[Samba] clients open/close files thousands of times

2006-03-17 Thread Ryan Taylor
)
[2006/03/17 11:55:29, 2] smbd/open.c:open_file(350)
  rylie opened file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg read=Yes
write=No (numopen=14)
[2006/03/17 11:55:29, 2] smbd/close.c:close_normal_file(308)
  rylie closed file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg
(numopen=13)
[2006/03/17 11:55:29, 2] smbd/open.c:open_file(350)
  rylie opened file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg read=Yes
write=No (numopen=14)
[2006/03/17 11:55:29, 2] smbd/close.c:close_normal_file(308)
  rylie closed file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg
(numopen=13)
[2006/03/17 11:55:29, 2] smbd/open.c:open_file(350)
  rylie opened file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg read=No
write=No (numopen=14)
[2006/03/17 11:55:29, 2] smbd/close.c:close_normal_file(308)
  rylie closed file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg
(numopen=13)
[2006/03/17 11:55:29, 2] smbd/open.c:open_file(350)
  rylie opened file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg read=Yes
write=No (numopen=14)
[2006/03/17 11:55:29, 2] smbd/close.c:close_normal_file(308)
  rylie closed file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg
(numopen=13)
[2006/03/17 11:55:29, 2] smbd/open.c:open_file(350)
  rylie opened file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg read=Yes
write=No (numopen=14)
[2006/03/17 11:55:29, 2] smbd/close.c:close_normal_file(308)
  rylie closed file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg
(numopen=13)
[2006/03/17 11:55:29, 2] smbd/open.c:open_file(350)
  rylie opened file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg read=No
write=No (numopen=14)
[2006/03/17 11:55:29, 2] smbd/close.c:close_normal_file(308)
  rylie closed file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg
(numopen=13)
[2006/03/17 11:55:29, 2] smbd/open.c:open_file(350)
  rylie opened file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg read=Yes
write=No (numopen=14)
[2006/03/17 11:55:29, 2] smbd/close.c:close_normal_file(308)
  rylie closed file USER/USTA50/MATERIAL/PATTERN/BACKGRND/Sky2.jpg
(numopen=13)

Any help would be greatly appreciated...

--
Ryan Taylor
Micro Consultants
770-789-2072
[EMAIL PROTECTED]
Until I see everything working right, I will be apprehensive.  Pamela
Klabbers
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] URGENT!!!!! Problem: outlook.pst with samba 3.0.21c!!!!!!!!

2006-03-12 Thread Ryan Taylor
We just upgraded to 3.0.21c from 'b' and are also experiencing PST
file troubles.  I have added *.pst to the veto lock files option to
try and fix it (I know it should be default).  That was just this
morning, but I haven't heard anymore complaints yet.

Hope it helps,


--
Ryan Taylor
Micro Consultants
770-789-2072
[EMAIL PROTECTED]
Until I see everything working right, I will be apprehensive.  Pamela Klabbers
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba on top of NFS question

2006-02-27 Thread Ryan Taylor
I am sorry for the long *involved* post, however we are at wits end and
advice would be greatly appreciated.

Background: We have three servers in this example.  Two of the servers (we
will call Server A  B) each have a 2.7T raid 5 array that is mirrored with
DRBD and monitored for failover with Heartbeat.  NFS is running and
exporting the array on Heartbeats virtual IP.
Server C mounts the export, and is a Samba PDC.  The mount contains all
project data which samba hands out to ~250 windows boxes.  There are at
least ~1600 files open(locked) at any given time throughout the day.  It
works, kinda.  The users can work and everything is fine except we get
somewhat random, usually 2 freezes a day.  The windows boxes freeze up for a
few minutes then resume working like nothing happened.  The servers go idle
during this freeze, and sometimes we get the  lock.d can't reach server
then ok messages in dmesg, but other times not.

The post is long enough without telling you all that we have tried. (long
list including network drivers, nfs mount options, samba locking options,
etc..).  We now have data on Server C and Samba hosting it off it's local
drives.. It's only been one day so far, but so far (knock on wood) no
freezes.  In addition samba runs much smoother on the clients end, such as
(*right-click*properties boxes etc...) Segue to question...

Question(s):  Does Samba not work on top of NFS? Is there any better way for
Samba to access the data on the failover pair of servers than NFS?  Is it
locking that is causing us problems? What is the correct 'Samba' way to get
remote data shared to multiple samba front ends?  I guess my ultimate
question and why I am posting, is because I have tried TONS of things and am
curious if anyone else has this particular setup working?

Please let me know if I can provide any information!

Thank you for your time,


--
Ryan Taylor
Micro Consultants
770-789-2072
[EMAIL PROTECTED]
Until I see everything working right, I will be apprehensive.  Pamela
Klabbers
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba on top of NFS question

2006-02-27 Thread Ryan Taylor
Thank you for the reply, its nice to know someone else is in the same boat.

Unfortunately our servers are also in production and therefore we can't try
the patch.  We also have not found a good way to reproduce without throwing
all the users on the system.

One interesting fact I have noticed since we have moved our data to the
local samba machine: netstat -s -u returns
# netstat -s -u
Udp:
50898 packets received
16 packets to unknown port received.
0 packet receive errors
17163 packets sent
#
Where as before when on NFS we had 50%-75% of the number of packets
received in packet receive errors

I am beginning to believe you are right, NFS cannot handle the locking
required by Samba?

I am confused in two directions.  We use Whitebox4 and have noticed a
newer version of nfs.utils.el4 rpm released but requires (because of two
many dependencies) for use to upgrade to CentOS4... 2) We are using AMD X2's
so are running the SMP kernel as well.  Could it be just a SMP issue? Which
is why I am curious if anyone else had samba working in an environment
similar to ours.


On 2/27/06, Fermin Molina [EMAIL PROTECTED] wrote:

 On Mon, 2006-02-27 at 15:11 -0500, Ryan Taylor wrote:
  I am sorry for the long *involved* post, however we are at wits end and
  advice would be greatly appreciated.
 
  Background: We have three servers in this example.  Two of the servers
 (we
  will call Server A  B) each have a 2.7T raid 5 array that is mirrored
 with
  DRBD and monitored for failover with Heartbeat.  NFS is running and
  exporting the array on Heartbeats virtual IP.
  Server C mounts the export, and is a Samba PDC.  The mount contains
 all
  project data which samba hands out to ~250 windows boxes.  There are at
  least ~1600 files open(locked) at any given time throughout the day.  It
  works, kinda.  The users can work and everything is fine except we get
  somewhat random, usually 2 freezes a day.  The windows boxes freeze up
 for a
  few minutes then resume working like nothing happened.  The servers go
 idle
  during this freeze, and sometimes we get the  lock.d can't reach
 server
  then ok messages in dmesg, but other times not.


 Look the thread Samba daemons hang trying to lock locking.tdb, about
 Jan 25 in this list.


  The post is long enough without telling you all that we have tried.
 (long
  list including network drivers, nfs mount options, samba locking
 options,
  etc..).  We now have data on Server C and Samba hosting it off it's
 local
  drives.. It's only been one day so far, but so far (knock on wood) no
  freezes.  In addition samba runs much smoother on the clients end, such
 as
  (*right-click*properties boxes etc...) Segue to question...


 I've solved the problem reducing the amount of data shared with NFS
 (making it local to the machine I run samba).

 It's a problem (I think) with linux kernel and file looking. Have a look
 to the thread kernel BUG at fs/locks.c:1932! of linux-kernel list,
 about Fri, 17 Feb 2006.

 I use latest kernels from FC4. Can you try the patch to linux kernel
 from Trond Myklebust? I cannot try it, because my server is in
 production.

 I will post to this list my conclusions when I finish the investigations
 about this behaviour.


  Question(s):  Does Samba not work on top of NFS? Is there any better way
 for
  Samba to access the data on the failover pair of servers than NFS?  Is
 it
  locking that is causing us problems? What is the correct 'Samba' way to
 get
  remote data shared to multiple samba front ends?  I guess my ultimate
  question and why I am posting, is because I have tried TONS of things
 and am
  curious if anyone else has this particular setup working?


 I have used FC3 (with latest updates) with samba 3.0.14a, and the same
 configuration (NFS, etc) and all was working ok. When I changed the
 server and begin to use the latest FC4 with last versions of linux
 kernel and samba, all goes very very bad.

 Cheers,

 --
 Fermin Molina Ibarz
 Tècnic sistemes - ASIC
 Universitat de Lleida
 Tel: +34 973 702151
 GPG: 0x060F857A





--
Ryan Taylor
Micro Consultants
770-789-2072
[EMAIL PROTECTED]
Until I see everything working right, I will be apprehensive.  Pamela
Klabbers
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] VFS audit

2006-02-07 Thread Ryan Taylor
That is great! And only leaves one problem:  The only way we know
easily who did what and where is by putting the logs in a log file
like %U.%m.log .  Is there yet another way to accomplish this
because syslog doesn't have those variables?  The ultimate goal is to
parse and put in a database for statistics and finding out who messed
up.

Biggest question yet: Is there somewhere I could have read to find the
solution you suggested above with the facilities/priority etc.. I hate
to ask questions like this if there is somewhere I can read and learn
from myself.  I have searched the Internet tirelessly and have not run
across the solution you suggested.  How can I find such solutions...?!

Thank you for your time and help!,

Ryan

On 2/7/06, Deryck Hodge [EMAIL PROTECTED] wrote:
 On 2/2/06, Ryan Taylor [EMAIL PROTECTED] wrote:
  Not only is it harder to parse but it doesn't show
  open/close/edit/etc.. of files and seems completely different than
  'audit'.
 
  I am just wondering if there is a way to get 'audit' results into the
  logfile other than syslog.
 

 With any of the audit modules, you can direct the entries being sent
 to syslog to an external file.

 In smb.conf, something like the following

 vfs objects = full_audit
 full_audit:facility = LOCAL5
 full_audit:priority = NOTICE

 will allow you to do this in /etc/syslog.conf:

 local5.notice/path/to/another/log

 Restart or reload syslogd and away you go.

 Cheers,
 deryck

 --
 Deryck Hodge
 http://www.devurandom.org/
 http://www.samba.org/

 Aimless days, uncool ways of decathecting --Mike Doughty (2005)




--
Ryan Taylor
Micro Consultants
770-789-2072
[EMAIL PROTECTED]
If I had to live my life again, I'd make the same mistakes, only
sooner.  Tallulah Bankhead
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] VFS audit

2006-02-02 Thread Ryan Taylor
When I use 'vfs objects = audit' then I get nice messages in the syslog like:

Feb  1 17:17:57 tethys smbd_audit[19432]: opendir Workspace
Feb  1 17:17:58 tethys smbd_audit[19432]: open Workspace/test.txt (fd 27)
Feb  1 17:18:00 tethys smbd_audit[19432]: close fd 27
Feb  1 17:17:58 tethys smbd_audit[19432]: open Workspace/test.txt (fd
27) for writing
Feb  1 17:17:58 tethys smbd_audit[19432]: opendir Workspace
Feb  1 17:17:58 tethys smbd_audit[19432]: open Workspace/test.txt (fd 28)
Feb  1 17:17:58 tethys smbd_audit[19432]: close fd 28
Feb  1 17:17:58 tethys smbd_audit[19432]: close fd 27
Feb  1 17:18:02 tethys smbd_audit[19432]: disconnected

#
But with 'audit' it only outputs to the syslog;
If I use 'extd_audit' then it outputs to both syslog and the logfile I
specified ( %U.%m.log )
However not the same... like:
[2006/02/01 17:12:46, 1] modules/vfs_extd_audit.c:audit_opendir(164)
  vfs_extd_audit: opendir Workspace
[2006/02/01 17:16:05, 10] modules/vfs_extd_audit.c:init_module(362)
  vfs_extd_audit: Debug class number of 'extd_audit': 18
[2006/02/01 17:16:07, 10] modules/vfs_extd_audit.c:audit_connect(135)
  Connected to service proj as user mance
[2006/02/01 17:16:07, 10] modules/vfs_extd_audit.c:audit_disconnect(145)
  Disconnected from VFS module extd_audit
[2006/02/01 17:16:07, 10] modules/vfs_extd_audit.c:audit_connect(135)
  Connected to service proj as user mance
[2006/02/01 17:16:05, 10] modules/vfs_extd_audit.c:audit_disconnect(145)
  Disconnected from VFS module extd_audit
##

Not only is it harder to parse but it doesn't show
open/close/edit/etc.. of files and seems completely different than
'audit'.

I am just wondering if there is a way to get 'audit' results into the
logfile other than syslog.

Thank you for any advise and please let me know if I can include any
more examples or information!



On 2/1/06, Jeremy Allison [EMAIL PROTECTED] wrote:
 On Wed, Feb 01, 2006 at 03:45:50PM -0500, Ryan Taylor wrote:
  I would like to turn on auditing for a particular share and have all
  auditing go to the username.machinename.log files.  If I turn on audit
  then no matter which way I configure it, it either goes to just syslog,
  or both.  My goal is to just log to the samba files and take the wieght
  off of syslog.  I have searched and searched but can't find but a
  solution that works.  Any help would be greatly
  appreciated.
 
  I have it set now as:
  ...
  log level = 0 vfs:2
  syslog = 0
  ...

 What vfs audit module are you using ? As far as I know the
 all go to syslog.

 Jeremy.



--
Ryan Taylor
Micro Consultants
770-789-2072
[EMAIL PROTECTED]
If I had to live my life again, I'd make the same mistakes, only
sooner.  Tallulah Bankhead
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] VFS audit

2006-02-02 Thread Ryan Taylor
To clarify..
When I use 'vfs objects = audit' then I get nice messages in the syslog like:

Feb  1 17:17:57 tethys smbd_audit[19432]: opendir Workspace
Feb  1 17:17:58 tethys smbd_audit[19432]: open Workspace/test.txt (fd 27)
Feb  1 17:18:00 tethys smbd_audit[19432]: close fd 27
Feb  1 17:17:58 tethys smbd_audit[19432]: open Workspace/test.txt (fd
27) for writing
Feb  1 17:17:58 tethys smbd_audit[19432]: opendir Workspace
Feb  1 17:17:58 tethys smbd_audit[19432]: open Workspace/test.txt (fd 28)
Feb  1 17:17:58 tethys smbd_audit[19432]: close fd 28
Feb  1 17:17:58 tethys smbd_audit[19432]: close fd 27
Feb  1 17:18:02 tethys smbd_audit[19432]: disconnected

#
But with 'audit' it only outputs to the syslog;
If I use 'extd_audit' then it outputs to both syslog and the logfile I
specified ( %U.%m.log )
However not the same... like:
[2006/02/01 17:12:46, 1] modules/vfs_extd_audit.c:audit_opendir(164)
  vfs_extd_audit: opendir Workspace
[2006/02/01 17:16:05, 10] modules/vfs_extd_audit.c:init_module(362)
  vfs_extd_audit: Debug class number of 'extd_audit': 18
[2006/02/01 17:16:07, 10] modules/vfs_extd_audit.c:audit_connect(135)
  Connected to service proj as user mance
[2006/02/01 17:16:07, 10] modules/vfs_extd_audit.c:audit_disconnect(145)
  Disconnected from VFS module extd_audit
[2006/02/01 17:16:07, 10] modules/vfs_extd_audit.c:audit_connect(135)
  Connected to service proj as user mance
[2006/02/01 17:16:05, 10] modules/vfs_extd_audit.c:audit_disconnect(145)
  Disconnected from VFS module extd_audit
##

Not only is it harder to parse but it doesn't show
open/close/edit/etc.. of files and seems completely different than
'audit'.

I am just wondering if there is a way to get 'audit' results into the
logfile other than syslog.

Thank you for any advise and please let me know if I can include any
more examples or information!



On 2/1/06, Jeremy Allison [EMAIL PROTECTED] wrote:
 On Wed, Feb 01, 2006 at 03:45:50PM -0500, Ryan Taylor wrote:
  I would like to turn on auditing for a particular share and have all
  auditing go to the username.machinename.log files.  If I turn on audit
  then no matter which way I configure it, it either goes to just syslog,
  or both.  My goal is to just log to the samba files and take the wieght
  off of syslog.  I have searched and searched but can't find but a
  solution that works.  Any help would be greatly
  appreciated.
 
  I have it set now as:
  ...
  log level = 0 vfs:2
  syslog = 0
  ...

 What vfs audit module are you using ? As far as I know the
 all go to syslog.

 Jeremy.



--
Ryan Taylor
Micro Consultants
770-789-2072
[EMAIL PROTECTED]
If I had to live my life again, I'd make the same mistakes, only
sooner.  Tallulah Bankhead


--
Ryan Taylor
Micro Consultants
770-789-2072
[EMAIL PROTECTED]
If I had to live my life again, I'd make the same mistakes, only
sooner.  Tallulah Bankhead
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] VFS audit

2006-02-01 Thread Ryan Taylor
I would like to turn on auditing for a particular share and have all
auditing go to the username.machinename.log files.  If I turn on audit
then no matter which way I configure it, it either goes to just syslog,
or both.  My goal is to just log to the samba files and take the wieght
off of syslog.  I have searched and searched but can't find but a
solution that works.  Any help would be greatly
appreciated.

I have it set now as:
...
log level = 0 vfs:2
syslog = 0
...

Please let me know if I can provide anymore information that may help..
Thank you again,
ryan-- [EMAIL PROTECTED]

--
Ryan Taylor
Micro Consultants
770-789-2072
[EMAIL PROTECTED]
If I had to live my life again, I'd make the same mistakes, only
sooner.  Tallulah Bankhead
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] SSID subgroups question??

2006-01-07 Thread Ryan Taylor
I have Samba as a PDC w/ openLDAP backend.  Everything works great.  I
have a question on how sub-groups work.  For instance, my Domain
Users group will have a SID of
S-1-5-21-2213288279-2770996180-1086272762-513

What if I create a group under that one.  Should it be
...-513-something  I am wondering how samba will know it is a sub
group without a different ID.  I am using phpLDAPadmin right now to
try and create the tree and it gives me an extra box past the 513 but
I am unsure what should go in it.

Thank you for your time,

Ryan Taylor
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: SAMBA/PDC + LDAP HELP please?

2005-10-06 Thread Ryan Taylor
Ok, I figured it out!! Thank you for the help and for others the change was
in /etc/ldap.conf and I had:
rootbinddn = cn=root,ou=???,dc=beefylinux,dc=com
i removed the ou=group after root and changed rootbinddn to just binddn
and that did it..

Everything works great except for the profiles which the windows machine
doesn't seem to know about
%L variable. I imagine this is because I am on Samba 3.0.10 not 3.0.20a so
maybe its a new variable...

Anyway, just wanted to say Thank you to everyone for the help. The microsoft
rep. assigned to out company
is not going to be happy next week when time to renew!! ha, i love it.

--Ryan Taylor
[EMAIL PROTECTED]
Micro Consultants
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] SAMBA/PDC + LDAP HELP please?

2005-10-05 Thread Ryan Taylor
Thank you to John Terpstra and his book Samba-3 by Example I have made
great strides. Seems like I am one step away... which is getting the system
to check ldap, which it seems to be ignoring. Has anyone has this problem? I
ran authconfig and told it to you ldap as well as edited the
nsswitch.confto files ldap where supposed to be. But every getent
command just pulls
system info and nothing from ldap... is this a redhat specific problem
maybe?

Thank you for suggestions,
Ryan Taylor
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] SAMBA/PDC + LDAP HELP please?

2005-10-05 Thread Ryan Taylor
More information... below is my log after running getent group | grep
Domain
thank you -ryan

Oct 5 19:25:04 beefylinux slapd[3320]: conn=0 fd=11 ACCEPT from IP=
127.0.0.1:32894 http://127.0.0.1:32894 (IP=0.0.0.0:389http://0.0.0.0:389
)
Oct 5 19:25:04 beefylinux slapd[3320]: conn=0 op=0 BIND
dn=cn=Manager,ou=DSA,dc=beefylinux,dc=com method=128
Oct 5 19:25:04 beefylinux slapd[3320]: conn=0 op=0 RESULT tag=97 err=49
text=
Oct 5 19:25:04 beefylinux slapd[3320]: conn=0 op=1 UNBIND
Oct 5 19:25:04 beefylinux slapd[3320]: conn=0 fd=11 closed
Oct 5 19:26:38 beefylinux slapd[3320]: conn=1 fd=11 ACCEPT from IP=
127.0.0.1:32895 http://127.0.0.1:32895 (IP=0.0.0.0:389http://0.0.0.0:389
)
Oct 5 19:26:38 beefylinux slapd[3320]: conn=1 op=0 BIND
dn=cn=Manager,ou=DSA,dc=beefylinux,dc=com method=128
Oct 5 19:26:38 beefylinux slapd[3320]: conn=1 op=0 RESULT tag=97 err=49
text=
Oct 5 19:26:38 beefylinux slapd[3320]: conn=1 op=1 UNBIND
Oct 5 19:26:38 beefylinux slapd[3320]: conn=1 fd=11 closed
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] SAMBA/PDC + LDAP HELP please?

2005-10-04 Thread Ryan Taylor
Hi, I have been trying to work this out on my own now for about a week
and feel like I am so close..haha. I have samba setup as a PDC and in
theory authenticating users through openLDAP with the use of
smbldap-tools by IDEALX. I have checked the windows registry fix, but
still no luck. When I try to join the domain as root, I get the error:
Username could not be found

Any help would be greatly, greatly appreciated as I am at the end of my
time to get this job done. I don't need encryption and don't mind if
everything is plain text..(security not issue yet)

I have included all configs i believe are important (minus the comments
to make them shorter) please let me know if I can provide anything
else!

Thank you in advance for your time,
Ryan Taylor
[EMAIL PROTECTED]

** ***
/ETC/SAMBA/SMB.CONF
**
#=== Global Settings
=
[global]
workgroup = BEEFY-NT
netbios name = PDC-SRV
#enable privileges = yes
interfaces = 192.168.0.69 http://192.168.0.69/
username map = /etc/samba/smbusers
server string = Samba Server %v
security = user
encrypt passwords = Yes
min passwd length = 3
obey pam restrictions = No
#unix password sync = Yes
#passwd program = /opt/IDEALX/sbin/smbldap-passwd -u %u
#passwd chat = Changing password for*\nNew password* %n\n *Retype
new password* %n\n
ldap passwd sync = Yes
log level = 2
syslog = 2
log file = /var/log/samba/log.%m
max log size = 10
time server = Yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
mangling method = hash2
Dos charset = 850
Unix charset = ISO8859-1

logon script = logon.bat
logon drive = H:
logon home =
logon path =

domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
passdb backend = ldapsam:ldap://127.0.0.1/
# passdb backend = ldapsam:ldap://127.0.0.1/
ldap://slave.beefylinux.com; ldap://slave.beefylinux.com%22
# ldap filter = ((objectclass=sambaSamAccount)(uid=%u))
ldap admin dn = cn=Manager,dc=beefylinux,dc=com
ldap suffix = dc=beefylinux,dc=com
ldap group suffix = ou=Groups
ldap user suffix = ou=Users
ldap machine suffix = ou=Computers
ldap idmap suffix = ou=Users
#ldap ssl = start_tls
add user script = /usr/local/sbin/smbldap-useradd =m %u
ldap delete dn = Yes
#delete user script = /opt/IDEALX/sbin/smbldap-userdel %u
add machine script = /opt/IDEALX/sbin/smbldap-useradd -w %u
add group script = /opt/IDEALX/sbin/smbldap-groupadd -p %g
#delete group script = /opt/IDEALX/sbin/smbldap-groupdel %g
add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m %u
%g
delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x
%u %g
set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g %g
%u

# printers configuration
printer admin = @Print Operators
load printers = Yes
create mask = 0640
directory mask = 0750
nt acl support = No
printing = cups
printcap name = cups
deadtime = 10
guest account = nobody
map to guest = Bad User
dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
show add printer wizard = yes
; to maintain capital letters in shortcuts in any of the profile
folders:
preserve case = yes
short preserve case = yes
case sensitive = no

idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /bin/false
winbind use default domain = no
[homes]
comment = repertoire de %U, %u
read only = No
create mask = 0644
directory mask = 0775
browseable = no

[netlogon]
path = /home/netlogon/
browseable = No
read only = yes

[profiles]
path = /home/profiles
read only = no
create mask = 0600
directory mask = 0700
browseable = No
guest ok = Yes
profile acls = yes
csc policy = disable
# next line is a great way to secure the profiles
force user = %U
# next line allows administrator to access all profiles
valid users = %U @Domain Admins


[printers]
comment = Network Printers
printer admin = @Print Operators
guest ok = yes
printable = yes
path = /home/spool/
browseable = No
read only = Yes
printable = Yes
print command = /usr/bin/lpr -P%p -r %s
lpq command = /usr/bin/lpq -P%p
lprm command = /usr/bin/lprm -P%p %j

[print$]
path = /home/printers
printer admin = @Print Operators
guest ok = yes
browseable = Yes
read only = Yes
valid users = @Printer Operators
write list = @Print Operators
create mask = 0664
directory mask = 0775

[public]
comment = Repertoire public
path = /home/public
browseable = Yes
guest ok = Yes
read only = No
directory mask = 0775
create mask = 0664

*
/etc/LDAP.CONF
*
# @(#)$Id: ldap.conf,v 1.34 2004/09/16 23:32:02 lukeh Exp $
#
# This is the configuration file for the LDAP nameservice
# switch library and the LDAP PAM module.
#
# PADL Software
# http://www.padl.com
#
host 127.0.0.1 http://127.0.0.1/
base dc=beefylinux,dc=com

rootbinddn cn=manager,ou=DSA,dc=beefylinux,dc=com
nss_base_passwd ou=Users,dc=beefylinux,dc=com