[Samba] how to clear winbind cache

2010-05-04 Thread Liutauras Adomaitis
Hello all, I'd like to know how to clear winbind cache. The problem is that we have decided to change uid and gid mapping range, but changing smb.conf accordingly didn't help. We use ldap as backend. After deleting all idmap entries in ldap nothing changed. If we disable winbindd caching with -n s

Re: [Samba] netlogon sccript

2009-09-17 Thread Liutauras Adomaitis
On Thu, Sep 17, 2009 at 12:48 PM, luigi.auge...@tin.it wrote: >  Hello > > I would use a  login  script  in  a XP pro  client SP3 and my samba server is > samba-3.0.33-3.7.el5_3.1 (Cent OS 5.3) samba is configured as PDC and I use   > a ldap database for auth. > > All work fine, client is a part

Re: [Samba] Fwd: most common way to implement 'net time' privileges

2009-08-28 Thread Liutauras Adomaitis
On Fri, Aug 28, 2009 at 12:18 PM, Jean-Jacques Moulis wrote: > On Fri, 28 Aug 2009 10:29:56 +0200 Witold Tosta > wrote: > > WT> Liutauras Adomaitis pisze: > WT> >> So I change the their local policy setting. Dumb solution, bo I cannot > do > WT> >> t

Re: [Samba] Fwd: most common way to implement 'net time' privileges

2009-08-28 Thread Liutauras Adomaitis
> So I change the their local policy setting. Dumb solution, bo I cannot do > that other way. Do do it by hand on all computers localy? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Fwd: most common way to implement 'net time' privileges

2009-08-27 Thread Liutauras Adomaitis
On Thu, Aug 27, 2009 at 3:14 PM, Witold Tosta wrote: > Liutauras Adomaitis pisze: >> >> On Wed, Aug 26, 2009 at 6:11 PM, Volker >> Lendecke wrote: >>> >>> On Wed, Aug 26, 2009 at 06:05:35PM +0300, Liutauras Adomaitis wrote: >>>> >

Re: [Samba] Fwd: most common way to implement 'net time' privileges

2009-08-27 Thread Liutauras Adomaitis
On Wed, Aug 26, 2009 at 6:11 PM, Volker Lendecke wrote: > On Wed, Aug 26, 2009 at 06:05:35PM +0300, Liutauras Adomaitis wrote: >> now size is few times larger. Try it now >> http://www.infosaitas.lt/logas.txt > > Normally a "Device is not functioning" (or so) me

Re: [Samba] Domain not reachable.

2009-08-26 Thread Liutauras Adomaitis
On Wed, Aug 26, 2009 at 10:37 PM, Bill Platt wrote: > I am setting up a domain with MDS and all works well in some offices, but in > others I get domain not reachable errors when trying to logon. Could this be > a bad switch? > Not sure what MDS is and what does other offices means, but could it b

Re: [Samba] Fwd: most common way to implement 'net time' privileges

2009-08-26 Thread Liutauras Adomaitis
On Wed, Aug 26, 2009 at 6:11 PM, Volker Lendecke wrote: > On Wed, Aug 26, 2009 at 06:05:35PM +0300, Liutauras Adomaitis wrote: >> now size is few times larger. Try it now >> http://www.infosaitas.lt/logas.txt > > Normally a "Device is not functioning" (or so) me

[Samba] Fwd: most common way to implement 'net time' privileges

2009-08-26 Thread Liutauras Adomaitis
Resending my last mail to the list, Sorry -- Forwarded message -- From: Liutauras Adomaitis Date: Wed, Aug 26, 2009 at 11:51 AM Subject: Re: [Samba] most common way to implement 'net time' privileges To: volker.lende...@sernet.de On Wed, Aug 26, 2009 at 11:44

Re: [Samba] most common way to implement 'net time' privileges

2009-08-25 Thread Liutauras Adomaitis
On Mon, Aug 24, 2009 at 4:25 PM, Hoover, Tony wrote: > Use "user manager for domains" from the NT admin tools.  select the correct > domain (if not already selected).  Select "Policy" -> "User Rights"  Select > the right: "Change the system time"  Click "Add..."  then select "Domain > Users" I fol

[Samba] most common way to implement 'net time' privileges

2009-08-24 Thread Liutauras Adomaitis
Hello samba, I would like to ask about what is the most common and less effort way to let users change time without admin privileges on windows workstations. To be exact I'm trying to find out the quick and dirty way to sync time between win workstations (xp and vista) and PDC Samba 3.3.2. I do us

Re: [Samba] 'inherit owner' doesn't play nice with 'force directory mode'

2009-08-17 Thread Liutauras Adomaitis
On Tue, Aug 18, 2009 at 8:48 AM, jw wrote: > Hello > I am trying to create a 'dropbox' share, using the sticky bit and > 'inherit owner'. > > By themselves they work, but when a directory is created in this > share, its permissions are not quite what I need. > Therefore, I try to use 'force directo

Re: [Samba] Samba HA issue

2009-08-05 Thread Liutauras Adomaitis
On Tue, Aug 4, 2009 at 7:39 PM, David Christensen wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > With samba configured for high availability using heartbeat, I am not > able to join new computers to the domain after a fail over.  If I fail > back to the "main" samba instance I can joi

Re: [Samba] Having problems with Samba and openLDAP Groups

2009-06-04 Thread Liutauras Adomaitis
On Wed, Jun 3, 2009 at 9:47 PM, Liutauras Adomaitis wrote: > On Thu, May 28, 2009 at 11:59 PM, Matt Burkhardt > wrote: >> On Thu, 2009-05-28 at 23:29 +0300, Liutauras Adomaitis wrote: >> >> On Thu, May 28, 2009 at 3:53 PM, Matt Burkhardt >> wrote: >>>

Re: [SOLVED] [Samba] Winbind lost domain

2009-06-03 Thread Liutauras Adomaitis
On Fri, May 29, 2009 at 10:28 AM, Mailing pigna wrote: >  I solved the problem. > In the file smb.conf I put the parameter > smb port = 139 > changing the parameter > smb ports = 445 139 > Everything is back to work. > But do not understand 3 things: > 1) before winbind is working quietly on the p

Re: [Samba] logon script

2009-06-03 Thread Liutauras Adomaitis
On Mon, Jun 1, 2009 at 1:09 PM, Christian Rost wrote: > Hi, > > you don't have access to Samba variables from within your logon script. The > most convenient way to solve this is by using the "ifmember.exe" executable > from the Windows Server 2003 toolkit and to place it into your netlogon shar

Re: [Samba] Having problems with Samba and openLDAP Groups

2009-06-03 Thread Liutauras Adomaitis
On Thu, May 28, 2009 at 11:59 PM, Matt Burkhardt wrote: > On Thu, 2009-05-28 at 23:29 +0300, Liutauras Adomaitis wrote: > > On Thu, May 28, 2009 at 3:53 PM, Matt Burkhardt > wrote: >> Thanks for the help!  I appreciate you taking the time! >> >> On Thu, 2009-0

Re: [Samba] PDC/BDC Problem

2009-05-27 Thread Liutauras Adomaitis
On Tue, May 26, 2009 at 6:47 PM, Florian Götz wrote: > Hi all, > > I'm rather new to samba and trying to deploy a PDC/BDC Setup for our company. > Got some books and the manpages here to help me :) > The config-files are attached at the end of this mail. Used Samba is > 3.2.7-11.6 > on a SLES11 s

Re: [Samba] empty authentication string sent so samba-server

2009-05-27 Thread Liutauras Adomaitis
On Wed, May 27, 2009 at 10:32 AM, Volker Schwicking wrote: > Come on, somebodys got to have an at least an idea :-) > > Volker Schwicking wrote: >> >> Hi, >> >> for the last two weeks ive been trying, to authenticate against a >> samba-domain using a win2k3-server. the server joined the domain wit

Re: [Samba] Winbind lost domain

2009-05-27 Thread Liutauras Adomaitis
On Wed, May 27, 2009 at 5:22 PM, Mailing pigna wrote: > Hi all. > I have a problem whith winbind authentication. > I have 2 samba domains, DOMA and DOMB, and these domains have trust in one > another. > > On both pdc winbind is installed. > > I installed a proxy server using squid with ntlm authen

Re: [Samba] Having problems with Samba and openLDAP Groups

2009-05-27 Thread Liutauras Adomaitis
> [2009/05/27 13:34:52, 2] smbd/service.c:make_connection_snum(616) >  user 'mlb' (from session setup) not permitted to access this share > (Staff) > [2009/05/27 13:34:52, 3] smbd/error.c:error_packet_set(106) >  error packet at smbd/reply.c(514) cmd=117 (SMBtconX) > NT_STATUS_ACCESS_DENIED i gues

Re: [Samba] Problem with Centos 5.3 + Samba 3.0.33 +AD (2k3)

2009-05-27 Thread Liutauras Adomaitis
On Tue, May 26, 2009 at 8:20 PM, Max León wrote: > Hi everyone, > > I have an issue with Samba agains Active Directory. > The authentication works just fine but when it comes to shares I've ran into > some problems. > > If I use any group mapping from the AD it won't let me access it so I figure >

Re: [Samba] Samba Configuration

2009-05-27 Thread Liutauras Adomaitis
On Wed, May 27, 2009 at 4:09 PM, Matt Burkhardt wrote: > On Mon, 2009-05-25 at 23:06 +0300, Liutauras Adomaitis wrote: > > On Mon, May 25, 2009 at 10:29 PM, Matt Burkhardt > wrote: >> Maybe I'm missing this - but I'm having problems setting up some file >>

Re: [Samba] Permissions and security

2009-05-26 Thread Liutauras Adomaitis
On Tue, May 26, 2009 at 1:28 PM, Dennis Duggen wrote: > Hi Liutauras > >> I don't see any share for /home/user and /mnt/staff in your smb.conf. >> If create file in a share, what system permissions do you get? Paste rwx >> style. > [homes] is the /home > [admin] is the staff one > Then you creat

Re: [Samba] Permissions and security

2009-05-26 Thread Liutauras Adomaitis
On Tue, May 26, 2009 at 12:13 PM, Dennis Duggen wrote: > Hi list > > I have trouble setting up the system permissions to be secure. Here my > basic setup. > > 2 groups: users and staff > > /home/user should have the permissions user:users rwx-- > /mnt/staff should have the permissions user:sta

Re: [Samba] Samba Configuration

2009-05-25 Thread Liutauras Adomaitis
On Mon, May 25, 2009 at 10:29 PM, Matt Burkhardt wrote: > Maybe I'm missing this - but I'm having problems setting up some file > shares that are limited to certain groups.  I've done countless searches > on setups and on the tree connnect failed error message, and just > haven't found anything th

Re: [Samba] samba samba two way trusts and winbind

2009-05-25 Thread Liutauras Adomaitis
2009 at 10:24 PM, Liutauras Adomaitis wrote: > thanks François, > > On Mon, May 25, 2009 at 8:56 PM, François Legal wrote: >> I did never setup 2 way trust, but had a hard time setting up a one way >> trust. >> As far as I remember, the first thing to verify (before es

Re: [Samba] samba samba two way trusts and winbind

2009-05-25 Thread Liutauras Adomaitis
thanks François, On Mon, May 25, 2009 at 8:56 PM, François Legal wrote: > I did never setup 2 way trust, but had a hard time setting up a one way > trust. > As far as I remember, the first thing to verify (before establishing the > trust relation), is to have winbind successfully enumerate the lo

[Samba] samba samba two way trusts and winbind

2009-05-25 Thread Liutauras Adomaitis
Hi, after whole day hitting my head into wall I decided to ask advise from clever people: My aim is to have two way trusts between two samba domains 3.0.25 and 3.0.28 I did: net rpc trustdom add and establish on both domains. It did not went ok, but problem was with creating ldap accounts for dom

Re: [Samba] Client driver installation

2009-05-20 Thread Liutauras Adomaitis
On Thu, May 21, 2009 at 1:27 AM, Gary L. Greene, Jr. wrote: > > > I've an OpenSuSE based server installed at work that uses Samba to share out > the > prrinters for our users on the AD that will be replacing our aging Windows > 2000 > print server. I'm in the process of getting the printer drive

Re: [Samba] Newbie question - force file permission to user's secondary groups.

2009-05-20 Thread Liutauras Adomaitis
etting force group on share can even be set to group the user does not belong to (again - not sure, but you can test). This directive will force all files and folders created on the share to be owned by group specified in force group directive. You set force group directive to make sure all files in

Re: [Samba] Newbie question - force file permission to user's secondary groups.

2009-05-15 Thread Liutauras Adomaitis
On Fri, May 15, 2009 at 4:27 PM, Conta Falsa 337 wrote: > samba version is  3.0.28a-1ubuntu4.7 > -- > > I created users on both samba and the linux system, and created 3 groups on > the system. Each of these groups own a specific directory, the directory on > the filesystem belongs to root.groupfo

[Samba] Re: net vampire and WIn2003 AD

2009-05-11 Thread Liutauras Adomaitis
On Sat, May 9, 2009 at 6:05 PM, Liutauras Adomaitis < liutauras.adomai...@gmail.com> wrote: > Hello Samba People, > > it is my first letter to Samba ML, so first of all - thanks Samba team for > a great SW. > > Now the question: > I want to migrate from Win2003 AD to

Re: [Samba] Re: net vampire and WIn2003 AD

2009-05-11 Thread Liutauras Adomaitis
On Mon, May 11, 2009 at 5:16 AM, jamrock wrote: > "Liutauras Adomaitis" wrote in message > news:c1ec9ac0905090805j37fd0255ge2a1f44915326...@mail.gmail.com... > > Hello Samba People, > > > > it is my first letter to Samba ML, so first of all - thanks

[Samba] net vampire and WIn2003 AD

2009-05-09 Thread Liutauras Adomaitis
Hello Samba People, it is my first letter to Samba ML, so first of all - thanks Samba team for a great SW. Now the question: I want to migrate from Win2003 AD to Samba 3.3.2. I want to use net vampire feature to import all account information (is there any other way to do it?). Net vampire works