[Samba] Automatic Software Installs via Policies

2006-07-13 Thread Paul Henry

Hi all,

Are these still the best ways to automate software installs and
updates via a Samba/LDAP Domain?

http://marc.theaimsgroup.com/?l=sambam=111598734205575w=2

Thanks,

Paul.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Automatic Software Installs via Policies

2006-07-13 Thread Paul Henry

we use http://www.wpkg.org

i would suggest you check it out.


Excellent! Thanks.



Paul Henry wrote:
 Hi all,

 Are these still the best ways to automate software installs and
 updates via a Samba/LDAP Domain?

 http://marc.theaimsgroup.com/?l=sambam=111598734205575w=2

 Thanks,

 Paul.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Using NAS as PDC Shares?

2006-03-15 Thread Paul Henry
Dear List,

We have just bought:

* Dual AMD CPU, 8TB NAS, 4GB RAM (DNUK.COM) - SUSE 9.3
* Two Dell 2850, 3GB RAM, Dual Xeon 3.2GHz, 300GB Raid 5 - Fedora Core 4

Now obviously we want to use the Storage ;-)

How would you guys recommend we proceed?

Samba PDC on one 2850, LDAP Directory on second, and somehow mount the
storage for the shares?

Or run the PDC on the NAS, and keep the LDAP Directory on a 2850?

Any advice would be greatly appreciated.

Oh, its for about 20-30 users ;-)

Many thanks,

Paul.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Using NAS as PDC Shares?

2006-03-15 Thread Paul Henry
On 15/03/06, Sean P. Elble [EMAIL PROTECTED] wrote:
 On Wed, 15 Mar 2006, Paul Henry wrote:

  Dear List,
 
  We have just bought:
 
  * Dual AMD CPU, 8TB NAS, 4GB RAM (DNUK.COM) - SUSE 9.3
  * Two Dell 2850, 3GB RAM, Dual Xeon 3.2GHz, 300GB Raid 5 - Fedora Core 4
 
  Now obviously we want to use the Storage ;-)

 First off, jealousy has set in. If you need anyone to test that
 equipment out, I don't think you'd find any shortage on this list. :-)

Ha. Just to make you more jealous: we have 2 switches, a 24-Port Cisco
2970 and a 12-Port 3com SuperStack III 3812, both can be Fibre. 5KVA
UPS. 8-Tape LTO2 Quantum Autoloader. All in a nice 42U Dell rack with
a Rack-mount Keyboard and LCD Display.

About £25k worth and just powered up today ;-)


 
  How would you guys recommend we proceed?
 
  Samba PDC on one 2850, LDAP Directory on second, and somehow mount the
  storage for the shares?
 
  Or run the PDC on the NAS, and keep the LDAP Directory on a 2850?
 
  Any advice would be greatly appreciated.
 
  Oh, its for about 20-30 users ;-)

 Honestly, for that many users, PDC/LDAP performance probably will not
 matter much. It sounds as though transferring files will be your
 bottleneck, and even that will almost certainly be limited by your
 network, even if you are entirely gigabit based.

It's all GB, with some Fibre if things get hairy.

 Depending on your
 hardware requirements, and how available those Dell machines are, my
 ideal recommendation would be to mirror the two Dell systems, and run
 something like Heartbeat http://www.linux-ha.org/ across the two. To use
 the storage from the AMD system on each of the Dell's, I'd mount the large
 file system via NFS on each of the Dell machines, with each of the Dells
 connected to the AMD system via private gigabit Ethernet (and by
 private, I mean on a switch dedicated to those 3 servers, basically).

 If that's not an option, I don't see any real reason why you couldn't just
 run the PDC on the AMD box, and LDAP on one of the Dell machines.
 Honestly, other than for reducing points of failure, that single AMD box
 could almost definitely do everything you want to do without issue. And
 regardless, I'd just love to be able to have that hardware. :-) Hope my
 $0.02 helps . . .

Will stick it all on the NAS and leave the 2850s for Audio/Video
encoding which is what they were bought for (but could be used), as I
don't think they need to be that available.

Thanks,

Paul.


 Many thanks,
 
  Paul.
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/listinfo/samba
 

 --
 +-+
 |  Sean Elble |
 |  Virginia Tech  |
 |  Computer Engineering, Class of 2008|
 |  Vice President, VTLUUG |
 |  E-Mail:   [EMAIL PROTECTED]|
 +-+

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Quotas when Linux System Quotas aren't available?

2005-09-12 Thread Paul Henry
Dear list,

We have inherited a server the isn't partitioned correctly to support quotas.

Is it possible to use the Samba quotas instead, or is an offline
re-partition the best way to go?

Thank,

Paul.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbpasswd and LDAP backend

2005-09-10 Thread Paul Henry
On 09/09/05, Mark Proehl [EMAIL PROTECTED] wrote:
 Hello,
 
 you have to set
 
   unix password sync = No
   ldap passwd sync = Yes

What about just:

 passdb backend = ldapsam:ldap://ldap.blah.org

 
 and use an LDAP-server that supports the password modify extended
 operation (like OpenLDAP). A password change via smbpasswd will
 update all userPassword attributes of the LDAP entry
 
 Mark
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbpasswd and LDAP backend

2005-09-09 Thread Paul Henry
Dear List,

If I have a PDC with an LDAP backend, would just running smbpasswd
username update the users passwd in both the LDAP directory and smb
secrets?

Thanks,

Paul.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba ACL and '+' on a 'ls - l'

2005-07-27 Thread Paul Henry
Dear Guys,

I have noticed that one of our domain users folder in
/var/lib/samba/profiles has a '+' on the end  of their username folder
and all the files in their profile too.

I know this is to do with ACL's and I know Samba can translate Windows
ACL's to filesystem acls, but where can I find out where/how they are
getting created and remove them.

They should be know different then anyone else.

Although, all the users are setup as Admins on their own computer, but
noone else seems to be picking up or have a '+' sign on a 'ls -l'

Thanks,

Paul
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Fwd: logon drive, ldap ssl = start_tls, ssh and client/server encryption (and logon.bat permission tip)

2005-07-26 Thread Paul Henry
Anyone shed any light for me?

Thanks,

Paul.

-- Forwarded message --
From: Paul Henry [EMAIL PROTECTED]
Date: 24-Jul-2005 22:38
Subject: logon drive, ldap ssl = start_tls, ssh and client/server
encryption (and logon.bat permission tip)
To: samba@lists.samba.org


Dear list,

More questions on my PDC travels ;-)

1. Is it ok, with roaming profiles on, to leave logon drive = 
empty, as this drive seems to be confusing users?

2. All my ldap stuff is using tls, and I just want to confirm that
ldap ssl = start_tls is looking in /etc/ldap.conf for certificate
locations etc.?

3. Is all traffic between Windows clients and the Samba server
encrypted, or can this be done/how?

4. Nowhere in Samba How-To or Samba-Guide did it say that the
logon.bat (logon script, whatever you wish to name it) should be
permission 744, i.e. chmod 744 could we add this?

5. Why do you need to ldap enable sshd via pam? This lets any domain
user log into the server. I think this is a bad idea, unless you are
providing shell access for some reason?

Thanks for your time,

Paul.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Fwd: net rap file and net rpc file

2005-07-26 Thread Paul Henry
Anyone shed any light for me?

Thanks,

Gavin.

-- Forwarded message --
From: Paul Henry [EMAIL PROTECTED]
Date: 25-Jul-2005 15:07
Subject: net rap file and net rpc file
To: samba@lists.samba.org


Dear List,

Running these commands when I know files are open reveals nothing on
the Samba server. If however I run these command against another
Domain, i.e. Window 2000 PDC, I get all the files open.

Is this supposed to work this way?

Thanks,

Gavin.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] net rap file and net rpc file

2005-07-25 Thread Paul Henry
Dear List,

Running these commands when I know files are open reveals nothing on
the Samba server. If however I run these command against another
Domain, i.e. Window 2000 PDC, I get all the files open.

Is this supposed to work this way?

Thanks,

Gavin.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] logon drive, ldap ssl = start_tls, ssh and client/server encryption (and logon.bat permission tip)

2005-07-24 Thread Paul Henry
Dear list, 

More questions on my PDC travels ;-)

1. Is it ok, with roaming profiles on, to leave logon drive = 
empty, as this drive seems to be confusing users?

2. All my ldap stuff is using tls, and I just want to confirm that
ldap ssl = start_tls is looking in /etc/ldap.conf for certificate
locations etc.?

3. Is all traffic between Windows clients and the Samba server
encrypted, or can this be done/how?

4. Nowhere in Samba How-To or Samba-Guide did it say that the
logon.bat (logon script, whatever you wish to name it) should be
permission 744, i.e. chmod 744 could we add this?

5. Why do you need to ldap enable sshd via pam? This lets any domain
user log into the server. I think this is a bad idea, unless you are
providing shell access for some reason?

Thanks for your time,

Paul.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



[Samba] My first LDAP PDC - Win2k Profiles, redirection and guest accounts

2005-07-21 Thread Paul Henry
Dear List,

This is my first post here, but yesterday I finally configured a full
PDC with LDAP backend using Chapters 4 and 5 of the Samba Guide (exact
same directory and shares setups just now). Very well written!

I am slowly getting the other things like printing and DNS added, but
I wanted to confirm/ask a few things.

When I first logged on I got complaints about not being able to create
the *.pds and using a local profile only, so I moved from the Samba
Guide to the Samba Howtos and read that the profiles need to be
browseable.

So I su - to a user and checked I could even get into my profile
folder in the server, and I couldn't. I couldn't even get into
/var/lib/samba.

I have changed /var/lib/samba to 755 and profiles to 755 too. Is this right?

My profiles are now working, but I am not sure if I have opened up
things that I shouldn't have.

At no point in the Samba Guide does is say what the permissions should
be for profiles, so I guess this is only a Win2k issue?

Also, can you point me to some documentation on guest account logins
for the domain, so they can get onto the computer with a default guest
profile? I go have a look in the Howto Online book again first though.

Also, how does redirection work on Win2k, as I could only see
instructions for XP and it looks like all the folders etc. have been
saved in profiles rather than profdata obviously.

Lastly, my logon.bat which sets the time and maps the app folder to I
doesn't work. I saw yesterday that I might needs scripts/logon.bat,
but that doesn't work. I also made sure that it is in dos format using
dos2unix (a perl oneliner actually).

Thanks for your time,

Paul.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] My first LDAP PDC - Win2k Profiles, redirection and guest accounts

2005-07-21 Thread Paul Henry
On 21/07/05, Louis van Belle [EMAIL PROTECTED] wrote:
 Hi,
 
 I think you need this adm, i found it on the net.
 Lots of thanks to the creator of it..
 

Sorry? Is this for me or just SPAM?

 
 -Oorspronkelijk bericht-
 Van: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]
 Namens Paul Henry
 Verzonden: donderdag 21 juli 2005 11:18
 Aan: samba@lists.samba.org
 Onderwerp: [Samba] My first LDAP PDC - Win2k
 Profiles,redirection and guest accounts
 
 Dear List,
 
 This is my first post here, but yesterday I finally configured a full
 PDC with LDAP backend using Chapters 4 and 5 of the Samba Guide (exact
 same directory and shares setups just now). Very well written!
 
 I am slowly getting the other things like printing and DNS added, but
 I wanted to confirm/ask a few things.
 
 When I first logged on I got complaints about not being able to create
 the *.pds and using a local profile only, so I moved from the Samba
 Guide to the Samba Howtos and read that the profiles need to be
 browseable.
 
 So I su - to a user and checked I could even get into my profile
 folder in the server, and I couldn't. I couldn't even get into
 /var/lib/samba.
 
 I have changed /var/lib/samba to 755 and profiles to 755 too.
 Is this right?
 
 My profiles are now working, but I am not sure if I have opened up
 things that I shouldn't have.
 
 At no point in the Samba Guide does is say what the permissions should
 be for profiles, so I guess this is only a Win2k issue?
 
 Also, can you point me to some documentation on guest account logins
 for the domain, so they can get onto the computer with a default guest
 profile? I go have a look in the Howto Online book again first though.
 
 Also, how does redirection work on Win2k, as I could only see
 instructions for XP and it looks like all the folders etc. have been
 saved in profiles rather than profdata obviously.
 
 Lastly, my logon.bat which sets the time and maps the app folder to I
 doesn't work. I saw yesterday that I might needs scripts/logon.bat,
 but that doesn't work. I also made sure that it is in dos format using
 dos2unix (a perl oneliner actually).
 
 Thanks for your time,
 
 Paul.
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 
 
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] My first LDAP PDC - Win2k Profiles, redirection and guest accounts

2005-07-21 Thread Paul Henry
On 21/07/05, Louis van Belle [EMAIL PROTECTED] wrote:
 hi,
 
 the samba list remove the attachment.
 
 here is a samba.adm
 
 check it out with poledit.exe

Before I open these, what are they?

 
 louis
 
 
 
 -Oorspronkelijk bericht-
 Van: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]
 Namens Paul Henry
 Verzonden: donderdag 21 juli 2005 11:31
 Aan: samba@lists.samba.org
 Onderwerp: Re: [Samba] My first LDAP PDC - Win2k
 Profiles,redirection and guest accounts
 
 On 21/07/05, Louis van Belle [EMAIL PROTECTED] wrote:
  Hi,
 
  I think you need this adm, i found it on the net.
  Lots of thanks to the creator of it..
 
 
 Sorry? Is this for me or just SPAM?
 
 
  -Oorspronkelijk bericht-
  Van: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED]
  Namens Paul Henry
  Verzonden: donderdag 21 juli 2005 11:18
  Aan: samba@lists.samba.org
  Onderwerp: [Samba] My first LDAP PDC - Win2k
  Profiles,redirection and guest accounts
  
  Dear List,
  
  This is my first post here, but yesterday I finally
 configured a full
  PDC with LDAP backend using Chapters 4 and 5 of the Samba
 Guide (exact
  same directory and shares setups just now). Very well written!
  
  I am slowly getting the other things like printing and DNS
 added, but
  I wanted to confirm/ask a few things.
  
  When I first logged on I got complaints about not being
 able to create
  the *.pds and using a local profile only, so I moved from the Samba
  Guide to the Samba Howtos and read that the profiles need to be
  browseable.
  
  So I su - to a user and checked I could even get into my profile
  folder in the server, and I couldn't. I couldn't even get into
  /var/lib/samba.
  
  I have changed /var/lib/samba to 755 and profiles to 755 too.
  Is this right?
  
  My profiles are now working, but I am not sure if I have opened up
  things that I shouldn't have.
  
  At no point in the Samba Guide does is say what the
 permissions should
  be for profiles, so I guess this is only a Win2k issue?
  
  Also, can you point me to some documentation on guest account logins
  for the domain, so they can get onto the computer with a
 default guest
  profile? I go have a look in the Howto Online book again
 first though.
  
  Also, how does redirection work on Win2k, as I could only see
  instructions for XP and it looks like all the folders etc. have been
  saved in profiles rather than profdata obviously.
  
  Lastly, my logon.bat which sets the time and maps the app
 folder to I
  doesn't work. I saw yesterday that I might needs
 scripts/logon.bat,
  but that doesn't work. I also made sure that it is in dos
 format using
  dos2unix (a perl oneliner actually).
  
  Thanks for your time,
  
  Paul.
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/listinfo/samba
  
 
 
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/listinfo/samba
 
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 
 
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] netlogon, profdata and profiles

2005-07-21 Thread Paul Henry
Dear list,

Can these be hidden like print$ so when you browse the network you
can't see them?

Or should they be seen?

Thanks,

Paul.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba