Re: [Samba] kinit user works, kinit user@domain.local doesn't

2013-10-13 Thread Rob Townley
Try appending a dot character to the end and put it in domain_realm mapping. Let us know. kinit user@domain.local. On Oct 13, 2013 11:08 AM, "Danny Fedor" wrote: > I'm running Samba 4.0.10 on Ubuntu Server 12.04.3 x64 > Samba was installed from source and provisioned with internal DNS as PDC o

Re: [Samba] Windows Profiles Not Being Created

2013-05-22 Thread Rob Verduijn
Interesting, Sorry for breaking in on this thread, but I just wanted to say. Thank you for the registry tip, it solved a problem for me that was driving me nuts. Rob 2013/5/22 David Noriega : > Ahh that did it. The CentralProfile value was from a previous server > layout and thus it co

Re: [Samba] Rsyncing Samba4 Roaming Profiles between servers

2013-04-22 Thread Rob Beard
ser.DOSATTRIB has a string of characters assigned to it. security.NTACL, system.posix_acl_access and system.posix_acl_default are the same on both servers. I've manually copied over the attributes using setfattr -n --value= and I'm still getting the same issue. Rob -- To unsubscribe f

Re: [Samba] Rsyncing Samba4 Roaming Profiles between servers

2013-04-22 Thread Rob Beard
On 17/04/2013 16:32, Rob Beard wrote: Hi folks, I've got a bit of an issue with roaming profiles and I wondered if someone might be able to help please? :-) We've started rolling out Samba 4 across our network. Currently it's on 3 of our 4 sites, one site has two Samba server

Re: [Samba] Rsyncing Samba4 Roaming Profiles between servers

2013-04-18 Thread Rob Beard
and setfattr will be helpful in sorting this out. Good luck, Ricky Thanks Ricky, I was using the -A and -X switches on rsync, but I'll do a bit more reading up on rsync, I'm guessing I've possibly missed something. Rob -- To unsubscribe from this list go to the following UR

[Samba] Rsyncing Samba4 Roaming Profiles between servers

2013-04-17 Thread Rob Beard
ese issues we're a bit stuck. If anyone could help, or maybe suggest another way of syncing the roaming profiles between the servers that would be great. Thanks in advance, Rob -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Question marks, asterisks, colons in filenames

2013-02-21 Thread Rob Townley
On Thu, Feb 21, 2013 at 5:45 PM, Rob Townley wrote: > > > On Thursday, February 21, 2013, Jeremy Allison wrote: >> On Thu, Feb 21, 2013 at 04:38:13PM -0600, Rob Townley wrote: >>> On Wednesday, February 20, 2013, Jeremy Allison wrote: >>> > On Wed, Fe

Re: [Samba] Question marks, asterisks, colons in filenames

2013-02-21 Thread Rob Townley
On Thursday, February 21, 2013, Jeremy Allison wrote: > On Thu, Feb 21, 2013 at 04:38:13PM -0600, Rob Townley wrote: >> On Wednesday, February 20, 2013, Jeremy Allison wrote: >> > On Wed, Feb 20, 2013 at 11:30:37AM +0100, Sven Tegethoff wrote: >> >> >> >

Re: [Samba] Question marks, asterisks, colons in filenames

2013-02-21 Thread Rob Townley
On Wednesday, February 20, 2013, Jeremy Allison wrote: > On Wed, Feb 20, 2013 at 11:30:37AM +0100, Sven Tegethoff wrote: >> >> What we have here is a problem of two incompatible text fields, and >> it does not make a difference if that incompatibility is a filenames >> in a file system or some tab

Re: [Samba] Question marks, asterisks, colons in filenames

2013-02-19 Thread Rob Townley
and yes, i have "some" special characters in filenames, but only the allowed > ones. > and no, i dont have problems with windows and unix with these files. > > > Louis > > >>-Oorspronkelijk bericht- >>Van: rob.town...@gmail.com >>[mailto:samb

Re: [Samba] Question marks, asterisks, colons in filenames

2013-02-18 Thread Rob Townley
On Mon, Feb 18, 2013 at 4:56 PM, Jonathan Buzzard wrote: > On 18/02/13 19:16, Ray wrote: >> >> Hi, >> >> I suppose this question must have been posted a hundred times, but >> Google brings up nothing useful: >> >> Consider "The Wall" from Pink Floyd in an MP3 collection. There's "In >> The Flesh.m

Re: [Samba] PROPOSAL: Remove SWAT in Samba 4.1

2013-02-17 Thread Rob Townley
This is why it is smart to use a dedicated Firefox profile for banking, another profile just for email, another profile for web browsing.And of course, another dedicated profile for internal systems only such as for managing dd-wrt, switches, iLO, DRAC, webcams, webmin and swat. Safer is to h

Re: [Samba] Fwd: correction - Frustrated with "there are currently no logon servers available"

2013-02-01 Thread Rob Townley
Win7 by default will only use 445 On Friday, February 1, 2013, Morgan Toal wrote: > OK, > > How do I confirm the sid that the windows box is using? > > I can get the domain sid from net getlocalsid > I can get the user sid of a local user no problem > > In reference to unjoining and rejoining...

Re: [Samba] Samba4 Winbind - is it really not possible to be sensible?

2013-01-26 Thread Rob McCorkell
Samba is set to use rfc2307, but no uidNumber attribute exists for an object, the UID number gets allocated. But once a uidNumber attribute is set, and the allocation has already taken place, the allocated UID is used instead. I can't imagine that this is the desired behaviour with rfc2307

Re: [Samba] Samba4 Winbind - is it really not possible to be sensible?

2013-01-26 Thread Rob McCorkell
this form of RID mapping, even though previous versions did support it. Rob -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] Samba4 Winbind - is it really not possible to be sensible?

2013-01-25 Thread Rob McCorkell
as seen by Samba, which as far as I know are used very little within Samba, where the objectSid is used instead. Of course, it could be that I have a massive misunderstanding of the internals of Samba4, and there is a reason why this functionality wasn't brought across. Rob -- To unsubs

Re: [Samba] Samba4 AD DC Sites / Rename Default-First-Site-Name and internal DNS

2012-12-31 Thread Rob Townley
On Sun, Dec 30, 2012 at 10:06 PM, Matthieu Patou wrote: > On 12/30/2012 07:10 PM, Achim Gottinger wrote: > >> As you have noticed, we are very good at adding DNS records, but never >>> remove the old ones. What you have done seems reasonable, if you have >>> renamed the site, removing the remain

Re: [Samba] Samba4 LDAP ACLs - access to POSIX attributes from a non-admin account

2012-12-16 Thread Rob McCorkell
Sorry for the late reply - was running it through testing in our environment. But so far it seems to be working a treat! Thanks for this, much appreciated. Rob On 15/12/12 16:42, Thomas Simmons wrote: Hello Rob, You can enable anonymous binding to AD by creating the attribute "dsHeuri

Re: [Samba] Samba4 LDAP ACLs - access to POSIX attributes from a non-admin account

2012-12-15 Thread Rob McCorkell
On 15/12/12 13:31, Achim Gottinger wrote: It might work if you give Anonymous full read Access to the cn=Users branch via AD User and Group management. How is it possible to do this from the Samba4 server? Unfortunately Windows is out of the question here, because this will be part of Karoshi S

Re: [Samba] Samba4 LDAP ACLs - access to POSIX attributes from a non-admin account

2012-12-14 Thread Rob McCorkell
access to LDAP rather than needing the dedicated user, which brings with it security holes. On 14/12/12 18:03, Rob McCorkell wrote: In our current testing environment, we are using nslcd to get user and group information from the Samba4 LDAP server, using the last part of objectSid as uidNumber

[Samba] Samba4 LDAP ACLs - access to POSIX attributes from a non-admin account

2012-12-14 Thread Rob McCorkell
ess scarce) documentation shows that to do that requires each entry be specifically set to allow this, which seems to be more hassle than it is worth. Any help on this would also be greatly appreciated. Thanks, Rob -- To unsubscribe from this list go to the following URL and read the instructio

Re: [Samba] Failing to get uids from AD

2012-07-17 Thread Rob Townley
Precisely what ldap attribute are you setting user id numbers in AD? You may want to check. There are numerous attribute names that include uid and gid, but you need the correct one. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mail

Re: [Samba] Problems accessing Windows shares 3.5.8 vs 3.6.3

2012-04-16 Thread Rob LaRose
2008, and I recommend it highly. --Rob Rob LaRose systems administrator imaginary forces | 530 west 25th street | new york | p 646.486.6868 | www.imaginaryforces.com <http://www.imaginaryforces.com/> On 4/16/12 9:18 AM, "Christopher Davis" wrote: >I am trying to get

Re: [Samba] How do I know if I'm using SMB2?

2012-03-28 Thread Rob Marshall
It would be very helpful if the protocol is displayed in smbstatus. Vielen Dank :-) Rob On 3/28/12 3:08 AM, Volker Lendecke wrote: On Tue, Mar 27, 2012 at 05:13:34PM -0700, Jeremy Allison wrote: On Tue, Mar 27, 2012 at 05:03:49PM -0400, Rob Marshall wrote: Hi, I've installed 3.6.3

Re: [Samba] How do I know if I'm using SMB2?

2012-03-27 Thread Rob Marshall
Never mind...I ran Ethereal and started a capture and right in the "Protocol" column it said: SMB2. So, problem solved. Thanks, Rob On 3/27/12 9:31 PM, Rob Marshall wrote: Hi Jeremy, Well, since I'd rather not have to look at the actual negotiation, anything would help. I&

Re: [Samba] How do I know if I'm using SMB2?

2012-03-27 Thread Rob Marshall
Hi Jeremy, Well, since I'd rather not have to look at the actual negotiation, anything would help. I'm just a little surprised there isn't some sort of way to check it...And by offering a "low debug-level message" are you saying that there is one? Or that you could add

[Samba] How do I know if I'm using SMB2?

2012-03-27 Thread Rob Marshall
Hi, I've installed 3.6.3 on a Linux system (SLES 10) and I am connecting from a Windows 7 VM running on my Mac. I added "max protocol = SMB2" to my smb.conf and restarted Samba. How can I check and verify that the protocol I'm using is actually SMB2? Thanks, Rob -- To u

Re: [Samba] Grant computer account access to share?

2011-11-20 Thread Rob Townley
On Thu, Nov 10, 2011 at 8:48 AM, Chris Weiss wrote: > On Thu, Nov 10, 2011 at 2:24 AM, Andrew Lyon > wrote: > > Hi, > > > > I have a Microsoft application (SCCM) which I need to grant access to > > a samba share, however the service which reads the files can only > > authenticate using the compu

[Samba] Tuning OSX samba for WAN vs LAN

2011-07-05 Thread Rob LaRose
for any tips. --Rob Rob LaRose systems administrator imaginary forces | 530 west 25th street | new york | p 646.486.6868 | www.imaginaryforces.com<http://www.imaginaryforces.com/> This e-mail is intended only for the named person or entity to which

Re: [Samba] XP not obeying Samba file perms

2011-03-17 Thread Rob Mason
The files aren't locked as I can modify them Photoshop? It's only the "Rotate" shell extension that won't work until _after_ Photoshop has opened and re-written the file. However, I do suspect a locking related problem... --- Original Message --- From: Joh

Re: [Samba] possible to deactivate pre-authentification on the Linux (or windows)- Please help

2011-03-15 Thread Rob Townley
On Wed, Mar 9, 2011 at 12:33 AM, Sharik M wrote: > Dear Friend, > > > Is it possible to deactivate pre-authentification on the Linux (or > > Windows) side to avoid these messages ? > > Becouse i am getting lot of erro in windows 2003 domain. > > Hi, > > When validating users on my Linux system aga

[Samba] XP not obeying Samba file perms

2011-03-13 Thread Rob Mason
Hi List, I have an unusual problem concerning the Windows XP "Rotate" image explorer shell extension. I have a share called "Archives" defined with a number of sub-directories. Whilst I have read/write permission to all directories, I am unable to use the Windows XP "Rotate Clockwise" or "Rotat

Re: [Samba] Managing win7 machines..

2011-01-28 Thread Rob Townley
FusionInventory.org OPSI.org On Fri, Jan 28, 2011 at 2:47 PM, wrote: > >> >> Ok, i get it...   so both options are horror... >> >> so basically i have to use samba4 for the policies and all. >> and use samba3 on a different machine for the network browsing and >> printing. >> must be do-able...

[Samba] How to backup/restore printer settings?

2010-11-29 Thread Rob Moser
e bunch of printers, rather than manually wading through a bunch of clicky windows re-doing them all one-by-one...) Thanks for any assistance, - rob. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Win7 cannot net use z: Samba share

2010-10-05 Thread Rob Townley
On Tue, Oct 5, 2010 at 9:26 AM, John Hendrix wrote: > Hi all > > The symptom is: > >> C:\Windows\system32>net USE z: \\10.10.23.219\share /USER:SMBUSER >> [password] >> >> System error 1326 has occurred. >> > My situation > > I am using VirtualBox.  Windows 7 Home is the host.  Fedora 13 is the gu

Re: [Samba] help with AD integration

2010-09-29 Thread Rob LaRose
Hi Ben, Which version of AD are you using? We had no luck integrating Solaris Samba w/ AD 2008 last year, and were forced to use a third-party authentication product called Centrify DirectControl to facilitate. This may have changed by now — have you opened a support case with Oracle? --Rob

Re: [Samba] Change of kerberos encryption from DES to AES

2010-08-27 Thread Rob Townley
On Thu, Aug 26, 2010 at 10:41 AM, Masopust, Christian wrote: > Hello all, > > as our Windows DCs will switch off DES encryption in the near future I > have to change our > Samba-Server to AES encryption. > > If I understand it correctly I have to change kerberos-configuration to > new encryption t

Re: [Samba] samba and ms server 2008

2010-08-09 Thread Rob Townley
On Mon, Aug 9, 2010 at 2:07 PM, Gaiseric Vandal wrote: > http://wiki.samba.org/index.php/Windows7 > > > I would be pretty sure that if Windows 7 doesn't work with Samba 3.0.x that > Windows 2008 won't either.   Rather than compiling samba 3.4 or 3.5 from > source I would go with Fedora Core 11 (sa

Re: [Samba] Need suggestion for domain controller

2010-08-01 Thread Rob Townley
Please elaborate on why you do not like OpenLDAP and SambaPDC same machine? RedHat sponsored FreeIPA.org does Samba, 389 ldap, Dns, pki all on one machine. So does win ads. On 7/31/10, John Drescher wrote: >>     I wish to establish domain controller based on Centos 5.x.I am >> considering belo

Re: [Samba] winbind and authentication with local accounts

2010-07-13 Thread Rob Moser
Depends on where you're talking about your users authenticating, but it sounds like you need a: winbind use default domain = yes in your smb.conf. - rob. On 07/13/2010 02:00 AM, Philipp Braband wrote: > Hi everyone, > > I have a problem with my samba and winbind

Re: [Samba] Error 0x000003e6 when trying to connect to a printer from w2k8 (x64)

2010-07-12 Thread Rob Moser
nistrative Templates:Printers:Always render print jobs on the server Windows documentation says this defaults to disabled, but we have found this to be (at least partially) untrue for W2k8 - if you need it disabled then disable it explicitly. Hopefully that works for you... - rob. On 07/12/201

[Samba] Can't connect with rpcclient

2010-07-07 Thread Rob Moser
it if anyone can help me find what works!) thanks, - rob. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Default Hidden Disk Shares

2010-07-02 Thread Rob Townley
Sharing of complete$ drives may no longer be a default in WinVista / 2008. Some of the other$ shares such as IPC$ and ADMIN$ may be needed to manage your Linux shares remotely using windows compmgmt.msc and remote registry. http://book.opensourceproject.org.cn/sysadmin/samba/sambao3rd/opensourc

Re: [Samba] wbinfo recognises my username, smbclient does not

2010-07-01 Thread Rob Moser
(should have) changed. I think my machine is haunted... *sigh* - rob. On 06/30/2010 03:26 PM, Rob Moser wrote: > Hello folks. > > Brand new 3.5.4 install of samba, on a brand new redhat 5.5 install, > trying to connect to a windows domain and allow AD users access. I used > a s

[Samba] wbinfo recognises my username, smbclient does not

2010-06-30 Thread Rob Moser
but figured its better to put too much in than leave too much out. Any suggestions would be most appreciated; thanks. - rob. [r...@dev-acadprtsrv3 log]# kinit -V rmoser Password for rmo...@students.froot.nau.edu: Authenticated to Kerberos v5 [r...@dev-acadprtsrv3 log]# klist -5 Ticket c

Re: [Samba] Winbind problem: can't convert sids and gids

2010-06-23 Thread Rob Moser
I did see the manual mapping option in wbinfo, but we have a fairly dynamic user base, so manual configuration didn't seem viable. Thanks for your help though! Hopefully someone can tell us both how to get the automatic mapping working... - rob. On 06/23/2010 12:04 PM, Gaiseric Va

[Samba] Winbind problem: can't convert sids and gids

2010-06-23 Thread Rob Moser
ps = no winbind nested groups = yes winbind use default domain = yes So it is using a default domain (the correct one; I checked) and I'm not just running out of gids. My various /var/log/samba/log.* files contain almost exactly nothing from the time of the transaction. Any hel

Re: [Samba] samba printing from 64-bit windows server 2008

2010-06-14 Thread Rob Moser
ing this policy not configured is the same as disabling it. They lie. - rob. On 06/08/2010 11:43 AM, Rob Moser wrote: > Some additional information on this problem: > > I set up wireshark to do a packet trace of the connection attempt. I'm > not familiar enough with

Re: [Samba] samba printing from 64-bit windows server 2008

2010-06-08 Thread Rob Moser
ll log or the full packet trace - way too much for a mailing list. If no one recognises the problem from this much then I'll attach full data to a bug report.) Thanks for any suggestions, - rob. On 06/07/2010 03:51 PM, Rob Moser wrote: > I have a redhat EL5 samba server hosting a collec

[Samba] samba printing from 64-bit windows server 2008

2010-06-07 Thread Rob Moser
enerates the error above. Any suggestions? Thanks, - rob. # testparm Load smb config files from /etc/samba/smb.conf Unknown parameter encountered: "idmap domains" Ignoring unknown parameter "idmap domains" Processing section "[printers]" Processing section &

Re: [Samba] Problems with SID

2010-06-04 Thread Rob Townley
On Fri, Jun 4, 2010 at 10:10 AM, Gerard Hooton wrote: > Can anyone help me with this, I am badly stuck on this? > > //Ger > > > -- > Gerard Hooton. > Department of Microelectronic Engineering U.C.C. > Butler Building, > Enterprise Centre, > North Mall. > Cork. > > Tel: +353 21 4904576 > Fax: +353

[Samba] smbd panic - tdb_reopen: file dev/inode has changed!

2010-05-11 Thread Rob Moser
ying to move tdb files across machines in the first place? If I wipe them clean and just copy the configuration files, will I keep all of my configuration? Thanks for any advice, - rob. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] smbclient -k works; mount -t cifs does not

2010-05-04 Thread Rob Townley
On Tue, May 4, 2010 at 1:01 PM, Jeff Layton wrote: > On Mon, 03 May 2010 23:25:13 -0400 > Mike Leone wrote: > >> I am confused (nothing new there ...). I have 2 Ubuntu 9.10 Samba >> servers. I am trying to mount a share from the other (i.e., "workhorse" >> is trying to mount a share on "dual-boot

Re: [Samba] Encryption

2010-04-17 Thread Rob Townley
On Sat, Apr 17, 2010 at 6:24 AM, Andrew Malton wrote: > I want to (continue to) use Samba code to obtain data needed by my Linux > client.  This is currently done by calls into Samba's libraries. >  Unfortunately the resulting rpc traffic is unencrypted.  I think this has > to do with the configur

Re: [Samba] ads_sasl_spnego_krb5_bind failed: Program lacks supportfor encryption type [SEC=UNCLASSIFIED]

2010-02-23 Thread Rob Townley
On Sat, Feb 13, 2010 at 8:57 PM, Jeremy Allison wrote: > On Sat, Feb 13, 2010 at 01:35:12PM -0600, d...@briannassaladdressing.com > wrote: >> Alex, >> >> I've been a victim of this since Day 1. After a lot of reading and >> emailing, it comes down to this. libkrb5-3 version 1.8x by default >>

Re: [Samba] ads_sasl_spnego_krb5_bind failed: Program lacks supportfor encryption type [SEC=UNCLASSIFIED]

2010-02-16 Thread Rob Townley
On Sat, Feb 13, 2010 at 1:35 PM, wrote: > Alex, > > I've been a victim of this since Day 1. After a lot of reading and > emailing, it comes down to this. libkrb5-3 version 1.8x by default > disallows DES encryption. /etc/krb5.conf can be changed to allow weak > encryption, but as it relates to

Re: [Samba] ads_sasl_spnego_krb5_bind failed: Program lacks support for encryption type [SEC=UNCLASSIFIED]

2010-02-12 Thread Rob Townley
On Fri, Feb 12, 2010 at 8:25 PM, Wilkinson, Alex < alex.wilkin...@dsto.defence.gov.au> wrote: > Anyone ? > > -Alex > >0n Thu, Feb 11, 2010 at 08:00:57PM +0800, Wilkinson, Alex wrote: > >>Hi all, >> >>According to this bug report: >>http://bugs.debian.org/cgi-bin/bugreport.cgi

[Samba] AD Computer Account Becoming Disabled on Re-Join

2010-02-02 Thread Rob Faulkner
ng glaringly wrong, has seen this before, or can give me any more avenues of investigation. Many thanks in advance, Rob. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba+LDAP + Primary GIDs

2010-01-29 Thread Rob Shinn
Kris Lou wrote: PDC Results: SID for local machine KIF is: S-1-5-21-1297059763-2273326489-166094 SID for domain MLC is: S-1-5-21-957249707-1866601452-441284377 Openfiler Results: SID for local machine VADER is: S-1-5-21-2859034502-3981372097-2611941478 SID for domain MLC is: S-1-5-21-9572497

Re: [Samba] Samba+LDAP + Primary GIDs

2010-01-23 Thread Rob Shinn
What does your 'net getdomainsid' or 'net getlocalsid' output look like? Kris Lou wrote: Hi Rob, Thanks for the quick reply - Here it is (mostly with some cut and paste). CentOS 5.4 Samba 3.2.15 dn: cn=Domain Admins,ou=Group,dc=themusiclink,dc=net description: Netbios D

Re: [Samba] Samba+LDAP + Primary GIDs

2010-01-18 Thread Rob Shinn
Kris Lou wrote: I've checked my ldif's - the groups exist, the users exists as memberids, but it looks like samba is only checking the gid? Can you post the LDIFs of your groups (you can edit out any incriminating evidence ;)? Sounds like your groups are lacking correct sambaSID or sambaGro

Re: [Samba] Given up on Fedora Ubuntu is 1000-folder simpler

2010-01-15 Thread Rob Shinn
Michael Lueck wrote: When Etch came out, the Samba packages were so bad that I ended up trying Ubuntu (7.04). It worked great! That's just silly. I use Ubuntu on my desktops and servers mostly because I prefer the extra fit-and-polish it has to Debian. But I've used both and the packages th

Re: [Samba] Can only log on to domain, not local machine

2010-01-13 Thread Rob Feldman
ehalf Of Gaiseric Vandal Sent: Wednesday, January 13, 2010 9:30 AM To: samba@lists.samba.org Subject: Re: [Samba] Can only log on to domain, not local machine On 01/12/10 21:14, Rob Feldman wrote: > Hi Don, > > Yeah, the behavior you describe is what I expected but not what I'm

Re: [Samba] samba+ldap two domains db sync?

2010-01-13 Thread Rob Shinn
Alberto Moreno wrote: Is possible to sync both ldap servers every time I change something in ldap? or a better way to do it?Alberto Moreno wrote: You could probably do this with OpenLDAP's syncrepl replication facility. You may also wish to consider combining everything into one LDAP database,

Re: [Samba] Can only log on to domain, not local machine

2010-01-12 Thread Rob Feldman
he default setting to keep the last 10 logins is intact. My setup is the same as yours, XP clients of domain with a Samba PDC. I maintain another similar system at work which works fine. I really appreciate the effort -- any other ideas? Thanks, Rob -Original Message- From:

[Samba] Can only log on to domain, not local machine

2010-01-12 Thread Rob Feldman
Used Administrator login on XP client to grant domain users rights to log on to client machine (such as when offline). All attempts to log on to local machine fail authentication (error "System could not log you on. Check user name and domain..."). Everything else works fine, including logon to dom

Re: [Samba] samba+ldap two domains db sync?

2010-01-11 Thread Rob Shinn
Gaiseric Vandal wrote: I don't think one user in LDAP could be in two different domains- each user has to have a distinct SambaSID entry. Ooomph! *slaps forehead*. You're right. That's what I get for posting before I've had my coffeee. I stand by my original statement that OpenLDAP's

Re: [Samba] samba+ldap two domains db sync?

2010-01-11 Thread Rob Shinn
Alberto Moreno wrote: Is possible to sync both ldap servers every time I change something in ldap? or a better way to do it?Alberto Moreno wrote: You could probably do this with OpenLDAP's syncrepl replication facility. You may also wish to consider combining everything into one LDAP database,

Re: [Samba] Read-only fs

2010-01-09 Thread Rob Shinn
Kacper wrote: The file exists there but is of course read-only. Does samba need to write to this secret file or why doesn't it want to open that file? If you want your root filesystem read-only (like, say, to boot your server from a CD-ROM or embedded device) then you can just copy this fi

Re: [Samba] tree connect failed: NT_STATUS_BAD_NETWORK_NAME

2009-12-28 Thread Rob Townley
On Mon, Dec 28, 2009 at 4:03 AM, Michael Adam wrote: > Hi Dominic, > > Dominic Gamble wrote: >> Hi, >> >> I can't get access to any shares when running "smbclient //DUCK/test -U >> Dominic". I'm getting the message: >> tree connect failed: NT_STATUS_BAD_NETWORK_NAME >> >> I'm pretty sure it's auth

Re: [Samba] dns lookups for SRV kerberos

2009-12-15 Thread Rob Townley
On Thu, Dec 10, 2009 at 9:21 AM, wrote: > Hi, > > > I have raised this question on the kerberos mailing list, but have been told > that Samba has it's own behavior regarding SRV lookups. > > My configuration uses the following : >  dns_lookup_realm = false >  dns_lookup_kdc = false > > [realms]

Re: [Samba] kerberos configuration in samba

2009-12-15 Thread Rob Townley
On Tue, Dec 15, 2009 at 4:48 AM, Rajesh Ghanekar wrote: > Hi All, >  I am using samba-3.2.11-0.1.145 in my setup. I have multiple domain > controllers > for a domain. I am confused on do I need to edit /etc/krb5.conf or not. I am > using > MIT kerberos (krb5-1.4.3-19.34) on SLES10. > > Here is wha

[Samba] samba caching a broken krb5.conf.NETBIOSDOMAINNAME

2009-12-14 Thread Rob Townley
i am in a mixed win2000 and win2003 R1 ActiveDirectory environment. Have always had ntlmv2 server and client required. LM and NTLM have always been rejected. That is how it has been for 10 years. Mounting from CentOS 5 to the windows servers has not been an issue for years. However, using ADS c

[Samba] winbind not resolving group membership changes

2009-10-09 Thread Rob VanFleet
nbind files group: winbind files I did some googling for this problem, and found a few instances that sounded similar, but I didn't see any solutions. Thanks in advance for any assistance you might be able to provide. Rob -- To unsubscribe from this list go to the following URL and

Re: [Samba] Still problems with samba 3.4.1 / ldap and search for users ans machines

2009-09-16 Thread Rob Shinn
John H Terpstra - Samba Team wrote: Of over 100 LADP Samba installation I have completed over 80% successfully use: uid='username',ou=People,ou=Users, uid='machine',ou=Computers,ou=Users, Same here, though I use uid='username', ou=people, cn='machine', ou=hosts, and make the object str

Re: [Samba] LDAP errors with v3.0.34 using the LDAP schema file with Sun DS 5.2

2009-08-24 Thread Rob Mottishaw
es sambapwdhistorylength, sambalockoutthreshold, sambamaxpwdage should be included, in our case, they are not. Thanks for any assistance, Rob Mottishaw Rob Mottishaw wrote: Receive the following errors when users authenticate with LDAP schema file included with Sun DS 5.2: ERROR<5897> - Schema - conn

[Samba] LDAP errors with v3.0.34 using the LDAP schema file with Sun DS 5.2

2009-08-20 Thread Rob Mottishaw
e are not among those listed in the schema file for SAMBA 3.0.x. Is there an updated schema file or a way to configure the authentication to remove the verification of these attributes? Thank you, Rob Mottishaw -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Tuning the performance of Samba over LAN network to improve I/O performance

2009-08-09 Thread Rob Shinn
On Wed, Aug 05, 2009 at 05:46:19PM -0700, Jeremy Allison wrote: > On Wed, Aug 05, 2009 at 07:34:51PM -0500, Himanshu Thapar wrote: > > Thank youOkay..can you explain how can I go about with hdparm or > > guide me to an appropriate link. Also how will this help me in diagnosing > > the curre

Re: [Samba] Can SAMBA make a kerberos keytab on Solaris 10?

2009-03-18 Thread Rob LaRose
way to get samba / net ads join to just use the existing kerberos setup / keytab and NOT try to create a new account? --Rob On Mar 18, 2009, at 4:56 PM, Edward Irvine wrote: Rob, Hi Samba people! I'm trying to use SAMBA (the version included with Solaris 10) with an AD. NET

[Samba] Can SAMBA make a kerberos keytab on Solaris 10?

2009-03-18 Thread Rob LaRose
reate or modify a keytab file that I can find. I have use kerberos keytab = true in my smb.conf file, but I can't see that it actually does anything. Can anyone steer me in the right direction here? I've been chasing this for over a month. --Rob -- To unsubscribe from this

Re: [Samba] Long printer name in CUPS not appear in Samba

2009-02-20 Thread Rob Shinn
Don't know if this helps, but you _can_ add a description in CUPS and Samba clients will display it. On 2/13/09, HB wrote: > Hi > > I have a Samba 3.2.7 acting as a PDC for files and printers sharing. > All the print configuration is ok and network printers shared by Samba and > managed by CUPS a

Re: [Samba] File locking problem involving Samba, Clearcase, and Cygwin

2009-02-06 Thread Rob Shinn
On Fri, Feb 6, 2009 at 1:23 PM, Kathy wrote: > > # first statement is old and may not be obsolete but we still keep it > just in case > oplocks = no > kernel oplocks = no > level2 oplocks = no > If you have 'oplocks = no', then it doesn't matter what 'kernel oplocks' or 'level2 oplocks' are set

Re: [Samba] complete newbie sid problems

2008-12-19 Thread Rob Shinn
Do you have a complete sambaDomain record in your LDAP and is it at the root level of the LDAP structure? On 12/19/08, Graham Seaman wrote: > Hi, > > I'm trying to set up samba with ldap authorization on a windows network. > I have samba running on one linux host, and openldap on another. I have

Re: [Samba] When to use WINS server in a home network?

2008-12-11 Thread Rob Shinn
Caveats--virtual machines doing nat are, by definition, on a separate subnet. And your friends can share without a hostname--just access by IP address! (ACLs apply of course) On 12/11/08, Uriel Avalos <[EMAIL PROTECTED]> wrote: > @Rob@ - I was just thinking in terms of keeping it si

Re: [Samba] When to use WINS server in a home network?

2008-12-11 Thread Rob Shinn
On 12/11/08, Uriel Avalos <[EMAIL PROTECTED]> wrote: > @Rob@ - I was just thinking in terms of keeping it simple. One less thing I > need to worry about. On top of that, my computers and > any friend's computers will work right out the box (for the most part. I > imagine, if

Re: [Samba] Multi OS boot and shared secret trouble

2008-12-11 Thread Rob Shinn
There are no options that aren't a security nightmare other than using different hostnames for each OS. On 12/11/08, Frank Bonnet <[EMAIL PROTECTED]> wrote: > Hello > > We are facing a boring trouble with multi OB boot machines > that access to our samba server. > > All machines authenticate to sa

Re: [Samba] When to use WINS server in a home network?

2008-12-11 Thread Rob Shinn
You shouldn't need one, but running one won't really hurt either. On 12/11/08, Uriel Avalos <[EMAIL PROTECTED]> wrote: > Hi. All, I've been reading the docs but I'm not too sure when I should run a > WINS server. > > Just to confirm, I only need a WINS server if I have more than one > workgroup? o

Re: [Samba] Connectivity issues

2008-12-10 Thread Rob Shinn
Sounds like something at the physical layer. Try a different NIC on the server. Run some network diagnostics. On 12/10/08, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Yes, it's reliable and Samba is working on another machine just fine. That > box is running Samba 3.0.20 on Slackware. This

Re: [Samba] Groups not showing in Win2K Control Panel "Users and Passwords"

2008-08-06 Thread Rob Shinn
On Tue, August 5, 2008 8:54 pm, Chris wrote: > This used to work. > > "net groupmap list" shows that the mapping is there, and the SID looks > correct. > > When I check the user after logging into the Windows 2000 workstation > with WHOAMI.EXE /GROUP the DOMAIN\Admins group is listed, but when I >

Re: [Samba] Samba & Vista [SOLVED]

2008-08-06 Thread Rob Shinn
On Tue, August 5, 2008 8:12 pm, Michael Heydon wrote: > This is what happens when you rename a user, it is the same in XP and probably 2k as well. The only way that I know of to really change a No, this does not happen on Windows 2000. Note that I'm still running Windows 2000 because it runs ve

[Samba] Samba/Linux CIFS client symlinks cause freeze

2008-08-05 Thread Rob Shinn
Symlinks are causing my the Linux CIFS v1.47 client to fail with Samba 3.0.24 with Unix Extensions turned on. The messages I am getting are in the syslog are: Jul 30 21:22:05 dagda kernel: [88044.98] CIFS VFS: server not responding Jul 30 21:22:05 dagda kernel: [88044.98] CIFS VF

[Samba] msdfs root = yes is the default???

2008-07-28 Thread Rob Shinn
Why is that when you create a share, the default is 'msdfs root = yes'? Also, why is that a share that is set 'msdfs root = yes' -- or, rather, a share that does /not/ set 'msdfs root = no' -- advertises that it is a DFS root to the Linux CIFS client, /even /when 'host msdfs = no'? This sounds li

Re: [Samba] Samba & AutoCAd 2005

2008-06-05 Thread Rob Shinn
Hi everyone-- I've worked with many, many CAD, CAM and PLM products including AutoCAD, CATIA, I-DEAS, UG/NX, 3DStudio Max, Teamcenter, etc. for many, many years and consider myself to be an expert in performance, scalability and reliability of these systems. Most likely, your problems are not spe

Re: [Samba] Grant or deny internet access based on Samba domain logon?

2008-06-03 Thread Rob Shinn
On Tue, Jun 3, 2008 at 5:31 AM, Fabio Muzzi <[EMAIL PROTECTED]> wrote: > > When a user logs on, I would like to run a script that modifies firewall > rules based on the group that the user belongs to (this determines if he > has internet access or not) and based on the workstation's IP address > (

Re: [Samba] Help - Cross-Subnet Browsing with OpenVPN

2008-06-02 Thread Rob Shinn
Copied to list. (Forgot to hit 'Reply All'_ On Mon, Jun 2, 2008 at 3:02 PM, Rob Shinn <[EMAIL PROTECTED]> wrote: > > I can ping each server's IP from the other server. The following nmblookup >> commands both work: > > > Hi, Misty: > > The all-imp

Re: [Samba] Migration from Ldap to Samba+Ldap

2008-05-30 Thread Rob Shinn
On Fri, May 30, 2008 at 3:12 PM, Charlie <[EMAIL PROTECTED]> wrote: > When I converted our networks to samba a decade or more ago, I started > out by trying to crack all our user passwords by brute force, but I > could only get about 90% of them in any reasonable time frame. So, Wow. *Only* 90

Re: [Samba] NetBIOS Hostname

2008-05-30 Thread Rob Shinn
On Fri, May 30, 2008 at 1:54 PM, William W. Hammond <[EMAIL PROTECTED]> wrote: > I was setting up Samba on an OpenSuSE 10.3 i386 computer. > > At the last minute I decided to enter a NetBIOS Hostname, big mistake. While this may be a question better suited to the OpenSUSE list than this one, you

Re: [Samba] Unable to browse share from WinXP

2008-05-09 Thread Rob Sharp
SWAT reports it as version 3.0.20. I am a relative novice on Samba configuration, and have only used SWAT to create the share. Rob Volker Lendecke wrote: On Fri, May 09, 2008 at 11:15:28AM +0100, Rob Sharp wrote: Is there something special you have to configure server-side for WinXP

[Samba] Unable to browse share from WinXP

2008-05-09 Thread Rob Sharp
l you have to configure server-side for WinXP machines to access the share reliably? I've tried restarting the Samba services but it appears to have made no difference. Rob -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Fwd: [Samba] Files over 4GB not listing properly. Cannot get CIFSworking.

2008-05-06 Thread Rob Shinn
-- Forwarded message -- From: Rob Shinn <[EMAIL PROTECTED]> Date: Tue, May 6, 2008 at 2:57 PM Subject: Re: [Samba] Files over 4GB not listing properly. Cannot get CIFSworking. To: Matt Boyle <[EMAIL PROTECTED]> > > Also, I cannot mount the samba share usin

  1   2   3   >