Re: [Samba] how to prevent copying programs on local harddisk from samba share

2010-10-14 Thread Michael Heydon
n copying a file and running it. I've never used it myself, but Windows can be locked down to only run specific programs. Out of curiosity, what does the program do that your users want to be able to write to it? Michael Heydon -- To unsubscribe from this list go to the following UR

Re: [Samba] local admin rights for roaming profiles

2010-08-09 Thread Michael Heydon
ou want, but it isn't terrific from a security point of view. I had a similar problem and in the end the simplest solution was to create a domain group called "Local Admins" and then add that to the local administrators group on each PC. -- Michael Heydon IT Administrator -- To un

Re: [Samba] samba to update DDNS

2010-06-15 Thread Michael Heydon
On 15/06/2010 3:57 PM, Andreas Moroder wrote: is it possible to let samba update the DNS entries in our bind DNS server whenever a windows PC connects to the network ? Why not do it from the DHCP server? That is the normal approach. You could probably make something using the preexec settings i

Re: [Samba] subfolder level restriction

2010-01-19 Thread Michael Heydon
e the obvious solution. Create groups called g1 and g2, add u1 to both groups, u2 to g1 and u3 to g2. Then chown root.g1 mrt1 , chown root.g2 mrt2 and chmod them both to 770 (or 750). If you want more flexibility, you can use ACLs (assuming your FS and OS support them). *Michael Hey

Re: [Samba] Migrating an NT4 domain to a Samba PDC - How to limit users access to only certain machines?

2009-12-16 Thread Michael Heydon
we need to limit certain users to have permission only to log in to their specific workstation. I'm not familiar with ClearOS, but if it uses an LDAP backend (and maybe even if it doesn't) the sambaUserWorkstations property should do what you want. *Michael Heydon - IT Administrat

Re: [Samba] One way Samba

2009-12-03 Thread Michael Heydon
.g. password and account management script settings), but I am giving some lines the benefit of the doubt and assuming you have them there for a reason (that may not have been the best assumption). I was going to go through and explain why I trimmed out each line, but there were too

Re: [Samba] Question regarding access to shares from LOCAL administrator account

2009-09-02 Thread Michael Heydon
inistrator to the share on the server. Are you sure you can't do it the normal way? Create a domain user and add them to the local administrators group on each PC? They wouldn't have to be domain admins if you didn't want to. *Michael Heydon - IT Administrator * micha...@ja

Re: [Samba] Password-less share, for certain users.

2009-09-02 Thread Michael Heydon
ection is used. "...which are specified as guest ok" *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Password-less share, for certain users.

2009-09-02 Thread Michael Heydon
nothing to compare against the valid users setting. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Password-less share, for certain users.

2009-09-02 Thread Michael Heydon
n't determine who can use the guest account. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Password-less share, for certain users.

2009-09-02 Thread Michael Heydon
s pointless. Usernames aren't private, if I can guess (or ask for) someones username then I could bypass your restrictions. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read t

Re: [Samba] User permissions on other users home directory

2009-09-02 Thread Michael Heydon
, set next parameter to 0775. create mask = 0700 # Directory creation mask is set to 0700 for security reasons. If you want to # create dirs. with group=rw permissions, set next parameter to 0775. directory mask = 0700 Change those. *Michael Heydon - IT Administrator * micha

Re: [Samba] FAT32 format HDD recognizes as NTFS

2009-08-26 Thread Michael Heydon
nt reporting that it is reiser. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Antwort: Re: central PDC + remote BDCs: LDAP strategy, my lack of comprehension

2009-08-21 Thread Michael Heydon
touch my LDAP setup). *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Enforcing local profile doesn't let Home Directory mapping

2009-08-19 Thread Michael Heydon
epth. I am learning these options as the users in the network are increasing. In your smb.conf, you have "interfaces" and "bind interfaces only" set. Read up on these options in the man page. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com

Re: [Samba] Enforcing local profile doesn't let Home Directory mapping

2009-08-19 Thread Michael Heydon
don't have any windows server in the network, I have one Ubuntu Server and samba is configured as PDC. I'm not sure what you are getting at here. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the f

Re: [Samba] Enforcing local profile doesn't let Home Directory mapping

2009-08-19 Thread Michael Heydon
bind interfaces only. Try adding your loopback interface to the list. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Enforcing local profile doesn't let Home Directory mapping

2009-08-18 Thread Michael Heydon
are run, so the user will have to log out and back in for any changes to take affect. It is a security risk (cpau doesn't encrypt the credentials, it uses some secret encoding) so it isn't suitable for everyone, but it works well for us. *Michael Heydon - IT Administrat

Re: [Samba] This is happening during config

2009-08-09 Thread Michael Heydon
distro's packages is much simpler and less likely to cause problems down the track. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mail

Re: [Samba] Samba using Server 2k3 DC for auth and ACL permissions

2009-07-27 Thread Michael Heydon
are likely to be in that group)? *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] System Wide recycle bin

2009-06-17 Thread Michael Heydon
cycle/current/%u/%P which appears to do the trick. I haven't tried, but I imagine the share name substitutions would probably work *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read

Re: [Samba] valid users VS users in conf

2009-05-18 Thread Michael Heydon
t the same. The most obvious issue is where two users happen to have the same password, they will both authenticate as the first user in the list. Can you paste your smb.conf? *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe f

Re: [Samba] Moving premises, new server at new building

2009-05-14 Thread Michael Heydon
bably have mentioned is that we also have a remote office which is running as an LDAP slave+BDC. The remote office can suffer some down time during the move without too much trouble but obviously they need to be up and running with what ever we use at the new site. We aren't using roaming prof

[Samba] Moving premises, new server at new building

2009-05-13 Thread Michael Heydon
anyone can point out any possible pitfalls we are likely to face. Thanks, -- *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba share of a NFS mount

2009-05-04 Thread Michael Heydon
ong as the samba server is the only NFS client accessing that share, but as soon as you have an NFS client accessing files that the samba clients have open things start to get messy. The proper way to do it is to run a samba server on the NFS server itself. *Michael Heydon - IT Administrat

Re: [Samba] User friendly URLs to shares

2009-04-30 Thread Michael Heydon
Jorgen Lundman wrote: possibly "save this to desktop and double click". vbscript, although a lot of mail servers will block it. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following

Re: [Samba] Samba with legacy LDAP

2009-04-22 Thread Michael Heydon
n't a common practice. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba with legacy LDAP

2009-04-22 Thread Michael Heydon
ons why this could not be done? Anyone already done something similar? Any pit-falls? I'm not certain that it is a good idea, but it's not impossible. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list

Re: [Samba] error 1310 when installing to a Samba share

2009-04-21 Thread Michael Heydon
Gary Dale wrote: I'm trying to install some income tax software to a Samba (Debian 3.2.5 i386) share and I'm getting the above error. Does it work correctly installing over the network to a windows host? *Michael Heydon - IT Administrator * micha...@jaswin.com.au <

Re: [Samba] Cannot login from windows

2009-02-24 Thread Michael Heydon
Once you have the basics, make a backup and then add things one at a time until you have all the functionality you require. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read t

Re: [Samba] Tunneling over SSH

2009-02-24 Thread Michael Heydon
over a VPN and would be immune to corruption as a result of interrupted connections. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] shell changed from root@ to administrator@

2009-02-23 Thread Michael Heydon
supha...@gmx.com wrote: here is my /etc/nsswitch.conf file::: OK, it is missing the bit I was thinking of (the passwd line), I'm more familiar with slackware than centos so I don't know where to go from here. I think your best bet would be to ask on a centos list. Good luck.

Re: [Samba] shell changed from root@ to administrator@

2009-02-22 Thread Michael Heydon
I can see your problem has nothing to do with samba. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] XP local policy vs Samba pdbedit?

2009-02-19 Thread Michael Heydon
pdbedit will overlap. If that is that case, then the domain controller settings apply to domain accounts and local settings apply to local accounts. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the followi

Re: [Samba] time sync issue

2009-01-15 Thread Michael Heydon
If you don't already have it, you will need to install/configure ntpd on your server and have it sync with a lower stratum host (you can make it sync to itself if it doesn't have internet access but that isn't ideal). Once it has had time to stabilise your clients should happil

Re: [Samba] time sync issue

2009-01-15 Thread Michael Heydon
s, but not samba? Samba3 isn't an AD DC there are several things that Windows can do that samba can't. I believe that SBS has "net time" in the default login script, obviously that would run into the same problem of users not being admins. So I guess most people probably u

Re: [Samba] logon script question

2009-01-14 Thread Michael Heydon
I use cpau, there is an associated security risk, but we decided it was acceptable. You could possibly also use WPKG, depending on what you are trying to achieve. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> wes wrote: If there a

Re: [Samba] Do I need a WINS server if I want to browse?

2008-12-17 Thread Michael Heydon
ork (In the time it took to ask if it was necessary you could have set it up several times over). Why not do it properly now rather than risk things breaking later? *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this l

Re: [Samba] replace winbind with ldap

2008-12-15 Thread Michael Heydon
on in LDAP. I believe vampire is the tool you are after. *Michael Heydon - IT Administrator * micha...@jaswin.com.au <mailto:micha...@jaswin.com.au> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Any possibility to apply policies on WinXP machines using samba 3.2.3 ?

2008-12-09 Thread Michael Heydon
you are done. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Specifying proxy server per user

2008-12-01 Thread Michael Heydon
27;re away. The other option is to use nt4 style policies (NTconfig.pol) however since Vista doesn't support these they are pretty much a dead end, might as well go with the vbscript from the start. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -

Re: [Samba] BDC/LDAP Question

2008-11-25 Thread Michael Heydon
point your BDC to your LDAP slave, and set the LDAP slave to issue a redirect to the LDAP master when it gets a write request. Assuming the BDC can talk to the LDAP master everything should just work. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To

Re: [Samba] Print only server

2008-11-24 Thread Michael Heydon
under user security and works perfectly. This also paves the way for easy administration of security should you decide to implement it down the road. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL

Re: [Samba] Print only server

2008-11-24 Thread Michael Heydon
rom the server, the result is something like what you describe. The quick solution is "use client drivers = yes", the proper solution is to load the drivers onto the server. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe fro

Re: [Samba] Outlook and roaming profiles?

2008-11-18 Thread Michael Heydon
clude any local mail store from roaming and just let it populate everything from IMAP at first logon. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba

Re: [Samba] files to trash

2008-11-17 Thread Michael Heydon
p, between the recycled module and the tape backups, but to be honest, since this has been up and running I hardly ever look at the recycled stuff. If someone wants something recovered it is far simpler to grab it from the rsync copy. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <

Re: [Samba] Access Denied to Printers / Same thing here - SOLVED once (*almost)

2008-11-09 Thread Michael Heydon
e client driver = yes" to your global section. This will get rid of the error, which is pretty much harmless anyway. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions

Re: [Samba] Getting a list of users mapped to IP addresses they are logged in from

2008-11-04 Thread Michael Heydon
Didster wrote: We also have a company Wiki remove the need to manually login to the Wiki. Does any one know of a better way? NTLM auth module for apache. Assuming you are using an apache web server. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>

Re: [Samba] how to setup an open share?

2008-10-26 Thread Michael Heydon
ng as your guest user has rwx permissions in the relevant location. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Create user home directory or user-own folder on samba server on first login to samba

2008-10-21 Thread Michael Heydon
Русаков Денис wrote: I'd like to create user home directory or user-own folder on samba server on first login to samba without using PAM I use this along with a "root preexec" (and "preexec close") setting on the homes share. *Michael Heydon - IT Adminis

Re: [Samba] Question about switching from Windows 2k Server to SAMBA 3 under Centos

2008-10-21 Thread Michael Heydon
n of salt, but isn't 2k capable or running in two different modes? One where it is pure AD and one where it is compatible with NT4? If it was in NT4 mode then might not vampire have a chance? Or am I thinking of some 2k->2k3 change maybe? *Michael Heydon - IT Administrator * [EMAIL PR

Re: [Samba] How does the "guest account" param work?

2008-10-17 Thread Michael Heydon
ost likely entirely suitable. You might find it easier in the long term to start over again with the standard config that ships with samba and only add settings that you actually need. (e.g. messing with buffer settings has been depreciated for quite some years). *Michael Heydon - IT Adm

Re: [Samba] How does the "guest account" param work?

2008-10-16 Thread Michael Heydon
t;map to guest" sort things out). *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] How does the "guest account" param work?

2008-10-16 Thread Michael Heydon
public] share and the guest home dir. If there are 'guest ok = Yes' defined shares, then I would expect to still be able to browse the workgroup and see available shares on the samba host, albeit only those 'guest ok' defined shares. And I certainly wouldn't expect to see

Re: WG: [Samba] Strange!!! Clients only log on to samba bdc

2008-09-18 Thread Michael Heydon
"closest" to them. If the PDC is taking longer to respond or something then they may consider the BDC to be the best choice. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the inst

Re: [Samba] samba and ssl certificates?

2008-09-10 Thread Michael Heydon
so I can't tell you how to use it, but there should be plenty of docs around. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba VFS recyclebin hide

2008-09-09 Thread Michael Heydon
users could just go into the linked directory. Why not just set "repository = /some/path/that/isnt/shared/recycle" (note the absolute path), same effect, no messing with symlinks. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscrib

Re: [Samba] Inexistant file displayed by samba

2008-09-04 Thread Michael Heydon
Oops, I should probably cc the list :( You should look on your Samba server to see if there are funny looking three letter files named "con" or "com" or such. It's not necessarily three letters, anything with a ":" or "\" in it's

Re: [Samba] samba + LDAP issue

2008-08-31 Thread Michael Heydon
t. where can i find document? Samba by example at samba.org should get you up and running. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/m

Re: [Samba] speed limit

2008-08-21 Thread Michael Heydon
could you please tell me at least one tool to do this? I need to limit speed not for all tcp trafik, only samba. Under linux, a mixture of tc and iptables should do the trick, but it's not for the faint of heart ;) -- *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailt

Re: [Samba] speed limit

2008-08-20 Thread Michael Heydon
Drunix wrote: Hello, Does anybody know how to limit ul/dl speed for shares? Thanks in advance. Samba doesn't do this, you would need to implement bandwidth shaping using what ever tools are appropriate for your OS. Please don't send duplicate messages. *Michael H

Re: [Samba] ldap.conf

2008-08-12 Thread Michael Heydon
Michael Heydon wrote: I've had a quick flick through the docs and I can't see any explicit instructions on how to set up NSS I stand corrected, it is in chapter 5 of Samba by Example. It has a samba ldap.conf for NSS_LDAP. *Michael Heydon - IT Administrator * [EMAIL PROTECTE

Re: [Samba] ldap.conf

2008-08-12 Thread Michael Heydon
have their own docs. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] UPPER letters for machine accounts

2008-08-08 Thread Michael Heydon
about case. Have a good weekend :) *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba & Vista [SOLVED]

2008-08-05 Thread Michael Heydon
in XP and probably 2k as well. The only way that I know of to really change a username rather than just change the name that is shown, is to create a new user, migrate the profile and delete the old account (of course this can introduce it's own problems). *Michael Heydon - IT Admi

Re: [Samba] Rename to open file doesn't work, why?

2008-07-27 Thread Michael Heydon
MB/CIFS doesn't understand the concept of having a deleted file open. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] start server script after logon

2008-07-22 Thread Michael Heydon
ble option. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Create masks set to 770 yet new files created as 750

2008-06-24 Thread Michael Heydon
thought of as a bit-wise MASK for the UNIX modes of a file. **Any bit not set here will be removed from the modes set on a file when it is created.** So the masks define which bits CAN be set, the force modes define which bits WILL be set. *Michael Heydon - IT Adminis

Re: [Samba] Hostname not visible across 2 subnets

2008-06-22 Thread Michael Heydon
want an all round solution you need DNS. The upside is that you already have DNS (as mentioned above) so you can point client2 at the DNS server on the admin network, you might be able to set the DHCP server on the client2 network to do this automatically. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Strange Samba permissions on vfat (fat32) volume

2008-06-16 Thread Michael Heydon
adonly = No Tries to change unix permissions, which wont work on a fat fs. guest ok = No Default value. oplocks = No level2 oplocks = No Thanks to all. None of that should have any effect on the problem at hand, but it is kind of pointless to define

Re: [Samba] samba auth against imap?

2008-06-15 Thread Michael Heydon
bling encrypted passwords, which requires changes on each client and reduces security. Sounds like a good time to ask for money to develop an LDAP based system :) *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the follo

Re: [Samba] Some kind of weird setup ...

2008-06-12 Thread Michael Heydon
Jan Patrick Lübbert wrote: This machine than shares this (mounted) share again to other machines (linux and windows) via Samba. Don't speak about performance and how silly this is, but at the moment I don't see other ways to do what I need. What do you need? Could you use DFS?

Re: [Samba] Samba and XP

2008-06-10 Thread Michael Heydon
ither way it tends to be bad news. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smb signing is incompatible with share level security !

2008-06-10 Thread Michael Heydon
is incompatible with share level security ! security = share server signing = Auto *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/li

Re: [Samba] limit user connections to PDC

2008-06-09 Thread Michael Heydon
in a lab environment, and we'd like to prevent users from logging into 5 machines at once. I've looked through the smb.conf man page pretty thoroughly, but nothing appears to address this problem. Anyone have any ideas, how you can limit the amount of logins a user can have to teh domain?

Re: [Samba] do i need posix users/groups in ldap

2008-06-06 Thread Michael Heydon
o have two seperate user dbs I'm sure you could hack something together, but it would completely eliminate the main advantage of LDAP. If you aren't interested in the benefits of having a single db, why are you using LDAP? Why not use one of the other simpler backends? *Michael Heydo

Re: [Samba] CVE-2008-1105

2008-06-06 Thread Michael Heydon
is not affected I think this comes from the fact that 0.4 > 0.29 I know I have had issues in the past trying to explain that it isn't a decimal point and that version 1.10 is later than 1.9 despite the fact that mathematically 1.9 is greater. *Michael Heydon - IT Administrator * [E

Re: [Samba] Home Lan computer browser(s)

2008-06-03 Thread Michael Heydon
. Domain master is only needed if your network spreads across multiple subnets. You should only have one per workgroup/domain. Local master this is only really needed if you have a machine that you definitely don't want to be in charge of anything, otherwise the default of yes is fine.

Re: [Samba] windows share vs. linux share access

2008-06-03 Thread Michael Heydon
mba-share smb is depreciated, use cifs if possible. According to the logs my authentication is failing for linux clients: [ 7066]: pam auth crap domain: [DOMAIN] user: username That doesn't look like a failure to me. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAI

Re: [Samba] Nessus test issues with open shares

2008-05-28 Thread Michael Heydon
I think something went wrong here (at least I hope you don't have 4 global sections). Joseph P Villa wrote: ... [global] ... [global] ... [global] ... [global] ... Joseph P Villa, IT Services USGS Mounds View, MN Also this doesn't mention LOGS$ or ARCSERV$. *Michael H

Re: [Samba] printer drivers - Add Printer Wizard disabled

2008-05-27 Thread Michael Heydon
arameter has been marked deprecated in favor of using the SePrintOperatorPrivilege and individual print security descrip- tors. It will be removed in a future release. You can use the "net" command to grant SePrintOperatorPrivilege to your user. *Michael

Re: [Samba] Somewhat bizzare share issue

2008-05-22 Thread Michael Heydon
ort" by any chance do you? *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] permissions

2008-05-21 Thread Michael Heydon
solarflow99 wrote: Hi, My question is since I am using LDAP as the backend, root can't easily be used; does anyone have any recommendations on how this can be done? Why don't you create an "Administrator" user in ldap that has uid 0? *Michael Heydon - IT Administrato

Re: [Samba] monitoring file access levels?

2008-05-15 Thread Michael Heydon
yself but I have heard of people using them successfully. Also I believe Vista has some new stuff related to disabling usb storage, although I think it relies on AD GPOs. *Michael Heydon - IT Administratorr * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this lis

Re: [Samba] creating a master share

2008-05-15 Thread Michael Heydon
sharif islam wrote: On Tue, May 13, 2008 at 6:52 PM, Michael Heydon <[EMAIL PROTECTED]> wrote: [] Or you can use the above "force group" option to access the files as a group that does have access. Well, the problem is, each folder (such as /www/share1, /www

Re: [Samba] [Fwd: File Locking and Permissions Issue]

2008-05-14 Thread Michael Heydon
resolving this matter would be greatly appreciated. I think the list strips non-text attachments, so no excel file. Not that I think it's terribly important since it sounds like your system is working exactly as it should. Thanks, Jack Lauman *Michael Heydon - IT Administratorr * [EMAI

Re: [Samba] HowTo clear a share using smbclient ?

2008-05-14 Thread Michael Heydon
This seems a bit Rube Goldberg to me, you have direct access to the file system, why not use it? If you are really worried that rm -rf /full/path/to/directory might somehow morph into rm -rf / you could do something like: su nobody -c rm -rf /full/path/to/directory In the event that it did try

Re: [Samba] monitoring file access levels?

2008-05-14 Thread Michael Heydon
done? I don't want to re-invent a wheel if I can avoid it? Thankyou Carl *Michael Heydon - IT Administratorr * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] creating a master share

2008-05-13 Thread Michael Heydon
group" option to access the files as a group that does have access. read only = No create mask = 0775 directory mask = 0775 *Michael Heydon - IT Administratorr * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the foll

Re: [Samba] Samba as nonroot

2008-05-13 Thread Michael Heydon
modify the source so it runs on different ports (although that would mean windows systems couldn't connect, you might be able to coax another samba machine into it), you would then have issues with permissions (you couldn't suid/sgid to the connecting user). *Michael Heydon - IT Adm

Re: [Samba] File & Printer Sharing With Windows98

2008-05-02 Thread Michael Heydon
27;t want anything fancy, you should be able to make a working config in less than 10 lines (more if you add more shares obviously). The first chapter has a 7 line example that should be enough to get you up and running. *Michael Heydon - IT Administratorr * [EMAIL PROTECTED] <mailto:[EMAIL PROTE

Re: [Samba] question, pdc bdc on diferent subnet

2008-04-27 Thread Michael Heydon
works fine. I'm not sure how other backends would handle synchronisation and lost communication between servers. saludos Maximo Monsalvo *Michael Heydon - IT Administratorr * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL a

Re: [Samba] Re: using samba as nfs server replacement?

2008-04-27 Thread Michael Heydon
e of course, I have root on my laptop). If I can then get my workstation to mount a share from my laptop, I can run that copy of bash from the network share and gain full root access to the workstation. Sudo would probably offer a way around this. Viele Gruesse! Helmut *Michael Heydon

Re: [Samba] Re: using samba as nfs server replacement?

2008-04-24 Thread Michael Heydon
y and mount it to my workstation. Viele Gruesse! Helmut The mount output looks OK to me. How old is the client's kernel (sorry, I'm not familar with distro version numbers/names)? Does it have CIFS Posix support built in (or the relevant modules loaded)? *Michael Heydon - IT Adm

[Samba] Re: using samba as nfs server replacement?

2008-04-24 Thread Michael Heydon
y file created by users logged into that machine, the ownership is changed to machine1 automatically. Is there any way to solve this problem? Thank you very much! Pakorn Can you send the output of "mount" (with the password removed if you so wish)? *Michael Heydon - IT Administr

Re: [Samba] using samba as nfs server replacement?

2008-04-23 Thread Michael Heydon
t would be greatly appreciated. Thank you! Pakorn *Michael Heydon - IT Administratorr * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

[Samba] OT: Vista & NTConfig.POL

2008-04-21 Thread Michael Heydon
guess I could push out .reg files through login scripts but I believe that might trigger UAC, any other suggestions? -- *Michael Heydon - IT Administratorr * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] Windows shortcuts and permissions

2008-04-21 Thread Michael Heydon
things so that each directory is in the right place and people have the correct permissions rather than creating binds all over the place to work around a poor file system layout. -- Michael Heydon -- To unsubscribe from this list go to the following URL and read the instructions: https://

Re: [Samba] Re: Samba / LDAP / Idmap

2008-04-14 Thread Michael Heydon
authentication. You can just make the second box look at the ldap server on the first, or if you like, run an ldap slave on the second machine for redundancy and have samba look at that. Thanks, Anand *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>

Re: [Samba] profiles limited to certain hosts

2008-04-14 Thread Michael Heydon
a soultion ? Thanks Andreas The user will be logged in with a temporary profile, any changes to the profile will be lost when they log out. Are some of the hosts off site or something? *Michael Heydon - IT Administrator * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- To unsubscribe from thi

  1   2   >