.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
in the
base, but you would need to make some changes in the script first.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
.
Edmundo Valle Neto
Yes, it will only work for commands that relies on samba itself to
change the password. Here passwd is NOT included.
Is was shown three approaches, using samba (smbpasswd), using PAM
(passwd) and using LDAP directly.
Regards.
Edmundo Valle Neto
--
To unsubscribe from
that theres nothing wrong with your config, you just didn't
understood what you need to do.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
with your config, you just didn't
understood what you need to do.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
the bells and whistles of ldap (high
availability, SSO, etc), tdb is the better choice - at least in my
opinion...
Depends of what is needed, in my opinion if an user must have the same
password in samba AND any other service, use LDAP.
Regards.
Edmundo Valle Neto
--
To unsubscribe from
to a specific machine if you have other
useless traffic together:
http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/bugreport.html
Or the error is there or you have a samba version with a broken password
chat processing (I dont know CentOS).
Regards.
Edmundo Valle Neto
Alan Goodman escreveu:
Edmundo Valle Neto wrote:
Alan Goodman escreveu:
I have implemented samba with LDAP backend, domain logins and
roaming profiles and everything is great - except for one thing.
Noone can change their passwords from windows - trying to change
your password results
Alan
Post your smb.conf.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
the log level, if its not, its useless and maybe you should look at your
ldap acls.
So, it depends, I didnt understood what works and what doesn't and in
which situation now.
Thanks again!
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions
Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Jon Theil Nielsen escreveu:
2008/2/13, Edmundo Valle Neto [EMAIL PROTECTED]:
Jon Theil Nielsen escreveu:
I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords
from Windows clients (Ctrl-Alt-Del).
I now have the password chat debug active and I have loglevel 100.
I am
at the command line first.
Thanks for your attention.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
that these two domains
interact with each other. But if I remember right at least the two
servers will know of each other (as only the clients brodcast behavior
was disabled) and so all clients will know about the two servers.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go
never liked to do that this way.
(...)
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
LDAP.
Thanks
Andrea
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
to the server
spit something useful, use something like 3.
But yes, its not normal to the server don't find objects in LDAP as its
not normal start to give permission denied errors trying to reopen log
files. What are the permissions of your log directory?
Regards.
Edmundo Valle Neto
a look at the SO USE A PARTIAL part, it worth for all
organizational units suffixes.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
message.
Testparm gives you any error?
Listing the shares with these accounts work? smbclient -L localhost
-Uanyuser%password ?
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
, this is the chat used to match what the
passwd program returns. Where is your passwd program? It defaults to
nothing when not specified. The samba documentation, the smb.conf man
page and probably the mail list history has examples of setting them.
Regards.
Edmundo Valle Neto
, if NetBIOS over Tcpip is disabled, etc.
Windows have its own tools to test lookups too.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
show the user? The command give any error? If the user
isn't in the base your smbldap-tools install is broken too.
thanks for your help
best regards.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org
doesn't show me the users i created...
So, make it shows :). Configure NSS is not optional, and the
documentation shows how to do it.
regards
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman
.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Have you configured NSS? gentent passwd shows the user?
Its getent.
Edmundo
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
noticed that
changing versions doesn't solve the problem.
aahh. ok.
thanks and best regards
1. http://download.gna.org/smbldap-tools/docs/
2. http://us4.samba.org/samba/docs/man/Samba-HOWTO-Collection/
3. http://us4.samba.org/samba/docs/man/Samba-Guide/
Regards.
Edmundo Valle Neto
use samba to do its job, it connects
to LDAP directly, so, supposing that you have configured smbldap-tools
properly, its very unlikely that the problem has anything to do with the
samba package, as you have noticed that changing versions doesn't solve
the problem.
Regards.
Edmundo Valle Neto
documentation that explains
how File, Directory, and Share Access Controls works? Theres a chapter
that explain what privileges are and do too.
1.
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/AccessControls.html
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go
), and about how did you
joined the workstations.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
with
dpkg -L packagename
As in any distro, you can see how your samba was built running smbd
-b, it will show you build options and paths being used.
1. http://www.debian.org/doc/debian-policy/ch-files.html
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL
are using nscd and winbind?
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
or separate with two options that would make the subtrees be
searched in sequence.
1. http://us1.samba.org/samba/docs/man/Samba-Guide/happy.html#id336060
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman
and it really have that option.
(...)
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
option in smb.conf? [1] You have
upgraded samba, didn't changed smb.conf and was able to join machines
on-the-fly before without creating unix accounts for them by hand?
1.
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html#id336155
Regards.
Edmundo Valle Neto
.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetworkBrowsing.html#id349811
In fact I recommend you to read the entire chapter about network
browsing (it explains the roles of LMBs, DMBs, WINS, etc, and how they
work).
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go
.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
honor the password chat too and will
ever be executed as root.
I use something like that (changing the smbldap-tools script) to sync
digest hashes for authentication trough squid digest ldap helper.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read
chat too and will
ever be executed as root.
I use something like that (changing the smbldap-tools script) to sync
digest hashes for authentication trough squid digest ldap helper.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions
with ldap when you have UNIX and NT groups in
different places (lest suppose that you have a container for UNIX groups
and another to NT groups), and it works, but normally nobody creates
groups that way unless have a good reason.
Randall
Regards.
Edmundo Valle Neto
--
To unsubscribe from
.
I need to know what setting/script is needed in order to have the home
directory automatically created if it does not already exist.
Could someone point me to the appropriate documentation for that?
Thanks
Dalton
Try searching for pam_mkhomedir.
Edmundo Valle Neto
--
To unsubscribe from
your system used to be, but the docs says how it should
behaves.
1. http://en.wikipedia.org/wiki/Unix_time
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Edmundo Valle Neto escreveu:
Jason Baker escreveu:
I have been having some problems since I updated from Samba 3.0.23 to
3.0.25b. I have installed the latest version of smbldap-tools but I
am still not able to make certain changes to a user's account. I have
created a new user named JROLFE
://support.microsoft.com/?scid=kb%3Ben-us%3B160177x=15y=10
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
are not reused).
primaryGroupSID is normally Domain Users.
Thanks in advance
Guy
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
resolution, resolving names directly in LDAP without consulting
NSS. You must have all samba accounts in LDAP and with samba and posix
attributes together in each object. So, yes, it can be problematic.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read
: FF
As you can see, the same error shows up: GROUP NOT FOUND
Do you know why?
Thanks
Edmundo Valle Neto wrote:
mikelOn escreveu:
I have added the parameter ldapsam:trusted = yes and now the samba
error
has changed to NT_STATUS_UNSUCCESSFUL. The logs say the following:
[2007
level 2 or 3 and try to join
a machine. Look at the logs, it should say what exit the script gave and
what samba tried to do.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
The RID portion doesn't really matters as it doesn't clash with known
RIDs (below 1000), and other created RIDs (you cannot have two accounts
with the same RID, composing the same SID).
Regards.
Edmundo Valle Neto
mikelOn escreveu:
Sorry, I was wrong. After changing such value the machines
account WITH samba attributes, or another user with proper privileges
assigned by hand.
Samba must know the password of the ldap administrator to be able to
change it.
Regards.
Edmundo Valle Neto
Thanks for the advice,
Mikel
Edmundo Valle Neto wrote:
mikelOn escreveu:
Hi Alex,
I
.
Edmundo Valle Neto
mikelOn escreveu:
I am not running nscd :(
Thanks for your response
simo-7 wrote:
On Wed, 2007-06-27 at 09:45 -0700, mikelOn wrote:
About the samba attributes, when you add a machine account the script
add machine must NOT ADD SAMBA ATTRIBUTES, only posix, samba does
with getent passwd and getent group, your accounts
in ldap must be visible then.
Regards.
Edmundo Valle Neto
I user the root user to join the machines and the smb query you suggest
works properly. I can even list the samba shares from the windows machines.
Thanks again
Edmundo Valle Neto
privelages.
Would be easyer just looking the log errors.
Samba must know the password of the ldap administrator to be able to
change it.
Samba has that for me.
John
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https
/server.c:exit_server_common(675)
Server exit (normal exit)
Do you see anything familiar here?
Thanks
What pdbedit -v root shows?
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
for him that
way, and dropped the thread ...
Regards.
Edmundo Valle Neto
mikelOn escreveu:
Great!!!
I have created a couple of machine accounts through the LAM utility and I
have eventually been able to join the domain.
Thank you very much for your help.
John Drescher-2 wrote:
I have had
user or one added with
the smbldap-useradd tool?
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
script, not cited above.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
a deprecated option not used
anymore.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
to everyone be able to read
your logon script?
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
solution, nor a good message to be displayed)
and this is logged on the machine that runs the management server to be
inspected later :)
Regards.
Edmundo Valle Neto
Rune Tønnesen escreveu:
Dear Michael
You can use find it is a good unix tool
To get a
list of files in the home dir ending
BACQUEZ escreveu:
From : Edmundo Valle Neto
The point is, %anything is not recognised inside a script.
But, yes, adduser is a little different in Debian, it doesnt have -M
option, for example.
If you look at Samba by Example you will find something like that:
add machine script = /usr
for this?
Thanks in advance.
Regards,
Would help if you post your smb.conf file.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
of how
did you created your default groups and SIDs. Or create a group in samba
put some users inside it an make this group belong to the local
administrator group in every machine, then the domain accounts will have
local administrative right in those workstations. Simple.
Edmundo Valle Neto
administrator of the
machine to change any network setting. Or you can search howw to change
the Windows policies to allow other users to do what you want.
Sorry for my English. I hope to be readable.
David BACQUEZ
BORDEAUX (France)
Edmundo Valle Neto
--
To unsubscribe from this list go
-tools user manual.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
the option is not setted), in
this case, passwd program and chat are simply ignored, doesnt make
difference what you put there.
Just dont set unix password sync to yes at the same time with ldap
passwd sync.
Regards.
Edmundo Valle Neto
David Pinkerton escreveu:
I'm trying to get ldap/unix password
Sean Elble escreveu:
On 4/10/07 9:29 PM, Edmundo Valle Neto [EMAIL PROTECTED] wrote:
David.
You appears to have two conflicting options setted, I saw that you
enabled the ldap passwd sync, this is the right way to do this, samba
will sync the password directly in ldap without any external
is only accessible for domain accounts, so no guests or
other accounts here. also all machines have registered to the domain
no anonymously accounts and all.
it's really driving me crazy this bug.
cheers
Collen
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL
with
permissions by lost/changed ids after used (IF that happened).
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
]
I hope it helps.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
?
Regards.
Edmundo Valle Neto
Michael Heydon escreveu:
Hi Eric,
This line here looks like the interesting bit to me.
Mar 6 13:59:38 macallan slapd[4731]: conn=50 op=3 RESULT tag=103
err=8 text=modifications require authentication
It looks like the useradd script is doing an anonymous bind, which
Hi.
This has nothing to do with samba or the atribute itself. You cannot
separate attributes or index types by spaces, take a look again in the
formatting of your config.
Regards.
Edmundo Valle Neto
Jason Baker escreveu:
Try removing uidNumber and just use uid. Here is a section from
And dont forget to execute slapindex in an already populated base after
make such changes.
Regards.
Edmundo Valle Neto
Edmundo Valle Neto escreveu:
Hi.
This has nothing to do with samba or the atribute itself. You
cannot separate attributes or index types by spaces, take a look again
Jeremy Allison escreveu:
On Sat, Jan 27, 2007 at 11:35:32PM +0100, Jan Engelhardt wrote:
Ah I found it. This is smb.conf: http://pastebin.ca/330452
Removing SO_SNDBUF=8192 gives
$ smbget smb://localhost/rt/blob.iso
[blob.iso] 41.08Mb of 171.06Mb (24.01%) at 41.08Mb/s ETA: 00:00:03
perfect
, preexec is executed as the user connecting to the share
if the script needs root rights use root preexec instead.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
that by default. That way any access that requires
a shell will not work for these users.
Regards.
Edmundo Valle Neto
Ben Wheare escreveu:
Hiya,
I'm trying to set up a Samba PDC with an LDAP backend.
I experienced problems joining machines to domains, the machine
account was created, but Windows
how well it works, but maybe you would
like to take a look at the Samba4WINS project, to replicate WINS servers.
Regards.
Edmundo Valle Neto
Noc Phibee escreveu:
No other solution ?
Noc Phibee a écrit :
Hi
i have a smaal problems ... :
I have two samba server connected by a VPN.
One
.
Edmundo Valle Neto
Aaron Kincer escreveu:
Rory,
I can't speak for anyone else, but in my logon scripts, I delete shares
before mapping them because Windows exhibits very strange behavior
sometimes
with shares. Anyone who has ever gotten the amusing error connection
cannot
be restored
Haven't you already answered yourself? Does that users already exists in
ldap?
Second, smbldap-useradd -w %u is enough to create a machine account,
-i is to create trust accounts.
Edmundo Valle Neto
[EMAIL PROTECTED] escreveu:
I am trying to set up Samba 3-0-22 as a PDC on Ubuntu server
Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
John H Terpstra escreveu:
On Sunday 01 October 2006 18:45, Hoggins! wrote:
Edmundo Valle Neto a écrit :
Hoggins! escreveu:
Yes, in that case it should maintain a more complete list. And yes you
just must have ONE WINS server.
I think you didnt got the point, domain master, local
. Anyway its at least recommended to samba be
the LMB too.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
in that type of situation with
cross-subnets.
So my personal conclusion is that there is a misconfiguration of samba
somewhere, that makes it generate a browse list only for it's own
subnet. I think it's weird.
Thanks for helping
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go
Hoggins! escreveu:
Edmundo Valle Neto a écrit :
Hoggins! escreveu:
Take a look at the chapter of the samba book about cross-subnet
browsing, who maintains the browse list is the domain master browser,
each subnet must have a local master browser to maintain the browse
list for its own
tdbsam -e ldapsam
About privileges, that the first message was talking about I dont
know the current ldap status.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Hi.
Some time ago I bought the first edition, and followed some changes
reading the online version of the documentation (but I really like to
read books as books). Can you point what will be included in the 3rd
edition?
Regards.
Edmundo Valle Neto
Gerald (Jerry) Carter escreveu
of
TOSHARG and SAMBA-3 by Example.
What I really want to know is what will be the differences to TOSHARG.
Regards.
Edmundo Valle Neto
Edmundo Valle Neto escreveu:
Hi.
Some time ago I bought the first edition, and followed some changes
reading the online version of the documentation
to
redefine the environmnet variables outside the shell executing the logon
script.
Edmundo Valle Neto
B. Cook escreveu:
I'm wondering if there is a way to add a network share (either UNC or
mapped drive) to the path of a user when they login?
for example have a directory \\smbserver\apps
.
Install it: apt-get install apt-file
Index it: apt-file update
And search: apt-file search smbmount
...
smbfs: usr/bin/smbmount
...
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
easyer to see what your WINS server has to offer, what are the
available resources and if theres any name that shouldnt be registered
there that way.
nbtstat -r, on the client shows that the names are really beeing
resolved by the name server (WINS)?
Regards.
Edmundo Valle Neto
the files after copy them locally
and on the client you can use QuickSFV.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
to
use Samba3 (a better choice if possible).
Maybe if you give more information on how the two versions was installed
someone that knows Solaris can give a better solution.
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https
, not really. You can have home shares and connect to them manually
without need to be a DC.
Thanks,
Eric
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
much,
Eric
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
with a PDC (that are
meant to do that).
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
general question. Some other groups have well known
RIDs too, besides it beeing the right RID for them, what should be the
difference if they had any other values? Whould It raise any problem?
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read
Answering my own question.
I have found some related questions in the mailing list archive saying
that RIDS doesn't change the behavior of the accounts to samba, only the
way they appear to windows clients.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read
to enable that behavior.
Am I missing something? Any Linux/Unix flavor does that (inherit the
owner when a directory has the SUID bit set) by default?
Regards.
Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org
1 - 100 of 110 matches
Mail list logo