james schrieb:
Robert rob.smb at connectfree.co.uk writes:
I am experiencing the following problems with the [homes] shares.
Using Samba 3.0.9 and winbind on SLES9 with NT PDC.
Running wbinfo -a authenticates users ok but I cannot connect using
smbclient.
If I comment out 'valid users = %S' from
Hi,
Ritch Melton schrieb:
Hi,
I'd like to upgrade my 2.2 samba to the latest 3.x stable, so I'm
experimenting with the new features of 3.x on a RHEL 3 clone. I've run
into some difficulty when using usrmgr.exe for administrating users.
I've filled out the 'add user script' define with:
Hi,
i think you do not get the point:
This is not a single point of failure.
Getting your server sharing to the internet will give you nothing.
Why?
1st showstopper:
The admin of the pc you want to access your server from will have denied
outgoing traffic for all smb-packets from the local LAN to
Hi,
[...]
However, when I run smbpasswd -a -i rumba I get the following:
phoenix:~ # smbpasswd -a -i ada
New SMB password:
Retype new SMB password:
Failed to initialise SAM_ACCOUNT for user ada$. Does this user exist in
the UNIX password database ?
Failed to modify password entry for user ada$
4147413
http://www.dcdata.co.za
[EMAIL PROTECTED]
Powered by Linux, driven by passion !
___
Computers are not intelligent. They only think they are.
- Original Message - From: Christoph Scheeder
[EMAIL PROTECTED]
To: David Wilson [EMAIL PROTECTED]
Cc: samba
Hi,
what i do is the following setup for linux-servers and time:
1.) set hardware-clock to GMT,
2.) tell the system the hardwareclock is set to GMT (how depends on distro)
3.) set local timezone to GMT+2 (again, depends on distro)
4.) check all win-Clients to have the correct
Hi,
J. Strohschnitter schrieb:
Hi list,
I have problems working samba 3.0.9 with VFS recycle. I have made an exculde
to a folder on the share, but any file that was deleted out of this folder,
still moved to trash. Also all files from exclude (like .tmp ...) were stored
to trash.
Another problem
Hi,
you didn't tell us your distribution etc, so this is a bit guesswork.
you need a verry recent version of kerberos libraries on your system.
If you use MIT-kerberos you need at least version 1.3.4.
for heimdal i can't recall the exact version.
Please search the list-archives for the minimal
Hi,
This was a limitation in samba 3.0.x up until 3.0.11-pre1.
Only the user mapped to root was able to join machines to a samba-domain.
In the latest version (samba-3.0.11-rc1) there have been added some
rights to allow joining of machines for other users.
have a look at
Hi,
could you be a little more informative about your setup?
we can't read your mind, nor can we look at your HD to find out what version of
samba you have installed, whats your os , distribution, version, smb.conf,
client-OS, patchlevel.
these are all informations needed to answer your
Hi again,
two things:
1.) you did restart samba after making the changes true?
2.) you have changed your line
guest = ok
to
guest ok = yes
Did you?
Christoph
remote schrieb:
Hi Christoph,
thanks for the help unfortunately your suggestion doesn´t change the
server´s behavior. hobbit5 still has
Hi,
you did activate the acl's in /etc/fstab for the filesystems in question and
restarted the server afterwards?
Christoph
Allen Miller schrieb:
I am using Samba-3.0.10 on a Red Hat 9.0 server. I compiled
Samba --with-acl-support. I am using kernel linux-2.6.10 also compiled with
acl support, I
Hi,
i guess nobody answered for some reasons:
1.) samba 2.2.0 is old today, verry old.
2.) you probably didn't give enough details on your problem.
what version of windows,
what servicepack,
what is in your smb.conf,
is the error reproducible,
does it occure for specific users,
is the samba-server
Hi,
this Z:mapping is a standard feature of win2k/xp if you do
domain-logons and have set logon path to a real path.
set it to
logon path =
This disables roaming profiles and the mapping of the Z: drive
completly. if you need roaming profiles you can alternatively set
logon drive = Y:
to make
Hi,
that behavior is logical correct, i would say.
What happens is:
the user is found from nis, and gets an userid not from the winbind-range.
As a result samba is not able to verify this uid against the AD, as it
is not an AD-user-id.
i guess to achive what you want you would have to add the
Hi,
this is a symptom of having the samba .tdb files in a place where they
get deleted by the bootup-scripts of your distribution.
That is a very bad place for them.
Either modify the bootup-script(s) or recompile samba giving configure a
safe place for the .tdb files.
Christoph
Mark Le Noury
Norman Zhang schrieb:
Hi,
Is [netlogon] only applicable for Samba Domain Controllers? I like to
create use root preexec script to create home folders for first time
users. I'm currently running ADS mode, and using KiXtart logon script.
Would this work?
Regards,
Norman Zhang
Hi,
Creating
Hi again,
the answer is simple : you don't need net groupmap at all.
thats what the id-ranges in smb.conf are for:
the ADS-users and the ADS-groups are mapped by winbind to
user /group id's from the ranges specified and era presented
by nsswitch to the os like any other user group from local
Hi,
i would guess you have problems with name-resolution in DNS and/or WINS.
Either configure a local dns-server for your subnet on the
samba-machine(s) or setup the hosts/lmhosts files on all your machines
to show all other machines in the subnet.
Christoph
Marcus Andersson schrieb:
Hi everybody!
Hi,
is it possible you have other versions of samba/kerberos libraries
floating around in your system and the systemloader first finds wrong
versions of libraries when loading?
does
ldd /usr/local/samba/bin/net
show the correct/expectet dll's to load?
Christoph
Chris Vaughan schrieb:
Greetings,
I
winbind authenticated the user there is no part of samba involved
in the login process anymore.
Christoph
Tom Skeren schrieb:
Christoph Scheeder wrote:
Hi,
2 points:
1.) use the smb.conf which gives you a working wbinfo.
2.) this sounds like missconfigured pam to me.
-you have to tell pam
Okay,
lets see if i understand this correct ;-)
you have a network with:
1 gateway/firewall to the internet (ip 192.168.0.1)
1 linux-pc which shall share his printer to the local network
(ip 192.168.0.4)
several other linux/windows pc's which shall be able to print.
all trafic is *not*
first:
STOP,
you want your samba-server to be a membersever in ADS, do you?,
then *remove* *all* bits referencing ldap from your smb.conf.
you entrust all user and groupmanagment to ADS via winbindd
and only via winbindd.
second:
you have configured winbindd not to give you the domain part
from
Hi,
2 points:
1.) use the smb.conf which gives you a working wbinfo.
2.) this sounds like missconfigured pam to me.
-you have to tell pam that winbind is sufficient for auth and
account with the lines
account sufficient pam_winbind.so and
auth sufficient pam_winbind.so
Hm,
this should work out of the box,
but you must install the tcp/ip-protocol (preferably the
tcp32b-version from microsoft) to your win3.11 clients
and you should remove all other protocols from these clients.
Samba only talks netbios over tcp, not native netbios.
Hope this helps
Christoph
jai
Robert Warner schrieb:
Hi,
Semi-not new to samba, used a previous version a long time ago.
I'm using samba on SuSE 9.0, samba version 'Version 2.2.8a-SuSE'
2 network cards on this machine, eth01. I've enabled the samba server
on this machine and it is functional. However, i only want samba to
Hi,
one smal but bad typo:
Tim Hodgkinson schrieb:
Here is my set up:
Fedora Core 2
Samba 3.0.7
Smb.conf:
[infosys]
comment = Information Systems Drive
path = /home/depts/infosys
valid users = @SSVMTN+it
admin users = @SSVMTN+Domain Admins
create mask
Holger Krull schrieb:
Christoph Scheeder schrieb:
Hi,
one smal but bad typo:
vfs objects = recycle
here: ^
has to be
vfs object = recycle
That's no typo. Both forms are allowed. From the docs
(http://sambafr.idealx.org/samba/docs/man/smb.conf.5.html):
vfs object
Thiago Lima schrieb:
I'm using Windows98 and I want to authenticate into samba with a
user that is not the one I'm logged in.
XP/2000 allows me to do that. In 98 I can't. There's any way to do
it?
Ex: I'm logged as thiago in windows98, but I want do access
\\sambaserver as
Hi,
this is no problem at all with samba 3.x, all you need is to
get your groupmapping set up correct and all is fine.
Have a look at the net groupmap command in 3.x.
In samba 3.x the handling of NT/Windows-groups was changed complete.
for details read through the fine doc's at samba.org about
Madhusudan, R schrieb:
Hi,
When I connect to SAMBA using a particular username, apart from the shares I created,
it appears that the home directory of the user logging in also shows up in the share
list.
I searched for a parameter using which I could control this, but was unsuccessful.
The
Baron Robert schrieb:
hi guys,
[]
-
Communication test from the linux server:
ping 10.0.0.1 = ok
smbclient -L -U administrateur = list all the share on the windws server.
test from the windows server:
ping melkor = ok
\\melkor\data = fail
Hi,
AFAIR, this is a known problem with w2k clients.
You have to upgrade your kerberos to something 1.3
preferably to the latest available version.
Christoph
Gordon Hopper schrieb:
I am using Samba with Active Directory. I have successfully joined my
Samba server to the domain D1 ( net ads
Hi,
maybe someone would have info on it, if you would provide all necesary
info's.
We can't read your mind, nor can we look over your shoulder. ;-)
- What exactly are you tring to do,
- what OS-versions/Distributions are involved,
- what is the behavior you see?
Christoph
David Wilson schrieb:
Hi,
Michal Kurowski schrieb:
Hi,
It's a basic firewall question I guess. Perhaps someone of you has
seen it.
I've got I firewall setup meant for my samba server protection.
The problem is it seems to block all broadcasts.
The error message:
[2004/09/22 17:43:47.572148, 0, pid=1505, effective(0,
Hi again,
Roland Giesler schrieb:
Hi,
another thing popes to my mind,
check if a nscd process is running on your box.
if yes stop it and remove it from the startup-scripts.
It is not compatible with with samba and windbindd and
may create strange effects.
Christoph
Yes, nscd was running, but I
Hi,
yes, we have seen this before.
It seems not to be a samba issue, as one of our customers has had this
symptoms in an winnt-only domain and they still persist after an upgrade
of the DC to win2k.
We have searched the complete network for problems, but couldn't find
anything. running out of
Roland Giesler schrieb:
I have a Mandrake 10.0 Official server running Samba3, Shorewall, Squid 2.5,
Postfix and Courier-IMAP.
Samba uses winbind to authenticate mail and proxy users against a windows
2000 ADS server.
I get corruption happening in the user's home directories and elsewhere.
The
Hi,
just to clarify this a bit, you want to have a share called directory_1.
In this share you want to have subdirectorys which are invisible to the
users, but writeable, like the so called hidden-folders in windows.
is this correct?
Then you need to set up the mapping for the hidden-flag of
Hi,
upgrade kerberos to a version 1.3.3
Christoph
Griffin, Patrick J schrieb:
Hello!
I hope someone can point me in the correct direction.
I'm trying to upgrade my Samba installation from 3.0.2 to 3.0.6 and, at
least for me, the upgrade introduces a problem with Kerberos.
3.0.2 smbclient
Hi,
i can't see an error anywhere, only two informational messages from gcc.
Christoph
steven schrieb:
I am compiling Samba 3.06 and get the following errors.
Redhat 7.3
.
Compiling dynconfig.c
Compiling smbd/build_options.c
Linking bin/smbd
Linking bin/nmbd
Linking bin/swat
Linking
Hi,
as you didn't mention it, i guess you use samba self-compiled on a
linux-system. ;-)
what is your kerberos-version?
it should be MIT-Kerberos =1.3.3.
Christoph
treklor schrieb:
When starting up Samba I get this error in log.winbindd.
I'm using Samba version 3.0.6.
What's wrong?
--
To
Hi,
i would sugest a dirty trick to get it:
setup the recycle-module for samba, set the name / repository-option (
depinding on version of samba) to /your/recycle/path/%U , andmake the
repository a veto-file so the users can't see it from windows.
Now your repository has a subdirectory for each
Hi,
your problem arises from abuse of the c$ share: ;-)
the shares ending in$-signs are so-called administrative shares.
Their use is restricted to adminitrator-users of the windows-machine,
as they are ment only for administrative tasks.
Never use these shares for real filesharing, create a
Hi,
try it with the command:
net groupmap delete sid=S-1-5-21-2643210455-489482773-813538922-512
for the first bad Domain admin group. using the sid should do the trick.
delete all mappings for Domain-groups not matching your samba-group,
then use the
net groupmap modify
command to update the
]
/SourceCache/samba/samba-56/samba/source/libads/kerberos_verify.c:
ads_verify_ticket(203)
ads_verify_ticket: failed to fetch machine password
On Aug 11, 2004, at 3:36 AM, Christoph Scheeder wrote:
Hi,
what's in your krb.conf?
AFAIR it should be realy minimalistic. (in fact mine doesn't even exist
Hi,
1.) Yes you definitly need the winbind/nss stuff, as it is the part of
samba that does what you want: ask an ADS server to verify the
credentials a user supplys when logging in to samba.
2.) no, it is not sufficient. But you need a working Kerberos library
to get winbind to work.
Christoph
Hi,
what's in your krb.conf?
AFAIR it should be realy minimalistic. (in fact mine doesn't even exist,
but i'm using a win2k server, not win2k3)
espacialy there shouldn't be settings for default encryption types.
Some persons reported these to produce problems.
And you definitly need a
Hi,
al relevant info's missing, so nobody can answer your question
distro?, version of distro?, kernelversion?, filesystem?
Christoph
David Kandou schrieb:
Dear ll,
i want to install samba with acl feature, can anyone tell me how to active
acl in samba 3
Do i must update my kernel.
Hi,
i think this DNS-fixes weren't a good idea.
These entrys are generated by ADS (AKA win2kx) servers to tell the other
windows-machines where to get the info's for ADS.
samba can't do ADS stuff at the moment, so you don't want these info's
in your DNS.
They only confuse the clients about the
Hi,
who owns /shared and whatare the permisions on it on the linux-side?
Christoph
Robin Wilson schrieb:
Hi
I have managed to successfully set samba up so that I can access my windows
shares from linux and my linux shares from windows, but, when I access my
linux shares from windows I cannot write
Hmm,
What's your kerberos version?
I would bet it is MIT-kerberos and the version is something lower then
1.3.3, isn't it?
If i'm correct you'll have to update your kerberos to a version =1.3.3
Christoph
Chris Goff schrieb:
I'm so close I can feel it :-)
I'm having a problem connecting users to
Hi,
you are trying to use the option wrong.
In 3.x it does not take a path anymore. Only the name of the vfs-object.
These objects are now located in a standard-path in the samba-lib directory.
the option vfs object = recycle is working fine for me with
samba-3.0.5.
Christoph
Jim C. schrieb:
OK,
Ermm...
have you read the complete mail from me? ;-)
it's all described at the bottom of it for 3.x
excerpt from that mail:
for the samba 3.x-branch the procedure has changed completly.
The VFS modules have been integrated in the normal make/install
process, so you don't have to compile them
Hi,
yes, samba can do that, kindof;-)
What you want is realized via pam.
You need to install the pam_mkhomedir module and configure it for all
services your users use to connect to your server.
After that the home-dir for each user will be created automagically the
first time the user trys to
Hi,
if testparm goes crazy on these parameters, are you shure its the
testparm matching the smbd you are running? perhaps its a leftover older
version which doesnt know these values? mine doesn't complain.
And yes the doc's for this are not easy to find.
AFAIR i found these parameters in the
Hi,
there are a few things to do to get this working with samba-2.x.x:
1.) build the vfs-modules, they are not compiled by the default makefile
in samba 2.x.x. To do this go in the samba-2.x.x/examples/VFS
directory and do a ./configure; make
2.) copy the module recycle/recycle.so to a
Hi,
your first attempt with using force group is correct, but your syntax
is not.
for force group you have to omit the '@' sign. it only takes the name
of the group.
for example :
force group = f
at least thats the way it works for me ;-)
Christoph
Mario Gamito schrieb:
Hi,
First of all,
groupnames.
Christoph
Mario Gamito schrieb:
Hi Christoph,
Thank you for your answer.
ok, i did that.
i suppose that now, assignin the user's primary group as their own, they
also can access their homes, right ?
Warm Regards,
Mário Gamito
On Tue, 2004-07-20 at 10:43, Christoph Scheeder wrote:
Hi
Hi,
first:
3.0beta2 is verry outdated. please go and get the latest stable version
from samba.org.
second:
after completing step 1, if your problem persists could you
be more detailed what your problem is? we can't read your mind... ;-)
third:
have you read all the doc's available with samba?
Hm,
this sounds as if your winbind-database got delete during the reboot.
Where is it stored? possibly in a place that gets cleand on every reboot
of the machine?
That effect bit me a while ago.
Christoph
[EMAIL PROTECTED] schrieb:
After a power loss (or anything else), the winbind database
Hi,
it is possible, but you'll have to install some packages manualy by
compiling them for your own.
these packages are kerberos and samba, as the versions in most distros
are to old to work correct as an ads-member in win2k3-ADS.
AFAIK you'll have to install MIT-kerberos 1.33 and, at the moment,
Err,
i think this is not a samba question, it is a security question.
But anyhow:
R U N ,
not walk to your box and set up a firewall on your system not
letting smb-shares to the internet and you should be fine for the
first moment. Then install chkrootkit on that box and run it.
I guess it will at
Hi,
remeber, after compiling and installing samba you have to copy the files
nsswitch/libnss_winbind.so and nsswitch/libnss_wins.so to /lib/ and
ln -sf /lib/libnss_winbind.so /lib/libnss_winbind.so.2
ln -sf /lib/libnss_wins.so /lib/libnss_wins.so.2
then copy nsswitch/pam_winbind.so to
Hi,
i got that working on woddy, but against a win2000 ADS.
How?
- fetched the latest soure of MIT-kerberos from mit-server
and installed in /usr/local, as the version comming with woody
is to old , it does not support the neede enc-types.
- fetched samba-3.0.5-pre2 from svn and compiled it
Hi,
What versions of samba and kerberos?
i had to install MIT-kerberos-v1.3.3 and samba-3.0.5pre1 to get this
working with a win2k-ADS-server, a samba-member-server and win2k
clients. Older Versions definitly didn't work.
Christoph
Owen, Mary schrieb:
I have a windows 2003 server and a SAMBA
Hi,
AFAIK, you can not obtain what you want with Win98-Clients.
Why? this is a Limitation of Win98.
It does not realy get incorporated into a domain,
it only handles it as a little bit better workgroup.
And for that does its own authentication stuff
and does not trust the PDC.
No Mater if the PDC
Hm,
any chance there are rests of an older kerberos-installation somewhere
on the box? an your os accidently loads older libraries?
or perhaps old samba pieces?
Christoph
Yohann Ferreira schrieb:
Note that I compiled MIT Kerberos 1.3.3 with :
--enable-dns-for-realm --without-krb4 --enable-shared
Hi,
Olaf Eichhorn, Vermessungsbüro Pfeifer schrieb:
Hi SAMBA users
Can anybody give me an working part of an smb.conf for vfs recycle?
I use SAMBA 3.0.2-7 on Fedora Core 1
I have read the samba howto and now I know the possible options but not
the right syntax. I found only examples for SAMBA
Hi folks,
after installing mit kerberos-1.3.3 and the samba.3_0-subversion tree
from yesterday i finally got my ADS-memberserver accessible from
win2k-clients. but now i have a little problem.
The samba server will be the main mailgatway for the site, so i need to
set the use default domain
Hi,
AFAIK you can get usrmgr and srvmgr in download from Micro$oft.
the file is called srvtools.exe and can be installed on nt,2k and xp.
Christoph
L. Claudius schrieb:
Also sprach Greg Folkert:
On Tue, 2004-05-18 at 21:48, L. Claudius wrote:
I'm creating roaming profiles for the Win98 boxes in
Hi,
my Situation:
a w2k-server set in mixed mode as ADS-Server,a debian machine with
latest stable samba compiled self with ADS-support.
samba machine joined to ADS-Domain succesfully, winbindd installed and
configured, all w2k users and groups visible on samba-server.
Browsing and connecting to
Hi,
setup:
Debian 3.0,
samba 3.0bx / latest cvs, self compiled.
options:
--with-syslog --with-quotas --with-utmp --with-msdfs \
--with-vfs --with-acl --with-pam
acces as domain-user to the samba-shares is working,
i set up pam support folowing the html-docs about ADS-support
and pam-login.
getent
73 matches
Mail list logo
