Re: [Samba] winbind help

2004-02-27 Thread Stefan=20G=FCnther
Hi, 
 
SuSE prefers to start the nscd which (my experience) blocks to access to the PDC. 
/etc/init.d/nscd stop 
 
was a pure success for me. 
 
Good luck. 
 
Stefan 
 
[EMAIL PROTECTED] schrieb am 28.02.04 02:48:27: 
>  
> I have a Suse 9 server setup with Samba 2.2.8 as the PDC. 
>  
> I would like to log the domain\username in the squid logs, so it looks 
> like I will need to setup winbind and ntml to get this. 
>  
> Is there something special needed to be done when setting up winbind and 
> samba to not go out to authenticate to an NT PDC? 
>  
> I currently have been able to get winbind setup to partially work. 
>  
> wbinfo -t works 
> wbinfo -u works 
> wbinfo -g works 
>  
> but once I try to authenticate a user, I get: 
>  
> winbindd[2580]:   cli_pipe: return critical error. Error was Call timed 
> out: server did not respond after 2 milliseconds 
>  
> in the /var/log/messages log. 
>  
> the funny part is, if I use an incorrect password on "wbinfo -a 
> domain\\user%passwd" it will return imediately telling the password is 
> wrong. 
>  
> Here is the important setting in smb.conf: 
>  
> #password server = * 
> #security = domain 
> winbind uid = 1-2 
> winbind gid = 1-2 
> #winbind use default domain = yes 
> #winbind separator = + 
> winbind enum users = yes 
> winbind enum groups = yes 
>  
> I have tried various settings with "password server" and "security" with 
> no luck, they are currently commented out. 
>  
> Help!!! 
> --  
> To unsubscribe from this list go to the following URL and read the 
> instructions:  http://lists.samba.org/mailman/listinfo/samba 
 
__
Extra-Konto: 2,50 %* Zinsen p. a. ab dem ersten Euro! Nur hier mit 25
Euro-Tankgutschein & ExtraPramie! https://extrakonto.web.de/?mc=021110

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Can't login to Samba PDC

2004-02-27 Thread Craig White
Let's keep this on list - there are a lot brighter people than I am on
this stuff...

On Fri, 2004-02-27 at 19:58, Scott Gross wrote:

> 3 - migrate? as in net rpc vampire? - how certain are you that LDAP is
> working? Does LDAP handle linux login? Are you logging ldap connections
> etc?
> 
> migrate as in move from one to the other.  I'm trying to get the Samba
> server running while we're using NT4 and then I will move my users and
> workstations to the new domain.  I'm going to move them one machine and user
> at a time manually.  Yes LDAP handles the linux logins as well and this is
> working.  I haven't set-up the LDAP to log the logins but this is something
> I want to do as well.

OK - I am trying to understand what you are telling me. 

I can't possibly envision a scenario that you can make this work -
moving one computer and one user over at a time. The computer accounts
continually change their passwords. 

This is what the net rpc vampire command is designed to do, move the
machine accounts, user accounts and group accounts over to new setup
while still retaining all the SID structure. It indeed works - I know
because I did it.

That is not to say that it is without it's problems but it is - the
intended method and I learned a long time ago about the benefit to
calculate wind direction before I start peeing.

If you really feel as though you have LDAP set up properly - it appears
that you have a grasp on it since you can run ldapsearch from command
line (I am shocked at the number of people that think they have LDAP
running and can't query LDAP), then you really should just slapcat your
current setup, dump it, slapadd the stuff you need into LDAP and use the
net rpc vampire and suck it all in. You should have no problem getting
it to simultaneously add the posixAccount & sambaSamAccount properties -
the only things that you may have to reconcile are 1 - existing accounts
in posixland that you want to be both posix & samba (perhaps you have
overlap and different passwords/uid's) and 2 - It's hard to pull the
plug on the existing NT 4 server because it probably has file & print
shares that you wanna keep around...try shutting off the netlogon
service AFTER - you change the settings in smb.conf to make it PDC like
and restarting smbd/nmbd. It will still be mostly functional

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Performances network samba

2004-02-27 Thread Marcel de Riedmatten
Le ven 27/02/2004 à 08:53, Xavier Poirier a écrit :
> En réponse à Marcel de Riedmatten <[EMAIL PROTECTED]>:

> It seems a little faster in the readonly mode !
> But I will ask in the OpenOffice MailingList why they are not caching
> the network files on the client for not read those files everytime you
> start Ooo.

I am using the quickstart. It start in 10s when the windows user login.
It keep 69 files open per user. Then  writer and other apps start in 1
or 2 seconds. This is whith oo 1.01, samba 2.2.8a, clients athlon
XP1800+w2k, server is celeron 1000 with ide disks, 100Mb/s switched
ethernet, nothing fancy. This is a small network, about 10 users.

 
[apps]
comment = Applications réseau
path = /var/spool/samba/apps
read only = Yes
oplocks = No
level2 oplocks = No
#write list = NOFIDA/administrateur


> What are the default values of the tuning options of a share ?
> I mean : "block size" "write cache size" , have you tryed to modify
> these values ?
> 

block size = 1024
write cache size = 0

I didn't play with that but i remember that it went better once i
removed oplock.

-- 
Marcel de Riedmatten





signature.asc
Description: Ceci est une partie de message	=?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e=2E?=
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: samba transfer speed on shares

2004-02-27 Thread deflin39
BTW, I have seen a few problems like this across the net, but they all had
problems going from xp->linux, not the other way around like mine.  And
there were no solutions given for the problem.

> Hi all!
>
> I have searched through the archives and have not found an answer to this,
> but it is also possible I wasn't searching for the right thing, so here
> goes.
>
> I am running samba 2.2.7a on a RH 9 box.  I am having issues with transfer
> speeds on my shares.  I have the shares mapped to drives on my XP box.
> When coping files from the XP -> linux, The speed is great.  But from
> linux->XP my speed drops off drastically.
>
> Now, if I mount my D: drive onto my linux file system, I get good speeds
> both ways when using the command line to do the copying.
>
> Also, ftp speeds are fast and consistent both ways.
>
> Map drive
> xp->linux: 100megs/18secs
> linux->xp: 100megs/30 minutes
>
> Drive mounted on linux fs
> xp->linux: 100megs/12secs
> linux->xp: 100megs/12secs
> similar speed for FTP
>
> Has anyone seen something similar to this situation?  Please let me know
> if I can clear any of this information up or provide detailed
> settings/configurations...
>
> deflin39
>
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Can't login to Samba PDC

2004-02-27 Thread Craig White
On Fri, 2004-02-27 at 16:22, Scott Gross wrote:
> We're trying to migrate from a windows NT domain to a Samba domain.  I've
> installed Samba 3.0.2a with an LDAP backend.  The server seems to be running
> fine as I can browse the shares from a non-domain Win2k workstation after a
> successful password check.  The workstations join the domain just fine but
> after I join them to the domain I can't log in to them.  I've checked my
> schannel and sign or seal settings in the Samba server and the workstation
> but still no luck.  Any help is greatly appreciated, I've been working at
> this for about two months now and I'm just getting frustrated.

Not enough information to give a meaningful answer.

1 - signorseal settings applicable to Samba 2.x not 3.x

2 - logs?  why would you think that /var/log/samba/smbd.log,
/var/log/samba/log.nmbd, /var/log/samba/ip.of.connecting.system wouldn't
give you real clues to what's going on?

3 - migrate? as in net rpc vampire? - how certain are you that LDAP is
working? Does LDAP handle linux login? Are you logging ldap connections
etc?

4 - you seem to have not stated the required - I have read the 'how-to'
at 

5 - net getlocalsid  /  ldapsearch -x -h localhost -b 'base-of-ldap'
'(cn=Domain User)'   #do they sid portions match?

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The account is not authorized to login from this station.

2004-02-27 Thread Alex Harris
I got it working. For some reason SWAT was updating the smbpasswd file 
incorrectly, when I run smbpasswd manually on the machine everything 
works just fine. Thanks for all your help. :-0

Alex Harris wrote:

I've got an smbpasswd file on the server, do I also need to change 
some configuration on the clients? It still doesn't like any of the 
usernames or passwords that I've setup.

Andrew Bartlett wrote:

On Sat, 2004-02-28 at 11:28, Alex Harris wrote:
 

Her's my smb.conf file:

# Samba config file created using SWAT
# from 192.168.12.102 (192.168.12.102)
# Date: 2004/02/27 22:21:09
# Global parameters
[global]
   workgroup = COMMUNICCI
   server string = Osiris File Server
   encrypt passwords = No
  


This is a *very* bad idea.  Create an smbpasswd file, and set this back
to 'yes'.
Problems caused by this setting include the need to patch every current
microsoft client, and numerous client bugs.
Andrew Bartlett

 


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] winbind help

2004-02-27 Thread Brian Bennett
I have a Suse 9 server setup with Samba 2.2.8 as the PDC.

I would like to log the domain\username in the squid logs, so it looks
like I will need to setup winbind and ntml to get this.

Is there something special needed to be done when setting up winbind and
samba to not go out to authenticate to an NT PDC?

I currently have been able to get winbind setup to partially work.

wbinfo -t works
wbinfo -u works
wbinfo -g works

but once I try to authenticate a user, I get:

winbindd[2580]:   cli_pipe: return critical error. Error was Call timed
out: server did not respond after 2 milliseconds

in the /var/log/messages log.

the funny part is, if I use an incorrect password on "wbinfo -a
domain\\user%passwd" it will return imediately telling the password is
wrong.

Here is the important setting in smb.conf:

#password server = *
#security = domain
winbind uid = 1-2
winbind gid = 1-2
#winbind use default domain = yes
#winbind separator = +
winbind enum users = yes
winbind enum groups = yes

I have tried various settings with "password server" and "security" with
no luck, they are currently commented out.

Help!!!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Showing SID instead of username in security section of file properties

2004-02-27 Thread amy
Hi,

I have 3 Samba servers set up at different time. Now all of them have been upgraded to 
3.0.2. I use Winbindd to handle users from Windows Domain. They are working pretty 
good except one of the server having problem translate SID to username. Every time 
when I try to check the security setting for a file from a Windows 2000 workstation, 
it will display "Domain Users", "Everyone" and "s-x-xx...". The SID is actually the 
owner of the file. I have checked the file properties on Linux system, it can read the 
owner's name correctly. Using "wbinfo -s" on that machine check the username, it works 
fine. This only happens on one server. wbinfo -u or -g works fine. smb.conf file on 
that server are similar with the other servers. What should I check to work around 
this issue? 

Thanks,

Dennis
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] mix encrypted/non-encrypted password

2004-02-27 Thread Thomas Spuhler
We have lots of different MS boxes from W95 to XP

I would like to move from non encrypted password to encrypted password
over a certain time period (don want to work all weekend!)

Is that possible and how. I didn't find anything on this subject

-- 

Best Regards

Thomas Spuhler

All e-mails from this location have been scanned for viruses
This e-mail has been digitally signed


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] The account is not authorized to login from this station.

2004-02-27 Thread Alex Harris
I've got an smbpasswd file on the server, do I also need to change some 
configuration on the clients? It still doesn't like any of the usernames 
or passwords that I've setup.

Andrew Bartlett wrote:

On Sat, 2004-02-28 at 11:28, Alex Harris wrote:
 

Her's my smb.conf file:

# Samba config file created using SWAT
# from 192.168.12.102 (192.168.12.102)
# Date: 2004/02/27 22:21:09
# Global parameters
[global]
   workgroup = COMMUNICCI
   server string = Osiris File Server
   encrypt passwords = No
   

This is a *very* bad idea.  Create an smbpasswd file, and set this back
to 'yes'.
Problems caused by this setting include the need to patch every current
microsoft client, and numerous client bugs.
Andrew Bartlett

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The account is not authorized to login from this station.

2004-02-27 Thread Andrew Bartlett
On Sat, 2004-02-28 at 11:28, Alex Harris wrote:
> Her's my smb.conf file:
> 
> # Samba config file created using SWAT
> # from 192.168.12.102 (192.168.12.102)
> # Date: 2004/02/27 22:21:09
> # Global parameters
> [global]
> workgroup = COMMUNICCI
> server string = Osiris File Server
> encrypt passwords = No

This is a *very* bad idea.  Create an smbpasswd file, and set this back
to 'yes'.

Problems caused by this setting include the need to patch every current
microsoft client, and numerous client bugs.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Help?

2004-02-27 Thread Healy, James F
I am running samba on a solaris7 server and sharing files to several windows clients 
in a development lab, I am experiencing a moving target of a problem that seems to be 
easily reproduced. 

samba version 2.2.3 and 3.0.1 on this server both appear to have the issue, so it may 
not be a samba problem but I can't think of why the OS would have the issue in the 
first place. 

The scenario is this a single folder houses several files that are a common 
requirement of our development, when more than one developer (or one developer on 
multiple machines) launches a process that accesses this file tree sometimes (but not 
always) both instances of the process attempt to read the same file (any given file) 
at about the same instant. When this happens both clients hang, the server appears to 
still be able to read the file but the clients that attempt simultaneous access hang 
up.

Can any of you point me in a direction to further flush out a possible cause and 
solution? 

Any insight you can provide would be very much appreciated.

Cheers,

###
[EMAIL PROTECTED]   System 
Administrator



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The account is not authorized to login from this station.

2004-02-27 Thread Alex Harris
Her's my smb.conf file:

# Samba config file created using SWAT
# from 192.168.12.102 (192.168.12.102)
# Date: 2004/02/27 22:21:09
# Global parameters
[global]
   workgroup = COMMUNICCI
   server string = Osiris File Server
   encrypt passwords = No
   password server =
   log file = /usr/local/samba/var/log.%m
   max log size = 50
   preferred master = No
   domain master = No
   dns proxy = No
   ldap ssl = no
   valid users = root, alex, meg
   admin users = root, alex, meg
[homes]
   comment = Home Directories
   read only = No
   browseable = No
[printers]
   comment = All Printers
   path = /usr/spool/samba
   printable = Yes
   browseable = No
[sandi]
   path = /usr/sandi
   read only = No
   create mask = 0777
   directory mask = 0777
It's a slackware box, I configured with all of the default options when 
I installed it. Is there anything else that would help?

Loc Nguyen wrote:

There is a posibility that in your configuration (password backend
database) you accidentally configured host access entry to deny the
users from using the work station
Give us more information about your
configuration :)
BLOCKQUOTE { BORDER-LEFT:#1F4687 1px solid; padding-left:20px;
margin-left: 0px; }-Original Message-
From: Alex Harris <[EMAIL PROTECTED]>
Sent: Friday, 27. Feb 2004 16:05 -0800
To: [EMAIL PROTECTED]
Subject: [Samba] The account is not authorized to login from this
station.
I'm in the process of upgrading to Samba 3.02a on a file server and 

I'm trying to finish all the configuration and testing. When I try to 

access the server through network neighborhood I get the error message 

that is in the title of this email, what are the possible causes for
this?
   I've got encrypt passwords set to no when this happens. If I change

that setting to yet, I get a login prompt, but none of the usernames
and 

passwords work.

Thanks. 

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The account is not authorized to login from this station.

2004-02-27 Thread Loc Nguyen
There is a posibility that in your configuration (password backend
database) you accidentally configured host access entry to deny the
users from using the work station

Give us more information about your
configuration :)


BLOCKQUOTE { BORDER-LEFT:#1F4687 1px solid; padding-left:20px;
margin-left: 0px; }-Original Message-
From: Alex Harris <[EMAIL PROTECTED]>
Sent: Friday, 27. Feb 2004 16:05 -0800
To: [EMAIL PROTECTED]
Subject: [Samba] The account is not authorized to login from this
station.

I'm in the process of upgrading to Samba 3.02a on a file server and 

I'm trying to finish all the configuration and testing. When I try to 

access the server through network neighborhood I get the error message 

that is in the title of this email, what are the possible causes for
this?

I've got encrypt passwords set to no when this happens. If I change


that setting to yet, I get a login prompt, but none of the usernames
and 

passwords work.


Thanks. 

-- 

To unsubscribe from this list go to the following URL and read the

instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Can't login to Samba PDC

2004-02-27 Thread Loc Nguyen
Did you configure nss and pam to work with ldap ? Do you have netlogon
share path world writable?


BLOCKQUOTE { BORDER-LEFT:#1F4687 1px solid; padding-left:20px;
margin-left: 0px; }-Original Message-
From: Scott Gross <[EMAIL PROTECTED]>
Sent: Friday, 27. Feb 2004 15:22 -0800
To: [EMAIL PROTECTED]
Subject: [Samba] Can't login to Samba PDC

We're trying to migrate from a windows NT domain to a Samba domain. 
I've

installed Samba 3.0.2a with an LDAP backend.  The server seems to be
running

fine as I can browse the shares from a non-domain Win2k workstation
after a

successful password check.  The workstations join the domain just fine
but

after I join them to the domain I can't log in to them.  I've checked
my

schannel and sign or seal settings in the Samba server and the
workstation

but still no luck.  Any help is greatly appreciated, I've been working
at

this for about two months now and I'm just getting frustrated.

-- 

To unsubscribe from this list go to the following URL and read the

instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] The account is not authorized to login from this station.

2004-02-27 Thread Alex Harris
   I'm in the process of upgrading to Samba 3.02a on a file server and 
I'm trying to finish all the configuration and testing. When I try to 
access the server through network neighborhood I get the error message 
that is in the title of this email, what are the possible causes for this?
   I've got encrypt passwords set to no when this happens. If I change 
that setting to yet, I get a login prompt, but none of the usernames and 
passwords work.

Thanks. :-)
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba and roaming users: feasable?

2004-02-27 Thread Loc Nguyen
I implement this with intermezzo to sync profiles :)


BLOCKQUOTE { BORDER-LEFT:#1F4687 1px solid; padding-left:20px;
margin-left: 0px; }-Original Message-
From: Andreas <[EMAIL PROTECTED]>
Sent: Friday, 27. Feb 2004 13:23 -0800
To: [EMAIL PROTECTED]
Subject: [Samba] samba and roaming users: feasable?

Has anybody used samba in an environment with multiple offices

connected via WAN links where users from one office sometimes

go to the other and login from there? How to tell the windows

workstation where it should authenticate? I suppose some sort

of remote announcement would come into play.


-- 

To unsubscribe from this list go to the following URL and read the

instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Well...

2004-02-27 Thread samba-request

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] [OT] Fyodor terminates SCO nmap rights -- how about Samba?

2004-02-27 Thread Spam


> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1

> On Fri, 27 Feb 2004 17:43:51 -0500
> Rashkae <[EMAIL PROTECTED]> wrote:

>> As much as I would like to see a slew of copyright infringement claims
>> get filed against SCO, from my reading of the GPL, violations of the
>> license only terminates your right to distribute the software which
>> was violated.  AFAIK, the only GPL software who's license SCO has
>> arguably violated, to date, is Linux.  Making derogatory comments

> My question is this: by declaring the GPL as invalid, isn't that
> non-acceptance of the license, which in turn invalidates your right to
> distribute all GPL software?  (SCO does distribute Samba in its products, while
> at the same time they have a document on their website declaring the GPL invalid;
> See: http://www.thescogroup.com/copyright/ for details)

> I believe acceptance of the license is required to distribute GPL products,
> although IANAL.

> Michael Brown

  I  am  not  sure  it  is.  I think they mean that because the GPL is
  invalid  then it has no legal binding what so ever. That is why (in
  their minds) they
  can continue to use GPL code.

  However  if that is the case, then the code would be protected under
  normal copyright laws.

  I  think that SCO sees this problem and will probably claim that the
  "intent"  of  the  people  releasing code under GPL is that the code
  would be "public domain" and thus free to use even for SCO.

  Or  they  simply  ignore  the copyright law as each copyright holder
  must them selfs proceed legally (and make proof that they are indeed
  the copyright holder) for SCO to stop using their code.

  Of course I am just rambling as I know very little of US laws.
  
  ~S

  





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Can't login to Samba PDC

2004-02-27 Thread Scott Gross
We're trying to migrate from a windows NT domain to a Samba domain.  I've
installed Samba 3.0.2a with an LDAP backend.  The server seems to be running
fine as I can browse the shares from a non-domain Win2k workstation after a
successful password check.  The workstations join the domain just fine but
after I join them to the domain I can't log in to them.  I've checked my
schannel and sign or seal settings in the Samba server and the workstation
but still no luck.  Any help is greatly appreciated, I've been working at
this for about two months now and I'm just getting frustrated.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Setting up Windows-to-Linux Printing

2004-02-27 Thread Sid
I recently installed Fedora Core 1, and am very new to linux.
While trying to get the linux computer to interact with other computers
on my home network (running Windows XP Home), I ran into a bit of a
snag. Printing from windows to linux just doesn't work for me. I can't
seem to figure out how to make it work.

My Specs are:
Computer 1
- Fedora Core 1
- Samba Version 3.0.0-15
- Lexmark Z52 Printer

Computers 2 and 3
- Windows XP Home

Printing locally works fine.

If some kind individual (or group of them) would help walk me through
setting up network printing, I would greatly appreciate it.

-- Sid

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [OT] Fyodor terminates SCO nmap rights -- how about Samba?

2004-02-27 Thread Michael Brown
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Fri, 27 Feb 2004 17:43:51 -0500
Rashkae <[EMAIL PROTECTED]> wrote:

> As much as I would like to see a slew of copyright infringement claims
> get filed against SCO, from my reading of the GPL, violations of the
> license only terminates your right to distribute the software which
> was violated.  AFAIK, the only GPL software who's license SCO has
> arguably violated, to date, is Linux.  Making derogatory comments

My question is this: by declaring the GPL as invalid, isn't that
non-acceptance of the license, which in turn invalidates your right to
distribute all GPL software?  (SCO does distribute Samba in its products, while
at the same time they have a document on their website declaring the GPL invalid;
See: http://www.thescogroup.com/copyright/ for details)

I believe acceptance of the license is required to distribute GPL products,
although IANAL.

Michael Brown


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAP87nyEfMczxaHdsRAkOSAJ0W08D8ONkgBEJfkIKagvh+qhKS/ACgjv2r
t3ioq+o615pJEN5vehaHDBM=
=r51q
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] [OT] Fyodor terminates SCO nmap rights -- how about Samba?

2004-02-27 Thread Aaron Collins
I'd have to rally behind Michael on this topic, I think this is where
the opensource community needs to show is stance and protest in a
non-vandalistic way.  I personally was confused how some script kiddies
felt that writing e-mail viruses that attacked SCOs website would do
anything more than give the OpenSource community a bad name.  This is
where we as GNU citizens need to show our support for Linux, even if
that isn't our OS of choice.  I'm personally a FreeBSD geek.  If SCO
throws an enough money at this case and wins, that makes OpenSource lose
value and vulnerable to many other lawsuits for someone that feels
OpenSource prevents them from making money.  Cough Cough M$.

My 2 cents

-Aaron Collins
hellfire at fastq dot com



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Michael Brown
Sent: Friday, February 27, 2004 3:28 PM
To: [EMAIL PROTECTED]
Subject: [Samba] [OT] Fyodor terminates SCO nmap rights -- how about
Samba?

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

As you all may know Fyodor of nmap fame has terminated SCO's
rights to distribute namp with its products.  See:

http://www.smh.com.au/articles/2004/02/27/1077676955381.html

I know this is off-topic, but I am interested in opinions
on the subject of SCO using Samba in it's products while they declare
the GPL is unconstitutional and invalid.  In Darl McBride's recent
speech at
Harvard Law School, he was asked in the Q&A period about SCO's use of
Samba and the GPL - to which he replied something to the effect (I am 
paraphrasing here) of "Samba doesn't infringe on our IP to our
knowledge, so we
still contribute (??) to the Samba project and distribute Samba with our
products"  Is this hypocrisy?  I welcome opinions of the members of the
list.

Sorry if this is not the right forum for this, but I am interested in
the
opinions of the Samba community on this issue.

Michael Brown 

 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAP8R5yEfMczxaHdsRApcLAJ94yu7LuXGL9saMm8Gv6J2ne5HWIgCfUuCs
LPi5uElkzBbjLUC6TBjIZrE=
=rhK9
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [OT] Fyodor terminates SCO nmap rights -- how about Samba?

2004-02-27 Thread Andrew Gaffney
Michael Brown wrote:
As you all may know Fyodor of nmap fame has terminated SCO's
rights to distribute namp with its products.  See:
http://www.smh.com.au/articles/2004/02/27/1077676955381.html
"Fyodor, whose Nmap (network mapper) security scanner is extremely popular among geeks and 
even featured in the latest film of the Matrix series"

Where in Matrix: Revolutions in nmap used? I'm going to have to watch that movie a little 
closer.

--
Andrew Gaffney
Network Administrator
Skyline Aeronautics, LLC.
636-357-1548
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [OT] Fyodor terminates SCO nmap rights -- how about Samba?

2004-02-27 Thread Rashkae
As much as I would like to see a slew of copyright infringement claims
get filed against SCO, from my reading of the GPL, violations of the
license only terminates your right to distribute the software which
was violated.  AFAIK, the only GPL software who's license SCO has
arguably violated, to date, is Linux.  Making derogatory comments
about the GPL to the press does not violate the terms of the license.

On Fri, Feb 27, 2004 at 02:28:09PM -0800, Michael Brown wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> As you all may know Fyodor of nmap fame has terminated SCO's
> rights to distribute namp with its products.  See:
> 
> http://www.smh.com.au/articles/2004/02/27/1077676955381.html
> 
> I know this is off-topic, but I am interested in opinions
> on the subject of SCO using Samba in it's products while they declare
> the GPL is unconstitutional and invalid.  In Darl McBride's recent speech at
> Harvard Law School, he was asked in the Q&A period about SCO's use of
> Samba and the GPL - to which he replied something to the effect (I am 
> paraphrasing here) of "Samba doesn't infringe on our IP to our knowledge, so we
> still contribute (??) to the Samba project and distribute Samba with our
> products"  Is this hypocrisy?  I welcome opinions of the members of the list.
> 
> Sorry if this is not the right forum for this, but I am interested in the
> opinions of the Samba community on this issue.
> 
> Michael Brown 
> 
>  
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.2.4 (GNU/Linux)
> 
> iD8DBQFAP8R5yEfMczxaHdsRApcLAJ94yu7LuXGL9saMm8Gv6J2ne5HWIgCfUuCs
> LPi5uElkzBbjLUC6TBjIZrE=
> =rhK9
> -END PGP SIGNATURE-
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] CIFS (mount.cifs) on Fedora Core 1 (kernel 2.4) ?

2004-02-27 Thread Jud Harris
Hey folks,

I've been searching for a couple days now for info regarding cifs on
Fedora Core 1 -- or kernel 2.4.  What what I can tell, smbfs has been
disabled in the version that comes with FC1, and cifs is not yet
enabled?  I now have Win2003 filesystems that don't mount -- 

mount error: cifs filesystem not supported by the system

Q1: cifs needs to be in the kernel (2.4) -- it doesn't appear to be. 
True?

Q2: can I recompile a 2.4 kernel with cifs in it?  if so, where to find
the patch or module?

Q3: is there something simpler that 1 or 2?

Thanks very much.
-Jud


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Help with samba migration

2004-02-27 Thread Tim Jordan
-Forwarded Message-

> From: Jeremy Austin <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Help with samba migration (long)
> Date: Fri, 27 Feb 2004 12:36:10 -0900
> 
> 
> Mostly about WebDAV...
> 
> I'm most of the IT department for a small non-profit school etc., and 
> I'm mulling over some series issues here, guys. Wonder if anyone has 
> some thoughts to add. Sorry this is so long --
> 
> Existing services (among others):
>   Support >100 users
>   Provide cross-platform file share access
>   ~ 100 Clients: Windows 95/98/NT4/2K/XP Home/XP Pro/Mac OS X
>   Public user file spaces
>   Web file access
>   Email/webmail/groupware
>   Must support computers not under my direct administration
> 
> New goals:
>   Private user file spaces
> 
> Current setup:
>   Mandrake 9.x
>   Samba 3/LDAP
>   Postfix/IMAP
> 
> I've been running Samba for 5 years, running a NT-style domain.  I 
> don't have the network bandwidth to support roaming profiles, nor do I 
> have the space on shared computers (approx. 3 dozen, mixed OSen) for 
> tons of local profiles. So we've been using one account (shared) for 
> public file access -- shares get mounted with an on-the-fly logon 
> script, and individual accounts for email, groupware, web apps, etc. I 
> can't give all domain users Administrator privileges on newer MS OSes 
> -- and therefore on the domain -- and yet they must, in general, run 
> with admin privileges because of legacy applications we haven't the 
> budget to replace. So I'm pretty sure I'm going to have to stick with 
> single profiles on shared computers; I haven't the network bandwidth or 
> hard drive space for roaming profiles.
> 
> Windows 2K or XP allow one to specify an account when connecting to a 
> network share, so we're halfway there. Windows 9x, however, are a real 
> pain in the rear -- everyone can use the same local profile, but 
> logging on and off (to switch users) is too slow. Win2K or XP often 
> require one to log off anyway to reconnect to a given share with 
> different credentials. (I can't teach 5th graders the intricacies of 
> "net use /delete"...)
> 
> Possible solution:
>   Continue using single logon for public shares + samba and
>   Use something else (nfs, afp, WebDAV) for private shares
> 
> There are some reportedly good commercial NFS clients, but I don't have 
> the budget for it. Nor can I afford AFP clients.
> 
> I've looked into WebDAV -- South River has a client that maps drive 
> letters (would cost me $1500 for 100 users). Internet Explorer has its 
> 'Web Folders' feature, which allows me to put shares into My Network 
> Places -- this might be adequate, and would work nicely, I think. I see 
> a number of universities online doing this.
> 
> Likely to be a problem with WebDAV (as in mod_dav) is that all files 
> (and hence user directories) must be owned by apache, thus trashing my 
> quotas. mod_dav FAQ says, in short, "If you understand the security 
> issues in running apache as root, write your own code and suid." I'm 
> not quite capable of doing that. "MoulDAVia", which purports to solve 
> this problem, appears to be 403 at the moment and sounds like it was 
> never finished. The universities must have this figured out, since I 
> see lots of them online using WebDAV.
> 
> If I give up having quota support, and roll my own, then I could do 
> mod_dav. I could use linux quota support for everything but 
> apache-owned files, and run a handy-dandy script with du -s, I'm sure, 
> for everything else. My home directories would look like this:
> Owner   Directory
> someuserusers   /home/someuser
>  /home/someuser/Mail<- webmail accessible
> apache  apache  /home/someuser/Private <- WebDAV accessible
> shareduser  users   /home/someuser/Public  <- linked to separate SMB 
> Public share
> 
> Does anyone think I should use mod_dav? If there are any caveats I'm 
> missing, I'd love to hear from anyone.
> 
> Thanks to any and all,
> Jeremy Austin
> Whitestone Schools
> 
> -
> To unsubscribe, send email to <[EMAIL PROTECTED]>
> with 'unsubscribe' in the message body.
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] [OT] Fyodor terminates SCO nmap rights -- how about Samba?

2004-02-27 Thread Michael Brown
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

As you all may know Fyodor of nmap fame has terminated SCO's
rights to distribute namp with its products.  See:

http://www.smh.com.au/articles/2004/02/27/1077676955381.html

I know this is off-topic, but I am interested in opinions
on the subject of SCO using Samba in it's products while they declare
the GPL is unconstitutional and invalid.  In Darl McBride's recent speech at
Harvard Law School, he was asked in the Q&A period about SCO's use of
Samba and the GPL - to which he replied something to the effect (I am 
paraphrasing here) of "Samba doesn't infringe on our IP to our knowledge, so we
still contribute (??) to the Samba project and distribute Samba with our
products"  Is this hypocrisy?  I welcome opinions of the members of the list.

Sorry if this is not the right forum for this, but I am interested in the
opinions of the Samba community on this issue.

Michael Brown 

 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAP8R5yEfMczxaHdsRApcLAJ94yu7LuXGL9saMm8Gv6J2ne5HWIgCfUuCs
LPi5uElkzBbjLUC6TBjIZrE=
=rhK9
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] PDC newbie

2004-02-27 Thread Michael Brown
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Fri, 27 Feb 2004 18:38:52 +0200
"Arthur Kerpician" <[EMAIL PROTECTED]> wrote:

> What if I want to give
> the 4th user permission on a file?

You will have to (re)compile your kernel with your filesystem's (be it ext3,
reiserfs, xfs or whatever) POSIX acl support.  You can the necessary userspace tools 
and  find patches for the 2.4.x
kernels at:

http://acl.bestbits.at

2.6.x includes support POSIX acls without patching, this must be configured at
compile time.  You will still need the userspace tools (found at the address
above) and a patched version of coreutils (there are binaries available) to
manipulate the acl perm sets.

With acl's you can place fine-grained permission sets (more than one user/group)
on files and directories.

Hope this helps.

Michael Brown
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAP71hyEfMczxaHdsRArHNAJ9Tio/q9iTVVOY56zcH0agFYu9lgACeL2Nm
l/PI4lav7wKLhtmM4QrcXnA=
=FjwR
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba transfer speed on shares

2004-02-27 Thread deflin39
Hi all!

I have searched through the archives and have not found an answer to this,
but it is also possible I wasn't searching for the right thing, so here
goes.

I am running samba 2.2.7a on a RH 9 box.  I am having issues with transfer
speeds on my shares.  I have the shares mapped to drives on my XP box. 
When coping files from the XP -> linux, The speed is great.  But from
linux->XP my speed drops off drastically.

Now, if I mount my D: drive onto my linux file system, I get good speeds
both ways when using the command line to do the copying.

Also, ftp speeds are fast and consistent both ways.

Map drive
xp->linux: 100megs/18secs
linux->xp: 100megs/30 minutes

Drive mounted on linux fs
xp->linux: 100megs/12secs
linux->xp: 100megs/12secs
similar speed for FTP

Has anyone seen something similar to this situation?  Please let me know
if I can clear any of this information up or provide detailed
settings/configurations...

deflin39

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba and roaming users: feasable?

2004-02-27 Thread Andreas
Has anybody used samba in an environment with multiple offices
connected via WAN links where users from one office sometimes
go to the other and login from there? How to tell the windows
workstation where it should authenticate? I suppose some sort
of remote announcement would come into play.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logging just the movement of files

2004-02-27 Thread Jesse Molina
Hi

You can always parse the logs, which can separate the log lines that you 
want versus those that you don't want.  Configure Samba to use syslog 
only and then write to syslog.  Syslog-ng is great for this kind of thing.



Alex Dantart wrote:
Hi:

I would want to log the files that "moves" through my network.
I have played with "log level" directive, but it's not what i need.
I set log level to 3... and certainly, it's ENORMOUSLY HUGE the log 
written.
It's the information i need, but it's impossible to catch somethin there
And level 2 is TOO POOR... not information

2.5 ? :)

I JUST need the files that somebody opens, or copy to his disk drive, 
ect...

any ideas ?

Thank you

--
# Jesse Molina
# Mail = [EMAIL PROTECTED]
# Page = [EMAIL PROTECTED]
# Cell = 1.407.970.0280
# Web  = http://www.opendreams.net/jesse/
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Logging just the movement of files

2004-02-27 Thread Alex Dantart
Hi:

I would want to log the files that "moves" through my network.
I have played with "log level" directive, but it's not what i need.
I set log level to 3... and certainly, it's ENORMOUSLY HUGE the log written.
It's the information i need, but it's impossible to catch somethin there
And level 2 is TOO POOR... not information
2.5 ? :)

I JUST need the files that somebody opens, or copy to his disk drive, ect...

any ideas ?

Thank you

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[samba] YA[hP (aka: Yet Another [homes] Problem)

2004-02-27 Thread vk7
Ok apart from funny (?) topic I've a problem with [homes]

samba 3.0.2a

[homes]
comment = Home Directory
read only = No
browseable = No
wide links = No
follow symlinks = No
there is only a problem that \\MYSERVER\$USER is not visible but if I
type it by hand I can access it.
if I ser browsable = No I can See it and access to it but I see
\\MYSERVER\homes too that isn't accessible
3.0.0 was ok (maybe also 3.0.1 but I don't remember 'couse it's passed a
few time between relese.
sorry for bad english I know (I'll try too improve :) )
thanks for all your support tell me if something isn't clear ( quite
probable )
bye
Visik
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Lost Connection when transfering large files...

2004-02-27 Thread Spam

 Did  you  try copying between two Samba 3 machines? I am going to try
 during this weekend to see if the problem persist or not.

 There  are no kernel messages or network errors otherwise that I have
 found so far.

 ~S


> hi all,
> same problem here, using redhat 7.3 and 9.0 both with samba 3.0.2a and
> Win2K. While copying files thru the share it simply hangs up the connection.
> FTP-ing it over the network works like a spark. I've been trying to debug
> some information out of it. but the only thing i get out of the logs is that
> it has a socket error or something.

> Does anyone have a clue what is going on and how to fix it?

> With regards,
> Michel van der Breggen

> "Spam" <[EMAIL PROTECTED]> schreef in bericht
> news:[EMAIL PROTECTED]
>>
>>  Using Gentoo with kernel 2.6.1 and 2.6.3 and Samba 2.2.8a and 3.0.2a.
>>
>>  Mostly  when  I transfer large (100+MB) files from a WinXP machine to
>>  the Samba server I get the following error:
>>
>>[smbd] lib/util_sock.c:read_socket_data(342)_
>>[smbd] read_socket_data: recv failure for 34944. Error = Connection
> reset by peer_
>>
>>  The  WinXP  machines also say "Delayed write failed. The data has been
>>  lost".
>>
>>  What can be the problem and where do I start to look to solve it?
>>
>>  ~S



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Whitepapers for Client Needed

2004-02-27 Thread L. Mark Stone
We have a client who is planning to migrate from a Windows NT4 domain to
either a Linux/Samba or Windows 2003/Active Directory domain.

Does anyone have any whitepapers that discuss the pros and cons of each?

Our firm supports both Linux and Windows clients, and to be honest we
like using Group Policy Objects in AD to manage security at the
workstation level, which Samba does not have. But we also like the
performance and ease of maintenance/security features of Samba, not to
mention the cost savings for MS licenses.

Thanks!
Mark

-- 
__
L. Mark Stone
President
Reliable Networks of Maine, LLC
477 Congress Street, 5th Floor
Portland, ME 04107

Tel: (207) 772-5678
Cell: (917) 597-2057
Email: [EMAIL PROTECTED]
Web: http://www.RNoME.com


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Lost Connection when transfering large files...

2004-02-27 Thread Michel van der Breggen
hi all,
same problem here, using redhat 7.3 and 9.0 both with samba 3.0.2a and
Win2K. While copying files thru the share it simply hangs up the connection.
FTP-ing it over the network works like a spark. I've been trying to debug
some information out of it. but the only thing i get out of the logs is that
it has a socket error or something.

Does anyone have a clue what is going on and how to fix it?

With regards,
Michel van der Breggen

"Spam" <[EMAIL PROTECTED]> schreef in bericht
news:[EMAIL PROTECTED]
>
>  Using Gentoo with kernel 2.6.1 and 2.6.3 and Samba 2.2.8a and 3.0.2a.
>
>  Mostly  when  I transfer large (100+MB) files from a WinXP machine to
>  the Samba server I get the following error:
>
>[smbd] lib/util_sock.c:read_socket_data(342)_
>[smbd] read_socket_data: recv failure for 34944. Error = Connection
reset by peer_
>
>  The  WinXP  machines also say "Delayed write failed. The data has been
>  lost".
>
>  What can be the problem and where do I start to look to solve it?
>
>  ~S
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Strange File Size Issue (SMB Configuration ?)

2004-02-27 Thread Pallieter Koopmans

Our office server is running Debian 3.0r2 with Samba 2.2.3a-12.3.

Every user mounts his/her homedir as a mapped networkdrive, in which
there are
links to the common directories.

If we save a file from within a program (like photoshop, flash) on the
server
the size differs from the same file saved locally. When copied with FTP,
a filemanager or the windows explorer itself the size does not differ at
all.

This problem only occurs when working on a WinXP workstation, not with
Win98.

Also at home, where the configurations are the same (WinXP, Debian +
Samba,
same versions), the problem does not exist.

All systems are without any viruses or firewalls.

I have experimented with configuration directives like:

- large readwritedefault: no, current: no
- read rawdefault: yes, current: yes
- write rawdefault: yes, current: yes
- nt smb supportdefault: yes, current: yes

Met vriendelijke groet,

Pallieter Koopmans

@Quest WebDesign
Dr. Jan Berendsstraat 57
6512 HA  Nijmegen
MOB +31-6-2523-7900
TEL +31-24-324-9339
FAX +31-24-360-5859
[EMAIL PROTECTED]
http://www.atQuest.nl/
KvK: 9119685
BTW: NL165101386B01

PS: Your website needs a SecondOpinion. Contact us!


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: winbind and unix/nt login match use unix uid

2004-02-27 Thread Alexius Ludeman
> Hi,
> I'm on solaris 9, and using winbind to be a part of our NT domain.
> 
> I'm trying to determine if it's possible to configure winbind/smb so
> that when the nt login name matches the unix login name the share is
> mounted using their unix uid.  With none matching account names,
> username map works fine.  It doesn't appear that "johnsmith =
> johnsmith" works in the username map file.
> 
> thanks for any assistance,
> lex

Some additional information here...

I'm running 3.0.2a, this machine also runs nis so the nsswitch.conf is
passwd: files, nis, winbind.  getent passwd shows the uid in numerical
order.  I have no names in the smbpasswd file.  I have tried "use
default domain" which did not have any noticable affect.

I am logged into my nt workstation as the user "Lex".  My unix login
is "aludeman".  I try and mount "\\samba\aludeman".  Now here is the
part that I wasn't expecting; I've temporarily added aludeman to the
nt domain and my usermap says "aludeman = Lex".  I get the following
message.

[2004/02/27 09:24:43, 2] auth/auth.c:check_ntlm_password(305)
check_ntlm_password:  authentication for user
  [Lex] -> [aludeman] -> [DOMAIN+aludeman] succeeded

in the source code is:
  user_info->smb_name.str, user_info->internal_username.str, unix_username

So the behavior that I'm seeing is that it's always taking the NT
domain precedence over the local passwd.  When DOMAIN+aludeman does
not exist then things behave like I would like them where HOMEGAIN+Lex
maps to unix user aludeman uid.

Any assistance is appreciated.

thanks
lex

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Authentication problem when using LDAP

2004-02-27 Thread Jim McDonough




>A colleague has seen a problem (with Samba 3.0), in using
>LDAP.
>What's the content of objectClass=sambaAccount, or more
>correctly, where do we read about it?
ok, these two statements don't go well together.  sambaAccount is the 2.2
objectclass, replaced by sambaSamAccount in 3.0.  Perhaps he's got his
samba's crossed?

take a look in examples/LDAP/samba.schema


Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA

[EMAIL PROTECTED]
[EMAIL PROTECTED]

Phone: (207) 885-5565
IBM tie-line: 776-9984
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with samba on red hat enterprise 3 and windows 2000.

2004-02-27 Thread John H Terpstra
On Fri, 27 Feb 2004, Edwards, Ross wrote:

> Hello.
>
> I am currently experiencing a very strange problem with
> samba on Red HAt Enterprise 3 and windows 2000.
>
> Everything will work fine and I can access the samba share
> from windows and then all of a sudden it will drop and
> if I go into linux it wont appear but the service will
> say its running.  This also happens when I reboot windows.
> It will take a good 10 minutes for the samba share on the
> linux machine to show up on either linux or windows.  Yet
> the share on the windows machine is always running no
> matter what.
>
> Is there any way to fix this???  Is there a problem with
> red hat perhaps???  Have I configured something incorrectly??

Use WINS! See chapter 10 of the Samba-HOWTO-Collection.pdf (chapter 9 of
The Official Samba-3 HOWTO and Reference Guide, ISBN: 0131453556)

You need to set up a WINS server (either on MS Windows NT4/200x Server or
on Samba). All network clients must use be configured to use that WINS
server.

- John T.

>
> Thank you.
> ROss Edwards
>
> __
> Do you Yahoo!?
> Get better spam protection with Yahoo! Mail.
> http://antispam.yahoo.com/tools
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [Samba/LVS] Howto, coming soon ...

2004-02-27 Thread Loc Nguyen
good, i'm waiting for it


BLOCKQUOTE { BORDER-LEFT:#1F4687 1px solid; padding-left:20px;
margin-left: 0px; }-Original Message-
From: "Lapin(c)" <[EMAIL PROTECTED]>
Sent: Friday, 27. Feb 2004 9:01 -0800
To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
Subject: [Samba] [Samba/LVS] Howto, coming soon ...

Hi all,


I've built an LVS architecture for Samba PDC to get load-balancing for
very

large community of users. It intends to make an authentication
processes

repartition, offers load-balancing on shares access as well. I'll try
to

complete a draft for the end of next week. All feedback will be really
helpful. 


Fred



-- 

To unsubscribe from this list go to the following URL and read the

instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] SAMBA 3 as PDC - W2K/WXP Pro logon trouble

2004-02-27 Thread Scott Gross
I have a Samba 3 PDC running with an LDAP backend on Red Hat 8.  All
authentication appears to be working correctly but I can't login to the
domain from a W2K or WXP Pro workstation after I have successfully joined
them to the domain.  If I login locally to the workstation I can browse the
Samba shares just fine.  I have checked the schannel and sign or seal
settings on both the workstations and the server and made sure they were set
to disable but still no luck.  Can anyone give me any ideas on how to solve
this problem.

 

TIA

Scott

 

Smb.conf

# Samba config file created using SWAT

# from 0.0.0.0 (0.0.0.0)

# Date: 2003/11/25 10:42:04

 

# Global parameters

[global]

workgroup = FIFEDEV

netbios name = Dev

null passwords = Yes

passdb backend = ldapsam

passwd program = /usr/local/bin/smbldap-passwd.pl -o %u

passwd chat = *new*password* %n\n *new*password:* %n\ *successfully*

passwd chat debug = Yes

log file = /var/log/samba/%m.log

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

add user script = /usr/local/sbin/smbldap-useradd.pl -a "%u"

delete user script = /usr/local/sbin/smbldap-useradd.pl -d "%u"

add group script = /usr/local/sbin/smbldap-useradd.pl -a -g "%g%

delete group script = /usr/local/sbin/smbldap-useradd.pl -d -g "%g"

add user to group script = /usr/local/sbin/smbldap-useradd.pl -j -u
"%u" -g "%g"

delete user from group script = /usr/local/sbin/smbldap-useradd.pl
-j -u "%u" -g "%g"

set primary group script = /usr/local/sbin/smbldap-useradd.pl -m -u
"%u" -gid "%g"

add machine script = /usr/local/sbin/smbldap-useradd.pl -a -w "%m"

logon script = logon.bat

logon path =

logon drive =

domain logons = Yes

os level = 22

preferred master = Yes

domain master = Yes

wins support = Yes

wins proxy = No

ldap suffix = dc=test,dc=com

ldap machine suffix = ou=_COMPUTERS_

ldap user suffix = ou=_USERS_

ldap group suffix = ou=_GROUPS_

ldap admin dn = "cn=Manager,dc=test,dc=com"

ldap ssl = No

ldap passwd sync = yes

comment = Samba-PDC Server

public = No

browseable = Yes

writable = No

client schannel = No

server schannel = No

client signing = No

server signing = No

 

[netlogon]

path = /usr/local/samba/lib/netlogon

read only = Yes

write list = ntadmin

locking = No

 

[tmp]

path = /tmp

guest ok = Yes

read only = Yes

 

[profiles]

path = /profiles

read only = No

writable = Yes

create mask = 0600

directory mask = 0700

 

[homes]

comment = Home Directories

browsable = no

writeable = yes

valid users = %S

create mask = 0700

directory mask = 0700

hide dot files = yes

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba requires ldap?

2004-02-27 Thread ww m-pubsyssamba
>When I try and run nmdb I get ./nmbd: error while loading shared libraries: 
>libldap.so.2: cannot open
>shared object file: No such file or directory because my system doesn't support ldap 
>at the moment. 
>Does samba require ldap? or just the same libraries? Anne 


Samba does not require LDAP libraries, but it sounds like the nmbd binary you are 
using has been
compiled with LDAP support included.
If you want to use Samba without LDAP you will need to obtain a binary comiled without 
LDAP support, or
compile your own binary from the source code. Or you could install the LDAP libraries 
by downloading
them from www.OpenLDAP.org, again I think you'll need to compile them yourself,

 thanks Andy. 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem with samba on red hat enterprise 3 and windows 2000.

2004-02-27 Thread Edwards, Ross
Hello.

I am currently experiencing a very strange problem with
samba on Red HAt Enterprise 3 and windows 2000.  

Everything will work fine and I can access the samba share
from windows and then all of a sudden it will drop and
if I go into linux it wont appear but the service will 
say its running.  This also happens when I reboot windows.
It will take a good 10 minutes for the samba share on the
linux machine to show up on either linux or windows.  Yet
the share on the windows machine is always running no
matter what.

Is there any way to fix this???  Is there a problem with
red hat perhaps???  Have I configured something incorrectly??

Thank you.
ROss Edwards

__
Do you Yahoo!?
Get better spam protection with Yahoo! Mail.
http://antispam.yahoo.com/tools
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Different file timestamp between Linux and Windows smb clients

2004-02-27 Thread Richard Conway

I have a shared directory on a Windows 2003 Server platform.
I have a Linux (RedHat 7.3) platform accessing the shared directory as a SMB
mount.
The system clocks on the two platforms are not fully synchronised - they are
out by a few minutes.

Using the Linux platform, if I touch a file in the shared directory then the
file's Modified and Accessed timestamps are both set according to the
current time on the Linux platform. I might expect these timestamps to be
set instead to the current time on the server platform - this is what I have
seen in a similar configuration using NFS.

To investigate further I use a third machine running Windows 2003 Server
(again not time synchronised with the server). Using this platform, if I
touch a file in the shared directory then the file's Modified and Accessed
timestamps are both set according to the current time on the *server*. This
is the behaviour I am looking for.

Does anyone know if I can configure the SMB client running on the Linux
platform to behave the same as the Windows 2003 SMB client, i.e. I want my
timestamps to be set according to the current time on the server as opposed
to the client.

Thanks in advance for any help.

Richard.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Authentication problem when using LDAP

2004-02-27 Thread David Collier-Brown
  A colleague has seen a problem (with Samba 3.0), in using
LDAP.
  A very simple version of the problem is as follows, where
he tries to authenticate a user "grw"
> > I am almost there...  I get the following when I do a simple test to
> > find the user 'grw' by attempting to change the password (even
> >  though I do not want Samba to change the pw, this just is a test)
> >
> > # smbpasswd -D 10 grw
> > Netbios name list:-
> > my_netbios_names[0]="REYMASTER"
> > New SMB password:
> >
> > Retype new SMB password:
> >
> > Trying to load: ldapsam_compat
> > Attempting to register passdb backend ldapsam
> > Successfully added passdb backend 'ldapsam'
> > Attempting to register passdb backend ldapsam_compat
> > Successfully added passdb backend 'ldapsam_compat'
> > Attempting to register passdb backend smbpasswd
> > Successfully added passdb backend 'smbpasswd'
> > Attempting to register passdb backend tdbsam
> > Successfully added passdb backend 'tdbsam'
> > Attempting to register passdb backend guest
> > Successfully added passdb backend 'guest'
> > Attempting to find an passdb backend to match ldapsam_compat
> > (ldapsam_compat)
> > Found pdb backend ldapsam_compat
> > pdb backend ldapsam_compat has a valid init
> > Attempting to find an passdb backend to match guest (guest)
> > Found pdb backend guest
> > pdb backend guest has a valid init
> > smbldap_search: base => [ou=people,dc=ncs,dc=att,dc=com], filter =>
> > [(&(&(uid=grw)(objectclass=posixAccount))(objectclass=sambaAccount))],
> > scope => [2]
> > smbldap_open_connection:   ldap://reymaster:389
> > smbldap_open_connection: connection opened
> > ldap_connect_system: Binding to ldap server  
> > ldap://reymaster:389
> > as "cn=proxyagent,ou=profile,dc=ncs,dc=att,dc=com"
> > ldap_connect_system: succesful connection to the LDAP server
> > The LDAP server is succesful connected
> > ldapsam_getsampwnam: Unable to locate user [grw] count=0
> > Failed to find entry for user grw.
> > Failed to modify password entry for user grw
  It looks amost as if the user isn't there... see
  just below the conf file..
> > my smb.conf file looks like this [global section]:
> >
> > [global]
> > printing = sysv
> > printcap name = /etc/printcap
> > load printers = yes
> > ; basic server settigns
> > workgroup = UnixServers
> > netbios name = reymaster
> > server string = Samba File Server
> > socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
> > SO_RCVBUF=8
> > 192
> >
> > ; security and login
> > security = user
> > encrypt passwords = Yes
> > log file = /var/log/samba/samba.log.%m
> > log level = 5
> > max log size = 500
> > hosts allow = 127.0.0.1 135.191.28.0/255.255.255.192
> >
> > ; LDAP configuration
> > ldap admin dn =
> > "cn=proxyagent,ou=profile,dc=ncs,dc=att,dc=com"
> > ldap suffix = "ou=people,dc=ncs,dc=att,dc=com"
> > ldap filter = "(&(uid=%u)(objectclass=posixAccount))"
> > ; ldap user suffix = ou=Users
> > ; ldap group suffix = ou=Groups
> > ldap server = reymaster
> > ldap ssl = off
> > ldap port = 389
> >
> >
> > In the Samba documentation that I have read, it refers to an {
> > objectClass=sambaAccount }
> > Do I need to add this in my LDAP server?
What's the content of objectClass=sambaAccount, or more
correctly, where do we read about it?
--dave
--
David Collier-Brown,   | Always do right. This will gratify
Sun Microsystems,  | some people and astonish the rest.
Toronto, Ontario,  |  -- Mark Twain
(905) 415-2849 or x52849   | [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba requires ldap?

2004-02-27 Thread Anne Ramey
When I try and run nmdb I get ./nmbd: error while loading shared 
libraries: libldap.so.2: cannot open shared object file: No such file 
or directory  because my system doesn't support ldap at the moment.  
Does samba require ldap?  or just the same libraries?

Anne

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] [Samba/LVS] Howto, coming soon ...

2004-02-27 Thread Lapin(c)

Hi all,

I've built an LVS architecture for Samba PDC to get load-balancing for very
large community of users. It intends to make an authentication processes
repartition, offers load-balancing on shares access as well. I'll try to
complete a draft for the end of next week. All feedback will be really helpful. 

Fred


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Trouble with install, still--please help

2004-02-27 Thread Craig White
On Fri, 2004-02-27 at 08:49, Anne Ramey wrote:
> When I compile the source, I don't get smbd, nmbd, etc.  Can't very 
> well use samba without the deamons.
> details:
> 
> > I've tried building it on a server that I know has pretty much every 
> > library possible for a program to need, but I'm still not getting a 
> > good samba install.
> > I'm on white-dwarf linux (kernel 2.4.25), gcc 3.3.2, Samba 3.0.2a
> > White-dwarf is home-grown, very much like slackware.
> >
> > When I configure and make and make install, I don't get any errors, 
> > but I when I look for some files that are supposed to come with it, 
> > they aren't there.  ex /usr/local/samba/lib/smb.conf: No such file or 
> > directory  & /etc/smb.conf: No such file or directory
> >
> > These are the files it did install:
> >
> > ./
> > usr/
> > usr/local/
> > usr/local/samba/
> > usr/local/samba/bin/
> > usr/local/samba/bin/net
> > usr/local/samba/bin/smbclient.old
> > usr/local/samba/bin/testparm.old
> > usr/local/samba/bin/smbtar.old
> > usr/local/samba/bin/tdbbackup.old
> > usr/local/samba/bin/wbinfo.old
> > usr/local/samba/bin/smbstatus.old
> > usr/local/samba/bin/rpcclient.old
> > usr/local/samba/bin/smbpasswd.old
> > usr/local/samba/bin/smbtree
> > usr/local/samba/bin/ntlm_auth
> > usr/local/samba/bin/testparm
> > usr/local/samba/bin/testprns
> > usr/local/samba/bin/tdbdump
> > usr/local/samba/bin/nmblookup.old
> > usr/local/samba/bin/findsmb
> > usr/local/samba/bin/smbclient
> > usr/local/samba/bin/testprns.old
> > usr/local/samba/bin/smbpasswd
> > usr/local/samba/bin/tdbbackup
> > usr/local/samba/bin/nmblookup
> > usr/local/samba/bin/smbstatus
> > usr/local/samba/bin/smbtar
> > usr/local/samba/bin/smbcacls
> > usr/local/samba/bin/smbspool
> > usr/local/samba/bin/findsmb.old
> > usr/local/samba/bin/wbinfo
> > usr/local/samba/bin/smbcontrol.old
> > usr/local/samba/bin/pdbedit
> > usr/local/samba/bin/profiles
> > usr/local/samba/bin/smbcontrol
> > usr/local/samba/bin/smbcquotas
> > usr/local/samba/bin/rpcclient
> > usr/local/samba/bin/smbcacls.old
> > usr/local/samba/bin/smbspool.old
> > usr/local/samba/lib/
> > usr/local/samba/lib/vfs/
> > usr/local/samba/lib/vfs/audit.so
> > usr/local/samba/lib/vfs/default_quota.so
> > usr/local/samba/lib/vfs/netatalk.so
> > usr/local/samba/lib/vfs/cap.so
> > usr/local/samba/lib/vfs/readonly.so
> > usr/local/samba/lib/vfs/fake_perms.so
> > usr/local/samba/lib/vfs/extd_audit.so
> > usr/local/samba/lib/vfs/recycle.so
> > usr/local/samba/lib/de.msg
> > usr/local/samba/lib/upcase.dat
> > usr/local/samba/lib/en.msg
> > usr/local/samba/lib/valid.dat
> > usr/local/samba/lib/fr.msg
> > usr/local/samba/lib/libsmbclient.so
> > usr/local/samba/lib/ja.msg
> > usr/local/samba/lib/it.msg
> > usr/local/samba/lib/nl.msg
> > usr/local/samba/lib/pl.msg
> > usr/local/samba/lib/tr.msg
> > usr/local/samba/lib/lowcase.dat
> > usr/local/samba/lib/charset/
> > usr/local/samba/lib/charset/CP437.so
> > usr/local/samba/lib/charset/CP850.so
> > usr/local/samba/man/
> > usr/local/samba/man/man1/nmblookup.1
> > usr/local/samba/man/man1/profiles.1
> > usr/local/samba/man/man1/smbcquotas.1
> > usr/local/samba/man/man1/editreg.1
> > usr/local/samba/man/man1/testparm.1
> > usr/local/samba/man/man1/testprns.1
> > usr/local/samba/man/man1/rpcclient.1
> > usr/local/samba/man/man1/findsmb.1
> > usr/local/samba/man/man1/smbsh.1
> > usr/local/samba/man/man1/smbstatus.1
> > usr/local/samba/man/man1/wbinfo.1
> > usr/local/samba/man/man1/ntlm_auth.1
> > usr/local/samba/man/man1/smbcacls.1
> > usr/local/samba/man/man1/vfstest.1
> > usr/local/samba/man/man1/smbclient.1
> > usr/local/samba/man/man1/smbtree.1
> > usr/local/samba/man/man1/smbget.1
> > usr/local/samba/man/man1/smbtar.1
> > usr/local/samba/man/man1/log2pcap.1
> > usr/local/samba/man/man1/smbcontrol.1
> > usr/local/samba/man/man5/
> > usr/local/samba/man/man5/smbpasswd.5
> > usr/local/samba/man/man5/lmhosts.5
> > usr/local/samba/man/man5/smb.conf.5
> > usr/local/samba/man/man7/
> > usr/local/samba/man/man7/samba.7
> > usr/local/samba/man/man8/
> > usr/local/samba/man/man8/smbpasswd.8
> > usr/local/samba/man/man8/net.8
> > usr/local/samba/man/man8/smbspool.8
> > usr/local/samba/man/man8/smbmount.8
> > usr/local/samba/man/man8/pdbedit.8
> > usr/local/samba/man/man8/winbindd.8
> > usr/local/samba/man/man8/nmbd.8
> > usr/local/samba/man/man8/tdbdump.8
> > usr/local/samba/man/man8/smbd.8
> > usr/local/samba/man/man8/swat.8
> > usr/local/samba/man/man8/smbmnt.8
> > usr/local/samba/man/man8/smbumount.8
> > usr/local/samba/man/man8/tdbbackup.8
> > usr/local/samba/man/man8/mount.cifs.8
> > usr/local/samba/sbin/
> > usr/local/samba/sbin/nmbd
> > usr/local/samba/sbin/smbd
> > usr/local/samba/sbin/swat
> > usr/local/samba/sbin/winbindd
> > usr/local/samba/swat/
> > usr/local/samba/swat/help/  & associated files
> > usr/local/samba/include/
> > usr/local/samba/include/libsmbclient.h
> >
> > I don't know what to try next.

it appears that your daemons are in usr/local/samba/sbin/ i.e. smbd,
nmbd,

Re: [Samba] RE: Winbind only enumerating 9% of domain groups

2004-02-27 Thread Hai Wu
I have to add that my case happens on Solaris 9, with all latest Solaris patches 
applied.

>>> "Hai Wu" <[EMAIL PROTECTED]> 02/27/04 10:43 AM >>>
I have the same problem. I asked before but did not get any feedback. 

Fedora is handling this correctly too.

>>> "ww m-pubsyssamba" <[EMAIL PROTECTED]> 02/27/04 04:25 AM >>>
Sorry this seems to be the same as bug 1030 (oops I always check bugzilla last) except 
that I have this problem on Solaris 8
with Samba 3.0.0, 3.0.1 and 3.0.2 with thousands of users, not just Samba 3.0.2. This 
behaviour is not seen on Red Hat 9.
If any developers are reading this and would like me to provide any data to help track 
down the problem please let me know
and I'll be happy to help,

thanks Andy.

>  -Original Message-
> From: ww m-pubsyssamba  
> Sent: 26 February 2004 14:17
> To:   '[EMAIL PROTECTED]'
> Subject:  Winbind only enumerating 9% of domain groups
> 
> Hi All,
> 
>   I'm having a strange pronlem with winbind. For users it seems to be working 
> fine but for groups its not enumerating most of the groups!
> A getent group produces only 325 lines of domain groups whereas wbinfo -g produces 
> 2839 lines of groups. I'm not seeing any errors
> logged and all commands are exiting with status 0. Winbind related sections of 
> smb.conf are shown below,
> 
>security = ads
>encrypt passwords = yes
>  winbind separator = +
>  winbind cache time = 300
>  winbind use default domain = Yes
>  template shell = /bin/sh
>  template homedir = /tmp
>  idmap uid = 1-6
>  idmap gid = 1-60
> winbind enum groups = yes
> winbind enum users = yes
> allow trusted domains = no
> 
> Any help much appreciated,
> 
>   thanks Andy Smith.

BBCi at http://www.bbc.co.uk/

This e-mail (and any attachments) is confidential and may contain personal views which 
are not the views of the BBC unless specifically
stated.
If you have received it in error, please delete it from your system. Do not use, copy 
or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the BBC monitors 
e-mails sent or received.
Further communication will signify your consent to this.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] RE: Winbind only enumerating 9% of domain groups

2004-02-27 Thread Hai Wu
I have the same problem. I asked before but did not get any feedback. 

Fedora is handling this correctly too.

>>> "ww m-pubsyssamba" <[EMAIL PROTECTED]> 02/27/04 04:25 AM >>>
Sorry this seems to be the same as bug 1030 (oops I always check bugzilla last) except 
that I have this problem on Solaris 8
with Samba 3.0.0, 3.0.1 and 3.0.2 with thousands of users, not just Samba 3.0.2. This 
behaviour is not seen on Red Hat 9.
If any developers are reading this and would like me to provide any data to help track 
down the problem please let me know
and I'll be happy to help,

thanks Andy.

>  -Original Message-
> From: ww m-pubsyssamba  
> Sent: 26 February 2004 14:17
> To:   '[EMAIL PROTECTED]'
> Subject:  Winbind only enumerating 9% of domain groups
> 
> Hi All,
> 
>   I'm having a strange pronlem with winbind. For users it seems to be working 
> fine but for groups its not enumerating most of the groups!
> A getent group produces only 325 lines of domain groups whereas wbinfo -g produces 
> 2839 lines of groups. I'm not seeing any errors
> logged and all commands are exiting with status 0. Winbind related sections of 
> smb.conf are shown below,
> 
>security = ads
>encrypt passwords = yes
>  winbind separator = +
>  winbind cache time = 300
>  winbind use default domain = Yes
>  template shell = /bin/sh
>  template homedir = /tmp
>  idmap uid = 1-6
>  idmap gid = 1-60
> winbind enum groups = yes
> winbind enum users = yes
> allow trusted domains = no
> 
> Any help much appreciated,
> 
>   thanks Andy Smith.

BBCi at http://www.bbc.co.uk/

This e-mail (and any attachments) is confidential and may contain personal views which 
are not the views of the BBC unless specifically
stated.
If you have received it in error, please delete it from your system. Do not use, copy 
or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the BBC monitors 
e-mails sent or received.
Further communication will signify your consent to this.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] PDC newbie

2004-02-27 Thread Arthur Kerpician
We recently migrated a Win2K PDC to Samba-3.0.2rc1-1 and it works just fine
(mainly). Still, there is a question that bugs me a lot: can Samba work with
NT style permissions, on directory level, NOT share level? Linux filesystems
can work with 3 entities for permissions, right? User, Group, All - RWX. NT
can have multiple permissions (anycase, more than 3) on each directory or
file, but Samba works with only 3, mentioned above. What if I want to give
the 4th user permission on a file?

As a hint, mapping groups GID <-> SID can help solving the problem I just
mentioned? I know that I can define permissions for as many users/groups I
want in smb.conf, but these permissions are only set for a particular share.

Hope I made myself clear...and I also hope I'll get at least a hint :)

TIA,
Arthur


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] fresh profile creation problem on xp

2004-02-27 Thread C.L. Lai [ALAN]
i have fresh user accouts setup on the pdc, so there aren't any
  roaming profiles. when a user does a first login on a windows
  box(xp), it should create the profile, however, xp only tries to
get
  the profile from pdc(it's of coz no available), and then after
xp
  realizes the profile isn't available, it fails the login instead
of
  creating a fresh profile


any idea?

thx

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Réf. : [Samba] Trouble with install, still--please help

2004-02-27 Thread stephane . purnelle




Hi

These files are the samba daemon !

> usr/local/samba/sbin/nmbd
> usr/local/samba/sbin/smbd
> usr/local/samba/sbin/swat
> usr/local/samba/sbin/winbindd

You must create the smb.conf in /usr/local/samba/lib.

---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467


|-+->
| |   Anne Ramey <[EMAIL PROTECTED]>  |
| |   Envoyé par :  |
| |   [EMAIL PROTECTED]|
| |   s.samba.org   |
| | |
| | |
| |   27/02/2004 16:49  |
| | |
|-+->
  
>---|
  |
   |
  |Pour :   [EMAIL PROTECTED]  
   |
  |cc :
   |
  |Objet :  [Samba] Trouble with install, still--please help   
   |
  
>---|




When I compile the source, I don't get smbd, nmbd, etc.  Can't very
well use samba without the deamons.
details:

> I've tried building it on a server that I know has pretty much every
> library possible for a program to need, but I'm still not getting a
> good samba install.
> I'm on white-dwarf linux (kernel 2.4.25), gcc 3.3.2, Samba 3.0.2a
> White-dwarf is home-grown, very much like slackware.
>
> When I configure and make and make install, I don't get any errors,
> but I when I look for some files that are supposed to come with it,
> they aren't there.  ex /usr/local/samba/lib/smb.conf: No such file or
> directory  & /etc/smb.conf: No such file or directory
>
> These are the files it did install:
>
> ./
> usr/
> usr/local/
> usr/local/samba/
> usr/local/samba/bin/
> usr/local/samba/bin/net
> usr/local/samba/bin/smbclient.old
> usr/local/samba/bin/testparm.old
> usr/local/samba/bin/smbtar.old
> usr/local/samba/bin/tdbbackup.old
> usr/local/samba/bin/wbinfo.old
> usr/local/samba/bin/smbstatus.old
> usr/local/samba/bin/rpcclient.old
> usr/local/samba/bin/smbpasswd.old
> usr/local/samba/bin/smbtree
> usr/local/samba/bin/ntlm_auth
> usr/local/samba/bin/testparm
> usr/local/samba/bin/testprns
> usr/local/samba/bin/tdbdump
> usr/local/samba/bin/nmblookup.old
> usr/local/samba/bin/findsmb
> usr/local/samba/bin/smbclient
> usr/local/samba/bin/testprns.old
> usr/local/samba/bin/smbpasswd
> usr/local/samba/bin/tdbbackup
> usr/local/samba/bin/nmblookup
> usr/local/samba/bin/smbstatus
> usr/local/samba/bin/smbtar
> usr/local/samba/bin/smbcacls
> usr/local/samba/bin/smbspool
> usr/local/samba/bin/findsmb.old
> usr/local/samba/bin/wbinfo
> usr/local/samba/bin/smbcontrol.old
> usr/local/samba/bin/pdbedit
> usr/local/samba/bin/profiles
> usr/local/samba/bin/smbcontrol
> usr/local/samba/bin/smbcquotas
> usr/local/samba/bin/rpcclient
> usr/local/samba/bin/smbcacls.old
> usr/local/samba/bin/smbspool.old
> usr/local/samba/lib/
> usr/local/samba/lib/vfs/
> usr/local/samba/lib/vfs/audit.so
> usr/local/samba/lib/vfs/default_quota.so
> usr/local/samba/lib/vfs/netatalk.so
> usr/local/samba/lib/vfs/cap.so
> usr/local/samba/lib/vfs/readonly.so
> usr/local/samba/lib/vfs/fake_perms.so
> usr/local/samba/lib/vfs/extd_audit.so
> usr/local/samba/lib/vfs/recycle.so
> usr/local/samba/lib/de.msg
> usr/local/samba/lib/upcase.dat
> usr/local/samba/lib/en.msg
> usr/local/samba/lib/valid.dat
> usr/local/samba/lib/fr.msg
> usr/local/samba/lib/libsmbclient.so
> usr/local/samba/lib/ja.msg
> usr/local/samba/lib/it.msg
> usr/local/samba/lib/nl.msg
> usr/local/samba/lib/pl.msg
> usr/local/samba/lib/tr.msg
> usr/local/samba/lib/lowcase.dat
> usr/local/samba/lib/charset/
> usr/local/samba/lib/charset/CP437.so
> usr/local/samba/lib/charset/CP850.so
> usr/local/samba/man/
> usr/local/samba/man/man1/nmblookup.1
> usr/local/samba/man/man1/profiles.1
> usr/local/samba/man/man1/smbcquotas.1
> usr/local/samba/man/man1/editreg.1
> usr/local/samba/man/man1/testparm.1
> usr/local/samba/man/man1/testprns.1
> usr/local/samba/man/man1/rpcclient.1
> usr/local/samba/man/man1/findsmb.1
> usr/local/samba/man/man1/smbsh.1
> usr/local/samba/man/man1/smbstatus.1
> usr/local/samba/man/man1/wbinfo.1
> usr/local/samba/man/man1/ntlm_auth.1
> usr/local/samba/man/man1/smbcacls.1
> usr/local/samba/man/man1/vfstest.1
> usr/local/samba/man/man1/s

[Samba] Trouble with install, still--please help

2004-02-27 Thread Anne Ramey
When I compile the source, I don't get smbd, nmbd, etc.  Can't very 
well use samba without the deamons.
details:

I've tried building it on a server that I know has pretty much every 
library possible for a program to need, but I'm still not getting a 
good samba install.
I'm on white-dwarf linux (kernel 2.4.25), gcc 3.3.2, Samba 3.0.2a
White-dwarf is home-grown, very much like slackware.

When I configure and make and make install, I don't get any errors, 
but I when I look for some files that are supposed to come with it, 
they aren't there.  ex /usr/local/samba/lib/smb.conf: No such file or 
directory  & /etc/smb.conf: No such file or directory

These are the files it did install:

./
usr/
usr/local/
usr/local/samba/
usr/local/samba/bin/
usr/local/samba/bin/net
usr/local/samba/bin/smbclient.old
usr/local/samba/bin/testparm.old
usr/local/samba/bin/smbtar.old
usr/local/samba/bin/tdbbackup.old
usr/local/samba/bin/wbinfo.old
usr/local/samba/bin/smbstatus.old
usr/local/samba/bin/rpcclient.old
usr/local/samba/bin/smbpasswd.old
usr/local/samba/bin/smbtree
usr/local/samba/bin/ntlm_auth
usr/local/samba/bin/testparm
usr/local/samba/bin/testprns
usr/local/samba/bin/tdbdump
usr/local/samba/bin/nmblookup.old
usr/local/samba/bin/findsmb
usr/local/samba/bin/smbclient
usr/local/samba/bin/testprns.old
usr/local/samba/bin/smbpasswd
usr/local/samba/bin/tdbbackup
usr/local/samba/bin/nmblookup
usr/local/samba/bin/smbstatus
usr/local/samba/bin/smbtar
usr/local/samba/bin/smbcacls
usr/local/samba/bin/smbspool
usr/local/samba/bin/findsmb.old
usr/local/samba/bin/wbinfo
usr/local/samba/bin/smbcontrol.old
usr/local/samba/bin/pdbedit
usr/local/samba/bin/profiles
usr/local/samba/bin/smbcontrol
usr/local/samba/bin/smbcquotas
usr/local/samba/bin/rpcclient
usr/local/samba/bin/smbcacls.old
usr/local/samba/bin/smbspool.old
usr/local/samba/lib/
usr/local/samba/lib/vfs/
usr/local/samba/lib/vfs/audit.so
usr/local/samba/lib/vfs/default_quota.so
usr/local/samba/lib/vfs/netatalk.so
usr/local/samba/lib/vfs/cap.so
usr/local/samba/lib/vfs/readonly.so
usr/local/samba/lib/vfs/fake_perms.so
usr/local/samba/lib/vfs/extd_audit.so
usr/local/samba/lib/vfs/recycle.so
usr/local/samba/lib/de.msg
usr/local/samba/lib/upcase.dat
usr/local/samba/lib/en.msg
usr/local/samba/lib/valid.dat
usr/local/samba/lib/fr.msg
usr/local/samba/lib/libsmbclient.so
usr/local/samba/lib/ja.msg
usr/local/samba/lib/it.msg
usr/local/samba/lib/nl.msg
usr/local/samba/lib/pl.msg
usr/local/samba/lib/tr.msg
usr/local/samba/lib/lowcase.dat
usr/local/samba/lib/charset/
usr/local/samba/lib/charset/CP437.so
usr/local/samba/lib/charset/CP850.so
usr/local/samba/man/
usr/local/samba/man/man1/nmblookup.1
usr/local/samba/man/man1/profiles.1
usr/local/samba/man/man1/smbcquotas.1
usr/local/samba/man/man1/editreg.1
usr/local/samba/man/man1/testparm.1
usr/local/samba/man/man1/testprns.1
usr/local/samba/man/man1/rpcclient.1
usr/local/samba/man/man1/findsmb.1
usr/local/samba/man/man1/smbsh.1
usr/local/samba/man/man1/smbstatus.1
usr/local/samba/man/man1/wbinfo.1
usr/local/samba/man/man1/ntlm_auth.1
usr/local/samba/man/man1/smbcacls.1
usr/local/samba/man/man1/vfstest.1
usr/local/samba/man/man1/smbclient.1
usr/local/samba/man/man1/smbtree.1
usr/local/samba/man/man1/smbget.1
usr/local/samba/man/man1/smbtar.1
usr/local/samba/man/man1/log2pcap.1
usr/local/samba/man/man1/smbcontrol.1
usr/local/samba/man/man5/
usr/local/samba/man/man5/smbpasswd.5
usr/local/samba/man/man5/lmhosts.5
usr/local/samba/man/man5/smb.conf.5
usr/local/samba/man/man7/
usr/local/samba/man/man7/samba.7
usr/local/samba/man/man8/
usr/local/samba/man/man8/smbpasswd.8
usr/local/samba/man/man8/net.8
usr/local/samba/man/man8/smbspool.8
usr/local/samba/man/man8/smbmount.8
usr/local/samba/man/man8/pdbedit.8
usr/local/samba/man/man8/winbindd.8
usr/local/samba/man/man8/nmbd.8
usr/local/samba/man/man8/tdbdump.8
usr/local/samba/man/man8/smbd.8
usr/local/samba/man/man8/swat.8
usr/local/samba/man/man8/smbmnt.8
usr/local/samba/man/man8/smbumount.8
usr/local/samba/man/man8/tdbbackup.8
usr/local/samba/man/man8/mount.cifs.8
usr/local/samba/sbin/
usr/local/samba/sbin/nmbd
usr/local/samba/sbin/smbd
usr/local/samba/sbin/swat
usr/local/samba/sbin/winbindd
usr/local/samba/swat/
usr/local/samba/swat/help/  & associated files
usr/local/samba/include/
usr/local/samba/include/libsmbclient.h
I don't know what to try next.

Anne Ramey
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Ldap ACL for PDC

2004-02-27 Thread RRuegner
Hi,
normally every client  ( samba etc ) needs only
read access cause this will enough to get the needed
data, but if you wanna add users with perl scripts
or usrmgr you need to have write access to ldap for sure.
This normally done with the admin ( root manager )account. smbpasswd -w
"secret" stores in secret.tdb
But that is not general, you can configure ldap to varia
read write rights ( see man ldap )
so it depends on you how you configure it.
I recommend to use the "manager" account for smb
to keep things simple , but if youre good coder
serveral setups are thinkable.
Regards
- Original Message - 
From: "Adam Williams" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, February 27, 2004 2:59 PM
Subject: Re: [Samba] Ldap ACL for PDC


> > What operation will be performed by samba PDC/BDC to ldap server? Is all
operation will always bind as ldap admin dn or anonymously?
>
> If an administrative bind is specified it seems to always use that.
>
> Don't forget that it needs to add objectclasses to prexisting objects.
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Running nmbd without smbd

2004-02-27 Thread Loc Nguyen
Why not ? just don't have any share 


BLOCKQUOTE { BORDER-LEFT:#1F4687 1px solid; padding-left:20px;
margin-left: 0px; }-Original Message-
From: Beast <[EMAIL PROTECTED]>
Sent: Friday, 27. Feb 2004 2:20 -0800
To: [EMAIL PROTECTED]
Subject: [Samba] Running nmbd without smbd

Is it possible? just for wins server, not for file sharing.



--beast


-- 

To unsubscribe from this list go to the following URL and read the

instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Automatic Response [Re: unknown]

2004-02-27 Thread paulc

Hi,

This domain is no longer used.

Kind Regards,

Mail Admin
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] unknown

2004-02-27 Thread samba-ntdom
i found this document about you
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba and XP

2004-02-27 Thread Ruslanas Cechovskis
Hi,
Im trying to set up Samba (share-level) and XP PRO
while googling found a lot of info about changing registry:

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netlogon\Parameters]
"requirestrongkey"=dword:
"requiresignorseal"=dword:
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Netlogon\Parameters]
"requirestrongkey"=dword:
"requiresignorseal"=dword:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"requirestrongkey"=dword:
"requiresignorseal"=dword:
Changed,but still while im trying to map share via net use i get msg that
password incorect fot \test\guest ...
why it tryes to connect with guest ?
but even if i try to connect as a valid user it still writes incorect
password


WBR,

Ruslanas Cechovskis

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Printing to Windows XP printer from LFS-4.1 Linux via SAMBA 2.2.8

2004-02-27 Thread Dr. Wolfgang Balster
I have the same problem. Did you succeed?
-- 
Mit freundlichem Gruss,

Wolfgang

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] password changes with ctrl-alt-del

2004-02-27 Thread Geddes
On Fri, 27 Feb 2004, Jörn Nettingsmeier wrote:

> Geddes wrote:
> > Thanks for the reply. That is the impression that I was getting too.
> > 
> > So as an alternative to no domains, I figure I will create a domain but 
> > not join any machines to that domain.
> 
> ???
> 
> if you press ctrl-alt-del on a machine that's not part of a domain, 
> all you can change is the local password.
> if you want your users to be able to change their server-side 
> password, you have to join the machine to the domain.

What I have done is on the XP pro workstation (non domain member) I press 
ctrl-alt-del then change password then I select: 

User name: (test user on PDC)
log on to: (manually enter netbios name of the PDC)
old password: xx
new password: xx  
confirm new password: xx

and the password changes on the PDC. I would like to be able to do the 
same with the PDC instead of being a windows box, I would like it to be
samba. So far my attempts have failed and was wondering if anyone has 
achieved this.


> 
> > As a test I have setup a windows domain with a share. Then mapped a non 
> > domain member machine to that domain's share. I was able to ctrl-alt-del 
> > and change the password. 
> > 
> > So now I have been trying replicate this with samba. So far already 
> > tried this with 2.2.7 and didn't work. So now I'am going to try it with 
> > 3.0.2a. 
> > 
> > On Thu, 26 Feb 2004, Jörn Nettingsmeier wrote:
> > 
> > 
> >>Geddes wrote:
> >>
> >>>Currently I'am using samba for file sharing. My smb.conf file is basically 
> >>>setup as default with a few minor changes. Therefore, my samba server is 
> >>>not part of a domain. Right now users can map the samba shares with 
> >>>windows XP... With this type of setup is it possible for them to change 
> >>>there smbpasswd using ctrl-alt-del? If so any examples or hints on how 
> >>>to set this up would be great. 
> >>> 
> >>>I have tried a few things and the only way I can get this to work is to 
> >>>make my samba server a PDC and have the workstations join the domain.
> >>
> >>afaik, that's the only way to do it. if a machine is not a domain 
> >>member, ctrl-alt-del changes the local password, and there is no way 
> >>around that.
> >>
> >>
> >>>The 
> >>>version of samba I'am using is 2.2.7a.
> >>>
> >>>Thanks
> >>>
> >>
> >>
> >>
> > 
> 
> 
> 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Ldap ACL for PDC

2004-02-27 Thread Adam Williams
> What operation will be performed by samba PDC/BDC to ldap server? Is all operation 
> will always bind as ldap admin dn or anonymously?

If an administrative bind is specified it seems to always use that.

Don't forget that it needs to add objectclasses to prexisting objects.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAMBA3 -> LDAP

2004-02-27 Thread Manfred Odenstein
On the second server, check with "getent group" if the group normal is
present on the second server, if no, then check your /etc/nsswitch.conf

regards odi 
Am Fr, den 27.02.2004 schrieb Stefan Bergner um 14:
08:
> Hello!
> 
> I have this Configuration:
> 
> 1st Server (incl. openldap). On this server, i hold my User and 
> Group-Management with smbldap-Tools.
> It work's great, the user's, group's and machine-account's stored
> in my ldap-db.
> 
> This Server is not a PDC!!
> 
> Now i want to setup a 2nd Server.
> 
> I want to connect this Samba-Server with the ldap-db of the 1st Server.
> Now, the good news: The User works.
> 
> With smbpasswd from 2nd Server i could change the Password of the users in 
> my ldap-db on the 1st Server.
> 
> But the group-setting  (no unix-group, only a ldap-group) doesn't work.
> 
> In my ldap-db (1st Server)
> is one user -> smbuser
> and one group -> normal
> 
> On my 1st Server it works for a share with 
> valid users = @normal
> 
> On my 2nd Server there is also a share with 
> valid users = @normal
> 
> I now want to connect me to the share of the 2nd Server. The Errormessage 
> is :
> 
> tree connect failed: NT_STATUS_ACCESS_DENIED
> 
> If i change the "valid users"-Parameter to
> 
> valid users = smbuser
> 
> everything is fine.
> 
> Any hint? 
> 
> Greetings/thanx
> 
> Stefan

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Is this how "trusted domains" work in Samba 3?

2004-02-27 Thread Kraa de Simon
Hello all,

Samba 3.0.1 on Sun Solaris 5.9.

I need to get my story straight before I ask the people with the necessary
access rights to do the Samba setup.

I would appreciate it if someone could validate my story below.

Thanks!

Simon.

The situation:

* There are 2 domains:
 - EMEA (PDC=EMEAD01,BDC=EMEAD02)
 - NLRESOURCES (PDC=NLRESOD01,BDC=NLRESOD02)
* Users have accounts on the EMEA domain.
* There are no user accounts defined on the NLRESOURCES domain.
* The Samba server is in domain NLRESOURCES.
* EMEA is trusted by NLRESOURCES.

Part of smb.conf looks like:

workgroup = NLRESOURCES
security = DOMAIN
password server = NLRESOD01,NLRESOD02
allow trusted domains = YES

This is how it all should work:

"User kraades is defined in the domain EMEA, the Samba server is a member of
the domain NLRESOURCES. The domain EMEA is trusted by the domain
NLRESOURCES. This means that user kraades or any other user of EMEA can
access ressources in the domain NLRESOURCES,even if they don't have a
account in NLRESOURCES. This is the trust relationship principe of a NT
domain. Because Samba is a resource in the domain NLRESOURCES, user kraades
can access it without having been defined in the PDC of NLRESOURCES. The
only need is to have a unix account on Samba called kraades."

This is what I should do:

* Create a machine account for the Samba server on the PDC of NLRESOURCES.
* Execute the command "net join -S NLRESOD01-UAdministrator%password" on the
Samba server.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] warning

2004-02-27 Thread everson
something is going wrong
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba-3.0.2 PDC LDAP: Add computer to domain.... Working !

2004-02-27 Thread David Wilson
Hi Robert,

Yes ! It's working !!
Thank you kindly for your assistance, greatly appreciated !
Keep well.

-- 

Many thanks and kind regards,

David Wilson
D c D a t a 
+27 33 3427003
+27 82 4147413
http://www.dcdata.co.za
[EMAIL PROTECTED]
KZN's first and only pure Linux solution provider

LinuxBox S.A.: Africa's shell provider.
Powered by Linux and DcData - driven by passion !
http://www.linuxbox.co.za
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] SAMBA3 -> LDAP

2004-02-27 Thread Stefan Bergner
Hello!

I have this Configuration:

1st Server (incl. openldap). On this server, i hold my User and 
Group-Management with smbldap-Tools.
It work's great, the user's, group's and machine-account's stored
in my ldap-db.

This Server is not a PDC!!

Now i want to setup a 2nd Server.

I want to connect this Samba-Server with the ldap-db of the 1st Server.
Now, the good news: The User works.

With smbpasswd from 2nd Server i could change the Password of the users in 
my ldap-db on the 1st Server.

But the group-setting  (no unix-group, only a ldap-group) doesn't work.

In my ldap-db (1st Server)
is one user -> smbuser
and one group -> normal

On my 1st Server it works for a share with 
valid users = @normal

On my 2nd Server there is also a share with 
valid users = @normal

I now want to connect me to the share of the 2nd Server. The Errormessage 
is :

tree connect failed: NT_STATUS_ACCESS_DENIED

If i change the "valid users"-Parameter to

valid users = smbuser

everything is fine.

Any hint? 

Greetings/thanx

Stefan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] INTERNAL ERROR: Signal 11 in smbd (samba 3.0.2a)

2004-02-27 Thread Simone Lazzaris
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
As I've said, I'm not vary proficient with gdb... here are another
inspection (maybe more useful this time).


Program received signal SIGSEGV, Segmentation fault.
0x082071ab in get_stored_queue_info (pdb=0x8397e68, snum=6,
pcount=0xb064,
~ppqueue=0xb1ac) at printing/printing.c:2186
2186jobid = IVAL(&cgdata.dptr, i*4);
(gdb) print i
$2 = 1012
(gdb) print extra_count
$3 = 1130
(gdb) print cgdata.dsize
$4 = 4520
(gdb) print cgdata.dsize/4
$5 = 1130
(gdb) print cgdata
$6 = {dptr = 0x83bff20 "~\006", dsize = 4520}
(gdb) l
2181/* Add in the changed jobids. */
2182for( i  = 0; i < extra_count; i++) {
2183uint32 jobid;
2184struct printjob *pjob;
2185
2186jobid = IVAL(&cgdata.dptr, i*4);
2187DEBUG(5,("get_stored_queue_info: changed job =
%u\n",
(unsigned int)jobid));
2188pjob = print_job_find(snum, jobid);
2189if (!pjob) {
2190DEBUG(5,("get_stored_queue_info: failed to
find changed job = %u\n", (unsigned int)jobid));
(gdb)
(gdb) backtrace
#0  0x082071ab in get_stored_queue_info (pdb=0x8397e68, snum=6,
~pcount=0xb064, ppqueue=0xb1ac) at printing/printing.c:2186
#1  0x0820763a in print_queue_status (snum=6, ppqueue=0xb1ac,
~status=0xb1b0) at printing/printing.c:2283
#2  0x0813c149 in _spoolss_enumjobs (p=0x839c530, q_u=0xb320,
~r_u=0xb310) at rpc_server/srv_spoolss_nt.c:6517
#3  0x0812a99c in api_spoolss_enumjobs (p=0x839c530)
~at rpc_server/srv_spoolss.c:693
#4  0x08160654 in api_rpcTNP (p=0x839c530, rpc_name=0x839c53e "spoolss",
~api_rpc_cmds=0x82dab84, n_cmds=51) at rpc_server/srv_pipe.c:1530
#5  0x081602d3 in api_pipe_request (p=0x839c530) at
rpc_server/srv_pipe.c:1476
#6  0x08159081 in process_request_pdu (p=0x839c530, rpc_in_p=0xb530)
~at rpc_server/srv_pipe_hnd.c:669
#7  0x0815931f in process_complete_pdu (p=0x839c530)
~at rpc_server/srv_pipe_hnd.c:741
#8  0x08159687 in process_incoming_data (p=0x839c530, data=0x83969b8 "(",
n=48)
~at rpc_server/srv_pipe_hnd.c:839
#9  0x081598b3 in write_to_internal_pipe (np_conn=0x839c530,
~data=0x83969b8 "(", n=64) at rpc_server/srv_pipe_hnd.c:878
#10 0x0815981a in write_to_pipe (p=0x839c3f0, data=0x83969a8 "\005", n=64)
~at rpc_server/srv_pipe_hnd.c:861
#11 0x0808e605 in api_fd_reply (conn=0x8397810, vuid=100,
~outbuf=0x40547008 "", setup=0x82f5830, data=0x83969a8 "\005",
params=0x0,
~suwcnt=2, tdscnt=64, tpscnt=0, mdrcnt=1024, mprcnt=0) at smbd/ipc.c:306
#12 0x0808e889 in named_pipe (conn=0x8397810, vuid=100,
outbuf=0x40547008 "",
~name=0xb716 "", setup=0x82f5830, data=0x83969a8 "\005", params=0x0,
~suwcnt=2, tdscnt=64, tpscnt=0, msrcnt=0, mdrcnt=1024, mprcnt=0)
~at smbd/ipc.c:350
#13 0x0808f674 in reply_trans (conn=0x8397810, inbuf=0x40526008 "",
~outbuf=0x40547008 "", size=152, bufsize=16644) at smbd/ipc.c:558
#14 0x080d5a4c in switch_message (type=37, inbuf=0x40526008 "",
~outbuf=0x40547008 "", size=152, bufsize=16644) at smbd/process.c:767
#15 0x080d5b08 in construct_reply (inbuf=0x40526008 "",
outbuf=0x40547008 "",
~size=152, bufsize=16644) at smbd/process.c:797
#16 0x080d5eb0 in process_smb (inbuf=0x40526008 "", outbuf=0x40547008 "")
~at smbd/process.c:897
#17 0x080d6c88 in smbd_process () at smbd/process.c:1328
#18 0x08258e07 in main (argc=2, argv=0xbac4) at smbd/server.c:887
#19 0x4026c306 in __libc_start_main (main=0x8258584 , argc=2,
~ubp_av=0xbac4, init=0x80754a0 <_init>, fini=0x8259160 <_fini>,
~rtld_fini=0x4000d2fc <_dl_fini>, stack_end=0xbabc)
~at ../sysdeps/generic/libc-start.c:129
(gdb) print cgdata
$7 = {dptr = 0x83bff20 "~\006", dsize = 4520}
- --
Simone Lazzaris
Task84 S.p.A.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAPzgv/38nB9eqrJYRAq8YAKCl8owvKLC+eVx62OfpsMM6BXGaOwCfZwyL
YT2ux6RgMktgLpJbIMNkkEU=
=2QsD
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] fake

2004-02-27 Thread absoftnews-request
you try to steal
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] winbind and unix/nt login match use unix uid

2004-02-27 Thread ww m-pubsyssamba


>Hi, I'm on solaris 9, and using winbind to be a part of our NT domain. I'm trying to 
>determine if it's 
>possible to configurewinbind/smb so that when the nt login name matches the unix 
>login name the share 
>is mounted using their unix uid. With none matching account names, username map works 
>fine. It doesn't 
>appear that "johnsmith = johnsmith" works in the username map file. 

This should be the default behaviour if you have configured the passwd line in 
nsswitch.conf as follows

passwd  files winbind

If a user exists in files with the same user name then Samba should use that first 
because of the order in
which files and winbind are listed. I think this will be case sensitive and may also 
be affected by the
domain prefix created by winbind if you are not using "winbind use default domain = 
yes" in smb.conf. I think
this will work best with winbind use default domain, but I guess should work wihout if 
you play around with
the user names.

thanks Andy.

>thanks for any assistance, 
>lex 


BBCi at http://www.bbc.co.uk/

This e-mail (and any attachments) is confidential and may contain personal views which 
are not the views of the BBC unless specifically
stated.
If you have received it in error, please delete it from your system. Do not use, copy 
or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the BBC monitors 
e-mails sent or received.
Further communication will signify your consent to this.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Running nmbd without smbd

2004-02-27 Thread Beast

Is it possible? just for wins server, not for file sharing.


--beast

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Solaris password aging support?

2004-02-27 Thread Andrew Bartlett
On Fri, 2004-02-27 at 19:25, Ruslan Moskalenko wrote:
> Hi,
> 
> I've seen many people complaining winbind can't handle expired Windows AD
> accounts and doesn't ask to change them. Is it something people can't just
> configure properly or it is not supported by design? Have anyone had luck
> getting it working properly?

Is this a problem with pam_winbind, or with Samba in general?

Samba 3.0.2 has a much improved pam_winbind, which might assist.  If
not, please give me a level 5 debug log of winbindd, and I should be
able to correct the mappings.  (The issue is - I hope - that we don't
tell pam that it is an 'must change password' situation correctly).

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and non-ascii characters

2004-02-27 Thread Andrew Bartlett
On Fri, 2004-02-27 at 21:05, [EMAIL PROTECTED] wrote:
> Hello everyone,
> 
> I have a problem with smbmount. After I mount a certain share, I can not 
> view files with weird charaters in their name. This happends for example 
> with the copyright char.
> After searching with Google I still didn't find an answer. I guess it has 
> something to do with a 'charset' command, but I can't figure out wich one, 
> and what character table I should use...
> 
> I'm using RedHat 9 and Samba 3.0.2a, and I connect to a Windows 2000 SBS 
> machine.

This is due to limitations in smbfs, not in Samba.  Try the CIFS VFS,
for better character set compatibility (due to unicode support).

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] RE: Winbind only enumerating 9% of domain groups

2004-02-27 Thread ww m-pubsyssamba
Sorry this seems to be the same as bug 1030 (oops I always check bugzilla last) except 
that I have this problem on Solaris 8
with Samba 3.0.0, 3.0.1 and 3.0.2 with thousands of users, not just Samba 3.0.2. This 
behaviour is not seen on Red Hat 9.
If any developers are reading this and would like me to provide any data to help track 
down the problem please let me know
and I'll be happy to help,

thanks Andy.

>  -Original Message-
> From: ww m-pubsyssamba  
> Sent: 26 February 2004 14:17
> To:   '[EMAIL PROTECTED]'
> Subject:  Winbind only enumerating 9% of domain groups
> 
> Hi All,
> 
>   I'm having a strange pronlem with winbind. For users it seems to be working 
> fine but for groups its not enumerating most of the groups!
> A getent group produces only 325 lines of domain groups whereas wbinfo -g produces 
> 2839 lines of groups. I'm not seeing any errors
> logged and all commands are exiting with status 0. Winbind related sections of 
> smb.conf are shown below,
> 
>security = ads
>encrypt passwords = yes
>  winbind separator = +
>  winbind cache time = 300
>  winbind use default domain = Yes
>  template shell = /bin/sh
>  template homedir = /tmp
>  idmap uid = 1-6
>  idmap gid = 1-60
> winbind enum groups = yes
> winbind enum users = yes
> allow trusted domains = no
> 
> Any help much appreciated,
> 
>   thanks Andy Smith.

BBCi at http://www.bbc.co.uk/

This e-mail (and any attachments) is confidential and may contain personal views which 
are not the views of the BBC unless specifically
stated.
If you have received it in error, please delete it from your system. Do not use, copy 
or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the BBC monitors 
e-mails sent or received.
Further communication will signify your consent to this.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba and non-ascii characters

2004-02-27 Thread jurrie . overgoor
Hello everyone,

I have a problem with smbmount. After I mount a certain share, I can not 
view files with weird charaters in their name. This happends for example 
with the copyright char.
After searching with Google I still didn't find an answer. I guess it has 
something to do with a 'charset' command, but I can't figure out wich one, 
and what character table I should use...

I'm using RedHat 9 and Samba 3.0.2a, and I connect to a Windows 2000 SBS 
machine.

Thanks for your help,

-- 
Jurrie Overgoor




-- 
_
Zon Gratis ADSL. De voordelen van gratis internet met de snelheid van
ADSL. Zonder abonnementskosten en zonder vast contract. Je betaalt
alleen voor de tijd online. Nu zonder aansluitkosten en met gratis
modem. Bestel snel op zonnet.nl.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba3 with W2K Native Mode

2004-02-27 Thread Axel Spallek
Hi.
I use Samba 3.0.2-29 on Server S7.
In our network is a W2K Server named S4 running in Native Mode, Domain Name
hel.lan.
I tried to join the S4-Domain hel.lan.


s7:~ # kinit [EMAIL PROTECTED]
[EMAIL PROTECTED]'s Password:
s7:~ # net ads join
[2004/02/27 08:20:54, 0] libads/ldap.c:ads_add_machine_acct(1006)
  Host account for s7 already exists - modifying old account
Using short domain name -- HEL
Joined 'S7' to realm 'HEL.LAN'
s7:~ # klist
Credentials cache: FILE:/tmp/krb5cc_0
Principal: [EMAIL PROTECTED]

  Issued   Expires  Principal
Feb 27 08:20:12  Feb 27 18:20:12  krbtgt/[EMAIL PROTECTED]
Feb 27 08:20:19  Feb 27 18:20:12  [EMAIL PROTECTED]
Feb 27 08:20:19  Feb 27 18:20:12  kadmin/[EMAIL PROTECTED]

rcsmb restart
rcwinbind restart

Last two are needed (don't know why) otherwise the new Credentials are not
usable (getent gives error).
These steps I have to do every morning, because the credentials expired. Is
there a workaround?


So far so good.
Next I tried to use these

getent passwd
wbinfo -u
wbinfo -g
getent group


without any problem. They work fine, I can see all users and groups from
ADS.
Next I tried to use a share.
My smb.conf:

# Samba config file created using SWAT
# from 172.23.4.3 (172.23.4.3)
# Date: 2004/02/16 15:00:31

# Global parameters
[global]
unix charset = LOCALE
workgroup = HEL
realm = HEL.LAN
interfaces = 127.0.0.1, eth0
bind interfaces only = Yes
security = ADS
password server = s4.hel.lan
log level = 2
preferred master = No
local master = No
domain master = No
wins server = s4.hel.lan
ldap ssl = no
idmap uid = 1-2
idmap gid = 1-2
winbind separator = +
winbind use default domain = Yes

[asx]
path = /mnt/testsamba
force user = root
read only = No

[test]
path = /mnt/Test
#   force user = root
read only = No
create mask = 0700
force create mode = 0700
directory mask = 0700
force directory mode = 0700




The directories definitively exist, but the only share I can use is the asx
with force user = root. No matter which other user I try (even without the
force user) I get the following error message in log.smbd:

[2004/02/27 08:22:38, 2] smbd/server.c:open_sockets_smbd(318)
  waiting for a connection
[2004/02/27 08:34:53, 2] smbd/sesssetup.c:setup_new_vc_session(591)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all
old resources.
[2004/02/27 08:35:19, 0] smbd/service.c:make_connection_snum(677)
  '/mnt/Test' does not exist or is not a directory, when connecting to
[test]
[2004/02/27 08:35:19, 0] smbd/service.c:make_connection_snum(677)
  '/mnt/Test' does not exist or is not a directory, when connecting to
[test]
[2004/02/27 08:35:19, 0] smbd/service.c:make_connection_snum(677)
  '/mnt/Test' does not exist or is not a directory, when connecting to
[test]
[2004/02/27 08:35:19, 0] smbd/service.c:make_connection_snum(677)
  '/mnt/Test' does not exist or is not a directory, when connecting to
[test]

asx works:

[2004/02/27 08:35:33, 1] smbd/service.c:make_connection_snum(705)
  172.23.4.3 (172.23.4.3) connect to service asx initially as user root
(uid=0, gid=0) (pid 732)


I can move the force user= root to the test share and I have the same
problem with asx.

s7:~ # dir /mnt
total 0
drwx--7 root root  184 Feb 16 13:41 .
drwxr-xr-x   20 root root  464 Feb 18 12:20 ..
drwxrwxrwx3 as   Domänen-Benutzer   72 Feb 16 13:57 Test
drwxrwxrwx3 akey users 440 Feb 18 13:11 testsamba

As you can see the rights are changed to o+rwx for testing. No difference.
"as" is a ADS-User. "Domänen-Benutzer" is a Group from ADS. As you can see I
can do a "chown hel+as /mnt/test".
akey and users are local. force user = akey doesn't work as well as force
user hel+as

Is this a bug? I did not find a patch. Can anyone help?



s7:~ # cat /etc/krb5.conf
[libdefaults]
default_realm = HEL.LAN
clockskew = 300

[realms]
HEL.LAN = {
kdc = S4.HEL.LAN
#   admin_server = MY.COMPUTER
kpasswd_server = S4.HEL.LAN
}
#   OTHER.REALM = {
#   kdc = OTHER.COMPUTER
#   }

[domain_realm]
hel.lan = HEL.LAN

.hel.lan = HEL.LAN

[logging]
default = SYSLOG:NOTICE:DAEMON
kdc = FILE:/var/log/kdc.log
kadmind = FILE:/var/log/kadmind.log

[appdefaults]
pam = {
ticket_lifetime = 1d
renew_lifetime = 1d
forwardable = true
proxiable = false
retain_after_close = false
minimum_uid = 0
debug = false
}



s7:~ #cat /etc/nsswitch.conf
passwd: files winbind
shodow: files
group:  files winbind

hosts:  files dns
networks:   files dns

services:   

Re: [Samba] INTERNAL ERROR: Signal 11 in smbd (samba 3.0.2a)

2004-02-27 Thread Simone Lazzaris
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jeremy Allison wrote:

| Can you compile with debug symbols included (-g) so we can
| get some info as to chat line this is failing on ?
|
| Thanks,
|
|   Jeremy.
Mmm... I'm not very used to gdb... anyway, I've compiled smbd with the
- --enable-debug switch on (via ./configure).
Firing gdb --pid to attach to a running process, and waiting for it to
crash, I've obtained the following data:
(gdb) info program
~Using the running image of attached process 6930.
Program stopped at 0x81a78ea.
It stopped with signal SIGSEGV, Segmentation fault.
(gdb) backtrace
#0  0x081a78ea in get_stored_queue_info ()
#1  0x081a7c49 in print_queue_status ()
#2  0x0810cf00 in _spoolss_enumjobs ()
#3  0x080fee9a in api_spoolss_enumjobs ()
#4  0x0812a19c in api_rpcTNP ()
#5  0x08129f1e in api_pipe_request ()
#6  0x08124484 in process_request_pdu ()
#7  0x08124671 in process_complete_pdu ()
#8  0x081248f6 in process_incoming_data ()
#9  0x08124ab3 in write_to_internal_pipe ()
#10 0x08124a33 in write_to_pipe ()
#11 0x08087feb in api_fd_reply ()
#12 0x080881d7 in named_pipe ()
#13 0x08088beb in reply_trans ()
#14 0x080bd4f5 in switch_message ()
#15 0x080bd581 in construct_reply ()
#16 0x080bd891 in process_smb ()
#17 0x080be2fd in smbd_process ()
#18 0x081ea34b in main (argc=2, argv=0xbad4) at smbd/server.c:887
#19 0x4026c306 in __libc_start_main (main=0x81e9ac8 , argc=2,
~ubp_av=0xbad4, init=0x8075420 <_init>, fini=0x81ea5f0 <_fini>,
~rtld_fini=0x4000d2fc <_dl_fini>, stack_end=0xbacc)
~at ../sysdeps/generic/libc-start.c:129


(gdb) info frame
Stack level 0, frame at 0xb018:
~ eip = 0x81a78ea in get_stored_queue_info; saved eip 0x81a7c49
~ called by frame at 0xb168
~ Arglist at 0xb018, args:
~ Locals at 0xb018, Previous frame's sp is 0x0
~ Saved registers:
~  ebx at 0xb00c, ebp at 0xb018, esi at 0xb010, edi at
0xb014,
~  eip at 0xb01c
(note: info locals seems to have some problem (no symbol table) but as
I've said, I'm not used to gdb).
Do you need any more data ? There's some more testing I can do ?

(And, by the way, thanks in advance).

- --
Simone Lazzaris
Task84 S.p.A.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAPw4b/38nB9eqrJYRArxGAKCt730+rfKcjI9JJLvMnAX7Syd4tQCguLZk
4jfuLejqZiacFqYN7Qx1+nM=
=CuBq
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] ATTENTION! Infection discovered by McAfee GroupShield

2004-02-27 Thread GroupShield for Exchange (COMMSERVER)
Action Taken:
An attempt to disinfect the attachment was unsuccessful,
so the attachment was quarantined from the message and replaced with
a text file informing the recipient of the action taken. The infected
attachment
has been placed in the designated quarantine folder.
Please exercise extreme caution when handling the quarantined attachment

To:
[EMAIL PROTECTED] <[EMAIL PROTECTED]>

From:
[EMAIL PROTECTED] <[EMAIL PROTECTED]>

Sent:
1313132786,29621184

Subject:
Please read

Attachment Details:-

Attachment Name: mail.zip
File: mail.zip
Infected? Yes
Repaired? No
Blocked? No
Deleted? No
Virus Name: W32/Mydoom.f.zip




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Solaris password aging support?

2004-02-27 Thread Ruslan Moskalenko
Hi,

I've seen many people complaining winbind can't handle expired Windows AD
accounts and doesn't ask to change them. Is it something people can't just
configure properly or it is not supported by design? Have anyone had luck
getting it working properly?

Thanks!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba