[Samba] Re: Access denied when setting permissions
Steven Whaley [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I have a windows 2003 AD domain and a server joined to that domain. Winbind is being used as an idmap. Most everything seems to work fine. My user can connect to the samba share from a windows host without entering credentials, so kerberos and authentication is working properly. But whenever I try to set permissions on the share, with a member of the Domain Admins group, from the Computer Management snap in I always get access denied errors. I have nt acl support turned on for the share. Perhaps this article will shed some light on the issue. It explains how Samba works with Windows ACL's. http://searchenterpriselinux.techtarget.com/tip/0,289483,sid39_gci1080966,00.html -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access Denied when installing drivers using APW - Solved
You can ignore this post. I finally realized that I still had SELINUX enabled. Scott Vintinner wrote: I'm trying to install print drivers onto my samba 3.0.28 server (Fedora Core 8) following the Add Printer Wizard Driver Installation directions here: http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/classicalprinting.html#id388379 Unfortunately, when I try to add the print driver, I receive a Windows Add Printer Driver Wizard : Unable to install Ghostscript PDF, Windows 2000 or XP, Intel driver. Access is Denied error message. Trying to add a printer using the Add Printer wizard results in a similar Add Printer Wizard : Printer driver was not installed. Access is denied. The Samba server is a stand-alone server. I'm connecting to the Samba server from an XP machine, using the net use \\acro1\print$ /user:root command to make sure that I'm connected as root. I've also run smbstatus to ensure that I'm connected as root: [EMAIL PROTECTED] samba]# smbstatus Samba version 3.0.28-0.fc8 PID Username Group Machine --- 2234 root root xp-vinsco(10.1.1.147) Service pid machine Connected at --- print$ 2234 xp-vinsco Thu Jan 3 16:09:40 2008 IPC$ 2234 xp-vinsco Thu Jan 3 16:16:27 2008 Locked files: Pid UidDenyMode Access R/WOplock SharePath Name Time -- 2234 0 DENY_NONE 0x11RDONLY NONE /etc/samba/drivers . Thu Jan 3 16:10:00 2008 The server is not running SELINUX, and the samba install seems to work fine otherwise (meaning I can connect to a test share as root and edit files just fine). Below is my smb.conf. Note that this server is being setup to use Acrophobia (http://acrophobia.sourceforge.net), which is where the ePDF.py scripts are from. I've contacted the author, but Acrophobia is currently only supported on Fedora Core 3. It's also my inexperienced feeling that my problem is a SAMBA problem rather than a problem with one of his scripts. Any help or other ideas for debugging this would be greatly appreciated. Scott #Global Settings = [global] addprinter command = /usr/bin/ePDF.py --addprinter map to guest = Bad User guest account = pcguest show add printer wizard = Yes workgroup = rbh server string = Linux ePDF Server log file = /var/log/samba/log.%m max log size = 50 security = user passdb backend = smbpasswd local master = no wins server = 10.1.19.84 load printers = yes cups options = raw printing = lprng #Share Definitions == [homes] comment = Home Directories browseable = no writable = yes [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes [print$] comment = Print Drivers path = /etc/samba/drivers guest ok = yes write list = root [test] path = /etc/samba guest ok = no writable = yes write list = root [basepdf] comment = queueresume command = /usr/bin/ePDF.py --endbatch --user %U printable = yes print command = /usr/bin/ePDF.py --jobname '%J' --user %U %s guest ok = yes path = /var/spool/ePDF/basepdf printer name = Acrophobia PDF Printer queuepause command = /usr/bin/ePDF.py --startbatch --user %U lpq command = /usr/bin/ePDF.py --qstat --workdir '[%S]' --user %U -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Access Denied when installing drivers using APW - Solved
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Which you should. SELinux can certainly be made to work with Samba. Scott Vintinner wrote: You can ignore this post. I finally realized that I still had SELINUX enabled. Scott Vintinner wrote: I'm trying to install print drivers onto my samba 3.0.28 server (Fedora Core 8) following the Add Printer Wizard Driver Installation directions here: http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/classicalprinting.html#id388379 Unfortunately, when I try to add the print driver, I receive a Windows Add Printer Driver Wizard : Unable to install Ghostscript PDF, Windows 2000 or XP, Intel driver. Access is Denied error message. Trying to add a printer using the Add Printer wizard results in a similar Add Printer Wizard : Printer driver was not installed. Access is denied. The Samba server is a stand-alone server. I'm connecting to the Samba server from an XP machine, using the net use \\acro1\print$ /user:root command to make sure that I'm connected as root. I've also run smbstatus to ensure that I'm connected as root: [EMAIL PROTECTED] samba]# smbstatus Samba version 3.0.28-0.fc8 PID Username Group Machine --- 2234 root root xp-vinsco(10.1.1.147) Service pid machine Connected at --- print$ 2234 xp-vinsco Thu Jan 3 16:09:40 2008 IPC$ 2234 xp-vinsco Thu Jan 3 16:16:27 2008 Locked files: Pid UidDenyMode Access R/WOplock SharePath Name Time -- 2234 0 DENY_NONE 0x11RDONLY NONE /etc/samba/drivers . Thu Jan 3 16:10:00 2008 The server is not running SELINUX, and the samba install seems to work fine otherwise (meaning I can connect to a test share as root and edit files just fine). Below is my smb.conf. Note that this server is being setup to use Acrophobia (http://acrophobia.sourceforge.net), which is where the ePDF.py scripts are from. I've contacted the author, but Acrophobia is currently only supported on Fedora Core 3. It's also my inexperienced feeling that my problem is a SAMBA problem rather than a problem with one of his scripts. Any help or other ideas for debugging this would be greatly appreciated. Scott #Global Settings = [global] addprinter command = /usr/bin/ePDF.py --addprinter map to guest = Bad User guest account = pcguest show add printer wizard = Yes workgroup = rbh server string = Linux ePDF Server log file = /var/log/samba/log.%m max log size = 50 security = user passdb backend = smbpasswd local master = no wins server = 10.1.19.84 load printers = yes cups options = raw printing = lprng #Share Definitions == [homes] comment = Home Directories browseable = no writable = yes [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes [print$] comment = Print Drivers path = /etc/samba/drivers guest ok = yes write list = root [test] path = /etc/samba guest ok = no writable = yes write list = root [basepdf] comment = queueresume command = /usr/bin/ePDF.py --endbatch --user %U printable = yes print command = /usr/bin/ePDF.py --jobname '%J' --user %U %s guest ok = yes path = /var/spool/ePDF/basepdf printer name = Acrophobia PDF Printer queuepause command = /usr/bin/ePDF.py --startbatch --user %U lpq command = /usr/bin/ePDF.py --qstat --workdir '[%S]' --user %U - -- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Systems Programmer II |$| |__| | | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHfouNmb+gadEcsb4RAiC6AKCUzOrlkHZjsiZqlukF7MhhAHHMCgCeNLff 1UKeMo7BR7y+9jKWzZBJ08o= =N7NG -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access Denied when installing drivers using APW - Solved
I don't doubt it. I was using a custom addprinter script from Acrophobia (http://acrophobia.sourceforge.net), which was not compatible with SELINUX and I'm afraid I'm not enough of an expert to figure out how to fix it. Thanks! Ryan Novosielski wrote: Which you should. SELinux can certainly be made to work with Samba. Scott Vintinner wrote: You can ignore this post. I finally realized that I still had SELINUX enabled. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access denied-message when joining domain
Jason Baker wrote: I also want the users to be able to log in from any computer in the network. This is called roaming profiles The OP stated that they want users to be able to log in from any workstation... he did NOT specify that it is expected that on each computer they receive the same desktop environment. Please be careful not to jump to solutions before the requirements are clearly understood. If in the OP's environment it is only necessary to be able to log onto any workstation, and then when logged on to use the programs which are installed on that workstation, then he will be able to do so without the use of roaming profiles. This avoids the complications of Roaming Profiles. -- Michael Lueck Lueck Data Systems http://www.lueckdatasystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Access denied-message when joining domain
No worries...only trying to be helpful. *Jason Baker */IT Coordinator/ *Glastender Inc.* 5400 North Michigan Road Saginaw, Michigan 48604 USA 800.748.0423 Phone: 989.752.4275 ext. 228 Fax: 989.752. www.glastender.com http://www.glastender.com -BEGIN GEEK CODE BLOCK- Version: 3.1 GIT$ d- s: a C++$ LU+++$ P+ L++L !E--- W+++ N o? K? w !O M !V PS PE++ Y? PGP- t 5? X+ R+ tv+ b- DI-- D++ G e+ h--- r+++ y+++ --END GEEK CODE BLOCK-- Michael Lueck wrote: Jason Baker wrote: I also want the users to be able to log in from any computer in the network. This is called roaming profiles The OP stated that they want users to be able to log in from any workstation... he did NOT specify that it is expected that on each computer they receive the same desktop environment. Please be careful not to jump to solutions before the requirements are clearly understood. If in the OP's environment it is only necessary to be able to log onto any workstation, and then when logged on to use the programs which are installed on that workstation, then he will be able to do so without the use of roaming profiles. This avoids the complications of Roaming Profiles. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access Denied using Server Netbios Name
Dennis For the last couple of weeks I have had this problem with a single XP workstion. It would only connect to our Samba server by IP address never by netbios name. Other workstions had no problem. Today, I found the solution. On the affected workstion, I manually changed to clock to match the Domain servers. Suddenly the problem went away? XP Professional is supposed to synchronize the workstations clock to the AD Domain controller, however, this one wasn't. Thanks Jay Dennis Clark [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Using Ubuntu 6.06.1, Samba 3.0.22, VMWare on Win2003 server. I can connect using with admin user and ip address, but using admin and netbios name prompts for password and results in access denied. WINS is enabled in Samba config. Does Vmware or Ubuntu introduce weird problems or is something else going on? Running the net stat command results in error 5 trying to resolve netbios name. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access denied changing file attributes
Hi, Thanks very much for pointing that out! Upgraded to 3.0.10 and everything works, even when I put it in an extended attribute as nature intended. Thanks again! Max Bolingbroke Beschorner Daniel wrote: Hi Max, my first idea with this log file is that you're using the release 3.0.8 of Samba, are you? It has an evil bug related to file attributes, fixed in 3.0.9. Daniel -Ursprüngliche Nachricht- Von: Max Bolingbroke [mailto:[EMAIL PROTECTED] Gesendet: Montag, 24. Januar 2005 08:03 An: Beschorner Daniel Betreff: Re: Access denied changing file attributes Hi, The log is attached, created using log level = 10 in smb.conf. I zipped it since its 360k unzipped. Thanks for the help! Max Bolingbroke Beschorner Daniel wrote: Strange, the admin users line should give to you full root access to the share, so access denied is quite impossible. Did you restart smbd after inserting the line? Maybe something basically broken...?!? Next idea is a look to the log.smbd at log level 10. Can you send it to me per mail? Daniel -Ursprüngliche Nachricht- Von: Max Bolingbroke [mailto:[EMAIL PROTECTED] Gesendet: Sonntag, 23. Januar 2005 16:33 An: Beschorner Daniel Cc: 'samba@lists.samba.org' Betreff: Re: Access denied changing file attributes No change whatsoever :) Are there any other possible problems? Thanks in advance, Max Bolingbroke Beschorner Daniel wrote: Try adding admin users = mbolingbroke to the share und try again. For a sample file that I am trying to change the attributes of. Since Samba should be authenticating me as mbolingbroke, I don't think this is the problem. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access denied changing file attributes
It would had been my first idea if you had specified your version of Samba. I was assuming 3.0.10. Glad it works now! Daniel -Ursprüngliche Nachricht- Von: Max Bolingbroke [mailto:[EMAIL PROTECTED] Gesendet: Montag, 24. Januar 2005 20:22 An: Beschorner Daniel Cc: 'samba@lists.samba.org' Betreff: Re: Access denied changing file attributes Hi, Thanks very much for pointing that out! Upgraded to 3.0.10 and everything works, even when I put it in an extended attribute as nature intended. Thanks again! Max Bolingbroke -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access denied changing file attributes
No change whatsoever :) Are there any other possible problems? Thanks in advance, Max Bolingbroke Beschorner Daniel wrote: Try adding admin users = mbolingbroke to the share und try again. For a sample file that I am trying to change the attributes of. Since Samba should be authenticating me as mbolingbroke, I don't think this is the problem. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access denied changing file attributes
Strange, the admin users line should give to you full root access to the share, so access denied is quite impossible. Did you restart smbd after inserting the line? Maybe something basically broken...?!? Next idea is a look to the log.smbd at log level 10. Can you send it to me per mail? Daniel -Ursprüngliche Nachricht- Von: Max Bolingbroke [mailto:[EMAIL PROTECTED] Gesendet: Sonntag, 23. Januar 2005 16:33 An: Beschorner Daniel Cc: 'samba@lists.samba.org' Betreff: Re: Access denied changing file attributes No change whatsoever :) Are there any other possible problems? Thanks in advance, Max Bolingbroke Beschorner Daniel wrote: Try adding admin users = mbolingbroke to the share und try again. For a sample file that I am trying to change the attributes of. Since Samba should be authenticating me as mbolingbroke, I don't think this is the problem. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access denied changing file attributes
I didn't just restart smbd, but the whole computer just to be sure. I'll make the log and send it to you now. Thanks for the help! Max Bolingbroke Beschorner Daniel wrote: Strange, the admin users line should give to you full root access to the share, so access denied is quite impossible. Did you restart smbd after inserting the line? Maybe something basically broken...?!? Next idea is a look to the log.smbd at log level 10. Can you send it to me per mail? Daniel -Ursprüngliche Nachricht- Von: Max Bolingbroke [mailto:[EMAIL PROTECTED] Gesendet: Sonntag, 23. Januar 2005 16:33 An: Beschorner Daniel Cc: 'samba@lists.samba.org' Betreff: Re: Access denied changing file attributes No change whatsoever :) Are there any other possible problems? Thanks in advance, Max Bolingbroke Beschorner Daniel wrote: Try adding admin users = mbolingbroke to the share und try again. For a sample file that I am trying to change the attributes of. Since Samba should be authenticating me as mbolingbroke, I don't think this is the problem. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access denied changing file attributes
Hi, Getfacl reports: # file: Default.rdp # owner: mbolingbroke # group: users user::rwx group::r-- other::r-- For a sample file that I am trying to change the attributes of. Since Samba should be authenticating me as mbolingbroke, I don't think this is the problem. Thanks anyway! Have you got any other ideas? Max Bolingbroke Beschorner Daniel wrote: Hi Max, are you owner of the files you want to handle? Only file owner is allowed to change file permissions (where attributes are mapped), write access isn't enough. Daniel I've been tearing my hair out trying to get DOS file attributes to work with Samba. An error occured applying attributes to the file file name Access is denied. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access denied changing file attributes
Max Bolingbroke wrote: Hi! I've been tearing my hair out trying to get DOS file attributes to work with Samba. Basically, I have it all set up so the user mbolingbroke (me) can write to this Supernova Backup share I have - this all works fine. However, since this is going to backup my Windows machine I want to preserve the file attributes. To this end, I've set up mapping of the attributess using map archive = yes and so on. However, whenever I try to change the file attributes using either Windows or the smbclient, I get the error: An error occured applying attributes to the file file name Access is denied. I've tried using both extended attributes and the map * = yes approach to do this - neither has worked. Both extended attributes and ACLs for my filesystem are compiled into the kernel, although I removed the ACL I had set up from my backup share at one stage trying to get this to work and still no joy. The user mbolingbroke is mapped to the NT username of Max Bolingbroke in smbusers and there is a corresponding entry in smbpasswd. I'd be really greatful for any insight on this problem! Thanks! Max Bolingbroke - getfacl output on share: # file: supernova # owner: mbolingbroke # group: users user::rwx group::r-x other::r-x - smb.conf: [global] netbios name = Nebula server string = An Expanding Cloud Of Vapour workgroup = BOLINGBROKE security = user client ntlmv2 auth = yes username map = /etc/samba/smbusers encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd hosts allow = 192.168.1. wins server = 192.168.1.2 name resolve order = wins hosts lmhosts bcase log file = /var/log/samba/log.%m max log size = 1024 preserve case = yes short preserve case = yes map archive = yes map hidden = yes map system = yes [Supernova Backup] comment = Supernova backup area guest ok = no path = /data/supernova/ public = yes writeable = yes create mask = 755 Does anyone have any idea about this? I'm desperate enough that I'm about ready to buy another Windows licence for the trouble it'll save me. Hell, if all else fails can anyone suggest another networkable file system that's well supported in Windows and Linux? Thanks, Max Bolingbroke -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access Denied - XCopy from Win2K SP3 to Samba 3.0.8
Guenther Deschner wrote: It's a known issue. Samba 3.0.9 (to be expected soon) Thanks for the quick response Guenther! I was waiting for the 3.0.8 Debian binary as I wanted to test out the mentioned SPOOLSS printing fixes since that is just a tad broad to guess what might be fixed. My hope is that the File/Print then wait wait wait... might be addressed. Anyway, I worked around the XCopy failure and got the test server built for now. I'll wait for at least 3.0.9 to be out (in this case) before upgrading production systems. Thanks! -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access Denied
In article [EMAIL PROTECTED], Bill Mann wrote: I enabled wins32 and put the line server =2.0 and it works! Try it! Bill Mann The Benefits Office CONFIDENTIALITY NOTICE: This e-mail (including attachments), is covered by the Electronic Communications Privacy Act, §§ 2510-2521 and is confidential. The information contained in this message and the accompanying documents is confidential information that is legally privileged and intended only for the use of the above-named recipient. If the reader of this message is not the named recipient or an employee or agent responsible for delivering the telecopy to the named recipient, please notify us immediately to arrange for the return of the original documents to us. You are hereby notified that any review, disclosure, copying, distribution, or the taking of any action in reliance on the contents of this information is strictly prohibited. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Vermyndax Sent: Monday, July 26, 2004 12:42 AM To: [EMAIL PROTECTED] Subject: Re: [Samba] Access Denied Bill Mann wrote: Samba 3.0.5 on Unix. I can map to the share but Access is denied. I've configured the share so this would not happen. Any ideas? This started happening to me as of 3.0.4, and I never found a solution. Now I'm trying to mount via cifs, but getting missing or invalid username even though I'm using the correct credentials file. :( The last good version of Samba that worked for me was 3.0.2a. Let me see if I understand you correctly. After upgrading to samba 3.0.5, you get Access denied errors on your clients (XP?) when for example saving documents to the mapped drive? This started to happen randomly on our XP-clients after Redhat's up2date updated samba from 3.0.2-6.3E to 3.0.4-6.3E. Rolling back to 3.0.2-6.3E solved the problem. I am having a hard time reproducing this on our test-servers, and I really don't want to try it out again on the production-servers... Could you please be more specific on your solution. Is it something on the client? smb.conf? Thanks, Sten Sletbak Oslo University College -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
FW: [Samba] Re: Access Denied touching shared CUPS printer
After much trying I have finally got this to work and I'm slightly embarassed to admit that the old RTFM tripped me up. In the Samba 3 HOWTO - the official one, rather than the draft I was originally using - it states quite clearly that to get point 'n' print to work use client driver needs to be set to no in the [global] section of smb.conf, and the samba daemons restarted so that the APW will work. However you will need to change this back to yes on completion and restart the daemons again. During this process you may get Access Denied errors. I'm not sure if the rpcclient method works but it was pleasing to get point 'n' print to work as smoothly as it should. Apart from this difficulty, raw printing via Cups is very reliable, the only problem we seem to have is with a Tally printer's internal print server which is flaky under both NT and Samba. Regards, Chris Christopher Moss Murray McIntosh O'Brien Wellesley House 204 London Road Waterlooville PO7 7AN 023 9223 1006 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Lueck Sent: 09 July 2004 18:43 To: [EMAIL PROTECTED] Subject: [Samba] Re: Access Denied touching shared CUPS printer Most Ugly! In Google'ing around it seems this Access Denied is a known issue with Win2K/XP clients, CUPS printers, etc... So, use printerui.dll to force install the printer driver and assign to a local LPT1 port. Add a port registry key, and the update the port in two spots under the printer instance. Finally stop/start the spooler task. Scrptable yet ugly. Most Ugly! Ah, Samba team... does this topic need some pizza applied to it? Please advise. What's the bug anyway? Something to do with CUPS? It seems there are not lots of people bumping into this, thus makes me think other printing methods are not affected. I was quite pleased with HOW EASY this setup was going along, until slamming into the Access Denied issue. RAW spooling looked way cool, Samba enum'ing the CUPS queues, etc... -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Disclaimer Privileged or confidential information may be contained in this message. If you are not the addressee of this message please notify the sender by return and delete it, and you may not use, copy, disclose or rely on the information contained in it. Internet e-mail may be susceptible to data corruption, interception and unauthorised amendment for which Murray McIntosh O'Brien does not accept liability. Likewise whilst we have taken reasonable precautions to ensure that this e-mail and any attachments have been swept for viruses, Murray McIntosh O'Brien does not accept liability for any losses caused as a result of viruses. Statements in this message that do not relate to the business of Murray McIntosh O'Brien are neither given nor endorsed by it or the Directors of Murray McIntosh O'Brien. A list of the Directors of Murray McIntosh O'Brien is available for inspection at our offices. -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access Denied touching shared CUPS printer
Most Ugly! In Google'ing around it seems this Access Denied is a known issue with Win2K/XP clients, CUPS printers, etc... So, use printerui.dll to force install the printer driver and assign to a local LPT1 port. Add a port registry key, and the update the port in two spots under the printer instance. Finally stop/start the spooler task. Scrptable yet ugly. Most Ugly! Ah, Samba team... does this topic need some pizza applied to it? Please advise. What's the bug anyway? Something to do with CUPS? It seems there are not lots of people bumping into this, thus makes me think other printing methods are not affected. I was quite pleased with HOW EASY this setup was going along, until slamming into the Access Denied issue. RAW spooling looked way cool, Samba enum'ing the CUPS queues, etc... -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: ACCESS DENIED when trying to log into domain
For a successful samba3.x domain controller you need to make sure of a few things. your nt to unix group map ip and hostname in host file proper scripts in smb.conf proper user map in smbusers (if necessary for your purpose) here is an example of my smb.conf and of course sub MY-DOMAIN for yours - # Global parameters [global] workgroup = MY-DOMAIN realm = MY-DOMAIN server string = Linux security = DOMAIN map to guest = Bad Password passwd program = /etc/samba/smbpasswd unix password sync = Yes passwd chat = *old password* %o\n *new password* %n\n *new password* %n\n *changed* passwd chat debug = false max log size = 50 time server = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/sbin/useradd %u delete user script = /usr/sbin/userdle %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g delete user from group script = /usr/sbin/deluser %u %g add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %u logon script = %G.bat logon path = domain logons = Yes os level = 65 lm announce = Yes preferred master = Yes domain master = Yes ldap ssl = no idmap uid = 1-2 idmap gid = 1-2 admin users = your_admin_accounts printer admin = your_admin_accounts [NETLOGON] comment = NETLOGON SHARE path = /home/samba/NETLOGON --- Markus Benkovszki ALSO make sure your usr group mapping is bang on I've had some major issues arrise with bad mappings. Hope this helps. -Original Message- From: Michael Lueck [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 9:58 PM To: [EMAIL PROTECTED] Subject: [Samba] Re: ACCESS DENIED when trying to log into domain Ken Miller wrote: However, when I try and connect to the domain, I get an 'Access Denied' message after entering my userid and password. What client OS? If NT/2K/XPPro have you joined it to the domain successfully? You need a user ID on the Samba box set up as a Domain Admin to use to join these OS's to your domain. I assume you are using a smbpasswd back end, you did add the user ID to that database? Some of the text within my ramblings to this list on net groupmap apply to the topic of creating a domain admin account. You might read through the small office example URL on the Samba web site I posted in that thread as well. Sounds like what you are up to is what that describes. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: ACCESS DENIED when trying to log into domain
On Wed, 7 Jul 2004 08:30:01 -0400, Markus Benkovski wrote: ALSO make sure your usr group mapping is bang on I've had some major issues arrise with bad mappings. AMEN to that! I JUST got my mapping working 10:30 last night... will be posting findings to the list on that Q's about net groupmap thread I've been chatting to myself on. Michael Lueck Lueck Data Systems http://www.lueckdatasystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: ACCESS DENIED when trying to log into domain
Ken Miller wrote: However, when I try and connect to the domain, I get an 'Access Denied' message after entering my userid and password. What client OS? If NT/2K/XPPro have you joined it to the domain successfully? You need a user ID on the Samba box set up as a Domain Admin to use to join these OS's to your domain. I assume you are using a smbpasswd back end, you did add the user ID to that database? Some of the text within my ramblings to this list on net groupmap apply to the topic of creating a domain admin account. You might read through the small office example URL on the Samba web site I posted in that thread as well. Sounds like what you are up to is what that describes. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: ACCESS DENIED when trying to log into domain
Michael Lueck wrote: Ken Miller wrote: However, when I try and connect to the domain, I get an 'Access Denied' message after entering my userid and password. What client OS? If NT/2K/XPPro have you joined it to the domain successfully? D'Oh! XP Pro. How do you join it to the domain? If you do that by altering the properties of 'My Computer', then yes, I have. If I change the domain to something other than SHETLAND, then I get an error about being unable to find the domain. I can also watch the log files on the PDC and see traffic. You need a user ID on the Samba box set up as a Domain Admin to use to join these OS's to your domain. Ok, I'm missing something pretty fundamental here then, as I have not done that. I assume you are using a smbpasswd back end, you did add the user ID to that database? Yes, and yes. I've also added the name of the computer trying to connect to the domain to both /etc/passwd and smbpasswd (as a machine). Some of the text within my ramblings to this list on net groupmap apply to the topic of creating a domain admin account. You might read through the small office example URL on the Samba web site I posted in that thread as well. Sounds like what you are up to is what that describes. I'll dig it up and give it a read. Many thanks. -klm. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: ACCESS DENIED when trying to log into domain
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Read this: http://www.samba.org/samba/docs/man/guide/secure.html#id2520407 Ken Miller wrote: | Michael Lueck wrote: | | Ken Miller wrote: | | However, when I try and connect to the domain, I get an 'Access | Denied' message after entering my userid and password. | | | | What client OS? If NT/2K/XPPro have you joined it to the domain | successfully? | | | D'Oh! XP Pro. | How do you join it to the domain? If you do that by altering the | properties of 'My Computer', then yes, I have. If I change the domain | to something other than SHETLAND, then I get an error about being unable | to find the domain. I can also watch the log files on the PDC and see | traffic. | | You need a user ID on the Samba box set up as a Domain Admin to use to | join these OS's to your domain. | | | Ok, I'm missing something pretty fundamental here then, as I have not | done that. | | I assume you are using a smbpasswd back end, you did add the user ID | to that database? | | | Yes, and yes. I've also added the name of the computer trying to | connect to the domain to both /etc/passwd and smbpasswd (as a machine). | | Some of the text within my ramblings to this list on net groupmap | apply to the topic of creating a domain admin account. You might read | through the small office example URL on the Samba web site I posted in | that thread as well. Sounds like what you are up to is what that | describes. | | | I'll dig it up and give it a read. Many thanks. | |-klm. | | - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: [EMAIL PROTECTED] AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llings Jabber: [EMAIL PROTECTED]| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3-nr1 (Windows XP) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFA647E57L0B7uXm9oRAlbrAJ0UB38uu06XvVgaj68cUNtS0oy9GQCfRJuX byd24AkiW/pX2W0c1cpx5FI= =9TQU -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access denied when printing to Samba printers
Ben Finney benfinney at thegoodguys.com.au Thu Aug 14 14:48:23 GMT 2003 Ben Finney wrote: Failure: - Printing anything to said printer shares. [...] [printers] comment = All printers path = /var/local/spool/samba create mask = 0700 guest ok = Yes printable = Yes Corey Hart asked me (off-list) to check the permissions on the spool directory. They are: $ ls -ld /var/local/samba/spool/ drwxrwxrwt 2 root nogroup 4096 Aug 7 13:24 /var/local/samba/spool/ Well -- but your path in smb.conf points to /var/local/spool/samba and *not* /var/local/samba/spool/ (This is based on advice to make a separate spool directory, with the same permissions as /tmp has.) Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Access denied when printing to Samba printers
[EMAIL PROTECTED] wrote: Failure: - Printing anything to said printer shares. [...] [printers] comment = All printers path = /var/local/spool/samba [...] $ ls -ld /var/local/samba/spool/ drwxrwxrwt2 root nogroup 4096 Aug 7 13:24 /var/local/samba/spool/ OMFG. The spool directory Samba was looking for was not the same as the directory I created. Correct that error, and it's all fine now. Thank you to the samba list, and Corey Hart in particular, for assisting me in seeing what was right in front of my face :-) -- Ben Finney [EMAIL PROTECTED] IT Technical Support Officer Support Centre, The Muir Electrical Company ph: +61 3 9338 4300 web: http://www.thegoodguys.com.au/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access denied when printing to Samba printers
Ben Finney wrote: The Win2000 client, when attempting to print a test page to the printer, immediately responds with Access denied and an offer to lead me through the printer troubleshooting help. Some other points that may be relevant: At one point I was using security = ads in an attempt to get things working; however, the (brief) success was had with security = domain. I'm still seeing krb5 messages though; is it possible to authenticate against a Win2000 Active Directory domain, in mixed mode, without using kerberos? I'm using winbindd via PAM, and set up /etc/pam.d/login and /etc/pam.d/samba such that authentication appears to be working. I'm happy to be told that this may be affecting it, if only someone can help me diagnose it. -- Ben Finney [EMAIL PROTECTED] IT Technical Support Officer Support Centre, The Muir Electrical Company ph: +61 3 9338 4300 web: http://www.thegoodguys.com.au/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Access denied when printing to Samba printers
Ben Finney wrote: Failure: - Printing anything to said printer shares. [...] [printers] comment = All printers path = /var/local/spool/samba create mask = 0700 guest ok = Yes printable = Yes Corey Hart asked me (off-list) to check the permissions on the spool directory. They are: $ ls -ld /var/local/samba/spool/ drwxrwxrwt2 root nogroup 4096 Aug 7 13:24 /var/local/samba/spool/ (This is based on advice to make a separate spool directory, with the same permissions as /tmp has.) -- Ben Finney [EMAIL PROTECTED] IT Technical Support Officer Support Centre, The Muir Electrical Company ph: +61 3 9338 4300 web: http://www.thegoodguys.com.au/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
