Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Hoover, Tony
We are using pGina (pgina.org) for lab logins. pGina is a pluggable authentication system, similar to PAM except for Windows. pGina allows us to separate the user authentication from the account information. User credentials are checked against LDAP, MySQL, or other authentication source. If cr

Re: [Samba] About NAS versus Samba

2013-07-11 Thread Hoover, Tony
I've had experience with a Western Digital "MyBook Live DUO", and it does NOT support any type of network authentication. Users must be created and deleted on that device. --- CONFIDENTIALITY WARNING: Pseudo-legal disclaimers do not buy you or your employer any legal recourse for leaked informa

[Samba] Migrate samba3.5 classic domain to Windows2008R2

2012-12-20 Thread Hoover, Tony
I have a Samba 3.5.20 domain controller that provides logins and profiles for our Windows XP computer labs on campus. In earlier testing, we encountered performance issues with Windows 7 logins. Although that has now been resolved, management is discourged from continuing to use Samba as a domain

Re: [Samba] Yet another Win7 failing to join the domain...

2012-06-06 Thread Hoover, Tony
CentOS 5 does have a newer samba available. To get it: yum remove samba yum install samba3 or to get really fresh samba, use the SerNet repos. --- CONFIDENTIALITY WARNING: Pseudo-legal disclaimers do not buy you or your employer any legal recourse for leaked information. E-mail messages shou

Re: [Samba] Installing Samba on RedHat Linux 5.3

2012-05-16 Thread Hoover, Tony
ot;. -Original Message- From: Johansson, Ronnie [mailto:ronnie_johans...@europ-assistance.co.uk] Sent: Wednesday, May 16, 2012 2:54 AM To: Hoover, Tony Subject: RE: [Samba] Installing Samba on RedHat Linux 5.3 Hi Tony, Many thanks for your help! Today we've got connected to RHN and I foll

Re: [Samba] unknown files of samba server

2012-05-07 Thread Hoover, Tony
I believe that is a print job. since the date is a couple month old, and the size is zero, I believe that it would be safe to delete. --- CONFIDENTIALITY WARNING: Pseudo-legal disclaimers do not buy you or your employer any legal recourse for leaked information. E-mail messages should never co

Re: [Samba] Installing Samba on RedHat Linux 5.3

2012-04-29 Thread Hoover, Tony
first, configure yum to use the sernet samba repos. (you will need to be "root") - cd /etc/yum.repos.d - wget http://ftp.sernet.de/pub/samba/3.6/rhel/5/sernet-samba.repo - yum install samba3 a periodic "yum update" (we use a cron job) will keep your system up to date, including Samba if you use

Re: [Samba] Upgrading from 3.2 to 3.5

2012-04-24 Thread Hoover, Tony
When upgrading major versions of Samba, do a "testparm -v" before and after. Parameters sometimes change default values, so having a complete list of the active parameters will help debug any problems. -- Tony Hoover, Network Administrator KSU - Sali

Re: [Samba] wireless

2011-12-14 Thread Hoover, Tony
We have multiple wireless VLANs. a guest wireless that only allows web browsing and e-mail to off-campus servers, a student wireless network that allows access to student resources, and an administrative wireless network that allows access to the administrative (business process) resources. the s

Re: [Samba] Samba for Mac OS X

2011-09-20 Thread Hoover, Tony
Samba is not a protocol. SMB is the protocol, and the protocol is "owned" by Microsoft. Samba is an open source package that implements a SMB server. It doesn't matter what kernel, or OS you are using, you can build Samba from the source code to run on your platform. As for the front-end... hav

Re: [Samba] basic LDAP authentication to Samba share from existin g directory

2011-06-30 Thread Hoover, Tony
We use pGINA (www.pgina.org) to authenticate windows user logins via ldaps:// against the university directory. Don't know if that will fit your model, but it works for us. -- Tony Hoover, Network Administrator KSU - Salina, College of Technology and A

Re: [Samba] Please quit publishing my e-mail address

2011-04-07 Thread Hoover, Tony
ation (785) 826-2660 "Don't Blend in..." -- -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Hoover, Tony Sent: Thursday, April 07, 2011 10:21 AM To: supp...@omgili.com Cc: s

[Samba] Please quit publishing my e-mail address

2011-04-07 Thread Hoover, Tony
Due to a up-tick in the amount of SPAM my account has been receiving, I googled my e-mail address, and discovered that my e-mail address, along with the e-mail addresses of many subscribers to the SAMBA mailing list (samba@lists.samba.org) are being published in a harvestable form on your website.

Re: [Samba] [Announce] Samba 3.5.7, 3.4.12 and 3.3.15 Security Re leases Available

2011-03-18 Thread Hoover, Tony
When I upgrade a major revision (3.4.x -> 3.5.x ), I always get a listing from "testparm -v" before and after the upgrade to make sure that a parameter (that I didn't specify in the config) didn't change it's default setting. -- Tony Hoover, Network Ad

Re: [Samba] samba and the Internet discussion

2011-01-05 Thread Hoover, Tony
;Don't Blend in..." -- -Original Message- From: Volker Lendecke [mailto:volker.lende...@sernet.de] Sent: Wednesday, January 05, 2011 9:36 AM To: Hoover, Tony Cc: "Mössler, Michael"; samba@lists.samba.org Subject: Re: [Samba] samba and the Internet discussion On We

Re: [Samba] samba and the Internet discussion

2011-01-05 Thread Hoover, Tony
If you trust EVERYONE on the internet, yes you could use Samba on the internet without using a VPN. Since everyone on the internet is not trustworthy, it is not a wise idea. -- Tony Hoover, Network Administrator KSU - Salina, College of Technology and

Re: [Samba] log level = 20 not showing auth, etc...

2011-01-04 Thread Hoover, Tony
I believe that the max log level is 10 (e.g. you are setting an invalid value). Someone will correct me if I'm wrong, I'm sure. -- Tony Hoover, Network Administrator KSU - Salina, College of Technology and Aviation (785) 826-2660 "Don't Blend in..."

Re: [Samba] Printer Driver Delivery - Printing Preferences Error

2010-12-01 Thread Hoover, Tony
The Xerox Work Centre print drivers do a LOT of server registry stuff (during the print process). I could never get them to function reliably on a samba server. However, using either the "HP universal drivers" for PCL output or the CUPS driver for Postscript output, I was able to make the Xerox p

Re: [Samba] Windows 7 problem accessing domain member samba serve r on different subnet

2010-12-01 Thread Hoover, Tony
We recently ran into a similar issue. If you have any microsoft "Live" components installed on your 7 box, samba servers must be contacted by numeric IP address rather than netbios (or even IP mnemonic) name. http://www.sevenforums.com/network-sharing/8303-cant-connect-samba-share-via -name-ip-wo

Re: [Samba] AD member server - getting a user's name (GECOS)

2010-11-04 Thread Hoover, Tony
I'll bet a simple LDAP query will retrieve the data you are looking for. -- Tony Hoover, Network Administrator KSU - Salina, College of Technology and Aviation (785) 826-2660 "Don't Blend in..." -- -Ori

Re: [Samba] When im login the error: "A device attached to the sy stem is not functioning"

2010-06-04 Thread Hoover, Tony
It looks to me like you have "ldap user suffix" and "ldap machine suffix" defined twice. testparm should tell you which of these definitions samba is using. Tony Hoover, Network Administrator KSU - Salina, College of Tec

Re: [Samba] unable to join to a Samba4 domain

2010-05-20 Thread Hoover, Tony
Try adding these SRV entries to your DNS server: --- _ldap._tcp.samba4.my.domain. INSRV00389 ldapserver.samba4.my.domain. _ldap._tcp.dc._msdcs.samba4.my.domain.INSRV00389 ldapserver.samba4.my.domain. _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba4.my

Re: [Samba] Any pitfalls updating straight from 3.0.34 to 3.5.2?

2010-04-16 Thread Hoover, Tony
#x27;t Blend in..." -Original Message- From: ray klassen [mailto:julius_ahenobar...@yahoo.co.uk] Sent: Friday, April 16, 2010 1:04 PM To: Hoover, Tony Subject: Re: [Samba] Any pitfalls updating straight from 3.0.34 to 3.5.2? Wow. Thanks. Is there any quick way d

Re: [Samba] Any pitfalls updating straight from 3.0.34 to 3.5.2?

2010-04-16 Thread Hoover, Tony
Some entries in your smb.conf have changed default values. Get a listing from "testparm -v" before and after to be able to work around those details. Also, IIRC, With the newer samba 3 packages (starting around 3.3), you need to have a correctly configured krb5.conf file. -

Re: [Samba] samba with ldap + windows AD can work together?

2010-01-09 Thread Hoover, Tony
A couple years ago when I migrated my NT4 domain to Samba, I had to re-establish the trust relationships with the other domains after the migration. Other than that, the migration was rather uneventful. On Wed, 2010-01-06 at 23:39 -0600, Alberto Moreno wrote: > Hi people. > > I have 2 domai

Re: [Samba] Cannot connect from Windows 2000 to Samba 3.4.0 on Li nux ....

2009-09-01 Thread Hoover, Tony
Some default setting have changed. Use: testparm -v from your various versions of samba to detect which parameters may be causing you issues. Tony Hoover, Network Administrator KSU - Salina, College of Technology and Avia

Re: [Samba] most common way to implement 'net time' privileges

2009-08-24 Thread Hoover, Tony
Use "user manager for domains" from the NT admin tools. select the correct domain (if not already selected). Select "Policy" -> "User Rights" Select the right: "Change the system time" Click "Add..." then select "Domain Users" ---

Re: [Samba] winbind and getent

2009-07-30 Thread Hoover, Tony
Have you configured your /etc/krb5.conf file? Tony Hoover, Network Administrator KSU - Salina, College of Technology and Aviation (785) 826-2660 "Don't Blend in..." --

Re: [Samba] How to use local profiles in samba PDC?

2009-07-28 Thread Hoover, Tony
logon path = will disable automatic roaming profile settings. You can still define roaming (or mandatory) profiles on a per user basis using "user manager" from the NT admin tools. Tony Hoover, Network Administrator KSU

[Samba] Kerberos issue after upgrade

2009-07-02 Thread Hoover, Tony
I recently upgraded samba on a domain controller from samba3-3.3.4-39.el5 to samba3-3.3.6-39.el5 (from SerNET on a CentOS 5.3 box), and the interdomain trusts between the samba domain and my AD domain quit working. The /var/log/samba/wb-ADDOMAIN file was full of this message: [2009/07/02 09:19:5

Re: [Samba] Is the net rpc vampire at all destructive to a NT4 PD C?

2009-03-24 Thread Hoover, Tony
"net rpc vampire ..." does NOT set the SAM or SECURITY hives of the registry to "readable", which is what renders the PDC non-operable. "net rpc vampire ..." is safe to use as many times as it takes to get comfortable with the process. I did it my self when I was converting our "labs" NT4 domain

RE: [Samba] regshell only goes to HKEY_CLASSES_ROOT

2009-01-16 Thread Hoover, Tony
-2660 "Don't Blend in..." -Original Message- From: samba-bounces+hoover=sal.ksu@lists.samba.org [mailto:samba-bounces+hoover=sal.ksu@lists.samba.org] On Behalf Of Hoover, Tony Sent: Friday, Januar

RE: [Samba] regshell only goes to HKEY_CLASSES_ROOT

2009-01-16 Thread Hoover, Tony
It seems to me that you have only told it to load the remote machine's HCR hive. Try it with this: ./regshell --remote=192.168.50.142 --user=Administrador%xxx HKEY_LOCAL_MACHINE> I don't know for sure, but that seems like it should work ---

RE: [Samba] Any possibility to apply policies on WinXP machines u sing samba 3.2.3 ?

2008-12-09 Thread Hoover, Tony
We make use of NT4 policies on our Samba domain. NTconfig.POL needs to be in \\domaincontroller\netlogon. I don't believe that you can use Active Directory GPOs (group policy objects) with a Samba domain. Tony Hoover, Net

RE: [Samba] machine policy?

2008-10-30 Thread Hoover, Tony
If you have access to Poledit.exe from NT4, you can use it to create a default machine policy that will push registry settings out to all machines in the domain, or specific settings for specific machines, but not groups. The policy file should be stored at \\yourPDC\netlogon\NTconfig.pol -

RE: [Samba] samba performance degrade

2008-10-22 Thread Hoover, Tony
have you ruled out a networking problem? (i.e. Switch didn't auto-neg to the same speed/duplex settings as the server)? Tony Hoover, Network Administrator KSU - Salina, College of Technology and Aviation (785) 826-2660 "D

RE: [Samba] joining samba server to Active Directory for

2008-09-19 Thread Hoover, Tony
that looks like the error I had trying to join a Samba 3.0.28a/CentOS 5.2 machine to an NT4 domain. Ended up updating to 3.0.31 from SERNET to get it to join the domain. Filed bug report with CentOS. Their answer was to use 3.0.25 from CentOS 5.1. -

Re: [Samba] Re: net ads join failed

2008-09-04 Thread Hoover, Tony
It means that your primary DNS server does not support dynamic updates. On Thu, 2008-09-04 at 16:54 +0200, Thomas Vito wrote: > Apparently something is wrong with my hosts file. I have changed it and now > get a much better result: > [EMAIL PROTECTED] ~]# net ads join -U [EMAIL PROTECTED] > [EMA

RE: [Samba] Unable to Join Domain

2008-09-04 Thread Hoover, Tony
ROTECTED] Sent: Wednesday, September 03, 2008 5:15 PM To: Hoover, Tony Cc: Mike Eggleston; samba@lists.samba.org Subject: RE: [Samba] Unable to Join Domain I had 3.0.28a but when I attempt to install from yum the most current version it supplies is 3.0.28-1.el5_2.1. I realize it is a different

RE: [Samba] Unable to Join Domain

2008-09-03 Thread Hoover, Tony
Samba 3.0.28a (from CentOS 5.2) would not allow me to add my new domain controller to the domain that it was supposed to be controlling. I uninstalled 3.0.28a and installed the 3.0.31 version (which was current at that time). After the upgrade, I was able to join the domain with out difficulty.

RE: [Samba] Roaming Profiles only for Admin?

2008-08-19 Thread Hoover, Tony
try changing : create mask = 0644 directory mask = 0775 Tony Hoover, Network Administrator KSU - Salina, College of Technology and Aviation (785) 826-2660 "Don't Blend in..." --

RE: [Samba] How do I modify registry: Hk user?

2007-10-01 Thread Hoover, Tony
You could edit your .reg file so that it reads "HKEY_CURRENT_USER\Software\Microsoft\Windows..." instead of "HKU\S-1-5-21-3760584470-222371490-3023398101-1005\Software\Microsoft\Window s..." then apply it through everyone's login script. --

[Samba] NT4 -> Samba 3 migration issue

2006-08-04 Thread Hoover, Tony
I am trying to Migrate one of our three Windows NT domains to Samba/LDAP using CentOS 4.3 (up to date via 'yum update'), Samba 3.0.10-1.4E.6.2, OpenLDAP: slapd 2.2.13 uname -a Linux sambatest.sal.ksu.edu 2.6.9-11.ELsmp #1 SMP Wed Jun 8 16:59:12 CDT 2005 x86_64 x86_64 x86_64 GNU/Linux

RE: [Samba] Fedora packages or Enterprise packages of Samba on RH EL4?

2006-07-13 Thread Hoover, Tony
CentOS4 RPMS for x86-64 would be awesome. --- Tony Hoover, Network Administrator KSU - Salina, College of Technology and Aviation (785) 826-2660 "Don't Blend in..." ---

RE: [Samba] ArcView + Samba: Performance nightmare under Linux, o k under Solaris or HP-UX

2006-07-10 Thread Hoover, Tony
Have you checked the network end of things? This is the same type of thing I see when the NIC and ethernet switch don't autonegotiate to the same settings. Hope I didn't step on anybody's toes here. I'm new to the list. -