Re: [Samba] cracking smbpasswd

2006-08-04 Thread Guido Lorenzutti
You don't need to do this. What are you going to do with the plain text password? encript them again to put the password on the user? They are migration tools to do this. I have to migrate 2000 users and i don't crack every single password. Keep on reading the docs, coz the explanation on how t

Re: [Samba] ldap filters?

2006-08-04 Thread Guido Lorenzutti
simo wrote: On Fri, 2006-08-04 at 14:35 -0300, Guido Lorenzutti wrote: So what happend with the ldap filters? Is a feature that will come back some time in the future? Or I must keep using an old version? I have an ldap tree with 3 companies and i can't allow that people from one company is a

[Samba] cracking smbpasswd

2006-08-04 Thread Julian Pilfold-Bagwell
Hi all, I'm currently migrating from tdbsam to LDAP and want to restructure my setup at the same time. I can get the SIDs for the user and machine accounts using pdbedit -Lv | grep SID but I have 800 users so I don't want to reset their passwords. So far, I've dumped the contents of the tdbs

[Samba] using probleme

2006-08-04 Thread Nrx
Hello I use Centos 4.3 and samba installed directly by the OS. Ver :3.0101462 I have Xp pro sp2. On the windows I see the linux folder but as I try to open it it ask for a password. On samba I didn't provide any password. I tried the user and passwd used on my xp session but didn't work. On t

Re: [Samba] Re: Lost All Win95 connections to Samba

2006-08-04 Thread Gary Dale
Douglas D Germann Sr wrote: < torfree.net> writes: I'm wondering at this point about the difference in the handling of DNS/WINS between Win95 and WinXP. Normally, XP is the fussier of the two, but ... With a separate switch and router, and a router normally providing DNS services, perhaps

[Samba] Re: Lost All Win95 connections to Samba

2006-08-04 Thread Douglas D Germann Sr
< torfree.net> writes: > I'm wondering at this point about the difference in the handling of > DNS/WINS between Win95 and WinXP. Normally, XP is the fussier of the > two, but ... > > With a separate switch and router, and a router normally providing DNS > services, perhaps you are having a prob

Re: [Samba] ldap filters?

2006-08-04 Thread simo
On Fri, 2006-08-04 at 14:35 -0300, Guido Lorenzutti wrote: > So what happend with the ldap filters? Is a feature that will come back > some time in the future? Or I must keep using an old version? > I have an ldap tree with 3 companies and i can't allow that people from > one company is able to log

[Samba] ldap filters?

2006-08-04 Thread Guido Lorenzutti
So what happend with the ldap filters? Is a feature that will come back some time in the future? Or I must keep using an old version? I have an ldap tree with 3 companies and i can't allow that people from one company is able to login in the other domain! I don't have pam. What can I do? Tnxs in

[Samba] bug with net rpc list trustdom?

2006-08-04 Thread Guido Lorenzutti
When a do "net rpc list trustdom" I must provide a username and password for the domain admin. But if I want to revoke a trustdom I don't have to provide anything. Not a passowrd, not a user. Is this OK? Im using samba 3.0.14 in a Debian Stable. -- To unsubscribe from this list go to the following

[Samba] NT4 -> Samba 3 migration issue

2006-08-04 Thread Hoover, Tony
I am trying to Migrate one of our three Windows NT domains to Samba/LDAP using CentOS 4.3 (up to date via 'yum update'), Samba 3.0.10-1.4E.6.2, OpenLDAP: slapd 2.2.13 uname -a Linux sambatest.sal.ksu.edu 2.6.9-11.ELsmp #1 SMP Wed Jun 8 16:59:12 CDT 2005 x86_64 x86_64 x86_64 GNU/Linux

[Samba] reverse veto files?

2006-08-04 Thread Guido Lorenzutti
Im currently having a very long list of veto files, just to be sure that the people ONLY can write documents and styleshets. Is there any plan to have a "reverse veto files" to ONLY allow this type of file? Because when I have a lot of veto files the samba gets too slow, even if it dosen't use rege

[Samba] ldapsam failover do not work?

2006-08-04 Thread [EMAIL PROTECTED]
Hello Got a problem with ldapsam passdb failover. Samba verson 3.0.22 (debian build). passdb backend = ldapsam:"ldap://192.168.2.2/ ldap://192.168.2.3/"; For some unclean reason slapd at 192.168.2.2 eventially goes offline. Ex, Aug 4 06:27:36 localhost slapd[31295]: daemon: listen=8, new conn

RE: [Samba] domain group mapping in 3.0.23a issues

2006-08-04 Thread John Mason
Hey, I use the exact same samba version as you... I'm waiting for the 3.0.23b or higher but anyway.. In addition to net groupmap commands, you'll need to look at net rpc rights commands for any other-than-admin rights. It seems samba (and someone correct me if I'm wrong) does the windows c

[Samba] Newbie using John T's Examples (AD)

2006-08-04 Thread Indiana Fats
I'm following along with John T's examples book and I'm still befuddled on getting Samba working. The server is Fedora Core 5, Samba 3.0.23a-1.fc5.1 PDC is W2K SP4 with AD I basically copied/pasted the example smb.conf and nsswitch.conf to get a basic working config. The lines "template primary

[Samba] guest access in server security mode?

2006-08-04 Thread Dan Armbrust
I have a samba server that is configured in "server" mode. However, I want to share one folder to everyone - whether or not they have a real account on my system, or on the server that I am authenticating against. The [global] section of my config file has things like this: log file =

Re: [Samba] domain group mapping in 3.0.23a issues

2006-08-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris wrote: > On Friday 04 August 2006 14:24, Chris wrote: >> If not, why might members of the domadm group (as in the second >> example) not have admin priveleges when logging onto the domain? > > I figured this part outspecific RID's are needed

Re: [Samba] domain group mapping in 3.0.23a issues

2006-08-04 Thread Chris
On Friday 04 August 2006 14:24, Chris wrote: > If not, why might members of the domadm group (as in the second > example) not have admin priveleges when logging onto the domain? I figured this part outspecific RID's are needed for certain groups. With previous versions the correct RID's were

Re: [Samba] Re: Lost All Win95 connections to Samba

2006-08-04 Thread Gary Dale
Douglas D Germann Sr wrote: < nodalis.it> writes: Hi Douglas, what do you think about a switch (or hub, of course) failure? Did you test the low level connection? Perhaps you can start with a ping from w95 to any other station and vice versa. Let me know NanniX Nanni-- Thanks, Na

[Samba] domain group mapping in 3.0.23a issues

2006-08-04 Thread Chris
How does one create all of the builtin groups for this release? When using tdbsam with previous releases one would automatically get such groups as: System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Admins (S-1-5-21-1832519723-2688400599-34

[Samba] Re: Lost All Win95 connections to Samba

2006-08-04 Thread Douglas D Germann Sr
< nodalis.it> writes: > > Hi Douglas, > what do you think about a switch (or hub, of course) failure? > Did you test the low level connection? Perhaps you can start with a ping > from w95 to any other station and vice versa. > > Let me know > > NanniX Nanni-- Thanks, Nanni! Switch or hub fa

[Samba] unable to resolve WERR_ACCESS_DENIED - please help

2006-08-04 Thread Steven Rice
hi, I'm trying to mirgate shares from a NT4 to a samba 3.0.22 server. I understand that 'net rpc share add' should work before trying 'net rpc share mirgate'. I configured smb to use winbind which works great to connect and writing to the shares. I also confogured nsswitch to auth to winbind,

Re: [Samba] Account Flag X -Password Never Expires Problem

2006-08-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Joseph Holtgrefe wrote: > I am currently running the latest build of samba-3.0.23a with a tdbsam > backend. I have noticed for sometime now when I use pdbedit -c [X] username > it sets the Account Flag X for password never expires but does not modify

Re: [Samba] RE: Incorrect handling of group permissions

2006-08-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter Trifonov wrote: > Dear Jerry, > > >>> log.winbindd contains a lot of messages like >>> [2006/07/24 15:12:19, 0] nsswitch/winbindd.c:request_len_recv(517) >>>request_len_recv: Invalid request size received: 1836 >> This can only be a misma

Re: [Samba] valid users problem with 3.0.23a

2006-08-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gerald (Jerry) Carter wrote: > Jeremy Allison wrote: >>> On Fri, Aug 04, 2006 at 04:47:34PM +0200, Franz Strebel wrote: Hello, Yes, same problem with @"DOMAIN+name with spaces". >>> It's probably the 'remove " character at end of line' t

Re: [Samba] What gui works with samba 3.x and tdbsam ???

2006-08-04 Thread Gary Dale
Gary MacKay wrote: I just setup a new server for a client and everything is running well. I added and setup all the users from the cli just because that's how I'm used to doing it. I tried using the samba gui that comes with CentOS 4.03 and I tried Webmin but nether one will add the user probe

RE: [Samba] RE: Incorrect handling of group permissions

2006-08-04 Thread Peter Trifonov
Dear Jerry, > > log.winbindd contains a lot of messages like > > [2006/07/24 15:12:19, 0] nsswitch/winbindd.c:request_len_recv(517) > >request_len_recv: Invalid request size received: 1836 > > This can only be a mismatch between winbindd and > libnss_winbind.so like I said before. 1836 w

[Samba] What gui works with samba 3.x and tdbsam ???

2006-08-04 Thread Gary MacKay
I just setup a new server for a client and everything is running well. I added and setup all the users from the cli just because that's how I'm used to doing it. I tried using the samba gui that comes with CentOS 4.03 and I tried Webmin but nether one will add the user proberly to the tdbsam da

Re: [Samba] RE: Incorrect handling of group permissions

2006-08-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter Trifonov wrote: > Hello everyone, > > I have raised this question some time ago, but the solution still was not > found. > > The FreeBSD 6.1 server is a member of ADS domain. There is a > directory named test with write permissions granted to

Re: [Samba] valid users problem with 3.0.23a

2006-08-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeremy Allison wrote: > On Fri, Aug 04, 2006 at 04:47:34PM +0200, Franz Strebel wrote: >> Hello, >> >> Yes, same problem with @"DOMAIN+name with spaces". > > It's probably the 'remove " character at end of line' trim_string > code. I'll take a look (b

Re: [Samba] Problem with PRODUCTION machine, please respond quickly!!

2006-08-04 Thread Jeremy Allison
On Fri, Aug 04, 2006 at 11:29:39AM +0200, Sander van Harmelen wrote: > Dear Samba guru... > > > > I have a problem when I try to remove some files on a samba share... I > see this in my samba.log: > > > > [2006/08/04 10:58:55, 1] > smbd/posix_acls.c:store_inheritance_attributes(252) > >

Re: [Samba] valid users problem with 3.0.23a

2006-08-04 Thread Jeremy Allison
On Fri, Aug 04, 2006 at 04:47:34PM +0200, Franz Strebel wrote: > Hello, > > Yes, same problem with @"DOMAIN+name with spaces". It's probably the 'remove " character at end of line' trim_string code. I'll take a look (but I have a vague memory of Jerry fixing this :-). Jeremy. -- To unsubscribe

Re: [Samba] Problem with PRODUCTION machine, please respond quickly!!

2006-08-04 Thread Jeremy Allison
On Fri, Aug 04, 2006 at 12:34:40PM +0200, S. J. van Harmelen wrote: > Yes, but when you view the output from 'ls -la' you'll see this group > has rwx rights do... > > And when I change the group::r-- to group::rwx with setfacl, I still > cannot delete the file from within windows... If you're the

Re: [Samba] Problem with PRODUCTION machine, please respond quickly!!

2006-08-04 Thread Jeremy Allison
On Fri, Aug 04, 2006 at 11:46:03AM +0200, S. J. van Harmelen wrote: > Yes, I did... > > See below the output from 'ls -la' and below that the output of getfacl: > > drwxrwx--x+ 2 mpsfrontpageacct Domain Admins 4096 Aug 4 10:58 . > drwxrwx--x+ 3 solcon_admin Domain Admins 4096 Aug 4 10:58 ..

[Samba] Samba 3.0.23a

2006-08-04 Thread Marek Dabrowski
Hello firends I have strange information in my logs. Could you explain me what does it mean? [2006/08/04 12:07:41, 3] smbd/msdfs.c:dfs_redirect(435) dfs_redirect: Not redirecting DS1/sk/Internet/Dz/sub_dir/document.doc [2006/08/04 12:07:41, 3] smbd/msdfs.c:dfs_redirect(439) dfs_redirect: P

Re: [Samba] valid users problem with 3.0.23a

2006-08-04 Thread Franz Strebel
Hello, Yes, same problem with @"DOMAIN+name with spaces". Thanks, Franz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

[Samba] RE: Incorrect handling of group permissions

2006-08-04 Thread Peter Trifonov
Hello everyone, I have raised this question some time ago, but the solution still was not found. The FreeBSD 6.1 server is a member of ADS domain. There is a directory named test with write permissions granted to user bill and group DOMAINNAME/algocod: #ls -al /tmp drwxrwx--- 2 billD

Re: Fw: [Samba] net join error

2006-08-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nanni X wrote: > Did you follow step-by-step the guidelines explained in > the HowTo to join ADS? > > We too have a W2K3 server updated to last sp and post-sp > updates by Windows' automatic update and we > encountered no problems following the How

Re: [Samba] Cannot start Samba 3.0.23a

2006-08-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Breen wrote: > I just installed Samba 3.0.23a from the sources on a Slackware 10 > server kernal version 2.4.26. I didn't get any errors during > installation. When I try to start the Samba daemon by smdb -D nothing > happens. Here is a snippet

Re: [Samba] Two samba installation on the same host

2006-08-04 Thread simo
On Fri, 2006-08-04 at 15:18 +0200, [EMAIL PROTECTED] wrote: > Dear all > > For some reasons I would like to run two samba installations (/opt/samba1 > and /opt/samba2) on the same host. > Is such a dual installation supported? > If yes, what do I have to consider? If you can bind to 2 different

Re: [Samba] Re: samba 3.0.23a Cannot join network

2006-08-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sean R. Hanson wrote: > passdb/pdb_smbpasswd.c:build_sam_account(1202) > build_sam_account: smbpasswd database is corrupt! username COMPUTER$ > with uid ### is not in unix passwd database! > > The previous version has not troubles. I'm not sure wh

[Samba] net rpc rights ¿problem?

2006-08-04 Thread Asier Baranguán
Hi! I have a domain with samba+ldap working perfectly. The LDAP and Samba are in a linux vserver machine, but in the main host, not in the guests. The machine has samba 3.0.22 and debian sarge 3.1 up to date. Last week I try to assign privileges to different users with the 'net rpc rights' com

Re: [Samba] valid users problem with 3.0.23a

2006-08-04 Thread simo
On Fri, 2006-08-04 at 14:29 +0200, Franz Strebel wrote: > Hello, > > I'm trying out 3.023a on a devt server and I ran into an odd problem. > The server is a domain member in an AD mixed mode setup. I am > now unable to connect to the server and I have isolated the problem > to the valid users ent

[Samba] Two samba installation on the same host

2006-08-04 Thread paul . barmettler
Dear all For some reasons I would like to run two samba installations (/opt/samba1 and /opt/samba2) on the same host. Is such a dual installation supported? If yes, what do I have to consider? With many thanks Paul *** Notice: The information contained in this message is intended only fo

Re: [Samba] Could not join to domain with krb5 error: Message stream modified

2006-08-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ephi Dror wrote: > Hi all, > > I have a situation in which my SAMBA 3.0.14a could not join > the a very large windows 2003 AD domain with tens of > domain controllers all over the world. With an error I > have never seen before. The kinit part went

[Samba] valid users problem with 3.0.23a

2006-08-04 Thread Franz Strebel
Hello, I'm trying out 3.023a on a devt server and I ran into an odd problem. The server is a domain member in an AD mixed mode setup. I am now unable to connect to the server and I have isolated the problem to the valid users entry. My parameter looks like: valid users = @DOMAIN+"groupname

Re: [Samba] Problem with tdb files.

2006-08-04 Thread simo
On Fri, 2006-08-04 at 12:09 +0200, Florian Zierer wrote: > Now I am thinking about putting the lock files on a tmpfs ramdisk but I > don't know which files have to be backed up and which not. > > Or does anybody has another solution for the locking files? Be creative, create an ext2 file system o

[Samba] Re: samba Digest, Vol 44, Issue 4

2006-08-04 Thread Ben Stewart
Hello: I'm away on holidays right now! If this is an Urgent ticket please submit a repair ticket herehttp://ts.sd57.bc.ca I will be checking my mail still every few days Or Page #613-4732 Thanks Benny.nerd -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] Problem with PRODUCTION machine, please respond quickly!!

2006-08-04 Thread simo
On Fri, 2006-08-04 at 12:34 +0200, S. J. van Harmelen wrote: > Yes, but when you view the output from 'ls -la' you'll see this group > has rwx rights do... NO, when you set an ACL (+ sign at the end in ls -la) the second triplet is NOT the group rights, but the MASK. > And when I change the group

Re: [Samba] Problem with PRODUCTION machine, please respond quickly!!

2006-08-04 Thread Michael Gasch
don´t rely on the ouput of ls if you´re using ACLs! ls ouput has different meaning then. > And when I change the group::r-- to group::rwx with setfacl, I still > cannot delete the file from within windows... how do you change the rights? with setfacl? i think you should increase debug level and

[Samba] kernel change notify

2006-08-04 Thread Ásgeir Halldórsson
Hi all I have a share that contains about 11 million files. They are all used by many websites that put alot of change notify tiggers on the share. I was wondering can I put the change notify timeout = 0? Will the web server be notified on the changes in files with kernel change notify =

Re: [Samba] Lost All Win95 connections to Samba

2006-08-04 Thread Nanni X
Hi Douglas, what do you think about a switch (or hub, of course) failure? Did you test the low level connection? Perhaps you can start with a ping from w95 to any other station and vice versa. Let me know NanniX - Original Message - From: "Douglas D Germann Sr" <[EMAIL PROTECTED]> T

Re: [Samba] Problem with PRODUCTION machine, please respond quickly!!

2006-08-04 Thread S. J. van Harmelen
Yes, but when you view the output from 'ls -la' you'll see this group has rwx rights do... And when I change the group::r-- to group::rwx with setfacl, I still cannot delete the file from within windows... For Marcin, yes I can delete the file from within Linux. But I can't login to Linux with th

Re: [Samba] Problem with PRODUCTION machine, please respond quickly!!

2006-08-04 Thread Michael Gasch
# file: frontpg.lck # owner: mpsfrontpageacct # group: Domain\040Admins user::r-- user:wws01$:rwx user:w3svc5175754_anon_xi:rw- group::r-- group:Admins_xil123:rw- mask::rwx other::--- I'm trying to delete using the account mpsfrontpageacct which has Domain \040Admins as default group... and this

Re: [Samba] Problem with tdb files.

2006-08-04 Thread Florian Zierer
Hi Latrell Latrell wrote: > I have problems with maintain tdb files. From samba doc, these files are > classified into persistent and temporary. From the man page of smbd, > these file are classified into persistent and not. However, there are > some files no need to backup but need to be pers

Re: [Samba] Problem with PRODUCTION machine, please respond quickly!!

2006-08-04 Thread S. J. van Harmelen
Yes, I did... See below the output from 'ls -la' and below that the output of getfacl: drwxrwx--x+ 2 mpsfrontpageacct Domain Admins 4096 Aug 4 10:58 . drwxrwx--x+ 3 solcon_admin Domain Admins 4096 Aug 4 10:58 .. -r--rwx---+ 1 mpsfrontpageacct Domain Admins 25 Aug 4 10:58 botinfs.cnf -r--

Re: [Samba] Problem with PRODUCTION machine, please respond quickly!!

2006-08-04 Thread Ralf Gross
Sander van Harmelen said: > [2006/08/04 10:58:55, 1] > smbd/posix_acls.c:store_inheritance_attributes(252) > > store_inheritance_attribute: Error Permission denied > > > > But I'm the owner of the file?! Did you check the ACL's of this file with getfacl? RAlf -- To unsubscribe from this list

Re: [Samba] Problem with PRODUCTION machine, please respond quickly!!

2006-08-04 Thread Marcin Giedz
Sander van Harmelen napisał(a): Dear Samba guru... I have a problem when I try to remove some files on a samba share... I see this in my samba.log: [2006/08/04 10:58:55, 1] smbd/posix_acls.c:store_inheritance_attributes(252) store_inheritance_attribute: Error Permission denied wh

[Samba] Problem with PRODUCTION machine, please respond quickly!!

2006-08-04 Thread Sander van Harmelen
Dear Samba guru... I have a problem when I try to remove some files on a samba share... I see this in my samba.log: [2006/08/04 10:58:55, 1] smbd/posix_acls.c:store_inheritance_attributes(252) store_inheritance_attribute: Error Permission denied But I'm the owner of the file?! We