[Samba] validate root locally with winbind

[Ramon Casha]

I have set up winbind successfully, but every time I need to perform any task 
as root, winbind tries to login via the domain server, which gives an 
"incorrect password" error. Is there a way to set things up so that the root 
user is only checked against the local passwd/shadow files?

-- 
Ramon Casha
Malta Linux User Group (http://linux.org.mt)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba Mount ignoring username (resolved)

[Max Kipness]

>| mount -t smbfs -o user=administrator,password=xx 
>//10.0.100.72/c$ 
>| /sharefolder

This has been resolved. I was not able to mount because I was using
"user=" instead of "username=".

I was still having trouble mapping a share from an XP workstation that
was only a member of a workgroup, but just remembered that that you must
forcefully permit sharing when you are not joined to a domain.

Thanks,
Max

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] UID for CIFS mounts

[Chris Jensen]

Hi,
Appologies if this is obvious, but the documentation isn't clear to
me, and my google skills don't seem to be up tp scratch today.

Basically:
If I mount a CIFS share as on a linux box, and then multiple users on
that machine use that share, who do they use it as? The user that
mounted or themselves (users are authenticated via pam + winbind on
the linux box)

Is it possible to have them all authenticated as them selves?

We want to have users logging in via SSH and then accessing files on a
Windows 2000 server. It's not clear to me how this would be
accomplished from the docs, as a user name is supplied when mounting
the share, how could the Windows 2000 server then trust the linux box
that the user accessing it is really a different user and not the one
who mounted it?

Does the user that mounts the share have to be a powerful user to
achieve this? Or could a guest or anonymous user mount the share since
the user permissions should be coming from those users that are
actually accessing the files.

Thanks for any help
Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Profiles

[Miles Scruggs]

Just wanted to post my solution in case anyone was following this thread.  

In my [profile] share I had the following set

[profile]
browseable = no
create mode = 0600 
directory mode = 0700 
path = /home/profile
profile acls = yes
read only = no

I just commented out the create mode line and the directory mode line.  I'm
not sure of the security ramifications of this move, but now at least it
works.  I'm still in the testing phase of this so vulnerability is no big
deal.

If someone could explain this behavior to me that would be great.  My
understanding of the bitwise create mode of 0600 is that the files would
have read,write,noexe and no perms for anyone else.  So why would this stop
the user from viewing them based on the client they logged into?

Thanks Miles


> > Even though it might not look like it is so, your profiles are likely
> > only being stored locally.
> 
> As I stated before, the profiles are saved to the server, but each client
> I
> login to using the same user, has a different profile which is saved to
> the
> same location.  For instance:
> 
> If user A logins into machine A and creates a folder A then logs out,
> folder
> A is saved on the server, when user A logs back in to machine A he sees
> folder A on his desktop
> 
> Now if user A logs into machine B he sees a blank desktop if he creates a
> folder B and logs out on the server I can see both folders A and B, but
> the
> user can only see folders that were created on the machine he logged into.
> 
> In addition the home directory is only available to the user on the
> machine
> which he first logged into.
> 
> > In our case, I have a dmusers group that each user is a member of and
> > the dmusers group has rw rights to the profiles directory on the server.
> >
> > What Windows does is store the profile on the local machine and will
> > update the 'roaming profile' on the server, if applicable. You might not
> > be seeing or receiving an error message stating that they aren't able to
> > update/upload the profile to the server.
> 
> Correct there are no errors on login from the client, but the profile is
> being saved it just isn't moving.
> 
> >
> > Check in your Windows Event viewer to see if there are any message
> > stating that.
> 
> There is one prevalent msg here, I'm not sure what it means, but here it
> is:
> "Windows has detected that Offline Caching is enabled on the roaming
> profile
> share - to avoid potential profile corruption, Offline file caching must
> be
> disabled on shares where roaming profiles are stored"
> 
> While that means good I don't have any offline file caching active on the
> shares, and I highly doubt this is the reason for my problem.
> 
> 
> >
> >  I would also check permissions on the 'profiles' directory. It might
> > need a decent alteration of the existing permissions to allow the
> > profiles to be updated.
> 
> The permsions appear to be correct, and files are being updated at that
> location.
> 
> Any other ideas?
> 
> Miles
> 
> > Miles Scruggs wrote:
> >
> > >I have a few weird problems with profiles on my samba PDC.  Right now
> I'm
> > >just testing with two XP pro clients.  Samba is
> > >Samba version 3.0.2a-Debian
> > >
> > >The problems that I'm having and I believe are related are:
> > >
> > >1.) Profiles are saved to the server, but don't migrate to different
> > >clients.  This is very odd, I can make all sorts of changes to the
> > profile
> > >and I can see those changes being saved to the server.  When I log back
> > in
> > >those changes are loaded to the local machine, if I try to login to
> > another
> > >client, I see a totally separate profile.
> > >
> > >The kicker is that all data is being saved to the same path, but
> somehow
> > it
> > >can differenetite which client is logging in.
> > >
> > >2.) Once the profile is created on one client, the home dir is writable
> > to
> > >only that client.
> > >
> > >The home dirs and profile dir is two separate locations
> > >
> > >/home/%u for homedirs
> > >/home/profile/%u for profiles
> > >
> > >
> > >Thanks for the help
> > >
> > >Miles
> > >
> > >
> > >
> > >
> >
> >
> > --
> >
> > Regards,
> > Robert Adkins
> > IT Manager/Buyer
> > Impel Industries, inc.
> > 586-254-5800
> >
> >
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Serious doc bugs

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Huh!?  This is man page is really not very helpful.  Does the command
run before or after the disconnect?  What exactly is the shell
environment? Why does it run as root if there is a separate setting just
for this, i.e. "root postexec"?  I ran with "echo $USER > /tmp/err.txt"
as the command and it spat out "root". I've tried everything I can think
of to get the script to run as the user. That was mostly one or another
use of "su" but none of it works.
Dis do not make sense.
Oh, and another thing.  What about those escapes below, i.e. postexec =
echo \"%u disconnected from %S ...? Where does it say what needs to be
escaped and when? Is it just quotes or is there more?  Would it be
better for me to use single quotes?
Jim C.
|postexec (S)
|   This option specifies a command to be run whenever  the
 service
|   is  disconnected.  It takes the usual substitutions. The
command
|   may be run as the root on some systems.
|
|   An interesting example may be to unmount server resources:
|
|   postexec = /etc/umount /cdrom
|
|   Default: .nf postexec =
|
|   Example: .nf postexec = echo \"%u disconnected from %S
from  %m
|   (%I)\" >> /tmp/log
|
|   Related are: .TP 3 · preexec .LP
|
|exec   This parameter is a synonym for preexec.
|

- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA7g8957L0B7uXm9oRAnLWAJ9D+CsR+idrxoW2wQgo9Sbox7lxSQCfeGuR
3Rgit/YfDjXrsm4tUxlxRQs=
=3YIZ
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba Mount ignoring username

[Max Kipness]

>Max Kipness wrote:
>| Hello -
>|
>| When trying to create a mount to an XP workstation I continue to get 
>| ERRDOS - ERRnoaccess (Access denied). When I turned on 
>logging on the 
>| XP workstation I discovered that it's logging a failed login attempt 
>| by ROOT, and also using the default workgroup name that is 
>entered in 
>| the smb.conf file.
>| Basically it is ignoring the paremeters that I'm entering 
>with the mount
>| command. The following command is what I'm using
>|
>| mount -t smbfs -o user=administrator,password=xx 
>//10.0.100.72/c$ 
>| /sharefolder
>|
>| This is the local administrator user to the workstation.
>|
>| Here is what is logging on the XP workstation:
>|
>| Logon Failure:
>|
>| Reason: Unknown user name or bad password
>| Username: ROOT
>| Domain: mygroup
>| etc, etc.
>|
>| Can anyone offer some help on this one? Why is it ignoring my user 
>| statement, I'm I typing it wrong?
>|
>| Thanks,
>| Max
>|
>
>i don't know about user option, i normaly use 
>"username=administrator,..." you should try it.

Thanks. You were right. I don't know how I missed that.

Now, I'm able to map the $c drive of one XP workstation that is joined
to a domain by using:

username="domainname\username"

But I'm not able to map any shares to an XP workstation that is just a
member of a workgroup. I've tried the following:

username="username"
username="computername\username"
username="username",workgroup="computername"

I get access denied from all of them.

Any other suggestions?

Thanks,
Max

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3.0.5rc1 Available for Download

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

This is a release candidate snapshot of the Samba 3.0.5 code base and
should be considered for testing only.  A release candidate (RC) means
that we are close to the final, stable release and in provided for Quality
Assurance (QA) purposes. This release is *not* intended for production
servers.  Use at your own risk.

There have been several bug fixes since the 3.0.4 release that we feel are
important to make available to the Samba community for wider testings.

Common bugs fixed in 3.0.5rc1 include:

  o Corrupt workgroup names in nmbd's browse.dat.
  o Sharing violation errors commonly seen when opening
when serving Microsoft Office documents from a Samba 
file share.
  o Browsing problems caused by an apostrophe (') in the 
computer's description field.
  o Problems creating special file types from UNIX CIFS 
clients and enabling 'unix extensions'.

New features introduced in this release include:

  o Using a cups server other than localhost.
  o Maintaining the service principal entry in the system 
keytab for integration with other kerberized services.
Please refer to the 'use kerberos keytab' entry in 
smb.conf(5).  When using the heimdal kerberos libraries,
you must also specify the following in /etc/krb5.conf:
[libdefaults]
   default_keytab_name = FILE:/etc/krb5.keytab
  o Support for maintaining individual printer names
stored separately from the printer's sharename.

The source code can be downloaded from:

 http://download.samba.org/samba/ftp/rc/

The uncompressed tarball and patch file have been signed using GnuPG.  
Please read the instructions for verifying the tarball signature at
http://www.samba.org/samba/download.html#verify

The Samba public key is available at

 http://download.samba.org/samba/ftp/samba-pubkey.asc

Links to binary packages can be found on the release announcement at

 http://www.samba.org/samba/samba.html

The release notes are also available in the same directory.

As always, all bugs are our responsibility.

--Enjoy
The Samba Team

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFA7gtDIR7qMdg1EfYRAsY0AJ4kbui5uWgUbycfGMtZVUkl6XEd6QCgvrvv
5TJ6/vECIJee7AcChjc5PE0=
=8tsQ
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba Mount ignoring username

[Max Kipness]

Hello -

When trying to create a mount to an XP workstation I continue to get
ERRDOS - ERRnoaccess (Access denied). When I turned on logging on the XP
workstation I discovered that it's logging a failed login attempt by
ROOT,
and also using the default workgroup name that is entered in the
smb.conf file.
Basically it is ignoring the paremeters that I'm entering with the mount
command. The following command is what I'm using

mount -t smbfs -o user=administrator,password=xx //10.0.100.72/c$
/sharefolder

This is the local administrator user to the workstation.

Here is what is logging on the XP workstation:

Logon Failure:

Reason: Unknown user name or bad password
Username: ROOT
Domain: mygroup
etc, etc.

Can anyone offer some help on this one? Why is it ignoring my user
statement, I'm I typing it wrong?

Thanks,
Max

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows 2K outperform Linux/Samba very much?

[Jacky Kim]

Thank Mark.

Yeah, it gains about 30% performance raise to set 'case sensitive=yes'.
But Windows's share is still about 8 times faster than Linux/Samba's .

After several tests, I find that XFS's performance is very near to Reisfer
when checking files' property.

So I think the main problem is caused by samba not File system.
Is there any other config I can set?

Best Regards!

Jacky Kim
.

>You can use the configuration options to force filenames to a particular
>case, and then bypass the slow case-insensitive matching by forcing case
>sensitivity:
>
>   mangle case = yes
>   case sensitive = yes
>   default case = lower
>   preserve case = no
>   short preserve case = no
>
>
>However, on sharing a VFAT filesystem, perhaps you can preserve case,
>and gain the speed increase by just setting 'case sensitive=yes'.
>




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba looses its print share

[Joern Knechtel]

 Karel De Vriendt wrote:
 
 > I am using Samba 3.0.4-1.12 under SuSE 9.1 to make my printer (an HP
 > PSC950) available to the rest of the family (that is using Windows
 > machines).  The printer is configured via CUPS.
 > 
 > OK except for one thing: regularly, Samba seems to loose the print share
 > (printer no longer reachable from the Windows machines, printer no
 > longer listed as shared when I do "smbclient -L localhost -U%".
 > 
 > Stopping and restarting smb (./smb stop and ./smb start as root)
 > normally cures the problem.
 > 
 > Happens every couple of days.
 
 Have the same problem on several servers too.
 Did some kinda workaround by writing a samba reload into a
 cronjob every day prior the working hours.
 Not very elegant but helps. Maybe someone can put a light
 on us :-)
 
 jk

PS: Running a combo of Debian & Samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba doesn't ask for a password

[Thomas Klettke]

Just to be sure: Did you set a password for the users on the Samba
server?


On Thu, 2004-07-08 at 16:53, Udo wrote:
> Hi,
> 
> I installed Samba 3.0.2a (on Mandrake 10.0). I created 2 users on the Linux
> box, which I "converted" to Samba users (using de Webmin interface). The
> Samba server is running.
> On a Win98 I log in (log in the win98 box -- no domain set, only workgroup!)
> using one of the users I created. I do not use any password, neither is
> Win98 configured to verify any passwords. I simply type in a username, no
> password. It's that old simple network login window.
> Well, now I open \\vovo\udo (the user I used to log in to the win98 machine)
> and I can see and edit the files of this users' home directory on the Linux
> (Samba) server. I can even open \\vovo\horst, which is the other users'
> home, but read-only in that case. But I need samba to ask for a password,
> which it never did. I deleted de .pwl files on the windows machine and got
> the same behavior.
> 
> How do I tell Samba to ask for the users' password to connect to one users'
> home? After reading the docs I googled for a long time now, and haven't
> found anything that helped me to solve this. Actually, the way I undestood
> the docs, it should be pretty simple to do this, but I simply can't figure
> it out!
> 
> Thanks in advance for any help!
> 
> Btw, below is my smb.conf. It may be a little messed up now, 'cause I
> already tried a lot of different options.
> 
> udo
> #-
> [global]
> workgroup = HOTUP
> server string = Samba Server %v
> log level = 4
> log file = /var/log/samba/log.%m
> max log size = 50
> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> printcap name = cups
> dns proxy = No
> ldap ssl = no
> printer admin = @adm
> printing = cups
> 
> [homes]
> comment = Home Directories
> read only = No
> browseable = No
> 
> [printers]
> comment = All Printers
> path = /var/spool/samba
> create mask = 0700
> guest ok = Yes
> printable = Yes
> print command = lpr-cups -P %p -o raw %s -r   # using client side
> printer drivers.
> browseable = No
> 
> [print$]
> path = /var/lib/samba/printers
> write list = @adm, root
> inherit permissions = Yes
> guest ok = Yes
> 
> [pdf-generator]
> comment = PDF Generator (only valid users)
> path = /var/tmp
> printable = Yes
> print command = /usr/share/samba/scripts/print-pdf %s ~%u //%L/%u %m
> %I "%J" &
> 
> [publico]
> path = /public
> read only = No
-- 
"There are 10 groups of people in the world:
Those who understand binary, and those who don't."


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Profiles upload but don't download?

[Joshua Ginsberg]

Hello --

I'm testing out using 3.0.3 from the Fedora Core 2 distro (recompiled
from SRPM to include ldapsam) as a PDC with an OpenLDAP backend. I've
got the PDC functions working excellently. I've got Roaming Profiles
(with the PDC as the profile host) partially working, but I can't get
the full functionality I want.

I have two test workstations that I'm working with. I joined the first
(XP Pro SP 1) to the domain, rebooted, and logged in using a normal user
account authenticated off of the PDC. A new, blank roaming profile was
created. On the desktop I made an empty folder for testing purposes. I
then logged out.

I then joined the second machine (XP Pro) to the domain, rebooted, and
logged in using the same normal user account. The empty folder appeared
on the desktop as expected. As another test, I deleted the folder and
then logged out.

I looked on the PDC in the folder where the empty folder was created,
and though that empty folder had been deleted from the second
workstation and the profile supposedly saved, the folder remained on the
PDC. I manually deleted the empty folder from the command line on the
PDC.

Then I logged back into the first workstation. The empty folder existed
on the Desktop even though it didn't exist on the PDC. I logged back out
of the first workstation and looked at the PDC again. The first
workstation in saving the profile recreated the empty folder on the PDC.

Then I logged back into the first workstation again where the empty
folder reappeared on the desktop. I then deleted the folder from the
desktop and logged out. The PDC still has the empty folder, however
logging back into the first workstation I see that it does not.

So as a final test, I logged into the second workstation and created a
new empty folder on the desktop and then logged out. The new empty
folder did appear on the PDC. Then I logged back into the second
workstation and renamed the new empty folder I had created. After
logging out and looking at the PDC, I find that the PDC has two copies
of that empty folder, one with the name when it was created, and one
with the renamed name.

The net effect I'm observing is that I can't seem to get either of the
two machines to refresh their copies of the Roaming Profile from the
PDC. The machines will push their profiles back onto the PDC, but only
new files -- any ones deleted or renamed aren't reflected on the PDC.

I've tried going into MMC and enabling the "Delete cached copies of
Roaming Profiles on Logout" flag, but it doesn't seem to have an effect.

Any suggestions on how to get these profiles to properly synchronize
themselves on login and logout? The smbd.log doesn't appear to contain
any useful information. Thanks!

-jag

-- 
Joshua Ginsberg <[EMAIL PROTECTED]>
Brainstorm Internet Network Operations

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: PDC Administrative scripting

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
OOooOooOO Fancy, shmancy. ;-)
I'm thinking of useing a bash script wrapper around another called
rmtotrash (renamed to dl for delete) by Philip Clarke to remove files to
the users trash in his or her home directory. This way if one of your
users comes whining (in a stylized nasal voice): "My important files got
deleted!" you can say "Really, you don't say?  How important were they?"
and make a decision on weather or not to tell them that they are still
available through the trash directory on the homes share. ;-)
Jim C.
BTW, some of the code is missing from below.
|> I am more interested in preventing files over a certain size.
|
|
| Excelent idea! Barrowing from the piece of code I wrote to answer the
| first question, here is a custom script for you...
|
| /* Sample code to search and destory! */
| searchlist='.mp3 .wav .avi'
| maxokfilesize=1
| do s=1 to searchlist~words()
|rc=SysFileTree('/homes/*'searchlist~word(s), filelist., 'FS')
|if filelist.0>0 then do f=1 to filelist.0
|   parse value filelist.f with . . THISsize . THISfilename
|   if THISsize>maxokfilesize then do
|  rc=SysFileDelete(THISfilename)
|   end
|end
| end
|
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA7dL457L0B7uXm9oRAs5wAJ4uXzQ6baxOgae8Ycg9YjBtlmgXOQCfWJ2G
mX5IyP36Ky3gJ5KXqyt1Qqo=
=W801
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] best filesystem choice for samba (was: new user cannotlogon)

[Malcolm Baldridge]

Quoting Mark Lidstone <[EMAIL PROTECTED]>:

> ARGH!  I'm wondering if airing thoughts about VFAT performance publicly
> was a good idea.

I doubt VFAT's case insensitivity would be worth dealing with its terrible
linear-search-time directory lookup methods.

The reason I suggested reiserfs (or ext3 with directory hashing) is to
reduce the high costs of locating a directory entry within a directory of
many (> 10,000) files.

msdos/vfat does not offer superior directory lookup times, and from my
limited testing, neither does NTFS.

ext2/ext3 in stock configuration is also slow, though it appears very recent
kernels/ext2fsutils offer an FFS-like "directory hashing" option which needs
a format-time decision to be made upon setting up the filesystem.

I have no knowledge about XFS or JFS and how they compare.  I know both are
"industrial" filesystems brought down from the Ivory Towers onto the
pipsqueak platforms.

As for "horror stories", well, each filesystem has had their respective
tales of misery and woe... ext3 had shocking and fatal dataloss bugs in the
adolescent versions of 2.4.x., and some RAID + reiserfs configs saw some
real wowsers as well.  From bug reports/changelogs, I've seen similar tales
of woe for XFS and JFS if you trigger just the right combination of things.

>From my own experiences, things have matured and stabilised with reiserfs
and ext3 to the point where using either is fine for my purposes.

The decision comes down to:

1) Do you need quotas?  If yes, you cannot use reiserfs.
2) Do you need ACLs?  If yes, only ext2/ext3 has well-tested seamless
support, though I think there are wildcat patches to bring this to XFS (and
maybe others) as well.  I'm not sure about the stability of this.

ext3 used with -O dir_index *MAY* provide better performance for large
directory list lookups, but I've never tested it.  It requires Linux 2.6 for
starters for the kernel-side stuff to actually support it properly. 
grepping the linux 2.4 source shows no mention of hashing b-trees or
dir_index options for ext[23].

This is a RECENT addition to ext3, and I don't think the support actually
exists within 2.4 yet.  I've seen mention of "special backported patches"
but this smells scarier to me than using filesystems which have been
seamlessly integrated for over a year or so now.

So in terms of viable performance-driven alternatives, I see it being
reiserfs, xfs, or jfs.

vfat/dos isn't faster, even with case insensitive semantics, for directory
sizes of 20,000 or more.

=MB=

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: PDC Administrative scripting

[Michael Lueck]

Jim C. wrote:
I am more interested in preventing files over a certain size.
Excelent idea! Barrowing from the piece of code I wrote to answer the first 
question, here is a custom script for you...
/* Sample code to search and destory! */
searchlist='.mp3 .wav .avi'
maxokfilesize=1
do s=1 to searchlist~words()
   rc=SysFileTree('/homes/*'searchlist~word(s), filelist., 'FS')
   if filelist.0>0 then do f=1 to filelist.0
  parse value filelist.f with . . THISsize . THISfilename
  if THISsize>maxokfilesize then do
 rc=SysFileDelete(THISfilename)
  end
   end
end
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba doesn't ask for a password

[Udo]

Hi,

I installed Samba 3.0.2a (on Mandrake 10.0). I created 2 users on the Linux
box, which I "converted" to Samba users (using de Webmin interface). The
Samba server is running.
On a Win98 I log in (log in the win98 box -- no domain set, only workgroup!)
using one of the users I created. I do not use any password, neither is
Win98 configured to verify any passwords. I simply type in a username, no
password. It's that old simple network login window.
Well, now I open \\vovo\udo (the user I used to log in to the win98 machine)
and I can see and edit the files of this users' home directory on the Linux
(Samba) server. I can even open \\vovo\horst, which is the other users'
home, but read-only in that case. But I need samba to ask for a password,
which it never did. I deleted de .pwl files on the windows machine and got
the same behavior.

How do I tell Samba to ask for the users' password to connect to one users'
home? After reading the docs I googled for a long time now, and haven't
found anything that helped me to solve this. Actually, the way I undestood
the docs, it should be pretty simple to do this, but I simply can't figure
it out!

Thanks in advance for any help!

