Re: [Samba] Samba and Windows XP
After messing arround with the configutation, I found a work arround. In the global section, use user level access, encrypt passwords, and set 'map to guest = Bad User'. With this configuration you can allow guests to certain folders, while restricting others. This configuration was the only way I was able to achieve 'share level access' without WinXP restricting the username. J.P. Cummins wrote: I have set up a SMB server with share level access and password encryption enabled. When I access Samba from WinXP it prompts me for a username and password, which is what I want. However, the username is greyed out (filled in with 'linuxbox\Guest'). Any suggestions on how to fix this? J.P. Cummins [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Use of coding system/client code page prevents logins
Samba version: 2.28 (BServer O/S: Solaris 2.6 (BClient O/S: Windows NT (Japanese) (B (BContents of smb.conf (some names and IP changed but otherwise as is): (B (B# Global parameters (B[global] (B# client code page = 932 (B# coding system = euc (Bworkgroup = OURWG (Bremote announce = 172.16.22.255/OURWG (Bsecurity = server (Bpassword server = ourpdc (Busername map = /usr/local/samba/lib/username.txt (Busername level = 2 (Blog file = /usr/local/samba/var/log.%I (Bmax log size = 500 (Bload printers = No (Bpreferred master = Yes (Blocal master = No (Bmangled names = No (B (BAs written, we care able to log in to our server witout problems. (BHowever, if we place the client code page = 932 and coding system = euc (Binto the file (currently commented out) any connections attempted cause a (Busername/password (Bprompt on the Client PC. (B (BLog file for the client contains the following: (B (B[2003/03/18 14:28:08, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369) (B unable to open passdb database. (B[2003/03/18 14:29:04, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369) (B unable to open passdb database. (B[2003/03/18 14:29:04, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369) (B unable to open passdb database. (B[2003/03/18 14:29:27, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369) (B unable to open passdb database. (B[2003/03/18 14:29:27, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369) (B unable to open passdb database. (B (BAgain, this ONLY appears if we make use of the client code page and coding (Bsystem parameters. (BWithout these, parameters, however, all the EUC encoded filenames we have (Bappears scrambled. (B (BAnyone have any idea what might be going wrong here? (B (B (B--- (BCommerz Securities (Japan) Company Limited (BInformation Technology Department (BChuck Douglas (BSun Certified System Adminstrator (B+81 3 5293-9097 (dl) (B+81 3 5293-9099 (fax) (B (B (B (B (B*** (BThis communication is confidential and is intended only for the person (Bto whom it is addressed. If you are not that person, you are not (Bpermitted to make use of the information and you are requested to (Bnotify administrator [EMAIL PROTECTED] immediately that (Byou have received it and then destroy/erase the copy/e-mail in your (Bpossession. (B*** (B (B (B-- (BTo unsubscribe from this list go to the following URL and read the (Binstructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win 95/98/Me problem.
On Tue, 18 Mar 2003, Marcin Wolcendorf wrote: > On Monday 17 March 2003 20:21, you wrote: > > On Mon, 17 Mar 2003, Marcin Wolcendorf wrote: > > > On Sunday 16 March 2003 17:19, you wrote: > > > > On Sun, 16 Mar 2003, Marcin Wolcendorf wrote: > > > > > Hi, > > > > > > > > > > As I was unable to find solution anywhere else, I write here: I have > > > > > a problem sharing win 95/98/Me resources with samba (2.2.7a) as a > > > > > PDC. Windows can't get userlist from PDC (it seems, that windows > > > > > times out). Win 2k and XP don't have that problem. Is it just a > > > > > configuration problem, or is it a general problem with samba?? How > > > > > can I add a user to share's access list??? > > > > > > > > So tell us now: Specifically what have you configured in your Win 9x/Me > > > > network configuration? > > > > > > W98 configuration: > > > Network in Control panel: > > > Net. conf.: > > > client for M$ Netw., file sharing on, In the Client for Microsoft Networks have you configured it to authenticate to the domain name (workgroup name)? That is essential. ie: chelmska in your case. > > > Auth.: > > > comp. name: goodoldsam > > > wrk grp: chelmska > > > Acc. Ctrl: > > > user-level, userlist from chelmska > > > > > > IP from DHCP, DNS domain name: 'home', > > > > In your DHCP server config do you have?: > > > > option netbios-name-servers x.x.x.x; > > option netbios-node-type 8; > > No. But weather I have it or not it doesn't matter- it makes no difference. Consistent NetBIOS name resolution is critical to stable networking. It does matter, but I accept that you may not have seen any difference. > > > This will help MS Windows clients to resolve the domain controller name to > > it's IP address. Timinig is very critical in environments that use User > > Level Access Control. > > But they do resolve names with no problems. > > > Make sure that you have a NETLOGON share (even if you do not use it!). ie: > > > > [netlogon] > > path = /blah/blah > > ; (path can be /tmp if you like) > > available = yes > > browseable = No > > read only = yes > > Also have it: > [netlogon] > path=... > guest ok = yes > writeble = no > share modes = no > > > I know it sounds obvious, but make sure that for each MS Windows client > > user (logon name) you have an entry in smbpasswd with: > > smbpasswd -a 'logon name' > > I can log in and see samba shares. > > > If the MS Windows logon name has a space of a '_' in it, then use a > > username on your Unix/Linux system that is fewer than 8 characters and > > does NOT have a space or '_' char in it, but then add to smb.conf > > [globals]: > > username map = /etc/samba/smbusers > > > > And then in /etc/samba/smbusers put (for example): > > > > root = Administrator > > fredm = "Fred Morse" > > maryk = mary_katrinski > > Nice to know, thanks. > > > > Samba server DNS name: debian.chelmska & debian.home > > > > > > [global] > > > > [snip] > > >os level = 255 > > > > Suggest: > > os level = 35 > > > > Setting above 35 does not help any. > > Nor harm. Correct, it does no harm. > > > > > > domain logons = yes > [snip] > > > ; name resolve order = lmhosts host wins bcast > > > > Add: > > name resolve order = wins bcast host > > Also didn't change anything (I remembered to restart samba after changes :-) Again. This is a setting that directly affects how Samba affects NetBIOS name resolution. > ). > [snip] > > The problem is- I can log in, I can see samba shares, but when I try to > share my win folder from w98 box I have to add a user to access list. And > that's what I cannot do, cause windows says: "You cannot view the list of > users at this time. Please try again later". Some ethereal investigation > showed, that w98, when asking for user list, sets 'available buffer length' > to 66B and it gets error response from samba saing, that buffer should be 67B > long. That conversation repets 3 times, and then win'98 gives up. I will send you under separate cover my smb.conf with which I do have user level access control working just fine. I suspect that there is something in you MS Windows Me configuration that is spooking you system, not the different buffer lengths. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbclient works, smbmount does not
Hello, Samba experts. I'm stuck, hope you can help. In the smbmount man page, it says questions should be addressed here, I hope it works. I set up 10 RedHat linux 8.0 systems. As far as I know, they are all the same. The Samba packages have been upgraded to samba-2.2.7-2 in their updates directory. smbmount works on all but 2 of them. On two, which happen to be side by side, incidentally, this happens when a non-root user tried to mount something: $ smbmount //blake01/Pols blake01 -o username=pjohnson Password: mount.smbfs[1103]: ioctl failed, res=-1 1103: Could not umount /home/pjohnson/blake01: Operation not permitted This happens even though the user DOES own the mount point and I've given users permission with chmod +s to use smbmnt $ ls -la /usr/bin/smbmnt -rwsr-sr-x1 root root 560710 Nov 20 11:18 /usr/bin/smbmnt I have stared at this for a long long time, searched far and wide, but everybody just keeps telling me "chmod +s /usr/bin/smbmnt". I have found the trouble shooting Samba chapter on the Samba site, don't see any help there. And, an even bigger part of the mystery is that I am able to use smbclient to log into the target server (a win2000 system) and I can view directories and such. So, obviously, it is something I've done wrong in configuring this system, possibly something on which Samba depends, but it is only infrequently wrong, so most people don't see it. I've confirmed that on all concerned systems, the permissions are comparable: $ ls -la /bin/mount -rwsr-xr-x1 root root81996 Aug 30 2002 /bin/mount $ ls -la /usr/bin/smb* -rwxr-xr-x1 root root 2036 Nov 20 11:18 /usr/bin/smbadduser -rwxr-xr-x1 root root 1118147 Nov 20 11:18 /usr/bin/smbcacls -rwxr-xr-x1 root root 632525 Nov 20 11:18 /usr/bin/smbclient -rwxr-xr-x1 root root 417621 Nov 20 11:18 /usr/bin/smbcontrol -rwsr-sr-x1 root root 560710 Nov 20 11:18 /usr/bin/smbmnt -rwxr-xr-x1 root root 571094 Nov 20 11:18 /usr/bin/smbmount -rwxr-xr-x1 root root 1078825 Nov 20 11:18 /usr/bin/smbpasswd -rwxr-xr-x1 root root 2293 Nov 20 11:18 /usr/bin/smbprint -rwxr-xr-x1 root root 560241 Nov 20 11:18 /usr/bin/smbspool -rwxr-xr-x1 root root 418346 Nov 20 11:18 /usr/bin/smbstatus -rwxr-xr-x1 root root 4862 Nov 20 11:18 /usr/bin/smbtar -rwsr-sr-x1 root root 560384 Nov 20 11:18 /usr/bin/smbumount pj -- Paul E. Johnson email: [EMAIL PROTECTED] Dept. of Political Sciencehttp://lark.cc.ku.edu/~pauljohn University of Kansas Office: (785) 864-9086 Lawrence, Kansas 66045FAX: (785) 864-5700 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win 95/98/Me problem.
On Monday 17 March 2003 20:21, you wrote: > On Mon, 17 Mar 2003, Marcin Wolcendorf wrote: > > On Sunday 16 March 2003 17:19, you wrote: > > > On Sun, 16 Mar 2003, Marcin Wolcendorf wrote: > > > > Hi, > > > > > > > > As I was unable to find solution anywhere else, I write here: I have > > > > a problem sharing win 95/98/Me resources with samba (2.2.7a) as a > > > > PDC. Windows can't get userlist from PDC (it seems, that windows > > > > times out). Win 2k and XP don't have that problem. Is it just a > > > > configuration problem, or is it a general problem with samba?? How > > > > can I add a user to share's access list??? > > > > > > So tell us now: Specifically what have you configured in your Win 9x/Me > > > network configuration? > > > > W98 configuration: > > Network in Control panel: > > Net. conf.: > > client for M$ Netw., file sharing on, > > Auth.: > > comp. name: goodoldsam > > wrk grp: chelmska > > Acc. Ctrl: > > user-level, userlist from chelmska > > > > IP from DHCP, DNS domain name: 'home', > > In your DHCP server config do you have?: > > option netbios-name-servers x.x.x.x; > option netbios-node-type 8; No. But weather I have it or not it doesn't matter- it makes no difference. > This will help MS Windows clients to resolve the domain controller name to > it's IP address. Timinig is very critical in environments that use User > Level Access Control. But they do resolve names with no problems. > Make sure that you have a NETLOGON share (even if you do not use it!). ie: > > [netlogon] > path = /blah/blah > ; (path can be /tmp if you like) > available = yes > browseable = No > read only = yes Also have it: [netlogon] path=... guest ok = yes writeble = no share modes = no > I know it sounds obvious, but make sure that for each MS Windows client > user (logon name) you have an entry in smbpasswd with: > smbpasswd -a 'logon name' I can log in and see samba shares. > If the MS Windows logon name has a space of a '_' in it, then use a > username on your Unix/Linux system that is fewer than 8 characters and > does NOT have a space or '_' char in it, but then add to smb.conf > [globals]: > username map = /etc/samba/smbusers > > And then in /etc/samba/smbusers put (for example): > > root = Administrator > fredm = "Fred Morse" > maryk = mary_katrinski Nice to know, thanks. > > Samba server DNS name: debian.chelmska & debian.home > > > > [global] > > [snip] > >os level = 255 > > Suggest: > os level = 35 > > Setting above 35 does not help any. Nor harm. > > > domain logons = yes [snip] > > ; name resolve order = lmhosts host wins bcast > > Add: > name resolve order = wins bcast host Also didn't change anything (I remembered to restart samba after changes :-) ). [snip] The problem is- I can log in, I can see samba shares, but when I try to share my win folder from w98 box I have to add a user to access list. And that's what I cannot do, cause windows says: "You cannot view the list of users at this time. Please try again later". Some ethereal investigation showed, that w98, when asking for user list, sets 'available buffer length' to 66B and it gets error response from samba saing, that buffer should be 67B long. That conversation repets 3 times, and then win'98 gives up. Regards, M.W. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NSS module
The solution turned out to be moving /lib/libnss_wins.so to /lib/libnss_wins.so.2 Thanks for all the help, everyone. Who should I pester to fix the debs on master.samba.org ? =) -- Josh Litherland ([EMAIL PROTECTED]) pgp0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.2.8 compile failure - Solaris 8, SunCC, LDAP
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 17 Mar 2003, Dallas N Antley wrote: > No, it isn't. According to the 2.2.5 notes, I shouldn't need them. This > worked from 2.2.5 through 2.2.7, which is why I brought it up. Due to > our network configuration, we're not too concerned about the lack of SSL > support. Doh! This would be my fault. The backport of the rebind proc stuff from OpenLDAP must have broken it. I'll look into it (but I'm traveling this week so it may take several days). cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+dp8sIR7qMdg1EfYRAnHOAKCQDXRtoDsiLkk1l/BcjT17jFJ8QwCcDYJR UtiWaTHlXNrQmr0wL35dz50= =UsQ1 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NSS module
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 17 Mar 2003, Josh Litherland wrote: > Does the wins libnss module not "work" yet, or am I misconfiguring it ? > Everything else in the whole samba/winbind realm works, I can log > in as a domain user using pam_winbind, smbclient can resolve netbios > names from WINS, etc etc. but 'ping NETBIOS_NAME' doesn't resolve. > Here's some background data: > > Samba 2.2.8-0.1 on debian from master.samba.org apt repos. > wbinfo -N works fine > smbclient -L works fine > > /etc/nsswitch outtake: > hosts:files dns wins > > /lib/libnss_wins.so exists > > Thanks in advance for any information you can provide ! winbindd has to be running (yes I now this sucks and is not documnted well). cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+dpzSIR7qMdg1EfYRAol0AKD0jDe/cvHCettlrbNKNUoTIOYeGwCg3f3m 0iSCT+wDw393gldqG7pLddA= =qKi+ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 2.2.8 doesn't compile on Tru64-5.1
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 17 Mar 2003, Ramon Kagan wrote: > HI, > > I've successfully compile 2.2.8 on Solaris (6,7,8) and Linux. However on > Tru64-5.1 I get the following during the make: > > Compiling smbd/dfree.c > Compiling smbd/dir.c > smbd/dir.c:649:70: macro "stat" passed 3 arguments, but takes just 2 > smbd/dir.c:716:13: macro "stat" passed 3 arguments, but takes just 2 > make: *** [smbd/dir.o] Error 1 I'll try to get my True64 box running (again) and take a look at this when I get back in the office next week. Ping me on Tuesday (3/25). cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+dpzOIR7qMdg1EfYRAt5QAKDFDdqb2qXCfHmIceUd9q0YaWZbSQCgyUXZ Sg0mKF8uUhqMTMksirKKHAA= =Y+OV -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Please announce on comp.protocols.smb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 17 Mar 2003, General purpose tools wrote: > I would like to suggest that you announce new releases on the > comp.protocols.smb news group. I realize that you have an announcement > mailing list, but with my mail box clogged with spam, I am trying to > avoid subscribing to mailing lists. I also hear that there is a > mailing.unix.samba-technical news group, but that is not carried by > all the news servers. The comp.protocols.smb news group seems to be > widely available and I believe that would be a natural place for > announcements of new releases. Fair enough. I'll add that to the release process. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+dpzJIR7qMdg1EfYRAoZsAJ9vmC32UgGMVgC9JNOgt0n/bUFjzACg0KqO BJ8GCPKN4npuE64nA8Wr4sU= =OnMk -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] can't print over samba
You might try using the printing parameter. man smb.conf /printing n Joel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] can't print over samba
Following a working fine samba install, I just did a new installation of samba 2.2.8 on FreeBSD 4.8(s) and while I can explore the network and I can copy files to unix, I cannot print to unix. Then log.nmbd file says; [2003/03/17 16:58:10, 0] nmbd/nmbd.c:main(795) Netbios nameserver version 2.2.8 started. Copyright Andrew Tridgell and the Samba Team 1994-2002 [2003/03/17 16:58:10, 1] lib/debug.c:debug_message(258) INFO: Debug class all level = 2 (pid 60080 from pid 60080) [2003/03/17 16:58:10, 2] nmbd/nmbd.c:main(833) Becoming a daemon. [2003/03/17 16:58:10, 2] lib/interface.c:add_interface(81) added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 [2003/03/17 16:58:10, 2] nmbd/nmbd_subnetdb.c:make_subnet(192) making subnet name:192.168.1.1 Broadcast address:192.168.1.255 Subnet mask:255 .255.255.0 [2003/03/17 16:58:10, 2] nmbd/nmbd_subnetdb.c:make_subnet(192) making subnet name:UNICAST_SUBNET Broadcast address:0.0.0.0 Subnet mask:0.0.0. 0 [2003/03/17 16:58:10, 2] nmbd/nmbd_subnetdb.c:make_subnet(192) making subnet name:REMOTE_BROADCAST_SUBNET Broadcast address:0.0.0.0 Subnet ma sk:0.0.0.0 [2003/03/17 16:58:14, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(235) find_response_record: response packet id 16946 received with no matching recor d. [2003/03/17 16:58:14, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(235) find_response_record: response packet id 16947 received with no matching recor My samba file follows then simple smb.conf and looks like this: [global] workgroup = WORKGROUP server string = Samba Server log level = 2 load printers = yes log file = /var/log/log.%m max log size = 50 security = user socket options = TCP_NODELAY dns proxy = no [homes] comment = Home Directories browseable = no writeable = yes [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writeable = no printable = yes I am wondering about cups_base which seems to want to run as a daemon in this version. I have an earlier version of samba running on another machine and there is no cup_base installed. Do I need it? I get these errors on log.50163099sp [2003/03/17 20:46:49, 0] printing/print_cups.c:cups_printername_ok(388) Unable to get printer status for c - client-error-not-found [2003/03/17 20:46:49, 0] smbd/service.c:make_connection(252) 50163099sp (65.95.213.114) couldn't find service c [2003/03/17 20:46:49, 2] smbd/server.c:exit_server(511) Closing connections I get this on my log.smbd; [2003/03/17 20:43:44, 2] smbd/reply.c:reply_special(111) netbios connect: local=d remote=dale [2003/03/17 20:43:44, 2] smbd/reply.c:reply_special(92) netbios connect: name1=Dname2=DALE [2003/03/17 20:43:44, 2] smbd/reply.c:reply_special(111) netbios connect: local=d remote=dale [2003/03/17 20:46:49, 2] smbd/reply.c:reply_special(92) netbios connect: name1=Dname2=50163099SP [2003/03/17 20:46:49, 2] smbd/reply.c:reply_special(111) netbios connect: local=d remote=50163099sp [2003/03/17 21:15:05, 2] smbd/reply.c:reply_special(92) netbios connect: name1=Dname2=LOCALHOST [2003/03/17 21:15:05, 2] smbd/reply.c:reply_special(111) netbios connect: local=d remote=localhost I have tried several different versions of smb.conf including then one from a previous version of samba which worked fine before then upgrade. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] problem with Windows XP file syncing
> > Anyway, I don't get what you mean by "rsync from samba-server to xp-share". The XP > laptop doesnt have > any shares. just another way to synchronise files. You would need to create a share on your laptop, mount it on the server, and use "rsync" on Freebsd/linux server to synchronise laptop and server files. regards, Richard Coates. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.2.8 compile failure - Solaris 8, SunCC, LDAP
On Mon, 17 Mar 2003, Dallas N Antley wrote: > /- On Monday (3/17/2003 22:50) John H Terpstra <[EMAIL PROTECTED]> wrote: > > On Mon, 17 Mar 2003, Dallas N Antley wrote: > > > > > My apologies if this isn't the correct posting address -- I didn't see > > > an obvious "report problems here" on the website. Some of the code > > > modifications introduced between 2.2.7 and 2.2.8 don't appear to agree > > > with Solaris, using Sun's CC, with the LDAP support code. Note that > > > I'm linking against the Solaris-bundled LDAP package (SUNWlldap). > [ ... ] > > > > Is OpenLDAP installed on your system, with the development libraries? > > No, it isn't. According to the 2.2.5 notes, I shouldn't need them. > This worked from 2.2.5 through 2.2.7, which is why I brought it up. > Due to our network configuration, we're not too concerned about the > lack of SSL support. Well, I am not sure if you need OpenLDAP now or not. I was not aware that we used to work with the Sun LDAP libraries. I do know if anything was changed that might affect 2.2.8 compared with 2.2.5. So I hope I do not send you on a wild gosse chase. > > | Changes in 2.2.5 > | > | > | See the cvs log for SAMBA_2_2 for more details > [ ... ] > | 4) Correctly link against Sun LDAP libraries on Solaris 8 (even > | through there is no apparent SSL support there) > > If OpenLDAP is now a requirement, the documentation should be updated > accordingly. Of course, OpenLDAP needs to include a pointer to the > Berkely DB source code, but that's another project entirely. > > I'll try to locate the OpenLDAP dependencies and rebuild Samba > accordingly. If that works, I'll post a follow-up message so we can > update the documentation. > > [ ... ] > > Samba-3.0.0 supports multiple password back-ends. See man smb.conf and > > look for "passdb backend". > > Thanks for the pointer. > > Dallas > > - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Cannot sync browser lists
On Mon, 2003-03-17 at 23:13, [EMAIL PROTECTED] wrote: > It's still working like a champ. good to hear everything is ok. The weird thing is it used to work > over the ctc channel. Then one weekend it stopped, and nothing I could > do would get it started again. I wonder..do you use "rip" or a similar routing protocol? hhmm.. regards, Richard Coates. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: XP "logon failure" but still logs on -- no roamingprofile
> Okay. I guess the next thing to do is try with a fresh installation and > then see if it occurs again as elements get added. our setup... xp-pro (pre sp1) and office2k, local profiles only, sign-or-seal; no problems so far. > > Thanks. I've noticed that XP has provisions for requiring passwords to > be changed, but didn't look in to it at all. Perhaps a small script which > sets the necessary registry entries? I'm trying to generate more interest in using already builtin Xp policy options/features. Why re-invent the wheel? Have you been following this thread? comments?... Re: [Samba] gpedit.msc as centralized policy for 2k/xp clients > Our password-expiration policy here involves me going around once seen Xp password expire in group/local policy? > a year and beating on people's heads to give me new passwords which I then > enter in to a program that goes and changes them in the half-dozen or so > places where it's stored: nis, samba, mysql, windoze, etc. ...maybe ldap or mysql password database since you already have it? saw a module for it somewhere... regards, Richard Coates. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.2.8 compile failure - Solaris 8, SunCC, LDAP
/- On Monday (3/17/2003 22:50) John H Terpstra <[EMAIL PROTECTED]> wrote: > On Mon, 17 Mar 2003, Dallas N Antley wrote: > > > My apologies if this isn't the correct posting address -- I didn't see > > an obvious "report problems here" on the website. Some of the code > > modifications introduced between 2.2.7 and 2.2.8 don't appear to agree > > with Solaris, using Sun's CC, with the LDAP support code. Note that > > I'm linking against the Solaris-bundled LDAP package (SUNWlldap). [ ... ] > > Is OpenLDAP installed on your system, with the development libraries? No, it isn't. According to the 2.2.5 notes, I shouldn't need them. This worked from 2.2.5 through 2.2.7, which is why I brought it up. Due to our network configuration, we're not too concerned about the lack of SSL support. | Changes in 2.2.5 | | | See the cvs log for SAMBA_2_2 for more details [ ... ] | 4) Correctly link against Sun LDAP libraries on Solaris 8 (even | through there is no apparent SSL support there) If OpenLDAP is now a requirement, the documentation should be updated accordingly. Of course, OpenLDAP needs to include a pointer to the Berkely DB source code, but that's another project entirely. I'll try to locate the OpenLDAP dependencies and rebuild Samba accordingly. If that works, I'll post a follow-up message so we can update the documentation. [ ... ] > Samba-3.0.0 supports multiple password back-ends. See man smb.conf and > look for "passdb backend". Thanks for the pointer. Dallas -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] WinNT4WS problems... PLEASE HELP, URGENT
On Mon, 17 Mar 2003 [EMAIL PROTECTED] wrote: > I've reached the point where I'm bashing my head > against a brick wall here. I'm trying to get my > windows nt4ws clients to authenticate to my samba > server on linux redhat 7.1 and I keep getting the > error message: > > the domain controller for the domain TREBASV.COM is > not currently available. Suggest you change your domain name to "trebasv", ie: in smb.conf [globals]: workgroup = trebasv A '.' can do bad things! > Attached is my smb.conf output from testparms Please email it to me direct at [EMAIL PROTECTED] Do not send attachments to the samba list - they get stripped out. PS: Please send me only the output from: testparms -x > > All of my paths on my filesystem are the same as the > paths in the smb.conf > > I want users to be able to have the same home > directories as their unix homes... in my case > /u2/home/%u - John T. -- John H Terpstra Email: [EMAIL PROTECTED]-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and Windows XP
I have set up a SMB server with share level access and password encryption enabled. When I access Samba from WinXP it prompts me for a username and password, which is what I want. However, the username is greyed out (filled in with 'linuxbox\Guest'). Any suggestions on how to fix this? J.P. Cummins [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] WinNT4WS problems... PLEASE HELP, URGENT
I've reached the point where I'm bashing my head against a brick wall here. I'm trying to get my windows nt4ws clients to authenticate to my samba server on linux redhat 7.1 and I keep getting the error message: the domain controller for the domain TREBASV.COM is not currently available. Attached is my smb.conf output from testparms All of my paths on my filesystem are the same as the paths in the smb.conf I want users to be able to have the same home directories as their unix homes... in my case /u2/home/%u -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] logon script fails under 2.2.8
On Tue, 18 Mar 2003 [EMAIL PROTECTED] wrote: > After I upgrade from 2.2.7a to 2.2.8, my logon script (a binary .exe which > calls the "net use" commands) is not executed after logon (from Win98 > clients). "net use" reports that \\server\netlogon is in use. What'd gone > wrong ? I can't guess from the information you have given. Sorry, my crystal ball is worn out. PS: My logon script works fine on my installation with three Windows Me clients, but then again, mine is running a .bat file. If my crystal ball could see your smb.conf file I could guess a few things that migh help you. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] logon script fails under 2.2.8
After I upgrade from 2.2.7a to 2.2.8, my logon script (a binary .exe which calls the "net use" commands) is not executed after logon (from Win98 clients). "net use" reports that \\server\netlogon is in use. What'd gone wrong ? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] still can't print to samba printer from winxp
On Mon, 17 Mar 2003, Jeff D. Hamann wrote: > I have upgraded samba to 2.2.7a and cannot print to my printer attached to > my BSD machine. I can use the share dirs, etc, but cannot print. My log file > contains: > > [2003/03/17 16:17:19, 0] lib/util_sock.c:open_socket_in(804) > bind failed on port 139 socket_addr = 0.0.0.0. > Error = Address already in use > [2003/03/17 16:18:02, 0] smbd/service.c:make_connection(252) > 50163099sp (204.250.145.147) couldn't find service c > [2003/03/17 16:20:46, 0] lib/util_sock.c:open_socket_in(804) > bind failed on port 139 socket_addr = 0.0.0.0. > Error = Address already in use > [2003/03/17 16:22:22, 0] lib/util_sock.c:open_socket_in(804) > bind failed on port 139 socket_addr = 0.0.0.0. > Error = Address already in use This means that a process is already using tcp port 139. You can use: netstat -ap | grep 139 to find which process that may be. > > > I'm not sure what this means: > bind failed on port 139 socket_addr = 0.0.0.0. Have you configured inetd to run smbd? > > which socket_addr? client or server? Server. Do you have a firewall? It may be blocking access to the loopback address (127.0.0.1). - John T. > > > Here's my smb.conf file: > > [global] > workgroup = skookum > server string = Samba Server [FreeBSD 2.2.7a] > load printers = yes > printcap name = /etc/printcap > log file = /var/log/log.%m > max log size = 50 > encrypt passwords = yes > security = user > socket options = TCP_NODELAY > disable spoolss = yes > log file = /var/log/samba.log > max log size = 5 > > # Share Definitions > == > [homes] > comment = Home Directories > browseable = no > writeable = no > printable = yes > [printers] > comment = All Printers > path = /var/spool/samba > browseable = yes > guest ok = yes > writeable = no > printable = yes > > > > -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] still can't print to samba printer from winxp
I have upgraded samba to 2.2.7a and cannot print to my printer attached to my BSD machine. I can use the share dirs, etc, but cannot print. My log file contains: [2003/03/17 16:17:19, 0] lib/util_sock.c:open_socket_in(804) bind failed on port 139 socket_addr = 0.0.0.0. Error = Address already in use [2003/03/17 16:18:02, 0] smbd/service.c:make_connection(252) 50163099sp (204.250.145.147) couldn't find service c [2003/03/17 16:20:46, 0] lib/util_sock.c:open_socket_in(804) bind failed on port 139 socket_addr = 0.0.0.0. Error = Address already in use [2003/03/17 16:22:22, 0] lib/util_sock.c:open_socket_in(804) bind failed on port 139 socket_addr = 0.0.0.0. Error = Address already in use I'm not sure what this means: bind failed on port 139 socket_addr = 0.0.0.0. which socket_addr? client or server? Here's my smb.conf file: [global] workgroup = skookum server string = Samba Server [FreeBSD 2.2.7a] load printers = yes printcap name = /etc/printcap log file = /var/log/log.%m max log size = 50 encrypt passwords = yes security = user socket options = TCP_NODELAY disable spoolss = yes log file = /var/log/samba.log max log size = 5 # Share Definitions == [homes] comment = Home Directories browseable = no writeable = no printable = yes [printers] comment = All Printers path = /var/spool/samba browseable = yes guest ok = yes writeable = no printable = yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Change somebody else's domain password?
On Mon, Mar 17, 2003 at 08:04:26AM -0600, Genchev, Sergei said: > The remote machine is Windows NT 4.0 PDC. Oh I see. I thought it was Linux :/ > Can you log in to that remote machine as yourself or some other user, > and then su to root? > > Genchev, Sergei wrote: > > > Login as root and do what? Root can change local smbpasswd file but if I > >use smbpasswd to change password on a remote machine (PDC) I need to supply > >username and old password, it does not matter whether I am root or not on a > >local machine -- Adam Smith Information Technology Officer SAGE Automation Ltd. [EMAIL PROTECTED] http://www.sageautomation.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] can not join domain
On Mon, 17 Mar 2003, Judy Lin wrote: > Also, I am able to log into the local machine (not domain) and access the > samba share from there. But I am just unable to join the domain for some > reason. Can anyone see why the steps I took didn't work? If you connect to the Samba server via network neighborhood then before you can join the domain you need to (from as command shell) run: net use * /delete This will drop the current connection to the samba server and allow the domain join process to setup it's own connection. Also, have you applied the registry change to turn off sign and seal? You will find the patch you need in the ~samba-2.2.8/docs/Registry directory. - John T. > Judy > > On Mon, 17 Mar 2003, Judy Lin wrote: > > > I have samba 2.2.8 is running as a PDC on RedHat Linux 7.3. > > I can't seem to get my Windows-XP machine to join the domain. Other > > machines are already in the domain and work fine. But when I tried to add > > another machine to the domain, I'm running into problems. I added a > > machine account to the unix password file. I also added a machine account > > to smbpasswd. Then, on the XP machine, I tried to join the domain and it > > asks me to provide a username with privileges (which is root) in this > > case, which also exists in /etc/passwd and smbpasswd. Somehow it can't > > find the PDC but it sill lets me join the domain. When I go to log in, it > > says it can't find a PDC. Is there anything I'm missing here? > > > > Judy > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] can not join domain
Also, I am able to log into the local machine (not domain) and access the samba share from there. But I am just unable to join the domain for some reason. Can anyone see why the steps I took didn't work? Judy On Mon, 17 Mar 2003, Judy Lin wrote: > I have samba 2.2.8 is running as a PDC on RedHat Linux 7.3. > I can't seem to get my Windows-XP machine to join the domain. Other > machines are already in the domain and work fine. But when I tried to add > another machine to the domain, I'm running into problems. I added a > machine account to the unix password file. I also added a machine account > to smbpasswd. Then, on the XP machine, I tried to join the domain and it > asks me to provide a username with privileges (which is root) in this > case, which also exists in /etc/passwd and smbpasswd. Somehow it can't > find the PDC but it sill lets me join the domain. When I go to log in, it > says it can't find a PDC. Is there anything I'm missing here? > > Judy > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] can not join domain
I have samba 2.2.8 is running as a PDC on RedHat Linux 7.3. I can't seem to get my Windows-XP machine to join the domain. Other machines are already in the domain and work fine. But when I tried to add another machine to the domain, I'm running into problems. I added a machine account to the unix password file. I also added a machine account to smbpasswd. Then, on the XP machine, I tried to join the domain and it asks me to provide a username with privileges (which is root) in this case, which also exists in /etc/passwd and smbpasswd. Somehow it can't find the PDC but it sill lets me join the domain. When I go to log in, it says it can't find a PDC. Is there anything I'm missing here? Judy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] (Fwd) Samba Question
On Mon, 17 Mar 2003, Alvaro Rosales R. wrote: > > Hello guys > > Is it posible to have more than one samba server, and have the > samba users and smb encrypted passwords located in a > centralized place (a Samba logon server). How can I do this? . Yes. Each Unix/Linux machine will have it's own name. Just make the workgroup the same for all of them. For the rest, best you read samba documentation. See http://us1.samba.org/samba/docs/ - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smb.conf
On Mon, 17 Mar 2003, Dominic Iadicicco wrote: > > Ok when I use swat to configure my smb.conf file it seems to work, but when I > try to read my smb.conf file with vi, its empty. Now if I delete this file, Did you configure samba in SWAT before you commited it? What is the size of the file after SWAT writes it? > samba won't start. When I recreate it with swat samba will start but I still > cannot read it with an editor. > > Can anyone tell me why I can't read this file after swat writes to it. Need to know what is in smb.conf after you write it. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (Fwd) Samba Question
Hello guys Is it posible to have more than one samba server, and have the samba users and smb encrypted passwords located in a centralized place (a Samba logon server). How can I do this? . Thank you in advance --- End of forwarded message --- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba vs Windows SAK
erx ([EMAIL PROTECTED]) wrote*: > >Hi, > > SNIP < > > If it weren't true, there would be no point at all to marketing. Marketing isn't based on truth. > > >So you know of nothing, then, that counters Microsoft's arguments? "Truth in advertising" doesn't apply to Microsoft. > > > >ERX > > > >>-Original Message- >>From: John H Terpstra [mailto:[EMAIL PROTECTED] >>Sent: Monday, March 17, 2003 3:11 PM >>To: erx >>Cc: [EMAIL PROTECTED] >>Subject: Re: [Samba] Samba vs Windows SAK >> >> >>On Mon, 17 Mar 2003, erx wrote: >> >>> Has anyone seen this: >>> >>http://www.microsoft.com/windows/Embedded/sak/evaluation/compare/adva >>ntage.asp >>> >>> And has anyone from the Samba team posted a response? It seems like some of >>> the information presented there is contrary to what I know about Samba. >> >>Why reply to Microsoft? What will it achieve? >>As things stand we can demonstrate that they are not in touch: >> - Not with their own customers >> - Not with Samba capabilities >> >>As to 'Truth' - customers make up their own minds on that one. No one can >>prove 'Truth' to anyone. >> >>- John T. >>-- >>John H Terpstra >>Email: [EMAIL PROTECTED] > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smb.conf
Ok when I use swat to configure my smb.conf file it seems to work, but when I try to read my smb.conf file with vi, its empty. Now if I delete this file, samba won't start. When I recreate it with swat samba will start but I still cannot read it with an editor. Can anyone tell me why I can't read this file after swat writes to it. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.2.8 compile failure - Solaris 8, SunCC, LDAP
On Mon, 17 Mar 2003, Dallas N Antley wrote: > My apologies if this isn't the correct posting address -- I didn't see > an obvious "report problems here" on the website. Some of the code > modifications introduced between 2.2.7 and 2.2.8 don't appear to agree > with Solaris, using Sun's CC, with the LDAP support code. Note that > I'm linking against the Solaris-bundled LDAP package (SUNWlldap). > > |% env CFLAGS="-xcg92 -xO4 -xspace" LDFLAGS="-s" ./configure \ > | --with-quotas --with-utmp --with-acl-support --with-winbind\ > | --with-pam --with-ldapsam --prefix=/opt/samba_2.2.8\ > | --mandir=/opt/samba_2.2.8/share/man\ > | --infodir=/opt/samba_2.2.8/share/info \ > | --sysconfdir=/opt/samba_2.2.8/share/conf \ > | --with-configdir=/opt/samba_2.2.8/share/conf \ > | --with-privatedir=/var/samba/private --with-piddir=/var/run\ > | --with-swatdir=/opt/samba_2.2.8/share/swat \ > | --localstatedir=/var/samba |& tee DEPOT.conf > |% cc -V > |cc: Sun WorkShop 6 update 2 C 5.3 2001/05/15 > |usage: cc [ options] files. Use 'cc -flags' for details > |% uname -a > |SunOS 5.8 Generic_108528-19 sun4u sparc SUNW,Sun-Fire-280R > > While this worked fine for 2.2.7, using '--with-ldapsam' yields the > following fatal error. > > |Compiling passdb/pdb_ldap.c > |"passdb/pdb_ldap.c", line 276: undefined symbol: ldap_state > |"passdb/pdb_ldap.c", line 276: undefined struct/union member: bind_dn > |"passdb/pdb_ldap.c", line 276: left operand of "->" must be pointer to struct/union > |"passdb/pdb_ldap.c", line 276: warning: improper pointer/integer combination: arg #1 > |"passdb/pdb_ldap.c", line 938: warning: argument #2 is incompatible with prototype: > |prototype: pointer to char : "include/proto.h", line 843 > |argument : pointer to const char > |cc: acomp failed for passdb/pdb_ldap.c > |*** Error code 2 > |make: Fatal error: Command failed for target `passdb/pdb_ldap.o' Is OpenLDAP installed on your system, with the development libraries? > > Re-configuring without '--with-ldapsam' allows the build to complete, > albeit with a fair number more compiler warnings then with 2.2.7. > > Thanks much for any help you can provide. > > Dallas > > PS. On a related note, it doesn't appear possible to build Samba with > support for more than one potential SAM source. I'd like one > build to support both /etc/smbpasswd and LDAP-SAM, with config > file options specifying which source. Did I miss some > compile-time option? Thanks. Samba-3.0.0 supports multiple password back-ends. See man smb.conf and look for "passdb backend". - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] printer admin
Hello List! I I'm still having problems with the rpcclient, but I have another question which maybe be the solution... I have one smb-server (2.2.8) which is the printserver, and it has joined the domain. There is another samba-server (2.2.5) who is PDC. When samba is checking who is the printer admin, is it asking the PDC? And would I do something on the PDC? And it is a bit confusing when the man-page on samba.org say's that the printer admin is a service parameter but I have seen some posts that says it is an global parameter... (I've tried both but nothing changes..) Our Unix-accounts is in an NIS-map. Or could it be a problem with the SID? I have reinstalled the samba (actually a couple of times...) I can do rpcclient -U pc -c enumdrivers printserver but not rpcclient -U pc -c enumprinters printserver I can send log-files and smb.conf if requested... Tia Patrik Carlsson -- Patrik Carlsson Högskolan i Gävle Driftsansvarig, IT-enheten Kungsbäcksvägen 47 026-64 85 00, 070-329 88 25 801 76 Gävle [EMAIL PROTECTED] -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 2.2.8 compile failure - Solaris 8, SunCC, LDAP
My apologies if this isn't the correct posting address -- I didn't see an obvious "report problems here" on the website. Some of the code modifications introduced between 2.2.7 and 2.2.8 don't appear to agree with Solaris, using Sun's CC, with the LDAP support code. Note that I'm linking against the Solaris-bundled LDAP package (SUNWlldap). |% env CFLAGS="-xcg92 -xO4 -xspace" LDFLAGS="-s" ./configure\ | --with-quotas --with-utmp --with-acl-support --with-winbind \ | --with-pam --with-ldapsam --prefix=/opt/samba_2.2.8 \ | --mandir=/opt/samba_2.2.8/share/man \ | --infodir=/opt/samba_2.2.8/share/info\ | --sysconfdir=/opt/samba_2.2.8/share/conf \ | --with-configdir=/opt/samba_2.2.8/share/conf \ | --with-privatedir=/var/samba/private --with-piddir=/var/run \ | --with-swatdir=/opt/samba_2.2.8/share/swat \ | --localstatedir=/var/samba |& tee DEPOT.conf |% cc -V |cc: Sun WorkShop 6 update 2 C 5.3 2001/05/15 |usage: cc [ options] files. Use 'cc -flags' for details |% uname -a |SunOS 5.8 Generic_108528-19 sun4u sparc SUNW,Sun-Fire-280R While this worked fine for 2.2.7, using '--with-ldapsam' yields the following fatal error. |Compiling passdb/pdb_ldap.c |"passdb/pdb_ldap.c", line 276: undefined symbol: ldap_state |"passdb/pdb_ldap.c", line 276: undefined struct/union member: bind_dn |"passdb/pdb_ldap.c", line 276: left operand of "->" must be pointer to struct/union |"passdb/pdb_ldap.c", line 276: warning: improper pointer/integer combination: arg #1 |"passdb/pdb_ldap.c", line 938: warning: argument #2 is incompatible with prototype: |prototype: pointer to char : "include/proto.h", line 843 |argument : pointer to const char |cc: acomp failed for passdb/pdb_ldap.c |*** Error code 2 |make: Fatal error: Command failed for target `passdb/pdb_ldap.o' Re-configuring without '--with-ldapsam' allows the build to complete, albeit with a fair number more compiler warnings then with 2.2.7. Thanks much for any help you can provide. Dallas PS. On a related note, it doesn't appear possible to build Samba with support for more than one potential SAM source. I'd like one build to support both /etc/smbpasswd and LDAP-SAM, with config file options specifying which source. Did I miss some compile-time option? Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] MSDFS problems with WinXP clients (after 2.2.8 upgrade)
Hello Folks, I seem to be having problems with MSDFS links with SAMBA-2.2.8 for Windows XP clients. However, Windows 2000 clients are working fine with 2.2.8 (link not found). Is there anyone else getting this behaviour? I have to say that everything else seems to work fine for all Windows clients. Thanks. -- Luc Lalonde, analyste - Département de génie informatique: École polytechnique de Montréal (514) 340-4711 x5049 [EMAIL PROTECTED] - War is good for business, invest your son! - -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba vs Windows SAK
On Tue, 2003-03-18 at 05:45, erx wrote: > Has anyone seen this: > http://www.microsoft.com/windows/Embedded/sak/evaluation/compare/advantage.asp > > And has anyone from the Samba team posted a response? It seems like some of > the information presented there is contrary to what I know about Samba. When that paper was written, it was actually relatively accurate. The thing I enjoyed most about it was the fact that we now had a very nicely packaged 'todo' list. As JHT points out, we are pretty well finished on getting that TODO list done! Other items on the list came down to 'too much choice v MS picks it for you', and still others picked out things that really were just plain silly - like the different AC v LT quotas (that mess was insane!). Finally, there is one point that they make well: If you are a vendor, and you chose Samba, you have the costs of integrating it into your environment - but they neglect to mention that you also have the opportunity to integrate it into your environment - not integrate your environment into it! (This is what makes a Samba NAS more than a rack-mounted Windows install IMHO). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] network printer
Hi, I have an Epson C60 printer installed on Redhat 7.3. I shared the printer and I can see it on the network. I added it on the workstation, but when I tried to print to it, it says "Cannot print, Access to printer denied?" Any ideas? Thanks, -Paul Hong -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Support - DOES IT WORK?
Hi, Apologies for an off topic, but important request. Please DO NOT REPLY TO THIS LIST! Please DO NOT DISCUSS this ON LIST. Make all replies direct to: [EMAIL PROTECTED] There are claimes that open source software poses a big risk to commercial users because there exists NO formal support facilities. A journalist would like to speak with key people who have obtained support from both the open source community and from proprietary vendors (one name in particular omitted for obvious reasons). They want feedback of a credible comparison. I know there are people on this list who have received phone calls offering support and help, just because they emailed this list. It's time the world got to know about this. The company that is mounting a smear campaign about this subject need to realise that they just ticked off the wrong community - but we MUST be professional about it. If you feel that you have something to contribute and would like to be interviewed please email me direct. Thanks. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Improving my smb.conf
I am currently using samba as a file server only. But due to security requirements at my company I have modify the settings so that I maximize the best samba "security solution" possible. This System is in a NIS environment and obviously the password server is not being used since security=SHARE. Here is my smb.conf file Any Advice will be apreciated. Thank You # Samba config file created using SWAT # from aadhcp6-62.aa.hcia.com (157.199.6.62) # Date: 2003/03/17 16:30:49 # Global parameters [global] workgroup = DAVE netbios name = LION server string = Lion Samba Server security = SHARE encrypt passwords = Yes password server = george00 log file = /var/log/samba.log max log size = 50 time server = Yes os level = 0 local master = No domain master = No wins server = 10.10.1.44 hosts allow = 10.10 [bentest] comment = Ben Test Directories path = /tmp/bentest valid users = bsegb force group = denalidata read only = No create mask = 0774 guest ok = Yes __ Do you Yahoo!? Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop! http://platinum.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba vs Windows SAK
I was typing my two cents on the whole Win2k/Samba discussion and about to post it. I was going off about the ASP support and the filesystem, RAID and drivers, TCO and time-to-market, blah blah blah... Then I get this email from CERT and decided to trash the whole email and just give everyone a nice link and let them decide if THIS is what they really want as their appliance OS: http://www.cert.org/advisories/CA-2003-09.html This is only one of many for those who don't deal with MS servers on a regular basis. Just search CERT for "IIS" and you'll see. I thought they had whole teams of IT people testing these things so the OEM didn't have to, right? :) Khanh Tran Network Operations Sarah Lawrence College -Original Message- From: erx [mailto:[EMAIL PROTECTED] Sent: Monday, March 17, 2003 3:21 PM To: John H Terpstra Cc: [EMAIL PROTECTED] Subject: RE: [Samba] Samba vs Windows SAK Hi, I wasn't looking for a response to Microsoft. You're right, they could care less what the linux community thinks. What I was looking for was a response for those who might be trying to make a decision about whether to invest in a Microsoft SAK based product, or whether to try using a Linux+Samba based solution. The fact that we *could* demonstrate these things (but haven't) is not sufficient. Not to me, not to those who might be deciding. As far as truth goes, I couldn't disagree more. Truth is relative; truth changes over time. It is affected by what you see, hear, read, and believe. I can affect your truth; you can affect mine. If it weren't true, there would be no point at all to marketing. So you know of nothing, then, that counters Microsoft's arguments? ERX >-Original Message- >From: John H Terpstra [mailto:[EMAIL PROTECTED] >Sent: Monday, March 17, 2003 3:11 PM >To: erx >Cc: [EMAIL PROTECTED] >Subject: Re: [Samba] Samba vs Windows SAK > > >On Mon, 17 Mar 2003, erx wrote: > >> Has anyone seen this: >> >http://www.microsoft.com/windows/Embedded/sak/evaluation/compare/adva >ntage.asp >> >> And has anyone from the Samba team posted a response? It seems like some of >> the information presented there is contrary to what I know about Samba. > >Why reply to Microsoft? What will it achieve? >As things stand we can demonstrate that they are not in touch: > - Not with their own customers > - Not with Samba capabilities > >As to 'Truth' - customers make up their own minds on that one. No one can >prove 'Truth' to anyone. > >- John T. >-- >John H Terpstra >Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] dual boot; Linux/XP join a domain
> Sounds like you are using the same machine name for > both XP and Samba. Yes, funny as I was about to change the netbios names as I am using both wins and dns for resolution. Perhaps calling the machines namexp (wins name) and name (dns name) will be a sort of elegant solution. Thanks for the valued input. Bri- __ Do you Yahoo!? Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop! http://platinum.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] dual boot; Linux/XP join a domain
On Mon, 17 Mar 2003 [EMAIL PROTECTED] wrote: > Hi, > > Summary; > - boot into XP and join a domain > - boot into Linux and join a domain > - reboot into XP and I must join the domain again. > > The last part is an issue as I can't expect or allow a > user to join a domain at will as they would require > the root/admin account to do so. > > Is this because Linux changed the SID which domain > security is based on? > Isn't the SID a product of ethernet # and hdd serial > #? Sounds like you are using the same machine name for both XP and Samba. If that is the case, then what you saw is expected behaviour. XP set the machine account details and Samba then changed it. But if XP and Samba have a different NetBIOS name then this problem should not happen. - John T. > > Bri- > > > > > > __ > Do you Yahoo!? > Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop! > http://platinum.yahoo.com > -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Unix user rights to join domain
On Mon, 17 Mar 2003, Olaf Grewe wrote: > Hi John, > > Thanks for your quick reaction. If you don't mind, I'd like to ask you - > or someone from the list for that matter - for a slightly more granular > answer. I was trained to avoid the Administrator or root as much as > possible, not least for accountability reasons. For most tasks on *nix and > Windows it is possible to grant rights more granular than using root. So I > reckon this holds true for Samba also. Most likely, it's a matter of > having the Admin user in the right *nix group? The smbpasswd file is owned by root. It is a little difficult to avoid Unix system security. In short, what ever user you use, the uid needs to be '0'. - John T. > > Regards > Olaf > > > On Mon, 17 Mar 2003, John H Terpstra wrote: > > > On Mon, 17 Mar 2003, Olaf Grewe wrote: > > > > > Hi, > > > > > > I recently joined a Samba server to a Samba PDC'd domain. It worked rather > > > smoothly after I figured out that I had to create a root account with > > > smbpasswd on the Samba PDC. Without it, I was stuck with the following > > > error: > > > > smbpasswd -j WHATEVER -r WHOCARES -Uname%password > > > error setting trust account password: NT_STATUS_ACCESS_DENIED > > > Unable to join domain WHATEVER > > > > > > I'd rather prefer to use my domain_adm account for this kind of tasks but > > > it's obviously lacking sufficient rights (whether on directories and/or > > > files, I don't know). The domain_adm account is obviously mentioned in the > > > domain admin group parameter of smb.conf and the machine account was added > > > to the smbpasswd of WHOCARES beforehand. > > > > > > My question is: Which rights does an admin account need to be able to join > > > other machines into a domain? Joining Samba to a Samba PDC'd domain > > > appears to be faily uncommon, as I didn't find much by searching the > > > respective lists and groups. > > > > When you want to make a MS Windows NT/2K/XP client a member of a MS > > Windwos network Domain, you must provide the name of an account and > > password for a user who has full "Domain Administrator" ability. That user > > is usually 'Administrator' on the domain controllers. > > > > The user 'root' is the equivalent of the MS Windows NT 'Administrator'. > > > > Obviously, every domain needs an 'Administrator' account. It is thus > > logical that 'root' needs to have an smbpasswd account. You can map this > > to administrator by setting in smb.conf [globals]: > > username map = /etc/samba/smbusers > > > > And in /etc/samba/smbusers: > > root = Administrator > > > > Att he end of the day, just like with MS Windows NT/2K only Adminsitrator > > (by default) has the right to add users/machines to the Domain. > > > > - John T. > > -- > > John H Terpstra > > Email: [EMAIL PROTECTED] > > > -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Unix user rights to join domain
Hi John, Thanks for your quick reaction. If you don't mind, I'd like to ask you - or someone from the list for that matter - for a slightly more granular answer. I was trained to avoid the Administrator or root as much as possible, not least for accountability reasons. For most tasks on *nix and Windows it is possible to grant rights more granular than using root. So I reckon this holds true for Samba also. Most likely, it's a matter of having the Admin user in the right *nix group? Regards Olaf On Mon, 17 Mar 2003, John H Terpstra wrote: > On Mon, 17 Mar 2003, Olaf Grewe wrote: > > > Hi, > > > > I recently joined a Samba server to a Samba PDC'd domain. It worked rather > > smoothly after I figured out that I had to create a root account with > > smbpasswd on the Samba PDC. Without it, I was stuck with the following > > error: > > > smbpasswd -j WHATEVER -r WHOCARES -Uname%password > > error setting trust account password: NT_STATUS_ACCESS_DENIED > > Unable to join domain WHATEVER > > > > I'd rather prefer to use my domain_adm account for this kind of tasks but > > it's obviously lacking sufficient rights (whether on directories and/or > > files, I don't know). The domain_adm account is obviously mentioned in the > > domain admin group parameter of smb.conf and the machine account was added > > to the smbpasswd of WHOCARES beforehand. > > > > My question is: Which rights does an admin account need to be able to join > > other machines into a domain? Joining Samba to a Samba PDC'd domain > > appears to be faily uncommon, as I didn't find much by searching the > > respective lists and groups. > > When you want to make a MS Windows NT/2K/XP client a member of a MS > Windwos network Domain, you must provide the name of an account and > password for a user who has full "Domain Administrator" ability. That user > is usually 'Administrator' on the domain controllers. > > The user 'root' is the equivalent of the MS Windows NT 'Administrator'. > > Obviously, every domain needs an 'Administrator' account. It is thus > logical that 'root' needs to have an smbpasswd account. You can map this > to administrator by setting in smb.conf [globals]: > username map = /etc/samba/smbusers > > And in /etc/samba/smbusers: > root = Administrator > > Att he end of the day, just like with MS Windows NT/2K only Adminsitrator > (by default) has the right to add users/machines to the Domain. > > - John T. > -- > John H Terpstra > Email: [EMAIL PROTECTED] > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] dual boot; Linux/XP join a domain
Hi, Summary; - boot into XP and join a domain - boot into Linux and join a domain - reboot into XP and I must join the domain again. The last part is an issue as I can't expect or allow a user to join a domain at will as they would require the root/admin account to do so. Is this because Linux changed the SID which domain security is based on? Isn't the SID a product of ethernet # and hdd serial #? Bri- __ Do you Yahoo!? Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop! http://platinum.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba vs Windows SAK
On Mon, 17 Mar 2003, erx wrote: > Hi, > > I wasn't looking for a response to Microsoft. You're right, they could care > less what the linux community thinks. What I was looking for was a response > for those who might be trying to make a decision about whether to invest in a > Microsoft SAK based product, or whether to try using a Linux+Samba based > solution. > > The fact that we *could* demonstrate these things (but haven't) is not > sufficient. Not to me, not to those who might be deciding. Good. Will you contribute what is needed? It is welcome. > As far as truth goes, I couldn't disagree more. Truth is relative; truth > changes over time. It is affected by what you see, hear, read, and believe. I > can affect your truth; you can affect mine. If it weren't true, there would be > no point at all to marketing. Truth is absolute. Either there is gravity or there is not. No matter what you think when you jump off a tall building, whether you believe there is gravity of not - you are still subject ot it. Now understand, gravity has never killed anyone, but if you jump off a tall building the truth is that hitting the ground might kill you! :) Relative? Really? Please do not try jumping off a tall building, the truth might hurt! Your perceptions of truth might change, but truth stands firm. > So you know of nothing, then, that counters Microsoft's arguments? Why don't you write what you would like to see on the Samba web site. We do not disciminate you know. All good contributions are always welcome. Since you asked about counters to the MS link, here are a few: SSO:Winbindd provides integrated single-sign-on for PAM enabled Unix/Linux systems. Quotas: Commercial Linux systems support Quotas - Samba implements this and the samba-team work with Linux vendors to keep this functional - thus this does NOT require an OEM to do anything else. The comment about risk is pure hyperbole. ADS:Samba (not Linux) can be an Active Directory member (true for samba-2-2.x). Samba-3.0.0 will be able to natively join and ADS domain. Samba-2.2.x and upwards DOES support inter-domain trusts. Performance: When it comes to benchmarking - you can prove what you want. The real issue is: How does Samba on Linux compare with Win2K AS in a real workspace environment. We know for fact that it works better with fewer resources. There are a number of published reports that demonstrate this. Journaling File Systems: There are reports that show how poorly NTFS performs with Win2KAS. The same reports show that a Linux reliable file system infrastructure can outperform Win2KAS with NTFS. With Linux administrators have a choice of journaling file systems - not so with Win2K/2003. Integration: MS Windows 2000/2003 is just as much made up of many technologies that have been integrated, just as is Linux. When you buy a product like Red Hat Advanced Server or United Linux - the integration work has been done for you - just like when you buy a Microsoft product. RAID and Reliability: Most RAID storage vendors provide driver support for Linux as they do for MS Windows NT/2K/2003. Red Hat and United Linux BOTH integrate the vendors' drivers into their products AS DO Mircosoft. So to say that this requires more tweaking by an OEM is utter nonsense! Certification of Drivers: Come on! Really? Have Microsoft checked with United Linux or Red Hat directly. How many of the listed certified drivers on Microsoft's site are truely current and up to date? And that is just a rough list. I am sure you can do a better job. I look forward to your contribution. - John T. > > > > ERX > > > > >-Original Message- > >From: John H Terpstra [mailto:[EMAIL PROTECTED] > >Sent: Monday, March 17, 2003 3:11 PM > >To: erx > >Cc: [EMAIL PROTECTED] > >Subject: Re: [Samba] Samba vs Windows SAK > > > > > >On Mon, 17 Mar 2003, erx wrote: > > > >> Has anyone seen this: > >> > >http://www.microsoft.com/windows/Embedded/sak/evaluation/compare/adva > >ntage.asp > >> > >> And has anyone from the Samba team posted a response? It seems like some of > >> the information presented there is contrary to what I know about Samba. > > > >Why reply to Microsoft? What will it achieve? > >As things stand we can demonstrate that they are not in touch: > > - Not with their own customers > > - Not with Samba capabilities > > > >As to 'Truth' - customers make up their own minds on that one. No one can > >prove 'Truth' to anyone. > > > >- John T. > >-- > >John H Terpstra > >Email: [EMAIL PROTECTED] > > -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Unix user rights to join domain
On Mon, 17 Mar 2003, Olaf Grewe wrote: > Hi, > > I recently joined a Samba server to a Samba PDC'd domain. It worked rather > smoothly after I figured out that I had to create a root account with > smbpasswd on the Samba PDC. Without it, I was stuck with the following > error: > > smbpasswd -j WHATEVER -r WHOCARES -Uname%password > error setting trust account password: NT_STATUS_ACCESS_DENIED > Unable to join domain WHATEVER > > I'd rather prefer to use my domain_adm account for this kind of tasks but > it's obviously lacking sufficient rights (whether on directories and/or > files, I don't know). The domain_adm account is obviously mentioned in the > domain admin group parameter of smb.conf and the machine account was added > to the smbpasswd of WHOCARES beforehand. > > My question is: Which rights does an admin account need to be able to join > other machines into a domain? Joining Samba to a Samba PDC'd domain > appears to be faily uncommon, as I didn't find much by searching the > respective lists and groups. When you want to make a MS Windows NT/2K/XP client a member of a MS Windwos network Domain, you must provide the name of an account and password for a user who has full "Domain Administrator" ability. That user is usually 'Administrator' on the domain controllers. The user 'root' is the equivalent of the MS Windows NT 'Administrator'. Obviously, every domain needs an 'Administrator' account. It is thus logical that 'root' needs to have an smbpasswd account. You can map this to administrator by setting in smb.conf [globals]: username map = /etc/samba/smbusers And in /etc/samba/smbusers: root = Administrator Att he end of the day, just like with MS Windows NT/2K only Adminsitrator (by default) has the right to add users/machines to the Domain. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Unix user rights to join domain
Hi, I recently joined a Samba server to a Samba PDC'd domain. It worked rather smoothly after I figured out that I had to create a root account with smbpasswd on the Samba PDC. Without it, I was stuck with the following error: > smbpasswd -j WHATEVER -r WHOCARES -Uname%password error setting trust account password: NT_STATUS_ACCESS_DENIED Unable to join domain WHATEVER I'd rather prefer to use my domain_adm account for this kind of tasks but it's obviously lacking sufficient rights (whether on directories and/or files, I don't know). The domain_adm account is obviously mentioned in the domain admin group parameter of smb.conf and the machine account was added to the smbpasswd of WHOCARES beforehand. My question is: Which rights does an admin account need to be able to join other machines into a domain? Joining Samba to a Samba PDC'd domain appears to be faily uncommon, as I didn't find much by searching the respective lists and groups. Regards Olaf -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba vs Windows SAK
Hi, I wasn't looking for a response to Microsoft. You're right, they could care less what the linux community thinks. What I was looking for was a response for those who might be trying to make a decision about whether to invest in a Microsoft SAK based product, or whether to try using a Linux+Samba based solution. The fact that we *could* demonstrate these things (but haven't) is not sufficient. Not to me, not to those who might be deciding. As far as truth goes, I couldn't disagree more. Truth is relative; truth changes over time. It is affected by what you see, hear, read, and believe. I can affect your truth; you can affect mine. If it weren't true, there would be no point at all to marketing. So you know of nothing, then, that counters Microsoft's arguments? ERX >-Original Message- >From: John H Terpstra [mailto:[EMAIL PROTECTED] >Sent: Monday, March 17, 2003 3:11 PM >To: erx >Cc: [EMAIL PROTECTED] >Subject: Re: [Samba] Samba vs Windows SAK > > >On Mon, 17 Mar 2003, erx wrote: > >> Has anyone seen this: >> >http://www.microsoft.com/windows/Embedded/sak/evaluation/compare/adva >ntage.asp >> >> And has anyone from the Samba team posted a response? It seems like some of >> the information presented there is contrary to what I know about Samba. > >Why reply to Microsoft? What will it achieve? >As things stand we can demonstrate that they are not in touch: > - Not with their own customers > - Not with Samba capabilities > >As to 'Truth' - customers make up their own minds on that one. No one can >prove 'Truth' to anyone. > >- John T. >-- >John H Terpstra >Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 2.2.8 doesn't compile on Tru64-5.1
HI, If I use gcc the compile doesn't work. However if I use UCB's cc it does. Seems a bit strange to me. Ramon Kagan York University, Computing and Network Services Unix Team - Intermediate System Administrator (416)736-2100 #20263 [EMAIL PROTECTED] - I have not failed. I have just found 10,000 ways that don't work. - Thomas Edison - On Mon, 17 Mar 2003, Ramon Kagan wrote: > HI, > > I've successfully compile 2.2.8 on Solaris (6,7,8) and Linux. However on > Tru64-5.1 I get the following during the make: > > Compiling smbd/dfree.c > Compiling smbd/dir.c > smbd/dir.c:649:70: macro "stat" passed 3 arguments, but takes just 2 > smbd/dir.c:716:13: macro "stat" passed 3 arguments, but takes just 2 > make: *** [smbd/dir.o] Error 1 > > Any ideas? > > > Ramon Kagan > York University, Computing and Network Services > Unix Team - Intermediate System Administrator > (416)736-2100 #20263 > [EMAIL PROTECTED] > > - > I have not failed. I have just > found 10,000 ways that don't work. > - Thomas Edison > - > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Outlook .pst files on Samba PDC
Hi, I think there's only one solution in the end: store your users mails on an imapserver. As profiles grow, they sometimes get corrupted, also, if you just keep pstfiles on the server (possible w/outlook) you end up getting trouble anyway (in my experience). > > > Solutions that have worked have ranged from complete loss of the .pst you got some fine solutins :P Also, while you're at it; consider moving to mandatory profiles. They save you a _lot_ of work. Just my .02 cent. tarjei > file > > > to restarting users profile from scratch. thanks > > > > > > Alex Genna > > > > > > > > > -- Tarjei Huse <[EMAIL PROTECTED]> NU -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba vs Windows SAK
On Mon, 17 Mar 2003, erx wrote: > Has anyone seen this: > http://www.microsoft.com/windows/Embedded/sak/evaluation/compare/advantage.asp > > And has anyone from the Samba team posted a response? It seems like some of > the information presented there is contrary to what I know about Samba. Why reply to Microsoft? What will it achieve? As things stand we can demonstrate that they are not in touch: - Not with their own customers - Not with Samba capabilities As to 'Truth' - customers make up their own minds on that one. No one can prove 'Truth' to anyone. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Username problems with Windows XP
On Sun, 16 Mar 2003, J.P. Cummins wrote: > I have set up a SMB server with share level access and password > encryption enabled. When I access Samba from WinXP it prompts me for a > username and password, which is what I want. However, the username is > greyed out (filled in with 'linuxbox\Guest'). Any suggestions on how to > fix this? Sounds like you really want "security = user". - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NSS module
Josh, Try a link: ln -s /lib/libnss_wins.so /lib/libnss_wins.so.2 Also, with WINS in your smb.conf you must have in [globals]: either: wins server = x.x.x.x or: wins support = Yes - John T. -- John H Terpstra Email: [EMAIL PROTECTED]Does the wins libnss module not "work" yet, or am I misconfiguring it ? Everything else in the whole samba/winbind realm works, I can log in as a domain user using pam_winbind, smbclient can resolve netbios names from WINS, etc etc. but 'ping NETBIOS_NAME' doesn't resolve. Here's some background data: Samba 2.2.8-0.1 on debian from master.samba.org apt repos. wbinfo -N works fine smbclient -L works fine /etc/nsswitch outtake: hosts: files dns wins /lib/libnss_wins.so exists Thanks in advance for any information you can provide ! -- Josh Litherland ([EMAIL PROTECTED]) pgp0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 2.2.8 doesn't compile on Tru64-5.1
HI, I've successfully compile 2.2.8 on Solaris (6,7,8) and Linux. However on Tru64-5.1 I get the following during the make: Compiling smbd/dfree.c Compiling smbd/dir.c smbd/dir.c:649:70: macro "stat" passed 3 arguments, but takes just 2 smbd/dir.c:716:13: macro "stat" passed 3 arguments, but takes just 2 make: *** [smbd/dir.o] Error 1 Any ideas? Ramon Kagan York University, Computing and Network Services Unix Team - Intermediate System Administrator (416)736-2100 #20263 [EMAIL PROTECTED] - I have not failed. I have just found 10,000 ways that don't work. - Thomas Edison - -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Smbpasswd without prompt?
Xi
I forget the script :-(
===
#!/usr/bin/perl
$file = "king.txt";
if ( -e $file ) {
open(arq, $file) or die "Não foi possivel abrir o arquivo";
@linhas = ;
close(arq);
$i=0;
while (@linhas[$i]) {
($login, $nome, $depto) = split(/\|/, @linhas[$i]);
system "/usr/sbin/useradd -p $passwd $login -g $depto";
system "/usr/bin/smbpasswd -a $login $passwd";
sleep(1);
$i++;
}
}3
==
Thanks again!!!
Tiago Cruz
Em Seg, 2003-03-17 às 16:17, Tiago Cruz escreveu:
> Hello again! :-)
>
> Mine he doubts he is with relation to smbpasswd, would like to add to an
> user and a password standard from one script (*in botton), but I did not
> obtain to eliminate prompt requesting the new password and password
> verification, like make in useradd.
>
> This is possible? I use Red Hat 8.0 box with a Samba 3.0 Alpha running a
> PDC.
>
> Me he seems that alone it functions compiling with support the LDAP,
> correct? I Installed with a simple RPM package :-)
>
> Very Thanks in advance
>
> Regards
>
> Tiago Cruz
> Org. King de Contab. S/C Ltda.
> Linux User #282636
[ ]'s
Tiago Cruz
Org. King de Contab. S/C Ltda.
www.linuxrapido.kit.net
Linux User #282636
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Please announce on comp.protocols.smb
I would like to suggest that you announce new releases on the comp.protocols.smb news group. I realize that you have an announcement mailing list, but with my mail box clogged with spam, I am trying to avoid subscribing to mailing lists. I also hear that there is a mailing.unix.samba-technical news group, but that is not carried by all the news servers. The comp.protocols.smb news group seems to be widely available and I believe that would be a natural place for announcements of new releases. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How to clear the SMB print queue?
I've had to restart a stuck pritner with lpc restart. That got the printer working again and cleared the lpd queue. But now, whenever the printer is opened in Windows, all the old jobs stay listed in the queue, and any new print job gets appended to the bottom and just stay there (although, they do print). Is there a way I can clear this queue? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win 95/98/Me problem.
On Mon, 17 Mar 2003, Marcin Wolcendorf wrote:
> On Sunday 16 March 2003 17:19, you wrote:
> > On Sun, 16 Mar 2003, Marcin Wolcendorf wrote:
> > > Hi,
> > >
> > > As I was unable to find solution anywhere else, I write here: I have a
> > > problem sharing win 95/98/Me resources with samba (2.2.7a) as a PDC.
> > > Windows can't get userlist from PDC (it seems, that windows times out).
> > > Win 2k and XP don't have that problem. Is it just a configuration
> > > problem, or is it a general problem with samba?? How can I add a user
> > > to share's access list???
> >
> > For starters, if you want help you will have to tell us what you have
> > done. We do not have a crystal ball.
> >
> > I have three (3) WinMe machines that all use User Level Access Control
> > without problems since 2.2.2. Was running 2.2.7a until a week ago, now
> > 2.2.8. Recommend that you update - 2.2.8 is a security release.
> >
> > So tell us now: Specifically what have you configured in your Win 9x/Me
> > network configuration?
>
> W98 configuration:
> Network in Control panel:
> Net. conf.:
> client for M$ Netw., file sharing on,
> Auth.:
> comp. name: goodoldsam
> wrk grp: chelmska
> Acc. Ctrl:
> user-level, userlist from chelmska
>
> IP from DHCP, DNS domain name: 'home',
In your DHCP server config do you have?:
option netbios-name-servers x.x.x.x;
option netbios-node-type 8;
This will help MS Windows clients to resolve the domain controller name to
it's IP address. Timinig is very critical in environments that use User
Level Access Control.
Make sure that you have a NETLOGON share (even if you do not use it!). ie:
[netlogon]
path = /blah/blah
; (path can be /tmp if you like)
available = yes
browseable = No
read only = yes
Will do.
I know it sounds obvious, but make sure that for each MS Windows client
user (logon name) you have an entry in smbpasswd with:
smbpasswd -a 'logon name'
If the MS Windows logon name has a space of a '_' in it, then use a
username on your Unix/Linux system that is fewer than 8 characters and
does NOT have a space or '_' char in it, but then add to smb.conf
[globals]:
username map = /etc/samba/smbusers
And then in /etc/samba/smbusers put (for example):
root = Administrator
fredm = "Fred Morse"
maryk = mary_katrinski
Please also see comments below.
> > Also show us the globals section of your smb.conf
> > file.
>
> Samba server DNS name: debian.chelmska & debian.home
>
> [global]
>
> interfaces = eth0 eth2 127.0.0.1
> bind interfaces only = yes
>
> # Change this for the workgroup/NT-domain name your Samba server will part of
>workgroup = CHELMSKA
>
> # server string is the equivalent of the NT Description field
>server string = %h server (Samba %v)
>
> # If you want to automatically load your printer list rather
> # than setting them up individually then you'll need this
> ; load printers = yes
>
> # You may wish to override the location of the printcap file
> ; printcap name = /etc/printcap
>
> # 'printing = cups' works nicely
> ; printing = bsd
>
>guest account = nobody
>invalid users = root
>
> # This tells Samba to use a separate log file for each machine
> # that connects
>log file = /var/log/samba/log.%m
>
> # Put a capping on the size of the log files (in Kb).
>max log size = 1000
>
> # If you want Samba to log though syslog only then set the following
> # parameter to 'yes'. Please note that logging through syslog in
> # Samba is still experimental.
> ; syslog only = no
>
> # We want Samba to log a minimum amount of information to syslog. Everything
> # should go to /var/log/samba/log.{smb,nmb} instead. If you want to log
> # through syslog you should set the following parameter to something higher.
>syslog = 0
>
> # "security = user" is always a good idea. This will require a Unix account
> # in this server for every user accessing the server. See
> # security_level.txt for details.
>security = user
>
> # You may wish to use password encryption. Please read ENCRYPTION.txt,
> # Win95.txt and WinNT.txt in the Samba documentation. Do not enable this
> # option unless you have read those documents
>encrypt passwords = true
>
> # Using the following line enables you to customise your configuration
> # on a per machine basis. The %m gets replaced with the netbios name
> # of the machine that is connecting
> ; include = /home/samba/etc/smb.conf.%m
>
> # Most people will find that this option gives better performance.
> # See speed.txt and the manual pages for details
> # You may want to add the following on a Linux system:
> # SO_RCVBUF=8192 SO_SNDBUF=8192
>socket options = TCP_NODELAY
>
> # --- Browser Control Options ---
>
> # Please _read_ BROWSING.txt and set the next four parameters according
> # to your network setup. The defaults are specified below (commented
> # out.) It's important that you read BROWSING.txt
[Samba] Smbpasswd without prompt?
Hello again! :-) Mine he doubts he is with relation to smbpasswd, would like to add to an user and a password standard from one script (*in botton), but I did not obtain to eliminate prompt requesting the new password and password verification, like make in useradd. This is possible? I use Red Hat 8.0 box with a Samba 3.0 Alpha running a PDC. Me he seems that alone it functions compiling with support the LDAP, correct? I Installed with a simple RPM package :-) Very Thanks in advance Regards Tiago Cruz Org. King de Contab. S/C Ltda. Linux User #282636 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba vs Windows SAK; my observations...
Hi, I would like to post my thoughts. First, our file server performance and rendering times are 1/3 faster using a Linux backbone (I have detailed files). Our FTP site and Web site are more reliable and faster using Linux than Windows. I am also deploying Linux workstations to augment/replace our Windows workstations and ad to our OSX presence (watch out for OSX, it will be a major player top come) due to; - more fleaxable interface (X vs Windows) and thus better workflow for users. - less overhead and thus increased life span of hardware - better (much better) admin tools to remote and automate tasks. Second, ofcourse Open Source has its risks, mainly being accountability. Also, the IT dep has to be sharp and on the ball to properly support Open Source. However (in my opinion), ROI and TCO are more effective when applied to IT personel than IT infrastructure. In other words you will see better reults with scaling your software to your hardware rather than the opposite. Plus your IT staff using Unix (Linux, etc...) will give you the ROI and lower TCO than using Windows and all you really gotta do is empower them with a bit of knowledge and skill. Bri- __ Do you Yahoo!? Yahoo! Web Hosting - establish your business online http://webhosting.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] "guest only" not working?
Running samba 2.2.7, I have samba acting as a PDC and offering up print services. When the user logs into a Win2K machine and then tries to print, they end up sending the print job as the user they logged in as rather than the guest user even though I have "guest only" set on the print service (see smbconf.snitch below). I have "guest ok" set to "no" on the PDC part see smbconf.auth) but that shouldn't affect the print shares, should it? It works fine for workstations that aren't logged into the PDC--the print jobs are submitted as the guest user and everything is great. But for user's that authenticate against the PDC to get access to their workstations, the printers don't seem to be obeying their "guest only" status. Is this a bug or a feature? (Or, the most likely prospect, a misconfiguration on my part that I don't see or understand?) Here's my smb.conf: - [global] workgroup = ILC_SAM netbios name = auth netbios aliases = snitch smb passwd file = /usr/local/samba/private/smbpasswd encrypt passwords = yes wins support = yes debug level = 1 max log size = 0 include = /opt/samba/lib/smbconf.%L - Here's smbconf.auth, the PDC: - null passwords = no security = user domain logons = yes domain admin group = sambaadm logon script = applogon.cmd logon path = logon home = C:\temp guest ok = no [netlogon] path = /usr/local/samba/netlogon writeable = no write list = sambaadm guest ok = no - And here's smbconf.snitch, the printers: - security = share guest account = www guest ok = yes guest only = yes printing = sysv [printer] print command = /opt/local/print %s %I comment = Printer writeable = yes path = /tmp printable = yes browseable = yes __ Do you Yahoo!? Yahoo! Web Hosting - establish your business online http://webhosting.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win 95/98/Me problem.
On Sunday 16 March 2003 17:19, you wrote:
> On Sun, 16 Mar 2003, Marcin Wolcendorf wrote:
> > Hi,
> >
> > As I was unable to find solution anywhere else, I write here: I have a
> > problem sharing win 95/98/Me resources with samba (2.2.7a) as a PDC.
> > Windows can't get userlist from PDC (it seems, that windows times out).
> > Win 2k and XP don't have that problem. Is it just a configuration
> > problem, or is it a general problem with samba?? How can I add a user
> > to share's access list???
>
> For starters, if you want help you will have to tell us what you have
> done. We do not have a crystal ball.
>
> I have three (3) WinMe machines that all use User Level Access Control
> without problems since 2.2.2. Was running 2.2.7a until a week ago, now
> 2.2.8. Recommend that you update - 2.2.8 is a security release.
>
> So tell us now: Specifically what have you configured in your Win 9x/Me
> network configuration?
W98 configuration:
Network in Control panel:
Net. conf.:
client for M$ Netw., file sharing on,
Auth.:
comp. name: goodoldsam
wrk grp: chelmska
Acc. Ctrl:
user-level, userlist from chelmska
IP from DHCP, DNS domain name: 'home',
> Also show us the globals section of your smb.conf
> file.
Samba server DNS name: debian.chelmska & debian.home
[global]
interfaces = eth0 eth2 127.0.0.1
bind interfaces only = yes
# Change this for the workgroup/NT-domain name your Samba server will part of
workgroup = CHELMSKA
# server string is the equivalent of the NT Description field
server string = %h server (Samba %v)
# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
; load printers = yes
# You may wish to override the location of the printcap file
; printcap name = /etc/printcap
# 'printing = cups' works nicely
; printing = bsd
guest account = nobody
invalid users = root
# This tells Samba to use a separate log file for each machine
# that connects
log file = /var/log/samba/log.%m
# Put a capping on the size of the log files (in Kb).
max log size = 1000
# If you want Samba to log though syslog only then set the following
# parameter to 'yes'. Please note that logging through syslog in
# Samba is still experimental.
; syslog only = no
# We want Samba to log a minimum amount of information to syslog. Everything
# should go to /var/log/samba/log.{smb,nmb} instead. If you want to log
# through syslog you should set the following parameter to something higher.
syslog = 0
# "security = user" is always a good idea. This will require a Unix account
# in this server for every user accessing the server. See
# security_level.txt for details.
security = user
# You may wish to use password encryption. Please read ENCRYPTION.txt,
# Win95.txt and WinNT.txt in the Samba documentation. Do not enable this
# option unless you have read those documents
encrypt passwords = true
# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
; include = /home/samba/etc/smb.conf.%m
# Most people will find that this option gives better performance.
# See speed.txt and the manual pages for details
# You may want to add the following on a Linux system:
# SO_RCVBUF=8192 SO_SNDBUF=8192
socket options = TCP_NODELAY
# --- Browser Control Options ---
# Please _read_ BROWSING.txt and set the next four parameters according
# to your network setup. The defaults are specified below (commented
# out.) It's important that you read BROWSING.txt so you don't break
# browsing in your network!
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
local master = yes
# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
os level = 255
domain logons = yes
# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
domain master = yes
# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
preferred master = yes
# --- End of Browser Control Options ---
# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
wins support = yes
# wins support = no
# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
; wins server = w.x.y.z
# This will prevent nmbd to search for NetBIOS names through DNS.
dns proxy = no
# What naming service and in what order should we use to resolve host names
# to IP addresses
; name
[Samba] Samba vs Windows SAK
Has anyone seen this: http://www.microsoft.com/windows/Embedded/sak/evaluation/compare/advantage.asp And has anyone from the Samba team posted a response? It seems like some of the information presented there is contrary to what I know about Samba. ERX -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Help with compile on HP-UX 11.0
I'm having quite a bit of trouble with 2.2.7a and HP-UX 11.0. I've attempted to compile (configure && make) with aCC (aCC: HP ANSI C++ B3910B A.03.13), and gcc versions 2.95.1, and 3.2. (A few others as well, but that's not, perhaps, relevant here.) Let's assume I'm using gcc 2.95.1. The first configure error I see in config.log is: In file included from /net/coreip-vob1-server/export/vobstore/POLICY/tools/hp-ux-b-11-00/lib/gcc-l ib/hppa2.0w-hp-hpux11. 00/2.95.1/include/sys/types.h:10, from configure:1269: /usr/include/sys/stdsyms.h:293: #error "Large File interfaces not supported in strict ANSI mode." configure: failed program was: #line 1268 "configure" #include "confdefs.h" #include I've tried clean machines with fresh compiler installs, re-installs of the compiler, etc. No love. I've been unable to find much information to further my cause so I hope grovelling will work... :-) Thanks - Andy _ Andy Mitchell Release Engineering ATL A3-03W06 / 404-773-9199 Nollum largitio prandium -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Username problems with Windows XP
I have set up a SMB server with share level access and password encryption enabled. When I access Samba from WinXP it prompts me for a username and password, which is what I want. However, the username is greyed out (filled in with 'linuxbox\Guest'). Any suggestions on how to fix this? J.P. Cummins [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Outlook .pst files on Samba PDC
Thanks for your response. Not sure I understand- Are the clients not set up well? what is "a view issues"? Sorry I'm new to the list I appologize if this info is somewhere I should have looked prior to submitting. Regards, Alex Genna - Original Message - From: "Kurt Weiss" <[EMAIL PROTECTED]> To: "Alex" <[EMAIL PROTECTED]> Cc: "SambaList" <[EMAIL PROTECTED]> Sent: Monday, March 17, 2003 2:16 AM Subject: Re: [Samba] Outlook .pst files on Samba PDC > in a view issues, there's broken security rights on the client the reason... > > Alex schrieb: > > Occasional problems arise where the .pst file just will not copy from the > > users profile on the server. Doesn't seem to be related to the file size. > > Has anyone had issues with outlook and Samba PDC - (win2k clients). > > Solutions that have worked have ranged from complete loss of the .pst file > > to restarting users profile from scratch. thanks > > > > Alex Genna > > > > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] NSS module
Does the wins libnss module not "work" yet, or am I misconfiguring it ? Everything else in the whole samba/winbind realm works, I can log in as a domain user using pam_winbind, smbclient can resolve netbios names from WINS, etc etc. but 'ping NETBIOS_NAME' doesn't resolve. Here's some background data: Samba 2.2.8-0.1 on debian from master.samba.org apt repos. wbinfo -N works fine smbclient -L works fine /etc/nsswitch outtake: hosts: files dns wins /lib/libnss_wins.so exists Thanks in advance for any information you can provide ! -- Josh Litherland ([EMAIL PROTECTED]) pgp0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Why winbindd dont run?
> -Original Message- > From: FRANCO [mailto:[EMAIL PROTECTED] > Can you help me please? > > > [EMAIL PROTECTED] init.d]# smbpasswd -r cleo.surson -j surson > -UAdministrator%camais > Joined domain SURSON. > [EMAIL PROTECTED] init.d]# ./smb start > Iniciando os serviços SMB: [ OK ] > Iniciando os serviços NMB: [ OK ] > Iniciando os serviços Winbind: [ OK ] > [EMAIL PROTECTED] init.d]# ./smb status > smbd (pid 2325) está rodando... > nmbd (pid 2039) está rodando... > winbind está parado ( stoped) Are there any error messages in log.winbindd? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] restrict anonymous Solved Thanks!
Andrew and Jerry That was my problem. I knew of restrict anonymous 1 but not of 2. Jerry and Andrew thanks for all your help you got me to my goal! Bobby Guerra P.S. What's your favorite drink? -Original Message- From: Andrew Bartlett [mailto:[EMAIL PROTECTED] Sent: Saturday, March 15, 2003 7:29 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [Samba] restrict anonymous used wbinfo -A what next? On Sat, 2003-03-15 at 00:37, Bobby Guerra wrote: > > > I am trying to get samba to work with winbind and still have the DC (w2k) > use restrict anonymous. > > If I run wbinfo -A it will allow me to enumerate all the user accounts and > groups but I still get prompted for a password when I try to access samba > shares. I can turn off restrict anonymous and I can access the samba box > all day with no problem but as soon as I turn on restrict anonymous it > breaks. > > Do I need to do anything other then wbinfo -A in order to get around > restrict anonymous? It sounds like you might have a very high level of 'restrict anonymous' set on the DC, (that is 'restrictanonymous=2'). This breaks all pre-win2k systems, and Samba's NTLM logins. If you upgrade to Samba 3.0 alpha, we can use the winbindd connections to get to the NETLOGON pipe, and authenticate NTLM logins (I hope), but the real advantage is we get kerberos, which works much better anyway :-) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbind and w2k groups
Hello,
I'm using samba 2.2.7a w/ redhat 8.0, and a w2k server as a DC (french language
version). I've configured samba to be a member of the mixed-mode w2k domain, and I
authenticate my users from the w2k DC with winbind/pam. I can wbinfo -u/-g/-t/-p
without any problems and getent passwd/group give me the correct output.
This setup is almost working as i expect it to.
But...
All my w2k domain users are in the primary group "DOMAIN\Utilisa. du domaine"
("DOMAIN\Domain Users" in the US version of w2k) wich winbind maps to GID 1.
When i try to ssh into my redhat server using a "DOMAIN+user" account, i got the
following message: 'id: cannot find name for group ID 1', but i can still login.
If i change my primary group to something different, no message.
When i try to chgrp a directory to the domain group name "DOMAIN+Utilisa. Du domaine",
i got the following error:
$ chgrp "DOMAINE+Utilisa. du domaine" Directory1
chgrp: invalid group name `DOMAIN+Uilisa. du domaine'
If i try to chgrp the directory to the domain group GID (1), it gets accepted, but
makes ls -al output to show GIDs instead of group names for _every_ directories,
_except_ for the ones with group names containing accents (I got "character set =
ISO8859-15" and "client code page = 850" in my smb.conf).
If i chgrp the directory to another group name and then ls -al, i see the group names
again.
If i add a "DOMAIN+Utilisa. Du domaine:x:1:" entry to my /etc/group, and then ls
-al, i see the group names too and i can also directly chgrp using the name
"DOMAIN+Utilisa. Du domaine", but i'm sure that is a good solution.
I suspect the "." in group names to be the source of my problems... But that are pure
speculations.
Any ideas?
--
CCI74 - T.I.C / systèmes et réseaux
Grégory Benoist
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Unix Realname with samba 2.2.4
> On Mon, 2003-03-17 at 21:06, Peter Forst wrote: > > Hi there, > > > > is it possible to acitivate Unix Realname with samba 2.2.4 ? I've tried it, but > > samba will ignore > > the unknown parameter. Does there exist an alternative parameter like unix > > realname under > > samba 2.2.4 ??? > > We decided that having the option to turn this off was rather pointless, > so it's always enabled > Hi, thanx, but how can I use the value ? Is it an enviroment variable ? In no documentation I can find any information about using the real unixname. Only that it is possible to get the fullname out of /etc/passwd -- Peter Forst -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] adding users to smbpasswd
Is there a way to have users of the samba server, but not add them by smbpasswd -a ? I have been attempting to get this to work for a while and do not think asking the right questions. I want the samba server to be a domain member and the users to only authentic from the PDC. These are the steps that I have attempted: Users are in both the Windows domain and the UNIX NIS account 1. smbpasswd -j AM -r PDC -U Joined the AM Domain 2. edited the smb.conf file [global] # workgroup = NT-Domain-Name or Workgroup-Name workgroup = AM netbios name = SUNTST1 server string = SUNTST1 max log size = 0 security = domain password server = 40.1.142.11 encrypt passwords = yes username map = /usr/local/samba/lib/username.map max open files = 3 oplocks = No smb passwd file = /etc/samba/smbpasswd socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 remote browse sync = 40.1.142.11 40.25.17.9 40.25.12.26 40.1.129.224 40.1.129.225 remote announce = 40.1.142.11 40.25.17.9 40.25.12.26 40.1.129.224 40.1.129.225 wins proxy = yes dns proxy = yes 3. restarted the samba server 4. From windows "search for computer" suntst1 unknown 4a. If I add the my userid to the smbpasswd -a newpasswd = Windows Password 4b. From windows "search for computer" suntst1 AM samba server If I need to add the users to the smbpasswd file; how do I make so that I do not need to create a password on the UNIX samba server for the user? Mathew Spurgeon Eli Lilly and Company Software Engineering Support Team Phone: (317) 276-7436 Mobile: (317) 716-7789 http://mcntstep03.d51.lilly.com/SEST [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba and winbind group ID?
Using samba 2.2.7a with Winbind on a Redhat 8.0 machine - when I login locally with a domain username and password I get this message: "id: cannot find name for group ID 1" -I seem to have full access to everything, so I'm not sure what effect this actually has - Ideas? Also, I'm trying to create some samba shares with NT domain group permissions. in the placeholder file for domain users/groups, you're supposed to have linuxgroupname = @domaingroupname #is this right? so it would actually look this?: project = @Informant+Project Users I'm a little confused on this point and haven't seem to found documentation on it... /usr/local/samba/lib/smb.conf [global] name resolve order = wins lmhosts bcast wins server = 10.100.100.1 wins support = no domain master = no local master = no os level = 0 preferred master = no workgroup = INFORMANT server string = PC118 netbios name = PC118 security = domain password server = SRV01 SRV02 encrypt passwords = yes smb passwd file = /usr/local/samba/private/smbpasswd winbind separator = + winbind gid = 1-2 winbind uid = 1-2 winbind enum groups = yes winbind enum users = yes template shell = /bin/bash template homedir = /home/%D/%U log file = /usr/local/samba/var/log.%m log level = 1 max log size = 50 [public] path = /transfer guest ok = yes writeable = yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba & Wins Server
On Mon, 17 Mar 2003, Suggitt, Maria [DAN/PICK] wrote: > All > > We have offshore (North Sea) a DEC Alpha running OSF3.2 and samba 1.9.17p2. > Samba was installed to allow the PC's on the company network access to the > reports that the DEC generates and stores in a specified directory. These > are accessed by mapping network drives from the PC. > > smbd and nmbd are kicked off from inetd > > The smb.conf file is > > [global] >guest account = mis >valid users = mis >workgroup = euabz >wins server = 161.102.144.9 >log file = /usr/local/samba/var/log.%m >server string = Samba Server for D1ETAP >max log size = 50 >security=share >preserve case = yes >default case = no >mangle case = yes >socket options = TCP_NODELAY >wins support = no >domain master = no >local master = no >preferred master = no >os level = 0 > [GAS] >comment = D1 Etap Gas Share >guest ok = yes >force group = users >force user = mis >hide dot files = yes >follow symlinks = no >wide links = no >path = /usr/ETAP_EX/RUN/AUDIT/GAS >read only = yes > > I have been informed that the WINS server is to change as is the workgroup / > domain. I have been asked to modify the DEC Alpha accordingly. > > The old WINS server was Win NT. The new one will be Win2k > > My question - is it just a case of changing the wins server and workgroup > settings and restarting inetd (kill -HUP inetd processid) or do I have to > reboot the DEC, or do I have to upgrade Samba versions. You need to change the "wins server =" to give it the new WINS server address. You need to change the "workgroup =" line to set the new domain name. Then restart samba. There is NO need to reboot the DEC OSF server itself. > > Also what would be required at the new WINS Server end ? None. Suggest you update Samba to a more recent version is you have Win2K or WinXP clients. > > Thanks > > Maria Suggitt > > Software Technical Coordinator > Customer Service Department > Daniel Europe Limited > > Tel +44 (0) 1751 471834 > Fax +44 (0) 1751 471801 > - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba
On Sun, 16 Mar 2003, Erik wrote: > Hi, i´m having a problem with samba, i´n running winxp and i have mapped > upp units in winxp from my linux using samba. But its unstable and its > losing the connection from time to time. Need help:) Sorry. Your need is recognosed but perhaps if you explained a little more about your installation and how it is configured then we might be able to help you. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] error when compiling CVS HEAD Code cvs update ran 3/17/030:00mst
On Mon, 17 Mar 2003, Jeffrey D. Means wrote: > Compiling libsmb/clikrb5.c > libsmb/clikrb5.c:137:2: #error UNKNOWN_GET_ENCTYPES_FUNCTIONS > make: *** [libsmb/clikrb5.o] Error 1 > > anyone know what this means?? It looks like you specified use of Kerberos to configure and either Kerberos is not installed on your machine, or else configure cound not find the location for the Kerberos include files. What version of Kerberos is installed on your system? - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba need a Domain to function as fileserver ?
On Mon, 17 Mar 2003, Sathya Narayana wrote: > Hi Friends > > We are using Samba 2.2.5 on Redhat Linux 7.1. > > At present we have one OS/2 Domain controller and it is going to > decommision. > > My question is that,this Samba fileserver will work with out Domain > controller. Yes. Samba also CAN be a domain controller. > for that what I need to do in smb.conf file That depends on your present smb.conf configuration. Please send me your smb.conf (off line) to [EMAIL PROTECTED] I'll give some hints. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] machine accounts
Original Message - From: "Operator (SCHMIEDER it-solutions)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, March 17, 2003 3:13 PM Subject: [Samba] machine accounts > I got some problems with Samba/Winbind in a WINNT-Domain.How could I get the > machine-accounts to my samba-server? > Winbind including this feature? How could I activate this? > > best regards > > nieloo > How to ask questions: http://www.security-forums.com/forum/viewtopic.php?t=249 Gareth Davies Willowbrook I.T. Ext. 235 * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] machine accounts
I got some problems with Samba/Winbind in a WINNT-Domain.How could I get the machine-accounts to my samba-server? Winbind including this feature? How could I activate this? best regards nieloo Diese Mail wurde im Hause SCHMIEDER it-solutions GmbH auf Viren überprüft ! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Am I getting the best performance?
John H Terpstra <[EMAIL PROTECTED]> wrote in news:[EMAIL PROTECTED]: > On Fri, 14 Mar 2003, Me wrote: > >> > Did you check the impact of increasinf the SO_RECVBUF and SO_SNDBUF >> > to 128KByte? >> >> No I have not. I will try it though. I have 512MB of RAM in my >> server so I'm not too worried about memory. > > Let me know what you find. Okay, here is a list of my recient test results. If you want more, just let me know. DateSource Destination Amount of Data in megabytes Time in seconds Speed of Xfer in mb/min Speed of Xfer in MB/sec Used speedtest.tar.bz2. 3/17/03 /dev/hddwyonker 1972.375328 360.80 6.01 I did an ftp transfer as a baseline test. Booted to my Linux partition. 3/17/03 /dev/hdcwyonker 1972.375632.40 10.54 Used speedtest.tar.bz2 3/17/03 /dev/hdcnyonker 1972.375268 441.58 7.36 Another FTP transfer 3/17/03 /dev/hdcnyonker 1972.375199 606.50 10.11 Used speedtest.tar.bz2. Changed to socket options = TCP_NODELAY SO_RCVBUF=131072 SO_SNDBUF=131072 3/17/03 /dev/hdcnyonker 1972.375263 449.97 7.50 Used directory Changed to socket options = TCP_NODELAY SO_RCVBUF=131072 SO_SNDBUF=131072 3/17/03 /dev/hdcnyonker 2,026 288 422.04 7.03 Used speedtest.tar.bz2. Changed to socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192 3/17/03 /dev/hdcnyonker 2,026 277 438.80 7.31 Used speedtest directory. Changed to socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192 3/17/03 /dev/hdcnyonker 2,026 286 424.99 7.08 7.5MB/sec doesn't seem too bad. But I still think I can do better. I may lower my standards a little. If I can get to 8 or 8.5MB/sec I'll be happy. I still think I should be able to do 9MB/sec. FTP can do 10.5MB/sec. Does Samba really have 30% more overhead than FTP? File locking and such are not issues since I've been doing test with both directories of files and one big zip. Any other suggestions would be much appreicated. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] INTERNAL ERROR / enable to unmarshall / Linux Windows2000
I have found It'is really a probleme of permission. To joint the domain, windows ask for a username. But he need the root login. After all is working good. Le ven 14/03/2003 à 18:33, Joyce LAMBERT a écrit : > Hello > > I have install and configure samba 2.2.3a-12 on a debian woody > > I want to use it as a PDC on windows 98 it's working XP i don't know but > windows 2000 no > > When i want to configure the domain on the 2000 client > I have this message "Echec de l'appel de procédure distante" > > on the log.smbd file i can show this: > > > > (if jlambert is declare as an admin user) > > [2003/03/14 18:14:06, 0] lib/fault.c:fault_report(39) > INTERNAL ERROR: Signal 11 in pid 16131 (2.2.3a-12 for Debian) > Please read the file BUGS.txt in the api_samr_set_userinfo: Unable to > unmarshall SAMR_Q_SET_USERINFO. > [2003/03/14 18:33:57, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416) > unable to open passdb database. > distribution > [2003/03/14 18:14:06, 0] lib/fault.c:fault_report(41) > === > [2003/03/14 18:14:06, 0] lib/util.c:smb_panic(1064) > PANIC: internal error > [2003/03/14 18:14:06, 0] smbd/service.c:make_connection(381) > jlambert logged in as admin user (root privileges) > [2003/03/14 18:15:07, 0] smbd/service.c:make_connection(381) > jlambert logged in as admin user (root privileges) > [2003/03/14 18:15:08, 0] > rpc_server/srv_samr.c:api_samr_set_userinfo(670) > api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO. > [2003/03/14 18:15:08, 0] lib/fault.c:fault_report(38) > === > [2003/03/14 18:15:08, 0] lib/fault.c:fault_report(39) > INTERNAL ERROR: Signal 11 in pid 16133 (2.2.3a-12 for Debian) > Please read the file BUGS.txt in the distribution > [2003/03/14 18:15:08, 0] lib/fault.c:fault_report(41) > === > [2003/03/14 18:15:08, 0] lib/util.c:smb_panic(1064) > PANIC: internal error > [2003/03/14 18:15:08, 0] smbd/service.c:make_connection(381) > jlambert logged in as admin user (root privileges) > [2003/03/14 18:27:28, 0] smbd/service.c:make_connection(381) > jlambert logged in as admin user (root privileges) > > > > if jlambert is a normal user > > api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO. > [2003/03/14 18:33:57, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416) > unable to open passdb database. > > > Can someone help me i understand nothing > > Thank > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: XP "logon failure" but still logs on -- no roamingprofile
> I remember another post where applying the "critical updates" was
> actually the cause of the problem!? can't remember all the details..but
> something about auto-application making incorrect assumptions.
> hope this is of some help, regards
Okay. I guess the next thing to do is try with a fresh installation and
then see if it occurs again as elements get added. Since this was my
first attempt at using XP (or any networking of an NT kernel, for that
matter) it didn't really follow any strategy.
It has had a few software packages installed on it and CygWin to boot (I'm
trying to get Amanda to work). It's possible that one of these is causing
a local file access conflict.
> ps: I like your ideas in logon.bat. Do you have any suggestions/ideas on
> the best way to implement password-age, password-history in Xp/samba
> domain?
Thanks. I've noticed that XP has provisions for requiring passwords to
be changed, but didn't look in to it at all. Perhaps a small script which
sets the necessary registry entries?
Our password-expiration policy here involves me going around once
a year and beating on people's heads to give me new passwords which I then
enter in to a program that goes and changes them in the half-dozen or so
places where it's stored: nis, samba, mysql, windoze, etc.
Brian
( [EMAIL PROTECTED] )
---
Two roads diverged in a wood, and I -- I took the one less traveled by,
And that has made all the difference. ("The Road Not Taken" -- Robert Frost)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Novell EDirectory as LDAP backend
Hello,
I think this (from sambaAccount)
MustContain { "uid"},
should be
MustContain { "uniqueId"},
since this is a ldap schema to nds conversion and the uid attribute from
ldap is mapped to uniqueId in nds.
I also added some flags to the password fields.
Attached the modified version.
regards
sv
--
-- Submitted by Bruno Gimenes Pereti <[EMAIL PROTECTED] mp dot edu dot br>
-- Modified by Rolf Offermanns
-- Modified by Stefan Völkel
--
-- schema file for Novell's eDirectory 8.6/8.7
--
SambaAccountSchemaExtensions DEFINITIONS ::=
BEGIN
-- Password hashes
"lmPassword" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR, DS_SIZED_ATTR,
DS_SYNC_IMMEDIATE },
LowerBound 0,
UpperBound 32,
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 1 }
}
"ntPassword" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR, DS_SIZED_ATTR,
DS_SYNC_IMMEDIATE },
LowerBound 0,
UpperBound 32,
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 2 }
}
-- Account flags in string format ([UWDX ])
"acctFlags" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 4 }
}
-- Password timestamps & policies
"pwdLastSet" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 3 }
}
"logonTime" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 5 }
}
"logoffTime" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 6 }
}
"kickoffTime" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 7 }
}
"pwdCanChange" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 8 }
}
"pwdMustChange" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 9 }
}
-- string settings
"homeDrive" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 10 }
}
"scriptPath" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 5 1 4 1 7165 2 1 11 }
}
"profilePath" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 12 }
}
"userWorkstations" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 13 }
}
"smbHome" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 17 }
}
"domain" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 18 }
}
-- user and group RID
"rid" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 14 }
}
"primaryGroupID" ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 15 }
}
"sambaAccount" OBJECT-CLASS ::=
{
Operation ADD,
Flags {DS_AUXILIARY_CLASS},
SubClassOf {"TOP"},
MustContain { "uniqueID"},
MustContain { "rid"},
MayContain { "CN"},
MayContain { "lmPassword"},
MayContain { "ntPassword"},
MayContain { "pwdLastSet"},
MayContain {
[Samba] Migration from PDC using smbpasswd to PAM or LDAP
Hello, what I unterstand is, to set up an samba PDC server using PAM or LDAP from scratch. (Lots of Doc on the web) But my problem is, how to migrate a Samba PDC to one using PAM or LDAP. As I understand, I can not take over the existing machine accounts nor the user passwords from smbpasswd to the new authentication enviorment, if I have used "encrypt passwords = yes" . So are there any reports or best-practice documents on these type of migration. Thanks for help Joerg --- Jörg Junge EDV-Koordinator Paritätischer Wohlfahrtsverband Landesverband Thüringen e.V. Bergstr. 11 99192 Neudietendorf Tel : +49 36202 26 204 Fax: +49 36202 26 234 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Password Change on Win 98/Samba
What is the preferred method of password changing with Windows 98? I've tried dropping to DOS and typing passwd with no luck. using RH 7.2, and Samba 2.2.7a. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Change somebody else's domain password?
The remote machine is Windows NT 4.0 PDC. -Original Message- From: Gabriel D. Preston [mailto:[EMAIL PROTECTED] Sent: Monday, March 17, 2003 7:53 AM To: Genchev, Sergei Subject: Re: [Samba] Change somebody else's domain password? Can you log in to that remote machine as yourself or some other user, and then su to root? Genchev, Sergei wrote: > Login as root and do what? Root can change local smbpasswd file but if I >use smbpasswd to change password on a remote machine (PDC) I need to supply >username and old password, it does not matter whether I am root or not on a >local machine > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba & Wins Server
All We have offshore (North Sea) a DEC Alpha running OSF3.2 and samba 1.9.17p2. Samba was installed to allow the PC's on the company network access to the reports that the DEC generates and stores in a specified directory. These are accessed by mapping network drives from the PC. smbd and nmbd are kicked off from inetd The smb.conf file is [global] guest account = mis valid users = mis workgroup = euabz wins server = 161.102.144.9 log file = /usr/local/samba/var/log.%m server string = Samba Server for D1ETAP max log size = 50 security=share preserve case = yes default case = no mangle case = yes socket options = TCP_NODELAY wins support = no domain master = no local master = no preferred master = no os level = 0 [GAS] comment = D1 Etap Gas Share guest ok = yes force group = users force user = mis hide dot files = yes follow symlinks = no wide links = no path = /usr/ETAP_EX/RUN/AUDIT/GAS read only = yes I have been informed that the WINS server is to change as is the workgroup / domain. I have been asked to modify the DEC Alpha accordingly. The old WINS server was Win NT. The new one will be Win2k My question - is it just a case of changing the wins server and workgroup settings and restarting inetd (kill -HUP inetd processid) or do I have to reboot the DEC, or do I have to upgrade Samba versions. Also what would be required at the new WINS Server end ? Thanks Maria Suggitt Software Technical Coordinator Customer Service Department Daniel Europe Limited Tel +44 (0) 1751 471834 Fax +44 (0) 1751 471801 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Change somebody else's domain password?
Login as root and do what? Root can change local smbpasswd file but if I use smbpasswd to change password on a remote machine (PDC) I need to supply username and old password, it does not matter whether I am root or not on a local machine On Fri, Mar 14, 2003 at 10:05:08AM -0600, Genchev, Sergei said: > Hi, > > I am trying to find a way to change NT4 domain password from linux. > smbpasswd works fine if you know user's old password but I am looking for a > way to connect to PDC using all-mighty Administrator credentials and change > other user's password. Log in as root. -- Adam Smith Information Technology Officer SAGE Automation Ltd. [EMAIL PROTECTED] http://www.sageautomation.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Slow ls on smbfs Mounted Share
I have a share mounted as follows mount -t smbfs -o username=blah,password=blah,workgroup=wg //servername/share /mnt/samba/share The share mounts fine. I run an ls /mnt/samba/share/test.* (there is only one file named test, but there are 10K plus files) and it takes forever to return if it returns at all. I am Running Debian Woody kernel 2.4.20 smbfs non-modular. Is there something I can do to speed up the file search? I perform the same operation from a windows box and it returns in 3 - 5 seconds. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Re: [Samba] slow connect
Maybe your Server does not have the one and only master browser table. To guarantee, that the server is the maste browser ad in smb.conf : os level = 250 name resolve order = wins lmhosts host bcast wins support = yes preferred master = yes local master = yes The higher the os level, the more possible is the election of the server as master brower, a value of 250 is higher than any MS server or client will have by default. Make shure nmbd is started. preferred master and local master will help to make shure your server hast the one and only master browser table. The installation of a wins server will reduce the amount of broadcast clients will perform just to say "hello my name is and im still in the network" To guarantee the client is using the wins server add in dhcpd.conf in the host section, where 192.168.0.1 should be replaced by your wins servers ip: # WINS Server option netbios-node-type 8; option netbios-name-servers 192.168.0.1; Every workstation or server that ist not ip configured by dhcp add the wins server by hand. --- Jörg Junge EDV-Koordinator Paritätischer Wohlfahrtsverband Landesverband Thüringen e.V. Bergstr. 11 99192 Neudietendorf Tel : +49 36202 26 204 Fax: +49 36202 26 234 Hi Norman, It's my smb.conf file How do you think ? What is wrong ? to slow connect :( Dariusz Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] what happened to "unix realname"
Hi Someone asked me what has happened to the "unix realname" parameter in smb.conf. This has been availible until 2.2.0a. In the manpage of 2.2.0a it is said "... This boolean parameter when set causes samba to supply the real name field from the unix password file to the client...". Me and some others were thinking HOW did samba 2.2.0a supplied this to the client? greetings Axel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Win95 & Win98 - NOT WORKING - NT,2000, XP are ok (re posted)
Peter, I'm not a Samba guru so am not the one to tell you the difference between Samba 2.0 and Samba 2.2. I'm struggling myself to get printing to work from various Windows flavours with Samba 2.2.6 in "server" security mode on various unix flavours. My guess is that your problem is just authentication i.e. the password server is rejecting your old Windows boxes, perhaps because they are sending the password in clear and not encrypted like the modern Windows. If so you can put "map to guest = Bad User" in the [global] section of smb.conf and they will be let in as 'nobody'. This is slack security to be sure - but it works. You then have to check that 'nobody' can print from the spool directory. This can fail because 'nobody' has a weird UID or because there is no read access to one of the directories in the path. PCC -Original Message- From: [EMAIL PROTECTED] Sent: Sunday, 16 March, 2003 10:32 PM Our setup is peer to peer, rather than a domain setup. So security is set to "server" Generally though, we are using the same conf. file for this new Samba as the one we had (have) in production (on Samba 2.0.6). So I guess what I need to know is what has changed in regards to printing with Win95, 98 from 2.0.6 to 2.2.7a ? thanks -peter. Peter Carpenter <[EMAIL PROTECTED]> on 14/03/2003 09:45:28 PM Did you change your "security" setting in your new Samba e.g. from "share" to "domain"? -Original Message- From: [EMAIL PROTECTED] I tried adding the [printers] section to my conf file as John suggested, but this didn't solve the problem. Still able to print from NT, 2000, XP and not from Win95, 98 just recapping - am able to print from all clients with the old version (2.0.6) which we are still using in production With the new Samba (2.2.7a) the file sharing is fine, but printing only works for NT,2000,XP With Win95 & Win98 only, the file gets put in the spool directory but doesn't seem to get sent from the spool directory to the printer. (or picked up by the printer - however it works...) Any idea if Win95, 98 printing is treated differently to the newer OS's ? thanks for any thoughts. see below for other details... -peter. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Unix Realname with samba 2.2.4
> On Mon, 2003-03-17 at 21:06, Peter Forst wrote: > > Hi there, > > > > is it possible to acitivate Unix Realname with samba 2.2.4 ? I've tried it, but > > samba will ignore > > the unknown parameter. Does there exist an alternative parameter like unix > > realname under > > samba 2.2.4 ??? > > We decided that having the option to turn this off was rather pointless, > so it's always enabled > Hi, thanx, but how can I use the value ? Is it an enviroment variable ? In no documentation I can find any information about using the real unixname. Only that it is possible to get the fullname out of /etc/passwd -- Peter Forst -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 2.2.7a + Win2k Client + MSOffice 2000
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am running Samba 2.2.7a PDC and a Win2K_SP3 Client and have problems with MS Office 2000 (Word) hanging an crashing on a timeout when editing files in the Samba server share that are actually NFS mounted filesystems. The error in the samba log file is... <---snip---> [2003/03/17 13:21:51, 0] locking/posix.c:posix_fcntl_lock(661) posix_fcntl_lock: WARNING: lock request at offset 2147483539, length 1 returned [2003/03/17 13:21:51, 0] locking/posix.c:posix_fcntl_lock(662) an No locks available error. This can happen when using 64 bit lock offsets [2003/03/17 13:21:51, 0] locking/posix.c:posix_fcntl_lock(663) on 32 bit NFS mounted file systems. <---unsnip---> I am not sure what this means but I need to fix this problem of slowness associated with shared NFS FS's. Looking forward to any suggestions. - -Jeremy -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE+dbp2hE4luwDAQwARAlonAJ9AvNpIzd+sEKmdU5SMO4mYYI9wxACgqzBV Z8FJgoDOPvqYjFBvjeKPOaI= =va55 -END PGP SIGNATURE-# Date: 2003/03/13 10:16:34 # Global parameters [global] workgroup = ITCH netbios name = SCRATCH netbios aliases = ITCH server string = encrypt passwords = Yes passwd program = /usr/bin/passwd %u log level = 2 log file = /var/log/samba/samba.%m max log size = 50 large readwrite = No logon script = logon.bat logon path = \\%L\profiles\%U logon drive = H: logon home = \\%L\%u\.profiles domain logons = Yes os level = 64 preferred master = Yes domain master = Yes dns proxy = No wins server = xxx.xxx.xxx.xxx NIS homedir = Yes admin users = hosts allow = xxx.xxx.xxx.xxx/xxx.xxx.xxx.xxx printing = lprng [homes] comment = Home Directories read only = No browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [netlogon] path = /samba/netlogon write list = [profiles] path = /samba/profiles read only = No create mask = 0600 directory mask = 0700 [public] comment = Public Stuff path = /samba/public write list = guest ok = Yes [HP2100BW] comment = ljcsag path = /var/spool/samba read only = No guest ok = Yes printable = Yes printer name = HP2100BW oplocks = No [HP2500Colour] comment = hpcsag path = /var/spool/samba read only = No guest ok = Yes printable = Yes printer name = HP2500Colour oplocks = No -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Unix Realname with samba 2.2.4
On Mon, 2003-03-17 at 21:06, Peter Forst wrote: > Hi there, > > is it possible to acitivate Unix Realname with samba 2.2.4 ? I've tried it, but > samba will ignore > the unknown parameter. Does there exist an alternative parameter like unix realname > under > samba 2.2.4 ??? We decided that having the option to turn this off was rather pointless, so it's always enabled. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Printer - Access Denied, unable to connect
Hi, I have a Samba server with a local printer attached to the Linux system. In the past, I could print documents fine from my Windows PC. Now, I cannot figure out why I cannot access my system. It has been like that for a while and I put it on the back burner. Initially, I thought it was the printer port screws were loose and were responsible for not printing. I have them tightened and deleted/installed the printer and am still have the problem. After installing the network printer on Windows, the "Printers" list will list the status of the Samba printer as "Access denied, unable to connect". On Linux, I can submit print jobs fine. In Windows, I am getting the above error. My /etc/samba/smb.conf is listed below. Do you see anything wrong in this setup? There are no log entries in the /var/log/samba.log file. It is an empty file. System = Debian 3.0 (woody) Thank you in advance for any help. -- Subba Rao [EMAIL PROTECTED] # Samba config file created using SWAT # from saint.saintnet.src (10.6.0.41) # Date: 2003/02/17 04:02:28 # Global parameters [global] workgroup = HOME netbios name = MYHOST server string = Samba Server interfaces = 127.0.0.1 10.6.0.45/24 bind interfaces only = Yes security = SHARE encrypt passwords = Yes smb passwd file = /etc/samba/private/smbpasswd syslog only = Yes log file = /var/log/samba.log max log size = 5 socket options = TCP_NODELAY IPTOS_LOWDELAY domain logons = Yes preferred master = True domain master = True hosts allow = 10.0.0.0/255.0.0.0 [homes] comment = Users Home Directories path = %H valid users = %S read only = No create mask = 0600 directory mask = 0700 veto files = /.?*/ mangled names = No browseable = No [users] comment = All users directories path = /home valid users = root write list = root read only = No create mask = 0750 mangled names = No [HP] path = /tmp guest ok = Yes printable = Yes print command = /usr/bin/lpr -r %s printer name = tp0 [servers] comment = servers path = /servers valid users = subba9,root read only = No browseable = No [backup] comment = backup path = /backup read only = No guest ok = Yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Unix Realname with samba 2.2.4
Hi there, is it possible to acitivate Unix Realname with samba 2.2.4 ? I've tried it, but samba will ignore the unknown parameter. Does there exist an alternative parameter like unix realname under samba 2.2.4 ??? -- Peter Forst -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
