update to a more recent version of nss_ldap. It is available from 
http://www.padl.com.

- John T.

 working alright besides this, but I would like to be able to extract a
 list of users or groups at certain times.  At this point, I see no way
 to do it since there is no /etc/passwd or /etc/group to check.

 Thanks

 --
 Scott Mayo
 Technology Coordinator
 Bloomfield Schools
 PH: 573-568-5669
 FA: 573-568-4565
 Pager: 800-264-2535 X2549

 Duct tape is like the force, it has a light side and a dark side and it
 holds the universe together.

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, 2 Ed., ISBN: 0131882228
Samba-3 by Example, 2 Ed., ISBN: 0131882221X
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] User list

2005-10-07 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

John H Terpstra wrote:
 On Friday 07 October 2005 07:32, Scott Mayo wrote:
 I have a samba server setup with LDAP.  Before I was using LDAP, I could
 get a list of users and groups with my perl script by using the getgrent
 and getpwent routines.  I cannot use this anymore, because for some
 reason, these routines do not see all of my users.  They only see up to
 a certain point.  If I do a 'getent passwd' from the command line, it
 only shows up to certain number of users.  The others are there though
 and they work fine.

 IE:  I created the user 'johnsonz' as one of my last users.  If I do a
 'gentent passwd | grep johnsonz', then I do not see this user anywhere
 at all, but if I do 'id johnsonz', it shows his information.

 Anyone have any ideas why this would happen?  Everything seems to be
 
 Update to a more recent version of nss_ldap. It is available from 
 http://www.padl.com.

John,

Just out of curiousity, what in this post make you think that
an update nss_ldap would solve the problem?  Have you experienced
this bug ?   Just curious.

Off hand I would probably be more apt to point at a corrupted
index in the slapd database.






cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
There's an anonymous coward in all of us.   --anonymous
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDRsLJIR7qMdg1EfYRAiSJAKCtKs9jqRjX8tkIzbxtkkYRc+ERBACg2mWn
Yf+dCTtjpDuXOahsp583Abc=
=xYmA
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] User list

2005-10-07 Thread John H Terpstra
On Friday 07 October 2005 12:47, Gerald (Jerry) Carter wrote:
 John H Terpstra wrote:
  On Friday 07 October 2005 07:32, Scott Mayo wrote:
  I have a samba server setup with LDAP.  Before I was using LDAP, I could
  get a list of users and groups with my perl script by using the getgrent
  and getpwent routines.  I cannot use this anymore, because for some
  reason, these routines do not see all of my users.  They only see up to
  a certain point.  If I do a 'getent passwd' from the command line, it
  only shows up to certain number of users.  The others are there though
  and they work fine.
 
  IE:  I created the user 'johnsonz' as one of my last users.  If I do a
  'gentent passwd | grep johnsonz', then I do not see this user anywhere
  at all, but if I do 'id johnsonz', it shows his information.
 
  Anyone have any ideas why this would happen?  Everything seems to be
 
  Update to a more recent version of nss_ldap. It is available from
  http://www.padl.com.

 John,

 Just out of curiousity, what in this post make you think that
 an update nss_ldap would solve the problem?  Have you experienced
 this bug ?   Just curious.

I helped Scott with his set up originally. The version of nss_ldap I pointed 
Scott at has a bug that is fixed in later release. It causes the exact 
symptoms he reported. I have had to update to nss_ldap 242 in a number of 
sites to fix this same problem.

- John T.


 Off hand I would probably be more apt to point at a corrupted
 index in the slapd database.






 cheers, jerry
 =
 Alleviating the pain of Windows(tm)  --- http://www.samba.org
 GnuPG Key- http://www.plainjoe.org/gpg_public.asc
 There's an anonymous coward in all of us.   --anonymous

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, 2 Ed., ISBN: 0131882228
Samba-3 by Example, 2 Ed., ISBN: 0131882221X
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] User list

2005-10-07 Thread Scott Mayo

John H Terpstra wrote:

On Friday 07 October 2005 12:47, Gerald (Jerry) Carter wrote:


John H Terpstra wrote:


On Friday 07 October 2005 07:32, Scott Mayo wrote:


I have a samba server setup with LDAP.  Before I was using LDAP, I could
get a list of users and groups with my perl script by using the getgrent
and getpwent routines.  I cannot use this anymore, because for some
reason, these routines do not see all of my users.  They only see up to
a certain point.  If I do a 'getent passwd' from the command line, it
only shows up to certain number of users.  The others are there though
and they work fine.

IE:  I created the user 'johnsonz' as one of my last users.  If I do a
'gentent passwd | grep johnsonz', then I do not see this user anywhere
at all, but if I do 'id johnsonz', it shows his information.

Anyone have any ideas why this would happen?  Everything seems to be


Update to a more recent version of nss_ldap. It is available from
http://www.padl.com.


John,

Just out of curiousity, what in this post make you think that
an update nss_ldap would solve the problem?  Have you experienced
this bug ?   Just curious.



I helped Scott with his set up originally. The version of nss_ldap I pointed 
Scott at has a bug that is fixed in later release. It causes the exact 
symptoms he reported. I have had to update to nss_ldap 242 in a number of 
sites to fix this same problem.


- John T.



Off hand I would probably be more apt to point at a corrupted
index in the slapd database.


Actually after posting this question earlier in the morning, Pierre sent 
the fix to me within a few minutes.  The following line in the 
slapd.conf file took care of my problems.


sizelimit -1

I will also do an update though.

--
Scott Mayo
Technology Coordinator
Bloomfield Schools
PH: 573-568-5669
FA: 573-568-4565
Pager: 800-264-2535 X2549

Duct tape is like the force, it has a light side and a dark side and it
holds the universe together.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] User list

2005-10-07 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

John H Terpstra wrote:

 I helped Scott with his set up originally. The version of nss_ldap I pointed 
 Scott at has a bug that is fixed in later release. It causes the exact 
 symptoms he reported. I have had to update to nss_ldap 242 in a number of 
 sites to fix this same problem.

ok.  good to know.  Thanks.





jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDRsmZIR7qMdg1EfYRArWqAJwIqPhNXHZ24/t3r/rkCMnLQxrqRACfcwwv
UtJrC9V6uA2AAGISxc3YQVU=
=aVXY
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Sync win2k local user list with samba user list

2004-02-14 Thread et
Hi all,

I want to be able to at logon sync the windows 2000 userlist with the samba 
user list, so that each user that is added to the samba server is automatically 
added to each workstation with appropriate permisions ie admin, power users, 
etc. Is it possible to do this and if so how.
I am running latest samba as PDC with roaming profiles.

Any help is greatly appreciated

Regards

Will


-
This mail sent through IMP: http://horde.org/imp/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Sync win2k local user list with samba user list

2004-02-14 Thread John H Terpstra
On Sat, 14 Feb 2004 [EMAIL PROTECTED] wrote:

 Hi all,

 I want to be able to at logon sync the windows 2000 userlist with the samba
 user list, so that each user that is added to the samba server is automatically
 added to each workstation with appropriate permisions ie admin, power users,
 etc. Is it possible to do this and if so how.
 I am running latest samba as PDC with roaming profiles.

Why in goodness name would you want to add accounts to workstations that
already exist on the server? The whole purpose of having domain accounts
is so that you do not need user accounts on the individual workstations.

Baffled! 

 Any help is greatly appreciated

Avoid pain! Do NOT have local workstation accounts. Instead, use domain
accounts.


- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Sync win2k local user list with samba user list

2004-02-14 Thread Paul Espinosa

.[ John H Terpstra wrote ]

 Sun, 15 Feb 2004 01:36:08 + (GMT)

 On Sat, 14 Feb 2004 [EMAIL PROTECTED] wrote:
 
  Hi all,
 
  I want to be able to at logon sync the windows 2000 userlist with the
  samba user list, so that each user that is added to the samba server is
  automatically added to each workstation with appropriate permisions ie
  admin, power users, etc. Is it possible to do this and if so how.
  I am running latest samba as PDC with roaming profiles.
 
 Why in goodness name would you want to add accounts to workstations that
 already exist on the server? The whole purpose of having domain accounts
 is so that you do not need user accounts on the individual workstations.
 
 Baffled! 

I think what's he's saying is adding a local domain user to a box in order
to upgrade permissions.  In other words have Bob have a domain logon, but
also be able to be a local admin for the Windows box.

 
  Any help is greatly appreciated
 
 Avoid pain! Do NOT have local workstation accounts. Instead, use domain
 accounts.
 
 
 - John T.

I would also like to know if this is possible as there is a lot of software
out there that still requires elevated privs to run on Windows boxen.

Paul Espinosa

-- 
They that would give up freedom to obtain a little temporary
safety deserve neither freedom nor safety

--Benjamin Franklin
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Sync win2k local user list with samba user list

2004-02-14 Thread Andrew Bartlett
On Sun, 2004-02-15 at 13:04, Paul Espinosa wrote:
 .[ John H Terpstra wrote ]
 
  Sun, 15 Feb 2004 01:36:08 + (GMT)
 
  On Sat, 14 Feb 2004 [EMAIL PROTECTED] wrote:
  
   Hi all,
  
   I want to be able to at logon sync the windows 2000 userlist with the
   samba user list, so that each user that is added to the samba server is
   automatically added to each workstation with appropriate permisions ie
   admin, power users, etc. Is it possible to do this and if so how.
   I am running latest samba as PDC with roaming profiles.
  
  Why in goodness name would you want to add accounts to workstations that
  already exist on the server? The whole purpose of having domain accounts
  is so that you do not need user accounts on the individual workstations.
  
  Baffled! 
 
 I think what's he's saying is adding a local domain user to a box in order
 to upgrade permissions.  In other words have Bob have a domain logon, but
 also be able to be a local admin for the Windows box.

Indeed, this is quite a common setup.

  
   Any help is greatly appreciated
  
  Avoid pain! Do NOT have local workstation accounts. Instead, use domain
  accounts.
  
  
  - John T.
 
 I would also like to know if this is possible as there is a lot of software
 out there that still requires elevated privs to run on Windows boxen.

Put each user in a domain group, and put that group into the local
'administrators' or 'power users' alias.  So far, I've done this with
the GUI.  It should be possible to do this with remote tools like
rpcclient, or with local scripting too.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Sync win2k local user list with samba user list

2004-02-14 Thread John H Terpstra
On Sat, 14 Feb 2004, Paul Espinosa wrote:


 .[ John H Terpstra wrote ]
 
  Sun, 15 Feb 2004 01:36:08 + (GMT)
 
  On Sat, 14 Feb 2004 [EMAIL PROTECTED] wrote:
 
   Hi all,
  
   I want to be able to at logon sync the windows 2000 userlist with the
   samba user list, so that each user that is added to the samba server is
   automatically added to each workstation with appropriate permisions ie
   admin, power users, etc. Is it possible to do this and if so how.
   I am running latest samba as PDC with roaming profiles.
 
  Why in goodness name would you want to add accounts to workstations that
  already exist on the server? The whole purpose of having domain accounts
  is so that you do not need user accounts on the individual workstations.
 
  Baffled! 

 I think what's he's saying is adding a local domain user to a box in order
 to upgrade permissions.  In other words have Bob have a domain logon, but
 also be able to be a local admin for the Windows box.

Doh! John T. Read it again next time! :(

As Andrew Bartlett has said, that's easy. Simply add the Domain Users
group to your local Administrators group on each workstation.

Sorry - I should not shoot from the hip so fast.


 
   Any help is greatly appreciated
 
  Avoid pain! Do NOT have local workstation accounts. Instead, use domain
  accounts.
 
 
  - John T.

 I would also like to know if this is possible as there is a lot of software
 out there that still requires elevated privs to run on Windows boxen.

 Paul Espinosa



Cheers,
John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Sync win2k local user list with samba user list

2004-02-14 Thread Paul Espinosa
Well, I just went and tried Andrew Bartlett's suggestion.  Works like a
champ!

Guess I'm just used to not being able to nest groups.  heh

Thanks all,

Paul Espinosa

BTW

John,

Really getting a lot out of your book The Official Samba-3 HOWTO and
Reference Guide.  I bought it for work and am planning on buying it for my
personal bookshelf.

.[ John H Terpstra wrote ]
|
| Sun, 15 Feb 2004 02:43:17 + (GMT)
|
| On Sat, 14 Feb 2004, Paul Espinosa wrote:
| 
| 
|  .[ John H Terpstra wrote ]
|  
|   Sun, 15 Feb 2004 01:36:08 + (GMT)
|  
|   On Sat, 14 Feb 2004 [EMAIL PROTECTED] wrote:
|  
|Hi all,
|   
|I want to be able to at logon sync the windows 2000 userlist with
|the samba user list, so that each user that is added to the samba
|server is automatically added to each workstation with appropriate
|permisions ie admin, power users, etc. Is it possible to do this
|and if so how. I am running latest samba as PDC with roaming
|profiles.
|  
|   Why in goodness name would you want to add accounts to workstations
|   that already exist on the server? The whole purpose of having domain
|   accounts is so that you do not need user accounts on the individual
|   workstations.
|  
|   Baffled! 
| 
|  I think what's he's saying is adding a local domain user to a box in
|  order to upgrade permissions.  In other words have Bob have a domain
|  logon, but also be able to be a local admin for the Windows box.
| 
| Doh! John T. Read it again next time! :(
| 
| As Andrew Bartlett has said, that's easy. Simply add the Domain Users
| group to your local Administrators group on each workstation.
| 
| Sorry - I should not shoot from the hip so fast.
| 
| 
|  
|Any help is greatly appreciated
|  
|   Avoid pain! Do NOT have local workstation accounts. Instead, use
|   domain accounts.
|  
|  
|   - John T.
| 
|  I would also like to know if this is possible as there is a lot of
|  software out there that still requires elevated privs to run on Windows
|  boxen.
| 
|  Paul Espinosa
| 
| 
| 
| Cheers,
| John T.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] user list

2003-02-25 Thread John H Terpstra
On Tue, 25 Feb 2003, [ISO-8859-2] Máté Zoltán wrote:

 hello!

 windows 95/98 client can't get domain user list from samba 2.2.7a
 i would need it, because I dont want to allow some domain users accesing
 a shared directory on windows 98

 this is a feature or bug?

Most likely a bug in your configuration since it works fine for me.

In your network configuration have you:

1. Installed the Client for Microsoft Networks?
2. Configured it to: Log onto a Windows NT Domain?
3. Entered the correct domain name for 2. above?
4. Set the workgroup to the same as your domain name?
5. In the Access Control tab have you set it to use User Level Access
Control and set the Obtain lsit of users from to the name of your
domain?

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] user list

2002-04-23 Thread ashley

G'day,

I have a samba server acting as an nt pdc. My windows machines login tp
the server with no problem. However if I create a folder on one of the
windows clients and wish to share it a list is not returned from the
server and I get a server not available error. However I can use the
server for files and have been able to logon so seeing it is not a
problem.

Can someone point me to the documents I have missed please, or can samba
give a client a user list??

Thanks

ashley


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba