Re: [Samba] Does anybody use idmap_adex?

On 06/28/2010 10:51 AM, Volker Lendecke wrote: On Mon, Jun 28, 2010 at 10:37:28AM -0500, Gerald Carter wrote: Sort of correct. But these are specific OU cells and not a forest wide cell. At the risk of digressing into a Likewise specific thing, an OU cell stores the meta data for objects in

Re: [Samba] Does anybody use idmap_adex?

(sorry...I keep sending from my work address which is not subscribed to the lists) Hey Simo, On 06/28/2010 10:29 AM, simo wrote: Ok, for some reason I thought information was maintained on your side of the trust using the cells. Sort of correct. But these are specific OU cells and not a for

Re: [Samba] Does anybody use idmap_adex?

On 06/28/2010 10:13 AM, simo wrote: There's some confusion here. The idmap_adex() doesn't have anything to do with Likewise Cells. It's just an rfc2307 idmap module with support for domain trusts. The comments in the code are misleading only because it was derived from my original code at Lik

Re: [Samba] Does anybody use idmap_adex?

Hey Volker, On 06/28/2010 10:07 AM, Volker Lendecke wrote: Part of what I want to test is possible changes to for example the routine _nss_adex_get_info(). This has code like { NTSTATUS nt_status; struct likewise_cell *cell; nt_status = _idmap_adex_init(NULL, NULL);

Re: [Samba] Does anybody use idmap_adex?

On 06/28/2010 09:42 AM, Volker Lendecke wrote: Hi! $SUBJECT says it all. Why am I asking? A few times in the recent past I've stumbled across this module when trying to make changes in the winbind infrastructure that would involve changes to idmap_adex. The problem here is that I have no chance

Re: [Samba] Samba, and NFS. lag?

Nathan Lager wrote: > Afternoon! > I have a samba server, which shares out an NFS mounted share. It seems > that everything works rather well, except that i get some lag when > modifying a file. If i share a directory which is local to the samba > server, no lag, everything works perfectly. Howe

Re: [Samba] idmap_rid/idmap_hash collisions?

Robert LeBlanc wrote: > So if I understand right, hash does not hash the SID, it does the > same as rid and takes the last section directly from the SID > and uses that withou modification (rid adds that number to the > lower range number). idmap_hash *does* the SID. cheers, jerry signat

Re: [Samba] idmap_rid/idmap_hash collisions?

Robert LeBlanc wrote: >> There's a slide or two outlining the algorithm in this slide deck >> from LInuxWorld SF '08 >> >> > > How does this compare with idmap hash? It's the same thing algo

Re: [Samba] idmap_rid/idmap_hash collisions?

Nick, Gerald Carter wrote: > Hey Nick, > > Nick wrote: >> Is it possible for the uid/gid numbers that are generated by the >> idmap_rid and idmap_hash to collide if there are a large number of >> users or groups? I cannot seem to find any documentation on the >

Re: [Samba] idmap_rid/idmap_hash collisions?

Hey Nick, Nick wrote: > Is it possible for the uid/gid numbers that are generated by the > idmap_rid and idmap_hash to collide if there are a large number of > users or groups? I cannot seem to find any documentation on the > limitations of these plugins. Before using I want to make absolutely >

Re: [Samba] Convert idmap_rid to idmap_hash?

Robert, Robert LeBlanc wrote: > I was looking through the change log of 3.3.0 and noticed that a new > idmap_hash was introduced that seems to play well with trusted domains. What > means are available to convert all my rids to this new hash so I can update > file permissions? You mean updating t

Re: [Samba] net rpc rights grant: NT_STATUS_ACCESS_DENIED

Hey Adam, >> Use 'net sam' to add the user in question to the BUILTIN\Administrators >> group on your Samba host. >>> # /usr/local/samba/bin/net rpc rights grant testpc1 >>> SePrintOperatorPrivilege -U testpc1 >>> Failed to grant privileges for testpc1 (NT_STATUS_ACCESS_DENIED) > > Oh, so does 'n

Re: [Samba] net rpc rights grant: NT_STATUS_ACCESS_DENIED

Ryan Suarez wrote: > Thanks, it worked for me! Looks like the local BUILTIN\Administrators > has all those rpc rights granted by default. Correct. Glad things are working now. cheers, jerry signature.asc Description: OpenPGP digital signature -- To unsubscribe from this list go to the fo

Re: [Samba] net rpc rights grant: NT_STATUS_ACCESS_DENIED

Hey Ryan, > The samba host is a domain member server (security=ADS) > with winbind for user accounts. Where is this user rights > database stored and what is the tool to assign admin privileges? Use 'net sam' to add the user in question to the BUILTIN\Administrators group on your Samba host.

Re: [Samba] net rpc rights grant: NT_STATUS_ACCESS_DENIED

Ryan, > hmm, the best option for me is to ask the AD administrator to grant the > samba SePrintOperatorPrivilege directly to the user object in Active > Directory. Where is this added in AD and what is this privilege called? The user rights database is maintained in Samba's passdb. If you are g

Re: [Samba] Keeping a list of NetBIOS names on a network?

John H Terpstra - Samba Team wrote: > On 08/17/2009 12:53 PM, Matthew Dempsky wrote: >> I'm trying to make some DNS server software aware of NetBIOS names on >> the local network. Is there an easy and efficient way using Samba to >> keep track of what NetBIOS names are present? >> >> Thanks. > >

Re: [Samba] Difference in Samba and CIFS interms of keeping the deleted files opened

Nikhil, > I looked at the enabling kernel oplocks in the samba configuration file and > I have enabled "kernel oplocks = yes" in the [global] section on both of > Linux-2.6.18-92 and Linux-2.4.21-47.0.1.ELsmp kernel machines running the > samba and I notice that the behaviour is not as what is sai

Re: [Samba] New certs on {lists,bugzilla}.samba.org

Hey Jeremy, > On Thu, May 28, 2009 at 12:05:00PM -0500, Gerald Carter wrote: >> I've installed new certs on the mailman and bugzilla servers. >> Both are signed by the Samba CA >> >> http://us1.samba.org/samba/ftp/Samba_CA.crt > > Thanks a *lot* for this

[Samba] New certs on {lists,bugzilla}.samba.org

I've installed new certs on the mailman and bugzilla servers. Both are signed by the Samba CA http://us1.samba.org/samba/ftp/Samba_CA.crt cheers, jerry -- = http://www.plainjoe.org/ "What man is a man who does not make the

Re: [Samba] parameter default devmode missing in man pages and other docs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey Ray, > would it make sense to for the developers to pull in some > code from the wine or winelib projects to take care of > device mode issues. I've replaced a few printers recently > with ones for which I can't set up point and print with samba

[Samba] Upgrading cert on lists.samba.org and bugzilla.samba.org later today

Fyi The bugzilla cert expired today. Will be issuing a new one in the next 24 hours. cheers, jerry signature.asc Description: OpenPGP digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] User friendly URLs to shares

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jorgen, > \\host\share and file://host/share don't seem to work, and has nowhere > for the username part to be included. You can encode the username as an arg in the "net use * \\host\share /user:DOMAIN\username" cheers, jerry - -- ===

Re: [Samba] Fox Pro DBF open problems

spot any pattern it's driving my users crazy. Below is the smb.conf any help and or suggestions would be greatly appreciated thanks! Look at: http://www.drouillard.biz/Tips&Tricks/Samba/Oplocks.htm -- Regards ------ Gerald Drouillard Technology Archit

Re: [Samba] MS Access 2007 files corrupted with 3.3.2

k at: http://www.drouillard.biz/Tips&Tricks/Samba/Oplocks.htm -- Regards ------ Gerald Drouillard Technology Architect Drouillard & Associates, Inc. http://www.Drouillard.ca -- To unsubscribe from this list go to the following URL and read the in

Re: [Samba] Question about BUILTIN\Administrators and BUILTIN\Users nested groups in 3.3.3

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dorrian, William M wrote: > Anyone have any input? I think I'm just missing > something simple here... > > -Original Message- > From: samba-bounces+william.m.dorrian=usace.army@lists.samba.org > Sorry about the dumb question: > > Are t

Re: [Samba] Problems with idmap_adex module

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey Ross, > I'm having problems getting the new idmap_adex module to work. Sorry about that. > When using the idmap_adex plugin I get the following: > > # wbinfo -n administrator > S-1-5-21-X-XX-XX-500 User (1) > # wbinfo -i

Re: [Samba] map hidden only for files?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey Andrea, > do "map hidden" parameter works only for files and not > for directories? Correct. Look at "store dos attributes" for complete attribute support for both files and directories. Much better solution. cheers, jerry - -- ==

[Samba] Re: Saturday, Mar 14 - {git, wiki, bugzilla}.samba.org down for maintenace until 17:00 GMT-5 today

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gerald (Jerry) Carter wrote: > Folks, > > Apologies for the short notice. I had sent a message to the > rest of the team earlier this week but forgot to post here. > > The server providing git, wiki & bugzilla for samba.org

[Samba] Saturday, Mar 14 - {git, wiki, bugzilla}.samba.org down for maintenace until 17:00 GMT-5 today

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Folks, Apologies for the short notice. I had sent a message to the rest of the team earlier this week but forgot to post here. The server providing git, wiki & bugzilla for samba.org will be offline for maintenance until 17:00 GMT -5 today. Thanks

Re: [Samba] Trust Question.

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Linux Addict wrote: >winbind offline logon = Yes >idmap config DOMAIN1:range = 20 - 29 >idmap config DOMAIN1:backend = rid >idmap config DOMAIN2:range = 10 - 19 >idmap config DOMAIN2:backend = rid

Re: [Samba] List search question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Troy Heidner wrote: > Hello everyone, > > I'm a new member here at Samba lists. I've been a lightweight Samba user > for several years, but now I am investigating replacing our Active Directory > domain with a pure Samba domain. I already have a few

Re: [Samba] Docu for Winbind using userprincipalName (UPN)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Carsten Witt wrote: > Where can I find a howto configure using UPN for Winbind? You don't need to do anything special for "getent passwd u...@realm" to work (and hence user logins via pam_winbind as well. But this is only supported in a native mode

Re: [Samba] To make winbindd upset and unresponsive (3.2.6)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Frank Burleigh wrote: > This simple and often-suggested command to test Samba: > > getent passwd > > reproducibly upsets winbindd on my SLES 10 SP1 machine. > [global] ... > winbind enum users = Yes > winbind enum groups = Yes

Re: [Samba] _Truly_ disabling trusted domains?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Adam wrote: > Hey Jerry, > > I just checked, these changes are in none of the branches > master, v3-3-test, v3-2-test. Do you want to push them or > do you want me to do it? I think this definitely should > be in! Either way is fine. I just

Re: [Samba] _Truly_ disabling trusted domains?

GIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJT5kgIR7qMdg1EfYRAoZSAKDbR45MTOWwhuOcsTOJ4weMdfv9owCfUioL bF4kwk9p/PjerzN8+il46p8= =7fGD -END PGP SIGNATURE- >From 695addd1eb9324d50ef87bc8c8ed5b8eb351fb19 Mon Sep 17 00:00:00

Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex Green wrote: > Looks fine... :)... chances this makes it into the main stream > for vendor adoption? Yeah. I don't do anything that doesn't go upstream. Unless it is really ugly. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG

Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex Green wrote: > :)... so command-line or config option do'able? Yeah. I'll see what I can do. Command line option probably. $ net ads join --disable-dns-update Look ok ? If so, I'll see if I can find some time real soon now. cheers, jer

Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex Green wrote: > Cross-wires (.) > > AD record update (SPN or DNS) failing absolutely the right thing to do ... no > question. > > DDNS Fail - disable option would be good ... only > talking about this... not the AD bit... Ahh..ok. gotcha

Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex, > 3.0.28 and 3.0.32 - Native OS version shipped by Novell(Linux) and > Sun(Solaris) > > Failing is the right thing to do in an MS-DNS/AD-Integrated > environment, however for non-MS DNS environments disabling is > going to be cleaner. Failin

Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex Green wrote: > :)... it's this non-fatal error that our uses are getting > confused about and it's this that I was asking for the cli > option for... For the DDNS update we can add a disable run time option. For setting the attributes, failing i

Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex Green wrote: > Hey Jerry, > > I'm aware of that. Due the restrictions placed within our AD > environment, even users who have access to create computer > objects don't have access to update the SPN or the > host DNS name (AD record). > > Addit

Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex Green wrote: > Found the issue: > > Validate Write for DNS and SPN were not set. > > However it now fails on DNS Update; I'm presuming > this is because we're not using AD Integrated DNS (MS-DNS). > Could this not be an option flag to disable D

Re: [Samba] template homedir question

medir for. Variable substitution happens after I munge the homedir > string so, any suggestions on where I can get the username would help. > > Thanks, > Derek > > On Dec 2, 2008, at 11:04 AM, Gerald (Jerry) Carter wrote: > > Derek Harkness wrote: >>>> Hello All,

Re: [Samba] Problems joining a domain with a large number of DCs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Volker Lendecke wrote: > On Tue, Dec 02, 2008 at 11:07:15AM -0600, Gerald (Jerry) Carter wrote: >> This is the commit >> http://gitweb.samba.org/?p=samba.git;a=commitdiff;h=af33c8b3521564c229091f197341ba33a7d6f162 >> >

Re: [Samba] Problems joining a domain with a large number of DCs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Eric Diven wrote: >>> I hate to drag this one up again, but I'm having issues with that >>> snapshot of 3-0-test (smbd crashing, can't pin it to >> anything). Are >>> the fixes actually in 3.0.33, or do I need to get a more recent >>> version of 3

Re: [Samba] template homedir question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Derek Harkness wrote: > Hello All, > > I'm integrating an existing unix environment into an exist AD > environment. I'm thinking of switching from nssldap to nss_winbind but > have one problem. My user's home directories are in the format of > /home

Re: [Samba] Problems joining a domain with a large number of DCs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Eric Diven wrote: >> You might want to use the latest git checkout of 3-0-test, >> for example available via >> >> http://repo.or.cz/w/Samba.git?a=snapshot;h=af33c8b3521564c;sf=tgz >> >> as there have been fixes for the server affinity cache during jo

Re: [Samba] Print Operator Rights in AD environment

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey Derek, Derek Harkness wrote: > net sam addmember gives me "Adding local group member failed with > NT_STATUS_NO_SUCH_ALIAS". $ net sam createbuiltingroup Administrators You will need to configure a valid 'idmap alloc backend' for this. > I ad

Re: [Samba] Print Operator Rights in AD environment

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Derek Harkness wrote: > I am attempting to set the SePrintOperatorPrivilege right on my RHEL 5.2 > samba server and need some guidance. The samba box is currently joined > to an AD forest in which I have a delegated OU, I do not have a Domain > Admin

Re: [Samba] Why does the server want to connect to a client

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc Muehlfeld wrote: > Hi, > > I have 5 of 140 Windows XP SP2/SP3 machines that make problems when > printing. The client open the printer dialog and it takes a long time > (up to 1 minute) before it appears. Printing is slow, too. Meanwhile I > see

Re: [Samba] string_to_sid: Sid MYDOMAIN\mygroup does not start with 'S-'.

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Eric, Robinson, Eric wrote: >>> QUESTION: It looks to me as though this function is designed to >>> convert a string such as MYDOMAIN\user into a SID starting with S-. > >> No. it is to convert a SID char * string (S-1-) to a binary >> SID r

Re: [Samba] string_to_sid: Sid MYDOMAIN\mygroup does not start with 'S-'.

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robinson, Eric wrote: > I've been struggling for almost 2 weeks to get Samba working on two new > servers. > > When I try to open a Samba share from a Windows 2003 computer, I always > get a logon challenge. I always get the following lot message > >

Re: [Samba] samba authentication PAM/LDAP

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 vishesh kumar wrote: > Does NT hashes require even if we use kerberos for authentication?. I don't understand the context of this question. A Samba 3 DC does not support kerb5 auth. So you can only use the NTLM authentication (which requires the N

Re: [Samba] The way things used to work...

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dragan Lukic wrote: > So, 18 days and 375 posts later. no answer to my question? > > Looks like I just want impossible: simple share with no limits, but with > local > user permissions for remote users. And NO I do not wish to use user level >

Re: [Samba] klist versus kadmin

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 degbert degbert wrote: > I'm having a problem with kadmin not doing what klist says should work. > > klist will show my keytab file (with minus k), but when I try and use > a principal in that keytab with kinit, I get an error: > kinit(v5): Client no

Re: [Samba] Questions about known bugs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 john darnell wrote: > I need to find a source for discussing known bugs in Samba. Is this a > good place, or should I go elsewhere? This is the best place. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Usi

Re: [Samba] winbindd consuming 99% CPU

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sagar Borikar wrote: > Hi All, > > We are currently caught up in a weird situation while using samba > 3.0.28. There is a requirement from the customer that we should support > ADS with 64000 objects. When we implemented the feature, we found > coupl

Re: [Samba] Samba 3.2, Samba 3.3 release planning

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Adam wrote: > If I am not completely wrong, this had been decided as well > as follows: A release will reach EOL when the next release > goes into maintenance mode, i.e. when the second next release > comes out. With the aimed release cycle of

Re: [Samba] Multiple IP addresses in DNS record

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jarrod Hyder wrote: > Here is the debug output of "net ads dns register -P -d 10". I can't really > make heads or tails of it, but I also don't see either of the IP addresses > that are getting registered on the domain. If you could take a look at it

Re: [Samba] Samba 3.2, Samba 3.3 release planning

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 William Jojo wrote: > >> I love that releases are moving very quickly now. My only > concern is keeping up with and determining what is appropriate > as I continue to maintain AIX binaries on my web page. > >> Presently I have already dropped the 3.

Re: [Samba] Samba 3.2, Samba 3.3 release planning

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andreas Ladanyi wrote: > Is samba 3.2 development stopped and all concentration > given to Samba 3.3 ? Because there isnt any further release > note available for 3.2, but instead there are some notes for 3.3 ? Any future Samba 3.2.x release will be

Re: [Samba] Print server communications back to the client during printing

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ryan Novosielski wrote: > I didn't really mean "is there a benefit to supporting this," I meant > more that if my clients are currently blocking the traffic coming back > from the server, is there a tangible benefit I could expect from getting > that

Re: [Samba] Print server communications back to the client during printing

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Taylor, Marc wrote: > Hello All, > > I was wondering if anyone knows why a print server needs to talk back on > the submitting client's ports 139 or 445? It's Microsoft's async print change notification protocol. Jeremy had talked about adding a sep

Re: [Samba] winbind does not list users from trusted domain

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marco Senft wrote: > Hello all. > > I've set up a testing environment with two Windows DCs. The first, > called DCA, is serving the domain DOMA and is running Windows 2003. The > second is called DCB and serves DOMB on Windows 2008. What version of S

Re: [Samba] problems connecting to https list server

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Mathog wrote: >> No. Not a self-signed cert. We run our own CA. but the reason >> for the mesg is that the brower has an old expired cert from >> a samba.org addess left around. >> >> I should really get around to fixing this >> > > In the m

Re: [Samba] problems connecting to https list server

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John H Terpstra wrote: > On Thursday 09 October 2008 11:27:10 David Mathog wrote: >> When I attempt to contact the server for this list >> >> https://lists.samba.org/ >> >> with Seamonkey or Mozilla it refuses and puts up a message: >> >> ! >> Yo

Re: [Samba] Samba/Winbind join domain requires password at every reboot?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tobias Skytte wrote: > Hi, > > I have set up samba to join a windows domain (and everything works > great, domain users can authenticate on the linux box, it even creates > their home dirs and so on) but it seems to require joining to the domain > eve

Re: [Samba] Another getent problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clark Johnston wrote: > I have set up a system to be a member server and installed the samba > rpms. I then copied over the samba config file and changed it to > reflect the new shares and name change. I ran 'net rpc join - > UAdministrator%'secret'

Re: [Samba] Re: smbclient kerberos issue

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ryan Bair wrote: > This seems to be related to this entry on the list in 2004-2005. As > far as I see, the issue was never fixed. This is a pretty big issue if > it is indeed the same bug as it effectively stops *nix clients from > using Kerberos authe

Re: [Samba] Samba 3.2.1 not detecting interface in Solaris 10 x86

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jake Carroll wrote: > Hi Remy, > > Thanks for the reply. This was just a trivial example, but yes - I have > it set up as nge1, as it stands, as this is the particular interface I > use for filesharing tasks. > > I've also tried specifying an IP addr

Re: [Samba] Will 3.3.x vs 3.2.x

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim Shanks wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> Jim Shanks wrote: >>> Hi All, >>> >>> Just a quick question: Will 3.3.x replace 3.2.x as the production use >>> branch? We're still using 3.0.28 and up on our systems and jus

Re: [Samba] Will 3.3.x vs 3.2.x

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim Shanks wrote: > Hi All, > > Just a quick question: Will 3.3.x replace 3.2.x as the production use > branch? We're still using 3.0.28 and up on our systems and just want to > know if evaluating 3.2 is the right step, or wait for 3.3. We are movi

Re: [Samba] PID-File smbd/nmbd

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: >> This was a patch specifically added by request IIRC. >> >> commit e8bf421c018ed829b9dba7c0872693080b77d49d >> Author: Jeremy Allison <[EMAIL PROTECTED]> >> Date: Thu Nov 2 09:37:52 2006 + >> >> r19533: Add a

Re: [Samba] PID-File smbd/nmbd

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: > Dear list, > > I just stumbled over a configuration issue that I seem to remember > not to be there in 3.0.20 (when I built up my configuration). > > The pid file name is built including a suffix specifying the > configurat

Re: [Samba] On way trust issue

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ephi Dror wrote: > Hello, > > Pam based authentication is failing for trusted > domain users when the trust was set to one way. One way trust support for Winbind was introduced in Samba 3.2.0 What version are you running ? cheers, jerry - -- ==

Re: [Samba] large smb.conf file

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: > Hello ! > > regarding that issue where reloading of smb.conf > causing high system load due to high number of share > definitions and smbd processes - does that still > apply like being reported in 2005 ? Should be long fi

Re: [Samba] Very Slow!

ill very depending on your switches and network cards. For more look at a discussion at: http://www.readynas.com/forum/viewtopic.php?f=21&t=8462&st=0&sk=t&sd=a&hilit=samba+vista+performance&start=165 -- Regards ------ Gerald Drouillard

Re: [Samba] nested group support still broken in 3.2.2?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jason Haar wrote: > Hi there > > I've just upgraded to 3.2.2 and it still looks like nested group support > isn't finished? > > e.g. if I have "domain1/user1" in group "domain2/group1" and that in > turn is in "domain3/group2" (i.e. domain1/user1 is

Re: [Samba] Howto control ssh logins with winbind ?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andreas Ladanyi wrote: > Hi, > > with NIS the "compat" Mode in /etc/nsswitch.conf was > available. So you could exclude user/group from login to > the host. I read this mechanism is not possible > with winbind. If you are using pam_winbind, look at

Re: [Samba] Winbind and Global Catalog

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sven Anders wrote: > Gerald (Jerry) Carter schrieb: >> Sven, >> >>> Does winbind work with a Global Catalog? >> Winbind does not rely upon global catalog. I added >> some search APi recently for GC support but t

Re: [Samba] User's groups issue

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ephi Dror wrote: > Hello again, > > I looked at the code and found out that really the > only way to have accurate group membership info is > if one of the following functions are called: > > In winbindd_pam.c: > > 1. winbindd_dual_pam_auth() > 2.

Re: [Samba] User's groups issue

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ephi Dror wrote: > Hello Jerry, > > Thank you for your quick reply. > > Actually, for us, the user does not login but we > need to know all the groups that a given user > belongs to so we use "id username" > > So my question is, if the user doesn't

Re: [Samba] User's groups issue

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ephi Dror wrote: > Hello, > > I'm using samba 3.0.31 and seems to have an issue > with getting user's groups info. > > It works like a Swiss Watch when I start winbindd and > do "id username" for a given user however, if I add that > user to one mo

Re: [Samba] Winbind and Global Catalog

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sven, > Does winbind work with a Global Catalog? Winbind does not rely upon global catalog. I added some search APi recently for GC support but there are not currently being used. > To be more specific, I have the following scenario: > > 1. On

Re: [Samba] Samba 3.0.32 Maintenance Release Available

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Adam Williams wrote: > Have any of the samba developers had a chance to look at my bug I > submitted a few weeks ago? > > https://bugzilla.samba.org/show_bug.cgi?id=5627 > I'll take a quick look right now. cheers, jerry - -- ===

Re: [Samba] [ANNOUNCE] Samba 3.3.0pre1 Available for Download

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian McHugh wrote: > As a lowly admin I can only beg: Has anyone looked at forward porting the > patch from bug 3661? It would make my life much easier, and looks like it > might close bugs 3661, 5363, and maybe 4069. > > Problem seems to be t

[Samba] Samba 3.0.32 Maintenance Release Available

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 == "Do you realize how hard it is to fake your own death? Only one person has pulled it off, Elvis." - Fox Mulder

Re: [Samba] Add winbind user to local unix group?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sledz, Steffen wrote: > I wan't to add some winbind authorized domain users to the local unix > group "uucp" to give them access to some test equipment connected to > serial ports (e.g. using minicom). I tried to add their UIDs > (1...) to the uucp

Re: [Samba] Re: ldapsearch and getent passd/group with nss winbind differs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andreas Ladanyi wrote: > Ok ! Could it be true this behavior is different between > "security=domain" and "security=ads" ? > > Because we had to put the user to the group: > - first on windows side in ActiveFirectory > - second on unix site in AD in

Re: [Samba] Authenticating Linux boxes against Active Directory, using Samba as a sort of AD Proxy

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Alex Davies wrote: >> Hi Everyone, >> >> I'm trying to find a open source solution to authenticate a bunch of >> Linux machines (and, ideally, network devices etc.) against Active >> Directory, as unfortunately in our organization this is the primary

Re: [Samba] Re: ldapsearch and getent passd/group with nss winbind differs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andreas Ladanyi wrote: > Winbind honors the Windows group membership and not > necessarily "msSFU30PosixMemberOf" attributes. > >> So it should be enough if you give the Windows group a GID in tab "UNIX >> attribute" in Active Directory and you have

Re: [Samba] ldapsearch and getent passd/group with nss winbind differs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andreas Ladanyi wrote: > Hi, > > after deleting winbindd_idmap and winbindd_cache.tdb files: > > For security =domain AND security=ADS ! > > wbinfo -u /-g /-t are ok ! > > getent passwd is ok. > > getent group shows different group memberships as

Re: [Samba] minimal configuration for custom RPC?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel Trupinsky wrote: > I'm working on a system that needs secure communications between multiple > hosts, some of which are Linux and some of which are Windows, and all hosts > need to serve as both clients and servers. I wanted potentially to use

Re: [Samba] [ANNOUNCE] Samba 3.2.1 Available for Download

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Adam wrote: > George R. Kasica wrote: >>> On Wed, 06 Aug 2008 08:01:40 -0700, you wrote: >>> Michael Adam wrote: >>> That is right: the link creation in source/bin is fixed, but the installation of the links is still broken.

Re: [Samba] net ads join - DNS Update failed !

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andreas Ladanyi wrote: > Hi, > > it seems that all is working perfectly, but if start an "net ads join" i > get the message "DNS Update failed !" . > > What is the consequence if i dont care about this message ? Is the Samba > Server (ADS member) onl

Re: [Samba] samba print server client job queues.

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Jeter wrote: > Hello, > I'm working on setting up a corporate print server with samba > 3.2.0-2.17 on a Fedora 9 install. I've been able to get the services up > and running and added several printers via the cups interface, also > been ab

Re: [Samba] Printer driver interface different

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matthew Forrest wrote: > >> Does this driver contain a file names UNIDRV.DLL ? It's probably a >> difference in behavior between EMF and RAW printing. >> > > It doesn't contain UNIDRV.DLL > It looks like it uses the generic windows PS driver PSCRIPT

Re: [Samba] Machine-level shares on Windows server

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeremy Evans wrote: > I realise that. I *did* give a 2nd example in my original post: > > $sudo smbclient -P -L //sbs > ERROR: Unable to fetch machine password > > > "net ads testjoin" returns an OK result at my end & the PDC shows the > machine as

Re: [Samba] winbindd behaving oddly

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Glenn Bailey wrote: > Ok wow, > > Looks like the likewise solution is exactly what I've been looking > for, as I've been developing an internal solution that was basically > a stripped down samba that wouldn't conflict with any other existing > samba

Re: [Samba] Printer driver interface different

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ryan Novosielski wrote: > Had the same problem with the Aficio 350. You can just install the > driver locally and not use the Samba spool at all (direct IP printing). > That seems to be the best angle with my device. It's a shame, because it > really o

  1   2   3   4   5   6   7   8   9   10   >