Re: [Samba] Add Printer Wizard
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jerry Haltom wrote: | I also can't seem to get the Add Printer Drivers wizard | to work right. I followed the instructions in the 3.0 howto | as best as I could. My samba "admin" user, is named "samba", | he has a uid 0. It's stored in LDAP. It works for | joining computers to the domain. | | I added "samba" to printer admin, and when I try to | log into a Windows computer, as this user, and add a | driver, I get: Access Denied. an admin user may not be the same as a printer admin. Your message isn't clear on what is considered to be an 'admin' user. | I'm not sure what I'm being denied access too! This user has uid 0. give me more details and we'll figure out what is going on. | After setting all this up, can I expect queue's to | be consistant? I need to see, in the Windows queue, unix jobs | submitted directly to cups. On the cup's queue, I'd like to | see window's jobs. This works fine. smbd does use an 'lpq cache time' since we cache the queue listing along with some addition job information. | Also, can samba be made to spool to cups AS it's receiving | from the client? We regularly print out 900 page jobs, which | take 30 pages to print from the client to the server. If the | client has to sit there and spool all 900 pages before | the job can even start, we've doubled our print time! As | of now, Windows will start printing INSTATLY upon receiving | data from the client, this may be more like "buffering" | than "spooling". Samba cannot give the job to the printing system until the client has spooled the entire job to us. SOrry. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oRzNIR7qMdg1EfYRAnbNAKDNsTcM7nZbrBxVvVb/ilaA7CO1nACeJUBl /lpTJhIkmgQPWbahlPZ+xp8= =zgJT -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] linux and win2k: who is blocking whose messages?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | [2003/10/29 15:26:15, 0] lib/access.c:check_access(328) | Denied connection from (192.168.0.4) ... |hosts allow = 192.169.0.4, 192.168.0.3, 192.168.0.2, 127. ~ ^^^ You have a typo here. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oR1XIR7qMdg1EfYRAoUmAJwMeLk8BAcz2ZYEZ3hM2Dc6suceeQCfSU/2 l6BnumqH11bdmVEXjSlc4b8= =XZ7g -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Account Management Tool TCL/TK GUI Beta?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thiago Lima wrote: | | Samba-howto-collection mention in chapter 11 that | there will be a new Account Management Tool written in | TCL/TK that should (hopefully) be announced in time | for Samba-3.0.1 release. | | As we are right now seeing the beta of 3.0.1, | I would like to know if there's a beta of this tool, | and if so where can I get it? I think the developer working on it dropped off the earth for a while. Haven;t heard back from him in several months. Of course I could be thinking of another user manager c lone that was being work3ed on. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oYIDIR7qMdg1EfYRAtV6AKDboIQQ9jnzW7fnl0ka631v2oFKuwCfdFsZ C/GYYDebHlRU8R1oSuwtq/k= =w3rW -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba3 backend ldap max groups..
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | | This restriction comes from Linux (NGroup_Max : 32). | Is this the only workaround, too recompile the kernel? | Did samba support groupmember more then 32? Have someone | a idee to manage this problem? There is a possiblity to take the first 32 groups and truncate the list for initgroups(). That's the call that is failing. Problem with this is that can provide some random behavior. Access works one times and fails another session. I think bumping the max groups up and recompiling is the best solution, but then you might have to recompile your entire system :-) (well maybe just glibc but that's enough). cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oYOcIR7qMdg1EfYRArL4AJ0XmRjS4ns2FleyQQmxbd2mvsisoACg7o91 w14KrWUFOnknqfqK1COcQA8= =gWqL -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] net groupmap modify bug
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kristyan Osborne wrote: | Hi, | | After a successful upgrade from samba3alpha19 to samba3.0.1pre1 I am now doing the group mapping stage. | | The problem I am having is modifying a group in the LDAP directory. I | am using net groupmap modify ntgroup=staff unixgroup=staff | type=domain. I think this might have just been fixed in the CVS tree today. If not let me know. | [2003/10/29 17:21:39, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1615) | ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=203))] | net: decode.c:500: ber_scanf: Assertion `(( ber )->ber_opts.lbo_valid==0x2)' failed. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oYRWIR7qMdg1EfYRAodRAKC/w0mFNSe0EjKPXEDFJ5E7crIY6ACfQ97w AoG51OQ/2yeuUFNwVvfpAJ8= =smaD -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Winbind usage PDC and Domain menber ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alban Browaeys wrote: | Should winbind run on a PDC ? | all account are supposed to exists on it or be managed | via add user/ add machine wionbindd on a Samba PDC is only needed if the PDC has established trust relationships. | Is winbind recommended on a multi file services network | (SMB+NFS+AFS+etc) and when ACL are used: | from various it seems not , winbind get the name only | from the PDC and set a random id in the idmap, so id differs | on pdc and menbers, also between menbers This can be corrected using the ldap backend for winbindd. It's not really well documented I'm afraid. | ps: and does running winbind on a PDC could get it to | map the user to two id on it : one static created at account | genesis and the other when the PDC use getpwnam , getting | the libc to call teh local wibind . It depend on the order of | the "passwd" attributes in /etc/nsswitch but | waht if the admin setted winbind before compat (or unix) ? If I understand you correctly the answer is no. Think of of like this. On a Samba PDC, smbd is authoritative for its own domain accounts (which must be UNIX users by definition) and winbindd is used to provide UNIX accounts for users and groups from trusted domains. | I also had a difficult case with a domain menber | (samba+winbind) where a local user had the same name | as the domain one: with "winbind use default domain" | set to yes a conflict arise , is there a rational | behind this behing default ? And yet another reason for me to hate that parameter | For pam: | is the winbind domain separator , only for local domain menber | usage , or should it be setted up same on the PDC ? I don't understand your question here. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oYZ3IR7qMdg1EfYRAv31AKCCXzyDYwapiQLvkqXIN5vytnAExgCgrwAS rgIX4qJr+caHW9/ka7rl33o= =t1zz -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Account Management Tool TCL/TK GUI Beta?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thiago Lima wrote: | There's any user manager that has being worked on? | | The only one I know is the LAM (LDAP). Dave Fenwick was working on a Tcl/TK port of User Manager. Used RPC rather than manipulating account information directly. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/omjmIR7qMdg1EfYRAmQ5AJ9JSaAi52cp2tkgME+pIzB6vVZM6ACdGql1 NZf8ClVJw+TMsJjyb9wdfhE= =I7PS -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] a share with a dot
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | Hi, | | I created a share with a dot. | | ["corman.pub"] | comment = corman.pub | path = /rsrv/data1/corman.pub | read only = No | inherit permissions = Yes | inherit acls = Yes | | | testparm says "no problem", but when i try to acces to this share, I have a | window wessage : "could not find network name " and in the log : | | [2003/10/31 12:08:50, 0] smbd/service.c:make_connection(850) | infspu (10.217.5.46) couldn't find service corman.pub | | It's a bug or a share cannot have a dot. It's probably the quotes that are messing you up. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/om6WIR7qMdg1EfYRApY8AJ49ryAloQKh5OyNwJZ5i5m8M5qPsQCgloTc QaZvS1nRkUt29GTugxKLyQ8= =c/4Q -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Account Management Tool TCL/TK GUI Beta?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Adam Williams wrote: |>There's any user manager that has being worked on? |>The only one I know is the LAM (LDAP). | | | Directory Administrator - | http://diradmin.open-it.org/index.php | | It works, now and months ago. | | Of course, what we really need is one that plays nice with site-specific | data (doesn't munch attributes it doesn't recognize) and ideally one | that is extensible via some kind of plugin or whatnot. Large networks | usually have equally complicated directory schemas. Adam, I just checked version 1.5 and it is still only supporting the sambaAccount (2.2) schema. Is there a CVS tree somewhere? cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/om/uIR7qMdg1EfYRAo3KAKCko7Ri7dKsgtsq9dJMeuVMAeLtNgCfWaxK tzl28RhivF9cj/kxLrgResg= =EExE -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Account Management Tool TCL/TK GUI Beta?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Adam Williams wrote: |>| There's any user manager that has being worked on? |>| |>| The only one I know is the LAM (LDAP). |>Dave Fenwick was working on a Tcl/TK port of |>User Manager. Used RPC rather than manipulating |>account information directly. | | | Awesome (using RPC that is). Enought reason to grab the CVS code just | to see an example of that. He never uploaded anything to samba.org. I'm not sure were he kept the source he was working on. jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/onUhIR7qMdg1EfYRAmUiAKCJafxMlfFLaYKUG4Qw4pe+QC7IEgCcCYLt TrpXf2bpKbeCL54+UFb3iCM= =MX4U -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] anonymous login successful
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stefan Fokuhl wrote: | Domain=[MYDOMAIN] OS=[Unix] Server=[Samba 2.2.3a] | ... | | How can I get rid of this message, because it's betraying my OS and | Samba version. Edit the strings returned in reply_sesssetup_and_X(). cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oncdIR7qMdg1EfYRAnFiAJ9p4gSafZGIjGwlSOi39z+ctSyX+gCfQPyz EZxs7OPnzsQi+BMu6GPTbMI= =mJhQ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Winbind help?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike Ely wrote: | Hi there. | | I've posted a couple of winbind-related queries to the group over the | last couple of months, but have yet to get a reply. I've read the | official howto, as well as any other documentation I could get my hands | on, but am at an end to my personal understanding. | | Is there a separate mailinglist for winbind users, or have I simply | asked a question nobody knows the answer to? (my last question was | posted today). No. This is the right place. Just been noisy lately. I'll look at your previous post next. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oqJhIR7qMdg1EfYRAp56AJ0fb0/I3hlYChPf3jls5Jhz/k7bawCg8hNQ HCYCyzpT6RGiHUlFN+ts3Oc= =/sEI -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba3 and cups printserver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | Hello, | I've got an rh9 box which i am using for printing. I've got cups | configured and my printer is working fine. Originally, i intended to use | samba 2.2.x for printing, but then i saw that 3.0 was out so i installed | it's rpm instead. My first of many questions, for printing to work | correctly, samba and cups, what must be specified in terms of the | printing line in smb.conf, bsd or lpRNG? Neither :-) ~printing = cups (and make sure that smbd was compiled with cups support). ~ $ bin/smbd -b | grep -i cups ~ HAVE_CUPS cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oqLMIR7qMdg1EfYRAjRjAJ4t1SboaiVYfau1iG+lx21g/RYUuQCgirkd oLAmZmCHblff2xbtVY7oVFk= =Gf5v -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Cannot update Sun One DS directory with smbpasswd
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hoferer, Patrick K. (Space Systems) wrote: | I can't update the users within our LDAP database using smbpasswd. I have | attached the output from the smbpasswd debugger below: ... | smbldap_search_suffix: searching for:[(&(objectclass=sambaSamAccount))] | smbldap_open: already connected to the LDAP server | ldapsam_getsampwnam: Duplicate entries for this user [hoferpa] Failing. | count=4 | Failed to find entry for user hoferpa. | Failed to modify password entry for user hoferpa | | Below is the LDAP entry for the user hoferpa: | | isun02$ ldapsearch -h isun02.sbirs.eng -b dc=sbirs,dc=eng -D | "uid=sambaadmin,cn=directory administrators,dc=sbirs,dc=eng" -w abc123 | uid=hoferpa | uid=hoferpa,ou=people,dc=sbirs,dc=eng ... | objectClass=sambasamaccount | userPassword=abc123 | sambaPrimaryGroupSID=S-1-5-21-3648157004-3289977631-1919091730-500-9027 | sambaSID=S-1-5-21-3648157004-3289977631-1919091730-500-823304 You got me. Have you looked at an ethereal trace to see exactly what the directory server is sending back to smbd? What do you have set for the various 'ldap XXX suffix' lines in smb.conf? cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oqLZIR7qMdg1EfYRArudAKDeai1J29va+xq4tvtb48kpJL0VpACeOYB1 Q423O96qy1s8XEfUFvFd+Nc= =6tv4 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Permission Denied over Night
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert Bartl wrote: | Hy, | | I've setup up a Samba 3.0.0 Installation for ~30 Users. | Today i got a call that nobody could write to any File on the Servers. | After restarting smbd and nmbd access was granted again. | I didnt have time to try it myself but i saw in the logs afterwards that | there were many Permission denied Errors, even on files/dirs that the | user owned. | | Is this a known problem, or could i do something to find the exact cause ? Have you tried 3.0.1pre1? There was a bug fixed post 3.0.0 that related to certain MS applications refusing to write to files. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oqLvIR7qMdg1EfYRAoeqAKCkasAoxbdZ9uwQiui3q/jQ7Ut3MwCgpFjJ rQ1yaf3eXhx13uMGxLtq4rA= =+gE2 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Winbind: can't log in as domain user
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike Ely wrote: | Basic problem is that domain users can't successfully log | into the linux box. I'm trying to set this box up as | an ltsp server authenticating against our existing AD ... | [libdefaults] | default_realm = LTSP.FOO.BAR | dns_lookup_realm = false | dns_lookup_kdc = true Did you enable the DNS lookup during compile? If so then you can get rid of the [realms] section below. | | [realms] | LTSP.FOO.BAR = { ... | I can successfully join the domain using "net ads join -U username" and | all that. Net ads info looks right, and smbd, nmbd, and winbindd start | up successfully at boot (although winbindd shows up twice when I do "ps | -ae | grep winbindd"). winbindd shoulod show up twice by default (in 3.0). | kinit [EMAIL PROTECTED] works as it should, I think. I get | prompted for a password, and then klist shows the ticket, although the | following also shows up with klist | | Kerberos 4 ticket cache: /tmp/tkt0 | klist: You have no tickets cached That's fine as well. | wbinfo -u shows all my top-level users, and wbinfo shows all my | top-level groups - anyone in a secondary OU is not visible to wbinfo - | problem 1. How are the users/groups laid out in AD? | Now, as root, I can change users to any domain user I want to without | entering a password, using, for example: | su LTSP+fred | and "whoami" returns the correct value. However, if I log in as a local | non-root account and try the same thing, or if I attempt to connect | remotely using "ssh -l LTSP+fred" I get a failed password error even | though I'm using a known-good password for that account. BIG problem #2. Have you setup pam_winbind.so ? | I'm sure there's something simple that needs to be changed and all will | suddenly Just Work. Once that happens, perhaps someone could answer | this: how do I automatically map the home directory of a domain user to | their AD-defined home directory (//ltsp-fs1/staff/fred <--> | /home/LTSP/fred, for example)? I want to have no local storage for | domain users on the linux box. See pam_mount.so and smbfs (or patches for the newer cifsvfs). cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oqMAIR7qMdg1EfYRAmjYAJ9nlN/TjGltrXHdiIOV7Zt6MFIJRgCdEyX0 u9O/L9HZ/c6nYLURfzbilAE= =aHTM -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Winbind usage PDC and Domain menber ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jérôme Fenal wrote: | Gerald (Jerry) Carter wrote: | |> -BEGIN PGP SIGNED MESSAGE- |> Hash: SHA1 |> |> Alban Browaeys wrote: |> |> | Is winbind recommended on a multi file services network |> | (SMB+NFS+AFS+etc) and when ACL are used: |> | from various it seems not , winbind get the name only |> | from the PDC and set a random id in the idmap, so id differs |> | on pdc and menbers, also between menbers |> |> This can be corrected using the ldap backend for |> winbindd. It's not really well documented I'm afraid. | | | Wow, had not seen that. Cool. | I've just had a look at the documentation, it should be | ok, but would just need the schema used, and some example | of association (LDIF format). The schema is included in exampls/LDAP/samba.schema You don't have to create the entries. winbindd will do that for you. You just need to make sure that the 'ldap idmap suffix' is set correctly and exists in the DIT. If you get stuck, let me know and I'll dig up some more information for you. | (I have not looked at the code) Is it using the posixAccount schema ? | (my idea is to get the answer here, then on the Web via mail-archives ;-) | | Could it use a part of an AD LDAP server ? (in the context of an | NT4-compatible DC ADS) Not currently but Luke Howard @ PADL has written an AD plugin for winbindd that you could use. Check http://padl.com/. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oqMPIR7qMdg1EfYRAh08AJsFnJTx8Uz7fl6ptd8xm8CfQku/KgCePZ8N 0rCxvBrLOUUzYIdABwWsg6Q= =Rh3c -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0 - ldap backend and idmap?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John H Terpstra wrote: The passwd backend is a separate issue from the idmap backend. Of you will never need more than just a PDC, then there is no compelling reason to store idmap backend in an ldap database. On the other hand, if you do need more than a single Samba PDC (ie: PDC and one or more BDCs) and you need consistant UID/GIDs across the whole network, then an idmap backend in ldap is a must. Domain member server would need consistent SID<->uid mapping as well. But remember that on a Samba PDC, winbindd is only useful mapping users/groups from trusted domains (not its own). cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oqVfIR7qMdg1EfYRAvWuAJ9slzLLfRmq9UXdOQDl0Mv3rWihcwCgyjcx xPZVZyErZcw0DWddCdyKFo8= =0czf -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Winbind Issues in Samba 3.0.0
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clay wrote: On SambaFS1 now running 3.0.0 with winbind I issue smbclient -L localhost -U (any domain member name) and get NT_STATUS_NO_LOGON_SERVERS Look at the level 10 debug log from winbindd on the file server and see why it reported that error. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oqv6IR7qMdg1EfYRAp6IAJ9SGxUgUVhknb1/BT3W8cLS1PqRpACffc+2 xKhywTVrx0YXGsk00NPwZu0= =rifx -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0 in ADS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lewis Edward E wrote: How do I connect a Samba3.0 server to a OU in ADS ?? For example I > only have privilege to connect machines to OU test which > belongs to corp.domain.com. You can define an OU to use with the net command when joining the domain IIRC. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oqw+IR7qMdg1EfYRAm9vAKCJQeY/EhXdhe6sD/kSfRECm6VchQCgvRuq y/ljwwp/P77eDC6eJYfbcN8= =hQ8z -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Bug or local Problem?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Reinartz, Ralf wrote: This weekend Winbind crashes with: our bug. Can you help me know how to reproduce it? I fixed a bug similar to the backtrace you posted but i can't remember if it was in 3.0.0 or post 3.0.0 release. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oq1FIR7qMdg1EfYRAvYoAKDMH2FQmlLFaoPJRGB7Wh3IDjSWlwCfRcl5 JWYG9cNahW/kpiT6Ky222dA= =Yroz -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Cross Realm Support
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wachdorf, Daniel R wrote: I am doing some testing in Samba 3.0. I am using security=ADS. I am wondering if Samba has any support for cross-realm trust. For example, I have one AD forest SANDIA.GOV that has trust with SANDIA2.GOV. I have the Samba server on linux.sandia2.gov. I have a local user account on linux.sandia2.gov called user. When I log into a win2k client as SANDIA2.GOV/user and connect, it works fine. When I log on to a win2k box in SANDIA.GOV with the account SANDIA.GOV/user I can't connect. The log file displays: Username SANDIA.GOV\user is invalid on this system. I am obtaining all the necessary Kerberos tickets. Is there a way to map users from a trusted realm into a local account? Thsi was fixed post 3.0.0 and is in the current SAMBA_3_0 cvs tree. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oq2qIR7qMdg1EfYRAp1EAKCVJ21l3MfkiDTOpaD9A87z9z6ZdwCgnqZj 7PexOwWPo5Ankum85ZXN53Y= =NoUK -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] What may be causing these errors?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tom Dickson wrote: knorr smbd[5439]: [2003/10/31 10:27:02, 0] lib/util_sock.c:get_socket_addr(919) knorr smbd[5439]: getpeername failed. Error was Transport endpoint is not connected knorr smbd[5439]: [2003/10/31 10:27:02, 0] lib/util_sock.c:write_socket_data(388) knorr smbd[5439]: write_socket_data: write failure. Error = Connection reset by peer knorr smbd[5439]: [2003/10/31 10:27:02, 0] lib/util_sock.c:write_socket(412) knorr smbd[5439]: write_socket: Error writing 4 bytes to socket 5: ERRNO = Connection reset by peer knorr smbd[5439]: [2003/10/31 10:27:02, 0] lib/util_sock.c:send_smb(584) knorr smbd[5439]: Error writing 4 bytes to client. -1. (Connection reset by peer) Are these standard errors that can be safely ignored, or are they critical? They're appearing in /var/log/messages. Check for bad network hardware such as hubs, switches, or NIC's. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oq5nIR7qMdg1EfYRAl3KAJwPFMI4y2jLWLeC8qsdSNo+sNN30wCeIVTE +wbgP7ftB6m2dZ1rpJuP43A= =7z06 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba3 and cups printserver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ken Walker wrote: | smbd invalid option --b | | and -b isnt in man smbd | | ? Soirry that's a 3.0ism. I should have paid more attention to your mail. Just run ldd against smbd and look for libcups.so cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/orXoIR7qMdg1EfYRAsMsAKC5ooJa6h/AzIsqNsgayOOqy37tBgCfWCb8 tH5mb7+MYyrtr3HtNfC50YU= =Xywl -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] about samba 3.0.1
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrés Ricardo Almanza Junco wrote: | | hello | | Srs | | could you tell me when samba 3.0.1 was estable Sometime during November probably. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/orYAIR7qMdg1EfYRAlbeAJ9egOVRKnkcH54ZrzCErfep9bkZEwCfWR2x aFdFb7myWlxdvbyMZsQUoQc= =qBYT -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PATCH to Samba 3.0.0 to allow interactive --set-auth-user for wbinfo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tom Dickson wrote: | This patch is against samba-3.0.0beta3 (tested), but will also apply | correctly to 3.0.0 (release) | | It makes wbinfo ask for a password if there is no password on the | command line. | | So: | | wbinfo --set-auth-user=Administrator | | Will make it prompt | | Password: Got it. Thanks. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/osbOIR7qMdg1EfYRAk/kAKCjtCiKcygF4p1flI9k7TtRrX3KzgCg21VH AX3nD3SMdYC3LTclqTbKd9Y= =qXWk -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win2K or Samba Caching?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert Rati wrote: | I have a PDC that is Samba 3.0 setup to talk to an OpenLDAP server for | authentication, and I was able to get a user to log in to a Windows 2000 | machine on the domain. Then I tried adding additional users, but none | of them could log in. So I tried deleting the admin user from the LDAP | database, but the user could still log into the Windows 2000 machine. | Then I tried stopping the LDAP database completely, and while it took | the Windows 2000 machine a long time to attempt to authenticate, the | user could STILL log into the machine. Does anyone know if Windows 2000 | or Samba 3.0 do any user/authentication cachine? Is there any other | explanation for this? The windows client is cachign the logons. It's controlled by a registry key. CacheLogonsCount or something like that. - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ose7IR7qMdg1EfYRArzwAJ9LLVP/2bLEnSTVfpTBGCKJFf6T1ACfYA2i 9I/PWLatuDSG/yZAtkd+esw= =srxm -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [patch] Samba 3.0.1pre1 : unable to link tdbbackup on Solaris 9
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jérôme Fenal wrote: | Hi to all, | On Solaris 9 (and below I think), Samba 3.0.1pre1's tdbbackup now needs snprintf which is not included in Solaris. | The following patch on master Makefile.in (~samba/source) should ease the compilation of tdbbackup : | diff -u Makefile.in.orig Makefile.in | --- Makefile.in.origMon Oct 20 11:06:54 2003 | +++ Makefile.in Mon Oct 20 11:07:09 2003 | @@ -629,7 +629,7 @@ | POPT_OBJS=popt/findme.o popt/popt.o popt/poptconfig.o \ |popt/popthelp.o popt/poptparse.o | -TDBBACKUP_OBJ = tdb/tdbbackup.o tdb/tdbback.o $(TDBBASE_OBJ) | +TDBBACKUP_OBJ = tdb/tdbbackup.o tdb/tdbback.o lib/snprintf.o $(TDBBASE_OBJ) | NTLM_AUTH_OBJ = utils/ntlm_auth.o $(LIBSAMBA_OBJ) $(POPT_LIB_OBJ) \ | libsmb/asn1.o libsmb/spnego.o libsmb/clikrb5.o libads/kerberos.o \ | It should be included in the case snprintf is absent from the system, but it's done | this way with other binaries. This has been fixed in the CVS tree thanks. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/osn1IR7qMdg1EfYRAgeVAKCYBklUnGbUZz+NMMKDXo9QAi1HfwCg5sws I7NTYzgfotfAkNnePl6m4x8= =ujRy -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] wrong ACL on domain members
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas Otto wrote: | Hi List! | | I have a share on an samba3 domain member (fileserver). The PDC is | samba3 also. | If i look on the file permissions with the explorer for shares on the | PDC the owner is like MYDOMAIN/user. | But if i look on the shares from my samba domain member (fileserver) | they will be FILESERVER1/user. How can i change this to MYDOMAIN/user | automatically for every share. this seems important for profiles and | some backup programms. | security = domain is set on the member server. I'm working on this. It has already been filed here: ~ https://bugzilla.samba.org/show_bug.cgi?id=680 cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/pnXzIR7qMdg1EfYRAiipAJ0fyL33gu+pfFYWTh/1I7RYXm7h+QCfdM+3 ZPRGQFo1xPcew+jCHZhYYSs= =UgWx -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0 PDC and Group Listing on Samba Winbind Box
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 T'Krin wrote: | | I setup a Samba 3.0 PDC using smbpasswd for authentication | on a Mandrake 9.1 system. (I will be looking at LDAP later.) | I have also setup another linux box to use winbind and get | user and group listings from the Samba PDC. My problem | is that no groups from the PDC get listed on the winbind box. groups from a Samba PDC are only available if they have a group mapping entry. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/pnfFIR7qMdg1EfYRAgy1AKCw1TGIPuEdse3iUfBpKsps9KI7swCfdpNW bCLScphxtSJJN1k9StgQXk4= =2/ub -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Cannot find monthly digests
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 a13 wrote: | Hello rsync gurus, | | Pardon my ignorance but I am trying to find out the | appriopriate URL in order to fetch old mailing lists. | Several months ago I could easily navigate to the requested web | page and fetch archived postings one month at a time. | Will somebody give me a hint ? See the Mailing lists page on http://samba.org. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/pnhCIR7qMdg1EfYRAq0YAJ9j9M6Lre5KP6AWjTGpXfHcih4B9ACgkRrC CklPBF2/nDkMebMM6eilpCw= =v9hF -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Winbind Issues in Samba 3.0.0
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clay wrote: | Jerry, | | Hey thanks for the reply | | I am currently using Samba 2.2.8a on a slackware 9 box , both the PDC and | the winbind computer. I have not done any of the pam stuff. | | But when I started up the 3.0.0 on each box, attached is part of the winbind | log at level 10, when I attempt to attach to the localhost using users on | the PDC...ie smbclient -L localhost -U ckinney | | [2003/10/26 20:16:38, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263) | [30739]: pam auth crap domain: PDC user: ckinney | [2003/10/26 20:16:38, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379) | NTLM CRAP authentication for user [PDC]\[ckinney] returned | NT_STATUS_NO_LOGON_SERVERS (PAM: 4) The failure to find the PDC is earlier in the log. This snippet doesn't tell us much. Sorry. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/pni0IR7qMdg1EfYRArkYAJ9EuYCiYziyhN4SPr6dcvVQbNZrjwCgjHXr Fg831tU3TRcqq9HbHhJGlLc= =AhAW -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Winbind Issues in Samba 3.0.0
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clay wrote: | Jerry, | | Hey thanks for the reply | | I am currently using Samba 2.2.8a on a slackware 9 box , both the PDC and | the winbind computer. I have not done any of the pam stuff. | | But when I started up the 3.0.0 on each box, attached is part of the winbind | log at level 10, when I attempt to attach to the localhost using users on | the PDC...ie smbclient -L localhost -U ckinney Wait...is localhost the domain member or the Samba PDC? | [2003/10/26 20:16:38, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263) | [30739]: pam auth crap domain: PDC user: ckinney | [2003/10/26 20:16:38, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379) | NTLM CRAP authentication for user [PDC]\[ckinney] returned | NT_STATUS_NO_LOGON_SERVERS (PAM: 4) Is PDC the name of your domain? jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/pnkGIR7qMdg1EfYRAgPJAJ0T7y6/CTyRUmOJZcoNoOOi9Xhc9wCfXXiw pPB0pioCGJjnGBI3+idBVUg= =9FRz -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-3.0.1pre1 and LDAP
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kristyan Osborne wrote: | Hiya, | | I have recently upgrade samba to 3.0.1pre1 from alpha3-19. The | upgrade went well with no real problems, except . | | I have noticed today that the load on the LDAP server is | extremely high. CPU usage on slapd is anywhere between 10%-80%. | At one point to day everything came to a grinding halt. The | only difference between I can think of is the samba upgrade. | This is with an average load of about 300 users. Check you indexes on the OpenLDAP server. Look at the searches being made. Make sure you are indexing the rigth attributes. Also see the OpenLDAP FAQ (http://www.openldap.org/) for details on tuning bdb backends. Limit regex's in slapd.conf ACLs as well. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/pokBIR7qMdg1EfYRAnmRAJ93GJTyE3/PBYRVIkedA3NltsyMkwCglP/n yiZ0S9fqpJ5U1bFFgbqof4Y= =VOHL -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] upgrade 2.2.8a -> 3.0 Debian DOS long filename problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel Zeiss wrote: | Hi, | | I tried to upgrade from Samba 2.2.8a to 3.0. | | It worked generally speaking fine and speed went up tremendously, | | BUT | | since then the DOS conversion of long file names is freaking me out. | | Using long file names produced a readable short version plus ~1 oder ~x. | where x stands for a number. | | now long file names produce some cryptic 8 letter name plus extension. | listing in a DOS box additionally shows the correct long name in the far | right column, but DOS programs like word6 just get the cryptic name. | | Is this a result of new Samba 3.0 or Win98? Is it fixable or do I have | to live with that? See 'mangling method' in smb.conf(5). The default in 3.0 was changed from hash to hash2. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/polCIR7qMdg1EfYRApI6AKCu7co1K+taBzEI+LbZz9+eO6f8HgCg9EAS Ow9gIxPMnSeWKlqwfSlzx2c= =1MkB -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-3.0.1pre1 and LDAP
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kristyan Osborne wrote: | The index's I have are uid, uidNumber, gidNumber, | cn, objectClass, default eq I would add include sambaSID eq and rerun slapindex. | when I start slapd with debug level 2, I can see a lot | of searches for users and a hell of a lot of searches | for groups. These happen virtually every second. posixGroup? or sambaGroupMapping? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/po3SIR7qMdg1EfYRAuHxAJwLgytxOeIm8zqdj+Aun6D5bba9lACcCZjv MJ/wbsMFrY+NOOPzRgSwdwQ= =8Wc7 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind and getent ...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 C.Lee Taylor wrote: I have got my ADS/Win2K3 system and Samba3 using winbind. I am able to do getent passwd, which returns users out of ADS. My problem is that I wish to have a Samba box at a remote location, which I currently have, using user accounts stored in LDAP, but have not choice but to move to ADS based users because of a Citrix application which we are not able to get to work with Samba and LDAP based accounts. If I enable domain logons, getent passwd returns only local accounts, not ADS based account, plus, I have also seen that if I set winbind trusted domains only = yes, then getent passwd also stops working. Now I am sure, I read somewhere, that you can't use winbind and domain logons, but I am hoping somebody might be able to give us better idea. In Samba 3.0, winbindd should be used on a Samba PDC in order to handle users/groups from trusted domains. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/qUXIIR7qMdg1EfYRAnGZAJ914DrS54QT/3NDgpMZqt15UbD1dgCdF4uu t6wBar8oQmh4vBMvI3UqUSI= =fCbA -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Solaris, Samba-3.0.1pre1 Compile error
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeff Gardiner wrote: | Hello all, I currently run Samba 3.0 on a Solaris 9 machine in a production | environment. I'm happy with it. | | I tried compiling samba-3.0.1pre1 using ./configure --with-ldap=no. | | However when it gets to linking bin/tdbbackup it fails. This is the error it | gives: | | Using FLAGS = -O -I./popt -Iinclude | -I/scratch/build/samba-3.0.1pre1/source/include | -I/scratch/build/samba-3.0.1pre1/source/ubiqx | -I/scratch/build/samba-3.0.1pre1/source/smbwrapper -I. - -D_LARGEFILE_SOURCE | -D_FILE_OFFSET_BITS=64 -I/scratch/build/samba-3.0.1pre1/source | LIBS = -lsendfile -lsec -lgen -lresolv -lsocket -lnsl -ldl | LDSHFLAGS = -G -R/usr/lib | LDFLAGS = -R/usr/lib | Linking bin/tdbbackup | Undefined first referenced | symbol in file | smb_snprintftdb/tdbback.o | ld: fatal: Symbol referencing errors. No output written to bin/tdbbackup | collect2: ld returned 1 exit status | make: *** [bin/tdbbackup] Error 1 | | | I've made clean a number of times to ensure it wasn't a dirty build. Can | anyone provide any clue. I can post smb.conf info if need be, but I don't | think that influences the build. This was our bug. It's already been fixed in CVS. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ql61IR7qMdg1EfYRAmahAKCnhmLfGBUatRKQXoLpwy/OPmPMrQCg3hbf SO5OQQhPSn73ztv9rOu0VD8= =vDhU -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind and getent ...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 C.Lee Taylor wrote: |> In Samba 3.0, winbindd should be used on a Samba PDC in order |> to handle users/groups from trusted domains. | | |Okay, so if I understand what you are get at, is that I should setup | an AD domain, make my Samba server belong to another domain and the | Samba domain trust the AD domain, that way I get the AD users in my | Samba domain, which will let me use domain logins, which is the big | thing I am missing with Samba acting as a "Server role: | ROLE_DOMAIN_MEMBER" ... | |Does this sound right? Basically yes. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/qmTyIR7qMdg1EfYRAplhAJ90o4zskFWE1gCXNPnlNfozvR2GrQCgiv7G 4Cik4ZuOf5Boo9ILOv7wXVM= =+0vD -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] pdbedit and ldap
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dustin Rue wrote: | I'm running RedHat Linux 9 and downloaded the RPM available from | samba.org using LDAP as the back end. So far I've found I can add and | edit users but I can never delete them. I always get an error referring | to account requires uid attribute... This is a bug I've been trying to get to. Please log a bug in bugzilla.samba.org. Thanks. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/qmkqIR7qMdg1EfYRAiQfAJ0VfPRCT2AjhETGROhB3A7nfEa4EwCfcqGp QIQpu24pt3Urrk1RoKtj1Xs= =WAW3 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] strange error-report in smbd.log
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 peter grotz wrote: | Hi, | | I found the following strange report in smbd.log (using Samba3.0.1pre2cvs): | | [2003/11/05 10:10:49, 0] lib/util_str.c:safe_strcpy_fn(577) | ERROR: NULL dest in safe_strcpy | [2003/11/05 10:10:49, 0] lib/util_str.c:safe_strcpy_fn(577) | ERROR: NULL dest in safe_strcpy | [2003/11/05 10:10:49, 0] lib/util_str.c:safe_strcpy_fn(577) | ERROR: NULL dest in safe_strcpy | | Can anyone help me? Is this all serious? This has been fixed in CVS already. It is caused by a NULL printer device mode. See the chapter on printer driver download in the howto collection about initializing the driver (or use 'default devmode = yes' as a last resort). cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/qnPYIR7qMdg1EfYRAjccAKC0nGtQB+Jh/R4Wjb9o5sFRKGrw+ACdHuwb i5l1tJozRcP1n8X9yur0ohE= =Hjt6 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Samba 3.0.1pre1 winbind / getent problems
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 C.Lee Taylor wrote: |> When i try a "getent passwd" or "getent group", i don't |> have the windows users. | | | I had a same problem, and found that if I had "winbind trusted | domains only = yes" or "domain logons = yes" then "getent passwd" would | not work, change them both to "no" and it work fine ... | | I looked at you confs, but did not see this options. Do a "testparm | -v -s|less" and see if these are set. | | I have ask the list if this is by design, but have not get a direct | answer. Yes. It is by design. 'winbindd trusted domains only' is meant ot be used on domain members where you already have UNIX entities matching the users/groups in the domain. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/qnRAIR7qMdg1EfYRAtvfAJ9TKR0WeL9DzXFRcSbi304hD3oBeACg3NnY 41yZmrhQcILpFL+3UPA0ug8= =qbVb -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Winbind + LDAP Idmap backend finally running!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bernd Waldboth wrote: | After many hours of trial and error I finally managed to get my Winbind | server with Ldap Idmap backend up and running. I even had to go through | parts of the sources but finally I found out what the reason was why my | LDAP db never was updated. | | The problem was that at some point the uid/gid to sid mapping function | referred to the "ldap idmap suffix" and at other times to "ldap group | suffix" entries in the smb.conf (the exact name of the function is | ldap_get_id_from_sid). | | The solution was to point both "ldap idmap suffix" and "ldap group | suffix" (and to be sure also "ldap user suffix" and "ldap machine | suffix") in the smb.conf to the desired idmap ou. I don't know if this | was the desired behavior or not. | | Another thing I found out was that I had to remove the "ldap suffix" | entry. | | I hope I could help someone with the same problem. Would you mind trying the patch got bug #680 at https://bugzilla.samba.org/ and amke sure it doesn't break things for you? I'm about to change something here but I want to get some testing on it first. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/qsU2IR7qMdg1EfYRAiI0AKC1km4v78bSwzQPE6Rko++rYKqaEgCfY2me LPLqkHyHIZDTAEef87LZh2g= =9DoO -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] idmap + ldap + nsswitch +winbindd
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Pusateri wrote: | Hello, | | I have a couple of questions regarding group mapping. | I am working on configuring Samba 3.0.0 on FreeBSD with | LDAP support. | | 1. Am I correct in that winbindd needs nsswitch to work? | If so I would need to run FreeBSD 5.1 and not FreeBSD | 4.x so that I had NSSwitch support. The general answer is yes. | 3. If I don't need NSSwitch for Domain group | functionality. Do I need to store groupmaps in | LDAP or can I store users in LDAP and groupmaps | in the winbindd_idmap.tdb? group mappings can be stored locall in group_mapping.tdb. Winbindd is not required for Samba 3's group mapping feature. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/qtSHIR7qMdg1EfYRAkrDAJ0dQqAow6rkxfr9N/lMYHCbeOxykgCePfb/ +lc00+HYmZUIZ+0nPMwaYCg= =ypx2 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Winbind seems to have hosed my roaming profiles
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Douglas Phillipson wrote: | The next time I logged in on a client, I got the message that it | couldn't create my profile on the DC. I remove the existing profile | from /home/profiles/ expecting it would recreate it but got | the same message. As soon as I commented out the above entries | everything went back to normal. I'd heard that winbind usually makes | things better. What's happening here??? Should I have made my samba | and Linux users AFTER adding winbind? I'm still not sure winbine is | applicable in my situation because I have NO other real MS Domain | Controllers. Please advise... Need more details. Take a look at the log files. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/qxEYIR7qMdg1EfYRAtufAKC2Ipn3wP6a2k/B/jjT66S9hEF4NACeP20Y H//7cUOc+ItqKGm4Qwdqgi8= =nAYB -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 still doesn't work - build errors (details)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ron Gage wrote: | Besides spewing a ton of warnings about "/usr/include/compat.h:6:2: warning: | #warning "This header is obsolete, use ap_compat.h instead", it died when | building the smbd server. This has been fixed in CVS. Remove the #include line from includes.h | linking bin/smbd | /usr/lib/libkrb5.a(cc_file.o)(.text+0x1d90): In function | `krb5_fcc_generate_new': | /root/samba/krb5-1.3.1/src/lib/krb5/ccache/cc_file.c:2063: warning: the use of | `mktemp' is dangerous, better use `mkstemp' This is a MIT krb5 warning, not ours. | tdb/tdbutil.o(.text+0x103a): In function `tdb_search_keys': | tdb/tdbutil.c:791: undefined reference to `ap_fnmatch' | collect2: ld returned 1 exit status | make: *** [bin/smbd] Error 1 This will be corrected by removing the header include. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/qxa+IR7qMdg1EfYRAh++AKCsLodGTj6ifn75oo7EImJW8UdcxQCcCTgK hVmTPvkkAXYGs/fRkJwPRCM= =cdyS -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] General installation question: mksh error
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Louwtjie Burger wrote: | Here is the last output from the make install command: | | Installing bin/readonly.so as /usr/local/samba/lib/vfs/readonly.so | Installing bin/cap.so as /usr/local/samba/lib/vfs/cap.so | Installing bin/CP850.so as /usr/local/samba/lib/charset/CP850.so | Installing bin/CP437.so as /usr/local/samba/lib/charset/CP437.so | ./install-sh -c bin/libsmbclient.so /usr/local/samba/lib | mksh: Fatal error: Cannot load command `./install-sh': Bad file number | Current working directory /tmp/samba-3.0.0/source | *** Error code 1 (ignored) | : bin/libsmbclient.a /usr/local/samba/lib | ./install-sh -c /tmp/samba-3.0.0/source/include/libsmbclient.h /usr/local/samba/include | mksh: Fatal error: Cannot load command `./install-sh': Bad file number | Current working directory /tmp/samba-3.0.0/source | *** Error code 1 (ignored) ~ $ chmod 755 install-sh This was a bug in the packaging of 3.0.0 and was correct in 3.0.1pre1. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/qxSFIR7qMdg1EfYRAhP6AKCa/N9cM0R1SwuAznHzAVY6VGyhPACgoKSm 4NdG2o58Md1U0H0YdvUWmTk= =s/9V -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Need help setting up a Samba 3.x Backup Domain Controller with LDAP
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Travis L. Bean wrote: | From the man page and Samba how-to documentation, | I understand this "idmap" reference to only be used | for member servers and backup domain | controllers that don't have their own "passdb"? All BDC's must share the same passdb backend as the PDC. winbindd is only needed on a DC to handle trusted users/groups. | So when you setup the reference in the Backup Domain | Controllers smb.conf do you only include | the following reference to "idmap" and leave out the reference to | "passdb backend=ldapsam"? Something like this?: | | idmap backend = ldap:ldap://bdc-srv.domain.com | idmap gid = 1-2 | idmap uid = 1-2 | ldap idmap suffix = ou=idmap,dc=domain,dc=com remove this and keep the "passdb backend = ldapsam" line | and use something like this for the primary domain controller??: | | ldap suffix = dc=domain,dc=com | passdb backend = ldapsam:"ldap//pdc-srv.domain.com \ | ldap//bdc-srv.domain.com" Note the "'s I've added to use the server failure in the LDAP libs. | Also, in the backup domain controller's smb.conf I assume I set "local | master", "domain master" and "preferred master" all to "no", etc, etc. domain master = no is the only one you really need to worry about. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/qxiGIR7qMdg1EfYRAtjXAJsGz2HSvEuWy/tNXY88MmbIKoCkZwCg2OcD N/4Ec53NTPJqxR6QPqE2AwU= =7C59 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Réf. : [Samba] Net groupmap fails
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kent L. Nasveschuk wrote: | [EMAIL PROTECTED]:~# /usr/local/samba/bin/net groupmap add ntgroup="Domain | Admins" unixgroup="Domain Admins" rid=512 | Can't lookup UNIX group Domain Admins | | Is there something with initial compiling samba 3.0.0 that would disable | this? All the documentation that I've seen makes it look so easy, but I | can't get it to work. Should work as far as I can tell. try running ~ net groupmap add ntgroup="Domain Admins" \ ~ unixgroup="Domain Admins" rid=512 --debuglevel=10 and see if you get any clues. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q7rgIR7qMdg1EfYRApNLAJ9Vl+zRDF6dcF/ILcLBXx1KUyEniQCg2jm8 awcVVG2Haash31wV5FKIRvo= =AzvU -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 ACL's not Shown for Directories
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Müller, Thorsten wrote: | | I use samba 3 on a Redhat 8 box. | My clients are WintNT, Win2k and WinXP systems. | I want to have ACL to simulate NTFS Security for my clients. | This works without problems for files, | But not for directories. | When i create directories and have a look at the Security | Tab on the Windows Properties they show me no security | information (Read, Write, Full permission) | even if getfacl shows me information (see down). | I tried several options in smb.conf but nothing seems to help. | I also tried to set serveral values for the mask with setfacl. I remember a bug that prevented displaying acl's if the uid/gid<->SId mapping failed. I think this was resolved in 3.0.1pre1 but you might want to just try the CVS tree or wait until 3.0.1pre2 due out later today. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q7uaIR7qMdg1EfYRAsabAJ9MaqP2EHPDJdthQ8Cj+f/aYnlgsQCfXNR9 uHCzOR6TS7VL4pc8kmDiHJw= =nvxZ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Groups & LDAP
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Milos Webmail wrote: | I'm running samba+ldap on my RH 2.1 AS and I'm getting this errot when I | try to list groups: | | | | [EMAIL PROTECTED] etc]# net groupmap list | | [2003/11/07 15:49:10, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2048) | | ldapsam_setsamgrent: LDAP search failed: No such object smbd is searching for "(objectclass=sambaGroupMapping)" cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q7ySIR7qMdg1EfYRAgGGAJ0XxkvO+2Lk8vGBA67iCnuTmQUgxwCeMk6u CHUlS5/g+/Z8jxxt7+COmhY= =YZYe -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.0 & OpenBSD 3.3: ldap.h not found
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jyri wrote: | Hi! | | I'm trying to install Samba 3.0.0 into an OpenBSD 3.3 server. I have | copied ldap.h from OpenLDAP 2.1.22 distribution to /usr/local/include. | However, configure does not seem to find it: | | checking for LDAP support... auto | checking ldap.h usability... no | checking ldap.h presence... no | checking for ldap.h... no | | I get the same result with ./configure --libdir=/usr/local/lib | --includedir=/usr/local/include. | | I have also tried making symlink from /usr/local/include/ldap.h to | /usr/include/ldap.h but this makes no difference. | | It seems I have the same problem with lber.h which is also located in | /usr/local/include: | | checking lber.h usability... no | checking lber.h presence... no | checking for lber.h... no | configure: WARNING: ldap.h is needed for LDAP support | | Any ideas how to make this work? Thanks in advance! Check the config.log for the source of the error. Might be missing a library or something. Does OpenBSD require the -lrsolv lib still? (vague memories of this) cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q7zuIR7qMdg1EfYRAj/WAJ9gAmXlq4s1WREZILvAen8EiTGZZgCeIztS kGwAhPg2/brhkCB7301DD0U= =Ldoc -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Réf. : [Samba] Net groupmap fails
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John H Terpstra wrote: |>Should work as far as I can tell. try running |> |>~ net groupmap add ntgroup="Domain Admins" \ |>~ unixgroup="Domain Admins" rid=512 --debuglevel=10 |> |>and see if you get any clues. | | | Hint: Make sure that you have all your "add scripts" | in place. Also, make sure that these scripts can handle | object names that have > upper case characters and/or | spaces in them. Does matter here. net group map doesn't run them for you anyways. And in this case the group already existed. | PS: groupadd does NOT permit spaces or upper case | characters in a group name. In the unix group name? or the nt group name? I know the ntgroup name is fine. If the unix group name won't accept spaces, then this is a bug. (which is why I asked for a log to start with). ciao, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q8OvIR7qMdg1EfYRAsyGAKDtVsl4h/vIi+E1ZuMjuV368esfwwCgxZ8W gDyTYIou+TeI+46od+gdbxU= =YkeB -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Réf. : [Samba] Net groupmap fails
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John H Terpstra wrote: |>Does matter here. net group map doesn't run them and this was supposed to "does not". Sorry for the typo. |>for you anyways. And in this case the group already |>existed. | | | It matters if you do a "net rpc vampire", which does | call the "add X scripts". Right. I know this. I've worked on that code a fair amount. :-) But that is not what we are doing here. Let's not confuse the issue. | Please note that I specifically said that the "groupadd" | utility does not permit uppercase of spaces. Linux works | fine with groups that have up to 32 characters, even | with uppercase and spaces. ok. but i'll point out that you are confusing the issue again. Let's stay on topic here. We are dealing with ldap posixGroups here. ciao, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q8r2IR7qMdg1EfYRApYDAJwNkDvotJj3bjAufwtp4vZ+LbOXSwCZAYg9 e+k0mFmgYx3mse2+80NmWmA= =q3hV -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Réf. : [Samba] Net groupmap fails
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kent L. Nasveschuk wrote: | Did run a lower debug level -d 2 which gave me a clue that there was no | objectclass sambaGroupMapping. There shoudl be no match it you haven't added a group mapping entry. You've bypassed the problem but not helped me to figure out why it was failing in this place. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q9GYIR7qMdg1EfYRAoGjAJ4xKnOC12vNc8Ylr5Sg9p6ANXL6RwCfVSR+ HvFxGmmg90drgJGAoeUEz4o= =e+IK -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.1pre2 available for download
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This is another preview release of the Samba 3.0.1 code base and is provided for testing only. This release is *not* intended for production servers. Use at your own risk. There have been several bug fixes since 3.0.0 that we feel are important to make available to the Samba community for wider testing. The source code can be downloaded from : ~ http://download.samba.org/samba/ftp/pre/ The uncompressed tarball and patch file have been signed using GnuPG. The Samba public key is available at ~ http://download.samba.org/samba/ftp/samba-pubkey.asc Binary packages are available at ~ http://download.samba.org/samba/ftp/Binary_Packages/ A simplified version of the CVS log of updates since 3.0.1pre1 can be found in the the download directory under the name ChangeLog-3.0.1pre1-3.0.0pre2. The release notes are also available in the same directory. As always, all bugs are our responsibility. ~ --Enjoy ~ The Samba Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/rGpiIR7qMdg1EfYRAvmQAKDEFCLtSLOJGocwbEepM6wDI2EVfQCgtMRr UjqaHweh6Nn8iq3qId1Osds= =WAE8 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba-3.0.0 release won't authenticate
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kristis Makris wrote: | I've just upgraded from samba3-alpha23 to samba3.0.0 release. I'm | running samba with an LDAP backend and I used the convertSambaAccount | conversion script, and now the latest 3.0.0 ldap schema. The problem I | have is that no Windows user can authenticate against their home | directory, or any other machine. Authentication against the login screen | works, but not to any shares. | | I don't understand how this happens all of the sudden, given that | alpha23 had no problems with authentication. Is there anything else I | need to know about rids, SIDS, UID/GID mappings? | | Also, when I try to join a Win2k machine to the domain I get the error: | | "No mapping between account names and security IDs was done". Look at a level 10 debug log and find out what is going on. | Do I need to use an "idmap backend" entry in smb.conf ? No. This is not needed. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/orYnIR7qMdg1EfYRAmxsAKDVF9gm/k0mAaQxQdb+Jy4twQj91QCgk4FE dbUjcyxclYGyXBFHUBW0faY= =AY/Q -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.0 - LDAP Authetication trouble
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bart Bekker wrote: | Thanks, problem solved. | But I am still confused. Why are those password tools delivered with | Samba, if they are not useful.. I saw in the LDAP that smbpasswd uses a | SMD5 encryption for the password; the smbldap-passwd tools adds them | using SSHA. No wonder it did not work. NT password hashes are not the same as SMD5. It sounds like you are getting the samba[LM|NT]Passwqord and userPassword attributes confused. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/sQKJIR7qMdg1EfYRAol5AKCE/uqt7hMh/FLCUASC0/fkMQiNKACgsgLh jmoQivLwLrBe45NILpKBOxs= =eI7S -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Cannot enable browsing, chdir to /tmp denied...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marcus Widerberg / EMF Textile wrote: | I am a newbie at looking at the logs, I see the | access denied to the /tmp dir recurring. So what are the permissions on /tmp? They should be 1777 | Any clues GREATLY appreciated. I never had any such | problem with samba 2.2.x - am completely stuck! If I cant | fix it I will have to go with a windows PDC... btwcomments like this come off a threats to get people to offer help. I'm sure you didn't mean it like this, but it's one of my pet peeves. - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/sQMjIR7qMdg1EfYRAgG7AJsHP1xvt+lMkg8s74ccznNRJ8NoZQCfbNiy R7tmt5L3zUxprUfwEJlCLlI= =qu7f -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] logging print jobs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | Is there a method to place the actual filename | of the printjob into this type of log? See "%J' cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/sQh2IR7qMdg1EfYRAgyWAKCGnee3zPlnu/jHcqKJBrHCvSbTLACg0Bhx SGLUMdCP5aoD6R82hTpve4w= =Dm8/ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 1.9.18 swat
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | Hello | | Our customer wants to use SWAT with Samba. | On z/OS 1.2 we have in Unix System Services | Samba Version 1.9.18 from 1999. In this release there | is no SWAT-function. What should we do to implement | SWAT in this environment ? Your only options are to backport SWAT or upgrade. Sorry. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/sQUdIR7qMdg1EfYRAlg3AJ4grhXGpkZBJ3Fqm+5oVXxtckwP1ACgkFmr c0jyS0TjPrzEsKjR4Rnh7Sc= =rRF6 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Translation Dok to German, first file, deutsche Übersetzung Der Samba Doku erste Datei
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm dropping in late here, so apologies if I recover any ground already discussed, Stefan G. Weichinger wrote: |> A CVS tree is a good idea, but hosting on samba.org |> is rather difficult. If you can get a sourceforge (or |> similar) account, then you will probably find it easier. | | Why is it difficult to host that samba-german-docs-tree | on samba.org? Can you recommend or do you (or the Samba | Team in general) prefer some project-portal? Account maintaince. I've seen too many Samba volunteers get started and then fade away. I don't want set of a cvs module and create accounts on Samba.org and then watch the accounts sit there for 2 years unused. No offense, i would just prefer to see the trans-doc project mature and get some momentum first. sourceforge.net is a reasonable alternative. | I take your words as given but have to say that it has | to be kept in mind that the volunteers in this | translation-project don´t have the experience in | open-source-development and project-management the Samba | Team already has (and proves to have every day, | as I think). | | So I want to point to the fact that the difficulties | resulting from hosting the (still fictious) | samba-german-docs-tree on samba.org may be smaller | than the difficulties generated by letting the few | volunteers start over this "new" project on another | CVS. | | If the Samba Team wants to keep non-english-docs | separated from the core-software-source-trees this seems | logical to me from a programmer´s view. | | Please share your thoughts with us. The Samba project | is far from the start right now and deserves that | people think about further steps instead of just acting. I understand your concerns. However, it's the PM resources that are scarce. The best model here is to let the german-docs project have its own leader who can interact with the core Samba Team over releases, intergration, etc... There is another good reason for a separate project leader--most of us don't speak German. :-) And I'm not violently opposed to hosting it on Samba.org. I just want to see some structure first before we move forward. ciao, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/skH5IR7qMdg1EfYRAsTCAJ9JeCbW8Cm8ZBCAT6esv4XRQxHVZQCg7981 9TltYD7C0EYDvszvY9jH6fg= =2Cto -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbusers and wildcards
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kall, Bruce A. wrote: | It is my understanding that if you have a wildcard | in smbusers, it should only apply this if the | particular users is not in your /etc/password file. | Is this true? It appears like samba is rolling | down the smbusers file and everything gets mapped | to my wildcard user. | | Eg. | | smbusers: | | root = administrator admin | nobody = guest pcguest smbguest | myunixlogin = mysmblogin | www-users = * See the comments about the '!' character in 'username map' in smb.conf(5). cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/skfJIR7qMdg1EfYRAngsAKC+gjbTUAQENHCjBIeMtOO+g6VC6QCg0lq3 qjJVQlM+uKRwNz28ckvnV3E= =EJhd -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] HP1120c
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrew Bartlett wrote: |> ...but i will try one more time ask :-) |> There is one more thing, when install "HP DeskJet |> 1120c Printer" driver, on windows client when trying |> to select "Default Print Settings", from "Properties" |> Tab, i've got message like that "Can not continue, |> because out of resources" |> |>Meaby some one foud out a bit of time to answer ! | | | Install the driver locally (plug the printer in | locally), then connect to the network printer, then tell | it to use the driver, as found on this machine. I think | that is finally how I got around this. Yes, it | drove me nuts... | | I think the problem is that the 'devmode' isn't | initialised on the server, so is NULL, so it thinks | a malloc() call must have failed... It's more likely missing printer data because the driver has not been initialized. I've seen this before and it was always due to a missing P{rinterDriverData entry. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/skiGIR7qMdg1EfYRApqpAKC7IxT2Lf4Q91o2Zjm0U4RJN6aKKwCgxE/J Q/ltWjgQaSicbm0BjgNiYPM= =3j6z -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] File Disappearance after copy?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | Hi. I'm converting a group that was using Mac OS | X Server (we were dissatisfied) to Mandrake PPC | Linux with Samba. The Mandrake-supplied package is | version 2.2.7a-8mdk. So far it works great - but | we have a serious and odd problem that I couldn't | find in previous postings to this list. | | When I copy files from an OS X server to this | Mandrake/Samba server they usually disappear. Which is | bad, from a service point of view. I can often copy a | single file to the share and it works fine, but subsequent | files vanish. I would suggest getting a network trace and looking for any SMBunlink commands showung up. You could get a samba level 10 debug log and do the same thing. My guess is that the mac server is deleting the file and Samba is just doing what it was told to do. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/skrrIR7qMdg1EfYRAtHsAKDBY68icXCC4d/4q8QhIOLvRL9NvQCgkXs/ tlKdiz9e/8T9Z585NrUQAUk= =2B0+ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 3011
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Francisco Ruiz wrote: | Thanks guys. Next problem joining the domain went well | as per you directions, but when I configure my win2k | machine at start up to log on the domain I get this error | message " The system can not log you on due to the | following error" "A device attached to the system is | not functioning please try again or consult your sys admin". Everytime I have seen this error it has been caused by the primary group setting for the user in the passdb backend being mismatched from the domain. Check the group SID and compare it with the domain SID. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/skt0IR7qMdg1EfYRAkchAJ0RNDQylp25mVdQeMVKKh0UchZ7uwCcCPyX lKDlwQz/o44mrp+He+hlBqY= =nYhx -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba permissions..
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dirk Broodryk wrote: | I am running samba 2.2.7a on 9.1 p4 2400 ... | Mainly I have two problems.. and it doesn't matter what | I do.. I can't get it fixed.. Mangement is at to point of | discarding the samba server and going back to NT wich | I am trying to stop.. So please.. any help or | ideas will be helpfull.. and this is realy urgent.. I would suggest testing 3.0 since the locking code has been worked on lot since 2.2. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/skwoIR7qMdg1EfYRAt6RAJ9L2jnNQ+lUWRCe1U2LEhvVV+aFuQCg396L 3wtiBSUllualm7mzRTM8K+A= =VGhw -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] HOWTO is missing TOC
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jonathan Johnson wrote: | Saw that a new version (12 Nov) of Samba-HOWTO-Collection.pdf was | posted on the docs page. It's missing the Table of Contents. | | 23 Sep version has the TOC. It's also somewhat larger (462pp); has | something been removed from the 12 Nov version (404pp)? | | link: http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf We're reworking the docs build and have automated it out of the cvs tree. The page difference could be due to font differences on the new build host. I'll have to check. The TOC is a known issue. We're trying to track down which package needs to be updated (probably teTex). cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/spyhIR7qMdg1EfYRAm7fAJ49anVFGpoJ8aHWGjwv/jYHwVGO7QCg5EvR EXOhTX8+18/q9tHeJxiCBVQ= =GhwW -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Client accessing Samba doesn't authenticate against Active Directory
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jonathan Johnson wrote: | When a Windows client attempts to browse shares on a Samba 3.0 server | authenticating against a Windows 2003 Active Directory domain, it | requests credentials. Typing in user name and password fails Looks like you don't have the MIT krb5 1.3.1 libs or the latest version of Heimdal (don't remembe which version you need...cvs development snapshot maybe). | Output of smbclient -k -L license [EMAIL PROTECTED] | [2003/11/12 16:03:45, 0] libsmb/clientgen.c:cli_receive_smb(121) | SMB Signature verification failed on incoming packet! | session setup failed: Server packet had invalid SMB signature! ... | - | Interesting lines of /var/log/samba/log.192.168.254.202: | | [2003/11/12 14:00:24, 1] smbd/sesssetup.c:reply_spnego_kerberos(172) | Failed to verify incoming ticket! | (message is repeated twice) | cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/s7YNIR7qMdg1EfYRAre8AJ4tW64CC2OTjxDD/zaU7k+HFcPungCfdZmC RLnMHyR095uIzJ48yg5EQ2Y= =4M/D -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT4 PDC and Samba 3
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Don Bivens wrote: | When I try to copy almost everything else from anywhere on the LAN to | the Samba share it freezes up and the connection eventually times out. | | I spent the better part of 5 hours banging my head against the wall. Make sure you swicthes and hubs are not dropping packets. - -- cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/tGRUIR7qMdg1EfYRAmVEAJ4hHhUVOPEHVkxwjD0EfKThkp8LAwCcC5ie jmnm7RQQA0YQsK4gSqYsmU8= =NZqZ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 as Domain Member / W2k ADS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Arnst, Rainer wrote: | Hi, | | I set up Samba to be a Domain Member in W2k ADS Domain. The | authentication basically works, the only problem is, that a unix account | with the same name is needed on the samba machine for it to work. (The | pw though checked against the ad.) | | How do I get rid of the neccessity to have corresponding unix accounts | for the ads users? Read about winbindd. - -- cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/tPXdIR7qMdg1EfYRAqfIAKC23c6epqLLcOxcj6mPP77mBvkItgCfVhwU eCNPoHwOLv5YhlrLSIzBIPc= =aHXq -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] rid format in sambaSID
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 13 Nov 2003, John H Terpstra wrote: > On Thu, 13 Nov 2003 [EMAIL PROTECTED] wrote: > > > > > Using ldap as my sam backend and Samba 3.0.0-2, I'm showing that samba > > stops parsing a RID when it encounters a letter. For example, I have an > > accounting group with gid 2771 and therefore rid ad3. When I list the > > groups in the samba domain, however, I get this listing: > > > > Domain Admins (DOMAINSID-512) -> Domain Admins > > Domain Users (DOMAINSID-513) -> Domain Users > > Domain Guests (DOMAINSID-514) -> Domain Guests > > marketing (DOMAINSID-0) -> marketing > > support (DOMAINSID-0) -> support > > sales (DOMAINSID-0) -> sales > > integrators (DOMAINSID-0) -> integrators > > accounting (DOMAINSID-0) -> accounting Did you manually set the sambaSID string? We always set it in decimal. - -- cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE/tEY3IR7qMdg1EfYRAh8FAJ9Bej5FcfNQy/t2XiiKAZrIPvR0UACfTbnd WJ/EQvAnKiMensIYhjCySWg= =aobt -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.1pre3 available for download
This is another preview release of the Samba 3.0.1 code base and is provided for testing only. This release is *not* intended for production servers. Use at your own risk. There have been several bug fixes since 3.0.0 that we feel are important to make available to the Samba community for wider testing. This release does fix a few core dumps in the 3.0.1pre2 release and corrects point-n-print for Windows 2K/XP clients. The source code can be downloaded from : http://download.samba.org/samba/ftp/pre/ The uncompressed tarball and patch file have been signed using GnuPG. The Samba public key is available at http://download.samba.org/samba/ftp/samba-pubkey.asc Binary packages are available at http://download.samba.org/samba/ftp/Binary_Packages/ A simplified version of the CVS log of updates since 3.0.1pre2 can be found in the the download directory under the name ChangeLog-3.0.1pre2-3.0.0pre3. The release notes are also available in the same directory. As always, all bugs are our responsibility. --Enjoy The Samba Team -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] rid format in sambaSID
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | Effectively, yes. My SAM is currently in LDAP being | served by a samba-tng PDC. I'm migrating the SAM config | and generating the sambaSID value by tacking the hex rid attribute | value onto the domain SID. If samba3 expects the RID to be | represented in decimal, does that mean that DOMAINSID-512 | isn't acually the Domain Admins goup? Should it actually be | DOMAINSID-1298? 512 is base 10 rid for the "Domain Admins" group. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/tPK3IR7qMdg1EfYRAlsDAJ4lzvCmGJgKJO4iSkqWhxw2+5JgtQCg2e6Y qp7vWeqODqHDoXZOa9UbPPU= =OTFH -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] printer permissions <-> ERROR: NULL dest in safe_strcpy (samba 3.0.0)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | Hey Christoph, | I'm using SAMBA 3.0.0 on Solaris 9, it looks very | cute, unfortunately I can not set the permissions | on the printers (I can as an admin add a user etc. | but all changes are lost after applying):-( There was a significant printing fix for 200X/XP clients in 3.0.1pre3. I just tested the latest SAMBA_3_0 cvs and setting a printer acl works so you might want to try the latest 3.0.1 snapsnot. | Is this somehow related to the error entries in | the log file: | | [2003/11/17 14:45:31, 0] lib/util_str.c:safe_strcpy_fn(577) | ERROR: NULL dest in safe_strcpy This was fixed in 3.0.1pre1 I think (i know it was fixed...just don't remember when). - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/uOAIIR7qMdg1EfYRAsoZAKDBvnFzzvuLATBXBHJTff8hW2SVwwCfXYFF b9JHuxjnqnBo64bpC7ZgZPY= =fr40 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SWAT adds suffix
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Taymour A. El Erian wrote: | | I just tried SWAT that comes with Samba | 3.0.0, it keeps appending the ldap suffix to | the user,group and computer suffix and thus | corrupting my smb.conf Known issue. We're working on it ~ https://bugzilla.samba.org/show_bug.cgi?id=328 ciao, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/uOGtIR7qMdg1EfYRArTkAKCMvhwyAyjyDJ7LkPt+RqfBJBobbQCgswIy C9pdB7CaeTbQT7gMW+hXc9A= =a1xb -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] printer permissions <-> ERROR: NULL dest in safe_strcpy (samba 3.0.0)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | | thanks I will try that out during this week, I have another one: | | I'm mapping everyone to 'nobody' unfortunately the acl's of | the temprorary files are not readable by the user 'lp': | | [printsrv4] ~lp/etc # tail -f /tmp/samba_acls.txt | -rw--- 1 nobody nobody111614 Nov 17 15:58 smbprn.0026.EaaqrB | -rw--- 1 nobody nobody111613 Nov 17 16:01 smbprn.0027.rUai4B | | I tried 'force create mode = 0777' but it doesn't | seem to have any impact on the acl's of the temporary | spool files. Did I miss something, I think | the same configuration worked fine under 2.2.x (?) Yeah. See lib/util.c:smb_mkstemp(). I just checked though and the code is identical to what is in 2.. Are you doing guest printing? The problem might be the facft that the 'guest account' parameter in now global rather than on a per share basis like it was in 2.2. You could try 'force user = lp'. That would work for 9x clients but not for NT or later. - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/uPcOIR7qMdg1EfYRAnyNAKDmN/xjkroAEd2bpd0ay6md/zzibgCcDMtK xN2FeS3ZADEma+48n9fIwc0= =pCIy -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 and CUPs printer causes explorer to abend
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tim Kelley wrote: | However, accessing the printer properties from within | windows after installing the driver would cause | the application to crash, 100% of the time (the error | IIRC was something to do with C++). I cranked up my | (samba) log level to 10 and couldn't find anything | useful to debug this, everything looked normal. Nada | in the windowz logs either, but I kinda expect that. This was our bug. It's fixed in 3.0.1pre3. See the Changelog in the WHATSNEW for details. Sorry abotu the bug. - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ujE3IR7qMdg1EfYRAnAfAKDBg2jq2uQtVd7442k5oW4bM24+YQCffy5H T5DAbzra9tntxmukfCsHHiQ= =Zm9F -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Supporting multiple clients -- per machine/os config?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Staroscik wrote: | | Short version: Different clients need different socket options to | perform well. Can I point to a different smb.conf file as a function of | the client name or OS? See the %m and %a variables in smb.conf(5) as well as the "include" parameter. cheers, jerry - -- - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ukjbIR7qMdg1EfYRAltqAJ42FqapalABLdZGGLrL6tMEq2yPfQCg0acb fR9ALNfdusu/thIQtjFScjI= =VG9c -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba opens many files.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Markus Wenke wrote: | Hi, | | I have a dir with more than 16000 files in it. | If I klick with MS-Explorer on this Dir to see | which files are in it, smbd opens every file and | so it takes some seconds to show this Dir! | (and CPU usage is at 100%). We only do what the client asks us to. This is probably explorer.exe looking for icon. - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ukkeIR7qMdg1EfYRAvRFAJ4mPDjAESkdxttp8C0ar0FFHR8pZQCeJtVf /JVaPqlnG2Z5yohc//riKSY= =2nzd -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbpasswd fails to add machine account with ldapsam
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Patrick wrote: | Hi, | | I do believe this is a bug in samba 3. If you use the same | ou as the user accounts it will work. Yeah it is. The code assumes that 'ldap suffix' is set to the common parent of the machine suffix and the user suffix. - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ukn5IR7qMdg1EfYRAgr7AJ9hAPSFQFnD+/3CXNl/n9ZNuY0hhwCg5dkq LV8Hg+Fz9gXUzQZT0x5sefM= =7vF3 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] printer.tdb (tdb_oob len errors) and Quirkiness: Solaris 9, Samba 3.0.0
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeff Gardiner wrote: | I set up printing IAW: | http://us4.samba.org/samba/docs/man/printing.html | | I've confirmed the drivers are being installed to /etc/samba/drivers/W32X86. | Yet I am unable to print even a test page. I get the following error: | | "Test page failed to print. Would you like to view the print trouble shooter | for assistance? Access is denied." | | And I get the following errors in my samba log file: | | tdb(/usr/local/samba/var/locks/printing/irl.tdb): tdb_oob len 1600941951 | beyond eof at 67552 | [2003/11/18 11:05:20, 0] tdb/tdbutil.c:tdb_log(724) | tdb(/usr/local/samba/var/locks/printing/irl.tdb): tdb_oob len 858730825 | beyond eof at 67552 | [2003/11/18 11:05:20, 0] tdb/tdbutil.c:tdb_log(724) | tdb(/usr/local/samba/var/locks/printing/irl.tdb): tdb_oob len 1600941951 | beyond eof at 67552 I would test 3.0.1pre3 first, but the tdb_oob is troubling. That smells like an unitialized variable somewhere. - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ulbBIR7qMdg1EfYRAl7ZAJ0S6vQqrPPZ45U+6FePHHmakD6RXACgnh00 K/n27TX+Q1yrwFQmBlB9JLg= =DhyW -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ACLs and samba
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marius Grannæs wrote: |>Suggest you add to smb.conf [globals]: |> |> winbind trusted domains only = Yes |> |>Then run winbindd. This was added to solve the problem you are seeing. | | | Thanks! This is just what I wanted :-). I've been pulling | my hair for days over this. Is this in the documentation | somewhere? from smb.conf(5) ~ winbind trusted domains only (G) ~ This parameter is designed to allow Samba servers ~ that are members of a Samba controlled domain to ~ use UNIX accounts distributed via NIS, rsync, or ~ LDAP as the uid's for winbindd users in the hosts ~ primary domain. Therefore, the user 'SAMBA\user1' ~ would be mapped to the account 'user1' in ~ /etc/passwd instead of allocating a new uid for him ~ or her. ~ Default: winbind trusted domains only = - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ul9DIR7qMdg1EfYRAgr6AJ9HHXIHZOfTKXlmo70tVXQfkLZLtwCfbdrR s8jtUP8Lo1MGwzBhOJP5xGM= =KK46 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] printing and 'hosts deny' with samba 2.2.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Johannes Laemmermann wrote: | Hell Samba Team! | | Samba Ver: 2.2.3a-12.3 | Where can I get information about 'hosts deny' in a | printabel share. | The parameter works fine checking limitations with | testparm. But Windows NT client are still able to print. | | Where can I get any help? This was fixed sometime after 2.2.3a IIRC. Don't remember exactly which version though. - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ulKYIR7qMdg1EfYRArq2AJ4syElNF7yfw65hIUWtmJCSXkOmhACg7yA7 S4RnFv28sLIUw8bargoJuDc= =/6Sg -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] gdb compile error
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ww m-pubsyssamba wrote: | ok I know this isn't realy a samba issue but I'm trying | to gather some debug info on winbindd for the samba | development guys, but I can't compile gdb 5.x or 6.0 | on my solaris 9 box! Every other compile problem | I've come across I've resolved by searching through | google but not this time. If anyone can help I'd | really appreciate it, problem is (using gcc 3.3.2) You might save yourself some trouble and just grab a package from http://sunfreeware.com/ | gcc -g -O2 -I/usr/include/v9 \ | -o gdb gdb.o main.o cli-dump.o cli-decode.o | Undefined first referenced | symbol in file | libintl_textdomain main.o | libintl_dgettext../bfd/libbfd.a(bfd.o) | libintl_gettext main.o | libintl_bindtextdomain main.o | ld: fatal: Symbol referencing errors. No output written to gdb | collect2: ld returned 1 exit status | make[1]: *** [gdb] Error 1 | make[1]: Leaving directory `/tmp/gdb-6.0/gdb' | make: *** [all-gdb] Error 2 or try linking with -libintl IIRC. - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/u4QMIR7qMdg1EfYRAh+uAKCUduthOzUinK7bRt2Jw19nTn7JEgCgtZBd 071DyAXs7563JBeqjoyTcck= =qVFy -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Fun with veto files
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Morten wrote: | | Hi. I have a fileserver running samba 2.2.7 and netatalk 1.5.5 for old | mac clients. Because the mac's are quite spammy with creating | .AppleDouble and other system directories, I've added the following to | smb.conf: | | veto files = /.AppleDesktop/.AppleDouble/Network Trash Folder/TheFindByC | ontentFolder/TheVolumeSettingsFolder/System Volume Information/Recycled/ | | Now, when a windows client tries to delete a folder which a mac user has | implicitly created eg. .AppleDouble, the delete fails because the | windows client cannot "see" the file to delete: | | cannot remove "tiff2; the directory is not empty" | | The dir contains the .AppleDouble still, and the samba user does have | proper permissions to delete this. | | Is this a known issue? Any workarounds? See "delete veta files" in smb.conf(5) - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/u7icIR7qMdg1EfYRAm6NAKDXVqF8RkSWWxknRshg8ZyyC/78IACg6rNy 8R4rwPjZxuW+rsJsgF/98ds= =6Vwe -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] cvs samba-docs missing configure and makefile
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hendrik wrote: | Hi all, | | I just got the repository samba-docs from pserver.samba.org. | I want to make the html files out of the docbook tree. | | Please help, what have I to do to convert the existing | docbook tree to for example html. You have to run autoconf to generate the configfure script and Makefile. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/u9eXIR7qMdg1EfYRAkKaAKCBjymdsl3dYuPQ+Qte9G6klfWsWwCg5LzP rThhxYpCt75/fSL/AFHKjxk= =Hl2f -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 0xc0000022 error / winbind
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 leopardb wrote: | I run linux mandrake 9.2 on a NT2K domain with a | win2k server (in native mode) I've installed samba 2.2.8 on | the linux box with winbind. I've followed | the samba howtos (joined the domain etc...) and | everything's running fine except that : | | wbinfo -t | Secret is good | | wbinfo -u | 0xc022 | | wbinfo -g | 0xc022 ~From include/nterr.h: ~ #define NT_STATUS_ACCESS_DENIED NT_STATUS(0xC000 | 0x0022) You need to use --set-auth-user option to wbinfo (or -A in 2.2). - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/vNvOIR7qMdg1EfYRArz6AKClkTMLGlqhGBqCg/fnMJ0hebWgyACeLfkP kplMOoXA6cAlpGf65ly9Ahw= =u2He -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Printing Buffer Overflow
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alejandro Soler wrote: | Hi, | | I have a print server, with RH9 and the last Samba | 3 version (i have to update because i have this problems | many times with previus samba versions) | | When i try to print from WinNt 4, from Oracle Reports | 3, drWatson come in. In the print server i have this log: ... | [2003/11/19 10:10:30, 3] smbd/error.c:error_packet(118) | error packet at smbd/ipc.c(99) cmd=37 (SMBtrans) | STATUS_BUFFER_OVERFLOW This is normal for fragmenting rpc PDU's across multiple SMB reads/writes. Is it only Oracle reports that fails printing? What printer driver? Please provide more details. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/vOOyIR7qMdg1EfYRAklYAKCXQ6uh5Ndw2xG3XrTgUcFbbFEQsgCfTiDt afkvytLwWIso4aeHnon8rtw= =zvJH -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba opens many files.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Markus Wenke wrote: | If I change "case sensitive" to yes, this problem is | fixed, but if I make in the windows-C-file a simple | _findfirst() the same behavior appears. | If I makt it to a Dir with 2 files, every file will be | opened at least one time. Why opens samba this files? for | only _findfirst() the files musn't be opened or? | and if I make a tcpdump, I see that windows(the client) | doesn't ask to open this files, there are only <50 packets | for 16000 files. Windows clients expect case insensitive semantics. So smbd has to scan the directory to implement that. If you have a case insensitive file system, then smbd wouldn't need to do this for you. - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/vOZEIR7qMdg1EfYRApvzAJ9iogm3PZ/JlE0EBqW3YP/uGzW2SACfRmrm G/xjxS0uoFN3RAYFId4Qgc4= =0B35 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: 0xc0000022 error / winbind
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 leopardb wrote: | But when i try to connect to the /home share on my linux | Box from the win2k machine named mc-coy, | 1) the file /var/log/samba/log.mc-coy is incremented with : | passdb/pampass.c:smb_pam_error_handler(71) | smb_pam_error_handler: PAM: session setup failed : Permission denied | 2) a box asking for password appears and each time i enter a good | password, 1) re-occurs Unless you really know what you are doing and need pam, I would set 'obey pam restrictions = no' If you want to fix it, you'll need to debug the session lines in /etc/pam.d/samba. - -- cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/vPfLIR7qMdg1EfYRArvnAJ9Ver/06SKYWOK5/7ckRl9eAxE+sgCfZJgv Ps3DOrWEE8G7uTPlR0wG2HU= =1Fhp -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 and CUPs printer causes explorer to abend
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Orwig, Paul wrote: | A complication that has me puzzled... | After updating to 3.0.1pre3, I can no longer | upload drivers using the GUI. I now get an | Access Denied message with no indication what | access is being denied. Printers that were setup | before the fix are working fine. I can update | the printer properties, I just can't upload drivers. | | Is this a result of the fix? Works fine here. Cherck the log file and see why you are getting denied access (and and what stage). cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/vREoIR7qMdg1EfYRAlVRAJ0R2S7tummeNRoeA5qV0ccJ6vHbvwCfZ17Q vrI3P13QOgZowWYPaZeOd7Q= =xvos -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] net getlocalsid fails
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brett Blackham wrote: | I am using Samba 3.0 and when I run net getlocalsid I receive: | | [2003/11/21 04:38:08, 0] utils/net.c:net_getlocalsid(414) | | Can't fetch domain SID for name: REDHAT | | What am I doing wrong? Are you runnin g net as root ? ciao, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/wlorIR7qMdg1EfYRAn4PAKC/WRnwCt8IWp5bZPk3VvIW1prwCACeNEcc EPNfl/jK24UFe0TtNA6ZUus= =xc/c -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: WG: [Samba] User manager for Domains for samba 3.0 PDC
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John H Terpstra wrote: |> When using swat, be carefull, because swat appends |> the ldap suffix ,with each change you make within swat, |> to the user,group,machine and imap suffix. This can also |> result in "illegal stub" or causing logon problems. This |> is a reported bug in swat. | | Please note that this is being corrected. Suggest you | move to Samba-3.0.1 when it is released (or sooner | if you feel the need). already fixed in the SAMBA_3_0 cvs tree (post 3.0.1pre3). - -- ciao, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/w3xkIR7qMdg1EfYRAktdAKDnuu9BN3LYt9K5L6JC7TtqHfw60gCZAXsc piNnweFpRWfBSLlr5IEdJ+k= =YIqq -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Understanding of SID generation
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nicholas Fechner wrote: | Hi, | can anyone point me to a good source on how to | generate correct SIDs for our users? We store | them in LDAP using Samba 3.0 on Debian/unstable. | Tnx in advance, Nicholas Best to let samba do it using smbpasswd or pdbedit (or smbd). Too easy to get into trouble otherwise. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/w4gMIR7qMdg1EfYRAkTDAKCUTO3DJX9vC1d8ECAZAt5NEnEcKgCgxG3S amdFRx47X3UzoxGCPx6bIqg= =W7wx -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Bug in installclientlib
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 William R. Knox wrote: | Needless to say, this patch should be against Makefile.in. Here is the | proper patch. Thanks Bill. i'll get this checked in later today. Will be fixed be in 3.0.1 cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/w5CHIR7qMdg1EfYRApoQAKCBoYhp4hDwmKNSHJqn9CcjhBJN/ACePDVh /agFkfDZ+Na5uyPSK4r6cTo= =tPQ+ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: WG: [Samba] User manager for Domains for samba 3.0 PDC
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ionut Gumeni wrote: | Gerald (Jerry) Carter wrote: | | I am using now samba3.0.1pre3 downloaded yesterday and I still have | problems with User Manager for Domains: I haven't started looking into this yet. My comment was only about the swat bug. Hang in there. This will probably be a 3.0.2 fix. | |> When using swat, be carefull, because swat appends | |> the ldap suffix ,with each change you make within swat, | |> to the user,group,machine and imap suffix. This can also | |> result in "illegal stub" or causing logon problems. This | |> is a reported bug in swat. | | | | Please note that this is being corrected. Suggest you | | move to Samba-3.0.1 when it is released (or sooner | | if you feel the need). | | already fixed in the SAMBA_3_0 cvs tree (post 3.0.1pre3). cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/xK1DIR7qMdg1EfYRAmb3AJ9iBenLSkzp7zTLuNMEemhJRjpETwCg5Xto +Avdnz6WttaePyvg8erq0kI= =N32G -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] wbinfo -c duplicate entry
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Raphaël Berghmans wrote: | Hi, | | With "wbinfo -c user", a entry is created in winbind_idmap.tdb. But if I | retype the same command with same username a second entry (with a | different uid) is created in tdb file. | | Is behavior normal ? no. It would be a bug. Please file a report for me at https://bugzilla.samba.org/. Thanks. - -- cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/y0ZHIR7qMdg1EfYRAhodAJ0QGLtYJYnGy6tLWpulxtZE4CGscgCeNVjz 7BzPGfouR+dsyp11PsBAgmw= =xpIc -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Add printer wizard... No server listed...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tait Shrum wrote: | We have a Samba 3.01 pre3 server that acts as a print server among other | things. When our users go to the add printer wizard in Windows, it | doesn't show our samba server! The only way to add a printer is by | manually entering the path. That's really inconvenient if you don't | know the path. :) Is there some way we can resolve this? I think this is what you are seeing ~ https://bugzilla.samba.org/show_bug.cgi?id=101 It's in the queue to be fixed. But probably not for 3.0.1 cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/z1yhIR7qMdg1EfYRAs5jAJ47T5lp+EnVwrQo65UYLrxrF2TqdgCgvmo5 iUMOht9/mqK0TIrGUkP34Y8= =i+82 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FYI: Solaris 9 profiles binary core dumping
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeff Gardiner wrote: | Hello all, | | Just wanted to report that the samba/bin/profiles binary | in Solaris 9 causes Segmentation fault. I can send the core | file to anyone who wants for inspection. Please file a bug @ https://bugzilla.samba.org/ ciao, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/z2IKIR7qMdg1EfYRAgYTAJ40mXqgcnCLR0Qbol9VcSgLHA1BCACfSJGz 1JcYAg4fGhhOZRr/kTvv6mk= =ddds -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba