[Samba] I'm new-Win XP slow with Samba server

2003-11-17 Thread Stefano
Hello to all all all :-),
I'm new in this mailing list and I would like to ask you a question, please.
I have a lan with a samba server version 2.2.3a-12.3 on a linux debian system.

All client in the net can connect fast to the samba server (win98/2000) but only 
client with windows xp
connect them very slowly to the server and only the first time.
After 5/10 minutes they connect to smb server and all xp client can work good and 
fast, now.


Do you know a solution to this problem?

THANK YOU VERY MUCH FOR YOUR HELP.

Ciao
Stefano
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] PDC/BDC with ldap: variable possible in sambaProfilePath / sambaHomePath?

2003-11-17 Thread mamue
Hi,
I have a working PDC and a BDC, both samba 3.0.1pre3 (better than ever).
I have the master ldap on the PDC, BDC is slave. Thus, both directories
are to be identical, I think.
I have the sambaHomePath and the sambaProfilePath in every user entry, as
I tried to balance profiles between two servers for the sake of some more
network speed (100MBit each server).
Now I came to a point where I found that some redundancy is better than
speed ;-) and would like to asks others whether it is a foolish idea not
to define the home and profile path in smb.conf or if the BDC should have
it's own ldap source so entries differ.
Comments welcome,

Malte Mueller

Maybe important: SuSE9, Openldap 2.1.12/2.1.22, ~1500 users, ~200PC
(NT4/W2k).
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbldap tools

2003-11-17 Thread Taymour A. El Erian
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,

~I am using smbldap tools to add users, but when I use
smbldap-useradd -a username it only creates posixAccount and sambaSamAccount
- --
Taymour A El Erian
System Division Manager
CNA, MCSE, CCNA, LPIC
T.E. Data
E-mail: [EMAIL PROTECTED]
Web: www.tedata.net
Tel:+(202)-4166600
Ext:1101
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/uKJiX1dv4NHexooRAunjAJwPlP5347Biqk2vaFkd2bwobh8PMQCfeDDY
k2fxr2Bx2vpLHh14L6K1UQA=
=CZSI
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] how many users?

2003-11-17 Thread Pirkka Luukkonen
Hi!

Can anyone tell how many users with different uids can you add to samba/gnu
linux/ldap -environment? Is 5-20 users possible?

--
Pirkka

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Ralph Angenendt
Taymour A. El Erian wrote:
 Hi,
 
 ~I am using smbldap tools to add users, but when I use
 smbldap-useradd -a username it only creates posixAccount and sambaSamAccount

What did you expect to be created? 

Ralph


pgp0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbldap tools

2003-11-17 Thread Taymour A. El Erian
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Ralph Angenendt wrote:

|Taymour A. El Erian wrote:
|
|Hi,
|
|~I am using smbldap tools to add users, but when I use
|smbldap-useradd -a username it only creates posixAccount and
sambaSamAccount
|
|
|What did you expect to be created?
|
|Ralph
Sorry for the typo, I meant and not  sambaSamAccount

- --
Taymour A El Erian
System Division Manager
CNA, MCSE, CCNA, LPIC
T.E. Data
E-mail: [EMAIL PROTECTED]
Web: www.tedata.net
Tel:+(202)-4166600
Ext:1101
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/uKTJX1dv4NHexooRAj+iAJ4kyS2lS7Zi+3hnD8D4tVSY2fNO/ACfXsfV
Zt69AWC2K5D6+LwtFQJp4kg=
=hIoI
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Pirkka Luukkonen
 ~I am using smbldap tools to add users, but when I use
 smbldap-useradd -a username it only creates posixAccount and
 sambaSamAccount
 What did you expect to be created?
 Sorry for the typo, I meant and not  sambaSamAccount

I noticed that too. It says within the code of smbldap-useradd.pl that samba
3 should do this now. While Samba fails to do so it's a problem. I think
there is a bug within 3.0.0 or then I am doing it all wrong.

--
Pirkka

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Adam Williams
 |~I am using smbldap tools to add users, but when I use
 |smbldap-useradd -a username it only creates posixAccount and
 sambaSamAccount
 |What did you expect to be created?
 Sorry for the typo, I meant and not  sambaSamAccount

That is all add user script needs to do,  in a user create operation
Samba will add sambaSamAccount attributes - it needs the posixAccount to
preexist (the purpose of add user script).

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Taymour A. El Erian
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Adam Williams wrote:

||~I am using smbldap tools to add users, but when I use
||smbldap-useradd -a username it only creates posixAccount and
|sambaSamAccount
||What did you expect to be created?
|Sorry for the typo, I meant and not  sambaSamAccount
|
|
|That is all add user script needs to do,  in a user create operation
|Samba will add sambaSamAccount attributes - it needs the posixAccount to
|preexist (the purpose of add user script).
|
this means I can not use this script as user add script in smb.conf.
- --
Taymour A El Erian
System Division Manager
CNA, MCSE, CCNA, LPIC
T.E. Data
E-mail: [EMAIL PROTECTED]
Web: www.tedata.net
Tel:+(202)-4166600
Ext:1101
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/uKdpX1dv4NHexooRApbyAJ0W5DQa0M+oB60jpllpJbZo+TWDNQCgnp4M
bgY6B75MynNnej9vJXWzGn0=
=z79o
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] SWAT adds suffix

2003-11-17 Thread Taymour A. El Erian
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,

~I just tried SWAT that comes with Samba 3.0.0, it keeps appending
the ldap suffix to the user,group and computer suffix and thus
corrupting my smb.conf
- --
Taymour A El Erian
System Division Manager
CNA, MCSE, CCNA, LPIC
T.E. Data
E-mail: [EMAIL PROTECTED]
Web: www.tedata.net
Tel:+(202)-4166600
Ext:1101
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/uKkqX1dv4NHexooRAudPAJ4sgEZZKOWBNOA8H/8VfbpwXLmQzACghSMh
0YfecR6LtWK+OKxTZWDfP/o=
=lvMH
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Jérôme Tournier
 this means I can not use this script as user add script in smb.conf.
Yes you can, but without the -a option:
add user script = /usr/local/sbin/smbldap-useradd.pl -m %u
-- 
Jérôme



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Taymour A. El Erian
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Jérôme Tournier wrote:

|this means I can not use this script as user add script in smb.conf.
|
|Yes you can, but without the -a option:
|add user script = /usr/local/sbin/smbldap-useradd.pl -m %u
The only difference here is that it creates the home directory but still
posixAccount.
This makes creating a new user a 2 step:
1-smbldap-useradd.pl
2- smbpasswd
also I get an error /usr/local/sbin/smbldap-useradd.pl: group 513
doesn't exist which I don not understand
- --
Taymour A El Erian
System Division Manager
CNA, MCSE, CCNA, LPIC
T.E. Data
E-mail: [EMAIL PROTECTED]
Web: www.tedata.net
Tel:+(202)-4166600
Ext:1101
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/uKrNX1dv4NHexooRApDgAJsGQHtEJhLuIOez4r7YArIQFHeNPACdGK8x
ae86J4QCr/fdXxCNgTs3SlM=
=rpzi
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Adam Williams
 |Yes you can, but without the -a option:
 |add user script = /usr/local/sbin/smbldap-useradd.pl -m %u
 The only difference here is that it creates the home directory but still
 posixAccount.
 This makes creating a new user a 2 step:
 1-smbldap-useradd.pl
 2- smbpasswd

Are you using it in smb.conf add user script or not?  If so what does
smbpasswd have to do with anything?  

1. Create the posixAccount object (the purpose of smbldap-useradd).
2. *SAMBA* will create the sambaSamAccount attributes on the relevant
posixAccount.

 also I get an error /usr/local/sbin/smbldap-useradd.pl: group 513
 doesn't exist which I don not understand

You created a posixAccount with a gidNumber of 513 perhaps?  And there
is no posixGroup with a gidNumber of 513?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Jérôme Tournier
 The only difference here is that it creates the home directory but still
 posixAccount.
Yes you are write

 This makes creating a new user a 2 step:
 1-smbldap-useradd.pl
 2- smbpasswd
The script will add the the posixAccount for your user, and samba will
automatically add the sambaSAMAccount.

 also I get an error /usr/local/sbin/smbldap-useradd.pl: group 513
 doesn't exist which I don not understand
You don't have a group with gidNumber 513 in your directory (this is the
default group defined in the smbldap_conf.pm file).
-- 
Jérôme


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.0 - WINS static addresses

2003-11-17 Thread Brett Maton
Hi,

  I'm trying to add static address to the wins.dat file but every time nmbd
is restarted it overwrites the file.

  Any help would be greatly appreciated

Running RedHat 9.0
Samba  3.0.0-2

Best regards,

Brett



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Backup from Linux onto Win2K-share

2003-11-17 Thread Carsten . Loeffler



2003. november 14. 12.35 dtummal Stefan G. Weichinger ezt rta:
 Guten Tag CarstendotLoeffler at commanddotde,

 am Freitag, 14. November 2003 um 11:08 schrieben Sie:

 CLcd Hi.

 CLcd I'm running Kernel 2.4.19 and Samba 2.2.5.

 CLcd I'm in need to do a backup out of big SAPDB database (60 GB)
 CLcd onto a share on a Win2K-box (all my databases have to backup
 CLcd onto this w2K-box where they get saved on tape).

 CLcd This works fine as long as it comes to 2 GB. Than it stops with
 CLcd the message file size exceeded. Obviously there is a file size
 limit CLcd somewhere in Samba.

 CLcd How can I get rid of it? I've tried to use a different kernel
 (2.4.22) CLcd and I compiled as well as new Samba 3.0.1 from source (on
a
 CLcd different machine). But I still have the problem. Whats wrong?

 CLcd (PS: NFS has a limit as well; 4 GB. But I need unlimited sizes)

 Seems like you hit the limit of the filesystem on the w2k-box.
 Not that of Samba.

 regards,
 Stefan G. Weichinger
 mailto:monitor at oopsdotcodotat

- I also think that Stefan.
- May you use FAT32 on w2k?
-
- --
-
- attiko

Hi guys,

I'm sorry, but you're wrong.

I'm using NTFS (its a Win 2000 Advanced Server with ~ 1 TB Harddrive)
because of security. 

I'm backing upwith SAP DB from a Windows-server to Windows-server without
any of this problems. All other servers (except Linux) can backup tons
of Gigabyte (the largest one is 120 GB) to that Windows-2000.

I only have this problem with my Linux boxes. And I can resolve on any
other Linux box running any distribution (Mandrake, RedHat, Suse ...).


Are you tar-ing onto the remote drive? tar is limited to 2gb unless you
use the 'gnu format' archive option

 John Snowdon - IT Support Specialist
-==-
 Faculty of Medical Sciences Computing Dept
 School of Medical Education Development
 University of Newcastle
 You mean, you have this problem with ALL your linux-boxes?

Please describe in more detail, I havent got the whole picture yet.

You have a Linux/Samba-machine which tries to put files to a
W2K-share?

Using smbclient? smbtar?
Have you mounted the share via smbfs, maybe?
Have you mounted the share via smbfs, maybe?

regards,
Stefan G. Weichinger
mailto:monitor at oopsdotcodotat


No, I'm not really taring. Right now I'm using following command to mount
a share on the windows box:

smbmount //ntsrvsr3/cmdhp5 /mnt/backupsmb -o username=kwhadm,dmask=777

I also tried mount -f smbfs ; but this failed as well.

Some more descriptions:
I have a Windows-2000-domain with ten W2K servers. One of the servers is my
backup server which has a share for each of the other servers where they
can put
their database-backups. As well I have a Linux box running a database; it
also
has to put its database backup to a share (named above).

A few words on my database: I'm running SAP DB 7.3. It has the option to
backup the database either on a tape or on into a file. If using
file-backup this
file can be anywhere on the linux, either in the local file system or in
NFS or in
SAMBA. SAP DB does not care on that as long as it can use a mount.
In Windows this works out perfectly for me (same technique).

Ive tried FTP, SAMBA and NFS: nothing can backup more than 2 or 4 Gigabyte.
Ive tried Suse Enterprise 8, Suse 8.2, Mandrake 8.1: same problem
everywhere.
At home I tried to manage it with XP-Professional and Suse Linux 8.2; there
I've tested a new compiled kernel and samba 3.0.1: same problem.

Sorry, but I'm getting frustrated.


Regards,
Carsten Lffler



__
 This message is intended for the addressee or its representative only.
  Any form of unauthorized use, publication, reproduction, copying or
  disclosure of the content of this e-mail is not permitted. If you are not
  the intended recipient of this e-mail message and its contents, please
  notify the sender immediately and delete this message and all its
  attachments subsequently.

  command ag


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Jérôme Tournier
 How will samba do that, or more accurately when ?
Well, if you need the 'add user script', this is because you want to
create a user with a tool like 'User Manager'. So, when creating a user
from User Manager, samba will call the script to create the posix part of
the account, and will then add the samba part.
Of course, you can create the account in a shell (with both the
posixAccount and the sambaSAMAccount) using the command
'smbldap-useradd.pl -a user'.
-- 
Jérôme


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Adam Williams
||Yes you can, but without the -a option:
 ||add user script = /usr/local/sbin/smbldap-useradd.pl -m %u
 |The only difference here is that it creates the home directory but still
 |posixAccount.
 |This makes creating a new user a 2 step:
 |1-smbldap-useradd.pl
 |2- smbpasswd
 |Are you using it in smb.conf add user script or not?  If so what does
 |smbpasswd have to do with anything?  
 |1. Create the posixAccount object (the purpose of smbldap-useradd).
 |2. *SAMBA* will create the sambaSamAccount attributes on the relevant
 |posixAccount.
 How will samba do that, or more accurately when ?

It will do that immediatly after invoking add user script, assuming add
user script returned a success return value.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Taymour A. El Erian
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Jérôme Tournier wrote:

|How will samba do that, or more accurately when ?
|
|Well, if you need the 'add user script', this is because you want to
|create a user with a tool like 'User Manager'. So, when creating a user
|from User Manager, samba will call the script to create the posix part of
|the account, and will then add the samba part.
|Of course, you can create the account in a shell (with both the
|posixAccount and the sambaSAMAccount) using the command
|'smbldap-useradd.pl -a user'.
Well, this script does not add sambaSAMAccount in my case and I do not
know why
- --
Taymour A El Erian
System Division Manager
CNA, MCSE, CCNA, LPIC
T.E. Data
E-mail: [EMAIL PROTECTED]
Web: www.tedata.net
Tel:+(202)-4166600
Ext:1101
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/uLb8X1dv4NHexooRAu/6AJ4xBglqW9jKNb0UMoVMguJnP45ELgCeNSCF
4jHsq8sjSekYCtFyrGD5ork=
=Ro7c
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Réf. : Re: [Samba] smbldap tools

2003-11-17 Thread stephane . purnelle

smbldap-useradd -a users work fine on my server
Your smbldap_conf.pm is correctly configured ?


---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467


   
  
Taymour A. El Erian  
  
[EMAIL PROTECTED]   Pour :  [EMAIL 
PROTECTED] 
Envoyé par :   cc :
  
[EMAIL PROTECTED]Objet :  Re: [Samba] smbldap tools

.samba.org 
  
   
  
   
  
17/11/2003 12:54   
  
   
  
   
  




-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



Jérôme Tournier wrote:

|How will samba do that, or more accurately when ?
|
|Well, if you need the 'add user script', this is because you want to
|create a user with a tool like 'User Manager'. So, when creating a user
|from User Manager, samba will call the script to create the posix part of
|the account, and will then add the samba part.
|Of course, you can create the account in a shell (with both the
|posixAccount and the sambaSAMAccount) using the command
|'smbldap-useradd.pl -a user'.

Well, this script does not add sambaSAMAccount in my case and I do not
know why

- --
Taymour A El Erian
System Division Manager
CNA, MCSE, CCNA, LPIC
T.E. Data
E-mail: [EMAIL PROTECTED]
Web: www.tedata.net
Tel:+(202)-4166600
Ext:1101

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/uLb8X1dv4NHexooRAu/6AJ4xBglqW9jKNb0UMoVMguJnP45ELgCeNSCF
4jHsq8sjSekYCtFyrGD5ork=
=Ro7c
-END PGP SIGNATURE-


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba




--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 2.5 together with Win2000 SP3

2003-11-17 Thread hanx
Hello,

i'm using Samba 2.5 (Suse Linux 8.1) Server together with 10 Win2000 SP3
clients.

I have following problem:

If a user eg User1 opens a global file and he saves the file, he gets the
user rights of this file.
From this moment on the ohter users can only read this file, but they are
not allowed to change it.

Thanks for your help

Hanx

-- 
NEU FÜR ALLE - GMX MediaCenter - für Fotos, Musik, Dateien...
Fotoalbum, File Sharing, MMS, Multimedia-Gruß, GMX FotoService

Jetzt kostenlos anmelden unter http://www.gmx.net

+++ GMX - die erste Adresse für Mail, Message, More! +++

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Jobs hanging printer after printing

2003-11-17 Thread Richard Stanton
Hi,

I wonder if anyone can help me out here.  I have an apple laserwriter
(postscript) printer attached to the network via ethertalk.  I have the
printer set up in cups, using the pap backend found here
(http://users.phg-online.de/tk/CUPS/backend/pap).  I then set the printer up
through samba so that windows (XP) users can print to it.  However if I
print a test page from windows, the job prints but then hangs the printer.
The printer status is listed as 'idle' but no-one can print to it.  If I
look at the printer status in the cups web interface the job which just
printed is listed as processing still.  It doesn't clear until I power cycle
the printer.  However if I send test prints directly from the linux server,
via the cups web interface, I can send multiple jobs and they print  clear
properly without hanging the printer - hence me believing that the problem
lies either with a samba setting, or with a setting in the windows printer
driver.  The linux server is yellow dog 3.

Any offers?  Here's my smb.conf:

# Samba config file created using SWAT
# from localhost.localdomain (127.0.0.1)
# Date: 2003/11/17 12:06:25

# Global parameters
[global]
workgroup = II
netbios name = RICH_SERVER
server string = Samba Server
security = SHARE
encrypt passwords = Yes
obey pam restrictions = Yes
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
unix password sync = Yes
log file = /var/log/samba/%m.log
max log size = 0
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
hosts allow = xxx.xxx.xxx.xxx
hosts deny = All
printing = cups

[homes]
comment = Home Directories
valid users = %S
read only = No
create mask = 0664
directory mask = 0775
hosts allow = 127.0.0.1
browseable = No

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

[med2f15]
comment = Apple laserwiter
path = /var/spool/samba
read only = No
guest ok = Yes
printable = Yes
printer name = med2f15
use client driver = Yes
oplocks = No

[Shared Drive]
path = /SharedDrive
read only = No
guest ok = Yes
hosts allow = 127.0.0.1, xxx.xxx.xxx.xxx

[Med3F03]
path = /var/spool/samba
read only = No
guest ok = Yes
printable = Yes
printer name = Med3F03
oplocks = No




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] The boss will discharge me, I spoiled the system. HELP!

2003-11-17 Thread Ferretero Herraduras Clavo
I have a mixture network with WinXP machines and IRIX (UNIX of Silicon Graphics) 
machines. In the machine with IRIX (O2) there was an old version of samba. It worked 
well.
But recently I've downloaded. I installed this new version, and I spoiled the system. 
Now I don't know if I have to reconfigure the smb.conf only or if I have to install 
more pakages or if I have to reconfigure several files... CAN ANYONE HELP ME???
 
Ferretero


-

    Antivirus • Filtros antispam • 6 MB gratis
    ¿Todavía no tienes un correo inteligente?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The boss will discharge me, I spoiled the system. HELP!

2003-11-17 Thread rruegner
Hi, post your smb.conf check the logs what samba version do you use?
Regards
- Original Message - 
From: Ferretero Herraduras Clavo [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, November 17, 2003 1:25 PM
Subject: [Samba] The boss will discharge me, I spoiled the system. HELP!


 I have a mixture network with WinXP machines and IRIX (UNIX of Silicon
Graphics) machines. In the machine with IRIX (O2) there was an old version
of samba. It worked well.
 But recently I've downloaded. I installed this new version, and I spoiled
the system. Now I don't know if I have to reconfigure the smb.conf only or
if I have to install more pakages or if I have to reconfigure several
files... CAN ANYONE HELP ME???

 Ferretero


 -

 Antivirus . Filtros antispam . 6 MB gratis
 ¿Todavía no tienes un correo inteligente?
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: The boss will discharge me, I spoiled the system. HELP!

2003-11-17 Thread Brett Maton
Hi Ferretero,

  You should only need to reconfigure the smb.conf file, you may also need
to recreate the smbpasswd file

Brett

Ferretero Herraduras Clavo [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
I have a mixture network with WinXP machines and IRIX (UNIX of Silicon
Graphics) machines. In the machine with IRIX (O2) there was an old version
of samba. It worked well.
But recently I've downloaded. I installed this new version, and I spoiled
the system. Now I don't know if I have to reconfigure the smb.conf only or
if I have to install more pakages or if I have to reconfigure several
files... CAN ANYONE HELP ME???

Ferretero


-

Antivirus . Filtros antispam . 6 MB gratis
¿Todavía no tienes un correo inteligente?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba (2.2.8a) driver download fails

2003-11-17 Thread Gernot Hueber
Hi there,

I have a problem with the rpc driver stuff:

I have copied the driver files to //atlas/print$/W32X86 and WIN40 (via 
filesystem copy), added and set the driver without errors.
But getdriver reports no driver associatet with the printer?!
So reports below.
I am sure, this was working on this system.
I tried to reinit the ntprinters.tdb, printing.tdb, nt_forms.tdb and
ntdrivers.tdb by removing and HUPPING all smbds (a plenty of users are
on the server so I could not restart smbd cleanly).

Can anybody give me some advice.

Thanks

Gernot

PS Maybe an issue:
I copied, added, and set the driver several times in a script (W32X86 
WIN40 for each printer of the same type!)

begin
atlas# rpcclient -U root%sukt19wk -c 'getdriver HP_1200N_Kloib 1' 
atlas
cmd = getdriver HP_1200N_Kloib 1
atlas#
end

enumdrivers is ok:
begin
atlas# rpcclient -U root%sukt19wk -c 'enumdrivers' atlas
cmd = enumdrivers
 [Windows 4.0]
Printer Driver Info 1:
Driver Name: [hp4p]
 Printer Driver Info 1:
Driver Name: [hp1200]
 Printer Driver Info 1:
Driver Name: [hp4050n]
  [Windows NT x86]
Printer Driver Info 1:
Driver Name: [hp1200]
 Printer Driver Info 1:
Driver Name: [hp4050n]
 Printer Driver Info 1:
Driver Name: [hp4p]
end
enumprinters is ok too
begin
atlas# rpcclient -U root%sukt19wk -c 'enumprinters' atlas
cmd = enumprinters
flags:[0x80]
name:[\\atlas\HP_1200N_Kas]
description:[\\atlas\HP_1200N_Kas,hp1200,HP LJ 1200 Kastler]
comment:[HP LJ 1200 Kastler]
 flags:[0x80]
name:[\\atlas\HP_1200N_Kloib]
description:[\\atlas\HP_1200N_Kloib,hp1200,HP_1200N_Kloib]
comment:[HP_1200N_Kloib]
 flags:[0x80]
name:[\\atlas\HP_4050N]
description:[\\atlas\HP_4050N,,HP 4050]
comment:[HP 4050]
 flags:[0x80]
name:[\\atlas\HP_4050N_2fach]
description:[\\atlas\HP_4050N_2fach,hp4050n,HP 4050 2.Fach]
comment:[HP 4050 2.Fach]
 flags:[0x80]
name:[\\atlas\HP_4050N_Konto]
description:[\\atlas\HP_4050N_Konto,hp4050n,HP_4050N_Konto]
comment:[HP_4050N_Konto]
 flags:[0x80]
name:[\\atlas\HP_Laserjet4+Buchm]
description:[\\atlas\HP_Laserjet4+Buchm,hp4p,HP_Laserjet4
+Buchm]
comment:[HP_Laserjet4+Buchm]
 flags:[0x80]
name:[\\atlas\HP_LaserJet4_Holz]
description:[\\atlas\HP_LaserJet4_Holz,hp4p,HP_LaserJet4_Holz]
comment:[HP_LaserJet4_Holz]
 flags:[0x80]
name:[\\atlas\Minolta_DI350]
description:[\\atlas\Minolta_DI350,,Minolta_DI350]
comment:[Minolta_DI350]
 atlas#
end
enumdrivers 3 crashes :-(
begin
atlas# rpcclient -U root%sukt19wk -c 'enumdrivers 3' atlas
cmd = enumdrivers 3
 [Windows 4.0]
Segmentation fault (core dumped)
atlas#
end
--
Dipl.-Ing. Gernot Hueber
Institut f. Integrierte Schaltungen
Altenbergerstr. 69
4040 Linz
Tel: +43 732 2468-7120, Fax: -7126
E-mail: [EMAIL PROTECTED]
WWW: www.riic.at
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The boss will discharge me, I spoiled the system. HELP!

2003-11-17 Thread Fernando Fonseca
Ferreto,

Give more information about your problem, your configuration, message errors, 
logs,  etc.

There are a new version of Samba, released at November 14. I will try to solve 
some of my problems installing it.

[ ]'s
Fernando Fonseca
Network Administrator
Tel: +55(11)4039-9260
Triaton do Brasil 



On Monday 17 November 2003 10:25, Ferretero Herraduras Clavo wrote:
 I have a mixture network with WinXP machines and IRIX (UNIX of Silicon
 Graphics) machines. In the machine with IRIX (O2) there was an old version
 of samba. It worked well. But recently I've downloaded. I installed this
 new version, and I spoiled the system. Now I don't know if I have to
 reconfigure the smb.conf only or if I have to install more pakages or if I
 have to reconfigure several files... CAN ANYONE HELP ME???

 Ferretero


 -

 Antivirus • Filtros antispam • 6 MB gratis
 ¿Todavía no tienes un correo inteligente?

-- 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Jérôme Tournier
 Well, this script does not add sambaSAMAccount in my case and I do not
 know why
Which version of smbldap-tools are you using ?

-- 
Jérôme


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Backup from Linux onto Win2K-share

2003-11-17 Thread Stefan G. Weichinger
Hey, Carsten,

am Montag, 17. November 2003 um 12:28 hast Du geschrieben:


 No, I'm not really taring. Right now I'm using following command to mount
 a share on the windows box:
 
 smbmount //ntsrvsr3/cmdhp5 /mnt/backupsmb -o username=kwhadm,dmask=777
 
 I also tried mount -f smbfs ; but this failed as well.

What do your logfiles tell you when you try this? Set loglevel to 2
and look that up.

 Some more descriptions:
 I have a Windows-2000-domain with ten W2K servers. One of the servers is my
 backup server which has a share for each of the other servers where they
 can put
 their database-backups. As well I have a Linux box running a database; it
 also
 has to put its database backup to a share (named above).

Off topic: Why not use Linux w/ Samba as backup-server?

 A few words on my database: I'm running SAP DB 7.3. It has the option to
 backup the database either on a tape or on into a file. If using
 file-backup this
 file can be anywhere on the linux, either in the local file system or in
 NFS or in
 SAMBA. SAP DB does not care on that as long as it can use a mount.
 In Windows this works out perfectly for me (same technique).
 
 Ive tried FTP, SAMBA and NFS: nothing can backup more than 2 or 4 Gigabyte.
 Ive tried Suse Enterprise 8, Suse 8.2, Mandrake 8.1: same problem
 everywhere.
 At home I tried to manage it with XP-Professional and Suse Linux 8.2; there
 I've tested a new compiled kernel and samba 3.0.1: same problem.
 
 Sorry, but I'm getting frustrated.

I understand. Have you already thought of the possibility that the
limit lies in the Linux-Version of your SAP DB? AFAI understand the
problem occurs ONLY with that one DB.

Can you create a db-backup-file on a local partition of that machine?

Consult your manuals and support to make sure SAP has no limit on
doing that so we can focus on the problem.

Keep up your head, it will work out ;-)
Stefan G. Weichinger
mailto:[EMAIL PROTECTED]



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ADS with Kerberos trust

2003-11-17 Thread Fernando Fonseca
Hi Fergus,

Look at the PDF included in the /doc directory source package of Samba caled 
HOWTO Collection, in the section 4.3.5 and 7.4 you will see how to do it.

I understand that just seting the 2 following parameters you say to AD to use 
Kerberos:
security = ADS
encrypt password = yes

To test your kerberos conection you can use kinit and klist, usualy placed in 
/usr/kerberos/bin.

[ ]'s


On Saturday 15 November 2003 01:42, Fergus wrote:
 Hi Fernando,
 We are using Samba 3 and I got it to authenticate to ADS.. But the key
 is to try and get it to authenticate to ADS using the alternative
 kerberos mapping.  When you do thi mapping in AD you can login using
 kerberos credentials.  I'm just not sure how to tell Samba to do this.

 Fergus

 -Original Message-
 From: Fernando Fonseca [mailto:[EMAIL PROTECTED]
 Sent: Friday, 14 November 2003 9:31 PM
 To: Fergus McKenzie-Kay; [EMAIL PROTECTED]
 Subject: Re: [Samba] ADS with Kerberos trust


 Fergus,

 What version of Samba are you using?

 With the version 3.0 if you set ¨encrypt password = yes¨ in smb.conf you
 will
 tell it to use Kerberos, but I think that you already do it.

 Other parameter is the ¨security = ADS¨ that enable the search in ADS.

 On Friday 14 November 2003 04:18, Fergus McKenzie-Kay wrote:
  Hi,
  We have an environment where we use LDAP and Kerberos and we are
  having trouble setting up Samba with both of these. We also have a
  win2k Active Directory server that has all the users mapped to our
  kerberos realm.  Unfortunately when we try and configure to use the
  Active Directory server for authentication it tries to use the native
  win2k password and not the kerberos realm mapping. I have tried to set
 
  the smb.conf to the kerberos realm and the password server to the KDC
  but I get: session setup failed: NT_STATUS_NO_LOGON_SERVERS
 
  Does anyone have any ideas how to make samba either use active
  directory with the username mappings to kerberos?  Or simply use
  kerberos authentication while and LDAP authorisation? I believe the
  first solution would be easier as then AD would look after all the
  details.. whereas when we tried to setup samba talking to kerberos and
 
  ldap, the ldap config needed changing and samba had to know how to
  create users in kerberos and ldap.
 
  Any ideas would be appreciated.
 
  --
  Fergus McKenzie-Kay [EMAIL PROTECTED]

-- 
Fernando Fonseca
Network Administrator
Tel: +55(11)4039-9260
Triaton do Brasil 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Taymour A. El Erian
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Jérôme Tournier wrote:

|Well, this script does not add sambaSAMAccount in my case and I do not
|know why
|
|Which version of smbldap-tools are you using ?
|
it is 0.8.1
- --
Taymour A El Erian
System Division Manager
CNA, MCSE, CCNA, LPIC
T.E. Data
E-mail: [EMAIL PROTECTED]
Web: www.tedata.net
Tel:+(202)-4166600
Ext:1101
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/uMK8X1dv4NHexooRAl3fAJ9FcdzvyxlBB5AmGY2I+fdUQnzXeQCgqegM
8MBG5p3onniq7ZGAQTmKI0U=
=LliS
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Stupid problem with SAMBA and Windows NT4...

2003-11-17 Thread Rainer Hantsch
Hello!

Because I have the strangest problems at one of my customers, I want to ask a
few questions on what I could do to make his life easier...

Server: Samba 2.5.x on SuSE 8.1 (that samba which comes with SuSE 8.1)
Password-Encryption=NO   PDC-Controller: NONE
This is a simple workgroup LAN.
There is also one Windows NT4.0 Server there, running since some
years.

Clients:Windows NT 4.0 Workstation
PlainTextPassword-Patch installed.  Windows-Users log in with no
password into the Windows-Network.
Because the Linux-Server is primarily the Internet Mailserver,
this machine uses good passwords. (Does not harm users, because
Eudora remembers the password, so they do not have to hack it in.)

So this is a very trivial LAN environment, but surely good enough for 5 Users
and running since years. Because the Windows-Server is now running out of
disk space, I tried to activate SAMBA now (to move some files to Linux).

I did this several times many times before, and I am very sure that I
configured everything correctly, because it basically works.


My questions:
-
a.)  Is there a way to have Windoze login as soothly as Win98 does?
 I would like that Windows does remember the last password, but it
 seems to be too dumb for that.

b.)  Primarily I need only printing from SAMBA, but I must connect a
 network drive, otherwise printing is also dead.

c.)  While other customers (also running NT4 + SAMBA) have no problems
 with printing, this Windoze always writes Cannot connect to printer
 in the header of the printer status window, BUT IT STILL PRINTS.
 But I am unable to see queued jobs and/or delete some, which defini-
 tely works at another customer. (- But I compared the setup, it is
 identical! Something special/new with Samba 2.2.5? the other customer
 is running an older samba (SuSE 8.0)).   :-/

d.)  Is there a way to let SAMBA accept connections without any password,
 while the user accounts on the Linux-Server are still with good pass-
 words? -- I will prefer SAMBA access without any password. Because
 everything is bound to the local NIC and the server is running fire-
 wall, Masquerading,..., this shouldn't be really dangerous at all.
 Maybe this will help.


mfg

  Ing. Rainer Hantsch

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Jérôme Tournier
 it is 0.8.1
This version should add the sambaSAMAccount. The problem is somewhere else.
You shoul tried starting openldap in command line: slapd -u ldap -d -1
and see if samba's attributes are given to the server...
-- 
Jérôme


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The boss will discharge me, I spoiled the system. HELP!

2003-11-17 Thread Ferretero Herraduras Clavo
I'm writting from windows, I can't copypaste of the txt of the files, but i can 
writte it.
 
;more or less is like this i can' obtain the original smb.conf because
;samba doesn't  work, :-S. I've not wrote the comments
[global]
 comment = O2 R1
 workgroup = CAMS
 printing = sysv
 netbios name = SAMBA
; host msdfs = yes
 encrypt passwords = yes
;I think this three lines behind , dfsn, are wrong.
[dfs]
 path = /usr/tmp
 msdfs root = yes
 print command = /usr/samba/bin/sambalp%p %s %U %m
 load printers = yes
 guest account = nobody
 brownseable = yes
 max log size = 50
 locking = yes
 lock directory = /usr/samba/var/locks
 share modes = yes
 socket options = TCP_NODELAY
 os level = 0
 prerrefered master = no
 domain master = no
 local master = no
 wins support = no
 wins server =
 preserve case = yes
 shor preserve case = yes
[homes]
 comment = printer driver directory
 browseable = no
 writable = yes

[printers]
 comment = All Printers
 path = /usr/tmp
 browseable = no
 printable = yes
 public = yes
 writable = no
 create mask = 0700
[tmp]
 comment = Temporary file space
 path = /usr/tmp
 read only = no
 public = yes
 
The package i've installed is samba65.2.2.8.tardist.
 
ferretero
 


rruegner [EMAIL PROTECTED] wrote:
Hi, post your smb.conf check the logs what samba version do you use?
Regards
- Original Message - 
From: Ferretero Herraduras Clavo 
To: 
Sent: Monday, November 17, 2003 1:25 PM
Subject: [Samba] The boss will discharge me, I spoiled the system. HELP!


 I have a mixture network with WinXP machines and IRIX (UNIX of Silicon
Graphics) machines. In the machine with IRIX (O2) there was an old version
of samba. It worked well.
 But recently I've downloaded. I installed this new version, and I spoiled
the system. Now I don't know if I have to reconfigure the smb.conf only or
if I have to install more pakages or if I have to reconfigure several
files... CAN ANYONE HELP ME???

 Ferretero


 -

 Antivirus . Filtros antispam . 6 MB gratis
 ¿Todavía no tienes un correo inteligente?
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions: http://lists.samba.org/mailman/listinfo/samba



-

    Antivirus • Filtros antispam • 6 MB gratis
    ¿Todavía no tienes un correo inteligente?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] N-Flag gone?

2003-11-17 Thread Tilo Lutz
Hi

Is the N-flag gone in samba 3.0.1?
I wasn't able to get any information about it.
Although accounts set to no password weren't
able to log in when the N-flag wasn't
set.

Were can I get some information about the new
H- and S-flag

Regards, Tilo


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: The boss will discharge me, I spoiled the system. HELP!

2003-11-17 Thread Ferretero Herraduras Clavo
hello Brett and thanks for your help,
I've run  the smbpasswd:
 
[strike:root]smbpasswd
New SMB password: *
Retype new SMB password: *
Failed to find entry for user root.
Failed to modify password entry for user root.
[strike:root]
 
 and I don't notice anything. I always worked like root. We are two workers only.
 
Ferretero

Brett Maton [EMAIL PROTECTED] wrote:
Hi Ferretero,

You should only need to reconfigure the smb.conf file, you may also need
to recreate the smbpasswd file

Brett

Ferretero Herraduras Clavo wrote in message
news:[EMAIL PROTECTED]
I have a mixture network with WinXP machines and IRIX (UNIX of Silicon
Graphics) machines. In the machine with IRIX (O2) there was an old version
of samba. It worked well.
But recently I've downloaded. I installed this new version, and I spoiled
the system. Now I don't know if I have to reconfigure the smb.conf only or
if I have to install more pakages or if I have to reconfigure several
files... CAN ANYONE HELP ME???

Ferretero


-

Antivirus . Filtros antispam . 6 MB gratis
¿Todavía no tienes un correo inteligente?
-- 
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba

-

    Antivirus • Filtros antispam • 6 MB gratis
    ¿Todavía no tienes un correo inteligente?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Re: The boss will discharge me, I spoiled the system. HELP!

2003-11-17 Thread Brett Maton
Hi,

  Ok, looks like your smbpasswd file was overwritten try adding root again
with the -a flag:

[strike:root]smbpasswd -a root

Brett

Ferretero Herraduras Clavo [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
hello Brett and thanks for your help,
I've run  the smbpasswd:

[strike:root]smbpasswd
New SMB password: *
Retype new SMB password: *
Failed to find entry for user root.
Failed to modify password entry for user root.
[strike:root]

 and I don't notice anything. I always worked like root. We are two workers
only.

Ferretero

Brett Maton [EMAIL PROTECTED] wrote:
Hi Ferretero,

You should only need to reconfigure the smb.conf file, you may also need
to recreate the smbpasswd file

Brett

Ferretero Herraduras Clavo wrote in message
news:[EMAIL PROTECTED]
I have a mixture network with WinXP machines and IRIX (UNIX of Silicon
Graphics) machines. In the machine with IRIX (O2) there was an old version
of samba. It worked well.
But recently I've downloaded. I installed this new version, and I spoiled
the system. Now I don't know if I have to reconfigure the smb.conf only or
if I have to install more pakages or if I have to reconfigure several
files... CAN ANYONE HELP ME???

Ferretero


-

Antivirus . Filtros antispam . 6 MB gratis
¿Todavía no tienes un correo inteligente?
-- 
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba

-

Antivirus . Filtros antispam . 6 MB gratis
¿Todavía no tienes un correo inteligente?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] The boss will re-admit me, the system is worked again. THANKS!

2003-11-17 Thread Ferretero Herraduras Clavo
THAANKS A LT  TO ALL THE PEOPLE !!
 
YOU'RE MY LIFEBELT
 
Ferretero




-

    Antivirus • Filtros antispam • 6 MB gratis
    ¿Todavía no tienes un correo inteligente?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Join Machine to Domain

2003-11-17 Thread manuel . piessnegger




Hi,

I forgot to tell you, that the samba password from the
uid=Administrator,ou=Users,dc=tow,dc=net MUST be the same like the samba
password for root .
Because samba will expect both the client and the server user to have the
same password. After that the option username map will work correctly.



Regards

Manuel Piessnegger



   
 Kent L.  
 Nasveschuk   
 [EMAIL PROTECTED]  To 
 .ma.us   [EMAIL PROTECTED]
cc 
 14.11.2003 17:44  Samba List Server   
   [EMAIL PROTECTED] 
   Subject 
   Re: [Samba] Join Machine to Domain  
   
   
   
   
   
   




I appreciate your help on this. I still am having problems. Attached a
some of the pertinent configuration files.

I can login in with any account so connection and password to access
ldap server works, just can't join domain. I get an error message bad
passwd or unknown user. I added the username map but root =
administrator still doesn't work.

# Administrator, Users, tow.net
dn: uid=Administrator,ou=Users,dc=tow,dc=net
cn: Administrator
sn: Administrator
objectClass: inetOrgPerson
objectClass: sambaSAMAccount
objectClass: posixAccount
gidNumber: 0
uid: Administrator
uidNumber: 0
homeDirectory: /accounts/Administrator
sambaPwdLastSet: 1068814077
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 1068814077
sambaPwdMustChange: 2147483647
sambaHomePath: \\whs1\Administrator
sambaHomeDrive: H:
sambaProfilePath: \\whs1\profiles\
sambaLMPassword: E3B4E05BE6A182C9E13B8E8F6853DCAC
sambaNTPassword: F4858C7E53BB628AE91E00E9DB6CD467
sambaAcctFlags: [U  ]
sambaSID: S-1-5-21-1129281578-1295143107-3311307472-1000
loginShell: /bin/bash
gecos: Netbios Domain Administrator
sambaPrimaryGroupSID: S-1-5-21-1129281578-1295143107-3311307472-1001
userPassword:: e1NNRDV9ZGpiNFo3ODQ3VFlKYWJYZEM5ZGRtSkFpMklzPQ==



smb.conf:


[global]
workgroup = WarehamPS
encrypt passwords = Yes
time server = Yes
socket options = TCP_NODELAY
security = user
logon script = netlogon.bat
writable = Yes
dns proxy = no
directory mask = 02770
preferred master = yes
netbios name = WHS1
server string = RedHat 8.0 LDAP Server
passdb backend = ldapsam
ldap passwd sync = Yes
passwd program = /usr/local/samba/bin/smbpasswd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUnix\spassword:* %n\n
log file = /var/log/samba.%m
debug level = 2
max log size = 50
add user script = /usr/local/sbin/smbldap-useradd.pl %u
#delete user script = /usr/local/sbin/smbldap-useradd.pl
#add group script = /usr/local/sbin/smbldap-groupadd.pl
delete group script = /usr/local/sbin/smbldap-groupdel.pl
add machine script = /usr/local/samba/bin/smbpasswd -a -m %u
#add machine script = /usr/sbin/useradd -d /dev/null -g 502 -s
/bin/false -M %u
logon script = netlogon.bat
logon path = \\%N\profiles\%g
logon drive = H:
logon home = \\%L\%U
domain logons = Yes
os level = 64
domain master = Yes
dns proxy = No
admin users = @domain_admins
#   wins support = Yes
ldap suffix = dc=tow,dc=net
ldap machine suffix = ou=Computers
ldap user suffix = ou=Users
ldap group suffix = ou=Groups
ldap admin dn = cn=admin,dc=tow,dc=net
ldap ssl = no
username map = /usr/local/samba/private/smbusers
[homes]
comment = Home Directories
read only = no
browseable = no
writable = yes
path = %H
#   valid users = %S
hide files = /.*/

[profiles]
path = /accounts/profiles
read only = no
create mask = 0600
directory mask = 0700

[netlogon]
comment = Netlogon share
path = /usr/local/samba/netlogon
locking = no
browseable = no
read only = yes
write list = @domain_admins

[staff]
comment 

[Samba] Kerberos-authentication to a Samba server without a Windows KDC ?

2003-11-17 Thread Holger Brückner
Hello,

i'm currently trying to find a way to integrate a openafs cell and samba
(without plaintext passwords).

this should all be possible with a windows kdc, giving out afs tickets
and forward these tickets to the samba server.
unfortuntely this is not an option here.

is there a way to connect samba 3.x to a mit krb5 server ?

Holger Brueckner
net-labs Systemhaus GmbH



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba3 HowTo

2003-11-17 Thread marion.haines
For John Terpstra:


Just got your new book from Amazon.  All I can say is:  VERY GOOD!!!  Can easily 
recommend it for anyone, especially those of us who just want to make better use of 
Samba but aren't Linux gurus/code commandoes!


I wouldn't begin to know how to contribute anything, but I'll certainly continue to 
buy and learn from such good material!


Thanks,
Marion D. Haines
Network Administrator
Board of County Commissioners
Brevard County, Florida
== 
EMail:  [EMAIL PROTECTED]
Phone:  321-617-7398
== 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Question about locking files

2003-11-17 Thread kevork

Hi,

We setup a samba server to replace a NT server that is acting as fileserver, 
where executables and databases are stored.

All works fine except when more than one people try to use the same program at 
the same time, as they used to do using NT file server.

I guess I must do some locking config on samba ... is it so ?.

Samba is 2.2.7a running on RH 9.0 box.

Could please some one give me some idea ?.

Thank you !

Jorge.


-
This mail sent through IMP: http://horde.org/imp/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] printer permissions - ERROR: NULL dest in safe_strcpy (samba 3.0.0)

2003-11-17 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
|
Hey Christoph,

| I'm using SAMBA 3.0.0 on Solaris 9, it looks very
| cute, unfortunately I can not set the permissions
| on the printers (I can as an admin add a user etc.
| but all changes are lost after applying):-(
There was a significant printing fix for 200X/XP
clients in 3.0.1pre3.  I just tested the latest
SAMBA_3_0 cvs and setting a printer acl works
so you might want to try the latest 3.0.1 snapsnot.
| Is this somehow related to the error entries in
| the log file:
|
| [2003/11/17 14:45:31, 0] lib/util_str.c:safe_strcpy_fn(577)
|   ERROR: NULL dest in safe_strcpy
This was fixed in 3.0.1pre1 I think (i know it was
fixed...just don't remember when).


- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/uOAIIR7qMdg1EfYRAsoZAKDBvnFzzvuLATBXBHJTff8hW2SVwwCfXYFF
b9JHuxjnqnBo64bpC7ZgZPY=
=fr40
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] (no subject)

2003-11-17 Thread Carsten . Loeffler

Hi.

Stefan, thanks for your ongoing support. I believe your mothertongue
is German as well but I will go on writing in English so everybody
can participate

In meantime I found in several other newsgroups that I'm not the only
one, but I did not find a solution)


Hey, Carsten,

 am Montag, 17. November 2003 um 12:28 hast Du geschrieben:
 No, I'm not really taring. Right now I'm using following command to
mount
 a share on the windows box:

 smbmount //ntsrvsr3/cmdhp5 /mnt/backupsmb -o username=kwhadm,dmask=777

 I also tried mount -f smbfs ; but this failed as well.

% What do your logfiles tell you when you try this? Set loglevel to 2
% and look that up.

Good idea. I did not know that there are any logfiles.
Can you give me a hint how to switch them on or switch
them to level 2? Thanks.


 Some more descriptions:
 I have a Windows-2000-domain with ten W2K servers. One of the servers is
my
 backup server which has a share for each of the other servers where they
 can put
 their database-backups. As well I have a Linux box running a database; it
 also
 has to put its database backup to a share (named above).

% Off topic: Why not use Linux w/ Samba as backup-server?

Yippie. I was wondering how long it might take before this question
will come up. Yes, I did. And: the other way around may work (see a
little later in that mail).
BUT: I HAVE TO USE WINDOWS. (to many arguments in this company to tell).


 A few words on my database: I'm running SAP DB 7.3. It has the option to
 backup the database either on a tape or on into a file. If using
 file-backup this
 file can be anywhere on the linux, either in the local file system or in
 NFS or in
 SAMBA. SAP DB does not care on that as long as it can use a mount.
 In Windows this works out perfectly for me (same technique).

 Ive tried FTP, SAMBA and NFS: nothing can backup more than 2 or 4
Gigabyte.
 Ive tried Suse Enterprise 8, Suse 8.2, Mandrake 8.1: same problem
 everywhere.
 At home I tried to manage it with XP-Professional and Suse Linux 8.2;
there
 I've tested a new compiled kernel and samba 3.0.1: same problem.

 Sorry, but I'm getting frustrated.

% I understand. Have you already thought of the possibility that the
% limit lies in the Linux-Version of your SAP DB? AFAI understand the
% problem occurs ONLY with that one DB.

Yes I did. I have SAP support and asked them:
they dont have any limit inside.

% Can you create a db-backup-file on a local partition of that machine?

Not yet anymore. The db exceeded the 50 % limit of the harddrive 2 weeks
ago. Right now the only backup I can do is on tape. This is not
working as well; but that's a different story. But before that date
(it was shortly after installation of the db) we made a backup on
harddrive. That worked out fine. With samba I've created a share on
LINUX to access the backup's folder and we were able to squeeze the
55 GB out of the box. But that option is not available to me anymore.

% Consult your manuals and support to make sure SAP has no limit on
% doing that so we can focus on the problem.

I did. SAP has no limit (un/fortunately).

Stefan, do you think there may be a switch in the kernel, or
something with my GLIBC? I've found some people telling others to
create a new kernel with a new GLIBC?!?! I dont know if that really
makes sense. In my eyes I would have made more sense to choose a
newer version of SAMBA.



% Keep up your head, it will work out ;-)
% Stefan G. Weichinger
% mailto:monitor at oopsdotcodotat


I'm trying to keep my head up. With Linux books  ;-)

Regards,
Carsten Lffler






__
 This message is intended for the addressee or its representative only.
  Any form of unauthorized use, publication, reproduction, copying or
  disclosure of the content of this e-mail is not permitted. If you are not
  the intended recipient of this e-mail message and its contents, please
  notify the sender immediately and delete this message and all its
  attachments subsequently.

  command ag


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Aaron Smith
Ahhh...but what if the posixAccount already exists?  This is the issue
I've run in to.  I migrated my /etc/passwd accounts to LDAP and am now
attempting to add sambaSAMAccount information to those accounts.  If I
try to run 'smbldap-useradd.pl -a ExistingPosixUser', I get an error
saying that the user already exists.

I suppose I could delete the user and then recreate it with the above
command line, but that shouldn't be necessary (in my eyes at least).  

A second question.  I'd like to have the NTpasswords (for samba) and the
posix passwords ( for Unix logins and such) be different.  How do I
accomplish that?  Can smbpasswd be used (once the sambaSAMAccount
portion is created) be used to change ONLY the smb password and
smbldap-passwd.pl be used to change ONLY the unix posix password?

On Mon, 2003-11-17 at 06:52, Jérôme Tournier wrote:
 Of course, you can create the account in a shell (with both the
 posixAccount and the sambaSAMAccount) using the command
 'smbldap-useradd.pl -a user'.
 -- 
 Jérôme
-- 
-
The pain of war could not exceed, the woe 
of aftermath.
The drums will shake the castle walls
The ringwraiths ride in black
-Led Zeppelin The Battle of Evermoore

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Domain Local Groups/Kerberos Ticket

2003-11-17 Thread Dominik Brosch
Hi Group,

Maybe two simple questions for experts in Samba 3.

- How can I use my smart Domain-Local-Groups from ADS. I am only seeing
Global Groups.

- What will happened, when Kerberos-Ticket expire? Will I get automatically
a new ticket, or do I have to create manually a new one with 'kinit'?

Thanks in advance.

Regards

Dominik



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap tools

2003-11-17 Thread Jérôme Tournier
 Ahhh...but what if the posixAccount already exists?  This is the issue
 I've run in to.  I migrated my /etc/passwd accounts to LDAP and am now
 attempting to add sambaSAMAccount information to those accounts.  If I
 try to run 'smbldap-useradd.pl -a ExistingPosixUser', I get an error
 saying that the user already exists.

There's no option today to add the sambaSAMAccount objectclass to an
existing user. But this can be quickly done. I just not have enought time
to do it now.

 I suppose I could delete the user and then recreate it with the above
 command line, but that shouldn't be necessary (in my eyes at least).

 A second question.  I'd like to have the NTpasswords (for samba) and the
 posix passwords ( for Unix logins and such) be different.  How do I
 accomplish that?  Can smbpasswd be used (once the sambaSAMAccount
 portion is created) be used to change ONLY the smb password and
 smbldap-passwd.pl be used to change ONLY the unix posix password?

Well, you have to be sure that the smb.conf does not include 'ldap
password sync = Yes' (to be certain, you can add 'ldap password sync =
No'). So when a 'samba user' will change his password, he will change only
the lmpassword and ntpassword attributes. Now for unix users: the
'smbldap-password.pl' command will change both windows passwords and unix
password. If you have configured pam and nss_ldap, you should better user
the 'password' command that can change a ldap password.
-- 
Jérôme


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] printer permissions - ERROR: NULL dest in safe_strcpy (samba 3.0.0)

2003-11-17 Thread christoph.beyer
Hi again,

thanks I will try that out during this week, I have another one:

I'm mapping everyone to 'nobody' unfortunately the acl's of the temprorary
files are not readable by the user 'lp':

[printsrv4] ~lp/etc # tail -f /tmp/samba_acls.txt
-rw---   1 nobody   nobody111614 Nov 17 15:58 smbprn.0026.EaaqrB
-rw---   1 nobody   nobody111613 Nov 17 16:01 smbprn.0027.rUai4B

I tried 'force create mode = 0777' but it doesn't seem to have any impact
on the acl's of the temporary spool files. Did I miss something, I think
the same configuration worked fine under 2.2.x (?)

thanks for your support !!!
~christoph


-- 
/*   Christoph Beyer |   Office: Building 2b / 23 *\
 *   DESY|Phone: 040-8998-2317*
 *   - IT -  |  Fax: 040-8998-4060*
\*   22603 Hamburg   | http://www.desy.de */


On Mon, 17 Nov 2003, Gerald (Jerry) Carter wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 [EMAIL PROTECTED] wrote:
 |

 Hey Christoph,

 | I'm using SAMBA 3.0.0 on Solaris 9, it looks very
 | cute, unfortunately I can not set the permissions
 | on the printers (I can as an admin add a user etc.
 | but all changes are lost after applying):-(

 There was a significant printing fix for 200X/XP
 clients in 3.0.1pre3.  I just tested the latest
 SAMBA_3_0 cvs and setting a printer acl works
 so you might want to try the latest 3.0.1 snapsnot.

 | Is this somehow related to the error entries in
 | the log file:
 |
 | [2003/11/17 14:45:31, 0] lib/util_str.c:safe_strcpy_fn(577)
 |   ERROR: NULL dest in safe_strcpy

 This was fixed in 3.0.1pre1 I think (i know it was
 fixed...just don't remember when).




 - --
 cheers, jerry
 - --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.2.1 (GNU/Linux)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

 iD8DBQE/uOAIIR7qMdg1EfYRAsoZAKDBvnFzzvuLATBXBHJTff8hW2SVwwCfXYFF
 b9JHuxjnqnBo64bpC7ZgZPY=
 =fr40
 -END PGP SIGNATURE-



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] I'm new-Win XP slow with Samba server

2003-11-17 Thread Patrick
Hi,

Try disabling the WebClient service on the WinXp clients.  This should 
help speed things up.

Patrick

Stefano wrote:

Hello to all all all :-),
I'm new in this mailing list and I would like to ask you a question, please.
I have a lan with a samba server version 2.2.3a-12.3 on a linux debian system.
All client in the net can connect fast to the samba server (win98/2000) but only 
client with windows xp
connect them very slowly to the server and only the first time.
After 5/10 minutes they connect to smb server and all xp client can work good and 
fast, now.
Do you know a solution to this problem?

THANK YOU VERY MUCH FOR YOUR HELP.

Ciao
Stefano
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbpasswd fails to add machine account with ldapsam

2003-11-17 Thread Patrick
Hi,

I do believe this is a bug in samba 3.  If you use the same ou as the 
user accounts it will work.

Patrick

Pirkka Luukkonen wrote:

Hi!

I am seeing other users with the same problem as I have. My samba also fails
to add machine accounts. It seems to me if it didn't even try. If I use some
other script (pdbedit, smbldap-tools) than smbpasswd it manages to add the
account but still fails to authenticate within the same session. If I try
again the machine account exists and authentication goes ok.
server:~# smbpasswd -a -m machine_name -D 10
Netbios name list:-
my_netbios_names[0]=SERVER
Trying to load: ldapsam:ldap://10.0.0.1/
Attempting to register passdb backend ldapsam
Successfully added passdb backend 'ldapsam'
Attempting to register passdb backend ldapsam_compat
Successfully added passdb backend 'ldapsam_compat'
Attempting to register passdb backend smbpasswd
Successfully added passdb backend 'smbpasswd'
Attempting to register passdb backend tdbsam
Successfully added passdb backend 'tdbsam'
Attempting to register passdb backend guest
Successfully added passdb backend 'guest'
Attempting to find an passdb backend to match ldapsam:ldap://10.0.0.1/
(ldapsam)
Found pdb backend ldapsam
Searching for:[((objectClass=sambaDomain)(sambaDomainName=SAMBA))]
smbldap_search_suffix: searching
for:[((objectClass=sambaDomain)(sambaDomainName=SAMBA))]
smbldap_open_connection: ldap://10.0.0.1/
smbldap_open_connection: connection opened
ldap_connect_system: Binding to ldap server ldap://10.0.0.1/ as
cn=admin,dc=foo,dc=bar
ldap_connect_system: succesful connection to the LDAP server
The LDAP server is succesful connected
pdb backend ldapsam:ldap://10.0.0.1/ has a valid init
Attempting to find an passdb backend to match guest (guest)
Found pdb backend guest
pdb backend guest has a valid init
smbldap_search_suffix: searching
for:[(((uid=machine_name$)(objectclass=sambaSamAccount))(objectclass=samba
SamAccount))]
ldapsam_getsampwnam: Unable to locate user [machine_name$] count=0
Finding user machine_name$
Trying _Get_Pwnam(), username as lowercase is machine_name$
Trying _Get_Pwnam(), username as uppercase is MACHINE_NAME$
Checking combinations of 0 uppercase letters in machine_name$
Get_Pwnam_internals didn't find user [machine_name$]!
Failed initialise SAM_ACCOUNT for user machine_name$.
Failed to modify password entry for user machine_name$
--
Samba 3.0 PDC, Debian Woody, OpenLDAP
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


SV: [Samba] SAMBA 3.0.0 PDC + LDAP - Adding Computer Account

2003-11-17 Thread Tarjei Bitustøyl
Hi,

First, there's an error in the smb.conf: ldap user suffix has a typo.

Second, I ran into a similar problem myself. No matter what I do, I
cannot make a computer register in the LDAP *with ldap machine suffix
different from ldap people suffix*.

I have no idea why this is, but it's working with the people and machine
suffix in the same dn.

Regards
Tarjei

-Opprinnelig melding-
Fra: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] På vegne
av [EMAIL PROTECTED]
Sendt: 16. november 2003 21:58
Til: [EMAIL PROTECTED]
Emne: [Samba] SAMBA 3.0.0 PDC + LDAP - Adding Computer Account

Hello all,

I'm having an issue with adding machine accounts to a Samba 3.0.0 PDC
with
an LDAP passwd db backend.  This is on a RedHat 9 with an rpm I compiled
from the 3.0.0 release. I have configured samba to where it is using
LDAP
and able to add user accounts and group mappings to LDAP, but when I try
to add a computer account using smbpasswd -a -m data it is not able to
add
the account.  I ran it with the debug option and here is what I get:

(pts/2)[EMAIL PROTECTED] samba]# smbpasswd -a -m data -D 10
Netbios name list:-
my_netbios_names[0]=IMPACT
Trying to load: ldapsam:ldap://127.0.0.1
Attempting to register passdb backend ldapsam
Successfully added passdb backend 'ldapsam'
Attempting to register passdb backend ldapsam_compat
Successfully added passdb backend 'ldapsam_compat'
Attempting to register passdb backend smbpasswd
Successfully added passdb backend 'smbpasswd'
Attempting to register passdb backend tdbsam
Successfully added passdb backend 'tdbsam'
Attempting to register passdb backend guest
Successfully added passdb backend 'guest'
Attempting to find an passdb backend to match ldapsam:ldap://127.0.0.1
(ldapsam)
Found pdb backend ldapsam
Searching for:[((objectClass=sambaDomain)(sambaDomainName=MATRIX))]
smbldap_search_suffix: searching
for:[((objectClass=sambaDomain)(sambaDomainName=MATRIX))]
smbldap_open_connection: ldap://127.0.0.1
smbldap_open_connection: connection opened
ldap_connect_system: Binding to ldap server ldap://127.0.0.1 as
cn=Samba
Admin,ou=People,dc=firerun,dc=net
ldap_connect_system: succesful connection to the LDAP server
The LDAP server is succesful connected
pdb backend ldapsam:ldap://127.0.0.1 has a valid init
Attempting to find an passdb backend to match guest (guest)
Found pdb backend guest
pdb backend guest has a valid init
smbldap_search_suffix: searching
for:[((uid=data$)(objectclass=sambaSamAccount))]
ldapsam_getsampwnam: Unable to locate user [data$] count=0
Finding user data$
Trying _Get_Pwnam(), username as lowercase is data$
Trying _Get_Pwnam(), username as uppercase is DATA$
Checking combinations of 0 uppercase letters in data$
Get_Pwnam_internals didn't find user [data$]!
Failed initialise SAM_ACCOUNT for user data$.
Failed to modify password entry for user data$


My relavent smb.conf options are

#== Password Database

# Define the backend to use
passdb backend = ldapsam:ldap://127.0.0.1

# Define the DN that will be used to bind to the ldap directory
# must have write access to lmPassword and ntPassword attributes
# use smbpasswd -w secret to store password
ldap admin dn = cn=Samba Admin,ou=People,dc=firerun,dc=net

# Should ssl be used to connect to ldap server
# (off, start tls, on) default = on
ldap ssl = off

# smbpasswd -x delete the entire dn-entry
ldap delete dn = no

# The machine and user suffix added to the base suffix
# wrote WITHOUT quotes.  NULL suffixes by default
ldap user suffix = ou=People,dc=fireru,dc=net
ldap group suffix = ou=Group,dc=firerun,dc=net
ldap idmap suffix = ou=Idmap,dc=firerun,dc=net
ldap machine suffix = ou=Computers,dc=firerun,dc=net

# Specify the base DN to use when searching the directory
ldap suffix = dc=firerun,dc=net

# Specify the search filter. Generally the default is okay
# ldap filter = ((uid=%u)(objectclass=sambaAccount))

# Should ldap passwords be synced with nt passwords
# (yes, no, only) default = no
ldap passwd sync = no

# Allow adding a computer account to ldap
add machine script = /etc/samba/ldapaddcomp %m$

#==

As for the user data$ it already exists in the directory as:

# data$, Computers, firerun, net
dn: uid=data$,ou=Computers,dc=firerun,dc=net
uid: data$
cn: Computer Account
objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
uidNumber: 1007
gidNumber: 1003
homeDirectory: /dev/null
gecos: Computer Account
loginShell: /sbin/nologin
description: Computer Account
shadowLastChange: 12372
shadowMin: 0
shadowMax: 9
shadowWarning: 7

when I do a getent passwd the computer account data$ shows up in the
listing so by all accounts the account exists. As for LDAP ACL the Samba
admin has write access to the Computer ou in the Directory so it should
be
able to update the information.  I did find out that in the ldap log it
has:

Nov 16 13:32:42 impact slapd[10664]: conn=9 op=1 SRCH
base=ou=People,dc=firerun,dc=net scope=1

Re: [Samba] how many users?

2003-11-17 Thread John H Terpstra
On Mon, 17 Nov 2003, Pirkka Luukkonen wrote:

 Hi!

 Can anyone tell how many users with different uids can you add to samba/gnu
 linux/ldap -environment? Is 5-20 users possible?

The key limitation is how many users your UNIX/Linux system can handle.
If UID/GID has a maximum value of 65535 (an unsigned int) then that is the
limit you can use.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Printers in Printerassistent

2003-11-17 Thread Stefan . Iven




Hello together,

I realy need help!!


i use samba3 as PDC with LDAP. Everything works fine.
I can browse the network over networkneighborhood  and there
i can see all shares and printers.
But if i go to the controlpanel of a ms-client (NTsp6a or W2k sp4), go to
printers, new printers,
choos networkprinters,click next button I can't see the printers. Also I
can't see my
samba server.
When I try to switch between printer in an appliction like Word, it tooks a
very long time.
Somtimes it seems that the aplication crashes. I'm not sure, but do these
problems
belong together?

First I thought that there is somthing wrong with my netbios and TCP/IP
settings.
But I'm not able to find wrong settings.

The Clients and Samba is using the same subnet.
Samba is configured with wins support and as masterbrowser.
Clients are using sambaserver as winsserver.
Pings on the netbiosname of the sambaserver works.

Befor samba3 i used samba2.2.8 and there it worked.
I use suse linux 8.0.

Can someone please help me??


Thanks a lott!!

Stefan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SWAT adds suffix

2003-11-17 Thread John H Terpstra
On Mon, 17 Nov 2003, Taymour A. El Erian wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Hi,


 ~I just tried SWAT that comes with Samba 3.0.0, it keeps appending
 the ldap suffix to the user,group and computer suffix and thus
 corrupting my smb.conf

Have you tried samba-3.0.1pre3? If this bug still exists after you have
tried that please file a bug report on https://bugzilla.samba.org. This
bug should be fixed before 3.0.1 ships.

- John T.


 - --
 Taymour A El Erian
 System Division Manager
 CNA, MCSE, CCNA, LPIC
 T.E. Data
 E-mail: [EMAIL PROTECTED]
 Web: www.tedata.net
 Tel:+(202)-4166600
 Ext:1101

 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.2.1 (GNU/Linux)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

 iD8DBQE/uKkqX1dv4NHexooRAudPAJ4sgEZZKOWBNOA8H/8VfbpwXLmQzACghSMh
 0YfecR6LtWK+OKxTZWDfP/o=
 =lvMH
 -END PGP SIGNATURE-




-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Changing password on w2k server

2003-11-17 Thread stephane . purnelle
Hello,

I use a server with samba 3.0.0 (with acl-support) and LDAP backend (RedHat
8.0 with XFS) .
For test, I set to 0 the attribute :
sambaPwdCanChange and sambaPwdMustChange

When the user would like to logon, the computer propose to change password.
If the user says Yes, the w2k client display a dialog box with username,
the domain name, the old password.
After the user have writed the new password and confirm password, the
client says The old password or username is not correct.
But, I can connect, the share is available but the profile is not
available.  I think that password is changed but not all and the attribute
not be set (very important).

BUG or wrong conf.
I can send log in bugzilla if necessary.

The possibility to change password is very important for my boss (else he
change to a w2k server).

Thank you

 Stéphane Purnelle
 Samba Administrator


---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] 2k and 9x connect and print, XP won't

2003-11-17 Thread Eric Geater 11/10/03
Good day!

I am running Samba3 on a Mandrake 9.1 box.  Right now, I have security
= user, but am not using any password authentication yet.  I have 95
and 98 computers that can reach the shares available and print to the
installed printer, and even a Windows 2000 user can do all of this.
However, an XP computer I have can't go there.  I double-click
DRAKEJAX (the netbios name), and it prompts me for a username and
password.  No matter what user/pass combo I use, from XP I cannot get
there.

Anyone have a similar experience?  Maybe a solution, too?  Thanks!

Eric
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Backup from Linux onto Win2K-share

2003-11-17 Thread Stefan G. Weichinger
Guten Tag [EMAIL PROTECTED],

am Montag, 17. November 2003 um 16:43 schrieben Sie:

CLcd Stefan, thanks for your ongoing support. I believe your mothertongue
CLcd is German as well but I will go on writing in English so everybody
CLcd can participate

So it is, I am from Austria.

CLcd % What do your logfiles tell you when you try this? Set loglevel to 2
CLcd % and look that up.

CLcd Good idea. I did not know that there are any logfiles.
CLcd Can you give me a hint how to switch them on or switch
CLcd them to level 2? Thanks.

Look into your smb.conf. Look for the option

log level =

Set it to

log level = 2

if it aint that already.

Also look for

log file =

to find out where the log files are written to.

Usually this is something like /var/log/samba/log.smbd or
/var/log/samba/clientname.

---

Reading those files will tell us much more about whats going on.

CLcd % Off topic: Why not use Linux w/ Samba as backup-server?

CLcd Yippie. I was wondering how long it might take before this question
CLcd will come up. Yes, I did. And: the other way around may work (see a
CLcd little later in that mail).
CLcd BUT: I HAVE TO USE WINDOWS. (to many arguments in this company to tell).

Acknowledged for now.

CLcd % Can you create a db-backup-file on a local partition of that machine?

CLcd Not yet anymore. The db exceeded the 50 % limit of the harddrive 2 weeks
CLcd ago. Right now the only backup I can do is on tape. This is not
CLcd working as well; but that's a different story. But before that date
CLcd (it was shortly after installation of the db) we made a backup on
CLcd harddrive. That worked out fine. With samba I've created a share on
CLcd LINUX to access the backup's folder and we were able to squeeze the
CLcd 55 GB out of the box. But that option is not available to me anymore.

Can you use a NFS-share to dump your db to? Just to verify NOW.

btw, which part of the process gives you the filesize exceeded?

And how is the SAP-backup done exactly? I assume it is using some kind
of tar...

Which version of tar are you using? Upgrade to the latest (or some
newer one) and try again.

CLcd Stefan, do you think there may be a switch in the kernel, or
CLcd something with my GLIBC? I've found some people telling others to
CLcd create a new kernel with a new GLIBC?!?! I dont know if that really
CLcd makes sense. In my eyes I would have made more sense to choose a
CLcd newer version of SAMBA.

I dont KNOW this exactly but your kernel seems to be young enough to
support that.

Could be that your ext2-subsystem is too old to support.
Please try logging first, report to the list.

If this doesnt lead to something useful, we can trace the ext-path
off-list.

CLcd I'm trying to keep my head up. With Linux books  ;-)

thats the way to learn.

Stefan G. Weichinger
mailto:[EMAIL PROTECTED]



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] printer permissions - ERROR: NULL dest in safe_strcpy (samba 3.0.0)

2003-11-17 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
|
| thanks I will try that out during this week, I have another one:
|
| I'm mapping everyone to 'nobody' unfortunately the acl's of
| the temprorary files are not readable by the user 'lp':
|
| [printsrv4] ~lp/etc # tail -f /tmp/samba_acls.txt
| -rw---   1 nobody   nobody111614 Nov 17 15:58
smbprn.0026.EaaqrB
| -rw---   1 nobody   nobody111613 Nov 17 16:01
smbprn.0027.rUai4B
|
| I tried 'force create mode = 0777' but it doesn't
| seem to have any impact on the acl's of the temporary
| spool files. Did I miss something, I think
| the same configuration worked fine under 2.2.x (?)
Yeah.  See lib/util.c:smb_mkstemp().  I just checked though and
the code is identical to what is in 2..  Are you doing guest
printing?  The problem might be the facft that the 'guest
account' parameter in now global rather than on a per share basis
like it was in 2.2.
You could try 'force user = lp'.  That would work for 9x
clients but not for NT or later.
- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/uPcOIR7qMdg1EfYRAnyNAKDmN/xjkroAEd2bpd0ay6md/zzibgCcDMtK
xN2FeS3ZADEma+48n9fIwc0=
=pCIy
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Profile Funniness on a Solaris 9 PDC

2003-11-17 Thread Jeff Gardiner
Thanks Mike, that did seem to solve that problem.  Onwards I go with other 
issues :).

Thanks for the reply.  I very much appreciate it.

Cheers
Jeff

On Saturday 15 November 2003 13:26, you wrote:
 I had the same problem and I wound up being the time was different on
 the samba server to Windows server.  Once I synced the time, it has
 worked ever since!!




-- 
Jeff Gardiner [ [EMAIL PROTECTED] ]
System Administrator - Imaging Research Laboratories
Robarts Research Institute - London ON, Canada
519.663.5777 x34089

   ~~~
  Those who do not understand Unix are condemned to reinvent it, poorly.
-- Henry Spencer
~~

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] unable to browse with smbclient

2003-11-17 Thread Sam Seaver
I've no doubt this may have come up already, but I cant seem to find any 
hints.

Ive recently upgraded from samba-2.2.8 to samba-3.0.0.

I use it as a PDC for about 5 win2k machines and 2 NT4 machines.  It's 
working fine, but Im having trouble with smbclient.

Where before I could login to a machine remotely using the administrator 
password, now it denies me access??

Is there a new configuration in smb.conf that changes this?

thanks
Sam Seaver
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] login troubles , samba-3.01-pre3 RedHat 9

2003-11-17 Thread Fabien VALLON
Hi,

I have some troubles to log in from a W2k station to a samba configure as
PDC with LDAP as backend.
Join the domain is OK 
browse from explorer and auth is ok 

I attached the end of  log.0i427 (machine) and the smb.conf file 


Thanks
Fabien

-- 
Fabien VALLON - [EMAIL PROTECTED]

GNUstep - http://www.gnustep.org - 

[2003/11/17 18:49:09, 3] smbd/process.c:process_smb(890)
  Transaction 31 of length 388
[2003/11/17 18:49:09, 3] smbd/process.c:switch_message(685)
  switch message SMBwriteX (pid 1247)
[2003/11/17 18:49:09, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
  free_pipe_context: destroying talloc pool of size 0
[2003/11/17 18:49:09, 3] rpc_server/srv_pipe.c:api_rpcTNP(1503)
  api_rpcTNP: rpc command: NET_SAMLOGON
[2003/11/17 18:49:09, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(570)
  SAM Logon (Interactive). Domain:[TV5PARIS].  User:[EMAIL PROTECTED] Requested 
Domain:[TV5PARIS]
[2003/11/17 18:49:09, 5] auth/auth.c:make_auth_context_subsystem(463)
  Making default auth method list for DC, security=user, encrypt passwords = yes
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(370)
  load_auth_module: Attempting to find an auth method to match guest
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(395)
  load_auth_module: auth method guest has a valid init
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(370)
  load_auth_module: Attempting to find an auth method to match sam
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(395)
  load_auth_module: auth method sam has a valid init
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(370)
  load_auth_module: Attempting to find an auth method to match winbind:trustdomain
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(370)
  load_auth_module: Attempting to find an auth method to match trustdomain
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(395)
  load_auth_module: auth method trustdomain has a valid init
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(395)
  load_auth_module: auth method winbind has a valid init
[2003/11/17 18:49:09, 5] auth/auth.c:get_ntlm_challenge(93)
  auth_get_challenge: module guest did not want to specify a challenge
[2003/11/17 18:49:09, 5] auth/auth.c:get_ntlm_challenge(93)
  auth_get_challenge: module sam did not want to specify a challenge
[2003/11/17 18:49:09, 5] auth/auth.c:get_ntlm_challenge(93)
  auth_get_challenge: module winbind did not want to specify a challenge
[2003/11/17 18:49:09, 5] auth/auth.c:get_ntlm_challenge(132)
  auth_context challenge created by random
[2003/11/17 18:49:09, 5] auth/auth.c:get_ntlm_challenge(133)
  challenge is: 
[2003/11/17 18:49:09, 5] auth/auth_util.c:make_user_info_map(216)
  make_user_info_map: Mapping user [TV5PARIS]\[winadm] from workstation [I0427]
[2003/11/17 18:49:09, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
[2003/11/17 18:49:09, 3] smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2003/11/17 18:49:09, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/11/17 18:49:09, 5] passdb/secrets.c:secrets_fetch_trusted_domain_password(299)
  secrets_fetch failed!
[2003/11/17 18:49:09, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
[2003/11/17 18:49:09, 5] auth/auth_util.c:make_user_info(132)
  attempting to make a user_info for winadm (winadm)
[2003/11/17 18:49:09, 5] auth/auth_util.c:make_user_info(142)
  making strings for winadm's user_info struct
[2003/11/17 18:49:09, 5] auth/auth_util.c:make_user_info(184)
  making blobs for winadm's user_info struct
[2003/11/17 18:49:09, 10] auth/auth_util.c:make_user_info(193)
  made an encrypted user_info for winadm (winadm)
[2003/11/17 18:49:09, 3] auth/auth.c:check_ntlm_password(216)
  check_ntlm_password:  Checking password for unmapped user [EMAIL PROTECTED] with the 
new password interface
[2003/11/17 18:49:09, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  mapped user is: [EMAIL PROTECTED]
[2003/11/17 18:49:09, 10] auth/auth.c:check_ntlm_password(228)
  check_ntlm_password: auth_context challenge created by random
[2003/11/17 18:49:09, 10] auth/auth.c:check_ntlm_password(230)
  challenge is: 
[2003/11/17 18:49:09, 10] auth/auth.c:check_ntlm_password(256)
  check_ntlm_password: guest had nothing to say
[2003/11/17 18:49:09, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
[2003/11/17 18:49:09, 3] smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2003/11/17 18:49:09, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/11/17 18:49:09, 2] lib/smbldap.c:smbldap_search_suffix(1067)
  smbldap_search_suffix: searching for:[((uid=winadm)(objectclass=sambaSamAccount))]
[2003/11/17 18:49:09, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462)
  init_sam_from_ldap: Entry found for user: winadm
[2003/11/17 18:49:09, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  

[Samba] 2k and 9x connect and print, XP won't

2003-11-17 Thread Kurt Pfeifle
[Samba] 2k and 9x connect and print, XP won't

* To: 'Samba Mailing List' samba at listsdotsambadotorg
* Subject: [Samba] 2k and 9x connect and print, XP won't
* From: Eric Geater 11/10/03 egeater at mscoincdotcom
* Date: Mon, 17 Nov 2003 09:58:24 -0600
Good day!

I am running Samba3 on a Mandrake 9.1 box.  Right now, I have security
= user, but am not using any password authentication yet.  I have 95
and 98 computers that can reach the shares available and print to the
installed printer, and even a Windows 2000 user can do all of this.
However, an XP computer I have can't go there.  I double-click
DRAKEJAX (the netbios name), and it prompts me for a username and
password. 
security = user *is* telling Samba to ask for username/password-type
authentication.
By default, WinXP uses the loginname of the user to try and authenticate
to a remote service like Samba. If that doesn't work, you get the prompt.
You can try this:

  * check if a user named nobody is set up on your system
  * set guest user = nobody in smb.conf
  * set map to guest = bad user in smb.conf
This will automatically use the nobody credentials (=guest) and
remove the prompt. Read what man smb.conf has to say about map
to guest = bad user!
Since you don't provide any config details this is all help you
can expect here. No idea why your W2K can access the share.

No matter what user/pass combo I use, from XP I cannot get
there.
Anyone have a similar experience?  Maybe a solution, too?  Thanks!

Eric

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba (2.2.8a) driver download fails

2003-11-17 Thread Kurt Pfeifle
[Samba] samba (2.2.8a) driver download fails

* To: samba at listsdotsambadotorg
* Subject: [Samba] samba (2.2.8a) driver download fails
* From: Gernot Hueber hueber at riicdotat
* Date: Mon, 17 Nov 2003 13:34:54 +0100
Hi there,

I have a problem with the rpc driver stuff:

I have copied the driver files to //atlas/print$/W32X86 and WIN40 (via filesystem 
copy), added and set the driver without errors.
But getdriver reports no driver associatet with the printer?!
So reports below.
I am sure, this was working on this system.
When? What changed? You mean it was working with Samba-2.2.8a?

I tried to reinit the ntprinters.tdb, printing.tdb, nt_forms.tdb and
ntdrivers.tdb by removing and HUPPING all smbds (a plenty of users are
on the server so I could not restart smbd cleanly).
Can anybody give me some advice.

Thanks

Gernot

PS Maybe an issue:
I copied, added, and set the driver several times in a script (W32X86 WIN40 for each 
printer of the same type!)
begin
atlas# rpcclient -U root%sukt19wk -c 'getdriver HP_1200N_Kloib 1' atlas
cmd = getdriver HP_1200N_Kloib 1
atlas#
end
enumdrivers is ok:
That's one of the most important parts.

begin
atlas# rpcclient -U root%sukt19wk -c 'enumdrivers' atlas
cmd = enumdrivers
 [Windows 4.0]
Printer Driver Info 1:
Driver Name: [hp4p]
 Printer Driver Info 1:
Driver Name: [hp1200]
 Printer Driver Info 1:
Driver Name: [hp4050n]
  [Windows NT x86]
Printer Driver Info 1:
Driver Name: [hp1200]
 Printer Driver Info 1:
Driver Name: [hp4050n]
 Printer Driver Info 1:
Driver Name: [hp4p]
end
enumprinters is ok too
That's the other important part.

begin
atlas# rpcclient -U root%sukt19wk -c 'enumprinters' atlas
cmd = enumprinters
flags:[0x80]
name:[\\atlas\HP_1200N_Kas]
description:[\\atlas\HP_1200N_Kas,hp1200,HP LJ 1200 Kastler]
comment:[HP LJ 1200 Kastler]
 flags:[0x80]
name:[\\atlas\HP_1200N_Kloib]
description:[\\atlas\HP_1200N_Kloib,hp1200,HP_1200N_Kloib]
comment:[HP_1200N_Kloib]
 flags:[0x80]
name:[\\atlas\HP_4050N]
description:[\\atlas\HP_4050N,,HP 4050]
comment:[HP 4050]
 flags:[0x80]
name:[\\atlas\HP_4050N_2fach]
description:[\\atlas\HP_4050N_2fach,hp4050n,HP 4050 2.Fach]
comment:[HP 4050 2.Fach]
 flags:[0x80]
name:[\\atlas\HP_4050N_Konto]
description:[\\atlas\HP_4050N_Konto,hp4050n,HP_4050N_Konto]
comment:[HP_4050N_Konto]
 flags:[0x80]
name:[\\atlas\HP_Laserjet4+Buchm]
description:[\\atlas\HP_Laserjet4+Buchm,hp4p,HP_Laserjet4
+Buchm]
comment:[HP_Laserjet4+Buchm]
 flags:[0x80]
name:[\\atlas\HP_LaserJet4_Holz]
description:[\\atlas\HP_LaserJet4_Holz,hp4p,HP_LaserJet4_Holz]
comment:[HP_LaserJet4_Holz]
 flags:[0x80]
name:[\\atlas\Minolta_DI350]
description:[\\atlas\Minolta_DI350,,Minolta_DI350]
comment:[Minolta_DI350]
 atlas#
end
enumdrivers 3 crashes :-(
IIRC, this is a not-yet-fixed bug in the 2.2.x series (where x = 4).

begin
atlas# rpcclient -U root%sukt19wk -c 'enumdrivers 3' atlas
cmd = enumdrivers 3
 [Windows 4.0]
Segmentation fault (core dumped)
I remember this happening for me in Samba 2.2.8a also.

atlas#
end
So what? The proof of the pudding lies in the eating. Does
the driver download to your Win clients work? Do the Win
clients see the drivers? (on W2K/XP workstations right-click
the white background of the Samba Printers and Faxes folder
as seen in network neighbourhood, select Server Properties,
select Drivers tab and check if your drivers are visible.
--
Dipl.-Ing. Gernot Hueber
Cheers,
Kurt
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] User Data / Profiles / Permission / Mappings Loss from Samba to Samba Migration

2003-11-17 Thread Fanying Jen
We have completed a migration from one Samba server to another Samba.
The versions and binaries are exactly the same. The only difference
between the two configs is that the original Samba server used LDAP for
authentication and the new Samba server uses the flat files for
authentication (smbpasswd file).

Here is the problem: On a Windows 2000 file server, we have folder
shares.  Users can log on via Samba, but permissions to the shared
folders are all screwed up.  When I review the permissions in the
sharing tab on the 2000 server I noticed that none of the user names are
listed, just some sort of serial number (e.g. S----).
-- 
Fanying Jen [EMAIL PROTECTED]
Lille Corp

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] UNIX paths vs UNC names in [profile]

2003-11-17 Thread John H Terpstra
On Mon, 17 Nov 2003, Jeff Gardiner wrote:

 QUESTION
 My question therefore is this - I have multiple /home/subdomain directories,
 like
 /home/disk1
 /home/disk2
 /home/backupdisk3b  ... etc

 How do I store the profile in the users home dir.  My rationale is that as all
 of my OSX users, and Unix/Linux users have to adhere to a quota - I'd rather
 force my windows users to adhere to the same quota by storing their profile
 in /home/disk?/user/profile and I could do that using \\%L\%U\profile.  Now
 one solution is to apply the quote to say /var/lib/samba/profile/%U but I'd
 rather keep the profile in or off of the home dir anyway.

 resolving /home/disk?/user/profil using Unix path names is difficult because I
 have so many disks with home dirs.

 BTW I've tried:
 path = ~%U/profile

You could try:

path = %H/profile


 hoping that ~user would resolve correctly. It didn't seem to work.

The problem is that the profile handling may do some anonymous file access
to the Windows users' profile. This may fail if you store the profile in
the home directory and 'others' do not have access rights to this location
on disk.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] [Fwd: Re: install samba v3 pb on aix5.1 TESTPARM]

2003-11-17 Thread David Moreau


On Fri, 14 Nov 2003, David Moreau wrote:

Hello to all of u.

I tried to install samba v3 on AIX 5.1 server.
The smit install_latest seems ok
but when I launch testparm  I have the following errors :
Of course I don't have any /ii/pa/samba-3.0.0.0/usr/local/lib/smb.conf
directory but
a usr/local/lib but I can't find where to change the path .
extract of testparm :

 /usr/local/lib #
creating lame upcase table
creating lame lowcase table
Conversion from UCS-2LE to CP850 not supported
Conversion from UTF8 to CP850 not supported
Conversion from ASCII to CP850 not supported
Conversion from CP850 to UCS-2LE not supported
Conversion from CP850 to UTF8 not supported
Conversion from CP850 to ASCII not supported
Conversion from CP850 to UTF8 not supported
Conversion from UTF8 to CP850 not supported
creating default valid table
params.c:OpenConfFile() - Unable to open configuration file
/ii/pa/samba-3.0.0.
0/usr/local/lib/smb.conf:
A file or directory in the path name does not exist.
Conversion from UCS-2LE to CP850 not supported
Conversion from UTF8 to CP850 not supported
Conversion from ASCII to CP850 not supported
Conversion from CP850 to UCS-2LE not supported
Conversion from CP850 to UTF8 not supported
Conversion from CP850 to ASCII not supported
Conversion from CP850 to UTF8 not supported
Conversion from UTF8 to CP850 not supported
Conversion from ASCII to CP850 not supported
Conversion from CP850 to UCS-2LE not supported
Conversion from CP850 to UTF8 not supported
Conversion from CP850 to ASCII not supported
Conversion from CP850 to UTF8 not supported
Conversion from UTF8 to CP850 not supported
y in the path name does not exist.
creating default valid table
Load smb config files from /ii/pa/samba-3.0.0.0/usr/local/lib/smb.conf
If you have encountered this pb or have any ideas, it would be welcome.

David.


--
John H Terpstra
Email: [EMAIL PROTECTED]


--

David MOREAU 

Admin Bases de données / Resp Exploitation
CAROLL
Service Informatique
38 Rue du Hameau
75015 Paris 
Tel.: (+33) 1 56 23 33 66
--

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] User Data / Profiles / Permission / Mappings Loss from Samba to Samba Migration

2003-11-17 Thread John H Terpstra
On Mon, 17 Nov 2003, Fanying Jen wrote:

 We have completed a migration from one Samba server to another Samba.
 The versions and binaries are exactly the same. The only difference
 between the two configs is that the original Samba server used LDAP for
 authentication and the new Samba server uses the flat files for
 authentication (smbpasswd file).

 Here is the problem: On a Windows 2000 file server, we have folder
 shares.  Users can log on via Samba, but permissions to the shared
 folders are all screwed up.  When I review the permissions in the
 sharing tab on the 2000 server I noticed that none of the user names are
 listed, just some sort of serial number (e.g. S----).

That number is the SID (security identifier your user has/had). Every
domain / server has it's own SID. Did you updte the new server SID to that
of the old one?

On samba-2.2.x the tool to retrieve the domain SID is:
smbpasswd -S 'Domain_Name'

To write it on samba-2.2.x:
smbpasswd -W S-1-5-...

On samba-3.x to read the SID:
net getlocalsid

To write on samba-3.x:
net setlocalsid S-1-5-

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Caracteres ñ á é ó ú en archives names not are reading

2003-11-17 Thread José Gómez C.
Dear friends:

escribo en español.. si hubiera alguien que entienda y pueda ayudarme.. le agradecería.

He migrado de la Ver. 2.x xxx a la version 3 y tengo el problema que en windows, no se 
puede leer los archivos que tienen en su nombre los caracteres ñ, á, é, í, ó, ú
Por lo que causa un grave problema... hay demasiados archivos con esas letras.

Hay alguna forma de solucionar el problema???


Jose Gómez C.
[EMAIL PROTECTED]


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] UNIX paths vs UNC names in [profile]

2003-11-17 Thread Jeff Gardiner
On Monday 17 November 2003 13:56, you wrote:

 You could try:
 path = %H/profile

Thanks again John.  Your posts are always helpful.  That did the trick.


 The problem is that the profile handling may do some anonymous file access
 to the Windows users' profile. This may fail if you store the profile in
 the home directory and 'others' do not have access rights to this location
 on disk.

I see your point.  Is there a way to avoid this situation or at least minimize 
it other than by storing profiles somewhere else?

Cheers
Jeff

-- 
Jeff Gardiner [ [EMAIL PROTECTED] ]
System Administrator - Imaging Research Laboratories
Robarts Research Institute - London ON, Canada
519.663.5777 x34089

   ~~~
  Those who do not understand Unix are condemned to reinvent it, poorly.
-- Henry Spencer
~~

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The boss will discharge me, I spoiled the system. HELP!

2003-11-17 Thread Andrew Bartlett
On Mon, 2003-11-17 at 23:25, Ferretero Herraduras Clavo wrote:
 I have a mixture network with WinXP machines and IRIX (UNIX of 
 Silicon Graphics) machines. In the machine with IRIX (O2) there 
 was an old version of samba. It worked well.
 But recently I've downloaded. I installed this new version, and 
 I spoiled the system. Now I don't know if I have to reconfigure 
 the smb.conf only or if I have to install more pakages or if I 
 have to reconfigure several files... CAN ANYONE HELP ME???

The most common mistake when upgrading Samba is not installing it into
the same prefix.  If the old installation was in /usr/local/bin then
install the new version into that location.

Also, if the old version was some SGI package, why not try and install a
new SGI package, rather than from source (if you did it that way).

The logs are your most useful tool, as are the manpages and the Samba
HOWTO collection.  These are all online at
http://www.samba.org/samba/docs/

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Kerberos-authentication to a Samba server without a Windows KDC ?

2003-11-17 Thread Andrew Bartlett
On Tue, 2003-11-18 at 01:31, Holger Brückner wrote:
 Hello,
 
 i'm currently trying to find a way to integrate a openafs cell and samba
 (without plaintext passwords).
 
 this should all be possible with a windows kdc, giving out afs tickets
 and forward these tickets to the samba server.
 unfortuntely this is not an option here.
 
 is there a way to connect samba 3.x to a mit krb5 server ?

Not easily, even if you can get the windows clients to use that server. 
We are working on making this easier, but look into the --fake-kaserver
option in Samba 3.0.1pre3, it does something funky for linking Samba and
AFS.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] UNIX paths vs UNC names in [profile]

2003-11-17 Thread Andrew Bartlett
On Tue, 2003-11-18 at 05:56, John H Terpstra wrote:
 On Mon, 17 Nov 2003, Jeff Gardiner wrote:
 
  QUESTION
  My question therefore is this - I have multiple /home/subdomain directories,
  like
  /home/disk1
  /home/disk2
  /home/backupdisk3b  ... etc
 
  How do I store the profile in the users home dir.  My rationale is that as all
  of my OSX users, and Unix/Linux users have to adhere to a quota - I'd rather
  force my windows users to adhere to the same quota by storing their profile
  in /home/disk?/user/profile and I could do that using \\%L\%U\profile.  Now
  one solution is to apply the quote to say /var/lib/samba/profile/%U but I'd
  rather keep the profile in or off of the home dir anyway.
 
  resolving /home/disk?/user/profil using Unix path names is difficult because I
  have so many disks with home dirs.
 
  BTW I've tried:
  path = ~%U/profile
 
 You could try:
 
 path = %H/profile

What's wrong with not having a [profile] share at all, and instead using
the [homes] share, and a profile subdirectory?

This has the advantage that windows knows they are different files for
each user, and will not attempt to 'optimise' the file locking between
users (remember, MS has a strictly one-to-one mapping between shares and
real disk paths).

 
  hoping that ~user would resolve correctly. It didn't seem to work.
 
 The problem is that the profile handling may do some anonymous file access
 to the Windows users' profile. This may fail if you store the profile in
 the home directory and 'others' do not have access rights to this location
 on disk.

I know this happens with netlogon - but have you really seen it with
profiles?  

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Caracteres ñ á é ó ú en archives names not are reading

2003-11-17 Thread Ed Holden
A translation, for anyone who knows the answer ...

We've migrated from Samba 2.x to version 3 and have a problem wherein 
Windows clients can't see files that contain the characters ñ, á, é, í, 
ó, or ú.  This is a serious problem because we have a lot of files 
containing these letters.

Is there any way to solve this?

José Gómez C. wrote:
Dear friends:

escribo en español.. si hubiera alguien que entienda y pueda ayudarme.. le agradecería.

He migrado de la Ver. 2.x xxx a la version 3 y tengo el problema que en windows, no se 
puede leer los archivos que tienen en su nombre los caracteres ñ, á, é, í, ó, ú
Por lo que causa un grave problema... hay demasiados archivos con esas letras.
Hay alguna forma de solucionar el problema???

Jose Gómez C.
[EMAIL PROTECTED]



Any information, including protected health information (PHI), transmitted
in this email is intended only for the person or entity to which it is
addressed and may contain information that is privileged, confidential and or
exempt from disclosure under applicable Federal or State law. Any review,
retransmission, dissemination or other use of or taking of any action in
reliance upon, protected health information (PHI) by persons or entities other
than the intended recipient is prohibited. If you received this email in error,
please contact the sender and delete the material from any computer.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] UNIX paths vs UNC names in [profile]

2003-11-17 Thread John H Terpstra
On Mon, 18 Nov 2003, Andrew Bartlett wrote:

 On Tue, 2003-11-18 at 05:56, John H Terpstra wrote:
  On Mon, 17 Nov 2003, Jeff Gardiner wrote:
 
   QUESTION
   My question therefore is this - I have multiple /home/subdomain directories,
   like
   /home/disk1
   /home/disk2
   /home/backupdisk3b  ... etc
  
   How do I store the profile in the users home dir.  My rationale is that as all
   of my OSX users, and Unix/Linux users have to adhere to a quota - I'd rather
   force my windows users to adhere to the same quota by storing their profile
   in /home/disk?/user/profile and I could do that using \\%L\%U\profile.  Now
   one solution is to apply the quote to say /var/lib/samba/profile/%U but I'd
   rather keep the profile in or off of the home dir anyway.
  
   resolving /home/disk?/user/profil using Unix path names is difficult because I
   have so many disks with home dirs.
  
   BTW I've tried:
   path = ~%U/profile
 
  You could try:
 
  path = %H/profile

 What's wrong with not having a [profile] share at all, and instead using
 the [homes] share, and a profile subdirectory?

 This has the advantage that windows knows they are different files for
 each user, and will not attempt to 'optimise' the file locking between
 users (remember, MS has a strictly one-to-one mapping between shares and
 real disk paths).

  
   hoping that ~user would resolve correctly. It didn't seem to work.
 
  The problem is that the profile handling may do some anonymous file access
  to the Windows users' profile. This may fail if you store the profile in
  the home directory and 'others' do not have access rights to this location
  on disk.

 I know this happens with netlogon - but have you really seen it with
 profiles?

Yes. With Win2K Pro clients. In the final stages of writing the profile
to the server, only when the profile existed before login. I have not seen
this with XPPro though.

- John T.


 Andrew Bartlett



-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] UNIX paths vs UNC names in [profile]

2003-11-17 Thread Andrew Bartlett
On Tue, 2003-11-18 at 07:28, John H Terpstra wrote:
 On Mon, 18 Nov 2003, Andrew Bartlett wrote:
 
  On Tue, 2003-11-18 at 05:56, John H Terpstra wrote:
   On Mon, 17 Nov 2003, Jeff Gardiner wrote:
  
QUESTION
My question therefore is this - I have multiple /home/subdomain directories,
like
/home/disk1
/home/disk2
/home/backupdisk3b  ... etc
   
How do I store the profile in the users home dir.  My rationale is that as all
of my OSX users, and Unix/Linux users have to adhere to a quota - I'd rather
force my windows users to adhere to the same quota by storing their profile
in /home/disk?/user/profile and I could do that using \\%L\%U\profile.  Now
one solution is to apply the quote to say /var/lib/samba/profile/%U but I'd
rather keep the profile in or off of the home dir anyway.
   
resolving /home/disk?/user/profil using Unix path names is difficult because I
have so many disks with home dirs.
   
BTW I've tried:
path = ~%U/profile
  
   You could try:
  
   path = %H/profile
 
  What's wrong with not having a [profile] share at all, and instead using
  the [homes] share, and a profile subdirectory?
 
  This has the advantage that windows knows they are different files for
  each user, and will not attempt to 'optimise' the file locking between
  users (remember, MS has a strictly one-to-one mapping between shares and
  real disk paths).
 
   
hoping that ~user would resolve correctly. It didn't seem to work.
  
   The problem is that the profile handling may do some anonymous file access
   to the Windows users' profile. This may fail if you store the profile in
   the home directory and 'others' do not have access rights to this location
   on disk.
 
  I know this happens with netlogon - but have you really seen it with
  profiles?
 
 Yes. With Win2K Pro clients. In the final stages of writing the profile
 to the server, only when the profile existed before login. I have not seen
 this with XPPro though.

I presume it's fixed in a service pack, given that such an operation
would fail against Microsoft servers too.  

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba 3 and CUPs printer causes explorer to abend

2003-11-17 Thread Orwig, Paul
Funny you mention that...
I am using your Prentice-Hall book The Official Samba-3 HOWTO and Reference
Guide Chapter 18 of which covers CUPS.
My process thus far has been:
1) Download the RedHat 9 ISO images and create install media
2) Install RedHat 9
3) Setup CUPS (I even downloaded the latest version at that time)
4) I used the redhat printconf-gui program to configure a few
printers and verified that CUPS to these printers worked. I also used the
CUPS web gui to configure a raw printer. (Printers are configured with the
Jetdirect interface and not forced to popstscript.)
5) Downloaded the Released version of SAMBA 3.0 (RPM from
samba.org)
6) Attempted to get Samba and Winbindd to work with Active
Directory. ( Topic for another discussion)
7) Reverted to NTLM. Successfully see printers on Network
Neighborhood.
8) Following the HOWTO procedure, uploaded printer drivers to the
Samba server.
   (i.e. create the /etc/samba/drivers and /etc/samba/driver/W32X86
directories. used vi to add the [print$] section to smb.conf. From my W2k
system, use My Network Places--Entire Network--Microsoft Windows Network
to get to the samba server. I right-click on the server and click explore to
open an explorer window. Double-click the Printers folder. Then right click
a printer and choose properties. 
At this point, any printer that has had the driver uploaded becomes a
Microsoft bomb; causing an abend on a) Windows Explorer and b) Internet
explorer.
Samba and CUPS were both installed as RPMs. SWAT was used to configure
Samba.
NOTE: The /etc/samba/drivers/W32X86 directory is populated.
Also, for security reasons we do not allow the root user to be active on the
Windows domain, therefore the drivers were uploaded using my userid. Access
to the printers has used the same userid.

I tend to not use beta and pre-release software because they are not
certified as stable.
I have a hard sell to get my managers to consider trying open source
software as this is very much a Microsoft shop.
My reason for using Samba-3 is to be able to work under Active Directory. I
have another test server I will use to work out the problems with winbind. (
This is a proof of concept project that has dragged on for 8 weeks due
mostly to foot dragging on the Microsoft side of the shop.)

-Original Message-
From: John H Terpstra [mailto:[EMAIL PROTECTED]
Sent: Friday, November 14, 2003 5:02 PM
To: Orwig, Paul
Cc: '[EMAIL PROTECTED]'
Subject: Re: [Samba] Samba 3 and CUPs printer causes explorer to abend


Paul,

Have you followed the documentation in the CUPS Chapter of the
Samba-HOWTO-Collection.pdf that ships with Samba-3?

It's available from:
http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf
(Refer to the Documentation Web pages on Samba.org).

From my recollection, you might want to update your CUPS to version 1.1.18
or later.

If you have followed the information presented in the HOWTO, then please
document precisely how I may reproduce your problem. This will need to
document every step while making no assumptions that whoever is following
them has any intelligence. We can fix only a problem we can reproduce.

Cheers,
John T.

On Fri, 14 Nov 2003, Orwig, Paul wrote:

 I am attempting to setup a Samba printserver to replace our Windows Print
 servers.
 I have defined a few printers in CUPS, some raw, and some not.
 When I use the GUi to upload the drivers, The dialog works, however after
 that is accomplished, any attempt to get the printer properties or to use
 the printer from my W2K system (cpq0277) causes explorer to ABEND.

 System setup:
 RedHat 9
 CUPS 1.1.17-13.3
 Samba 3.0.0-2

 I get the following in the samba log.cpq0277 file:

 [2003/11/14 16:07:18, 0] lib/util_str.c:safe_strcpy_fn(577)
   ERROR: NULL dest in safe_strcpy
 [2003/11/14 16:07:19, 0] lib/util_str.c:safe_strcpy_fn(577)
   ERROR: NULL dest in safe_strcpy
 [2003/11/14 16:07:19, 0] lib/util_str.c:safe_strcpy_fn(577)
   ERROR: NULL dest in safe_strcpy
 [2003/11/14 16:07:41, 0] smbd/connection.c:register_message_flags(220)
   register_message_flags: tdb_fetch failed
 [2003/11/14 16:07:41, 0] lib/util_str.c:safe_strcpy_fn(577)
   ERROR: NULL dest in safe_strcpy
 [2003/11/14 16:08:32, 1] smbd/service.c:close_cnum(880)
   cpq0277 (10.145.8.19) closed connection to service print$


 smb.conf is:
 # Global parameters
 [global]
 workgroup = DOMAIN
 server string = ANNLPR01
 security = DOMAIN
 map to guest = Bad User
 log file = /var/log/samba/log.%m
 max log size = 50
 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 preferred master = No
 local master = No
 domain master = No
 dns proxy = No
 wins server = ipaddress
 ldap ssl = no
 idmap uid = 1-2
 idmap gid = 1-2
 template shell = /bin/bash
 winbind separator = +
 winbind use 

Re: [Samba] Caracteres ñ á é ó ú en archives names not are reading

2003-11-17 Thread Andrew Bartlett
On Tue, 2003-11-18 at 07:26, Ed Holden wrote:
 A translation, for anyone who knows the answer ...
 
 
 We've migrated from Samba 2.x to version 3 and have a problem wherein 
 Windows clients can't see files that contain the characters ñ, á, é, í, 
 ó, or ú.  This is a serious problem because we have a lot of files 
 containing these letters.
 
 Is there any way to solve this?

This is the 'unix charset' problem.  You have two options:

Convert the filenames on the server to UTF8

or

Set the unix charset to what your clients were using as their DOS
charset (for example, CP850).  

If you can manage it, then converting the filenames is a much better
option - as UTF8 can represent all possible unicode values that can
occour in CIFS.  Bad things happen when we cannot convert names :-(

But changing the 'unix charset' is easier.  

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] N-Flag gone?

2003-11-17 Thread Andrew Bartlett
On Tue, 2003-11-18 at 00:27, Tilo Lutz wrote:
 Hi
 
 Is the N-flag gone in samba 3.0.1?
 I wasn't able to get any information about it.
 Although accounts set to no password weren't
 able to log in when the N-flag wasn't
 set.

Samba 3.0 only allows passwordless logins to accounts with the 'no
password required' flag (N) set.  

 Were can I get some information about the new
 H- and S-flag

H is for 'home directory required', it appears.  Samba records this
flag, but does not honour it.  

S is for server trust accounts - like W (normal machine trust accounts),
but for BDCs.

 Regards, Tilo
-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Caracteres ñ á é ó ú en archives names not are reading

2003-11-17 Thread Romy Perez Moreno
I tried this:

dos charset = CP850
unix charset = ISO8859-1

and my users can read their files now. I'll wait for a couple of weeks and 
then go back to UTF8. Mean while, they are warned not to use any rare 
character in the file names.

romy

On 18 Nov 2003, Andrew Bartlett wrote:

 On Tue, 2003-11-18 at 07:26, Ed Holden wrote:
  A translation, for anyone who knows the answer ...
  
  
  We've migrated from Samba 2.x to version 3 and have a problem wherein 
  Windows clients can't see files that contain the characters ñ, á, é, í, 
  ó, or ú.  This is a serious problem because we have a lot of files 
  containing these letters.
  
  Is there any way to solve this?
 
 This is the 'unix charset' problem.  You have two options:
 
 Convert the filenames on the server to UTF8
 
 or
 
 Set the unix charset to what your clients were using as their DOS
 charset (for example, CP850).  
 
 If you can manage it, then converting the filenames is a much better
 option - as UTF8 can represent all possible unicode values that can
 occour in CIFS.  Bad things happen when we cannot convert names :-(
 
 But changing the 'unix charset' is easier.  
 
 Andrew Bartlett
 
 

-- 
Ing. Romy Perez Moreno
e-mail: [EMAIL PROTECTED], [EMAIL PROTECTED]
http://fenix.uam.mx/romy
tel: 5318 9067 /  5382-7157

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Caracteres ñ á é ó ú enarchives names not are reading

2003-11-17 Thread Thiago Lima

I had the same problem some time ago and I changed the unix charset. How
to convert the filenames to the correct charset? And how to discover
what charset is beeing using in a file?

regards.
thiago.



 This is the 'unix charset' problem.  You have two options:
 
 Convert the filenames on the server to UTF8
 
 or
 
 Set the unix charset to what your clients were using as their 
 DOS charset (for example, CP850).  
 
 If you can manage it, then converting the filenames is a much 
 better option - as UTF8 can represent all possible unicode 
 values that can occour in CIFS.  Bad things happen when we 
 cannot convert names :-(

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Backup from Linux onto Win2K-share

2003-11-17 Thread Carsten . Loeffler

Hi!


Guten Tag CarstendotLoeffler at commanddotde,

am Montag, 17. November 2003 um 16:43 schrieben Sie:

CLcd Stefan, thanks for your ongoing support. I believe your
mothertongue
CLcd is German as well but I will go on writing in English so everybody
CLcd can participate
So it is, I am from Austria.
CLcd % What do your logfiles tell you when you try this? Set loglevel to
2
CLcd % and look that up.
CLcd Good idea. I did not know that there are any logfiles.
CLcd Can you give me a hint how to switch them on or switch
CLcd them to level 2? Thanks.
Look into your smb.conf. Look for the option
log level =
Set it to
log level = 2
if it aint that already.
Also look for
log file =
to find out where the log files are written to.
Usually this is something like /var/log/samba/log.smbd or
/var/log/samba/clientname.
---
Reading those files will tell us much more about whats going on.


OK. I will try to do this tomorrow.



CLcd % Off topic: Why not use Linux w/ Samba as backup-server?
CLcd Yippie. I was wondering how long it might take before this question
CLcd will come up. Yes, I did. And: the other way around may work (see a
CLcd little later in that mail).
CLcd BUT: I HAVE TO USE WINDOWS. (to many arguments in this company to
tell).

Acknowledged for now.

CLcd % Can you create a db-backup-file on a local partition of that
machine?
CLcd Not yet anymore. The db exceeded the 50 % limit of the harddrive 2
weeks
CLcd ago. Right now the only backup I can do is on tape. This is not
CLcd working as well; but that's a different story. But before that date
CLcd (it was shortly after installation of the db) we made a backup on
CLcd harddrive. That worked out fine. With samba I've created a share on
CLcd LINUX to access the backup's folder and we were able to squeeze the
CLcd 55 GB out of the box. But that option is not available to me anymore.

Can you use a NFS-share to dump your db to? Just to verify NOW.

btw, which part of the process gives you the filesize exceeded?
And how is the SAP-backup done exactly? I assume it is using some kind
of tar...
Which version of tar are you using? Upgrade to the latest (or some
newer one) and try again.

Ive tried NFS as well. Same situation but it stops at a different
size; I think it was 2 GB (4 GB with Samba)
I dont know which process gives me the filesize exceeded; how
can I find out? I get this if try to use a cp (copy) with a
file larger than 4 GB exactly in that Moment when it reaches the
magic border. In case of using SAPDB I get an error from the
database saying Broken Connection. When I examine the datafile
already backed up on the Windows box it has - surprisingly - again
the magic filesize.
I think that SAP Backup uses some kind of internal TAR because in
case running SAPDB under Windows there is no OS-driven TAR. But
may be you are right. Right now I dont know how to figure out.
Anyway: I cannot tell SAPDB to use a different TAR. Ive already
thought about using STAR.


CLcd Stefan, do you think there may be a switch in the kernel, or
CLcd something with my GLIBC? I've found some people telling others to
CLcd create a new kernel with a new GLIBC?!?! I dont know if that really
CLcd makes sense. In my eyes I would have made more sense to choose a
CLcd newer version of SAMBA.

I dont KNOW this exactly but your kernel seems to be young enough to
support that.
Could be that your ext2-subsystem is too old to support.
Please try logging first, report to the list.


OK. But to let you know: I'm using EXT3. At home Ive tried REISERFS
and there it happened too.


If this doesnt lead to something useful, we can trace the ext-path
off-list.
CLcd I'm trying to keep my head up. With Linux books  ;-)
thats the way to learn.


Neverending Process...;-)



Stefan G. Weichinger
mailto:monitor at oopsdotcodotat


Kind Regards,
Carsten



__
 This message is intended for the addressee or its representative only.
  Any form of unauthorized use, publication, reproduction, copying or
  disclosure of the content of this e-mail is not permitted. If you are not
  the intended recipient of this e-mail message and its contents, please
  notify the sender immediately and delete this message and all its
  attachments subsequently.

  command ag


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Changing SWAT port or removing 2.2.7

2003-11-17 Thread Eric Geater 11/10/03
Some of you have already read about my newbie fortune with this Samba3
install.  Thanks to those who answered my original questions.

Now I have something which I know is probably academic, and perhaps
still newbie-related.  When I installed Samba3 on Friday, it took me a
little while to figure out that my names required adding a 3 to the end
(SWAT3, SAMBA3, TESTPARM3, et al).  I did not uninstall Samba 2.2.7, but
I didn't see any recommendations to.

Getting past the name hurdle was annoying, but it's done.  However, port
901 is still tied to Samba 2.2.7's smb.conf file, and I'd really like to
adjust that.  Either port 901 can reflect SWAT3, or maybe I could insert
port 902 somewhere and have it answer SWAT3's information.

Again, any ideas would be wonderful.  Most of the docs I see suggest
using SWAT, and I've already had to avoid it this long.

Eric
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Caracteres ñ á é ó ú en archives names not are reading

2003-11-17 Thread Jeremy Allison
On Mon, Nov 17, 2003 at 03:26:07PM -0500, Ed Holden wrote:
 A translation, for anyone who knows the answer ...
 
 
 We've migrated from Samba 2.x to version 3 and have a problem wherein 
 Windows clients can't see files that contain the characters ñ, á, é, í, 
 ó, or ú.  This is a serious problem because we have a lot of files 
 containing these letters.
 
 Is there any way to solve this?

To get the same character set compatibility set use:

unix charset = ISO8859-1
dos charset = CP850

in the [global] section of your smb.conf.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Caracteres ñ á é ó ú enarchives names not are reading

2003-11-17 Thread Bjoern JACKE
On 2003-11-17 at 19:57 -0200 Thiago Lima  sent off:
I had the same problem some time ago and I changed the unix charset. How
to convert the filenames to the correct charset? And how to discover
what charset is beeing using in a file?
check out http://j3e.de/linux/convmv/. A man page is availabel at 
http://j3e.de/linux/convmv/man/.
convmv can convert whole directories recursively to a different 
encoding, per default it is in testmode, so it will not change the 
filenames for you to see the conversion will do the right. When you 
are sure, convert the files to utf-8 with --notest option. It's even 
easier than changing the unix charset option. ;-)

Bjoern
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Changing SWAT port or removing 2.2.7

2003-11-17 Thread John H Terpstra
On Mon, 17 Nov 2003, Eric Geater 11/10/03 wrote:

 Some of you have already read about my newbie fortune with this Samba3
 install.  Thanks to those who answered my original questions.

 Now I have something which I know is probably academic, and perhaps
 still newbie-related.  When I installed Samba3 on Friday, it took me a
 little while to figure out that my names required adding a 3 to the end
 (SWAT3, SAMBA3, TESTPARM3, et al).  I did not uninstall Samba 2.2.7, but
 I didn't see any recommendations to.

 Getting past the name hurdle was annoying, but it's done.  However, port
 901 is still tied to Samba 2.2.7's smb.conf file, and I'd really like to
 adjust that.  Either port 901 can reflect SWAT3, or maybe I could insert
 port 902 somewhere and have it answer SWAT3's information.

 Again, any ideas would be wonderful.  Most of the docs I see suggest
 using SWAT, and I've already had to avoid it this long.

Look in /etc/services for an entry for swat.

Look in /etc/xinet[d].d for a file called swat, in which you might see
what needs changing.

If you find the documentation on SWAT in the Samba-HOWTO-Collection.pdf
inadequate please let me know what needs to be fixed. The HOWTO is
available from http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf

Cheers,
John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] German Translation of Samba-3.0-documentation online with first translated pages

2003-11-17 Thread Stefan G. Weichinger
Hello, Samba-users,

we announce the start of a new project related to the well-known
software suite Samba:

A small team of german-speaking volunteers has started working on the
german translation of the Samba-3.0-documentation.

The project is hosted at http://developer.berlios.de.

You can find the ongoing work in the project-cvs-repository at

http://cvs.berlios.de/cgi-bin/viewcvs.cgi/gertranssmb3/gertranssmb3/

The translation team is right now working on the german translation of
the docbook/projdoc/*.xml files of the current samba-docs-cvs-module
found on samba.org.

html-versions of the translated xml-pages can be found at

http://cvs.berlios.de/cgi-bin/viewcvs.cgi/gertranssmb3/gertranssmb3/htmldocs/

Volunteers are welcome.

Please contact the [EMAIL PROTECTED] - mailinglist if you
want to participate or have other suggestions for the positive efforts
of this project.

-- 
best regards,
Stefan G. Weichinger, representing the project team.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Join Machine to Domain

2003-11-17 Thread Kent L. Nasveschuk
Hey,
Thanks for getting back to me. I could not put this down till I knew why
things weren't working.I finally succeded in making everyting work and
finding out why I had problems.

I couldn't make it work with administrator. As soon as I deleted the
administrator user and replaced user with root, Wah lah! I can join
workstations. I removed username map from smb.conf.

I also had a very strange error message that I have discovered is caused
by some keys in the workstation registry that I changed. These are keys
that are reported to need to be changed in XP and not W2K.

The learning curve for this is high. I learned a great deal about Samba
and LDAP but both packages are slick and work together quite well. All
the time I've spent on this has been well worth it.

Thanks for your help.

Kent N

On Mon, 2003-11-17 at 09:27, [EMAIL PROTECTED] wrote:
 
 
 Hi,
 
 I forgot to tell you, that the samba password from the
 uid=Administrator,ou=Users,dc=tow,dc=net MUST be the same like the samba
 password for root .
 Because samba will expect both the client and the server user to have the
 same password. After that the option username map will work correctly.
 
 
 
 Regards
 
 Manuel Piessnegger
 
 
 

  Kent L.  
  Nasveschuk   
  [EMAIL PROTECTED]  To 
  .ma.us   [EMAIL PROTECTED]
 cc 
  14.11.2003 17:44  Samba List Server   
[EMAIL PROTECTED] 
Subject 
Re: [Samba] Join Machine to Domain  






 
 
 
 
 I appreciate your help on this. I still am having problems. Attached a
 some of the pertinent configuration files.
 
 I can login in with any account so connection and password to access
 ldap server works, just can't join domain. I get an error message bad
 passwd or unknown user. I added the username map but root =
 administrator still doesn't work.
 
 # Administrator, Users, tow.net
 dn: uid=Administrator,ou=Users,dc=tow,dc=net
 cn: Administrator
 sn: Administrator
 objectClass: inetOrgPerson
 objectClass: sambaSAMAccount
 objectClass: posixAccount
 gidNumber: 0
 uid: Administrator
 uidNumber: 0
 homeDirectory: /accounts/Administrator
 sambaPwdLastSet: 1068814077
 sambaLogonTime: 0
 sambaLogoffTime: 2147483647
 sambaKickoffTime: 2147483647
 sambaPwdCanChange: 1068814077
 sambaPwdMustChange: 2147483647
 sambaHomePath: \\whs1\Administrator
 sambaHomeDrive: H:
 sambaProfilePath: \\whs1\profiles\
 sambaLMPassword: E3B4E05BE6A182C9E13B8E8F6853DCAC
 sambaNTPassword: F4858C7E53BB628AE91E00E9DB6CD467
 sambaAcctFlags: [U  ]
 sambaSID: S-1-5-21-1129281578-1295143107-3311307472-1000
 loginShell: /bin/bash
 gecos: Netbios Domain Administrator
 sambaPrimaryGroupSID: S-1-5-21-1129281578-1295143107-3311307472-1001
 userPassword:: e1NNRDV9ZGpiNFo3ODQ3VFlKYWJYZEM5ZGRtSkFpMklzPQ==
 
 
 
 smb.conf:
 
 
 [global]
 workgroup = WarehamPS
 encrypt passwords = Yes
 time server = Yes
 socket options = TCP_NODELAY
 security = user
 logon script = netlogon.bat
 writable = Yes
 dns proxy = no
 directory mask = 02770
 preferred master = yes
 netbios name = WHS1
 server string = RedHat 8.0 LDAP Server
 passdb backend = ldapsam
 ldap passwd sync = Yes
 passwd program = /usr/local/samba/bin/smbpasswd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
 *Retype\snew\sUnix\spassword:* %n\n
 log file = /var/log/samba.%m
 debug level = 2
 max log size = 50
 add user script = /usr/local/sbin/smbldap-useradd.pl %u
 #delete user script = /usr/local/sbin/smbldap-useradd.pl
 #add group script = /usr/local/sbin/smbldap-groupadd.pl
 delete group script = /usr/local/sbin/smbldap-groupdel.pl
 add machine script = /usr/local/samba/bin/smbpasswd -a -m %u
 #add machine script = /usr/sbin/useradd -d /dev/null -g 502 -s
 /bin/false -M %u
 logon script = netlogon.bat
 logon path = \\%N\profiles\%g
 logon drive = H:
 logon home = \\%L\%U
 

Re: [Samba] User Data / Profiles / Permission / Mappings Loss from Samba to Samba Migration

2003-11-17 Thread Fanying Jen
We checked the SID on both the old Samba and the new Samba (both of which 
are version 2.2.8a) and they identical. We noticed that the SID for the 
users no longer map properly and we had to put all of the users back in 
manually. Once the users were in, the users were able to launch their 
applications. The only difference between the two setup is the old Samba 
uses LDAP authentication while the new Samba uses the /etc/samba/smbpasswd 
file. Unix system accounts and information are identical on both systems. 
It is that SID numbers of calculated differently on an LDAP back end and a 
smbpasswd file back end?


On Mon, 17 Nov 2003, John H Terpstra wrote:

 On Mon, 17 Nov 2003, Fanying Jen wrote:
 
  We have completed a migration from one Samba server to another Samba.
  The versions and binaries are exactly the same. The only difference
  between the two configs is that the original Samba server used LDAP for
  authentication and the new Samba server uses the flat files for
  authentication (smbpasswd file).
 
  Here is the problem: On a Windows 2000 file server, we have folder
  shares.  Users can log on via Samba, but permissions to the shared
  folders are all screwed up.  When I review the permissions in the
  sharing tab on the 2000 server I noticed that none of the user names are
  listed, just some sort of serial number (e.g. S----).
 
 That number is the SID (security identifier your user has/had). Every
 domain / server has it's own SID. Did you updte the new server SID to that
 of the old one?
 
 On samba-2.2.x the tool to retrieve the domain SID is:
   smbpasswd -S 'Domain_Name'
 
 To write it on samba-2.2.x:
   smbpasswd -W S-1-5-...
 
 On samba-3.x to read the SID:
   net getlocalsid
 
 To write on samba-3.x:
   net setlocalsid S-1-5-
 
 - John T.
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Index Errores over Samba

2003-11-17 Thread Jose Angel Mendoza Ronquillo
Hi, my name is Jose Mendoza and I just mount a SAMBA 2.2.7 over Red Hat 9.0, that give 
to our administrative software a very good performance over the Novell server that we 
haved but now I'm receiving a lot of error index messages from my administrative 
software, I was reading about Oppportunistic Locking and I configure the Samba for 
that but I still having the same problem. Do you have an idea about what cause this 
situation?

My administrative application was developed in Acucobol and use indexed files, I ask 
for support with Acucobol but they told to me that they don't support Samba.

Thanks.


Saludos
 
Que tengas un buen dia
 
Servicios y Soluciones Integrales en Sistemas, S. de R.L. de C.V.
011-52-(614) 424-42-59
Necesitas las tablas de impuestos, tipos de cambio, Etc.?
http://www.sat.gob.mx/AGJI/acac97/2asec/indfisc.html
 
Actitud
 
Si prestáramos atención a nuestro intelecto en cada acto de nuestra vida, nunca nos 
enamoraríamos. Nunca tendríamos amistades. Nunca haríamos un negocio, porque seríamos 
cínicos. La verdad es que continuamente tenemos que arrojarnos al vacío y fabricarnos 
alas mientras llegamos a tierra firme.
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: SV: [Samba] SAMBA 3.0.0 PDC + LDAP - Adding Computer Account

2003-11-17 Thread Patrick
Thanks, I did not notice the typo, but the funny thing is that it was
working with the typo.  I had an idea that using the people ou would
work, and I did some searching and found that someone else ran into the
same problem.  They used the same ou for user accounts and it worked.
So I tried it and everything seems to be working.  It looks like this is
a bug in samba 3.  Some one has already reported this as a bug so maybe
it will get fixed.
Patrick

Tarjei Bitustøyl wrote:

Hi,

First, there's an error in the smb.conf: ldap user suffix has a typo.

Second, I ran into a similar problem myself. No matter what I do, I
cannot make a computer register in the LDAP *with ldap machine suffix
different from ldap people suffix*.
I have no idea why this is, but it's working with the people and machine
suffix in the same dn.
Regards
Tarjei
-Opprinnelig melding-
Fra: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] På vegne
av [EMAIL PROTECTED]
Sendt: 16. november 2003 21:58
Til: [EMAIL PROTECTED]
Emne: [Samba] SAMBA 3.0.0 PDC + LDAP - Adding Computer Account
Hello all,

I'm having an issue with adding machine accounts to a Samba 3.0.0 PDC
with
an LDAP passwd db backend.  This is on a RedHat 9 with an rpm I compiled
from the 3.0.0 release. I have configured samba to where it is using
LDAP
and able to add user accounts and group mappings to LDAP, but when I try
to add a computer account using smbpasswd -a -m data it is not able to
add
the account.  I ran it with the debug option and here is what I get:
(pts/2)[EMAIL PROTECTED] samba]# smbpasswd -a -m data -D 10
Netbios name list:-
my_netbios_names[0]=IMPACT
Trying to load: ldapsam:ldap://127.0.0.1
Attempting to register passdb backend ldapsam
Successfully added passdb backend 'ldapsam'
Attempting to register passdb backend ldapsam_compat
Successfully added passdb backend 'ldapsam_compat'
Attempting to register passdb backend smbpasswd
Successfully added passdb backend 'smbpasswd'
Attempting to register passdb backend tdbsam
Successfully added passdb backend 'tdbsam'
Attempting to register passdb backend guest
Successfully added passdb backend 'guest'
Attempting to find an passdb backend to match ldapsam:ldap://127.0.0.1
(ldapsam)
Found pdb backend ldapsam
Searching for:[((objectClass=sambaDomain)(sambaDomainName=MATRIX))]
smbldap_search_suffix: searching
for:[((objectClass=sambaDomain)(sambaDomainName=MATRIX))]
smbldap_open_connection: ldap://127.0.0.1
smbldap_open_connection: connection opened
ldap_connect_system: Binding to ldap server ldap://127.0.0.1 as
cn=Samba
Admin,ou=People,dc=firerun,dc=net
ldap_connect_system: succesful connection to the LDAP server
The LDAP server is succesful connected
pdb backend ldapsam:ldap://127.0.0.1 has a valid init
Attempting to find an passdb backend to match guest (guest)
Found pdb backend guest
pdb backend guest has a valid init
smbldap_search_suffix: searching
for:[((uid=data$)(objectclass=sambaSamAccount))]
ldapsam_getsampwnam: Unable to locate user [data$] count=0
Finding user data$
Trying _Get_Pwnam(), username as lowercase is data$
Trying _Get_Pwnam(), username as uppercase is DATA$
Checking combinations of 0 uppercase letters in data$
Get_Pwnam_internals didn't find user [data$]!
Failed initialise SAM_ACCOUNT for user data$.
Failed to modify password entry for user data$
My relavent smb.conf options are

#== Password Database

# Define the backend to use
passdb backend = ldapsam:ldap://127.0.0.1
# Define the DN that will be used to bind to the ldap directory
# must have write access to lmPassword and ntPassword attributes
# use smbpasswd -w secret to store password
ldap admin dn = cn=Samba Admin,ou=People,dc=firerun,dc=net
# Should ssl be used to connect to ldap server
# (off, start tls, on) default = on
ldap ssl = off
# smbpasswd -x delete the entire dn-entry
ldap delete dn = no
# The machine and user suffix added to the base suffix
# wrote WITHOUT quotes.  NULL suffixes by default
ldap user suffix = ou=People,dc=fireru,dc=net
ldap group suffix = ou=Group,dc=firerun,dc=net
ldap idmap suffix = ou=Idmap,dc=firerun,dc=net
ldap machine suffix = ou=Computers,dc=firerun,dc=net
# Specify the base DN to use when searching the directory
ldap suffix = dc=firerun,dc=net
# Specify the search filter. Generally the default is okay
# ldap filter = ((uid=%u)(objectclass=sambaAccount))
# Should ldap passwords be synced with nt passwords
# (yes, no, only) default = no
ldap passwd sync = no
# Allow adding a computer account to ldap
add machine script = /etc/samba/ldapaddcomp %m$
#==

As for the user data$ it already exists in the directory as:

# data$, Computers, firerun, net
dn: uid=data$,ou=Computers,dc=firerun,dc=net
uid: data$
cn: Computer Account
objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
uidNumber: 1007
gidNumber: 1003
homeDirectory: /dev/null
gecos: Computer Account
loginShell: /sbin/nologin
description: Computer Account
shadowLastChange: 12372

[Samba] Linux Active Directory Login

2003-11-17 Thread Kenneth Savoy
Im using Samba 3.0.0 and I am trying to get my Redhat 9 workstations to use
a Windows 2003 Active Directory server for authentication. Using LDAP for
auth.

I issue this command net rpc join -S MYPDCDOMAINNAME -U MYADMINACCT

I get joined the domain MYDOMAIN

winbindd does start

I issue wbinfo -u and it shows all the users on the domain.
I issue wbinfo -g and it shows all the groups on the domain
I issue getent passwd and it shows all the users in UNIX format

I start smb daemons in this order
smbd,nmbd,winbindd

I can see the users and groups but I can't login with them. Any suggestions?
If i do su user It returns user does not exist.

My smb.conf and nsswitch.conf are below


# Samba config file created using SWAT
# Global parameters
[global]
 workgroup = MYPDCDOMAINNAME
 netbios name = IBPS12
 server string = clients12
 security = DOMAIN
 password server = MYPDCDOMAINNAME
 idmap uid = 1-2
 idmap gid = 1-2


# /etc/nsswitch.conf

# To use db, put the db in front of files for entries you want to be
# looked up first in the databases
#
# Example:
#passwd:db files nisplus nis
#shadow:db files nisplus nis
#group: db files nisplus nis

passwd: files winbind
shadow: files
group:  files winbind

#hosts: db files nisplus nis dns
#hosts:  files winbind dns

# Example - obey only what nisplus tells us...
#services:   nisplus [NOTFOUND=return] files
#networks:   nisplus [NOTFOUND=return] files
#protocols:  nisplus [NOTFOUND=return] files
#rpc:nisplus [NOTFOUND=return] files
#ethers: nisplus [NOTFOUND=return] files
#netmasks:   nisplus [NOTFOUND=return] files

#bootparams: nis [NOTFOUND=return] files

ethers: files
netmasks:   files
networks:   files
protocols:  files
rpc:files
services:   files

#netgroup:   files nis

#publickey:  nis

#automount:  nis files
#aliases:files nis

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba PDC trying rid null logins

2003-11-17 Thread Reed, Tameika



 We are trying to have linux authenticate to linux server running samba
 3.0.  We have the XP Pro, 6.2 redhat, and 7.3 redhat machines.  They all
 authenticate to the linux server but we are having problems with blank
 passwords or the user can type any password.  We are using pam modules for
 the authentication on the client machines.
 I have included the config files for the server and the client (smb.conf).
 I have also included the pam_modules setup on the clients.  We want all
 the username and passwords stored on the server.  There will not be any
 users on the clients their information will be pulled from the server.
 This includes telnet, ftp, and logins.  We have got most of this working
 except for the blank passwords.  We have configured this several different
 ways.  This is our latest idea so this is what is in the lab right now.
 
 We have gotten that to work but we are having problems with null logins.
 In other words if I type a username and leave the password field blank I
 still can login.  If I put in a password of any kind I still can get in.
 Also we have changed so that the null logins are not accepted ( at least
 we think) but if you attempted login repeatedly you can still get in by
 not typing a password or by typing any password.  I am not sure if the
 samba PDC does cached logins if so I am not aware of how to turn this off
 if this is the case. I sending you my config file to see if you can tell
 me if I am going in the right direction and if not how can I correct the
 matter.  This is a mixed environment so there are  6.2, 7.3 and windows xp
 pro machines in the setup.  The information that I am sending you deals
 with the linux clients as redhat 6.2 with samba 2.2.8 and authenticating
 to redhat 7.3 with samba 3.0.0 on the server.
 
 I am not sure if the pam modules need to be upgraded for redhat 6.2 or if
 this is just totally impossible?
 I did not include the nsswitch.conf file but it is configured as follows
 
 
 passwdfiles winbind
 groupsfiles winbind
 hosts files winbind
 
 The iptables and ipchains are turned off on the server and client.

 
 
  ftp.txt  sshd.txt  login.txt  passwd.txt  samba.txt  
 smb.conf  su.txt  smb_server.conf 
 
 
 Thanks 
 
 Tameika Reed
 
#%PAM-1.0

auth   required /lib/security/pam_listfile.so item=user sense=deny 
file=/etc/ftpusers onerr=succeed

#this line was changed should be pam_pwdb
auth   sufficient   /lib/security/pam_winbind.so shadow 

auth   required /lib/security/pam_shells.so

#this line was changed should be pam_pwdb
accountrequired /lib/security/pam_winbind.so

sessionrequired /lib/security/pam_pwdb.so
#%PAM-1.0
auth   required /lib/security/pam_winbind.so shadow nodelay
auth   required /lib/security/pam_nologin.so
accountrequired /lib/security/pam_winbind.so
password   required /lib/security/pam_cracklib.so
password   required /lib/security/pam_winbind.so shadow use_authtok
sessionrequired /lib/security/pam_pwdb.so
sessionrequired /lib/security/pam_limits.so
#%PAM-1.0
#Requires logins to be from tty
#auth   required/lib/security/pam_securetty.so

#Passes enviroment variables
#auth   required/lib/security/pam_env.so

#A domain account is sufficient to bypass the rest of the
#auth lines
auth   sufficient   /lib/security/pam_winbind.so

#if the user doesn't have a domain account then check
#for local unix accounts (root, or unix-smb synced accounts)
auth   sufficient   /lib/security/pam_unix.so use_first_pass likeauth nullok

#If everything above fails, deny
#auth   required/lib/security/pam_deny.so

#If the above auth lines fail, deny all logins
auth   required /lib/security/pam_nologin.so

#Check domain account?
accountsufficient   /lib/security/pam_winbind.so
#accountrequired/lib/security/pam_unix.so
#accountrequired/lib/security/pam_deny.so

#password   required/lib/security/pam_cracklib.so retry=3
#password   sufficient  /lib/security/pam_unix.so use_authtok md5 shadow
#password   required/lib/security/pam_deny.so

#Set user limits to resources, ie. cpu, memory, processes, # of 
#concurrent logins, etc.
#sessionrequired/lib/security/pam_limits.so

#sessionrequired/lib/security/pam_unix.so

#If the user doesn't have a home directory, then one will be made
#in /home/username
sessionrequired /lib/security/pam_mkhomedir.so skel=/etc/skel/ umaks=0022
sessionoptional /lib/security/pam_console.so
#%PAM-1.0
auth   required /lib/security/pam_winbind.so shadow 
accountrequired /lib/security/pam_winbind.so
password   required /lib/security/pam_cracklib.so lcredit=-1 ucredit=-1 dcredit=-1 
ocredit=-1 retry=3
password   required /lib/security/pam_unix.so use_authtok md5 shadow
authrequiredpam_winbind.so
account requiredpam_winbind.so
session required 

[Samba] Long File Name vs 8.3 File Name Performance

2003-11-17 Thread Michael T. Cheshire
Howdy,
 
I was wondering if someone can answer a question for me.
 
Would the be a difference in performance in reading a 8.3 filename to
reading a long filename from a samba share from a Windows XP
Workstation?
 
Someone I know has suggested that when the filename is not 8.3, the
filename is actually queried twice in some way.
 
Is this correct?
 
Thanks in advance for your advice.
 
Michael.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Linux Active Directory Login

2003-11-17 Thread John H Terpstra
On Mon, 17 Nov 2003, Kenneth Savoy wrote:

 Im using Samba 3.0.0 and I am trying to get my Redhat 9 workstations to use
 a Windows 2003 Active Directory server for authentication. Using LDAP for
 auth.

 I issue this command net rpc join -S MYPDCDOMAINNAME -U MYADMINACCT

 I get joined the domain MYDOMAIN

 winbindd does start

 I issue wbinfo -u and it shows all the users on the domain.
 I issue wbinfo -g and it shows all the groups on the domain
 I issue getent passwd and it shows all the users in UNIX format

 I start smb daemons in this order
 smbd,nmbd,winbindd

 I can see the users and groups but I can't login with them. Any suggestions?
 If i do su user It returns user does not exist.

Have you configured PAM for winbind?

It's documented in the Samba-HOWTO-Collection.pdf. If you haven't checked
that you can obtain it from:
http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf

The chapters you want are called Winbind: Use of Domain Accounts, and PAM:
Distributed Authentication.

If you have already read this, perhaps you can post your /etc/pam.d/login
file.

Cheers,
John T.



 My smb.conf and nsswitch.conf are below


 # Samba config file created using SWAT
 # Global parameters
 [global]
  workgroup = MYPDCDOMAINNAME
  netbios name = IBPS12
  server string = clients12
  security = DOMAIN
  password server = MYPDCDOMAINNAME
  idmap uid = 1-2
  idmap gid = 1-2


 # /etc/nsswitch.conf

 # To use db, put the db in front of files for entries you want to be
 # looked up first in the databases
 #
 # Example:
 #passwd:db files nisplus nis
 #shadow:db files nisplus nis
 #group: db files nisplus nis

 passwd: files winbind
 shadow: files
 group:  files winbind

 #hosts: db files nisplus nis dns
 #hosts:  files winbind dns

 # Example - obey only what nisplus tells us...
 #services:   nisplus [NOTFOUND=return] files
 #networks:   nisplus [NOTFOUND=return] files
 #protocols:  nisplus [NOTFOUND=return] files
 #rpc:nisplus [NOTFOUND=return] files
 #ethers: nisplus [NOTFOUND=return] files
 #netmasks:   nisplus [NOTFOUND=return] files

 #bootparams: nis [NOTFOUND=return] files

 ethers: files
 netmasks:   files
 networks:   files
 protocols:  files
 rpc:files
 services:   files

 #netgroup:   files nis

 #publickey:  nis

 #automount:  nis files
 #aliases:files nis



-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] pamsmb_pass, userPassword samba(LM/NT)Password

2003-11-17 Thread Chew, Darren
Hi All,

Has anyone used pam_smbpass before with Samba 3 and Solaris 9?

The problem I am facing is that the sambaNTPassword/sambaLMPassword and 
the posixAccount userPassword attributes are not the same.

While I can use net rpc vampire to migrate the lanman password hashes 
the posixAccount attribute remains unpopulated.

I have discovered that the smbldap tools has scripts to synchronise the 
passwords but this requires the password to be changed.

I have just come across pam_smbpass and it looks like it may be the key. 
Can anyone shed some light on the following lines from the INSTALL file of 
pam_smbpass?

auth   optional pam_smbpass.so migrate
password   required pam_smbpass.so nullok use_authtok 
try_first_pass

Does pam_smbpass require pam_smb?

Any help much appreciated.

Darren

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


CVS update: samba4/source/librpc/idl

2003-11-17 Thread tridge

Date:   Mon Nov 17 09:33:58 2003
Author: tridge

Update of /home/cvs/samba4/source/librpc/idl
In directory dp.samba.org:/tmp/cvs-serv17881

Modified Files:
echo.idl spoolss.idl 
Log Message:
use [subcontext] to make GetPrinter a bit easier in smbtorture




Revisions:
echo.idl1.3 = 1.4

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/idl/echo.idl.diff?r1=1.3r2=1.4
spoolss.idl 1.11 = 1.12

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/idl/spoolss.idl.diff?r1=1.11r2=1.12


CVS update: samba4/source/librpc/ndr

2003-11-17 Thread tridge

Date:   Mon Nov 17 09:34:09 2003
Author: tridge

Update of /home/cvs/samba4/source/librpc/ndr
In directory dp.samba.org:/tmp/cvs-serv17903

Modified Files:
ndr.c ndr_echo.c ndr_echo.h ndr_spoolss.c ndr_spoolss.h 
Log Message:
use [subcontext] to make GetPrinter a bit easier in smbtorture




Revisions:
ndr.c   1.15 = 1.16

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr.c.diff?r1=1.15r2=1.16
ndr_echo.c  1.9 = 1.10

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_echo.c.diff?r1=1.9r2=1.10
ndr_echo.h  1.4 = 1.5

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_echo.h.diff?r1=1.4r2=1.5
ndr_spoolss.c   1.11 = 1.12

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_spoolss.c.diff?r1=1.11r2=1.12
ndr_spoolss.h   1.9 = 1.10

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_spoolss.h.diff?r1=1.9r2=1.10


CVS update: samba4/source/torture/rpc

2003-11-17 Thread tridge

Date:   Mon Nov 17 09:34:19 2003
Author: tridge

Update of /home/cvs/samba4/source/torture/rpc
In directory dp.samba.org:/tmp/cvs-serv17921

Modified Files:
echo.c spoolss.c 
Log Message:
use [subcontext] to make GetPrinter a bit easier in smbtorture




Revisions:
echo.c  1.11 = 1.12

http://www.samba.org/cgi-bin/cvsweb/samba4/source/torture/rpc/echo.c.diff?r1=1.11r2=1.12
spoolss.c   1.9 = 1.10

http://www.samba.org/cgi-bin/cvsweb/samba4/source/torture/rpc/spoolss.c.diff?r1=1.9r2=1.10


CVS update: pidl

2003-11-17 Thread tridge

Date:   Mon Nov 17 11:53:12 2003
Author: tridge

Update of /data/cvs/pidl
In directory dp.samba.org:/tmp/cvs-serv2776

Modified Files:
parser.pm util.pm 
Log Message:
auto-generate functions for printing top-level function
parameters. You can choose to print just the [in] parameters, just the
[out] parameters or both





Revisions:
parser.pm   1.33 = 1.34
http://www.samba.org/cgi-bin/cvsweb/pidl/parser.pm.diff?r1=1.33r2=1.34
util.pm 1.19 = 1.20
http://www.samba.org/cgi-bin/cvsweb/pidl/util.pm.diff?r1=1.19r2=1.20


CVS update: samba4/source/librpc/ndr

2003-11-17 Thread tridge

Date:   Mon Nov 17 11:55:44 2003
Author: tridge

Update of /home/cvs/samba4/source/librpc/ndr
In directory dp.samba.org:/tmp/cvs-serv3158

Modified Files:
libndr.h ndr.c ndr_basic.c ndr_dfs.c ndr_echo.c ndr_lsa.c 
ndr_samr.c ndr_spoolss.c ndr_spoolss.h 
Log Message:
 * add another WERR err code

 * use the top-level function argument printing to show more detail in
   RPC-* tests






Revisions:
libndr.h1.16 = 1.17

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/libndr.h.diff?r1=1.16r2=1.17
ndr.c   1.16 = 1.17

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr.c.diff?r1=1.16r2=1.17
ndr_basic.c 1.24 = 1.25

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_basic.c.diff?r1=1.24r2=1.25
ndr_dfs.c   1.10 = 1.11

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_dfs.c.diff?r1=1.10r2=1.11
ndr_echo.c  1.10 = 1.11

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_echo.c.diff?r1=1.10r2=1.11
ndr_lsa.c   1.32 = 1.33

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_lsa.c.diff?r1=1.32r2=1.33
ndr_samr.c  1.16 = 1.17

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_samr.c.diff?r1=1.16r2=1.17
ndr_spoolss.c   1.12 = 1.13

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_spoolss.c.diff?r1=1.12r2=1.13
ndr_spoolss.h   1.10 = 1.11

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_spoolss.h.diff?r1=1.10r2=1.11


  1   2   >