Re: [Samba] Home Lan computer browser(s)

2008-06-03 Thread Michael Heydon
Skip Guenter wrote: */1) //Should I have more than one "computer browser" on my lan /*/(~16 machines)/*/?/* I'd read someplace that I should have 1 primary and 1 backup computer browser for up to 32 computers and then another backup browser for each additional 32 computers. Do you know wh

[Samba] Home Lan computer browser(s)

2008-06-03 Thread Skip Guenter
Reading this list makes me think my questions are child's play for ya'll. */1) //Should I have more than one "computer browser" on my lan /*/(~16 machines)/*/?/* I'd read someplace that I should have 1 primary and 1 backup computer browser for up to 32 computers and then another backup browse

[Samba] Mapped share looses write/user permission on inactivity -- how to avoid

2008-06-03 Thread thomas.iversen
Hi I have set up a solaris 10 with sfw and presented a share to the clients. Anonymous access should result in read permissions. The "edicom" user should have write permissions as well. This works. Trusted clients map the share to some windows drive and can write to the share. ... That is unti

Re: [Samba] SELinux and samba/winbind w/ADS on RHEL 4.6

2008-06-03 Thread mallapadi niranjan
oops In my previous post i made a typo #getsebool -P "winbind_disable_trans" = 1 it should be #setsebool -P "winbind_disable_trans" = 1 On Wed, Jun 4, 2008 at 10:25 AM, mallapadi niranjan < [EMAIL PROTECTED]> wrote: > Hi, > > I am not seeing this issue on RHEL4 update 6. but i am using > >

Re: [Samba] SELinux and samba/winbind w/ADS on RHEL 4.6

2008-06-03 Thread mallapadi niranjan
Hi, I am not seeing this issue on RHEL4 update 6. but i am using samba-3.0.25b-1.el4_6.5 samba-common-3.0.25b-1.el4_6.5.i386 samba-client-3.0.25b-1.el4_6.5.i386 My sestatus is having as below [EMAIL PROTECTED] ~]# sestatus SELinux status: enabled SELinuxfs mount:/selinux Curren

Re: [Samba] windows share vs. linux share access

2008-06-03 Thread Michael Heydon
Jason Gerfen wrote: My problem is if I try to mount the samba share from a linux client I receive errors. What errors? The full output from the client would be useful. Is there anything special about linux commands such as: %> mount -t smbfs -o username=USERNAME //server/share /mnt/samba-sh

Re: [Samba] How to move a samba PDC to a diffrent box

2008-06-03 Thread John Drescher
> i have got a samba pdc running based on the smbldap tools and Debian Sarge. > Now we would like to move everything over to Ubuntu Hardy. > I have done this quite a few times. > Can i simply: > - Create the same users and groups with the same id on Hardy slapcat slapadd or configure syncrepl i

[Samba] unsafe_string_function_usage_here when linking smbd

2008-06-03 Thread Kai Lanz
I'm trying to build 3.0.30 on Alpha/Tru64-4.0G. The configure step works, but make fails when it tries to link smbd: Compiling popt/popt.c Compiling popt/poptconfig.c Compiling popt/popthelp.c Compiling popt/poptparse.c Linking bin/smbd ld: Unresolved: __unsafe_string_function_usage_here_size_t

Re: [Samba] Failed building 3.0.30 for tru64 4.0F

2008-06-03 Thread Bengt Nilsson
That's good to hear, I'll try to be patient. 3 jun 2008 kl. 10.05 skrev Volker Lendecke: On Tue, Jun 03, 2008 at 07:15:43AM +0200, Bengt Nilsson wrote: I downgraded to autoconf 2.61 which eliminated the "circular dependency " error. Nevertheless, the uint32_t and final link problem remains.

Re: [Samba] How to move a samba PDC to a diffrent box

2008-06-03 Thread Wes Deviers
On Tue 3 Jun 2008 4:42:40 am ml wrote: > Hello List, > > i have got a samba pdc running based on the smbldap tools and Debian Sarge. > Now we would like to move everything over to Ubuntu Hardy. > > Can i simply: > - Create the same users and groups with the same id on Hardy > - Move the files and

Re: [Samba] missing dependencies when compiling samba/ctdb rpm on sles 10.1 (don't have all features required for Active Directory support)

2008-06-03 Thread jrs
It did help, though I had to install the libcom_err rpm. For some reason; only the libcom_err-32bit was installed on the machine. Thanks much JR troc wrote: Hello, If you look at the samba source config.log (at least in rhel5.1) it says the lcom_err was missing which I think had to symlink s

Re: [Samba] Re: Test Failure for RW1 with samba-3.0.30, Solaris 9

2008-06-03 Thread David Eisner
On Tue, Jun 3, 2008 at 2:56 PM, Jeremy Allison <[EMAIL PROTECTED]> wrote: >> Should I still file a bug report? > It might help so we can track it, thanks. https://bugzilla.samba.org/show_bug.cgi?id=5517 Thanks again for your help. -David -- David Eisner http://cradle.brokenglass.com -- To u

Re: [Samba] Re: Test Failure for RW1 with samba-3.0.30, Solaris 9

2008-06-03 Thread Jeremy Allison
On Tue, Jun 03, 2008 at 12:23:31PM -0400, David Eisner wrote: > On Mon, Jun 2, 2008 at 9:29 PM, Jeremy Allison <[EMAIL PROTECTED]> wrote: > > Try this patch against 3.0.x - should fix the problem. > > > > Jeremy. > > > Yep, make test seems to be happy now. Thanks. > > Should I still file a bug

[Samba] error on ads_startup: No logon servers

2008-06-03 Thread Mike Bann
Folks, I have set up a samba development server. It is able to let users log in through ldap, it grabs their groups correctly, it gets a kerberos ticket correctly, however it craps out when trying to join to the ADS. I have an already working server with, from what I can tell, the same config

[Samba] unable to connect to KDC Server

2008-06-03 Thread agustin cruz
I'm trying to connect my FreeBSD 6.2 machine to Windows 2008 Server AD. this is what I get. rock# kinit Administrator [EMAIL PROTECTED]'s Password: kinit: NOTICE: ticket renewable lifetime is 1 week rock# klist Credentials cache: FILE:/tmp/krb5cc_0 Principal: [EMAIL PROTECTED] Issue

Re: [Samba] Group membership confusion, UNIX, nested, and AD

2008-06-03 Thread Robert M. Martel - CSU
Brian Gregorcy wrote: ... Hi Bob, I recently did something similar, this page helped me the most of anything I believe it was section 14.3 http://samba.dsmirror.nl/samba/docs/man/Samba-HOWTO-Collection/idmapper.html Thank you, I'll be taking a look at that next. I am just perplexed that s

[Samba] wbinfo -u lists ADS users without domain, getent passwd returns only local users

2008-06-03 Thread Thomas Leavitt
I'm using Samba/Winbind for single-sign on in a network where Active Directory is the authoritative authentication source. The active directory server is Windows 2003 with Services for Unix installed so that the schema is extended and the management interface has a "Unix Attributes" tab. wbinfo

[Samba] SELinux and samba/winbind w/ADS on RHEL 4.6

2008-06-03 Thread Thomas Leavitt
SELinux appears to be interfering with winbind's functionality. I have the lastest policy package installed: selinux-policy-targeted-1.17.30-2.149 which allegedly solves this problem according to the RedHat knowledge base, but clearly does not. I have to turn off SELinux by using setenf

[Samba] windows share vs. linux share access

2008-06-03 Thread Jason Gerfen
Hello again, I am seeing something I never thought I would see. I can open a dos prompt on a windows machine and map a drive to the samba server using the ADS authentication and read/write from the share etc. My problem is if I try to mount the samba share from a linux client I receive errors

Re: [Samba] Re: Test Failure for RW1 with samba-3.0.30, Solaris 9

2008-06-03 Thread David Eisner
On Mon, Jun 2, 2008 at 9:29 PM, Jeremy Allison <[EMAIL PROTECTED]> wrote: > Try this patch against 3.0.x - should fix the problem. > > Jeremy. Yep, make test seems to be happy now. Thanks. Should I still file a bug report? -David -- David Eisner http://cradle.brokenglass.com -- To unsubscr

Re: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread John Drescher
>> 2. Can you roll back to Samba 3.0.24 if you emerge 3.0.30 > Save the ebuild from 3.0.24 into a local portage overlay See here: http://gentoo-wiki.com/HOWTO_Installing_3rd_Party_Ebuilds The ebuild will be in /var/db/pkg/net-fs/samba-3.0.24 And then do a quickpkg --include-config=y =net-fs/s

Re: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread Jason Gerfen
Ivan Ordonez wrote: Hi Jason, Sorry I can't be of any help but I am thinking about updating our PDC to 3.0.30 but afraid it will have the same problem. I have a few questions if you don't mind. 1. Can a PDC be remove on the domain and join again? if so, who will be the login server to au

Re: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread Jason Gerfen
I rolled it back and experienced the same problems so I went ahead and followed the following steps during the upgrade to 3.0.30 1. Removed machine from domain trust user account 2. Uninstalled samba 3. Re-installed latest 3.0.30 using Gentoo's emerge facility 4. Used Kinit with domain admin acc

Re: [Samba] Grant or deny internet access based on Samba domain logon?

2008-06-03 Thread Rob Shinn
On Tue, Jun 3, 2008 at 5:31 AM, Fabio Muzzi <[EMAIL PROTECTED]> wrote: > > When a user logs on, I would like to run a script that modifies firewall > rules based on the group that the user belongs to (this determines if he > has internet access or not) and based on the workstation's IP address > (

[Samba] missing dependencies when compiling samba/ctdb rpm on sles 10.1 (don't have all features required for Active Directory support)

2008-06-03 Thread jrs
I appear to be missing some libs on suse 10.1 when running: rpmbuild --rebuild samba-3.0.25-ctdb.16.src.rpm checking for WRFILE: keytab support... no checking for krb5_princ_realm returns krb5_realm or krb5_data... no checking for krb5_addresses type... no checking whether krb5_mk_error takes

Re: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread Jason Gerfen
John Drescher wrote: Ok I have updated it and am no able to authenticate. It seems that even though my smb.conf shows 'client plaintext auth = no' in the logs when performing a 'wbinfo --krb5auth=username%password' it shows plaintext kerberos password authentication for [username%password] faile

Re: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread John Drescher
> Ok I have updated it and am no able to authenticate. It seems that even > though my smb.conf shows 'client plaintext auth = no' in the logs when > performing a 'wbinfo --krb5auth=username%password' it shows > > plaintext kerberos password authentication for [username%password] failed > (requestin

Re: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread Jason Gerfen
John Drescher wrote: On Tue, Jun 3, 2008 at 9:07 AM, Jason Gerfen <[EMAIL PROTECTED]> wrote: I tried that. After upgrading Samba yesterday using Gentoo's emerge facility due to the vulnerability listed Did you try 3.0.30? It is in portage now. John Ok I have updated it and am no able to authe

Re: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread Jason Gerfen
Installing it now... it looks like the amd64 package is masked for samba however. John Drescher wrote: On Tue, Jun 3, 2008 at 9:07 AM, Jason Gerfen <[EMAIL PROTECTED]> wrote: I tried that. After upgrading Samba yesterday using Gentoo's emerge facility due to the vulnerability listed Did you

Re: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread John Drescher
On Tue, Jun 3, 2008 at 9:07 AM, Jason Gerfen <[EMAIL PROTECTED]> wrote: > I tried that. After upgrading Samba yesterday using Gentoo's emerge facility > due to the vulnerability listed Did you try 3.0.30? It is in portage now. John -- To unsubscribe from this list go to the following URL and rea

Re: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread Jason Gerfen
I tried that. After upgrading Samba yesterday using Gentoo's emerge facility due to the vulnerability listed http://www.samba.org/samba/security/CVE-2008-1105.html and http://www.gentoo.org/security/en/glsa/glsa-200805-23.xml the authentication of AD users has ceased working. krb5.conf [libde

RE: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread Robert Mattson
Gentlemen, The following links may or may not be of help. http://bugs.gentoo.org/show_bug.cgi?id=224201 http://lists.samba.org/archive/samba/2008-June/141041.html You can specify a default in /etc/krb5.conf like this: . . [realms] doma.com= { kdc = DOMA.com:88 admin_server = doma.com:749

Re: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread Jason Gerfen
Hmm... I am on Version 3.0.28a using Gentoo's emerge utility. In my logs I am recieving: check_ntlm_password: Authentication for user [smb] -> [smb] FAILED with error NT_STATUS_NO_SUCH_USER ... ads_verify_ticket: smb_krb5_parse_name(thor$) failed (Configuration file does not specify default r

Re: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread John Drescher
> I have upgraded a domain memberservers last week to > net-fs/samba-3.0.30 but not the PDC. No problems so far with that. > It should have read all domain member servers. John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/list

Re: [Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread John Drescher
On Tue, Jun 3, 2008 at 7:52 AM, Jason Gerfen <[EMAIL PROTECTED]> wrote: > I just updated Samba on Gentoo due to a security vulnerability and the > authentication for domain accounts is now failing. Has anyone else seen > this? > -- I have upgraded a domain memberservers last week to net-fs/samba-3.

[Samba] Gentoo, Samba, Upgrade, Authentications now failing

2008-06-03 Thread Jason Gerfen
I just updated Samba on Gentoo due to a security vulnerability and the authentication for domain accounts is now failing. Has anyone else seen this? -- Jas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] getent not listing ADS users ctdb samba

2008-06-03 Thread Evan Koutsandreou
That's worked, thanks a million!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Hodrien Sent: Tuesday, 3 June 2008 8:11 PM Cc: samba@lists.samba.org Subject: Re: [Samba] getent not listing ADS users ctdb samba On Tue, 3 Jun 2008, Evan Koutsandreou

Re: [Samba] getent not listing ADS users ctdb samba

2008-06-03 Thread John Hodrien
On Tue, 3 Jun 2008, Evan Koutsandreou wrote: 1. getent does not retrieve the list of domain users or groups (wbinfo works fine) Do you mean "getent passwd", or "getent passwd foo"? If you mean the former, then you need: winbind enum groups = yes winbind enum users = yes jh -- "Woman

RE: [Samba] getent not listing ADS users ctdb samba

2008-06-03 Thread Evan Koutsandreou
this seems to have been created during the rpm install, see below [EMAIL PROTECTED] samba]# rpm -ql samba-winbind-32bit-3.0.25-ctdb.16 /lib/libnss_winbind.so /lib/libnss_winbind.so.2 /lib/libnss_wins.so /lib/libnss_wins.so.2 /lib/security/pam_winbind.so [EMAIL PROTECTED] samba]# ls -lasp /lib

[Samba] Grant or deny internet access based on Samba domain logon?

2008-06-03 Thread Fabio Muzzi
I am looking for some way to grant or deny internet access (that is, changing iptables rules) based on Samba domain logon. When a user logs on, I would like to run a script that modifies firewall rules based on the group that the user belongs to (this determines if he has internet access or not)

RE: [Samba] How to move a samba PDC to a diffrent box

2008-06-03 Thread Evan Koutsandreou
this seems to have been created during the rpm install, see below [EMAIL PROTECTED] samba]# rpm -ql samba-winbind-32bit-3.0.25-ctdb.16 /lib/libnss_winbind.so /lib/libnss_winbind.so.2 /lib/libnss_wins.so /lib/libnss_wins.so.2 /lib/security/pam_winbind.so [EMAIL PROTECTED] samba]# ls -lasp /lib

Re: [Samba] How to move a samba PDC to a diffrent box

2008-06-03 Thread devel
I think there must be some migration guide in samba documentation (read chapter 5 and 36 in Samba official howto). I think the best would be to build up your second machine and add it in your domain as BDC, so that all users/groups/machines/... get propagated to this new machine. Once done, migrate

Re: [Samba] getent not listing ADS users ctdb samba

2008-06-03 Thread devel
Did you copy the libnss_winbind.so to /lib and make a libnss_winbind.so.2 link out of it ? > > > Hi, > > > > I am setting up ctdb samba, and have hit a brick wall trying to solve the > following issue. > > > > 1.getent does not retrieve the list of domain users or groups (wbinfo > works fine)

[Samba] getent not listing ADS users ctdb samba

2008-06-03 Thread Evan Koutsandreou
Hi, I am setting up ctdb samba, and have hit a brick wall trying to solve the following issue. 1. getent does not retrieve the list of domain users or groups (wbinfo works fine) I'm not sure what I'm missing but I've almost spent the whole day trying to resolve this one and have

[Samba] How to move a samba PDC to a diffrent box

2008-06-03 Thread ml
Hello List, i have got a samba pdc running based on the smbldap tools and Debian Sarge. Now we would like to move everything over to Ubuntu Hardy. Can i simply: - Create the same users and groups with the same id on Hardy - Move the files and profiles over by keeping their permissions (rsync -a

[Samba] smbd process eating memory

2008-06-03 Thread Kerri Mõisa
Hello, First ,sorry for my poor english. I have samba server 3.0.9-1 with ldap. The server is running about 4 years correctly. But now the smbd process is eating memory and after about 2 days the slapd process is killed because Out of Memory.(Server is dead) Nothing changed in conf. Only users

Re: [Samba] Failed building 3.0.30 for tru64 4.0F

2008-06-03 Thread Volker Lendecke
On Tue, Jun 03, 2008 at 07:15:43AM +0200, Bengt Nilsson wrote: > I downgraded to autoconf 2.61 which eliminated the "circular > dependency " error. > Nevertheless, the uint32_t and final link problem remains. > > Is there ANY chance that samba 3 will ever build under tru64 4.0F? Sure. Right no

[Samba] Strange with an acl.

2008-06-03 Thread Georgy Goshin
Hi, I have a strange issue: # file: Current\040docs/Outcoming\040Correspondence_2008.xls # owner: secretary # group: users user::-w- user:alex:rwx user:tat:rwx user:secretary:rwx group::--- group:wheel:rwx mask::rwx other::--- User 'secretary' has no access to this file from Samba. Any advices

Re: [Samba] Peculiar issue when loading images via samba/cifs

2008-06-03 Thread David Brewer
That did it! My only regret is that I didn't ask before spending several hours fiddling with my samba config settings. Next time I'll know to look at apache earlier on. Thanks so much! David On Tue, Jun 3, 2008 at 12:33 AM, mallapadi niranjan <[EMAIL PROTECTED]> wrote: > Hi, > > try setting "

Re: [Samba] Peculiar issue when loading images via samba/cifs

2008-06-03 Thread mallapadi niranjan
Hi, try setting " EnableSendfile off" in httpd.conf Regards On Tue, Jun 3, 2008 at 12:55 PM, David Brewer <[EMAIL PROTECTED]> wrote: > I am using Enterprise Samba 3.0.30 on RHEL 4 to share a directory of > images between two servers. I'm using CIFS to mount the share. Both > servers expose the

[Samba] Peculiar issue when loading images via samba/cifs

2008-06-03 Thread David Brewer
I am using Enterprise Samba 3.0.30 on RHEL 4 to share a directory of images between two servers. I'm using CIFS to mount the share. Both servers expose the images over the web via Apache2. On the server with the mounted share, when I load a page with many images embedded, some of the images load