[Samba] Winbind and local groups with nss

2012-09-04 Thread Eric
Hi all, First of all, sorry for my english. I don't speak well english (of course I'm french! ;-) ) but I will try to do my best to explain you my problem. I have a CentOS 6.3 system running with samba 3.5.10 against an AD 2008. My goal is to build a vsftpd server authenticating with users in m

Re: [Samba] Samba upgrade problem with ADS

2012-09-04 Thread Andrew Bartlett
On Tue, 2012-09-04 at 22:10 -0400, Nitin Thakur wrote: > hi gurus > > My samba upgrade woes: - > > I have to run 2 instances of samba one for dev and one for UAT. both the > instances are giving me hard time after the upgrade. > > One instance keeps giving me following error: - > > connect_t

[Samba] Samba upgrade problem with ADS

2012-09-04 Thread Nitin Thakur
hi gurus My samba upgrade woes: - I have to run 2 instances of samba one for dev and one for UAT. both the instances are giving me hard time after the upgrade. One instance keeps giving me following error: - connect_to_domain_password_server: unable to open the domain client session to mac

Re: [Samba] Hide empty Samba shares?

2012-09-04 Thread Stan Hoeppner
On 9/1/2012 2:52 PM, Sam Bulka wrote: > When a partition mounted to a shared by Samba folder is dismounted, Mount/unmount is performed on filesystems, not partitions. > Samba keeps sharing that empty folder. It creates a security hazard, > since files can still be saved to that empty folder, and

Re: [Samba] Hide empty Samba shares?

2012-09-04 Thread Jeremy Allison
On Sat, Sep 01, 2012 at 03:52:38PM -0400, Sam Bulka wrote: > When a partition mounted to a shared by Samba folder is dismounted, > Samba keeps sharing that empty folder. It creates a security hazard, > since files can still be saved to that empty folder, and overwritten > next time (lost) when the

Re: [Samba] samba 3.0.14a works with ldapsam backend but not 3.5.10-125.el6

2012-09-04 Thread Volker Lendecke
On Tue, Sep 04, 2012 at 03:59:25PM -0400, Qing Chang wrote: > If I understand right, as a STANDALONE server, Samba should only care about > finding and > authenticating againt a matching uid to Windows username on the samba server > (which > uses LDAP), and then using the uid and gid(s) to prov

Re: [Samba] samba 3.0.14a works with ldapsam backend but not 3.5.10-125.el6

2012-09-04 Thread Qing Chang
On 22/08/2012 9:42 AM, Qing Chang wrote: On 21/08/2012 11:59 AM, TAKAHASHI Motonobu wrote: Have you explicitly set the RHEL box's SID same as Solaris box's? You will do this with "get|set localsid" command. they are different. net setlocalsid fails: [root@smb3 samba]# net setlocalsid S-1-5-2

Re: [Samba] Changed PDC IP, all hell broke lose

2012-09-04 Thread jax
Okay, someone else will need to answer on how WINS works, but something else might be going on here. On a windows machine, if you do a ping -a, you'll get ping to resolve your name. I'd check both old and new IPs. Granted, the old won't reply, but you'll see the DNS query go through anyway. W

Re: [Samba] Changed PDC IP, all hell broke lose

2012-09-04 Thread Paul Raines
It is definitely an issue with the WINS server which returns the old IP address # nmblookup -U 172.27.88.81 -R 'MRIRESEARCH#1b' querying MRIRESEARCH on 172.27.88.81 132.183.202.95 MRIRESEARCH<1b> SO it is not automatically picking up the IP change which happened 4 days ago and I have restarte

Re: [Samba] Changed PDC IP, all hell broke lose

2012-09-04 Thread jax
I'm in a similar situation, and have run into your issue once. I work at a hospital, have several freebsd boxes running samba and joined to the Windows-based domain. I am *not* using my samba servers for auth, rather just depending on Active Directory for that. However, there are two things

Re: [Samba] Changed PDC IP, all hell broke lose

2012-09-04 Thread Paul Raines
I have no idea what the WINS server is except that I am sure it running on Windows since they are totally Windows-based organization. So the WINS server is definitely the problem? When I talk to them and mention I am using Samba on Linux they may totally just say "we don't support it" and hang

Re: [Samba] Changed PDC IP, all hell broke lose

2012-09-04 Thread Robert Adkins II
More information is required. What is the WINS server running OS wise? Can you work with the IT Staff in charge of that WINS Server? -- Regards, Robert Adkins > -Original Message- > From: Paul Raines [mailto:rai...@nmr.mgh.harvard.edu] > Sent: Tuesday, September 04, 2012 11:16 AM >

Re: [Samba] Changed PDC IP, all hell broke lose

2012-09-04 Thread Paul Raines
I am not running winbindd on the server. I am using the WINS server of my hospital which I have no control over. I have already tried deleting browse.dat (I do not see the other two files anywhere) to no avail. So my fear is that this is all happening because the WINS server is refusing to rec

Re: [Samba] Changed PDC IP, all hell broke lose

2012-09-04 Thread Robert Adkins II
It's most likely that your server has the old IP Address Cached in the wins.dat, browse.dat, browse.tdb. I recommend the following: Shutdown the windbind, nmbd and smbd services. Back up each of the above mentioned files. Delete the original above named files. Restart your services and then se

[Samba] Changed PDC IP, all hell broke lose

2012-09-04 Thread Paul Raines
I had to move my RedHat 5 box acting as a PDC to a new IP address. It is running samba 3.5.10. After the move, none of my windows or linux samba clients worked anymore. I tried rejoining some to the domain, but would get error Unable to find a suitable server Join to domain 'MRIRESEARCH' is no

[Samba] Is it possible to add user to samba without a system account?

2012-09-04 Thread Li Wang
hi, all I tested this in CentOS 6.4, with samba-common-3.5.10-114.el6.x86_64 samba-winbind-clients-3.5.10-114.el6.x86_64 samba-3.5.10-114.el6.x86_64 samba-swat-3.5.10-114.el6.x86_64 If foxban have a system account, invoking smbpasswd -a foxban works good. However, if foxban2 is not a

Re: [Samba] [samba4] How to use my ldap users in sam.ldb?

2012-09-04 Thread Ced T
Le 04/09/2012 14:36, Andrew Bartlett a écrit : On Tue, 2012-09-04 at 14:16 +0200, Ced T wrote: Yes with this command line //usr/local/samba/bin/samba-tool domain classicupgrade --dbdir=/home/user/samba3/ --use-xattrs=yes --realm=LABO.FR /home/user/user/smb.conf/ (where smb.conf is a copy of m

Re: [Samba] [samba4] How to use my ldap users in sam.ldb?

2012-09-04 Thread Andrew Bartlett
On Tue, 2012-09-04 at 14:16 +0200, Ced T wrote: > Yes with this command line > > //usr/local/samba/bin/samba-tool domain classicupgrade > --dbdir=/home/user/samba3/ --use-xattrs=yes --realm=LABO.FR > /home/user/user/smb.conf/ > > (where smb.conf is a copy of my old samba3 server that use my op

Re: [Samba] [samba4] How to use my ldap users in sam.ldb?

2012-09-04 Thread Ced T
Yes with this command line //usr/local/samba/bin/samba-tool domain classicupgrade --dbdir=/home/user/samba3/ --use-xattrs=yes --realm=LABO.FR /home/user/user/smb.conf/ (where smb.conf is a copy of my old samba3 server that use my openldap database and /home/user/samba3 contains a copy of sa

[Samba] cifs question about home dir sharing.

2012-09-04 Thread L . P . H . van Belle
Hai,   I have a question.   i want to mount my users home dir with cifs   met setup is like this.   PDC /home/users/MYSMBUSERS   now i want on my other server also mount these users.   like this on BDC ( in etc/fstab ) //192.168.249.226/users /home/users cifs credentials=/etc/

Re: [Samba] [samba4] How to use my ldap users in sam.ldb?

2012-09-04 Thread Andrew Bartlett
On Tue, 2012-09-04 at 10:17 +0200, Ced T wrote: > Hi > I successfully compiled samba4 on my ubuntu. > Actually, most our Linux servers are using en openldap base to authenticate. > All the samba 3 servers use this openldap base > > /passdb backend = ldapsam:ldaps://ldap.intra.labo.fr// (in the smb

[Samba] How to delete a domain controller from the active directory?

2012-09-04 Thread X-Dimension
After my migration tests, i have now three domain controllers in my active directory, but only one is online. I've tried to remove the two other domain controllers with the active directory tool from MS RSAT, but it doesn't work. How can i delete the non used domain controllers completely? Thx

[Samba] [samba4] How to use my ldap users in sam.ldb?

2012-09-04 Thread Ced T
Hi I successfully compiled samba4 on my ubuntu. Actually, most our Linux servers are using en openldap base to authenticate. All the samba 3 servers use this openldap base /passdb backend = ldapsam:ldaps://ldap.intra.labo.fr// (in the smb.conf) I tried to migrate the users account of my openldap

Re: [Samba] Getting 8.3 samba short filenames in linux

2012-09-04 Thread Andrew Bartlett
On Sat, 2012-09-01 at 13:07 +0100, Dominic Raferd wrote: > From a windows client it is easy and fast to obtain from a samba share > both the long filenames and the short 8.3 names by using DIR /x. Is > there a way for a Linux client to obtain this same information swiftly > for a large directory