[Samba] My Samba 3.0beta1 stopped working as ADS member

2003-06-18 Thread Patrik Gustavsson PS Sweden Senior Technical Consultant
I had a working Samba 3.0beta1 as ADS member of a W2003 server.
My w2000 client could log in to the W2003 server and use services on
Samba (home directory).
Winbind is working.

So I tried to re-do all my work again.

And suddenly the w2k can use any services on Samba anymore.

The output from the logfile tells me it's kerberos problem:
[2003/06/18 08:35:03, 3] libads/kerberos_verify.c:(126)
 krb5_rd_req with auth failed (Bad encryption type)
[2003/06/18 08:35:03, 1] smbd/sesssetup.c:(175)
 Failed to verify incoming ticket!
[2003/06/18 08:35:03, 3] smbd/error.c:(94)
 error string = No such file or directory
Winbind/wbinfo works as it should.

I know what problem it is, but not WHY and not HOW to fix it ?

/Patrik

--
In a world without fences who needs Gates
Patrik Gustavsson, Senior Technical Consultant
[EMAIL PROTECTED] Telephone: +46 60 671540
http://glen.swedenMobile: +46 70 3551040
SUN MICROSYSTEMS  Fax: +46 60 671550
--
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] CPU consumption by samba

2003-06-18 Thread Wolfram Quester
Hi,

On Tue, Jun 17, 2003 at 01:18:53AM +0200, Massimiliano Hofer wrote:
 Hi,
 I'm having strange performance problems with samba and an application written 
 with VisualFox Pro.
 This application is entirely installed in a Windows share and it has a hystory 
 of strange phenomenons.
...snip...

I remember that there were issues with VisualFox Pro and oplocks
discussed on this list. Try to disable them
A recommendation was to look at 
http://www.drouillard.ca/TipsTricks/Samba/Oplocks.htm
You can search this list at marc.theaimsgroup.com for Foxpro Test with
http://marc.theaimsgroup.com/?l=sambaw=2r=1s=Foxpro+Testq=b
for further information.

HTH,

Wolfi
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] IP address for workstation

2003-06-18 Thread Vizitiu, Ciprian

 
 How get IP address the remote workstation in logon process (logon 
 process in Samba Server)?

man smb.conf? Maybe you're looking for what's under VARIABLE
SUBSTITUTIONS...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3 beta 1, LDAP and USRMGR

2003-06-18 Thread Matt Wright
Hi,

I've now got my Samba 3 domain successfully configured apart from a minor
detail. When I use USRMGR to try and add a new user I get The filename,
directory name, or volume label syntax is incorrect. About 10 minutes ago I
successfully joined this machine to the domain and tested that the server
correct adds all my details to the LDAP server. I'm confused, if you tell
usrmgr to Copy a user it allows you to the copy dialog but gives the same
error when you add however if you refresh the list it has actually added the
user.

I've got another, almost identical, setup at home but with using the ldapsam
backend, it works perfectly (apart from not being able to use the delete in
usrmgr). It's the same version (Samba 3.0beta1) as this one.

Any ideas?

Matt

-- Quantum canis ille in fenestra est?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] File locking

2003-06-18 Thread Simon
Hi,

I have DOS program and I have to move it from Novell to Samba server.
In Novell program locks file all but DENY READ : 0 so that other clients can read file
and if one client is reading file, other can write to it.

I would like achive same affect on samba server, but on samba server program locks
 file read and write so reading the file (while the other client is opening file for 
write) is not posible.

This is output of smbstatus of the file i would like to read while samba if performing 
this lock
Locked files:
PidDenyMode   Access  R/WOplock   Name
--
3637   DENY_WRITE 0x3 RDWR   NONE /home/public/somefile.dat   
Tue Jun 17 12:34:59 2003
  
Thank you for any help!

By,
Simon Ganik
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] How to share the tape drive in samba server for windows user

2003-06-18 Thread Sathi
Hello All,

I have installed RedHat Linux-9 and configured has domian controller for
windows users. I have HP's tape drive in this Machine.

Is it possible to share this tape drive to all the windows users to this
tape drive using Samba?

Regards,
Sathi


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] My Samba 3.0beta1 stopped working as ADS member

2003-06-18 Thread Andrew Bartlett
On Wed, 2003-06-18 at 16:44, Patrik Gustavsson PS Sweden Senior
Technical Consultant wrote:
 
 I had a working Samba 3.0beta1 as ADS member of a W2003 server.
 My w2000 client could log in to the W2003 server and use services on
 Samba (home directory).
 
 Winbind is working.
 
 So I tried to re-do all my work again.
 
 And suddenly the w2k can use any services on Samba anymore.
 
 The output from the logfile tells me it's kerberos problem:
 [2003/06/18 08:35:03, 3] libads/kerberos_verify.c:(126)
   krb5_rd_req with auth failed (Bad encryption type)
 [2003/06/18 08:35:03, 1] smbd/sesssetup.c:(175)
   Failed to verify incoming ticket!
 [2003/06/18 08:35:03, 3] smbd/error.c:(94)
   error string = No such file or directory
 
 Winbind/wbinfo works as it should.
 
 I know what problem it is, but not WHY and not HOW to fix it ?

The user you are using has not had their password changed since Win2k
installation/AD upgrade.   This means that they only have their 'type
23' encryption type - the type that is based on the NT4 password.

If you change the password, it should work.  The proper solution is to
compile with MIT Krb5 1.3, or a recent Heimdal kerberos.  These versions
support the new encryption type, and should allow it to work out of the
box.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] samba 3.00b1 + passdb: mysql problem

2003-06-18 Thread Ernest Beinrohr
Hi all, is here someone with working samba3 + passdb:mysql ? I've been 
trying to set up the whole thing from morning on ;-). After succesfull 
startup, when I try to login, smbd dumps this error to logs:

  No builtin backend found, trying to load plugin
  Module '/usr/lib/samba3/pdb/mysql.so' loaded
! Plugin is available, but doesn't register passdb backend
  Loading /usr/lib/samba3/pdb/mysql.so:mysql failed!
The user table is empty, but smbd doesn't even try to connect.





Here is an excertp from smb.conf:

passdb backend = /usr/lib/samba3/pdb/mysql.so:mysql
mysql:mysql host = localhost
mysql:mysql user = samba
mysql:mysql password = ambas
mysql:mysql database = samba
mysql:mysql table = user
domain master = yes
preferred master = yes
domain logons = yes
security = user
--
Ernest Beinrohr, OERNii
eAdmin @ AxonPro.sk, http://www.AxonPro.sk
+421-2-62410360, +421-903-482603
HomePage: http://www.OERNii.sk/
-
   Be liberal in what you accept,and conservative in what you send.
   -- Postel
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Full wNT/w2K ACL conformance

2003-06-18 Thread José Luis Tallón
I Hate to reply myself, but since noone answered ...

We are planning to replace a quite big domain running W2K with Samba ( at 
the very least, the DC ).

Though i'd love to have the extra security capabilities of W2K ( Kerberos 
) as a DC, Samba/NT4 as PDC/BDC with ldapsam will more than suffice for now.

The show-stopper right now is this: we need to be able to assign real 
Full Control permissions: a user who has Full control on a directory 
should be able to Read, Write, eXecute ( of course) [ this can be easily 
achieved with ACLs ]  *plus*  being able to give away Full Control to 
other users too [ being able to override inherited ACLs would be a plus, 
too ]. Is this feasible (remember smbd runs as root... )? Has somebody 
though about implementing this ?
Seems like every implementation of ACL comes together with Extended 
Attributes support ( at least Ext2/ext3, XFS, ReiserFS ). Any exceptions ?
How about using one EA to map some Windows' attributes ? Full Control, 
Archive ( though it can be emulated through ctime/atime/mtime ), Change 
Only, come in a first pass over this.


I thought that maybe coding a wrapper around SecLib could achieve this. 
Being quite fluent in C/C++ both in Un*x as well as Win32 I don't mind 
coding whatever tool is needed to achieve this, provided it is indeed 
possible. If not, some suggestions/comments ( or even an approximate 
timeline for implementation! ) would be more than welcome.
Any comments on this??



Thanks in advance everybody.
Keep the good work, Samba Team!
Kind regards,
J.L.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba 2.2.8a - winbindd and domain-USER/GROUPS

2003-06-18 Thread boris blaha
hi

suse8.2
samba-latest --with-acl-support --with-pam
configured as domain member

samba and winbindd works fine
getent passwd -- all users from the PDC
getent group -- all groups
chown TESTFIRMA+dummy -on FS - also works fine
authentifikation against PDC also works fine

the situation:
- w2k client connects to samba-share (all fine)
- in w2k explorer - marks a file and want to
  change the permissions to other PDC-USERS

now i expected to see the complete PDC USER/Group list,
as i saw it with wbinfo -u
but i get only a small list and the following error in log.smbd

[2003/06/18 14:23:44, 0] rpc_server/srv_samr_nt.c:load_sampwd_entries(162)
  load_sampwd_entries: Unable to open passdb.


what´s wrong here
any idea ?


thx a lot in advance
bb boris blaha


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] guest account login

2003-06-18 Thread Denis Heitbrock
hi,

i use rh9 with samba 2.2.8a. i use samba security = domain with the password
servers.
i now want to create a share for only some users with full rights and all
other users should login via the nobody (or some other) guest account but i
want that they arent ask for a loginname and a password. i also dont wanted
to enter all names into the smbuser file (nobody = guest pcguest smbguest
...) because we got over hundret of users here.

how can i setup a share that only the named users have full rights and all
the other users could login without typing in a loginname and passwort so
that they directly get into the share.

thxxx for help.

greetz
denis

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] 'Little' problems with Samba v2.2.3a-12.3 (Debian Woody)and PRINTERS !!

2003-06-18 Thread Farget Vincent
Hi,


I am using Samba (v2.2.3a-12.3 on stable Debian Woody) on a bi-cpu server 
(named MYSRV) acting as a primary domain controller. All works well except 
for printers where I have severals little problems. I use LPRng (v3.8.10-1.2 
on stable Debian Woody) as my linux lpd spooler on my server. I have 2 
printers : one HP LaserJet 4000N (named nss.1er) and one HP LaserJet 4050N 
(named nss.rdc). I have configured the 2 printers on the server using 
'printtool'. I choosed the 'Remote Unix (lpd) Queue'. As both HP4000N and 
HP4050N can understand postcript documents, I choose '*auto* - Postscript' as 
my input filter for the two printers. All works well (samba : PDC, printers) 
except that I have problems with uploading and downloading printers driver on 
my samba server.
Here is my '/etc/printcap' file :

---  /etc/printcap
# /etc/printcap: printer capability database. See printcap(5).
# You can use the filter entries df, tf, cf, gf etc. for
# your own filters. See the printcap(5) manual page for further
# details.
##PRINTTOOL3## REMOTE POSTSCRIPT 600x600 a4 {} PostScript Default {}
nss.rdc:\
:sd=/var/spool/lpd/nss.rdc:\
:lp=IP.ADDR.HP4050N%9100:\
:as=-- ORIGINE $n $P $t:\
:ae=|/var/spool/lpd/nssrdc-acct.pl:\
:af=/var/spool/lpd/nssrdc.acct:\
:lf=/var/spool/lpd/nssrdc.log:\
:bl=:\
:user=daemon:\
:sh:\
:mx#0:\
:lpd_bounce=true:\
:if=/usr/lib/printfilters/master-filter:\
:PAPERSIZE=a4:\
:DESIRED_TO=ps:\
:PRINTER_TYPE=REMOTE:\
:ASCII_TO_PS=YES:\
:GSDEVICE=POSTSCRIPT:\
:RESOLUTION=600x600:\
:PS_SEND_EOF=YES:\
:NUP=1:\
:RTLFTMAR=18:\
:TOPBOTMAR=18:\
:TEXT_SEND_EOF=NO:
##PRINTTOOL3## REMOTE POSTSCRIPT 600x600 a4 {} PostScript Default {}
nss.1er:\
:sd=/var/spool/lpd/nss.1er:\
:rm=IP.ADDR.HP4000N:\
:rp=IP.ADDR.HP4000N:\
:as=-- ORIGINE $n $P $t :\
:ae=|/var/spool/lpd/nss1er-acct.pl:\
:af=/var/spool/lpd/nss1er.acct:\
:lf=/var/spool/lpd/nss1er.log:\
:bl=:\
:user=daemon:\
:sh:\
:mx#0:\
:lpd_bounce=true:\
:if=/usr/lib/printfilters/master-filter:\
:PAPERSIZE=a4:\
:DESIRED_TO=ps:\
:PRINTER_TYPE=REMOTE:\
:ASCII_TO_PS=YES:\
:GSDEVICE=POSTSCRIPT:\
:RESOLUTION=600x600:\
:PS_SEND_EOF=YES:\
:NUP=1:\
:RTLFTMAR=18:\
:TOPBOTMAR=18:\
:TEXT_SEND_EOF=NO:
--- END of /etc/printcap

I have configured Samba manually using 'vi' :-)
The last modification I have done is the 'print$' share which there is only 
two directories behind : W32X86 and WIN40. No files are present in these two 
directories (I don't really know what files must I put there).

Here is my '/etc/samba/smb.conf' file :
(ME is my user name linux/samba account)

--- /etc/samba/smb.conf
# /etc/samba/smb.conf - 'MYSRV'
# Samba config file created by VF
# Lundi 02 Juin 2003  13:30

[global]
workgroup = MYDOM
netbios name = MYSRV
server string = Serveur Intranet (domaine MYDOM)
security = domain
encrypt passwords = Yes
smb passwd file = /etc/samba/smbpasswd
password server = MYSRV
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
username map = /etc/samba/smbusers
unix password sync = Yes
log level = 1
log file = /var/log/samba/log.%m
max log size = 1000
time offset = 0
time server = Yes
socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 
SO_RCVBUF=4096
logon drive = u:
logon script = %U.bat
domain logons = Yes
domain master = Yes
hosts allow = MY.DOM.IP.ADDR/255.255.255.128
add user script = /usr/sbin/useradd -d /dev/null -g pcwinnt -c 
'Compte PC' -s /bin/false -M %u
admin users = root, ME
show add printer wizard = Yes
printer admin = root, ME

[netlogon]
comment = Batch de connexion au domaine MYDOM
path = /netlogon
available = Yes
writeable = No
browseable = No

[homes]
comment = Partage perso (disque U)
available = Yes
writeable = Yes
create mask = 0700
directory mask = 0700
browseable = Yes

[print$]
comment = Partage driver Imprimantes reseaux
path = /var/spool/lpd/drivers-imp
admin users = root, ME
valid users = @lp
available = Yes
read only = Yes
write list = root, farget
force user = root
force group = lp
create mask = 0750
directory mask = 0750
browseable = Yes

[commun]
comment = Partage commun (disque P)
path = /common
available = Yes
writeable = Yes
create mask = 0775
directory mask = 0775

RE: [Samba] New Samba Server

2003-06-18 Thread Seth Hollen
3ware makes great controllers, but you will be limited to the pci bus
bandwidth for the raid arrays.
instead of 8x40 I would look for the best cost/size ratio. I think 120GB
hard drives can be found for around $100.00 (us)
I'd put 3 in a raid5 array for performance. 

Take care,

Seth
727-919-1598
[EMAIL PROTECTED] 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tim Rowe
Sent: Wednesday, June 18, 2003 12:20 AM
To: [EMAIL PROTECTED]
Subject: [Samba] New Samba Server


I'm currently looking at hardware specs for a samba server, its' job will be
to hold general office files, cad / solidworks files along with
approximately 40 outlook PST files that will be opened off the server.

Here are the current specs I'm looking at..

AMD 2600XP
Asus A7N8X Deluxe nVidia Serial ATA
2 x 512 MB PC2700 DDR 333 = 1024MB
ASUS S520/Generic 52X CD-ROM (OEM)
ASUS GrForce4 MX440-8X 64MB DDR
D-Link DGE-550T 32/64-Bit PCI-Bus Copper (RJ45)

3Ware Escalade 7500-8
8 x 40gb ata-100 7200.7 drives 

3Ware Escalade 7500-4  
4 x 40gb ata-100 7200.7 drives

The 7500-8 will be holding the office and cad / solid works files and the
7500-4 will be holding the PST files (I thought it was best to keep them on
a separate controller cards.)

Will this do a reasonable job in keeping up with a gigabit network? And is
running PST files off the server like this a feasible option??

Any suggestions on hardware improvements would be appreciated as without the
hardware to test with I'm purchasing quite blindly here :|

Thanks
Tim

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba auth problems in RH9 w/ log

2003-06-18 Thread Seth Hollen
I have samba version 2.2.7a security-rollup fix from redhat running as a
simple file server for about a dozen computers. the computers are all win2k
except for 1 win98 and 1 winxp pro. I am having problems with nmbd dying and
not restarting as some others in the list have has but I am also having a
problem w/ 1 particular PC/username

this person often is the only one that can't get into files on the computer
(through mapped network drives) smbstatus tells me their machine is
connected but the username is nobody.

here is a recent log:
--begin log---

[2003/06/14 20:45:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:46:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:47:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:48:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:49:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:50:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:51:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:52:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:53:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:54:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:55:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:56:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:57:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:58:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 20:59:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:00:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:01:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:02:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:03:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:04:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:05:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:06:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:07:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:08:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:09:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:10:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:11:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:12:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:13:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:14:50, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:15:01, 3] smbd/process.c:process_smb(878)
  Transaction 55918 of length 133
[2003/06/14 21:15:01, 3] smbd/process.c:switch_message(685)
  switch message SMBsesssetupX (pid 1)
[2003/06/14 21:15:01, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:15:01, 3] smbd/reply.c:reply_sesssetup_and_X(858)
  Domain=[]  NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0]
[2003/06/14 21:15:01, 3] smbd/reply.c:reply_sesssetup_and_X(868)
  sesssetupX:name=[]
[2003/06/14 21:15:01, 3] smbd/sec_ctx.c:push_sec_ctx(297)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2003/06/14 21:15:01, 3] smbd/uid.c:push_conn_ctx(286)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2003/06/14 21:15:01, 3] smbd/sec_ctx.c:set_sec_ctx(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/06/14 21:15:01, 3] smbd/sec_ctx.c:get_current_groups(172)
  get_current_groups: user is in 1 groups: 99
[2003/06/14 21:15:01, 3] smbd/sec_ctx.c:pop_sec_ctx(436)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/06/14 21:15:01, 3] smbd/sec_ctx.c:get_current_groups(172)
  get_current_groups: user is in 1 groups: 99
[2003/06/14 21:15:01, 3] smbd/password.c:register_vuid(336)
  uid 99 

RE: [Samba] New Samba Server

2003-06-18 Thread Collins, Kevin
On Wednesday, June 18, Seth Hollen wrote:
 3ware makes great controllers, but you will be limited to the pci bus
 bandwidth for the raid arrays.
 instead of 8x40 I would look for the best cost/size ratio. I 
 think 120GB
 hard drives can be found for around $100.00 (us)
 I'd put 3 in a raid5 array for performance. 

Hi Seth and Tim:

One other comment - the Escalade 7500 series cards are PCI-X cards (64-bit)
if you can afford the motherboard that has these slots, having that extra
bandwidth will be a big performance boost.

I'm using the 7500-4LP and 4x120GB Western Digital drives in my backup
server right now - it's a sweet setup! :-)

Later,
--
Kevin L. Collins, MCSE
Systems Manager
Nesbitt Engineering, Inc.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3

2003-06-18 Thread Chip Bell
Do we still need to specify the -with-winbind  -with-pam and all the
other stuff when compiling Samba 3.0?  I did the windbind but not pam,
and domain authentication wont work.  Could this be why?

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Shortened service name results in inaccessible files

2003-06-18 Thread Andreas Heilwagen
Hello,

we are running samba 2.2.8a on debian 3.0 using kernel 2.5.71 (ok beat 
me for that, but the motherboard sucks!) for 100 Win2k clients. Two 
clients have been identified which repeatedly fail to open a certain tif 
file. I got the following error message:

[2003/06/18 16:23:33, 0] smbd/service.c:make_connection(252)
  mmag-wrk-055 (10.100.1.133) couldn't find service teamfolde
The service teamfolde is shortend (perhaps by the logging code?), the 
share is named teamfolders. There are currently no other known 
systematic errors or configuration issues.

Trying several logging levels including 10 did not result in helpful 
results because I cannot correlate the messages without a kind of 
transaction id.

Please give me a hint where to look futher.

Thanks in advance,

Andreas Heilwagen
Operations Manager Jamba! AG, Berlin
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Goups and domains trusted

2003-06-18 Thread GUILLEMOT Yann
Hello,

I'm using a proxy squid with authentification NT (Challenge/response) but i
have problem with domains trusted.

I have 2 domains DOMAIN1 and DOMAIN2.

When i use wbinfo i have these results :

wbinfo -t 
secret is good

wbinfo -m
DOMAIN2

 ./wbinfo -a DOMAIN2\\proxy%proxy01
plaintext password authentication succeeded
challenge/response password authentication succeeded 

It's very good but when i tried to get the groups of my users in my domain
trusted DOMAIN2 the result is :
./wbinfo -r DOMAIN2\\proxy%proxy01
Could not get groups for user DOMAIN2\proxy%proxy01

Please could you help me.

Sincerly.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Full wNT/w2K ACL conformance

2003-06-18 Thread Dragan Krnic
The show-stopper right now is this: we need to be 
able to assign real  Full Control permissions: a 
user who has Full control on a directory  should
be able to Read, Write, eXecute ( of course) [ this 
can be easily achieved with ACLs ]  *plus*  being 
able to give away Full Control to other users too
[being able to override inherited ACLs would be a 
plus, too]. Is this feasible (remember smbd runs as 
root... )? Has somebody thought about implementing 
this ?

If you have Full Control over a directory (e.g. as
root, or own it or have rwx on it), you can give FC 
(rwx) to others. Is it perhaps the other way around, 
that you want to stop this delegation, unless an FC
EA explicitely allows it? I'm not sure if it can be
a show-stopper or if it really makes a difference.

How about using one EA to map some Windows' 
attributes ? Full Control, Archive ( though it can
be emulated through ctime/atime/mtime ), Change 
Only, come in a first pass over this.

Change Only? Uhm, you mean Erase Only? I wouldn't be
surprised if there's an M$ ACL with that name.

The EAs are apparently still a disputed novelty.

Some M$ ACLs make sense, but Archive bit is nonsense
and possibly much else. Consider the backslash, OK
it's a different ball game but still, consider the
backslash. Was there any need for it, given that
Unix slash was in existence for decades when DOS
came around? No, just like much of so called ACLs,
it is a way to lock the installed base away from 
recognized standards to proprietary captivity.

The way you put it, it looks like there are some
major problems standing in the way of migrations
to common standards, whereas it is my opinion that 
Samba is doing great by implementing sensible 
features in a standards-conforming way and offering
an efficient file and print service for a song.

Think about what really stops the show - the feature
or the perception. Think how M$ may use your letter
for FUD: Samba is free but IT specialists complain 
they can't have full control of their data in 
practice.

I thought that maybe coding a wrapper around SecLib
could achieve this. Being quite fluent in C/C++ both 
in Un*x as well as Win32 I don't mind coding whatever tool is needed to achieve 
this, provided it 
is indeed possible. If not, some 
suggestions/comments ( or even an approximate 
timeline for implementation! ) would be more than 
welcome.

Any comments on this??

My posting was only comments. But go ahead and do
it. Perhaps everyone will use it, once it's there.

Samba isn't perfect. The way default permissions get
replicated indiscriminately to subdirs and files is
one thing that could be improved. If you want to
ensure propagation of eXec (tresspassing) bit on 
directories, you eventually end up with Hidden,
System and Archive bits stuck to files and still
can't hide a directory or give it System attribute. 

But the problem is really only aesthetic.
Hidden can and is regularly overridden in the file 
browser properties box, Archive I couldn't care less 
about and the System bit has nothing to do in most of 
the shares, except perhaps in [profiles] where you 
don't need ACLs anyway. When I was migrating, everyone 
thought it was a sure show-stopper. Now after some 
hands-on experience and a little tweaking, the 
perception has changed and there is no problem.



Get advanced SPAM filtering on Webmail or POP Mail ... Get Lycos Mail!
http://login.mail.lycos.com/r/referral?aid=27005
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Full wNT/w2K ACL conformance

2003-06-18 Thread Dragan Krnic
 consider the backslash. Was there any need for it,
 given that Unix slash was in existence for decades 
 when DOS came around? No, just like much of so 
 called ACLs, it is a way to lock the installed base 
 away from recognized standards to proprietary 
 captivity.

In July 1981, Microsoft bought all rights to DOS from 
Seattle Computer. I doubt Seattle Computer had any 
intention of locking in the installed base with 
backslashes.

Thanks for the correction. But was backslash used
as path separator in ur-DOS? Just curious.



Get advanced SPAM filtering on Webmail or POP Mail ... Get Lycos Mail!
http://login.mail.lycos.com/r/referral?aid=27005
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Permissions with CD's Copied from Win

2003-06-18 Thread Usenet News
I've recently installed a new server here. This is my first Samba
install so I'm a newbie. We are using RH9 and Samba 2.2.7a. Everything
with the transition from the old server to the new went great. I do seem
to have one little bug though that I've been unable to work out. If one
of the users copies the contents of a CD to the server the permissions
for the folder and files copied are 755. That is that the Owner can
RWX,but the group and others can only Read and Execute, but not write. I
realize the the files and folders on the CD are Read only, but I would
like to be able to have any member of the group be able to remove the
read only properties from the files on the server from their windows
workstations.

A typical share in my smb.conf file looks something like so:

[sales]
path = /home/sales
writeable = yes
create mask = 0777
comment = Sales
valid users = tweedledee, tweedledum, humptydumpty, horses, men

Any help or pointers would be appreciated.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Permissions with CD's Copied from Win

2003-06-18 Thread Rashkae
The parameter you want to set is force create mode = 0777 or 0666 if you
don't want to set the execute bit.  this will affect files only, not
directories.  It's somewhat difficult to explain (and took me about 2
years to wrap my head around it.), but create mode will remove unwanted
permission attributes, whereas force create mode will add permission
attributes.  For example, if you wanted to remove the word readable
permission from new files, you would use create mode = 0740.

Also note that in unix terms, you have to make a file writable (as opposed
to DOS, where you have to make files read-only.)  It's a sublte
difference, but can be a little confusing.



Jun 17  11:26pm


They hang the man and flog the woman
That steal the goose from off the common,
But let the greater villain loose
That steals the common from the goose.
  --English folk poem, circa 1764








On 18 Jun 2003, Usenet News wrote:

I've recently installed a new server here. This is my first Samba
install so I'm a newbie. We are using RH9 and Samba 2.2.7a. Everything
with the transition from the old server to the new went great. I do seem
to have one little bug though that I've been unable to work out. If one
of the users copies the contents of a CD to the server the permissions
for the folder and files copied are 755. That is that the Owner can
RWX,but the group and others can only Read and Execute, but not write. I
realize the the files and folders on the CD are Read only, but I would
like to be able to have any member of the group be able to remove the
read only properties from the files on the server from their windows
workstations.

A typical share in my smb.conf file looks something like so:

[sales]
path = /home/sales
writeable = yes
create mask = 0777
comment = Sales
valid users = tweedledee, tweedledum, humptydumpty, horses, men

Any help or pointers would be appreciated.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Win2K Machine Accounts No Longer Valid after Samba PDCUpgrade (2.2.2 to 2.2.8a)

2003-06-18 Thread Geoff Stitt
My apolgies in posting this again. However I was hoping someone
had a suggestion...

Symptom:   After upgrading our Primary Domain Controller
   from Samba 2.2.2 to Samba 2.2.8a, users attempting 
   to login from Windows 2000 clients are no longer 
   able to do so. 

Details:   After some research it was discovered that if a Windows
   2000 client re-joins the domain served by the upgraded
   version of Samba, users are then able to, once again,
   log into this domain.

   It was also discovered that if the Samba PDC was downgraded
   to its original version of 2.2.2, any windows 2000 client
   that re-joined the domain while the Samba PDC was at  
   version 2.2.8a, was still able to log into the domain.

   As additional information, both versions of the Samba
   PDC were compiled on SPARC architecture running Solaris 8.0


As the above comments suggest, machine accounts are backward-compatible,
but *not* forward-compatible between Samba versions 2.2.2 and 2.2.8a.

After researching the Samba mailing lists and newsgroups it is more
or less understood that in order to deal with problems of this nature
each windows 2000 machine account needs to be recreated. Which is
a very time-consuming effort.

Is there a better way to deal with this upgrade path?

Ideally where I don't have to visit each windows 2000 machine in order
to re-create their machine accounts?  A migration utility or set of
server-side steps perhaps? 

...geoff

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Full wNT/w2K ACL conformance

2003-06-18 Thread Hall, Ken (IDS ECCS)
I suspect the backslash thing actually ties back to DOS 1.0 and even CP/M, which had 
user-interface roots in the old DEC operating systems.

Those OS's used forward slash as the option indicator on command line utilities.  In 
their earliest form, neither had hierarchical directories, so there was no conflict.  
When UNIX-style paths
appeared in DOS 2.0, to avoid breaking compatibility with existing BAT files (and 
confusing users), IBM (or whoever) used the backslash for the path separator.

 -Original Message-
 From: Dragan Krnic [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 18, 2003 11:05 AM
 To: Michael MacIsaac
 Cc: [EMAIL PROTECTED]
 Subject: Re: [Samba] Re: Full wNT/w2K ACL conformance
 
 
  consider the backslash. Was there any need for it,
  given that Unix slash was in existence for decades 
  when DOS came around? No, just like much of so 
  called ACLs, it is a way to lock the installed base 
  away from recognized standards to proprietary 
  captivity.
 
 In July 1981, Microsoft bought all rights to DOS from 
 Seattle Computer. I doubt Seattle Computer had any 
 intention of locking in the installed base with 
 backslashes.
 
 Thanks for the correction. But was backslash used
 as path separator in ur-DOS? Just curious.
 
 
 
 Get advanced SPAM filtering on Webmail or POP Mail ... Get Lycos Mail!
 http://login.mail.lycos.com/r/referral?aid=27005
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Slow windows - cups print (Facts discovered)

2003-06-18 Thread Miguel Manso
Hi there,

Some days ago I've sent a mail talking about some problems printing from a
Windows machine to a printer installed on a Linux server (running CUPS 1.1.19
and SAMBA 2.2.7)

What was happening is when I send a page to be printed, I way 15/20 secs per page.

I've installed the network printer with the correct HP drivers.

After trying a LOT of stuff, I've installed the PostScript Printer Driver from
ADOBE and it just works GREAT. When I print the page it's immediate. Problem is
that it don't print collors. To make things tricker, it prints collors on the
test page.

I'm confused in understanding why when using the HP drivers the print process
takes a lot of time and when using the adobe postscript ones, it's immediate.
Then, I wouldn't care if I needed to use the adobe drivers but I need the colors :)

Any help?

-- 
Miguel Manso [EMAIL PROTECTED]




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] User/Group management with windows MMC management tool?

2003-06-18 Thread John H Terpstra
On Wed, 18 Jun 2003, Sameer Zeidat wrote:

 Hello everyone ..

 A quick question if anyone knows ..

 Will Samba support using the MMC snap-in in Win2k for managing users
 (similar to 'user manager for domains' that comes with NT)?

Samba-3.0.0Beta1 works with the Win2K MMC but not with the WinXP MMC.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Calculating file size.

2003-06-18 Thread David Gilligan, Nyfix O'seas, Inc.
Hello!
As it happens I am having some real nightmares with this too.

Using NETGEAR ND520 NAS devices [Yes! I know - rod for own back...]
But the fact it is a Linux device sold me ahead of a W2K Appliance

Win2K reports:

Folder #1
19,969 Files, 1578 folders
Size: 2.36Gb
S-O-D: 11.3Gb
Notes: This is a user's 'Home Drive' Lots of disparate files  Directories

Folder #2
15,151 Files, 595 folders
Size: 292Mb
S-O-D: 7.54Gb
Notes: As above

Folder #3

114 Files, 1 folder
Size: 857Mb
S-O-D: 895Mb
Notes: JAVA developer's archive - all but one are ZIP files



Sure, I'll be obseleting these NAS soon but my plan was to build a custom
Linux Samba server to handle the task.  Now I'm not so sure

-DG

IT Manager
ISV

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Full wNT/w2K ACL conformance

2003-06-18 Thread Dragan Krnic
UH-OH! Maybe it's IBM's fault:

Those OS's used forward slash as the option 
indicator on command line utilities.  In their 
earliest form, neither had hierarchical directories,
so there was no conflict.  When UNIX-style paths
appeared in DOS 2.0, to avoid breaking compatibility 
with existing BAT files (and confusing users), IBM 
(or whoever) used the backslash for the path 
separator.

Here we go again: why slash and not dash? Seattle
Computers had global ulterior designs for sure {:-)

Thanks.



Get advanced SPAM filtering on Webmail or POP Mail ... Get Lycos Mail!
http://login.mail.lycos.com/r/referral?aid=27005
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] LDAP Samba 3.0b1 Password Sync Problem

2003-06-18 Thread Ryan S Oltman
I can not get password sync to work with ldap and samba 3.0 beta 1.  I'm
not sure if I have screwed something up or if it is a bug.

I'm currently using:
openldap = 2.0.27
samba = 3.0 beta1
nss_ldap = 207

My setup is as follows sorry if it is too much info

my smb.conf file:

[global]
   workgroup = AEROSPACE
   server string = AE-ORVILLE
   netbios name = AE-ORVILLE
   name resolve order = lmhosts bcast host wins
   hosts allow = xxx.xxx.xxx. xxx.xxx.xxx.
   load printers = yes
   idmap uid  = 1-15000
   idmap gid  = 1-15000
   passdb backend = ldapsam:ldap://xxx.xxx.xxx.xxx, guest
   unix password sync = Yes
   pam password change = yes
  ldap delete dn = no
  ldap suffix = dc=xxx,dc=xxx,dc=xxx
  ldap user suffix = ou=People
  ldap machine suffix = ou=Computers
  ldap admin dn = cn=Manager,dc=xxx,dc=xxx,dc=xxx
  ldap ssl = start tls
   printcap name = cups
   printing = cups
   log file = /var/log/samba/log.%m
   max log size = 50
   log level = 8
   security = user
  encrypt passwords = yes
   socket options = TCP_NODELAY
   interfaces = xxx.xxx.xxx.xxx/23
   local master = yes
   os level = 255
   domain master = yes
   preferred master = yes
   domain logons = yes
   wins server = xxx.xxx.xxx.xxx
   dns proxy = no
   logon drive = H:
   logon path = \\%N\%U\MSWinProfile
[homes]
   comment = Home Directories
   read only = No
   browseable = No
   writable = Yes
[netlogon]   comment = Network Logon Service
   path = /var/samba/lib/netlogon
   read only = yes
   write list = ntadmin
   guest ok = yes
   writable = no
   share modes = no
[profiles]
path = \\%N\%U\MSWinProfile
read only = no
create mask = 0600
directory mask = 0700
[printers]
   comment = All Printers
   path = /usr/spool/samba
   browseable = no
   guest ok = yes
   writable = no
   printable = yes

Here is my slapd.conf file:

include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/krb5-kdc.schema
include /etc/openldap/schema/misc.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/samba.schema
loglevel296
pidfile /var/state/openldap/slapd.pid
argsfile/var/state/openldap/slapd.args
TLSCipherSuite  HIGH
TLSCertificateFile  /etc/openldap/certs/slapd-cert.pem
TLSCertificateKeyFile   /etc/openldap/certs/slapd-key.pem
password-hash   {MD5}
access to attrs=userPassword
by self write
by *auth
access to attrs=sambaLMPassword,sambaNTPassword
by dn=uid=administrator, ou=System, ou=People,
dc=xxx,dc=xxx,dc=xxx write
by self write
by *auth

access to dn.children=dc=xxx,dc=xxx,dc=xxx
by self write
by *read
databaseldbm
suffix  dc=xxx,dc=xxx,dc=xxx
rootdn  cn=Manager,dc=xxx,dc=xxx,dc=xxx
rootpw  secret
directory   /var/lib/openldap-ldbm
index   objectClass eq
index   uid pres,eq
index   sambaSIDeq
index   uidNumber   eq
index   gidNumber   eq
index   cn  eq
index   memberUid   eq
index   sambaPrimaryGroupSIDeq
index   displayName pres,eq
index   maileq,subinitial
index   surname eq,subinitial
index   givenname   eq,subinitial


ldap.conf file:

host xxx.xxx.xxx.xxx
base dc=xxx,dc=xxx,dc=xxx
nss_base_passwd dc=xxx,dc=xxx,dc=xxx?sub
nss_base_shadow dc=xxx,dc=xxx,dc=xxx?sub
nss_base_group  ou=Groups,dc=xxx,dc=xxx,dc=xxx?one
ssl start_tls
pam_password exop

my pam.d samba file:
# pam_smbpass.so authenticates against the smbpasswd file
auth   required pam_smbpass.so nodelay
accountrequired /lib/security/pam_stack.so service=system-auth
sessionrequired /lib/security/pam_stack.so service=system-auth
password   required pam_smbpass.so nodelay
smbconf=/etc/samba/smb.conf

my pam.d sys-auth file:
auth   required /lib/security/pam_env.so
auth   sufficient   /lib/security/pam_unix.so likeauth nullok
nodelay
auth   sufficient   /lib/security/pam_ldap.so use_first_pass
auth   required /lib/security/pam_deny.so
accountrequired /lib/security/pam_unix.so
accountsufficient   /lib/security/pam_ldap.so
password   required /lib/security/pam_cracklib.so retry=3
password   sufficient   /lib/security/pam_unix.so nullok md5 shadow
use_authtok
password   sufficient   /lib/security/pam_ldap.so use_authok
password   required /lib/security/pam_deny.so
sessionrequired /lib/security/pam_limits.so
sessionrequired /lib/security/pam_unix.so
sessionrequired /lib/security/pam_ldap.so

As an ldap authenticated user I can change the unix password with passwd
and the samba password with smbpasswd when sync is not 

Re: [Samba] How to share the tape drive in samba server for windowsuser

2003-06-18 Thread Jonathan Johnson
I'm assuming you want to give your users the ability to backup and restore
files at their will.

If you're looking to share the tape drive so you can use Windows' native
backup utility to write directly to the tape, sorry -- can't be done with
Samba. This is because a tape drive is not seen by the system as a disk
drive; the software wants to communicate directly with the drive. A tape
drive is a sequential, exclusive access device, not a random access device.
That means that only one process can read/write to the drive at a time, and
the tape is written/read from front to back.

First way to go about it is to create a share on the Samba server where the
Windows users can create backup files (the backup utility will allow you to
do this), then have the Samba server back this share up to tape then deletes
the backup files. This isn't really ideal, because it's not getting written
to tape right away, and there's no easy way for the user to restore from
tape.

A better way is to use a client/server backup solution which has a backup
server running on the Linux box, and backup clients running on the Linux box
and all the workstations. When a user wants to run a backup or restore job,
the appropriate tape is placed in the drive on the Linux server, then they
use the client to submit the job. The advantage here is that multiple jobs
can be submitted simultaneously and they are queued; once they reach the top
of the queue, the job runs, backing up the files from the workstation.

A quick search reveals this software to look at: NovaNet
(www.network-backup.com), Arkeia (www.arkeia.com), NetVault Workgroup
Edition (www.bakbone.com), (Veritas BackupExec not available for Linux,)
anyone know of open-source, multi-platform network-aware backup software?

Arkeia Light is a free version for Linux that also supports two clients
( http://www.arkeia.com/arkeialight.html ).

I'm not aware of any software that creates a virtual tape drive that can
be seen by Windows' native backup software as a tape device.

--Jon

On Wed, 18 Jun 2003, Sathi wrote:

 Hello All,
 
 I have installed RedHat Linux-9 and configured has domian controller for
 windows users. I have HP's tape drive in this Machine.
 
 Is it possible to share this tape drive to all the windows users to this
 tape drive using Samba?
 
 Regards,
 Sathi


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] How to share the tape drive in samba server for windowsuser

2003-06-18 Thread Jonathan Johnson
Also check out Sync2Nas ( http://sync2nas.sourceforge.net/ ) and rsync (
http://rsync.samba.org/ ).

--Jon

On Wed, 18 Jun 2003, Jonathan Johnson wrote:

 A better way is to use a client/server backup solution which has a backup
 server running on the Linux box, and backup clients running on the Linux box
 and all the workstations. When a user wants to run a backup or restore job,
 the appropriate tape is placed in the drive on the Linux server, then they
 use the client to submit the job. The advantage here is that multiple jobs
 can be submitted simultaneously and they are queued; once they reach the top
 of the queue, the job runs, backing up the files from the workstation.
 
 A quick search reveals this software to look at: NovaNet
 (www.network-backup.com), Arkeia (www.arkeia.com), NetVault Workgroup
 Edition (www.bakbone.com), (Veritas BackupExec not available for Linux,)
 anyone know of open-source, multi-platform network-aware backup software?
 
 Arkeia Light is a free version for Linux that also supports two clients
 ( http://www.arkeia.com/arkeialight.html ).
 
 I'm not aware of any software that creates a virtual tape drive that can
 be seen by Windows' native backup software as a tape device.
 
 --Jon
 
 On Wed, 18 Jun 2003, Sathi wrote:
 
  Hello All,
  
  I have installed RedHat Linux-9 and configured has domian controller for
  windows users. I have HP's tape drive in this Machine.
  
  Is it possible to share this tape drive to all the windows users to this
  tape drive using Samba?


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Calculating file size.

2003-06-18 Thread José Luis Tallón
At 17:13 18/06/2003 +0100, you wrote:
Hello!
As it happens I am having some real nightmares with this too.
Using NETGEAR ND520 NAS devices [Yes! I know - rod for own back...]
But the fact it is a Linux device sold me ahead of a W2K Appliance
[snip]
If those S-O-D figures are real ( I mean, W2K is not making them up ), 
you'd rather use ReiserFS for your Linux Samba server -- it would save you 
*tons* of disk

Sure, I'll be obseleting these NAS soon but my plan was to build a custom
Linux Samba server to handle the task.  Now I'm not so sure
Why ?


-DG

IT Manager
ISV
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] vampire: account mapping strangeness

2003-06-18 Thread Mark Roach
I am testing samba 3.0's net rpc vampire tool and am getting strange
results... after I import the account info, the samba usernames seem to
be mapping to hardcoded unix uid #'s instead of account names. For
example:

# pdbedit -u jah000
idmap uid range missing or invalid
idmap will be unable to map foreign SIDs
idmap gid range missing or invalid
idmap will be unable to map foreign SIDs
jah000:4:TNCorp - Heyer, Jeff A.

# getent passwd jah000
jah000:x:1003:100::/home/jah000:/bin/bash

why is jah000's account in the pdb linked to uid 4? I'm guessing that it
has something to do with the idmap stuff, but I'm not sure where to go
from here... any thoughts? 

Thanks,

Mark Roach




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Full wNT/w2K ACL conformance

2003-06-18 Thread Hall, Ken (IDS ECCS)
Never attribute to malice that which can adequately be explained by stupidity.

Or in this case, an attempt at compatibility for users who had come from the DEC 
minicomputer world.

DOS 1.0 took a lot of it's command line conventions from CP/M, which got them from the 
old DEC stuff.  RT-11, OS-8, etc.  UNIX wasn't really on anyone's radar screen at that 
point, at least not for
PC's.

There's no logic here, just however someone felt like doing it.  No usability 
studies, and design-by-committee in those days.

Can you imagine a review committee letting someone get away with ls, cat, and 
grep these days? DIR and TYPE at least made some sense, even if PIP didn't. :)

 -Original Message-
 From: Dragan Krnic [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 18, 2003 12:26 PM
 To: Michael MacIsaac
 Cc: [EMAIL PROTECTED]
 Subject: [Samba] Re: Full wNT/w2K ACL conformance
 
 
 UH-OH! Maybe it's IBM's fault:
 
 Those OS's used forward slash as the option 
 indicator on command line utilities.  In their 
 earliest form, neither had hierarchical directories,
 so there was no conflict.  When UNIX-style paths
 appeared in DOS 2.0, to avoid breaking compatibility 
 with existing BAT files (and confusing users), IBM 
 (or whoever) used the backslash for the path 
 separator.
 
 Here we go again: why slash and not dash? Seattle
 Computers had global ulterior designs for sure {:-)
 
 Thanks.
 
 
 
 Get advanced SPAM filtering on Webmail or POP Mail ... Get Lycos Mail!
 http://login.mail.lycos.com/r/referral?aid=27005
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Calculating file size.

2003-06-18 Thread David Gilligan, Nyfix O'seas, Inc.
OK.  Maybe the 'not-so-sure' was a bit provocative on this list. G

As I can't afford a 'Filer', Samba is ~obviously~ my best option.

WinXP reports the same figures though - maybe the answer is another DLT
drive direct onto the (New-Improved!) Samba box; rather than mapping drives
to the W2K backup server.

Nevertheless, the sizes can't be *real* - according to the stats my drive is
3 times bigger than it was when I bought it!
Point taken on the journaling FS.  Can anyone compare small file performance
between RH ext3 and ReiserFS?

Made me think - thanks for the input

-DG


 -Original Message-
 From: Jose Luis Tallon [mailto:[EMAIL PROTECTED]
 Sent: 18 June 2003 6:06 PM
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: Re: [Samba] Calculating file size.


 At 17:13 18/06/2003 +0100, you wrote:
 Hello!
 As it happens I am having some real nightmares with this too.
 
 Using NETGEAR ND520 NAS devices [Yes! I know - rod for own back...]
 But the fact it is a Linux device sold me ahead of a W2K Appliance
 
 [snip]

 If those S-O-D figures are real ( I mean, W2K is not making them up ),
 you'd rather use ReiserFS for your Linux Samba server -- it would
 save you
 *tons* of disk

 Sure, I'll be obseleting these NAS soon but my plan was to build a custom
 Linux Samba server to handle the task.  Now I'm not so sure

 Why ?


 -DG
 
 IT Manager
 ISV
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbpasswd -a failure

2003-06-18 Thread Pushpa Bathini
Hello,

I am trying to run Samba 2.2.8a in an embedded linux system and
running into problems with smbpasswd.  With both smbd and nmbd
processes running fine ( the log files at log level 3 don't show
errors),
when I try to add a user to the smbpasswd file I get the following
error.

# smbpasswd -a pbathini
New SMB password:
Retype new SMB passwd:
User pbathini does not exist in system passwd file ( usually
/etc/passwd).
Cannot add accounet without a valid local system user.
Failed to modify password entry for user pbathini
#


My /etc/passwd file looks like this.

root::0:0:root:/:/bin/sh
nobody::99:99:Nobody:/:/bin/sh
pbathini::500:500::/cramfs:/bin/sh

Why is smbpasswd unable to find user entry in /etc/passwd file?
Can somebody please help?

Pushpa


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Cannot Authenticate against AD ...

2003-06-18 Thread Ernie Cline
Hey all,
I have a Windows 2000 AD PDC that hosts a domain.  He also trusts our 
existing Windows NT domain (2-way trust, they both trust each other).  I 
also have a Gentoo Linux machine that I have compiled Samba 3.0 on.  I 
can get almost everything to work with regards to talking to the Windows 
2k PDC, like this:

mccoy samba # wbinfo -u
LIGHTSPEED+Administrator
LIGHTSPEED+Guest
LIGHTSPEED+TsInternetUser
LIGHTSPEED+IUSR_KINGATRHYME
LIGHTSPEED+IWAM_KINGATRHYME
LIGHTSPEED+krbtgt
LIGHTSPEED+RI-ONLINE$
LIGHTSPEED+ecline
LIGHTSPEED+jlally
But whenever I try anything regarding authentication, it fails:

mccoy samba # wbinfo -a ecline%blahblah
plaintext password authentication failed
error code was NT_STATUS_NO_LOGON_SERVERS (0xc05e)
error messsage was: No logon servers
Could not authenticate user ecline%blahblah with plaintext password
challenge/response password authentication failed
error code was NT_STATUS_NO_LOGON_SERVERS (0xc05e)
error messsage was: No logon servers
Could not authenticate user ecline with challenge/response
Also, I have tried to get the pam setup to work, without much success. 
See here:

Jun 18 10:09:44 mccoy sshd(pam_unix)[11074]: check pass; user unknown
Jun 18 10:09:44 mccoy sshd(pam_unix)[11074]: check pass; user unknown
Jun 18 10:09:44 mccoy pam_winbind[11074]: request failed: No logon 
servers, PAM error was 4, NT error was NT_STATUS_NO_LOGON_SERVERS
Jun 18 10:09:44 mccoy pam_winbind[11074]: request failed: No logon 
servers, PAM error was 4, NT error was NT_STATUS_NO_LOGON_SERVERS
Jun 18 10:09:44 mccoy pam_winbind[11074]: internal module error (retval 
= 4, user = `jlally'
Jun 18 10:09:44 mccoy pam_winbind[11074]: internal module error (retval 
= 4, user = `jlally'
Jun 18 10:09:44 mccoy pam_winbind[11074]: request failed: No logon 
servers, PAM error was 4, NT error was NT_STATUS_NO_LOGON_SERVERS
Jun 18 10:09:44 mccoy pam_winbind[11074]: request failed: No logon 
servers, PAM error was 4, NT error was NT_STATUS_NO_LOGON_SERVERS
Jun 18 10:09:44 mccoy pam_winbind[11074]: internal module error (retval 
= 4, user = `jlally'
Jun 18 10:09:44 mccoy pam_winbind[11074]: internal module error (retval 
= 4, user = `jlally'
Jun 18 10:09:44 mccoy sshd[11074]: Failed password for jlally from 
172.22.4.97 port 54689 ssh2
Jun 18 10:09:44 mccoy sshd[11074]: Failed password for jlally from 
172.22.4.97 port 54689 ssh2
Jun 18 10:09:46 mccoy sshd(pam_unix)[11074]: check pass; user unknown
Jun 18 10:09:46 mccoy sshd(pam_unix)[11074]: check pass; user unknown

So I am not sure where to go from here.  I can provide some verbose 
log.winbind files, or tcpdump if neccessary.   What i am ultimately 
trying to accomplish is allowing people who have 2000 accounts in AD 
access to my linux machines.  We have a lot of web tools that rely on 
having a valid account on the unix machine, and this would make my life 
a lot easier.  Interestingly enough, just using su - domain user works 
just fine, as long as I first set them up with a home directory:

mccoy samba # su - jlally
[EMAIL PROTECTED] jlally $ id
uid=10007(LIGHTSPEED+jlally) gid=1(LIGHTSPEED+Domain Users) 
groups=1(LIGHTSPEED+Domain 
Users),10001,10002,10003(LIGHTSPEED+Domain Admins)
[EMAIL PROTECTED] jlally $

If you need any further information, please let me know ...

-e

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] How to share the tape drive in samba server for windowsuser

2003-06-18 Thread Jay Fenlason
On Wed, Jun 18, 2003 at 09:46:52AM -0700, Jonathan Johnson wrote:

 If you're looking to share the tape drive so you can use Windows' native
 backup utility to write directly to the tape, sorry -- can't be done with
 Samba. This is because a tape drive is not seen by the system as a disk
 drive; the software wants to communicate directly with the drive. A tape
 drive is a sequential, exclusive access device, not a random access device.
 That means that only one process can read/write to the drive at a time, and
 the tape is written/read from front to back.

You could probably do something clever with a magic script in the
Samba config, but it still wouldn't work with native Windows backup
utilities.  (Are there native Windows backup utilities that can access
a remote tape drive?)  You could probably get it to work with tar
under Cygwin if you tried hard enough.  But if Cygwin's tar doesn't
have remote-tape access disabled, you'd be better off using that
instead--it's much lower overhead.

...

 A quick search reveals this software to look at: NovaNet
 (www.network-backup.com), Arkeia (www.arkeia.com), NetVault Workgroup
 Edition (www.bakbone.com), (Veritas BackupExec not available for Linux,)
 anyone know of open-source, multi-platform network-aware backup software?

There's always Amanda (http://www.amanda.org/).  It can back up
Windows clients in one of several ways.  The three obvious ones are:

1: build the Amanda client software under Cygwin.  See
http://randomnotes.pwp.blueyonder.co.uk/Amanda-Cygwin-HOWTO.html
for instructions.  I use this method to back up my Windows 2K laptop.

2: use Amanda's smbclient interface as described in the Amanda
documentation.

3: smbmount (or other network filesystem) the Windows client drive on
a Unix/Linux/BSD machine and have Amanda back that up.

There's been some effort to create a native Windows Amanda client, but
I don't think it's completed or usable yet.


-- JF
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Drive letter map to Samba using ssh or scp?

2003-06-18 Thread Jonathan Johnson
OK, what I want to do is access files on my Samba server remotely.

Currently, I can use WinSCP, but this isn't ideal because it is more like an
FTP client, where you have to download a file, edit it, upload it. I could
set up a VPN (using open source software), but these can be kind of a
headache to get working (I've done it before) and they don't necessarily
support multiple simultaneous connections.

I could set up an SSH tunnel, but this is awkward and I don't want to teach
(l)users how to do this (getting them to type anything from a command line
-- correctly -- is like herding cats or pushing a rope).

I want realtime access -- that is, open/save files from an application
using the standard API's but have the files on the remote system instead of
my local workstation.

Shouldn't there be someway of using SSH or SCP to transparently connect to a
Samba share, and have the share appear as a drive letter?

I envision a GUI that prompts for an internet hostname, an SSH user/pass; a
Samba server name and Samba user/pass. Done properly, the SSH server could
be on the LAN, and allow you to connect to ANY smb server (Window inc.) on
the LAN. Logging in using this UI sets up an SSH tunnel automatically,
presents a list of available shares; you can then select one and a drive
letter to map it to. A configuration could be saved so that the connection
is made automatically when the user logs in to his own workstation.
Basically, I guess, this would be a GUI for SSH tunnels.

OK, so maybe this is getting awfully close to VPN. But since SSH is already
there and would require no additional setup, wouldn't there be easy way to
take advantage of it?

Anyone done anything like this? I don't want to reinvent the wheel if I
don't have to.

--Jon


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] can't log in from windoz 2000

2003-06-18 Thread Paul Mallasch
Mark-

You're The Man!

Opened RedHat 8.0 firewall to ports 137-139 and it authenticated instantly!

One more question, where in the Samba docs does it talk about this kind of 
thing?

Thanks for such a quick  correct solution, I appreciate it.

--Paul

Original Message Follows
From: Mark [EMAIL PROTECTED]
To: 'Paul Mallasch' [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: RE: [Samba] can't log in from windoz 2000
Date: Tue, 17 Jun 2003 17:59:09 -0700
Are you by chance running Redhat with the default firewall blocking
ports 137-139?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Paul Mallasch
Sent: Tuesday, June 17, 2003 5:09 PM
To: [EMAIL PROTECTED]
Subject: [Samba] can't log in from windoz 2000
I have the same problem, but ping works fine.

Browsing Network Neighborhood also displays Samba server  server string

from smb.conf, but same WinDoze error as below is experienced.

I can logon to Samba on server using smbclient locally however.

Clues?

ThX
--paul
On Tue, 13 May 2003, Webmaster wrote:

i can see the linux share from windoz 2000 but can't log in ...

here is the error from windoz (2000)

C:\net use x: \\ericred\www
System error 53 has occurred.
What happens when you do:

	ping ericred

from the Win2K machine?

- John T.


The network path was not found.

I think problem is related to using encrypted passwords.  I was using
unencrypted passwords before...

can't see any errors in logs.  any suggestions on how to track down the
problem would be appreciated.

linux newbie
_
MSN 8 with e-mail virus protection service: 2 months FREE*
http://join.msn.com/?page=features/virus
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
_
Tired of spam? Get advanced junk mail protection with MSN 8. 
http://join.msn.com/?page=features/junkmail

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Printing trouble in Citrix

2003-06-18 Thread [EMAIL PROTECTED]
To all,

I've been having some trouble with printing in my Citrix server. Here's the setup:

IBM w/ AIX 4.3.3 using Samba 2.0.3  suppose to be able to connect to Citrix.

We have just migrated over to a new domain and since I've configured the smb.conf file 
from the old domain to the new one, I haven't been able to print. Any ideas?

Sincerely,

Rob Kenner
AIX System Administrator 
EOIR System Support
(703)605-1114
pager: (800)759-
pin: 1252689
email to pager: [EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3, Domain Trusts, Exchange server

2003-06-18 Thread Joe Dougherty
Has anyone come up with a series of steps to successfully set up a trust
with a Windows 2000 domain using AD?

I have a Samba 3beta server set up as the PDC for a new domain(OPS). It's on
the same physical network as the Windows domain (ADMIN).
The W2K domain is an AD-based native domain. On that domain is a member
server running NT4 Server and Exchange 5.5. I need to allow user access from
the OPS domain to mail accounts on the Exchange box in the other domain.

I don't need any kind of AD-like features or compatibility on the new OPS
domain. The Samba server will provide all the Windows functionality
necessary to a handful of clients.

I've followed the recommendations in the beta configuration pdf document,
but it only covers setting the trust up using NT4 User Manager. This won't
work in the ADMIN domain, as the Exchange box is not a DC. I attempted to
use the Domain tool on W2K server, but  all I wind up with is a bunch of
cryptic errors.

The two domains can browse one another all day, but when I try to do
specific things that require trusts (i.e., establish connections to the
Exchange server for a mialbox in Outlook), I can't get it done.

Any suggestions or advice would be welcome.

Here's my smb.conf:

# Global parameters
[global]
 workgroup = OPS
 netbios name = JAGUAR
 server string = OPS Department Samba DC
 security = user
 passdb backend = smbpasswd,guest
 preferred master = yes
 domain master = yes
 local master = yes
 log level = 2
 log file = /usr/local/samba/var/log.%m
 max log size = 50
 logon path = \\%L\profiles\%U
 logon drive = u:
 domain logons = Yes
 os level = 99
 dns proxy = No
 admin users = smith
 username map = /usr/local/samba/private/username.map
 logon script = login.bat
 passwd program = /usr/bin/passwd %u
 unix password sync = yes
; added 6/16/03
 idmap uid = 1-15000
 idmap gid = 1-15000

[homes]
 read only = No
 browseable = no
 create mask = 0600
 directory mask = 0700

[profiles]
 path = /profiles
 read only = No
 create mask = 0600
 directory mask = 0700
 csc policy = disable

[netlogon]
 path = /usr/local/samba/netlogon
 admin users = root
 write list = root @admins

[shared]
 comment = Shared Files Directory
 path = /home/shared
 read only = no
 create mask = 0600
 directory mask = 0700
 browseable = yes

[storage]

 comment = Server Storage Directory
 path = /storage
 read only = no
 create mask = 0600
 directory mask = 0700
 browseable = yes
 valid users = @admins
 write list = @admins



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Slow windows - cups print (Facts discovered)

2003-06-18 Thread Joel Hammer
I am not really sure of your set up. 

I assume you have installed the drivers on the windows client. 

And, I assume you send the job to a raw queue on the linux box. If not,
maybe your linux filter is removing colors.

I would look at the driver configuration on the windows client and make
sure you don't have some option checked for BW only.

You might print the job to a file, send it over to
the linux box, and  open it with gv, and see if you have color.

Sometimes, depending on your setup, the test page goes to a different
queue than the real print jobs.

Joel



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] New Samba Server

2003-06-18 Thread Tim Rowe
I've been lead to believe that the more drives on the raid 5 the faster
the output, as I don't want the hard drive setup as the bottleneck...
The cost between having 3 x 100gb drives and 8 x 40gb drives isn't a
huge issue...

-Original Message-
From: Seth Hollen
Sent: Thursday, 19 June 2003 1:46 a.m.

3ware makes great controllers, but you will be limited to the pci bus
bandwidth for the raid arrays. instead of 8x40 I would look for the best
cost/size ratio. I think 120GB hard drives can be found for around
$100.00 (us) I'd put 3 in a raid5 array for performance. 

-Original Message-
Sent: Wednesday, June 18, 2003 12:20 AM
To: [EMAIL PROTECTED]
Subject: [Samba] New Samba Server


I'm currently looking at hardware specs for a samba server, its' job
will be to hold general office files, cad / solidworks files along with
approximately 40 outlook PST files that will be opened off the server.

Here are the current specs I'm looking at..

AMD 2600XP
Asus A7N8X Deluxe nVidia Serial ATA
2 x 512 MB PC2700 DDR 333 = 1024MB
ASUS S520/Generic 52X CD-ROM (OEM)
ASUS GrForce4 MX440-8X 64MB DDR
D-Link DGE-550T 32/64-Bit PCI-Bus Copper (RJ45)

3Ware Escalade 7500-8
8 x 40gb ata-100 7200.7 drives 

3Ware Escalade 7500-4  
4 x 40gb ata-100 7200.7 drives

The 7500-8 will be holding the office and cad / solid works files and
the 7500-4 will be holding the PST files (I thought it was best to keep
them on a separate controller cards.)

Will this do a reasonable job in keeping up with a gigabit network? And
is running PST files off the server like this a feasible option??

Any suggestions on hardware improvements would be appreciated as without
the hardware to test with I'm purchasing quite blindly here :|

Thanks
Tim

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] can't log in from windoz 2000

2003-06-18 Thread John H Terpstra
On Wed, 18 Jun 2003, Paul Mallasch wrote:

 Mark-

 You're The Man!

 Opened RedHat 8.0 firewall to ports 137-139 and it authenticated instantly!

 One more question, where in the Samba docs does it talk about this kind of
 thing?

It is well covered in the Samba-3.0.0 Samba-HOWTO-Collection.pdf that will
ship soon. You can obtain my work-in-progress version from:

http://samba.org/~jht/NT4migration/Samba-HOWTO-Collection.pdf

 - John T.


 Thanks for such a quick  correct solution, I appreciate it.

 --Paul

 Original Message Follows
 From: Mark [EMAIL PROTECTED]
 To: 'Paul Mallasch' [EMAIL PROTECTED], [EMAIL PROTECTED]
 Subject: RE: [Samba] can't log in from windoz 2000
 Date: Tue, 17 Jun 2003 17:59:09 -0700

 Are you by chance running Redhat with the default firewall blocking
 ports 137-139?

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On
 Behalf Of Paul Mallasch
 Sent: Tuesday, June 17, 2003 5:09 PM
 To: [EMAIL PROTECTED]
 Subject: [Samba] can't log in from windoz 2000


 I have the same problem, but ping works fine.

 Browsing Network Neighborhood also displays Samba server  server string

 from smb.conf, but same WinDoze error as below is experienced.

 I can logon to Samba on server using smbclient locally however.

 Clues?

 ThX
 --paul

 On Tue, 13 May 2003, Webmaster wrote:
  
  i can see the linux share from windoz 2000 but can't log in ...
  
  here is the error from windoz (2000)
  
  C:\net use x: \\ericred\www
  System error 53 has occurred.

 What happens when you do:

   ping ericred

 from the Win2K machine?

 - John T.

  
  The network path was not found.
  
  I think problem is related to using encrypted passwords.  I was using
  unencrypted passwords before...
  
  can't see any errors in logs.  any suggestions on how to track down the

  problem would be appreciated.
  
  linux newbie

 _
 MSN 8 with e-mail virus protection service: 2 months FREE*
 http://join.msn.com/?page=features/virus

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

 _
 Tired of spam? Get advanced junk mail protection with MSN 8.
 http://join.msn.com/?page=features/junkmail



-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Full wNT/w2K ACL conformance

2003-06-18 Thread Shawn Wright
On 18 Jun 2003 at 15:39, Dragan Krnic wrote:

 The show-stopper right now is this: we need to be 
 able to assign real  Full Control permissions: a 
 user who has Full control on a directory  should
 be able to Read, Write, eXecute ( of course) [ this 
 can be easily achieved with ACLs ]  *plus*  being 
 able to give away Full Control to other users too
 [being able to override inherited ACLs would be a 
 plus, too]. Is this feasible (remember smbd runs as 
 root... )? Has somebody thought about implementing 
 this ?
 
 If you have Full Control over a directory (e.g. as
 root, or own it or have rwx on it), you can give FC 
 (rwx) to others. Is it perhaps the other way around, 
 that you want to stop this delegation, unless an FC
 EA explicitely allows it? I'm not sure if it can be
 a show-stopper or if it really makes a difference.

In our case, the only users who require Full Control access are admins, 
so we use admin users = @domain/domain admins. Not ideal, but it 
gives us the NT equivalence we require, and has allowed us to migrate a 
large portion of our file storage to Samba.

We find the option nt acl support = no to be a nice feature that is not 
available on NT. It prevents our students from messing with ACLs (for 
their own files) which had been a problem on NT. We provide a second 
admin access only share which provides ACL support for admins.


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Shawn Wright, I.T. Manager
Shawnigan Lake School
http://www.sls.bc.ca
[EMAIL PROTECTED]
Friends don't let friends use Outlook.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Access Denied

2003-06-18 Thread Joel Hammer
Why don't you post your smb.conf?
I avoid all password hassles with the following global and share
definitions:

[global]
encrypt passwords = yes 
security = SHARE
guest account = ftp


[AllFiles]
comment = All Files
path = /
read only = no
guest ok =  yes

For a walk on the wild side, try making:
   guest account = root 

Joel

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Access Denied

2003-06-18 Thread Jerry Moore

Here is the smb.conf.

# Samba config file created using SWAT
# from mfg_jsuther_95.sat.faidor.com (172.16.15.242)
# Date: 2003/06/18 14:45:09

# Global parameters
[global]
workgroup = MYGROUP
server string = Samba Server
null passwords = Yes
unix password sync = Yes
log file = /usr/local/samba/var/log.%m
max log size = 50
dns proxy = No

[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No

[moorej]
comment = Home Directory
path = /home/moorej
valid users = moorej
read only = No

[tmp]
comment = Temporary file space
path = /tmp
user = moorej



--- Joel Hammer [EMAIL PROTECTED] wrote:

Why don't you post your smb.conf?
I avoid all password hassles with the following global and share
definitions:

[global]
encrypt passwords = yes 
security = SHARE
guest account = ftp


[AllFiles]
comment = All Files
path = /
read only = no
guest ok =  yes

For a walk on the wild side, try making:
   guest account = root 

Joel

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Access Denied

2003-06-18 Thread Mark
Add to [global]

Encrypt passwords = yes,

Restart samba


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Jerry Moore
Sent: Wednesday, June 18, 2003 3:46 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [Samba] Access Denied



Here is the smb.conf.

# Samba config file created using SWAT
# from mfg_jsuther_95.sat.faidor.com (172.16.15.242)
# Date: 2003/06/18 14:45:09

# Global parameters
[global]
workgroup = MYGROUP
server string = Samba Server
null passwords = Yes
unix password sync = Yes
log file = /usr/local/samba/var/log.%m
max log size = 50
dns proxy = No

[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No

[moorej]
comment = Home Directory
path = /home/moorej
valid users = moorej
read only = No

[tmp]
comment = Temporary file space
path = /tmp
user = moorej



--- Joel Hammer [EMAIL PROTECTED] wrote:

Why don't you post your smb.conf?
I avoid all password hassles with the following global and share
definitions:

[global]
encrypt passwords = yes 
security = SHARE
guest account = ftp


[AllFiles]
comment = All Files
path = /
read only = no
guest ok =  yes

For a walk on the wild side, try making:
   guest account = root 

Joel

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Access Denied

2003-06-18 Thread Joel Hammer
This is hardly wide open.
Try adding security = share to global. Security is by default user.
You have no guest user allowed shares, either.
Joel



On Wed, Jun 18, 2003 at 10:46:16PM +, Jerry Moore wrote:
 
 Here is the smb.conf.
 
 # Samba config file created using SWAT
 # from mfg_jsuther_95.sat.faidor.com (172.16.15.242)
 # Date: 2003/06/18 14:45:09
 
 # Global parameters
 [global]
   workgroup = MYGROUP
   server string = Samba Server
   null passwords = Yes
   unix password sync = Yes
   log file = /usr/local/samba/var/log.%m
   max log size = 50
   dns proxy = No
 
 [homes]
   comment = Home Directories
   valid users = %S
   read only = No
   browseable = No
 
 [moorej]
   comment = Home Directory
   path = /home/moorej
   valid users = moorej
   read only = No
 
 [tmp]
   comment = Temporary file space
   path = /tmp
   user = moorej
 
 
 
 --- Joel Hammer [EMAIL PROTECTED] wrote:
 
 Why don't you post your smb.conf?
 I avoid all password hassles with the following global and share
 definitions:
 
 [global]
 encrypt passwords = yes 
   security = SHARE
   guest account = ftp
 
 
 [AllFiles]
   comment = All Files
   path = /
   read only = no
   guest ok =  yes
 
 For a walk on the wild side, try making:
guest account = root 
 
 Joel
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WinBind and gdm/login

2003-06-18 Thread Patrick Gunerud
The only way I could get it to work was to have the following gdm pam 
config:

#%PAM-1.0
auth   requiredpam_env.so
auth   sufficient   pam_winbind.so
auth   sufficient   pam_unix.so use_first_pass
auth   requiredpam_stack.so service=system-auth
auth   requiredpam_nologin.so
accountsufficient   pam_winbind.so
accountrequiredpam_stack.so service=system-auth
password   requiredpam_stack.so service=system-auth
sessionrequired pam_mkhomedir.so skel=/etc/skel/ umask=0022
sessionrequiredpam_stack.so service=system-auth
sessionoptional pam_console.so
That will allow gdm to authenticate the user, but it will not allow 
usernames with a + or \ separator so the way around that is to set the 
following option:

winbind use default domain = yes

that will allow loging in with just the username.  The only problem 
occurs when you have a user from another domain that needs to login.

Patrick

Brett Hales wrote:

Hi,

I am currently trying to set up a RedHat 9 Linux client to authenticate
against a Windows 2000 Active Directory server.
Using the Winbind documentation I have successfully authenticated
however I now have a problem with gdm.
Jun 18 12:18:48 jerry pam_winbind[1192]: user 'AU+Bhales' granted acces
Jun 18 12:18:48 jerry pam_winbind[1192]: user 'AU+Bhales' granted acces
Jun 18 12:18:49 jerry gdm(pam_unix)[1192]: session opened for user
AU+Bhales by (uid=0)
Jun 18 12:18:49 jerry gdm[1202]: gdm_slave_session_start: User not
allowed to log in
Does anybody know why gdm_slave_session_start is not allowing me to
login when pam_winbind has already authenticated me?
Thanks,

 



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Slow windows - cups print (Facts discovered)

2003-06-18 Thread Miguel Manso
Hi there,

I've created a CUPS filter to capture de content it's receiving and the
Postscript sent by adobe's postscript printer driver arrived B/W.

On the windows printer (with the adobe driver) I don't have any option to
activate color. I've something on the Printer Preferences that says: Color: No.

Can't I print colors with this driver? Should I look for a different one?

Any help will be appreciated.

-- 
Miguel Manso [EMAIL PROTECTED]


Quoting Joel Hammer [EMAIL PROTECTED]:

 I am not really sure of your set up. 
 
 I assume you have installed the drivers on the windows client. 
 
 And, I assume you send the job to a raw queue on the linux box. If not,
 maybe your linux filter is removing colors.
 
 I would look at the driver configuration on the windows client and make
 sure you don't have some option checked for BW only.
 
 You might print the job to a file, send it over to
 the linux box, and  open it with gv, and see if you have color.
 
 Sometimes, depending on your setup, the test page goes to a different
 queue than the real print jobs.
 
 Joel
 
 
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Win2K Machine Accounts No Longer Valid after Samba PDC Upgrade (2.2.2 to 2.2.8a)

2003-06-18 Thread Chris McKeever


 -Original Message-
 From: Geoff Stitt [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, June 18, 2003 10:34 AM
 To: [EMAIL PROTECTED]
 Subject: [Samba] Win2K Machine Accounts No Longer Valid after 
 Samba PDC
 Upgrade (2.2.2 to 2.2.8a)
 
 
 My apolgies in posting this again. However I was hoping someone
 had a suggestion...
 
 Symptom:   After upgrading our Primary Domain Controller
from Samba 2.2.2 to Samba 2.2.8a, users attempting 
to login from Windows 2000 clients are no longer 
able to do so. 
 
 Details:   After some research it was discovered that if a Windows
2000 client re-joins the domain served by the upgraded
version of Samba, users are then able to, once again,
log into this domain.
 
It was also discovered that if the Samba PDC was downgraded
to its original version of 2.2.2, any windows 2000 client
that re-joined the domain while the Samba PDC was at  
version 2.2.8a, was still able to log into the domain.
 
As additional information, both versions of the Samba
PDC were compiled on SPARC architecture running Solaris 8.0
 
 
 As the above comments suggest, machine accounts are 
 backward-compatible,
 but *not* forward-compatible between Samba versions 2.2.2 and 2.2.8a.
 
 After researching the Samba mailing lists and newsgroups it is more
 or less understood that in order to deal with problems of this nature
 each windows 2000 machine account needs to be recreated. Which is
 a very time-consuming effort.
 
 Is there a better way to deal with this upgrade path?
 
 Ideally where I don't have to visit each windows 2000 machine in order
 to re-create their machine accounts?  A migration utility or set of
 server-side steps perhaps? 
 
 ...geoff
 

I cant comment on the compatibility issues, but you could make an account
that will allow the addition of the machines to the domain and then set the
add user script to do the rest.  Granted you will have to ask your users to
do some work, but it is better than schleping all over.

Another suggestion would be fo r future to put a remote viewer app on your
clients (tightvnc.com) that will allow you to do it all remotely.

 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Quickbooks revisited

2003-06-18 Thread drgn65
I don't know what your setup is but here is mine.
I run samba 2.2.7.  I don't use oplocks on my share that QuickBooks is on.
You most definately don't want to.  Other than that I have a pretty basic
setup.  I did not notice any difference between the file on my linux server
(primary file server) or on a Win2000 Server share.  What version of
QuickBooks are you using?  How many users on your network?  How many users
accessing QuickBooks?  Does your linux server run a lot of other server
daemons?

-Original Message-
From: Justin Kreger [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 17, 2003 10:28 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Quickbooks revisited


What about file locking?

I've run into lots of file locking problems, leading me to slowly just
turn off file locking on several shares due to quickbooks.  My user also
reports that quickbooks is now slower since I took the server to
linux/samba from the win2k server that was limited to .

On Tue, 2003-06-17 at 16:03, [EMAIL PROTECTED] wrote:
 I have QucikBooks on our network too.  I have had a number of problems
with
 this crappy software.  If my client actually wanted me too I'd rather
create
 my own accounting software with a better interface and a mysql backend but
 that isn't going to happen.  A few things with QuickBooks that I have
 noticed that maybe will help.

 #1. QuickBooks in multi-user mode is much slower than in single user mode.
 This is the (crappy) design of QuickBooks.  It has to do with the fact
that
 QuickBooks checks everything everywhere when in multiuser mode to make
sure
 that no data gets corrupted (even though it has corrupted before).  Our
 company datafile is around ~180mb.

 #2. This problem will not be solved easily at all.  Quickbooks appears to
be
 as slow as the weakest client link.  In our case a P2 300 w/ 64 megs of
ram.
 Again, this has to do with #1.

 #3. Upgrading Quickbooks won't help.  We've had many versions in the past
 and currently run the Enterprise Edition.  It still can be as slow as a
 turtle under certain operations.

 #4. My biggest complain with this software is that it requires it's users
to
 be Power Users.  Boy do I hate that With samba it's very difficult
for
 me to limit a Power user's ability and I have had people take advantge of
it
 repeatedly.  Damn QuickBooks

 -Peter

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Slow windows - cups print - CONCLUSION

2003-06-18 Thread Miguel Manso
Hi list,

I've just figured it out.

When we're installing the drivers from adobe there's a part where we must
Select the Printer Model. By default it uses the Generic Postscript Printer
(it has an associated PPD for that). We must get a PPD for our printer
(installed on the linux server) from the www.linuxprinting.org, click the
Browse button and select that PPD. After that you'll have a new printer
installed an all will work like a charm.

Note:

Inside the PPD of my printer (HP OfficeJet 5110) I had these line (despite all
the others :) ):

*ShortNickName: HP OfficeJet 5110, hpijs
*NickName:  HP OfficeJet 5110, Foomatic + hpijs (recommended)

On the instalation of the Adobe drivers I had erros saying my printed had
illegal chars on it's name. So, I've replaced the previous lines with:

*ShortNickName: HP OfficeJet 5110
*NickName:  HP OfficeJet 5110


Hope this helps anyone.

Bye,

-- 
Miguel Manso [EMAIL PROTECTED]




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] LAN Browsing shows IP Addresses instead of Computer Names.

2003-06-18 Thread Mega Spaz
hmm looks like I'm gonna do it how I did it before and just add the ip 
address and computer name pairs in /etc/hosts and have my router assign 
static ip addresses.  Thanks for all the suggestions.  you guys are great.

Although, I'd still like to know how MS Network Neighborhood does it.  I 
don't want to set up my linux box as a server of any type since it's a 
laptop and is often taken out of the network when I travel.  I mean let's 
just say for the sake of argument, that i've got a linux machine and a 
windows 98SE computer.  How does Network Neighborhood get the computer name 
of my linux machine?  Since I'm know I didn't set up the windows computer 
with any DNS or WINS server.  but i'll go with what works for both. Any 
thoughts, please feel free to post 'em. =)

Sincerely,
Vince

From: Buchan Milne [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
CC: Mega Spaz [EMAIL PROTECTED]
Subject: [Samba] LAN Browsing shows IP Addresses instead of Computer Names.
Date: Tue, 17 Jun 2003 13:06:14 +0200
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
 Message: 7
 Date: Sat, 14 Jun 2003 23:35:42 -0700
 From: Mega Spaz [EMAIL PROTECTED]
 Subject: [Samba] LAN Browsing shows IP Addresses instead of Computer
Names.
 To: [EMAIL PROTECTED]
 Message-ID: [EMAIL PROTECTED]
 Content-Type: text/plain; format=flowed

 I'm trying to figure out how I can have my lan browser display computer
 names instead of IP Addresses.  I think the ip addresses are generated
by my
 router since if I add a new computer, the ip addresses will be
different for
 each computer.  anyway let me give you the specs first.  Running Samba
 2.2.8a-1 on Red Hat 7.3.  I have not set up WINS or DNS at all.
That's your problem, reverse lookups need to work, either via DNS or
nss_wins (apparently it works without a WINS server, in which case it
used broadcasts).
I don't know is RH ships with a working nss_wins, if they do, it should
work by adding wins to the hosts line of your /etc/nsswitch.conf file.
BTW, setting up working reverse DNS would be a better solution, for
services that don't use get*ent, but direct DNS lookups.
 I have set
 up lisarc to use nmblookup.  I'm assuming that my network is using
 broadcasting to get computers in my LAN since i have not set up any
computer
 names in hosts or lmhosts.  The current set up works right now in that
 computers come up and can be browsed independant of the ip addresses
 assigned to the computers.  ie. if computer Tron is up on the network,
and
 then I boot up Sark, Sark will show up at the first next broadcast.
but the
 computers show up in konqueror as ip addresses, not as Tron and Sark.  
My
 very old first setup attempt had me manually adding ip addresses and
names
 manually in the /etc/hosts file.  but that would mess up the lan
browsing if
 another new computer was added to the network.  So if Sark is 
192.168.0.2
 and Tron is 192.168.0.3 and let's say my brother brings his laptop and
i put
 his laptop on the network, the ip addresses on the network will change 
to
 something like Sark = 192.168.0.3, Tron = 192.168.0.2 and my brother's
 laptop maybe something like Bros_comp = 192.168.0.4.  but the /etc/hosts
 file will have the old assignments which really messes up the browsing
part.
   Anyway right now i think i have it set up almost right since i can
browse
 the network and the computers on the network will be found no matter the
 time they are actually booted up, but ip addresses in the lan browsing
isn't
 very useful and I would like to see the computer names displayed in
the lan
 browsing in konqueror.  thank you for your patience, time, and any
help you
 can provide.

- --
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x202
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE+7vYlrJK6UGDSBKcRAtEQAJ9WoGfA34SrYpFl/IwkVOXUPpbyAQCeLrtG
ASziSnkS4UvBQE6GxW9YB1E=
=TamT
-END PGP SIGNATURE-
**
Please click on http://www.cae.co.za/disclaimer.htm to read our
e-mail disclaimer or send an e-mail to [EMAIL PROTECTED] for a copy.
**
_
Add photos to your e-mail with MSN 8. Get 2 months FREE*.  
http://join.msn.com/?page=features/featuredemail

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] vampire: account mapping strangeness

2003-06-18 Thread Andrew Bartlett
On Thu, 2003-06-19 at 03:09, Mark Roach wrote:
 I am testing samba 3.0's net rpc vampire tool and am getting strange
 results... after I import the account info, the samba usernames seem to
 be mapping to hardcoded unix uid #'s instead of account names. For
 example:
 
 # pdbedit -u jah000
 idmap uid range missing or invalid
 idmap will be unable to map foreign SIDs
 idmap gid range missing or invalid
 idmap will be unable to map foreign SIDs
 jah000:4:TNCorp - Heyer, Jeff A.
 
 # getent passwd jah000
 jah000:x:1003:100::/home/jah000:/bin/bash
 
 why is jah000's account in the pdb linked to uid 4? I'm guessing that it
 has something to do with the idmap stuff, but I'm not sure where to go
 from here... any thoughts? 
Try again with a fresh setup, and current 3.0 cvs.  We fixed up some
vampire/idmap issues recently.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] WinXP can`t log on Samba PDC

2003-06-18 Thread Gino Vergara

I`m folowing the steps on the unofficial Samba how to. I already join my 
WinXP box to the domain but I can`t login from my WinXP box after restart.
There is an error message that sais: Windows can`t connect to the domain 
because the domain controller is unable or


I`m using Samba-2.2.7a on red hat 9.0 with kernel 2.4.20-18.9  

this is my smb.conf
[global]
domain logons = yes
encrypt passwords = yes
guest account = smbguest
log level = 2
log file = /var/log/samba.log
logon drive = p:
netbios name = server
os level = 99
preferred master = yes
security = user
  socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192
wins support = yes
workgroup = workgroup

[public]
   path = /tmp
   guest ok = yes
   writeable = yes

EOF

I already made the changes on regedit in my WinXP box.

this is how vipw looks like:
gino:x:500:500::/home/gino:/bin/bash
R32$:x:1200:300:workstation:/dev/null:/bin/false

this vigr:
gino:x:500:
R32:x:1200:
workstation::300:

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] WinXP can`t log on Samba PDC

2003-06-18 Thread Mark
You need the XP signorseal registry patch. Download it, apply and reboot
the pc.

http://us1.samba.org/samba/ftp/docs/Registry/WinXP_SignOrSeal.reg

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Gino Vergara
Sent: Wednesday, June 18, 2003 7:36 PM
To: [EMAIL PROTECTED]
Subject: [Samba] WinXP can`t log on Samba PDC



I`m folowing the steps on the unofficial Samba how to. I already join my

WinXP box to the domain but I can`t login from my WinXP box after
restart. There is an error message that sais: Windows can`t connect to
the domain 
because the domain controller is unable or


I`m using Samba-2.2.7a on red hat 9.0 with kernel 2.4.20-18.9  

this is my smb.conf
[global]
domain logons = yes
encrypt passwords = yes
guest account = smbguest
log level = 2
log file = /var/log/samba.log
logon drive = p:
netbios name = server
os level = 99
preferred master = yes
security = user
  socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192
SO_SNDBUF=8192
wins support = yes
workgroup = workgroup

[public]
   path = /tmp
   guest ok = yes
   writeable = yes

EOF

I already made the changes on regedit in my WinXP box.

this is how vipw looks like: gino:x:500:500::/home/gino:/bin/bash
R32$:x:1200:300:workstation:/dev/null:/bin/false

this vigr:
gino:x:500:
R32:x:1200:
workstation::300:

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] WinXP can`t log on Samba PDC

2003-06-18 Thread Mark
Just noticed that your smb.conf does not contain 
Domain master = yes
And there is no [netlogon] share


Good info on Samba setup can be found here
www.samba.netfirms.com


You need the XP signorseal registry patch. Download it, apply and reboot
the pc.

http://us1.samba.org/samba/ftp/docs/Registry/WinXP_SignOrSeal.reg

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Gino Vergara
Sent: Wednesday, June 18, 2003 7:36 PM
To: [EMAIL PROTECTED]
Subject: [Samba] WinXP can`t log on Samba PDC



I`m folowing the steps on the unofficial Samba how to. I already join my

WinXP box to the domain but I can`t login from my WinXP box after
restart. There is an error message that sais: Windows can`t connect to
the domain 
because the domain controller is unable or


I`m using Samba-2.2.7a on red hat 9.0 with kernel 2.4.20-18.9  

this is my smb.conf
[global]
domain logons = yes
encrypt passwords = yes
guest account = smbguest
log level = 2
log file = /var/log/samba.log
logon drive = p:
netbios name = server
os level = 99
preferred master = yes
security = user
  socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192
SO_SNDBUF=8192
wins support = yes
workgroup = workgroup

[public]
   path = /tmp
   guest ok = yes
   writeable = yes

EOF

I already made the changes on regedit in my WinXP box.

this is how vipw looks like: gino:x:500:500::/home/gino:/bin/bash
R32$:x:1200:300:workstation:/dev/null:/bin/false

this vigr:
gino:x:500:
R32:x:1200:
workstation::300:

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Access Denied

2003-06-18 Thread Tom McKellips
On Wed, 18 Jun 2003 20:37:03 GMT, Jerry Moore wrote
 Despite my efforts, over the last 3 days, to get my PC to mount even 
 the simpiliest /tmp share from the HP server. I have failed. :( I 
 have followed the DIAGNOSIS.txt by Andrew Tridgell and most of the 
 tests work. Only when it comes to connecting from the PC do I get 
 denied. ???  I have tried to set every know paramitter that remotely 
 has to do with authenticating, without success. Restarts of smbd and 
 nmbd were also done between each change. I have it wide-open and 
 still I get denied. What is missing??? I have added account also 
 using smbpasswd -a user also. On unix server mounts/logins work. 
 Tests showing shares work on unix. Swat works on PC also.
 
 Running samba 2.2.3a on HP-UX 10.20.
 
 Installed as a pre-compiled depot.
 
 If I try to run net use on my PC. I get the following below.
 And yes. I am using my NT login password which is the same
 id and password on this unix server:
 
 --
 C:\net use x: \\199.254.200.1\tmp
 The password is invalid for \\199.254.200.1\tmp.
 
 Type the password for \\199.254.200.1\tmp:
 System error 1240 has occurred.
 
 The account is not authorized to login from this station.
 
 --
 
 Desperate help needed here. Leaving Friday.
 
 Jerry
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

You are logging in from a NT box? Do you have a machine trust set up in 
smb.conf and a root in smbpasswd for machine trust account access?

Tom
--
Internet Service Provided By Abyss Communications
Internet Service only $10 a month
1-866-842-2977
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] WinXP can`t log on Samba PDC

2003-06-18 Thread Justin Kreger
So what does this XP Patch do?


In regards to XP, I have XP Home and Pro laptops that have issues when
talking to samba, they connect, then eventually time out, or disconnect,
upon reconnect, XP tries to log in with administrator or a blank
username.  Its driving me to insomnia because I work third shift, and my
coworkers batty because they keep having to call me during the day.


On Wed, 2003-06-18 at 23:39, Mark wrote:
 You need the XP signorseal registry patch. Download it, apply and reboot
 the pc.
 
 http://us1.samba.org/samba/ftp/docs/Registry/WinXP_SignOrSeal.reg
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On
 Behalf Of Gino Vergara
 Sent: Wednesday, June 18, 2003 7:36 PM
 To: [EMAIL PROTECTED]
 Subject: [Samba] WinXP can`t log on Samba PDC
 
 
 
 I`m folowing the steps on the unofficial Samba how to. I already join my
 
 WinXP box to the domain but I can`t login from my WinXP box after
 restart. There is an error message that sais: Windows can`t connect to
 the domain 
 because the domain controller is unable or
 
 
 I`m using Samba-2.2.7a on red hat 9.0 with kernel 2.4.20-18.9  
 
 this is my smb.conf
 [global]
 domain logons = yes
 encrypt passwords = yes
 guest account = smbguest
 log level = 2
 log file = /var/log/samba.log
 logon drive = p:
 netbios name = server
 os level = 99
 preferred master = yes
 security = user
   socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192
 SO_SNDBUF=8192
 wins support = yes
 workgroup = workgroup
 
 [public]
path = /tmp
guest ok = yes
writeable = yes
 
 EOF
 
 I already made the changes on regedit in my WinXP box.
 
 this is how vipw looks like: gino:x:500:500::/home/gino:/bin/bash
 R32$:x:1200:300:workstation:/dev/null:/bin/false
 
 this vigr:
 gino:x:500:
 R32:x:1200:
 workstation::300:
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Quickbooks revisited

2003-06-18 Thread Tom McKellips
On Wed, 18 Jun 2003 20:30:26 -0400, drgn65 wrote
 I don't know what your setup is but here is mine.
 I run samba 2.2.7.  I don't use oplocks on my share that QuickBooks 
 is on. You most definately don't want to.  Other than that I have a 
 pretty basic setup.  I did not notice any difference between the 
 file on my linux server
 (primary file server) or on a Win2000 Server share.  What version of 
 QuickBooks are you using?  How many users on your network?  How many 
 users accessing QuickBooks?  Does your linux server run a lot of 
 other server daemons?
 
 -Original Message-
 From: Justin Kreger [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, June 17, 2003 10:28 PM
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: Re: [Samba] Quickbooks revisited
 
 What about file locking?
 
 I've run into lots of file locking problems, leading me to slowly 
 just turn off file locking on several shares due to quickbooks.  My 
 user also reports that quickbooks is now slower since I took the 
 server to linux/samba from the win2k server that was limited to .
 
 On Tue, 2003-06-17 at 16:03, [EMAIL PROTECTED] wrote:
  I have QucikBooks on our network too.  I have had a number of problems
 with
  this crappy software.  If my client actually wanted me too I'd rather
 create
  my own accounting software with a better interface and a mysql backend but
  that isn't going to happen.  A few things with QuickBooks that I have
  noticed that maybe will help.
 
  #1. QuickBooks in multi-user mode is much slower than in single user mode.
  This is the (crappy) design of QuickBooks.  It has to do with the fact
 that
  QuickBooks checks everything everywhere when in multiuser mode to make
 sure
  that no data gets corrupted (even though it has corrupted before).  Our
  company datafile is around ~180mb.
 
  #2. This problem will not be solved easily at all.  Quickbooks appears to
 be
  as slow as the weakest client link.  In our case a P2 300 w/ 64 megs of
 ram.
  Again, this has to do with #1.
 
  #3. Upgrading Quickbooks won't help.  We've had many versions in the past
  and currently run the Enterprise Edition.  It still can be as slow as a
  turtle under certain operations.
 
  #4. My biggest complain with this software is that it requires it's users
 to
  be Power Users.  Boy do I hate that With samba it's very difficult
 for
  me to limit a Power user's ability and I have had people take advantge of
 it
  repeatedly.  Damn QuickBooks
 
  -Peter
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

I have to agree, we use QB also and it is crap when it comes to networking 
it. I have set Samba in various configs and QB does not seem to improve. 
Maybee we all need to put a big letter together signed by all of the Linux 
users demanding Intuit to improve this product, remove the constant ads and 
compile it for the Linux desktop... It's a nice dream at least.

Tom
--
Internet Service Provided By Abyss Communications
Internet Service only $10 a month
1-866-842-2977
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] WinXP can`t log on Samba PDC

2003-06-18 Thread Mark
From the actual reg file itself
This registry key is needed for a Windows XP Client to join and logon to
a Samba domain. 


Keep in mind that if you are using Samba in a workgroup setting, the
patch is not needed. Also the patch is only good for XP ProXP does
not support domain logins.

As far as XP timing out or disconnecting, do you mean the actual mapped
drives timeout and lose connection.?? One thing my I have found that
helps eleviate this particular issue is to turn off the web client
service if you do not use it.
Now with XP loginng in with the admin password, I am not sure about this
one. It will probably get fixed in service pack 12 :-). Seriously maybe
some one else knows.

Regards,
Mark




-Original Message-
From: Justin Kreger [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 18, 2003 9:18 PM
To: Mark
Cc: 'Gino Vergara'; [EMAIL PROTECTED]
Subject: RE: [Samba] WinXP can`t log on Samba PDC


So what does this XP Patch do?


In regards to XP, I have XP Home and Pro laptops that have issues when
talking to samba, they connect, then eventually time out, or disconnect,
upon reconnect, XP tries to log in with administrator or a blank
username.  Its driving me to insomnia because I work third shift, and my
coworkers batty because they keep having to call me during the day.


On Wed, 2003-06-18 at 23:39, Mark wrote:
 You need the XP signorseal registry patch. Download it, apply and 
 reboot the pc.
 
 http://us1.samba.org/samba/ftp/docs/Registry/WinXP_SignOrSeal.reg
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On 
 Behalf Of Gino Vergara
 Sent: Wednesday, June 18, 2003 7:36 PM
 To: [EMAIL PROTECTED]
 Subject: [Samba] WinXP can`t log on Samba PDC
 
 
 
 I`m folowing the steps on the unofficial Samba how to. I already join 
 my
 
 WinXP box to the domain but I can`t login from my WinXP box after 
 restart. There is an error message that sais: Windows can`t connect to

 the domain because the domain controller is unable or
 
 
 I`m using Samba-2.2.7a on red hat 9.0 with kernel 2.4.20-18.9
 
 this is my smb.conf
 [global]
 domain logons = yes
 encrypt passwords = yes
 guest account = smbguest
 log level = 2
 log file = /var/log/samba.log
 logon drive = p:
 netbios name = server
 os level = 99
 preferred master = yes
 security = user
   socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 
 SO_SNDBUF=8192
 wins support = yes
 workgroup = workgroup
 
 [public]
path = /tmp
guest ok = yes
writeable = yes
 
 EOF
 
 I already made the changes on regedit in my WinXP box.
 
 this is how vipw looks like: gino:x:500:500::/home/gino:/bin/bash
 R32$:x:1200:300:workstation:/dev/null:/bin/false
 
 this vigr:
 gino:x:500:
 R32:x:1200:
 workstation::300:
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Quickbooks revisited

2003-06-18 Thread Mark
I recall the issue with quickbooks (and a fix) from a
comp.os.linux.security post from last year. I am not sure if will help
in this particular case, but take a look.

http://tinyurl.com/eowl

Regards,
Mark

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Tom McKellips
Sent: Wednesday, June 18, 2003 9:18 PM
To: [EMAIL PROTECTED]
Subject: RE: [Samba] Quickbooks revisited


On Wed, 18 Jun 2003 20:30:26 -0400, drgn65 wrote
 I don't know what your setup is but here is mine.
 I run samba 2.2.7.  I don't use oplocks on my share that QuickBooks
 is on. You most definately don't want to.  Other than that I have a 
 pretty basic setup.  I did not notice any difference between the 
 file on my linux server
 (primary file server) or on a Win2000 Server share.  What version of 
 QuickBooks are you using?  How many users on your network?  How many 
 users accessing QuickBooks?  Does your linux server run a lot of 
 other server daemons?
 
 -Original Message-
 From: Justin Kreger [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, June 17, 2003 10:28 PM
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: Re: [Samba] Quickbooks revisited
 
 What about file locking?
 
 I've run into lots of file locking problems, leading me to slowly
 just turn off file locking on several shares due to quickbooks.  My 
 user also reports that quickbooks is now slower since I took the 
 server to linux/samba from the win2k server that was limited to .
 
 On Tue, 2003-06-17 at 16:03, [EMAIL PROTECTED] wrote:
  I have QucikBooks on our network too.  I have had a number of 
  problems
 with
  this crappy software.  If my client actually wanted me too I'd 
  rather
 create
  my own accounting software with a better interface and a mysql 
  backend but that isn't going to happen.  A few things with 
  QuickBooks that I have noticed that maybe will help.
 
  #1. QuickBooks in multi-user mode is much slower than in single user

  mode. This is the (crappy) design of QuickBooks.  It has to do with 
  the fact
 that
  QuickBooks checks everything everywhere when in multiuser mode to 
  make
 sure
  that no data gets corrupted (even though it has corrupted before).  
  Our company datafile is around ~180mb.
 
  #2. This problem will not be solved easily at all.  Quickbooks 
  appears to
 be
  as slow as the weakest client link.  In our case a P2 300 w/ 64 megs

  of
 ram.
  Again, this has to do with #1.
 
  #3. Upgrading Quickbooks won't help.  We've had many versions in the

  past and currently run the Enterprise Edition.  It still can be as

  slow as a turtle under certain operations.
 
  #4. My biggest complain with this software is that it requires it's 
  users
 to
  be Power Users.  Boy do I hate that With samba it's very 
  difficult
 for
  me to limit a Power user's ability and I have had people take 
  advantge of
 it
  repeatedly.  Damn QuickBooks
 
  -Peter
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

I have to agree, we use QB also and it is crap when it comes to
networking 
it. I have set Samba in various configs and QB does not seem to improve.

Maybee we all need to put a big letter together signed by all of the
Linux 
users demanding Intuit to improve this product, remove the constant ads
and 
compile it for the Linux desktop... It's a nice dream at least.

Tom
--
Internet Service Provided By Abyss Communications
Internet Service only $10 a month
1-866-842-2977
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] WinXP can`t log on Samba PDC

2003-06-18 Thread Justin Kreger
On Thu, 2003-06-19 at 00:32, Mark wrote:
 From the actual reg file itself
 This registry key is needed for a Windows XP Client to join and logon
to
 a Samba domain. 

I felt like a dummy when I opened up that file and looked at it.

 Keep in mind that if you are using Samba in a workgroup setting, the
 patch is not needed. Also the patch is only good for XP ProXP does
 not support domain logins.
 
Yeah, I hate that some users have home, I'm itching to move everybody to
a domain.. I figure even though I hate windows, I might as well use it's
best features.

 As far as XP timing out or disconnecting, do you mean the actual
mapped
 drives timeout and lose connection.?? One thing my I have found that
 helps eleviate this particular issue is to turn off the web client
 service if you do not use it.
Web Client Service?  What is that?

Keep in mind, I've been slowly going to Linux over the last 7 years, and
I don't have a windows box to my name, I only have to support XP because
ppl like it where I work :(   I think I need to start hinting with all
the Redhat 9 Demo Cds I have in my appartment.

 Now with XP loginng in with the admin password, I am not sure about
this
 one. It will probably get fixed in service pack 12 :-). Seriously
maybe
 some one else knows.
 

Geee... I have a strange feeling its some stupid setting that the
windows admin has been setting laptops up with, I finally had her
fedex me a laptop that she had just setup so I can check inter-op
correctly.




signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] WinXP can`t log on Samba PDC

2003-06-18 Thread Mark

Re: web client service, I had a client (XP Pro on 40 desktops, Redhat
8.0, Samba 2.2.6?? cannot quite remember)earlier this year who was
experiencing mapped drives timing out, poor performance in file copying
etc. At the time I had recalled reading a recent post in
comp.protocols.smb http://tinyurl.com/eoy0  where another person was
having simmilar issues. Another poster had suggested turning off the web
client service in XP and it cleared up all the issues. I did the same
for my client and needless to say it cured his computer woes.

I do not have a lot of info on what the Web client service actually
does. Here is a web site expalaining how web services work in office XP
though..be prepare for a healthy dose of propagand when reading it
:-)

http://www.microsoft.com/office/developer/webservices/toolkit.asp


-Original Message-
From: Justin Kreger [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 18, 2003 9:56 PM
To: [EMAIL PROTECTED]; Mark
Subject: RE: [Samba] WinXP can`t log on Samba PDC


On Thu, 2003-06-19 at 00:32, Mark wrote:
 From the actual reg file itself
 This registry key is needed for a Windows XP Client to join and logon
to
 a Samba domain.

I felt like a dummy when I opened up that file and looked at it.

 Keep in mind that if you are using Samba in a workgroup setting, the 
 patch is not needed. Also the patch is only good for XP ProXP does

 not support domain logins.
 
Yeah, I hate that some users have home, I'm itching to move everybody to
a domain.. I figure even though I hate windows, I might as well use it's
best features.

 As far as XP timing out or disconnecting, do you mean the actual
mapped
 drives timeout and lose connection.?? One thing my I have found that 
 helps eleviate this particular issue is to turn off the web client 
 service if you do not use it.
Web Client Service?  What is that?

Keep in mind, I've been slowly going to Linux over the last 7 years, and
I don't have a windows box to my name, I only have to support XP because
ppl like it where I work :(   I think I need to start hinting with all
the Redhat 9 Demo Cds I have in my appartment.

 Now with XP loginng in with the admin password, I am not sure about
this
 one. It will probably get fixed in service pack 12 :-). Seriously
maybe
 some one else knows.
 

Geee... I have a strange feeling its some stupid setting that the
windows admin has been setting laptops up with, I finally had her
fedex me a laptop that she had just setup so I can check inter-op
correctly.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] call timed out smbclient error on get command

2003-06-18 Thread sigfried and roy
hi im using samba to enable backup of nt server shares using the amanda
backup system.  however i am running into some problems.
even though i can use smbclient to connect to the share and browser
directories etc,  when i try and get a file i get the following error
   smb: \Administration\jill-andrew\jill-andrew\slide presentations\
get ppslides complete.ppt
   Call timed out: server did not respond after 2 milliseconds
opening remote file \Adm 
inistration\jill-andrew\jill-andrew\slide presentations\ppslides 
complete.ppt
   smb: \Administration\jill-andrew\jill-andrew\slide presentations\
Segmentation fault (core dumped)

through the amanda system i get the following error

   /-- william//cytopia01.intra.cytopia.com.au/shared lev 
1 STRANGE
   sendbackup: start
[william://cytopia01.intra.cytopia.com.au/shared level 1]
   sendbackup: info BACKUP=/usr/bin/smbclient
   sendbackup: info RECOVER_CMD=/bin/gzip -dc |/usr/bin/smbclient  -f... -
   sendbackup: info COMPRESS_SUFFIX=.gz
   sendbackup: info end
   | session request to CYTOPIA01.INTRA failed (Called name not present)
   ? Call timed out: server did not respond after 2 milliseconds
opening remote file
\Administration\jill-andrew\jill-andrew\slide
presentations\ppslides complete.ppt
(\Administration\jill-andrew\jill-andrew\slide presentations\)

its more confusing because another share on the same nt server with the
same permisions doesnt give the same error.  you are able to get files
using smbclient.  however when running amanda i recieve the following error
   /-- william//cytopia01.intra.cytopia.com.au/usershared lev 1 
STRANGE
   sendbackup: start
[william://cytopia01.intra.cytopia.com.au/usershared level 1]
   sendbackup: info BACKUP=/usr/bin/smbclient
   sendbackup: info RECOVER_CMD=/bin/gzip -dc |/usr/bin/smbclient  -f... -
   sendbackup: info COMPRESS_SUFFIX=.gz
   sendbackup: info end
   | session request to CYTOPIA01.INTRA failed (Called name 
not present)
   ? NT_STATUS_OBJECT_NAME_NOT_FOUND opening remote file
\Administration\andrew\backup\andrew.000\Application
Data\Microsoft\Office\Recent\3½ Floppy (A).LNK
(\Administration\andrew\backup\andrew.000\Application
Data\Microsoft\Office\Recent\)



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


CVS update: samba/source/nsswitch

2003-06-18 Thread tpot

Date:   Wed Jun 18 06:10:49 2003
Author: tpot

Update of /data/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv2380/nsswitch

Modified Files:
  Tag: APPLIANCE_HEAD
winbindd_group.c 
Log Message:
CR 2230 - allow domain local groups to appear in a user's group list.


Revisions:
winbindd_group.c1.3.2.11 = 1.3.2.12

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_group.c.diff?r1=1.3.2.11r2=1.3.2.12


Re: CVS update: samba/source/nsswitch

2003-06-18 Thread Tim Potter
On Wed, Jun 18, 2003 at 06:10:49AM +, [EMAIL PROTECTED] wrote:

 Update of /data/cvs/samba/source/nsswitch
 In directory dp.samba.org:/tmp/cvs-serv2380/nsswitch
 
 Modified Files:
   Tag: APPLIANCE_HEAD
   winbindd_group.c 
 Log Message:
 CR 2230 - allow domain local groups to appear in a user's group list.

These are of course domain local groups in win2k native mode.

Jeremy, you mentioned something about reflecting this change into smbd
somewhere but I couldn't see that it needed to be done.

One day lad, all this will be yours!  

What, the curtains?


CVS update: samba/source/lib

2003-06-18 Thread jerry

Date:   Wed Jun 18 06:39:36 2003
Author: jerry

Update of /data/cvs/samba/source/lib
In directory dp.samba.org:/tmp/cvs-serv4352/lib

Modified Files:
  Tag: APPLIANCE_HEAD
username.c 
Log Message:
another fix fro CR 2179.  I think this is the last one

  1) orders print_access_check() by:
a)  root can do anything (easy check)
b)  check security descriptor (bit comparisons in memory)
c)  printer admins (may result in numerous calls to
 winbind)

  2) cache the groups for the last user we looked up in
 user_in_winbindd_group_list().  Might need a timeout here,
 but since the user token is created at session setup time,
 i don't really think this is a problem.

  3) removes the 1/2 delay in open_printer_ex() since I don't
 believe it is helpful in the general sense (see the comments
 as to why it was there in the first place).

  4) use the IP address fdrom the original socket when establishing
 the change notify session to a client instead of resolving the
 name from scratch. (backport from 3.0)





Revisions:
username.c  1.31.2.23 = 1.31.2.24

http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/username.c.diff?r1=1.31.2.23r2=1.31.2.24


CVS update: samba/source/printing

2003-06-18 Thread jerry

Date:   Wed Jun 18 06:39:36 2003
Author: jerry

Update of /data/cvs/samba/source/printing
In directory dp.samba.org:/tmp/cvs-serv4352/printing

Modified Files:
  Tag: APPLIANCE_HEAD
nt_printing.c 
Log Message:
another fix fro CR 2179.  I think this is the last one

  1) orders print_access_check() by:
a)  root can do anything (easy check)
b)  check security descriptor (bit comparisons in memory)
c)  printer admins (may result in numerous calls to
 winbind)

  2) cache the groups for the last user we looked up in
 user_in_winbindd_group_list().  Might need a timeout here,
 but since the user token is created at session setup time,
 i don't really think this is a problem.

  3) removes the 1/2 delay in open_printer_ex() since I don't
 believe it is helpful in the general sense (see the comments
 as to why it was there in the first place).

  4) use the IP address fdrom the original socket when establishing
 the change notify session to a client instead of resolving the
 name from scratch. (backport from 3.0)





Revisions:
nt_printing.c   1.83.2.124 = 1.83.2.125

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/nt_printing.c.diff?r1=1.83.2.124r2=1.83.2.125


CVS update: samba/source/rpc_server

2003-06-18 Thread jerry

Date:   Wed Jun 18 06:39:37 2003
Author: jerry

Update of /data/cvs/samba/source/rpc_server
In directory dp.samba.org:/tmp/cvs-serv4352/rpc_server

Modified Files:
  Tag: APPLIANCE_HEAD
srv_spoolss_nt.c 
Log Message:
another fix fro CR 2179.  I think this is the last one

  1) orders print_access_check() by:
a)  root can do anything (easy check)
b)  check security descriptor (bit comparisons in memory)
c)  printer admins (may result in numerous calls to
 winbind)

  2) cache the groups for the last user we looked up in
 user_in_winbindd_group_list().  Might need a timeout here,
 but since the user token is created at session setup time,
 i don't really think this is a problem.

  3) removes the 1/2 delay in open_printer_ex() since I don't
 believe it is helpful in the general sense (see the comments
 as to why it was there in the first place).

  4) use the IP address fdrom the original socket when establishing
 the change notify session to a client instead of resolving the
 name from scratch. (backport from 3.0)





Revisions:
srv_spoolss_nt.c1.95.2.255 = 1.95.2.256

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c.diff?r1=1.95.2.255r2=1.95.2.256


CVS update: samba/source/passdb

2003-06-18 Thread vlendec

Date:   Wed Jun 18 08:42:04 2003
Author: vlendec

Update of /data/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv15091

Modified Files:
  Tag: SAMBA_3_0
machine_sid.c 
Log Message:
Better panic cleanly than segfault later when no sid can be found and created.
Everybody who calls get_global_sam_sid expects this to return non-NULL, and
there are way too many places where this is called.

Volker

Revisions:
machine_sid.c   1.9.2.4 = 1.9.2.5

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/machine_sid.c.diff?r1=1.9.2.4r2=1.9.2.5


CVS update: samba/source/groupdb

2003-06-18 Thread vlendec

Date:   Wed Jun 18 12:00:52 2003
Author: vlendec

Update of /data/cvs/samba/source/groupdb
In directory dp.samba.org:/tmp/cvs-serv593/groupdb

Modified Files:
  Tag: SAMBA_3_0
mapping.c 
Log Message:
And some more memory leaks in mapping.c and pdb_tdb.c. tdb_nextkey
mallocs its key, so we should free it after use.

Volker

Revisions:
mapping.c   1.33.2.13 = 1.33.2.14

http://www.samba.org/cgi-bin/cvsweb/samba/source/groupdb/mapping.c.diff?r1=1.33.2.13r2=1.33.2.14


CVS update: samba/source/passdb

2003-06-18 Thread vlendec

Date:   Wed Jun 18 12:00:52 2003
Author: vlendec

Update of /data/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv593/passdb

Modified Files:
  Tag: SAMBA_3_0
pdb_tdb.c 
Log Message:
And some more memory leaks in mapping.c and pdb_tdb.c. tdb_nextkey
mallocs its key, so we should free it after use.

Volker

Revisions:
pdb_tdb.c   1.58.2.17 = 1.58.2.18

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_tdb.c.diff?r1=1.58.2.17r2=1.58.2.18


Re: CVS update: samba/source/groupdb

2003-06-18 Thread Volker Lendecke
On Wed, Jun 18, 2003 at 12:00:52PM +, [EMAIL PROTECTED] wrote:
 
 Date: Wed Jun 18 12:00:52 2003
 Author:   vlendec
 
 Update of /data/cvs/samba/source/groupdb
 In directory dp.samba.org:/tmp/cvs-serv593/groupdb
 
 Modified Files:
   Tag: SAMBA_3_0
   mapping.c 
 Log Message:
 And some more memory leaks in mapping.c and pdb_tdb.c. tdb_nextkey
 mallocs its key, so we should free it after use.

This certainly should FIX and not ADD memory leaks :-)

Volker


pgp0.pgp
Description: PGP signature


CVS update: samba/source/sam

2003-06-18 Thread vlendec

Date:   Wed Jun 18 13:28:37 2003
Author: vlendec

Update of /data/cvs/samba/source/sam
In directory dp.samba.org:/tmp/cvs-serv8466

Modified Files:
  Tag: SAMBA_3_0
idmap_tdb.c 
Log Message:
There's nothing particularly secret in idmap.tdb, so create it with
0644 as the other databases.

Volker


Revisions:
idmap_tdb.c 1.12.2.9 = 1.12.2.10

http://www.samba.org/cgi-bin/cvsweb/samba/source/sam/idmap_tdb.c.diff?r1=1.12.2.9r2=1.12.2.10


CVS update: samba/source/nsswitch

2003-06-18 Thread jmcd

Date:   Wed Jun 18 14:20:23 2003
Author: jmcd

Update of /home/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv13252/nsswitch

Modified Files:
  Tag: SAMBA_3_0
wbinfo.c 
Log Message:
Remove the -A option of wbinfo, leaving only the long version, 
--set-auth-user.  There was enough confusion, as in bug #158,
when a user accidentally typed -A instead of -a, and would get themselves
stuck with a non-working winbind.

I've made the changes to docs/docbook/manpages/wbinfo.xml, but I'm not
sure what to do beyond that.  Is checking that in enough?


Revisions:
wbinfo.c1.38.2.14 = 1.38.2.15

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/wbinfo.c.diff?r1=1.38.2.14r2=1.38.2.15


CVS update: samba/packaging/Debian/debian/patches

2003-06-18 Thread peloy

Date:   Wed Jun 18 15:17:32 2003
Author: peloy

Update of /data/cvs/samba/packaging/Debian/debian/patches
In directory dp.samba.org:/tmp/cvs-serv18916/debian/patches

Modified Files:
  Tag: SAMBA_3_0
fhs.patch 
Log Message:
Updated Debian patches so they apply cleanly and without warnings at
build time.



Revisions:
fhs.patch   1.1.6.4 = 1.1.6.5

http://www.samba.org/cgi-bin/cvsweb/samba/packaging/Debian/debian/patches/fhs.patch.diff?r1=1.1.6.4r2=1.1.6.5


CVS update: samba/source/groupdb

2003-06-18 Thread idra

Date:   Wed Jun 18 15:24:09 2003
Author: idra

Update of /data/cvs/samba/source/groupdb
In directory dp.samba.org:/tmp/cvs-serv19430/groupdb

Modified Files:
  Tag: SAMBA_3_0
mapping.c 
Log Message:

Ok, this patch removes the privilege stuff we had in, unused, for some time.

The code was nice, but put in the wrong place (group mapping) and not
supported by most of the code, thus useless.

We will put back most of the code when our infrastructure will be changed
so that privileges actually really make sense to be set.

This is a first patch of a set to enhance all our mapping code cleaness and
stability towards a sane next beta for 3.0 code base

Simo.



Revisions:
mapping.c   1.33.2.14 = 1.33.2.15

http://www.samba.org/cgi-bin/cvsweb/samba/source/groupdb/mapping.c.diff?r1=1.33.2.14r2=1.33.2.15


CVS update: samba/source/include

2003-06-18 Thread idra

Date:   Wed Jun 18 15:24:09 2003
Author: idra

Update of /data/cvs/samba/source/include
In directory dp.samba.org:/tmp/cvs-serv19430/include

Modified Files:
  Tag: SAMBA_3_0
mapping.h passdb.h privileges.h 
Log Message:

Ok, this patch removes the privilege stuff we had in, unused, for some time.

The code was nice, but put in the wrong place (group mapping) and not
supported by most of the code, thus useless.

We will put back most of the code when our infrastructure will be changed
so that privileges actually really make sense to be set.

This is a first patch of a set to enhance all our mapping code cleaness and
stability towards a sane next beta for 3.0 code base

Simo.



Revisions:
mapping.h   1.7.2.2 = 1.7.2.3

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/mapping.h.diff?r1=1.7.2.2r2=1.7.2.3
passdb.h1.11.2.7 = 1.11.2.8

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/passdb.h.diff?r1=1.11.2.7r2=1.11.2.8
privileges.h1.1.2.1 = 1.1.2.2

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/privileges.h.diff?r1=1.1.2.1r2=1.1.2.2


CVS update: samba/source/rpc_server

2003-06-18 Thread idra

Date:   Wed Jun 18 15:24:10 2003
Author: idra

Update of /data/cvs/samba/source/rpc_server
In directory dp.samba.org:/tmp/cvs-serv19430/rpc_server

Modified Files:
  Tag: SAMBA_3_0
srv_lsa_nt.c srv_samr_nt.c srv_util.c 
Log Message:

Ok, this patch removes the privilege stuff we had in, unused, for some time.

The code was nice, but put in the wrong place (group mapping) and not
supported by most of the code, thus useless.

We will put back most of the code when our infrastructure will be changed
so that privileges actually really make sense to be set.

This is a first patch of a set to enhance all our mapping code cleaness and
stability towards a sane next beta for 3.0 code base

Simo.



Revisions:
srv_lsa_nt.c1.52.2.9 = 1.52.2.10

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_lsa_nt.c.diff?r1=1.52.2.9r2=1.52.2.10
srv_samr_nt.c   1.86.2.27 = 1.86.2.28

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_samr_nt.c.diff?r1=1.86.2.27r2=1.86.2.28
srv_util.c  1.65.2.8 = 1.65.2.9

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_util.c.diff?r1=1.65.2.8r2=1.65.2.9


CVS update: samba/source/smbd

2003-06-18 Thread idra

Date:   Wed Jun 18 15:24:10 2003
Author: idra

Update of /data/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv19430/smbd

Modified Files:
  Tag: SAMBA_3_0
lanman.c 
Log Message:

Ok, this patch removes the privilege stuff we had in, unused, for some time.

The code was nice, but put in the wrong place (group mapping) and not
supported by most of the code, thus useless.

We will put back most of the code when our infrastructure will be changed
so that privileges actually really make sense to be set.

This is a first patch of a set to enhance all our mapping code cleaness and
stability towards a sane next beta for 3.0 code base

Simo.



Revisions:
lanman.c1.73.2.13 = 1.73.2.14

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/lanman.c.diff?r1=1.73.2.13r2=1.73.2.14


CVS update: samba/source/utils

2003-06-18 Thread idra

Date:   Wed Jun 18 15:24:10 2003
Author: idra

Update of /data/cvs/samba/source/utils
In directory dp.samba.org:/tmp/cvs-serv19430/utils

Modified Files:
  Tag: SAMBA_3_0
net.c net_groupmap.c net_rpc_samsync.c pdbedit.c 
Log Message:

Ok, this patch removes the privilege stuff we had in, unused, for some time.

The code was nice, but put in the wrong place (group mapping) and not
supported by most of the code, thus useless.

We will put back most of the code when our infrastructure will be changed
so that privileges actually really make sense to be set.

This is a first patch of a set to enhance all our mapping code cleaness and
stability towards a sane next beta for 3.0 code base

Simo.



Revisions:
net.c   1.43.2.24 = 1.43.2.25

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/net.c.diff?r1=1.43.2.24r2=1.43.2.25
net_groupmap.c  1.1.2.11 = 1.1.2.12

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/net_groupmap.c.diff?r1=1.1.2.11r2=1.1.2.12
net_rpc_samsync.c   1.8.2.21 = 1.8.2.22

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/net_rpc_samsync.c.diff?r1=1.8.2.21r2=1.8.2.22
pdbedit.c   1.39.2.26 = 1.39.2.27

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/pdbedit.c.diff?r1=1.39.2.26r2=1.39.2.27


CVS update: samba/source

2003-06-18 Thread Jelmer Vernooij

Date:   Wed Jun 18 15:54:21 2003
Author: jelmer

Update of /home/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv23851

Modified Files:
  Tag: SAMBA_3_0
Makefile.in 
Log Message:
Add installmodules to install


Revisions:
Makefile.in 1.468.2.121 = 1.468.2.122

http://www.samba.org/cgi-bin/cvsweb/samba/source/Makefile.in.diff?r1=1.468.2.121r2=1.468.2.122


CVS update: samba/source/nsswitch

2003-06-18 Thread jerry

Date:   Wed Jun 18 16:37:55 2003
Author: jerry

Update of /data/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv28588/nsswitch

Modified Files:
  Tag: APPLIANCE_HEAD
winbindd_cache.c 
Log Message:
fix a debugging statement; CR 2179

Revisions:
winbindd_cache.c1.5.2.22 = 1.5.2.23

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_cache.c.diff?r1=1.5.2.22r2=1.5.2.23


CVS update: samba/docs/docbook/projdoc

2003-06-18 Thread Jelmer Vernooij

Date:   Wed Jun 18 19:03:30 2003
Author: jelmer

Update of /home/cvs/samba/docs/docbook/projdoc
In directory dp.samba.org:/tmp/cvs-serv9671/projdoc

Modified Files:
  Tag: SAMBA_3_0
VFS.xml 
Log Message:
VFS modules are located in the subdirectory vfs of $LIBDIR


Revisions:
VFS.xml 1.1.2.4 = 1.1.2.5

http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/projdoc/VFS.xml.diff?r1=1.1.2.4r2=1.1.2.5


CVS update: samba/docs/docbook/projdoc

2003-06-18 Thread Jelmer Vernooij

Date:   Wed Jun 18 23:13:17 2003
Author: jelmer

Update of /home/cvs/samba/docs/docbook/projdoc
In directory dp.samba.org:/tmp/cvs-serv31532

Modified Files:
  Tag: SAMBA_3_0
CUPS-printing.xml 
Log Message:
Fix typo


Revisions:
CUPS-printing.xml   1.1.2.8 = 1.1.2.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/projdoc/CUPS-printing.xml.diff?r1=1.1.2.8r2=1.1.2.9