[Samba] slow perf without winbind nested groups = no and ldpa backend

2007-11-26 Thread jean-marc pouchoulon
Helo samba list, We are using a samba (3.0.25b-1.el5_1.2) PDC ( users are in an LDAP backend ). The perfs were bad and there were errors until I set winbind nested groups = no in smb.conf. I saw this post http://lists.samba.org/archive/samba-technical/2005-May/040946.html saying What I

[Samba] useradd scripts

2007-11-26 Thread Dimitris Theoharis
Hi can someone explain me please exactly how these scripts work ? How can i have them automatically add users etc? If i add use them like this i get the NT STATUS CONNECTION REFUSED errors # Useradd scripts add user script = /usr/sbin/adduser --quiet --disabled-password --gecos %u

[Samba] NTConfig.POL

2007-11-26 Thread Dimitris Theoharis
Hi where do i find the above script? so i can place it in my netlogon folder? thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

[Samba] samba profiles

2007-11-26 Thread Sven Buchstaller
Hi list I got a small problem, i use atm 3X Samba Servers 1XPDC 1XBDC 1XFileserver ATM I have all profiles/homes on the PDC, but I need it on BDC too. My thought the best way is I move the /homes to the Fileserver. And now comes my problem, what must I change on the smb.conf? Logon

Re: [Samba] NTConfig.POL

2007-11-26 Thread Adam Tauno Williams
where do i find the above script? so i can place it in my netlogon folder? Above? I assume you mean NTConfig.pol from the subject. (a) it isn't a script (b) YOU create it with the policy editor (poledit.exe) (c) Not a Samba question, policies are a Windows domain administration issue,

Re: [Samba] NTConfig.POL

2007-11-26 Thread Oscar Mas
Dimitris Theoharis wrote: Hi where do i find the above script? so i can place it in my netlogon folder? thanks The Script is the netlogon.bat, but is not of samba i keys of regedit of W$. Example: server:~# vi netlogon.bat @echo off title Policy My Enterprise rem Home Page Internet

[Samba] DFS enumeration on a Samba hosted DFS tree.

2007-11-26 Thread Sean
I've translated a Windows based DFS tree to a Samba based (3.0.23c) one and it seems to work quite well from Windows Explorer and cmd.exe. First off, I have a relatively big tree. grep dfscmd /root/dfs.cmd | wc -l 1614 One issue I've noticed that tree enumeration and manipulation from a

[Samba] Winbind / AIX 5.3 returns incomplete user informations

2007-11-26 Thread Jérôme Oufella
Hi, We are facing a problem on AIX 5.3 (latest patch) where the following behavior happens. Reproduced with versions of samba from 3.0.23 to 3.0.26a. # Normal behavior : # id and id username should return the same info # [EMAIL PROTECTED]:/# id uid=0(root) gid=0(system)

[Samba] Query a Windows 2003 AD server for specific information

2007-11-26 Thread Rondall Stewart
The Question: What command do I use to query a Windows 2003 AD server to return the Organizational Unit of a specific users? Also, what would be the command that would return the “Home Directory” path as specified in the Account Properties of the Windows 2003 account? The Environment: Windows

[Samba] Pls delete this off the internet IMMEDIATELY

2007-11-26 Thread patrick . r . bussey
http://groups.google.com/group/linux.samba/browse_thread/thread/d669e5e24f24e1f6/236c73e8a362b5e6?hl=enq=jpmchase.com#236c73e8a362b5e6 - This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase

Re: [Samba] Pls delete this off the internet IMMEDIATELY

2007-11-26 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You've got to be kidding. If it was something you sent to a mailing list, forget it, it's hopeless. You may get it removed from one place, but there are so many places that archive mailing lists that when it leaves your machine, it's out there. =R

Re: [Samba] Strange file permissions

2007-11-26 Thread Mark Adams
Is sgid on the top level dir? Also have you tried force group samba option? Mark. On 24 Nov 2007, at 13:13, DNL [EMAIL PROTECTED] wrote: Hi I have a samba server with tdbsam passwords, and a share, PROJECTS, which is accessed by various XP home clients, the usenames and passwords being

Re: [Samba] Share root directory appears in subdirectories. (Well, can't actually see it but can cd into it, even if its not there.) (Serious bug?)

2007-11-26 Thread Mark Adams
Check your filesystem. Reminder, unmount then fsck.ext3 /my/dev/path Mark. On 24 Nov 2007, at 14:58, Wiesner Thomas [EMAIL PROTECTED] wrote: Additionally to the problems I reported earlier, I'Ve discovered another problem with my server/client setup. find reports find: WARNING: Hard

RE: [Samba] Access control question.

2007-11-26 Thread Matt Lozier
Hi Andrew, Thanks for this. I did think about using ACLs, but even if I set this up (for *every* directory that our users need access to) won't they still be able to *see* those directories even if they don't have r/w/x permission? I'm looking for a way to setup user permissions so that they

[Samba] [samba pdc] serverbased profiles doesnt load at winxp login

2007-11-26 Thread Christian
ive installed samba 3 on a debian 4, the samba server should act like a pdc. at the moment it work that user can login on my clients (all windows xp pro sp2), the homedrive is mapped corretly, the only thing that doesn't work, is that the serverbased profile is saved automatically on the

Re: [Samba] [samba pdc] serverbased profiles doesnt load at winxp login

2007-11-26 Thread John Drescher
You did not mention what the exact problem is. My guess is you need profile acls = yes in your profiles share. Sorry that is at the end of your email. Possibly this is a nmbd problem. John -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] [samba pdc] serverbased profiles doesnt load at winxp login

2007-11-26 Thread John Drescher
at the moment it work that user can login on my clients (all windows xp pro sp2), the homedrive is mapped corretly, the only thing that doesn't work, is that the serverbased profile is saved automatically on the server, so that the user can downlad the profile at login. You did not mention

[Samba] Upgraded from 3.0.24 to 3.0.27a now no admin permissions

2007-11-26 Thread Gary MacKay
I have verified all of the net groupmap list groups are still mapped right. The net rpc commands show the proper SID's and users that are members of the adm (unix) and Domain Admins groups. Everything seems correct, except that now there are no admin priviliges. All users can log in to the

[Samba] Point-and-Print driver problems with unprivileged users on XP

2007-11-26 Thread Marcus Sobchak [EMAIL PROTECTED]
Hi, I've problems to install printer drivers as a normal user with unprivileged rights on WinXP in a samba 3.0.24 domain (debian etch) using the Point-and-Print mechanism. I've read Volker Lendecke's Samba book on page 131 footnote 1, which mention to enable point and print. Which reg keys do I

Re: [Samba] Strange file permissions

2007-11-26 Thread DNL
Mark Adams wrote: Is sgid on the top level dir? Set for subdirectory cp, but not for projects as different directories at that level require no access control /projects/cp# ls -al total 164 drwxrws--- 26 dnl cp 4096 2007-11-23 15:37 . drwxr-xr-x 17 rootroot 4096

Re: [Samba] Wondering if there is an option like banner

2007-11-26 Thread Michael Heydon
I'm not 100% sure (I've only ever used security = user), but I believe you can still have map to guest = bad user, they may still be prompted for a username and password but they could put in almost anything (except a valid username) and they would be granted access. The man page only says

Re: [Samba] smb.conf question. multiple /home/shares

2007-11-26 Thread Michael Heydon
Have a look at the section of the man page regarding the [homes] share. It will do all this automatically. In it's simplest form [homes] read only = no will share everyones home directory read write as \\server\username. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] mailto:[EMAIL

[Samba] LDAP logonHours problem

2007-11-26 Thread Peter Molnar
Hi! I have a problem according to the logonHours setting in my Samba Domain. Users are in LDAP, and everyone has a logonHours attribute, which could be: - login is possible at any time - login is only possible between 7AM and 12PM(mindnight), 7h-24h in 24 hours format, I'm going to use 24h

Re: [Samba] Re: XFS and inherit permissions bug?

2007-11-26 Thread David Disseldorp
Hi On Fri, 09 Nov 2007 15:05:22 +0100 [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hello Here are some more informations. General infos on my Samba configuration ### The server is a Debian Etch with distro kernel Samba package (2.6.18-5-686

Re: [Samba] Installation problem of SAMBA 3.0.23a on HP-UX 11.23

2007-11-26 Thread Eric Roseme
Ryan is correct for both topics. Go here to get the correct compiler (4.2.2): http://hpux.cs.utah.edu/hppd/hpux/Gnu/gcc-4.2.2/ Also, if you are attempting to compile and install 3.0.23a, you should consider using HP CIFS Server 3.0h, which is Samba 3.0.22 plus fixes from each release

Re: [Samba] Access control question.

2007-11-26 Thread Josh Kelley
On Nov 26, 2007 3:13 PM, Matt Lozier [EMAIL PROTECTED] wrote: Thanks for this. I did think about using ACLs, but even if I set this up (for *every* directory that our users need access to) won't they still be able to *see* those directories even if they don't have r/w/x permission? Add hide

[Samba] map to guest in share definition?

2007-11-26 Thread Tim Bates
Is it possible to use map to guest in a single share? We have 2 or 3 shares where I want this behavior, but for most I would like to not use it due to issues with home directories with bad users. I would simply try moving that line to a share definition to see what happens, but I don't want

Re: [Samba] map to guest in share definition?

2007-11-26 Thread Michael Heydon
As I understand it, the client is authenticated before it specifies which share it wants (except under share level security) so having map to guest as a per share setting isn't possible. Couldn't you just specify guest ok = no on the other shares? what issues with home directories? We have

Re: ***SPAM*** [Samba] LDAP logonHours problem

2007-11-26 Thread Peter Eser
time ago I fiddled alot with sambaLogonHours. The 2 main problems I can rethink of where the Sunday are the first 6 FF, but the first hour is the most RIGHT bit of this FF sambaLogonHours is in UTC so you have to calc with your timezone (and that is weired with daylight saving times,

[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-371-g5b4ba4b

2007-11-26 Thread Volker Lendecke
The branch, v3-2-test has been updated via 5b4ba4bfc54e2fa468abe15383e5b33eb5bd1324 (commit) via 9bf5ead4b2be57fa84e5b3137bfa0305a916f10f (commit) from 102a247df99967f25dbaf40c9be2d48a8e15c64c (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log

[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-372-g8bcd2df

2007-11-26 Thread Volker Lendecke
The branch, v3-2-test has been updated via 8bcd2df841bae63e7d58c35d4728b7d853471697 (commit) from 5b4ba4bfc54e2fa468abe15383e5b33eb5bd1324 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log -

[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-373-g3088bc7

2007-11-26 Thread Volker Lendecke
The branch, v3-2-test has been updated via 3088bc76f1ceffecaa5aea039be79973c9876f0c (commit) from 8bcd2df841bae63e7d58c35d4728b7d853471697 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log -

svn commit: samba r26132 - in branches/SAMBA_4_0/source/lib: crypto nss_wrapper

2007-11-26 Thread jelmer
Author: jelmer Date: 2007-11-26 21:12:01 + (Mon, 26 Nov 2007) New Revision: 26132 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=26132 Log: Update ignores. Modified: branches/SAMBA_4_0/source/lib/crypto/ branches/SAMBA_4_0/source/lib/nss_wrapper/

svn commit: samba r26133 - in branches/SAMBA_4_0/source/libcli/util: .

2007-11-26 Thread gd
Author: gd Date: 2007-11-26 23:58:39 + (Mon, 26 Nov 2007) New Revision: 26133 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=26133 Log: Add some more error codes from wkssvc testing. Guenther Modified: branches/SAMBA_4_0/source/libcli/util/doserr.c

Build status as of Tue Nov 27 00:00:01 2007

2007-11-26 Thread build
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2007-11-26 00:00:58.0 + +++ /home/build/master/cache/broken_results.txt 2007-11-27 00:00:40.0 + @@ -1,4 +1,4 @@ -Build status as of Mon Nov 26 00:00:01 2007 +Build status as of Tue Nov

svn commit: samba r26134 - in branches/SAMBA_4_0/source/auth: .

2007-11-26 Thread jelmer
Author: jelmer Date: 2007-11-27 01:14:54 + (Tue, 27 Nov 2007) New Revision: 26134 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=26134 Log: Avoid using samdb-dependent functions in auth_system_session. Modified: branches/SAMBA_4_0/source/auth/config.mk

[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-374-g331c0d6

2007-11-26 Thread Jeremy Allison
The branch, v3-2-test has been updated via 331c0d6216e1a1607a49ed7eb4078e10138ec16a (commit) from 3088bc76f1ceffecaa5aea039be79973c9876f0c (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log -

svn commit: samba r26135 - in branches/SAMBA_4_0/source: dsdb/samdb libnet ntptr/simple_ldb rpc_server/drsuapi rpc_server/lsa rpc_server/samr

2007-11-26 Thread abartlet
Author: abartlet Date: 2007-11-27 01:25:11 + (Tue, 27 Nov 2007) New Revision: 26135 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=26135 Log: Remove samdb_add(), samdb_delete() and samdb_modify(), which were just wrappers to ldb_add() etc. samdb_replace()

svn commit: samba r26136 - in branches/SAMBA_4_0/source: auth auth/gensec auth/ntlmssp dsdb ldap_server libcli libcli/ldap ntvfs

2007-11-26 Thread jelmer
Author: jelmer Date: 2007-11-27 02:04:38 + (Tue, 27 Nov 2007) New Revision: 26136 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=26136 Log: Attempt to fix dependencies for auth. Modified: branches/SAMBA_4_0/source/auth/config.mk

svn commit: samba r26137 - in branches/SAMBA_4_0/source: dsdb/samdb/ldb_modules selftest/env setup

2007-11-26 Thread abartlet
Author: abartlet Date: 2007-11-27 02:26:47 + (Tue, 27 Nov 2007) New Revision: 26137 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=26137 Log: Rename the entryUUID module to better match it's purpose: being a simple ldap mapping (a complex mapping will follow).

svn commit: samba r26138 - in branches/SAMBA_4_0/source/dsdb/samdb: .

2007-11-26 Thread abartlet
Author: abartlet Date: 2007-11-27 02:47:57 + (Tue, 27 Nov 2007) New Revision: 26138 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=26138 Log: Don't talloc_free() res if an error occoured. Andrew Bartlett Modified:

svn commit: samba r26139 - in branches/SAMBA_4_0/source/scripting/libjs: .

2007-11-26 Thread abartlet
Author: abartlet Date: 2007-11-27 02:49:37 + (Tue, 27 Nov 2007) New Revision: 26139 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=26139 Log: Based on a report by Theodor Chirana, don't assert() on invalid netbios names at this point, the calling order has

svn commit: samba r26140 - in branches/SAMBA_4_0: source/dsdb/samdb/ldb_modules testprogs/ejs

2007-11-26 Thread abartlet
Author: abartlet Date: 2007-11-27 04:43:20 + (Tue, 27 Nov 2007) New Revision: 26140 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=26140 Log: Add a new test for searches by distinguieshedName and dn, and implement these in the simple ldap mapping module. We still