Re: [Samba] Bad configuration file

2012-06-05 Thread Aaron E.
In your schema directory,, grep for 1.3.6.1.4.1.1466.115.121.1.38 and try to narrow it down to which file the bad schema is in.. . On 06/05/2012 05:13 AM, Cédric Carlen wrote: Hello, I reup my topic, because i don't find something interessant on the Net. I've try to delete ppolicy.schema but

Re: [Samba] Basic questions regarding Samba capabilities

2012-05-21 Thread Aaron E.
First, I'm not sure if your speaking of samba4 or just upgrading your s3 domain structure .. my comments are based on samba4 hope it helps .. Policies: -- Group policy works with S4.. So whatever group policies you can set in windows DC you can set on the S4 dcs.. Scalability -- 1PDC and

Re: [Samba] Backup

2012-05-16 Thread Aaron E.
On 05/16/2012 11:19 AM, Jorell wrote: On 5/15/2012 12:36 PM, Aaron E. wrote: You can copy /usr/local/samba/private and /usr/local/samba/etc directories to the new machine with the new samba compiled install. You will also need to rsync /usr/local/samba/var/locks/sysvol to the new machine

Re: [Samba] Backup

2012-05-15 Thread Aaron E.
You can copy /usr/local/samba/private and /usr/local/samba/etc directories to the new machine with the new samba compiled install. You will also need to rsync /usr/local/samba/var/locks/sysvol to the new machine but you need to do this with ntacl support using rsync I have found works as it

Re: [Samba] s3 connect to s4 ads woes, need guidance..

2012-05-11 Thread Aaron E.
to the share via \\name so I strayed away from the keytab being the problem as it did work to some degree.. Thanks for the reply and keep up the good work Andrew!! On 05/10/2012 06:54 PM, Andrew Bartlett wrote: On Wed, 2012-05-09 at 09:37 -0400, Aaron E. wrote: The problem came right back after

Re: [Samba] s3 connect to s4 ads woes, need guidance..

2012-05-09 Thread Aaron E.
The problem came right back after I posted that it was fixed after being compiled... I've been doing much more troubleshooting trial and error with options in smb.conf.. Here is a debug of the machine.. Machine Details Samba4 Domain,, Samba3 Print server, Windows 2008 R2 [2012/05/09

[Samba] s3 connect to s4 ads woes, need guidance..

2012-05-04 Thread Aaron E.
I'm beating my head up against the wall here.. Need some extra eyes!!! Setup -- Samba4 Domain Controller and samba3 print server.. DNS FlatFile,, All dns works.. Issue, When I browse to the print Server vi \\IP-Address I am able to connect just fine.. When I browse using \\netbios-name I

Re: [Samba] s3 connect to s4 ads woes, need guidance..

2012-05-04 Thread Aaron E.
I would like to add that kinit works just fine also.. On 05/04/2012 11:51 AM, Aaron E. wrote: I'm beating my head up against the wall here.. Need some extra eyes!!! Setup -- Samba4 Domain Controller and samba3 print server.. DNS FlatFile,, All dns works.. Issue, When I browse to the print

Re: [Samba] s3 connect to s4 ads woes, need guidance..

2012-05-04 Thread Aaron E.
server distros as I run across this more and more as time goes on.. On 05/04/2012 11:54 AM, Aaron E. wrote: I would like to add that kinit works just fine also.. On 05/04/2012 11:51 AM, Aaron E. wrote: I'm beating my head up against the wall here.. Need some extra eyes!!! Setup -- Samba4 Domain

Re: [Samba] User's home folders

2012-05-02 Thread Aaron E.
No Problem You'll just need the proper filesystem iee ext3, ext4 on the partition your home folders will be on.. On 05/02/2012 10:52 AM, zingalo wrote: Hi, i have a debian server with 2 hd, sda and sdb. Debian is installed in sda1. I'll create an home folder for every user. He will login

Re: [Samba] User's home folders

2012-05-02 Thread Aaron E.
these directory will be mount from the clients after the user login. What are the possibility? - insert in /etc/fstab two line to mount the /user_data and /usersHomes? - or autofs? Thanks again On 05/02/2012 05:02 PM, Aaron E. wrote: No Problem You'll just need the proper filesystem iee

Re: [Samba] Users

2012-04-02 Thread Aaron E.
Make sure you can look up users with wbinfo if not fillow the samba4 winbind wiki.. On 03/30/2012 06:23 PM, sandy.napo...@eccmg.cupet.cu wrote: Hello list, Look at it chown pepe Temp chown: invalid user: `pepe' Where pepe es a users tha was create in active directory, it problem is in samba4

Re: [Samba] mode mask

2012-03-30 Thread Aaron E.
you can set default permissions on the share folder using something like this.. setfacl -m default:group:gid:perms folder -- default perms are inherited.. On 03/30/2012 07:29 AM, lejeczek wrote: actually it gets even more weird, from my perspective at least maybe it all works but not for

Re: [Samba] Is there a startup script for ubuntu 10.04.1 lts for samba4 alpha 18?

2012-02-23 Thread Aaron E.
I just took the smb3 init script and edited / commented out what wasn't relevent.. On 02/23/2012 02:04 AM, Michael Wood wrote: On 22 February 2012 23:13, timothy mcdanieltimnb...@gmail.com wrote: Is there a startup script for ubuntu 10.04.1 LTS for samba4 alpha 18? Please could someone

Re: [Samba] acl's, Samba4 and rw shares

2012-02-16 Thread Aaron E.
The permissions are slightly different for s4, as in you will be setting most of the folder perissions at the windows level. Youll need to make sure that user_xattr and acl is enabled for the filesystem. You can't really chmod per say, youll need to access the security tab for the share and

Re: [Samba] acl's, Samba4 and rw shares

2012-02-16 Thread Aaron E.
-technical IRC, was advised that samba-tool ntacl was more for scripting than actual management at this point in time.. I believe you'll get better results with tieing up a windows box.. On 02/16/2012 12:31 PM, steve wrote: On 02/16/2012 03:48 PM, Aaron E. wrote: The permissions are slightly

Re: [Samba] acl's, Samba4 and rw shares

2012-02-16 Thread Aaron E.
Setting the Permissions in windows is easy, browse to your server like so..start run \\server right click share properties, security tab -- if your unfamiliar with windows permissions I would read up on those.. being doable in linux,, hmm I'm sure it is but as I said I would create a

Re: [Samba] Joining a MS sevrer 2008 R2 machine to a Samba domain

2012-02-13 Thread Aaron E.
Unfortunately, 2008 servers require AD to function properly with licensing. This question has been posed a few times and that was the conclusion. It works with S4 but not s3,, I had a third party seem to get this working on a test server with adding extra samba/ldap schemas but have never

Re: [Samba] Joining a MS sevrer 2008 R2 machine to a Samba domain

2012-02-13 Thread Aaron E.
Nope, R1 was the version I was first working with.. On 02/13/2012 12:04 PM, Gaiseric Vandal wrote: Any chance you can downgrade to Win 2008 (not R2?) On 02/13/2012 11:21 AM, Stuart Bailey wrote: Thanks, I'll see if we can upgrade to S4. On Monday 13 February 2012 16:00:13 Aaron E. wrote

Re: [Samba] Samba4 user mapping into filesystem

2012-02-09 Thread Aaron E.
This may help you out.. https://wiki.samba.org/index.php/Samba4/Winbind On 02/09/2012 07:17 AM, Brantley Hobbs wrote: On Wed, Feb 8, 2012 at 5:31 PM, William Brown william.e.br...@adelaide.edu.au wrote: You likely don't have ACL's enabled on the filesystem that samba is sharing. You can

Re: [Samba] Remote Desktop Users Group

2012-02-07 Thread Aaron E.
This group should be predefined on the Windows server,, It is in the local users and groups (not domain).. I believe all servers have this group.. Create a domain group add this domain to the local group and add users to the domain group.. whalla.. On 02/07/2012 10:59 AM, Fergus M wrote: On

Re: [Samba] Joining Active Directory wbinfo -u

2012-02-02 Thread Aaron E.
I'll take a wild stab at this one though someone will probably correct me.. I have not set up winbind4 but this is my take on it.. First, check your /etc/nsswitch.conf file and verify that you have something similar to the following.. winbind needs to be there to work.. Unless it's changed in

Re: [Samba] TS licensing problem on samba domain

2012-01-30 Thread Aaron E.
I can confirm that this is an issue. We went through this to great lengths. I can also confirm that after you install the licensing it will not keep track of the issued calls properly. I also remember that since it isn't working properly that you may still be on the temporary install and after

Re: [Samba] (no subject)

2012-01-25 Thread Aaron E.
If I understand you properly, I believe you want to disable or enable pending on what you need these two settings in cupsd.conf Browsing on/off BrowseAllow None/All On 01/25/2012 11:28 AM, Yécine Allouache wrote: Hello, I'm on a debian Squeez and I use Samba 3.5.6 and CUPS 1.4.4 When I

Re: [Samba] (no subject)

2012-01-25 Thread Aaron E.
You could turn off the Windows Automatic printer find feature? That would stop the printers that are found and Tagged Auto I believe.. Windows searches the network for shared printers and will auto add the printer if this is turned on and they will be tagged as Auto.. My first post is

Re: [Samba] samba-tool samba3upgrade question

2012-01-12 Thread Aaron E.
Oh man well that is good to know!! I was assuming that if things should go real wrong I would be able to backpedal and do handstands!! On 01/12/2012 10:01 AM, Adam Tauno Williams wrote: Quoting Deyan Stoykov dstoy...@uni-ruse.bg: I'm looking into using this tool for migration to samba4,

Re: [Samba] Samba with LDAP Authentication

2012-01-11 Thread Aaron E.
Check out SASL library's On 01/10/2012 04:35 PM, steve wrote: On 01/10/2012 09:50 PM, Amit More wrote: Hello All, I want to authenticate existing LDAP users to samba shares. From what i have been reading, it seems like there are two ways to achieve this 1. Configure samba to use plaintext

Re: [Samba] Samba Folder Permissions

2012-01-03 Thread Aaron E.
Check your extended ACL permissions and verify that they are enabled for your kernel.. On 01/03/2012 09:05 AM, Stefan Horning wrote: Hello list members, my name is Stefan, this is my first post to this Mailinglist, so please bear with me. ;) I am working as a Network Administrator of a small

Re: [Samba] PDC file server on same machine?

2011-12-08 Thread Aaron E.
I have a s3.4 pdc with a bdc,, pdc is serving around 80 users on terminal services and another 50 fat clients,,, acts as the file server.. roaming profiles etc... I have no issues other than the network card only being 100mb,, I do have a throughput issues.. but that is on the table.. On

Re: [Samba] log.smbd vs smbd.log?

2011-11-22 Thread Aaron E.
that drove me nuts also, I just change it in the smb.conf, though it still seems to populate the smbd.log with some items, that might be just restarting the daemon.. On 11/22/2011 10:52 AM, John Heim wrote: Obviously this is not a very important question but I was wondering why the convention

[Samba] User authentication log

2011-11-10 Thread Aaron E.
We've changed the password for the administrator account, once it was changed a few minutes later the administrator account locked out, Something is set to log in as admin on our network whether it be a share set up with those credentials,, not sure at this point.. I'm having trouble finding

Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)

2011-10-14 Thread Aaron E.
Sounds like you've checked mostly all except your ldap backend... Check your LDAP DB for... (they will be in nix timestamp) sambaPasswordCanChange sambaPasswordLastSet sambaPasswordMustChange setup smbldap-tools package On 10/13/2011 11:00 PM, Jeffrey Chan wrote: I'm using OpenLDAP as

Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)

2011-10-12 Thread Aaron E.
Just cuirous are you using pam or ldap backend? On 10/12/2011 09:22 AM, Marco Ciampa wrote: On Wed, Oct 12, 2011 at 12:15:16PM +0800, Jeffrey Chan wrote: Hi all, I've posted this a month ago but haven't gotten a reply. Can anyone please help? - Jeff On Mon, Aug 29, 2011 at 5:14 PM,

Re: [Samba] samba with nfs mount in path and MS Office App's

2011-10-12 Thread Aaron E.
I believe I remember seeing a similar thread and it was disabling oplocks in samba ? On 10/12/2011 10:30 AM, free...@gmx.ch wrote: Hi Listmembers Problem: Windows Clients having problems with Microsoft Office App's (Excel, Word) when the files are on the Samba Share documents (which is

Re: [Samba] Moving Domains - profiles question

2011-08-12 Thread Aaron E.
I'm gong to go out on a limb here and say the process will need tested on your end. In my experience what has worked for one site has not worked for another. It is all about getting the procedure right for your site. That being said the procedure you linked usually works pretty well when

Re: [Samba] How to detect active users

2011-07-27 Thread Aaron E.
clear the logs and monitor for a few days,, If there is not real activity just shut down the service and see if anyone complains they can't access something.. After a few days/weeks/months pull the server. Might not be the perfect scenario but if smbstatus isn't displaying what you need then

Re: [Samba] Windows printer drivers

2011-06-27 Thread Aaron E.
First you have to install a Printer in Cups, then reload samba. Verify you can see the shared printer through windows.. You'll need to use the net rpc command to grant the rights to add the print drivers to the $print share. Read the following section for print rights.. Administering User

Re: [Samba] filesystem of choice?

2011-06-24 Thread Aaron E.
I vote for ext4 also, we have been running on that for a few years with no issues.. On 06/24/2011 10:22 AM, Gary Dale wrote: On 24/06/11 09:46 AM, John G. Heim wrote: I'm setting up a new linux fileserver and I was wondering if samba likes one filesystem more than another. I have to format a

Re: [Samba] tkey-gssapi-credential and bind (Samba4)

2011-06-21 Thread Aaron E.
In my experience this is due to gssapi not being compiled to the correct directory for bind.. I also used 11.04 and my compile path was --with-gssapi=/usr/include/gssapi,, instead of /usr On 06/21/2011 10:45 AM, Marcel Ritter wrote: Hi Mauricio, this is usually caused by one of 3 things:

Re: [Samba] Restricting logins using pam_winbind require_membership_of ?

2011-06-17 Thread Aaron E.
In the samba share definition you could add valid users = +group this should have the effect your looking for if I understand you correctly. If not my apologies.. On 06/17/2011 12:28 PM, John McNulty wrote: Hi. I have some shares on a server that are offered to specific Active Directory

Re: [Samba] net ads join

2011-05-27 Thread Aaron E.
I believe it takes the name from either the, netbios name = or server string = x in the smb.conf file. On 05/27/2011 05:50 AM, fsos...@gmail.com wrote: Hello, I would like to know where samba takes the computer name to join the AD domain. Is it from classic computer name DNS

[Samba] Winbind Trust -- grr

2011-05-25 Thread Aaron E.
First, Thanks for any and all help I can't seem to figure out what I need to do, I've been fighting this for a month and am now beating my head off my desk with no solution to be found. I've read others having this issue but they were all older versions.. I am using 3.5.4,, Please read

Re: [Samba] Winbind Trust -- grr

2011-05-25 Thread Aaron E.
. This is not a solution but may be will help locate the problem. On 05/25/2011 12:16 PM, Aaron E. wrote: First, Thanks for any and all help I can't seem to figure out what I need to do, I've been fighting this for a month and am now beating my head off my desk with no solution to be found. I've read

Re: [Samba] Winbind Trust -- grr

2011-05-25 Thread Aaron E.
I guess the client/server question is a moot point as I don't even have winbind running on my DC.. On 05/25/2011 04:09 PM, Aaron E. wrote: Ah, a new avenue to look down.. winbind cache was 300, idmap cache is set to 7 days so I changed them both to 60 seconds restarted services and rejoined

[Samba] security = user vs security = domain and winbind trust

2011-05-19 Thread Aaron E.
If you require and more information let me know and thanks in advance .. I'm working with dansguardian and squid with ntlm_auth. I join squid to the domain and it works for 7 days. After 7 days to the minute from the time I joined the server to the domain winbind decides it has lost its

Re: [Samba] Issue with Bind

2011-05-12 Thread Aaron E.
Glad I could help, as far as your last question, I'll have to let someone else answer that one.. I don't know enough about it to make that determination. On 05/12/2011 12:09 PM, fe...@epepm.cupet.cu wrote: Thanks a lot for your hint. I finally made it in Debian Lenny (with Samba4 alpha15 and

Re: [Samba] Issue with Bind

2011-05-11 Thread Aaron E.
did you compile bind with gssapi? my compile options with ubuntu are this..Verify your pointing to the proper path when compiling for gssapi. ./configure --prefix=/usr/local/bind9 --with-gssapi=/usr/include/gssapi verify that you have the proper environments in bind,,, I have this in the init

Re: [Samba] Could not convert sid ..... to ..... gid

2011-05-05 Thread Aaron E.
See what wbinfo --name-to-sid (group) reports for both groups , also did you change the ACL in squid to point to the new group? On 05/05/2011 09:32 AM, olaf.bo...@hvbg.hessen.de wrote: Hi! More than a week ago I sent the below-mentioned message but did not receive any answer. I think that the

Re: [Samba] Could not convert sid ..... to ..... gid

2011-05-05 Thread Aaron E.
Once you try that then try converting the opposite like so.. wbinfo --sid-to-uid (sid from previous step) On 05/05/2011 03:16 PM, Aaron E. wrote: See what wbinfo --name-to-sid (group) reports for both groups , also did you change the ACL in squid to point to the new group? On 05/05/2011 09:32

[Samba] What are others Doing?

2011-05-04 Thread Aaron E.
If you read samba-technical sorry for the double read, I accidentally posted this over there earlier.. I'm still working on possible upgrade to samba4 and will be in testing on that for a long while, but in the mean time I need to at least get a Windows 2008 Terminal

Re: [Samba] Cannot set ACL for Authenticated Users

2011-04-29 Thread Aaron E.
Does the file system your working with support ACL? IS it set to use acls in the /etc/fstab? On 04/29/2011 06:24 AM, Arnaud Lesauvage wrote: Hi list ! I have found someone having a similar problem back in 2007 (http://lists.samba.org/archive/samba/2007-April/131574.html), but as I understand

Re: [Samba] Cannot set ACL for Authenticated Users

2011-04-29 Thread Aaron E.
Windows PDC? Does wbinfo -u return a list of domain users? On 04/29/2011 09:44 AM, Arnaud Lesauvage wrote: Le 29/04/2011 14:45, Aaron E. a écrit : Does the file system your working with support ACL? IS it set to use acls in the /etc/fstab? Hi Aaron, thanks for your answer. Yes, it is set

[Samba] researching options need advice

2011-04-05 Thread Aaron E.
Our current infrastructure is Openldap back end with samba3 pdc. With 2003 terminal servers Using poledit.exe with policies.. We are in need of upgrade of our terminal servers. I cannot get the old way of policies to lock the server down as I need to function on Windows Server 2008. What

Re: [Samba] researching options need advice

2011-04-05 Thread Aaron E.
Another Idea I was thinking was to migrate to Windows AD then Migrate to Samba4 but this seems like a long process.. Thoughts? On 04/05/2011 11:58 AM, Aaron E. wrote: Our current infrastructure is Openldap back end with samba3 pdc. With 2003 terminal servers Using poledit.exe with policies

Re: [Samba] Samba4 Ubuntu Init Scripts

2011-04-01 Thread Aaron E.
here's one I put together and it works pretty good. I took parts from various net research and came up with this, I have since gathered a better understanding and probably should rewrite it without the killall statement but Ill save that for another day.. Edit paths accordingly.. #!

[Samba] Information needed,, wide open to ideas.. ACL's

2011-03-23 Thread Aaron E.
I'm looking to migrate to samba4 AD domain from samba3 but this will not happen over night, I plan on slowly migrating which brings me to acl issues, I will be creating a new domain but still need to have a single data store. IS this something that can just have a domain trust built? Can I

[Samba] samba3.5.4 windows 2008 R1 32bit

2011-03-16 Thread Aaron E.
What is the trick to getting a Windows 2008 R1 32bit server to connect to a samba print share? Error = Windows could no connect to printer, Operation could not be completed (error 0x6d1) My configuration is this.. Samba4 PDC Samba3 print server windows 2008 TS server Everything

[Samba] alpha 15 ?

2011-03-11 Thread Aaron E.
I've seen people mention an Samba4 Alpha 15, though I can't seem to find it on the samba ftp. Where can I get the source for this if it is available? Thanks Aaron -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] CentOs 5.5 Glusterfs 3.1.0 Samba 3.5 MSOffice Files

2011-02-08 Thread Aaron E.
Is this possibly a caching issue? I had some problems with nfs file share that sounded somewhat like this and it turned out to be caching. I disabled caching on the mount and it all worked perfectly. On 02/08/2011 10:16 AM, Volker Lendecke wrote: On Tue, Feb 08, 2011 at 03:51:26PM +0100,

[Samba] Conversion to Samba4

2011-02-01 Thread Aaron E.
I'm looking for direction on converting from openldap / samba3 backend to samba4. At this point I've got my samba4 domain provisioned and working and I now want to start importing users but for the life of me I can't find any information on the net about the process. Few questions. Do I

Re: [Samba] how to map shared folders when start user profile in XP

2010-11-19 Thread Aaron E.
I believe you need to put the .bat scripts in a subdirectory of netlogon/scripts in order for the script to be found and run... On 11/19/2010 08:05 AM, Daniel Müller wrote: I think you meant script per each user? Then you need exactly logon script = %u.bat %u substitutes the login user name.

Re: [Samba] SAMBA accessible with hostname only on local subnet

2010-11-15 Thread Aaron E.
Other items to check are, 1. can you ping by hostname 2. can you ping by ip a. if you cannot by hostname then you have a DNS issue, 3. What type of firewall is between? Check the configuration.. 4. Check the firewall configuration on your samba server. (fedora has most items blocked by

Re: [Samba] SAMBA accessible with hostname only on local subnet

2010-11-11 Thread Aaron E.
I would verify the routing table on the server. This sounds like the default gateway isn't set or the server doesn't know how to reach the other networks. try # route and examine the table. On 11/11/2010 06:17 AM, *...@ppu wrote: hi all, i have integrated SAMBA with active directory and

[Samba] Mandatory Profile

2010-11-11 Thread Aaron E.
I'm using samba 3.4 with ldap backend, I'm trying to get a mandatory profile working with 4 of my floor machines. I can't seem to get the proper permissions in order for all 4 users to pull this profile. Only the owner of the profile can use even if I set the permissions to 777 on the

Re: [Samba] ntlm_auth = NT_STATUS_NO_LOGON_SERVERS: No logon servers (0xc000005e)

2010-11-11 Thread Aaron E.
security = domain or security = user? I had problems with winbind using security = user.. I can't remember properly it's been a while.. On 11/11/2010 04:22 PM, Rowley, Mathew wrote: I had to downgrade samba on a rh5.5 instance due to ntlm_auth not working properly: