[Samba] Samba 3.0.28a PDC and Vista Clients

2008-11-04 Thread Jason Waters
I'm trying to get my samba PDC to work with Vista clients.  I'm thinking
it's because of NTLMv2.  I would rather not disable that on the clients if
possible.  I tried:

 

client ntlmv2 auth = yes

 

in the config file but that didn't work.  I can login to the domain but it
doesn't see my profile.  But I know it works because after I'm logged in I
navigate to my profile path and I can write/delete to that directory.


Any ideas?  Do I need more in my smb.conf?  Thanks for your help.

 

Jason Waters

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba 3.0.28a PDC and Vista Clients

2008-11-04 Thread Jason Waters
I use LDAP and it has \\fileserver\profile$ as the profile path.  In samba
the profile share has /opt/domain/homes/%U/profile.  After I'm logged in I
can write to \\fileserver\profile$ so it isn't a permission thing.  Any
other idea?

Jason Waters

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of odi
Sent: Tuesday, November 04, 2008 9:57 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Samba 3.0.28a PDC and Vista Clients

maybe it's because samba stores the profile for vista into another
directory, 
I think it's defaults to profilepath/user.v2
There are directives in smb.conf to select the correct path.

regards

Am Dienstag, 4. November 2008 15:17:09 schrieb Jason Waters:
 I'm trying to get my samba PDC to work with Vista clients.  I'm thinking
 it's because of NTLMv2.  I would rather not disable that on the clients
if
 possible.  I tried:



 client ntlmv2 auth = yes



 in the config file but that didn't work.  I can login to the domain but
it
 doesn't see my profile.  But I know it works because after I'm logged in
I
 navigate to my profile path and I can write/delete to that directory.


 Any ideas?  Do I need more in my smb.conf?  Thanks for your help.



 Jason Waters


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: WG: [Samba] Samba 3.0.28a PDC and Vista Clients

2008-11-04 Thread Jason Waters
Ok I think I figured out what was going on.  Vista takes whatever is set for 
your profile and looks for a .v2 after it.  So since I had my profile set in 
LDAP as \\fileserver\profile$, it was looking for \\fileserver\profile$.v2.  So 
I created a new share in my smb.conf and edited the other profile$ share.  So 
in LDAP for each user I have \\fileserver\profile$ for the profile path, and 
this is my smb.conf

[profile$.v2]
comment = User profiles Vista
path = /opt/domain/homes/%U/profile/vista
read only = no

[profile$]
comment = User profiles XP/2000
path = /opt/domain/homes/%U/profile/xp
read only = no



Thanks for your help, I hope this helps someone!

Jason Waters
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] squid + samba error

2008-05-21 Thread Jason Waters
How many users do you have?  It says you reached your max for mapping.
Try changing

winbind uid = 1-2
winbind gid = 1-2

To

winbind uid = 1-3
winbind gid = 1-3

Jason Waters


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Wilson A. Galafassi Jr.
Sent: Tuesday, May 20, 2008 11:58 PM
To: samba@lists.samba.org
Subject: [Samba] squid + samba error

Hello to all.

I´m using squid + samba to authenticate my users with active directory.

The error occour only in the first time i authenticate an user.

All works fine, but i have this is my logs:

== /var/log/samba/log.winbindd ==
[2008/05/21 00:32:36, 2] nsswitch/winbindd_util.c:add_trusted_domain(171)
  Added domain BUILTIN  S-1-5-32
[2008/05/21 00:32:37, 2]
libsmb/cliconnect.c:cli_session_setup_kerberos(615)
  Doing kerberos session setup
[2008/05/21 00:35:56, 1] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(312)
  Could not get convert sid  from string
[2008/05/21 00:47:01, 1] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(312)
  Could not get convert sid  from string
[2008/05/21 00:48:57, 1] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(312)
  Could not get convert sid  from string

== /var/log/samba/log.winbindd-idmap ==
[2008/05/21 00:47:01, 2] nsswitch/idmap.c:idmap_new_mapping(957)
  gid allocation failed! Can't create mapping
[2008/05/21 00:47:01, 1] nsswitch/idmap_tdb.c:idmap_tdb_allocate_id(470)
  Fatal Error: GID range full!! (max: 2)
[2008/05/21 00:47:01, 2] nsswitch/idmap.c:idmap_new_mapping(957)
  gid allocation failed! Can't create mapping
[2008/05/21 00:47:01, 1] nsswitch/idmap_tdb.c:idmap_tdb_allocate_id(470)
  Fatal Error: GID range full!! (max: 2)
[2008/05/21 00:47:01, 2] nsswitch/idmap.c:idmap_new_mapping(957)
  gid allocation failed! Can't create mapping

my smb.conf

workgroup = DIGITALSTORAGESD
password server = SERVER2003
realm = DIGITALSTORAGESD.LOCAL
security = ADS
netbios name = netserver

# Definiçs do winbind
bind interfaces only = yes
winbind separator = /
winbind uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes
winbind enum groups = yes
winbind use default domain = yes

log file = /var/log/samba/log.%m
log level = 2
max log size = 1000

my samba version: samba-3.0.28a-0

What i can to solve that error?

Thanks,
Wilson Galafassi

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Existing files don't show up in share, new files do

2008-05-21 Thread Jason Waters
What parameters are set on the share?  Anything like map system, map
hidden?  Are you using ACL's?  What about giving us an ls -l of a
directory that isn't showing files.  Is it just files or does it happen to
folders too.

Jason Waters


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Pepijn Schmitz
Sent: Wednesday, May 21, 2008 7:38 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Existing files don't show up in share, new files do

*Bump*

Does this ring a bell with anyone? I'm still at a loss and so it seems 
is everyone else... :-)

In short: on one of my existing Samba 3.0 shares (Linux server, ext3 
filesystem) all existing files have suddenly become invisible, but it is 
still possible to create, modify and delete new files (and I see no 
differences between these new files and the existing ones). This happens 
with Windows XP, Windows Vista, Linux CIFS and Linux smclient clients, 
so it is likely to be a server problem. I'm stuck and I'm hoping a 
bright mind from this list will be able to help!

Kind regards,
Pepijn Schmitz

Pepijn Schmitz wrote:
 I found out this bizarre problem also occurs when I mount the share 
 from another Linux system, so it does not appear to be related to 
 Windows.

 To recap: one of my Samba shares suddenly mysteriously hides all 
 existing files, while still working completely normally with any newly 
 created files.

 The shared directory (/mnt/data/multimedia) looks like this:

 drwxrwxrwx 11 pepijn pepijn   4096 2008-05-17 14:08 .
 drwxr-xr-x 10 root   root 4096 2008-05-16 19:58 ..
 drwxr-xr-x  6 pepijn pepijn   4096 2006-07-02 15:49 Audio
 lrwxrwxrwx  1 pepijn pepijn  6 2005-01-17 22:13 Fotos - Foto's
 drwxrwxr-x 41 pepijn pepijn   4096 2008-03-15 23:27 Foto's
 drwxrwxr-x  4 pepijn pepijn   4096 2002-07-01 02:32 Martijn
 drwxrwxr-x  2 pepijn pepijn   4096 2002-03-31 04:48 recycled
 drwxrwxr-x  2 pepijn pepijn   4096 2004-11-28 17:00 temp
 -rwxr--r--  1 pepijn pepijn  6 2008-05-17 14:08 test.txt
 drwx--  4 pepijn pepijn   4096 2005-07-02 16:17 .Trash-500
 drwx--  2 pepijn pepijn   4096 2005-04-02 13:54 .Trash-pepijn
 drwxrwxr-x 10 pepijn pepijn   4096 2008-03-15 23:31 Video
 -r-xr--r--  1 pepijn pepijn 80 2005-07-10 19:07 volumeid.zbx
 drwxr-xr-x  4 pepijn pepijn   4096 2007-12-07 22:15 XXX

