Re: [Samba] DNSMasq and OpenWRT as DHCP and Internal DNS

2013-09-05 Thread Gerry Reno
dnsmasq: not authoritative, no SOA, no NS, no master-slaves, just has caching and forwarding basically just a client side solution. --- If this has changed I would like to know. On 09/05/2013 02:26 PM, Szymon Życiński wrote: Hello I use DNSMasq on OpenWRT router, OpenWRT provides also

Re: [Samba] Losing Permissions of Files

2013-06-18 Thread Gerry Reno
On 06/18/2013 09:49 AM, Jonathan Buzzard wrote: On Tue, 2013-06-18 at 12:37 +1000, Andrew Bartlett wrote: On Wed, 2013-06-12 at 16:37 -0700, bogdan_bartos wrote: Are these directives working for samba 4??? This looks like samba 3 to me. We need a fix for samba 4... Samba 4.0 uses largely

Re: [Samba] samba4 + cups - it is working for someone?

2013-06-10 Thread Gerry Reno
On 06/10/2013 03:47 AM, steve wrote: On 09/06/13 20:16, Gerry Reno wrote: On 06/09/2013 06:45 AM, steve wrote: On 09/06/13 11:00, Adam Sienkiewicz wrote: Hi Steve I procceeded regarding this howtu. All seems to be fine except connection samba-cups. From windows I can add printer, print test

Re: [Samba] samba4 + cups - it is working for someone?

2013-06-10 Thread Gerry Reno
On 06/10/2013 12:16 PM, steve wrote: On Mon, 2013-06-10 at 09:54 -0400, Gerry Reno wrote: On 06/10/2013 03:47 AM, steve wrote: On 09/06/13 20:16, Gerry Reno wrote: On 06/09/2013 06:45 AM, steve wrote: On 09/06/13 11:00, Adam Sienkiewicz wrote: Hi Steve I procceeded regarding this howtu

Re: [Samba] samba4 + cups - it is working for someone?

2013-06-09 Thread Gerry Reno
On 06/09/2013 06:45 AM, steve wrote: On 09/06/13 11:00, Adam Sienkiewicz wrote: Hi Steve I procceeded regarding this howtu. All seems to be fine except connection samba-cups. From windows I can add printer, print test page but all print jobs from samba are lost between samba and cups I

Re: [Samba] Procedure for installing Windows drivers on Samba with CUPS

2013-05-22 Thread Gerry Reno
On 05/22/2013 07:41 AM, Tim Vangehugten wrote: Hi, Just an update: Tried today samba 4.0.6, printing works there with the automatic driver install. Best regards Tim Vangehugten I tried again after pulling 4.0.6 and it still does not install the cups drivers: #

Re: [Samba] Procedure for installing Windows drivers on Samba with CUPS

2013-05-22 Thread Gerry Reno
I tried again after pulling 4.0.6 and it still does not install the cups drivers: # PATH=/usr/local/samba/bin:$PATH cupsaddsmb -v -H localhost -U root -a Password for root required to access localhost via SAMBA: Running command: smbclient //localhost/print$ -N -A

Re: [Samba] Procedure for installing Windows drivers on Samba with CUPS

2013-05-16 Thread Gerry Reno
On 05/16/2013 10:46 AM, steve wrote: On Thu, 2013-05-16 at 15:22 +0200, Tim Vangehugten wrote: if only the printing in samba 4.0.5 would work that would be nice... Hi The printing doesn't work in 4.0.5 https://bugzilla.samba.org/show_bug.cgi?id=9745 maybe you could add this thread/your use

Re: [Samba] frequent tdb corruption

2013-05-14 Thread Gerry Reno
On 05/14/2013 05:59 AM, Adam Thorn wrote: Hi, I'm seeing regular tdb corruption; typical log messages are: tdb(/var/db/samba/sessionid.tdb): tdb_rec_read bad magic 0x42424242 at offset=672032 tdb(/var/db/samba/connections.tdb): tdb_rec_read bad magic 0x0 at offset=638594

Re: [Samba] frequent tdb corruption

2013-05-14 Thread Gerry Reno
On 05/14/2013 11:17 AM, Adam Thorn wrote: What type of filesystem are you using? Do you have barriers enabled? I know in Linux that you should set barrier=1 on the ext3/ext4 filesystem in order to prevent corruption of sam.ldb in cases of power loss. It's all on ZFS, so I don't believe

[Samba] Setting password expiration policy

2013-05-13 Thread Gerry Reno
Can I use samba-tool to globally set passwords to never expire like this: /usr/local/samba/bin/samba-tool domain passwordsettings set --max-pwd-age=0 Or do I have to set max age to some positive value and set expiration in ADUC when creating each user as Password never expires? -- To

[Samba] Samba4 CUPS: NT_STATUS_ACCESS_DENIED opening remote file

2013-05-13 Thread Gerry Reno
I'm setting up cups printing with Samba 4.0.5. I downloaded both the windows drivers and the postscript drivers and put them into /usr/share/cups/drivers/. I configured cups through the web interface. Created a printer and printed a test page. I edited smb.conf and put in the necessary

Re: [Samba] Samba4 CUPS: NT_STATUS_ACCESS_DENIED opening remote file

2013-05-13 Thread Gerry Reno
On 05/13/2013 03:59 PM, steve wrote: On 13/05/13 21:36, Gerry Reno wrote: I'm setting up cups printing with Samba 4.0.5. I downloaded both the windows drivers and the postscript drivers and put them into /usr/share/cups/drivers/. I configured cups through the web interface. Created

Re: [Samba] Samba git: build error when upgrading

2013-05-12 Thread Gerry Reno
On 05/12/2013 02:18 AM, Andrew Bartlett wrote: On Sat, 2013-05-11 at 20:11 -0400, Gerry Reno wrote: Running git clean -x -f -d does not help: $ git clean -x -f -d Removing .lock-wscript Removing bin/ warning: failed to remove 'bin/' Remove bin/, using rootly powers

[Samba] Samba git: build error when upgrading

2013-05-11 Thread Gerry Reno
Seeing a build problem after updating my git tree: $ git remote -v origingit://git.samba.org/samba.git (fetch) origingit://git.samba.org/samba.git (push) $ git pull $ ./configure ... $ make clean WAF_MAKE=1 python ./buildtools/bin/waf build

Re: [Samba] Samba git: build error when upgrading

2013-05-11 Thread Gerry Reno
On 05/11/2013 06:43 PM, Gerry Reno wrote: Seeing a build problem after updating my git tree: $ git remote -v origingit://git.samba.org/samba.git (fetch) origingit://git.samba.org/samba.git (push) $ git pull $ ./configure ... $ make clean WAF_MAKE=1

Re: [Samba] Making users local administrators

2013-03-21 Thread Gerry Reno
On 03/21/2013 05:29 AM, L.P.H. van Belle wrote: DONT DO IT !! This is Administrators 1ste rule !! NEVER, but then NEVER giver users Administrator/PowerUser rights. Do not give the users ability to install software, wrong wrong... This is you trojans/Virussus etc come in your computer.

Re: [Samba] Samba 4 AD DC and BIND

2013-03-20 Thread Gerry Reno
On 03/20/2013 02:59 AM, Daniel Müller wrote: /usr/local/samba/bin/samba-tool dns query yourdnshost.your.domain your.domain @ ALL Ex: samba-tool dns query samba4.tplechler.kkh tlechler.kkh @ ALL Will do: Password for [administra...@tplechler.kkh]: Greetings Daniel Hi Daniel, yes you're

Re: [Samba] Samba 4 AD DC and BIND

2013-03-20 Thread Gerry Reno
On 03/20/2013 08:59 AM, Gerry Reno wrote: On 03/20/2013 02:59 AM, Daniel Müller wrote: /usr/local/samba/bin/samba-tool dns query yourdnshost.your.domain your.domain @ ALL Ex: samba-tool dns query samba4.tplechler.kkh tlechler.kkh @ ALL Will do: Password for [administra...@tplechler.kkh

Re: [Samba] Samba 4 AD DC and BIND

2013-03-20 Thread Gerry Reno
I spent the better part of this morning playing around with samba-tool dns and also nsupdate -g. I was never able to add delegation records using this samba-tool dns. It always kept giving me errors about dns name not found. I was however fully successful at adding delegation records to

Re: [Samba] upgrade procedure

2013-03-20 Thread Gerry Reno
On 03/19/2013 05:37 PM, Andrew Bartlett wrote: On Tue, 2013-03-19 at 08:39 -0500, Cristian Saavedra wrote: Hello I'm upgrading to 4.0.4 as far as i remember the samba_upgradeprovision must not be used, so i'm asking for the current upgrade procedure: - configure samba 4.0.4 - make -

Re: [Samba] upgrade procedure

2013-03-20 Thread Gerry Reno
On 03/20/2013 09:17 PM, Gerry Reno wrote: On 03/19/2013 05:37 PM, Andrew Bartlett wrote: On Tue, 2013-03-19 at 08:39 -0500, Cristian Saavedra wrote: Hello I'm upgrading to 4.0.4 as far as i remember the samba_upgradeprovision must not be used, so i'm asking for the current upgrade procedure

Re: [Samba] Samba 4 AD DC and BIND

2013-03-19 Thread Gerry Reno
I have Samba 4 AD DC running with BIND9_DLZ. I am trying to use samba-tool to administer dns but I keep getting this error: # /usr/local/samba/bin/samba-tool dns query 127.0.0.1 company.com www.company.com ALL Password for [COMPANY\root]: Failed to bind to uuid

Re: [Samba] Samba 4 AD DC and BIND

2013-03-19 Thread Gerry Reno
On 03/19/2013 08:38 PM, Ricky Nance wrote: I seen this error recently myself, and haven't yet investigated whats going on for sure, but I suspect its the way dns_connect is parsing everything (I seen it with the | or ) ... try with -Uadministrator%password (replacing password to be the

Re: [Samba] Samba 4 AD DC and BIND

2013-03-19 Thread Gerry Reno
On 03/19/2013 09:00 PM, Ricky Nance wrote: Try samba-tool dns query netbiosname company.com http://company.com @ ALL -Uadministrator%HIDDEN (where netbiosname is generally the same as your computers hostname)... try to avoid using 127.0.0.1 or localhost. Also that error is often signs of

Re: [Samba] Samba 4 AD DC and BIND

2013-03-19 Thread Gerry Reno
On 03/19/2013 10:57 PM, Ricky Nance wrote: Try first a kinit administrator, then enter the administrator password, then /usr/local/samba/bin/samba-tool dns query COMPANY.company.com http://COMPANY.company.com company.com http://company.com/ @ ALL (notice no -U this time, and the format of

Re: [Samba] Samba 4 AD DC and BIND

2013-03-17 Thread Gerry Reno
When you setup Samba 4 AD DC using BIND9_DLZ and your domain has external servers (eg: www,mail) at external providers this means that the ISP and the internal network nameservers will both have SOA record for the domain. /etc/resolv.conf looks like this: domain company.com nameserver

Re: [Samba] Samba 4 AD DC and BIND

2013-03-17 Thread Gerry Reno
://ad.domain.com, etc...) If you really must use your external FQDN, a split-dns setup (your last statement) is probably going to be your only option. On Sun, Mar 17, 2013 at 3:57 PM, Gerry Reno gr...@verizon.net mailto:gr...@verizon.net wrote: When you setup Samba 4 AD DC using BIND9_DLZ

Re: [Samba] Samba 4 AD DC and BIND

2013-03-13 Thread Gerry Reno
On 03/13/2013 12:53 AM, Andrew Bartlett wrote: On Mon, 2013-03-11 at 19:16 -0400, Gerry Reno wrote: Since I am using views, where should I include the provision-generated named.conf? Just in the local network view? Why are you using views? My understanding is that these are normally used

Re: [Samba] Samba 4 AD DC and BIND

2013-03-13 Thread Gerry Reno
On 03/13/2013 01:39 PM, Gregory Sloop wrote: If you are doing that, then I suggest you find a different way to operate - the AD DC is the security heart of the network, and should be more protected than that. GR My AD DC is not directly connected to the internet. It is GR behind an

Re: [Samba] samba4 provision password complexity error

2013-03-11 Thread Gerry Reno
On 03/11/2013 01:09 AM, Gregory Sloop wrote: GR Ok I finally gave up and made something really complex: Administrator1 GR Boy, we feel really secure now.:rolleyes: GR RANT: I wish people would stop all this complexity nonsense and GR just let people set their passwords how they want

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Gerry Reno
...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Gerry Reno Gesendet: Sonntag, 10. März 2013 14:14 An: samba@lists.samba.org Betreff: [Samba] Samba 4 AD DC and BIND When setting up Samba 4 AD DC to use BIND DNS is it possible to use BIND located on a separate server? Or do you need

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Gerry Reno
When I ran the provision I selected BIND9_DLZ. The provision did not prompt me for a DNS forwarder IP. So after the provision finished I entered the DNS forwarder IP manually into smb.conf. Should the provision have prompted for the DNS forwarder IP? -- To unsubscribe from this list go to

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Gerry Reno
the named stuff, so you may need to find information specific to your distro on this. Ricky On Mon, Mar 11, 2013 at 11:30 AM, Gerry Reno gr...@verizon.net mailto:gr...@verizon.net wrote: When I ran the provision I selected BIND9_DLZ. The provision did not prompt me for a DNS

Re: [Samba] samba4 provision password complexity error

2013-03-11 Thread Gerry Reno
On 03/11/2013 06:32 PM, Andrew Bartlett wrote: On Sun, 2013-03-10 at 22:21 -0400, Gerry Reno wrote: I am trying to provision my samba 4 domain and even though I have deactivated password complexity using the samba-tool I still receive this error during the provision: ERROR(ldb): uncaught

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Gerry Reno
Since I am using views, where should I include the provision-generated named.conf? Just in the local network view? -Gerry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] samba4 AD DC as file server?

2013-03-11 Thread Gerry Reno
On 03/11/2013 06:34 PM, Andrew Bartlett wrote: On Tue, 2013-03-12 at 01:30 +0800, d tbsky wrote: hi: I want to setup a small samba4 server with AD and file server function. I know that samba4 AD DC has no netbios browsing support. are there other missing functions, like winbindd or

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Gerry Reno
. Ricky On Mon, Mar 11, 2013 at 6:16 PM, Gerry Reno gr...@verizon.net mailto:gr...@verizon.net wrote: Since I am using views, where should I include the provision-generated named.conf? Just in the local network view? -Gerry This is BIND views: http://www.cyberciti.biz/faq

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Gerry Reno
On 03/11/2013 08:50 PM, Ricky Nance wrote: I am not 100% sure, but anywhere in the named.conf config should be sufficient, DLZ is Dynamically Loadable Zones, so samba ends up being its own zone as far as I know. Ricky On Mon, Mar 11, 2013 at 7:43 PM, Gerry Reno gr...@verizon.net

[Samba] Samba 4 AD DC and BIND

2013-03-10 Thread Gerry Reno
When setting up Samba 4 AD DC to use BIND DNS is it possible to use BIND located on a separate server? Or do you need to run BIND on the same machine as Samba 4 AD DC? -- To unsubscribe from this list go to the following URL and read the instructions:

[Samba] samba4 provision password complexity error

2013-03-10 Thread Gerry Reno
I am trying to provision my samba 4 domain and even though I have deactivated password complexity using the samba-tool I still receive this error during the provision: ERROR(ldb): uncaught exception - 052D: Constraint violation - check_password_restrictions: the password does not meet the

Re: [Samba] samba4 provision password complexity error

2013-03-10 Thread Gerry Reno
On 03/10/2013 10:21 PM, Gerry Reno wrote: I am trying to provision my samba 4 domain and even though I have deactivated password complexity using the samba-tool I still receive this error during the provision: ERROR(ldb): uncaught exception - 052D: Constraint violation

Re: [Samba] samba4 provision password complexity error

2013-03-10 Thread Gerry Reno
On 03/10/2013 10:39 PM, Gerry Reno wrote: On 03/10/2013 10:21 PM, Gerry Reno wrote: I am trying to provision my samba 4 domain and even though I have deactivated password complexity using the samba-tool I still receive this error during the provision: ERROR(ldb): uncaught exception

Re: [Samba] sysvolreset failing on glusterfs

2013-03-06 Thread Gerry Reno
Do you have extended attributes enabled on your glusterfs filesystem? Out of curiosity, what version of glusterfs are you seeing this problem? On 03/06/2013 04:21 PM, Andreas Gaiser wrote: thanks for your answer. I don't think it's a permission issue, as the script is invoked as root and I

[Samba] Samba 4 using MIT Kerberos

2013-02-16 Thread Gerry Reno
I've been looking around trying to find status on Samba 4 AD DC using MIT Kerberos and didn't find anything real recent. Most of the wiki, list posts I see are about a year old talking about this. I'd like to know if there has been progress on this. Is it 0% , 99%? I saw that Fedora F18 had