[Samba] LDAP only authentication without NSS/PAM - possible?

Is it possible to configure Samba so that it could authenticate users from the LDAP server *only* (i.e., operating system doesn't see the users from LDAP). I'm working on an embedded Samba domain controller, it is based on Linux / busybox / uClibc (and Samba with OpenLDAP). The system

Re: [Samba] Re: Cannot map guest shares in 'security = SERVER' mode o nsamba-3.0.9

I did read the man pages all through, but I'm lost! After struggling for 4 days, I decided to step back to samba-2.2.9, where everything works fine! Rex Dieter wrote: Rene Kapeller wrote: == problem = 'net use n: \\smbs1\public' on Windows XP, always

[Samba] Samba PDC with Slave LDAP server

Hi all I have a samba PDC with LDAP with samba version 3.0.21,(domain=mydomain.com ). the samba and openldap are configured on a single system. i would like to setup samba BDC with slave LDAP server for domain mydomain.com and samba BDC is also having DNS server for domain . my query is, the

[Samba] bug in 3.0.21a?

hello when I try to connect to a share from my windows xp client, it does not work. In linux via smbclient, there's no problem. see below for the error log version = 3.0.21a security = server (the problem only seems to occur on servers that rely on another samba server for authentication).

Re: [Samba] Creating a machine account manually (EMC, Samba PDC)

Bryan Ragon wrote: Greetings, I am trying to join a EMC Celerra NS502 CIFS server to our Samba 3.0.21a domain controller. According to EMC, I was told that we need to manually create the machine account first. How is the best way to do this? How about .../smbldap-useradd -w NS502

[Samba] performance problem. big amount of net traffic for file properties

Hi, We're having performance problems with some workstations (XP workstations). The problem we diagnosed occurs when a user right clicks on a UNC link (on his desktop). The popup window only appears after 80 seconds. On another XP workstation (in the same room, same switch ...), it works OK.

Re: [Samba] performance problem. big amount of net traffic for file properties

Jean-Philippe FARCY wrote: Hi, We're having performance problems with some workstations (XP workstations). The problem we diagnosed occurs when a user right clicks on a UNC link (on his desktop). The popup window only appears after 80 seconds. On another XP workstation (in the same room,

RE: [Samba] Samba daemons hang trying to lock locking.tdb

On Fri, 2006-01-27 at 07:52 +0100, Masopust, Christian wrote: Hi, I had a similar behaviour on my RHEL 4 system (with the only difference that smbds did the fcntl64 to secrets.tdb). I changed machine password timeout = 0 in my smb.conf and the problem had gone away (do you have any

Re: [Samba] bug in 3.0.21a?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 werner maes wrote: hello when I try to connect to a share from my windows xp client, it does not work. In linux via smbclient, there's no problem. see below for the error log version = 3.0.21a security = server (the problem only seems to

Re: [Samba] performance problem. big amount of net traffic for file properties

I have noticed the same on my XP comps, but not all. Currently I'm investigating the problem (maybe some NICs are not samba-friendly ;-)? The problematic machine uses Asus mainborad A8Vdeluxe (with marvel yukon ethernet card) Well, I can share an experience I had with this MB... I allowed

Re: [Samba] ldap not using kerberos (winbind rid idmap)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Roman Sommer wrote: too. In fact ldap even asks for available SASL mechanisms. After some negotiation it _successfully_ binds using GSS SPNEGO. But.. even after this successfully established encrypted bind it keeps querying in plain text. Is

[Samba] 3.0.10 not joined NT4 domain

Hi, all! I want to make Squid authorize users via NT4 domain. I have Samba 3.0.10 (further named PROXY) and NT4SP3 PDC (named CONTROL). First, I try to join domain: # net rpc join -U admin Password: (I enter) Joined domain: REGENT.CENTER. It seems to be OK, but the following record appears in

[Samba] Win2K3 Server, in Terminal Session,

Hello Steven I read about your problem I am sorry I can't help you. Because have the same problem. And have looked everywhere to find a solution so I wonder if you have fixed it Best regards /Peter I have looked for several days and can not find the answer to my problem, but I'm

Re: [Samba] Samba PDC with Slave LDAP server

ashok cvs wrote: Hi all I have a samba PDC with LDAP with samba version 3.0.21,(domain=mydomain.com ). the samba and openldap are configured on a single system. i would like to setup samba BDC with slave LDAP server for domain mydomain.com and samba BDC is also having DNS server for domain .

[Samba] Re: Cannot map guest shares in 'security = SERVER' mode o nsamba-3.0.9

Rene Kapeller wrote: I did read the man pages all through, but I'm lost! After struggling for 4 days, I decided to step back to samba-2.2.9, where everything works fine! Did you try the other options for 'map to guest'? For example, Bad User implies that if connecting as an *existing*

Re: [Samba] performance problem. big amount of net traffic for file properties

Hi, I'm working with Jean-Philippe, and the problem doesn't seem to be a buggy net driver, as all the packets received by the server seem valid (no checksum error). But of course, we're no windows experts, so maybe in windows the low-level drivers can have an influence with the upper IP

Re: [Samba] bug in 3.0.21a?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gerald (Jerry) Carter wrote: -- snip -- Fixed for 3.0.21b. If you could test the SAMBA_3_0_RELEASE branch and verify, that would be great. The other bug reporters have also confirmed the fix. cheers, jerry Jerry, Is it possible to

[Samba] Samba 3.0.21 +solaris 8 +xdm +pam +2003 AD

We have recently upgraded to : samba-3.0.21 openssl-0.9.7g krb5-1.4.3 openldap-2.3.11 db-4.4.16 cyrus-sasl-2.1.21 m4-1.4.4flex-2.5.31 autoconf-2.59 libiconv-1.9.1 gcc-3.4.2 bison-2.1 automake-1.9 libtool-1.5.22 and have got samba authenticating against our 2003 AD servers, however we now

Re: [Samba] ldap not using kerberos (winbind rid idmap)

thanks for your reply. I was more thinking in terms of how to kerberize ldap queries rather than how to enable SSL/TLS :) Or is this setting supposed to enable spnego encrypted queries? regards, Roman Gerald (Jerry) Carter wrote: Roman Sommer wrote: too. In fact ldap even asks for

[Samba] smbldap-tools equivalent (which doesn't need perl)?

Is there any smbldap-tools equivalent, which doesn't need perl (or python, or similar)? I installed Samba on an embedded system, which doesn't have perl installed, and I wonder how can I add users now? :) -- Tomasz Chmielewski http://wpkg.org -- To unsubscribe from this list go to the

[Samba] smldap-passwd issue with ldap

I am trying to change a password from user at my linux box and I am getting the following error: - [EMAIL PROTECTED] /]# /opt/IDEALX/sbin/smbldap-passwd myuser Changing password for myuser

[Samba] Saving MS Word Documents

Okay, I know this has come up before and before being chastised I spent a couple hours reviewing the archives and could find the messages on it. I have a user who when he attempts to save a MS Word Document (test file.doc) to a samba share gets the following error: Word cannot complete the save

[Samba] Samba and add printer drivers from xp

Hi i use samba server with winxp box on our lan from 3 years and before i can upload the xp drivers from a xp machine to samba server without any problem's but recently after un hard disk crash, i upgrade my mandriva server to the last release mdv (2006.0) and now i wasn t able to upload the

[Samba] Any ESRI users? Upgrade 3.0.14 to 3.0.21a broke Arcmap layer loading?

We just upgraded our samba server from 3.0.14 to 3.0.21a and have discovered a subtle but very painful problem. Users of ESRI ArcMap (on fully patched Windows XP clients) are unable to read complex layered file data. Arcmap works fine with 3.0.14, it works fine with the data on a windows share,

[Samba] help me understand ldapsam:trusted

According to smb.conf manual: the ldapsam:trusted=yes option assumes that the complete user and group database that is relevant to Samba is stored in LDAP and also: ldapsam:trusted=yes can be activated and Samba can completely bypass the NSS system to query user information. If I

[Samba] oplocks general question

Hi all, When oplocks = no, I still see the entries below in log.smbd. Clients are XP Pro SP2. Is this a harmless entry? I had another site with the same config, but was previously getting corruption. On some other sites with non SP2 machines I do not see any oplock entries in the

[Samba] macosx (mount_smbfs ok - macosx GUI not working)

Hi there, I have machine running: Linux 2.2.20 Samba version 3.0.14a (debian package) Check the end of the email for the samba config file The samba machine is sharing a directory and it is validating users through a windows 2k PDC. Everything works if I use windows/linux clients, but when I

Re: [Samba] userPassword in a LDAP database of a Samba3 domain

fabricio bianco abreu wrote: Now I am trying to use the same ldap server to support authentication to unix/linux services. Users that have userPassword attribute in the MD5 form can be authentication by unix/linux services. The other users cannot. My question is: Is there a way to populate

Re: [Samba] samba authectication mechanism

[EMAIL PROTECTED] wrote: We referred to some documentation that said that even after importing the NIS users from NIS server, we need to change the password using the smbpasswd command for a NIS user before Samba recognises this user as a valid one. Is this conversion from the NIS server

[Samba] bug - 3.0.14, 3.0.21 intractable browsing problems - help needed

Hello: This browsing problem is not going away. We have followed the how-to, used someone else's known good config, perused packet dumps until we were blue, and tried replicating the setup in a laboratory environment to see if it was site-specific. The problem is still there: If the Samba

Re: [Samba] bug - 3.0.14, 3.0.21 intractable browsing problems - help needed

Stephen Bosch wrote: Hello: This browsing problem is not going away. We have followed the how-to, used someone else's known good config, perused packet dumps until we were blue, and tried replicating the setup in a laboratory environment to see if it was site-specific. The problem is still

Re: [Samba] bug - 3.0.14, 3.0.21 intractable browsing problems - help needed

Stephen Bosch wrote: If the Samba server is the domain browser, the Network Neighborhood (or My Network Places) for the domain is empty. As soon we reset the server to not be a browser of any sort, another machine on the network takes over, and we see all the hosts. This is even though we can

Re: [Samba] Samba PDC with Slave LDAP server

Hi all Thanks for Replying , i have another query. In BDC , according the samba3-by example PDF, IDMAP is said to be pointed to Master LDAP Server. But in Master LDAP server i have samba 3.0.21, which is configured as PDC, i have created users and all windows users are able to login to PDC. but

Re: [Samba] Samba PDC with Slave LDAP server

ashok cvs wrote: Hi all Thanks for Replying , i have another query. In BDC , according the samba3-by example PDF, IDMAP is said to be pointed to Master LDAP Server. But in Master LDAP server i have samba 3.0.21, which is configured as PDC, i have created users and all windows users are able to

Re: [Samba] bug - 3.0.14, 3.0.21 intractable browsing problems - help needed

Hi, Anthony: Thanks for your reply. My comments are below. Anthony Messina wrote: stephen, in your earlier posts, you mentioned that these are windows 2000 clients; is that correct? Yes, that is true, however -- in our laboratory environment, the clients are XP clients, and we observe the

Re: [Samba] bug - 3.0.14, 3.0.21 intractable browsing problems - help needed

Gordon Messmer wrote: Stephen Bosch wrote: If the Samba server is the domain browser, the Network Neighborhood (or My Network Places) for the domain is empty. As soon we reset the server to not be a browser of any sort, another machine on the network takes over, and we see all the hosts.

Re: [Samba] bug - 3.0.14, 3.0.21 intractable browsing problems - help needed

Gordon Messmer wrote: Stephen Bosch wrote: If the Samba server is the domain browser, the Network Neighborhood (or My Network Places) for the domain is empty. As soon we reset the server to not be a browser of any sort, another machine on the network takes over, and we see all the hosts.

svn commit: samba r13182 - in branches/SAMBA_4_0/source/torture: . nbt

Author: jelmer Date: 2006-01-27 13:10:24 + (Fri, 27 Jan 2006) New Revision: 13182 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13182 Log: Add first bits of browsing testsuite. Added: branches/SAMBA_4_0/source/torture/nbt/browse.c Modified:

svn commit: samba r13183 - in branches/SAMBA_3_0_RELEASE: . source/libsmb source/rpc_server source/web

Author: jerry Date: 2006-01-27 13:23:52 + (Fri, 27 Jan 2006) New Revision: 13183 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13183 Log: Final touches on 3.0.21b. * Add new commits to release notes, fix incorrect attributions, correct typos, etc... * Merge

svn commit: samba r13184 - in branches/SAMBA_3_0_RELEASE/source/include: .

Author: jerry Date: 2006-01-27 13:25:04 + (Fri, 27 Jan 2006) New Revision: 13184 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13184 Log: missed merge of James' debug.h fix for the MIPSPro compiler Modified: branches/SAMBA_3_0_RELEASE/source/include/debug.h

svn commit: samba r13185 - in branches/SAMBA_3_0_RELEASE/packaging/Debian/debian-unstable: .

Author: jerry Date: 2006-01-27 13:27:13 + (Fri, 27 Jan 2006) New Revision: 13185 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13185 Log: and one more packaging fix Modified: branches/SAMBA_3_0_RELEASE/packaging/Debian/debian-unstable/samba-common.dhcp

svn commit: samba r13186 - in branches/SAMBA_4_0/source/lib/charset: .

Author: jelmer Date: 2006-01-27 13:29:47 + (Fri, 27 Jan 2006) New Revision: 13186 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13186 Log: Remove assumption that callers that specify -1 actually mean sizeof(pstring) Modified:

svn commit: samba r13187 - in branches/SAMBA_3_0/examples/LDAP: .

Author: jmcd Date: 2006-01-27 15:14:55 + (Fri, 27 Jan 2006) New Revision: 13187 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13187 Log: IBM Tivoli Directory Server schema updates from John Janosik [EMAIL PROTECTED] Modified:

svn commit: samba r13188 - in trunk/examples/LDAP: .

Author: jmcd Date: 2006-01-27 15:31:02 + (Fri, 27 Jan 2006) New Revision: 13188 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13188 Log: Merge from 3.0 - samba schema updates for ITDS from [EMAIL PROTECTED] Modified: trunk/examples/LDAP/samba.schema.at.IBM-DS

svn commit: samba-web r900 - in trunk/news/calendar: .

Author: deryck Date: 2006-01-27 17:21:42 + (Fri, 27 Jan 2006) New Revision: 900 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=900 Log: Add dates to Team calendar. Keep 'em coming (if you have any)... deryck Added: trunk/news/calendar/ukuug_06.txt

svn commit: samba r13189 - in branches/SAMBA_4_0: .

Author: idra Date: 2006-01-27 18:16:53 + (Fri, 27 Jan 2006) New Revision: 13189 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13189 Log: suggest a couple of dev libs before compiling. Modified: branches/SAMBA_4_0/howto.txt Changeset: Modified:

svn commit: samba r13190 - in branches/SAMBA_3_0/source/passdb: .

Author: jra Date: 2006-01-27 19:24:37 + (Fri, 27 Jan 2006) New Revision: 13190 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13190 Log: Fix #3458 from Andriy Gapon [EMAIL PROTECTED]. Don't access free'd memory. Jerry please pick up for 3.0.21b ! Jeremy.

svn commit: samba r13191 - in trunk/source/passdb: .

Author: jra Date: 2006-01-27 19:25:06 + (Fri, 27 Jan 2006) New Revision: 13191 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13191 Log: Fix #3458 from Andriy Gapon [EMAIL PROTECTED]. Don't access free'd memory. Jerry please pick up for 3.0.21b ! Jeremy.

svn commit: samba r13192 - in branches/SAMBA_3_0/source: locking smbd

Author: jra Date: 2006-01-27 19:54:39 + (Fri, 27 Jan 2006) New Revision: 13192 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13192 Log: Fix up alignment issues when printing share mode entries. Add paranioa to debug so we know when an entry is unused. Jeremy.

svn commit: samba r13194 - in branches/SAMBA_3_0/source/locking: .

Author: jra Date: 2006-01-27 19:59:48 + (Fri, 27 Jan 2006) New Revision: 13194 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13194 Log: Don't do extra memcpy's unless we're asked to. Jeremy. Modified: branches/SAMBA_3_0/source/locking/locking.c Changeset:

svn commit: samba r13195 - in trunk/source/locking: .

Author: jra Date: 2006-01-27 20:00:15 + (Fri, 27 Jan 2006) New Revision: 13195 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13195 Log: Don't do extra memcpy's unless we're asked to. Jeremy. Modified: trunk/source/locking/locking.c Changeset: Modified:

svn commit: samba r13193 - in trunk/source: locking smbd

Author: jra Date: 2006-01-27 19:54:42 + (Fri, 27 Jan 2006) New Revision: 13193 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13193 Log: Fix up alignment issues when printing share mode entries. Add paranioa to debug so we know when an entry is unused. Jeremy.

svn commit: samba-web r901 - in trunk/style: .

Author: deryck Date: 2006-01-27 21:25:20 + (Fri, 27 Jan 2006) New Revision: 901 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=901 Log: Comment to help find the hover color. deryck Modified: trunk/style/common.css Changeset: Modified:

svn commit: samba r13196 - in branches/SAMBA_3_0_RELEASE: . examples/LDAP source/locking source/passdb source/smbd

Author: jerry Date: 2006-01-27 21:35:50 + (Fri, 27 Jan 2006) New Revision: 13196 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13196 Log: a few more last minute fixes; still one bug to go Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt

svn commit: samba r13197 - branches/SAMBA_3_0/source/tdb trunk/source/tdb

Author: lmuelle Date: 2006-01-27 21:49:01 + (Fri, 27 Jan 2006) New Revision: 13197 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13197 Log: Add -k switch to dump the data of a single key. Modified: branches/SAMBA_3_0/source/tdb/tdbdump.c

svn commit: samba r13198 - in branches/SAMBA_3_0/source: include locking smbd

Author: jra Date: 2006-01-27 23:30:30 + (Fri, 27 Jan 2006) New Revision: 13198 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13198 Log: Fix issues exposed by Jerry's testing on 64-bit Solaris (I hope). Separate 3.0.21b patch sent to Jerry. Jeremy. Modified:

svn commit: samba r13199 - in trunk/source: include locking smbd

Author: jra Date: 2006-01-27 23:30:44 + (Fri, 27 Jan 2006) New Revision: 13199 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13199 Log: Fix issues exposed by Jerry's testing on 64-bit Solaris (I hope). Separate 3.0.21b patch sent to Jerry. Jeremy. Modified:

Build status as of Sat Jan 28 00:00:02 2006

URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2006-01-27 00:00:04.0 + +++ /home/build/master/cache/broken_results.txt 2006-01-28 00:00:29.0 + @@ -1,15 +1,15 @@ -Build status as of Fri Jan 27 00:00:01 2006 +Build status as of Sat Jan

svn commit: samba r13200 - in branches/SAMBA_3_0_RELEASE: . source/include source/locking source/smbd

Author: jerry Date: 2006-01-28 00:15:49 + (Sat, 28 Jan 2006) New Revision: 13200 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13200 Log: oplock fixes from Jeremy (hopefully last issue before release on Monday) Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt

svn commit: samba r13201 - in trunk/source/nsswitch: .

Author: jra Date: 2006-01-28 01:09:08 + (Sat, 28 Jan 2006) New Revision: 13201 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13201 Log: Don't make returing from the cache dependent on offline global state. Jeremy. Modified: