[Samba] Re: Samba prints to wrong CUPS queue

2007-05-29 Thread Adam Tauno Williams
On Tue, 2007-05-29 at 11:20 -0400, Adam Tauno Williams wrote: Ok, here is an interesting one... I have a server (CentOS5) with 67 print queues in CUPS. The server also runs Samba (samba-3.0.23c-2.el5.2.0.2) to supporting printing from Win32. Printing to the server via IPP works perfectly

Re: [Samba] slightly OT: LDAP Server

2007-05-07 Thread Adam Tauno Williams
encounter from lazy shlubs you don't read documentation, very well documented. http://www.whitemiceconsulting.com/node/30 And ditch NIS. -- Adam Tauno Williams, Network Systems Administrator Consultant - http://www.whitemiceconsulting.com Developer - http://www.opengroupware.org

Re: [Samba] Concerns about Samba4

2007-03-13 Thread Adam Tauno Williams
I attended the Samba conference at the FOSDEM yesterday. Jeremy Allison was great, and explained very clearly the problems faced by implementing an Active Directory controller. The CIFS protocol is required in heterogenous environments. Jeremy made it pretty clear that even in pure Unix

Re: [Samba] Problem with Samba Authentication

2007-02-22 Thread Adam Tauno Williams
Hi, i have installed a PDC authenticated with LDAP in a network with Linux and Win XP hosts. My intention is to authenticate (throught TLS) every user or at least the machines wich are trying to get access to the resources. LDAP and Samba are in the same machine so the communication is by

Re: [Samba] Access Denied using Server Netbios Name

2007-02-18 Thread Adam Tauno Williams
Using Ubuntu 6.06.1, Samba 3.0.22, VMWare on Win2003 server. I can connect using with admin user and ip address, but using admin and netbios name prompts for password and results in access denied. WINS is enabled in Samba config. Does Vmware or Ubuntu introduce weird problems or is

Re: [Samba] Profile problems

2007-01-21 Thread Adam Tauno Williams
On Sat, 2007-01-20 at 12:22 -0600, Keith Lynn wrote: I have a very perplexing issue with a client machine running XP Pro connecting to a Samba PDC running Samba 3.0.23d. When the user logins, and clicks on the Start Button, none of the icons that normally show up on the left side are there.

Re: [Samba] Multi share point to the same drive letter

2007-01-21 Thread Adam Tauno Williams
what I want to accomplish is when the user double click MY Computer 2 network drive exist H for user home P for Company shares which should show the 3 above shares DFS -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] Accessing Samba Shares from Windows

2006-12-18 Thread Adam Tauno Williams
We are using machines with Solaris and Windows XP. The XP machines are joined in a domain(windows 2003) and the Solaris machines are not joined to any domain. With Samba 2.2.8a running on Solaris 9 there are no problems to access them form Windows XP. We are authenticated by DC. On other

Re: [Samba] Trouble doing a remote shutdown of a linux machine through samba

2006-11-08 Thread Adam Tauno Williams
On Tue, 2006-11-07 at 22:30 -0500, Tom wrote: Is it possible to shutdown a Linux computer through Samba using the shutdown command in Windows XP and 2003? I've tried: shutdown /r /m hostname This doesn't work and results in Windows reporting The remote procedure call failed.' in the command

Re: [Samba] Suse Linux Enterprise 10 and Samba PDC

2006-10-28 Thread Adam Tauno Williams
I have SLES 10 running (after much searching, reloading, and trial and error) a Samba PDC with LDAP. I have tried to use the many Samba as PDC documents out there, but none seemed to work. I even tried one from the Suse Site geared for SLES 10, no luck. There is nothing specific about Samba

Re: [Samba] Samba backup and restore with LDAP

2006-07-11 Thread Adam Tauno Williams
i use slapcat to backup my Ldap - Database and slapadd to restore it. Beware: stop LDAP before Backup!!! There is no reason to stop LDAP if you are using back-bdb or back-hdb (and if you are using back-ldbm you are also crazy). But you might want to do a: su ldap -c /usr/bin/db_checkpoint -1

Re: [Samba] samba does not lock files

2006-03-26 Thread Adam Tauno Williams
The problem: Two users can have the same OOo file open at the same time, and both edit it. The last one to save the file wins! The system: 3 Ubuntu 5.10 client boxes and one WinXPPro client box, all running OOo 2.0; one server with RedHat 9.0 running samba version

Re: [Samba] Problem with NTConfig.POL+SAMBA+LDAP

2006-02-24 Thread Adam Tauno Williams
I installed two debian sarge servers with the following services: OPENLDAP, SAMBA 3.0, HEARTBEAT and DRBD. I used debian packages. The RAID over IP is used for the /data and /home partitions. I created a NTConfig.POL for my domain workstations and put it in /home/samba/netlogon. But when

[Samba] Winbind trouble when on the DC

2005-09-15 Thread Adam Tauno Williams
= crew cups options = raw enable privileges = yes load printers = no -- Adam Tauno Williams - http://www.whitemice.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba + LDAP over the WAN

2005-09-06 Thread Adam Tauno Williams
that can be called disasterous? No, we've had sites drop off the WAN for days with no significant issues. What would those be? 4). Any recommendations to minimize No. 3 above? Start your own phone company? :) One that doesn't suck. -- Adam Tauno Williams - http://www.whitemice.org

Re: [Samba] Samba3, ldap and password expiry

2005-07-12 Thread Adam Tauno Williams
New users setup ok and first logon password change works. Because of HIPAA we need the passwords to change every 30 days however this isn't happening. I thought that I had this working once upon a time while I was testing and getting ready for production but somewhere along the line I

Re: [Samba] Using OID as Samba3 backend

2005-07-06 Thread Adam Tauno Williams
I'm running samba3 Using OID (Oracle Internet Directory) as backend, almost works ok, but the final trick that doesn't work is the change of the passwords from windows dialog box, this change the samba passwords but don't change the userpassword, i have found this line on samba logs

Re: [Samba] Samba LDAP timeout

2005-07-06 Thread Adam Tauno Williams
[2005/07/06 09:26:35, 0] lib/smbldap.c:smbldap_connect_system(812) ldap_connect_system: Failed to retrieve password from secrets.tdb - Did you set the LDAP bind password? -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] Samba LDAP timeout

2005-07-06 Thread Adam Tauno Williams
It now works without SSL. With SSL is a different issue. [2005/07/06 10:48:24, 1] lib/smbldap.c:another_ldap_try(990) Connection to LDAP server failed for the 10 try! [2005/07/06 10:48:25, 1] lib/smbldap.c:another_ldap_try(990) Connection to LDAP server failed for the 11 try!

Re: [SAMBA] How to stop winbindd from granitng UID=0? Security hole?

2005-07-06 Thread Adam Tauno Williams
But now there is a real problem. There is a domain user root. If the domain is present, we can login to the client with putting simple root as a username, and using domain password. And we are actually getting uid 0, so we are real root, not just dorm user with funny-looking username. Of

Re: [Samba] Db4 ldap smldap-tools samba

2005-07-05 Thread Adam Tauno Williams
I use the samba widh ldap and smbldap-tools to update the ldap db. If I execute from the terminal a non huge number of operation using the smbldap-usermode for change the mail, sometimes the operation still not respond and lock. After I find the db corrupted and I must do a db_recover.

Re: [Samba] Several PDCs with one LDAP

2005-07-05 Thread Adam Tauno Williams
Here is my potential problem: my company (HQ) has 3 branches in three different cities. Each branch have its own domain (PDC), each domain have different SID value but users are authorized in one LDAP directory. Nowadays we have four trees in our LDAP. It's really hard to maintain about 600

Re: [Samba] Using OID as Samba3 backend

2005-07-02 Thread Adam Tauno Williams
I'm running samba3 Using OID (Oracle Internet Directory) as backend, almost works ok, but the final trick that doesn't work is the change of the passwords from windows dialog box, this change the samba passwords but don't change the userpassword, i have found this line on samba logs

Re: [Samba] Samba PDC w/ LDAP Mass Adding Users

2005-06-29 Thread Adam Tauno Williams
Now, I start the custom Perl script to mass-add users, and it adds 120 users, and then users stop being added. smbldap-useradd returns no kind of error, it almost seems like it thinks it is adding the users, but they really aren't getting added after 120 users. The first 120 users seem fine.

Re: [Samba] Possible new addition to Samba, looking for advice / help.

2005-06-15 Thread Adam Tauno Williams
Create a modified version of top (smbtop?) to use the output from smbstatus -b instead of ps -A. This would be interesting; and may be possible, since there are supposedly language binding (python at least) to the Samba API. But I've never been able to find any documentation. -- To

Re: [Samba] Samba w/o local users on Samba server?

2005-06-06 Thread Adam Tauno Williams
The documentation says something about Domain and ADS level security being basically just forms of user level security, so - for the moment- it looks to me as if there's no way around creating those local users. Is that correct? nss_ldap or nss_winbind signature.asc Description: This

Re: [Samba] One User, One Ldap, Multiple Domains

2005-06-04 Thread Adam Tauno Williams
b) We are going to be missing out on fun things like ldapsam:trusted=yes by staying with ldapsam_compat I believe so. I would suggest looking into speed improvements (such as the continuing work on this) before breaking your ldap into tiny pieces. One domain really should be the way to do

Re: [Samba] nscd, ldap and the root/Administrator account

2005-05-03 Thread Adam Tauno Williams
I'm using Samba 3 as a PDC with an Openldap backend and also have a number of Samba domain member servers that lookup the ldap directory for their account information. I use ssh to perform various administration tasks. There is an account called Administrator in the LDAP directory that

Re: [Samba] BDC, documentation, Machine Accounts Keep Expiring

2005-05-03 Thread Adam Tauno Williams
You could always use gpedit.msc and set the machine password change to NO On 500 computers ? :-) Anyway, I'd like to know will samba BDC allow machines to change passwords or not... I believe what you are trying to do will only work with an LDAP SAM. signature.asc Description: This is

Re: [Samba] AD Rules in Samba

2005-04-26 Thread Adam Tauno Williams
How can I create group policies in Active Directory using Samba 3? (Such as only allow three time incorrect login and ect.) You can use pdbedit to establish password policies; lock out counts, expiration, minimum time to change, length, etc... Are you saying that you are running an samba

Re: [Samba] NIS schema clash

2005-04-25 Thread Adam Tauno Williams
There seems to be a conflict between schemas. I get the following message when starting the ldap server: Starting ldap-server /etc/openldap/schema/nis.schema: line 40: Dubplicate attributeType: 1.3.6.1.1.1.1.0 What attribute is this? Have you looked at just commenting out the offending

Re: [Samba] upgrading 3.0.4 to 3.0.13

2005-03-24 Thread Adam Tauno Williams
I've searched using google and also look at samba.org and cannot seem to find any instructions on how to upgrade from a 3.x version to current. Everything out there is how to upgrade from a 2.x version. Do I just have to recompile and nothing else? Do I have to stop smbd and nmdb first or

RE: [Samba] Hula-project and Samba

2005-03-20 Thread Adam Tauno Williams
Has anyone run Hula Server (http://www.hula-project.org) and Samba on the same server and got the user authentication to sync? I imagine this would involve configuring Samba to use eDirectory (Novell) which Hula is using for store. If Samba is using an LDAP SAM, then any of the various

Re: [Samba] Do I need two instances of Samba on the same machine (3rd request) ?

2005-03-10 Thread Adam Tauno Williams
Since I only have one machine connected to both subnets running samba, I think I need to run two instances of samba (smbd and nmbd) in that machine each one binded to one interface and using different smb.conf files. Is that the only solution ? Why? You said these will all be in the same

Re: [Samba] Do I need two instances of Samba on the same machine (3rd request) ?

2005-03-10 Thread Adam Tauno Williams
Run one Samba instance as the WINS server and disable browsing on the clients (easy if the Samba server is also the DHCP server). The machine that is in the two subnets is a Samba server (one instance) a WINS server and a DHCP server, but is not working actually only the clients in one

Re: [Samba] Re: ldap / username issue

2005-02-21 Thread Adam Tauno Williams
with some more tinkering I was able to recreate the issue -- delete an account out of ldap, readd it and it will not appear via getent passwd any ideas?? Is nscd running? signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the

Re: [Samba] change password on first login

2005-02-21 Thread Adam Tauno Williams
to what value must be sambaPwdMustChange set to force user to change password on first login? Setting it to 1 seems to work for us. You have to have define policies of course. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the

Re: [Samba] Ghost logons / Recycle Bin Options (related)

2005-02-18 Thread Adam Tauno Williams
Currently it copies to .recycle (which by default they cant see) problem is also some students are deleting work and blaming it on the system... And its not in the recycle bin. If the user was changed they couldn't do this :) Have thought about running a script on everyones .recycle bin, but

Re: [Samba] Samba/LDAP documentation

2005-02-13 Thread Adam Tauno Williams
The problem that apparently both Tonni and I had was coming to terms with the net group map command. It mucked with the DSA attributes of 'displayName' 'sambaSID' 'objectclass' - I'm confused by this statement. The attributes displayName and sambaSID are not relevant to a POSIX group, so the

Re: [Samba] Can Samba use NIS to authenticate?

2005-02-10 Thread Adam Tauno Williams
Is there any solution to get samba talk to NIS to authenticate user? Plain text authentication - yes, you'll need to hack your registry; and you won't be able to use domain functionality. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go

Re: [Samba] Can Samba use NIS to authenticate?

2005-02-10 Thread Adam Tauno Williams
That is great. Could you tell me more details when you mention you won't be able to use domain functionality. A plain text server can't join a domain, or be a DC of one; it is pretty much a workgroup mode box. signature.asc Description: This is a digitally signed message part -- To

Re: [Samba] Complete posixGroups

2005-02-08 Thread Adam Tauno Williams
I would like to upgrade my existing posix-groups to be sambaGroupMapping`s. Here is an example posixGroup: dn: cn=mygroup,ou=Group,ou=corp,o=Mundwerk,dc=excelsisnet,dc=com gidNumber: 1001 memberUid: jwitte description: blabla objectClass: posixGroup objectClass: top cn: cvsadmin how do i

Re: [Samba] 'ldap passwd sync' not working

2005-02-07 Thread Adam Tauno Williams
Hope this helps someone, it cost me enough pain before it worked properly for me. Oh yes - regular (existing or new) Posix group users can be anywhere in your DSA, I think you mean anywhere in your Dit; anywhere in your DSA doesn't make much sense, in any group (though it makes sense

Re: [Samba] password ldap clarification requested...

2005-02-06 Thread Adam Tauno Williams
I would like to know if the following statements are true, just to make sure that my understanding of passwords/ldap stuff is correct... Vampireing passwords from an nt4 pdc only populates the ldap server with windows passwords, and not the (linux) userPassword. Yes. Authenticating

Re: [Samba] ldap passwd sync not working

2005-02-05 Thread Adam Tauno Williams
I've samba as PDC with LDAP backend some time ago when user changes password in windows or when password chenged with smbpasswd - LDAP password of this user was changed too. Now LDAP passwords remains the same as it was. I've searched this list a while and found only one mail, said that it

Re: [Samba] ldap passwd sync not working

2005-02-05 Thread Adam Tauno Williams
I've samba as PDC with LDAP backend some time ago when user changes password in windows or when password chenged with smbpasswd - LDAP password of this user was changed too. Now LDAP passwords remains the same as it was. I've searched this list a while and found only one mail, said that it

Re: [Samba] ldap passwd sync not working

2005-02-05 Thread Adam Tauno Williams
samba 3.0.11 [EMAIL PROTECTED] samba]# smbpasswd -D 3 test Searching for:[((objectClass=sambaDomain)(sambaDomainName=DOMAIN))] smbldap_open_connection: connection opened smbldap_check_root_dse: Expected one rootDSE, got 0 ldap_connect_system: succesful connection to the LDAP server

Re: [Samba] ldap passwd sync not working

2005-02-05 Thread Adam Tauno Williams
My guess: the behaviour of 3.0.11 is more correct, and something is clearly wrong with your DSA - the client cannot read the rootDSE. Possibly you've got an ACL doing something you don't intend; it doesn't look like a Samba problem. The rootDSE is used to determine features supported

Re: [Samba] LDAP help!

2005-02-03 Thread Adam Tauno Williams
otherwise you have to keep passwords in clear and somehow emulate (is OpenLDAP capable of this ?) sambaNTPassword via cleartext userPassword Password syncronization is trivial. See ldap password sync to do it from the Samba side or the smbk5pwd overlay to extend the hmm... sounds very

Re: [Samba] LDAP help!

2005-02-02 Thread Adam Tauno Williams
Right now I have Samba+LDAP working (like a charm acctually) I just have one issue. Right now Samba is authenticating the user against the sambaLMPassword and/or the sambaNTPassword attributes. Yep. I would rather it authenticated against the userPassword attribute like my unix boxes

[Samba] Removing Everyone Can Print Permission

2005-02-02 Thread Adam Tauno Williams
I can navigate to a printer on our print server and right click, go the securities tab, click Advanced, select the 'Allow\Everyone\Print' line and click Remove. It goes away, without errors. If I click apply it comes right back (gr). Can one set ACLs on printer queues (cups backend)?

Re: [Samba] samba in a WAN

2005-01-29 Thread Adam Tauno Williams
We have a NT4 Domain in our mainoffice. Now we have to install servers all over germany. (About 20 locations) The offices are connectet over DSL/VPN. We think about using samba to have a stable and inexpensive solution. Is there a solution to use samba over a wide area network? I'm not

Re: [Samba] LDAP and memberUid in Domain Users

2005-01-28 Thread Adam Tauno Williams
Yes, I have. It's strange for me, that removed user isn't visible under usrmgr.exe as members of Domain Users (it's good), but when I do slapcat, I can see: So, why are you slapcatting? The transactions hasn't been committed out of the journal to the database. DO NOT USE SLAPCAT TO CHECK

Re: [Samba] A Samba's very basic problem

2005-01-26 Thread Adam Tauno Williams
I'm troubled in such a very simple problem I think. I've setup a samba server (version 2.0.7) in a linux machine (distro conectiva 6.0). Thats a very old version of Samba actually I just can't browse to my samba server :,( If I don't solve this problem I may lose my job! please any help,

Re: [Samba] memory issues with samba 3.0.10

2005-01-26 Thread Adam Tauno Williams
| I'm still having problems with that memory issue | using 3.0.10 with v.2 of the printing patch + the | one line patch from Jerome Borsboom. My production | server has completely frozen a couple times in the past | couple weeks, and did so again this morning. | This time before restarting

Re: [Samba] Why would nsswitch.conf be needed at all ?

2005-01-20 Thread Adam Tauno Williams
I have setup a samba server as a domain member to share print queues. As I'm doing print quotas, I need the users to be authenticated properly. The setup works except that it appears that I need to add winbind to my nsswitch.conf. This is kind of upsetting as I don't see a reason why I have

Re: [Samba] Samba PDC + LDAP without local Unix accounts?

2005-01-19 Thread Adam Tauno Williams
We are trying to use Samba 3.0.10 running on FreeBSD 5.3 to replace a legacy NT4 PDC. Our goal is to use LDAP to centralize all user information and authentication on the network. To that end, we've set up Samba to use LDAP for authentication of all the Windows users. This is working, but

Re: [Samba] NTConfig.POL file

2005-01-14 Thread Adam Tauno Williams
Does anybody that have it working can give me a sample of what looks like a NTConfig.POL file that changes users passwords every 45 days. Password changing is handled by server policy, you set it using pdbedit. -- To unsubscribe from this list go to the following URL and read the

Re: [Samba] Re: Joining a samba domain on WinXP without a root login?

2005-01-12 Thread Adam Tauno Williams
Both NT4 and AD have special ways to create a basic domain user, then add the specific permission to join workstations to the domain. Can your creativity provide that type of an implementation for Samba? Isn't this privilages? You can muck about with them a bit with rpcclient but they don't

Re: [Samba] sharing Outlook Contacts Calendar

2005-01-11 Thread Adam Tauno Williams
what can You advice on sharing MS Outlook Conatacs Calendar for samba domain ? http://www.opengroupware.org As close as your going to get to beautiful. Outlook support is available, but not free. (I did some investigation on this subject, but I didn't find any beautiful solution at all)

Re: [Samba] Samba + LDAP Computers OU

2005-01-10 Thread Adam Tauno Williams
I would like to put Computer accounts in a different OU from the user accounts. Is this possible ? YES. And it has been discussed many times. The archives should provide you with a variety of answers. I read that there is a bug regarding this and that Computer accounts can only be

Re: [Samba] Article about Samba for Software 2.0 Extra!

2005-01-05 Thread Adam Tauno Williams
We are currently working on an issue of Software 2.0 Extra! magazine devoted exclusively to programming in Linux. We want to show our readers, how to programming in Linux and show them interesting projects about this problem. Also we want to show them usefull tools, which make his work more

RE: [Samba] Openldap + Samba 3 PDC

2004-12-30 Thread Adam Tauno Williams
I tried changing the DN to cn=admin but that didn't work either. Could it have anything to do with the fact that I used md5 for the password hash? No, the application doesn't know or care what password hash you used. Authenticating against the password is processed internally by the DSA

RE: [Samba] Openldap + Samba 3 PDC

2004-12-30 Thread Adam Tauno Williams
I'm new to ldap. What should I set my DC's DN to, admin? There is no answer to this question. You create an object in the Dit for the DC to bind to, and make sure it has sufficient privilages. You shouldn't use the OpenLDAP manager dn; that DN has the access to trash the entire Dit. We

Re: [Samba] PDC + LDAP group mappings

2004-12-30 Thread Adam Tauno Williams
Alright now that samba can talk to LDAP I have a blank slate. I know I need to setup group mappings, but I'm a little confused about this. Since it's an ldap backend do the groups need to have unix counterparts? Yes, it is group mapping; you must have group to map to. Should I use the net

Re: [Samba] LDAP and Samba -- a basic question

2004-12-30 Thread Adam Tauno Williams
On Thu, 2004-12-30 at 12:57 -0500, Paul W. Abrahams wrote: I've gathered that there's a close connection between Samba and LDAP, but the Samba documentation I've looked at, mainly in the SWAT help and man page, doesn't discuss LDAP. Just what is the nature of the connection? Your question

Re: [Samba] Re: Re: group policies in samba PDC for windows 2000 professional and xp clients (fwd)

2004-12-28 Thread Adam Tauno Williams
can you remote regedit from linux? No, or at least I haven't found a way. if so, you can execute on logon from the samba server a push of the keys, you can even make a queue of pushes that run only once. But this isn't GPOs. With regedit or policies you can screw up a machines registry,

Re: [Samba] Re: Groupmap problem

2004-12-27 Thread Adam Tauno Williams
Also, the Machines and Users must be stored in the same OU. Beneath a common OU, storing IN the same OU is not required. It appears that you have users stored in one OU and Computers stored in another OU. I don't believe this is supported right now. (I believe this is because PAM will

Re: [Samba] Re: Groupmap problem

2004-12-27 Thread Adam Tauno Williams
It appears that you have users stored in one OU and Computers stored in another OU. I don't believe this is supported right now. (I believe this is because PAM will only search one OU for a UNIX user instead of multiples.) NSS will only search one OU for account type objects; and both

Re: [Samba] Re: Groupmap problem

2004-12-27 Thread Adam Tauno Williams
It appears that you have users stored in one OU and Computers stored in another OU. I don't believe this is supported right now. (I believe this is because PAM will only search one OU for a UNIX user instead of multiples.) NSS will only search one OU for account type objects; and both

Re: [Samba] PDC + LDAP

2004-12-27 Thread Adam Tauno Williams
it instructs to run /sbin/splapindex -f /splapd.conf When I run this I get the following error: /etc/openldap/schema/samba.schema: line 423: AttributeType not found: gidNumber slapindex: bad configuration file! samba.schema requires the posix/nis schema from RFC2307 to be loaded first, this

RE: [Samba] PDC + LDAP

2004-12-27 Thread Adam Tauno Williams
include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/samba.schema include /etc/openldap/schema/nis.schema Order

Re: [Samba] time for a poll -- does anyone use the testprns tool ?

2004-12-26 Thread Adam Tauno Williams
I am considering marking testprns as deprecated (or just remove it). It doesn't seem to be that useful anymore. Does anyone use it on a regular basis and would therefore be distraught if it were gone in a future 3.0.x release ? Haven't used it in ages. -- To unsubscribe from this list go

Re: [Samba] LDAP problem, with samba and groups

2004-12-24 Thread Adam Tauno Williams
[2004/12/24 10:59:46, 0] lib/smbldap.c:smbldap_open_connection(545) ldap_initialize: Time limit exceeded [2004/12/24 10:59:46, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 1 try! [2004/12/24 10:59:47, 0] lib/smbldap.c:smbldap_open_connection(545)

Re: [Samba] Re: Connection reset by peer

2004-12-24 Thread Adam Tauno Williams
I agree. This indicates a packet loss on the LAN. I would check the cables and switches. If you can, try using a 10,000 packet flood ping from the server to a suspect host, with a 1500=byte packet size. This is a nice quick test of network health. Oh - a bad NIC at either end can also

Re: [Samba] HOWTO for setting up Samba as a PDC

2004-12-23 Thread Adam Tauno Williams
does anyone knows of a good HOWTO (or a book) for setting up Samba as a PDC? ftp://ftp.lueckdatasystems.com/pub/presentations/klugsamba3pdc-bookreview.pdf I have been dealing around with the Samba HOWTO collection, but to be honest, this is a hard job. No, not really. There are some

Re: [Samba] PDC/BDC design question

2004-12-23 Thread Adam Tauno Williams
I'm in the process of building a Samba PDC for my office, and I have a couple of questions. We have three regional offices connected via VPN. We'd like to have network browsing across all three network, with a single login. I was going to do a Samba machine with an LDAP backend on the same

Re: [Samba] Question about win2000 and samba

2004-12-23 Thread Adam Tauno Williams
I setup Samba 3.09 with LDAP and everything seems to work fine. (shres, permissions, startscripts) But we have the following problem on Win2000 machines: If you start the machine and Login on the domain everythings seems to go fine. Then the startscript will be loaded and works fine.

Re: [Samba] Can the logon script know username?

2004-12-20 Thread Adam Tauno Williams
Not only can it, it does. See NT documentation on environment variables. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

[Samba] Every growing smbd (was RPMs for SuSE Linux)

2004-12-20 Thread Adam Tauno Williams
On Thu, Dec 16, 2004 at 06:15:25AM -0600, Gerald Carter wrote: [snip] Binary packages are available at http://download.samba.org/samba/ftp/Binary_Packages/ Using these packages we are seeing - PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND 20589 root 16 0

Re: [Samba] any way to specify multiple LDAP servers for Samba to authenticate against?

2004-12-20 Thread Adam Tauno Williams
Is there any way to specify multiple LDAP servers for Samba to authenticate against? List multiple LDAP passdb backends. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: any way to specify multiple LDAP servers for Samba to authenticate against?

2004-12-20 Thread Adam Tauno Williams
I had been using ldap server = myldapserver instead of passdb backend and didn't see anything about specifying multiple servers. Didn't know about passdb backend = ldapsam:ldap://ldap-1.example.com ldap://ldap-2.example.com; This gives you redundancy, you will search the second DSA only

Re: [Samba] Re: ldap machine suffix fixed?

2004-12-17 Thread Adam Tauno Williams
OK, so what I am hearing is that: 1. It is still a problem. 2. But it isn't a Samba problem, it is an nss_ldap problem. 3. There might be some work arounds. Possible workarounds: A. Burry the Two OU's one deeper and do a subtree search on the parent OU. Works but not scaleable. I disagree

Re: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server

2004-12-17 Thread Adam Tauno Williams
Pls send more details about connecting FC3 machine to ADS. Please visit http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] ldap machine suffix fixed?

2004-12-16 Thread Adam Tauno Williams
Did ldap machine suffix ever get fixed so that it can be in a sperate container from ldap user suffix? Is there any problem to be fix on samba side? I've been using separate container for machine without any problem ( almost 8 months now) Same, always have, never had this problem. -- To

Re: [Samba] ldap machine suffix fixed?

2004-12-16 Thread Adam Tauno Williams
Did ldap machine suffix ever get fixed so that it can be in a sperate container from ldap user suffix? Is there any problem to be fix on samba side? I've been using separate container for machine without any problem ( almost 8 months now) Yes, there was a problem, and maybe still is.

Re: [Samba] VPN and browsing

2004-12-14 Thread Adam Tauno Williams
I've set up a PPTP VPN system to provide remote access to my work LAN, but I can't get (and cannot see how to get) computer browsing to work for clients connecting over VPN (they cannot see any computers in, and do not appear themselves in network neighbourhood). You need to configure

[Samba] TDB Files From Mono/C#

2004-12-13 Thread Adam Tauno Williams
Does anyone have any code for inspecting Samba TDB files from Mono or just in C#? Is the format of the TDB file documented somewhere? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] TDB Files From Mono/C#

2004-12-13 Thread Adam Tauno Williams
Does anyone have any code for inspecting Samba TDB files from Mono or just in C#? Is the format of the TDB file documented somewhere? Only in the source code I'm afraid. The tdb C code would convert to Java or C# quite easily, Will take a look. although I'm thinking the locking

Re: [Samba] multiple loginscrips Samba 3

2004-12-13 Thread Adam Tauno Williams
googling arround, I found an example smb.conf containig logon script = %m.bat logon script = %U.bat My question: is it possible to have such a login script chain?? No. A subsequent value read in the configuration overrides a previously read value. -- To unsubscribe from this list go to

Re: [Samba] Speed of Samba through VPN

2004-12-13 Thread Adam Tauno Williams
Today, we ran a quick test which compared the volume of traffic sent over the VPN connections to the central server from a client machine and from my test machine. We found that the volume of data being sent and received during the process of opening a shared folder, seeing the contents

Re: [Samba] what samba can't do list

2004-12-13 Thread Adam Tauno Williams
I was wondering what of this was still true? quote Things that samba cannot yet, but are under rapid development, are: - Trust relationships with other domains. ? Trust accounts have existed for quite some time. - PDC and BDC integration. Depends on what you mean; technically, no. Very

Re: [Samba] Re: PDC, BDCs - how do you synchronize roaming profiles?

2004-12-11 Thread Adam Tauno Williams
As a consequence, this also means, that on each server there has to be a copy of a profile of a given user, right? No, not right. The user roaming profile is stored only on one server. So what is the sense of having BDCs? So distribute the profiles. Where the user's profile is located

Re: [Samba] ldap machine suffix = ou=Computers vs ou=Users

2004-12-09 Thread Adam Tauno Williams
The SBMLDAP howto ( http://www.idealx.org/prj/samba/smbldap-howto.en.html ) states that: ldap machine suffix = ou=Computers Is the correct approach to defining machines in the LDAP directory. Yet the advise offered by this group seems to be that, no we should be using : ldap

Re: [Samba] Pdf printer by mail with samba 3.0.9-1

2004-12-08 Thread Adam Tauno Williams
The problem of the connectivity error seems to have been persistant for the duration of the windows login - so whatever I had screwed up I think I must have fixed, but I still have concerns... (and oodles of ideas - I could use this same process to create a fax gateway too...) I also wanted

Re: [Samba] Samba and macintoshes

2004-12-07 Thread Adam Tauno Williams
I have a mixed network with windows macs using samba on Solaris9 for file sharing. When one of the macs opens a file (tex illustrator doc) then that file remains locked even when the user has closed the doc. When somebody else opens the file it becomes readonly. The file remains listed

RE: [Samba] Pdf printer by mail with samba 3.0.9-1

2004-12-07 Thread Adam Tauno Williams
[Mitch says:] Sorry for butting in - and sorry if this is a dumb question - but are you guys saying there is an existing PDF printer / spooler combo that provides a PDF output option under Samba? Is this a 3rd party app or where do I get started looking at this? Yes, it is included with just

Re: [Samba] Pdf printer by mail with samba 3.0.9-1

2004-12-07 Thread Adam Tauno Williams
Result -m [EMAIL PROTECTED] $OUTDIR/$DATE.pdf rm $OUTDIR/$DATE.pdf - Adam Tauno Williams Network Systems Administrator Morrison Industries Grand Rapids, Mi. USA -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org

RE: [Samba] 2003 Terminal Server profile storage problem (earliermessage was incomplete - sorry)

2004-12-07 Thread Adam Tauno Williams
[Mitch says:] D'oh! Ok- I've set that, still seeing the problem though - without the error message (yes I was smart enough to restart smbd ;-) Actually, changes to the smb.conf become live withing a few minutes, you don't need to restart. When the user logs on, the profile folder is created

Re: [Samba] Pdf printer by mail with samba 3.0.9-1

2004-12-07 Thread Adam Tauno Williams
Then I added this to my smb.conf This won't work with printing = cups if Samba is linked against libcups... [pdfprinter] printing = lprng This looks okay. print command = /usr/bin/smbpdfmaker %s %U %m %I Our share definition looks like - [pdfconv] path = /tmp

<    1   2   3   4   5   >