[Samba] PAM sending wrong username to Winbind (fwd)

2004-12-28 Thread Chew, Darren
p;d=E6EA31C37E&icp=1&.intl=us The above link gave me this hint. Found it while looking for "NOUSER" and PAM. Darren -- Forwarded message -- Date: Tue, 28 Dec 2004 20:38:11 +1100 (EST) From: "Chew, Darren" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED]

[Samba] PAM sending wrong username to Winbind

2004-12-28 Thread Chew, Darren
Hi All, I am unable to authenticate users through pam_winbind. "wbinfo -u", "wbinfo -g", "getent passwd", "getent group", "wbinfo -a DOMAIN\\Administrator%password" all work and suggest that samba and winbind are correctly configured. For some strange reason PAM seems to be sending Winbind "NO

[Samba] Trouble compiling pam_winbind 3.0.8pre1 on Solaris 9

2004-10-08 Thread Chew, Darren
Hi All, I am having trouble compiling Samba 3.0.8pre1 with pam_winbind. I am using the following configure string. ./configure --prefix=/usr/local/samba --exec-prefix=/usr/local/samba --with-libiconv=/usr/local/lib --with-ldap=/opt/csw --with-krb5=/usr/local/krb5 --with-automount --with-pam --w

Re: [Samba] net rpc vampire still not working

2004-01-03 Thread Chew, Darren
Hi Beast, Thanks for your suggestions. You ripper. Now all machine accounts, groups, and users migrate across and the 'net rpc vampire' appears to be working now. I made some changes to smb.conf: [global] ... add machine script = /sbin/smbldap-useradd.pl -w -d /dev/null -g smbnobody -c "Machin

[Samba] Re: net rpc vampire still not working

2004-01-03 Thread Chew, Darren
Hi Craig, Thanks for your suggestions. I substituted the ldap suffix with dc=samba,dc=org just before I posted it. I guess its my little attempt at keeping confidential site specific config. I have chosen LDAP because from what I understand it appears to be the most scalable of account informa

[Samba] net rpc vampire still not working

2004-01-02 Thread Chew, Darren
Hi Craig, smbd & nmbd not running and domain master = no. I have included the rest of the smb.conf for troubleshooting. Joined domain ok. 'net rpc testjoin' returns OK. Still receive same errors when migrating users. Groups migrate ok. Can't call method "get_value" on an undefined value at /o

[Samba] SOLVED: Must a Samba PDC use LDAP for nss?

2004-01-01 Thread Chew, Darren
Hi All, It seems like Samba 3 does require the PDC to use LDAP for nss when using ldapsam. I reconfigured Solaris 9 to use nss_ldap and 'getent group' now shows the posixGroups created by the 'net rpc vampire' operation. I then cleaned up the LDAP database and ran vampire again. Each group is

[Samba] Must a Samba PDC use LDAP for nss?

2004-01-01 Thread Chew, Darren
Hi All, I am having trouble doing a 'net rpc vampire' because everytime a group is added it is added with gid 1 and so the vampire process fails to make group mappings for all subsequent groups after the first one (Domain Admins). This has repercussions later down the track as I am unable

[Samba] gidNumber 10000 for all groups after vampire

2003-12-30 Thread Chew, Darren
Hi All, setup: Solaris 9/Samba 3.0.1/smbldap-tools 0.8.2 If I run 'net rpc vampire', smbldap-groupadd.pl will run and for the first group Domain Admins and will say 'gave 0'. But for all subsequent groups the samba attributes are missing and the gidNumber is 1 and will say 'gave 7'. LDIF:

[Samba] sambaSamAccount versus SambaSAMAccount

2003-12-30 Thread Chew, Darren
Hi All, The smbldap-tools in latest Samba tarball 3.0.1 use SambaSAMAccount rather than SambaSamAccount as per the samba.schema file. Attached are four patches to fix this. Darren --- smbldap-useradd.pl.orig Tue Dec 30 22:34:08 2003 +++ smbldap-useradd.pl Tue Dec 30 22:38:19 2003 @@ -208,7

[Samba] 3.0.1/Solaris 9 - errors running vampire

2003-12-30 Thread Chew, Darren
Hi All, My smbldap-useradd.pl now accepts dots in the username. Thank you Jérôme Tournier. But now when I run 'net rpc vampire' I get the following errors. [2003/12/30 22:11:44, 1] utils/net_rpc_samsync.c:fetch_account_info(445) fetch_account: Running the command `/opt/local/samba/sbin/smbl

[Samba] 3.0.1/Solaris 9 - smbldap & dots in usernames

2003-12-30 Thread Chew, Darren
Hi All, Is it possible to vampire across dots in usernames? I got over 1000 accounts with dots in them eg. . The smbldap-tools (version 0.8.2) don't seem to like adding users and groups with dots in them. Any help much appreciated. Darren -- To unsubscribe from this list go to the following

Re: [Samba] SAMBA and FreeRadius

2003-12-03 Thread Chew, Darren
Hi Bob, Yes. FreeRadius can be configured to use PAM for authentication. PAM can be configured to use pam_winbind which in turn uses Samba. This is possible. Regards, Darren On Wed, 3 Dec 2003 [EMAIL PROTECTED] wrote: > I need to use CHAP on my NAS. Is it possible to authenticate FreeRadius

[Samba] patch for samba.server.master

2003-12-02 Thread Chew, Darren
[EMAIL PROTECTED] # diff -u samba.server.master.backup samba.server.master --- samba.server.master.backup Wed Dec 3 17:23:52 2003 +++ samba.server.master Wed Dec 3 17:27:58 2003 @@ -37,7 +37,7 @@ 'restart') killproc nmbd killproc smbd - BASE=/usr/local/samba + BASE=__BASEDIR__/sam

[Samba] Bug in Solaris packaging?

2003-12-02 Thread Chew, Darren
Hi All, I have changed my INSTALL_BASE in packaging/Solaris/makepkg.sh from "/usr/local" to "/opt/local". When the package is installed the resulting /etc/init.d/samba.server script has the correct BASE (/opt/local/samba) for "start", but under "restart" the BASE is still defined as /usr/local

[Samba] make: *** [dynconfig.o] Error 1

2003-11-21 Thread Chew, Darren
Hi All, I get the following error compiling Samba 3.0.0 on Solaris 9. Compiling dynconfig.c In file included from include/includes.h:896, from dynconfig.c:21: include/proto.h:497: error: parse error before "LDAP_CONST" make: *** [dynconfig.o] Error 1 ./configure \ --prefix=/usr/

[Samba] pamsmb_pass, userPassword & samba(LM/NT)Password

2003-11-17 Thread Chew, Darren
Hi All, Has anyone used pam_smbpass before with Samba 3 and Solaris 9? The problem I am facing is that the sambaNTPassword/sambaLMPassword and the posixAccount userPassword attributes are not the same. While I can use "net rpc vampire" to migrate the lanman password hashes the posixAccount att

[Samba] SSO holy grail from NT4

2003-09-20 Thread Chew, Darren
Hi All, Has anyone got details on how to successfully achieve this? I have tried using `net rpc vampire` and the smbldap toolkit with little success. The smbldap toolkit seems to get a little further, and I am able to migrate NT/LM hashes to the sambaLMPassword/sambaNTPassword LDAP attributes.

Re: [Samba] smbldap tools clarification

2003-09-20 Thread Chew, Darren
Does the passdb code create a skeleton directory information tree to store users, computers, groups, etc? Does `net rpc vampire` vampire create the ou's before it sucks the sam database across? Anyone have any ideas? On Fri, 19 Sep 2003, Ray Raszka wrote: > What is the purpose of these script

[Samba] smbldap-tools updates (diffs)

2003-09-19 Thread Chew, Darren
Hi all, I have found the smbldap-tools provided in the samba 3 tarball to have a few glitches with the samba 3 schema. I have made my changes and 'diffed' them with the source. [EMAIL PROTECTED] # pwd /usr/local/samba/sbin [EMAIL PROTECTED] # for i in *.p*; do echo $i; diff $i /usr/local/src/s

[Samba] Create basic LDAP DIT

2003-09-19 Thread Chew, Darren
Hi All, I have converted the samba 3 schema for iPlanet ds 5.x but now need some help with thre creation of the basic DIT. Is there a way to create a basic directory information tree with a skeleton samba schema? I know of the smbldap-tools and smbldap-populate. Is this the only way? `net rpc

[Samba] 3.0rc4 - Trouble installing SWAT (fwd)

2003-09-19 Thread Chew, Darren
Hi all, Got it. mkdir /usr/local/samba/swat cd /usr/local/samba/bin ./installswat.sh /usr/local/samba/swat /usr/local/src/samba-3.0.0rc4/source Cheers, Darren -- Forwarded message -- Date: Sat, 20 Sep 2003 13:13:50 +1000 (EST) From: "Chew, Darren" <[EMAIL P

[Samba] 3.0rc4 - Trouble installing SWAT

2003-09-19 Thread Chew, Darren
Hi all, I am getting the following error while trying to load swat (in my browser). Has anyone seen this before? 500 Server Error chdir failed - the server is not configured correctly log.swat says: [2003/09/20 13:09:08, 1] lib/util_unistr.c:load_case_tables(63) creating lame upcase table [2

Re: [Samba] Samba 2.2.8.a for Solaris 7 and Solaris 9

2003-09-15 Thread Chew, Darren
Hi Frédéric, Samba 2.2.8a comes with Solaris 9, just install the required packages, SUNWsmbac, SUNWsmbar, and SUNWsmbau. Install patch 114684-02 from sunsolve if you have a release older than 8/03. Otherwise the above mentioned patch is included in the Solaris 9 Recommended Patch Cluster. Darr

Re: [Samba] still missing ISO8859-1.so in RC4 on solaris 9

2003-09-15 Thread Chew, Darren
Hi Paul, I have been struggling for weeks too. Are you using the iPlanet DS included in Solaris 9? Is this a new installation? Would love to hear any feedback from Solaris users. Darren On Mon, 15 Sep 2003, Paul Coray wrote: > Hi all. > > I've been struggling for weeks now to get Samba 3 wor

[Samba] Samba 3.0rc3 - "SAM_DELTA_DOMAIN_INFO not handled"

2003-09-09 Thread Chew, Darren
Hi All, I am unable to 'net rpc vampire' the NT4 user accounts and groups into an ldapsam. The PDC is Windows NT4.0 sp6a and the ldapserver is SunONE DS 5.1 on Solaris 9. I believe the sambaSamAccount schema has been imported successfully (output below). Any help received is greatly appreciated. T

Re: [Samba] configure / compile problems samba-3.0.0rc3 on Solaris 8

2003-09-09 Thread Chew, Darren
Hi Thomas, I have been trying to use Samba 3 on Solaris 9 with iPlanet Directory Server 5.1 and am still having troubles. You need libldap from openldap. You can download openldap from from www.openldap.org and compile it as follows: ./configure --without-bdb --disable-bdb --enable-null make depe

[Samba] Can't compile Samba 3.0rc2 with ldap & ldapsam Solaris 9

2003-09-08 Thread Chew, Darren
Hi All, Here is my configure script: ./configure --with-ldap --with-ldapsam Configure works ok. But during make the following error message was received. Using FLAGS = -g -O2 -Iinclude -I/usr/local/src/samba-3.0.0rc2/source/include -I/usr/local/src/samba-3.0.0rc2/source/ubiqx -I/usr/loc

[Samba] Bundled Netscape DS 5.x schema in Samba3.0rc2

2003-09-07 Thread Chew, Darren
Hi All, The bundled "samba-schema-netscapeds5.x" file provides the schema for Samba 2.2.x attributes not 3.x. I have successfully imported this schema into the iPlanet directory server, and then run the smbldap-migrate-accounts.pl script. This created posixAccount objects but not sambaAccount obje

[Samba] Iconv support - Samba 3.0rc2/Solaris 9 (sparc)

2003-09-06 Thread Chew, Darren
Hi all, I have just compiled and installed Samba 3.0rc2 on Solaris 9 8/03 using gcc 3.3. sh makepkg.sh almost crashed the Sun box, as I ran out of swap space in /tmp. I didn't realise that the binaries were going to be over 800mb. The box came back after about 5 minutes and I was able to add more

[Samba] Samba3 / iPlanet DS 5.1 on Solaris 9

2003-09-01 Thread Chew, Darren
Hi All, Has anyone had experience with Samba 3 running on Solaris 9 and using the inbuilt iPlanet Directory Server? We have an existing NT4 domain that we are using to implement SSO authentication (using pam_smb). We are now looking at moving to a more scalable back end like LDAP but want to p

[Samba] NT4 SAM -> passwd/ldif

2003-06-03 Thread Chew, Darren
Hi All, Does anyone know of any way I can get the passwords from the SAM file and export them into either passwd file format or ldif? Solaris PC Netlink has a sam2ldif tool. But this is also unable to extract passwords because of one-way encryption. Any help would be greatly appreciated. Thank

[Samba] Restrict access to [homes] share

2003-02-22 Thread Chew, Darren
G'day, I'd like to know how to restrict access to the [homes] share. Currently, each user is able to read/write to his/her own share, and by typing \\machine\anotheruser can open another user's share and read/write there too. I would like to restrict access so that a user can only read/write to