Re: [Samba] MS AD Tools

2013-01-24 Thread Daniel Müller
Hello, what kind of web services do you need? For Exchange there should be a solution with SOGo/Openchange. You need Virtual Desktop you can look at Ulteo Open Virtual Desktop v3. Greetings Daniel --- EDV Daniel Müller Leitung EDV Tropenklinik

[Samba] samba4 master build fail undefined reference to `tevent_set_trace_callback'

2013-01-24 Thread Nigel Vickers
Good Morning, Environment :openchange / samba4 ,ubuntu 12.04, 32bit CLI: make samba-git-update fails with:- [3509/3720] Linking default/source4/heimdal_build/samba4kpasswd [3510/3720] Linking default/source3/smbd/smbd default/lib/tevent/testsuite_1.o: In function `test_event_context_threaded':

Re: [Samba] Ubuntu compile/install location

2013-01-24 Thread Nico Kadel-Garcia
On Wed, Jan 23, 2013 at 10:50 PM, Gregory Sloop gr...@sloop.net wrote: Ok, while I'm usually more comfortable installing an RPM or DEB package and having the package maintainer handle all the details for me - I don't get a choice here. The latest Ubuntu 12.04 package is the Alpha18 release.

[Samba] 64 Bit Build 3.6.11 on AIX 6 with acls enabled dumps core

2013-01-24 Thread Howard Allison
Hi, this is the first time I've tryed to build a 64 Bit Version with acl's enabled - so I expect I could duplicate this with older versions too... Here's the build info: System: AIX 6100-07-01-1141 Compiler: IBM xlc CC=xlc_r -g CXX=xlC_r CFLAGS=-qmaxmem=-1 -DSYSV -D_AIX -D_AIX32 -D_AIX41

[Samba] 64 Bit Build 3.6.11 on AIX 6 with acls enabled dumps core,

2013-01-24 Thread Howard Allison
Hi, this is the first time I've tryed to build a 64 Bit Version with acl's enabled - so I expect I could duplicate this with older versions too... Here's the build info: System: AIX 6100-07-01-1141 Compiler: IBM xlc CC=xlc_r -g CXX=xlC_r CFLAGS=-qmaxmem=-1 -DSYSV -D_AIX -D_AIX32

Re: [Samba] [Samba 4] Issues with uidNumber and gidNumber in AD for Linux clients

2013-01-24 Thread Fred F
Thanks for your statement, Andrew. I know about winbind and we've used it in the past, but I remember there were some issues when dealing with POSIX ACLs and windbind. Now while winbind might work in some environments, I think it would be much nicer and cleaner to integrate Linux clients into a

Re: [Samba] generate keytab

2013-01-24 Thread Clodonil Trigo
Hello Friends, keep trying to generate the keytab. Run these commands, most believe that the problem is the encryption methods. $ Samba-tool user create http-user --random-password $ Samba-tool spn add HTTP/www.nisled.org http-user $ Samba-tool domain exportkeytab

Re: [Samba] Mapping SIDUID (and reverse)

2013-01-24 Thread jrmailgate-sa...@yahoo.co.uk
I have a solution! The problem (where files created in Unix were not being mapped to the domain username) was due to a problem in the smb.conf. I had:     idmap config * : range = 500-99     idmap config * : backend = nss But I needed to _also_ have a section for the current domain

[Samba] security = ads, username map and valid users

2013-01-24 Thread Rainer Canavan
I would like to use Samba (3.5.10 as supplied with RHEL6 if possible) to make some directories accessible as a filesystem to (some of) our developers. However, those directories are read and written by a web server, and all files and directories in there should belong to www-data:www-data.

Re: [Samba] Basic questions regarding Samba capabilities

2013-01-24 Thread Adam Tauno Williams
On Fri, 2012-05-25 at 09:49 -0500, Jason Voorhees wrote: On Mon, May 21, 2012 at 8:01 AM, Daniel Müller muel...@tropenklinik.de wrote: IN a such great environment like yours I would suggest having several PDCs in replication mode. Is this possible to implement with Samba 3.x? Yes,

Re: [Samba] generate keytab

2013-01-24 Thread Hleb Valoshka
Please! Don't write into private mail. Thanks. $ Samba-tool user create http-user --random-password $ Samba-tool spn add HTTP/www.nisled.org http-user Okay, you've got user http-user with principals http-u...@nisled.org and HTTP/www.nisled@nisled.org. $ Samba-tool domain exportkeytab

Re: [Samba] generate keytab

2013-01-24 Thread Clodonil Trigo
Hi, Looking dns.key he has more encryption options: $ klist -ke dns.keytab Keytab name: WRFILE:dns.keytab KVNO Principal -- 1 DNS/smb4.nisled@nisled.org (des-cbc-crc) 1 dns-s...@nisled.org (des-cbc-crc) 1

[Samba] PDC: The trust relationship ... failed from the beginning

2013-01-24 Thread Eimac Dude
Hi, When I try a net logon from Windows 7 64-bit Business (don't have any other Windows machines), I get The trust relationship between this workstation and the primary domain failed. The discussion I've found around the Web regarding this error message seems to be only in the context of the

Re: [Samba] security = ads, username map and valid users

2013-01-24 Thread G.W. Haywood
Hi there, On Thu, 24 Jan 2013, Rainer Canavan wrote: I would like to use Samba (3.5.10 as supplied with RHEL6 if possible) to make some directories accessible as a filesystem to (some of) our developers. However, those directories are read and written by a web server, and all files and

[Samba] require_membership_of is ignored

2013-01-24 Thread John P Arends
I have a RHEL 6.3 machine successfully bound to AD using winbind, and commands like wbinfo -u and wbinfo -g output the users and groups. I can also log in as any AD user. The problem is, I can log on as any AD user. require_membership_of is being ignored. I can put in a valid group with no

Re: [Samba] require_membership_of is ignored

2013-01-24 Thread John P Arends
I want to make sure if someone also gets local console access somehow they still can't get in. That's my concern with just making changes to how sshd authenticates. (I know nearly nothing about PAM.) On Jan 24, 2013, at 4:21 PM, Philipoff, Andrew aphilip...@medicine.ucsf.edu wrote: John,

Re: [Samba] require_membership_of is ignored

2013-01-24 Thread Philipoff, Andrew
John, When you say that you can log on as any AD user, do you mean using SSH? On our systems I use pam_succeed_if.so user ingroup in our /etc/pam.d/sshd files, see below: auth include system-auth accountrequired pam_nologin.so #accountinclude system-auth account

Re: [Samba] Organization of Users in Samba4

2013-01-24 Thread Andrew Martin
Thanks for the clarification. Andrew - Original Message - From: Matthieu Patou m...@samba.org To: samba@lists.samba.org Sent: Thursday, January 24, 2013 1:22:53 AM Subject: Re: [Samba] Organization of Users in Samba4 On 01/23/2013 03:20 PM, Andrew Martin wrote: Hello, I am

[Samba] domain provision error

2013-01-24 Thread Gregory Sloop
Ubuntu 12.04 Following the Samba4 AD Wiki Howto. --- When doing the domain provisioning I get these errors. --- Asks for Relm/Domain/DNS/Samba type [ad] etc... Then... ... ldb: module schema_load initialization failed : No such object ldb: module rootdse initialization failed : No such object

Re: [Samba] domain provision error

2013-01-24 Thread Günter Kukkukk
Am Freitag, 25. Januar 2013, 01:30:21 schrieb Gregory Sloop: Ubuntu 12.04 Following the Samba4 AD Wiki Howto. --- When doing the domain provisioning I get these errors. --- Asks for Relm/Domain/DNS/Samba type [ad] etc... Then... ... ldb: module schema_load initialization failed : No

Re: [Samba] domain provision error

2013-01-24 Thread Gregory Sloop
GK it's not only your file system supporting ACL's - also some GK devel packages must be around during the build. GK See https://wiki.samba.org/index.php/Samba_4/OS_Requirements Thanks, but I do have all the ACL packages etc, described in the reqs. [I followed, exactly, the Deb/Ubuntu

Re: [Samba] domain provision error

2013-01-24 Thread Gregory Sloop
GK it's not only your file system supporting ACL's - also some GK devel packages must be around during the build. GK See https://wiki.samba.org/index.php/Samba_4/OS_Requirements GS Thanks, but I do have all the ACL packages etc, described in the reqs. GS [I followed, exactly, the Deb/Ubuntu

Re: [Samba] PDC: The trust relationship ... failed from the beginning

2013-01-24 Thread Eimac Dude
Brought in a new Windows 7 64-bit machine and that one works... So it seems to be a Windows configuration issue, but what other settings could possibly cause this authentication failure? The new machine is a recent clean install and uses MSE as antivirus, whereas the older workstations use AVG

Re: [Samba] PDC: The trust relationship ... failed from the beginning

2013-01-24 Thread Nico Kadel-Garcia
On Thu, Jan 24, 2013 at 8:57 PM, Eimac Dude eimacd...@aol.com wrote: Brought in a new Windows 7 64-bit machine and that one works... So it seems to be a Windows configuration issue, but what other settings could possibly cause this authentication failure? The new machine is a recent clean

Re: [Samba] require_membership_of is ignored

2013-01-24 Thread Nico Kadel-Garcia
On Thu, Jan 24, 2013 at 5:24 PM, John P Arends jare...@northwestern.edu wrote: I want to make sure if someone also gets local console access somehow they still can't get in. That's my concern with just making changes to how sshd authenticates. One way I've dealt with this, and a pretty

Re: [Samba] generate keytab

2013-01-24 Thread Andrew Bartlett
On Thu, 2013-01-24 at 18:33 +0200, Hleb Valoshka wrote: Please! Don't write into private mail. Thanks. $ Samba-tool user create http-user --random-password $ Samba-tool spn add HTTP/www.nisled.org http-user Okay, you've got user http-user with principals http-u...@nisled.org and

[Samba] migrating from Samba3 with tdbsam to samba4 AD server?

2013-01-24 Thread Simon Matthews
What's the best path to do this? I currently have a SAMBA3 domain controller using tdbsam and would like to migrate to Samba4 as an AD controller. I assume that this will require loading my existing user database into ldap. What's the best path for this? Should I look for a samba3 to samba4

[SCM] Samba Shared Repository - branch master updated

2013-01-24 Thread Volker Lendecke
The branch, master has been updated via 497febf Fix bug #9586 - smbd[29175]: disk_free: sys_popen() failed message logged in /var/log/message many times. from 1915b17 dsdb-acl: remove unused variable http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2013-01-24 Thread Stefan Metzmacher
The branch, master has been updated via 875a172 docs: ldbsearch.1.xml: Correct meta data. via 99e2a63 docs: ldbrename.1.xml: Correct meta data. via 25cc400 docs: ldbmodify.1.xml: Correct meta data. via f585052 docs: ldbedit.1.xml: Correct meta data. via

[SCM] Samba Shared Repository - branch master updated

2013-01-24 Thread Andreas Schneider
The branch, master has been updated via 000e6ba s4-torture: add some basic tests for PlayGDIScriptOnPrinterIC. via 21aa7fe s3-rpcclient: add cmd_spoolss_play_gdi_script_on_printer_ic. via 0364658 spoolss: add UNIVERSAL_FONT_ID_ctr for debugging. via d99b1ee

[SCM] Samba Shared Repository - branch master updated

2013-01-24 Thread Jeremy Allison
The branch, master has been updated via 996a10c Fix bug #9572 - File corruption during SMB1 read by Mac OSX 10.8.2 clients. via 0331979 Revert s3:smbd: SMB ReadX with size 0x should only possible for samba clients. from 000e6ba s4-torture: add some basic tests for

[SCM] Samba Shared Repository - branch master updated

2013-01-24 Thread Jeremy Allison
The branch, master has been updated via da35cd7 Avoid a very small memleak on talloc_tos() from 996a10c Fix bug #9572 - File corruption during SMB1 read by Mac OSX 10.8.2 clients. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log