Re: [Samba] time server = yes

2008-02-26 Thread Aaron J. Zirbes
IF "file and print sharing" is enabled on them, you write a batch file that can connect to them all and run regedit to push out refistry changes to all of them. Look at PStools to help you with it, specifically psexec.exe (Microsoft recently bought out SysInternals, who previously published the

Re: [Samba] AD issue....

2008-02-26 Thread Aaron J. Zirbes
I believe you want @"domain users" not "@domain users" (notice the placement of @) -- Aaron Michael Fernández M. wrote: > El lun, 03-12-2007 a las 18:43 +0530, Sadique Puthen escribió: >> Set "winbind use default domain = yes" in smb.conf if you want to change >> ownership of files to ad users

Re: [Samba] HTTP authentication

2007-12-31 Thread Aaron J. Zirbes
Google: ntlm_auth Tero Mäntyvaara wrote: > Hi > > Is it possible to authenticate at WWW page/site by Samba server? > > > Tero Mäntyvaara -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] optimizing samba for 2000 users

2007-12-27 Thread Aaron J. Zirbes
Ankush You may wish to use tdbbackup to check, clean and repair your tdb files in case they are corrupt. You should also make sure that smbd, nmbd, and winbindd have all been restarted (Redhat has been known to separate winbindd from the restart process.) You should also check to make sure any

Re: [Samba] SAMBA ADS integration - windows user account rights

2007-12-18 Thread Aaron J. Zirbes
You may be running into this issue: http://support.microsoft.com/kb/251335 -- Aaron Bert Verhaeghe wrote: > Hi all, > > first of all is it possible to join a Linux machine to AD using a > windows user account that is not a member of the group Domain Admins? > Cause when I do this I get the fol

Re: [Samba] Is Samba PDC + NT4 DOM Trust using NTLMv2 possible?

2007-12-10 Thread Aaron J. Zirbes
I haven't found a solution yet. I think I may post a bug to the bugtrack database. -- Aaron Hans-Wilhelm Heisinger wrote: > Did you come across a solution to this problem? I have the same issue. > > Mit freundlichen Grüßen / With kind regards > Hans > > Aaron J. Zirbe

Re: [Samba] winbind reporting incorrect groups

2007-12-07 Thread Aaron J. Zirbes
Assuming you are using LDAP, you should check to see if there are overlaps in your GID/UID ranges between the LDAP entries and the local /etc/passwd and /etc/group files. This is a complete guess since you didn't include your smb.conf file, nor version of Samba, nor your nsswitch.conf file. Wit

Re: [Samba] Permissions

2007-12-07 Thread Aaron J. Zirbes
Andrea, Microsoft Windows does NOT allow a user to connect to a server using two different credentials at the same time. This means, that if the segretario is connected to SERVER as segretario on the \\server\segretario share, they cannot connect to \\server\economo without completely disconne

[Samba] Is Samba PDC + NT4 DOM Trust using NTLMv2 possible?

2007-12-05 Thread Aaron J. Zirbes
My Question: Is it possible to get 2-way Interdomain Trust relationships working between a Samba domain and an NT4 SP6a domain, while restricting all password hashes to NTLMv2 only? Everything works except the inter-domain trust I'm able to get the NT4 domain to trust the Samba dom

Re: [Samba] AD issue....

2007-12-03 Thread Aaron J. Zirbes
re allow guests usershare max shares usershare owner only usershare path usershare prefix allow list usershare prefix deny list usershare template share Good luck! -- Aaron Michael Fernández M. wrote: > El lun, 03-12-2007 a las 08:52 -0600, Aaron J. Zirbes escribió: >> I believe you

Re: [Samba] Moving Roaming profiles between domains

2007-12-03 Thread Aaron J. Zirbes
Perhaps you didn't retain the same domain SID? This is typically done with: net getlocalsid DOMAINNAME net setdomainsid SID ...could be something else though... -- Aaron Tirant Lo Blanc wrote: > Hello! > > I need to migrate a SAMBA server PDC to another. > > After having installed and config

Re: [Samba] Password Generator

2005-03-15 Thread Aaron J. Zirbes
Lee, Are you suggesting you wish to generate easily crackable passwords for all your users? I would strongly advise against this. How soon do you want your systems broken into? I would suggest you assign fully randomized passwords (mixed-case + numbers and characters), and then set a strict p

Re: [Samba] Firewall piercing - The Specified network name is no longer available.

2005-02-09 Thread Aaron J. Zirbes
JLB wrote: > I've already set up zero-install Web-based telnet, zero-install Web-based > MP3 players... I even concocted a zero-install CygWin workalike and > keep it on my keychain USB drive... now I need a zero-install way to > access my files via Windows machines. And that means SMB. NOT OpenVPN

Re: [Samba] Still no browse list and no help!

2005-02-02 Thread Aaron J. Zirbes
It looks like you have a bit of redundancy in your smb.conf, but other that that, seems OK. I have a question for you: Have you either: a) hard-coded your WINS server IP (samba machine) into your windows clients? b) setup your DHCP options to set your WINS server to your Samba Server's IP addres

[Samba] stumped, security = domain FAILS for NTLMv2 only

2005-02-02 Thread Aaron J. Zirbes
I have a Samba only domain (Samba PDC, Samba Member Servers) where security = domain. Versions are all 3.0.10 compiled with --enable-cups --with-utmp --with-acl-support Backend is tdbsam All smb.confs have the following: ... pdc: security = user members: security = domain ... restrict anonymous =

Re: [Samba] Samba log analysis and report

2005-02-01 Thread Aaron J. Zirbes
Dave, I use the --with-utmp support (if your system supports it). You can then view logon times using `last` I know on my FreeBSD server (PDC) I can save my accounting info, and get monthly summary totals for all my user's usage rates (who's hitting the server the most via the `ac` command) My R

[Samba] NTLMv2 passthrough auth fails on XP

2005-01-28 Thread Aaron J. Zirbes
I have an interesting situation. I'm not sure if Samba doesn't support this, or if I have something setup wrong. All Linux/BSD machines: Samba 3.0.10 Windows XP cannot connect to a Samba Server when the Samba server is a member of a Samba Domain, and authentication is restricted to NTLMv2 _IF_