[Samba] wbinfo and getent passwd showing different number ofaccounts
Hello, I ran into a problem today. One of our users couldn't authenticate to a share which was working a few days ago. Turns out the reason was the account didn't exist according to pam but did exist according to wbinfo -u. The difference between the systems was approximately 30,000 user accounts. A restart of winbindd fixed this issue but I suspect that it is not completely fixed as there is still a difference of 10,000 accounts between the two systems. #wbinfo -u all.users #getent passwd all.passwd (before fixing # wc -l all.* 9989 all.passwd 43113 all.users (after fixing) # wc -l all.* 2 all.passwd 43113 all.users Anyone know of a limit for winbind. I know 43,000 is a lot of ADS accounts and both pam account numbers seem to be on a 10,000 user boundary. Best Regards, Lee Sanders -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] net groupmap syntax ?!?
net groupmap modify unixgroup=smbadmin ntgroup=Domain Admins
does the job
regards
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 10 Jun 2003, Holger Brückner wrote:
hello,
trying to follow the example im the howto-collection.
this is a samba 3.0beta-1 from debian, recompiled with ldapsam support
refering to the howto, the following command should work:
net groupmap add unixgroup=smbadmin ntgroup=Domain Admins
unfortunately ist just says:
svpdc:~# net groupmap add unixgroup=smbadmin ntgroup=Domain Admins
Usage: net groupmap add {rid=int|sid=string} unixgroup=string
[type=domain|local|builtin] [ntgroup=string] [comment=string]
give it a rid or SID.
cheers, jerry
--
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key http://www.plainjoe.org/gpg_public.asc
You can never go home again, Oatman, but I guess you can shop there.
--John Cusack - Grosse Point Blank (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/
iD8DBQE+9mzgIR7qMdg1EfYRAmtSAKCfFnr7CUsYLTgt8VDrnyGq1oVfcgCgwvgZ
nlVpRieIpns5WjjYGr6lR0Q=
=SLXC
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
--
+++ GMX - Mail, Messaging more http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Moving Samba installation from one host to another
Hello, last week I experienced some problems when moving a Samba installation from one host to another host. The old system ran Samba 2.2.8 on a SuSE Linux 7.3 The new system is also running Samba 2.2.8 but on Debian Woody The Client Systems are all running Win2K SP1. One is running Win2K SP2. One is running Win98. I moved smbpasswd to the new host. I also made sure that all entries in passwd, group and shadow existed on the new system. Anyway all computers lost the connection to the Domain when switching to the new Samba PDC. I had to remove all hosts from the domain and let them join the domain again in order to get it working again. Also all Windows SIDS associated with the users had changed. Any idea what I've done wrong ? Regards Manfred -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Setting up 3.0 to authenticate to AD
I got the same problem, but I recompiled Samba using the latest kerberos for MIT (1.3) and that works. /Patrik Norris, Brent wrote: Ok I changed my samba entries in pam.d and now I get a login box, but I still cannot login. Here is what the log file for my machine shows now: [2003/06/19 09:33:58, 1] smbd/sesssetup.c:reply_spnego_kerberos(175) Failed to verify incoming ticket! [2003/06/19 09:33:58, 1] smbd/sesssetup.c:reply_spnego_kerberos(175) Failed to verify incoming ticket! [2003/06/19 09:33:58, 1] smbd/sesssetup.c:reply_spnego_kerberos(175) Failed to verify incoming ticket! [2003/06/19 09:33:58, 1] smbd/sesssetup.c:reply_spnego_kerberos(175) Failed to verify incoming ticket! [2003/06/19 09:34:03, 1] smbd/sesssetup.c:reply_spnego_kerberos(221) Username bnorris is invalid on this system Anyone got any ideas? Well, I have the same exact problem as you. I have everything setup right so that wbinfo pulls all information fine. I can Kerberos too. But, can't login from the network. I thought it was PAM, but no for me either. I've posted about this a couple of times, to no avail. Hope someone answers yours! -Original Message- From: Norris, Brent [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 10:14 AM To: Chip Bell Subject: RE: [Samba] Setting up 3.0 to authenticate to AD Sounds like you set up winbind..did you do pam? I was under the impression from the documentation that pam only needed to be changed if you wanted to be able to use the accounts to login as far as telnet, ssh, ftp type stuff. It states that winbindd and samba should be working together and that they /etc/pam.d/samba didn't need changing. Though mine looks like this: auth required pam_nologin.so auth required pam_stack.so service=system-auth accountrequired pam_stack.so service=system-auth sessionrequired pam_stack.so service=system-auth password required pam_stack.so service=system-auth While the doc's only has the two lines: authrequired/lib/security/pam_stack.so service=system-auth account required/lib/security/pam_stack.so service=system-auth I wasn't attempting to change it though since that is what the samba rpm put in there. Perhaps I should change it to look like the one in the docs?? Brent -- output from testparm - Load smb config files from /etc/samba/smb.conf Processing section [homes] Processing section [printers] Processing section [public] Loaded services file OK. 'winbind separator = +' might cause problems with group membership. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions # Global parameters [global] workgroup = STU realm = STU.EDMONSON.K12.KY.US server string = Linux File Server security = ADS log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = No wins server = 10.76.16.50 winbind separator = + winbind use default domain = Yes [homes] comment = Home Directories read only = No browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [public] comment = Public Stuff path = /home/samba write list = bnorris guest ok = Yes -- In a world without fences who needs Gates Patrik Gustavsson, Senior Technical Consultant [EMAIL PROTECTED] Telephone: +46 60 671540 http://glen.swedenMobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550 -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] paid-for-print
Hi there, I'm newbie in Samba, so I beg for your excuse if my questions are stupid. Is it possible to use Samba as a paid-for-print server? If U know something about another free paid-for-print software, please let me know. 10x in advance, -- Julian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Trouble with CUPS/SAMBA
Hi all, I'm new to this list, as to SAMBA, and I'm struggling with getting a printer to work as a shared printer in a Windows network with a redhat 9 server. The printer is a HP 4550 Color LaserJet, installed with CUPS to the server, via JetDirect (port 9100). It prints testpages fine from the Linux-server. It was installed with the install-printer-utility in RedHat9. I have then shared the printer via samba, to be able to access it from the Windows machines (2000, XP). It shows up fine, and accept print jobs, but nothing happens after the jobs has been processed, and no errors are being generated. I would be grateful for any help. /Bo Mellberg cupsd.conf: LogLevel info MaxLogSize 0 Printcap /etc/printcap PrintcapFormat BSD RequestRoot /var/spool/cups TempDir /tmp AuthType None Location /admin AuthType Basic AuthClass System Order Deny,Allow Deny From All Allow From 127.0.0.1 /Location Location /printers/hp4550 Order Deny,Allow Deny From All Allow From 127.0.0.1 AuthType None Allow from All /Location Location / Order Deny,Allow Deny From All Allow From 127.0.0.1 /Location Browsing On BrowseProtocols cups BrowseOrder Deny,Allow BrowseAllow from @LOCAL BrowseAddress 255.255.255.255 Listen *:631 smb.conf: [global] workgroup = jolife server string = samba server hosts allow = 192.168.1. 127. printing = cups printcap = cups load printers = yes ; guest account = pcguest log file = /var/log/samba/%m.log max log size = 0 ; password server = NT-Server-Name ; password level = 8 ; username level = 8 smb passwd file = /etc/samba/smbpasswd ; ssl CA certFile = /usr/share/ssl/certs/ca-bundle.crt unix password sync = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* pam password change = yes ; username map = /etc/samba/smbusers ; include = /etc/samba/smb.conf.%m obey pam restrictions = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 ; remote browse sync = 192.168.3.25 192.168.5.255 ; remote announce = 192.168.1.255 192.168.2.44 ; local master = no ; os level = 33 domain master = yes ; preferred master = yes ; domain logons = yes ; logon script = %m.bat ; logon script = %U.bat ; logon path = \\%L\Profiles\%U ; wins support = yes ; wins server = w.x.y.z ; wins proxy = yes username map = /etc/samba/smbusers encrypt passwords = yes guest ok = yes dns proxy = no ; preserve case = no ; short preserve case = no ; default case = lower ; case sensitive = no [homes] comment = Home Directories browseable = no writeable = yes valid users = %S create mode = 0664 directory mode = 0775 ; map to guest = bad user ; [netlogon] ; comment = Network Logon Service ; path = /usr/local/samba/lib/netlogon ; guest ok = yes ; writable = no ; share modes = no ;[Profiles] ;path = /usr/local/samba/profiles ;browseable = no ;guest ok = yes [printers] comment = All Printers path = /var/spool/samba public = yes guest ok = yes printable = yes printer admin = root, @ntadmins ;[tmp] ; comment = Temporary file space ; path = /tmp ; read only = no ; public = yes ;[public] ; comment = Public Stuff ; path = /home/samba ; public = yes ; writable = yes ; printable = no ; write list = @staff ;[fredsprn] ; comment = Fred's Printer ; valid users = fred ; path = /home/fred ; printer = freds_printer ; public = no ; writable = no ; printable = yes ;[fredsdir] ; comment = Fred's Service ; path = /usr/somewhere/private ; valid users = fred ; public = no ; writable = yes ; printable = no ;[pchome] ; comment = PC Directories ; path = /usr/local/pc/%m ; public = no ; writable = yes ;[public] ; path = /usr/somewhere/else/public ; public = yes ; only guest = yes ; writable = yes ; printable = no ;[myshare] ; comment = Mary's and Fred's stuff ; path = /usr/somewhere/shared ; valid users = mary fred ; public = no ; writable = yes ; printable = no ; create mask = 0765 [jolife shared] comment = Shared Jolife documents path = /home/jolife/ writeable = yes guest ok = yes [bosse] comment = Bosses documents path = /home/bosse valid users = bosse writeable = yes [lennart] comment = Lennarts documents path = /home/lennart writeable = yes valid users = lennart [martin] comment = Martins documents path = /home/martin writeable = yes valid users = martin [peter] comment = Peters documents path = /home/peter writeable = yes valid users = peter [semmy] comment = Semmys documents path = /home/semmy
AW: [Samba] Charset module could not load
hi we had the same problem; but on suse 8.2; you need to install a library package before you compile samba in suse it´s called 'glibc-locale' i don't know how it´s called in FreeBSD hope it helps bb boris blaha -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Auftrag von David van Geyn Gesendet: Samstag, 21. Juni 2003 02:26 An: [EMAIL PROTECTED] Betreff: [Samba] Charset module could not load Hello, Everything I've tested so far regarding my Samba 3.0.0 beta 1 installation works great, despite the following error: Error loading module '/usr/local/samba/lib/charset/CP850.so': Cannot open /usr/local/samba/lib/charset/CP850.so This error comes up when I run any of the Samba binaries, such as smbpasswd, pdbedit, etc... also it shows up in log.smbd, log.nmbd when either of those are run. I can't find this module anywhere in the source directories or on my system anywhere. Is this supposed to be something that Samba compiles and installs, or am I missing something? This Samba server is running on a FreeBSD 4.5 system. I also have another FreeBSD 4.5 system that does the exact same thing. Has anyone else had this problem? Thanks, David van Geyn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Moving Samba installation from one host to another
You forgot to to transfer your domain-SID to the new samba-server. This can be done by running rpcclient on the old samba-server and run the lsaquery command. This will output the domain-SID. Next you copy and paste this in to a file called MACHINE.SID on the new server (this file should be placed in the private subdir where secrets.tdb is located) and remove the secrets.tdb file. If samba is restarted the domain-SID (from MACHINE.SID) is imported into the secrets.tdb. At last you should transport the smbpasswd file (located in the private subdir) from the old samba-server to the new samba-server. Things should now be up and running fine... MH - Entwicklung wrote: Hello, last week I experienced some problems when moving a Samba installation from one host to another host. The old system ran Samba 2.2.8 on a SuSE Linux 7.3 The new system is also running Samba 2.2.8 but on Debian Woody The Client Systems are all running Win2K SP1. One is running Win2K SP2. One is running Win98. I moved smbpasswd to the new host. I also made sure that all entries in passwd, group and shadow existed on the new system. Anyway all computers lost the connection to the Domain when switching to the new Samba PDC. I had to remove all hosts from the domain and let them join the domain again in order to get it working again. Also all Windows SIDS associated with the users had changed. Any idea what I've done wrong ? Regards Manfred -- René Nieuwenhuizen Afdeling Informatietechnologie Centraal Planbureau Bezoekadres: Van Stolkweg 14, 2585 JR Den Haag Postadres: Postbus 80510, 2508 GM Den Haag T (070) 3383 342 F (070) 3383 350 I http://www.cpb.nl/nl/general/org/afdelingen/it/ -- Aan dit bericht kunnen geen rechten worden ontleend. Het bericht is alleen bestemd voor de geadresseerde. Indien dit bericht niet voor u is bestemd, verzoeken wij u dit onmiddellijk aan ons te melden en de inhoud van het bericht te vernietigen. This message shall not constitute any obligations. This message is intended solely for the addressee. If you have received this message in error, please inform us immediately and delete its contents. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] paid-for-print
[Samba] paid-for-print Julian Tzonev uli at naval-acad.bg Mon Jun 23 11:19:46 GMT 2003 Hi there, I'm newbie in Samba, so I beg for your excuse if my questions are stupid. Is it possible to use Samba as a paid-for-print server? Not out-of-the-box. I'd know how to do it if you give me to days to fiddle with it. If U know something about another free paid-for-print software, please let me know. 1. There is printbill -- now with initial, but still limited CUPS support: http://ieee.uow.edu.au/~daniel/software/printbill/ printbill is GPL and actively maintained and developed. 2. Then there is pycota -- developed for CUPS originally: http://www.librelogiciel.com/software/PyKota/action_Presentation pycota is GPL in source code, and you can compile and setup yourself, but it is poorly documented. The author sells a pre-compiled version plus documentation and support under a shareware type license, I believe. pycota is actively maintained and developed. 3. Lastly, printquota. It only supports LPRng: http://printquota.sourceforge.net/ printquota is GPL and actively maintained and developed. 10x in advance, -- Julian Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Strange UID/GID mapping in Samba-3beta1 and Win2003 server
I have strange uid/gid problem. I am testing Samba 3-beta1 and Samba is ADS member to W2003 server. Everythings work, wbinfo, getent passwd and so on. Now to the problem: When I list the users with getent passwd I get: Administrator:x:1:1:Administrator:/global/mnt1/SAMBA/home/TEST.SE/administrator:/bin/sh Guest:x:10001:10002:Guest:/global/mnt1/SAMBA/home/TEST.SE/guest:/bin/sh krbtgt:x:10002:1:krbtgt:/global/mnt1/SAMBA/home/TEST.SE/krbtgt:/bin/sh root:x:10003:1:root:/global/mnt1/SAMBA/home/TEST.SE/root:/bin/sh patrikg:x:10004:1:patrik Gustavsson:/global/mnt1/SAMBA/home/TEST.SE/patrikg:/bin/sh fmuser:x:10005:1:fmuser:/global/mnt1/SAMBA/home/TEST.SE/fmuser:/bin/sh When I list the users with wbinfo -u Administrator Guest krbtgt root patrikg fmuser When I am using a W2k client and log into the W20003 Server and access a share on Samba with my user (patrikg) is remaped to pgpc (10.0.0.140) connect to service profiles initially as user TEST.SE\patrikg (uid=10006, gid=10003) That uid 10006 and group 10003 can't be displayed with getent passwd and getent group. Why do I get uid 10006 when I should have 10004 ? /Patrik -- In a world without fences who needs Gates Patrik Gustavsson, Senior Technical Consultant [EMAIL PROTECTED] Telephone: +46 60 671540 http://glen.swedenMobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550 -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] paid-for-print
[Samba] paid-for-print Kurt Pfeifle kpfeifle at danka.de Mon Jun 23 11:43:09 GMT 2003 [Samba] paid-for-print Julian Tzonev uli at naval-acad.bg Mon Jun 23 11:19:46 GMT 2003 Hi there, I'm newbie in Samba, so I beg for your excuse if my questions are stupid. Is it possible to use Samba as a paid-for-print server? Not out-of-the-box. I'd know how to do it if you give me to days to fiddle with it. If U know something about another free paid-for-print software, please let me know. 1. There is printbill -- now with initial, but still limited CUPS support: http://ieee.uow.edu.au/~daniel/software/printbill/ printbill is GPL and actively maintained and developed. 2. Then there is pycota -- developed for CUPS originally: http://www.librelogiciel.com/software/PyKota/action_Presentation pycota is GPL in source code, and you can compile and setup yourself, but it is poorly documented. The author sells a pre-compiled version plus documentation and support under a shareware type license, I believe. pycota is actively maintained and developed. This may sound a bit too unfriendly towards pycota. Let me put it straight: to me pycota looks like the *first* choice for anybody needing external print accounting support in CUPS. (Future CUPS versions may have their built-in accounting capabilities improved) 3. Lastly, printquota. It only supports LPRng: http://printquota.sourceforge.net/ printquota is GPL and actively maintained and developed. 10x in advance, -- Julian Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Trouble with CUPS/SAMBA
[Samba] Trouble with CUPS/SAMBA Bo Mellberg bo.mellberg at jolife.se Mon Jun 23 10:34:12 GMT 2003 Hi all, I'm new to this list, as to SAMBA, and I'm struggling with getting a printer to work as a shared printer in a Windows network with a redhat 9 server. The printer is a HP 4550 Color LaserJet, installed with CUPS to the server, via JetDirect (port 9100). It prints testpages fine from the Linux-server. It was installed with the install-printer-utility in RedHat9. I have then shared the printer via samba, to be able to access it from the Windows machines (2000, XP). It shows up fine, and accept print jobs, but nothing happens after the jobs has been processed, and no errors are being generated. Please refer to this document (PDF or HTML) http://www.linuxprinting.org/kpfeifle/SambaPrintHOWTO/ and see if it answers your questions. I would be grateful for any help. /Bo Mellberg Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] OT: Why are so many using Samba to authenticate as PDC??
Jonathan Johnson wrote: We all know about cost. Are there any TECHNICAL reasons for running Samba? Have you found it to be superior to Windows NT or 2000 Server in some way? Are you using it for the challenge of *something different*? Are you hoping to 'advance the state of the art'? Just a few questions to get your brain cells moving, that's all. Personally, some things I like about Samba: * Remote administration is far easier, especially from non-M$ platforms (web interfaces, command line config file editing, no stinkin' registry with undocumented values * Share-level options that are only global in Windows * Provides *nix filesystem access to Windows clients * Ability to have multiple SMB servers in one machine * Ability to rename your PDC (Although this may screw things up!) * Ability to do clever stuff like set up a printer that converts a document to PDF and mails it back to the user. * Ability to use an LDAP backend and make Samba part of a single sign on environment. * Security * Lower hardware requirements than MS platform, as you don't get forced to run a GUI, whether you like it or not. * Stability Mike. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win(yuck)NT
Steve_Lyle/[EMAIL PROTECTED] wrote: In migrating to Samba on FreeBSD from Win(yuck)NT, I?ve run into this hitch. Let us say I have 9 users named User1, User2, User3, ? User9 User1 is a member of group wheel User2 User3 have the administrative task (add/change/delete) of managing the content of the directory Dirc1 and all subordinate objects (files and directories). Dirc1 is the directory /usr/Shared/Dirc1. Only User1 will need to delete Dirc1, but if it helps then User2 User3 can also delete Dirc1. All users can read anything in Dirc1 and all subordinate objects as well. All users can contribute (add/change/delete) anything in the Everyone directory which is /usr/Shared/Dirc1/Everyone Shared is a Samba service. As User2 User3 add new objects subordinate to Dirc1 they are to retain the permissions necessary to add/change/delete all current and new objects in Dirc1. All users can add/change/delete anything anywhere else in Shared All end-user efforts are performed from Windows NT workstations. (This is essentially what I have on an NT file system and would like to maintain this structure to prevent confusion.) Finally, Samba ACL support is not compiled into Samba because that option is broken between this version of FreeBSD and this version of Samba. 1) How do I configure the Shared, Dirc1 Everyone directories in terms of the Unix file permissions and ownerships to support this? Create an admin group, and an everyone group - I've used smbadmin and everyone. Then make /usr/Shared group owned by everyone, and group writable and *SGID*.Make /usr/Shared/Dirc1/Everyone group owned by everyone, group writable, and SGID. Make /usr/Shared/Dirc1/ group owned by smbadmin, and SGID. 2) How do I configure the Shared service in Samba to support this? Something like this:- [dirc1] comment = Dirc1 general file share path = /usr/Shared/ valid users = @everyone admin users = @smbadmin writeable = Yes create mask = 0755 force create mode = 020 directory mask = 02775 force directory mode = 02070 map system = Yes map hidden = Yes 3) How do I configure the User2 User3? Make them members of smbadmin. 4) What else will be necessary? That should be about it, if I've understood what you're after correctly. The SGOD bit governs file creation semantics, so this will work on an empty directory tree. If you copy a load of files across from NT, you'll have to go through all the directories recursively, setting the SGID bit as necessary. HTH, Mike. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Strange UID/GID mapping in Samba-3beta1 and Win2003 server
On Mon, 2003-06-23 at 19:10, Patrik Gustavsson PS Sweden Senior Technical Consultant wrote: I have strange uid/gid problem. I am testing Samba 3-beta1 and Samba is ADS member to W2003 server. Everythings work, wbinfo, getent passwd and so on. Now to the problem: When I list the users with getent passwd I get: Administrator:x:1:1:Administrator:/global/mnt1/SAMBA/home/TEST.SE/administrator:/bin/sh Guest:x:10001:10002:Guest:/global/mnt1/SAMBA/home/TEST.SE/guest:/bin/sh krbtgt:x:10002:1:krbtgt:/global/mnt1/SAMBA/home/TEST.SE/krbtgt:/bin/sh root:x:10003:1:root:/global/mnt1/SAMBA/home/TEST.SE/root:/bin/sh patrikg:x:10004:1:patrik Gustavsson:/global/mnt1/SAMBA/home/TEST.SE/patrikg:/bin/sh fmuser:x:10005:1:fmuser:/global/mnt1/SAMBA/home/TEST.SE/fmuser:/bin/sh When I list the users with wbinfo -u Administrator Guest krbtgt root patrikg fmuser When I am using a W2k client and log into the W20003 Server and access a share on Samba with my user (patrikg) is remaped to pgpc (10.0.0.140) connect to service profiles initially as user TEST.SE\patrikg (uid=10006, gid=10003) That uid 10006 and group 10003 can't be displayed with getent passwd and getent group. Why do I get uid 10006 when I should have 10004 ? This looks like you are not running winbindd, and have found the bugs in beta 1. This has been fixed in current Samba 3.0 CVS. If you were running winbind, was it configured in nsswitch? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Strange UID/GID mapping in Samba-3beta1 and Win2003 server
Yes, I'm running winbindd and it's defined in nsswitch.conf. /Patrik Andrew Bartlett wrote: On Mon, 2003-06-23 at 19:10, Patrik Gustavsson PS Sweden Senior Technical Consultant wrote: I have strange uid/gid problem. I am testing Samba 3-beta1 and Samba is ADS member to W2003 server. Everythings work, wbinfo, getent passwd and so on. Now to the problem: When I list the users with getent passwd I get: Administrator:x:1:1:Administrator:/global/mnt1/SAMBA/home/TEST.SE/administrator:/bin/sh Guest:x:10001:10002:Guest:/global/mnt1/SAMBA/home/TEST.SE/guest:/bin/sh krbtgt:x:10002:1:krbtgt:/global/mnt1/SAMBA/home/TEST.SE/krbtgt:/bin/sh root:x:10003:1:root:/global/mnt1/SAMBA/home/TEST.SE/root:/bin/sh patrikg:x:10004:1:patrik Gustavsson:/global/mnt1/SAMBA/home/TEST.SE/patrikg:/bin/sh fmuser:x:10005:1:fmuser:/global/mnt1/SAMBA/home/TEST.SE/fmuser:/bin/sh When I list the users with wbinfo -u Administrator Guest krbtgt root patrikg fmuser When I am using a W2k client and log into the W20003 Server and access a share on Samba with my user (patrikg) is remaped to pgpc (10.0.0.140) connect to service profiles initially as user TEST.SE\patrikg (uid=10006, gid=10003) That uid 10006 and group 10003 can't be displayed with getent passwd and getent group. Why do I get uid 10006 when I should have 10004 ? This looks like you are not running winbindd, and have found the bugs in beta 1. This has been fixed in current Samba 3.0 CVS. If you were running winbind, was it configured in nsswitch? Andrew Bartlett -- In a world without fences who needs Gates Patrik Gustavsson, Senior Technical Consultant [EMAIL PROTECTED] Telephone: +46 60 671540 http://glen.swedenMobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550 -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] CPU consumption by samba
Hi, I'm no expert at all and I never experienced something like that, so probably I'm the wrong to ask. Perhaps someone more experienced on the list could help? On Sat, Jun 21, 2003 at 11:29:22PM +0200, Massimiliano Hofer wrote: Alle 9:03 AM, mercoledì 18 giugno 2003, Wolfram Quester ha scritto: I remember that there were issues with VisualFox Pro and oplocks discussed on this list. Try to disable them A recommendation was to look at http://www.drouillard.ca/TipsTricks/Samba/Oplocks.htm You can search this list at marc.theaimsgroup.com for Foxpro Test with http://marc.theaimsgroup.com/?l=sambaw=2r=1s=Foxpro+Testq=b for further information. Thank your for the interesting links, but they seem to discuss corruption problems (which I don't have). Sorry for leading you on the wrong path. The term VisualFox Pro just rang a bell. Anyway I managed to perform some more tests with various settings of locks, op locks, caching, etc. The only significant parameter (if I'm not missing anything fundamental) I didn't test extensively is the lock spin, which I'll test in the next few days. I even tried samba 3, but to no avail (it was slower). Sometimes it got a little faster or slower, but the loading time never went below 30 seconds and this is way too slow compared with 2 seconds on a Windows 2000 server. Meanwhile all other application run faster with samba than with Windows (as expected :)). During those 30 seconds the CPU load takes 80% user time and 20% system time and this is with just one client. What could possibly take this much resources? I first thought on some protocol negotiation, but this should show up on logon time, not during a working connection. In your log there are quite a lot of lines like [2003/06/13 19:43:13, 3] smbd/trans2.c:call_trans2qfilepathinfo(1719) call_trans2qfilepathinfo: vfs_stat of vfcssrc failed (No such file or directory) [2003/06/13 19:43:13, 3] smbd/error.c:error_packet(94) error string = No such file or directory [2003/06/13 19:43:13, 3] smbd/error.c:error_packet(113) error packet at smbd/trans2.c(1721) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2003/06/13 19:43:13, 3] smbd/process.c:process_smb(878) Transaction 10280 of length 88 They make me think there might be issues with some name-mangling or codepage-settings. Are there accents, umlauts or the like in your filenames? The interesting part would be why these things don't occur with other applications then. Best regards, Wolfi -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
SV: [Samba] Trouble with CUPS/SAMBA
I have read this document. I am trying to get the Simple smb.conf-settings (chapter 7.2.2) to work, but with the said results. libcups.so is compiled into samba. As told earlier, the printer shows up in the shares and accepts print jobs, but it wont print anything. /Bo Mellberg -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Kurt Pfeifle Skickat: den 23 juni 2003 11:53 Till: [EMAIL PROTECTED] Ämne: [Samba] Trouble with CUPS/SAMBA [Samba] Trouble with CUPS/SAMBA Bo Mellberg bo.mellberg at jolife.se Mon Jun 23 10:34:12 GMT 2003 Hi all, I'm new to this list, as to SAMBA, and I'm struggling with getting a printer to work as a shared printer in a Windows network with a redhat 9 server. The printer is a HP 4550 Color LaserJet, installed with CUPS to the server, via JetDirect (port 9100). It prints testpages fine from the Linux-server. It was installed with the install-printer-utility in RedHat9. I have then shared the printer via samba, to be able to access it from the Windows machines (2000, XP). It shows up fine, and accept print jobs, but nothing happens after the jobs has been processed, and no errors are being generated. Please refer to this document (PDF or HTML) http://www.linuxprinting.org/kpfeifle/SambaPrintHOWTO/ and see if it answers your questions. I would be grateful for any help. /Bo Mellberg Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] paid-for-print
Thanks a lot for information. I'm going to check URLs ... I have enough time to wait, but I don't know if U have enough time to spend for this. Nevertheless, I think that paid-for-print funcionality of Samba would be very usefull not only for me. Thanks again. Best regards, Julian Kurt Pfeifle wrote: [Samba] paid-for-print Julian Tzonev uli at naval-acad.bg Mon Jun 23 11:19:46 GMT 2003 Hi there, I'm newbie in Samba, so I beg for your excuse if my questions are stupid. Is it possible to use Samba as a paid-for-print server? Not out-of-the-box. I'd know how to do it if you give me to days to fiddle with it. If U know something about another free paid-for-print software, please let me know. 1. There is printbill -- now with initial, but still limited CUPS support: http://ieee.uow.edu.au/~daniel/software/printbill/ printbill is GPL and actively maintained and developed. 2. Then there is pycota -- developed for CUPS originally: http://www.librelogiciel.com/software/PyKota/action_Presentation pycota is GPL in source code, and you can compile and setup yourself, but it is poorly documented. The author sells a pre-compiled version plus documentation and support under a shareware type license, I believe. pycota is actively maintained and developed. 3. Lastly, printquota. It only supports LPRng: http://printquota.sourceforge.net/ printquota is GPL and actively maintained and developed. 10x in advance, -- Julian Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Julian Tzonev, Ph.D Assosiate Professor Department Computer Science Bulgarian Naval Academy Varna 9026 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Doubts about Winbindd
Hi, I'm trying to set up a PDC using Samba on a Linux server. I need to the linux clients, using KDE desktop, log in the PDC using the KDE login box. I think I could use the 'winbindd' to do what I need but, I still have some questions: 1. Do I need to set up winbindd on each Linux client to log on the Linux PDC ? 2. Do I need to set up winbindd on the Linux PDC server too ? 3. Using winbindd could I have only a password file on Linux PDC server where the Linux clients will autenticate ? 4. Could Win2000/XP clients be autenticate to a Linux PDC server without I need to add the users on the Win2000/XP clients ? How ? Sorry for this newbie questions and thanks, Roberto Samarone Araujo -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] usermapping in 3.0b1
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 16 Jun 2003, Dan Newcombe wrote: I was reading the release notes for 3.0beta1, which says this: 1) When operating as a member of a Windows domain, Samba 2.2 would map any users authenticated by the remote DC to the 'guest account' if a uid could not be obtained via the getpwnam() call. Samba 3.0 rejects the connection as NT_STATUS_LOGON_FAILURE. There is no current work around to re-establish the 2.2 behavior. Does this apply to only automatically mapping to the guest account, or does this also apply to mapping a user to a uid via getpwnam? I ask because I am trying to maintain the ability I had before - running Samba on a box where my unix username is the same as my windows username. In the past, it would just assume the two were correct and that was that. Now, the only way I can get it to work is to use idmap, but that maps my nt account to a uid different than my unix uid. This has been reported and will be fixed to maintain comparibility with the 2.2 release. Sory for the problems. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc You can never go home again, Oatman, but I guess you can shop there. --John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+9wdLIR7qMdg1EfYRAi/6AJ9QRC3C8OUMN5xtuvd8LmOJZ6mAswCgq7NO 9aJapq4N01iV0XOlHlhKTDs= =XwiH -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Hi need some understanding
RJPvT írta:
Hi guys,
(sorry for my typos, i'm dutch :-) )
First I would like to congratulate you all for a job wel done, the
samba 3.0 looks and works great.
I have got a question neverteless,
I want to use the user manager for winnt for my users and group admin.
but i also want to stay off the linux accounts since i don't want
everyone to be able to login to various programs
i am using the tdbsam backend with the idmap, but i cannot create
users with the user manager, nor can i create groups.
i know i will have to user net group and pdbedit to make these
but i cannot figure out the right syntaxes with the add user, add
group scripts in smb.conf
also I cannot use more then 1 group per user, and would like te be
able to change this.
Could you give me some pointers, or possible the commands for
add user, add group, delete user from, add user to, etc. ?
this is my current smb.conf :
[global]
workgroup = RJPCNET
netbios name = RJPC-srv1
server string = Samba3
passdb backend = tdbsam, guest
password level = 8
username level = 8
syslog = 0
log file = /var/log/samba/%m
name resolve order = wins bcast hosts
time server = Yes
socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=8192
O_RCVBUF=8192
disable spoolss = Yes
domain logons = Yes
os level = 35
preferred master = Yes
domain master = Yes
wins support = Yes
utmp = Yes
idmap uid = 15000-2
idmap gid = 15000-2
comment = Samba 3.0.0
printing = cups
[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No
[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
admin users = root
guest ok = Yes
nt acl support = No
browseable = No
blocking locks = No
csc policy = disable
locking = No
oplocks = No
level2 oplocks = No
posix locking = No
strict locking = No
share modes = No
[simple]
comment = simple share
path = /tmp
read only = No
I would suggest you to look at [EMAIL PROTECTED] 's smb.conf sent to the
list two days ago , you will find it attached to this mail
Good Luck
Geza Gemes
# Samba config file created using SWAT
# from 192.168.1.1 (192.168.1.1)
# Date: 2003/06/21 14:41:58
# Global parameters
[global]
workgroup = MIDEARTH
server string = Samba3
interfaces = eth0, lo
bind interfaces only = Yes
server schannel = Yes
passdb backend = tdbsam, guest
pam password change = Yes
passwd chat = *New*Password* %n\n *Re-enter*new*password* %n\n
*Password*changed*
username map = /etc/samba/smbusers
password level = 8
username level = 8
unix password sync = Yes
log level = 1
syslog = 0
log file = /var/log/samba/%m
smb ports = 139 445
name resolve order = wins bcast hosts
time server = Yes
socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=8192 SO_RCVBUF=8192
printcap name = CUPS
disable spoolss = Yes
add user script = /usr/sbin/useradd -m %u
delete user script = /usr/sbin/userdel -r %u
add group script = /usr/sbin/groupadd %g
delete group script = /usr/sbin/groupadd %g
add user to group script = /usr/sbin/usermod -G %g %u
add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u
shutdown script = /var/lib/samba/scripts/shutdown.sh
abort shutdown script = /sbin/shutdown -c
logon script = scripts\logon.bat
logon path = \\%L\Profiles\%U
logon drive = H:
logon home = \\%L\%U
domain logons = Yes
os level = 35
preferred master = Yes
domain master = Yes
wins support = Yes
ldap ssl = no
utmp = Yes
panic action = export DISPLAY=localhost:0; /usr/bin/X11/xterm -e gdb
/proc/%d/exe %d || /bin/sleep
idmap uid = 15000-2
idmap gid = 15000-2
winbind separator = +
comment = Samba 3.0.0
hosts allow = 127., 192.168.1.
use sendfile = Yes
printing = cups
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
veto oplock files = /*.doc/*.xls/*.mdb/
include = /etc/samba/machine.
[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No
[print$]
comment = Printer Drivers Share
path = /var/lib/samba/drivers
write list = jht, root
printer admin = jht, root
create mask = 0664
directory mask = 0775
[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
admin users = root, jht
guest ok = Yes
nt acl support = No
Re: [Samba] paid-for-print
Julian Tzonev i'rta: Hi there, I'm newbie in Samba, so I beg for your excuse if my questions are stupid. Is it possible to use Samba as a paid-for-print server? If U know something about another free paid-for-print software, please let me know. 10x in advance, -- Julian You are interested in printer acounting. Look at this, especialy the chapter about CUPS http://www.linuxprinting.org/kpfeifle/SambaPrintHOWTO/Samba-HOWTO-Collection-3.0-PrintingChapter-11th-draft.pdf Good Luck Geza Gemes http://www.linuxprinting.org/kpfeifle/SambaPrintHOWTO/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] LDAP + SAMBA...about to give up...
Hello, everyone. I apologize if this question is already asked before, and I'm sure that it did and I also found them in in the Archive, but none of them can resolve my issue that I'm having. Anyway, I installed Samba beta1 from RPM for Redhat 8.0 with LDAP newest version 2.1.21. I got my LDAP up and running, also got SAMBA to talk to LDAP just fine. Created root (as Admin) users, and some other several users. I also created the following groups using net groupmap command, and this is the dump. System Operators (S-1-5-32-549) - domso Replicators (S-1-5-32-552) - domrep Guests (S-1-5-32-546) - domg Power Users (S-1-5-32-547) - dompu Domain Users (S-1-5-21-783284980-1158383531-2750713796-513) - domdu Domain Admins (S-1-5-21-783284980-1158383531-2750713796-512) - domadm Domain Guests (S-1-5-21-783284980-1158383531-2750713796-514) - domdg Print Operators (S-1-5-32-550) - dompo Account Operators (S-1-5-32-548) - domao Backup Operators (S-1-5-32-551) - dombo Users (S-1-5-32-545) - domu --- Also this is the dump for pdbedit -L -v root: -- Entry found for user: root Unix username:root NT username: root Account Flags:[U ] User SID: S-1-5-21-2422541079-1097910024-471466596-1000 Primary Group SID:S-1-5-21-2422541079-1097910024-471466596-1001 Full Name:root Home Directory: \\mymasterserver\root HomeDir Drive: Logon Script: .bat Profile Path: \\mymasterserver\Profiles\root Domain: MYHOMEDOMAIN Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Mon, 18 Jan 2038 21:14:07 GMT Kickoff time: Mon, 18 Jan 2038 21:14:07 GMT Password last set:Sun, 22 Jun 2003 00:49:45 GMT Password can change: Sun, 22 Jun 2003 00:49:45 GMT Password must change: Sun, 13 Jul 2003 00:49:45 GMT -- Ok, everything seems just fine, right. Now I went into my XPs and disable the sigorseal and securechannel registry stuff. Then I tried to join the DOMAIN and typed in root as username and password, then I got an error saying The specified user does not exist. I check the log files and it reported that authentication for root is successful. Now after the error, I checked LDAP tree, and the XP computer name was also added in there just fine. I am clueless/hopeless on what else to do next. I tried everything I could to find any solution but no luck. Please help, if you can provide any HOWTO or up-2-date tutorials on SAMBA+LDAP I would really apreciate it. I tried the other HOWTO but the seem to be out dated now. Thanks for your help. +++ And here's my smb.conf: +++ [global] # LDAP Stuff here passdb backend = ldapsam #passdb backend = ldapsam smbpasswd guest ldap suffix = dc=mydomain,dc=net ldap machine suffix = ou=Computers,o=smb ldap user suffix = ou=Users,o=smb ldap group suffix = ou=Groups,o=smb ldap admin dn = cn=Manager,dc=mydomain,dc=net ldap ssl = no admin users = root @domadm idmap uid = 1-15000 idmap gid = 1-15000 log level = 3 # workgroup = NT-Domain-Name or Workgroup-Name workgroup = MYHOMEDOMAIN netbios name = MYMASTERSERVER ..and other basic/default stuff. - Need Web Email Account? Email [EMAIL PROTECTED] - -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba in AD + trusted KDC environment
Hi, I am trying to set a samba server as my fileserver in a Win2k network with a AD domain Controller. Authentication is already done against an unix KDC, trusted by the DC and everything work fine from now. When trying to connect i have two problem. first is not that related to Samba, as i get a UNKNOWN_SERVER as the reply for the TGS-REQ sent by Win2k client. Excuse me if it is ununderstanble for you ;) Second is that event if i configured Samba server with security = domain, set up domain as the pre-windows 2000 name of the network, and have done the smbpasswd -j RND -r ads.es.efrei.fr (AD DC), authentication is refused from Samba server and a password is asked... Do you know if this last problem could come from the fact that i trust authentication from another realm that the one used by AD ? In fact, i am using Samba 2.2.3-12 from Debian stable, perhaps only 3.0 does support this type of fileserver settings ? Perhaps you could advise me on how to get the server for user's data and profiles roaming storage in such an environment. TIA, Jerome Walter -- -+-- Jérôme Walter - I2 EFREI +- Equipe Système - Efrei Robotique - Jap'Efrei - Erasmus Tutors The World is my country - Nihon no tomodachi desu EFREI System and Networking guide http://perso.efrei.fr/~walter/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] can not join the domain
Hi, I am trying to join my win2000 workstation to my domain. Auto creation of machine account on samba goes fine but I get msg. ''The remote procedure call failed'' What then happends I do have a connection to shares on samba but I amnot in the domain. Pls. help! Greatings, Admir -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] can not join the domain
Hi
whats your smb.conf ?
here is one posted 2 days ago
check passwd and smbpasswd for testpc$
do you have this line
passdb backend = /etc/samba/smbpasswd guest
i found the guest is needed for login to samba pdc
this is related to samba3 beta1
for older versions it looks quite different
# Samba config file created using SWAT
# from 192.168.1.1 (192.168.1.1)
# Date: 2003/06/21 14:41:58
# Global parameters
[global]
workgroup = MIDEARTH
server string = Samba3
interfaces = eth0, lo
bind interfaces only = Yes
server schannel = Yes
passdb backend = /etc/samba/smbpasswd guest
pam password change = Yes
passwd chat = *New*Password* %n\n *Re-enter*new*password* %n\n
*Password*changed*
username map = /etc/samba/smbusers
password level = 8
username level = 8
unix password sync = Yes
log level = 1
syslog = 0
log file = /var/log/samba/%m
smb ports = 139 445
name resolve order = wins bcast hosts
time server = Yes
socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=8192 SO_RCVBUF=8192
printcap name = CUPS
disable spoolss = Yes
add user script = /usr/sbin/useradd -m %u
delete user script = /usr/sbin/userdel -r %u
add group script = /usr/sbin/groupadd %g
delete group script = /usr/sbin/groupadd %g
add user to group script = /usr/sbin/usermod -G %g %u
add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u
shutdown script = /var/lib/samba/scripts/shutdown.sh
abort shutdown script = /sbin/shutdown -c
logon script = scripts\logon.bat
logon path = \\%L\Profiles\%U
logon drive = H:
logon home = \\%L\%U
domain logons = Yes
os level = 35
preferred master = Yes
domain master = Yes
wins support = Yes
ldap ssl = no
utmp = Yes
panic action = export DISPLAY=localhost:0; /usr/bin/X11/xterm -e gdb
/proc/%d/exe %d || /bin/sleep
idmap uid = 15000-2
idmap gid = 15000-2
winbind separator = +
comment = Samba 3.0.0
hosts allow = 127., 192.168.1.
use sendfile = Yes
printing = cups
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
veto oplock files = /*.doc/*.xls/*.mdb/
include = /etc/samba/machine.
[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No
[print$]
comment = Printer Drivers Share
path = /var/lib/samba/drivers
write list = jht, root
printer admin = jht, root
create mask = 0664
directory mask = 0775
[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
admin users = root, jht
guest ok = Yes
nt acl support = No
browseable = No
blocking locks = No
csc policy = disable
locking = No
oplocks = No
level2 oplocks = No
posix locking = No
strict locking = No
share modes = No
[Profiles]
comment = Roaming Profile Share
path = /var/lib/samba/profiles
read only = No
profile acls = Yes
[printers]
comment = All Printers
path = /var/spool/samba
printer admin = root, jht
create mask = 0600
guest ok = Yes
printable = Yes
use client driver = Yes
default devmode = Yes
browseable = No
[media]
comment = Public Stuff
path = /export2
read list = @users
write list = jht
read only = No
blocking locks = No
csc policy = disable
locking = No
oplocks = No
level2 oplocks = No
posix locking = No
strict locking = No
share modes = No
[data]
comment = Data Stuff
path = /export/data
write list = @ntadmin
read only = No
blocking locks = No
csc policy = disable
locking = No
oplocks = No
level2 oplocks = No
posix locking = No
strict locking = No
share modes = No
[cdr]
comment = CDR Production Files
path = /export/CDR
force user = root
read only = No
case sensitive = Yes
Hi,
I am trying to join my win2000 workstation to my domain.
Auto creation of machine account on samba goes fine but I get msg. ''The
remote procedure call failed''
What then happends I do have a connection to shares on samba but I amnot
in
the domain.
Pls. help!
Greatings,
Admir
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
--
+++ GMX - Mail, Messaging more http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Moving Samba installation from one host to another
Dear René, thanks for your answer. I see I should have asked this before I moved Samba. But now I know better for the next time :-) Regards Manfred - Original Message - From: R.Nieuwenhuizen [EMAIL PROTECTED] To: MH - Entwicklung [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, June 23, 2003 10:55 AM Subject: Re: [Samba] Moving Samba installation from one host to another You forgot to to transfer your domain-SID to the new samba-server. This can be done by running rpcclient on the old samba-server and run the lsaquery command. This will output the domain-SID. Next you copy and paste this in to a file called MACHINE.SID on the new server (this file should be placed in the private subdir where secrets.tdb is located) and remove the secrets.tdb file. If samba is restarted the domain-SID (from MACHINE.SID) is imported into the secrets.tdb. At last you should transport the smbpasswd file (located in the private subdir) from the old samba-server to the new samba-server. Things should now be up and running fine... MH - Entwicklung wrote: Hello, last week I experienced some problems when moving a Samba installation from one host to another host. The old system ran Samba 2.2.8 on a SuSE Linux 7.3 The new system is also running Samba 2.2.8 but on Debian Woody The Client Systems are all running Win2K SP1. One is running Win2K SP2. One is running Win98. I moved smbpasswd to the new host. I also made sure that all entries in passwd, group and shadow existed on the new system. Anyway all computers lost the connection to the Domain when switching to the new Samba PDC. I had to remove all hosts from the domain and let them join the domain again in order to get it working again. Also all Windows SIDS associated with the users had changed. Any idea what I've done wrong ? Regards Manfred -- René Nieuwenhuizen Afdeling Informatietechnologie Centraal Planbureau Bezoekadres: Van Stolkweg 14, 2585 JR Den Haag Postadres: Postbus 80510, 2508 GM Den Haag T (070) 3383 342 F (070) 3383 350 I http://www.cpb.nl/nl/general/org/afdelingen/it/ -- Aan dit bericht kunnen geen rechten worden ontleend. Het bericht is alleen bestemd voor de geadresseerde. Indien dit bericht niet voor u is bestemd, verzoeken wij u dit onmiddellijk aan ons te melden en de inhoud van het bericht te vernietigen. This message shall not constitute any obligations. This message is intended solely for the addressee. If you have received this message in error, please inform us immediately and delete its contents. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Roaming Profile XP
On Sun, Jun 22, 2003 at 12:23:14PM +0800, Adrian Chow wrote: Does this only occur when you use Samba as the domain controller? Or does it even occur when you use Windows Server as the domain controller as well for the roaming profile? well, i've only got a samba pdc so i couldn't tell you what the behavior is with a windows server, but i would expect it to be the same since by default things in Local Settings are just that -- local, and do not roam. Another question:- Besides the wallpaper does not roam, is there other things that does not roam? oh sure, anything that get placed into Local Settings doesn't roam. this includes visio's shape gallery database, ie's cache (i believe), etc. Nathan -- nre :wq -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Euro Sign
I can do some euro sign on my linux server echo $LANG indique [EMAIL PROTECTED] but : 1. when I create a folder in Windows, I have: in Windows Linux : 2. when I create a folder in Linux, I have: in Windows : ¤ and in Linux : This is my config file. # Samba config file created using SWAT # from 192.168.2.148 (192.168.2.148) # Date: 2002/08/29 17:37:19 # Global parameters [global] workgroup = BI.COM netbios name = LDAP server string = Serveur LDAP (Samba %v) domain master = no preferred master = no os level = 0 security = domain hosts deny = all encrypt passwords = Yes update encrypted = Yes password server = SATURNE log file = /var/log/samba/log.%m dns proxy = No character set = ISO8859-15 client code page = 850 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 writable = yes guest ok = no wins server = 192.168.2.16 # Force la création des fichier en 660 create mask = 0660 # Force la création des répertoires en 770 directory mask = 0770 [public] guest ok = Yes read only = No force user = ebr force group = ebr path = /home/public -- /° Eric Berthomier (V)_http://troll.west.free.fr http://lesouriciergris.free.fr -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 2.2.8a and printers
I recent upgraded to 2.2.8, which went fine. When I checked smbclient -L firewall, I saw I Lost my printer share. I am using CUPS v1.1.3 for printing. When I went back to 2.2.7a it reappeared. 2 questions: 1 Why did it do this? I ./configured it --enable-cups- --with-pam_(smb) 2 Is there and advantage of upgrading such a small step? Or are there a big enough issues to warrant this action? TIA Kev -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] What is the cause of this
I've been checking my logwatch and I see this all the time. Here is an example of the logwatch email. - samba Begin **Unmatched Entries** smbd/oplock_linux.c:linux_init_kernel_oplocks(287) Failed to setup RT_SIGNAL_LEASE handler : 193 Time(s) -- samba End - ## LogWatch End # G -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
SV: [Samba] Trouble with CUPS/SAMBA - Solved
I solved the problem by using: [global] printing = cups printcap name = lpstat load printers = yes and in [printers]-section: [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = yes writable = no printable = yes create mode = 0700 print command = lpr -P %p -o raw %s -r lpq command = lpstat -o %p lprm command = cancel %p-%j printer admin = @users With great help from: http://www.buberel.org/linux/cups-samba.php Hope it helps someone... /Bo Mellberg -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Bo Mellberg Skickat: den 23 juni 2003 12:35 Till: [EMAIL PROTECTED] Ämne: SV: [Samba] Trouble with CUPS/SAMBA I have read this document. I am trying to get the Simple smb.conf-settings (chapter 7.2.2) to work, but with the said results. libcups.so is compiled into samba. As told earlier, the printer shows up in the shares and accepts print jobs, but it wont print anything. /Bo Mellberg -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Kurt Pfeifle Skickat: den 23 juni 2003 11:53 Till: [EMAIL PROTECTED] Ämne: [Samba] Trouble with CUPS/SAMBA [Samba] Trouble with CUPS/SAMBA Bo Mellberg bo.mellberg at jolife.se Mon Jun 23 10:34:12 GMT 2003 Hi all, I'm new to this list, as to SAMBA, and I'm struggling with getting a printer to work as a shared printer in a Windows network with a redhat 9 server. The printer is a HP 4550 Color LaserJet, installed with CUPS to the server, via JetDirect (port 9100). It prints testpages fine from the Linux-server. It was installed with the install-printer-utility in RedHat9. I have then shared the printer via samba, to be able to access it from the Windows machines (2000, XP). It shows up fine, and accept print jobs, but nothing happens after the jobs has been processed, and no errors are being generated. Please refer to this document (PDF or HTML) http://www.linuxprinting.org/kpfeifle/SambaPrintHOWTO/ and see if it answers your questions. I would be grateful for any help. /Bo Mellberg Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Issues
Upon connecting mine Linux box unto their Windows 2k domain... My lappy linux box attempts to be a Domain Master, as well as creating a nifty thing in network neighborhood that's called Workgroup With just my lappy in it.. Oh lord, what prevents this sort of thing, as well as stopping it from being a Domain Master, even when domain master = no -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] german umlaut and samba 3
On Mon, 2003-06-16 at 09:24, Lammersdorf, Lorenz wrote: hi all, we want to use samba to connect a windows machine and a linux server, the linux machine should read the windows-filesystem to backup it. in samba 2.xx we wasn't able to teach samba the german umlauts or filenames containing a blank. we tried the character substitution in smb.conf and of course we called smbmount with iocharset=iso8859-1,codepage=cp850, but unforunatly it doesn't work. are there any changes in samba 3 that may help us solving this problem? good question :) i have got the following: samba 3.0beta1 running as a pdc with underlying fs ext3: umlauts work as expected samba 3.0beta1 running with security=server and underlying fs is reiserfs: umlauts don't work at all, even worse the filenames are cut of where a umlaut appears. so for example a file named Tolle Übung would show up as Tolle , which results in a file not found error, because the clients try to access the wrong filename. i'll try to find out the differences in these installations and post the results. anybody here who could enligthen us on this issue ?!? cya Holger Brueckner net-labs Systemhaus GmbH -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How does @group works after all?
Hi everyone. On a Samba 2.2.8a I have a share: [S] path = /sdrive public = no read only = yes write list = @special browsable = no I also have special:x:528:jane,jim,james in /etc/group; yet none of those users can write a file in [S]. If I replace write list = @special with write list = jane jim james it works. What am I obviously missing? :-o -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Ghost Create account: procedure number out of range in Samba
Hello, I would like to clone a Windows XP workstation that's part of a Samba domain using Norton Ghost. In Ghost you need to create an account in the domain to be able to add your domain to the list of supported domains by the Norton Ghost console. When I try to add such an account, I get this error message: Unable to add DOMAIN to the list of supported domains, The procedure number is out of range. Error code: 2147944145. I use samba 2.2.8a and LDAP for authentication. There's no problem with this authentication as everything else (logging in, adding machines to the domain,...) works fine. Does anybody have an idea? Thanks, Werner Maes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbclient always returns 0 on exit
hey i am trying to write a simple shell script to push some files around the network, but i can't seem to catch any errors in smbclient, it returns a 0 even if file transfer fails, host can't be found, whatever... does anyone know a way around this? please help. richard. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Ghost Create account: procedure number out of range inSamba
I had that problem. I ended up making a regular administrator account for Ghost and then telling the Ghost service to run under that account. Ghost tries to set up it's own limited account on an NT domain with only the right to add and remove machines to and from the domain, which (to my limited knowledge, please correct me if I am wrong) Samba 2.x does not allow. Once I did that, it worked fine. My best, Dan (former employee of Binary Research) Gapinski - Original Message - From: werner maes [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, June 23, 2003 10:07 AM Subject: [Samba] Ghost Create account: procedure number out of range in Samba Hello, I would like to clone a Windows XP workstation that's part of a Samba domain using Norton Ghost. In Ghost you need to create an account in the domain to be able to add your domain to the list of supported domains by the Norton Ghost console. When I try to add such an account, I get this error message: Unable to add DOMAIN to the list of supported domains, The procedure number is out of range. Error code: 2147944145. I use samba 2.2.8a and LDAP for authentication. There's no problem with this authentication as everything else (logging in, adding machines to the domain,...) works fine. Does anybody have an idea? Thanks, Werner Maes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Doubts about Winbindd
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Message: 35 Date: Sat, 21 Jun 2003 15:42:41 -0300 From: Roberto Samarone Araujo (RSA) [EMAIL PROTECTED] Subject: [Samba] Doubts about Winbindd To: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=iso-8859-1 Hi, I'm trying to set up a PDC using Samba on a Linux server. I need to the linux clients, using KDE desktop, log in the PDC using the KDE login box. I think I could use the 'winbindd' to do what I need but, I still have some questions: No!!! Don't do this, you lose some features which are currently available for other network authentication setups for unix. 1. Do I need to set up winbindd on each Linux client to log on the Linux PDC ? Yes, but you won't (unless you run samba3 cvs on all the clients) be able to use NFS (or anything else that relies on uid's being consistent) between clients. I would not suggest trying winbind against a samba PDC unless you have a lot of samba experience ... 2. Do I need to set up winbindd on the Linux PDC server too ? No. 3. Using winbindd could I have only a password file on Linux PDC server where the Linux clients will autenticate ? Yes, but there are many other ways of getting a single authentication source (either samba + pam_smb, or ldap, or nis etc). 4. Could Win2000/XP clients be autenticate to a Linux PDC server without I need to add the users on the Win2000/XP clients ? How ? Yes, with any samba setup supporting domain logins, just need to join the machines to the domain. But, winbind will only work against samba3, and using winbind from samba-2.2.x will mean that you will get random uid's for each user, so anything that uses uid's will not work between machines. A much better option is to implement LDAP authentication on your linux boxes, in which case you can put your samba passwords in LDAP also, in which case you can have a PDC also. Using LDAP means: - -uid's will be consistent across all your linux machines (so you can use NFS) - -you don't need to have machine accounts for desktops - -you can use things like automount maps stored in LDAP, so you have to do absolutely no client-side setup or changes for network file access (you change it in ldap, and the next time the mount point is access after being idle for more than the idle timeout it will mount the new one). - -you can route email via ldap - -you can have a shared address book accessible by any mail client (most support ldap) - -replication of your user database (aka like PDC/BDC relationships on NT) - -independant settigs for the user's shell (with winbind all use the same shell) - -being able to use disconnected authentication For information on setting up the unix side of LDAP authentication, see: http://www.mandrakesecure.net/en/docs/ldap-auth2.php For adding Windows authentication, see: http://www.mandrakesecure.net/en/docs/samba-pdc.php (but don't implement until you at least read the next one) For implementing disconnected authentication, ldap slaves, BDCs etc, see: http://www.mandrakesecure.net/en/docs/samba-ldap-advanced.php (also has links to documents on how to setup the windows clients etc) We basically have the kind of setup documented by the last document, with a few LDAP slave's (including BDC, mail server) and so far one laptop with ldap slave for disconnected authentication. We just added automount maps to our LDAP server today, and it really is very impressive! Regards, Buchan - -- |--Another happy Mandrake Club member--| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x202 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE+9zwPrJK6UGDSBKcRAlDfAKCB+vmBa7KJ9a273Umvo4GTpAaRCACfRpjp I9K7XBGVui8Ff2vuyKG11ZU= =MrIZ -END PGP SIGNATURE- ** Please click on http://www.cae.co.za/disclaimer.htm to read our e-mail disclaimer or send an e-mail to [EMAIL PROTECTED] for a copy. ** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Multiple domains in the logon window
On Monday 23 June 2003 11:01, Alexandru Molodoi wrote: I wish that a user could be able to choose to which domain he should log on to (and I think that is the normal way). Why do you think that is the normal way? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Multiple domains in the logon window
On Monday 23 June 2003 11:01, Alexandru Molodoi wrote: I wish that a user could be able to choose to which domain he should log on to (and I think that is the normal way). Why do you think that is the normal way? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba youre right choosing between multiple domains is normal to winnt clients at logon regards -- +++ GMX - Mail, Messaging more http://www.gmx.net +++ Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] roaming profiles on beta samba3 as pdc
now roaming works on samba3 pdc beta
with this conf on suse 8.2
[global]
netbios name = linux
large readwrite = yes
dos charset = ISO8859-15
unix charset = CP850
display charset = CP850
workgroup = LINUX
interfaces = lo, eth2
bind interfaces only = Yes
server schannel = Yes
passdb backend = smbpasswd:/etc/samba/smbpasswd, guest
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *password* %n\n *password* %n\n *changed*
username map = /etc/samba/smbusers
unix password sync = Yes
log level = 2
syslog = 0
log file = /var/log/samba/%m
name resolve order = wins bcast hosts
time server = Yes
keepalive = 255
socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=8192
SO_RCVBUF=8192
load printers = No
printcap name = cups
add user script = /usr/sbin/useradd -m %u
delete user script = /usr/sbin/userdel -r %u
add group script = /usr/sbin/groupadd -r %g
delete group script = /usr/sbin/groupdel %g
add user to group script = /usr/bin/gpasswd -a %u %g
delete user from group script = /usr/bin/gpasswd -d %u %g
set primary group script = /usr/sbin/usermod -g '%g' '%u'
add machine script = /usr/sbin/useradd -g machines -c Machine -d
/dev/null -s /bin/false %u
shutdown script = /sbin/shutdown
abort shutdown script = /sbin/shutdown -c
unix password sync = Yes
log level = 2
syslog = 0
log file = /var/log/samba/%m
name resolve order = wins bcast hosts
time server = Yes
keepalive = 255
socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=8192
SO_RCVBUF=8192
load printers = No
printcap name = cups
add user script = /usr/sbin/useradd -m %u
delete user script = /usr/sbin/userdel -r %u
add group script = /usr/sbin/groupadd -r %g
delete group script = /usr/sbin/groupdel %g
add user to group script = /usr/bin/gpasswd -a %u %g
delete user from group script = /usr/bin/gpasswd -d %u %g
set primary group script = /usr/sbin/usermod -g '%g' '%u'
add machine script = /usr/sbin/useradd -g machines -c Machine -d
/dev/null -s /bin/false %u
shutdown script = /sbin/shutdown
abort shutdown script = /sbin/shutdown -c
logon script = login.bat
logon path = \\linux\profiles\%u
logon drive = Z:
logon home = \\linux\%u
domain logons = Yes
os level = 255
preferred master = Yes
domain master = Yes
wins proxy = Yes
wins support = Yes
ldap ssl = no
add share command =
/usr/share/doc/packages/samba3/examples/misc/modify_samba_config.pl
change share command =
/usr/share/doc/packages/samba3/examples/misc/modify_samba_config.pl
delete share command =
/usr/share/doc/packages/samba3/examples/misc/modify_samba_config.pl
utmp = Yes
host msdfs = Yes
idmap uid = 15000-2
idmap gid = 15000-2
admin users = root
hosts allow = 127., 10.10.30.
use sendfile = Yes
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
# veto oplock files = /*.doc/*.xls/*.mdb/
[homes]
comment = Home Directories
read only = No
create mask = 0640
directory mask = 0750
browseable = No
[netlogon]
comment = Netlogon Share
path = /var/lib/samba/netlogon
write list = root
guest ok = Yes
nt acl support = No
browseable = No
blocking locks = No
csc policy = disable
locking = No
oplocks = No
level2 oplocks = No
posix locking = No
strict locking = No
share modes = No
[profiles]
comment = Roaming Profile Share
path = /var/lib/samba/profiles
read only = No
create mask = 0600
directory mask = 0700
# profile acls = Yes
nt acl support = no
blocking locks = No
csc policy = disable
locking = No
oplocks = No
level2 oplocks = No
Hi @ll,
can someone enlight me ,
i could log in the domain and profiles are created well on samba, but
after
second login, win client says
i cannot copy //linux/Profiles/testuser to c:\Dokument ...
so its starts with local copy
after login i am able to browse the Profiles share on samba but if i wanna
open a files the client makes a explorer failure , it seems to me that
this is
a permission problem but chmod -R 0777 /var/lib/samba/profiles
does not have any succes to the problem
mapping of home Z works very well, but if i store the the profile to the
home share if got same problem
i found no descript of profile acls = Yes, what is that?
here is the smb.conf part which should be related to the
[Samba] Trouble with CUPS/SAMBA
Bo Mellberg bo.mellberg at jolife.se Mon Jun 23 10:34:12 GMT 2003 Hi all, [] I have then shared the printer via samba, to be able to access it from the Windows machines (2000, XP). It shows up fine, and accept print jobs, What kind of driver are you using on the Windows side? Are you aware of the various methods to install drivers on Windows clients to be used with Samba/CUPS printing? but nothing happens after the jobs has been processed, and no errors are being generated. I would be grateful for any help. [] [printers] comment = All Printers path = /var/spool/samba Does this directory exist? public = yes guest ok = yes printable = yes printer admin = root, @ntadmins [] cups error_log: E [23/Jun/2003:09:51:31 +0200] Scheduler shutting down due to SIGTERM. E [23/Jun/2003:09:51:31 +0200] Unknown directive AuthType on line 729. What is written into line 729 of cupsd.conf?? I [23/Jun/2003:09:51:31 +0200] Sending browsing info to :631 I [23/Jun/2003:09:51:31 +0200] Listening to 0:631 I [23/Jun/2003:09:51:31 +0200] Configured for up to 100 clients. I [23/Jun/2003:09:51:31 +0200] Allowing up to 10 client connections per host. I [23/Jun/2003:09:51:31 +0200] LoadPPDs: Read /etc/cups/ppds.dat, 13 PPDs... I [23/Jun/2003:09:51:31 +0200] LoadPPDs: No new or changed PPDs... I [23/Jun/2003:09:51:47 +0200] Job 30 queued on 'hp4550' by 'bosse'. I [23/Jun/2003:09:51:47 +0200] Started filter /usr/lib/cups/filter/cupsomatic (PID 32466) for job 30. You should never use cupsomatic for a real PostScript printer. Who adviced you to do so? The new Samba Printing HOWTO is very specific about real PostScript printers: _Use_ _the_ _vendor_ _provided_ _PPDs_ !! I [23/Jun/2003:09:51:47 +0200] Started backend /usr/lib/cups/backend/socket (PID 32467) for job 30. I [23/Jun/2003:10:02:06 +0200] Job 31 queued on 'hp4550' by 'bosse'. I [23/Jun/2003:10:02:06 +0200] Started filter /usr/lib/cups/filter/cupsomatic (PID 335) for job 31. I [23/Jun/2003:10:02:06 +0200] Started backend /usr/lib/cups/backend/socket (PID 336) for job 31. If you are still having trouble, use LogLevel debug. Some advice about this is also at http://www.cups.org/cups-help.html Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Winbind troubles...
I'm having trouble getting winbind to work. I have a w2k network and Redhat 9 with samba 2.2.7a. I'm trying to get the users to authenticate on the w2k server to connect to the samba share. The problem I'm having is with winbind. When I do a wbinfo -u or wbinfo -g I get this returned: 0xc022. I've followed everything I could find about unified logons between windows and Unix using winbind. I just cant get it to work. I joined the domain successfully. Does anyone have suggestions on what to do? Bob Carlucci Telaurus Communications LLC [EMAIL PROTECTED] (973) 889-8990 ext. 203 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] delete user script is not working from usrmgr
Hi @ll, now i am able to login samba 3 beta pdc, have homes mapped with read and write permission on the home ( this troubled too ) now i tested funktions from usrmgr ( old nt prog for create user and groups ) i can create user on the fly, i can create groups on the fly i can delete groups on the fly add and delete users to groups but if i want to dlete users with delete user script = /usr/sbin/userdel -r %u log shows me [2003/06/23 20:48:10, 0] rpc_server/srv_samr_nt.c:_samr_unknown_2d(4251) _samr_unknown_2d: Not yet implemented. what does this mean i am not a programmer at all, but this line works from command line very good, and additional it should only delete the users entry in smbpasswd would be great if i will get a propper answer to this these funktions seems to me the basic needs to make things easier for win users and admin to manage samba if its once set up the samba is runnig on suse 8.2 with their beta cvs version from samba3 dated 21 jul regards -- +++ GMX - Mail, Messaging more http://www.gmx.net +++ Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Trouble with CUPS/SAMBA - Solved
SV: [Samba] Trouble with CUPS/SAMBA - Solved Bo Mellberg bo.mellberg at jolife.se Mon Jun 23 18:21:05 GMT 2003 I solved the problem by using: Which versions of CUPS and Samba are you using? And are you *really* still using the cupsomatic-PPD from Linuxprinting.org for that *PostScript*-printer?? [global] printing = cups printcap name = lpstat load printers = yes and in [printers]-section: [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = yes writable = no printable = yes create mode = 0700 print command = lpr -P %p -o raw %s -r lpq command = lpstat -o %p lprm command = cancel %p-%j printer admin = @users With great help from: http://www.buberel.org/linux/cups-samba.php Hope it helps someone... I fear it does more confuse than help -- unless your version info is forthcoming Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SAMBA 3.0 joining Domain fails with SuSE rpm's
Hello,
I'm not sure if it's a bug - or I'm just too stupid..!?
Downloaded the Samba beta-code from ftp.suse.com/gd - rpm's for SuSE 8.2 (03/06/22).
Installed all packages with no problems - samba works well, but integration in a W2K
Domain fails. Kinit is successful but joining a domain brings up the following errors.
nas-01:~ # net ads join
[2003/06/23 21:44:41, 1] libsmb/clikrb5.c:ads_krb5_mk_req(274)
krb5_get_credentials failed for [EMAIL PROTECTED] (Unknown error 2529638927) root
password:
(even there is a valid ticket...)
an then, after entering the pass again
[2003/06/23 21:44:45, 1] libsmb/clikrb5.c:ads_krb5_mk_req(267)
krb5_cc_get_principal failed (No such file or directory) [2003/06/23 21:44:45, 0]
libads/kerberos.c:ads_kinit_password(133)
kerberos_kinit_password [EMAIL PROTECTED] failed: Unknown error 2529638918
[2003/06/23 21:44:45, 1] utils/net_ads.c:ads_startup(176)
ads_connect: Server is unavailable
nas-01:~ #
Smb.conf
[global]
realm = INTRA.ROBERT-HOME.DE
ads server = 192.168.1.3
security = ads
encrypt passwords = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
workgroup = INTRA
winbind separator = %
idmap uid = 1-2
idmap gid = 1-2
wins server = 192.168.1.3
winbind use default domain = yes
[test]
path = /disk/data
nt acl support = yes
public = yes
writable = yes
security mask = 0777
force security mode = 0
directory security mask = 0777
force directory security mode = 0
krb5.conf:
[logging]
default = FILE:/var/log/krb5kdc.log
[libdefaults]
default_realm = INTRA.ROBERT-HOME.DE
clockskew = 300
v4_instance_resolve = false
# Set this to false to disable MIT krb5 compatibility
# in GSSAPI get_mic/verify_mic, and become compatible
# with older Heimdal releases instead.
gss_mit_compat = true
[realms]
INTRA.ROBERT-HOME.DE = {
kdc = 192.168.1.3
default_domain = intra.robert-home.de
}
[domain_realm]
.intra.robert-home.de = INTRA.ROBERT-HOME.DE
intra.robert-home.de = INTRA.ROBERT-HOME.DE
List of installed packages (all SuSE 8.2):
sash-3.6-37
yast2-trans-de-2.7.14-0
suse-release-8.2-7
providers-2003.2.13-12
aaa_skel-2003.3.15-0
terminfo-5.3-28
slang-1.4.8-12
filesystem-2003.2.27-17
glibc-2.3.2-6
gdbm-1.8.3-33
libxcrypt-1.4-23
ncurses-5.3-28
usbutils-0.11-43
utempter-0.5.2-190
mdadm-1.1.0-5
net-tools-1.60-336
netcat-1.10-660
iptables-1.2.7a-174
cpp-3.3-23
bzip2-1.0.2-103
liby2util-2.7.16-0
ash-0.2-692
popt-1.6.4-31
zlib-1.1.4-105
lsof-4.66-11
mktemp-1.5-531
gpart-0.1h-276
reiserfs-3.6.4-12
libgcc-3.3-23
eject-2.0.13-26
file-3.37-208
libstdc++-3.3-23
dialog-0.9b-26
readline-4.3-105
lukemftp-1.5-379
db-4.0.14-249
bash-2.05b-105
xfsprogs-2.3.9-12
pciutils-2.1.11-28
iputils-ss020927-45
insserv-0.99.7-23
iproute2-2.4.7-473
less-378-26
pcre-3.9-180
info-4.5-18
dhcpcd-1.3.22pl4-27
src_vipa-1.0.1-74
initviocons-0.4-93
timezone-2.3.2-6
procmail-3.15.1-373
modutils-2.4.22-33
cracklib-2.7-768
pam-0.77-38
gzip-1.3-376
grep-2.5.1-149
libacl-2.2.6-8
cpio-2.5-106
e2fsprogs-1.28-79
libattr-2.4.0-14
m4-1.4o-362
sed-3.02.80-102
tar-1.13.25-97
recode-3.6-289
bc-1.06-537
diffutils-2.8.1-99
ed-0.2-661
fillup-1.24-1
findutils-4.1.7-533
gawk-3.1.1-220
pam-modules-2003.3.11-1
parted-1.6.5-9
jfsutils-1.1.1-25
coreutils-4.5.8-11
acl-2.2.6-8
grub-0.93-23
isapnp-1.26-284
yast2-theme-SuSELinux-2.7.1-0
hwinfo-6.19-0
perl-5.8.0-104
gpm-1.20.1-102
kbd-1.06-202
libxml2-2.5.3-12
devs-2003.3.14-1
openssh-3.5p1-68
acpid-1.0.1-70
tcsh-6.12.00-134
raidtools-1.00.3-24
logrotate-3.6.6-21
lvm-1.0.6-34
sysconfig-0.23.27-11
syslogd-1.4.1-308
sysvinit-2.82-253
fbset-2.1-576
hotplug-2002_08_26-22
gpg-1.2.2rc1-24
util-linux-2.11z-25
groff-1.17.2-500
aaa_base-2003.3.18-0
vim-6.1-298
lilo-22.3.4-43
ps-2003.3.5-10
permissions-2003.3.10-4
yast2-tune-2.7.7-0
sitar-0.8.6-23
heimdal-lib-0.4e-290
man-2.3.19deb4.0-522
curl-7.10.2-35
netcfg-2003.3.11-1
w3m-0.3.2.2-53
suse-build-key-1.0-286
rsh-0.17-350
cyrus-sasl2-2.1.12-31
siga-8.105-8
telnet-1.0-357
portmap-5beta-511
yast2-transfer-2.7.0-46
rpm-3.0.6-478
finger-1.1-163
yast2-packagemanager-2.7.36-0
openldap2-client-2.1.12-44
shadow-4.0.3-53
yast2-core-2.7.34-6
yast2-ncurses-2.7.13-7
at-3.1.8-671
postfix-2.0.6-8
yast2-pam-2.6.5-228
autoyast2-installation-2.7.19-0
yast2-2.7.30-1
yast2-security-2.7.8-20
yast2-support-2.7.4-4
mailx-10.3-31
yast2-storage-2.7.19-0
attr-2.4.0-14
yast2-xml-2.7.0-53
yast2-country-2.7.14-0
yast2-mouse-2.7.4-27
yast2-online-update-2.7.10-8
yast2-packager-2.7.33-1
cron-3.0.1-701
cups-libs-1.1.18-77
yast2-phone-services-2.7.6-1
yast2-runlevel-2.7.3-6
yast2-users-2.7.20-15
yast2-kerberos-client-2.7.4-0
yast2-network-2.7.35-6
SuSEfirewall2-3.1-95
yast2-inetd-2.7.10-3
yast2-nfs-client-2.7.3-20
yast2-nfs-server-2.7.4-20
yast2-sysconfig-2.7.12-8
yast2-installation-2.7.43-1
yast2-backup-2.7.13-6
yast2-firewall-2.7.7-14
yast2-ldap-client-2.7.6-7
[Samba] Re: Hi need some understanding
Gémes Géza wrote: RJPvT írta: Hi guys, (sorry for my typos, i'm dutch :-) ) First I would like to congratulate you all for a job wel done, the samba 3.0 looks and works great. I have got a question neverteless, I want to use the user manager for winnt for my users and group admin. but i also want to stay off the linux accounts since i don't want everyone to be able to login to various programs i am using the tdbsam backend with the idmap, but i cannot create users with the user manager, nor can i create groups. i know i will have to user net group and pdbedit to make these but i cannot figure out the right syntaxes with the add user, add group scripts in smb.conf also I cannot use more then 1 group per user, and would like te be able to change this. Could you give me some pointers, or possible the commands for add user, add group, delete user from, add user to, etc. ? this is my current smb.conf : [global] workgroup = RJPCNET netbios name = RJPC-srv1 server string = Samba3 passdb backend = tdbsam, guest password level = 8 username level = 8 syslog = 0 log file = /var/log/samba/%m name resolve order = wins bcast hosts time server = Yes socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=8192 O_RCVBUF=8192 disable spoolss = Yes domain logons = Yes os level = 35 preferred master = Yes domain master = Yes wins support = Yes utmp = Yes idmap uid = 15000-2 idmap gid = 15000-2 comment = Samba 3.0.0 printing = cups [homes] comment = Home Directories valid users = %S read only = No browseable = No [netlogon] comment = Network Logon Service path = /var/lib/samba/netlogon admin users = root guest ok = Yes nt acl support = No browseable = No blocking locks = No csc policy = disable locking = No oplocks = No level2 oplocks = No posix locking = No strict locking = No share modes = No [simple] comment = simple share path = /tmp read only = No I would suggest you to look at [EMAIL PROTECTED] 's smb.conf sent to the list two days ago , you will find it attached to this mail Good Luck Geza Gemes [..] unix password sync = Yes log level = 1 syslog = 0 log file = /var/log/samba/%m smb ports = 139 445 name resolve order = wins bcast hosts time server = Yes socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=8192 SO_RCVBUF=8192 printcap name = CUPS disable spoolss = Yes add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupadd %g add user to group script = /usr/sbin/usermod -G %g %u add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u shutdown script = /var/lib/samba/scripts/shutdown.sh abort shutdown script = /sbin/shutdown -c logon script = scripts\logon.bat [...] I already used that one to create mine, but as I understand the useradd/userdel command, this creates linux accounts that samba creates, and that is exactly what I don't want to do I want users to be created only for samba, without a linux account. But thanks for the thinking. Greetz, Richard -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Questions about w2003 server
Greetings and Thank You in advance to anyone who responds to this message. As the saying goes long time listener first time caller. Our campus is switching(might I add not with our blessing) to a windows 2003 backend. Since we at the library prefer to stay Linux/FreeBsd we are searching for information about joining a Samba Server to a 2003 environment. Has anyone been successful in integrating the two? If so could you offer any advice, pointers, roadblocks, showstoppers etc. Thanks Johan Dowdy Cabrillo College Library -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Multiple domains in the logon window
Think about mobile users (with laptops) that logon in different locations to different domains. Do you think it's normal that they should change the domain they belong to everytime they need to logon, beeing forced to do a restart at the same time?!?!? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Smith Sent: 23 iunie 2003 20:53 To: [EMAIL PROTECTED] Subject: Re: [Samba] Multiple domains in the logon window On Monday 23 June 2003 11:01, Alexandru Molodoi wrote: I wish that a user could be able to choose to which domain he should log on to (and I think that is the normal way). Why do you think that is the normal way? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Ghost Create account: procedure number out of range inSamba
Hello Dan, Thanks for yor reply ! But what exactly do you mean with making a regular administrator account for Ghost? Is it an entry in /etc/passwd or smbpasswd for administrator? Could you give more specific details? Kind regards, Werner Maes Dan Gapinski wrote: I had that problem. I ended up making a regular administrator account for Ghost and then telling the Ghost service to run under that account. Ghost tries to set up it's own limited account on an NT domain with only the right to add and remove machines to and from the domain, which (to my limited knowledge, please correct me if I am wrong) Samba 2.x does not allow. Once I did that, it worked fine. My best, Dan (former employee of Binary Research) Gapinski - Original Message - From: werner maes [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, June 23, 2003 10:07 AM Subject: [Samba] Ghost Create account: procedure number out of range in Samba Hello, I would like to clone a Windows XP workstation that's part of a Samba domain using Norton Ghost. In Ghost you need to create an account in the domain to be able to add your domain to the list of supported domains by the Norton Ghost console. When I try to add such an account, I get this error message: Unable to add DOMAIN to the list of supported domains, The procedure number is out of range. Error code: 2147944145. I use samba 2.2.8a and LDAP for authentication. There's no problem with this authentication as everything else (logging in, adding machines to the domain,...) works fine. Does anybody have an idea? Thanks, Werner Maes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Trouble with CUPS/SAMBA - Solved
Yeah, it really helps me that you come after I managed to get ANYTHING out of that printer, and say that all I do is wrong. The versions are the the one installed by RedHat Linux 9 (shrike). I installed the printer using the redhat utility, and I configured samba using, first the redhat utility, and then fiddling with the smb.conf. Any drivers used by the Windows clients are their own (postscript). Dont ask me how cupsomatic got in there, 'cause I dont know. Until you can come up with a better idea of installing the printer, I'll manage with this one, thank you very much. And just how is getting this to work properly confusing to others? /Bo -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kurt Pfeifle Sent: den 23 juni 2003 21:44 To: [EMAIL PROTECTED] Subject: [Samba] Trouble with CUPS/SAMBA - Solved SV: [Samba] Trouble with CUPS/SAMBA - Solved Bo Mellberg bo.mellberg at jolife.se Mon Jun 23 18:21:05 GMT 2003 I solved the problem by using: Which versions of CUPS and Samba are you using? And are you *really* still using the cupsomatic-PPD from Linuxprinting.org for that *PostScript*-printer?? [global] printing = cups printcap name = lpstat load printers = yes and in [printers]-section: [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = yes writable = no printable = yes create mode = 0700 print command = lpr -P %p -o raw %s -r lpq command = lpstat -o %p lprm command = cancel %p-%j printer admin = @users With great help from: http://www.buberel.org/linux/cups-samba.php Hope it helps someone... I fear it does more confuse than help -- unless your version info is forthcoming Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Trouble with CUPS/SAMBA
On Mon, 2003-06-23 at 04:34, Bo Mellberg wrote: ;[fredsprn] ; comment = Fred's Printer ; valid users = fred ; path = /home/fred ; printer = freds_printer ; public = no ; writable = no ; printable = yes you should'nt need this ... the printers will automatically get loaded from the printcap or cups api... ;[fredsdir] ; comment = Fred's Service ; path = /usr/somewhere/private ; valid users = fred ; public = no ; writable = yes ; printable = no ;[pchome] ; comment = PC Directories ; path = /usr/local/pc/%m ; public = no ; writable = yes ;[public] ; path = /usr/somewhere/else/public ; public = yes ; only guest = yes ; writable = yes ; printable = no ;[myshare] ; comment = Mary's and Fred's stuff ; path = /usr/somewhere/shared ; valid users = mary fred ; public = no ; writable = yes ; printable = no ; create mask = 0765 [jolife shared] comment = Shared Jolife documents path = /home/jolife/ writeable = yes guest ok = yes do you really want all these? the homes share does it automatically... [bosse] [lennart] [martin] [peter] [semmy] [steven] cups error_log: E [23/Jun/2003:09:51:31 +0200] Scheduler shutting down due to SIGTERM. E [23/Jun/2003:09:51:31 +0200] Unknown directive AuthType on line 729. your config file for cups is bad at line 729... [23/Jun/2003:09:51:47 +0200] Job 30 queued on 'hp4550' by 'bosse'. I [23/Jun/2003:09:51:47 +0200] Started filter /usr/lib/cups/filter/cupsomatic (PID 32466) \ for job 30. I [23/Jun/2003:09:51:47 +0200] Started backend /usr/lib/cups/backend/socket (PID 32467) fo\ r job 30. I [23/Jun/2003:10:02:06 +0200] Job 31 queued on 'hp4550' by 'bosse'. I [23/Jun/2003:10:02:06 +0200] Started filter /usr/lib/cups/filter/cupsomatic (PID 335) fo\ r job 31. I [23/Jun/2003:10:02:06 +0200] Started backend /usr/lib/cups/backend/socket (PID 336) for \ job 31. these lines look like your job has made it to cups and is failing in there... so you don't need to mess with your samba configuration. if this doesn't work - take it to the cups lists... one problem you may have is that the windows pcs are sending jobs that are ready for printing with no ripping... you could try setting up your printer in cups as a raw printer instead of pcl5 or whatever you set it up as. best wishes! brad -- Bradley W. Langhorst [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Ghost Create account: procedure number out of rangeinSamba
Yes - sorry. I made a regular account for Ghost (which you could make with adduser or useradd or handcoding the passwd file) and added it to a group (in the groups file) that I called admin. In smb.conf, I added a line that went like this: domain admin group = @admin So that worked like a charm. Hope that helps, Dan - Original Message - From: werner maes [EMAIL PROTECTED] To: Dan Gapinski [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, June 23, 2003 2:21 PM Subject: Re: [Samba] Ghost Create account: procedure number out of range inSamba Hello Dan, Thanks for yor reply ! But what exactly do you mean with making a regular administrator account for Ghost? Is it an entry in /etc/passwd or smbpasswd for administrator? Could you give more specific details? Kind regards, Werner Maes Dan Gapinski wrote: I had that problem. I ended up making a regular administrator account for Ghost and then telling the Ghost service to run under that account. Ghost tries to set up it's own limited account on an NT domain with only the right to add and remove machines to and from the domain, which (to my limited knowledge, please correct me if I am wrong) Samba 2.x does not allow. Once I did that, it worked fine. My best, Dan (former employee of Binary Research) Gapinski - Original Message - From: werner maes [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, June 23, 2003 10:07 AM Subject: [Samba] Ghost Create account: procedure number out of range in Samba Hello, I would like to clone a Windows XP workstation that's part of a Samba domain using Norton Ghost. In Ghost you need to create an account in the domain to be able to add your domain to the list of supported domains by the Norton Ghost console. When I try to add such an account, I get this error message: Unable to add DOMAIN to the list of supported domains, The procedure number is out of range. Error code: 2147944145. I use samba 2.2.8a and LDAP for authentication. There's no problem with this authentication as everything else (logging in, adding machines to the domain,...) works fine. Does anybody have an idea? Thanks, Werner Maes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Authentication from W2K PDC..Samba 3.0beta
Hello everyone, Can I use Ldap to authenticate against our W2K PDC? I have winbind working for Samba 2.2.8a - but the boss wants me to see about Ldap. If this is possible could you provide a starting point for me? I can use getent group to get a list of domain groups after I adjusted the /etc/ldap.conf By default Samba found our State Ldap server upon installation - I work for the State of Alaska, USA. TIA, Tim -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
All, I'm getting the following message in my Win2K server logs.
192.168.0.8 is a samba server.
Linux kernel: 2.4.17
Samba V2.2.8a
security = domain
Event Type: Error
Event Source: Srv
Event Category: None
Event ID: 2006
Date: 6/23/2003
Time: 1:03:52 PM
User: N/A
Computer: LEXICA
Description:
The server received an incorrectly formatted request from \\192.168.0.8.
Data:
: 00 00 34 00 02 00 7c 00 ..4...|.
0008: 00 00 00 00 d6 07 00 c0 Ö..À
0010: 00 00 00 00 01 20 98 c0 . ?À
0018: 00 00 00 00 00 00 00 00
0020: 00 00 00 00 00 00 00 00
0028: b3 06 00 00 ff 53 4d 42 ³...ÿSMB
0030: 25 00 00 00 00 08 01 c0 %..À
0038: 00 00 00 00 00 00 00 00
0040: 00 00 00 00 05 08 08 7b ...{
0048: 00 10 01 00 10 00 00 48 ...H
0050: 00 00 00 48 00 00 00 00 ...H
0058: 00 00 00 00
A search for The server received an incorrectly formatted request from on technet
produced the following single hit (I know - a single hit on technet?), but it seems
only moderately relevant.
http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B142617
Any ideas on this one?
please reply to me and the list, as I'm currently not subscribing.
Thanks,
--
Christopher Barry
Manager of Information Systems
InfiniCon Systems
http://www.infiniconsys.com
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] can not find domain name
Ok ppl. How do I solve this problem? I am trying to ad a win2000 pro machine to samba server 3.0.0.1beta that is configured as an PDC. Now I go to my pc, network id. I fill in all the nesesery data in but I get msg. : The Domain name BLABLA is either invalid or does not exist. I am new new in linux but I realy don't think this is samba configuration problem. I simply overlooked something. Do you need to have a dns or something like that in order to be able to use samba? Pls. Help? Greetings, Admir -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Authentication from W2K PDC..Samba 3.0beta
On Mon, Jun 23, 2003 at 02:19:06PM -0800, Tim Jordan, Network Services wrote: Hello everyone, Can I use Ldap to authenticate against our W2K PDC? I have winbind working for Samba 2.2.8a - but the boss wants me to see about Ldap. In a word no. But there is still some means to authenticate to the W2k DC (i assume this is Active Directory) and to use LDAP to store user data. Active Directory is mainly based on Kerberos authentication system plus LDAP for config and user settings storage, the whole glued with proprietary extensions. You could authenticate to the W2k DC using Kerberos (and should so go and look for it on the microsoft website), and then use pseudo-LDAP from w2k to get informations, using for exemple credentials obtained from w2k. w2k LDAP does not store passwords as in nis settings of openldap for exemple, so you cannot authenticate against it. You should look for the following terms, if you want to get a complete solution : - Active Directory - Microsoft Interoperability web page - MIT Kerberos website - GSSAPI layer (mainly based on SASL system, for barbary terms ;) ) - openldap clients to get information from LDAP servers Jerome Walter -- -+-- Jérôme Walter - I2 EFREI +- Equipe Système - Efrei Robotique - Jap'Efrei - Erasmus Tutors The World is my country - Nihon no tomodachi desu EFREI System and Networking guide http://perso.efrei.fr/~walter/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] PAM_MOUNT
Does anybody on the list use pam_mount to mount smb file systems. I have been looking at the instructions on http://www.flyn.org/projects/pam_mount/index.html however they do not seem to work and I cannot see any information in messages. Thanks. -- Brett Hales [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Trouble with CUPS/SAMBA - Solved
Hi Bo Don't overlook the fact that many people like Kurt have put in huge amounts of time and effort to provide free software and excellent documentation as well as advice to users. The software is of top quality and if people are having difficulties, they are interested to get to the bottom of the problems so that they can provide better software, documentation and advice, all for free. cheers, Ken On Tue, 2003-06-24 at 07:01, Bo Mellberg wrote: Yeah, it really helps me that you come after I managed to get ANYTHING out of that printer, and say that all I do is wrong. The versions are the the one installed by RedHat Linux 9 (shrike). I installed the printer using the redhat utility, and I configured samba using, first the redhat utility, and then fiddling with the smb.conf. Any drivers used by the Windows clients are their own (postscript). Dont ask me how cupsomatic got in there, 'cause I dont know. Until you can come up with a better idea of installing the printer, I'll manage with this one, thank you very much. And just how is getting this to work properly confusing to others? /Bo -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kurt Pfeifle Sent: den 23 juni 2003 21:44 To: [EMAIL PROTECTED] Subject: [Samba] Trouble with CUPS/SAMBA - Solved SV: [Samba] Trouble with CUPS/SAMBA - Solved Bo Mellberg bo.mellberg at jolife.se Mon Jun 23 18:21:05 GMT 2003 I solved the problem by using: Which versions of CUPS and Samba are you using? And are you *really* still using the cupsomatic-PPD from Linuxprinting.org for that *PostScript*-printer?? [global] printing = cups printcap name = lpstat load printers = yes and in [printers]-section: [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = yes writable = no printable = yes create mode = 0700 print command = lpr -P %p -o raw %s -r lpq command = lpstat -o %p lprm command = cancel %p-%j printer admin = @users With great help from: http://www.buberel.org/linux/cups-samba.php Hope it helps someone... I fear it does more confuse than help -- unless your version info is forthcoming Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] administration
Hi! I have a question. We are going to make SAMBA our production file server for the NT desktops. I need some functionality where multiple users may need access to SWAT for configuration purposes. We don't want to give out the root password. At first I thought it would be the admin users option but that's not it. Firstly, does Samba have this functionality and if so, how do I configure it? Thanks! Spike Burkhardt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
re[2]: [Samba] Trouble with CUPS/SAMBA - Solved
Not to add to the confusion but maybe I will. :) If you still are having problems with cups and samba, may I suggest that you get rid of a lot after the [printers] section. Here is mine and it works great. Here it is: [printers] comment = All Printers path = /var/spool/samba guest ok = yes browseable = no public = yes writable = no printable = yes printer admin = (user or @group name here) You could repeat this for individual printers if you wanted with the allow user = user. I personally have not done this but would be easy enough. By the way your [global] parameters look great, same as mine. I use Cups 1.1.8 and samba 2.2.8a along with CupsOmatic for the self loading drivers in SAMBA. Sweet, love CUPS and SAMBA. Hope that helps. Yeah, it really helps me that you come after I managed to get ANYTHING out of that printer, and say that all I do is wrong. The versions are the the one installed by RedHat Linux 9 (shrike). I installed the printer using the redhat utility, and I configured samba using, first the redhat utility, and then fiddling with the smb.conf. Any drivers used by the Windows clients are their own (postscript). Dont ask me how cupsomatic got in there, 'cause I dont know. Until you can come up with a better idea of installing the printer, I'll manage with this one, thank you very much. And just how is getting this to work properly confusing to others? /Bo -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kurt Pfeifle Sent: den 23 juni 2003 21:44 To: [EMAIL PROTECTED] Subject: [Samba] Trouble with CUPS/SAMBA - Solved SV: [Samba] Trouble with CUPS/SAMBA - Solved Bo Mellberg bo.mellberg at jolife.se Mon Jun 23 18:21:05 GMT 2003 I solved the problem by using: Which versions of CUPS and Samba are you using? And are you *really* still using the cupsomatic-PPD from Linuxprinting.org for that *PostScript*-printer?? [global] printing = cups printcap name = lpstat load printers = yes and in [printers]-section: [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = yes writable = no printable = yes create mode = 0700 print command = lpr -P %p -o raw %s -r lpq command = lpstat -o %p lprm command = cancel %p-%j printer admin = @users With great help from: http://www.buberel.org/linux/cups-samba.php Hope it helps someone... I fear it does more confuse than help -- unless your version info is forthcoming Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
re: [Samba] 2.2.8a and printers
No clue as to why off this info. Maybe a log or two would help or a resetup of CUPS after the update to SAMBA. CUPS is on ver 1.1.18, using it here with great results. Might want to update that too. I don't know. The upgrades are for you to choose. The greatest resource for the choices you make might well be the change log at the samba.org sight saying what was added and patched/fixed. I wonder why M$ uses patches/upgrade/updates where we uses fixes? Your choice. I say if it works dont fix it. :) But maybe you do want to. Cheers. Karl- I recent upgraded to 2.2.8, which went fine. When I checked smbclient -L firewall, I saw I Lost my printer share. I am using CUPS v1.1.3 for printing. When I went back to 2.2.7a it reappeared. 2 questions: 1 Why did it do this? I ./configured it --enable-cups- --with-pam_(smb) 2 Is there and advantage of upgrading such a small step? Or are there a big enough issues to warrant this action? TIA Kev -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbind, ads, and trouble with group lookups
Hello, I've been trying to get samba set up to authenticate users off a W2003/ADS system and it appears to be working for the most part. However, there is one issue plaguing me and I'm not sure how serious it is. In brief, the Windows SID = Unix GID mapping is failing in odd ways. After getting things set up, the following work: * wbinfo -g (lists all domain groups, ie DOMAIN+user) * getent group (lists Unix and Windows groups with GIDs and members) * wbinfo -r DOMAIN+user (lists GIDs of groups of which the user is a member) * id DOMAIN+user (returns GIDs, but not group names) The following do *not* work: * wbinfo -Y `wbinfo -n DOMAIN+user` (get Could not convert sid xyz to gid) * anything like ls -l /some/dir will list only numerical gids and a message appears in log.winbind along the lines of name 'blah' is not a local or domain group: 1 UID lookups appear to be working fine. For example the following analogue works: wbinfo -S `wbinfo -n DOMAIN+user` The domain usernames show up in ls -l outputs and id DOMAIN+user returns both the UID and username as expected. Can anyone suggest why the errors are occurring and why the group names aren't being mapped properly in all cases? I've seen some issues mentioned on the mailing list and in bugzilla concerning gid mapping but they were slightly different - is this a known bug or fixed in CVS issue? Specs: RedHat 9.0 (fresh install) + samba-3.0.0beta1-1 (install via RPM from samba.org). The output of testparm looks like this: Load smb config files from /etc/samba/smb.conf Processing section [homes] Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions # Global parameters [global] workgroup = DOMAIN realm = SOMEREALM.UCLA.EDU ADS server = nnn.nnn.nnn.nnn server string = myhostname security = ADS password server = nnn.nnn.nnn.nnn log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = No wins server = nnn.nnn.nnn.nnn idmap uid = 1000- idmap gid = 1000- winbind uid = 1000- winbind gid = 1000- winbind separator = + hosts allow = nnn.nnn.nnn., 127.0.0.1 [homes] comment = Home Directories path = /home/win/%S read only = No browseable = No Thanks, Harry -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Trouble with CUPS/SAMBA
Bradley W. Langhorst brad at langhorst.com Mon Jun 23 21:34:26 GMT 2003 On Mon, 2003-06-23 at 04:34, Bo Mellberg wrote: ;[fredsprn] ; comment = Fred's Printer ; valid users = fred ; path = /home/fred ; printer = freds_printer ; public = no ; writable = no ; printable = yes you should'nt need this ... the printers will automatically get loaded from the printcap or cups api... But he had all this commented out ;[fredsdir] ; comment = Fred's Service ; path = /usr/somewhere/private ; valid users = fred ; public = no ; writable = yes ; printable = no ;[pchome] ; comment = PC Directories ; path = /usr/local/pc/%m ; public = no ; writable = yes ;[public] ; path = /usr/somewhere/else/public ; public = yes ; only guest = yes ; writable = yes ; printable = no ;[myshare] ; comment = Mary's and Fred's stuff ; path = /usr/somewhere/shared ; valid users = mary fred ; public = no ; writable = yes ; printable = no ; create mask = 0765 [jolife shared] comment = Shared Jolife documents path = /home/jolife/ writeable = yes guest ok = yes do you really want all these? the homes share does it automatically... This is also commented out [bosse] [lennart] [martin] [peter] [semmy] [steven] cups error_log: He should set LogLevel debug in cupsd.conf E [23/Jun/2003:09:51:31 +0200] Scheduler shutting down due to SIGTERM. E [23/Jun/2003:09:51:31 +0200] Unknown directive AuthType on line 729.your config file for cups is bad at line 729... I [23/Jun/2003:09:51:47 +0200] Job 30 queued on 'hp4550' by 'bosse'. I [23/Jun/2003:09:51:47 +0200] Started filter /usr/lib/cups/filter/cupsomatic (PID 32466) for job 30. I [23/Jun/2003:09:51:47 +0200] Started backend /usr/lib/cups/backend/socket (PID 32467) for job 30. I [23/Jun/2003:10:02:06 +0200] Job 31 queued on 'hp4550' by 'bosse'. I [23/Jun/2003:10:02:06 +0200] Started filter /usr/lib/cups/filter/cupsomatic (PID 335) for job 31. I [23/Jun/2003:10:02:06 +0200] Started backend /usr/lib/cups/backend/socket (PID 336) for job 31. these lines look like your job has made it to cups and is failing in there... This is likely, but not conclusive. Is it really a job originating from a Windows client? Only LogLevel debug would show... Also, LogLevel debug would show if and why job 30 failed. (There is not yet an error in this part of the log. It would appear on the next few lines, but these were not provided) so you don't need to mess with your samba configuration. if this doesn't work - take it to the cups lists... one problem you may have is that the windows pcs are sending jobs that are ready for printing with no ripping... you could try setting up your printer in cups as a raw printer instead of pcl5 or whatever you set it up as. best wishes! Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Trouble with CUPS/SAMBA - Solved
Bo Mellberg bosse at mellberg.org Mon Jun 23 23:31:26 GMT 2003 Yeah, it really helps me that you come after I managed to get ANYTHING out of that printer, I am so very sorry, that I have not been *constatntly* watching the list for your feedback, and that once I had responded to your second mail also, your SOLVED mail appeared within a minute in my mailbox. Now that *some* feedback from you is forthcoming, it is not what was asked for, unfortunately. and say that all I do is wrong. Did I say so? Did I say All? You have been asked a few very specific questions to help solve your problem which you never bothered to answer. The versions are the the one installed by RedHat Linux 9 (shrike). Now, if I knew by heart which versions of CUPS and Samba RH9 do install, I wouldn't need to ask further... I installed the printer using the redhat utility, and I configured samba using, first the redhat utility, and then fiddling with the smb.conf. Any drivers used by the Windows clients are their own (postscript). Dont ask me how cupsomatic got in there, 'cause I dont know. Until you can come up with a better idea of installing the printer, I'll manage with this one, thank you very much. And just how is getting this to work properly confusing to others? I tell you: * You was posting a smb.conf with a print command = lpr -P %p -o raw %s -r and some other manually set commands. * Your posted smb.conf is quite in opposition to what the smb.conf man page advices. * The man page says this: ...If SAMBA is compiled against libcups, then printcap = cups uses the CUPS API to submit jobs, etc. Otherwise it maps to the System V commands with the -oraw option for printing, i.e. it uses lp -c -d%p -oraw; rm %s. With printing = cups, and if SAMBA is com- piled against libcups, any manually set print command will be ignored. So *your* questions have been ansered. Maybe not well enough... /Bo Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] PAM_MOUNT
I've found the same.. I haven't been able to get it to work either... Craig Herring Does anybody on the list use pam_mount to mount smb file systems. I have been looking at the instructions on http://www.flyn.org/projects/pam_mount/index.html however they do not seem to work and I cannot see any information in messages. Thanks. -- Brett Hales [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] GroupMap : 'Privilege No privilege'
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 16 Jun 2003, David PORTE wrote: Domain Admins SID :S-1-5-21-3921159120-4202317873-1033194960-512 Unix group:Administrateurs du domaine Group type:Doamin Comment : Privilege : No privilege Someone can tell me why there are no privilege... This is my Admin group domain and I've got no privilege...It's no good. The privileges mentioned here are the Se... ones. They have been dropped. Remember that this is totally differenent than admin rights. If you are confused, I would recommend reviewing some of the Windows technical docs available. They should help. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc You can never go home again, Oatman, but I guess you can shop there. --John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+98SXIR7qMdg1EfYRAjgRAKCOIzb6pPU+dM8AfXeMe/768iilsQCg4Hrj Kc8nNfC9AchuKkPcg/xhmQw= =etao -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NMBD option bug
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 10 Jun 2003, Fabricio Adorno wrote: Please check if there is a problem with the option -l ([-l log directory]) on nmbd daemon (I have script that worked fine with samba 2.2.7a and with samba 3.0.0beta1 it doesn't log in the directory I've especified). please file a bug @ https://bugzilla.samba.org/. Thanks. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+99EUIR7qMdg1EfYRAo0NAKDti6KgRbqrDtbeLjmEw90N1PQGowCfbdGN L/1qm6EBHyoau2gRCCsKY8w= =L/CM -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Security Parameter Question?
I have a Samba server (version 2.2.8) running as a PDC. I have just setup another Samba server and don't want to setup a smbpasswd file on this machine. I simply want all authentication of usernames/passwords to be done on the PDC. Do I use security = server or security = domain? Martin Stacey IT Support Manager Safcol Australia Pty Ltd -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: CVS update: samba/source/nsswitch
On Mon, 2003-06-23 at 15:10, [EMAIL PROTECTED] wrote: Date: Mon Jun 23 05:10:08 2003 Author: jerry Update of /data/cvs/samba/source/nsswitch In directory dp.samba.org:/tmp/cvs-serv18612/nsswitch Modified Files: Tag: SAMBA_3_0 winbindd_ads.c winbindd_cache.c winbindd_group.c winbindd_rpc.c Log Message: * set domain-last_status = NT_STATUS_SERVER_DISABLED on an ads_connect() failure * Fix code to use winbind_rpc methods for trusted mixed mode or NT4 domains ( does no one ever test this? ) * add in LDAP code to get the sequence number for rpc based seqnum update. ( this is needed if the DC is upgraded and samba is not reconfigured to use security = ads; it's not pretty but it works (from app_head) ) Talking about testing - the IRIX compiler found some interesting things in this patch: (au2 on build farm) nsswitch/winbindd_group.c, line 300: warning(1551): variable domain is used before its value is set ((name_type==SID_NAME_ALIAS) strequal(lp_workgroup(), domain-name))) ) ^ nsswitch/winbindd_group.c, line 462: error(1042): operand types are incompatible (int (*)(void) and int) if ( lp_security != SEC_ADS domain-native_mode ^ 1 error detected in the compilation of /home/build/.ccache/tmp.stdout.8867.i. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
CVS update: samba/source/nsswitch
Date: Mon Jun 23 06:38:19 2003 Author: tridge Update of /home/cvs/samba/source/nsswitch In directory dp.samba.org:/tmp/cvs-serv5165 Modified Files: Tag: SAMBA_3_0 winbindd_group.c Log Message: lp_security() is a function not an integer Revisions: winbindd_group.c1.51.2.16 = 1.51.2.17 http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_group.c.diff?r1=1.51.2.16r2=1.51.2.17
Re: removing -A
On Sun, 22 Jun 2003, Andrew Bartlett wrote: Hmmm, but do we really want to do that? I like having short forms like that, and surely we could test that information presented works before writing it to the secrets file? Short-forms of things are good, when you do something often - but this is a once-off command. Anyway, the information probably would work, so that test isn't that useful... I am sorry, that is just not true. What about the case where the admin gets the authentication information incorrect? We should be checking the info they provide to prevent the admin from having to hunt around for the reason for subsequent failure. Sorry, I wasn't clear - yes, we should test the info before we start it. Be warned that it's not quite as trivial as it should be (unless you want to turn wbinfo into something the size of 'net' just to do it). What I meant was that we can't just keep -A and -a on the basis that we we can tell if the user stuffed up - given that they both take the same input parameter format. But the point is that a test in the -A case that the details provided actually work cathes both problems: 1. The case where someone did wbinfo -A blah blah when they meant wbinfo -a, and 2. The case where someone did wbinfo -A blah blah and supplied the wrong blah blah. Of course, the test is going to have to ensure that the blah blah that was supplied allows winbindd to do what it needs to do. The only remaining case, it seems to me, that is not handled is where someone does wbinfo -A when they meant to do wbinfo -a and they also supply account details that are powerful enough to do what is needed but are not the ones they intended to supply. Regards - Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com
Re: CVS update: samba/source/nsswitch
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23 Jun 2003, Andrew Bartlett wrote: nsswitch/winbindd_group.c, line 300: warning(1551): variable domain is used before its value is set ((name_type==SID_NAME_ALIAS) strequal(lp_workgroup(), domain-name))) ) ^ Fixed. nsswitch/winbindd_group.c, line 462: error(1042): operand types are incompatible (int (*)(void) and int) if ( lp_security != SEC_ADS domain-native_mode Tridge already fixed this. Guess I turned my head when the compiler warning flew by. But I really can't figure out how it even compiled. Can you see it? jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+9vCaIR7qMdg1EfYRAvSIAKDpXqRPqed6jKuYQlNVZCN1UfFxtwCg4cy9 ycfZcDpVoUhTxw71XSA33Eo= =vLT3 -END PGP SIGNATURE-
Re: removing -A
The only remaining case, it seems to me, that is not handled is where someone does wbinfo -A when they meant to do wbinfo -a and they also supply account details that are powerful enough to do what is needed but are not the ones they intended to supply. Yes, and this is enough reason to remove -A. I've more than once run into folks who did this. As soon as that user changed his password, it was all over. Perhaps changing it to a different letter would be ok, if you're really set on a short version (though there are other wbinfo options that don't). It was a mistake for me to have put in the -A to begin with. I should have used a different letter. But now is the time to get rid of it, or we'll be seeing a lot more me toos on this. Jim McDonough IBM Linux Technology Center Samba Team 6 Minuteman Drive Scarborough, ME 04074 USA [EMAIL PROTECTED] [EMAIL PROTECTED] Phone: (207) 885-5565 IBM tie-line: 776-9984
Re: CVS update: samba/source/nsswitch
On Mon, 2003-06-23 at 22:20, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23 Jun 2003, Andrew Bartlett wrote: nsswitch/winbindd_group.c, line 300: warning(1551): variable domain is used before its value is set ((name_type==SID_NAME_ALIAS) strequal(lp_workgroup(), domain-name))) ) ^ Fixed. nsswitch/winbindd_group.c, line 462: error(1042): operand types are incompatible (int (*)(void) and int) if ( lp_security != SEC_ADS domain-native_mode Tridge already fixed this. Guess I turned my head when the compiler warning flew by. But I really can't figure out how it even compiled. Can you see it? You are allowed to check if a function pointer's value is '3', it's just not often what you want to do :-) -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
CVS update: samba/source/rpc_parse
Date: Mon Jun 23 17:47:25 2003 Author: jerry Update of /data/cvs/samba/source/rpc_parse In directory dp.samba.org:/tmp/cvs-serv29958/rpc_parse Modified Files: Tag: SAMBA_3_0 parse_spoolss.c Log Message: fix bug #178; available space in devmode should be int Revisions: parse_spoolss.c 1.155.2.18 = 1.155.2.19 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_parse/parse_spoolss.c.diff?r1=1.155.2.18r2=1.155.2.19
CVS update: samba/source/auth
Date: Mon Jun 23 18:27:59 2003 Author: jerry Update of /data/cvs/samba/source/auth In directory dp.samba.org:/tmp/cvs-serv627/auth Modified Files: Tag: SAMBA_3_0 auth.c Log Message: fix typo (bug #170) Revisions: auth.c 1.32.2.15 = 1.32.2.16 http://www.samba.org/cgi-bin/cvsweb/samba/source/auth/auth.c.diff?r1=1.32.2.15r2=1.32.2.16
CVS update: samba/source/rpc_server
Date: Mon Jun 23 18:29:09 2003 Author: jerry Update of /data/cvs/samba/source/rpc_server In directory dp.samba.org:/tmp/cvs-serv713/rpc_server Modified Files: Tag: SAMBA_3_0 srv_util.c Log Message: wrap group enuemration in brcome/unbecome_root() (bug #110) Revisions: srv_util.c 1.65.2.10 = 1.65.2.11 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_util.c.diff?r1=1.65.2.10r2=1.65.2.11
CVS update: samba/source/auth
Date: Mon Jun 23 19:05:23 2003 Author: jerry Update of /data/cvs/samba/source/auth In directory dp.samba.org:/tmp/cvs-serv3589/auth Modified Files: Tag: SAMBA_3_0 auth_domain.c Log Message: * s/get_dc_name/rpc_dc_name/g (revert a previous change) * move back to qsort() for sorting IP address in get_dc_list() * remove dc_name_cache in cm_get_dc_name() since it slowed things down more than it helped. I've made a note of where to add in the negative connection cache in the ads code. Will come back to that. * fix rpcclient to use PRINTER_ALL_ACCESS for set printer (instead of MAX_ALLOWED) * only enumerate domain local groups in our domain * simplify ldap search for seqnum in winbindd's rpc backend Revisions: auth_domain.c 1.33.2.23 = 1.33.2.24 http://www.samba.org/cgi-bin/cvsweb/samba/source/auth/auth_domain.c.diff?r1=1.33.2.23r2=1.33.2.24
CVS update: samba/source/libads
Date: Mon Jun 23 19:05:23 2003 Author: jerry Update of /data/cvs/samba/source/libads In directory dp.samba.org:/tmp/cvs-serv3589/libads Modified Files: Tag: SAMBA_3_0 ldap.c Log Message: * s/get_dc_name/rpc_dc_name/g (revert a previous change) * move back to qsort() for sorting IP address in get_dc_list() * remove dc_name_cache in cm_get_dc_name() since it slowed things down more than it helped. I've made a note of where to add in the negative connection cache in the ads code. Will come back to that. * fix rpcclient to use PRINTER_ALL_ACCESS for set printer (instead of MAX_ALLOWED) * only enumerate domain local groups in our domain * simplify ldap search for seqnum in winbindd's rpc backend Revisions: ldap.c 1.55.2.27 = 1.55.2.28 http://www.samba.org/cgi-bin/cvsweb/samba/source/libads/ldap.c.diff?r1=1.55.2.27r2=1.55.2.28
CVS update: samba/source/nsswitch
Date: Mon Jun 23 19:05:23 2003 Author: jerry Update of /data/cvs/samba/source/nsswitch In directory dp.samba.org:/tmp/cvs-serv3589/nsswitch Modified Files: Tag: SAMBA_3_0 winbindd_cm.c winbindd_group.c winbindd_rpc.c Log Message: * s/get_dc_name/rpc_dc_name/g (revert a previous change) * move back to qsort() for sorting IP address in get_dc_list() * remove dc_name_cache in cm_get_dc_name() since it slowed things down more than it helped. I've made a note of where to add in the negative connection cache in the ads code. Will come back to that. * fix rpcclient to use PRINTER_ALL_ACCESS for set printer (instead of MAX_ALLOWED) * only enumerate domain local groups in our domain * simplify ldap search for seqnum in winbindd's rpc backend Revisions: winbindd_cm.c 1.31.2.30 = 1.31.2.31 http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_cm.c.diff?r1=1.31.2.30r2=1.31.2.31 winbindd_group.c1.51.2.17 = 1.51.2.18 http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_group.c.diff?r1=1.51.2.17r2=1.51.2.18 winbindd_rpc.c 1.25.2.12 = 1.25.2.13 http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_rpc.c.diff?r1=1.25.2.12r2=1.25.2.13
CVS update: samba/source/libsmb
Date: Mon Jun 23 19:05:23 2003 Author: jerry Update of /data/cvs/samba/source/libsmb In directory dp.samba.org:/tmp/cvs-serv3589/libsmb Modified Files: Tag: SAMBA_3_0 namequery.c namequery_dc.c Log Message: * s/get_dc_name/rpc_dc_name/g (revert a previous change) * move back to qsort() for sorting IP address in get_dc_list() * remove dc_name_cache in cm_get_dc_name() since it slowed things down more than it helped. I've made a note of where to add in the negative connection cache in the ads code. Will come back to that. * fix rpcclient to use PRINTER_ALL_ACCESS for set printer (instead of MAX_ALLOWED) * only enumerate domain local groups in our domain * simplify ldap search for seqnum in winbindd's rpc backend Revisions: namequery.c 1.93.2.14 = 1.93.2.15 http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/namequery.c.diff?r1=1.93.2.14r2=1.93.2.15 namequery_dc.c 1.2.2.3 = 1.2.2.4 http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/namequery_dc.c.diff?r1=1.2.2.3r2=1.2.2.4
CVS update: samba/source/smbd
Date: Mon Jun 23 20:24:08 2003 Author: jra Update of /data/cvs/samba/source/smbd In directory dp.samba.org:/tmp/cvs-serv11128/smbd Modified Files: Tag: SAMBA_3_0 posix_acls.c Log Message: Fixed the merge_default_aces() code to work correctly with inheritance. Hopefully will fix jcmd bugs :-). Jeremy. Revisions: posix_acls.c1.61.2.25 = 1.61.2.26 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/posix_acls.c.diff?r1=1.61.2.25r2=1.61.2.26
CVS update: samba/docs/docbook/smbdotconf/protocol
Date: Mon Jun 23 23:02:49 2003 Author: jra Update of /data/cvs/samba/docs/docbook/smbdotconf/protocol In directory dp.samba.org:/tmp/cvs-serv23926 Added Files: Tag: SAMBA_3_0 mapaclinherit.xml Log Message: Add documentation for map acl inherit parameter. Jeremy. Revisions: mapaclinherit.xml NONE = 1.1.2.1 http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/smbdotconf/protocol/mapaclinherit.xml?rev=1.1.2.1
CVS update: samba/source/param
Date: Tue Jun 24 00:58:54 2003 Author: jra Update of /data/cvs/samba/source/param In directory dp.samba.org:/tmp/cvs-serv933/param Modified Files: Tag: SAMBA_3_0 loadparm.c Log Message: Move the map acl inherit parameter into the protocol section. Jeremy. Revisions: loadparm.c 1.397.2.67 = 1.397.2.68 http://www.samba.org/cgi-bin/cvsweb/samba/source/param/loadparm.c.diff?r1=1.397.2.67r2=1.397.2.68
CVS update: samba/source/utils
Date: Tue Jun 24 01:09:36 2003 Author: jra Update of /data/cvs/samba/source/utils In directory dp.samba.org:/tmp/cvs-serv1856/utils Modified Files: Tag: SAMBA_3_0 smbcacls.c Log Message: Fixes from Martin Dorey [EMAIL PROTECTED] to only ask for and change the requested parts of the ACL. Jeremy. Revisions: smbcacls.c 1.66.2.15 = 1.66.2.16 http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/smbcacls.c.diff?r1=1.66.2.15r2=1.66.2.16
CVS update: samba/source
Date: Tue Jun 24 05:31:08 2003 Author: tpot Update of /data/cvs/samba/source In directory dp.samba.org:/tmp/cvs-serv22089 Modified Files: Tag: SAMBA_3_0 configure.in Log Message: More sensible behaviour for bug 152. If we don't have krb5.h and were explicitly configured using --with-ads then give an error, otherwise fall back to compiling without ADS. Tested on redhat 8.0 with and without MIT kerberos packages installed. Metze, let me know if this is working OK for you now! Revisions: configure.in1.300.2.106 = 1.300.2.107 http://www.samba.org/cgi-bin/cvsweb/samba/source/configure.in.diff?r1=1.300.2.106r2=1.300.2.107
