[Samba] Which ports for samba?

Hi, I want to tighten security on my samba server, so I set up iptables rules, which consider ports 137,138,139,445 tcp/udp. Is that enought for input traffic to pass so that clients have full funtionality with the server? Regards, Torsten -- To unsubscribe from this list go to the

[Samba] Mounting XP box - ERRnoaccess

Greetings, list. I've had this problem since last reinstall of XP. When I try to mount XP share on my linux, I get this error message: # mount -t smbfs -o username=me //aoi/backup /mnt/tmp/ Password:my pass here 24321: session setup failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection

RE [Samba] 3.0.23c: cannot access LDAP when not root

Hi, Try this patch, it work fine on my server -- (https://bugzilla.samba.org/attachment.cgi?id=2135action=view) Should apply cleanly to 3.0.23c. It's my bug report : https://bugzilla.samba.org/show_bug.cgi?id=4097 --- Stéphane PURNELLE

[Samba] Samba3.023c host can't join 2003AD on Freebsd6.1 AMD64

Hi 　　I installed Samba 3.0.23c on the freebsd 6.1 via ports, I have configure krb5.conf and nsswitch.conf, when I execute “kinit [EMAIL PROTECTED] system response “kinit: NOTICE: ticket renewable lifetime is 10 hours” 　　But when I execute “net ads join –U [EMAIL PROTECTED] system response 　　    

[Samba] changing default profile folders

Hi, I am trying to make my winXP clients to access files directly on the server (to improve speed, because some profiles are up to 5Gb); I have followed the instructions at: http://isg.ee.ethz.ch/tools/realmen/det/skel.en.html to link desktop, program configuration, etc to the server. First

[Samba] samba domain member server

Hello, I would like someone to confirm my understanding of winbind use in a samba domain member server . First, I think (correct me if I am wrong) that winbind create dynamically association between unix id and windows sid. The domain we use is a samba, openldap domain and the samba server

[Samba] Samba with multiple locations

Hello, I'm looking for a way to make global authentication with samba (both Unix Windows). The issue that I'm having with is adding machine into the domain from the remote locations. I'm using slave ldap on all remote locations and set smbldap-tools point to slave local server remote

Re: [Samba] Samba3.023c host can't join 2003AD on Freebsd6.1 AMD64

On Fri, Oct 20, 2006 at 03:56:06PM +0800, Zhou,Alan wrote: Hi ??I installed Samba 3.0.23c on the freebsd 6.1 via ports, I have configure krb5.conf and nsswitch.conf, when I execute ???kinit [EMAIL PROTECTED] system response ???kinit: NOTICE: ticket renewable lifetime is 10 hours???

[Samba] PDC: client has profile.pds trouble

Hello list. I just installed and configured my first Samba-3 PDC and I succeeded immediately with the join operation with a Win2k SP4 client. As I afterwards rebooted and tried to logon with the domain user, both root and regular user, I got an error messagge telling me that it was unable to

Re: [Samba] PDC: client has profile.pds trouble

On 20 Oct 2006, at 22:04, Boniforti Flavio wrote: Hello list. Hello I will really appreciate help on this issue. BTW: I'm not wanting Roaming Profiles, I will try them after I can logon to the PDC with local client profiles at first. Samba and windows xp has them switched on by

Re: [Samba] PDC: client has profile.pds trouble

2006/10/20, Veronica Hill [EMAIL PROTECTED]: Samba and windows xp has them switched on by default. IIRC you need to set a blank config directive for profiles so as not to use them: logon path = Try that to switch them off. or you could could create the profile path anyway.. I didn't

[Samba] user can't logon to specific computer: creds_server_check failed

A few computers -- two or three -- are very spotty about letting people log on. It seems -- and this could be off-base -- that they'll let anyone log on once, but will require a reboot before you can log on again. Sometimes, logging on works fine, though. There really appears to be little rhyme

[Samba] Roaming Profile Folders Pulled Over Read-Only

Hello, I'm using Samba 3.0.14a-3 on Debian 3.1 (Sarge). It's functioning as a domain controller for a lot of WinXP SP2 machines. As such, it serves up roaming profiles for most of our staff. I've noticed that all of the folders in the root of the profile are pulled over as read-only. The

Re: [Samba] Which ports for samba?

You'll need only 139/TCP, 445/TCP, 137/UDP and 138/UDP. The smb ports could be changed using the smb ports param in your smb.conf. I think if you set smb ports to 445 the only port needs be opened in your firewall will be the 445/TCP. On 10/19/06, Torsten Geile [EMAIL PROTECTED] wrote: Hi, I

Re: [Samba] 3.0.14 to 3.0.23c Invalid SID

On Thu, Oct 19, 2006 at 11:51:57AM -0500, Larry McElderry wrote: Trying to upgrade from 3.0.14a to 3.0.23c. So far, things seem to be working, but the following entries appear in the smbd error log. The test machine is a domain client (server is still 3.0.14). The sids listed are exactly as

Re: [Samba] Mounting XP box - ERRnoaccess

Checked this. My user has full permissions by being in the administrator group. Tried also to add the user separately and grant full permissions. Did not change the situation. (Please notice that I changed email account) -Sami --- sato x [EMAIL PROTECTED] wrote: what about the security of

[Samba] could not read attribute 'msSFU30UidNumber'

Hi, I'm using samba 3.0.23c, and having a bit of trouble getting it to play nice with my active directory. I'm using Windows Small Business Server 2003 with the SFU 3.5 NIS server/schema extensions installed. I have samba configured to use ad as the idmap backend, and sfu for nss info. When

[Samba] x permission interpretation under Windows

Hi How does Windows interpret the 'x' attribute for the file's 'other' attribute field? If I give a *file* a 0775 permission Windows XP clients cannot see the file. Not even the group members. If I change this permission to 0774 the file becomes visible to everyone. (smbclient sees the file

[Samba] CIDR prefix with a non-multiple of 8

First off, I apologize for reporting a problem with a historical version of Samba, but this is what we use in our production environment due to some integration issues with the 3.0 series. I've been experiencing a problem with Samba 2.2.x when trying to use a CIDR notation for hosts allow/deny

RE: [Samba] CIDR prefix with a non-multiple of 8

Is anyone aware of this problem and if so has it been corrected in the 3.0 series? My interfaces option has a /23 and works with 3.0.14a and 3.0.23c, so I would guess it has been fixed. James ZuelowCBJ MIS (907)586-0236 Network Specialist...Registered Linux User No.

[Samba] The share name is a valid user?

Hi. So I'm now on the next section of my samba by example book. For the life of me I just couldn't get it to work. That is until I looked into what the %S and %U variables actually meant. In the book it says to put something like the following in your smb.conf: [files] comment = Work

[Samba] Usrmgr cannot add groups with ldap backend

I get the following errors when I try to remove group from a user with usrmgr smb_create_group: Running the command `/usr/local/sbin/smbldap-groupadd -p 'test'' gave 111 [2006/10/20 19:53:29, 0] groupdb/mapping.c:smb_delete_user_group(1087) smb_delete_user_group: Running the command

svn commit: samba r19422 - in branches/SAMBA_3_0/source/utils: .

Author: jra Date: 2006-10-20 07:44:09 + (Fri, 20 Oct 2006) New Revision: 19422 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=19422 Log: Doh ! Put the krb5 [EMAIL PROTECTED] code in the right place. Jeremy. Modified: branches/SAMBA_3_0/source/utils/net.c

svn commit: samba r19423 - in branches/SAMBA_4_0/source/lib/tdb: common include

Author: tridge Date: 2006-10-20 08:06:14 + (Fri, 20 Oct 2006) New Revision: 19423 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=19423 Log: merge some tdb changes from SAMBA_3_0 to SAMBA_4_0 this is in preparation of a merge in the other direction Modified:

svn commit: samba r19424 - in branches/SAMBA_3_0/source/utils: .

Author: jra Date: 2006-10-20 08:14:38 + (Fri, 20 Oct 2006) New Revision: 19424 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=19424 Log: Protect against username == NULL Jeremy. Modified: branches/SAMBA_3_0/source/utils/net.c Changeset: Modified:

svn commit: samba r19425 - in branches/SAMBA_4_0/source/lib/tdb: common include

Author: tridge Date: 2006-10-20 09:48:18 + (Fri, 20 Oct 2006) New Revision: 19425 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=19425 Log: two more tdb functions from samba3 Modified: branches/SAMBA_4_0/source/lib/tdb/common/tdb.c

svn commit: samba r19426 - in branches/SAMBA_3_0/source/tdb: . common include tools

Author: tridge Date: 2006-10-20 09:55:47 + (Fri, 20 Oct 2006) New Revision: 19426 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=19426 Log: merge nearly all the differences between Samba3 tdb and Samba4 tdb. This includes: - the new tdb_lockall and

Re: svn commit: samba r19406 - in branches/SAMBA_4_0/swat/apps: resource/css samba/utils script

Derrell, ldbbrowse: done! great! I wanted to try this out, but hit a snag. On every access I get: Async(5) exception: Transport error 404: Not found This is with firefox 1.5.07 on debian unstable. Shall I just start poking around with gdb or is this a well known type of problem? Cheers,

svn commit: lorikeet r608 - in trunk/heimdal: . doc/standardisation lib/asn1 lib/com_err lib/des lib/editline lib/gssapi lib/gssapi/gssapi lib/gssapi/krb5 lib/hx509 lib/kafs lib/krb5 lib/roken lib/sl

Author: abartlet Date: 2006-10-20 12:39:03 + (Fri, 20 Oct 2006) New Revision: 608 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=608 Log: Merge up to Heimdal CVS 2006-10-20 Andrew Bartlett Added: trunk/heimdal/doc/standardisation/draft-zhu-ws-kerb-00.txt

Re: svn commit: samba r19406 - in branches/SAMBA_4_0/swat/apps: resource/css samba/utils script

[EMAIL PROTECTED] writes: Derrell, ldbbrowse: done! great! I wanted to try this out, but hit a snag. On every access I get: Async(5) exception: Transport error 404: Not found This is with firefox 1.5.07 on debian unstable. Shall I just start poking around with gdb or is this a

svn commit: samba r19427 - in branches/SAMBA_4_0/source/scripting/libjs: .

Author: metze Date: 2006-10-20 15:20:48 + (Fri, 20 Oct 2006) New Revision: 19427 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=19427 Log: print out the currect name metze Modified: branches/SAMBA_4_0/source/scripting/libjs/provision.js Changeset: Modified:

svn commit: lorikeet r610 - in trunk/heimdal/appl/telnet/telnet: .

Author: lha Date: 2006-10-20 16:15:43 + (Fri, 20 Oct 2006) New Revision: 610 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=610 Log: merge from heimdal cvs - include roken.h to avoid ioctl(socket_wrapper) in solaris headers Modified:

svn commit: lorikeet r612 - in trunk/heimdal/lib/hdb: .

Author: lha Date: 2006-10-20 21:02:15 + (Fri, 20 Oct 2006) New Revision: 612 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=612 Log: Minimize diff to Heimdal. Modified: trunk/heimdal/lib/hdb/hdb.c Changeset: Modified: trunk/heimdal/lib/hdb/hdb.c

svn commit: lorikeet r613 - in trunk/heimdal/lib/gssapi/krb5: .

Author: lha Date: 2006-10-20 21:22:42 + (Fri, 20 Oct 2006) New Revision: 613 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=613 Log: Arcfour defines moved to arcfour.c, minimize diff to Heimdal. Modified: trunk/heimdal/lib/gssapi/krb5/gsskrb5_locl.h

svn commit: lorikeet r614 - in trunk/heimdal/lib/auth/pam: .

Author: lha Date: 2006-10-20 21:24:47 + (Fri, 20 Oct 2006) New Revision: 614 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=614 Log: Minimize diff to Heimdal. Modified: trunk/heimdal/lib/auth/pam/Makefile.am Changeset: Modified:

svn commit: lorikeet r615 - in trunk/heimdal/lib/gssapi/gssapi: .

Author: lha Date: 2006-10-20 21:46:14 + (Fri, 20 Oct 2006) New Revision: 615 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=615 Log: add GSS_KRB5_GET_AUTHTIME_X Modified: trunk/heimdal/lib/gssapi/gssapi/gssapi_krb5.h Changeset: Modified:

svn commit: samba r19428 - in branches/SAMBA_4_0/source: lib/gencache lib/messaging lib/samba3 lib/tdb lib/tdb/common lib/tdb/include lib/util ntvfs/common passdb torture/basic

Author: tridge Date: 2006-10-20 23:32:23 + (Fri, 20 Oct 2006) New Revision: 19428 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=19428 Log: moved tdbutil.c from lib/tdb/common/ to lib/util/util_tdb.c tdbutil.c is Samba specific, so should not be part of the

svn commit: samba r19429 - in branches/SAMBA_3_0/source: . include lib tdb/common tdb/include

Author: tridge Date: 2006-10-20 23:46:59 + (Fri, 20 Oct 2006) New Revision: 19429 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=19429 Log: moved tdb/common/tdbutil.c into lib/util_tdb.c see discussion on samba-technical Added:

Re: svn commit: lorikeet r583 - in trunk/heimdal/lib/hdb: .

+ret = (*db-hdb_fetch)(context, db, principal, + HDB_F_DECRYPT|| is that really correct using '||'? No, that correct, its wrong :) Love

svn commit: lorikeet r617 - in trunk/heimdal/appl/telnet/telnetd: .

Author: lha Date: 2006-10-21 00:11:48 + (Sat, 21 Oct 2006) New Revision: 617 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=617 Log: move streamspty headers to avoid socket_wrapper problems on solaris 8, from heimdal current Modified:

svn commit: samba r19431 - in branches/SAMBA_3_0/source/lib/talloc: .

Author: tridge Date: 2006-10-21 00:23:27 + (Sat, 21 Oct 2006) New Revision: 19431 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=19431 Log: merge recent talloc performance improvements from Samba4 Modified: branches/SAMBA_3_0/source/lib/talloc/config.mk

svn commit: samba r19432 - in branches/SAMBA_4_0/source/script/tests: .

Author: brad Date: 2006-10-21 03:18:09 + (Sat, 21 Oct 2006) New Revision: 19432 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=19432 Log: This way of reverting snapshots is much better than the way I was doing them before. Modified: