date:20090225

[Samba] must change pwd

2009-02-25 Thread Collen Blijenberg


Hi, i noticed that  pdbedit -u user --pwd-must-change-time=0
doesn't work anymore with samba 3.2.4

did the syntax changed??

Cheers, Collen


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] must change pwd

2009-02-25 Thread Volker Lendecke

On Wed, Feb 25, 2009 at 10:38:05AM +0100, Collen Blijenberg wrote:
 Hi, i noticed that  pdbedit -u user --pwd-must-change-time=0
 doesn't work anymore with samba 3.2.4

With 3.2.3 it still worked?

Volker


pgpQDwMifrikK.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Volume serial number changes

2009-02-25 Thread Miguel A Felipe Rodríguez


Hi,

   How can the volume serial number of a share can be especified in the 
smb.conf? I have a machine that each times it connects to the share 
displays two differents volume serial number, not at the same time


The server uses samba 3.2.5-4 over debian and the disks are in a 
software raid 1.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Problems with force group

2009-02-25 Thread Angel Vicente

Hello all

I´m new at this list.

I have a samba server with some shares, using in almost the force group
option. Now after upgrade to 3.3.0 version (Debian), users connect to the
shares using it´s own gid instead of force group gid.

Regards and thanks in advanced


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Tunneling over SSH

2009-02-25 Thread Kevin Bailey


Michael Heydon wrote:

Kevin Bailey wrote:
Also, we had trouble setting up a VPN from his house - can't remember 
the details apart from the fact that it was BT's fault!


Was this using OpenVPN or PPTP? OpenVPN is much more flexible than 
PPTP and will happily work across all but the most stubborn 
connections  (also it doesn't rely on GRE which is what has caused me 
the most VPN headaches).




It was OpenVPN/IPSec.  I think it was to do with the router supplied by 
BT - I would have replaced it but couldn't for some reason.


I haven't used Sage before, but if it is opening the data files 
directly off a share (which would seem to be the case) then you may 
run into issues using it remotely. I have had users insist on running 
MYOB and Quicken over VPNs, if they are lucky it is almost unusable 
and they give up, a couple have had issues with file corruption.




This is why I was hoping to use SMB tunnelled over SSH - that way it is 
using Samba for the file sharing.  But you're making a good point.  
Initially I shared out the files over FTP and set up Netdrive on the PC 
- and this resulted in corrupted data.


I've tried various ways to enable users to connect their Windows PC to a 
network share.


Basically, the office gets assigned an 8 IP address block - their PC's 
are then behind a router on one of the addresses - and the server is 
assigned another address.  That way the Laptops are set to access the 
server via it's internet static IP address.  The nice thing is that the 
users then access the server in exactly the same way if they are in the 
office or elsewhere connected to the internet.


Of course - when they're in the office they get very fast access to the 
server and the traffic never leaves the building.


We've had reasonable success with Netdrive accessing FTP shares from 
PC's for file reading and saving.


I've tried SSH - no joy, SFTPShare is buggy and crashes Windows 
explorer.  Also, tried using encrypted data/comms channels over FTP 
using Vsftpd - again problems with the Windows client.


Have you considered RDP? This would allow quick and easy access from 
most connections without any setup, it would be faster than pulling a 
large access file over a VPN and would be immune to corruption as a 
result of interrupted connections.





That is a very good idea and will provide a fallback.  What I'm thinking 
of doing is to run tests on a test server here (old laptop) and see how 
the connection of Samba over SSH fares - but you're right in general.  
There are two problems here - Sage using crappy Access database files 
and then crappy MS networking.


Will update the list later with progress.

Thanks,

Kevin



*Michael Heydon - IT Administrator *
micha...@jaswin.com.au mailto:micha...@jaswin.com.au




--
*Kevin Bailey*
Director/Programmer - Freeway Projects Limited
Web: www.freewayprojects.com http://www.freewayprojects.com/
Email: kbai...@freewayprojects.com mailto:kbai...@freewayprojects.com
Phone: +44 (0)1752 267090
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] net sam provision

2009-02-25 Thread Volker Lendecke

On Tue, Feb 24, 2009 at 11:28:15PM +0100, s...@gmx-topmail.de wrote:
 What prerequisites are there to make this command work? I
 would really like to use this feature as I would like to
 administrate the Domain with the NT4 ResKit-Tools srvmgr
 und usrmgr.

winbind must run and have a idmap ranges to work from.

Volker


pgpKB2Ug3ZSzN.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba tunneling over SSH - does the ssh login count RE permissions

2009-02-25 Thread Kevin Bailey

Kevin Bailey wrote:

Michael Heydon wrote:

Kevin Bailey wrote:
Also, we had trouble setting up a VPN from his house - can't
remember the details apart from the fact that it was BT's fault!

Was this using OpenVPN or PPTP? OpenVPN is much more flexible than
PPTP and will happily work across all but the most stubborn
connections (also it doesn't rely on GRE which is what has caused me
the most VPN headaches).

It was OpenVPN/IPSec. I think it was to do with the router supplied
by BT - I would have replaced it but couldn't for some reason.

I haven't used Sage before, but if it is opening the data files
directly off a share (which would seem to be the case) then you may
run into issues using it remotely. I have had users insist on running
MYOB and Quicken over VPNs, if they are lucky it is almost unusable
and they give up, a couple have had issues with file corruption.

This is why I was hoping to use SMB tunnelled over SSH - that way it
is using Samba for the file sharing. But you're making a good point.
Initially I shared out the files over FTP and set up Netdrive on the
PC - and this resulted in corrupted data.

I've tried various ways to enable users to connect their Windows PC to
a network share.

Basically, the office gets assigned an 8 IP address block - their PC's
are then behind a router on one of the addresses - and the server is
assigned another address. That way the Laptops are set to access the
server via it's internet static IP address. The nice thing is that
the users then access the server in exactly the same way if they are
in the office or elsewhere connected to the internet.

Of course - when they're in the office they get very fast access to
the server and the traffic never leaves the building.

We've had reasonable success with Netdrive accessing FTP shares from
PC's for file reading and saving.

I've tried SSH - no joy, SFTPShare is buggy and crashes Windows
explorer. Also, tried using encrypted data/comms channels over FTP
using Vsftpd - again problems with the Windows client.

Have you considered RDP? This would allow quick and easy access from
most connections without any setup, it would be faster than pulling a
large access file over a VPN and would be immune to corruption as a
result of interrupted connections.

That is a very good idea and will provide a fallback. What I'm
thinking of doing is to run tests on a test server here (old laptop)
and see how the connection of Samba over SSH fares - but you're right
in general. There are two problems here - Sage using crappy Access
database files and then crappy MS networking.

Will update the list later with progress.

Thanks,

Kevin

*Michael Heydon - IT Administrator *
micha...@jaswin.com.au mailto:micha...@jaswin.com.au

Hiya,

Managed to get Vista SP1 to connect to a Samba server - used the tricks here

http://social.technet.microsoft.com/Forums/en-US/itprovistanetworking/thread/d30d3c98-58c5-47f6-b5a5-f5620882020d/

but although the shares are showing the files and folders are not being
listed. Now this is a non-authenticated Samba setup - i.e. a basic one
for 2-3 users where they wanted easy access to all shares/files - so I
set up up with SHARE access and guest OK to everything. That way the
users did not need to authenticate.

Now they have grown they want to authenticate to protect certain shares
so I have to set up USER sharing.

My question is - do you think the SHARE access is responsible for
accessing over SSH tunnel not showing the files/folders?

Kev

--
*Kevin Bailey*
Director/Programmer - Freeway Projects Limited
Web: www.freewayprojects.com http://www.freewayprojects.com/
Email: kbai...@freewayprojects.com mailto:kbai...@freewayprojects.com
Phone: +44 (0)1752 267090
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

[Samba] Excessive and useless SMB queries by XP client

2009-02-25 Thread Igor Zlatkovic

Hi there,

Samba server is 3.0.28a on Ubuntu 8.04. I connect to the server through
OpenVPN (using TUN). OpenVPN and Samba servers are on the same machine.

Using Windows XP client and the builtin Windows Explorer as file manager
I just traverse a share on the server, changing directories and
displaying their contents.

Basically it works, but quite often there are significant delays before
the contents of a directory is displayed. I have seen network activity
during those delays and recorded the traffic with Wireshark. The
interesting part of the trace is attached.

The attachment shows that the client queries info of a directory named
test on the share (which exists), then tries to access an alternate
data stream named \test:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA
(which does not exist). Annoying thing is that the client repeats
exactly the same queries several hundred times before giving up and
displaying the contents of the directory. The whole network log repeats
exactly the same sequence from the attached file several hundred times,
only the FID is different every time.

If I use a Linux client, this does not happen. If I use Windows XP
client with any other file manager except for the builtin Windows
Explorer, this does not happen either. This happens only when using
Windows Explorer, on three different Windows XP clients, absolutely
reproducible.

According to the network logs, I see no wrong done by Samba, neither do
I see any problem with the network connection. Problems with MTU would
cause dropped packets and errors, but this is not the case. everything
works, no errors are reported, just there are delays during which
excessive SMB queries made by the client can be seen.

I am quite certain that the client is misbehaving. Still I write to this
list in hope that someone has seen this before and knows what is amiss
with the client.

Ciao,
Igor
60  105.343838  10.8.0.10   10.8.0.1SMB NT Create AndX 
Request, Path: \test
61  105.379199  10.8.0.110.8.0.10   SMB NT Create AndX 
Response, FID: 0x32fe
62  105.379854  10.8.0.10   10.8.0.1SMB Trans2 Request, 
QUERY_FILE_INFO, FID: 0x32fe, Query File Basic Info
63  105.420342  10.8.0.110.8.0.10   SMB Trans2 
Response, FID: 0x32fe, QUERY_FILE_INFO
64  105.420701  10.8.0.10   10.8.0.1SMB Trans2 Request, 
QUERY_FILE_INFO, FID: 0x32fe, Query File Standard Info
65  105.459627  10.8.0.110.8.0.10   SMB Trans2 
Response, FID: 0x32fe, QUERY_FILE_INFO
66  105.459973  10.8.0.10   10.8.0.1SMB Trans2 Request, 
QUERY_FILE_INFO, FID: 0x32fe, Query File Internal Info
67  105.497540  10.8.0.110.8.0.10   SMB Trans2 
Response, FID: 0x32fe, QUERY_FILE_INFO
68  105.497732  10.8.0.10   10.8.0.1SMB Trans2 Request, 
QUERY_FILE_INFO, FID: 0x32fe, Query File EA Info
69  105.533927  10.8.0.110.8.0.10   SMB Trans2 
Response, FID: 0x32fe, QUERY_FILE_INFO
70  105.549305  10.8.0.10   10.8.0.1SMB NT Create AndX 
Request, Path: \test:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA
71  105.589626  10.8.0.110.8.0.10   SMB NT Create AndX 
Response, FID: 0x, Error: STATUS_OBJECT_PATH_NOT_FOUND
72  105.590081  10.8.0.10   10.8.0.1SMB Close Request, 
FID: 0x32fe
73  105.622875  10.8.0.110.8.0.10   SMB Close Response, 
FID: 0x32fe


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

RE: [Samba] Winbind/PAM/SLES 8-problem

2009-02-25 Thread danny.petterson

Hi!

Yeah, I have, but thanx.

 
Greetings from
 
Danny Petterson
 
Shadows and Dust

-Original Message-
From: John H Terpstra [mailto:j...@samba.org] 
Sent: 24. februar 2009 14:42
To: samba@lists.samba.org
Subject: Re: [Samba] Winbind/PAM/SLES 8-problem

On Tuesday 24 February 2009 07:23:41 danny.petter...@accenture.com wrote:
 I'm working on getting some old SLES 8-serveres to use winbind, letting
 users authenticate to our Windows AD. All the setup of  samba, winbind,
 adding the server to the AD etc. is working fine, and all kinds of
 wbinfo returns what it is supposed to. BUT - when I try to login (using
 ssh), it utterly ignores winbind, and only tries to validate local
 users. Not one entry in messages or samba-logs about winbind when a
 users tries to logon to the system... I suppose its related to
 PAM-configuration, but Im not sure. This is what Im dealing with:

 UnitedLinux-1.0-i386-SP4 (from SPident)
 Linux 2.4.21-251-smp #1 SMP Thu Sep 23 17:22:54 UTC 2004 i686 unknown
 samba3-client-3.0.33-36
 samba3-winbind-3.0.33-36
 samba3-3.0.33-36

 This is where I try to use winbind in /etc/pam.d:

 common-account:

 account sufficient  /lib/security/pam_winbind.so
 account requiredpam_unix2.so

 common-auth:

 authsufficient  /lib/security/pam_winbind.so

 authrequiredpam_unix2.so nullok_secure use_first_pass

 Can't get anything to work with winbind, not sudo, not su, not ssh -
 nothing. But again, all wbinfo, getent passwd, etc works fine.

Have you specified winbind in your nsswitch file?

/etc/nsswitch.conf:

passwd:  files winbind
shadow:  files winbind
group:  file winbind



- John T.



This message is for the designated recipient only and may contain privileged, 
proprietary, or otherwise private information.  If you have received it in 
error, please notify the sender immediately and delete the original.  Any other 
use of the email by you is prohibited.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] when will samba4 become stable

2009-02-25 Thread Ying Hu

I checked most samba 4 related posts and couldn't fine the answer. Is there
any targeted date for samba4 to become stable?
thanks,
Ying
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] when will samba4 become stable

2009-02-25 Thread James R. Leu

I'm betting the answer will be something like:

The rate at which samba4 approaches stability is tied to the number of
people using it and filing bugs so get out there and use it ;-)

On Wed, Feb 25, 2009 at 08:20:37AM -0500, Ying Hu wrote:
 I checked most samba 4 related posts and couldn't fine the answer. Is there
 any targeted date for samba4 to become stable?
 thanks,
 Ying
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
James R. Leu
j...@mindspring.com


pgpbbq9XkwP9m.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Problem with inheriting ACL under Windows Domain

2009-02-25 Thread Pavol Eisenberg


Hello there

I am facing serios troubles with samba server running as nt domain member.

Short problem description:

When I as NT domain administrator create folder with subfolders and 
check inherit permision checkbox , everything works fine until user with 
permission to create folders or files under this folder create file or 
folder. The inheriting is missing and cannot by re-set again.


Can anybody check this ?

Many thanks


Eisenberg Pavol
Network Engineering  Support

--
Digital Systems Ltd.
Údernícka 9
851 01 Bratislava 5
Slovak Republic

Tel.: +421 (0) 2 634 525 37
Fax: +421 (0) 2 634 525 38

i...@digitalsystems.sk
supp...@digitalsystems.sk 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[SAMBA] Problem with inheriting ACL under Windows Domain]

2009-02-25 Thread Pavol Eisenberg



Hello there

I am facing serios troubles with samba server running as nt domain member.

Short problem description:

When I as NT domain administrator create folder with subfolders and 
check inherit permision checkbox , everything works fine until user with 
permission to create folders or files under this folder create file or 
folder. The inheriting is missing and cannot by re-set again.


Can anybody check this ?

Many thanks


Eisenberg Pavol
Network Engineering  Support

--
Digital Systems Ltd.
Údernícka 9
851 01 Bratislava 5
Slovak Republic

Tel.: +421 (0) 2 634 525 37
Fax: +421 (0) 2 634 525 38

i...@digitalsystems.sk
supp...@digitalsystems.sk 





Eisenberg Pavol
Network Engineering  Support

--
Digital Systems Ltd.
Údernícka 9
851 01 Bratislava 5
Slovak Republic

Tel.: +421 (0) 2 634 525 37
Fax: +421 (0) 2 634 525 38

i...@digitalsystems.sk
supp...@digitalsystems.sk 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Winbind Issue?

2009-02-25 Thread Mike Hurst

Hello, we are having this issue on two of our RHEL 5.2 servers. We have them 
set up to authenticate to our Windows 2003 domain. Everything works well for a 
while, but for some reason every few days the winbind service will stop 
working, this is what we see in the log file:

[2009/02/25 04:02:01, 0] lib/fault.c:fault_report(41)
  ===
[2009/02/25 04:02:01, 0] lib/fault.c:fault_report(42)
  INTERNAL ERROR: Signal 11 in pid 7078 (3.0.33-3.7.el5)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2009/02/25 04:02:01, 0] lib/fault.c:fault_report(44)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2009/02/25 04:02:01, 0] lib/fault.c:fault_report(45)
  ===
[2009/02/25 04:02:01, 0] lib/util.c:smb_panic(1655)
  PANIC (pid 7078): internal error
[2009/02/25 04:02:01, 0] lib/util.c:log_stack_trace(1759)
  BACKTRACE: 16 stack frames:
   #0 winbindd(log_stack_trace+0x2d) [0x34ce4d]
   #1 winbindd(smb_panic+0x5d) [0x34cf7d]
   #2 winbindd [0x337afa]
   #3 [0xb21420]
   #4 /lib/libc.so.6(cfree+0x67) [0xa0b007]
   #5 winbindd [0x342054]
   #6 winbindd(lp_do_parameter+0x511) [0x32b941]
   #7 winbindd [0x32cea5]
   #8 winbindd [0x32e468]
   #9 winbindd(pm_process+0x175) [0x32e8e5]
   #10 winbindd(lp_load+0x158) [0x32bd18]
   #11 winbindd [0x2b2c06]
   #12 winbindd(winbind_check_sighup+0xb0) [0x2b39a0]
   #13 winbindd(main+0xafd) [0x2b46fd]
   #14 /lib/libc.so.6(__libc_start_main+0xdc) [0x9b4dec]
   #15 winbindd [0x2b2641]
[2009/02/25 04:02:01, 0] lib/fault.c:dump_core(181)
  dumping core in /var/log/samba/cores/winbindd
[2009/02/25 07:33:23, 1] nsswitch/winbindd.c:main(1013)
  winbindd version 3.0.33-3.7.el5 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2008
[2009/02/25 07:33:23, 0] 
nsswitch/winbindd_cache.c:initialize_winbindd_cache(2229)
  initialize_winbindd_cache: clearing cache and re-creating with version number 
1
[2009/02/25 07:33:24, 0] libsmb/cliconnect.c:cli_session_setup_spnego(859)
  Kinit failed: KDC has no support for encryption type
[2009/02/25 08:02:51, 0] lib/util_sock.c:write_data(564)
  write_data: write failure. Error = Connection reset by peer
[2009/02/25 08:02:51, 0] libsmb/clientgen.c:write_socket(158)
  write_socket: Error writing 108 bytes to socket 18: ERRNO = Connection reset 
by peer
[2009/02/25 08:02:51, 0] libsmb/clientgen.c:cli_send_smb(188)
  Error writing 108 bytes to client. -1 (Connection reset by peer)
[2009/02/25 08:02:51, 1] rpc_client/cli_pipe.c:cli_rpc_pipe_open(2223)
  cli_rpc_pipe_open: cli_nt_create failed on pipe \NETLOGON to machine 
domain-controller.  Error was Write error: Connection reset by peer


We're running:
samba-common-3.0.33-3.7.el5
samba-3.0.33-3.7.el5
krb5-libs-1.6.1-31.el5
Linux 2.6.18-92.1.13.el5 #1 SMP Thu Sep 4 03:51:01 EDT 2008 i686 i686 i386 
GNU/Linux

Our current workaround is to just restart the winbind service...

Any ideas?

Mike Hurst
UNIX Administrator II
Credit Acceptance Corporation
248.353.2700 ext. 5639
mhu...@creditacceptance.commailto:mhu...@creditacceptance.com

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] File transfers between folders that are symlinks to different partitions of the drive

2009-02-25 Thread Drew Executor

Hi!
I run Linux Gentoo 2.6.28 with Samba 3.0.28 installed. In one of the shares 
there is a number of symlinks pointing to the folders found on different logic 
partitions of the drive. When I move a large file (some gigabytes) with a 
Windows client from one folder to another (which are symlinks to different 
partitions), after some time the system offers to overwrite the file with the 
same name but different size. I cancel, and in some time the file is 
transferred as it should be. But all the time the process takes the share is 
hanged. And a Windows-client on another computer can function all right.

Is it possible to fix it?

---
Drew
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Tunneling over SSH

2009-02-25 Thread Mark Condic


Could you post the batch files here.  Thanks.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] LDAP configuration problems. How to debug?

2009-02-25 Thread Michael Zoet

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi all,

I'm trying to combine my LDAP Server (workin Unix authentication) with
SAMBA on an Ubuntu Hardy system.

For now I have a smb.conf and followed the steps in
http://download.gna.org/smbldap-tools/docs/samba-ldap-howto/. I had to
do some modifications beacause my LDAP DIT is not empty. So I had to
adapt the changes smbldap-populate would to by hand. (created my own
LDIF file for that.

Now when I start samba ( /etc/init.d/samba start ) smbd writes

[2009/02/25 17:05:43, 0] smbd/server.c:main(944)
  smbd version 3.0.28a started.
  Copyright Andrew Tridgell and the Samba Team 1992-2008
[2009/02/25 17:05:43, 0]
auth/auth_util.c:create_builtin_administrators(792)
  create_builtin_administrators: Failed to create Administrators
[2009/02/25 17:05:43, 0] auth/auth_util.c:create_builtin_users(758)
  create_builtin_users: Failed to create Users
[2009/02/25 17:05:43, 0]
auth/auth_util.c:create_builtin_administrators(792)
  create_builtin_administrators: Failed to create Administrators
[2009/02/25 17:05:43, 0] auth/auth_util.c:create_builtin_users(758)
  create_builtin_users: Failed to create Users
[2009/02/25 17:05:43, 0] services/services_db.c:svcctl_init_keys(420)
  svcctl_init_keys: key lookup failed! (WERR_ACCESS_DENIED)
[2009/02/25 17:05:43, 0]
auth/auth_util.c:create_builtin_administrators(792)
  create_builtin_administrators: Failed to create Administrators
[2009/02/25 17:05:43, 0] auth/auth_util.c:create_builtin_users(758)
  create_builtin_users: Failed to create Users
[2009/02/25 17:05:43, 0] smbd/server.c:main(1059)
  ERROR: failed to setup guest info.

into log.smbd. After that smbd exits...

Can someone explain to me what smbd wants to tell me? There must be
something missing !? I really like to fix the problem but I have no
idea how to further debug this.

Kind regards,

Michael


here the contents of my smb.conf:

# Global parameters
[global]
workgroup = EXAMPLE.COM
netbios name = hera
enable privileges = yes
interfaces = 10.10.10.10
username map = /etc/samba/smbusers
server string = Samba Server %v
security = user
encrypt passwords = Yes
obey pam restrictions = No
#unix password sync = Yes
#passwd program = /usr/sbin/smbldap-passwd -u %u
#passwd chat = Changing password for*\nNew password* %n\n
*Retype new password* %n\n
ldap passwd sync = Yes
log level = 0
syslog = 0
log file = /var/log/samba/log.%m
max log size = 10
time server = Yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
mangling method = hash2
#Dos charset = 850
#Unix charset = ISO8859-1

logon script = logon.bat
logon drive = H:
logon home =
logon path =

domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
passdb backend = ldapsam:ldap://127.0.0.1/
# passdb backend = ldapsam:ldap://127.0.0.1/ ldap://hercules/;
# ldap filter = ((objectclass=sambaSamAccount)(uid=%u))
ldap admin dn = cn=smbManager,dc=example,dc=com
ldap suffix = dc=example,dc=com
ldap group suffix = ou=Groups
ldap user suffix = ou=Users
ldap machine suffix = ou=Machines
ldap idmap suffix = ou=Users
#ldap ssl = start tls
ldap ssl = Off
add user script = /usr/sbin/smbldap-useradd -m %u
ldap delete dn = Yes
#delete user script = /usr/sbin/smbldap-userdel %u
add machine script = /usr/sbin/smbldap-useradd -w %u
add group script = /usr/sbin/smbldap-groupadd -p %g
#delete group script = /usr/sbin/smbldap-groupdel %g
add user to group script = /usr/sbin/smbldap-groupmod -m %u %g
delete user from group script = /usr/sbin/smbldap-groupmod -x
%u %g
set primary group script = /usr/sbin/smbldap-usermod -g %g %u

# printers configuration
load printers = Yes
create mask = 0640
directory mask = 0750
nt acl support = No
printing = cups
printcap name = cups
deadtime = 10
guest account = nobody
map to guest = Bad User
dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
show add printer wizard = yes
; to maintain capital letters in shortcuts in any of the
profile folders:
preserve case = yes
short preserve case = yes
case sensitive = no

[homes]
comment = Home Share %U, %u
read only = No
create mask = 0644
directory mask = 0775
browseable = No

[netlogon]
path = /home/samba/netlogon
browseable = No
read only = yes

[profiles]
path = /home/samba/profiles
read only = no
create mask = 0600
directory mask = 0700
browseable = No
guest ok = Yes

[Samba] Can't log in as same user on different domain

2009-02-25 Thread James D. Parra

Hello,

Moved user accounts from one domain to another and now can't log in to
workstations with the same user name that was used in the previous domain.
If we log in as a user who has never logged in to the workstation, that
user can log in under the new domain.

Is there some user info cached in winbind that prevents the identical user
name from logging in under a different domain? Any way to fix this?

Many thanks,

James

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Tunneling over SSH

2009-02-25 Thread Toby Bluhm


Kevin Bailey wrote:





We've had reasonable success with Netdrive accessing FTP shares from 
PC's for file reading and saving.


I've tried SSH - no joy, SFTPShare is buggy and crashes Windows 
explorer.  Also, tried using encrypted data/comms channels over FTP 
using Vsftpd - again problems with the Windows client.






Have you tried WinSCP? http://winscp.net


It's a Windows File Explorer looking gui connecting thru ssh, just a 
single executable file, no installation needed - quite handy.



--
tkb
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

66 matches

Mail list logo