[Samba] Question about policies [OT?]

Hi, I'm using samba 3 as a domain controller. For some XP-pro laptops I would like to disable the firewall when they are logged in on our network (I don't like it but I have to). Is this possible with Windows policies ? If so, does someone know about good reading material about policies ? I

Re: [Samba] Question about policies [OT?]

Koenraad Lelong wrote: Hi, I'm using samba 3 as a domain controller. For some XP-pro laptops I would like to disable the firewall when they are logged in on our network (I don't like it but I have to). Is this possible with Windows policies ? If so, does someone know about good reading

RE: [Samba] Question about policies [OT?]

Yea, that is possible. First of all find the registry hive/key over any of your XP client, which controlls the 'firewall' then create a new custom ADM file to provide you the power to control the firewall settings from policy editor (search google for how to create custom adm files ~~

Re: [Samba] smbclient -L misses some shares when using NULL-Sessions (SOLVED)

List, there seems to be a limitation to 12 chars in smbclient. If someone has the same problem: net rpc share list -S IP_target_system -U% is the solution. Toby Tobias Glemser wrote on 14.02.2006 15:50: List, while trying to list all shares in my network using smbclient I

Re: [Samba] Samba version and ports

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James John - jrjame wrote: I have been unable to find what version of Samba is running on a particular HP/UX server. The information is not included in the ../samba/lib/smb.conf where I am used to finding it. Also, I can not tell what port they

Re: [Samba] NTLM Join Errors

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeremy Allison wrote: No, we need to add the correct security layer to the LDAP libraries we're using for this. Please log a bug at bugzilla so we can track this. It'll take a little while to get fixed but I don't want to forget this.

Re: [Samba] Samba isn't trying the correct mix of capitals for a given username

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tom Dickson wrote: I'm watching the logs, and Samba is trying the following combinations for _Get_Pwnam() with the name UserName in the domain DOMAIN: domain+username DOMAIN+UserName DOMAIN+USERNAME and then it trys: username UserName

[Samba] Problem with NTConfig.POL+SAMBA+LDAP

Hello, I installed two debian sarge servers with the following services: OPENLDAP, SAMBA 3.0, HEARTBEAT and DRBD. I used debian packages. The RAID over IP is used for the /data and /home partitions. I created a NTConfig.POL for my domain workstations and put it in /home/samba/netlogon. But

Re: [Samba] edited tdb... restart samba?

Gerald (Jerry) Carter wrote: My system is leading me to believe otherwise however I am on 3.0.4. You'll have to be more clear. If you used tdbtool to remove an entry you bypass any constency checking that smbd would do for printers and drivers. So you could say delete a driver record but

Re: [Samba] Rejoining Computers to the domain

On 2/16/06, mallapadi niranjan [EMAIL PROTECTED] wrote: I have a query, I have a samba 3.0.21 with openldap, all my windows clients are joined to PDC. but suddenly now , all my windows clients uanble to login but when i do getent passwd on the server , i could see all my computer accounts .

Re: [Samba] Strange messages in logs

On 2/16/06, Emmanuel Lesouef [EMAIL PROTECTED] wrote: I often have this type of message in my samba logs : Feb 16 18:06:42 lxdata smbd[3731]: read_socket_data: recv failure for 4. Error = No route to host and Feb 16 18:06:42 lxdata smbd[3731]: [2006/02/16 18:06:42, 0]

Re: [Samba] Samba Problem on AIX

5300-03 for both servers. One works fine. The other worked fine for several weeks until yesterday. William Jojo [EMAIL PROTECTED] 02/16/2006 05:57 PM To [EMAIL PROTECTED] cc samba@lists.samba.org Subject Re: [Samba] Samba Problem on AIX On Thu, 16 Feb 2006, [EMAIL PROTECTED]

[Samba] No access check deleting printer drivers

Hi. I have the same poblem. I can delete any unused printer driver from my samba server. I use samba-3.0.21b. The difference is that I use a windows 2000 client; login as user to the samba domain (no administrative privileges). Then I go to \\server , printers, server properties, and I can delete

Re: [Samba] No access check deleting printer drivers

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cesar Hernandez wrote: Hi. I have the same poblem. I can delete any unused printer driver from my samba server. I use samba-3.0.21b. Yes. I know. It will be fixed in 3.0.21c. I'm working on it today. cheers, jerry -BEGIN PGP

[Samba] unexpected smb stop service.

Hi All, I'm working on SUSE Linux 2.6.11.4-21.9-default i686 i386 GNU/Linux, with Samba Version 3.0.21a-0.1-SUSE. At Initially installation seems all works fine, but sometimes happens nobody can access to data share, people already authenticated, continuing working as well, while new users

Re: [Samba] unexpected smb stop service.

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Meli Marco wrote: Feb 17 12:01:38 server smbd[1021]: chdir (/data) failed Feb 17 12:01:44 server smbd[965]: [2006/02/17 12:01:44, 0] smbd/service.c:set_current_service(49) Just a simple question... Does the /data directory exist? Samba

[Samba] Domain User access control in the smb.conf

Hi All My system is Freebsd 5.4 and Samba 3.0.21a. I am using ADS for system security. In my smb.conf, I create a share like that. [Test2] comment = Test path = /usr/tmp/ valid users = @Domain Admins,@Domain\myaccount The domain administrator can access the share folder,

Re: [Samba] Domain User access control in the smb.conf

At 12:52 PM 2/17/2006, Alex Wang wrote: I guess the @Domain\myaccount is the wrong format, but I check the manual and can't find anything talk about the user list in smb.conf smb# testparm ... winbind use default domain = Yes First off, if myaccount is a user account, then drop

RE: [Samba] RE: Print Migrator help needed...

Hi Jerry, I cannot get drivers to migrate using the printmig.exe tool. Please see the samba log with log level of 3. w2k3-dc (192.168.1.13) closed connection to service print$ [2006/02/17 19:20:20, 1] smbd/service.c:make_connection_snum(662) w2k3-dc (192.168.1.13) connect to service print$

Re[2]: [Samba] Domain User access control in the smb.conf

Thanks Don, it works. Another question about that is, do I have to list all the users who need to access that share folder? [Test2] comment = Test path = /usr/tmp/ valid users = @Domain Admins readonly = Yes write list = myaccount Since myaccount is not in

Re[2]: [Samba] Domain User access control in the smb.conf

Yes, if you have the valid users = line present in a resource's config block, then access to that resource is limited to the defined set of users. If not present, then any user can connect to the resource. -D At 01:41 PM 2/17/2006, Alex Wang wrote: Thanks Don, it works. Another question

Re[3]: [Samba] Domain User access control in the smb.conf

Thanks a lot. It's working perfect right now. ALex On Fri, 17 Feb 2006 13:48:51 -0600 Don Meyer [EMAIL PROTECTED] wrote: Yes, if you have the valid users = line present in a resource's config block, then access to that resource is limited to the defined set of users. If not present,

[Samba] Are these still all the recommended settings for using roaming profiles?

I got these several years ago, but we are having problems with Outlook with roaming profiles so I want to check and see if something new should be added to this list of mods for roaming profiles. - Go to Local Computer

Re: [Samba] edited tdb... restart samba?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Joe wrote: For whatever reason, at least on 3.0.4 you cannot remove a printer _driver_ once added via windows. I removed the driver files manually and then used tdbtool to remove reference to the drivers. The printer is still defined in

[Samba] Outlook path to pst file is lost when using roaming profiles

We are having a problem getting the path to the Outlook PST file to move from machine to machine using roaming profiles (Samba 3.0.10 on RHEL 4). When a user logs off on one machine and logs on to another, the outlook path to the PST file is gone. I found this message in the archive back in

Re: [Samba] No access check deleting printer drivers

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cesar Hernandez wrote: I have the same poblem. I can delete any unused printer driver from my samba server. I use samba-3.0.21b. Please try this patch at let me know. It should apply to any 3.0.20 or 3.0.21 release. cheers, jerry -BEGIN

Re: [Samba] No access check deleting printer drivers

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gerald (Jerry) Carter wrote: Cesar Hernandez wrote: I have the same poblem. I can delete any unused printer driver from my samba server. I use samba-3.0.21b. Please try this patch at let me know. It should apply to any 3.0.20 or 3.0.21

Re: [Samba] edited tdb... restart samba?

Gerald (Jerry) Carter wrote: First, you really need to upgrade from 3.0.4. The capability to delete drivers is one of them. The amount of bugs that have been fixed in the past 20 months is really large. Secondly, like I said, the driver name is stored in the printer object. Been too

Re: [Samba] domain member with LDAP nss

I think I'm getting a better idea of what's required for this... One thing that I've noticed is that since my user and group management tools already store the sambaSID attributes in the user/group entries, along with uidNumber/gidNumber, all that I need to do to make these entries valid for

Re: [Samba] Samba + LDAP Windows Join Domain

James Taylor wrote: I am currently running samba 3.0.13. I have set the samba server up as a NT4 Domain controller and I have also integrated my LDAP configuration with samba. When I try to join the samba domain from any Windows 2000 or Windows XP machine I get the error message The user

Re: [Samba] share permissions

Donald W Watson wrote: If I have a samba server with the following share: [share1] readlist= user1 path = /tmp/share1 writelist = user2 On the surface this indicates that user1 can only read files in the share, while user2 and read and write.

RE: [Samba] Samba + LDAP Windows Join Domain

I figured out the issues I was having... Basically when the machine accounts were created the smbldap-tools I was using did not add the sambaSAMAccount objectclass and the appropriate sub information needed for the Domain lookup. I made several modifications to my scripts and viola! It works.

Re: [Samba] smb/cifs or nfsv3: which is cheaper

Anthony Messina wrote: My question is, which is cheaper both in terms of processing power and network overhead: nfsv3 or smbfs or cifs? I'll also take information on nfsv4, though that is not my current setup. I'd expect NFS to be the better option for Linux - Linux sharing. In

Re: [Samba] Rejoining Computers to the domain

Hi Josh As you have suggested my Computer Accounts have the following object classes. and RID is also uid*2+1000. dn: uid=comp07$,ou=Computers,dc=msdpl,dc=com *objectClass: top objectClass: inetOrgPerson objectClass: posixAccount objectClass: sambaSamAccount *cn: comp07$ sn: comp07$ uid: comp07$

svn commit: samba r13541 - branches/SAMBA_3_0/source/auth trunk/source/auth

Author: jerry Date: 2006-02-17 13:30:34 + (Fri, 17 Feb 2006) New Revision: 13541 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13541 Log: we have to wrap pen_enum_group_memberships() in become/unbecome_root() blocks. This fixes the problem I had with missing

svn commit: samba r13542 - in branches/SAMBA_3_0/source/passdb: .

Author: jra Date: 2006-02-17 15:51:25 + (Fri, 17 Feb 2006) New Revision: 13542 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13542 Log: Don't reuse a pointer we just freed (Doh!). Jeremy. Modified: branches/SAMBA_3_0/source/passdb/secrets.c Changeset:

svn commit: samba r13543 - in trunk/source/passdb: .

Author: jra Date: 2006-02-17 15:51:27 + (Fri, 17 Feb 2006) New Revision: 13543 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13543 Log: Don't reuse a pointer we just freed (Doh!). Jeremy. Modified: trunk/source/passdb/secrets.c Changeset: Modified:

svn commit: samba r13544 - branches/SAMBA_3_0/source/rpc_server trunk/source/rpc_server

Author: vlendec Date: 2006-02-17 17:20:53 + (Fri, 17 Feb 2006) New Revision: 13544 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13544 Log: -O1 janitor work :-) Modified: branches/SAMBA_3_0/source/rpc_server/srv_netlog_nt.c

svn commit: samba r13545 - branches/SAMBA_3_0/source/passdb trunk/source/passdb

Author: jerry Date: 2006-02-17 19:07:58 + (Fri, 17 Feb 2006) New Revision: 13545 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13545 Log: A patch which I think it's time has come. VOlker, we can talk about this more but it gets around the primary group issue. *

svn commit: samba r13546 - in branches/SAMBA_3_0/source: .

Author: jerry Date: 2006-02-17 19:19:25 + (Fri, 17 Feb 2006) New Revision: 13546 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13546 Log: NSS soname merge from trunk Modified: branches/SAMBA_3_0/source/configure.in Changeset: Modified:

svn commit: samba r13547 - branches/SAMBA_3_0/source/printing branches/SAMBA_3_0/source/rpc_server trunk/source/printing trunk/source/rpc_server

Author: jerry Date: 2006-02-17 21:07:26 + (Fri, 17 Feb 2006) New Revision: 13547 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13547 Log: add earlier checks to deny deleting a printer driver. The previous code relied upon file permissions alone. Now we check

svn commit: samba r13548 - in branches/SAMBA_3_0/source: passdb rpc_server

Author: jra Date: 2006-02-17 21:32:31 + (Fri, 17 Feb 2006) New Revision: 13548 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13548 Log: Always use the get_remote_macinhe_name() as the key for the creds store. This should fix the problems Jerry reported (but I

svn commit: samba r13549 - in trunk/source: passdb rpc_server

Author: jra Date: 2006-02-17 21:32:34 + (Fri, 17 Feb 2006) New Revision: 13549 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13549 Log: Always use the get_remote_macinhe_name() as the key for the creds store. This should fix the problems Jerry reported (but I

svn commit: samba r13550 - branches/SAMBA_3_0/source branches/SAMBA_3_0/source/passdb trunk/source trunk/source/passdb

Author: jerry Date: 2006-02-17 23:16:13 + (Fri, 17 Feb 2006) New Revision: 13550 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13550 Log: remove pdb_guest Removed: branches/SAMBA_3_0/source/passdb/pdb_guest.c trunk/source/passdb/pdb_guest.c Modified:

svn commit: samba r13551 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: abartlet Date: 2006-02-17 23:51:43 + (Fri, 17 Feb 2006) New Revision: 13551 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13551 Log: Add an accessor function for the user sid. Andrew Bartlett Modified: branches/SAMBA_4_0/source/torture/rpc/testjoin.c

svn commit: samba r13552 - in branches/SAMBA_3_0/source/rpc_server: .

Author: jra Date: 2006-02-17 23:57:28 + (Fri, 17 Feb 2006) New Revision: 13552 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13552 Log: Make sure we're using the same name to load the stored creds under all circumstances. This may be wrong, but at least we're now

Build status as of Sat Feb 18 00:00:02 2006

URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2006-02-17 00:00:03.0 + +++ /home/build/master/cache/broken_results.txt 2006-02-18 00:00:09.0 + @@ -1,17 +1,17 @@ -Build status as of Fri Feb 17 00:00:02 2006 +Build status as of Sat Feb

svn commit: samba r13553 - in branches/SAMBA_3_0/source: include libsmb rpc_server utils

Author: jra Date: 2006-02-18 00:27:31 + (Sat, 18 Feb 2006) New Revision: 13553 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13553 Log: Fix all our warnings at -O6 on an x86_64 box. Jeremy. Modified: branches/SAMBA_3_0/source/include/hmacmd5.h

svn commit: samba r13555 - in trunk/source/rpc_server: .

Author: jra Date: 2006-02-18 00:39:24 + (Sat, 18 Feb 2006) New Revision: 13555 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13555 Log: Ensure that any potential creds operation are protected by schannel if server schannel = true was set. Jeremy. Modified:

svn commit: samba r13556 - in branches/SAMBA_3_0/source/rpc_server: .

Author: jra Date: 2006-02-18 00:39:31 + (Sat, 18 Feb 2006) New Revision: 13556 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13556 Log: Ensure that any potential creds operation are protected by schannel if server schannel = true was set. Jeremy. Modified:

svn commit: samba r13558 - in trunk/source/rpc_server: .

Author: jra Date: 2006-02-18 01:21:27 + (Sat, 18 Feb 2006) New Revision: 13558 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13558 Log: (Hopefully) get the creds store/restore key right from the correct part of the netlogon and schannel packets. Jeremy.

svn commit: samba r13559 - in branches/SAMBA_3_0/source/smbd: .

Author: jra Date: 2006-02-18 02:02:11 + (Sat, 18 Feb 2006) New Revision: 13559 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13559 Log: Fix bug #3522 reported by Sandeep Tamhankar [EMAIL PROTECTED]. mkdir foo returns the wrong error message when file foo exists.

svn commit: samba r13560 - in trunk/source/smbd: .

Author: jra Date: 2006-02-18 02:02:34 + (Sat, 18 Feb 2006) New Revision: 13560 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13560 Log: Fix bug #3522 reported by Sandeep Tamhankar [EMAIL PROTECTED]. mkdir foo returns the wrong error message when file foo exists.