[Samba] smbspool and cups on Centos5

2007-08-09 Thread James Bardin
Hi, I'm cannot get smbspool to print to a kerberized windows printer through cups. Kerberos is working, and both smbclient and smbspool can connect to the server. Even though sending a formatted page manually with smbspool works, cups returns "Unable to connect to CIFS host, will retry in 6

[Samba] Samba 3.0.25b: smbd 99% CPU utilisation with opened MS Word doc

2007-08-09 Thread Ben Tisdall
Hi I'm trying to upgrade from Samba 3.0.23c on FC4 to 3.0.25b from Samba sources. Everything appears to function correctly until an MS word document is opened from a share - the file opens but the smbd process in question rockets to 99%+ CPU, stays there & needs kill -9'ing to stop it. This happen

[Samba] smbldap_open: cannot access LDAP when not root..

2007-08-09 Thread Matt Anderson
Dear Help, I currently have a Samba PDC along with multiple BDCs using an eDirectory LDAP backend. While trying to figure out how to get the bad password account lockout feature to work, I managed to somehow mess up the samba PDC. If a user attempts to authenticate against the PDC with the corre

Re: Fwd: Re: [Samba] Domain with public shares

2007-08-09 Thread Dale Schroeder
From your message, I'm not totally certain at which point you're getting the access denied message, but make sure that /home/spool is world-writable. If the access denied message occurs while running the add printer wizard (the [print$] share), make sure that the user has the privilege to run t

Re: [Samba] full_audit on Samba 3.0.20 vs 3.0.25

2007-08-09 Thread Ryan Steele
Volker Lendecke wrote: > On Fri, Aug 03, 2007 at 04:20:20PM -0400, Ryan Steele wrote: > >> Just a quick question for you: Does Samba 3.0.20 support the full_audit >> module? I've got the module operating on two boxes, one with Samba >> > > The full audit module was added around 3.0.4. > >

[Samba] Re: home dir file permissions samba, winbind with ldap backend, AD Server 2003 R2 domain

2007-08-09 Thread Stang, Sharol
Oops! I meant ls -l not ls -s it looks like I typed ls -n instead of ls -l From: Stang, Sharol Sent: Wednesday, August 08, 2007 3:52 PM To: 'samba@lists.samba.org' Subject: home dir file permissions samba, winbind with ldap backend, AD Server 2003 R2 domain

[Samba] Re: ppolicy overlay (WAS: Enforcing Password Policies...)

2007-08-09 Thread Matt Anderson
> If you add the ppolicy overlay you have a clean way to prevent password > changes for some acounts (through Windows, or any interface). > For instance one can use a pwdPolicy with pwdAllowUserChange: FALSE Hi Thierry, I think I have the disallow change password issue figured out. I'm mostly c

[Samba] Too many 445 and 139 packets

2007-08-09 Thread Diogo Hideki
I´m having problems with my intranet, all computers that log into my Samba´s PDC, are sending many netbios and microsoft-ds packets. this problem started since last week, i already blocked port 139 with my iptables, but if i block 139 and 445, the computers cant access smb shares. can anyone help

Re: [Samba] ACLs and winbind

2007-08-09 Thread Angela Gavazzi
On Thursday 09 August 2007 13:28:49 Thierry Lacoste wrote: > > Thanks Henrik. > Can someone explain why or point me to some doc? > What I read everywhere is that winbind is used to identify users of a > windows domain at the NSS level (mapping them localy with > winbindd_idmap.tdb or globaly with

Re: [Samba] SERIOUS PROBLEM - Root Account Locked

2007-08-09 Thread Jason Baker
Jonathan, You are a genius! That fixed it. Using root = Administrator never seemed to make much sense to me when I was setting up my Samba domain, and now I know why. I simply didn't set it up correctly. I set the root password and made root user ID 0, but when I mapped root = Administrator, I

Re: [Samba] setfacl(1) - Can FreeBSD's ACLs contain groups from NT/AD domains ? [SOLUTION]

2007-08-09 Thread Wilkinson, Alex
When putting winbindd(8) into debug mode I finally saw the following: id S-1-5-21-1957994488-1326574676-725345543-35301 is neither ours, a Unix SID, nor builtin error converting unix gid to sid The hard part was identifying what part of the puzzle I needed to debug in the first place!

[Samba] Profiles with an LDAP backend being overridden

2007-08-09 Thread Julian Pilfold-Bagwell
Hi All, I've got LDAP running as the backend to Samba 3.0.24 and am trying to set the profile directories to mandatory for one group of users and roaming for another. To this end I'm using the sambaProfilePath in LDAP but it's getting overridden by something that's setting it to %u. As a resu

Re: [Samba] ACLs and winbind

2007-08-09 Thread Thierry Lacoste
On Thursday 09 August 2007 08:38, Henrik Zagerholm wrote: > 8 aug 2007 kl. 16:18 skrev Thierry Lacoste: > > I'm trying to allow XP clients to add ACLs in the homes share. > > It appears that I'm unable to do it unless I use winbind > > although I'm in a pure Samba/OpenLDAP environment. > > > > I ha

Re: [Samba] Problem with LDAP failover config

2007-08-09 Thread Ben Tisdall
Andrew Bartlett wrote: > > I suspect it's a build error, due to The Fedora Core 4 buidl not > correctly detecting the ldap_initialize() function. If that were not to > be detected in the libs, then we would fallback to an internal function > that doesn't handle multiple servers. > Thanks for

RE: [Samba] dfs problems in 3.0.25a after client reboot and remapping

2007-08-09 Thread Paul J R
Hi guys, I haven't seen any replies to this, but im seeing the exact same thing with Fedora 7 samba (with all the currently available patches). using winbind into a an ADS realm. My samba is 3.0.25b. Clients are XP, 2003 r2 SE and EE 32bit, 2003 r2 SE 64 bit. All work ok for a while, then sudden

Re: [Samba] Problem with LDAP failover config

2007-08-09 Thread Andrew Bartlett
On Thu, 2007-08-09 at 03:01 +0100, Ben Tisdall wrote: > John Drescher wrote: > > > If the email client does something weird there is one space between > > the entries. These are two different machines with the first being the > > PDC and it is in the dns but the second is not so I used the numeric