Re: [Samba] Samba: read-only remote LDAP + additional local users

2012-07-23 Thread Daniel Müller
Why do not have all users work within samba? What is the reason? --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet

[Samba] Samba: read-only remote LDAP + additional local users

2012-07-23 Thread Arokux B.
Hi all, my server has access to a read-only remote LDAP-server where information about 99% of user accounts is residing. On my server I want to configure Samba to use LDAP-sever for authentication. Now and then there will be some extra users that do not have an account on LDAP. How should I manag

Re: [Samba] Failing to get uids from AD

2012-07-23 Thread Nick Triantos
Thanks Steve. I don't have an 'objectClass: posixAccount' set, though I'm unclear whether that's needed. My nsswitch.conf is set as: passwd: files winbind I'm not trying to use the generic LDAP mechanism.. I'm trying to get Winbind to talk to AD. I suspect it will look for different attributes

[Samba] mount.cifs ms dfs and failover

2012-07-23 Thread Sam Abed
Hello, I can't find any reference on if linux understands multiple targets when it mounts a MS dfs share, specifically if it can failover. I can mount a MS dfs share fine, however if the server "picked" is shutdow the mount hangs. I tried it on a recent ubuntu to discount the "enterprise" lag.

Re: [Samba] Failing to get uids from AD

2012-07-23 Thread Nick Triantos
It looks like uidNumber is the attribute that gets set (I've queried it with ldapsearch). This is what AD Users & Computers sets when I use their GUI to configure a user. thanks, -Nick On Jul 17, 2012, at 6:00 PM, Rob Townley wrote: > Precisely what ldap attribute are you setting user id numbe

Re: [Samba] Samba 4 on Production

2012-07-23 Thread German Molano
El 23/07/12 10:46, Horacio Lo Brutto escribió: Yes, in fact that was one of the things I haven't mentioned. We're going with either to physical servers (nice ones) or with Blades + VMWare ESXi. We will build a redundant pair of servers. I am a little concerned about the amount of users / machi

Re: [Samba] Suspicious activity on domain

2012-07-23 Thread Michael Wood
Just a guess. The user's virus scanner decided to scan your server. On 7/16/12, Ludovic Rouse-Lamarre wrote: > Hello, > > Last week I have detected with Zabbix that a member of my Samba domain > had been downloading at a rate of around 8 Mbps for two days and a half. > When asking the person to w

[Samba] Group permissions issues with winbind on

2012-07-23 Thread Craig Cameron
Simple group permissions don't seem to work when winbind is running and smb.conf has "nt acl support = yes" If you have a directory that is writeable by a group you are a member of - but you are not the file owner - you cannot delete any files underneath the directory (even if you do own them).

Re: [Samba] Samba 4 on Production

2012-07-23 Thread German Molano
Horacio I had a Samba4 (4.0.0beta2-GIT) installation in production, with 40 something workstations with WinXP, Vista y 7 and a couple servers with windows 2008 and 2003 server. To this time it had worked pretty fine, i only have some issues related with ACL, some of them more related with mi

[Samba] Samba 4 on Production

2012-07-23 Thread Horacio Lo Brutto
We're involved in a project that the requirements could be satisfied with both samba3 and 4. Anyway I am testing what can be done with Samba4 and after following the tutorial published in the official wiki, I was able to create my test domain, and join WinXP and Win7 machines to it without a proble

Re: [Samba] Strange behaviour of clients after changing Full Name via pdbedit

2012-07-23 Thread Gaiseric Vandal
Are network drives handled by a login script? If the network script tries to use the username variable to map drives, changing name could break somthing. Are these roaming profiles or local? For local profiles, the local profile name should match the user name. Did that change? Can you che

Re: [Samba] How do I get an ssh client to authenticate with samba4's kerberos GSSAPI? [Solved]

2012-07-23 Thread Quinn Plattel
Hi, I have now managed to succeed in doing passwordless ssh logins via kerberos/samba4 without the "GSSAPIStrictAcceptorCheck" trick or hacking the krb5.keytab file. My samba4 setup is actually a bit special compared to a normal samba4 setup in that I am running samba4 on top of a corosync/pacema

Re: [Samba] Samba4: how to build on Virtualbox

2012-07-23 Thread John Drescher
> VB with openSUSE 12.1 guest and host, guest with 512Mb RAM. > > Samba4 takes over 6 hours to build on the guest. The host does it in around > 30 minutes even when the guest is fired up. > > I tried to rsync a build from the host to the guest but that takes forever > too. > > Any tips? > I usuall

[Samba] Strange behaviour of clients after changing Full Name via pdbedit

2012-07-23 Thread Dr. Harry Knitter
Hallo, after having changed the Full Name of a user via pdbedit the user profile of this user is not loaded properly any more by the XP clients. So we renamed again back to the original Full Name and the profile could be loaded. However, something went wrong All settings like network drives wer

Re: [Samba] Samba 4 AD What's the difference between a Domain and a Forest

2012-07-23 Thread Gaiseric Vandal
A forest contains one or tree, with each tree containing one or more domains. In an AD, you need at least one forest. You would have additional branches if you needed a different top level DNS space. Domains are trusted and trusting. When you install active directory on a server it will

Re: [Samba] Suspicious activity on domain

2012-07-23 Thread Andrew Bartlett
On Mon, 2012-07-16 at 14:02 -0400, Ludovic Rouse-Lamarre wrote: > Hello, > > Last week I have detected with Zabbix that a member of my Samba domain > had been downloading at a rate of around 8 Mbps for two days and a half. > When asking the person to whom belonged the machine, he didn't know he

Re: [Samba] rsync folder permissions

2012-07-23 Thread steve
On 23/07/12 13:41, Marcio Merlone wrote: Em 22-07-2012 05:13, steve escreveu: I'm trying to rsync our filserver to a USB backup. When I first start, all the folders are created with root:root ownership whereas the actual owners are root:Domain Users or root: one.of.our.groups Eventually, the

Re: [Samba] error in join a RODC (samba4)

2012-07-23 Thread Luiz Gustavo
Hi Andrew, Em Dom, 2012-07-22 às 22:06 +1000, Andrew Bartlett escreveu: > On Fri, 2012-07-20 at 12:04 -0300, Luiz Gustavo wrote: > > Hi list, > > > > I'm trying to add a RODC in an AD environment using the command: > > Is this joining a Samba4 domain, or a Microsoft AD domain? Yes, all with Sam

Re: [Samba] rsync folder permissions

2012-07-23 Thread Marcio Merlone
Em 22-07-2012 05:13, steve escreveu: I'm trying to rsync our filserver to a USB backup. When I first start, all the folders are created with root:root ownership whereas the actual owners are root:Domain Users or root: one.of.our.groups Eventually, the groups show correctly, but not always. M

[Samba] DFS strange behavior

2012-07-23 Thread Bruno Guerreiro
Hello list, Im facing a strange (?) behavior in MS office applications while working on a DFS share that only appeared after we migrated from Samba 3.0.14 to samba 3.5.10. Scenario: Server-loc1 and server-loc2 have two shares : data and data$ data points to a dfs root share in which exists a di