[Samba] 1st winbind 2nd vampire

2007-10-19 Thread Tilo Lutz
Hi I set up a samba server as domain memeber. I used winbind for user/ groupmapping. Now the samba server should replace the NT 4.0 PDC. I want to use net vampire to store the account database on the samba server. Will net vampire obey idmap mapping ot will the uid/gid number change?

[Samba] Problem with ntlm_auth

2005-10-15 Thread Tilo Lutz
Hi I use suse 10.0 and have problems to set up ntlm_auth for squid. It uses samba 3.0.20 and squid 2.5.stable10 I have set up winbind and everyhting seems to work. I've changes groupownerchip of /var/lib/samba/winbindd_privileged to squid. squid runs as group squid. Everyhting is working fine

Re: [Samba] Problem with ntlm_auth

2005-10-15 Thread Tilo Lutz
Hi Tilo Lutz schrieb: | I use suse 10.0 and have problems to set up ntlm_auth for squid. | It uses samba 3.0.20 and squid 2.5.stable10 Am Samstag 15 Oktober 2005 09:46 schrieb Robert Schetterer: perhaps you should change to 3.0.20b latest version of samba cause of winbind errors suse 10

[Samba] PRoblem with ntlm_auth

2005-10-15 Thread Tilo Lutz
Hi I use suse 10.0. I want to use ntlm_auth to authenticated users in squid. Unfortunatly when I try to test the helper I get this error: proxy:~ # /usr/local/sbin/ntlm_auth --helper-protocol=squid-2.5-basic --debuglevel=3 tilo *password* [2005/10/14 18:10:58, 3]

Re: [Samba] change machine password

2005-07-04 Thread Tilo Lutz
Hi Tilo Lutz schrieb: I use some programs to clone a windows workstation and duplicate it's image on other workstations. After cloning I change the workstation name and add a machine account on the samba pdc. Now I want to create a new password for the workstation account and store

[Samba] change machine password

2005-07-03 Thread Tilo Lutz
way to change the password? I know I can modify the file smbpasswd directly or change the password in ldap. But I want a clean solution working with every password backend. Best regards, Tilo Lutz -- To unsubscribe from this list go to the following URL and read the instructions: https

Re: [Samba] change machine password

2005-07-03 Thread Tilo Lutz
Tilo Lutz schrieb: I use some programs to clone a windows workstation and duplicate it's image on other workstations. After cloning I change the workstation name and add a machine account on the samba pdc. Now I want to create a new password for the workstation account and store

Re: [Samba] change machine password

2005-07-03 Thread Tilo Lutz
Am Sonntag, 3. Juli 2005 15:07 schrieb Tilo Lutz: Tilo Lutz schrieb: I use some programs to clone a windows workstation and duplicate it's image on other workstations. After cloning I change the workstation name and add a machine account on the samba pdc. Now I want to create

Re: [Samba] change machine password

2005-07-03 Thread Tilo Lutz
Tilo Lutz schrieb: I use some programs to clone a windows workstation and duplicate it's image on other workstations. After cloning I change the workstation name and add a machine account on the samba pdc. Now I want to create a new password for the workstation account and store it. Notebook:/etc

Re: [Samba] privileges in 3.11?

2005-02-03 Thread Tilo Lutz
Hi I try to assing privileges in 3.11 and get error. If I try to do this from root: net -S dm -U root rpc rights grant 'TEST\mail' SeMachineAccountPrivilege Password: Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED) I use tdbsam... I got the same problem. I use the

Re: [Samba] privileges in 3.11?

2005-02-03 Thread Tilo Lutz
Hi I try to assing privileges in 3.11 and get error. If I try to do this from root: net -S dm -U root rpc rights grant 'TEST\mail' SeMachineAccountPrivilege Password: Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED) I use tdbsam... I got the same problem. I

Re: [Samba] Re: Problem running kde

2004-11-17 Thread Tilo Lutz
Hi We use the exact same setup as you. We found NFS too insecure for our tastes aswell. Here are our experiences with it: http://lists.samba.org/archive/linux-cifs-client/2004-November/000477.html ( http://tinyurl.com/55ofl ) and:

Re: [Samba] Re: Problem running kde

2004-11-17 Thread Tilo Lutz
Hi On Wed, Nov 17, 2004 at 11:40:19AM +0100, Tilo Lutz wrote: I've tried out the registry patch. I'm now able to run kde applications like konqueror. But I can't start the kde display-manager via startx oder kdm. Startup still hangs. Jeremy wrote: If you're pointing it at a Samba server

Re: [Samba] Problem running kde

2004-11-15 Thread Tilo Lutz
Hi mount -t cifs -o username=test //127.0.0.1/test2 /home/test Not to completely dodge the question, but are you intending to always mount back to localhost or another unix machine for your automount sources? You may want to look at nfs for unix-unix remote fs tasks. Samba is fantastic

[Samba] Re: Problem running kde

2004-11-15 Thread Tilo Lutz
Hi Tilo Lutz [EMAIL PROTECTED] wrote: NFS is too insecure because it trusts remote id numbers and there is no way of authentication. Everone able to be root on a client can read all data on my server. Michael Kurowski wrote: Sorry, that's rubbish. Read the docs. Sure it is true. Example

[Samba] Re: Problem running kde

2004-11-15 Thread Tilo Lutz
Hi Tilo Lutz [EMAIL PROTECTED] wrote: Sure it is true. Example: I export /home on a server with no_root_squash and mount it as /home on the client. Say what ? Export with no_root_squash ? What do you think it is suposed to do ? Ups, I'm sorry, I mean root_squash. I looked

[Samba] Re: Problem running kde

2004-11-15 Thread Tilo Lutz
Hi Tilo Lutz [EMAIL PROTECTED] wrote: Ups, I'm sorry, I mean root_squash. I looked in the wrong line Although as local root it's possible to get access to data with su $user because with su the user id is not 0 and access will be granted. It is always possible - as long as your

[Samba] Problem running kde

2004-11-14 Thread Tilo Lutz
Hi I use linux 2.6.8, kde 3.3 and samba 3.0.7 on server and clients. I use ldap to store user accounts. On client side I want to use pam_automount to mount homedirs with pam. For testing i use a singele pc as server and client 1. I've created a user test. 2. I've mounted test's homedir with:

[Samba] Groups not displayed

2004-10-20 Thread Tilo Lutz
Hi I got a little problem with group mapping I've used a longer string, ITG, Klassenlehrer: Alfred Hein as displayName attribute in ldap. When I run net groupmap list everthing is fine but when I try to list all groups on a windows client only groups above this string are displayed. All other

Re: [Samba] Re: Groupmapping doesn't work

2004-10-13 Thread Tilo Lutz
Hi I got a problem with groupmapping. It doesn't work correct: Wilma2:/home/root # net groupmap list | grep 512 Domain Admins (S-1-5-21-3371203057-3264423045-2392767973-512) - domadm ldapsearch -x cn=domadm: # domadm, groups, wms-hn.de dn: cn=domadm,ou=groups,dc=my-domain

Re: [Samba] Re: Groupmapping doesn't work

2004-10-13 Thread Tilo Lutz
Hi I got a problem with groupmapping. It doesn't work correct: Wilma2:/home/root # net groupmap list | grep 512 Domain Admins (S-1-5-21-3371203057-3264423045-2392767973-512) - domadm ldapsearch -x cn=domadm: On Tuesday 12 October 2004 05:05, jamrock wrote: I could never get

[Samba] Groupmapping doesn't work

2004-10-09 Thread Tilo Lutz
Hi I got a problem with groupmapping. It doesn't work correct: Wilma2:/home/root # net groupmap list | grep 512 Domain Admins (S-1-5-21-3371203057-3264423045-2392767973-512) - domadm ldapsearch -x cn=domadm: # domadm, groups, wms-hn.de dn: cn=domadm,ou=groups,dc=my-domain objectClass:

Re: [Samba] Accounts are getting dsiabled

2004-07-03 Thread Tilo Lutz
Hi TL I have a problem with samba 3.0.5pre1. TL Many of my users are disabled by samba TL and I can't find the reason why. Hmm, not shure, did you look at the eventlog from your win box ?? i had something alike, (before 304) and the win log showed that the password change was corrupt (was

Re: [Samba] Accounts are getting dsiabled

2004-07-03 Thread Tilo Lutz
was corrupt (was a bug before 304).. On Sat, 2004-07-03 at 18:15, Tilo Lutz wrote: The problem is still there with samba 3.0.5pre1. Samba disbales some accounts by setting the AcctFlag to D. It is also _deleting_ sambaNTPassword and sambaLMPassword in my ldap database!. in log.smbd (loglevel 2

[Samba] Accounts are getting dsiabled

2004-06-29 Thread Tilo Lutz
Hi I have a problem with samba 3.0.5pre1. Many of my users are disabled by samba and I can't find the reason why. Here is an example of an user disbled by samba: Unix username:christ NT username: christ Account Flags:[DU ] User SID:

Re: [Samba] Add Hosts as Domain Admin

2004-05-10 Thread Tilo Lutz
administrator as far as windows is concerned. Tilo Lutz wrote: Hi I found a patch for Samba 3.0.2 allowing to add hosts as member of the domain admin group. (http://marc.theaimsgroup.com/?l=sambam=107938779530259w=2) Has anybody seen a patch for Samba 3.0.3? It took a look at srv_samr_nt.c

[Samba] Add Hosts as Domain Admin

2004-05-08 Thread Tilo Lutz
Hi I found a patch for Samba 3.0.2 allowing to add hosts as member of the domain admin group. (http://marc.theaimsgroup.com/?l=sambam=107938779530259w=2) Has anybody seen a patch for Samba 3.0.3? It took a look at srv_samr_nt.c but I don't think the old patch will fit. Why doesn't samba allow

Re: [Samba] samba quotas

2004-05-08 Thread Tilo Lutz
Hi Hi guys, we need to update our samba service from 2.2.8a to samba 3.0.x (so that we can upgrade our AD from Win2k to Win2k3). The problem I am having is with the quotas. I was never able to use the quota functions of samba. I use Suse 8.2 with Samba 3.0.3 and XFS. Even the latest samba

Re: [Samba] Samba disbales accounts

2004-04-07 Thread Tilo Lutz
Hi Tilo Lutz wrote: | I'm using Samba 3.03 and LDAP-backend. | If a user enters a wrong password the account | will be disabled immediately. | | I read it's possible to disable accounts after X wrong | passwords. | Where can I set X? | | Is it possible to disable that new feature

[Samba] Samba disbales accounts

2004-04-05 Thread Tilo Lutz
Hi I'm using Samba 3.03 and LDAP-backend. If a user enters a wrong password the account will be disabled immediately. I read it's possible to disable accounts after X wrong passwords. Where can I set X? Is it possible to disable that new feature? Tilo -- To unsubscribe from

[Samba] Strange problems with profiles

2004-01-26 Thread Tilo Lutz
Hi I use 2 samba servers (3.0.2rc1). One as PDC the other as BDC. Both are using ldap (sambaSamAccount) as backend. If I set profile path only in smb.conf every user gets an error message when loading a profile: Wrong path syntax. The clients did a connection to the server. If I set

[Samba] Allow symlinks outside of mointpoint

2004-01-12 Thread Tilo Lutz
Hi I have several linux-clients. The homedrive is mounted with pam_mount. I use cifs instead of smbfs. Everything is working exepct kde. kde creates a symlink from $HOME/filename to /tmp/filename2. Unforutanly the created symlink shows to $HOME/filename2 instead of /tmp/filename2. Where can I

[Samba] Question about groups in ldap

2003-12-12 Thread Tilo Lutz
Hi I have serveral questions about groups in ldap. Is it possible to use different groups with the same well known SID or is a well known SID only allowed once? Is it allowed to uses spaces in groupnames, e.g. domain admins? Afaik groups with spaces are not posix conform. In

Re: [Samba] Question about groups in ldap

2003-12-12 Thread Tilo Lutz
Am Fr, 2003-12-12 um 15.29 schrieb Gerald (Jerry) Carter: Tilo Lutz wrote: | In Samba-Developers-Guide.pdf included with samba 3.0 | page 72f. In the document well known groups have | special names starting with DOMAIN_. Can Windows clients | recognize these names and translate them

[Samba] N-Flag gone?

2003-11-17 Thread Tilo Lutz
Hi Is the N-flag gone in samba 3.0.1? I wasn't able to get any information about it. Although accounts set to no password weren't able to log in when the N-flag wasn't set. Were can I get some information about the new H- and S-flag Regards, Tilo -- To unsubscribe from this list go to the

Re: [Samba] Problem with winbind and pam

2003-11-11 Thread Tilo Lutz
Am Mo, 2003-11-10 um 11.02 schrieb Tilo Lutz: I've set up winbind with Suse 9.0 and Samba 3.0.1 Everything i working fine exepct pam configuration How can I use pam_winbind and pam_unix2 ? auth sufficient pam_winbind.so auth required pam_unix2.souse_first_pass

[Samba] Problem with winbind and pam

2003-11-10 Thread Tilo Lutz
Hi I'Ve set up winbind with Suse 9.0 and Samba 3.0.1 Everything i working fine exepct pam configuration How can I use pam_winbind and pam_unix2 ? auth sufficient pam_winbind.so auth required pam_unix2.souse_first_pass null_ok unix-users can login with correct password.

[Samba] LDAP Account Manager Beta1 released

2003-10-30 Thread Tilo Lutz
. For questions or implementing new features please use the forum and feature request tracker at our Sourceforge homepage http://www.sf.net/projects/lam. Author Copyright: --- Copyright (C) 2003: Michael Duergner [EMAIL PROTECTED] Roland Gruber [EMAIL PROTECTED] Tilo Lutz [EMAIL

Re: [Samba] Some Users not shown and profiles won't work

2003-10-28 Thread Tilo Lutz
Hi As written in my mail from sunday, some users are not recognized correctly. The can login to samba but windows doesn't show them in domain user list. Heres an error I've found in my setup. What does this error mean? I use Samba 3.0.1 and ldap-backend. Samba-domain object is saved in ldap,

[Samba] Some Users not shown and profiles won't work

2003-10-26 Thread Tilo Lutz
Hi I'm running samba 3.0 with ldap backand and Suse 8.2. If I want to edit ACLs from windows an a samba-share not all users are shown. holger i shown but hein isn't shown. Andy idea why? It's very strange because both can login the domain. I had to set attribute sambaProfilePath for user hein to

Re: [Samba] Problem with roaming profiles

2003-09-08 Thread Tilo Lutz
Am Son, 2003-09-07 um 15.23 schrieb Tilo Lutz: Hi After changing from samba 2.2.7 to 3.0.rc2 I can't get roaming profiles work. Clients Are W2K and XP. I've also switched from smbpasswd backend to ldap. Logon path is only set in smb.conf, not in ldap. Storing of profiles is working

[Samba] Problem with roaming profiles

2003-09-07 Thread Tilo Lutz
Hi After changing from samba 2.2.7 to 3.0.rc2 I can't get roaming profiles work. Clients Are W2K and XP. I've also switched from smbpasswd backend to ldap. Logon path is only set in smb.conf, not in ldap. Storing of profiles is working but it takes very long. I've tried logon path =

[Samba] LDAP Account Manager

2003-06-03 Thread Tilo Lutz
version and must not used in production environment but all main functions should work Please take a look at http://lam.sourceforge.net and report any bugs or suggestions. Regards, Tilo Lutz -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org