Hello,
I have set up winbind to authenticate linux pc's to a windows 2003 AD.
The authentication works, but the performance is not good (takes over 5 minutes)
PRELIMINARY
---
OS: ubuntu 7.04
Samba: 3.0.24
AD: windows 2003
ANALYSIS
-
After analyzing the log.winbindd file in log le
Carsten John wrote:
> A closer look shows the following problems:
>
> - a domain member server (samba 3.0.22) can't be accessed any more. The
> samba on the PDC are showing a succeeding auth request for the user, but
> the windows box claims access rights problems. This is a minor problem,
> as we
Hi all,
I am doing some research on Samba+OpenLDAP (+DHCP+DNS) with the intention of
getting rid of the Micro$oft licenses necessary to maintain the Server
products from such company. One of the aims I have is to demonstrate other
people in my company that an open source alternative can work as w
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
SERGEYS Filip wrote:
> 3) Per group list all members of that group -> BOTTLENECK
> [2007/06/25 17:18:02, 10] nsswitch/winbindd_cache.c:lookup_groupmem(1665)
> lookup_groupmem: [Cached] - doing backend query for info for domain
> [2007/06/25 17:
Hello,
I am out of the office from Thursday June 14th until Tuesday June 26th. I will
get back to you as soon as I can.
Thanks,
~Paul
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
The unix groups are no longer automgically mapped to windows domain
groups. So I had simply top add all the necessary unix group to the
list of windows domain groups by:
$>groupmap add ntgroup=$group unixgroup=$group type=d
Witch groups have you added? The mapped group should be still exist
Hello!
A few days ago I received a filesystem memory corruption notification
from Debian's Linux kernel (2.6.20), which automatically unmounted my
root partition. Upon closer investigation, I found that something had
overwritten most of my data, XFS's superblocks and other metadata
structures. Th
Hi Francis
> I don't know that much about Windows accounts, but one thing I
> learned is that the SID is hugely important. As some
> directories/files are named after the SID in a user's profile, I
> figure that they are part of the problem, if not the main problem.
It's not something I've don
I have had the same problem with a similar setup for at least 3 years.
My solution is to create the account for the windows workstation
either via the smbldap-useradd and the linux useradd commands or a gui
wizard that does this for me. I currently use ldap-account-manager
http://lam.sourceforge.n
I have a samba server, from which I want send message to a WinXP client with
smbclient -M XPclient and I get the error:
Connection to XPclient failed.
smbclient -L XPclient, return
NT_STATUS_ACCESSED_DENIED
ping XPclient responds ok
what I must do?
Thanks,
--
To unsubscribe from this list go to
> This is a major issue, but due to the lack of helpful info, I'm forced
> to ask in various places.
> Perhaps Deluge Torrent's allocation routines got Samba confused?
Most likely something in the Kernel got them mucked up. Or your
hardware is junk.
> There aren't many suspects -- either Samba,
Adam Tauno Williams wrote:
>> This is a major issue, but due to the lack of helpful info, I'm forced
>> to ask in various places.
>> Perhaps Deluge Torrent's allocation routines got Samba confused?
>
> Most likely something in the Kernel got them mucked up. Or your
> hardware is junk.
I've done
Hi,
Is there a way to migrate the files and shares and preserve the AD
group permissions? scp retains the modification time and such, but not
the AD group information.
--sharif
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/lis
On 6/26/2007, Andri ([EMAIL PROTECTED]) wrote:
I've done occasional memtests for a few days straight, and all have
ended successfully. If it wasn't one of those one-in-a-quintillion
chances that the sun flipped the necessary bits in memory, I'm
betting on software bugs.
Memtest is hardly a reli
I struggled for this for a few hours, so in case anyone else has this
problem in the future:
I just switched over a network from public IP addresses to a private
subnet (10.100.X.X). After which and I started having problems with our
NT Workstations accessing the Backup Domain Controller.
So, I
I've had sort of an idea, I'd like to know whether it sounds good or not...
Given that the main problem seems to be with the user hives (ntuser.dat), I
thought about this scenario:
- brute force copy all the profiles from the old PDC to the new PDC,
appropriate mv/chown;
- take all ntuser.dat
Hi all,
I am trying to join PClinuxOS 2007 to an Active Directory domain, I was
able to get it to join following a guide off of Linux Magazine's
website. I can't post the URL because you need to be registered to view
the article so I have taken the liberty of copying and pasting the
article
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
sharif islam wrote:
> Hi,
> Is there a way to migrate the files and shares and
> preserve the AD group permissions? scp retains the
> modification time and such, but not the AD
> group information.
"xcopy /o" or robocopy.exe
cheers, jerry
===
> Is there a way to migrate the files and shares and preserve the AD
> group permissions? scp retains the modification time and such, but not
> the AD group information.
Your question is too vague to give a solid answer, but, just backup and
restore with a tool (NOT ssh, tar, etc...) that supports
On Tue, 2007-06-26 at 12:00 -0400, Charles Marcus wrote:
> On 6/26/2007, Andri ([EMAIL PROTECTED]) wrote:
> > I've done occasional memtests for a few days straight, and all have
> > ended successfully. If it wasn't one of those one-in-a-quintillion
> > chances that the sun flipped the necessary bit
Great!!!
I have created a couple of machine accounts through the LAM utility and I
have eventually been able to join the domain.
Thank you very much for your help.
John Drescher-2 wrote:
>
> I have had the same problem with a similar setup for at least 3 years.
> My solution is to create the
thanks for the info about the workstations option
i have workstations that are named student01 02 03, etc
and staf01 02 03
when i specify staf* or student*
it does not allow the account access.
if i specify staf01 it will allow that machine to log on.
know of a way to specify groups of workstations
William Jojo wrote:
>> is? Seems to me to be a big jump. Does 25a have all of the changes
Before you start up the samba 3.0.25a server, make sure to do a
"testparm" on your smb.conf file to make sure you don't have any options
that are now unsupported.
Eric Feldhusen
--
To unsubscribe from t
On 6/26/07, Adam Tauno Williams <[EMAIL PROTECTED]> wrote:
> Is there a way to migrate the files and shares and preserve the AD
> group permissions? scp retains the modification time and such, but not
> the AD group information.
Your question is too vague to give a solid answer, but, just backup
Adam Tauno Williams wrote:
> On Tue, 2007-06-26 at 12:00 -0400, Charles Marcus wrote:
>> On 6/26/2007, Andri ([EMAIL PROTECTED]) wrote:
>>> I've done occasional memtests for a few days straight, and all have
>>> ended successfully. If it wasn't one of those one-in-a-quintillion
>>> chances that the
First of all that guide is faulty as you need security = ADS and not
Domain.
I think you should look at the Samba By Example or the official How-
To on samba.org
If you then have problems/questions please post them here.
Cheers,
henrik
26 jun 2007 kl. 18:54 skrev Justin Ehrlichman:
Hi all,
I apologize if this has already been asked. In my searching, I have not
found a clear answer.
How do you setup Samba for Quickbooks 2003 multi-user?
I appreciate any help.
Gary
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/
Gary Attaway wrote:
I apologize if this has already been asked. In my searching, I have not
found a clear answer.
How do you setup Samba for Quickbooks 2003 multi-user?
I appreciate any help.
Gary
for a access style database like quickbooks, I would turn off all oplocks...
--
Ray Klassen
Hi list.
I've just configured a PDC server using RedHat Enterprise Linux 4 (update
5) and Samba 3.0.25a.
Everithing is working fine. I'm not using LDAP and all my client machines
are installed with Windows XP Professional.
I used the Mike Petersen website (
http://www.pcc-services.com/custo
Good day, I've posted this request again, as it got hijacked and probably
ignored.
I'm having issues with a small company with the following setup...
1. Windows 2003 active directory server (server.company.local)
2. samba 3.0.25 linux server (serve2.company.local)
3. windows xp and windows 2000 p
I have a directory in a linux server (Debian) and it was exported by nfs to
another linux server (Debian). In this last server, the directory was
included in smb.conf (Samba) for Windows users.
I can access the share from windows and create news files, but I cannot move
files inside the subdire
XFS eats files. Did you lose power or did your system crash? XFS is very
good at losing files.
Other than that, LVM is the next culprit.
Samba only opens and writes to files. It has no code to do anything else
in it.
On Tue, 2007-06-26 at 15:35 +0300, Andri wrote:
> Hello!
>
> A few days ago I
Hi All,
New to the list here. I am trying to connect my samba box to an Windows
Server 2003 box (yuck). My users want to be able to access shares on the
samba box with the same credentials they used to login into the windows
domain. Am I correct in thinking this is possible? As far as I can
Reading the "How To Compile Samba" leads me to this question. Must I
compile Samba with AD support as described in that document in order
for the Samba server to be able to have userids/passwords authenticated
by a W2K3/SP2 AD?
I only need to be able to continue to provide access to users' U
On Tue, 26 Jun 2007, Andri wrote:
Adam Tauno Williams wrote:
On Tue, 2007-06-26 at 12:00 -0400, Charles Marcus wrote:
On 6/26/2007, Andri ([EMAIL PROTECTED]) wrote:
I've done occasional memtests for a few days straight, and all have
ended successfully. If it wasn't one of those one-in-a-quint
The best way I've ever found to reliably find bad memory is compile
something big, like X. If your memory is bad, you'll find out pretty
quick...
The real solution is to use ECC memory. :)
Curious...
I recall reading somewhere that ECC memory was considerably slower than
non-ECC, and its b
On Tuesday 26 June 2007, Jack Mendez wrote:
> i have workstations that are named student01 02 03, etc
> and staf01 02 03
> when i specify staf* or student*
> it does not allow the account access.
> if i specify staf01 it will allow that machine to log on.
> know of a way to specify groups of workst
Le mardi 26 juin 2007, Francis Galiegue a écrit :
>
> I've had sort of an idea, I'd like to know whether it sounds good or not...
>
Answer to self: nope. It mostly works, but mostly != fully. The other method
does work. So I'll stick to it...
--
Francis Galiegue, [EMAIL PROTECTED]
12bis rue d
I recall reading somewhere that ECC memory was considerably slower than
non-ECC, and its benefits was mostly sales hype - ie, its ECC was not
precisely reliable...
Neither are true.
Anyone know of an authoritative answer to this question?
I use ECC memory in all of my servers and the main be
On Tue, 26 Jun 2007, [EMAIL PROTECTED] wrote:
Reading the "How To Compile Samba" leads me to this question. Must I compile
Samba with AD support as described in that document in order for the Samba
server to be able to have userids/passwords authenticated by a W2K3/SP2 AD?
I only need to be a
While slower, it has benefits for something like a database server. For a home
machine, the added expense and slower speed are not worth it. Not exactly a
definitive answer as there is gray area but for a production server, I'd throw
in ecc
Sent via BlackBerry from T-Mobile
-Original Messa
El Martes, 26 de Junio de 2007 10:23, mikelOn escribió:
> add user script = /usr/sbin/smbldap-useradd -m "%u"
If your users are Windows users you should add an '-a' here, and add the users
with the '-a' flag. Like this:
add user script = /usr/sbin/smbldap-useradd -m -a "%u"
>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
==
I feel like an Appalachian miner that just
found a new vein of coal!
-- Jeremy Allison after finding a new set
Hi all
I try to transform our old workgroup to a domain.
I read a lot of doc about that and smb-ldap tools.
I cannot use smb-ldap tools because I have a running ldap database with
our unix accounts.
I build my own script to update our database.
Questions :
- For the admin account I modify the uid
Glad to finally see a reply not 100% about my hardware.
Andrew Morgan wrote:
> Samba uses standard system calls to create, modify, and delete files.
> It does not write to random bits of /dev/hda. If you have filesystem
> corruption, then the problem lies elsewhere.
It's not FS corruption per s
On 6/26/07, Asier Baranguán <[EMAIL PROTECTED]> wrote:
El Martes, 26 de Junio de 2007 10:23, mikelOn escribió:
> add user script = /usr/sbin/smbldap-useradd -m "%u"
If your users are Windows users you should add an '-a' here, and add the users
with the '-a' flag. Like this:
add
Just to make it clear that its not normal a system really need to have
accounts created that way. I dont think is a good idea to call a
workaround used on a system that someone didnt got it working properly
(who knows why) as a solution, samba works very fine creating
workstation accounts autom
Asier Baranguán escreveu:
El Martes, 26 de Junio de 2007 10:23, mikelOn escribió:
add user script = /usr/sbin/smbldap-useradd -m "%u"
If your users are Windows users you should add an '-a' here, and add the users
with the '-a' flag. Like this:
add user script = /usr/
John Drescher escreveu:
On 6/26/07, Asier Baranguán <[EMAIL PROTECTED]> wrote:
El Martes, 26 de Junio de 2007 10:23, mikelOn escribió:
> add user script = /usr/sbin/smbldap-useradd -m "%u"
If your users are Windows users you should add an '-a' here, and add
the users
with the '-a' fla
Hello,
I am out of the office from Thursday June 14th until Tuesday June 26th. I will
get back to you as soon as I can.
Thanks,
~Paul
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Hi all,
i've just gone through a fairly long and involved troubleshooting process
trying to do something similar to the problem described below and just as a
general observation, the documentation available for joining a Samba Server to
an AD domain tends to be disjointed and difficult to find
Hi Frank,
i have just been reading through recent posts and reading Mike Petersen's
"Notes when changing network IP Addresses" and it occurs to me that you're like
to be dealing with the same problem. XP and 2K deal with WINS resolution in
subtly different ways. Worth looking at.
And thanks
On Tuesday 26 June 2007 15:17, [EMAIL PROTECTED] wrote:
> Reading the "How To Compile Samba" leads me to this question. Must I
> compile Samba with AD support as described in that document in order
> for the Samba server to be able to have userids/passwords authenticated
> by a W2K3/SP2 AD?
It is
I am the author of Samba3-ByExample - so I'll take the bait.
On Tuesday 26 June 2007 20:25, Address for list subcriptions wrote:
> Hi all,
>
> i've just gone through a fairly long and involved troubleshooting process
> trying to do something similar to the problem described below and just as a
> g
If you are talking about your problem creating machine accounts,
absolutely not. Machine accounts are created using the "add machine"
script, not cited above.
Thanks. It looks like I did not read that clearly.
John
--
To unsubscribe from this list go to the following URL and read the
instructio
For everyone else's reference, John just gave me a call and issued a challenge
to put my money where my (big) mouth is. So i'll be doing some work on the
documentation in the next little while, specifically to do with adding Samba
member servers to an AD infrastructure. If you have troublesho
On Wed, Jun 27, 2007 at 09:25:49AM +0800, Address for list subcriptions wrote:
> i would be happy to lend my ignorance to any efforts in
> that direction as a pair of eyes with very little Samba
> knowledge behind them (i'm a Windows Admin by trade). i
> considered attempting to write it myself bu
Hello Diego!
I have had the same problem some time ago -- using Samba as an WindowsNT
4 Domain Controller with Windows 2000 / XP clients. Joining the domain
and logons etc are no problem, but the policy normally works using AD
only :-(. In your case a software called Nitrobit (www.nitrobit.co
Edmundo Valle Neto escribió:
If your users are Windows users you should add an '-a' here, and add
the users with the '-a' flag. Like this:
add user script = /usr/sbin/smbldap-useradd -m -a "%u"
Not really, theres nothing wrong with that. If you use the "User
Manager" windows applicat
59 matches
Mail list logo
