RE: [Samba] Help: smbd & nmbd normal states

2006-08-10 Thread John Mason
Have you checked the output of testparm? Run it and see if it doesn't
like some configuration settings. I had very similar results when I had
some misspelled configuration settings.

And if that doesn't work, remove any and all log files, then add
loglevel = 10 to your smb.conf, then start the server, wait a bit, then
post the log files so we can help you debug the problem.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
LouArnold
Sent: Wednesday, August 09, 2006 7:39 PM
To: samba@lists.samba.org
Subject: [Samba] Help: smbd & nmbd normal states


I have just installed Fedora Core 5 with the Samba server. However only
the
nmbd daemon is running. I thought both smbd and nmbd should be running. 
On trying to start smbd with:
>/sbin/service smb start
the result is "starting smbd [FAILED]"
Stopping smbd of course has no effect, and starting or restarting nmbd
works
just fine.

I'm stumped! I turned SELinux and the firewall off. I stopped sendmail.
I
configured a share, and set up a user for it. I can't think of what else
might be a problem. This worked before on a previous life of the system
under FC4.
-- 
View this message in context:
http://www.nabble.com/Help%3A-smbd---nmbd-normal-states-tf2082053.html#a
5736427
Sent from the Samba - General forum at Nabble.com.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba share access error Fedora core 5

2006-08-10 Thread John Mason
Well call me a doofus, this has been one of my problems for a few days
now!

Thanks for posting to the list!



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Pavan
Sent: Wednesday, August 09, 2006 6:26 PM
To: [EMAIL PROTECTED]; 'Samba'
Subject: RE: [Samba] Samba share access error Fedora core 5


Hi Tim,
  
 Thanks for that, It have solved my problem. Hope this will be
useful for people on the list using FC 5.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, August 09, 2006 8:34 PM
To: Pavan
Subject: Re: [Samba] Samba share access error Fedora core 5

Pavan,

I had this exact same problem with my Fedora Core 5.  It's actually a
well
documented problem with the way Fedora Core 5 uses a system known as
SELinux,
which is on by default.

Try issuing the command 'setenforce 0' and see if that makes a
difference.

Quoting Pavan <[EMAIL PROTECTED]>:

> Hi,


Hi,
 
   I have samba PDC running successfully on my server with 3
physical volumes running Fedora Core 5.
  
   Physical Volume 1 - OS installation
   Physical Volume 2 - All Company file shares
   Physical Volume 3 - Backup of files.
 
  I am facing a weird problem or may be somewhat unique to samba or
Fedora, that  I cannot access shares that are mounted and shared by
samba from the client machines from the Physical volumes 2 & 3. I just
receive an error as "Network Path cannot be found" including for the
samba domain administrator i.e. root. All users can access the shares
directly on the server.
 
Can anyone help me to overcome this problem??
 
Thanks in advance, I really spent more than 4hrs troubleshooting this.
 
 
Pavan.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] samba3, srvtools, and user account with no password

2006-08-09 Thread John Mason
In smb.conf is a null passwords option it defaults to no.

It's a security risk... but if you want it then set "null passwords =
yes"

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
bob_bipbip
Sent: Wednesday, August 09, 2006 5:49 AM
To: samba@lists.samba.org
Subject: [Samba] samba3, srvtools, and user account with no password

hello, i've just finished in setuping my simple samba pdc (no ldap, just

tdbsam), everything work, i can create account from a xp client with  
srvtools, modify propoerties of a user/groupe, no problem.

but but, i'm unable to let account with no password, i mean, when i'm  
creating/modify an account with srvtools, i've got the error "access  
denied", but when i put one, even if it's an one letter password, it
works.

please, help me!

i'm using debian 3.1,
i put "null passwords = yes", "min password length = 0" in smb.conf
in common-password in pam:"password required pam_unix.so nullok min=0  
max=8 md5"

i'm lost 


-- 
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Regarding samba compilation

2006-08-09 Thread John Mason
You may need to run configure with some options... otherwise the smbd
built executable will go in /usr/local/samba/sbin (configure --help for
more info)

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of samid
Sent: Wednesday, August 09, 2006 1:20 AM
To: samba@lists.samba.org
Subject: [Samba] Regarding samba compilation



Hi,
  Am trying to add some Debug statement to smbd, for example in
service.c. But problem is when I recomplile and make install, smbd
doesnt get updated with that code.  problem here is this smbd
executable(usr/sbin/smbd) doesnt get updated with the latest install.
please help..

Regards,
Samid.



___
No banners. No pop-ups. No kidding.
Make My Way  your home on the Web - http://www.myway.com


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] VFAT filesystem support vs. smbfs

2006-08-08 Thread John Mason

I'll forward your question to the list.

-Original Message-
From: [EMAIL PROTECTED] on behalf of Tim Schoenfelder
Sent: Tue 8/8/2006 10:07 AM
To: John Mason
Subject: Re: [Samba] This list is a black hole.
 
I'm having a problem with Samba, I cannot connect to my Win98 PC via FC5.
It seems that cifs doesn't support vfat from what I've read at the Samba
site and smbfs isn't supported in the binary that I've downloaded via Yum.
I tried googling and experimenting to make it work, I'm not sure what to do
next...

Any suggestions as to what I can do?



BTW, I posted this following email the other day:

I've read that smbfs has been depreciated for cifs for Win2k and WinXP,
however, I see that older vfat OSs such as Win98 are not supported via cifs
filesystem.

I have installed the current samba binary on Fedora Core 5 via yum and
noticed that the mount command doesn't recognize smbfs either.

I used the following syntax:
mount -t cifs //192.168.1.111/C /mnt/htpc -o user=WORKGROUP/Username,nocase
The above command entry prompted for a password

and then

yielded the following error:
mount error 112 = Host is down

BTW, smbtree finds the hostname and share, however, word on the net is that
a person has to use an ip address to make cifs work.

Using the following command:
mount -t smbfs //HTPC/C /mnt/htpc -o
user=WORKGROUP/Username,pass="password",nocase

yields the following error:
mount: unknown filesystem type 'smbfs'

smbtree sees the win98 share correctly as //HTPC/C

Does anyone know how I can mount my Win98 share with the new samba?
-- 
Tim Schoenfelder
http://timschoenfelder.com


On 8/8/06, John Mason < [EMAIL PROTECTED]> wrote:
>
>
> Seems that many questions get answered... but most to the original
> requestor... not the list. Plus, many of us watching don't know as much as
> the esteemed 30 or so "experts" so we can only help on that which we
> have tried.
>
> Are you having a problem? I'll try to answer it.
>
>
>
> -Original Message-
> From: [EMAIL PROTECTED] on behalf of Steven
> Rice
> Sent: Tue 8/8/2006 8:12 AM
> To: samba@lists.samba.org
> Subject: [Samba] This list is a black hole.
>
> Many questions goes in,
> Very few answers come out.
>
> __
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:   https://lists.samba.org/mailman/listinfo/samba
>



-- 
Tim Schoenfelder
http://timschoenfelder.com

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] disabling roaming profiles for some networks only

2006-08-08 Thread John Mason

Good point.


-Original Message-
From: [EMAIL PROTECTED] on behalf of Logan Shaw
Sent: Tue 8/8/2006 9:40 AM
To: samba@lists.samba.org
Subject: RE: [Samba] disabling roaming profiles for some networks only
 
On Tue, 8 Aug 2006, John Mason wrote:
> What about also enabling roaming profiles, but doing folder redirection?
> I use it and so it take much less time since each machine is configured
> to mount their my documents, desktop, etc. which makes their profile
> large rather than include them in the profile.

I don't think that would work so well for our environment.
The issue isn't the space used in the profile.  It's the speed
at which it can be copied over and back.  Turning folders
like the desktop into mounts from the server would prevent
slow logons, but in exchange what we'd get is files on the
desktop taking minutes to open after someone had logged in.

The pipe between the offices is about 1.5 megabit/s bandwidth
with a latency of about 70 ms, and this makes access to
files over SMB (or CIFS) really slow.  I'd *love* to improve
responsiveness of the server, but my guess is that the protocol
just doesn't deal with latency very well (most file sharing
protocols don't), so no amount of tuning is going to make a
huge difference.

Plus, of course, if you open a 10 megabyte file over a 1.5
megabit/s link, the theoretical best time you're ever going
to see is about 53 seconds.  And people do put 10 megabyte
files on their desktops.

   - Logan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] This list is a black hole.

2006-08-08 Thread John Mason

Seems that many questions get answered... but most to the original requestor... 
not the list. Plus, many of us watching don't know as much as the esteemed 30 
or so "experts" so we can only help on that which we have tried.

Are you having a problem? I'll try to answer it.



-Original Message-
From: [EMAIL PROTECTED] on behalf of Steven Rice
Sent: Tue 8/8/2006 8:12 AM
To: samba@lists.samba.org
Subject: [Samba] This list is a black hole.
 
Many questions goes in,
Very few answers come out.

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] disabling roaming profiles for some networks only

2006-08-08 Thread John Mason

What about also enabling roaming profiles, but doing folder redirection? I use 
it and so it take much less time since each machine is configured to mount 
their my documents, desktop, etc. which makes their profile large rather than 
include them in the profile.

It's included in the official samba howto, the unofficial samba howtos, etc.

-Original Message-
From: [EMAIL PROTECTED] on behalf of simo
Sent: Mon 8/7/2006 5:46 PM
To: Logan Shaw
Cc: samba@lists.samba.org
Subject: Re: [Samba] disabling roaming profiles for some networks only
 
On Mon, 2006-08-07 at 17:23 -0500, Logan Shaw wrote:
> Hey everyone.
> 
> We have two offices accessing the same Samba server, which is
> a PDC and file server.  The server is located in one of the
> offices, but the other office is only connected by a relatively
> slow link (1.5 megabit/s).
> 
> I'm looking for a way to turn off roaming profiles only
> for those users which are at the remote site.  (It's a tad
> inconvenient when it takes an hour or two to login due to a
> 1 GB roaming profile!)  I could turn roaming profiles off for
> everyone, but we do have some users here at the same site as
> the server who don't have their own computers and could take
> advantage of roaming profiles.
> 
> Obviously, I can do this by running the Group Policy editor on
> every machine at the remote site, but I'd really like something
> where this can be controlled by the server.  I know I can leave
> "logon path" and "logon home" undefined and that will turn off
> roaming profiles for everyone, but I only want to turn it off
> for users on a certain network.
> 
> So, is there any way to do that?

Set the logon home and logon path explicitly in the passdb backend for
the users who need it and leave the general ones blank.
You must use either the tdbsam or ldapsam backlends to do that.

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: [EMAIL PROTECTED]
http://samba.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] samba 3.0.23a + ldap as PDC - should work, but why?

2006-08-07 Thread John Mason

Fix for my own problem: Case Sensitivity

Looking at level 10 logs for a few hours, if finally hit me. It is looking for 
ntuser.dat where as the Default User profile provided NTUSER.DAT and I have 
case sensitivity on... took it off and it worked.

THanks.

-Original Message-
From: [EMAIL PROTECTED] on behalf of John Mason
Sent: Mon 8/7/2006 1:05 PM
To: samba@lists.samba.org
Subject: [Samba] samba 3.0.23a + ldap as PDC - should work, but why?
 
I've got an issue with roaming profiles with samba 3.0.23a and an LDAP backend. 
I can use the ldap to authenticate an NT and a local user, and I know alot 
about PAM, NSS, and general linux. BUT, I can't get ANY roaming profiles to 
work.
 
Other than my domain name changed for security purposes, the following is my 
smb.conf file. (I first used SWAT, then did more customization)
 
smb.conf=>
=
[global]
workgroup = DOMAIN.COM
netbios name = PDC
server string = PDC
interfaces = eth0
bind interfaces only = Yes
update encrypted = Yes
private dir = /data/samba/private
passdb backend = ldapsam:ldap://127.0.0.1/
client NTLMv2 auth = Yes
client lanman auth = No
client plaintext auth = No
log level = 10
syslog = 0
password server = PDC
log file = /data/samba/logs/sambalog
#max log size = 50
enable core files = No
smb ports = 139
name resolve order = wins bcast hosts
time server = Yes
deadtime = 10
socket options = TCP_NODELAY SO_RCVBUF=8192
printcap name = CUPS
show add printer wizard = No
add user script = /usr/sbin/smbldap-useradd -m "%u"
delete user script = /usr/sbin/smbldap-userdel "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"
#shutdown script = /var/lib/samba/scripts/shutdown.sh
#abort shutdown script = /sbin/shutdown -c
logon script = logon.bat
logon path = \\%L\%U\.msprofile
logon drive = h:
logon home = \\%L\%U
server schannel = auto
client schannel = auto
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
ldap admin dn = uid=root,dc=domain,dc=com
ldap delete dn = Yes
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=domain,dc=com
ldap ssl = no
ldap user suffix = ou=Users
#utmp = Yes
profile acls = Yes
map acl inherit = Yes
printing = cups
case sensitive = Yes
hide unreadable = Yes
hide files = /desktop.ini/
veto oplock files = /*.doc/*.xls/*.mdb/
admin users=root Administrator
 
[homes]
comment = Home Directories
valid users = %S
read only = No
create mask = 0644
directory mask = 0775
hide files = /desktop.ini/
browseable = No
 
[printers]
comment = SMB Print Spool
path = /var/spool/samba
guest ok = Yes
printable = Yes
browseable = No
 
[print$]
comment = Printer Drivers
path = /data/samba/print/drivers
guest ok = Yes
 
[netlogon]
comment = Network Logon Service
path = /data/samba/netlogon
browseable = No
locking = No
 
[profiles]
# chmod 1777 /home/%U/.msprofile
path = /home/%U/.msprofile
read only = no
profile acls = yes
create mask = 0600
directory mask = 0700
browseable = No
nt acl support = Yes
force user = %U
valid users = %U @"Domain Admins"
 
[profdata]
comment = Profile Data Share
path = /data/samba/profdata
read only = No
create mask = 0644
directory mask = 0755
browseable = No
hide files = /desktop.ini/
csc policy = disable
 
[shared]
comment = Network Shares
path = /data/samba/shared
read only = No
guest ok = Yes
 
 
=
< end smb.conf
 
 
Also, here's a few "ls"'s so you can see about my permissions.
 
# > ls -al /data/samba/profdata
total 24K
drwxr-xr-x  6 root   

[Samba] samba 3.0.23a + ldap as PDC - should work, but why?

2006-08-07 Thread John Mason
I've got an issue with roaming profiles with samba 3.0.23a and an LDAP backend. 
I can use the ldap to authenticate an NT and a local user, and I know alot 
about PAM, NSS, and general linux. BUT, I can't get ANY roaming profiles to 
work.
 
Other than my domain name changed for security purposes, the following is my 
smb.conf file. (I first used SWAT, then did more customization)
 
smb.conf=>
=
[global]
workgroup = DOMAIN.COM
netbios name = PDC
server string = PDC
interfaces = eth0
bind interfaces only = Yes
update encrypted = Yes
private dir = /data/samba/private
passdb backend = ldapsam:ldap://127.0.0.1/
client NTLMv2 auth = Yes
client lanman auth = No
client plaintext auth = No
log level = 10
syslog = 0
password server = PDC
log file = /data/samba/logs/sambalog
#max log size = 50
enable core files = No
smb ports = 139
name resolve order = wins bcast hosts
time server = Yes
deadtime = 10
socket options = TCP_NODELAY SO_RCVBUF=8192
printcap name = CUPS
show add printer wizard = No
add user script = /usr/sbin/smbldap-useradd -m "%u"
delete user script = /usr/sbin/smbldap-userdel "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"
#shutdown script = /var/lib/samba/scripts/shutdown.sh
#abort shutdown script = /sbin/shutdown -c
logon script = logon.bat
logon path = \\%L\%U\.msprofile
logon drive = h:
logon home = \\%L\%U
server schannel = auto
client schannel = auto
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
ldap admin dn = uid=root,dc=domain,dc=com
ldap delete dn = Yes
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=domain,dc=com
ldap ssl = no
ldap user suffix = ou=Users
#utmp = Yes
profile acls = Yes
map acl inherit = Yes
printing = cups
case sensitive = Yes
hide unreadable = Yes
hide files = /desktop.ini/
veto oplock files = /*.doc/*.xls/*.mdb/
admin users=root Administrator
 
[homes]
comment = Home Directories
valid users = %S
read only = No
create mask = 0644
directory mask = 0775
hide files = /desktop.ini/
browseable = No
 
[printers]
comment = SMB Print Spool
path = /var/spool/samba
guest ok = Yes
printable = Yes
browseable = No
 
[print$]
comment = Printer Drivers
path = /data/samba/print/drivers
guest ok = Yes
 
[netlogon]
comment = Network Logon Service
path = /data/samba/netlogon
browseable = No
locking = No
 
[profiles]
# chmod 1777 /home/%U/.msprofile
path = /home/%U/.msprofile
read only = no
profile acls = yes
create mask = 0600
directory mask = 0700
browseable = No
nt acl support = Yes
force user = %U
valid users = %U @"Domain Admins"
 
[profdata]
comment = Profile Data Share
path = /data/samba/profdata
read only = No
create mask = 0644
directory mask = 0755
browseable = No
hide files = /desktop.ini/
csc policy = disable
 
[shared]
comment = Network Shares
path = /data/samba/shared
read only = No
guest ok = Yes
 
 
=
< end smb.conf
 
 
Also, here's a few "ls"'s so you can see about my permissions.
 
# > ls -al /data/samba/profdata
total 24K
drwxr-xr-x  6 root  root  4.0K Aug  3 14:41 .
drwxr-xr-x  9 root  root  4.0K Aug  3 14:28 ..
drwxr-xr-x 11 Administrator Domain Admins 4.0K Aug  3 15:42 Administrator
drwxr-xr-x 12 user1Domain Users  4.0K Aug  4 08:22 user1
drwxr-xr-x 10 root  Domain Admins 4.0K Aug  3 14:30 root
drwxr-xr-x  2 user2Domain Users  4.0K Aug  3 13:04 user2
 
and user1's .msprofile:
 
# > ls -al /home/user1/.msprofile
total 820K
drwxrwxrwt  9 user1 Domain Users 4.0K Aug  7 12:02 .
drwxr-xr-x 43 user1 Domain Users 4.0K Aug  7 08:44 ..
drwxrwxr-x  6 user1 Domain Users 4.0K Aug  7 07:40 Application Data
drwx

RE: [Samba] domain group mapping in 3.0.23a issues

2006-08-04 Thread John Mason

Hey, I use the exact same samba version as you... I'm waiting for the 3.0.23b 
or higher but anyway..

In addition to net groupmap commands, you'll need to look at net rpc rights 
commands for any other-than-admin rights.
It seems samba (and someone correct me if I'm wrong) does the windows 
compatible thing that RID 512 is the admin group.. so use net groupmap add to 
associate the 512 RID to some unix-group. 513 is Domain Users, 514 is Domain 
Guests, and 515 is Domain Computers.

And then for basic rights, check these out:
for instance, this will list the rights that are supported:

[EMAIL PROTECTED] ~ ] > net rpc -U root -S pdc rights list
Password:
 SeMachineAccountPrivilege  Add machines to domain
  SeTakeOwnershipPrivilege  Take ownership of files or other objects
 SeBackupPrivilege  Back up files and directories
SeRestorePrivilege  Restore files and directories
 SeRemoteShutdownPrivilege  Force shutdown from a remote system
  SePrintOperatorPrivilege  Manage printers
   SeAddUsersPrivilege  Add users and groups to the domain
   SeDiskOperatorPrivilege  Manage disk shares

Then, to grant rights to a user (or a group):
net rpc -U root -S pdc rights grant "DOMAIN/USER_OR_GROUP" 
SeTakeOwnershipPrivilege ...


Then to revoke, use revoke in place of grant.

Hope this helps.
JAM


-Original Message-
From: [EMAIL PROTECTED] on behalf of Chris
Sent: Fri 8/4/2006 1:24 PM
To: samba@lists.samba.org
Subject: [Samba] domain group mapping in 3.0.23a issues
 
How does one create all of the builtin groups for this release?

When using tdbsam with previous releases one would automatically get 
such groups as:

System Operators (S-1-5-32-549) -> -1
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Domain Admins (S-1-5-21-1832519723-2688400599-3493754984-512) -> 
domadmin
Domain Guests (S-1-5-21-1832519723-2688400599-3493754984-514) -> nobody
Power Users (S-1-5-32-547) -> -1
Print Operators (S-1-5-32-550) -> prtadmin
Administrators (S-1-5-32-544) -> -1
Account Operators (S-1-5-32-548) -> -1
Domain Users (S-1-5-21-1832519723-2688400599-3493754984-513) -> agent
Backup Operators (S-1-5-32-551) -> -1
Users (S-1-5-32-545) -> -1

I can manually map groups such as:

Domain Admins (S-1-5-21-1043961623-2377510293-736199847-1001) -> domadm
Domain Guests (S-1-5-21-1043961623-2377510293-736199847-1003) -> nobody
Domain Users (S-1-5-21-1043961623-2377510293-736199847-1002) -> users
Print Operators (S-1-5-21-1043961623-2377510293-736199847-1004) -> 
prtadm

But for some reason members of the domadm group are not receiving admin 
priviledges when logging on.

Is the existence "-1" groups necessary?
If so how does one create them?
If not, why might members of the domadm group (as in the second example) 
not have admin priveleges when logging onto the domain?

Thanks,

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] need ldif and schema for ldap and samba3 PDC

2006-08-03 Thread John Mason
Hello,
 
I want to do some cleaning up of our smbpasswd, /etc/passwd, etc. files and 
start using ldap. However, I'm not sure what schema to use, what samba is 
looking for for user authentication, etc.
 
If someone can direct me to a CLEAN (the only ones I've found are ugly and 
excessive) samba schema for my openldap 2.3.19 with samba version 
3.0.23a-1.fc5.1.
 
I also am looking for an ldif (from slapcat) so I can get an idea as to what 
samba is looking for in the way of object classes, etc. as well as what the 
most common structure of groups is. Most of the ldifs I've seen had 30 groups 
for domain this and domain that. 
 
And if someone says that I need to use swat to get things started... then so be 
it! I'm open to suggestions!
 
 
Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Issues getting started with samba4 from samba3

2006-08-03 Thread John Mason
Hello,
I've been working with Samba 3 (default from FC5 install) for a little bit but 
I wasn't too happy with profiles, logon scripts etc. as I need a PDC. So I 
checked out Samba 4 and have been trying to get started. I finally got swat 
working... as well as swat is working now.
 
But how can I look at, modify, add, delete, etc. to the database? I configured 
the server with no additional options before I made it. 
 
I used the provision script from the howto.txt I found in the cvs I checked 
out... but sometimes it fails, and sometimes it doesn't. So how do I get some 
of the torture tests, or any tests for that matter, to work so that I can know 
that I've begun to set it up correctly?
 
Thanks,
Jmason
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba