Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Daniel Müller
I think it is NO. If you think about what bind is doing?!: bind needs to read/write in ex.:/usr/local/samba/private/dns and reads /usr/local/samba/private/named.conf. In my case the named conf: dlz AD DNS Zone { # For BIND 9.8.0 database dlopen /usr/local/samba/lib/bind9/dlz_bind9.so;

Re: [Samba] Logon scripts

2013-03-11 Thread Daniel Müller
The welcome screen? The welcome screen is first logoff and then login again. All work of the user will be lost!? The locked screen is an item of security and it protects the authenticated users desktop. And as long the user is authenticated no other users has the right to drop in. Every other

[Samba] Samba4.0.3 AD DC + Solaris 11 Express

2013-03-11 Thread Immo Wetzel
Someone using this setup? I do not get the system running. The Solaris host joined successful the domain but authentification doesnt work. Are there any step by step description. ldaplist works but there is no response for 'getent passwd' elkberry -- To unsubscribe from this list go to the

[Samba] Weird behaviour of one Win7 user

2013-03-11 Thread Dr. Harry Knitter
Hello list, I have a samba 3.5.6 running on a Debian squeeze machine. This box is running since more than a year without any problems. Since a couple of days we have the following problem. One Win7 user doesn't get his user profile any more The log file tells: [2013/03/04 07:43:14.641151, 1]

Re: [Samba] Weird behaviour of one Win7 user

2013-03-11 Thread Gregory Sloop
DHK Hello list, DHK I have a samba 3.5.6 running on a Debian squeeze machine. This box is running DHK since more than a year without any problems. DHK Since a couple of days we have the following problem. DHK One Win7 user doesn't get his user profile any more DHK The log file tells: DHK

Re: [Samba] Weird behaviour of one Win7 user

2013-03-11 Thread Dr. Harry Knitter
Am Montag, 11. März 2013 schrieb Gregory Sloop: DHK Hello list, DHK I have a samba 3.5.6 running on a Debian squeeze machine. This box is running DHK since more than a year without any problems. DHK Since a couple of days we have the following problem. DHK One Win7 user doesn't get his user

[Samba] Windows 7 logon script not executed

2013-03-11 Thread List Mik
Hello, the configuration below, works like a charm for WinXP Prof. Clients: samba 3.5.6, configured as PDC, netlogon share, logon script is users.bat. The primary group of the Domainusers is users. the relevant parts of smb.conf: logon script = %G.bat [netlogon] path =

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread Daniel Müller
The behaviour of windows 7 concerning logon scripts (ingroup-feature) is quiet different to xp. Without posting your script there is no chance to help you. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread Ricky Nance
Just for testing add the following line to your [netlogon] root preexec = echo %u is in %G /home/samba/netlogon/groupname.txt then try a windows logon (it won't tell windows anything, but will create the file /home/samba/netlogon/groupname.txt), then on the samba server, cat

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread List Mik
Hi, The Script is a regular Dos/Windows batch file (users.bat) with net use commands, like: ... net use P: \\MyDomain\MySharename ... Thanks Mik Am 11.03.2013 13:13, schrieb Daniel Müller: The behaviour of windows 7 concerning logon scripts (ingroup-feature) is quiet different to xp.

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread List Mik
Very interesting, i tried that, but the file groupname.txt was not created at all. Maybe Win7 domain logon ignores the netlogon share completely? Thanks Mik Am 11.03.2013 13:30, schrieb Ricky Nance: Just for testing add the following line to your [netlogon] root preexec = echo %u is in %G

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread Daniel Müller
No it does! There should be a link to where the users has the right to write: [homes] ... %u preexec = echo %u is in %G /homedirectoryOfTheUser/groupname.txt or if you leave it this should work: root preexec = echo %u is in %G /home/samba/netlogon/groupname.txt

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread Daniel Müller
If all all users have the same users.bat!? Why not set: logon script = users.bat!? The differences per Group then could be done within this batch. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076

[Samba] Samba Bug 8881 still present in Samba 4.0.x?

2013-03-11 Thread Heinz Mueller
Hello list, could someone in the know please tell me if Samba Bug #8881 (username map not working in security=ADS) is still present in Samba 4.0.x? Best regards, Heinz Mueller -- Gesendet von meinem /sent from my FSC Scenic P320 ;-) Heinz Mueller PBG MBG SDTS EP HE BS FUJITSU Fujitsu

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread List Mik
i have about 100 users, with prim. group users, which should execute users.bat i have about 40 users, with prim. group exts, which should execute exts.bat i have ... yes, i could query the groupmemberships in one batch file, but i don't want to reengineer my current logon script structure, as

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread Steve Thompson
On Mon, 11 Mar 2013, List Mik wrote: Maybe Win7 domain logon ignores the netlogon share completely? You will also need something like: scriptPath: logon.bat in the user's entry as well as defining it in smb.conf. It will not be executed otherwise (as I have found by experience).

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread Daniel Müller
Believe me you can discuss about it or you can accept it. To have 50 per cent of my clients setup on Windows 7 was a lot of try and error. I had to reeingener all my policies and scripts. Good Luck Daniel --- EDV Daniel Müller Leitung EDV

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread List Mik
@daniel i understand your point, but it's to early for me to accept it ;-) . Thanks for your input. Mik Am 11.03.2013 14:51, schrieb Daniel Müller: Believe me you can discuss about it or you can accept it. To have 50 per cent of my clients setup on Windows 7 was a lot of try and error. I had

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread List Mik
@steve bingo. i was missing the attribute SambaLogonScript in my ldap user. set it to users.bat, and it worked. scriptPath: have not found this in the man page, and in my config, i don't need it. Thanks to all Mik Am 11.03.2013 14:33, schrieb Steve Thompson: On Mon, 11 Mar 2013, List Mik

Re: [Samba] samba4 provision password complexity error

2013-03-11 Thread Gerry Reno
On 03/11/2013 01:09 AM, Gregory Sloop wrote: GR Ok I finally gave up and made something really complex: Administrator1 GR Boy, we feel really secure now.:rolleyes: GR RANT: I wish people would stop all this complexity nonsense and GR just let people set their passwords how they want

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Gerry Reno
On 03/11/2013 03:52 AM, Daniel Müller wrote: I think it is NO. If you think about what bind is doing?!: bind needs to read/write in ex.:/usr/local/samba/private/dns and reads /usr/local/samba/private/named.conf. In my case the named conf: dlz AD DNS Zone { # For BIND 9.8.0

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread Steve Thompson
On Mon, 11 Mar 2013, List Mik wrote: scriptPath: have not found this in the man page, and in my config, i don't need it. scriptPath is the attribute name in Active Directory; it's what you would use with Samba4. Steve -- To unsubscribe from this list go to the following URL and read the

[Samba] username map is not functioning

2013-03-11 Thread Shaw, Kevin
All, When the company upgraded AD from 2003 to 2008R2 users lost the ability to access Samba shares without being prompted for a password. I've upgraded Samba from 3.0.30 to 3.6.6. I would like to continue using username map to map my users however it appears the map is being ignored. The only

[Samba] Issue with Oplocks

2013-03-11 Thread Greg Zartman
I've been using Samba for a number of years and suddenly Samba started throwing oplock errors and I simply can't figure out why. I've not changed any config parameters in some time, but have updated my version of samba as new packages become available for my distro. I'm running Centos 5.9 and

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Gerry Reno
When I ran the provision I selected BIND9_DLZ. The provision did not prompt me for a DNS forwarder IP. So after the provision finished I entered the DNS forwarder IP manually into smb.conf. Should the provision have prompted for the DNS forwarder IP? -- To unsubscribe from this list go to

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Ricky Nance
With the BIND9_DLZ backend, bind actually handles the forwarding, so you will need to set that up in your named conf, something like the following: options { forwarders { 192.249.249.1; 192.249.249.3; }; }; Although, some distros break apart the named stuff, so you may need to find information

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Gerry Reno
On 03/11/2013 12:53 PM, Ricky Nance wrote: With the BIND9_DLZ backend, bind actually handles the forwarding, so you will need to set that up in your named conf, something like the following: options { forwarders { 192.249.249.1; 192.249.249.3; }; }; Although, some distros break apart the

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Rowland Penny
On 11/03/13 16:30, Gerry Reno wrote: When I ran the provision I selected BIND9_DLZ. The provision did not prompt me for a DNS forwarder IP. So after the provision finished I entered the DNS forwarder IP manually into smb.conf. Should the provision have prompted for the DNS forwarder IP?

[Samba] samba4 AD DC as file server?

2013-03-11 Thread d tbsky
hi: I want to setup a small samba4 server with AD and file server function. I know that samba4 AD DC has no netbios browsing support. are there other missing functions, like winbindd or something else? and if I install two samba4 instance, one to /usr/local/samba(for file server), one to

[Samba] samba 4.0.3 compiling fails on freebsd 9.1

2013-03-11 Thread Joeri Vanthienen
Hi, I have a problem compiling samba 4.0.3 on freebsd 9.1. root@freebsd-san:/root/samba-4.0.3 # uname -a FreeBSD freebsd-san 9.1-RELEASE FreeBSD 9.1-RELEASE #0 r243825: Tue Dec 4 09:23:10 UTC 2012 r...@farrell.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC amd64

Re: [Samba] samba 4.0.3 compiling fails on freebsd 9.1

2013-03-11 Thread Timur I. Bakeyev
Use ports for this, please. On Mon, Mar 11, 2013 at 6:32 PM, Joeri Vanthienen m...@joerivanthienen.bewrote: Hi, I have a problem compiling samba 4.0.3 on freebsd 9.1. root@freebsd-san:/root/samba-4.0.3 # uname -a FreeBSD freebsd-san 9.1-RELEASE FreeBSD 9.1-RELEASE #0 r243825: Tue Dec 4

Re: [Samba] username map is not functioning

2013-03-11 Thread G.W. Haywood
B0;261;0cHi there, On Mon, 11 Mar 2013, Kevin Shaw wrote: When the company upgraded AD from 2003 to 2008R2 users lost the ability to access Samba shares without being prompted for a password. I've upgraded Samba from 3.0.30 to 3.6.6. I would like to continue using username map to map my users

[Samba] Samba/Winbind/LDAP connection issue.

2013-03-11 Thread Frank Bakhit
Hi, I been having issue with my samba/winbind, since I update from samba 3.5 to 3.6. below is the error I am getting from my log file and the samba config file. I am running Red Hat 6.4. nmbd[2188]: [2013/03/10 13:25:14.327717, 0] nmbd/nmbd_namequery.c:108(query_name_response) Mar 10 13:25:14

Re: [Samba] username map is not functioning

2013-03-11 Thread Shaw, Kevin
This appears to be an IDMAP username mapping issue not an issue with the username map file. I think this is not an issue with the username map file. Thanks for the reply. -Kevin On Mon, 11 Mar 2013, Kevin Shaw wrote: When the company upgraded AD from 2003 to 2008R2 users lost the ability

Re: [Samba] samba4 provision password complexity error

2013-03-11 Thread Andrew Bartlett
On Sun, 2013-03-10 at 22:21 -0400, Gerry Reno wrote: I am trying to provision my samba 4 domain and even though I have deactivated password complexity using the samba-tool I still receive this error during the provision: ERROR(ldb): uncaught exception - 052D: Constraint violation -

Re: [Samba] samba4 AD DC as file server?

2013-03-11 Thread Andrew Bartlett
On Tue, 2013-03-12 at 01:30 +0800, d tbsky wrote: hi: I want to setup a small samba4 server with AD and file server function. I know that samba4 AD DC has no netbios browsing support. are there other missing functions, like winbindd or something else? The next release will include this

Re: [Samba] samba4 provision password complexity error

2013-03-11 Thread Gerry Reno
On 03/11/2013 06:32 PM, Andrew Bartlett wrote: On Sun, 2013-03-10 at 22:21 -0400, Gerry Reno wrote: I am trying to provision my samba 4 domain and even though I have deactivated password complexity using the samba-tool I still receive this error during the provision: ERROR(ldb): uncaught

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Gerry Reno
Since I am using views, where should I include the provision-generated named.conf? Just in the local network view? -Gerry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] samba4 AD DC as file server?

2013-03-11 Thread Gerry Reno
On 03/11/2013 06:34 PM, Andrew Bartlett wrote: On Tue, 2013-03-12 at 01:30 +0800, d tbsky wrote: hi: I want to setup a small samba4 server with AD and file server function. I know that samba4 AD DC has no netbios browsing support. are there other missing functions, like winbindd or

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Ricky Nance
Sorry I don't understand what you mean by views... the provision generated named.conf should be inserted into your /etc/named/named.conf (again this varies on different distros) as an include directive, it is not meant to be a full named.conf. Ricky On Mon, Mar 11, 2013 at 6:16 PM, Gerry Reno

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Gerry Reno
On 03/11/2013 08:27 PM, Ricky Nance wrote: Sorry I don't understand what you mean by views... the provision generated named.conf should be inserted into your /etc/named/named.conf (again this varies on different distros) as an include directive, it is not meant to be a full named.conf.

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Ricky Nance
I am not 100% sure, but anywhere in the named.conf config should be sufficient, DLZ is Dynamically Loadable Zones, so samba ends up being its own zone as far as I know. Ricky On Mon, Mar 11, 2013 at 7:43 PM, Gerry Reno gr...@verizon.net wrote: On 03/11/2013 08:27 PM, Ricky Nance wrote:

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Gerry Reno
On 03/11/2013 08:50 PM, Ricky Nance wrote: I am not 100% sure, but anywhere in the named.conf config should be sufficient, DLZ is Dynamically Loadable Zones, so samba ends up being its own zone as far as I know. Ricky On Mon, Mar 11, 2013 at 7:43 PM, Gerry Reno gr...@verizon.net

[Samba] Trying to understand authentication

2013-03-11 Thread Shaw, Kevin
I am running Solaris 10 u8 running Samba 3.6.6. Windows server 2008R2 runs AD. I don't understand samba authentication and hope someone might be able to help me understand the process. The following configuration appears to be functional. NIS is running and Winbind is not. Pam.conf has not

[Samba] SaMBa 4 - Dialing guide

2013-03-11 Thread Celso Viana
Hi all, The user properties does not appear to guide dialing. This feature is available in Samba4? Thanks -- Celso Vianna BSD User: 51318 http://www.bsdcounter.org Palmas/TO -- To unsubscribe from this list go to the following URL and read the instructions:

[SCM] Samba Shared Repository - branch v3-6-test updated

2013-03-11 Thread Karolin Seeger
The branch, v3-6-test has been updated via 17113c3 vfs_catia: new version of the manual page for samba-3.6.x via ddb98ca vfs_catia: add my copyright via ad8fe62 vfs_catia: fix the translation to vfs_translate_to_windows via 58ac0d3 vfs_catia: add debug class for

[SCM] Samba Shared Repository - branch v4-0-test updated

2013-03-11 Thread Karolin Seeger
The branch, v4-0-test has been updated via e4cd11d vfs_catia: add my copyright via 048434c vfs_catia: add a sample for filename mapping to the manual page via 2ebd2ca vfs_catia: fix the completely outdated manual page via 0a719b7 vfs_catia: fix the translation to

[SCM] Samba Shared Repository - branch master updated

2013-03-11 Thread Michael Adam
The branch, master has been updated via 58e385a Revert Ensure the masks don't conflict with the ACL checks. via fc496ef smbd:posix_acls Remove incorrectly added lp_create_mask() and lp_dir_mask() calls from 287b5f6 param: Remove incorrectly added defaults in AD DC allowing

[SCM] Samba Shared Repository - branch master updated

2013-03-11 Thread Jeremy Allison
The branch, master has been updated via fb924d0 s3: remove some dead code (for setdir command) from 58e385a Revert Ensure the masks don't conflict with the ACL checks. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2013-03-11 Thread Michael Adam
The branch, master has been updated via 389197e scripting: No longer install samba_upgradeprovision from fb924d0 s3: remove some dead code (for setdir command) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log