Re: [Samba] bash change from r...@myserver to administra...@myserver

2009-07-09 Thread supha...@gmx.com
Thank you for the clarification .
Does it help if I add ROOT in a group of invalid user ?

[global]

..
...
 invalid users = root bin daemon adm sync shutdown \
 halt mail news uucp operator gopher \
 mailnull rpm ntp


Thank you and Best Regards,
Tom
Norberto Bensa wrote:
 On Thu, Jul 9, 2009 at 1:28 AM, supha...@gmx.comsupha...@gmx.com wrote:
   
 Hello Norberto,

 Why it change back and forth automatically between root and Administrator ?
 

 sometimes nss reads from /etc/password and sometimes from ldap. I
 don't know why.

   
 Will it lead to any problem in the future?
 

 Maybe.

 If you do:

 id root
 id Administrator

 you'll get back uid=0

 So who is uid=0, root or administrator? You know they are the same
 entity, but machines are too stupid.

 Regards,
 Norberto

   

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Simple group question...‏

2009-07-09 Thread supha...@gmx.com
Hi,
This works for me ,you can try.

After join computer to domain  then log on to Windows Xp with local
administrator account and go to control panel - addusers (select
account from your domain) - Grant access level to your domain account
as Administrator.

Or you can use net command to do this.

Open a cmd shell, then execute:

C:\ net localgroup administrators /add MYDOMAIN\tom

Regards,
Tom

samba-bounces+hypermonk=hotmail@lists.samba.org on behalf of steve
wrote:
 New to this windows domain stuff, sorry ( at my age learning new stuff
 can take a while ). 
  
 I've set up a domain and joined a couple of XP workstations to is and
 all is fine. What I want to do now is to ensure that the users of these   
  
 PCs still have administrative rights on their PC's. 
  
 Can anyone show me the basics / point me to a good guide on how to do
 this???
  
 TIA,
  
 Steve
  
 -- 
 Steve Holdoway st...@greengecko.co.nz
 http://www.greengecko.co.nz http://www.greengecko.co.nz/
 MSN: st...@greengecko.co.nz
 GPG Fingerprint = B337 828D 03E1 4F11 CB90  853C C8AB AF04 EF68 52E0
   

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] bash change from r...@myserver to administra...@myserver

2009-07-08 Thread supha...@gmx.com
Hi Guys,

I have posted this subject long time ago  but this problem still
persistently happens on my linux+pdc server.

Here is my server detail , CentOs5.1 + Samba-3.0.25b + Fedora Directory
Server

So far every is running fine. It is just one thing I don't understand
what I have done wrong.

Normally if you open teminal window it should be like  [r...@myserver
/] but sometime when I sat in front the server  and  open a terminal
then it  showed [administra...@myserver /]#  . And after I rebooted
the server ,it changed back to [r...@myserver /] I could not
reconstruct the problem whether when it will happen again.

Please find below my nsswitch.conf and system-auth file

#
# /etc/nsswitch.conf
#
# An example Name Service Switch config file. This file should be
# sorted with the most-used services at the beginning.
#
# The entry '[NOTFOUND=return]' means that the search for an
# entry should stop if the search in the previous entry turned
# up nothing. Note that if the search failed due to some other reason
# (like no NIS server responding) then the search continues with the
# next entry.
#
# Legal entries are:
#
#   nisplus or nis+ Use NIS+ (NIS version 3)
#   nis or yp   Use NIS (NIS version 2), also called YP
#   dns Use DNS (Domain Name Service)
#   files   Use the local files
#   db  Use the local database (.db) files
#   compat  Use NIS on compat mode
#   hesiod  Use Hesiod for user lookups
#   [NOTFOUND=return]   Stop searching if not found so far
#

# To use db, put the db in front of files for entries you want to be
# looked up first in the databases
#
# Example:
#passwd:db files nisplus nis
#shadow:db files nisplus nis
#group: db files nisplus nis

passwd: files ldap
shadow: files ldap
group:  files ldap

#hosts: db files nisplus nis dns
hosts:  files dns

# Example - obey only what nisplus tells us...
#services:   nisplus [NOTFOUND=return] files
#networks:   nisplus [NOTFOUND=return] files
#protocols:  nisplus [NOTFOUND=return] files
#rpc:nisplus [NOTFOUND=return] files
#ethers: nisplus [NOTFOUND=return] files
#netmasks:   nisplus [NOTFOUND=return] files

bootparams: nisplus [NOTFOUND=return] files

ethers: files
netmasks:   files
networks:   files
protocols:  files ldap
rpc:files
services:   files ldap

netgroup:   files ldap

publickey:  nisplus

automount:  files ldap
aliases:files nisplus


==


/etc/pam.d/system-auth

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
authrequired  pam_env.so
authsufficientpam_unix.so nullok try_first_pass
authrequisite pam_succeed_if.so uid = 500 quiet
authsufficientpam_ldap.so use_first_pass
authrequired  pam_deny.so

account required  pam_unix.so broken_shadow
account sufficientpam_succeed_if.so uid  500 quiet
account [default=bad success=ok user_unknown=ignore] pam_ldap.so
account required  pam_permit.so

passwordrequisite pam_cracklib.so retry=3
passwordsufficientpam_unix.so md5 shadow nullok try_first_pass
use_authtok
passwordsufficientpam_ldap.so use_authtok
passwordrequired  pam_deny.so

session optional  pam_keyinit.so revoke
session required  pam_limits.so
session [success=1 default=ignore] pam_succeed_if.so service in
crond quiet use_uid
session required  pam_unix.so
session optional  pam_ldap.so


Thank you ,

Tom


 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] shell changed from root@ to administrator@

2009-02-23 Thread supha...@gmx.com
Thank you Michael, I want to replace my Windows fileserver with Linux
and I also use it as authentication server for domain users (Windows)

Best Regards,
Tom

here is my  /etc/nsswitch.conf file:::

#hosts: db files nisplus nis dns
hosts:  files dns

# Example - obey only what nisplus tells us...
#services:   nisplus [NOTFOUND=return] files
#networks:   nisplus [NOTFOUND=return] files
#protocols:  nisplus [NOTFOUND=return] files
#rpc:nisplus [NOTFOUND=return] files
#ethers: nisplus [NOTFOUND=return] files
#netmasks:   nisplus [NOTFOUND=return] files

bootparams: nisplus [NOTFOUND=return] files

ethers: files
netmasks:   files
networks:   files
protocols:  files ldap
rpc:files
services:   files ldap

netgroup:   files ldap

publickey:  nisplus

automount:  files ldap
aliases:files nisplus




Michael Heydon wrote:

 Can any one help me why my server always automatically changed from
 [r...@abc] to [administra...@abc]?
 I found out that when I repeat this command ,it will change back to
 [r...@abc]

 [administra...@abc] authconfig-tui
   
 If it is anything like my system, root is a local user (defined in
 /etc/passwd) while administrator is defined in ldap with the same UID.
 It sounds like your system is using LDAP to resolve the username
 before passwd.

 What does your /etc/nsswitch.conf look like?

 I suspect that the Redhat/Centos support people might be more
 knowledgeable about this stuff, as far as I can see your problem has
 nothing to do with samba.

 *Michael Heydon - IT Administrator *
 micha...@jaswin.com.au mailto:micha...@jaswin.com.au


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba