Re: [Samba] Ideas for distributed Samba servers

2010-04-12 Thread Ravi Channavajhala
On Mon, Apr 12, 2010 at 7:17 AM, Stan Hoeppner s...@hardwarefreak.com wrote: Robert LeBlanc put forth on 4/11/2010 8:19 PM: On Sun, Apr 11, 2010 at 9:03 AM, ravi channavajhala ravi.channavajh...@dciera.com wrote: WAFS (Wide Area File System) appliances can be very well deployed

Re: [Samba] Ideas for distributed Samba servers

2010-04-11 Thread ravi channavajhala
WAFS (Wide Area File System) appliances can be very well deployed for this sort of thing precisely. Unfortunately, I don't know of any opensource project for WAFS. However, commercial solutions such as Riverbed, Expand Networks, CISCO/WAFS, Juniper/Peribit do exist. Regards, /rkc CTO DCiEra

Re: [Samba] Ideas for distributed Samba servers

2010-04-11 Thread Ravi Channavajhala
On Sun, Apr 11, 2010 at 8:14 PM, Adam Tauno Williams awill...@whitemice.org wrote: On Sat, 2010-04-10 at 10:14 -0700, Eric Shubert wrote: Robert LeBlanc wrote: I'm trying to think about how to setup a Samba system and would like to pick the brains of some experts. We are looking up put a

Re: [Samba] Authenticating Samba 3.4.2 vs WinServer 2008R2

2009-10-15 Thread ravi channavajhala
[mailto:deeng...@anl.gov] Sent: Wednesday, October 14, 2009 7:24 PM To: ravi.channavajh...@dciera.com Cc: 'Bober, Mark'; samba@lists.samba.org Subject: Re: [Samba] Authenticating Samba 3.4.2 vs WinServer 2008R2 ravi channavajhala wrote: To my understanding, windows treat principal names as case

Re: [Samba] Authenticating Samba 3.4.2 vs WinServer 2008R2

2009-10-13 Thread ravi channavajhala
To my understanding, windows treat principal names as case insensitive. Kerberos treats them as case sensitive. MIT Kerberos version - 1.7 is supposed to have fixed this. The way to get around this is to add uppercase SPN names into the Kerberos keytab. Regards, /rkc -Original

[Samba] share mapping issue related to GID

2009-10-10 Thread Ravi Channavajhala
Reposting this in the hope of someone throwing some hints: I’ve setup a brand new Samba server – 3.0.33 on RHEL 5. The access to shares is a bit erratic, specifically users who belong to a group which is different from their primary group. Using

[Samba] share mapping issue related to GID

2009-10-09 Thread ravi channavajhala
I’ve setup a brand new Samba server – 3.0.33 on RHEL 5. The access to shares is a bit erratic, specifically users who belong to a group which is different from their primary group. Using LDAP, Kerberos, AD. The /etc/nsswitch.conf is set to files ldap. Not using winbind at all. The below two

[Samba] Samba Shares - Permission denied

2009-09-26 Thread ravi channavajhala
My issue is permission denied. The setup is as follows. a) All the development dirs are mounted on Solaris-10/9 server b) Home Directories are mounted on a netapp filer c) All the /projects[0-5] and /home mounts are setup in automount, NIS master is Solaris d) Samba server is Linux, with

[Samba] samba - preauthentication error

2009-09-05 Thread ravi channavajhala
Can anyone suggest how to get around the following? [2009/09/05 00:32:55, 3] libads/sasl.c:ads_sasl_spnego_bind(300) ads_sasl_spnego_bind: got server principal name = exd...@domain.example.com [2009/09/05 00:32:55, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593) ads_krb5_mk_req:

[Samba] samba - preauthentication error

2009-09-04 Thread ravi channavajhala
Can anyone suggest how to get around the following? [2009/09/05 00:32:55, 3] libads/sasl.c:ads_sasl_spnego_bind(300) ads_sasl_spnego_bind: got server principal name = exd...@domain.example.com [2009/09/05 00:32:55, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593) ads_krb5_mk_req:

Re: [Samba] File Locking, Access - Inconsistencies

2009-08-12 Thread Ravi Channavajhala
On Wed, Aug 12, 2009 at 11:01 AM, Ravi Channavajhalaravi.channavajh...@dciera.com wrote: On Wed, Aug 12, 2009 at 9:53 AM, Jeremy Allisonj...@samba.org wrote: On Wed, Aug 12, 2009 at 08:51:51AM +0530, ravi channavajhala wrote: Hi Jeremy, Why would the file name be an issue here

[Samba] File Locking, Access - Inconsistencies

2009-08-11 Thread ravi channavajhala
Lately I'm seeing bizarre problems with the SAMBA server I'm using in production. For no rhyme or reason the connections get dropped, the same set of users who previously were able to access the shares, now get permission denied. Users (not all but some) are having trouble opening the folders,

Re: [Samba] File Locking, Access - Inconsistencies

2009-08-11 Thread Ravi Channavajhala
On Wed, Aug 12, 2009 at 9:53 AM, Jeremy Allisonj...@samba.org wrote: On Wed, Aug 12, 2009 at 08:51:51AM +0530, ravi channavajhala wrote: Hi Jeremy, Why would the file name be an issue here?  It is not just one file, several files are getting affected.  I followed your earlier discussion

[Samba] I/O error when trying to write

2009-07-27 Thread ravi channavajhala
My setup is fairly straight forward; I have a Solaris 10 (SPARC) being used as a samba server with AD sign on. Users can log in fine and map their directories through windows clients. All the user home dirs and critical project dirs are on a NetAPP filer. When user tries to write a file, it

Re: [Samba] I/O error when trying to write

2009-07-27 Thread ravi channavajhala
On Mon, Jul 27, 2009 at 05:02:28PM +0530, ravi channavajhala wrote: My setup is fairly straight forward; I have a Solaris 10 (SPARC) being used as a samba server with AD sign on. Users can log in fine and map their directories through windows clients. All the user home dirs and critical

Re: [Samba] krb5 configuration generation

2009-05-15 Thread Ravi Channavajhala
this list go to the following URL and read the instructions:  https://lists.samba.org/mailman/options/samba -- Ravi Channavajhala CTO DCiEra (Extreme Data Center Efficiency) Plot #247, Road #78, Ground Floor Jubilee Hills Hyderabad 500 034 (AP) +91 96521 84670 -- To unsubscribe from this list

Re: [Samba] Timing in a script

2009-05-15 Thread Ravi Channavajhala
On Fri, May 15, 2009 at 7:43 PM, Pete Clapham peteclap...@sbcglobal.net wrote: Hi, all -- I am trying to write a script in which I can add users and their samba passwords easily and quickly.  It looks something like:    useradd -c User Name -g groupname -p unixpassword accountname    echo

[Samba] Solaris 10 (sparc) and samba issue

2009-05-11 Thread Ravi Channavajhala
The net ads joins the host to the AD, but cant get the proper kerberos tix. Manually generating the kerberos keytab from AD dont work. Any suggestions? r...@host /#head -1 /etc/release Solaris 10 10/08 s10s_u6wos_07b SPARC r...@host /usr/sfw/sbin#./smbd -V Version 3.0.28 r...@host /#for PKG

Re: [Samba] Solaris 10 (sparc) and samba issue

2009-05-11 Thread Ravi Channavajhala
what problem you're having. Maybe you could clarify, list error messages, etc. You might want to get Solaris patch 119757-14 which gives you samba 3.0.33. I don't know if it will help. I had no problems with samba 3.0.28 on Solaris 10. -Brian Ravi Channavajhala wrote: The net ads joins

Re: [Samba] Solaris 10 (sparc) and samba issue

2009-05-11 Thread Ravi Channavajhala
I don't think I missed anything as obvious as that. My problem is elsewhere...still looking. On to the next step of compiling latest and greatest samba distro.. On Mon, May 11, 2009 at 11:23 PM, Brian H. Nelson bnel...@cis.ysu.edu wrote: Ravi Channavajhala wrote: Brian, it is Windows 2003/R2

[Samba] Kerberos tickets problem

2009-05-06 Thread ravi channavajhala
I'm setting up a Solaris 10 server as a test samba server with AD authentication. I'm running into a little bit of issue with Kerberos tickets. The setup is as follows Solaris-10, Windows AD-2003/R2, native Solaris (sparc) samba, Kerberos, LDAP (shipped with the distro) and IMU on windows. My

[Samba] Avoiding running net ads

2009-05-04 Thread ravi channavajhala
I recently setup Solaris server which uses AD for authentication. It is working well. Now I need to run Samba on this machine. I set up the smb.conf with appropriate entries such as 'security = ads', 'encrypt passwords = yes', use 'kerberos keytab = true', however I don't want to specify an

RE: [Samba] bad encryption type in AD domain authentication

2009-05-04 Thread ravi channavajhala
Decrypt integrity check usually means your Kerberos tickets are no good or you don't have the entry in keytab which specifies the encryption method expected. The real way to fix is run the ktpass.exe from the ADS server, ftp the generated krb keytab file to the Unix server to the /tmp. Examine