On Tue, May 13, 2008 at 6:52 PM, Michael Heydon [EMAIL PROTECTED] wrote:
[]
[master share]
comment = All of WWW read/write access
path = /www
valid users = @DOMAIN\My master group
write list = @DOMAIN\My master group
force group = My Master group
Or
I am trying to create a master share that contains all the other
shares. I created a group that needs read+write permission to all the
other shares. However, rather than adding this group in each share
configuration, I was wondering if there is a way to overwrite the
permission.
I tried this but
What does the following mean? I have security=ads. Why it is using
ntlm? I still cannot connect to the shares. I am using RHEL 5
(samba-3.0.23c, krb5-libs-1.5-26)
[2007/06/29 09:33:01, 2] auth/auth.c:check_ntlm_password(309)
check_ntlm_password: authentication for user [username] -
[username]
PROTECTED] Group Name, even though I had
winbind use default domain = Yes in smb.conf.
--sharif
sharif islam wrote:
I am trying to use new samba and having problems.
# smbclient //sambamachine/shareweb -Uusername
Password:
Domain=[MYDOMAIN] OS=[Unix] Server=[Samba 3.0.25b]
tree connect failed
I am trying to use new samba and having problems.
# smbclient //sambamachine/shareweb -Uusername
Password:
Domain=[MYDOMAIN] OS=[Unix] Server=[Samba 3.0.25b]
tree connect failed: NT_STATUS_ACCESS_DENIED
I noticed this in the log:
Checking password for unmapped user [EMAIL PROTECTED]
with the
on your
configuration it will either deny access to Samba server or deny access
to shares.
--sharif
On 6/27/07, sharif islam [EMAIL PROTECTED] wrote:
I am trying to use new samba and having problems.
# smbclient //sambamachine/shareweb -Uusername
Password:
Domain=[MYDOMAIN] OS=[Unix] Server=[Samba
Hi,
Is there a way to migrate the files and shares and preserve the AD
group permissions? scp retains the modification time and such, but not
the AD group information.
--sharif
--
To unsubscribe from this list go to the following URL and read the
instructions:
On 6/26/07, Adam Tauno Williams [EMAIL PROTECTED] wrote:
Is there a way to migrate the files and shares and preserve the AD
group permissions? scp retains the modification time and such, but not
the AD group information.
Your question is too vague to give a solid answer, but, just backup and
I am using Active Directory and kerberos V5 Release 1.6.1. I get the
following error (I get the login prompt in the windows machine)
[2007/06/24 22:17:15, 1] smbd/sesssetup.c:reply_spnego_kerberos(316)
Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
[2007/06/24 22:17:15, 1]
This is my setup. I am connecting to a Windows 2003 server. Everything was
working fine with my old setup : 3.0.20b.
krb5-1.6: (I also tried it with krb51-.5);
./configure --without-tcl --enable-shared
samba-3.0.24:
./configure --with-ads --with-ldap --with-krb5=/usr/local/
smb.conf:
[global]
I have samba-3.0.23d with krb -1.3.4 connecting to a 2003 AD Server.
While connection from a windows client, it won't accept the correct
username and password. This is from
log.machinename:
[2007/01/04 14:43:26, 1] smbd/sesssetup.c:reply_spnego_kerberos(202)
Failed to verify incoming ticket!
I was upgrading from from 3.0.20b to 3.0.23c. I am running redhat AS 3
server with krb5-1.3.5 libraries.
I am getting the following error in log.machinename:
(the users get see the shares, but gets the password prompt when try
going go the share)
[2006/10/22 19:32:11, 1]
samba version 3.0.20b
I haven't made any changes in the samba config file, only added the
user to a new group. The user is getting prompted for password ( I am
using Active Directory) and here's the log.
[2006/07/27 10:19:51, 1] smbd/service.c:close_cnum(835)
closed connection to service
I am using 3.0.20b. I understand that these messages show up because
client sends a lock request that is not on the valid range.
[2005/12/01 15:16:25, 0] locking/posix.c:posix_fcntl_lock(667)
an Invalid argument error. This can happen when using 64 bit lock offsets
[2005/12/01 15:16:25, 0]
This is man smb.conf
smb ports (G)
Specifies which ports the server should listen on for
SMB traffic.
Default: smb ports = 445 139
So I guess you can just smb ports = 139.
On 12/2/05, Bryan K. Wright [EMAIL PROTECTED] wrote:
Hi folks,
I'm
I am not sure where to look into to resolve this. I have two domanins,
one is NT, another one is windows 2003 active directory. My samba
machine is in the active directory. Some of my users still in the NT
domain using the samba machine. Most of the time, they can access the
machine and
I was trying to copy swf file (35MB) from a windows machine to my
samba share. It told me
There is not enough disk space. However, it lets me copy it in
another share. I didn't notice anything different with the share I am
having problem with. I noticed the following messages in the log:
Can anyone help me figuring out these errors? I am using Version
3.0.15pre2 with Active Directory 2003. Thanks.
[2005/04/26 09:34:27, 1] nsswitch/winbindd_ads.c:enum_dom_groups(283)
No rid for Replicator !?
[2005/04/26 09:34:27, 1] nsswitch/winbindd_ads.c:enum_dom_groups(283)
No rid for
I upgraded from 3.0.11 to .13. Samba shares are working fine. But swat
interface won't accept my root password. I renamed swat.old to
swat(3.0.11 version) and it seems to be working again.
Any known problems with swat on 3.0.13?
--Sharif
--
Sharif Islam
--
To unsubscribe from this list go
for this user already exists.
Please try again. What am I doing wrong??
Jonathan
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--
Sharif Islamhttp://www.sharifislam.com
Research
On Fri, 18 Mar 2005 19:48:56 +0700, Agus Santosa [EMAIL PROTECTED] wrote:
Hi all,
I have windows 2003 with active directory, all user name and password store
in active directory,
Now I like to build a linux system that share a folder,
can I set that folder (in linux) so the user and
Is file locking dependent on the editor or we can control it via the
oplocks option? here's the scenario: I usually use vi from the
console. However, some of my colleagues might work on the same file
from the windows machine using notepad, Jedit, dreamweaver etc. What
is the best way to lock
On Fri, 4 Mar 2005 13:23:31 -0800, Mitch (WebCob) [EMAIL PROTECTED] wrote:
What about editors like Joe - when I run it on two terminals to access the
same file, the second (and subsequent attempts) show read only...
Admittedly that's probably FILE locking - not more granular like region
From http://www.faqs.org/docs/samba/ch09.html
Be careful when adding local users after domain users have started
accessing the Samba server. The domain users will have entries created
for them by winbind in /etc/passwd, with UIDs in the range you
specify. If you are using a method of creating new
On Fri, 3 Dec 2004 15:40:48 -0500 (EST), Andrew Dougherty
[EMAIL PROTECTED] wrote:
On Fri, 3 Dec 2004, Michael Lueck wrote:
[]
Thanks for the suggestion. Alas, I don't have any /var/opt/samba
directory at all (nor any wins.dat entries in /var/run/samba or anywhere
else.)
Try to look
On Fri, 3 Dec 2004 16:16:49 -0500 (EST), Andrew Dougherty
[EMAIL PROTECTED] wrote:
On Fri, 3 Dec 2004, sharif islam wrote:
On Fri, 3 Dec 2004 15:40:48 -0500 (EST), Andrew Dougherty
[EMAIL PROTECTED] wrote:
On Fri, 3 Dec 2004, Michael Lueck wrote:
[]
Thanks for the suggestion
On Fri, 3 Dec 2004 16:28:30 -0500, Lucas Machado
[EMAIL PROTECTED] wrote:
[EMAIL PROTECTED]:/usr/local/samba/bin$ ./smbclient //localhost/samba1 -k
session setup failed: NT_STATUS_LOGON_FAILURE
I think if you don't provide the username it takes the local user. Try
smbclient with the -u flag.
On Tue, 23 Nov 2004 01:47:00 + (UTC), Simone Stanzani
[EMAIL PROTECTED] wrote:
Hi
With samba-3.0.2a-1
security = ADS
when i run getent passwd che command after 3000 users hangs :-(
This is winbindd.log
2004/11/23 00:15:48, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
On Tue, 23 Nov 2004 14:03:48 -0500, Rashaad S. Hyndman
[EMAIL PROTECTED] wrote:
I have a question that seems to be an issue when authenticating users for
ADS. Before we went to AD we had a 2k domain called Enterprise. Since then
we created a domain called Corporated.net and all went well. Now
fancy and works for me.
---perl script--
#!/usr/bin/perl
# 03.15.04 sharif islam
# Provide a group name this looks for the groupname
# in the domain then loops through the list of user ids and gets
the full name
my $usage_string = Find who is in a group
connect to service systemsweb initially as user
Domain\joe (uid=10093, gid=17540) (pid 31075)
[2004/11/17 10:28:40, 1] smbd/service.c:close_cnum(836)
xx.xxx. closed connection to service web
--
Sharif Islamhttp://www.sharifislam.com
Research Programmer
initial credentials
error message. If so please point me in the direction of resolving this.
This is probably due to case mismatch of the realm name. Is your realm name in
/etc/krb5.conf in lowercase? Try changing that in uppercase.
--
Sharif Islamhttp
On Fri, 12 Nov 2004 14:44:14 -0500, Rashaad S. Hyndman
[EMAIL PROTECTED] wrote:
I have been playing with getting my samba server to participate in an Acive
Directory domain for some time and have noticed a couple things about when i
get the machine working (or so i think). One is that when the
Noticed this in /var/log/samba while I was applying 'getent
groups|grep groupname '
[2004/11/09 10:29:04, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
No rid for Performance Monitor Users !?
[2004/11/09 10:29:04, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
No rid for Terminal Server
On Tue, 02 Nov 2004 14:34:15 -0800, Tom Dickson [EMAIL PROTECTED] wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
~ /usr/bin/net ads join -Udennisb
dennisb password:
[2004/11/02 17:31:56, 0] libads/ldap.c:ads_add_machine_acct(1006)
~ Host account for if-srv-hos1 already exists -
I am using samba 3.07 with winbind in AD. I have some long group names
(30 char or more, includes spaces). And I noticed users get access
denied for those groups. Is there a limit on group name length?
Thanks.
--Sharif
--
Sharif Islamhttp://www.sharifislam.com
36 matches
Mail list logo
