Re: [Samba] Winbind authentication and wbinfo -i user no longer work after uprading to 3.6.1

2011-12-28 Thread Robert LeBlanc
by Robert LeBlanc as Debian Bug # 652679 - http://bugs.debian.org/cgi-**bin/bugreport.cgi?bug=652679http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652679 Quote Package: winbind Version: 2:3.6.1-3 Severity: important Dear Maintainer, After upgrading to 3.6.1 I am no longer able to login

Re: [Samba] Winbind authentication and wbinfo -i user no longer work after uprading to 3.6.1

2011-12-28 Thread Robert LeBlanc
at the Academy Awards. Merry Christmas to all. [];o{P Dale On 12/21/2011 11:42 PM, Robert LeBlanc wrote: I tried to add idmap config DOMAIN : default = yes and it does not help. I'm using hash. I've found some interesting things that I've included in bug 8676 https://bugzilla.samba.org

Re: [Samba] Default Hidden Disk Shares

2010-07-05 Thread Robert LeBlanc
. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Mon, Jul 5, 2010 at 2:43 AM, Atkinson, Robert ratkin...@tbs-ltd.co.ukwrote: Robert, the discussion was around the hidden ‘$’ shares, not normal ones. Rob. *From:* Robert LeBlanc [mailto:rob

Re: [Samba] Default Hidden Disk Shares

2010-07-02 Thread Robert LeBlanc
? This is not true, the share is advertised to anyone who asks. The Windows client only hides shares that end with a '$'. By default Windows gives access only to administrators (by default), but they are by no means hidden. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young

Re: [Samba] Microsoft OneNote 2007 painfully slow

2010-06-15 Thread Robert LeBlanc
On Tue, Jun 15, 2010 at 4:07 PM, Andrew Masterson andrew.master...@nuvistaenergy.com wrote: -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Robert LeBlanc Sent: Monday, June 07, 2010 2:45 PM To: samba@lists.samba.org

Re: [Samba] Samba packages for debian squeeze

2010-06-15 Thread Robert LeBlanc
On Tue, Jun 15, 2010 at 2:43 PM, Christian PERRIER bubu...@debian.orgwrote: Quoting Robert LeBlanc (rob...@leblancnet.us): I have had 'net' not correctly registered on some squeeze machines. Since I don't use the net command often, I just run net.samba3. I'm sure you could do an `update

Re: [Samba] Microsoft OneNote 2007 painfully slow

2010-06-08 Thread Robert LeBlanc
On Mon, Jun 7, 2010 at 6:06 PM, Jeremy Allison j...@samba.org wrote: On Mon, Jun 07, 2010 at 02:44:50PM -0600, Robert LeBlanc wrote: We have a user trying to share a OneNote 2007 notebook and it takes minutes to load a 20 KB notebook. I've opened a 500 KB Excel spreadsheet from the same

Re: [Samba] Microsoft OneNote 2007 painfully slow

2010-06-08 Thread Robert LeBlanc
at a loss as to what to do. Thanks, Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] pam_winbind and krb5_auth

2010-06-08 Thread Robert LeBlanc
and get single-signon. There are quiet a few things you can do. If you have to enter a password, there is usually a way to enable Kerberos for it. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Tue, Jun 8, 2010 at 9:17 PM, Matthew Delves m.del

Re: [Samba] pam_winbind and krb5_auth

2010-06-08 Thread Robert LeBlanc
On Tue, Jun 8, 2010 at 10:48 PM, Matthew Delves m.del...@ballarat.edu.auwrote: On 9/06/2010 at 1:22 pm, Robert LeBlanc rob...@leblancnet.us wrote: If you configure SSH and NFS, you get passwords logins and mounts. I think mount.smb can use it as well as smbclient. I know that KDE auto

Re: [Samba] resolve KDC network address error

2010-06-07 Thread Robert LeBlanc
only at the time. I use backports for Lenny as the samba packages in it has the fix. The patch is very simple and could be applied to 3.2.x, see bug 6700 for the patch if you want to recompile 3.2.x. https://bugzilla.samba.org/show_bug.cgi?id=6700 Robert LeBlanc Life Sciences Undergraduate Education

[Samba] Microsoft OneNote 2007 painfully slow

2010-06-07 Thread Robert LeBlanc
We have a user trying to share a OneNote 2007 notebook and it takes minutes to load a 20 KB notebook. I've opened a 500 KB Excel spreadsheet from the same share and it took seconds. Has anyone else run into this problem? We are running Samba 3.4.8 on Debian Squeeze. Thanks, Robert LeBlanc Life

Re: [Samba] Regression of 5616?

2010-06-05 Thread Robert LeBlanc
looked at the code and much of it is the same betweek 3.2 and 3.3, only some variable renames which all match up ok and the use of a different object for some of the initial information (that part is way over my head). Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham

Re: [Samba] Regression of 5616?

2010-06-03 Thread Robert LeBlanc
On Wed, Jun 2, 2010 at 5:04 PM, Robert LeBlanc rob...@leblancnet.us wrote: I'm wondering if I'm seeing a regression of 5616 with 3.4.8. I'm trying to set-up pptpd with winbind, which I'm doing on two machines on Debian lenny, and I'm trying on Debian Squeeze now. The Windows client is saying

Re: [Samba] Regression of 5616?

2010-06-03 Thread Robert LeBlanc
On Thu, Jun 3, 2010 at 11:18 AM, Robert LeBlanc rob...@leblancnet.uswrote: On Wed, Jun 2, 2010 at 5:04 PM, Robert LeBlanc rob...@leblancnet.uswrote: I'm wondering if I'm seeing a regression of 5616 with 3.4.8. I'm trying to set-up pptpd with winbind, which I'm doing on two machines on Debian

Re: [Samba] Regression of 5616?

2010-06-03 Thread Robert LeBlanc
On Thu, Jun 3, 2010 at 11:21 AM, Robert LeBlanc rob...@leblancnet.uswrote: On Thu, Jun 3, 2010 at 11:18 AM, Robert LeBlanc rob...@leblancnet.uswrote: On Wed, Jun 2, 2010 at 5:04 PM, Robert LeBlanc rob...@leblancnet.uswrote: I'm wondering if I'm seeing a regression of 5616 with 3.4.8. I'm

[Samba] Regression of 5616?

2010-06-02 Thread Robert LeBlanc
handed with Google. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] samba.org has been revised!

2010-05-19 Thread Robert LeBlanc
credibility! Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Wed, May 19, 2010 at 8:48 AM, Felix Miata mrma...@earthlink.net wrote: On 2010/05/19 09:12 (GMT-0400) David Eisner composed: On Tue, May 18, 2010 at 11:22 PM, Felix Miata mrma

Re: [Samba] Samba 3.4.4 Windows 7 offline folders

2010-04-21 Thread Robert LeBlanc
, Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Snow Leopard and Samba

2010-04-20 Thread Robert LeBlanc
know if this release fixes my problem. Has anyone else had problems with OS/X writing to a Samba share AFTER it's been working for for a while (in my case 2 months)? For us, the fix was to add unix extensions = no in the global section. Robert LeBlanc Life Sciences Undergraduate Education

Re: [Samba] Ideas for distributed Samba servers

2010-04-11 Thread Robert LeBlanc
the need for this. Thanks, Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Ideas for distributed Samba servers

2010-04-11 Thread Robert LeBlanc
of the storage will sit idle and not really accessed. Since all the desktops are only running 100 Mb connections, it gives us enough concurrent connections that we feel comfortable with. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe

Re: [Samba] Ideas for distributed Samba servers

2010-04-11 Thread Robert LeBlanc
On Sun, Apr 11, 2010 at 10:18 PM, Adam squeeze...@gmail.com wrote: Ever heard of glusterfs? Yes, I don't think it works well in a geography diverse clusters though. Lustre has this same problem. I could be wrong. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham

Re: [Samba] Ideas for distributed Samba servers

2010-04-10 Thread Robert LeBlanc
On Sat, Apr 10, 2010 at 11:14 AM, Eric Shubert e...@shubes.net wrote: Robert LeBlanc wrote: I'm trying to think about how to setup a Samba system and would like to pick the brains of some experts. We are looking up put a large amount of storage ~75TB in a central data center. We have some

Re: [Samba] Force Winbind Domain

2010-03-30 Thread Robert LeBlanc
is, can I force the domain to be MYDOMAIN instead of PROXY1? Thank you! I think you are looking for use default domain in smb.conf. That should allow users to just use their sAMAccountName, otherwise they could use DOMAIN\sAMAccountName without the use default domain setting configured. Robert

Re: [Samba] ?: winbind dont start

2010-03-24 Thread Robert LeBlanc
if you updated your smb.conf and krb5.conf file (if necessary) to reflect the new subdomain (unless by subdomain you don't mean an Active directory subdomain and you are talking about a subnet). If you have, then I would try a net ads leave and then a net ads join again. Robert LeBlanc Life Sciences

Re: [Samba] 3.5 in Debian Squeeze?

2010-03-24 Thread Robert LeBlanc
On Wed, Mar 24, 2010 at 12:21 AM, Christian PERRIER bubu...@debian.orgwrote: Quoting Robert LeBlanc (rob...@leblancnet.us): What is the milestone that will get 3.5 into Debian Squeeze? We're still in the process of deciding whether we'll go for 3.4.* or 3.5 for squeeze

Re: [Samba] Samba 3.4.7 on Debian Squeeze does not allow Vista machines to connect to shares XP users can connect though

2010-03-23 Thread Robert LeBlanc
haven't had the time to try any troubleshooting. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] 3.5 in Debian Squeeze?

2010-03-23 Thread Robert LeBlanc
What is the milestone that will get 3.5 into Debian Squeeze? Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] ads_sasl_spnego_krb5_bind failed: Program lacks supportfor encryption type [SEC=UNCLASSIFIED]

2010-02-24 Thread Robert LeBlanc
' in my krb5.conf files and it works fine now. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] [FIXED on Debian] Re: ads_sasl_spnego_krb5_bind failed: Program lacks support for encryption type [SEC=UNCLASSIFIED]

2010-02-19 Thread Robert LeBlanc
need the weak_crypto option in krb5.conf. Thanks to all who got us through this bump in the road. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https

[Samba] DC failover not working?

2010-02-16 Thread Robert LeBlanc
doubling that time to a maximum until it comes back online all the while using a different DC. I worked around the problem by setting the password server to a good DC, but this should be automatic. Thanks, Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young

Re: [Samba] ads_sasl_spnego_krb5_bind failed: Program lacks support for encryption type [SEC=UNCLASSIFIED]

2010-02-16 Thread Robert LeBlanc
On Tue, Feb 16, 2010 at 2:48 PM, Rob Townley rob.town...@gmail.com wrote: On Tue, Feb 16, 2010 at 12:30 PM, Robert LeBlanc rob...@leblancnet.uswrote: I tired this on Debian Squeeze (edited /var/run/samba/smb_krb5/krb5.conf.NETBIOSNAME) and when I restart winbind, the file is clobbered back

Re: [Samba] [Announce] Samba 3.5.0rc2 Available for Download

2010-02-01 Thread Robert LeBlanc
upstream release policy is the best that can happen to distro packagers. This is very exciting, thank you all for your hard work. We would like to see 3.5 in Squeeze soon as we will most likely be deploying Windows 7 2nd quarter this year. Thanks, Robert LeBlanc Life Sciences Undergraduate

Re: [Samba] Samba/Winbind uid/gid

2010-01-18 Thread Robert LeBlanc
:~# Is there a solution to abtain the same uid/gid on both server for all users? You didn't specify what version of Samba you are using. If you are using 3.4.x, I suggest idmap_hash, if you are using something earlier, than I would suggest idmap_rid. There are man pages for both. Robert LeBlanc Life Sciences

Re: [Samba] How to access shares via HTTP (apache2)

2010-01-01 Thread Robert LeBlanc
to be intalled on the OS and would never be blocked by any firewall. WebDav fit the bill alhough it sucks prety bad on Windows, it is still there. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following

Re: [Samba] How to access shares via HTTP (apache2)

2009-12-31 Thread Robert LeBlanc
permissions and owners so that quotas are not thrown off. We initially did some nasty group member things to get it to work with Apache, but the management overhead was a nightmare and went with the Windows solution even though we wanted to go Linux. Robert LeBlanc Life Sciences Undergraduate

Re: [Samba] DNS update via trusted machine account

2009-12-29 Thread Robert LeBlanc
Not sure if you need to export the key. If you run 'net ads dns register -P' it will use the machine account. You can put that in the script that runs when there is a network change. I'm not near a machine right now, but Debian has it in /etc/network/. Robert LeBlanc On Dec 29, 2009 7:48 AM

[Samba] PPTP ntlm_auth-helper problem?

2009-12-23 Thread Robert LeBlanc
are on the same domain). They said it was resolved in 3.2, but we are using 3.4.3. Is it possible this bug reappeared? Thanks, Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read

Re: [Samba] Configure a linux client to be a member of a Samba Domain and allow users from Domain to sign on.

2009-12-17 Thread Robert LeBlanc
smb users to login to the linux box? I searched google but the most I find is how to configure PDCs I suggest you check the thread titled how to join to AD ? -Annoyed, I just recently posted a very detailed post about getting interactive logins using Samba. Robert LeBlanc Life Sciences

Re: [Samba] how to join to AD ? -Annoyed

2009-12-16 Thread Robert LeBlanc
/*) in finding where problems lie. Every environment is different, so you may run into things that others have not. We can try to help where we can, but be patient, you may have to be the one that figures it out. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young

Re: [Samba] Limit users storing BIG files

2009-12-11 Thread Robert LeBlanc
, it will restrict all users to the same space. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Starting from scratch... and Active Directory

2009-12-11 Thread Robert LeBlanc
offline logon = yes # get quota command = /root/sambaquota.sh #=== Share Definitions === Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read

Re: [Samba] wbinfo / Could not convert sid to gid / uid

2009-12-10 Thread Robert LeBlanc
. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] wbinfo / Could not convert sid to gid / uid

2009-12-08 Thread Robert LeBlanc
/log.winbindd or /var/log/samba/log.wb.DOMAIN. I would suspect that you may have run out of gids allocated to groups (your rang is not big enough). The logs should help you pinpoint the problem though. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University

Re: [Samba] Samba 3.4.2 with Solaris ZFS Snaphots

2009-12-08 Thread Robert LeBlanc
.jpg :-) We aren't using Windows 7 yet, and Volker said that the patch is already in 3.5, so I think we are going to hold off until 3.5 is released. Thanks for doing some early testing for us! :) Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University

Re: [Samba] A question about samba and quote

2009-12-04 Thread Robert LeBlanc
to manage access (much easier than managing hundreds of shares and with hide unreadable = true it seems just as good. Then in smb.conf add/edit this line: get quota command = /root/bin/sambaquota.sh Hope that helps. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham

Re: [Samba] A question about samba and quote

2009-12-03 Thread Robert LeBlanc
. We wrote a pam_exec script to set default quotas for people on our server. We also wrote a quota script (specified in smb.conf) to return the quotas to Windows so that it shows their quota and not the entire disk when they look at the mount point in detail view. Robert LeBlanc Life Sciences

Re: [Samba] Active Directory DNS Registration

2009-12-03 Thread Robert LeBlanc
domain. If looking in DNS management does not show you machine in the forward zone, try on the Samba server sudo net ads dns register -P That will try to register the machine again in DNS. If you need additional IP's or CNAMEs, you may have to enter those manually in DNS management. Robert LeBlanc Life

Re: [Samba] Samba 3.4.2 with Solaris ZFS Snaphots

2009-12-03 Thread Robert LeBlanc
about a couple of the extensions in this patch. Thanks for the work! Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Active Directory DNS Registration

2009-12-03 Thread Robert LeBlanc
On Thu, Dec 3, 2009 at 9:34 AM, Casey Allen Shobe ca...@shobe.info wrote: On Thu, Dec 3, 2009 at 10:55 AM, Robert LeBlanc rob...@leblancnet.uswrote: When you use net ads join to join the computer to the domain, it should register the machine in DNS as well. Well, prior to reading this I

Re: [Samba] Centos with Shadowcopy

2009-11-28 Thread Robert LeBlanc
it. There is no easy step by step for shadow copy, you need to understand how it will impact your environment when you set it up. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read

Re: [Samba] reverse name resolving of winbind 3.4.x

2009-11-25 Thread Robert LeBlanc
? Can you find any hints in the log.winbindd log or the log.wb-domain log. I had problems like that in the past, but they sem to be resolved in 3.4.2. You may have a different problem. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe

Re: [Samba] Shadow Copy and Windows 7

2009-11-14 Thread Robert LeBlanc
On Sat, Nov 14, 2009 at 5:30 AM, Volker Lendecke volker.lende...@sernet.dewrote: On Fri, Nov 13, 2009 at 11:40:38AM -0600, Robert LeBlanc wrote: Also, I've seen patches for having the snapshots using local time instead of GMT. Has this been implemented, I could not find in the docs

[Samba] Shadow Copy and Windows 7

2009-11-13 Thread Robert LeBlanc
Before I beat myself over this... Iv'e set-up shadow_copy2 and it works great for XP,2003,Vista and 2008. Windows 7 however does not find any previous versions of the files. Anyone aware of a problem or a solution? We are running 3.4.2 on Debian Squeeze. Thanks, Robert LeBlanc Life Sciences

Re: [Samba] Shadow Copy and Windows 7

2009-11-13 Thread Robert LeBlanc
On Fri, Nov 13, 2009 at 10:46 AM, Robert LeBlanc lebl...@byu.edu wrote: On Fri, Nov 13, 2009 at 10:17 AM, Volker Lendecke volker.lende...@sernet.de wrote: That is fixed in master and will be in 3.5: http://git.samba.org/?p=samba.git;a=commitdiff;h=f0fd5df7fd702ae The patch applies

Re: [Samba] idmap_rid/idmap_hash collisions?

2009-11-11 Thread Robert LeBlanc
were allocated to each. Does it suffer from the same collision problem as rid? Our AD will have a couple of hundred thousand objects in the not too near future. Thanks, Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from

Re: [Samba] idmap_rid/idmap_hash collisions?

2009-11-11 Thread Robert LeBlanc
On Wed, Nov 11, 2009 at 9:52 AM, Gerald Carter je...@plainjoe.org wrote: Robert LeBlanc wrote: Does it suffer from the same collision problem as rid? idmap_rid doesn't have a collision problem that I'm aware of as long as you set it up properly. Did I misunderstand something? Our AD

Re: [Samba] idmap_rid/idmap_hash collisions?

2009-11-11 Thread Robert LeBlanc
On Wed, Nov 11, 2009 at 10:18 AM, Gerald Carter je...@plainjoe.org wrote: Robert LeBlanc wrote: So if I understand right, hash does not hash the SID, it does the same as rid and takes the last section directly from the SID and uses that withou modification (rid adds that number

Re: [Samba] [bounce] Problem with pam_winbind

2009-11-05 Thread Robert LeBlanc
, if your schema is not extended and you don't have other *NIXs that rely on it, I'd suggest using hash, but it is only in 3.4.x. Other than that things look ok. Also, if a home directory is not created for the user, they probably won't be able to log in due to the template shel = /bin/false. Robert

[Samba] Ideas for distributed Samba servers

2009-11-03 Thread Robert LeBlanc
is that I'm not sure of a file system that does this. We are using Lustre on our HPC, but this won't do what we want. Any suggestions are welcome. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL

Re: [Samba] Problem with pam_winbind

2009-11-02 Thread Robert LeBlanc
Ok, it was a shot in the dark since there was no smb.conf included. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Mon, Nov 2, 2009 at 12:47 AM, Alex Samad a...@samad.com.au wrote: On Sun, Nov 01, 2009 at 11:02:07PM -0600, Robert LeBlanc

Re: [Samba] idmapping changes from 3.0.10 to 3.4.2.

2009-11-02 Thread Robert LeBlanc
of some sort though. I haven't tried without it, but it really seems to be needed. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman

Re: [Samba] idmapping changes from 3.0.10 to 3.4.2.

2009-11-01 Thread Robert LeBlanc
You seem to be missing an idmap backend entry. If you are going to 3.4, you may want to look at hash, there is also RID. If you already have an extended schema, you may want to look at ads. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Fri

Re: [Samba] Problem with pam_winbind

2009-11-01 Thread Robert LeBlanc
Does this bug describe what you are seeing? https://bugzilla.samba.org/show_bug.cgi?id=6833 Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Sun, Nov 1, 2009 at 9:01 PM, Alex Samad a...@samad.com.au wrote: Hi my setup debian amd64 with ii

[Samba] winbind + Active Directory + email

2009-10-29 Thread Robert LeBlanc
Directory using winbind, on one system we are using pam_winbind, on another we are not. Of course, I'm looking for the simplest option. It seems that mail is being sent to user_at_hostname right now. Thanks, Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University

Re: [Samba] winbind causes Linux to lockup when connectivity to AD is lost (subject line edited for clarity)

2009-10-23 Thread Robert LeBlanc
Just out of curiosity, do any of you have mdns4_minimal or mdsn4 in your /etc/nsswitch.conf file? I think mdns4 doesn't work too well and I usually take it out, but it was alive and well on these machines. Does removing those items help anyone? Robert LeBlanc Life Sciences Undergraduate

Re: [Samba] winbind causes Linux to lockup when connectivity to AD is lost (subject line edited for clarity)

2009-10-23 Thread Robert LeBlanc
: kill process 5842 (winbindd) score 76798 or a child Oct 23 13:09:35 lsbeast-i2 kernel: [74133.164850] Killed process 5847 (winbindd) Looks like winbind is running out of memory? Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Fri, Oct 23, 2009

Re: [Samba] winbind causes Linux to lockup when connectivity to AD is lost (subject line edited for clarity)

2009-10-23 Thread Robert LeBlanc
0.0 0:00.00 sshd 5768 root 20 0 78572 916 200 S 0.0 0.1 0:00.14 sshd Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Fri, Oct 23, 2009 at 1:17 PM, Robert LeBlanc rob...@leblancnet.uswrote: I also see this in the syslog

Re: [Samba] winbind causes Linux to lockup when connectivity to AD is lost (subject line edited for clarity)

2009-10-23 Thread Robert LeBlanc
3.4.2 Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Fri, Oct 23, 2009 at 1:23 PM, Jeremy Allison j...@samba.org wrote: On Fri, Oct 23, 2009 at 01:19:46PM -0600, Robert LeBlanc wrote: Here is a capture of top at the time: PID USER

Re: [Samba] winbind causes Linux to lockup when connectivity to AD is lost (subject line edited for clarity)

2009-10-23 Thread Robert LeBlanc
On Fri, Oct 23, 2009 at 2:45 PM, Jeremy Allison j...@samba.org wrote: On Fri, Oct 23, 2009 at 02:34:45PM -0600, Robert LeBlanc wrote: 3.4.2 Ok, what does your smb.conf look like. What is the configured winbindd backend ? We have switched to hash for the increased flexibility. I have

Re: [Samba] winbind causes Linux to lockup when connectivity to AD is lost (subject line edited for clarity)

2009-10-22 Thread Robert LeBlanc
. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Thu, Oct 22, 2009 at 1:55 AM, Clayton Hill ad...@ateamonsite.com wrote: Hi Jason, Yup you got the same problem - just going about it a sorta different way - ouch that must really suck having winbind

Re: [Samba] Winbind lookup performance

2009-10-22 Thread Robert LeBlanc
of objects, you will want enum users and groups off. We don't use it here and everything works fine. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https

Re: [Samba] Convert idmap_rid to idmap_hash?

2009-10-19 Thread Robert LeBlanc
On Mon, Oct 19, 2009 at 7:09 AM, Gerald Carter je...@plainjoe.org wrote: Robert, Robert LeBlanc wrote: I was looking through the change log of 3.3.0 and noticed that a new idmap_hash was introduced that seems to play well with trusted domains. What means are available to convert all my

[Samba] Convert idmap_rid to idmap_hash?

2009-10-18 Thread Robert LeBlanc
I was looking through the change log of 3.3.0 and noticed that a new idmap_hash was introduced that seems to play well with trusted domains. What means are available to convert all my rids to this new hash so I can update file permissions? Thanks, Robert LeBlanc Life Sciences Undergraduate

Re: [Samba] Is it EVER needed to set up kerberos manually if you use samba to join an ADS domain as a domain member?

2009-10-16 Thread Robert LeBlanc
hard coded in our AD and it works fine with a minimal krb5.conf file. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Is it EVER needed to set up kerberos manually if you use samba to join an ADS domain as a domain member?

2009-10-16 Thread Robert LeBlanc
because I did it the wrong way. Most of my issues came from hostname, DNS or resolve.conf misconfigurations more than Kerberos misconfigurations. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL

Re: [Samba] Linux 2.6.31, samba server no longer working

2009-10-16 Thread Robert LeBlanc
with using krb5 1.6 instead of 1.7. I didn't feel like backporting Kerberos too to test that threory, I need to get these machines up, so I just installed my patched version of 3.2.5. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Fri, Oct 16, 2009

Re: [Samba] Is it EVER needed to set up kerberos manually if you use samba to join an ADS domain as a domain member?

2009-10-14 Thread Robert LeBlanc
for options that we override the defaults, but they are not needed. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Wed, Oct 14, 2009 at 5:03 PM, ad...@ateamonsite.com wrote: Hi folks, In a scenerio where you are just joining samba

Re: [Samba] Samba directory level security

2009-10-06 Thread Robert LeBlanc
Is the use of ACLs a possibility? Iv'e explained to someone yesterday how to use ACLs in Samba with ADS. It works very well for us and we are doing exactly what you want except that we only share out the root (www directory in your instance) and control everything using ACLs. Robert LeBlanc Life

Re: [Samba] Samba directory level security

2009-10-06 Thread Robert LeBlanc
, Poulter, Dale dale.poul...@vanderbilt.edu wrote: Robert, ACLs may be possible. Do I understand correctly that you only have the one share and you still force the user to be the webserver user? From: Robert LeBlanc [mailto:rob...@leblancnet.us] Sent: Tuesday, October 06, 2009 9:12 AM

Re: [Samba] Samba as fileserver on Active Directory domain

2009-10-05 Thread Robert LeBlanc
. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Mon, Oct 5, 2009 at 10:02 AM, Ivan Ordonez iordo...@berkeley.edu wrote: I am using Samba version 3.0.36. When I upgraded to 3.3.7, I got some realm complaints when I run testparm and some ADS

Re: [Samba] Samba as fileserver on Active Directory domain

2009-10-05 Thread Robert LeBlanc
/this/is/my/file. Hope that helps. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Mon, Oct 5, 2009 at 2:34 PM, Ivan Ordonez iordo...@berkeley.edu wrote: I was able to install 3.3.8 version of Samba. I am running it now. I can see shares

Re: [Samba] Samba as fileserver on Active Directory domain

2009-10-05 Thread Robert LeBlanc
the hardest. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Mon, Oct 5, 2009 at 5:49 PM, Ivan Ordonez iordo...@berkeley.edu wrote: I was able to set ACL with local username but can't do it on domain username or groups. hostname ~ # getfacl

Re: [Samba] Samba as fileserver on Active Directory domain

2009-10-03 Thread Robert LeBlanc
What version of samba are you using? I submitted a patch to Samba that is in 3.4.1 and slated for the next version of 3.3.x that fixes the workgroup/realm thing. It falls back to SPEGO without the patch, but it takes a little while, the patch speeds things up. Robert LeBlanc Life Sciences

Re: [Samba] Samba as fileserver on Active Directory domain

2009-10-02 Thread Robert LeBlanc
, it also obeys ACL. The only catch is that you need to use RID or LDAP for uid/gid mapping or else your permissions won't line up. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Thu, Oct 1, 2009 at 10:14 AM, Ivan Ordonez iordo...@berkeley.edu

Re: [Samba] folder/users privileges

2009-08-04 Thread Robert LeBlanc
, and then more detailed ones we use extended ACLs. I have not found a way to manage the Linux ugo permissions from Windows. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham Young University On Tue, Aug 4, 2009 at 10:30 AM, Surendil ale...@gmail.com wrote: I've tried to set

Re: [Samba] Samba 3.4.0 in Debian unstable

2009-07-08 Thread Robert LeBlanc
in the build system. The good work we're (hopefully) doing in publishing packages is because you are doing such good work. I would also like to add my appreciation to the Debian Samba team for providing excellent packages and having it released and patched soon after a release. Thank you, Robert

Re: [Samba] Word and Excel files are read-only when opening

2009-07-06 Thread Robert LeBlanc
--no-run-if-empty chmod -v u+w # filecheck.sh #! /bin/bash /usr/bin/find /ls/groups/ -perm -u+r ! -perm /u+w -printf %p\n It is pretty quick on our files system and only changes the files that are wrong. Robert LeBlanc Life Sciences Undergraduate Education Computer Support Brigham

Re: [Samba] DNS Problems on `net ads join`

2009-06-29 Thread Robert LeBlanc
and the FQDN using the -f flag. You may want to reboot for good measure to be sure the hostname is changed and sticks through reboots. Then try to join again, the DNS update should work in that case now that FQDN of the client now matches the AD domain. Robert LeBlanc Life Sciences Undergraduate

[Samba] Re: Kerberos with delegated domain

2009-06-03 Thread Robert LeBlanc
On Fri, May 29, 2009 at 5:38 PM, Robert LeBlanc rob...@leblancnet.uswrote: On Fri, May 29, 2009 at 2:33 PM, Robert LeBlanc rob...@leblancnet.uswrote: Ok, here is the set-up. We have a domain that is the main domain, it handles DHCP and DNS for domain.edu. The DNS for domain.edu has NS

[Samba] Re: Kerberos with delegated domain

2009-06-03 Thread Robert LeBlanc
On Wed, Jun 3, 2009 at 10:35 AM, Robert LeBlanc rob...@leblancnet.uswrote: On Fri, May 29, 2009 at 5:38 PM, Robert LeBlanc rob...@leblancnet.uswrote: On Fri, May 29, 2009 at 2:33 PM, Robert LeBlanc rob...@leblancnet.uswrote: Ok, here is the set-up. We have a domain that is the main domain

[Samba] Kerberos with delegated domain

2009-05-29 Thread Robert LeBlanc
Ok, here is the set-up. We have a domain that is the main domain, it handles DHCP and DNS for domain.edu. The DNS for domain.edu has NS records to delegate domain.local to our Active Directory. I am able to bind a machine just fine to the Active Directory without having to change any of the

[Samba] Re: Kerberos with delegated domain

2009-05-29 Thread Robert LeBlanc
On Fri, May 29, 2009 at 2:33 PM, Robert LeBlanc rob...@leblancnet.uswrote: Ok, here is the set-up. We have a domain that is the main domain, it handles DHCP and DNS for domain.edu. The DNS for domain.edu has NS records to delegate domain.local to our Active Directory. I am able to bind

Re: [Samba] Best Way to Securely Mount SMB/CIFS Shares

2009-05-21 Thread Robert LeBlanc
on Debian can call smbmount without having to be root. Robert LeBlanc -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Kerberos and 2008 AD troubles

2009-05-18 Thread Robert LeBlanc
away with not doing (it would be nice to not have to override the DNS for laptops, the .com DNS has entries for the .local). If I can just get it to work with the FQDN, i will be VERY happy. Thanks, Robert LeBlanc On Thu, May 7, 2009 at 12:17 PM, Robert Foreman robert.fore...@gmail.comwrote

Re: [Samba] Kerberos and 2008 AD troubles

2009-05-18 Thread Robert LeBlanc
Ok, setting up from scratch work perfectly with both FQDN and the short name. I did not need to specify the AD DNS servers either. Thanks for all the help. Robert On Mon, May 18, 2009 at 3:30 PM, Robert LeBlanc rob...@leblancnet.uswrote: Sorry to take so long to get back with you, but I've

RE: [Samba] authenticate Linux users to AD on Windows 2003R2

2009-05-15 Thread Robert LeBlanc
Just FYI, you can use: Template homedir = /home/%U To make winbind home directories in /home rather than /home/domain. Robert LeBlanc Life Sciences Computer Support Brigham Young University lebl...@byu.edu (801)422-1822 -Original Message- From: samba-bounces+robert=leblancnet

[Samba] Changing owner/group on samba share

2009-05-15 Thread Robert LeBlanc
permissions, there doesn't seem to be a way to remove the owning user/group. When you hit apply, they show right back up. Is there any way for a Windows user to change the owning user/group through the Window's GUI? This would be very helpful for our helpdesk team. Thanks, Robert LeBlanc

RE: [Samba] Changing owner/group on samba share

2009-05-15 Thread Robert LeBlanc
-Original Message- From: John Drescher [mailto:dresche...@gmail.com] Sent: Friday, May 15, 2009 9:34 AM To: Robert LeBlanc Subject: Re: [Samba] Changing owner/group on samba share Make sure your idmap works. If it does not the windows properties tab gets reset after changing

  1   2   >