Re: [Samba] Listing Domain Local Groups from a Samba Member (NT4 PDC)

2010-07-05 Thread Mark Sheard
Hi Gary, Sorry for the late response just looking through my spams folder and my eye caught this one, phew... I since then have tweaked my yahoo mail settings and all Samba contents is going to a specified Samba folder... Anyhow Back to your question: I installed ubuntu 10.04 and if i remembe

Re: [Samba] pam_smbpass.so passdb.tdb support

2010-07-05 Thread John H Terpstra
On 07/05/2010 11:33 PM, kandukuru_sur...@emc.com wrote: > Dear John T and samba list, > > Can you please help me to understand following things. I have browsed > the net , points are not clear to me. > > 1) What exactly doesn't work with the existing smbpasswd based > mechanism? > -

Re: [Samba] pam_smbpass.so passdb.tdb support

2010-07-05 Thread Kandukuru_Suresh
Dear John T and samba list, Can you please help me to understand following things. I have browsed the net , points are not clear to me. 1) What exactly doesn't work with the existing smbpasswd based mechanism? -- from http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb

[Samba] Samba4 + OpenLDAP + Dovecot

2010-07-05 Thread Markus Bajones
Hello Samba list. I have a question which I am unable to find the answer in the world wide web. My current setup I wish to upgrade is as follows: OpenLDAP with user acount information (names, passwords, etc.) against which Linux and Windows clients do authenticate. Cyrus with its own user acc

Re: [Samba] Synchronisation using LDAP

2010-07-05 Thread Ryan Bair
Unfortunately I'm not seeing a similar extension point on s4. I wouldn't imagine adding one would be too terrible though. On Mon, Jul 5, 2010 at 3:58 PM, Jorijn Schrijvershof wrote: > Hi, > > On Jul 5, 2010, at 21:52 :42, Michael Wood wrote: > >> No, I don't think so.  From Jorijn's e-mail I thou

Re: [Samba] Transferring PDC responsibility without LDAP

2010-07-05 Thread Michael Deutschmann
On Sat, 19 Jun 2010, I wrote: > Can anyone answer my original question, which is whether my original > strategy (use "net rpc getsid" without LDAP, but stop old PDC forever > before starting the new one) is sound? After no one answered, last week I decided to just try it and see. Except for the f

Re: [Samba] sambaLogonScript [another] problem

2010-07-05 Thread Miguel Medalha
But it happens that when i create a new user, the sambaLogonScript entry in the ldap database is set to %G.bat, exactly the entry i MUST NOT have to load the script. Since i'm expanding my network and tons of new users are coming, i trying to keep things very organized. I'll need to change th

Re: [Samba] Synchronisation using LDAP

2010-07-05 Thread Jorijn Schrijvershof
Hi, On Jul 5, 2010, at 21:52 :42, Michael Wood wrote: > No, I don't think so. From Jorijn's e-mail I thought Google's LDAP > server stored in these formats. Perhaps I misunderstood. > > I think it depends on which direction the sync is supposed to happen. > From google to Samba or the other wa

Re: [Samba] Synchronisation using LDAP

2010-07-05 Thread Michael Wood
On 5 July 2010 18:16, Ryan Bair wrote: > It looks like the new sync module also supports SHA1 and MD5 hashed passwords. > > "To synchronize passwords from LDAP, you will need an LDAP attribute that > stores > passwords in plain text, MD5 or SHA1 format. " > > Not sure if Samba4 stores in these fo

[Samba] Client Windows accessing Samba Share (krb5/ad2008/winbind)

2010-07-05 Thread Thiago Ferreira
I have a Samba server, its joinning on AD2008, the commands bellow has sucess when I test: # net ads testjoin Join is OK # wbinfo -t checking the trust secret via RPC calls succeeded # wbinfo -u # wbinfo -g # net ads user # net ads group # net ads user info administrator # wbinfo -u # wbinfo -g H

Re: [Samba] Default Hidden Disk Shares

2010-07-05 Thread Gary Dale
On 05/07/10 05:00 AM, Atkinson, Robert wrote: Before I reply, please take my response in the light it's meant, which is curious interest and intrigue. I'm not and don't want to drag this out into a full blown dissemination of Windows security. The 'admins' directive in the CONF file holds a lis

[Samba] sambaLogonScript [another] problem

2010-07-05 Thread Leonardo Carneiro - Veltrac
Hi there, i'm having another problem with the samba logon scripts. Like i said in the previous thread, in my smb.conf is defined to users use group defined logon scripts: logon script = %G.bat In the previous thread we also reached the conclusion that when the desired logon script of the user

Re: [Samba] samba Digest, Vol 91, Issue 5

2010-07-05 Thread John . Brookes
Dddd 0d __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email

Re: [Samba] Default Hidden Disk Shares

2010-07-05 Thread Robert LeBlanc
The Windows client will hide any share that ends with a '$' whether or not it is an administrator share, it's doesn't know or care. In this case there is no difference between hidden and normal because to Windows they are both hidden. Give it a try sometime. If you hit the server with a Mac client

[Samba] samba group members

2010-07-05 Thread Leonardo Carneiro - Veltrac
Hi everyone, When i add someone to a group using smbldap-usermod -G +(groupname) (username) it does not add the user to the group in the ldap backend: smbldap-groupshow (groupname) | grep memberUid The new member is not there! I have to mannualy add it to the user to the groups again.

Re: [Samba] Synchronisation using LDAP

2010-07-05 Thread Ryan Bair
It looks like the new sync module also supports SHA1 and MD5 hashed passwords. "To synchronize passwords from LDAP, you will need an LDAP attribute that stores passwords in plain text, MD5 or SHA1 format. " Not sure if Samba4 stores in these formats or not though... On Mon, Jul 5, 2010 at 3:28 A

[Samba] Possible to use idmap hash with nss info adex (and have them cooperate not just coexist)

2010-07-05 Thread Trever L. Adams
I am wanting the auto uid/gid mapping of idmap hash, but the rest of the functionality of idmap/nss info adex. I do not know if this is possible. Below are my questions. A few questions about idmap and nss info. I like the idea of idmap_hash. I want to us it. However, I would like to use nss

[Samba] Errors while provisioning Samba4

2010-07-05 Thread Alex
Hi. I tried to install latest version of Samba4 and failed on provisioning with the following messages: Adding DomainDN: DC=vegagroup,DC=vega,DC=fcyb,DC=mirea,DC=ru pdc_fsmo_init: no domain object present: (skip loading of domain details) Adding configuration container naming_fsmo_init:

Re: [Samba] sambaLogonScript problem [SOLVED]

2010-07-05 Thread Miguel Medalha
Miguel tip worked for me. In my smb.conf i't specified that users should run "%G.bat", so i removed this attribute ( "smbldap-usermod -E "" user" ) and WORKED. This is something that is documented somewhere and i missed? I suspected that this would be the problem because I had already banged

Re: [Samba] sambaLogonScript problem [SOLVED]

2010-07-05 Thread Leonardo Carneiro - Veltrac
On 07/05/2010 08:21 AM, Leonardo Carneiro - Veltrac wrote: On 07/03/2010 12:38 PM, Steve Thompson wrote: On Sat, 3 Jul 2010, Miguel Medalha wrote: One thing I once noticed was that the Samba account attribute "sambaLogonScript" must ONLY be set for a user if it DIFFERS from what is specified

Re: [Samba] sambaLogonScript problem

2010-07-05 Thread Sebastian Abate
On Mon, Jul 5, 2010 at 8:46 AM, Leonardo Carneiro - Veltrac wrote: > On 07/05/2010 08:28 AM, Miguel Medalha wrote: >> >> Did you verify that end lines of the scripts are in DOS format (CR+LF)? >> >> You can use unix2dos to convert them from Unix format (LF) to DOS format >> (CR+LF). >> >> %G.bat i

Re: [Samba] sambaLogonScript problem

2010-07-05 Thread Leonardo Carneiro - Veltrac
On 07/05/2010 08:28 AM, Miguel Medalha wrote: Did you verify that end lines of the scripts are in DOS format (CR+LF)? You can use unix2dos to convert them from Unix format (LF) to DOS format (CR+LF). %G.bat is working correctly for me. Samba PDC over CentOS 5.5 with LDAP back end. Pardon m

Re: [Samba] sambaLogonScript problem

2010-07-05 Thread Leonardo Carneiro - Veltrac
On 07/03/2010 12:38 PM, Steve Thompson wrote: On Sat, 3 Jul 2010, Miguel Medalha wrote: One thing I once noticed was that the Samba account attribute "sambaLogonScript" must ONLY be set for a user if it DIFFERS from what is specified in "smb.conf". Otherwise, the script wouldn't run. I found

Re: [Samba] sambaLogonScript problem

2010-07-05 Thread Leonardo Carneiro - Veltrac
On 07/03/2010 12:22 PM, Chris Smith wrote: On Sat, Jul 3, 2010 at 10:10 AM, Leonardo Carneiro - Veltrac wrote: I'm having trouble in deploying by group sambaLogonScript. My scripts consist only im mapping network folders. I'm using Samba 3.4.7. Is there a way to debug this? The logs does

[Samba] Preserve create/modify dates and attributes in samba

2010-07-05 Thread Derek Lewis
I have configured Samba 3.4.7 with extended attributes enabled to preserve file create/modify dates. I went ahead and tried to map a network drive, and successfully copied a file over to samba, though the create date is set to the modified date on the copy. For my /etc/fstab, I have set the

[Samba] Migrate windows 200 AD to Samba / LDAP

2010-07-05 Thread Arnaud BLONDEL - Alter Way Solutions
hi, I want to migrate from Active Directory (Windows 2000 server) to Samba / LDAP (Ubuntu 10.4 LTS) I followed these steps : - Install Ubuntu 10.4 as BDC of the domain - set SSID in Samba - use net vampire process to extract information of AD - Stop Windows 2000 server - Restart Samba as PDC

Re: [Samba] Default Hidden Disk Shares

2010-07-05 Thread Atkinson, Robert
Before I reply, please take my response in the light it's meant, which is curious interest and intrigue. I'm not and don't want to drag this out into a full blown dissemination of Windows security. The 'admins' directive in the CONF file holds a list of Admin users, and gives elevated privileges

Re: [Samba] Default Hidden Disk Shares

2010-07-05 Thread Atkinson, Robert
Robert, the discussion was around the hidden '$' shares, not normal ones. Rob. From: Robert LeBlanc [mailto:rob...@leblancnet.us] Sent: 02 July 2010 19:15 To: Atkinson, Robert Cc: Jeremy Allison; samba@lists.samba.org Subject: Re: [Samba] Default Hidden Disk Shares On Fri, Jul 2, 2010

[Samba] SMB Trans2 Response and STATUS_OBJECT_NAME_NOT_FOUND

2010-07-05 Thread masetto
Good Morning, let me explain the problem: i need to establish a connection with a Windows host (Windows 7) via smbclient (from ubuntu linux), to run a script which needs to get some file informations (eg. size, version, etc..). Connection and authentication works perfectly. From linux, i can exec

[Samba] windows 7 samba domain

2010-07-05 Thread Ufficiotecnico Acknow Srl
Hi, I succesfuly joined five windows 7 client to a samba (version 3-3.2.15-40) domain with passdb backend = tdbsam, the client works correctly, user domain, network share printers etc, after 2 weeks the client does not access to domain, with this error: the trust relationship between this work

Re: [Samba] pam_smbpass.so passdb.tdb support

2010-07-05 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/03/2010 10:25 AM, John H Terpstra wrote: > On 07/03/2010 08:50 AM, kandukuru_sur...@emc.com wrote: >> Dear JHT, >> Thanks for the quick reply.in >> http://www.samba.org/samba/history/samba-3.4.0.html . >> Samba team is recommending to use tdbsa

Re: [Samba] Synchronisation using LDAP

2010-07-05 Thread Jorijn Schrijvershof
Hi, On Mon, Jul 5, 2010 at 9:03 AM, Michael Wood wrote: > Hi > > Sorry, I accidentally did not send my initial reply to the list. > > I am not sure this will be possible unless you use plain text > passwords because I believe Windows uses its own hashing algorithms. > I don't know anything about

Re: [Samba] Synchronisation using LDAP

2010-07-05 Thread Michael Wood
Hi Sorry, I accidentally did not send my initial reply to the list. On 5 July 2010 08:26, Jorijn Schrijvershof wrote: > On Fri, Jul 2, 2010 at 3:53 PM, Michael Wood wrote: >> >> For a start just try: >> $ ldapsearch -x -h localhost >> >> That should print out a whole bunch of stuff. >> >> You c