Re: [Samba] Authenticating against local PAM configuration

2011-04-15 Thread Madhusudan Singh
-499 > eMail: muel...@tropenklinik.de > Internet: www.tropenklinik.de > --- > -Ursprüngliche Nachricht- > Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] > Im > Auftrag von Madhusudan Singh > Gesendet: Donnerstag, 14. April 2011 19:17 > An: samba@lists

Re: [Samba] Authenticating against local PAM configuration

2011-04-14 Thread Madhusudan Singh
I forgot to mention that using winbind is not an option. Our previous attempt to use winbind worked for a few months and then broke spectacularly after the organization made some changes to their ADS. It has to be just local pam, the way it is. On Thu, Apr 14, 2011 at 12:14 PM, Madhusudan Singh

[Samba] Authenticating against local PAM configuration

2011-04-14 Thread Madhusudan Singh
Hello I have a (OpenSuSE 11.2) linux server that uses our organization LDAP to authenticate users. ssh logins work fine. I have installed a samba server on this server machine and wish to use the same authentication mechanism for Samba clients. I do not have any access to the LDAP server (it ru

[Samba] Input/output error on attempting to authenticate

2011-04-12 Thread Madhusudan Singh
Situation: OpenSUSE 11.2 server with LDAP for authentication. Authentication status: users CAN login using LDAP using ssh. Additionally, I have kerberos setup and users can get kerberos tokens without any problem. Environment: ADS running on Windows. I do not control the ADS. I had to ask an IT gu

Re: [Samba] Guest shares in an ADS security model

2010-10-23 Thread Madhusudan Singh
So, is it correct to say that if we use ADS security, there is no possibility of having any unauthenticated shares at all ? On Fri, Oct 22, 2010 at 2:42 PM, Madhusudan Singh < singh.madhusu...@gmail.com> wrote: > Thanks for clearing that up. I would not want the AD to get involved at

Re: [Samba] Guest shares in an ADS security model

2010-10-22 Thread Madhusudan Singh
Thanks for clearing that up. I would not want the AD to get involved at all for this share anyways. On Fri, Oct 22, 2010 at 1:15 PM, Mike Leone wrote: > On 10/22/2010 2:12 PM, Michael Wood wrote: > >> On 22 October 2010 19:36, Madhusudan Singh >> wrote: >> >>&

Re: [Samba] Guest shares in an ADS security model

2010-10-22 Thread Madhusudan Singh
Yes. I guess this is a question about whether share-wise security models can be specified. On Fri, Oct 22, 2010 at 1:12 PM, Michael Wood wrote: > On 22 October 2010 19:36, Madhusudan Singh > wrote: > > Ok. > > > > In my mind, guest access should be just that - no aut

Re: [Samba] Guest shares in an ADS security model

2010-10-22 Thread Madhusudan Singh
Ok. In my mind, guest access should be just that - no authentication. On Thu, Oct 21, 2010 at 3:51 PM, Michael Wood wrote: > On 21 October 2010 20:54, Madhusudan Singh > wrote: > > Hello, > > > > I have no control over the active directory. I just authenticate a subset

Re: [Samba] Guest shares in an ADS security model

2010-10-21 Thread Madhusudan Singh
:52, Madhusudan Singh > wrote: > > Seems pathetic to reply to my own message, but since I cannot find any > > working examples via Google, I have to ask this question. > > > > Should be simple enough for the resident gurus to answer ? > > I would guess you need to enable t

Re: [Samba] Guest shares in an ADS security model

2010-10-20 Thread Madhusudan Singh
Seems pathetic to reply to my own message, but since I cannot find any working examples via Google, I have to ask this question. Should be simple enough for the resident gurus to answer ? On Mon, Oct 18, 2010 at 10:38 AM, Madhusudan Singh < singh.madhusu...@gmail.com> wrote: >

[Samba] Guest shares in an ADS security model

2010-10-18 Thread Madhusudan Singh
Are these possible ? I am trying to setup a guest access printer attached to a working fileserver that authenticates its users against a Windows AD. I keep getting authentication requests on attempting to connect to the printer. Before I post my smb.conf, I need to know if what I am trying to do

Re: [Samba] Permitting guest printer access with ADS security

2010-10-15 Thread Madhusudan Singh
I forgot to add that the file server is working fine. On Thu, Oct 14, 2010 at 4:57 PM, Madhusudan Singh < singh.madhusu...@gmail.com> wrote: > I am using security = ads to authenticate users to my Samba server. > > I want to allow guest access to Samba print server at the same ti

[Samba] Permitting guest printer access with ADS security

2010-10-14 Thread Madhusudan Singh
I am using security = ads to authenticate users to my Samba server. I want to allow guest access to Samba print server at the same time. This is my smb.conf: [global] workgroup = realm = server string = %h server (Samba, Ubuntu) security = ADS map to guest = Bad User obey pam restrictions = Ye

Re: [Samba] A question about Samba, authentication, groups, quotas, etc.

2010-09-29 Thread Madhusudan Singh
I think I might have worked out the grouping problem locally by simply adding (manually) the names of members of B to /etc/group, and changing the directory ownership to the corresponding groups. Its a strange situation as there are users in /etc/group that are not present in /etc/passwd (they are

Re: [Samba] A question about Samba, authentication, groups, quotas, etc.

2010-09-23 Thread Madhusudan Singh
On Wed, Sep 22, 2010 at 11:44 PM, Grant wrote: > > Since you are already doing everything based on AD ... > Have the windows folks make AD security groups for your groups b c d e And > then filter the shares using smb.conf entries like > valid users = @ad\groupB > write list = @ad\groupB > > To

Re: [Samba] A question about Samba, authentication, groups, quotas, etc.

2010-09-22 Thread Madhusudan Singh
I understand neither the language nor the intent of this message. How could the initial message possibly be spam ? Was it the use of the capital case for the workgroup ? 2010/9/22 > Message rejected: message contains bad words. > Message is marked as spam. > > De informatie uit deze e-mail (en e

[Samba] A question about Samba, authentication, groups, quotas, etc.

2010-09-22 Thread Madhusudan Singh
Hello, Server: Ubuntu Lucid server version Role: Samba file server (I administer it) Authentication: Against a Windows AD (I do not administer it) using winbind. No other authentication scheme is practicable/possible - I do NOT want to manage passwords locally on this machine. LDAP: Not explicitly

Re: [Samba] Samba over ssh ?

2005-03-31 Thread Madhusudan Singh
On Thursday 31 March 2005 23:34, Craig White wrote: > On Thu, 2005-03-31 at 23:25 -0500, Madhusudan Singh wrote: > > On Thursday 31 March 2005 16:29, Andrew Bartlett wrote: > > > On Thu, 2005-03-31 at 12:37 -0500, Madhusudan Singh wrote: > > > > Hi > > > &g

Re: [Samba] Samba over ssh ?

2005-03-31 Thread Madhusudan Singh
On Thursday 31 March 2005 16:29, Andrew Bartlett wrote: > On Thu, 2005-03-31 at 12:37 -0500, Madhusudan Singh wrote: > > Hi > > > > I need to make my samba server available over the internet to a mobile > > user base. > > > > I was wondering if samba co

[Samba] Samba over ssh ?

2005-03-31 Thread Madhusudan Singh
Hi I need to make my samba server available over the internet to a mobile user base. I was wondering if samba could be run over ssh (at both client and server ends). I am not comfortable about opening ports 139 and 445. Thanks. -- To unsubscribe from this list go to the following URL and re

[Samba] A few questions regarding samba from a samba and windows newbie (almost)

2005-03-30 Thread Madhusudan Singh
Hi I am trying to implement a simple Samba server on a Slackware 10.1 machine running for a bunch of Windows users that also have unix accounts on the machine. Using webmin, I did convert the unix users to samba users (smbpasswd is located in /etc/samba/private). A possible problem is that I h

[Samba] Need some help setting up a Samba server

2005-03-29 Thread Madhusudan Singh
Hi I am trying to implement a simple Samba server on a Slackware 10.1 machine running for a bunch of Windows users that also have unix accounts on the machine. Using webmin, I did convert the unix users to samba users. A possible problem is that I have very little experience using windows, so