 When I mount the share on another Linux system using mount -t cifs, 
 the contents look like this:

 drwxrwxrwx 11  500  5000 2008-05-17 14:08 .
 drwxr-xr-x  4 root root 4096 2008-05-17 14:06 ..
 -rwxr--r--  1  500  5006 2008-05-17 14:08 test.txt

 The test.txt is a file I created since this problem started and as you 
 can see it's the only one visible. I can change its contents on the 
 file server and see the changes on the client. I can manipulate the 
 file on the client, even create new files, it all works perfectly. But 
 I can't see any of the existing files or directories. It's utterly 
 bizarre to me.

 I tried using smbclient, and it displays the same behaviour, so it 
 really looks like the problem is on the server side. I tried 
 touching the existing directories but that made no difference either.

 Does anyone know what might cause this strange behaviour?

 Kind regards,
 Pepijn Schmitz

 Pepijn Schmitz wrote:
 I am suddenly no longer able to see any existing files on one of my
 shares, from my Windows clients.

 I have a Linux server (Fedora Core 8) which used to be my firewall and
 router as well as file and print server. There are two Samba shares on
 it I have mounted on various Windows clients: my home directory and a
 multimedia directory with my music and videos, etc. I mount the former
 as H: on all my Windows machines and the latter as M:.

 Recently I installed a new server to be router and firewall. I kept the
 existing server as file server though, only it now no longer has a
fixed
 IP address, and it is no longer configured to be be the master browser.

 Since this change, my Windows clients no longer see the existing files
 on the multimedia share! Some strange features of the problem are:

 * It occurs on my Windows Vista Home Premium 64-bit machine, as well as
 on my Windows XP SP2 machine, in exactly the same way.
 * My home directory share doesn't have the problem, I can still see all
 the existing files there.
 * There are no errors connecting to the share from the Windows side,
nor
 do I see strange things in the logs on the file server.
 * I can still create new files on the share from Windows! The new file
 will show up locally on the file server (as verified by logging in with
 SSH and checking the shared directory), and my other Windows client
will
 see the new file as well.
 * I can also create new files locally on the file server, and these
will
 also show up on the Windows clients.
 * I can see no difference between the existing files and any new files
 created locally or through a Windows client. The file permissions are
 all the same.
 * The only difference

RE: [Samba] Existing files don't show up in share, new files do

2008-05-21 Thread Jason Waters
Let's see if it's permissions(which is what I think it is).  chmod 777 *
in that directory and then see if it works.  Then we can figure out what
went on.  The uid of 500 of the new file seems strange.

 

Jason Waters

 

From: Pepijn Schmitz [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 21, 2008 7:56 AM
To: Jason Waters
Cc: samba@lists.samba.org
Subject: Re: [Samba] Existing files don't show up in share, new files do

 

Jason Waters wrote: 

What parameters are set on the share?  Anything like map system, map
hidden?

This is the share definition:

[multimedia]
comment = Multimedia Files
path = /mnt/data/multimedia
public = yes
writable = yes
printable = no
write list = pepijn

So no map system or map hidden. I should also note that neither the share
definition nor the contents of the directory have changed. The only thing
that happened was that the server, which used to be my router and firewall
also, is now only a file server and no longer has a static IP address.



Are you using ACL's?

I don't think so. How can I tell?



What about giving us an ls -l of a
directory that isn't showing files.

Here's the ouput of ls -al on /mnt/data/multimedia:

total 2260
drwxrwxrwx 11 pepijn pepijn   4096 2008-05-17 14:13 .
drwxr-xr-x 10 root   root 4096 2008-05-16 19:58 ..
drwxr-xr-x  6 pepijn pepijn   4096 2008-05-17 14:16 Audio
-rw-rw-r--  1 pepijn pepijn 468919 2004-09-18 08:40
DIRK_GENTLY'S_HOLISTIC_DETECTIVE_AGENCY.TXT
lrwxrwxrwx  1 pepijn pepijn  6 2005-01-17 22:13 Fotos - Foto's
drwxrwxr-x 41 pepijn pepijn   4096 2008-03-15 23:27 Foto's
-rw-rw-r--  1 pepijn pepijn 292097 2004-09-18 08:40
HITCHHIKER'S_GUIDE_TO_THE_GALAXY.TXT
-rw-rw-r--  1 pepijn pepijn 396618 2004-09-18 08:40 LAST_CHANCE_TO_SEE.TXT
drwxrwxr-x  4 pepijn pepijn   4096 2002-07-01 02:32 Martijn
-rw-rw-r--  1 pepijn pepijn 372140 2004-09-18 08:40 MOSTLY_HARMLESS.TXT
drwxrwxr-x  2 pepijn pepijn   4096 2002-03-31 04:48 recycled
-rw-rw-r--  1 pepijn pepijn 333862 2004-09-18 08:40
RESTAURANT_END_OF_THE_UNIVERSE.TXT
-rw-rw-r--  1 pepijn pepijn 296645 2004-09-18 08:40 STARSHIP_TITANIC.TXT
drwxrwxr-x  2 pepijn pepijn   4096 2004-11-28 17:00 temp
-rwxr--r--  1 pepijn pepijn  5 2008-05-17 14:13 test2.txt
-rwxr--r--  1 pepijn pepijn  6 2008-05-17 14:08 test.txt
drwx--  4 pepijn pepijn   4096 2005-07-02 16:17 .Trash-500
drwx--  2 pepijn pepijn   4096 2005-04-02 13:54 .Trash-pepijn
drwxrwxr-x 10 pepijn pepijn   4096 2008-03-15 23:31 Video
-r-xr--r--  1 pepijn pepijn 80 2005-07-10 19:07 volumeid.zbx
drwxr-xr-x  4 pepijn pepijn   4096 2007-12-07 22:15 XXX
-rw-rw-r--  1 pepijn pepijn  24247 2004-09-18 08:40
YOUNG_ZAPHOD_PLAYS_IT_SAFE.TXT

When I mount the share on another Linux system using this command:

sudo mount -t cifs -o user=pepijn //10.0.0.163/multimedia roadrunner/

And then perform an ls -al in the roadrunner directory the output is as
follows:

total 2052
drwxrwxrwx 115005000 2008-05-17 14:13 .
drwxr-xr-x 22 pepijn pepijn 4096 2008-05-21 13:50 ..
-rwxr--r--  15005005 2008-05-17 14:13 test2.txt
-rwxr--r--  15005006 2008-05-17 14:08 test.txt

As you can see it only show the two test files I created since this
problem started.



Is it just files or does it happen to
folders too.
  

It happens with both.

Kind regards,
Pepijn Schmitz



 
Jason Waters
 
 
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Pepijn Schmitz
Sent: Wednesday, May 21, 2008 7:38 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Existing files don't show up in share, new files do
 
*Bump*
 
Does this ring a bell with anyone? I'm still at a loss and so it seems 
is everyone else... :-)
 
In short: on one of my existing Samba 3.0 shares (Linux server, ext3 
filesystem) all existing files have suddenly become invisible, but it is 
still possible to create, modify and delete new files (and I see no 
differences between these new files and the existing ones). This happens 
with Windows XP, Windows Vista, Linux CIFS and Linux smclient clients, 
so it is likely to be a server problem. I'm stuck and I'm hoping a 
bright mind from this list will be able to help!
 
Kind regards,
Pepijn Schmitz
 
Pepijn Schmitz wrote:
  

I found out this bizarre problem also occurs when I mount the share 
from another Linux system, so it does not appear to be related to 
Windows.
 
To recap: one of my Samba shares suddenly mysteriously hides all 
existing files, while still working completely normally with any newly 
created files.
 
The shared directory (/mnt/data/multimedia) looks like this:
 
drwxrwxrwx 11 pepijn pepijn   4096 2008-05-17 14:08 .
drwxr-xr-x 10 root   root 4096 2008-05-16 19:58 ..
drwxr-xr-x  6 pepijn pepijn   4096 2006-07-02 15:49 Audio
lrwxrwxrwx  1 pepijn pepijn  6 2005-01-17 22:13 Fotos - Foto's
drwxrwxr-x 41 pepijn pepijn   4096 2008-03-15 23:27 Foto's
drwxrwxr-x  4 pepijn pepijn   4096 2002-07-01 02:32 Martijn

RE: [Samba] Existing files don't show up in share, new files do

2008-05-21 Thread Jason Waters
Remove any restrictions on the shares.  Like valid user and that sort of
thing.

Jason Waters


-Original Message-
From: Pepijn Schmitz [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 21, 2008 10:08 AM
To: Rubin Bennett
Cc: Jason Waters; samba@lists.samba.org
Subject: Re: [Samba] Existing files don't show up in share, new files do

I'm slightly closer to finding the cause of this problem. I set the smbd 
log level to 7 and found the following entries when trying to list the 
contents of the share:

[2008/05/21 15:27:05, 5] smbd/uid.c:change_to_user(273)
  change_to_user uid=(500,500) gid=(0,500)
[2008/05/21 15:27:05, 3] smbd/trans2.c:call_trans2findfirst(1704)
  call_trans2findfirst: dirtype = 16, maxentries = 1366, 
close_after_first=0, close_if_end = 2 requires_resume_key = 4 level = 
0x104, max_data_bytes = 16644
[2008/05/21 15:27:05, 5] smbd/filename.c:unix_convert(147)
  unix_convert called on file *
[2008/05/21 15:27:05, 5] smbd/filename.c:unix_convert(246)
  unix_convert begin: name = *, dirpath = , start = *
[2008/05/21 15:27:05, 5] smbd/trans2.c:call_trans2findfirst(1769)
  dir=./, mask = *
[2008/05/21 15:27:05, 5] smbd/dir.c:dptr_create(392)
  dptr_create dir=./
[2008/05/21 15:27:05, 3] smbd/dir.c:dptr_create(515)
  creating new dirptr 256 for path ./, expect_close = 1
[2008/05/21 15:27:05, 4] smbd/trans2.c:call_trans2findfirst(1837)
  dptr_num is 256, wcard = *, attr = 22
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1255)
  get_lanman2_dir_entry found ./. fname=.
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1255)
  get_lanman2_dir_entry found ./.. fname=..
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./Audio] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat 
[./DIRK_GENTLY'S_HOLISTIC_DETECTIVE_AGENCY.TXT] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./Foto's] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat 
[./HITCHHIKER'S_GUIDE_TO_THE_GALAXY.TXT] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./LAST_CHANCE_TO_SEE.TXT] 
(Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./Martijn] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./MOSTLY_HARMLESS.TXT] 
(Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./recycled] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat 
[./RESTAURANT_END_OF_THE_UNIVERSE.TXT] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./STARSHIP_TITANIC.TXT] 
(Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./temp] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./Video] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./YOUNG_ZAPHOD_PLAYS_IT_SAFE.TXT] 
(Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./Fotos] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./.Trash-pepijn] (Permission
denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./.Trash-500] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./volumeid.zbx] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1221)
  get_lanman2_dir_entry:Couldn't stat [./XXX] (Permission denied)
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1255)
  get_lanman2_dir_entry found ./test.txt fname=test.txt
[2008/05/21 15:27:05, 5] smbd/trans2.c:get_lanman2_dir_entry(1255)
  get_lanman2_dir_entry found ./test2.txt fname=test2.txt
[2008/05/21 15:27:05, 5] smbd/trans2.c:call_trans2findfirst(1890)
  call_trans2findfirst - (2) closing dptr_num 256
[2008/05/21 15:27:05, 4] smbd/dir.c:dptr_close_internal(238)
  closing dptr key 256

