[Samba] windbindd / AD / machine password

2013-03-21 Thread Michael Arndt
Hello *, would samba / winbindd try to refresh the machine password in an AD / Kerberos Environment ? Details / Versions pls see below. thx Micha Versions: SLES 11 SP1: samba-client-3.4.3-1.17.2 samba-winbind-3.2.7-11.6 samba-3.4.3-1.17.2 smb.conf:

Re: [Samba] windbindd / AD / machine password

2013-03-21 Thread Volker Lendecke
On Thu, Mar 21, 2013 at 09:04:10AM +0100, Michael Arndt wrote: would samba / winbindd try to refresh the machine password in an AD / Kerberos Environment ? Yes. See the machine password timeout parameter. With best regards, Volker Lendecke -- SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen

Re: [Samba] windbindd / AD / DNS Updates

2013-03-21 Thread Michael Arndt
Hello * Volker, thank you for your fast help / answer :-) !!! different question: is there a (nonzero possibility, that an vendor provided samba ( SLES11 SP1 ) could try to trigger DNS Updates, in spite of the server role cited below: testparm Load smb config files from /etc/samba//smb.conf

Re: [Samba] Making users local administrators

2013-03-21 Thread L . P . H . van Belle
DONT DO IT !! This is Administrators 1ste rule !! NEVER, but then NEVER giver users Administrator/PowerUser rights. Do not give the users ability to install software, wrong wrong... This is you trojans/Virussus etc come in your computer. and if you do give these rights, Do not install

Re: [Samba] windbindd / AD / DNS Updates

2013-03-21 Thread Volker Lendecke
On Thu, Mar 21, 2013 at 10:18:01AM +0100, Michael Arndt wrote: Hello * Volker, thank you for your fast help / answer :-) !!! different question: is there a (nonzero possibility, that an vendor provided samba ( SLES11 SP1 ) could try to trigger DNS Updates, in spite of the server role

Re: [Samba] Installation Samba on RHEL6.4

2013-03-21 Thread Björn JACKE
Hi Johann, On 2013-03-06 at 11:16 + Johann Fock sent off: Error: krb5-libs conflicts with libsmbclient0-3.5.21-44.el6.x86_64 You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest even if already ansered in

Re: [Samba] Printer drivers

2013-03-21 Thread Johan Hendriks
Hi Fabian, Yes - here is (excerpt from) my setup. You also need to set permissions on shares so printer admins can write driver files and everybody can print. I think you need arcitecture foldres under print$ (W32X86 etc) and set SePrintOperatorPrivilege for users to set up printers. I got it

Re: [Samba] Making users local administrators

2013-03-21 Thread Gerry Reno
On 03/21/2013 05:29 AM, L.P.H. van Belle wrote: DONT DO IT !! This is Administrators 1ste rule !! NEVER, but then NEVER giver users Administrator/PowerUser rights. Do not give the users ability to install software, wrong wrong... This is you trojans/Virussus etc come in your computer.

Re: [Samba] Installation Samba on RHEL6.4

2013-03-21 Thread Nico Kadel-Garcia
On Thu, Mar 21, 2013 at 6:47 AM, Björn JACKE b...@sernet.de wrote: Hi Johann, On 2013-03-06 at 11:16 + Johann Fock sent off: Error: krb5-libs conflicts with libsmbclient0-3.5.21-44.el6.x86_64 You could try using --skip-broken to work around the problem You could try running: rpm -Va

[Samba] network neighborhood

2013-03-21 Thread felix
Mensaje original Asunto: network neighborhood De: fe...@epepm.cupet.cu Fecha: Mie, 20 de Marzo de 2013, 8:07 am Para: samba@lists.samba.org -- Hello: I would

Re: [Samba] Making users local administrators

2013-03-21 Thread Terry Austin
On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: DONT DO IT !! This is Administrators 1ste rule !! NEVER, but then NEVER giver users Administrator/PowerUser rights. I have no choice. There's too much stuff out of my control that requires the daily user have admin rights locally. Plus,

Re: [Samba] Making users local administrators

2013-03-21 Thread Terry Austin
On 21 Mar 2013 at 8:14, Gerry Reno wrote: On 03/21/2013 05:29 AM, L.P.H. van Belle wrote: DONT DO IT !! This is Administrators 1ste rule !! NEVER, but then NEVER giver users Administrator/PowerUser rights. Do not give the users ability to install software, wrong wrong...

Re: [Samba] Making users local administrators

2013-03-21 Thread Michael Leone
On Thu, Mar 21, 2013 at 11:24 AM, Terry Austin te...@crownhardware.com wrote: On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: DONT DO IT !! This is Administrators 1ste rule !! NEVER, but then NEVER giver users Administrator/PowerUser rights. I have no choice. There's too much stuff out of

Re: [Samba] Making users local administrators

2013-03-21 Thread Terry Austin
On 21 Mar 2013 at 11:28, Novosielski, Ryan wrote: Well, if you must allow them to have this access, I would make it through a separate account. There is no good reason to have users logging in daily as Administrator anymore. There's too much idiocy in the design of our

Re: [Samba] Making users local administrators

2013-03-21 Thread Gregory Sloop
ML On Thu, Mar 21, 2013 at 11:24 AM, Terry Austin te...@crownhardware.com wrote: On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: DONT DO IT !! This is Administrators 1ste rule !! NEVER, but then NEVER giver users Administrator/PowerUser rights. I have no choice. There's too much stuff

Re: [Samba] Making users local administrators

2013-03-21 Thread Terry Austin
On 21 Mar 2013 at 11:30, Michael Leone wrote: On Thu, Mar 21, 2013 at 11:24 AM, Terry Austin te...@crownhardware.com wrote: On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: DONT DO IT !! This is Administrators 1ste rule !! NEVER, but then NEVER giver users Administrator/PowerUser

Re: [Samba] Making users local administrators

2013-03-21 Thread Novosielski, Ryan
Well, if you must allow them to have this access, I would make it through a separate account. There is no good reason to have users logging in daily as Administrator anymore. Trouble with mailing lists: you will get an opinion on what you're doing, want it or not. - Original Message

Re: [Samba] Making users local administrators

2013-03-21 Thread Robert Schetterer
Am 21.03.2013 16:39, schrieb Terry Austin: There is no good reason to have users logging in daily as Administrator anymore however its not a good idea, its wide practise that road warrior users are local admins on their laptops, what must not mean ,they are working as such ever, but have the

Re: [Samba] Making users local administrators

2013-03-21 Thread Michael Leone
On Thu, Mar 21, 2013 at 11:43 AM, Gregory Sloop gr...@sloop.net wrote: ML Well, it's a lot more work, but you could use the Windows utilities ML FILEMON and REGMON to monitor what file and registry access your ML applications require on the local machine, and then grant the local ML user

Re: [Samba] Making users local administrators

2013-03-21 Thread Novosielski, Ryan
And thank you for doing so. I myself was not aware (not one who typically does that level of work on Windows). Sorry for top-posting. That is all Blackberry seems able to do. - Original Message - From: Michael Leone [mailto:tur...@mike-leone.com] Sent: Thursday, March 21, 2013 11:50

Re: [Samba] Making users local administrators

2013-03-21 Thread Terry Austin
On 21 Mar 2013 at 8:43, Gregory Sloop wrote: ML On Thu, Mar 21, 2013 at 11:24 AM, Terry Austin te...@crownhardware.com wrote: On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: DONT DO IT !! This is Administrators 1ste rule !! NEVER, but then NEVER giver users

Re: [Samba] Making users local administrators

2013-03-21 Thread Terry Austin
On 21 Mar 2013 at 11:50, Michael Leone wrote: On Thu, Mar 21, 2013 at 11:43 AM, Gregory Sloop gr...@sloop.net wrote: ML Well, it's a lot more work, but you could use the Windows utilities ML FILEMON and REGMON to monitor what file and registry access your ML applications require on the

Re: [Samba] samba-tool classicupgrade (from v3 to v4) aborts with Unable to get id for sid

2013-03-21 Thread Max Olivas
On 3/19/2013 at 8:28 AM, in message 2119021439.23770729.1363703293922.javamail.r...@infinityhealthcare.com, Jon Detert jdet...@infinityhealthcare.com wrote: I'm trying to upgrade from samba3 - 4. I ran this command: WORKDIR=/usr/local/mobius /usr/local/samba/bin/samba-tool domain

[Samba] Ubuntu update broke something in Samba

2013-03-21 Thread Terry Austin
Ubuntu server 12.04 LTS Last updates were done (I believe) via apt-get on 3-6-13 Having just completed a full backup, I ran apt-get update and apt-get upgrade. There were several updates. I did not particularly note what they were. Samba version 4.1.0pre1-GIT-8ac431a After that finished, I did

Re: [Samba] Clients no longer updating DNS unable to delete MX records

2013-03-21 Thread Thomas Simmons
On Wed, Mar 20, 2013 at 3:29 PM, Thomas Simmons twsn...@gmail.com wrote: On Wed, Mar 20, 2013 at 9:05 AM, Thomas Simmons twsn...@gmail.com wrote: Hello, After noticing some odd behavior on my domain, I realized that many of my DNS records are incorrect and that clients are no longer

[Samba] DCERPC_FAULT_ACCESS_DENIED what is wrong?

2013-03-21 Thread Ricardo Carlini Sperandio
Hello, what is the cause of this error? [2013/03/21 15:22:41, 1] rpc_client/cli_pipe.c:949(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_ACCESS_DENIED received from host xxx.yyy.zzz! Thanks, Ricardo -- To unsubscribe from this list go to the

Re: [Samba] DNS Replication Between Samba4 DCs

2013-03-21 Thread Kristofer
Since the internal DNS server became available, I switched to that and it is replicating between DC's just fine. Only issue I see with it is that it does not return multiple A records in a round robin fashion. - Original Message - From: Andrew Hamilton ahamil...@facilityone.com To:

Re: [Samba] multiple dc's

2013-03-21 Thread Kristofer
Andrew, I thought RODC still had some blockers in development? Or is it production ready now? I am referring to http://wiki.samba.org/index.php/Samba4/DRS_TODO_List#Support_RODC where it still looks like its in development. - Original Message - From: Andrew Bartlett

[SCM] Samba Shared Repository - branch v3-6-test updated

2013-03-21 Thread Karolin Seeger
The branch, v3-6-test has been updated via 3bc39aa Fix bug #9724 - is_encrypted_packet() function incorrectly used inside server. from fb7971c WHATSNEW: Start release notes for Samba 3.6.14. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log

[SCM] Samba Shared Repository - branch v3-6-test updated

2013-03-21 Thread Karolin Seeger
The branch, v3-6-test has been updated via 97bb3cc torture: Add ntprinting latin1 test. via c28da2d s3-net: Add encoding=CP to 'net printing dump'. via 3877c18 s3-net: Add encoding=CP to 'net printing migrate'. via fa6a654 ndr: Pass down string_flags in

[SCM] Samba Shared Repository - branch v4-0-test updated

2013-03-21 Thread Karolin Seeger
The branch, v4-0-test has been updated via 9ec44d4 Fix bug #9724 - is_encrypted_packet() function incorrectly used inside server. via a654c08 torture: Add ntprinting latin1 test. via b534ead s3-net: Add encoding=CP to 'net printing dump'. via 70dcc78 s3-net: Add

[SCM] Samba Shared Repository - branch master updated

2013-03-21 Thread Christian Ambach
The branch, master has been updated via 1f139ae s3:waf fix build on AIX from 599a699 s4:torture: let raw.read accept larger reads than 0x1 http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit