Re: [Samba] Cisco ISE unable to retrieve AD group list from samba 4 server

2013-10-03 Thread Andreas Oster
Am 02.10.2013 21:53, schrieb Jeremy Allison: On Wed, Oct 02, 2013 at 11:38:21AM +0200, Andreas Oster wrote: Hi all, I have run into a problem with our samba4 setup. I have successfully joined a Cisco ISE v1.1.4 (Identity Service Engine) test machine to the samba4 AD. User authentication does

Re: [Samba] SAMBA + open LDAP + password hashing

2013-10-03 Thread Alberto Aldrigo | Ca' Tron RE
Many thanks for the answer, you solved a doubt I had for a long time. What do you mean when you say other than kerberos ? Can you point me to some documentation or how to for setting up samba + kerberos + ldap? Thanks *Alberto Aldrigo* Il 02/10/13 20:57, Andrew Bartlett ha scritto: On

[Samba] write problem from mac osx 10.8.5 clients to samba 4

2013-10-03 Thread Athan DE JONG
Hi  I have setup a samba 4 DC with mixed client environment. My problem is that the mac osx client are unable to write to a samba 4 share. I tested mac osx clients on a normal windows 7 share and it works fine I tested mac osx clients on a samba 3.5 .. share and everything works fine. As i am

Re: [Samba] Should I forget sssd ?

2013-10-03 Thread steve
On Tue, 2013-10-01 at 17:06 +1100, m...@electronico.nc wrote: Le 01/10/2013 16:44, steve a écrit : Hi It looks as though the ad backend is broken in 1.11.1. At least I can't get it going with a similar sssd.conf:

Re: [Samba] write problem from mac osx 10.8.5 clients to samba 4

2013-10-03 Thread Ryan Bair
I'm not sure if this is still an issue in modern versions of OS X, but in past you have had to disable unix extensions on the server if UID/GIDs didn't match up with what the client had. It really sucks that there's not another workaround, especially for off-domain Macs. Personally, I've been

[Samba] name mangling makes 8.3 unreadable unlike Windows fileserver

2013-10-03 Thread Kevin Field
Hi, I'm cross-posting here from serverfault.com in case anyone can help. I just found a similar question on askubuntu.com also without an answer. Switched recently from W2K3 to Samba4.0.9/CentOS6.4 for our fileshare for WinXP clients. Have an ancient (1995!) piece of software that uses

Re: [Samba] create_local_nt_token_from_info3 not pulling supplementary UNIX groups

2013-10-03 Thread Brian H. Nelson
Can anyone with knowledge about this issue offer any comment? Somebody has to have an idea about it, good or bad. Thanks, Brian On 9/11/2013 2:20 PM, Brian H. Nelson wrote: I'm trying to solve this issue I'm having where using 'valid users = +unixgroup' just plain doesn't work. I can't find

Re: [Samba] write problem from mac osx 10.8.5 clients to samba 4

2013-10-03 Thread Jason MacChesney
Hey Athan, I was able to deploy OSX in a samba4 environment. Here is my procedure: go to System Preferences User and Groups and create a new account with admin privileges. This will be developed into a default profile for domain users. Log out and in with the user. Open Keychain Access and

Re: [Samba] name mangling makes 8.3 unreadable unlike Windows fileserver

2013-10-03 Thread Klaus Hartnegg
On 03.10.2013 16:17, Kevin Field wrote: Have an ancient (1995!) piece of software that uses 8.3 filename format. After the switch, long filenames became useless in the context of the File-Open dialog box. Instead of the first few characters, we get maybe 1 character the same if we're lucky,

[Samba] Experience getting winbind Active Directory login on a Samba 4 domain controller

2013-10-03 Thread Jacobson, Jared M @ CSG - CSW
Hey, all, I had a lot of trouble getting login working for Active Directory users on a Red Hat Enterprise Linux Samba 4 Active Directory domain controller. Here are some things I learned that I hope will be useful to someone: 1. The official build and deployment guidance

[Samba] client hangs

2013-10-03 Thread Doug Tucker
All, I've exhausted myself on this issue. Our samba server has been up and running for ages without any issues. About 6 weeks ago quite suddenly we began having intermittent clients hangs network wide and I'm at a loss to find the issue. The users have so named them the windows explorer

Re: [Samba] client hangs

2013-10-03 Thread Klaus Hartnegg
On 03.10.2013 17:20, Doug Tucker wrote: client attempts to access a resource on a shared drive either by saving, or just simply clicking on a folder on the shared drive can takes minutes to complete. Is it reproducable by clicking the same folder again after rebooting the client? Do you

Re: [Samba] client hangs

2013-10-03 Thread Doug Tucker
Virus scanning was one of the early suspects. For no real reason though as nothing had changed. The macs and linux clients though are affected and neither have virus software installed. That's a huge frustrating point about it. It's is completely and wildly random. I can't reproduce it at

[Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Garey
I am trying to figure out if I can setup samba to verify only passwords against LDAP and keep everything else local. Anyone know how to set this up? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Hoover, Tony
We are using pGina (pgina.org) for lab logins. pGina is a pluggable authentication system, similar to PAM except for Windows. pGina allows us to separate the user authentication from the account information. User credentials are checked against LDAP, MySQL, or other authentication source. If

Re: [Samba] client hangs

2013-10-03 Thread Doug Tucker
I see a lot of this in the logs, but can't determine if it really means anything: Oct 2 09:45:28 agentsmith2 smbd[21954]: getpeername failed. Error was Transport endpoint is not connected Oct 2 09:45:28 agentsmith2 smbd[25948]: write_data: write failure in writing to client

Re: [Samba] client hangs

2013-10-03 Thread Jeremy Allison
On Thu, Oct 03, 2013 at 12:03:39PM -0500, Doug Tucker wrote: I see a lot of this in the logs, but can't determine if it really means anything: Oct 2 09:45:28 agentsmith2 smbd[21954]: getpeername failed. Error was Transport endpoint is not connected Oct 2 09:45:28 agentsmith2

Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Garey
Hoover, Tony hoover at sal.ksu.edu writes: We are using pGina (pgina.org) for lab logins. pGina is a pluggable authentication system, similar to PAM except for Windows. pGina allows us to separate the user authentication from the account information. User credentials are checked against

Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Marc Muehlfeld
Hello, Am 03.10.2013 18:17, schrieb Garey: I am trying to figure out if I can setup samba to verify only passwords against LDAP and keep everything else local. Can you be a bit more specific what you intend to do? Regards, Marc -- To unsubscribe from this list go to the following URL and

Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Garey
Marc Muehlfeld samba at marc-muehlfeld.de writes: Hello, Am 03.10.2013 18:17, schrieb Garey: I am trying to figure out if I can setup samba to verify only passwords against LDAP and keep everything else local. Can you be a bit more specific what you intend to do? Regards, Marc I

Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Donny Brooks
On Thursday, October 3, 2013 12:56 PM CDT, Garey gareysmi...@sbcglobal.net wrote: Marc Muehlfeld samba at marc-muehlfeld.de writes: Hello, Am 03.10.2013 18:17, schrieb Garey: I am trying to figure out if I can setup samba to verify only passwords against LDAP and keep

Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Garey
Donny Brooks dbrooks at mdah.state.ms.us writes: Hello, Am 03.10.2013 18:17, schrieb Garey: I am trying to figure out if I can setup samba to verify only passwords against LDAP and keep everything else local. Can you be a bit more specific what you intend to do?

Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Gaiseric Vandal
If you have an existing LDAP structure, there will still be a separate field for the Windows password. For samba 3.x, you can specify either an local backend or an ldap backend. You can not specify some attributes in ldap but not others. If you want to set up Samba to use LDAP backend

Re: [Samba] name mangling makes 8.3 unreadable unlike Windows fileserver

2013-10-03 Thread Jeremy Allison
On Thu, Oct 03, 2013 at 10:17:18AM -0400, Kevin Field wrote: Hi, I'm cross-posting here from serverfault.com in case anyone can help. I just found a similar question on askubuntu.com also without an answer. Switched recently from W2K3 to Samba4.0.9/CentOS6.4 for our fileshare for WinXP

Re: [Samba] Cisco ISE unable to retrieve AD group list from samba 4 server

2013-10-03 Thread Jeremy Allison
On Thu, Oct 03, 2013 at 08:53:19AM +0200, Andreas Oster wrote: Am 02.10.2013 21:53, schrieb Jeremy Allison: On Wed, Oct 02, 2013 at 11:38:21AM +0200, Andreas Oster wrote: Hi all, I have run into a problem with our samba4 setup. I have successfully joined a Cisco ISE v1.1.4 (Identity

[Samba] Folder disappears on rename

2013-10-03 Thread Brian Martin
I have Samba 4.0.9 installed under Ubuntu 12.04. It's configured as a domain member, with a Windows 2008R2 server being the DC. All workstations are running Windows 7. One of my users is reporting problems in the following scenario: 1) She creates a folder in one of the Samba shares, and

Re: [Samba] client hangs

2013-10-03 Thread Doug Tucker
Already been down that path. I can't find a network issue anywhere. Our samba server itself is set up with a bonded interface which attaches to 2 different cards in the switch. I've pulled each ethernet cable to see the results and there is no ping loss or interruption of any sort and

Re: [Samba] client hangs

2013-10-03 Thread Doug Tucker
Additionally, this has happened from time to time (again, no idea what it means exactly), but it doesn't necessarily correllate with when users are seeing the hang. Any idea if this is fatal? Oct 3 08:31:57 agentsmith2 kernel: INFO: task smbd:26597 blocked for more than 120 seconds. Oct 3

Re: [Samba] client hangs

2013-10-03 Thread Jeremy Allison
On Thu, Oct 03, 2013 at 02:07:05PM -0500, Doug Tucker wrote: Already been down that path. I can't find a network issue anywhere. Our samba server itself is set up with a bonded interface which attaches to 2 different cards in the switch. I've pulled each ethernet cable to see the results and

Re: [Samba] client hangs

2013-10-03 Thread Doug Tucker
I wasn't suggesting that those were issues, I was asking if it was. It sounds like that probably has nothing to do with the issue going on and is just normal disconnects. I thought a windows update may have gone in as this literally just started occurring suddenly about 6 weeks ago. But

Re: [Samba] Folder disappears on rename

2013-10-03 Thread Jeremy Allison
On Thu, Oct 03, 2013 at 11:57:21AM -0700, Brian Martin wrote: I have Samba 4.0.9 installed under Ubuntu 12.04. It's configured as a domain member, with a Windows 2008R2 server being the DC. All workstations are running Windows 7. One of my users is reporting problems in the following

Re: [Samba] Experience getting winbind Active Directory login on a Samba 4 domain controller

2013-10-03 Thread Jeremy Allison
On Thu, Oct 03, 2013 at 09:25:30AM -0600, Jacobson, Jared M @ CSG - CSW wrote: Hey, all, I had a lot of trouble getting login working for Active Directory users on a Red Hat Enterprise Linux Samba 4 Active Directory domain controller. Here are some things I learned that I hope will be

Re: [Samba] name mangling makes 8.3 unreadable unlike Windows fileserver

2013-10-03 Thread Kevin Field
On 2013-10-03 2:38 PM, Jeremy Allison wrote: On Thu, Oct 03, 2013 at 10:17:18AM -0400, Kevin Field wrote: Hi, I'm cross-posting here from serverfault.com in case anyone can help. I just found a similar question on askubuntu.com also without an answer. Switched recently from W2K3 to

Re: [Samba] name mangling makes 8.3 unreadable unlike Windows fileserver

2013-10-03 Thread Jeremy Allison
On Thu, Oct 03, 2013 at 07:14:35PM -0400, Kevin Field wrote: Thanks Jeremy! I'm not sure how I missed that in the docs. Anyway, it is much, much better than before, but still not exactly like Windows. For example, we have two folders beginning with C-FZP. We're never going to give the

Re: [Samba] SAMBA + open LDAP + password hashing

2013-10-03 Thread Andrew Bartlett
On Thu, 2013-10-03 at 09:41 +0200, Alberto Aldrigo | Ca' Tron RE wrote: Many thanks for the answer, you solved a doubt I had for a long time. What do you mean when you say other than kerberos ? Can you point me to some documentation or how to for setting up samba + kerberos + ldap? Thanks

[Samba] Samba 4 install packages for Ubuntu 10

2013-10-03 Thread Derek Lewis
Hello, I want to upgrade my current samba 3.7 that I compiled, to samba 4, and wondered if I can get binaries compatible with Ubuntu 10? Sent from my iPhone -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[SCM] Samba Shared Repository - branch master updated

2013-10-03 Thread Stefan Metzmacher
The branch, master has been updated via 8b51eab Revert Support UPN_DNS_INFO in the PAC from 8f201fe Remove dead code. Now we have no SWAT we don't use the invalid_services array or associated counter. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] CTDB repository - branch master updated - ctdb-2.4-65-g6182bd0

2013-10-03 Thread Amitay Isaacs
The branch, master has been updated via 6182bd0c19f215a997efe5272e633b1b1bd0c882 (commit) via 10aac42f30cc0d56dca42ece17d04ccbc321056d (commit) via 59bd4ede15a5958b87e0d253461eb9111885bd2f (commit) via 3296559c43e70f755fcf2c06677891e0319c8142 (commit) via