Re: [Samba] Samba PDC kills WinXP

2008-01-24 Thread Martin Petersen

I think that with duplicate parameter entries the last
one found takes precedence. A testparm shold confirm this.


Thank You for the insight. Just read in Using Samba that the last 
mentioning of a parameter/value pair is valid.


So, thanks.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba PDC kills WinXP

2008-01-21 Thread Martin Petersen

Hi Markus,

I'm no samba god, but You habe two lines of
passdb backend in use. Are You sure that is correct?

Kind regards,

Martin




Markus Bajones schrieb:

Hi,

I have a little problem with my Samba PDC setup.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Domain and Vista Profiles

2007-09-26 Thread Martin Petersen
Mike Petersen (not related) posted some infos regarding Vista profiles 
on this list. Maybe there are some infos for You in his post.


http://lists.samba.org/archive/samba/2007-September/135092.html

Props to Mike P. and greetings to the whole list.

Martin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba v2.2.3a - w2k-Users CAN change password, how to disable ?

2007-05-08 Thread Martin Petersen

Dear List, dear Samba-Users,

I've been assigned to service an old samba server (v2.2.3a) with 
smbpasswd-backend and some hundred w2k-PDC-users.


Now I stumbled over a small problem:

If windows-users change their passwords via the ctrl-alt-del-dialogue 
they are prompted an error that the domain is not available but the 
password is changed nonetheless.


The only solution I came across is to disable the button with the help 
of policies to the user profile.


Do You know of this error and have another solution for my problem?

Thanks in advance,

Martin Petersen

(Please excuse my poor grammar, reading English tech books doesn't teach 
the last skills :))

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAMBA Gone Wrong

2005-08-29 Thread Martin Petersen

Daniel Arrowsmith schrieb:

I have just configured my smb.conf file (OS = Fedora Core 4)and have
ensured that the NIC's have been trusted in the firewall, have run
'testparm', ensured all directroies exist and have restarted the smb
service.
However, when I attempt to join a computer to the domain I get the
error message 'domain controller for the domain domainname could not
be contacted.
I'm not sure where to travel from here.  I have also double checked,
and re-written my smb.conf file to be sure, and i still have the same
probs.
If anyone can help, I would be much appreciative.

Regards,
Daniel.


Hi Daniel,

to join a domain you need to create a machine account first. if you use 
samba with no special backend (e.g. ldap) you need to create a linux 
system account AND a samba account for the machine you want to bring in.


please search for machine account and samba on google and in a couple of 
minutes you sould be up and running


ciao,

Martin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Locking problems on a Windows server with samba OSX clients

2005-08-29 Thread Martin Petersen

Guillaume Laurès schrieb:

Hello,

I have a small amount of Mac OS X 10.3 workstations networked on a Windows 2000 
server. The samba version on the Macs is 3.0.10.

For each file stored on the Windows server, the Macs create a file beginning with ._ 
which contains some resources about the file. My problem is that, just by browsing onto 
directories, the Macs seem to be locking all those ._ files (and not the regular file 
unless we open them), and this prevents moving the regular files, as well as renaming, saving etc.
The only way to unlock the files is to get the Mac unmount the share.

Mac OS X 10.2 workstations (samba 2.2) do create the same files, but do not 
lock them. I'm looking after 10.4 to see if there is a similar behaviour or not.

My question: is there a locking option I can switch on the samba clients ?

Thanks a lot for any help !


Guillaume



Hi Guillaume,

we're using Mac OS X 10.3 and 10.4 as SMB-Clients and we have been very 
disappointed with this hidden files (e.g. .DS_Store). I have fount this 
hint http://tinyurl.com/d6z9c at the site Mac OS X hints, which prevents 
Mac OS X Clients from writing their special hidden files to network 
shares. Maybe it is worth a look for You.


Ciao,

Martin Petersen
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Locking problems on a Windows server with samba OSX clients

2005-08-29 Thread Martin Petersen

Guillaume Laurès schrieb:

Thanks for your input. Unfortunately it does not solve the problem, which really is that 
._* files get locked until client disconnects, without reason and blocking 
the other clients.

Still searching...

Guillaume 


-Message d'origine-
De : Martin Petersen [mailto:[EMAIL PROTECTED] 
Envoyé : lundi 29 août 2005 13:52

À : Guillaume Laurès
Cc : samba@lists.samba.org
Objet : Re: [Samba] Locking problems on a Windows server with samba OSX clients

Guillaume Laurès schrieb:


Hello,

I have a small amount of Mac OS X 10.3 workstations networked on a Windows 2000 
server. The samba version on the Macs is 3.0.10.

For each file stored on the Windows server, the Macs create a file beginning with ._ 
which contains some resources about the file. My problem is that, just by browsing onto 
directories, the Macs seem to be locking all those ._ files (and not the regular file 
unless we open them), and this prevents moving the regular files, as well as renaming, saving etc.
The only way to unlock the files is to get the Mac unmount the share.

Mac OS X 10.2 workstations (samba 2.2) do create the same files, but do not 
lock them. I'm looking after 10.4 to see if there is a similar behaviour or not.

My question: is there a locking option I can switch on the samba clients ?

Thanks a lot for any help !


Guillaume




Hi Guillaume,

we're using Mac OS X 10.3 and 10.4 as SMB-Clients and we have been very 
disappointed with this hidden files (e.g. .DS_Store). I have fount this 
hint http://tinyurl.com/d6z9c at the site Mac OS X hints, which prevents 
Mac OS X Clients from writing their special hidden files to network 
shares. Maybe it is worth a look for You.


Ciao,

Martin Petersen


O.k., then I have another URL for You. Search on macwindows.com for a 
solution, they have a special Mac-Win2k section at 
http://macwindows.com/Win2000.html


good luck.

Martin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The Next Guide Will Be...

2005-08-10 Thread Martin Petersen

Hi Dustin,

Dortch, Dustin wrote:

The Next Guide Will Be...
August 3rd, 2005

The next guide on Sambadmin will about creating a great LDAP
infrastructure. I have been disappointed that I have only
received two comments about what the next guide should be,
especially since the site has had over 500 visitors in the
past two days.


I was one of these :).
I am looking forward to see Your site growing.


I came to this decision after reading my posts. I stated that
the core motivation behind all of this is LDAP. Sure, Samba IS 
great, but we can have file/print sharing on a Windows server.

What really takes the cake is to have tightly integrated
services, and this is made possible by LDAP.

So, if you have any comments you would like to make about what 
a completely integrated directory solution should include, do

not hesitate to comment. Here is what I will list, for
starters.

http://www.sambadmin.com/sambadmin/?postid=8


One of LDAPs main problems for N00bs is to understand the setup 
procedures. Maybe You could break the first steps down to a level that 
even I could understand :).


I think everybody would like to have seperated the system users and the 
samba (domain) users with LDAP or MySQL as backend.


As John wrote, don't be disappointed. Your are doing great.

Martin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: Fw: [Samba] Mac OSX Tiger 10.4.2 SMB

2005-08-10 Thread Martin Petersen

Hi Neil,

didn't even knew that OS X could join domains.
Perhabs this site http://www.macwindows.com has something to offer for 
You. Good Luck.


Martin

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba PDC problem

2005-07-12 Thread Martin Petersen

Hi Nicola,

with WinNT, Win2k or WinXP I need to change some permissions.
Start on the client machines the Group Policy editor (gpedit.msc) and 
try to find the switch Don't check for permissions on profile.


I'am sorry but I don't own a Win32 machine right now.

Your problem is that the Windows internal permission check fails on the 
Samba PDC profile.


Hope I could help.

Martin Petersen
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba PDC problem

2005-07-12 Thread Martin Petersen

Hi Nicola (again :),

found what You were looking for:


Some information I found in the Unofficial Samba HowTo
(http://hr.uoregon.edu/davidrl/samba.html) on XP Pro clients.

Extract from there follows:

## EXTRACT ##

Windows XP Clients

To force Windows XP Professional clients to accept Samba as a PDC, use 
the built-in XP Group Policy editor (gpedit.msc) and locate the Computer
Configuration\Windows Settings\Security Settings\Local Policies\Security 
Options branch. Make sure to disable the following policies:


Domain Member: Digitally encrypt or sign secure channel data (always)
Domain Member: Digitally sign secure channel data (when possible)

Alternately, you can make the following change to the registry:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
requiresignorseal=dword:
signsecurechannel=dword:

To disable annoying Event Viewer notifications about Automatic 
ertificate enrollment for local system failed to contact the active 
directory every eight hours, locate the Computer Configuration\Windows 
Settings\Security Settings\Public Key Policies branch and select Do not 
enroll certificates automatically under Autoenrollment Settings. Note 
that this policy won't be available until after the XP machine has 
joined the domain.


If you'd like to use Roaming Profiles with Windows XP clients that have 
Service Pack 1 or later installed, use the built-in XP Group Policy 
editor (gpedit.msc) and locate the Computer Configuration\Administrative 
Templates\System\User Profiles branch. This is described in Microsoft's 
Technet Q327462. Make sure to enable the following policy:


Do not check for user ownership of Roaming Profile Folders

Alternately, you can make the following change to the registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
CompatibleRUPSecurity=dword:0001

Alternately as well, you can make the following addition to your 
smb.conf file:


[profile]
   profile acls = yes

Windows XP Home Edition does not support logging into a Primary Domain
Controller, so you'll have to use Windows XP Professional instead.

## END EXTRACT ##

Ciao,

Martin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] change machine password

2005-07-03 Thread Martin Petersen

Tilo Lutz schrieb:

Hi

I use some programs to clone a windows workstation and
duplicate it's image on other workstations.
After cloning I change the workstation name and add a
machine account on the samba pdc.
Now I want to create a new password for the workstation
account and store it.

I use Suse Linux 9.3 as samba pdc. samba version is 3.0.13.
How can I set the password for a workstation?


Notebook:/etc/samba # smbpasswd -m test
Failed to set password for user test$.
Failed to modify password entry for user test$


I tried smbpasswd to change the password but this doesn't
seem to work.
Is there any other way to change the password?

I know I can modify the file smbpasswd directly or change
the password in ldap. But I want a clean solution working with
every password backend.

Best regards,

Tilo Lutz


As far as I know You need to set a system account. smbpasswd gives this
error because of the missing user entry for test$ in /etc/passwd.

Just add the user without shell and homedir and try smbpasswd again.

Hope this helps, please let me know I've You have another kind of setup
and You are sure that You don't need a plain system account for Your
machine accounts.

Martin

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] change machine password

2005-07-03 Thread Martin Petersen

Tilo Lutz schrieb:

Tilo Lutz schrieb:


I use some programs to clone a windows workstation and
duplicate it's image on other workstations.
After cloning I change the workstation name and add a
machine account on the samba pdc.
Now I want to create a new password for the workstation
account and store it.



Notebook:/etc/samba # smbpasswd -m test
Failed to set password for user test$.
Failed to modify password entry for user test$



Am Sonntag, 3. Juli 2005 14:55 schrieb Martin Petersen:


As far as I know You need to set a system account. smbpasswd gives this
error because of the missing user entry for test$ in /etc/passwd.



No. The account exists:


Notebook:/home/tilo # smbpasswd -a -m test
Added user test$.
Notebook:/home/tilo #



Cheers, Tilo


So the system machine account exits but smbpasswd will not allow to 
create the samba user account for this machine?


After I've read Your first post again: Maybe the machine account doesn't 
even need a password but You only need to to add the account with 
smbpasswd -a -m test$?


I've set up a couple of Win32 domain members with cloning and my 
problems only occured with the clients and not the backend (e.g. get 
machine out of domain and bring in again).



Martin

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] change machine password

2005-07-03 Thread Martin Petersen

Tilo Lutz schrieb:

Tilo Lutz schrieb:


I use some programs to clone a windows workstation and
duplicate it's image on other workstations.
After cloning I change the workstation name and add a
machine account on the samba pdc.
Now I want to create a new password for the workstation
account and store it.




Notebook:/etc/samba # smbpasswd -m test
Failed to set password for user test$.
Failed to modify password entry for user test$




Am Sonntag, 3. Juli 2005 14:55 schrieb Martin Petersen:



As far as I know You need to set a system account. smbpasswd gives this
error because of the missing user entry for test$ in /etc/passwd.



So the system machine account exits but smbpasswd will not allow to 
create the samba user account for this machine?



After I've read Your first post again: Maybe the machine account doesn't 
even need a password but You only need to to add the account with 
smbpasswd -a -m test$?



No, everything is fine. I can add and remove workstations without problems.
But as soon as I try to change the workstations password with
smbpasswd -m -w workstation or
(echo pass;echo pass) | smbpasswd -s -m -e workstation
I get the above error.

Cheers, Tilo



So I am sorry to say that I am not of any help here. Good luck.

Martin

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba