Re: [Samba] nss_winbind / offline logon

2009-10-26 Thread Richard Foltyn
Petteri Heinonen wrote: Thanks Steve, but didn't help. I have tried several combinations of NOTFOUND and SUCCESS etc here. Also, this is what man page of nsswitch.conf says: success No error occurred and the wanted entry is returned. The default action for

[Samba] Re: Error when subscribing to list

2009-05-06 Thread Richard Foltyn
jamrock wrote: Is this normal? It's a self-signed certificate as the samba project likely does not want to pay several hundred USD per year for an official certificate. So yes, this is normal. -- To unsubscribe from this list go to the following URL and read the instructions:

[Samba] Re: Bug in sernet RPM's postun?

2009-04-28 Thread Richard Foltyn
Karolin Seeger wrote: Hi Richard, Please report everything concerning the SerNet packages directly to sa...@sernet.de. But I think in this case, the samba.org packages are affected as well. Currently, I couldn't reproduce that on a RHEL 5.2 server. I have to setup a CentOS box to track that

[Samba] Re: select network interface

2009-04-28 Thread Richard Foltyn
Petteri Larjos wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I have two interfaces (eth1 and eth1:1) on my computer. I would like to change password on remote server with swat but it fails because swat is using interface eth1:1 to connect remote host and remote host does not

[Samba] Bug in sernet RPM's postun?

2009-04-25 Thread Richard Foltyn
Hi, I was just wondering whether this possible bug with the Sernet Samba3 RPMs for CentOS 5 is known, since it has not yet been fixed. When uninstalling the Sernet RPMs for Samba3 (in this case Samba 3.2.x) the %postun scriptlet fails every time with: # rpm -e samba3-3.2.0-36

[Samba] Re: Authentication

2009-04-24 Thread Richard Foltyn
Natanahel wrote: My question is: Can I use Samba with authentication in LDAP using POSTGRESQL like a Database of LDAP??? Actually this question is totally unrelated to Samba since Samba does not care what backend your LDAP server uses. Therefore, find an LDAP server that support Postgres

[Samba] Re: Tool to extract LDAP

2009-04-23 Thread Richard Foltyn
Jimmy PIERRE wrote: Greetings, Kindly give me some advice on what tools that you use to extract a LDAP export from SAMBA into a CSV or better? Cheers, Jimmy I assume you are using OpenLDAP, so why not use the tools that come with it: slapcat to dump databases, slapadd to restore a

[Samba] Re: Simple Permission Issue

2009-04-21 Thread Richard Foltyn
Joseph L. Casale wrote: I haven't really done a lot with file sharing in Samba and seem to be missing something here. I have a folder, /Share that has [r...@host ~]# getfacl /Share / getfacl: Removing leading '/' from absolute path names # file: Share # owner: root # group:

Re: [Samba] Failed to retrieve password from secrets.tdb with anonymous bind

2008-09-10 Thread Richard Foltyn
Why don't you just *create* a dedicated samba DN in LDAP which Samba can use? This is a much more secure setup than granting read or even write access to passwords to unauthenticated external connections. The official smbldap-tools HOWTO even suggests how to do this: 1) Create an LDAP entry

Re: [Samba] Samba Group issues - LDAP

2008-09-05 Thread Richard Foltyn
On 9/5/08, JB Hewitt - Blade [EMAIL PROTECTED] wrote: I'm trying to find a command with net to show what users belong into groups. I don't use winbind so it's a bit tricky to find out. You can do this with net rpc group members group_name even without winbind. I would carefully inspect the

Re: [Samba] Missing files and folders on Vista

2008-09-05 Thread Richard Foltyn
Actually, I doubt this is a Windows issue. As Antoine pointed out, the number of folders displayed changed after a Samba update, why would this effect Windows Explorer limits? Anyway, I just tested this on both Gentoo/Samba 3.0.32 and CentOS 5/Samba 3.2.3 with 1100 subfolders and WinXP 32bit /

[Samba] Anonymous connection to Samba PDC?

2008-09-03 Thread Richard Foltyn
Hi, is there a way to anonymously connect a Windows client to a Samba PDC? I have some random clients which I currently don't want to add to the domain, but would still like them to have access to one share. For example, I have: [skener] path = /var/spool/scanner/scans browseable

Re: [Samba] User permissions - nil authorised users

2008-09-03 Thread Richard Foltyn
Hi, On Wed, Sep 3, 2008 at 4:37 PM, dfirth [EMAIL PROTECTED] wrote: I had thought that user security needed to match the users actual user name and password in windows. So I was surprised by this behaviour. This is not correct. security = user only means that users authenticate themselves by

Re: [Samba] Anonymous connection to Samba PDC?

2008-09-03 Thread Richard Foltyn
Thanks a lot, once again. On Wed, Sep 3, 2008 at 5:15 PM, John H Terpstra [EMAIL PROTECTED] wrote: In your smb.conf [global] section add: map to guest = bad user - John T. -- John H Terpstra Don't do as I do; Show me better! - Anonymous. -- To unsubscribe from this list go to the

[Samba] Problem establishing interdomain trust

2008-08-03 Thread Richard Foltyn
Hello group, I have 2 Samba PCDs w/ LDAP + winbind called FILESERVER and FUNDUS-SRV for the domains PROFICON and FUNDUS, respectively. In PROFICON I created a trust account for FUNDUS using net rpc trustdom add FUNDUS passwd -U proficon\\administrator which creates the LDAP entry: dn:

Re: [Samba] second samba pdc

2008-06-11 Thread Richard Foltyn
On 6/9/08, Sven Buchstaller [EMAIL PROTECTED] wrote: Hello List, I have 2 samba domain on 2 physical Servers but the User Administration is over 1 LDAP Server. At the moment i become some errors on my first PDC box: I have the same setup, using 2 PDCs and one OpenLDAP server. However, for

Re: [Samba] do i need posix users/groups in ldap

2008-06-11 Thread Richard Foltyn
Coming to think of it, I actually answered something that's not really related to you question, so please just ignore my post. On 6/11/08, Richard Foltyn [EMAIL PROTECTED] wrote: On 6/6/08, Collen Blijenberg [EMAIL PROTECTED] wrote: So correct me if i'm wrong, in order to use the ldap backend

Re: [Samba] Mapping of Unix groups to Samba user permissions

2008-05-30 Thread Richard Foltyn
On 5/30/08, Lars Poulsen [EMAIL PROTECTED] wrote: Unfortunately, the group-write permission will not propagate that way, so a cron job runs twice a day to set group-write on all directories with the tree of each share. BTW, you don't need a cron job to do that since samba can manage this for

Re: [Samba] Browsing with 2 PDCs on same subnet

2008-05-29 Thread Richard Foltyn
I did just that and it seems to work. WINS has no understanding of the domain security context, as I see it, and simply maps netbios names (including service descriptors) to IP addresses. So having two PDCs in WINS will result in something like DOMAIN11c DOMAIN21c and there is no conflict.

[Samba] Browsing with 2 PDCs on same subnet

2008-05-28 Thread Richard Foltyn
Hi group, after having read the browsing chapters in both the Samba HOWTO and in Using Samba, I'm still not sure about browsing and two Samba PDCs on the same subnet. If both PDCs are DMBs and LMBs for their respective domains, will I have a browsing conflict? The docs say there should be only