announcements for preX releases
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Just to let everyone know, I'm not going to announce upcoming preX releases on this list anymore. I will copy this list on the announcement. If you are interested in getting the fire in the hole messages like the upcoming 3.0.1pre1 release for tomorrow (10/10), please subscribe to the samba-technical list (if you are not already). Thanks. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ You can never go home again, Oatman, but I guess you can shop there. ~--John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/hd2FIR7qMdg1EfYRAlglAJ4rZHjzbf62Nnm69SqTVMUSED2C8wCdGP2j eIiYBvdC+AAkVFtqa0ZUjhQ= =Azy2 -END PGP SIGNATURE-
RE: [Samba] excel files not opening read only - samba 3.0
np.
I found the patch last night and applied it - works wonderfully now!
Thanks for the hard work guys.
Andre
-Original Message-
From: Jeremy Allison [mailto:[EMAIL PROTECTED]
Sent: 09 October 2003 03:53
To: Andre de Koning
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] excel files not opening read only - samba 3.0
On Wed, Oct 08, 2003 at 11:36:22PM +0200, Andre de Koning wrote:
I upgraded to samba 3.0 recently.
I have a lot of shares containing excel workbooks that need to be rea only
for certain people and writable by others.
If I try and open any one that is resctricted to read only, whether by
samba
read list etc. of using linux ext permissions windows compalins that the
file could not be found, check the spelling of the filaname blah blah ...
Known bug in 3.0 - we've fixed it in CVS and it'll be fixed in 3.0.1.
Here's the patch, sorry for the trouble.
Jeremy.
===
RCS file: /cvsroot/samba/source/smbd/error.c,v
retrieving revision 1.17
retrieving revision 1.18
diff -u -r1.17 -r1.18
--- samba/source/smbd/error.c 2002/11/05 21:46:33 1.17
+++ samba/source/smbd/error.c 2003/10/02 00:55:20 1.18
@@ -61,9 +61,6 @@
eclass = unix_ERR_class;
ecode = unix_ERR_code;
ntstatus = unix_ERR_ntstatus;
- unix_ERR_class = SMB_SUCCESS;
- unix_ERR_code = 0;
- unix_ERR_ntstatus = NT_STATUS_OK;
} else {
while (unix_dos_nt_errmap[i].dos_class != 0) {
if (unix_dos_nt_errmap[i].unix_error == errno) {
@@ -93,6 +90,10 @@
if (errno != 0)
DEBUG(3,(error string = %s\n,strerror(errno)));
+ unix_ERR_class = SMB_SUCCESS;
+ unix_ERR_code = 0;
+ unix_ERR_ntstatus = NT_STATUS_OK;
+
/*
* We can explicitly force 32 bit error codes even when the
* parameter nt status is set to no by pre-setting the
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba-3.0.0, LPRng-3.8.21 and printer queues
Hi! I have problem with finding my printerjobbs in sambas printer queue, I do se the jobb while it is in /var/spool/samba, but not when the job has been spooled to LPRngs spool. smb.conf [Global] printing = lprng lpq command = /usr/server/LPRng-3.8.21/bin/lpq -P%p print command = /usr/server/LPRng-3.8.21/bin/lpr -b -P%p %s ;rm %s The printing job shows up in the LPRng queue e.i. /usr/server/LPRng-3.8.21/bin/lpq -Pprinter shows the job. But from log.smbd: Running the command `/usr/server/LPRng-3.8.21/bin/lpq -Pprinter' gave 0 Can anyone help me with this. (CUPS is not a solution for me) -- Assar Svensson ([EMAIL PROTECTED]) Datordriften - Institutionerna för Systemteknik och Matematik Luleå tekniska universitet Tel: 0920 - 49 2448 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Not able to invoke swat
Hi I have configured samba (version 2.2.7a) on Linux 9. Now I am facing a problem like I am able to invoke the swat in the local machine (http://localhost:901 http://localhost:901/ ), But I am not able to invoke the swat from other machine. Let us consider Localhost name is moon (linux machine) Another machine is mars (Win 2k) I am able to invoke swat from http://moon:901 http://moon:901/ but I am not able to invoke from mars. If I put http://moon:901 http://moon:901/ from the mars web browser I am getting the error page cannot be displayed What could be the problem / solution Any one can help me in this regards Thanks in Advance Prasath C -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Failing test 5.......
Hi all, I have samba server 2.2.8a to act as a PDC on a mixed WinXP/Win2k/WinNT network. I joined all my workstations to the domain with no problem... And users can login into the domain and access their folders/printers, BUT!!! Every now and then they cannot log in getting error message that domain controller cannot be found I'm trying to track the problem down :-) When I went thru the DIAGNOSIS.TXT, test #5 fails: [EMAIL PROTECTED] bin]# ./nmblookup -B CMP0094 '*' querying * on 0.0.0.0 10.10.8.4 *00 [EMAIL PROTECTED] (Server name is homo, client is CMP0094, the servers IP is 10.10.8.4, the clients ip is 10.10.8.79) Shouldn't the above lookup answer with the clients ip? I have 2 Win2003 servers as domain members as well. Can that be the problem? I mean it seems like Samba 3.x may be the more appropriate to server Win2003 systems? Thanks! Andrey. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] No NT domain controller is available problem
Hi all, I have samba server 2.2.8a to act as a PDC on a mixed WinXP/Win2k/WinNT network. I joined all my workstations to the domain with no problem... And users can login into the domain and access their folders/printers, BUT!!! Every now and then they cannot log in getting error message that domain controller cannot be found I'm trying to track the problem down :-) When I went thru the DIAGNOSIS.TXT, test #5 fails: [EMAIL PROTECTED] bin]# ./nmblookup -B CMP0094 '*' querying * on 0.0.0.0 10.10.8.4 *00 [EMAIL PROTECTED] (Server name is homo, client is CMP0094, the servers IP is 10.10.8.4, the clients ip is 10.10.8.79) Shouldn't the above lookup answer with the clients ip? I have 2 Win2003 servers as domain members as well. Can that be the problem? I mean it seems like Samba 3.x may be the more appropriate to server Win2003 systems? Thanks! Andrey. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] can't join to 3.0.1-pre domain
Hello! I can't add w2k sp3 server to 3.0.1 (cvs from Oct. 6). I trying to add server with root account and w2k says - Can't find user name' (trabslation from russian). log with level=10 attached. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] NT4-Samba Migration Test Results
John, Thank you very much, that has filled in a few gaps but I have one more question. Once I've used pdbedit to migrate everything to an LDAP backend how should the scripts part of my smb.conf look then? You see, the way I did it was to set up my LDAP database first, then setup Samba and put the scripts from smbldap-tools into my smb.conf. I then ran 'net rpc vampire' and that took everything across, all the users, groups, and computers went into the database. The only problem was that the most groups were empty, in fact the only group that is populated is Domain Users. We have a lot of groups on our site, each time a new project is started we create a new group and put the team members in it, we have hundreds!! I did contemplate putting people back into their groups by hand and I'll have to do it if that's the only way but I suspect I'm just using a script wrongly or just not using the right scriptis there even a script for this? So before I start again and do it your way I'd just like to know the answer to that last little bit because although your method will give me a complete and correct initial database, when my administrators add users and groups to the system via NT's UserManager I suspect I will have the same problem. Oh, one more thing, the passwords don't seem to go across either, next to sambaNTPassword and sambaLMPassword I get XXX. This may be solved if I do things your way too, but this may also be a problem for administrators when adding users via UserManager when I convert back to an LDAP backendhmm...a few more questions have come up in my mind, but I'll save them for later...after I have re-read the documentation. Anyway, in the short term I can just add the hashes to an LDIF from a 'net rpc samdump' right? I really appreciate your help so far but I just have to iron these few things out, I can't really present this solution to a technical director just yet as I don't have it straight in my own head. I promise I have read ALL of the relevant parts of the HOWTO collection but for someone like me who is going straight from NT4 to Samba+LDAP you kind of have to piece things together from different parts of the documentation which is why I offered to write a complete HOWTO for this specific task, I will have to document it all for people here anyway. I'm going to stop now, I know I'm getting this product and support for it free, I don't want to push my luck! Thanks a lot, Sapan -Original Message- From: John H Terpstra [mailto:[EMAIL PROTECTED] Sent: 09 October 2003 03:32 To: Ganguly, Sapan Cc: '[EMAIL PROTECTED]' Subject: RE: [Samba] NT4-Samba Migration Test Results Sapan, It is of course a pleasure to help you, but I did expect that my reply was rather specific enough. Have you read the Samba-HOWTO-Collection.pdf? Chapter 31 covers the process (Section 31.1.1.2) covers this rather completely. Anyhow, here we go: 1. Configure smb.conf for BDC [globals] workgroup = NT4DOMAIN netbios name = NEWSERVER passdb backend = tdbsam domain master = No domain logons = Yes os level = 33 add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel %u add group script = /usr/sbin/groupadd %g add machine script = /usr/sbin/useradd -d /dev/null -s /bin/false %u wins server = x.x.x.x 2. Join the domain as a BDC server: net rpc join -UAdministrator%passsword 3. Migrate accounts: net rpc vampire -UAdministrator%password 4. Shutdown NT4 PDC 5. Convert Samba-3 BDC to PDC, and make it the WINS server: [globals] workgroup = NT4DOMAIN netbios name = NEWSERVER passdb backend = tdbsam domain master = Yes domain logons = Yes os level = 33 add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel %u add group script = /usr/sbin/groupadd %g add machine script = /usr/sbin/useradd -d /dev/null -s /bin/false %u wins support = Yes 6. Start Samba PDC. If all worked correctly then your existing Windows NT4 Domain clients will be able to log on just as with the original NT4 PDC. Gotchas: The biggest problem will be the migration of NT4 Group accounts. You will need to either: a) convert all group names to all lower-case and less than 32 characters _OR_ b) create your own replacement for the groupadd command on your system so that it can add group names that have a space character in them, and that can have an upper case character in them. You will also need to modify the way that the NT Group name is passed to the script. Here is a script that will do the trick, although it is NOT elegant nor does it do any safety checks. You might call this script: smbaddgrp.sh Of course it needs to be set to permissions to execute with: chmod 755 smbgrpadd.sh PS: That script is published on
[Samba] having problems
i can see my linux computer from windows but i cannot access it..i get the erro of network path not found...i used the net use and net view command and still get the same...i can access all windows computers on my network from the linux computer. any suggestions... tony -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Mysql + Samba, please help....
Hi Guruz, sorry for the bad English and the stupid question... I configure samba-3.0 with such options ./configure --prefix=/usr/local/samba --with-expsam=xml,mysql --with-pam --with-pam_smbpass after install i try ./pdbedit -L and i get the following error No builtin nor plugin backend for mysqlsam found Loading mysqlsam failed! my config file .. passdb backend = mysqlsam ;passdb backend = plugin:/usr/local/samba/lib/pdb_mysql.so:mysql ;passdb backend = mysql:mysql mysql:mysql host = localhost mysql:mysql user = root mysql:mysql password = alexander mysql:mysql database = samba i try many variants but get the same error No builtin nor plugin backend for mysqlsam found Loading mysqlsam failed! Any idea please help! Openkin Alexandr. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Mysql + Samba, please help....
On Thu, 2003-10-09 at 12:14, open wrote: Hi Guruz, sorry for the bad English and the stupid question... I configure samba-3.0 with such options ./configure --prefix=/usr/local/samba --with-expsam=xml,mysql --with-pam --with-pam_smbpass after install i try ./pdbedit -L and i get the following error No builtin nor plugin backend for mysqlsam found Loading mysqlsam failed! my config file .. passdb backend = mysqlsam ;passdb backend = plugin:/usr/local/samba/lib/pdb_mysql.so:mysql ;passdb backend = mysql:mysql mysql:mysql host = localhost mysql:mysql user = root mysql:mysql password = alexander mysql:mysql database = samba i try many variants but get the same error No builtin nor plugin backend for mysqlsam found Loading mysqlsam failed! Did configure detect the mysql library and headers? That's most likely the problem you're experiencing.f Jelmer -- Jelmer Vernooij - http://jelmer.vernstok.nl/ signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba3 PDC + LDAP + winbindd?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Message: 15 Date: Wed, 8 Oct 2003 10:15:51 -0400 From: Jake Dalton [EMAIL PROTECTED] Subject: [Samba] Samba3 PDC + LDAP + winbindd? To: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=us-ascii Hi, I'm trying to set up a single sign-on system across both linux and windows with a Samba3 PDC and OpenLDAP backend. I've been trying to follow the documentation included with Samba3 but I don't seem to be having much success. The basic idea is to use nss_ldap/pam_ldap/NFS on the linux clients, and authenticate the Windows machines to samba. There is no reason your linux clients need to know anything about samba (unless they are service files to windows clients, but then all you need to do is join them to the domain). So I have few questions. #1: What services are necessary for this to work? I know smbd, nmbd and slapd are for sure required. But I can't figure out whether winbindd should be running with this system or not. As far as I understand, it is. It will provide the ability for domain users to log into linux systems with their domain credentials. Winbind is there to map identities present on Windows Domain Controllers to Unix uids and gids. Since samba already does this (well, ther reverse), you don't need winbind. Winbind is primarily useful when you *aren't* using samba as a domain controller, and would be run on the client systems. #2: How do the idmap mappings get created? I have the ldap idmap suffix option set to a valid location but I've never seen any entries get put in there. You don't need this. #3: What constitutes a domain group in ldapsam? From what I can tell, the sambaGroupMapping object class indicates a domain group. But every domain group needs to map to a posixGroup objectclass entry. So if every domain group has a one-to-one mapping to a group gid, why is there a need for winbindd to generate mappings for domain groups? There isn't. nss_ldap will give you the groups as they are in LDAP. #4: Is there an easy way to test the smbd+slapd configuration? I want to make sure that those two are configured and working correctly before I start expanding the configuration to adding other machines to the domain. Join one machine to the domain, and test things like ACLs on the client. #5: When I run wbinfo -u or wbinfo -g both return with Error looking up domain [users|groups] but if I tried wbinfo -n testuser I actually get a SID back. What could cause this? But you don't need this to work. Any help would be appreciated. If someone has samba3 PDC + OpenLDAP system set up, a dump in ldif format (with sensitive info removed) of the ldap directory would be a great help, as well as sample smb.conf's or any other suggestions. I think you're probably more in need on docs on the nss_ldap/pam_ldap side, please see the documents at http://mandrakesecure.net which cover a few issues which may be of interest (but don't cover samba3 yet ...) Regards, Buchan - -- |--Another happy Mandrake Club member--| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x202 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/hUGirJK6UGDSBKcRAlTfAJ95WPICQVSJ64maD8Eg3g6wNZdvegCeNx+W WybrP8jRaQyJ2oLryz3eEm8= =cPTQ -END PGP SIGNATURE- * Please click on http://www.cae.co.za/disclaimer.htm to read our e-mail disclaimer or send an e-mail to [EMAIL PROTECTED] for a copy. * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can I setup Samba server to use UNIX (Solaris) username Passwor ds ?
Hi All, Can I setup Samba server to use UNIX (Solaris) username Passwords ? Or must I use smbpasswd ? Gerard Hooton Department of Microelectronic Engineering UCC Enterprise Centre, North Mall, Cork. Phone: 021 490 4576 http://www.ue.ucc.ie/index.htm -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can I setup Samba server to use UNIX (Solaris) username Passwor ds ?
Hi, You have to have a unix user through passwd, nis, ldap and samba user through smbpasswd,ldap, mysql. Or if you are using NT/Win200x as PDC and use winbind, which will do both. /Patrik On Thu, 2003-10-09 at 13:22, Hooton, Gerard wrote: Hi All, Can I setup Samba server to use UNIX (Solaris) username Passwords ? Or must I use smbpasswd ? Gerard Hooton Department of Microelectronic Engineering UCC Enterprise Centre, North Mall, Cork. Phone: 021 490 4576 http://www.ue.ucc.ie/index.htm -- In a world without fences who needs Gates Patrik Gustavsson, Senior Technical Consultant [EMAIL PROTECTED] Telephone: +46 60 671540 http://glen.swedenMobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550 -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Not able to invoke swat
I am able to invoke swat from http://moon:901 http://moon:901/ but I am not able to invoke from mars. If I put http://moon:901 http://moon:901/ from the mars web browser I am getting the error page cannot be displayed look at /etc/xinetd/swat file. the default 'allow' (if you're using xinetd) is only localhost. add your local network/mask and restart swat. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0 on RedHat 8.0
My first question is, how can i see, with which options the package was compiled. Grab the SRPM for your Distro. Install the package and take a look in /usr/src/redhat/SPECS/samba3.spec. There you can see the default building options. Or have a look at this dokument ( last page ) ftp://ftp.kalamazoolinux.org/pub/pdf/AbusingWin32.pdf We need ADS Integration, ACL and CUPS support. with installed SRPM, go to /usr/src/redhat/SOURCES and untar the samba package, with ./samba-3.0.0/source/configure --help you will get all options for compiling the samba package. modify the samba3.spec with your options and rebuild the samba package as you can see here ftp://de.samba.org/samba.org/bin-pkgs/RedHat/ sorry, but for ads integration have a look in the doku What would be a good idea to back up, before an update? imho, never play with your production environment without a working and tested backup Thanks for any hint. -- Thorsten Schirmers -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] deny access to subdirectory
Hi, My Samba is up and running with shares working. I want to know if it is possible to deny access to a specific subdirectory inside a share, and if so how to do this. Regards, Janó -- Janó van Deventer Phone: (55-61) 361-1466 Fax: (55-61) 234-8722 www.rhox.com.br -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba3 ADS without Microsoft?
John H Terpstra wrote: On Wed, 8 Oct 2003, Mike wrote: I've setup samba to use ldap. I've propogated the directory. I've setup the kerberos realm. --snipp However, I'd appreciate a crystal clear understanding of precisely what you are trying to implement and how you want it to work. - John T. Just guessing, -Setting up samba as PDC -Setting up (MIT) kerberos -Setting up LDAP -Storing account Information in LDAP -Creating a service ticket in kerberos like smbd/host.foo -Exporting to a keytab and telling samba where to look for -ksetup W2k SP3+ to use MIT REALM and map the principal to the sambaaccount in LDAP -authenticate to samba PDC with kerberos credentials obtained from the KDC greetings Paul -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Newbie Authentication Questions
Quoting John H Terpstra [EMAIL PROTECTED]: The bottom line is that NUA did not happen for user accounts and it is hardly useable for machine accounts. My advice is do not use the NUA facility because when we re-introduce it what is there will most likely not be compatible with the new mechanisms. At least if you have machine accounts in your password back end (eg: /etc/passwd) there will be a mechanism to migrate them to a new system. hmm - ok - i think i'm going to look at the winbind stuff and see if something can be worked out there (as suggested by jeremy), but thanks all (andrew/john) for the clarifications about some of the interworkings of samba. most of the issues i'm having w/ this setup are due to the inflexibility of the environment, not samba btw. Thanks -Bill - This mail sent through IMP: http://horde.org/imp/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] our windows APW can't add printer driver to samba domain member
Hey DJ, Driver Wizard on a Windows client, with a username part of the 'print admin' group, we get this error message: Unable to install HP Lazerjet 4000 Series PCL 6, Windows 2000, Intel Driver. Access denied [print$] comment = Printer Drivers path = /var/lib/samba/printers write list = root, @MYGROUP\Staff create mask = 0700 Can /var/lib/samba/printers be reached by a member of @MYGROUP\Staff? What does the ownership permissions of the subdirectories look like? i.e. W32X86... W32X86/2... W32X86/3? Your create mask of 0700 seems like it would be problematic for a few reasons, but mostly because your write list is group based, and other users will not be able to read files from print$. ~ Daniel --- This message is the property of Time Inc. or its affiliates. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba-3.0.0, LPRng-3.8.21 and printer queues - Jerry?
I have problem with finding my printerjobbs in sambas printer queue, I do se the jobb while it is in /var/spool/samba, but not when the job has been spooled to LPRngs spool. smb.conf [Global] printing = lprng lpq command = /usr/server/LPRng-3.8.21/bin/lpq -P%p print command = /usr/server/LPRng-3.8.21/bin/lpr -b -P%p %s ;rm %s The printing job shows up in the LPRng queue e.i. /usr/server/LPRng-3.8.21/bin/lpq -Pprinter shows the job. But from log.smbd: Running the command `/usr/server/LPRng-3.8.21/bin/lpq -Pprinter' gave 0 Can anyone help me with this. (CUPS is not a solution for me) Because of your last sentence I thought I should add, that I'm seeing the same problem (print jobs queued in the print subsystem not showing up for samba) _WITH_ cups in samba 3.0.0. ~ Daniel --- This message is the property of Time Inc. or its affiliates. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba + Cups + Filter Access
On (2003/10/08 15:49), Thiago Lima wrote: Any tips? I can't believe that nobody ever had this problem. :( Other people have had this problem, it just hasn't been solved publically. Google shows at least two people having problems with auto-loaded drivers from a cups-samba server to a Windows client. Neither one of them got a solution that was posted back to the list. My wife's going away for two weeks today, so I'll have a little free time to tackle it. Problem is, I _still_ can't find the Adobe PS drivers mentioned in the cupsaddsmb(8) manpage. :-) Ciao, Sheldon. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba + Cups + Filter Access
Using Adobe PS drivers (http://www.adobe.com/support/downloads/product.jsp?product=44platform= win ) I'm able to print from Windows XP using IPP directly to cups. I cound't use it thru samba. []s Thiago Lima. -Original Message- From: Sheldon Hearn [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 10:34 AM To: Thiago Lima Cc: 'Chris Smith'; [EMAIL PROTECTED] Subject: Re: [Samba] Samba + Cups + Filter Access On (2003/10/08 15:49), Thiago Lima wrote: Any tips? I can't believe that nobody ever had this problem. :( Other people have had this problem, it just hasn't been solved publically. Google shows at least two people having problems with auto-loaded drivers from a cups-samba server to a Windows client. Neither one of them got a solution that was posted back to the list. My wife's going away for two weeks today, so I'll have a little free time to tackle it. Problem is, I _still_ can't find the Adobe PS drivers mentioned in the cupsaddsmb(8) manpage. :-) Ciao, Sheldon. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] No NT domain controller is available problem
Hi all, I have samba server 2.2.8a to act as a PDC on a mixed WinXP/Win2k/WinNT network. I joined all my workstations to the domain with no problem... And users can login into the domain and access their folders/printers, BUT!!! Every now and then they cannot log in getting error message that domain controller cannot be found I'm trying to track the problem down :-) When I went thru the DIAGNOSIS.TXT, test #5 fails: [EMAIL PROTECTED] bin]# ./nmblookup -B CMP0094 '*' querying * on 0.0.0.0 10.10.8.4 *00 [EMAIL PROTECTED] (Server name is homo, client is CMP0094, the servers IP is 10.10.8.4, the clients ip is 10.10.8.79) Shouldn't the above lookup answer with the clients ip? I have 2 Win2003 servers as domain members as well. Can that be the problem? I mean it seems like Samba 3.x may be the more appropriate to server Win2003 systems? Thanks! Andrey. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Rehat Samba 3.0.0 and MIT KRb 1.3.1 build problems.
Hi there Because I can't work out how to get the samba 3 SRPM to honour my preferred krb5 path, I have had to resort to installing the 1.3.1 libraries from http://www.crypto-publish.org/dist/mit-kerberos5/krb5-1.3.1.tar.gz into the directories used by the redhat RPM files (/usr/kerberos) This gets some way through the build, but fails when linking Compiling lib/smbldap.c Compiling smbd/server.c Linking bin/smbd libsmb/clikrb5.o: In function `ads_krb5_mk_req': libsmb/clikrb5.o(.text+0x2a8): undefined reference to `krb5_cc_get_principal' libads/krb5_setpw.o: In function `ads_krb5_set_password': libads/krb5_setpw.o(.text+0x130d): undefined reference to `krb5_cc_get_principal' libads/kerberos.o: In function `kerberos_kinit_password': libads/kerberos.o(.text+0x15f): undefined reference to `krb5_cc_initialize' libads/kerberos.o(.text+0x17b): undefined reference to `krb5_cc_store_cred' libads/kerberos.o(.text+0x193): undefined reference to `krb5_cc_close' libads/kerberos.o(.text+0x1dd): undefined reference to `krb5_cc_close' libads/kerberos_verify.o: In function `free_keytab': libads/kerberos_verify.o(.text+0x1d): undefined reference to `krb5_kt_close' collect2: ld returned 1 exit status make: *** [bin/smbd] Error 1 error: Bad exit status from /var/tmp/rpm-tmp.95539 (%build) I'm stuck. 1. I can't successfully install krb 1.3.1 RPMs (lots of changes to the RPM contents - see other mails) 2. Samba doesn't work properly against a 2003 AD server with the 1.2.x krb libs present on redhat systems (fix is to use 1.3.1 krb libs) 3. The --with-krb5= entry in the spec file is either ignored in the configure script, or it prefers the system krb5 libs 4. When I install krb 1.3.1 on top of the system krb 1.2.4, samba wont build (see above) Heelp. Is there a way I can let samba use system krb5 libs, but maybe compile and install heimdal 0.6 somewhere to be linked ??? Gavin Davenport -Original Message- From: Gavin Davenport [mailto:[EMAIL PROTECTED] Sent: 09 October 2003 09:44 To: [EMAIL PROTECTED] Subject: RPM build not honouring contents of SPEC file. Hi there (redhat 7.1 OS, Samba 3.0.0, against 2003 ADS server) I built the MIT kerberos libraries from using ./configure --prefix/usr/local/kerberos --exec-prefix=/usr/local/kerberos I now have these in /usr/local/kerberos. I set the--with-krb5 in the spec file: --with-libsmbclient \ --with-krb5=/usr/local/kerberos \ --with-ads \ --with-ldap then [EMAIL PROTECTED] SPECS]# rpmbuild -bb samba3.spec snip + '[' '!' -f configure ']' + CFLAGS=-O2 -march=i386 -mcpu=i686 + ./configure --prefix=/usr --localstatedir=/var --with-configdir=/etc/samba - -with-privatedir=/etc/samba --with-fhs --with-quotas --with-smbmount --with- pam --with-pam_smbpass --with-syslog --with-utmp --with-sambabook=/usr/share /swat/using_samba --with-swatdir=/usr/share/swat --with-libsmbclient --with- krb5=/usr/local/kerberos --with-ads --with-ldap !!gets it right here!!snip checking whether LDAP support is used... yes checking for Active Directory and krb5 support... yes !!then looks in the wrong place!! checking for krb5-config... /usr/kerberos/bin/krb5-config checking for working krb5-config... yes checking krb5.h usability... yes checking krb5.h presence... yes checking for krb5.h... yes checking gssapi.h usability... no checking gssapi.h presence... no checking for gssapi.h... no checking gssapi/gssapi_generic.h usability... yes checking gssapi/gssapi_generic.h presence... yes checking for gssapi/gssapi_generic.h... yes checking gssapi/gssapi.h usability... yes checking gssapi/gssapi.h presence... yes checking for gssapi/gssapi.h... yes checking com_err.h usability... yes checking com_err.h presence... yes checking for com_err.h... yes snip checking whether Active Directory and krb5 support is used... yes Why is it doing this ?? I can go and change the configure script to get it built - but I thought I'd let someone know. Am I doing it wrong ?? Gavin Davenport -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Error with adding PC to Samba-Domain
Hello, I installed the latest Samba-RPM for RH9 (3.0.0.-02 AFAIK). The setup is, that Samba runs as PDC, but my problem is, that Samba cannot add the computer to the PDC automatically, if I start the add user script manually, all is well, and I can join the domain, otherweise an error box pops up. Is this a known issue? And if yes: Is there a known solution? :-) TIA. Shalom F. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] NT4-Samba Migration Test Results
On Thu, 9 Oct 2003, Ganguly, Sapan wrote: John, Thank you very much, that has filled in a few gaps but I have one more question. Once I've used pdbedit to migrate everything to an LDAP backend how should the scripts part of my smb.conf look then? The scripts need to be appropriate for the backend database. The scripts needed to support the Samba3 LDAP schema are included in the ~samba/examples/LDAP directory. You will most likely need to modify them for your platform. OS Platform vendors (eg: SuSE) ship their product with highly customized scripts already in place. It may be worth considering use of a commercial product so as to avoid the necessity of solving the problem of getting all of this to work. On the other hand, making it work by yourself can be a valuable learning experience. You see, the way I did it was to set up my LDAP database first, then setup Samba and put the scripts from smbldap-tools into my smb.conf. I then ran You should consider the complexity of what you are trying to do. I believe in the KISS (Keep It Surprisingly Simple) approach to building a complex network. You have created an environment in which you need to master Samba-3, LDAP and the interaction of MS Windows protocols with them - all in one big chunk. My approach is simply to make the migration to the least complex environment possible. Instead of migrating NT4 directly to Samba-3 and LDAP, why not migrate to the tdbsam backend. Then when you have completed the migration and are happy with the configuration migrate tdbsam to LDAP. That final migration step is relatively simple, as shown by the use of pdbedit. 'net rpc vampire' and that took everything across, all the users, groups, and computers went into the database. The only problem was that the most groups were empty, in fact the only group that is populated is Domain Users. That sounds to me as if your script for adding uses to groups was defective. Note however, that Samba-3 does NOT support nested groups. That is a feature we hope to add some time later. We have a lot of groups on our site, each time a new project is started we create a new group and put the team members in it, we have hundreds!! I did contemplate putting people back into their groups by hand and I'll have to do it if that's the only way but I suspect I'm just using a script wrongly or just not using the right scriptis there even a script for this? You probably need to adjust and reconfigure your NT Group architecture anyhow. Given that Samba-3 is not Windows NT4 or 200x, it is understandable that trade-offs were made in the design. This means that to some extent it is impossible to avoid manual reconfiguration. So before I start again and do it your way I'd just like to know the answer to that last little bit because although your method will give me a complete and correct initial database, when my administrators add users and groups to the system via NT's UserManager I suspect I will have the same problem. Use of the NT4 Domain User Manager should work fine. If it does not then your scripts are the logical suspects. You can use the debug level to diagnose what instructions samba is receiving and how they are being executed. Oh, one more thing, the passwords don't seem to go across either, next to sambaNTPassword and sambaLMPassword I get XXX. This may be solved if I do Your scripts are suspect. I ran two workshops in Switzerland recently, both migrated an NT4 server to Samba-3 with a tdbsam backend and both migrated flawlessly with full recovery of the passwords. things your way too, but this may also be a problem for administrators when adding users via UserManager when I convert back to an LDAP backendhmm...a few more questions have come up in my mind, but I'll save them for later...after I have re-read the documentation. Anyway, in the short term I can just add the hashes to an LDIF from a 'net rpc samdump' right? Why do it this way? Fix your scripts instead. That way you only need to spend your energy once. I really appreciate your help so far but I just have to iron these few things out, I can't really present this solution to a technical director just yet as I don't have it straight in my own head. Right! I promise I have read ALL of the relevant parts of the HOWTO collection but for someone like me who is going straight from NT4 to Samba+LDAP you kind of have to piece things together from different parts of the documentation which is why I offered to write a complete HOWTO for this specific task, I will have to document it all for people here anyway. Send me your HOWTO when it is done. I'll add it to the documentation. I'm going to stop now, I know I'm getting this product and support for it free, I don't want to push my luck! No way! I am billing you for my time and effort. The price I am asking you to pay is to deliver your HOWTO. - John T. Thanks a lot, Sapan -Original Message- From: John H
[Samba] Sun, Visual Numerics and DM Review invite you to a Web Seminar
Sun Visual Numerics and DM Review Present Java Based Analytics and Visualization: Driving Next Generation Business Analytics Date: Wednesday, October 22, 2003 Time: 11:00 a.m. PDT/2:00 p.m. EDT Duration: One hour Tune into Sun Microsystems' BIDW Network Series Hosted by DM Review, 3rd in a 6-part series Executives today are more challenged than ever to make quick, well informed decisions that address growing business issues and regulatory standards. As a result, more powerful and timely business analytics and visualization solutions are needed to help produce reliable results, drive confident decision-making, and gain insight into valuable business data that uncovers unforeseen trends and previously unarticulated relationships. Join experts from Sun, Visual Numerics and IDC for an enlightening and interactive 60-minute Web Seminar: - Learn from Dan Vesset, Research Manager, Analytics and Data Warehousing, IDC on the trends and market conditions driving the need for increased, more enhanced business analytics. - Hear from Phil Fraher, COO, Visual Numerics, Inc., as he discusses the advantages and enablements of leading-edge, robust analytical and visualization solutions. - Listen in as Cyrus Golkar, CxO, Business Intelligence/Data Warehouse Solutions, Sun Microsystems stresses the importance of running these mission-critical solutions on the power and adaptability of Java and supported by an industrial-strength, scalable Sun architecture. To register for this informational event visit - http://www.dmreview.com/eletters/clickReg.cfm?URLID=3516 To unsubscribe send a blank e-mail to [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: Rehat Samba 3.0.0 and MIT KRb 1.3.1 build problems.
I've just tried installing the prebuilt binary rh8_i386 RPM from: ftp://ftp.mirror.ac.uk/sites/ftp.samba.org/Binary_Packages/RedHat/RPMS/i386/ 8.0/samba-3.0.0-2_rh8.i386.rpm on my redhat 8.0 machine. It suffers the same (SMB signing) problem as one built from the SRPM:- running winbindd -i -vv got [EMAIL PROTECTED] Doing kerberos session setup signing_good: SMB signature check failed on seq 1! SMB Signature verification failed on incoming packet! scanning trusted domain list Samba 3.0.0 worked first time on the freebsd machine with heimdal 0.6. I can't for the life of me get redhat to work. Gavin Davenport -Original Message- From: Gavin Davenport [mailto:[EMAIL PROTECTED] Sent: 09 October 2003 15:38 To: [EMAIL PROTECTED] Subject: Rehat Samba 3.0.0 and MIT KRb 1.3.1 build problems. Hi there Because I can't work out how to get the samba 3 SRPM to honour my preferred krb5 path, I have had to resort to installing the 1.3.1 libraries from http://www.crypto-publish.org/dist/mit-kerberos5/krb5-1.3.1.tar.gz into the directories used by the redhat RPM files (/usr/kerberos) This gets some way through the build, but fails when linking Compiling lib/smbldap.c Compiling smbd/server.c Linking bin/smbd libsmb/clikrb5.o: In function `ads_krb5_mk_req': libsmb/clikrb5.o(.text+0x2a8): undefined reference to `krb5_cc_get_principal' libads/krb5_setpw.o: In function `ads_krb5_set_password': libads/krb5_setpw.o(.text+0x130d): undefined reference to `krb5_cc_get_principal' libads/kerberos.o: In function `kerberos_kinit_password': libads/kerberos.o(.text+0x15f): undefined reference to `krb5_cc_initialize' libads/kerberos.o(.text+0x17b): undefined reference to `krb5_cc_store_cred' libads/kerberos.o(.text+0x193): undefined reference to `krb5_cc_close' libads/kerberos.o(.text+0x1dd): undefined reference to `krb5_cc_close' libads/kerberos_verify.o: In function `free_keytab': libads/kerberos_verify.o(.text+0x1d): undefined reference to `krb5_kt_close' collect2: ld returned 1 exit status make: *** [bin/smbd] Error 1 error: Bad exit status from /var/tmp/rpm-tmp.95539 (%build) I'm stuck. 1. I can't successfully install krb 1.3.1 RPMs (lots of changes to the RPM contents - see other mails) 2. Samba doesn't work properly against a 2003 AD server with the 1.2.x krb libs present on redhat systems (fix is to use 1.3.1 krb libs) 3. The --with-krb5= entry in the spec file is either ignored in the configure script, or it prefers the system krb5 libs 4. When I install krb 1.3.1 on top of the system krb 1.2.4, samba wont build (see above) Heelp. Is there a way I can let samba use system krb5 libs, but maybe compile and install heimdal 0.6 somewhere to be linked ??? Gavin Davenport -Original Message- From: Gavin Davenport [mailto:[EMAIL PROTECTED] Sent: 09 October 2003 09:44 To: [EMAIL PROTECTED] Subject: RPM build not honouring contents of SPEC file. Hi there (redhat 7.1 OS, Samba 3.0.0, against 2003 ADS server) I built the MIT kerberos libraries from using ./configure --prefix/usr/local/kerberos --exec-prefix=/usr/local/kerberos I now have these in /usr/local/kerberos. I set the--with-krb5 in the spec file: --with-libsmbclient \ --with-krb5=/usr/local/kerberos \ --with-ads \ --with-ldap then [EMAIL PROTECTED] SPECS]# rpmbuild -bb samba3.spec snip + '[' '!' -f configure ']' + CFLAGS=-O2 -march=i386 -mcpu=i686 + ./configure --prefix=/usr --localstatedir=/var --with-configdir=/etc/samba - -with-privatedir=/etc/samba --with-fhs --with-quotas --with-smbmount --with- pam --with-pam_smbpass --with-syslog --with-utmp --with-sambabook=/usr/share /swat/using_samba --with-swatdir=/usr/share/swat --with-libsmbclient --with- krb5=/usr/local/kerberos --with-ads --with-ldap !!gets it right here!!snip checking whether LDAP support is used... yes checking for Active Directory and krb5 support... yes !!then looks in the wrong place!! checking for krb5-config... /usr/kerberos/bin/krb5-config checking for working krb5-config... yes checking krb5.h usability... yes checking krb5.h presence... yes checking for krb5.h... yes checking gssapi.h usability... no checking gssapi.h presence... no checking for gssapi.h... no checking gssapi/gssapi_generic.h usability... yes checking gssapi/gssapi_generic.h presence... yes checking for gssapi/gssapi_generic.h... yes checking gssapi/gssapi.h usability... yes checking gssapi/gssapi.h presence... yes checking for gssapi/gssapi.h... yes checking com_err.h usability... yes checking com_err.h presence... yes checking for com_err.h... yes snip checking whether Active Directory and krb5 support is used... yes Why is it doing this ?? I can go and change the configure script to get it built - but I thought I'd let someone know. Am I doing it wrong ?? Gavin Davenport -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Error
Hello, samba. smbclient -L //192.168.2.55 Conversion from UCS-2LE to CP850 not supported Conversion from UTF8 to CP850 not supported Conversion from ASCII to CP850 not supported Conversion from CP850 to UCS-2LE not supported Conversion from CP850 to UTF8 not supported Conversion from CP850 to ASCII not supported Conversion from CP850 to UTF8 not supported Conversion from UTF8 to CP850 not supported added interface ip=192.168.2.55 bcast=192.168.2.255 nmask=255.255.255.0 read_socket_with_timeout: timeout read. read error = Connection reset by peer. protocol negotiation failed What trouble is it? --- Best Regards, Pechurkin Viktor Network Administrator [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] wbinfo -t fails with W2K3 ADS as PDC
Hello all, I am attempting to set up Squid and have the authentication occur onto a Windows 2003 ADS server (enterprise edition- if it matters), hostname W2003. I have followed instructions listed at: http://itmanagers.net/Documents/File/walkthroughs/[EMAIL PROTECTED]/Squid+and+Samba+3+-+Walkthrough.html and have spent numerous hours(+15) attempting this. However, I can't seem to get past the authentication part from the box (hostname: CALEB) that will run run squid. Here are the details: Samba 3.0.0 on RH9 Windows 2003 Enterprise Server on console2, wbinfo -t spits out: checking the trust secret via RPC calls failed error code was NT_STATUS_UNSUCCESSFUL (0xc001) Could not check secret on console1, I run winbindd -S -i -F -d 8 -Y which gives plenty of output about its ability to communication with the ADS. signing_good: SMB signature check failed on seq 1! SMB Signature verification failed on incoming packet! failed kerberos session setup with NT_STATUS_OK anonymous connection attempt to W2003 from CALEB failed anonymous session setup with NT_STATUS_OK trusted_domains: Could not open a connection to BUGS.EXAMPLE.COM for PIPE_NETLOGON (NT_STATUS_UNSUCCESSFUL) SMB signature check? failed kerberos session setup with NT_STATUS_OK Huh? Thanks, Dave Augustus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] dynamic iptables and iproute2
hello everybody, I am trying to develop a windows friendly firewall/ipsec_tunnel_endpoint. Samba(my best compliments to the developers for their very professional work) can help me in two major features. 1) I want to write an open source a daemon that dynamically sets iptables and traffic shaping user profiles based on the netbios name(still I have some problems in undestanding all the netbios naming service features and samba architecture) I was looking for a method to have updated infos about all clients logon/logoff in a possibly subnetted intranet deploying various windows flavours with naming facilities raging from all broadcast to a complete WINS architecture. Browsing samba documentation I ended up with a tentative system architecture based just on nmbd and the wins hook mechanism. I need to teach nmbd about the netbios naming facilities on the intranet (the windows WINS servers on the net), maybe nmbd itself should be act as a WINS server; and I need it to give me logon/logoff events (by wins hook or by polling it using smblookup on the localhost). Once I have a reliable and updated netbios-ip map of all workstations, the daemon will do the rest. Here my starting smb.conf dummy file: [global] #server string = Samba Server syslog only = Yes name resolve order = wins bcast lmhosts host max ttl = 259201 ?? # may I set this to very low to have a fresh map ? max wins ttl = 518401 ?? # may I set this to very low to have a fresh map ? min wins ttl = 21601 ?? # may I set this to very low to have a fresh map ? preferred master = ?? # do I need this ? dns proxy = No wins proxy = Yes wins server = ?? wins support = Yes wins hook = /bin/true # a program to feed the daemon with users map wins partners = ?? # WINS server nmbd will poll lock directory = /var/locks pid directory = /var/locks remote announce = ?? remote browse sync = ?? I saw that kill -HUP nmbd dumps a netbios map, can I use this in order to have an occasional refresh of the users map (maybe it is not healty for nmbd)? do I need smbd also ? why I haven't found a similar project on freshmeat (maybe it can't work and I'm not aware why)? do you think I'm just a fool (or idiot ;)? would it be better just to use your db_library and have direct access to the info stored by nmbd? should I forget nmbd and just query the net by smblookup(very ugly net flow drawback)? // point number 2 refers to the ipsec endpoint; the nmbd conf(if nmbd is itself a master browser or a wins server) should allow clients from one intranet to browse clients on the remote one. This subject is fairly more investigated on the internet forums; I want just that my final solution would allow both point n.1 and 2 go toghether without conflicts and thats why I'm explaining it. thanks to anyone for any help would give me. michele -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Not able to invoke swat
On Thu, 9 Oct 2003, Prasath Chandrasekaran wrote: Hi I have configured samba (version 2.2.7a) on Linux 9. Now I am facing a problem like I am able to invoke the swat in the local machine (http://localhost:901 http://localhost:901/ ), But I am not able to invoke the swat from other machine. Ok. Have you configured /etc/xinetd.d/samba to allow connections from outside your machine? - John T. Let us consider Localhost name is moon (linux machine) Another machine is mars (Win 2k) I am able to invoke swat from http://moon:901 http://moon:901/ but I am not able to invoke from mars. If I put http://moon:901 http://moon:901/ from the mars web browser I am getting the error page cannot be displayed What could be the problem / solution Any one can help me in this regards Thanks in Advance Prasath C -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] No NT domain controller is available problem
Audrey, How have you configured WINS? Have you read the Samba-HOWTO-Collection.pdf? You might benefit from reading chapter 9. Cheers, John T. On Wed, 8 Oct 2003, Andrey Oleinik wrote: Hi all, I have samba server 2.2.8a to act as a PDC on a mixed WinXP/Win2k/WinNT network. I joined all my workstations to the domain with no problem... And users can login into the domain and access their folders/printers, BUT!!! Every now and then they cannot log in getting error message that domain controller cannot be found I'm trying to track the problem down :-) When I went thru the DIAGNOSIS.TXT, test #5 fails: [EMAIL PROTECTED] bin]# ./nmblookup -B CMP0094 '*' querying * on 0.0.0.0 10.10.8.4 *00 [EMAIL PROTECTED] (Server name is homo, client is CMP0094, the servers IP is 10.10.8.4, the clients ip is 10.10.8.79) Shouldn't the above lookup answer with the clients ip? I have 2 Win2003 servers as domain members as well. Can that be the problem? I mean it seems like Samba 3.x may be the more appropriate to server Win2003 systems? Thanks! Andrey. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] deny access to subdirectory
On Thu, 9 Oct 2003, [ISO-8859-1] Janó van Deventer wrote: Hi, My Samba is up and running with shares working. I want to know if it is possible to deny access to a specific subdirectory inside a share, and if so how to do this. Please read the Samba-HOWTO-Collection.pdf, chapter 13, File, Directory and Share Access Controls. You can obtain this from: http://us1.samba.org/samba/docs/Samba-HOWTO-Collection.pdf Please let me know what is missing or unclear. Thanks. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Re[2]: [Samba] Mysql + Samba, please help....
Am Don, 2003-10-09 um 12.46 schrieb open: Hello Marco, Thursday, October 9, 2003, 2:27:51 PM, you wrote: MR Am Don, 2003-10-09 um 12.14 schrieb open: Hi Guruz, sorry for the bad English and the stupid question... I configure samba-3.0 with such options ./configure --prefix=/usr/local/samba --with-expsam=xml,mysql --with-pam --with-pam_smbpass after install i try ./pdbedit -L and i get the following error No builtin nor plugin backend for mysqlsam found Loading mysqlsam failed! my config file .. passdb backend = mysqlsam ;passdb backend = plugin:/usr/local/samba/lib/pdb_mysql.so:mysql ;passdb backend = mysql:mysql MR As i see you should use this entry instead of passdb backend = mysqlsam i try it but result was the same that funny, but the documentation and exemple say that passdb backend = plugin:/usr/local/samba/lib/pdb_mysql.so:mysql but no result - the same error. Did you also try: passdb backend = mysql:sql ? mysql:mysql host = localhost mysql:mysql user = root mysql:mysql password = alexander mysql:mysql database = samba i try many variants but get the same error No builtin nor plugin backend for mysqlsam found Loading mysqlsam failed! Any idea please help! Openkin Alexandr. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] No NT domain controller is available problem
John, I tried to configure my Samba server to run WINS on it. And it didn't work. I mean I added wins support = yes line into my config file, restarted Samba, and WINS didn't work. I was getting wins_srv_died(): Could not mark WINS server 127.0.0.1 down. error messages... I run WINS service on a NT box and made Samba to use that server as WINS server. All those things had been done before I started testing names resolution on my Linux server. I mean with the WINS things setup the way Samba wants it I still cannot get test # 5 passed (using a client name like cmp0068, using client's IP address it works) and my users still cannot find the domain controller... . Sure enough if I add an entry for the client into hosts file on the server, the test 5 gets passed... But that is not the way I want things to work :-))) BTW, I don't have firewall running on my linux box. I appreciate any ideas/thoughts you guys might have regarding this :-) Thanks a lot, Andrey. -Original Message- From: John H Terpstra [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 8:13 AM To: Andrey Oleinik Cc: [EMAIL PROTECTED] Subject: Re: [Samba] No NT domain controller is available problem Audrey, How have you configured WINS? Have you read the Samba-HOWTO-Collection.pdf? You might benefit from reading chapter 9. Cheers, John T. On Wed, 8 Oct 2003, Andrey Oleinik wrote: Hi all, I have samba server 2.2.8a to act as a PDC on a mixed WinXP/Win2k/WinNT network. I joined all my workstations to the domain with no problem... And users can login into the domain and access their folders/printers, BUT!!! Every now and then they cannot log in getting error message that domain controller cannot be found I'm trying to track the problem down :-) When I went thru the DIAGNOSIS.TXT, test #5 fails: [EMAIL PROTECTED] bin]# ./nmblookup -B CMP0094 '*' querying * on 0.0.0.0 10.10.8.4 *00 [EMAIL PROTECTED] (Server name is homo, client is CMP0094, the servers IP is 10.10.8.4, the clients ip is 10.10.8.79) Shouldn't the above lookup answer with the clients ip? I have 2 Win2003 servers as domain members as well. Can that be the problem? I mean it seems like Samba 3.x may be the more appropriate to server Win2003 systems? Thanks! Andrey. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] File deletion problem with samba 2.2.8a and 3.0.0
Hi everybody, I'm having problems with a samba PDC (both 2.2.8a and 3.0.0). I have 2 shares (one of them is public - ie. world writable -, the other one is the homes shares). when I try to delete a file from any of those, the file is deleted properly by windows explorer, but it then pops up a message box with the message cannot find the specified file. The same kind of error happens when I try to copy a file to the share. the file is created with a size of 0 and an error message appears before the file is filled with data. I checked the filesystem permissions and samba permissions on the file. drwxrwsrwx2 nobody nobody 80 Oct 9 18:02 . drwxrwxrwt 35 root root 1784 Oct 9 17:41 .. -rw-rw-rw-1 pinchartl nobody 0 Oct 9 18:02 delete.me [public] comment = Temporary file space path = /tmp/public read only = no public = yes only guest = yes create mode = 0666 directory mode = 0777 I checked the samba logs, and everything is normal. I raised the debug level, and found out that windows explorer sends an SMBunlink message, which unlinks the file, and then sends a SMBtrans2 message for the same file, which returns NT_STATUS_OBJECT_NAME_NOT_FOUND (I suppose it's normal, as the file has been deleted). Is that normal ? I'm not very familiar with the SMB protocol, so maybe I missed something. I'm running out of ideas. Any help will be welcome. Laurent Pinchart -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] group become member of a group?
Hallo list, we are running Samba 2.2.x as PDC for a WinNT/Win2000 - Domain. Our users (of course) are members of certain groups. Now my question: is it possible for a group to become member of a group. Its much less work to add 3 groups to a group than 300 users. Marco Lechner Department of Geography University Heidelberg [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Release date for Samba 3.0.1?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Is there a tentative release date for 3.0.1 yet? I'd like to go live with an official release as opposed to hand patching all the little fixes I've seen on the mailing list (i.e., sorry about that; here's a patch, will be in 3.0.1). Thank you for all your work! - -Tom Dickson InoStor, Inc. http://www.inostor.com -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2-nr2 (Windows 2000) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/hYgO2dxAfYNwANIRAoU6AJ42+yCinDbicCYNYJMHVscKpzj0hQCeMQ0y XpTkme6CCzxaUKPrWWqDdKY= =lLx8 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] From Samba 2.2.3 to Samba 3.0
Hello, I used Samba 2.2.3 on a Linux Red Hat 7.3 platform (server and client). I've just moved to Samba 3.0 by updating the rpm with the binary package Samba 3.0 for Red Hat 7.3. My smb.conf wasn't modified during the upgrade of Samba (no encrypt passwd). Then, Samba doesn't work anymore. I can launch smbd but I can't connect by smbclient from any client (even from the server). Are there any differences between 2.2.3 and 3.0 that can explain this ? What should I do to recover Samba ? Thanks for your help -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba-3.0.0, LPRng-3.8.21 and printer queues - Jerry?
Assar, Here are my smb.conf entries for LPRng 3.8.21: lpq command = /usr/local/bin/lpstat %p print command = /usr/local/bin/lpr -U%m -P%p -J'%J' -r %s lprm command = /usr/local/bin/lprm -P%p %j lppause command = /usr/local/sbin/lpc hold %p %j lpresume command = /usr/local/sbin/lpc release %p %j queuepause command = /usr/local/sbin/lpc stop %p queueresume command = /usr/local/sbin/lpc start %p I looked at the lpr options (lpr --help) and -b isn't one that's listed. -Fb is the only instance where b is used. Is the %s intentional? Run checkpc -V -f to have LPRng test/fix dir's and permissions. Run testparm to have samba do the same. Jim -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 6:27 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: [Samba] Samba-3.0.0, LPRng-3.8.21 and printer queues - Jerry? I have problem with finding my printerjobs in sambas printer queue, I do se the job while it is in /var/spool/samba, but not when the job has been spooled to LPRngs spool. smb.conf [Global] printing = lprng lpq command = /usr/server/LPRng-3.8.21/bin/lpq -P%p print command = /usr/server/LPRng-3.8.21/bin/lpr -b -P%p %s ;rm %s The printing job shows up in the LPRng queue e.i. /usr/server/LPRng-3.8.21/bin/lpq -Pprinter shows the job. But from log.smbd: Running the command `/usr/server/LPRng-3.8.21/bin/lpq -Pprinter' gave 0 Can anyone help me with this. (CUPS is not a solution for me) Because of your last sentence I thought I should add, that I'm seeing the same problem (print jobs queued in the print subsystem not showing up for samba) _WITH_ cups in samba 3.0.0. ~ Daniel --- This message is the property of Time Inc. or its affiliates. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Windows 2K EFS interface in Samba?
Hi, I like to figure out if there is a way for Samba to provide similar functions in encrypting files base on window's client interface. Has anyone done any study in this area? Thanks Alan [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Moving SAMBA PDC to another machine.
I am sorry if this has been covered before, my searches have found variations in results. I am using a Redhat 9 build with the Samba 2.2.7a RPM from Redhat. I am planning to move all of the services from this machine to another Redhat 9 machine. It will take the IP address and hostname of the original machine. What I need to make sure is if I simply backup the files in /etc/samba (smb.conf, lmhosts, secrets.tdb, smbpasswd, smbusers) and /var/cache/samba (the remaining .tdb files and .dat files) and copy them to the new machine will my domain be functional on the new machine? I do have a /etc/MACHINE.SID which I have kept around from previous samba versions, but I am assuming that this is no longer used. The old machine will be turned on again, but not the samba services, so no conflicts of name should arise. I am hoping that this upgrade will be a fairly simple file copy to the new machine. Any feedback and previous experience would be greatly appreciated. Thanks, Marc -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba time server
Hello, I'm trying to set up a Linux, rh9, webserver with samba support, so that user's can make the pages on their windows boxes and drop them right on the server. I'm having one problem, when the user connects Dreamweaver, MX version, gives an error about can not determine the server time. I've added: time server = yes to the global section of my smb.conf file, but this didn't solve the issue. I'm not even sure if this is an appropriate question for this list, so i'm just throwing it out there. Any ideas? Thanks. Dave. The best thing to hit the internet in years - Juno SpeedBand! Surf the web up to FIVE TIMES FASTER! Only $14.95/ month - visit www.juno.com to sign up today! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Understanding the role of DMB/LMB on a net that has a WINS server
If I have a client that wants to enumerate and access shares on a subnet, and that client knows the IP of the WINS server, is there any need for the client to use the browsing services of a DMB or LMB? What is the order of operations of the client? Here is what I imagine to be the case: 1. client asks LMB for a list of all available shares 2. LMB sends client the list of all known shares 3. for each name in the list of known shares, client asks WINS server for the server's IP address 4. WINS server replies with each name resolution Is there a document which describes the protocol? I have read RFC 1001 and 1002 but they don't give a high-level procedure. I think the process is also slightly different for M and H hosts. If there is a WINS server, does there still have to be an LMB and DMB? If there is an LMB, why does the client need to access the WINS server directly? Why not just have the LMB do the resolution? It would result in less traffic. Thanks, Dave -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] newbie question concerning samba 3.0 and nt domains
I'm very new to the use of samba, I have samba 3.0 configured and running on a slackware 9.1 machine. I have also configured and have running winbind, but I'm confused on how the domain permissions gets set on the samba shares. I have the smb.conf security = domain, and wbinfo successfully grabs the network username and groups but how do I configure the permissions for the NT users and groups. This machine is not a PDC but is a domain member. I have probably confused everyone, but any help would be appreciated... thanks, Brandon -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Files corrupt
Hi, I'm running a Gateway dual PIII 600 MHz Red Hat Linux 7.3 kernel 2.4.18 i686 file server running netatalk 1.6.3 and samba 2.2.5-1.i386. I have Macs running OS 9.1 and a Windows XP. On the windows machines and my linux box, some files written in microsoft word for mac 98 show up corrupt, some don't. But the same files on the macs show up fine. Likewise, some files on the macs show up corrupt but show up fine on the windows machine. I don't know what's going on. Please help if you can. Thanks David Murphy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] extremely high %CPU and TIME
Looking around on the net, I saw that someone else had a similar issue
when they were running all of their users behind terminal server. Our
users are all behind two NAT'd firewalls.
Is it possible that there is some confusion going on? should I stop the
service and remove locking.tdb? (that's what 14 references right?)
Thanks.
tom
On Wed, 8 Oct 2003, Tom Ryan wrote:
2.4.20-19.8 on redhat 8
strace reports
fcntl64(14, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=628, len=1},
0xb150) = 0
fcntl64(14, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=632, len=1},
0xb150) = 0
over and over again (with different start points)
Tom
On Wed, 8 Oct 2003, Jeremy Allison wrote:
On Wed, Oct 08, 2003 at 02:29:31PM -0400, Tom Ryan wrote:
I have a samba box that has around 70 users on it at any given time.
When I run ps axu there are certain smbd processes (and usually always
by the same login) that look like
username 26126 39.4 0.1 6652 2912 ?S13:44 17:12 smbd -D
any ideas why CPU is running at 39.4??
What OS ? Try doing an strace on it to see what the process is doing.
Jeremy.
--
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator Fax: 856-969-7900
Rutgers School of Law - Camden
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] No NT domain controller is available problem
On Thu, 9 Oct 2003, Andrey Oleinik wrote: John, I tried to configure my Samba server to run WINS on it. And it didn't work. I mean I added wins support = yes line into my config file, restarted Samba, and WINS didn't work. I was getting wins_srv_died(): Could not mark WINS server 127.0.0.1 down. error messages... This is a problem that you must resolve. It is most likely the cause of your current problems also. I run WINS service on a NT box and made Samba to use that server as WINS server. All those things had been done before I started testing names resolution on my Linux server. I mean with the WINS things setup the way Samba wants it I still cannot get test # 5 passed (using a client name like cmp0068, using client's IP address it works) and my users still cannot find the domain controller... . Sure enough if I add an entry for the client into hosts file on the server, the test 5 gets passed... But that is not the way I want things to work :-))) That means that Samba is not able to use your WINS server either. BTW, I don't have firewall running on my linux box. I appreciate any ideas/thoughts you guys might have regarding this :-) How are you starting Samba's nmbd and smbd programs? Please email me your smb.conf, your samba start-up script, and the nmbd log file from a failed start-up of smb.conf configured as a WINS server. - John T. -Original Message- From: John H Terpstra [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 8:13 AM To: Andrey Oleinik Cc: [EMAIL PROTECTED] Subject: Re: [Samba] No NT domain controller is available problem Audrey, How have you configured WINS? Have you read the Samba-HOWTO-Collection.pdf? You might benefit from reading chapter 9. Cheers, John T. On Wed, 8 Oct 2003, Andrey Oleinik wrote: Hi all, I have samba server 2.2.8a to act as a PDC on a mixed WinXP/Win2k/WinNT network. I joined all my workstations to the domain with no problem... And users can login into the domain and access their folders/printers, BUT!!! Every now and then they cannot log in getting error message that domain controller cannot be found I'm trying to track the problem down :-) When I went thru the DIAGNOSIS.TXT, test #5 fails: [EMAIL PROTECTED] bin]# ./nmblookup -B CMP0094 '*' querying * on 0.0.0.0 10.10.8.4 *00 [EMAIL PROTECTED] (Server name is homo, client is CMP0094, the servers IP is 10.10.8.4, the clients ip is 10.10.8.79) Shouldn't the above lookup answer with the clients ip? I have 2 Win2003 servers as domain members as well. Can that be the problem? I mean it seems like Samba 3.x may be the more appropriate to server Win2003 systems? Thanks! Andrey. -- John H Terpstra Email: [EMAIL PROTECTED] -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] having problems
On Thu, 9 Oct 2003, tony wrote: i can see my linux computer from windows but i cannot access it..i get the erro of network path not found...i used the net use and net view command and still get the same...i can access all windows computers on my network from the linux computer. any suggestions... Have you read chapter 10 of the Samba-3 Samba-HOWTO-Collection.pdf? It might help you! :) - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Nortel VPN
Any issue with Samba and Nortel VPN client? I just installed the latest Nortel VPN client (4_65.30 version) and now on my local interface for the LAN network I am being told by users that they cannot connect to a drive via Samba. Any help would be appreciated. Thanks, Michael -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can't compile VFS module 'recycle.c' in samba 2.2.8 on OpenBSD 3.2
Hello samba, I have OpenBSD 3.2 box with samba 2.2.8 installed. When I try to compile VFS modute recycle I get # make: don't know how to make recycle/recycle.so. Stop in /usr/samba/samba-2.2.8/examples/VFS. Is there are any way to compile this module? May be any patch for samba or OpenBSD? -- Best regards, Nikolay mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Understanding the role of DMB/LMB on a net that has a WINS server
On Thu, 9 Oct 2003, David Wuertele wrote: If I have a client that wants to enumerate and access shares on a subnet, and that client knows the IP of the WINS server, is there any need for the client to use the browsing services of a DMB or LMB? What is the order of operations of the client? Here is what I imagine to be the case: 1. client asks LMB for a list of all available shares 2. LMB sends client the list of all known shares 3. for each name in the list of known shares, client asks WINS server for the server's IP address 4. WINS server replies with each name resolution Is there a document which describes the protocol? I have read RFC 1001 and 1002 but they don't give a high-level procedure. I think the process is also slightly different for M and H hosts. If there is a WINS server, does there still have to be an LMB and DMB? If there is an LMB, why does the client need to access the WINS server directly? Why not just have the LMB do the resolution? It would result in less traffic. David, Have you read chapter 10 of the Samba-HOWTO-Collection.pdf? You can obtain this from http://us1.samba.org/samba/docs/Samba-HOWTO-Collection.pdf. If you prefer a printed document you can order from Amazon.Com The Official Samba-3 HOWTO and Reference Guide. If this document does not clearly answer your questions please let me know so I can fix it. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] newbie question concerning samba 3.0 and nt domains
On Thu, 9 Oct 2003, Storment, Brandon wrote: I'm very new to the use of samba, I have samba 3.0 configured and running on a slackware 9.1 machine. I have also configured and have running winbind, but I'm confused on how the domain permissions gets set on the samba shares. I have the smb.conf security = domain, and wbinfo successfully grabs the network username and groups but how do I configure the permissions for the NT users and groups. This machine is not a PDC but is a domain member. I have probably confused everyone, but any help would be appreciated... Have you read the Samba-HOWTO-Collection.pdf? http://us1.samba.org/samba/docs/Samba-HOWTO-Collection.pdf See chapter 13. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba time server
It is easy to check if time server is running ok. just go to a DOS Prompt on your Windows box, type net time \\server\ /set after a couple seconds, it should ask you for a Yes or No say y enter and your local time should adjust in within about 5 seconds. Good luck Tom On Thu, 2003-10-09 at 06:18, [EMAIL PROTECTED] wrote: Hello, I'm trying to set up a Linux, rh9, webserver with samba support, so that user's can make the pages on their windows boxes and drop them right on the server. I'm having one problem, when the user connects Dreamweaver, MX version, gives an error about can not determine the server time. I've added: time server = yes to the global section of my smb.conf file, but this didn't solve the issue. I'm not even sure if this is an appropriate question for this list, so i'm just throwing it out there. Any ideas? Thanks. Dave. The best thing to hit the internet in years - Juno SpeedBand! Surf the web up to FIVE TIMES FASTER! Only $14.95/ month - visit www.juno.com to sign up today! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Installing and configuring samba on AIX 5.2 and HPUX
Hello list, I need some help on obtaining samba installation packages and installing/configuring them on AIX 5.2 and HPUX 11i. I like to mention that there are no binary packages for AIX (http://us4.samba.org/samba/ftp/Binary_Packages/AIX/) and HPUX binaries seems to be corrupt, as I can't unzip them. I also like to mention that I have no CC or GCC installed on neither of my systems. Thanks, Aleksey __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] higher ascii characaters in smbusers, success!
Since you seem to be good with challenges, would you care to try one? The short version is that I can't automount a share on a windows server from samba if the machine name has a hyphen in it or if the password has a space in it. This is from a message I posted previously but got no response to: i seem to be having trouble with certain characters in machine names and passwords. specifically, there is a hyphen in on of the server's names. this entry in the fstab file fails to connect with the following error: # mount /root/it-blackbox/c\$/ Password: Anonymous login successful 18867: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed the line from fstab is: //it-blackbox/c$ /root/it-blackbox/c$ smbfs noauto,credentials=/root/.smbauth 0 0 the .smbauth file contents are: username = administrator workgroup = mcstamp this work correctly for another share on a machine without the hyphen in the name on the same domain. the other problem i have is that the password has a space in it, and I can't seem to get the password to work using quotes or using the backslash. this forces me to do an interactive mount (yes, i know i have it set to noauto for interactive. that is because it fails the password and i have to do it manually anyway. i don't want it to sit and wait for the password during bootup.) HELP!!! -Original Message- From: torge husfeldt [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 30, 2003 04:57 To: [EMAIL PROTECTED] Subject: [Samba] higher ascii characaters in smbusers, success! Hi list, Update: originally i wanted to post a question, but in writing i thought of things that finally led me to the solution. This i wanted to share with the community in case it can help. Sorry if this is a FAQ, but I had no luck searching for it. I have a working Samba 2.2.5 installation on SuSE8.1. I have two users on a windows client called Torge (that's me) and Gaediaresis;lle (interpreted as HTML special character) You could also write Ga\elle (TeX convention), but fact is: there is a higher ascii character in the name, that i prefer not to get rid of. I have users for the same two persons on the server called: toh and: gab my smbusers file reads something like this: toh = torge gab = gaelle ga?lle I (toh=torge) can log on impeccably to the server, while my partner (gab=gaelle) is blocked. The log says: [2003/09/29 11:57:18, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'ga211lle' in passdb. Where the 211 is written in reverse graphics. Now my question is: what should i put in the place of the question mark in my smbusers file? Thanks in advance, Torge P.S.: Answer: with some cat'ing and 'ing i managed to put the exact character from the log into the smbusers and it worked. Note though that just less'ing and copying into vi with the mouse would not work. -- Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Understanding the role of DMB/LMB on a net that has a WINS server
John Have you read chapter 10 of the Samba-HOWTO-Collection.pdf? What I have already read is this: http://us2.samba.org/samba/ftp/cvs_current/docs/htmldocs/NetworkBrowsing.html It looks like they contain the same text as the PDF to which you refer. Is it safe to assume that the HTML version I read is current? John If this document does not clearly answer your questions please John let me know so I can fix it. Question 1. Section 10.2 says: To most people browsing means they can see the MS Windows and Samba servers in the Network Neighborhood, and when the computer icon for a particular server is clicked, it opens up and shows the shares and printers available on the target server. From this, I gather that browsing is the act of enumerating and resolving published share names. Therefore, a workstation that doesn't publish any shares, and just uses smbclient or smbmount to access other servers' shares, must also make use of browsing. Section 10.7.1 says: Samba facilitates browsing. The browsing is supported by nmbd and is also controlled by options in the smb.conf file. Samba can act as a local browse master for a workgroup and the ability to support domain logons and scripts is now available. I was not able to discover whether nmbd is *required* to be running on a workstation that doesn't publish any shares, and just uses smbclient or smbmount to access other servers' shares. Question 2. The closest thing I found to a description of the actual process that a client goes through in order to browse was in 10.3.2 TCP/IP without NetBios. This didn't go into any detail about the client's logic, but it did give the search order. Why this chapter is labeled without NetBios is unclear, since one of the client steps is to 3. Check the NetBios name cache. I couldn't find where it describes what a name cache is, but I guess it doesn't matter because the section that I really care about is 10.3.1 NetBIOS over TCP/IP. But 10.3.1 does not go into detail of the client's resolution process. For example: If I have a client that wants to enumerate and access shares on a subnet, and that client knows the IP of the WINS server, is there any need for the client to use the browsing services of a DMB or LMB? What is the order of operations of the client? Here is what I imagine to be the case: 1. client asks LMB for a list of all available shares 2. LMB sends client the list of all known shares 3. for each name in the list of known shares, client asks WINS server for the server's IP address 4. WINS server replies with each name resolution I can't find anything in http://us2.samba.org/samba/ftp/cvs_current/docs/htmldocs/NetworkBrowsing.html that describes what is really happening at this level. I also could not find anything that says whether LMBs or DMBs actually do name resolution. I also don't understand why we need LMBs if we can always access a DMB. I also could not find anything in this document that talked about the difference between Microsoft's B M P and H hosts. If there is a WINS server, does there still have to be an LMB and DMB? If there is an LMB, why does the client need to access the WINS server directly? Why not just have the LMB do the resolution? It would result in less traffic. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba3+Nexus+Srvtools at least strange
Hi all, Sorry for distubing you with this minor problem, but: I've configured samba3 for ldapsam and successfuly joined a WinNT Server 4.0 with on the fly account creation (I have root in LDAP). Now I'm able to manage my samba3 with user manager for domains from srvtools, but not nexus :-(. From my point of view the sadest thing is that on 9x no other application can retrive user and group information from samba3, like they did with 2.2.x. I was logged in with a root equivalent (username mapped) account, which is member of the Domain Admins group (SID ending with -512). Also as a side efect in srvmgr from srvtools I can view the shares, while in nexus I got an error). At each try I've got in the logs something like: [2003/10/09 00:01:32, 1] smbd/ipc.c:api_fd_reply(284) api_fd_reply: INVALID PIPE HANDLE: 0 Thanks in advance for any suggestion Geza Gemes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] migration from 2.2.7 to 3
Hi, I've downloaded the 3 how to pdf and am looking forward in implementing Samba 3 especially for the PDC enhancements (hopefully Samba 3 has Dfs enhancements as well). I would like a heads up from anyone as to what to do and not to do in making a successful transition (ie; diff in smbpasswd dbase, etc...). -aurf - Do you Yahoo!? The New Yahoo! Shopping - with improved product search -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Understanding the role of DMB/LMB on a net that has a WINS server
On Thu, 9 Oct 2003, David Wuertele wrote: John Have you read chapter 10 of the Samba-HOWTO-Collection.pdf? What I have already read is this: http://us2.samba.org/samba/ftp/cvs_current/docs/htmldocs/NetworkBrowsing.html It looks like they contain the same text as the PDF to which you refer. Is it safe to assume that the HTML version I read is current? Yes. John If this document does not clearly answer your questions please John let me know so I can fix it. Question 1. Section 10.2 says: To most people browsing means they can see the MS Windows and Samba servers in the Network Neighborhood, and when the computer icon for a particular server is clicked, it opens up and shows the shares and printers available on the target server. From this, I gather that browsing is the act of enumerating and resolving published share names. Therefore, a workstation that doesn't publish any shares, and just uses smbclient or smbmount to access other servers' shares, must also make use of browsing. Correct. Section 10.7.1 says: Samba facilitates browsing. The browsing is supported by nmbd and is also controlled by options in the smb.conf file. Samba can act as a local browse master for a workgroup and the ability to support domain logons and scripts is now available. I was not able to discover whether nmbd is *required* to be running on a workstation that doesn't publish any shares, and just uses smbclient or smbmount to access other servers' shares. Yes, nmbd is required - it provides the name resolution services for smbd. Question 2. The closest thing I found to a description of the actual process that a client goes through in order to browse was in 10.3.2 TCP/IP without NetBios. This didn't go into any detail about the client's logic, but it did give the search order. Why this chapter is labeled without NetBios is unclear, since one of the client steps is to 3. Check the NetBios name cache. I couldn't find where it describes what a name cache is, but I guess it doesn't matter because the section that I really care about is 10.3.1 NetBIOS over TCP/IP. But 10.3.1 does not go into detail of the client's resolution process. In the absence of NetBIOS over TCP/IP the sole mechanisms for name resolution are to use DNS or LDAP lookups. LDAP lookups involve DNS. This means that when NetBIOS over TCP/IP has been disabled DNS becomes the dominant factor in name resolution. For example: If I have a client that wants to enumerate and access shares on a subnet, and that client knows the IP of the WINS server, is there any need for the client to use the browsing services of a DMB or LMB? A WINS server is nothing more than a resolved for NetBIOS names to matching IP Addresses. WINS is to NetBIOS names what DNS is to fully qualified domain names. WINS has NO knowledge of what machines are available on a partciluar subnet - that is the role of the LMB. The DMB simply collates all names that have been registered with all the LMBs on the network. The DMB then updates the LMB with the names it obtained from other LMBs. What is the order of operations of the client? Here is what I imagine to be the case: 1. client asks LMB for a list of all available shares Nope! a) Client broadcasts for the LMB. Asks for an enumerated list of machines. 2. LMB sends client the list of all known shares Nope! b) Client finds from enumerated list (or from user input) a machine to connect with. c) Client will ask WINS server to provide the IP Address of that machine name. If no WINS server is present, client will broadcast to local network segment seeking the owner of that name to respond - when owner responds the client knows what IP Address the response came from. d) Client connects to the IP Address and establishes a null session (null user and null password) and asks for an enumerated list of resources. 3. for each name in the list of known shares, client asks WINS server for the server's IP address Nope! WINS servers have no knowledge of shares. Have a look at the contents of the wins.dat file on your samba server! 4. WINS server replies with each name resolution It resolves only NetBIOS names to IP Addresses. I can't find anything in http://us2.samba.org/samba/ftp/cvs_current/docs/htmldocs/NetworkBrowsing.html that describes what is really happening at this level. I also could not find anything that says whether LMBs or DMBs actually do name resolution. I also don't understand why we need LMBs if we can always access a DMB. I also could not find anything in this document that talked about the difference between Microsoft's B M P and H hosts. LMBs provide only enumerated lists of machines on the local segment and any machines that are present on remote network segments as obtained from the DMB. LMBs provide the DMB with locally registered authoritative names. WINS does name resolution, LMBs provide lists of machines only. You need both. On the
Re: [Samba] Samba3+Nexus+Srvtools at least strange
On Thu, 9 Oct 2003, [ISO-8859-2] Gémes Géza wrote: Hi all, Sorry for distubing you with this minor problem, but: I've configured samba3 for ldapsam and successfuly joined a WinNT Server 4.0 with on the fly account creation (I have root in LDAP). Now I'm able to manage my samba3 with user manager for domains from srvtools, but not nexus :-(. From my point of view the sadest thing is that on 9x no other application can retrive user and group information from samba3, like they did with 2.2.x. I was logged in with a root equivalent (username mapped) account, which is member of the Domain Admins group (SID ending with -512). Also as a side efect in srvmgr from srvtools I can view the shares, while in nexus I got an error). At each try I've got in the logs something like: [2003/10/09 00:01:32, 1] smbd/ipc.c:api_fd_reply(284) api_fd_reply: INVALID PIPE HANDLE: 0 Thanks in advance for any suggestion Please file a bug report at https://bugzilla.samba.org - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Understanding the role of DMB/LMB on a net that has a WINS server
John, thank you for your detailed answers. The roles of DMB/LMB are much more clear to me now. I also want to mention that the Samba documentation is excellent, and I learned very much from the NetworkBrowsing.html page. Kudos to you for doing a great documentation job! I have two more questions. The first: Me I was not able to discover whether nmbd is *required* to be Me running on a workstation that doesn't publish any shares, and just Me uses smbclient or smbmount to access other servers' shares. John Yes, nmbd is required - it provides the name resolution services John for smbd. But I don't have to run smbd in order to be a client, do I? In fact, I know I don't, because I can run smbclient //SOMESVR/SOMESHARE from my linux box, without that box running smbd or nmbd, and somehow the share name and server name gets resolved. So it seems to me that nmbd is *not* required to be running on a workstation that doesn't publish any shares. If that workstation will never be used to publish shares or serve as a master browser, is there any down-side to not installing nmbd? Question two: Are all types of netbios name that are listed in the table in http://ubiqx.org/cifs/Appendix-C.html resolved by a WINS server? For example, I have a windows box that responds to nmblookup like this: # nmblookup -A 192.168.0.111 Looking up status of 192.168.0.111 ABCDMEDIA 00 - M ACTIVE NOGROUP 00 - GROUP M ACTIVE ABCDMEDIA 03 - M ACTIVE ABCDMEDIA 20 - M ACTIVE NOGROUP 1e - GROUP M ACTIVE NOGROUP 1d - M ACTIVE ..__MSBROWSE__. 01 - GROUP M ACTIVE Would a WINS server store a record for each of the lines in this response? I saw mention that a WINS server only has to respond with up to 25 name resolutions per request. If a client makes a request for ABCMEDIA, and if there happens to be more than 25 different records of various ABCMEDIA services, will some of those records not get returned? Thanks again for the excellent docs, Dave -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Understanding the role of DMB/LMB on a net that has a WINS server
On Thu, 9 Oct 2003, David Wuertele wrote: John, thank you for your detailed answers. The roles of DMB/LMB are much more clear to me now. I also want to mention that the Samba documentation is excellent, and I learned very much from the NetworkBrowsing.html page. Kudos to you for doing a great documentation job! I have two more questions. The first: Me I was not able to discover whether nmbd is *required* to be Me running on a workstation that doesn't publish any shares, and just Me uses smbclient or smbmount to access other servers' shares. John Yes, nmbd is required - it provides the name resolution services John for smbd. But I don't have to run smbd in order to be a client, do I? In fact, I know I don't, because I can run smbclient //SOMESVR/SOMESHARE from my linux box, without that box running smbd or nmbd, and somehow the share name and server name gets resolved. So it seems to me that nmbd is *not* required to be running on a workstation that doesn't publish any shares. If that workstation will never be used to publish shares or serve as a master browser, is there any down-side to not installing nmbd? You do not need nmbd for smbclient, only for smbd. smbclient will use the name resolve order in your smb.conf file. Question two: Are all types of netbios name that are listed in the table in http://ubiqx.org/cifs/Appendix-C.html resolved by a WINS server? For example, I have a windows box that responds to nmblookup like this: # nmblookup -A 192.168.0.111 Looking up status of 192.168.0.111 ABCDMEDIA 00 - M ACTIVE NOGROUP 00 - GROUP M ACTIVE ABCDMEDIA 03 - M ACTIVE ABCDMEDIA 20 - M ACTIVE NOGROUP 1e - GROUP M ACTIVE NOGROUP 1d - M ACTIVE ..__MSBROWSE__. 01 - GROUP M ACTIVE Would a WINS server store a record for each of the lines in this response? I saw mention that a WINS server only has to respond with up to 25 name resolutions per request. If a client makes a request for ABCMEDIA, and if there happens to be more than 25 different records of various ABCMEDIA services, will some of those records not get returned? The limit of 24 or 25 addresses applies only to group names. Unique names will never have more than a few key registrations (typically fewer than 5). In your example ABCMEDIA looks like a server. Servers will register the type 03, 00, and 20 names. They may register a few other specially configured names but that is rare. Remember: WINS does not know anything about shares! Thanks again for the excellent docs, :) - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Nortel VPN
On Thu, 9 Oct 2003, Michael Quaack wrote: Any issue with Samba and Nortel VPN client? Ok. Why? Hmmm. :) I just installed the latest Nortel VPN client (4_65.30 version) and now on my local interface for the LAN network I am being told by users that they cannot connect to a drive via Samba. Any help would be appreciated. I am trying to imagine what your network and samba configuration are but my crystal ball is not working today. Maybe you can help me to understand the problem a little more clearly? - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] [Samba} Can't do roaming profiles (Solved)
Through much help from a guy in my local LUG I found the solution to making roaming profiles work on Win2000 (SP4). 1) You should have SP4 installed. 2) Two registry changes are needed: Use regedit and change the following two dword attributes to 0 requiresignorseal signsecurechannel 3) Run the group policy editor gpedit.msc and enable the following 4 policies under: Computer Configuration-Administrative Templates-System-Logon Do not check for ownership of Roaming Profiles Folders Add the Administrators security group to roaming users profiles Wait for remote user profile Delete cached copies of roaming profiles Create the Linux user. Create the Samba user. Logon as the user on windows, it will fail, but create the users profile dir on the Samba PDC. It will NOT create a full profile on the PDC, but will on the Win client. Copy a default profile and all the associated directories to the users profile dir on the Samba PDC. Reboot the Client to release the lock on the users local copy of ntuser.dat and login as administrator and delete the users local profile copy on the PC. Log back in as the user and the remote profile will be copied down from the samba server to the client. When logging out, the samba users profile will be updated to the PDC and then removed from the client PC. This works for me I hope it does for everyone else... Regards Doug P --- I need a little advice on finishing off a Samba PDC. I have Samba 3.0.0RC1 installed and working as a PDC on a Redhat AS 3.0 machine. It authenticates users nicely but the roaming profiles don't work. Tailing the samba log, I see the an attempt to access the users ntuser.dat file, which doesn't exist before the first logon, when logging in. The profile directory (/home/profiles/username DOES get created by samba when the user logs in. When the user logs off, there is no reference, in the log that ntuser.dat is being written with the users updated profile. In fact the ntuser.dat file is not created on the samba server. If I touch ntuser.dat in the profile directory on the samba PDC, then log in on a Win2000 client PC, I get a message saying the ntuser.dat file is not the proper format, so I know the profiles share and logon path are correct. But the profile will not update on the PDC. My Win2000 is SP2, and I tried SP4 also. I looked on the client PC and the profile is a roaming profile. Also the add user script doesn't work, I have to add the users by hand (with the same script). Here is my smb.conf file, any help is greatly appreciated... Regards and thanks for a great program! Doug P - # Global parameters [global] workgroup = TESTDOM server string = Samba Server update encrypted = Yes client lanman auth = No client plaintext auth = No log level = 4 log file = /var/log/samba.log socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u logon path = \\%L\profiles\%U logon drive = H: domain logons = Yes os level = 65 preferred master = Yes domain master = Yes dns proxy = No ldap ssl = no preload = homes [homes] comment = Home Directories path = /home/%S read only = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [software] path = /home/software read only = No [netlogon] path = /home/scripts browseable = No [profiles] path = /home/profiles read only = No writable = yes create mask = 0600 directory mask = 0700 profile acls = Yes browseable = No -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [Samba} Can't do roaming profiles (Solved)
Hi, I hope this isn't a sign of things to come when upgrading to Samba 3. Using 2.2.7, I simply omit; logon path where you have logon path = \\%L\profiles\%U Before I omitted the logon path flag, I also couldn't get roaming profiles to work. The default is what ever is defined in /etc/passwd to be your home dir location. Would you mind trying this with a clean 2K box and my omission to see if it works? I don't like doing custom client configs due to complexities in large scale client rollouts. Cloning is cool but isn't always applicable. -aurf - Do you Yahoo!? The New Yahoo! Shopping - with improved product search -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Share Bridging...?
We've got Samba 2.2.8a running on FreeBSD 4.8. This particular machine is multihomed with a recompiled kernel facilitating NAT. Our goal was to isolate our software QA lab so to keep them from spreading potential problems to our production network. This system has a single share called /data. Within /data are folders and files that are stored locally. Also in this directory are folders that are mount points. These mount points are utilized by the mount_smbfs command to mount Windows shares from the production lan with read-only access. Because the mount points are in the samba shared folder they get passed along to the isolated QA lan. I know this must sound weird, because it is, but it's working. Users and systems in the isolated lan are able to get to the locally stored/shared files on this samba server as well as get to the data on the production lan through the 'bridged' shares with read-only access. Okay, now for the problem. When an isolated lan system browses a 'bridged' share the following error message comes up on the console of the server: smb_maperror: Unmapped error 1:158 It seems that each error that is displayed has a one-to-one relationship with the number of files/folders that exist in the area of the bridged share that was just accessed. For example; through windows explorer an isolated user opens a 'bridged' share that has four folders in it, then four smb errors show up on the console. Everything continues to work without issue but today we experienced our first system lockup and we were forced to physically restart the server. Any suggestions appreciated. Thanks, -Randy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 2.2.5 performanc issues...
We are trying to troubleshoot slow performance. A lot of my NT client log files show messages like this about oplock break issues. [2003/10/09 12:50:39, 0] smbd/oplock.c:(1008) request_oplock_break: no response received to oplock break request to pid 2907 on port 61752 for dev = 40240002, inode = 29, file_id = 2 64 [2003/10/09 12:51:03, 0] smbd/oplock.c:(395) process_local_message: Received unsolicited break reply - dumping info. [2003/10/09 12:51:03, 0] smbd/oplock.c:(409) process_local_message: unsolicited oplock break reply from pid 982, port 61752, dev = 40240002, inode = 29, file_id = 264 [2003/10/09 12:55:35, 0] smbd/oplock.c:(1008) request_oplock_break: no response received to oplock break request to pid 9996 on port 61775 for dev = 40240002, inode = 29, file_id = 1 15 [2003/10/09 12:55:35, 0] smbd/open.c:(630) open_mode_check: exlusive oplock left by process 9996 after break ! For file arch/source/archfunc/arch.ini, dev = 40240002, inode = 29. Deleting it to continue... [2003/10/09 12:55:35, 0] smbd/open.c:(634) open_mode_check: Existent process 9996 left active oplock. [2003/10/09 12:55:56, 0] smbd/oplock.c:(395) process_local_message: Received unsolicited break reply - dumping info. [2003/10/09 12:55:56, 0] smbd/oplock.c:(409) process_local_message: unsolicited oplock break reply from pid 982, port 61775, dev = 40240002, inode = 29, file_id = 115 [2003/10/09 13:01:49, 0] smbd/oplock.c:(1008) request_oplock_break: no response received to oplock break request to pid 13869 on port 61783 for dev = 40240002, inode = 29, file_id = 181 [2003/10/09 13:01:49, 0] smbd/open.c:(630) open_mode_check: exlusive oplock left by process 13869 after break ! For file arch/source/archfunc/arch.ini, dev = 40240002, inode = 29. Deleting it to continue... [2003/10/09 13:01:49, 0] smbd/open.c:(634) Here is my conf global settings the share that we turned level2 locks on..(It is all exe, dll, lib files) # file name: /etc/opt/samba/smb.conf.DEV # Samba config file created using SWAT # from localhost (127.0.0.1) # Date: 2001/01/02 11:36:07 # Global parameters [global] security = server workgroup = AMEREN netbios name = SCSSD3 server string = Samba Server interfaces = 10.81.1.44/255.0.0.0 bind interfaces only = Yes encrypt passwords = yes password server = scssd3 log file = /var/opt/samba/log.%m max log size = 1000 name resolve order = hosts wins local master = No wins server = 10.101.1.32 read only = No preserve case = yes short preserve case = No dos filetime resolution = Yes socket options = TCP_NODELAY IPTOS_THROUGHPUT syslog = 0 oplocks = no level2 oplocks = no [t5amprt4s] path = /t5amprt4/client writeable = yes force user = cssuser oplocks = yes level2 oplocks = yes Are there other settings that I should look at adding ? We've taken care of all dns reverse lookup issues that we've seen. I don't understand the locking very well to know what to tune. Thanks for your help. Barb *** The information contained in this message may be privileged and/or confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. Note that any views or opinions presented in this message are solely those of the author and do not necessarily represent those of Ameren. All emails are subject to monitoring and archival. Finally, the recipient should check this message and any attachments for the presence of viruses. Ameren accepts no liability for any damage caused by any virus transmitted by this email. If you have received this in error, please notify the sender immediately by replying to the message and deleting the material from any computer. Ameren Corporation *** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Make share appear as drive under My Computer automatically
I am using the latest version of Samba on Debian/GNU Linux. I am running Samba on an old Gateway machine that has very little hard drive space or RAM. (I'm merely trying to configure and get familiar with Samba before putting it on our mail server.) I have successfully gotten Samba to work as a domain controller using roaming profiles. I would like to make a drive in My Computer appear as T: automatically whenever a user logs into the domain. I have read the documentation on the command, and apparently, one needs to run a logon script that runs a net command to connect a network drive letter. I use the following in a logon script: net user T: \\WING\test I can see the logon script run, but it always fails. The drive sometimes appears in My Computer, but it has a red X on the icon, signifying that it is not available. I wonder if anyone has had success with this. I am a novice with Samba, and I would appreciate any help. If I have been unclear in anything, please let me know, and I will restate and clarify exactly what I mean. Following is my smb.conf file. [global] ;basic server settings workgroup = SAMBA netbios name = WING server string = Samba PDC running %v socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192 ;PDC and master browser settings os level = 64 preferred master = yes local master = yes domain master = yes ;security and logging settings security = user encrypt passwords = yes log file = /var/log/samba/log.%m log level = 2 max log size = 50 hosts allow = 127.0.0.1 192.168.1.0/255.255.255.0 ;user profiles and home directory logon home = \\%L\%U\ logon drive = T: logon path = \\%L\profiles\%U logon script = netlogon.bat # shares [homes] comment = Home Directories browseable = no writeable = yes [profiles] path = /home/samba/profiles writeable = yes browseable = no create mask = 0600 directory mask = 0700 [netlogon] comment = Network Logon Service path = /home/netlogon read only = yes browseable = no write list = tom Thank you in advance for any help that anyone may be able to offer. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SUCCESS report: samba3 as single-sign-on provider in heterogeneous network
On Wed, 2003-10-08 at 17:43, Marcus Blomenkamp wrote: Hi all, to raise the bug vs success ratio i'd like to express my gratitude to all samba members and those who, though not in-core developers, generously supported noobs like me on this mail list. I've set up an environment two months ago and it has run without glitches or tweaks since then. Now as misusing my family as beta testers has worked out so nicely i will deploy an identical setup in the institute i'm working for. Samba and OpenLDAP in pair function as single-sign-on provider. All information (passwords, users, mappings etc) is stored in ldap under strict permission policies - all within ldap except the password to access ldap. :) Authentication is handled centrally through samba. Clients are debian woody and windows xp machines joined into the domain. The network is heterogenous itself with some machines sitting on wireless lan. Roaming profiles perform great with only one warning being spit out on the winxp machines: 'cannot find active directory controller' or similar ;) That's an interesting one - I've not seen that. Any ideas what triggers it? Unix clients currently suck their uid/gid information directly from ldap as i'm still relying upon NFS for home directory access. I've setup auto-mount smb/cifs home dirs through pam_mount too, however smbfs/cifs seem far from usable in respect of unix specialties such as absolute symbolic links. Has anythind happened in this direction recently? This would definitively be the dot on the i. Personally, I don't think this is the right way to do it - NFS is a much better match for unix semantics.Now, the trouble is securing NFS - but I think that NFSv4, SFS (www.fs.net) and the like are a better match for this problem space. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Samba3 ADS without Microsoft?
On Thu, 2003-10-09 at 22:55, paul k wrote: John H Terpstra wrote: On Wed, 8 Oct 2003, Mike wrote: I've setup samba to use ldap. I've propogated the directory. I've setup the kerberos realm. --snipp However, I'd appreciate a crystal clear understanding of precisely what you are trying to implement and how you want it to work. - John T. Just guessing, -Setting up samba as PDC -Setting up (MIT) kerberos -Setting up LDAP -Storing account Information in LDAP -Creating a service ticket in kerberos like smbd/host.foo -Exporting to a keytab and telling samba where to look for -ksetup W2k SP3+ to use MIT REALM and map the principal to the sambaaccount in LDAP -authenticate to samba PDC with kerberos credentials obtained from the KDC I think the last part will be the problem - really, you need to do the full AD stuff for this.While it's a long way from production, there is some work being done in this area. Really, you should just use the NT domain stuff, and keep the passwords in sync for now. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 2.2.5 performanc issues...
On Thu, Oct 09, 2003 at 01:16:11PM -0500, Dunville, Barbara wrote: We are trying to troubleshoot slow performance. A lot of my NT client log files show messages like this about oplock break issues. 2.2.5 is a very old release with some known security holes. Please upgrade to 2.2.8a in the 2.2.x series or 3.0.0 in the 3.0 series. Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Roaming Profiles
Does anyone know of a another way to disable roaming profiles in samba (in smb.conf) on a windows XP network? Thnx. -Dan Sent: Monday, October 06, 2003 1:55 PM add; logon path = ?my 2 cents; Keep it on and educate your users on how to use the desktop as I take it that your roaming profiles may be getting outta hand and taking a long time to xfer through your network. Bri- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Nortel VPN
On Thu, 2003-10-09 at 12:19, Michael Quaack wrote: Any issue with Samba and Nortel VPN client? I just installed the latest Nortel VPN client (4_65.30 version) and now on my local interface for the LAN network I am being told by users that they cannot connect to a drive via Samba. Any help would be appreciated. The Nortel VPN client disables ALL networking besides the connection to the VPN server. So any network access to a local server, samba or not, will not work. -- Tom Cross [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: File deletion problem with samba 2.2.8a and 3.0.0
I see the same error message when I try to delete an opened folder in the windows explorer in 2.2.8a on FreeBSD 4.8. Somebody told me it's fixed in 3.0, but I haven't tried it out yet. Laurent Pinchart [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi everybody, I'm having problems with a samba PDC (both 2.2.8a and 3.0.0). I have 2 shares (one of them is public - ie. world writable -, the other one is the homes shares). when I try to delete a file from any of those, the file is deleted properly by windows explorer, but it then pops up a message box with the message cannot find the specified file. The same kind of error happens when I try to copy a file to the share. the file is created with a size of 0 and an error message appears before the file is filled with data. I checked the filesystem permissions and samba permissions on the file. drwxrwsrwx2 nobody nobody 80 Oct 9 18:02 . drwxrwxrwt 35 root root 1784 Oct 9 17:41 .. -rw-rw-rw-1 pinchartl nobody 0 Oct 9 18:02 delete.me [public] comment = Temporary file space path = /tmp/public read only = no public = yes only guest = yes create mode = 0666 directory mode = 0777 I checked the samba logs, and everything is normal. I raised the debug level, and found out that windows explorer sends an SMBunlink message, which unlinks the file, and then sends a SMBtrans2 message for the same file, which returns NT_STATUS_OBJECT_NAME_NOT_FOUND (I suppose it's normal, as the file has been deleted). Is that normal ? I'm not very familiar with the SMB protocol, so maybe I missed something. I'm running out of ideas. Any help will be welcome. Laurent Pinchart -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Windows 2K EFS interface in Samba?
On Fri, 2003-10-10 at 02:31, Alan wrote: Hi, I like to figure out if there is a way for Samba to provide similar functions in encrypting files base on window's client interface. Has anyone done any study in this area? Not that I know of - in Linux, the encrypted filesystem operations occur at the block layer, so you can certainly host an encrypted file on Samba, but the network traffic would be clear-text. But if you are interested in doing this kind of stuff, you could probably implement the appropriate calls (adding a new per-file encryption layer) in a Samba4 NTVFS module. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Moving SAMBA PDC to another machine.
On Fri, 2003-10-10 at 02:58, Marc Harding wrote: I am sorry if this has been covered before, my searches have found variations in results. I am using a Redhat 9 build with the Samba 2.2.7a RPM from Redhat. I am planning to move all of the services from this machine to another Redhat 9 machine. It will take the IP address and hostname of the original machine. What I need to make sure is if I simply backup the files in /etc/samba (smb.conf, lmhosts, secrets.tdb, smbpasswd, smbusers) and /var/cache/samba (the remaining .tdb files and .dat files) and copy them to the new machine will my domain be functional on the new machine? Should be - as long as you don't change it's name. If you do, then you will need to restore the domain sid, from that MACHINE.SID file. Think there is now an smbpasswd option for that, but it's better handled in Samba 3.0. Easy option it to keep the name :-) I do have a /etc/MACHINE.SID which I have kept around from previous samba versions, but I am assuming that this is no longer used. The old machine will be turned on again, but not the samba services, so no conflicts of name should arise. I am hoping that this upgrade will be a fairly simple file copy to the new machine. Any feedback and previous experience would be greatly appreciated. Thanks, Marc -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] remote windows management
On Wed, 2003-10-08 at 02:55, David Bear wrote: I keep hoping for better wasy to remotely manage windows machines through samba. In the very old samba-tng there was an rpcclient that could connect to a remote machine and do various things like read/write the registry, grab event logs, etc. I could never get it to work very well and waited for a better one. The trouble is the rpcclient program in samba-current doesn't have these features. This is one of areas that has not yet been ported across from Samba TNG. I think we have a lot of the low-level code for this (we need it to implement the server-side) but the user-interface is lacking. Is there any work to add these to an rpcclient for samba or are these features moved elsewhere? No work in Samba itself, but feel free to submit patches. Or just compile up Samba TNG :-). I really want total control over windows2000/xp box similar to what you get through the mmc -- control user accounts, start/stop services, remote regedit, etc. Most of these are in Samba TNG's rpcclient, I think. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Windows 2K EFS interface in Samba?
I would love to. I could start with a network prob and document what Win client's communication looks like, unless someone has some idea about the efs's rpc? Thanks Alan -Original Message- From: Andrew Bartlett [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 7:38 PM To: Alan Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Windows 2K EFS interface in Samba? On Fri, 2003-10-10 at 02:31, Alan wrote: Hi, I like to figure out if there is a way for Samba to provide similar functions in encrypting files base on window's client interface. Has anyone done any study in this area? Not that I know of - in Linux, the encrypted filesystem operations occur at the block layer, so you can certainly host an encrypted file on Samba, but the network traffic would be clear-text. But if you are interested in doing this kind of stuff, you could probably implement the appropriate calls (adding a new per-file encryption layer) in a Samba4 NTVFS module. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Make share appear as drive under My Computer automatically
The logon path and logon drive takes care of mapping the home directory: logon path = \\%N\profiles\%U logon drive = t: the mapping command is net use u: \\wing\test Hope this helps! =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Santos Soler MCP, Network+, A+ =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Windows 2K EFS interface in Samba?
On Fri, 2003-10-10 at 12:50, Alan Shih wrote: I would love to. I could start with a network prob and document what Win client's communication looks like, unless someone has some idea about the efs's rpc? Start with ethereal, and also look over the Samba4 sources. Report what you find to the samba-technical list. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] urgent help needed! pam_smb auth any password...
On Thu, 2003-10-09 at 00:53, Jelmer Vernooij wrote: On Wed, 2003-10-08 at 14:50, Luís Miguel Silva wrote: All the other samba servers auth nicely on samba 3.0, and im able to logon the domain, but... when i try to auth an account with pam_smb, i can ALLWAYS connect! It accepts ANY login/password pair! I read the pam_smb warning which said: This version contains a bug-fix that stops pam_smb from authenticating against servers in share mode i.e. Win 95 or samba in share mode. If you had a share mode server by mistake in your pam_smb.conf anyone could log in to any a/c on your machine with no password !!! I allready installed this version...and checked the code and it doesnt seem to do no good. Can anybody help me with this? My pam_smb version is 1.1.7 pam_smb is not a module from Samba, so you probably would have a better response at the pam_smb mailinglist. Jelmer Furthermore, I would strongly advise against the use of pam_smb - it does nothing to check that it is indeed talking to the correct server. I always recommend the use of pam_winbindd instead. To match pam_smb behaviour, you might want to use the 'winbind use default domain' option in your smb.conf. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] MAPPING one NT GROUP with 2 unix group
On Wed, 2003-10-08 at 22:01, Giovanni Romanenghi wrote: I have one problem with the mapping Unix group with NT group I have 3 unix group and I want that two group are mapped with nt group Domain Users and one with domain Admins For the domain admins there aren't problem but for mapping two unix group with the same nt group. I have the necessity that 2 or plus group unix is mapped with the nt group domain user. This is not possible in Samba 3.0 - we require a one-to-one group mapping. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] active directory pains
On Wed, 2003-10-08 at 02:51, David Bear wrote: After googling a bit, it seems that only way samba playes with active directory is with samba 3.x I'f been use samba 2.x with 'pass through' authentication and would like to get rid of the pass through auth cause it seems to cause problems. Yet, I don't know if I can trust samba 3 -- Samba 3.0 adds kerberos support, and a better way to work with active directory servers. For NTLM logins, we still 'pass through' the request, in the same way a Win2k server does. Has anyone been able to get a samba 2.x server to join a an Active Directory domain? This has been standard use of Samba for years now. We just look like an NT4 server. My assumptions are the joining Active Directory is 'different' than joining an nt style 'domain'. It isn't really. For NT4 servers, they think it's an NT4 domain, and continue on with their day. Samba 2.2 looks like NT4 in this respect. The samba.org sites seems to be devoid if documents detailing what I really want... which is 1) having samba auth users against active directory This is all very clearly documented in the Samba 3.0 HOWTO. -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can't add domain group in local group (winXP)
samba 3.0 + LDAP in SuSE 8.2 In 2k Sp3 workstation adding domain user and domain group to local group ok. In XP Sp1 workstation adding domain user to local group ok, but adding domain group to local group gives an error: --- Information returned from the object picker for object Domain Users was incomplete. The object will not be processed. --- In samba log cn't see any major diffrence between 2k and XP actions. regards Hannu -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Wierd failure when adding W2K to Samba3.0.0+LDAP Domain
Dear list I have been at it for a few day trying to get my SuSE 8.2 server (FREESIDE) to produce a domain (SKOGFARET) for my Windows 2000 Server machine (BABYLON). I use OpenLDAP, and the setup seems to work in most ways, except the vital one [ie. I can mount shares, print, etc...] When I try to add W2K (BABYLON) to the domain, I get the following error: The following error occured attempting to join the domain SKOGFARET: Logon failure: unknown user name or bad password. The wierd part is that the smbd-log shows that the user (eivind) is indeed authenticated: [2003/10/09 16:37:07, 3] auth/auth.c:check_ntlm_password(265) check_ntlm_password: sam authentication for user [eivind] succeeded No matter what I do I can't find any way to make the user more visible to Samba, as it seems it is visible allready The user is memeber of Domain Admin, and the OpenLDAP ACLs are wide open for writing from that user too. What else is required from a user that should be able to join machines into the domain? Any hints on what I'm doing wrong would really save my week :-) I included a readers-digest ldif file of my directory, as well as the config for slapd and samba. Regards -- Eivind Trondsen LinuxLabs AS http://www.linuxlabs.no mailto:[EMAIL PROTECTED] [global] netbios name = FREESIDE workgroup = SKOGFARET os level = 64 prefered master = yes domain master = yes local master = yes security = user domain logons = yes passdb backend = ldapsam:ldap://localhost time server = yes printing = cups printcap name = cups load printers = yes unix charset = LOCALE log level = 3 wins support = yes add user script = ldapsmb -a -u %u delete user script = ldapsmb -d -u %u add machine script = ldapsmb -a -w %u add group script = ldapsmb -a -g %g delete group script = ldapsmb -d -g %g add user to group script = ldapsmb -j -u %u -g %g delete user from group script = ldapsmb -j -u %u -g %g set primary group script = ldapsmb -m -u %u -gid %g idmap backend = ldap:ldap://localhost idmap uid = 500-2000 idmap gid = 1000-2000 ldap admin dn = cn=ldapadmin,dc=wingnut,dc=no ldap suffix = dc=wingnut,dc=no ldap machine suffix = ou=computers ldap group suffix = ou=groups ldap idmap suffix = ou=idmap ldap user suffix= ou=users ldap passwd sync= yes [netlogon] comment = Network Logon Service path = /var/lib/samba/netlogon guest ok = yes browsable = no [mp3] path = /local/mp3 comment = Music archive writable = yes dn: dc=wingnut,dc=no objectClass: dcObject objectClass: organizationalUnit dc: wingnut ou: Wingnut dn: cn=ldapadmin,dc=wingnut,dc=no objectClass: person cn: ldapadmin sn: LDAP administrator userPassword:: x dn: ou=users,dc=wingnut,dc=no objectClass: organizationalUnit ou: users description: Users in Wingnut.no dn: ou=groups,dc=wingnut,dc=no objectClass: organizationalUnit ou: groups description: Groups used in Wingnut.no dn: ou=idmaps,dc=wingnut,dc=no objectClass: organizationalUnit ou: idmaps description: These are required for ... something dn: ou=computers,dc=wingnut,dc=no objectClass: organizationalUnit ou:: Y29tcHV0ZXJzIA== description: Computers that are members of the Skogfaret domain dn: cn=admin,ou=groups,dc=wingnut,dc=no cn: admin objectClass: top objectClass: organizationalRole objectClass: simpleSecurityObject userPassword:: xx dn: cn=admin,ou=computers,dc=wingnut,dc=no cn: admin objectClass: top objectClass: organizationalRole objectClass: simpleSecurityObject userPassword:: xx dn: uid=maxuid,dc=wingnut,dc=no objectClass: top objectClass: account description: 1000 uid: maxuid dn: uid=eivind,ou=users,dc=wingnut,dc=no objectClass: top objectClass: posixAccount objectClass: shadowAccount objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: sambaSamAccount uid: eivind cn: Eivind Trondsen sn: Trondsen uidNumber: 500 gidNumber: 1004 homeDirectory: /home/eivind loginShell: /bin/bash gecos: Eivind Trondsen mail: [EMAIL PROTECTED] sambaPrimaryGroupSID: S-1-5-21-4133941900-2453046697-2385947492-512 displayName: Eivind Trondsen sambaPwdCanChange: 1065703187 sambaPwdMustChange: 2147483647 sambaLMPassword: xx sambaNTPassword: xx sambaPwdLastSet: 1065703187 sambaAcctFlags: [U ] sambaDomainName: SKOGFARET userPassword:: xx sambaSID: S-1-5-21-4133941900-2453046697-2385947492-500 dn: sambaDomainName=SKOGFARET,dc=wingnut,dc=no sambaDomainName: SKOGFARET sambaSID: S-1-5-21-4133941900-2453046697-2385947492 sambaAlgorithmicRidBase: 1000 objectClass: sambaDomain sambaNextUserRid: 5000 sambaNextGroupRid: 5001 structuralObjectClass: sambaDomain entryUUID:
Re: [Samba] our windows APW can't add printer driver to samba domain member
Thanks daniel, We've actually tried changing that. also we've tried different permissions on the printers/W* directories, but still the same error on APW. We'll tried to do it using rpcclient commands. From what I gathered on websites describing what we're trying to do, the only difference between theirs and our configuration is the security = user. Are the permissions different when using security = ADS? So we'll try to install them that way. I'll tell you what happens after we've tried all those possibilities. Denis. J [EMAIL PROTECTED] wrote: Hey DJ, Driver Wizard on a Windows client, with a username part of the 'print admin' group, we get this error message: Unable to install HP Lazerjet 4000 Series PCL 6, Windows 2000, Intel Driver. Access denied [print$] comment = Printer Drivers path = /var/lib/samba/printers write list = root, @MYGROUP\Staff create mask = 0700 Can /var/lib/samba/printers be reached by a member of @MYGROUP\Staff? What does the ownership permissions of the subdirectories look like? i.e. W32X86... W32X86/2... W32X86/3? Your create mask of 0700 seems like it would be problematic for a few reasons, but mostly because your write list is group based, and other users will not be able to read files from print$. ~ Daniel --- This message is the property of Time Inc. or its affiliates. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Ldap.h missing in samba-3.0.0
On Thu, 2003-10-09 at 04:44, Kenny Mann wrote: I have downloaded samba-3.0.0.tar.bz2 (and samba-latest.tar.gz) and attempted to run ./configure --with-ldapsam --with-winbind --with-pam_smbpass --with-smbmount --with-ads --with-ldap Only to find that ./configure complains of a missing ldap.h file. Does anyone else have this issue? I'm trying to do a simple setup to having a Linux box communicate to my Windows 2000 Server PDC, which runs Active Directory. Am I doing something stupid here? You must have the ldap development headers installed, to compile Samba (with active directory support) from source. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
CVS update: samba/source
Date: Thu Oct 9 06:02:07 2003 Author: tpot Update of /data/cvs/samba/source In directory dp.samba.org:/tmp/cvs-serv24487/source Modified Files: configure.in Log Message: Merge from 3.0: Explicitly initialise the value of AR for vendor makes that don't do this (HPUX 11). Currently it's initialised to 'ar' but this may have to be changed if any systems pop up that have archivers that aren't named 'ar'. Closes bug #552. Fallback to our defaults (CP850/ASCII/UTF8) if there is no native iconv on the platform. This allows to compile and complain about it at runtime Revisions: configure.in1.481 = 1.482 http://www.samba.org/cgi-bin/cvsweb/samba/source/configure.in.diff?r1=1.481r2=1.482
CVS update: samba/source/web
Date: Thu Oct 9 06:10:52 2003 Author: tpot Update of /data/cvs/samba/source/web In directory dp.samba.org:/tmp/cvs-serv25550/source/web Modified Files: statuspage.c swat.c Log Message: Merge from 3.0: Moving towards better i18n support in SWAT. This commit contains a bunch of updates to bug 413 from Monyo: 1) pick up proper strings to call msg strings for example to add strings in wizard menu in web/swat.c, web/statuspage.c and param/loadparm.c. 2) define N_() macro in include/intl.h to pick up some strings in param/loadparm.c 3) quote all name and value tag with '' For example in swat.c:720 the Edit Parameter Values string is displayd only as Edit because value tag is not quoted like: value=Edit Parameter Values These tags should be quoted though it sometimes works well without quotation. 4) modify the msg strings not to contain HTML tags or other non-message strings. For example dprintf(_(test\n)); is modified to dprintf(%s\n, _(test)); Revisions: statuspage.c1.36 = 1.37 http://www.samba.org/cgi-bin/cvsweb/samba/source/web/statuspage.c.diff?r1=1.36r2=1.37 swat.c 1.99 = 1.100 http://www.samba.org/cgi-bin/cvsweb/samba/source/web/swat.c.diff?r1=1.99r2=1.100
CVS update: samba/source/include
Date: Thu Oct 9 06:10:52 2003 Author: tpot Update of /data/cvs/samba/source/include In directory dp.samba.org:/tmp/cvs-serv25550/source/include Modified Files: intl.h Log Message: Merge from 3.0: Moving towards better i18n support in SWAT. This commit contains a bunch of updates to bug 413 from Monyo: 1) pick up proper strings to call msg strings for example to add strings in wizard menu in web/swat.c, web/statuspage.c and param/loadparm.c. 2) define N_() macro in include/intl.h to pick up some strings in param/loadparm.c 3) quote all name and value tag with '' For example in swat.c:720 the Edit Parameter Values string is displayd only as Edit because value tag is not quoted like: value=Edit Parameter Values These tags should be quoted though it sometimes works well without quotation. 4) modify the msg strings not to contain HTML tags or other non-message strings. For example dprintf(_(test\n)); is modified to dprintf(%s\n, _(test)); Revisions: intl.h 1.2 = 1.3 http://www.samba.org/cgi-bin/cvsweb/samba/source/include/intl.h.diff?r1=1.2r2=1.3
CVS update: samba/swat/lang/ja/help
Date: Thu Oct 9 06:12:44 2003 Author: tpot Update of /data/cvs/samba/swat/lang/ja/help In directory dp.samba.org:/tmp/cvs-serv26037/swat/lang/ja/help Modified Files: welcome.html Log Message: Merge from 3.0: Fix spelling mistake. Revisions: welcome.html1.1 = 1.2 http://www.samba.org/cgi-bin/cvsweb/samba/swat/lang/ja/help/welcome.html.diff?r1=1.1r2=1.2
CVS update: samba/source/modules
Date: Thu Oct 9 06:13:11 2003 Author: tpot Update of /data/cvs/samba/source/modules In directory dp.samba.org:/tmp/cvs-serv26108/source/modules Modified Files: vfs_recycle.c Log Message: Merge from 3.0: Portability fix from Joachim Schmitz. Closes bug #546. Revisions: vfs_recycle.c 1.15 = 1.16 http://www.samba.org/cgi-bin/cvsweb/samba/source/modules/vfs_recycle.c.diff?r1=1.15r2=1.16
CVS update: samba/source/param
Date: Thu Oct 9 06:16:16 2003 Author: tpot Update of /data/cvs/samba/source/param In directory dp.samba.org:/tmp/cvs-serv26473/source/param Modified Files: loadparm.c Log Message: Merge from 3.0: Moving towards better i18n support in SWAT. This commit contains a bunch of updates to bug 413 from Monyo: 1) pick up proper strings to call msg strings for example to add strings in wizard menu in web/swat.c, web/statuspage.c and param/loadparm.c. 2) define N_() macro in include/intl.h to pick up some strings in param/loadparm.c 3) quote all name and value tag with '' For example in swat.c:720 the Edit Parameter Values string is displayd only as Edit because value tag is not quoted like: value=Edit Parameter Values These tags should be quoted though it sometimes works well without quotation. 4) modify the msg strings not to contain HTML tags or other non-message strings. For example dprintf(_(test\n)); is modified to dprintf(%s\n, _(test)); Revisions: loadparm.c 1.515 = 1.516 http://www.samba.org/cgi-bin/cvsweb/samba/source/param/loadparm.c.diff?r1=1.515r2=1.516
CVS update: samba/source/passdb
Date: Thu Oct 9 06:25:40 2003 Author: tpot Update of /data/cvs/samba/source/passdb In directory dp.samba.org:/tmp/cvs-serv27454/source/passdb Modified Files: passdb.c Log Message: Merge from 3.0: Typo in error message. Jeremy. Revisions: passdb.c1.207 = 1.208 http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/passdb.c.diff?r1=1.207r2=1.208
CVS update: samba/source/passdb
Date: Thu Oct 9 06:27:01 2003 Author: tpot Update of /data/cvs/samba/source/passdb In directory dp.samba.org:/tmp/cvs-serv27862/source/passdb Modified Files: pdb_ldap.c Log Message: Merge from 3.0: Make pdb_ldap.c compile with SUN iPlanet headers. Whether this works will be tested soon, but this fix is somewhat obvious. Volker Revisions: pdb_ldap.c 1.121 = 1.122 http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_ldap.c.diff?r1=1.121r2=1.122
CVS update: samba/source/rpc_parse
Date: Thu Oct 9 06:29:08 2003 Author: tpot Update of /data/cvs/samba/source/rpc_parse In directory dp.samba.org:/tmp/cvs-serv28078/source/rpc_parse Modified Files: parse_rpc.c Log Message: Merge from 3.0: Remove duplicate function (now in rpc_parse/parse_prs.c) and fix a RPC debug (I renamed the element of the structure). Andrew Bartlett Revisions: parse_rpc.c 1.60 = 1.61 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_parse/parse_rpc.c.diff?r1=1.60r2=1.61
CVS update: samba/source/script
Date: Thu Oct 9 06:29:50 2003 Author: tpot Update of /data/cvs/samba/source/script In directory dp.samba.org:/tmp/cvs-serv28193/source/script Modified Files: installbin.sh Log Message: Merge from 3.0: cosmetic fix when DESTDIR=/ (default) fixed for /sbin/mount.smbfs link when using $DESTDIR; bug 525 Revisions: installbin.sh 1.6 = 1.7 http://www.samba.org/cgi-bin/cvsweb/samba/source/script/installbin.sh.diff?r1=1.6r2=1.7
