[Samba] preexec script problem

2004-05-11 Thread ipguy
hi all

i'm running into a little problem when using preexec scripts for the creation 
of dir's on my samba server

script
---
#! /bin/sh
name=`getent passwd | grep %U | awk -F: '{print $5}'`
mkdir /samba/test/$name
---

snip of smb.conf
---
[test]
path = /samba/test
preexec = /root/script
browseable = Yes
writeable = Yes
valid users = @mygroup
force group = @mygroup
create mask = 0770
force create mode = 770
---

anyone have any idea why the dir is not created under /samba/test ?

-ipuy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] variable substitution ?

2004-04-29 Thread ipguy
is anyone aware how one might grab the Full Name variable (if it even 
exists) from a PDC, if Samba is setup as a domain member server using 
winbind, so the variable can be used in preexec scripts ?

e.g

preexec = mkdir /data/%u 

the above will make a dir in the data dir before connecting to the share. the 
problem with this situation is the username is not always the full name 
so the creation of the %u dir may not be specific.

if one does a getend passwd the full name can be seen but how does one 
use this ?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] (CAN ANYONE READ THIS ?) Samba2.2.8a and TOUCH option in recycle.conf ??

2004-04-05 Thread ipguy
CAN ANYONE READ THIS ?

is anyone having issues with the TOUCH option in recycle.conf for samba-
2.2.8a ?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba2.2.8a and TOUCH option in recycle.conf ??

2004-04-01 Thread ipguy
is anyone having issues with the TOUCH option in recycle.conf for samba-
2.2.8a ?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Fwd: recycle.conf and TOUCH bug ?

2004-03-30 Thread ipguy
ok, now i'm starting to wonder if my posts are getting to the list !!
Can you guys see my cries for help ?





 ipguy [EMAIL PROTECTED] wrote:
 
 no takers regarding this issue ?
 is anyone experiancing the same problems ?
 
 
 
 
  ipguy [EMAIL PROTECTED] wrote:
  
  Hi all
  
  I’m currently using the recycle VFS module with samba.2.2.8a and
  think I 
  may have discovered a bug.
  
  My recycle.conf lists TOUCH as a required option...
  
  mode = KEEP_DIRECTORIES|VERSIONS|TOUCH
  
  However, the files (NOT DIRECTORIES) date/times after being moved
 to
  the 
  recycle area, as specified my recycle.conf, is NOT modified to the
  time of 
  deletion...
  
  -ip.guy 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


-ipguy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Fwd: recycle.conf and TOUCH bug ?

2004-03-29 Thread ipguy
no takers regarding this issue ?
is anyone experiancing the same problems ?




 ipguy [EMAIL PROTECTED] wrote:
 
 Hi all
 
 I’m currently using the recycle VFS module with samba.2.2.8a and
 think I 
 may have discovered a bug.
 
 My recycle.conf lists TOUCH as a required option...
 
 mode = KEEP_DIRECTORIES|VERSIONS|TOUCH
 
 However, the files (NOT DIRECTORIES) date/times after being moved to
 the 
 recycle area, as specified my recycle.conf, is NOT modified to the
 time of 
 deletion...
 
 -ip.guy 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Newbie/Unable to join my new Domain

2004-03-29 Thread ipguy

if you intent to make your samba server the PDC, you don't need to join 
anything, it will just be... a bad idea to do if you already have a PDC on your 
local network... !!!

-ipguy


 Warren Green [EMAIL PROTECTED] wrote:
 
 Hi, sorry if this question is worn out but I have set up a machine
 running 
 Fedora core 1 with samba 3 and am trying to make my Samba the PDC I
 can 
 see my domain GREENTEST from my network places but I am having a
 problem 
 joining the domain.
 I am sure I am missing something from the security side. Could
 someone 
 please help.
 
 This is my smb.conf file.
 
 [global]
 workgroup = GREENTEST
 server string = Samba Server
 username map = /etc/samba/smbusers
 log file = /var/log/samba/%m.log
 max log size = 50
 socket options = TCP_NODELAY SO_RCVBUF=8192 
SO_SNDBUF=8192
 logon path = \\%L\Profiles\%U
 domain logons = Yes
 preferred master = Yes
 domain master = Yes
 dns proxy = No
 
 [homes]
 comment = Home Directories
 read only = No
 browseable = No
 
 [printers]
 comment = All Printers
 path = /var/spool/samba
 printable = Yes
 browseable = No
 
 
 Thanx
 Warren
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


-ipguy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] recycle.conf and TOUCH bug ?

2004-03-28 Thread ipguy
Hi all

I’m currently using the recycle VFS module with samba.2.2.8a and think I 
may have discovered a bug.

My recycle.conf lists TOUCH as a required option...

mode = KEEP_DIRECTORIES|VERSIONS|TOUCH

However, the files (NOT DIRECTORIES) date/times after being moved to the 
recycle area, as specified my recycle.conf, is NOT modified to the time of 
deletion...

-ip.guy 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] recycle bin module, touch, TIME/DATE

2004-01-18 Thread ipguy
Hi all...

There seems to be an issue with the recycle bin module for samba 2.2.8a

When files are deleted, the time/date is not touched to the current time/date, 
making it hard to write scripts that empty the trash based on deletion date. 

Strangely enough, the time/date of deleted folders is touched

Anyone having the same problem ?

-ipguy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] confirmed problem with photoshop 7.0 and samba 2.2.x

2003-08-28 Thread ipguy
hi all

you may remember my earlier post regarding a photoshop problem with 
samba shares, well, I can now confirm that the problem is real.

i have two version of PS installed on my workstation, 6.0  7.0

when trying to save-as from 6.0, no problems.

when trying to save-as from 7.0, problem, i'm getting a disk full error.

when i check the logs, at log level 2, i don't see anything funny (ill 
increase the log level to 5 or 10 and see what I kind find)

anyone having similar problems ?

id be really interested in hearing from you if your users are using 
PS7.0 and are NOT having the save-as issue.

-ipguy

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] admin user ?

2003-08-27 Thread ipguy
hi all

if i use the admin user option in smb.conf to allow users in 
BLAH+admins from a NT4 PDC group, and try to browse a share with 
permissions of rwxrwx--- users BLAH+othergroup i'm not allowed to 
browse the share.

it looks straight forward, if the users in the BLAH+admins group are 
not part of the BLAH+othergroup, access to the BLAH+othergroup is 
not allowed.

unfortunately that kind of defeats the purpose of having a admin users 
option in smb.conf.

how do you guys get around this ?

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Photoshop save-as to Samba

2003-08-14 Thread ipguy
hi all
has anyone had any issues saving from within photoshop to a samba share?
the error reported is Disk Full ... course its not full
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Photoshop save-as to Samba

2003-08-10 Thread ipguy
the perms are good, copying the same file to the share is successful, 
saving as to the share fails from PS only

Justin Daniels wrote:
I have gotten this message when the owner or permissions were insufficient
for the folder/file on the share.
That is, assuming that you cannot copy any file into that directory and this
is not a photoshop only problem.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
ipguy
Sent: Friday, August 08, 2003 4:36 AM
To: Samba
Subject: [Samba] Photoshop save-as to Samba
hi all
has anyone had any issues saving from within photoshop to a samba share?
the error reported is Disk Full ... course its not full
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba




--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] create mask = 0660 and map archive = yes ?

2003-07-25 Thread ipguy


hi all

if i define a create mask of 0660 in global, i can't seem to set the archive
bit .
isn't the archive bit set by setting the execute bit for the users perm ?
how do I get around that ?

-ipguy




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba clustering anyone ?

2003-07-15 Thread ipguy

- Original Message - 
From: Paul Eggleton [EMAIL PROTECTED]
To: ipguy [EMAIL PROTECTED]
Sent: Tuesday, July 15, 2003 6:33 AM
Subject: RE: [Samba] samba clustering anyone ?


 ipguy wrote on Tuesday, 15 July 2003 12:13 a.m.:
  just wondering if anyone has setup a samba cluster for
  speed/failover/redundency ? i'd love to hear from you...

 So would I. One would assume that you would have to combine Samba with a
 replicating file system (eg. Coda or Intermezzo) as well as something
 like heartbeat in order to get this kind of functionality (never tried
 this though, and you're liable to run into locking and other issues).

The fs will need to be something like OpenGFS to make sure file locking is
not an issue...
I'd imagine any other cluster solution is possible as long as OpenGFS is
supported


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba clustering anyone ?

2003-07-14 Thread ipguy
hi all.

just wondering if anyone has setup a samba cluster for
speed/failover/redundency ?
i'd love to hear from you...

thanks
-ipguy


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Domain member server

2003-07-02 Thread ipguy
...make sure winbindd is running without errors...
...add the samba server to the domain from the windows2000 server first,
that worked for me.




- Original Message - 
From: Billy Tang [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, July 02, 2003 6:02 PM
Subject: [Samba] Domain member server


 Dear all,
   I was trying to join the samba server as a win 2000 domain member
server. I'm using the smbpasswd command as follow:

 # smbpasswd -j edventures -r venus -Uadministrator
 Password:
 Error connecting to venus
 Unable to join domain EDVENTURES

 Is there anything wrong ?




 _
 iRepublics.com - Free Web Hosting for Businesses
 33MB webspace free, SMS messaging, 30 email accounts, your own domain name
 Sign up Now at http://www.iRepublics.com
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] hide files

2003-07-02 Thread ipguy
yes, use the veto files option like this...

veto files = /.recycle/*.mp3/*.divx/*.eml/



- Original Message - 
From: Daniel Zeiss [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, July 02, 2003 6:32 AM
Subject: [Samba] hide files


 Hi.
 
 i am using the hide files and hide dot files options, but the files are 
 still visiable on my WinXP clients.
 
 Yes, I have the option set on the XP clients to show all files for 
 security reasons.
 
 But can't samba just hide this file for everybody / every setting?
 
 thanks
 
 daniel
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Domain Member server and W2kServer

2003-07-02 Thread ipguy
i'm currently running samba 2.2.8a as a domain member server to an
NT4Server no problems
will be upgrading the PDC to a W2K server next week...
there isn't a need to use LDAP with Samba with W2KServer is there ? I can
still go with my current setup can I ?


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [spam] Re: [Samba] exec scripts question

2003-06-30 Thread ipguy
I'm sure %U is defined since I can see my share my share being my
username.
No, nothing in the logs.



- Original Message - 
From: Joel Hammer [EMAIL PROTECTED]
To: ipguy [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Sunday, June 29, 2003 12:41 AM
Subject: [spam] Re: [Samba] exec scripts question


 exec works in global and share definitions.
 I haven't tried what you are doing, but simply thinking out loud:
 Could this be a permissions problem?
 Is %U defined when you try to call it?
 Can samba find the mkdir command?
 Is this a special problem for the [homes] share?
 Joel

 On Sat, Jun 28, 2003 at 11:59:26PM +1000, ipguy wrote:
  i'm having problems with preexec scripts... see example below
 
  [homes]
  preexec = mkdir /samba/users/%U
 
  do exec scripts only work in a Samba PDC setup or are we able to use
exec
  scripts in any setup ?
  if you look at the preexec script above, all i'm trying to do is make a
dir
  for the connecting user (i don't need to make an account as the samba
server
  is seup as a domain member server to a NT4 PDC, i'm using winbind for
  accounts)
  why wouldn't the script work ?
  it's to simple for it not to
 
 
  -- 
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [spam] Re: [Samba] exec scripts question

2003-06-30 Thread ipguy
I'd rather not mess with pam if I can avoid it
the preexec script should work.
It's to simple !!


Le sam 28/06/2003 à 15:59, ipguy a écrit :
 i'm having problems with preexec scripts... see example below

 [homes]
 preexec = mkdir /samba/users/%U

 do exec scripts only work in a Samba PDC setup or are we able to use exec
 scripts in any setup ?
 if you look at the preexec script above, all i'm trying to do is make a
dir
 for the connecting user (i don't need to make an account as the samba
server
 is seup as a domain member server to a NT4 PDC, i'm using winbind for
 accounts)
 why wouldn't the script work ?
 it's to simple for it not to

I read several reports of failure about that. Haven't tried it myself,
but I remember an answer was that pam_mkhomedir was meant to do
precisely that.

David

-- 
***
[EMAIL PROTECTED]
OpenPGP public key: http://www.amakuru.net/dmorel.asc
28192ef126bc871757cb7d97f4a44536


- Original Message - 
From: David Morel [EMAIL PROTECTED]
To: ipguy [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Sunday, June 29, 2003 12:32 AM
Subject: [spam] Re: [Samba] exec scripts question



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] exec scripts question

2003-06-28 Thread ipguy
i'm having problems with preexec scripts... see example below

[homes]
preexec = mkdir /samba/users/%U

do exec scripts only work in a Samba PDC setup or are we able to use exec
scripts in any setup ?
if you look at the preexec script above, all i'm trying to do is make a dir
for the connecting user (i don't need to make an account as the samba server
is seup as a domain member server to a NT4 PDC, i'm using winbind for
accounts)
why wouldn't the script work ?
it's to simple for it not to


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] the last word on antivirus ?

2003-06-19 Thread ipguy
i've been looking around for antivirus tools for samba.
most seem to use the VFS system built into 2.2.x/3.0
only problem with that is 2.2.x does not support stackable modules, so if your using 
recycle, you can use anything else...
yes I know 3 allows stackable modules, but how long before 3 is really stable ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] --with-quotas ??

2003-06-17 Thread ipguy
ok, so how are they used ?




- Original Message -
From: Ryan Novosielski [EMAIL PROTECTED]
To: Samba Mailing List [EMAIL PROTECTED]
Sent: Tuesday, June 17, 2003 1:53 AM
Subject: Re: [Samba] --with-quotas ??


 You don't do anything -- in fact, quotas are always enforced (with or
 without with-quota) because the FS keeps track. The quota support,
 however, provides windows clients with the quota info so it isn't a
 surprise when a user has run out of quota and the machine gives the proper
 status info.

  _  _ _  _ ___  _  _  _
 |Y#| |  | |\/| |  \ |\ |  |  | Ryan Novosielski - Jr. UNIX Systems Admin
 |$| |__| |  | |__/ | \| _|  | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
 \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630

 On Tue, 17 Jun 2003, d.kavadas wrote:

  ok, stupid question time
  how does one use quotas and samba, i haven't seen anything mentioned in
any man page re quote support.
 
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] NT logon scripts error 59 ?

2003-06-16 Thread ipguy
Is anyone having any problems mapping samba shares in a mixed NT/Samba domain ?
I've setup samba as a domain member server using winbind, everything work perfectly 
except...
If i edit my NT logon script and add a net use j: \\samba\drive entry in the script, 
only 90% of the users will map the samba drive, my workstation included, it's a mix, 
98/2000 and XP workstation seem to have this problem.
When the script is run, in my case, I can see a DOS error 59 (network error) after 
the script is executed, I can map the samba drive but only manually
Anyone have any idea ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT logon scripts error 59 ?

2003-06-16 Thread ipguy
no, it isn't the problem at all
the scripts are fine, the problem is that I was only using the PDC as a
single source to authenticate the user credentials.
Now that i'm using the BDC, the problem has be licked... if the PDC is busy,
it asks the BDC
Simple really...



- Original Message -
From: Cleiton L. Siqueira [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, June 16, 2003 7:18 PM
Subject: Re: [Samba] NT logon scripts error 59 ?


 Hi,

 This problem is happening due to your logon scripts are imcompatible with
 windows.
 You should create your logon scripts in windows and put them in Unix's
home
 directory. Use Notepad to do it.

 []'s


 - Mensagem Original 
 De: ipguy [EMAIL PROTECTED]
 Para: [EMAIL PROTECTED] [EMAIL PROTECTED]
 Assunto: [Samba] NT logon scripts error 59 ?
 Data: 16/06/03 12:06


 Is anyone having any problems mapping samba shares in a mixed NT/Samba
 domain ?
 I've setup samba as a domain member server using winbind, everything work
 perfectly except...
 If i edit my NT logon script and add a net use j: \sambadrive entry in
the
 script, only 90% of the users will map the samba drive, my workstation
 included, it's a mix, 98/2000 and XP workstation seem to have this
problem.
 When the script is run, in my case, I can see a DOS error 59 (network
 error) after the script is executed, I can map the samba drive but only
 manually
 Anyone have any idea ?
 --
 To unsubscribe from this list go to the following URL and read the
 instructions: http://lists.samba.org/mailman/listinfo/samba

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] subshares ?

2003-06-05 Thread ipguy
I can, i now see my error.
I was using force group = PDC+groupname
silly error really, all sorted... thanks



- Original Message - 
From: John H Terpstra [EMAIL PROTECTED]
To: ipguy [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Thursday, June 05, 2003 12:10 AM
Subject: Re: [Samba] subshares ?


 On Wed, 4 Jun 2003, ipguy wrote:

  so my only option is NT ACL support then...

 Why do you believe that you need ACLs per se to achieve your goals?

 Why can you not achieve the same thing with Unix directory and file
 permissions?

 - John T.

 
 
 
 
 
   On Tue, 3 Jun 2003, ipguy wrote:
  
hi all...
i have what seems a simple question regarding subshares, for lack of
a
  better term...
say i have a share with specific user/group permissions and a
directory
  inside the share that i would like to add different user/group
  permissions...
this is an example of my smb.conf file to illustrate
   
[driveA]
path = /samba/driveA
browseable = Yes
writeable = Yes
valid users = PDC+groupA
force group = PDC+groupA
   
[driveB]
path = /samba/driveA/driveB
browseable = No
writeable = Yes
valid users = PDC+groupB
force group = PDC+groupB
inherit permissions = No
   
shouldn't this restrict groupA users from accessing the subshare
called
driveB located inside the share /samba/driveA ??
  
   driveB is a directory in /samba/driveA from the perspective of the
driveA
   share. IT is NOT a sub-share, there is no such thing in the SMB/CIFS
   protocol specification.
  
   That means that users of the share called driveA will be able to
access
   the contents of the directory driveB as permitted by the permissions
on
   the driveBdirectory.
  
   - John T.
   --
   John H Terpstra
   Email: [EMAIL PROTECTED]
 

 -- 
 John H Terpstra
 Email: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] mcafee antivirus ?

2003-06-05 Thread ipguy
obviously, i'm not worried about linux virii, i'm worried about win32 boxen
uploading files with a virus payload that can infect other win32 boxen




- Original Message - 
From: Ow Mun Heng [EMAIL PROTECTED]
To: Nathaniel N. Petersen (CNS Student Support)
[EMAIL PROTECTED]; samba [EMAIL PROTECTED]
Sent: Thursday, June 05, 2003 12:11 PM
Subject: RE: [Samba] mcafee antivirus ?


 Is there really a need for Antivirus measures? There's VERY few viruses on
 Linux. What about running it on the user's box?

 Cheers,
 Mun Heng, Ow
 H/M Engineering
 Western Digital M'sia
 DID : 03-7870 5168


 -Original Message-
 From: Nathaniel N. Petersen (CNS Student Support)
 [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 04, 2003 8:50 PM
 To: samba
 Subject: Re: [Samba] mcafee antivirus ?


 Well, I hate to admit it, but I use Norton AntiVirus.  I have played
 long and hard at getting the corporate edition running on a Samba
 domain.  Unfortunately, no amounts of tweaking with Wine was able to get
 it to work properly.  I've had to run a vmware session with the Norton
 AV installed on a w2k vm.  As for day-to-day linux virus protection, I
 use host.all ;).

 On Wed, Jun 04, 2003 at 10:00:49PM +1000, ipguy wrote:
  nobody is using mcafee for antivirus ?
  what do you guys use ?
 
 
 
 
   hi all...
   anyone using mcafee antivirus with there samba server ?
   just wanted your comments, suggestions
   how did you intergrate it into samba ?
   -- 
   To unsubscribe from this list go to the following URL and read the
   instructions:  http://lists.samba.org/mailman/listinfo/samba
  -- 
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba

 -- 
 Nathaniel N. Petersen
 CNS Computing
 University of Northern Iowa
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] subshares ?

2003-06-05 Thread ipguy
no, my samba is not a PDC, it's a domain member server to an NT4 PDC
i had already tried exactly what you have suggested and it doesn't work
no matter what happens, i can access the groupB dir



- Original Message - 
From: Marian Mlcoch, Ing [EMAIL PROTECTED]
To: ipguy [EMAIL PROTECTED]
Sent: Wednesday, June 04, 2003 10:48 PM
Subject: Re: [Samba] subshares ?


 When you write in examples i example this:
 If yor PDC is samba with shares you needed then simply set this

  rwxrwx--- root groupA driveA
 and all files and subdirs with this in driveA
 except driveB

  rwxrwx--- root groupB driveB
 and all files and subdirs with this in driveB

 this can change on existing by chmod 770 -R and chown,chgrp simply.
 For creating new files with this you must set proper smb.conf mask
 directives


 [driveA]
 path = /samba/driveA
 browseable = Yes
 writeable = Yes
 valid users = @groupA
 force group = groupA

 [driveB]
 path = /samba/driveA/driveB
 browseable = No
 writeable = Yes
 valid users = @groupB
 force group = groupB

 directory mask = 0770  or inherit
 permissions = yes
 create mask = 0770

 Thats all folks!


 - Original Message -
 From: ipguy [EMAIL PROTECTED]
 To: Marian Mlcoch, Ing [EMAIL PROTECTED]
 Sent: Wednesday, June 04, 2003 1:46 PM
 Subject: Re: [Samba] subshares ?


 
 
   Plus i dont understand
   valid users = PDC+groupAthis is one user name?
   force group = PDC+groupA
 
  PDC+groupA is a group on the domain (NT4) i chose to call PDC, as an
  example
  so, valid users = PDC+groupA means anyone in this domain group can
 access
  the share
  and , force group = PDC+groupA means, i want to force all files/dir
  created in this share to belong to the same group, PDC+groupA
 
   what is PDC+groupA ?
 
  see above
 
  I'm talking winbind here...
 
 
 
 
 
 
   Bye.
  
   - Original Message -
   From: ipguy [EMAIL PROTECTED]
   To: Marian Mlcoch, Ing [EMAIL PROTECTED]
   Cc: [EMAIL PROTECTED]
   Sent: Wednesday, June 04, 2003 11:38 AM
   Subject: Re: [Samba] subshares ?
  
  
i understand.
please read my original question
   
   
   
- Original Message -
From: Marian Mlcoch, Ing [EMAIL PROTECTED]
To: ipguy [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Wednesday, June 04, 2003 6:56 PM
Subject: Re: [Samba] subshares ?
   
   
 No you not understand priority of permisions on NT and samba is
this
 identical but samba without ACL is simples.

 Highest priority to acces any file is file permision and owner on
  linux
 filesystem respect by samba.
 Secondary is directory permision and ownership with parent respect
 structure.
 And last is share definition that set only permision implicit for
   network.

 if share is read only then all under this share is read only used
 over
this
 share but another share can be write to this or its subdirs.
 else if share is writable then only user with suficient name and
 group
   to
 !!share directory!! permision can write to directory structure as
is
rename
 delete or create files and subdirs. And only users and groups that
  have
suff
 permision to exist files can read, execute or change it. This all
is
 controlled by filesystem not over samba conf (if you install
  filesystem
with
 acl then you can set more perms on one file as clasic
  user-group-other).

 Samba conf only control settings perm of new files and dirs
created
  over
 net.

 Bye.

 - Original Message -
 From: ipguy [EMAIL PROTECTED]
 To: John H Terpstra [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Sent: Wednesday, June 04, 2003 10:33 AM
 Subject: Re: [Samba] subshares ?


  so my only option is NT ACL support then...
 
 
 
 
 
   On Tue, 3 Jun 2003, ipguy wrote:
  
hi all...
i have what seems a simple question regarding subshares, for
  lack
   of
a
  better term...
say i have a share with specific user/group permissions and
a
 directory
  inside the share that i would like to add different user/group
  permissions...
this is an example of my smb.conf file to illustrate
   
[driveA]
path = /samba/driveA
browseable = Yes
writeable = Yes
valid users = PDC+groupA
force group = PDC+groupA
   
[driveB]
path = /samba/driveA/driveB
browseable = No
writeable = Yes
valid users = PDC+groupB
force group = PDC+groupB
inherit permissions = No
   
shouldn't this restrict groupA users from accessing the
 subshare
 called
driveB located inside the share /samba/driveA ??
  
   driveB is a directory in /samba/driveA from the perspective of
 the
 driveA
   share. IT is NOT a sub-share

[Samba] subshares ?

2003-06-04 Thread ipguy
hi all...
i have what seems a simple question regarding subshares, for lack of a better term...
say i have a share with specific user/group permissions and a directory inside the 
share that i would like to add different user/group permissions...
this is an example of my smb.conf file to illustrate

[driveA]
path = /samba/driveA
browseable = Yes
writeable = Yes
valid users = PDC+groupA
force group = PDC+groupA

[driveB]
path = /samba/driveA/driveB
browseable = No
writeable = Yes
valid users = PDC+groupB
force group = PDC+groupB
inherit permissions = No

shouldn't this restrict groupA users from accessing the subshare called driveB 
located inside the share /samba/driveA ??

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] mcafee antivirus ?

2003-06-04 Thread ipguy
hi all...
anyone using mcafee antivirus with there samba server ?
just wanted your comments, suggestions
how did you intergrate it into samba ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] subshares ?

2003-06-04 Thread ipguy
so my only option is NT ACL support then...





 On Tue, 3 Jun 2003, ipguy wrote:

  hi all...
  i have what seems a simple question regarding subshares, for lack of a
better term...
  say i have a share with specific user/group permissions and a directory
inside the share that i would like to add different user/group
permissions...
  this is an example of my smb.conf file to illustrate
 
  [driveA]
  path = /samba/driveA
  browseable = Yes
  writeable = Yes
  valid users = PDC+groupA
  force group = PDC+groupA
 
  [driveB]
  path = /samba/driveA/driveB
  browseable = No
  writeable = Yes
  valid users = PDC+groupB
  force group = PDC+groupB
  inherit permissions = No
 
  shouldn't this restrict groupA users from accessing the subshare called
  driveB located inside the share /samba/driveA ??

 driveB is a directory in /samba/driveA from the perspective of the driveA
 share. IT is NOT a sub-share, there is no such thing in the SMB/CIFS
 protocol specification.

 That means that users of the share called driveA will be able to access
 the contents of the directory driveB as permitted by the permissions on
 the driveBdirectory.

 - John T.
 -- 
 John H Terpstra
 Email: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] mcafee antivirus ?

2003-06-04 Thread ipguy
nobody is using mcafee for antivirus ?
what do you guys use ?




 hi all...
 anyone using mcafee antivirus with there samba server ?
 just wanted your comments, suggestions
 how did you intergrate it into samba ?
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] secret.tdb is bad (fixed)

2003-05-30 Thread ipguy
if anyone is having problems with a bad secret.tdb file this is what i did to fix the 
it
--
start smbd, nmdb, join PDC, start winbind, restart smbd/nmdb/winbind
--
i think a restart of the daemons is needed, it worked for me after pull my hair out 
for days...
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba as a domain member server using winbind

2003-05-28 Thread ipguy
hi all

i seem to be having a problem replicating an installation of samba as a domain member 
server to our NT4 PDC

when i initally installed samba i was able to use the DC's as the authentication 
source to allow the windows workstation access to the samba share via winbind, it all 
worked well, as documented, i didn't even need to setup user accounts on the samba box.

now that i'm building the production server, i can't seem to replicate the success, no 
matter what i try the samber server keeps returning a username and password dialog box 
to the windows users and logs the below error for the users trying to connect

I successfully joined the domain by  smbpasswd -j PDC -r PDCNAME -U Administrator
(Note: I needed to add the samber server to the domain on the PDC first before I could 
join on the samba server)

[2003/05/28 19:46:32, 0] smbd/password.c:domain_client_validate(1558)
  domain_client_validate: could not fetch trust account password for domain PDC
[2003/05/28 19:46:32, 1] smbd/password.c:pass_check_smb(545)
  Couldn't find user 'PDC\ipguy' in passdb.
[2003/05/28 19:46:32, 2] smbd/reply.c:reply_sesssetup_and_X(997)
  NT Password did not match for user 'PDC\ipguy'!
[2003/05/28 19:46:32, 2] smbd/reply.c:reply_sesssetup_and_X(1007)
  Defaulting to Lanman password for PDC\ipguy
[2003/05/28 19:46:32, 1] smbd/password.c:pass_check_smb(545)
  Couldn't find user 'PDC\ipguy' in passdb.
[2003/05/28 19:46:32, 1] smbd/reply.c:reply_sesssetup_and_X(1023)
  Rejecting user 'PDC\ipguy': authentication failed
[2003/05/28 19:46:32, 2] smbd/server.c:exit_server(511)
  Closing connections

my smb.conf
--
[global]
netbios name = SAMBA
workgroup = PDC
log level = 2
log file = /usr/local/samba/var/samba.log.%U
security = domain
hosts allow = 192.xx.xxx. 127.
password server = *
encrypt passwords = yes
wins server = 192.xx.xx.xx
winbind cache time = 15
winbind uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes

[data]
path = /array/samba
browseable = yes
writeable = yes

the correct libnss_winbind links in /lib
-
  -rwxr-xr-x1 root root  17K May 28 17:59 libnss_winbind.so
lrwxrwxrwx1 root root   17 May 28 19:32 libnss_winbind.so.1 - 
libnss_winbind.so
lrwxrwxrwx1 root root   17 May 28 18:02 libnss_winbind.so.2 - 
libnss_winbind.so

/etc/nssswitch.conf

passwd: files winbind
shadow: files
group:  files winbind

only problem is, i don't recall if i needed to setup PAM, if I do can anyone point me 
in the right direction, do I need to edit /etc/pam.d/login so the windows users can 
authenticate and access the share ?

any suggestion would be appreciated.

-ipguy



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba