Re: [Samba] Samba Intermittent Browsing Issue from Windows 2008 R2 box

2010-12-05 Thread Hamish McCullough
Hi Volker

Can you point me in the direction of a binary based download for the later
versions of samba?

Kind Regards
Hamish


-Original Message-
From: Volker Lendecke [mailto:volker.lende...@sernet.de]
Sent: Monday, 29 November 2010 11:18 p.m.
To: Hamish McCullough
Cc: samba@lists.samba.org
Subject: Re: [Samba] Samba Intermittent Browsing Issue from Windows 2008
R2 box

On Mon, Nov 29, 2010 at 10:37:38PM +1300, Hamish McCullough wrote:
 So just to clarify even if I don't have the modules installed on the
Linux
 Advanced Server for AD integration and Kerberos authentication, I can
still
 configure samba to connect to the domain and authenticate directly that
way
 as opposed to sitting in server authentication mode?

Sure. Latest AD still supports the RPC-based
security=domain mode that does not require Kerberos at
all. However, this assumes SMB signing which is only
properly supported from Samba 3.0 on, so an upgrade is
necessary here. Your W2k8 can be configured not to require
signing, but Samba 2 is so old that I would highly recommend
upgrading anyway.

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Intermittent Browsing Issue from Windows 2008 R2 box

2010-11-29 Thread Hamish McCullough
Hi Volker

Thanks for your answer below.

Please forgive my silly question below

So just to clarify even if I don't have the modules installed on the Linux
Advanced Server for AD integration and Kerberos authentication, I can still
configure samba to connect to the domain and authenticate directly that way
as opposed to sitting in server authentication mode?

If this is the case then perhaps that will be a better way to fix my issue
for starters before upgrading samba?


Kind Regards
Hamish


-Original Message-
From: Volker Lendecke [mailto:volker.lende...@sernet.de]
Sent: Monday, 29 November 2010 10:21 p.m.
To: Hamish McCullough
Cc: samba@lists.samba.org
Subject: Re: [Samba] Samba Intermittent Browsing Issue from Windows 2008 R2
box

On Mon, Nov 29, 2010 at 12:12:22AM +1300, Hamish McCullough wrote:
 Hi All



 I have a really strange problem which I need some help with



 I will give you the background



 Samba 2.2.12 installed on Red Had Linux Advanced Server 2.1



 Basically I have upgraded a client from a Windows 2003 TS box to a Windows
 2008 R2 TS box. The 2003 box had approx 30 concurrent users logged on and
 could browse to samba no problems at any time.

 Once I installed the Windows 2008 R2 box and got all users connecting
 there
 connections to the samba drive would constantly be prompted with a
 username
 and password box – I changed the lanmanauthentication level and this fixed
 that however the issue I am having is strange.

 You can have 5-8 users connected to the 2008 r2 ts box and browse the
 samba
 shares fine, any more than that and randomly out of the users some will
 not
 work and keep getting prompted by username/password box. Only way to fix
 appears to be restart samba service which sometimes fixes the issue.

 I have absolutely no idea how to fix this – I have spent weeks on this and
 have Microsoft looking into it with no luck

To be honest, I doubt you will be able to fix it with
version 2.2.12 of Samba. It *might* be that you can
configure W2K8R2 to use ancient authentication mechanisms,
but I would recommend upgrading Samba.

 Unfortunately because its running 2.1 Advanced Server I can’t run samba in
 AD mode with Kerberos as I don’t have the install cd’s so server mode is
 only possible.

security=domain and winbind rpc only=yes should be
possible anywhere.

 Should I look at upgrading Samba – if so will the latest version run on
 2.1
 Advanced Server?

Latest Samba 3.5.6 should compile fine there. If it does
not, we'll be happy to fix the build breakages you find. We
don't provide binary packages, so you'll have to compile it
yourself.

Best regards,

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba Intermittent Browsing Issue from Windows 2008 R2 box

2010-11-28 Thread Hamish McCullough
Hi All



I have a really strange problem which I need some help with



I will give you the background



Samba 2.2.12 installed on Red Had Linux Advanced Server 2.1



Basically I have upgraded a client from a Windows 2003 TS box to a Windows
2008 R2 TS box. The 2003 box had approx 30 concurrent users logged on and
could browse to samba no problems at any time.

Once I installed the Windows 2008 R2 box and got all users connecting there
connections to the samba drive would constantly be prompted with a username
and password box – I changed the lanmanauthentication level and this fixed
that however the issue I am having is strange.

You can have 5-8 users connected to the 2008 r2 ts box and browse the samba
shares fine, any more than that and randomly out of the users some will not
work and keep getting prompted by username/password box. Only way to fix
appears to be restart samba service which sometimes fixes the issue.

I have absolutely no idea how to fix this – I have spent weeks on this and
have Microsoft looking into it with no luck



Unfortunately because its running 2.1 Advanced Server I can’t run samba in
AD mode with Kerberos as I don’t have the install cd’s so server mode is
only possible.



Should I look at upgrading Samba – if so will the latest version run on 2.1
Advanced Server?



Samba config below



#=== Global Settings
=
[global]

# workgroup = NT-Domain-Name or Workgroup-Name
   workgroup = *
   netbios name = 
   server string = Samba Server
   password server = 192.168.100.12
   hosts allow = 192.168.100. 192.168.1. 10.1.1.
   security = SERVER
   encrypt passwords = yes
   load printers = yes
   printcap name = /etc/printcap
   printing = lprng
   guest account = staff
   log file = /var/log/samba/log.%U
   log level = 2
   max log size = 50
   socket options = TCP_NODELAY
   local master = no
   domain master = no
   preferred master = no
   dns proxy = no







Kind Regards

Hamish
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Strange winbind behavior with netbios name, perfect with ip address

2005-07-08 Thread Hamish
Hi all
This is a bit of a continuation of an old thread, which I have had no joy in 
fixing. We have a samba server authenticating against a W2k3 server in 
security = ADS mode.

If there is a file in a share, owned by user.domain users and chmod 700, it 
would normally be ONLY readable by that user.

This is true only if the user goes to \\ip.add.of.srv\share - if he goes to 
\\servername\share, he cannot read the file. 

If the user goes to \\servername\share and creates a file, it is owned by him, 
so the server can distinguish the username.

If i set the permissions g+r on the file, then the user can see the file just 
fine. Unfortunately so can anyone in domain users - this is not good for 
files which need to be readable only for the user.

I am completely stumped, can anyone shed any light on this?

Setup:
SuSE Linux 9.0 (i586)
samba Version 3.0.14a-SUSE
winbindd Version 3.0.14a-SUSE

Cheers,
Hamish


pgpgUsgXcORhl.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems after changing security = domain to security = ads

2005-06-07 Thread Hamish
On Monday 06 June 2005 13:22, Hamish wrote:
 Hello all
 I have a samba domain member authenticating to a w2k3 server, after
 installing SP1, there were problems, and a solution I found was to change
 to security = ads. This seemed to work fine, but today no-one can get their
 home drives, and some people are denied access to shares where the
 permissions on the files are rwx for the user.
 I did not change anything other than the security line in smb.conf and
 rejoined the domain with `net ads join -U administrator` (this was
 successful)

 I find this in the samba log when users try to connect:
 [2005/06/06 13:16:17, 2] smbd/sesssetup.c:setup_new_vc_session(608)
   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all
 old resources.
 [2005/06/06 13:16:17, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
   Failed to verify incoming ticket!

 I can do `kinit [EMAIL PROTECTED] and it returns no errors (but
 no success either - if I put in a wrong password, it gives an error though,
 so i guess this is ok)

 Anyone have any ideas? or can I change back to security = domain with some
 other fix?

 Thanks,
 H
Looks like this might be a lonely troubleshoot, but here is more for anyone 
who may experience similar symptoms... (and of course any kind people who 
throw in a suggestion or two)

I have narrowed this down to what seems to be incompatable auth methods:
In XPsp2, I go to \\smbserver\fred - this shows either an empty folder, or an 
error (I have hide unreadable = on, so this may be the cause)
With konqueror, (smbclient -V: Version 3.0.15pre2-0.1-SUSE) i can go to 
smb:/[EMAIL PROTECTED] - i get a user/pass dialog, and then i can see the 
directory fine!

Is my logic right? The xp clients are using some other kind of auth or 
connection than smbclient does?

The windows clients work ok, but it seems that the files they need to be chmod 
740 at least (700, 710 does not work, file owned by user.domain users)

Rather than play around with permissions (that worked before the trouble 
started) I would like to see what xpsp2 and smbclient do differently - please 
could anyone help with this?

Thanks,
H


pgpOcTi7KMY1o.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Browsing [homes] fine with smbclient/konqueror, fails with XP sp2

2005-06-07 Thread Hamish
Hi all

Samba Server:
SuSE 9.0
Version 3.0.14a-SUSE
security = ads
(w2k3 AD server with sp1)

After much head scratching, I have found this:

My linux client (SuSE 9.2, Samba Version 3.0.15pre2-0.1-SUSE) can view the 
home share perfectly, with `smbclient -L smbserver`, and with 
smb:/[EMAIL PROTECTED] in konqueror. 

Using an XP sp2 client, I cannot access the home share unless the permissions 
are 755 (it needs the group and others to be able to read and execute). When 
I do, files owned by the user are not available to them, unless I open up the 
file permissions for group/other.

In the log, I was occasionally getting:
smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket!
But now I have just checked and there do not appear to be errors in the log 
when I access the share from an xp client.

With other shares, where access is restricted to special groups or single 
users, it also fails in windows, and succeeds with smbclient in linux.

What is going wrong here? Any help whatsoever greatly appreciated!

Thanks,
H


pgpVZN6IJf7jS.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Browsing [homes] fine with smbclient/konqueror, fails with XP sp2

2005-06-07 Thread Hamish
On Tuesday 07 June 2005 16:42, Hamish wrote:
 Hi all

 Samba Server:
 SuSE 9.0
 Version 3.0.14a-SUSE
 security = ads
 (w2k3 AD server with sp1)

 After much head scratching, I have found this:

 My linux client (SuSE 9.2, Samba Version 3.0.15pre2-0.1-SUSE) can view the
 home share perfectly, with `smbclient -L smbserver`, and with
 smb:/[EMAIL PROTECTED] in konqueror.

 Using an XP sp2 client, I cannot access the home share unless the
 permissions are 755 (it needs the group and others to be able to read and
 execute). When I do, files owned by the user are not available to them,
 unless I open up the file permissions for group/other.

 In the log, I was occasionally getting:
 smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming
 ticket! But now I have just checked and there do not appear to be errors in
 the log when I access the share from an xp client.

 With other shares, where access is restricted to special groups or single
 users, it also fails in windows, and succeeds with smbclient in linux.

 What is going wrong here? Any help whatsoever greatly appreciated!

 Thanks,
 H

Update:
After more googling, i have found that others have experienced similar 
problems:

I can also use the ip instead of the dns/nmb name, and it works fine..
\\www.xxx.yyy.zzz\username - works fine
\\servername\username - fails

Although i saw people asking about this problem, I did not see an answer - it 
seems to be kerberos related, but has anyone sorted this out yet and have a 
tip for me?

Thanks,
H


pgpu9EZcus0pU.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Browsing [homes] fine with smbclient/konqueror, fails with XP sp2

2005-06-07 Thread Hamish
On Tuesday 07 June 2005 18:09, Anne Wilson wrote:
 On Tuesday 07 Jun 2005 17:51, Hamish wrote:
  Update:
  After more googling, i have found that others have experienced similar
  problems:
 
  I can also use the ip instead of the dns/nmb name, and it works fine..
  \\www.xxx.yyy.zzz\username - works fine
  \\servername\username - fails

 Hamish - thanks for this.  I'm struggling with a linux to linux problem
 that sounds pretty much like yours, and I had tried everything I could
 think of - except this, and it works.

 Anne
Hi Anne
Glad it could help someone else! I have been tearing my hair out about it for 
a while now, please let me know if you find any way to make it work 
normally, I will also post to this thread if I do.
Cheers,
H


pgpeD1BJuVGrJ.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problems after changing security = domain to security = ads

2005-06-06 Thread Hamish
Hello all
I have a samba domain member authenticating to a w2k3 server, after installing 
SP1, there were problems, and a solution I found was to change to security = 
ads. This seemed to work fine, but today no-one can get their home drives, 
and some people are denied access to shares where the permissions on the 
files are rwx for the user.
I did not change anything other than the security line in smb.conf and 
rejoined the domain with `net ads join -U administrator` (this was 
successful)

I find this in the samba log when users try to connect:
[2005/06/06 13:16:17, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all 
old resources.
[2005/06/06 13:16:17, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
  Failed to verify incoming ticket!

I can do `kinit [EMAIL PROTECTED] and it returns no errors (but no 
success either - if I put in a wrong password, it gives an error though, so i 
guess this is ok)

Anyone have any ideas? or can I change back to security = domain with some 
other fix?

Thanks,
H


pgpuT2lR9rJFz.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba w/o local users on Samba server?

2005-06-06 Thread Hamish
On Monday 06 June 2005 16:37, Robert Schuettler wrote:
 Hi everyone,

 is it possible to have a Samba server without creating local accounts
 for users on that server?

 Share level security doesn't count though. ;-) The idea is not to need
 to create and update users on the Samba server itself (i.e. no local
 users, no entries in /etc/passwd, etc).

 The documentation says something about  Domain and ADS level security
 being basically just forms of user level security, so - for the moment-
 it looks to me as if there's no way around creating those local users.
 Is that correct?

 Wondering, Robert

It is possible to authenticate against an active directory or a samba PDC, 
these are the only ways that I know of for you to avoid adding local users, 
and do a sort of pass through auth.
Hope that helps,
H


pgpzDNnD2VJXV.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems after changing security = domain to security = ads

2005-06-06 Thread Hamish
On Monday 06 June 2005 13:22, Hamish wrote:
 Hello all
 I have a samba domain member authenticating to a w2k3 server, after
 installing SP1, there were problems, and a solution I found was to change
 to security = ads. This seemed to work fine, but today no-one can get their
 home drives, and some people are denied access to shares where the
 permissions on the files are rwx for the user.
 I did not change anything other than the security line in smb.conf and
 rejoined the domain with `net ads join -U administrator` (this was
 successful)

 I find this in the samba log when users try to connect:
 [2005/06/06 13:16:17, 2] smbd/sesssetup.c:setup_new_vc_session(608)
   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all
 old resources.
 [2005/06/06 13:16:17, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
   Failed to verify incoming ticket!

 I can do `kinit [EMAIL PROTECTED] and it returns no errors (but
 no success either - if I put in a wrong password, it gives an error though,
 so i guess this is ok)

 Anyone have any ideas? or can I change back to security = domain with some
 other fix?

 Thanks,
 H
It just keeps getting wierder:

[2005/06/06 17:46:49, 0] smbd/service.c:make_connection_snum(615)
  '/data1/fileroot/PersonalFiles/michael' does not exist or is not a 
directory, when connecting to [michael]

ls -la /data1/fileroot/PersonalFiles/michael/
total 3941
drwxrwx---+  15 root domain users  720 Jun  3 15:14 .
drwxrwx---+  60 root root 1448 Apr 27 11:13 ..
(File listing snipped)

So why does samba think that this is not a directory or that it does not 
exist? This is not the normal failure of this thread, but an interesting one!

PS:
SuSE 9.0
Version 3.0.14a-SUSE
2.6.5-10.0-default

If there is any other info that anyone wants please let me know.
Thanks,
H


pgpK071s7R3GV.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems after changing security = domain to security = ads

2005-06-06 Thread Hamish
On Monday 06 June 2005 13:22, Hamish wrote:
 Hello all
 I have a samba domain member authenticating to a w2k3 server, after
 installing SP1, there were problems, and a solution I found was to change
 to security = ads. This seemed to work fine, but today no-one can get their
 home drives, and some people are denied access to shares where the
 permissions on the files are rwx for the user.
 I did not change anything other than the security line in smb.conf and
 rejoined the domain with `net ads join -U administrator` (this was
 successful)

 I find this in the samba log when users try to connect:
 [2005/06/06 13:16:17, 2] smbd/sesssetup.c:setup_new_vc_session(608)
   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all
 old resources.
 [2005/06/06 13:16:17, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
   Failed to verify incoming ticket!

 I can do `kinit [EMAIL PROTECTED] and it returns no errors (but
 no success either - if I put in a wrong password, it gives an error though,
 so i guess this is ok)

 Anyone have any ideas? or can I change back to security = domain with some
 other fix?

 Thanks,
 H
PS I joined a test server (suse 9.2, Version 3.0.15pre2-0.1-SUSE) to the 
domain with security = ads, and it seems to be fine (homes work as expected). 
I did not test group membership problems - is there a fix for this in this 
version? (sorry bad phrasing)
Cheers,
H


pgpPmAXuFoa8X.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem with wbinfo

2005-03-30 Thread Hamish
  Have you joined the box the domain?

 Sorry. I didn't understand!

Have you run the following command?
net join -U Administrator


pgpkSmPiQdHnT.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] A small question on Winbind

2005-03-29 Thread Hamish
On Tuesday 29 March 2005 08:29, Phibee NOC wrote:
 Hi
 it's possible with wbinfo that get a information:

 1- Get all users of one Active Directory Group
this can be done with getent passwd {groupname} - not sure how to do it with 
wbinfo
 2- Get all groups of one username ?
Not 100% sure about this, but a start might be getent group | grep {username} 
- im sure a bit of sed would neaten the results

Hope that helps,
H


pgpqtexElI0DE.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows XP greyed-out Guest user password prompt

2005-03-29 Thread Hamish
On Monday 28 March 2005 20:07, Jules Agee wrote:
 updates]

          comment = Software Updates
          path = /var/local/fileshare/admin/updates
          browsable = no
          create mask = 774
          group = SystemAdmin
          directory mask = 0775
          nt acl support = no
          read only = yes
          guest ok = yes

Hi Jules
This may be way off, but i know how frustrating it can be not getting any 
suggestions! I have a samba server with a guest share, the only difference i 
can see is that i have guest only = yes.
Here is one of the read only shares (sanitised):

[guests]
path = /guest/share
guest only = Yes
guest ok = Yes

This works fine from XPSP2 and SP1 clients, the server is security = domain 
though, so this may make a difference, although non-domain machines/users 
connect with no problems to the guest shares.

Hope this helps!
H


pgpSIHb3jtAHD.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem with wbinfo

2005-03-29 Thread Hamish
On Tuesday 29 March 2005 13:13, Ricardo Maciel wrote:
 Hello,

 I'm using a Samba client to access a Samba Server. The smbclient
 tool is ok, both at the client as at the server. I'm having trouble
 with the wbinfo command (winbind service) at the client, as you can
 see below.

 Can anybody help me?

 Thanks!!!

 =Problem==

 Samba Server: samba-3.0.10-1.fc2
 Samba Client: Version 3.0.0-14.3E
 --
 # service winbind start
 Iniciando serviços Winbind:                                [  OK  ]
 #
 #
 # wbinfo -t
 checking the trust secret via RPC calls failed
 error code was NT_STATUS_INTERNAL_ERROR (0xc0e5)
 Could not check secret
 #
 #
 # wbinfo -u
 Error looking up domain users
 #
 #
 # wbinfo -g
 Error looking up domain groups
 #
 #
 # service winbind stop

 Desligando os serviços Winbind:                            [  OK  ]

Make sure you do not have nscd running - i had similar problems with it. You 
should be able to do this with `service nscd stop; chkconfig nscd off`
Hope that helps
H


pgpY3hSJ35I9j.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Printer (PDF) Problem

2005-03-16 Thread Hamish
On Tue, 2005-03-15 at 15:33 +, Nick Gushlow wrote:
 Hi guys,
 
 I've got a PDF printer setup on one of my Samba boxes that has been
 running fine for months; however I'm now having problems with it despite
 that fact that I've made no changes to Samba and performed no upgrades.
 
 I'm thinking that the problem might be to do with a client PC sending a
 large/corrupt stream to the printer.
 
 Problem Symptoms:
 - Samba process showing 50% CPU usage constantly
 - Windows clients attempting to print report printer not responding
 (after a long time) or crash
 
 What I've tried:
 - Renaming printer - works as normal
 - Removing corrupt spool / temp files - none found
 in /var/spool/samba /tmp /tmp/samba
 - Look for possibly offending client PC in logs - none found (could be
 I'm not looking for the right thing).
 
 Anyone have any ideas what might be wrong and how to solve it?

Are you sure its the printer? If so, maybe you could try using a
different driver - we use an HP Colour Laserjet driver here, maybe you
could experiment with others - as long as its postscript it will work.
Hope that helps,
H


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] can print test page in the redhat, but can't print through the samba share print,why?

2005-03-02 Thread Hamish
On Wed, 2005-03-02 at 15:24 +0800, [EMAIL PROTECTED] wrote:
 i can print test page in the redhat, but when i use the samba shared
 printer to print test page,
 
 it is said test page failed to print  why?
 
I had this recently, try to follow your samba log file (tail
-f /var/log/samba/samba.log on my box) and print from a windows box, and
you will see that there is an access denied (or similar) on a directory
when a samba user tries to print. Just adjust the permissions on it and
you're good to go.
PS. I am assuming you already have the drivers etc set up.


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] ACL Access Denied from Windows XP workstation-2nd try

2005-02-19 Thread Hamish
On Saturday 19 February 2005 17:20, Steve OBrien wrote:
 However when I manage the samba
 server through Windows XP MMC and attempt to change permissions on the
 security tab of the finance share I get Access is Denied.

What is the acl on the directory? (you can get it with 
`getfacl /path/to/dir`), and who is the owner?. I seem to remember getting 
this when changing permission on something the user does not own. By XP MMC 
I guess you mean the file/directory properties dialog? Not sure if you can do 
it with the computer management MMC (shares).
Hope that helps,
H


pgpq0m2IF7ff9.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Copying/migrating profiles

2005-02-19 Thread Hamish
On Saturday 19 February 2005 14:59, Colin E. McDonald wrote:
 What is the best way to copy or get the original
 user profile without having to manually copy all of the contents of the
 original profile?

Not sure of any automatic way of doing it, but you can use the windows 
profile copier.
Once the new clean profile has been made:
Right click my computer  properties  advanced  user profiles  settings. 
Select the old account and click copy to.. choose the new user folder in 
documents and settings (this will warn that there is alreadyy a profile there 
and it will be cleared  just ok it. The last bit to do is change permission 
to use (or something very similar) change this to the new username (make sure 
you put it in the format DOMAIN\user) - this will copy the profile 
flawlessly to the new user.
I think there may be quite a lot of people who would benefit from an automatic 
way of doing this - This question is asked at least once a month. Anyone have 
any suggestions on how to implement an automatic solution?
Cheers,
H


pgp10zjbZkwVi.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Mount 2k3 hidden share

2005-02-14 Thread Hamish
Hello everyone
Sorry, I know this has been asked before, but according to my searches, has 
been answered in as many different ways, I have tried a couple of them and 
failed:

Basics:
I can browse the share fine using konqueror (smb:/[EMAIL PROTECTED]/statdata$)
I am using SuSE rpms - Version 3.0.11

I would like to mount a hidden share on a server 2003 machine. It denies me 
access to the mount point after mounting.

I have suid'd smbmnt and then run this as the user I want to use to browse the 
share:
smbmount //2k3server/statdata$ /home/user/winmounts -o username=user,gid=100
Password:

This completes without error, but now I cannot browse the mount point:
ls winmounts
/bin/ls: winmounts: Permission denied
I get the same when running the command as root.

What am I doing wrong?
Thanks,
H


pgpOi1J8TFfv1.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Doubt

2005-02-11 Thread Hamish
On Thursday 10 February 2005 22:33, Jorge Bastos wrote:
 Howdy people,

 How can i resolv a little thing that i have here.

 Why findsmb doesn't show me the computer if it is using the SP2 (win xp) ?

 I use findsmb alot.

 Jorge Bastos
I think its probably the firewall - disable it on the xp machine and try again 
and I think it will work. Not sure how to get around this.


pgpYIWN8UokTQ.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Doubt

2005-02-11 Thread Hamish
On Friday 11 February 2005 10:41, Jorge Bastos wrote:
 Of course it's not the firewall, i'm not that dumb, firewall's disabled.
 I can do a nmblookup machine_name
I was trying to help by giving info that I though was useful, sorry it didnt 
work out. If I turn off my firewalls or configure them properly, findsmb 
works perfectly. You obviously are too clever for that though. It seems there 
are so many angry people on this list lately!


pgpBI2M0LdDEJ.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba - log

2005-02-09 Thread Hamish
On Wednesday 09 February 2005 10:04, n r wrote:
 hi,

 When I consult the logs of samba, I have files like:
 @ip of a station.log
 name of the station.log
 log.smbd
 nmbd.log
 smbd.log
 log.smbd
 Why do I have this redundancy?
 In /etc/samba/smb.conf, I have:
 log file = /var/log/samba/%m.log
 log level = 5
 max log size = 5000

Did you run smbd before you changed this entry? if so, its probably from your 
old conf file. Try to tail -f the log.smbd (and all the files that are not in 
your smb.conf) and see if they are growing, I guess that they wont.
Hope that helps,
H


pgpEXYojLPNwk.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Active Directory + Samba 3.0.10 - how to deal with owners and permissions

2005-01-28 Thread Hamish
[EMAIL PROTECTED] wrote:
Hi.
I've a running samba system that works with a ADS auth. All looks like to
work. I can get the list of Domain users and groups (wbinfo -u, wbinfo
-g), and getent passwd works too.
Now I want to share a directory(or volume) and that the
DOMAIN/Administrator be the owner of this share to get the control of it.
I don't know how samba deals with resource owners and permissions in a AD
context? Do I need to change the owner by hand to DOMAIN/Administrator in
the samba system to this share? Is it possible to say to samba that this
share is owned by DOMAIN/Administrator?.
Thanks.
I would just leave the filesystem to sort that out:
mkdir mydirectory
chown DOMAIN/Administrator mydirectory (be aware of winbind seperator =)
add the share to samba normally
Now when users browse to it (if they have permission) they will be able 
to see the owner is administrator)

This is a nice way to administer the base of a share system:
-fileroot (shared as fileroot$, browseable no, read list @ntadmin, write 
list @ntadmin)
-- share1 (shared normally)
-- share2
-- share3
-- share4

Like this, i can open up fileroot$ and set permissions on shares easily, 
also I have a back door to shares that may otherwise lock me out.

Hope that helps,
H


signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Active Directory + Samba 3.0.10 - how to deal with ownersand permissions

2005-01-28 Thread Hamish
[EMAIL PROTECTED] wrote:
I would just leave the filesystem to sort that out:
mkdir mydirectory
chown DOMAIN/Administrator mydirectory (be aware of winbind seperator =)
add the share to samba normally
Now when users browse to it (if they have permission) they will be able
to see the owner is administrator)
This is a nice way to administer the base of a share system:
-fileroot (shared as fileroot$, browseable no, read list @ntadmin, write
list @ntadmin)
-- share1 (shared normally)
-- share2
-- share3
-- share4
Like this, i can open up fileroot$ and set permissions on shares easily,
also I have a back door to shares that may otherwise lock me out.
Then, do I need to manually (or through an script) change the permissions
and ownership of the files? is not there an automatic mechanism?
I dont understand what you want? If you have a directory there already, 
you can change ownership with chmod, if you want all the files in the 
directory, you can chmod -R /dir/name/*
Files created by users will be owned by them, unless you use force user.
If you connect to the files through windows, you can set ownership and 
permissions through the normal windows method.


signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Any danger in having two shares with same name?

2005-01-27 Thread Hamish
[EMAIL PROTECTED] wrote:
Hi, 

Don't ask why I'm posing this question -- actually, I WILL explain below -- 
but is there any danger in having two shares in Samba with the same name? 

Here's our situation. We have a bunch of production machines out in the 
field. On those machines, we are constantly setting up special project shares for 
each user (different from the user's Home directory) that refer to private 
directories only accessible by that user. We define those special project 
shares in a series of smb.username.conf files, where we also define which of 
hundreds of other shares are accessible to that user particular user. The whole 
process of setting up shares is highly automated from the point of view of the 
end user. 

By the way, we reference those smb.username.conf files in the general 
smb.conf file with the statement: 

include = smb.%U.conf
... so each user sees all the shares listed in their own smb.username.conf 
file as well as all the browseable shares listed in the general smb.conf 
file. 

This arrangement was working perfectly, until we were asked to turn some of 
the systems into Primary Domain Controllers and give hundreds of users roaming 
profiles. Our users now want the special project share for each user to be 
automatically mapped as the P Drive in Windows whenever a user logs on to a 
client system. 

However, we have found that Windows won't process any shares listed in the 
smb.username.conf directories while it executes the logon.bat script during 
log on. We know the logon.bat file IS being executed -- it syncs the client time 
with the server time, and it maps any shares we specify in the general 
smb.conf file. But it won't map any shares defined in those smb.username.conf files. 

Curiously, if we run the logon.bat file again about 10 seconds after log on 
has completed, it will map the shares listed in the smb.username.conf file!. 

As a workaround, we decided to take an alternate approach to defining the 
special project shares. For each of the special project shares (that all 
users have) we put a listing in the general smb.conf file as follows: 

[Special Project Share A]
Comment = Special Folder A
path = /home/theboss/%U/Special Folder A
read only = No
write list = %U
guest ok = Yes
create mask = 0775
directory mask = 0775


So now, we have two listings for Special Project Share A -- one in the 
user's smb.username.conf file, and one in the general smb.conf file. 

The question is, is there any danger of Samba or the Windows workstations 
getting confused? Each of these duplicate shares has the SAME NAME, and refers to 
the EXACT SAME DIRECTORY on the Linux box. And has the same access and 
read/write settings. It's probably the same as if you accidentally created the same 
share twice in your smb.conf file. 

I would love to hear from a knowledgeable authority on this. 

The best solution, of course, would be to stop defining the Special Project 
Shares in the user's smb.username.conf files. However, we would have to 
make many changes in the underlying program that is creating these shares and for 
the next few months it's not practical to update the programs on so many 
individual user's machines. It's much more practical to simply send out a new 
smb.conf file to every user. 
I dont mean to be nosy, but why would every user need a copy of 
smb.conf? Do they also run their own samba servers? It sounds like a 
very interesting setup you have - what is the program that makes your 
shares? Does it rewrite your smb.conf? Could you not just remove the 
line include = smb.%U.conf? That way they would still get the project 
share, and it would not matter about the customised smb.user.conf file.

PS I dont think duplicate entries in smb.conf will hurt. I just 
discovered a duplicate in one of our include confs, and it was not 
giving any errors. (include = %L.conf - for different netbios names) It 
seems that the last read one is the one that is used.


signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] SWAT status page

2005-01-24 Thread Hamish
Hamish wrote:
Hello everyone
I have not used SWAT for quite a while, and there have been upgrades 
since last using it (currently running on 3.0.10-SUSE on a SuSE 9.0 i386 
box). It logs on fine, but it displays the status of smbd incorrectly: 
even though it is running, it displays not running. All the connections, 
shares and files are shown correctly in the status page, and I can 
verify that smbd is running with smbstatus (and the fact that my phone 
is quiet!).

I read an older post that said it may have something to do with not 
connecting by the samba boxes netbios name, but I have tried with its 
netbios name, its aliases and its IP, all of them show smbd as not running.

Some background:
I have added an A record for the samba box (some linux boxes could not 
reach it by netbios) - so I think the name is resolved with DNS rather 
than netbios, could this be the problem? Also, could any upgrades have 
been the problem (they have been done with SuSE rpms, once with sernet), 
maybe its using slightly different files or links?

Thanks for any suggestions!
H
Obviously not a common error then! I have found that clicking Start 
smbd tries to start another smbd, but fails. This appears in the log:

ERROR: smbd is already running. File /var/run/samba/smbd.pid exists and 
process id 28315 is running.

Is there any way I can point swat to the right pid (or however it gets 
the status of the services)?
Thanks,
H


signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] SWAT status page

2005-01-20 Thread Hamish
Hello everyone
I have not used SWAT for quite a while, and there have been upgrades 
since last using it (currently running on 3.0.10-SUSE on a SuSE 9.0 i386 
box). It logs on fine, but it displays the status of smbd incorrectly: 
even though it is running, it displays not running. All the connections, 
shares and files are shown correctly in the status page, and I can 
verify that smbd is running with smbstatus (and the fact that my phone 
is quiet!).

I read an older post that said it may have something to do with not 
connecting by the samba boxes netbios name, but I have tried with its 
netbios name, its aliases and its IP, all of them show smbd as not running.

Some background:
I have added an A record for the samba box (some linux boxes could not 
reach it by netbios) - so I think the name is resolved with DNS rather 
than netbios, could this be the problem? Also, could any upgrades have 
been the problem (they have been done with SuSE rpms, once with sernet), 
maybe its using slightly different files or links?

Thanks for any suggestions!
H


signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Moving fileserver

2005-01-19 Thread Hamish
Turbo Fredriksson wrote:
I'm having a problem here I'm not sure how to solve, so I
hope someone else have done the same (and succeeded :)
I have an old smb server ('tux') which is ancient (both
in software and hardware) and can't handle the load.
This machine is running version 2.2.3a-14.1 (Debian
GNU/Linux woody) with 'character set = ISO8859-1'.
The new smb server ('bella') runs samba version
3.0.10-1 (Debian GNU/Linux sarge) and is fully
UTF-8 enabled...
Now, all files from tux must somehow - this is the
main problem - be moved to bella. I can't mount
the disk from tux in bella for two reasons:
  - bella is using a very limited IDE interface
which can't find the disk (Dell PowerEdge 1800).
  - Because of the differences in NLS (?), any copy
from one disk to another will make the file names
not to show up correctly on the windows clients.
Same problem (last one) with NFS. The only way I could
find is to SMB mount tux on bella and just copy the 
files (with 'find | cpio'). This works fine, exept the
file owner and group doesn't match (root is mounting,
root is owning all files).

I went through with this, hoping I could write a script
that sets owner/group of the files on bella. But this
seemed more difficult than anticipated. Because of the
differences in NLS, the filenames won't match!
Creating a list of filenames on both machines, and diffing
those two files will give me:
-./shares/delade/Bilder/Jobb bilder/Färöarna/Mvc00019.jpg
+./shares/delade/Bilder/Jobb bilder/FAArAA¶arnMvc0001919.jpg
I hope this goes through correctly, but the line which
starts with '-' is located on 'tux' and the line which
starts with '+' is located on 'bella'. The problem
is that the file names don't match betwen the two, so
I can't take a list from tux, and just use that name
for 'chown' on bella...
There are QUITE (haven't counted, but the diff is huge) a
lot of these changes, so catching all characters and do
a translation will take ages.
And, another thing that looks weird is that some file
names don't seem to differ at all(!): 

+./shares/delade/PPV rapporter/020703 Örgryte - Örebro.xls
-./shares/delade/PPV rapporter/020703 Örgryte - Örebro.xls
Anyone that have done something like this before and
have a pointer/script to share?
One solution may be to rsync -az all the files, then copy the old tdbs 
across? not sure if they will just upgrade themselves - it might be an 
idea to upgrade tux to 3.0.10 to get the tdbs the same, then dump them 
across, the tdbs from tux should contain the username maps, and bella 
will then recognise the correct users...
Not tried it like that, but i have moved files from one server to 
another with rsync and dumped tdbs and it worked (the samba versions 
were the same though, and it was in an AD environment with winbind, so I 
guess the mappings were SID  samba user.
Not sure if that helps, but its an idea!
Cheers,
H


signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows passwords change (again)

2005-01-13 Thread Hamish
[EMAIL PROTECTED] wrote:
i will like my pass words 
I love my passwords as well! Sometimes when I'm feeling down, I just 
think of my passwords, and I'm happy again.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] sharing Outlook Contacts Calendar

2005-01-11 Thread Hamish


Dear Sirs,
what can You advice on sharing MS Outlook Conatacs  Calendar for 
samba domain ?

(I did some investigation on this subject, but I didn't find any 
beautiful solution at all)

Cheers,
Ilia Chipitsine
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

also check out www.kolab.org - this is very close to version 2 and is 
quite an easy replacement.


signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Where are Windows file permissions stored and how to change them?

2005-01-11 Thread Hamish
Florian Effenberger wrote:
Hi there,
well, im not really sure about what im going to say, but i think you
must add users to samba with smbpasswd or import them from an existing
users table.
anyone else can give some light?
adding the users is not the problem. If I added them and then just cp 
the profile, Windows complains about permission problems...

Florian
Have you tried cp -a (it saves owner and standard permissions, not sure 
about acls though)


signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Pdf printer by mail with samba 3.0.9-1

2004-12-08 Thread Hamish
Mitch (WebCob) wrote:
The problem of the connectivity error seems to have been persistant for the
duration of the windows login - so whatever I had screwed up I think I must
have fixed, but I still have concerns... (and oodles of ideas - I could use
this same process to create a fax gateway too...)
 

I also wanted to do a fax gateway, but got sidetracked by another 
project (Replacing exchange yay!) Id be really interested in how you get 
on with that. Check out http://www.hylafax.org/ before you go on, make 
sure you arent re-inventing the wheel! I did not have much time to 
investigate, but the thing that worried me was how do you get the 
recipient fax number to the fax script?

[Mitch says:] One of you had:
[Mitch says:] lpq command = lpq -P'%p'
[Mitch says:] lprm command = lprm -P'%p' %j
[Mitch says:] lppause command = lpc hold '%p' %j
[Mitch says:] lpresume command = lpc release '%p' %j
[Mitch says:] queuepause command = lpc stop '%p'
[Mitch says:] queueresume command = lpc start '%p'
[Mitch says:] And one had only lpq and lprm with nothing after the = - I
[Mitch says:] tried both ways?!?!
Further to my other email... The common important element is the line: 
print command = /usr/local/bin/pdfout1.sh %s %u %m %I

When I look at the calls to lpq -P'%p etc, they all return errors as %p's
value (the printer share name) is not defined in printcap - would doing this
have any purpose? print command seems to get called directly from the user
as the call the print job, which in theory would mean there could be many
calls to the script at once... ok I guess, but it does mean people should be
careful with simple file naming systems - ones that rely on the date or
possibly even the process id could result in duplicate files - right?
Perhaps somehow I should be using lpd to call the script? To create a proper
queueing process and serialize the conversions? Otherwise couldn't I
experience the print-of-death from my users as 100 of them start to print
a PDF all at once?
 

I worried about that too - but with the script the file is named 
$DATE-$TIME-$USER.pdf - so unless they figure out how to print more than 
one per second per user, it will probably be ok (Not sure how many 
simultaneous prints it can do, but its never caused a problem here.

If I'm way off here, please tell me where I'm heading wrong... 

Thanks for the help!
m/
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Pdf printer by mail with samba 3.0.9-1

2004-12-07 Thread Hamish
Mitch (WebCob) wrote:
-Original Message-
 

Is anyone has set a samba mail pdf printer with ADS athentification ?
 

How
 

can I setup samba for that ?
 

Same as setting up samba for anything.  The mail pdf printer is just a 
printer as far as Samba is concerned,  queing the job just happens to 
invoke a script that does the -pdf-mail thing rather than submitting it 
to an actual print queue.
 

This is what I use, it is a simple script called from smb.conf. I have 
saved the script in /usr/bin and made it executable.

#!/bin/bash
# Made by Hamish
# Simple script using ps2pdf to allow samba users to create pdf files
# invoke from samba print command = {this file} %s %U
#
# PDF will be saved directly to a samba share
PSFILE=$1
USER=$2
COMPUTER=$3
IP=$4
# DATE is todays date
# OUTDIR is the full linux path to the directory to save the pdfs
# SAMBADIR is the path for windows clients
# FINALFILE is the name of the finished pdf
# MYDOMAIN is the mail domain to mail to
DATE=`date +%H%M%S-%d%m%y`
OUTDIR=/data1/fileroot/General/pdfs
SAMBADIR=\\\dataserver\general\pdfs
FINALFILE=$USER-$DATE.pdf
MYDOMAIN=mydomain.com
ps2pdf $PSFILE $OUTDIR/$DATE-$USER.temp
## Very basic logging
#echo $USER executed smbpdfmaker  /tmp/pdflog.log
mv $OUTDIR/$DATE-$USER.temp $OUTDIR/$FINALFILE
chmod 700 $OUTDIR/$FINALFILE
echo Hi $USER, the PDF version of the file you just printed is located 
here: $SAMBADIR\\$FINALFILE It is only readable by you at the moment, so 
if you want others to be able to open it, save it outside the pdf 
folder, or email it. Please don't reply to this email. Always look twice 
before crossing a busy road.  | mail -s Your PDF -r [EMAIL PROTECTED] 
[EMAIL PROTECTED]
rm $PSFILE

Then I added this to my smb.conf
[pdfprinter]
   comment = pdf printer
   path = /var/spool/samba
   printer admin = @domadm
   printable = Yes
   printing = lprng
   print command = /usr/bin/smbpdfmaker %s %U %m %I
   lpq command = lpq -P'%p'
   lprm command = lprm -P'%p' %j
   lppause command = lpc hold '%p' %j
   lpresume command = lpc release '%p' %j
   queuepause command = lpc stop '%p'
   queueresume command = lpc start '%p'
   printer name = pdfprinter
   oplocks = No
   share modes = No
Make sure the clients use a postscript driver (I think we used an HP 
colour laser PS driver, but there are lots that work just as well) - 
when they print to it, it mails them a link to the saved pdf (we were 
mailing pdfs directly, but this way was better because they would only 
save the file from the email anyway)

Hope that helps!
PS, of course, you should already have AD integration set up and a mail 
server with the same usernames!
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] netlogin scripts

2004-12-01 Thread Hamish

3.  Does anyone have a good example of a netlogin script to simply map 
drives,
that I could  see?
Give kixtart a try, it is very flexible, and easy for mapping drives etc
http://www.kixtart.org/
You will also find a big selection of demo scripts to hack for your own 
pleasure.

Here is the section of our kixtart script that maps drives (it is called 
from a .bat file like kix32 kixscript.kix):

   Use S: /Delete
   Use S: \\server\shared  /user:fred /Password:fred 
If @ERROR = 0
  ?  S: mapped
Else
  ?  S: not mapped
EndIf
 
  Use K: /Delete
  Use K: \\anotherserver\general
If @ERROR = 0
  ?  K: mapped
Else
  ?  K: not mapped
EndIf
 
  Use T: /Delete
  Use T: \\anotherserver\DataBase
If @ERROR = 0
  ?  T: mapped
Else
  ?  T: not mapped
EndIf

  Use V: /Delete
  Use V: [EMAIL PROTECTED]
If @ERROR = 0
  ?  V: mapped
Else
  ?  V: not mapped
EndIf
 
  Use Z: /Delete
  Use Z: \\anotherserver\fred
If @ERROR = 0
  ?  Z: mapped
Else
  ?  Z: not mapped  
EndIf
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] netlogin scripts

2004-12-01 Thread Hamish

isn't that easier with the commands that are already with Windows?
net use X: \\server\share /user:username\domainname password-in-plain
Tomek
A lot easier, but I could not find a way to check group membership, get 
the current user name or modify registry settings with the available 
windows tools, kixtart does it all. And its free.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Question about samba 3.0.9

2004-11-30 Thread Hamish
Richmond Dyes wrote:
I have been setting up my domain server using FC2 and samba 3.0.9. 
First thing, for your information: In the notations in several 
sources, it tells you to user logon path = \\%L\profiles\%u  this is 
wrong.  It should be, logon path = \\%L\profiles\%U.  Now that I 
spent 5 million hours banging my head on a wall with that, how do I 
get he exist desktops on my 2000/XP machines to move to my roaming 
profiles.  When I move a user now, it makes a new desktop.  I want to 
use the user's local desktop, just transfer it to the server.  any ideas?


This seems like quite a common block! Here is my reply from a couple of 
weeks ago to a similar question:

XP and 2k will try to use a directory under documents and settings for 
users profiles, from the domain or local or roaming. If the directory 
already exists, it will try username.domain and then username.domain.001 
etc.
If you want to keep users settings, you will need to copy them over - i 
am not aware of a tool to force it to use existing settings.
To move the users over, log on as the new user, then log in as an 
administrator. Right click my computer  advanced tab  User Profiles: 
settings.
In this window, select the old user (probably COMPUTERNAME\username) and 
click copy to  Browse to documents and 
settings/newusername.domainname  OK. Change permitted to use and add 
the user in the format DOMAIN\username (just username will not work for 
domain users)
Hope that helps
H
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: 3.0.9

2004-11-24 Thread Hamish
Christian Marx wrote:
Hi,
du you know any web sources about getting sage office line to work 
with samba?

thanks,
chris

Not sure of any links Chris, it was a worry about getting it working, 
but it just worked with no trickery whatsoever. Our accounts dept is 
smallish, so there is a max of about 6 simultaneous users, but it has 
been running fine for about 6 months.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] 3.0.9

2004-11-23 Thread Hamish
Just a quick thanks to everyone involved with samba3 dev, I upgraded 
last night from 3.0.7 to 3.0.9 and it went really smoothly - just had to 
reset the permissions on /var/spool/samba so that people could print 
again! (It seems to reset perms each upgrade, but at least I know this 
now!).
We are running the following without any hassle:
Sage
Approch
Access
all ms office suite
openoffice
Outlook pst files
about 15 printers (all with point and print - yay!)
a pdf printer that emails a pdf of whatever you print to you
brilliant logging
Full integration with existing active directory user accounts (no need 
to keep a seperate list)
Easy backups
Freedom to do what we want to without having to worry about licencing 
and intimidation!
Once again, thanks everyone!
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Migration to Samba

2004-11-11 Thread Hamish
Dean Landry wrote:
I'm migrating to Samba on about 50 desktops.  After I join the domain 
(this is on Windows 2k or XP) I get a whole new set of settings (under 
documents and settings).  Is there a way to tell Windows to use the 
old directory?  It matches their username on samba if that helps.  
Note, I'm using local profiles.

Thanks,
Dean
XP and 2k will try to use a directory under documents and settings for 
users profiles, from the domain or local or roaming. If the directory 
already exists, it will try username.domain and then username.domain.001 
etc.
If you want to keep users settings, you will need to copy them over - i 
am not aware of a tool to force it to use existing settings.
To move the users over, log on as the new user, then log in as an 
administrator. Right click my computer  advanced tab  User Profiles: 
settings.
In this window, select the old user (probably COMPUTERNAME\username) and 
click copy to  Browse to documents and 
settings/newusername.domainname  OK. Change permitted to use and add 
the user in the format DOMAIN\username (just username will not work for 
domain users)
Hope that helps
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] winbind use default domain

2004-11-10 Thread Hamish
Hello Everyone
I have set winbind use default domain, but am getting this in the log:
[2004/11/10 15:16:33, 2] smbd/close.c:close_normal_file(262)
 MYDOMAIN+Debbie closed file Sage10/ACCDATA/SALINDEX.DTA (numopen=1)
[2004/11/10 15:16:34, 2] smbd/open.c:open_file(245)
 Debbie opened file Sage10/ACCDATA/NOMINAL.DTA read=Yes write=No 
(numopen=2)

Not a big deal, but any ideas why it is using MYDOMAIN+user for open and 
just user for close?

Samba 3.0.7 on SuSE 9.0
Thanks,
H
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind type email

2004-11-02 Thread Hamish
Hello all
Sorry to post this hugely off-topic, but i have no clue where to start. 
We are looking to replace an Exchange server with something with less 
licencing issues, is there a way to use windbind (or winbind-ish 
behaviour) for an email server (ie users authenticate through winbind to 
log on to imap server etc).
Once again, sorry for the mispost, even a push in the right direction 
will help!
Thanks,
H
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Network failure?

2004-11-02 Thread Hamish
Hi Darryl
Could you post the part of your samba logs where it seems to stop? (it 
would normally be in /var/log/samba/log.smbd for suse i think)
it might also be an idea to check all your tdb files with `tdbbackup -v 
/var/lib/samba/*.tdb` - these files should be in /var/lib/samba on suse 
I think.
After that try restarting samba with `/etc/init.d/smb restart` and 
`/etc/init.d/nmb restart`.

darryl penny wrote:
Hi to the list.
SuSE 9.1, Samba 3.04, + cups, dns, dhcp, apache2, squid, SuSEfirewall2.
2 x 2.0 GHz cpu + 2GB mem. Essentially LAN only.
Problem:
Server stops responding to logons, logged on users kicked out of home-drives.
This happens twice a normal working day. Memory seems to dribble away steadily
but surely...
My link via ssh (PUtty) stays good.
Question:
This has been frustrating me for some time, and I can't seem to pin down the
cause (my knowledge is in puberty).
I have come to the point of re-instalation, (copout?), but maybe someone came
across this before and is willing to point me in the right direction (please)?
TIA
Best regards,
Darryl
--
Edgemead High School, Cape Town
Tel +27215581132
Fax +27215584407
Cell +27823752081
-
Powered by SuSE 9.1 and the OpenWebmail project
--
 



signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Administrator

2004-11-01 Thread Hamish
If you add a user in the form DOMAIN\User you will be an administrator 
for that box. Maybe you just added the user as user - this will only 
work for local logins, to log in as a network user (on to the domain) 
add the user in the domain\user format, works perfectly here on xpsp2 
and w2k.

Alex Satrapa wrote:
On 29 Oct 2004, at 21:14, darryl penny wrote:
I would like to logon to some of the XP Pro boxes as a normal network 
user,
but at the same time be 'Administrator' on the machine. Adding myself 
to the
Administrator's group on the pc has no effect when logging on via the 
network.

Try the Domain Administrator's group.
Better yet, create an Administrator user on the domain (IIRC the UID 
has to be 512, gidNumber must be 512), and log in as that user. Don't 
make your day-to-day account an administrative account, especially if 
you intend to use Internet Explorer as your browser for any purpose 
(eg: Windows Update, comet cursors, the list of evils goes on).

Also check that you're running a SMB Domain, rather than a Workgroup.
Alex
If knowledge can create problems, it is not through ignorance that we 
can solve them.  --Isaac Asimov

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Missing folders when accessing via Samba ?

2004-10-11 Thread Hamish
A long shot, but maybe try `hide unreadable = no` and `hide unwriteable 
= no`?

charlie wrote:
I have the same trouble, but in my case is with Win XP machines and
G5.The G5, lost some files in transfers of big number of files, and
then this same files look like dissapear in the XP machine when you
browse from G5.You look into the XP from XP an there it is.
weird!!!
Any clues about this?
thanks
On Mon, 11 Oct 2004 07:29:19 -0400, Mario Bittencourt [EMAIL PROTECTED] wrote:
 

Hi,
I have a linux server (FC2) with samba 3.0.7 (3.0.7-2.FC2).
Everything was fine but recently I found the some folders that I used
to access from windows clients are missing.
They exist if I log on the samba server (using ssh) and ls. but does
not apper in my windows machine.  Other folders in the same share do
appear.
All folders (that appear and don't appear) have the same owner/group
and permitions.
If I put the full path (]\\samba\share\missing_folder) in my windows
explorer I can access the missing folder and use it without a problem.
I am not quite sure but it seems to have started after the latest
update of my samba version.
The machine has been rebooted since this event.
Any ideas ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
   

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] random errorsthe local drive name is already in use. This connection has not beenrestored.

2004-10-05 Thread Hamish
I think this is possibly a windows problem, I have had the same error in 
high usage workgroup situations with win2000. There is a relatively 
simple fix, I think if you search MS for the error message it is there.
H

Brad Otto wrote:
Try using:
net use * /delete /yes
Before mapping any drives in the login script.  This will clear any drives
already mapped.  I do this in my login script to get rid of the drives that
XP/2k will sometimes hold on to and not let go on reboot.
- Brad
- Original Message - 
From: Gerald Bird [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Tuesday, October 05, 2004 12:14 PM
Subject: Re: [Samba] random errorsthe local drive name is already in use.
This connection has not beenrestored.

 

I have had this problem unrelated to samba. I believe it is in the login
   

scripts. Perhaps you are using the net use /persistent switch when you do
no need to?
 

Regards,
Gerald Bird
- Original Message -
From: [EMAIL PROTECTED]
Date: Tuesday, October 5, 2004 11:05 am
Subject: [Samba] random errors the local drive name is already in use.
   

This connection has not been restored.
 

Hello,
I have random errors that I can not analyze nor fix:
when several users connect to the same Samba share, they get
sometimes
error messages
the local drive name is already in use. This connection has not
been
restored, although the connection
is still usable afterwards.
 

   

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Switch profile from local to roaming?

2004-10-03 Thread Hamish
You could try this:
on the local computer add an account, right click my computer  manage 
 Local Users and Groups  rclick  add user. Put your domain in and 
the user name (the user must be a domain user already) Make them a power 
user.
Log off, log on as new user to domain, log off (this will make a section 
for them under docs and settings.
Log on as domain admin.
Right click my computer  properties  advanced  User Profiles : Settings.
Select the old account (it will be in the format user/localmachinename)
Click Copy To
Go to the documents and settings dir (usually C:) and select the new 
domain users dir you just made by logging on as her.
Select this dir
Click Permitted to use: change
Select the DOMAIN user, ie DOMAIN\User
Press OK, account is copied exactly, log off
Log on to domain as new user, log off (this copies the files to the 
roaming location)

This has always worked for me, the only thing that sometimes does not 
work is that their desktop background changes. I normally just tell them 
to sod off if they complain, but you can get it back (it is still 
selected in the display properties, just browse for the file again and 
apply)

Hope that helps,
H
Misty Stanley-Jones wrote:
On Thursday 30 September 2004 02:58, deff wrote:
 

You had your answers right in front of ya.
Every xp includes Files and Settings transfer wizard (accessories-system
tools) for this job.
It's simple :
   

I had high hopes for this.  I went and did it this afternoon.  First I tried 
copying only the settings.  I put them in a folder on her hard drive, made 
that folder fully controllable by SAMBADOMAIN/heruser as well as 
LOCALCOMPUTER/heruser.  Logged into the Samba domain, imported her settings, 
and logged off.  Logged back in and it SAID it had transferred her settings.  
But it had not!  I don't understand why, So right now I am doing it again, 
having chosen both files AND settings.  This doesn't seem right as it is 
copying every file off her entire computer.  However I will try it and see. 

Thanks for the suggestion anyway.  :/
Misty
 

1. login as local user, run wizard, select old computer, select some
directory to store your data, click next, wait till its done, logoff.
2. login as new user, run wizard, select new computer, find directory you
stored your data to, click next, wait till its done, relogon.
You're done.
Migrated some 20 pcs with it and it was a breeze, however, there might be
some issues with file ownerships, but users don't complain so neither do I.
deff
On Wednesday 29 September 2004 19:50, Misty Stanley-Jones wrote:
   

I've got a WinXP machine that was configured for local profiles.  I have
now joined that machine to the domain, but when I try to log in as a
user, it tries to use a roaming profile.  Fine, that's what I want
anyway.  But it doesn't do the smart thing and copy the user's local
profile to roaming -- it gives an error instead.  OK, no problem, I will
change the type.  I log in as local admin and go to her profile.  It only
gives me Local as an option. Maybe it's because I'm not logged into the
domain.  OK, I log into the domain as Administrator (alias root -- uid of
0).  It doesn't even let me SEE her profile then.  Because it is local, I
assume.  So ok, I add MYDOMAIN\Administrator as a local administrator on
her machine.  It lets me see her profile now but I still can't change it
to roaming.  And every time I try to copy it into either Administrator's
directory on the server, or hers, it gives me Permission Denied.
So what is the real way to get this accomplished?
Thanks,
Misty
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: [cups.general] Re: Windows Clients keep finished jobs in Queue

2004-09-30 Thread Hamish
Misty Stanley-Jones wrote:
On Wednesday 29 September 2004 09:29, Ryan Suarez wrote:
 

I'm also seeing this problem.  We're running samba 3.0.7 with CUPS
1.1.20.  The clients printing are WinXP Professional SP1.
The jobs printed are still displayed in the Windows printer status
window, even though it's been printed already and disappears from the
CUPS printer queue list.
   

You will note that if you refresh, they disappear.  I see the problem too with 
3.0.6. Have not tested with 3.0.7 yet.  I think it's also with WinNT clients.  
Another person on this list reported the same refresh problem with files in 
Explorer too.

Misty
 

I am having the same problem. Refresh does not clear the jobs, and CUPS 
shows the jobs as printed. It is interesting to have a complete history 
of the printer, but this confuses users! Deleting the jobs works, but 
is there a way to stop them filling up the windows printer queue?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind stops responding

2004-09-29 Thread Hamish
Have you tried stopping nscd? I know it causes problems with winbind
Borut Kurnik wrote:
Hi! 

Windbind ocasionally stops responding. Both winbind processes
are still there, but eig. wbinfo -u returns Error looking up domain
users.
I've got to restart winbindd to reactivate it again. Nothing
in log.winbindd.
SuSE SLES-8 (fully updated)
samba3-3.0.7-13
winbind cache time = 180
Please, if You have any hints, ...
Thanks,
Borut
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbmount curiosity - cant mount share in rc.local

2004-09-29 Thread Hamish
No idea if it would work, but have you tried putting it in /etc/fstab?
Tomasz Chmielewski wrote:
Hello,
I would like to mount a certain share when the server is booted.
So I added the following line at the end of rc.local:
/bin/mount -t smbfs -o guest //backup/archiwizacja$ /mnt/archiwizacja
Interestingly, this doesn't mount anything, nothing is added to the 
logs either.

When I enter this line manually, after server is booted, it is mounted.
# mount -t smbfs -o guest //backup/archiwizacja$ /mnt/archiwizacja
# mount
(...)
//backup/archiwizacja$ on /mnt/archiwizacja type smbfs (0)
It makes no difference if I change the netbios name (backup) to IP 
address in this rc.local.

Of course rc.local is executed, as other programs from it are ran.
Any ideas?
Tomek
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WINBIND Problem.....

2004-09-29 Thread Hamish
Sorry for obvious question, but have you made sure that you have write 
permission to the directory you are trying to write to?

Travis Bullock wrote:
Hello again.
Still have not resolved this winbind issue, although it may not be winbind
at all.  The odd thing is, when I attempt to access a share on the Fedora C2
server running samba 3.x and winbind it will ask for a password.  If I enter
the wrong username and password, it will give me an invalid username or
password error. If I enter the correct username and password, it will give
me a Access Denied contact your
administrator...blah..blah...blahfollowed by a Network Path Not Found.
Any ideas out there?
Cheers,
Travis
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Too many handles on this pipe

2004-09-21 Thread Hamish
OK, I have managed to find the culprit for the
[2004/09/21 16:43:01, 0] rpc_server/srv_lsa_hnd.c:create_policy_hnd(111)
create_policy_hnd: ERROR: too many handles (1025) on this pipe.
error messages, to find this I changed the log file = samba.log.%m to 
get the machine name, and watched for the huge file.

It turns out that this is my 2k3 server, I have no idea why it would be 
doing this, as there is nothing special that i can think of that the 2k3 
box does.

If anyone wants logs etc please ask, i'm stumped!
Thanks,
H
EDIT: just for a laugh, i rejoined the domain, there have been no more 
of these messages! I will report again tomorrow...

Hamish wrote:
Hi Jerry
The samba server is 3.0.7-SuSE from suse rpms, running on suse 9.0. It 
is running in domain member mode, auth against w2k3 server with 
winbind. It is just a file/print server, with nothing too fancy about it.
Is there a way to find out which client is causing it?
Thanks,
Hamish

Gerald (Jerry) Carter wrote:
Hamish wrote:
| I removed and reinstalled samba 3.0.3pre2-SuSE on a SuSE 9.0
| server in a  failed attempt to upgrade to 3.0.5 (there
| were many cryptic dependancy  errors, after a day with
| google, i gave up) Everything seemed to work ok after the
| install (from suse rpms) but the  logs are full of:
|
| [datetime,0] rpc_server/srv_lsa_hnd.c:create_policy_hnd(111)
|  create_policy_hnd: ERROR: too many handles (1025) on this pipe.
The client is trying to open an excessive number of handles
on a given named pipe instance.  Any idea what application
is causing this ?  And this special about your environment?

cheers, jerry
-
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Too many handles on this pipe

2004-09-20 Thread Hamish
Hi Jerry
The samba server is 3.0.7-SuSE from suse rpms, running on suse 9.0. It 
is running in domain member mode, auth against w2k3 server with winbind. 
It is just a file/print server, with nothing too fancy about it.
Is there a way to find out which client is causing it?
Thanks,
Hamish

Gerald (Jerry) Carter wrote:
Hamish wrote:
| I removed and reinstalled samba 3.0.3pre2-SuSE on a SuSE 9.0
| server in a  failed attempt to upgrade to 3.0.5 (there
| were many cryptic dependancy  errors, after a day with
| google, i gave up) Everything seemed to work ok after the
| install (from suse rpms) but the  logs are full of:
|
| [datetime,0] rpc_server/srv_lsa_hnd.c:create_policy_hnd(111)
|  create_policy_hnd: ERROR: too many handles (1025) on this pipe.
The client is trying to open an excessive number of handles
on a given named pipe instance.  Any idea what application
is causing this ?  And this special about your environment?

cheers, jerry
-
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] wbinfo -g works, -u fails

2004-09-17 Thread Hamish
May sound stupid, but have you checked your nsswitch.conf? I made the 
mistake of forgetting to add winbind for group and had similar problems, 
also make sure nscd is not running

Matt R wrote:
Attempting to get Winbind to authenticate against a
Windows 2000 Domain, I am having one odd issue.
Running:
wbinfo -t returns a successful secret
wbinfo -g returns the builtin groups
wbinfo -u returns Error looking up domain users
None of the documentation I've found points to
anything where only -g or -u fails--its always both. 
Anyone have any ideas?

Thanks in advance
-Matt

	
		
__
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail 
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Winbind - Getting W2K-User Names Problem

2004-09-14 Thread Hamish
Have you tried to put 'winbind use default domain = no' in your 
smb.conf? This seems like the behavior that setting =yes would cause.
Hope that helps
H

Pallas Bernhard wrote:
Hallo List, 

I have set up a SAMBA 3.0.7 as a ADS-Domain Member with Kerberos and/or
rpc.
Kerberos seems to work fine.
net ads join ... was successfully.
wbinfo -t : checking the trust secret via RPC calls succeeded
wbinfo -u results in
aschmidt
agall
aglock
aklein
aschaefer
aturmus
aweiche
where  I expected 

DOMAIN+agall
DOMAIN+aklein 
What went wrong ??
Any hints are highly appreciated -- Thanx in advance!!
 
Mit freundlichen Gren

Bernhard Pallas
Mail [EMAIL PROTECTED]

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Browsing Sucks on VPN

2004-09-14 Thread Hamish
It looks like your client that is doing this, have you tried adding your 
wins/dns server to your vpn client setup? (In XP it is in properties  
tcp/ip  properties  advanced  wins/dns of the vpn connection)

Saad Ahmed wrote:
Hi,
I am using Samba on RH9 for providing namaing services. We were using WINS before for 
naming.
On networking neighborhood, I can see all computers (when I am in the office), however 
when I am travelling, I am not able to see the list. Not only that, I am unable to 
connect to my computer using \\NameOfComputer. I can connect through \\MyIpAddress.
I could see the list of computers when I was using WINS in the past. Does anyone know the solution to fix this on Samba. 

Your help would be highly appreciated.
MSA
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Winbind - Getting W2K-User Names Problem

2004-09-14 Thread Hamish
Make sure nscd is off as well, you can do this with `/etc/init.d/nscd 
stop` most of the time, restart samba afterwards as well and you should 
be ok

Pallas Bernhard wrote:
Hallo Hamish and List
yeah, this was the bug!! Thanks a lot.
But now, I have another problem: getent passwd does not show
the DOMAIN+users.
Hope you can help me in this case ?
Thanks in advance!
Bernhard

Am Di 14.09.2004 10:44 schrieb Hamish [EMAIL PROTECTED]:
 

Have you tried to put 'winbind use default domain = no' in your 
smb.conf? This seems like the behavior that setting =yes would cause.
Hope that helps
H

Pallas Bernhard wrote:
   

Hallo List, 

I have set up a SAMBA 3.0.7 as a ADS-Domain Member with Kerberos
and/or
rpc.
Kerberos seems to work fine.
net ads join ... was successfully.
wbinfo -t : checking the trust secret via RPC calls succeeded
wbinfo -u results in
aschmidt
agall
aglock
aklein
aschaefer
aturmus
aweiche
where  I expected 

DOMAIN+agall
DOMAIN+aklein 
What went wrong ??
Any hints are highly appreciated -- Thanx in advance!!
Mit freundlichen Gren
Bernhard Pallas
Mail [EMAIL PROTECTED]


 

Mit freundlichen Gren
Bernhard Pallas
Neue Schulstrasse 15
71665 Vaihingen / Enz
Telefon  07042 840019
Telefax  07042 840029
Mail [EMAIL PROTECTED]

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Giving Up On ADS

2004-09-02 Thread Hamish
This is quite simple, you will just have to add your windows users to 
the samba box for authentication (same as you would for a 2k/xp box) and 
set security = user

A. Clausen wrote:
Well, I've declared defeat, at least for the moment.  I can't get 
kerberos to talk nicely with the Win2k DC.  Not being an expert on NT4 
networks, can I just simply have the Samba box on the Win2k network 
just as a standard Lanman-style box, without Active Directory?

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Home directories in samba 3.0.6

2004-08-24 Thread Hamish
Hello all
Just in case anyone has similar problems:
We have a kixtart script which maps folders for users, I am not sure 
where it happened, but I made a mistake with users home directories. A 
couple of users were not copied from our old 2000 server during the move 
to samba and so were created manually. This worked fine with 
/homes/user, but since the upgrade to 3.0.6 some users have failed to 
connect.
This was due to case sensitivity on the directories (should have been 
/homes/User). I am not sure why this worked in 3.0.5, but 3.0.6 doe not 
like it.
Hope this helps someone,
H
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Too many handles on this pipe

2004-08-16 Thread Hamish
I'm not sure which application it is (how would I find out?) At a guess 
it may be our new LANIER LP235c Printer, the drivers are RPCS and I had 
a lot of trouble getting them to work on the samba server (I cannot use 
other drivers because there is a booklet attachment on the printer and 
RPCS is the only driver which it works with)
Thanks,

Gerald (Jerry) Carter wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hamish wrote:
| I removed and reinstalled samba 3.0.3pre2-SuSE on a SuSE 9.0
| server in a  failed attempt to upgrade to 3.0.5 (there
| were many cryptic dependancy  errors, after a day with
| google, i gave up) Everything seemed to work ok after the
| install (from suse rpms) but the  logs are full of:
|
| [datetime,0] rpc_server/srv_lsa_hnd.c:create_policy_hnd(111)
|  create_policy_hnd: ERROR: too many handles (1025) on this pipe.
The client is trying to open an excessive number of handles
on a given named pipe instance.  Any idea what application
is causing this ?  And this special about your environment?

cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBINbLIR7qMdg1EfYRAhzAAKCaKLcNFJJO8NJXcJTEukonqhUg4gCg3xaM
5WmrhlFlLn6l71q0gyHztpI=
=m37G
-END PGP SIGNATURE-

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] winbind / ldap

2004-08-12 Thread Hamish
Hello
Im not sure how to ask the question i need, but let me try:
Background:
SuSE 9.0
Samba from rpms: samba 3.0.3pre2-SuSE
Role: domain member server (winbind)
I am having a lot of trouble upgrading samba and I'm thinking of moving 
to another server. I have found that if I move the winbindd_idmap.tdb 
across, the AD / UID mappings are saved but would like to know:
a) Is this safe? (is there anything that will bomb out a few months down 
the line?)
b) can this be done with LDAP instead (I know close to nothing of LDAP, 
I have assumed it is for use as a PDC, but could it be used to store UID 
mappings as well? How 'interesting' would this be to set up?)

Thanks,
H
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind / ldap

2004-08-12 Thread Hamish
Thanks, I will have a read and let you know, any idea if there is a way 
to import/export idmaps?
H

Manfred Odenstein wrote:
its on http://us4.samba.org/samba/docs/man/Samba-Guide/happy.html#ch6-ldifadd
Am Donnerstag, 12. August 2004 11:19 schrieb Hamish:
 

Hello
Im not sure how to ask the question i need, but let me try:
Background:
SuSE 9.0
Samba from rpms: samba 3.0.3pre2-SuSE
Role: domain member server (winbind)
I am having a lot of trouble upgrading samba and I'm thinking of moving
to another server. I have found that if I move the winbindd_idmap.tdb
across, the AD / UID mappings are saved but would like to know:
a) Is this safe? (is there anything that will bomb out a few months down
the line?)
b) can this be done with LDAP instead (I know close to nothing of LDAP,
I have assumed it is for use as a PDC, but could it be used to store UID
mappings as well? How 'interesting' would this be to set up?)
Thanks,
H
   

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Refusing to create user that already exists

2004-08-12 Thread Hamish
Help!
My Samba server keeps falling over with this in the winbind logs 
(USERNAME replaced):

[2004/08/12 14:54:02, 0] nsswitch/winbindd_acct.c:winbindd_create_user(884)
 winbindd_create_user: Refusing to create user that already exists 
(USERNAME)

Has anyone seen this?
Thanks
H
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Too many handles on this pipe

2004-08-02 Thread Hamish
I removed and reinstalled samba 3.0.3pre2-SuSE on a SuSE 9.0 server in a 
failed attempt to upgrade to 3.0.5 (there were many cryptic dependancy 
errors, after a day with google, i gave up)
Everything seemed to work ok after the install (from suse rpms) but the 
logs are full of:

[datetime,0] rpc_server/srv_lsa_hnd.c:create_policy_hnd(111)
 create_policy_hnd: ERROR: too many handles (1025) on this pipe.
This is repeated around every 3 seconds.
Any ideas?
Thanks,
H
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Upgrade question - please be gentle! - failed dependencies?

2004-07-30 Thread Hamish
Lat night I removed samba 3.0.3pre2 from the suse 9.0 box, then tried to 
install 3.0.5 from rpms from the suse ftp mirror on mirror.ac.uk - I had 
a lot of failed dependencies with it:
error: Failed dependencies:
   liblber.so.199 is needed by samba-3.0.5-0.1
   libldap.so.199 is needed by samba-3.0.5-0.1
   libpopt.so.0 is needed by samba-3.0.5-0.1
   liblber.so.199 is needed by samba-client-3.0.5-0.1
   libldap.so.199 is needed by samba-client-3.0.5-0.1
   libpopt.so.0 is needed by samba-client-3.0.5-0.1
   liblber.so.199 is needed by samba-winbind-3.0.5-0.1
   libldap.so.199 is needed by samba-winbind-3.0.5-0.1
   libpopt.so.0 is needed by samba-winbind-3.0.5-0.1
   samba conflicts with samba3-3.0.5-1
   samba-client conflicts with samba3-client-3.0.5-1
   samba-client conflicts with samba3-winbind-3.0.5-1

After hunting through google to try and find what provides these and 
just ending up with source code, I gave up and reinstalled 3.0.3pre2 
from suse rpms, this did not comlain of any dependencies and (seemed to) 
install perfectly. I had to change the smb.conf, but otherwise 
everything seemed the same.
This morning, people cannot print to its printers (access denied)  and 
the samba log is full of this:

[2004/07/30 09:58:35, 0] rpc_server/srv_lsa_hnd.c:create_policy_hnd(111)
 create_policy_hnd: ERROR: too many handles (1025) on this pipe.
[2004/07/30 09:58:35, 0] rpc_server/srv_lsa_hnd.c:create_policy_hnd(111)
 create_policy_hnd: ERROR: too many handles (1025) on this pipe.
[2004/07/30 09:58:35, 0] rpc_server/srv_lsa_hnd.c:create_policy_hnd(111)
 create_policy_hnd: ERROR: too many handles (1025) on this pipe.
[2004/07/30 09:58:35, 0] rpc_server/srv_lsa_hnd.c:create_policy_hnd(111)
 create_policy_hnd: ERROR: too many handles (1025) on this pipe.
[2004/07/30 09:58:35, 0] rpc_server/srv_lsa_hnd.c:create_policy_hnd(111)
 create_policy_hnd: ERROR: too many handles (1025) on this pipe.
Once again, google returns nothing useful. I have no clue what this 
could be about, any help welcome!

Thanks
H
Craig White wrote:
On Thu, 2004-07-29 at 09:34, Hamish wrote:
 

Thanks Craig,
Will it work if I remove samba 3.0.3 completely (rpm -e) and then 
install 3.0.5?

Craig White wrote:
   

This is an act of pure desperation and nothing that I could ever in good
conscience suggest to someone. Not charming doesn't begin to describe
the consequences that may occur.
 

---
that is what I would do if it were me
Craig
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Read Write by everyone over network

2004-07-30 Thread Hamish
Hi Robin,
Make sure that the directory /shared is writeable by the user you are 
connecting as: the easiest way to do this is `chmod 777 /shared` (not 
sure if there is a better permission to put on it, but it works)
Hope that helps,
H

Robin Wilson wrote:
Hi
I have managed to successfully set samba up so that I can access my windows
shares from linux and my linux shares from windows, but, when I access my
linux shares from windows I cannot write to them.
Here is an excerpt from my smb.conf file:
[shared]
comment = Shared directory on Linux box
path = /shared
guest ok = yes
writeable = yes
Why doesn't this work?
What should I be doing instead?
Thanks in advance
Robin
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.732 / Virus Database: 486 - Release Date: 30/07/04
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Joining Linux to Windows 2000 domain

2004-07-30 Thread Hamish
Hi Tim
Have you edited your /etc/nsswitch.conf file? This needs to be edited if 
you are running as a domain member server. Look in the documentation if 
you have problems, but you should be able to edit this file fairly easily.
Look for the lines that look like this:

passwd: files (winbind)
shadow: files
group: files (winbind)
they should be similar to that (the stuff in brackets is what you should 
add (without the brackets).

Restart winbind and smb and you should be good to go. (Make sure your 
shares are writeable as well ie your [public] share: as root type `chmod 
777 /export/public` - this gives the world read, write and execute on 
the dir.

PS. Try to respond via the samba list, this makes it possible for other 
people to search (so if someone else has the same problem, they can just 
search the list - reply all works!)

Tim Barone wrote:
Hamish, I feel like I'm getting close! I worked on it for a while 
yesterday and when I tried to access the e2efileserver from windows 
explorer, I got a Connect to e2efileserver login window. After 
entering name and password, it just hung, nothing happended.

I was reading some documentation on modifying PAM files to allow users 
to access the Linux box. Do you think this is needed in my case

Thanks again for your time and trying to help a beginning Linux user!!!
Tim

From: Hamish [EMAIL PROTECTED]
To: Tim Barone [EMAIL PROTECTED], Samba List 
[EMAIL PROTECTED]
Subject: Re: [Samba] Joining Linux to Windows 2000 domain
Date: Thu, 29 Jul 2004 16:12:43 +0100

Hi Tim
You might not see the e2efileserver there because you are not running 
netbios - this is easy to check, just type `/etc/init.d/nmb start`. 
This will start the netbios daemon and you should then be able to get 
to your server from windows explorer by \\e2efileserver.
You will also need to make sure all those services start when the 
server reboots (hopefully not too often!), im not too sure how fedora 
gives a gui to your services, but from a console this should work: 
`chkconfig --level 35 smb on` repeat this for nmb and winbind (swap 
nmb etc for smb) - this will make samba winbind and nmb start when 
the server switches to runlevel 3 or 5 (by default you will be 
starting in runlevel 5).

Since you will be running e2efileserver as a domain member, I think 
it would be a good idea to also make sure it does not try to win 
browser elections (i may be wrong, but i saw some strange things 
happening when my server started trying) you can do this by adding: 
local master = no and preferred master = no to your smb.conf

Hopefully that should give you all you need to run ;)
H
Tim Barone wrote:
Hamish, thanks so much for getting back to me! I made sure to follow 
all of your suggestions. Also, I made a few changes to smb.conf and 
now wbinfo -u gives me a list of users and wbinfo -g gives me a list 
of groups. Making some progress!!!

I made the following changes to smb.conf:
security = ads
When I go to a Windows machine and view the entire network, I do not 
see an e2efileserver icon (e2efileserver is my Linux box). Any 
further ideas on what I can do

Tim

From: Hamish [EMAIL PROTECTED]
To: Tim Barone [EMAIL PROTECTED]
CC: [EMAIL PROTECTED]
Subject: Re: [Samba] Joining Linux to Windows 2000 domain
Date: Thu, 29 Jul 2004 09:42:18 +0100
Make sure winbind is running (have you edited nsswitch.conf to 
include winbind?) and that nscd is not running. You can stop nscd 
and restart all the samba services with `/etc/init.d/nscd stop` 
then `/etc/init.d/smb restart` `/etc/init.d/nmb restart` 
`/etc/init.d/winbind restart`
Hope this helps

Tim Barone wrote:
Hello, I am new to Linux, Samba, and actually servers in general. 
I am attempting to set up a Linux file server and join it to a 
Windows 2000 domain. All I want to be able to do is get files from 
the linux file server and put files on it. I do not want it to be 
the domain controller.

I join the domain using: net join -S 10.10.10.40 
-UAdministrator%password

It tells me that I have joined the domain.
wbinfo -t  wbinfo -p work fine!
Wbinfo -u gives me: Error looking up domain members
Wbinfo -g gives me: Error looking up domain groups
Any ideas on what to do?
Thanks a bunch!
Linux is Fedora Core 1
Samba is 3.0
smb.conf file:
[global]
workgroup = EIIECOMM
netbios name = e2efileserver1
realm = EIIECOMM.COM
idmap uid = 1 - 15000
idmap gid = 1 - 15000
winbind separator = +
winbind use default domain = Yes
use sendfile = Yes
server string= Samba Server
printcap anme = /etc/printer
load printers = yes
log file = /var/log/samba/%m.log
max log size = 50
security = domain
password server = *
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = no
os level = 33
wins support = no
wins server = 10.10.10.40 (I'm not sure this is a wins server)
dns proxy = no
[homes]
comment = Home Directories
valid users = %S
browseable = yes
writeable = yes
[tmp]
comment = Temporary file space
path = /tmp
writeable = yes
guest ok = yes
[public

Re: [Samba] Joining Linux to Windows 2000 domain

2004-07-29 Thread Hamish
Make sure winbind is running (have you edited nsswitch.conf to include 
winbind?) and that nscd is not running. You can stop nscd and restart 
all the samba services with `/etc/init.d/nscd stop` then 
`/etc/init.d/smb restart` `/etc/init.d/nmb restart` `/etc/init.d/winbind 
restart`
Hope this helps

Tim Barone wrote:
Hello,  I am new to Linux, Samba, and actually servers in general.  I 
am attempting to set up a Linux file server and join it to a Windows 
2000 domain.  All I want to be able to do is get files from the linux 
file server and put files on it.  I do not want it to be the domain 
controller.

I join the domain using:  net join -S 10.10.10.40 
-UAdministrator%password

It tells me that I have joined the domain.
wbinfo -t   wbinfo -p   work fine!
Wbinfo -u gives me: Error looking up domain members
Wbinfo -g gives me: Error looking up domain groups
Any ideas on what to do?
Thanks a bunch!
Linux is Fedora Core 1
Samba is 3.0
smb.conf file:
[global]
workgroup = EIIECOMM
netbios name = e2efileserver1
realm = EIIECOMM.COM
idmap uid = 1 - 15000
idmap gid = 1 - 15000
winbind separator = +
winbind use default domain = Yes
use sendfile = Yes
server string= Samba Server
printcap anme = /etc/printer
load printers = yes
log file = /var/log/samba/%m.log
max log size = 50
security = domain
password server = *
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = no
os level = 33
wins support = no
wins server = 10.10.10.40 (I'm not sure this is a wins server)
dns proxy = no
[homes]
comment = Home Directories
valid users = %S
browseable = yes
writeable = yes
[tmp]
comment = Temporary file space
path = /tmp
writeable = yes
guest ok = yes
[public]
comment = Data
path = /export/public
public = yes
writeable = yes
_
Is your PC infected? Get a FREE online computer virus scan from 
McAfee® Security. 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Upgrade question - please be gentle! - failed dependencies?

2004-07-29 Thread Hamish
Thanks for you help, I tried to update with rpm -Uvh and it found a lot 
of failed dependencies: liblber.so.199, libldap.so.199, libpopt.so.199 
etc - did you have these same problems?

rruegner wrote:
Hi, i have a big smb/ldap setup and running
with 3.04 but with kernel 2.4.21 suse 9
and i had no Problems with updating it ( all the way up from version 
3.0-3.04) it worked all like charme as before,
but i recommend to use samba packs from ftp suse projects samba, or 
self compiledyesterday i looked there there where patched 3.04 
packs against the swat sec bug ,but no 3.05

I know problems with sernet suse samba packs after update relating to 
cups
Regards

Hamish schrieb:
Hello
I am planning to upgrade our production samba server (3.0.3pre2-SuSE 
on SuSE 9.0, kernel 2.6.5-10) tonight to 3.0.5. Is there anything I 
should know about things breaking during this upgrade? I will just do 
it with `rpm -Uvh --repackage samba*` - I have tried this on a test 
server and it seems to work ok, but if anyone has some info that 
might be useful I would be grateful!

Thanks
H


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] move samba file and print shares

2004-07-29 Thread Hamish
Hello all
Is this possible?:
samba3.0.3pre2 running as domain member with winbind, acls on reiser 
providing file security
this is all on a seperate disk mounted as 'data1'

Could I take this disk, put it in a new box, mount it again as data1, 
then copy the old smb.conf over to the new box? (I would also join the 
domain with the same name as the old box)

Thanks in advance,
H
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Joining Linux to Windows 2000 domain

2004-07-29 Thread Hamish
Hi Tim
You might not see the e2efileserver there because you are not running 
netbios - this is easy to check, just type `/etc/init.d/nmb start`. This 
will start the netbios daemon and you should then be able to get to your 
server from windows explorer by \\e2efileserver.
You will also need to make sure all those services start when the server 
reboots (hopefully not too often!), im not too sure how fedora gives a 
gui to your services, but from a console this should work: `chkconfig 
--level 35 smb on` repeat this for nmb and winbind (swap nmb etc for 
smb) - this will make samba winbind and nmb start when the server 
switches to runlevel 3 or 5 (by default you will be starting in runlevel 5).

Since you will be running e2efileserver as a domain member, I think it 
would be a good idea to also make sure it does not try to win browser 
elections (i may be wrong, but i saw some strange things happening when 
my server started trying) you can do this by adding: local master = no 
and preferred master = no to your smb.conf

Hopefully that should give you all you need to run ;)
H
Tim Barone wrote:
Hamish, thanks so much for getting back to me! I made sure to follow 
all of your suggestions. Also, I made a few changes to smb.conf and 
now wbinfo -u gives me a list of users and wbinfo -g gives me a list 
of groups. Making some progress!!!

I made the following changes to smb.conf:
security = ads
When I go to a Windows machine and view the entire network, I do not 
see an e2efileserver icon (e2efileserver is my Linux box). Any further 
ideas on what I can do

Tim

From: Hamish [EMAIL PROTECTED]
To: Tim Barone [EMAIL PROTECTED]
CC: [EMAIL PROTECTED]
Subject: Re: [Samba] Joining Linux to Windows 2000 domain
Date: Thu, 29 Jul 2004 09:42:18 +0100
Make sure winbind is running (have you edited nsswitch.conf to 
include winbind?) and that nscd is not running. You can stop nscd and 
restart all the samba services with `/etc/init.d/nscd stop` then 
`/etc/init.d/smb restart` `/etc/init.d/nmb restart` 
`/etc/init.d/winbind restart`
Hope this helps

Tim Barone wrote:
Hello, I am new to Linux, Samba, and actually servers in general. I 
am attempting to set up a Linux file server and join it to a Windows 
2000 domain. All I want to be able to do is get files from the linux 
file server and put files on it. I do not want it to be the domain 
controller.

I join the domain using: net join -S 10.10.10.40 
-UAdministrator%password

It tells me that I have joined the domain.
wbinfo -t  wbinfo -p work fine!
Wbinfo -u gives me: Error looking up domain members
Wbinfo -g gives me: Error looking up domain groups
Any ideas on what to do?
Thanks a bunch!
Linux is Fedora Core 1
Samba is 3.0
smb.conf file:
[global]
workgroup = EIIECOMM
netbios name = e2efileserver1
realm = EIIECOMM.COM
idmap uid = 1 - 15000
idmap gid = 1 - 15000
winbind separator = +
winbind use default domain = Yes
use sendfile = Yes
server string= Samba Server
printcap anme = /etc/printer
load printers = yes
log file = /var/log/samba/%m.log
max log size = 50
security = domain
password server = *
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = no
os level = 33
wins support = no
wins server = 10.10.10.40 (I'm not sure this is a wins server)
dns proxy = no
[homes]
comment = Home Directories
valid users = %S
browseable = yes
writeable = yes
[tmp]
comment = Temporary file space
path = /tmp
writeable = yes
guest ok = yes
[public]
comment = Data
path = /export/public
public = yes
writeable = yes
_
Is your PC infected? Get a FREE online computer virus scan from 
McAfee Security. 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

_
Overwhelmed by debt? Find out how to Dig Yourself Out of Debt from 
MSN Money. http://special.msn.com/money/0407debt.armx


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Upgrade question - please be gentle! - failed dependencies?

2004-07-29 Thread Hamish
Thanks Craig,
Will it work if I remove samba 3.0.3 completely (rpm -e) and then 
install 3.0.5?

Craig White wrote:
This is an act of pure desperation and nothing that I could ever in good
conscience suggest to someone. Not charming doesn't begin to describe
the consequences that may occur.
Craig
On Thu, 2004-07-29 at 03:36, rruegner wrote:
 

Hi,
i updated my systems with the killing method
rpm --nodeps --force
i know this is not charming but it worked with the suse packs since 
samba 3.0 up to samba 3.04
but i strongly recommend to test this first on a test system 
Best Regards

Hamish schrieb:
   

Thanks for you help, I tried to update with rpm -Uvh and it found a lot 
of failed dependencies: liblber.so.199, libldap.so.199, libpopt.so.199 
etc - did you have these same problems?

rruegner wrote:
 

Hi, i have a big smb/ldap setup and running
with 3.04 but with kernel 2.4.21 suse 9
and i had no Problems with updating it ( all the way up from version 
3.0-3.04) it worked all like charme as before,
but i recommend to use samba packs from ftp suse projects samba, or 
self compiledyesterday i looked there there where patched 3.04 
packs against the swat sec bug ,but no 3.05

I know problems with sernet suse samba packs after update relating to 
cups
Regards

Hamish schrieb:
   

Hello
I am planning to upgrade our production samba server (3.0.3pre2-SuSE 
on SuSE 9.0, kernel 2.6.5-10) tonight to 3.0.5. Is there anything I 
should know about things breaking during this upgrade? I will just do 
it with `rpm -Uvh --repackage samba*` - I have tried this on a test 
server and it seems to work ok, but if anyone has some info that 
might be useful I would be grateful!

Thanks
H
 


   

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Upgrade question - please be gentle!

2004-07-28 Thread Hamish
Hello
I am planning to upgrade our production samba server (3.0.3pre2-SuSE on 
SuSE 9.0, kernel 2.6.5-10) tonight to 3.0.5. Is there anything I should 
know about things breaking during this upgrade? I will just do it with 
`rpm -Uvh --repackage samba*` - I have tried this on a test server and 
it seems to work ok, but if anyone has some info that might be useful I 
would be grateful!

Thanks
H
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Restricting file types

2004-07-09 Thread Hamish
This works well for file servers only, but there is a way round it which 
might be good to bear in mind -
Say you have blocked /*.php/*.asp/ to prevent samba users making scripts 
on your web server (i am guessing that you have shared your webroot?)
Now make a php file, rename it to file.txt and move it to the server - 
no problem. Once it is on the server, rename it to file.php. The file 
disappears, but only to samba users - the file is still there named 
file.php and can be accessed by anything other than samba (ie apache)

Mike Stewart wrote:
Yes, and very useful it is too :-)
In the Globals section I put this to stop all users cluttering up the server
with mp3 files. You can put it in each required share definition rather than
globals though.
veto files = /*.mp3/
basically it starts with a / then file name and type and then ends with /
so,  veto files = /*.bat/*.scr/mike.*/
would stop all bat and scr files, and any file called mike with any ext.
I use SWAT for configuring my Samba shares and the help file explains it
well.
HTH
Mike
- Original Message - 
From: Bruce Embrey [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, July 08, 2004 2:36 PM
Subject: [Samba] Restricting file types

Samba List:

Is it possible to limit what filename extensions can be stored in a
samba share? We use samba to allow our windows web designers to use drag
and drop when deploying new pages on our website. We want to be able to
limit which filename extensions can be saved to these shares. Is this
possible and if not and alternatives?

Bruce Embrey

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Adding printers

2004-07-06 Thread Hamish
Hello all
Is there a way to make printers show up on a samba server for windows 
clients without restarting smbd and nmbd?
Thanks,
H
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Moving Profiles

2004-07-06 Thread Hamish
I guess there are not too many users to move over? (also that you are 
using win2k/xp) There is a way to move the profiles *after* they have 
been joined to the PDC.
Log in to the machine with the new username, this will create a new 
profile, log out immediately. Log in as an admin account (but not the 
addministrator that the users were using) Right click my computer  
properties  advanced  user profiles  settings. Select the old account 
and click copy to.. choose the new user folder in documents and settings 
(this will warn that there is alreadyy a profile there and it will be 
cleared  just ok it. The last bit to do is change permission to use (or 
something very similar) change this to the new username (make sure you 
put it in the format DOMAIN\user) - this will copy the profile 
flawlessly to the new user, a bit slow if there are a number of them, 
but less than 5 or so and its a good fix.
Hope that helps,
H

Mark Lidstone wrote:
Hi everyone,
I'm about to install a Samba PDC in a network that previously was
working as a workgroup.  All the users have been logging into their
local machines as administrator and all with the same password.
What I would really like to do is to move their profiles with them, but
as they are all using the same username and the like I can see this is
going to cause problems.
So far I have been thinking about doing the following:
1) Create a second administrator account on each machine
2) Login as the second administrator and copy the
administrator profile to another folder, renamed for the new user's
username (e.g. Documents and Settings\Administrator - Documents and
Settings\DOMAIN.username)
3) Change ownership/permissions on the new profile folder to
match that of the new user
I'm also planning on making sure that roaming profiles are disabled
using the LocalProfile registry key that Michael Lueck recently posted
about on here.  Users will have a network-home folder that will be
backed up which should be plenty enough for them.
Can anyone point out what problems this will cause?  I think there is
going to be an issue with the registry, is the SID in there somewhere?
How can I reset it?  Is there a better way of doing this?
Many thanks,
Mark Lidstone
IT and Network Support Administrator
BMT SeaTech Ltd
Grove House, Meridians Cross, 7 Ocean Way
Ocean Village, Southampton.  SO14 3TJ. UK
Tel: +44 (0)23 8063 5122 
Fax: +44 (0)23 8063 5144

E-Mail:  mailto:[EMAIL PROTECTED]
Website: www.bmtseatech.co.uk

==
Confidentiality Notice and Disclaimer: 
The contents of this e-mail and any attachments are intended only for
the
use of the e-mail addressee(s) shown. If you are not that person, or one
of those persons, you are not allowed to take any action based upon it
or
to copy it, forward, distribute or disclose the contents of it and you
should please delete it from your system. BMT SeaTech Limited does not
accept liability for any errors or omissions in the context of this
e-mail
or its attachments which arise as a result of Internet transmission, nor
accept liability for statements which are those of the author and not
clearly made on behalf of BMT SeaTech Limited.

==
 
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] on the fly access and privilege determination

2004-07-05 Thread Hamish
You could enable ACLs and set permissions with those, using the normal 
windows security dialog. There is a howto here: 
http://www.bluelightning.org/linux/samba_acl_howto/
Once ACLs are working, just set up permissions as you would on a windows 
file server.
If you do not want to use ACLs you could use the options in smb.conf:

[teachersonly]
write list = (users or groups who can write to the folder)
valid users = (users or groups who can access the folder)
You will probably have more flexibility using ACLs
Hope that helps
Sahibzada Junaid Noor wrote:
Hi,
  
  I have a active directory domain of windows 2000.

inside AD i have three user groups. Teachers, students
and administration.
 every user has his home directory created on the
fly. the umask is 0022.
now what i want is that apart from users accessing
there home directories there should be some other
folders too which they can access.
like teachers would like to access the assignments
folder where students can paste there assignments. but
students can only paste and cannot read in this
folder.
also i want a folder which both teachers and students
can accees like the lecture notes folder which
contains 
the lecture notes for the current academic session.

what infact i would like to have is that the rights
and permissions of a certain user to be determined on
the fly based on his membership of a certain active
directory user group to which he belongs.
like only a user belonging to teacher group can access
a assignments folder. 

but some one belonging to either teacher or students
can access lecture notes.
the same way no one except the administration can
acceess the confidential folders containing the
progress reports .
i hope i have been clear
can any one send a smb.conf which contains such
settings.

=
 Sahibzada Junaid Noor  
 Ph   #  (+92) (051) 5950 940
 Cell #   (+92) (0333) 5223586
 Qazi plaza,Third Floor,Commerical Market,Chaklala Scheme 3,
 Rawalpindi
 Islamic Republic of Pakistan 




	
		
__
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail 
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba/win2k ??

2004-07-02 Thread Hamish
It depends on how they are authenticating, do they log on to a domain or 
is it just a workgroup?

Sheakoski, Corey M (PKI) wrote:
You could also use valid users = user1 user2 @group1 @group2 
I was hoping to do it that way, but have so far been able to get it to work.
Enter that into the config file it will block out users by asking for a
username and password. Is there somewhere else I need to enter the username
or is there somewhere I have to make up some kind of password? Thanks again.

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The semaphore timeout period has expired

2004-06-25 Thread Hamish
Hi Oleg
It was not a samba problem at all! I did 2 things: changed the network 
card from the onboard Asus P4P800 Delux Mobo to an intel 1000. I had 
used a patch to update the kernel for the boards onboard RAID (it was 
not a raid patch, it just allowed the 2 extra ide channels to be seen by 
linux) and I reverted back to my old kernel (2.6.5-10 from SuSE rpm)
I have made no changes to the e1000 driver from default and it works fine.
It was a strange problem because the windows box that the copy was 
initiated from would give the error (The semaphore timeout period has 
expired) and the linux box would then slow down and eventually hang. I 
could not get anything to work - ssh, telnet, even direct on the box - 
the only way to get out of the hang was the 'hard' way...

The intel card now seems to be working fine, but i think the old one 
would be ok as well, I think it was a buggy kernel due to the patch. I 
am now using the board without the extra IDE channels (ASUS support 
linux by giving a binary only driver for redhat 7.2 - bollox. The patch 
I found was made by someone with the same problem)

I know it is off list, sorry, but if you find a way to make those IDE 
channels work reliably, please let me know!

Cheers,
Hamish
Aleksandrov, Oleg wrote:
Hello Hamish.
I found your message just googling for Suse and sk98lin.
Did you solve your problem?
I had the same case and only way to restore was to change NIS driver speed
settings from AUTO to 10Mb. And it was not related to OS as the same problem
is in WXP ( I have dual boot, ASUS P4P800, integrated GB NIS ).
Oleg.
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] NT Backup patch - BUG ID 1345

2004-06-25 Thread Hamish
Hello all,
Sorry for asking such a silly question here, it is not exactly on topic:
I am having problems with NT backup and samba 3.0.3pre2-SUSE. I 
installed this from rpms which was really easy, I have now discovered 
that the problem I am having with NT Backup (getting access denied 
errors against the samba server) is patchable. This is my problem. I am 
not proud.
Please could someone point me in the right direction for patching my 
installation, bearing in mind that i have installed from rpms and that i 
am a bit of an idiot.
Cheers,
Hamish
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Unjoin Domain

2004-06-16 Thread Hamish
Hello,
I would like to rename my w3k AD domain (I am fine with this process) - 
one thing that worries me is how the samba 3.0.3pre2 Suse 9.0 server 
will handle it. Should I delete the computer account from AD? Is there 
an unjoin/rejoin domain procedure for samba?
For the domain name change to work, the AD needs to be in native mode, 
can anyone see any problems with samba switching from mixed to native 
mode? Apparently winXP xlients will be able to rejoin the domain after a 
couple of reboots.
Thanks, sorry if there are a lot of questions!

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Erronous username character substitution ( %u )

2004-06-16 Thread Hamish
Have you tried with %U (not %u)? I have not tried this, but apparently 
it is the session username (ie requested username, not necessarily the 
given username).

Jeroen Vogelpoel wrote:
Good day,
I'm having a few problems with Samba 3.0.2a, specifically involving 
the username character substitute, %u. For some reason, Samba resolves 
the %u character wrongly when used in the path parameter, where it 
resolves it as the guest account. However, the server in question has
map to guest set to never and both guest ok and guest only set 
to 0. The odd thing is, however, that the %u substitution in the 
comment parameter is resolves correctly to the username, showing a 
comment as expected with the mapped username. However, the logs show 
that even though the user is mapped and then authenticated correctly, 
it still connects to the share as a guest user. The question is, how 
do I get Samba to properly connect to the share with the authenticated 
username instead of the guest account? Also, given the configuration 
given below, I should be unable to access the nico share, because my 
win2k username maps to jeroen. Samba connects me as the guest user 
again, giving me access to the share, even after I added invalid 
users = nobody as a test. Following are a few testparm dumps ( only 
modified parameters ) and the relevant log entries:

*** `testparm -L Websites` dump
[global]
workgroup = ECHELONPROJECT
netbios aliases = Administration, Websites
server string = Samba %v ( %L )
username map = /etc/samba/smbusers
log level = 2
log file = /var/log/samba3/samba.%m
deadtime = 120
socket options = IPTOS_LOWDELAY TCP_NODELAY
comment = Shared directory at %L
hosts allow = 192.168.0.0/24
include = /etc/samba/includes/websites.shares
[jeroen]
path = /home/jeroen/public_html
valid users = jeroen
read only = No
create mask = 0755
[nico]
path = /home/nico/public_html
valid users = nico
read only = No
create mask = 0755
[website]
comment = %u's website
path = /home/%u/public_html
read only = No
create mask = 0755
( Default values such as security = user have been left out. )
*** Log entries
[2004/06/16 15:14:40, 2] auth/auth.c:check_ntlm_password(305)
  check_ntlm_password:  authentication for user [Jeroen Vogelpoel] - 
[jeroen] - [jeroen] succeeded
[2004/06/16 15:14:40, 2] lib/access.c:check_access(324)
  Allowed connection from  (192.168.0.2)
[2004/06/16 15:14:41, 2] lib/access.c:check_access(324)
  Allowed connection from  (192.168.0.2)
[2004/06/16 15:14:41, 2] lib/access.c:check_access(324)
  Allowed connection from  (192.168.0.2)
[2004/06/16 15:14:41, 1] smbd/service.c:make_connection_snum(705)
  terra (192.168.0.2) connect to service jeroen initially as user 
nobody (uid=65534, gid=65534) (pid 19841)
[2004/06/16 15:14:44, 2] lib/access.c:check_access(324)
  Allowed connection from  (192.168.0.2)
[2004/06/16 15:14:44, 0] smbd/service.c:make_connection_snum(677)
  '/home/nobody/public_html' does not exist or is not a directory, 
when connecting to [website]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba + ACL backup solution

2004-06-15 Thread Hamish
I did not know that webmin had a module to backup files as well as ACLs 
(all i could find was a dump module), could you give me a url to get the 
module from pls?

Stephen Kuhn wrote:
On Tue, 2004-06-15 at 21:42, Hamish wrote:
 

Hello all
I am looking for a good backup solution for samba shares, I do not mean 
to start a jihad between rival backup religions, but I would appreciate 
any suggestions.
I have tried star and love it, unfortunately there does not seem to be a 
gui or any frontend that can be used with it (it needs to be available 
to a couple of GUI-only (read as windows admin) people).
Thanks again,
Hamish
   

Er, Hamish - what about using Webmin - which can be accessed from any
machine, any browser, any OS on the network...eh?
stephen kuhn - proprietor
==
illawarra computer services
a kuhn media australia company
http://kma.0catch.com
mobile: 0410.728.389
--
21:46:59 up 2 days, 2:10, 4 users, load average: 0.27, 0.20, 0.13
--
 * This message was composed on a 100% Microsoft free computer *
 We expressly refuse to utilise Microsoft DRM encoded documents
--
This email is virus-free because we don't use Microsoft products
It is the business of the future to be dangerous. -- Hawkwind
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Printer Drivers

2004-06-11 Thread Hamish
I am no expert but I struggled for a bit with this as well... What it 
looks like you need to do is add a raw print queue, this is fairly 
simple, you may need to edit some files as well. If you use CUPS, look 
for and uncomment
#application/octet-...
in the files:
/etc/cups/mime.types and /etc/cups/mime.convs

Check this for help:
http://de.samba.org/samba/docs/man/CUPS-printing.html#id2557437
You can add a raw queue from the cups http interface: http://localhost:631
Once you have a raw queue, (and also / load printers = yes in [global] 
of smb.conf) /you need to connect to the printer as a printer admin 
(printer admin = YOURDOMAIN+YOU) from a windows box. Open 
\\yoursambaserver and connect to Printers and Faxes. Get properties on 
the printer, it will warn that no driver is installed and offer to do 
one - this bombed out for me, so now i just click cancel there, then go 
to the advanced tab in the properties dialog and add the driver from there.
Once that is done, windows clients just browse the samba box, right 
click the printer, and say connect
Hope that helps!

samba wrote:
Hi all
I have a linux system running samba Samba 2.2.7a-SuSE.  I have a networked
printer installed locally on the linux machine which has been created on the
samba gui 901.  Users from NT machines can see the printer over the
network using a UNC path.  When the remote user clicks onto the printer, a
prompt appears declaring that the printer needs to be set up on the
computer.  I click on Yes to accept the request.  A warning message then
appears stating that the server on which the printer resides does not have
suitable driver installed.  Click ok if you wish to install the driver.
I would like to automate the process for the users using the networked
printer.  How do you configure samba to allow the remote NT workstation to
connect and use the printer without installing the drivers locally on the NT
machine
Regards
Matthew
The contents of this email may be confidential or protected from disclosure
to other than intended recipients.If it has reached you by mistake, we
apologise and request you to advise us by emailing [EMAIL PROTECTED]
Thank you.
BYTRON cannot accept responsibility for any loss or damage arising from the
use of this email or attachments.
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.698 / Virus Database: 455 - Release Date: 6/2/04
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] detailed file permissions

2004-06-09 Thread Hamish
We have samba 3.0.3  using posix acls, it does not seem to allow the 
same functionality of nt acls though - they do map to the nt security 
dialog which is useful, but only using combinations of rwx. I do not 
think it is possible to set explicit delete permissions with posix acls.
I would be very interested if you find a solution to the (create new but 
not delete old) issue!

Thierry ITTY wrote:
hello 

I have several linux samba servers (mainly 2.2.8) which I'm very satisfied of
I'm asked to set NT-like permissions on some files or directories, such as
: explicit delete permission, explicit create permission (for example we
want to allow users to update files but not to create new ones or delete
existing ones)
I think posix ACLs don't provide this, and I didn't find any kind of
mapping. Is this possible with latest versions (samba 3) ?
tia
Thierry
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] hide unreadable

2004-06-07 Thread Hamish
Hello everyone
I am trying to use hide unreadable = yes in my [global] section and 
having some problems - I make a share and then add valid users = 
@MYDOMAIN+group - this works to protect access, but it is still visible 
to non-priveleged users (even though they cant get in) - is there 
something I need to do to make these shares hidden?
Thanks,
Hamish
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Security question

2004-06-07 Thread Hamish
What is your PDC running?
Derek Harkness wrote:
Thanks!
In my environment we have a small department that manages servers and 
the network, but we leave end user support to each department.  So I 
need away of allowing the IT person in each department to add 
workstations, without giving them rights to shares, users, or 
workstations in other departments.  How are others handling this?

Would it be sufficient to add the limited number of users to the 
Domain Administrators group and then delete the add and delete entries 
out of the smb.conf.  I'm assuming that domain admins would no longer 
be able to do anything in the domain, and direct access the smb.conf 
would be required.

Thanks so much,
Derek
On Jun 7, 2004, at 10:29 AM, Hamish wrote:
Not sure how you would do it with samba as PDC, but you can add a GPO 
in  server2000 -
allow users to join domain - userlist (this is not the exact wording)
This will allow users to supply their own usernames etc for joining
If you are using a samba PDC i remember there are some tools for GPO 
type stuff...
Sorry a bit vague but it might help :)

Derek Harkness wrote:
I've been googling for a while now and haven't found a decent answer 
to this question.

How do I allow users to join the domain without handing out a domain 
admin level account?  Is there someway to limit what other domain 
features this account has access to?

Thanks,
Derek


This world is a comedy to those who think and a tragedy to those who 
feel.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Domain security, users still asked for login

2004-05-28 Thread Hamish
After installing 3.0.4 on suse, I had the same problem again, I figured 
it out this time! nscd was still running... stop nscd (on suse 
/etc/init.d/nscd stop) and it works fine!
Sorry for the hassle!

Hamish wrote:
Hi Jerry
Thanks for your patience, I have tried installing 3.0.3 again and it 
has once again started to ask for logins. I restarted all the services 
(nmb,smb,winbind) and it continued. After another 5 minutes, i 
restarted the services again, it started accepting connections - I am 
really sorry for the hassle, still trying to figure out what I did wrong!
Some things have been added to smb.conf: here is the working one:

[global]
   unix charset = LOCALE
   workgroup = MYDOMAIN
   realm = MYDOMAIN.MYDOMAIN.MY
   server string = dataserver
   interfaces = 127.0.0.1, eth0
   bind interfaces only = Yes
   security = DOMAIN
   password server = MYPWDSERVER
   local master = No
   idmap uid = 1-2
   idmap gid = 1-2
[share defs...]
My next step is to move some multi-user (around 15 max users) approach 
database files to the samba server.
Thanks again, and sorry for being a pain!

Gerald (Jerry) Carter wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hamish wrote:
| Thanks Jerry
| I have reverted to 3.0.2a and it seems to work fine.
ok, but I would really like to find out why upgrading
to 3.0.3 broke your configuration?  Did you update
/lib/*nss_winbind* ?


cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
...a hundred billion castaways looking for a home. --- Sting
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAmPphIR7qMdg1EfYRAs5mAJ91ceEOZRovzIDrtRVWrpw5T304YACZAYyK
ZPnKgAzr7SEnQOKSNrt+UOk=
=bBln
-END PGP SIGNATURE-

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba printpdf setup broken in later versions

2004-05-27 Thread Hamish
I have a script which emails the pdf if you like? (I have now modified 
this to just email a link to the pdf, but it can be changed back fairly 
easily) Im no scripting expert but it works, if you improve on it - 
please send me a copy!

---
#!/bin/bash
#
# Simple script using ps2pdf to allow samba users to create pdf files
# invoke from samba print command = {this file} %s %U
# Requires ps2pdf and mail
# PDF will be saved directly to a samba share
# $OUTDIR is the linux path to the final saved file directory
# $SAMBADIR is the unc path windows users will use to get to the directory
# $FINALFILE is the name of the file
# - as long as a user does not make more than 1 pdf per second, this name
# should be ok
# $MYDOMAIN is the email domain to send the link
PSFILE=$1
USER=$2
COMPUTER=$3
IP=$4
DATE=`date +%H%M%S-%d%m%y`
OUTDIR=/data1/general/pdfs
SAMBADIR=\\\dataserver\general\pdfs
FINALFILE=$USER-$DATE.pdf
MAILDOMAIN=mydomain.com
ps2pdf $PSFILE $OUTDIR/$DATE-$USER.temp
mv $OUTDIR/$DATE-$USER.temp $OUTDIR/$FINALFILE
chmod 700 $OUTDIR/$FINALFILE
rm $PSFILE
echo Hi $USER, you printed a file from $COMPUTER $IP, the PDF version of 
the file is located here: $SAMBADIR\\$FINALFILE. | mail -s Your PDF -r 
[EMAIL PROTECTED] [EMAIL PROTECTED]
--

Stefan G. Weichinger wrote:
Hello,
Mittwoch, 26. Mai 2004, 03:48 you wrote:
GJC -BEGIN PGP SIGNED MESSAGE-
GJC Hash: SHA1
GJC Peter Rundle wrote:
GJC | In the past I've set up a pdf creation utility for windows users based
GJC | on the info from
GJC |
GJC |http://www.linuxgazette.com/issue72/bright.html
GJC Use Samba 3.0.3 or later and set 'printing = bsd' in
GJC that share only.
BTW, has anyone a more comfortable solution that allows the win-user
to Save as ... the created pdf?
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Locked files stay locked - copy operation from XP to Samba fails

2004-05-27 Thread Hamish
I am having a very similar problem copying files from the old sbs server 
- I thought it might be the onboard nic (1gig on asus board) so I have 
installed an intel pro1000 (e1000 module) - this seemed to work but i 
have just had another crash (I am a relative newbie to linux so did not 
know how to recover from it - top did not show any zombie or cpu hogging 
processes - even shutdown-r now would not do it so i did the nasty on 
the reset button..)
If i copied the directories one by one, it worked fine, but when copying 
the whole lot (+- 40G) it dies, seemingly on different files each time.

Bart van Dijck wrote:
Hi,
When trying to copy 5000+ files from a client PC to a Samba server I have
the following problem. Halfway during the operation it hangs on always the
same file. Windows XP (SP1) gives:
Unable to copy file [filename]. Specified network name is no longer
available.
(I had to translate this from Dutch, so it is not the exact message).
When checking with smbstatus I get this:
[EMAIL PROTECTED]:/etc/samba# smbstatus
Samba version 2.2.8a
Service  uid  gid  pid machine
--
Werkmap Ba   bart users 6706   bart (192.168.100.99) Thu May 27
13:44:01 2004
IPC$ bart users 6706   bart (192.168.100.99) Thu May 27
13:46:25 2004
Locked files:
PidDenyMode   Access  R/WOplock   Name
--
6706   DENY_ALL   0x30196 WRONLY NONE
/home/bart/gobnet_bart2/images/opleidingen/fotoos/fotokl/18058k.gif   Thu
May 27 13:46:33 2004
When I remove the offending files from the tree the rest of the files are
copied as you would expect. I tried removing the brlock.tdb files (when smbd
and nmbd were shut down), I then tried cleaning out the whole
/var/cache/samba
I set:
oplocks = no
kernel oplocks = no
level2 oplocks = no
in smb.conf
When I check before starting the copy operation with smbstatus no files are
locked. When starting the copy the three offending files are locked and stay
locked.
Could this be related to my other problem with the Realtek 8139 and
3com2000T? Someone suggested that the giga NIC was just too fast. I checked
with 3com905B and C cards and they have the same problem, so should I revert
to the old NIC in the Samba server or are there some tweaks I could try? Any
suggestions are welcome!
Bart van Dijck

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] strange [homes] behavior

2004-05-26 Thread Hamish
Hello
I am having a very trippy time trying to get the [homes] share to work 
on my samba 3.0.3pre2-SuSE (SuSE 9.0) server working.
Users home folders have been copied from an old sbs server to 
/data1/fileroot/PersonalFiles.
Here is the [homes] section of my smb.conf:

[homes]
   path = /data1/fileroot/PersonalFiles/%S
   valid users = %S
   admin users = MYDOMAIN\administrator
   browseable = No
   exec = echo u=%u S=%S  /data1/fileroot/ITManagement/connhome.rtf
The exec= is my attempt at making sure the variables are subsituted 
properly (this still does not work all the time, even though the file is 
chmod 777).

The correct directory always shows in explorer when the server is 
connected to ie \\samba\fred but only works SOMETIMES - i cannot figure 
out what causes this! Sometimes the comment for the directory (in 
windows explorer) is Home directory of DOMAIN\User, sometimes it is 
Home directory of User - Same user, same box, after disconnecting the 
user or the user rebooting his xp machine, it will change and prompt for 
authentication, sometimes it will just let him in. During this the samba 
server has not been touched, connected to or looked at.

I do not know if it is related, but i occasionally get the following in 
log.smbd:
[DateTime, 0] lib/substitute.c:alloc_sub_basic(505)
 alloc_sub_basic: NULL source string!  This should not happen

If I remove valid users=%S, the users can all connect succesfully to 
their home directories - the problem with this is that they can also 
connect to anyone elses home directory.

The only other alternative I can think of is to individually set 
permissions on each users home folder, which will take quite a while!  
Any suggestions?

Thanks,
Hamish
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] user 'root' does not exist

2004-05-25 Thread Hamish
Hello list
Sorry if this has been answered before, I have had a look around and 
could not find any answers.
I am running samba 3.0.3pre2 on suse 9.0 - installed from suse rpms.
I have managed to join the 2k3 domain and users are authenticating 
perfectly and all seems to be working, (users have actually remarked 
about a speed increase!) although i get this strange message in the 
log.winbindd:

[datetime, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1023)
user 'root' does not exist
This can also be any other linux user that runs anything - i get one for 
postfix just before receiving mail.
Have i done something wrong in nsswitch?
in nsswitch.conf i made the following changes:

passwd: files winbind
shadow: files winbind
group: files winbind
Below is the [edited] general section if smb.conf
[global]
   workgroup = MYADDOMAIN
   realm = MYADDOMAIN
   server string = fred
   interfaces = 127.0.0.1, eth1
   bind interfaces only = Yes
   security = DOMAIN
   password server = SERVER.MYADDOMAIN
   preferred master = No
   local master = No
   ldap ssl = no
   idmap uid = 1-2
   idmap gid = 1-2
   winbind use default domain = Yes
   admin users = MYADDOMAIN\administrator
   printer admin = MYADDOMAIN\administrator
   read only = No
   ea support = Yes
   hide unreadable = Yes
   store dos attributes = Yes
   dos filetimes = Yes
Thanks!
Hamish
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] The semaphore timeout period has expired

2004-05-19 Thread Hamish
Hello everyone
I have samba 3.0.3pre2-SuSE running on SuSE 9.0 i386, this is from SuSE 
rpms not source. The box is joined to a 2k3 domain, wbinfo works fine, 
acls work and users are authenticated properly.
I had a problem yesterday and cannot seem to find a solution:

I have been copying data across from the old SBS server, this seems to 
work fine for about 5 minutes, then completely crashes the samba box (i 
cannot ssh into it, even sitting at the terminal there is no response).
The windows box (old server) that was copying the files displays the 
error The semaphore timeout period has expired and no shares can be 
accessed.

The files being copied during crash were different sizes (i thought it 
might be because of huge files) : 1st crash the file was 380Mb, second 
crash 74k.
I checked log.smbd and there do not seem to be any error messages (just 
connect and close messages).

Is it possible that this is not actually a samba problem? (possibly a 
network driver problem - it is an Asustek 3c940 1000Base? - using module 
sk98lin)

Thanks,
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAGE Line 50

2004-05-19 Thread Hamish
Just to let everyone know, we have deployed sage line 50 v10 using samba 
as the ACCDATA share, it is working without problems (I'm going to 
pretend I didn't say that) for 3 days now, with an average of 5 
concurrent users, max 10.
SuSE 9.0
Samba 3.0.3pre2 from rpm
joined to w3k domain
no special entries in [global] or [share]

steve downes wrote:
Can't help there, Instant is single user
Steve
on Mon, May 10, 2004 at 05:16:01PM +0100, Hamish wrote: 
 

Hi Steve
Thanks for the help with that.
I think we are doing the same thing at the moment:
Mapped drive on client M:\
Sage installed on each client
ACCDATA shared from M:\{company} (at the moment hosted on 2k server)
How many users do you have connected to this share? All i am worried 
about is locking of files etc. We have the possibility of around 10 
simultaneous users although average will be closer to 3.

Thanks again.
Hamish
steve downes wrote:
   

I've been using sage instant this way for several years without
problem. Just the data files on the server  the program on the
host. You need to set up the company file in your sage directory to
point to the data files  I think you need to (I always have done) set
up a shortcut on the windows machine to the samba source so your
company file points to say G:\(data-dir)
Gat back to me (probably off list) if you need any more info.
Steve

on Mon, May 10, 2004 at 12:51:58PM +0100, Hamish wrote: 

 

Hello everyone,
Has anyone here hosted sage data files from samba? Any tips tricks or 
bewares?
I am about to move sage ACCDATA share from an SBS server to samba 3.0.3.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
 

   


 


 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAGE Line 50

2004-05-19 Thread Hamish
Hello
I have used a very basic share, and it seems that users can still 
connect concurrently without locking problems:

[Accounts]
   path = /data1/fileroot/Accounts
   read only = No
SuSE9.0 with Samba 3.0.3pre2 from rpm, security DOMAIN, w3k active 
directory joined.

This is all in smb.conf - the directory has acls to keep out prying eyes.
I tried to use valid users=accounts with hide unreadable=yes in [global] 
but other users could still see the share, so I have done it this way 
(also it is easier to manage for other windows-loving admins)
Not sure if it is a security risk to use acls instead, but it works!

Alan Munday wrote:
I've put Line 50 onto a 3.0.4 build this week.
I used the following as a guide.
http://www.redhat.com/archives/redhat-list/2003-June/msg01211.html
I would be interested if anyone else is using different settings.
I would also be interested on the install process followed as an accountant
came in and id this install, I had to follow and make it work.
regards
Alan
 

-Original Message-
From: 
[EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]
ba.org] On Behalf Of Hamish
Sent: 19 May 2004 12:19
To: steve downes
Cc: Samba List
Subject: Re: [Samba] SAGE Line 50

Just to let everyone know, we have deployed sage line 50 v10 
using samba 
as the ACCDATA share, it is working without problems (I'm going to 
pretend I didn't say that) for 3 days now, with an average of 5 
concurrent users, max 10.
SuSE 9.0
Samba 3.0.3pre2 from rpm
joined to w3k domain
no special entries in [global] or [share]

steve downes wrote:
   

Can't help there, Instant is single user
Steve
on Mon, May 10, 2004 at 05:16:01PM +0100, Hamish wrote: 

 

Hi Steve
Thanks for the help with that.
I think we are doing the same thing at the moment:
Mapped drive on client M:\
Sage installed on each client
ACCDATA shared from M:\{company} (at the moment hosted 
   

on 2k server)
   

How many users do you have connected to this share? All i 
   

am worried 
   

about is locking of files etc. We have the possibility of around 10 
simultaneous users although average will be closer to 3.

Thanks again.
Hamish
steve downes wrote:
  

   

I've been using sage instant this way for several years without
problem. Just the data files on the server  the program on the
host. You need to set up the company file in your sage directory to
point to the data files  I think you need to (I always 
 

have done) set
   

up a shortcut on the windows machine to the samba source so your
company file points to say G:\(data-dir)
Gat back to me (probably off list) if you need any more info.
Steve

on Mon, May 10, 2004 at 12:51:58PM +0100, Hamish wrote: 



 

Hello everyone,
Has anyone here hosted sage data files from samba? Any 
   

tips tricks or 
   

bewares?
I am about to move sage ACCDATA share from an SBS server 
   

to samba 3.0.3.
   

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
  

   



 


 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
   


 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAGE Line 50

2004-05-10 Thread Hamish
Hi Steve
Thanks for the help with that.
I think we are doing the same thing at the moment:
Mapped drive on client M:\
Sage installed on each client
ACCDATA shared from M:\{company} (at the moment hosted on 2k server)
How many users do you have connected to this share? All i am worried 
about is locking of files etc. We have the possibility of around 10 
simultaneous users although average will be closer to 3.

Thanks again.

Hamish

steve downes wrote:

I've been using sage instant this way for several years without
problem. Just the data files on the server  the program on the
host. You need to set up the company file in your sage directory to
point to the data files  I think you need to (I always have done) set
up a shortcut on the windows machine to the samba source so your
company file points to say G:\(data-dir)
Gat back to me (probably off list) if you need any more info.

Steve



on Mon, May 10, 2004 at 12:51:58PM +0100, Hamish wrote: 
 

Hello everyone,
Has anyone here hosted sage data files from samba? Any tips tricks or 
bewares?
I am about to move sage ACCDATA share from an SBS server to samba 3.0.3.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
   



 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] copy NT permissions

2004-05-10 Thread Hamish
Hello
I would like to move a large amount of data from various windows file 
servers onto a samba server. I have tried to be clever and use various 
backup tools etc for copying the files and they copy fine, but their 
acls, permissions and ownership are all destroyed in the copy process. 
(it seems to own the files from the user that connects to the share)
Has anyone had any success in copying ACLs and permissions from an NT share?
Thanks
Hamish
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] RPC net start

2004-05-10 Thread Hamish
Have you looked at netcat, its been ported to NT, not sure how secure it 
is, but maybe theres a way to ssh to it?

Nick 'Zaf' Clifford wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,

First, as far as I can tell, this topic hasn't been mentioned in the mailing 
lists in awhile (atleast not as far as google can tell).

Is there any client/program that can send net start requests to windows 
boxes. 
The ability to start a program as a service on a windows box remotely would 
obviously be very handy.
I am aware of VNC, however it is not suitable for automated tasks.

Nick

- -- 
Nick 'Zaf' Clifford [EMAIL PROTECTED] GnuPG: 0xA8D0F53D
In matters of style, swim with the current; in matters of 
principle, stand like a rock - Thomas Jefferson
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: public key: http://www.nrc.co.nz/Zaf/pubkey.txt

iD8DBQFAmvgtPWICtKjQ9T0RAmHjAJ4phBxvILt95wmhAqYeByiHO/Y1SQCeML8h
h6V3z29xLgVl2Ctp+Z/UOlk=
=cQoL
-END PGP SIGNATURE-
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] SAGE Line 50

2004-05-10 Thread Hamish
Hello everyone,
Has anyone here hosted sage data files from samba? Any tips tricks or 
bewares?
I am about to move sage ACCDATA share from an SBS server to samba 3.0.3.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


  1   2   >