Btw, below is my smb.conf. It may be a little messed up now, 'cause I
already tried a lot of different options.

udo
#-
[global]
workgroup = HOTUP
server string = Samba Server %v
log level = 4
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = cups
dns proxy = No
ldap ssl = no
printer admin = @adm
printing = cups

[homes]
comment = Home Directories
read only = No
browseable = No

[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
guest ok = Yes
printable = Yes
print command = lpr-cups -P %p -o raw %s -r   # using client side
printer drivers.
browseable = No

[print$]
path = /var/lib/samba/printers
write list = @adm, root
inherit permissions = Yes
guest ok = Yes

[pdf-generator]
comment = PDF Generator (only valid users)
path = /var/tmp
printable = Yes
print command = /usr/share/samba/scripts/print-pdf %s ~%u //%L/%u %m
%I "%J" &

[publico]
path = /public
read only = No



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Editing Policies

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
How do I do this?
Situation:
Samba 3.0 LDAP box with 3 XP Pro clients and 1 2K client.
How can I go about editing polices and saveing out the GPO file?  I
can't find the snap in "Active Directory for Users and Groups".
I need a policy that will:
1. Make members of the domain "Power Users" group members of the local
group of the same name.
2. For all users, redirect My Documents and Application Data to a spot
on the users home share.
3. For all users, restrict the size of files that can be placed on the
desktop.

- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA7b3157L0B7uXm9oRAiqQAJ4nbhOopQLkoYtEY3brrSYJMcr2UACbBLTd
TIOeHfgVRCKmq6lWvEQEa2g=
=c08f
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Can't upload driver for point 'n' print (or even bring up the properties window)

[Kyle Miller]

Hi all,

I'm using samba 3.0.3 from the Fedora Core 2 updates 3.0.3-5 rpm, and
have configured a simple printer that will generate PDFs for me. I'm
following the HOWTO, trying to setup my printer so that my users can
use point 'n' print, but having no luck uploading the driver to the
printer.

Using the add printer wizard and manually configuring the print
driver, I CAN print to it successfully. It is just the uploading of
the driver that I can't seem to make work. I have tried from both an
XP Pro and 2K Server client

The HOWTO says I should browse to the samba server's "printers" (or
printers & faxes on XP) share, then right-click the printer and select
properties, which should result in the error message "Device settings
cannot be displayed. The driver for the specified printer is not
installed, only spooler properties will be displayed. Do you want to
install the driver now?" -- Instead, I get this message:

"Printer properties cannot be displayed. The operation could not be
completed".  It has an OK box, which just dismisses the error, that's
it.

smbstatus shows that I am connected as a user that should be able to
do this (tried both as root and the printer admin)

Since I can't get to the properties window, I can't upload the driver.
Does anyone know why this would be happening? I searched around the
web and this list, and saw some other instances of this problem, but
never a solution.

My smb.conf is below, maybe I've set something up wrong?


I really appreciate any help that you might be able to provide.

Thanks,

Kyle

---
config file:
---

# Samba config file created using SWAT
# from 127.0.0.1 (127.0.0.1)
# Date: 2004/07/07 14:28:10

# Global parameters
[global]
workgroup = MYGROUP
netbios name = KYLESMB
server string = Samba Server
log file = /var/log/samba/%m.log
max log size = 50
dns proxy = No
printer admin = kyle
show add printer wizard = Yes
[homes]
comment = Home Directories
read only = No
browseable = No

[print$]
comment = Print Driver Auto-Download
path = /etc/samba/drivers
write list = root
read only = Yes
browseable = No
guest ok = No
[newpdf]
comment = PDF Mailer
path = /tmp
printable = Yes
printing = bsd
browseable = Yes
guest ok = No
read only = Yes
print command = /usr/bin/makeauthpdf %s %U 2>&1 > /tmp/out.txt
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba3

[Bill Mann]

I got a reply to this that I needed to upgrade SWAT as well.  I'm not sure I
know how to do that but can learn.  I did, however, vuninstall 2.2.8,
reinstalled 3.0 with the make config command, rebooted, and both SWAT and
Webmin still show 2.2.8 installed!  Any more idea?  HELP! (grin)

Bill Mann

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Bill Mann
Sent: Sunday, July 04, 2004 4:53 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Samba3

My server provider only supports Samba 2.2.8.  I need 3.0 to fully
appreciate my XP Pro and Microsoft Office 2003 Pro products.  I've installed
3.0 but it does not seem to be there.  When I run SWAT, it still reports the
version to be 2.2.8.

 

Any suggestions?

 

Bill Mann

W. D. (Bill) Mann, Sr., LUTCF, RHU

The Benefits Office, an RMA Company

P. O. Box 1884

Cypress, TX 77410-1884

281-374-6071 Ext. 104 Office

281-374-6077 Company Fax

832-615-3028 Direct Fax

713-907-2129 Cell

 

 

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] OS X Panther and Samba 3 give me no access to a 2003 share

[Brian Ibbott]

What was the solution to this? I'm having the same problem - right down 
to the console description.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] joining a domain

[Mikhail Kruk]

Hi,

I'm trying to put a Linux system on a Windows domain and got stuck

We have two domains: COMPANY-SUPPORT and COMPANY-CORP. I am a user of 
COMPANY-CORP domain. I want to put my linux box into COMPANY-SUPPORT 
domain and access it as the COMPANY-CORP user.
I have Samba 2.2.1a. 
I have put the following lines into my  /etc/samba/smb.conf file (relevant 
lines only):
workgroup = company-support
password server = companysupport
username map = /etc/samba/smbusers
security = domain
allow trusted domains = yes
encrypt passwords = yes

I created the computer account in the COMPANY-SUPPORT domain.
I then ran smbpasswd -j COMPANY-SUPPORT
and it worked fine.

I then added a line to the /etc/samba/smbusers:
meshko = "COMPANY-CORP\Mikhail Kruk"
and
root = "COMPANY-SUPPORT\admin"

Now on a Windows box I browse to my Linux system and see a list of shares. 
smbstatus shows that I'm connected as anonymous.
Then I try to open one of the shares and get a login prompt. The only 
thing that works at the login prompt is if I type in meshko and a password 
-- I have previously created smbpasswd entry for that user (before joining 
the domain).
What am I doing wrong? Please help!

(I'm not subscribed so please cc:, thanks)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Hi, question about SQUID + SAMBA

[Norman Zhang]

CDL_Samba wrote:
 Hi , i need to know if SQUID can authenticate with samba.
 I read some howto but all talk about domain controllers , and i think that
 smbpasswd must be authenticate via smb_auth  im rigth?
http://www.squid-cache.org/Doc/FAQ/FAQ-23.html#ss23.5
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Fw: [Samba] Hi, question about SQUID + SAMBA

[CDL_Samba]

 Hi , i need to know if SQUID can authenticate with samba.
 I read some howto but all talk about domain controllers , and i think that
 smbpasswd must be authenticate via smb_auth  im rigth?
 
 
 Thanx in advance.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba looses its print share

[Karel De Vriendt]

I am using Samba 3.0.4-1.12 under SuSE 9.1 to make my printer (an HP
PSC950) available to the rest of the family (that is using Windows
machines).  The printer is configured via CUPS.

OK except for one thing: regularly, Samba seems to loose the print share
(printer no longer reachable from the Windows machines, printer no
longer listed as shared when I do "smbclient -L localhost -U%".

Stopping and restarting smb (./smb stop and ./smb start as root)
normally cures the problem.

Happens every couple of days.

Any clue?

Thanks in advance for helping, Karel De Vriendt

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] ACL on Debian Sarge

[Marcel de Riedmaten]

Le jeu 08/07/2004 à 07:37, Marco Gavaldo a écrit :
> Anyone know if distribution Debian Sarge incorporate Samba with ACL ?

I use the sid one and it do. 

> Does exist a way to verify it ?

apt-get cache samba and look into the debian/rules file for the
configuration options. 

You can do smbd -b  and look for HAVE_SYS_ACL_H but i am not 100% sure
its a proof. 

-- 
Marcel de Riedmatten



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] 3.0.4 Causes Major Problems: Arcserve, Machine Account Ownership

[AHBLWEB]

I upgraded Samba from 3.0.0 to 3.0.4 to see if I could resolve an
intermittent file moving problem with our document management system.  Now
the DMS problem is still there but Arcserve can no longer connect and I find
a whole slew of folders owned by my laptop's machine account.
 
The latter I can manually fix but the former, at least at this point in
time, requires a patch that Jerry has made.   Does anyone have a patched
Samba they can point to or a rebuilt Fedora RPM?
 
Thanks
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: PDC Administrative scripting

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I am more interested in preventing files over a certain size.  It should
be much easier than trying to prevent a horde of file types.  In theory,
I could limit sizes to exactly that needed for shortcuts effectively
limiting the user to mostly just shortcuts on his desktop.
Jim C.
P.S. There really does need to be a scriptorium somewhere.  Some of
these might even be candidates for inclusion in the packages.
| It's been quite some time since I've posted to the samba lists.  I'm
| wondering if there are any other Samba administrators out there that have
| developed shell and/or PERL scripting for managing user profile (roaming)
| directories.  Essentially what we're trying to accomplish is automated
| cookie cleanup "illegal file" (i.e., mp3, wav, avi, etc.) file clean up
| and the like.  Our original shell scripting didn't work due to some file
| naming convention problems.  Before I re-invent the wheel I was hoping to
| find someone that might have already accomplished this or could point me
| somewhere.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA7Zq357L0B7uXm9oRAuWxAJ4w/WAUDze6u+Yut1Q2jw+LLCIiHgCdHovD
7qsJtv+DjLW8x4Lj6IvjLj4=
=73St
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Hiding some stuff

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
root preexec = PROFILE=/var/lib/samba3/profiles/%u; if [ ! -e $PROFILE ]; \
~then mkdir -pm700 $PROFILE; chown "%u"."%g" $PROFILE;fi
Oops. I mean with the exception of the stupid "~" marks above my mailer
keeps inserting, it is copyable.
| The quotes around %u and %g are what allow user and group names with
| spaces in them to be used. The "\" at the end of the first line is legal
| smb.conf syntax for a line break so this can be copied as is. :-)
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA7ZvM57L0B7uXm9oRAtUtAJ0bmWUpJY5AMPCnkvcPLiUc/Gy7YACgh0Ao
I78qQniGB1AJfgoADeRtWAE=
=igiu
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Restricting File Sizes

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
How can I restrict the sizes of files users are allowed to have on thier
~ desktop?  I am trying to discourage storeing files there.
Jim C.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA7Zgn57L0B7uXm9oRAhaVAJwOrgbSV7CC/IYBgJpU6CQM/HznxwCfT1VR
kAVDH2fkQ3wcx0Uk5dgw4/Q=
=BtmI
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Printing problem with Samba 3

[Artem Kuchin]

I just upgrdaded to FreeBSD 5.2 CURRENT
and installed samba 3.0.3pre2.
I have copied /etc/printcap  and samba config
from the previous installtion (FreeBSD 4.8 and
samba 2.x)

Now,  i cannot print anything from windows xp
(i only have windows xps, so i cannot tell if it works
from other windows but i guess it does not).

When i printed the data is sent to the printer and
no error shows up on windows client, but nothing
really happens. Nothing printed.
lpr -Php1200 rawfile - work file
but printing via samba does not work.
I see filed from windows client spooled into
/var/spool/samba but then after a few seconds they
disappear and nothing happens.

I just don't known where the problem might be.

Here is my smb.conf
global]
workgroup = ITLEGION
netbios name=Osiris
null passwords=yes
server string = ""
guest account = pcguest
log file = /var/log/samba/log.%m
log level= 2
max log size = 500
security = share
encrypt passwords = yes
socket options = TCP_NODELAY
local master = yes
os level = 33
preferred master = yes
bind interfaces only = yes
dos charset=866
interfaces=fxp*
display charset = KOI8-R
unix charset = KOI8-R
wins support = yes
create mask = 640
irectory mask = 750
disable spoolss =yes

printing = bsd
printcap name = /etc/printcap
load printers = yes
use client driver = yes

[printers]
comment = All Printers
path = /var/spool/samba
public = yes
writeable = no
read only = yes
printable = yes
browseable = no
print command = /usr/bin/lpr -r -P'%p' %s
lpq command = /usr/bin/lpq -P'%p'
lprm command = /usr/bin/lprm -P'%p' %j
use client driver = yes

[hp1200]
comment = HP1200 on LPT
path = /var/spool/samba
browseable = yes
printable = Yes
writeable = no
public = Yes
guest only = yes
printer name = hp1200
use client driver = yes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Restricting file types

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
What about files over a certain size?  That is really what I need.
Jim C.
| Is it possible to limit what filename extensions can be stored in a
| samba share? We use samba to allow our windows web designers to use drag
| and drop when deploying new pages on our website. We want to be able to
| limit which filename extensions can be saved to these shares. Is this
| possible and if not and alternatives?
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA7ZfX57L0B7uXm9oRApE1AJ4qO1e9p2bE9oVtVRQIJKnV46zwwwCeNWmQ
Yb0Q+fnCI9AySDg27mUfhqs=
=H8o3
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.0.4 acl problem

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Prajjwal wrote:
| I can view and modify any permissions on the existing
| files that are  being shared.  If setfacl has been used
| to grant additional users  permissions, then those users
| are also displayed, and their permissions  can also be set.
|
| However, if I try to add any new users to the acl, a
| dialog box pops up,  asking me to provide it with the
| username and password of a user with  permissions to modify on
| my domain, and when I supply the username and password, the
| dialog responds that multiple connections to the shared
| resource are not allowed, and it asks me to close all
| other connections  before trying again.
This is a 2k -> NT interoperability bug.  We spent a good bit
of time on this before 3.0.0 was released.  Don't rmember
the bug number right now.  You can recreate the exact same
behavior between 2k and an nt4 standalone file server.
There was no workaround except to use Samba as a PDC instead
of a standalone server.  Or possibly to connect to share using
the IP of the Samba server instead (this causing the user
enumeration to the netbios name).
Hope this helps.

cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." --- Sting
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA7ZTCIR7qMdg1EfYRAvFtAJ9ewgjYO8zG+a8RcttmW6X4JpJsjwCg8lQE
8u3fEXoNnh/j7/klPeTalfk=
=K7ye
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Restricting file types

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
What about a means of preventing ALL files except a few types?
I would like to keep users from saving files to thier desktops that are
not shortcuts.
Jim C.
| Is it possible to limit what filename extensions can be stored in a
| samba share? We use samba to allow our windows web designers to use drag
| and drop when deploying new pages on our website. We want to be able to
| limit which filename extensions can be saved to these shares. Is this
| possible and if not and alternatives?
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA7ZST57L0B7uXm9oRArl3AJ42ipXd/xivVWYy+w9moalamSiytwCaA1tG
ZgNWQEGQclWu1XcOovQQdEg=
=qK7K
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: new user cannot logon

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
| I've set up a samba3.0.3 as pdc for my w2k-domain with ldapsam-backend
...
| in the log file I found:
| [2004/07/08 13:08:15, 3] auth/auth.c:check_ntlm_password(219)
|   check_ntlm_password:  Checking password for unmapped user
[EMAIL PROTECTED]
| with the new password interface
| [2004/07/08 13:08:15, 3] auth/auth.c:check_ntlm_password(222)
|   check_ntlm_password:  mapped user is: [EMAIL PROTECTED]
| does this mean, samba cannot find the user?
| when I do a "pdbedit -Lv" everything seems o.k. and the user can also
logon
| directly on the linux system.
No it probably means that user VERBUND was found and not re-mapped to a
Unix account in /etc/smbusers, so there must be a different problem.
One thing I noticed was that the smbldap-passwd scripts *DO NOT* set the
users windows passwords when you use "smbldap-useradd -a -P" where "-P"
sets only the unix password.  smbldap-passwd on the other hand sets both.
Ans: Try re-setting the users password with smbldap-passwd.
Jim C.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA7ZM757L0B7uXm9oRAq9JAJwN4vtA9u9rMNJri46tLfkeq+GE8QCfWXgp
U0YPivrpD8QLC7WfODFI5l4=
=NByd
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Oplocks and Office 2000 SP3

[Umberto Zanatta]

Thank you.

It was a problem with profile acls = yes;

It must be 'no'.

Il gio, 2004-07-08 alle 16:31, Michael Lueck ha scritto:

> Umberto Zanatta wrote:
> 
> > I have serious problems to manage oplocks on Samba Share.
> > 
> > Some clients have been installed Office 2000 SP3 + Windows XP SP1; they
> > aren't working because Word+ Excel save files only read-only when reopen
> > the
> > file and I try to save.
> 
> I don't quite follow what you are seeing. Are you talking about the DOS based 
> Read-Only attribute bit?
> 
> Or the feature in Office where when you open a file which someone else has open, 
> Office says it is opening the document read-only? It sounds like maybe this is more 
> likely. I don't see where OptLocks 
> would be at fault here - that is the entire file itself in this case.
> 
> I have Win2K SP4 OS here and can pull down Office XP SP2 to see if it does something 
> incorrectly.
> 
> -- 
> Michael Lueck
> Lueck Data Systems
> 
> Remove the upper case letters NOSPAM to contact me directly.

___
Umberto Zanatta
linuxDidattica

tel: +39 (335) 54 71 385
email: [EMAIL PROTECTED]
web: http://linuxdidattica.org
___
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Oplocks and Office 2000 SP3

[Umberto Zanatta]

It was a problem with profile acls = yes.

It should be 'no'.
 


Il gio, 2004-07-08 alle 20:22, Jim C. ha scritto:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Sure this isn't a problem with "create" mask parameters?
> 
> | I have serious problems to manage oplocks on Samba Share.
> ...
> | I disabled kernel oplocks, oplocks and level2 oplocks but it doesn't
> | work.
> - --
> 
> - -
> | I can be reached on the following Instant Messenger services: |
> |---|
> | MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844   |
> |---|
> | Y!: j_c_llings   Jabber: [EMAIL PROTECTED]  |
> - -
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.2.3-nr1 (Windows XP)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFA7ZDn57L0B7uXm9oRAoxvAJ92JN+qoUjkIc7aL4idJnb9h1eejwCfXd54
> ZNzuByU6dMjeAfdEy2ac3/E=
> =2obE
> -END PGP SIGNATURE-

___
Umberto Zanatta
linuxDidattica

tel: +39 (335) 54 71 385
email: [EMAIL PROTECTED]
web: http://linuxdidattica.org
___
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Oplocks and Office 2000 SP3

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Sure this isn't a problem with "create" mask parameters?
| I have serious problems to manage oplocks on Samba Share.
...
| I disabled kernel oplocks, oplocks and level2 oplocks but it doesn't
| work.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA7ZDn57L0B7uXm9oRAoxvAJ92JN+qoUjkIc7aL4idJnb9h1eejwCfXd54
ZNzuByU6dMjeAfdEy2ac3/E=
=2obE
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Hiding some stuff

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Mário Gamito wrote:
| Hi,
|
| Is there a way i could hide "netlogon", "profiles", "homes", etc., from my
| windows 2000 users ?
| Will "hide files" solves the issue, or is there another way ?
|
| Any help would be appreciated.
|
| Warm Regards,
| Mário Gamito
|
|
This is what we did to keep users from mucking up our profiles dir:
1. Hide it.
2. Make it inaccessible even when they do find it.
I got a tip from the Mandrake Expert list from Fajar Priyanto on how
this can be achieved:
First, In the profiles share set "browseable = no" as discussed earlier
in this thread.
Second we take away writeability to /var/lib/samba/profiles from the
domain like this:
chmod 755 /var/lib/samba/profiles
chown root.root /var/lib/samba/profiles
Third, we give Samba an alternate means for dynamicly createing user
profile directories by adding a script that executes just prior to the
user gaining access to the profile service.  In the profiles share add
this line:
root preexec = PROFILE=/var/lib/samba3/profiles/%u; if [ ! -e $PROFILE ]; \
~then mkdir -pm700 $PROFILE; chown "%u"."%g" $PROFILE;fi
The quotes around %u and %g are what allow user and group names with
spaces in them to be used. The "\" at the end of the first line is legal
smb.conf syntax for a line break so this can be copied as is. :-)
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA7Y6557L0B7uXm9oRAg/jAJ9ZQHs5/FUvefjz9gWOOxiz9ME1IACfUgFj
DNPq2aUcgSD/f3vXNYdkXAs=
=mN+S
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] XP Pro SP1a login problem

[Brad Sagowitz]

Wondering if anyone can help.

Here is my situation, I have a RH 7.3 machine running a compiled from source
rpm version of samba 2.2.7.

We have been a win98se (which works great) shop for sometime but are
migrating to XP Pro machines slowly.

I can get the XP machine to join the domain (and the machine account is
created in both the /etc/passwd and /etc/samba/smbpasswd file) but when I
reboot and try and login as a user on the domain I get the following error:

"Windows cannot connect to the domain, either because the doamin controller
is down or otherwise unavailable, or becuase your computer account was not
found.  Please try again later. If this message continuses to appear,
contact your system administrator for assistance."

Now I can just log into the local machine and map a drive no problem and
i've done the sign or seal hack.

Anyone have anythoughts?

Thanks,
Brad



here is the globals,netlogon, and home section of my smb.conf file

[global]
nt acl support = yes
smb passwd file = /etc/samba/smbpasswd
nt pipe support = yes
domain master = yes
encrypt passwords = yes
short preserve case = no
wins support = yes
max log size = 5000
password level = 4
nt status support = yes
nt smb support = yes
security = user
local master = yes
passwd program = /usr/bin/passwd %u
dns proxy = no
valid users = root,@users,@root
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = /etc/printcap
logon script = %U.bat
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
writeable = yes
prefered master = yes
domain admin group = +ntadmin
domain logons = yes
  unix password sync = Yes
workgroup = JDMC
server string = JDMC Samba Server
log file = /var/log/samba/%m.log
netbios name = THE-SCOOP
load printers = no
os level = 64
add user script = /usr/sbin/useradd -d /dev/null -g 501 -s
/bin/false -M %u

[netlogon]
path = /home/netlogon
public = no
read only = yes

[homes]
path = %H
volume = Private
writable = yes
comment = Private Share
valid users = %S
browseable = no
create mode = 0764
directory mode = 0775

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Net rpc user add and the "-F" flag.

[Nicolas Costes]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Le jeudi 8 Juillet 2004 18:39, Paul Gienger a écrit :

> Maybe the man pages on unix are different from the ones online, but I
> doubt it.  I used the web page
> http://www.samba.org/samba/docs/man/manpages.html as a start.

Ok, i'll check that.

> Maybe a more complete example of what you're trying to get at is in
> order... Are you trying to set the contents of those fields or create
> the directories that will correspond to them?

Well, I think I haven't explained it correctly, sorry.

So, I've got 2 servers. One runs NT (Maybe 2K and AD in a few months) and is 
our PDC. The other is running Linux+Samba, and is a file server using 
Winbind and "security=domain".
Last year, I created the users account with a crappy DOS + NtResKit batch 
script on the PDC (From a text file containing names), then exported the 
text file to the Samba file server to process it with a bash script to 
create the homedirs, setting permissions, etc... Thank the winbind bringing 
NT account into Linux. Fine.
Now, this year, i'm trying to create these accounts ONLY from the Samba file 
server, using net rpc commands. I managed to create accounts on the NT 
domain, as I said, but they are a little... Empty ;-) -> No password set, 
no HomeDrive, no HomePath, no ProfilePath,...

So, maybe I can "fill the fields" of the NT accounts remotely, using some 
samba commands ?

And, definitely, my PDC is the NT one, not the Samba server (That would have 
been easier, huh ? ;-)).

> If the former, you probably want pdbedit with an option like so:
>
> -h homedir
>
> This option can be used while adding or modifing a user account. It
> will specify the user's home directory network path.
>
> Example: *-h "BERSERKER\\sorce"*
>
> If the latter, why not just use the script you're apparently trying to
> write to create the directory? If it's on a different machine, use an
> ssh command.  If it's on a windows box, you could probably smbmount the
> parent and then create the dir.  Maybe after a clearer explanation it
> will make sense, but for now it sounds like you're trying to use a
> hammer to turn in a screw.

No, don't worry, it isn't the case ;-)
And I guess that pdbedit only woks on the local Samba machine when it is the 
PDC... ?

Btw, thanks :-)

- -- 
   ,,
  (°>   Nicolas Costes
  /|\   IUT de La Roche / Yon
 ( ^ )  Clé publique: http://www.keyserver.net/
  ^ ^   http://www.gnu.org/philosophy/can-you-trust.fr.html


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFA7XyPNc2aXy7LuOgRAmL/AJ4iRrztsh96uNmBasjhQ8oZ/rsLxwCfRA2X
NSRydTL+epz9f8ZZeDXBHQg=
=ARmc
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: Re: [Samba] Windows 2K outperform Linux/Samba very much?

[Jeremy Allison]

On Thu, Jul 08, 2004 at 12:16:49PM +0100, Mark Cooke wrote:
> On Thu, 2004-07-08 at 11:16, Mark Lidstone wrote:
> > Here's a thought - If ACLs/journalling aren't needed, how well does
> > Samba work on FAT/VFAT partitions?  Could the sheer simplicity of the
> > filesystem help there?
> 
> 
> You can use the configuration options to force filenames to a particular
> case, and then bypass the slow case-insensitive matching by forcing case
> sensitivity:
> 
>mangle case = yes
>case sensitive = yes
>default case = lower
>preserve case = no
>short preserve case = no
> 
> 
> However, on sharing a VFAT filesystem, perhaps you can preserve case,
> and gain the speed increase by just setting 'case sensitive=yes'.

I was thinking of adding an option to allow this on a wildcard match
of a directory name, ie. forcing case-sensitivity and not preserving
case on a directory, rather than a per-share basis. This would fix
the problem for those people who just *have* to have 1,000,000,000,000,000,000
files in a directory :-) :-).

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: Re: [Samba] Windows 2K outperform Linux/Samba very much?

[Jeremy Allison]

On Thu, Jul 08, 2004 at 05:26:08PM +0800, Jacky Kim wrote:
> >> Sorry, I miss the follow informations:
> >> 1. There are 100,000 files in shared directory.
> >
> >That's the problem. Because Samba has to present a case insensitive
> >view of a case-sensitive filesystem we have to scan the entire
> >directory to ensure a file doesn't exist.
> >
> >The answer to the "why is Samba slow" question in this case is
> >"don't do that" (put 100,000 files in a directory).
> 
> I trid 20,000 files in a directory too, and found the same result:
> Windows's share is about 10 times faster than Linux/samba's one 
> when get small file's property(NOT content).

Yes, as soon as smbd has to scan the entire directory to check for
the non-existance of the name things will slow down. With sub microsecond
timestamps there are some tricks we can play with directory caching,
but these are not immediate fixes.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Net rpc user add and the "-F" flag.

[Paul Gienger]

Nicolas Costes wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Back from the pdbedit manual...
Le jeudi 8 Juillet 2004 16:21, Paul Gienger a écrit :
 

From the man page on the net command
[RPC|ADS] USER ADD name [password] [-F user flags] [-C comment]
   

 

The -F then would seem to set the flags.  THIS part is not documented
very intuitively, but is available, in the man page for pdbedit
   

Well, I got there, and I can't see any of the following lines... How did you 
manage to guess that the information is in this man page ?
 

Maybe the man pages on unix are different from the ones online, but I 
doubt it.  I used the web page 
http://www.samba.org/samba/docs/man/manpages.html as a start.



   

It must be, because as I said, I can't find any of the following in that man 
page. So, I tried to use some of these options into the "net user add" 
command, after the "-F" flag, but it keeps returning me "usage()" :-(

Could you give me an example of what you think is the actual syntax to this 
flag ? Say, for example, creating a user specifying is homedrive, homepath, 
profilepath, etc... Some thing like :

# net rpc user add TestUser -F ? -U administrator -S server
 

Maybe a more complete example of what you're trying to get at is in 
order... Are you trying to set the contents of those fields or create 
the directories that will correspond to them?

If the former, you probably want pdbedit with an option like so:
-h homedir
   This option can be used while adding or modifing a user account. It
   will specify the user's home directory network path.
   Example: *-h "BERSERKER\\sorce"*
If the latter, why not just use the script you're apparently trying to 
write to create the directory? If it's on a different machine, use an 
ssh command.  If it's on a windows box, you could probably smbmount the 
parent and then create the dir.  Maybe after a clearer explanation it 
will make sense, but for now it sounds like you're trying to use a 
hammer to turn in a screw.

--
Paul Gienger Office:701-281-1884
Applied Engineering Inc. Cell:  701-306-6254
Information Systems Consultant   Fax:   701-281-1322
URL: www.ae-solutions.commailto:[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Net rpc user add and the "-F" flag.

[Nicolas Costes]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Back from the pdbedit manual...

Le jeudi 8 Juillet 2004 16:21, Paul Gienger a écrit :
>  From the man page on the net command
>
> [RPC|ADS] USER ADD name [password] [-F user flags] [-C comment]

> The -F then would seem to set the flags.  THIS part is not documented
> very intuitively, but is available, in the man page for pdbedit

Well, I got there, and I can't see any of the following lines... How did you 
manage to guess that the information is in this man page ?

> 

It must be, because as I said, I can't find any of the following in that man 
page. So, I tried to use some of these options into the "net user add" 
command, after the "-F" flag, but it keeps returning me "usage()" :-(

Could you give me an example of what you think is the actual syntax to this 
flag ? Say, for example, creating a user specifying is homedrive, homepath, 
profilepath, etc... Some thing like :

# net rpc user add TestUser -F ? -U administrator -S server

> Possible flags are listed below.
>
> *
>
>   N: No password required
>
> *
>
>   D: Account disabled
[...]
> That's where the documentation leads me, although I'm open to alternate
> interpretations

I find it very sad that this particular set of otpions isn't documented a 
little, even with --help... Maybe that deep because I need this 
"-F" ;-P !!!

Isn't there any other way (Using any number of samba commands) to perform 
remote account creation ? I *really* don't want to create my accounts 
half-manually on the NT server then on the Samba file server... :-(

- -- 
   ,,
  (°>   Nicolas Costes
  /|\   IUT de La Roche / Yon
 ( ^ )  Clé publique: http://www.keyserver.net/
  ^ ^   http://www.gnu.org/philosophy/can-you-trust.fr.html


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFA7XW3Nc2aXy7LuOgRAtwtAJ0Q8jgZpDtWZVNBhgv0P2RR1v5BrQCdHsNz
NJ7MlOuY+uTnfb3T5/1HE0M=
=Efz6
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] RE: Delivery Protection

[Louise Hutt]

Hi, 

Thank you for contacting the Dolphin Dynamics Helpdesk. 

Your message has been received and logged and we will do our utmost to
respond as soon as possible. 

Best regards, 

Dolphin Dynamics Helpdesk 

"Technology for Leaders in Travel" 

Web: HYPERLINK "http://www.dolphind.com/"http://www.dolphind.com 

Phone: + 44 (0) 207 381 7262 (Helpdesk) 

Fax: + 44 (0) 207 381 7263 (Fax) 

To log a call online with helpdesk go to the following web page:
http://www.dolphind.com/support/helpdesk.html 




This communication contains information which is or may be confidential
and may also be legally privileged. It is for the exclusive use of the
intended recipient. If you are not the intended recipient or the person
responsible for delivering it to the intended recipient, you are not
authorised to and must not disclose, copy, distribute or retain this
email or its attachments. If you have received this email in error
please inform the sender and then delete this email and its attachments
and destroy any copies of it.

The views or opinions expressed in this communication do not necessarily
represent the views or opinions of Dolphin Dynamics Limited who do not
accept any responsibility for the contents of this communication, unless
specifically stated. The contents of this e-mail shall not be construed
as an acceptance for the purposes of establishing any contractual
relationship save where confirmed by duly executed hard copy
documentation.

Although this email and its attachments are believed to be free of any
virus or other defect, it is the responsibility of the recipient to
ensure that they are virus free and no responsibility is accepted by the
Dolphin Dynamics Limited for any loss or damage arising from receipt or
use thereof.




  
  

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Access Q

[Joe Cipale]

This may be OT, but I will take the chance. 

For all of you large admins, I have a question. I ahve a small
development network that consists of a w2k box( aka royal), a main linux
box (SuSE 7.2 - aka humboldt) and a file/printer/sql server (Mandrake
8.1 - aka gentoo).

I want to be able to login to the main box (humboldt) and access gentoo
by simply doing either a "% cd " or via ssh/ftp/rlogin. Akin
to using a large unix network. I am hoping to add other boxes in the
future for other projects I am considering.

If I try to access gentoo by telnet/ftp, I get an access denied message.
The same is true for accessing humboldt from gentoo. If I ssh in, I am
able to access either machine from the other. This is not quite whatI
have in mind. Can anyone suggest ideas/alternatives (besides Samba?).
-- 
#--#
#"Don't fear the penguin!" #
#--#
# Registered Linux user: #309247 http://counter.li.org #
#--#
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] best filesystem choice for samba (was: new user cannot logon)

[Rashkae]

On Thu, Jul 08, 2004 at 09:26:23AM -0400, Adam Tauno WIlliams wrote:

> > I need quotas and would like acls, but most of all want a fast reliable
> > system.
> 
> Sounds like XFS.
> 
> > Reports indicate that ext2/3 is particularly slow, especially for long file
> > listings and many people 
> 
> Yep,  also seems to get slower over time and just generally slower when
> it starts to get past 50% full.
> 
> > complain have corruption issues with reiser (nut
> > maybe that's RedHat only).  
> 
> Reiserfs, ick!  I'd want a raise before I used that,  many horror
> stories.

I can find horror stories for just about anything, it doesn't mean
much.  Reiserfs is perfectly stable, well supported and provides
excellent performance.  If you want quotas and ACLS, then yes, XFS is
the way to go However, if you want a filesystem that can do what
none other can in regards to huge numbers of small files, ReiserFS is
the best choice, at the expense of CPU time.

If you prefer unparalled support and long tested stability, then EXT3
is a good choice.  It's worth noting that EXT3 is the only FS above
that can journal data as well as meta data.  (Arguably, this feature
likely isn't as useful as one would think, but it's worth considering)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] autoresponse to your mail

[tech]

Thank you for contacting the Dolphin Dynamics Helpdesk.

Your message has been received and logged and we will do our upmost to respond as soon 
as possible.

Try WWW.dolphind.com/support for online support
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

FW: [Samba] Samba printers print$

[samba]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
samba
Sent: Wednesday, July 07, 2004 4:37 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Samba printers print$


I have installed samba on a linux OS suse 8.1.  I have a printer installed
locally on the machine and it prints ok from linux.  I can see the printer
in SWAT.

The share print$

path = /srv/printers
guest ok = yes
browsable = yes
read only = yes
write list = @ntadmin,mm

On the linux machine, I have the following path:/srv/printers

The following folders are located at this path

W32MIPS/
W32PPC/
W32X86/
WIN40/

>From the samba manual I am using "SAMBA Essentials" it explains to upload
the drivers by doing the following:

-In the printers folder on the samba server, select server properties
-Now Click the drivers tab and click the add button.

There is no drivers tab or any add button.

Can anyone point me in the right direction for using the samba server as a
print server!


The contents of this email may be confidential or protected from disclosure
to other than intended recipients.If it has reached you by mistake, we
apologise and request you to advise us by emailing [EMAIL PROTECTED]
Thank you.

BYTRON cannot accept responsibility for any loss or damage arising from the
use of this email or attachments.

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.708 / Virus Database: 464 - Release Date: 6/18/04

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.708 / Virus Database: 464 - Release Date: 6/18/04

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.708 / Virus Database: 464 - Release Date: 6/18/04

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Backup from Linux onto Win2K-share

[Ron Liu]

Hi there
I ran into "File size limit exceeded" error when I tried to cp or mv a 9.9
GB .tgz file from a Linux server(Redhat 9.0) to a Win2k share (NTFS) mounted
on the Linux machine via  smbmount (Samba 3.0.4). The mv or cp command stops
as the transferred file size reaches 2.0 GB and the Linux gave "File size
limit exceeded" error. It seems there is no problem when cp or mv large
files from Win2k share to Linux via smbmount.

Is there anyway that I can get around the 2 GB limitation?

Thank you for your help.

Ron Liu
Information Technology Consultant
Biology Department
San Jose State University
408-924-4860
[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Restricting file types

[Mark Lidstone]

There are two points I would make about using veto files.  First of all
there is a performance hit when using it.  I know that's probably not
going to be a problem when you're talking about a file server, but
anyone else should bear it in mind.

Secondly, there is nothing stopping your people renaming files to get
them onto the web servers (e.g. upload mp3s as "songname.haha" then use
a very simple perl CGI script to read the file in and pass it to web
browsers under a different name, or they could upload Windows EXE files
in ZIP files etc...).

I know it's being padantic, but hey - it might be useful to know in the
future. ;)

Mark Lidstone
IT and Network Support Administrator

BMT SeaTech Ltd
Grove House, Meridians Cross, 7 Ocean Way
Ocean Village, Southampton.  SO14 3TJ. UK
Tel: +44 (0)23 8063 5122 
Fax: +44 (0)23 8063 5144

E-Mail:  mailto:[EMAIL PROTECTED]
Website: www.bmtseatech.co.uk

==
Confidentiality Notice and Disclaimer: 
The contents of this e-mail and any attachments are intended only for
the
use of the e-mail addressee(s) shown. If you are not that person, or one
of those persons, you are not allowed to take any action based upon it
or
to copy it, forward, distribute or disclose the contents of it and you
should please delete it from your system. BMT SeaTech Limited does not
accept liability for any errors or omissions in the context of this
e-mail
or its attachments which arise as a result of Internet transmission, nor
accept liability for statements which are those of the author and not
clearly made on behalf of BMT SeaTech Limited.

==
  

-Original Message-
From: Mike Stewart [mailto:[EMAIL PROTECTED] 
Sent: 08 July 2004 16:03
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [Samba] Restricting file types


Yes, and very useful it is too :-)

In the Globals section I put this to stop all users cluttering up the
server with mp3 files. You can put it in each required share definition
rather than globals though.

veto files = /*.mp3/

basically it starts with a / then file name and type and then ends with
/

so,  veto files = /*.bat/*.scr/mike.*/

would stop all bat and scr files, and any file called mike with any ext.

I use SWAT for configuring my Samba shares and the help file explains it
well.

HTH

Mike


- Original Message - 
From: "Bruce Embrey" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, July 08, 2004 2:36 PM
Subject: [Samba] Restricting file types


Samba List:



Is it possible to limit what filename extensions can be stored in a
samba share? We use samba to allow our windows web designers to use drag
and drop when deploying new pages on our website. We want to be able to
limit which filename extensions can be saved to these shares. Is this
possible and if not and alternatives?



Bruce Embrey



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba




---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.712 / Virus Database: 468 - Release Date: 28/06/2004


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] PDC Administrative scripting

[Jeff Davis]

Hi David,
I too am looking for something similar, as well as user management 
scripts that handle batch import of users, as well as creating home and 
mail accounts directories on remote servers.  I have something now but 
it uses samba 2.0x and openldap 1.2.x, so it's more than a little 
dated.  Trying to get something going so I can update our servers 
without breaking stuff.  I can't believe that nothing has been written 
yet to accomplish this.  If you find something I woulud be most grateful 
if you would let me know

Thanks,
-Jeff
David Mair wrote:
Hello:
It's been quite some time since I've posted to the samba lists.  I'm 
wondering if there are any other Samba administrators out there that have 
developed shell and/or PERL scripting for managing user profile (roaming) 
directories.  Essentially what we're trying to accomplish is automated 
cookie cleanup "illegal file" (i.e., mp3, wav, avi, etc.) file clean up 
and the like.  Our original shell scripting didn't work due to some file 
naming convention problems.  Before I re-invent the wheel I was hoping to 
find someone that might have already accomplished this or could point me 
somewhere.

Regards,
Dave
"I don't know the key to success, but the key to failure is trying to 
please everybody." - Bill Cosby
 

--
Jefferson K. Davis
Technology and Information Systems Manager
Standard School District
1200 North Chester Ave
Bakersfield, CA  93308
USA
661-392-2110 ext 120
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: PDC Administrative scripting

[Michael Lueck]

Sounds like the perfect task for IBM's Object Rexx language which they offer for free 
on Linux
http://www-306.ibm.com/software/awdtools/obj-rexx/
/* Sample code to search and destory! */
searchlist='.mp3 .wav .avi'
do s=1 to searchlist~words()
   rc=SysFileTree('/homes/*'searchlist~word(s), filelist., 'FOS')
   if filelist.0>0 then do f=1 to filelist.0
  rc=SysFileDelete(filelist.f)
   end
end
Of course you could add logging, etc... as fancy as you want to get.
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Restricting file types

[Mike Stewart]

Yes, and very useful it is too :-)

In the Globals section I put this to stop all users cluttering up the server
with mp3 files. You can put it in each required share definition rather than
globals though.

veto files = /*.mp3/

basically it starts with a / then file name and type and then ends with /

so,  veto files = /*.bat/*.scr/mike.*/

would stop all bat and scr files, and any file called mike with any ext.

I use SWAT for configuring my Samba shares and the help file explains it
well.

HTH

Mike


- Original Message - 
From: "Bruce Embrey" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, July 08, 2004 2:36 PM
Subject: [Samba] Restricting file types


Samba List:



Is it possible to limit what filename extensions can be stored in a
samba share? We use samba to allow our windows web designers to use drag
and drop when deploying new pages on our website. We want to be able to
limit which filename extensions can be saved to these shares. Is this
possible and if not and alternatives?



Bruce Embrey



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba




---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.712 / Virus Database: 468 - Release Date: 28/06/2004


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] PDC Administrative scripting

[David Mair]

Hello:

It's been quite some time since I've posted to the samba lists.  I'm 
wondering if there are any other Samba administrators out there that have 
developed shell and/or PERL scripting for managing user profile (roaming) 
directories.  Essentially what we're trying to accomplish is automated 
cookie cleanup "illegal file" (i.e., mp3, wav, avi, etc.) file clean up 
and the like.  Our original shell scripting didn't work due to some file 
naming convention problems.  Before I re-invent the wheel I was hoping to 
find someone that might have already accomplished this or could point me 
somewhere.

Regards,

Dave

"I don't know the key to success, but the key to failure is trying to 
please everybody." - Bill Cosby
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Oplocks and Office 2000 SP3

[Michael Lueck]

Umberto Zanatta wrote:
I have serious problems to manage oplocks on Samba Share.
Some clients have been installed Office 2000 SP3 + Windows XP SP1; they
aren't working because Word+ Excel save files only read-only when reopen
the
file and I try to save.
I don't quite follow what you are seeing. Are you talking about the DOS based 
Read-Only attribute bit?
Or the feature in Office where when you open a file which someone else has open, Office says it is opening the document read-only? It sounds like maybe this is more likely. I don't see where OptLocks 
would be at fault here - that is the entire file itself in this case.

I have Win2K SP4 OS here and can pull down Office XP SP2 to see if it does something 
incorrectly.
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Net rpc user add and the "-F" flag.

[Nicolas Costes]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Le jeudi 8 Juillet 2004 16:21, Paul Gienger a écrit :
[...]
>  From the man page on the net command
>
> [RPC|ADS] USER ADD name [password] [-F user flags] [-C comment]
>
> The -F then would seem to set the flags.  THIS part is not documented
> very intuitively, but is available, in the man page for pdbedit

It seems to answer my question, thanks :-)
I'll look at pbedit's man page right now !

   ,,
  (°>   Nicolas Costes
  /|\   IUT de La Roche / Yon
 ( ^ )  Clé publique: http://www.keyserver.net/
  ^ ^   http://www.gnu.org/philosophy/can-you-trust.fr.html


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFA7VkrNc2aXy7LuOgRApNQAJ9ayExiuDQUCD1lmBL9rvR8fK6/UQCdHVgy
YAjuNOUxKnBGUsL2mTiBf+E=
=umau
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba Logging for Audit Trails

[Honey Bajaj]

  Hi,

  I am using Samba 3.0.4 as PDC and have 3 domain member server, I would like to setup 
a logging of the files which gets deleted by the user. I have already used Audit 
Modules but that slows down the samba server very much, please suggest me possible 
ways of achieving the desired result.

  Thanks,
  Honey
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Net rpc user add and the "-F" flag.

[Paul Gienger]

Nicolas Costes wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello again...
Really no one knows about this "-F" flag in "net user add" ?
 

From the man page on the net command
[RPC|ADS] USER ADD name [password] [-F user flags] [-C comment]
The -F then would seem to set the flags.  THIS part is not documented 
very intuitively, but is available, in the man page for pdbedit


Possible flags are listed below.
   *
 N: No password required
   *
 D: Account disabled
   *
 H: Home directory required
   *
 T: Temporary duplicate of other account
   *
 U: Regular user account
   *
 M: MNS logon user account
   *
 W: Workstation Trust Account
   *
 S: Server Trust Account
   *
 L: Automatic Locking
   *
 X: Password does not expire
   *
 I: Domain Trust Account
That's where the documentation leads me, although I'm open to alternate 
interpretations

Le mercredi 7 Juillet 2004 17:23, Nicolas Costes a écrit :
 

Hello, all !
I'm trying to add users to my NT domain from my samba servers (This to
create all my accounts with only a single script, I do not want to create
them on the PDC, then create their folders on the samba file server with
another...)
I managed to create account with "net rpc user add", then put them in the
right domain group with "net groupmember", but what about the other
parameters (User Z drive, profile path, etc...) ?
And I tried to give the users a password with the "net rpc user add
 ", but it doaesn't work !
I think the "-F" flag would help, but it's documented nowhere !
Here is the only mail I found related to my problem (Thanks to Google),
but it never had any answer...
Can you help ?
   

Joe Mondloch
Tue Sep 9 20:41:22 GMT 2003
I'm not sure if this functionality fully exists yet or not...
I would like to be able to create user accounts on a Windows 2000
machine from my Linux host via Samba. I also need to be able to assign
these user accounts to particular groups.
I've tried:
net rpc user ADD foo -S W2K_SERVER -U Administrator
This seems to create the user, but the account is disabled and is not a
member of any groups. The 'net rpc user' command takes a number of
other options according to the help, such as '-F user flags'.
Unfortunately, I have not been able to find any documentation about
what those flags are.
Thanks for any help,
Joe
 

--
  ,,
 (°>   Nicolas Costes
 /|\   IUT de La Roche / Yon
( ^ )  Clé publique: http://www.keyserver.net/
 ^ ^   http://www.gnu.org/philosophy/can-you-trust.fr.html
   

- -- 
  ,,
 (°>   Nicolas Costes
 /|\   IUT de La Roche / Yon
( ^ )  Clé publique: http://www.keyserver.net/
 ^ ^   http://www.gnu.org/philosophy/can-you-trust.fr.html

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFA7VXeNc2aXy7LuOgRAuE1AKCE9AmF1ziyG5KXKv0UY1SyFE7nTACgqzzE
obibHn0U6I0RqGBs5tcBAeo=
=nRQY
-END PGP SIGNATURE-
 

--
Paul Gienger Office:701-281-1884
Applied Engineering Inc. Cell:  701-306-6254
Information Systems Consultant   Fax:   701-281-1322
URL: www.ae-solutions.commailto:[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Hi, question about SUID + SAMBA

[CDL_Samba]

Hi , i need to know if SQUID can authenticate with samba.
I read some howto but all talk about domain controllers , and i think that
smbpasswd must be authenticate via smb_auth  im rigth?


Thanx in advance.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Net rpc user add and the "-F" flag.

[Nicolas Costes]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Hello again...
Really no one knows about this "-F" flag in "net user add" ?

Le mercredi 7 Juillet 2004 17:23, Nicolas Costes a écrit :
> Hello, all !
>
> I'm trying to add users to my NT domain from my samba servers (This to
> create all my accounts with only a single script, I do not want to create
> them on the PDC, then create their folders on the samba file server with
> another...)
>
> I managed to create account with "net rpc user add", then put them in the
> right domain group with "net groupmember", but what about the other
> parameters (User Z drive, profile path, etc...) ?
>
> And I tried to give the users a password with the "net rpc user add
>  ", but it doaesn't work !
>
> I think the "-F" flag would help, but it's documented nowhere !
> Here is the only mail I found related to my problem (Thanks to Google),
> but it never had any answer...
>
> Can you help ?
>
> > Joe Mondloch
> >  Tue Sep 9 20:41:22 GMT 2003
> >
> > I'm not sure if this functionality fully exists yet or not...
> >
> > I would like to be able to create user accounts on a Windows 2000
> > machine from my Linux host via Samba. I also need to be able to assign
> > these user accounts to particular groups.
> >
> >
> > I've tried:
> > net rpc user ADD foo -S W2K_SERVER -U Administrator
> >
> > This seems to create the user, but the account is disabled and is not a
> > member of any groups. The 'net rpc user' command takes a number of
> > other options according to the help, such as '-F user flags'.
> > Unfortunately, I have not been able to find any documentation about
> > what those flags are.
> >
> > Thanks for any help,
> > Joe
>
> --
>,,
>   (°>   Nicolas Costes
>   /|\   IUT de La Roche / Yon
>  ( ^ )  Clé publique: http://www.keyserver.net/
>   ^ ^   http://www.gnu.org/philosophy/can-you-trust.fr.html

- -- 
   ,,
  (°>   Nicolas Costes
  /|\   IUT de La Roche / Yon
 ( ^ )  Clé publique: http://www.keyserver.net/
  ^ ^   http://www.gnu.org/philosophy/can-you-trust.fr.html


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFA7VXeNc2aXy7LuOgRAuE1AKCE9AmF1ziyG5KXKv0UY1SyFE7nTACgqzzE
obibHn0U6I0RqGBs5tcBAeo=
=nRQY
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Restricting file types

[Bruce Embrey]

Samba List:



Is it possible to limit what filename extensions can be stored in a
samba share? We use samba to allow our windows web designers to use drag
and drop when deploying new pages on our website. We want to be able to
limit which filename extensions can be saved to these shares. Is this
possible and if not and alternatives?



Bruce Embrey



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] best filesystem choice for samba (was: new user cannot logon)

[Adam Tauno WIlliams]

> The consensus seems to be XFS but I'm not sure how proven this filesystem is
> (I know SGI have used it since Irix 6.5 but that's a different OS).

Been using it for years under Linux 2.4.x, and now 2.6.x,  never had a
lick of trouble.

> I need quotas and would like acls, but most of all want a fast reliable
> system.

Sounds like XFS.

> Reports indicate that ext2/3 is particularly slow, especially for long file
> listings and many people 

Yep,  also seems to get slower over time and just generally slower when
it starts to get past 50% full.

> complain have corruption issues with reiser (nut
> maybe that's RedHat only).  

Reiserfs, ick!  I'd want a raise before I used that,  many horror
stories.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] best filesystem choice for samba (was: new user cannotlogon)

[Mark Lidstone]

ARGH!  I'm wondering if airing thoughts about VFAT performance publicly
was a good idea.

I was only interested from a technical point of view - I would NOT
recommend using it on a production server unless there happened to be a
real case for using it.

The biggest thing to bear in mind in your case is that VFAT does NOT
support ACLs or disk quotas.  It also doesn't support journalling and it
also has some strange case-sensitivity behaviour.

At the risk of sending someone else off on completely the wrong track,
how about we write ourselves our own FS specifically to give the best
possible performance for Samba?  ;)

Mark Lidstone
IT and Network Support Administrator

BMT SeaTech Ltd
Grove House, Meridians Cross, 7 Ocean Way
Ocean Village, Southampton.  SO14 3TJ. UK
Tel: +44 (0)23 8063 5122 
Fax: +44 (0)23 8063 5144

E-Mail:  mailto:[EMAIL PROTECTED]
Website: www.bmtseatech.co.uk

==
Confidentiality Notice and Disclaimer: 
The contents of this e-mail and any attachments are intended only for
the
use of the e-mail addressee(s) shown. If you are not that person, or one
of those persons, you are not allowed to take any action based upon it
or
to copy it, forward, distribute or disclose the contents of it and you
should please delete it from your system. BMT SeaTech Limited does not
accept liability for any errors or omissions in the context of this
e-mail
or its attachments which arise as a result of Internet transmission, nor
accept liability for statements which are those of the author and not
clearly made on behalf of BMT SeaTech Limited.

==
  

-Original Message-
From: Simon Oliver [mailto:[EMAIL PROTECTED] 
Sent: 08 July 2004 14:06
To: [EMAIL PROTECTED]
Subject: [Samba] best filesystem choice for samba (was: new user
cannotlogon)


I am setting up a Samba server and am uncertain as to which filesystem
to choose.  

The consensus seems to be XFS but I'm not sure how proven this
filesystem is (I know SGI have used it since Irix 6.5 but that's a
different OS).

I want the filesystem to be available via both CIFS and NFS.

I need quotas and would like acls, but most of all want a fast reliable
system.

Reports indicate that ext2/3 is particularly slow, especially for long
file listings and many people complain have corruption issues with
reiser (nut maybe that's RedHat only).  Recently, someone even suggested
using VFAT!

I'd like to hear your thoughts and experiences with the various
filesystems, especially with regard to using them with Samba and/or NFS.

P.s. The filesystem will be on hardware RAID5, with a hardware RAID1
root filesystem.  I've heard that it makes sense to place the log file
on the RAID1 partition - I carried out some simple tests but couldn't
detect any difference in performance with XFS no matter where the log
file is.

-- 
  Simon Oliver

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re. : [Samba] best filesystem choice for samba (was: new user cannot logon)

[stephane . purnelle]

Hi,

My Samba server is a PDc and file server.
I use XFS for data with ACL and data & OS are on a RAID 5 structure disk.

No problem for speed acces.


  Stéphane Purnelle

---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467


|-+->
| |   "Simon Oliver" <[EMAIL PROTECTED]> |
| |   Envoyé par :  |
| |   [EMAIL PROTECTED]|
| |   s.samba.org   |
| | |
| | |
| |   08/07/2004 15:05  |
| | |
|-+->
  
>---|
  |
   |
  |Pour :   <[EMAIL PROTECTED]>
   |
  |cc :
   |
  |Objet :  [Samba] best filesystem choice for samba (was: new user cannot
logon)  |
  
>---|




I am setting up a Samba server and am uncertain as to which filesystem to
choose.

The consensus seems to be XFS but I'm not sure how proven this filesystem
is
(I know SGI have used it since Irix 6.5 but that's a different OS).

I want the filesystem to be available via both CIFS and NFS.

I need quotas and would like acls, but most of all want a fast reliable
system.

Reports indicate that ext2/3 is particularly slow, especially for long file
listings and many people complain have corruption issues with reiser (nut
maybe that's RedHat only).  Recently, someone even suggested using VFAT!

I'd like to hear your thoughts and experiences with the various
filesystems,
especially with regard to using them with Samba and/or NFS.

P.s. The filesystem will be on hardware RAID5, with a hardware RAID1 root
filesystem.  I've heard that it makes sense to place the log file on the
RAID1 partition - I carried out some simple tests but couldn't detect any
difference in performance with XFS no matter where the log file is.

--
  Simon Oliver

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] best filesystem choice for samba (was: new user cannot logon)

[Simon Oliver]

I am setting up a Samba server and am uncertain as to which filesystem to
choose.  

The consensus seems to be XFS but I'm not sure how proven this filesystem is
(I know SGI have used it since Irix 6.5 but that's a different OS).

I want the filesystem to be available via both CIFS and NFS.

I need quotas and would like acls, but most of all want a fast reliable
system.

Reports indicate that ext2/3 is particularly slow, especially for long file
listings and many people complain have corruption issues with reiser (nut
maybe that's RedHat only).  Recently, someone even suggested using VFAT!

I'd like to hear your thoughts and experiences with the various filesystems,
especially with regard to using them with Samba and/or NFS.

P.s. The filesystem will be on hardware RAID5, with a hardware RAID1 root
filesystem.  I've heard that it makes sense to place the log file on the
RAID1 partition - I carried out some simple tests but couldn't detect any
difference in performance with XFS no matter where the log file is.

-- 
  Simon Oliver

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] new user cannot logon

[Marian Chowanetz]

hi all,

I've set up a samba3.0.3 as pdc for my w2k-domain with ldapsam-backend
(cyrus-sasl, heimdal) on suse9.0.
everything worked fine. but yesterday the /dev/sda1 (/homes; xfs file
system) crashed, when I created a new user with smbldap-useradd. I could
repair the xfs file system and everything seemed fine.
to test the system I've created a new user. but the new user cannot logon.
"error: The system could not log you on..."

(well, I hope this is correct. in german it's: Das System konnte sie nicht
anmelden...)

I have no logon problems with old users, I've created before the "crash".
I've also tried the following:
stop samba
delete secrets.tdb
# ./net getlocalsid and edit the smbldap.conf
# ./smbpasswd –w 
start samba
rejoin the domain with my w2k machine
... but to no avail.

in the log file I found:
[2004/07/08 13:08:15, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user [EMAIL PROTECTED]
with the new password interface
[2004/07/08 13:08:15, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: [EMAIL PROTECTED]

does this mean, samba cannot find the user?
when I do a "pdbedit -Lv" everything seems o.k. and the user can also logon
directly on the linux system.

Any help would be greatly appreciated.


marian














-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: RES: [Samba] ntlm_auth help

[Andrew Bartlett]

On Thu, 2004-07-08 at 22:22, Champaka Guruge wrote:

> Thanks lot Andrew.
> 
> But there is no ntlmssp-client-1 helper program ?
> What is wrong with me ?
> 
> I tested as u said and I got below error message
> 
> "unknown helper protocol [ntlmssp-client-1]"

This presumes you are running a current Samba.  Download and install
Samba 3.0.4.

Andrew Bartlett


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: RES: [Samba] ntlm_auth help

[Champaka Guruge]

--- Andrew Bartlett <[EMAIL PROTECTED]> wrote:
> On Wed, 2004-07-07 at 22:43, Estevam Henrique
> Carvalho wrote:
> > Isn't possible to test the ntlm_auth with the
> ntlmssp protocol in a command
> > line mode, you must use a browser able to handle
> ntlm because only this sort
> > of browser send the appropriate ntlm challenges,
> try IE.
> 
> Actually, it is now possible.  
> 
> ntlm_auth --helper-protocol=ntlmssp-client-1 
> --username=foo
> --domain=bar --password=secret
> 
> If you type 'YR', it will reply, and from then you
> can copy & paste the
> output from that program to 
> 
> ntlm_auth --helper-protocol=squid-2.5-ntlmssp
> 
> (Likewise, copy the replies back).  
> 
> This provides a very nice way to test the system,
> without needing squid
> and MSIE.
> 

Thanks lot Andrew.

But there is no ntlmssp-client-1 helper program ?
What is wrong with me ?

I tested as u said and I got below error message

"unknown helper protocol [ntlmssp-client-1]"

I have no idea how to find that helper program (I have
no more experience with samba)



Thanky You


> Andrew Bartlett
> 

> ATTACHMENT part 2 application/pgp-signature
name=signature.asc





__
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
http://promotions.yahoo.com/new_mail 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: Re: [Samba] Windows 2K outperform Linux/Samba very much?

[Mark Cooke]

On Thu, 2004-07-08 at 11:16, Mark Lidstone wrote:
> Here's a thought - If ACLs/journalling aren't needed, how well does
> Samba work on FAT/VFAT partitions?  Could the sheer simplicity of the
> filesystem help there?


You can use the configuration options to force filenames to a particular
case, and then bypass the slow case-insensitive matching by forcing case
sensitivity:

   mangle case = yes
   case sensitive = yes
   default case = lower
   preserve case = no
   short preserve case = no


However, on sharing a VFAT filesystem, perhaps you can preserve case,
and gain the speed increase by just setting 'case sensitive=yes'.

Mark

-- 
Mark Cooke <[EMAIL PROTECTED]>
University Of Birmingham

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Oplocks and Office 2000 SP3

[Umberto Zanatta]

Hi,

I have serious problems to manage oplocks on Samba Share.

Some clients have been installed Office 2000 SP3 + Windows XP SP1; they
aren't working because Word+ Excel save files only read-only when reopen
the
file and I try to save.

If use Wordpad or something else, It'll works fine.

on the smb.conf:

   level2 oplocks = yes
   oplocks = yes
   veto oplock files = /*.doc/*.xls/*.mdb/*.DOC/*.XLS/*.MDB/*.TMP/*.tmp/

 I read official samba how-to but never happened when changed the
parameters: EnableOplocks, ecc...
on regedit register.

I disabled kernel oplocks, oplocks and level2 oplocks but it doesn't
work.


Have you any idea?

___
Umberto Zanatta
linuxDidattica

tel: +39 (335) 54 71 385
email: [EMAIL PROTECTED]
web: http://linuxdidattica.org
___
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Is there a way to allow empty user (NULL) to connect to samba3 as nobody/guest from W2K/XP workstations?

[Vlad Borisoff]

Hi,

After   switching  to  samba3  I've  noticed  that  it  doesn't  allow
connections  with empty usernames with security = user anymore.
Samba2  mapped  empty  user  to nobody, is there a way to achieve such
behavior?  It  is needed for compatibility - we still have lots of W2k
workstations  that  allow passing empty usernames in login prompts (as
opposed to XP).

Adding null/NULL to smbusers file didn't help.
Searching documentation & googing didn't give me an answer for this issue.
-- 
Thanks in advance,
Vlad Borisoff

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: Re: [Samba] Windows 2K outperform Linux/Samba very much?

[Mark Lidstone]

Here's a thought - If ACLs/journalling aren't needed, how well does
Samba work on FAT/VFAT partitions?  Could the sheer simplicity of the
filesystem help there?

Thanks,

Mark Lidstone
IT and Network Support Administrator

BMT SeaTech Ltd
Grove House, Meridians Cross, 7 Ocean Way
Ocean Village, Southampton.  SO14 3TJ. UK
Tel: +44 (0)23 8063 5122 
Fax: +44 (0)23 8063 5144

E-Mail:  mailto:[EMAIL PROTECTED]
Website: www.bmtseatech.co.uk

==
Confidentiality Notice and Disclaimer: 
The contents of this e-mail and any attachments are intended only for
the
use of the e-mail addressee(s) shown. If you are not that person, or one
of those persons, you are not allowed to take any action based upon it
or
to copy it, forward, distribute or disclose the contents of it and you
should please delete it from your system. BMT SeaTech Limited does not
accept liability for any errors or omissions in the context of this
e-mail
or its attachments which arise as a result of Internet transmission, nor
accept liability for statements which are those of the author and not
clearly made on behalf of BMT SeaTech Limited.

==
  

-Original Message-
From: Malcolm Baldridge [mailto:[EMAIL PROTECTED] 
Sent: 08 July 2004 10:43
To: samba
Subject: Re: Re: [Samba] Windows 2K outperform Linux/Samba very much?


Jacky Kim <[EMAIL PROTECTED]> wrote:

> I trid 20,000 files in a directory too, and found the same result: 
> Windows's share is about 10 times faster than Linux/samba's one when 
> get small file's property(NOT content).

Jacky,

Not all Linux filesystems are created equally, especially for this kind
of file access method.

Ext2/Ext3 is probably the slowest filesytem for this kind of thing.  I
have seen some glimpses of directory hashing being retrofitted into
ext2/ext3, but this requires a format-time option with very new tools,
with new mount/kernels, etc.

You'd be MUCH better off with reiserfs.  I've had 500,000 files in a
single directory without a significant decrease in performance.  I've
never managed to get Windows 2000 to manage this without really tanking
in performance [I've given up the test harness long before it got that
far].

I don't think you'll ever see samba outperforming Windows in this
though, because of the case-insensitivity issue, though it should at
least match the performance.

Reiserfs may provide other benefits (superior access locality) which
MIGHT boost performance a bit towards Linux/Samba, but I'd not hold my
breath.

=MB=
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: Re: [Samba] Windows 2K outperform Linux/Samba very much?

[Malcolm Baldridge]

Jacky Kim <[EMAIL PROTECTED]> wrote:

> I trid 20,000 files in a directory too, and found the same result:
> Windows's share is about 10 times faster than Linux/samba's one 
> when get small file's property(NOT content).

Jacky,

Not all Linux filesystems are created equally, especially for this kind of
file access method.

Ext2/Ext3 is probably the slowest filesytem for this kind of thing.  I have
seen some glimpses of directory hashing being retrofitted into ext2/ext3,
but this requires a format-time option with very new tools, with new
mount/kernels, etc.

You'd be MUCH better off with reiserfs.  I've had 500,000 files in a single
directory without a significant decrease in performance.  I've never managed
to get Windows 2000 to manage this without really tanking in performance
[I've given up the test harness long before it got that far].

I don't think you'll ever see samba outperforming Windows in this though,
because of the case-insensitivity issue, though it should at least match the
performance.

Reiserfs may provide other benefits (superior access locality) which MIGHT
boost performance a bit towards Linux/Samba, but I'd not hold my breath.

=MB=
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: Re: [Samba] Windows 2K outperform Linux/Samba very much?

[Andrew Bartlett]

On Thu, 2004-07-08 at 19:26, Jacky Kim wrote:
> >> Sorry, I miss the follow informations:
> >> 1. There are 100,000 files in shared directory.
> >
> >That's the problem. Because Samba has to present a case insensitive
> >view of a case-sensitive filesystem we have to scan the entire
> >directory to ensure a file doesn't exist.
> >
> >The answer to the "why is Samba slow" question in this case is
> >"don't do that" (put 100,000 files in a directory).
> 
> I trid 20,000 files in a directory too, and found the same result:
> Windows's share is about 10 times faster than Linux/samba's one 
> when get small file's property(NOT content).

Correct.  Finding any detail about a case insensitive filename on a case
sensitive filesystem is a *real pain*.  This is because the only way to
find that filename is to read the entire directory, and compare all the
names.  The price is paid per file lookup, and reading the data costs no
more.

Andrew Bartlett


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: Re: [Samba] Windows 2K outperform Linux/Samba very much?

[Jacky Kim]

>> Sorry, I miss the follow informations:
>> 1. There are 100,000 files in shared directory.
>
>That's the problem. Because Samba has to present a case insensitive
>view of a case-sensitive filesystem we have to scan the entire
>directory to ensure a file doesn't exist.
>
>The answer to the "why is Samba slow" question in this case is
>"don't do that" (put 100,000 files in a directory).

I trid 20,000 files in a directory too, and found the same result:
Windows's share is about 10 times faster than Linux/samba's one 
when get small file's property(NOT content).

Jacky Kim
.





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] kinit: Password incorrect

[Benoit Panizzon]

X-BeenThere: [EMAIL PROTECTED]
X-Mailman-Version: 2.1.4
Precedence: list
List-Id: General questions regarding Samba 
List-Unsubscribe: ,

List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: ,

Sender: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi All

I'm using Samba with SECURITY = ADS.

I could join the ADS with Samba.
winbind works fine and I can see the users.
The users can connect samba with kerberos.
The users can even log in to the system using pam_winbind.so.

So everything looks realy fine.

Only one thing disturbs me a bit. In the docs I see that you should be able to 
initialize Kerberos by doing a:

kinit [EMAIL PROTECTED] (or [EMAIL PROTECTED])

I always get the message about the password being incorrect...
Where could the problem be?

Here's my krb5.conf

[libdefaults]
default_realm = DOMAINI.IMP.CH

[realms]
YOUR.KERBEROS.REALM = {
kdc = neurotix.domaini.imp.ch.
}

[domain_realms]
.domaini.imp.ch = DOMAINI.IMP.CH

- -- 
Benoît Panizzon, <[EMAIL PROTECTED]>
- 
ImproWare AG, UNIXSP & ISP Phone: +41 61 826 93 00
Zurlindenstrasse 29Fax:   +41 61 826 93 01
CH-4133 Pratteln   Net:   http://www.imp.ch/
- 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFA7RMHCVq2G/yL7/ARAuwCAKCkc8rZ6/5t84KYMqTaLruViAoK9wCglKXt
fYxrUdktmK6CLMHGARAVO4o=
=1E7T
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: Re: [Samba] Windows 2K outperform Linux/Samba very much?

[Jacky Kim]

I just want to get small files' property, NOT content.
I heve compared XFS and Reiserfs just now, and found that the results 
are very likely too.

>Here, I have seen sub 700MHz P3 systems with IDE disks blow away a dual
>900MHz 2K system with SCSI drives in every manner.
>
>I would recommend trying reiserfs, it is superior at handling small
>files. This is what we are using.
>
>> 
>>I want to check small files' property(such as date, path, and so on)
>> frequently. The files are stored in netwrok driver and their sizes 
>> vary from 2KB to 5KB.
>>



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Bug in SMBCLIENT

[Kalinin R. Mihail]

Hi!

It looks like something wrong.
pro_qa_plan, D$, C$ resources was showed in wrong column.

$ smbclient -L QASERVER
Password: 
Domain=[QASERVER] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]

Sharename   Type  Comment
-     ---
E$  Diskpro_qa_plan Disk  
IPC$IPC D$  Disk   
mv_builds   Disk  
exchangeDisk  
dataDisk  
BackUp  Disk  
prj_dataDisk  
ADMIN$  DiskC$  Disk   
mv_projects Disk  
new Disk  
Domain=[QASERVER] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]

Server   Comment
----

WorkgroupMaster
----



BEST Regards!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Workaround for Samba 3.0.4 (SuSE 9.1) crash problem?

[Joosep-Georg Järvemaa]

Jeremy Allison wrote:
This is a crash getting quota information from the system. A decent
backtrace would help (one with symbols attached) but it appears to
be a crash within libc, not Samba.
Tt appears that I got rid of the problem after setting up disk quotas on 
my system. Thank you, Jeremy :)

--
Joosep-Georg
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Medium to large Samba deployments?

[Lachlan Cameron-Smith]

Hi,
We're currently looking to evaluate Samba as a file and print server. 
I'd be interested in hearing the experiences of anyone who has 
implemented Samba on a medium-to-large scale (1000+ users per server, 
ideally within Australia), and would appreciate it if you could take the 
time to drop me a line!

Thanks,
Lachlan Cameron-Smith
Senior Systems Specialist, ITS, Adelaide University
[EMAIL PROTECTED]
CRICOS Provider Number 00123M
---
This email message is intended only for the addressee(s)
and contains information that may be confidential and/or
copyright.  If you are not the intended recipient please
notify the sender by reply email and immediately delete
this email. Use, disclosure or reproduction of this email
by anyone other than the intended recipient(s) is strictly
prohibited. No representation is made that this email or
any attachments are free of viruses. Virus scanning is
recommended and is the responsibility of the recipient.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba