Dear all
Version: samba 3.0.21a
Server: Windows 2000 mixed (R2K-PDC)
steps
-- net rpc join domain -U administrator%x , (success joined)
-- start winbindd => OK
-- wbinfo -u => failed, error message
kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot
resolve network address
Hi Geoff,
I've made it. Yes, it is good enough to follow the steps in Ch 12.3.2 ,
anyway, I have attached part of my "krb5.conf" for you as reference:
-starts
[libdefaults]
default_realm = MYDOMAIN.COM
dns_lookup_realm = true
dns_lookup_kdc = true
t
Dumb question time; I can't find the answer in the Samba-3 or HOWTO
docs: how do you add users to the passdb.tdb (tdbsam's db)? Is
pdbedit the only way? I ask because the Chapt 3 Samba-3 example has
passdb = tdbsam in the samba config file, but the instructions for
adding users are to use use
> smbclient -L GERARD -U gerard
> Error returning browse list: NT_STATUS_OK
> What am I doing wrong and how do I correct it?
It looks like a possible permissions problem on the XP box. What
happens if you run "\\Gerard" from within XP? Also if you put in a
wrong username and/or password with s
> Once i did this, i was able to change the ACL, all i wanted. Hope
> this saves someone some effort down the line.
Just out of curiosity, what ACLs are you changing? Because my set up
only gives me access to the ugo/rwx UNIX permissions. I can't add an
arbitrary user, like DOMAIN/UserX. Is thi
> Runing with security = domain I think at first i'm now forced to
> replicate all active-directory user to unix-users on my samba-server
> to establish a mapping between NT <-> Unix User ID's for the proper
> ownership of files on the share's filesystem
You can use winbind to do this more or le
> Jan 3 18:17:34 smbserver smbd[19781]: 3ds09 (172.16.10.9) couldn't
> find service images
I'm guessing it means that \\3ds09 tried to connect to \\samba\images
but there's no 'images' share on \\samba.
Cheers,
Adam.
--
To unsubscribe from this list go to the following URL and read the
instru
> Jan 3 10:22:35 server4 smbd[12599]: lady (192.168.100.124)
> couldn't find service
On the 'lady' computer (assuming it's WinXP), try running "net use" and
then delete any connections to nonexistent shares on the Samba box
("net use /d \\server\share"). It looks like 'lady' could be caching
> I installed a new samba-cups server on a sarge machine. Windbind
> works, I can get all users and groups.
> I copied the generic windows postscript driver files as in
> cupsaddsmb-manpage described to /usr/share/cups/drivers (tried also
> adobe drivers) Also tried the same with the cups driver, t
SHA1 wrote:
> Simon Leung wrote:
>>
>> Anyway, my question is beside Winbind, do I need to configure krb5 on
>> Samba (Domain A) when talking to Win2003SP1 on Domain B?
>
> Beginning with 3.0.21 if you are talking to AD in anyways (domain
> member server, domain controller with domain trusts, etc
At 01/02/06 22:36, Craig White wrote:
On Mon, 2006-01-02 at 22:24 -0600, Eric Hines wrote:
> At 01/02/06 21:37, Adam Nielsen wrote:
> > > I'm having trouble connecting to my Samba server. The immediate
> > > symptom is that I cannot see my Samba server in my Windows Network
> > > Neighborhood, a
Perhaps the problem is that samba doesn't know about the ordinary
user accounts?
At the command line on the samba server, you may add an account to
samba with:
smbpasswd -a your_unix_account_name
You will be prompted for a password twice.
If that isn't the issue, then I would expe
At 01/03/06 05:48, Gerard Seibert wrote:
I have just recently installed Samba. I have two WinXP Pro machines
networked to a FreeBSD 5.4 computer. The Printer is connected to one
of the WinXP machines currently.
This is the output of the 'smbclient' command.
smbclient -U user-name -L winxp
Pas
I just started learning to use Samba. I just have the default shares it
starts with. When I try to access them I can only use the ROOT account to do
it. How can I use my normal account, that I have on the system, to access my
shares from another networked computer?
The other computer is runn
Shashidhar, SR wrote:
Hello All,
Happy New Year 2006 !
Currently we are using TAS as an interop tool to access the UNIX file
systems on to windows platforms. For some performance/licenses issues,
we would like to migrate to SAMBA now.
Our Unix file system is available on HP N-class se
I continue to receive this error message:
Error returning browse list: NT_STATUS_OK
This is how I am attempting to list the shares on my WinXP machine.
smbclient -L GERARD -U gerard
Password:
Domain=[GERARD] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]
Sharename Type C
OK, I found my problem and i am a little ashamed it took me this long to
figure it out but here goes.
The error i was getting when trying to adjust the ACL was "Changes could not
be saved, access is denied"
using Winbind, i had done the following:
#chgrp "MRPARTYK/Domain Users" /ftproot
which l
On Tue, 2006-01-03 at 13:19 -0500, [EMAIL PROTECTED] wrote:
> Anyone have the latest 99samba-schema-netscapeds5.ldif for
> SunOne/iPlanet. The latest one is only from 1/2005. I need
> one that has the attributes for 3.0.21.
>
> I will convert the latest openldap one but just wanted to
> see
I added the attributes acl,user_xattr to the /etc/fstab and then raised the
log level to 10. and attempted once more the MMC, "Connect to another
computer", and used the Samba hostname to connect to it, then i went into a
share, and on the security tab, i hit the advanced button and modified the
wr
Anyone successfully use TLS to an OpenLDAP back end using a *wildcard*
SSL certificate?
Samba 3.0.20b
OpenLDAP 2.3.12
OpenSSL 0.9.8
(these are blastwave.org CSW packages, btw)
Fresh install of Solaris 9 with very the latest patch cluster. No
iPlanet or Sun DS stuff is installed.
Here's an ex
Hi,
I'm pretty confused about using samba as domain-member and file-server.
Assuming i have a couple of windows-users on my active directory
server and there are
mainly 2 groups defined in the AD: ReadOnlyGroup and WriteOnlyGroup.
On my samba-server there is one share which should be used by bo
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
mehta kiran wrote:
> Hi Jerry,
> I want to do it locally.
> My one question is still unanswered:
> 'nmblookup -U localhost -R jack' returned
> success
> though local host is not a wins server
> Shouldnt it fail with e
Hi Jerry,
I want to do it locally.
My one question is still unanswered:
'nmblookup -U localhost -R jack' returned
success
though local host is not a wins server
Shouldnt it fail with error
" 127.0.0.1 system is not wins server" ?
thanks,
kiran
--- "Ge
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
mehta kiran wrote:
> Hi Jerry,
> Thanks for your reply. You specifically mentioned
> that for the command 'net rpc service status WINS',
> samba version has to be >= 3.0.21. Does this mean
> that
> there is no command/way to determine if local syst
Anyone have the latest 99samba-schema-netscapeds5.ldif for
SunOne/iPlanet. The latest one is only from 1/2005. I need
one that has the attributes for 3.0.21.
I will convert the latest openldap one but just wanted to
see if anyone has already done it.
Thanks
--
To unsubscribe from this li
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dwight Tovey wrote:
> I tested it. I tried several permutations, using "invalid
> users" and "valid users" in both the [global] and
> [homes] sections. With the "invalid users" line
> that you had (in either section), once I login as a
> Domain Adm
Hi Jerry,
Thanks for your reply. You specifically mentioned
that for the command 'net rpc service status WINS',
samba version has to be >= 3.0.21. Does this mean
that
there is no command/way to determine if local system
is
WINS Server for version < 3.0.21 ?
thanks,
kiran
--- "Gerald (Jerry)
hello,
here is my problem
I'm using samba 3.0.14a (debian)
with ldapbackend
in october I could join machine to domain without problem
but today it doesn't work
after some experiment I manage to see that even pdbedit was not working well
for example
pdbedit -a -m -u zigo
give me this error
ldap
Jerry said:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Dwight Tovey wrote:
>
>>>set an invalid users line in [global]
>>>
>>> invalid users = daemon bin lpd mail .
>>>
>> Well, not quite. As I understand the smb.conf man page,
>
> Did you actually test it? Or just read the man
- Original Message -
From: "Guenther Deschner" <[EMAIL PROTECTED]>
To: "William Jojo" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Tuesday, January 03, 2006 10:02 AM
Subject: Re: [Samba] ldapsam:trusted work?
> Do you have a guest account setup in LDAP ?
Yep...but silly me had an
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Simon Leung wrote:
> Hi there,
>
> I am reading the Samba3-By-Example dated 29Dec2005. I've
> found that there's no information on telling how to make
> a successful deployment on interdomain trust, but this
> is the missing Chapter that I am really
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dwight Tovey wrote:
>>set an invalid users line in [global]
>>
>> invalid users = daemon bin lpd mail .
>>
> Well, not quite. As I understand the smb.conf man page,
Did you actually test it? Or just read the man page. This use to
be enou
Jerry said:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Dwight Tovey wrote:
>
>> The problem is that one of our testers has discovered that if he is
>> logged in as somebody who is a member of the Domain Admin
>> group, he can access all user's home directories by using
>> Window's "Net
I'm preparing some boxes for production and have configured samba with
winbind for ADS domain authentication but I've noticed that winbind will
not start when the network is not connected. I think the proper
operation should be to start but (of course) not function and log the
inability to con
Hi,
I am running samba-3.0.20b on FreeBSD 5.4-STABLE. Recently, the LAN
must have been rearranged to use VLANs. So I added DHCP and WINS
support to samba master browser. There is old historical domain which
runs some applications that cannot be moved yet and has NT4 PDC and
BDC (which uses names
Hi,
I've encountered a really wierd problem the winbind process when trying to
start up the samba services, I hope someone can assist
I start up the smbd service from the command line (using "smbd -D"), it
starts sucessfully
When I then attempt to start the winbind service (using "winbind -B") it
Hi Lars,
> The more or less usual version update as you already mentioned.
>
See below
>
> What filesystem are you using?
reiserfs
>
> And which mount options are active? Type mount to display them.
only (rw)
> See /usr/share/samba/swat/help/ welcome-no-samba-doc.html is shown if
> wel
Am Dienstag, 3. Januar 2006 16:05 schrieb Patrick DUBAU:
> 3 : doing dpkg -l | grep sysvi
> gives : ii sysvinit 2.86.ds1-1 System-V like ini
> that's good but how do i use it ? No man, no command.
> Can you give me a help about it ?
You're using debian I think. For the patch too do an
Hmm, interesting, i wasn't sure the "username map" was necessary when using
Winbind.
I can see how that would work, but it seems unecessary, since Winbind's
purpose is to make Active Directory users and groups appear to be local
users and groups, so permissions on a shares would be modified using
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dwight Tovey wrote:
> The problem is that one of our testers has discovered that if he
> is logged in as somebody who is a member of the Domain Admin
> group, he can access all user's home directories by using
> Window's "Network Neighborhood" explor
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
mehta kiran wrote:
> If this is EXPECTED output, is there any command
> by which i can find if local system is wins server ?
In >= 3.0.21 you can run 'net rpc service status WINS'
cheers, jerry
Interesting, i was not aware of that, the kernel does have the necessary
support in it for POSIX ACL's and Extended attributes, but i was lacking the
entry in /etc/fstab i added it and will test it this afternoon and report
back.
Thanks for taking the time to respond, Louis!
On 1/3/06, Louis van
Oops, it seems I need active directory to do this :-(
[EMAIL PROTECTED] wrote 2006-01-03
15:36:05:
>
> Hello,
>
> I would like to install a Windows 2000 Server and configure it with RIS
> (remote installation services).
> The server is in a domain where a Samba 3 server, a machine with SuSE
Linu
Thanks Tom!
Evidently Fedora Core 4 kernel's DO have POSIX ACL and Extemded attributes
support.
On 1/3/06, Thomas Bork <[EMAIL PROTECTED]> wrote:
>
> Mike Partyka wrote:
>
> > Your referring to POSIX ACL support in the kernel? I am not entirely
> sure
> > how to check for this in the standard p
Am Dienstag, 3. Januar 2006 15:43 schrieb Sebastian Held:
> see attached patch for the last-command.
yeah, it stripped my patch...
inline version:
--- last.orig 2004-07-30 14:16:26.0 +0200
+++ last.c 2006-01-03 15:35:26.0 +0100
@@ -451,13 +451,13 @@
#endif
i
Sebastian Held a écrit :
Am Dienstag, 3. Januar 2006 14:08 schrieb Patrick DUBAU:
- only the 8 first characters from the loging name are stored (for
example : patrick. instead of patrick.dubau, see capture below). Is
there a vay to pass over this limit ?
see attached patch for the last-
thanks all for your reply
i've tried this:
[EMAIL PROTECTED]:~# pdbedit -v -u nicola | grep must
Password must change: Fri, 13 Dec 1901 21:45:51 GMT
[EMAIL PROTECTED]:~# smbpasswd nicola
New SMB password:
Retype new SMB password:
[EMAIL PROTECTED]:~# pdbedit -v -u nicola | grep must
Password must
Hi,
On Tue, Jan 03, 2006 at 09:52:31AM -0500, William Jojo wrote:
>
> Samba 3.0.21(and 'a'), AIX 5.2.
>
>
> Was looking as what appears to be a fantastic optimization, but can't
> find info in source code or swat and turning the option on makes smbd do
> exit(-1) (on AIX anyway).
Do you have a
Does really nobody have an idea?
thanks angela
Am Dienstag, 3. Januar 2006 10.31 schrieb Angela Gavazzi:
> Hallo,
>
> I have an old samba-cups printserver (debian woody), connected to the
> domain through winbind, that I must replace now.
>
> I installed a new samba-cups server on a sarge machine
Samba 3.0.21(and 'a'), AIX 5.2.
Was looking as what appears to be a fantastic optimization, but can't find info
in source code or swat and turning the option on makes smbd do exit(-1) (on AIX
anyway).
ldapsam:trusted = yes
Does this really exist? Does it need a maintainer? Are there any do
Am Dienstag, 3. Januar 2006 14:08 schrieb Patrick DUBAU:
> - only the 8 first characters from the loging name are stored (for
> example : patrick. instead of patrick.dubau, see capture below). Is
> there a vay to pass over this limit ?
see attached patch for the last-command. If you have a look int
Actually, in the case of disparate usernames between Windows and Unix accounts,
that's exactly how it's done (or CAN be done).
At my previous job, I was using Samba+Winbindd to allow Unix share access to
Windows/AD accounts; the file specified in the "username map" parameter
contained a bunch o
Hello,
I would like to install a Windows 2000 Server and configure it with RIS
(remote installation services).
The server is in a domain where a Samba 3 server, a machine with SuSE Linux
and Samba 3.0.20b-3.4-SUSE, plays the PDC role. The PDC works well.
When I try to configure RIS in the applica
wel, is there in /boot a config- file
open it with you favorite editor,
search for XATTR or POSIX_CAL
if set M its possible you still have to load the modules
if set Y its in kernel, then kernel is ok.
check you fstab
i added for /home only the acl and EA.
like this.
dev/sda12 /home
Mike Partyka wrote:
Your referring to POSIX ACL support in the kernel? I am not entirely sure
how to check for this in the standard precompliled kernel, and i believe
that support not to be common in most linux distro's so i would guess that,
POSIX ACL support is not enabled.
for pseudofile in
I just tested with phpldapadmin 0.97.2
Just curious - how well does phpldapadmin work with Samba/Posix
Accounts? Are there any gotcha's? A cursory reading of the phpldapadmin
site has no mention of Samba support...
Thanks,
Charles
--
To unsubscribe from this list go to the following URL and
Ah, no, I didn't mean to misspell it...That was the problem though :) I'll
have a look at that shortly
Also, versions were in original posting - Centos 4.2, Samba 3 (3.0.10-1.4E.2,
to be exact).
Thanks!
ZB
On Monday 02 January 2006 11:41 pm, Karl Banasky wrote:
> It is installed with
Your referring to POSIX ACL support in the kernel? I am not entirely sure
how to check for this in the standard precompliled kernel, and i believe
that support not to be common in most linux distro's so i would guess that,
POSIX ACL support is not enabled.
My understanding is that POSIX ACL suppor
Forgot to include some more info that might be helpful.
OS: Fedora Core 4 (up-to-date)
Kernel 2.6.14-1.1653_FC4smp
Samba 3.0.14a-2
Hostname: sand (192.168.0.8)
Windows server 2003 Std. (up-to-date)
*running on a VMWare workstation, running on a generic AMD 1.8Ghz system
Domain: mrpartyka.domain
H
does your kernel support ACL and Extended Attributes.
Also you can set the following settings
inherit acls = (yes/no)
nt acl support =
map hidden = no
map system = no
map achieve = no
store dos attributes = yes
ea support = yes
u combine above settings for your enviroment.
Als dit you set the
Thanks Sebastian for your (quick) response.
I did what you say and it works. But i have 3 questions :
- only the 8 first characters from the loging name are stored (for
example : patrick. instead of patrick.dubau, see capture below). Is
there a vay to pass over this limit ?
- for the 2 last lin
Hai All,
Can Anyone guide me what this log message mean
Jan 3 18:17:34 smbserver smbd[19781]: 3ds09 (172.16.10.9) couldn't find
service images
Jan 3 18:17:34 smbserver smbd[19781]: [2006/01/03 18:17:34, 0]
smbd/service.c:make_connection(798)
Jan 3 18:17:34 smbserver smbd[19781]: 3ds09 (172
Samba 3.0.14a server which is a domain member server of a 2003 Active
Directory and Domain Controller.
There are no errors that appear in the windows servers event log, and my
smb.conf is pretty simple:
[global]
unix charset = LOCALE
workgroup = mrpartyka
realm = MRPARTYKA
I have just recently installed Samba. I have two WinXP Pro machines
networked to a FreeBSD 5.4 computer. The Printer is connected to one of
the WinXP machines currently.
This is the output of the 'smbclient' command.
smbclient -U user-name -L winxp
Password:
Domain=[winxp] OS=[Windows 5.1] Ser
Hi,
you can use the utmp logging feature.
Place the following options in the global group of smb.conf:
utmp = Yes
utmp directory = /var/log/samba/utmp
wtmp directory = /var/log/samba/wtmp
then
mkdir -p /var/log/samba/utmp
mkdir -p /var/log/samba/wtmp
touch /var/log/samba/utmp/utmpx
touch /var/log
Hi,
i just want to know if it's possible (i guess it is) to see in a log
file the logging (date and hour) of a user.
I looked in /var/log/smbd.log, nmbd.log, machine.log but there is no
record when the user pat (for example) loged in the network.
Does someone knows ?
Thanks.
--
To unsubscri
Hello,
I use SLES9 on a HP Proliant server.
See lots of errors, see below.
Sinds the installtation of office2003 on the WinXP clients.
The clients are running 'normally' and can acess the samba server.
Running 3.0.14a-SerNet-SuSE Samba
Can anybody give me a hint how to solve this?
Best regards,
H
Hallo,
I have an old samba-cups printserver (debian woody), connected to the domain
through winbind, that I must replace now.
I installed a new samba-cups server on a sarge machine. Windbind works, I can
get all users and groups.
I copied the generic windows postscript driver files as in cupsa
Hi,
don't know it you have been successfull, any way: There's no problem
with samba, when you mount a share, you have to assign a local uid and
gid to link theese files to your local filesystem.
"mount" accepts the options "uid=localUsername,gid=localGroupname" ,
surely also "smbm
Hi,
first which version of samba are you running?
are you running pdc or AD Member ?
etc etc.
need more input ;-)
Louis
>-Oorspronkelijk bericht-
>Van: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED]
>Namens Mike Partyka
>Verzonden: maandag 2 januari 2006 23:50
>Aan: samba@lists.
>
>It may be necessary to specify the group as follows:
>
> valid users = @"domain\group"
>
>- John T.
not needed, i only use @"domain users" and @"Domain Admins"
and this works great. So the \ is not needed in this case.
and im using Samba 3.0.14a (debian
just to know.
Louis
--
To u
71 matches
Mail list logo