Re: [Samba] Samba 4 internal DNS - how to modify SOA record

2013-08-06 Thread Dmitry Khromov
. Regards, - Dmitry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] How to work with GPO

2013-04-18 Thread Dmitry Romashkin
Hello, I have some questions about how Samba4 internals works with Group Policy Objects. Could someone please clarify them? 1) Can I create GPO through samba-tool for Windows without using RSAT? In samba-tool gpo --help there is -c file option. What is this config file for? 2) Seems like RSAT

Re: [Samba] Internal DNS - TTL enforcement for dynamic updates

2012-11-01 Thread Dmitry Khromov
/library/cc448905(v=prot.20).aspx describes SOA record format Thank you! -- Best regards, Dmitry Khromov -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Internal DNS - TTL enforcement for dynamic updates

2012-11-01 Thread Dmitry Khromov
a control of records TTL. P.S. When Windows DHCP client receives a lease or when you manually issue ipconfig /renew command Sorry, not /renew, I meant /registerdns. Thanks. -- Best regards, Dmitry Khromov -- To unsubscribe from this list go to the following URL and read the instructions: https

Re: [Samba] Internal DNS - TTL enforcement for dynamic updates

2012-11-01 Thread Dmitry Khromov
failing to update the SOA record. Attached (PCAP-formatted). Thanks in advance. -- Best regards, Dmitry Khromov -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Internal DNS - TTL enforcement for dynamic updates

2012-11-01 Thread Dmitry Khromov
the first update succeeds, then - SERVFAIL again. P.S. Just in case you're suprised with the updates frequency - it's what we really have in production on parking subnets, as a workaround for the Windows 7 DHCPINFORM on non-authoritative subnets problem. -- Best regards, Dmitry Khromov

[Samba] Internal DNS - TTL enforcement for dynamic updates

2012-10-31 Thread Dmitry Khromov
, this is done by modifying SOA record (and, as I recall, Samba's internal DNS respects TTLs in SOA). But samba-tool can't edit SOA records, MMC DNS snap-in fails to do it too. Thanks. -- Best regards, Dmitry Khromov -- To unsubscribe from this list go to the following URL and read the instructions

Re: [Samba] Unable to create GPO with rc3 and a few authentication problems

2012-10-30 Thread Dmitry Khromov
account for GPO operations? -- Best regards, Dmitry Khromov -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Unable to create GPO with rc3 and a few authentication problems

2012-10-30 Thread Dmitry Khromov
On Wed, 2012-10-31 at 03:33 +0400, Dmitry Khromov wrote: I had encountered a few problems with 2 Samba 4 rc3 DCs serving domain migrated from Windows 2003 R2. I post them altogether, since they look related. 1. Unable to create or delete GPOs. # bin/samba-tool gpo create

[Samba] Unable to create GPO with rc3 and a few authentication problems

2012-10-29 Thread Dmitry Khromov
using Windows GUI (My Computer - Properties) and check if CN, sAMAccountName and member for corresponding groups are changed correctly. In my experience, only sAMAccountName is changed. Once again, sorry if this is OK. Thanks in advance. -- Best regards, Dmitry Khromov -- To unsubscribe from

[Samba] Samba 4 internal DNS - how to modify SOA record

2012-10-23 Thread Dmitry Khromov
could forge a valid record and just change dnsRecord in DC=@ using some LDAP tool? Thanks in advance. -- Best regards, Dmitry Khromov -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] Samba4 KDC Windows 7 clients may fail to get a ticket

2012-10-03 Thread Dmitry Khromov
() - NT_STATUS_CONNECTION_DISCONNECTED' [2012/10/03 09:31:54, 3] ../source4/smbd/process_single.c:104(single_terminate) single_terminate: reason[kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED] -- Best regards, Dmitry Khromov. -- To unsubscribe from this list go

Re: [Samba] Samba4 KDC Windows 7 clients may fail to get a ticket

2012-10-03 Thread Dmitry Khromov
). By the way, XP stations (we have more XP's than Sevens) are unaffected. Thank you. -- Best regards, Dmitry Khromov -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] Samba4 KDC - no such entry found in hdb

2012-10-01 Thread Dmitry Khromov
wrong with them? -- Best regards, Dmitry Khromov -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba4 KDC - no such entry found in hdb

