Re: [Samba] [3.6.8] XP fails with error 1326

2013-10-07 Thread Gaiseric Vandal
Does the unix level nobody account exist? Does it work with Win 7 clients? On 10/07/13 11:08, Winfried wrote: Hello I've googled and experimented for the past few hours but am still stuck trying to simply share a temporary directory in read-only with anyone on the LAN. Here's the

[Samba] Fwd: RE: [3.6.8] XP fails with error 1326

2013-10-07 Thread Gaiseric Vandal
the smb user and password? You must create users with smbpasswd –a username to connect to the share *De:*samba-boun...@lists.samba.org mailto:samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org mailto:samba-boun...@lists.samba.org] *En nombre de *Gaiseric Vandal *Enviado el:* lunes

Re: [Samba] Use LDAP for passwords ONLY

2013-10-03 Thread Gaiseric Vandal
If you have an existing LDAP structure, there will still be a separate field for the Windows password. For samba 3.x, you can specify either an local backend or an ldap backend. You can not specify some attributes in ldap but not others. If you want to set up Samba to use LDAP backend

Re: [Samba] TLS between winbind and openldap

2013-08-06 Thread Gaiseric Vandal
Did you try using LDAPS (ldap over SSL, typically on port 636.) I can't speak specifically about it with winbind BUT I have found that in other situations LDAPS creates less headaches with CA cert issues. On 08/06/13 05:27, thierry DeTheGeek wrote: Hi, I found a possible workaround to

Re: [Samba] UIDs/GIDs Mapping and Permissions in Samba

2013-08-01 Thread Gaiseric Vandal
I have never quite got uid/gid consistency working with member servers. My domain controllers use an LDAP backend so they don't have an issue. All the unix uid and gid is also in LDAP. This keeps file permissions correct on the member servers when accessing from windows clients.

Re: [Samba] nmbd is not running

2013-07-31 Thread Gaiseric Vandal
Can you show the ifconfig -a output on your server (or whatever the appropriate command for your OS .) The bind failed on ... 255 suggests the IP of the server is set wrong. On 07/31/13 05:17, Kevin Sha wrote: Hi I have samba domain controller in my network. and recently I have changed the

Re: [Samba] nmbd is not running

2013-07-31 Thread Gaiseric Vandal
bytes:369954 (361.2 KiB) TX bytes:369954 (361.2 KiB) On Wed, Jul 31, 2013 at 6:18 PM, Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com wrote: Can you show the ifconfig -a output on your server (or whatever the appropriate command for your OS .) The bind

Re: [Samba] ./configure LDAP checks failing on AIX

2013-07-30 Thread Gaiseric Vandal
You may also want to set LD_LIBRARY_PATH to include /usr/local/openldap/lib On 07/30/13 02:31, Andrew Bartlett wrote: On Thu, 2013-07-25 at 14:40 +, Gilles Pion wrote: Samba version 4.0.7 Aix 6.1 Compiler: IBM xlc Last lines of ./configure output: Checking for ldap_init : not found

Re: [Samba] NT4 clients

2013-07-30 Thread Gaiseric Vandal
For what it is worth - it looks like NT4 does NOT use kerberos even with the Active Directory client installed. http://www.petri.co.il/dsclient_for_win98_nt.htm# Windows 2003 Active Directory had some compatibility with NT4 domain controllers. I don't think Samba 4 does.Your best

Re: [Samba] How to install a replacement PDC?

2013-07-29 Thread Gaiseric Vandal
Run the testparm -v to see full details, including defaults that may not have been explicitly specified in smb.conf. You want to look out for the passdb backend value. On samba 3.4 or later tdbsam is probably the only valid local option. If you were using the smbpasswd file (text?)

Re: [Samba] NT4 clients

2013-07-29 Thread Gaiseric Vandal
I wouldn't have even guessed that NT4 would join a modern AD domain. It looks like MS did provide client software to join a Windows 2000 AD domain.Or does the NT4 machine think it is in an NT4 / Samba3 type domain? Presumably you can see the domain users in the local user manager

Re: [Samba] Samba 3.6 issues

2013-07-17 Thread Gaiseric Vandal
When I upgraded from samba 3.0.x to 3.4.x I ran into several issues. First of all, I would look through the logs. (They did not attach to your messgae.) I would also run testparm -v in case some default settings have changed. NTLM should be enabled. If you require NTLMv2 that may

Re: [Samba] i can figure out. is it config issue or bug. please help

2013-07-17 Thread Gaiseric Vandal
So you really mean Samba 2.7 or do you mean Samba 3.2.7 ? On 07/17/13 02:09, Muhammad Yousuf Khan wrote: i am using samba 3.6.5 with winbind.for active directory authentication there is a samba share folder name Filesharing and plethora of folders are inside it. i have been using 2.7 stable

Re: [Samba] Administrative users on domain

2013-07-17 Thread Gaiseric Vandal
According to the net man page In order for Samba to be joined or unjoined remotely an account must be used that is either member of the Domain Admins group, a member of the local Administrators group or a user that is granted the SeMachineAccountPrivilege

Re: [Samba] Administrative users on domain

2013-07-17 Thread Gaiseric Vandal
On 07/17/13 14:32, Donny Brooks wrote: On Wednesday, July 17, 2013 10:11 AM CDT, Gaiseric Vandal gaiseric.van...@gmail.com wrote: According to the net man page In order for Samba to be joined or unjoined remotely an account must be used that is either member

Re: [Samba] Administrative users on domain

2013-07-17 Thread Gaiseric Vandal
On 07/17/13 15:02, Donny Brooks wrote: On Wednesday, July 17, 2013 01:53 PM CDT, Gaiseric Vandal gaiseric.van...@gmail.com wrote: On 07/17/13 14:32, Donny Brooks wrote: On Wednesday, July 17, 2013 10:11 AM CDT, Gaiseric Vandal gaiseric.van...@gmail.com wrote

Re: [Samba] Administrative users on domain

2013-07-17 Thread Gaiseric Vandal
On 07/17/13 16:12, Donny Brooks wrote: On Wednesday, July 17, 2013 02:39 PM CDT, Gaiseric Vandal gaiseric.van...@gmail.com wrote: On 07/17/13 15:02, Donny Brooks wrote: On Wednesday, July 17, 2013 01:53 PM CDT, Gaiseric Vandal gaiseric.van...@gmail.com wrote: On 07

Re: [Samba] 3.5.6 to 3.6.6: session setup failed

2013-07-12 Thread Gaiseric Vandal
Does pdbedit -Lv still show users? You want to verify that samba is able to access LDAP. On 07/12/13 08:51, Thiago Parolin wrote: Hi, I think that someone has the solution for my problem! ;) After i did the upgrade process in a samba server, from debian squeeze to wheezy, the new samba

Re: [Samba] About NAS versus Samba

2013-07-12 Thread Gaiseric Vandal
With Samba 3.x (I think it was samba 3.4.x when we started deploying Windows 7) I found that offline folders on Windows 7 broke offline authentication. On 07/12/13 02:43, Jim Potter wrote: I use a Netgear readynas1500 as a fileserver for my Samba3/ldap domain which I' ve just upgraded to AD

Re: [Samba] About NAS versus Samba

2013-07-11 Thread Gaiseric Vandal
On 07/11/13 11:50, Jeremy Allison wrote: On Thu, Jul 11, 2013 at 08:01:20AM -0500, Chris Weiss wrote: On Wed, Jul 10, 2013 at 11:00 PM, Jeremy Allison j...@samba.org wrote: but not all NASs do. there are several commercial SMB/CIFS implementation out there. Sure, but non available to buy

Re: [Samba] About NAS versus Samba

2013-07-11 Thread Gaiseric Vandal
On 07/11/13 12:29, Fernando Lozano wrote: Hi, what about the samba running on your NAS. I did a lot of NAS hacking pointing a running samba/winbind config of the vendor to my nt-style samba/ldap domain . But if you do so be aware you are loosing your support :-). So if you can change the

Re: [Samba] About NAS versus Samba

2013-07-11 Thread Gaiseric Vandal
If you use raid you should either use a true hardware raid (e.g from LSI or Adaptec) or true software raid. The firmware raid (aka fake raid) included on some motherboards is just asking for trouble.For the price of the true hardware raid card you might as well stick with software raid.

Re: [Samba] Messed up SIDs: How to change machine SID?

2013-07-03 Thread Gaiseric Vandal
I have an LDAP backend. In LDAP, the machine accounts for my windows and linux clients so show the same base SID as the domain SID (ie.. all but the last digits.) However I also have the mismatch with net getdomainsid - which definately explains why they don't behave as I would expect.

Re: [Samba] file server or member server?

2013-07-01 Thread Gaiseric Vandal
On a very general level , a member server is joined to the domain so that it can use the domain accounts.A member server is typically a file server but does not have to be (you could be using it as a web server, or application server or even a workstation.) A domain controller

Re: [Samba] file server or member server?

2013-07-01 Thread Gaiseric Vandal
-07-01 at 09:59 -0400, Gaiseric Vandal wrote: [SNIP] A domain controller can be a file server, although in many cases a domain controller will only provide authentication and logon functions.It does need to have file shares to provide access to to the logon scripts and profile directories

Re: [Samba] file server or member server?

2013-07-01 Thread Gaiseric Vandal
Good explanation. Better than mine. I tend to think of the roaming profiles as part of the logon experience, since they sync with your computer when you logon. Actually, I found roaming profiles to be more trouble than they were worth so I don't use them anyway. On 07/01/13 17:36,

Re: [Samba] Samba+LDAP: NT_STATUS_UNSUCCESSFUL because of primary group SID mismatch

2013-06-20 Thread Gaiseric Vandal
If I follow correctly the LDAP server is NOT in the domain? The Samba accounts should be using the SID of the Samba PDC not the SID of the LDAP server. This of course means that a Samba member server can't use the same LDAP back end (at least for Samba authentication.) Long and short

Re: [Samba] Samba+LDAP: NT_STATUS_UNSUCCESSFUL because of primary group SID mismatch

2013-06-20 Thread Gaiseric Vandal
Users (S-1-5-32-545) - Builtin Users getent group Builtin Admins Builtin Admins::544: # getent group Builtin Admins On 06/20/13 10:40, Philipp Lies wrote: On 20.06.2013 15:04, Gaiseric Vandal wrote: If I follow correctly the LDAP server is NOT in the domain? The Samba accounts should be using

Re: [Samba] Problems when saving AutoCAD files

2013-06-20 Thread Gaiseric Vandal
Is this on all saves ? Can you do a save as and create a new doc? I had an issue with Office 2003 on Samba 3.0.x , Solaris 10 with ZFS file system.For the 1st 6 saves the MS app would modify the file. Every 7th (?) save MS would delete the file and write a new one. The probably

Re: [Samba] Samba + LDAP: Issue adding machine.

2013-06-14 Thread Gaiseric Vandal
check again but I believe it MAY be the problem :) Also, can this cause this problem? Another machine was already created previously... something like? 2013/6/10 Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com I found that Samba 3.5.x has trouble creating

Re: [Samba] Samba + LDAP: Issue adding machine.

2013-06-10 Thread Gaiseric Vandal
I found that Samba 3.5.x has trouble creating the LDAP attributes correctly on new machine accounts . I think Samba 3.4.x was OK. Rejoining a machine to a domain was usually OK. You need may need to do a mix of account creation with smbpasswd and LDAP modification with the LDAP editor.

Re: [Samba] Configuring New Replacement Server For Samba

2013-06-03 Thread Gaiseric Vandal
run the testparm -v command - that will show you the location of key files and directories including smb.conf private directory (which typically contains the smb passwd file) the lock and cache directory or directories (which include various TDB files.) netlogon directory (including netlogon

Re: [Samba] Looking for compiled version 1.9 of Samba - revised

2013-05-30 Thread Gaiseric Vandal
What do you mean bridge? Are you trying to make files accessible to windows users ? It looks like GCC binaries are availble for SCO- althou maybe not your version. http://gcc.gnu.org/install/binaries.html ftp://ftp2.sco.com/pub/skunkware/odt3/CD-ROM/bin/ On 05/29/13 19:52, Paul Davis

Re: [Samba] BDC needs a [profile] and [netlogon] share ?

2013-05-24 Thread Gaiseric Vandal
I looked through the smb.conf man page.It looks like login script should be relative to the netlogon directory.I would set up identical netlogon directories on both PDC and BDC. Bothe machines have the same login script parameter .e.g. logon script = %U.bat This means

Re: [Samba] Samba 3.x server with LDAP backend doesn't work

2013-05-16 Thread Gaiseric Vandal
Did you try w/o start TLS support? I realize this can have security implications, so this is only to see if the problem is with TLS or with the configuration in general. It the LDAP server is on the same server as the samba server then I don't think you will need TLS encryption, since there

Re: [Samba] Samba 3.x server with LDAP backend doesn't work

2013-05-16 Thread Gaiseric Vandal
And just to clarify you can use ldapsearch with the samba admin credentials as well? What is the ldap server? (Openldap ?) On 05/16/13 16:44, Gollapalli, Prakash wrote: Did you try w/o start TLS support? I realize this can have security implications, so this is only to see if the

Re: [Samba] win 7 client can't map drive: getpeername failed

2013-05-13 Thread Gaiseric Vandal
resolve order = host bcast On 10 May 2013 16:19, Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com wrote: Are XP clients having the same problem? Trying with an XP client would help indicate if there was something specific to XP. (I skipped vista

Re: [Samba] win 7 client can't map drive: getpeername failed

2013-05-10 Thread Gaiseric Vandal
I think the Error was Transport endpoint is not connected warnings are sometimes misleading. Do you have any control over the samba config (smb.conf) on the NAS ?On regular samba installs, changing the default port settings can cause more problems. Windows 7 will try to connect on port

Re: [Samba] win 7 client can't map drive: getpeername failed

2013-05-10 Thread Gaiseric Vandal
/138/139 If i use the IP I get exactly the same error :( On 10 May 2013 15:01, Gaiseric Vandal gaiseric.van...@gmail.com wrote: I think the Error was Transport endpoint is not connected warnings are sometimes misleading. Do you have any control over the samba config (smb.conf) on the NAS

Re: [Samba] Building 3.6.12

2013-05-08 Thread Gaiseric Vandal
Had you posted about this last month? For active directory support you will need to compile OpenLDAP. The ldap functionality in Solaris is NOT openldap. I would that you will need to specify the path to the kerberos directory. Solaris 9 and Solaris 10 have kerberos installed by default.

Re: [Samba] Build 3.6.12 on Solaris 8

2013-05-01 Thread Gaiseric Vandal
Longer term you might just want to look at moving to Solaris 10, since it has samba 3.6.x included already.So much simpler than compiling.Although ZFS support does add new complications. That being said, I did have some luck compiling samba 3.4.x on Solaris 10 (prior to Sun/Oracle

Re: [Samba] Build 3.6.12 on Solaris 8

2013-05-01 Thread Gaiseric Vandal
accounts so LDAP is not necessary. Did you build Kerberos or any other S/W before samba? TIA -Kevin -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Gaiseric Vandal Sent: Wednesday, May 01, 2013 8:29 AM To: samba@lists.samba.org

Re: [Samba] EXTERNAL: Re: SAMBA bringing NFS server to a halt

2013-03-06 Thread Gaiseric Vandal
A few things aren't clear- - Are Solaris and RHEL servers mounting shares from the primary server as samba clients or NFS clients? - Are people running SVN and Eclipse on Windows or RHEL systems? - Are you using samba to reshare NFS shares? I run a mixed environment of Windows and

Re: [Samba] EXTERNAL: Re: SAMBA bringing NFS server to a halt

2013-03-06 Thread Gaiseric Vandal
Presuming you have a RHEL subscription, you should be able to download the ISO's and patches on an internet machine and xfr via sneaker net (USB drive, DVD) to the internal network. You can even set up an internal yum repository. Even with out an internet connection, you still have to

Re: [Samba] no network interfaces found on OpenIndiana (Illumos)

2013-03-06 Thread Gaiseric Vandal
Solaris 11 added a CIFS server - I don't know if it is openindiana. check the svcs -a command to make sure that there isn't a preexisting CIFS or samba server already running. FYI The latest Solaris 10 + updates has samba 3.5.x or 3.6.x . I had issues with older samba packages from

Re: [Samba] ldap/shared address books

2013-03-06 Thread Gaiseric Vandal
Can you use an LDAP Browser/Editor (e.g Apache Directory Studio) to manage the samba ldap server? Maybe see what attributes you can add/modify?I have used Apache Directory Studio to modify LDAP attributes with Microsoft AD on Win 2003/2008. I would guess the samba 4 ldap schema has to

Re: [Samba] BDC Rejecting auth request from client + Windows 7

2013-02-08 Thread Gaiseric Vandal
I don't quite understand- why does the BDC have a dynamic IP address. Or have a I misunderstood? The DHCP server can provide the IP of the WINS servers to DHCP clients.Are the XP and Win 7 workstations on a separate subnet than the servers? What version are the samba servers?Do both

Re: [Samba] Samba 3 master browser on two networks plus WINS

2013-01-03 Thread Gaiseric Vandal
Is samba bound to a subnet1 interface only or all interfaces. Can subnet2 clients connect to samba via either IP? Are subnet2 clients supposed to be using samba services via the subnet1 IP or the subnet2 IP on the server?The first would involve going thru the firewall, which seems

Re: [Samba] Samba 3 master browser on two networks plus WINS

2013-01-03 Thread Gaiseric Vandal
Presumably pc on subnet1 does NOT need to access a share from 192.168.7.1 since it can access 192.168.5.1. Presumably pc on subnet2 does NOT need to access a share from 192.168.5.1 since it can access 192.168.7.1. If you have a dual homed server + a router between subnets your routing could

Re: [Samba] Samba 3 master browser on two networks plus WINS

2013-01-03 Thread Gaiseric Vandal
is not the problem. Then what is ? From: Gaiseric Vandal gaiseric.van...@gmail.com To: samba@lists.samba.org Sent: Thursday, January 3, 2013 11:02 PM Subject: Re: [Samba] Samba 3 master browser on two networks plus WINS Presumably pc on subnet1 does NOT need

Re: [Samba] Windows Authentication

2013-01-02 Thread Gaiseric Vandal
How are you trying to connection? From a Windows 7 machine? A Windows XP machine? Are you using the net use command in windows? On 01/01/13 14:36, samba.1...@9ox.net wrote: Greetings Samba: I thought I knew something about servers and networks but Samba has me stumped... I built a clean

Re: [Samba] windows 8 jointo samba 3 domain

2012-12-18 Thread Gaiseric Vandal
Samba 3 emulates an NT4-type domain. So the NETBIOS version of the domain name (XX) is correct. The DNS name is would only be for an Active Directory type domain (Windows 200x or Samba 4 servers.) On 12/18/12 09:27, Alexandr Seidl wrote: Hi ... I have problem join win 8 pro to samba

Re: [Samba] static only wins server

2012-12-18 Thread Gaiseric Vandal
If your windows clients use login scripts to map drives, then they don't need WINS at all, since they resolve hosts via DNS. However, if a client isn't using wins it will still use netbios browser to locate resource on the network.I am not sure if you can totally defeat this by pointing

Re: [Samba] not able to log on (PDC with ldap backend)

2012-12-17 Thread Gaiseric Vandal
Hi Attachments are not supported on the mailing list. Does the pdbedit -Lv /machinename$/ command on the samba server show the machine account?The account flags should be [W ] only. In LDAP, you should see the following attributes objectClass=sambaSamAccount sambaNTPassword

Re: [Samba] not able to log on (PDC with ldap backend)

2012-12-17 Thread Gaiseric Vandal
But do you see Account Flags: [W ] for the Vista machine account? Did you also see a machine account for the samba PDC itself? It should include Account Flags:[S ] Are is the Vista client configured to use WINS? On 12/17/12 10:29,

Re: [Samba] Samba4 - Windows 200x DNS Migration

2012-12-13 Thread Gaiseric Vandal
Windows 200x AD DC's do not require that the DNS master is on a WIn 2003 AD server. You need a BIND9 compatible server with dynamic updates preferably enabled. If dynamic updates are not enabled then when a Windows machine joins the DC it will dump out DNS records that need to be added to

Re: [Samba] Samba file server using ldap backend without AD or PDC?

2012-11-30 Thread Gaiseric Vandal
Can you clarify one thing - why are you using the sambaNTPassword in openldap if openldap is not currently used samba authentication? I would have thought that you would use the standard password field. I use Samba 3.x DC's with an ldap back end. I also use the ldap backend for unix

Re: [Samba] Samba file server using ldap backend without AD or PDC?

2012-11-30 Thread Gaiseric Vandal
On 11/30/12 09:42, Brian Gold wrote: On 2012-11-30 9:22 am, Gaiseric Vandal wrote: Can you clarify one thing - why are you using the sambaNTPassword in openldap if openldap is not currently used samba authentication? I would have thought that you would use the standard password field. We

Re: [Samba] Samba file server using ldap backend without AD or PDC?

2012-11-30 Thread Gaiseric Vandal
the samba accounts in LDAP but I suspect that either it won't preserve the existing password OR it may refuse to create the account. On 11/30/12 12:38, Brian Gold wrote: On 2012-11-30 11:15 am, Gaiseric Vandal wrote: No, you wouldn't sync passwords to TDB. Does your LDAP entry

Re: [Samba] Samba file server using ldap backend without AD or PDC?

2012-11-30 Thread Gaiseric Vandal
On 11/30/12 16:11, Brian Gold wrote: On 2012-11-30 4:01 pm, Gaiseric Vandal wrote: So when you run pdbedit -Lv for a user, is the Unix user name is an account in ldap? If that is the case, then you probably just want to have a script that runs that runs thru a list of user names and they runs

Re: [Samba] Local Administrator access

2012-11-26 Thread Gaiseric Vandal
With Windows7, the 1st account you create during the initial setup is typically a member of the local admin group. The actual Administrator account is normally disabled. Did this 1st account get deleted? When you joined the domain, the Domain Admin's groups should have been added to the

Re: [Samba] Local Administrator access

2012-11-26 Thread Gaiseric Vandal
then the domain administrator credentials should not be needed.) Are you sure the PC was joined to the domain? On 11/26/12 10:51, Knut Olav Bøhmer wrote: 2012/11/26 Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com With Windows7, the 1st account you create during

Re: [Samba] help

2012-11-16 Thread Gaiseric Vandal
Is this samba 3.x Samba 3.x domains and domain controllers function like Windows NT4 domains. They are not like Windows 200x Active Directory servers and domains. The domain name has to be a simple netbios compatible name. A single name not fqdn. I do not believe that . are a valid

Re: [Samba] using samba similar to windows shares

2012-10-09 Thread Gaiseric Vandal
You can have the share permissions granting access to everyone , and then use file system permissions to limit the access to the appropriate groups for each folder. This is the same approach you would use with a real Windows server. On 10/09/12 16:17, 鱼 wrote: Hi, I would like to share a

Re: [Samba] Share working with IP not with hostname

2012-09-12 Thread Gaiseric Vandal
On 09/10/12 13:52, Nitin Thakur wrote: hi guys I managed to setup the share. I am able to access the share with IP address, but as soon as I try to do it via hostname, I get a user name and password pop up, which always fail to authenticate. Any setting I am missing? Thanks nitin

Re: [Samba] Samba complie problem

2012-08-31 Thread Gaiseric Vandal
Compiling Samba on Solaris 10 can be a real challenge. A lot of the issues seem to be related to the old version of ld. I would expect that you would have more luck on Solaris 11 but I have not tried it yet. I ended up using Sun Studio and dmake. If you can look for older posts from me

Re: [Samba] join domain from different subnet (VPN)

2012-08-30 Thread Gaiseric Vandal
Did you try a packet capture on the samba server? Try adding a entry for the XP machine in the server's /etc/hosts file. I am guessing there is some sort of weird name resolution issue going on with the server.I don't think there is any reason the server should need to resolve the name of

Re: [Samba] join domain from different subnet (VPN)

2012-08-30 Thread Gaiseric Vandal
via OpenVPN with dedicated routers on each side. thx Carsten -Original message- To: samba@lists.samba.org; From: Gaiseric Vandal gaiseric.van...@gmail.com Sent: Thu 30-08-2012 14:58 Subject: Re: [Samba] join domain from different subnet (VPN) Did you try a packet

Re: [Samba] Samba PDC: Admin tools?

2012-08-30 Thread Gaiseric Vandal
I use apache directory studio for LDAP management. It is not samba specific but it is easy enough to use existing user, group or machine objects as templates for new ones. It runs on Windows and Linux (and maybe on Mac.) On 08/25/12 16:39, John Drescher wrote: On Sat, Aug 25, 2012 at 4:34

Re: [Samba] Problems connecting win7 client to new Samba PDC

2012-08-10 Thread Gaiseric Vandal
The Domain Users group should have automatically been added to the local users group when you joined the domain. When I upgraded from Samba 3.0.x to 3.5.x I had a error in the group mappings on one of the DC's that cause problems for a while. I also had to explicitly add a mapping for the

Re: [Samba] Add machines for join a domain

2012-08-10 Thread Gaiseric Vandal
Do you mean when you join a Linux machine to the domain? Or do you mean when you join a Windows machine to the domain. You do need a unix account for all machines that will be in the domain. You can configure samba to automatically create the LDAP accounts for machines when they are added. I

Re: [Samba] samber server in openvz container - venet oder veth0?

2012-08-10 Thread Gaiseric Vandal
If you don't use WINS, and you are trying to log into the domain, the client will broadcast for a DC server. This normally works OK if everything is on the same LAN. If broadcast doesn't work, the using WINS helps find the DC's- since the WINS database on the WINS server includes name-to-ip

Re: [Samba] 3.0.9-3.0.37 Deleting files not working

2012-08-09 Thread Gaiseric Vandal
I ran into issues when I switched to zfs. the problem is that ZFS ACL's seem be more similar to NTFS ACL's (compared to UFS-NTFS compatibility.) But you can run into an issue were perms that are additive in unix are interpreted as least permissive or deny trumps all in Windows. For example,

Re: [Samba] Problems connecting win7 client to new Samba PDC

2012-08-09 Thread Gaiseric Vandal
did you make the appropriate registry changes on Win 7 as per http://wiki.samba.org/index.php/Windows7 On 08/09/12 09:28, Brandon wrote: Here's some more information on my problem: smb.conf: --- begin smb.conf --- [global] workgroup = MYWORKGROUP server string = %h

Re: [Samba] Samba 3.3.4 - Win7 Latency with MS Office files

2012-08-09 Thread Gaiseric Vandal
Did you try enabling the name service caching daemon on the server? (has its pros can cons.) I would also try XP+Office 2010 and WIn 7+ Office 2007 to see if you can shake out which is the actual problem. Also, can you configure office to store temp files on the local PC, and not the same

Re: [Samba] LDAP - Samba password synchronization

2012-08-09 Thread Gaiseric Vandal
The best approach is to configure samba to change the ldap password when a samba password changes. See the smb.conf man page and password sync and password chat options. If you have unix users who want to change their ldap passwords, tell them to use the smbpasswd -r pdc_server_name command- if

Re: [Samba] Problems connecting win7 client to new Samba PDC

2012-08-09 Thread Gaiseric Vandal
that looks OK. You should not need a login script defined for a computer account. Are you able to login as the Domain Administrator? Are your group mappings correct? I ask because it may be that the Domain Users is not properly recognized as a member of the Users group on the PC. Can you

Re: [Samba] Samba 3.3.4 - Win7 Latency with MS Office files

2012-08-09 Thread Gaiseric Vandal
as well. -john At 9:50 AM -0400 8/9/12, Gaiseric Vandal wrote: Did you try enabling the name service caching daemon on the server? (has its pros can cons.) I would also try XP+Office 2010 and WIn 7+ Office 2007 to see if you can shake out which is the actual problem. Also, can you configure

Re: [Samba] password change problem and no logon servers available

2012-08-08 Thread Gaiseric Vandal
Is this a single domain controller environment (1 PDC) or do you also have one or more BDC's? Are you using WINS? that should help clients find domain controllers. Is there is difference between XP and Windows 7 clients? As you probably know, you can login to a windows machine with

Re: [Samba] 3.0.9-3.0.37 Deleting files not working

2012-08-08 Thread Gaiseric Vandal
zfs or ufs? On 08/08/12 08:01, ing...@gmx.net wrote: Hello, we were using Samba 3.0.9 on Solaris 10 x86 and Sparc in a productive environment and upgraded to 3.0.37 to fix a security vulnerability. Now we experience problems in some circumstances when we try to delete a file from a share

Re: [Samba] password change problem and no logon servers available

2012-08-08 Thread Gaiseric Vandal
sambaForceLogoff: -1 sambaMinPwdLength: 4 sambaLockoutDuration: 30 sambaLockoutObservationWindow: 30 gidNumber: 1049 sambaNextRid: 1028 uidNumber: 1209 2012/8/8 Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com Is this a single domain controller environment (1 PDC

Re: [Samba] password change problem and no logon servers available

2012-08-08 Thread Gaiseric Vandal
Scholz wrote: I'm not using XP anymore.. and I meant that I applied the http://wiki.samba.org/index.php/Windows7 stuff before adding the computers to the domain 2012/8/8 Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com 3. If you were able to join domain and log

Re: [Samba] Samba User authentication from external LDAP server

2012-08-07 Thread Gaiseric Vandal
You need to configure smb.conf with either unix password sync (along with passwd chat and passwd program) or with pam password change I use the unix password sync option- it passes the new password value to a shell script which then calls an ldap server command to change the password.

Re: [Samba] SMB+LDAP

2012-08-07 Thread Gaiseric Vandal
I have a Sun (Oracle) Directory Server directory server backend. I also use it for unix level authentication. Are you configuring samba as a domain controller or standalone server? I have uid and uidNumber attributes- you want to make sure that the samba account maps to a unix account

Re: [Samba] SMB+LDAP

2012-08-07 Thread Gaiseric Vandal
You also need sambaAccountFlags: [UX] for user account and sambaAccountFlags: [W] for machine accounts. On 08/07/12 17:37, Frans Lanting - IT Admin wrote: Hi Folks, A couple of questions about making SMB (3 or 4) authenticate to an external (anonymous) LDAP server: 1) A typical

Re: [Samba] Samba solaris 8 package with Windows 2008 support?

2012-08-02 Thread Gaiseric Vandal
You can check for a precompiled version on blastwave.org. It looks like sunfreeware.com doesn't have the Solaris 8 binaries online anymore. I suspect you will have to compile from source which can be a major PITA on solaris. (if you look for other posts from me on this list you will see

Re: [Samba] Access and group issues on domain member server (PDC is Samba as well)

2012-08-01 Thread Gaiseric Vandal
I think there are two components- 1st I think the domain member does need to run winbind to retrieve windows users and groups from the DC. 2nd, the domain member needs to have idmap configured correctly to make sure that the windows users are properly mapped to the local unix users, so that

Re: [Samba] Samba and LDAP

2012-07-31 Thread Gaiseric Vandal
You can use smbpasswd or pdbedit to add a samba user. Actually, if the LDAP user already exists the smbpasswd or pdbedit command adds various samba attributes. You should look at the LDAP properties of a user before and after you run the smbpasswd -a or pdbedit -a command. I like the Apache

Re: [Samba] Phantom Domain Master Browser

2012-07-31 Thread Gaiseric Vandal
In the /var/samba/locks directory you may have browse.dat file or wins.* (if this is a WINS server) files that have incorrect info. You should be able to name/backup these files and restart nmbd. Is the phantom master browser a samba server or a Windows machine? the Samba DC normally

Re: [Samba] Help infomation to build the system as Microsoft Active Directory !

2012-07-26 Thread Gaiseric Vandal
Many of your questions should be answered on www.samba.org and wiki.samba.org Samba4 provides Active Directory functionality. It is free - you don't have to pay for it, but there is the cost of your time. On 07/24/12 08:08, Ha Minh Ai wrote: Dear Mr/Madam, We have wanted to build

Re: [Samba] Samba 4 AD What's the difference between a Domain and a Forest

2012-07-23 Thread Gaiseric Vandal
A forest contains one or tree, with each tree containing one or more domains. In an AD, you need at least one forest. You would have additional branches if you needed a different top level DNS space. Domains are trusted and trusting. When you install active directory on a server it will

Re: [Samba] Strange behaviour of clients after changing Full Name via pdbedit

2012-07-23 Thread Gaiseric Vandal
Are network drives handled by a login script? If the network script tries to use the username variable to map drives, changing name could break somthing. Are these roaming profiles or local? For local profiles, the local profile name should match the user name. Did that change? Can you

Re: [Samba] Suggestions? Multiple servers/storages one domain

2012-07-06 Thread Gaiseric Vandal
File storage and user authentication are (sort of) separate issues.I would generally avoid true standalone servers, and still use the domain authentication model as much as possible. The additional servers can be member servers or backup domain controllers. I had trouble keeping user id

Re: [Samba] DNS issue.

2012-06-27 Thread Gaiseric Vandal
Does your DNS server allow client machines to update? I can't speak for Samba 4 but I would with Windows 200x DC's it was simpler to temporarily allow DNS updates while adding a DC. On 06/26/12 23:59, Pradeep Pal wrote: Hi All; Can any one help me, i am facing DNS related issue. this is my

Re: [Samba] unable to log on to Samba shares remotely

2012-06-26 Thread Gaiseric Vandal
When you say remotely you mean from another computer. Or do you mean from another subnet? If you recreated both samba accounts, and the two accounts behave differently, then the problem may be in the underlying unix account. Are the unix accounts defined in /etc/passwd? I also find it

[Samba] Fwd: Trying to update samba

2012-06-26 Thread Gaiseric Vandal
Typically, RPM's from RedHat or Fedora are pretty dependent on glibc and other system libraries. Newer version of RedHat will have newer versions of glibc, so the official packages are often not compatible with older versions. Sernet may have precompiled RPM's that may be useful.

Re: [Samba] Fwd: Trying to update samba

2012-06-26 Thread Gaiseric Vandal
If you don't want to spend money on RHEL, you can always look at CentOS (which is a clone of RHEL) or Fedora. I don't now if you can do an upgrade installation from RHEL to CentOS or Fedora. I think not. But since either OS will support the ext3 file system used by RHEL, you should be able

Re: [Samba] Two attempts required to join domain

2012-06-17 Thread Gaiseric Vandal
You could put the machines in a sub container under people- , or have people and computers as subs under user accounts- that way samba can search the entire accounts or people subtree BUT you can restrict other LDAP services that use people to not be recursive. -Original Message- From:

Re: [Samba] Samba 64 bit compilation

2012-06-15 Thread Gaiseric Vandal
-Original Message- From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Thursday, June 14, 2012 2:49 AM To: Murugan, Prabu; Samba Subject: Re: Samba 64 bit compilation Which platform? If on Solaris 10 sparc, GCC (either from Sun or sunfreeware.com) should be 64-bit

Re: [Samba] how to automount a kerberos cifs share

2012-06-13 Thread Gaiseric Vandal
How about if you use NFS v4 with kerberos instead of CIFS? On 06/13/12 14:58, steve wrote: Hi I have an automount map: * -fstype=cifs,sec=krb5 ://server/share/ It works fine, but only if Administrator has tickets. I can't do that on every client! Is there any way I can store the

  1   2   3   4   5   6   7   >