Re: [Samba] Home-Shares are not writeable

2012-06-23 Thread Mat Enders
You have them set to read only

read only = yes
Mat Enders from my BlackBerry®

-Original Message-
From: Sebastian Suchanek sa...@suchanek.de
Sender: samba-boun...@lists.samba.org
Date: Sat, 23 Jun 2012 23:38:22 
To: samba@lists.samba.org
Subject: [Samba] Home-Shares are not writeable

Hello everyone!

After running Samba on several machines for some years, I just came 
accross a rather strange problem. The short story is that the special 
user home shares are readable, but not writeable.

Here's the long story: The system is a freshly set-up Debian Squeeze, 
right out of the box. This is the Samba config:

 8 
[global]
 workgroup = HST
 server string = %h server
 dns proxy = no
 log file = /var/log/samba/log.%m
 max log size = 1000
 syslog = 0
 log level = 4
 panic action = /usr/share/samba/panic-action %d
 encrypt passwords = true
 passdb backend = tdbsam
 obey pam restrictions = yes
 unix password sync = yes
 passwd program = /usr/bin/passwd %u
 passwd chat = *Enter\snew\s*\spassword:* %n\n 
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
 pam password change = yes


[homes]
 comment = Home Directories
 browseable = no
 read only = yes
 create mask = 0700
 directory mask = 0700
 valid users = %S
 8 

(Aside from the added log level line and the removed printer shares, 
this is exactly the config file as delivered by Debian.)

I've added a linux user testuser including a home directory and set a 
Samba password by using smbpasswd -a testuser.

 8 
tux:/home# ls -la
...
drwxr-xr-x  2 testuser testuser  4096 23. Jun 14:01 testuser
 8 


And this is what happens when I try to connect to the share and do a 
write operation, for instance creating a directoy:

 8 
tux:/home# smbclient -U testuser localhost\\testuser
Enter testuser's password:
Domain=[HST] OS=[Unix] Server=[Samba 3.5.6]
smb: \ mkdir test
NT_STATUS_MEDIA_WRITE_PROTECTED making remote directory \test
smb: \
 8 

As you can see from the directory listing above, the directory of course 
is not write protected. (BTW: chmod-ing testuser's home directory to 777 
didn't change anything.)

Here's an excerpt from /var/log/samba/log.tux. I've removed several 
lines that seemed irrelevant to me in order to keep this mail short. Of 
course I can supply the skipped lines if needed.

 8 
[2012/06/23 14:07:02.437822,  3] auth/auth.c:216(check_ntlm_password)
check_ntlm_password:  Checking password for unmapped user 
[HST]\[testuser]@[TUX] with the new password interface
[2012/06/23 14:07:02.437836,  3] auth/auth.c:219(check_ntlm_password)
check_ntlm_password:  mapped user is: [TUX]\[testuser]@[TUX]
[2012/06/23 14:07:02.437849,  3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/06/23 14:07:02.437858,  3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/06/23 14:07:02.437865,  3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/06/23 14:07:02.437895,  4] lib/substitute.c:504(automount_server)
Home server: tux
[2012/06/23 14:07:02.437907,  4] lib/substitute.c:504(automount_server)
Home server: tux
...
[2012/06/23 14:07:02.438168,  4] lib/substitute.c:504(automount_server)
Home server: tux
[2012/06/23 14:07:02.438178,  4] lib/substitute.c:504(automount_server)
Home server: tux
...
[2012/06/23 14:07:02.438345,  4] 
../libcli/auth/ntlm_check.c:399(ntlm_password_check)
ntlm_password_check: Checking NT MD4 password
[2012/06/23 14:07:02.438388,  4] auth/auth_sam.c:180(sam_account_ok)
sam_account_ok: Checking SMB password for user testuser
...
[2012/06/23 14:07:02.438505,  3] auth/auth.c:265(check_ntlm_password)
check_ntlm_password: sam authentication for user [testuser] succeeded
[2012/06/23 14:07:02.438513,  3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2012/06/23 14:07:02.438520,  3] smbd/uid.c:429(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2012/06/23 14:07:02.438527,  3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/06/23 14:07:02.438537,  4] auth/pampass.c:472(smb_pam_start)
smb_pam_start: PAM: Init user: testuser
[2012/06/23 14:07:02.439100,  4] auth/pampass.c:489(smb_pam_start)
smb_pam_start: PAM: setting rhost to: :::127.0.0.1
[2012/06/23 14:07:02.439113,  4] auth/pampass.c:498(smb_pam_start)
smb_pam_start: PAM: setting tty
[2012/06/23 14:07

[Samba] Cached credentials issues and domain and server name being interchanged

2012-01-22 Thread Mat Enders
Hello all,

I am having some difficulties after migrating the PDC from one
server to another cached credentials no longer work.  Users used to be
able to take their laptops home and then logon using their cached
domain credentials.  Now when this is attempted now they get the error
that the GAUACA domain is not available.  All of the group policy
settings are set to allow cached logons and this used to work with the
exact same machines with the exact same GP settings.

   Also the domain name and the servers netbios names are becoming
confused.  We use RDP fairly extensively and to use RDP you have to be
added to the machine as a remote user.  When I add the staff member to
the machine they show up as GAUACA\[username] and then after the first
time they logon to that machine their name changes to
ARDVARC\[username].  GAUACA is the domain name and ARDVARC is the
netbios name of the server.  All works correctly on site users can
login to the domain from any machine that has been joined and works as
expected except for cached credentials.

See smb.conf below

[global]
smb passwd file = /etc/samba/passdb.tdb
enable privileges = yes
logon drive = H:
domain master = yes
encrypt passwords = true
logon home = \\%L\%U
netbios name = ARDVARC
server string = Gaudior's PDC
logon script = logon.bat
local master = yes
workgroup = GAUACA
logon path = \\%L\%U\profile
os level = 99
security = user
add machine script = /usr/sbin/useradd -s /bin/false \-d /dev/null %u
preferred master = yes
domain logons = yes
hide files = 
/desktop.ini/$RECYCLE.BIN/profile/profile.V2/profile.old/profile.V2.old/
guest account = nobody
map to guest = bad user
wins support = yes

[staff]
comment = staff share drive
path = /home/staff/share
read only = no

[student]
comment = student share by level
path = /home/student/share
read only = no

[netlogon]
comment = Net Logon Service
path = /home/netlogon
read only = yes
write list = root
public = yes
guest ok = yes
browsable = no

[homes]
comment = Home
valid users = %S
read only = no
browsable = no

-- 
Mathew E. Enders

Where once Samba and Apache sold Linux to the world they are now just
part of the plumbing.  But that's OK, plumbers make good money.
--Jeremy Allison
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] SOLVED The Group Policy Client service failed the logon. Access is denied.

2012-01-09 Thread Mat Enders
I am not sure how it got fixed but now it works. 

I deleted the registry key, deleted, and deleted their roaming profile from 
their home directory. And all works now. 
--Original Message--
From: Menders
To: samba@lists.samba.org
Subject: The Group Policy Client service failed the logon. Access is denied.
Sent: Jan 4, 2012 02:38

Hello all,

  Let give the background.  We replaced our PDC with a new
machine.  Both old and new machines are running Debian 6.0 Squeeze and
Samba 3.5.6.  moved all data and user accounts to new server.  New
server has the exact same configuration files as the old server.  All
machines have been rejoined to the domain both WinXP and Win7.  The
WinXP machines work perfectly all domain users can login with their
roaming profiles and all is good.  However on the Win7 machines none
of the network users can log in to the machine.  Upon attempting you
get the this error The Group Policy Client service failed the logon.
Access is denied.  After Googling around for a solution I have
attempted the following solutions:

1) Delete the roaming profile
   Machine recreates the roaming profile but denies login
2) Delete registry key from
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrent
VersionProfilelist[USERSKEY]
   Machine recreates the key but denies login
3) Both 12 at the same time
   Machine recreates the roaming profile and the key but denies login

Any pointers would be greatly appreciated see smb.conf file below.


[global]
smb passwd file = /etc/samba/passdb.tdb
enable privileges = yes
logon drive = H:
domain master = yes
encrypt passwords = true
logon home = \\%L\%U
netbios name = ARDVARC
server string = Gaudior's PDC
logon script = logon.bat
local master = yes
workgroup = GAUACA
logon path = \\%L\%U\profile
os level = 99
security = user
add machine script = /usr/sbin/useradd -s /bin/false \-d /dev/null %u
preferred master = yes
domain logons = yes
hide files = /desktop.ini/$RECYCLE.BIN/profile/profile.V2/
guest account = nobody
map to guest = bad user
wins support = yes

[staff]
comment = staff share drive
path = /home/staff/share
read only = no
;valid users =

[student]
comment = student share by level
path = /home/student/share
read only = no

[netlogon]
comment = Net Logon Service
path = /home/netlogon
read only = yes
write list = root
public = yes
guest ok = yes
browsable = no

[homes]
comment = Home
valid users = %S
read only = no
browsable = no


-- 
Mathew E. Enders

Where once Samba and Apache sold Linux to the world they are now just
part of the plumbing.  But that's OK, plumbers make good money.
--Jeremy Allison

Mat Enders from my BlackBerry®
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] The Group Policy Client service failed the logon. Access is denied.

2012-01-04 Thread Mat Enders
I did not ruse the old tdb I recreated all of the users from scratch and moved 
their home directory data then chown their home directories to give correct 
owner and group of files. I do not create the  Samba users I have it set so 
when I create a new Linux user the Samba user is created. If it where the tdb 
wouldn't their be problems when logging in to an XP machine. 
--Original Message--
From: TAKAHASHI Motonobu
To: Menders
Cc: samba@lists.samba.org
Subject: Re: [Samba] The Group Policy Client service failed the logon. Access 
is denied.
Sent: Jan 4, 2012 04:20

From: Mat Enders mat.end...@gmail.com
Date: Wed, 4 Jan 2012 02:38:57 -0500

   Let give the background.  We replaced our PDC with a new
 machine.  Both old and new machines are running Debian 6.0 Squeeze and
 Samba 3.5.6.  moved all data and user accounts to new server.
(snip)
 However on the Win7 machines none
 of the network users can log in to the machine.  Upon attempting you
 get the this error The Group Policy Client service failed the logon.
 Access is denied.  After Googling around for a solution I have
 attempted the following solutions:

You re-created all Samba users?
I met same issue when I re-used passdb.tdb from old machine, because
old machine's SID and new machine's SID was not same.

Or to edit all users' SID manually, the issue will be solved, I think.

---
TAKAHASHI Motonobu mo...@samba.gr.jp

Mat Enders from my BlackBerry®
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] The Group Policy Client service failed the logon. Access is denied.

2012-01-04 Thread Mat Enders
Yes all machines worked with the old PDC. And the Win7 machines joined the 
domain. User just cannot login. 
Mat Enders from my BlackBerry®

-Original Message-
From: Vasco Leal vl...@juzo-informatica.pt
Sender: samba-boun...@lists.samba.org
Date: Wed, 04 Jan 2012 10:35:44 
To: samba@lists.samba.org
Subject: Re: [Samba] The Group Policy Client service failed the logon.
 Access is denied.

Hey There Mat,

Have You Changed The Windows 7 Laman Compatilibility and that stuff on 
Windows 7?

Best Regards,
Vasco Leónidas Pinto Leal
IT Director
JUZO - Informática e Serviços, Lda

Mozilla Thunderbird, The Mail Rebirth!

Still Stucked With Windows? Give Linux a Try And Enhance Your Work!


Em 04-01-2012 07:38, Mat Enders escreveu:
 Hello all,

Let give the background.  We replaced our PDC with a new
 machine.  Both old and new machines are running Debian 6.0 Squeeze and
 Samba 3.5.6.  moved all data and user accounts to new server.  New
 server has the exact same configuration files as the old server.  All
 machines have been rejoined to the domain both WinXP and Win7.  The
 WinXP machines work perfectly all domain users can login with their
 roaming profiles and all is good.  However on the Win7 machines none
 of the network users can log in to the machine.  Upon attempting you
 get the this error The Group Policy Client service failed the logon.
 Access is denied.  After Googling around for a solution I have
 attempted the following solutions:

 1) Delete the roaming profile
 Machine recreates the roaming profile but denies login
 2) Delete registry key from
 HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrent
 VersionProfilelist[USERSKEY]
 Machine recreates the key but denies login
 3) Both 12 at the same time
 Machine recreates the roaming profile and the key but denies login

 Any pointers would be greatly appreciated see smb.conf file below.


 [global]
   smb passwd file = /etc/samba/passdb.tdb
   enable privileges = yes
   logon drive = H:
   domain master = yes
   encrypt passwords = true
   logon home = \\%L\%U
   netbios name = ARDVARC
   server string = Gaudior's PDC
   logon script = logon.bat
   local master = yes
   workgroup = GAUACA
   logon path = \\%L\%U\profile
   os level = 99
   security = user
   add machine script = /usr/sbin/useradd -s /bin/false \-d /dev/null %u
   preferred master = yes
   domain logons = yes
   hide files = /desktop.ini/$RECYCLE.BIN/profile/profile.V2/
   guest account = nobody
   map to guest = bad user
   wins support = yes

 [staff]
   comment = staff share drive
   path = /home/staff/share
   read only = no
   ;valid users =

 [student]
   comment = student share by level
   path = /home/student/share
   read only = no

 [netlogon]
   comment = Net Logon Service
   path = /home/netlogon
   read only = yes
   write list = root
   public = yes
   guest ok = yes
   browsable = no

 [homes]
   comment = Home
   valid users = %S
   read only = no
   browsable = no


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] The Group Policy Client service failed the logon. Access is denied.

2012-01-03 Thread Mat Enders
Hello all,

  Let give the background.  We replaced our PDC with a new
machine.  Both old and new machines are running Debian 6.0 Squeeze and
Samba 3.5.6.  moved all data and user accounts to new server.  New
server has the exact same configuration files as the old server.  All
machines have been rejoined to the domain both WinXP and Win7.  The
WinXP machines work perfectly all domain users can login with their
roaming profiles and all is good.  However on the Win7 machines none
of the network users can log in to the machine.  Upon attempting you
get the this error The Group Policy Client service failed the logon.
Access is denied.  After Googling around for a solution I have
attempted the following solutions:

1) Delete the roaming profile
   Machine recreates the roaming profile but denies login
2) Delete registry key from
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrent
VersionProfilelist[USERSKEY]
   Machine recreates the key but denies login
3) Both 12 at the same time
   Machine recreates the roaming profile and the key but denies login

Any pointers would be greatly appreciated see smb.conf file below.


[global]
smb passwd file = /etc/samba/passdb.tdb
enable privileges = yes
logon drive = H:
domain master = yes
encrypt passwords = true
logon home = \\%L\%U
netbios name = ARDVARC
server string = Gaudior's PDC
logon script = logon.bat
local master = yes
workgroup = GAUACA
logon path = \\%L\%U\profile
os level = 99
security = user
add machine script = /usr/sbin/useradd -s /bin/false \-d /dev/null %u
preferred master = yes
domain logons = yes
hide files = /desktop.ini/$RECYCLE.BIN/profile/profile.V2/
guest account = nobody
map to guest = bad user
wins support = yes

[staff]
comment = staff share drive
path = /home/staff/share
read only = no
;valid users =

[student]
comment = student share by level
path = /home/student/share
read only = no

[netlogon]
comment = Net Logon Service
path = /home/netlogon
read only = yes
write list = root
public = yes
guest ok = yes
browsable = no

[homes]
comment = Home
valid users = %S
read only = no
browsable = no


-- 
Mathew E. Enders

Where once Samba and Apache sold Linux to the world they are now just
part of the plumbing.  But that's OK, plumbers make good money.
--Jeremy Allison
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] R: RE: R: Re: Dos/Unix newline translating

2011-11-09 Thread Mat Enders
This ia a vimrc issue not a samba issue. Google will be your friend. 
Mat Enders from my BlackBerry®

-Original Message-
From: Riccardo Castellani ric.castell...@alice.it
Sender: samba-boun...@lists.samba.org
Date: Wed, 9 Nov 2011 12:43:23 
To: robert.gra...@cedrat.com; jd...@yahoo.com; samba@lists.samba.org
Reply-To: ric.castell...@alice.it
Subject: [Samba] R: RE:  R: Re:  Dos/Unix newline translating

on Debian I'm using  VIM 7.2.445
on RedHat I'm using VIM 6.3.82

I verified in both systems with this command : vi -v




Messaggio originale
Da: robert.gra...@cedrat.com
Data: 9-nov-2011 12.04
A: ric.castell...@alice.it, jd...@yahoo.com, samba@lists.samba.org
Ogg: RE: [Samba] R: Re:  Dos/Unix newline translating

on Debian it is possible that you are using the orginal VI. On RedHat you must 
be using ViM (VI Improved). Do you have vim on Debian
?

---
Robert GRASSO – System engineer

CEDRAT S.A.
15 Chemin de Malacher - Inovallée - 38246 MEYLAN cedex - FRANCE 
Phone: +33 (0)4 76 90 50 45 - Fax: +33 (0)4 56 38 08 30
mailto:robert.gra...@cedrat.com - http://www.cedrat.com  

 -Message d'origine-
 De : samba-boun...@lists.samba.org 
 [mailto:samba-boun...@lists.samba.org] De la part de Riccardo 
 Castellani
 Envoyé : 9 novembre 2011 11:56
 À : jd...@yahoo.com; samba@lists.samba.org
 Objet : [Samba] R: Re: Dos/Unix newline translating
 
 But I have another server with RedHat and Samba 3.0.10 
 configured in the same way, but I can view correctly text 
 files which I move to RedHat server.
 
 
 
 
 Messaggio originale
 Da: jd...@yahoo.com
 Data: 9-nov-2011 11.42
 A: samba@lists.samba.orgsamba@lists.samba.org
 Ogg: Re: [Samba] Dos/Unix newline translating
 
 From: Riccardo Castellani ric.castell...@alice.it
  if I create a text file in my Windows XP client and I copy it to 
  /temporary folder, then I open it by VI editor into my 
 Debian server and 
  I see '^M' at the end of every row.
  How can I solve problem ? Problem references to Dos/Unix newline 
  translating  ?
 
 Windows uses '\r\n' and Unix uses '\n'...
 Either configure your Windows text editor to use \n, 
 or use dos2unix or use sed, etc...
 A simple google search would have pointed to you to something like:
 http://www.cyberciti.biz/faq/howto-unix-linux-convert-dos-newl
 ines-cr-lf-unix-text-format/
 
 JD
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
 
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
 




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Ghost connections

2011-07-27 Thread mat . enders
All,

  Why do some connections to shares not die?  Sometimes when a user 
logs out of their account smbstatus shows them still connected to the shares. 
The connection will stay until samba is restarted. This was causing some 
problems on the shares with file locking. To work around the  problem about a 
month ago I put a cron job in that restarts the samba processes in the middle 
of the night but that does not solve the problem of the ghost users. 
Sent on the Sprint® Now Network from my BlackBerry®
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Logon times went from 45secs to 8mins

2011-07-17 Thread Mat Enders
All,

  There has been no change in the workstations or on the PDC
however my logon times have gone from about 45seconds to about
8minutes.  I can not figure out why as nothing has changed.

relevant from log.smbd

[2011/07/17 10:42:42.846871,  1]
smbd/service.c:1070(make_connection_snum) mike-kaczmarek
(:::10.0.2.253) connect to service user initially as user user
(uid=1106, gid=1120) (pid 8429)
[2011/07/17 10:43:24.936647,  0]
lib/util_sock.c:1441(get_peer_addr_internal) getpeername failed. Error
was Transport endpoint is not connected
[2011/07/17 10:43:24.937396,  0] lib/util_sock.c:680(write_data)
[2011/07/17 10:43:24.938451,  0]
lib/util_sock.c:1441(get_peer_addr_internal) getpeername failed. Error
was Transport endpoint is not connected write_data: write failure in
writing to client 0.0.0.0. Error Connection reset by peer
[2011/07/17 10:43:24.938673,  0] smbd/process.c:79(srv_send_smb) Error
writing 4 bytes to client. -1. (Transport endpoint is not connected)
[2011/07/17 10:44:51.740161,  1] smbd/service.c:1251(close_cnum)
mike-kaczmarek (:::10.0.2.253) closed connection to service user
[2011/07/17 10:44:51.788916,  1]
smbd/service.c:1070(make_connection_snum) mike-kaczmarek
(:::10.0.2.253) connect to service netlogon initially as user user
(uid=1106, gid=1120) (pid 8669)
[2011/07/17 10:45:03.111859,  1] smbd/service.c:1251(close_cnum)\
mike-kaczmarek (:::10.0.2.253) closed connection to service
netlogon
[2011/07/17 10:49:50.287106,  0]
lib/util_sock.c:1441(get_peer_addr_internal) getpeername failed. Error
was Transport endpoint is not connected
[2011/07/17 10:49:50.289197,  0] lib/util_sock.c:474(read_fd_with_timeout)
[2011/07/17 10:49:50.289352,  0]
lib/util_sock.c:1441(get_peer_addr_internal) getpeername failed. Error
was Transport endpoint is not connected read_fd_with_timeout: client
0.0.0.0 read error = Connection reset by peer.
[2011/07/17 10:49:50.491729,  1]
smbd/service.c:1070(make_connection_snum) mike-kaczmarek
(:::10.0.2.253) connect to service netlogon initially as user user
(uid=1106:, gid=1120) (pid 9392)
[2011/07/17 10:49:51.385269,  1]
smbd/service.c:1070(make_connection_snum) mike-kaczmarek
(:::10.0.2.253) connect to service staff initially as user user
(uid=1106, gid=1120) (pid 9392)
[2011/07/17 10:49:51.388257,  1]
smbd/service.c:1070(make_connection_snum) mike-kaczmarek
(:::10.0.2.253) connect to service student initially as user user
(uid=1106, gid=1120) (pid 9392)


smb.conf

[global]
smb passwd file = /etc/samba/passdb.tdb
enable privileges = yes
logon drive = H:
domain master = yes
encrypt passwords = true
logon home = \\%L\%U
netbios name = ARDVARC
server string = Gaudior's PDC
logon script = logon.bat
local master = yes
workgroup = GAUACA
logon path = \\%L\%U\profile
os level = 99
security = user
add machine script = /usr/sbin/useradd -s /bin/false \-d /dev/null %u
preferred master = yes
domain logons = yes
hide files = /desktop.ini/
guest account = nobody
map to guest = bad user
wins support = yes

[staff]
comment = staff share drive
path = /home/staff/share
read only = no

[student]
comment = student share by level
path = /home/stdnt/share
read only = no

[netlogon]
comment = Net Logon Service
path = /home/netlogon
read only = yes
write list = root
public = yes
guest ok = yes
browsable = no

[homes]
comment = Home
valid users = %S
read only = no
browsable = no



-- 
Mathew E. Enders
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Domain join problem

2011-07-04 Thread Mat Enders
On Mon, Jul 4, 2011 at 8:58 AM, Gary du Bois gary.dub...@gmail.com wrote:
 Hi I am having a problem joining a domain, please assist

 here is my smb.conf file:
 [global]
        workgroup = CORP
        realm = CORP.GO2UTI.COM
        preferred master = no
        server string = Samba Server
        security = ADS
        username map = /etc/samba/smbusers
        log file = /var/samba/log/log.%m
        max log size = 50
        dns proxy = No
        password server = 10.8.240.65

 [samba_test]
        comment = samba_test
        path = /provar
        valid users = @dev
        read list = @dev
        write list = @dev
        create mask = 0766

 Kerberos settings are valid and I can do a kinit and klist

 When joining the domain:

 $ net ads join -S JNBMPP03 -U sambajoin
 Enter sambajoin's password:
 Failed to join domain: failed to set machine spn: Constraint violation

 Now if I change the hostname to V240rd1:

 $ net ads join -S JNBMPP03 -U sambajoin
 Enter sambajoin's password:
 Using short domain name -- CORP
 Joined 'V240RD1' to realm 'corp.go2uti.com'
 No DNS domain configured for v240rd1. Unable to perform DNS Update.
 DNS update failed!

 This join works, obviously the shares do not work as there is a
 different netbios name

 Now if I change the hostname of the system to V240rd1 by editing the
 /etc/nodename, and then reboot the system

 Retrying the join:
 $ net ads join -S JNBMPP03 -U sambajoin
 Enter sambajoin's password:
 Failed to join domain: failed to set machine spn: Constraint violation

 Change the hostname to V240-rd-1

 $ net ads join -S JNBMPP03 -U sambajoin
 Enter sambajoin's password:
 Using short domain name -- CORP
 Joined 'V240RD1' to realm 'corp.go2uti.com'
 No DNS domain configured for v240rd1. Unable to perform DNS Update.
 DNS update failed!

  Can someone explain this?
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba


Are you trying to join Win7 clients to a samba domain?

If so did you change the appropriate registry keys:
[HKLM\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
DomainCompatibilityMode=dword:0001
DNSNameResolutionRequired=dword:


-- 
Mathew E. Enders
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] An Invitation to Neuroscientists and Physicists: SingaporeCitizen Mr. Teo En Ming (Zhang Enming) Reports First Hand Account of MindIntrusion and Mind Reading

2011-05-17 Thread mat . enders
Ok then
Sent on the Sprint® Now Network from my BlackBerry®

-Original Message-
From: Singapore Citizen Mr. Teo En Ming \(Zhang Enming\)
singapore_citizen_mr_teo_en_m...@yahoo.com.sg
Sender: samba-boun...@lists.samba.org
Date: Wed, 18 May 2011 00:11:12 
To: samba@lists.samba.org
Reply-To: singapore_citizen_mr_teo_en_m...@yahoo.com.sg
Subject: [Samba] An Invitation to Neuroscientists and Physicists: Singapore
 Citizen Mr. Teo En Ming (Zhang Enming) Reports First Hand Account of Mind
 Intrusion and Mind Reading

16 May 2011 Monday 7:28 P.M. Singapore Time
For Immediate Release

SINGAPORE, SINGAPORE - Singapore Citizen Mr. Teo En Ming (Zhang Enming) 
would like to report first hand account of mind intrusion and mind 
reading. I have been hearing voices for quite some time now but I have 
not been able to identify the persons physically. A number of 
un-identified persons have intruded into my mind and they are able to 
read my thoughts. I could not explain the mechanism by which these 
un-identified persons have been reading my mind at the moment but there 
is definitely a scientific explanation for it. I know very clearly that 
I am not suffering from schizophrenia at all.

I am fully aware that no common man would believe me except the select 
few scientific researchers working in top secret government projects and 
the human guinea pigs who are being experimented on. One of the 
possibilities is that I have a microchip implanted into my brain, 
possibly when I was an infant. It may take a few years, a few decades, 
or even a few centuries before mind reading is finally brought to light 
before the general public.

I would like to invite neuroscientists, engineers and physicists to 
speak on the scientific explanation behind mind intrusion and mind reading.

Please remember what Singapore Citizen Mr. Teo En Ming (Zhang Enming) 
have said. Mark my words. You will know the truth in future. It is no 
longer a conspiracy theory. I can affirm that it (mind intrusion and 
mind reading) is indeed happening to me.


Yours truly,
Singapore Citizen Mr. Teo En Ming (Zhang Enming) 
Dip(Mechatronics)(Singapore Polytechnic) BEng(Hons)(Mechanical 
Engineering)(National University of Singapore)
Singapore Identity Card No/NRIC: S78*6*2*H
Toa Payoh Lorong 5, Singapore
Mobile Phone: +65-8369-2618
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Inherit ACL does not work properlyQ

2011-04-15 Thread mat . enders

--Original Message--
From: Miguel Medalha
Sender: samba-boun...@lists.samba.org
To: foedi...@eva.mpg.de
Cc: samba@lists.samba.org
Subject: Re: [Samba] Inherit ACL does not work properly
Sent: Apr 15, 2011 6:56 AM



 we are using ACLs (GPFS filesystem) - configured by default ACLs. When 
 a file is copied from another share, ACLs are set correct. When a file 
 is moved(!) from another folder / share the file keeps the ACLs from 
 the source location. But we want to set the ACLs as needed on the 
 destination share. How can we do that?


That is the behavior of Windows and as such it is the correct behavior 
of Samba.
ACLs are kept and a file is moved, ACLs are set to those of the 
destination when a file is copied.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Sent on the Sprint® Now Network from my BlackBerry®
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Roaming Profiles Configuration

2011-03-29 Thread mat . enders
Yes that is where my setup stores its roaming profiles. If you would like to 
see my smb.conf send me an email off list
Sent on the Sprint® Now Network from my BlackBerry®

-Original Message-
From: Ryan Leimenstoll ryanl1...@gmail.com
Sender: samba-boun...@lists.samba.org
Date: Tue, 29 Mar 2011 22:06:01 
To: samba@lists.samba.org
Subject: Re: [Samba] Roaming Profiles Configuration

I tried Resara, but permissions still aren't honored. I can easily view and
edit other users files that are on the share, as well as change permissions.
Is it possible to have each roaming profile stored on the Homes share
accessible to only that user? Thanks

On Tue, Mar 29, 2011 at 7:20 AM, Daniel Müller muel...@tropenklinik.dewrote:

 If you are talking about samba4!?  just use the microsoft ads tools to
 gave the user rights according to your needs.
 Or look for  http://www.resara.org

 Good luck
 Daniel


 On Mon, 28 Mar 2011 17:18:04 -0400, Ryan Leimenstoll ryanl1...@gmail.com
 wrote:
  Now, I cannot access the share at all, I'd imagine because my samba4
 users
  are not local users, but are stored in the Samba4 Active Directory
  database. Is there anyway I can have Samba4 let each Samba user have his
  own
  files not viewable by others on a share? Thus
 
  On Sun, Mar 27, 2011 at 2:55 PM, Mark Shields laebsh...@gmail.com
 wrote:
 
  On Sun, Mar 27, 2011 at 12:21 PM, Ryan Leimenstoll
  ryanl1...@gmail.comwrote:
 
  Hello all! I am new to the mailing lists, as well as Samba. I was
  looking
  for an Active Directory alternative for linux, and finally landed on
  Samba4.
  My installation is alpha12, installed via apt on Ubuntu 10.10. I am
  trying
  to create roaming profiles, however, if path = /UserData then the
  profiles



  are viewable from every user account by simple accessing 
  example.samdom.com/profiles My next thought (given research I saw on
  Samba3) was to set it to path = /UserData/%U, however then clients
  cannot
  connect to the profiles share at all. I am trying to have the user's
  data
  only available through his account without creating a  new share for
  every
  single user manually. Any help with this would be greatly appreciated!
 
  Ryan
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba
 
 
  Like Windows Sharing, Samba sharing also requires appropriate local
  permissions; in other words, if you make each user's profile directory
  owned
  to that local user, and remove group/everyone access (chmod 700), you
  should
  get exactly what you want.
 
 
  - Mark Shields
 

Wouldn't that allow users to still access other files on the share from a
UNIX system or other machine not bound to the domain?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win7/W2K8 R2 sp1

2011-03-13 Thread mat . enders
I have noticed, in the past, that a service pack changes the machines footprint 
and breaks the trust relationship causing you to have to rejoin them to the 
domain. 
--Original Message--
From: Zuskov, M.S.
Sender: samba-boun...@lists.samba.org
To: samba@lists.samba.org
Subject: [Samba] Win7/W2K8 R2 sp1
Sent: Mar 10, 2011 12:00 PM

After upgrading Win7 and W2K8 R2 clients to service pack 1 it is no longer 
possible to log in to domain(before the upgrade the clients can log in into 
domain). Clean installation of Win7/W2K8 R2 with integrated sp1 has the same 
effect. Our domain PDC is running on samba 3.3.7. I'm curious if anyone else 
has seen this already.

Thank you
Mikhail Zuskov

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Sent on the Sprint® Now Network from my BlackBerry®
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Access to a share resource without password

2011-02-25 Thread mat . enders
I believe your permissions are not correct. If I understand correctly you want 
to run a wide open share that allows everyone full control. If this is correct 
then first:

chmod -R 777 /your/share

Change your create masks to:

create mask = 0777
directory mask = 0777
Sent on the Sprint® Now Network from my BlackBerry®

-Original Message-
From: J. L. Cabral jelocab...@gmail.com
Sender: samba-boun...@lists.samba.org
Date: Fri, 25 Feb 2011 12:22:12 
To: sambasamba@lists.samba.org
Subject: [Samba] Access to a share resource without password

Dear, I have a Linux Samba server and a Windows XP SP2 client joined
to the g-company.net domain.

I want to access a Linux share resource in /var/share without password
from WXP desktop FROM ANY USER.

This is my scenario:

- I don't create any Linux local user because I want total access from any user

- I use security = share

- My smbusers file is:

root = administrator admin
nobody = guest pcguest smbguest

- The Windows XP guest account is guest but I don't know if it has
any password setup.

- This is my smb.conf:

[global]
workgroup = G-COMPANY.NET
server string = Samba Server Version %v
security = SHARE
passdb backend = tdbsam

[share]
comment = Archivos Compartidos
path = /var/share
read only = No
create mask = 0700
directory mask = 0700
guest only = Yes
guest ok = Yes

Form Windows XP I execute:

\\samba_server\share

but I get the error DENIED ACCESS.

What can I do to access this resource ???

Thanks a lot,

JeLo
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Access to a share resource without password

2011-02-25 Thread mat . enders
Did you restart samba?
Sent on the Sprint® Now Network from my BlackBerry®

-Original Message-
From: J. L. Cabral jelocab...@gmail.com
Date: Fri, 25 Feb 2011 13:05:35 
To: mat.end...@gmail.com
Cc: sambasamba@lists.samba.org
Subject: Re: [Samba] Access to a share resource without password

I have /var/share with rwx-rwx-rwx, and I put create and directory
masks with 777 values.

But I still get ACCESS DENIED error.

Do I have to create a local Linux user account ??? Or waht ??? Because
I need to give full access to every user from my LAN.

Thanks in advance.

JeLo

On Fri, Feb 25, 2011 at 12:39 PM,  mat.end...@gmail.com wrote:
 I believe your permissions are not correct. If I understand correctly you 
 want to run a wide open share that allows everyone full control. If this is 
 correct then first:

 chmod -R 777 /your/share

 Change your create masks to:

 create mask = 0777
 directory mask = 0777
 Sent on the Sprint® Now Network from my BlackBerry®

 -Original Message-
 From: J. L. Cabral jelocab...@gmail.com
 Sender: samba-boun...@lists.samba.org
 Date: Fri, 25 Feb 2011 12:22:12
 To: sambasamba@lists.samba.org
 Subject: [Samba] Access to a share resource without password

 Dear, I have a Linux Samba server and a Windows XP SP2 client joined
 to the g-company.net domain.

 I want to access a Linux share resource in /var/share without password
 from WXP desktop FROM ANY USER.

 This is my scenario:

 - I don't create any Linux local user because I want total access from any 
 user

 - I use security = share

 - My smbusers file is:

 root = administrator admin
 nobody = guest pcguest smbguest

 - The Windows XP guest account is guest but I don't know if it has
 any password setup.

 - This is my smb.conf:

 [global]
        workgroup = G-COMPANY.NET
        server string = Samba Server Version %v
        security = SHARE
        passdb backend = tdbsam

 [share]
        comment = Archivos Compartidos
        path = /var/share
        read only = No
        create mask = 0700
        directory mask = 0700
        guest only = Yes
        guest ok = Yes

 Form Windows XP I execute:

 \\samba_server\share

 but I get the error DENIED ACCESS.

 What can I do to access this resource ???

 Thanks a lot,

 JeLo
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Access to a share resource without password

2011-02-25 Thread mat . enders
Is the Samba server a member of the domain?
Sent on the Sprint® Now Network from my BlackBerry®

-Original Message-
From: J. L. Cabral jelocab...@gmail.com
Date: Fri, 25 Feb 2011 13:12:35 
To: mat.end...@gmail.com
Cc: sambasamba@lists.samba.org
Subject: Re: [Samba] Access to a share resource without password

Yes, of course, I restarted smb.

Maybe any problem in the windows domain settings they avoid join to a
samba server ???

On Fri, Feb 25, 2011 at 1:08 PM,  mat.end...@gmail.com wrote:
 Did you restart samba?
 Sent on the Sprint® Now Network from my BlackBerry®

 -Original Message-
 From: J. L. Cabral jelocab...@gmail.com
 Date: Fri, 25 Feb 2011 13:05:35
 To: mat.end...@gmail.com
 Cc: sambasamba@lists.samba.org
 Subject: Re: [Samba] Access to a share resource without password

 I have /var/share with rwx-rwx-rwx, and I put create and directory
 masks with 777 values.

 But I still get ACCESS DENIED error.

 Do I have to create a local Linux user account ??? Or waht ??? Because
 I need to give full access to every user from my LAN.

 Thanks in advance.

 JeLo

 On Fri, Feb 25, 2011 at 12:39 PM,  mat.end...@gmail.com wrote:
 I believe your permissions are not correct. If I understand correctly you 
 want to run a wide open share that allows everyone full control. If this is 
 correct then first:

 chmod -R 777 /your/share

 Change your create masks to:

 create mask = 0777
 directory mask = 0777
 Sent on the Sprint® Now Network from my BlackBerry®

 -Original Message-
 From: J. L. Cabral jelocab...@gmail.com
 Sender: samba-boun...@lists.samba.org
 Date: Fri, 25 Feb 2011 12:22:12
 To: sambasamba@lists.samba.org
 Subject: [Samba] Access to a share resource without password

 Dear, I have a Linux Samba server and a Windows XP SP2 client joined
 to the g-company.net domain.

 I want to access a Linux share resource in /var/share without password
 from WXP desktop FROM ANY USER.

 This is my scenario:

 - I don't create any Linux local user because I want total access from any 
 user

 - I use security = share

 - My smbusers file is:

 root = administrator admin
 nobody = guest pcguest smbguest

 - The Windows XP guest account is guest but I don't know if it has
 any password setup.

 - This is my smb.conf:

 [global]
        workgroup = G-COMPANY.NET
        server string = Samba Server Version %v
        security = SHARE
        passdb backend = tdbsam

 [share]
        comment = Archivos Compartidos
        path = /var/share
        read only = No
        create mask = 0700
        directory mask = 0700
        guest only = Yes
        guest ok = Yes

 Form Windows XP I execute:

 \\samba_server\share

 but I get the error DENIED ACCESS.

 What can I do to access this resource ???

 Thanks a lot,

 JeLo
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Access to a share resource without password

2011-02-25 Thread mat . enders
I would try joining it to the domain and if that does not work I am sorry but I 
am out of ideas. 
Sent on the Sprint® Now Network from my BlackBerry®

-Original Message-
From: J. L. Cabral jelocab...@gmail.com
Date: Fri, 25 Feb 2011 13:25:05 
To: mat.end...@gmail.com; sambasamba@lists.samba.org
Subject: Re: [Samba] Access to a share resource without password

No, my samba server is not a member of a domain, it's a standalone
server with the WORKGROUP = windows domain.

Any idea ?

On Fri, Feb 25, 2011 at 1:21 PM,  mat.end...@gmail.com wrote:
 Is the Samba server a member of the domain?
 Sent on the Sprint® Now Network from my BlackBerry®

 -Original Message-
 From: J. L. Cabral jelocab...@gmail.com
 Date: Fri, 25 Feb 2011 13:12:35
 To: mat.end...@gmail.com
 Cc: sambasamba@lists.samba.org
 Subject: Re: [Samba] Access to a share resource without password

 Yes, of course, I restarted smb.

 Maybe any problem in the windows domain settings they avoid join to a
 samba server ???

 On Fri, Feb 25, 2011 at 1:08 PM,  mat.end...@gmail.com wrote:
 Did you restart samba?
 Sent on the Sprint® Now Network from my BlackBerry®

 -Original Message-
 From: J. L. Cabral jelocab...@gmail.com
 Date: Fri, 25 Feb 2011 13:05:35
 To: mat.end...@gmail.com
 Cc: sambasamba@lists.samba.org
 Subject: Re: [Samba] Access to a share resource without password

 I have /var/share with rwx-rwx-rwx, and I put create and directory
 masks with 777 values.

 But I still get ACCESS DENIED error.

 Do I have to create a local Linux user account ??? Or waht ??? Because
 I need to give full access to every user from my LAN.

 Thanks in advance.

 JeLo

 On Fri, Feb 25, 2011 at 12:39 PM,  mat.end...@gmail.com wrote:
 I believe your permissions are not correct. If I understand correctly you 
 want to run a wide open share that allows everyone full control. If this is 
 correct then first:

 chmod -R 777 /your/share

 Change your create masks to:

 create mask = 0777
 directory mask = 0777
 Sent on the Sprint® Now Network from my BlackBerry®

 -Original Message-
 From: J. L. Cabral jelocab...@gmail.com
 Sender: samba-boun...@lists.samba.org
 Date: Fri, 25 Feb 2011 12:22:12
 To: sambasamba@lists.samba.org
 Subject: [Samba] Access to a share resource without password

 Dear, I have a Linux Samba server and a Windows XP SP2 client joined
 to the g-company.net domain.

 I want to access a Linux share resource in /var/share without password
 from WXP desktop FROM ANY USER.

 This is my scenario:

 - I don't create any Linux local user because I want total access from any 
 user

 - I use security = share

 - My smbusers file is:

 root = administrator admin
 nobody = guest pcguest smbguest

 - The Windows XP guest account is guest but I don't know if it has
 any password setup.

 - This is my smb.conf:

 [global]
        workgroup = G-COMPANY.NET
        server string = Samba Server Version %v
        security = SHARE
        passdb backend = tdbsam

 [share]
        comment = Archivos Compartidos
        path = /var/share
        read only = No
        create mask = 0700
        directory mask = 0700
        guest only = Yes
        guest ok = Yes

 Form Windows XP I execute:

 \\samba_server\share

 but I get the error DENIED ACCESS.

 What can I do to access this resource ???

 Thanks a lot,

 JeLo
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba not knowing new users

2011-01-19 Thread mat . enders
Sorry for the top post but that is the way BlackBerry does it

When you say restart do you mean the server or samba. 
--Original Message--
From: Hajo Locke
Sender: samba-boun...@lists.samba.org
To: samba@lists.samba.org
Subject: Re: [Samba] samba not knowing new users
Sent: Jan 19, 2011 6:08 AM

Hello,

 Is this server a PDC or standalone server?
this is a standalone server Ubuntu 10.04 lts, simple samba-setup for 
inetusers.

 What is the backend for samba accounts?
passdb backend = smbpasswd

 Do you create unix accounts first as well, or are you using winbind/idmap 
 backend to allocate unix id's for the samba accounts.
 Do accounts show up with wbinfo -u ?

we create the unix-accounts and after this we add the user to samba by 
smbpasswd -sa
i can see all users in the smbpasswd file.
hmm, i installed winwind, we dont use it but wbinfo -u shows all users incl. 
the users which wont work (NT_STATUS_NO_SUCH_USER)

this is a mircale to me, only restart helps to get users to work.

Thanks,
Hajo 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Sent on the Sprint® Now Network from my BlackBerry®
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] PDC broke after upgrade

2011-01-17 Thread Mat Enders
On Mon, Jan 17, 2011 at 5:15 AM, Mat Enders mat.end...@gmail.com wrote:



 On Mon, Jan 17, 2011 at 2:24 AM, Helmut Hullen hul...@t-online.de wrote:

 Hallo, Mat,

 Du meintest am 16.01.11:

  I upgraded from Debian Lenny (Samba 3.2.5) to Squeeze (Samba 3.5.6)
  and now my PDC does not work.

  In the past when upgrading from one release to another all of the
  machine trust accounts no longer worked but I was able to just rejoin
  then to the domain.  Now however the join fails with unknown user and
  bad password.  I have always used root and roots password what am I
  missing?  What changed between these 2 releases?

 What tells

testparm -s 2/dev/null | grep passdb
testparm -sv 2/dev/null | grep passdb

 The first line tells what is defined in the smb.conf, the second tells
 all pre-defined options too.

 Samba 3.5.6 uses tdbsam, earlier versions have used smbpasswd; you
 should look which file (smbpasswd or passdb.tdb) your old version
 has used.
 For converting you can use pdbedit.

 Viele Gruesse!
 Helmut
 --


  Helmut,

   Danke, I will check this I am sure that is the problem as I was
 using smbpasswd.  Will pdbedit convert my smbpasswd file to tdbsam?

 --
 Mathew E. Enders


Helmut,

 Or did the upgrade convert smbpasswd to  tdbsam and all I need to
do is change my smb.conf?

-- 
Mathew E. Enders
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] PDC broke after upgrade

2011-01-17 Thread mat . enders
Thanks Helmut I will check the time stamps later. I was using smbpasswd and 
that is what is called for in my smb.conf file. 
Sent on the Sprint® Now Network from my BlackBerry®

-Original Message-
From: Helmut Hullen hul...@t-online.de
Sender: samba-boun...@lists.samba.org
Date: 17 Jan 2011 14:56:00 
To: samba@lists.samba.org
Reply-To: hel...@hullen.de
Subject: Re: [Samba] PDC broke after upgrade

Hallo, Mat,

Du meintest am 17.01.11:

 Samba 3.5.6 uses tdbsam, earlier versions have used smbpasswd;
 you should look which file (smbpasswd or passdb.tdb) your old
 version has used.
 For converting you can use pdbedit.

   Danke, I will check this I am sure that is the problem as
   I was
 using smbpasswd.  Will pdbedit convert my smbpasswd file to tdbsam?



If your distribution puts smbpasswd into /etc/samba/private:


pdbedit -i smbpasswd:/etc/samba/private/smbpasswd -e 
tdbsam:/etc/samba/private/passdb.tdb


It's a very good idea to first look into the directory and look at the  
timestamps of source and target file ... the pdbedit command overwrites  
existing files.

  Or did the upgrade convert smbpasswd to  tdbsam and all I
 need to do is change my smb.conf?

I can't see what has happened.
Which timestamp has your smbpasswd, which timestamp has your  
passdb.tdb?

Or do you use LDAP? Then perhaps your system wants to use the LDAP crap  
as password backend.

You can define your special backend in the [global] part of your  
smb.conf.

Viele Gruesse!
Helmut
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] PDC broke after upgrade

2011-01-17 Thread Mat Enders
On Mon, Jan 17, 2011 at 9:05 AM, mat.end...@gmail.com wrote:

 Thanks Helmut I will check the time stamps later. I was using smbpasswd and
 that is what is called for in my smb.conf file.
 Sent on the Sprint® Now Network from my BlackBerry®

 -Original Message-
 From: Helmut Hullen hul...@t-online.de
 Sender: samba-boun...@lists.samba.org
 Date: 17 Jan 2011 14:56:00
 To: samba@lists.samba.org
 Reply-To: hel...@hullen.de
 Subject: Re: [Samba] PDC broke after upgrade

 Hallo, Mat,

 Du meintest am 17.01.11:

  Samba 3.5.6 uses tdbsam, earlier versions have used smbpasswd;
  you should look which file (smbpasswd or passdb.tdb) your old
  version has used.
  For converting you can use pdbedit.

Danke, I will check this I am sure that is the problem as
I was
  using smbpasswd.  Will pdbedit convert my smbpasswd file to tdbsam?



 If your distribution puts smbpasswd into /etc/samba/private:


 pdbedit -i smbpasswd:/etc/samba/private/smbpasswd -e
 tdbsam:/etc/samba/private/passdb.tdb


 It's a very good idea to first look into the directory and look at the
 timestamps of source and target file ... the pdbedit command overwrites
 existing files.

   Or did the upgrade convert smbpasswd to  tdbsam and all I
  need to do is change my smb.conf?

 I can't see what has happened.
 Which timestamp has your smbpasswd, which timestamp has your
 passdb.tdb?

 Or do you use LDAP? Then perhaps your system wants to use the LDAP crap
 as password backend.

 You can define your special backend in the [global] part of your
 smb.conf.

 Viele Gruesse!
 Helmut
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba


All seems to be working correctly now except I have to rejoin all of the
machines to the domain but that happens anytime I upgrade.

Also it seems that my users no longer have thier roaming profiles.

Here is a copy of my smb.conf

[global]
smb passwd file = /etc/samba/passdb.tdb
enable privileges = yes
logon drive = H:
domain master = yes
encrypt passwords = true
logon home = \\%L\%U
netbios name = ARDVARC
server string = Gaudior's PDC
logon script = logon.bat
local master = yes
workgroup = GAUACA
logon path = \\%L\%U\profile
os level = 99
security = user
add machine script = /usr/sbin/useradd -s /bin/false \-d /dev/null %u
preferred master = yes
domain logons = yes
hide files = /desktop.ini/
guest account = nobody
map to guest = bad user
wins support = yes

[staff]
comment = staff share drive
path = /home/staff/share
read only = no
;valid users =

[student]
comment = student share by level
path = /home/stdnt/share
read only = no

[netlogon]
comment = Net Logon Service
path = /home/netlogon
read only = yes
write list = root
;public = yes
guest ok = yes
browsable = no

[homes]
comment = Home
valid users = %S
read only = no
browsable = no


-- 
Mathew E. Enders
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] PDC broke after upgrade

2011-01-16 Thread Mat Enders
I upgraded from Debian Lenny (Samba 3.2.5) to Squeeze (Samba 3.5.6) and now
my PDC does not work.

In the past when upgrading from one release to another all of the machine
trust accounts no longer worked but I was able to just rejoin then to the
domain.  Now however the join fails with unknown user and bad password.  I
have always used root and roots password what am I missing?  What changed
between these 2 releases?

-- 
Mathew E. Enders
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba