Re: [Samba] XP not saving profiles
Hello, you use any virus-scanner? In my case I had problems with Mcaffe. You can try this tool to kill all open file-handles: http://www.microsoft.com/downloads/details.aspx?FamilyID=1B286E6D-8912-4E18-B570-42470E2F3582displaylang=en Otherwise, install a clean windows-box without any userland software. Then check logon. If this works, install your software and check logon after each installation. kind regards matze rowland penny schrieb: we need to move from a workgroup to a domain and not wanting to make the worlds richest man any richer ;-) I thought I would give samba a try downloaded Kubuntu 5.10 followed howto on howtoforge I can log in and out as administrator ok but any changes do not come back If I logon as a user I get the following when I log off Windows cannot copy C:\Documents and Settings\username.FILESERVER\sendto to \\FILESERVER\profiles\username\sendto I have RTFM ( not saying I understood all of it ) I have googled on this subject I have tried various alterations to the smb.conf file after doing the above I have also altered the registry after googling etc (signorseal for example) Can anybody suggest where I am going wrong or offer any advice please. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] smbstatus for open files?
Hello, can I use smbstatus to get all open files? Prior to 3.0.21a it works fine with smbstatus -d 0 -L | grep DENY | wc -l, but now I get files and directories. Is there an other way to count all files opened by users? Kind regards Matthias -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] PDC/BDC Load-Balanced?
Hallo, I've setup a BDC in the same subnet like my PDC. I observed that some User take the BDC to logon. The Domain-Join of some PCs will also done at the BDC. Is this behavior normal and wanted? If done so, I have to rsync the profiles or only netlogon? Best regards Matthias PDC: [global] netbios name = PDC workgroup = MyDOMAIN server string = DC (PDC) (%v) security = user domain master = yes time server = yes domain logons = yes encrypt passwords = yes wins support = yes local master = yes prefered master = yes os level = 64 enable privileges = yes BDC: [global] netbios name = BDC workgroup = MyDOMAIN server string = DC Backup (%v) security = user domain master = no time server = yes domain logons = yes wins support = no wins server = PDC encrypt passwords = yes local master = yes os level = 62 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] hide files/directorys
Hello, [EMAIL PROTECTED] schrieb: Hi, is there a possibility to hide directorys or files to which the user has no access (rights)? Jep. hide unreadable = yes in your [share] section. matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Password expiration
Hello, Jacob Elder schrieb: Hello, I still can't figure out why my users' passwords are expiring. Ever since we switched to LDAP, passwords expire every 14 days. Here is an example LDAP user entry: You can set password-age to 60 days by typing # pdbedit -P maximum password age -C 5007600 Please look at this Thread: http://lists.samba.org/archive/samba/2005-June/106338.html matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Function User cannot change Password
Hello, Gerald (Jerry) Carter schrieb: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | Hello list, | | i found out, the the function User cannot change | password of the UserManager is not yet implemented. | | Here's the log: | _samr_set_sec_obj: Not yet implemented! | | Here's the samba version: | hgest3201:/samba/aadmt00/conf/log # smbd -V | Version 3.0.14a-SerNet-SuSE | | When will this feature be released? Probably not for a while. We don't currently store security descriptors on a per user or group basis. I don't really have plans to at the moment (although there would be some advantages to doing so). You can use this feature by setting sambaPwdCanChange in LDAP to a day in the future. Timestamp of when the user is allowed to update the password matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] quality of password protection
Hello, [EMAIL PROTECTED] schrieb: We need a solution for our samba server about password regulations. We want to force the user to change the password in a defined timetable and to give the password a defined minimum of length. Do we need a special software modul or is there an another possibility in connection with Suse 9.2 and Sambaserver 3.0923? Take a look at # man pdbedit 'User must change password after 60 days (days*3600*24) # pdbedit -P maximum password age -C 5184000 'Mininum password length to 5 characters pdbedit -P min password length -C 5 matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] logon.bat
Hello, Jason Greene schrieb: Hi all, My logon.bat file runs but none of the drives get mapped. Here is my logon.bat file net time \\%L /set /yes net use o: \\%L\data net use j: \\%L\pca net use g: \\%L\peachtree Is this setup wrong? %L is only only in the smb.conf usefull. In Login-Scripts you have to use the Servername \\server\share. You can also test \\%LOGONSERVER%\share. matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Password Expiry Date
Hello, so, i am seeking the solution making the password expiry feature avaiable in my pdc. FYI, i am using FC2, samba 3.0.3-5. thanks. the password expires in Unix and Samba. Samba does all changes for itself. You can set password-age to 60 days by typing: # pdbedit -P maximum password age -C 5007600 For Linux you have to change shadowlastchange in LDAP. I wrote a script for this: smb.conf: #- unix password sync = yes passwd program = /etc/samba/scripts/ldap_userPassword_change %u passwd chat = *New*password* %n\n *new*password* %n\n *Success* #- /etc/samba/scripts/ldap_userPassword_change: #- #!/bin/sh LDAP_SERVER=ldapserver LDAP_USER=uid=userPassChange,o=mydomain,c=com LDAP_PASS=secret LDAP_PASSWD=/usr/bin/ldappasswd LDAP_MODIFY=/usr/bin/ldapmodify #DN of User USER_DN=uid=$1,ou=users,o=mydomain,c=com #Get Date TS=`date +%s` SLC=$(($TS/24/3600)) #- MODIFY userPassword $LDAP_PASSWD -x -h $LDAP_SERVER -D $LDAP_USER -w $LDAP_PASS -S $USER_DN #- MODIFY shadowlastchange if [ $? -eq 0 ]; then echo dn: $USER_DN changetype: modify replace: shadowLastChange shadowLastChange: $SLC | $LDAP_MODIFY -x -h $LDAP_SERVER -D $LDAP_USER -w $LDAP_PASS /dev/null 21 fi exit #- kind regards Matthias Hiu Yen Onn schrieb: Hi, i have configured a Samba PDC based on idealx.org. now, whenever i set the sambaMustChangePassword flag to 0, then from the subsequent logon, there is a popup urge me for changing password. now, the problem is after i have changed the password, the sambaMustChangePassword is set to 2147483647(unix timestamp), which if i converted it into human readable format, it will be 2038 year, bla..bla..and bla second. it is really unbelieveable that my password will be lasted until year 2038 year??? i have looked thoroughly on the internet resources, some mentioning about on defaultMaxPasswordAge flag. I think i have set it to 55 (actually, i dunno whether what is the quantity representing, day?? time??). but, i have no point to make it works. so, i am seeking the solution making the password expiry feature avaiable in my pdc. FYI, i am using FC2, samba 3.0.3-5. thanks. Cheers, yenonn -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Password Expiry Date
Hello, # pdbedit -P maximum password age -C 5007600 Does it apply for all users in my domain??? This feature must be activated on yout domain-master. I've set this option also at all other samba domain-controllers (PDC's an BDC's). I don't know, if this is required. There is the ldap-attribute shadowMax: 60 for each user, but I don't know if this works yet with samba 3.0.14. matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Unix-password-sync in LDAP?
Hello, how can I change the user-passwords correctly in my OpenLDAP during Windows-password-change? My problem: The script does only change userPassword, but not the field shadowLastChange, so my unix-passwords expired. unix password sync = yes passwd program = /etc/samba/scripts/ldap_userPassword_change %u passwd chat = *New*password* %n\n *new*password* %n\n *Success* #/etc/samba/scripts/ldap_userPassword_change ldappasswd -x -h server-D 'uid=userPassChange,ou=administration,o=dom,c=com' -w pass -S uid=$1,ou=users,o=dom,c=com Regards; matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Difference Copy and Move at inheriting
Hello, if I copy or create a file or directory, it inherits the permissions of it's parent. If I move a file from one directory to another, it will not inherit the permissions of the target-directory. Why? [daten] comment = Daten path = /samba/daten inherit permissions = yes inherit ACLS = yes nt acl support = no writeable = yes hide unreadable = yes veto files = /.*/ root preexec = /etc/samba/scripts/mk_sambadir /samba/daten/.recycle/%U %U %g vfs object = recycle recycle:repository=.recycle/%U recycle:versions=True recycle:keeptree=True Thanks for your responses. matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain login not working with MySQL backend
Hello, using a MySQL database backend, so that me and my colleges can easily administer the users with a PHP based web interface. Why you don't you use OpenLDAP and LAM? LAM is a Web-Based admin-interface for Samba- and Unix- LDAP-Accounts written in PHP. We use it for more than 500 users. PS: MySQL-Backend is still Beta. matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Difference Copy and Move at inheriting
Hello, if I copy or create a file or directory, it inherits the permissions of it's parent. If I move a file from one directory to another, it will not inherit the permissions of the target-directory. Why? [daten] comment = Daten path = /samba/daten inherit permissions = yes inherit ACLS = yes nt acl support = no writeable = yes hide unreadable = yes veto files = /.*/ root preexec = /etc/samba/scripts/mk_sambadir /samba/daten/.recycle/%U %U %g vfs object = recycle recycle:repository=.recycle/%U recycle:versions=True recycle:keeptree=True Thanks for your responses. matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbldap_open: cannot access LDAP when not root ...
Hello, if you have such in your smb.conf: ldap admin dn = uid=samba,o=company,c=com ldap ssl = no ... you must have an account uid=samba,o=company,c=com with a password in your ldap. You can tell samba this password by smbpasswd -w password. matze Márcio Luciano Donada schrieb: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am it has two weeks trying to twirl the PDC with samba + LDAP and ties the moment only migraines. It would like to know which is the problem, now, below described in mine log's? [2005/02/27 12:14:47, 1] lib/smbldap.c:another_ldap_try(1004) ~ Connection to LDAP server failed for the 8 try! [2005/02/27 12:14:48, 0] lib/smbldap.c:smbldap_open(881) ~ smbldap_open: cannot access LDAP when not root.. [2005/02/27 12:14:48, 1] lib/smbldap.c:another_ldap_try(1004) ~ Connection to LDAP server failed for the 9 try! [2005/02/27 12:14:49, 0] lib/smbldap.c:smbldap_open(881) ~ smbldap_open: cannot access LDAP when not root.. [2005/02/27 12:14:49, 1] lib/smbldap.c:another_ldap_try(1004) ~ Connection to LDAP server failed for the 10 try! [2005/02/27 12:14:50, 0] lib/smbldap.c:smbldap_open(881) ~ smbldap_open: cannot access LDAP when not root.. [2005/02/27 12:14:50, 1] lib/smbldap.c:another_ldap_try(1004) ~ Connection to LDAP server failed for the 11 try! [2005/02/27 12:14:51, 0] lib/smbldap.c:smbldap_open(881) ~ smbldap_open: cannot access LDAP when not root.. [2005/02/27 12:14:51, 1] lib/smbldap.c:another_ldap_try(1004) ~ Connection to LDAP server failed for the 12 try! [2005/02/27 12:14:52, 0] lib/smbldap.c:smbldap_open(881) ~ smbldap_open: cannot access LDAP when not root.. [2005/02/27 12:14:52, 1] lib/smbldap.c:another_ldap_try(1004) ~ Connection to LDAP server failed for the 13 try! [2005/02/27 12:14:53, 0] lib/smbldap.c:smbldap_open(881) ~ smbldap_open: cannot access LDAP when not root.. [2005/02/27 12:14:53, 1] lib/smbldap.c:another_ldap_try(1004) ~ Connection to LDAP server failed for the 14 try! [2005/02/27 12:14:54, 0] lib/smbldap.c:smbldap_open(881) ~ smbldap_open: cannot access LDAP when not root.. [2005/02/27 12:14:54, 1] lib/smbldap.c:another_ldap_try(1004) ~ Connection to LDAP server failed for the 15 try! [2005/02/27 12:14:55, 0] lib/smbldap.c:smbldap_open(881) ~ smbldap_open: cannot access LDAP when not root.. [2005/02/27 12:14:55, 0] lib/smbldap.c:smbldap_search_suffix(1169) ~ smbldap_search_suffix: Problem during the LDAP search: (unknown) (Timed out) [2005/02/27 12:14:55, 0] rpc_server/srv_samr_nt.c:_samr_create_user(2398) ~ could not add user/computer 16178-audit$ to passdb. Check permissions? [2005/02/27 12:14:55, 2] smbd/server.c:exit_server(609) ~ Closing connections []'s - -- Márcio Luciano Donada mdonada at auroraalimentos dot com dot br FreeBSD - The uptime is mesuared in years! -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCIf4yyJq2hZEymxcRAqklAJ93A5VdVRx8j4F+ok4i82AL7zRTSQCgp7P1 SJo/w4FHuH4VbD5OktjtPKo= =mKHg -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] static WINS entries on workstations - is it possible?
Tomasz Chmielewski schrieb: Is it possible to add some kind of static WINS entries to Windows workstations? Jep: Edit c:\windows\system32\drivers\etc\hosts on a windows-client. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Terminal server settings.
Hello, Arnault Teissier schrieb: Hi All, I'm working on a full migration from windows DC to samba DC, and i'm actually having a problem with terminal server settings! I run a terminal server on win2k, but i would store all my user information on samba. Although, i don't find any documentations or info about terminal server setting with samba. Is it supposed to be possible to store it with samba and a ldap backend, and if yes, where should it be stored? Which attribute and how to modify it? That my last problem before to be able to perform a full migration to samba. Any advise, help or docs could be great! A Terminalserver acts as a normal Windows-Client. You see now differenz. matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problems with VFS Recycle on SLES9
Hello,
you have to use recycle:versions=True
vfs object = recycle
recycle:repository=.recycle/%U
recycle:versions=True
recycle:keeptree=True
Building 0 Byte-Files is a Feature/Bug from this Editor.
matze
J. Strohschnitter schrieb:
Hi list,
I have running samba 3.0.9 on a SuSE Enterprise-Server 9 with Kernel 2.6.5.
Samba works
very well but In have one problem while using the recycle vfs with samba:
when I save a file (with wordpad or editor ...) to the network-share, a 0 byte-file will
automaticly be saved to the trash-folder.
After removing the file from the network-share, the real file (0 byte) will be stored
to the trash. Thats ok. But now I created a file named the same filename than the deleted
file, the new file was again created as 0-byte file to the trash. And the trashfile was
overwritten with 0 byte.
So my questions are:
1)How do I have to configure the recycle-object that no 0-Byte file was
automaticly created on the network-share ?
I have tried all possible parameters (touch and versions) to turn off or on,
but no effect.
2)If 1 isn't possible, how can I prevent the creation of the 0-Bytefile over
the existing
file, without using the version-parameter ?
Hope someone can help to fix this problem. Here is my section with vfs-recycle
from the
smb.conf:
[shared]
path = /server/shared
oplocks = true
create mode = 0775
directory mode = 0775
admin users = supervisor
read only = no
veto files = /*.scr/*.mpeg/*.mp3/*.eml/*.nws/*.{*}/
;
; options for trashbox
;
vfs objects = recycle
recycle:repository = .Papierkorb/%u
recycle:keeptree = yes
recycle:versions = no
recycle:touch = yes
recycle:exclude =
?~$*,~$*,*.tmp,*.pqi,*.scr,*.eml,*.mpg,*.mpeg,*.mov,*.mpe,*.mp3
recycle:exclude_dir= PMAIL,PMail,pmail
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Terminal server settings.
Hello, Ilia Chipitsine schrieb: Hello, Arnault Teissier schrieb: Hi All, I'm working on a full migration from windows DC to samba DC, and i'm actually having a problem with terminal server settings! I run a terminal server on win2k, but i would store all my user information on samba. Although, i don't find any documentations or info about terminal server setting with samba. Is it supposed to be possible to store it with samba and a ldap backend, and if yes, where should it be stored? Which attribute and how to modify it? That my last problem before to be able to perform a full migration to samba. Any advise, help or docs could be great! A Terminalserver acts as a normal Windows-Client. You see now differenz. difference is in roaming profile settings. if You run terminal application (for instance within Citrix), it will use either the same roaming profile as regular workstation (and there will be collision with regular roaming profiles) or You have to use static (non-roaming) for terminal server. We use Terminalserver (2k+Citrix) and Win-Clients since 1 year without special settings. You have to look at the same things as in an Win-Client-Only Network. I.E.: If you log on at two workstations, the last logoff will write your serverprofil. matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] netbios fw pls help
Hello, nick schrieb: Hi There, I'm runnin Linux Debian server with samba 3.0.10 and have vpn to connect from remote subnets. The prblem is that I cant see connected PC winXP clients in the network neighbourhood. Also have problem using terminal services through linux vpn. Please anyone to help You have problems with IP to Name resulotion. You can user WINS for only Windows-PC-Network and DNS for all other. Please test, to type in the IP-Adresse directly. matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: netbios fw pls help
Hello, can you connect from windows over vpn to a Server by typing the IP? c:\ net view \\192.168.1.1 or c:\net use z: \\192.168.1.1\share /USER:Administrator matze nick schrieb: Thanks Matthias, having the problem to explain my situation. I have win2k server and linux server runung vpn and samba in a same network. Need to connect remote subnet through linux vpn . Now it is possible. I can see all workgroup component but cant join subnet client to workgroup and cant share subnet resources. Any idea? Matthias Spork [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, nick schrieb: Hi There, I'm runnin Linux Debian server with samba 3.0.10 and have vpn to connect from remote subnets. The prblem is that I cant see connected PC winXP clients in the network neighbourhood. Also have problem using terminal services through linux vpn. Please anyone to help You have problems with IP to Name resulotion. You can user WINS for only Windows-PC-Network and DNS for all other. Please test, to type in the IP-Adresse directly. matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] cannot locate roaming profile
Hello, does all user has writepermissions to there own profile? Does samba creates /export/smb/ntprofile/username ? I had similar problems, so I wrote simple root-preexec-scripts to create the directorys. [profiles] comment = NT Roaming Profiles path = /samba/profiles root preexec = /etc/samba/scripts/mk_sambadir /samba/profiles/%U %U %g profile acls = yes browseable = yes force user = %U writeable = yes create mask = 0600 directory mask = 0700 read only = no # cat /etc/samba/scripts/mk_sambadir #!/bin/bash if [ ! -d $1 ] then mkdir $1 fi chmod 700 $1 -R chown $2 $1 -R chgrp $3 $1 -R matze Vinh Tran schrieb: I've just edited smb.conf to make it a PDC on my SuSE 9.1 machine. I can add other machines to the domain but when I try to log on, I get the message Windows cannot locate your roaming profile...blah blah My config file is below. # smb.conf is the main Samba configuration file. You find a full commented # version at /usr/share/doc/packages/samba/examples/smb.conf.SuSE # Date: 2004-04-06 [global] workgroup = TranFamily os level = 64 passdb backend = smbpasswd interfaces = 127.0.0.1 eth0 bind interfaces only = true printing = cups printcap name = cups printer admin = @ntadmin, root, administrator map to guest = Bad User security = user encrypt passwords = yes server string = Samba netbios name = dragonite add machine script = domain master = yes domain logons = yes local master = yes preferred master = yes logon path = \\%N\profiles\%u logon drive = H: logon home = \\homeserver\%u logon script = logon.cmd ldap suffix = dc=example,dc=com [netlogon] path = /usr/local/samba/lib/netlogon read only = yes write list = ntadmin [profiles] path = /export/smb/ntprofile read only = no create mask = 0600 directory mask = 0700 The local log in and the domain log in usernames are different. I created the directory /export/smb/ntprofile as root but change mod to 777. Beside that, I haven't done much else. Can someone please help? Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] XP clients unable to read user profiles (2.2.3a-14.1)
