[Samba] I still don't understand it-- what is the relation between cause and effect?

2008-03-09 Thread joop gerritse
I have posted more messages, essentially to the same effect... had quite a few 
good answers, but somehow I seem to be missing something ... :-(

Well, I told you already about the workgroup DAARO, which refused to show 
up... I got some suggestions, and, indeed, there it was! I could even log in 
to it.

And then, next morning, I started up my test network, ... no DAARO. However, 
after a restart of samba (/etc/rc.d/rc.samba restart) it appeared again. 
Without any changes in teh config. However, although I saw DAARO, clicking on 
it gave me an error message (something like device does not exist in 
Dutch). On the other hand, after restarting samba again, still without any 
changes, I could suddenly log in to the domain.

Well, this is not the clear relation between cause and effect which I prefer. 
Of course it is unavoidable once you get involved in a Microsoft mess... .

I think it is time to become somewhat more fundamental(ist). I mean, if I ever 
want to find out what's going on, I will probably have to understand what 
these lousy sloppy Microsoft protocols really do. And of course, being closed 
source, this won't be trivial.

Can anyone point out some documents that give information on the internals of 
MS networking protocols? I think there are some around, but I haven't located 
them yet...

-- 
J.J. Gerritse
Mühlenstraße 11
D-47546 Kalkar-Wissel
Duitsland
+49-2824-971487
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] I changed smb.conf, but nothing seems to happen!

2008-03-07 Thread joop gerritse
Hello, *

After some good advice from the list, I now have my workgroup visible. Next 
problem.

I click on it from my win98 station (yes, it is old; I even have a w95 
workstation somewhere :-) ) and I get can't find share name.

Now I look in the samba logs, and I see that it is looking 
for /usr/local/samba/netlogon, which doesn't exist. Oops, error!

The netlogon happens to be in /etc/samba/netlogon, so I change the path in 
smb.conf and restart Samba.

I try again, but now my Win98 station keeps trying to 
access /usr/local/samba/netlogon. How come?

I suppose that the easiest way out is to put a link to the right location 
in /usr/local, but somehow that doesn't feel right.


-- 
J.J. Gerritse
Mühlenstraße 11
D-47546 Kalkar-Wissel
Duitsland
+49-2824-971487
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: I changed smb.conf, but nothing seems to happen!

2008-03-07 Thread joop gerritse
I found it already-- there was a second ocurrence of /usr/loca/... under 
[netlogon]. Now why are there two occurrences?

-- 
J.J. Gerritse
Mühlenstraße 11
D-47546 Kalkar-Wissel
Duitsland
+49-2824-971487
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: workgroup remains invisible!

2008-03-03 Thread joop gerritse
On Monday 03 March 2008 13:01:47 [EMAIL PROTECTED] wrote:
 On 3/2/2008, joop gerritse ([EMAIL PROTECTED]) wrote:
  security = share

 This is incorrect for a domain/PDC, should be:

 security = user


I changed it, however, no effect seen yet...

 When asking questions, it is usually necessary to mention what
 OS/Distribution you are using, what version of Samba, how it was
 installed, etc...

I am running Slackware 12.0, Samba 3.0.28.

And testparm gives no error messages...

-- 
J.J. Gerritse
Mühlenstraße 11
D-47546 Kalkar-Wissel
Duitsland
+49-2824-971487
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] workgroup remains invisible!

2008-03-02 Thread joop gerritse
Hello, *

I am trying to install a PDC. It is completely reachable, all shares can be 
accessed, but somehow the workgroup DAARO never shows up in the Network 
Neighborhood of the Windows machines on my network. I have experimented with 
preferred, domain, and localmaster settings, to no avail. What am I missing?

Here is my smb.conf:

# Samba config file created using SWAT
# from 127.0.0.1 (127.0.0.1)
# Date: 2008/03/01 17:23:36

[global]
workgroup = DAARO
server string = Samba Server N2k6
log file = /var/log/samba-log.%m
max log size = 50
acl compatibility = winnt
server signing = Auto
printcap name = cups
logon script = %m.bat
logon path = /usr/local/samba/netlogon
domain logons = yes
preferred master = yes
domain master = yes
dns proxy = no
ldap ssl = No
remote announce = 192.168.087.255/IKKE
hosts allow = 192.168.87., 127.
printing = cups
print command = 
lpq command = %p
lprm command = 
default case = upper
security = share
restrict anonymous = no
max protocol = NT

[homes]
comment = Home Directories
path = /home/%u
read only = No

[netlogon]
comment = Network Logon Service
path = /usr/local/samba/netlogon
guest ok = Yes
share modes = No

[printers]
comment = All Printers
path = /var/spool/samba/
create mask = 0700
guest ok = Yes
printable = Yes
browseable = No

[tmp]
comment = Temporary file space
path = /tmp
read only = No
guest ok = Yes

[Penti-E]
comment = Former Penti E Drive
path = /mnt/hd/dose
read only = No
guest ok = Yes

[CD-ROM]
comment = DVD
path = /mnt/cdrom
guest ok = Yes


-- 
J.J. Gerritse
Mühlenstraße 11
D-47546 Kalkar-Wissel
Duitsland
+49-2824-971487
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Does anyone know why sometimes a PDC appears in the Network neigborhood, and sometimes it doesn't?

2007-12-06 Thread joop gerritse
On Thursday 06 December 2007 00:42:43, Aaron J. Zirbes wrote:
 This is a Computer Browser issue.

 If your samba server is always on, make sure the Computer Browser service
 is turned off on all other machines.  That should solve your problem...

well, I do not know if there _are_ any services on Win98 and Win95 machines 
(and I run a lot of these in a volunteer job). However, I just found that the 
problem has simply vanished. Thanks for your advice, anyway.

Still, this somehow does not feel right... Do cause and effect play any role 
in MS systems?

-- 
J.J. Gerritse
Mühlenstraße 11
D-47546 Kalkar-Wissel
Duitsland
+49-2824-971487
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Does anyone know why sometimes a PDC appears in the Network neigborhood, and sometimes it doesn't?

2007-12-05 Thread joop gerritse
The subject says it all, I think. At home I have a PDC (Linux with Samba), and 
I have Win98 and Win 95(!) clients. And sometimes the domain name (workgroup 
name) is visble in the Network neigborhood, and sometimes it is not. I also 
got the impression that placing a link in the file NETHOOD makes a 
difference, but I am not sure yet. The PDC is visible, that is, it can be 
PINGed, I can connect to the shares, I can even login to it, but nothing 
shows up in the Network Neighborhood, and if I click on the Whole network 
icon, I get an empty network displayed.

-- 
J.J. Gerritse
Mühlenstraße 11
D-47546 Kalkar-Wissel
Duitsland
+49-2824-971487
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] net use h: /home syntax?

2007-11-17 Thread joop gerritse
I am setting up a Win98 client to work with my samba server. I can log in on 
the domain allright, but then I would expect to get access to my home 
directory by issuing (in a DOS box):

NET USE H: /HOME

For some reason I am told that the syntax is not correct. On the other hand 
net use /? gives exactly this as one of the options. Does anyone know what is 
wrong with it?

-- 
J.J. Gerritse
Mühlenstraße 11
D-47546 Kalkar-Wissel
Duitsland
+49-2824-971487
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: samba Digest, Vol 56, Issue 15

2007-08-15 Thread joop gerritse
On Tuesday 14 August 2007 14:03:05 John Drescher wrote:
  I
  commented out the remote announce line, so I guess that is not part of
  the mechanism.

 This is only for networks with more than one subnet.

Nevertheless, today I found out that it is also needed on a single LAN with 
several workgroups.

I have two servers, both domain controllers:
Server1 has workgroup name = LIEMERS-MUSEUM
Server2 has workgroup name = LIEMERS2MUSEUM

Without the remote announce, I could see both workgroups in Network 
Neighborhood = Complete network, but I only saw server 1 in Network 
neighborhood itself.

Only after uncommenting the line
remote announce = 10.0.0.3/LIEMERS-MUSEUM
(where 10.0.0.3 is the address of Server1) I could see Server2 in the network 
neighborhood.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] OK. there I am again!

2007-08-10 Thread joop gerritse
Well, I read quite a few documents; thanks for pointing them out... And I 
got it working... 

The most important point I learned is P_a_t_i_e_n_c_e! You really have to wait 
a few minutes after having modified your smb.conf and restarted samba. And 
you have plenty of time to reboot your client, I am not sure whether you 
really need this, but anyway... it really takes quite some minutes before 
even the most limited changes have trickled through a (not really big) 
network.

In general, I started removing lines from the inherited smb.conf, all lines 
of which I did not understand the purpose, and then restarting samba and the 
client, and see what happened.

I still have some questions, though...

First of all: what is a domain name in Samba? I only saw a workgroup name as 
the parameter. Just to try, I changed it into something completely different, 
and after some time I saw it appear as a workgroup. But then I could also 
enter it as a domain name (on W98 stations, anyway), and I could really log 
in to it.
Even though I now have a PDC on the domain LIEMERS-MUSEUM, and a BDC (without 
a PDC) on the domain LIEMERS2MUSEUM, it seems to work. So my conjecture for 
the moment is that the domain name equals the workgroup name. Right?

Second: in my inherited smb.conf, I have a share [users]. I do not know what 
it is for, but if I comment it out, the workgroup LIEMERS2MUSEUM vanishes 
from the Workgroups in the network Environment. So I guess it serves some 
purpose but which one?

Third: I read quite a lot about how to set up various servers, but not too 
many details on exactly what the SMB protocols do. I read something about 
elections, and I think that part is fairly clear to me, but I am quite 
curious about what several parties in the game are really doing. For 
instance, when a server comes up, how does the rest of the world know? I 
commented out the remote announce line, so I guess that is not part of the 
mechanism. Anyway, if the server is initially the only node in the network, 
this will not be significant anyway. If a client comes up, what happens? Does 
it broadcast its presence throughout the network? Do all servers respond? I 
also read something about browser nodes, but how are they established? How do 
they announce their presence?
In general: is there any detail documentation on MS SMB protocols, not just 
the message format but rather the exact mechanisms? They may be described 
somewhere, but I haven't discovered them yet...

I have more questions, but these are the most pressing ones at the moment. 
Thanks a lot in advance for any clues.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smb.conf, in addition to my questions of yesterday

2007-08-04 Thread joop gerritse
Hello, *

Here is my current smb.conf . I didn't want to send it immediately (in some 
groups that is not done) and I have omitted some dozens of shares at the end, 
which are similar to the ones present.
[global]
workgroup = LIEMERS-MUSEUM
netbios name = HPserver
server string = HP server (Samba %v)
#   printing = cups
#   printcap name = cups
#   printcap cache time = 750
#   cups options = raw
username map = /etc/samba/smbusers
#   map to guest = Bad User
#   include = /etc/samba/dhcp.conf
logon path = \\%L\profiles\.msprofile
logon home = \\%L\%U\.9xprofile
logon drive = P:
security = user
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = 
*Enter\sUNIX\spassword:*%n\n*Retype\snew\sUNIX\spassword:%n\n.
add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody 
-s /bin/false %m$
domain logons = yes
domain master =  no
#   remote announce = 10.0.0.3/LIEMERS-MUSEUM
browsable = yes
#   ldap idmap suffix = ou=Idmap
#   ldap machine suffix = ou=Computers
local master = yes
preferred master = no 
os level = 69
#   ldap suffix = dc=example,dc=com
passdb backend = smbpasswd
wins support = no
wins server = 

[homes]
comment = Home Directories
valid users = %S
browseable = no
read only = no
inherit acls = yes

[profiles]
comment = Network Profiles Service
path = %H
read only = no
store dos attributes = yes
create mask = 0600
directory mask = 0700

[users]
comment = All users
path = /home
read only = no
inherit acls = yes
veto files = /aquota.user/groups/shares/

[groups]
comment = All groups
path = /home/groups
read only = no
inherit acls = yes

[pdf]
comment = PDF creator
path = /var/tmp
printable = yes
#   print command = /usr/bin/smbprngenpdf -J '%J' -c %c -s %s -u '%u' -z %z
create mask = 0600

[printers]
comment = All Printers
path = /var/tmp
printable = yes
create mask = 0600
browseable = no

#[print$]
#   comment = Printer Drivers
#   path = /var/lib/samba/drivers
#   write list = @ntadmin root
#   force group = ntadmin
#   create mask = 0664
#   directory mask = 0775

[fotos]
comment = Foto-bestanden
path = /museum/data-fotocollectie
writeable = yes
create mask = 0664
directory mask = 0775

[backup]
comment = Backupschijf
path = /usr/backup
writeable = yes
create mask = 0664
directory mask = 0775

[adlib]
comment = Adlib bestanden
path = /usr/museum/adlib
writeable = yes
create mask = 0664
directory mask = 0775
[omitting the remaining shares for brevity]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smb.conf, in addition to my questions of yesterday

2007-08-04 Thread joop gerritse
On Saturday 04 August 2007 11:27:27 John Drescher wrote:
[...]
 You are not using AD, LDAP or winbindd but you are using the tdbsam with
 mapped users security method. You are not using a wins server and the samba
 server will not be the master browser (this may be a problem).

Right. I think I will use LDAP later, but, if I understand the documents I've 
seen so far, it is only needed if you want to keep the user databases in step 
between PDC and BDC.
I was not aware that I was using the tdbsam, but I have just seen a completely 
new source of documentation, so I will read that first; at least I now know 
that it exists...
I am not planning to use a wins server, unless I really need it, and I am 
still pondering over your last remark: I have 
domain master =  no
local master = yes
preferred master = no
(I have tried quite a few other settings, though...), but at least it should 
be the local master, and in the absence of the PDC, wouldn't it become the 
master by default?


 I see you have a lot of shares configured and the detail in the
 smb.confsays that you have thought this one through.

 Do the users in the /etc/samba/smbusers that you have used to connect to
 from windows have their unix accounts created and is the password the same
 as the mapped user has in windows?

yes. In fact, I copied over the whole /etc/passwd, /etc/shadow, smbusers, and 
all home directories. So effectively they should have identical accounts on 
both machines (and don't tell me that this will soon become unmanageable-- I 
know. I want to get it to work first, then I have time to get that 
right ;-) )


 Do you have a windows domain controller? Is it using active directory? I
 assume it is the master browser for the network? Are the nmbd  and smbd
 daemons running on the samba server?

yes. In fact, I copied everything over from that machine. It is not using AD. 
It runs smbd and nmbd. Currently, everyone logs in on that machine, and I 
want to make sure that I can take its functions over on the second machine 
before I can take it out of service for a good overhaul (which it needs quite 
badly).

But, anyway, I have just seen a complete new source of information. I think my 
original plan was too simple-minded (never think Microsoft will miss an 
occasion to create a terrible mess :-(  I should have known... ). So I will 
first go through all these HOWTOs before coming back to the list.

Of course, if you find any errors in my current smb.conf, I will be quite 
happy to correct them...

Thanks anyway for your input so far.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smb.conf, in addition to my questions of yesterday

2007-08-04 Thread joop gerritse
On Saturday 04 August 2007 18:19:13 joop gerritse wrote:
[...]
  Do you have a windows domain controller?
[...]
 yes.

I think I misread that question. No, it's not a Windows machine. It is a Linux 
server, and it runs Samba. And I think it has been set up by someone who just 
used trial and error, just like me, so far...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] inconsistency?

2007-08-03 Thread joop gerritse
I am less than familiar with Microsoft, so I guess it might be an FAQ...

if I click on network neighborhood which reveals a Samba server, it shows a 
list of all shares. If I click on a share, I get a message cannot find share 
name. Somehow this does not sound logical to me... what is wrong?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] my next question: no accesss

2007-08-03 Thread joop gerritse
Even if I can find back a share, (which I sometimes can, for no clear reason) 
then the next message I get is no access. I suspect this may be a Linux 
config thing, but I am still unable to figure what ownership rights I should 
give to the shares: root:root or someuser:users or samba:samba (this 
user:group does not exist as yet). What is meant by no access: is it a 
Windows or a Unix message (well, I suspect that this question is not unusual 
in a mixed environment).
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] maybe I should explain what i am after!

2007-08-03 Thread joop gerritse
I have sent a few messages already, but perhaps I should start from the other 
side, and give a clear indication of what I want to achieve. Well, here 
goes...

I am working for a volunteer organization. They have quite a few Windows 
workstations, most W98, and a few XPs (and, currently, one Vista). There is 
one Linux server, running Samba, and holding all shares. It also acts as the 
PDC, and all users can log in to it.

Now this server begins to be somewhat flaky, and I should like to add a second 
server, initially to act as a BDC, then to take over the operation so I can 
take down the current server and find out what' s wrong with it. Copying the 
data is no problem (it is some 300G, so it took some time), but then?

I started just copying the smb.conf from the primary controller, and setting 
the priority somewhat lower. I assumed that it would just lose the election 
from the PDC, and still stay present, and available.

I am aware of the difficulties of keeping the user directories in sync; this 
would, in due course, require LDAP, but for the moment I decided that the 
user population is quite stable, so I just copy /etc/passwd and /etc/shadow 
and smbpasswd over in the --rare-- event that a user is added or removed.

1. It is quite hard to even make the second controller visible. In fact, I had 
to include a remote announce = Ip address of PDC/workgroup name line 
before it even showed up in Network Environment. And I am quite unsure 
whether this is the right way, it just worked, to some extent.

2. I am not sure whether the backup domain controller will function as such. 
How could I be? If I take down the primary I might find out, but the server 
is too critical for the whole organization to just try. How can I make sure 
that a BDC will work without taking down the PDC?

3. And then there is the irregular behavior which I mentioned before. 
Sometimes the host is visible, but the shares are inaccessible; sometimes I 
can even get a view of the shares, but I cannot access them. In addition, i 
have a far simpler configuration at home, where I can just read and write to 
the shares. So I know it can be done, but what are the rules?

And I am no Windows expert. I know quite a lot about Linux, but the apparent 
(lack of) logic in Windows baffles me.

That is the background. Maybe it helps to get the right answers. thanks in 
advance for any attempts.

BTW I am quite happy with an RTFM answer, as long as it's accompanied with a 
URL. I have read quite a few FMs, but so far without real enlightenment...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] and yet another one

2007-08-03 Thread joop gerritse
And then, all of a sudden, i could access my home directory on the additional 
server, but no other shares! That means, I could click on my home directory, 
and see its contents, but I could not see any other shares.

But note: I was logged in on the primary server, not on this one!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba