[Samba] Configure samba 3.4 running with mysql backend

2013-09-14 Thread vynt nt
Hello,

I a using samba 3.4 with mysql backend. I have problem when add user to
mysql. I use command smbpasswd -a user for add user to mysql. But when I
query mysql, I realized that user does'n have UID and GID.

I use windows explorrer for test. When i type username and password to
enter resource, i get message the network name could not be found. I see
samba log, I found problem is Can't find a unix id for an unmapped group.

Here is content of samba configuration file:

[global]
workgroup   = WORKGROUP
security= user
wins support= yes
server string   = SRDOC
hosts allow = 10.10.10.1
unix charset= UTF-8
dos charset = CP932
unix password sync = no
passwd program = /usr/bin/passwd %u
username map = /usr/local/samba/lib/smbusers
log level = 5
syslog = 0
max log size = 10
map to guest = bad user
smb ports = 139 445
load printers = No
passdb backend = mysql:samba
samba:domain column = 'LOCALDOMAIN':
encrypt passwords = yes
update encrypted = No
allow trusted domains = Yes
samba:mysql host = localhost
samba:mysql password = xxx
samba:mysql user = vinasamba
samba:mysql database = samba_authentication
Working]
comment = Working Vinahost Document
path= /home/f/public_html/working
read only   = no
writable= yes
create mask = 1750
force create mode = 1750
force directory mode = 1750
valid users = vy vynt f

Why I miss UID and GID when add user to samba ? How i solve this error ?

Sorry for my bad english. Thank you in advance.

vynt
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Configure samba 3.4 running with mysql backend

2013-09-12 Thread tony ha
Hello,

I a using samba 3.4 with mysql backend. I have problem when add user to
mysql. I use command smbpasswd -a user for add user to mysql. But when I
query mysql, I realized that user does'n have UID and GID.

I use windows explorrer for test. When i type username and password to
enter resource, i get message the network name could not be found. I see
samba log, I found problem is Can't find a unix id for an unmapped group.

Here is content of samba configuration file:

[global]
workgroup   = WORKGROUP
security= user
wins support= yes
server string   = SRDOC
hosts allow = 10.10.10.1
unix charset= UTF-8
dos charset = CP932
unix password sync = no
passwd program = /usr/bin/passwd %u
username map = /usr/local/samba/lib/smbusers
log level = 5
syslog = 0
max log size = 10
map to guest = bad user
smb ports = 139 445
load printers = No
passdb backend = mysql:samba
samba:domain column = 'LOCALDOMAIN':
encrypt passwords = yes
update encrypted = No
allow trusted domains = Yes
samba:mysql host = localhost
samba:mysql password = xxx
samba:mysql user = vinasamba
samba:mysql database = samba_authentication
Working]
comment = Working Vinahost Document
path= /home/f/public_html/working
read only   = no
writable= yes
create mask = 1750
force create mode = 1750
force directory mode = 1750
valid users = vy vynt f

Why I miss UID and GID when add user to samba ? How i solve this error ?

Sorry for my bad english. Thank you in advance.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Configure samba to not look for domain master browser

2011-12-08 Thread Timothy Madden

On 06.12.2011 17:54, TAKAHASHI Motonobu wrote:

On 12/06/2011 10:26 AM, Timothy Madden wrote:


On my network there is no domain master browser, and my nmbd is
spamming my /var/log/messages file with messages that it cound not
find one. Can I configure nmbd not to look for the domain master
browser ?


After a while, nmbd will find a master browser (or a domain master
browser) or will try to become a master browser by myself?

If yes, this is expected behavior.

If not, something will be wrong. Can you show the spamming messages?


I keep getting the messages for ever and nmbd does not become a domain 
master. You have the syslogd messages below.


The nmbd has
preferred master = yes
in smb.conf. I do not know how to check if it is the local master, but I 
believe it is (although there is also a Windows 7 64-bit machine on the 
same subnet).


The nmbd is also a WINS server, but I only set it up for my VPN clients 
to be able to resolve computer names over VPN, and otherwise I do not 
want the server. I want a decentralized sub-net where I can reboot any 
machine as needed  (for our product testing )and everything just works. 
So the other 7 samba machines in the subnet do not have the WINS server 
in smb.conf, nor is it announced by the DHCP server (which is a router).


Also, the nmbd is on the VPN server machine, so most of the time it has 
two network interfaces to work with (the actual ethernet adapter and the 
virtual (VPN) tunnel interface), and I can see in syslog the following:

Dec  6 20:37:07 console nmbd[5973]: [2011/12/06 20:37:07, 0]
nmbd/asyncdns.c:start_async_dns(151)
Dec  6 20:37:07 console nmbd[5973]:   started asyncdns process 5974
Dec  6 20:37:30 console nmbd[5973]: [2011/12/06 20:37:30, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
Dec  6 20:37:30 console nmbd[5973]:   *
Dec  6 20:37:30 console nmbd[5973]:
Dec  6 20:37:30 console nmbd[5973]:   Samba name server CONSOLE is now
a local master browser for workgroup MYGROUP on subnet
192.168.0.100
Dec  6 20:37:30 console nmbd[5973]:
Dec  6 20:37:30 console nmbd[5973]:   *

Dec  7 16:23:19 console nmbd[5973]: [2011/12/07 16:23:19, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
Dec  7 16:23:19 console nmbd[5973]:   *
Dec  7 16:23:19 console nmbd[5973]:
Dec  7 16:23:19 console nmbd[5973]:   Samba name server CONSOLE is now
a local master browser for workgroup MYGROUP on subnet
172.16.0.1
Dec  7 16:23:19 console nmbd[5973]:
Dec  7 16:23:19 console nmbd[5973]:   *

However the virtual subnet 172.16.0.0/24 is *not* broadcast-capable, 
which is giving me quite some problems...


I thought a domain master browser is not always used, but only on routed 
networks where several sub-nets share the same workgroup.

Is a local master browser not enough for Network Neighborhood ?

So I get the following non-stop messages in /var/log/messages:

Dec  8 10:43:20 console nmbd[5973]:   Unable to sync browse lists in 
this workgroup.
Dec  8 10:58:21 console nmbd[5973]: [2011/12/08 10:58:21, 0] 
nmbd/nmbd_browsesync.c:find_domain_master_name_query_fail(351)

Dec  8 10:58:21 console nmbd[5973]:   find_domain_master_name_query_fail:
Dec  8 10:58:21 console nmbd[5973]:   Unable to find the Domain Master 
Browser name MYGROUP1b for the workgroup MYGROUP.
Dec  8 10:58:21 console nmbd[5973]:   Unable to sync browse lists in 
this workgroup.
Dec  8 10:58:21 console nmbd[5973]: [2011/12/08 10:58:21, 0] 
nmbd/nmbd_browsesync.c:find_domain_master_name_query_fail(351)

Dec  8 10:58:21 console nmbd[5973]:   find_domain_master_name_query_fail:
Dec  8 10:58:21 console nmbd[5973]:   Unable to find the Domain Master 
Browser name MYGROUP1b for the workgroup MYGROUP.
Dec  8 10:58:21 console nmbd[5973]:   Unable to sync browse lists in 
this workgroup.
Dec  8 11:13:29 console nmbd[5973]: [2011/12/08 11:13:29, 0] 
nmbd/nmbd_browsesync.c:find_domain_master_name_query_fail(351)

Dec  8 11:13:29 console nmbd[5973]:   find_domain_master_name_query_fail:
Dec  8 11:13:29 console nmbd[5973]:   Unable to find the Domain Master 
Browser name MYGROUP1b for the workgroup MYGROUP.
Dec  8 11:13:29 console nmbd[5973]:   Unable to sync browse lists in 
this workgroup.
Dec  8 11:13:29 console nmbd[5973]: [2011/12/08 11:13:29, 0] 
nmbd/nmbd_browsesync.c:find_domain_master_name_query_fail(351)

Dec  8 11:13:29 console nmbd[5973]:   find_domain_master_name_query_fail:
Dec  8 11:13:29 console nmbd[5973]:   Unable to find the Domain Master 
Browser name MYGROUP1b for the workgroup MYGROUP.
Dec  8 11:13:29 console nmbd[5973]:   Unable to sync browse lists in 
this workgroup.
Dec  8 11:28:40 console nmbd[5973]: [2011/12/08 11:28:40, 0] 
nmbd/nmbd_browsesync.c:find_domain_master_name_query_fail(351)

Dec  8 11:28:40 console nmbd[5973]:   find_domain_master_name_query_fail:
Dec  8 11:28:40 console nmbd[5973]:   Unable to find 

Re: [Samba] Configure samba to not look for domain master browser

2011-12-07 Thread Adam Tauno Williams
On Tue, 2011-12-06 at 17:26 +0200, Timothy Madden wrote:
 On my network there is no domain master browser, and my nmbd is spamming 
 my /var/log/messages file with messages that it cound not find one. Can 
 I configure nmbd not to look for the domain master browser ?

Do you have a WINS server?  If so set that in the smb.conf file.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Configure samba to not look for domain master browser

2011-12-06 Thread Timothy Madden

Hello

On my network there is no domain master browser, and my nmbd is spamming 
my /var/log/messages file with messages that it cound not find one. Can 
I configure nmbd not to look for the domain master browser ?


Thank you,
Timothy Madden

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Configure samba to not look for domain master browser

2011-12-06 Thread Gaiseric Vandal
Windows / Samba machines should elect a domain master browser among 
themselves.  Normally the PDC should win.   With out domain browsing, 
you can't see machines in the My Network Places or network 
neighborhood etc.Depending on network size, you may want to 
implement a WINS server.



On 12/06/2011 10:26 AM, Timothy Madden wrote:

Hello

On my network there is no domain master browser, and my nmbd is 
spamming my /var/log/messages file with messages that it cound not 
find one. Can I configure nmbd not to look for the domain master 
browser ?


Thank you,
Timothy Madden



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Configure samba to not look for domain master browser

2011-12-06 Thread TAKAHASHI Motonobu
 On 12/06/2011 10:26 AM, Timothy Madden wrote:
 
  On my network there is no domain master browser, and my nmbd is 
  spamming my /var/log/messages file with messages that it cound not 
  find one. Can I configure nmbd not to look for the domain master 
  browser ?

After a while, nmbd will find a master browser (or a domain master
browser) or will try to become a master browser by myself?

If yes, this is expected behavior.

If not, something will be wrong. Can you show the spamming messages?

---
TAKAHASHI Motonobu mo...@samba.gr.jp
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Configure samba to not look for domain master browser

2011-12-06 Thread Craig White
On Tue, 2011-12-06 at 17:26 +0200, Timothy Madden wrote:
 Hello
 
 On my network there is no domain master browser, and my nmbd is spamming 
 my /var/log/messages file with messages that it cound not find one. Can 
 I configure nmbd not to look for the domain master browser ?

Why not configure logging to log to /var/log/samba and to syslog perhaps
only level 1 or 0?

see logging here...
http://www.samba.org/samba/docs/using_samba/ch06.html

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Configure Samba for Multiple AD Domain Controllers - How?

2011-03-02 Thread Robinson, Eric
How do I configure samba such that AD authentication still works when a
DC is down?
 
Do I need multiple kdc, admin_server, and kpasswd_server entries in
krb5.conf? 
 

--
Eric Robinson


 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 


Disclaimer - March 2, 2011 
This email and any files transmitted with it are confidential and intended 
solely for samba@lists.samba.org. If you are not the named addressee you should 
not disseminate, distribute, copy or alter this email. Any views or opinions 
presented in this email are solely those of the author and might not represent 
those of Physicians' Managed Care or Physician Select Management. Warning: 
Although Physicians' Managed Care or Physician Select Management has taken 
reasonable precautions to ensure no viruses are present in this email, the 
company cannot accept responsibility for any loss or damage arising from the 
use of this email or attachments. 
This disclaimer was added by Policy Patrol: http://www.policypatrol.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Configure Samba as Client of Samba PDC

2010-08-27 Thread Alejandro Gándara Álvarez
Hi all,

 

First of all, thanks .

 

In my network  I have this :

 

Server :chacho 

· 1 ldap 

· 1 samba PDC and share, 

 

Now, I need a second samba  in the same server (this was right , I ran a new
instance without problems , but this one has to be a file server whith
authentification against the  ldap server. The problem is the following:

 

The problem is that this new samba is not running how I would like , first
ill show smb.conf

 

 

This is the smb.conf of the PDC:

 

 

[global]

workgroup = domain

netbios name = CHACHO

server string = %h

debug uid = Yes

bind interfaces only = yes

interfaces = 127.0.0.1,172.20.36.10/24

passdb backend = ldapsam:ldap://127.0.0.1

passwd program = /usr/sbin/smbldap-passwd -o %u

#   username map = /etc/samba/smbusers

log level = 1

log file = /var/log/samba/log.%m

max log size = 50

name resolve order = wins lmhosts host bcast

add user script = /usr/sbin/smbldap-useradd -m '%u'

delete user script = /usr/sbin/smbldap-userdel %u

add group script = /usr/sbin/smbldap-groupadd -p '%g'

delete group script = /usr/sbin/smbldap-groupdel '%g'

add user to group script = /usr/sbin/smbldap-groupmod -m '%u' '%g'

delete user from group script = /usr/sbin/smbldap-groupmod -x '%u'
'%g'

set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u'

add machine script = /usr/sbin/smbldap-useradd -w '%u'

#logon script = logon.bat

logon path =

logon home =

domain logons = Yes

os level = 64

preferred master = Yes

domain master = Yes

wins support = Yes

ldap admin dn = cn=admin,dc=domain,dc=loc

ldap group suffix = ou=Groups

ldap idmap suffix = ou=Idmap

ldap machine suffix = ou=Computers

ldap passwd sync = Yes

ldap suffix = dc=domain,dc=loc

ldap ssl = no

ldap user suffix = ou=People

idmap uid = 15000-2

idmap gid = 15000-2

admin users = @administradores

create mask = 0777

directory mask = 0777

printcap cache time = 12600

printcap name =

socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192
SO_SNDBUF=8192

deadtime = 15

map to guest = Bad User

reset on zero vc = yes

[netlogon]

comment = Network Logon Service

path = /var/lib/samba/netlogon/scripts

guest ok = Yes

browseable = no

[Proyectos]

comment = Carpetas comunes, documentación, drivers

path = /samba/Proyectos

read only = No

#map hidden = Yes

#map system = Yes

admin users = @administradores

users = @desarrollo,@contabilidad,@jefesPT2,@jefesPR

guest ok = no

[temporal]

comment = archivos temporales

path = /samba/temporal

admin users = @administradores,
@desarrollo,@contabilidad,@jefesPT2,@jefesPR,@dt

browseable = yes

read only = no

[putty]

comment = archivos temporales

path = /samba/putty

admin users = @administradores,
@desarrollo,@contabilidad,@jefesPT2,@jefesPR,@dt

browseable = yes

read only = no

 

[software]

comment = Programas

path = /samba/software

admin users =
@administradores,@desarrollo,@contabilidad,@jefesPT2,@jefesPR,@dt

browseable = yes

read only = no

[exports]

comment = Carpeta con los exports

path = /samba/exports

read only = No

#map hidden = Yes

#map system = Yes

admin users =
@administradores,@desarrollo,@contabilidad,@jefesPT2,@jefesPR,@dt

guest ok = no

[proveedores]

comment = Carpetas proveedores

path = /samba/proveedores

read only = No

#map hidden = Yes

#map system = Yes

admin users = @administradores,@jefesPT2,@jefesPR,@dt

users = @desarrollo,@contabilidad,@jefesPT2,@jefesPR

guest ok = no

 

 

 

And this smb.conf is the new one , I called it smb.chachopartners.conf

 

[global]

workgroup = domain

netbios name = CHACHOPARTNERS

security = DOMAIN

bind interfaces only = yes

interfaces = 172.20.52.11/24

passdb backend = ldapsam:ldap://127.0.0.1

passwd program = /usr/sbin/smbldap-passwd -o %u

local master = no

domain master = no

preferred master = no

domain logons = no

name resolve order = wins host lmhosts bcast

dns proxy = no

 

log level = 1

 

ldap admin dn = cn=admin,dc=domain,dc=loc

ldap group suffix = ou=Groups

ldap idmap suffix = ou=Idmap

ldap machine suffix = ou=Computers

ldap passwd sync = Yes


[Samba] Configure samba to serv ldap users and non ldap users?

2009-02-13 Thread Daniel Müller
Hello to all,

 

I am running an older suse 8.2 PC with samba 2.27a. I configured suse to
work as an ldap client (the ldapserver runs on another machine) .

Getent passwd and getent group gives me all the ldap users and groups and
this users and groups can take ownership of files and folders.

Is there a way  to make my samba recognize ldap users and groups with pam in
/etc/pam.d/samba file, witout having to change the

[global] section? 

 

Greetings

Daniel

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] configure SAMBA(PDC)+LDAP for win XP clients

2007-02-05 Thread Jason Baker
There are plenty of good on-line resources on how to do this. Google the 
following: Samba 3 by Example, The Official Samba How To and The Linux 
Samba-OpenLDAP Howto (from IdealX). These will get you started. Then you 
can use the board for more specific questions.


*Jason Baker
*/IT Coordinator/


*Glastender Inc.*
5400 North Michigan Road
Saginaw, Michigan 48604 USA
800.748.0423
Phone: 989.752.4275 ext. 228
Fax: 989.752.
www.glastender.com http://www.glastender.com



On 2/2/2007 12:51 AM, suresh bollu wrote:

Hi all,

i want to setup SAMBA(PDC) with LDAP for my work
place,
server is on FC5, and clients are Win XP,
when user login to samba it will save the profile of
the user and retrive back when he login again.

please help me to setup the above,

Regards,

Suresh Bollu

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] configure SAMBA(PDC)+LDAP for win XP clients

2007-02-03 Thread suresh bollu

Hi all,

i want to setup SAMBA(PDC) with LDAP for my work
place,
server is on FC5, and clients are Win XP,
when user login to samba it will save the profile of
the user and retrive back when he login again.

please help me to setup the above,

Regards,

Suresh Bollu
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] configure samba

2006-02-21 Thread Nils Wadell
I want to install samba on an old Unix machine. When ./configure my 
source I get some warnings which I dont know if severe. I also get a 
Makefile but no make ??! A perhaps better config script needs 
Autoconf Tool Kit. Where can I find that?

/Nils (Sweden)

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: ***SPAM*** Re: [Samba] Configure Samba with non-standard OpenLDAPlocation

2005-03-17 Thread Ayotunde Itayemi
Try the configure format below:

LDFLAGS='-L/usr/local/openldap/lib'
CPPFLAGS='-I/usr/local/openldap/include' ./configure
--prefix=/usr/local/samba-3.0.12pre1 --with-ldap --with-ads
--with-winbind --with-krb5=/usr/local/krb5-1.3.5
--with-libiconv=/usr/local/libiconv-1.9.1

That's from my own compile. Change the LDFLAGS as applicable.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Theodore Jencks
Sent: Wednesday, March 16, 2005 11:12 PM
To: samba@lists.samba.org
Subject: RE: ***SPAM*** Re: [Samba] Configure Samba with non-standard
OpenLDAPlocation

I'm having a similar problem where the configure just doesn't find the
ldap libraries even though I've got the ldap-devel rpm installed and the
libraries are in their normal location in /usr/lib.

-TJ

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Tony Earnshaw
Sent: Wednesday, March 16, 2005 12:15 PM
To: Dariusz Lis
Cc: samba@lists.samba.org
Subject: ***SPAM*** Re: [Samba] Configure Samba with non-standard
OpenLDAP location


Dariusz Lis:

 How to configure (and compile) Samba with non-standard OpenLDAP
location?
 Is it possible?

Basically, yes. It all depends on where the LDAP libraries (libldap,
liblber) were told to look for ${prefix} during the OpenLDAP
compilation.
When Samba source (or srpm installation) is compiled, it should find
them automatically, depending on your systems library database (e.g.Red
Hat Linux ldconfig/ld.so.conf - 'cat /etc/ld.so.conf').

--Tonni

--
mail: [EMAIL PROTECTED]
http://www.billy.demon.nl

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Configure Samba with non-standard OpenLDAP location

2005-03-16 Thread Tony Earnshaw

Dariusz Lis:

 How to configure (and compile) Samba with non-standard OpenLDAP location?
 Is it possible?

Basically, yes. It all depends on where the LDAP libraries (libldap,
liblber) were told to look for ${prefix} during the OpenLDAP compilation.
When Samba source (or srpm installation) is compiled, it should find them
automatically, depending on your systems library database (e.g.Red Hat
Linux ldconfig/ld.so.conf - 'cat /etc/ld.so.conf').

--Tonni

--
mail: [EMAIL PROTECTED]
http://www.billy.demon.nl

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: ***SPAM*** Re: [Samba] Configure Samba with non-standard OpenLDAP location

2005-03-16 Thread Theodore Jencks
I'm having a similar problem where the configure just doesn't find the
ldap libraries even though I've got the ldap-devel rpm installed and the
libraries are in their normal location in /usr/lib.

-TJ

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Tony Earnshaw
Sent: Wednesday, March 16, 2005 12:15 PM
To: Dariusz Lis
Cc: samba@lists.samba.org
Subject: ***SPAM*** Re: [Samba] Configure Samba with non-standard
OpenLDAP location


Dariusz Lis:

 How to configure (and compile) Samba with non-standard OpenLDAP
location?
 Is it possible?

Basically, yes. It all depends on where the LDAP libraries (libldap,
liblber) were told to look for ${prefix} during the OpenLDAP
compilation.
When Samba source (or srpm installation) is compiled, it should find
them
automatically, depending on your systems library database (e.g.Red Hat
Linux ldconfig/ld.so.conf - 'cat /etc/ld.so.conf').

--Tonni

--
mail: [EMAIL PROTECTED]
http://www.billy.demon.nl

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Configure Samba 3 to auth off a MIT KDC.

2004-09-28 Thread Bruce Marriner

Perhaps I proposed the patch to the wrong audience.  There are some
people who have an existing Kerberos site, and have even followed the
painful Microsoft howto on joining an MIT realm, and wish Samba to play
ball.  

This is certainly not possible with Win98, so I suggest you instead just
setup a normal Samba domain.
 

  Now that's quite a let down I was sure this was possible from 
somewhere :).  All the clients currently login to Samba and the only 
thing I was wanting samba to do is check their password off the KDC 
server.  They don't need to login to the KDC or be given a ticket - just 
use it as a password database.  Is there no pam options where I could 
use pam_krb5 or something along those lines? 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Configure Samba 3 to auth off a MIT KDC.

2004-09-28 Thread Andrew Bartlett
On Tue, 2004-09-28 at 22:54, Bruce Marriner wrote:
 Perhaps I proposed the patch to the wrong audience.  There are some
 people who have an existing Kerberos site, and have even followed the
 painful Microsoft howto on joining an MIT realm, and wish Samba to play
 ball.  
 
 This is certainly not possible with Win98, so I suggest you instead just
 setup a normal Samba domain.


 Is there no pam options where I could 
 use pam_krb5 or something along those lines? 

Domain Logons are technically incompatible with plaintext
authentication, and plaintext authentication is incompatible with the
whole idea behind kerberos - that is, no plaintext on the network...

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Authentication Developer, Samba Teamhttp://samba.org
Student Network Administrator, Hawker College   [EMAIL PROTECTED]


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Configure Samba 3 to auth off a MIT KDC.

2004-09-24 Thread Bruce Marriner
I have a Samba 3 server running as my domain controller and want to 
configure it to authenticate user passwords off a MIT KDC server that
is already up and running.  I have the KDC client software installed on 
the Samba box and it will authenticate users using it's tools.
I have been looking for some sort of a how-to but I have not found 
anything that works or explains much very well.  Most of them
give rough examples on how to connect to a Windows ADS but that's not 
what I'm doing.  I would appreicate it if anyone here
knows of a working how-to on setting up this configuration.  Currently 
my smb.conf contains the following lines (among others). 

  realm = REALMNAME.COM
  security = ADS
  encrypt passwords = yes
When I try to connect to the samba server the smbd kicks out the error  :
check_ntdomain_security: could not fetch trust account password for 
domain 'REALMNAME.COM'

 From what I have read this relates to Samba not being 'connected' to 
the ADS realm (which I do not have).  I have however
attempted the command net ads join which returns various errors. 


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] configure samba -RH 7.3

2004-03-16 Thread Vickriz V. Buenaventura
good day to all sambba guru..

im encountering problem witth my installation/configure of samba.
after the ./configure and make and make install i do this:

TESTING SAMBA SERVER
[EMAIL PROTECTED] samba]# smbclient -L Hobbit
added interface ip=172.16.0.107 bcast=172.16.0.255 nmask=255.255.255.0
error connecting to 127.0.0.107:139 (Connection refused)
Error connecting to 127.0.0.107 (Connection refused)
Connection to Hobbit failed

CONNECTING TO MY UNIX CLIENT
[EMAIL PROTECTED] samba]# smbclient //POLMAP/pchome
added interface ip=172.16.0.107 bcast=172.16.0.255 nmask=255.255.255.0
wins_srv_died(): Could not mark WINS server 127.0.0.1 down.
Address not found in server list.
Connection to POLMAP failed

This is the content of my smb.conf after issuing testparm
/etc/samba/smb.conf
[EMAIL PROTECTED] bin]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section [homes]
Processing section [printers]
Processing section [public]
Processing section [raymndb]
Processing section [pchome]
Processing section [myshare]
Loaded services file OK.
# Global parameters
[global]
coding system =
client code page = 850
code page directory = /usr/share/samba/codepages
workgroup = POLMAP
netbios name = HOBBIT
netbios aliases =
netbios scope =
server string = Samba Server
interfaces =
bind interfaces only = No
security = USER
encrypt passwords = Yes
update encrypted = No
allow trusted domains = Yes
hosts equiv =
min passwd length = 5
map to guest = Never
null passwords = No
obey pam restrictions = Yes
password server =
smb passwd file = /etc/samba/smbpasswd
root directory =
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
passwd chat debug = No
username map =
password level = 0
username level = 0
unix password sync = Yes
restrict anonymous = No
lanman auth = Yes
use rhosts = No
log level = 2
syslog = 1
syslog only = No
log file = /var/log/samba/%m.log
max log size = 50
timestamp logs = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
protocol = NT1
large readwrite = No
max protocol = NT1
min protocol = CORE
read bmpx = No
read raw = Yes
write raw = Yes
nt smb support = Yes
nt pipe support = Yes
announce version = 4.5
announce as = NT
max mux = 50
max xmit = 65535
name resolve order = lmhosts host wins bcast
max packet = 65535
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
unix extensions = No
change notify timeout = 60
deadtime = 0
getwd cache = Yes
keepalive = 300
lpq cache time = 10
max smbd processes = 0
max disk size = 0
max open files = 1
read size = 16384
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
stat cache size = 50
use mmap = Yes
total print jobs = 0
load printers = Yes
printcap name = /etc/printcap
disable spoolss = No
enumports command =
addprinter command =
deleteprinter command =
show add printer wizard = Yes
os2 driver map =
strip dot = No
character set =
mangled stack = 50
stat cache = Yes
domain admin group =
domain guest group =
machine password timeout = 604800
add user script =
delete user script =
logon script =
logon path = \\%N\%U\profile
logon drive =
logon home = \\%N\%U
domain logons = No
os level = 20
lm announce = Auto
lm interval = 60
preferred master = True
local master = Yes
domain master = Auto
browse list = Yes
enhanced browsing = Yes
dns proxy = No
wins proxy = No
wins server =
wins support = Yes
wins hook =
kernel oplocks = Yes
oplock break wait time = 0
add share command =
change share command =
delete share command =
config file =
preload =
lock dir = /var/cache/samba
utmp directory =
wtmp directory =
utmp = No
default service =
message command =
dfree command =
valid chars =
remote announce =
remote browse sync =
socket address = 0.0.0.0
homedir map = auto.home
time offset = 0
NIS homedir = No
source environment =
panic action =
hide 

[Samba] configure samba

2003-09-24 Thread sonjaya
i try installed smab 3.0 beta
i configure like this :
 ./configure --prefix=/usr/local/samba --with-winbind
--with-winbind-auth-challenge --with-python --with-acl-support
--with-libsmbclient --with-quotas --with-syslog --with-nisplus-home
--with-ldapsam --with-pam_smbpass   --with-smbmount --with-automount
--with-mysql-prefix=/usr/local/mysql --with-ldap --with-ads
--with-smbwrapper --with-krb5=/usr/kerberos

then i try to make :
and get error like this :

Linking bin/smbd
/usr/local/lib/libkrb5.a(cc_file.o)(.text+0x1a5f): In function
`krb5_fcc_generate_new':
/usr/local/src/kerbe/krb5-1.3.1/src/lib/krb5/ccache/cc_file.c:2063: the
use of `mktemp' is dangerous, better use `mkstemp'
/usr/local/lib/libgssapi_krb5.a(util_crypt.o)(.text+0x250): In function
`kg_arcfour_docrypt':
/usr/local/src/kerbe/krb5-1.3.1/src/lib/gssapi/krb5/util_crypt.c:202:
undefined reference to `krb5int_accessor'
collect2: ld returned 1 exit status
make: *** [bin/smbd] Error 1

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] configure samba

2003-09-24 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
i try installed smab 3.0 beta
i configure like this :
 ./configure --prefix=/usr/local/samba --with-winbind
--with-winbind-auth-challenge --with-python --with-acl-support
--with-libsmbclient --with-quotas --with-syslog --with-nisplus-home
--with-ldapsam --with-pam_smbpass   --with-smbmount --with-automount
--with-mysql-prefix=/usr/local/mysql --with-ldap --with-ads
--with-smbwrapper --with-krb5=/usr/kerberos
 ^
then i try to make :
and get error like this :
Linking bin/smbd
/usr/local/lib/libkrb5.a(cc_file.o)(.text+0x1a5f): In function
  ^

Do you have 2 different kerberos installations?



cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 You can never go home again, Oatman, but I guess you can shop there.
--John Cusack - Grosse Point Blank (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/cabsIR7qMdg1EfYRAgoxAKCyYw8GaqkZH1HigqsAPwkwqlsMzQCbBAWO
NtjFC+9MHlfHN7Qb5wes108=
=0IaQ
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba