Re: [Samba] Can someone explain SMB passwords?

2013-07-22 Thread Volker Lendecke
On Sun, Jul 21, 2013 at 11:41:17AM -0700, Paul D. DeRocco wrote: (This is an embedded box, so, short of taking a screwdriver and opening the unit, there is no other access besides this share.) Thanks for taking the time to try to explain this. The fog is starting to lift a little. I

Re: [Samba] Can someone explain SMB passwords?

2013-07-22 Thread Paul D. DeRocco
From: Volker Lendecke [mailto:volker.lende...@sernet.de] force user happens after any user authentication. Samba uses the client provided username to find the entry in the smbpasswd file. After that succeeded, when connecting to the share, it will switch back to root for accessing files.

Re: [Samba] Can someone explain SMB passwords?

2013-07-22 Thread Volker Lendecke
On Mon, Jul 22, 2013 at 01:07:34AM -0700, Paul D. DeRocco wrote: From: Volker Lendecke [mailto:volker.lende...@sernet.de] force user happens after any user authentication. Samba uses the client provided username to find the entry in the smbpasswd file. After that succeeded, when

Re: [Samba] Can someone explain SMB passwords?

2013-07-22 Thread Paul D. DeRocco
From: Volker Lendecke [mailto:volker.lende...@sernet.de] There is also the username map parameter, using which you can for example say username map = /etc/samba/usermap and then open a file named /etc/samba/username with a single line containing root = * That looks like just the

Re: [Samba] Can someone explain SMB passwords?

2013-07-22 Thread Volker Lendecke
On Mon, Jul 22, 2013 at 01:24:52AM -0700, Paul D. DeRocco wrote: From: Volker Lendecke [mailto:volker.lende...@sernet.de] There is also the username map parameter, using which you can for example say username map = /etc/samba/usermap and then open a file named

[Samba] Debian 7.1 net user add etc returns exit code 255

2013-07-22 Thread Scott Edwards
I have a pristine Debian 7.1 system running Samba 3.6.6. root@tv:/etc/samba# apt-cache policy samba samba: Installed: 2:3.6.6-6 Candidate: 2:3.6.6-6 Version table: *** 2:3.6.6-6 0 500 http://ftp.debian.org/debian/ wheezy/main amd64 Packages 100 /var/lib/dpkg/status Between

Re: [Samba] Can someone explain SMB passwords?

2013-07-22 Thread Helmut Hullen
Hallo, Volker, Du meintest am 22.07.13: So is there ANY way to provide access to a share, with only a password, not caring about a username? Or must I pick a name (e.g., root) and tell all clients to log in under that username? If I do the latter, and root isn't listed in smbpasswd, will it

Re: [Samba] need soms tips for adding samba4 to windows 2008R2 domain

2013-07-22 Thread L . P . H . van Belle
Hai, Base on below, i want to use the sernet samba4 packages. Should i install : sernet-samba-ad or sernet-samba-winbind The server is joining a windows 2008 R2 domain, and the zarafaschema wil be applied. 2) add samba4 to the windows domain dc as secondairy DC. ( this

[Samba] samba 3.6.16 and kinit

2013-07-22 Thread Eugene M. Zheganin
Hi. When I'm trying to join a machine to a domain via ADS I get kerberos_kinit_password d...@norma.com failed: Looping detected inside krb5_get_in_tkt. In the same time plain kinit d...@norma.com from a console gives me a ticket without errors. Is this a bug (so I should report it) or can this

Re: [Samba] Can someone explain SMB passwords?

2013-07-22 Thread Volker Lendecke
On Mon, Jul 22, 2013 at 11:12:00AM +0200, Helmut Hullen wrote: Hallo, Volker, Du meintest am 22.07.13: So is there ANY way to provide access to a share, with only a password, not caring about a username? Or must I pick a name (e.g., root) and tell all clients to log in under that

[Samba] AIX, Samba and ADS issue

2013-07-22 Thread Jim Thompson
I’m trying to get an AIX + samba + ADS system working properly. The samba server is a domain member and I can use the wbinfo –u and wbinfo –g commands with no problem. We’re running pware64 version 3.5.11 on AIX 6.1. I need to know if as a group member of the ADS, do I still need to do a net

[Samba] Winbind troubles

2013-07-22 Thread Matthew Daubenspeck
I've rolled 2 virtual servers running Ubuntu 12.04 LTS and have installed the SerNet packages. SRV1 has the AD setup and SRV2 is a member server. I've followed the wiki for both servers to the letter, and winbind still refuses to grab info on the member server. I rolled the provision with

Re: [Samba] Winbind troubles

2013-07-22 Thread Rowland Penny
Have you tried 'getent passwd username' Rowland On 22 July 2013 19:56, Matthew Daubenspeck m...@oddprocess.org wrote: I've rolled 2 virtual servers running Ubuntu 12.04 LTS and have installed the SerNet packages. SRV1 has the AD setup and SRV2 is a member server. I've followed the wiki

Re: [Samba] Winbind troubles

2013-07-22 Thread Matthew Daubenspeck
On Mon, Jul 22, 2013 at 08:41:09PM +0100, Rowland Penny wrote: Have you tried 'getent passwd username' Rowland root@srv2:~# getent passwd Administrator root@srv2:~# getent passwd user1 root@srv2:~# getent passwd user2 root@srv2:~# getent passwd user3 No results. They are all there

Re: [Samba] Winbind troubles

2013-07-22 Thread Rowland Penny
/etc/nsswitch.conf setup correctly? On 22 July 2013 20:52, Matthew Daubenspeck m...@oddprocess.org wrote: On Mon, Jul 22, 2013 at 08:41:09PM +0100, Rowland Penny wrote: Have you tried 'getent passwd username' Rowland root@srv2:~# getent passwd Administrator root@srv2:~# getent

Re: [Samba] Winbind troubles

2013-07-22 Thread steve
On Mon, 2013-07-22 at 15:52 -0400, Matthew Daubenspeck wrote: On Mon, Jul 22, 2013 at 08:41:09PM +0100, Rowland Penny wrote: Have you tried 'getent passwd username' Rowland root@srv2:~# getent passwd Administrator root@srv2:~# getent passwd user1 root@srv2:~# getent passwd user2

[Samba] Errors in parse_share_modes Testing CTDB 2.3 and Samba 4.0.7

2013-07-22 Thread John P Janosik
I'm working on building a CTDB/Samba cluster on AIX 7.1 with the latest levels to replace an older one running CTDB 1.0.113 and Samba 3.6.1. I have the new servers up and running and they seem to work, but I'm worried about some messages in the logs. I run with log level 1 on the servers so

Re: [Samba] Winbind troubles

2013-07-22 Thread Matthew Daubenspeck
On Mon, Jul 22, 2013 at 10:27:36PM +0200, steve wrote: Can you post smb.conf on SRV2? Steve Certainly: [global] workgroup = NWLTECH security = ADS realm = NWLTECH.ORG encrypt passwords = yes idmap config *:backend = tdb idmap config *:range = 70001-8 idmap config

Re: [Samba] Winbind troubles

2013-07-22 Thread Matthew Daubenspeck
On Mon, Jul 22, 2013 at 08:59:47PM +0100, Rowland Penny wrote: /etc/nsswitch.conf setup correctly? passwd: compat winbind group: compat winbind shadow: compat snipped -- To unsubscribe from this list go to the following URL and read the instructions:

[Samba] Samba4 join new DC: No RID Set DN - Failed to add RID Set

2013-07-22 Thread Jonathan Hunter
Hi, I have a Samba4 domain consisting of two 4.0.6 Samba servers, in two different AD sites. I am trying to join a new 4.0.7 Samba server as a DC. Previously, I had had some issues caused by hardware failure of one of the DCs; I have learnt my lesson about checking backups properly, as it took

Re: [Samba] Winbind troubles

2013-07-22 Thread Rowland Penny
OK, that seems like it should work, I had the winbind ad backend working, but found it difficult to setup so jumped ship to sssd The idmap setup I used was: idmap config *:backend = tdb idmap config *:range = 1100-2000 idmap config DOMAIN:backend = ad idmap config

Re: [Samba] Winbind troubles

2013-07-22 Thread steve
On Mon, 2013-07-22 at 16:46 -0400, Matthew Daubenspeck wrote: On Mon, Jul 22, 2013 at 10:27:36PM +0200, steve wrote: Can you post smb.conf on SRV2? Steve Certainly: [global] workgroup = NWLTECH security = ADS realm = NWLTECH.ORG encrypt passwords = yes idmap

Re: [Samba] Winbind troubles

2013-07-22 Thread Matthew Daubenspeck
On Mon, Jul 22, 2013 at 10:15:10PM +0100, Rowland Penny wrote: OK, that seems like it should work, I had the winbind ad backend working, but found it difficult to setup so jumped ship to sssd The idmap setup I used was: idmap config *:backend = tdb idmap config

Re: [Samba] Winbind troubles

2013-07-22 Thread steve
On Mon, 2013-07-22 at 17:29 -0400, Matthew Daubenspeck wrote: On Mon, Jul 22, 2013 at 10:15:10PM +0100, Rowland Penny wrote: OK, that seems like it should work, I had the winbind ad backend working, but found it difficult to setup so jumped ship to sssd The idmap setup I used was:

Re: [Samba] Winbind troubles

2013-07-22 Thread Matthew Daubenspeck
On Mon, Jul 22, 2013 at 11:19:26PM +0200, steve wrote: Similar to what I had when I used winbind, except the * range was lower than the range we wanted. Try something like 3000-3500 and 3501-4 perhaps? Like this? idmap config *:backend = tdb idmap config *:range = 3000-3500 idmap

Re: [Samba] Winbind troubles

2013-07-22 Thread Rowland Penny
If you want my opinion, this is just another example of why not to use winbind, if you can wait until tomorrow , I will send you an howto on sssd on Ubuntu 12.04 Rowland On Jul 22, 2013 10:36 PM, steve st...@steve-ss.com wrote: On Mon, 2013-07-22 at 17:29 -0400, Matthew Daubenspeck wrote: On

Re: [Samba] Winbind troubles

2013-07-22 Thread Matthew Daubenspeck
On Mon, Jul 22, 2013 at 11:36:26PM +0200, steve wrote: Amazing;) Amazing all right. I have a headache :) You'd lose control over uidNumber, gidNumber and you wouldn't be able to specify your own home directories and login shells. It's also a nightmare if you add a second DC. So if I plan on

Re: [Samba] Winbind troubles

2013-07-22 Thread Matthew Daubenspeck
On Mon, Jul 22, 2013 at 10:45:28PM +0100, Rowland Penny wrote: If you want my opinion, this is just another example of why not to use winbind, if you can wait until tomorrow , I will send you an howto on sssd on Ubuntu 12.04 Something like this?

autobuild: intermittent test failure detected

2013-07-22 Thread autobuild
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2013-07-22-0854/flakey.log The samba3 build logs are available here:

[SCM] Samba Shared Repository - branch master updated

2013-07-22 Thread Andreas Schneider
The branch, master has been updated via b505111 s3-waf: Rename regedit to samba-regedit. from 44429f9 s3-printing: avoid KRB5CCNAME overwrite in printer publishing (Bug #7444). http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2013-07-22 Thread Jeremy Allison
The branch, master has been updated via fe06e1b smbd: Fix CID 1035536 Uninitialized pointer read via d7da8da smbd: Fix CID 1035537 Uninitialized pointer read via a1e0acc smbd: Fix CID 1035538 Uninitialized pointer read via a6a0d23 tdb: Fix CID 1034959 Uninitialized