[Samba] Samba and LDAP - which attributes are mandatory which optional

2010-11-11 Thread Götz Reinicke - IT-Koordinator
Hallo, I'm asking myself, which LDAP attributes are mandatory which optional for user and workstation accounts. After using the smbldap-populate command there where different attributes set than for adding users with the smbldap-useradd command. --- snip --- sambaAcctFlags: sambaHomeDrive: samb

Re: [Samba] FreeBSD 8.1 & Samba4 alpha11 domain controller - cldapd bind problem

2010-11-11 Thread Daniel Müller
Did you made a testparm -vv|grep cldap, then press enter You may see this: server services = smb, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate cldap port = 389 First of all server services must point to cldap And the cldap port. If you have another service

Re: [Samba] tree connect failed: NT_STATUS_BAD_NETWORK_NAME

2010-11-11 Thread Ayo Adeyeri
I would like to thank everyone who assisted me with this problem. It turns out that the problem was caused by the fact that we were running selinux on the server. Once it was disabled the share was accessible. Thanks Ayo -Original Message- From: samba-boun...@lists.samba.org [mailto:s

Re: [Samba] FreeBSD 8.1 & Samba4 alpha11 domain controller - cldapd bind problem

2010-11-11 Thread Oeboema
> Samba 4 Alpha 11 is pretty old now.  Have you tried Alpha 13?  I don't > know if it will fix the problem, of course, but I think it's worth a > try. Alpha 11 is the latest version available in the FreeBSD ports. Because of the amount of patches and the outstanding work of the port maintainer I w

Re: [Samba] FreeBSD 8.1 & Samba4 alpha11 domain controller - cldapd bind problem

2010-11-11 Thread Michael Wood
On 11 November 2010 22:57, Oeboema wrote: > I've been trying to run samba4 alpha11 on a FreeBSD 8.1 system as a Samba 4 Alpha 11 is pretty old now. Have you tried Alpha 13? I don't know if it will fix the problem, of course, but I think it's worth a try. > domain controller but I'm having trou

Re: [Samba] ntlm_auth = NT_STATUS_NO_LOGON_SERVERS: No logon servers (0xc000005e)

2010-11-11 Thread Rowley, Mathew
security = ads I am really just trying to get ntlm_auth to work in order to proxy AD requests with FreeRadius... http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO On 11/11/10 2:26 PM, "Aaron E." wrote: >security = domain or security = user? > >I had problems with winbi

Re: [Samba] ntlm_auth = NT_STATUS_NO_LOGON_SERVERS: No logon servers (0xc000005e)

2010-11-11 Thread Aaron E.
security = domain or security = user? I had problems with winbind using security = user.. I can't remember properly it's been a while.. On 11/11/2010 04:22 PM, Rowley, Mathew wrote: I had to downgrade samba on a rh5.5 instance due to ntlm_auth not working properly: https://bugzilla.redhat.co

[Samba] ntlm_auth = NT_STATUS_NO_LOGON_SERVERS: No logon servers (0xc000005e)

2010-11-11 Thread Rowley, Mathew
I had to downgrade samba on a rh5.5 instance due to ntlm_auth not working properly: https://bugzilla.redhat.com/show_bug.cgi?format=multiple&id=561325 Now, when I add the computer to the domain ('net ads join –U Administrator') it seems to work, is visible on the AD interface, but the logs show

[Samba] FreeBSD 8.1 & Samba4 alpha11 domain controller - cldapd bind problem

2010-11-11 Thread Oeboema
I've been trying to run samba4 alpha11 on a FreeBSD 8.1 system as a domain controller but I'm having trouble starting the cldapd server. For some reason it won't bind to the specified address or interface whatever I specify in smb.conf. I managed running the provision script without any trouble but

[Samba] Mandatory Profile

2010-11-11 Thread Aaron E.
I'm using samba 3.4 with ldap backend, I'm trying to get a mandatory profile working with 4 of my floor machines. I can't seem to get the proper permissions in order for all 4 users to pull this profile. Only the owner of the profile can use even if I set the permissions to 777 on the profile.

Re: [Samba] troule switching winbind to use a new AD 2008

2010-11-11 Thread John Stile
I forgot to mention that this AD is 2008 R2, if that makes a difference. On Thu, 2010-11-11 at 08:12 -0800, Ray Van Dolson wrote: > On Thu, Nov 11, 2010 at 08:09:50AM -0800, John Stile wrote: > > I have been using 2003 AD servers for winbind for many years, and now > > 2008 is phasing in, but I c

Re: [Samba] troule switching winbind to use a new AD 2008

2010-11-11 Thread Ray Van Dolson
On Thu, Nov 11, 2010 at 08:09:50AM -0800, John Stile wrote: > I have been using 2003 AD servers for winbind for many years, and now > 2008 is phasing in, but I can't authenticate using the new servers, and > I'm not sure what to do. All advice very welcome. > > This is a problem for me on both Ge

[Samba] troule switching winbind to use a new AD 2008

2010-11-11 Thread John Stile
I have been using 2003 AD servers for winbind for many years, and now 2008 is phasing in, but I can't authenticate using the new servers, and I'm not sure what to do. All advice very welcome. This is a problem for me on both Gentoo (samba 3.0.33) and Debian Lenny (samba 3.0.24). For debugging, I

[Samba] getting users of a Active Directory group

2010-11-11 Thread Oguz Yilmaz
Hi all, I try to form a file to include AD usernames with their group memberships. I have no problems with joining and getent and wbinfo stuff. All are working. A user may have more then one group membership except "Domain Users" group. One way is to run "getent group" and grep for the group I t

Re: [Samba] tree connect failed: NT_STATUS_BAD_NETWORK_NAME

2010-11-11 Thread John Drescher
On Thu, Nov 11, 2010 at 9:36 AM, Ayo Adeyeri wrote: > Thanks John, > > I just removed the "." , changed the workgroup name to covecapcom but I am > still getting the same errors in the log file when I attempt to connect to > either of the shares from a windows client. > Are the windows clients

Re: [Samba] samba over internet slow with images/thumbnails

2010-11-11 Thread Chris Weiss
On Thu, Nov 11, 2010 at 1:13 AM, Stan Hoeppner wrote: >> Simply not the best experience. yeah. smb/cifs, and not just samba but windows too, is not really well suited for large files over high latency links. The exceptions are office docs where the files are not read in entirety when opened. I

Re: [Samba] tree connect failed: NT_STATUS_BAD_NETWORK_NAME

2010-11-11 Thread Ayo Adeyeri
Thanks John, I just removed the "." , changed the workgroup name to covecapcom but I am still getting the same errors in the log file when I attempt to connect to either of the shares from a windows client. Thanks, Ayo Adeyeri -Original Message- From: John Drescher [mailto:dresche...@

Re: [Samba] tree connect failed: NT_STATUS_BAD_NETWORK_NAME

2010-11-11 Thread John Drescher
Network names with a . in them are not supported. Well unless you are talking about an ads realm. John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] tree connect failed: NT_STATUS_BAD_NETWORK_NAME

2010-11-11 Thread Ayo Adeyeri
Bump -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Ayo Adeyeri Sent: Wednesday, November 10, 2010 7:17 PM To: samba@lists.samba.org Subject: [Samba] tree connect failed: NT_STATUS_BAD_NETWORK_NAME Let me start off by apologizin

Re: [Samba] krb ticket for the computer account

2010-11-11 Thread Mustafa Kuscu
> Any ideas on how to debug this further? >> > > I think you need to define KRB5CCNAME to point to your ticket cache file > (/tmp/krb5cc_0) or have a /tmp/krb5cc_ file where is the UID of the > sudo user. > > Did not work. still getting the message: mount error(126): Required key not avail

Re: [Samba] SAMBA accessible with hostname only on local subnet

2010-11-11 Thread Aaron E.
I would verify the routing table on the server. This sounds like the default gateway isn't set or the server doesn't know how to reach the other networks. try # route and examine the table. On 11/11/2010 06:17 AM, *...@ppu wrote: hi all, i have integrated SAMBA with active directory and ever

Re: [Samba] krb ticket for the computer account

2010-11-11 Thread Liam Gretton
On 11/11/2010 12:18, Mustafa Kuscu wrote: [DOMAIN\computercomputer ~]$ sudo mount -t cifs -o sec=krb5 //remotehost/remoteshare /mnt/localmount mount error(126): Required key not available Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) Any ideas on how to debug this further? I th

Re: [Samba] krb ticket for the computer account

2010-11-11 Thread Mustafa Kuscu
> > How can I obtain a krb5 ticket for the computer account? > > > > Hi Mustafa, > > To be able to check out a ticket in that way you need to set > userprincipialname on the computeraccount. I do that when I join with: > > # net ads join createupn="host/hostname.domain@domain.tld" > > I then cr

[Samba] SAMBA accessible with hostname only on local subnet

2010-11-11 Thread *...@ppu
hi all, i have integrated SAMBA with active directory and everthing is working . however SAMBA server is accessible with hostname only on local subnet. it is not opening in other subnets and opening with ipaddress. it keeps on asking for password and saying access denied while using net view \\te

[Samba] Samba on domain member refuses to work after certain time has passed

2010-11-11 Thread Konstantin Boyandin
Hello, The configuration files for PDC and the server in question are below. Both have Samba 3.5.6 installed, firewalls pass all smb/nmb traffic, CentOS 5.5.x86_64 runs on both. The situation: after the server (DEVSERV in the example below) starts its Samba, it works fine for approx 1-1.5 da

Re: [Samba] krb ticket for the computer account

2010-11-11 Thread Andreas Dan Larsson
> > [DOMAIN\computercomputer ~]$ klist -5 > klist: No credentials cache found (ticket cache > FILE:/tmp/krb5cc_16777222) > > [DOMAIN\computercomputer ~]$ kinit -5 compute...@domain.com > Password for comput...@domain.com: > > As you know, computer account passwords are not supposed to be entered

[Samba] Trying to establish a unidirectional Trust between windows 2003 and samba 3

2010-11-11 Thread Administrator
Hi i am trying to establish a unidirection trust between win2k3 and samba3. I followed http://msadfaq.de/wiki/ActiveDirectory/trust_relationship_samba_ad. I want windows to trust samba so that i can access the windows shares with my samba-users. The Linux system is CentOS 5.5 with samba3.x86_64

[Samba] 100% CPU using OSX client

2010-11-11 Thread Ben XO
Hi there, Normally happy OSX (10.6.4) user here. I am accessing a samba share on my Gentoo linux machine (i know, i know...) which is running samba-3.4.9 at the moment. When I try to copy files from a CD on my mac to the smb:// share, after every few files the transfer will pause for a few second

[Samba] krb ticket for the computer account

2010-11-11 Thread Mustafa Kuscu
Hi Samba community, Here is a problem I could not solve. I would like to mount a cifs share to my local Linux machine, which is bound to a windows domain using winbind. The share needs to be mounted by the linux machine's computer account. Here is what I do: # su - DOMAIN\\computer$ [DOMAIN\comp