Re: [Samba] Ideas for distributed Samba servers

2010-04-12 Thread Ravi Channavajhala
On Mon, Apr 12, 2010 at 7:17 AM, Stan Hoeppner wrote: > Robert LeBlanc put forth on 4/11/2010 8:19 PM: >> On Sun, Apr 11, 2010 at 9:03 AM, ravi channavajhala < >> ravi.channavajh...@dciera.com> wrote: >> >>> WAFS (Wide Area File System) appliances can be ver

Re: [Samba] Ideas for distributed Samba servers

2010-04-11 Thread Ravi Channavajhala
On Sun, Apr 11, 2010 at 8:14 PM, Adam Tauno Williams wrote: > On Sat, 2010-04-10 at 10:14 -0700, Eric Shubert wrote: >> Robert LeBlanc wrote: >> > I'm trying to think about how to setup a Samba system and would like to >> > pick >> > the brains of some experts. We are looking up put a large amoun

Re: [Samba] Ideas for distributed Samba servers

2010-04-11 Thread ravi channavajhala
WAFS (Wide Area File System) appliances can be very well deployed for this sort of thing precisely. Unfortunately, I don't know of any opensource project for WAFS. However, commercial solutions such as Riverbed, Expand Networks, CISCO/WAFS, Juniper/Peribit do exist. Regards, /rkc CTO DCiEra (P)

Re: [Samba] Authenticating Samba 3.4.2 vs WinServer 2008R2

2009-10-15 Thread ravi channavajhala
E. Engert [mailto:deeng...@anl.gov] Sent: Wednesday, October 14, 2009 7:24 PM To: ravi.channavajh...@dciera.com Cc: 'Bober, Mark'; samba@lists.samba.org Subject: Re: [Samba] Authenticating Samba 3.4.2 vs WinServer 2008R2 ravi channavajhala wrote: > To my understanding, windows treat

Re: [Samba] Authenticating Samba 3.4.2 vs WinServer 2008R2

2009-10-13 Thread ravi channavajhala
To my understanding, windows treat principal names as case insensitive. Kerberos treats them as case sensitive. MIT Kerberos version - 1.7 is supposed to have fixed this. The way to get around this is to add uppercase SPN names into the Kerberos keytab. Regards, /rkc -Original Message

[Samba] share mapping issue related to GID

2009-10-10 Thread Ravi Channavajhala
Reposting this in the hope of someone throwing some hints: I’ve setup a brand new Samba server – 3.0.33 on RHEL 5. The access to shares is a bit erratic, specifically users who belong to a group which is different from their primary group. Using LDAP,

[Samba] share mapping issue related to GID

2009-10-09 Thread ravi channavajhala
I’ve setup a brand new Samba server – 3.0.33 on RHEL 5. The access to shares is a bit erratic, specifically users who belong to a group which is different from their primary group. Using LDAP, Kerberos, AD. The /etc/nsswitch.conf is set to files ldap. Not using winbind at all. The below two u

[Samba] Samba Shares - Permission denied

2009-09-26 Thread ravi channavajhala
My issue is permission denied. The setup is as follows. a) All the development dirs are mounted on Solaris-10/9 server b) Home Directories are mounted on a netapp filer c) All the /projects[0-5] and /home mounts are setup in automount, NIS master is Solaris d) Samba server is Linux, with win

[Samba] samba - preauthentication error

2009-09-04 Thread ravi channavajhala
Can anyone suggest how to get around the following? [2009/09/05 00:32:55, 3] libads/sasl.c:ads_sasl_spnego_bind(300) ads_sasl_spnego_bind: got server principal name = exd...@domain.example.com [2009/09/05 00:32:55, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593) ads_krb5_mk_req: krb5_cc_get_princi

[Samba] samba - preauthentication error

2009-09-04 Thread ravi channavajhala
Can anyone suggest how to get around the following? [2009/09/05 00:32:55, 3] libads/sasl.c:ads_sasl_spnego_bind(300) ads_sasl_spnego_bind: got server principal name = exd...@domain.example.com [2009/09/05 00:32:55, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593) ads_krb5_mk_req: krb5_cc_get_princi

Re: [Samba] File Locking, Access - Inconsistencies

2009-08-12 Thread Ravi Channavajhala
On Wed, Aug 12, 2009 at 11:01 AM, Ravi Channavajhala wrote: > On Wed, Aug 12, 2009 at 9:53 AM, Jeremy Allison wrote: >> On Wed, Aug 12, 2009 at 08:51:51AM +0530, ravi channavajhala wrote: >>> Hi Jeremy, >>> >>> Why would the file name be an issue here?  It is

Re: [Samba] File Locking, Access - Inconsistencies

2009-08-11 Thread Ravi Channavajhala
On Wed, Aug 12, 2009 at 9:53 AM, Jeremy Allison wrote: > On Wed, Aug 12, 2009 at 08:51:51AM +0530, ravi channavajhala wrote: >> Hi Jeremy, >> >> Why would the file name be an issue here?  It is not just one file, several >> files are getting affected.  I followed you

[Samba] File Locking, Access - Inconsistencies

2009-08-11 Thread ravi channavajhala
Lately I'm seeing bizarre problems with the SAMBA server I'm using in production. For no rhyme or reason the connections get dropped, the same set of users who previously were able to access the shares, now get permission denied. Users (not all but some) are having trouble opening the folders, fi

Re: [Samba] I/O error when trying to write

2009-07-27 Thread ravi channavajhala
On Mon, Jul 27, 2009 at 05:02:28PM +0530, ravi channavajhala wrote: > My setup is fairly straight forward; I have a Solaris 10 (SPARC) being used > as a samba server with AD sign on. Users can log in fine and map their > directories through windows clients. All the user home dirs and

[Samba] I/O error when trying to write

2009-07-27 Thread ravi channavajhala
My setup is fairly straight forward; I have a Solaris 10 (SPARC) being used as a samba server with AD sign on. Users can log in fine and map their directories through windows clients. All the user home dirs and critical project dirs are on a NetAPP filer. When user tries to write a file, it i

Re: [Samba] Timing in a script

2009-05-15 Thread Ravi Channavajhala
On Fri, May 15, 2009 at 7:43 PM, Pete Clapham wrote: > Hi, all -- > > I am trying to write a script in which I can add users and their samba > passwords easily and quickly.  It looks something like: >    useradd -c "User Name" -g groupname -p unixpassword accountname > >    echo -e "smbpassword\n

Re: [Samba] krb5 configuration generation

2009-05-15 Thread Ravi Channavajhala
> Alex > > -- > To unsubscribe from this list go to the following URL and read the > instructions:  https://lists.samba.org/mailman/options/samba > -- Ravi Channavajhala CTO DCiEra (Extreme Data Center Efficiency) Plot #247, Road #78, Ground Floor Jubilee Hills Hyderabad 50

Re: [Samba] Solaris 10 (sparc) and samba issue

2009-05-11 Thread Ravi Channavajhala
I don't think I missed anything as obvious as that. My problem is elsewhere...still looking. On to the next step of compiling latest and greatest samba distro.. On Mon, May 11, 2009 at 11:23 PM, Brian H. Nelson wrote: > Ravi Channavajhala wrote: >> >> Brian, it is Windows

Re: [Samba] Solaris 10 (sparc) and samba issue

2009-05-11 Thread Ravi Channavajhala
e helpful. > > Also, it might just be me, but I'm not clear on exactly what problem you're > having. Maybe you could clarify, list error messages, etc. > > You might want to get Solaris patch 119757-14 which gives you samba 3.0.33. > I don't know if it will help. I had

[Samba] Solaris 10 (sparc) and samba issue

2009-05-11 Thread Ravi Channavajhala
The net ads joins the host to the AD, but cant get the proper kerberos tix. Manually generating the kerberos keytab from AD dont work. Any suggestions? r...@host /#head -1 /etc/release Solaris 10 10/08 s10s_u6wos_07b SPARC r...@host /usr/sfw/sbin#./smbd -V Version 3.0.28 r...@host /#for PKG i

[Samba] Kerberos tickets problem

2009-05-06 Thread ravi channavajhala
I'm setting up a Solaris 10 server as a test samba server with AD authentication. I'm running into a little bit of issue with Kerberos tickets. The setup is as follows Solaris-10, Windows AD-2003/R2, native Solaris (sparc) samba, Kerberos, LDAP (shipped with the distro) and IMU on windows. My L

RE: [Samba] bad encryption type in AD domain authentication

2009-05-04 Thread ravi channavajhala
Decrypt integrity check usually means your Kerberos tickets are no good or you don't have the entry in keytab which specifies the encryption method expected. The real way to fix is run the ktpass.exe from the ADS server, ftp the generated krb keytab file to the Unix server to the /tmp. Examine it

[Samba] Avoiding running net ads

2009-05-04 Thread ravi channavajhala
I recently setup Solaris server which uses AD for authentication. It is working well. Now I need to run Samba on this machine. I set up the smb.conf with appropriate entries such as 'security = ads', 'encrypt passwords = yes', use 'kerberos keytab = true', however I don't want to specify an expl