Re: [Samba] unable to configure NTP server in samba4

2012-08-07 Thread Andrew Bartlett
On Mon, 2012-08-06 at 11:35 -0400, Nico Kadel-Garcia wrote: On Sun, Aug 5, 2012 at 11:45 PM, deepak prasad deep2...@yahoo.com wrote: Yes I believe so because I think there should be only 5 min of changes between the server time and client machine and if the time gap is more my clients do

Re: [Samba] dbcheck

2012-08-07 Thread Andrew Bartlett
On Tue, 2012-07-31 at 09:41 -0400, sandy.napo...@eccmg.cupet.cu wrote: Helo list, I have samba 4 betta5 as BDC, when I run ./samba-tool dbcheck: Failed to correct missing instanceType on

Re: [Samba] unable to configure NTP server in samba4

2012-08-07 Thread Andrew Bartlett
On Sat, 2012-08-04 at 18:25 +0800, deepak prasad wrote: Hello everyone, I was trying to configure NTP server in my samba4 server but it's not working. I am using CentOS 6.3 (32 bit) for my samba4 server. I installed ntp using yum and the ntp version is 4.2.4 added this line in

Re: [Samba] Packet Size 'Tuning'

2012-08-07 Thread Andrew Bartlett
On Wed, 2012-08-01 at 13:36 -0400, Andrew Mark wrote: Hi all, I'm hoping someone has gone through the pain I'm going through in trying to 'tune' the packet size Samba uses such that we don't get packet overflow errors. I'm getting these error when I perform: # tcpdump -i ppp0 -n -n

Re: [Samba] High Memory utilization - Samba

2012-08-07 Thread Andrew Bartlett
On Thu, 2012-07-26 at 09:01 +0530, Mahesh Tambe wrote: Hello, One of our box running domain controller (Samba4) and DNS/DHCP (Bind 9.8 and default dhcpd) keeps getting high memory used by Samba. As a workaround we do following steps. 1) Restart of Samba = Mem utilization goes back

[Samba] Performance problem using clustered samba via ctdb

2012-08-07 Thread Rainer Krienke
Hello, I recently set up a samba cluster with 4 nodes using ctdb. The systems are virtual Citrix xen machines running SuSE SLES11Sp2 with samba 3.6.3. The shared filesystem needed for ctdb is on a ocfs2 share stored on a ISCSI target. The cluster is running fine and ip takeover etc is working

Re: [Samba] Samba Domain member server - using domain part within authentication

2012-08-07 Thread Daniel Müller
The advantage to work with BDCs you will see when your PDC is down. EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: www.tropenklinik.de Von: Michal

Re: [Samba] Samba Domain member server - using domain part within authentication

2012-08-07 Thread Michal Bruncko
Yes, of course, this is the main reason of BDC role. But there is not any reason to have so much BDC how much (non-PDC) Samba servers are within network. Or other way - there is no such reason using always BDC role instead of classic domain member server role within network. And I understood that

Re: [Samba] samba 3 - getting rid of some logfile errors

2012-08-07 Thread Moray Henderson
From: J. Echter [mailto:j.ech...@echter-kuechen-elektro.de] Sent: 05 August 2012 20:30 Am 01.08.2012 09:17, schrieb Jürgen Echter: Hi, i have a lot of entries in my logs which i can't solve, but everything works as expected. my setup: samba pdc - bacula samba bdc - mule

[Samba] samber server in openvz container - venet oder veth0?

2012-08-07 Thread Birgit Berger (UV Wien)
I'm new to the list. hopefully my question is correctly placed here... I'd installed my samba server 3.5.6 on debian squeeze in a openvz container that uses venet. I'd love to keep it that way but I'm not sure if that is ok. Do you use samba server with venet or do I have to change to veth? I

Re: [Samba] samber server in openvz container - venet oder veth0?

2012-08-07 Thread Johannes Truschnigg
Hi Birgit, On Tue, Aug 07, 2012 at 01:38:32PM +0200, Birgit Berger (UV Wien) wrote: I'm new to the list. hopefully my question is correctly placed here... I'd installed my samba server 3.5.6 on debian squeeze in a openvz container that uses venet. I'd love to keep it that way but I'm not

[Samba] Samba4 winbind getent and login

2012-08-07 Thread steve
Hi With Samba4 winbind, getent passwd gives users as: WORKGROUP\user and you can login as either WORKGROUP\user or user. getent group lists only the group without the WORKGROUP\group and in a listing of files the group is only listed as group (without the WORKGROUP\ part) Is this the expected

Re: [Samba] samber server in openvz container - venet oder veth0?

2012-08-07 Thread Birgit Berger (UV Wien)
thank you Johannes. no, I don't really need WINS but it was the only way I could join clients to the domain so far. so I activated it. DNS should be available and working too. /etc/nsswitch.conf looks like this: hosts: files dns Can I use venet with samba or should I change to veth? regards,

[Samba] Best way to add samba4 to existing domain

2012-08-07 Thread Caleb O'Connell
I have Samba4 running, and it had a win2k3 server joined to it. This is working great. I'd like to add another Ubuntu 12.04 server with samba4 beta5. What's the best join method? Do I provision the server as a member, then join using samba-tools domain join domain When I do it looks like it

Re: [Samba] winbind: uid range is ignored

2012-08-07 Thread steve
On 04/08/12 22:06, NdK wrote: Il 04/08/2012 21:13, steve ha scritto: Uh? wide links seems a bad idea to me... At least from a security perspective. Why a single home directory? We have a single NFS share containing folders for the two domains and inside those a folder for each home. We are

Re: [Samba] winbind: uid range is ignored

2012-08-07 Thread Jonathan Buzzard
On 07/08/12 15:10, steve wrote: On 04/08/12 22:06, NdK wrote: Il 04/08/2012 21:13, steve ha scritto: Uh? wide links seems a bad idea to me... At least from a security perspective. Why a single home directory? We have a single NFS share containing folders for the two domains and inside those

Re: [Samba] Best way to add samba4 to existing domain

2012-08-07 Thread Caleb O'Connell
I followed this link http://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC which was very helpful. I was leaving a few things out that might be helpful to others. My steps were: -build Samba4 but don't provision. -I added the fully qualified domain names of all the other server

Re: [Samba] winbind: uid range is ignored

2012-08-07 Thread steve
On 07/08/12 16:15, Jonathan Buzzard wrote: On 07/08/12 15:10, steve wrote: On 04/08/12 22:06, NdK wrote: Il 04/08/2012 21:13, steve ha scritto: Uh? wide links seems a bad idea to me... At least from a security perspective. Why a single home directory? We have a single NFS share containing

[Samba] Samba User authentication from external LDAP server

2012-08-07 Thread RAKESH PRITMANI
I need to authenticate samba users from external LDAP server, tried a few options but when I change LDAP password, the samba password does not change. Is it possible to do away with Samba password and only use LDAP password Rakesh -- To unsubscribe from this list go to the following URL and read

Re: [Samba] Samba User authentication from external LDAP server

2012-08-07 Thread Gaiseric Vandal
You need to configure smb.conf with either unix password sync (along with passwd chat and passwd program) or with pam password change I use the unix password sync option- it passes the new password value to a shell script which then calls an ldap server command to change the password.

[Samba] smbldap-tools 0.9.9 released

2012-08-07 Thread SATOH Fumiyasu
Hi, I've released smbldap-tools 0.9.9: http://download.gna.org/smbldap-tools/ChangeLog http://download.gna.org/smbldap-tools/sources/?C=MO=D http://download.gna.org/smbldap-tools/packages/?C=MO=D Changes: 2012-08-07 fumiyas at OSS Technology Corp., Japan * smbldap_tools.pm:

Re: [Samba] samber server in openvz container - venet oder veth0?

2012-08-07 Thread Johannes Truschnigg
Hello again, On Tue, Aug 07, 2012 at 02:28:24PM +0200, Birgit Berger (UV Wien) wrote: thank you Johannes. no, I don't really need WINS but it was the only way I could join clients to the domain so far. so I activated it. DNS should be available and working too. /etc/nsswitch.conf looks like

Re: [Samba] Packet Size 'Tuning'

2012-08-07 Thread Andrew Mark
Thanks for your suggestion of WireShark. I'm hesitant to adjust the MTU of PPP0 too much as I'll have to ifdown/ifup the ppp0 interface and this is a live environment. Also, data packets travelling not on port 137-139 or 445 do not emit the displayed error. I will implement WireShark and

[Samba] SMB+LDAP

2012-08-07 Thread Frans Lanting - IT Admin
Hi Folks, A couple of questions about making SMB (3 or 4) authenticate to an external (anonymous) LDAP server: 1) A typical LDAP user record is below. Is there anything lacking in this record that would prevent Samba from authenticating against our LDAP server? Note the sambaSID is as is,

[Samba] Making Happy Users ... I need to understand...

2012-08-07 Thread Marco Ciampa
Hello, I'm posting here because I'm in a need to understand. Sorry for my bad english. I know that I could figure out how to make it work with a trial and error method but I do want to know how it works and not to do a là Windows... I work in a high school. Debian GNU/Linux 5.0 Samba 3.2.5 +

Re: [Samba] winbind: uid range is ignored

2012-08-07 Thread Jonathan Buzzard
steve wrote: On 07/08/12 16:15, Jonathan Buzzard wrote: On 07/08/12 15:10, steve wrote: On 04/08/12 22:06, NdK wrote: Il 04/08/2012 21:13, steve ha scritto: Uh? wide links seems a bad idea to me... At least from a security perspective. Why a single home directory? We have a single NFS

Re: [Samba] SMB+LDAP

2012-08-07 Thread Gaiseric Vandal
I have a Sun (Oracle) Directory Server directory server backend. I also use it for unix level authentication. Are you configuring samba as a domain controller or standalone server? I have uid and uidNumber attributes- you want to make sure that the samba account maps to a unix account

Re: [Samba] SMB+LDAP

2012-08-07 Thread Gaiseric Vandal
You also need sambaAccountFlags: [UX] for user account and sambaAccountFlags: [W] for machine accounts. On 08/07/12 17:37, Frans Lanting - IT Admin wrote: Hi Folks, A couple of questions about making SMB (3 or 4) authenticate to an external (anonymous) LDAP server: 1) A typical

Re: [Samba] SMB+LDAP

2012-08-07 Thread Andrew Bartlett
On Tue, 2012-08-07 at 14:37 -0700, Frans Lanting - IT Admin wrote: Hi Folks, A couple of questions about making SMB (3 or 4) authenticate to an external (anonymous) LDAP server: Note we have read-only access to our LDAP server, though a record could be created for us if absolutely needed.

[Samba] with streams_xattr enabled, ads are written correctly but not retrieved

2012-08-07 Thread Puneet Arora
Hello, I'm running Samba 3.6.6-1 on my x64 Arch Linux installation. I recently decided to have my samba share support NTFS's Alternate Data Streams by using streams_xattr or streams_depot. With streams_xattr I discovered that if I copy a file having an ADS from a win7 box, on the linux console, I

Re: [Samba] Samba Domain member server - using domain part within authentication

2012-08-07 Thread Michal
Hello Daniel, I understand the role of domain member server. But I have not understood why I have needed to type also domain name prefix during authentication - and this was changed in some of previous relases of samba - currently this needs to be explicitly defined that you want to map any

[SCM] Samba Shared Repository - branch master updated

2012-08-07 Thread Andrew Bartlett
The branch, master has been updated via f06c216 s3-pysmbd: Try opening as a file, then as a directory via e571d5c s3-pysmbd: Use talloc_zero() via e658421 s3-passdb: Simplify idmap wrapper in pdb_samba4 via 227d490 s3-pysmbd: Add talloc_stackframe() to

[SCM] Samba Shared Repository - branch master updated

2012-08-07 Thread Andrew Bartlett
The branch, master has been updated via 33705f4 s4-scripting: Remove unused variables from ntacl tests via 4aca56c s4-smbd: Check for failure of irpc_add_name from f06c216 s3-pysmbd: Try opening as a file, then as a directory

[SCM] Samba Shared Repository - branch master updated

2012-08-07 Thread Stefan Metzmacher
The branch, master has been updated via e7bf8e7 s3:smb2_server: do one central as_root check if the operation requires it via eec941e s3:smb2_server: do one central tcon check if the operation requires it via 59b9dfa s3:smb2_server: do one central session check if the

[SCM] Samba Shared Repository - branch master updated

2012-08-07 Thread Björn Jacke
The branch, master has been updated via 9b7b736 media_harmony VFS module: Add and build by default. from e7bf8e7 s3:smb2_server: do one central as_root check if the operation requires it http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2012-08-07 Thread Andrew Bartlett
The branch, master has been updated via d825adf s3-param: Remove never-reached condition for popts == NULL via 31d1fde s3-param: Remove never-reached condition for opt_list == NULL via d65bded source3/loadparm.c: Move string_set/string_free inside. via 3bb65aa

[SCM] Samba Shared Repository - branch master updated

2012-08-07 Thread Stefan Metzmacher
The branch, master has been updated via c301691 s3:smb2_server: fix SMB2 signing of compound responses via 40f771e s3:smb2_server: there's no need to copy req-out.vector when we just keep the last request via 8d63efe s3:smb2_server: use memmove instead of copying single

[SCM] Samba Shared Repository - branch master updated

2012-08-07 Thread Björn Jacke
The branch, master has been updated via da4057f vfs_media_harmony: fix return of void from c301691 s3:smb2_server: fix SMB2 signing of compound responses http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2012-08-07 Thread Björn Jacke
The branch, master has been updated via c2dee12 vfs_dirsort: Remove unnecessary return; statement via 375ba1b vfs_afsacl.c: Remove some unnecessary return; statements via ebc92d0 vfs_full_audit: Remove some unnecessary return; statements via dab8fe5 vfs_time_audit:

[SCM] Samba Shared Repository - branch master updated

2012-08-07 Thread Jeremy Allison
The branch, master has been updated via 64c0367 s3: Fix a crash in reply_lockingX_error from c2dee12 vfs_dirsort: Remove unnecessary return; statement http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log -

[SCM] Samba Shared Repository - branch master updated

2012-08-07 Thread Stefan Metzmacher
The branch, master has been updated via 528d3fe libcli/smb: do not set SMB2_TF_MSG_SIZE in the caller via 143fb84 libcli/smb: smb2_signing_[en|de]crypt_pdu() check and set SMB2_TF_MSG_SIZE via 6bfdca4 s3:smb2_sesssetup: remove unused code in