Re: [Samba] Problem with klist -k and smbclient

2013-08-23 Thread steve
On Fri, 2013-08-23 at 17:15 +, Eduardo Sotomayor wrote: > I am having two problems when testing the samba4 installation > > and this one is when running klist -k > > sienicdc1:/home/eduardo # klist -k > Keytab name: FILE:/etc/krb5.keytab > klist: no such file or directory while starting keyt

Re: [Samba] [samba]How to config samba4 internal dns?

2013-08-21 Thread steve
On Wed, 2013-08-21 at 14:45 +0800, Sense Zeng wrote: > I'm new for samba4 and I'm trying to test samba4(Version 4.0.8) with > internal dns. > Did internal dns can config? Could I just manual add some host(A) in? Hi Yes, no problem: samba-tool dns addA hth Steve --

Re: [Samba] Samba 4.0.9 winbind isn't passing through uid and gid numbers from Win 2003 R2

2013-08-20 Thread steve
idmap config FOUR-HORSEMEN:cache time = 1800 add this: idmap config *:backend = tdb idmap config *:range = 20001-20100 hth Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] share permissions

2013-08-20 Thread steve
On Tue, 2013-08-20 at 10:22 -0500, Ricky Nance wrote: > Permissions are hard to explain (possibly because I don't fully understand > them myself I guess), but if you have a directory (say /srv) and you give > it 0700 permissions, then only the person that owns that directory is able > to see anythi

Re: [Samba] Samba4 + Winbind + PAM Installation/Configuration

2013-08-15 Thread steve
ash to smb.conf Do _not_ start winbindd. Best of luck. Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Options for paid Samba (4) support

2013-08-14 Thread steve
> some users consistently can't see > > their profile on some machines, despite the profile and redirected folders > > looking fine on the server.) If there are problematic machines, it's best to delete the user profiles and allow them to be recreated the next time the users log in: HKLM\SOFTWARE\

Re: [Samba] Samba4 Using AD/UNIX attributes for home directory and shell not possible?

2013-08-13 Thread steve
On Tue, 2013-08-13 at 10:06 +0200, Markus Gillmeister wrote: > Steve, thanks a lot, I finally got sssd (version 1.8.4) on debian wheezy > working with samba 4 (Version 4.0.8-SerNet-Debian-5.wheezy)! > > But one last question regarding unix attributes in the AD stays: I noticed >

Re: [Samba] Samba/winbind UID mismatch.

2013-08-12 Thread steve
: 318 to the DN of the user 3. Always work on the DC either by ssh or at the console. Then the uidNumber will _always_ be 318. There are many ways to do the same but I don't know Arch so dare not suggest. HTH Steve -- To unsubscribe from this list go to the following URL and rea

Re: [Samba] Samba4 Using AD/UNIX attributes for home directory and shell not possible?

2013-08-12 Thread steve
On 12/08/13 10:04, Markus Gillmeister wrote: Hi, while googling around I already suspected that using winbind and samba4 is not a perfect solution. I tried to setup sssd on my debian wheezy machine but I'm not able to get a running setup: When starting up sssd the following error appear: (Mon

Re: [Samba] Samba4 Using AD/UNIX attributes for home directory and shell not possible?

2013-08-11 Thread steve
on a separate machine, domainify it and run it as a file server only. I suppose you could then ssh into that instead. HTH Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 4 as member server

2013-08-06 Thread steve
/srv and /srv/share? Can the user access the share if logged in on the file server? Can the user access the share using smbclient? Does the share appear as a folder in explorer? What does the windows security tab give for the share? Steve -- To unsubscribe from this list go to the following

Re: [Samba] Samba 4 as member server

2013-08-06 Thread steve
you can, I really would advise building s4 from source: 4.0.8 for both DC and file server and using samba for the DC and smbd for the file server. It takes longer but it's easy to do and you can be sure to have the latest version. If you want to stick with Ubuntu then I see the s4 DC and sepa

Re: [Samba] Samba 4 as member server

2013-08-06 Thread steve
eserver and forget about rfc2307. HTH Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 4 as member server

2013-08-06 Thread steve
On Tue, 2013-08-06 at 09:21 +0200, Klaus Rörig wrote: > > But there are no smb/nmbd/winbindd binaries. Hi Oh, I see. The Ubuntu packages must only be for AD then. Sorry, I missed that you only wanted ntvfs. -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] Samba 4 as member server

2013-08-05 Thread steve
= /srv/shares > read only = no Start it with: smbd; winbindd Prolly not perfect, but should get you a bit close. hth Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] file locking failure

2013-07-31 Thread steve
using Libre Office then fine, it works (I think because of Libre Office, not samba) How do I get locking to work outside Libre Office. Nothing else seems to work. Cheers, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman

[Samba] Turnkey Samba 4 Solutions?

2013-07-31 Thread Steve Ligett
joyed the simplicity of Resara. Are there any other turnkey Samba solutions? Or simple cookbook solutions? thanks, steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] samba 4 userid mapping

2013-07-28 Thread steve
nd gidNumber attributes to the user or group DN in AD. YOu can use ldbmodify or ldbedit for that. If you are brave, you can build the master and use samba-tool add the attributes when you create the user. Note: if you want the whole of rfc2307 as your smb.conf suggests, then use sssd and forget about

Re: [Samba] Question on approach to authenticate Linux against Samba4

2013-07-25 Thread steve
On Thu, 2013-07-25 at 20:59 +0100, Jonathan Buzzard wrote: > On 25/07/13 20:14, dahopk...@comcast.net wrote: > > [SNIP] > > > > > Step 6: I already have samba-common, and samba-common-bin (latest for > > 10.04) installed. I'd assume I need to uninstall these and install > > samba4 instead (especi

Re: [Samba] Question on approach to authenticate Linux against Samba4

2013-07-25 Thread steve
t the net command to join the domain. Any old version of samba will do. What you have is more than enough. HTH Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Question on approach to authenticate Linux against Samba4

2013-07-25 Thread steve
Hi Ok, I can understand that. So why not have a look at nss-pam-ldapd with nslcd? It's almost as good as sssd and it's quick and easy to setup: http://linuxcostablanca.blogspot.com.es/2013/04/ubuntu-client-for-samba4.html hth Steve -- To unsubscribe from this list go to the foll

Re: [Samba] Samba 4 not honoring setgid

2013-07-25 Thread steve
On Thu, 2013-07-25 at 08:17 -0400, Ryan Bair wrote: > Thank you for confirming. I do have g+s on the directory. I'll file a > bug about this issue today. No problem. If you go with the bugzilla, could you post the link here? Thanks. -- To unsubscribe from this list go to the following URL and

Re: [Samba] Samba 4 not honoring setgid

2013-07-25 Thread steve
ted with latest git Not sure what /srv/test has but am guessing that you have set chmod g+s? If so, I can reproduce what you see. The g+s is ignored when accessed on a cifs mounted share and instead the primaryGroupID is used. Cheers, Steve -- To unsubscribe from this list go to

Re: [Samba] Winbind troubles

2013-07-24 Thread steve
On Wed, 2013-07-24 at 11:59 +0100, Jonathan Buzzard wrote: > On Wed, 2013-07-24 at 00:49 +0200, steve wrote: > > [SNIP] > > > For the record, sssd pulls all it's info from AD. > > I never said otherwise. > > > A user does not need a gidNumber, it is

Re: [Samba] RE Samba (winbind) troubles

2013-07-24 Thread steve
On Wed, 2013-07-24 at 01:26 -0700, Paul D. DeRocco wrote: > > From: steve > > > > On Wed, 2013-07-24 at 09:09 +0200, L.P.H. van Belle wrote: > > > > > > I do like samba, but wiki/howtos are lots to improve. > > > > To be fair, it's not ju

Re: [Samba] RE Samba (winbind) troubles

2013-07-24 Thread steve
On Wed, 2013-07-24 at 09:09 +0200, L.P.H. van Belle wrote: > hijacked the winbind threat.. but.. > Don't feel threatened. There _are_ alternatives. > > I do like samba, but wiki/howtos are lots to improve. To be fair, it's not just Samba. It's most open source stuff. There are too many hobbyi

Re: [Samba] Winbind troubles

2013-07-23 Thread steve
On Tue, 2013-07-23 at 23:21 +0100, Jonathan Buzzard wrote: > On 23/07/13 17:10, Rowland Penny wrote: > > [SNIP] > > > > > But if the group identified by primaryGroupID 513 has gidNumber 20513 > > (which would be in my opinion best practice) without looking in the > > source code of ss

Re: [Samba] Winbind troubles

2013-07-23 Thread steve
On Tue, 2013-07-23 at 16:44 +0100, Jonathan Buzzard wrote: > On Tue, 2013-07-23 at 15:23 +0100, Rowland Penny wrote: > > > > > > > > If you want my opinion and you probably don't, people need to stop > > thinking NT server if they connect to a samba4 AD server and start > > thinking AD server, t

Re: [Samba] Winbind troubles

2013-07-23 Thread steve
On Tue, 2013-07-23 at 15:04 +0100, Jonathan Buzzard wrote: > On Tue, 2013-07-23 at 14:39 +0100, Rowland Penny wrote: > > Could this be yet another reason to use sssd instead of winbind? > > > > sssd does use the account gidNumber > > > > testuser > > > > primaryGroupID: 513 > > uidNumber: 300110

Re: [Samba] Winbind troubles

2013-07-23 Thread steve
On Tue, 2013-07-23 at 14:53 +0100, Jonathan Buzzard wrote: > > What gets me is people claiming that half a dozen lines of configuration > in smb.conf is more complicated than 30+ lines of configuration in an > entirely separate configuration file in addition to several lines in > smb.conf. It mig

Re: [Samba] Winbind troubles

2013-07-23 Thread steve
samba delete the tdb files and start it again, redo the domain join and > try it. Just thought about nscd too. On some distros it's default. . . Cheers, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Winbind troubles

2013-07-23 Thread steve
On Tue, 2013-07-23 at 09:40 +0200, L.P.H. van Belle wrote: > Hai, > > > I'm having exactly the same problem with winbind as Matthew Daubenspeck. > also on ubuntu 12.04 with sernet packages. ( used sernet-samba-winbind 4.0.7 ) > > I remove the complete config atm but am at the point reinstallin

Re: [Samba] Winbind troubles

2013-07-22 Thread steve
On Mon, 2013-07-22 at 17:29 -0400, Matthew Daubenspeck wrote: > On Mon, Jul 22, 2013 at 10:15:10PM +0100, Rowland Penny wrote: > >OK, that seems like it should work, I had the winbind ad backend > >working, but found it difficult to setup so jumped ship to sssd > >The idmap setup I used

Re: [Samba] Winbind troubles

2013-07-22 Thread steve
On Mon, 2013-07-22 at 16:46 -0400, Matthew Daubenspeck wrote: > On Mon, Jul 22, 2013 at 10:27:36PM +0200, steve wrote: > > Can you post smb.conf on SRV2? > > Steve > > Certainly: > > [global] > >workgroup = NWLTECH >security = ADS >realm = N

Re: [Samba] Winbind troubles

2013-07-22 Thread steve
user1 > root@srv2:~# getent passwd user2 > root@srv2:~# getent passwd user3 > Can you post smb.conf on SRV2? Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Can someone explain SMB passwords?

2013-07-21 Thread steve
path = /path/to/the/folder read only = No valid users = paul paul can now access that folder not only from that machine but also from remote machines, including windows. An easy way to do that in Linux is to use a browser: smb://ip.of.the.server/myshare Samba will then ask for a username and password on the remote machine, be it Linux or windows. That may be enough to get started but I'm afraid that from here the learning curve is steep. I know systems like GNOME and KDE have quite simple right click > share folder as > samba. Maybe that's good enough if you have just one folder? HTH, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] New ADC configuration

2013-07-16 Thread steve
On Tue, 2013-07-16 at 18:48 -0400, Matthew Daubenspeck wrote: > On Tue, Jul 16, 2013 at 08:45:15PM +0200, Marc Muehlfeld wrote: > > Did you clean up the tdb files on your member server? I could imagine, that > > Samba mixes the old and new domain in it's idmap cache. If it's a new > > installation

Re: [Samba] New ADC configuration

2013-07-16 Thread steve
u don't have to use ADUC. Just add the entry: uidNumber: 328 to the directory. An easy way to do that is to use ldbedit: ldbedit --url=/usr/local/samba/private/sam.ldb cn=testuser Now getent will work. hth Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 4 domain members

2013-07-16 Thread steve
Hi openSUSE. One install we did has 2 DC's and a 4.0.7 file server. But I think that if you build from source, it doesn't make much difference. HTH Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 4 domain members

2013-07-12 Thread steve
as I need to set permissions. Hi Give us an example of a share that's working. Then, what you change within it and what permissions you change to get the 'access denied'. Which version have you installed? Cheers, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] [Announce] Samba 4.1.0rc1 Available for Download

2013-07-11 Thread steve
install it over the last git? Does ./configure for the git take the same defaults as the release? Cheers, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] What great things can a non-windows user do with Samba

2013-07-11 Thread steve
On Thu, 2013-07-11 at 13:46 -0400, Robert Heller wrote: > At Thu, 11 Jul 2013 11:52:49 -0400 Steve Litt > wrote: > > > > > Hi all, > > > > I ask this question about once a decade. > > > > I have about 7 computers, all Linux or BSD. Are there

[Samba] What great things can a non-windows user do with Samba

2013-07-11 Thread Steve Litt
Hi all, I ask this question about once a decade. I have about 7 computers, all Linux or BSD. Are there any cool things I can do with Samba, even though I have no Windows computers? Thanks, SteveT Steve Litt* http://www.troubleshooters.com/ Troubleshooting Training * Human

Re: [Samba] Sync - sysvol and getfacl

2013-07-10 Thread steve
se. If you already have groups and users, only add the new attributes to one of the DC's. Disable the other DC while you do this. Take the id's from whatever the xidNumber is on the DC you choose. hth Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] file server or member server?

2013-07-02 Thread steve
On Tue, 2013-07-02 at 11:02 +0200, Michael Wood wrote: > Hi Steve > > On 2 July 2013 09:28, steve wrote: > On Mon, 2013-07-01 at 19:55 -0500, Ricky Nance wrote: > > > I feel like I am saying what has already been said, so if > you c

Re: [Samba] file server or member server?

2013-07-02 Thread steve
On Mon, 2013-07-01 at 19:55 -0500, Ricky Nance wrote: > > > I feel like I am saying what has already been said, so if you could be > more specific about what kind of hierarchy you have, I could give you > a more specific answer. For the most part, if its serving files and in > a domain, but not

Re: [Samba] file server or member server?

2013-07-01 Thread steve
htmare for non native English speakers. It would help enormously over here, if we all stuck to calling a spade a spade. Thanks for reading, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] file server or member server?

2013-07-01 Thread steve
On Mon, 2013-07-01 at 14:35 -0400, Gaiseric Vandal wrote: > I don't think it necessarily makes it a member a member server BUT if it > isn't a member server it is going to be pretty useless for serving profiles. Ok, so if a samba 4 box can serve profiles, then it is called a member server, whethe

Re: [Samba] file server or member server?

2013-07-01 Thread steve
On Mon, 2013-07-01 at 17:04 +0100, Jonathan Buzzard wrote: > On Mon, 2013-07-01 at 09:59 -0400, Gaiseric Vandal wrote: > > [SNIP] > > > > > A domain controller can be a file server, although in many cases a > > domain controller will only provide authentication and logon > > functions.It

[Samba] file server or member server?

2013-07-01 Thread steve
s are served from the DC? Cheers, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] The problem with setting up AD domain to Samba 4

2013-06-28 Thread steve
On Thu, 2013-06-27 at 17:28 +0400, Vladimir A Fomkin wrote: > How add one parameter by ldbedit without interactive editor? (for > scripting) ldbmodify There are scripts here: http://linuxcostablanca.blogspot.com.es/p/s4bind.html hth -- To unsubscribe from this list go to the following URL and

Re: [Samba] The problem with setting up AD domain to Samba 4

2013-06-27 Thread steve
On 27/06/13 13:58, Vladimir A Fomkin wrote: Hi! samba-tool don't work with --uid-number option! Hi It only works with the development version. Why not add the uidNumber to the user using ldbedit or ldbadd? Steve -- To unsubscribe from this list go to the following URL and read the instruc

Re: [Samba] samba 4.0.6 getent group

2013-06-26 Thread steve
On Wed, 2013-06-26 at 08:09 -0700, smb l. ist wrote: > > > Well, winbind works fine for listing groups. But not for you. Nor I;) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] The problem with setting up AD domain to Samba 4

2013-06-26 Thread steve
hands. How to solve this problem? > Thx! > samba-tool user add vladimir --uid-number=1234567 Now for your next question: How do I choose the uid-number;) hth Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] samba 4.0.6 getent group

2013-06-26 Thread steve
set: > winbind enum groups = No > and then query the groups singly: > getent group name.of.group > > Also, you could cache them. I'm not sure but nscd may work with winbind. > hth > Steve > > Yes, in fact the tool I'm writing NEEDS all groups from AD, so, that'

Re: [Samba] Newbie help - Sernet Samba [SOLVED]

2013-06-25 Thread Steve Meisner
Figured it out... I had cleaned up all the old packages, but missed winbind. Doing; apt-get purge winbind fixed the problem. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Steve Meisner Sent: Monday, June 24, 2013 7:08 PM To

Re: [Samba] samba4 missing group membership with getent group

2013-06-25 Thread steve
o hear other views on how it compares with winbind and nslcd. Cheers, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] samba 4.0.6 getent group

2013-06-25 Thread steve
ot sure but nscd may work with winbind. hth Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] Newbie help - Sernet Samba

2013-06-24 Thread Steve Meisner
yet. dpkg: error processing sernet-samba-ad (--configure): dependency problems - leaving unconfigured Errors were encountered while processing: sernet-samba-winbind sernet-samba-ad E: Sub-process /usr/bin/dpkg returned an error code (1) root@debian:~# Thanks! Steve -- To unsubscribe from this

Re: [Samba] samba4 missing group membership with getent group

2013-06-21 Thread steve
On Fri, 2013-06-21 at 15:39 +0200, Ali Bendriss wrote: > On Friday, June 21, 2013 10:12:26 AM Rowland Penny wrote: > > Hi, well yet another reason to use sssd instead of winbind. > > [...] > > Hi, > > An other option is to use samba AD in one server and the file server (smbd + > winbindd) in an

Re: [Samba] samba4 missing group membership with getent group

2013-06-21 Thread steve
On Fri, 2013-06-21 at 10:12 +0100, Rowland Penny wrote: > Hi, well yet another reason to use sssd instead of winbind. When I > turned on winbind in /etc/nsswitch.conf on my test S4 server, > > > > Also I would suggest forgetting using @group in smb.conf and use ACL's > instead. Didn't see thi

Re: [Samba] samba4 missing group membership with getent group

2013-06-21 Thread steve
On Fri, 2013-06-21 at 08:36 +, philippe.simo...@swisscom.com wrote: > Hi Steve > > give an empty result, and > with the same result as , without user/group membership. > > in fact my problem goes further : shares access control (write list, ...) > does not work

Re: [Samba] samba4 missing group membership with getent group

2013-06-21 Thread steve
On Fri, 2013-06-21 at 06:23 +, philippe.simo...@swisscom.com wrote: > Hi Samba users > > but does not return group/user membership : > TEST3\g1:*:327: > > any advices ? It doesn't work for groups:( use: getent group TEST\g1 hth Steve -- To unsubscribe f

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread steve
On Thu, 2013-06-20 at 17:44 -0400, Steve Thompson wrote: > On Thu, 20 Jun 2013, John Hodrien wrote: > Five minutes later: holy crap! That is it. I took a user in only one > group: permission denied. I set the NO_AUTH_DATA_REQUIRED flag in > userAccountControl (via ldbedit), and hey

Re: [Samba] Shared drives not writeable

2013-06-20 Thread steve
directory mask = 2771 > > valid users = @"CAMPUS\staff-faculty" > > write list = @"CAMPUS\staff-faculty" > > admin users = @"CAMPUS\Domain Admins" > > Hi OK, I'll have a go. Either use acls or smb.conf. I've neve

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread Steve Thompson
"yes". There are no NEED_GSSD or NEED_SVCGSSD or whatever to filter it further. Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread Steve Thompson
On Thu, 20 Jun 2013, steve wrote: Nobody agrees with anything for nfs4, so don't worry! :) And boy oh boy is there a lot of just plain nonsense out there! Ok, that narrows it down to kerberos I suppose. What does the mount look like: rpc.gssd -fvvv and the idmapping: rpc.idmapd

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread steve
On Thu, 2013-06-20 at 16:57 -0400, Steve Thompson wrote: > On Thu, 20 Jun 2013, steve wrote: > > Thanks for your reply! I am really pulling my hair out over this one, and > I don't have that much left :( > > > What do you have in /etc/idmapd.conf > > The conten

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread Steve Thompson
On Thu, 20 Jun 2013, steve wrote: Thanks for your reply! I am really pulling my hair out over this one, and I don't have that much left :( What do you have in /etc/idmapd.conf The content of this file is correct as far as I understand it, as it works with NFSv3 and NFSv4 with se

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread steve
On Thu, 2013-06-20 at 15:21 -0400, Steve Thompson wrote: > mount -t nfs4 -o sec=krb5 :/data /mnt What do you have in /etc/idmapd.conf What does ps aux | grep rpc give? Can the user browse using nfs3? mount -t nfs3 -o sec=krb5 :/data /mnt Have a look at the gotchas. There's loadsa wr

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread Steve Thompson
On Fri, 14 Jun 2013, Steve Thompson wrote: I still have an issue with user access to the NFSv4 mount, and a workaround for it, but that's for another time. And now is another time (but I am at the point on giving up on this for now, as it has become a large consumer of time). To reit

Re: [Samba] The problem with setting up AD domain to Samba 4

2013-06-19 Thread steve
t see any other way to go. The OP's idmap is really screwed up. I've had a go via the DC winbind and the only way I could go with this was to delete the idmap entries and start again. This is in the other post about an hour or so ago, if you have any easier way. . . Cheers, Steve -- T

Re: [Samba] The problem with setting up AD domain to Samba 4

2013-06-19 Thread steve
13014919621000 userAccountControl: 66048 accountExpires: 0 uidNumber: 321 Now: ln -s /usr/local/samba/lib/libnss_winbind.so.2 /lib/libnss_winbind.so ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2 and edit /etc/nsswitch.conf passwd: files winbind group:

Re: [Samba] The problem with setting up AD domain to Samba 4

2013-06-17 Thread steve
On Mon, 2013-06-17 at 14:50 +0400, Vladimir A Fomkin wrote: > HI! > root@bdc-samba:~# /usr/local/samba/bin/samba-tool user add tester4 > New Password: > Retype Password: > ERROR(ldb): Failed to add user 'tester4': - samldb: Account name > (sAMAccountName) 'tester4' already in use! > root@bdc-sam

Re: [Samba] The problem with setting up AD domain to Samba 4

2013-06-17 Thread steve
On Mon, 2013-06-17 at 12:27 +0200, steve wrote: > Hi > Just try adding the user anyway and let's see what happens: > > samba-rool user add tester4 > * samba-tool sorry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba

Re: [Samba] The problem with setting up AD domain to Samba 4

2013-06-17 Thread steve
Hi Just try adding the user anyway and let's see what happens: samba-rool user add tester4 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] The problem with setting up AD domain to Samba 4

2013-06-17 Thread steve
id 322 no matter which DC is consulted. HTH Steve Hi DN is ldap for Distingished Name e.g. a user could have an entry in the directory: dn: CN=vladimir, CN=Users,DC=samba,DC=com just add: uidNumber: 322 somewhere for that user. The easiest way to do that so that you ca

[Samba] rsync command for sysvol

2013-06-15 Thread steve
//DC1/sysvol /usr/local/var/locks/sysvol Test: kill samba on DC1. Result: the gpo's still work. That's it isn't it? I now plan to make DC2 a rsync server too and cron that back DC1. Surely it's not as simple as that. Is it? Cheers, Steve -- To unsubscribe from this list go to t

Re: [Samba] The problem with setting up AD domain to Samba 4

2013-06-14 Thread steve
Make sure that you have the rfc2307 line in both the DC's. Add: uidNumber: 322 to the the DN of the user on one of the DC's. Wait a few minutes. Now create a file. It will have uid 322 no matter which DC is consulted. HTH Steve -- To unsubscribe from this list go to the f

[Samba] Samba4 DES enctypes

2013-06-12 Thread Steve Thompson
Samba4 4.0.5, CentOS 6.4. How does one enable DES enctypes in Samba? I need these to be available for each user when they log in to enable access to a Kerberized NFSv4 export. Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org

Re: [Samba] samba4 + cups - it is working for someone?

2013-06-10 Thread steve
On Mon, 2013-06-10 at 12:40 -0400, Gerry Reno wrote: > On 06/10/2013 12:16 PM, steve wrote: > > On Mon, 2013-06-10 at 09:54 -0400, Gerry Reno wrote: > >> On 06/10/2013 03:47 AM, steve wrote: > >>> On 09/06/13 20:16, Gerry Reno wrote: > >>>> On 06/09/20

Re: [Samba] samba4 + cups - it is working for someone?

2013-06-10 Thread steve
On Mon, 2013-06-10 at 09:54 -0400, Gerry Reno wrote: > On 06/10/2013 03:47 AM, steve wrote: > > On 09/06/13 20:16, Gerry Reno wrote: > >> On 06/09/2013 06:45 AM, steve wrote: > >>> On 09/06/13 11:00, Adam Sienkiewicz wrote: > >>>> Hi Steve > >>

Re: [Samba] Folder permissions not working

2013-06-10 Thread steve
sub-folders in this folder are accessible as expected. Where do I need to go looking for this problem? Anyone struck this before? Happy to provide further info as directed. Hi I'm no expert, but how about using a big hammer? Backup first, then: setfacl -Rm u:marion:rwx "The Australia

Re: [Samba] samba4 + cups - it is working for someone?

2013-06-10 Thread steve
On 09/06/13 20:16, Gerry Reno wrote: On 06/09/2013 06:45 AM, steve wrote: On 09/06/13 11:00, Adam Sienkiewicz wrote: Hi Steve I procceeded regarding this howtu. All seems to be fine except connection samba-cups. From windows I can add printer, print test page but all print jobs from samba are

Re: [Samba] samba4 + cups - it is working for someone?

2013-06-09 Thread steve
On 09/06/13 11:00, Adam Sienkiewicz wrote: Hi Steve I procceeded regarding this howtu. All seems to be fine except connection samba-cups. From windows I can add printer, print test page but all print jobs from samba are lost between samba and cups I think. There is no entries in cups logs only

Re: [Samba] samba4 + cups - it is working for someone?

2013-06-09 Thread steve
this method: https://wiki.samba.org/index.php/Samba_as_a_print_server but no more. Something changed between 4.0.0 and where we are now but I can't work out what it is. Try the wiki next? hth Steve -- To unsubscribe from this list go to the following URL and read the instructions: https:/

[Samba] chmod g+s not working over cifs

2013-06-07 Thread steve
W7 clients are group 'Domain users', the primary group of the user, not 'staff' as the g+s should give. Files created in the share on the DC are correctly assigned to group 'staff'. Question: How do I get files created in the share 'shared' to be

Re: [Samba] Security = ADS and uidnumbers

2013-06-06 Thread steve
On Thu, 2013-06-06 at 10:19 +0100, Jonathan Buzzard wrote: > > So given the OP wants consistent UID's on presumably his Samba file > server running a 3.6.x variant of Samba how does sssd help? Hi sssd is an alternative to using winbind to extract information from AD. It may help the OP to try it

Re: [Samba] Security = ADS and uidnumbers

2013-06-06 Thread steve
On Wed, 2013-06-05 at 23:13 +0100, Jonathan Buzzard wrote: > > As far as I can tell sssd does not provide a mechanism for the smbd on > at least 3.5 (the 4.x series might be different but the OP is running > 3.6) to see an incoming SID and work out the UID. It would be pretty useless without.

Re: [Samba] Security = ADS and uidnumbers

2013-06-06 Thread steve
On Wed, 2013-06-05 at 23:13 +0100, Jonathan Buzzard wrote: > On 05/06/13 17:56, steve wrote: > > On Wed, 2013-06-05 at 16:22 +0100, Jonathan Buzzard wrote: > >> On Wed, 2013-06-05 at 15:42 +0100, Rowland Penny wrote: > >>> > >>> I never said that I could

[Samba] Samba4 and NVSv4

2013-06-05 Thread Steve Thompson
ornell.edu" in case the missing realm was a factor; no change. - started rpc.gssd on the clients with the -l switch; no change. - started rpc.svcgssd with the -n switch so that nfs/ service principals are in theory not required; no change. I do not understand wh

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread steve
On Wed, 2013-06-05 at 18:32 +0100, Rowland Penny wrote: > Well said Steve > > > From what I have read on the two samba mailing lists, Samba 4 is > supposed to be a clone of windows AD, well windows AD does not have > winbind, so I suppose this begs the question, why wh

[Samba] reverse zone dns updates

2013-06-05 Thread steve
Version 4.1.0pre1-GIT-1a6eac2 Hi I added a reverse zone to my internal dns. It won't update the reverse zone. With bind, it does. Before I go any further, is it possible that the internal dns server update the reverse zone from a nsupdate request? Cheers, Steve -- To unsubscribe from

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread steve
On Wed, 2013-06-05 at 16:22 +0100, Jonathan Buzzard wrote: > On Wed, 2013-06-05 at 15:42 +0100, Rowland Penny wrote: > > > > I never said that I couldn't get it to work, I just said that it is > > just too complicated. Yes I can read and there was no need to get > > personal > > > > You said you

Re: [Samba] dynamic DNS Updates still failing, re-installed 9 more times, tried everything I could think of, now bald.

2013-06-02 Thread steve
On Mon, 2013-06-03 at 09:36 +1000, Andrew Bartlett wrote: > On Mon, 2013-06-03 at 01:11 +0200, steve wrote: > > On Mon, 2013-06-03 at 08:16 +1000, Andrew Bartlett wrote: > > > > End users need something simple to install. We also need something that > > does dynam

Re: [Samba] dynamic DNS Updates still failing, re-installed 9 more times, tried everything I could think of, now bald.

2013-06-02 Thread steve
with-gssapi=yes' '--disable-isc-spnego' > '--with-docbook-xsl=/usr/share/sgml/docbook/xsl-stylesheets' > '--enable-fixed-rrset' 'build_alias=x86_64-redhat-linux-gnu' > 'host_alias=x86_64-redhat-linux-gnu' > 'target_alias=x86_64-

Re: [Samba] Can't provision with BIND9_DLZ [SOLVED]

2013-06-02 Thread steve
On Mon, 2013-06-03 at 08:51 +1000, Andrew Bartlett wrote: > On Mon, 2013-06-03 at 00:48 +0200, steve wrote: > > On Mon, 2013-06-03 at 08:00 +1000, Andrew Bartlett wrote: > > > > > > > > That is *very* weird. They may be another package with tdbbackup in a >

Re: [Samba] [samba4] Thank you to the Samba Team

2013-06-02 Thread steve
ling the first file server and do an IP takeover on the second? Or was it a cluster? Cheers, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] dynamic DNS Updates still failing, re-installed 9 more times, tried everything I could think of, now bald.

2013-06-02 Thread steve
On Mon, 2013-06-03 at 08:16 +1000, Andrew Bartlett wrote: > On Mon, 2013-06-03 at 00:05 +0200, steve wrote: > > Hi > > openSUSE 12.3 > > This is the first time in many years where the SUSE/openSUSE bind has > > _almost_ worked out of the box. They will not entertai

Re: [Samba] Can't provision with BIND9_DLZ [SOLVED]

2013-06-02 Thread steve
On Mon, 2013-06-03 at 08:00 +1000, Andrew Bartlett wrote: > > That is *very* weird. They may be another package with tdbbackup in a > normal path. Otherwise, could you follow this up with the OpenSUSE > folks? > > Thanks, > > Andrew Bartlett We've taken this up with them before: http://web.a

<    1   2   3   4   5   6   7   8   9   10   >