Re: [Samba] Build Active Directory with Samba

2012-02-16 Thread Daniel Müller
All Samba4. In combination with Openchange it will substitute exchange too. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail:

[Samba] Group membership updates

2012-02-16 Thread Luis Marqueta
Hi, list. I'm running samba-3.5.4 + winbind on a RHEL 5 server. I'm trying to allow ssh logins to users in a particular Active Directory group in the TESTDOMAIN domain. My problem is that group membership seems to be updated when the user logs in. So, if a remove a user from the allowed group,

Re: [Samba] Samba4 gid-to-sid question

2012-02-16 Thread steve
On 02/16/2012 06:58 AM, Gémes Géza wrote: 2012-02-16 02:01 keltezéssel, steve írta: Hi. We used info from a SID created using samba-tool group add to posix-ify it and then add a posix-ifed domain user to it. The AD doco defines two sorts of SID. Ones that change, and ones that don't. Here is a

Re: [Samba] Samba PDC with Windows 7 support request

2012-02-16 Thread Dermot
2012/1/31 Jiří Procházka jiri.procha...@norbou.com: Dear Samba support team, I have a question on Samba 3.5.8 please, which is not solved by searching the forums. I tried all suggested solutions, but nothing take effect. ... Domain users experience a slow login performance on Windows 7

[Samba] acl's, Samba4 and rw shares

2012-02-16 Thread steve
Hi I'm trying to make a share called dropbox rw for members of a group. /usr/local/samba/etc/smb.conf [global] server role = domain controller workgroup = CACTUS realm = hh3.site netbios name = HH3 passdb backend = samba4 template shell = /bin/bash [netlogon] path =

Re: [Samba] nmbd process and winbindd process can't start in multi network interface environement

2012-02-16 Thread Christian Ambach
On 02/09/2012 06:14 AM, Huang, Hai Qing SLC CIT CMP SHA wrote: Hello, Our OS is AIX 6100-06-05-1115 and SAMBA version is 3.3.12.0 We have two network interfaces with different IPs. Now we restrict SAMBA active in onf of the interface. SWAT and smbd can start. But nmbd and winbindd

Re: [Samba] Samba winbind and nfsv4 krb5

2012-02-16 Thread steve
On 02/13/2012 10:48 AM, Oliver Weinmann wrote: Hi All, I'm struggling since weeks to get samba winbind and a kerberized nfs mount running. We have a Netapp SAN exporting the nfs share with sec=krb5 and a Linux Client Ubuntu 10.04 Server trying to access the exported share. Accessing the

Re: [Samba] error with provisionsing

2012-02-16 Thread steve
On 02/03/2012 04:10 PM, Eric J. Stewart wrote: I found the samba4 HOW-TO on the wiki and I have followed it to using Ubuntu server versions 11.10 and 10.04. I have been unsuccessful at step 4 running the provision script. I have run the following commands to get to get to this point: $

Re: [Samba] Error in provisioning Samba4 Alpha 18 from git

2012-02-16 Thread steve
On 02/02/2012 09:51 PM, Mathias Friman wrote: Hi, I have a problem. The prerequisites are: * Vanilla Ubuntu 10.04 install * Followed the http://wiki.samba.org/index.php/Samba4/HOWTO In step 4, after running the command: ./source4/setup/provision --realm=samdom.example.com --domain=SAMDOM

Re: [Samba] Build Active Directory with Samba

2012-02-16 Thread steve
On 01/28/2012 05:28 PM, Agharinma EHIEDU wrote: Hello, Please, which release of Samba can one build Active Directory Domain with. I know that with 3.0 one can have a PDC but I want to build AD with Samba. Your help will be appreciated. Ehiedu Agharinma Try Samba4:

Re: [Samba] winbind and group membership

2012-02-16 Thread Martin Vuille
Having a very similar problem: I am using pam_winbind to login to a workstation using domain credentials. The login works fine and the logged-in user is assigned his primary domain group membership, but not his secondary domain group membership(s). Configuration: - NT Domain - PDC is Samba

[Samba] Samba LDAP passthrough authentication to another openLDAP

2012-02-16 Thread Fajar Priyanto
Hi all, I have a setup like this. Pls let me know if it's possible or not. SAMBA + Local LDAP --- SASLAUTHD -- Global LDAP Desc: I'd like to do Samba authentication to LDAP, passthrough to another LDAP using SASL. The current situation is: SSH authentication from LDAP user to that Samba box

Re: [Samba] Samba LDAP passthrough authentication to another openLDAP

2012-02-16 Thread Adam Tauno Williams
On Thu, 2012-02-16 at 21:10 +0800, Fajar Priyanto wrote: Hi all, I have a setup like this. Pls let me know if it's possible or not. SAMBA + Local LDAP --- SASLAUTHD -- Global LDAP No. Samba uses the sambaNTPassword attribute in it's LDAP schema which is a crypt of the password. You may be

Re: [Samba] samba4 provision error (Solved)

2012-02-16 Thread felix
On 02/15/2012 11:30 PM, fe...@epepm.cupet.cu wrote: git checkout dd5868d when I try to provision I get the following: Populating ForestDnsZones partition bin/tdbbackup: /home/samba-master/bin/shared/private/libtdb.so: version `SAMBA_4.0.0ALPHA18_DEVELOPERBUILD' not found (required by

[Samba] How to Force Domain Clients to use new PDC

2012-02-16 Thread Wikked One
Good Morning Samba Team, We’ve been using Samba 3.4.8 and OpenLdap as an NT domain PDC for a number of years, running on CentOS 5.7 64 bit. In the meantime I’ve been configuring other systems to use a multimaster OpenLdap backend and implement TLS. Obviously the first

Re: [Samba] acl's, Samba4 and rw shares

2012-02-16 Thread Aaron E.
The permissions are slightly different for s4, as in you will be setting most of the folder perissions at the windows level. Youll need to make sure that user_xattr and acl is enabled for the filesystem. You can't really chmod per say, youll need to access the security tab for the share and

Re: [Samba] Samba domain member server using only nss ldap

2012-02-16 Thread Gaiseric Vandal
Unfortunately I am not sure if the idmapping functionality in Samba depends on winbind. it appears that it does http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html I do have some member servers that I am not using winbindd. We are using LDAP for Unix level

Re: [Samba] Unable to create principle and join domain with solaris / samba 3.5.8

2012-02-16 Thread Paul Smith
Oracle are suggesting this is a known bug (oracle ID 7105257) with the createcomputer argument of net ads join. Has anyone come across this issue or have working examples of Samba = 3.5.8 joining AD without requiring Administrator privileges? Regards Paul On 9 Feb 2012, at 16:14, Paul Smith

Re: [Samba] How to Force Domain Clients to use new PDC

2012-02-16 Thread Gaiseric Vandal
Are all DC's truly in the same domain? (net getdomainsid command should show the same domain sid on all DC's.)Were the new servers joined to the existing domain when setting up or did you just configure the same domain name. What exactly are you using the NT4 server manager tool for?

Re: [Samba] Samba PDC with Windows 7 support request

2012-02-16 Thread Cain, Marc
Have you tried these settings (posted here about a year ago)? When the following local GPO is left in its default setting Samba domain logons are delayed for 30 seconds: Computer Configuration\Administrative Templates\System\User Profiles\Set maximum wait time for the network if the user has

Re: [Samba] Samba 3.6.0.0 w/AD Support on AIX 6.1 - Error w/Authentication

2012-02-16 Thread Christian Ambach
On 02/14/2012 04:20 PM, ejp wrote: [2012/02/13 11:48:43, 2] lib/interface.c:341(add_interface) added interface en4 ip=159.3.99.56 bcast=159.3.99.191 netmask= [2012/02/13 11:48:43, 2] nmbd/nmbd.c:280(reload_interfaces) Found new interface 159.3.99.56 [2012/02/13 11:48:43, 0]

Re: [Samba] acl's, Samba4 and rw shares

2012-02-16 Thread steve
On 02/16/2012 03:48 PM, Aaron E. wrote: The permissions are slightly different for s4, as in you will be setting most of the folder perissions at the windows level. Youll need to make sure that user_xattr and acl is enabled for the filesystem. That seems OK: mount | grep xattr /dev/sda1 on /

Re: [Samba] acl's, Samba4 and rw shares

2012-02-16 Thread Aaron E.
If you apply ntacl to the share in windows you will not get this error ERROR(type 'exceptions.TypeError'): uncaught exception - (61, 'No data available') That is simply saying there are no extra ntacl settings applied to the share.. If there were you would see them.. Unfortunately I cannot

Re: [Samba] Samba4 internal dns server cannot find ldap

2012-02-16 Thread steve
On 02/14/2012 07:56 AM, Kai Blin wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-02-12 10:23, steve wrote: Hi Steve, ../source4/dsdb/dns/dns_update.c:294: Failed DNS update - NT_STATUS_IO_TIMEOUT dns child failed to find name '_ldap._tcp.HH3.SITE' of type SRV finddcs: Failed to

Re: [Samba] acl's, Samba4 and rw shares

2012-02-16 Thread steve
On 02/16/2012 07:06 PM, Aaron E. wrote: If you apply ntacl to the share in windows you will not get this error ERROR(type 'exceptions.TypeError'): uncaught exception - (61, 'No data available') That is simply saying there are no extra ntacl settings applied to the share.. If there were you

Re: [Samba] acl's, Samba4 and rw shares

2012-02-16 Thread Aaron E.
Setting the Permissions in windows is easy, browse to your server like so..start run \\server right click share properties, security tab -- if your unfamiliar with windows permissions I would read up on those.. being doable in linux,, hmm I'm sure it is but as I said I would create a

Re: [Samba] Samba4 gid-to-sid question

2012-02-16 Thread Gémes Géza
2012-02-16 11:39 keltezéssel, steve írta: On 02/16/2012 06:58 AM, Gémes Géza wrote: 2012-02-16 02:01 keltezéssel, steve írta: Hi. We used info from a SID created using samba-tool group add to posix-ify it and then add a posix-ifed domain user to it. The AD doco defines two sorts of SID. Ones

[Samba] ddns in samba4

2012-02-16 Thread felix
I followed this http://linuxcostablanca.blogspot.com/2012/01/samba-4-ubuntu.html and got dynamic dns updates working in forward zone. any ideas to get it working in the reverse zone too? By the way, nice article Steve. Best regards, Felix. -- To unsubscribe from this list go to the following

Re: [Samba] slow creating files

2012-02-16 Thread Al
Agreed, run 'top d1' then look at the line: Cpu(s): 0.5%us, 0.5%sy, 0.0%ni, 99.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st If you see '%wa' higher than 15.0 you have slow disk writing... On Feb 16, 2012, at 12:36 AM, Pavel Plesov wrote: Hello, Have you checked the hardware ? Tools like

Re: [Samba] slow creating files

2012-02-16 Thread 廖煜
Have you enable the 'ea support' and 'store dos attributes' in your smb.conf? 在 2012年2月17日 上午9:38,Al mailingl...@theflux.net 写道: Agreed, run 'top d1' then look at the line: Cpu(s): 0.5%us, 0.5%sy, 0.0%ni, 99.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st If you see '%wa' higher than 15.0 you

Re: [Samba] ddns in samba4

2012-02-16 Thread Daniel Müller
Working on CENTOS, file /usr/local/samba/private/named.conf, zone 134.168.192.in-addr.arpa in { #---your subnet type master; file /usr/local/samba/private/dns/134.168.192.in-addr.arpa.zone; # your file with reverse addresses allow-transfer { key TRANSFER; };

Re: [Samba] Samba4 internal dns server cannot find ldap

2012-02-16 Thread Daniel Müller
[global] server role = domain controller workgroup = CACTUS realm = hh3.site netbios name = HH3 passdb backend = samba4 template shell = /bin/bash interfaces= xxx.yyy.zzz # I think this is missing, in my case I need to set this for the internal dns

Re: [Samba] Samba4 internal dns server cannot find ldap

2012-02-16 Thread steve
On 02/17/2012 08:05 AM, Daniel Müller wrote: [global] server role = domain controller workgroup = CACTUS realm = hh3.site netbios name = HH3 passdb backend = samba4 template shell = /bin/bash interfaces= xxx.yyy.zzz # I think this is

[SCM] Samba Shared Repository - branch master updated

2012-02-16 Thread Michael Adam
The branch, master has been updated via a389632 wafsamba: exclude '.brzignore' from make dist via e0797c6 wafsamba: exclude '.gitignore' from make dist via 5674724 wafsamba: fix blacklist handling in make dist via 8ca39df s4:provision: only print the adminpass if it

[SCM] Samba Shared Repository - branch master updated

2012-02-16 Thread Stefan Metzmacher
The branch, master has been updated via 91c325b s3-librpc: Remove gse_verify_server_auth_flags via 0247376 docs-xml: remove docs for send spnego principal via d54404e s3-param Remove off-by-default and unused send spnego principal via eb3e34e s3-smbd Remove unused

[SCM] Samba Shared Repository - branch master updated

2012-02-16 Thread Jeremy Allison
The branch, master has been updated via ed85e9f Replace smbd_server_connection_loop_once() with tevent_loop_once() directly. via 367c567 lib/util: Remove sys_poll as it is no longer needed via ab80995 lib/util: Remove unused sys_select_signal() from 91c325b

[SCM] build.samba.org - branch master updated

2012-02-16 Thread Andrew Bartlett
The branch, master has been updated via 909b72b Revive lcov reporting from 3af7f62 remove old s3-waf build from host tridge http://gitweb.samba.org/?p=build-farm.git;a=shortlog;h=master - Log - commit

Replace smbd_server_connection_loop_once() with tevent_loop_once() directly.

2012-02-16 Thread Stefan (metze) Metzmacher
Hi Jeremy, - Log - commit ed85e9fe6a10d3c34b74788e6f862ea23dce4f2b Author: Jeremy Allison j...@samba.org Date: Thu Feb 16 16:14:14 2012 -0800 Replace smbd_server_connection_loop_once() with tevent_loop_once() directly.