Re: [Samba] Re: using samba as nfs server replacement?

2008-04-24 Thread Helmut Hullen
Hallo, Pakorn, Du (pakorn) meintest am 24.04.08: There's a lot of different users who will log into the workstation, all of them are not superuser, therefore they can't run mount command and specify their samba username/password. You may set the SUID flag for mount,cifs and umount.cifs on

[Samba] Re: using samba as nfs server replacement?

2008-04-24 Thread Pakorn Chutinimitkul
Michael Heydon wrote: Pakorn Chutinimitkul wrote: Hi again, I updated Samba on both client and server to 3.0.28a. Client is openSuSE 10.2. Server is Debian Lenny. I noticed that newly created file's ownership will be changed to username that is used when mounting CIFS volume (under -o

Re: [Samba] Re: using samba as nfs server replacement?

2008-04-24 Thread Michael Heydon
Helmut Hullen wrote: Hallo, Pakorn, snip You may set the SUID flag for mount,cifs and umount.cifs on the server. That could be a security hazard. If we assume that cifs unix extensions can be made to work, I could bring in my laptop which contains a SUID root binary and mount it to my

Re: [Samba] Re: using samba as nfs server replacement?

2008-04-24 Thread Pakorn Chutinimitkul
The client is running 2.6.18 stock kernel. It shud be a year and a half old or so. I saw cifs module loaded. Here's the output from modinfo cifs filename: /lib/modules/2.6.18.8-0.7-default/kernel/fs/cifs/cifs.ko author: Steve French [EMAIL PROTECTED] license:GPL

Re: [Samba] Re: using samba as nfs server replacement?

2008-04-24 Thread Helmut Hullen
Hallo, Michael, Du (michaelh) meintest am 24.04.08: You may set the SUID flag for mount,cifs and umount.cifs on the server. That could be a security hazard. One mistake (from me): these flags must be set on the client. The client tries to mount, and it uses its local mount.cifs. If we

Re: [Samba] Re: using samba as nfs server replacement?

2008-04-24 Thread John Hodrien
On Thu, 24 Apr 2008, Helmut Hullen wrote: Du (michaelh) meintest am 24.04.08: You may set the SUID flag for mount,cifs and umount.cifs on the server. That could be a security hazard. One mistake (from me): these flags must be set on the client. The client tries to mount, and it uses its

Re: [Samba] Re: using samba as nfs server replacement?

2008-04-24 Thread Helmut Hullen
Hallo, Pakorn, Du (pakorn) meintest am 24.04.08: There's a lot of different users who will log into the workstation, all of them are not superuser, therefore they can't run mount command and specify their samba username/password. I tried to create a Samba account for each machine, say

Re: [Samba] Re: using samba as nfs server replacement?

2008-04-24 Thread Pakorn Chutinimitkul
Hi Helmut, I'll give it a try. Just for my curiosity, is there a way to bypass Samba's authentication? Thank you! Pakorn Helmut Hullen wrote: Hallo, Pakorn, Du (pakorn) meintest am 24.04.08: There's a lot of different users who will log into the workstation, all of them are not

Re: [Samba] Re: using samba as nfs server replacement?

2008-04-24 Thread Helmut Hullen
Hallo, Pakorn, Du (pakorn) meintest am 24.04.08: I'll give it a try. Just for my curiosity, is there a way to bypass Samba's authentication? That may (should) depend from the allowed users. In our LANs there is no user guest or nobody allowed, we haven't tried them. Viele Gruesse!

Re: [Samba] Re: profiles migrate

2008-04-24 Thread Maximo Mosalvo
[EMAIL PROTECTED] wrote: There is a tool I found that will join the computer to the new domain and then allow you to change the sid of the user profile to the new sid of the the new domain. Email me and I will email it to you. I do not remember where I got it from other wise I would have

[Samba] Re: 3.0.28a winbind fails to resolve sid-to-gid for local groups

2008-04-24 Thread Mike Brady
It looks like 3.0.28a may be the only release with these problems. 3.0.28 works fine. Although all releases are showing failed look ups for S-1-1-0 and S-1-5-2. Do these need to be added? I have opened Bug 5414. https://bugzilla.samba.org/show_bug.cgi?id=5414 On Thu, 2008-04-24 at 10:49 +1200,

[Samba] Re: profiles migrate

2008-04-23 Thread David . Grudek
There is a tool I found that will join the computer to the new domain and then allow you to change the sid of the user profile to the new sid of the the new domain. Email me and I will email it to you. I do not remember where I got it from other wise I would have sent you a link.

[Samba] Re: winbind v3.0.26a w. nss info = sfu; wbinfo fine, getent not

2008-04-23 Thread Jonathan Detert
wbinfo can turn names into sids, sids into names, and sids into uids. However, getent passwd only finds users in the local /etc/passwd file. Same for getent group. /etc/nsswitch.conf says this: passwd: files winbind group: files winbind shadow: compat I strace'd the

[Samba] Re: Samba + terminal services

2008-04-18 Thread Jamrock
Andy [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello everyone, I was wondering if there is any support for samba and terminal services? I currently have two windows boxes, one with terminal services installed and the other with active directory. From what I have seen

[Samba] Re: samba Digest, Vol 64, Issue 18

2008-04-18 Thread Gilles
At 12:01 18/04/2008 +, [EMAIL PROTECTED] wrote: veto files = /.??*/ Thanks. I guess hide dot files = yes is deprecated. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Can connect directly, but not browse samba server from Windows Workgroup network

2008-04-16 Thread Leonid Zeitlin
Konstantin, Just in case, check that nmbd is running. Thanks, Leonid Konstantin Gredeskoul [EMAIL PROTECTED] ???/ ? ?: news:[EMAIL PROTECTED] Dear Samba gurus, I have a Fedora 8 linux server, running samba 3.0.28a-0.fc8. I am doing the simplest thing of all -

[Samba] Re: valid users = +group doesn't work

2008-04-16 Thread Leonid Zeitlin
Hi Jerry, Thanks a lot for your quick reply. Please see below. Hi all, I seem to be having a problem identical to this bug: https://bugzilla.samba.org/show_bug.cgi?id=3940 in Samba 3.0.28, however the bug is supposed to be fixed by now. I have a Fedora 7 box joined as a member to Windows

Re: [Samba] Re: Samba / LDAP / Idmap

2008-04-15 Thread John Drescher
Should I be running winbindd in this situation? Not really, winbind is used for things like a samba server authenticating against a Windows server and NTLM authentication. You can just make the second box look at the ldap server on the first, or if you like, run an ldap slave on the

Fwd: [Samba] Re: Samba / LDAP / Idmap

2008-04-15 Thread John Drescher
Perhaps, though, I am asking the wrong question. Here is what I have (on one Linux server): - OpenLDAP - Samba 3.0, user data stored in LDAP - local Unix users / groups resolved via LDAP I have added another Linux machine and local Unix users / groups are resolved via

[Samba] Re: Samba / LDAP / Idmap

2008-04-14 Thread Anand Kumria
Hi Adam, On Mon, 14 Apr 2008 08:32:31 -0500, Adam Williams wrote: idmap will only be populated if you are using winbind. Ah, that is definately not clear from what I read. The configuration example and text http://us3.samba.org/samba/docs/man/

Re: [Samba] Re: Samba / LDAP / Idmap

2008-04-14 Thread Michael Heydon
Anand Kumria wrote: Hi Adam, On Mon, 14 Apr 2008 08:32:31 -0500, Adam Williams wrote: snip Here is what I have (on one Linux server): - OpenLDAP - Samba 3.0, user data stored in LDAP - local Unix users / groups resolved via LDAP I have added another Linux machine and local Unix users /

[Samba] Re: WINS and Subnets [was: Help: justification for Linux PDC vs Windows...]

2008-04-11 Thread Andrew Morgan
On Fri, 11 Apr 2008, Greg J. Zartman, P.E. wrote: You only need 1 WINS server for your organization (or 2 for redundancy). We have multiple subnets here at OSU and only 2 WINS servers. Our DHCP servers had out the WINS server IP addresses to all clients, and Samba is configured to use them

Re: [Samba] Re: How to create a write-only share?

2008-04-09 Thread Ash Gosh
Hi again, list! Please please please! Any indeas are highly welcome! It is possible with Linux? Maybe someone tried Solaris with ZFS with Samba? Should I try this maybe? Thanks in advance, A. On Tue, Apr 8, 2008 at 7:28 PM, Ash Gosh [EMAIL PROTECTED] wrote: It seems to be too complex

RE: [Samba] Re: How to create a write-only share?

2008-04-09 Thread Alex Harrington
Please please please! Any indeas are highly welcome! Ash - did you try setting hide unreadable = yes on the share as per my previous email? Alex -- Alex Harrington - Network Manager Longhill High School t: 01273 304086 e: [EMAIL PROTECTED] -- To unsubscribe from this list go to the

[Samba] RE: Samba 3.0.28a under Solaris 8 + libnss_winbind.so problem?

2008-04-08 Thread Oliver Weinmann
Hi, I'm really lost with this problem. Here is my /etc/pam.conf, maybe someone can help me, the system still keeps kicking me out of telnet and local console. id and group commands are now working, group is not working on every user. # #ident @(#)pam.conf 1.14 99/09/16 SMI # # Copyright (c)

RE: [Samba] RE: Samba 3.0.28a under Solaris 8 + libnss_winbind.so problem?

2008-04-08 Thread Oliver Weinmann
To: Oliver Weinmann Cc: samba@lists.samba.org Subject: Re: [Samba] RE: Samba 3.0.28a under Solaris 8 + libnss_winbind.so problem? Hi, does your /etc/nsswitch.conf contain the winbind name service modules? This should look like this: passwd: files winbind group: files winbind Oliver

Re: [Samba] RE: Samba 3.0.28a under Solaris 8 + libnss_winbind.so problem?

2008-04-08 Thread Dietrich Streifert
Hi, does your /etc/nsswitch.conf contain the winbind name service modules? This should look like this: passwd: files winbind group: files winbind Oliver Weinmann schrieb: Hi, I'm really lost with this problem. Here is my /etc/pam.conf, maybe someone can help me, the system

Re: [Samba] Re: How to create a write-only share?

2008-04-08 Thread Ash Gosh
It seems to be too complex for me. I'll share my config, please tell me what also I need to do: parts from smb.conf: nt acl support = yes acl compatibility = win2k map acl inherit = yes . [michael] path = /home/shared/michael valid users = +users read

[Samba] Re: How to create a write-only share?

2008-04-07 Thread Ash Gosh
On Fri, Apr 4, 2008 at 6:55 PM, Ash Gosh [EMAIL PROTECTED] wrote: Hi! I need to create a share that will be readoble by root only (by owner) and writeable for all. We replacing a dead Windows NT 4.0 server and there was a permission type called Add and our users uses this type of permission

Re: [Samba] Re: How to create a write-only share?

2008-04-07 Thread Scott Lovenberg
Ash Gosh wrote: On Fri, Apr 4, 2008 at 6:55 PM, Ash Gosh [EMAIL PROTECTED] wrote: Hi! I need to create a share that will be readoble by root only (by owner) and writeable for all. We replacing a dead Windows NT 4.0 server and there was a permission type called Add and our users uses this

Re: [Samba] Re: How to create a write-only share?

2008-04-07 Thread Jason Haar
Ash Gosh wrote: I need to create a share that will be readoble by root only (by owner) and writeable for all. Real easy. We did it to create a quarantine share for Windows AV agents to move viruses to. The share is world-writable - but not readable by anyone You simply create a share and

Re: [Samba] Re: How to create a write-only share?

2008-04-07 Thread Ash Gosh
On Mon, Apr 7, 2008 at 11:21 AM, Scott Lovenberg [EMAIL PROTECTED] wrote: I think I did this once a couple of years ago using NT style policy and the firewall policy object. IIRC, I did it all at the file system level; each computers' SYSTEM service was allowed to write to a text file that

RE: [Samba] Re: How to create a write-only share?

2008-04-07 Thread Alex Harrington
Thanks for the answer but in this case anyone can look into the folder and see the file list. Sometimes even a filenames could be the secret. So this is not helps us. Set hide unreadable = yes on the share. Alex -- Alex Harrington - Network Manager, Longhill High School t: 01273 304086 |

Re: [Samba] Re: How to create a write-only share?

2008-04-07 Thread Scott Lovenberg
Ash Gosh wrote: On Mon, Apr 7, 2008 at 11:21 AM, Scott Lovenberg [EMAIL PROTECTED] wrote: I think I did this once a couple of years ago using NT style policy and the firewall policy object. IIRC, I did it all at the file system level; each computers' SYSTEM service was allowed to write

Re: [Samba] Re: How to create a write-only share?

2008-04-07 Thread Ash Gosh
On Mon, Apr 7, 2008 at 12:29 PM, Jason Haar [EMAIL PROTECTED] wrote: Real easy. We did it to create a quarantine share for Windows AV agents to move viruses to. The share is world-writable - but not readable by anyone You simply create a share and set the following smb.conf settings

[Samba] Re: Redhat 3 upgrade

2008-04-07 Thread Scott Lovenberg
Alan Bunch wrote: I am currently running Red Hat v 3 samba rpm's. samba-common-3.0.9-1.3E.14.3 samba-3.0.9-1.3E.14.3 samba-client-3.0.9-1.3E.14.3 I would like to run the current release version to see if I can clean up some of the problems I am having. File locking and not releasing are the

[Samba] Re: Samba to ADS 2003

2008-04-04 Thread Jon Johnson
Mr. Gowda, Please review the following prior posts: HOW TO: Migrating users' locally-stored profiles from one domain or workgroup to a new domain http://lists.samba.org/archive/samba/2005-December/115326.html http://lists.samba.org/archive/samba/2005-December/115413.html Note that I have

[Samba] Re: Samba 3.0.28a under Solaris 8 + libnss_winbind.so problem?

2008-04-04 Thread Oliver Weinmann
It's getting even more strange. After a reboot i can now use id, group still doesn't work and my telnet and login session get disconnected after a few minutes. If I change the /etc/pam.conf back to normal I don't get disconnected. Any ideas? On 4/4/08, Oliver Weinmann [EMAIL PROTECTED] wrote:

[Samba] RE: Strong(er) authentication required when joining Active Directory (Samba 3.0.28)

2008-04-03 Thread Naadir Jeewa
Problem solved. The AD admin turned off server signing and samba is able to join the domain. -Original Message- From: Naadir Jeewa Sent: 01 April 2008 16:07 To: 'samba@lists.samba.org' Subject: Strong(er) authentication required when joining Active Directory (Samba 3.0.28) Hello all,

[Samba] Re: Samba/Ldap problems with Versions 3.0.24

2008-03-31 Thread Markus Kahle
Hi, Adam Tauno Williams wrote: we have similiar problems with samba+ldap after updating to 3.0.27. But in our case, the following ldap-Attributes won't get updated: sambaPwdMustChange sambaPwdCanChange only sambPwdLastSet gets altered. in newly created accounts the two Attributes even won't be

Re: [Samba] Re: pam_mkhomedir.so not working.

2008-03-31 Thread Brian May
Linux == Linux Addict [EMAIL PROTECTED] writes: Linux I finally got this started working for ssh after changing Linux things like privilege seperation, allowkerberos login Linux parameters in sshd_config. Still not sure about why su was Linux not working. Anyways thanks for your

[Samba] Re: [linux-cifs-client] Unable to mount using sec=none and mount.cifs

2008-03-31 Thread Jeff Layton
On Wed, 5 Mar 2008 14:34:13 -0500 Christopher DeMarco [EMAIL PROTECTED] wrote: I'm attempting to mount a CIFS share with the following stipulations: 1. I must have the UNIX extensions (specfically, symlinks). 2. I must use plaintext authentication (don't ask). I've

[Samba] Re: Samba 3.0.25b as a domain member to a Samba PDC

2008-03-30 Thread Jamrock
Greg Zartman [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I've been using Samba for about 7 years of so, but have hit a hurdle I just can't seem to figure out. I want to setup samba domain member servers to be members of a samba 3.0.25 (NT4 type) domain. No windbind, LDAP, or

Re: [Samba] Re: Samba 3.0.25b as a domain member to a Samba PDC

2008-03-30 Thread Greg J. Zartman, P.E.
A user cannot access a Linux machine unless he is authenticated by the machine. Jamrock, Many thanks for your very informative response. The makes complete sense really. Ultimately, I'm sure LDAP is the best solution and one I intend to look at in more detail. A message to the Samba

[Samba] Re: Samba with ldap backend password change trigger

2008-03-30 Thread Jamrock
Madars Vitolins [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, For samba acting as PDC with ldap backend (openldap) is it possible to hook some how password change event? So that if user in windows changes domain user password, it will update ldap account as usual but is

[Samba] Re: User restriction on some client machines

2008-03-30 Thread Jamrock
Mesterhazy Attila [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, we have a Samba 3.0.24 server on a Fedora Core 5 system and we use it as PDC. I have client machines with Windows XP SP2. What I want: - some machines (for example machine1) should be used only by user1 and user2 -

Re: [Samba] Re: Samba 3.0.25b as a domain member to a Samba PDC

2008-03-30 Thread John H Terpstra
On Sunday 30 March 2008 12:24:54 pm Greg J. Zartman, P.E. wrote: A user cannot access a Linux machine unless he is authenticated by the machine. Jamrock, Many thanks for your very informative response. The makes complete sense really. Ultimately, I'm sure LDAP is the best solution and

RE: [Samba] RE: Mount error 13

2008-03-27 Thread Tosh, Michael J
Adam Williams wrote: i don't think you need the domain=W2K3ADDOMAIN in your mount statement. i've never had to use it anyway. Before I did that, I'd get Bad User/Password errors on the windows server. At least now Windows sees it working. It seems like my problem is that CIFS authenticates

[Samba] RE: Mount error 13

2008-03-26 Thread Tosh, Michael J
More information on my problem: _ From: Tosh, Michael J Sent: Wednesday, March 26, 2008 11:36 AM To: 'samba@lists.samba.org' Subject: Mount error 13 I am trying to connect a SLES9 server to a share on a Windows 2003 domain.

[Samba] RE: Mount error 13

2008-03-26 Thread Tosh, Michael J
More information on my problem: (with text this time) linuxserver:/var/log # date;mount -v -t cifs //server/share /mnt/share -o credentials=.cifs_creds Wed Mar 26 12:03:38 EST 2008 parsing options: rw,credentials=.cifs_creds Domain W2K3ADDOMAIN mount.cifs kernel mount options

[Samba] RE: Mount error 13

2008-03-26 Thread Guenter Kukkukk
Am Mittwoch, 26. März 2008 schrieb Tosh, Michael J: More information on my problem: (with text this time) linuxserver:/var/log # date;mount -v -t cifs //server/share /mnt/share -o credentials=.cifs_creds Wed Mar 26 12:03:38 EST 2008 parsing options: rw,credentials=.cifs_creds Domain

RE: [Samba] RE: Mount error 13

2008-03-26 Thread Tosh, Michael J
Guenter Kukkukk wrote: Am Mittwoch, 26. März 2008 schrieb Tosh, Michael J: More information on my problem: (with text this time) linuxserver:/var/log # date;mount -v -t cifs //server/share /mnt/share -o credentials=.cifs_creds Wed Mar 26 12:03:38 EST 2008 parsing options:

Re: [Samba] RE: Mount error 13

2008-03-26 Thread Adam Williams
i don't think you need the domain=W2K3ADDOMAIN in your mount statement. i've never had to use it anyway. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Recovering Windows computer account string

2008-03-24 Thread Michael Lueck
Doug VanLeuven wrote: What you're fighting with the snapshots is the windows machine changes the password every 7-30 days depending on the version service pack. So depending on the timing, a reverted snapshot won't work anymore. Depending on the timing, every snapshot could have a different

[Samba] Re: Recovering Windows computer account string

2008-03-23 Thread Michael Lueck
Rich West wrote: It might be easier to remove the system from the domain and re-add it to the domain... Except I have several copies of this VM saved, so rejoining one fixes one VM only. If it is troublesome to extract the string from Windows, then I will junk all of the snapshots and start

Re: [Samba] Re: Recovering Windows computer account string

2008-03-23 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Lueck wrote: Rich West wrote: It might be easier to remove the system from the domain and re-add it to the domain... Except I have several copies of this VM saved, so rejoining one fixes one VM only. If it is troublesome to extract

Re: [Samba] Re: Recovering Windows computer account string

2008-03-23 Thread Doug VanLeuven
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Lueck wrote: | Rich West wrote: | It might be easier to remove the system from the domain and re-add it | to the domain... | | Except I have several copies of this VM saved, so rejoining one fixes | one VM only. | | If it is troublesome to

[Samba] Re: AddPrinterConnection returns ERROR_INVALID_PARAMETER

2008-03-20 Thread Lou Gascou
mingj a écrit : I set up a Point-n-Print printer server with Samba3.0.28 and it works fine from XP, but when I try to connect and install the printer driver from Vista machines, it gives me 0x57 error, does anybody know why this is happening? I later found out it's AddPrinterConnection call

Re: [Samba] Re: cifs verses smbfs for Linux clients -time stamp issue

2008-03-20 Thread Lukasz Szybalski
On Thu, Mar 13, 2008 at 12:25 PM, Lukasz Szybalski [EMAIL PROTECTED] wrote: On Thu, Mar 6, 2008 at 7:06 PM, Günter Kukkukk [EMAIL PROTECTED] wrote: Am Donnerstag, 6. März 2008 schrieb Lukasz Szybalski: After mounting a windows share via cifs I have came across the same issue as

[Samba] Re: AddPrinterConnection returns ERROR_INVALID_PARAMETER

2008-03-20 Thread mingj
The driver is Vista compliant because I can install the printer on Vista via local port using the same driver. After some experiments, I figured out it's the missing help file in oemsetup.inf that causes the trouble. If I add a HelpFile=x.CHM in the inf file, then PnP installation will

[Samba] Re: winbind and compat mode in nsswitch.conf

2008-03-20 Thread Andy
Andy wrote: Hay together, is the following entry in nsswitch.conf possible ? passwd: compat passwd_compat: winbind I want to use the compat mode, so i can use the +/- semantic. But in this case i cant login with username/password. If i configure the nsswitch.conf like: passwd: files winbind

Re: [Samba] Re: AddPrinterConnection returns ERROR_INVALID_PARAMETER

2008-03-20 Thread Mark Gannon
On Thursday 20 March 2008 12:15:24 pm mingj wrote: Since the same oemsetup.inf works for XP, does anybody know if Vista has changed the behavior in terms of the requirement for a help file for PnP installations? My experimentation suggests that Vista does much stricter checking of all the

Re: [Samba] Re: Samba/Ldap problems with Versions 3.0.24

2008-03-18 Thread Mario Gzuk
Hi, Am Montag, den 17.03.2008, 13:41 -0400 schrieb Adam Tauno Williams: we have similiar problems with samba+ldap after updating to 3.0.27. But in our case, the following ldap-Attributes won't get updated: sambaPwdMustChange sambaPwdCanChange only sambPwdLastSet gets altered. in newly

Re: [Samba] Re: Samba/Ldap problems with Versions 3.0.24

2008-03-18 Thread Tomasz Chmielewski
Mario Gzuk schrieb: Hi, Am Montag, den 17.03.2008, 13:41 -0400 schrieb Adam Tauno Williams: we have similiar problems with samba+ldap after updating to 3.0.27. But in our case, the following ldap-Attributes won't get updated: sambaPwdMustChange sambaPwdCanChange only sambPwdLastSet gets

[Samba] Re: ntlm_auth

2008-03-18 Thread Kai Blin
Dean, Barry B.Dean at liverpool.ac.uk writes: Now when I test ntlm_auth I get the following odd goings on: Scenario A: Works Type: ntlm_auth --username=USER --password=PASSWORD --domain=DOMAIN Result: NT_STATUS_OK: Success (0x0) Scenario B: FAILS Type: ntlm_auth

Re: [Samba] Re: ntlm_auth

2008-03-18 Thread Kai Blin
On Tuesday 18 March 2008 15:31:59 Kai Blin wrote: Dean, Barry B.Dean at liverpool.ac.uk writes: Now when I test ntlm_auth I get the following odd goings on: Scenario A: Works Type: ntlm_auth --username=USER --password=PASSWORD --domain=DOMAIN Result: NT_STATUS_OK: Success

[Samba] Re: Samba/Ldap problems with Versions 3.0.24

2008-03-17 Thread Markus Kahle
Hi ! we have similiar problems with samba+ldap after updating to 3.0.27. But in our case, the following ldap-Attributes won't get updated: sambaPwdMustChange sambaPwdCanChange only sambPwdLastSet gets altered. in newly created accounts the two Attributes even won't be created !? I already

Re: [Samba] Re: Samba/Ldap problems with Versions 3.0.24

2008-03-17 Thread Adam Tauno Williams
we have similiar problems with samba+ldap after updating to 3.0.27. But in our case, the following ldap-Attributes won't get updated: sambaPwdMustChange sambaPwdCanChange only sambPwdLastSet gets altered. in newly created accounts the two Attributes even won't be created !? I already

Re: [Samba] Re: cifs verses smbfs for Linux clients -time stamp issue

2008-03-13 Thread Lukasz Szybalski
On Thu, Mar 6, 2008 at 7:06 PM, Günter Kukkukk [EMAIL PROTECTED] wrote: Am Donnerstag, 6. März 2008 schrieb Lukasz Szybalski: After mounting a windows share via cifs I have came across the same issue as described here: http://lists.samba.org/archive/samba/2006-April/119813.html

[Samba] RE: $ char in password

2008-03-11 Thread Xu, Qiang (FXSGSC)
It seems that the net binary treat $1 as something with special meaning, as in shell script. Thus, the password $ - 111. Another evidence is that when I change the password for user abc from $ to 11$11, and run the command: === net rpc

[Samba] Re: Migration to Samba.

2008-03-09 Thread zarrabeitia
Replying to myself: The problem with changing the SID was that I wasn't changing the SID everywere. I was changing the SID only on my net setlocalsid, setdomainsid and the smbldap config file... After I did the smbldap-populate again, everything worked (the new samba domain now has the same sids

[Samba] Re: Importing Accounts from Windows?

2008-03-08 Thread Jamrock
Kyle Schmitt [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Is there some automated system to import windows accounts into a samba or a samba ldap situation? I've got a few hundred users on an NT domain, and I'd like to migrate them sometime before the last piece of hardware

[Samba] Re: I changed smb.conf, but nothing seems to happen!

2008-03-07 Thread joop gerritse
I found it already-- there was a second ocurrence of /usr/loca/... under [netlogon]. Now why are there two occurrences? -- J.J. Gerritse Mühlenstraße 11 D-47546 Kalkar-Wissel Duitsland +49-2824-971487 -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] Re: wbinfo -a not working

2008-03-06 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've had similar problems as well, though I was using Solaris 10u3. I never have had the time to dedicate to getting it working. On Solaris, getting the PAM/nsswitch stuff correct enough was my biggest problem (since on Solaris, PAM is a little

[Samba] Re: [linux-cifs-client] Unable to mount using sec=none and mount.cifs

2008-03-06 Thread Christopher DeMarco
On Wed, Mar 05, 2008 at 04:40:49PM -0500, Jeff Layton wrote: I pushed this patch to Steve ~last may. You might want to check that the kernel you're working with has it. Without it, sec=none doesn't really do what you expect... [snip] We had a customer report that attempting to make CIFS

Re: [Samba] Re: cifs verses smbfs for Linux clients -time stamp issue

2008-03-06 Thread Lukasz Szybalski
After mounting a windows share via cifs I have came across the same issue as described here: http://lists.samba.org/archive/samba/2006-April/119813.html While using vim on files mounted under CIFS, when trying to write an existing file you will randomly be warned The file has been changed since

Re: [Samba] Re: cifs verses smbfs for Linux clients -time stamp issue

2008-03-06 Thread Günter Kukkukk
Am Donnerstag, 6. März 2008 schrieb Lukasz Szybalski: After mounting a windows share via cifs I have came across the same issue as described here: http://lists.samba.org/archive/samba/2006-April/119813.html While using vim on files mounted under CIFS, when trying to write an existing file

[Samba] Re: workgroup remains invisible!

2008-03-03 Thread joop gerritse
On Monday 03 March 2008 13:01:47 [EMAIL PROTECTED] wrote: On 3/2/2008, joop gerritse ([EMAIL PROTECTED]) wrote: security = share This is incorrect for a domain/PDC, should be: security = user I changed it, however, no effect seen yet... When asking questions, it is usually necessary to

Re: [Samba] Re: workgroup remains invisible!

2008-03-03 Thread Charles Marcus
On 3/3/2008, joop gerritse ([EMAIL PROTECTED]) wrote: This is incorrect for a domain/PDC, should be: security = user I changed it, however, no effect seen yet... Did you restart Samba? But, like I said before - there were other problems with your config, but they were basic enough to

Re: [Samba] Re: Samba/LDAP Question

2008-03-01 Thread Steve Thompson
On Sat, 1 Mar 2008, Brian May wrote: Question: what happens with BDCs? Do you need to specify account creation scripts on the BDC too? No, you only need these on the PDC. That's how I have it set up and it works like a champ. Steve -- To unsubscribe from this list go to the following URL and

Re: [Samba] Re: Samba/LDAP Question

2008-03-01 Thread Steve Thompson
On Fri, 29 Feb 2008, John Drescher wrote: This is why I have 4 LDAP servers. One master and the rest secondary that sync with the master using synchrepl. Its really easy to add an LDAP server to just about any linux box and it really does not need that much power especially if it is one of

Re: [Samba] Re: pam_mkhomedir.so not working.

2008-03-01 Thread Linux Addict
I finally got this started working for ssh after changing things like privilege seperation, allowkerberos login parameters in sshd_config. Still not sure about why su was not working. Anyways thanks for your help. Cheers, LA On Wed, Feb 27, 2008 at 1:57 PM, Linux Addict [EMAIL PROTECTED]

[Samba] Re: Samba/LDAP Question

2008-03-01 Thread Brian May
Hector == Hector Blanco [EMAIL PROTECTED] writes: Hector I added the nss_base_passwd ou=Hosts,dc=jome?one but Hector nothing seems to change... I don't know if I removed Hector properly the nscd cache when retying... I rebooted the Hector computer... Is that ok or do I have to do

[Samba] Re: Samba/LDAP Question

2008-03-01 Thread Brian May
Steve == Steve Thompson [EMAIL PROTECTED] writes: Steve I second this. The syncrepl stuff appears to be as solid as Steve a rock and is very easy to set up; waay better than the Steve old slurpd. I went from a master and no slaves to a master Steve and two slaves, using

[Samba] Re: Inheritable Permissions Issue

2008-02-29 Thread David Eisner
On Thu, Feb 28, 2008 at 6:51 PM, David Eisner [EMAIL PROTECTED] wrote: Permissions tab of the Advanced Security Settings dialog, whenever I uncheck the Allow inheritable permissions from the parent to propagate to this object and all child objects checkbox, and hit Apply, the checkbox

[Samba] Re: Samba/LDAP Question

2008-02-29 Thread Brian May
Adam == Adam Tauno Williams [EMAIL PROTECTED] writes: Adam ldap machine suffix = ou=computers Adam ldap user suffix = ou=People I use those (or similar) without any problems. Adam Specifying these causes problems, it is up to the add script where to Adam create the account

Re: [Samba] Re: Samba/LDAP Question

2008-02-29 Thread John Drescher
If the PDC goes down on our network, the primary LDAP server is likely to go down too, so making any changes to LDAP is not possible without reconfiguration. So I am uncertain: what is required for the BDC? This is why I have 4 LDAP servers. One master and the rest secondary that sync with

Re: [Samba] Re: Samba/LDAP Question

2008-02-28 Thread Hector Blanco
Yeah, sure... But it is a field which is part of the sambaSamAccount objectClass, isn't it? Anyway, thanks for the tag 2008/2/28, Brian May [EMAIL PROTECTED]: Hector == Hector Blanco [EMAIL PROTECTED] writes: Hector Thank you Steve and Frank... ... I can see something Hector in

Re: [Samba] Re: Performance issues after samba update (utime?)

2008-02-28 Thread Alex Still
On Wed, Feb 27, 2008 at 8:07 PM, Volker Lendecke [EMAIL PROTECTED] wrote: On Wed, Feb 27, 2008 at 07:43:42PM +0100, Alex Still wrote: I think I found it. Samba-3.0.28 calls set_filetime() from real_write_file(), which 3.0.8isn't doing. set_filetime - utimes - nfs SETATTR (in my case)

[Samba] Re: Propose mount.cifs/smbfs able to mount the child folder of share folder

2008-02-27 Thread Jeff Layton
On Tue, 08 Jan 2008 00:19:47 +0800 kstan [EMAIL PROTECTED] wrote: Hi Samba team, I feel user will feel more confortable when they can mount folder (via mount.cifs or mount.smbfs) under particular shared folder. Example: I have a share folder call department, all department's folder

Re: [Samba] Re: cifs verses smbfs for Linux clients

2008-02-27 Thread Steve Langasek
On Tue, Feb 19, 2008 at 08:58:54PM +0100, Volker Lendecke wrote: On Tue, Feb 19, 2008 at 08:22:56PM +0100, Christian Perrier wrote: At least considering to distribute it (or a derived work) as part of the samba distribution could help samba users to switch from smbfs to cifs? Sorry, we

Re: [Samba] RE: Delegation of authentication (S4U) and SAMBA

2008-02-27 Thread Todd Stecher
On Feb 20, 2008, at 2:05 PM, Andrew Bartlett wrote: Why do we need to check that, expect if we think that unprivileged processes on our box have access to the keytab? That would be the concern, yes. Todd Stecher | Windows Interop Dev Isilon SystemsP +1-206-315-7500 F

Re: [Samba] RE: Delegation of authentication (S4U) and SAMBA

2008-02-27 Thread Todd Stecher
From my readings, only the Heimdahl Kerberos distribution has S4USelf support, at least in the Samba 4 code base. MIT tries to stay away from being PAC-cognizent. It sounds like you're trying to do something slightly different - e.g. Constrained Delegation, where the identity lives in

Re: [Samba] Re: Windows C# unable to access Samba directories.

2008-02-27 Thread Michael Heydon
BARKAN AVIGDOR wrote: Hi, I have written a simple c# program that move file from windows to a Unix path via samba. The user that do the work is a full privilege user. Using a win application this works fine but when I activated the prog. as a win service, I got a strange activity and

Re: [Samba] Re: Windows C# unable to access Samba directories.

2008-02-27 Thread Jim Shanks
BARKAN AVIGDOR wrote: Hi, I have written a simple c# program that move file from windows to a Unix path via samba. The user that do the work is a full privilege user. Using a win application this works fine but when I activated the prog. as a win service, I got a strange activity and

[Samba] Re: Linux clients, force * mode

2008-02-27 Thread Michael Lueck
pbowers wrote: To get force create mode and force directory mode to work with cifs clients try setting unix extensions = no in your smb.conf. It worked for me. (chuckle) Just came to report to this list the solution that was finally found. Indeed, unix extensions = no seems to be the correct

Re: [Samba] Re: Windows C# unable to access Samba directories.

2008-02-27 Thread Robert
One other thing . . . typically a Windows service typically does not run under the user account logged into the local machine. More commonly, a service is run with either an account created for the service, the system account or the local administrator

[Samba] Re: Performance issues after samba update (utime?)

2008-02-27 Thread Alex Still
On Tue, Feb 26, 2008 at 11:57 PM, Alex Still [EMAIL PROTECTED] wrote: Hi all, We're experiencing performance issues after migrating from 3.0.8 to 3.0.28 . Write performance has degraded about 30%, regardless of the size of file being copied. (tests described below are a single 150Mb file

Re: [Samba] Re: pam_mkhomedir.so not working.

2008-02-27 Thread Linux Addict
On Tue, Feb 26, 2008 at 8:44 PM, Brian May [EMAIL PROTECTED] wrote: Linux == Linux Addict [EMAIL PROTECTED] writes: Linux I would assume that the process is winbind and it running Linux as root. think of anything else. Are you sure of that? Based on the error, it really looks like

Re: [Samba] Re: Performance issues after samba update (utime?)

2008-02-27 Thread Volker Lendecke
On Wed, Feb 27, 2008 at 07:43:42PM +0100, Alex Still wrote: I think I found it. Samba-3.0.28 calls set_filetime() from real_write_file(), which 3.0.8 isn't doing. set_filetime - utimes - nfs SETATTR (in my case) After removing that bit from real_write_file, I get exactly the same performance

<    3   4   5   6   7   8   9   10   11   12   >