Re: [Samba] Script to Auto-add Domain Users to Workstation Power Users Group doesn't work

2009-08-30 Thread Avinash Rao
On Sun, Aug 30, 2009 at 2:54 AM, Mark Nienberg gm...@tippingmar.com wrote:

 Avinash Rao wrote:

 Ubuntu 8.04 Server 64-bit Edition
 Samba 3.0.28a configured as PDC
 WinXP - SP2 clients

 I am following the instructions in
 http://www.samba.org/samba/docs/man/...#magicnetlogon to add domain
 users to the winxp clients Power Users group.

 Code: autopoweruser.sh

 #!/bin/bash

 /usr/bin/net rpc group addmem Power Users DOMAIN_NAME\$1 \
   -UAdministrator%secret -S $2

 exit 0

 [netlogon]
 comment = Netlogon Share
 path = /export/samba/logon
 root preexec = /etc/samba/scripts/autopoweruser.sh %U %m
 read only = Yes
 guest ok = Yes

 But nothing happens when users login? how can i make this work?

 Can anybody help
 Avinash


 I don't think that will work.  The Power Users group is local to the
 computer.

 See the bottom of this page:


 http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html

 Mark



The documentation Sounds contradicting. I was going through the
documentation in
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html#autopoweruserscript

Anyways..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Password Sync not letting users to change password.

2009-08-29 Thread Avinash Rao
Dear all,

Ubuntu 8.04 Server
Samba 3.0.28a configured as PDC.

I want to give options to samba users to change their own passwords and sync
it with the unix passwords whenever they change it.

I have used the following in my smb.conf file

unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:*
%n\
n *password\supdated\ssuccessfully* .

I get an option to change the password in winXP but, after entering the new
password, the server returns You don't have permissions to change your
password

can anybody help me
Avinash
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] monitor domain logons

2009-08-28 Thread Avinash Rao
On Fri, Aug 28, 2009 at 2:36 AM, Alex Crowac...@integrafin.co.uk wrote:

 Alex,

 I have been trying to use root preexec to add domain users to Power
 users group on the local workstation, it never works..
 http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html#autopoweruserscript

 Have you used this??

 thanks
 Avinash

 We do this by setting up a scheduled task (as SYSTEM) which will run a
 batch file from a netlogon share on one of the dc's. The batch file does
 all of the stuff using windows commands.

 We have something in the logon script that if you are a local admin, it
 will set up that scheduled task, thus, when we set up a new PC, we log
 it on as root once, and the scheduled task will forevermore do what we
 want it to do as the SYSTEM user on each local box.

 If you need more details I can give you example logon.bat and what we
 call root.bat files.

 Cheers

 Alex
 --
 This message is intended only for the addressee and may contain
 confidential information.  Unless you are that person, you may not
 disclose its contents or use it in any way and are requested to delete
 the message along with any attachments and notify us immediately.

 Transact is operated by Integrated Financial Arrangements plc
 Domain House, 5-7 Singer Street, London  EC2A 4BQ
 Tel: (020) 7608 4900 Fax: (020) 7608 1200
 (Registered office: as above; Registered in England and Wales under
 number: 3727592)
 Authorised and regulated by the Financial Services Authority (entered on
 the FSA Register; number: 190856)



Alex,

Thank you for your reply. I don't mind giving your logon.bat files.
I tried to execute this manually and here's what is happening...

#net rpc group addmem Administrators Domain Users \ -S WINPCO32
Password:
Usage: 'net rpc group addmem group member

r...@sunbox:~# net rpc group addmem Power Users domain_name\username
Password:
Could not add domain_name\username to Power Users: NT_STATUS_NO_SUCH_ALIAS

I replaced the domain_name with the name of the domain and username
with the appropriate user account.

what does this error mean?

Thanks
Avinash
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] net rpc group addmem gives NT_STATUS_ACCESS_DENIED

2009-08-28 Thread Avinash Rao
On Fri, Aug 28, 2009 at 1:41 PM, Avinash Rao avinash@gmail.com wrote:

 On Fri, Aug 28, 2009 at 2:36 AM, Alex Crowac...@integrafin.co.uk wrote:
 
  Alex,
 
  I have been trying to use root preexec to add domain users to Power
  users group on the local workstation, it never works..
 
 http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html#autopoweruserscript
 
  Have you used this??
 
  thanks
  Avinash
 
  We do this by setting up a scheduled task (as SYSTEM) which will run a
  batch file from a netlogon share on one of the dc's. The batch file does
  all of the stuff using windows commands.
 
  We have something in the logon script that if you are a local admin, it
  will set up that scheduled task, thus, when we set up a new PC, we log
  it on as root once, and the scheduled task will forevermore do what we
  want it to do as the SYSTEM user on each local box.
 
  If you need more details I can give you example logon.bat and what we
  call root.bat files.
 
  Cheers
 
  Alex
  --
  This message is intended only for the addressee and may contain
  confidential information.  Unless you are that person, you may not
  disclose its contents or use it in any way and are requested to delete
  the message along with any attachments and notify us immediately.
 
  Transact is operated by Integrated Financial Arrangements plc
  Domain House, 5-7 Singer Street, London  EC2A 4BQ
  Tel: (020) 7608 4900 Fax: (020) 7608 1200
  (Registered office: as above; Registered in England and Wales under
  number: 3727592)
  Authorised and regulated by the Financial Services Authority (entered on
  the FSA Register; number: 190856)
 
 

 Alex,

 Thank you for your reply. I don't mind giving your logon.bat files.
 I tried to execute this manually and here's what is happening...

 #net rpc group addmem Administrators Domain Users \ -S WINPCO32
 Password:
 Usage: 'net rpc group addmem group member

 r...@sunbox:~# net rpc group addmem Power Users domain_name\username
 Password:
 Could not add domain_name\username to Power Users: NT_STATUS_NO_SUCH_ALIAS

 I replaced the domain_name with the name of the domain and username
 with the appropriate user account.

 what does this error mean?

 Thanks
 Avinash


I noticed another error if i tried to add a new user temp to the Domain
Users group.

r...@sunbox:~# net rpc group addmem Domain Users temp
Password:
Could not add temp to Domain Users: NT_STATUS_ACCESS_DENIED
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] monitor domain logons

2009-08-27 Thread Avinash Rao
On Thu, Aug 27, 2009 at 2:29 PM, Alex Crowac...@integrafin.co.uk wrote:
 Martin

 I use root preexec in the netlogon share to run a script which:

 a) Update DNS with the fqdn username.domain
 b) Update a MySQL db with the username, logon time, machine name and
 server name

 in combination with an entry in the logon script on each dc which writes
 to a logfile at each logon with the username, server and time.

 Alex


Alex,

I have been trying to use root preexec to add domain users to Power
users group on the local workstation, it never works..
http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html#autopoweruserscript

Have you used this??

thanks
Avinash
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Users created by smbpasswd not a member of any ntgroup

2009-08-25 Thread Avinash Rao
Hi Guys,

Ubuntu 8.04 Server 64-bit Edition
Samba 3.0.28a

I have configured samba as a PDC with winbind. I DO NOT have a windows
NT server on the network, but i need winbind for squid and other
purposes.

r...@sunbox:/usr/lib/squid# net rpc group list
Password:
Domain Users
Domain Admins
Administrators
Users

My question is, if we configured samba as a PDC, when users are
created using smbpasswd command, the users  should be a member of one
of the above groups right? But, when i checked,

#net rpc user info user1 -Uroot%secret
None

Is this by default and should i add all samba users to windows groups
manually??
How does this work?

Thanks
Avinash
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Enforcing local profile doesn't let Home Directory mapping

2009-08-22 Thread Avinash Rao
On Thu, Aug 20, 2009 at 5:29 AM, Michael Heydonmicha...@jaswin.com.au wrote:
 Avinash Rao wrote:

 Sorry if the question is a bit unclear. What i meant is the net rpc
 commands are meant to manage trusts between a samba domain and Window
 NT domain or ADS. But in my case, I have only one samba server
 configured as a PDC.


 RPC is remote procedure call, it can be used to issue various requests to
 SMB servers over the network. It doesn't have to be related to trusts,
 doesn't have to be windows. The group list command you used is a perfect
 example.

 You mentioned about loopback, where should i check this? Also, I have
 used samba but not so much in depth. I am learning these options as
 the users in the network are increasing.


 In your smb.conf, you have interfaces and bind interfaces only set. Read
 up on these options in the man page.

 *Michael Heydon - IT Administrator *
 micha...@jaswin.com.au mailto:micha...@jaswin.com.au




Michael,

Thank you for your message.
I read the man pages for bind interfaces option in smb.conf file, i
disabled it and net rpc commands started working.

But,. wbinfo -u is still not working.

Regards,
Avinash
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] netlogon.bat issues

2009-08-21 Thread Avinash Rao
Hi Guys,

I have similar problem. I am following the instructions in
http://www.samba.org/samba/docs/man/...#magicnetlogon to add domain
users to the winxp clients Power Users group.

Code: autopoweruser.sh

#!/bin/bash

/usr/bin/net rpc group addmem Power Users DOMAIN_NAME\$1 \
  -UAdministrator%secret -S $2

exit 0

[netlogon]
comment = Netlogon Share
path = /export/samba/logon
root preexec = /etc/samba/scripts/autopoweruser.sh %U %m
read only = Yes
guest ok = Yes

But, this is not working as the user is still not added to the Power
Users group after login..

Can anybody help
Avinash
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Script to Auto-add Domain Users to Workstation Power Users Group doesn't work

2009-08-20 Thread Avinash Rao
Ubuntu 8.04 Server 64-bit Edition
Samba 3.0.28a configured as PDC
WinXP - SP2 clients

I am following the instructions in
http://www.samba.org/samba/docs/man/...#magicnetlogon to add domain
users to the winxp clients Power Users group.

Code: autopoweruser.sh

#!/bin/bash

/usr/bin/net rpc group addmem Power Users DOMAIN_NAME\$1 \
   -UAdministrator%secret -S $2

exit 0

[netlogon]
comment = Netlogon Share
path = /export/samba/logon
root preexec = /etc/samba/scripts/autopoweruser.sh %U %m
read only = Yes
guest ok = Yes

But nothing happens when users login? how can i make this work?

Can anybody help
Avinash
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Enforcing local profile doesn't let Home Directory mapping

2009-08-19 Thread Avinash Rao
I knew this was an option, I also did try this option and what happens
is the home directory is mapped, but the user is not able to create an
file, it says access is denied? But he is able to create a folder?

the command used in logon.bat file is net use h: \\server\%USERNAME%

Also, is there a way i can control the file permission on the clients
local harddrive from samba. For example, If a user A logs in to the
samba domain, he will not have any access to the local hard drive, can
we give permission from the samba, probably make that domain user a
part of power users on the client machine.

Thanks
Avinash


On Tue, Aug 18, 2009 at 11:30 PM, Dale
Schroederd...@briannassaladdressing.com wrote:
 Avinash,

 You should be able to map the drives by creating a [netlogon] share, then
 using logon scripts containing
 net use commands.
 Note: these scripts must be created with a DOS/Windows text editor.

 See example

 Dale


 Avinash Rao wrote:

 Dear all,

 I am using Ubuntu 8.04 Server 64-bit edition and I am trying to
 enforce Local profile for all users and below is my smb.conf file.
 According to the samba documentation, leaving the logon home and logon
 path values to empty will enforce local profiles, it worked. But, my
 main requirement is when users login their home directories are mapped
 and they appear in My Computer window so they get to access all their
 files. This disappears if i enable the above mentioned option.

 How do i get both of them working?

 Thanks
 Avinash

 [global]
 workgroup = abc
 server string = Samba on SUN
 max log size = 1500
 log level = 1
 interfaces = eth2 100.100.100.50
 bind interfaces only = True
 log file = /var/log/samba/log.%m

 domain logons = yes
 os level = 65
 prefered master = yes
 domain master = yes
 local master = yes

 logon home =
 logon path =

 winbind gid = 1-2
 winbind use default domain = yes
 idmap uid = 0-2
 idmap gid = 0-2
 add machine script = /usr/sbin/useradd -s /bin/false -d /home/nobody %u
 dns proxy =No
 hosts allow = 127. 10.10.10.
 wins support = Yes
 passdb backend = tdbsam

 encrypt passwords = true
 smb passwd file = /etc/samba/smbpasswd
 security = user
 netbios name = sunbox
 username map = /etc/samba/smbusers

 [homes]
 comment = Home Dir
 read only = NO
 browseable = NO
 valid users = %S
 path = %H
 directory mask = 0700
 create mask = 0700

 [share]
 comment = test share
 path = /sambashare
 create mask = 0765

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Enforcing local profile doesn't let Home Directory mapping

2009-08-19 Thread Avinash Rao
Thanks for the reply..
I am reading 
http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html
to know the advantages of mapping user groups and if it is of any use
to us.

I also tried executing the root preexec =
/etc/samba/scripts/autopoweruser.sh %U %m to add the user logging to
the Power Users group on the local workstation, but it didn't work, i
dont see it executing only.



On Wed, Aug 19, 2009 at 12:20 PM, Michael Heydonmicha...@jaswin.com.au wrote:
 Avinash Rao wrote:

 Also, is there a way i can control the file permission on the clients
 local harddrive from samba. For example, If a user A logs in to the
 samba domain, he will not have any access to the local hard drive, can
 we give permission from the samba, probably make that domain user a
 part of power users on the client machine.


 Not directly, I use cpau in the login scripts to escalate to a domain admin
 and as that user run a script which does things like add certain domain
 groups to the local admins group. Just remember group membership is worked
 out before the login scripts are run, so the user will have to log out and
 back in for any changes to take affect.

 It is a security risk (cpau doesn't encrypt the credentials, it uses some
 secret encoding) so it isn't suitable for everyone, but it works well for
 us.

 *Michael Heydon - IT Administrator *
 micha...@jaswin.com.au mailto:micha...@jaswin.com.au


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Enforcing local profile doesn't let Home Directory mapping

2009-08-19 Thread Avinash Rao
Am sorry i forgot to mention that i am not able to list
#net rpc group list -Uroot%not24get
Could not connect to server 127.0.0.1
Connection failed: NT_STATUS_CONNECTION_REFUSED


On Wed, Aug 19, 2009 at 12:34 PM, Avinash Raoavinash@gmail.com wrote:
 Thanks for the reply..
 I am reading 
 http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html
 to know the advantages of mapping user groups and if it is of any use
 to us.

 I also tried executing the root preexec =
 /etc/samba/scripts/autopoweruser.sh %U %m to add the user logging to
 the Power Users group on the local workstation, but it didn't work, i
 dont see it executing only.



 On Wed, Aug 19, 2009 at 12:20 PM, Michael Heydonmicha...@jaswin.com.au 
 wrote:
 Avinash Rao wrote:

 Also, is there a way i can control the file permission on the clients
 local harddrive from samba. For example, If a user A logs in to the
 samba domain, he will not have any access to the local hard drive, can
 we give permission from the samba, probably make that domain user a
 part of power users on the client machine.


 Not directly, I use cpau in the login scripts to escalate to a domain admin
 and as that user run a script which does things like add certain domain
 groups to the local admins group. Just remember group membership is worked
 out before the login scripts are run, so the user will have to log out and
 back in for any changes to take affect.

 It is a security risk (cpau doesn't encrypt the credentials, it uses some
 secret encoding) so it isn't suitable for everyone, but it works well for
 us.

 *Michael Heydon - IT Administrator *
 micha...@jaswin.com.au mailto:micha...@jaswin.com.au



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Enforcing local profile doesn't let Home Directory mapping

2009-08-19 Thread Avinash Rao
On Wed, Aug 19, 2009 at 12:40 PM, Michael Heydonmicha...@jaswin.com.au wrote:
 **Avinash Rao wrote:

 Am sorry i forgot to mention that i am not able to list
 #net rpc group list -Uroot%not24get
 Could not connect to server 127.0.0.1
 Connection failed: NT_STATUS_CONNECTION_REFUSED



 I'm guessing here, but this is probably related to the use of interfaces and
 bind interfaces only. Try adding your loopback interface to the list.


You mean in smb.conf file? i have added host allow = 127.
The thing is i don't have any windows server in the network, I have
one Ubuntu Server and samba is configured as PDC.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Enforcing local profile doesn't let Home Directory mapping

2009-08-19 Thread Avinash Rao
Michael,

Sorry if the question is a bit unclear. What i meant is the net rpc
commands are meant to manage trusts between a samba domain and Window
NT domain or ADS. But in my case, I have only one samba server
configured as a PDC.

You mentioned about loopback, where should i check this? Also, I have
used samba but not so much in depth. I am learning these options as
the users in the network are increasing.

Thanks
Avinash


On Wed, Aug 19, 2009 at 1:06 PM, Michael Heydonmicha...@jaswin.com.au wrote:
 Avinash Rao wrote:

 You mean in smb.conf file? i have added host allow = 127.


 Allowing hosts wont do any good if samba isn't listening on the interface
 that those hosts are connected to. If you want to allow connections from
 localhost you need to listen on loopback.

 The thing is i don't have any windows server in the network, I have
 one Ubuntu Server and samba is configured as PDC.

 I'm not sure what you are getting at here.

 *Michael Heydon - IT Administrator *
 micha...@jaswin.com.au mailto:micha...@jaswin.com.au

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Fwd: Not able to display domain users using wbinfo

2009-08-19 Thread Avinash Rao
Why i need winbind..
coz, i have a requirement to control samba users accessing the
internet through squid. I checked the squid ACL's and i can
restrict/allow samba users from accessing the internet but there are
too many users. The other option is to use src IP Address option in
squid, but i have a constraint here as i have other users who cannot
be restricted and are in the same subnet..

So, the only other option is to use the windows groups they belong to,
for which i need to winbind!



On Wed, Aug 19, 2009 at 6:19 PM, Chris
Osickio...@admin.swisscom-mobile.ch wrote:
 On Mon, 17 Aug 2009 16:50:37 +0200
 Volker Lendecke volker.lende...@sernet.de wrote:

 On Mon, Aug 17, 2009 at 04:28:00PM +0200, Helmut Hullen wrote:
  Do you need winbind? Without any Windows server (PDC) you don't need
  the winbind crap.

 winbind crap?

 Volker

 Highly exaggerated.
 It's quite evolving, though. And not easy to keep up with ;-)
 See my other posting.

 Regards,
 Chris
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Enforcing local profile doesn't let Home Directory mapping

2009-08-18 Thread Avinash Rao
Dear all,

I am using Ubuntu 8.04 Server 64-bit edition and I am trying to
enforce Local profile for all users and below is my smb.conf file.
According to the samba documentation, leaving the logon home and logon
path values to empty will enforce local profiles, it worked. But, my
main requirement is when users login their home directories are mapped
and they appear in My Computer window so they get to access all their
files. This disappears if i enable the above mentioned option.

How do i get both of them working?

Thanks
Avinash

[global]
workgroup = abc
server string = Samba on SUN
max log size = 1500
log level = 1
interfaces = eth2 100.100.100.50
bind interfaces only = True
log file = /var/log/samba/log.%m

domain logons = yes
os level = 65
prefered master = yes
domain master = yes
local master = yes

logon home =
logon path =

winbind gid = 1-2
winbind use default domain = yes
idmap uid = 0-2
idmap gid = 0-2
add machine script = /usr/sbin/useradd -s /bin/false -d /home/nobody %u
dns proxy =No
hosts allow = 127. 10.10.10.
wins support = Yes
passdb backend = tdbsam

encrypt passwords = true
smb passwd file = /etc/samba/smbpasswd
security = user
netbios name = sunbox
username map = /etc/samba/smbusers

[homes]
comment = Home Dir
read only = NO
browseable = NO
valid users = %S
path = %H
directory mask = 0700
create mask = 0700

[share]
comment = test share
path = /sambashare
create mask = 0765
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Enforcing local profile doesn't let Home Directory mapping

2009-08-18 Thread Avinash Rao
Thanks for the reply.
My Homes share has this entry, but the global entry is overriding.

Basically there three ways in which u can force local profile, one is
through smb.conf file, the second one is to edit the registry key on
winxp clients and the third one is do it in my computer properties and
change it to local profile.. The last two are really time consuming
coz i have more than 50 computers!

Avinash


On Tue, Aug 18, 2009 at 7:23 PM, Masao Garciamas...@fshac.com wrote:
 In my smb.conf file, I have

 Logon drive = H:

 But I'm no Samba expert by any means.  My Samba server is acting as a PDC
 and users have local profiles.

 -Original Message-
 From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
 On Behalf Of Avinash Rao
 Sent: Tuesday, August 18, 2009 5:06 AM
 To: samba@lists.samba.org
 Subject: [Samba] Enforcing local profile doesn't let Home Directory mapping

 Dear all,

 I am using Ubuntu 8.04 Server 64-bit edition and I am trying to
 enforce Local profile for all users and below is my smb.conf file.
 According to the samba documentation, leaving the logon home and logon
 path values to empty will enforce local profiles, it worked. But, my
 main requirement is when users login their home directories are mapped
 and they appear in My Computer window so they get to access all their
 files. This disappears if i enable the above mentioned option.

 How do i get both of them working?

 Thanks
 Avinash

 [global]
    workgroup = abc
    server string = Samba on SUN
    max log size = 1500
    log level = 1
    interfaces = eth2 100.100.100.50
    bind interfaces only = True
    log file = /var/log/samba/log.%m

    domain logons = yes
    os level = 65
    prefered master = yes
    domain master = yes
    local master = yes

    logon home =
    logon path =

    winbind gid = 1-2
    winbind use default domain = yes
    idmap uid = 0-2
    idmap gid = 0-2
    add machine script = /usr/sbin/useradd -s /bin/false -d /home/nobody %u
    dns proxy =No
    hosts allow = 127. 10.10.10.
    wins support = Yes
    passdb backend = tdbsam

    encrypt passwords = true
    smb passwd file = /etc/samba/smbpasswd
        security = user
        netbios name = sunbox
    username map = /etc/samba/smbusers

 [homes]
    comment = Home Dir
    read only = NO
    browseable = NO
    valid users = %S
    path = %H
    directory mask = 0700
    create mask = 0700

 [share]
    comment = test share
    path = /sambashare
    create mask = 0765
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Not able to display domain users using wbinfo

2009-08-17 Thread Avinash Rao
Also, I have entered the following in smb.conf file

winbind uid = 1-2
winbind gid = 1-2
winbind use default domain = yes

Restarted Samba and i checked wbinfo.

wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND (0xc233)

Can anyone help
Avinash


On Mon, Aug 17, 2009 at 11:07 AM, Avinash Rao avinash@gmail.com wrote:

 Hi,

 I am using Ubuntu 8.04 Server 64-bit Edition and i have installed
 samba as a PDC. Samba version is 3.0.28a and all the required OS
 updates are installed.
 smb.conf

 [global]

    workgroup = abc
    server string = Samba for abc
    log level = 1
    interfaces = eth0
    bind interfaces only = True

    log file = /var/log/samba/log.%m
    max log size = 1000

    domain logons = yes
    os level = 65
    prefered master = yes
    domain master = yes
    local master = yes

    add machine script = /usr/sbin/useradd -s /bin/false -d /home/nobody %u
    dns proxy =No
    hosts allow = 127. 10.10.10.
    wins support = Yes
    passdb backend = tdbsam

    encrypt passwords = true
    ;smb passwd file = /etc/samba/smbpasswd
    security = user
    netbios name = human
    ;username map = /etc/samba/smbusers

 [homes]
    comment = Home Dir
    read only = NO
    browseable = NO
    valid users = %S
    path = %H
    directory mask = 0700
    create mask = 0700

 [share]
    comment = Common Share
    path = /export
    create mask = 0765
    read only = NO

 I am not able to list the domain users using wbinfo command.

 a...@human:~$ wbinfo -u
 Error looking up domain users

 a...@human:~$ wbinfo -g
 Error looking up domain groups

 a...@human:~$ wbinfo --ping
 Ping to winbindd succeeded on fd 3

 How do i make this work? Winbindd was installed when i installed samba
 using the apt-get command and its running? Samba is working without
 any problems, even if i stop winbindd process, samba works. What
 exactly is the use of winbind and when do we use it?

 Many Thanks
 Avinash
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Not able to display domain users using wbinfo

2009-08-17 Thread Avinash Rao
Hi guys,

Sorry for creating a chain of emails. After reading the man page, i
realized that wbinfo -t is to verify

On Mon, Aug 17, 2009 at 12:58 PM, Avinash Raoavinash@gmail.com wrote:
 Also, I have entered the following in smb.conf file

 winbind uid = 1-2
 winbind gid = 1-2
 winbind use default domain = yes

 Restarted Samba and i checked wbinfo.

 wbinfo -t
 checking the trust secret via RPC calls failed
 error code was NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND (0xc233)

 Can anyone help
 Avinash


 On Mon, Aug 17, 2009 at 11:07 AM, Avinash Rao avinash@gmail.com wrote:

 Hi,

 I am using Ubuntu 8.04 Server 64-bit Edition and i have installed
 samba as a PDC. Samba version is 3.0.28a and all the required OS
 updates are installed.
 smb.conf

 [global]

    workgroup = abc
    server string = Samba for abc
    log level = 1
    interfaces = eth0
    bind interfaces only = True

    log file = /var/log/samba/log.%m
    max log size = 1000

    domain logons = yes
    os level = 65
    prefered master = yes
    domain master = yes
    local master = yes

    add machine script = /usr/sbin/useradd -s /bin/false -d /home/nobody %u
    dns proxy =No
    hosts allow = 127. 10.10.10.
    wins support = Yes
    passdb backend = tdbsam

    encrypt passwords = true
    ;smb passwd file = /etc/samba/smbpasswd
    security = user
    netbios name = human
    ;username map = /etc/samba/smbusers

 [homes]
    comment = Home Dir
    read only = NO
    browseable = NO
    valid users = %S
    path = %H
    directory mask = 0700
    create mask = 0700

 [share]
    comment = Common Share
    path = /export
    create mask = 0765
    read only = NO

 I am not able to list the domain users using wbinfo command.

 a...@human:~$ wbinfo -u
 Error looking up domain users

 a...@human:~$ wbinfo -g
 Error looking up domain groups

 a...@human:~$ wbinfo --ping
 Ping to winbindd succeeded on fd 3

 How do i make this work? Winbindd was installed when i installed samba
 using the apt-get command and its running? Samba is working without
 any problems, even if i stop winbindd process, samba works. What
 exactly is the use of winbind and when do we use it?

 Many Thanks
 Avinash

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Fwd: Not able to display domain users using wbinfo

2009-08-17 Thread Avinash Rao
Sorry for the missing text.. what i meant was verify that the
workstation trust  account  created  when  the  Samba server is added
to the Windows NT domain is working. I don't have a windows NT domain,
I have a samba server running on Ubuntu 8.04 Server and WinXP clients!

And I am trying to get squid working for samba domain users through
http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm and
wbinfo -a mydomain\\myuser%mypasswd didn't succeed.. So, is there
anything that i need to do to get this working?

Avinash
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Not able to display domain users using wbinfo

2009-08-16 Thread Avinash Rao
Hi,

I am using Ubuntu 8.04 Server 64-bit Edition and i have installed
samba as a PDC. Samba version is 3.0.28a and all the required OS
updates are installed.
smb.conf

[global]

workgroup = abc
server string = Samba for abc
log level = 1
interfaces = eth0
bind interfaces only = True

log file = /var/log/samba/log.%m
max log size = 1000

domain logons = yes
os level = 65
prefered master = yes
domain master = yes
local master = yes

add machine script = /usr/sbin/useradd -s /bin/false -d /home/nobody %u
dns proxy =No
hosts allow = 127. 10.10.10.
wins support = Yes
passdb backend = tdbsam

encrypt passwords = true
;smb passwd file = /etc/samba/smbpasswd
security = user
netbios name = human
;username map = /etc/samba/smbusers

[homes]
comment = Home Dir
read only = NO
browseable = NO
valid users = %S
path = %H
directory mask = 0700
create mask = 0700

[share]
comment = Common Share
path = /export
create mask = 0765
read only = NO

I am not able to list the domain users using wbinfo command.

a...@human:~$ wbinfo -u
Error looking up domain users

a...@human:~$ wbinfo -g
Error looking up domain groups

a...@human:~$ wbinfo --ping
Ping to winbindd succeeded on fd 3

How do i make this work? Winbindd was installed when i installed samba
using the apt-get command and its running? Samba is working without
any problems, even if i stop winbindd process, samba works. What
exactly is the use of winbind and when do we use it?

Many Thanks
Avinash
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba