Hi All,
I am using Samba to let my LINUX server to be accessed by my WINDOZE PC's. I
have it configured to use share level config and use it as a Domain Controller.
It works fine, but I would like it to automount the shares whenever a user logs
in to the network.
It is possible in a WINDOZE N
This is just a note for people who prefer using
system/redhat-config-athentication to editing
authentication related config file by hand. The context is Fedora 3,
samba-3.0.14a-1, and
smbldap-tools-0.8.8-1.
The SambaGuide for setting up Samba with LDAP says to use "pam_password exop"
in ldap.con
taso wrote:
I am probably not saying anything that you don't already know, but I suggest
reviewing all parts of the guide that deal with running the smbldap tools.
What I meant was, " reviewing all ... immediately prior to publication."
--
To unsubscribe from this list go to the following URL and r
Hi Tonni!
Thanks for the reply. Actually, the gidNumber 1064 from my samba server
was the group who are allowed the access the shared folder. Originally
the owner was actually root and that the bases of my sharing of every
folder was the group. If I have the group allowed to read, write and
exe
I am having some problems with joining a Mac OS X
machine to my Win2k AD domain, that appear to be Samba
problems.
All home directroies in the domain are hosted on a
Suse 9.2 box running samba 3.0.9-2.3-SUSE. Windows
machines in the domain work fine, mounting a home
directory from the samba machi
On Wed, 4 May 2005 16:56:35 -0400 John Joseph Bachir <[EMAIL PROTECTED]> wrote:
> Are there any tools (perhaps web based) for visualizing the activity
> of a samba server? (connected users, throughput, error, etc)?
webmin has some functionality.
Regards,
Nerijus
--
To unsubscribe from this list
On Wed, 4 May 2005 03:37:52 +0300 (EEST) Nerijus Baliunas <[EMAIL PROTECTED]>
wrote:
> according to 'man smb.conf': Default: winbind cache time = 300
>
> I have not changed it in smb.conf, but when I remove some user
> from some group, command "groups DOMAIN+user" still shows
> that user belongs
Hi,
I would be very grateful if anyone could give me a bit of help
with this. I am trying to run Samba 3.0.5, as distributed with Mac
OS X server 10.3.8, on an Apple Xserve. Things were working
beautifully until I had problems with an IP address change and had to
reinstall everything.
At pr
John H Terpstra wrote:
>
Oh, I am glad you like it. Please report all bugs, errors, defects, and things
missing from it so I can correct this before it goes to print.
I am probably not saying anything that you don't already know, but I suggest
reviewing all parts of the guide that deal with runn
Hi,
I am using a samba domain controller with an LDAP backend. I am also
using samba domain controllers with this setup similar to those
described in the 'Domain Members, Updating Samba and Migration' chapter
of the Samba By Example book.
On the domain member servers winbind stores the UID<->SID
Ok, I've found some references to this issue with samba on the net, but not
related to the version of samba I'm running (which is 3.0.10, updated
version that comes with Fedora Core 3).
My problem is this, I've got a Compaq Proliant 2500 (dual Pentium Pro-200MHz
with 256MB RAM and the standard Net
Are there any tools (perhaps web based) for visualizing the activity
of a samba server? (connected users, throughput, error, etc)?
Thanks
John
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Hi,
I have been trying to learn how to use net groupmap instead of the
smb.conf admin user option, but all in vain. I havent been able to grant
a group administrator privileges. Does anybody have similar issues.
When i do a net groupmap modify ntgroup="Domain Admins"
unixgroup=employee , all u
Hello. I have the same trouble, and it's going me crazy. Can you explain
me step by step what you did to solve this?
Tanks you very much.
*Sebastián Rodríguez Guevara*
Soporte Técnico
Blitz Information Technologies
www.blitzIT.com.ar
(011) 4583-3334 Int.33
Eric Kamara wrote:
Thanks for the help.
Hello Sir,
Can u help me to provide useful information
about the samba. I want to ask few question which are
1)what security does samba provides from sever side
and client side.
2)What auditing features does samba provides and
finally
3) Is it possible to detect brute forcing attack
Thanks for the help. THe problem has been solved. It was something to do
with the Microsoft Management Console Local Security Settings on the
client.
Cheers,
Eric
On Wed, 4 May 2005, Eric Kamara wrote:
What i forgot to say is that there are 5 other XP pcs on the same domain and
they are not ex
On 5/4/05, Thomas Widhalm wrote:
> > The problem is he has an ata system. If we went with a raid, we would
> > want a 0,1 raid. striped with mirroring and I can't find a raid ata card
> > to do that.
>
> I don't know, what performance is needed by your client, but you could
> use 4 ATA drives and
Hey all.
In our network, we have a Debian GNU/Linux Samba 3.0.14 server running.
We don't have any problems with Windows accessing any of the shares,
including
[homes], however, the finder in Mac OS X can't write to the [homes] share.
OS X has no problem writing to the other shares, just [homes].
On Wednesday May 4 2005 2:00 pm, John Joseph Bachir wrote:
> Hello. If anyone can point me in the right direction on this problem I
> would be very greatful. I was hoping there was a "newbie" list but
> didn't see one. If there is a more appropriate list for this question,
> please let me know.
>
>
What i forgot to say is that there are 5 other XP pcs on the same domain
and they are not experiencing such problems. Additional info about the
problem is:
1. When i log onto the pc using a local pc account(such as
administrator),I can browse the PDC and even mount one of its shares as a
networ
On Wed, 2005-05-04 at 19:17 +0200, José M. Fandiño wrote:
> Ti Leggett wrote:
> >
> > That may be true, but there is another win in this type of environment.
> > Separation of your authentication database from your identity management
> > database. Regardless of how you authenticate in this scenar
The kerberos libraries are linked in for kerberos authentication to a MS
AD server not for other third party kerberos databases.
On Wed, 2005-05-04 at 19:45 +0200, José M. Fandiño wrote:
> "José M. Fandiño" wrote:
> >
> > Ti Leggett wrote:
> > >
> > > That may be true, but there is another win in
Hello. If anyone can point me in the right direction on this problem I
would be very greatful. I was hoping there was a "newbie" list but
didn't see one. If there is a more appropriate list for this question,
please let me know.
I am running samba on linux, with mac and windows clients using two
d
"José M. Fandiño" wrote:
>
> Ti Leggett wrote:
> >
> > That may be true, but there is another win in this type of environment.
> > Separation of your authentication database from your identity management
> > database. Regardless of how you authenticate in this scenario, you will
>
> also there is
[EMAIL PROTECTED] wrote on
05/04/2005 12:54:36 PM:
> Below is an extract from my smb.conf file. If you need any more
> information, just ask for it.
>
> [global]
> workgroup = ES
> server string = ES Domain Server
> hosts allow = 169.254.0., 127.
> load printers = no
> log f
Hi, all
please help me.
I have very big problem.
I´m vampire account WinNT PDC to Samba PDC.
Samba 3.0.10, passdb backend = tdbsam, Centos 4
I have 2 problems:
1. In LAN i have 30 computers, but 2 cann´t log onto windows
I get error "Windows cannot connect to the domain, either because the domai
Ti Leggett wrote:
>
> That may be true, but there is another win in this type of environment.
> Separation of your authentication database from your identity management
> database. Regardless of how you authenticate in this scenario, you will
also there is the opposite school of thought, if you h
On Wednesday May 4 2005 1:13 pm, Patricio Bruna V. wrote:
> i have clientes with windows xp2 and service pack2 that cannot access my
> shares.
> are any known issues?
Yes, and they've been posted here. The 3.0.14a version fixes.
Dimitri
--
To unsubscribe from this list go to the following URL a
i have clientes with windows xp2 and service pack2 that cannot access my
shares.
are any known issues?
--
Patricio Bruna
[EMAIL PROTECTED]
RHCE/RHCI
Jefe Soporte y Operaciones LinuxCenter S.A.
Canada 239, 5to piso, Providencia, Chile
http://www.linuxcenterla.com +56-2-2745000
pgpDmAs0P1tR0.pgp
Hans Bergström wrote:
>"You are not allowed to log in interactively"
>- or words to that effect. (It's in Swedih originally)
>I have added a new user - useradd and smbpasswd -a
>but he is not allowed to log on the domain from a W2k-server. Other users
>can though. I have examined everything - i th
OK I did this before seeing the little note in the docs that said don't do this.
Using samba 3.0.14a with ldap auth. Terpstra textbook setup from chapter 9 By
Example.
nsswitch passwd and group = files ldap
I deleted the root user from the ldap directory and tried to re-add using
smbldap-usera
Hello;
I have a strange situation.
About a year ago we upgraded to samba-3.0.10 from samba-2.28a and joined
the samba server to an AD domain as a member server. The migration went
smooth. Everything fell in place just right -- until a few weeks ago that
is.
A few weeks ago we aquired a
Below is an extract from my smb.conf file. If you need any more
information, just ask for it.
[global]
workgroup = ES
server string = ES Domain Server
hosts allow = 169.254.0., 127.
load printers = no
log file = /var/log/samba/log.%m
max log size = 50
security = user
encry
Due to hardware failure we had a rushed migration from a Samba v3.0.9 on
FreeBSD 4, to v3.0.10 on Mandrake Linux 10.1. Since then I have had
problems getting roaming profiles to work for new users. Things works
fine for existing users, but things are broken for new ones. The setup
is a fairly s
I'm posting this for the sake of the archives...
I ended up up dumping the passwords from AD using pwdump2.exe found here:
http://www.bindview.com/Services/RAZOR/Utilities/Windows/pwdump2_readme.cfm
I couldn't get 'net vampire' to work (I didn't try that hard) and MS
doesn't allow AD passwords to
hello,
My system :
Debian sarge up to date .
samba 3.0.14
I can auth for share and use it but on domain controller it s don t work .
here my smb.conf :
#
# samba ldap
#=== Global Settings ===
[global]
# ldap config
passdb backend = ldapsam:ldap://127.0.0.1/
l
Hi,
I have some strange problems with groupmappings not getting applied to
users. A unixgroup sysadmin is mapped to "Domain Admins":
# net groupmap list | grep Domain
Domain Admins (S-1-5-21-3620518786-2721234145-2310544554-512) -> sysadmin
And
"#net rpc user INFO bieling" gives me the same groups
I've been in the process of decommissioning a W2k domain controller and
moving the whole show to a new machine with W2k3. Everything has moved
along quite well except changing the samba setup to use the new system.
A little background:
Samba 3.0.10 on gentoo
KRB5 ver 1.3.1-r1
using winbind/kerb
"You are not allowed to log in interactively"
- or words to that effect. (It's in Swedih originally)
I have added a new user - useradd and smbpasswd -a
but he is not allowed to log on the domain from a W2k-server. Other users
can though. I have examined everything - i think - but apparently not wha
Paul Gienger wrote:
Im doing this. The profile is mapped even if i use the "net use drive:
/delete". Even if i set another share to map to this drive letter! I
need the profile share because im using roaming profiles.
Keep in mind, that even if you do a net use drive: /delete, the
Explorer wil
On Tue, 2005-05-03 at 20:29 +0200, Hans du Plooy wrote:
> I've found a suggestion on google in the meantime to add
> client driver = yes to my smb.conf file - will try that tomorrow
Hi, this solved the problem
Thanks
--
Kind regards
Hans du Plooy
SagacIT (Pty) Ltd
hansdp at sagacit dot com
--
Hi,
I have Samba running on FreeBSD as the PDC. I have added an XP PC to the
domain successfully but on trying to log onto windows using a domain
account, I get the following error:
"Windows cannot connect to the domain, either because the domain
controller is down or otherwise unavailable or b
> The problem is he has an ata system. If we went with a raid, we would
> want a 0,1 raid. striped with mirroring and I can't find a raid ata card
> to do that.
I don't know, what performance is needed by your client, but you could
use 4 ATA drives and build one RAID5 out of them with the Linux
What is the latest release of SAMBA for a SUN/Solaris 5.9 box? I
currently have 2.2.8a.
If you want to stick to what Sun tells you, just run the maintenance
updates and patch clusters and you're done, it may be a patched 2.2.8a.
If you want to build your own (which I recommend) then the versi
That may be true, but there is another win in this type of environment.
Separation of your authentication database from your identity management
database. Regardless of how you authenticate in this scenario, you will
be sending passwords (even encrypted) over the wire. If the passwords
are in a KDC
Hello Experts,
I have a severe Problem with my current samba installations. Here in my
Home-Office networt I have a dual-CPU machine with Debian Sarge, hosting
some samba 3.0 shares and as well being a host for 4 vmware-sessions (Vmware
Workstation v4.52, with 3xServer2003 and 1xXPpro). As well I
Hi,
What is the latest release of SAMBA for a SUN/Solaris 5.9 box? I
currently have 2.2.8a.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
ons, 04.05.2005 kl. 14.28 skrev Joey Esquibal:
> We've just successfully upgraded our samba server from 2.0 to 3.0.
> Access from windows clients and linux clients particularly RH7.3 and
> RH9.0 has no problem accessing the files and saving them.
>
> Unfortunately, we also have Mandrake and Kno
We have just added a lexmark c510 color laserjet printer to our
network. I have worked with HP printers previous to this and have
successfully had Windows computers select a queue from our linux server
which fed into the HP printers. This does not work with the lexmark
printers.
Neither Win
Im doing this. The profile is mapped even if i use the "net use drive:
/delete". Even if i set another share to map to this drive letter! I
need the profile share because im using roaming profiles.
Keep in mind, that even if you do a net use drive: /delete, the Explorer will
still show the d
On Wednesday 04 May 2005 7:36 am, Guido Lorenzutti wrote:
> Tony Earnshaw wrote:
> >tir, 03.05.2005 kl. 20.49 skrev Guido Lorenzutti:
> The problem is that i don't know why when a user logs in it gets mapped
> a network share of his remote profile. I wan't to stop this.
> >>>
> >>>You mean
Hi again!
I re-read my post and realized that I missed a few things:
OS: Suse 9.2 professional
Samba: Version 3.0.9-2.3-SUSE
Kerberos version: Heimdal 0.6.2
ADS: Windows 2003 sp1 (all patches till today)
---Smb-conf-
[global]
workgroup = ALFA-MOVING
realm = A
On Wednesday May 4 2005 8:40 am, Adam Tauno Williams wrote:
> > Forgive my ignorance as I plumb the depths of this issue. OK, there is
> > no BDC in a Windows 2003 Server environment. What, then, takes the place
> > of a BDC?
>
> An active directory server.
>
> > Can I somehow replicate the Windo
On Tue, 2005-05-03 at 10:55 -0700, [EMAIL PROTECTED] wrote:
> What is your setup can you post your BDC configurations
The Samba guide contains specific examples of setting up a BDC.
signature.asc
Description: This is a digitally signed message part
--
To unsubscribe from this list go to the fol
Thomas Widhalm wrote:
Oh. Write a logon script for each user, using, for example, 'net use z:
/delete' for each drive letter that's mapped and you don't want to see.
Actually, the profiles share should not be mapped anyway. If you don't
have a profiles share, the profiles will get put in the user's
Tony Earnshaw wrote:
tir, 03.05.2005 kl. 20.49 skrev Guido Lorenzutti:
The problem is that i don't know why when a user logs in it gets mapped
a network share of his remote profile. I wan't to stop this.
You mean you want to stop roaming profiles for users?
--Tonni
Nop, i j
> Forgive my ignorance as I plumb the depths of this issue. OK, there is no
> BDC
> in a Windows 2003 Server environment. What, then, takes the place of a BDC?
An active directory server.
> Can I somehow replicate the Windows LDAP directory to a Samba box and have
> that as a back-up syste
I am running a very basic fileserver with samba 3.0.15pre2. It works
very well except I am getting a ton of errors on WinXP SP2 clients only.
Is there any way to disable the logging of this?
Log:
[2005/05/04 08:22:02, 0] lib/util_sock.c:get_peer_addr(1150)
getpeername failed. Error was Transpor
Sirs,
We've just successfully upgraded our samba server from 2.0 to 3.0.
Access from windows clients and linux clients particularly RH7.3 and
RH9.0 has no problem accessing the files and saving them.
Unfortunately, we also have Mandrake and Knoppix workstations and in
which we're having problem
On Tuesday May 3 2005 9:03 am, you wrote:
> Dimitri Yioulos wrote:
> >Good morning/evening to all.
> >
> >I hope I'm not taking up space here or wasting people's time but -
> >
> >I've had several samba machines joined to a Win2k3 AD for some time now.
> > Of course, I'm using kerberos, but that's
In Chapter 12 (Identity Mapping) of the Samba HOWTO Collection it states:
Backup Domain Controller
Backup Domain Controllers (BDCs) have read-only access to security
credentials that are stored in LDAP. Changes in user or group account
information are passed by the BDC to the PDC. Only the PD
i have a samba 2.2.7 pdc and a samba 3.0.14 domain member server (dms).
after setting winbind up (including adding to the domain), i attempt
to access the domain member server from a win2k client, which fails with
the network request is not supported".
this is in samba client log:
[2005/05/03
setup override entries in your DNS.
Nikolay Kabaivanov wrote:
Hello,
I have Fedora Core 3 linux and Samba 3.0.14a on a server that has 2
ethernet interfaces connected to the same LAN. The purpose to have such
a server with 2 network cards is to serve 2 network shares with high
traffic. I want t
ons, 04.05.2005 kl. 10.38 skrev Thomas Widhalm:
> > Oh. Write a logon script for each user, using, for example, 'net use z:
> > /delete' for each drive letter that's mapped and you don't want to see.
> > Actually, the profiles share should not be mapped anyway. If you don't
> > have a profiles shar
Hello Ti,
Ti Leggett wrote:
>
> There are two main benefits to Kerberos authentication. The first is
> that in a true Kerberos environment, no password is never sent across
> the wire. The second, is that you get the holy grail of single sign on.
>
> Your LDAP PDC should be able to make use of K
taso wrote:
>
> WHat is the significance to Samba of pam_password exop vs pam_password md5 in
> ldap.conf?
the difference is who does the password hash. AFAIK with md5 the ldap client
is responsible of hash generation whilst with exop (EXtended OPeraion) the
operation
is left to the ldap serv
Is it possible to use wildcards or variable substitution in the
"username map"? I am using:
security = ADS
password server = TEST1.MYDOMAIN
The samba server joined the subdomain TEST1.MYDOMAIN. There is a trusted
relationship between MYDOMAIN and TEST1.MYDOMAIN. I want ONLY users from
TEST1.MY
In Windows XP, I share a folder "SHARED_FOLDER".
Then, mount it by using "smbmount" to /mnt/SHARED_FOLDER in a Linux box
with smaba 3.0.4
Then, I invoke a stat() call to a file in /mnt/SHARED_FOLDER (in Python):
ex.
$python
>> import os,time
>> s=os.stat('/mnt/SHARED_FOLDER/A_FILE')
>> print s.
Hi,
I am wondering the rationale behind this design
decision. I am working on a small network using samba
as the PDC/BDC with most workstation being Windows
machine.
With samba and the User Manager for domain, I can
easily manage the user database from Windows.
In addition to samba, I also run t
Hello,
I notice that the samba ldap schema has the object classes "sambaConfig"
and "sambaConfigOption" is there some way to load the entire "smb.conf" from
the ldap directory. Or is this a feature that will be implemented in the
future?
Is there a patch that would allow this? If so can someo
I've migrated from windows pdc to samba and came across a strange problem.
When doing the migration everything went ok. I vampired the accounts and
created the group mappings etc. The machine and user accounts came across
ok. The xp box I've been testing with was authenticating and could acc
Samba-3 does not at this time have this infrastructure. Samba-3 BDCs try to
contact the LDAP server directly. So long as the master LDAP server can be
contacted by the BDC the machine password change can be written, but if it is
down, or can not be contacted the change will fail.
In other w
> Oh. Write a logon script for each user, using, for example, 'net use z:
> /delete' for each drive letter that's mapped and you don't want to see.
> Actually, the profiles share should not be mapped anyway. If you don't
> have a profiles share, the profiles will get put in the user's home
> direct
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi Eric,
strange feature (for me) ;-))
I'll go on and try it. Thanks for your reply.
Greetings,
Holger
Eric Hines wrote:
> It's not a bug, it's a feature. SWAT assumes that once you've made your
> list of valid users (or invalid users, or etc) that
Hello,
I have Fedora Core 3 linux and Samba 3.0.14a on a server that has 2
ethernet interfaces connected to the same LAN. The purpose to have such
a server with 2 network cards is to serve 2 network shares with high
traffic. I want the first share to be accessed trough the first network
card (
tir, 03.05.2005 kl. 20.49 skrev Guido Lorenzutti:
> >>The problem is that i don't know why when a user logs in it gets mapped
> >>a network share of his remote profile. I wan't to stop this.
> >>
> >>
> >
> >You mean you want to stop roaming profiles for users?
> >
> >--Tonni
> >
> >
> >
>
76 matches
Mail list logo
