[Samba] File permissions

2010-06-02 Thread Steve Wolfe
Samba 3.4.7-58.fc12, windows 7 client.

I have a share where, if I right-click and chose properties, everything
shows up as read only.  I can un-check that, hit apply, and if I view the
properties again, they are read only.

Interestingly enough, I can go in and create files, modify files, rename
files, delete files, etc..  However, some of the users' software checks for
read-only status, and is throwing errors.

Here's the smb.conf section:

[Apps]
path=/home/apps
force user=appsuser
force group=appsuser
read only=no
writeable=yes
oplocks = False
level2 oplocks = False

Directory looks like this:

drwxrwxr-x  94 appsuser appsuser  20K 2010-06-02 14:32 apps

Files inside of it have permissions similar to these:

-rwxr-xr-x1 appsuser appsuser 424K 2009-10-01 15:54 AAUTOLN.DLL
-rwxr-xr-x1 appsuser appsuser  894 2008-07-23 08:37 Accounting.HSICTB

Any clues?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] File permissions

2010-06-02 Thread Steve Wolfe
It's not installed.

I logged on as a domain administrator and unchecked the read only, now it
still appears on directories, but NOT on individual files.  The software now
succeeds.

I'd still like to fix the issue if possible, but if not... employees are
able to work.  :-D



On Wed, Jun 2, 2010 at 4:25 PM, Jorge Alberto Garcia 
jorge.garcia.gonza...@gmail.com wrote:

 Hi Steve,

 Do you have installed the acl ?  also  check if  filesystem below have
 the option  acl  enabled.


 Saludos!

 2010/6/3 Steve Wolfe bafena...@gmail.com

 Samba 3.4.7-58.fc12, windows 7 client.

 I have a share where, if I right-click and chose properties, everything
 shows up as read only.  I can un-check that, hit apply, and if I view
 the
 properties again, they are read only.

 Interestingly enough, I can go in and create files, modify files, rename
 files, delete files, etc..  However, some of the users' software checks
 for
 read-only status, and is throwing errors.

 Here's the smb.conf section:

 [Apps]
path=/home/apps
force user=appsuser
force group=appsuser
read only=no
writeable=yes
oplocks = False
level2 oplocks = False

 Directory looks like this:

 drwxrwxr-x  94 appsuser appsuser  20K 2010-06-02 14:32 apps

 Files inside of it have permissions similar to these:

 -rwxr-xr-x1 appsuser appsuser 424K 2009-10-01 15:54 AAUTOLN.DLL
 -rwxr-xr-x1 appsuser appsuser  894 2008-07-23 08:37 Accounting.HSICTB

 Any clues?
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Upgrading Samba

2010-05-24 Thread Steve Wolfe
I have a fairly old Samba server, 3.0.25, on CentOS 4.8.  I'd like to update
it to something more modern, so I grabbed the Enterprise Samba 3.5 RPMs
for RHEL, and went to work on a test machine.

After upgrading via rpm -U ./*.rpm, starting nmbd and smbd, I can no
longer log in to the domain, I get:

netlogon_creds_server_check failed. Rejecting auth request from client
FREESCALE machine account FREESCALE$

While /etc/samba/smbpasswd remains seemingly untouched from the upgrade, I
have to delete and recreate each account before it will let me log in to the
domain.

Since there are about a hundred workstations (and more accounts), I'd like
to make this a more seamless transition... any tips for a newb?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Upgrading Samba

2010-05-24 Thread Steve Wolfe
  Perfect!  On the test server, I just upgraded, did 'pdbedit -i smbpasswd
-e tdbsam', and everything seems to have worked.  Thank you very much.

steve

On Mon, May 24, 2010 at 3:00 PM, Gaiseric Vandal
gaiseric.van...@gmail.comwrote:

 On 05/24/2010 04:46 PM, Steve Wolfe wrote:

 I have a fairly old Samba server, 3.0.25, on CentOS 4.8.  I'd like to
 update
 it to something more modern, so I grabbed the Enterprise Samba 3.5 RPMs
 for RHEL, and went to work on a test machine.

 After upgrading via rpm -U ./*.rpm, starting nmbd and smbd, I can no
 longer log in to the domain, I get:

 netlogon_creds_server_check failed. Rejecting auth request from client
 FREESCALE machine account FREESCALE$

 While /etc/samba/smbpasswd remains seemingly untouched from the upgrade, I
 have to delete and recreate each account before it will let me log in to
 the
 domain.

 Since there are about a hundred workstations (and more accounts), I'd like
 to make this a more seamless transition... any tips for a newb?



 I am guessing that smbpasswd is not in the TDB format supported by Samba
 3.5.I think the older format got dropped along the way.

 Are the user accounts OK?  You could prob use pdbedit -w (from the old
 version)  to dump the  accounts to a text file.   And then maybe write a
 script (perl has a nice split command) to parse the file into a list of
 machine names.  And then run something like
for i in `cat thelist.txt` do
smbpasswd -x $i
smbpaswd -m -a $i
done



 The other option may be to use pdbedit  to dump the passwd to a text or TDB
 file, backup /etc/smbpasswd and then use pdbedit (to reimport the accounts.



 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba 3.5, logon drive

2010-05-24 Thread Steve Wolfe
I upgraded from 3.0.25 to 3.5.3, and all has been well, with one exception.
In my smb.conf, I have the line:

[global]
logon drive = P:

Under the old version, that would automatically map their home directory as
their P drive.  However, under 3.5, the P drive is no longer mapped.  Are
there any gotchas that I should be looking for?

steve
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Win7 client, Samba PDC

2010-05-06 Thread Steve Wolfe
I'm trying to set up Samba as a PDC for some Win7 clients, and could use
some help.  I can successfully join the domain, with the message Changing
the primary domain DNS name of this computer to  failed., but I am still
told that it was successful.

However, when I try to log in, I am told  The trust relationship between
this workstation and the primary domain failed.  Looking in
/var/log/samba/pi-69.log, I see:

[2010/05/06 08:45:45,  0]
rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3)
  _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting
auth request from client PI-69 machine account PI-69$
[2010/05/06 08:45:45,  0]
rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3)
  _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting
auth request from client PI-69 machine account PI-69$

Trying:

smbpasswd -x pi-69$
userdel -r pi-69$
useradd pi-69$
smbpasswd -a -m pi-69$

does no good.

Client has :

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters]
“RequireSignOrSeal”=dword:
“RequireStrongKey”=dword:

and

[HKLM\System\CCS\Services\LanmanWorkstation\Parameters]
DWORD DomainCompatibilityMode = 1
DWORD DNSNameResolutionRequired = 0

Config/specs:

Samba version 3.4.7-58.fc12
Widows 7 64-bit professional clients

smb.conf:
[global]
netbios name = PinnacleFS
workgroup = PinnacleDom
logon drive= P:
logon home = \\PinnacleFS\%u
locking = yes
server string = PDC
hosts allow=10.0.0.0/255.255.255.0
load printers = no
log file = /var/log/samba/%m.log
security=user
encrypt passwords=yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = yes
os level = 128
domain master = yes
prefered master = yes
domain logons = yes
logon script = login.bat
dns proxy = no

  idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   template shell = /bin/false
   winbind use default domain = no

[homes]
   comment = Home Directories
   browseable = no
   writable = yes
create mode = 0700
directory mode = 0700

# Un-comment the following and create the netlogon directory for Domain
Logons
 [netlogon]
   comment = Network Logon Service
   path = /home/netlogon
   guest ok = yes
   writable = no
   share modes = no
[Profiles]
browseable = no
guest ok = yes
create mode = 0700
directory mode = 0700
default case = lower
case sensitive = no

[Apps]
path=/home/apps
force user=apps
force group=apps
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win7 client, Samba PDC

2010-05-06 Thread Steve Wolfe
Doh!

 Thank you.  Setting those back fixed the problem.

On Thu, May 6, 2010 at 9:10 AM, Evan Ingram evan.ing...@cariss.co.ukwrote:

 On Thu, 2010-05-06 at 08:59 -0600, Steve Wolfe wrote:
 
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon
  \Parameters]
  “RequireSignOrSeal”=dword:
  “RequireStrongKey”=dword:

 on my win2008 server joined to samba domain these are ...01


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba