Re: [Samba] Samba+LDAP + Primary GIDs

2010-01-29 Thread Rob Shinn
Kris Lou wrote: PDC Results: SID for local machine KIF is: S-1-5-21-1297059763-2273326489-166094 SID for domain MLC is: S-1-5-21-957249707-1866601452-441284377 Openfiler Results: SID for local machine VADER is: S-1-5-21-2859034502-3981372097-2611941478 SID for domain MLC is:

Re: [Samba] Samba+LDAP + Primary GIDs

2010-01-23 Thread Rob Shinn
, 2010 at 2:06 PM, Rob Shinn mor...@tuxedo.darktech.org wrote: Kris Lou wrote: I've checked my ldif's - the groups exist, the users exists as memberids, but it looks like samba is only checking the gid? Can you post the LDIFs of your groups (you can edit out any incriminating evidence

Re: [Samba] Samba+LDAP + Primary GIDs

2010-01-18 Thread Rob Shinn
Kris Lou wrote: I've checked my ldif's - the groups exist, the users exists as memberids, but it looks like samba is only checking the gid? Can you post the LDIFs of your groups (you can edit out any incriminating evidence ;)? Sounds like your groups are lacking correct sambaSID or

Re: [Samba] Given up on Fedora Ubuntu is 1000-folder simpler

2010-01-15 Thread Rob Shinn
Michael Lueck wrote: When Etch came out, the Samba packages were so bad that I ended up trying Ubuntu (7.04). It worked great! That's just silly. I use Ubuntu on my desktops and servers mostly because I prefer the extra fit-and-polish it has to Debian. But I've used both and the packages

Re: [Samba] samba+ldap two domains db sync?

2010-01-13 Thread Rob Shinn
Alberto Moreno wrote: Is possible to sync both ldap servers every time I change something in ldap? or a better way to do it?Alberto Moreno wrote: You could probably do this with OpenLDAP's syncrepl replication facility. You may also wish to consider combining everything into one LDAP database,

Re: [Samba] samba+ldap two domains db sync?

2010-01-11 Thread Rob Shinn
Alberto Moreno wrote: Is possible to sync both ldap servers every time I change something in ldap? or a better way to do it?Alberto Moreno wrote: You could probably do this with OpenLDAP's syncrepl replication facility. You may also wish to consider combining everything into one LDAP

Re: [Samba] samba+ldap two domains db sync?

2010-01-11 Thread Rob Shinn
Gaiseric Vandal wrote: I don't think one user in LDAP could be in two different domains- each user has to have a distinct SambaSID entry. Ooomph! *slaps forehead*. You're right. That's what I get for posting before I've had my coffeee. I stand by my original statement that OpenLDAP's

Re: [Samba] Read-only fs

2010-01-09 Thread Rob Shinn
Kacper wrote: The file exists there but is of course read-only. Does samba need to write to this secret file or why doesn't it want to open that file? If you want your root filesystem read-only (like, say, to boot your server from a CD-ROM or embedded device) then you can just copy this

Re: [Samba] Still problems with samba 3.4.1 / ldap and search for users ans machines

2009-09-16 Thread Rob Shinn
John H Terpstra - Samba Team wrote: Of over 100 LADP Samba installation I have completed over 80% successfully use: uid='username',ou=People,ou=Users,ldap_base_dn uid='machine',ou=Computers,ou=Users,ldap_base_dn Same here, though I use uid='username', ou=people, ldap_base_dn

Re: [Samba] Tuning the performance of Samba over LAN network to improve I/O performance

2009-08-09 Thread Rob Shinn
On Wed, Aug 05, 2009 at 05:46:19PM -0700, Jeremy Allison wrote: On Wed, Aug 05, 2009 at 07:34:51PM -0500, Himanshu Thapar wrote: Thank youOkay..can you explain how can I go about with hdparm or guide me to an appropriate link. Also how will this help me in diagnosing the current

Re: [Samba] Long printer name in CUPS not appear in Samba

2009-02-20 Thread Rob Shinn
Don't know if this helps, but you _can_ add a description in CUPS and Samba clients will display it. On 2/13/09, HB ciradhb.forw...@laposte.net wrote: Hi I have a Samba 3.2.7 acting as a PDC for files and printers sharing. All the print configuration is ok and network printers shared by Samba

Re: [Samba] File locking problem involving Samba, Clearcase, and Cygwin

2009-02-06 Thread Rob Shinn
On Fri, Feb 6, 2009 at 1:23 PM, Kathy banshee...@gmail.com wrote: # first statement is old and may not be obsolete but we still keep it just in case oplocks = no kernel oplocks = no level2 oplocks = no If you have 'oplocks = no', then it doesn't matter what 'kernel oplocks' or 'level2

Re: [Samba] complete newbie sid problems

2008-12-19 Thread Rob Shinn
Do you have a complete sambaDomain record in your LDAP and is it at the root level of the LDAP structure? On 12/19/08, Graham Seaman g.sea...@lse.ac.uk wrote: Hi, I'm trying to set up samba with ldap authorization on a windows network. I have samba running on one linux host, and openldap on

Re: [Samba] When to use WINS server in a home network?

2008-12-11 Thread Rob Shinn
You shouldn't need one, but running one won't really hurt either. On 12/11/08, Uriel Avalos [EMAIL PROTECTED] wrote: Hi. All, I've been reading the docs but I'm not too sure when I should run a WINS server. Just to confirm, I only need a WINS server if I have more than one workgroup? or more

Re: [Samba] Multi OS boot and shared secret trouble

2008-12-11 Thread Rob Shinn
There are no options that aren't a security nightmare other than using different hostnames for each OS. On 12/11/08, Frank Bonnet [EMAIL PROTECTED] wrote: Hello We are facing a boring trouble with multi OB boot machines that access to our samba server. All machines authenticate to samba PDC

Re: [Samba] When to use WINS server in a home network?

2008-12-11 Thread Rob Shinn
their hostname, they'll be able to browse but not share). @Doug@ - So going w/o a WINS server works even if I use different workgroups? Sweet... On Thu, Dec 11, 2008 at 10:55:39AM -0500, Rob Shinn wrote: You shouldn't need one, but running one won't really hurt either. On 12/11/08, Uriel Avalos

Re: [Samba] When to use WINS server in a home network?

2008-12-11 Thread Rob Shinn
workgroups? Sweet... On Thu, Dec 11, 2008 at 10:55:39AM -0500, Rob Shinn wrote: You shouldn't need one, but running one won't really hurt either. On 12/11/08, Uriel Avalos [EMAIL PROTECTED] wrote: Hi. All, I've been reading the docs but I'm not too sure when I should run a WINS server

Re: [Samba] Connectivity issues

2008-12-10 Thread Rob Shinn
Sounds like something at the physical layer. Try a different NIC on the server. Run some network diagnostics. On 12/10/08, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Yes, it's reliable and Samba is working on another machine just fine. That box is running Samba 3.0.20 on Slackware. This is

Re: [Samba] Samba Vista [SOLVED]

2008-08-06 Thread Rob Shinn
On Tue, August 5, 2008 8:12 pm, Michael Heydon wrote: This is what happens when you rename a user, it is the same in XP and probably 2k as well. The only way that I know of to really change a No, this does not happen on Windows 2000. Note that I'm still running Windows 2000 because it runs

Re: [Samba] Groups not showing in Win2K Control Panel Users and Passwords

2008-08-06 Thread Rob Shinn
On Tue, August 5, 2008 8:54 pm, Chris wrote: This used to work. net groupmap list shows that the mapping is there, and the SID looks correct. When I check the user after logging into the Windows 2000 workstation with WHOAMI.EXE /GROUP the DOMAIN\Admins group is listed, but when I log in

[Samba] Samba/Linux CIFS client symlinks cause freeze

2008-08-05 Thread Rob Shinn
Symlinks are causing my the Linux CIFS v1.47 client to fail with Samba 3.0.24 with Unix Extensions turned on. The messages I am getting are in the syslog are: Jul 30 21:22:05 dagda kernel: [88044.98] CIFS VFS: server not responding Jul 30 21:22:05 dagda kernel: [88044.98] CIFS

[Samba] msdfs root = yes is the default???

2008-07-28 Thread Rob Shinn
Why is that when you create a share, the default is 'msdfs root = yes'? Also, why is that a share that is set 'msdfs root = yes' -- or, rather, a share that does /not/ set 'msdfs root = no' -- advertises that it is a DFS root to the Linux CIFS client, /even /when 'host msdfs = no'? This sounds

Re: [Samba] Samba AutoCAd 2005

2008-06-05 Thread Rob Shinn
Hi everyone-- I've worked with many, many CAD, CAM and PLM products including AutoCAD, CATIA, I-DEAS, UG/NX, 3DStudio Max, Teamcenter, etc. for many, many years and consider myself to be an expert in performance, scalability and reliability of these systems. Most likely, your problems are not

Re: [Samba] Grant or deny internet access based on Samba domain logon?

2008-06-03 Thread Rob Shinn
On Tue, Jun 3, 2008 at 5:31 AM, Fabio Muzzi [EMAIL PROTECTED] wrote: When a user logs on, I would like to run a script that modifies firewall rules based on the group that the user belongs to (this determines if he has internet access or not) and based on the workstation's IP address (so I

Re: [Samba] Help - Cross-Subnet Browsing with OpenVPN

2008-06-02 Thread Rob Shinn
Copied to list. (Forgot to hit 'Reply All'_ On Mon, Jun 2, 2008 at 3:02 PM, Rob Shinn [EMAIL PROTECTED] wrote: I can ping each server's IP from the other server. The following nmblookup commands both work: Hi, Misty: The all-important question is not whether you can ping each server's

Re: [Samba] NetBIOS Hostname

2008-05-30 Thread Rob Shinn
On Fri, May 30, 2008 at 1:54 PM, William W. Hammond [EMAIL PROTECTED] wrote: I was setting up Samba on an OpenSuSE 10.3 i386 computer. At the last minute I decided to enter a NetBIOS Hostname, big mistake. While this may be a question better suited to the OpenSUSE list than this one, you

Re: [Samba] Migration from Ldap to Samba+Ldap

2008-05-30 Thread Rob Shinn
On Fri, May 30, 2008 at 3:12 PM, Charlie [EMAIL PROTECTED] wrote: When I converted our networks to samba a decade or more ago, I started out by trying to crack all our user passwords by brute force, but I could only get about 90% of them in any reasonable time frame. So, Wow. *Only* 90%.

Fwd: [Samba] Files over 4GB not listing properly. Cannot get CIFSworking.

2008-05-06 Thread Rob Shinn
-- Forwarded message -- From: Rob Shinn [EMAIL PROTECTED] Date: Tue, May 6, 2008 at 2:57 PM Subject: Re: [Samba] Files over 4GB not listing properly. Cannot get CIFSworking. To: Matt Boyle [EMAIL PROTECTED] Also, I cannot mount the samba share using CIFS. I use the line