Re: [Samba] Print Cost Capture

2006-07-05 Thread mallapadi niranjan

Hi

You can also try a software called "PAPERCUT" , which i am using
it sits perfectly with SAMBA with OPENLDAP and the billing is also quite
nice.
It's available in both Linux and windows version

Please check it , hope it suites you.

Regards
Niranjan

On 7/5/06, Jerome Alet <[EMAIL PROTECTED]> wrote:


On Wed, Jul 05, 2006 at 11:29:23AM -0500, Don Meyer wrote:
>
> The catch is that it was written around LPRng.   A couple times now,
> I have attempted to modify (update) the system to use CUPS -- but
> I've always been stymied by the lack of any functions to move jobs
> from one queue to another.

Maybe this could be the solution :

http://iremia.univ-reunion.fr/intranet/wiki/Wiki.jsp?page=JKota

Disclaimer : I'm NOT related in any way to this project.

bye

Jerome Alet
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Precedence of access parameters

2006-07-05 Thread Alan Gibson

hello all,

im trying to figure out the precedence of security parameters in
smb.conf. i know that settings in specific shares take precedence over
settings in global; 'invalid users' takes precidence over all other
security settings. but others im not so clear on, such as: does 'read
only' take precedence over 'write list'? or do later entries simply
overwrite earlier ones?

for instance, will the following allow user2 to write to [share]?

[share]
read only = yes
valid users = user1 user2
read list = user1
write list = user2

thanks in advance for any info...
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Unable to modify TDB passwd ! Error: Record does not exist

2006-07-05 Thread Steve A
I get this error when trying to set the RID of the Samba administrator 
account (following instructions here: 
http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/rights.html#id2580586).

| pdbedit -U S-1-5-21-2442793596-1261311712-3817712761-500 -u 
administrator -r

The full error is:

| Unable to modify TDB passwd ! Error: Record does not exist
|  occured while storing the RID index (RID_01f4)
| Unable to modify entry!

pdbedit shows the RID as correclty having changed, but I'm then unable to 
change the password for administrator, which gives a similar error:

| Unable to modify TDB passwd ! Error: Record does not exist
|  occured while storing the RID index (RID_01f4)
| Failed to modify entry for user administrator.
| Failed to modify password entry for user administrator

I'm also unable to delete administrator from smbpasswd (see transcript 
below):

| pdbedit -L administrator
| administrator:1003:Domain_Administrator
| [EMAIL PROTECTED] ~]# pdbedit -x administrator
| Unable to delete user administrator
| [EMAIL PROTECTED] ~]# pdbedit -x administrator
| user administrator does not exist in the passdb
| [EMAIL PROTECTED] ~]# pdbedit -L
| root:0:Charlie &
| [EMAIL PROTECTED] ~]# tdbdump /usr/local/private/passdb.tdb
| {
| key(13) = "RID_03e8\00"
| data(5) = "root\00"
| }
| {
| key(13) = "RID_0bbe\00"
| data(14) = "administrator\00"
| }
| {
| key(13) = "INFO/version\00"
| data(4) = "\02\00\00\00"
| }
| {
| key(10) = "USER_root\00"
| data(209) = "\00\00\00... [snipped for sanity reasons!]
| }

I found a previous solution to this problem (on this list) which said 
removing/adding the root account to smbpasswd solved the issue.  It doesn't 
in this case.  I can use net rpc rights, as a workaround to this problem, 
but I'd really like to know what gives, if possible?

Many thanks,
Steve :) 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SOLVED - Oplocks not taking place at all unless fake oplocks = yes

2006-07-05 Thread Jeremy Allison
On Wed, Jul 05, 2006 at 05:21:16PM -0700, Chris Wagner wrote:
> The kernel on my server appears to be refusing oplocks altogether.  Setting 
> 'kernel oplocks = no' resolved the issue.  Is there any caveats I should be 
> aware of?

If Linux processes (other than smbd) try and access
the files at the same time as Samba then without
kernel oplocks they may clash. If you don't have
simultaneous data access (ie. all client access is
via Samba) then there's nothing to worry about.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] SOLVED - Oplocks not taking place at all unless fake oplocks = yes

2006-07-05 Thread Chris Wagner
The kernel on my server appears to be refusing oplocks altogether.  Setting 
'kernel oplocks = no' resolved the issue.  Is there any caveats I should be 
aware of?

- Chris Wagner

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Chris Wagner
Sent: Wednesday, July 05, 2006 12:11 PM
To: samba@lists.samba.org
Subject: RE: [Samba] Oplocks not taking place at all unless fake oplocks
= yes- Update


I've modified the contention limit in attempt to troubleshoot this, thinking 
that perhaps the client may be requesting multiple oplocks for whatever reason. 
 The client is still not getting an oplock without specifying 'fake oplocks = 
yes'.  I'm open to any ideas for troubleshooting.  I've also checked to see if 
oplocks are explicitly disabled on the client, and they are not.  I do 
experience this with more than one client as well, a Windows 2000 Professional 
client, and a Windows XP Professional client (inside a VMWare session).

TIA
- Chris Wagner

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Chris Wagner
Sent: Thursday, June 29, 2006 8:54 AM
To: samba@lists.samba.org
Subject: [Samba] Oplocks not taking place at all unless fake oplocks =
yes


Hi folks I'm running two Samba servers.  One is on Ubuntu 5.10
(samba-3.0.14a-6ubuntu1), the other is SuSE Linux Enterprise Server
(samba-3.0.20b-3.4).  The Ubuntu box is on my local network, and the
SLES box is across a WAN with an intervening WAFS appliance with TCP
acceleration.

Neither set-up seems to grant an oplock to the client unless I turn on
'fake oplocks'.  I've set 'oplocks = yes' and 'locking = yes' explicitly
in my config file to no avail.

Obviously, 'fake oplocks' isn't something I want to turn on in a
production environment.  I'm looking for some help in narrowing down
where the problem lies.

Thanks in advance.

--
Christopher Wagner
Amy's Kitchen - http://www.amys.com/
[EMAIL PROTECTED]
Sr. Systems Administrator

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] query about PC setups

2006-07-05 Thread Adam Williams
very easy to do with netlogon, you will have to create either a script 
for each user, or a global script for all if everyone will have the same 
mapping.


Eric Evans wrote:

Hello,

My boss claims that it is possible to set up a PC as a Samba client in 
such a way that every Windows user who logs in to that PC will 
automatically be connected to a certain designated Samba share, 
without the user himself having to map the network drive to the Samba 
share.  That is, the boss claims that I, as the administrator of the 
PC, have the power to set up some kind of global mapping for all the 
PC users so that each user doesn't have to do the mapping himself.  Is 
there any truth to this claim?  I haven't found any mention of this 
feature in the Samba documentation.


Thanks,
Eric
 



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] query about PC setups

2006-07-05 Thread Edmundo Valle Neto

Eric Evans escreveu:

Hello,

My boss claims that it is possible to set up a PC as a Samba client in 
such a way that every Windows user who logs in to that PC will 
automatically be connected to a certain designated Samba share, 
without the user himself having to map the network drive to the Samba 
share.  That is, the boss claims that I, as the administrator of the 
PC, have the power to set up some kind of global mapping for all the 
PC users so that each user doesn't have to do the mapping himself.  Is 
there any truth to this claim?  I haven't found any mention of this 
feature in the Samba documentation.


Thanks,
Eric
 



With any windows/samba network you can do that. Any .bat script 
including "net use" commands when executed on client maps drives that 
way. It can be included alone on the client in any place that permits to 
run programs after logon or using logon scripts with a PDC (that are 
meant to do that).



Edmundo Valle Neto

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] query about PC setups

2006-07-05 Thread Eric Evans

Hello,

My boss claims that it is possible to set up a PC as a Samba client in such 
a way that every Windows user who logs in to that PC will automatically be 
connected to a certain designated Samba share, without the user himself 
having to map the network drive to the Samba share.  That is, the boss 
claims that I, as the administrator of the PC, have the power to set up 
some kind of global mapping for all the PC users so that each user doesn't 
have to do the mapping himself.  Is there any truth to this claim?  I 
haven't found any mention of this feature in the Samba documentation.


Thanks,
Eric
 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Trouble accessing to shortcuts and Writing to Shares in Windows XP (Samba 3.0.22)

2006-07-05 Thread Andres Tarallo
Jeremy:
Aside from what I've sent to you I've been doing further investigations.
We're very pushed to solve this problem or at least find a workaround.

We isolated the case where this problem appears:

** The computer starts into the desktop without asking for password. 
This computer  starts the session with a user and password set by
default, matching a valid user for  the server.

We're using Samba 3.0.23rc3, compiled from the sources.

Jeremy Allison wrote:
> On Fri, Jun 30, 2006 at 05:11:32PM -0300, Andres Tarallo wrote:
>   
>> ** When working with WINZIP I open a Zip file, then try to extract it to
>> the network drive, I get more or less the same message. Everything works
>> afetr accesing the file from the explorer. Same situation with word.
>> 
>
> Can you get debug level 10 smbd logs and also ethereal traces from
> the problem occurring. In addition, this may be something we've
> fixed so I'd encourage you to try 3.0.23RC3.
>
> Jeremy.
>
>   

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Permission Denied when "all" bits not set to r/w

2006-07-05 Thread Brandon Dimcheff
Here's a dialog from smbclient that illustrates the problem.  I've  
noticed that Samba doesn't map my UID and GID to an actual name...  
Could this be a symptom of a larger problem with UID/GID mappings or  
something?


And under what circumstances would Samba return a  
NT_STATUS_ACCESS_DENIED error when the user the smbd process is  
running as has permissions to access the file?  (it runs as UID 5000,  
the UID on the file is 5000, permissions are 600, therefore the smbd  
process can access the file)  It seems to me that if the spawned  
process can access the file, then it should be working.  Does Samba  
put additional restrictions on file access above and beyond those  
imposed by the underlying OS?


 
---

smb: \User\Brandon\test\> ls
  .   D0  Wed Jul  5  
16:51:41 2006
  ..  D0  Mon Jul  3  
16:06:45 2006
  bar A   10  Mon Jul  3  
16:09:54 2006
  foo  5  Mon Jul  3  
16:07:16 2006


61438 blocks of size 524288. 33649 blocks available
smb: \User\Brandon\test\> get foo
NT_STATUS_ACCESS_DENIED opening remote file \User\Brandon\test\foo
smb: \User\Brandon\test\> stat foo
File: \User\Brandon\test\foo
Size: 5 Blocks: 8   regular file
Inode: 17100Links: 1
Access: (0600/-rw---)   Uid: 5000   Gid: 5000
Access: 2006-07-03 16:11:02 -0400
Modify: 2006-07-03 16:07:16 -0400
Change: 2006-07-05 09:58:33 -0400
smb: \User\Brandon\test\> get bar
getting file \User\Brandon\test\bar of size 10 as bar (9.8 kb/s)  
(average 1.8 kb/s)

smb: \User\Brandon\test\> stat bar
File: \User\Brandon\test\bar
Size: 10Blocks: 8   regular file
Inode: 17101Links: 1
Access: (0764/-rwxrw-r--)   Uid: 5000   Gid: 5000
Access: 2006-07-05 16:52:02 -0400
Modify: 2006-07-03 16:09:54 -0400
Change: 2006-07-05 09:58:33 -0400
smb: \User\Brandon\test\> put baz
putting file baz as \User\Brandon\test\baz (3.9 kb/s) (average 0.6 kb/s)
smb: \User\Brandon\test\> get baz
getting file \User\Brandon\test\baz of size 4 as baz (3.9 kb/s)  
(average 1.9 kb/s)

smb: \User\Brandon\test\> stat baz
File: \User\Brandon\test\baz
Size: 4 Blocks: 8   regular file
Inode: 17099Links: 1
Access: (0764/-rwxrw-r--)   Uid: 5000   Gid: 5000
Access: 2006-07-05 16:52:15 -0400
Modify: 2006-07-05 16:52:07 -0400
Change: 2006-07-05 16:52:07 -0400
smb: \User\Brandon\test\> chmod 0600 baz
Pushing string of 'unlimited' length into non-SMB buffer!
smb: \User\Brandon\test\> stat baz
File: \User\Brandon\test\baz
Size: 4 Blocks: 8   regular file
Inode: 17099Links: 1
Access: (0600/-rw---)   Uid: 5000   Gid: 5000
Access: 2006-07-05 16:52:15 -0400
Modify: 2006-07-05 16:52:07 -0400
Change: 2006-07-05 16:52:31 -0400
smb: \User\Brandon\test\> get baz
NT_STATUS_ACCESS_DENIED opening remote file \User\Brandon\test\baz
smb: \User\Brandon\test\>

Thanks again,
--
Brandon Dimcheff
IT Consultant
West Pole, Inc. - http://www.westpole.com
201 Nickels Arcade, Ann Arbor, MI 48104 - 734.995.6390 x21


On Jul 5, 2006, at 13:39, Brandon Dimcheff wrote:

... Or my smb.conf is pasted here, since attachments are removed  
automatically ...


[global]
log level = 3
workgroup = WESTPOLE_BETA
server string = Unity
map to guest = Bad User
smb passwd file = /etc/samba/private/smbpasswd
passdb backend = ldapsam:ldap://unity.westpole.com/
log file = /var/log/samba3/log.%m
max log size = 5000
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = cups
dns proxy = No
add user script = /usr/sbin/smbldap-useradd -m "%u"
ldap delete dn = Yes
#delete user script = /usr/sbin/smbldap-userdel "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
#delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
	delete user from group script = /usr/sbin/smbldap-groupmod -x "%u"  
"%g"

set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
ldap admin dn = cn=Manager,dc=westpole,dc=com
ldap delete dn = Yes
ldap group suffix = ou=Group
ldap idmap suffix = ou=People
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=westpole,dc=com
ldap ssl = start tls
ldap user suffix = ou=People
printer admin = @adm
create mask = 0774
directory mask = 0775
domain logons = yes
preferred master = yes
domain master = yes
os level = 65
hide dot files = yes
load printers = yes
printing = cups
   

Re: [Samba] Prevent ReadOnly DOS attribute from being set

2006-07-05 Thread simo
On Wed, 2006-07-05 at 13:30 -0700, Jeremy Allison wrote:
> On Wed, Jul 05, 2006 at 04:07:54PM -0400, Steven Cardinal wrote:
> > We have a third party application that tracks its own licensing through a
> > special file it creates. We just recently moved this application (along with
> > all of our other user data) from a Win2K server to a Samba 3.0.20 server.
> > This application no longer works correctly. What the application is doing is
> > creating the lock file when first lauched by a user and then setting the DOS
> > ReadOnly attribute. As other instances of the application get launched (by
> > other users) it appears that the app tries to unset the ReadOnly attribute,
> > add its info to the license file, and then sets it back to readonly.
> > 
> > 
> > Now that we're on Samba, this isn't working. The first set to ReadOnly sets
> > the owner bits to read (and the file is owned by the initial user). At that
> > point, new users are unable to remove this flag. The group setting is
> > correctly set for rwx, but it seems that is insufficient to permit the other
> > users to change the RO attribute. (I think I read that Samba will enforce
> > the ReadOnly so that only the owner can remove it).
> > 
> > Can anyone suggest a work-around? I'm willing to move this application to
> > its own share with special settings if that will help, although I'd rather
> > not have to. The vendor isn't willing to investigate it further (they say
> > it's our problem since we aren't on Windows).
> 
> Try setting "dos filemode = yes", and also "store dos attributes = yes" on
> a filesystem that supports EA's.

You also need to set map readonly, map archive, map system and map
hidden to no

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: [EMAIL PROTECTED]
http://samba.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Prevent ReadOnly DOS attribute from being set

2006-07-05 Thread Jeremy Allison
On Wed, Jul 05, 2006 at 04:07:54PM -0400, Steven Cardinal wrote:
> We have a third party application that tracks its own licensing through a
> special file it creates. We just recently moved this application (along with
> all of our other user data) from a Win2K server to a Samba 3.0.20 server.
> This application no longer works correctly. What the application is doing is
> creating the lock file when first lauched by a user and then setting the DOS
> ReadOnly attribute. As other instances of the application get launched (by
> other users) it appears that the app tries to unset the ReadOnly attribute,
> add its info to the license file, and then sets it back to readonly.
> 
> 
> Now that we're on Samba, this isn't working. The first set to ReadOnly sets
> the owner bits to read (and the file is owned by the initial user). At that
> point, new users are unable to remove this flag. The group setting is
> correctly set for rwx, but it seems that is insufficient to permit the other
> users to change the RO attribute. (I think I read that Samba will enforce
> the ReadOnly so that only the owner can remove it).
> 
> Can anyone suggest a work-around? I'm willing to move this application to
> its own share with special settings if that will help, although I'd rather
> not have to. The vendor isn't willing to investigate it further (they say
> it's our problem since we aren't on Windows).

Try setting "dos filemode = yes", and also "store dos attributes = yes" on
a filesystem that supports EA's.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd & nmbd segfaulting

2006-07-05 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

John Paul wrote:
> Greetings,
> 
> I have recently installed SuSE 10 on a Dell PowerEdge 1800. Everything is up
> to date. I downloaded Samba 3.0.22, ran configure (with no options), make,
> and make install. I created a very skeleton smb.conf to test out the smbd
> and nmbd daemons. If I run the daemons, I cannot connect to them. If I run
> smbd --help, I get the following output:
> 
> Usage: usr/local/samba/sbin/smbd [OPTION...]
>   -D, --daemon=ARG Become a daemon (default)
>   -i, --interactive=ARGRun interactive (not a daemon)
>   -F, --foreground=ARG Run daemon in foreground (for daemontools
> &
>etc)
>   -S, --log-stdout=ARG Log to stdout
>   -b, --build-options  Print build options
>   -p, --port=ARG   Listen on the specified ports
> Segmentation fault

Runs fine for me.  64-bit or 32-bit SuSE 10 box ?
I'd recompile with --enable-debug and run 'smbd -d 10 -i'
inside of gdb to capture the crash.






cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFErCDXIR7qMdg1EfYRAtdKAJ4kD+6g0/f78+/MyliTXFeVhVtQ2ACg51mI
14nxQ4zJjyxKGqlkoQ+tDiw=
=A0UT
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Prevent ReadOnly DOS attribute from being set

2006-07-05 Thread Steven Cardinal

We have a third party application that tracks its own licensing through a
special file it creates. We just recently moved this application (along with
all of our other user data) from a Win2K server to a Samba 3.0.20 server.
This application no longer works correctly. What the application is doing is
creating the lock file when first lauched by a user and then setting the DOS
ReadOnly attribute. As other instances of the application get launched (by
other users) it appears that the app tries to unset the ReadOnly attribute,
add its info to the license file, and then sets it back to readonly.


Now that we're on Samba, this isn't working. The first set to ReadOnly sets
the owner bits to read (and the file is owned by the initial user). At that
point, new users are unable to remove this flag. The group setting is
correctly set for rwx, but it seems that is insufficient to permit the other
users to change the RO attribute. (I think I read that Samba will enforce
the ReadOnly so that only the owner can remove it).

Can anyone suggest a work-around? I'm willing to move this application to
its own share with special settings if that will help, although I'd rather
not have to. The vendor isn't willing to investigate it further (they say
it's our problem since we aren't on Windows).

Thanks
Steve
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] File attribute problem 3.0.23

2006-07-05 Thread Jeremy Allison
On Wed, Jul 05, 2006 at 11:30:12AM +0200, Beschorner Daniel wrote:
> We have a problem with an application that clears the archive bit before
> writing and sets it after writing.
> The latter one doesn't succeed if the writer != file owner.
> Dos filemode is enabled and manually setting is fine.
> Samba is 3.0.23RC3.
> Client is XP/SP2.
> Seems to loose the connection before setting the bit and a new smbd is
> spawn.

Log a bug and attach ethereal traces and debug level 10 logs, plus
a method of reproducing this please.

Thanks,

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Oplocks not taking place at all unless fake oplocks = yes - Update

2006-07-05 Thread Chris Wagner
I've modified the contention limit in attempt to troubleshoot this, thinking 
that perhaps the client may be requesting multiple oplocks for whatever reason. 
 The client is still not getting an oplock without specifying 'fake oplocks = 
yes'.  I'm open to any ideas for troubleshooting.  I've also checked to see if 
oplocks are explicitly disabled on the client, and they are not.  I do 
experience this with more than one client as well, a Windows 2000 Professional 
client, and a Windows XP Professional client (inside a VMWare session).

TIA
- Chris Wagner

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Chris Wagner
Sent: Thursday, June 29, 2006 8:54 AM
To: samba@lists.samba.org
Subject: [Samba] Oplocks not taking place at all unless fake oplocks =
yes


Hi folks I'm running two Samba servers.  One is on Ubuntu 5.10
(samba-3.0.14a-6ubuntu1), the other is SuSE Linux Enterprise Server
(samba-3.0.20b-3.4).  The Ubuntu box is on my local network, and the
SLES box is across a WAN with an intervening WAFS appliance with TCP
acceleration.

Neither set-up seems to grant an oplock to the client unless I turn on
'fake oplocks'.  I've set 'oplocks = yes' and 'locking = yes' explicitly
in my config file to no avail.

Obviously, 'fake oplocks' isn't something I want to turn on in a
production environment.  I'm looking for some help in narrowing down
where the problem lies.

Thanks in advance.

--
Christopher Wagner
Amy's Kitchen - http://www.amys.com/
[EMAIL PROTECTED]
Sr. Systems Administrator

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problems with samba config?

2006-07-05 Thread Jeffrey Hathaway

I cannot seem to get it to listen to any ports on my server.My
configeration is as bellow:

[global]
   workgroup = mygroup
   server string = Control Center
   interfaces = eth0
   null passwords = Yes
   pam password change = Yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *New*Password* %n\n *Re-enter*new*password*%n\n
*Password*changed*
   username map = /etc/samba/smbusers
   unix password sync = Yes
   log level = 1
   syslog = 0
   log file = /var/log/samba/%m
   max log size = 50
   smb ports = 139
   time server = Yes
   keepalive = 20
   domain logons = No
   preferred master = No
   domain master = No
[homes]
   browseable = no
   writeable = yes
   valid users = %S
   invalid users = @nobody
   user = %S

Wha ti am trying to do is get it for Remote Storage.  This specific server
is in a Data Center in flordia.  Anyways thats besides the point, i cannot
seem to get it to lsten to 139 (default port).  it seems like it doesnt do
nothing, because  i cannot connect to it what so ever.  I have no firewalls
running either.

please help

- jeff
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Samba hangs over nfs

2006-07-05 Thread Volker Lendecke
On Wed, Jul 05, 2006 at 01:59:02PM -0500, Rex Dieter wrote:
> Likely your NFS server/client combo doesn't have functioning file locking.

Retry with 'posix locking = no'.

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba hangs over nfs

2006-07-05 Thread Rex Dieter

Komal Shah wrote:

Hello

1. NFS export:
/srv/nfsexp 127.0.0.1(rw)

2. mount it:
127.0.0.1:/srv/nfsexp /srv/samba/nfs nfs rw,sync 0 0

3. make a samba share and mount it via Windows:
smb.conf:
...
[nfstest]
   path = /srv/samba
   writable = yes
   valid users = tr

Actual results:
As soon as I start to read and write files below
/srv/samba/nfs via Samba on Windows the connection hangs, I get read 
timeout in Explorer


Likely your NFS server/client combo doesn't have functioning file locking.

-- Rex

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba hangs over nfs

2006-07-05 Thread Komal Shah

Hello

1. NFS export:
/srv/nfsexp 127.0.0.1(rw)

2. mount it:
127.0.0.1:/srv/nfsexp /srv/samba/nfs nfs rw,sync 0 0

3. make a samba share and mount it via Windows:
smb.conf:
...
[nfstest]
   path = /srv/samba
   writable = yes
   valid users = tr

Actual results:
As soon as I start to read and write files below
/srv/samba/nfs via Samba on Windows the connection hangs, I get read 
timeout in Explorer


Thanks

Regards,

Komal
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] LDAP Account Manager 1.0.3 released

2006-07-05 Thread Roland Gruber
LDAP Account Manager (LAM) 1.0.3 - July 5th, 2006
=


A web frontend for managing accounts stored in an LDAP directory.


Announcement:
-

This release closes some security related bugs.

There were two problems in 1.0.2 with Unix passwords. The invalid
password option does not work, users can login with password "*". This
option has been removed.
The second issue is related to disabled passwords. If editing users
without changing to the Unix page the password is silently reenabled.


Features:
-

* management of Unix user and group accounts (posixAccount/posixGroup)
* management of Samba 2.x/3 user and host accounts
  (sambaAccount/sambaSamAccount)
* management of Kolab 2 accounts (kolabInetorgPerson)
* profiles for account creation
* account creation via file upload
* automatic creation/deletion of home directories
* setting quotas
* PDF output for all accounts
* editor for organizational units (OU)
* schema browser
* tree view
* multiple configuration files
* multi-language support (Catalan, Chinese, Dutch, English, French,
German, Hungarian, Italian, Japanese, Spanish)
* support for LDAP+SSL


Availability:
-

This software is available under the GNU General Public License V2.0.

You can get the newest version at http://lam.sf.net.
It may take some time until you can download the files from all mirrors.

File formats: DEB, RPM, tar.gz

There is also a FreeBSD port.

Debian users may also use the packages in Debian unstable.


Demo installation:
--

You can try our demo installation online.

http://lam.sf.net/live-demo/index.htm


Support:


If you find a bug please file a bug report. For questions or
implementing new features please use the mailinglist and feature request
tracker at our Sourceforge homepage http://www.sf.net/projects/lam.



Authors & Copyright:


Copyright (C) 2003 - 2006:
Michael Duergner <[EMAIL PROTECTED]>
Roland Gruber <[EMAIL PROTECTED]>
Tilo Lutz <[EMAIL PROTECTED]>


LAM is published under the GNU General Public License.
The comlete list of licenses can be found in the copyright file.







signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Permission Denied when "all" bits not set to r/w

2006-07-05 Thread Brandon Dimcheff
... Or my smb.conf is pasted here, since attachments are removed  
automatically ...


[global]
log level = 3
workgroup = WESTPOLE_BETA
server string = Unity
map to guest = Bad User
smb passwd file = /etc/samba/private/smbpasswd
passdb backend = ldapsam:ldap://unity.westpole.com/
log file = /var/log/samba3/log.%m
max log size = 5000
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = cups
dns proxy = No
add user script = /usr/sbin/smbldap-useradd -m "%u"
ldap delete dn = Yes
#delete user script = /usr/sbin/smbldap-userdel "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
#delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
ldap admin dn = cn=Manager,dc=westpole,dc=com
ldap delete dn = Yes
ldap group suffix = ou=Group
ldap idmap suffix = ou=People
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=westpole,dc=com
ldap ssl = start tls
ldap user suffix = ou=People
printer admin = @adm
create mask = 0774
directory mask = 0775
domain logons = yes
preferred master = yes
domain master = yes
os level = 65
hide dot files = yes
load printers = yes
printing = cups
printcap name = cups
security = user
guest ok = no
use client driver = no
# For Samba 3.x. This enables ClamAV on access scanning.
vfs object = vscan-clamav
vscan-clamav: config-file = /etc/samba/vscan-clamav.conf
wins support = yes
name resolve order = wins lmhosts host bcast
dns proxy = no


[homes]
comment = Home Directories
read only = No
browseable = No

[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
guest ok = Yes
printable = Yes
browseable = No
writeable = No

[brother_hl_2700cn]
comment = Brother HL2700cn Network Printer
printable = yes
path = /var/spool/samba
public = yes
guest ok = yes
printer admin = root

[hp_laserjet_4000]
comment = HP LaserJet 4000 Network Printer
printable = yes
path = /var/spool/samba
public = yes
guest ok = yes
printer admin = root
# Now we setup our print drivers information!
[print$]
comment = Printer Drivers
path = /etc/samba/printer
guest ok = yes
browseable = yes
read only = yes
# Modify this to "username,root" if you don't want root to
# be the only printer admin)
write list = @adm,root

[fileserver]
comment = West Pole File Server
path = /mnt/fileserver
read only = No
hide dot files = yes

[backups]
comment = West Pole File Server Daily Backups
path = /mnt/dailies
read only = Yes
hide dot files = yes

[netlogon]
path = /var/lib/samba/netlogon
guest ok = no
read only = yes
browseable = no


[profiles]
path = /var/lib/samba/profiles
browseable = no
writeable = yes
default case = lower
preserve case = no
short preserve case = no
case sensitive = no
hide files = /desktop.ini/ntuser.ini/NTUSER.*/
write list = @smbusers @root @westpole
create mask = 0600
directory mask = 0700
profile acls = no


Thanks,
--
Brandon Dimcheff
IT Consultant
West Pole, Inc. - http://www.westpole.com
201 Nickels Arcade, Ann Arbor, MI 48104 - 734.995.6390 x21


On Jul 5, 2006, at 10:11, Brandon Dimcheff wrote:


Hello,

I'm having trouble with permissions on Samba 3.0.21.  It almost  
seems that the "all" bits are the only ones that Samba is obeying.   
For instance, I created this file remotely over a samba share:


[EMAIL PROTECTED] ~/untitled folder $ ls -als
total 17
0 drwx--S---   3 brandon.dimcheff westpole  160 Jul  3 15:51 .
1 drwx--  12 brandon.dimcheff westpole  816 Jul  3 15:51 ..
4 -rw-rw   1 brandon.dimcheff westpole4 Apr 12 17:41 test2

But when I try to access it, I get a permissions denied error and  
the logs produce the following.  If I set the permissions of the  
file to 666, I can use the file just fine:


[2006/07/03 15:51:45, 3] smbd/process.c:process_smb(1194)
  Transaction 321 of length 134
[2006/07/03 15:51:45, 3] smbd/process.c:switch_message(993)
  switch message SMBntcreateX (pid 22541) conn 0x803b73f8
[2006/07/03 15:

Re: [Samba] Print Cost Capture

2006-07-05 Thread Jerome Alet
On Wed, Jul 05, 2006 at 11:29:23AM -0500, Don Meyer wrote:
> 
> The catch is that it was written around LPRng.   A couple times now, 
> I have attempted to modify (update) the system to use CUPS -- but 
> I've always been stymied by the lack of any functions to move jobs 
> from one queue to another.

Maybe this could be the solution :

http://iremia.univ-reunion.fr/intranet/wiki/Wiki.jsp?page=JKota

Disclaimer : I'm NOT related in any way to this project.

bye

Jerome Alet
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Print Cost Capture

2006-07-05 Thread Don Meyer

At 10:44 AM 7/5/2006, David Mathog wrote:

> Thanks, but that really won't help.  We need to be able to link each
> printing job to a specific billing code, and user.  Each user needs to
> be able to work on multiple billing codes.

You could always roll your own through a web interface.  That is, have
users print to a file, and then upload that through a web interface
which requires them to fill in all the fields you need for accounting,
for instance: username, billing code, project, target printer, number of
copies, paper size, paper source, etc..  It wouldn't be terribly
difficult to write but would be a minor PITA for the end users.
Especially because you'd have to do something to keep the end users
from ever printing directly to the printers and so bypass the
accounting system.



We have a homegrown system for student print accounting that allows 
native printing to a central collection queue, where the jobs are 
"held".  Our users must then go to one of several nearby release 
stations where they can select their jobs, authenticate via 
IDcard-swipe or username:password, and choose to release or delete 
the job(s).   Once released, a background process moves the job(s) to 
a "feeder" queue which prints through to the printers.


This system easily supports multiple billing codes, as well as a 
simple staff/student privilege hierarchy.


The catch is that it was written around LPRng.   A couple times now, 
I have attempted to modify (update) the system to use CUPS -- but 
I've always been stymied by the lack of any functions to move jobs 
from one queue to another.


(We have not implemented Samba printing support layered on top of the 
LPD layer, but this could theoretically be done rather easily.  A web 
interface that displays a user's queued jobs and allows release & 
selection of billing code, etc. should also be do-able with enough 
time and resources.)


Cheers,
-D


Don Meyer   <[EMAIL PROTECTED]>
Network Manager, ACES Academic Computing Facility
Technical System Manager, ACES TeleNet System
UIUC College of ACES, Information Technology and Communication Services

  "They that can give up essential liberty to obtain a little 
temporary safety,
deserve neither liberty or safety." -- Benjamin Franklin, 1759 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Print Cost Capture

2006-07-05 Thread Jerome Alet
On Wed, Jul 05, 2006 at 06:03:34PM +0200, Jerome Alet wrote:
> On Wed, Jul 05, 2006 at 10:42:16AM -0400, David Sonenberg wrote:
> > My company would like to start capturing printing costs.  Is there a way
> > to configure the printing interface to prompt users for a billing code?
> 
> You could use PyKota + PyKotIcon available from http://www.pykota.com
> to do this.

Sorry, I forgot the following disclaimer :

"Since I wrote both of these software, my advice about them
 is probably far from being impartial."
 
hth anyway 

Jerome Alet
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba and CUPS

2006-07-05 Thread Carlos Eduardo Pedroza Santiviago

Hi again,

I'd like to know if it's possible to configure samba to not list classes
stored in CUPS? I've a lot of classes here, and listing printers shared on
my samba server takes some time... where it should list only the printer
queues and not printer queues plus classes.

Thanks.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problem with mod_ntlm_winbind

2006-07-05 Thread Plant, Dean
I'm playing with the mod_ntlm_winbind from
http://download.samba.org/ftp/unpacked/lorikeet/mod_ntlm_winbind/ on
Centos 4.3 but running into problems when trying to authenticate via the
browser. IE says it cannot find the server when trying to access
http://server/auth Firefox pops up an authentication box but this also
does not work.

Can anyone point me into what I might be doing wrong or may have missed.

My test box is also running squid which is successfully using ntlm_auth
for transparent authentication.

The mod_ntlm_winbind module seemed to compile correctly and I added
apache to the squid group so it could access the
/var/cache/samba/winbindd_privileged directory as user apache and I have
added to httpd.conf the following

LoadModule ntlm_winbind_module modules/mod_ntlm_winbind.so 

and


  AuthName "NTLM Authentication test"
  NTLMAuth on
  NTLMAuthHelper "/usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp"
  NTLMBasicAuthoritative on
  AuthType NTLM
  require valid-user


Winbind processes running when trying to connect

apache   16343 16335  0 16:50 ?00:00:00 /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
apache   16344 16336  0 16:50 ?00:00:00 /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp 

Error from /var/log/httpd/error_log

[2006/07/05 16:50:53, 1] libsmb/ntlmssp.c:ntlmssp_update(252)
  got NTLMSSP command 3, expected 1

Error from /var/log/samba/winbindd.log

[2006/07/05 16:50:02, 1]
nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'apache' does not exist

Thanks

Dean
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Differnet display of filenames (samba 2.x <-> 3.x)

2006-07-05 Thread Jeremy Allison
On Wed, Jul 05, 2006 at 11:23:52AM +0200, Dr.Peer-Joachim Koch wrote:
> Hi,
> 
> we have moved our file services from an old samba 2.x (HPUX)
> to a linux box (SuSE SLES 9) running samba 3.x.
> 
> Since this switching a couple of files containing ":" is
> no longer displayed correctly. The name is completely
> corrupted. Any hint ?
> 
> It's displayed correctly under unix, and long names without
> this character are also display correctly 

By design. Windows clients can't access such files
anyway, so we mangle them to 8.3 names and display
that.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Suse 10.1 with samba servers 3.0.22 & 3.0.23rc3 only seen by Suse 10.1 samba client as cifs

2006-07-05 Thread Jeremy Allison
On Tue, Jul 04, 2006 at 10:27:15PM -0700, Thomas Garson wrote:
> 
> 4) The new Linux samba client fails to recognize file system of the
> shares as SMB, even though the shares can be mounted. But, if I mount
> them as cifs instead of smbfs they are usable.
> 
> Questions:
> Has there been some kind of hidden parameter relatively recently added
> to samba 3 that identifies shares as cifs or smbfs? Is the Linux client
> programmed to react to this? Are these protocols becoming mutually
> exclusive? If any of this is true, where is the documentation? Why me?
> 
> This has given me a headache!

Sorry for the headache. You really shouldn't use smbfs anymore. It's
essentially unsupported. You got bitten by Microsoft marketing, there's
no difference between smb and cifs. Cifs is just a renaming (re-branding?)
of smb. They're the same thing. Just always use cifsfs on linux.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Print Cost Capture

2006-07-05 Thread Jerome Alet
On Wed, Jul 05, 2006 at 11:10:00AM -0400, David Sonenberg wrote:
> Thanks, but that really won't help.  We need to be able to link each
> printing job to a specific billing code, and user.  Each user needs to
> be able to work on multiple billing codes.

On the contrary, Simo's link is exactly the solution to your problem.

PyKota can even authenticate users through PAM if you ask their
username and password at the same time you ask them for a billing
code through PyKotIcon.

PyKotIcon is cross platform, and does not need to be installed on each
client. Personally I run it from Samba's logon script from a Samba
share each time an users logs in from a Windows box (you can also
launch it under *nix from your .xsession or similar file)

hth

Jerome Alet
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Print Cost Capture

2006-07-05 Thread Jerome Alet
On Wed, Jul 05, 2006 at 10:42:16AM -0400, David Sonenberg wrote:
> My company would like to start capturing printing costs.  Is there a way
> to configure the printing interface to prompt users for a billing code?

You could use PyKota + PyKotIcon available from http://www.pykota.com
to do this.

Both are available under the terms of the GNU General Public License
of the Free Software Foundation.

PyKota runs on the print server side. It manages print accounting and
printing quotas.

PyKotIcon is a client side helper with which you can ask for any
information to the end user, for example a billing code, whenever
a print job passes through PyKota. This billing code can then be
used by PyKota to overwrite the one optionally present in the job
ticket (if you printed for example with 'lp -o job-billing=YourCode')

bye

Jerome Alet
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Print Cost Capture

2006-07-05 Thread David Mathog


> Thanks, but that really won't help.  We need to be able to link each
> printing job to a specific billing code, and user.  Each user needs to
> be able to work on multiple billing codes.

You could always roll your own through a web interface.  That is, have
users print to a file, and then upload that through a web interface
which requires them to fill in all the fields you need for accounting,
for instance: username, billing code, project, target printer, number of
copies, paper size, paper source, etc..  It wouldn't be terribly
difficult to write but would be a minor PITA for the end users. 
Especially because you'd have to do something to keep the end users
from ever printing directly to the printers and so bypass the 
accounting system.

If you trust the end users (typically a really bad idea) you could also
just have them punch the accounting numbers into the web interface and
still print directly to the printers.  Or put a sign up sheet on the
printers (and pity the poor soul who has to decipher the resulting
scribbles.)

Regards,

David Mathog

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] performance problems

2006-07-05 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Bruno,

> My samba print server joined sucessfully to ADS domain 
> is very slow. 100% CPU usage.
> 
> I did a strace in smbd process:
> 
> # strace -p 4519 -cfqrT
> % time seconds  usecs/call callserrors syscall
> -- --- --- - - 
> 76.37  359.200799 288   1249032   346 fcntl64
> 11.61   54.605778 236231636 4 read
...
> The fcntl64 system call is taking a lot of CPU time. What 
> did that mean?

If you associate the fd in the strace output and the
open files in /proc//fd, What tdb is it looking at ?

PS: I know I still owe you mail. Wil get to that later today.



cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEq96WIR7qMdg1EfYRAu0wAJ9h10B80ZYmENNfESsM7VPaUGbKVgCgiIlM
WXWfVUOjkJMuYg/0BNO+dmg=
=+Cde
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Print Cost Capture

2006-07-05 Thread Brian Cowan
Well, if you're truly a glutton for punishment, you could have 
billing-code-specific print queues.


David Sonenberg wrote:

Thanks, but that really won't help.  We need to be able to link each
printing job to a specific billing code, and user.  Each user needs to
be able to work on multiple billing codes.

simo wrote:
  

On Wed, 2006-07-05 at 10:42 -0400, David Sonenberg wrote:


My company would like to start capturing printing costs.  Is there a way
to configure the printing interface to prompt users for a billing code?
  

The best thing is to assign a username/password that identify a user and
then use a system like pykota[1]+cups to bill per user.

Prompting a user requires some binary running on the client plus some
way to communicate to this binary from the server when it receives a
print request (another method is an authorization system through a web
interface that you must go through before any print). This makes up a
complex system to maintain and cumbersome to use.

Simo.


[1]: http://www.pykota.com/





  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] performance problems

2006-07-05 Thread Bruno Gomes Pessanha

My samba print server joined sucessfully to ADS domain is very slow. 100%
CPU usage.

I did a strace in smbd process:

# strace -p 4519 -cfqrT
% time seconds  usecs/call callserrors syscall
-- --- --- - - 
76.37  359.200799 288   1249032   346 fcntl64
11.61   54.605778 236231636 4 read
 2.059.647553 224 43120   time
 1.607.503416 220 34140   _llseek
 1.115.240488 281 18658   209 select
 1.034.864289 291 1671520 write
 0.643.008094 295 10188   gettimeofday
 0.632.981000 310  9622  1059 stat64
 0.592.790863 324  8606   close
 0.522.432799 298  8168   geteuid32
 0.512.419820 321  754914 open
 0.421.977740 314  6291   fstat64

The fcntl64 system call is taking a lot of CPU time. What did that mean?
Somebody could help me? I'm almost getting desperate... also 10.000 users.

Here it go:
Samba Version 3.0.22
RHEL 4 Update 3  - kernel 2.6.9-34.ELsmp
smb.conf
[global]
   workgroup = DOMAIN
   netbios name = printserver
   server string = PRINTSERVER Server
   security = ads
   realm = DOMAIN.BIZ
   password server = 10.163.200.101, 10.163.200.102, 10.163.200.103
   log file = /samba/var/smbd.log
   max log size = 50
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   printcap name = /etc/printcap
   dns proxy = No
   wins server = 10.163.200.101, 10.163.200.102
   remote announce = 10.163.200.101, 10.163.200.102, 10.163.200.103
   remote browse sync = 10.163.200.101, 10.163.200.102, 10.163.200.103
   deadtime = 5
   keepalive = 30
   client schannel = no
   enable privileges = yes

   idmap uid = 1000-10
   idmap gid = 1000-10
   winbind cache time = 43200
   winbind use default domain = no
   winbind nested groups = yes
   winbind enum users = no
   winbind enum groups = no
   allow trusted domains = yes
   winbind separator = +

   printing = cups
   cups options = raw
   load printers = yes
   show add printer wizard = no
   printcap cache time = 0

[printers]
  comment = All Printers
  path = /var/spool/samba
  browseable = no
  guest ok = yes
  writable = no
  printable = yes

[print$]
  path = /samba/drivers
  public = yes
  writable = no
  browseable = yes


Thank you all in advance,

Bruno Gomes Pessanha
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Print Cost Capture

2006-07-05 Thread David Sonenberg
Thanks, but that really won't help.  We need to be able to link each
printing job to a specific billing code, and user.  Each user needs to
be able to work on multiple billing codes.

simo wrote:
> On Wed, 2006-07-05 at 10:42 -0400, David Sonenberg wrote:
>> My company would like to start capturing printing costs.  Is there a way
>> to configure the printing interface to prompt users for a billing code?
> 
> The best thing is to assign a username/password that identify a user and
> then use a system like pykota[1]+cups to bill per user.
> 
> Prompting a user requires some binary running on the client plus some
> way to communicate to this binary from the server when it receives a
> print request (another method is an authorization system through a web
> interface that you must go through before any print). This makes up a
> complex system to maintain and cumbersome to use.
> 
> Simo.
> 
> 
> [1]: http://www.pykota.com/
> 
> 

-- 
David Sonenberg, CCNA, GCIH
Manager, Information Technology
Stroz Friedberg, LLC
15 Maiden Lane
15th Floor
New York, NY 10038
Tel 212.981.6527
Fax 212.981.6545

This message is for the named person's use only.  It may contain
confidential, proprietary or legally privileged information. No right to
confidential or privileged treatment of this message is waived or lost
by any error in transmission.  If you have received this message in
error, please immediately notify the sender by e-mail or by telephone at
212.981.6540, delete the message and all copies from your system and
destroy any hard copies.  You must not, directly or indirectly, use,
disclose, distribute, print or copy any part of this message if you are
not the intended recipient.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Print Cost Capture

2006-07-05 Thread simo
On Wed, 2006-07-05 at 10:42 -0400, David Sonenberg wrote:
> My company would like to start capturing printing costs.  Is there a way
> to configure the printing interface to prompt users for a billing code?

The best thing is to assign a username/password that identify a user and
then use a system like pykota[1]+cups to bill per user.

Prompting a user requires some binary running on the client plus some
way to communicate to this binary from the server when it receives a
print request (another method is an authorization system through a web
interface that you must go through before any print). This makes up a
complex system to maintain and cumbersome to use.

Simo.


[1]: http://www.pykota.com/


-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: [EMAIL PROTECTED]
http://samba.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Print Cost Capture

2006-07-05 Thread David Sonenberg
My company would like to start capturing printing costs.  Is there a way
to configure the printing interface to prompt users for a billing code?
-- 
David Sonenberg, CCNA, GCIH
Manager, Information Technology
Stroz Friedberg, LLC
15 Maiden Lane
15th Floor
New York, NY 10038
Tel 212.981.6527
Fax 212.981.6545

This message is for the named person's use only.  It may contain
confidential, proprietary or legally privileged information. No right to
confidential or privileged treatment of this message is waived or lost
by any error in transmission.  If you have received this message in
error, please immediately notify the sender by e-mail or by telephone at
212.981.6540, delete the message and all copies from your system and
destroy any hard copies.  You must not, directly or indirectly, use,
disclose, distribute, print or copy any part of this message if you are
not the intended recipient.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbd & nmbd segfaulting

2006-07-05 Thread John Paul
Greetings,

I have recently installed SuSE 10 on a Dell PowerEdge 1800. Everything is up
to date. I downloaded Samba 3.0.22, ran configure (with no options), make,
and make install. I created a very skeleton smb.conf to test out the smbd
and nmbd daemons. If I run the daemons, I cannot connect to them. If I run
smbd --help, I get the following output:

Usage: usr/local/samba/sbin/smbd [OPTION...]
  -D, --daemon=ARG Become a daemon (default)
  -i, --interactive=ARGRun interactive (not a daemon)
  -F, --foreground=ARG Run daemon in foreground (for daemontools
&
   etc)
  -S, --log-stdout=ARG Log to stdout
  -b, --build-options  Print build options
  -p, --port=ARG   Listen on the specified ports
Segmentation fault

The same thing happens for nmbd, it segfaults. If I run pdbedit --help, the
output is for more concerning:
Usage: [OPTION...]
  -L, --list   list all users
  -v, --verbosebe verbose
  -w, --smbpasswd-stylegive output in smbpasswd style
  -u, --user=USER  use username
  -N, --account-desc=ARG   set account description
  -f, --fullname=ARG   set full name
  -h, --homedir=ARGset home directory
  -D, --drive=ARG  set home drive
  -S, --script=ARG set logon script
  -p, --profile=ARGset profile path
  -I, --domain=ARG set a users' domain
  -U, --user SID=ARG   set user SID or RID
  -G, --group SID=ARG  set group SID or RID
  -a, --create create user
  -r, --modify modify user
  -m, --machineaccount is a machine account
  -x, --delete delete user
  -b, --backend=ARGuse different passdb backend as default
   backend
  -i, --import=ARG import user accounts from this backend
  -e, --export=ARG export user accounts to this backend
  -g, --group  use -i and -e for groups
  -y, --policies   use -i and -e to move account policies
   between backends
  --policies-reset restore default policies
  -P, --account-policy=ARG value of an account policy (like maximum
   password age)
  -C, --value=ARG  set the account policy to this value
  -c, --account-control=ARGValues of account control
  --force-initialized-passwordsForce initialization of corrupt password
   strings in a passdb backend
  -z, --bad-password-count-reset   reset bad password count
  -Z, --logon-hours-reset  reset logon hours
  --pwd-can-change-time=ARGSet password can change time (unix time
in
   seconds since 1970 if time format not
   provided)
  --pwd-must-change-time=ARG   Set password must change time (unix time
in
   seconds since 1970 if time format not
   provided)
  --time-format=ARGThe time format for time parameters
  -t, --password-from-stdinget password from standard in
ERROR: empty passdb backend list!
invalid pdb_context specified!
invalid pdb_context specified!
invalid pdb_context specified!
invalid pdb_context specified!
invalid pdb_context specified!
invalid pdb_context specified!
invalid pdb_context specified!
invalid pdb_context specified!
invalid pdb_context specified!
invalid pdb_context specified!
invalid pdb_context specified!
invalid pdb_context specified!
ERROR: string overflow by 1 in safe_strcat [-1074138868]
ERROR: string overflow by 11 in safe_strcat [-1073831924]
ERROR: string overflow by 2 in safe_strcat [-2]

(and so forth for several hundred lines)

ERROR: string overflow by 11 in safe_strcat [-1075417076]
*** glibc detected *** free(): invalid pointer: 0x40017000 ***
Aborted


What can I check? Is there a known problem on this OS? How can I help the
development team with figure out what's causing this?

All the best,
Danny Paul


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Permission Denied when "all" bits not set to r/w

2006-07-05 Thread Brandon Dimcheff

Hello,

I'm having trouble with permissions on Samba 3.0.21.  It almost seems  
that the "all" bits are the only ones that Samba is obeying.  For  
instance, I created this file remotely over a samba share:


[EMAIL PROTECTED] ~/untitled folder $ ls -als
total 17
0 drwx--S---   3 brandon.dimcheff westpole  160 Jul  3 15:51 .
1 drwx--  12 brandon.dimcheff westpole  816 Jul  3 15:51 ..
4 -rw-rw   1 brandon.dimcheff westpole4 Apr 12 17:41 test2

But when I try to access it, I get a permissions denied error and the  
logs produce the following.  If I set the permissions of the file to  
666, I can use the file just fine:


[2006/07/03 15:51:45, 3] smbd/process.c:process_smb(1194)
  Transaction 321 of length 134
[2006/07/03 15:51:45, 3] smbd/process.c:switch_message(993)
  switch message SMBntcreateX (pid 22541) conn 0x803b73f8
[2006/07/03 15:51:45, 3] smbd/dosmode.c:unix_mode(121)
  unix_mode(untitled folder/test2) returning 0764
[2006/07/03 15:51:45, 3] smbd/open.c:open_file(276)
  Error opening file untitled folder/test2 (Permission denied)  
(local_flags=0) (flags=0)

[2006/07/03 15:51:45, 3] smbd/error.c:unix_error_packet(90)
  unix_error_packet: error string = Permission denied
[2006/07/03 15:51:45, 3] smbd/error.c:error_packet(146)
  error packet at smbd/trans2.c(2632) cmd=162 (SMBntcreateX)  
NT_STATUS_ACCESS_DENIED


I'm running Samba with an LDAP backend and have ACL support compiled  
in, and the filesystem has ACLs enabled.  Samba is serving as the PDC.


I appreciate any suggestions.  My smb.conf is attached.
--
Brandon Dimcheff
IT Consultant
West Pole, Inc. - http://www.westpole.com
201 Nickels Arcade, Ann Arbor, MI 48104 - 734.995.6390 x21



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Maximum number of LANMAN Work Items and concurrent connections from IIS 6.0 to Samba

2006-07-05 Thread S. J. van Harmelen
Jeremy,

Aldo I would still very much like you to take a look (to confirm that it
is not Samba causing the problem), I'm affraid I already know what the
problem is.

We are using DFS (distributed file system) to connect to our Samba
server. Now when I change the path from DFS to a standard UNC path and
refresh the site... The error is gone...

So I think I'm going to call M$ about this one. I already searched
google, but that didn't give me any leads...

Though I do have another question! Can you tell me why changing the
'change notify timeout' to say 5 seconds isn't a good idea? At least,
that's what I read around the internet (google again ;). We need this
setting to be something like 5 seconds for our setup to work.

Regards,

Sander



On vr, 2006-06-30 at 09:23 -0700, Jeremy Allison wrote:
> On Thu, Jun 29, 2006 at 05:45:24PM +0200, S. J. van Harmelen wrote:
> > Hey there folks!!
> > 
> > I have a question about the maximum number of LANMAN Work Items and
> > concurrent connections from IIS 6.0 to Samba.
> > 
> > We have a server for shared windows webhosting running Windows 2003 with
> > IIS 6.0 (with ASP.NET 2.0) connecting to debian 3.1 with Samba 3.0.22
> > (functioning as a fileserver).
> > 
> > At this moment there are about 250 sites running on this server. Now
> > when we make a request to site x (which is using ASP.NET 2.0) we get the
> > following error:
> > 
> > "Failed to start monitoring changes to \\server\websitedirectory...
> > because the network BIOS command limit has been reached"
> > 
> > Now I know there is a registry setting in Windows 2003 that controls
> > these values, but I can't seem to find how to configure this in Samba.
> > 
> > As far as I understand, Samba by default is configured for unlimited
> > connections. So what am I missing?
> 
> Yes, there are no hardcoded limits in Samba. Can you post an ethereal
> trace of the connection failure ? Or a smbd debug level 10 log so we
> can work out what might be going on ?
> 
> Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba backup and restore with LDAP

2006-07-05 Thread Schoenfeld
Hi,
i use slapcat to backup my Ldap - Database and slapadd to restore it.
Beware: stop LDAP before Backup!!! 
To Backup my SAMBA  Files i tar my /etc/samba/* files.
Don't forget the /etc/ldap.conf file.



MfG
Ingo
Am Mittwoch, den 05.07.2006, 14:26 +0100 schrieb Sandy McCarthy:
> Hi
> 
> I have a problem with a production server (Acer Altos G5350) SLE9 SP3 with 
> Samba 3.0.20b-3.4). It provides shares for about 15 Windows workstations. I 
> purchased it with an Adaptec Hostraid a320 controller (using two 146mb 
> Seatgate drives mirrored with Hostraid) but slowly realising that getting up 
> tod ate kernel supported drivers for these cards is near impossible. When I 
> installed SLE9 it used the default AIC79xx driver which I believe is only 
> rated at 160 and not 320 and although the system appears to run it causes 
> SCSI transmission errors when disk is being thrashed
> 
> Anyway to my Samba questionI need to format this server again and start 
> from scratch as I have decided to use the Linux mirror feature as it doesn't 
> rely on kernel drivers from adaptec (bit of a waste of a hardware raid 
> controller but don't want to use windows 2003 server. I use samba as a PDC 
> but not for roaming profiles. I use LDAP backend (all default stuff from Yast 
> within SLE9) and once I have my system backup and running I don't want to go 
> back around and register all the workstations again. Is there a way to backup 
> by files, ldap info and samba info so that when the system is restored, the 
> workstations won't know the difference?
> 
> Slightly off topic...if anyone as any usefull info on using adaptec a320 
> controllers under linux would be glad of the help. If there is still a chance 
> to use it then great.
> 
> Thanks
> 
> Sandy
> 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba backup and restore with LDAP

2006-07-05 Thread Marcin Giedz

Sandy McCarthy napisał(a):

Hi

I have a problem with a production server (Acer Altos G5350) SLE9 SP3 with 
Samba 3.0.20b-3.4). It provides shares for about 15 Windows workstations. I 
purchased it with an Adaptec Hostraid a320 controller (using two 146mb Seatgate 
drives mirrored with Hostraid) but slowly realising that getting up tod ate 
kernel supported drivers for these cards is near impossible. When I installed 
SLE9 it used the default AIC79xx driver which I believe is only rated at 160 
and not 320 and although the system appears to run it causes SCSI transmission 
errors when disk is being thrashed

Anyway to my Samba questionI need to format this server again and start 
from scratch as I have decided to use the Linux mirror feature as it doesn't 
rely on kernel drivers from adaptec (bit of a waste of a hardware raid 
controller but don't want to use windows 2003 server. I use samba as a PDC but 
not for roaming profiles. I use LDAP backend (all default stuff from Yast 
within SLE9) and once I have my system backup and running I don't want to go 
back around and register all the workstations again. Is there a way to backup 
by files, ldap info and samba info so that when the system is restored, the 
workstations won't know the difference?

Slightly off topic...if anyone as any usefull info on using adaptec a320 
controllers under linux would be glad of the help. If there is still a chance 
to use it then great.
  
As I remember  we had more than 40 Intel servers with Adaptec driver 
- yes the same you use aic79xx but I think it is also for 320. All 
servers were running Debian Srage with 2.6 kernel (compiled from 
sources) BUT all RAIDs we had on these machines were software ;(


It's all because Adaptec - some problems with hardware RAID and linux 
generally. You can find this thread on Adaptec site or forums related to 
Adpatec HW RAID and Linux.


Anyway software RAID were quite OK and we hadn't much work with 
them. So my advise in this case is to remove HW RAID and to relay ONLY 
on software one.


Regards,
Marcin

Thanks

Sandy

  


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] extd_audit module doesn't write to log.smbd?

2006-07-05 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Nguyen Anh Phu wrote:
> Hi all,
> 
> I'm using Samba 3.0.14a on Debian Sarge. According to 
> Samba HOWTO, I've set syslog = 0 to make extd_audit
> module writes to log.smbd instead of syslog, but in
> log.smbd only 1 line about creating new
> folder was written. How do I make extd_audit module 
> works as HOWTO document? Below is my smb.conf file:

The extd_audit vfs modules logs independently of smbd
and only uses syslog() IIRC.






cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEq8PXIR7qMdg1EfYRAn8KAKDnT0pmCgLkUQ1BL8tTIx0Lzpit3wCgnCuD
tMMEebmGTHwyUAPKt551zK4=
=oDWO
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba with ADS problem: smbstatus does not show connections - starting winbind fails

2006-07-05 Thread [EMAIL PROTECTED]
Hello,

I found out why my winbind didn't start.

I did a chmod 750 to /opt/local/samba/var/locks/winbindd_privileged and
now it works.

I didn't notice that the message 

invalid permissions on socket directory
/opt/local/samba/var/locks/winbindd_pr
ivileged

was an error, I thought it only was a warning.

So maybe It would be a good idea to report something like:

invalid permissions on socket directory
/opt/local/samba/var/locks/winbindd_pr
ivileged - Aborting 

I still face the problem that smbstatus does not show connections.

smbstatus

Samba version 3.0.22
PID Username  Group Machine
---

Service  pid machine   Connected at
---

No locked files

Thank you

Roland







-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba backup and restore with LDAP

2006-07-05 Thread Sandy McCarthy
Hi

I have a problem with a production server (Acer Altos G5350) SLE9 SP3 with 
Samba 3.0.20b-3.4). It provides shares for about 15 Windows workstations. I 
purchased it with an Adaptec Hostraid a320 controller (using two 146mb Seatgate 
drives mirrored with Hostraid) but slowly realising that getting up tod ate 
kernel supported drivers for these cards is near impossible. When I installed 
SLE9 it used the default AIC79xx driver which I believe is only rated at 160 
and not 320 and although the system appears to run it causes SCSI transmission 
errors when disk is being thrashed

Anyway to my Samba questionI need to format this server again and start 
from scratch as I have decided to use the Linux mirror feature as it doesn't 
rely on kernel drivers from adaptec (bit of a waste of a hardware raid 
controller but don't want to use windows 2003 server. I use samba as a PDC but 
not for roaming profiles. I use LDAP backend (all default stuff from Yast 
within SLE9) and once I have my system backup and running I don't want to go 
back around and register all the workstations again. Is there a way to backup 
by files, ldap info and samba info so that when the system is restored, the 
workstations won't know the difference?

Slightly off topic...if anyone as any usefull info on using adaptec a320 
controllers under linux would be glad of the help. If there is still a chance 
to use it then great.

Thanks

Sandy

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Joining an ADS domain...

2006-07-05 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Nanni X wrote:
> Ok Jerry,
> 
> now the Last Question: my LinuxSambaBox has joined 
> the domain or not??

if 'net ads testjoin' reports success it has joined,
although you might have some problems with DES
session keys.





cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEq7z3IR7qMdg1EfYRAv+eAJ9tOry/5qRmSv3ahaWAhbef4qHi/QCgr9xD
6Q23dIjZU1z4zjJaNtZfdjg=
=dlRj
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] go directly into home directory

2006-07-05 Thread Jerry Mersel

Thanks for your reply.
I have users in many different subdirectories,
How do I "say that" is it like this %H/%U?

> Jerry Mersel wrote:
>> Hi:
>>
>>   I have samba setup so a user can go only into his home directory.
>>   The problem that I have is that after the user logs in he is
>>   one level aboce his home directory and he has to choose his
>>   home to go into it. Is there a way for the user to end up in his
>>   home directory after login?
>>
>>
>>Thanks,
>>   Jerry
>>
>>
> Yes. Set the directory permissions to exclude access to the homes except
> to the owner (e.g. 0700). Next, include %u in the homes declaration
> (e.g. /home/%u) in smb.conf.
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] go directly into home directory

2006-07-05 Thread Gary Dale

Jerry Mersel wrote:

Hi:

  I have samba setup so a user can go only into his home directory.
  The problem that I have is that after the user logs in he is
  one level aboce his home directory and he has to choose his
  home to go into it. Is there a way for the user to end up in his
  home directory after login?


   Thanks,
  Jerry

  
Yes. Set the directory permissions to exclude access to the homes except 
to the owner (e.g. 0700). Next, include %u in the homes declaration 
(e.g. /home/%u) in smb.conf.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Differnet display of filenames (samba 2.x <-> 3.x)

2006-07-05 Thread Gary Dale

Dr.Peer-Joachim Koch wrote:

Hi,

we have moved our file services from an old samba 2.x (HPUX)
to a linux box (SuSE SLES 9) running samba 3.x.

Since this switching a couple of files containing ":" is
no longer displayed correctly. The name is completely
corrupted. Any hint ?

It's displayed correctly under unix, and long names without
this character are also display correctly 

The ":" character is not allowed in Windows file names. Rename the files 
to remove the colons and everything should be OK.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] go directly into home directory

2006-07-05 Thread Jerry Mersel
Hi:

  I have samba setup so a user can go only into his home directory.
  The problem that I have is that after the user logs in he is
  one level aboce his home directory and he has to choose his
  home to go into it. Is there a way for the user to end up in his
  home directory after login?


   Thanks,
  Jerry

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba with ADS problem: smbstatus does not show connections - starting winbind fails

2006-07-05 Thread [EMAIL PROTECTED]

Hello,

I use Samba 3.0.22 on a Solaris 8 system.

I have configured and compiled it myself:

CFLAGS='-I /opt/local/openldap/include' ; export CFLAGS
LDFLAGS="-L/opt/local/openldap/lib, -R/opt/local/openldap/lib" ; export
LDFLAGS
CPPFLAGS="-IL/opt/local/openldap/include" ; export CPPFLAGS
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/local/openldap/lib ; export
LD_LIBRARY_PATH

./configure --prefix=/opt/local/samba --with-windind --with-ads
--with-ldap --with-krb5=/opt/local/kerberos5 --with-acl-support 
make
make install

Yesterday I successfully joined Samba with ADS:

./kinit Samba [EMAIL PROTECTED]

 ./net  ads join
[2006/07/04 10:46:27, 0] libads/ldap.c:ads_add_machine_acct(1414)
  ads_add_machine_acct: Host account for FOO already exists - modifying
old account
Using short domain name -- BLA
Joined 'FOO' to realm 'BAR.ORG'

Everthing was fine.

I could do a wbinfo -u and wbinfo -g and could see the users and groups
of the ADS.

I configured winbind to the /etc/nsswitch.conf:
passwd: files winbind
group:  files winbind

And then a getent passwd or getent also showed me the users and groups
of the ADS.

# chgrp BLA\m7100 testdir
ls -ld testdir
drwxrwx---+  2 sambaBLA\m7100  96 Jul  4 11:40 testdir

So almost everything was fine, there was on thing that didn't work as
expected.

smbstatus and swat status didn't show active connections/users/open
files.

My smb.conf is:

[global]
  workgroup = BLA
  realm = BLA.ORG
  netbios aliases = FOO_SAMBA
  server string = samba %v
  security = ADS
  update encrypted = Yes
  guest account = samba
  log level = 10
  log file = /opt/local/samba/var/log.%m
  ldap ssl = no
  idmap uid = 55000-6
  idmap gid = 55000-6
  template homedir = /home/windbindd/%D/%U

[unix$]
   path = /usr/sap/sambafreigabe
  read only = No
  directory mask = 0777
  inherit permissions = Yes
  inherit acls = Yes

Today I restarted samba and winbind will not start.

I have tried it several times and every time I can see the messages:

[2006/07/05 11:29:14, 4] lib/time.c:TimeInit(142)
  TimeInit: Serverzone is -7200
[2006/07/05 11:29:15, 2] lib/tallocmsg.c:register_msg_pool_usage(61)
  Registered MSG_REQ_POOL_USAGE
[2006/07/05 11:29:15, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71)
  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2006/07/05 11:29:15, 2]
nsswitch/winbindd_util.c:add_trusted_domain(173)
  Added domain HYBA HYBA.ORG S-1-5-21-842925246-1123561945-839522115
[2006/07/05 11:29:15, 2]
nsswitch/winbindd_util.c:add_trusted_domain(173)
  Added domain BUILTIN  S-1-5-32
[2006/07/05 11:29:15, 2]
nsswitch/winbindd_util.c:add_trusted_domain(173)
  Added domain IDSOL003  S-1-5-21-1163267064-2638366506-143053174
[2006/07/05 11:29:15, 10]
nsswitch/winbindd_util.c:open_winbindd_socket(906)
  open_winbindd_socket: opened socket fd 11
[2006/07/05 11:29:15, 0] lib/util_sock.c:create_pipe_sock(1281)
  invalid permissions on socket directory
/opt/local/samba/var/locks/winbindd_pr
ivileged
[2006/07/05 11:29:15, 10]
nsswitch/winbindd_util.c:open_winbindd_priv_socket(918
)
  open_winbindd_priv_socket: opened socket fd -1
open_winbind_socket: Resource temporarily unavailable

I'd apreciate any suggestions

Roland 




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] File attribute problem 3.0.23

2006-07-05 Thread Beschorner Daniel
We have a problem with an application that clears the archive bit before
writing and sets it after writing.
The latter one doesn't succeed if the writer != file owner.
Dos filemode is enabled and manually setting is fine.
Samba is 3.0.23RC3.
Client is XP/SP2.
Seems to loose the connection before setting the bit and a new smbd is
spawn.

Daniel

[2006/07/05 09:32:36, 10] locking/locking.c:is_locked(96)
  is_locked: optimisation - exclusive oplock on file Dev/Inst.ism
[2006/07/05 09:32:36, 10] locking/locking.c:is_locked(134)
  is_locked: flavour = WINDOWS_LOCK brl start=0 len=5429 unlocked for fnum
10866 file Dev/Inst.ism
[2006/07/05 09:32:36, 8] smbd/dosmode.c:dos_mode(326)
  dos_mode: Dev/Inst.ism
[2006/07/05 09:32:36, 8] smbd/dosmode.c:dos_mode_from_sbuf(193)
  dos_mode_from_sbuf returning
[2006/07/05 09:32:36, 8] smbd/dosmode.c:dos_mode(364)
  dos_mode returning
[2006/07/05 09:32:36, 10] smbd/dosmode.c:file_set_dosmode(393)
  file_set_dosmode: setting dos mode 0x20 on file Dev/Inst.ism
[2006/07/05 09:32:36, 8] smbd/dosmode.c:dos_mode(326)
  dos_mode: Dev/Inst.ism
[2006/07/05 09:32:36, 8] smbd/dosmode.c:dos_mode_from_sbuf(193)
  dos_mode_from_sbuf returning
[2006/07/05 09:32:36, 8] smbd/dosmode.c:dos_mode(364)
  dos_mode returning
[2006/07/05 09:32:36, 3] smbd/dosmode.c:unix_mode(147)
  unix_mode(Dev/Inst.ism) returning 0760
[2006/07/05 09:32:36, 5] smbd/files.c:file_new(126)
  allocated file structure 6771, fnum = 10867 (2 used)
[2006/07/05 09:32:36, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
[2006/07/05 09:32:36, 0] lib/util_sock.c:write_data(562)
  write_data: write failure in writing to client 192.168.1.4. Error
Connection reset by peer
[2006/07/05 09:32:36, 0] lib/util_sock.c:send_smb(769)
  Error writing 4 bytes to client. -1. (Connection reset by peer)
[2006/07/05 09:32:36, 1] smbd/service.c:make_connection_snum(941)
  dev4 (192.168.1.4) connect to service Dev initially as user xxx (uid=100,
gid=100) (pid 20030)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Differnet display of filenames (samba 2.x <-> 3.x)

2006-07-05 Thread Dr.Peer-Joachim Koch

Hi,

we have moved our file services from an old samba 2.x (HPUX)
to a linux box (SuSE SLES 9) running samba 3.x.

Since this switching a couple of files containing ":" is
no longer displayed correctly. The name is completely
corrupted. Any hint ?

It's displayed correctly under unix, and long names without
this character are also display correctly 

--
Bye,
Peer
_
Max-Planck-Institut fuer Biogeochemie
Dr. Peer-Joachim Koch
Hans-Knöll Str.10Telefon: ++49 3641 57-6705
D-07745 Jena Telefax: ++49 3641 57-7705
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Suse 10.1 with samba servers 3.0.22 & 3.0.23rc3 only seen by Suse 10.1 samba client as cifs

2006-07-05 Thread Doug VanLeuven

Thomas Garson wrote:


Questions:
Has there been some kind of hidden parameter relatively recently added
to samba 3 that identifies shares as cifs or smbfs? Is the Linux client
programmed to react to this? Are these protocols becoming mutually
exclusive? If any of this is true, where is the documentation? Why me?


smbfs has been replaced in the linux kernel by cifs, so smbfs is no longer
being kept up to date. cifs is now a mount option in newer releases.

cifs is "Common Internet File System".  It's based on the SMB protocol.
Hasn't been a secret.  Didn't make the front page of the NY Times though.

http://us1.samba.org/samba/docs/man/manpages-3/mount.cifs.8.html

Regards, Doug

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Suse 10.1 with samba servers 3.0.22 & 3.0.23rc3 only seen by Suse 10.1 samba client as cifs

2006-07-05 Thread Thomas Limoncelli
Thomas Garson wrote:
> Has there been some kind of hidden parameter relatively recently added
> to samba 3 that identifies shares as cifs or smbfs? Is the Linux client
> programmed to react to this? Are these protocols becoming mutually
> exclusive? If any of this is true, where is the documentation? Why me?

May I suggest some reading on SMB vs. CIFS?

  http://en.wikipedia.org/wiki/CIFS

On the Linux side, "cifs" is the suggested replacement for the
deprecated "smbfs" kernel module.


-TL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Maximum number of LANMAN Work Items and concurrent connections from IIS 6.0 to Samba

2006-07-05 Thread S. J. van Harmelen
Jeremy,

I don't want to rush you, but did you find some time to look at my
problem?

This problem occurs in a production environment, so we are eager to
solve this one!

Hope to hear something from you...

Thanks,

Sander


On vr, 2006-06-30 at 09:23 -0700, Jeremy Allison wrote:
> On Thu, Jun 29, 2006 at 05:45:24PM +0200, S. J. van Harmelen wrote:
> > Hey there folks!!
> > 
> > I have a question about the maximum number of LANMAN Work Items and
> > concurrent connections from IIS 6.0 to Samba.
> > 
> > We have a server for shared windows webhosting running Windows 2003 with
> > IIS 6.0 (with ASP.NET 2.0) connecting to debian 3.1 with Samba 3.0.22
> > (functioning as a fileserver).
> > 
> > At this moment there are about 250 sites running on this server. Now
> > when we make a request to site x (which is using ASP.NET 2.0) we get the
> > following error:
> > 
> > "Failed to start monitoring changes to \\server\websitedirectory...
> > because the network BIOS command limit has been reached"
> > 
> > Now I know there is a registry setting in Windows 2003 that controls
> > these values, but I can't seem to find how to configure this in Samba.
> > 
> > As far as I understand, Samba by default is configured for unlimited
> > connections. So what am I missing?
> 
> Yes, there are no hardcoded limits in Samba. Can you post an ethereal
> trace of the connection failure ? Or a smbd debug level 10 log so we
> can work out what might be going on ?
> 
> Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba