Hello,
I run a Windows domain based on Samba 3 and I am searching for a way to
distribute/deploy software to clients.
I.e., a user logging on to a client, software should be automatically
installed or upgraded. Is there any common solution? I heard of MSI
packages, but I don't know if it is
Hi John,
Please keep me updated on your findings and in particular on the solution you
end up using. I believe it would be most useful to document this in the
Samba-HOWTO-Collection.
Of course, will do as soon as I know something. ;-)
A good page is www.gruppenrichtlinien.de , but it seems that
Hi Michael,
The name of the game is to get the right files in the right places, the
right registry entries in the right places, and BINGO! the software
works. That's it!
thanks for the feedback. However - simple question: How to achieve that?
It's not that easy figuring out all those entries...
Hi Michael,
Novadigm (now HP) Radia is maybe the best vendor tool. They won't
answer the phone unless you have at least 1000 nodes. (Which is stupid
in my opinion) Good support of distributing MSI's over HTTP.
These tools are pretty good for low end:
http://www.newboundary.com/
I have PrismPack
Hi Thomasz,
is this page available also in English?
Unfortunately not. :-(
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Hi Thomasz,
The only solution I'm aware of is MS Active Directory (distributed
software installation)...
Which needs a MS Windows 2000/2003 Server, and that's exactly what I
wanted to omit using Samba. ;-)
If you just want to install a system + your applications, try Unattended
Hi,
OK, I know *some* German, but not computer / technical German :)
Before I start translating this page - could you sum up what's that about?
And if this solution is open source, or not?
It's from a Microsoft Most Valuable Professional (MVP) describing the
group policies, offering some
Hi Michael,
I do not know of ANY free tools AT THIS TIME that run on Windows. It is
rare for ESD to be used / developed, then you want to narrow the playing
field down to the free ones?! And someone still needs to support free...
food and housing for the people doing it?! Look at Samba, they
Hi Tomek,
unattended itself can't - but I'm sure people at its mailing groups will
have some knowledge - I saw some of the topics there is about automatic
software installation, also after OS is installed.
so - who starts the topic there, you or me? :)
Could you check these lists and get back to
Hi Tomek,
OK, will ask them and elaborate on that here as soon as I get any replies.
Thanks!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Hi,
We have been using AutoIt with wpkg scripts for a while as a deployment
solution with win2k workstations.
It is quite simple solution but has been good enough for us.
http://sourceforge.net/projects/wpkg/
Thanks for the feedback, will have a look at it! :-)
Florian
--
To unsubscribe from this
Hi Robert,
thanks for these links, I will check them out! I wonder that no one has
ever deployed a real good solution. We can fly to the moon, but we can't
install packages pre-configured automatically. What a mess... ;-)
Florian
--
To unsubscribe from this list go to the following URL and read
Hi there,
I see, it'll be a lot of work. ;-) But the unattended.sf.net site has
some valueable information that might help!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Hi Eric,
Not really samba related, but as nothing better has popped up atm :
http://adamoto.sourceforge.net/
Thanks, has been bookmarked!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Hi John,
All submissions of working methods that anyone is using to solve this mess are
most welcome. I'll summarize them into the Samba-HOWTO-Collection.
I will try to implement something throughout the next months and will
let you know as soon as I have it. :-)
Florian
--
To unsubscribe from
http://www.opennet.ru/docs/RUS/windows_auto_inst/index.html
I'm not sure most people understand russian, but the article itself is
just amazing!
If You won't find any translator, let me know, I'll translate it.
/me doesn't understand Russian. ;-)
--
To unsubscribe from this list go to the
Hello fellow list members,
does anyone knows of a good HOWTO (or a book) for setting up Samba as a PDC?
I have been dealing around with the Samba HOWTO collection, but to be
honest, this is a hard job. There are some errors in it and descriptions
are not this good. I even don't know what all the
Hi Mark,
The book Samba-3 By Example, available in hard copy from a bookstore or via
download from the Samba site, is a terrific cookbook in that it gives you
specific, step-by-step instructions for a variety of real-world situations,
including setting up a PDC.
thanks, that sounds good! Will
Hi,
ftp://ftp.lueckdatasystems.com/pub/presentations/klugsamba3pdc-bookreview.pdf
that one is cool, thanks a lot!
I have been dealing around with the Samba HOWTO collection, but to be
honest, this is a hard job.
No, not really.
It contains errors (Ex: net command has rid setting when using
Hello,
is it possible to rename the default groups with groupmap? I would like
to change
Domain Users
Domain Admins
Domain Guests
to the correct German translation.
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:
Hello,
I have found out that a domain administrator is always mapped to root in
the UNIX filesystem:
drwx-- 2 jive smbguests 1024 2004-12-23 18:59 jive
drwx-- 13 salsa smbusers 1024 2004-12-23 18:58 salsa
drwx-- 13 root smbadmins 1024 2004-12-23 18:56 tango
jive is a domain
Hello,
is it possible to set options before a user logs on via policies, or
does this depend on active directory?
I would like to set things like screensaver at logon dialogue,
ctrl-alt-del requirement, clear last user at logon, etc., but it seems
to be impossible using policies.
A workaround
Hi John,
no problem, I was just a little bit confused by all those tools.
What I miss most in the documentation, is a description of what the
tools actually do. What are they for, when do I need them. Why shall I
groupmap a user to Domain User group when it works fine without?
One particular
Hi Michael,
Yup, those caused errors for me as well. I never did understand what
these commands were meant to acomplish. I found alternate commands to
map Linux groups to domain groups and those domain groups to local
groups. All documented in that presentation PDF file.
they work just fine. If
Hi Tom,
Yes, if tango is listed as admin user in smb.conf.
Don't list Tango as admin user in smb.conf.
Is there any other way of having tango as domain admin than listing it
as admin user?
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:
Hi Michael,
Yup, found that as well. It seems to be hard coded behavior in the Samba
code. Even though it would make sense to never log in as root, you can
not tell Samba root is an invalid user or you will not like the results.
Been there, Done that... documented in the PDF as well.
@Samba
Hi Michael,
2) Anyone who is a Samba Domain Admin will cause things in the log to
equate the user to being the root user. Just how Samba thinks about things.
okay. Any chance to get that fixed by the Samba development team? :-)
Florian
--
To unsubscribe from this list go to the following URL and
Hi,
Get what fixed? The OS is Unix. The administrator IS root. What is
there to fix?
root is root (Unix admin, Domain admin). tango is tango (NOT an Unix
admin, but Domain admin). Is there a technical necessity of mapping
tango to root?
Florian
--
To unsubscribe from this list go to the
Hi Jim,
okay, I guess I got the point. :-)
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Hello there,
where are the Windows file permissions (i.e. ACL) stored when using Samba?
How can I change them from within Linux? Or is it only possible with the
Windows file permissions dialogue?
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:
Hi Abo,
Hi Ruth,
thanks for that information, that sounds reasonable. I even didn't know
that ext3 has ACL support. ;-)
However, I know that when I want to copy a profile from user A to user
B, I cannot just use the Unix cp command, but I have to do this with the
Windows tools, because
Hi there,
well, im not really sure about what im going to say, but i think you
must add users to samba with smbpasswd or import them from an existing
users table.
anyone else can give some light?
adding the users is not the problem. If I added them and then just cp
the profile, Windows complains
Hi,
Have you tried cp -a (it saves owner and standard permissions, not sure
about acls though)
no, have not tried that, but I have to change Unix permissions to the
new user nontheless. Somewhere in the profile, maybe in the .DAT file
itself, Windows stores the users SID, taht seems to be the
Hi,
If you have your drive mounted with acls, the owner is stored with the
file, and samba will translate this. I have been able to chown files
like so: chown DOMAIN+user file and it works. getfacl filename should
list the owner and group, as well as any ACLs
I have no files mounted with acls.
Hello list,
I have successfully set up my Samba domain with profile management and
now have a Default User profile. When I create a new user and log on for
the first time, I have the pre-defined profile as a template, so
necessary changes only need to be made in one profile.
That is great,
Hello list,
does anyone have a good documentation regarding group profiles? The
Samba HOWTO collection only says that its possible, but I don't
understand how it works, how I can set a specific profile for a group of
users...
Thanks
Florian
--
To unsubscribe from this list go to the following
Hello list,
is it possible to have the same profile for some users (or a group of
users) without having to use a separate profile directory for each user?
I would like to set up a pre-defined mandatory profile for a school with
more than 1,000 students. Each student should have the same,
Hi Tony,
Isn't this described very fully in Inge-Håvard Hunstad's contribution to
the LDAP HOWTO?
where can I get this HOWTO? Google wasn't very useful ;-(
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:
Hi Craig,
I think some checking in the How-To should provide the answer. It's
'mandatory' profiles and you should be able to accomplish this by having
a Default User profile on the profile server and having the policy of
deleting local profile at log off from each workstation.
wouldn't that mean
Hi Paul,
If I'm not mistaken, in the examples, mandatory profiles are integrated
with folder redirection for this exact situation.
I read through that chapter, but isn't it just about implementing
registry changes - in this case folder redirection - into the Default
Profile, which doesn't help
Hi Ilia,
you mean that changing the path in the users profile from
\\mypdc\profiles\user1
\\mypdc\profiles\user2
and so on
to
\\mypdc\profiles\students
would do the trick?
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:
Hello there,
I'm quite new to software distribution, so I would like to ask you a
question. ;-) Is it posible to install software without logging on as
administrator on every machine? If yes, how does it work? Via a Windows
service? Via a script that is being run as admin even if a normal user
Hi there,
Add your users to power users group or run install programs as
administrator: right_click-run_as-administrator,passwd.
It is also possible to change system policies (not trivial).
is there a solution where I do NOT need to give the users admin permissions?
Thanks
Florian
--
To
Hi there,
maybe I have found something, I will check that out tomorrow. First of
all, there is an option to run all MSI packages with admin privileges
and apart from that, I found a way (Windows Server 2003 Resource Kit) to
install applications as service, i.e. running with administrative
Hello there,
I have a bug report, filed as #2288:
It is impossible to rename the Windows domain group name, e.g. from
Domain Users to Domänenbenutzer (German version)
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:
Hello everyone,
using Samba 3.0.20, the net rcp shutdown command does not work. I use
/usr/local/samba/bin/net rpc shutdown --server=MYCLIENT
--user=DOMAIN_ADMIN_USER
and the result I get back is
[2005/09/09 18:00:15, 0, effective(0, 0), real(0, 0)]
Hello everyone,
Mass-adding users with pdbedit or smbpasswd leads to long delay. The
system is
fast enough, however, it takes one second per user.
Might there be any (hidden) delay in these tools?
The command to add the users is:
( echo $2 ; echo $2 ) | /usr/local/samba/bin/smbpasswd -a $1
Hi Jerry,
If you are using an ldap backend, then it is
possible.
I use pdb_mysql (I know, experimental...). Don't know if this is a
general pdbedit problem or if it depends on the module.
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:
Hi Jerry,
Can you reproduce the delays with tdbsam?
unfortunately, I currently don't have a testing machine here. ;-(
If anyone else on this list is willing to test this out, let us know the
results. Otherwise I will set up a test system and then attach my
results to the output, but it can
unfortunately, I currently don't have a testing machine here. ;-(
If anyone else on this list is willing to test this out, let us know the
results. Otherwise I will set up a test system and then attach my
results to the output, but it can take a while. :)
Addendum:
The machine I experienced
Hello,
I run Samba 3.0.20a with Windows XP Professional SP2 client. Sometimes,
the logon is a bit slot, i.e. it takes some seconds until the Loading
profile... dialog box comes up.
The same effect happens when I start a program with the Run as command
in the context menu. I enter my domain user
Hello,
I run Samba 3.0.20a with Windows XP Professional SP2 client. I found out
that when a normal (i.e. not domain administrator) user runs the old
Windows NT 4 user client, it can retrieve the whole list of usernames
and fullnames.
Can that be prohibited in any way?
Thanks
Florian
--
To
Hello,
is there an option to hide files for the Windows clients, but do not
prevent accessing or writing to them?
I want to hide some folders for my users. With the appropriate Samba
option, I can hide the files, but if Windows is configured to show
hidden files, they are shown nontheless.
Is
Hello,
I've searched the Howtos, but I did not find anything, so I'm asking
this question onlist.
When are connections between Samba and the client encrypted? I run Samba
3.0.20a on a network with Windows XP SP2 and some Windows 98 machines.
- Are connections always encrypted? Are there any
Hi Andrew,
Not without breaking functionality. See, any user should be able to run
the ACL editor, and assign rights to users and groups.
You could modify code to lock this down, but I would be worried about
the consequences, as well as what other mean (direct LDAP query, for
example) you
Hi Jerry,
'use ea's to stare the DOS hidden attribute on the files.
thanks, will try that!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Hi,
how would this be accomplished in a purely Microsoft Windows
environment? This doesn't seem to be a samba question.
although a Windows server might not be able to do it, on the Samba side
this could be achieved with just returnin no users to the client, I
guess. But I'm not quite sure...
Hi Craig,
I agree with you, but maybe such an option would be an idea for the todo
list, but with less priority. Samba can do a lot of things Windows can't
do. ;-)
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:
Hi Svend,
Passwords should be encrypted using NTLM by default. See the sections
on 'encrypt passwords' and 'ntlm auth' in the smb.conf man page.
I don't think the data traffic is encrypted. You can tunnel port 139
to encrypt everything via SSH.
thanks, that makes sense!
Florian
--
To
Hello,
I have refresh problems when doing a folder redirection for the desktop.
My desktop is being redirected to H:\desktop (H=home directory on the
server, not on the local machine) and it works fine.
However, as soon as a new file is being saved on the desktop, I need to
hit F5 to refresh the
Hi Jeremy,
It seems so, I'm sorry if that's the case. I did try and notify
people so this would not break.
no problem, the most important thing to me is that we can find a
solution that everyone is happy with.
It's not important now, what's more important is ensuring
that the SQL modules
Hi Filip,
Ok, I think it's time to someone say I will maintain this. So I'm
saying it :-) I can maintain pdb_*sql code - I depends on pdb_pgsql,
but I think it is effective to maintain both mysql and pgsql together.
Jeremy, do you think if it will be useful to create samba-sql mail
list for
Hi Jerry,
He's already on it :-)
:-)
This really boils down to a communication problem. Developers
are expected to subscribe to both the samba-cvs and the samba-technical
lists. The samba-pdbsql alias is really only intended for use in
bugzilla (default owner of pdb_sql component).
Hi,
At this moment I ca't have two small test servers - one for mysql and
another for pgsql. So I can test code for mysql it it can compile and
start, but I'm not able to test it for longer time. For pgsql I can do
this. It will be great if for example Florian can test pdb_mysql more.
Can
Hi,
Bugzilla is good for individual issues. The samba-technical ml
is best for interaction with other Samba developers (like
Jeremy Volker).
I'll subscribe to this and see how much traffic it is. :-)
Sounds like a good plan. If testing resources become an
issue, let me know and I'll try
Hello everyone,
again: I have not received any single message from you regarding the
changes in 3.0.21 - maybe that's why no one responed? Maybe the message
simply did not get through?
I asked again in Bugzilla to re-send that message, but I still received
no message (but thanks to Volker
I have a Samba 3.0.6 server and a CUPS 1.2.0 server running on my machine.
They have been compiled with:
Samba:
./configure --with-pam --with-pam_smbpass --with-quotas --with-sys-quotas
CUPS:
./configure --prefix=/usr/local/cups --with-cups-user=cups --with-cups-
group=cups
Hi Adam,
Maybe I'm missing something here, but you won't see your printer
in the browse lists unless you create a share for that printer. You can
either create a specific printer stanza for Kyocera_FS-3750, or create a
[printers] stanza to export all printers listed in printcap.
I will try
Hi,
is there any option to disable the user access to SWAT for anyone else than
root?
Currently, every user can log on and view the system configuration. I would
only like to let root logon.
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:
Hi Joel,
swat is called without -a here.
Florian
- Original Message -
From: Joel Hammer [EMAIL PROTECTED]
To: Florian Effenberger [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Saturday, December 06, 2003 2:24 PM
Subject: Re: [Samba] disabling user access to SWAT
I am rusty
Hi there,
I would like to have the same (mandatory) profile for a group of users.
I tried by setting the same profile path using pdbedit and allowing
everyone of them read/write access to the appropriate Linux files,
including executable access to the appropriate directories of the profile.
Hi,
For a mandatory profile you should rename the NTUSER.DAT to NTUSER.MAN,
then you can disable any write access for that group. This way it worked
for me.
thanks, but the problem is that I still need one NTUSER.MAN file and a
profile directory per user. I would like to serve a bunch of users
Hello
is there a tool to modify NTUSER.DAT security descriptors/ACLs via
command line?
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Hi Michael,
oh, sorry, I forgot to mention - I want to modify its data contents, as
my ext3 has no ACL so far. ;-)
It works fine when copying using the Windows GUI, but I search for a way
of doing that scriptable/automated on the command line. Either using a
Windows tool or a Linux tool. Tried
Hello,
how do you prepare a registry for use with the Default User profile?
I log on using a template user, but the registry contains some GIDs
(these {12345-12345-} strings) and some absolute paths, and I'm
searching for a tool to automate the removal of these entries, so a new
user gets a
Hello,
I run a Samba3 server with XP-Clients and I would like to give some
users the ability to use the Remote Desktop, although they are *no*
Domain Admin.
Either, I can put them in the Remote Desktop Users group, or I put their
username or group into the list on gpedit.msc - Computer
Hi Robert,
Hi Thomasz,
Hello list,
yes this should be possible use
adms from
http://www.gruppenrichtlinien.de/
or use reg2adm to create your own
thanks for your feedback! I did not find anything in the ADM templates
regarding the Remote Desktop Users. Did you?
However, I found out that
Hi Thomasz,
hmm, but on my XP stations, default installation with no changes, users
can use the Remote Desktop?
are you sure that your users are *no* admins on the machine, but users
with limited access?
Florian
--
To unsubscribe from this list go to the following URL and read the
Hi Thomasz,
I'm 100% sure with win2k (and Remote Desktop installed from a msi
package), but with XP I will check it tomorrow when I'm back to work.
thanks, that's great, I'm curious about what comes out. ;-)
Florian
--
To unsubscribe from this list go to the following URL and read the
Hi Thomasz,
yeah, with a clean XP install mstsc (Terminal Server Client) works for a
normal user, too.
thanks for looking up! Is your machine in a Samba NT4-style domain, or
is it standalone?
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:
Hi Thomasz,
actually, it's an AD-client :)
hm, maybe that makes the difference, although I doubt. :)
Would you mind checking the contents of
Start\Settings\Control Panel\System\Remote\Remote Users
for me? Whats listed in there?
Thanks
Florian
--
To unsubscribe from this list go to the
Hi Thomasz,
I will know today later or tomorrow perhaps, as I will roll out a new
Samba domain with XP clients.
that would be great! Maybe we can compare our settings then. I read via
Google Groups that XP non-admin users normally *cannot* logon via RDP.
You have to add them to the list I
Hi Thomasz,
hmm, I'm beginning to doubt if we're talking about the same :)
maybe you are right. ;-) I am *not* using a Windows Terminal Server
(Windows 2000 Server, Windows Server 2003), but rather enable the Remote
Desktop functionality on my XP machine, so users can connect via RDP to
Hello,
In order to maintain some sort of group profile (i.e. one mandatory
profile shared between a group of users that have the same profile
path), I would like to copy profiles between users. This works fine with
System/Advanced/User Profiles/Copy To. However, I would like to automate
this
Hi Ilia,
ntuser.dat contains certain SID, so I'm afraid mandatory profiles
won't work for a group of users.
it works just fine if you set the same profile path for some/a group of
users and copy the profile via the Windows internal tool. :-)
Florian
--
To unsubscribe from this list go to
Hi,
there's special utility, called profiles which comes with samba.
it changes SIDs withing registry files.
that doesn't work with my XP profiles, I still have some occurences left
of the old SID. The man page for profiles says that it only works with
NT profiles, maybe that's the problem.
Hi there,
Could someone tell me or point me in the right direction how I could
share a profile among three users all win2000 workstations. I created
a profile on machine A and want B and C to also use it without having
to copy it over by hand. The profile does not have to be a .MAN, just
a
Hello,
I am trying to connect a 2nd Linux machine to my Samba PDC using
smbmount. Both machines run Samba 3.0.14a. However, when trying to mount
using
machine2# /usr/local/samba/bin/smbmount //pdc/wpkg /raid/samba/mount -o
username=abc,password=123
it takes some seconds and then only
Hi there,
my CUPS server runs fine, I can print from within Windows and Linux.
However, if I stop the printer in CUPS or some other error occurs,
Windows clients never get notified, neither via IPP nor via SMB
printing. Windows always sends out the print job, the user thinks the
job has been
Hi Jerry,
The original printing backend was written for interaction with
lpd systems. The cups backend was tacked on. So the interface
is not as rich as it should be. What you are asking about is
kind of known issue at this time.
https://bugzilla.samba.org/show_bug.cgi?id=2685
thanks
Hello everyone,
Hello Jelmer,
in 3.0.20, it still is not possible to add new users using pdbedit. See
bug report at
https://bugzilla.samba.org/show_bug.cgi?id=2531
In 3.0.14a it was possible to copy pdb_sql.c and pdb_mysql.c from 3.0.11
and it worked, but this workaround does not help anymore,
Hi John,
look at these:
https://bugzilla.samba.org/show_bug.cgi?id=2531
and
https://bugzilla.samba.org/show_bug.cgi?id=3018
and
https://bugzilla.samba.org/show_bug.cgi?id=3019
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:
Hello Jerry,
Hello Jelmer,
Hello all,
At the CIFS conference you indicated that you would like
to transition the pdb_mysql module to another owner.
You still feel like that? If so, I'll start looking for
a new maintainer.
unfortunately, I am no programmer, otherwise I would fix the
Hello,
I understand you position, but I will point out that
this is exactly why I marked those extra pdb modules
as experimental to start with. We have the resources
to support the code passdb code and modules but not
all the variants available.
yes, I know the problem with that, but in
Hi Jelmer,
Well, I'd be happy to keep maintaining it (just keeping it working),
but if there's somebody stepping up who's willing to take over, that'd
probably be better. I no longer have a production
system that uses pdb_mysql so my testing is pretty ad-hoc.
thanks, that sounds good! I
95 matches
Mail list logo
