Re: [Samba] ACLs and winbind

2007-08-08 Thread Henrik Zagerholm
8 aug 2007 kl. 16:18 skrev Thierry Lacoste: I'm trying to allow XP clients to add ACLs in the homes share. It appears that I'm unable to do it unless I use winbind although I'm in a pure Samba/OpenLDAP environment. I have a PDC and BDC with Samba/OpenLDAP and a member Samba server with homes a

Re: [Samba] Problem with LDAP failover config

2007-08-08 Thread Ben Tisdall
John Drescher wrote: > If the email client does something weird there is one space between > the entries. These are two different machines with the first being the > PDC and it is in the dns but the second is not so I used the numerical > ip for that one instead. > > passdb backend = ldapsam:"lda

[Samba] home dir file permissions samba, winbind with ldap backend, AD Server 2003 R2 domain

2007-08-08 Thread Stang, Sharol
I have samba 3.0.23 running as a clustered service on RHEL5 and I am wondering if it is okay that when I check the file permissions on the home directories they are numerical even if I reset the permissions. They stay in the long listing format until I restart the service and when I check again it

[Samba] ppolicy overlay (WAS: Enforcing Password Policies...)

2007-08-08 Thread Thierry Lacoste
On Wednesday 08 August 2007 20:17, Matt Anderson wrote: > Dear Help, > > I'm currently running Samba with an LDAP passdb backend. I'm trying to > figure out how to NOT allow a particular user to change their password > (through Windows, or any interface). I've tried modifying the values for > sam

Fwd: Re: [Samba] Domain with public shares

2007-08-08 Thread samba-list
Hi. > [sample] > comment = "Free for all" > path = /storage/everyone > read only = No > create mask = 0777 > directory mask = 0777 > guest ok = Yes This worked right away - thanks! Still having trouble with the printers. I can browse the printers,

RE: [Samba] SERIOUS PROBLEM - Root Account Locked

2007-08-08 Thread Jonathan Johnson
This sounds like you have 'root = Administrator' in your /etc/samba/smbusers file. Is the password you are using for Administrator *different* from what is set for root in Samba ("smbpasswd root" to change)? That could be the issue. Note that typically, Linux and Samba use different password da

[Samba] username map

2007-08-08 Thread JESSE CARROLL
Forgive me for being new - but you've got start somewhere. I've setup SAMBA on a Unix server that talks to AD. Almost everything works save for a user name map. From my configuration (names changed)below I can attach from windusr1 on PC1 to the Unix system and it sets up as unxusr1 no problems and

Re: [Samba] SERIOUS PROBLEM - Root Account Locked

2007-08-08 Thread Jason Baker
Do you have a process (like a service or scheduled task) running on a client machine as user 'root' with an incorrect cached password? No actually, this is what seems to be happening: I log into a windows xp pro workstation as Administrator and browse the network. I double-click on a network sh

[Samba] Default User in netlogon trouble

2007-08-08 Thread Server Gremlin
Hey Samba list, I have a Default User folder in the netlogon share on my samba PDC. I am having a very difficult time getting users to use this as their default profile. I think my basic understanding of how this is supposed to work might be flawed. My current understanding is as fol

Re: [Samba] SERIOUS PROBLEM - Root Account Locked

2007-08-08 Thread Jonathan Johnson
Do you have a process (like a service or scheduled task) running on a client machine as user 'root' with an incorrect cached password? Jon Johnson Sutinen Consulting, Inc. www.sutinen.com Jason Baker wrote: My root account keeps getting locked out automatically. I am running Samba 3.0.25b on a

[Samba] Re: Enforcing Password Policies...

2007-08-08 Thread Matt Anderson
> The problem is that he can still modify its LDAP password. > You could add acls to your slapd.conf such that only your > ldap admin dn has write acces to the userPassword attribute. > In this case the only way to change the password is via samba. > > HTH, > Thierry. > Hi Thierry, Modifying Sa

[Samba] LDAP Account Manager 2.0.0 released

2007-08-08 Thread Roland Gruber
LDAP Account Manager (LAM) 2.0.0 - August 8th, 2007 === LAM is a web frontend for managing accounts stored in an LDAP directory. Announcement: - This is the first release which requires PHP5. It includes two new translations (Simplifie

Re: [Samba] Re: Questions about samba+LDAP

2007-08-08 Thread Hadmut Danisch
Hi Matt, On Wed, Aug 08, 2007 at 06:20:42PM +, Matt Anderson wrote: > passdb backend = "ldapsam:ldaps://192.168.2.2 ldaps://192.168.2.3" Well, I had already tried this (replication first, master second) but got an error message about missing write access. The problem seems to be that samba

[Samba] SERIOUS PROBLEM - Root Account Locked

2007-08-08 Thread Jason Baker
My root account keeps getting locked out automatically. I am running Samba 3.0.25b on a CentOS server, as PDC with LDAP backend. I have accounts set to lock after 8 un-successful login attempts. I zeroed out the bad password count, and then in less than a few seconds the account gets locked aga

Re: [Samba] Domain with public shares

2007-08-08 Thread Chris Smith
On Wednesday 08 August 2007, samba-list wrote: > I need to have some public folders on the samba server that anybody can use Use a "username map" and set nobody = guest. -- Chris -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman

Re: [Samba] Enforcing Password Policies...

2007-08-08 Thread Thierry Lacoste
On Wednesday 08 August 2007 20:17, Matt Anderson wrote: > Dear Help, > > I'm currently running Samba with an LDAP passdb backend. I'm trying to > figure out how to NOT allow a particular user to change their password > (through Windows, or any interface). I've tried modifying the values for > sam

[Samba] Domain with public shares

2007-08-08 Thread samba-list
I have a samba server setup with security = user (NT-domain). I use openldap for authentiation and that part is working fine. People can log in and see the files they have permission to. I need to have some public folders on the samba server that anybody can use (also non domain users (ie. WinXP Ho

[Samba] Re: Questions about samba+LDAP

2007-08-08 Thread Matt Anderson
> > Third question: > > The configuration file for the smbldap tools allow to > specify a slave LDAP just for the read access, and a master > for write access, thus supporting LDAP replications. > > Does ldapsam support the same? > > regards > Hadmut Hi Hadmut, I can at least help you with t

[Samba] Enforcing Password Policies...

2007-08-08 Thread Matt Anderson
Dear Help, I'm currently running Samba with an LDAP passdb backend. I'm trying to figure out how to NOT allow a particular user to change their password (through Windows, or any interface). I've tried modifying the values for sambaPwdCanChange and sambaPwdMustChange for a particular user, but it

[Samba] Questions about samba+LDAP

2007-08-08 Thread Hadmut Danisch
Hi, just three simple questions about samba+LDAP: Samba allows to configure several LDAP suffixes, ldap group suffix ldap idmap suffix ldap machine suffix ldap user suffix and the general ldap base with ldap suffix. But is there a way to configure a suffix for the sambaDomain objects? When I

[Samba] ACLs and winbind

2007-08-08 Thread Thierry Lacoste
I'm trying to allow XP clients to add ACLs in the homes share. It appears that I'm unable to do it unless I use winbind although I'm in a pure Samba/OpenLDAP environment. I have a PDC and BDC with Samba/OpenLDAP and a member Samba server with homes and profiles (below is its smb.conf) on which I h

[Samba] Can't connect to Windows 2000 Server v. 3.0.25

2007-08-08 Thread Henrik Zagerholm
Hello list, I have a weird problem where I can easily connect to Windows 2003 Servers. Both Standard, Enterprise and R2. But I can't connect to any Windows 2000 Servers on the same net. A port scan shows that exactly the same ports are opened. Here is my smb.conf workgroup

Re: [Samba] Permission problems with Samba Version 3.0.23d

2007-08-08 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dennis Schwan wrote, On 08-08-2007 06:00: > [Agents] >comment = Gemeinsames Laufwerk >browseable = yes >path = /samba/public >writeable = yes >write list = @agents, sonja, administrator, engesser, atzler >admin users = adminis

Re: [Samba] setfacl(1) - Can FreeBSD's ACLs contain groups from NT/AD domains ?

2007-08-08 Thread Wilkinson, Alex
0n Mon, Aug 06, 2007 at 04:09:37PM +0200, Greg Byshenk wrote: > sambaserver# setfacl -m u:ADDOMAIN\\gbytest:rwx,g:ADDOMAIN\\domain\ users:rx z-test/ > sambaserver# getfacl z-test/ > #file:z-test/ > #owner:1361 > #group:100 > user::rwx >

Re: [Samba] Problem with LDAP failover config

2007-08-08 Thread John Drescher
On 8/8/07, Ben Tisdall <[EMAIL PROTECTED]> wrote: > John Drescher wrote: > >> H, can you post your passdb backend line pls? > >> > > Later, I will not be at work for 3 to 6 hours as it is early in the > > morning here (GMT -5 timezone). > > > No problem, I can't do anything until the users have

[Samba] Permission problems with Samba Version 3.0.23d

2007-08-08 Thread Dennis Schwan
Hello List members, i have a strange problem with my new Samba Server. It is the Version 3.0.23d. I have configured a share in which i want all users of a certain group be able to write in. This is the Configuration: [Agents] comment = Gemeinsames Laufwerk browseable = yes path = /samb

Re: [Samba] Problem with LDAP failover config

2007-08-08 Thread Ben Tisdall
John Drescher wrote: > On 8/8/07, Ben Tisdall <[EMAIL PROTECTED]> wrote: >> John Drescher wrote: >> >>> Is 1389 the real port on the master ldap server? >> Yes (I have Scalix running it's own LDAP-like directory on the standard >> port). >> >> To further clarify: >> >> passdb backend = ldapsam:ldap

Re: [Samba] Problem with LDAP failover config

2007-08-08 Thread John Drescher
On 8/8/07, Ben Tisdall <[EMAIL PROTECTED]> wrote: > John Drescher wrote: > > > > > Is 1389 the real port on the master ldap server? > > Yes (I have Scalix running it's own LDAP-like directory on the standard > port). > > To further clarify: > > passdb backend = ldapsam:ldap://master.example.com:138

Re: [Samba] How should guest access work with Samba 3 and User Mode Security???

2007-08-08 Thread Kaustubh Chaudhari
Mansell, Gary wrote: Hi, Please can someone confirm to me how guest access should work on a Samba 3 Server configured for User Mode Security. Not sure if this can be done or not, but what i know is that security=user you need to provide with the username and password. http://www.samba.org

Re: [Samba] Problem with LDAP failover config

2007-08-08 Thread Ben Tisdall
John Drescher wrote: > > Is 1389 the real port on the master ldap server? Yes (I have Scalix running it's own LDAP-like directory on the standard port). To further clarify: passdb backend = ldapsam:ldap://master.example.com:1389 And passdb backend = ldapsam:ldap://slave.example.com Both wor

Re: [Samba] Problem with LDAP failover config

2007-08-08 Thread John Drescher
On 8/8/07, Ben Tisdall <[EMAIL PROTECTED]> wrote: > Hi, > > I have working master & slave OpenLDAP servers the Samba PDC works > correctly when using either as the passdb backend. > > However, when configuring for LDAP failover as per this doc: > > http://samba.org/samba/docs/man/Samba-Guide/2000us

[Samba] How should guest access work with Samba 3 and User Mode Security???

2007-08-08 Thread Mansell, Gary
Hi, Please can someone confirm to me how guest access should work on a Samba 3 Server configured for User Mode Security. Am I correct in thinking that shares configured as guest OK should be accessible by users without accounts on the server and hence they should not have to supply login name and

[Samba] libpthread warning while compiling samba 3.0 on Suse Linux (SLES 10)

2007-08-08 Thread Pierre Lebrun
I compile Samba for the first time on LINUX (SLES 10) and have a weird libpthread warning message. I dug the list to find some explanations about the way I have to handle this problem, without success. Below are the 'configure' parameters and the part of config.log about libpthread. Is there a

[Samba] Problem with LDAP failover config

2007-08-08 Thread Ben Tisdall
Hi, I have working master & slave OpenLDAP servers the Samba PDC works correctly when using either as the passdb backend. However, when configuring for LDAP failover as per this doc: http://samba.org/samba/docs/man/Samba-Guide/2000users.html Samba doesn't work & the logs fill up with this: lda