[Samba] How to give user access to only 1 directory on a share?

2008-03-06 Thread Matt Lozier
Hello,

 

Is there a way to give a single user access to a single directory on a given
share, and yet prevent that user from accessing the rest of the data on that
share?  All users on the system are within the *same* group, and if
possible, I'd like to keep it this way.  Would I have to go with ACLs to
implement this?

 

Any and all suggestions are appreciated! 

 

Thanks,

Matt

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems running samba in vmware

2008-03-06 Thread Scott Lovenberg

Douglas VanLeuven wrote:

Adam Zimmer wrote:
  

At the moment I have enabled timeSync with vmware tools.

In the general area of time keeping on the host, I added the following
settings which avoided errors about the RTC missing interrupts:
host.usefastclock=false
host.cpukHz=240
host.useTSC=true
ptsc.useTSC=true

I have two other machines similarly configured (with the exception of
running other linux applications not samba).

Ntpdate seems to be installed as it is part of the ubuntu-server default
config. However, my other machines seem to run it ok. If anything they
fall behind a bit and the vmware sync keeps them up-to-date.




  

Ian McDonald wrote:


How are your time sync options set for the VM? Is it keeping time ok?
(note,AFAIR, you're not supposed to run NTP within a VM.).

  


True.  I refer to this document from vmware.
http://www.vmware.com/pdf/vmware_timekeeping.pdf

Generally, ntp & vmware timesync fight each other.  The usual method is
to turn off the ntp service, figure out how to minimize interrupts,
allow the clock to run a little slow and allow vmware timesync to bump
up the time when it gets about 1 minute slow.

There's another thread that mentions issues with on-board nics and
drivers.  Over the years, I've bumped into that myself.  To the extent I
 try and use host-only and route whenever possible.  That's worked
better for me in generic usage.

Regards, Doug
  
Just an idea, although I've never tried it in vmware, if you can somehow 
make it a gig network connection and bring up the MTU and even enable 
NAPI in the guest, that should cut down on the IRQs, and slow clock 
drift.  Also, if you have a VMI kernel on the guest (that might be 
VMWare server - 2.0 only, not sure), it should play a little nicer.  
Also, if you can turn off hardware offloading in the guest, it probably 
couldn't hurt. 

With VMs I've found slimmed down kernels really seem to drag less, 
although it could just be the power of suggestion on my own part after 
spending twenty minutes staring at 'make menuconfig'.  Speaking of 
which, if you don't need X, running at runlevel 3 will help, too.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAMBA + KERBEROS + AD

2008-03-06 Thread ciro samba
Helio,
have you tested nsswitch with
`getent passwd`
should return

root:x:0:0::/root:/bin/bash
bin:x:1:1:bin:/bin:/bin/false
daemon:x:2:2:daemon:/sbin:/bin/false
adm:x:3:4:adm:/var/log:/bin/false
lp:x:4:7:lp:/var/spool/lpd:/bin/false
sync:x:5:0:sync:/sbin:/bin/sync
... etc
gdm:x:42:42:GDM:/var/state/gdm:/bin/bash
apache:x:80:80:User for Apache:/srv/httpd:/bin/false
messagebus:x:81:81:User for D-BUS:/var/run/dbus:/bin/false
haldaemon:x:82:82:User for HAL:/var/run/hald:/bin/false
pop:x:90:90:POP:/:/bin/false
nobody:x:99:99:nobody:/:/bin/false
EDITORA\administrator:*:1:1:Administrator:/home/EDITORA/administrator:/bin/false
EDITORA\guest:*:10001:10001:Guest:/home/EDITORA/guest:/bin/false
etc..;
your domain users must be mapped to linux users, with "winbind uid", which
you have in your smb.conf
if getent does not return domain users at all but wbinfo -u does, the
problems is with libnss_winbind.so

i download source code into /lib/usr/apps/whatsappname so my samba is in
/usr/local/apps/samba-3.0.28/ and the correct libnss_winbind.so is
/usr/local/apps/samba-3.0.28/source/nsswitch/libnss_winbind.so. copy this
file over /lib/libnss_winbind.so and
$ cd /lib
$ ln -s libnss_winbind.so libnss_winbind.so.2

and then getent passwd again, this sould do the trick

tks
Ciro


On Wed, Mar 5, 2008 at 4:05 PM, Helio Calaça Filho <[EMAIL PROTECTED]>
wrote:

> But i have to try with the "+"symbol, just like this exemple?
>
> SAMBA+Administrator
> or
> i have to try like this way
>
> SAMBAAdminitrator
>
> ???
>
>
>
>
>
> --
> Atte,
> Hélio Calaça Filho
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Printing samba, cups and legacy 16 bit applications

2008-03-06 Thread ciro samba
ridiculously simple, what confounded me was that vb3 was able to print to
macromedia flash paper, several other network printers shared under windows
xp and win98 and pdf printers.
maybe something special with the PS driver.
many tks
Ciro

On Fri, Feb 29, 2008 at 12:17 PM, Jim Shanks <[EMAIL PROTECTED]> wrote:

> > hello everybody,
> > I have come to a dead end.
> > I have successfully configured cups and samba to print from windows with
> > automated drivers download.
> > It works perfectly, but for one little problem, most of the printing
> here
> > in
> > my company are reports printed by the ERP software, which has been
> > developed
> > by ouserlves some 12 years ago in (oohh sucks) Visual basic 3.
> >
> > The problem is:
> > Every single application prints successfully except apps developed in
> Vb3.
> > I have developed a wonderful test app with amazing 3 lines of code.
> >
> > event form load
> > cmdialog1.action=5 'opens windows common dialog for choosing printer
> > printer.print time 'prints time in the upper left corner of the page
> > printer.enddoc 'finishes print job
> > end
> >
> > the same app built with vb6 prints ok, built with vb3 does not print,
> and
> > what's worse, does not generate any kind of error, the job simply
> > disapears.
> > worse than that. if i check the "print to file" option of the ps driver,
> > save the file with whatever name, copy it to my cups/samba server and
> > print
> > it with lpr, it prints, either from vb3 or vb6.
> >
> > i believe the problem is with the 8.3 filename restriction of vb3 and
> the
> > smbprn.XX filename of samba spool directory although i`m not certain
> > of
> > who really creates this file, the app, the windows driver or samba
> itself.
> >
> > i have pcap files of the network from the moment i click the ok button
> in
> > the printing dialog, But i could not make any sense out of them.
> >
> > if someone could be of any help!
> >
> > tks a lot
> >
> > Ciro Souza
> >
> >
>
> Ciro,
>
> It's been quite a while since I had to do this, but if I remember right,
> with Windows 2000 and Windows XP clients running most 16 bit applications,
> you'll have to "capture" a local LPT port to your network printer in order
> to get the application to print.
>
> Run the following at the DOS prompt at the client workstation:
>
> net use LPT2:  \\servername\shared-printer-name
>
> Then from the 16-bit application, print to LPT2
>
> Jim
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: Fwd: [Samba] roaming profiles stored on BDCs? how?

2008-03-06 Thread Scott Lovenberg

John Drescher wrote:

On Thu, Mar 6, 2008 at 4:15 PM, Adam Williams <[EMAIL PROTECTED]> wrote:
 > I have a PDC named GOMER w/ IP of 10.8.3.37 and a BDC named BLDG2 w/ ip
 >  of 10.8.7.2.  when someone on the 10.8.7.x network using the WINS server
 >  of 10.8.7.2 logs in and out, their roaming profile is stored on the
 >  PDC.  is there any way to have the roaming profile stored on the BDC?,
 >  because I will have other 10.8.x.x networks and some of these remote
 >  sites will be using DSL and I don't want the profiles transfering over
 >  DSL.  any suggestions?
 >

 You can put the roaming profile on any cifs/sanba server in your
 network. I have mine on a standalone server.

 see

 logon path

 John



  
FWIW, this sounds like a good application for DFS.  It will give you a 
layer of abstraction that's seamless, in theory.  Although, I've never 
tried it in practice.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: cifs verses smbfs for Linux clients -time stamp issue

2008-03-06 Thread Günter Kukkukk
Am Donnerstag, 6. März 2008 schrieb Lukasz Szybalski:
> After mounting a windows share via cifs I have came across the same
> issue as described here:
> 
> http://lists.samba.org/archive/samba/2006-April/119813.html
> 
> "While using vim on files mounted under CIFS, when trying to write an
> existing file you will randomly be warned "The file has been changed
> since reading it!!!".  Normally, this only occurs when another user
> accesses and saves the between your opening and writing.  I can verify
> this is not the case and is not/was not an issue for files mounted under
> SMBFS.  I'm assuming there is a discrepancy between what the server
> machine is telling the client is the last modification or access
> date/time.
> "
> 
> Is there an option for cifs that fixes this issue? This was on the
> list back in 2006 I'm not sure why it is still the case in 2008?

a) what version of cifs are you running? Outcome of "modinfo cifs".
b) what kind of operating system - *nix, windows or ... - is running
   on the remote box to which you connect via cifs?
In case you're mounting a remote samba server, are the "unix extensions"
enabled?
Cheers, Günter


signature.asc
Description: This is a digitally signed message part.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Configure specific nmbd response

2008-03-06 Thread Jim Ramsay
I need to know if I can somehow tell nmbd which IP address on a
multiple-ip interface to report - It is picking the wrong one!

Details:

smb.conf is currently set up to bind to all interfaces in the machine.

vrm378-02 ~ # ip addr show dev br0
216: br0:  mtu 1500 qdisc noqueue 
link/ether 00:1e:0b:65:c8:65 brd ff:ff:ff:ff:ff:ff
inet 10.8.50.71/24 brd 10.8.50.255 scope global br0
inet 10.8.50.72/24 brd 10.8.50.255 scope global secondary br0
inet 10.8.50.73/24 brd 10.8.50.255 scope global secondary br0
inet 10.8.50.74/24 brd 10.8.50.255 scope global secondary br0
inet 10.8.50.75/24 brd 10.8.50.255 scope global secondary br0
vrm378-02 ~ # nmblookup -B 10.8.50.255 vrm378-02
querying vrm378-02 on 10.8.50.255
10.8.50.75 vrm378-02<00>

The problem is that I'm using iptables to do static nat that eats all
the packets bound for every IP on br0 except for the "primary" one of
10.8.50.71 - How do I tell nmbd to return that one instead of the
latest-added address of 10.8.50.75?

-- 
Jim Ramsay


signature.asc
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems running samba in vmware

2008-03-06 Thread Douglas VanLeuven
Adam Zimmer wrote:
> At the moment I have enabled timeSync with vmware tools.
> 
> In the general area of time keeping on the host, I added the following
> settings which avoided errors about the RTC missing interrupts:
> host.usefastclock=false
> host.cpukHz=240
> host.useTSC=true
> ptsc.useTSC=true
> 
> I have two other machines similarly configured (with the exception of
> running other linux applications not samba).
> 
> Ntpdate seems to be installed as it is part of the ubuntu-server default
> config. However, my other machines seem to run it ok. If anything they
> fall behind a bit and the vmware sync keeps them up-to-date.
> 

> 
> Ian McDonald wrote:

>>
>> How are your time sync options set for the VM? Is it keeping time ok?
>> (note,AFAIR, you're not supposed to run NTP within a VM.).
>>

True.  I refer to this document from vmware.
http://www.vmware.com/pdf/vmware_timekeeping.pdf

Generally, ntp & vmware timesync fight each other.  The usual method is
to turn off the ntp service, figure out how to minimize interrupts,
allow the clock to run a little slow and allow vmware timesync to bump
up the time when it gets about 1 minute slow.

There's another thread that mentions issues with on-board nics and
drivers.  Over the years, I've bumped into that myself.  To the extent I
 try and use host-only and route whenever possible.  That's worked
better for me in generic usage.

Regards, Doug
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems running samba in vmware

2008-03-06 Thread Wes Deviers
I had a similar problem using a machine running 3 VMs on a Linux host 
(Debian).  I don't know what was actually wrong, but switching to a 
non-onboard NIC helped considerably.  My working theory was that the 
combination of a crappy onboard chipset + promiscuous operation + VMWare 
Magic was causing it to drop packets, or generate too many interrupts, 
or something.  As is always the case, I didn't have enough time to 
properly debug it, just fix it.


Another theory I had, totally unsubstantiated but possible, was samba & 
network interaction with the VMWare clock skewing problem under Linux 2.6. 

I'd try putting a high-quality NIC on the machine and see what happens.  
Another thing you might try is loading up the VMWare drive in VirtualBox 
and setting it up that way.  VirtualBox uses Linux bridging instead of 
VMWare Magic, and I've seen it fix some things that VMWare didn't handle 
nicely.


Wes


On 03/06/2008 04:56 PM, Adam Zimmer wrote:

I have now removed those socket options. I am running Linux 2.6.22.

However, the delays persist. Any other ideas? I thought it might be 
name resolution so I tried:

name resolve order = wins host bcast

But this hasn't helped either.

Adam Zimmer
President
Arius Software Corporation
(519) 885-9045 x122



Charles Marcus wrote:

On 3/6/2008, Adam Zimmer ([EMAIL PROTECTED]) wrote:
I have tried various socket options including SO_RCVBUF=8192, 
SO_SNDBUF=8192, IPTOS_LOWDELAY, TCP_NODELAY, SO_KEEPALIVE. At the 
moment I have set SO_RCVBUF and SO_SNDBUF to be equal to 1400 as I 
noticed the MTU of the network card was 1500 which seems to but down 
on the broken pipes. 


I'm not saying this is cauing  your problem, but you shouldn't be 
setting these at all, as long as you have a modern kernel (2.6 
series)...


These haven't been needed for a long time.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems running samba in vmware

2008-03-06 Thread Adam Zimmer
I checked running mii-tool and it indicated that it was only using 
100basetx-FD. Not sure how to change this as using vmware server UI 
(just vmware server 1.04 not ESX) I don't see any options and also the 
config file doesn't list anything for the VM.


The previous server was running 32 bit.

Adam Zimmer
President
Arius Software Corporation
(519) 885-9045 x122



Lukasz Szybalski wrote:

On Thu, Mar 6, 2008 at 3:56 PM, Adam Zimmer <[EMAIL PROTECTED]> wrote:
  

I have now removed those socket options. I am running Linux 2.6.22.

 However, the delays persist. Any other ideas? I thought it might be name
 resolution so I tried:
 name resolve order = wins host bcast

 But this hasn't helped either.



Could you check what settings are set for the vmware network card
speed. Is it in fact 1gb? My vmware as default made a 10/100 network
card. Not sure what would be some other vmware specific settings that
could be checked to see if it has issues. Was the previous server a
64bit as well?

Lucas
  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems running samba in vmware

2008-03-06 Thread Adam Zimmer

At the moment I have enabled timeSync with vmware tools.

In the general area of time keeping on the host, I added the following 
settings which avoided errors about the RTC missing interrupts:

host.usefastclock=false
host.cpukHz=240
host.useTSC=true
ptsc.useTSC=true

I have two other machines similarly configured (with the exception of 
running other linux applications not samba).


Ntpdate seems to be installed as it is part of the ubuntu-server default 
config. However, my other machines seem to run it ok. If anything they 
fall behind a bit and the vmware sync keeps them up-to-date.


Adam Zimmer
President
Arius Software Corporation
(519) 885-9045 x122



Ian McDonald wrote:




How are your time sync options set for the VM? Is it keeping time ok? 
(note,AFAIR, you're not supposed to run NTP within a VM.).


--
ian


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems running samba in vmware

2008-03-06 Thread Adam Zimmer

I have now removed those socket options. I am running Linux 2.6.22.

However, the delays persist. Any other ideas? I thought it might be name 
resolution so I tried:

name resolve order = wins host bcast

But this hasn't helped either.

Adam Zimmer
President
Arius Software Corporation
(519) 885-9045 x122



Charles Marcus wrote:

On 3/6/2008, Adam Zimmer ([EMAIL PROTECTED]) wrote:
I have tried various socket options including SO_RCVBUF=8192, 
SO_SNDBUF=8192, IPTOS_LOWDELAY, TCP_NODELAY, SO_KEEPALIVE. At the 
moment I have set SO_RCVBUF and SO_SNDBUF to be equal to 1400 as I 
noticed the MTU of the network card was 1500 which seems to but down 
on the broken pipes. 


I'm not saying this is cauing  your problem, but you shouldn't be 
setting these at all, as long as you have a modern kernel (2.6 series)...


These haven't been needed for a long time.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Fwd: [Samba] roaming profiles stored on BDCs? how?

2008-03-06 Thread John Drescher
On Thu, Mar 6, 2008 at 4:15 PM, Adam Williams <[EMAIL PROTECTED]> wrote:
 > I have a PDC named GOMER w/ IP of 10.8.3.37 and a BDC named BLDG2 w/ ip
 >  of 10.8.7.2.  when someone on the 10.8.7.x network using the WINS server
 >  of 10.8.7.2 logs in and out, their roaming profile is stored on the
 >  PDC.  is there any way to have the roaming profile stored on the BDC?,
 >  because I will have other 10.8.x.x networks and some of these remote
 >  sites will be using DSL and I don't want the profiles transfering over
 >  DSL.  any suggestions?
 >

 You can put the roaming profile on any cifs/sanba server in your
 network. I have mine on a standalone server.

 see

 logon path

 John



-- 
John M. Drescher
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems running samba in vmware

2008-03-06 Thread Charles Marcus

On 3/6/2008, Adam Zimmer ([EMAIL PROTECTED]) wrote:
I have tried various socket options including SO_RCVBUF=8192, 
SO_SNDBUF=8192, IPTOS_LOWDELAY, TCP_NODELAY, SO_KEEPALIVE. At the 
moment I have set SO_RCVBUF and SO_SNDBUF to be equal to 1400 as I 
noticed the MTU of the network card was 1500 which seems to but down 
on the broken pipes. 


I'm not saying this is cauing  your problem, but you shouldn't be 
setting these at all, as long as you have a modern kernel (2.6 series)...


These haven't been needed for a long time.

--

Best regards,

Charles
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problems running samba in vmware

2008-03-06 Thread Adam Zimmer
I have used samba for nearly 9 years with no problems and we have about 
20 users. In the past we have had a dedicated samba server. We have 
recently virtualized this server to a quad core Q6600 using vmware 
virtual server 1.0.4 on a 64 bit host running ubuntu 7.10.


As part of the virtualization I installed samba 3.0.26a in ubuntu 7.10. 
Since this has happened users have complained about random delays. The 
machine itself is not using much CPU or memory. When I ssh and run top 
there is very little CPU utilization. I increased it from 1 to 2 cpus 
with no difference observed.


I have noticed to things in the logs of interest:
[2008/03/06 12:20:10, 0] lib/util_sock.c:write_data(562)   write_data: 
write failure in writing to client x.x.x.x. Error Broken pipe
[2008/03/06 12:20:10, 0] lib/util_sock.c:send_smb(769)   Error writing 
64 bytes to client. -1. (Broken pipe)


Also
[2008/03/06 14:29:57, 1] smbd/service.c:close_cnum(1230)    
(x.x.x.x) closed connection to service 


I noticed that when I run nbtstat on the client machine the net bios 
name has expired and it seems to take a while to find it again. I have 
samba configured as a WINS server.


I disabled oplocks on this particular share but the error still occurs. 
I have also disabled level 2 oplocks and kernel oplocks.


I have tried keep alive = 0, keep alive = 30, keep alive = 180 which 
seems to help a little bit with the delays.


I have tried various socket options including SO_RCVBUF=8192, 
SO_SNDBUF=8192, IPTOS_LOWDELAY, TCP_NODELAY, SO_KEEPALIVE. At the moment 
I have set SO_RCVBUF and SO_SNDBUF to be equal to 1400 as I noticed the 
MTU of the network card was 1500 which seems to but down on the broken 
pipes.


The server has a GB onboard network card and the clients mostly are GB 
network cards but some of them passthrough IP phones which are 100MB.


At any time when the delay (up to 60 s) occurs I can ssh into the samba 
server instantly using its dns name.


Aside from random delays the setup seems to work fine.

--
Adam Zimmer
President
Arius Software Corporation
(519) 885-9045 x122

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The Infamous "read_data: read failure for 4 bytes"

2008-03-06 Thread Jeremy Allison
On Wed, Mar 05, 2008 at 04:17:35PM -0500, Phil wrote:
> Hello all,
> 
> I'm far from being a samba expert and truth be told I could use some
> education on networking in general but here it is...
> 
> I have a stand alone samba server that I use a stunnel to connect to.  Reads
> take place fine from the server but writes *always* fail exactly one time
> per open session, but if you immediately try to copy the file again it will
> work (without closing the window), in fact all file transfers will work
> perfectly beyond this point.  By open session I mean from the time you open
> up the network drive to the time you close the window.  On the client side I
> receive the message "Cannot copy FILENAME: The specified network name is no
> longer available.", in the server logs I see the following;
> 
> Mar  5 15:59:52 HOSTNAME smbd[13086]: [2008/03/05 15:59:52, 0]
> lib/util_sock.c:read_data(534)
> Mar  5 15:59:52 HOSTNAME smbd[13086]:   read_data: read failure for 4 bytes
> to client 127.0.0.1. Error = Connection reset by peer

All that means is that the client terminated the connection. You
need to find out why.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] roaming profiles stored on BDCs? how?

2008-03-06 Thread Adam Williams
I have a PDC named GOMER w/ IP of 10.8.3.37 and a BDC named BLDG2 w/ ip 
of 10.8.7.2.  when someone on the 10.8.7.x network using the WINS server 
of 10.8.7.2 logs in and out, their roaming profile is stored on the 
PDC.  is there any way to have the roaming profile stored on the BDC?, 
because I will have other 10.8.x.x networks and some of these remote 
sites will be using DSL and I don't want the profiles transfering over 
DSL.  any suggestions?


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Vista, 35 second login delay, domain only.

2008-03-06 Thread odi
Hello,
maybe you are not alone with that behaviour, seems to be same with 
Solaris10/Samba3.0.25c and Vista domain client. Currently I've no solution 
for this problem,

regards


Am Donnerstag, 6. März 2008 17:05:07 schrieb [EMAIL PROTECTED]:
> Hello,
>
> I've spent time trying to find an answer to this one, but no luck.
> The main problem is that when any user logs into Vista with a domain
> account, there will be ~35 second delay where the system just sits at
> the welcome screen with the spinning circle. (after typing their
> password)
>
> This happens on Vista sp1, and earlier. Also on Samba 3.0.24, 3.0.28 and
> 3.2. I'm pretty sure the DNS is okay, as everything else seems fine. Even
> XP machines login normally.
> Regardless of profiles being roaming or local, the delay is still there.
> tcpdump shows no activity during this delay.
> I've tried removing all traces of ipv6, from both the server and the
> client. All firewalls are off on both server and client.
> I'm pretty sure its Vista thats doing something, but just have no clue
> where to look.
> Local accounts login within a few seconds, and the domain logins are
> almost bareable at about 35 seconds, but really quite annoying. :(
>
> I'm curious to know if anyone else experiences this or not?
>
> Thanks!
> Mike


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems sharing windows printer with linux

2008-03-06 Thread Maginot Junior
Just solved the problem, and Im going to share hoping to help other
that could came with the same problem:

Disable the Administratives shares going into windows registry, this
will make cups find the right printer share.
#
http://support.microsoft.com/kb/314984
#
Servers

For NT 4.0/W2K/Windows Server 2003s, the change is:

Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareServer
Data Type: REG_DWORD
Value: 0

Idiot proof note: If you can't find the value in the registry under
the exact location (i.e. it does not exist) - please right click in
the right pane of the window and create it.

Note: A reboot is necessary for this to take effect.
Workstations

For NT 4.0 Workstation/W2K Pro/XP Pro, the change is:

Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareWks
Data Type: REG_DWORD
Value: 0
#---



best regards! [ ]'s

On Thu, Mar 6, 2008 at 1:12 PM, Maginot Junior <[EMAIL PROTECTED]> wrote:
> I think you don't understand my problem. This isn't something normal,
>  I know how to connect to server, but my problem if you follow below
>  you will see is that my sharing is showing as an administrative share,
>  the kind that I cant make work. And this is the big deal, if I share a
>  printer in a winxp box normally I can easily find at //server/printer
>  and so I hope the same happen with this w2k printer share.
>
>  But, I will take a look at the link and see if digging more on this I
>  can answer my problem, but I still have the problem, and if someone
>  have some better idea on how to fix it or even a link showing more
>  focused to this issue will be very good.
>
>  [ ]'s
>
>
>
>  On Thu, Mar 6, 2008 at 12:17 PM, Chris Smith <[EMAIL PROTECTED]> wrote:
>  > On Thursday 06 March 2008, Maginot Junior wrote:
>  >  > I try to connect using cups
>  >
>  >  http://cups.org/doc-1.1/sam.html#8_9
>  >
>  >  --
>  >  Chris
>  >  --
>  >  To unsubscribe from this list go to the following URL and read the
>  >  instructions:  https://lists.samba.org/mailman/listinfo/samba
>  >
>
>
>
>
>
> --
>  Maginot Júnior
>  "the game of life"
>  LPIC - CCNA - ¿Designer?
>



-- 
Maginot Júnior
"the game of life"
LPIC - CCNA - ¿Designer?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Vista, 35 second login delay, domain only.

2008-03-06 Thread michael

Hello,

I've spent time trying to find an answer to this one, but no luck.
The main problem is that when any user logs into Vista with a domain  
account, there will be ~35 second delay where the system just sits at  
the welcome screen with the spinning circle. (after typing their  
password)


This happens on Vista sp1, and earlier. Also on Samba 3.0.24, 3.0.28 and 3.2.
I'm pretty sure the DNS is okay, as everything else seems fine. Even  
XP machines login normally.

Regardless of profiles being roaming or local, the delay is still there.
tcpdump shows no activity during this delay.
I've tried removing all traces of ipv6, from both the server and the client.
All firewalls are off on both server and client.
I'm pretty sure its Vista thats doing something, but just have no clue  
where to look.
Local accounts login within a few seconds, and the domain logins are  
almost bareable at about 35 seconds, but really quite annoying. :(


I'm curious to know if anyone else experiences this or not?

Thanks!
Mike




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: cifs verses smbfs for Linux clients -time stamp issue

2008-03-06 Thread Lukasz Szybalski
After mounting a windows share via cifs I have came across the same
issue as described here:

http://lists.samba.org/archive/samba/2006-April/119813.html

"While using vim on files mounted under CIFS, when trying to write an
existing file you will randomly be warned "The file has been changed
since reading it!!!".  Normally, this only occurs when another user
accesses and saves the between your opening and writing.  I can verify
this is not the case and is not/was not an issue for files mounted under
SMBFS.  I'm assuming there is a discrepancy between what the server
machine is telling the client is the last modification or access
date/time.
"

Is there an option for cifs that fixes this issue? This was on the
list back in 2006 I'm not sure why it is still the case in 2008?

Ideas?
Lucas



-- 
Samba Domain on Debian
http://lucasmanual.com/mywiki/SambaDomainController
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems sharing windows printer with linux

2008-03-06 Thread Maginot Junior
I think you don't understand my problem. This isn't something normal,
I know how to connect to server, but my problem if you follow below
you will see is that my sharing is showing as an administrative share,
the kind that I cant make work. And this is the big deal, if I share a
printer in a winxp box normally I can easily find at //server/printer
and so I hope the same happen with this w2k printer share.

But, I will take a look at the link and see if digging more on this I
can answer my problem, but I still have the problem, and if someone
have some better idea on how to fix it or even a link showing more
focused to this issue will be very good.

[ ]'s

On Thu, Mar 6, 2008 at 12:17 PM, Chris Smith <[EMAIL PROTECTED]> wrote:
> On Thursday 06 March 2008, Maginot Junior wrote:
>  > I try to connect using cups
>
>  http://cups.org/doc-1.1/sam.html#8_9
>
>  --
>  Chris
>  --
>  To unsubscribe from this list go to the following URL and read the
>  instructions:  https://lists.samba.org/mailman/listinfo/samba
>



-- 
Maginot Júnior
"the game of life"
LPIC - CCNA - ¿Designer?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: [linux-cifs-client] Unable to mount using sec=none and mount.cifs

2008-03-06 Thread Christopher DeMarco
On Wed, Mar 05, 2008 at 04:40:49PM -0500, Jeff Layton wrote:

> I pushed this patch to Steve ~last may. You might want to check that
> the kernel you're working with has it. Without it, sec=none doesn't
> really do what you expect...

[snip]

> We had a customer report that attempting to make CIFS mount with a null
> username (i.e. doing an anonymous mount) doesn't work. Looking through the
> code, it looks like CIFS expects a NULL username from userspace in order
> to trigger an anonymous mount. The mount.cifs code doesn't seem to ever
> pass a null username to the kernel, however.

My mistake -- I was misusing that sec=none option; I was under the
impression that it worked as in mount.smbfs (to force cleartext
authentication).


-- 
Christopher DeMarco <[EMAIL PROTECTED]>
IT Director
MAYA Group
+1-412-488-2900

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Unable to mount using sec=none and mount.cifs

2008-03-06 Thread Christopher DeMarco
On Thu, Mar 06, 2008 at 12:04:26PM +, [EMAIL PROTECTED] wrote:

> Date: Wed, 5 Mar 2008 16:09:01 -0500
> To: samba@lists.samba.org
> From: Chris Smith <[EMAIL PROTECTED]>

> 
> On Wednesday 05 March 2008, Christopher DeMarco wrote:
> > //superman/www-pub  /smb/superman/www-pub   cifs  
> >  auto,uid=33,gid=33,username=WORKGROUP/www-pub,password=sekret,sec=no
> >ne   0 0
> 
> Maybe no help but try leaving "sec=none" out of your fstab entry. From 
> the man page it seems "none" means "attempt to connection as a null 
> user (no name)". I can connect to a guest share using "sec=none" but 
> not to other shares.

My mistake.  Removing it does not fix the problem.


> And although the username appears valid you might try splitting the 
> domain name from it: "user=www-pub,domain=WORKGROUP,pass=sekret", even 
> better to use a credentials file.
> More like:
> //superman/www-pub /smb/superman/www-pub cifs auto,credentials=cfile 0 0

No luck.


-- 
Christopher DeMarco <[EMAIL PROTECTED]>
IT Director
MAYA Group
+1-412-488-2900

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba update process

2008-03-06 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

All of this information is either in the release notes or the documentation.

Arumugam, Sureshbabu wrote:
> Hi Team,
> 
> I am planning to upgrade the samba in my solaris 10 server from Version
> 3.0.21b to version 3.0.25 or above.
> 
> Do we have an upgrade process available or we need to uninstall the
> existing version and install the required version and configure.
> 
> Thanks
> Suresh

- --
  _  _ _  _ ___  _  _  _
 |Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Systems Programmer II
 |$&| |__| |  | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922)
 \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFH0Bbwmb+gadEcsb4RAogOAJ9OyXhjjDwnyg78WRfo/T0lrCX50gCgxVzp
LW72VwXmI9q28bR47BsVJXk=
=iVeu
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: wbinfo -a not working

2008-03-06 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I've had similar problems as well, though I was using Solaris 10u3. I
never have had the time to dedicate to getting it working. On Solaris,
getting the PAM/nsswitch stuff correct enough was my biggest problem
(since on Solaris, PAM is a little different than Linux). One day.

=R

Whit Blauvelt wrote:
> Similar problem here, running Ubuntu Workstation 7.10 (so, also Debian). But
> it looks like I'm failing a stop beyond you.
> 
> Works
>   kinit
>   wbinfo -u
>   wbinfo -g 
>   wbinfo -t
> 
> Fails - but note last line is a different result:
>   wbinfo -a whit%
> 
>   plaintext password authentication failed
>   error code was NT_STATUS_NO_SUCH_USER (0xc064)
>   error messsage was: No such user
>   Could not authenticate user whit%   challenge/response password authentication succeeded
> 
> However, despite the "succeeded" message there, from another box I see:
> 
>   # smbclient //no3/ftp  -Uwhit%  
>   Domain=[ABC] OS=[Unix] Server=[Samba 3.0.26a]
>   tree connect failed: NT_STATUS_ACCESS_DENIED
> 
> And from samba:
> 
> [2008/02/16 15:05:30, 2] auth/auth.c:check_ntlm_password(309)
>   check_ntlm_password:  authentication for user [whit] -[whit] -[whit] 
> succeeded
> [2008/02/16 15:05:30, 0] auth/auth_util.c:create_builtin_administrators(792)
>   create_builtin_administrators: Failed to create Administrators
> [2008/02/16 15:05:30, 2] auth/auth_util.c:create_local_nt_token(914)
>   create_local_nt_token: Failed to create BUILTIN\Administrators group!
> [2008/02/16 15:05:30, 0] auth/auth_util.c:create_builtin_users(758)
>   create_builtin_users: Failed to create Users
> [2008/02/16 15:05:30, 2] auth/auth_util.c:create_local_nt_token(941)
>   create_local_nt_token: Failed to create BUILTIN\Users group!
> [2008/02/16 15:05:30, 2] lib/access.c:check_access(323)
>   Allowed connection from  (192.168.1.250)
> [2008/02/16 15:05:30, 2] lib/access.c:check_access(323)
>   Allowed connection from  (192.168.1.250)
> [2008/02/16 15:05:30, 2] smbd/service.c:make_connection_snum(616)
>   user 'whit' (from session setup) not permitted to access this share (FTP)
> 
> Despite that in smb.conf there is:
> 
> [global]
>   winbind separator = \
>   ...
> [FTP]
>   valid users = ABC\whit
>   ...
> 
> In looking around for docs, nothing is complete, nothing is well
> cross-referenced with the rest, but this seems among the best:
> http://wiki.samba.org/index.php/Samba_&_Active_Directory
> 
> I've found some old posts to this list about the BUILTIN stuff I ran into
> above, but just the problem reports, no description of the solution - or
> even if the errors there have anything to do with the subsequent failure to
> recognize that, yes samba, user 'whit' has explicit permission in smb.conf.
> It also fails with "winbind use default domain" which reportedly should mean
> no need to specify as "ABC\whit" but just "whit" should do. 
> 
> I've tried both krb5 and heimdal, with identical results. Curiously I was
> able to get it working just if my nsswitch.conf listed _only_ winbind for
> passwd: and group: entries - although of course without "compat" or "files"
> on that line local system users time out and the system becomes unusable
> after a short. The remote login then went fine though, using AD. WTF?
> 
> Whit
>  
> On Sat, Feb 16, 2008 at 05:00:07PM +0100, Rutger Beyen wrote:
>>  
>> I'm trying to connect my Debian 4 samba box to my Windows 2003Server Active
>> Directory.
>> I successfully joined the domain, with net ads join. Wireshark captures a
>> lot of packets going over the wire, and I get the message "joined the domain
>> successfully". In my AD, under 'computers', the samba box appeared. So that
>> all works.
>> Asking a kerberos ticket for a user with kinit is also successful. So
>> kerberos is working fine.
>>  
>> Wbinfo -u gives me all the users I have in my AD, and wbinfo -g does the
>> same with all the groups. wbinfo -t also working fine.
>> But when I try wbinfo -a rutger%rutger, I get 
>>  
>> plaintext password authentication failed
>> error code was NT_STATUS_NO_SUCH_USER (0xc064)
>> error messsage was: No such user
>> Could not authenticate user rutger%rutger with plaintext password
>> challenge/response password authentication failed
>> error code was NT_STATUS_NO_SUCH_USER (0xc064)
>> error messsage was: No such user
>> Could not authenticate user rutger with challenge/response
>>  
>> Same result with wbinfo -K. It says the user does not exist, but it is there
>> when I do a wbinfo -u.


- --
  _  _ _  _ ___  _  _  _
 |Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Systems Programmer II
 |$&| |__| |  | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922)
 \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.m

Re: [Samba] Problems sharing windows printer with linux

2008-03-06 Thread Chris Smith
On Thursday 06 March 2008, Maginot Junior wrote:
> I try to connect using cups

http://cups.org/doc-1.1/sam.html#8_9

-- 
Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba server joining domain and browsing group shares

2008-03-06 Thread Victor Mendez
Thanks Alex for the reply. This week I'm have to pay attention to another 
project. I will revise the server configuration on Friday when I come form my 
business trip  and email you the results over the week-end

Regards

Victor
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problems sharing windows printer with linux

2008-03-06 Thread Maginot Junior
Hi to all.

Im having a strange issue, but I could not fix and after days googling
around doesnt took me anywhere better, so I come here trying to find
the ultimate answer for this problem.

I have installed on a Windows 2000 a printer (Samsung Sxc4x21) and
Shared it. On other windows boxes I have no problem to use it, but
when I try to connect using cups I can only find some administrative
share like:

 ADMIN$  Disk Administra C$   Diskdefault
shared resourceSamsung Samsung

And even if I try to connect to this printer I can't print, always get
error messages (from the obvious that this share is very strange) I
tryed to set some permission on w2k, create a user with the same map
to guest from my smb.conf and I still cant make this share to appear
correctly ...


please, any help will be apreciated, thanks in advance!

[ ]'s

-- 
Maginot Júnior
"the game of life"
LPIC - CCNA - ¿Designer?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WINS registration refused with multiple network adapters

2008-03-06 Thread Leonardo Boselli
On Tue, 26 Feb 2008, Dale Renton wrote:
> For example, if we log in for the first time with wireless, WINS gets
> updated with the wireless ip.  Now, if we disconnect from the wireless
> network, without disabling our wireless NIC (as most of our users do), and
> plugin our wired NIC and reboot, the wired ip does not get updated on the
> WINS server.  It still shows the wireless ip.

I do not think it is a strict samba problem. i had this same problem with
a win 2000 server o the server part. Using an automatic (as wins
is) configuration in a multihomed computer is always evil ...

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAMBA + KERBEROS + AD

2008-03-06 Thread Oliver Henriot

Hi,

Dans sa grande sagesse, Sadique Puthen a écrit, le 06.03.2008 13:33 :

Helio Calaça Filho wrote:

[snip]

[teste]
comment = Test Directory
path = /teste
valid users = SAMBA #Ps.: SAMBA string here it's the domain, 
to can

accept all domain users
  


I doubt whether this is valid. As per "man smb.conf",  "If  this  is  
empty  (the  default)  then any user can login." So you should either 
put it empty or specify valid users or groups. Specifying domain name 
to allow all users/groups may not be valid.


I have tested this parameter and not only does testparm accept it, but 
it seems to ask for a valid domain member account.


[snip]

However, just as for Hélio, I encounter the same problems :
All correct apparently. But, when i try to access my samba shares 
using my
winxp station (logged in ads domain), the samba server ask a user n' 
pass. I

put any ads user and i can't.

Where i wrong?

See Ya!

Atte,
Hélio Calaça Filho
  


And I also have the same problem for another share using the "valid 
users = %S" which I know for shure is a proper Samba 3 parameter which 
should accept a valid domain account, which it doesn't.


I have no clue where Hélio and I are going wrong, and I'd really like to 
know where it's all going wrong ;-)


Cheers,

--
Oliver Henriot, UMS MI2S, http://mi2s.imag.fr/
Moyens Informatiques et Multimédia
Domaine universitaire BP53 / 38041 Grenoble cedex 9 / France
tel.: +33 4 76 51 43 48  fax: +33 4 76 51 47 15

Trust in CNRS's certificates
http://igc.services.cnrs.fr/Doc/General/trust.html



smime.p7s
Description: S/MIME Cryptographic Signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba-3.2-pre2 feedback

2008-03-06 Thread Volker Lendecke
On Thu, Mar 06, 2008 at 07:17:01AM -0700, Christian McHugh wrote:
> Thanks! I've created bug #5305, but I'm not sure how useful the logs will 
> be. I tried tail -f'ing  log.smbd but it does not seem to write on a net 
> join.

Have you seen my comment on that bug report?

Volker


pgptkrQC7DYlj.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba-3.2-pre2 feedback

2008-03-06 Thread Christian McHugh

Michael Adam wrote:

My last issue is that I seem to be unable to join the domain again.
net ads join -U mmchugh
Enter mmchugh's password:
Failed to join domain: failed to set machine spn: Constraint violation
 net rpc join -S students.froot.nau.edu -U mmchugh
Enter mmchugh's password:
[2008/03/06 05:02:47,  0] utils/net_rpc_join.c:net_rpc_join_newstyle(393)
  Error in domain join verification (credential setup failed): 
NT_STATUS_INVALID_COMPUTER_NAME


Unable to join domain NAU-STUDENTS.


This is on a machine that was previously joined with 3.0.28


Could you provide level 10 logs and network sniffs (truss) of
this problem? Maybe the samba-technical mailing list or bugzilla
would be a more appropriate place for this.

Thanks again for your feedback - much appreciated!

Cheers - Michael



Realized I forgot to copy the list...

Thanks! I've created bug #5305, but I'm not sure how useful the logs will be. 
I tried tail -f'ing  log.smbd but it does not seem to write on a net join.


Thanks,
Christian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Bugzilla Day for Samba 3.2.0pre2 on Tuesday, March 18

2008-03-06 Thread Karolin Seeger
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Folks,

the public release announcements for the second preview
of 3.2.0 were yesterday.  We are planning a Bugzilla day in honor
of the release on Tuesday, March 18.

If you want to participate, feel free to join the #samba-technical
channel on irc.freenode.net.  However, here are a couple
of guidelines to make sure that it's a productive bug hunt.

* You do not have to be a developer.
* You must be running 3.2.0pre2 on some server or client.
* You must be using a configuration that worked successfully
  on a prior version of Samba 3.0.  We'll not spend time
  debugging server configurations unrelated to the 3.2.0
  release.
* You must be comfortable providing sufficient debug information
  in the case that we identity a legitimate failure.  This might
  be debug logs, network traces, etc

cheers,
Karolin

- --
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.SerNet.DE, mailto: Info @ SerNet.DE


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFHz66lKGi9fisXk1ERApv/AJ9Fq2KnHBSlGglrqJfdBvpReT4+agCaA7Wz
+LUSsWO8b8zOT1HVq/wMtgI=
=gZbH
-END PGP SIGNATURE-


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAMBA + KERBEROS + AD

2008-03-06 Thread Sadique Puthen

Helio Calaça Filho wrote:

But i have to try with the "+"symbol, just like this exemple?

SAMBA+Administrator
  


As per your smb.conf from the earlier post you should try with 
SAMBA\Administrator. If you want to use SAMBA+Administrator, your should 
specify "winbind separator = +" in your smb.conf.


--Sadique

or
i have to try like this way

SAMBAAdminitrator

???





  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAMBA + KERBEROS + AD

2008-03-06 Thread Sadique Puthen

Helio Calaça Filho wrote:

SMB.CONF

# Samba config file created using SWAT
# from 10.10.15.33 (10.10.15.33)
# Date: 2008/03/04 13:39:37

[global]
workgroup = SAMBA
realm = SAMBA.COM
server string = Test Server
security = ADS
log level = 4
log file = /local/samba/var/%m.log
ldap ssl = no
idmap uid = 1-2
idmap gid = 1-2
winbind enum users = Yes
winbind enum groups = Yes
veto files = /.exe/*mp3*/

#[homes]
#   comment = Personal Directory
#   read only = No
#   browseable = No
[teste]
comment = Test Directory
path = /teste
valid users = SAMBA #Ps.: SAMBA string here it's the domain, to can
accept all domain users
  


I doubt whether this is valid. As per "man smb.conf",  "If  this  is  
empty  (the  default)  then any user can login." So you should either 
put it empty or specify valid users or groups. Specifying domain name to 
allow all users/groups may not be valid.



read only = No
veto files = /*.exe/*mp3*/

[commom_ad]
comment = Common Directory
path = /comum_ad
force user = smbtest
read only = No
guest ok = Yes

--

NSSWITCH.CONF

#
# /etc/nsswitch.conf
#
# An example Name Service Switch config file. This file should be
# sorted with the most-used services at the beginning.
#
# The entry '[NOTFOUND=return]' means that the search for an
# entry should stop if the search in the previous entry turned
# up nothing. Note that if the search failed due to some other reason
# (like no NIS server responding) then the search continues with the
# next entry.
#
# Legal entries are:
#
#   nisplus or nis+ Use NIS+ (NIS version 3)
#   nis or yp   Use NIS (NIS version 2), also called YP
#   dns Use DNS (Domain Name Service)
#   files   Use the local files
#   db  Use the local database (.db) files
#   compat  Use NIS on compat mode
#   hesiod  Use Hesiod for user lookups
#   [NOTFOUND=return]   Stop searching if not found so far
#

# To use db, put the "db" in front of "files" for entries you want to be
# looked up first in the databases
#
# Example:
#passwd:db files nisplus nis
#shadow:db files nisplus nis
#group: db files nisplus nis

passwd: files winbind
shadow: files
group:  files winbind

#hosts: db files nisplus nis dns
hosts:  files dns winbind

# Example - obey only what nisplus tells us...
#services:   nisplus [NOTFOUND=return] files
#networks:   nisplus [NOTFOUND=return] files
#protocols:  nisplus [NOTFOUND=return] files
#rpc:nisplus [NOTFOUND=return] files
#ethers: nisplus [NOTFOUND=return] files
#netmasks:   nisplus [NOTFOUND=return] files

bootparams: nisplus [NOTFOUND=return] files

ethers: files
netmasks:   files
networks:   files
protocols:  files
rpc:files
services:   files

netgroup:   nisplus

publickey:  nisplus

automount:  files nisplus
aliases:files nisplus
-
[EMAIL PROTECTED] lib]# ll libnss_winb*

-rwxr-xr-x 1 root root   18588 Fev 26 12:51 libnss_winbind.so
lrwxrwxrwx 1 root root  22 Fev 27 17:25 libnss_winbind.so.2 ->
/lib/libnss_winbind.so
-rwxr-xr-x 1 root root  892632 Set  1  2006 libnss_wins.so.2


[EMAIL PROTECTED] lib]# ps -A
  PID TTY  TIME CMD

28736 ?00:00:10 nmbd
28737 ?00:00:00 winbindd
28738 ?00:00:00 winbindd
28739 ?00:00:00 smbd
28742 ?00:00:00 smbd
28758 ?00:00:00 winbindd
29019 ?00:00:00 winbindd
31715 ?00:00:00 smbd
--
[EMAIL PROTECTED] lib]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[teste]"
Processing section "[comum_ad]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

-

[EMAIL PROTECTED] lib]# net ads join -U Administrator
suporte's password:
Using short domain name -- SAMBA
Joined 'REDH' to realm 'SAMBA.COM'

--
All correct apparently. But, when i try to access my samba shares using my
winxp station (logged in ads domain), the samba server ask a user n' pass. I
put any ads user and i can't.

Where i wrong?


Re: [Samba] server-side AND client-side symlinks?

2008-03-06 Thread John Hodrien

On Wed, 5 Mar 2008, Chuck Kollars wrote:


Server-side symlinks are needed for example when what
appears to the user to be a single mounted directory
is actually tens of little pieces tied together by
symlinks. Having those symlinks coalesces many mounts
that would all have to be perfect in parallel into a
single mount that's either fully successful or not.


Perhaps consider bind mounts instead?

jh

--
"Love is a state in which a man sees things most decidedly as they are not."
 -- Nietzsche
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Still unresolved: adding printers as a non admin domain user doesn't work

2008-03-06 Thread Wolfgang Ratzka




I did it on each machine. I don't know what file it edits, if any. Neither do 
I know whether it can be enforced domain wise if you don't use AD.




I know, this thread is growing old, but I just want to add this piece of 
information. Samba 3 can do old style (i.e. NT4 domain) policies, and 
the point and print restrictions are covered by that.


Basically these old style policies consist of registry values that
are set upon login. As for the point of print restrictions, the
relevant value is found at

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows 
NT\Printers\PointAndPrint



--
Wolfgang Ratzka  Phone: +49 6421 2823531  FAX: +49 6421 2826994
Uni Marburg,  HRZ, Hans-Meerwein-Str., D-35032 Marburg, Germany
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba