Re: [Samba] Prints ok, but says Access denied, unable to connect. win2k and samba 2.2.1a
Members of the Domain Admin Group will not have this issue. You may or may not want to resolve it this way, since it does elevate regular users priveledges. If its a small install of responsible users, it may not matter. see man smb.conf domain admin group =. g Ainsworth, Joshua B. wrote: I have a small Samba 2.2.1a plus Win2k workgroup. Samba is running on Redhat 7.2. There is a networked laserjet 5000 using a static IP which I can print to successfuly from the linux box, and from the win2k workstations via the queue on the linux box. The weird thing is that, on the win2k worksations, if I double click on the printer icon the status of the printer is reported as Access denied, unable to connect. Yet it works??? Hello, I've been having this same problem with several of our laserjet 5000s on our network. Did you find the cause of the problem? Any help would be appreciated. Thanks Joshua Ainsworth Colorado Christian University Tech Support [EMAIL PROTECTED] 303-963-3444 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Firewall piercing - The Specified network name is no longer available.
Dude -- Your arrogant attitude towards getting help and resolving your problem is not getting you anywhere -- its obviously problematic to pump SMB/CIFS into the internet the way you would like to. Why don't you look at a simpler solution like running an anonymous ftp server and then your pathetic windoze users can just type: ftp://server/directory POOF Please read my points on this sort of solution in the past. The whole REASON I want to use Plain Vanilla SMB is so I can walk up to ANY Windoze machine on the entire flippin' Internet and go: Start Run \\IP_ADDRESS\sharename (username) (password) POOF. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Firewall piercing - The Specified network name is no longer available.
so run a non-anonymous ftp server and have them authenticate I realize you want to do it without installing client software, but you can do that via ftp and skip all the SMB jive JLB wrote: Also, my arrogant attitude is largely due to the fact that nobody's reading my points. I DO NOT want to install OpenVPN. I DO NOT want to run WinSCP. I DO NOT want to run an anonymous FTP server. I want to go: Start Run smb://IP_ADDRESS/sharename (username) (password) POOF. That is what I want. Period. It's not unreasonable; this is Samba, not some Win95 box waiting to be h4x0red. On Thu, 10 Feb 2005, Gordon Russell wrote: Date: Thu, 10 Feb 2005 09:22:48 -0500 From: Gordon Russell [EMAIL PROTECTED] Cc: JLB [EMAIL PROTECTED], samba@lists.samba.org Subject: Re: [Samba] Firewall piercing - The Specified network name is no longer available. Dude -- Your arrogant attitude towards getting help and resolving your problem is not getting you anywhere -- its obviously problematic to pump SMB/CIFS into the internet the way you would like to. Why don't you look at a simpler solution like running an anonymous ftp server and then your pathetic windoze users can just type: ftp://server/directory POOF Please read my points on this sort of solution in the past. The whole REASON I want to use Plain Vanilla SMB is so I can walk up to ANY Windoze machine on the entire flippin' Internet and go: Start Run \\IP_ADDRESS\sharename (username) (password) POOF. -- J. L. Blank, Systems Administrator, twu.net -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] upgrade to 3.0.11, lost domain control
Hello-- I upgraded my RH9 samba PDC server from 3.0.9pre3 to 3.0.11 using packaged RH9 rpm from samba site, using rpm -U samba*rpm. no complaints from rpm. samba stops/starts fine. However, clients can no longer log in to domain. All clients (W2k,XP) get the same error message The system could not log you on,...etc. clients can mount samba shares, however. I saved a copy of /etc/samba before the upgrade, and copied old secrets.tdb smbpasswd to /etc/samba/., but this made no difference, I still have no domain control. Im at a loss to where to go next and this will really be a drag tommorrow when everyone comes in to work if I cant get domain control working again thanks--- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] upgrade to 3.0.11, lost domain control
Hello-- I upgraded my RH9 samba PDC server from 3.0.9pre3 to 3.0.11 using packaged RH9 rpm from samba site, using rpm -U samba*rpm. no complaints from rpm. samba stops/starts fine. However, clients can no longer log in to domain. All clients (W2k,XP) get the same error message The system could not log you on,...etc. clients can mount samba shares, however. I saved a copy of /etc/samba before the upgrade, and copied old secrets.tdb smbpasswd to /etc/samba/., but this made no difference, I still have no domain control. Im at a loss to where to go next and this will really be a drag tommorrow when everyone comes in to work if I cant get domain control working again thanks--- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: upgrade to 3.0.11, lost domain control
I have determined that members of the root group can logon to domain, no problem. If you are not a member of the unix root group, you are sol... file permissions somewhere not right? please, i dont want to have to add all my users to root group before tomorrow morning ;-) g Gordon Russell wrote: Hello-- I upgraded my RH9 samba PDC server from 3.0.9pre3 to 3.0.11 using packaged RH9 rpm from samba site, using rpm -U samba*rpm. no complaints from rpm. samba stops/starts fine. However, clients can no longer log in to domain. All clients (W2k,XP) get the same error message The system could not log you on,...etc. clients can mount samba shares, however. I saved a copy of /etc/samba before the upgrade, and copied old secrets.tdb smbpasswd to /etc/samba/., but this made no difference, I still have no domain control. Im at a loss to where to go next and this will really be a drag tommorrow when everyone comes in to work if I cant get domain control working again thanks--- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: upgrade to 3.0.11, lost domain control
Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 8 Feb 2005, Gordon Russell wrote: I have determined that members of the root group can logon to domain, no problem. If you are not a member of the unix root group, you are sol... file permissions somewhere not right? please, i dont want to have to add all my users to root group before tomorrow morning ;-) g I would look for name resolution issues. Perhaps you have a bad wins.dat. Also get a level 10 debug log from smbd and `grep NT_STATUS log.smbd | grep -v OK`. Then locate any messages in the log file such as ACCESS_DENIED, NONE_MAPPED, etc... I had upped the debug level to 3 and started seeing NT_STATUS_WRONG_PASSWORD errors when users were failing to log in. I reset those users passwords in smbpasswd and passwd and everything works fine. At this point I have about 6 out of 50+ users whose passwords seem to have been corrupted for some reason. -- the root group logon was a red herring. As usual, thanks for the quick responses and great work gordon -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Windows 2000 Scheduler Permission Problem
W2k by default runs scheduled tasks as system user, which isnt a samba user. somewhere in the config of the W2K job schedule interface (it may be under an advanced button) you can change the user that the job runs under. Change it to a user who is in your samba system, and can read/write the share you want to access. gordon -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Hide shares from some users
I can think of a couple of ways to accomplish this. You could create unix groups that contain users that can see some shares, then remove the read/write/execute bit (or specifically the -x bit) for world/others on the directorys that you want hidden from others. these same directories need to have group ownership assigned to the group that is able to see them, and r/w/x bits set at the owner/group level. So, unix permissions may look like this: drwxrwx--- user group . some_dir as long as the x bit is not set on a directory, samba will not allow it to be visible at that permission level. The other way you could accomplish it would be to make the directories not browseable, and have user specific logon scripts that map the shares you want them to be able to access. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: hide shares from some users
I can think of a couple of ways to accomplish this. You could create unix groups that contain users that can see some shares, then remove the read/write/execute bit (or specifically the -x bit) for world/others on the directorys that you want hidden from others. these same directories need to have group ownership assigned to the group that is able to see them, and r/w/x bits set at the owner/group level. So, unix permissions may look like this: drwxrwx--- user group . some_dir as long as the x bit is not set on a directory, samba will not allow it to be visible at that permission level. The other way you could accomplish it would be to make the directories not browseable, and have user specific logon scripts that map the shares you want them to be able to access. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Is Redhat / Samba the only combination that can authenticate to an NT domain??
you can get samba 2.2.2 in solaris pkgadd format at: http://www.sunfreeware.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] NT4 at jobs samba
Hello: All of my at jobs that write to a samba share (2.2.5) balk with access denied errors. I have force nt acl user = yes on the share, but this doesnt help. access denied only occurs when the batch jobs run under at. I can run the batch files successfully at the nt cmd line. I can only guess that nt4 at jobs are running as some kind of 'system' user that samba doesnt know of. Does anyone know the workaround here? thanks Gordon Russell -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
