Re: [Samba] Migrate to NTLM V2

2010-07-08 Thread Martin Hochreiter
The hashes stored are not NTLMv1 or v2, that's the protocol that uses the hashes. The stored hashes are MD4. So you don't need to convert any hashes in LDAP to go to NTLMv2 protocol security. Jeremy. Thank you Jeremy ... that makes things much easier :) regards martin -- To unsubscribe f

Re: [Samba] One account can access samba, another can't.

2010-07-08 Thread tms3
SNIP mich...@carter ~ $ smbclient //carter/homes/michael Yep. You need to use the home path stuff. Alternatively you could, just to make it very easy #Share for michael [MICHEAL] path = /samba/michael (etc.) #Share for amy [AMY] path = /samba/amy (etc.) Then the mount from cifs, or wi

Re: [Samba] One account can access samba, another can't.

2010-07-08 Thread Stan Hoeppner
To be clear, all of my references to UNIX user account pertain to the user accounts on the Samba server host, not Gentoo accounts on the client PCs. Stan Hoeppner put forth on 7/8/2010 9:07 PM: > Michael Sullivan put forth on 7/8/2010 2:41 PM: > >> [homes] >> path=/samba/michael >> valid users=mi

Re: [Samba] One account can access samba, another can't.

2010-07-08 Thread Stan Hoeppner
Michael Sullivan put forth on 7/8/2010 2:41 PM: > [homes] > path=/samba/michael > valid users=michael > writable=yes > > path=/samba/amy > valid users=amy > writeable=yes I'd suggest you set the UNIX HOME variable to match these non standard home paths. For instance, the default UNIX home dir i

Re: [Samba] smbcquotas tells me that "quotas are not enabled"

2010-07-08 Thread Stan Hoeppner
Luke Hamilton put forth on 7/8/2010 7:31 PM: > I have a setup of Ubuntu 8.04 running Samba 3.0.28a. Connected to our > network I > have a buffalo linkstation acting as Network Attached Storage (NAS), which I > have successfully mounted on the local file system. > > Using smbcquotas I believe I

Re: [Samba] One account can access samba, another can't.

2010-07-08 Thread Michael Sullivan
On Thu, 2010-07-08 at 18:01 -0700, t...@tms3.com wrote: > Erm, the [homes] isn't an outline heading. It is a share name. It is > unique, and has a unique path. You probably want to use an auto login > for homes such that a user connects to > > \\sever\share\%U > > where the share in smb.conf

Re: [Samba] How to regenerate passdb.tdb

2010-07-08 Thread Abe Lau
On Fri, Jul 9, 2010 at 7:43 AM, Jeremy Allison wrote: > On Thu, Jul 08, 2010 at 11:32:32AM +1000, Abe Lau wrote: > > Hi, > > I was having problem with the tdbsam backend in which a particular user > got > > listed twice with pdbedit. > > (http://www.mail-archive.com/samba@lists.samba.org/msg10911

Re: [Samba] One account can access samba, another can't.

2010-07-08 Thread tms3
My wife and I each have our own workstation dual-booting WinXP and Gentoo Linux. We also have a third which runs Gentoo all the time. I wanted to set up samba on the third box and provide some extra storage space for both our Windows installs. It worked for a few days, then all of a sudd

Re: [Samba] How to regenerate passdb.tdb

2010-07-08 Thread Abe Lau
On Fri, Jul 9, 2010 at 8:26 AM, Gaiseric Vandal wrote: > On 07/08/2010 05:43 PM, Jeremy Allison wrote: > >> On Thu, Jul 08, 2010 at 11:32:32AM +1000, Abe Lau wrote: >> >> >>> Hi, >>> I was having problem with the tdbsam backend in which a particular user >>> got >>> listed twice with pdbedit. >>>

[Samba] One account can access samba, another can't.

2010-07-08 Thread Michael Sullivan
My wife and I each have our own workstation dual-booting WinXP and Gentoo Linux. We also have a third which runs Gentoo all the time. I wanted to set up samba on the third box and provide some extra storage space for both our Windows installs. It worked for a few days, then all of a sudden it st

[Samba] smbcquotas tells me that "quotas are not enabled"

2010-07-08 Thread Luke Hamilton
I have a setup of Ubuntu 8.04 running Samba 3.0.28a. Connected to our network I have a buffalo linkstation acting as Network Attached Storage (NAS), which I have successfully mounted on the local file system. Using smbcquotas I believe I can set up a quota for each user on the NAS. To get st

Re: [Samba] How to regenerate passdb.tdb

2010-07-08 Thread Gaiseric Vandal
On 07/08/2010 05:43 PM, Jeremy Allison wrote: On Thu, Jul 08, 2010 at 11:32:32AM +1000, Abe Lau wrote: Hi, I was having problem with the tdbsam backend in which a particular user got listed twice with pdbedit. (http://www.mail-archive.com/samba@lists.samba.org/msg109110.html) Without much h

Re: [Samba] How to regenerate passdb.tdb

2010-07-08 Thread Jeremy Allison
On Thu, Jul 08, 2010 at 11:32:32AM +1000, Abe Lau wrote: > Hi, > I was having problem with the tdbsam backend in which a particular user got > listed twice with pdbedit. > (http://www.mail-archive.com/samba@lists.samba.org/msg109110.html) > > Without much hope in fixing it, I am planning to re-gen

[Samba] Regarding S4 and libnss_winbind.so

2010-07-08 Thread tms3
Apparently this didn't/doesn't build on FreeBSD by default...or is it "doesn't build at all". If it is buildable, what should I do to build it, as without it...see wiki: http://wiki.samba.org/index.php/Samba4/Winbind Cheers, TMS III -- To unsubscribe from this list go to the following UR

Re: [Samba] Migrate to NTLM V2

2010-07-08 Thread Jeremy Allison
On Thu, Jul 08, 2010 at 01:19:20PM +0200, Martin Hochreiter wrote: > Hi! > > We have a Samba 3.5.4 PDC with openldap database and > we are using currently ntlm (V1) > > We want to use ntlmV2 and I want to know what is necessary > to do that - > is it just the change of the conf options or do we ha

Re: [Samba] File owner SID instead of name showing for one user

2010-07-08 Thread tms3
On 07/08/2010 03:10 PM, Gregory A. Cain wrote: Exactly. I checked 4 or 5 other users - no problems. Also did a spot-check of files belonging to other users in Windows Explorer. It appears this is the only user with the problem. I checked for duplicate UID's and found none. Using ls -l on

Re: [Samba] File owner SID instead of name showing for one user

2010-07-08 Thread Gregory A. Cain
Yes, it returns the correct SID. On 7/8/2010 12:33 PM, Gaiseric Vandal wrote: What does "pdbedit -Lv theuser" show? It should show the user's SID. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] File owner SID instead of name showing for one user

2010-07-08 Thread Gaiseric Vandal
On 07/08/2010 03:10 PM, Gregory A. Cain wrote: Exactly. I checked 4 or 5 other users - no problems. Also did a spot-check of files belonging to other users in Windows Explorer. It appears this is the only user with the problem. I checked for duplicate UID's and found none. Using ls -l on t

Re: [Samba] File owner SID instead of name showing for one user

2010-07-08 Thread Gregory A. Cain
Exactly. I checked 4 or 5 other users - no problems. Also did a spot-check of files belonging to other users in Windows Explorer. It appears this is the only user with the problem. I checked for duplicate UID's and found none. Using ls -l on the server returns the correct user name and UID

Re: [Samba] File owner SID instead of name showing for one user

2010-07-08 Thread tms3
--- Original message --- Subject: Re: [Samba] File owner SID instead of name showing for one user From: Gregory A. Cain To: Date: Thursday, 08/07/2010 11:38 AM Thank you - wbinfo -s (user sid) returns "Could not lookup sid (user sid)" But all other SID lookups are good (well at least

Re: [Samba] File owner SID instead of name showing for one user

2010-07-08 Thread tms3
Also make sure that SID returned by "wbinfo -n DOMAIN\name" matches the name returned by"wbinfo -s SID" command. Yeah...but that's a real puzzler, isn't it? Why the is the nsswitch/winbindd process getting a SID as a value for uid? I've seen it briefly when some process is laggin

Re: [Samba] File owner SID instead of name showing for one user

2010-07-08 Thread Gary Dale
This occurs when Windows cannot find a user name for the SID. Identify which user is the real owner and change the Owner of the file to the real owner. If the owner actually does exist then it's probably missing the name attribute. On 08/07/10 01:56 PM, Gaiseric Vandal wrote: Also make sure t

Re: [Samba] File owner SID instead of name showing for one user

2010-07-08 Thread Gregory A. Cain
Thank you - wbinfo -s (user sid) returns "Could not lookup sid (user sid)" How do I fix this? Thanks again. On 7/8/2010 10:56 AM, Gaiseric Vandal wrote: Also make sure that SID returned by "wbinfo -n DOMAIN\name" matches the name returned by "wbinfo -s SID" command. -- To unsubscribe from

Re: [Samba] File owner SID instead of name showing for one user

2010-07-08 Thread Gaiseric Vandal
Also make sure that SID returned by "wbinfo -n DOMAIN\name" matches the name returned by"wbinfo -s SID" command. On 07/08/2010 01:45 PM, t...@tms3.com wrote: Hello, I recently migrated all data and user accounts from our old Samba file server to a new (Samba 3.4.0 on Unbuntu 9.10) one

Re: [Samba] File owner SID instead of name showing for one user

2010-07-08 Thread tms3
Hello, I recently migrated all data and user accounts from our old Samba file server to a new (Samba 3.4.0 on Unbuntu 9.10) one. Everything is working fine except that there is one user whose SID is showing in the "Owner" column of Windows Explorer instead of the user name. It's not a big

[Samba] File owner SID instead of name showing for one user

2010-07-08 Thread Gregory A. Cain
Hello, I recently migrated all data and user accounts from our old Samba file server to a new (Samba 3.4.0 on Unbuntu 9.10) one. Everything is working fine except that there is one user whose SID is showing in the "Owner" column of Windows Explorer instead of the user name. It's not a big pr

[Samba] Error in user authentication

2010-07-08 Thread Thiago Ferreira
Has anyone got any ideia about my issue, I'm trying to open a share in Linux from a desktop Windows, but stay asking the login/passwd. I'm using smbd 3.4.8 with winbind and mit kerberos, joining in AD Windows 2008 Server. [2010/07/08 13:51:34, 5] auth/auth_util.c:208(make_user_info_map) Mapping

[Samba] Migrate to NTLM V2

2010-07-08 Thread Martin Hochreiter
Hi! We have a Samba 3.5.4 PDC with openldap database and we are using currently ntlm (V1) We want to use ntlmV2 and I want to know what is necessary to do that - is it just the change of the conf options or do we have to convert the ldap - stored ntlm (V1) hashes to ntlmV2 before we can use it?

Re: [Samba] Set ACLs on Samba share from Windows

2010-07-08 Thread Helmut Hullen
Hallo, Dadoo, Du meintest am 08.07.10: >> #testparm -v | grep "acl " >> >> acl compatibility = auto >> acl check permissions = Yes >> acl group control = No >> acl map full control = Yes >> force unknown acl user = No >> nt acl support = Yes >>

[Samba] DNS update fails with Kerberos 1.8 on Ubuntu 10.04

2010-07-08 Thread Khaled Blah
Hi all, I've run into a problem regarding the DNS update while joining a domain. The joining of the domain worked but the domain update (enabled with --with-dnsupdate) did not. I could solve the issue by compiling Samba with older Kerberos libs (1.6.3). I know that Kerberos 1.8 disables DES by def

Re: [Samba] Set ACLs on Samba share from Windows

2010-07-08 Thread Dadoo
On Sun, 04 Jul 2010 20:26:47 -0400, Gaiseric Vandal wrote: > It works for me - Solaris 10, ZFS file system, configured as a PDC or > BDC > > #testparm -v | grep "acl " > > acl compatibility = auto > acl check permissions = Yes > acl group control = No > acl map

Re: [Samba] Set ACLs on Samba share from Windows

2010-07-08 Thread Dadoo
On Tue, 06 Jul 2010 22:30:43 -0700, tms3 wrote: >> Is this an OS setting or a Samba setting? > > File system/OS. Yes, the filesystem supports ACLs. If it helps any, this is the output from "getfacl": # owner: \134 # group: \134mis user::rwx user:\134:rwx user:\134administr

Re: [Samba] Set ACLs on Samba share from Windows

2010-07-08 Thread Dadoo
On Wed, 07 Jul 2010 01:32:00 -0400, Gary Dale wrote: > ACLs can sometimes be turned on or off on a file system as a mount > option. Other times it's inherent in the system. It may even be a > format-time option. Oh, if you're asking whether or not the filesystem itself supports ACLs, yes, it doe