[Samba] Samba file security

2006-12-04 Thread Naveen C Joshi
I am newbie for samba configuration at security level. I have read all the documents but could not resolve my problem. My problem is as below and would like your help to resolve it I have installed Samba - 3.0.0-14 on Redhat ES 3 and everthing is working fine. But I want that all the member ca

[Samba] Cannot connect to Samba-3.0.23d (and earlier) from other trusted AD domains

2006-12-04 Thread Jason Haar
Hi there We have a bunch of Samba 3.0.10+ CentOS4.4 servers that are working 100% fine when connected to from users who are members of the same ADS domain our Samba servers are members of. However, users from other ADS domains (we are all W2K3-based) on our network cannot connect - they get NT_STA

Re: [Samba] howto force file deletion with restricted permissions

2006-12-04 Thread Peter Eser
with delete readonly = yes I have a workaround, but then all users can delete a file with restricted permissions, not only the owner of the directory. Nobody any idea? thanks,Peter >Hi, > >I'm running recent samba with acls and ldap >(no force user or force group). >Now I have a problem wit

Re: [Samba] Winbindd question

2006-12-04 Thread Marc Muehlfeld
Hi, Matt Skerritt schrieb: >> - Insert the following lines on your PDC's smb.conf: >> winbind enum groups = yes >> winbind enum users = yes >> winbind trusted domains only = yes >> winbind use default domain = yes >> template homedir = /home/%U >> template shell = /bin/false >> >> - Start Winbind.

[Samba] Re: QMAIL + SAMBA + LDAP

2006-12-04 Thread Allysson Steve Mota Lacerda
It's working... just by using ldap passwd sync. I thought userPassword was a field of qmailUser and ldap passwd sync didn't know it. I was trying to find a way to integrate them by using a backend or something like it. Thanks a lot. P.S.: I received a lot of messages sent directly to me... ther

Re: [Samba] restrict what users can log onto each workstation

2006-12-04 Thread Matt Skerritt
On 04/12/2006, at 9:56 PM, Toni Casueps wrote: I have a Samba server with Windows XP clients, and roaming profiles for every user. At this moment everyone can log onto any workstation, but it shouldn't be like that: there are some workstations where anyone can log into, but three of them s

Re: [Samba] LDAP, checkpwnam and PDC

2006-12-04 Thread Matt Skerritt
On 05/12/2006, at 4:28 AM, Ben Wheare wrote: Hiya, I'm trying to set up a Samba PDC with an LDAP backend. I experienced problems joining machines to domains, the machine account was created, but Windows said user name cannot be found. I resolved this by adding ldap to /etc/nsswitch.conf, but

[Samba] Error looking up domain users

2006-12-04 Thread Michael Coburn
Hello, I'm trying to query one of my remote domains for users via "wbinfo -u --domain=EUROPE" and receiving "Error looking up domain users". I have been successfully able to look up users in multiple domains i.e. "wbinfo -u --domain=UK". My current domain is called NTDOMAIN in which I have my

Re: [Samba] Samba and Heimdal Kerberos V Authentication

2006-12-04 Thread Gémes Géza
Matt Proud írta: > Gemes, > > Thank you. I had seen this link a while ago. I had wanted to avoid > placing authentication data in the LDAP database, but I guess that > this could work. Have you done this yourself? Do you have any useful > comments or suggestions to make? > > That schema file refere

Re: [Samba] can join a domain, but users are not able to log in

2006-12-04 Thread Chris Hellwig
did you set the smbpasswd for the user? Yes (otherwise I could not use the servers shares), I can use the server like a standalone server. And: I got it from your mail that you added the client to the domain on No, no... The client has to join - Chris Tim Boneko schrieb: Chris Hellwig

Re: [Samba] LDAP, checkpwnam and PDC

2006-12-04 Thread Marc Muehlfeld
Hi, Carlos Eduardo Pedroza Santiviago schrieb: >> People (only 3) who can login via SSH already have "real" user accounts >> in /etc/passwd etc. You don`t need to create special "real" user accounts, like you call them. Restrict sshd with AllowGroups, AllowUsers, DenyGroups and/or DenyUsers. Also

[Samba] authenticating NT users with space in username?

2006-12-04 Thread poisonpill
I know it's ridiculous, but I have a userbase where every username has a space in it. IE: "temp user". Is it possible to use samba to authenticate these users? So far I have been able to accept usernames without spaces flawlessly, but not the ones with spaces. Any help would be appreciated, thank

[Samba] Broken pipe errors on samba server

2006-12-04 Thread Greg Barry
I'm running a fairly simple samba server on a sun V440, solaris 9 Samba version: 3.0.10 smbd daemon only In the server logs I'm getting: write_socket_data: write failure. Error = Broken pipe write_socket: Error writing 4 bytes to socket 5: ERRNO = Broken pipe Error writing 4 bytes to client. -1.

[Samba] Write permissions no working

2006-12-04 Thread Giuoco, Aaron
I am having a problem assigning write permissions to shares. I have joined my RHEL 4 server to our Windows 2003 domain and have gotten to authenticate through Active Directory. I can log on to the machine using my Windows AD account. However, any shares I create seem to be read only. I can't cr

[Samba] One share works, one doesn't

2006-12-04 Thread Gordon Charrick
I'm using FC6 and Windows XP Pro. I have two shares defined as such: [docs] comment = My documents path = /home/gmc/for_backup read only = no public = no valid users = gmc [vmware] path = /vmware read only = yes public = no valid users = gmc The directories look like t

Re: [Samba] smbd_audit: log_success() failed to get vfs_handle->data!

2006-12-04 Thread Dmitry Panoff
*This message was transferred with a trial version of CommuniGate(r) Pro* Greetings, Volker > > === > > Nov 30 15:07:56 calypso smbd_audit: [2006/11/30 15:07:56, 0] > > modules/vfs_full_audit.c:log_success(682) > > Nov 30 15:07:56 calypso smbd_audit: log_success() failed to get > > vfs_handle->da

[Samba] PDC/BDC trouble

2006-12-04 Thread ryan punt
All, I'm using an LDAP backend for a test PDC/BDC setup. Both the PDC and BDC are using the same LDAP server. Both the PDC and BDC are running 3.0.23c on Sarge, and I've verified that both the PDC and BDC will authenticate users via smbclient. XP clients are able to login to the domain fine, a

[Samba] LDAP Change, file browsing pause

2006-12-04 Thread Tom Kurtz
After switching from Netscape LDAP to OpenLDAP, file browsing has a random 10-20 second pause or hesitation when opening explorer or File->Open dialog boxes. After the initial pause, the directory browsing runs lightning fast. The pause cannot be consistently recreated, but occurs often at random

[Samba] Samba problem with web farm

2006-12-04 Thread Damien 'zaide' Desmarets
Hello list, After using NFS with windows with the SFU windows extensions and somes sad stories with it, i have decided to migrate to samba. Good choice cause everything is right except one thing. I get an error on a ASP .NET application only. I get a "Failed to start monitoring changes to '\\UNCSER

Re: [Samba] LDAP, checkpwnam and PDC

2006-12-04 Thread Edmundo Valle Neto
If you dont want some users to be able to login using their posix accounts give to them a null shell, put /bin/false in the shell attribute. I dont know what distribution do you use or what is the default of idealx scripts, but in Debian, smbldap-tools (the packaged idealx scripts) does that by

[Fwd: Re: [Samba] Migrating to samba from windows NT domain]

2006-12-04 Thread James Watkins
Yes, this would be possible; 1. Vampire your accounts on to a new Samba DC 2. Disconnect it from network 3. Denote your NT Dc's 4. Rejoin them to the Samba Domain NOTE: As the other person said, while possible, this would be a bitch of a job. You said you need to maintain your NT server anyw

Re: [Samba] LDAP, checkpwnam and PDC

2006-12-04 Thread Carlos Eduardo Pedroza Santiviago
Hi, On 12/4/06, Ben Wheare <[EMAIL PROTECTED]> wrote: Hiya, I'm trying to set up a Samba PDC with an LDAP backend. I experienced problems joining machines to domains, the machine account was created, but Windows said user name cannot be found. I resolved this by adding ldap to /etc/nsswitch.con

[Samba] LDAP, checkpwnam and PDC

2006-12-04 Thread Ben Wheare
Hiya, I'm trying to set up a Samba PDC with an LDAP backend. I experienced problems joining machines to domains, the machine account was created, but Windows said user name cannot be found. I resolved this by adding ldap to /etc/nsswitch.conf, but this has the side effect of allowing ldap users

[Samba] disable printing ?

2006-12-04 Thread Peer-Joachim Koch
Hi, is it possible to disable the whole printing subsystem ? When our cups server is hanging, the samba print server is also not working, but the file server (which is not printing and also not sharing any printer) is looking for the printer list It's a Novell SLES 9 running samba-3.0.20b

[Samba] test

2006-12-04 Thread Victor Medina
please ignore, just testing if i can post to the list! :) -- Victor Medina <[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Removing display of domain

2006-12-04 Thread Brian Atkins
It was magically cleared up by (yet another) reboot. Go figure. Thanks for the assist. Guenter Schillinger wrote: Hallo, make sure that nscd isn't running. Günter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samb

RE: [Samba] Strange behaviour with shares

2006-12-04 Thread James A. Dinkel
That snippet of code doesn't tell much. And the file should be smb.conf, not samba.conf. Could you post the entire contents of the file smb.conf located at /etc/samba? If what you say is accurate, then my guess is there is a section called [share installs] in the smb.conf. James Dinkel -Or

Re: [Samba] Facing Problem for Window XP Client On Samba PDC

2006-12-04 Thread Tim Boneko
Junaid schrieb: > Hi, > i want to make Samba PDC, i have created domain > and now when i give name of domain in WindowXP it > requires the password, i do it by user name=root & its > password. But it gives error. "Unknown User or bad password". Did you set the smbpasswd for root? t

Re: [Samba] can join a domain, but users are not able to log in

2006-12-04 Thread Tim Boneko
Chris Hellwig schrieb: > - the attached log file is the clients log (log.clientname) > - in that log-file one can find "Checking password for unmapped user > [EMAIL PROTECTED] with the new password interface" where poseidon is the > clients name. > > But there is nothing in the log-file which poin

Re: [Samba] Users that can add computers to Domain

2006-12-04 Thread Tim Boneko
timothy johnson schrieb: > have every else in samba working right now, except printers, but since I > havent tried that, nor do I know how I can benefit from using samba for > printing. Anyways any help in the right direction would help. A little hint on your printing system would have been helpf

Re: [Samba] restrict what users can log onto each workstation

2006-12-04 Thread Marc Muehlfeld
Hi, Toni Casueps schrieb: > ... but three of them should be restricted to some specific users. You can create a special account for this computers and, if you use LDAP, add the machine name (without $) to attribute "sambaUserWorkstations" of the user. You can do this with the usermanager too, if y

Re: [Samba] Macro expansion in LDAP entries like %L no longer works with 3.0.23d

2006-12-04 Thread Oliver Burtchen
Thanks for your reply. You're right, it's my fault. I overlooked this new option since 3.0.21 in "whatsnew.txt". Maybe it should also be mentioned in the explicite "Changes to passdb backend" section. ;-) Now I have one question: According to an old diskussion http://lists.samba.org/archive/sa

[Samba] restrict what users can log onto each workstation

2006-12-04 Thread Toni Casueps
I have a Samba server with Windows XP clients, and roaming profiles for every user. At this moment everyone can log onto any workstation, but it shouldn't be like that: there are some workstations where anyone can log into, but three of them should be restricted to some specific users. I though

Re: [Samba] Cannot rename file

2006-12-04 Thread Martin Sundmacher
Pieter Viljoen - MWEB schrieb: Any takers on this question - I've got no replies so far. We need more information about your system. Please post your smb.conf. What is your client OS (Windows 9x/NT/2k/XP/Vista,...)? Regards -- To unsubscribe from this list go to the following URL and read

RE: [Samba] Cannot rename file

2006-12-04 Thread Pieter Viljoen - MWEB
Any takers on this question - I've got no replies so far. Thanks Pieter Viljoen -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pieter Viljoen - MWEB Sent: Thursday, November 30, 2006 23:37 To: samba@lists.samba.org Subject: [Samba] Cannot rename file

AW: [Samba] Adding users with usrmgr/smbldap-useradd

2006-12-04 Thread Oeltze, Benjamin
Hi, have a look at LDAP Suffix, usersdn, computersdn and so on in smbldap.conf. Are they configured right? We have also set slaveLDAP and masterLDAP values. I dont rely on (If not defined) Mit freundlichen Grüßen Benjamin Oeltze Systems Engineer S DE SE PS N/O Fujitsu Siemens Computers Hi