2012-10-01 Thread Dmitry Khromov
On Mon, 1 Oct 2012 10:43:59 +0400 Dmitry Khromov icechr...@gmail.com wrote: Samba 4.1.0pre1-GIT-aad669b, joined as a DC to an existing domain. At least 6 accounts behave like this: Kerberos: AS-REQ techgr...@klin.kifato-mk.com from ipv4:192.168.1.31:33822 for krbtgt/klin.kifato-mk

Re: [Samba] BIND-DLZ refuses to update

2012-09-29 Thread Dmitry Khromov
: dns_tkey_negotiategss: TKEY is unacceptable -- Best regards, Dmitry Khromov -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] Samba4 LDAP returns wrong responses in some cases, BIND-DLZ refuses to update

2012-09-28 Thread Dmitry Khromov
suggestions on getting updates to work? -- Best regards, Dmitry Khromov -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] DRS replication fails with Windows 2003 R2

2012-09-27 Thread Dmitry Khromov
backups after taking Windows DC down? Will such approach introduce any AD inconsistence/fuctionality problems? Thanks in advance. -- Best regards, Dmitry Khromov -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] DRS replication fails with Windows 2003 R2

2012-09-27 Thread Dmitry Khromov
] NT_STATUS_UNSUCCESSFUL Any suggestions? smb_debug.log.xz is attached (sorry for xz, but it's sowemhat long). -- Best regards, Dmitry Khromov -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Delete pending after open in M.Office

2012-08-16 Thread Dmitry MiksIr
. Temp files (~$name one) removed nice for me. Trouble in original file. But thanks for note about versions, I'll try to roll-back to 3.6.5. Am 15.08.2012 19:13, schrieb Dmitry MiksIr: Hello! I have so strange issue with Office files (and may be not only Office). I can't delete file which

Re: [Samba] Delete pending after open in M.Office

2012-08-16 Thread Dmitry MiksIr
16.08.2012 13:10, OA пишет: Hello. Sounds like the problem I reported for 3.6.6. Office .tmp-files could not be deleted (reappeared after refresh). smbstatus crashed on showing them. Unfortunatly noone responded back then. There were greater changes in locking in 3.6.6. We are now back on

Re: [Samba] Delete pending after open in M.Office

2012-08-16 Thread Dmitry MiksIr
16.08.2012 13:10, OA пишет: Hello. Sounds like the problem I reported for 3.6.6. Office .tmp-files could not be deleted (reappeared after refresh). smbstatus crashed on showing them. Unfortunatly noone responded back then. There were greater changes in locking in 3.6.6. We are now back on

Re: [Samba] Delete pending after open in M.Office

2012-08-16 Thread Dmitry MiksIr
16.08.2012 19:33, Volker Lendecke пишет: On Thu, Aug 16, 2012 at 03:21:00PM +0200, Maurer, Hansjörg wrote: Hi ist seems that https://bugzilla.samba.org/show_bug.cgi?id=9058 covers that issue Seems so. We have tried to reproduce the problem here without success. Are there exact

[Samba] Delete pending after open in M.Office

2012-08-15 Thread Dmitry MiksIr
- message NT_STATUS_DELETE_PENDING. And only if I'm restart smb - file removed from local filesystem. Samba 3.6.7. I played with different options alot, but no luck. Maybe someone has already experienced this? -- Dmitry -- To unsubscribe from this list go to the following URL and read

Re: [Samba] Samba + acl,user_xattr

2011-12-19 Thread Dmitry Mordovin
At first, has your file system already enabled xattr? For example, are following commands successfull? # touch test.txt # setfattr -n user.test -v test test.txt # setfattr -n security.test -v test2 test.txt # getfattr -d test.txt # getfattr -n security.test -d test.txt And your

Re: [Samba] Samba + acl,user_xattr

2011-12-15 Thread Dmitry Mordovin
Added to global section vfs objects = acl_xattr No changes. Still dont store DOS attr. You only need acl_xattr is you want to store Windows ACLs, not DOS attrs. Have you tried using setfattr on that filesystem ? Does it work ? Jeremy. Hello Jeremy! You are right! I don't want to store

Re: [Samba] Samba + acl,user_xattr

2011-12-15 Thread Dmitry Mordovin
Hello Jeremy! You are right! I don't want to store Windows ACLs, need only DOS attrs (hidden file attr). What Is enough to add to my smb.conf? 'store dos attributes (S) or 'map hidden (S)' or together or else? I use: store dos attributes = yes map readonly = no map system = no

[Samba] Samba + acl,user_xattr

2011-12-09 Thread Dmitry Mordovin
Hello All! Can't make Samba use acl and extended user attributes to save DOS file attributes. Please, help me configure properly. My steps on Windows XP: 1 - Open share 2 - Open property of file 1122/22.bmp 3 - Check file attribute: hidden 4 - Click Apply 5 - Click Close 6 - Open property

Re: [Samba] Samba + acl,user_xattr

2011-12-09 Thread Dmitry Mordovin
On 12/09/2011 04:26 PM, Jonathan Buzzard wrote: On Fri, 2011-12-09 at 16:05 +0400, Dmitry Mordovin wrote: [SNIP] Samba config: [global] workgroup = HOME security = share max log size = 1024 store dos attributes = yes map archive = no map read only = no map hidden = no map system = no create

[Samba] Hidden files

2011-04-07 Thread Dmitry Mordovin
[mnt2] path = /drv1 read only = no guest ok = yes Thanks Dmitry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Hidden files

2011-04-07 Thread Dmitry Mordovin
On 04/07/2011 09:55 PM, Jeremy Allison wrote: On Thu, Apr 07, 2011 at 09:34:48PM +0400, Dmitry Mordovin wrote: Dear All! Does anyone have troubles with setting hidden attribute? Read-only set and unset properly Hindden - can't set at all You have: map hidden (S) This controls

Re: [Samba] Disk full / file corrupted

2011-04-04 Thread Dmitry Mordovin
- disk space not enough / disk full. After all - test.bmp file not readable and file size increased. Thank you. Dmitry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] Disk full / file corrupted

2011-04-01 Thread Dmitry Mordovin
disk full and not rewrite early saved file. So, I don't loss saved file. Does it possible to solve this problem? Thanks Dmitry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] SMB Use Domain SID to Enumerate Users

2010-11-18 Thread Dmitry Tikhomirov
Hi Guyz, I have check my samba box via Nessus and find medium problem: SMB Use Domain SID to Enumerate Users Synopsis: It is possible to enumerate domain users. Description: Using the host SID, it is possible to enumerate the domain users on the remote Windows system. Risk factor: None

[Samba] samba in large domain

2010-09-03 Thread Dmitry Tikhomirov
Hi all. In my company we have domains like country.global.network.local My country is russia so domain is russia.global.network.local. I have problem with winbind, its take too much time to get groups list(wbinfo -g) or login to share. in log.winbind i see: [2010/09/03 16:35:38, 2]

Re: [Samba] samba in large domain

2010-09-03 Thread Dmitry Tikhomirov
Yeah, i know it, but domain is exist and i have what i have :-) 03.09.2010, в 18:44, Lennart Sorensen написал(а): Microsoft has even released domain rename tools because of their mistake. -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] Problems with W2K8R2 - S4 replicationIn-Reply-To=3caanlktini5dnytlniojootiapcd2fpapnsbfo7mfxu...@mail.gmail.com

2010-05-24 Thread Dmitry A. Khromov
Michael Wood esiot...@gmail.com wrote: I am not sure if this is the problem, but make sure the time is correct on both machines. I got what I think were similar errors when my VM decided to get 2 hours out of sync with reality. Time is synchronized via NTP and kinit works fine, however, I've

[Samba] Problems with W2K8R2 - S4 replication

2010-05-23 Thread Dmitry Khromov
it out. Hope you'll help me. Best regards, Dmitry Khromov. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] list all domain controllers in AD

2009-09-22 Thread Dmitry Krilov (Scotia Capital)
Hi I have Samba 3.3.5 joined AD. Is there any way to list all Domain Controllers in AD from Samba server? Sincerely, Dmitry --- The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any

[Samba] Smbd process keep file locked

2009-09-11 Thread Dmitry Krilov (Scotia Capital)
/28 bind interfaces only = yes deadtime = 15 preferred master = no local master = no guest account = nobody guest ok = no syslog = 0 Sincerely, Dmitry --- The information transmitted is intended only for the person or entity

[Samba] Question regarding dynamic DNS updates

2009-07-24 Thread Dmitry Krilov (Scotia Capital)
chosen DC DNS and then replication process takes a while so sometimes it takes up to 1 hour to replicate new IP all across the sites. My question is - is it possible somehow to specify what exactly AD server I do update DNS record at? Sincerely, Dmitry --- The information transmitted

[Samba] strange problem with kernel oplocks

2008-11-19 Thread Dmitry Melekhov
Hello! Recently I moved some file shares from old server to new one with CentOS 5.2 and samba 3.0.32. And yesterday we found that antivirus (nod32 ) installed on users computers do strange thing- it's often locks and locks files. Here is part of log with debug level = 10 [2008/11/19 11:32:28,

[Samba] winbindd hangs up while retreiving usernames.

2008-04-29 Thread Dmitry
Hello. I'm installing new FreeBSD 6.2-RELEASE, based on intel machine. Firewall type is OPEN. I have Windows Server 2000 with Active Directory on it, working in Native mode. I've installed samba-3.0.23c_2,1 from /usr/ports/net/samba3 prefix=/usr/local without krb-1.5.1 being installed. Added:

Re: [Samba] Samba 3: bad read performance

2008-04-18 Thread Dmitry V Shurupov
this code? -- Dmitry Shurupov, http://www.shurupov.ru/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3: bad read performance

2008-04-17 Thread Dmitry V Shurupov
we do to make Samba perform better? -- Dmitry Shurupov, http://www.shurupov.ru/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3: bad read performance

2008-04-17 Thread Dmitry V Shurupov
for reading.) However, Samba speed is still inadmissible. On Чтв, 2008-04-17 at 15:46 +0400, Dmitry V Shurupov wrote: And... Our testing results (MByte/s): Read Write disk 190 135 ftp111 111 samba 23 90 -- Dmitry Shurupov, http

[Samba] refuse machine password change

2007-03-15 Thread Dmitry Melekhov
Hello! Looks like this policy doesn't work for win2000 domain members. Could somebody confirm this? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] refuse machine password change

2007-03-15 Thread Dmitry Melekhov
Felipe Augusto van de Wiel пишет: On 03/15/2007 04:02 AM, Dmitry Melekhov wrote: Hello! Looks like this policy doesn't work for win2000 domain members. Could somebody confirm this? Sorry, I can't, but if nobody replies, you should think about reporting a bug. https

[Samba] problem with mapped group

2007-02-03 Thread Dmitry Melekhov
Hello! We have samba 3.0.23d PDC and windows 2003 terminal server as samba domain member. And we have mapped group with about 170 members. We found that last added users (looks like last member of group) can't connect to windows server, i.e. they are not recognized by windows as group

[Samba] problem with mapped group

2007-02-03 Thread Dmitry Melekhov
Hello! We have samba 3.0.23d PDC and windows 2003 terminal server as samba domain member. And we have mapped group with about 170 members. We found that last added users (looks like last member of group) can't connect to windows server, i.e. they are not recognized by windows as group

[Samba] bdc ?

2007-01-17 Thread Dmitry Melekhov
Hello! I configured samba BDC according to howto. PDC is in the same subnet. But I see that windows ( at least 2003 servers from the same subnet) sometimes connects to BDC to retrieve info about users. Now I use smbpasswd and machine accounts are in passwd. I'm afraid that will try to change

[Samba] problem with mapped group

2007-01-10 Thread Dmitry Melekhov
Hello! We have samba 3.0.23d PDC and windows 2003 terminal server as samba domain member. And we have mapped group with about 170 members. We found that last added users (looks like last member of group) can't connect to windows server, i.e. they are not recognized by windows as group

Re: [Samba] problem with acls and dos mode in 3.0.23d

2006-12-14 Thread Dmitry Melekhov
Gerald (Jerry) Carter пишет: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote: I'm user dm ;-) I can delete directory from console, but I can't do it from windows. And I see this directory as read-only... I tried to read debug 10 log, but can't find any reasons

[Samba] problem with acls and dos mode in 3.0.23d

2006-12-12 Thread Dmitry Melekhov
Hello! I have direstory with following acl: getfacl Visio2002 # file: Visio2002 # owner: ilyin # group: ilyin user::rwx user:dm:rwx user:pitomtsev:rwx user:nap:rwx user:mav:rwx user:goi:rwx user:ilyin:rwx user:huzyahmetov:rwx group::r-x group:common:r-x mask::rwx other::--- default:user::rwx

[Samba] problem with acls and dos mode in 3.0.23d

2006-12-12 Thread Dmitry Melekhov
Hello! I have direstory with following acl: getfacl Visio2002 # file: Visio2002 # owner: ilyin # group: ilyin user::rwx user:dm:rwx user:pitomtsev:rwx user:nap:rwx user:mav:rwx user:goi:rwx user:ilyin:rwx user:huzyahmetov:rwx group::r-x group:common:r-x mask::rwx other::--- default:user::rwx

Re: [Samba] smbd_audit: log_success() failed to get vfs_handle-data!

2006-12-04 Thread Dmitry Panoff
] modules/vfs_full_audit.c:log_success(682) log_success() failed to get vfs_handle-data! [2006/12/04 11:45:12, 3] smbd/msdfs.c:get_referred_path(576) get_referred_path: No valid referrals for path \\Samba\ports\123\2.8.5rel.3.patch.gz === Great thanks for help. == Dmitry Panoff Network

[Samba] smbd_audit: log_success() failed to get vfs_handle-data!

2006-12-03 Thread Dmitry Panoff
full_audit:prefix = %m|%U Why does this errors occur? What's wrong? --- Dmitry Panoff Network administrator Donetsk, Ukraine -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] unix group membership -- broken in 3.0.23c?

2006-11-17 Thread Dmitry Karasik
that it looks in local unix group. -- Sincerely, Dmitry Karasik -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] unix group membership -- broken in 3.0.23c?

2006-11-17 Thread Dmitry Karasik
to prefix one of @+, and then again specify the group name). In this case you probably need only @ to say 'this is group, not user', and possibly extend the group syntax to Unix Group|NIS|Windbind\myuser. -- Sincerely, Dmitry Karasik -- To unsubscribe from this list go

[Samba] W2000 AD - Samba-3.0.23d authorization problem

2006-11-17 Thread Dmitry Panoff
*This message was transferred with a trial version of CommuniGate(r) Pro* Greetings, All There's simple AD, running on Win2000 (realm - 0905.DN.STA, workgroup - SGNI) and samba-3.0.23d installed on FreeBSD-5.3 with ADS/LDAP/WINBIND/PAM/SYSLOG/QUOTAS/ACL. Also heimdal-0.6.3 installed. I need to

Re: [Samba] unix group membership -- broken in 3.0.23c?

2006-11-16 Thread Dmitry Karasik
On Thu, Nov 16, 2006 at 10:45:10AM +0100, Volker Lendecke wrote: On Tue, Nov 14, 2006 at 02:43:52PM +0100, Dmitry Karasik wrote: I've just upgraded to 3.0.23c and noticed that unix group membership validation doesn't work anymore. For example, valid users = +mygroup Did you try valid

Re: [Samba] unix group membership -- broken in 3.0.23c?

2006-11-16 Thread Dmitry Karasik
that it might not be a bug in the source, but that then one in documentation then? I didn't proofread 'man smb.conf' but it seems also affected. -- Sincerely, Dmitry Karasik -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman

[Samba] 3.0.23c , excel locking problem

2006-11-15 Thread Dmitry Melekhov
Hello! Problem exists in previous versions too. Sometimes it is impossible to open excel file for writing, it opens in read-only mode, although lsof and smbstatus -L show no lock on it. log file is attached... Any idead? -- To unsubscribe from this list go to the following URL and read

[Samba] unix group membership -- broken in 3.0.23c?

2006-11-14 Thread Dmitry Karasik
? -- Sincerely, Dmitry Karasik -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] 3.0.22 smbd/oplock.c:oplock_timeout_handler

2006-08-01 Thread Dmitry Melekhov
Jeremy Allison wrote: Dmitry Melekhov skrev: Hello! Our users created very large excel file - about 60 Mb, then when they want to open it from samba share, they can't. I see in log: [2006/07/26 12:33:20, 0] smbd/oplock.c:oplock_timeout_handler(366) Oplock break failed for file

[Samba] 3.0.22 smbd/oplock.c:oplock_timeout_handler

2006-07-29 Thread Dmitry Melekhov
Hello! Our users created very large excel file - about 60 Mb, then when they want to open it from samba share, they can't. I see in log: [2006/07/26 12:33:20, 0] smbd/oplock.c:oplock_timeout_handler(366) Oplock break failed for file file.xls -- replying anyway Could you tell me what can I

[Samba] 3.0.23 smbstatus

2006-07-13 Thread Dmitry Melekhov
Hello! Is there tdb format changes between 3.0.22 and 3.0.23? I get after upgrade from smbstatus: 131209 794911341 unknown-please report ! e-share_access = 0x44b5eb35, e-private_options = 0x2314d -- To unsubscribe from this list go to the following URL and read the instructions:

[Samba] remote BDC

2006-04-04 Thread Dmitry Melekhov
Hello! I want to have BDC in another subnet. I.e. PDC--router--4Mbit linkrouterBDC---users I want users workstations logins into PDC if link is up and into BDC. If I setup BDC as /|domain master = no|//| domain logons = yes then users logins into BDC although #1c records in wins are

[Samba] RE: WANTED: mod_ntlm_winbind developer

2005-09-08 Thread Dmitry Andrianov
, it falls back to basic auth and consequently receives password in plaintext. We want to avoid plaintext passwords but we can not use https everywhere. That is why we wanted to try NTLM instead of Kerberos. Regards, Dmitry Andrianov From: Marcin Porwit [mailto

[Samba] Re: Unwanted Workgroup Names on WINS

2005-08-02 Thread Dmitry Melekhov
Hello, There are many workgroup names on Microsoft Windows Network. Sometimes, users could wrong type the workgroups name on self computers, and creating new record on WINS server. I don't want showing the unwanted names to end users. Only two workgroups must be showed. Is it possible that

[Samba] Re: Read-only and POSIX ACLs

2005-05-10 Thread Dmitry Melekhov
- Original Message - From: Jeremy Allison [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, May 10, 2005 11:25 PM Subject: Read-only and POSIX ACLs Hi all, I can make a simple change to smbd for the next stable release that will cause POSIX ACLs to be checked

[Samba] BDC, documentation, Machine Accounts Keep Expiring

2005-05-04 Thread Dmitry Melekhov
Samba-3 does not at this time have this infrastructure. Samba-3 BDCs try to contact the LDAP server directly. So long as the master LDAP server can be contacted by the BDC the machine password change can be written, but if it is down, or can not be contacted the change will fail. In other

[Samba] BDC, documentation, Machine Accounts Keep Expiring

2005-05-03 Thread Dmitry Melekhov
Hello! I want to create BDC with smbpasswd backend, just because I run ldap master on the same machine as PDC and I don't think that using ldap backend will be far better for me. Only thing I don't understand: I read in howto: quote Machine Accounts Keep Expiring This problem will occur

Re: [Samba] BDC, documentation, Machine Accounts Keep Expiring

2005-05-03 Thread Dmitry Melekhov
Michael Joyner wrote: You could always use gpedit.msc and set the machine password change to NO On 500 computers ? :-) Anyway, I'd like to know will samba BDC allow machines to change passwords or not... Dmitry Melekhov wrote: Hello! I want to create BDC with smbpasswd backend, just because I

Re: [Samba] BDC, documentation, Machine Accounts Keep Expiring

2005-05-03 Thread Dmitry Melekhov
- Original Message - From: Paul Gienger [EMAIL PROTECTED] To: Dmitry Melekhov [EMAIL PROTECTED] Cc: samba@lists.samba.org Sent: Tuesday, May 03, 2005 4:53 PM Subject: Re: [Samba] BDC, documentation, Machine Accounts Keep Expiring I.e., looks like machines will not change

Re: [Samba] BDC, documentation, Machine Accounts Keep Expiring

2005-05-03 Thread Dmitry Melekhov
- Original Message - From: [EMAIL PROTECTED] To: Dmitry Melekhov [EMAIL PROTECTED] Cc: samba@lists.samba.org Sent: Tuesday, May 03, 2005 9:55 PM Subject: Re: [Samba] BDC, documentation, Machine Accounts Keep Expiring What is your setup can you post your BDC configurations I have

Re: [Samba] ntlm_auth, samba PDC

2005-04-01 Thread Dmitry Melekhov
Dmitry Melekhov wrote: Oh, now I have it works with basic (this is from squid user): /usr/sbin/ntlm_auth --helper-protocol=squid-2.5-basic dm rightpass OK dm wrongpass ERR But I mant to have ntlm athentification. This is what I wrote in squid.conf: auth_param ntlm program /usr/sbin/ntlm_auth

[Samba] ntlm_auth, samba PDC

2005-03-31 Thread Dmitry Melekhov
Hello! I want to provide ntlm authentification for my squid proxy users :-) I have only samba PDCs. But looks like winbind still doesn't work against samba PDC or I did something wrong: gopher:~ # wbinfo -a user0%user0 plaintext password authentication failed error code was

Re: [Samba] ntlm_auth, samba PDC

2005-03-31 Thread Dmitry Melekhov
Andrew Bartlett wrote: On Fri, 2005-04-01 at 09:40 +0500, Dmitry Melekhov wrote: Hello! I want to provide ntlm authentification for my squid proxy users :-) I have only samba PDCs. But looks like winbind still doesn't work against samba PDC or I did something wrong: Just like the member

[Samba] 3.0.13 and excel 2003sp1 problem

2005-03-26 Thread Dmitry Melekhov
Hello! There is following problem: if I open excel file from one computer and then try to open it from another excel says (translation from russian)- editing is prohibited by user X. Previously (at least with samba 3.0.2a) user X was user which name is in about dialog of excel, but now this is

[Samba] Re: Upcoming 3.0.13 release -- please test now

2005-03-22 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote: So if you have any outstanding bugs in the 3.0.12 that we should know about, let us know now. Please file any defect reports at https://bugzilla.samba.org/. I just upgraded two of our servers from 3.0.11 to 3.0.12 and found that with vfs object = vscan-clamav all

[Samba] Re: Upcoming 3.0.13 release -- please test now

2005-03-22 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | I just upgraded two of our servers from 3.0.11 to 3.0.12 | and found that with | vfs object = vscan-clamav | all becomes very slow and clamav eats cpu. | I don't know yet is this samba or vscan problem, but all were | OK

[Samba] samba 3.0.11 and wins replication

2005-03-03 Thread Dmitry Melekhov
Hello! Here is patch of Igor Artiemiev for wins replication and some additional patches (for instance, loading and dumping wins.dat with smbcontrol) we use on our servers. I didn't test it in production, yet :-) -- To unsubscribe from this list go to the following URL and read the

[Samba] Samba 3.0.11 doesn't work on Fedora Core 2

2005-02-28 Thread Dmitry V. Korotkov
] added interface ip=10.XXX.XXX.XXX bcast=10.XXX.XXX.255 nmask=255.255.255.0 Client started (version 3.0.11). Connecting to 10.XXX.XXX.XXX at port 445 protocol negotiation failed How I can repair it? WBR, Dmitry Korotkov. -- To unsubscribe from this list go to the following URL and read the instructions

[Samba] Re: 3.0.11 (and previous versions too) printing problem with disable spoolss = yes

2005-02-13 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote: | I don't remember why I use disable spoolss ;-) I | use it for many years. Certanly, I can (and shall) try | use client driver, Using the full point-n-print functionality is the best solution IMO

Re: [Samba] privileges in 3.11?

2005-02-06 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote: | I just checked latest svn with | svn co svn://svnanon.samba.org/samba/branches/SAMBA_3_0_RELEASE | samba-SAMBA_3_0_RELEASE | | And I still have the same problem. | | net -S dm -U root rpc rights

Re: [Samba] privileges in 3.11?

2005-02-04 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote: Hello! -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote: | Certanly, root is member of Domain Admins group :-) well not at least implicitly in the NT_USER_TOKEN (although that might maker things easier if it was). I added root to Domain Admins group

Re: [Samba] privileges in 3.11?

2005-02-04 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote: | /net -S dm -U dm rpc rights grant 'TEST\mail' | SeMachineAccountPrivilege | Password: | Could not connect to server dm This is an error from the net command itself (not related to rpc rights). Have you look at the level 10 debug log from this second failure? Now

[Samba] privileges in 3.11?

2005-02-03 Thread Dmitry Melekhov
Hello! I try to assing privileges in 3.11 and get error. If I try to do this from root: net -S dm -U root rpc rights grant 'TEST\mail' SeMachineAccountPrivilege Password: Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED) Or, if I do this from user, which is in Domain Admins group:

Re: [Samba] privileges in 3.11?

2005-02-03 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote: | | I try to assing privileges in 3.11 and get error. | If I try to do this from root: | | net -S dm -U root rpc rights grant 'TEST\mail' | SeMachineAccountPrivilege | Password: | Failed to grant

[Samba] Re: 3.0.8pre1, encoding problem?

2004-10-07 Thread Dmitry Melekhov
Dmitry Melekhov wrote: Hello! I just wanted to migrate one of our 3.0.2a servers to 3.0.8pre1 and found that all is OK win WinXP, but there is problem with WinMe. OK. I found that I created wrong spec, so my rpm doesn't contain *.dat (lowcase.dat , etc). All is OK now. Thank you

[Samba] 3.0.8pre1, encoding problem?

2004-10-03 Thread Dmitry Melekhov
Hello! I just wanted to migrate one of our 3.0.2a servers to 3.0.8pre1 and found that all is OK win WinXP, but there is problem with WinMe. When user tries to access directory with name (Contracts) here is what I see on log: [2004/10/04 08:45:01, 5] smbd/filename.c:unix_convert(108)

[Samba] (no subject)

2004-04-06 Thread Dmitry Melekhov
The big question is, though... why aren't the old addresses getting un-registered when new ones are registered with WINS? Or if that's standard, why do the old addresses take precedent over the new ones? This is why I wrote little patch, wich allows to dump/edit/load wins.dat without

[Samba] filter browsing ?

2004-03-25 Thread Dmitry Melekhov
Hello! Is it possible to filter groups, which are in browsing, i.e. only listed groups will be available. Problem is that users and technical staff installs machines with almost any group names ;-( And then we see these groups for a long-long time. Is such filtering in principle possible? --

[Samba] passwords from smbpasswd to tdbsam ?

2004-03-09 Thread Dmitry Melekhov
Hello! Currently we use samba 2.2.8a on most of servers. And we use ldap with nss_ldap and smbpasswd replication using rsync. I migrated one of our PDCs to samba 3.0.2a and want to use tdbsam (for terminal services properties) on it. Is it possible to import new users and only passwords for

Re: [Samba] DNS proxy is broken in 3.0.2a?

2004-03-05 Thread Dmitry Melekhov
- Original Message - From: Gerald (Jerry) Carter [EMAIL PROTECTED] To: Dmitry Melekhov [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, March 05, 2004 6:00 PM Subject: Re: [Samba] DNS proxy is broken in 3.0.2a? -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote

Re: [Samba] DNS proxy is broken in 3.0.2a?

2004-03-05 Thread Dmitry Melekhov
- Original Message - From: Andrew Bartlett [EMAIL PROTECTED] To: Dmitry Melekhov [EMAIL PROTECTED] Cc: Gerald (Jerry) Carter [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Saturday, March 06, 2004 4:25 AM Subject: Re: [Samba] DNS proxy is broken in 3.0.2a? It seems to work for me. (Just

[Samba] 3.0.3pre1 byte range lock leak?

2004-03-05 Thread Dmitry Melekhov
quote I'm having a problem involving Outlook and .pst files and a lock that is getting stuck I believe. Once Outlook crashes in the fashion it does, it is unable to reopen the file, claiming it is already in use. Explorer also does not let me access the file. Rebooting the workstation does not

[Samba] citrix stores addition information into SAM on pdc

2004-03-05 Thread Dmitry Melekhov
quote hi, we want to replace our nt4 pdc/bdc with samba and we use windows nt4 terminal servers with citrix in our environment. as far as i know, we will get a problem here. (extensiver reading of the mailing list led me to this conclusion) regarding:

[Samba] Re: Samba3.0.2a, MS Office (Excel), Save problem.

2004-03-04 Thread Dmitry Melekhov
quote My problem was really with XFS and Excel files in shared mode. Back to the previous example, after Tom saves the file, Tom becomes the owner of the file and Bob ends up in the ACL list. John comes along and saves the file. John becomes the owner and now Tom and Bob are now on the ACL

  1   2   >