Re: [Samba] call for a forum to replace the mailing list?

2011-02-18 Thread Aaron Solochek
On 02/18/2011 04:11 PM, Mac wrote:
 On 2/18/2011 2:44 PM, Chris Weiss wrote:
 On Fri, Feb 18, 2011 at 2:26 PM, Macwebreg.samba@panscend.com  wrote:
 I may have to unsubscribe from this list. Not because you responded twice,
 accidentally, while trying to help. That was fine and of little consequence.
 However, I got an automated out of office response from someone else and
 that got me thinking what if I get hit with that during a peak vacation
 time for somewhere? Eek, my poor, filled up mail server!

 If you view the email headers you'll see a Precedence: list.  Any
 vacation responder that replies to an email with this in the headers
 is mis-configured.  I'm not aware of any popular ones that are
 mis-configured by default.

 May be a forum would be better? If the regulars think the upside of a forum
 outweighs the downside (not my call, just my 2 cents).

 in other groups I'm in that do have forums, the regulars are only
 regulars because of the mailing list, as forums require forethought to
 go read and reply instead of it being dumped in your face as posted
 like email does.  Forums that have list integration, like FUDForum,
 are a decent compromise, but are far from perfect.

 If this were a forum and not a list, I'd almost certainly have not
 read or replied to your message.
 
 Interestingly, I am only subscribed to the daily digest, yet I got an 
 individual
 email from you personally to my address rather than waiting to see it in the
 digest.
 
 As I read this via NNTP when I have a special interest, I can reply to the 
 list
 to make my point early. Doing email list interaction seems to be a lost art!
 That makes my 4 cents (2 + 2) :)
 
 Please, this is not an attempt at a flame war or trolling. I am just pointing
 out that this may be a relic of the past.
 

Yeah, it totally is.  Lets move this discussion to twitter with the #samba4 
tag. :)

-Aaron

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] how do I setup a second samba4 DC with replication, etc?

2010-10-01 Thread Aaron Solochek
I have 1 samba4 server setup as a domain controller for FOO.COM.  I want to add
a second for redundancy.  I really don't want to mess this up, and I can't find
a clear guide online.  Can anyone tell me the proper commands?

Thanks.

-Aaron
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] how do I setup a second samba4 DC with replication, etc?

2010-10-01 Thread Aaron Solochek
On 10/01/2010 05:51 PM, Michael Wood wrote:
 On 1 October 2010 18:22, Aaron Solochek aarons-sa...@aberrant.org wrote:
 I have 1 samba4 server setup as a domain controller for FOO.COM.  I want to 
 add
 a second for redundancy.  I really don't want to mess this up, and I can't 
 find
 a clear guide online.  Can anyone tell me the proper commands?
 
 The instructions are here:
 http://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC
 
 It's probably best to test it first, and of course do backups too.
 

I have backups, so I tested it:

Obviously something isn't working.

Password for [FOO.COM\Administrator]:
CLDAP response: forest=FOO.com dns=FOO.com netbios=FOO
server_site=Default-First-Site-Name  client_site=Default-First-Site-Name
Become DC [NEW-DC] of Domain[FOO]/[FOO.com]
Promotion Partner is Server[OLD-DC.FOO.com] from Site[Default-First-Site-Name]
Options:crossRef behavior_version[2]
schema object_version[47]
domain behavior_version[2]
domain w2k3_update_revision[9]
libnet_BecomeDC() failed - NT code 0xc00020ee
Traceback (most recent call last):
  File /usr/lib/python2.6/dist-packages/samba/netcmd/__init__.py, line 99, in 
_run
return self.run(*args, **kwargs)
  File /usr/lib/python2.6/dist-packages/samba/netcmd/vampire.py, line 51, in 
run
(domain_name, domain_sid) = net.vampire(domain=domain, 
target_dir=target_dir)
RuntimeError: NT code 0xc00020ee

This is using the samba4 debs on ubuntu.
Version: 4.0.0~alpha14~bzr13824~ppa160+170~maverick1


I don't even know where to start debugging this.

-Aaron
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Windows 7 and logon scripts

2010-09-10 Thread Aaron Solochek
I have spent a lot of time dealing with this, but I only briefly tried 
using the settings in smb.conf to accomplish this drive mapping.


I have discovered that using group policy does work, but only if you're 
mapping the drives in a GPO that is applied to users, not computers. 
That is, the mappings work if you have all your users in some OU (mine 
is called people) that has some GPO (People_GP) linked to it.  In 
People_GP, User Configuration-Preferences-Windows Settings-Drive Maps.


I had mistakenly thought that settings in the User Configuration section 
of a GPO would apply to any user logging onto a machine which is part of 
the OU the GPO is linked with.  I wish that were the case, but 
unfortunately it's not.


I also had logon scripts working in the same People_GP (User 
Config-Administrative Templates-System-Logon).  I never tried making 
those machine-specific.


-Aaron


On 9/10/2010 4:12 AM, Tony Molloy wrote:

On Thursday 09 September 2010 18:11:38 c grassu wrote:

You can try this. It works for me on vista and win7:

net use m: /HOME


The [homes] share is working fine.

The problem is not with the actual script. The problem is that the script is
not being run at login on Windows 7 wheras it is on WindowsXP

Thanks,

Tony


On Thu, Sep 9, 2010 at 12:04 PM, Tony Molloytony.mol...@ul.ie  wrote:

Hi,

I'm trying to get Windows 7 to run a logon script which mounts a share at
login. This works fine for Windows XP

In my smb.conf I have the following

logon script = %G.cmd
logon path = \\%L\profiles\%U
logon drive = H:
logon home = \\YOUNGMUNSTER\homes

The script is

@echo
@echoSetting System Policies:  Please Wait.
@echo off
NET TIME \\janus /SET /YES  X
net use M: \\youngmunster\ug2010 /persistent:no  X
del X


The homes share works fine but the logon script does not seem to be
executed. Any ideas how to get this working.

Thanks

Tony
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] SAMBA4 kinit fails

2010-09-05 Thread Aaron Solochek
On 09/05/2010 11:19 PM, Neil Balchin wrote:
 I'm trying to test Samba4 as an AD style pdc.
 
 following the instructions at http://wiki.samba.org/index.php/Samba4/HOWTO
 
 
 at step 9 I get 
 
 r...@pdc:~# kinit administra...@mydomain.com
 kinit: Cannot contact any KDC for realm 'MYDOMAIN.COM' while getting initial 
 credentials
 r...@pdc:~#
 
 and yet
 
 host -t SRV _kerberos._udp.mydomain.com
 
 gives
 
 _kerberos._udp.mydomain.com has SRV record 0 100 88 pdc.mydomain.com.
 
 and 
 
 r...@pdc:~# host pdc.mydomain.com
 pdc.mydomain.com has address 192.168.1.167
 
 during provisioning I see there is a krb5.conf  file created,  does it need 
 to be moved anywhere special ?  is this perhaps my issue ?
 
 I can't figure out why kinit isn't working for me
 

It should be /etc/krb5.conf



 
 Neil
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba4 eventually stops working

2010-09-02 Thread Aaron Solochek
I'm running samba4 from git (latest as of sep 1) on ubuntu 10.4.  It's
operating as a PDC, as well as hosting a shared drive.

The last couple days I've noticed that my shared drives will appear as
disconnected, and indeed trying to connect to the server times out.  If
I look on the server, there are many (50ish) samba processes all sitting
there sleeping.  If I use the init script to shutdown samba, one of
those processes will remain.  I need to kill -9 it to make it go away.

Then I can restart samba and everything is happy again.

I'm not sure what exactly causes it, but I suspect it has to do with my
profile that syncs for a while, then starts giving errors in the event
log of the network resource going away.  So perhaps under the load of my
profile sync something fails, hanging all the samba processes.

My samba was configured with configure.developer, so I assume I have a
lot of debugging available somehow, but I'm not even sure where to start.

Thanks.

-Aaron
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] command length is incorrect error popping up

2010-08-30 Thread Aaron Solochek
re-posting this to samba list since it got no response on the technical.
 If anyone has an idea for how to debug this, I'd really appreciate it.

Thanks.

-Aaron

On 8/27/2010 1:25 PM, Aaron Solochek wrote:
 Running the latest samba4 from git, I'm seeing the error The program
 issued a command but the command length is incorrect in a few different
 places.
 
 For instance, when I open the group policy management program on a
 windows 7 client, it immediately pops that error up (although I'm still
 able to change group policy fine, as best I can tell)
 
 But the place this is really bothering me is that it seems to be
 breaking my roaming profiles.  The event viewer shows:
 
 Windows cannot locate the server copy of your roaming profile and is
 attempting to log you on with your local profile. Changes to the
 profile will not be copied to the server when you log off. This error
 may be caused by network problems or insufficient security rights.

 DETAIL - The program issued a command but the command length is
 incorrect.
 
 Anyone know what is causing this and how I can fix it?
 
 Thanks.
 
 -Aaron
 
 
 !DSPAM:4c77f57869013406913182!
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba 4 questions (status, roaming profiles, etc)

2010-08-26 Thread Aaron Solochek
So I tried a new user, and it didn't work, so I debugged a little and
discovered that I was missing a \ when I changed from setting the
profile path per-user to setting it via group policy.  After fixing
that, my profile folders were automatically recreated on the server, and
windows attempted to copy my local profile over.  It copied a bunch of
stuff, but started failing with a bunch of The specified network name
is no longer available errors.

When I logged back in I got the message telling me it was using my local
copy, which is fine since the server copy is incomplete, but in the
event viewer I saw this:

 Windows cannot locate the server copy of your roaming profile and is
 attempting to log you on with your local profile. Changes to the
 profile will not be copied to the server when you log off. This error
 may be caused by network problems or insufficient security rights.
 
 DETAIL - The program issued a command but the command length is
 incorrect.

I have seen that command length error fairly often recently.  I have no
idea what causes it, and the web isn't being very helpful.

I got the same error when opening the group policy management app just now.

Anyone know how to debug this?

-Aaron


On 8/25/2010 2:57 AM, Daniel_Müller wrote:
 First of all try with a new user to be shure your setup of profiles
 is working. If it does: You can remove the profile of the user which
 does not working profiles on your machine.
 
 1.Press on Start  Run Regedit 2.Navigate to the following registry
 key :“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows 
 NT\CurrentVersion\ProfileList” 3.Under ProfileList navigate to
 binary key’s like this :S-1-5-21-3656904587-1668747452-4095529-500 
 4.On the right side under  ProfileImagePath you’’ll see the username
 and profile path. 5.Chose the one with the desired user and delete
 the long reg key like 
 :“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows 
 NT\CurrentVersion\ProfileList”
 
 If you deleted the profile of the user on linux Login as
 administrator do again:
 
 On your windows client start Active Directory Users and Comupters.
 Right
 click,properties, then profil tab: Profile path: Yourpathtothe
 profiles along with %Username% EX: \\mydomain\profiles\%USERNAME%
 Then logon as this user to your machine.
 
 --- EDV Daniel Müller
 
 Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str.
 24 72076 Tübingen
 
 Tel.: 07071/206-463, Fax: 07071/206-499 eMail:
 muel...@tropenklinik.de Internet: www.tropenklinik.de 
 --- -Ursprüngliche
 Nachricht- Von: Aaron Solochek [mailto:aarons-sa...@aberrant.org]
  Gesendet: Dienstag, 24. August 2010 16:40 An:
 muel...@tropenklinik.de Betreff: Re: AW: [Samba] samba 4 questions
 (status, roaming profiles, etc)
 
 Yeah, that is all setup properly.  My issue is that the profile was 
 there, but somehow corrupted, so I moved it out of the way.  Now
 windows is not recreating it, but just complaining that it can't find
 it.  I need a way to make the samba or windows (which ever is the
 problem) think the roaming profile should be created from scratch.
 
 -Aaron
 
 On 8/24/2010 10:33 AM, Daniel_Müller wrote:
 Make profiles ready in windows7:
 
 In your smb.conf:
 
 [profiles] path= /yourprofilepath/profiles read only= no
 
 mkdir /yourprofilepath/profiles
 
 On your windows client start Active Directory Users and Comupters.
 Right click,properties, then profil tab: Profile path:
 Yourpathtothe profiles along with %Username% EX:
 \\mydomain\profiles\%USERNAME%
 
 --- EDV Daniel Müller
 
 Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str.
 24 72076 Tübingen
 
 Tel.: 07071/206-463, Fax: 07071/206-499 eMail:
 muel...@tropenklinik.de Internet: www.tropenklinik.de 
 ---
 
 -Ursprüngliche Nachricht- Von:
 samba-boun...@lists.samba.org
 [mailto:samba-boun...@lists.samba.org]
 Im
 Auftrag von Aaron Solochek Gesendet: Dienstag, 24. August 2010
 15:58 An: samba@lists.samba.org Betreff: [Samba] samba 4 questions
 (status, roaming profiles, etc)
 
 I'm testing samba 4 (pulling from git) on my ubuntu 10.4 box and
 have a bunch of questions I can't seem to find answers for on the
 web.
 
 1) There is some problem with my roaming profile such that windows 
 complains and logs me in using my most recently saved profile.
 I've tried moving my profile on the server out of the way, but
 windows doesn't seem to recreate it.  How do I make it recreate a
 roaming profile?  The client is windows 7.
 
 2) My AD domain is FOO.COM, but the actual domain internally is 
 bar.foo.com.  I ran into some issues with this, this biggest of
 which was that clients would try to pull their group policy from 
 //FOO.COM/sysvol/foo.com/... which meant that the server needed to
 be exposed externally.  I solved this by having foo.com resolve to
 the local IP

[Samba] samba 4 questions (status, roaming profiles, etc)

2010-08-24 Thread Aaron Solochek
I'm testing samba 4 (pulling from git) on my ubuntu 10.4 box and have a
bunch of questions I can't seem to find answers for on the web.

1) There is some problem with my roaming profile such that windows
complains and logs me in using my most recently saved profile.  I've
tried moving my profile on the server out of the way, but windows
doesn't seem to recreate it.  How do I make it recreate a roaming
profile?  The client is windows 7.

2) My AD domain is FOO.COM, but the actual domain internally is
bar.foo.com.  I ran into some issues with this, this biggest of which
was that clients would try to pull their group policy from
//FOO.COM/sysvol/foo.com/... which meant that the server needed to be
exposed externally.  I solved this by having foo.com resolve to the
local IP internally, but I was wondering if there is some more elegant
way to tell clients that the controller for FOO.COM is some arbitrary
host for these purposes.  Also, am I going to run into other pain by
having a flat AD domain scheme?  Creating a BAR.FOO.COM domain seems
like it would be a pain at this point.

3) What is the status of printing in samba4?  The most recent thing I
could find online was from 2005 and said it wasn't implemented yet.  All
our printers are IP printers, and my goal is to have them automatically
added to machines via group policy.

4) What's the deal with the Users and Computers sections of group policy
objects?  If I already have my users and computers separated into People
and Machines groups in active directory, and have two group policy
objects People_GP and Machines_GP applied to their respective groups,
will settings in the Users section of Machines_GP apply to any user that
logs in to a machine in the Machines group?

5) Where can I find all the smb.conf options that are actually valid for
samba4?

6) I can't seem to edit the unix attributes for users in AD.  I'd really
like to be able to pull account information down via ldap on unix
machines.  Is this possible?


Ok, I think that's enough for now.  I really appreciate any help people
can offer.

Thanks.

-Aaron
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba