[Samba] Padl XAD

2004-12-09 Thread David \3oz\ Sonenberg
Has anyone tried the PADL identity server?  It looks
like it provides Active Dircectory, LDAP, and
Kerberos.  I'd love to here about people's experience
with it.

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba PDC + Kerberos

2004-12-08 Thread David \3oz\ Sonenberg
Has any one actually gotten a samba PDC to
authenticate against a Kerberos server?  If so were
you able to get Samba to pass along the tokens.  I
have built Samba PDC at other companies without to
much complication.  My new company does not curently
have a either a PDC or a kerberos server, but would
like to get both.  What has your experience been?

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Slow logins and groupmaps, Please Help

2004-08-16 Thread David \3oz\ Sonenberg
I have my samba box running as a PDC.  When users
login to the domain, it takes a long time (3-5
minutes).  I gets to the section 'Loading Personel
Settings...' and just sits there for several minutes. 
I've also noticed that the login.bat script only works
for root, and all that does is net use h:
\\samba\homes.  Here's my smb.conf file.  Any help
would be appreciated.

[global]
netbios name = SAMBA
workgroup = DOMAIN
passdb backend  = tdbsam

# Scripts
add user script = /usr/sbin/useradd -n -m %u
delete user script = /usr/sbin/userdel -r %u
add group script =
/var/lib/samba/scripts/smbgrpadd.sh %g
delete group script = /usr/sbin/groupdel %g
add user to group script = /usr/sbin/usermod
-G %g %u
add machine script = /usr/sbin/useradd -s
/bin/false -d /dev/null %u

os level = 33
preferred master = yes
domain master = yes
local master = yes
security = user
domain logons = yes
logon path = \\%L\Profiles\%U
logon drive = H:
logon home = \\%L\%U
logon script = logon.bat
wins support = yes
syslog = 5

[netlogon]
path = /var/lib/samba/netlogon
read only = yes
write list = ntadmin

[profiles]
path = /var/lib/samba/profiles
read only = no
create mask = 0600
directory mask = 0700

[homes]
valid users = %S
read only = No
browseable = No


How do I delete unmapped entries from my groupmap. 
I've managed to delete incorrect entries but I still
have all these unmapped entries that I can seem to
delete.  Here's my groupmappings

[EMAIL PROTECTED] root]# net groupmap list
System Operators (S-1-5-32-549) - -1
Replicators (S-1-5-32-552) - -1
Guests (S-1-5-32-546) - -1
Domain Users
(S-1-5-21-2915653246-892158047-278579456-513) - users
Domain Guests
(S-1-5-21-2915653246-892158047-278579456-514) -
nobody
Power Users (S-1-5-32-547) - -1
Print Operators (S-1-5-32-550) - -1
Administrators (S-1-5-32-544) - -1
Account Operators (S-1-5-32-548) - -1
Backup Operators (S-1-5-32-551) - -1
Users (S-1-5-32-545) - -1
Domain Admins
(S-1-5-21-2915653246-892158047-278579456-512) -
ntadmins




__
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Groupmappings

2004-08-13 Thread David \3oz\ Sonenberg
How do I delete unmapped entries from my groupmap. 
I've managed to delete incorrect entries but I still
have all these unmapped entries that I can seem to
delete.  Here's my groupmappings

[EMAIL PROTECTED] root]# net groupmap list
System Operators (S-1-5-32-549) - -1
Replicators (S-1-5-32-552) - -1
Guests (S-1-5-32-546) - -1
Domain Users
(S-1-5-21-2915653246-892158047-278579456-513) - users
Domain Guests
(S-1-5-21-2915653246-892158047-278579456-514) -
nobody
Power Users (S-1-5-32-547) - -1
Print Operators (S-1-5-32-550) - -1
Administrators (S-1-5-32-544) - -1
Account Operators (S-1-5-32-548) - -1
Backup Operators (S-1-5-32-551) - -1
Users (S-1-5-32-545) - -1
Domain Admins
(S-1-5-21-2915653246-892158047-278579456-512) -
ntadmins


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Wierd Caching Issue

2004-08-12 Thread David \3oz\ Sonenberg
I'm running my Samba box as a PDC.  I've changed the
static IP once since I got it up running, and I'm
getting the following error message:

Aug 12 10:20:13 samba nmbd[3978]: [2004/08/12
10:20:13, 0]
nmbd/nmbd_browsesync.c:get_domain_master_name_node_status_fail(485)
Aug 12 10:20:13 samba nmbd[3978]:  
get_domain_master_name_node_status_fail:
Aug 12 10:20:13 samba nmbd[3978]:   Doing a node
status request to the domain master browser at IP
65.36.113.43 failed.
Aug 12 10:20:13 samba nmbd[3978]:   Cannot get
workgroup name.

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Group management

2004-08-12 Thread David \3oz\ Sonenberg
I'm trying to add a user to the domain admins group in
vain.  I've tried using the windows usrgrp tool.  I've
tried doing 'pdbedit -u username -G
S-1-5-21-2351621536-730267382-1598341932-512'  I've
tried 'net groupmember ADD 'Domain Admins' username. 
The user I'm trying to add is already in the unixgroup
that's mapped to the NTgroup.  Does any one know the
proper way to do this?  Here's my groupmappings:

[EMAIL PROTECTED] root]# net groupmap list
System Operators (S-1-5-32-549) - -1
Replicators (S-1-5-32-552) - -1
Guests (S-1-5-32-546) - -1
Domain Users
(S-1-5-21-2915653246-892158047-278579456-513) - users
Domain Users
(S-1-5-21-2351621536-730267382-1598341932-513) - -1
Domain Admins
(S-1-5-21-2351621536-730267382-1598341932-512) -
ntadmins
Domain Guests
(S-1-5-21-2351621536-730267382-1598341932-514) -
nobody
Domain Guests
(S-1-5-21-2915653246-892158047-278579456-514) - -1
Power Users (S-1-5-32-547) - -1
Domain Users
(S-1-5-21-152711010-200846165-2210790283-513) - users
Print Operators (S-1-5-32-550) - -1
Administrators (S-1-5-32-544) - -1
Account Operators (S-1-5-32-548) - -1
X3D Employees
(S-1-5-21-2915653246-892158047-278579456-1112) -
david$
Domain Guests
(S-1-5-21-152711010-200846165-2210790283-514) -
nobody
Backup Operators (S-1-5-32-551) - -1
Users (S-1-5-32-545) - -1
Domain Admins
(S-1-5-21-2915653246-892158047-278579456-512) - -1




__
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Group management

2004-08-12 Thread David \3oz\ Sonenberg
OK, here's how far I got:
[EMAIL PROTECTED] 50 Inch Content]# net getlocalsid
SID for domain SAMBA is:
S-1-5-21-2915653246-892158047-278579456

I was able to delete some of the groups using
net RPC group delete sid=
net groupmap delete sid=

but not all of them.

Here's a whole lot of output:

[EMAIL PROTECTED] 50 Inch Content]# net RPC group delete
sid=S-1-5-32-549
Password:
Lookup of 'sid=S-1-5-32-549' failed
[EMAIL PROTECTED] 50 Inch Content]# net RPC group delete
'System Operators'
Password:
Lookup of 'System Operators' failed
[EMAIL PROTECTED] 50 Inch Content]# net RPC group delete
sid=S-1-5-32-549 -d 2
[2004/08/12 12:45:52, 2]
lib/interface.c:add_interface(79)
  added interface ip=192.168.1.50 bcast=192.168.1.255
nmask=255.255.255.0
Password:
Lookup of 'sid=S-1-5-32-549' failed
[2004/08/12 12:45:54, 1]
utils/net_rpc.c:run_rpc_command(141)
  rpc command function failed! (NT_STATUS_NONE_MAPPED)
[2004/08/12 12:45:54, 2] utils/net.c:main(792)
  return code = 1
[EMAIL PROTECTED] 50 Inch Content]# net RPC group delete
sid=S-1-5-32-549 -d 2
[2004/08/12 12:46:08, 2]
lib/interface.c:add_interface(79)
  added interface ip=192.168.1.50 bcast=192.168.1.255
nmask=255.255.255.0
Password:
Lookup of 'sid=S-1-5-32-549' failed
[2004/08/12 12:46:11, 1]
utils/net_rpc.c:run_rpc_command(141)
  rpc command function failed! (NT_STATUS_NONE_MAPPED)
[2004/08/12 12:46:11, 2] utils/net.c:main(792)
  return code = 1

[EMAIL PROTECTED] 50 Inch Content]# net groupmap delete
'System Operators' -d 2
[2004/08/12 12:47:28, 2]
lib/interface.c:add_interface(79)
  added interface ip=192.168.1.50 bcast=192.168.1.255
nmask=255.255.255.0
Bad option: System Operators
[2004/08/12 12:47:28, 2] utils/net.c:main(792)
  return code = -1
[EMAIL PROTECTED] 50 Inch Content]# net groupmap delete
sid=S-1-5-32-552 -d 2
[2004/08/12 12:47:41, 2]
lib/interface.c:add_interface(79)
  added interface ip=192.168.1.50 bcast=192.168.1.255
nmask=255.255.255.0
Sucessfully removed S-1-5-32-552 from the mapping db
[2004/08/12 12:47:41, 2] utils/net.c:main(792)
  return code = 0
[EMAIL PROTECTED] 50 Inch Content]# net groupmap list
System Operators (S-1-5-32-549) - -1



--- Craig White [EMAIL PROTECTED] wrote:

 On Thu, 2004-08-12 at 08:29, David 3oz Sonenberg
 wrote:
  I'm trying to add a user to the domain admins
 group in
  vain.  I've tried using the windows usrgrp tool. 
 I've
  tried doing 'pdbedit -u username -G
  S-1-5-21-2351621536-730267382-1598341932-512' 
 I've
  tried 'net groupmember ADD 'Domain Admins'
 username. 
  The user I'm trying to add is already in the
 unixgroup
  that's mapped to the NTgroup.  Does any one know
 the
  proper way to do this?  Here's my groupmappings:
  
  [EMAIL PROTECTED] root]# net groupmap list
  System Operators (S-1-5-32-549) - -1
  Replicators (S-1-5-32-552) - -1
  Guests (S-1-5-32-546) - -1
  Domain Users
  (S-1-5-21-2915653246-892158047-278579456-513) -
 users
  Domain Users
  (S-1-5-21-2351621536-730267382-1598341932-513) -
 -1
  Domain Admins
  (S-1-5-21-2351621536-730267382-1598341932-512) -
  ntadmins
  Domain Guests
  (S-1-5-21-2351621536-730267382-1598341932-514) -
  nobody
  Domain Guests
  (S-1-5-21-2915653246-892158047-278579456-514) -
 -1
  Power Users (S-1-5-32-547) - -1
  Domain Users
  (S-1-5-21-152711010-200846165-2210790283-513) -
 users
  Print Operators (S-1-5-32-550) - -1
  Administrators (S-1-5-32-544) - -1
  Account Operators (S-1-5-32-548) - -1
  X3D Employees
  (S-1-5-21-2915653246-892158047-278579456-1112) -
  david$
  Domain Guests
  (S-1-5-21-152711010-200846165-2210790283-514) -
  nobody
  Backup Operators (S-1-5-32-551) - -1
  Users (S-1-5-32-545) - -1
  Domain Admins
  (S-1-5-21-2915653246-892158047-278579456-512) -
 -1
 
 you need to clean up your groupmaps first
 1 - from cli 
 net getlocalsid
 
 2 - your local SID should match the SID's below
 (ignoring the RID)
 evidently it is either:
 S-1-5-21-2915653246-892158047-278579456
 or
 S-1-5-21-2351621536-730267382-1598341932
 or
 S-1-5-21-152711010-200846165-2210790283
 
 3 - duplicates/unmapped entries/non matching SID's
 below
 
 System Operators (S-1-5-32-549) - -1
 delete or fix
  Replicators (S-1-5-32-552) - -1
 delete or fix
  Guests (S-1-5-32-546) - -1
 delete or fix
  Domain Users
 (S-1-5-21-2915653246-892158047-278579456-513) -
 users
 ok - SID?
  Domain Users
 (S-1-5-21-2351621536-730267382-1598341932-513) - -1
 delete
  Domain Admins
 (S-1-5-21-2351621536-730267382-1598341932-512) -
 ntadmins
 ok - SID?
  Domain Guests
 (S-1-5-21-2351621536-730267382-1598341932-514) -
 nobody
 ok - SID?
  Domain Guests
 (S-1-5-21-2915653246-892158047-278579456-514) - -1
 delete
  Power Users (S-1-5-32-547) - -1
 delete or fix
  Domain Users
 (S-1-5-21-152711010-200846165-2210790283-513) -
 users
 2nd entry - delete
  Print Operators (S-1-5-32-550) - -1
 delete or fix
  Administrators (S-1-5-32-544) - -1
 delete or fix
  Account Operators (S-1-5-32-548) - -1
 delete or fix
  X3D

[Samba] PDC login problem

2004-08-11 Thread David \3oz\ Sonenberg
I had my server running as a PDC in a test
environment.  I just moved it over to the production
side, and of course there's a problem.  It let's
computers join the network but when you try to logon
it just hangs on 'Loading your personal settings...' 
Also in the nmbd log I'm getting the following
message:
[2004/08/11 16:20:13, 0]
nmbd/nmbd_browsesync.c:get_domain_master_name_node_status_fail(485)
  get_domain_master_name_node_status_fail:
  Doing a node status request to the domain master
browser at IP 65.36.113.43 failed.
  Cannot get workgroup name.

That's the old IP address that I had it running on. 
When I switched it over, I changed the domain name and
the IP address.  Any help would be appreciated.




__
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] pdbedit and tdbsam

2004-08-06 Thread David \3oz\ Sonenberg
I'm having trouble using pdbedit to add user to a
tdbsam database.  I'm running Redhat Enterprise Linux
ES 3.0, with the stock version of samba.  I'm not sure
why it won't let me add users.  I tried it with
smbpasswd and that didn't work either.  Anyway here's
a plethora of information:

[EMAIL PROTECTED] root]# pdbedit -a -u root -d 10
INFO: Current debug levels:
  all: True/10
  tdb: False/0
  printdrivers: False/0
  lanman: False/0
  smb: False/0
  rpc_parse: False/0
  rpc_srv: False/0
  rpc_cli: False/0
  passdb: False/0
  sam: False/0
  auth: False/0
  winbind: False/0
  vfs: False/0
  idmap: False/0
  quota: False/0
  acls: False/0
lp_load: refreshing parameters
Initialising global parameters
params.c:pm_process() - Processing configuration file
/etc/samba/smb.conf
Processing section [global]
doing parameter netbios name = SAMBA
handle_netbios_name: set global_myname to: SAMBA
doing parameter workgroup = X3D
doing parameter passdb backend =
tdbsam:/etc/samba/secrets.tdb
doing parameter add user script = /usr/sbin/useradd -m
%u
doing parameter delete user script = /usr/sbin/userdel
=r %u
doing parameter add group script = /usr/sbin/groupadd
%g
doing parameter delete group script =
/usr/sbin/groupdel %g
doing parameter add user to group script =
/usr/sbin/usermod -G %g %u
doing parameter add machine script = /usr/sbin/useradd
-s /bin/false -d /dev/null %u
doing parameter os level = 33
doing parameter preferred master = yes
doing parameter domain master = yes
doing parameter local master = yes
doing parameter security = user
doing parameter domain logons = yes
doing parameter logon path = \\%N\profiles\%u
doing parameter logon drive = H:
doing parameter logon script = logon.bat
doing parameter wins support = yes
doing parameter syslog = 5
pm_process() returned Yes
lp_servicenumber: couldn't find homes
set_server_role: role = ROLE_DOMAIN_PDC
Attempting to register new charset UCS-2LE
Registered charset UCS-2LE
Attempting to register new charset UTF8
Registered charset UTF8
Attempting to register new charset ASCII
Registered charset ASCII
Attempting to register new charset 646
Registered charset 646
Attempting to register new charset ISO-8859-1
Registered charset ISO-8859-1
Attempting to register new charset UCS2-HEX
Registered charset UCS2-HEX
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Trying to load: tdbsam:/etc/samba/secrets.tdb
Attempting to register passdb backend ldapsam
Successfully added passdb backend 'ldapsam'
Attempting to register passdb backend ldapsam_compat
Successfully added passdb backend 'ldapsam_compat'
Attempting to register passdb backend smbpasswd
Successfully added passdb backend 'smbpasswd'
Attempting to register passdb backend tdbsam
Successfully added passdb backend 'tdbsam'
Attempting to register passdb backend guest
Successfully added passdb backend 'guest'
Attempting to find an passdb backend to match
tdbsam:/etc/samba/secrets.tdb (tdbsam)
Found pdb backend tdbsam
pdb backend tdbsam:/etc/samba/secrets.tdb has a valid
init
Attempting to find an passdb backend to match guest
(guest)
Found pdb backend guest
pdb backend guest has a valid init
Netbios name list:-
my_netbios_names[0]=SAMBA
Trying to load: tdbsam:/etc/samba/secrets.tdb
Attempting to find an passdb backend to match
tdbsam:/etc/samba/secrets.tdb (tdbsam)
Found pdb backend tdbsam
pdb backend tdbsam:/etc/samba/secrets.tdb has a valid
init
Attempting to find an passdb backend to match guest
(guest)
Found pdb backend guest
pdb backend guest has a valid init
Finding user root
Trying _Get_Pwnam(), username as lowercase is root
Get_Pwnam_internals did find user [root]!
pdb_set_username: setting username root, was
element 12 - now SET
pdb_set_full_name: setting full name root, was
element 13 - now SET
pdb_set_unix_homedir: setting home dir /root, was NULL
element 22 - now SET
pdb_set_domain: setting domain X3D, was
pdb_set_user_sid: setting user sid
S-1-5-21-2351621536-730267382-1598341932-1000
element 18 - now SET
pdb_set_user_sid_from_rid:
setting user sid
S-1-5-21-2351621536-730267382-1598341932-1000 from rid
1000
pdb_set_group_sid: setting group sid
S-1-5-21-2351621536-730267382-1598341932-1001
element 19 - now SET
pdb_set_group_sid_from_rid:
setting group sid

Re: [Samba] samba PDC problems

2004-08-05 Thread David \3oz\ Sonenberg
 H:, was NULL
pdb_set_logon_script: setting logon script logon.bat,
was
pdb_init_sam_new: no RID specified.  Generating one
via old algorithm
pdb_set_user_sid: setting user sid
S-1-5-21-2351621536-730267382-1598341932-1000
element 18 - now SET
pdb_set_user_sid_from_rid:
setting user sid
S-1-5-21-2351621536-730267382-1598341932-1000 from rid
1000
new password:
retype new password:
account_policy_get: maximum password age:-1
account_policy_get: minimum password age:0
tdb(unnamed): tdb_open_ex: /etc/samba/secrets.tdb
(2054,0) is already open in this process
Unable to open/create TDB passwd
tdb_update_sam: Unable to open TDB passwd
(/etc/samba/secrets.tdb)!
Unable to add user! (does it already exist?)


--- David \3oz\ Sonenberg [EMAIL PROTECTED]
wrote:

 Tried that and that didn't work either, here's the
 output:
 [EMAIL PROTECTED] root]# smbpasswd -a root
 New SMB password:
 Retype new SMB password:
 Unable to open/create TDB passwd
 pdb_getsampwnam: Unable to open TDB passwd
 (/etc/samba/secrets.tdb)!
 Unable to open/create TDB passwd
 tdb_update_sam: Unable to open TDB passwd
 (/etc/samba/secrets.tdb)!
 Failed to add entry for user root.
 Failed to modify password entry for user root
 [EMAIL PROTECTED] root]# cat /etc/samba/s
 secrets.tdb  smb.conf smb.conf.rpmnew 
 smbusers
 [EMAIL PROTECTED] root]# cat /etc/samba/smbusers
 # Unix_name = SMB_name1 SMB_name2 ...
 root = administrator admin
 nobody = guest pcguest smbguest
 
 I'm thinking it may be a permissions problem.  Samba
 is running as root(this is RH Enterprise ES 3). 
 Here
 what the /etc/samba dir looks like:
 
 [EMAIL PROTECTED] root]# ls -la /etc/samba/
 total 40
 drwxr-xr-x2 root root 4096 Aug  4
 17:06 .
 drwxr-xr-x   61 root root 4096 Aug  4
 17:45 ..
 -rw-r--r--1 root root   20 Jul 20
 09:43 lmhosts
 -rw-rw-rw-1 root root 8192 Aug  4
 17:06 secrets.tdb
 -rw-r--r--1 root root  843 Aug  4
 17:05 smb.conf
 -rw-r--r--1 root root10704 Jul 20
 09:43 smb.conf.rpmnew
 -rw-r--r--1 root root   97 Jul 20
 09:43 smbusers
 --- Craig White [EMAIL PROTECTED] wrote:
 
  ---
  looks good - how about some of these...
  
  smbpasswd -a root
  smbpasswd root
  
  cat /etc/samba/smbusers
  
  smbpasswd -w (root_passwd)
  
  Craig
  
  -- 
  To unsubscribe from this list go to the following
  URL and read the
  instructions: 
  http://lists.samba.org/mailman/listinfo/samba
  
 
 
 
   
 __
 Do you Yahoo!?
 Yahoo! Mail - You care about security. So do we.
 http://promotions.yahoo.com/new_mail
 -- 
 To unsubscribe from this list go to the following
 URL and read the
 instructions: 
 http://lists.samba.org/mailman/listinfo/samba
 





__
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba PDC problems

2004-08-05 Thread David \3oz\ Sonenberg
Tried that and that didn't work either, here's the
output:
[EMAIL PROTECTED] root]# smbpasswd -a root
New SMB password:
Retype new SMB password:
Unable to open/create TDB passwd
pdb_getsampwnam: Unable to open TDB passwd
(/etc/samba/secrets.tdb)!
Unable to open/create TDB passwd
tdb_update_sam: Unable to open TDB passwd
(/etc/samba/secrets.tdb)!
Failed to add entry for user root.
Failed to modify password entry for user root
[EMAIL PROTECTED] root]# cat /etc/samba/s
secrets.tdb  smb.conf smb.conf.rpmnew 
smbusers
[EMAIL PROTECTED] root]# cat /etc/samba/smbusers
# Unix_name = SMB_name1 SMB_name2 ...
root = administrator admin
nobody = guest pcguest smbguest

I'm thinking it may be a permissions problem.  Samba
is running as root(this is RH Enterprise ES 3).  Here
what the /etc/samba dir looks like:

[EMAIL PROTECTED] root]# ls -la /etc/samba/
total 40
drwxr-xr-x2 root root 4096 Aug  4
17:06 .
drwxr-xr-x   61 root root 4096 Aug  4
17:45 ..
-rw-r--r--1 root root   20 Jul 20
09:43 lmhosts
-rw-rw-rw-1 root root 8192 Aug  4
17:06 secrets.tdb
-rw-r--r--1 root root  843 Aug  4
17:05 smb.conf
-rw-r--r--1 root root10704 Jul 20
09:43 smb.conf.rpmnew
-rw-r--r--1 root root   97 Jul 20
09:43 smbusers
--- Craig White [EMAIL PROTECTED] wrote:

 ---
 looks good - how about some of these...
 
 smbpasswd -a root
 smbpasswd root
 
 cat /etc/samba/smbusers
 
 smbpasswd -w (root_passwd)
 
 Craig
 
 -- 
 To unsubscribe from this list go to the following
 URL and read the
 instructions: 
 http://lists.samba.org/mailman/listinfo/samba
 




__
Do you Yahoo!?
Yahoo! Mail - You care about security. So do we.
http://promotions.yahoo.com/new_mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba PDC problems

2004-08-04 Thread David \3oz\ Sonenberg
I'm trying to set up a samba PDC. I've been following
the directions in The Official Samab-3 book. I still
don't understand how to add users! I'm using tdbsam
and I set up all the add user scripts and what not in
the smb.conf. pdbedit won't let me do anything unless
I add the user with adduser(what's the point of the
scripts?) and even when I add the user by hand I get
this error message. 

[EMAIL PROTECTED] samba]# pdbedit -a -u test 
new password: 
retype new password: 
Unable to open/create TDB passwd 
tdb_update_sam: Unable to open TDB passwd
(/etc/samba/secrets.tdb)! 
Unable to add user! (does it already exist?) 

I'm sure I just understand the process and none of the
docs seem to explain it clearly. Any help you can give
would be appreciated. Anyway here's my smb.conf: 

[global] 
netbios name = SAMBA 
workgroup = WORKGROUP 
passdb backend = tdbsam:/etc/samba/secrets.tdb 

# Scripts 
add user script = /usr/sbin/useradd -m %u 
delete user script = /usr/sbin/userdel =r %u 
add group script = /usr/sbin/groupadd %g 
delete group script = /usr/sbin/groupdel %g 
add user to group script = /usr/sbin/usermod -G %g %u 
add machine script = /usr/sbin/useradd -s /bin/false
-d /dev/null %u 

os level = 33 
preferred master = yes 
domain master = yes 
local master = yes 
security = user 
domain logons = yes 
logon path = \\%N\profiles\%u 
logon drive = H: 
logon script = logon.bat 

[netlogon] 
path = /var/lib/samba/netlogon 
read only = yes 
write list = ntadmin 

[profiles] 
path = /var/lib/samba/profiles 
read only = no 
create mask = 0600 
directory mask = 0700



__
Do you Yahoo!?
Yahoo! Mail is new and improved - Check it out!
http://promotions.yahoo.com/new_mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba PDC problems

2004-08-04 Thread David \3oz\ Sonenberg
I'll try that tomorrow.  Will pdbedit not work, or do
I just have to use smbpasswd to get things setup?

--- Craig White [EMAIL PROTECTED] wrote:
 looks good - how about some of these...
 
 smbpasswd -a root
 smbpasswd root
 
 cat /etc/samba/smbusers
 
 smbpasswd -w (root_passwd)
 
 Craig
 
 -- 
 To unsubscribe from this list go to the following
 URL and read the
 instructions: 
 http://lists.samba.org/mailman/listinfo/samba
 



__
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
http://promotions.yahoo.com/new_mail 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba