RE: [Samba] UTMP duplicated entries

2005-09-21 Thread Kaplan, Marc
Windows does allow duplicate sessions actually. If you net use * \\hostname\share and then net use \\ipaddress\share for the same server you will get two connections to the same server on your client (you can even use different users). Is it possible that this is what some users are doing? Also mac

[Samba] RE: Active DNS registration on join realm?

2005-09-21 Thread Kaplan, Marc
If you're interested, Tridge put this code up with instructions at: http://us4.samba.org/samba/ftp/tsig-gss/ While I can't vouch for whether the code works, I can vouch that the author writes good code :). At the very least it could be a starting point for you. -Marc > -Origi

[Samba] RE: Proposal to allow owning group to edit ACLs.

2005-07-18 Thread Kaplan, Marc
> Indeed - as this is a security sensitive area it would definately > default to the current (safe) behaviour. Especially in case I screw > up the implementation :-). > > Jeremy. On that note :), let me know when it's implemented, I'll give it some initial testing. -Marc -- To uns

[Samba] RE: Proposal to allow owning group to edit ACLs.

2005-07-18 Thread Kaplan, Marc
Jeremy, I think this is really a great idea, and potentially a very valuable feature as long as group acl control = false by default. -Marc > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] g] > On Behalf Of Jeremy Allison > Sent: Monday, J

RE: [Samba] Problems with unicode filenames

2005-04-26 Thread Kaplan, Marc
age- > From: [EMAIL PROTECTED] [mailto:samba- > [EMAIL PROTECTED] On Behalf Of Kaplan, Marc > Sent: Tuesday, April 26, 2005 11:05 AM > To: Cristian Thiago Moecke; samba@lists.samba.org > Subject: RE: [Samba] Problems with unicode filenames > > Oh, you're using smbmount -- you

RE: [Samba] Problems with unicode filenames

2005-04-26 Thread Kaplan, Marc
Oh, you're using smbmount -- you didn't say so previously. As far as I know, smbmount doesn't support Unicode (can somebody confirm?), so you'll have to use the smbmount replacement, mount.cifs. See: http://www.samba.org/samba/docs/man/mount.cifs.8.html -Marc > -Original Me

RE: [Samba] Problems with unicode filenames

2005-04-26 Thread Kaplan, Marc
No, the parameter is named "unix charset", not "charset"! In smb.conf, you'll need a parameter that says: unix charset = UTF8 -Marc From: Cristian Thiago Moecke [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 26,

RE: [Samba] Problems with unicode filenames

2005-04-26 Thread Kaplan, Marc
Do you have unix charset = UTF8 in smb.conf? -Marc > -Original Message- > From: [EMAIL PROTECTED] [mailto:samba- > [EMAIL PROTECTED] On Behalf Of Cristian > Thiago Moecke > Sent: Tuesday, April 26, 2005 10:01 AM > To: samba@lists.samba.org > Subject: [Samba] Problems with

RE: [Samba] Re: How to turn on SMB signing

2005-03-22 Thread Kaplan, Marc
No, it has nothing to do with dfs; cifsfs is replacement for smbfs. See http://www.samba.org/samba/docs/man/mount.cifs.8.html for more information. -Marc > -Original Message- > From: [EMAIL PROTECTED] [mailto:samba- > [EMAIL PROTECTED] On Behalf Of Victor > Warner > Sent:

RE: [Samba] Domain Control

2005-03-10 Thread Kaplan, Marc
Nope, they just show up with that roll in a search, the don't perform any DC functionality. -Marc > -Original Message- > From: IslandBwoy [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 10, 2005 11:56 AM > To: Kaplan, Marc; Thomas Boutell; [EMAIL P

RE: [Samba] Domain Control

2005-03-09 Thread Kaplan, Marc
I have this same problem. I wrote it up here: https://bugzilla.samba.org/show_bug.cgi?id=1423, but Jerry couldn't reproduce it so he (rightly) marked it invalid. This is 100% reproducible for me (and apparently you also), every samba server I join to the domain, shows up with the role "Domain Con

RE: [Samba] windows /bat script question

2005-03-09 Thread Kaplan, Marc
This is definitely a kludgy way of doing it, but if I had that problem and wanted to solve it quickly, I would put a file named THISISSERVER1 on \\server1\projects\. This way you can do an "if exist p:\THISISSERVER1" test. This is ugly, but it will work. -Marc > -Original Mess

RE: [Samba] Difference Copy and Move at inheriting

2005-03-08 Thread Kaplan, Marc
This is just the way filesystems work. Doing a move of a file/directory does no kind of re-evaluation of permissions/ACLs, because it's essentially just doing a rename. You can see the same thing with Windows, create a file named c:\a.txt, then create a directory named c:\a.dir. Set some inherita

RE: [Samba] winbind_idmap.tdb not being updated

2005-03-07 Thread Kaplan, Marc
As far as I know it will only be updated when you add a new user/group to your domain. If you're concerned about this, add a new test user or group to your domain, and see if winbindd_idmap.tdb gets updated. -Marc > -Original Message- > From: [EMAIL PROTECTED] [mailto:samba

RE: [Samba] Can't fetch domain SID

2005-03-04 Thread Kaplan, Marc
What if you run net groupmap list? Can you see the domain SIDs as part of the group SIDs there? If so, I would think you could use net setlocalsid to restore it. -Marc > -Original Message- > From: [EMAIL PROTECTED] [mailto:samba- > [EMAIL PROTECTED] On Behalf Of Steve Zeng

RE: [Samba] AD group membership limits?

2005-03-02 Thread Kaplan, Marc
Simon, Yes, I have recompiled the kernel with support for a static NGROUPS with a patch from tridge and Rusty Russell. This does not seem to cause any problems at all on Samba servers, or with the Linux box in general and it does properly allow more supplementary groups. Here is what I used IIRC:

RE: [Samba] Netbench controller crashs

2005-03-02 Thread Kaplan, Marc
The controller for NetBench is the computer that is responsible for coordinating the NetBench test, and collecting results. -Marc > -Original Message- > From: [EMAIL PROTECTED] [mailto:samba- > [EMAIL PROTECTED] On Behalf Of Denis > Vlasenko > Sent: Wednesday, March 02, 20

RE: [Samba] Netbench controller crashs

2005-03-01 Thread Kaplan, Marc
Do you have another fileserver, perhaps a Windows box that you could test this against? It really doesn't sound like a Samba problem, and if you can rule that out, you should submit a bug to Veritest (who wrote the NetBench software). I have run multiple engines per client before without a problem

RE: [Samba] Problem with 3.0.10 and 3.0.11 with 1 smbd process using99% cpu

2005-03-01 Thread Kaplan, Marc
I have this same problem on 3.0.10, and I also "fixed" it by deleting the tdbs. My problem, had nothing to do with printing, it was happening once I started winbindd with security = ADS. Jerry, what would we need to do to track this bug down in the tdb code? I have logs at level 10, ltrace output

RE: [Samba] Authentication via both domain controller and local Sambapassword file

2005-03-01 Thread Kaplan, Marc
Try setting auth methods = sam winbind. IIRC when in domain authentication auth methods does not include users in the local sam, but my knowledge could be based upon an older version of samba, so you'll have to try it out. -Marc > -Original Message- > From: [EMAIL PROTECTE

RE: [Samba] samba 3 performance

2005-02-25 Thread Kaplan, Marc
Yes, I get more than 30MB/s performance. The benchmark I use (NetBench) is essentially CPU bound, such that a faster processor = faster performance. With a very fast hardware config (dual 3.2GHz processors), I've been able to hit around 100MB/s. Changing the RAM or other attributes does not buy me

RE: [Samba] Getting ads_connect: Strong authentication required whendoing ne t ads join

2005-02-24 Thread Kaplan, Marc
Yes, this is in fact caused by LDAP server signing requirements set to "Require Siging". I put a bug in previously here: https://bugzilla.samba.org/show_bug.cgi?id=765 And Jeremy Naylor created a patch to add TLS support in libads. The TLS method is potentially more secure, but it requires a certi

RE: [Samba] A smbd process pegging CPU at near 100% with v3.0.10-1FC2 RPM

2005-02-04 Thread Kaplan, Marc
Maybe it's stuck in a library call loop. Try ltrace -p 2170 -f -o smbd.2170.ltrace.out -Marc > -Original Message- > From: Kel Way [mailto:[EMAIL PROTECTED] > Sent: Friday, February 04, 2005 9:06 AM > To: Denis Vlasenko; samba@lists.samba.org > Subject: Re: [Samba] A smbd p

RE: [Samba] smbd/sesssetup.c:reply_spnego_kerberos(173) Failedtoverify incoming ticket!

2005-02-01 Thread Kaplan, Marc
One thing to rule out is that there is a clock difference of greater than 5 minutes between Samba Domain Member and the DCs. Make sure that you Samba Domain Member clock has approximately the same time as the DC. You can do net time set -S dcname/dcip. -Marc > -Original Messag

RE: [Samba] Problems with Access Control for Shares on Samba 2

2005-01-26 Thread Kaplan, Marc
Whops, switch read only = yes, cut and paste error. > -Original Message- > From: Kaplan, Marc > Sent: Wednesday, January 26, 2005 9:39 AM > To: remote; samba@lists.samba.org > Subject: RE: [Samba] Problems with Access Control for Shares on Samba 2 > > Jörg, > &g

RE: [Samba] Problems with Access Control for Shares on Samba 2

2005-01-26 Thread Kaplan, Marc
Jörg, I think if you want only one user to be able to write, but any user to be able to access you should change things as follows: [hobbit5] comment = hobbit5 path = /ALPHA-DATA/hobbit5 browseable = yes read only = no guest = ok write list = hobbit5 The valid use

RE: [Samba] 'security = ads' & 'valid users ='

2005-01-25 Thread Kaplan, Marc
that > will match UNIX accounts I will create for them. > > ry > > -Original Message- > From: Kaplan, Marc [mailto:[EMAIL PROTECTED] > Sent: Tuesday, January 25, 2005 2:19 PM > To: Ryan Frantz; samba@lists.samba.org > Subject: RE: [Samba] 'security = ads' &

RE: [Samba] 'security = ads' & 'valid users ='

2005-01-25 Thread Kaplan, Marc
I think as long as the passwords are the same, your approach of creating the domain users you need as local users will work. -Marc > -Original Message- > From: Ryan Frantz [mailto:[EMAIL PROTECTED] > Sent: Tuesday, January 25, 2005 11:04 AM > To: samba@lists.samba.org > Su