Re: [Samba] Setting file and directory permissions using Windows Explorer
Hi, you did activate the acl's in /etc/fstab for the filesystems in question and restarted the server afterwards? Christoph Allen Miller schrieb: I am using Samba-3.0.10 on a Red Hat 9.0 server. I compiled Samba --with-acl-support. I am using kernel linux-2.6.10 also compiled with acl support, I believe. The Samba server is the PDC with Windows 2K and XP Pro machines joined to that domain. I can authenticate as user root and map drives to any share available. As root I cannot change permissions. When I right-click on a directory and click properties, I click the Security tab. When I click Apply to save changes, all boxes are blank. I am so close, I think, at having a Samba server mimic a Window$ server. This one feature still eludes me. Any help would be greatly appreciated. Al Miller -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win2K. Raw CUPS printing, driver download
Just one final note: The driver on the Win2K CD doesn't support duplex printing, but the one on the HP site for the "970 series" does. Interface very much like the G85 driver, but this one works with Samba. On Sun, 23 Jan 2005 22:57:55 -0500, you wrote: >Found what looks like an acceptable workaround: the HP Deskjet 970Cse >driver that comes with Windows 2000 seems to work OK with the G85 and >point n print. > >On Sun, 23 Jan 2005 14:20:03 -0500, Indiana Epilepsy and Child >Neurology <[EMAIL PROTECTED]> wrote: > >>A little more information: >> >>I did some extensive googling and found at least two other >>(unresolved) reports of the same problem, with different printers. In >>March, somebody named "Zylo" reported this with a Canon multifunction >>device, not using CUPS: >>(http://groups-beta.google.com/group/linux.samba/browse_thread/thread/22e74e042bd05e1d/7c0627d93b0041db?q=samba+print+spool+name+smiley&_done=%2Fgroups%3Fhl%3Den%26lr%3D%26ie%3DUTF-8%26safe%3Doff%26num%3D10%26q%3Dsamba+print+spool+name+smiley%26as_drrb%3Db%26as_mind%3D1%26as_minm%3D1%26as_miny%3D2004%26as_maxd%3D23%26as_maxm%3D1%26as_maxy%3D2005%26&_doneTitle=Back+to+Search&&d#7c0627d93b0041db). >>The only response was Rainer Janson reporting the same problem with >>"all Canon image-runner-systems with canon ps drivers installed via >>point and print". >> >>I think this establishes this as a Samba bug. It happens with >>different spoolers, different printers, different distros, and >>different drivers. Samba is the only common factor. >> >>The line on the first page begins like this: >> >>@ ASCII-128 \\my-server\my-printer smiley diamond square >> >>and ends like this: >> >>smiley \\my-server\my-printer part-of-my-document-name >>overstriked-characters >> >>(The ASCII-128 character looks like a capital C with a tail) >> >>Oddly the first letter of the server name is lowercase the first time >>and uppercase the second time, but the first letter of the printer >>name is upper case both times. >> >>I'm beginning to think that Samba doesn't handle some behavior which >>only a small number of Windows drivers have. I wonder if this might >>be a case-sensitivity issue, or maybe a CR vs CR-LF issue. >> >>So far the only workaround I've found is to install the printer as >>local on the Windows machine, then add a "local" port named >>\\server\printer and set the printer to that port. Unfortunately that >>makes the form of printer name different in printer selection dialogs >>than all the other printers shared by Samba. >> >>On Mon, 17 Jan 2005 20:11:50 -0500, you wrote: >> >>>On Mon, 17 Jan 2005 00:43:24 -0700, you wrote: >>> On Sun, 2005-01-16 at 19:35 -0500, Indiana Epilepsy and Child Neurology wrote: > Does anyone have a suggestion? > > The only replies I got were automated vacation responses. > > On Wed, 12 Jan 2005 10:27:52 -0500, you wrote: > > >Using Debian Sarge, samba, CUPS, and an HP G85 mutifunction with HPOJ > >to use the G85 USB connection, I've been able to get raw printing to > >work, and Point 'n' Print driver download to work, but not at the same > >time. >>> >>> >>> > >If I use the driver download, the output from a WordPad document with > >just the word "test" spits out multiple pages, each being either blank > >or just one line of garbage. The first page has a line which begins > >with @ and character like a capital C with a tail, then the printer > >URL in the form \\server\printer, cut off near the end by a smiley > >face and various other odd characters. The URL appears to repeat near > >the end of the line but is cut off when the printer runs out of room > >on the right. >>> >>> >>> The first page with @PJL etc. >>> >>>Not seeing anything like "PJL". Most are foreign characters or >>>symbols, except for the printer UNC, which appears twice. >>> is HP's page description language coming through and the rasterizer >>> >>>Raw queue; doesn't that mean no rasterizer? Bytes go in, same bytes >>>go out? Maybe that's the problem: maybe queue is not so raw (slightly >>>cooked, perhaps? ;) ) >>> not knowing how to deal with it. My understanding is that Samba doesn't do much with printing other than apply ACL's and pass through to the cups facility. In fact, I'm not sure that this is a samba question/problem at all. Craig >>> >>>Samba shouldn't do anything much (other than reassembling the data >>>after decoding the smb), and neither should CUPS when configured with >>>a raw queue. Since the raw queue works with a manually installed >>>Windows driver, but not with the one uploaded to Windows by Samba, my >>>thinking is Samba is doing something wrong, either in how it supports >>>the driver upload, or how it handles the smb. I know little about >>>smb, but being a network protocol, it is the logical place to expect a >>>printer UNC to be removed. >>> >>>Here's the difference between what works and what d
Re: [Samba] ACL's for smbpasswd to work?
On Wednesday 26 January 2005 12:12, Tim Tyler wrote: >Samba experts, > Thanks to advice from this list, I am finally able to get smbpasswd to > change ldap passwords for the Samba LM/NT passwords. However, I had to > give write access to sambaPwdLastSet and sambaPwdCanChange attributes as > well. Other Samba attributes don't seem to need write access. I have > found plenty of examples with people assigning an ACL for sambaLMPassword > and sambaNTPassword, but I haven't found examples that included other > attributes such as sambaPwdLastSet and sambaPwdCanChange. >Can someone explain why these fields need write access while there is so > little documentation suggesting it (if any)? I guess I am not surprised > that they need write access as much as I am surprised there is so little > documentation suggesting it. When you have figured all of it out, your help in improving the documentation will be much appreciated. If you have patches or specific suggestions for addition to the documentation please submit them to me, or post a bug report on http://bugzilla.samba.org and post your patches or documentation updates there. Thanks. Cheers, John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ACL's for smbpasswd to work?
On Wed, 2005-01-26 at 13:12 -0600, Tim Tyler wrote: >Samba experts, > Thanks to advice from this list, I am finally able to get smbpasswd to > change ldap passwords for the Samba LM/NT passwords. However, I had to > give write access to sambaPwdLastSet and sambaPwdCanChange attributes as > well. Other Samba attributes don't seem to need write access. I have > found plenty of examples with people assigning an ACL for sambaLMPassword > and sambaNTPassword, but I haven't found examples that included other > attributes such as sambaPwdLastSet and sambaPwdCanChange. >Can someone explain why these fields need write access while there is so > little documentation suggesting it (if any)? I guess I am not surprised > that they need write access as much as I am surprised there is so little > documentation suggesting it. There's a lot of us 'in school' trying to use LDAP without fully understanding it and of course, there really isn't any standard way to do things. ldap admin dn really needs full read/write access to all areas that dn is to manage and any restrictions are gonna cause trouble. Generally, ACL's that restrict attributes such as sambaLMPassword and sambaNTPassword aren't for restricting activity by the ldap admin dn in smb.conf but to restrict all other access attempts. I think the general consensus is that the samba developers have their hands full with samba and learning how to implement/secure/use LDAP is pretty much the end user responsibility. Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Name lookup failure - NetBIOS lookup administratively prohibited
I’m a Samba newbie trying to set-up a test system with a Redhat samba server and a WinXP laptop. As much as I’ve worked throught the troubleshooting guide and setup info in the Samba HOWTO, I’m not winning. I’ll describe my setup first, then my symptoms along with what I’ve found when I’ve tried to dig deeper. Setup The Redhat and the WinXP boxes are communicating via a wireless router, with the Redhat having a physical connection to the router and the WinXP having a wireless connection via WEP. Firewalls are disabled. DHCP is the order of the day. The Redhat’s smb.conf is [global] workgroup = s4b netbios name = s4bServer security = SHARE hosts allow = 192.168.0. 127. [share1] path = /shareds4b comment = testfiles read only = Yes guest ok = Yes guest only = Yes /shareds4b exists and has 0777 permissions. The Redhat’s IP is 192.168.0.132. The WinXP is configured with workgroup s4b. Its IP is 192.168.0.122. Its name is ‘S4B-2-TOSHIBA’ The router has IP 192.168.0.1. Symptoms The units can ‘see’ each other when I use IP addresses, but names are not working. On the Redhat box I eventually got smbclient –L s4bServer to work by explicitly putting s4bserver in my /etc/hosts, so it works now. BUT it doesn’t list the WinXP box under the SERVER heading (although I can ping the WinXP box by IP address) Doing nmblookup –B S4B-2-TOSHIBA ‘*’ fails to print the laptop’s ip address. Doing nmblookup –B 192.168.0.122 ‘*’ fails, saying “name_query failed to find name *”. On the WinXP box s4bServer isn’t appearing in My Network Places. If I try to add it explicitly via Add a Network Place, s4bServer is indeed appearing under the s4b workgroup (that’s one good thing!), but no share folders are being listed under it. Doing net use e: \\s4bServer\share1 complains “The network name cannot be found”. If I run ethereal on the Redhat box and do a ping s4bServer on the WinXP box, ethereal shows that the Redhat is indeed picking-up the NetBIOS NBNS broadcast message, but is responding with ICMP Type 3 Code 10 (“Host administratively prohibited”). OK, I can see that there’s some sort of name lookup problem going on here; but I’m surprised by the ICMP response, since I thought that nmbd’s purpose in life was to respond correctly to these messages. What have I missed? Angus Monro Architect s4bPty Ltd Method House for R.A.A.D (Risk Avoidance Architectures Design) Solution Architects, System and Software Designers, Business Specialist (m) +61 421 454 671 (p) +61 3 9909 7358 (f) +61 3 9887 5056 (e) HYPERLINK "mailto:[EMAIL PROTECTED]"[EMAIL PROTECTED] This communication is intended for the named recipients only. It is confidential and may contain information which is privileged or personal. If you are not an intended recipient you must not disclose or use this communication for any purpose. If you have received this communication in error, please call us collect on Australia +61 39887 5056 and then destroy the communication or delete it from your computer system. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.846 / Virus Database: 575 - Release Date: 26/01/2005 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: samba with sun's ldap
cj [EMAIL PROTECTED] wrote: > > I'm also trying to get Sun Directory Server 5.1 (from Solaris9) to work > with Samba 3. > > I've loaded the DS5 schema file (from Samba 3.0.10) into Sun DS5, > however when > Windows attempts to authenticate against Samba, Samba seems to be > sending an invalid > request off to the Sun LDAP server: > > [27/Jan/2005:12:22:39 +1100] - Entry > "sambaDomainName=TESTDOMAIN,dc=our,dc=company,dc=com" -- attribute > "objectClass" not allowed The problem is the Samba-supplied file is not really well-formed in terms of DS 5.x requirements. You can go on without a hassle turning schema validation off but I wouldn't recommend it as a long-term solution (do not do this for anything else then testing the setup). I was able to reformat the schema a bit and it's been working OK since then. I'd attach it in here but it is a Samba 2.2 schema. You will have to experiment a bit and it should be OK (take other schema files as examples). Cheers, -- Michal Kurowski <[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba with sun's ldap
Hello there I'm also trying to get Sun Directory Server 5.1 (from Solaris9) to work with Samba 3. I've loaded the DS5 schema file (from Samba 3.0.10) into Sun DS5, however when Windows attempts to authenticate against Samba, Samba seems to be sending an invalid request off to the Sun LDAP server: [27/Jan/2005:12:22:39 +1100] - Entry "sambaDomainName=TESTDOMAIN,dc=our,dc=company,dc=com" -- attribute "objectClass" not allowed It seems like Samba is sending a fundamentally invalid request off to the LDAP server? Any ideas would be greatly appreciated! -cj -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba PDC and Windows XP not executing logon.bat
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John H Terpstra wrote: |> The "guest ok = Yes" line proved to be the secret to getting Windows XP to |> execute the logon.bat file. Thanks for the suggestion! |> |>Nowhere in any Samba documentation have I found that mentioned. It should |>be in the book. | | | Are you planning to submit a patch or documentation update for the book? I | will welcome it. I'm late on this thread, but from the above line I'm a little skeptical of the solution. More details? cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB+FKCIR7qMdg1EfYRAswyAKDLLh8jUuwUxEXohSu4BfRRjMRpmQCfcH8+ Tgxc4ZJlSYTYxdfFeU0wjcA= =oP6I -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Accessing multiple shares from one single client
I am facing the current problem: I have one WinXP SP2 Clients trying to access multiple shares on the same smb server. When booting up Windows I can login to one share, but not to the other ones. Whichever of them I take first is working just fine. My username or password (which is correct!) is being rejected. Is this a Windows issue or do I need to adjust a parameter in smb.conf? Current smb.conf: [global] panic action = /usr/share/samba/panic-action %d workgroup = ROOT server string = bla invalid users = root log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 security = user encrypt passwords = true passdb backend = smbpasswd guest socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 obey pam restrictions = yes interfaces = 195.24.72.10 bind interfaces only = yes [IPC$] hosts deny = 0.0.0.0/0 [web1] comment = [web1] - Home Directory path = /home/www/web1 read only = No valid users = web1 force user = web1 force group = ftp browseable = no printable = no create mask = 660 directory mask = 770 force create mode = 660 force directory mode = 770 veto files = .x [web11] comment = [web11] - Home Directory path = /home/www/web11 read only = No valid users = web11 force user = web11 force group = ftp browseable = no printable = no create mask = 660 directory mask = 770 force create mode = 660 force directory mode = 770 veto files = .x Andy -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: DOS Attributes On Folders
Hi Max, could you show us how your fstab is configured with this extended attributes ? I am trying to implement this feature also. Thanks. Josir Eeep, I found my problem. Forgot to edit fstab to enable user extended attributes AND explictly disable "map archive" (the attribute I was testing with). Do I feel dumb.. Thanks again for your help! Max Bolingbroke Beschorner Daniel wrote: Yes, per default DOS directory attributes are not working at all. With "store dos attributes = yes" it is working. Daniel -Ursprüngliche Nachricht- Von: Max Bolingbroke [mailto:[EMAIL PROTECTED] Gesendet: Dienstag, 25. Januar 2005 00:31 An: Beschorner Daniel Betreff: Re: Access denied changing file attributes Seems like I was a little hasty :) I have found out that DOS attributes on directories are still not functioning (though without an "access denied" error - it just fails silently). I've started a new thread about it, but I suspect this is a Samba limitation.. have you got any ideas what might cause this problem? Max Bolingbroke Beschorner Daniel wrote: It would had been my first idea if you had specified your version of Samba. I was assuming 3.0.10. Glad it works now! Daniel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Any danger in having two shares with same name?
Hi, Don't ask why I'm posing this question -- actually, I WILL explain below -- but is there any danger in having two shares in Samba with the same name? Here's our situation. We have a bunch of production machines out in the field. On those machines, we are constantly setting up "special project shares" for each user (different from the user's Home directory) that refer to private directories only accessible by that user. We define those "special project shares" in a series of "smb.username.conf" files, where we also define which of hundreds of other shares are accessible to that user particular user. The whole process of setting up shares is highly automated from the point of view of the end user. By the way, we reference those "smb.username.conf" files in the general smb.conf file with the statement: include = smb.%U.conf ... so each user sees all the shares listed in their own "smb.username.conf" file as well as all the browseable shares listed in the general "smb.conf" file. This arrangement was working perfectly, until we were asked to turn some of the systems into Primary Domain Controllers and give hundreds of users roaming profiles. Our users now want the "special project share" for each user to be automatically mapped as the "P Drive" in Windows whenever a user logs on to a client system. However, we have found that Windows won't process any shares listed in the "smb.username.conf" directories while it executes the logon.bat script during log on. We know the logon.bat file IS being executed -- it syncs the client time with the server time, and it maps any shares we specify in the general smb.conf file. But it won't map any shares defined in those smb.username.conf files. Curiously, if we run the logon.bat file again about 10 seconds after log on has completed, it will map the shares listed in the smb.username.conf file!. As a workaround, we decided to take an alternate approach to defining the "special project shares". For each of the "special project shares" (that all users have) we put a listing in the general smb.conf file as follows: [Special Project Share A] Comment = Special Folder A path = /home/theboss/%U/Special Folder A read only = No write list = %U guest ok = Yes create mask = 0775 directory mask = 0775 So now, we have two listings for "Special Project Share A" -- one in the user's smb.username.conf file, and one in the general smb.conf file. The question is, is there any danger of Samba or the Windows workstations getting confused? Each of these duplicate shares has the SAME NAME, and refers to the EXACT SAME DIRECTORY on the Linux box. And has the same access and read/write settings. It's probably the same as if you accidentally created the same share twice in your smb.conf file. I would love to hear from a knowledgeable authority on this. The best solution, of course, would be to stop defining the "Special Project Shares" in the user's "smb.username.conf" files. However, we would have to make many changes in the underlying program that is creating these shares and for the next few months it's not practical to update the programs on so many individual user's machines. It's much more practical to simply send out a new smb.conf file to every user. Regards, Andy Liebman -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Access 2003 printing?
Derek Harkness wrote: Has anybody found a fix for the Access 2003 printing? I've got a couple of work arounds but neither is a good long term solution. My solution was to replace Access ( XP in our case ) with Gtk2-Perl apps - reports are rendered direct to PDFs and opened in gpdf. You'd be surprised how well it works :) If you want a quick workaround and you're using a CUPS printing backend on your Samba server, you can try using direct IPP printing ( without Samba in the middle ... sorry to anyone who is offended by this solution ... I don't mean any harm ). There are plently of instructions around on how to do this, but you basically use the 'add new printer' wizard, and on the first step ( where it asks you for the share name or to click the browse button ), you select the bottom option ( print to a printer on the internet or your intranet ). Then enter the printer's path, in the format: http://servername_or_ip_address/printers/printer_name_in_cups so my 'laserjet4500' printer in cups is: http://10.146.0.254/printers/laserjet4500 It works like a charm for us. Of course if you need to have Samba in the equation for some reason, then this option will not do at all. But if you just want to get your damned Access 2003 apps to print to your printer then it will work great. One more possibility to try before all this is to check what drivers you're using. I don't know the exact problem you're having, and this might be completely unrelated, but Access refuses to print through PCL6 drivers on any of our printers ( last time I tested this was through Samba, but now we're using direct IPP everywhere ). Downgrading to PCL5 drivers got printing working for us. -- Daniel Kasak IT Developer NUS Consulting Group Level 5, 77 Pacific Highway North Sydney, NSW, Australia 2060 T: (+61) 2 9922-7676 / F: (+61) 2 9922 7989 email: [EMAIL PROTECTED] website: http://www.nusconsulting.com.au -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Windows XP profile problems
On Wednesday 26 January 2005 03:44 pm, Mike Partyka wrote: > s there is trick to fully copying an existing local profile over to your > new domain profile after you join the Samba domain? I tried the profile > copy under System Properties, on the advanced tab and although it > completed, I log on and MS office wants to load files from the CD and my > start menu seems to be missing the entire left side column. > > If you look in the archives you might find that I had the same issues and with the help of a few people on this list got it figured out. Here are the steps. 1. Log in as local admin. Delete all .DOMAIN or .000 profiles (right-click and look at the security to be sure it is the domain profile). 1.5. If that user has some privileges on the local system, it seems to work better if you give the domain user the same permissions on the local system (Administrator, Power User, etc). 2. Remove the copied profile for the user from the server. 3. Log in as the domain user. Let it create a default profile. 4. Restart the computer, log in as local admin. 5. Right-click My Computer. Choose Profiles or whatever. 6. Choose your local user, click "Copy to". Browse to the Documents&Settings profile for your domain user (the default one you just created by logging in as that user). Set the "Allowed to use" to the domain user. Let it copy. 7. Reboot the computer just to be safe, log in as the domain user. > > Thanks, > > > > Mike Partyka > > Stonepath Logistics > > Systems Administrator > > (651)405-4300 Desk > > (651)208-5734 Cell > > (651)405-4342 Fax -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] LDAP Account Manager 0.4.8 released
LDAP Account Manager (LAM) 0.4.8 - January 26th, 2005 = A web frontend for managing accounts stored in an OpenLDAP server. Announcement This version closes several minor bugs. LAM is a set of PHP-scripts to administrate entries of a LDAP server. User, group and Samba accounts can be displayed, searched, filtered, added, removed and edited over an easy to use web interface. Even the configuration options are embedded in the interface. Features: - - management of Unix user and group accounts (posixAccount/posixGroup) - management of Samba 2.x/3 user and host accounts (sambaAccount/sambaSamAccount) - profiles for account creation - editor for organizational units (OU) - account creation via file upload - automatic creation/deletion of home directories - setting quotas - support for LDAP+SSL - multi-language support (English, French, German, Hungarian, Japanese) - multiple configuration files - PDF output for user/group/host accounts - additional text for user PDFs - supports multiple password hashes Availability: - This software is available under the GNU General Public License V2.0. You can get the newest version at http://lam.sf.net. File formats: DEB, tar.gz There is also a FreeBSD port. Debian users may use the packages in unstable. Support: If you find a bug please file a bug report. For questions or implementing new features please use the forum and feature request tracker at our Sourceforge homepage http://www.sf.net/projects/lam. Author & Copyright: --- Copyright (C) 2003 - 2005: Michael Duergner <[EMAIL PROTECTED]> Roland Gruber <[EMAIL PROTECTED]> Tilo Lutz <[EMAIL PROTECTED]> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Savin Copier Print Processor
I have FreeBSD 5.3 running on an Sun Ultra 10. I installed Samba 3.03, from patching SWAT now says version 3.07. I am having an issue printing from Windows through Samba to Savin copiers (model 9935DPE and 9945DPE) when downloading the Windows drivers directly from the [print$] share. When I print a test page, the orientation of the lettering is correct but the letters are gibberish. The Windows logo in the corner looks correct. If I do not download the drivers from the server, but install them manually on Windows, then everything prints fine. The only thing that I have found so far is that the Print Processors are listed differently on the printer when downloading the drivers directly. When downloading the drivers, the Print Processor is listed as "winprint" and the default data type is RAW. When I manually install the drivers, the Print Processors are "HPPRN05" and "WinPrint" and data types are RAW, RAW [FF appended], RAW [FF auto], NT EMF 1.003, NT EMF 1.006, NT EMF 1.007, NT EMF 1.008, and TEXT. This is using the same exact drivers on Samba and on Windows: SAVIN 9935DPE/2035DPE PCL 5e. I have tried the PostScript driver and the PCL 6 driver with similar results (actually more garbled using these drivers). I have searched on Google, the Savin site, and samba.org, but have not found anything yet. Is there a way to manually apply the Print Processor information? Any help would be greatly appreciated. Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Setting file and directory permissions using Windows Explorer
I am using Samba-3.0.10 on a Red Hat 9.0 server. I compiled Samba --with-acl-support. I am using kernel linux-2.6.10 also compiled with acl support, I believe. The Samba server is the PDC with Windows 2K and XP Pro machines joined to that domain. I can authenticate as user root and map drives to any share available. As root I cannot change permissions. When I right-click on a directory and click properties, I click the Security tab. When I click Apply to save changes, all boxes are blank. I am so close, I think, at having a Samba server mimic a Window$ server. This one feature still eludes me. Any help would be greatly appreciated. Al Miller -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Windows XP profile problems
s there is trick to fully copying an existing local profile over to your new domain profile after you join the Samba domain? I tried the profile copy under System Properties, on the advanced tab and although it completed, I log on and MS office wants to load files from the CD and my start menu seems to be missing the entire left side column. When I look at the size and number of files my original profile definitely is bigger and has more files, so evidently not all the profile gets copied. Could someone share the trick to getting the profile copied over just as it was? Thanks, Mike Partyka Stonepath Logistics Systems Administrator (651)405-4300 Desk (651)208-5734 Cell (651)405-4342 Fax -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Partition setup recommendations
Hello everyone. I am about to setup a Samba server using SuSe 9.1 Professional and samba version 3.0. Currently, I am using a Server with 3 36gig SCSI drives setup in a RAID 5 array. That should give me about 60 gigs of space to work with. Now, the server itself is just going to be a file and print server, nothing else. What I was hoping to get from some people here are some recommended partition setup schemes. What works well, what is necessary/unnecessary etc. I know partitioning is a personal thing, I just like to hear options and ideas from others here. I appreciate it. Cheers, Jason -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Access 2003 printing?
Has anybody found a fix for the Access 2003 printing? I've got a couple of work arounds but neither is a good long term solution. 1) Set the default printer to something other then a Samba print queue. 2) Map the Samba print queue to a dos LPT port. Thanks, Derek To boldly go where I surely don't belong. PGP.sig Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Visual Studio/Samba Compile from Shares issue
Try turning off the pre-compiled header all together. Under Project->Settings then the C/C++ tab and the Precompiled Headers pull down. Derek On Jan 26, 2005, at 9:35 AM, Kelly S. Smelser wrote: I've tried setting dos filetimes = yes and dos filetime resolution = yes, but this brought no change. The problem persists. Any more ideas? K. Gémes Géza wrote: Kelly S. Smelser írta: I've run into a problem in which Visual Studio 6.0 gives an Internal Compiler Error message when compiling from a samba share. The project compiles fine locally and from shares on Windows machines. To me this suggests that the issue is with Samba. I've tried adding full access to the share where the project is housed, but to no avail. Any ideas? We are running samba 3.0.9-1.3E.2 on a Redhat Enterprise 3 server. The clients are Windows XP machines running Visual Studio 6.0 w/ SP5. K. -- Kelly S. Smelser Labs Manager, Client Services University of Indianapolis [EMAIL PROTECTED] I've read something like this in the docs some time ago, I would suggest, to read about the dos filetimes smb.conf parameter in the smb.conf manpage. Cheers Geza -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba I believe the technical term is "Oops!" PGP.sig Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Excel files & file modification time - VALIDATION
More testing, and your other validations are correct. Installed 3.0.11pre2 on a clean box, with our production configurations. The following was verified to function correctly with Excel (open file, close file, copy file, move file): [test] path = /data/test comment = Stuff writable = yes browseable = no valid users = @"DOMAIN\RFPAdmins" write list = @"DOMAIN\RFPAdmins" force create mode = 0777 force directory mode = 0777 vfs objects = recycle recycle:keeptree = yes recycle:touch = yes recycle:exclude = ?~$*,~$*,*.tmp,*.temp,*.TMP recycle:repository = My Network Recycle Bin Time to look at the prod box, as it is not behaving... Expected release timeframe of 3.0.11? Many Thanks in advance for your efforts! Philippe -Original Message- From: Jeremy Allison [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 26, 2005 1:46 PM To: Laurent, Philippe Cc: samba@lists.samba.org Subject: Re: [Samba] Excel files & file modification time On Wed, Jan 26, 2005 at 11:50:11AM -0500, [EMAIL PROTECTED] wrote: > Hey folks - > > I saw that thread, looked through the release notes, and tried the fixes mentioned, but nothing seemed to work. Does anyone know if the Excel issues will be fixed anytime soon? I've got Engineers here who are not happy about modified times that change when files are accessed. The Excel issues are fixed in 3.0.11pre2. I have had multiple reports that this fixes the problem. Jeremy. * CONFIDENTIALITY NOTE * The content contained in this e-mail transmission is legally privileged and confidential information intended only for the use of the individual or entity named herein. If the reader of this transmission is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this transmission is strictly prohibited. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] memory issues with samba 3.0.10
On Wed, Jan 26, 2005 at 11:46:32AM -0500, Adam Tauno Williams wrote: > > Our central print server runs 3.0.10 and several times a day one of the > smbd processes starts to grow. We simply keep an eye on it and can kill > -9 the offender, the rest of the smbd processes seem oblivious to the > event and trundle along happily. We've seen these babies get as big as > 989Mb (the average smbd seems about 70Mb), and if we don't kill them > the server eventually goes into swap frenzy which can eat-up the CPU. Doing a kill -9 on an smbd is a BAD THING and eventually you'll regret it :-). Have you tried sending an smbcontrol message to the bloated smbd to get it to dump out the talloc contexts ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] ACL's for smbpasswd to work?
Samba experts, Thanks to advice from this list, I am finally able to get smbpasswd to change ldap passwords for the Samba LM/NT passwords. However, I had to give write access to sambaPwdLastSet and sambaPwdCanChange attributes as well. Other Samba attributes don't seem to need write access. I have found plenty of examples with people assigning an ACL for sambaLMPassword and sambaNTPassword, but I haven't found examples that included other attributes such as sambaPwdLastSet and sambaPwdCanChange. Can someone explain why these fields need write access while there is so little documentation suggesting it (if any)? I guess I am not surprised that they need write access as much as I am surprised there is so little documentation suggesting it. Tim Tim Tyler Network Engineer - Beloit College [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Possible Winbind Bug ?!?!
> versions: > samba-3.0.10-0.1 > samba-python-3.0.10-0.1 > samba-winbind-3.0.10-0.1 ^^ > samba-doc-3.0.9-2.1.5 > samba-client-3.0.10-0.1 > samba-pdb-3.0.10-0.1 > samba-vscan-0.3.5-11.7.6 > > LOGS ## > > # log.crash > > Jan 25 17:11:41 nevanfs01 winbindd[3698]: > === > Jan 25 17:11:41 nevanfs01 winbindd[3698]: [2005/01/25 17:11:41, 0] > lib/fault.c:fault_report(37) > Jan 25 17:11:41 nevanfs01 winbindd[3698]: INTERNAL ERROR: Signal 6 in > pid 3698 (3.0.4-SUSE) ^^ you update smbd but forgot to update winbindd -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Excel files & file modification time
On Wed, Jan 26, 2005 at 11:50:11AM -0500, [EMAIL PROTECTED] wrote: > Hey folks - > > I saw that thread, looked through the release notes, and tried the fixes > mentioned, but nothing seemed to work. Does anyone know if the Excel issues > will be fixed anytime soon? I've got Engineers here who are not happy about > modified times that change when files are accessed. The Excel issues are fixed in 3.0.11pre2. I have had multiple reports that this fixes the problem. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problems with Access Control for Shares on Samba 2
Whops, switch read only = yes, cut and paste error. > -Original Message- > From: Kaplan, Marc > Sent: Wednesday, January 26, 2005 9:39 AM > To: remote; samba@lists.samba.org > Subject: RE: [Samba] Problems with Access Control for Shares on Samba 2 > > Jörg, > > I think if you want only one user to be able to write, but any user to be > able to access you should change things as follows: > > [hobbit5] > comment = hobbit5 > path = /ALPHA-DATA/hobbit5 > browseable = yes > read only = no > guest = ok > write list = hobbit5 > > The valid users parameter before said that ONLY hobbit5 could access the > share. If you don't specify anything for valid users, the default behavior > is that any user can access the share. > > -Marc > > -Original Message- > > From: remote [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, January 26, 2005 3:53 AM > > To: samba@lists.samba.org > > Subject: [Samba] Problems with Access Control for Shares on Samba 2 > > > > Hi all ! > > > > I have a question regarding the access control in Samba 2. I want to > make > > shares available to the Windows Network for which only the owner of the > > share has write access. Other users however should be able to read and > > browse these shares. > > My smb.conf : > > > > global] > >workgroup = leat > >guest account = nobody > >keep alive = 30 > >os level = 2 > >kernel oplocks = false > >security = user > > > > [hobbit5] > > comment = hobbit5 > > path = /ALPHA-DATA/hobbit5 > > browseable = yes > > read only = no > > guest = ok > > valid user = hobbit5 > > ;force user = hobbit5 > > > > As far as I understand Samba, with this configuration any Samba user > > should be able to browse and read the hobbit5 - share, while only > hobbit5 > > himself can write and delete within this share. > > However, what happens is that any Samba user can see the share in the > > Network Neighborhood, but except for hobbit5, none can enter it. Windows > > tells me that either the path is not correct or I don´t have the network > > privileges to do this. > > > > What do I do wrong ? > > > > Thanks, > > > > Jörg > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/listinfo/samba > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SWAT won't start
Is swat installed on your system? Check for the existence of /usr/sbin/swat. - John T. On Wednesday 26 January 2005 08:56, Jeff Howard wrote: > Hi, > > I'm setting up Samba on a RH ES linux machine. I have basic functionality > working and can access a share from a Windows pc. I set up smb.conf > manually. I'd like to use SWAT but when I try to run it I get the error: > > -- The connection was refused when attempting to contact localhost:901 -- > > I set up the xinetd configuration file exactly as I've seen online. Webmin > works fine. I'm logged in as root. I tried turning off ipchains. Can't > get rid > of this error. Anyone have any ideas? > > Thanks in advance > > Jeff > > -- > __ > Jeff Howard > Software Engineer > Office of the University Registrar > University of North Carolina - Chapel Hill > > [EMAIL PROTECTED] > 919.962.4315 -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problems with Access Control for Shares on Samba 2
Jörg, I think if you want only one user to be able to write, but any user to be able to access you should change things as follows: [hobbit5] comment = hobbit5 path = /ALPHA-DATA/hobbit5 browseable = yes read only = no guest = ok write list = hobbit5 The valid users parameter before said that ONLY hobbit5 could access the share. If you don't specify anything for valid users, the default behavior is that any user can access the share. -Marc > -Original Message- > From: remote [mailto:[EMAIL PROTECTED] > Sent: Wednesday, January 26, 2005 3:53 AM > To: samba@lists.samba.org > Subject: [Samba] Problems with Access Control for Shares on Samba 2 > > Hi all ! > > I have a question regarding the access control in Samba 2. I want to make > shares available to the Windows Network for which only the owner of the > share has write access. Other users however should be able to read and > browse these shares. > My smb.conf : > > global] >workgroup = leat >guest account = nobody >keep alive = 30 >os level = 2 >kernel oplocks = false >security = user > > [hobbit5] > comment = hobbit5 > path = /ALPHA-DATA/hobbit5 > browseable = yes > read only = no > guest = ok > valid user = hobbit5 > ;force user = hobbit5 > > As far as I understand Samba, with this configuration any Samba user > should be able to browse and read the hobbit5 - share, while only hobbit5 > himself can write and delete within this share. > However, what happens is that any Samba user can see the share in the > Network Neighborhood, but except for hobbit5, none can enter it. Windows > tells me that either the path is not correct or I don´t have the network > privileges to do this. > > What do I do wrong ? > > Thanks, > > Jörg > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] memory issues with samba 3.0.10
On Jan 26, 2005, at 11:27 AM, Gerald (Jerry) Carter wrote: top reports a VSZ number (process' total amount of virtual memory allocated) for each process. What does that say? It was under a MB for the process that was pegged, and I didn't get a chance to check for the total of all the other smbd processes before I "fixed" things. I'll check next time it happens. -- David Schlenk Operating Systems Analyst Bethel University Saint Paul, Minnesota [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind and distribution groups
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter Kruse wrote: | Hello all! | | Say, I create a "distribution group" on Windows ADS named | "distgroup" add as a member a security group named "secgroup" with a | user "robert" in it. Then when I look at the groups "robert" belongs | to, the group "distgroup" is not listed (checked with "wbinfo -r"). | Even after "winbind cache time" has long expired ;) this is the different between a distribution group and a security group from what I understand. The behavior is by design. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB99OpIR7qMdg1EfYRApT5AKC0jOEoJfs3R/euFbyI/UbQJ9/QlwCfWAyT 1lNkClMcOjsMqSoiujd2EBM= =VyPd -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] memory issues with samba 3.0.10
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Schlenk wrote: | | Not so much. It's the main smbd process, the one running as root. Every smbd process runs as root unless it is doing something on behalf of the user. But I'm assuming you really do mean the parent smbd process. This is a pretty important point. | I'm not terribly familiar with how load is calculated, | or exactly what top's CPU% means, but I guess I figured | that the memory usage thing might have been causing | the CPU usage, but perhaps I was thinking too hard. top reports a VSZ number (process' total amount of virtual memory allocated) for each process. What does that say? cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB99L+IR7qMdg1EfYRAgu8AKCIlGr796OirzTtGAOvoEFYyEW48wCg6E7P VDA1ULEarCuF3D1lYb5qwNk= =HtKM -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: DOS Attributes On Folders
Eeep, I found my problem. Forgot to edit fstab to enable user extended attributes AND explictly disable "map archive" (the attribute I was testing with). Do I feel dumb.. Thanks again for your help! Max Bolingbroke Beschorner Daniel wrote: Yes, per default DOS directory attributes are not working at all. With "store dos attributes = yes" it is working. Daniel -Ursprüngliche Nachricht- Von: Max Bolingbroke [mailto:[EMAIL PROTECTED] Gesendet: Dienstag, 25. Januar 2005 00:31 An: Beschorner Daniel Betreff: Re: Access denied changing file attributes Seems like I was a little hasty :) I have found out that DOS attributes on directories are still not functioning (though without an "access denied" error - it just fails silently). I've started a new thread about it, but I suspect this is a Samba limitation.. have you got any ideas what might cause this problem? Max Bolingbroke Beschorner Daniel wrote: It would had been my first idea if you had specified your version of Samba. I was assuming 3.0.10. Glad it works now! Daniel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] session setup failed: NT_STATUS_LOGON_FAILURE
I am trying to configure a OPENLDAP+SAMBA server and I am getting the following error message: session setup failed: NT_STATUS_LOGON_FAILURE when I run the following command: smbclient -L localhost -U Administrator Password: session setup failed: NT_STATUS_LOGON_FAILURE Does anybody know, where do I need to look to fix it? Thank you. - Do you Yahoo!? Yahoo! Search presents - Jib Jab's 'Second Term' -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] memory issues with samba 3.0.10
On Jan 26, 2005, at 10:46 AM, Adam Tauno Williams wrote: Our central print server runs 3.0.10 and several times a day one of the smbd processes starts to grow. We simply keep an eye on it and can kill -9 the offender, the rest of the smbd processes seem oblivious to the event and trundle along happily. We've seen these babies get as big as 989Mb (the average smbd seems about 70Mb), and if we don't kill them the server eventually goes into swap frenzy which can eat-up the CPU. Perhaps you're seeing the same thing? Not so much. It's the main smbd process, the one running as root. Killing it makes the rest of them not work anymore. I stopped samba, moved the old tdb's back to /var/lib/samba/printing and it seems to be working better at this point. I'm not sure if the tdb's had anything to do with it or not, although they all have old file modification dates on them, probably from before I was using 3.0.10 (so, 3.0.9 or more likely 3.0.5 created them). On Jan 26, 2005, at 10:37 AM, Gerald (Jerry) Carter wrote: Your subject metions memory usage, but your mail talks about CPU usage. Which is it I'm not terribly familiar with how load is calculated, or exactly what top's CPU% means, but I guess I figured that the memory usage thing might have been causing the CPU usage, but perhaps I was thinking too hard. -- David Schlenk Operating Systems Analyst Bethel University Saint Paul, Minnesota [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] DOS Attributes On Folders
Yes, per default DOS directory attributes are not working at all. With "store dos attributes = yes" it is working. Daniel -Ursprüngliche Nachricht- Von: Max Bolingbroke [mailto:[EMAIL PROTECTED] Gesendet: Dienstag, 25. Januar 2005 00:31 An: Beschorner Daniel Betreff: Re: Access denied changing file attributes Seems like I was a little hasty :) I have found out that DOS attributes on directories are still not functioning (though without an "access denied" error - it just fails silently). I've started a new thread about it, but I suspect this is a Samba limitation.. have you got any ideas what might cause this problem? Max Bolingbroke Beschorner Daniel wrote: >It would had been my first idea if you had specified your version of Samba. >I was assuming 3.0.10. > >Glad it works now! >Daniel > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Excel files & file modification time
Hey folks - I saw that thread, looked through the release notes, and tried the fixes mentioned, but nothing seemed to work. Does anyone know if the Excel issues will be fixed anytime soon? I've got Engineers here who are not happy about modified times that change when files are accessed. Philippe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lieven Van Acker Sent: Thursday, January 20, 2005 6:14 AM To: Samba Subject: Re: [Samba] Excel files & file modification time This must be related to this one I think http://lists.samba.org/archive/samba/2004-April/084461.html There were a couple of fixes wrt locking issues addressed in latest 3.0.11pre1. Regards, Lieven Op do, 20-01-2005 te 10:33 +0100, schreef Bostjan Müller: > Hi everyone, > > I have a problem on samba running on RHEL 3 kernel 2.4.21 with RHEL 3 > samba packages - samba-3.0.7-1.3E.1. > The problem is, that when people open excel files (with office 97 > version of excel) the file modification time is changed (even if the > file is only opened and excel closed without saving). > This same problem does not occur on the [homes] share (in every test > untill now it never happened on that share). > > I am wondering what is different between [homes] and other shares, > since I do not have any special/different settings for those shares. > > I hope someone can enlighten me with an answer. > > Regards, > Bostjan > -- > buhdej evridej -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Lieven Van Acker e-mail: [EMAIL PROTECTED] Directie ICT, Afdeling Infrastructuur Groep Systemen tel: +32 9 264 4732 Universiteit Gent fax: +32 9 264 4994 Krijgslaan 281, gebouw S9, 9000 Gent, Belgie www.UGent.be -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba * CONFIDENTIALITY NOTE * The content contained in this e-mail transmission is legally privileged and confidential information intended only for the use of the individual or entity named herein. If the reader of this transmission is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this transmission is strictly prohibited. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] memory issues with samba 3.0.10
> | I'm still having problems with that memory issue > | using 3.0.10 with v.2 of the printing patch + the > | one line patch from Jerome Borsboom. My production > | server has completely frozen a couple times in the past > | couple weeks, and did so again this morning. > | This time before restarting samba I removed the > | tdb files in /var/lib/samba/printing/* as > | Jerry mentioned this might help the queue not > | clearing problem. What exactly does this cause samba > | to do? It froze up completely again after > | about an hour, and now the load is petering between > | 1 and 2, with smbd taking up between 95 and 99% > | of the CPU constantly. I backed up the old > | tdb's, should I maybe go back to those? > Your subject metions memory usage, but your mail talks > about CPU usage. Which is it ? Our central print server runs 3.0.10 and several times a day one of the smbd processes starts to grow. We simply keep an eye on it and can kill -9 the offender, the rest of the smbd processes seem oblivious to the event and trundle along happily. We've seen these babies get as big as 989Mb (the average smbd seems about 70Mb), and if we don't kill them the server eventually goes into swap frenzy which can eat-up the CPU. Perhaps you're seeing the same thing? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] memory issues with samba 3.0.10
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Schlenk wrote: | I'm still having problems with that memory issue | using 3.0.10 with v.2 of the printing patch + the | one line patch from Jerome Borsboom. My production | server has completely frozen a couple times in the past | couple weeks, and did so again this morning. | This time before restarting samba I removed the | tdb files in /var/lib/samba/printing/* as | Jerry mentioned this might help the queue not | clearing problem. What exactly does this cause samba | to do? It froze up completely again after | about an hour, and now the load is petering between | 1 and 2, with smbd taking up between 95 and 99% | of the CPU constantly. I backed up the old | tdb's, should I maybe go back to those? Your subject metions memory usage, but your mail talks about CPU usage. Which is it ? I would check for network traffic. Look for XP clients sending a GetPrinterData() request over and over. The printing/*tdb files are basically cache files. So deleteing them clears the print queu listing cache and allows smbd to start with a fresh slate. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB98daIR7qMdg1EfYRAhH1AJ9J0MtO6LH59qCWHt4OazaWK6sgRQCg0/uc ViO6/RVysxrUKUakx3fKa60= =DDP6 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] winbind and distribution groups
Hello all! Say, I create a "distribution group" on Windows ADS named "distgroup" add as a member a security group named "secgroup" with a user "robert" in it. Then when I look at the groups "robert" belongs to, the group "distgroup" is not listed (checked with "wbinfo -r"). Even after "winbind cache time" has long expired ;) The problem comes when I want to set ACLs to group "distgroup", then "robert" has no access. I haven't seen a bug report or any other mail concerning "distribution groups" so I don't think this is a known issue. But the question is: is winbind supposed to support groups in "distribution groups"? If yes, what do I have to do to make it work here as well? This is with version 3.0.10 and 3.0.7 (haven't had the chance to check other versions). Regards, Peter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] WINBIND: only 88 group members ?
I found that the maximum number of group members is 88. Not sure this is it, but I seem to remember something about the length of the /etc/group line being the cause of this issue. In your situation you would be looking at a 'virtual' line created by winbind that is too long. Try looking for something along those lines. -- -- Paul GiengerOffice: 701-281-1884 Applied Engineering Inc. Systems Architect Fax:701-281-1322 URL: www.ae-solutions.com mailto: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] memory issues with samba 3.0.10
I'm still having problems with that memory issue using 3.0.10 with v.2 of the printing patch + the one line patch from Jerome Borsboom. My production server has completely frozen a couple times in the past couple weeks, and did so again this morning. This time before restarting samba I removed the tdb files in /var/lib/samba/printing/* as Jerry mentioned this might help the queue not clearing problem. What exactly does this cause samba to do? It froze up completely again after about an hour, and now the load is petering between 1 and 2, with smbd taking up between 95 and 99% of the CPU constantly. I backed up the old tdb's, should I maybe go back to those? -- David Schlenk Operating Systems Analyst Bethel University Saint Paul, Minnesota [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] WINBIND: only 88 group members ?
I'm trying to get the WINBIND 3.0.10 on a AIX5.2 machine working in our 1200 users environment. We have some groups with more than 100 users, these are not recognized by WINBIND. The ldap server deliveres the needed entry, but it seems that the entry is too long for WINBIND. I found that the maximum number of group members is 88. How can I increase this maximum ? Regards M.Schlett -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] A Samba's very basic problem
can my account be a guest account? I'm using nobody as guest account. On Wed, 26 Jan 2005 11:03:27 -0500, Adam Tauno Williams <[EMAIL PROTECTED]> wrote: > > I'm troubled in such a very simple problem I think. > > I've setup a samba server (version 2.0.7) in a linux machine (distro > > conectiva 6.0). > > Thats a very old version of Samba > > > actually I just can't browse to my samba server :,( > > > > If I don't solve this problem I may lose my job! please any help, > > You have a valid guest account? > -- Fabio Mendes Soares Computing Engineer Ananindeua-PA-Brazil -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SWAT won't start
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeff Howard wrote: | Hi, | | I'm setting up Samba on a RH ES linux machine. I have basic functionality | working and can access a share from a Windows pc. I set up smb.conf | manually. I'd like to use SWAT but when I try to run it I get the error: | | -- The connection was refused when attempting to contact localhost:901 -- | | I set up the xinetd configuration file exactly as I've seen online. Webmin | works fine. I'm logged in as root. I tried turning off ipchains. Can't | get rid | of this error. Anyone have any ideas? | | Thanks in advance | | Jeff | Do you have an entry in /etc/services? You need a line like: swat901/tcp Also, don't forget to restart xinetd, if you change /etc/services. Cheers, deryck - -- Deryck Hodgehttp://www.devurandom.org/ Auburn University Libraries http://www.lib.auburn.edu/ Samba Team http://www.samba.org/ I found mayonnaise bottles and poked holes on top To capture Tinker Bell And they were just fireflies to the untrained eye But I could always tell - --Lori McKenna, from "Fireflies"(2004) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB98Bm4glRK0DaE8gRAhH2AJ9XQSwKHwLYIbAwPjVz3gNsxICdrQCeNRPm DMrK3DHAYLopexqtFVXifcw= =St9u -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] A Samba's very basic problem
> I'm troubled in such a very simple problem I think. > I've setup a samba server (version 2.0.7) in a linux machine (distro > conectiva 6.0). Thats a very old version of Samba > actually I just can't browse to my samba server :,( > > If I don't solve this problem I may lose my job! please any help, You have a valid guest account? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] SWAT won't start
Hi, I'm setting up Samba on a RH ES linux machine. I have basic functionality working and can access a share from a Windows pc. I set up smb.conf manually. I'd like to use SWAT but when I try to run it I get the error: -- The connection was refused when attempting to contact localhost:901 -- I set up the xinetd configuration file exactly as I've seen online. Webmin works fine. I'm logged in as root. I tried turning off ipchains. Can't get rid of this error. Anyone have any ideas? Thanks in advance Jeff -- __ Jeff Howard Software Engineer Office of the University Registrar University of North Carolina - Chapel Hill [EMAIL PROTECTED] 919.962.4315 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Mounting a linux samba share using fstab
What is the best way for me to mount my linux samba share to another linux server using fstab? I keep getting an ERRnoaccess (Access Denied) error. I can use: smbclient -L server -U username -w domain to view the shares but cannot figure out how best to mount it. Thanks, David Williams -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problems with cups and samba
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin Schmidt wrote: | Everyone can do printing, but my clients with Win98 | see all the jobs that have ever been printed since | I installed new when they open the printer-window, | they cannot access any of the jobs. It is not a | drama, but it is not convenient. Reportedly fixed in 3.0.11pre2. I have only 1 report that 3.0.11pre2 still has the issue so YMMV. | On the W2k/XP clients You do not see any print jobs, | but the frameline of the printer window shows "Could | not connect - access denied" Either install the print drivers on the server so that they can be downloaded to the windows clients or set the 'use client driver' topion in smb.conf(5). cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB97kgIR7qMdg1EfYRAjxQAKCY11S58yoDCe1KEL7EedlhbxuVeACfZY85 x8rRIum+NYjAGBkOu4qjo3Y= =KXXi -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] new printing patch for 3.0.10 may fix the 'failure to remove print jobs from queue list display'
On Wed 5 Jan 2005, at 17:57, Gerald (Jerry) Carter wrote:
> I've uploaded a new draft of the printing patch for 3.0.10
> to http://www.samba.org/~jerry/patches/post-3.0.10/
> The only change is a small fix to fix the register_message_flags()
> error messages in the logs. After some thought, I think this
> might address the 'jobs failing to be removed from the queue
> list' bug. If people could test and let me know, I would
> appreciate it.
Hi Jerry,
The patch (version #2) is working; when I print from an XP client to a CUPS
queue
(queue on hold), the print icon appears in the taskbar of the XP client.
When I remove
the print job from the CUPS queue, within 30 seconds the print icon on the
XP client
disappears.
I also added this patch from Jerome Borsboom to your patch.
--- samba-3.0.10/source/printing/printing.c 2005-01-10
15:07:27.060999122 +0100
+++ samba-3.0.10.new/source/printing/printing.c 2005-01-10
15:07:36.784464292 +0100
@@ -1077,6 +1077,7 @@
if ( !print_cache_expired(sharename, False) ) {
DEBUG(5,("print_queue_update_internal: print cache for %s is
still ok\n", sharename));
+ release_print_db( pdb );
return;
}
Is your printing patch Ok to use in production environments?
I saw that in the SAMBA_3_0 branch that printing/printing.c is changed with
your patch, but your patch also patches:
param/loadparm.c
smbd/lanman.c
smbd/negprot.c
smbd/reply.c
smbd/server.c
but I can see that these files are not updated with your patch in the
SAMBA_3_0
branch, or am I wrong?
Regards,
Alex.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] A Samba's very basic problem
Hi everyone! I'm troubled in such a very simple problem I think. I've setup a samba server (version 2.0.7) in a linux machine (distro conectiva 6.0). I've configured the global, homes and printers sections correctly, or at least it seems to be. I've also added my other shared resources in the smb.conf file. Then when I start samba server, I can see the netbios name of my server (\\PRINTERSERVER2\)from some computers (with windows) on the network, but on some computers I can't. In the first case which I can see my server (\\PRINTERSERVER2\), there is another problem: I can't browse into its shares, even if I give the my username's correct password I've added using smbpasswd and smbuser. Note: I'm using Windows 2000 Server to access my samba server. Since I've put a 'guest ok = Yes' parameter in my share's secton in the smb.conf file, I could have access to my resource with no password. But when I insert a blank username and a blank password, a message box just appear on my screen saying: "the network name was not found", or something like that; actually I just can't browse to my samba server :,( If I don't solve this problem I may lose my job! please any help, suggestions will be very greatly appreciated. I attach my smb.conf's file and a section from the samba log. Thanks for the opportunity. and sorry 'bout my english if it is hard to understand, I've never stepped outside my country. -- Fabio Mendes Soares Computing Engineer Ananindeua-PA-Brazil ps: I've seen that the /root/tmp permissions are supposed to be allright 777 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] delete option
hi to all I want give my users file/folder creation option but wanna restrict them from deleting any of the file even though they have created the file ! any suggestions ? aash -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] access denied with samba share
I had the same problem as well and finally found a solution. Some additional notices: - I can access subdirectories of the share, e.g. attempting to access \\server\share gives "access denied", \\server\share\data works. - Other XP Pro clients do not have this problem. - The problem does not occur with a share served by Samba 2.2.3a. - The problem does not occur after booting XP in Safe Mode with Networking. I'm using SUSE Linux 9.2 german and Samba Version 3.0.2a-SUSE. Then I finally found another client suddenly suffering from the same problem. The user had just installed Panda Antivirus, et voilá: Turning off the "permanent protection" feature (or deinstalling Panda) helped. It seems that the error exists at least since version 3.02.04, which is called "Titanium 2004". Because this is an older thread, I include both previous messages. Please excuse me if this should violate any rules. -alb On Sun Aug 1 17:42:38 GMT 2004, Lupe Christoph wrote: I can see the shares, I can map, for example, the J: drive to "shared", but cannot switch to it by typing: "J: enter". I'm having the same problem. Let me add what I found out: 1) I can access the share with smbclient from Linux. In fact, the machine that is also the server. 2) When I share the C drive from a Win98SE machine read-only, I can access it from the WinXP Pro machine. 3) When I share that drive read-write with an empty password, WinXP can also use. 4) As soon as I set a password for that share, I have the same problem I have with the Samba shares. 5) Deinstalling the most recent patches from Win XP did not give me that access back. 6) When I tcpdump the Samba connection, I see just one request and one reply, With an error STATUS_ACCESS_DENIED. I'm attaching the request and the response, as decoded by Ethereal. 7) I see nothing in the Samba traces the hints to the cause of the problem. But I'm no Samba Guru. I conclude that this is *not* a Samba problem. It must be caused by something on the Win XP side. That something causes it to fail to authenticate. On Sunday, 2004-08-01 at 10:26:49 -0700, chad work wrote: Hello Samba group, Problem: I cannot get samba share to grant access to my /shared share. I created it, gave the linux user permissions and tested them, my Windows XP Pro sees the share, I can map a drive to it, but I cannot change to it: Access denied is the error I get. I'm logged into Windows XP as the same user ID and password as on the Linux system. I had a problem when accessing the share at first with Windows prompting me for a userID and password, but I did the smbpasswd command, and got that working. Then I could see the shares. I can see the shares, I can map, for example, the J: drive to "shared", but cannot switch to it by typing: "J: enter". Testparm has no errors. Here are the results: [...] I'm using samba 3.0.5-2 on Fedora Core 2, and Windows XP Pro sp1, all tcp/ip. -Chad -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Visual Studio/Samba Compile from Shares issue
I've tried setting dos filetimes = yes and dos filetime resolution = yes, but this brought no change. The problem persists. Any more ideas? K. Gémes Géza wrote: Kelly S. Smelser írta: I've run into a problem in which Visual Studio 6.0 gives an Internal Compiler Error message when compiling from a samba share. The project compiles fine locally and from shares on Windows machines. To me this suggests that the issue is with Samba. I've tried adding full access to the share where the project is housed, but to no avail. Any ideas? We are running samba 3.0.9-1.3E.2 on a Redhat Enterprise 3 server. The clients are Windows XP machines running Visual Studio 6.0 w/ SP5. K. -- Kelly S. Smelser Labs Manager, Client Services University of Indianapolis [EMAIL PROTECTED] I've read something like this in the docs some time ago, I would suggest, to read about the dos filetimes smb.conf parameter in the smb.conf manpage. Cheers Geza -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-Rights-HOWTO
Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Farkas Levente wrote: |>> As promised, here's some quick docs on how to use |>> the privilege model included Samba 3.0.11pre2. |>> |>> http://samba.org/~jerry/Samba-Rights-HOWTO | | | does this also means that the Administrator user no longer | need uid=0? since AFAIK that was the only reason for this. | thanks in advance. Correct. The requirement of uid == 0 to join a domain is no longer a requirement. However, the superuser will bypass the privilege checks in most cases so root will still work. IHMO it's a very important changes so would be useful to document (and highlight in the release notes). -- Levente "Si vis pacem para bellum!" -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-Rights-HOWTO
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Farkas Levente wrote: |>> As promised, here's some quick docs on how to use |>> the privilege model included Samba 3.0.11pre2. |>> |>> http://samba.org/~jerry/Samba-Rights-HOWTO | | | does this also means that the Administrator user no longer | need uid=0? since AFAIK that was the only reason for this. | thanks in advance. Correct. The requirement of uid == 0 to join a domain is no longer a requirement. However, the superuser will bypass the privilege checks in most cases so root will still work. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB96LKIR7qMdg1EfYRAumlAJoDtiaHOmni9j+kswiCRIMvuza+owCcCmft qUj6/7gggGpK9c4As91tVK0= =Yi0J -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [samba] Does BDC also need trustdom ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel Wilson wrote: | Hi, | | Running 3.0.10. I have two PDC's running both with two | BDC's, i have a oneway trust account setup on my PDC's, do | i also need to setup up the trusts on the BDC's encase of | a PDC failure? If so how do i do this? This is a limitation in the current design that we hope to have fixed in the next few months. For now, your best bet is to copy the secrets.tdb file from the PDC to the BDCs. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB96ISIR7qMdg1EfYRAnK1AJ0bL8nTqMfk3DmObI9NWDS6CZRovgCgqgn9 8/yBwdUBk9vFKd0veBBctUo= =IRQS -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind error - Conversion error: Illegal multibyte sequence(æ~S^\^H)
i have the same problems since yesterday (was: SuSE 3.0.4) i attached the original mail ## ORIG MAIL TO SAMBA LIST [Samba] Possible Winbind Bug ?!?! hi, today i experience a very crazy behaviour: 1) yesterday my winbindd crashed (s. log.crash) (status: "dead") 2) restarted winbind and saw that some files have no owner (just the uidNumber) 3) getent passwd, wbinfo -u shows me all users (authenticating agains Windows PDC) 4) i'm using nsswitch (passwd: files winbind, group: files winbind) e.g. (getent passwd) (snip) install:x:10101:10016::/data/users/install:/bin/bash (snip) BUT: id install says "no such user" and files owned by install are visible as (ls -al) "drwx-- 10101.group filename" WEIRD: after mapping the homedrive of user "install", id install gives the correct data ?!?!?! all this starts since yesterday (after the crash) winbind always says in the logs: [2005/01/26 11:15:11, 3] lib/charcnv.c:convert_string_allocate(576) convert_string_allocate: Conversion error: Illegal multibyte sequence(..t) [2005/01/26 11:15:11, 3] lib/charcnv.c:convert_string_allocate(567) convert_string_allocate: Conversion error: Incomplete multibyte sequence(.t) [2005/01/26 11:15:11, 4] nsswitch/winbindd_group.c:get_sam_group_entries(561) get_sam_group_entries: Native Mode 2k domain; enumerating local groups as well [2005/01/26 11:15:11, 4] nsswitch/winbindd_group.c:get_sam_group_entries(570) get_sam_group_entries: Returned 0 local groups [2005/01/26 11:15:11, 3] nsswitch/winbindd_user.c:winbindd_getpwuid(225) [13474]: getpwuid 10101 [2005/01/26 11:15:11, 4] nsswitch/winbindd_acct.c:wb_getpwuid(414) wb_getpwuid: failed to locate uid == 10101 allthough wbinfo -u shows all users, wbinfo -S S-1-5-21-. gives 10101, and so on IT's CRAZY please help !!! versions: samba-3.0.10-0.1 samba-python-3.0.10-0.1 samba-winbind-3.0.10-0.1 samba-doc-3.0.9-2.1.5 samba-client-3.0.10-0.1 samba-pdb-3.0.10-0.1 samba-vscan-0.3.5-11.7.6 smb.conf (domain member in NT domain) # [global] workgroup = EVAN netbios name = nevanfs01 server string = Fileserver EVAN # netbios aliases = nevanfs02 username map = /etc/samba/username.map # admin users = @"Domain Admins" admin users = @"EVAN\edv" log level = 5 log file = /var/log/samba/log.%m max log size = 1 # passdb backend = ldapsam:"ldap://nevanpdc.eva.mpg.de:389 ldap://nevanbdc.eva.mpg.de:389"; # ldap passwd sync = yes ldap suffix = dc=eva,dc=mpg,dc=de ldap admin dn = uid=sambamanager,ou=Users,dc=eva,dc=mpg,dc=de # ldap filter = (&(objectclass=sambaSamAccount)(uid=%u)) ldap machine suffix = ou=Computers ldap user suffix = ou=Users ldap group suffix = ou=Groups ldap replication sleep = 2000 # ldap delete dn = yes # idmap backend = ldap:ldap://nevanpdc.eva.mpg.de:389 ldap:ldap://nevanbdc.eva.mpg.de:389 -> funktioniert (noch) nicht idmap backend = ldap:ldap://nevanpdc.eva.mpg.de:389 # idmap backend = ldap:ldap://nevanbdc.eva.mpg.de:389 ldap idmap suffix = ou=Idmap idmap uid = 1-5 idmap gid = 1-5 winbind use default domain = yes # winbind enum users = no # winbind enum groups = no # winbind trusted domains only = yes winbind cache time = 60 template shell = /bin/bash template homedir = /data/users/%U # follow symlinks = yes # wide links = yes interfaces = 192.168.1.239 bind interfaces only = yes guest ok = no guest account = Gast # guest account = nobody security = domain local master = no os level = 32 domain master = no domain logons = no encrypt passwords = yes # password server = nevanpdc, nevanbdc, * password server = evanpdc # socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY wins support = no dns proxy = no # add user script = /root/bin/BDC/adduser.sh '%u' # add machine script = /root/bin/BDC/addmachine.sh '%u' # add group script = /root/bin/BDC/addgroup.sh '%g' # add user to group script = /root/bin/BDC/add_to_group.sh '%u' '%g' # delete user script = /root/bin/BDC/deleteuser_rpc.sh '%u' # delete group script = /root/bin/BDC/deletegroup.sh '%g' # delete user from group script = /root/bin/BDC/delete_from_group.sh '%u' '%g' display charset = UTF8 unix charset = UTF8 # store DOS ATTRIB (Archive, ReadOnly, ...) in extended attributes (FS must support it) # map options must be set "no" store dos attributes = yes map archive = no map system = no map hidden = no unix extensions = no # printing = CUPS # printcap name = CUPS # load printers = yes # use client driver = yes [homes] (snip) LOGS ## # log.crash Jan 25 17:11:41 nevanfs01 winbindd[3698]: === Jan 25 17:11:41 nevanfs01 winbindd[3698]: [2005/01/25 17:11:41, 0] lib/fault.c:fault_report(37) Jan 25 17:11:41 nevanfs01 winbindd[3698]: INTERNAL ERROR: Signal 6 in pid 3698 (3.0.4-SUSE) Jan 25 1
Re: [Samba] Problems with Access Control for Shares on Samba 2
Hi again, two things: 1.) you did restart samba after making the changes true? 2.) you have changed your line guest = ok to guest ok = yes Did you? Christoph remote schrieb: Hi Christoph, thanks for the help unfortunately your suggestion doesn´t change the server´s behavior. hobbit5 still has both read and write permission (as intended), but other users still can´t enter the directory. Any other ideas ? Thanks, Jörg hi, to achive what you want the [hobbit5] should read [hobbit5] comment = hobbit5 path = /ALPHA-DATA/hobbit5 browseable = yes read only = yes guest ok = yes write list = hobbit5 ;force user = hobbit5 Christoph remote schrieb: Hi all ! I have a question regarding the access control in Samba 2. I want to make shares available to the Windows Network for which only the owner of the share has write access. Other users however should be able to read and browse these shares. My smb.conf : global] workgroup = leat guest account = nobody keep alive = 30 os level = 2 kernel oplocks = false security = user [hobbit5] comment = hobbit5 path = /ALPHA-DATA/hobbit5 browseable = yes read only = no guest = ok valid user = hobbit5 ;force user = hobbit5 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-Rights-HOWTO
As promised, here's some quick docs on how to use the privilege model included Samba 3.0.11pre2. http://samba.org/~jerry/Samba-Rights-HOWTO does this also means that the Administrator user no longer need uid=0? since AFAIK that was the only reason for this. thanks in advance. yours. -- Levente "Si vis pacem para bellum!" -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-Rights-HOWTO
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: |> As promised, here's some quick docs on how to use |> the privilege model included Samba 3.0.11pre2. |> |> http://samba.org/~jerry/Samba-Rights-HOWTO | | | Can I translate it into Japanese and re-post samba-jp mailing list? Of course :-) It would be much appreciated. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB95YDIR7qMdg1EfYRAi6MAKCiWVyWlXYAil00HaJirOK5Q4w5BwCcCPw4 1l1yIwJxXjxTYuNb2e9JV0A= =kzeX -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problems with Access Control for Shares on Samba 2
Hi Christoph, thanks for the help unfortunately your suggestion doesn´t change the server´s behavior. hobbit5 still has both read and write permission (as intended), but other users still can´t enter the directory. Any other ideas ? Thanks, Jörg hi, to achive what you want the [hobbit5] should read [hobbit5] comment = hobbit5 path = /ALPHA-DATA/hobbit5 browseable = yes read only = yes guest ok = yes write list = hobbit5 ;force user = hobbit5 Christoph remote schrieb: Hi all ! I have a question regarding the access control in Samba 2. I want to make shares available to the Windows Network for which only the owner of the share has write access. Other users however should be able to read and browse these shares. My smb.conf : global] workgroup = leat guest account = nobody keep alive = 30 os level = 2 kernel oplocks = false security = user [hobbit5] comment = hobbit5 path = /ALPHA-DATA/hobbit5 browseable = yes read only = no guest = ok valid user = hobbit5 ;force user = hobbit5 As far as I understand Samba, with this configuration any Samba user should be able to browse and read the hobbit5 - share, while only hobbit5 himself can write and delete within this share. However, what happens is that any Samba user can see the share in the Network Neighborhood, but except for hobbit5, none can enter it. Windows tells me that either the path is not correct or I don´t have the network privileges to do this. What do I do wrong ? Thanks, Jörg -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problems with Access Control for Shares on Samba 2
Hi all ! I have a question regarding the access control in Samba 2. I want to make shares available to the Windows Network for which only the owner of the share has write access. Other users however should be able to read and browse these shares. My smb.conf : global] workgroup = leat guest account = nobody keep alive = 30 os level = 2 kernel oplocks = false security = user [hobbit5] comment = hobbit5 path = /ALPHA-DATA/hobbit5 browseable = yes read only = no guest = ok valid user = hobbit5 ;force user = hobbit5 As far as I understand Samba, with this configuration any Samba user should be able to browse and read the hobbit5 - share, while only hobbit5 himself can write and delete within this share. However, what happens is that any Samba user can see the share in the Network Neighborhood, but except for hobbit5, none can enter it. Windows tells me that either the path is not correct or I don´t have the network privileges to do this. What do I do wrong ? Thanks, Jörg -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-Rights-HOWTO
On Mon, Jan 24, 2005 at 11:19:04AM -0600, Gerald (Jerry) Carter wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > As promised, here's some quick docs on how to use > the privilege model included Samba 3.0.11pre2. > > http://samba.org/~jerry/Samba-Rights-HOWTO Can I translate it into Japanese and re-post samba-jp mailing list? oota @ samba-jp -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[samba] Does BDC also need trustdom ?
Hi, Running 3.0.10. I have two PDC's running both with two BDC's, i have a oneway trust account setup on my PDC's, do i also need to setup up the trusts on the BDC's encase of a PDC failure? If so how do i do this? regards -- Daniel Wilson Systems Administrator IT & Communications Service University of Sunderland Unit1 Technology Park Chester Road Sunderland SR2 7PT Tel: 0191 515 2695 This e-mail contains information which is confidential and may be privileged and is for the exclusive use of the recipient. It is the responsibility of the recipient to ensure that this message and its attachments are virus free. Any views or opinions presented are solely those of the author and do not necessarily represent those of the University, unless otherwise specifically stated. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Possible Winbind Bug ?!?!
hi, today i experience a very crazy behaviour: 1) yesterday my winbindd crashed (s. log.crash) (status: "dead") 2) restarted winbind and saw that some files have no owner (just the uidNumber) 3) getent passwd, wbinfo -u shows me all users (authenticating agains Windows PDC) 4) i'm using nsswitch (passwd: files winbind, group: files winbind) e.g. (getent passwd) (snip) install:x:10101:10016::/data/users/install:/bin/bash (snip) BUT: id install says "no such user" and files owned by install are visible as (ls -al) "drwx-- 10101.group filename" WEIRD: after mapping the homedrive of user "install", id install gives the correct data ?!?!?! all this starts since yesterday (after the crash) winbind always says in the logs: [2005/01/26 11:15:11, 3] lib/charcnv.c:convert_string_allocate(576) convert_string_allocate: Conversion error: Illegal multibyte sequence(..t) [2005/01/26 11:15:11, 3] lib/charcnv.c:convert_string_allocate(567) convert_string_allocate: Conversion error: Incomplete multibyte sequence(.t) [2005/01/26 11:15:11, 4] nsswitch/winbindd_group.c:get_sam_group_entries(561) get_sam_group_entries: Native Mode 2k domain; enumerating local groups as well [2005/01/26 11:15:11, 4] nsswitch/winbindd_group.c:get_sam_group_entries(570) get_sam_group_entries: Returned 0 local groups [2005/01/26 11:15:11, 3] nsswitch/winbindd_user.c:winbindd_getpwuid(225) [13474]: getpwuid 10101 [2005/01/26 11:15:11, 4] nsswitch/winbindd_acct.c:wb_getpwuid(414) wb_getpwuid: failed to locate uid == 10101 allthough wbinfo -u shows all users, wbinfo -S S-1-5-21-. gives 10101, and so on IT's CRAZY please help !!! versions: samba-3.0.10-0.1 samba-python-3.0.10-0.1 samba-winbind-3.0.10-0.1 samba-doc-3.0.9-2.1.5 samba-client-3.0.10-0.1 samba-pdb-3.0.10-0.1 samba-vscan-0.3.5-11.7.6 smb.conf (domain member in NT domain) # [global] workgroup = EVAN netbios name = nevanfs01 server string = Fileserver EVAN # netbios aliases = nevanfs02 username map = /etc/samba/username.map # admin users = @"Domain Admins" admin users = @"EVAN\edv" log level = 5 log file = /var/log/samba/log.%m max log size = 1 # passdb backend = ldapsam:"ldap://nevanpdc.eva.mpg.de:389 ldap://nevanbdc.eva.mpg.de:389"; # ldap passwd sync = yes ldap suffix = dc=eva,dc=mpg,dc=de ldap admin dn = uid=sambamanager,ou=Users,dc=eva,dc=mpg,dc=de # ldap filter = (&(objectclass=sambaSamAccount)(uid=%u)) ldap machine suffix = ou=Computers ldap user suffix = ou=Users ldap group suffix = ou=Groups ldap replication sleep = 2000 # ldap delete dn = yes # idmap backend = ldap:ldap://nevanpdc.eva.mpg.de:389 ldap:ldap://nevanbdc.eva.mpg.de:389 -> funktioniert (noch) nicht idmap backend = ldap:ldap://nevanpdc.eva.mpg.de:389 # idmap backend = ldap:ldap://nevanbdc.eva.mpg.de:389 ldap idmap suffix = ou=Idmap idmap uid = 1-5 idmap gid = 1-5 winbind use default domain = yes # winbind enum users = no # winbind enum groups = no # winbind trusted domains only = yes winbind cache time = 60 template shell = /bin/bash template homedir = /data/users/%U # follow symlinks = yes # wide links = yes interfaces = 192.168.1.239 bind interfaces only = yes guest ok = no guest account = Gast # guest account = nobody security = domain local master = no os level = 32 domain master = no domain logons = no encrypt passwords = yes # password server = nevanpdc, nevanbdc, * password server = evanpdc # socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY wins support = no dns proxy = no # add user script = /root/bin/BDC/adduser.sh '%u' # add machine script = /root/bin/BDC/addmachine.sh '%u' # add group script = /root/bin/BDC/addgroup.sh '%g' # add user to group script = /root/bin/BDC/add_to_group.sh '%u' '%g' # delete user script = /root/bin/BDC/deleteuser_rpc.sh '%u' # delete group script = /root/bin/BDC/deletegroup.sh '%g' # delete user from group script = /root/bin/BDC/delete_from_group.sh '%u' '%g' display charset = UTF8 unix charset = UTF8 # store DOS ATTRIB (Archive, ReadOnly, ...) in extended attributes (FS must support it) # map options must be set "no" store dos attributes = yes map archive = no map system = no map hidden = no unix extensions = no # printing = CUPS # printcap name = CUPS # load printers = yes # use client driver = yes [homes] (snip) LOGS ## # log.crash Jan 25 17:11:41 nevanfs01 winbindd[3698]: === Jan 25 17:11:41 nevanfs01 winbindd[3698]: [2005/01/25 17:11:41, 0] lib/fault.c:fault_report(37) Jan 25 17:11:41 nevanfs01 winbindd[3698]: INTERNAL ERROR: Signal 6 in pid 3698 (3.0.4-SUSE) Jan 25 17:11:41 nevanfs01 winbindd[3698]: Please read the appendix Bugs of the Samba HOWTO collection Jan 25 17:11:41 nevanfs01 winbindd[3698]: [2005/01/25 17:11:41, 0] lib/fault
Re: [Samba] Inherit permissions question (Please help)
Hi Craig, Thanks for your reply. My suggestions for using a preexec script is a sort of "last resort" option. I could rather configure a job in cron that checks permissions. Ideally I need the "inherit permissions" option but with the ability to also include user & group ownership. To get this done samba would require root privileges to change the ownership of files to that of the parent folder - which probably wouldn't be a good idea ? Thanks for your help so far. Any assistance/input would be greatly appreciated. Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message - From: "Craig White" <[EMAIL PROTECTED]> To: Sent: Wednesday, January 26, 2005 10:41 AM Subject: Re: [Samba] Inherit permissions question (Please help) Am I the only one that thinks it's a terrible idea? When I need to make changes to user profiles, I use things like... logon script perl/shell script updates on actual samba server but I suppose that you could have a 'pre-exec' script that changes the ownership of all files in a person's profile be changed upon login. Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Inherit permissions question (Please help)
Am I the only one that thinks it's a terrible idea? When I need to make changes to user profiles, I use things like... logon script perl/shell script updates on actual samba server but I suppose that you could have a 'pre-exec' script that changes the ownership of all files in a person's profile be changed upon login. Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
