Re: [Samba] (no subject)
Original Message - From: Yasir Chaudhary [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 10:36 AM Subject: [Samba] (no subject) Funnily enough the subject line is for entering a relevant subject. Dear Sir/Madam, I want to configure my Samba Server with my windows NT 4.0 and Windows 2000 server as a two way trust. kindly send me a detail configuration of smb.conf or other changes i have to made in Linux machine aswell as Wimdows machines. Would you like us to wipe your arse for you aswell? http://samba.mirror.ac.uk/samba/docs/ with regards Yasir Ch Lab Supervisor GCU,Lahore, Pakistan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Sharing a Windows SMB shared printer via Samba
I know this may sound like an odd thing to do, but I have a printer on a Win98 machine that Win2k machines can't see And I got to thinking surely Linux can print from an SMB printer and I've read all sorts of things but found nothing really conclusive on how to set this up. I've added the printer various different ways in /etc/printcap, including attempting to use smbprint from the SAMBA packages. I've got a LJ4500N with a jet direct card working fine from SAMBA but I can't for the life of me get this 1100 to work. Some config files: #LJ1100:\ # :sd=/var/spool/lpd/lj1100:\ # :mx#0:\ # :rm=smb://administrator:[EMAIL PROTECTED]/LASERJET1100 # :done_jobs=0:\ # :rp=:\ # :sh: #lj1100:\ # :ml#0:\ # :mx#0:\ # :sd=/var/spool/lpd/lj1100:\ # :af=/var/spool/lpd/lj1100/lj1100.acct:\ # :sh:\ # :lp=|/usr/share/printconf/util/smbprint:\ # :lpd_bounce=true:\ # :if=/usr/share/printconf/util/mf_wrapper: lj1100:\ :cm=Development LJ1100:\ :lp=/dev/lp1100:\ :sd=/var/spool/lpd/lj1100:\ :af=/var/spool/lpd/lj1100/acct:\ :mx#0:\ :if=/usr/local/samba/newer-smbprint.sh: I've tried the commented out ones aswell. # HP Laserjet 1100 Share. [lj1100] comment = HP LaserJet 1100 path = /var/spool/samba read only = No guest ok = Yes printable = Yes print command = lpr -P lj1100 -r %s -h; rm %s printer name = lj1100 oplocks = No share modes = No valid users = @Domain+Domain Users printer admin = root, @Domain+IT, @lpd lprm command = /usr/bin/lprm -P %p %j lppause command = /usr/sbin/lpc hold %p %j lpresume command = /usr/sbin/lpc release %p %j queuepause command = /usr/sbin/lpc stop %p queueresume command = /usr/sbin/lpc start %p lpq command = /usr/bin/lpq -P %p I can see the printer and add it ok, but can't get the bugger to print! Any help appreciated. Gareth Davies Willowbrook I.T. Ext. 235 * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ./ configure problem
Perhaps you may want to install a compiler (gcc?) Perhaps you might want to learn how to use google? I know your very busy but I have run out of ideas What ideas did you have exactly, for once the error message is telling you exactly what is wrong.. You don't have gcc, cc or cl and Configure error: no acceptable C compiler found Looks pretty clear to me. Regards - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, July 07, 2003 9:46 AM Subject: [Samba] ./ configure problem Hello, I'm trying to get Samba installed on my PowerPC G3. I have downloaded Samba2.2.8a and 3.0.0beta2 but the same problem persists. Once I uncompress the tar file, then try to run the ./configure command, It wont configure and fail. The error message goes something like this: = ./configure Checking for gcc... no Checking for cc ... no Checking for cc ... no Checking for cl ... no Configure error: no acceptable C compiler found in $PATH == Do you have any ideas why this is happening? I know your very busy but I have run out of ideas Many thanks Oli -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Virus Alert - LAMER ALERT
This is an Automated Message, please learn how to configure your AV software properly so it doesn't reply to mailing lists. - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 01, 2003 11:33 AM Subject: [Samba] Virus Alert ** This is an automated message *** A mail message sent from this account to a Cisco employee had an attachment called your_details.zip. The file your_details.zip contained a virus. Please contact your local System Administrator. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] mount -t smbfs
Try: mount -t smbfs -o username=Administrator,password=YOURADMINPASSWORD //YOURSERVER/E$ /windows/E make sure /windows/E exists :) Gareth Davies - Original Message - From: Sadananda B Rai [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, June 30, 2003 2:37 PM Subject: FW: [Samba] mount -t smbfs Is anybody can help me on this please. Can I mount a Fat32(Win XP) file system on my Linux server(Red Hat 8). I was able to mount windows 98 and not with Xp or NT. smbmount //xp/e test -o username=srai Password: 3870: session setup failed: ERRDOS - ERRnoaccess SMB connection failed mount -t smbfs //XP/e test -o username=srai Password: 3872: session setup failed: ERRDOS - ERRnoaccess SMB connection failed Any help or suggestions on this ? Thanks in advance Sadanand -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sadananda B Rai Sent: Monday, June 30, 2003 4:47 PM To: [EMAIL PROTECTED] Subject: [Samba] smbmount Hello All, I am trying to mount a network NTFS and FAT32 file system to red hat 8 system. But I getting a error as smbmount //host/E /mnt/NT Password: 960: session setup failed: ERRSRV - ERRbadpw SMB connection failed If u say this is the passwd and username problem. ( Can any one help that I should use Linux user and passwd or Windows system user?) Than some time I am getting a error as 957: tree connect failed: ERRDOS - ERRnosuchshare SMB connection failed In the log I couldn't find anything than Jun 30 15:50:00 test last message repeated 13 times Jun 30 15:51:05 test last message repeated 13 times Jun 30 15:52:10 test last message repeated 13 times Jun 30 15:53:15 test last message repeated 13 times Any help will be appreciated and thanks in advance. I tried googling but couldn't find more about my problem. Plz someone help me on this. Thanking You Sada -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ./configure problems using --with-pam under Debian stable.
Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 10, 2003 3:09 PM Subject: [Samba] ./configure problems using --with-pam under Debian stable. Hey, all. I'm running Debian stable, and when I try to ./configure --with-pam for either 2.2.7a or 2.2.8a, I wind up with [...] checking whether struct passwd has pw_age... (cached) no snip Why not just use the Debian packages for 2.2.8a? I'm pretty sure they have PAM support. http://www.mirror.ac.uk/sites/ftp.samba.org/Binary_Packages/Debian/dists/sta ble/main/binary-i386/ Gareth Davies Willowbrook I.T. Ext. 235 * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Ext3fs/ReiserFS Performance Enhancing
- Original Message - From: Larry McElderry [EMAIL PROTECTED] To: Rashkae [EMAIL PROTECTED]; Robert Adkins II [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, March 21, 2003 3:45 PM Subject: RE: [Samba] Ext3fs/ReiserFS Performance Enhancing I tend to agree. Perhaps a duplex mismatch between hub/switch and NIC? How long does it take to copy a 5MB file from one local drive to the second local drive (not involving the network)? I also concur. I just tested a 16mb file copying to a Winbind authenticated SAMBA share using Ext3fs and it took around 3-4 seconds. Copying between 2 SAMBA shares on the same machine took about 12 seconds. Copying from the share back to the Win2k machine took 4 seconds. Gareth Davies Willowbrook I.T. Ext. 235 * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA WILL JOIN IN A DOMAIN IN WIN2k Smallbissinessserver???
Original Message - From: FRANCO [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, March 18, 2003 11:27 AM Subject: [Samba] SAMBA WILL JOIN IN A DOMAIN IN WIN2k Small bissinessserver??? Hi, Its possible to join SAMBA in a SMALL BUSSINESS WIN2k? []s Yes. Gareth Davies Willowbrook I.T. Ext. 235 * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] machine accounts
Original Message - From: Operator (SCHMIEDER it-solutions) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, March 17, 2003 3:13 PM Subject: [Samba] machine accounts I got some problems with Samba/Winbind in a WINNT-Domain.How could I get the machine-accounts to my samba-server? Winbind including this feature? How could I activate this? best regards nieloo How to ask questions: http://www.security-forums.com/forum/viewtopic.php?t=249 Gareth Davies Willowbrook I.T. Ext. 235 * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba backup software
-Original Message- From: Rick Segeberg [mailto:[EMAIL PROTECTED] Sent: Thursday, March 06, 2003 4:24 PM To: [EMAIL PROTECTED] Subject: [Samba] samba backup software I'm curious to what people are using for backing up their samba servers. Here's are some specs to consider: - 1TB (yes, that's terabyte) of data - multiple servers backup to one tape drive connected to a server (preferably a linux system) - using an autoloader (in this case, an HP 1/9 LTO system) - need to be able to backup daily changes and/or changes since last full backup Currently I'm using Backup Exec from NetWare. The *nix client has no support to do anything but a full. The archive bit obviously won't work, and backing up based on date doesn't seem to work either (it still does a full). I'm interested in finding a native linux solution since I don't see a lot of point in having to use a Windows server with a *nix client when I'm trying to get away from Windows. If you have suggestions or are using something you are happy with, please respond. Currently, I'm evaluating Novastor's Novanet 8.5. I know there are others that I can eval, I'm just interested in finding out what others are using and happy with. I think you should try out Arkeia, it's a great peice of software, runs as a server on a *nix machine and has heterogenous clients. Gareth Davies Willowbrook I.T. Ext. 235 * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Strange Problem with user disappearing - Winbindd/Samba 2.2.7 - Debian 3.0
I'm having a strange problem which hasn't seemed to have occured before. I have Winbind working fine with shares Samba Version 2.2.7a Machine is Linux Debian 2.4.18-686-smp #1 SMP Sun Apr 14 12:07:19 EST 2002 i686 unknown Every now and then 1 user totally disappears from the mapping meaning he can't access any shares on the machine (the minimum requirement on all shares is @Domain User I verify the disappearance using groups DOMAIN+username and when he's gone it says as expected id: DOMAIN+username: No such user I checked a random bunch of about 5 other users and they came up ok. I tried again about an hour later and I could see his username again. I really don't understand what is happening here and how to troubleshoot this but it is worrying me and if he can 'disappear' I don't see why other users can't in the future. Any ideas of where I should start or possibilities of what is happening are welcome. Regards Shaolin * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] New Debian Packages?
- Original Message - From: Nicki Messerschmidt, Linksystem Muenchen GmbH [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, January 23, 2003 3:03 PM Subject: [Samba] New Debian Packages? Hi there, does anyone know where I can get new samba packages for debian, because woody is at 2.2.3a-12 and this version has definitev a problem with Access 97 databases... *arg* And I'm not able to produce new debian packages myself. Any help is appreciated... Thanks Nicki You can download the 2.2.7a source and compile it quite easily on Debian. I did this and it works beautifully if you just follow the instructions in the guide. I find it better this way anyway as you can choose which switches you want to compile with. Shaolin * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0 + AD + OpenLDAP
- Original Message - From: Barry, Christopher [EMAIL PROTECTED] To: Bradley W. Langhorst [EMAIL PROTECTED]; Ron McKown [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Wednesday, January 22, 2003 4:21 PM Subject: RE: [Samba] Samba 3.0 + AD + OpenLDAP look at www.samsungcontact.com for a great Exchange replacement. -- Christopher Barry Manager of Information Systems InfiniCon Systems http://www.infiniconsys.com office:610.233.ISIS (4747) direct:610.233.4870 cell:267.879.8321 Do you sell it by any chance? I tried it out and thought it was crap :) I found Gordano much better and even Byrani. Other options are also Kroupware, RH-EMS and a few others. This is off topic though and has been discussed before on this list. Regards Shaolin * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Linux clients + NT server
- Original Message - From: akshaysalkar [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, January 21, 2003 9:59 AM Subject: [Samba] Linux clients + NT server I have a NT Server, acting as my PDC I want all my clients to be Linux workstations connected to the NT Server. Is this possible?? Yes any guidelines would be helpfully. RTFM. all are available at samba.org excellent they are too. Also man smbd man nmbd man winbindd man wbinfo Please post when you have a clue what you are trying to acheive and how you are going to do it and you have a specific problem. Thanks. Shaolin P.S posting the same thing 4 times isn't going to get you in anyones good books. * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba ON NT?
- Original Message - From: Brandon Bergren [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 17, 2003 3:58 PM Subject: [Samba] Samba ON NT? Has anyone tried to compile Samba on Windows 2000? I know it's a weird idea, but I don't like the fact that W2K shares c$, d$, RPC$, etc. With Cygwin, I didn't get past configure, it complained that locking was unavaliable and bombed out. Is it technically feasable to get Samba running on Cygwin? (I disabled ServerCo in my Services already :} ) Thanks! --Brandon Bergren (Please CC me, I'm not on the list.) Why not just learn how to use NT properly.. http://support.microsoft.com/default.aspx?scid=kb;en-us;318751 And set RestrictAnonymous = 2 Shaolin * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] problem printing win2k+samba (redhat) + lprng
- Original Message - From: Dieter LeName [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, January 16, 2003 2:04 PM Subject: [Samba] problem printing win2k+samba (redhat) + lprng hi I got a big problem with the printing system in our pc-lab, help VERY much appreciated :-)) We got Win2k clients that print via our server (redhat) to the printer (HP Laserjet 8150DN). In most cases one page (our at most a few pages) are printed with no problem, then we have an error on the printer display (40 EIO 1 BAD TRANSMISSION). Then the printer ejects an empty page and a page with a error (error: timeout, stack ...) and stops. There is NO problem if printing is done from the Win2k clients to the printer directy, our directly from the server. But I need printing from the client via the server, for accounting and billing of the printouts. The system: Clients: Win2k SP2, current version of HP printer driver Printer: HP Laserjet 8150DN Server: Redhat Linux 7.2, LPRng-3.7.4-28, samba-2.2.1a-4. Does anybody know about this kind of problem ?? Cheers wolkov - Hi Wolkov this is not really a SAMBA problem as can be seen by a quick Google search: http://www.google.co.uk/search?q=40+EIO+1+BAD+TRANSMISSIONie=UTF-8oe=UTF-8 hl=enbtnG=Google+Searchmeta= http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x514a1aca6930d611abd50090277 a778c,00.html Solution: http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xc3a33a7b3682d611abdb0090277 a778c,00.html Remember Google is your friend :) Shaolin * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How can I restart samba?
Jamie Risk [EMAIL PROTECTED] wrote in message avupuf$6h6$[EMAIL PROTECTED]">news:avupuf$6h6$[EMAIL PROTECTED]... I'm fiddling with the various configuration files to try and get Samba working - after making changes to various files I end up rebooting [shudder] the box to get the settings to take. I invoke the smbd, and nmbd binaries from a root bash command line, each with the -D option. I can't seem to send a kill SIGHUP command to the PID I read from a ps -ex command because I get the message bash: kill: SIGHUP: no such pid. Can someone give me a time saving tip? - Jamie ps aux | grep smb kill -9 PID ps aux | grep nmb kill -9 PID Or just make a script for stop/start/restart :) Shaolin * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] (no subject)
- Original Message - From: pondiboy - [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 03, 2003 12:10 PM Subject: [Samba] (no subject) Hi there I have resently shifted from a windows server to a linux server (Mandrake 9.0). I have configured the /etc/samba/smb.conf file and I have the server shown in the network neibourhood of my win clients. But I am not able to login the server. Could anyone please help me?? Thanks Pondiboy Sure you need to make some changes to your /etc/samba/smb.conf and restart smbd and nmbd and then everything should be fine. Thanks. Shaolin P.S. How to ask questions: http://www.security-forums.com/forum/viewtopic.php?t=249 Fine Manuals: http://us1.samba.org/samba/docs/ * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] (no subject)
- Original Message - From: Chris Candillo [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 23, 2002 7:05 PM Subject: [Samba] (no subject) Hello. I am running Samba version 2.2.5 on Redhat Linux 8.0, kernel version 2.4.18-14. Encrypted passwords = yes; security = user; wins server =169.254.1.2; netbios name = SambaServer. My client is Windows 2000, service pack 3. I am only able to browse my samba shares only if I use the ip address of my samba server. For example on Winddows 2000 I run: NET USE \\169.254.1.1, I can see the shares, I am also able to map drives, all is good. If I run NET USE \\SambaServer, using the netbios name, I get 'Access Denied'. snip *sigh* 2 minutes later after a quick visit to Google.. My setup was failing with this command: H:\Documents and Settings\Dan Langillenet view \\xeon System error 5 has occurred. Access is denied. H:\Documents and Settings\Dan Langille After doing the search mentioned in the previous section, I added this to the [Globals] section of my smb.conf file. nt acl support = no Then I restarted samba: /usr/local/etc/rc.d/samba.sh stop /usr/local/etc/rc.d/samba.sh start After adding that item, I was successful in that test: H:\Documents and Settings\Dan Langillenet view \\xeon Shared resources at \\xeon Samba 2.2.6pre2 Share name Type Used as Comment --- public Disk A place to store stuff The command completed successfully. H:\Documents and Settings\Dan Langille That looks much better Shaolin * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: http://localhost:901
Original Message - From: root [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, December 23, 2002 12:26 PM Subject: http://localhost:901 dear dan i cannot load the swatin http://localhost:901 i have give error : The connection was refused when attempting to contact localhost:901 Read this: http://www.security-forums.com/forum/viewtopic.php?t=249 Then ask again when you have a clue. Thanks. Shaolin * This email has been checked by the altohiway e-Sweeper Service *
Re: [Samba] Winbind issues
Original Message - From: Richard Coyle [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 20, 2002 3:06 PM Subject: [Samba] Winbind issues I have RH 8.0, and Samba 2.2.5. I have followed the Man pages and setup Samba,Winbind, and edited PAM settings. I am having some problems I was hoping you could help with. Here is some basic testing info I have performed based on the questions you seem to ask. I have joined the domain successfully. (smbpasswd -j Domain -r PDC - U administrator) I can create a share, and browse if from Network Neighborhood. ** wbinfo - t Secret is Good wbinfo -n DOMAINUSERNAME gives me the users sid wbinfo -m no results wbinfo -a domain+user%password Plaintext password authentication succeeded error code was NT_STATUS_OK (0X0) snip Check that you have copied /sambapackage/source/nsswitch/pam_winbind.so into /lib/security/pam_winbind.so Make sure you have copied /sambapackate/source/nsswitch/libnss_winbind.so to /lib/libnss_winbind.so and done ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2 Make sure you have added the correct entries to nsswitch.conf Next do wbinfo -A Administrator%password (please not this IS DIFFERENT from wbinfo -a) All should be well. Regards Shaolin * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Annoying Printer problem...Samba 2.2.7a on Debian 3.0 with lprng
Hi all, Have got Winbind working again successfully on another box, but this time the printer won't work, it worked fine last time. The printer installs fine, and it lets me print to it, but nothing comes out on the printer, no sign of anything being sent to it. I think it's a permissions problem or something...but I've not much clue when it comes to printing on *nix how it actually works. /etc/printcap: LJ4500N:\ :sd=/var/spool/lpd/lj4500n:\ :mx#0:\ :rm=192.168.2.20:\ :done_jobs=0:\ :rp=:\ :sh: Relevant lines from smb.conf: printer admin = root, @DOMAIN+IT, @lpd printing = lprng lpq command = /usr/bin/lpq -P %p lprm command = /usr/bin/lprm -P %p %j lppause command = /usr/sbin/lpc hold %p %j lpresume command = /usr/sbin/lpc release %p %j queuepause command = /usr/sbin/lpc stop %p queueresume command = /usr/sbin/lpc start %p # HP Laserjet 4500N Share. [lj4500n] comment = HP LaserJet 4500N path = /var/spool/samba read only = No # guest ok = Yes printable = Yes print command = lpr -P lj4500n -r %s -h; rm %s printer name = lj4500n oplocks = No share modes = No admin users = @Domain+IT, valid users = @Domain+Domain Users create mask = 770 # Hidden printer drivers share. [print$] path = /usr/printers admin users = root @lp, @Domain+IT write list = root @lp, @Domain+IT create mask = 0755 guest ok = Yes The drivers never seem to load from print$ either. I can install the printer, but can't for the life of me get anything to print, can't find any relevant log messages in /var/log/lpd.* or anywhere else either. Any suggestions as always much appreciated. Shaolin * This email has been checked by the altohiway e-Sweeper Service * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Integrating a samba server in a samba controlled domain
Have you correctly configured Winbind? If you haven't the second machine won't be able to authenticate domain users against the first. Read the winbind section in the how-to. Gareth Davies Willowbrook I.T. Ext. 235 - Original Message - From: Gerd-Christian Michalke [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 18, 2002 9:31 AM Subject: [Samba] Integrating a samba server in a samba controlled domain Hi ! I have followed the Samba-Howto, but I still have some problems. Our network is composed of Win2K stations and two samba servers (2.2.5) running under SuSE Linux 8.1. HIROSHIMAN is configured as PDC (domaine CHERYLNET) and everything is running fine, from login to share and printer access. VLOUCHI is a second file server and its workgroup (thus domain) is also CHERYLNET ; security is set to domain and password server to HIROSHIMAN. The goal is that VLOUCHI shares the same userbase than HIROSHIMAN After having logged on on the W2K station, when I go to HIROSHIMAN, everything works fine. But when I first try to go to the VLOUCHI server, I am asked to give in a login/pwd. I cannot connect to the server even if a provide a pair which I know to exist on the PDC. I also have create a Linux account for my test user on VLOUCHI, but this does not help neither. Any help would be greatly appreciated Kind regards, Gerd C. Michalke -- -- [EMAIL PROTECTED]\\_// (. .) Powered by SuSE Linux 8.1 ---oOOo-oOOo-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] slowness when using roaming profiles
- Original Message - From: Jacob Smith [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, December 17, 2002 4:23 PM Subject: RE: [Samba] slowness when using roaming profiles make sure that your users know that folders like there Desktop get transferred every time they log on and off. So if they have large files or folders on there desktop it will severely slow things down. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, December 17, 2002 11:18 AM To: [EMAIL PROTECTED] Subject: [Samba] slowness when using roaming profiles I am on a rh 7.2 machinr running samba. My clients are windows 2000 and whn using locl profiles I experience quick log-ons and quicj log-offs. Whwn I flag the client for roaming profiles, it seems to take many minutes snip I had this problem before and it was down to Temporary Internet Files and E-mail. Make sure E-mail is stored on a network mapped drive, not in the profile, run a vbs that removes anything from people's desktops and puts it in their home directory. Outlook Express was our main culprit, every time an attachment is viewed in OE it's stored in Temp Inet files...so that gets huge fast. The profile gets copied to and fro every time a user logs on or off so make sure they are as small as possible. In the end we implemented a quota so if someones profile went over 10MB they couldn't log off, so they had to sort it out before they left. P.S. this is not a SAMBA related issue :) HTH Shaolin .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] slowness when using roaming profiles
- Original Message - From: Jacob Smith [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, December 17, 2002 4:23 PM Subject: RE: [Samba] slowness when using roaming profiles make sure that your users know that folders like there Desktop get transferred every time they log on and off. So if they have large files or folders on there desktop it will severely slow things down. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, December 17, 2002 11:18 AM To: [EMAIL PROTECTED] Subject: [Samba] slowness when using roaming profiles I am on a rh 7.2 machinr running samba. My clients are windows 2000 and whn using locl profiles I experience quick log-ons and quicj log-offs. Whwn I flag the client for roaming profiles, it seems to take many minutes snip I had this problem before and it was down to Temporary Internet Files and E-mail. Make sure E-mail is stored on a network mapped drive, not in the profile, run a vbs that removes anything from people's desktops and puts it in their home directory. Outlook Express was our main culprit, every time an attachment is viewed in OE it's stored in Temp Inet files...so that gets huge fast. The profile gets copied to and fro every time a user logs on or off so make sure they are as small as possible. In the end we implemented a quota so if someones profile went over 10MB they couldn't log off, so they had to sort it out before they left. P.S. this is not a SAMBA related issue :) HTH Shaolin .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Access to Everyone
- Original Message - From: Craig Wright [EMAIL PROTECTED] To: Samba Group [EMAIL PROTECTED] Sent: Friday, December 13, 2002 4:22 PM Subject: [Samba] Access to Everyone Hello, I'm new to this group so please accept my apologies for any gaffs I might make. My problem is this: I am running Samba 2.23 on RedHat 7.3. Using various unix permissions, users groups smbusers / smbpasswords I am able to control who see what shares. The Security in samba is set to users. and passwords are encrypted. What I would like to do is have one particular share RO to everybody but without having to setup everyone as unix smbusers. I know if I changed to security=share I can do it but this causes me problems elsewhere on other shares because of the continuing need to input a username password each time you connect. The PC's that need to see the share are NT4 workstations that are not on a NT domain (we use Novell). I guess in simple terms I need a public RO share without any restrictions on who connects, whilst maintaining the restrictions on the other shares. Any Ideas? Craig -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba Create a new user e.g reader And use the force user = reader option on the share. With chmod you should be able to set it so that this user can only read, not write or delete files in this share. This just means everyone that connects to the share will connect as this user. I'm sure there are more elegant ways to do this, but this is how I would do it :) Shaolin -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] What project should I use ?
- Original Message - From: Chris Croswhite [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Thursday, December 12, 2002 12:06 AM Subject: RE: [Samba] What project should I use ? Have you looked at Samsung Connect (HP sold off OpenMail to them). It is a groupware product that can replce exchange in that it supports outlook and has several clients that run on KDE, Mac OSX, and web. I have used OpenMail and was supprised by the speed. As a follow on to this, I've reviewed all of the Exchange replacements recently. The worst I have to say really is SuSe mail server( http://www.suse.com/us/business/products/suse_business/email_server/ ) but it looks like it has some promise, SCO's Volution (VMS - http://www.caldera.com/products/volutionmsg/ ) isn't far behind and is quite expensive (and looks like it isn't about to change). Samsung Contact isn't too bad, but for the features it provides and the fact that it's just a follow on from HP's Openmail, they shouldn't really charge for it at all. The best of the lot really is GMS (Gordano Messaging Suite - http://www.ntmail.co.uk/Home/Case_Studies.htm ) which unlike the others has been built from scratch and is well worth paying for. There are some promising looking products in the OSS community aswell (RM-EMS - http://sourceforge.net/projects/rhems/ , Kroupware - http://kroupware.kde.org/ and Courier - http://www.courier-mta.org/) It can also be acheived using the freely available singular parts (most of the commercial projects are based on free components with a few scripts to tie them together and a web based management interface). If you want to do it this way I'd suggest, OpenLDAP, Cyrus-IMAP and Exim. HTH Shaolin Simo Sorce said: Forget it! It's not a real exchange replacement, just a bounce of free software tied together and a few script/windows programs to migrate out profiles no MAPI support afaik Simo. On Wed, 2002-12-11 at 23:43, Sykora, Dale wrote: Kevin/Seth, You might want to look at Suse Openexchange Server. I haven't used it, but it looks like it was designed to replace MS Exchange. http://www.suse.com/us/business/products/suse_business/openexchange/index.ht ml Dale -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: nt-samba backup suggestions
- Original Message - From: Dragan Krnic [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Wednesday, December 11, 2002 7:01 AM Subject: [Samba] Re: nt-samba backup suggestions My big concern right now is if my gameplan is reasonable or if I should consider another approach. Dale, your gameplan is ok, it's the execution thereof that counts. If you're p2p-ing to backup clients, why not do the right thing and use GigaBit cards. They're just a tad more expensive than the fast ethers (it's the switching stuff that makes it expensive). A backup server with humongous buffering disks is a good idea, if you need that kind of aggressive backup power. Once you're done, you may sell it to others as appliance. The cost of the fibre optics is usually what is prohibitive when using GB NIC's. More than a couple of metres it starts getting very expensive.. _ Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year. http://login.mail.lycos.com/brandPage.shtml?pageId=plusref=lmtplus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] gihas
-- Original Message - From: gihas [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 11, 2002 11:48 AM Subject: [Samba] gihas Sir, I downloaded samba-latest.tar.gz. I want to install samba in my machine . After i down loaded both rpm (samba-2.2.7-1.src.rpm,samba-2.2.7.1.i386.rpm) files extracted.This much i done. What is the next step to run samba. Please sujust some solution. Regards gihas. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba http://samba.mirror.ac.uk/samba/docs/ http://samba.mirror.ac.uk/samba/docs/Samba-HOWTO-Collection.html http://hr.uoregon.edu/davidrl/samba.html http://www.google.com/search?hl=enie=UTF-8oe=UTF-8q=samba+tutorial Shaolin -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Installed New version of Samba for HPUX 2.2.7 - Winbind doesn't w ork
Original Message - From: Jennifer Fountain [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 10, 2002 4:08 PM Subject: [Samba] Installed New version of Samba for HPUX 2.2.7 - Winbind doesn't w ork Errors: could not check secret 'ping' to winbindd failed winbind is in my nsswitch any ideas? Thanks Nope sorry, mis-placed my crystal ball today :) Shaolin -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Help to a wet-behind-the-ears Linux newbie
- Original Message - From: Andrew Fellingham [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 10, 2002 4:46 PM Subject: [Samba] Help to a wet-behind-the-ears Linux newbie Hi :-) I am struggling through a RH 8.0 install on a machine we are looking to replace our Netware server. I got tapped to do this as I support the snip Try it like this first, I'm not familiar with SWAT, I prefer to do it my own way :) Can you ping the machine from one of the workstations? ping flashsrv or ping ip address the shares are examples of mine, you should easily be able to adapt them for your own use. Good luck. This simple config should get you going: [global] ## ## Basic Server Settings ## # workgroup = NT-Domain-Name or Workgroup-Name, eg: REDHAT4 workgroup = YourDomainOrWorkgroup netbiosname = FLASHSRV # server string is the equivalent of the NT Description field server string = FLASHSRV Samba File Store # This option is important for security. hosts allow = 172.17.2.3/255.255.0.0 127.0.0.1 # Uncomment this if you want a guest account, you must add this to /etc/passwd # otherwise the user nobody is used ; guest account = pcguest # this tells Samba to use a separate log file for each machine # that connects log file = /usr/local/samba/var/log.%m # How much information do you want to see in the logs? # default is only to log critical messages log level = 5 # Put a capping on the size of the log files (in Kb). max log size = 50 # Security mode. security = user # Most people will find that this option gives better performance. socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 ## ## Network Browsing ## # set local master to no if you don't want Samba to become a master # browser on your network. Otherwise the normal election rules apply local master = no ## ## WINS Name Resolution ## # Windows Internet Name Serving Support Section: # WINS Support - Tells the NMBD component of Samba to enable it's WINS Server wins support = no # WINS Server - Tells the NMBD components of Samba to be a WINS Client # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both wins server = WinsServerIPIfYouHaveOne # WINS Proxy - Tells Samba to answer name resolution queries on # behalf of a non WINS capable client, for this to work there must be # at least one WINS Server on the network. The default is NO. ; wins proxy = yes # DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names # via DNS nslookups. dns proxy = no ## ## Passwords Authentication ## # You may wish to use password encryption. encrypt passwords = yes # Should smbd obey the session and account lines in /etc/pam.d/samba ? # only available if --with-pam was used at compile time obey pam restrictions = yes # When using encrypted passwords, Samba can synchronize the local # UNIX password as well. You will also need the passwd chat parameters ; unix password sync = yes # how should smbd talk to the local system when changing a UNIX # password? See smb.conf(5) for details ; passwd chat = *new*password* %n\n *new*password* %n\n map to guest = bad user # This is only available if you compiled Samba to include --with-pam # Use PAM for changing the password ; pam password change = yes ## ## Printing ## printer admin = root, @usergroups, @lpd printing = lprng lpq command = /usr/bin/lpq -P %p lprm command = /usr/bin/lprm -P %p %j lppause command = /usr/sbin/lpc hold %p %j lpresume command = /usr/sbin/lpc release %p %j queuepause command = /usr/sbin/lpc stop %p queueresume command = /usr/sbin/lpc start %p oplocks = no kernel oplocks = no level2 oplocks = no # Share Definitions == # HP Laserjet 4500N Share. [lj4500n] comment = HP LaserJet 4500N path = /var/spool/samba read only = No guest ok = Yes printable = Yes print command = lpr -P lj4500n -r %s -h; rm %s printer name = lj4500n oplocks = No share modes = No admin users = @ITADMIN valid users = @EveryoneInMyDomain # Hidden printer drivers share. [print$] path = /usr/printers admin users = root @lp, @ITADMIN write list = root @lp, @ITADMIN create mask = 0755 guest ok = Yes # Home Directory Shares [homes] comment = Home Directories browseable = no writable= yes valid users = %S # This one is useful for people to share files [Temp] comment = Temporary File Space path= /usr/temp read only = no writable= yes public = yes create mask = 0700 # IT Users Share [IT] comment = IT Staff Only path= /usr/company/it read only = no writable= yes create mask = 0777 directory mask = 0777 security mask =
Re: NetBEUI as main protocol
- Original Message - From: Jim Morris [EMAIL PROTECTED] To: John E. Malmberg [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, December 10, 2002 4:24 AM Subject: Re: NetBEUI as main protocol On Monday, December 9, 2002, at 08:26 PM, John E. Malmberg wrote: The only advantage that I can see to running NetBeui is that a network recovery disk for most PCs using MS-DOS can fit on a high density snip Not sure what this thread is about exactly but if I catch the drift correctly you may well find this useful: http://www.nu2.nu/bootdisk/network/ Shaolin
Re: [Samba] Has anybody got ACL to work w/ debian, winbindd in a w2k mixed domain?
- Original Message - From: Jacob Malmberg [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, December 08, 2002 11:06 PM Subject: [Samba] Has anybody got ACL to work w/ debian, winbindd in a w2k mixed domain? Im seriously thinking about changing dist. due to acl won't work as they should with debian woody. Ppl also tell me this is because of some bug in debian. So, as the subject says, anybody got acl to work w/ debian 3, winbindd in a domain? If not, hello redhat.. Jacob Nope been trying for quite a while, got winbindd to work fine on it's own but no cigar with ACL's Can't even get Debian to run SMP properly.. I have got the kernel running but it still only shows 1 CPU, redhat installed SMP itself and it works.. Might have to give up on Woody :( Shaolin -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] help
- Original Message - From: House, Ian [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 09, 2002 8:54 AM Subject: [Samba] help Please unsubscribe me from this newsletter Thank you -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 08 December 2002 17:00 To: [EMAIL PROTECTED] Subject: samba digest, Vol 1 #1956 - 1 msg Send samba mailing list submissions to [EMAIL PROTECTED] To subscribe or unsubscribe via the World Wide Web, visit http://lists.samba.org/mailman/listinfo/samba or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] This is NOT [EMAIL PROTECTED] Or simply go to.. http://lists.samba.org/mailman/listinfo/samba Regards Shaolin -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] HELP!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! EMERGENCY!!!!!!!!!!!!!!!!!!!!!!!!!!!!
After meditating on this situation I don't believe it's a keyboard issue, it's a PBKAC issue. Problem between keyboard and chair.. Gareth Davies Willowbrook I.T. Ext. 235 - Original Message - From: Irving Carrion [EMAIL PROTECTED] To: 'Klaus Umbach' [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, December 03, 2002 4:12 PM Subject: RE: [Samba] HELP! EMERGENCY Thank you for your productive response. I had a feeling my problems could be related to my keyboard... Is there a keyboard patch I can download? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Klaus Umbach Sent: Tuesday, December 03, 2002 10:54 AM To: [EMAIL PROTECTED] Subject: Re: [Samba] HELP! EMERGENCY On Tue, Dec 03, 2002 at 10:36:54AM -0500, Irving Carrion wrote: Sorry to be so dramatic on the subject line but things are falling apart here... Yesterday we upgraded Samba to version 2.999+3.0.alpha20-4 and this morning NO-ONE was able to log in to the Samba PDC. I upgraded from 20-3. Nothing has changed in the smb.conf file. downgrade to 20-3 and repair your keyboard, your !-key must be damaged. Klaus We are using the unstable version of Samba because this is the only version of SAMBA that works with our SNAP server. (Damn SNAP!. We should have built our own fileserver!!! ;( ) I have a debug 100 log ready for anyone who can help me. Would really APPRECIATE ANY HELP anyone out there can give me! Thanks! IRV -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Klaus Umbach | RapidSolution Software AG Administration | [EMAIL PROTECTED] http://www.rapidsolution.de -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Share Concurrency
- Original Message - From: Paul Ketelaar [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, December 01, 2002 9:55 PM Subject: [Samba] Share Concurrency Samba Gurus, How can the number of concurrent connections to a Samba share be limited. Say for example you have an article of software for which you only have 5 licences. When all five seats are used and 6th connection is attempted the user cannot connect. Regards, Paul Ketelaar Paul Ketelaar, Assoc. Dip. Eng. (Elec) [EMAIL PROTECTED] http://www.ketelaar.com.au http://www.wlansolutions.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba Perhaps using PAM... If you force a username for that share to say LICENCE then using PAM limit concurrent usage of that username to 5 it should solve the problem Regards Shaolin .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Configuration
- Original Message - From: Achim Brand [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, November 29, 2002 1:10 PM Subject: [Samba] Configuration Hello, I need help on configuring using SAMBA in a W2k - Domain. Can anybody send me a smb.conf-file? And can anybody explain me how can i set file-/folder-access-rights through my PDC / Domain? Using Winbind, chmod, chown and ACL's (if required). Can I use the Domain - Users to set the rights or have I to use the UNIX - Users to set the rights for my files on the SAMBA-Server? Yes you can use Domain user rights see below. I hope anybody can help me :-) (and can understand what i mean)!! It's xtreme urgent! Regards, Achim Brand - Germany - -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba Hi Achim Please read the following: http://www.security-forums.com/forum/viewtopic.php?t=249 Follow this through all the way: http://samba.mirror.ac.uk/samba/docs/Samba-HOWTO-Collection.html Pay special attention to the winbind sections. You also need to look into ACL implementation on your filesystem. Also check out man winbindd and man smb.conf That should give you enough to chew on. HTH Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem authenticating against a W2K server
- Original Message - From: Ingimar Robertsson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, November 28, 2002 10:00 AM Subject: [Samba] Problem authenticating against a W2K server Hi there. I'm having a problem letting a Samba server (MYSAMBA) authenticate users (using security = domain and a password server = MYPDC) against a Windows 2000 PDC (MYPDC). The Windows 2000 machine seems (I'm not 100% snip Add the machine to the domain on the Win2k PDC using AD. Then smbpasswd -j DOMAINNAME -r PDCIP -U Administrator%password Then wbinfo -A Administrator%password Then it should work fine. I'm kinda getting tired of this, can't we redo the docs for Winbind LOL Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Another Samba+ACLs thread
- Original Message - From: Andrew Furey [EMAIL PROTECTED] To: David Pullman [EMAIL PROTECTED] Cc: Anthony J. Breeds-Taurima [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Wednesday, November 27, 2002 4:08 AM Subject: Re: [Samba] Another Samba+ACLs thread (recipient list getting longer...) snip andrewfu = Andrew Furey and I set the ACL on a file with setfacl -m andrewfu:rwx myfile Now, the permission via the ACL does work correctly (W2k user Andrew Furey can access the file, others can't), but in the W2k ACL list the user is listed as andrewfu (SMBSERVERNAME\andrewfu) snip Shouldn't you be setting setfacl -m DOMAIN+andrewfu:rwx myfile ? Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Annoying winbind problem solved
Title: Message You don't need to mess with PAM unless you want people to log on locally using their Domain l/p. If you do you need to alter system-auth. Shaolin - IT Systems WB Ltd..: http://www.security-forums.com :. - Original Message - From: Peter S Scudamore To: [EMAIL PROTECTED] Sent: Tuesday, November 26, 2002 8:06 AM Subject: [Samba] Annoying winbind problem solved I have been on the web for hours reading email postings about WINDBIND. Here is the scenario. Samba 2.27 on Redhat 8, installed via the redhat RPMs. the first interesting note was that there is no samba-winbind rpm. It is a part of the samba-common.rpm in redhat. I have been using Samba as a file server for quite some time. And 100% of my issues with it stem from permission problems. So I heard about winbind. And it is even more poorly documented than Samba. So I checked the resources on samba.org, I had the libraries in the right place in /lib. I had previously rejoined the domain using #smbpasswd -j DOMAIN -r PDC -U NTDOMAINADMINACCOUNT I got the successfully joined the domain message. I checked the active directory on the win2k domain controller and verified that the computer account had been created...enter winbind: I launch the winbindd daemon. I perform wbinfo -t and get "the secret is good". I perform wbinfo -u and get 0x0c0022 or something like that. wbinfo -g yields the same results. After running the winbindd daemon in various levels of debug all day and searching the web for the results, I found the answer! performing the steps outlined in Tim Potter's email on the win2k domain controller resolves this issue. I am still unsure about which files to edit in /etc/pam.d The howto says to edit /etc/pam.d/* There are scores of files in there! Surely not. -Original Message-From: Tim Potter [mailto:[EMAIL PROTECTED]]Sent: 27 October 2001 02:29To: [EMAIL PROTECTED]Cc: Roberto Sebastiano; Marc Anthony Pierre BarretteSubject: using winbind with Windows 2000 native modeI've just tracked down a problem running winbind against aWindows 2000 server running in native mode. Microsoft has addeda security restriction which disallows anonymous access to userlists and groups.To fix this run the following from a command prompt and thenreboot (yes the reboot is required - sheesh):net localgroup "Pre-Windows 2000 Compatible Access" everyone /addI couldn't figure out how to do this from the Active DirectoryUsers and Groups MMC thingy. It didn't like the group Everyonefor some reason.Tim. Peter S Scudamore CCNP, CCDP, MCP ATM/Fr Network Design TOUCHAMERICA off 720.493.2660 mbl 303.358.8760 efax 720.294.2363 [EMAIL PROTECTED]
Re: [Samba] hiding and vetoing files (for Samba 2.2.2 Windows Explorer)
- Original Message - From: Frank Matthieß [EMAIL PROTECTED] To: Samba Lists [EMAIL PROTECTED] Cc: Darin DeCounter [EMAIL PROTECTED] Sent: Friday, November 22, 2002 8:25 AM Subject: Re: [Samba] hiding and vetoing files (for Samba 2.2.2 Windows Explorer) On Thu, Nov 21, 2002 at 12:27:59PM -0800, Darin DeCounter wrote: Hi Frank, When our users sign onto the network first thing in the morning, they're authenticated through our NT-PDC. Once authenticated, their login script maps all 3 shares (via the net use command). They need these shares to remain mapped so they can use their application to do their work...so they have to be valid users. We just need to find a way to keep them from seeing the shares and/or their content when in Windows Explorer.Browsable is set to no for all shares and we've also tried with without hide/veto file option with no success. Map the shares to drives with net use, then using poledit or GPO limit the drive viewing ability in explorer. Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind - error looking up domain users/groups
Run wbinfo -A Administrator%password Then try again. Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. - Original Message - From: Wilson A. Galafassi Jr. [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Friday, November 22, 2002 1:21 PM Subject: [Samba] winbind - error looking up domain users/groups Hello all! I have on my network a PDC running w2k with active directory. On this machine i have: nic 1: internet (valid ip) nic 2: hub 1 - 10.1.1.1 nic 2: hub 2 - 11.1.1.1 my wins server is running in 10.1.1.1 on pdc. i applied SP3 and all windows updates corrections. on my linux machine i have: kernel: 2.4.19 - samba 2.2.7 - squid 2.5S1 nic 1: internet (valid ip) nic 2: hub 1 - 192.168.0.100 nic 2: PDC network - 10.1.1.100 For tests only i have setup another machine with w2k and active directory and on this machine winbind and wbinfo -t/-g/-u run's correctly and i have attached the logs of nmbd and winbindd when running with this machine named log.nmbd.ok and log.winbindd.ok. in this machine is everything OK!!! In my pdc i sucefully join on domain running smbpasswd -j domain. The command wbinfo -t/-p works fine. but when i run wbinfo -u/-g result in error looking up domain users/groups. the autentication with wbinfo -a user%passw works fine. i attached the logs when running nmbd and winbindd in this machine (PDC oficial) named log.winbindd.error and log.nmbd.error. I just use samba/winbind to provide ntlm autentication to squid using w2k users/groups database. For your reference i attached smb.conf and lmhosts files. What is the problem on configuration of my W2k machine Any helpme OBS: sory, but my english is bad. :) Thanks Wilson Galafassi licq: 77032308 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Please no HTML email.
- Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, November 19, 2002 10:47 PM Subject: Please no HTML email. Hi all, FYI, just a warning/note. I read my email on mutt from samba.org. When I get an html formatted email I just hit 'D' (delete) without looking at the contents. I think many other Samba Team members do the same. If you send an urgent plea for help and it's html formatted then I doubt anyone in the Samba Team will ever see it. html formatted email is 99.9% spam, and gets treated as such. Just thought that people might like to know that Jeremy. I've told hundreds of people this, is there any way you can put it in the sign up mail or on the mailing list page or something or just filter all HTML mail out of the list as it really bugs me (and I presume most other people) and it would also nullify the spam issues that seem to be getting worse. Regards Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind is my enemy :) hehehe
- Original Message - From: Wilson A. Galafassi Jr. [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Thursday, November 21, 2002 1:07 PM Subject: [Samba] winbind is my enemy :) hehehe Hello. when i type smbpasswd -j centroadm fetch_domain_sid: machine PMF rejected the tconX on the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. Failed to get domain SID. Unable to join domain CENTROADM. i have 3 nic on linux box an 3 on w2k pdc. what is the problem??? thanks WILSON This is my smb.conf snip Have you added the machine to the PDC? When you've done that, then use smbpasswd -j DOMAINNAME -r PDCIP -U Administrator%password Then wbinfo -A Administrator%password Then wbinfo -t/-u/-g etc. Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Please no HTML email.
- Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, November 19, 2002 10:47 PM Subject: Please no HTML email. Hi all, FYI, just a warning/note. I read my email on mutt from samba.org. When I get an html formatted email I just hit 'D' (delete) without looking at the contents. I think many other Samba Team members do the same. If you send an urgent plea for help and it's html formatted then I doubt anyone in the Samba Team will ever see it. html formatted email is 99.9% spam, and gets treated as such. Just thought that people might like to know that Jeremy. I've told hundreds of people this, is there any way you can put it in the sign up mail or on the mailing list page or something or just filter all HTML mail out of the list as it really bugs me (and I presume most other people) and it would also nullify the spam issues that seem to be getting worse. Regards Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :.
Re: [Samba] concurrent accesses to the same file
- Original Message - From: Josep Blanes [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, November 19, 2002 11:57 AM Subject: [Samba] concurrent accesses to the same file Hi all, I am experiencing some problems with read-only samba shares when more than one user is accessing a given file at the same time; the client machines are all Windows 2000 Professional. That is, for an instance, two users are using the same software simultaneously, and at the same time, they try to open a data file that is stored on a network drive (the samba share). They click on open file at the same time, but this operation fails. (locking problems). Tried to put oplocks off (oplocks and level2 oplocks), turned them on again, etc... but none of the combinations worked. The same test taking a W2000 Server for storing the network drive works perfectly, with the software application opening the same file on a lot of client machines and not complaining at all. And I think this problem is not related to the new Microsoft transport protocol (Direct Host, port 445). (forcing the client machines connect via Netbios instead of Direct Host also works with no problems). If anyone knows what can be wrong, please send me a note. Thanks in advance. Have you tried veto oplocks? Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] help on kinit
Yes boss! Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. - Original Message - From: Mike Ely [EMAIL PROTECTED] To: Gareth Davies [EMAIL PROTECTED]; prerit [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Thursday, November 14, 2002 4:59 PM Subject: Re: [Samba] help on kinit Gareth, Thanks for answering him. Be less rude about it, or keep your trap shut. -- Mike Ely Computer Support Specialist Phoenix-Talent School District #4 Talent, OR On Thursday 14 November 2002 02:27 am, Gareth Davies wrote: - Original Message - From: prerit To: [EMAIL PROTECTED] Sent: Thursday, November 14, 2002 6:05 AM Subject: [Samba] help on kinit Hello , I am trying to connect linux 7.2 client with the Windows KDC using kinit command . I am getting error line. kinit(v5): Clock skew too great while getting initial credentials Can you reply me what went wrong. Thanks and regards, Prerit. FFS Have you even LOOKED for the answer yourself? Google...2 seconds later.. Time Synchronization In order for Kerberos to work properly, your machine and the Kerberos servers time need to be within 5 minutes of each other. If they are too far off you may see a message like the following: kinit: Clock skew too great in KDC reply while getting initial credentials If this is a problem, you can log into an NCSA UNIX system (such as modi4.ncsa.uiuc.edu) and run the date command to get the time. Use the date command to set the system clock on your Unix system to the same time. Note: On Unix systems, you need to have root permissions in order to set the time. PS this has NOTHING to do with SAMBA. Please only post to this group if.. a) You have thouroughly RTFM and all associated docs b) You have Googled until your fingers bled c) You have tried to solve the problem with a complex layout of monkeys in tubes. And you still haven't found your answer. HAND Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. --- [This E-mail scanned for viruses by Declude Virus] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Winbindd not listing users/groups
Original Message - From: Sean Patrick Ingles To: [EMAIL PROTECTED] Sent: Thursday, October 31, 2002 2:43 PM Subject: [Samba] Winbindd not listing users/groups Greetings from NY! I am running SaMBa version 2.2.6 compiled from source on a RedHat 7.3 (Linux tux.#.net 2.4.19 #1 Fri Oct 25 15:39:52 EDT 2002 i686 unknown) box. I start smbd and nmbd as I usually do. Then I start winbindd I verified that they are running. I run : smbpasswd -j DOMAIN -r Windows2kDomainController -U Administrator Password: Joined domain DOMAIN. Ok, so I'm in the domain Then I run: [root@tux src]# wbinfo -t Secret is good Even better, my secret is good! Then I try and list users/groups: [root@tux src]# wbinfo -u Error looking up domain users [root@tux src]# wbinfo -g Error looking up domain groups wbinfo -A Administrator%password Please lose the HTML Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Winbind!
Have you done wbinfo -A Administrator%password? Shaolin - IT Systems WB Ltd..: http://www.security-forums.com :. - Original Message - From: Jennifer Crusade To: [EMAIL PROTECTED] Sent: Monday, October 28, 2002 11:33 PM Subject: [Samba] Winbind! Hello, I amrunning Red Hat 7.3 Samba 2.26 and winbind. I have been able to join the domain and test all of the followingwith these commands. All works great. winbind -u winbind -g getent passwd getent group But when I set up a share to test with one domain user account it just presents me with a password dialog box and does not accept anything. It should not prompt me but if it does it should authenticate. I have tried it with the username map = /etc/samba/smbusers and that did not work either. I have the winbind separator as + but if I run testparm I get the following: [root@gtdns root]# testparmLoad smb config files from /etc/samba/smb.confProcessing section "[TESTIT]"Loaded services file OK.'winbind separator = +' might cause problems with group membership.Press enter to see a dump of your service definitions If I change the separator to \andrun testparm I get the following: [root@gtdns root]# testparmLoad smb config files from /etc/samba/smb.confProcessing section "[TESTIT]"Loaded services file OK.ERROR: the 'winbind separator' parameter must be a single character.Press enter to see a dump of your service definitions Here is my information: #=== Global Settings = [global] workgroup = GTESS1.COM netbios name = GTDNS server string = Linux 7.3 Samba Server log file = /var/log/samba/log.%m security = domain password server = * wins server = 192.168.2.1 ;username map = /etc/samba/smbusers encrypt passwords = yes winbind separator = + winbind uid = 1-2 winbind gid = 1-2 winbind enum users = yes winbind enum groups = yes template shell = /bin/bash winbind use default domain = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 remote announce = 192.168.1.255 192.168.2.44 192.168.4.255 [TESTIT] comment = TESTIT path = /usr/stuff valid users = GTESS1.COM+jcrusade read only = No create mask = 0777 directory mask = 0777 Thanks, Jennifer Crusade GTESS Corp. CCNA, MCSE W2k\NT 4.0, MCP +I
Re: [Samba] Winbind!
- Original Message - From: Roger Schmeits [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, October 29, 2002 7:28 AM Subject: Re: [Samba] Winbind! If you don't get it working pretty quickly ... coincidentally, I am currently working on the section on winbind for Using Samba, 2nd edition. I might be able to send you a copy of that, and see if the directions work for you. Hopefully, you can also provide some pre-publication user feedback. Email me privately if you'd like to do this. Would be interested in your directions if I may pipe in here:) Currently working on replacing a server with RH7.3 Samba 2.6 for our NT40 server that houses 200+ shares. snip I'm writing a little doc on how to get Winbind working in a win2k domain on a Debian machine for home directories and company shares (groups and users) using SAMBA 2.2.5, perhaps I could contribute this aswell as I've found all the other documents a little patchy. Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] People
- Original Message - From: Rend, Jon (Jon) % To: '[EMAIL PROTECTED]' Sent: Tuesday, October 29, 2002 3:04 PM Subject: [Samba] People Is there a way to map NT names to UNIX names when they are not the same. 95% of our are which is great but we have a few that are different. For example, we have NT user bigboy who's Unix account is smallboy, how can I make an association, oh learned 1's. Thanks, Check out Winbind to authenticate users against the PDC. And ditch the HTML e-mails :) Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] (no subject)
- Original Message - From: Rend, Jon (Jon) % To: [EMAIL PROTECTED] Sent: Tuesday, October 29, 2002 2:23 PM Subject: FW: [Samba] (no subject) Jesus how do u post something, it always comes back :( Of course it comes back.. It's a mailing list. PS this is a SAMBA (Linux) group, posting in HTML makes baby jesus cry :) Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Winbind doesnt enumerate more than one group from an AD domain
Yeh it's not local group as in local machine domain groups, it's local as in AD groups.. There are 3 types. Local, Global and Universal.. The most basic type of group suitable for networking is the global group, used to control access to resources that exist anywhere on the network. The primary limitation to global groups is that they can only contain members from a single domain. You'd use a global group for users within a single domain that need access to a common group of files or directories. Domain local groups are essentially the opposite of global groups. Where a global group is limited to having members from a single domain, a domain local group can have members from every domain in your network. However, unlike global groups, domain local groups can only be applied to resources within a single domain, hence the name domain local group. Universal groups, as the name implies, can contain members from any domain on the network and can control access to resources existing in any of the network's domains. http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn ol/ad/windows2000/maintain/adusers.asp Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. - Original Message - From: Simo Sorce [EMAIL PROTECTED] To: Jean Francois Micouleau [EMAIL PROTECTED] Cc: Gerald (Jerry) Carter [EMAIL PROTECTED]; Gareth Davies [EMAIL PROTECTED]; James Braid [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Friday, October 25, 2002 7:26 PM Subject: Re: Winbind doesnt enumerate more than one group from an AD domain
Re: Winbind doesnt enumerate more than one group from an AD domain
- Original Message - From: James Braid [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, October 25, 2002 1:45 PM Subject: Winbind doesnt enumerate more than one group from an AD domain Hi all, I have been having some problems with winbind not seeing all the groups that users on my AD domain are in. Upon further investigation, it seems that winbind only enumerates one group. Doing a 'wbinfo -r $AD_USER' only shows one group (even if the AD user belongs to many groups, doesnt matter what type of AD groups they are either), but if I do a 'wbinfo -r $NT4_USER', winbind will show all the groups that the NT4 user is in, where $NT4_USER is a user on the NT4 domain and $AD_USER is a user on the AD domain. The odd thing is, the users show up in the groups fine if I do 'getent group' for example. I am running Debian unstable with Samba 2.999+3.0.alpha20-3. Why am I posting here? I logged a bug, but I was advised to post here for stuff to do with Samba 3.0... Any pointers or suggestions on how to debug this further and or fix it would be greatly appreciated. Let me know if more details are needed. Thanks, James I had the same problem aswell.. I found it was due to the fact the groups weren't 'Global' groups only 'Local' groups... Apparently they need to be Global or Universal to be shown by Winbind. I haven't tried 3 yet though so I'm not really sure. HTH Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :.
Re: [Samba] How do I permit NT Administrator to manage ACL's on samba file server
- Original Message - From: Konkol, Josh [EMAIL PROTECTED] To: 'Bart' [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Wednesday, October 23, 2002 2:02 PM Subject: RE: [Samba] How do I permit NT Administrator to manage ACL's on samba file server It has been my experience that only the owner of the file and root change change ACLS on that file. Since you've stated that Administrator IS the owner, maybe there's something else. Are you getting any errors ? Who is the owner of the diretory that the folder resides in. Is the Administrator given write permissions at the share level? My work-around for modifying ACL's was to create a hidden share that only Domain Admins were allowed to access, then for that share I used force user = root. That enabled all of my domain admins to modify ACL's on all files under that share. I know I've asked more questions than given answers, but sometimes it helps. snip I have this same problem, I can change read/write permissions but I can't change ownership or add a new group to the file/folder access list. Even if I am the owner of the file I get the same message: Unable to save permission changes on xxx, access denied Is there any solution for this? Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Readonly AND Writable share
Original Message - From: Carlo Corridore [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, October 18, 2002 10:56 AM Subject: [Samba] Readonly AND Writable share Hi, first of all Thanks for any help. snip why not just use read only = yes write list = allowed_user1, @allowed_group Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind
- Original Message - From: Norman Zhang [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 16, 2002 3:34 AM Subject: [Samba] winbind Hi, I have winbind working, as wbinfo -u wbinfo -g wbinfo -t snip Have you tried wbinfo -A Administrator%password Which gives Winbind a username to connect to the PDC with.. Have you checked the permissions for the home directory? chmod 700 directory/, chown DOMAIN+User directory/ , chown :'DOMAIN+Domain Users' directory/ Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Need installation help of SAMBA on UNIX Sun- Solaris version 8 platform
- Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, October 15, 2002 7:12 PM Subject: [Samba] Need installation help of SAMBA on UNIX Sun- Solaris version 8 platform Dear Mr. Andrew Tridgell, snip RTFM springs to mind :) http://samba.mirror.ac.uk/samba/docs/Samba-HOWTO-Collection.html http://samba.mirror.ac.uk/samba/docs/man/smbd.8.html http://samba.mirror.ac.uk/samba/docs/man/nmbd.8.html http://hr.uoregon.edu/davidrl/samba.html Re the licence...which funny enough it says clearly on the front page.. Samba is freely available under the GNU General Public License. Read http://samba.mirror.ac.uk/samba/docs/GPL.html P.S. please note HTML e-mails make baby Jesus cry. Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Important
Original Message - From: Altino Sampaio To: [EMAIL PROTECTED] Sent: Monday, October 14, 2002 11:08 AM Subject: [Samba] Important Hi! I'm trying to mount windows network files on linux using the following command: mount -t smbfs //pc/share_directory /dir Everyone can access to share_directory i've tryed put the IP instead of pc name, but nothing... I'm accessing linux system by telnet; entering as normal user and then typing su... Thanks! best regards Altino Sampaio Sorry, why is this important exactly? And is the problem? What do the logs say? What version/OS are you using..etc etc.. Learn how to ask effective questions... http://www.security-forums.com/forum/viewtopic.php?t=249 Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba CVS
Original Message - From: James Brechtel [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, October 11, 2002 10:25 AM Subject: [Samba] Samba CVS Ok, I've compiled samba from cvs and have it installed and running fine. I'm trying to get winbindd setup so I can log in using windows login accounts. Now, my machine is joined to the domain properly (wbinfo can -a authenticate names and password... secret check succeeded... wbinfo -u wbinfo -g works...getent passwd and getent group both work fine..). /etc/nsswitch conf has lines snip Try it like this? Also I presume you have compiled -with-pam and copied the .so to the /lib/security directory and made the ln- s to so.2 and you've given winbind a password to use? wbinfo -A Administrator%password The /etc/pam.d/login auth required /lib/security/pam_securetty.so auth sufficient /lib/security/pam_winbind.so auth sufficient /lib/security/pam_unix.so use_first_pass auth required /lib/security/pam_stack.so service=system-auth auth required /lib/security/pam_nologin.so accountsufficient /lib/security/pam_winbind.so accountrequired /lib/security/pam_stack.so service=system-auth password required /lib/security/pam_stack.so service=system-auth sessionrequired /lib/security/pam_stack.so service=system-auth sessionoptional /lib/security/pam_console.so HTH Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] who's on
Title: [Samba] who's on smbstatus Shaolin - IT Systems WB Ltd..: http://www.security-forums.com :. - Original Message - From: Dylan Jones To: [EMAIL PROTECTED] Sent: Friday, October 11, 2002 2:57 PM Subject: [Samba] who's on Hi everyone, Probably a dumb one too, but simply I cannot put my finger on what command to use in order to see who's locally logged on; let me be more accurate in my description: we run win98 PC all accessing shares on the linux boxes via samba. Several users shares. When I use finger or who to see who's logged on I only get to see who's logged on directly through ssh or telnet, but can't see who's on through samba. If anyone could help then I'd be glad... of course. Thanx in advance D Jones
Re: [Samba] Please assist with Winbind issues!
Have you tried: Manually putting password server = IP adress rather than *. [homes] comment = Home Directories browseable = no writable = yes valid users =%D+%S The chmod for home directory should be 700, chown to the user and chown group to 'DOMAIN+Domain Users' If you can use getent passwd and getent groups I presume it's just a permissions thing. I haven't been able to get pam_mkhomedir.so to work so I just manually create the accounts. I'm just writing a guide on how to do it now on Debian 3.0. Good luck, Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, October 08, 2002 10:29 PM Subject: [Samba] Please assist with Winbind issues! Hello, I've been trying for a couple of weeks now to get Samba to authenticate via Winbind to an NT domain. I've scoured Google and the mailing lists to no avail. I've tried various configurations that I've found during my searches, but none of them have worked for me. I need to be able to authenticate users, that do not have an account on the Linux box, against the NT domain, and automatically create a home directory for them. This is the purpose of Winbind (except the home directory part, which pam_mkhomedir is supposed to do), as I understand it. Something between winbind and pam is failing since the connecting user gets authenticated as guest rather than an actual user. My current configuration is RedHat 7.3 and Samba 2.2.5. My most current samba installation is an RPM generated via the makerpms.sh script in the packaging/RedHat folder of the 2.2.5 samba distribution. I've added the following compilation flags in the samba2.spec file: This is my latest attempt, since nothing else seemed to work. --with-ssl \ --with-sslinc=/usr/include/openssl \ --with-ssllib=/usr/lib/ssl \ --with-acl-support \ --with-winbind \ --with-winbind-auth-challenge \ 'getent passwd' and 'getent group' work properly so I think winbind works, too. I think the problem lies somewhere with pam, but I'm not a pam guru by any stretch of the imagination. The problem is one I've seen discussed a couple of times, but have not seen any kind of resolution. The next few lines are from the log file of the client attempting to connect to the server with an account called ilchtest. [2002/10/08 15:00:50, 3] lib/util_sock.c:open_socket_out(845) Connecting to 10.226.XXX.XXX at port 139 [2002/10/08 15:00:50, 3] smbd/reply.c:reply_sesssetup_and_X(1045) No such user ilchtest [CHICAGO] - using guest account The following is the last line of what 'winbindd -d5 -i' spits out when I start it from the root prompt: tdb(unknown): tdb_brlock failed (fd=10) at offset 4 rw_type=1 lck_type=13 Not sure if this points to a problem??? The following is what 'winbindd -d5 -i' spits out when the client trys to connect: rpc_read: num_read = 4, read offset: 0, to read: 4 18 samr_io_r_close_hnd 0018 data1: 001c data2: 0020 data3: 0022 data4: 0024 data5: 00 00 00 00 00 00 00 00 002c status: NT_STATUS_OK [23826]: sid to gid S-1-5-21-178404139-331375567-1660491571-2273 [23826]: gid to sid 1 [23826]: gid to sid 10001 [23826]: getgroups ftp ---Guest account was nobody and I changed it to ftp. Here is my /etc/nsswitch.conf passwd: files winbind shadow: files group: files winbind #hosts: db files nisplus nis dns hosts: files winbind dns Here is my /etc/pam.d/system-auth authrequired /lib/security/pam_env.so authsufficient/lib/security/pam_winbind.so authsufficient/lib/security/pam_unix.so likeauth nullok use_first_pa ss authrequired /lib/security/pam_deny.so account sufficient/lib/secutiry/pam_winbind.so account required /lib/security/pam_unix.so passwordrequired /lib/security/pam_cracklib.so retry=3 passwordsufficient/lib/security/pam_unix.so nullok use_authtok md5 shado w passwordrequired /lib/security/pam_deny.so session required /lib/security/pam_mkhomedir.so skel=/etc/skel/ umask=0 022 session required /lib/security/pam_limits.so session required /lib/security/pam_unix.so Here is my /etc/samba/smb.conf: [global] workgroup = CHICAGO netbios name = SILCHRS03 server string = security = DOMAIN encrypt passwords = Yes password server = * log level = 3 log file = /var/log/samba/log.%m max log size = 50 large readwrite = Yes name resolve order = host wins bcast socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 load printers = No preferred master = False local master = No domain master = False dns proxy = No wins server = 172.30.XXX.XXX winbind uid = 1-5 winbind gid = 1-5 template shell = /bin/bash
Re: [Samba] A problem..
You don't appear to have set Winbind up. man winbindd Shaolin - IT Systems WB Ltd. - Original Message - From: Lennard Bakker [EMAIL PROTECTED] To: Samba Maillist [EMAIL PROTECTED] Sent: Monday, October 07, 2002 1:59 PM Subject: [Samba] A problem.. Hello, I have a samba problem which now is keeping me busy for 3 days.. The situation: Samba version: 2.2.5 Samba is configgured that users will be autenticated agains a domain (winnt). With smbpasswd -j domain the domain is joined, and the result was a non-error. I use samba for 2 things.. user auth on websites for certain files (see a .htaccess file config later in this mail). This is working fine. The other thing is to share folders on the linux host. The users must also be auth against the domain. But this is keeping to fail. With asmbclient -L machinename -U user with a wrong user, there is a non-existing user in the log (this is OK), with a user that exists in the domain, but with a wrong passwd, there is a Wrong passwd in the log (also OK). But when i user a valid user, i get: Session setup failed: SUCCESS - 0 (for more see log file later). So samba is working because the auth. on files for webpages, but not for shares, somebody who can help a hand? Lennard smb.conf: # Global parameters [global] workgroup=xxx netbios name=MILO server string=Samba %v debug level=2 security=domain encrypt passwords=yes password server=* wins server=10.16.127.65 10.20.255.65 load printers=no username level=5 username map=/usr/local/samba/lib/smbusers domain master=no local master=no preferred master=no preserve case=yes short preserve case=yes guest account=nobody logfile=/var/log/samba/%m.log max log size=0 socket options=TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy=no interfaces=eth0 bind interfaces only=yes os level=2 [homes] comment = Home writeable = yes create mask = 0750 browseable = yes .htaccess file: Files register.php Authnamexxx Account AuthTypeBasic Auth_SMB_Server NL-WOE-BDC01 Auth_SMB_Server NL-AMV-BDC01 Auth_SMB_Domain xxx require valid-user /Files logfile: [2002/10/07 14:02:01, 2] libsmb/namequery.c:name_query(421) Got a positive name query response from 10.16.127.65 ( 10.16.127.64 10.20.191.65 10.17.63.65 10.16.191.65 10.19.127.65 10.18.191.65 10.16.127.65 ) [2002/10/07 14:02:01, 2] libsmb/namequery.c:name_query(421) Got a positive name query response from 10.16.127.65 ( 10.16.191.65 ) [2002/10/07 14:02:02, 2] lib/util_sock.c:open_socket_out(874) error connecting to 10.16.191.65:445 (Connection refused) [2002/10/07 14:02:02, 2] libsmb/namequery.c:name_query(421) Got a positive name query response from 10.16.127.65 ( 10.16.127.64 10.20.191.65 10.17.63.65 10.16.191.65 10.19.127.65 10.18.191.65 10.16.127.65 ) [2002/10/07 14:02:03, 2] libsmb/namequery.c:name_query(421) Got a positive name query response from 10.16.127.65 ( 10.16.127.64 ) [2002/10/07 14:02:03, 2] lib/util_sock.c:open_socket_out(874) error connecting to 10.16.127.64:445 (Connection refused) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and Printing
This is probably a pretty lame questions, but say I've got a HP 4500N colour laser, I can access it as I'm on Win2k and I can add a default TCP/IP port and print raw to it. But the clients on Win 98 cannot, how would I 'connect' samba to this printer so it was shared and they could get to it? Is it very difficult to do? Do I need to locate linux drivers for the printer or can I just print direct via lpr? Is there any guides on how to do this? Also about the ACL, even if I have permissions (Domain Admin) I can't change the positions on anything through Win2k on the samba shares, only by chmodding locally on the box. I'm using Debian 3.0, do I also need to compile ACL support into the kernel, and if so how? I've never done anything like that before. TIA Shaolin- IT SystemsWB Ltd. .: http://www.security-forums.com :.
[Samba] Samba Winbind Problem - Permissions?
I'm having some problems with Samba and Winbind (Debian 3.0 Samba 2.2.5) I've got winbind working pretty much as it should be I think, all the wbinfo commands work fine and and I can login to the local machine using a domain login/password but it says no HOME directory even when there is one. I've set the home directory chown my domain user and 'Domain Users' group. I can see it in Network Neighbourhood but when I try and access it it says incorrect password or unknown username and prompts me for a username password. I've set up 3 shares, public, temp and IT. With public public = yes and write list = 'DOMAIN+Domain users' I can view, browse, read and write. With Temp it's set to just public = yes and I can't write to it. With the IT share it's set to public = no and write list = 'Domain+IT' and I can view it but can't write to it. If I right click and view properties on all the folders they show up correctly, IT is a valid group and shows up in wbinfo -g and I am a member. I am getting these error messages: [2003/10/02 12:20:40, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416) unable to open passdb database. [2003/10/02 12:20:43, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416) unable to open passdb database. [2003/10/02 12:30:42, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416) unable to open passdb database. [2003/10/02 16:49:05, 0] lib/username.c:user_in_winbind_group_list(357) user_in_winbind_group_list: winbind_lookup_name for group 'WILLOWBROOK+Domain failed. [2003/10/03 10:12:19, 0] lib/username.c:user_in_winbind_group_list(357) user_in_winbind_group_list: winbind_lookup_name for group 'WILLOWBROOK+Domain failed. [2003/10/03 11:01:07, 0] lib/username.c:user_in_winbind_group_list(357) user_in_winbind_group_list: winbind_lookup_name for group 'WILLOWBROOK+IT' failed. [2003/10/03 11:01:07, 0] nsswitch/winbindd_sid.c:winbindd_lookupname(90) could not find domain entry for domain 'WILLOWBROOK [2003/10/03 11:01:07, 0] nsswitch/winbindd_group.c:winbindd_getgrnam(211) could not get domain sid for domain 'WILLOWBROOK [2003/10/03 11:01:07, 0] nsswitch/winbindd_group.c:winbindd_getgrnam(211) could not get domain sid for domain 'WILLOWBROOK conf file: [global] workgroup = WILLOWBROOK server string = Debian Samba Server hosts allow = 192.168.0.0/255.255.0.0 127.0.0.1 log file = /usr/local/samba/var/log.%m max log size = 50 security = domain socket options = TCP_NODELAY local master = no wins support = no wins server = 192.168.1.2 dns proxy = no password server = WILLOWBROOKLI01 encrypt passwords = yes map to guest = bad user winbind uid = 1-65000 winbind gid = 1-65000 template homedir = /home/%D/%U template shell = /bin/sh winbind separator = + winbind enum users = yes winbind enum groups = yes # Share Definitions == [homes] comment = Home Directories browseable = no writable = yes valid users = %S # This one is useful for people to share files [Temp] comment = Temporary file space path = /temp read only = no public = yes [IT] comment = IT Staff Only path = /it read only = no public = no writable = yes printable = no create mask = 0777 write list = 'WILLOWBROOK+IT' [Public] comment = Public Stuff path = /public public = yes writable = yes printable = no write list = 'WILLOWBROOK+Domain Users' nt acl support = true Any ideas what I'm doing wrong? I guess it must be something fairly simple. TIA Gareth Davies - IT Systems WB Ltd. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] (no subject)
http://samba.mirror.ac.uk/samba/docs/Samba-HOWTO-Collection.html http://hr.uoregon.edu/davidrl/samba.html ftp://ftp.stratus.com/pub/vos/customers/samba/ http://asia.cnet.com/itmanager/netadmin/0,39006400,39050042,00.htm http://www.sin.khk.be/~dj/ http://fre-ks.greatplains.net/samba/winbind.html http://ranger.dnsalias.com/mandrake/muo/connect/csamba5.html#winbind HTH Shaolin - IT Systems WB Ltd. - Original Message - From: Mina Jafarijoo To: [EMAIL PROTECTED] Sent: Tuesday, October 01, 2002 11:41 AM Subject: [Samba] (no subject) I am new in Samba. I install Red hat 7.2 and smb server and I can start smbd and nmbd services but there are many problems to authentication when I want to connect to Samba server over a MS client. How do I go about configuring Samba? Mina -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] PAM - Winbind help needed.
Thanks to all the info I've gathered that people have posted here I've got a lot further and can now login to the local machine using a Domain account :) I'm still having problems with PAM though, no pam.d/samba file was created on installation, I did install with-pam and the login part of pam works with pam_winbind.so, but when I change the obey pam restrictions to yes I get prompted when trying to access even Public and Temp shares. I am trying to get this to work so I can utilise the pam_mkhomedir.so to autocreate the home directories for users. Without the pam option enabled I can access things fine and login through SSH using DOMAIN+user. I have tried a couple of different pam.d/samba files including these: # /etc/pam.d/samba #%PAM-1.0 auth required pam_nologin.so authrequired pam_stack.so service=system-auth accountrequired pam_stack.so service=system-auth sessionrequired pam_mkhomedir.so skel=/etc/sambaskel umask=0022 # /etc/sambaskel is a dir I made specific for homedirs for domain users sessionrequired pam_stack.so service=system-auth password required pam_stack.so service=system-auth And auth required pam_winbind.so auth required pam_pwdb.so nullok shadow account required pam_winbind.so account required pam_pwdb.so I'm probably doing something really basic wrong, but I'm so close to getting this right now. I'm using Debian 3.0 and Samba 2.2.5. Any ideas are appreciated. Shaolin - IT Systems WB Ltd. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Another Winbind question...
Still having problems with Winbind. I'm using Samba 2.2.5 and Debian 3.0.It seems to be 95% running now but where the documentation runs out...Ican't seem to get it working.Samba is sharing fine, I can get to Public and Temporary shares and sharethe printers (not that I have any).But when in comes to home directories I can't seem to get it to work ( I amplanning on using this machine as the main file server for user homedirectories and company shares). It will work if I manually create a user onthe machine that matches the user in the domain (the old way).Wbinfo -t tells me my secret is fine, I've joined the domain, I've usedwbinfo -A Administrator so it always connects with admin, wbinfo -g andwbinfo -u return all users and groups correctly and I have no Iptables orIpchains.Smbstatus returns the following:Samba version 2.2.5Service uid gid pid machine--Public WILLOWBROOK+gdavies WILLOWBROOK+Domain Users 536 it-win2k(192.168.2.2) Tue Sep 30 10:50:23 2003IPC$ WILLOWBROOK+ADMINISTRATOR WILLOWBROOK+Domain Users 547willowbrookli01 (192.168.1.2) Tue Sep 30 10:54:47 2003IPC$ nobody nogroup 536 it-win2k (192.168.2.2) Tue Sep 3010:54:16 2003IPC$ WILLOWBROOK+gdavies WILLOWBROOK+Domain Users 536 it-win2k(192.168.2.2) Tue Sep 30 10:54:16 2003Locked files:Pid DenyMode Access R/W Oplock Name--536 DENY_NONE 0x20089 RDONLY EXCLUSIVE+BATCH/public/smbstatus.txt Tue Sep 30 10:54:40 2003Which seems to me as though it's recognising the users.When I do getent passwd and getent groups it's my understanding that thehome directories should be created with the correct permissions.I have su'ed to my username WILLOWBROOK+gdavies on the linux machine andcreated my home directory and I can now see it but when trying to connect itprompts for a password which it always rejects. I think this server event isrelated:Service Ticket Request Failed:User Name: IT-WIN2K$User Domain: WILLOWBROOK.LOCALService Name: HOST/IT-DEBIANTicket Options: 0x40810010Failure Code: 0x7Client Address: 192.168.2.2IT-Win2k is my machine and IT-Debian is the SAMBA machine.Do I need to manually create the homedirs? If so how?Kind RegardsWB IT.Here is my smb.conf:workgroup = WILLOWBROOKhosts allow = 192.168.0.0/255.255.0.0 127.0.0.1security = domainwins server = 192.168.1.2password server = WILLOWBROOK01winbind uid = 1-65000winbind gid = 1-65000template homedir = /home/%D/%Utemplate shell = /bin/shwinbind separator = +winbind enum users = yeswinbind enum groups = yesadd user script = /usr/sbin/useradd -d /home/%D/%U -s /bin/false -M %U[homes] comment = Home Directories browseable = no writable = yes valid users = %S create mode = 0664--Shaolin - IT SystemsWB Ltd.
Another Winbind question...
Still having problems with Winbind. I'm using Samba 2.2.5 and Debian 3.0.It seems to be 95% running now but where the documentation runs out...Ican't seem to get it working.Samba is sharing fine, I can get to Public and Temporary shares and sharethe printers (not that I have any).But when in comes to home directories I can't seem to get it to work ( I amplanning on using this machine as the main file server for user homedirectories and company shares). It will work if I manually create a user onthe machine that matches the user in the domain (the old way).Wbinfo -t tells me my secret is fine, I've joined the domain, I've usedwbinfo -A Administrator so it always connects with admin, wbinfo -g andwbinfo -u return all users and groups correctly and I have no Iptables orIpchains.Smbstatus returns the following:Samba version 2.2.5Service uid gid pid machine--Public WILLOWBROOK+gdavies WILLOWBROOK+Domain Users 536 it-win2k(192.168.2.2) Tue Sep 30 10:50:23 2003IPC$ WILLOWBROOK+ADMINISTRATOR WILLOWBROOK+Domain Users 547willowbrookli01 (192.168.1.2) Tue Sep 30 10:54:47 2003IPC$ nobody nogroup 536 it-win2k (192.168.2.2) Tue Sep 3010:54:16 2003IPC$ WILLOWBROOK+gdavies WILLOWBROOK+Domain Users 536 it-win2k(192.168.2.2) Tue Sep 30 10:54:16 2003Locked files:Pid DenyMode Access R/W Oplock Name--536 DENY_NONE 0x20089 RDONLY EXCLUSIVE+BATCH/public/smbstatus.txt Tue Sep 30 10:54:40 2003Which seems to me as though it's recognising the users.When I do getent passwd and getent groups it's my understanding that thehome directories should be created with the correct permissions.I have su'ed to my username WILLOWBROOK+gdavies on the linux machine andcreated my home directory and I can now see it but when trying to connect itprompts for a password which it always rejects. I think this server event isrelated:Service Ticket Request Failed:User Name: IT-WIN2K$User Domain: WILLOWBROOK.LOCALService Name: HOST/IT-DEBIANTicket Options: 0x40810010Failure Code: 0x7Client Address: 192.168.2.2IT-Win2k is my machine and IT-Debian is the SAMBA machine.Do I need to manually create the homedirs? If so how?Kind RegardsWB IT.Here is my smb.conf:workgroup = WILLOWBROOKhosts allow = 192.168.0.0/255.255.0.0 127.0.0.1security = domainwins server = 192.168.1.2password server = WILLOWBROOK01winbind uid = 1-65000winbind gid = 1-65000template homedir = /home/%D/%Utemplate shell = /bin/shwinbind separator = +winbind enum users = yeswinbind enum groups = yesadd user script = /usr/sbin/useradd -d /home/%D/%U -s /bin/false -M %U[homes] comment = Home Directories browseable = no writable = yes valid users = %S create mode = 0664--Shaolin - IT SystemsWB Ltd.
Windbind and Samba, What do I do next?
Hi all, I've had a long ride setting up SAMBA and Winbind, essentially whatI'm trying to do at the moment is transfer the file server from the Win2kserver to a Linux machine to east the strain and spread the network trafficout over different switches.I am using SAMBA 2.2.5 and Debian 3.0.I have SAMBA working fine, I can browse the Public and Temp shares and writeto them from a Win2k machine.I have Winbind working as far as I can tell, wbinfo -t gives an ok,wbinfo -u returns users and same for -g. (Thanks to your help yesterday)I have done getent passwd and getent group and all the users show up ok.When I try and logout and log back into Xwindows with a Domain rather thanlocal user (they are all listed correctly in kdm DOMAIN+User), the loginalways fails even when I know the password is correct.I can browse my home directory, but only if I have a local user on the linuxmachine that matches my network logon if I try from another logon withoutthe equivalent linux entry it doesn't work.The domain authentication doesn't seem to working.(security = domain is set).How do I create and get home directories working and how do I set up shareswith group properties, e.g. only Managers are allowed access etc.Config files and more available on request.Thanks--Shaolin - IT SystemsWillowbrook Ltd.
Re: Problem with Winbind.
Maybe you might want to try to give winbind a username and password to authenticate with when querying the PDC for users. This is done with wbinfo -A user%password Hope that helps, Volker It's so simple when you know how.. Seems fine now. Thanks a lot Volker. Gareth Davies - IT Systems Willowbrook Ltd. Ext 235. - Original Message - From: Volker Lendecke [EMAIL PROTECTED] To: Gareth Davies [EMAIL PROTECTED] Cc: Samba Technical [EMAIL PROTECTED] Sent: Wednesday, September 25, 2002 3:36 PM Subject: Re: Problem with Winbind.
