Re: [Samba] samba 4 how to enable winbindd

2012-02-28 Thread Kai Blin
On 2012-02-27 14:13, Alain Toussaint wrote: Hi Alain, > I configured a domain controller on a ubuntu server using samba 4 > alpha 15 using ubuntu's distribution packages and followed this howto: > https://wiki.samba.org/index.php/Samba4/Winbind to have unix account for > domain users but wi

Re: [Samba] Proposal to change security=share in Samba 4.0

2012-02-28 Thread Andrew Bartlett
On Tue, 2012-02-28 at 16:34 -0800, Jeremy Allison wrote: > On Wed, Feb 29, 2012 at 01:00:00AM +0100, Volker Lendecke wrote: > > Andrew, > > > > On Wed, Feb 29, 2012 at 10:53:47AM +1100, Andrew Bartlett wrote: > > > On Tue, 2012-02-28 at 07:30 -0500, Mike Rambo wrote: > > > > > > > From what I sa

Re: [Samba] Proposal to change security=share in Samba 4.0

2012-02-28 Thread Jeremy Allison
On Wed, Feb 29, 2012 at 01:00:00AM +0100, Volker Lendecke wrote: > Andrew, > > On Wed, Feb 29, 2012 at 10:53:47AM +1100, Andrew Bartlett wrote: > > On Tue, 2012-02-28 at 07:30 -0500, Mike Rambo wrote: > > > > > From what I saw in the rest of the thread it looks like there will > > > still be a

Re: [Samba] Proposal to change security=share in Samba 4.0

2012-02-28 Thread Volker Lendecke
Andrew, On Wed, Feb 29, 2012 at 10:53:47AM +1100, Andrew Bartlett wrote: > On Tue, 2012-02-28 at 07:30 -0500, Mike Rambo wrote: > > > From what I saw in the rest of the thread it looks like there will > > still be a way to do this but I thought I'd chime in since the subject > > has come up an

Re: [Samba] Proposal to change security=share in Samba 4.0

2012-02-28 Thread Andrew Bartlett
On Tue, 2012-02-28 at 07:30 -0500, Mike Rambo wrote: > From what I saw in the rest of the thread it looks like there will > still be a way to do this but I thought I'd chime in since the subject > has come up and we do use security=share to accomplish this at present. There will always be a wa

Re: [Samba] Fwd: STATUS_ACCESS_DENIED with NTCreateAndX if Access Mask has System Security bit set

2012-02-28 Thread Jeremy Allison
On Tue, Feb 28, 2012 at 01:22:38PM -0700, Tom Lee wrote: > I have tested with this fix and it looks like it does take care of the > problem. We'll look forward to seeing this update in the latest 3.6.x > codebase. Thanks a lot. Thanks ! It's tracked as bug #8784 https://bugzilla.samba.org/show_b

Re: [Samba] Fwd: STATUS_ACCESS_DENIED with NTCreateAndX if Access Mask has System Security bit set

2012-02-28 Thread Tom Lee
I have tested with this fix and it looks like it does take care of the problem. We'll look forward to seeing this update in the latest 3.6.x codebase. Thanks a lot. On Tue, Feb 28, 2012 at 10:42 AM, Jeremy Allison wrote: > On Mon, Feb 27, 2012 at 04:55:29PM -0800, Jeremy Allison wrote: > > On M

Re: [Samba] windows and nfs4 acls

2012-02-28 Thread Jeremy Allison
On Tue, Feb 28, 2012 at 06:37:21PM +0100, Gémes Géza wrote: > 2012-02-28 08:27 keltezéssel, steve írta: > > Hi everyone > > > > We're really struggling with nfs4 <--> windows acls. > > > > Scenario > > Samba4 share --> cifs --> win7. No problem > > Samba4 share --> nfs4 --> Linux. acls not inheri

Re: [Samba] Fwd: STATUS_ACCESS_DENIED with NTCreateAndX if Access Mask has System Security bit set

2012-02-28 Thread Jeremy Allison
On Mon, Feb 27, 2012 at 04:55:29PM -0800, Jeremy Allison wrote: > On Mon, Feb 27, 2012 at 03:12:49PM -0700, Tom Lee wrote: > > -- Forwarded message -- > > From: Tom Lee > > Date: Mon, Feb 27, 2012 at 3:10 PM > > Subject: Re: [Samba] STATUS_ACCESS_DENIED with NTCreateAndX if Access

Re: [Samba] windows and nfs4 acls

2012-02-28 Thread Gémes Géza
2012-02-28 08:27 keltezéssel, steve írta: > Hi everyone > > We're really struggling with nfs4 <--> windows acls. > > Scenario > Samba4 share --> cifs --> win7. No problem > Samba4 share --> nfs4 --> Linux. acls not inherited > Neither is there inheritance vica versa. > > e.g. It is not possible

[Samba] Samba4 error? A global catalog (GC) cannot be contacted

2012-02-28 Thread steve
Hi everyone Every so often we get this error: http://dl.dropbox.com/u/45150875/samba-list.png The error disappears around 5 minutes after Admin has logged in, Meanwhile the user can logon and none of his group acls seem to be affected. Nothing unusual appears at d3 level either. Anyone else?

Re: [Samba] Samba4 xidNumber and idmap.ldb

2012-02-28 Thread steve
On 28/02/12 11:14, Kai Blin wrote: On 2012-02-26 18:15, steve wrote: Hi Steve, Sorry. Just one more thing. Could you point me at the code which finds the next free xid when e.g. you create a new user? That's not how samba4 id mapping works at the moment I'm afraid. It will ignore the Posix at

Re: [Samba] Proposal to change security=share in Samba 4.0

2012-02-28 Thread Mike Rambo
Andrew Bartlett wrote: On Mon, 2012-02-27 at 19:45 -0500, simo wrote: On Tue, 2012-02-28 at 10:16 +1100, Andrew Bartlett wrote: On Mon, 2012-02-27 at 17:53 -0500, David Collier-Brown wrote: Am I correct in thinking this would make all shares have the same password as the guest user, or do you

Re: [Samba] Samba domain member server using only nss ldap

2012-02-28 Thread Adam Tauno Williams
On Sat, 2012-02-25 at 19:49 +0100, steve wrote: > one little problem. When I execute ls -la in the directory there is a > delay about 1-2 seconds. Is it normal? nscd deamon solves this problem, > there is no delay. Is there any solution without using nscd? > nss-ldapd with nslcd. Much quicker map

Re: [Samba] Anything like "nss_updatedb" for ldapsam account information backend?

2012-02-28 Thread Adam Tauno Williams
On Tue, 2012-02-28 at 00:31 -0800, Jack Bates wrote: > Is there anything like "nss_updatedb" [1] for ldapsam account > information backend? > nss_updatedb caches unix account information, so it is available even > when the LDAP directory isn't available > But ldapsam stores additional account inf

Re: [Samba] Samba4 xidNumber and idmap.ldb

2012-02-28 Thread Kai Blin
On 2012-02-26 18:15, steve wrote: Hi Steve, > Sorry. Just one more thing. Could you point me at the code which > finds the next free xid when e.g. you create a new user? That's not how samba4 id mapping works at the moment I'm afraid. It will ignore the Posix attributes that might exist in the AD

[Samba] New Windows 7 PC in samba network sees itself as logonserver respectively can not access subdirectories

2012-02-28 Thread Andreas Moroder
Hello, we are preparing a new image for our windows 7 computers. We can connect to the domain, we also see all of our samba servers. On one server we can logon, see also the directories in the share, but when we try to open subdirectories explorer hangs for a long time and then a dialog appea

[Samba] Anything like "nss_updatedb" for ldapsam account information backend?

2012-02-28 Thread Jack Bates
Is there anything like "nss_updatedb" [1] for ldapsam account information backend? nss_updatedb caches unix account information, so it is available even when the LDAP directory isn't available But ldapsam stores additional account information. How can I cache this additional account informat