[Samba] Trust Samba1 dom to Samba2 dom
How do I got about making a trust? I want users of Samba1 dom to use the resources that are on Samba2 dom. __ Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses. http://promotions.yahoo.com/new_mail -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: [v3.0.4] can not set SSID
how does i do this? Jim C. wrote: | You'll have to reset all of them later of course. | One thing you might try is setting the new SID and then just giving the | system the new one when it asks. - -- -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Stephan Pfeiffer ICQ: 39844459 http://www.synopex.de/ mailto:[EMAIL PROTECTED] -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Netlogon
James Coggan wrote: Is it possible to use some kind of netlogon script to add a printer? net use \\server\printert ?? I would suggest a complete solution that you can also use to add drives, set registry settings. A way so you can do anything you wish in the future. Kixtart would be the best thing to use in my opinion. http://www.kixtart.org/ We use it in a environment for +600 people, working with Win98, 2K and XP. Just take a look! Later, Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] printer preferences not settable using samba print driver
Mike F. Cavanaugh wrote: We're putting together a Linux-cups-samba print server for Windows clients. A dozen print drivers have been loaded and used successfully on the Windows clients from the samba server. But, one particular printer is causing trouble: a Xerox DC 2240. When a windows client tries to open the printer preferences, after connecting to the printer on the samba print server, a popup says operation could not be completed. Has anyone seen this behaviour before? I'm guessing that its somehow related to this printer's PPD file. When this printer's driver is loaded straight onto a windows client or from a Windows print server there is no problem. Yes it is a known problem with the current CUPS windows print drivers (you probably used them for use with point-n-print features of samba?) Also see: http://www.cups.org/str.php?L447+P0+S0+C0+I0+E0+Qgeneral+protection and: http://www.cups.org/str.php?L591+P0+S0+C0+I0+E0+Qgeneral+protection It's a CUPS thing... What I did was try different PPD's every time rerunning the cupsaddsmb, and reinstalling the driver on the windows machines every time again (yes, very lengthy process) until it crashed no more. No resolution otherwise, perhaps in the future when CUPS matures more. Later, Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 3.0.4: smbd's + nscd's = 100% CPU; load 4
the new 3.0.4 Samba installation seems to work fine except that from time to time but at least a couple of times a day one or more smbd processes start running at 20%-40% CPU each and 6 nscd processes then share the remaining CPU power. System 70%-80% users the rest 20%-30%. Load rises fast to over 4. I'm sure that each such process is just idling, but why does it engage so much nscd processing? As soon as I kill the excessive smbd process(es) the situation drops to normal, i.e. load 0,1 no perceptible CPU%. Does anyone know what's happening? What does strace say ? Can you attach with gdb to a CPU bound process and give a backtrace ? Ah backtrace, to see the steps to the black hole? OK. Will do, sooen as I get back to office (tomorrow). A pot watched never boils. But as soon as it happens again, I'll consult strace and gdb to see how and why it happens. It does, when you stop watching. I was away yesterday and what do I see this morning: top - 09:55:35 up 6 days, 17:28, 6 users, load average: 3.59, 3.82, 3.15 Tasks: 182 total, 3 running, 179 sleeping, 0 stopped, 0 zombie Cpu(s): 21.6% user, 78.4% system, 0.0% nice, 0.0% idle Mem: 2060704k total, 2004324k used,56380k free, 185272k buffers Swap: 2402296k total, 5236k used, 2397060k free, 1068752k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ Command 12808 robf 25 0 2996 2596 2244 R 23.6 0.1 4:46.98 smbd 12741 robf 22 0 3028 2628 2280 R 20.6 0.1 5:44.55 smbd 2354 root 15 0 724 716 536 S 15.3 0.0 150:31.23 nscd 2356 root 15 0 724 716 536 S 14.9 0.0 150:35.87 nscd 2352 root 15 0 724 716 536 S 9.0 0.0 151:14.08 nscd 2353 root 15 0 724 716 536 S 6.3 0.0 150:39.89 nscd 2355 root 15 0 724 716 536 S 6.3 0.0 150:31.82 nscd 2350 root 15 0 724 716 536 S 3.7 0.0 150:49.78 nscd I attached both of the smbd processes to gdb and backtrace was always: #0 0x402e5328 in read () from /lib/libc.so.6 #1 0x40343b90 in __DTOR_END__ () from /lib/libc.so.6 #2 0x4031d58b in __nscd_getpwnam_r () from /lib/libc.so.6 #3 0x402c130d in getpwnam_r@@GLIBC_2.1.2 () from /lib/libc.so.6 #4 0x402c0e6f in getpwnam () from /lib/libc.so.6 #5 0x081298fd in get_memberuids () #6 0x08129b09 in _samr_query_groupmem () #7 0x081215d1 in api_samr_query_groupmem () #8 0x081358b2 in api_rpcTNP () #9 0x08135632 in api_pipe_request () #10 0x0812fc10 in process_request_pdu () #11 0x0812fdec in process_complete_pdu () #12 0x08130069 in process_incoming_data () #13 0x08130220 in write_to_internal_pipe () #14 0x081301a4 in write_to_pipe () #15 0x080883e0 in api_fd_reply () #16 0x080885b9 in named_pipe () #17 0x080891bc in reply_trans () #18 0x080c80e0 in switch_message () #19 0x080c8172 in construct_reply () #20 0x080c8491 in process_smb () #21 0x080c9004 in smbd_process () #22 0x081f812e in main () #23 0x402268ae in __libc_start_main () from /lib/libc.so.6 After killing both smbd processes with -9 the top soon stabilizes at: top - 10:12:01 up 6 days, 17:45, 6 users, load average: 0.03, 0.19, 1.17 Tasks: 175 total, 2 running, 173 sleeping, 0 stopped, 0 zombie Cpu(s): 0.0% user, 0.7% system, 0.0% nice, 99.3% idle Mem: 2060704k total, 2034272k used,26432k free, 185272k buffers Swap: 2402296k total, 5236k used, 2397060k free, 1100020k cached PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ Command 15182 root 15 0 956 956 700 R 0.3 0.0 0:03.67 top Unfortunately I didn't trace the nscd processes. What a shame! I'll do it next time. Nobody complained yet about reduced performance. It's hard to tell when this behaviour started. The upper bound seems to be 9 hours, the combined run times of the nscd processe, some time during the night when the computers were totally quiet. The lower bound based on the run times of the smbd processes is more like half an hour ago. This is the fourth out of 5 times that the same user, robf, is involved as the effective UID of the smbd process. The other one time was root's own smbd. Jeremy, can I provide more information? I had a similiar Problem , and a loglevel of 4 shows , that samba was trying to look up a user nobody and a user Administrator, all the time. If I killed nscd the load of the ldap server becomes high... I added these user to my ldap backend, and the problem disappears. It's a valuable pointer but I'm not sure it really applies here, Hans. For one, your problem seems to have been persistent up until you added those users to your ldap backend. In my case, it happens very intermittently. Besides, my passdb backend is the default smbpasswd. I'll give it a more thorough check next time it happens, including user name lookups. -- To
Re: [Samba] 3.0.4: smbd's + nscd's = 100% CPU; load 4
#5 0x081298fd in get_memberuids () #6 0x08129b09 in _samr_query_groupmem () #7 0x081215d1 in api_samr_query_groupmem () #8 0x081358b2 in api_rpcTNP () #9 0x08135632 in api_pipe_request () #10 0x0812fc10 in process_request_pdu () #11 0x0812fdec in process_complete_pdu () #12 0x08130069 in process_incoming_data () #13 0x08130220 in write_to_internal_pipe () #14 0x081301a4 in write_to_pipe () #15 0x080883e0 in api_fd_reply () #16 0x080885b9 in named_pipe () #17 0x080891bc in reply_trans () #18 0x080c80e0 in switch_message () #19 0x080c8172 in construct_reply () #20 0x080c8491 in process_smb () #21 0x080c9004 in smbd_process () #22 0x081f812e in main () #23 0x402268ae in __libc_start_main () from /lib/libc.so.6 get_memberuids is expanding out the list of users in a group. Can you tell me what the group membership matrix looks like for this user ? He belongs to 5 groups, with 53, 14, 7, 21 and 128 members. Most users belong to 3-4 project groups, 1-2 interest groups plus users(== Domain Users). -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba amiga-mac
Hi I have an ethernet link between these two machines. I can share an internet connection with the mac as the host. I can ping the amiga from Mac with 100% packets returned. I can see a link to Amiga in the network window in the launcher on the Mac. However when I try to 'connect to server' from the Mac, Genesis on the Amiga refuses all connections on port 139. Same thing happens when I try and launch the swat interface via the browser on the Amiga: access to port 901 denied. I have tried editing the samba.config file by hand to set up shares on the amiga. I have endlessly changed settings both for samba and genesis with no obvious effect. If any one has any suggestions it would be greatly appreciated. Keith Bowler -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Windows 2K outperform Linux/Samba very much?
Hi, all: I want to check small files' property(such as date, path, and so on) frequently. The files are stored in netwrok driver and their sizes vary from 2KB to 5KB. I found that Windows 2K outperform Linux/Samba very much after I campared the bench results. I am very confused about it and who can explain it? The computers' configurations are as follows: 1. PC Client It runs the follow VB program to compute the time when check files' property Operation System: Windows 2000 professional // ... Set objFSO = CreateObject(Scripting.FileSystemObject) thistime = thisnow If objFSO.FileExists(fn) Then totle = totle Check file time CStr(thisnow - thistime) + ms + vbCrLf thistime = thisnow Set objFile = objFSO.GetFile(fn) totle = totle Get object time CStr(thisnow - thistime) + ms + vbCrLf thistime = thisnow temp = DateValue(CStr(objFile.DateLastModified)) totle = totle Get date time CStr(thisnow - thistime) + ms + vbCrLf End If 2. Linux PC Server: It provide Linux/Samba shared directory for the client (1) Operation System kernel = 2.6.6 file system = xfs nic = intel pro 100 Samba 2.2.8a (I have tried samba 3.0.4, and the result is likely) (2) smb.conf [global] encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=4096 SO_SNDBUF=4096 max xmit = 4096 read raw = No wide links = No [pub] path = /pub guest ok = no write list = test create mode = 0664 directory mode = 0775 3. Windows PC Server: It provide Windows shared directory for the client Operation System: Windows 2000 professional 4. Bench results Windows Linux/Samba CHECK OBJECT DATE CHECK OBJECT DATE - -- - -- 760 10 120 10 0 203 750 10 80 20 0 363 780 10 50 20 761 632 750 10 50 10 0 173 800 0 10 40 0 711 90 0 140 240 212 871 60 40 90 240 212 821 90 0 50 210 30 162 60 50 10 20 220 150 10 30 20 30 30 160 0 50 80 741 50 412 10 40 110 781 10 412 20 0 70 20 781 381 10 0 70 10 791 81 20 20 0 50 21 691 NOTE: the unit is ms. Best Regards! Jacky Kim . -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Permission denied (if57@student.qut.edu.au)
You have attempted to send a message to a list to which you are not authorised. Your message has been discarded. QUT Help Desk (Postmaster) [EMAIL PROTECTED] Ph: +61 7 3864 4000 --- Original Message --- Received: from mail-router01.qut.edu.au (IDENT:[EMAIL PROTECTED] [131.181.254.7]) by copperhead.qut.edu.au (8.11.6/8.11.6) with ESMTP id i678hKJ30761 for [EMAIL PROTECTED]; Wed, 7 Jul 2004 18:43:23 +1000 Received: from student.qut.edu.au (CPE-203-51-216-219.qld.bigpond.net.au [203.51.216.219]) by mail-router01.qut.edu.au (MOS 3.4.7-GR) with ESMTP id BKY13990; Wed, 7 Jul 2004 18:43:07 +1000 (EST) Message-Id: [EMAIL PROTECTED] From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Hello Date: Wed, 7 Jul 2004 18:43:17 +1000 MIME-Version: 1.0 X-Priority: 1 X-MSMail-Priority: High Content-Type: multipart/mixed; boundary=MIRAPOINT_PART1_40ebb7a5 X-Mirapoint-Virus: VIRUSDELETED; host=mail-router01.qut.edu.au; attachment=[2.2]; virus=W32/Netsky-Z X-Junkmail: UCE(100) X-Junkmail-Status: score=100/50, host=mail-router01.qut.edu.au This is a multi-part message in MIME format. --MIRAPOINT_PART1_40ebb7a5 Content-Type: text/plain WARNING!!! (from mail-router01.qut.edu.au) The following message attachments were flagged by the antivirus scanner: Attachment [2.2] Informations.zip, virus infected: W32/Netsky-Z. Action taken: deleted --MIRAPOINT_PART1_40ebb7a5 Content-Type: multipart/mixed; boundary==_NextPart_000_0011_7255.787B --=_NextPart_000_0011_7255.787B Content-Type: text/plain; charset=Windows-1252 Content-Transfer-Encoding: 7bit Important informations! --=_NextPart_000_0011_7255.787B Content-Type: text/plain VIRUS WARNING Message (from mail-router01.qut.edu.au) The virus W32/Netsky-Z was detected in email attachment [2.2] Informations.zip. The infected attachment has been deleted. --=_NextPart_000_0011_7255.787B-- --MIRAPOINT_PART1_40ebb7a5-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Windows 2K outperform Linux/Samba very much?
Sorry, I miss the follow informations: 1. There are 100,000 files in shared directory. 2. Mkfs.xfs data device in linux server, and mount it with noatime option Jacky Kim . -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: possible patch for username map bug [was Re: [Samba] bug in parsing the 'username map' in 3.0.5pre1]
Hi Jerry et al, looks fine for me, I tried the patch on 3.0.5pre1 and everything is OK now :-) thanks ~christoph On Tue, 6 Jul 2004, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Could you both (and anyone else having 'username map' problems in 3.0.4 or later) try this patch which hopefully fixes the username map bug. Thanks. Let me know how it goes. cheers, jerry | the parsing of the 'username map' file seems to be | broken in 3.0.5pre1 and a few earlier releases. The '!' | at the beginning of a line is ignored. Something like | | !lp = lp | !chbeyer = chbeyer | !guest = guest | nobody = * | | doesn't work anymore :-( | | from the man page: | | [ snip ] | If any line begins with an '!' then the processing will | stop after that line if a mapping was done by the line. | Otherwise mapping continues with every line being pro- | cessed. Using '!' is most useful when you have a wild- | card mapping line later in the file. | [ snip ] - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA6xsZIR7qMdg1EfYRAnzFAKChF7QIKOcWfVMw0x/7SfU3O1nhZQCfU/Fc 5ueDSSX0axBqQOSdVH/n7F4= =Aka7 -END PGP SIGNATURE- best regards ~christoph -- /* Christoph Beyer | Office: Building 2b / 23 *\ * DESY|Phone: 040-8998-2317* * - IT - | Fax: 040-8998-4060* \* 22603 Hamburg | http://www.desy.de */ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbpasswd and ldap problem
Hi, I recently upgraded a working samba server from 2.2.8a to 2.2.9_1 under FreeBSD 5.1R. This is still working expept a ldap problem. Here is what's happening : server# smbpasswd myUser New SMB password: Retype new SMB password: LDAPS option set...! ldap_connect_system: Binding to ldap server as Bind failed: Can't contact LDAP server Failed to find entry for user myUser. Failed to modify password entry for user myUser The user 'myUser' already exists in the smbpasswd file, I just want to change its password. Please note that the problem appears exactly the same when trying to add a user with a '-a' option. It seems that I compiled ldap (well, the automated package installer of freebsd), and I like it. I forecast that I will use samba one day, but not yet. Is it possible to have a samba compiled with the ldap support, but not be forced to use it? Is there an option in smb.conf to tell samba to avoid bothering me with these ldap add-ons? If not, what can I do to make him play with its ldap things, but actually still use the good old smbpasswd file we all know? Thank you. -- Nicolas Ecarnot -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] ADS server fallback
Dear list, I have a question about ADS server fallback of a Samba domain member in a W2k3 environment. I describe now a little our real production ADS environment; Madrid: two W2k3 ADS servers (ADM01 and ADM02) in a cluster; both are a global catalog servers in the .COM realm. Berlin; one W2k3 ADS server (ADM03); is also a global catalog server in the .COM realm. The ADS servers in Madrid and Berlin are replicated. Düsseldorf; RHL9 server with Samba 3.0.4 (compiled with MIT 1.3.1-7 and CUPS) as a domain member of the .COM realm. Winbind and Kerberos are used as authentication method against ADS. Connections between the various sites: leased line, 128 Kb/s The RHL9 server in Düsseldorf is joined to the .COM realm and is working properly. XP clients in Düsseldorf logon to the ADS domain and via the login script they'll get their shares on the local Samba server and this works fine. Normally the Samba server in Düsseldorf is communicating with the ADM03 server in Berlin (The 1st DNS server is the ADM03 server; ADS is configured that clients and domain members in the subnet of Düsseldorf first contact the ADS server in Berlin). Question: How can I configure Samba 3.0.4 that an ADS server fallback is performed if the connection with the ADS server in Berlin fails? In other words; when communication with the ADM03 server fails (leased line with Berlin breaks down), Samba must automatically contact the ADM01 or ADM02 server in Madrid for its ADS queries. I already used the entry password server = adm03..com, adm01..com, * in my smb.conf file. My krb5.conf file doesn't exist, because MIT 1.3.1 searches its KDC servers via DNS, or must I specify for Kerberos also a fallback (contents of krb5.conf: [libdefaults] dns_fallback = true)? The winbind cache time is default (300 sec). Must I specify a larger value (e.g. 900 sec.) on remote sites with a relative slow connection? Thanx for any suggestion, Alex. (sorry for the stupid disclaimer underneath this e-mail, I can't help it... :) Here is my smb.conf file (only the global section): [global] workgroup = realm = .COM server string = %h server (Samba %v) security = ADS password server = adm03.XXX.com, adm01.XXX.com, * passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* unix password sync = Yes log file = /var/log/samba/%m.log max log size = 200 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u domain master = No dns proxy = No idmap uid = 1-2 idmap gid = 1-2 template homedir = /data/hom/%U template shell = /bin/bash printer admin = root, '@.COM\Domain Admins', @.COM\DEP_ADMIN_GERMANY oplocks = No level2 oplocks = No Visit our Web site: http://www.nh-hotels.com This message is from NH HOTELES and it is private and confidential. Its content may be legally protected.Reception by a non-intended person does not waive legal protection rights. If you receive this message by mistake, please delete it from your system and report the sender. Although this message has been cleared for viruses using currently available virus definitions before sending, it is the responsibility of the receiver to ensure it is virus-free.Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Event Tracking
Hi, I am using Samba 3.0.4 as PDC and have 3 domain member server, I would like to setup a logging of the files which gets deleted by the user. I have already used Audit Modules but that slows down the samba server very much, please suggest me possible ways of achieving the desired result. Thanks, Honey -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba Digest, Vol 19, Issue 8
This is an automatic reply I will be away until 5 to 9 July 2004 I will check email while I'm away. Please don't send attachments to me during that time, as my mailbox might fill up and overflow and I'll miss the mail entirely. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] Wishlist for v4.0 Integration / Setup of samba.
Hi, and where can i find some rudimentary documentation for it?? regards Arno -Ursprungliche Nachricht- Von: Guenther Deschner [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 7. Juli 2004 00:04 An: Arno Seidel Cc: [EMAIL PROTECTED] Betreff: Re: [Samba] Wishlist for v4.0 Integration / Setup of samba. Hi, On Tue, Jul 06, 2004 at 10:34:51PM +0200, Arno Seidel wrote: Hi there, my wish for 4.0 is a deeper integration of ldap. maybe in that way, that share configurations could be stored direct in a ldap-entry. samba3 HEAD has code for that already since a long time (although a feature probably not very well tested and obviously not very well known). Bye, Guenther -- Guenther Deschner, SerNet Service Network GmbH Phone: +49-(0)551-37-0, Fax: +49-(0)551-37-9 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] ntlm_auth help
Hi all I am going to configure squid proxy server with smb ntlm_auth.But when i try to test as follows it will give a err *** ntlm_auth --helper-protocol=squid-2.5-ntlmssp username password NA NT_STATUS_INVALID_PARAMETER *** but, ntlm_auth --username==squid-helper-protocol=squid-2.5-basic username password OK my smb.conf is [global] workgroup = mydomain netbios name = PROXY_LINUX security = DOMAIN password server = 10.1.1.51 idmap uid = 1-2 idmap gid = 1-2 winbind use default domain = Yes Hope your help thank you champaka Srinath __ Do you Yahoo!? Read only the mail you want - Yahoo! Mail SpamGuard. http://promotions.yahoo.com/new_mail -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Profiles
Even though it might not look like it is so, your profiles are likely only being stored locally. In our case, I have a dmusers group that each user is a member of and the dmusers group has rw rights to the profiles directory on the server. What Windows does is store the profile on the local machine and will update the 'roaming profile' on the server, if applicable. You might not be seeing or receiving an error message stating that they aren't able to update/upload the profile to the server. Check in your Windows Event viewer to see if there are any message stating that. I would also check permissions on the 'profiles' directory. It might need a decent alteration of the existing permissions to allow the profiles to be updated. -Rob Miles Scruggs wrote: I have a few weird problems with profiles on my samba PDC. Right now I'm just testing with two XP pro clients. Samba is Samba version 3.0.2a-Debian The problems that I'm having and I believe are related are: 1.) Profiles are saved to the server, but don't migrate to different clients. This is very odd, I can make all sorts of changes to the profile and I can see those changes being saved to the server. When I log back in those changes are loaded to the local machine, if I try to login to another client, I see a totally separate profile. The kicker is that all data is being saved to the same path, but somehow it can differenetite which client is logging in. 2.) Once the profile is created on one client, the home dir is writable to only that client. The home dirs and profile dir is two separate locations /home/%u for homedirs /home/profile/%u for profiles Thanks for the help Miles -- Regards, Robert Adkins IT Manager/Buyer Impel Industries, inc. 586-254-5800 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] chmod fails if user is in guid but is not uid
Dear samba users, I'am new to samba and I fail to solve the following problem: To have access to a share I mount it: mount -t smbfs -o username=john,password=***,uid=501,gid=601,fmask=0777,dmask=0777 //myserver/myshare /domain/myserver/myshare If id of user bob is 501, the following commands succeeds: su bob chmod 777 /domain/myserver/myshare/myfile But altough bill is member of group 601 the following commands fail: su bill chmod 777 /domain/myserver/myshare/myfile Is it normal? Is there a way to circomvent that? Am I completely wrong. Thank in advance for any help. Regards, Vivian. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: ACCESS DENIED when trying to log into domain
For a successful samba3.x domain controller you need to make sure of a few things. your nt to unix group map ip and hostname in host file proper scripts in smb.conf proper user map in smbusers (if necessary for your purpose) here is an example of my smb.conf and of course sub MY-DOMAIN for yours - # Global parameters [global] workgroup = MY-DOMAIN realm = MY-DOMAIN server string = Linux security = DOMAIN map to guest = Bad Password passwd program = /etc/samba/smbpasswd unix password sync = Yes passwd chat = *old password* %o\n *new password* %n\n *new password* %n\n *changed* passwd chat debug = false max log size = 50 time server = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/sbin/useradd %u delete user script = /usr/sbin/userdle %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g delete user from group script = /usr/sbin/deluser %u %g add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %u logon script = %G.bat logon path = domain logons = Yes os level = 65 lm announce = Yes preferred master = Yes domain master = Yes ldap ssl = no idmap uid = 1-2 idmap gid = 1-2 admin users = your_admin_accounts printer admin = your_admin_accounts [NETLOGON] comment = NETLOGON SHARE path = /home/samba/NETLOGON --- Markus Benkovszki ALSO make sure your usr group mapping is bang on I've had some major issues arrise with bad mappings. Hope this helps. -Original Message- From: Michael Lueck [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 9:58 PM To: [EMAIL PROTECTED] Subject: [Samba] Re: ACCESS DENIED when trying to log into domain Ken Miller wrote: However, when I try and connect to the domain, I get an 'Access Denied' message after entering my userid and password. What client OS? If NT/2K/XPPro have you joined it to the domain successfully? You need a user ID on the Samba box set up as a Domain Admin to use to join these OS's to your domain. I assume you are using a smbpasswd back end, you did add the user ID to that database? Some of the text within my ramblings to this list on net groupmap apply to the topic of creating a domain admin account. You might read through the small office example URL on the Samba web site I posted in that thread as well. Sounds like what you are up to is what that describes. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] IE - FF
I have a samba server acting as a domain controller. Is there a way that I can Have a script that delete the shortcuts on the desktop,quicklaunch and startmenu for Internet Exploder. At the same time installing Mozilla Fire Fox. Maybe like a little vbscript or something that gets ran from the server when they login. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: ACCESS DENIED when trying to log into domain
On Wed, 7 Jul 2004 08:30:01 -0400, Markus Benkovski wrote: ALSO make sure your usr group mapping is bang on I've had some major issues arrise with bad mappings. AMEN to that! I JUST got my mapping working 10:30 last night... will be posting findings to the list on that Q's about net groupmap thread I've been chatting to myself on. Michael Lueck Lueck Data Systems http://www.lueckdatasystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RES: [Samba] ntlm_auth help
Isn't possible to test the ntlm_auth with the ntlmssp protocol in a command line mode, you must use a browser able to handle ntlm because only this sort of browser send the appropriate ntlm challenges, try IE. Estevam Henrique -Mensagem original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de Champaka Guruge Enviada em: quarta-feira, 7 de julho de 2004 09:25 Para: [EMAIL PROTECTED] Assunto: [Samba] ntlm_auth help Hi all I am going to configure squid proxy server with smb ntlm_auth.But when i try to test as follows it will give a err *** ntlm_auth --helper-protocol=squid-2.5-ntlmssp username password NA NT_STATUS_INVALID_PARAMETER *** but, ntlm_auth --username==squid-helper-protocol=squid-2.5-basic username password OK my smb.conf is [global] workgroup = mydomain netbios name = PROXY_LINUX security = DOMAIN password server = 10.1.1.51 idmap uid = 1-2 idmap gid = 1-2 winbind use default domain = Yes Hope your help thank you champaka Srinath __ Do you Yahoo!? Read only the mail you want - Yahoo! Mail SpamGuard. http://promotions.yahoo.com/new_mail -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba = Esta mensagem pode conter informacao confidencial e/ou privilegiada. Se voce nao for o destinatario ou a pessoa autorizada a receber esta mensagem, nao devera utilizar, copiar, alterar, divulgar a informacao nela contida ou tomar qualquer acao baseada nessas informacoes. Se voce recebeu esta mensagem por engano, por favor avise imediatamente o remetente, respondendo o e-mail e em seguida apague-o. Agradecemos sua cooperacao. This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, change, take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. = -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Multiple Interfaces
Hi, I have a problem. I have Samba configured on a Linux system with multiple interfaces. 111.112.113.4/24 and 10.10.10.254/24, on the 111.112.113.0/24 network everyone can access the shares with no problems, on the 10.10.10.0/24 network however I can only open one smb connection to the server at a time. When I try to make a second connection from a different machine it drops both connections, the 111.112.113.0/24 network however is unaffected. The 111.112.113.0/24 network runs only Win 2K machines, while the 10.10.10.0/24 network includes a couple of NT servers. Below is a dump by testparm of my config. I've RTFMed and think I'm just missing something. Any ideas? BTW the 111.112.113.0/24 network is only used internally, the person who originally configured the network didn't know about Public and Private ranges. Thanks Chris Load smb config files from /etc/samba/smb.conf Processing section [hotshare] Loaded services file OK. Server role: ROLE_STANDALONE Press enter to see a dump of your service definitions # Global parameters [global] workgroup = COMMON netbios name = SHARE server string = Common Share Server interfaces = 111.112.113.4/24, 10.10.10.254/24 security = SHARE log file = /var/log/samba.log max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 load printers = No os level = 33 local master = No domain master = No dns proxy = No remote announce = 111.112.113.255 10.10.10.255 hosts allow = 10.10.10., 111.112.113., 127. [hotshare] path = /home/samba read only = No guest ok = Yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: RES: [Samba] ntlm_auth help
On Wed, 2004-07-07 at 22:43, Estevam Henrique Carvalho wrote: Isn't possible to test the ntlm_auth with the ntlmssp protocol in a command line mode, you must use a browser able to handle ntlm because only this sort of browser send the appropriate ntlm challenges, try IE. Actually, it is now possible. ntlm_auth --helper-protocol=ntlmssp-client-1 --username=foo --domain=bar --password=secret If you type 'YR', it will reply, and from then you can copy paste the output from that program to ntlm_auth --helper-protocol=squid-2.5-ntlmssp (Likewise, copy the replies back). This provides a very nice way to test the system, without needing squid and MSIE. Andrew Bartlett signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] IE - FF
On Wed, 2004-07-07 at 22:34, Shawn Henderson wrote: I have a samba server acting as a domain controller. Is there a way that I can Have a script that delete the shortcuts on the desktop,quicklaunch and startmenu for Internet Exploder. At the same time installing Mozilla Fire Fox. Maybe like a little vbscript or something that gets ran from the server when they login. If they are a roaming profiles, then much of these are files in the Profile. Installing Firefox could be as simple as adding a link on the desktop. It's probably not a complete solution, but it's a start. I'll be interested to hear your results, as I push Firefox out to my network. Andrew Bartlett signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Windows 2K outperform Linux/Samba very much?
Here, I have seen sub 700MHz P3 systems with IDE disks blow away a dual 900MHz 2K system with SCSI drives in every manner. I would recommend trying reiserfs, it is superior at handling small files. This is what we are using. On Wed, 2004-07-07 at 04:31, Jacky Kim wrote: Hi, all: I want to check small files' property(such as date, path, and so on) frequently. The files are stored in netwrok driver and their sizes vary from 2KB to 5KB. I found that Windows 2K outperform Linux/Samba very much after I campared the bench results. I am very confused about it and who can explain it? The computers' configurations are as follows: 1. PC Client It runs the follow VB program to compute the time when check files' property Operation System: Windows 2000 professional // ... Set objFSO = CreateObject(Scripting.FileSystemObject) thistime = thisnow If objFSO.FileExists(fn) Then totle = totle Check file time CStr(thisnow - thistime) + ms + vbCrLf thistime = thisnow Set objFile = objFSO.GetFile(fn) totle = totle Get object time CStr(thisnow - thistime) + ms + vbCrLf thistime = thisnow temp = DateValue(CStr(objFile.DateLastModified)) totle = totle Get date time CStr(thisnow - thistime) + ms + vbCrLf End If 2. Linux PC Server: It provide Linux/Samba shared directory for the client (1) Operation System kernel = 2.6.6 file system = xfs nic = intel pro 100 Samba 2.2.8a (I have tried samba 3.0.4, and the result is likely) (2) smb.conf [global] encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=4096 SO_SNDBUF=4096 max xmit = 4096 read raw = No wide links = No [pub] path = /pub guest ok = no write list = test create mode = 0664 directory mode = 0775 3. Windows PC Server: It provide Windows shared directory for the client Operation System: Windows 2000 professional 4. Bench results Windows Linux/Samba CHECK OBJECT DATE CHECK OBJECT DATE - -- - -- 760 10 120 10 0 203 750 10 80 20 0 363 780 10 50 20 761 632 750 10 50 10 0 173 800 0 10 40 0 711 90 0 140 240 212 871 60 40 90 240 212 821 90 0 50 210 30 162 60 50 10 20 220 150 10 30 20 30 30 160 0 50 80 741 50 412 10 40 110 781 10 412 20 0 70 20 781 381 10 0 70 10 791 81 20 20 0 50 21 691 NOTE: the unit is ms. Best Regards! Jacky Kim . -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: AW: [Samba] Wishlist for v4.0 Integration / Setup of samba.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Arno Seidel wrote: | Hi, | | and where can i find some rudimentary documentation for it?? There is none currently nor would I recommend getting used its current implmentation as i can pretty much guarantee that it will change before release. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA6/0XIR7qMdg1EfYRAia6AKDVapQBc08xfYZ21AnpMpS1NPPfuQCglrXW ID85Yg0ZYaFeq6Yq2op/2wc= =d+Fp -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Windows 2K outperform Linux/Samba very much?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jacky Kim wrote: | Sorry, I miss the follow informations: | 1. There are 100,000 files in shared directory. This is currently a bad test case for Samba but we are working on a solution to address it. The problem is that smbd must perform case insensitive file name lookups on a case sensitive file system. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA6/1oIR7qMdg1EfYRAvFkAJ9o37Vxjsj8EylqS9NKZHXvhiW21gCfd6Gs 1ieJ1+GI42ccTmTF3S5MRKs= =mLAs -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Wishlist for v4.0 Integration / Setup of samba.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim C. wrote: | Wrapper scripts are a good idea. Would be really good for transitioning | over to samba from 'doze. Could even be written as a separate package. | | | I don't like the windows's net command, nor the route, nor the tracert | | (come on, who wrote these?), nor the ping (yes, not even the ping). If | | somebody wants a windows compatible net command, write a wrap script. | | (please, read on, I just don't like the feeling of using the same thing | | on windows and linux). | | for example make everything integrated into the net command. | | | | Improve the swat wizard, sounds cool. Altough I only used it once, I | | think that any newbe would be thankful. | | Another good idea for transitioners. | | | There should also be a way to configure ldap and samba to work | | together, this manual config-shit is useless. | | Well a SWAT style GUI configurator would be nice. | Probably best to work it into something like GQ | though rather than Samba, though. More things that are already on the TODO list. Just needing time, resources, and people at the moment. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA6/3hIR7qMdg1EfYRAv8cAKDDlhFkEG2LnuR0aCu5ZVJMs0JkZACeLCBE EgoGwNLm0QCx8pxSO0if04k= =UzdC -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Domains: Pros and Cons?
I have Samba running without a PDC and I have some questions about the advantages for implementing one with Samba vs. the problems and disadvantages. Perhaps some kind souls can help me determine whether I should do this or not. We have three offices connected by a Checkpoint VPN, plus people on the road using their SecureClient tool. We want everyone to be able to get to all the Samba servers from wherever they are. Here's a sample topology: MtLaurel (NJ,US) 172.25.0.0/16 corp -- a samba server running on our large Sun file server print -- a samba server running on a linux box with CUPS for printing Dallas (TX,US) 172.27.0.0/16 derby -- a samba server on Sun for local storage and printing Sophia (-Antipolis,FR) 172.26.0.0/16 tank -- a samba server on Sun for local storage and printing Right now each location is running in its own workgroup, no PDCs. If we go with a PDC I see the following advantages and disadvantages: 1) Single sign-on, consistent login -- advantage It would all be backed by our current LDAP SAM. 2) Anyone can log into any PC -- disadvantage People have become used to not worrying about security on their own PCs as nobody else could login. Once domained anyone can login. 3) Complexity I am concerned about keeping this whole house of cards working with a PDC in MtLaurel and slave PDCs in the other locations. Our people travel a lot and they need to use resources while in non-home offices. How do they join the MtLaurel PDC and then move to the Sophia one? How do they use one inside the corporate network from outside? 4) Password change -- this is the thing driving (forcing) the issue. With a PDC, the user logs in at the windows client with the same password as is used for all the other network resources. It can be setup to expire passwords and the user can change their password from the login dialog (or with ctl-alt-del...) and it will take effect for everything. Is there any way to get just this capability without all the issues associated with a PDC? -- Gary Algier, WB2FWZ gaa at ulticom.com +1 856 787 2758 Ulticom Inc., 1020 Briggs Rd, Mt. Laurel, NJ 08054 Fax:+1 856 866 2033 Nielsen's First Law of Computer Manuals: People don't read documentation voluntarily. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 2.2.8.a for Solaris
Majid: On Solaris boxes the Samba package typically installs in /usr/local/samba. The configuration file (smb.conf) is located in /usr/local/samba/lib. Once you modify the configuration don't forget to restart the samba processes. My init script has a restart option, so, /etc/init.d/samba.server restart does this job for me. Good Luck! dac - Dean A. Cardoza Lead Application Programmer/Analyst [EMAIL PROTECTED] Office: (214) 977-8196 Cell: (469) 360-2118 RIM:[EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Majid Chavoshi Sent: Tuesday, July 06, 2004 4:54 PM To: '[EMAIL PROTECTED]' Cc: Majid Chavoshi Subject:[Samba] Samba 2.2.8.a for Solaris Importance: High Hi, I just downloaded and installed samba2.2.8.a on a sun4u sparc box running Solaris8. The installation process completed w/o errors and I can now confirm that by $pkginfo -l samba. I can even start and stop samba by /etc/rc3.d/S99samba.server start and see that smbd and nmbd processes are running. However, I can not find the configure file in the source directory to execute for initial configuration. For that matter I can not even find source directory. I would greatly appreciate a reply with some instructions. Regards, Majid Chavoshi Unix System Administrator Belkin Corporation Information Services 310-604-2098 Office 310-604-2022 Fax 310-877-1428 Mobile [EMAIL PROTECTED] www.belkin.com Confidential This e-mail and any files transmitted with it are the property of Belkin Corporation and/or its affiliates, are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not one of the named recipients or otherwise have reason to believe that you have received this e-mail in error, please notify the sender and delete this message immediately from your computer. Any other use, retention, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domains: Pros and Cons?
2) Anyone can log into any PC -- disadvantage People have become used to not worrying about security on their own PCs as nobody else could login. Once domained anyone can login. There is an option in Samba 3 that is designed to work like the host attribute in LDAP. Basically, you list the machine that people can log in on. 3) Complexity I am concerned about keeping this whole house of cards working with a PDC in MtLaurel and slave PDCs in the other locations. Our people travel a lot and they need to use resources while in non-home offices. How do they join the MtLaurel PDC and then move to the Sophia one? How do they use one inside the corporate network from outside? We're currently planning on solving this issue with only one domain across our sites. The plan is to set up DC boxes in each site, all connected to the same ldap data store, also replicated at each site naturally. When a laptop is off the network, you still are allowed to log in with cached (I believe that's the right term) credentials as long as the user has logged in on that machine before. However, you don't have access to the networked resources until such time as you connect with your vpn naturally. -- Paul Gienger Office:701-281-1884 Applied Engineering Inc. Cell: 701-306-6254 Information Systems Consultant Fax: 701-281-1322 URL: www.ae-solutions.commailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: Wishlist for v4.0 Integration / Setup of samba.
I'm finding that most linux PDC users use LDAP for authentication. Stupid question why LDAP? I total agree with improving the GUI but still nothing beats CLI. Markus Benkovszki samba3.0.2 PDC -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 07, 2004 9:43 AM To: Jim C. Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Re: Wishlist for v4.0 Integration / Setup of samba. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim C. wrote: | Wrapper scripts are a good idea. Would be really good for transitioning | over to samba from 'doze. Could even be written as a separate package. | | | I don't like the windows's net command, nor the route, nor the tracert | | (come on, who wrote these?), nor the ping (yes, not even the ping). If | | somebody wants a windows compatible net command, write a wrap script. | | (please, read on, I just don't like the feeling of using the same thing | | on windows and linux). | | for example make everything integrated into the net command. | | | | Improve the swat wizard, sounds cool. Altough I only used it once, I | | think that any newbe would be thankful. | | Another good idea for transitioners. | | | There should also be a way to configure ldap and samba to work | | together, this manual config-shit is useless. | | Well a SWAT style GUI configurator would be nice. | Probably best to work it into something like GQ | though rather than Samba, though. More things that are already on the TODO list. Just needing time, resources, and people at the moment. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA6/3hIR7qMdg1EfYRAv8cAKDDlhFkEG2LnuR0aCu5ZVJMs0JkZACeLCBE EgoGwNLm0QCx8pxSO0if04k= =UzdC -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] The Solution - Re: Q about net groupmap examples on samba.org
Finally, the solution and yet more questions. First, John was kind enough to respond to my Q's, so I will post his answers as I begin: 1) Where does the net groupmap command store these mappings? The Domain Admins is working for example, but I sure don't see where the settings were stored on disk. In the tdb file called group_mapping.tdb. On SuSE Linux this will be in /var/lib/samba, on Red Hat Linux it can be in /var/cache/samba on some systems. The default Samba-Team location is in /usr/local/samba/var/locks. 2) Running net user pianoman /domain on the Win2K client side shows the Domain Group membership, but not the local group. Since DOMAINNAME\Domain Admins is made a member of the localgroup administrators I have the admin permissions, but I did not get it via the ntadmins mapping I did above. Did I miss something in this example that was the key to making it work? How do you expect this to function? How do you believe this works with MS Windows NT4? First, I guess I should have mentioned I was running Debian unstable with a 2.6.(5?) kernel and Samba 3.0.4. RaiserFS for everything other than /boot which is ext2. So, yea, I can look for a tbd file now - no more black hole of where that data is going. On the second Q, I'll turn it around and ask yet another question - what purpose do those mappings to local groups serve in the example? As I will outline soon, they were what was breaking mappings in my environment. I've lived a sheltered life, first domains were LAN Server, then WarpServer / WarpServer for eBusines. OS/2 clients, then NT4 and now Win2K. IBM had a great client that supported dropping some mapping rules in the registry (for Windows clients of course) and would map domain group membership to localgroup security upon login. It would even undo additional localgroups you should not be a member of. Then life with NetWare for 6 years. The Windows support there was to have local accounts - NetWare does not try to be a PDC / M$ style. So, this is the very first time I have ever tried to use the M$ client for File/Print domain style, scripting, yadda yadda... So, as a req to all involved in the Samba project, please try to not assume extensive NT4 / PDC expirence. You can have people who are very talented and expirenced dabbling with Samba that avoided NT4 / PDC entirely and are cutting our teath on that world via Samba. Anyway, so the solution to making this work, and yet more questions thrown in as a go along, and sample config files at the end: First, add some group names to /etc/group domadmin:x:2000:pianoman domusers:x:2001: domguest:x:2002: ntadmins:x:2010:pianoman ntpwrusr:x:2011: ntusers:x:2012: ntguests:x:2013: dom* will be used to assign domain permissions, nt* will be used to assign local windows permissions. User names coma separated in the last field I've been told by my Linux engineer. Next, use the net command to 1) map domain groups to these Linux dom* groups and 2) create / map domain groups for the Linux nt* groups. #!/bin/bash # # initGrps.sh # # Map Windows Domain Groups to UNIX groups net groupmap modify ntgroup=Domain Admins unixgroup=domadmin net groupmap modify ntgroup=Domain Users unixgroup=domusers net groupmap modify ntgroup=Domain Guests unixgroup=domguest # Map Windows NT machine local groups to local UNIX groups #net groupmap modify ntgroup=Administrators unixgroup=ntadmins #net groupmap modify ntgroup=Power Usersunixgroup=ntpwrusr #net groupmap modify ntgroup=Users unixgroup=ntusers #net groupmap modify ntgroup=Guests unixgroup=ntguests # Create some Domain Groups to administer local security net groupmap add ntgroup=ntadmins unixgroup=ntadmins type=d net groupmap add ntgroup=ntpwrusr unixgroup=ntpwrusr type=d net groupmap add ntgroup=ntusers unixgroup=ntusers type=d net groupmap add ntgroup=ntguests unixgroup=ntguests type=d Note I have left in but commented out ones from John's example, more about those coming up... This also assumes a smbpasswd back end, and that I have added the pianoman account to that. That process is documented enough other places so I will not here. I guess it also assumes smbd/nmbd are up in PDC mode, but I am not going to post my smb.conf until the end as I said, so that is assumed to at this point. Joining the domain. I am using the netdom command which matches Win2K SP4 as that is the SP I am running on the client side. I disable browser and server services (set to manual via registry hack - manual is critical) but netdom needs the server task running, so net start server to make it happy. Also, a domain admin ID is needed for netdom to do its job (same via the GUI but the server service is not needed via GUI) NETDOM.EXE JOIN 'ComputerName' /Domain:'JOINWORKGROUP' /UserD:PianoMan /PasswordD:thepassword Where ComputerName and JoinWorkGroup have been variablized in my Rexx program. bing bing, RC=0 and you are in the domain... oops, not quite so fast there, first time won't be a rc=0
[Samba] Bug 975
This is a REALLY simple bug to fix, but I'm not sure of the best way to go about it or I would have written a patch already. The basic problem is that throughout the code, $(CC) is run with one of the arguments being $(DYNEXP). This is fine. However, in two places (one at 965 of Makefile.in where libsmbclient gets linked, and one at 1201 where pam_smbpass gets linked), $(DYNEXP) is used as an argument to $(SHLD) which explodes on HP-UX, because the value of $(DYNEXP) is -Wl,-E (and -Wl means pass to linker, which doesn't work if you are giving this as an argument directly to the linker). Like I said, can't think of the best way to fix this. One way seems like an awful lot of work (making $(DYNEXP) -E and placing -Wl before it anytime it is needed) but seems the most correct. However I have no idea what that would do to the rest of the operating systems. Another way would be to have a different $(DYNEXP) just for the linker. Another would be to remove it altogether as things seem to build either way. I really don't know, but I do know it's a very irritating bug and very easy to fix. Thanks! _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Wishlist for v4.0 Integration / Setup of samba.
Markus Benkovski wrote: I'm finding that most linux PDC users use LDAP for authentication. Stupid question why LDAP? Is your question why are people using ldap? I'll go under the assumption that it is. If you have 2+ servers that need to stay in sync, it helps (a lot) to have a network directory structure. Having used a couple alternatives, LDAP is more full featured than what I have used, easier to understand, and is pretty much 'standard' fare on current linux distros to at least be available without having to build the whole thing yourself. Combine that with many sources of documentation and several methods for editing easily (gq, phpLdapAdmin, perl::LDAP, ad nauseum) and it's the choice du jour. I total agree with improving the GUI but still nothing beats CLI. I'll not jump into that flamewar-bait, at least not without my asbestos underpants, and they're at home :-D Markus Benkovszki samba3.0.2 PDC -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 07, 2004 9:43 AM To: Jim C. Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Re: Wishlist for v4.0 Integration / Setup of samba. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim C. wrote: | Wrapper scripts are a good idea. Would be really good for transitioning | over to samba from 'doze. Could even be written as a separate package. | | | I don't like the windows's net command, nor the route, nor the tracert | | (come on, who wrote these?), nor the ping (yes, not even the ping). If | | somebody wants a windows compatible net command, write a wrap script. | | (please, read on, I just don't like the feeling of using the same thing | | on windows and linux). | | for example make everything integrated into the net command. | | | | Improve the swat wizard, sounds cool. Altough I only used it once, I | | think that any newbe would be thankful. | | Another good idea for transitioners. | | | There should also be a way to configure ldap and samba to work | | together, this manual config-shit is useless. | | Well a SWAT style GUI configurator would be nice. | Probably best to work it into something like GQ | though rather than Samba, though. More things that are already on the TODO list. Just needing time, resources, and people at the moment. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA6/3hIR7qMdg1EfYRAv8cAKDDlhFkEG2LnuR0aCu5ZVJMs0JkZACeLCBE EgoGwNLm0QCx8pxSO0if04k= =UzdC -END PGP SIGNATURE- -- Paul Gienger Office:701-281-1884 Applied Engineering Inc. Cell: 701-306-6254 Information Systems Consultant Fax: 701-281-1322 URL: www.ae-solutions.commailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Netlogon
It can be this simple as well: RunDll32.EXE printui.dll,PrintUIEntry /in /n \\host\printer RunDll32.EXE printui.dll,PrintUIEntry /y /n \\host\printer ...the first line being install printer and the second set default. _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Wed, 7 Jul 2004, Mark Maas wrote: James Coggan wrote: Is it possible to use some kind of netlogon script to add a printer? net use \\server\printert ?? I would suggest a complete solution that you can also use to add drives, set registry settings. A way so you can do anything you wish in the future. Kixtart would be the best thing to use in my opinion. http://www.kixtart.org/ We use it in a environment for +600 people, working with Win98, 2K and XP. Just take a look! Later, Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: Wishlist for v4.0 Integration / Setup of samba.
I'm finding that most linux PDC users use LDAP for authentication. I don't know if that is true, users of the tdb-sam probably ask a lot less questions. question why LDAP? 1) It also solves alot of other problems 2) make integration of disparate application easier 3) Redundancy / Replication 4) Flexbility (partitioning, proxies, rewritting, etc...) 5) Scalability etc... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Help with long PC names and AIX
OK I am new to Samba. I need a solution for a problem of long PC names and short AIX names. I cannot get a windows 98 PC connected to an AIX Samba server, I think because the PC name is too long. AIX allows only a maximum of 8 characters in a user name. My PC name is ghostraider and I cannot create a user named ghostraider in the AIX system. So when I try to connect, I get a Samba error telling me user ghostraider not found. How do I work around this issue? Thanks !!! Larry S. Singleton [EMAIL PROTECTED] Systems Analyst E-Mail Administrator/Webmaster/Guru in Training Thornwood Furniture Mfg., Inc. Remember.The best team does NOT always win PLEASE WEAR YOUR SEATBELT AND BUCKLE YOUR KIDS IN EVERYTIME disclaimer: Views expressed in this signature are the PROUD and sole responsibility of the sender and not his employer. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Help with long PC names and AIX
[EMAIL PROTECTED] wrote: OK I am new to Samba. I need a solution for a problem of long PC names and short AIX names. I cannot get a windows 98 PC connected to an AIX Samba server, I think because the PC name is too long. AIX allows only a maximum of 8 characters in a user name. My PC name is ghostraider and I cannot create a user named ghostraider in the AIX system. So when I try to connect, I get a Samba error telling me user ghostraider not found. How do I work around this issue? This is a 'feature' of AIX from what I can gather from a quick search of the web, and there doesn't seem to be any workaround for it. You may have better luck asking an AIX group about that particular issue. It actually appears that UNIX in general used to have an 8 char user limit. The quick solution is to shorten your pc names of course ;) Thanks !!! Larry S. Singleton [EMAIL PROTECTED] Systems Analyst E-Mail Administrator/Webmaster/Guru in Training Thornwood Furniture Mfg., Inc. Remember.The best team does NOT always win PLEASE WEAR YOUR SEATBELT AND BUCKLE YOUR KIDS IN EVERYTIME disclaimer: Views expressed in this signature are the PROUD and sole responsibility of the sender and not his employer. -- Paul Gienger Office:701-281-1884 Applied Engineering Inc. Cell: 701-306-6254 Information Systems Consultant Fax: 701-281-1322 URL: www.ae-solutions.commailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] attempting login with hostname not username
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Net rpc user add and the -F flag.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, all ! I'm trying to add users to my NT domain from my samba servers (This to create all my accounts with only a single script, I do not want to create them on the PDC, then create their folders on the samba file server with another...) I managed to create account with net rpc user add, then put them in the right domain group with net groupmember, but what about the other parameters (User Z drive, profile path, etc...) ? And I tried to give the users a password with the net rpc user add user password, but it doaesn't work ! I think the -F flag would help, but it's documented nowhere ! Here is the only mail I found related to my problem (Thanks to Google), but it never had any answer... Can you help ? Joe Mondloch Tue Sep 9 20:41:22 GMT 2003 I'm not sure if this functionality fully exists yet or not... I would like to be able to create user accounts on a Windows 2000 machine from my Linux host via Samba. I also need to be able to assign these user accounts to particular groups. I've tried: net rpc user ADD foo -S W2K_SERVER -U Administrator This seems to create the user, but the account is disabled and is not a member of any groups. The 'net rpc user' command takes a number of other options according to the help, such as '-F user flags'. Unfortunately, I have not been able to find any documentation about what those flags are. Thanks for any help, Joe - -- ,, (° Nicolas Costes /|\ IUT de La Roche / Yon ( ^ ) Clé publique: http://www.keyserver.net/ ^ ^ http://www.gnu.org/philosophy/can-you-trust.fr.html -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFA7BVqNc2aXy7LuOgRAhbKAJ9egqR0sPxfI4zIBa2Xdd4RzI99QwCfdVod nvSUMzmjueG3Wud8Fqjy2tU= =sven -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Wishlist for v4.0 Integration / Setup of samba.
I can't speak for others, but I use my Samba LDAP database to authenticate users on Linux and OS X as well. It enables me to use a unified login for pretty much any system. Jeremy Thornhill Markus Benkovski wrote: I'm finding that most linux PDC users use LDAP for authentication. Stupid question why LDAP? I total agree with improving the GUI but still nothing beats CLI. Markus Benkovszki samba3.0.2 PDC -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 07, 2004 9:43 AM To: Jim C. Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Re: Wishlist for v4.0 Integration / Setup of samba. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim C. wrote: | Wrapper scripts are a good idea. Would be really good for transitioning | over to samba from 'doze. Could even be written as a separate package. | | | I don't like the windows's net command, nor the route, nor the tracert | | (come on, who wrote these?), nor the ping (yes, not even the ping). If | | somebody wants a windows compatible net command, write a wrap script. | | (please, read on, I just don't like the feeling of using the same thing | | on windows and linux). | | for example make everything integrated into the net command. | | | | Improve the swat wizard, sounds cool. Altough I only used it once, I | | think that any newbe would be thankful. | | Another good idea for transitioners. | | | There should also be a way to configure ldap and samba to work | | together, this manual config-shit is useless. | | Well a SWAT style GUI configurator would be nice. | Probably best to work it into something like GQ | though rather than Samba, though. More things that are already on the TODO list. Just needing time, resources, and people at the moment. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA6/3hIR7qMdg1EfYRAv8cAKDDlhFkEG2LnuR0aCu5ZVJMs0JkZACeLCBE EgoGwNLm0QCx8pxSO0if04k= =UzdC -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba printers print$
I have installed samba on a linux OS suse 8.1. I have a printer installed locally on the machine and it prints ok from linux. I can see the printer in SWAT. The share print$ path = /srv/printers guest ok = yes browsable = yes read only = yes write list = @ntadmin,mm On the linux machine, I have the following path:/srv/printers The following folders are located at this path W32MIPS/ W32PPC/ W32X86/ WIN40/ From the samba manual I am using SAMBA Essentials it explains to upload the drivers by doing the following: -In the printers folder on the samba server, select server properties -Now Click the drivers tab and click the add button. There is no drivers tab or any add button. Can anyone point me in the right direction for using the samba server as a print server! The contents of this email may be confidential or protected from disclosure to other than intended recipients.If it has reached you by mistake, we apologise and request you to advise us by emailing [EMAIL PROTECTED] Thank you. BYTRON cannot accept responsibility for any loss or damage arising from the use of this email or attachments. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.708 / Virus Database: 464 - Release Date: 6/18/04 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Users can't change their passwords
Hi, I have a smoothly running Samba PDC. Just one thing that isn't working: when users try to change their password in their windows 2000 machines, they get an error saying: The domain NETUAL is not available, but it is !!! I even set 777 permissions on /etc/shadow (shame on me) just to test, but nothing. Curious thing is that i'm running a RH package 3.0.2 If i compile 3.0.4, they can change their passwors. Any help would be appreciated. Warm Regards, Mário Gamito -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Point and Print
I recently posted regarding problems configuring Samba. These have all been fixed but I am now struggling with the point and print facility. I have attempted to upload the drivers from Windows XP workstations but this seems to do nothing. So plan B was to manually copy the files to the appropriate print$ share folder, so far so good. The problem I now have is that the rpcclient utility simply doesn't work. Without a debug level set I either get a usage prompt or a DOS code of 0x003 If I set debug to level 3 it produces the following error: added interface ip=10.0.0.3 bcast=10.0.0.255 nmask=255.255.255.0 Password: Connecting to host=localhost Connecting to 127.0.0.1 at port 445 Doing spnego session setup (blob length=58) got OID=1 3 6 1 4 1 311 2 2 10 got principal=NONE Got challenge flags: Got NTLMSSP neg_flags=0x60890215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60080215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60080215 lsa_io_sec_qos: length c does not match size 8 I have Googled with this error and noticed a number of posts but so far not found an answer The printer concerned is an HP 2300 PCL6 which has a whole string of file dependencies (48 files in total). The result being that I've had a lot of trouble with quoting errors (Unix skill still abit rusty) but I seem to have got to the bottom of that problem. N.B. System is Suse 9.1 running Samba 3.0.4 - (update downloaded this morning to see if it would solve the problem). Printing is via Cups - not sure of the version. I would greatly appreciate any help with this problem as it is driving me mad!!! Regards, Chris Christopher Moss Murray McIntosh O'Brien Wellesley House 204 London Road Waterlooville PO7 7AN 023 9223 1006 --- Disclaimer Privileged or confidential information may be contained in this message. If you are not the addressee of this message please notify the sender by return and delete it, and you may not use, copy, disclose or rely on the information contained in it. Internet e-mail may be susceptible to data corruption, interception and unauthorised amendment for which Murray McIntosh O'Brien does not accept liability. Likewise whilst we have taken reasonable precautions to ensure that this e-mail and any attachments have been swept for viruses, Murray McIntosh O'Brien does not accept liability for any losses caused as a result of viruses. Statements in this message that do not relate to the business of Murray McIntosh O'Brien are neither given nor endorsed by it or the Directors of Murray McIntosh O'Brien. A list of the Directors of Murray McIntosh O'Brien is available for inspection at our offices. -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] keep long printer name
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 walters wrote: | hi everybody, | I get a problem on keeping long printer name in samba. | We have several printer on NT4. I want to migrate all of | them to samba. In NT4, the printer name shows as HP LaserJet 5000 | PCL6 on windows2000 and windows XP client. How can I get that | shown on Samba exactly like that? I am using LPRng and samba 3.04. | I can use HP5000PCL in samba share and it shows on printer share. This will be fixed in 3.0.5. It's already working in the current svn 3.0 tree. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA7CSRIR7qMdg1EfYRAgrSAJwKlDI7j98gHiQaCKkaHwZpQ0huLwCgwGVu wZJkMYoyZSz10dhZxv+5KB0= =jZIS -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Users can't change their passwords
Hi Markus, Nothing at all, except that if i compile 3.0.4, the thing works. Regards, Mário Gamito On Wed, 2004-07-07 at 17:27, Markus Benkovski wrote: Same situation here. Let me know what you find out please. Markus Benkovszki -Original Message- From: Mario Gamito [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 07, 2004 11:50 AM To: [EMAIL PROTECTED] Subject: [Samba] Users can't change their passwords Hi, I have a smoothly running Samba PDC. Just one thing that isn't working: when users try to change their password in their windows 2000 machines, they get an error saying: The domain NETUAL is not available, but it is !!! I even set 777 permissions on /etc/shadow (shame on me) just to test, but nothing. Curious thing is that i'm running a RH package 3.0.2 If i compile 3.0.4, they can change their passwors. Any help would be appreciated. Warm Regards, Mário Gamito -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Users can't change their passwords
Mario Gamito wrote: Hi, I have a smoothly running Samba PDC. Just one thing that isn't working: when users try to change their password in their windows 2000 machines, they get an error saying: The domain NETUAL is not available, but it is !!! I even set 777 permissions on /etc/shadow (shame on me) just to test, but nothing. Curious thing is that i'm running a RH package 3.0.2 If i compile 3.0.4, they can change their passwors. Any help would be appreciated. This stinks of the 'MS update breaks password changing' issue that was fixed somewhere in the versions you are testing, that is it was broken in 3.0.2 and fixed in either .3 or .4. Since you know a newer version works, why not just go with it? Given the bug fixes and such there is really no good reason to hang on to .2. I believe there are instructions for building a rpm from the source distribution if you are trying to keep your rpm based system sane (always a good idea). -- Paul Gienger Office:701-281-1884 Applied Engineering Inc. Cell: 701-306-6254 Information Systems Consultant Fax: 701-281-1322 URL: www.ae-solutions.commailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Account desc mysql backend
Collen Blijenberg MLHJ wrote: Hiya Jelmer, Well, when i make an account,from a win box (i think from linux also) and fill in username, Fullname, and description.. the description field is left blank.. (in the sql base) my smb.conf, is configured to just query the sql server. so no extra field options... i'm not sure, if that is the only field that is kept blank/not used. Can you please send me the relevant parts of your smb.conf ? Cheers, Jelmer -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Windows 2K outperform Linux/Samba very much?
On Wed, Jul 07, 2004 at 05:07:17PM +0800, Jacky Kim wrote: Sorry, I miss the follow informations: 1. There are 100,000 files in shared directory. That's the problem. Because Samba has to present a case insensitive view of a case-sensitive filesystem we have to scan the entire directory to ensure a file doesn't exist. The answer to the why is Samba slow question in this case is don't do that (put 100,000 files in a directory). Jeremy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SAMBA and NFS
Can samba connect to an NFS share and then re-export that share so my windows XP users can connect to it? Basically I have a NFS share that all of my windows XP users need read-only access to. The goal of this project is to replace an old MS Gateway Services for Novell server (using IPX) with something that can do the same thing but over IP. I am pretty sure Novell and AD can share files using Native File Access, but that would require the Novell admins to get CIFS setup on the Novell side. The Novell server we are using has NFS already setup and getting that much setup was like pulling teeth. Thanks, BOFH1234 _ Is your PC infected? Get a FREE online computer virus scan from McAfee® Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Notification
* eManager Notification ** Recipient, Content filter has detected a sensitive e-mail. Destination mailbox(es): [EMAIL PROTECTED] *** End of message *** Received: from 208.8.92.60 by jupiter.INSIDEAI.COM (InterScan E-Mail VirusWall NT); Wed, 07 Jul 2004 13:24:12 -0400 Received: from lists.samba.org ([66.70.73.150]) by viruswall.ai-logix.com (Post.Office MTA v3.5.3 release 223 ID# 0-0U10L2S100V35) with ESMTP id com for [EMAIL PROTECTED]; Wed, 7 Jul 2004 13:24:12 -0400 Received: from dp.samba.org (localhost [127.0.0.1]) by lists.samba.org (Postfix) with ESMTP id 0AF29163AA7 for [EMAIL PROTECTED]; Wed, 7 Jul 2004 17:24:12 + (GMT) X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: from hotmail.com (bay14-f11.bay14.hotmail.com [64.4.49.11]) by lists.samba.org (Postfix) with ESMTP id 66BE016383C for [EMAIL PROTECTED]; Wed, 7 Jul 2004 17:23:38 + (GMT) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Wed, 7 Jul 2004 10:23:37 -0700 Received: from 205.215.123.61 by by14fd.bay14.hotmail.msn.com with HTTP; Wed, 07 Jul 2004 17:23:37 GMT X-Originating-IP: [205.215.123.61] X-Originating-Email: [EMAIL PROTECTED] X-Sender: [EMAIL PROTECTED] From: bastard operater [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Wed, 07 Jul 2004 17:23:37 + Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: [EMAIL PROTECTED] X-OriginalArrivalTime: 07 Jul 2004 17:23:37.0718 (UTC) FILETIME=[23AC8160:01C46447] X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on dp.samba.org X-Spam-Status: No, hits=0.6 required=3.8 tests=BAYES_30,FROM_ENDS_IN_NUMS, RCVD_IN_BLARS_RBL autolearn=no version=2.63 X-Spam-Level: Subject: [Samba] SAMBA and NFS X-BeenThere: [EMAIL PROTECTED] X-Mailman-Version: 2.1.4 Precedence: list List-Id: General questions regarding Samba samba.lists.samba.org List-Unsubscribe: http://lists.samba.org/mailman/listinfo/samba, mailto:[EMAIL PROTECTED] List-Archive: http://lists.samba.org/archive/samba List-Post: mailto:[EMAIL PROTECTED] List-Help: mailto:[EMAIL PROTECTED] List-Subscribe: http://lists.samba.org/mailman/listinfo/samba, mailto:[EMAIL PROTECTED] Sender: [EMAIL PROTECTED] Errors-To: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Notification
* eManager Notification ** Recipient, Content filter has detected a sensitive e-mail. Destination mailbox(es): [EMAIL PROTECTED] *** End of message *** Received: from 208.8.92.60 by jupiter.INSIDEAI.COM (InterScan E-Mail VirusWall NT); Wed, 07 Jul 2004 13:24:20 -0400 Received: from lists.samba.org ([66.70.73.150]) by viruswall.ai-logix.com (Post.Office MTA v3.5.3 release 223 ID# 0-0U10L2S100V35) with ESMTP id com for [EMAIL PROTECTED]; Wed, 7 Jul 2004 13:24:19 -0400 Received: from dp.samba.org (localhost [127.0.0.1]) by lists.samba.org (Postfix) with ESMTP id CCA80163E98 for [EMAIL PROTECTED]; Wed, 7 Jul 2004 17:24:19 + (GMT) X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: from hotmail.com (bay14-f11.bay14.hotmail.com [64.4.49.11]) by lists.samba.org (Postfix) with ESMTP id 66BE016383C for [EMAIL PROTECTED]; Wed, 7 Jul 2004 17:23:38 + (GMT) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Wed, 7 Jul 2004 10:23:37 -0700 Received: from 205.215.123.61 by by14fd.bay14.hotmail.msn.com with HTTP; Wed, 07 Jul 2004 17:23:37 GMT X-Originating-IP: [205.215.123.61] X-Originating-Email: [EMAIL PROTECTED] X-Sender: [EMAIL PROTECTED] From: bastard operater [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Wed, 07 Jul 2004 17:23:37 + Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: [EMAIL PROTECTED] X-OriginalArrivalTime: 07 Jul 2004 17:23:37.0718 (UTC) FILETIME=[23AC8160:01C46447] X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on dp.samba.org X-Spam-Status: No, hits=0.6 required=3.8 tests=BAYES_30,FROM_ENDS_IN_NUMS, RCVD_IN_BLARS_RBL autolearn=no version=2.63 X-Spam-Level: Subject: [Samba] SAMBA and NFS X-BeenThere: [EMAIL PROTECTED] X-Mailman-Version: 2.1.4 Precedence: list List-Id: General questions regarding Samba samba.lists.samba.org List-Unsubscribe: http://lists.samba.org/mailman/listinfo/samba, mailto:[EMAIL PROTECTED] List-Archive: http://lists.samba.org/archive/samba List-Post: mailto:[EMAIL PROTECTED] List-Help: mailto:[EMAIL PROTECTED] List-Subscribe: http://lists.samba.org/mailman/listinfo/samba, mailto:[EMAIL PROTECTED] Sender: [EMAIL PROTECTED] Errors-To: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: SAMBA and NFS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yes and no. Samba cannot do this *but* Samba probably doesn't need to. Linux can mount NFS so you should be able to simply mount the NFS share first and then neglect to tell Samba that it isn't a normal directory. As far as I know, Samba has no way of knowing the difference. This should work especially well with a read only share because you won't need oplocks or special cacheing or anything. Jim C. | Can samba connect to an NFS share and then re-export that share so my | windows XP users can connect to it? Basically I have a NFS share that | all of my windows XP users need read-only access to. The goal of this | project is to replace an old MS Gateway Services for Novell server | (using IPX) with something that can do the same thing but over IP. I am | pretty sure Novell and AD can share files using Native File Access, but | that would require the Novell admins to get CIFS setup on the Novell | side. The Novell server we are using has NFS already setup and getting | that much setup was like pulling teeth. | | Thanks, | | BOFH1234 | | _ | Is your PC infected? Get a FREE online computer virus scan from McAfee® | Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 | - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: [EMAIL PROTECTED] AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llings Jabber: [EMAIL PROTECTED]| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3-nr1 (Windows XP) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA7DUS57L0B7uXm9oRAtdGAJsHcs2soIDYx+SvNZJzmE/8Fro/sACZAZnA PyptLFaJk2Bk8ts5kvKKE9M= =3aYR -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA and NFS
On Wed, Jul 07, 2004 at 01:23:37PM -0400, bastard operater wrote: BOFH1234 == bastard operater [EMAIL PROTECTED] writes: BOFH1234 Can samba connect to an NFS share and then re-export BOFH1234 that share so my windows XP users can connect to it? BOFH1234 Basically I have a NFS share that all of my windows XP BOFH1234 users need read-only access to. The goal of this BOFH1234 project is to replace an old MS Gateway Services for BOFH1234 Novell server (using IPX) with something that can do the BOFH1234 same thing but over IP. I am pretty sure Novell and AD BOFH1234 can share files using Native File Access, but that would BOFH1234 require the Novell admins to get CIFS setup on the BOFH1234 Novell side. The Novell server we are using has NFS BOFH1234 already setup and getting that much setup was like BOFH1234 pulling teeth. Samba can share any filesystem that the Samba server can see. Your performance will be degraded because you have the dual overhead of Samba and NFS, but you can share the filesystem. -- Eric M. Boehm /\ ASCII Ribbon Campaign [EMAIL PROTECTED] \ / No HTML or RTF in mail X No proprietary word-processing Respect Open Standards / \ files in mail -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Browsing 3.0.2 from Windows 2000 domain
Hi, I'm trying to make a linux file server that is browseable from a windows 2000 domain, via authentication from a windows 2000 server. Ultimately, I want to be able to control permissions on the samba shares using Windows 2000 Server Manager. Something like: Windows XP(client) - Samba(file server) - [authenticates through] Windows 2000 server So far, I CAN browse the server by typing the IP address on the windows side, but I cannot log onto the computer from just browsing the network. The samba file server shows through browsing the network on the WinXP client. But when I double click, I get the following error: \\LINUXSERVER is not accessible. You might not have permission to use this network resource. Contact... Also, when I try to use server manager from my Windows 2000 Server, I get access is denied. I thought I can control shares from here? Here's my smb.conf [global] workgroup = WINDOMAIN server string = Samba Server %v security = DOMAIN map to guest = Bad User log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 printcap name = cups dns proxy = No wins server = 192.168.0.13 ldap ssl = no idmap uid = 1-2 idmap gid = 1-2 winbind separator = + printer admin = @adm hosts allow = 192.168.0. printing = cups [test1] path = /tmp/boo [homes] comment = Home Directories read only = No browseable = No Does it have anything to do with the following errors on log.nmbd (var/log/samba)? [2004/07/07 10:35:37, 0] nmbd/nmbd_nameregister.c:register_name_response(130) register_name_response: WINS server at IP 192.168.0.13 rejected our name registration of LINUXSERVER20 IP 192.168.0.14 with error code 6. [2004/07/07 10:35:37, 0] nmbd/nmbd_mynames.c:my_name_register_failed(36) my_name_register_failed: Failed to register my name LINUXSERVER20 on subnet UNICAST_SUBNET. [2004/07/07 10:35:37, 0] nmbd/nmbd_namelistdb.c:standard_fail_register(283) standard_fail_register: Failed to register/refresh name LINUXSERVER20 on subnet UNICAST_SUBNET [2004/07/07 10:35:37, 0] nmbd/nmbd_nameregister.c:register_name_response(130) register_name_response: WINS server at IP 192.168.0.13 rejected our name registration of LINUXSERVER03 IP 192.168.0.14 with error code 6. [2004/07/07 10:35:37, 0] nmbd/nmbd_mynames.c:my_name_register_failed(36) my_name_register_failed: Failed to register my name LINUXSERVER03 on subnet UNICAST_SUBNET. [2004/07/07 10:35:37, 0] nmbd/nmbd_namelistdb.c:standard_fail_register(283) standard_fail_register: Failed to register/refresh name LINUXSERVER03 on subnet UNICAST_SUBNET [2004/07/07 10:35:37, 0] nmbd/nmbd_nameregister.c:register_name_response(130) register_name_response: WINS server at IP 192.168.0.13 rejected our name registration of LINUXSERVER00 IP 192.168.0.14 with error code 6. [2004/07/07 10:35:37, 0] nmbd/nmbd_mynames.c:my_name_register_failed(36) my_name_register_failed: Failed to register my name LINUXSERVER00 on subnet UNICAST_SUBNET. [2004/07/07 10:35:37, 0] nmbd/nmbd_namelistdb.c:standard_fail_register(283) standard_fail_register: Failed to register/refresh name LINUXSERVER00 on subnet UNICAST_SUBNET If not, what am I doing wrong? I thought with winbind, I should get this working easily. I tried wbinfo -u and got all of the domain user/computer listing just fine. Thanks for any help! -John -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Profiles
Thanks for your help Rob, but please reply to the list so that others can be helped. Even though it might not look like it is so, your profiles are likely only being stored locally. As I stated before, the profiles are saved to the server, but each client I login to using the same user, has a different profile which is saved to the same location. For instance: If user A logins into machine A and creates a folder A then logs out, folder A is saved on the server, when user A logs back in to machine A he sees folder A on his desktop Now if user A logs into machine B he sees a blank desktop if he creates a folder B and logs out on the server I can see both folders A and B, but the user can only see folders that were created on the machine he logged into. In addition the home directory is only available to the user on the machine which he first logged into. In our case, I have a dmusers group that each user is a member of and the dmusers group has rw rights to the profiles directory on the server. What Windows does is store the profile on the local machine and will update the 'roaming profile' on the server, if applicable. You might not be seeing or receiving an error message stating that they aren't able to update/upload the profile to the server. Correct there are no errors on login from the client, but the profile is being saved it just isn't moving. Check in your Windows Event viewer to see if there are any message stating that. There is one prevalent msg here, I'm not sure what it means, but here it is: Windows has detected that Offline Caching is enabled on the roaming profile share - to avoid potential profile corruption, Offline file caching must be disabled on shares where roaming profiles are stored While that means good I don't have any offline file caching active on the shares, and I highly doubt this is the reason for my problem. I would also check permissions on the 'profiles' directory. It might need a decent alteration of the existing permissions to allow the profiles to be updated. The permsions appear to be correct, and files are being updated at that location. Any other ideas? Miles Miles Scruggs wrote: I have a few weird problems with profiles on my samba PDC. Right now I'm just testing with two XP pro clients. Samba is Samba version 3.0.2a-Debian The problems that I'm having and I believe are related are: 1.) Profiles are saved to the server, but don't migrate to different clients. This is very odd, I can make all sorts of changes to the profile and I can see those changes being saved to the server. When I log back in those changes are loaded to the local machine, if I try to login to another client, I see a totally separate profile. The kicker is that all data is being saved to the same path, but somehow it can differenetite which client is logging in. 2.) Once the profile is created on one client, the home dir is writable to only that client. The home dirs and profile dir is two separate locations /home/%u for homedirs /home/profile/%u for profiles Thanks for the help Miles -- Regards, Robert Adkins IT Manager/Buyer Impel Industries, inc. 586-254-5800 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA and NFS
Thank you for the response. Would there still be a performance problem if I had two NICs in the PC? One to connect to the NFS share and the second NIC to connect to the windows PCs? I am talking about a maximum of 20 people connecting to the samba share with at most 5-6 people passing data over the share. The samba server would be a 2.2GHz PC with 512MB of RAM. Thanks, BOFH1234 From: Eric Boehm [EMAIL PROTECTED] Reply-To: Eric Boehm [EMAIL PROTECTED] To: bastard operater [EMAIL PROTECTED] CC: [EMAIL PROTECTED] Subject: Re: [Samba] SAMBA and NFS Date: Wed, 7 Jul 2004 13:35:28 -0400 On Wed, Jul 07, 2004 at 01:23:37PM -0400, bastard operater wrote: BOFH1234 == bastard operater [EMAIL PROTECTED] writes: BOFH1234 Can samba connect to an NFS share and then re-export BOFH1234 that share so my windows XP users can connect to it? BOFH1234 Basically I have a NFS share that all of my windows XP BOFH1234 users need read-only access to. The goal of this BOFH1234 project is to replace an old MS Gateway Services for BOFH1234 Novell server (using IPX) with something that can do the BOFH1234 same thing but over IP. I am pretty sure Novell and AD BOFH1234 can share files using Native File Access, but that would BOFH1234 require the Novell admins to get CIFS setup on the BOFH1234 Novell side. The Novell server we are using has NFS BOFH1234 already setup and getting that much setup was like BOFH1234 pulling teeth. Samba can share any filesystem that the Samba server can see. Your performance will be degraded because you have the dual overhead of Samba and NFS, but you can share the filesystem. -- Eric M. Boehm /\ ASCII Ribbon Campaign [EMAIL PROTECTED] \ / No HTML or RTF in mail X No proprietary word-processing Respect Open Standards / \ files in mail _ Get tips for maintaining your PC, notebook accessories and reviews in Technology 101. http://special.msn.com/tech/technology101.armx -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Difficulties with samba and ADS
This is worse than I thought... It isn't happening once every month or so, it is now happening like once every 90 seconds! Not only is it giving me a problem with smbmount and smbclient, but with DAVE mounts on the mac machines! I am not getting any errors in the log files... I am getting desperate here. Can someone please help? Chris On Tuesday 06 July 2004 12:30 pm, Chris wrote: Hello. I thought I had this fixed 3 times now... but it keeps coming up. I have 2 smbservers that are part of an ADS domain (windows 2003 server). I have my samba servers set up, and it works great for a month or so, then it starts giving smbmount and smbclient a hard time. This is very bad news because I rely upon smbmount heavily. When I try to view the shares my main server, and use the correct password for user chris: # smbclient -L smbserver -U chris -W domainname Password: session setup failed: NT_STATUS_NO_LOGON_SERVERS When I try to view the shares on my main server with no password for user chris: # smbclient -L smbserver -U chris -W domainname Password: Anonymous login successful Domain=[DOMAINNAME] OS=[Unix] Server=[Samba 3.0.4] Sharename Type Comment - --- print$ Disk Windows Printer Drivers accthp8150 Printer genadmhp4siPrinter DOMAINNAME_tmp Disk IPC$ IPC IPC Service (SMBSERVER) ADMIN$ IPC IPC Service (SMBSERVER) Anonymous login successful Domain=[DOMAINNAME] OS=[Unix] Server=[Samba 3.0.4] Server Comment ---- SMBSERVER SMBSERVER DOMAINSERVER WorkgroupMaster ---- DOMAINNAME DOMAINSERVER When I try an smbmount with correct password: # smbmount //smbserver/chris /mnt/misc -o username=chris,workgroup=domainname Password: 23598: session setup failed: ERRDOS - 2215 SMB connection failed When I try a smbmount with no passwd: # smbmount //smbserver/chris /mnt/misc -o username=chris,workgroup=domainname Password: Anonymous login successful 23599: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed Smbmount works just fine on windows machines on the domain, and my old 2.0.7 samba servers on the old NT domain (which I am trying to migrate from). I have read the documents, scoured the internet and bought a book on the subject, and I just can't see what I am doing wrong here! Can someone please give me a hand? I am thinking it is a kerberos thing... but I cannot be certain. I include my smb.conf at the bottom of this post. Thank you very much! Chris smb.conf=== [global] netbios name = SMBSERVER socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384 dns proxy = no realm = DOMAINNAME.INT workgroup = DOMAINNAME netbios aliases = SMBSERVER server string = SMBSERVER security = ADS wins proxy = no map to guest = Bad User password server = domainserver.domainname.int name resolve order = lmhosts wins bcast time server = Yes os level = 0 preferred master = No local master = No domain master = No wins server = 208.226.104.10 hosts allow = 127.0.0.1, 208.226.104. oplocks = No follow symlinks = No printing = cups printcap name = CUPS load printers = yes [print$] comment = Windows Printer Drivers path = /var/lib/samba/printers browseable = yes read only = yes guest ok = yes write list = @ntadmin,root,administrator [homes] path = %H/sam valid users = +%U, %U write list = +%U force user = %U force group = %U read only = No create mask = 0660 directory mask = 0770 browseable = No [DOMAINNAME_tmp] path = /DOMAINNAME_tmp admin users = chrisd, kurtk, administrator force user = %U force group = %G read only = No create mask = 0666 directory mask = 0777 guest ok = Yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] bdc
Hi! Please, can i use Samba like BDC in my network? thanks, Avellar -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Hiding some stuff
Hi, Is there a way i could hide netlogon, profiles, homes, etc., from my windows 2000 users ? Will hide files solves the issue, or is there another way ? Any help would be appreciated. Warm Regards, Mário Gamito -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Hiding some stuff
Depends on what you mean by hide. Not get there period? Not show up in Network Neighborhood? (browsable = in smb.conf) Or...??? -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Hiding some stuff
Mário Gamito wrote: Hi, Is there a way i could hide netlogon, profiles, homes, etc., from my windows 2000 users ? Will hide files solves the issue, or is there another way ? Any help would be appreciated. Warm Regards, Mário Gamito I know how to hide the netlogon and profiles directories. Put them somewhere on the server that isn't shared. I think there is also a setting within the smb.conf to not share/create the users 'home' directory. -Rob -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: Hiding some stuff
Hi Michael, Yes, i mean they don't appear in windows file explorer. Warm Regards, Mário Gamito -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Lueck Sent: Wednesday, July 07, 2004 8:07 PM To: [EMAIL PROTECTED] Subject: [Samba] Re: Hiding some stuff Depends on what you mean by hide. Not get there period? Not show up in Network Neighborhood? (browsable = in smb.conf) Or...??? -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] bdc
On Wednesday 07 July 2004 12:37, José Carlos de Avellar wrote: Hi! Please, can i use Samba like BDC in my network? thanks, Avellar Yes. See http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf chapter on Backup Domain Control. - John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 OpenLDAP by Example, ISBN: 0131488732 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] pam_winbind.so and home-directory creation
Hello, today I tried to auth users against winnt-pdc. I set up winbind and can login via DOMAIN+USER locally (debian), BUT login always promts: No directory, logging in with HOME=/ Can't fix this. Here's my configuration: --- smb.conf --- workgroup = WORKGROUP winbind separator = + winbind cache time = 10 template shell = /bin/bash template homedir = /home/%D/%U idmap uid = 1-5 idmap gid = 1-5 winbind enum users = yes winbind enum groups = yes security = domain password server = PDC encrypt passwords = yes invalid users = root --- /etc/pam.d/login --- auth requisite pam_securetty.so auth requisite pam_nologin.so auth required pam_env.so auth sufficient pam_winbind.so auth required pam_unix.so nullok use_first_pass # Standard Un*x account and session accountsufficient pam_winbind.so accountrequired pam_unix.so sessionsufficient pam_winbind.so sessionrequired pam_unix.so sessionrequired pam_mkhomedir.so sessionoptional pam_motd.so sessionoptional pam_mail.so standard noenv password required pam_unix.so nullok obscure min=4 max=8 md5 --- /etc/nsswitch.conf passwd: winbind compat group: winbind compat shadow: compat Where did I go wrong? Any Ideas would be appreciated! Best regards, Torsten -- Edel sei der Mensch, Milchreis ist gut. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA and NFS
On Wed, Jul 07, 2004 at 02:49:30PM -0400, bastard operater wrote: bastard == bastard operater [EMAIL PROTECTED] writes: bastard Thank you for the response. Would there still be a bastard performance problem if I had two NICs in the PC? One to bastard connect to the NFS share and the second NIC to connect to bastard the windows PCs? I am talking about a maximum of 20 bastard people connecting to the samba share with at most 5-6 bastard people passing data over the share. The samba server bastard would be a 2.2GHz PC with 512MB of RAM. I don't think that will help you. I am talking about the overhead of the two protocols. For example, if you were access files via NFS, you might see something like this client - NFS - NFS server and for samba client - SMB (CIFS) - Samba server However, in your example, client - SMB (CIFS) - Samba server - NFS - NFS server The client has to go through two network file systems to get to the data. -- Eric M. Boehm /\ ASCII Ribbon Campaign [EMAIL PROTECTED] \ / No HTML or RTF in mail X No proprietary word-processing Respect Open Standards / \ files in mail -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Hiding some stuff
Mário Gamito wrote: Yes, i mean they don't appear in windows file explorer. But where in Windows Explorer? Under the My Network Places or as a drive letter? If you map them a drive letter, you can't very well hide that. However if you mean under My Network Places then that is the browsable setting in the smb.conf for each share. Like someone else said, you could not configure Samba to create home and profile shares. However home dirs are usually where people are suppose to save their documents on the server so they would want to be able to get there unless that is not your standard. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA and NFS
Eric Boehm wrote: On Wed, Jul 07, 2004 at 02:49:30PM -0400, bastard operater wrote: bastard == bastard operater [EMAIL PROTECTED] writes: bastard Thank you for the response. Would there still be a bastard performance problem if I had two NICs in the PC? One to bastard connect to the NFS share and the second NIC to connect to bastard the windows PCs? I am talking about a maximum of 20 bastard people connecting to the samba share with at most 5-6 bastard people passing data over the share. The samba server bastard would be a 2.2GHz PC with 512MB of RAM. I don't think that will help you. I am talking about the overhead of the two protocols. For example, if you were access files via NFS, you might see something like this client - NFS - NFS server and for samba client - SMB (CIFS) - Samba server However, in your example, client - SMB (CIFS) - Samba server - NFS - NFS server The client has to go through two network file systems to get to the data. Not really much of a slowdown. I have that confirugation setup within my own network with roughly 25 users. Primarily, they are accessing Samba from the server hosting the files, however if need be those Samba shares can be accessed via NFS then Samba off the second Server. I configured the two servers 'identically' with the second server running an rsyne between the 'share' and a 'share2' over NFS, that way if the primary server fails, all I need to do is change umount 'share2' and remount it as 'share' and voila no other changes are necesary, since the same fileshares are already available through Samba via both servers. If I wanted to, I could quickly edit the smb.conf file to change the 'server' name the second server broadcasts and within a few minutes everyone will be 'reconnected' to the 'original' server. In my tests, there really is very little difference in performance. -Rob -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Hiding some stuff
Mário Gamito wrote: Hi Michael, Yes, i mean they don't appear in windows file explorer. Under each share definition set browseable = no This will still allow you to type \\servername\share but you really can't get around that if you still want to provide access to the files in some manner. This is often set for homes, profiles, and netlogon shares. Warm Regards, Mário Gamito -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Lueck Sent: Wednesday, July 07, 2004 8:07 PM To: [EMAIL PROTECTED] Subject: [Samba] Re: Hiding some stuff Depends on what you mean by hide. Not get there period? Not show up in Network Neighborhood? (browsable = in smb.conf) Or...??? -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Paul Gienger Office:701-281-1884 Applied Engineering Inc. Cell: 701-306-6254 Information Systems Consultant Fax: 701-281-1322 URL: www.ae-solutions.commailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: smbpasswd and ldap problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Well, I don't know about 2.2.x but ldapssl is on by default in Samba 3. Assumeing both your samba server and your ldap server are on the same box, consider setting it to off in smb.conf. Nicolas Ecarnot wrote: | Hi, | | I recently upgraded a working samba server from 2.2.8a to 2.2.9_1 under | FreeBSD 5.1R. This is still working expept a ldap problem. | | Here is what's happening : | | server# smbpasswd myUser | New SMB password: | Retype new SMB password: | LDAPS option set...! | ldap_connect_system: Binding to ldap server as | Bind failed: Can't contact LDAP server | Failed to find entry for user myUser. | Failed to modify password entry for user myUser | | The user 'myUser' already exists in the smbpasswd file, I just want to | change its password. | Please note that the problem appears exactly the same when trying to add | a user with a '-a' option. | | It seems that I compiled ldap (well, the automated package installer of | freebsd), and I like it. I forecast that I will use samba one day, but | not yet. | | Is it possible to have a samba compiled with the ldap support, but not | be forced to use it? Is there an option in smb.conf to tell samba to | avoid bothering me with these ldap add-ons? | | If not, what can I do to make him play with its ldap things, but | actually still use the good old smbpasswd file we all know? | | Thank you. | - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: [EMAIL PROTECTED] AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llings Jabber: [EMAIL PROTECTED]| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3-nr1 (Windows XP) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA7FJB57L0B7uXm9oRAoN9AJ96mtclUfLFuvvPR5pLUYDgpZqr+wCcCmfN drd5pewgnWkFEhu+2y+rbNs= =gNXx -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: [v3.0.4] can not set SSID
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Well, If you want to use the old SID you must fist have it. Second you must use: net setlocalsid [Place SID here] This will set the old SID in the new secrets.tdb file. | how does i do this? | | | Jim C. wrote: | | | You'll have to reset all of them later of course. | | One thing you might try is setting the new SID and then just giving the | | system the new one when it asks. | | - -- | - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: [EMAIL PROTECTED] AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llings Jabber: [EMAIL PROTECTED]| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3-nr1 (Windows XP) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA7FPJ57L0B7uXm9oRAi2HAJ0S42JsOGyXsW3xLwmIIB3t9Xi5SgCeMVvt OyC4hkIQBmWTS0/JhyPOl1M= =iJ8c -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Setting home path to a dir within a users Linux home dir
Is there a trick to append an additional directory level onto the defauly behavior of a [homes] share looking in /etc/passwd to find the users Linux home dir? It would offer a bit of protection if Windows clients ended up in say the WinHome directory within their Linux home directory when logging in from Windows so they are not tempted to tamper with their desktop settings files for Linux from Windows. Maybe there is a bit of magic someone knows, a variable to include or something? -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Setting home path to a dir within a users Linux home dir
How about if you come at it from this angle: Most settings files on linux/unix are .something. You could use the 'hide dotfiles' directive to not show the user those. Also, you could use the other hide files settings to get rid of the rest of the data. Michael Lueck wrote: Is there a trick to append an additional directory level onto the defauly behavior of a [homes] share looking in /etc/passwd to find the users Linux home dir? It would offer a bit of protection if Windows clients ended up in say the WinHome directory within their Linux home directory when logging in from Windows so they are not tempted to tamper with their desktop settings files for Linux from Windows. Maybe there is a bit of magic someone knows, a variable to include or something? -- Paul Gienger Office:701-281-1884 Applied Engineering Inc. Cell: 701-306-6254 Information Systems Consultant Fax: 701-281-1322 URL: www.ae-solutions.commailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Setting home path to a dir within a users Linux home dir
From windows, you can map share sub-directories as drive letters. for example - \\server\username\WinHome gets mapped as H:\ A lay user (the kind who would delete their linux configuration files) would not likely remap the drive letter to just \\server\username - though nothing prevents them, security-wise, from doing so. As for some other trick on the samba server, you'll have to wait for a reply from someone else on the list -Jason On Wed, 07 Jul 2004 16:40:56 -0400, Michael Lueck [EMAIL PROTECTED] wrote: Is there a trick to append an additional directory level onto the defauly behavior of a [homes] share looking in /etc/passwd to find the users Linux home dir? It would offer a bit of protection if Windows clients ended up in say the WinHome directory within their Linux home directory when logging in from Windows so they are not tempted to tamper with their desktop settings files for Linux from Windows. Maybe there is a bit of magic someone knows, a variable to include or something? -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Setting home path to a dir within a users Linux home dir
That is the default. For example though, I've noticed that if I go to the home drive in CMD.EXE and dir, I don't see much, however dir /s/b turs up a whole bunch. I find it pretty common for people to change their Windows Explorer settings to show hidden files, extensions is a MUST, etc... so then they will start showing up. Since the default for homes was to put the Windows profile in a profile directory under the home dir, I sort of got the idea of what about putting the windows home in a directory under the Linux home. If they want to share a file between the two worlds, better put it under there. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Starting an XP service using samba?
Hey all.. first off, I'm sorry if this is posted somewhere or in the docs ... I've spent numerous hours searching and not had any luck, so here goes .. We remotely admin a few thousand xp machines ... currently we have to have a person at a machine enable the telnet service for us (through a handy front end) so we can connect and check things out. After some poking around the samba docs, I'm led to believe that there should be a way to remotely start a service from the command line. Can anyone tell me if I'm correct, and if so, how? I've tried doing smbclient //x.y.z.a/TlntSvr -U username but that doesn't work and thats the closest I've gotten. I saw a post from 2000 on another list that mentioned using rpcclient I think, but nothing further. Any suggestions would be greatly appreciated as it would cut out a lot of fumbling around/waiting on hold when trying to fix problems. Cheers! t. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA and NFS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I think you won't have a performance problem. i have a DELL P4 2.8 with 256 ram rinning samba+rsync+heartbeat+nfs and 20 clients. everything is ok. bastard operater wrote: | Thank you for the response. Would there still be a performance problem | if I had two NICs in the PC? One to connect to the NFS share and the | second NIC to connect to the windows PCs? I am talking about a maximum | of 20 people connecting to the samba share with at most 5-6 people | passing data over the share. The samba server would be a 2.2GHz PC with | 512MB of RAM. | | Thanks, | | BOFH1234 | | From: Eric Boehm [EMAIL PROTECTED] | Reply-To: Eric Boehm [EMAIL PROTECTED] | To: bastard operater [EMAIL PROTECTED] | CC: [EMAIL PROTECTED] | Subject: Re: [Samba] SAMBA and NFS | Date: Wed, 7 Jul 2004 13:35:28 -0400 | | On Wed, Jul 07, 2004 at 01:23:37PM -0400, bastard operater wrote: | BOFH1234 == bastard operater [EMAIL PROTECTED] writes: | | BOFH1234 Can samba connect to an NFS share and then re-export | BOFH1234 that share so my windows XP users can connect to it? | BOFH1234 Basically I have a NFS share that all of my windows XP | BOFH1234 users need read-only access to. The goal of this | BOFH1234 project is to replace an old MS Gateway Services for | BOFH1234 Novell server (using IPX) with something that can do the | BOFH1234 same thing but over IP. I am pretty sure Novell and AD | BOFH1234 can share files using Native File Access, but that would | BOFH1234 require the Novell admins to get CIFS setup on the | BOFH1234 Novell side. The Novell server we are using has NFS | BOFH1234 already setup and getting that much setup was like | BOFH1234 pulling teeth. | | Samba can share any filesystem that the Samba server can see. Your | performance will be degraded because you have the dual overhead of | Samba and NFS, but you can share the filesystem. | | -- | Eric M. Boehm /\ ASCII Ribbon Campaign | [EMAIL PROTECTED] \ / No HTML or RTF in mail | X No proprietary word-processing | Respect Open Standards / \ files in mail | | | _ | Get tips for maintaining your PC, notebook accessories and reviews in | Technology 101. http://special.msn.com/tech/technology101.armx | - -- ~ ___ ~| henrique paiva | ~|___| ~| email: [EMAIL PROTECTED] | ~|___| ~| icq: 320094827 | ~|___| Este email foi assinado pelo Gnupg http://www.gnupg.com e ~ Mozilla Thunderbird Enigmail http://enigmail.mozdev.org Solicite minha chave pública. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFA7GgmeE6sZ+g/aaURAj37AKCfFEBodopuepG9K27yFvH5yQnp6wCgm7CF laGw0bZaxf7bWj3qR7pryEs= =uUOR -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Notification
* eManager Notification ** Recipient, Content filter has detected a sensitive e-mail. Destination mailbox(es): [EMAIL PROTECTED] *** End of message *** Received: from 208.8.92.60 by jupiter.INSIDEAI.COM (InterScan E-Mail VirusWall NT); Wed, 07 Jul 2004 17:17:32 -0400 Received: from lists.samba.org ([66.70.73.150]) by viruswall.ai-logix.com (Post.Office MTA v3.5.3 release 223 ID# 0-0U10L2S100V35) with ESMTP id com for [EMAIL PROTECTED]; Wed, 7 Jul 2004 17:17:32 -0400 Received: from dp.samba.org (localhost [127.0.0.1]) by lists.samba.org (Postfix) with ESMTP id 3054B163D9E for [EMAIL PROTECTED]; Wed, 7 Jul 2004 21:17:32 + (GMT) X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: from itapoa.terra.com.br (itapoa.terra.com.br [200.154.55.227]) by lists.samba.org (Postfix) with ESMTP id 05E831638BE for [EMAIL PROTECTED]; Wed, 7 Jul 2004 21:16:27 + (GMT) Received: from pasto.terra.com.br (pasto.terra.com.br [200.154.55.137]) by itapoa.terra.com.br (Postfix) with ESMTP id AB2C4DD4BE7 for [EMAIL PROTECTED]; Wed, 7 Jul 2004 18:16:26 -0300 (BRT) Received: from [192.168.254.2] (unknown [200.217.42.50]) (authenticated user paivahenrique) by pasto.terra.com.br (Postfix) with ESMTP id 2883C3C044 for [EMAIL PROTECTED]; Wed, 7 Jul 2004 18:16:26 -0300 (BRT) Message-ID: [EMAIL PROTECTED] Date: Wed, 07 Jul 2004 18:16:23 -0300 From: henrique paiva [EMAIL PROTECTED] User-Agent: Mozilla Thunderbird 0.7.1 (X11/20040626) X-Accept-Language: en-us, en MIME-Version: 1.0 To: [EMAIL PROTECTED] Subject: Re: [Samba] SAMBA and NFS References: [EMAIL PROTECTED] In-Reply-To: [EMAIL PROTECTED] X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=ISO-8859-1; format=flowed X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on dp.samba.org X-Spam-Status: No, hits=-4.4 required=3.8 tests=BAYES_00,RCVD_IN_BLARS_RBL autolearn=no version=2.63 X-Spam-Level: X-BeenThere: [EMAIL PROTECTED] X-Mailman-Version: 2.1.4 Precedence: list List-Id: General questions regarding Samba samba.lists.samba.org List-Unsubscribe: http://lists.samba.org/mailman/listinfo/samba, mailto:[EMAIL PROTECTED] List-Archive: http://lists.samba.org/archive/samba List-Post: mailto:[EMAIL PROTECTED] List-Help: mailto:[EMAIL PROTECTED] List-Subscribe: http://lists.samba.org/mailman/listinfo/samba, mailto:[EMAIL PROTECTED] Sender: [EMAIL PROTECTED] Errors-To: [EMAIL PROTECTED] Content-Transfer-Encoding: quoted-printable -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Notification
* eManager Notification ** Recipient, Content filter has detected a sensitive e-mail. Destination mailbox(es): [EMAIL PROTECTED] *** End of message *** Received: from 208.8.92.60 by jupiter.INSIDEAI.COM (InterScan E-Mail VirusWall NT); Wed, 07 Jul 2004 17:17:40 -0400 Received: from lists.samba.org ([66.70.73.150]) by viruswall.ai-logix.com (Post.Office MTA v3.5.3 release 223 ID# 0-0U10L2S100V35) with ESMTP id com for [EMAIL PROTECTED]; Wed, 7 Jul 2004 17:17:40 -0400 Received: from dp.samba.org (localhost [127.0.0.1]) by lists.samba.org (Postfix) with ESMTP id 78E13163C70 for [EMAIL PROTECTED]; Wed, 7 Jul 2004 21:17:40 + (GMT) X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: from itapoa.terra.com.br (itapoa.terra.com.br [200.154.55.227]) by lists.samba.org (Postfix) with ESMTP id 05E831638BE for [EMAIL PROTECTED]; Wed, 7 Jul 2004 21:16:27 + (GMT) Received: from pasto.terra.com.br (pasto.terra.com.br [200.154.55.137]) by itapoa.terra.com.br (Postfix) with ESMTP id AB2C4DD4BE7 for [EMAIL PROTECTED]; Wed, 7 Jul 2004 18:16:26 -0300 (BRT) Received: from [192.168.254.2] (unknown [200.217.42.50]) (authenticated user paivahenrique) by pasto.terra.com.br (Postfix) with ESMTP id 2883C3C044 for [EMAIL PROTECTED]; Wed, 7 Jul 2004 18:16:26 -0300 (BRT) Message-ID: [EMAIL PROTECTED] Date: Wed, 07 Jul 2004 18:16:23 -0300 From: henrique paiva [EMAIL PROTECTED] User-Agent: Mozilla Thunderbird 0.7.1 (X11/20040626) X-Accept-Language: en-us, en MIME-Version: 1.0 To: [EMAIL PROTECTED] Subject: Re: [Samba] SAMBA and NFS References: [EMAIL PROTECTED] In-Reply-To: [EMAIL PROTECTED] X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=ISO-8859-1; format=flowed X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on dp.samba.org X-Spam-Status: No, hits=-4.4 required=3.8 tests=BAYES_00,RCVD_IN_BLARS_RBL autolearn=no version=2.63 X-Spam-Level: X-BeenThere: [EMAIL PROTECTED] X-Mailman-Version: 2.1.4 Precedence: list List-Id: General questions regarding Samba samba.lists.samba.org List-Unsubscribe: http://lists.samba.org/mailman/listinfo/samba, mailto:[EMAIL PROTECTED] List-Archive: http://lists.samba.org/archive/samba List-Post: mailto:[EMAIL PROTECTED] List-Help: mailto:[EMAIL PROTECTED] List-Subscribe: http://lists.samba.org/mailman/listinfo/samba, mailto:[EMAIL PROTECTED] Sender: [EMAIL PROTECTED] Errors-To: [EMAIL PROTECTED] Content-Transfer-Encoding: quoted-printable -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Help with long PC names and AIX
[EMAIL PROTECTED] wrote: OK I am new to Samba. I need a solution for a problem of long PC names and short AIX names. How do I work around this issue? This might not work on AIX, but it does for me on a Digital Unix 4.0D 'PDC' I run. In DU's case it's only the 'useradd' command that is limited to 8 characters in a username. You can plug a longer name into /etc/password and every thing else works fine... So to add a machine to the domain, I ssh into the Unix machine, run vipw, MANUALLY add the machine's name to the password file, save/exit, manually run smbpasswd -am and then go back to windows and 'join the domain'. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Profiles
I just needed to clarify one thing *See end** Thanks for your help Rob, but please reply to the list so that others can be helped. Even though it might not look like it is so, your profiles are likely only being stored locally. As I stated before, the profiles are saved to the server, but each client I login to using the same user, has a different profile which is saved to the same location. For instance: If user A logins into machine A and creates a folder A then logs out, folder A is saved on the server, when user A logs back in to machine A he sees folder A on his desktop Now if user A logs into machine B he sees a blank desktop if he creates a folder B and logs out on the server I can see both folders A and B, but the user can only see folders that were created on the machine he logged into. In addition the home directory is only available to the user on the machine which he first logged into. This isn't the case with the home dir. The home dir is writable no matter which client machine the user is logged into Thanks Miles PS can someone please help me? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Setting home path to a dir within a users Linux home
Dwight Tovey wrote: path = %H/WinHome Very cool, you get the prize! Thanks! -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Setting home path to a dir within a users Linux home dir
Easy: In your smb.conf the following will do the trick: [homes] comment = Home Directories path = /home/users/%U/WinHome valid users = %S read only = No browseable = No That is what I use on my network. Stops Windows user abuse from ever finding the root of their home directory. - John T. On Wednesday 07 July 2004 14:51, Jason Boles wrote: From windows, you can map share sub-directories as drive letters. for example - \\server\username\WinHome gets mapped as H:\ A lay user (the kind who would delete their linux configuration files) would not likely remap the drive letter to just \\server\username - though nothing prevents them, security-wise, from doing so. As for some other trick on the samba server, you'll have to wait for a reply from someone else on the list -Jason On Wed, 07 Jul 2004 16:40:56 -0400, Michael Lueck [EMAIL PROTECTED] wrote: Is there a trick to append an additional directory level onto the defauly behavior of a [homes] share looking in /etc/passwd to find the users Linux home dir? It would offer a bit of protection if Windows clients ended up in say the WinHome directory within their Linux home directory when logging in from Windows so they are not tempted to tamper with their desktop settings files for Linux from Windows. Maybe there is a bit of magic someone knows, a variable to include or something? -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 OpenLDAP by Example, ISBN: 0131488732 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Configuration of Samba 2.2.8.a for Solaris
Hi all, I installed samba successfully on our Solaris8 server. A friend who had previously installed and configured samba told me that at some point in the configuration samba will ask you to enter the NT domain administrator's password for it to be able to join the domain and be able to communicate with it. Would you please tell me what script/command I need to execute to allow me to do that. As it is, with normal installation and activation of the smbd nmbd daemons, I didn't get to a point where it would ask me for any NT administrator's password. As always, I appreciate your help and wish you a great day. Thanks. Regards, Majid Chavoshi Unix System Administrator Belkin Corporation Information Services 310-604-2098 Office 310-604-2022 Fax 310-877-1428 Mobile [EMAIL PROTECTED] www.belkin.com Confidential This e-mail and any files transmitted with it are the property of Belkin Corporation and/or its affiliates, are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not one of the named recipients or otherwise have reason to believe that you have received this e-mail in error, please notify the sender and delete this message immediately from your computer. Any other use, retention, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Antwort: Re: [Samba] 3.0.4: smbd's + nscd's = 100% CPU; load 4
Dragan Krnic DB Fernverkehr AG P 955 - 7166 Internetauftritt der Deutschen Bahn AG http://www.bahn.de Dragan Krnic 07.07.2004 20:50 An: Hansjoerg.Maurer, jra Kopie: samba Blindkopie: [EMAIL PROTECTED], [EMAIL PROTECTED] Thema: Re: [Samba] 3.0.4: smbd's + nscd's = 100% CPU; load 4 --- As an epilogue, here's a little script to find out if there are any usernames in /etc/group which don't correspond to an existing user: ungroup.awk /etc/group | sort -r | \ regroup.awk | while read i;\ do id $i /dev/null;\ done 21 | \ grep -v :x: | sort Whereby ungroup.awk is #!/bin/awk -f { partsNo = split ( $0, partString, : ); namesNo = split ( partString[4], userName, , ); printf ( %s:%s:%s:\n, partString[1], partString[2], partString[3] ); for ( i = 1;i = namesNo; i++ ) printf ( %s:%s\n, partString[1], userName[i]); } and regroup.awk is #!/bin/awk -f { partsNo = split ( $0, partString, : ); if ( partsNo == 2 ) printf ( %s\n, partString[2] ); else printf ( %s\n, $0 ); } Feel free to make it better but it did find 5 more users which are either no more on the books or their names are ever so slightly different. This is of course a temporary cure for bad bookkeeping, until Jeremy finds out why such innocuous causes have such drastic consequences and fixes it. Or doesn't. Cheers the new 3.0.4 Samba installation seems to work fine except that from time to time but at least a couple of times a day one or more smbd processes start running at 20%-40% CPU each and 6 nscd processes then share the remaining CPU power. System 70%-80% users the rest 20%-30%. Load rises fast to over 4. I'm sure that each such process is just idling, but why does it engage so much nscd processing? As soon as I kill the excessive smbd process(es) the situation drops to normal, i.e. load 0,1 no perceptible CPU%. Does anyone know what's happening? What does strace say ? Can you attach with gdb to a CPU bound process and give a backtrace ? Ah backtrace, to see the steps to the black hole? OK. Will do, sooen as I get back to office (tomorrow). A pot watched never boils. But as soon as it happens again, I'll consult strace and gdb to see how and why it happens. It does, when you stop watching. I was away yesterday and what do I see this morning: top - 09:55:35 up 6 days, 17:28, 6 users, load average: 3.59, 3.82, 3.15 Tasks: 182 total, 3 running, 179 sleeping, 0 stopped, 0 zombie Cpu(s): 21.6% user, 78.4% system, 0.0% nice, 0.0% idle Mem: 2060704k total, 2004324k used,56380k free, 185272k buffers Swap: 2402296k total, 5236k used, 2397060k free, 1068752k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ Command 12808 robf 25 0 2996 2596 2244 R 23.6 0.1 4:46.98 smbd 12741 robf 22 0 3028 2628 2280 R 20.6 0.1 5:44.55 smbd 2354 root 15 0 724 716 536 S 15.3 0.0 150:31.23 nscd 2356 root 15 0 724 716 536 S 14.9 0.0 150:35.87 nscd 2352 root 15 0 724 716 536 S 9.0 0.0 151:14.08 nscd 2353 root 15 0 724 716 536 S 6.3 0.0 150:39.89 nscd 2355 root 15 0 724 716 536 S 6.3 0.0 150:31.82 nscd 2350 root 15 0 724 716 536 S 3.7 0.0 150:49.78 nscd I attached both of the smbd processes to gdb and backtrace was always: #0 0x402e5328 in read () from
Re: [Samba] Configuration of Samba 2.2.8.a for Solaris
On Wednesday 07 July 2004 15:28, Majid Chavoshi wrote: Hi all, I installed samba successfully on our Solaris8 server. A friend who had previously installed and configured samba told me that at some point in the configuration samba will ask you to enter the NT domain administrator's password for it to be able to join the domain and be able to communicate with it. Would you please tell me what script/command I need to execute to allow me to do that. As it is, with normal installation and activation of the smbd nmbd daemons, I didn't get to a point where it would ask me for any NT administrator's password. http://www.samba.org/samba/docs/Samba-Guide.pdf chapter 9 has all the details you need. While the book (it is available from Amazon.Com as Samba-3 by Example) is oriented around SuSE and Red Hat Linux, the basic steps apply to any Samba implementation. If you still have a problem contact me direct. - John T. As always, I appreciate your help and wish you a great day. Thanks. Regards, Majid Chavoshi Unix System Administrator Belkin Corporation Information Services 310-604-2098 Office 310-604-2022 Fax 310-877-1428 Mobile [EMAIL PROTECTED] www.belkin.com Confidential This e-mail and any files transmitted with it are the property of Belkin Corporation and/or its affiliates, are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not one of the named recipients or otherwise have reason to believe that you have received this e-mail in error, please notify the sender and delete this message immediately from your computer. Any other use, retention, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 OpenLDAP by Example, ISBN: 0131488732 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] upgrading from samba-3.0.3-5 to samba-3.0.4-1 on mini-itx
Firstly I am new to this list but have used samba for years on various flavours of redhat with great results until now. I have recently upgraded my mini-itx v8000 from redhat 9 to fedora core 2. Samba is fine except there now appears to be no smbmount / unable to mount with fstab type of smbfs to mount the windows shares. Looking at the version the fedora distribution installed (3.0.3-5) I thought I would upgrade to samba 3.0.4-2. Which I downloaded the source built the rpm and then tried to install and got various dependency errors all seemed to be telling me that I dont have samba 3.0.3, looked for various binaries / source for the straight 3.0.3 and cant find anything. I then decided to try the 3.0.4-1.i386.rpm and got the following error /etc/security/selinux/file_contexts: No such file or directory [I guess this isnt a real problem] error: Failed dependencies: libcom_err.so.3 is needed by samba-3.0.4-1 samba-common = 3.0.0 is needed by (installed) gnome-vfs2-smb-2.6.0-8 any ideas please as I dont normally get errors like this from distributions !!! Any help appreciated, I have posted on the fedora mailing list also but to no avail. Cheers Paul Farrow -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] ldap smb pdc usmgr create global group with valid users = %S fails = miracle or bug ?
Hi John, and all Samba Fans on the List i have runnig a smb ldap ( idealix scripts, suse 9.0 ) pdc with a few bdcs connected via openvpn. This works like charme, now i included valid users = %S in the home share of the ldap pdc for security reason Samba version is 3.04 then i started to create a global group with usrmgr as i did it many times before. It fails serveral times ( the created group could be seen in ldap, but not in the usrmgr ) as i removed valid users = %S in the home share of the bdc , it works again. Is this known to the coders , is this bug , should i bring it up to bugzilla? ( i think i remember some changelog thing about valid users, but not exactly ) At last i bought your official book on the Linux Tag in Germany and find it quite usefull, so i recommend it to all sambatistas around the world Best Regards Robert -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] IE - FF
I thought of that but there is nothing forcing it to happen. My users are very .. uhm lets say computer challenged and I have it set so they cannot install anything by them self do to the fact that they will just hit ok to anything and I would get killed with spy ware and viruses.(lesson learned) It would have to be run as Admin to install. I was thinking about just keeping the icons and changing the exe to firefox and then I could really sneak it in on em.. Andrew Bartlett wrote: On Wed, 2004-07-07 at 22:34, Shawn Henderson wrote: I have a samba server acting as a domain controller. Is there a way that I can Have a script that delete the shortcuts on the desktop,quicklaunch and startmenu for Internet Exploder. At the same time installing Mozilla Fire Fox. Maybe like a little vbscript or something that gets ran from the server when they login. If they are a roaming profiles, then much of these are files in the Profile. Installing Firefox could be as simple as adding a link on the desktop. It's probably not a complete solution, but it's a start. I'll be interested to hear your results, as I push Firefox out to my network. Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] IE - FF
I was also thinking of doing it this way . I have a proxy server in the network , I can redirect all users to a site and run a script to do it. But that would take the knowledge to create the virus like script and I would have to get around the priveledges I have set for my users. Creating script = learnable Changing Privs = pain in the rear Andrew Bartlett wrote: On Wed, 2004-07-07 at 22:34, Shawn Henderson wrote: I have a samba server acting as a domain controller. Is there a way that I can Have a script that delete the shortcuts on the desktop,quicklaunch and startmenu for Internet Exploder. At the same time installing Mozilla Fire Fox. Maybe like a little vbscript or something that gets ran from the server when they login. If they are a roaming profiles, then much of these are files in the Profile. Installing Firefox could be as simple as adding a link on the desktop. It's probably not a complete solution, but it's a start. I'll be interested to hear your results, as I push Firefox out to my network. Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Starting an XP service using samba?
I dont know if this a good way or not but I use cygwin and can ssh into the winboxes Todd Snyder wrote: Hey all.. first off, I'm sorry if this is posted somewhere or in the docs ... I've spent numerous hours searching and not had any luck, so here goes .. We remotely admin a few thousand xp machines ... currently we have to have a person at a machine enable the telnet service for us (through a handy front end) so we can connect and check things out. After some poking around the samba docs, I'm led to believe that there should be a way to remotely start a service from the command line. Can anyone tell me if I'm correct, and if so, how? I've tried doing smbclient //x.y.z.a/TlntSvr -U username but that doesn't work and thats the closest I've gotten. I saw a post from 2000 on another list that mentioned using rpcclient I think, but nothing further. Any suggestions would be greatly appreciated as it would cut out a lot of fumbling around/waiting on hold when trying to fix problems. Cheers! t. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Starting an XP service using samba?
This can be done from windows for certain. I'm not sure if samba lets you do RPC stuff that is required to stop/start services remotely. What you want to get a hold of is all the MS Resource Kits (server, workstation, etc). These have a bunch of command line utils that make writing batch jobs easy (either .bat or vbscript - though I prefer perl) One of those utils is NETSVC.exe, which allows you to remotely stop and start services. Though in general, you should never need (or want) to use telnet or anything interactive when you have that many machines. Everything in the windows client world can be done via 3 methods- files, registry (also files), and RPC. And all 3 things are highly scriptable. (there's a perl CPAN module for most everything too, like registry editing and even event logging). Server administration uses the above 3 + LDAP. Though the ratio of servers to clients is usually low enough that batch server configuration isn't needed. With 1000 machines, you might also consider SMS. Though the resource kits are much much cheaper. -Jason On Wed, 7 Jul 2004 17:09:44 -0400, Todd Snyder [EMAIL PROTECTED] wrote: Hey all.. first off, I'm sorry if this is posted somewhere or in the docs ... I've spent numerous hours searching and not had any luck, so here goes .. We remotely admin a few thousand xp machines ... currently we have to have a person at a machine enable the telnet service for us (through a handy front end) so we can connect and check things out. After some poking around the samba docs, I'm led to believe that there should be a way to remotely start a service from the command line. Can anyone tell me if I'm correct, and if so, how? I've tried doing smbclient //x.y.z.a/TlntSvr -U username but that doesn't work and thats the closest I've gotten. I saw a post from 2000 on another list that mentioned using rpcclient I think, but nothing further. Any suggestions would be greatly appreciated as it would cut out a lot of fumbling around/waiting on hold when trying to fix problems. Cheers! t. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Starting an XP service using samba?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You might be able to use winbind to joing the domain and then use the net command to do stuff like that. Jim C. | Hey all.. | | first off, I'm sorry if this is posted somewhere or in the docs ... I've | spent numerous hours searching and not had any luck, so here goes .. | | We remotely admin a few thousand xp machines ... currently we have to | have a person at a machine enable the telnet service for us (through a | handy front end) so we can connect and check things out. After some | poking around the samba docs, I'm led to believe that there should be a | way to remotely start a service from the command line. | | Can anyone tell me if I'm correct, and if so, how? I've tried doing | smbclient //x.y.z.a/TlntSvr -U username but that doesn't work and thats | the closest I've gotten. I saw a post from 2000 on another list that | mentioned using rpcclient I think, but nothing further. | | Any suggestions would be greatly appreciated as it would cut out a lot | of fumbling around/waiting on hold when trying to fix problems. | | Cheers! | | t. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: [EMAIL PROTECTED] AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llings Jabber: [EMAIL PROTECTED]| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3-nr1 (Windows XP) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA7Kgu57L0B7uXm9oRAny9AKCFih3WrtkeCTEciMKxf7hyXO843wCdEb8p wAiWu9FdK4GJsDulZkrydGY= =8E4a -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Windows XP Home problems
Ok, I'll respond to both responses from Mark and David. On Wed, 2004-07-07 at 03:16, Mark Lidstone wrote: Sean, Try typing in the IP address of the samba machine instead of the name. E.g. \\192.168.0.1\sharename. If that works, then you'll know it's a problem with name resolution rather than anything else. I notice that you have your Samba box setup as a WINS server, but have you remembered to tell your Windows XP machine that there's a WINS server available? I tried using the IP address, but I still get an error message saying that the network path cannot be found. As far as I know, the XP machine knows that there's a WINS server available at that IP address. On Wed, 2004-07-07 at 03:49, David Morel wrote: Le mer 07/07/2004 03:06, Sean Hendricks a crit : Any help you can give me would be greatly appreciated, as it's quite frustrating. Why would I be able to access the XP machine, but not the other way around? Use the logs on the linux box, they'll tell you what's wrong. Increase the log level as needed. I've got it set to log level 3, and when I try to connect from the XP machine, the log file doesn't register anything at all. Which is probably revealing in and of itself. What I find so odd is that the network browser on the XP machine can locate the Linux box, and recognizes it as being part of the same workgroup, but then it finds no network path to it. I can connect to the FTP, Telnet and HTTP servers on the linux machine from the XP machine with no problem. I suspect that there's some problem with authentication, but the username and password is registered in smbpasswd, and I've checked it a few times, making sure that the correct password is assigned. Are there permissions on the share that need to be altered, do you think? Thanks for working with me on this. Sean -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Point and Print
On 8 Jul 2004, at 02:23, chris wrote: ... I am now struggling with the point and print facility. I have attempted to upload the drivers from Windows XP workstations but this seems to do nothing. I had a similar problem with Kyocera drivers which insist on providing custom dialog boxes for everything. To avoid the problem, I used the CUPS Windows drivers instead of the Kyocera ones. Printing still works, I just don't get the kyocera logo all over my screen. http://www.cups.org/windows.php: CUPS generic postscript printer driver for Windows HTH HAND Alex Satrapa PGP.sig Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] IE - FF
On 7 Jul 2004, at 22:34, Shawn Henderson wrote: ... Have a script that delete the shortcuts on the desktop,quicklaunch and startmenu for Internet Exploder. At the same time installing Mozilla Fire Fox ... This used to work for Windows XP, can't remember which patch solved the problem: Go to http://www.edensoft.com/exploit.html. Adjust to download and run the Firefox/Thunderbird installers (either through a proxy or from a shared file system). Hope this provides someone with food for thought. There are apparently porn sites around which use VBScript to download a dialler application and run it automatically (that, or people don't want to confess to their telco that they thought the cracked dialler they'd downloaded would let them call the 190 number for free). Alex Satrapa Australian Phenomics Facility PGP.sig Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] ACL on Debian Sarge
Anyone know if distribution Debian Sarge incorporate Samba with ACL ? Does exist a way to verify it ? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba