On Wed, Apr 07, 2010 at 08:38:50AM +0200, Stefan Götz wrote:
Sorry for that, but Samba just can't afford to be called
insecure by default.
Absolutely - and I do very much respect the reasons for
that. So Linda and I are
suggesting a non-default option or option value called something like
Linda W put forth on 4/6/2010 6:44 PM:
As it stands -- with any autodate, or any update, I load from my vendor,
I will find my whole setup failing -- as these links are key to my setup
working.
I'll have to recompile every update the instant it hits -- and if autoupdate
is
turned on
Hi,
I have a couple of old samba 3.0.30 installations. I enabled the use
kerberos keytab option in the smb.conf file to aquire a tgt
automatically when a user logs in. This works fine on 3.0.30 installs.
On newer samba versions I recognized that the option has been phased out
and replaced by a
Ok, problem solved. The TGT is only aquired when directly logging in as
a user. Running su - as root doesn't aquire the ticket. Which is cool.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Volker Lendecke wrote
If you asked me, I would support that.
insecure wide links and unix extensions = yes
---
If I catch your drift -- we might be saying same --
if I specify 'wide links = true' or ' = insecurely_true,
the former could change a '_non-specified_ default for unix
=
Why don't we save time and you just tell
me what I want?
Mr. Big to Carie, Sex and the City
=
Good morning!
I'm reviewing some corporate storage setups involving NetApps, where
the NetApp stores what they call UNIX Qtrees. So far, so good: those
allow the setting of access to the data with NFS4 ACL's, which are
fairly sophisticated and allow multiple groups or even multiple users
to be
Hello
Does anyone succeded in joining a Samba PDC with a NetApp filer ?
I tried many times but never succeded ...
Any infos welcome.
Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
On Wed, Apr 07, 2010 at 02:18:31PM +0200, Frank Bonnet wrote:
Does anyone succeded in joining a Samba PDC with a NetApp filer ?
I tried many times but never succeded ...
Yes, I did succeed a while ago. What's your problem?
Volker
signature.asc
Description: Digital signature
--
To
On Wed, Apr 07, 2010 at 07:50:37AM -0400, Nico Kadel-Garcia wrote:
I'm reviewing some corporate storage setups involving NetApps, where
the NetApp stores what they call UNIX Qtrees. So far, so good: those
allow the setting of access to the data with NFS4 ACL's, which are
fairly sophisticated
Sorry if that's a vague subject, but this problem is a little weird and I'm
just wondering if there are any suggestions out there.
We've got a Samba server (3.0.23) running on a CentOS 5.3 server offering up a
data share of 7TB on an XFS filesystem. The authentication all happens through
a
Frank Bonnet wrote:
Hello
Does anyone succeded in joining a Samba PDC with a NetApp filer ?
Yep, look here:
http://pware.hvcc.edu/NetApp-Samba.pdf
Cheers,
Bill
I tried many times but never succeded ...
Any infos welcome.
Thanks
--
To unsubscribe from this list go to the following
Hello Vladimir and anyone else reading :-) !
Attaching these files:
- gg-edited.ldif
- slapd.conf.destination.txt
- slapd.conf.source.txt
- ldap.conf.destination.txt
- ldap.conf.source.txt
- slapadd-ing.LOG this was the log while importing ldif
NET SID ETC
net setlocalsid
They should be the same SID. The SID of a DC should the same as the
SID of the domain itself. And if you had multiple DC's they should all
have the same SID.
At least that is what I have and it seems to work for me.
On 04/07/2010 10:14 AM, GG wrote:
Hello Vladimir and anyone else
On 04/07/10 14:48, Volker Lendecke wrote:
On Wed, Apr 07, 2010 at 02:18:31PM +0200, Frank Bonnet wrote:
Does anyone succeded in joining a Samba PDC with a NetApp filer ?
I tried many times but never succeded ...
Yes, I did succeed a while ago. What's your problem?
Volker
hello
here is
Hi!
On Wed, Apr 07, 2010 at 04:30:00PM +0200, Frank Bonnet wrote:
Wed Apr 7 16:29:05 MEST [cifs.server.infoMsg:info]: CIFS: Warning for
server \\PDC-SRV: Unable to create NETLOGON pipe.
Please a network trace of this attempt to join the domain,
together with a debug level 10 log of smbd
On Wed, Apr 07, 2010 at 04:48:32PM +0200, Volker Lendecke wrote:
Hi!
On Wed, Apr 07, 2010 at 04:30:00PM +0200, Frank Bonnet wrote:
Wed Apr 7 16:29:05 MEST [cifs.server.infoMsg:info]: CIFS: Warning for
server \\PDC-SRV: Unable to create NETLOGON pipe.
Please a network trace of this
you are right! please excuse me I misread!
Giorgio
On 4/7/10, Gaiseric Vandal gaiseric.van...@gmail.com wrote:
They should be the same SID. The SID of a DC should the same as the SID of
the domain itself. And if you had multiple DC's they should all have the
same SID.
At least that is
On Tue, Apr 6, 2010 at 7:58 PM, Robert Heller hel...@deepsoft.com wrote:
Yeah. I added 'map to guest = bad user'. The anonymous shares are
working. Windows now asks for a username AND password for the protected
shares, but cannot connect, claiming the share is already open under a
different
Any consensus or recommendations on whether or not to compile samba
with pthreads and/or enabling the pthreadpool on a modern Linux
distro?
Thanks,
Chris
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Greetings list,
I'm having a problem setting file permissions for users connecting to my
samba file server. CentOS 5.4, samba-3.0.33-3.15.el5_4.1.
I have authentication configured to use winbind, and name services
configured to use LDAP.
I've configured valid users in smb.conf to contain
Sorry folks - false alarm. A bit of searching in the archives showed me
that I needed:
admin users = DOMAIN\username
Fixed the problem.
Carry on...
-- Forwarded message --
From: Eddy Sturg tride2...@gmail.com
Date: Wed, Apr 7, 2010 at 10:40 AM
Subject: Samba permissions
I'm trying to move some roaming profiles from Domain A to B. All of the
profiles are from XP SP3. The originating machine is Debian 5/AMD64, samba
3.4.5 from Debian packages. The destination machine is Ubuntu 9.10, but x86.
From everything I've read and found online, `profiles` is supposed
On Wed, Apr 07, 2010 at 11:20:38AM -0400, Chris Smith wrote:
Any consensus or recommendations on whether or not to compile samba
with pthreads and/or enabling the pthreadpool on a modern Linux
distro?
The Samba code itself doesn't use pthreads directly, but
many of the subsystems it uses (eg.
On Wed, Apr 07, 2010 at 09:33:30AM +0200, Volker Lendecke wrote:
On Wed, Apr 07, 2010 at 08:38:50AM +0200, Stefan Götz wrote:
Sorry for that, but Samba just can't afford to be called
insecure by default.
Absolutely - and I do very much respect the reasons for
that. So Linda and I are
Jeremy Allison had this to say:
Ok, I'm or with a wide links = insecure option, with
the man page expressing the opinion that enabling it is
insane :-).
But I'm not spending the time to code it up (but will
test and apply patches from people who do :-).
So then this:
It is a big mistake to
Greetings list,
I am about setting up a domain controller in a little company, so I choose
samba (debian lenny) and I did it against openldap. Everything seems to be
ok in the server but when I try to log in (windows client) I have a bizarre
output: it said that my profile will not be saved. And
On Wed, Apr 7, 2010 at 1:55 PM, Jeremy Allison j...@samba.org wrote:
The Samba code itself doesn't use pthreads directly, but
many of the subsystems it uses (eg. ldap, aio) do. So
you're almost certainly compiling with pthreads whether
you want to or not :-).
So then:
--with-pthreads
On Wed, Apr 07, 2010 at 02:35:18PM -0400, Chris Smith wrote:
On Wed, Apr 7, 2010 at 1:55 PM, Jeremy Allison j...@samba.org wrote:
The Samba code itself doesn't use pthreads directly, but
many of the subsystems it uses (eg. ldap, aio) do. So
you're almost certainly compiling with pthreads
Just as a followup, the `profiles` binary provided by the Debian Samba 3.2.5
package work as expected. Is the 3.4.x series expecting a different registry
format?
Wes
On Wednesday 07 April 2010 12:57:10 pm Wes Deviers wrote:
I'm trying to move some roaming profiles from Domain A to B. All of
On Wed, Apr 07, 2010 at 11:45:14AM -0700, Jeremy Allison wrote:
On Wed, Apr 07, 2010 at 02:35:18PM -0400, Chris Smith wrote:
On Wed, Apr 7, 2010 at 1:55 PM, Jeremy Allison j...@samba.org wrote:
The Samba code itself doesn't use pthreads directly, but
many of the subsystems it uses (eg.
I am somewhat new to samba and have a couple of questions related to
DFS/FRS.
I understand that Samba supports DFS, but does it also support FRS with
DFS?
Does anybody have a quick howto guide on how to setup DFS with FRS?
If FRS is not supported is it planned?
What alternatives can I use
I have a Samba 3.4.0 server (from Ubuntu 9.04), as a member server in my
Win2003 AD (which has MS Services for Unix 3.5 installed). All seems
well, in that it is properly joined to my AD, I've got it all configured
so that domain members can log into the Linux servers using their domain
I'm running Debian/Squeeze on an AMD64 system. For some reason they have
recently stopped shipping mount.cifs with the setuid bit set. Now it
appears that they have changed the internal settings to prevent it from
running setuid. This means that I can't define the share in fstab with
user and
Am 07.04.10 22:44, schrieb Gary Dale:
How do I mount an smb/cifs share as a normal user without running
mount.cifs? Or if I have to mount the share as root, how can I get
reasonable access to the shares?
Use FUSE.
Regards Udo
--
To unsubscribe from this list go to the following URL and read
On Wed, Apr 07, 2010 at 02:04:03PM -0400, Mike Leone wrote:
Jeremy Allison had this to say:
Ok, I'm or with a wide links = insecure option, with
the man page expressing the opinion that enabling it is
insane :-).
But I'm not spending the time to code it up (but will
test and apply patches
Hi!
2010/4/7 Raymond Fagnon raymond_fag...@jabil.com:
What alternatives can I use for FRS, rsync?
glusterfs:
http://gluster.com/community/documentation/index.php/Main_Page
drbd:
http://www.drbd.org/
hth,
norberto
--
To unsubscribe from this list go to the following URL and read the
On Wed, Apr 07, 2010 at 02:58:20PM -0400, Raymond Fagnon wrote:
I am somewhat new to samba and have a couple of questions related to
DFS/FRS.
I understand that Samba supports DFS, but does it also support FRS with
DFS?
No.
Does anybody have a quick howto guide on how to setup DFS
On Wed, 07 Apr 2010 16:44:47 -0400
Gary Dale garyd...@rogers.com wrote:
I'm running Debian/Squeeze on an AMD64 system. For some reason they have
recently stopped shipping mount.cifs with the setuid bit set.
That would be because it was horribly unsecure.
Now it
appears that they have
Jeff Layton wrote:
On Wed, 07 Apr 2010 16:44:47 -0400
Gary Dale garyd...@rogers.com wrote:
I'm running Debian/Squeeze on an AMD64 system. For some reason they have
recently stopped shipping mount.cifs with the setuid bit set.
That would be because it was horribly unsecure.
Now
On Wed, Apr 7, 2010 at 9:39 PM, Jeff Layton jlay...@samba.org wrote:
Yes, we added a patch a while back to make it such that mount.cifs
would not allow itself to run as a setuid root program unless it that
check was compiled out.
This was done due to a rather constant stream of security
Quoting Jeff Layton (jlay...@samba.org):
It's also worthwhile to note that I've recently re-enabled the ability
to run mount.cifs as a setuid root program in the latest cifs-utils
release:
http://linux-cifs.samba.org/cifs-utils/
...you may want to switch to using that instead if you need
URL: http://build.samba.org/
--- /home/build/master/cache/broken_results.txt.old 2010-04-06
00:00:03.0 -0600
+++ /home/build/master/cache/broken_results.txt 2010-04-07 00:00:12.0
-0600
@@ -1,4 +1,4 @@
-Build status as of Tue Apr 6 06:00:02 2010
+Build status as of Wed Apr
The annotated tag, release-3-5-2 has been created
at 27eae9ba581aa583ce4c9c335f38b33cb616be83 (tag)
tagging a5e9217d5ca9eb7697e5fa855572bb49f0e644ac (commit)
replaces release-3-5-1
tagged by Karolin Seeger
on Wed Apr 7 09:48:23 2010 +0200
- Log
Author: kseeger
Date: 2010-04-07 02:19:17 -0600 (Wed, 07 Apr 2010)
New Revision: 1415
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=1415
Log:
Announce Samba 3.5.2
Karolin
Added:
trunk/history/samba-3.5.2.html
Modified:
trunk/devel/index.html
The branch, v3-5-test has been updated
via 827084b... WHATSNEW: Start release notes for Samba 3.5.3.
via 21c2500... VERSION: Raise version number up to 3.5.3.
from 05bc07c... WHATSNEW: Update changes since 3.5.1.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test
The branch, v3-5-stable has been updated
via 4edb5b0... WHATSNEW: Start release notes for Samba 3.5.3.
via d5ee522... VERSION: Raise version number up to 3.5.3.
from a5e9217... WHATSNEW: Update changes since 3.5.1.
The branch, master has been updated
via 4712940... s4-smbtorture: merge badname spoolss openprinter tests.
via 8bb30ff... s4-smbtorture: avoid passing down a full
test_spoolss_context to directory spoolss tests when not used.
from 3d113a6... Ensure we total up the correct
The branch, master has been updated
via 3fdebc0... s3: add comment about what the
FSCTL_QUERY_ALLOCATED_RANGES currently does
from 4712940... s4-smbtorture: merge badname spoolss openprinter tests.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log
The branch, master has been updated
via 95b9c48... s3-rpcclient: allow to define server_unc in
cmd_srvsvc_srv_query_info().
via f63c345... s4-smbtorture: test all types and also use a wellknown
builtin form name in RPC-SPOOLSS.
from 3fdebc0... s3: add comment about what
The branch, master has been updated
via 345fcf5... s4-smbtorture: test for invalid form flags in
RPC-SPOOLSS.
from 95b9c48... s3-rpcclient: allow to define server_unc in
cmd_srvsvc_srv_query_info().
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log
The branch, master has been updated
via 1ac654d... s4:WHATSNEW4.txt - further updates and corrections
via acfd025... s4:pyregistry.c - fix indentation
via fa4d91e... s4:provision - add a comment which explains why
paths.dns_keytab is stored without path reference
The branch, master has been updated
via eebc66c... s3-spoolss: Added a winreg_getform1 function.
via c7fb84a... s3-spoolss: Added a winreg_setform1 function.
via 0d46ab0... s3-spoolss: Added a winreg_deleteform1 function.
via 93575d6... s3-spoolss: Added a
The branch, master has been updated
via c76bd65... s4-samdb: Allow skipping global schema.
via feeedf4... s4-provision: Proper handling of exceptions, use SamDB
class but skip global schema.
via 21ab06f... s4-python: Move samdb_ntds_objectGUID to pydsdb.
via
The branch, master has been updated
via 40172f3... Test using (-1) for tid and sessionid in compound
related requests.
via 556b42a... On compound requests, MS-SMB2 says clients MAY use
0x for compound tid and 0x for compound sessionid
values. Cope with
The branch, master has been updated
via 8ae956d... s4:winbind/wb_server.c - fix indentation
from 40172f3... Test using (-1) for tid and sessionid in compound
related requests.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log
The branch, master has been updated
via 79fccc4... s4:registry - regf backend - fix it up regarding
REG_DWORD/REG_DWORD_BIG_ENDIAN_VALUES
from 8ae956d... s4:winbind/wb_server.c - fix indentation
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log
The branch, master has been updated
via baf81a0... LDB:python bindings - also empty LDB message elements
should have a python representation
from 79fccc4... s4:registry - regf backend - fix it up regarding
REG_DWORD/REG_DWORD_BIG_ENDIAN_VALUES
The branch, master has been updated
via 2cf3585... selftest: Display minutes and hours for duration.
from baf81a0... LDB:python bindings - also empty LDB message elements
should have a python representation
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log
The branch, master has been updated
via 7ccd680... s3: Fix bug 7327 -- Build fails while building without
kerberos
from 2cf3585... selftest: Display minutes and hours for duration.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log
The branch, master has been updated
via e5bb6d5... s4-waf: Fix 'waf dist' app name.
via 472860c... Move configure_check_unused script to root scriptdir, as
it is useful for both s3 and s4.
via 36474e5... s4: Remove unused pkg-config replacement in perl.
via
The branch, master has been updated
via 64957ce... LDB:sample_module - reintroduce accidentally removed
ldb_msg_add_fmt statement
from e5bb6d5... s4-waf: Fix 'waf dist' app name.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log
The branch, master has been updated
via 7f3116a... build: allow the waf build to work with python 3.0 and
3.1
from 64957ce... LDB:sample_module - reintroduce accidentally removed
ldb_msg_add_fmt statement
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log
The branch, master has been updated
via 0ec6f29... s4-smbtorture: minor typo in SetJob test in RPC-SPOOLSS.
via d9138f4... s3-spoolss: Fix an issue in _spoolss_DeleteForm.
via 65c5b78... s3-spoolss: Fix some issues in _spoolss_AddForm.
via 34ada1d... s3-spoolss: Fix
The branch, master has been updated
via 3413cf7... Start to plumb smb2 into the oplock system. Calls dummy
functions for now.
from 0ec6f29... s4-smbtorture: minor typo in SetJob test in RPC-SPOOLSS.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log
The branch, 1.0.112 has been updated
via 89d31da66ca3f15ed3a87851dea5422be949a2e4 (commit)
from 7bbf08373eea95d8a859043cf0f9063e77c8c133 (commit)
http://gitweb.samba.org/?p=sahlberg/ctdb.git;a=shortlog;h=1.0.112
- Log
The branch, master has been updated
via 2a79d976f975ec1ecbd06c210cbb5e6a93068cec (commit)
via 8825a8e3936e4ddfc1482d07a63a620249f01fe7 (commit)
via f3bf2ab61f8dbbc806ec23a68a87aaedd458e712 (commit)
from 685be0a7e830464e01dccc744362040a75bc96b5 (commit)
67 matches
Mail list logo