Re: [Samba] smbldap-tools 8.3 populate errors

2004-01-18 Thread Jérôme Tournier
Le Sat, Jan 17, 2004 at 04:00:23PM +0100, Manfred Odenstein a ecrit:
 The tgz file is incomplete, I've notced this too. The rpm is complete, so I've 
 downloaded the rpm file instead, unpacked it, and copied the scripts to their 
 respective location.
Yes, you are write. The archive now include the file.

 My system is now runnung, but I think there are some bugs in the populate 
 script, e.g. the SID of the Administrator account should end with -500 as I 
 know, because it's predefinded. Any comment from the author ???
500 is the well-known RID for the domain administrator, not for
the administrator account, am i wrong ?
 
 and please take care of the default groups in the smbldap.conf file, default 
 machine account points to Print Operators (550) should be Domain 
 Computers (553).
Yes, fixed.
 
 I've also changed the gidNumber and uidNumber of the guest account and Domain 
 Guest group to the default values of my system (SuSE9)
 
 after this all worked correctly except some log-entries .
 Failed to open group mapping database 
 and 
 failed to decode PDU
Do you always have this error messages ? With every scripts ?
Thanks for your report !
-- 
Jérôme
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba Digest, Vol 13, Issue 30

2004-01-18 Thread peter
I will be out of the office starting from Dec 02 till Jan. 12th, 2004. If it is urgent 
please send e-mail to [EMAIL PROTECTED] and someone will assist you. Thanks.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba Digest, Vol 13, Issue 30

2004-01-18 Thread petera
I will be out of the office starting from Dec 02 till Jan. 12th, 2004. If it is urgent 
please send e-mail to [EMAIL PROTECTED] and someone will assist you. Thanks.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] shared folders ownership

2004-01-18 Thread Juanjo Lull ONO
This is what I have for a directory I want everybody to access:
[experimental]
comment = Directorio de experiencias
browseable = yes
writable = yes
path = /home/exper
public = yes
force user = exper
I created a share experimental. Then I created a user exper. Then in the
share you put that force share, so the only user you will write will be
exper. In another way, when somebody connects to experimental then the user
turns out to be exper for reading and for writing. If you want that folder
not to be writable just put writable to no.
You first must create the folder /home/exper from the user exper, in this
example.
Cheers


- Original Message - 
From: Wes Wilcox [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, January 18, 2004 2:07 PM
Subject: [Samba] shared folders ownership


what/who is the owner of a shared directory in Samba, on a network that
requires every one to access the directory, when created as root with 0777
it seems to revert back to root ownership and you can't write or delete from
it.
Relativily new at this, so would appreciate any help.
Thanks
Wes
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba 3.0.2rc1 Available for Download

2004-01-18 Thread Volker Lendecke
On Fri, Jan 16, 2004 at 08:12:38PM -0600, Gerald (Jerry) Carter wrote:
 Binary packages are available at
 
   http://download.samba.org/samba/ftp/Binary_Packages/

As usual SuSE RPMs are available from ftp.sernet.de/pub/samba.

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Strange behavior WinXP and 2.2.8a and inherit permissions

2004-01-18 Thread Markus Thüer
Hi, 
 
I have a quite strange problem.
I have updated my Server with Suse 9.0 to Samba 2.2.8a. From that moment
on I couln'd run programms directly from the share anymore. The WinXP
Client says: you dont have the permission for this file. But I have
all permissions for it. This only occurs in that shares where I have set
inherit permissions to yes. When I set it to No it works again. I
can run programms from the share. I tried it on two XP Clients with same
results. When I used a WinMe Client it worked all the time. 
It looks for me a bit like a bug. For I have not changed anything except
updating samba to 2.2.8a 
 
Has anyone an Idea what this could be? Or how I can get around it?
 
Greetings from the Black Forrest
 
Markus 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Samba 3.0.2rc1 Available for Download

2004-01-18 Thread Andrei Bazhgin
It should be noted that the FreeBSD port of this is not up tp date. This caused
me a lot of problems because the current port is 3.0.0 and includes an annoying
bug that does not let one access the home directory -- upgrading required a
manual change in the port files.

Someone should contact the port mainatainer :P

On Sun, Jan 18, 2004 at 04:34:30PM +0100, Volker Lendecke wrote:
 On Fri, Jan 16, 2004 at 08:12:38PM -0600, Gerald (Jerry) Carter wrote:
  Binary packages are available at
  
http://download.samba.org/samba/ftp/Binary_Packages/
 
 As usual SuSE RPMs are available from ftp.sernet.de/pub/samba.
 
 Volker
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
andrei bazhgin | aftermath
programmer
http://nan2d.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Ia have a problem with loging from XP to SambaPDC

2004-01-18 Thread [EMAIL PROTECTED]
When i logo n then there is no recent programs and no settings is saving
when i logotu and logi n ragain. I have profil roaming
 
Eny suggestions?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.1 running at ~90% CPU

2004-01-18 Thread Andrei Bazhgin
Hello.

I am having a problem with Samba 3.0.1, it seems that smbd is running at almost
100% CPU level and I dont know why. If I listen to music from a samba share, it
sometimes pauses too and this is obviously a sign of a problem.

I compiled samba without CUPS, if that matters. My smb.conf file is from samba
2.x but does not use any of the depricated settings. I dont think it is the
config file.

If anyone could point me in the right direction on what to do, it would be
apreciated. I am going to re-compile and install with CUPS support now, and see
if that does it.

Please help, I am kind of lost :|
-- 
andrei bazhgin | aftermath
programmer
http://nan2d.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] SAMBA 3 and Existing krb5.keytab

2004-01-18 Thread James Trater
I believe that similar questions have been posted to the list, but I can't
recall seeing a resolution to this problem.

 

I have a number of Solaris and Linux machines that are configured to use
Kerberos to authenticate against our Windows 2003 Active Directory. The
problem is that when I use SAMBA 3.x to join the machine to the domain, the
Kerberos authentication breaks. One workaround is to change the machine name
is smb.conf to something like server-shares, but this is confusing for users
and it will be very time consuming for me to remap everyone's network
drives. Is there any way to use the existing krb5.keytab, or do you have any
other suggestions or workarounds?  Thanks. 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Strange behavior WinXP and 2.2.8a and inherit permissions

2004-01-18 Thread Andrei Bazhgin
Well, currently the stable release of Samba is version 3.0.1 and all production
servers should be using it. Perhaps you should upgrade? Other then that, I dont
know what the solution could be.

On Sun, Jan 18, 2004 at 08:53:27PM +0100, Markus Th?er wrote:
 Hi, 
  
 I have a quite strange problem.
 I have updated my Server with Suse 9.0 to Samba 2.2.8a. From that moment
 on I couln'd run programms directly from the share anymore. The WinXP
 Client says: you dont have the permission for this file. But I have
 all permissions for it. This only occurs in that shares where I have set
 inherit permissions to yes. When I set it to No it works again. I
 can run programms from the share. I tried it on two XP Clients with same
 results. When I used a WinMe Client it worked all the time. 
 It looks for me a bit like a bug. For I have not changed anything except
 updating samba to 2.2.8a 
  
 Has anyone an Idea what this could be? Or how I can get around it?
  
 Greetings from the Black Forrest
  
 Markus 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
andrei bazhgin | aftermath
programmer
http://nan2d.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] After reinstall XP - browsing doesn't work

2004-01-18 Thread LanRol
well?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
Lancsr Roland
Sent: Saturday, January 17, 2004 5:24 AM
To: samba
Subject: [Samba] After reinstall XP - browsing doesn't work


Hi all,

I use Samba 2.2.7a-SuSE. It works correctly, but after when I reinstalled my
XP, the browsing hasn't worked. :(

Example, I try to browse from Explore, it halt. But if I try to access (for
example) \\server\mp3, it works.

What is wrong?

Thanks!

Regards, Roland

My smb.conf:

[global]
time server = yes
netbios name= Stargate
workgroup   = NIK
server string   = Samba server (on %L)
hosts allow = 10.1.1. 10.0.0. localhost
interfaces  = 10.0.0.0/24 10.1.1.0/24
bind interfaces only= yes
local master= yes
os level= 34
time server = yes
wins support= yes
name resolve order  = wins lmhosts hosts bcast
local master= yes
security= user
encrypt passwords   = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync  = yes
passwd program  = /usr/bin/passwd u%
passwd chat = *new password* %n\n *new password* %n\n
*success*
log level   = 2
max log size= 1000
log file= /sambalog/log.%m
socket options  = TCP_NODELAY IPTOS_LOWDELAY
guest ok= yes
character set   = ISO8859-2
client code page= 852
mangle case = no
case sensitive  = no
default case= lower
preserve case   = yes
short preserve case = yes

[homes]
comment = Home Directory
valid users = %S
browsable   = no
read only   = no
create mode = 600
force create mode   = 600
directory mask  = 700
force directory mode= 700
hide dot files  = yes
[shared]
guest ok= yes
browsable   = yes
read only   = no
path= /wd40/shared
map archive = yes
create mask = 0644
directory mask  = 0755
force group = users
delete readonly = yes

[mp3s]
valid users = roland
path= /wd40/mp3s
read only   = no
map archive = yes
create mask = 0644
directory mask  = 0755
force group = users
delete readonly = yes




--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] loading print driver question

2004-01-18 Thread Mark Fowle
I am trying to add print drivers for a samba shared printer to a Windows
2000 group - Everything up to this step works - I am using Samba 3.0.1

rpcclient -d 100 -Uroot -c 'adddriver Windows NT x86 \
E323:LMAAE1DD.dll:\
LMAAE1P1.PPD:LMAAE1DA.DLL:LMAAE1DA.HLP:\
NULL:RAW:LMAA1B1.DLL,LMAAE1BJ.DLL,LMAAE1BT.DLL,LMAAE1DA.ALL,LMAAE1ED.DLL,LMAAE1PI.EXE,\
LMAAE1TD.DLL,LMAAE1TE.DLL,LMAAE1DA.CNT,LMAAE1DF.DLL,LMAAE1DL.DLL,LMAAE1PU.DLL,\
LMAAE1SE.DLL,LMAAE1TF.DLL,LMAAE1TH.HLP,LMAAE1UZ.ZIP' SambaEnt

The result I get is:

result was WERR_ACCESS_DENIED


In the log.smbd I get the following error:

[2004/01/18 17:29:22, 0] printing/pcap.c:pcap_printer_fn(361)
  Unable to open printcap file cups for read!


I'm not sure whats causing this error. I have changed the permissions on
the /etc/printcap file to be wide open, and that doesn't seem to work
either.  Can anyone shed some light on where I might have messed up?

Thanks,
Mark

-- 
Mark Fowle
[EMAIL PROTECTED]



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] recycle bin module, touch, TIME/DATE

2004-01-18 Thread ipguy
Hi all...

There seems to be an issue with the recycle bin module for samba 2.2.8a

When files are deleted, the time/date is not touched to the current time/date, 
making it hard to write scripts that empty the trash based on deletion date. 

Strangely enough, the time/date of deleted folders is touched

Anyone having the same problem ?

-ipguy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] patching 3.0.0 to 3.0.1

2004-01-18 Thread Greg Chavez

Okay, I realize at this point that's it's certainly easier for me to just
compile 3.0.1 from scratch, but I'm irritated that I can't get patch to
work right.  Maybe somebody will lead me in the right direction.  I've
scoured the archives and Google for answers to this, to no avail so far.

I'm running Samba 3.0 on Solaris 9.  I'm hoping that the new release will
help me with some problems I've been having with character conversions
using smbprint.sysv (you will hear more form me if it doesn't).

I do this:

  # cd samba-3.0.0/source
  # make distclean
  # ls patch*
  patch-3.0.0-3.0.1.gz
  # gzcat patch* | patch -p0## GNU patch 2.5.4
  can't find file to patch at input line 4
  Perhaps you used the wrong -p or --strip option?
  The text leading up to this was:
  --
  |diff -u -r --new-file samba-3.0.0/WHATSNEW.txt samba-3.0.1/WHATSNEW.txt
  |--- samba-3.0.0/WHATSNEW.txt   Wed Sep 24 20:52:54 2003
  |+++ samba-3.0.1/WHATSNEW.txt   Sun Dec 14 22:10:05 2003
  --
  File to patch: ^C
  #

Argh.

--Greg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] W2K AD domain join success, wbinfo -t error - question

2004-01-18 Thread
Hi all!
I'm configuring Samba 3.0.1 on Solaris 9 (rel  s9_58shwpl3) Sparc.
Have successfully installed Ldap libs, Krb5 libs, and, finally - Samba. Trying to join 
W2KSP4 domain.

net rpc join -S dc01 -U Administrator 
Gives
bash-2.05# /usr/local/samba/bin/net rpc join -S dc01-tmn -U Administrator
Password:

Joined domain MYDOMAIN.

Now i start winbindd. 

The smb.conf file is:
WORKGROUP=MYDOMAIN
security = domain
winbind use default domain = yes
winbind separator = +
idmap uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes
template homedir = /export/home/%D/%U
template shell = /bin/bash


Then 
wbinfo -g LISTS domain groups and
wbinfo -u LISTS domain users.
See below
(bash-2.05# ./wbinfo -g
Domain Admins
Domain Users
Domain Guests
. 
about 100 groups)

BUT wbinfo -t gives the error:

bash-2.05# ./wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_NO_TRUST_SAM_ACCOUNT (0xc18b)
Could not check secret
bash-2.05# 

And net rpc testjoin sais:

bash-2.05# ./net rpc testjoin
[2004/01/19 08:43:40, 0] utils/net_rpc_join.c:net_rpc_join_ok(73)
  Error in domain join verfication (fresh connection)
Join to domain 'TMN' is not valid 

The log is:
Jan 16 18:47:39 SAMBA_SERVER pam_winbind[9808]: [ID 467601 auth.error] request failed: 
No trusted SAM account, PAM error was 4, NT error was NT_STATUS_NO_TRUST_SAM_ACCOUNT
Jan 16 18:47:39 SAMBA_SERVER pam_winbind[9808]: [ID 637597 auth.error] internal module 
error (retval = 4, user = `root'
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error] [2004/01/17 
12:59:12, 0] lib/util_sock.c:write_socket_data(388)
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error]   
write_socket_data: write failure. Error = Broken pipe
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error] [2004/01/17 
12:59:12, 0] lib/util_sock.c:write_socket(413)
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error]   write_socket: 
Error writing 138 bytes to socket 14: ERRNO = Broken pipe
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error] [2004/01/17 
12:59:12, 0] libsmb/clientgen.c:cli_send_smb(155)
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error]   Error writing 
138 bytes to client. -1 (Broken pipe)
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error] [2004/01/17 
12:59:12, 0] rpc_client/cli_pipe.c:rpc_api_pipe(424)
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error]   cli_pipe: 
return critical error. Error was Write error: Broken pipe
Jan 17 13:59:16 SAMBA_SERVER net[25311]: [ID 702911 user.error] [2004/01/17 13:59:16, 
0] utils/net.c:net_getlocalsid(414)
Jan 17 13:59:16 SAMBA_SERVER net[25311]: [ID 702911 user.error]   Can't fetch domain 
SID for name: SAMBA_SERVER
Jan 19 07:45:52 SAMBA_SERVER ftpd[25362]: [ID 484914 daemon.notice] gethostbyaddr: 
host136-5.pool8249.interbusiness.it. != 82.49.5.136
Jan 19 08:43:40 SAMBA_SERVER net[26014]: [ID 702911 user.error] [2004/01/19 08:43:40, 
0] utils/net_rpc_join.c:net_rpc_join_ok(73)
Jan 19 08:43:40 SAMBA_SERVER net[26014]: [ID 702911 user.error]   Error in domain join 
verfication (fresh connection)

(WHERE SAMBA_SERVER is the name of my Samba box I'm playing with - changed,
BUT the original name of the samba server IS resolved from any of  domain controllers)

The patch 113476-05  IS applied (although it is needed for the nss mechanism to work 
properly).

What am i doing wrong ?
Help is really needed, since i,m playing with half-prodaction server hence can not 
play-and-change-and-reboot much :(.
Thanks all in advance!!!
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] patching 3.0.0 to 3.0.1

2004-01-18 Thread Gerald Carter
On Sun, 18 Jan 2004, Greg Chavez wrote:

 
 Okay, I realize at this point that's it's certainly easier for me to
 just compile 3.0.1 from scratch, but I'm irritated that I can't get
 patch to work right.  Maybe somebody will lead me in the right
 direction.  I've scoured the archives and Google for answers to this, to
 no avail so far.
 
 I'm running Samba 3.0 on Solaris 9.  I'm hoping that the new release
 will help me with some problems I've been having with character
 conversions using smbprint.sysv (you will hear more form me if it
 doesn't).
 
 I do this:
 
   # cd samba-3.0.0/source
   # make distclean
   # ls patch*
   patch-3.0.0-3.0.1.gz

cd ..

   # gzcat patch* | patch -p0  ## GNU patch 2.5.4

gzcat source/patch* | patch -p1




cheers, jerry

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Hi

2004-01-18 Thread samba-technical
--  Virus Warning Message (on the network)

Found virus WORM_BAGLE.A in file ekl.exe
The file ekl.exe is moved to /var/log/virus/virJHCoDob8S.

This is a machine-generated message, please do not reply via email. If you have 
questions, please contact the Lucent Help Desk at +1 888 300 0770.

-
 Test =)
ewekoljsewetbd
--
Test, yep.

--  Virus Warning Message (on the network)

ekl.exe is removed from here because it contains a virus.

--- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] What does ir mean in Showall FW?

2004-01-18 Thread [EMAIL PROTECTED]
NEWNOTSYN
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Time to straighten out groupmap

2004-01-18 Thread Craig White

I need to clean up the groupmap setup - samba 3.0.0 / ldapsam

Although I'm spitting out a fair amount of information, I'm going to
concentrate on the Administrators entry which appears twice, this
doesn't seem good...

# net groupmap list
Administrators (S-1-5-21-1292501092-333717336-619646970-544) - root
Backup Operators (S-1-5-21-1292501092-333717336-619646970-551) - bin
Replicators (S-1-5-21-1292501092-333717336-619646970-552) - daemon
System Operators (S-1-5-21-1292501092-333717336-619646970-549) - sys
Domain Admins (S-1-5-21-1292501092-333717336-619646970-512) - adm
Print Operators (S-1-5-21-1292501092-333717336-619646970-550) - lp
Domain Guests (S-1-5-21-1292501092-333717336-619646970-514) - nobody
Users (S-1-5-32-545) - users
Domain Users (S-1-5-21-1292501092-333717336-619646970-513) - users-all
Domain Computers (S-1-5-21-1292501092-333717336-619646970-515) -
machines
Public Relations (S-1-5-21-1292501092-333717336-619646970-1021) -
users-pr
Macintosh Users (S-1-5-21-1292501092-333717336-619646970-1049) -
users-adv
Accounting (S-1-5-21-1292501092-333717336-619646970-1008) - users-acctg
Domain Admins (S-1-5-21-1292501092-333717336-619646970-512) - Domain
Admins
Domain Users (S-1-5-21-1292501092-333717336-619646970-513) - Domain
Users
Domain Guests (S-1-5-21-1292501092-333717336-619646970-514) - Domain
Guests
Accounting (S-1-5-21-1292501092-333717336-619646970-1008) - Accounting
Public Relations (S-1-5-21-1292501092-333717336-619646970-1021) -
Public Relations
Macintosh Users (S-1-5-21-1292501092-333717336-619646970-1049) -
Macintosh Users
MTS Impersonators (S-1-5-21-1292501092-333717336-619646970-1003) - MTS
Impersonators
WWW access (S-1-5-21-1292501092-333717336-619646970-1015) - WWW access
Account Operators (S-1-5-32-548) - Account Operators
Administrators (S-1-5-32-544) - Administrators
Backup Operators (S-1-5-32-551) - Backup Operators
Guests (S-1-5-32-546) - Guests
Print Operators (S-1-5-32-550) - Print Operators
Replicator (S-1-5-32-552) - Replicator
Server Operators (S-1-5-32-549) - Server Operators
Domain Computers (S-1-5-21-1292501092-333717336-619646970-553) - Domain
Computers

I guess that I need a better overview to fix the LDAP setup

I have a group root - 

cn: cn=root,ou=Groups,o=Domain,c=US 

objectClass: posixGroup
objectClass: top
objectClass: sambaGroupMapping
cn: root
userPassword:: e2NyeXB0fXg=
gidNumber: 0
creatorsName: cn=root,o=Domain,c=US
createTimestamp: 20031227024133Z
sambaSID: S-1-5-21-1292501092-333717336-619646970-544
sambaGroupType: 2
displayName: Administrators
description: Local Unix group
modifiersName: cn=root,o=Domain,c=US
modifyTimestamp: 20031227043956Z


NOTE - displayName: Administrators
and I have a group Administrators

dn: cn=Administrators,ou=Groups,o=Domain,c=US 

objectClass: posixGroup
objectClass: sambaGroupMapping
cn: Administrators
gidNumber: 1016
creatorsName: cn=root,o=Domain,c=US
createTimestamp: 20031227025306Z
sambaSID: S-1-5-32-544
sambaGroupType: 5
displayName: Administrators
description: Members can fully administer the computer/domain
memberUid: Administrator
memberUid: kbenedetto
modifiersName: cn=root,o=Domain,c=US
modifyTimestamp: 20031227214759Z

This is what I believe happened and how I would fix it - please tell me if I am on 
target or off base.

I created the users and groups from padl migration scripts
I then net rpc vampire from the Windows NT PDC
I then ran a groupmap command that included...
net groupmap add sid=S-1-5-21-1292501092-333717336-619646970-544 
ntgroup=Administrators unixgroup=root

-
I believe that samba uses the displayName attribute for Groups and my problem is that 
I have 2 Groups with that display name.

The sambaSID: S-1-5-32-544 of the Administrators group isn't correct. The sambaSID 
should be the full domain SID and the RID right?

Thus my conclusion is that I should get rid of the one that came from net rpc vampire 
and keep the 'cn=root,ou=Groups,o=Domain,c=US

And then I repeat for all groups which have more than 1 entry in the net groupmap list.

Correct?

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ADS and Winbind ... Can't access with Samba host name ...

2004-01-18 Thread Nic le Roux
@ Matt McParland wrote:
@
@ | I saw the same symptoms using Samba 3.0.1 and a
@ | Win2k ADS.
@ |
@ | up the shares on the Samba server but still can't
@ | access any of those shares.
@ |
@ | It has taken a LONG time just to get to this point.
@
@ Ironically I'm working on this right now.  Apparently
@ entering the IP address causes the win2k client to use
@ encapsulated NTLMSSP rather than a kerberos ticket
@ to connect.
@
@With the latest 3.0.2pre binary release I'm actually able to browse the
@shares and do everything you'd expect.  NN works, and so does Start - 
Run
@\\hostname.
@
@If 3.0.2pre is broken, it's not totally broken because my fileserver 
seems
@to work.

I'm having the same problem, 
Using 3.0.2pre but no joy,

Getting promted for user name and password when trying to access machine 
via hostname.
Works fine with IP address.

Checked that NTLM authentication works but no matter what I try, (been 
trying for weeks)
the Kerberos tickets always fail.

All tests to check whether things are working goes through though 
following are commands that do work.

wbinfo -u
wbinfo -g
getent passwd
getent group

smbclient //server/share -k

Any Ideas ?


---
Disclaimer and Confidentiality Note

Please click on the link below:
http://www.rohlig.co.za/RohligNew/DesktopDefault.aspx?tabindex=31tabid=132





--

Disclaimer and Confidentiality Note

Everything in this e-mail and any attachment relating to the official 
business of the company is 
proprietary to the company. It is confidential, legally privileged and 
protected by law. The company 
does not own and endorse any other content. Views and opinions are those 
of the sender unless clearly 
stated as being that of the company.

The person addressed in the e-mail is the sole authorised recipient. 
Please notify the sender 
immediately if it has unintentionally reached you and do not read, 
disclose or use the content 
in any way.

The company cannot assure that the integrity of this communication has 
been maintained nor that it 
is free of errors, virus (however, we do have a Virus scanner in place), 
interception or interference.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba