Re: [Samba] Samba over IPX

2011-04-12 Thread Mike Leone
On 4/12/2011 11:00 AM, Gaiseric Vandal wrote: Even Novell Netware made the switch from IPX/SPX to TCP/IP years ago as their preferred network stack. Netware 5, in ... 1999, IIRC. And netware itself is end-of-lifed. That I think would the the final nail for IPX. Shame. I always liked

Re: [Samba] few quick domain questions

2010-12-23 Thread Mike Leone
On 12/23/2010 9:11 AM, Gaiseric Vandal wrote: 1. Domain Admins, Domain Computers etc Those are well known groups. Do you have any windows servers or are they just samba servers?If you have, or plan to have, any Windows machines in the domain you are probably better off setting up

Re: [Samba] Guest shares in an ADS security model

2010-10-22 Thread Mike Leone
On 10/22/2010 2:12 PM, Michael Wood wrote: On 22 October 2010 19:36, Madhusudan Singhsingh.madhusu...@gmail.com wrote: Ok. In my mind, guest access should be just that - no authentication. Well, I believe that it is. But that you need to enable the Guest account in AD for it to be allowed.

Re: [Samba] ARGH... once again samba causes permission errors.

2010-06-01 Thread Mike Leone
On 6/1/2010 12:03 PM, John H Terpstra had this to say: # cat /etc/samba/smb.conf [global] workgroup = CYTE.COM Do NOT use a '.' character in a workgroup/domain name. In MS Windows NT4 (the protocols Samba3 implements) this is not a supported character. It would be better to just

Re: [Samba] unable to join to a Samba4 domain

2010-05-24 Thread Mike Leone
On 5/24/2010 3:39 PM, Tomasz Chmielewski had this to say: Am 23.05.2010 13:51, Lukasz Zalewski wrote: On 21/05/2010 16:56, Tomasz Chmielewski wrote: Am 21.05.2010 06:25, Andrew Bartlett wrote: When you provisioned samba4 it generated sample bind and zone config for that dc, have a look at

Re: [Samba] Oplocks - when do they help

2010-05-23 Thread Mike Leone
On 05/23/2010 10:11 AM, Volker Lendecke wrote: On Sat, May 22, 2010 at 01:21:41PM -0400, Fred Kienker wrote: I've been setting up Samba servers for years under the impression (delusion) that Samba can't handle multiple users on Access .mdb files correctly with op locks turned on. Has this

Re: [Samba] Moving to another idmap backend

2010-05-21 Thread Mike Leone
On 05/21/2010 06:32 PM, Nick Irvine wrote: Hi all, I've got winbind up and running on two servers, but the UID/GIDs don't match up. After educating myself a little, I think I would like to use the idmap_rid backend. I have set up the smb.conf's accordingly, but after restarting samba/winbind

Re: [Samba] Still can't mount Samba shares from other Samba server - some slight progress

2010-05-13 Thread Mike Leone
/Administrator:/bin/sh DACRIB+krbtgt:*:10006:1:krbtgt:/home/DACRIB/krbtgt:/bin/sh DACRIB+turgon:*:10003:1:Mike Leone:/home/DACRIB/turgon:/bin/bash DACRIB+leonem:*:1:1:Leone, Mike:/home/DACRIB/LeoneM:/bin/bash DACRIB+servicerunner:*:10005:1:ServiceRunner:/home/DACRIB

[Samba] Still can't mount Samba shares from other Samba server

2010-05-12 Thread Mike Leone
/Administrator:/bin/sh DACRIB+krbtgt:*:10006:1:krbtgt:/home/DACRIB/krbtgt:/bin/sh DACRIB+turgon:*:10003:1:Mike Leone:/home/DACRIB/turgon:/bin/bash DACRIB+leonem:*:1:1:Leone, Mike:/home/DACRIB/LeoneM:/bin/bash DACRIB+servicerunner:*:10005:1:ServiceRunner:/home/DACRIB/ServiceRunner

Re: [Samba] smb.conf works for 3.4.0; doesn't work for 3.4.7

2010-05-08 Thread Mike Leone
On 05/08/2010 04:00 AM, Christian PERRIER wrote: Quoting Mike Leone (tur...@mike-leone.com): directories. Even tho Ubuntu 10.04 seems to have the /etc/pam.d files already configured for samba, I copied over the common-account, common-auth, common-password, common-session files from

Re: [Samba] smb.conf works for 3.4.0; doesn't work for 3.4.7 - RESOLVED

2010-05-08 Thread Mike Leone
-Booter: DACRIB+administrator:*:10002:1:Administrator:/home/DACRIB/Administrator:/bin/sh DACRIB+krbtgt:*:10006:1:krbtgt:/home/DACRIB/krbtgt:/bin/sh DACRIB+turgon:*:10003:1:Mike Leone:/home/DACRIB/turgon:/bin/bash DACRIB+leonem:*:1:1:Leone, Mike:/home/DACRIB/LeoneM:/bin/bash

[Samba] smb.conf works for 3.4.0; doesn't work for 3.4.7

2010-05-07 Thread Mike Leone
Some may remember all my issues trying to get one Samba server to mount shares from another Samba server. Well, I decided to completely reformat my laptop with Ubuntu 10.04, and start over (leaving the other Samba server at Ubuntu 9.10) (to recap - I have a Win2003 AD (not R2), with SFU

Re: [Samba] Getent passwd and getent group fail / Samba 3.5.2

2010-05-04 Thread Mike Leone
On 5/4/2010 4:20 AM, Oliver Weinmann had this to say: Hi all, I just stepped over a problem where I can't add a local user to an AD group. Running getent passwd and getent group doesn't display the AD users. Wbinfo -g and -u work fine. Here is my smb.conf: snip In the log I get this error

Re: [Samba] smbclient -k works; mount -t cifs does not

2010-05-04 Thread Mike Leone
On 5/4/2010 3:18 PM, Rob Townley had this to say: $ sudo mount -t cifs //dual-booter/TestShare /mnt -o sec=krb5 mount error(2): No such file or directory Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) Try using the FQDN of the server in the UNC. For instance:

Re: [Samba] smbclient -k works; mount -t cifs does not

2010-05-04 Thread Mike Leone
On 05/04/2010 04:43 PM, Helmut Hullen wrote: Hallo, Mike, tur...@mike-leone.com meinte am 04.05.10 in Samba zum Thema Re: [Samba] smbclient -k works; mount -t cifs does not: $ sudo mount -t cifs //dual-booter/TestShare /mnt -o sec=krb5 mount error(2): No such file or directory

Re: [Samba] [PLUG] Problems using multiple Samba servers in a Win2003 AD domain - more

2010-05-03 Thread Mike Leone
On 05/03/2010 04:14 PM, Dale Schroeder wrote: On 05/02/2010 10:32 PM, Mike Leone wrote: Here's what I don't understand - the user I am trying to mount shares with, does not show up the same on both systems, yet the smb.confs are the same. From workhorse: $ getent passwd snip DACRIB

[Samba] smbclient -k works; mount -t cifs does not

2010-05-03 Thread Mike Leone
I am confused (nothing new there ...). I have 2 Ubuntu 9.10 Samba servers. I am trying to mount a share from the other (i.e., workhorse is trying to mount a share on dual-booter). If I specify a smbmount command with a -k option, I can mount the share: tur...@workhorse:~$ klist Ticket cache:

[Samba] Problems using multiple Samba servers in a Win2003 AD domain

2010-05-02 Thread Mike Leone
I've been at this for days, and making no headway. It's very discouraging. I have a Win2003 domain, that has the Services for Unix extensions installed. I am trying to have multiple Samba servers as domain members. (in my case, one desktop sharing files, and one laptop, accessing the shares). And

Re: [Samba] [PLUG] Problems using multiple Samba servers in a Win2003 AD domain - more

2010-05-02 Thread Mike Leone
Here's what I don't understand - the user I am trying to mount shares with, does not show up the same on both systems, yet the smb.confs are the same. From workhorse: $ getent passwd snip DACRIB+turgon:*:10007:10012:Mike Leone:/home/DACRIB/turgon:/bin/bash $ getent group snip DACRIB+domain

[Samba] Problems mounting shares from a samba server

2010-05-01 Thread Mike Leone
I have an Active Directory 2003 domain, named DACRIB. This domain has Windows members, and 2 Samba servers as members. From one Samba server (DUAL-BOOTER), I can mount shares from the Windows clients on the domain. But I can not mount shares from the other Samba server; I always get Permission

Re: [Samba] wbinfo -a fails plaintext auth; passes challenge/response - HALF SOLVED ?

2010-04-30 Thread Mike Leone
A bit brute force, but I semi-solved it. I left the domain. I deleted all files in /var/lib/samba. I rejoined domain. net ads testjoin - works getent passwd - works wbinfo -u - works wbinfo -g - works wbinfo -t - works wbinfo -a DACRIB+turgon .. half works. $ wbinfo -a DACRIB+turgon Enter

Re: [Samba] wbinfo -a fails plaintext auth; passes challenge/response

2010-04-29 Thread Mike Leone
Any clues? I also can't mount shares, I'm guessing it's all related: $ sudo mount -t smbfs -o username=turgon,password=*** //workhorse/OldHome /mnt mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) The turgon account is a Domain Admin, not to

[Samba] wbinfo -a fails plaintext auth; passes challenge/response

2010-04-28 Thread Mike Leone
Once again, I am trying to add a machine to my Win2003 AD (that has Services for Unix installed). I am using Xubuntu 9.10, and samba 3.4.0. I set up Kerberos, and am getting a ticket. I have successfully joined the domain. # net ads join -U administrator Enter administrator's password: Using

Re: [Samba] Can join AD 2003 domain; can't list shares from other servers

2010-04-24 Thread Mike Leone
On 04/24/2010 03:14 PM, grant little wrote: maybe, but have you also tried smbclient -L workhorse -Uturgon Yep. No joy. $ smbclient -L workhorse -U turgon Enter turgon's password: session setup failed: NT_STATUS_ACCESS_DENIED On Fri, Apr 23, 2010 at 3:58 PM, Michael Leone

Re: [Samba] Can join AD 2003 domain; can't list shares from other servers

2010-04-24 Thread Mike Leone
On 04/24/2010 03:36 PM, grant little wrote: Also you say that other systems work fine. Are they the same version of samba on the same OS and version? As in are we comparing apples with apples... I only have one other Linux machine with Samba. The other machine: $ lsb_release -a No LSB modules

[Samba] wbinfo -t fails

2010-04-24 Thread Mike Leone
This used to work ... r...@workhorse:/var/log/samba# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_ACCESS_DENIED (0xc022) Could not check secret r...@workhorse:/var/log/samba# net ads info LDAP server: 10.0.0.60 LDAP server name: dim-win2300.DaCrib.local

Re: [Samba] Samba: trust fails - MORE

2010-04-24 Thread Mike Leone
So I ended up doing a net ads leave which removed the machine account from Active directory. Now I am trying to re-add it, but it seems to still be hanging around in Kerberos ... r...@workhorse:/etc# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administra...@dacrib.local Valid

Re: [Samba] Samba: trust fails - RESOLVED

2010-04-24 Thread Mike Leone
Well, after much gnashing of teeth, and rough words, I was finally able to get it to work. I have successfully re-joined it to the domain. tur...@workhorse:~$ wbinfo -t checking the trust secret via RPC calls succeeded tur...@workhorse:~$ sudo net ads testjoin Join is OK and checking from

[Samba] Can't mount samba shares

2010-04-24 Thread Mike Leone
Honestly, it's enough to make you scream. :-( I can't seem to mount a samba share: $ mount -t smbfs //workhorse/OldHome /network -o username=DACRIB+turgon,password=xx mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) (I'm logging into this

[Samba] Can join AD 2003 domain; can't list shares from other servers

2010-04-23 Thread Mike Leone
I set up an old laptop with Xubuntu 9.10. I configured Samba as to work with my Win2003 AD domain that has MS Services for Unix installed. I can get a Kerberos ticket. I successfully added the laptop to the AD domain. wbinfo -a shows me all users, domain and local. wbinfo -g shows me all

Re: [Samba] Can join AD 2003 domain; can't list shares from other servers - MORE

2010-04-23 Thread Mike Leone
More info - it now appears that the problem is with workhorse, not the laptop. I *can* successfully do a smbclient -L to the other, actual Windows stations on the LAN: $ smbclient -L dim-win2300 Enter turgon's password: Domain=[DACRIB] OS=[Windows Server 2003 3790 Service Pack 2]

Re: [Samba] unix exts / wide links / symlinks

2010-04-07 Thread Mike Leone
Jeremy Allison had this to say: Ok, I'm or with a wide links = insecure option, with the man page expressing the opinion that enabling it is insane :-). But I'm not spending the time to code it up (but will test and apply patches from people who do :-). So then this: It is a big mistake to

[Samba] IDMAP question

2010-04-07 Thread Mike Leone
I have a Samba 3.4.0 server (from Ubuntu 9.04), as a member server in my Win2003 AD (which has MS Services for Unix 3.5 installed). All seems well, in that it is properly joined to my AD, I've got it all configured so that domain members can log into the Linux servers using their domain

Re: [Samba] [PLUG] Ongoing saga with Samba and AD

2010-03-28 Thread Mike Leone
What is the output of `getent passwd $user` ? I wonder if your shell is not set to an sh variant. # getent passwd DACRIB+ldap-proxy DACRIB+ldap-proxy:*:10006:10012:LDAP Proxy:/home/DACRIB:/bin/false I suppose it's that /bin/false that's doing it? How can I change that, only for my AD domain

[Samba] Problems with winbind and AD using Ubuntu 9.10

2010-03-27 Thread Mike Leone
Greetings! I am having a bit of an issue using Ubuntu 9.10 and AD 2003. AD domain = dacrib.local AD server = dim-2300.dacrib.local IP = 10.0.0.60 Samba server = workhorse.dacrib.local IP = 10.0.0.20 I have been following https://help.ubuntu.com/community/Samba/Kerberos, and my Kerberos seems

Re: [Samba] Problems with winbind and AD using Ubuntu 9.10 - MORE

2010-03-27 Thread Mike Leone
D'OH! So sorry, I had forgotten to restart the services. I am properly seeing all users and groups from wbinfo and from getent passwd and getent group. Boy, do I feel stupid. :-) Sorry for the waste of bandwidth. -- To unsubscribe from this list go to the following URL and read the

[Samba] Problems logging in when authenticating against Active Directory

2010-03-27 Thread Mike Leone
Greetings! I am having a bit of an issue using Ubuntu 9.10 and AD 2003. AD domain = dacrib.local AD server = dim-2300.dacrib.local IP = 10.0.0.60 Samba server = workhorse.dacrib.local IP = 10.0.0.20 I joined the server to AD, and I can see all the domain users and groups when I do a getent

Re: [Samba] [PLUG] Ongoing saga with Samba and AD

2010-03-27 Thread Mike Leone
Ben Love had this to say: * Mike Leone wrote on [2010-03-27 22:02:38 -0400]: I tried to log on as DACRIB+administrator at the physical console. I was prompted twice for my password (dunno if that's because my password has a ! in it or not). Then it starts to login. I see the motd. I see