Hello, However, they still fail to read user profiles which were created by the old Win98 clients. Only NT, 2K and XP-Profiles are compatible. Win 95/98 has only rudimental Profiles. matze Martin Pauly schrieb: Hi everyone, thanks to John Terpstra's hint (teh old thread started with Msg [EMAIL PROTECTED]), our xp clients now do join the domain :-). However, they still fail to read user profiles which were created by the old Win98 clients. The relevant parts of smb.conf look like this: begien smb.conf [global] domain master = yes printing = bsd encrypt passwords = yes socket options = TCP_NODELAY kernel oplocks = false wins support = yes printcap name = /etc/printcap case sensitive = no logon script = %U.bat interfaces = 192.168.10.10/255.255.255.0 keep alive = 30 writeable = yes map to guest = Bad User security = user preserve case = yes domain logons = yes workgroup = zentrum load printers = yes os level = 2 logon home = \\%L\%U\profile debuglevel = 4 [netlogon] path = /netlogon writeable = yes guest ok = no [homes] comment = Heimatverzeichnis browseable = yes read only = no writeable = yes create mode = 0750 end smb.conf ... and here's a snip form log.smbd: begin log.smbd unix_clean_name [/profile/xpsp2res.dll] [2005/01/30 23:35:28, 3] smbd/trans2.c:call_trans2qfilepathinfo(1634) call_trans2qfilepathinfo: vfs_stat of profile/xpsp2res.dll failed (No such file or directory) [2005/01/30 23:35:28, 3] smbd/error.c:error_packet(91) error string = No such file or directory [2005/01/30 23:35:28, 3] smbd/error.c:error_packet(103) error packet at smbd/trans2.c(1636) cmd=50 (SMBtrans2) NT_STATUS_NO_SUCH_FILE [2005/01/30 23:35:28, 3] smbd/process.c:process_smb(860) Transaction 125 of length 99 [2005/01/30 23:35:28, 3] smbd/process.c:switch_message(667) switch message SMBtrans2 (pid 7193) [2005/01/30 23:35:28, 4] smbd/uid.c:change_to_user(118) change_to_user: Skipping user change - already user [2005/01/30 23:35:28, 3] smbd/trans2.c:call_trans2qfilepathinfo(1613) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/01/30 23:35:28, 3] lib/util.c:unix_clean_name(387) unix_clean_name [/profile/shell32.dll] [2005/01/30 23:35:28, 3] smbd/trans2.c:call_trans2qfilepathinfo(1634) call_trans2qfilepathinfo: vfs_stat of profile/shell32.dll failed (No such file or directory) [2005/01/30 23:35:28, 3] smbd/error.c:error_packet(91) error string = No such file or directory [2005/01/30 23:35:28, 3] smbd/error.c:error_packet(103) error packet at smbd/trans2.c(1636) cmd=50 (SMBtrans2) NT_STATUS_NO_SUCH_FILE [2005/01/30 23:35:28, 3] smbd/process.c:process_smb(860) Transaction 126 of length 99 [2005/01/30 23:35:28, 3] smbd/process.c:switch_message(667) switch message SMBtrans2 (pid 7193) [2005/01/30 23:35:28, 4] smbd/uid.c:change_to_user(118) change_to_user: Skipping user change - already user [2005/01/30 23:35:28, 3] smbd/trans2.c:call_trans2qfilepathinfo(1613) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2005/01/30 23:35:28, 3] lib/util.c:unix_clean_name(387) unix_clean_name [/profile/shell32.dll] [2005/01/30 23:35:28, 3] smbd/trans2.c:call_trans2qfilepathinfo(1634) call_trans2qfilepathinfo: vfs_stat of profile/shell32.dll failed (No such file or directory) [2005/01/30 23:35:28, 3] smbd/error.c:error_packet(91) end log.smbd There are lots of similar messages some of which make sense to me (e.g. I don't have a logon script) . But I am suspicious of things like profile/xpsp2res.dll failed (No such file or directory) File permissions are 755 throughout my user profile (located, of course, in $HOME/profile). Any ideas what's wrong? TIA, Martin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] server replication
Hello, fluppe schrieb: Hello, I have a new file server and i want it automattically to replicate with another server so if one fails, the other one takes over immediatelly! can i do this with samba as file server ? And what other software do i need ? You can use rsync for replication. matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] More than one LDAP-Server in smb.conf?
Hello, can I use more than one LDAP-Server in my smb.conf? I would like to have a backup, if the first OpenLDAP crashed. In my installation (306), this had no effekt: passdb backend = ldapsam:ldap://127.0.0.1:389, ldapsam:ldap://server2:389 , ldapsam:ldap://server1:389 matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] pdc dont save the profile
Hello, # LogON Einstellungen fFCr Windows 9x/NT/2000/ME #logon drive = Z: #logon path = \SAMBA_PDCprofiles\%U.pds #logon home = \SAMBA_PDCprofiles\%U #logon script = %U.bat 1. Why this #? 2. You have any Programm on the client, that is writing to the profile (i.E. McAfee Virusscan)? and what should i add to be able to change my password under windows? You are able to change the windows-password per default. If you want to change your Linux-Password over Samba, you migt use the password string and password sync options. matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba-Domainmembers in a Samba-Domain / sambaDomainName=HOSTNAME
Hello, I have running a domain with 3 Subnets and 3 Servers (one per Subnet). Now, I need some Samba-Member Servers. The new Servers used the same LDAP-Configuration as the others, they had a legal Machine-Account and where normally added to the Domain net join domain. All works fine. But: Every new Member-Server creates an own LDAP-Entry under the root-path: sambaDomainName=HOSTNAME Why? matze [global] netbios name = HOSTNAME workgroup = DOMAIN server string = FAXSERVER (%v) security = user wins server = 192.168.1.1 encrypt passwords = yes passdb backend = ldapsam:ldap://first:389 ldap://second:389 ldap://third:389 ldap://fourth:389; ldap admin dn = uid=samba,ou=administration,o=dom,c=com ldap suffix = o=dom,c=com ldap user suffix = ou=users ldap group suffix = ou=groups ldap machine suffix = ou=computers ldap filter = ((uid=%u) (objectclass=sambaSamAccount)) ldap ssl = no ldap delete dn = no -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Recycle does not work in [homes]
Hallo Robert, I put the recycle-configuration in every share, I want to activate it for. [homes] comment = Home Directories path = /home/%S/.documents valid users = %S read only = No browseable = No vfs object = recycle recycle:repository=.recycle recycle:versions=True recycle:keeptree=True [] matze Robert S schrieb: Send your conf please. Incidentally - I've done a workaround where /home/user/.documents/RECYCLER is symlinked to a location in /tmp. Seems to achieve a similar result. I'd be interested to know whats happening here though. smb.conf: [global] workgroup = HOME netbios name = MYSERVER server string = Samba Server encrypt passwords = Yes smb passwd file = /etc/samba/private/smbpasswd log file = /var/log/samba.log socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 lock dir = /var/lock/samba printing = cups printcap name = cups time server = yes dos filetimes = yes fake directory create times = yes dos filetime resolution = yes delete readonly = yes vfs object = vscan-clamav,recycle vscan-clamav: config-file = /etc/samba/vscan-clamav.conf recycle: config-file = /etc/samba/recycle.conf [homes] comment = Home Directories path = /home/%S/.documents valid users = %S read only = No browseable = No [public] path = /pub create mask = 774 force group = users read only = No guest ok = Yes browseable = yes [printers] comment = All Printer path = /var/spool/samba browseable = yes printable = yes My recycle.conf: name = .recycle mode = KEEP_DIRECTORIES|VERSIONS|TOUCH maxsize = 1000 exclude = *.tmp|*.temp|*.o|*.obj|~$* excludedir = /tmp|/temp|/cache noversions = *.doc|*.xls|*.ppt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] unexpected.tdb (26628, 93068) is already open in this process
Hello, the last days, I get this error in log.nmbd: [2004/11/09 23:47:07, 2] tdb/tdbutil.c:tdb_log(725) tdb(unnamed): tdb_open_ex: /var/lib/samba/unexpected.tdb (26628,93068) is already open in this process [2004/11/09 23:47:07, 2] tdb/tdbutil.c:tdb_log(725) tdb(unnamed): tdb_open_ex: /var/lib/samba/unexpected.tdb (26628,93068) is already open in this process [2004/11/09 23:47:07, 2] tdb/tdbutil.c:tdb_log(725) tdb(unnamed): tdb_open_ex: /var/lib/samba/unexpected.tdb (26628,93068) is already open in this process [2004/11/09 23:47:07, 2] tdb/tdbutil.c:tdb_log(725) tdb(unnamed): tdb_open_ex: /var/lib/samba/unexpected.tdb (26628,93068) is already open in this process [2004/11/09 23:47:07, 2] tdb/tdbutil.c:tdb_log(725) tdb(unnamed): tdb_open_ex: /var/lib/samba/unexpected.tdb (26628,93068) is already open in this process [2004/11/09 23:47:07, 2] tdb/tdbutil.c:tdb_log(725) tdb(unnamed): tdb_open_ex: /var/lib/samba/unexpected.tdb (26628,93068) is already open in this process [2004/11/09 23:47:07, 2] tdb/tdbutil.c:tdb_log(725) tdb(unnamed): tdb_open_ex: /var/lib/samba/unexpected.tdb (26628,93068) is already open in this process [2004/11/09 23:47:07, 2] tdb/tdbutil.c:tdb_log(725) tdb(unnamed): tdb_open_ex: /var/lib/samba/unexpected.tdb (26628,93068) is already open in this process [2004/11/09 23:47:07, 2] tdb/tdbutil.c:tdb_log(725) tdb(unnamed): tdb_open_ex: /var/lib/samba/unexpected.tdb (26628,93068) is already open in this process [2004/11/09 23:47:07, 2] nmbd/nmbd_synclists.c:complete_sync(283) What's this? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba as a bdc
Patricio Bruna V. schrieb: Can samba be a BDC of a NT4 domain? and if it can, then can i promote it to PDC, will it have all the accounts and passwords? Jep, Jep. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] non-local accounts...
Michael J Wilson schrieb: I am having problems, can join domain, add users, etc, etc no problem using samba 3.0.6 and ldap 2.2.17, have the ldap working fine with samba. The problem is that I cannot get this to work without having local unix accounts. Every Samba-User must have a Unix-Account, but you can manage Local- and Sambaaccounts in one LDAP-Tree. What is the easiest way to add ldap users without having to add local accounts as well? In the most Samba-LDAP-PDC-HowTo's you can read, that you have to authenticate the Unix AND the Samba by one LDAP-Tree. The LDAP-Tree manage every Unix and Samba-Account in one container. Please look at this: http://samba.idealx.org/smbldap-howto.en.html I use the web-based-Software LAM (http://lam.sourceforge.net/) to manage my 500 Unix- and Sambaccount Users. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Script?
Shahid Hussain schrieb: Good Evening :) I wanted to know is it possible to write a script to alert me by email if anyone accessed to Samba. For example: 192.168.0.2 and 192.168.0.3 allowed to access to samba network (I wont get a alert). Any IP apart from 192.168.0.2 / 192.168.0.3 then it will alert me. You can take a look at smbstatus and Perl. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Global Windows Environment-Variables
Hello, does anybody know, how to set Global-Variables for a Windows-System? I would like to set variabels in the login-script and use them in a Word-Document. PS: set bla=foo works only for the current shell/cmd.exe, not global matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Forcing RIDs to desired value
Radek Svoboda schrieb: I found that after moving my samba server to different hardware (and diferent Linux installation), domain logons cannot find their Windows profiles and created new ones. This is caused by the different RID of the users. It seems these are calculated as 2*UID + 1000. And my UID's on new server do not match those on the old one. How to force SAMBA to provide different RIDs for the users? I do not want to run LDAP for our 20 stations and 20 users here. Why don't you use your old samba-databases from /var/lib/samba ? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Netware 4.11 - Samba 30
Hello, I have to migrate 30GB from a Novell Netware 4.11 to Samba (ReiserFS/ACL). When I used robocopy.exe from the Windows XP Resource-Kit, it will only copy the Timestamp, but not the owner. Is there a way to copy the owner of a file or directory? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba + ACL
Marco Gavaldo schrieb: I wish to realize a file-server with SAMBA integrated in my network domain (Windows NT4 PDC). To manage the user access for each share in the Samba file-server, I would use Active Control Lists. ACCESS Control Lists Anyone can tell me - what type and version of Linux is best for my purpose ? - what Samba version is best to use ? Samba supports the standard POSIX Linux ACL's. You have to use Samba 304, because it is the productivity release. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] please help: smbd 100% cpu usage
Hello, check out, if you have a group, who has more members then users on the system. matze Jason C. Waters schrieb: That look like your nmbd. What about the log.norbert file and the log.smbd. Try tail -n 500 filename, for each that will output the last 500 lines of the file. You don't keep your log level at 10 do you? If you have a busy server this will peg your CPU. Jason [EMAIL PROTECTED] wrote: next try - as i was not able to post the level 10 log as a mail (180kb) i've put it here: http://www.mhcsoftware.de/smbprob.txt the machine names are: samba server: linux windows ME: norbert perhaps some can suggest a solution ... TIA matthias --On Freitag, Juni 18, 2004 08:01:45 -0400 Jason C. Waters [EMAIL PROTECTED] wrote: | Set your log level to 10 and then send us the log for smbd and the | machine name. Maybe that will tell us something. | | Jason | | [EMAIL PROTECTED] wrote: | | hi, | | i've a problem with samba 3.0.2. there is one windows ME client which | used to work with out any problems. now, as soon as the user connects | (sharelevel: user, or share - i've tried both) on smbd is forked which | causes 90 to 100% cpu load. when i stop samba (smbd/nmbd) this proces | does not die i can only get rid of it whit a kill -9. with this no | data can be transfered from or to the win ME client. | | this is what a level 2 log stats: | | [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(105) | netbios connect: name1=LINUX name2=NORBERT | [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(112) | netbios connect: local=linux remote=norbert, name type = 0 | [2004/06/16 16:28:44, 2] smbd/sesssetup.c:setup_new_vc_session(591) | setup_new_vc_session: New VC == 0, if NT4.x compatible we would close | all old resources. | [2004/06/16 16:28:44, 2] auth/auth.c:check_ntlm_password(305) | check_ntlm_password: authentication for user [NORBERT] - [NORBERT] | - [norbert] succeeded | [2004/06/16 16:28:44, 1] smbd/service.c:make_connection_snum(705) | norbert (192.168.0.4) connect to service windows initially as user | norbert (uid=1000, gid=1000) (pid 10759) | | and top shows: | | PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND | 10759 norbert 25 0 10856 3652 8924 R 99.2 0.7 0:18.22 smbd | | | any suggestions ? | | TIA -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] please help: smbd 100% cpu usage
[EMAIL PROTECTED] schrieb: a unix group? a group with members where the users do not exist ? Jep. I had this Problem in our LDAP-Tree. Every time I added a domain-group to a local windows-group Samba gets up to 99%. I heard, this Bug is solved in Samba 305. matze --On Sonntag, Juni 20, 2004 18:52:24 +0200 Matthias Spork [EMAIL PROTECTED] wrote: | Hello, | | check out, if you have a group, who has more members then users on the | system. | | matze | | Jason C. Waters schrieb: | | That look like your nmbd. What about the log.norbert file and the | log.smbd. Try tail -n 500 filename, for each that will output the | last 500 lines of the file. You don't keep your log level at 10 do | you? If you have a busy server this will peg your CPU. | | Jason | | [EMAIL PROTECTED] wrote: | | next try - as i was not able to post the level 10 log as a mail | (180kb) i've put it here: http://www.mhcsoftware.de/smbprob.txt | | the machine names are: | | samba server: linux | windows ME: norbert | | perhaps some can suggest a solution ... | | TIA | matthias | | | | | --On Freitag, Juni 18, 2004 08:01:45 -0400 Jason C. Waters | [EMAIL PROTECTED] wrote: | | | Set your log level to 10 and then send us the log for smbd and the | | machine name. Maybe that will tell us something. | | | | Jason | | | | [EMAIL PROTECTED] wrote: | | | | hi, | | | | i've a problem with samba 3.0.2. there is one windows ME client | which | | used to work with out any problems. now, as soon as the user | connects | | (sharelevel: user, or share - i've tried both) on smbd is forked | which | | causes 90 to 100% cpu load. when i stop samba (smbd/nmbd) this | proces | | does not die i can only get rid of it whit a kill -9. with this no | | data can be transfered from or to the win ME client. | | | | this is what a level 2 log stats: | | | | [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(105) | | netbios connect: name1=LINUX name2=NORBERT | | [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(112) | | netbios connect: local=linux remote=norbert, name type = 0 | | [2004/06/16 16:28:44, 2] smbd/sesssetup.c:setup_new_vc_session(591) | | setup_new_vc_session: New VC == 0, if NT4.x compatible we would | close | | all old resources. | | [2004/06/16 16:28:44, 2] auth/auth.c:check_ntlm_password(305) | | check_ntlm_password: authentication for user [NORBERT] - | [NORBERT] | | - [norbert] succeeded | | [2004/06/16 16:28:44, 1] smbd/service.c:make_connection_snum(705) | | norbert (192.168.0.4) connect to service windows initially as user | | norbert (uid=1000, gid=1000) (pid 10759) | | | | and top shows: | | | | PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND | | 10759 norbert 25 0 10856 3652 8924 R 99.2 0.7 0:18.22 smbd | | | | | | any suggestions ? | | | | TIA | | | -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Password problems with Samba-3.0.4
Chris Hunter schrieb: I'm apparently not the first person to have this problem, but I can't find a fix for it anywhere on the web, or in Usenet. Here's the scenario: I upgraded from 2.2.8a to 3.0.4 during a recent hardware move. All of my client machines are connecting properly, but my users can't change passwords from their WinXP clients now. (Client error message is bad username or incorrect old password.) Please post the output of pdbedit --account-policy=min password length This happens with any user account, including newly created test accounts. I already have 'encrypt passwords = yes' in my smb.conf file, and I've applied all the patches to the client machine, as well as the require_sign_or_seal registry hack. You don't have to do this. I've manually set the password from the console, and I can login using that password, so it's definitely not something as simple as the new password being thrown out by PAM. If this weren't a binary install from the latest samba.org RPM file, I'd suspect that one of the executables or libraries were corrupted. Any help would be appreciated. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Spaces im passwords
Hello, are there any problems with spaces and other special chars in passwords like s#ec re!t ? My users can't use spaces in Password. Error: You are not allowed to change your password. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Restricting ACL Modification?
Hello Joshua, Joshua Schmidlkofer schrieb: Howdy Everyone, Is there anyway to restrict _who_ has the ability to modify ACLs for a share? I have a number of users with poor auditory comprehension skills. Hence, numerous stupid modifications to permissions rather than working with me to adjust group membership. Is there anyway to restrict the ability of users to change the ACLs? it is a great way to discard the ACL-Support on your share with *nt acl support = no and create an other share to edit the ACL's. matze * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] login script
Gabriel Moll Ibacache schrieb: Hi everybody! Here is my first question :) I have a solaris machine running samba, and a lot of computers with windows 2000. I need to generate a log file with the time when a user logon into the machine and the time when the user logout. I tryed the following ... In the smb.conf I wrote in the [netlogon] section [netlogon] root preexec = /usr/local/samba/lib/mylogin.pl %T %u %m root postexec = /usr/local/samba/lib/mylogout.pl %T %u %m Why don't you take the profiles-share for your Script? Every time this share will be connectet, a user logs in or out. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] High CPU utilization
Gary MacKay schrieb: Apparently nobody has a suggestion to why smbd process all of a sudden starts sucking CPU like crazy? Restarted samba and then restarting the entire server does not fix it. Searching the archives shows I'm not the only one with this problem. The archives do not show what to do about it yet. Grr... Redhat 9.0 Samba 3.04 ( I have 2.2.7 servers that have done this to me also) Hello, i had the same problem. Check your groups and bmembers in there. The problem comes, when you have more groupmembers the users., or if you have a groupmember who is deleted user. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] recovering files from .recyle
Robin M. wrote: I have created a recylce bin following the how-to, but I cannot figure out how end users can restore items from the samba recycle bin. If you have this in your share: vfs object = recycle recycle:repository=.recycle/%U recycle:versions=True recycle:keeptree=True every user can go to his recycle-folder and restore his own data. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.0.10
Salim Zakharia wrote: Dear Gents I am trying to configure samba 2.0.10 on solaris 9, I am trying to add samba to the PDC, which is Win 2000. But its failing with the following error: Cli_nt_req_chal: err NT_STATUS_NOT_SUPPORTED Cli_nt_setup_creds: request challenge failed Only Samba 3x can be a member of a ADC-Domain. Please read the docs. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Profileconnection
Hello, when a client load his profile, I get the following lines in my logfile: [2004/05/13 12:53:51, 0] smbd/service.c:make_connection(771) machine01 (192.168.1.22) couldn't find service profil [2004/05/13 12:55:05, 0] smbd/service.c:make_connection(771) machine01 (192.168.1.22) couldn't find service profil [2004/05/13 12:55:06, 1] smbd/service.c:make_connection_snum(619) machine01 (192.168.1.22) connect to service profile initially as user jdoe (uid=10008, gid=100) (pid 7311) It seems, that my client did not find the profile-path at first and second try. I have to wait 30 seconds till the path is found. Do you know a solution for this problem? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] net send equivalent
Leonardo Boselli schrieb: there is an option in smbclient , but afaik works only against a machine, not for an user ... If you use WINS, it will work. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Microsoft hotfix MS04-011, breaks Samba password change.
Hi all, Jeremy Allison schrieb: Hi all, I wanted to give an update on this as I know this MS Hotfix is critical and must be applied to protect against the (latest) Microsoft worm. I think I've found the problem in the code, and am currently testing a fix for this (not in the release to others to test stage yet). As soon as I'm reasonably confident I'll put a patch out there for others to test, and we'll probably do a new stable release to ensure this is fixed in the current codebase. Once we know how complex the fix is I'll look at adding it into the 2.2.x codebase and maybe releasing a 2.2.9 for all the people who are satisfied with Samba 2.2.8a and don't want to move to 3.0.x yet. I'm also very unhappy with Microsoft for releasing improperly tested hotfixes, but that's another story I'll probably be taking up with the Technical Comittee overseeing the DoJ Microsoft settlement and the EU as well. you can find new 303 packets for SuSE at the SerNet FTP-Server: ftp://ftp.sernet.de/pub/samba/ It corrects the password-change problem. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Ntconfig.POL system policy
LanRol schrieb: Hi! How can i generate Ntconfig.POL file? what kind of tools? poledit; Youn can find i.e. it on a Windows-Server-CD matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Login Script
Teguh Kurniawan schrieb: How to configure login script on Samba. Regards, Teguh Lycos Email has 10 MB of FREE storage space. http://mail.lycos.co.uk ftp://de.samba.org/samba.org/docs/htmldocs/Samba-PDC-HOWTO.html [global] ; specify a generic logon script for all users ; this is a relative **DOS** path to the [netlogon] share logon script ftp://de.samba.org/samba.org/docs/htmldocs/smb.conf.5.html#LOGONSCRIPT = logon.cmd ; necessary share for domain controller [netlogon] path ftp://de.samba.org/samba.org/docs/htmldocs/smb.conf.5.html#PATH = /usr/local/samba/lib/netlogon read only ftp://de.samba.org/samba.org/docs/htmldocs/smb.conf.5.html#READONLY = yes write list ftp://de.samba.org/samba.org/docs/htmldocs/smb.conf.5.html#WRITELIST = /ntadmin/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Time server
Mike Stewart schrieb: Ah ha... I was browsing through the Globals in SWAT and came across the Time Server = yes option. But, can't figure out how to get my W2K clients to sync to it (other than DOS.. net time \\server /SET ). Any ideas ? net time \\server /SET /YES You must have the rights under Windows to do this. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problems with Samba 3 and XP Roaming Profiles
Caitiff schrieb: I've got some annoying Problems with roaming profiles. Perhaps someone is able to help me... I would like to use Samba as a PDC and for storing NT roaming profiles. When I first installed Samba 3.02 and XP SP1 (Before that I used Samba 2.2.8a and XP without SP1), XP downloaded the old profiles it found. But upon shutdown or logoff, changes to the profiles were not written to the server. I checked the XP event log and found entrys about rights and some offline stuff. I added csc policy = disable profile acls = yes to the profiles share, and there where no more errors in the event log. But profiles are still not written to the server. All I get on the XP side are many warnings from COM+ that I do not understand. They may not be of much use, since they are in German, but I include some anyway: Which Virusscan do you have installed? Remov it, and try again. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Is it possible to store XP Profiles on Samba 3.0.2 ?
Hello, Can you use Samba to store an XP Pro profile? Yep. Take a look at this: ftp://de.samba.org/samba.org/docs/ http://samba.idealx.org/samba-ldap-howto.pdf matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] mod_ntlm_winbind
Samba schrieb: I searched for ntml_auth apache and ntlm_auth apache and I just can't find where to download it from. Please look at the first hit: http://www.google.de/search?hl=deie=UTF-8oe=UTF-8q=mod_ntlm+apachebtnG=Suche Download: http://sourceforge.net/project/showfiles.php?group_id=4906 matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Error loading profiles -- Samba 3.02a LDAP
Try to make a tail -f /var/log/samba/log.yourmachine during the login and take a look to all errors. You can also try to deinstall your Virusscanner or other Software, who read or write data in the Profile. matze John Arthur schrieb: Hi, I'm setting up Samba 3.0.2a ldapsam in my home lab and everythin appears to be working correctly except for profiles. Using Samba 3.02a openldap-2.1.22 smbldap-tools-0.8.4 When a user 'debra' tries to logon from a XP system that has joined the domain she gets the following error message Windows did not load your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you logoff. Windows did not load your profile because a server copy of the profile folder already exists that does not have the correct security. Either the current user or the Administrator's group must be the owner of the folder. Contact your network administrator. But a server copy of the profile does not exist. It is created when she tries to log on. The profile folder before she tries to logon [EMAIL PROTECTED] profiles]# ls -la total 12 drwxr-xrwt3 root Domain Admins 4096 Apr 24 09:09 . drwxr-xr-x4 root Domain Admins 4096 Apr 22 23:04 .. The profile folder after she's logged on. [EMAIL PROTECTED] profiles]# ls -la total 12 drwxr-xrwt3 root Domain Admins 4096 Apr 24 09:09 . drwxr-xr-x4 root Domain Admins 4096 Apr 22 23:04 .. drwx--2 debraDomain Users 4096 Apr 24 09:09 debra smb.conf logon path = \\RHO\profiles\%U [profiles] # chmod 1757 /opt/domain/profiles path = /opt/domain/profiles writeable = yes browseable = no create mask = 0600 directory mask = 0700 profile acls = yes ##csc policy = disable # next line is a great way to secure the profiles force user = %U # next line allows administrator to access all profiles #valid users = %U Domain Admins [EMAIL PROTECTED] samba]# pdbedit -Lv debra Searching for:[((objectClass=sambaDomain)(sambaDomainName=FOXY))] smbldap_open_connection: connection opened ldap_connect_system: succesful connection to the LDAP server Searching for:[((objectClass=sambaDomain)(sambaDomainName=FOXY))] smbldap_open_connection: connection opened ldap_connect_system: succesful connection to the LDAP server init_sam_from_ldap: Entry found for user: debra Unix username:debra NT username: debra Account Flags:[U ] User SID: S-1-5-21-1668551638-3811399965-3946081115-3002 Primary Group SID:S-1-5-21-1668551638-3811399965-3946081115-513 Full Name:Debra Smith Home Directory: \\RHO\debra HomeDir Drive:H: Logon Script: Profile Path: \\RHO\profiles\debra Domain: FOXY Account desc: Debra Smith Workstations: Munged dial: Logon time: 0 Logoff time: Sat, 14 Dec 1901 07:15:51 GMT Kickoff time: Sat, 14 Dec 1901 07:15:51 GMT Password last set:Fri, 23 Apr 2004 19:37:29 GMT Password can change: 0 Password must change: Thu, 22 Jul 2004 19:37:29 GMT Everything else is working. Debra can logon and access all shares including her home share it's only the profiles that are not working correctly. Regards John -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-3 charsets
Örn Hansen schrieb: Can anyone tell me, what the difference is between out-of-the-box charset handling between samba-2.2.8a and samba-3 ? Samba 3 uses UTF-8 matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba acting as BDC for a windows 2003 Domain
reacend schrieb: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi There Does anybody knew/tested if it is been possible to make a Backup Domain controler for a windows 2003 Domain controler? Or do I have to use samba-tng ? With ldap backend and disabled smb signing? what can be replicated between them? Samba can only work as a an ADC Member-Server. maze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-3 charsets
?rn Hansen schrieb: Can anyone tell me, what the difference is between out-of-the-box charset handling between samba-2.2.8a and samba-3 ? Samba 3 uses UTF-8 matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba acting as BDC for a windows 2003 Domain
reacend schrieb: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi There Does anybody knew/tested if it is been possible to make a Backup Domain controler for a windows 2003 Domain controler? Or do I have to use samba-tng ? With ldap backend and disabled smb signing? what can be replicated between them? Samba can only work as a an ADC Member-Server. maze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba3-ldap cannot add win2k/XP workstations
Hello, i have samba 3.0.2a, openldap 2.1.27, redhat linux 9. i have a samba PDC, i can add user account and log with this accounts into windows 98 but after i create a machine account i cannot add a windows 2K in the domain. the name of windows 2K workstation is added as machine account in ldap. this error message appear when trying to add workstation into domain: --- begin --- The following error occurred attempting to join the domain smb: The user name could not be found --- end --- have you add the machine correctly? machinename$ matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] deny unix login
yunus yuwono schrieb: hello ... i'm looking for reasons to implement samba as pdc on NT's domain network. why should i use samba as pdc?? Samba emulates a Windows NT Domain-Controler on *nix. It's free software! i need to know the defferent Windows PDC runs on Windows, it's very easy to administrate and you pay a lot of money. Samba PDC runs on almost all Unixes, you need to know sonething about *nix, and you have to pay nothing. In Samba you have open source and many ways to put your userdata: Files, LDAP, MySQL. In Windows you have closed source and only one way for your userdata: NT: Files, 2K AD between the authentification/authorization prosess in windows PDC and SAMBA PDC... Today, Samba can only work as a NT-Domain-Controler. The only way is to use NTLM-Auth. Since Win2K you have Kerberos. But the developers still working on it. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Application accesing file on samba sharing
Roberto Samarone Ara?jo (RSA) schrieb: Hi, I'm using Samba 2.2.8 on a Linux server and I have an application that access some file on the samba sharing. There are about 50 users that use this application. I'm having the follow problem: Some informations, that the application write on files, is not writed. Are there any problem when there are a lot of users accessing a file ? Do you habe oplocks=no ? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba as a Domain Member without using net join - is this possible ?
McNally, Ian schrieb: Hi, Is it possible to have samba acting as a Domain Member without using net join. We wish to swap a large number of workstations from windows to linux. Is it possible to use the existing workstation accounts for these systems rather than net join each one manually ? Thanks, Ian McNally Please take a look at pwdump and winbind to duplicate your accounts. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] login to samba3 PDC and problem with novell netware client
Martin Swiech schrieb: Hi, I have actual installation Debian Sarge (testing) with Samba 3.0.2a. There is Windows XP SP1 on workstations. I use Novell client 4.83 SP2 or 4.9 SP1 for Novell Netware connections. I try to run Samba as PDC. Everything is fine without Novell client. After Novell Client installation, I could not logon to samba domain. Client gives me message Domain controller could not be found for specified domain, but I am sure that client found domain controller. When I type bad domain user or password, it gives me message about bad username or password. And when I logon to workstation, I can see and logon to samba server (at network neighbourhood). There is no name collision between novell server names and samba netbios names. I tried it with novell client on IPX/SPX or on TPC/IP protocol. Everything is bad. Please, don't you have any idea? Is there any hope how to use novell client and domain logon to samba3 PDC both? I mean something like simple registry record or patch or something. Thanks Martin Swiech PS: I can send smb.conf or log file If you want it for some analyze. We have run this environment with NW-Client 4.83 and Netware 4.11 with no problems. Have you checked that TCP/IP and IPX/SPX are running? Try this: Logon on with NW and a local Win-User, ping the Samba-Server and connect to it. Does this work? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] mod_ntlm_winbind
Samba schrieb: Is there a mod_ntlm_winbind for apache or is that just for squid? I want to use NTLM authentication for our intranet apache server. Yep. Please search at google for ntml_auth apache. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Minimum ldap config
[EMAIL PROTECTED] schrieb: I currently have samba3 authenticating off of my ldap server but now I want to just do the minimum. We currently have an ldap farm that is the backbone of almost everything at our university but we want to allow authentication in the labs. What are the minimum samba posix attributes that I can get away with. All I want is to allow authentication into a lab worksation, some printing, and a temp space. I dont need to do anything else at this time. Thanks in advance. Minninum and maximum is the same. All attributes are required. Further you need some of Posix-Account. Once LDAP, you have to put all in LDAP: Users, Groups, Machines and Domains. Samba 2.x and Samba 3.x have different attributes. Here you find both: http://www.unav.es/cti/ldap-smb/smb-ldap-3-howto.html Please read the PDC-HowTo in the doc-section of the Samba-package. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Outlook Express
Ninja schrieb: I will go to explain my situation: I have to set up a little net (max 15 clients, with Windows and Linux OS) for a school; they need that in every host of the net if they log in as FOO they can use FOO's preferences, and maybe have some restriction for student user. In particular for a teacher they want to be able to read their emails and get access to them in every computer they log in... To make this plain I have use samba as a PDC with roaming profiles, and I use poledit to create different policy files for every groups (I'm still working on it). Because the teachers would be little in number and because only a teacher would have an email account (with a free provider,probably different), I think that set up an Imap server is not a good solution (also because a teacher maybe would read the email at home)... I think I will use the default setup of Outlook that save a file in the user directory, that is then stored in the server, and setup Outlook to leave on the server the emails What do you think?? Thanks to everyone is helping me!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alexander Gretencord Sent: Tuesday, April 13, 2004 9:21 PM To: [EMAIL PROTECTED] Subject: Re: [Samba] Samba Outlook Express On Tuesday 13 April 2004 18:46, Ninja wrote: I'm agree with you, but not always you can use an Imap server, an usually who gives you an e-mail account for free gives only an Pop3 server... Yes indeed that is mostly true. But why do you use those anyway? As I understood you, you are trying to set up a PDC with samba (or even already have one) so I assume this is for a company. This company can surely either a) afford a service Provider which offers IMAP b) afford to run its own mailserver c) run its own IMAP Server off the samba PDC In case c) your server must of course fetch all the mail from the freemail provider. I do that for my own freemail accounts at home with fetchmail. It was born out of the need to read mail in Windows and Linux while I was still dual booting so yes this is so easy to setup, I did it as a linux newbie :) As I don't know anything about your organisation I don't know how feasible that is for you or how much work it would be to set up fetchmails configuration in a changing environment but hey this is linux and we got scripting languages :) If you are just looking for another mail Client, try out Mozilla Thunderbird, you can define the profile path. I have never tested storing it on a samba share though, as IMAP is the definite answer. Why don't you use an other mailclient? I guess Mozilla Thunderbird stores all Data in Application Data. This folder will be stored on the server. maze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba on distro...
Ivo Dancet schrieb: Hi, I have to setup a samba-server (and a bit intranet) for a school. There are about 200 client-pc's for about 1000 people. Now I wondered which OS would be best for us. Should we pay for a distro, or would a free distro be enough? And which distro should we use? Please keep in mind that schools like quality and don't like big bills! ;-) thanks in advance for any answer, Ivo Dancet Every distro, free or payed, has it's pros and cons. In North-America Red-Hat is the market leader, in Germany SuSE. Many people like Debian. Test to find your favorite. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba3 Schema
Andre Luis Fogagnoli schrieb: I tried to use Samba3 schema in my OpenLDAP, but when I tried to pass a posixAccount to sambaAccount, using smbpasswd -a user, I get this error: Failed to initialise SAM_ACCOUNT for user teste. Failed to modify password entry for user teste And when I try to add user with smbldap-tools (version come with samba 3.0.2a, I suspect is 0.82), I receive this message. /usr/local/sbin/smbldap-useradd.pl: unknown group SID not set for unix group 221 check if your unix group is mapped to an NT group I think it's mistake mine, but with phpldapadmin I can to add a user. What's wrong?? In my smbldap_conf.pm I put SID get by command net getlocalsid. Have you configured your smbldap-tools? Take a look at http://samba.idealx.org/index.en.html matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] XP Client cannot join Samba3 PDC
Hello, CANNOT join domain from XP XP client reports: Access is denied (logged in on XP as Administrator) Samba reports (level 10 logging): _samr_open_domain: ACCESS DENIED Both root and nobody appear to authenticate Logs indicate insufficient privilege to continue Only root (User-ID 0) can add machines to a domain. Root must also exists in your Samba-userlist. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How to install HP PSC 2410 into SAMBA
[EMAIL PROTECTED] schrieb: Would like to know how to install HP PSC 2410 printer into SAMBA? I found the installation CD provided by HP is not the traditional driver disk. Samba does not install printers. Unix does this. Samba only maps the Unix-Printers for Windows-Machines. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Hostname-Lookup
Hello, how can I get the Hostname for an IP? nmblookup -T -r 192.168.1.222 doesn't work. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Charset problem
Boogerman schrieb: I just migrated to Samba 3.0. I'm using Spanish Windows clients, and when I create a file with a spanish character in its filename (ie: menú), in Windows Explorer it looks ok, but when I do ls in Linux I get something slightly different (ie: menú). This didn't happen in samba 2.x (I was previously using the now missing option charset=iso-8859-1). I tried setting unix charset to UTF-8, ASCII and CP850 without success. Any suggestions? Since Samba 3 all filenames will be stored in Unicode. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba / Ldap Password Issues - bump ;-)
Hello jamie,
in Samba 3 the LDAP-Schema has changed. In example: lmPassword has
changed to sambaLMPassword
Please read this first:
http://de.samba.org/samba/docs/man/upgrading-to-3.0.html
matze
Sorry to repost this question.. But I am at my wits end.. The server has
been off line for 2 weeks. So I will have to downgrade to samba 2.X by the
end of the day unless a miracle happens ;)
I'm having some issues with samba 3 and my ldap passwords. First I'll tell
you what I'm working with.
Ldap server is RH 7.3 and openldap 2.0.25 DBM
Samba 3.0.2a-1 using ldapsam_compat (Compiled from RPM source by me ) on
RHEL 3
Samba 2.2.8-1.ldap on RH9
--
The Samba 2 works great. Auth against ldap no problem, has been for over a
year.
The Samba 3 does not work.. Well not really. If I change the users password
using smbldap-passwd.pl (or the ldap webmin module) to the same (or
- Jamie
different) password they had before it works.
When I look at the nt and lan hashes in the ldap records they have not
changed!
It's almost like I need to some how touch the ldap record for it to work
This is really confusing.. Any one have an idea?
- Jamie
Heres a sample LDIF record
dn: uid=mimc08,ou=People,dc=newberg,dc=k12,dc=or,dc=us
shadowLastChange: 12370
ridctClass: sambaAccount
objectClass: top
objectClass: shadowAccount
objectClass: inetorgperson
objectClass: apple-user
objectClass: extensibleObject
objectClass: newberg
lmPassword: 57E3A052197F90B0AAD3B435B51404EE
homeDirectory: /data/students/mimc08
ntPassword: DF32985352318202CC224ECFD06B0599
cn: Millen Mc
sn: null
loginShell: /bin/false
uid: mimc08
---
Heres a copy of my smb.conf
# Samba config file created using SWAT
# from 0.0.0.0 (0.0.0.0)
# Date: 2004/04/05 14:33:34
# Global parameters
[global]
log level = 10
wins support = Yes
ldap server = ldap.newberg.k12.or.us
ldap port = 389
passdb backend = ldapsam_compat:ldap://ldap.newberg.k12.or.us/,
guest
ldap suffix = dc=newberg,dc=k12,dc=or,dc=us
ldap admin dn = uid=root,ou=People,dc=newberg,dc=k12,dc=or,dc=us
ldap ssl = no
[homes]
valid users = %S
read only = No
browseable = No
: 11126
primaryGroupID: 11127
acctFlags: [U ]
gecos: Millen Mc
uidNumber: 5063
userPassword: {crypt}PIsNAk2Yp2XmU
gidNumber: 501
objectClass: account
objectClass: posixAccount
obje
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Restricting printer views
Hello Ryan, [EMAIL PROTECTED] schrieb: So when a client maps the print server (ie: \\printserver) then all the printers are displayed, available for point print. How do you hide printers from specific users? We have academic printers and administrative printers. Academic users should not be able to see administrative printers and vice versa. You can apply every printer as an own share. [HP-Drucker] printer name = hp1 valid users = max moritz ... Futher, you can hide a printer with browseable = no. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Error Looking up domain users
Hello selvam, I am selvam from INdia. I am installed samba 3.0.2a in Redhat Linux 9.0 and is working fine. Then i am configured winbind for integration with ADS in windows 2000 server. When i am issuing command ,.wbinfo -u it given error messege as error looking up domain users. Please provide solution for that. ( previously i joined domain using net command) Please do needfull. Iam waiting for resolution. Have you read http://de.samba.org/samba/docs/man/domain-member.html#ads-member Has the machine rights (on ADS-Side) to do that? Please post the error-message. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Deleting of Desktop Icons
Nigel Marsh schrieb: This could be a time sync problem. Are the domain machines syncing time from the same source and correctly ? Jep: net time \\SERVER /SET /YES matze On Thursday 08 April 2004 10:08, Andrei Mikhailovsky wrote: I have the same issue as well, on XP and 2k. sometimes it actually deletes icons and folders, but most often they are recreated after a login. It might be an issue with roaming profiles from the samba side, I never managed to find an answer. -- Andrei Mikhailovsky Arhont Ltd - Information Security Web: http://www.arhont.com Tel: +44 (0)870 4431337 Fax: +44 (0)117 9690141 PGP: Key ID - 0xFF67A4F4 PGP: Server - keyserver.pgp.com Matthias Spork wrote: | Hello, | | I delete some Icons/Documents on my Desktop. After a new login, they | will be on my Desktop again. | | Is this a Windows- or a Samba-Problem? | | Environment: Samba 3.02a, Win NT (SP6), 2K (Varius Service Packs) | | matze - -- It is far better to sleep with an old hen than pullet. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAd8L01/ZXAdxoDBIRArDcAJ9ufIhEcVOGHsm++OM0t3/yF5/xDgCeIVm+ Gi7ZI+Rh4ofpRag9HGXwowA= =9yBu -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Primary Group == Windows-Group?
Mark schrieb: 1: I've read, that primary-group of a user must be a windows-group? Is that true? Where did you read that? In the samba-log of a Windows-NT-Box. Do you mean the primary unix group of a user must be a group that is mapped to a windows group? Every once in a while my samba server logs complain that a user's primary group is not a windows group, but there is no indication of what it is or how to change it. On redhat machines, by default each user's primary unix group is a group with the same name as the user. Should these all be changed to something else? Does your environment run with (primary group != windows group)? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Deleting of Desktop Icons
Hello, Jeff Umbach schrieb: It sounds to me as if the roamin profile isn't being overwrittent when updated, so when you log back in your getting the older profile. Check the r/w permissions on the folders that the profiles are saved to on the samba server, The user that the profile is associated with should be the owner of the folder and all files within. Nope. I set all permissions correctly. The problem is, that all files will be copied from Workstation to Server, but the files who not copied (becouse i have delete them on the workstation) will not delete on the server. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Primary Group == Windows-Group?
Hello, 1: I've read, that primary-group of a user must be a windows-group? Is that true? 2. Why is there no group named 'Power Users' in Samba? (Actually there is only 'Domain Users' with insufficiant permissions on a win-box) matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Primary Group == Windows-Group?
Paul Gienger schrieb: Matthias Spork wrote: 2. Why is there no group named 'Power Users' in Samba? (Actually there is only 'Domain Users' with insufficiant permissions on a win-box) The groups that samba enumerates correlate to the user groups that are in a Windows Domain. There is no Domain\Power Users group, that group only exists on each individual machine. O.K. But how can I get the function of the 'Power Users'-Group? Actually, I add the Group 'Domain Users' to 'Power Users' on each Client. Is this the only way? Can I use the RID 547 (Builtin Power Users) for this? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Primary Group == Windows-Group?
Matthias Spork schrieb: Paul Gienger schrieb: Matthias Spork wrote: 2. Why is there no group named 'Power Users' in Samba? (Actually there is only 'Domain Users' with insufficiant permissions on a win-box) The groups that samba enumerates correlate to the user groups that are in a Windows Domain. There is no Domain\Power Users group, that group only exists on each individual machine. O.K. But how can I get the function of the 'Power Users'-Group? Actually, I add the Group 'Domain Users' to 'Power Users' on each Client. Is this the only way? Can I use the RID 547 (Builtin Power Users) for this? Manual adding seems to be the only way. I've read this in the manual: http://us3.samba.org/samba/docs/man/groupmapping.html Adding Domain Users to the Power Users Group What must I do to add Domain Users to the Power Users group? The Power Users group is a group that is local to each Windows 200x/XP Professional workstation. You cannot add the Domain Users group to the Power Users group automatically, it must be done on each workstation by logging in as the local workstation administrator and then using the following procedure: 1. Click Start - Control Panel - Users and Passwords. 2. Click the Advanced tab. 3. Click the Advanced button. 4. Click Groups. 5. Double click Power Users. This will launch the panel to add users or groups to the local machine Power Uses group. 6. Click the Add button. 7. Select the domain from which the Domain Users group is to be added. 8. Double click the Domain Users group. 9. Click the Ok button. If a logon box is presented during this process please remember to enter the connect as DOMAIN\UserName. i.e., For the domain MIDEARTH and the user root enter MIDEARTH\root. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Deleting of Desktop Icons
Hello, I delete some Icons/Documents on my Desktop. After a new login, they will be on my Desktop again. Is this a Windows- or a Samba-Problem? Environment: Samba 3.02a, Win NT (SP6), 2K (Varius Service Packs) matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Deleting of Desktop Icons
Andrei Mikhailovsky schrieb: | I delete some Icons/Documents on my Desktop. After a new login, they | will be on my Desktop again. | | Is this a Windows- or a Samba-Problem? | | Environment: Samba 3.02a, Win NT (SP6), 2K (Varius Service Packs) I have the same issue as well, on XP and 2k. sometimes it actually deletes icons and folders, but most often they are recreated after a login. It might be an issue with roaming profiles from the samba side, I never managed to find an answer. I've read following: Whenn the client logoff, it copies all of his profile-data to the server as prf*.tmp -files. After succesfull copy of one file, it will be renamed to a properly filename. The old original file on the server will by overwrite. But what happen, when there is still a file on the server, which is just deleted on the client? That's the problem. Is this property also verified under Windows-Server? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbldap_tools
Brendon Standing schrieb: I am having a problem getting samba ldap tools to work. I am running Mandrake 10.0 community and have installed ldap and samba to use to work in conjuction as a samba domain server. It has automatically install the smbldap tools for user and group creation and modifications. The error's that I am getting however are something like this: failed to perform search; invalid DN at /usr/share/samba/scripts//smbldap_tools.pm line 154, DATA line 283. Can't call method get_value on an undefined value at /usr/bin/smbldap-useradd line 152, DATA line 283. The line of code in this config file is: $mesg-code warn failed to perform search; , $mesg-error; Any idea's? Did you configure LDAP and the ldap-Scripts? matz -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba and windows
Enrique schrieb: Dear fiends , i want to know the main advantage and disadvantage of samba 3 relative to windows 2003 . I have to take a decision between samba y windows . My network have 1500 computers and want to use securities policies. Samba work with poledit of winNT , this is a disadvantage relative to windows 2003 or not? . advantage: Cheap, fast, secure, Non-MS disadvantage: Sometimes very difficult to install MS is easier to administrate If you are a good in linux, make a testinstallation, for your own experience. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] RECYCLER
dragon schrieb: hello, is there any way to aktivate using recycler for to samba connected drives ? Or is it always an windows problem with network connected drives and if so someone knows a way to activate in windows? regards Björn Please read the Samba-HowTo-Collection: Stackabble VFS Mudules [share] comment = Shared files path = /samba/daten inherit permissions = yes writeable = yes hide unreadable = yes vfs object = recycle recycle:repository=.recycle/%U recycle:versions=True recycle:keeptree=True matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] LDAP-Schema??
Hello, there are a some fields in my LDAP-Tree, I do not understand. What can I do with this fields? # sambaKickoffTime # sambaLogoffTime # sambaLogonTime # sambaMungedDial Is there any endeavor by the maintaner to use the following fields? # shadowExpire # shadowLastChange # shadowMax # shadowWarning by, matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Bugs between libtrash and vfs:recycle
Hello, is ther any known Bug between libtrash and the vfs-Module recycle? When I delete a file over Samba, the file will not been delete. If I disable libtrash, all works fine. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] prf*.tmp in samba-profiles
Hello, Hello list, sometimes, when a user logs off, not ntuser.dat, but prf4EC.tmp, prf4ED, ..., will save. Does anyone have this problem, too? matze I have lots of problems with roaming profiles, and this is one of them. In my case it's not service affecting though. Is this causing you some sort of an issue? This generally means Windows did not finish properly saving the roaming profile (at least in my experience). When is set in my profiles-share: force user = root all works fine. But that's a very bug security hole. Is there a chance to give a user full permission only at his own directory? Full permissions for me: Read/Write access to all files and directorys with no kond of locks matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: AW: [Samba] user can't shut down windows clients?
Hello, thanks for your prompt reply. does it means that i must assgin all my users to the domain users group in the smb.conf? then only they can shutdown the windows client? this will ba a headache, cos the user list is very large! anyway to automate this task? thank Q I've seen, that the Samba-Group Domain Users has the rights from lokal group Users, not Master-Users (I don't know how it's named in englisch-windows). Now, I map Domain Users to Master-Users on all Windows-Clients and it works fine. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] prf*.tmp in samba-profiles
Hello list, sometimes, when a user logs off, not ntuser.dat, but prf4EC.tmp, prf4ED, ..., will save. Does anyone have this problem, too? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] user can't shut down windows clients?
Hello, i have 1 problem with samba NT styled domain logon. when i logon as root into a win2k box, i can connect and disconnect to domain, shutdown the PC and do many other stuff. cos i list domain admin group = root in my smb.conf file. but when i logon as other users, i can't even shutdown the win2k box!!! i don't want to list all my users as domain admin group. i try using the domain user group, but still the same problem, can't shutdown. how to over come this problem??? i didn't use any system edit program on the win2k box to restrict any users, but why users become restricted??? can't even shutdown PC??? Your users must be member of the Domain Users (-513). Then they can shutdown there maschines. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Slowly groupmembership
Hello, when i add a user to a group, the user will not see his new groupdirectorys. After rcsmb restart it goes, I've waiting up to 5 minutes before restarting Samba. groups user_name works fine. This is my smb.conf for the relatet share: [data] comment = Data path = /samba/daten read only = No inherit permissions = Yes hide unreadable = Yes veto files = /.*/ vfs objects = recycle recycle:keeptree = True recycle:versions = True recycle:repository = .recycle/%U How long does samba wait, to get the updated groups for a user from ldap? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] Alias for shares
Hello Andrew, Matthias Spork [EMAIL PROTECTED] schrieb am 12.03.04 21:36:49: Hello list, can i configure an alias-name for a share? volume= might be the parameter you are looking for. It's not really an alias, but perhaps it helps. Better still is 'copy ='. This makes an exact copy of a share defintion. You could certainly call it an alias ;-) It still works: [data] comment = Data path = /bla/foo writeable = yes [data_alias] copy = daten matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Expiry of passwords with PDC and LDAP
Hello list, where can I change the password-age? When I change my password over Windows, it will always expire after 27 days. My environment: Working Samba 302a, LDAP, SuSE SLES8 /etc/login.defs PASS_MAX_CHANGE = 35 LDAP: shadowMax = 45 Before changing at 12.03: 01.03. (sambaPwdCanChange=1078104790) 25.03. (sambaPwdMustChange=1080178391) After changing at 12.03: 12.03. (sambaPwdCanChange=1079141590) 07.04. (sambaPwdMustChange=1081384391) matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Expiry of passwords with PDC and LDAP
Hello list, where can I change the password-age? When I change my password over Windows, it will always expire after 27 days. My environment: Working Samba 302a, LDAP, SuSE SLES8 /etc/login.defs PASS_MAX_CHANGE = 35 LDAP: shadowMax = 45 Before changing at 12.03: 01.03. (sambaPwdCanChange=1078104790) 25.03. (sambaPwdMustChange=1080178391) After changing at 12.03: 12.03. (sambaPwdCanChange=1079141590) 07.04. (sambaPwdMustChange=1081384391) matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] Expiry of passwords with PDC and LDAP
Hello, where can I change the password-age? pdbedit -P maximum password age -C That's running! 1. Is this solution documented? Theres nothing to find in man pdbedit or pdbedit --help Why can I change this Value in LDAP (LAM)? Which values in LAM dont't work too? 2. Where can I get the functionality, that users can use a passwords only one time? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Migrating Profiles
Hello, we are migration from Netware 4.11 to Samba. Many of our 150 users have lokal NT/2K-Profiles. I migrate this Profiles by copying them to Samba (System Profiles xxx ) and changing the SID and GID with profiles. Some settings will not be set. In example: Desktop-Background, Office-Settings , IE configuration... What did I wrong? matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] [profiles] server seperate from PDC ?
Hello, Due to performance problems (old donated hardware) I would like to move [profiles] service from our Samba 2.2.8a PDC to a seperate samba server. 1) Is this at all possible and Jep. 1b) how do I make this profile server know all necessary user data and file permissions? - Does it simply have to become a domain member server? Or do I have to transfer the UNIX accounts, too? or 2) are there better alternatives? Let the Profile-Server join the domain and generate a share for the profiles. Then mount this share at the old server and move the profiles with all permissions to the new server. Now umount and configure profile path in the smb.conf. For an easy sharing of Unix-Accounts use LDAP. There's a great article in the present german iX-magazine (March 04). matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
