the name of my active directory domain is
niit.edu.pk
so what should i write in this parameter
default_relam = YOUR.KERBEROS.REALM
also while trying to join the domain i eecute this
command
kinit [EMAIL PROTECTED]
My shell gives me the error cannot find kinit.
can any one tell me where i
No. What would it need that for?
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630
On Fri, 23 Apr 2
Oooh, this one sounds like profile acls or something like that? I don't
have it in front of me, but take a look for acl and profile in the man
page for smb.conf.
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| | | |__/ | \| _| | [EMA
Jonathan Johnson wrote:
Make sure they are all in the same workgroup or domain. If some
are in a domain and some are in a workgroup, give the domain and workgroup
the same name. Without going into a technical explanation of the difference
between domains and workgroups, suffice to say that if they
My best guess is that you have the ability to set the lock directory for
the two different smbd/nmbd's, either within smb.conf, on the command
line, or either one. I don't know if you thought of this already, but
that's what it seems like to me. Check smb.conf's man page to see if this
is possible.
tar files hold onto the UID/GID that owned the files upon tarring. Samba
always untar's on my systems as UID 783, presumably because someone (but
WHO?) who puts together the Samba packages is UID 783 on the system on
which the tar's are built.
Unless you are answering a more complicated question t
What you CAN do is use PAM_smbpass, with the migrate flag, and migrate all
of the UNIX passwords this way. This way, when a user logs in via UNIX or
Samba, their password makes it into the Samba password file. You never
actually have to turn on password encryption via smbpasswd, 'far as I
know, but
Not true. Use "update encrypted = yes" or PAM_smbpass. That's what I did.
Works great. You don't get DIRECTLY to LDAP that way, but you do get the
passwords hashed from UNIX.
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| | | |__/ |
Read the printing chapter in the Samba HOWTO. It is very well written and
it would be a shame if you didn't take the time to read it. ;)
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0
AFAIK, Samba will notice a change on its own as well.
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C
I'm prety sure this was fixed in 3.0.4, not 3.0.3.
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630
FWIW, you did not provide a version number of Samba.
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C6
Some information about Windows Direct Hosting (port 445) can be found at:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q204279
Here you will see that, by disabling port 445 (direct hosting), all traffic
reverts back to NBT.
>From what I can see, Direct Hosting is no more t
This works for me. If need be, remove the account by hand if you are using
smbpasswd as your backend.
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med. and
Your mail [subject: 0i09u5rug08r89589gjrg]
(B
(BBAD TYPE!!
(B
(B--
(BTo unsubscribe from this list go to the following URL and read the
(Binstructions: http://lists.samba.org/mailman/listinfo/samba
I read somewhere that Samba re-reads its config file every minute or so. I
think one of my servers (2.2.0a) does this but the other (2.2.8a) seems to
take longer.
- Original Message -
From: "Ryan Novosielski" <[EMAIL PROTECTED]>
To: "ww m-pubsyssamba" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROT
Hi,
my Situation:
a w2k-server set in mixed mode as ADS-Server,a debian machine with
latest stable samba compiled self with ADS-support.
samba machine joined to ADS-Domain succesfully, winbindd installed and
configured, all w2k users and groups visible on samba-server.
Browsing and connecting to w2
One that you could do is a preexec/postexec type thing. We did this once
before. I believe you could have the pre-exec be on something like the
netlogon share. I can't remember exactly how we used to do this on our
site. Remind me and I will look it up if this hint does not help.
_ _ _ _ __
U, is it just me or did you not ask a question?
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C63
Domain Admins, AFAIK, perform all actions as root. You can verify this in
smb.conf.
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent. | IST/ACS -
Disregard that -- I misunderstood you; I thought you were using the domain
admin param in smb.conf.
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med. and D
I see the same thing. Anyone know what they are? (of course I have other
issues, but that's another story)
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med
Hi !
I'm having the same problem when I want to access my shares on the samba ADS
member server.
I, too, have successfully joined the domain and I can log on the domain
using a 2000 user account from the samba itself.
But as for you, I am prompted for a user and pass when accessing my shares
fro
Hi Christoph,
you have come to the wrong group.
Not that this question does not belong here, its just that nobody is
willing to answer it!
4 questions so far in May have been about this topic (mine:
http://lists.samba.org/archive/samba/2004-May/085521.html) , and many more
earlier months.
And
Hi Nathan,
all I can say is we are also testing Mac OS X with Samba (on Solaris)
and with slightly more typical numbers of files per directory are not seeing
any simliar issues.
In principal it does not surprise me that it is much slower on your OS X
client than on your Linux or Windows cl
> i'm running into a little problem when using preexec scripts for the
> creation
> of dir's on my samba server
>
> script
> ---
> #! /bin/sh
> name=`getent passwd | grep %U | awk -F: '{print $5}'`
> mkdir /samba/test/"$name"
> ---
>
> snip of smb.conf
> ---
> [test]
> path = /samba/t
¡Hola! Soy el programa ezmlm. Me ocupo de la lista de correo
[EMAIL PROTECTED]
Estoy trabajando para mi propietario, a quien se puede localizar
en [EMAIL PROTECTED]
Aquí hay una lista de las direcciones comando disponibles:
Mande un correo a las siguientes direcciones-comando para obtener
info
Too bad, it's not working for me...
But no problem, I'll try the next samba versions until it matchs !
Rock isn't over, Samba Team ! (And will never be !)
Bertram
From: Anders Berg <[EMAIL PROTECTED]>
To: Christoph Scheeder
<[EMAIL PROTECTED]>,[EMAIL PROTECTED]
Subject: Re: [Samba] starnge Aut
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Bull TORS wrote:
| Hi,
|
| I have a FreeBSD-Current and I wanted to access the shares in our
Windows NT.
| What I did:
| Since I only wanted to Access the only Data Server that we have in our
| ethernet LAN I tried in kterm the following,
| #smbutil v
Hello everybody,
1. Question
When migration from an nt4 style domain to a new samba 3 style domain with ldapsam ,
it is necessary to preserve the old SIDs of the user to keep the users
in touch with the old servers. M$ calles this SID history, which means
that the old SID is added to new accounts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ryan Novosielski wrote:
| Thanks a lot -- I've been trying to get our machines upgraded
| to 3.0.x lately, and I have been running into that
| buffer error and this PANIC over and over. The funny thing
| is it SEEMS to work OK (and a fair amount faster
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Anders Berg wrote:
| Hi Christoph,
|
| you have come to the wrong group. Not that this
| question does not belong here, its just that nobody is
| willing to answer it!
|
| 4 questions so far in May have been about this topic
| (mine: http://lists.samba.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tim Booher wrote:
| Hello. I have a Security = share
| My wife is only able to get read permissions to
| this directory, she is a member of
| Myserver\myadmins, but that doesn't seem to help.
| I am new to this and very confused. Can anyone help?
HI,
I have been experiencing problems for the last few days.
One of our systems rebooted itself, and for some reason became the
Master on our Samba network.
This resulted in the loss of the workgroup when going through network
neirgbourhood/my network places etc.
I restarted samba on our servers
Hi !
My problem is that :
[2004/05/12 16:07:30, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
Failed to verify incoming ticket!
[2004/05/12 16:07:30, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
Failed to verify incoming ticket!
[2004/05/12 16:07:39, 1] smbd/sesssetup.c:reply_spnego_kerberos(
Hi,
I am having an annoying problem with adding a group policy to a
Samba 3.0.2 PDC domain, running ona Suse 9 box with Win2k client
machines.
Using 'poledit' from Windows 2000 server, I can add a user or
computer policy for an individual user or computer, and this will
work when placed in my [ne
I too have similar problems that haven't been answered. I have kerberos
functioning and I can kinit a user on the samba box and access a Windows
share, but cannot connect from a Windows workstation to a samba share
that has share permissions on it (file permissions are set to 777 for
testing). The
I have found that putting the port numbers after the server names seems to make things
work better.
Example:
[realms]
TESTLAB.LOCAL = {
kdc = ADS.TESTLAB.LOCAL:88
admin_server = ADS.TESTLAB.LOCAL:749
default_domain = TESTLAB.LOCAL
}
[domain_realms]
.testlab.local = TESTLAB.LOCAL
t
Thanks for your reply. I did this but wasn't happy with the solution.
Sure seems to me that this is something that you should be able to log
with the samba server. Then there always is the source code
Regards,
Mike E.
> -Original Message-
> From: Ryan Novosielski [mailto:[EMAIL
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Yohann Ferreira wrote:
| Failed to verify incoming ticket!
| Here's my krb5.conf :
|
| [logging]
| default = FILE:/var/log/kerberos/krb5libs.log
| kdc = FILE:/var/log/kerberos/krb5kdc.log
| admin_server = FILE:/var/log/kerberos/kadmin
Hi
I've tried to compile samba 3.0.4 for OS X (10.2.8) to no avail, I had
an Error - an undefined type krb5_krbhst_handle.
Now what?
And how do I use / install the compiled package??
Your site does not provide any support for OS X nor does it indicate
which tar.gz work with it.
Thanks in adva
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
|
| hi all
|
| i'm running into a little problem when using preexec scripts for the
creation
| of dir's on my samba server
|
| script
| ---
| #! /bin/sh
| name=`getent passwd | grep %U | awk -F: '{print $5}'`
| mkdir /samba/test/"$name"
| ---
|
| sn
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ralf Tomczak wrote:
| Hi there,
|
| I've seen a strange thing not reported yet AFAIK.
| We have W2K DCs with SP3 with Samba 3.0.2a everything works
| fine in regard to winbind, but with Samba 3.0.3 winbind
| produces schannel len 24 errors and 'wbinfo -
I've searched every archive and read the documentation and I still can not figure out
how to do this.
I've recently installed Debian 3.0 (woody) on a box and have setup Samba on it. I can
see it from my WinXP box just
fine and I have a user on the Debian box that's the same as my user name and
I have recently started migrating a Win2k fileserver to a Samba 3.0.2a
server. Running in full ADS mode, with winbind enabled for authentication
against our Win2k PDC. I am also running as much of the ACL support as I
can.
The problem I am encountering involves excel documents. The document
The C$ stuff is not Japanese share names. All NT partictions (drive
letters) have administrative shares that use that notation. C$ is c:\ etc.
Try this
mount_smbfs //[EMAIL PROTECTED]/sharename /(some directory on the
bsd box you want to mount to), and see what happens. If it errors out
you'
Assuming the name of the server is like server.niit.edu.pk then use the
following. If the server name is niit, dropp the niit.
default_realm = niit.edu.pk
password server = kerberos.niit.edu.pk
as for kinit use
kinit [EMAIL PROTECTED] case sensitive. If that doesn't work,
kill winbindd and res
I've been working with Paul Gardiner to try to replicate this solution at
least once, and it now officially works for someone else. However, up to now I
left out one important step... (sorry)
On your MS Loopback adapter, go to "Properties / TCP/IP Properties /
Advanced... / WINS" & select "Disa
Kinit is the following location on my system: /usr/kerberos/bin/kinit
You can use the locate command to find it. "locate kinit"
It is part of the krb5-workstation rpm. If you don't have it installed,
install it and re-login to get a new shell. It should then be in your
path.
Privileged/Confiden
> This is mentioned in William Mark Smith's instructions on Joe Cheswick's
pages
(http://research.lumeta.com/ches/cheap/tunnelsolution.html , which I
referenced in my initial post)
That'll be Bill Cheswick, sorry Bill.
--
To unsubscribe from this list go to the following
Hi guys, I know Jon Newbigin made a post about this quite a while back
http://lists.samba.org/archive/samba-technical/2002-December/026141.html
and there was some discussion of a security risk.
We are using the patch in Samba 2.2.9 in order make a link from smbfs
mounted
/home/user/.gnome -> /t
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I've just uploaded a patch to the bug report at
~ https://bugzilla.samba.org/show_bug.cgi?id=1315
that should fix the winbindd failure people are
experiencing in 3.0.4. It fixes things for me here, but
i would appreciate some more testing. Let me
On Wed, May 12, 2004 at 04:34:30PM -0400, Rohit Kumar Mehta wrote:
> Hi guys, I know Jon Newbigin made a post about this quite a while back
>
> http://lists.samba.org/archive/samba-technical/2002-December/026141.html
>
> and there was some discussion of a security risk.
>
> We are using the patc
See at #987 bug.
There is a workarround :
The work arround is to configure nssldap user suffix to a suffix
containing both
users and machines entries in its scope (but it's not very usefull...).
Ex : you have people in ou=users,dc=toto,dc=com
and machines in ou=computers,dc=toto,dc=com
And the
i guess my original post wasn't clear.
i wanted to grab the FULLNAME of the user, not the username (%U)
well, here is the script, adding that to smb.conf will pull the FULLNAME
of the user from the SID file on a PDC and make a dir in /samba/test/
preexec = fullname=`getent passwd | grep %U \
Tried, but I can only fix the files after they have been opened by excel.
If i reset the permissions beforehand, the problem still happens the first
time you open excel. I'm really stumped...
Alex Laslavic
Havertys Tech Services
Jim <[EMAIL PROTECTED]> wrote on 05/12/2004 07:07:29 PM:
> Cou
Ryan Novosielski [EMAIL PROTECTED] wrote:
> Not true. Use "update encrypted = yes" or PAM_smbpass. That's what I did.
> Works great. You don't get DIRECTLY to LDAP that way, but you do get the
> passwords hashed from UNIX.
Thanks a lot, but do I get it right ?
I've got my unix passwords crypted i
Ryan Novosielski [EMAIL PROTECTED] wrote:
> What you CAN do is use PAM_smbpass, with the migrate flag, and migrate all
> of the UNIX passwords this way. This way, when a user logs in via UNIX or
> Samba, their password makes it into the Samba password file. You never
> actually have to turn on pass
Samba users -
On redhat linux machine,
I'm unable to map unix groups to nt groups.
The net groupmap command returns no such object.
The net groupmap list returns an empty list.
I'm using ldapsam backend.
It seems that the nt groups must added to the ldap directory first for this
to work.
This wor
Hello,
|
-|Hello everybody,
-|
-|1. Question
-|When migration from an nt4 style domain to a new samba 3
-|style domain with ldapsam ,
-|it is necessary to preserve the old SIDs of the user to keep the users
-|in touch with the old servers. M$ calles this SID history, which means
-|that the
Vielen Dank, dass Du Dich an den Webmaster von Abi99-FreeAtLast.de
gewendet hast. Die e-Mail wird in Kürze bearbeitet.
Viele Gruesse!
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
The mail message (file: your_document.pif) you sent to [EMAIL PROTECTED] contains a
virus. (on mail.dmoch.de)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Hi All,
Just a quick question, what is the max length of a printer name in samba? I am
currently running samba 3.0.4 and keep receiving the following message:-
May 13 07:28:09 gandalf1 smbd[2316]: [2004/05/13 07:28:09, 0]
lib/util_str.c:safe_strcpy_fn(602)
May 13 07:28:09 gandalf1 smbd[2316]: E
63 matches
Mail list logo
