[Samba] mount.cifs doesn't set uid/gid when mounting a Samba share

2011-11-20 Thread Konstantin Boyandin
Hello, So far, I was using the following command to mount a Samba share on my Fedora-powwered computer UID=`whoami` GID=`id -g ${UID}` sudo mount.cifs sharename mount \ -o rw,domain=DOMAIN,user=${UID},uid=${UID},gid=${GID},file_mode=0644,dir_mode=0755 and everything worked until I installed F

[Samba] Problem: how to make users use unique passwords

2011-01-12 Thread Konstantin Boyandin
Hello, To harden security, I've modified the smbldap-passwd script so that it update sambaPwdMustChange, sambaKickoffTime and shadowExpire fields; also, a simple script notifying users with expiration date approaching has been set up. I have also added a call to cracklib to check password strengt

Re: [Samba] smbldap-tools security: how to keep passwords in smbldap_bind.conf secure?

2011-01-12 Thread Konstantin Boyandin
01/12/2011 09:56 PM, TAKAHASHI Motonobu пишет: > 2011/1/12 Konstantin Boyandin : >> smbldap-passwd may be called by non-root; thus, >> /etc/smbldap-tools/smbldap_bind>conf >> must be world-readable, and it keeps the passwords as plain text. > > smbldap-passwd

Re: [Samba] smbldap-tools security: how to keep passwords in smbldap_bind.conf secure?

2011-01-12 Thread Konstantin Boyandin
muel...@tropenklinik.de > Internet: www.tropenklinik.de > --- > > -Ursprüngliche Nachricht- > Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im > Auftrag von Konstantin Boyandin > Gesendet: Mittwoch, 12. Januar 2011 08:50

[Samba] smbldap-tools security: how to keep passwords in smbldap_bind.conf secure?

2011-01-11 Thread Konstantin Boyandin
Hello, On http://wiki.samba.org/index.php/4.0:_User_Management it is described how to set up and use smbldap-tools package. The question is, how to hide master passwords in such a case? smbldap-passwd may be called by non-root; thus, /etc/smbldap-tools/smbldap_bind>conf must be world-readable, an

Re: [Samba] PDC (CentOS 5.5, Samba 3.5.6): no domain group names sent to Windows 2003 members

2010-12-12 Thread Konstantin Boyandin
gt; > Have you tried the build from SerNet? > > --- > wbr, Denis. > > > On Mon, Dec 13, 2010 at 11:43 AM, Konstantin Boyandin > mailto:temmo...@gmail.com>> wrote: > > Hello, > > After setting up Samba 3.5.6 on CentOS 5.5 (built from sourc

[Samba] PDC (CentOS 5.5, Samba 3.5.6): no domain group names sent to Windows 2003 members

2010-12-12 Thread Konstantin Boyandin
Hello, After setting up Samba 3.5.6 on CentOS 5.5 (built from sources) I have noticed a strange problem. Windows 2003 servers participating in this Samba domain do not receive domain groups list when I, say, try to assign security credentials for a file/folder. When I choose domain as source, sea

[Samba] PDC (CentOS 5.5, Samba 3.5.6): no domain group names sent to Windows 2003 members

2010-12-11 Thread Konstantin Boyandin
Hello, After setting up Samba 3.5.6 on CentOS 5.5 (built from sources) I have noticed a strange problem. Windows 2003 servers participating in this Samba domain do not receive domain groups list when I, say, try to assign security credentials for a file/folder. When I choose domain as source

[Samba] The least possible Samba client version able to work with Samba 3.5.6 server

2010-11-15 Thread Konstantin Boyandin
Hello, We have to work with a number of old OS; the problem is to find out what minimal Samba version is required to make a client work with a server running Samba 3.5.6. In my experiments I had to use at least Samba 3.3.*, but if there are use cases for much earlier versions, I'd be glad to

[Samba] Samba domain member (re)creates sambaDomainName record in LDAP on PDC

2010-11-12 Thread Konstantin Boyandin
Hello, I have followed the steps mentioned in http://www.samba.org/samba/docs/man/Samba-Guide/unixclients.html#sdcsdmldap and used the proposed smb.conf template (replacing only the actual redentials/LDAP names) to join a Linux workstation as a domain member. Everything went OK, but I noticed

[Samba] Samba on domain member refuses to work after certain time has passed

2010-11-11 Thread Konstantin Boyandin
Hello, The configuration files for PDC and the server in question are below. Both have Samba 3.5.6 installed, firewalls pass all smb/nmb traffic, CentOS 5.5.x86_64 runs on both. The situation: after the server (DEVSERV in the example below) starts its Samba, it works fine for approx 1-1.5 da

Re: [Samba] Samba 3.5.6: can't follow symlinks on shares

2010-11-08 Thread Konstantin Boyandin
ounds like maybe you need to your [General] section the following line: unix extensions = no That will make Samba resolve the symlinks on the server side. In my case the section was named [global]. Thank you very much, that did the trick! Sincerely, Konstantin Boyandin -- To unsubscribe from th

Re: [Samba] Samba 3.5.6: can't follow symlinks on shares

2010-11-07 Thread Konstantin Boyandin
08.11.2010 11:11, John H Terpstra writes: On 11/07/2010 10:53 PM, Konstantin Boyandin wrote: Samba version: 3.5.6, OS CentOS 5.5 64-bit. The problem: I have a share with symlinks leading outside the share. After mounting the shared resource (cifs), I can't proceed through symlinks (permi

[Samba] Samba 3.5.6: can't follow symlinks on shares

2010-11-07 Thread Konstantin Boyandin
Hello, Samba version: 3.5.6, OS CentOS 5.5 64-bit. The problem: I have a share with symlinks leading outside the share. After mounting the shared resource (cifs), I can't proceed through symlinks (permission denied). Setting options follow symlinks = yes wide links = yes for the share does