The Permission denieds correspond exactly to the files and directories 
that are missing. As you can see, it somehow can't stat (whatever that 
is) the existing files, but it can the new files. Which is bizarre, 
since their permissions are the same. We need a real Samba internals

[Samba] Is this even possible

2008-05-20 Thread Jason Waters
I've got two separate domains one is active directory the other sambe 3.
Say I have 5 users.  User1.user5.  I would like to have the same username
and passwords on both domains, but separate profiles for each domain.
They are in two separate locations connected with an OpenVPN connection.
I was wondering the best way to do this?  If I could sync the passwords
from AD that would be great.  Has anyone else ever done this?  Thanks for
your help.

 

Jason Waters

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] domain memership and security=domain

2008-05-20 Thread Jason Waters
I think security = domain just has that samba box look at the PDC for
authentication.  I don't think accessing a share has anything to do with
if the workstation is a part of the domain or not.  If you try to connect
to that share \\sambafileserver\testshare it should prompt you for a
username and password.  If it doesn't that means you are logged in with a
valid username already.  You can check smsbstatus to see how you are
connected.  If you have two domain users, user1, user2, you can make a
share on available to one user by doing valid users = user1

Are you trying to restrict machine from accessing a share?  I'm not sure
if you can use the hosts allow per share.  Am I understanding you
correctly?

Jason Waters


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Julian Pace Ross
Sent: Tuesday, May 20, 2008 1:18 PM
To: samba@lists.samba.org
Subject: Re: [Samba] domain memership and security=domain


I apologise for re-posting, but I'll try summarise just in case my
original 
message was confusing...

I have successfully deployed my first Samba 3 PDC with LDAP.

I have another Linux PC (separate from the PDC) that is  acting as a file 
server, with it's own shares.

This PC has no local user accounts, and I set this with security = domain,

passwd server = SambaPDC.
It successfully joined it to the domain with net  rpc join etc..

On each share I specify which users can access that share (valid users = )

Should security = domain mean that only  workstations already joined to
the 
domain can have access to the file server shares?
Until now, I can still access the shares even from the non-domain 
workstations.
In other words, can a Samba3 domain member limit access to its shares only

to other PCs that are also domain members?
Or, even better, can this be specified specifically per share?

Thanks and regards
Julian
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] SAMBA PDC with LDAP backend syncing unix/samba accounts ...

2008-05-20 Thread Jason Waters
I'm coming into this half way through but won't ldap passwd sync = yes
work?  Or does that only work when you change your password from samba?

Jason Waters

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Edmundo Valle Neto
Sent: Tuesday, May 20, 2008 2:20 PM
To: samba@lists.samba.org
Subject: Re: [Samba] SAMBA PDC with LDAP backend syncing unix/samba
accounts ...

yogi escreveu:
 Hi ,
Thanks Edmundo and Louis for the input.
 Edmundo you are absolutely right about three hashes.
 I figuered that part. I always wondered how will samba
 generate a hash from my unix hash ;).

 Now coming back to my question. I will try and be even more
 specific.

 IF a user tries to change password on his/her wks, then 
 he/she uses passwd in which case it uses pam  and unix
 password is changed leaving samba password.

 How do I  provide my users a common password sync option on
 their respective workstation ?

 Anybody ,

 Thanks in advance,
 yogesh
   

You can use smbpasswd -r pdcname.
This is the simplest way to change the password.

If you really want to use the passwd command, you will need to use 
winbind in these workstations and the pam_winbind.so pam module to 
change the password trough it.

You could even use smbldap-passwd to change the password directly in the 
base, but you would need to make some changes in the script first.


Regards.

Edmundo Valle Neto
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Slow to start coping .exe files

2008-01-30 Thread Jason Waters
Has anyone ever had an issue coping .exe files from a samba share?  If I
rename the .exe to .ex1 it works great.  Seems odd.  I've disabled all virus
scanning software on the local machine and things like that.

Jason
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba