[Samba] Configuration of idmap_ldap No backend defined

2012-04-14 Thread Jon Theil Nielsen
Hi list,

I can't make idmap talk to my LDAP server. And I haven't found an updated
howto.

Some entries from log.windbindd-imap:
[2012/04/13 20:05:40.500475,  5] winbindd/idmap.c:153(smb_register_idmap)
  Successfully added idmap backend 'ldap'
[2012/04/13 20:05:40.501112,  5] winbindd/idmap.c:153(smb_register_idmap)
  Successfully added idmap backend 'tdb'
[2012/04/13 20:05:40.501318,  5] winbindd/idmap.c:153(smb_register_idmap)
  Successfully added idmap backend 'passdb'
[2012/04/13 20:05:40.501516,  5] winbindd/idmap.c:153(smb_register_idmap)
  Successfully added idmap backend 'nss'
[2012/04/13 20:05:40.540035,  2] lib/smbldap.c:1018(smbldap_open_connection)
  smbldap_open_connection: connection opened
[2012/04/13 20:05:40.550305,  2]
passdb/pdb_ldap.c:2427(init_group_from_ldap)
  init_group_from_ldap: Entry found for group: 515
[2012/04/13 20:05:40.592075,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config MYDOMAIN
[2012/04/13 20:06:23.606655,  2]
passdb/pdb_ldap.c:2427(init_group_from_ldap)
  init_group_from_ldap: Entry found for group: 548
[2012/04/13 20:06:23.629123,  2]
passdb/pdb_ldap.c:2427(init_group_from_ldap)
  init_group_from_ldap: Entry found for group: 1006
[2012/04/13 20:06:23.632141,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config MYDOMAIN
[2012/04/13 20:06:23.637118,  2]
passdb/pdb_ldap.c:2427(init_group_from_ldap)
  init_group_from_ldap: Entry found for group: 1005
[2012/04/13 20:06:23.640003,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config MYDOMAIN
[2012/04/13 20:06:23.653837,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config MYDOMAIN
[2012/04/13 20:06:33.287504,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config MYDOMAIN
[2012/04/13 20:06:33.287723,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config BUILTIN
[2012/04/13 20:06:38.048645,  1]
winbindd/idmap.c:288(idmap_init_named_domain)
  no backend defined for idmap config MYDOMAIN

Part of my smb.conf:
[global]
ldap admin dn = cn=Manager,dc=example,dc=com
ldap delete dn = Yes
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=Computers
ldap passwd sync = yes
ldap suffix = dc=example,dc=com
ldap user suffix = ou=People
ldap debug level = 1
idmap config *:backend = ldap
idmap config *:readonly = no
idmap config *:range = 1000-199
idmap config *:ldap_url=ldap://localhost
idmap config *:ldap_base_dn = cn=Manager,dc=example,dc=com
idmap config MYDOMAIN:backend = ldap
idmap config MYDOMAIN:readonly = no
idmap config MYDOMAIN:range = 1000-199
idmap config MYDOMAIN:ldap_url=ldap://localhost
idmap config MYDOMAIN:ldap_base_dn = cn=Manager,dc=example,dc=com
idmap config MYDOMAIN:ldap_user_dn = cn=admin,ou=Idmap,dc=example,dc=com

I'm running samba 3.6.3 on FreeBSD 9.0-RELEASE and my LDAP server seems to
work otherwise. At least, I can do user authentication this way.

Of course, I can provide much more information from the logs and the
configuration files. I just don't know where to start. And any help would
be much appreciated.

Best regards,
Jon Theil Nielsen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Configuration of idmap_ldap No backend defined

2012-04-14 Thread Jon Theil Nielsen
Hi and thanks,

The base dn is not as shown. Might be some kind of paranoia...
I changed the smb.conf as suggested. Did not change any other file. Now my
log shows:

[2012/04/14 20:29:36.891125,  2] lib/smbldap.c:1018(smbldap_open_connection)
  smbldap_open_connection: connection opened
[2012/04/14 20:29:36.901600,  0] winbindd/idmap_ldap.c:192(verify_idpool)
  Multiple entries returned from (objectclass=sambaUnixIdPool) (base ==
dc=example,dc=com)
[2012/04/14 20:29:36.901919,  1]
winbindd/idmap_ldap.c:516(idmap_ldap_db_init)
  idmap_ldap_db_init: failed to verify ID pool (NT_STATUS_UNSUCCESSFUL)
[2012/04/14 20:29:36.903646,  5]
winbindd/idmap_ldap.c:421(idmap_ldap_close_destructor)
  The connection to the LDAP server was closed
[2012/04/14 20:29:36.904039,  1] winbindd/idmap.c:249(idmap_init_domain)
  idmap initialization returned NT_STATUS_UNSUCCESSFUL

Regards,
Jon

On 14 April 2012 20:14, Christian Rost christian.r...@rocon-it.de wrote:

 Hi,

 please check your ldap configuration in your smb.conf file. At first
 verify that your base-dn is really  dc=example,dc=com. Than remove
 cn=Manager from each option that contains base_dn.

 As usual, make sure that your LDAP server is set up correctly and that
 everthing works fine. Than you can connect samba to your LDAP.

 Cheers,

 Christian

 Jon Theil Nielsen jonth...@gmail.com schrieb:

 Hi list,
 
 I can't make idmap talk to my LDAP server. And I haven't found an
 updated
 howto.
 
 Some entries from log.windbindd-imap:
 [2012/04/13 20:05:40.500475,  5]
 winbindd/idmap.c:153(smb_register_idmap)
   Successfully added idmap backend 'ldap'
 [2012/04/13 20:05:40.501112,  5]
 winbindd/idmap.c:153(smb_register_idmap)
   Successfully added idmap backend 'tdb'
 [2012/04/13 20:05:40.501318,  5]
 winbindd/idmap.c:153(smb_register_idmap)
   Successfully added idmap backend 'passdb'
 [2012/04/13 20:05:40.501516,  5]
 winbindd/idmap.c:153(smb_register_idmap)
   Successfully added idmap backend 'nss'
 [2012/04/13 20:05:40.540035,  2]
 lib/smbldap.c:1018(smbldap_open_connection)
   smbldap_open_connection: connection opened
 [2012/04/13 20:05:40.550305,  2]
 passdb/pdb_ldap.c:2427(init_group_from_ldap)
   init_group_from_ldap: Entry found for group: 515
 [2012/04/13 20:05:40.592075,  1]
 winbindd/idmap.c:288(idmap_init_named_domain)
   no backend defined for idmap config MYDOMAIN
 [2012/04/13 20:06:23.606655,  2]
 passdb/pdb_ldap.c:2427(init_group_from_ldap)
   init_group_from_ldap: Entry found for group: 548
 [2012/04/13 20:06:23.629123,  2]
 passdb/pdb_ldap.c:2427(init_group_from_ldap)
   init_group_from_ldap: Entry found for group: 1006
 [2012/04/13 20:06:23.632141,  1]
 winbindd/idmap.c:288(idmap_init_named_domain)
   no backend defined for idmap config MYDOMAIN
 [2012/04/13 20:06:23.637118,  2]
 passdb/pdb_ldap.c:2427(init_group_from_ldap)
   init_group_from_ldap: Entry found for group: 1005
 [2012/04/13 20:06:23.640003,  1]
 winbindd/idmap.c:288(idmap_init_named_domain)
   no backend defined for idmap config MYDOMAIN
 [2012/04/13 20:06:23.653837,  1]
 winbindd/idmap.c:288(idmap_init_named_domain)
   no backend defined for idmap config MYDOMAIN
 [2012/04/13 20:06:33.287504,  1]
 winbindd/idmap.c:288(idmap_init_named_domain)
   no backend defined for idmap config MYDOMAIN
 [2012/04/13 20:06:33.287723,  1]
 winbindd/idmap.c:288(idmap_init_named_domain)
   no backend defined for idmap config BUILTIN
 [2012/04/13 20:06:38.048645,  1]
 winbindd/idmap.c:288(idmap_init_named_domain)
   no backend defined for idmap config MYDOMAIN
 
 Part of my smb.conf:
 [global]
 ldap admin dn = cn=Manager,dc=example,dc=com
 ldap delete dn = Yes
 ldap group suffix = ou=Groups
 ldap idmap suffix = ou=Idmap
 ldap machine suffix = ou=Computers
 ldap passwd sync = yes
 ldap suffix = dc=example,dc=com
 ldap user suffix = ou=People
 ldap debug level = 1
 idmap config *:backend = ldap
 idmap config *:readonly = no
 idmap config *:range = 1000-199
 idmap config *:ldap_url=ldap://localhost
 idmap config *:ldap_base_dn = cn=Manager,dc=example,dc=com
 idmap config MYDOMAIN:backend = ldap
 idmap config MYDOMAIN:readonly = no
 idmap config MYDOMAIN:range = 1000-199
 idmap config MYDOMAIN:ldap_url=ldap://localhost
 idmap config MYDOMAIN:ldap_base_dn = cn=Manager,dc=example,dc=com
 idmap config MYDOMAIN:ldap_user_dn =
 cn=admin,ou=Idmap,dc=example,dc=com
 
 I'm running samba 3.6.3 on FreeBSD 9.0-RELEASE and my LDAP server seems
 to
 work otherwise. At least, I can do user authentication this way.
 
 Of course, I can provide much more information from the logs and the
 configuration files. I just don't know where to start. And any help
 would
 be much appreciated.
 
 Best regards,
 Jon Theil Nielsen
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

 --
 Dipl.-Ing. Christian Rost
 roCon - Informationstechnologie
 Ulmenstraße 45
 44534

[Samba] VPN server and logon to Samba PDC

2008-03-17 Thread Jon Theil Nielsen
My goal is to make VPN access to our Samba PDC (FreeBSD 7.0) so that users
can access there home shares from Windows clients.
I have read the instructions at
http://samba.org/ftp/unpacked/lorikeet/pppd/final-report.pdf, but I can't
make it work. Don't know if is due to my lack of skills or has something to
do with the Popop functionality in FreeBSD.
Following the instructions, i made a file

/usr/local/etc/pptpd.conf:
option /etc/ppp/options.pptpd
localip 192.168.1.4
remoteip 192.168.1.150-155

and another file

/etc/ppp/options.pptpd:
lock
debug
noauth
name pptpd
nobsdcomp
refuse-pap
refuse-chap
refuse-MSCHAP
require-MSCHAP-v2
require-mppe
ms-wins 192.168.1.4
ms-dns 195.184.96.2 213.173.225.86
defaultroute
plugin winbind.so
ntlm_auth-helper /usr/local/bin/ntlm_auth --helper-protocol=ntlm-server-1

This configuration does not work - the log says:
Warning: Label /etc/ppp/options.pptpd rejected -direct connection:
Configuration label not found

From reading several howto's on Poptop on FreeBSD I  ended up with a
partially working solution. I removed the reference to the option file in
/usr/local/etc/pptpd.conf and modified /etc/ppp/ppp.conf like this:
pptp:
set timeout 0
set log phase chat connect lcp ipcp command
set dial
set login
enable mssfixup
set ifaddr 192.168.1.4 192.168.150-192.168.1.155 255.255.255.0
set server /tmp/loop  0177
disable pap
# Authenticate against /etc/passwd
enable passwdauth
disable ipv6cp
enable proxy
accept dns
enable MSChapV2
enable mppe
disable deflate pred1

And I added the file /etc/ppp/secure:

#!/bin/sh
exec /usr/sbin/ppp -direct loop-in

And  finaly the file /etc/ppp/ppp.secrets containing usernames and
passwords.

After restarting the server, I can now connect from a Windows client. But
will lose me access to the Internet (missing DNS), and I cannot join the
Samba domain.
I hope someone and lead me in the rigth direction...

Regards,
Jon
-- 
Jon Theil Nielsen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] VPN server and logon to Samba PDC

2008-03-17 Thread Jon Theil Nielsen
2008/3/17, David C. Rankin [EMAIL PROTECTED]:

 Jon Theil Nielsen wrote:
  My goal is to make VPN access to our Samba PDC (FreeBSD 7.0) so that
 users
  can access there home shares from Windows clients.
  I have read the instructions at
  http://samba.org/ftp/unpacked/lorikeet/pppd/final-report.pdf, but I
 can't
  make it work.

 snip
  Regards,
  Jon

 Jon,

 I do it this way:

 pptp VPN server


 /etc/pptpd.conf
 option /etc/ppp/options.pptp

 debug (comment out after testing)
 localip 192.168.7.12
 remoteip 192.168.7.2-5
 pidfile /var/run/pptpd.pid

 /etc/ppp/options.pptp
 lock
 noauth
 nobsdcomp
 lcp-echo-failure 10
 lcp-echo-interval 10

 /etc/ppp/options
 name bonza.rbpllc.com
 noipdefault
 noauth
 lock
 local
 lcp-echo-interval 30
 lcp-echo-failure 4
 lcp-max-configure 60
 lcp-restart 2
 idle 600
 noipx
 file /etc/ppp/filters
 proxyarp
 ms-dns 192.168.7.15
 ms-wins 192.168.7.15
 refuse-chap
 refuse-mschap

 /etc/ppp/pap-secrets
 *   bonza.rbpllc.com
 username   yourserver.yourdomain.com   password  *

 /etc/ppp/chap-secrets
 username   *   password  *

 Of course, use your own information and get rid of the   in
 the pap
 and chap-secret files. Good luck. This works like a charm. Just don't
 forget to open [port 1723] in your firewall and router for accessing the
 server locally as well as remotely. Also, you may need:

 # TAG: bcrelay if
 bcrelay eth0

 in /etc/pptpd.conf if you are running an older version of pptpd to
 improve remote browsing.

 Thanks, David
Just a few questions before I try this solution.
Are you on FreeBSD too? As far as I understand, the main configuration file
here is /usr/local/etc/pptpd.conf. Or should it live in /etc/?
What does the line file /etc/ppp/filters refer to?
Can you use this configuration to join a Samba domain?

Regards,
Jon
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] VPN server and logon to Samba PDC

2008-03-17 Thread Jon Theil Nielsen
2008/3/17, David C. Rankin [EMAIL PROTECTED]:

 Jon Theil Nielsen wrote:
  My goal is to make VPN access to our Samba PDC (FreeBSD 7.0) so that
 users
  can access there home shares from Windows clients.
  I have read the instructions at
  http://samba.org/ftp/unpacked/lorikeet/pppd/final-report.pdf, but I
 can't
  make it work.

 snip
  Regards,
  Jon

 Jon,

 I do it this way:

 pptp VPN server


 /etc/pptpd.conf
 option /etc/ppp/options.pptp

 debug (comment out after testing)
 localip 192.168.7.12
 remoteip 192.168.7.2-5
 pidfile /var/run/pptpd.pid

 /etc/ppp/options.pptp
 lock
 noauth
 nobsdcomp
 lcp-echo-failure 10
 lcp-echo-interval 10

 /etc/ppp/options
 name bonza.rbpllc.com
 noipdefault
 noauth
 lock
 local
 lcp-echo-interval 30
 lcp-echo-failure 4
 lcp-max-configure 60
 lcp-restart 2
 idle 600
 noipx
 file /etc/ppp/filters
 proxyarp
 ms-dns 192.168.7.15
 ms-wins 192.168.7.15
 refuse-chap
 refuse-mschap

 /etc/ppp/pap-secrets
 *   bonza.rbpllc.com
 username   yourserver.yourdomain.com   password  *

 /etc/ppp/chap-secrets
 username   *   password  *

 Of course, use your own information and get rid of the   in
 the pap
 and chap-secret files. Good luck. This works like a charm. Just don't
 forget to open [port 1723] in your firewall and router for accessing the
 server locally as well as remotely. Also, you may need:

 # TAG: bcrelay if
 bcrelay eth0

 in /etc/pptpd.conf if you are running an older version of pptpd to
 improve remote browsing.


Hi again,

Tried  the proposed configurataion. The first time my log said:

ppp[67205]: Warning: Label /etc/ppp/options.pptp rejected -direct
connection: Configuration label not found

Then I thought that I maybe didn't needed the old /etc/ppp.conf, so I moved
that away. Now the result was:

ppp[67267]: Warning: Label /etc/ppp/options.pptp rejected -direct
connection: /etc/ppp/ppp.conf : File not found
ppp[67205]: Warning: Label /etc/ppp/options.pptp rejected -direct
connection: Configuration label not found

To me it is a bit confusing which files pptpd on FreeBSD uses. Do you have a
/etc/ppp/ppp.conf and if so, what does it contain?

Regards,
Jon
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] VPN server and logon to Samba PDC

2008-03-17 Thread Jon Theil Nielsen
2008/3/17, David C. Rankin [EMAIL PROTECTED]:

 Jon Theil Nielsen wrote:
  2008/3/17, David C. Rankin [EMAIL PROTECTED]

  mailto:[EMAIL PROTECTED]:

 
  Jon Theil Nielsen wrote:
My goal is to make VPN access to our Samba PDC (FreeBSD 7.0) so
  that users
can access there home shares from Windows clients.
I have read the instructions at
http://samba.org/ftp/unpacked/lorikeet/pppd/final-report.pdf, but
  I can't
make it work.
 
  snip
Regards,
Jon
 
  Jon,
 
  I do it this way:
 
  pptp VPN server
 
 
  /etc/pptpd.conf
  option /etc/ppp/options.pptp
 
  debug (comment out after testing)

  localip 192.168.7.12 http://192.168.7.12

  remoteip 192.168.7.2-5
  pidfile /var/run/pptpd.pid
 
  /etc/ppp/options.pptp
  lock
  noauth
  nobsdcomp
  lcp-echo-failure 10
  lcp-echo-interval 10
 
  /etc/ppp/options

  name bonza.rbpllc.com http://bonza.rbpllc.com

  noipdefault
  noauth
  lock
  local
  lcp-echo-interval 30
  lcp-echo-failure 4
  lcp-max-configure 60
  lcp-restart 2
  idle 600
  noipx
  file /etc/ppp/filters
  proxyarp

  ms-dns 192.168.7.15 http://192.168.7.15
  ms-wins 192.168.7.15 http://192.168.7.15

  refuse-chap
  refuse-mschap
 
  /etc/ppp/pap-secrets

  *   bonza.rbpllc.com http://bonza.rbpllc.com
  username   yourserver.yourdomain.com
  http://yourserver.yourdomain.com   password  *

 
  /etc/ppp/chap-secrets
  username   *   password  *
 
  Of course, use your own information and get rid of the  
  in the pap
  and chap-secret files. Good luck. This works like a charm. Just
 don't
  forget to open [port 1723] in your firewall and router for accessing
 the
  server locally as well as remotely. Also, you may need:
 
  # TAG: bcrelay if
  bcrelay eth0
 
  in /etc/pptpd.conf if you are running an older version of pptpd to
  improve remote browsing.
 
  Thanks, David
  Just a few questions before I try this solution.
  Are you on FreeBSD too? As far as I understand, the main configuration
  file here is /usr/local/etc/pptpd.conf. Or should it live in /etc/?
  What does the line file /etc/ppp/filters refer to?
  Can you use this configuration to join a Samba domain?
 
  Regards,
  Jon


 Jon,

 It doesn't matter where the conf file goes. That is determined at
 compile time with the ./configure options. If your setup wants it in
 /usr/local, then that's where it goes. I'm running Linux, but as far as
 pptpd is concerned it shouldn't care. You may just have to adjust the
 path information to work with your setup. I would just make the
 configuration changes and start pptpd. You will get all the messages you
 need in /var/log/messages or /var/log/syslog depending on your setup.

Hi again,

Sure, it does read it from /usr/local/etc. I can see that from the
consequeces of changing it there. But as I stated in a previous message it
doesn't work. I'm sure it has something to do with the setup of ppp on
FreeBSD.
With respectively without the existence of /etc/ppp/ppp.conf the log says:

ppp[67205]: Warning: Label /etc/ppp/options.pptp rejected -direct
connection: Configuration label not found

and

ppp[67267]: Warning: Label /etc/ppp/options.pptp rejected -direct
connection: /etc/ppp/ppp.conf : File not found

I'm a bit lost here. I might have to ask some FreeBSD experts. Naturally, I
have been googling on the issue, but haven't yet seen any usefull hints.
Thanks for the help anyway!

Regards,
Jon
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] FreeBSD: Changing UNIX password - Password Chat?

2008-02-27 Thread Jon Theil Nielsen
2008/2/14, Fabiano Caixeta Duarte [EMAIL PROTECTED]:
 Jon Theil Nielsen escreveu:
  2008/2/13, Edmundo Valle Neto [EMAIL PROTECTED]:
  Jon Theil Nielsen escreveu:
  I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords
  from Windows clients (Ctrl-Alt-Del).
  I now have the password chat debug active and I have loglevel 100.
  I am not certain about the syntax in the password chat. But if I from
  a console try to change the password of a given user (here testuser1),
  I see these lines:
 
  mflserver3# /usr/bin/passwd testuser1
  Changing local password for testuser1
  New Password: (entering the password)
  Retype New Password: (entering it again)
 
  From that i guess the expression in the chat would be:
  *Changing*local*password*for* %u\n *New*Password* %n\n
  *Retype*New*Password* %n\n
 
  No.
 
  %u is the username and %n is the newpassword.
 
  What*to*expect
  %n\n (send the password and a new line)
  What*to*expect*then
  %n\n (send the password again and a new line)
 
 
  Selected parts of the log shows:
 
  [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279)
expect: expected [*Changing*local*password*for*] received [Changing
  local password for testuser1
New Password:] match yes
 
  It matched the two first lines stopping at (New Password:) as you have a
  * at the end.
 
  Okay, I shoulden't have that trailing *?
 
  And wait.
 
  [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290)
expect: returning True
  [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242)
expect: sending [testuser1
]
 
  You sent an username to the New password: prompt???
 
  It wasn't my intention, but I can see that's what happened.

 You seem to have three macros in your passwd chat: %u %u and %n.
 Instead, you need %u %n %n.

 See?


 
  [2008/02/13 17:47:07, 10] lib/util_sock.c:read_socket_with_timeout(476)
read_socket_with_timeout: timeout read. select timed out.
  [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279)
expect: expected [*New*Password*] received [
Retype New Password:] match yes
 
  It matched the second line stopping at (Retype New Password:)
  And wait.
 
  [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290)
expect: returning True
  [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242)
expect: sending [VerySecret
]
 
  You sent a VerySecret password (that obviously will not match the first)
 
  So, that part seemed to work. But obviously not compared to what happened 
  above.
 
  [2008/02/13 17:47:10, 10] lib/util_sock.c:read_socket_with_timeout(476)
read_socket_with_timeout: timeout read. select timed out.
  [2008/02/13 17:47:10, 100] smbd/chgpasswd.c:expect(279)
expect: expected [*Retype*New*Password*] received [
Mismatch; try again, EOF to quit.
New Password:] match no
 
  And again something is completely wrong, I see.
 
  As I said, I am far from confident with the syntax/mecanism here. So I
  would really appreciate some more explicit help. I have tried to
  modify the chat by removing the trailing * or by putting the
  expressions into double quotes - but with no luck.
  Again, what is going on in the console is exactely what I wrote above.
  What would then be tbe correct chat?
 
  Regards,
  Jon Theil Nielsen

 Look for my answer in the middle of the above post ;)

I give up. My chat was:

*Changing*local*password*for* %u\n *New*Password* %n\n
*Retype*New*Password* %n\n

As I see it, three macro substitutions %u, %n and %n

You said above:

 What*to*expect
 %n\n (send the password and a new line)
 What*to*expect*then
 %n\n (send the password again and a new line)

Do I not need to include the output from the system (e.g. Changing
local password)?
I feel really stupid. I have just tried to adjust the example from the
man page to the FreeBSD reality. Maybe I should just sleep on it and
try again with some other combinations...

But thanks, anyway..!

Regards,
Jon Theil Nielsen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: FreeBSD: Changing UNIX password - Password Chat?

2008-02-25 Thread Jon Theil Nielsen
2008/2/21, Rob Mason [EMAIL PROTECTED]:

 Hi,

 I've had this problem on FreeBSD.  Basically the behaviour of 'passwd'
 changed somewhere between releases 5 and 7.  I solved this by writing a
 shell wrapper for the passwd tool.  As simple as:

 #!/bin/sh
 /usr/bin/passwd -l $1
 echo Password Changed

 Call the file smbpass.sh and alter smb.conf accordingly:

 passwd program = /root/smbpass.sh %u
 passwd chat = *Password* %n\n *Password* %n\n *Changed*
 unix password sync = Yes

 Using wrappers makes a great deal of sense...

 For a mission critical production system you may want to put more error
 checking into the shell script, but hey, you get the idea ;-)

 Hope this helps.


 R



 Jon Theil Nielsen wrote:
  I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords
  from Windows clients (Ctrl-Alt-Del).
  I now have the password chat debug active and I have loglevel 100.
  I am not certain about the syntax in the password chat. But if I from
  a console try to change the password of a given user (here testuser1),
  I see these lines:
 
  mflserver3# /usr/bin/passwd testuser1
  Changing local password for testuser1
  New Password: (entering the password)
  Retype New Password: (entering it again)
 
 From that i guess the expression in the chat would be:
  *Changing*local*password*for* %u\n *New*Password* %n\n
  *Retype*New*Password* %n\n
 
  Selected parts of the log shows:
 
  [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279)
expect: expected [*Changing*local*password*for*] received [Changing
  local password for testuser1
New Password:] match yes
  [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290)
expect: returning True
  [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242)
expect: sending [testuser1
]
  [2008/02/13 17:47:07, 10] lib/util_sock.c:read_socket_with_timeout(476)
read_socket_with_timeout: timeout read. select timed out.
  [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279)
expect: expected [*New*Password*] received [
Retype New Password:] match yes
  [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290)
expect: returning True
  [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242)
expect: sending [VerySecret
]
  [2008/02/13 17:47:10, 10] lib/util_sock.c:read_socket_with_timeout(476)
read_socket_with_timeout: timeout read. select timed out.
  [2008/02/13 17:47:10, 100] smbd/chgpasswd.c:expect(279)
expect: expected [*Retype*New*Password*] received [
Mismatch; try again, EOF to quit.
New Password:] match no
  [2008/02/13 17:47:10, 2] smbd/chgpasswd.c:expect(285)
expect: Unknown error: 0
  [2008/02/13 17:47:10, 3] smbd/chgpasswd.c:talktochild(316)
Response 3 incorrect
  [2008/02/13 17:47:10, 3] smbd/chgpasswd.c:chat_with_program(372)
chat_with_program: Child failed to change password: testuser1
  [2008/02/13 17:47:10, 3] smbd/sec_ctx.c:pop_sec_ctx(415)
pop_sec_ctx (1035, 1036) - sec_ctx_stack_ndx = 1
  [2008/02/13 17:47:10, 5]
 rpc_parse/parse_samr.c:init_samr_r_chgpasswd_user(7576)
init_samr_r_chgpasswd_user
  [2008/02/13 17:47:10, 5]
 rpc_server/srv_samr_nt.c:_samr_chgpasswd_user(1581)
_samr_chgpasswd_user: 1581
  [2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_debug(84)
00 samr_io_r_chgpasswd_user
  [2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_ntstatus(769)
 status: NT_STATUS_ACCESS_DENIED
 
  As told, I'm not confident with the syntax. Have I made it wrong? Or
  can you see anything else from the log that can pinpoint the problem?
  I would believe that there must be several admins out there who use
  the combination of of Samba and FreeBSD without having these problems.
 
  Cheers,
  Jon Theil Nielsen


 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba


Hi,

Thanks for this idea. I did't see it until now, but I will try it out for
sure.

Regards,
Jon
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] FreeBSD: Changing UNIX password - Password Chat?

2008-02-14 Thread Jon Theil Nielsen
2008/2/14, Bardo Wolf [EMAIL PROTECTED]:
 Under solaris we had a similar situation (wrong password chat) where the

  Jon Theil Nielsen schrieb:

  I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords
   from Windows clients (Ctrl-Alt-Del).
   I now have the password chat debug active and I have loglevel 100.
   I am not certain about the syntax in the password chat. But if I from
   a console try to change the password of a given user (here testuser1),
   I see these lines:
  
   mflserver3# /usr/bin/passwd testuser1
   Changing local password for testuser1
   New Password: (entering the password)
   Retype New Password: (entering it again)
  
  From that i guess the expression in the chat would be:
   *Changing*local*password*for* %u\n *New*Password* %n\n
   *Retype*New*Password* %n\n
  
   Selected parts of the log shows:
  
   [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279)
 expect: expected [*Changing*local*password*for*] received [Changing
   local password for testuser1
 New Password:] match yes
   [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290)
 expect: returning True
   [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242)
 expect: sending [testuser1
 ]
   [2008/02/13 17:47:07, 10] lib/util_sock.c:read_socket_with_timeout(476)
 read_socket_with_timeout: timeout read. select timed out.
   [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279)
 expect: expected [*New*Password*] received [
 Retype New Password:] match yes
   [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290)
 expect: returning True
   [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242)
 expect: sending [VerySecret
 ]
   [2008/02/13 17:47:10, 10] lib/util_sock.c:read_socket_with_timeout(476)
 read_socket_with_timeout: timeout read. select timed out.
   [2008/02/13 17:47:10, 100] smbd/chgpasswd.c:expect(279)
 expect: expected [*Retype*New*Password*] received [
 Mismatch; try again, EOF to quit.
 New Password:] match no
   [2008/02/13 17:47:10, 2] smbd/chgpasswd.c:expect(285)
 expect: Unknown error: 0
   [2008/02/13 17:47:10, 3] smbd/chgpasswd.c:talktochild(316)
 Response 3 incorrect
   [2008/02/13 17:47:10, 3] smbd/chgpasswd.c:chat_with_program(372)
 chat_with_program: Child failed to change password: testuser1
   [2008/02/13 17:47:10, 3] smbd/sec_ctx.c:pop_sec_ctx(415)
 pop_sec_ctx (1035, 1036) - sec_ctx_stack_ndx = 1
   [2008/02/13 17:47:10, 5] 
 rpc_parse/parse_samr.c:init_samr_r_chgpasswd_user(7576)
 init_samr_r_chgpasswd_user
   [2008/02/13 17:47:10, 5] 
 rpc_server/srv_samr_nt.c:_samr_chgpasswd_user(1581)
 _samr_chgpasswd_user: 1581
   [2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_debug(84)
 00 samr_io_r_chgpasswd_user
   [2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_ntstatus(769)
  status: NT_STATUS_ACCESS_DENIED
  
   As told, I'm not confident with the syntax. Have I made it wrong? Or
   can you see anything else from the log that can pinpoint the problem?
   I would believe that there must be several admins out there who use
   the combination of of Samba and FreeBSD without having these problems.
  
   Cheers,
   Jon Theil Nielsen

  hint from

  http://lists-archives.org/samba/34236-passwd-change-with-3-0-27a.html

  'Adding  pam password change = yes worked around the problem for me.'

  solved the problem for us also

  Bardo
I guess you are rigth regarding Solaris (which I don't now much about).
PAM may also be an option in FreeBSD, but it is not very integrated.
Therefore I'm glad I found the solution as deskribed.

Regards,
Jon Theil Nielsen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] FreeBSD: Changing UNIX password - Password Chat?

2008-02-13 Thread Jon Theil Nielsen
I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords
from Windows clients (Ctrl-Alt-Del).
I now have the password chat debug active and I have loglevel 100.
I am not certain about the syntax in the password chat. But if I from
a console try to change the password of a given user (here testuser1),
I see these lines:

mflserver3# /usr/bin/passwd testuser1
Changing local password for testuser1
New Password: (entering the password)
Retype New Password: (entering it again)

From that i guess the expression in the chat would be:
*Changing*local*password*for* %u\n *New*Password* %n\n
*Retype*New*Password* %n\n

Selected parts of the log shows:

[2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279)
  expect: expected [*Changing*local*password*for*] received [Changing
local password for testuser1
  New Password:] match yes
[2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290)
  expect: returning True
[2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242)
  expect: sending [testuser1
  ]
[2008/02/13 17:47:07, 10] lib/util_sock.c:read_socket_with_timeout(476)
  read_socket_with_timeout: timeout read. select timed out.
[2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279)
  expect: expected [*New*Password*] received [
  Retype New Password:] match yes
[2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290)
  expect: returning True
[2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242)
  expect: sending [VerySecret
  ]
[2008/02/13 17:47:10, 10] lib/util_sock.c:read_socket_with_timeout(476)
  read_socket_with_timeout: timeout read. select timed out.
[2008/02/13 17:47:10, 100] smbd/chgpasswd.c:expect(279)
  expect: expected [*Retype*New*Password*] received [
  Mismatch; try again, EOF to quit.
  New Password:] match no
[2008/02/13 17:47:10, 2] smbd/chgpasswd.c:expect(285)
  expect: Unknown error: 0
[2008/02/13 17:47:10, 3] smbd/chgpasswd.c:talktochild(316)
  Response 3 incorrect
[2008/02/13 17:47:10, 3] smbd/chgpasswd.c:chat_with_program(372)
  chat_with_program: Child failed to change password: testuser1
[2008/02/13 17:47:10, 3] smbd/sec_ctx.c:pop_sec_ctx(415)
  pop_sec_ctx (1035, 1036) - sec_ctx_stack_ndx = 1
[2008/02/13 17:47:10, 5] rpc_parse/parse_samr.c:init_samr_r_chgpasswd_user(7576)
  init_samr_r_chgpasswd_user
[2008/02/13 17:47:10, 5] rpc_server/srv_samr_nt.c:_samr_chgpasswd_user(1581)
  _samr_chgpasswd_user: 1581
[2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_debug(84)
  00 samr_io_r_chgpasswd_user
[2008/02/13 17:47:10, 5] rpc_parse/parse_prs.c:prs_ntstatus(769)
   status: NT_STATUS_ACCESS_DENIED

As told, I'm not confident with the syntax. Have I made it wrong? Or
can you see anything else from the log that can pinpoint the problem?
I would believe that there must be several admins out there who use
the combination of of Samba and FreeBSD without having these problems.

Cheers,
Jon Theil Nielsen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] FreeBSD: Changing UNIX password - Password Chat?

2008-02-13 Thread Jon Theil Nielsen
2008/2/13, Edmundo Valle Neto [EMAIL PROTECTED]:
 Jon Theil Nielsen escreveu:
  I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords
  from Windows clients (Ctrl-Alt-Del).
  I now have the password chat debug active and I have loglevel 100.
  I am not certain about the syntax in the password chat. But if I from
  a console try to change the password of a given user (here testuser1),
  I see these lines:
 
  mflserver3# /usr/bin/passwd testuser1
  Changing local password for testuser1
  New Password: (entering the password)
  Retype New Password: (entering it again)
 
  From that i guess the expression in the chat would be:
  *Changing*local*password*for* %u\n *New*Password* %n\n
  *Retype*New*Password* %n\n
 

 No.

 %u is the username and %n is the newpassword.

 What*to*expect
 %n\n (send the password and a new line)
 What*to*expect*then
 %n\n (send the password again and a new line)


  Selected parts of the log shows:
 
  [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279)
expect: expected [*Changing*local*password*for*] received [Changing
  local password for testuser1
New Password:] match yes
 

 It matched the two first lines stopping at (New Password:) as you have a
 * at the end.

Okay, I shoulden't have that trailing *?

 And wait.

  [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290)
expect: returning True
  [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242)
expect: sending [testuser1
]
 

 You sent an username to the New password: prompt???

It wasn't my intention, but I can see that's what happened.

  [2008/02/13 17:47:07, 10] lib/util_sock.c:read_socket_with_timeout(476)
read_socket_with_timeout: timeout read. select timed out.
  [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(279)
expect: expected [*New*Password*] received [
Retype New Password:] match yes
 

 It matched the second line stopping at (Retype New Password:)
 And wait.

  [2008/02/13 17:47:07, 10] smbd/chgpasswd.c:expect(290)
expect: returning True
  [2008/02/13 17:47:07, 100] smbd/chgpasswd.c:expect(242)
expect: sending [VerySecret
]
 

 You sent a VerySecret password (that obviously will not match the first)

So, that part seemed to work. But obviously not compared to what happened above.

  [2008/02/13 17:47:10, 10] lib/util_sock.c:read_socket_with_timeout(476)
read_socket_with_timeout: timeout read. select timed out.
  [2008/02/13 17:47:10, 100] smbd/chgpasswd.c:expect(279)
expect: expected [*Retype*New*Password*] received [
Mismatch; try again, EOF to quit.
New Password:] match no

And again something is completely wrong, I see.

As I said, I am far from confident with the syntax/mecanism here. So I
would really appreciate some more explicit help. I have tried to
modify the chat by removing the trailing * or by putting the
expressions into double quotes - but with no luck.
Again, what is going on in the console is exactely what I wrote above.
What would then be tbe correct chat?

Regards,
Jon Theil Nielsen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] FreeBSD: Changing UNIX password - Password Chat?

2008-02-13 Thread Jon Theil Nielsen
Oops, that was truncated a bit to much. But I hope you understand. I
must be tired.

Regards,
Jon Theil Nielsen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] FreeBSD: Changing UNIX passwords from Windows

2008-02-11 Thread Jon Theil Nielsen
2008/2/11, Michael Heydon [EMAIL PROTECTED]:

 Ken Gunderson wrote:
  On Mon, 11 Feb 2008 02:06:51 +0100
  Jon Theil Nielsen [EMAIL PROTECTED] wrote:
 
 
  Hello
 
  We have a FreeBSD server (7.0 BETA3) running as PDC (Samba 3.0.28)
 passwords
  stored in tdbsam. Theres are no problems for users and machines to log
 on to
  the network as long as they use the passwords I have made by smbpasswd
 -a
  username. But I cannot make a working configuration which allows users
 to
  change their own passwords on the server. They are told something like
 You
  do not have permission to change your password. I guess the problem is
 the
  communication between Samba and the server, the passwd chat, but I'm
 not
  sure. I have the following lines in smb.conf
 
  passwd program = /usr/bin/passwd %u
  unix password sync = Yes
  passwd chat = *New*password* %n\n *Retype*new*passwordn* %n\n
 
 
  Might want to try:
 
  passwd chat = *Old*Password* %n\n *New*Password* %n\n
  *Retype*New*Password* %n\n
 
 
 The password command is called as root, I believe that one of the
 requirements is that it does not prompt for the old password since samba
 will have no idea what the old password was.

 If you enable passwd chat debugging (and maybe up the log level) you
 should be able to see exactly what is sent and recieved by samba/passwd.

  --hth
 
 

 *Michael Heydon - IT Administrator *
 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba


Okay, now I have made some exercises.
I now have the password chat debug active and I have loglevel 100.
I am not certain about the syntax in the password chat. But if I from a
console try to change the password of a given user (here testuser1), I see
these lines:

mflserver3# /usr/bin/passwd testuser1
Changing local password for testuser1
New Password: (entering the password)
Retype New Password: (entering it again)

From that i guess the expression in the chat would be:
*Changing*local*password*for*%u\n *New*Password* %n\n *Retype*New*Password*
%n\n

Selected parts of the log shows:

[2008/02/11 23:10:33, 10] lib/util_pw.c:getpwnam_alloc(76)
  Got testuser1 from pwnam_cache
[2008/02/11 23:10:33, 5] lib/username.c:Get_Pwnam_internals(108)
  Get_Pwnam_internals did find user [testuser1]!
[2008/02/11 23:10:33, 3] smbd/chgpasswd.c:chgpasswd(462)
  chgpasswd: Password change (as_root=Yes) for user: testuser1
[2008/02/11 23:10:33, 100] smbd/chgpasswd.c:chgpasswd(465)
  chgpasswd: Passwords: old= new=Very Secret
[2008/02/11 23:10:33, 3] smbd/chgpasswd.c:findpty(105)
  pty: try to open ptyp0, line was /dev/ptyXX
[2008/02/11 23:10:33, 3] smbd/chgpasswd.c:findpty(105)
  pty: try to open ptyp1, line was /dev/ptyp0
[2008/02/11 23:10:33, 3] smbd/chgpasswd.c:findpty(105)
  pty: try to open ptyp2, line was /dev/ptyp1
[2008/02/11 23:10:33, 3] smbd/chgpasswd.c:findpty(110)
  pty: opened /dev/ptyp2
[2008/02/11 23:10:33, 3] smbd/sec_ctx.c:push_sec_ctx(207)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
[2008/02/11 23:10:33, 3] smbd/uid.c:push_conn_ctx(358)
  push_conn_ctx(105) : conn_ctx_stack_ndx = 1
[2008/02/11 23:10:33, 3] smbd/sec_ctx.c:set_sec_ctx(307)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
[2008/02/11 23:10:33, 5] auth/auth_util.c:debug_nt_user_token(448)
  NT user token: (NULL)
[2008/02/11 23:10:33, 5] auth/auth_util.c:debug_unix_user_token(474)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2008/02/11 23:10:33, 3] smbd/chgpasswd.c:chat_with_program(430)
  chat_with_program: Dochild for user testuser1 (uid=0,gid=0) (as_root =
Yes)
[2008/02/11 23:10:33, 10] smbd/chgpasswd.c:dochild(222)
  Invoking '/usr/bin/passwd testuser1' as password change program.
[2008/02/11 23:10:34, 10] lib/util_sock.c:read_socket_with_timeout(476)
  read_socket_with_timeout: timeout read. select timed out.
[2008/02/11 23:10:34, 100] smbd/chgpasswd.c:expect(279)
  expect: expected [*Changing*local*password*for*testuser1
  ] received [Changing local password for testuser1
  New Password:] match no
[2008/02/11 23:10:34, 2] smbd/chgpasswd.c:expect(285)
  expect: Unknown error: 0
[2008/02/11 23:10:34, 3] smbd/chgpasswd.c:talktochild(316)
  Response 1 incorrect
[2008/02/11 23:10:34, 3] smbd/chgpasswd.c:chat_with_program(372)
  chat_with_program: Child failed to change password: testuser1
[2008/02/11 23:10:34, 3] smbd/sec_ctx.c:pop_sec_ctx(415)
  pop_sec_ctx (1035, 1036) - sec_ctx_stack_ndx = 1
[2008/02/11 23:10:34, 5]
rpc_parse/parse_samr.c:init_samr_r_chgpasswd_user(7576)
  init_samr_r_chgpasswd_user
[2008/02/11 23:10:34, 5] rpc_server/srv_samr_nt.c:_samr_chgpasswd_user(1581)
  _samr_chgpasswd_user: 1581
[2008/02/11 23:10:34, 5] rpc_parse/parse_prs.c:prs_debug(84)
  00 samr_io_r_chgpasswd_user
[2008/02/11 23:10:34, 5] rpc_parse/parse_prs.c:prs_ntstatus(769)
   status: NT_STATUS_ACCESS_DENIED
[2008/02/11 23:10:34, 0] rpc_parse/parse_prs.c:prs_dump_region

[Samba] FreeBSD: Changing UNIX passwords from Windows

2008-02-10 Thread Jon Theil Nielsen
Hello
 
We have a FreeBSD server (7.0 BETA3) running as PDC (Samba 3.0.28) passwords
stored in tdbsam. Theres are no problems for users and machines to log on to
the network as long as they use the passwords I have made by smbpasswd -a
username. But I cannot make a working configuration which allows users to
change their own passwords on the server. They are told something like You
do not have permission to change your password. I guess the problem is the
communication between Samba and the server, the passwd chat, but I'm not
sure. I have the following lines in smb.conf
 
passwd program = /usr/bin/passwd %u
unix password sync = Yes
passwd chat = *New*password* %n\n *Retype*new*passwordn* %n\n
 
I'm not sure the chat is correct and would like to hear about what migth be
more correct for this version of FreeBSD. I have tried to set passwd chat
debug = Yes, but that did not provide any useful (to me, at least)
information on the nature of the problem.
I haven't tried with PAM, since that is not something I like to play with i
FreeBSD.
I haven't been able to find much information on this issue between FreeBSD
and Samba, bur I'm sure there must be a solution. I don't know if the
solution is to use another password database (e.g. LDAP), but this seems to
be a rather complicated issue too.
 
Regards,
Jon Theil Nielsen

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: what OS do you use for Samba? (short FreeBSD how-to)

2006-12-05 Thread Jon Theil Nielsen
Nathan Vidican nvidican at wmptl.com writes:

 
 Anyhow, that's a quick start... try it on your own, and post a more 
 specific question should you run into anything. It really is fairly 
 painless though ;)
 
 --
 Nathan Vidican
 nvidican at wmptl.com


Hmm, this might be sligthly OT, but does this howto exist somewhere
as a web page? I have been using FreeBSD for a couple a years now
(mainly as a small scale web server and Samba only for experiments) and
have been looking for an up-to-date description of how to do LDAP
authentication both for Samba and the OS.
I can only agree that FreeBSD is very solid and that the ports system
makes almost any functionality possible.

Regards, Jon Theil Nielsen


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Openldap-sasl-server versions and how to compile samba in Freebsd

2006-09-22 Thread Jon Theil Nielsen

Recently I have upgraded my server to FSB 6.1 and have therefore needed to
compile - amongst other things - the samba3 server from ports.
For other reasons, I would like to use the openldap versions integrated with
SASL. The newest version of the server is openldap-sasl-server-2.2. But the
samba port seems to insist in compiling openldap-client-2.3.27. So for the
installation to work, I have to delete the sasl-client that followed
the 2.2server.
I have tried to modify make.conf so the installation should use the old
version, but that doesn't work.
Is there any reasonable solution to this problem? Could I do something with
portupgrade, for instance?
Thanks in advance, Jon
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] How do I hide [Homes] share?

2006-09-21 Thread Jon Theil Nielsen

I don't know if I can actually make an attachement, but I'll try. Otherwise,
I'll put it into the text message next time.

Best regards, Jon



On 09/20/2006 01:16 PM, Jon Theil Nielsen escreveu:

 I have setup a samba pdc for my domain and it's working fine. The users
 also get a network share as I would like. But when I go to the network
 neighborhood, I see both the users home directory but also a Homes
 share. As far as I can see, the content is the same, but I don't like
 that way to do it. Is there a way to only show the home directory?

Jon, something sounds wrong here. Could you please attach
your smb.conf and the version of your Samba and your clients so we
can have more info to try to help you?

[homes] share is usually hidden.


 Best regards, Jon

Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]

 [global]
workgroup = MFL
server string = MFLSERVER2
log level = 10
logon script = netlogon.bat
logon path =
logon drive = H:
domain logons = Yes
os level = 80
preferred master = Yes
domain master = Yes
wins support = Yes
ldap ssl = no
idmap uid = 1-2
idmap gid = 1-2

[NETLOGON]
browseable = no
path = /usr/local/lib/samba/netlogon
available = no

[homes]
comment = Home directory on server
writeable = yes
delete readonly = yes
user = %
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] How do I hide [Homes] share?

2006-09-20 Thread Jon Theil Nielsen

I have setup a samba pdc for my domain and it's working fine. The users
also get a network share as I would like. But when I go to the network
neighborhood, I see both the users home directory but also a Homes
share. As far as I can see, the content is the same, but I don't like
that way to do it. Is there a way to only show the home directory?

Best regards, Jon
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] How do I hide [Homes] share?

2006-09-20 Thread Jon Theil Nielsen

I'll be back soon. Just have to take control over my server again... ;-)

Best regards, Jon

   Jon, something sounds wrong here. Could you please attach


your smb.conf and the version of your Samba and your clients so we
can have more info to try to help you?

[homes] share is usually hidden.


 Best regards, Jon

Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFEZGJCj65ZxU4gPQRAuMjAKCyimz4MboqjoK4Sv1bNfkCql3Z8wCeOk+J
AjkFOYWm+8MhbhMUM0vzN08=
=8SDL
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] How do I hide [Homes] share?

2006-09-20 Thread Jon Theil Nielsen

My server is not very well right now, but I _will_ be back later with my
files...

Best regards, Jon

2006/9/20, Felipe Augusto van de Wiel [EMAIL PROTECTED]:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 09/20/2006 01:16 PM, Jon Theil Nielsen escreveu:
 I have setup a samba pdc for my domain and it's working fine. The users
 also get a network share as I would like. But when I go to the network
 neighborhood, I see both the users home directory but also a Homes
 share. As far as I can see, the content is the same, but I don't like
 that way to do it. Is there a way to only show the home directory?

Jon, something sounds wrong here. Could you please attach
your smb.conf and the version of your Samba and your clients so we
can have more info to try to help you?

[homes] share is usually hidden.


 Best regards, Jon

Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFEZGJCj65ZxU4gPQRAuMjAKCyimz4MboqjoK4Sv1bNfkCql3Z8wCeOk+J
AjkFOYWm+8MhbhMUM0vzN08=
=8SDL
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba





--
Jon Theil Nielsen
Ægirsgade 12 2.th
2200  København N
Mobil 22 27 07 20
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba