Re: [Samba] Samba 64 bit compilation

2012-06-13 Thread Gaiseric Vandal
Which platform? If on Solaris 10 sparc, GCC (either from Sun or sunfreeware.com) should be 64-bit by default. GCC from Sunfreeware for Solaris 10 x86 will compile 32-bit by default. For Solaris, you are better off using Sun Studio and Dmake. Actually, you are better off just using the compiled

Re: [Samba] how to automount a kerberos cifs share

2012-06-13 Thread Gaiseric Vandal
On 06/13/12 17:08, steve wrote: On 13/06/12 21:10, Gaiseric Vandal wrote: How about if you use NFS v4 with kerberos instead of CIFS? On 06/13/12 14:58, steve wrote: Hi I have an automount map: * -fstype=cifs,sec=krb5 ://server/share/ It works fine, but only if Administrator has tickets

Re: [Samba] ldapsam_getgroup

2012-06-08 Thread Gaiseric Vandal
39901 in my base. Do you think that it could be the fact that samba doesn't recognize the password policy of LDAP ??? Cédric 2012/6/8 Gaiseric Vandal gaiseric.van...@gmail.com Well known groups are things like Domain Administrators and Administrators - they always have the same SID

Re: [Samba] ldapsam_getgroup

2012-06-08 Thread Gaiseric Vandal
for group: 513 2012/6/8 Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com That looks good.Not all well known groups need to be mapped. Domain Admins is one of the groups that needs to be. I would add mappings for “Authenticated Users” and some

Re: [Samba] Access denied from Windows XP and Mac

2012-06-07 Thread Gaiseric Vandal
Are the XP machines domain members? What are the permissions set on the , for example, Murthy directory? Either your permissions are set wrong OR samba is not correctly mapping your samba user to the underlying unix account.Just because the share permissions are correct doesn't mean the

Re: [Samba] ldapsam_getgroup

2012-06-07 Thread Gaiseric Vandal
You may need to set up unix groups and domain mappings for some additional windows well known groups (google for windows well known groups.) on my server I can see my group mappings: # net groupmap list . Domain Users (S-1-5-21-x--x-513) - Domain Users Administrators

Re: [Samba] ldapsam_getgroup

2012-06-07 Thread Gaiseric Vandal
-directories but I cannot see any individual files. I have been working on this for about 3 days now. I am really frustrated why things have to to so complicated. Murthy On Jun 7, 2012, at 9:46 AM, Gaiseric Vandal wrote: You may need to set up unix groups and domain mappings for some

Re: [Samba] samba / openldap upgrade

2012-06-06 Thread Gaiseric Vandal
What OS are you running? You should do the openldap upgrade separate from the samba upgrade. Depending your OS version you may have packages to update openldap or samba. If you are using linux you may have minor upgrades available as packages which may fix known bugs. You should make a

Re: [Samba] group policy client service failed the logon

2012-06-06 Thread Gaiseric Vandal
Can you look at the LDAP entries for each user? Can you disable the password must change date entry? I don't know if you can do that via pdbedit. You may be able to clear it out in LDAP. I think samba calculates that field based on the password policy and when the user last changed his or her

Re: [Samba] Migrating to new hardware

2012-06-04 Thread Gaiseric Vandal
Run testparm -v - you will probably want to copy over the /var/samba/locks directory lock directory = /var/samba/locks state directory = /var/samba/locks cache directory = /var/samba/locks pid directory = /var/samba/locks You also want to make sure your netlogon

Re: [Samba] group policy client service failed the logon

2012-06-04 Thread Gaiseric Vandal
Maybe the group membership or primary group is getting messed up for the new users? Can you compare the unix, ldap and windows group properties for a new and an older user #pbdedit -Lv username # net rpc user info username -U administrator # groups username -Original Message- From:

Re: [Samba] User can only login as admin, group policy fails the logon otherwise

2012-06-02 Thread Gaiseric Vandal
Can you clarify a few things: - Are the machines now members of a domain? - Is the dmc user a domain user or a local user only? If he is a domain user, how did you migrate him from a local to a domain user account? Does he have the appropriate file permissions to the local profile? When

Re: [Samba] Windows 7 attempting to access Samba over port 80

2012-05-29 Thread Gaiseric Vandal
Since it is port 80, can you capture the contents of the packets? It might be Outlook trying to autoconfigure a mail account? Outlook will poke around on several ports trying to locate a mail server. I believe Windows clients should try to connect on port 445 then fall back to 137-139.The

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-25 Thread Gaiseric Vandal
forward to trying it. - aurf On May 25, 2012, at 2:31 AM, Collen wrote: Hi, why not export with pdbedit and then import it again ?! no converting needed... (except for smb.conf that is.) cheers. On 25-5-2012 0:01, Gaiseric Vandal wrote: Just what is in the documentation on samba.org

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-25 Thread Gaiseric Vandal
are you and what are you allowed to do). - aurf On May 25, 2012, at 9:44 AM, Gaiseric Vandal wrote: pbdedit will export the Windows password from the SambaNTPassword field (won't it?) My understanding was the pGina was using the unix password in the userPassword field?Or am I wrong

Re: [Samba] Samba compilation issue - trick

2012-05-24 Thread Gaiseric Vandal
In fact, that makes sense- why recompile multiple times if you don't need to do. It should be fine as long as the dependent libraries versions (e.g. glibc, openldap, kerberos etc) are the same or at least close enough. If you had a library mismatch you would probably find that out as soon

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-24 Thread Gaiseric Vandal
Presumably with the PGINA/LDAP solution, the has method is something unix-compatible (e.g. unix crypt+md5, or SSHA) that is hard to break with a password cracking program? Are the LDAP transmissions done in the clear? If so, you could sniff the traffic and capture the passwords. (You may

Re: [Samba] exported LDAP DB file smbpasswd?

2012-05-24 Thread Gaiseric Vandal
On May 24, 2012, at 5:35 PM, Gaiseric Vandal wrote: Presumably with the PGINA/LDAP solution, the has method is something unix-compatible (e.g. unix crypt+md5, or SSHA) that is hard to break with a password cracking program? Are the LDAP transmissions done in the clear? If so, you could

Re: [Samba] Samba compilation issue

2012-05-20 Thread Gaiseric Vandal
samba - A Windows SMB/CIFS fileserver for UNIX (Usr) From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Saturday, May 19, 2012 5:33 PM To: Murugan, Prabu Cc: samba@lists.samba.orgmailto:samba@lists.samba.org Subject: RE: Samba compilation issue I don’t know if installing

Re: [Samba] Samba compilation issue

2012-05-19 Thread Gaiseric Vandal
error. Not sure why libtalloc is still considered when we run “./configure --enable-external-libtalloc=no --with-libtalloc=no”. Am I missing something here? Thanks, Prabu From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Friday, May 18, 2012 10:42 PM To: Murugan, Prabu Cc

Re: [Samba] Samba compilation issue

2012-05-18 Thread Gaiseric Vandal
/ 3.4.2 were under /usr/local/samba/. I moved as /usr/local/samba-3.4.2. Thanks, Prabu From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Friday, May 18, 2012 3:52 AM To: Murugan, Prabu; Samba Subject: Re: Samba compilation issue On 05/17/12 18:18, Gaiseric Vandal wrote: On 05

Re: [Samba] Samba compilation issue

2012-05-18 Thread Gaiseric Vandal
the same error. I have attached output of make errors. Reinstalling 3.4.2 didn't helpL. *Thanks,* *Prabu* *From:*Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] *Sent:* Friday, May 18, 2012 9:22 PM *To:* Murugan, Prabu *Subject:* Re: Samba compilation issue Your

Re: [Samba] Samba compilation issue

2012-05-18 Thread Gaiseric Vandal
. *Thanks,* *Prabu* *From:*Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] *Sent:* Friday, May 18, 2012 10:25 PM *To:* Murugan, Prabu; Samba *Subject:* Re: Samba compilation issue your configure syntax looks correct One major issue I ran into was the ld (linker) command. Gcc

Re: [Samba] Samba compilation issue

2012-05-17 Thread Gaiseric Vandal
On 05/17/12 11:15, prabu.muru...@emc.com wrote: Hi, As a security concern we are upgrading samba to 3.4.17. I tried all possible option to compile samba 3.4.17 on Solaris 10_U10. But it is not going through. User requirement is to compile samba 3.4.17 to support their application.

Re: [Samba] Samba compilation issue

2012-05-17 Thread Gaiseric Vandal
On 05/17/12 18:18, Gaiseric Vandal wrote: On 05/17/12 11:15, prabu.muru...@emc.com wrote: Hi, As a security concern we are upgrading samba to 3.4.17. I tried all possible option to compile samba 3.4.17 on Solaris 10_U10. But it is not going through. User requirement is to compile

Re: [Samba] would like to use samba3 pdc, no ldap account backend db, but use ldap for authN

2012-05-16 Thread Gaiseric Vandal
On 05/16/12 09:24, Jon Detert wrote: - Original Message - From: Volker Lendecke volker.lende...@sernet.de To: Jon Detert jdet...@infinityhealthcare.com Cc: samba@lists.samba.org Sent: Wednesday, May 16, 2012 1:28:51 AM Subject: Re: [Samba] would like to use samba3 pdc, no ldap

Re: [Samba] Samba 3.4.17 -Solaris10_U10- make- Fatal error with talloc

2012-05-15 Thread Gaiseric Vandal
Solaris 10 patches include samba. On Solaris 10 sparc 119757-21 (3.5.10) or 119757-22 (3.6.4) On Solaris 10 x86 119758-21 (3.5.10) or 119758-22 (3.6.4) A lot easier than compiling from scratch. Make sure you set LD_LIBRARY_PATH. If using GCC to compile you may also need to set compiler

Re: [Samba] Setting up Samba and CentOS 6.2 IPA

2012-05-11 Thread Gaiseric Vandal
I have a similar enviroment. Samba should be sufficient. There are actually two problems to solve. The first is how do you have a unified unix account back end. The 2nd is how do you have unified windows back end. Samba as a domain controller will provide the unified windows backend.

Re: [Samba] : Server's root name change when log-in

2012-05-09 Thread Gaiseric Vandal
When you join the machine to the domain you should be prompted for credentials of someone who has permissions to join the computer to the domain -this is normally the domain administrator or someone in the domain administrators group. Users who are not domain administrators should not be

Re: [Samba] : Server's root name change when log-in

2012-05-09 Thread Gaiseric Vandal
On 05/09/12 09:57, Thibaut Jacob wrote: On 09/05/2012 15:27, Gaiseric Vandal wrote: When you join the machine to the domain you should be prompted for credentials of someone who has permissions to join the computer to the domain -this is normally the domain administrator or someone

Re: [Samba] Help with migration

2012-05-07 Thread Gaiseric Vandal
You may want to set up a test environment. I have not been able to get NTLMv2 working properly. I believe enabling NTLMv2 should still systems to negotiate ver 2 but that didn't happen- at least I was unable to login from a Windows 2003 client with a samba PDC. NTLMv2 uses better encryption

Re: [Samba] after joining the domain the server loose the domain controller

2012-05-04 Thread Gaiseric Vandal
I think what is significant is that this server and the domain controller are on separate TCP/IP subnets (which happen to be on separate VLAN's.) When you do your initial domain join, you specify the name of the domain controller- that name probably resolved via DNS (or may be from /etc/hosts)

Re: [Samba] Help Required

2012-05-04 Thread Gaiseric Vandal
Have you looked at any of the samba documentation? What OS ? Most linux distros (as well as solaris unix) have a precompiled samba version bundled or available.Normally you don't have to worry about the kernel. On 05/04/12 09:24, vaibhav srivastava wrote: On Fri, May 4, 2012 at 6:50

Re: [Samba] winbind stop working

2012-05-04 Thread Gaiseric Vandal
I had a problem with Samba 3.0.x on Solaris 10 some time back. The samba servers were DC's for the domain- they were not in an ADS domain. However I did have domain trusts set up so winbind was required.Winbind would allocate uid's and gid's. There is a cache time value for either winbind

Re: [Samba] mutex.tdb locking errors on Solaris 10

2012-04-26 Thread Gaiseric Vandal
Is this machine a member server or DC? THis looks like an authentication issue.You could try enabling the solaris nscd (name service caching daemon) on member servers to help with flaky authentication connections to a DC. Do you have the same problem with non-NFS mounted directories? Are

Re: [Samba] NFS quotas on Solaris 10

2012-04-26 Thread Gaiseric Vandal
Are these autofs mounts? Are the nfs v4 mounts - I think Solaris 10 will automatically default to NFS v4 when mounting from another Solaris 10 server. Can you run smbd -b on the new and old version and see if the new build omits any crucial modules? On 04/26/12 06:07, Christian Manal wrote:

Re: [Samba] mutex.tdb locking errors on Solaris 10

2012-04-26 Thread Gaiseric Vandal
-Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Gaiseric Vandal Sent: 26 April 2012 15:03 To: samba@lists.samba.org Subject: Re: [Samba] mutex.tdb locking errors on Solaris 10 Is this machine a member server or DC? THis looks like

Re: [Samba] NFS quotas on Solaris 10

2012-04-26 Thread Gaiseric Vandal
easily solve. Most Windows applications won't have an issue with this. Adobe Acrobat will. On 04/26/12 10:24, Christian Manal wrote: On 26.04.2012 16:07, Gaiseric Vandal wrote: Are these autofs mounts? Are the nfs v4 mounts - I think Solaris 10 will automatically default to NFS v4 when

Re: [Samba] Solaris 10 Samba share will not show all directories

2012-04-25 Thread Gaiseric Vandal
What does net view \\servername from the Windows command line shows? how about net view \\server_ip_address from the Windows command line shows? It sounds like the browser database on the master browser is corrupt. Can you rename and let it regenerate? On 04/25/12 10:45, Jerome

Re: [Samba] Solaris 10 Samba share will not show all directories

2012-04-25 Thread Gaiseric Vandal
\\server_ip_address shows the same as above. When you said Can you rename and let it regenerate, did you mean rename the samba server? Regards, j On Wed, Apr 25, 2012 at 7:51 AM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: What does net view \\servername from the Windows command line shows

Re: [Samba] Solaris 10 Samba share will not show all directories

2012-04-25 Thread Gaiseric Vandal
is what I get. # ls -lvd /net/server1/folder2 dr-xr-xr-x 1 root root 1 Apr 25 09:59 /net/server1/folder2 0:user::r-x 1:group::r-x #effective:r-x 2:mask:rwx 3:other:r-x Regards, j On Wed, Apr 25, 2012 at 9:48 AM, Gaiseric Vandal

Re: [Samba] Cannot see usb external drive shares

2012-04-24 Thread Gaiseric Vandal
Have you tried disabling selinux enforcing to at least verify that selinux is a factor? I have found selinux by default restricts apache from accessing non-root partitions even on internal drives. Also, there should be a /var/log/secure log that may be showing the selinux errors.What

Re: [Samba] Problems accessing Windows shares 3.5.8 vs 3.6.3

2012-04-16 Thread Gaiseric Vandal
Had you compiled 3.5.8 from source, or was this the Sun bundled person. You may have noticed that Oracle provides 119757-21 / 119758-21 to upgrade to 3.5.10, although I don't see anything in the readme about it fixing issues with Win 2008 R2. Does smbclient work if you specify host IP instead

Re: [Samba] Samba Standalone Server LDAP Issue

2012-04-16 Thread Gaiseric Vandal
Why is the LDAP server write-only? On 04/16/12 14:48, Michael Arndt wrote: Hello List, i have a Samba Problem that is related to Sambas ldap behaviour. Problem: The standalone server ( no DC !!) tries to write an attribute to an write only ldap Slave is sent via WAN to the master write

Re: [Samba] Samba Standalone Server LDAP Issue

2012-04-16 Thread Gaiseric Vandal
Does your smb.conf file only point to the local read-only server? Does the read-only LDAP server redirect the samba to the write-only LDAP server? Or is the samba server configure for to try both LDAP servers? Can you show the ldap section of your smb.conf file ? If I understand

Re: [Samba] Samba 3.6.4 on Solaris - groups for user inconsistent

2012-04-12 Thread Gaiseric Vandal
Can you add a group mapping for your unix group to a Windows group? (net groupmap add ) If you do a groups triddel on the unix command line, how many groups are you in?Unix groups mapped to Windows groups get double-counted, which can push you over 16 groups.My environment is Samba

Re: [Samba] UID/GID mapping consistency across at least two Linux machines

2012-04-10 Thread Gaiseric Vandal
On 04/10/12 12:29, steve wrote: On 09/04/12 21:00, Gaiseric Vandal wrote: On 04/09/12 13:11, bakytn wrote: I found this: http://lists.samba.org/archive/samba/2004-January/078411.html How to implement a scenario? Are you using winbind for idmapping? The files you want may be /var/samba

Re: [Samba] UID/GID mapping consistency across at least two Linux machines

2012-04-09 Thread Gaiseric Vandal
On 04/09/12 13:11, bakytn wrote: I found this: http://lists.samba.org/archive/samba/2004-January/078411.html How to implement a scenario? but..how about simpler way...like, may be, running rsync to copy necessary fiels from server 1 to server 2. I could do this..but I don't know which

Re: [Samba] Samba LDAP Failover

2012-03-31 Thread Gaiseric Vandal
I don't think Samba (depending on the version) supports multiple ldap backends.You should have samba_server_1 using ldap_server_1 and samba_server_2 using ldap_server_2. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of

Re: [Samba] Problem authenticating users from openldap + samba

2012-03-29 Thread Gaiseric Vandal
Can you grep 1.3.6.1.4.1.7165.2.1.24 in both your existing schema file as well as the standard samba schema LDIF file? Do you have an LDAP Browser/Editor (e.g. Apache Directory Studio) that you can use to browse LDAP?The existing entry may actually be correct. Could you make a copy of

Re: [Samba] Is the PDC always needed?

2012-03-28 Thread Gaiseric Vandal
by using the map network drive dialog in windows. On Tue, Mar 27, 2012 at 1:27 PM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: Ah. I wasn't clear on the domain authentication issue. Are users unable to see shares? Or are they just unable to authenticate to them once they see them. Also

Re: [Samba] Samba PDC with Windows 7 support request

2012-03-28 Thread Gaiseric Vandal
On 02/16/12 06:21, Dermot wrote: 2012/1/31 Jiří Procházka jiri.procha...@norbou.com: Dear Samba support team, I have a question on Samba 3.5.8 please, which is not solved by searching the forums. I tried all suggested solutions, but nothing take effect. ... Domain users experience a slow

Re: [Samba] Migrating to new domain

2012-03-28 Thread Gaiseric Vandal
Do users need to share files with each other? You could set up trusts between the new and old domain, so that users on the new domain can still access files on the old domain. You could also use NFS or autofs to share home directories between samba servers, then have the samba server reshare

Re: [Samba] Migrating to new domain

2012-03-28 Thread Gaiseric Vandal
. It means I can test on a semi-live environment rather than a totally segregated one. Thanks for the input. On Wednesday, March 28, 2012 08:59 AM CDT, Gaiseric Vandal gaiseric.van...@gmail.com wrote: Do users need to share files with each other? You could set up trusts between the new

Re: [Samba] Is the PDC always needed?

2012-03-27 Thread Gaiseric Vandal
To break the problem into 3 separate parts: 1. Logging in to a domain controller when the domain controller is on a different subnet. 2. Accessing file shares when the domain controller is on a different subnet. 3. LDAP backend. 1. Logging into the domain controller If the clients don't

Re: [Samba] NT4 PDC w/Exchange 5.5 migration

2012-03-27 Thread Gaiseric Vandal
On 03/27/12 12:49, Chris Smith wrote: On Tue, Mar 27, 2012 at 12:28 PM, Chris Weisscwe...@gmail.com wrote: to clarify, this sounds kind of like you are running exchange on the PDC? Indeed. you can't demote an NT4 PDC to a stand alone or member server, it requires a re-install. Officially,

Re: [Samba] Is the PDC always needed?

2012-03-27 Thread Gaiseric Vandal
turning up the log level I only see 'check_ntlm_password' on the PDC) On Tue, Mar 27, 2012 at 11:19 AM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: To break the problem into 3 separate parts: 1. Logging in to a domain controller when the domain controller is on a different subnet. 2

Re: [Samba] Is the PDC always needed?

2012-03-27 Thread Gaiseric Vandal
)? If they are using the hostname of the file share server, then isnt authentication happening on that server? Users are not logging onto our domain on their machines, simply accessing their share. On Tue, Mar 27, 2012 at 1:01 PM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: There are several factors

Re: [Samba] Suggestions for moving a PDC function

2012-03-26 Thread Gaiseric Vandal
On 03/26/12 04:56, Arnold Krille wrote: Hi, On 03/24/2012 08:09 PM, Simon Matthews wrote: I currently have a server which is both the PDC for my domain and the file server for the network. I need to split these functions and move the PDC function to another box, while leaving the original

Re: [Samba] Users can't login any more

2012-03-23 Thread Gaiseric Vandal
Samba 3.5.3 should recent enough to work properly. You should probably trouble shoot your Windows 98 and XP machines separately. Do you have any real XP machines? Were you XP machines working prior to this problem? Do you get the errors in the smbd log everytime you restart samba? Have

Re: [Samba] adding a win7 computer

2012-03-21 Thread Gaiseric Vandal
On 03/21/12 10:45, anna-karin.bur...@bjurholm.se wrote: Hi, I am having problems adding a windows 7 professional to the domain. What am I doing wrong? I have added lots of XP computers without problems. It says the domain cannot be found (but in Swedish). Is there a special trick to Win 7?

Re: [Samba] Help with smbpasswd file

2012-03-20 Thread Gaiseric Vandal
The testparm -v will let you see which smb.conf file is being used and what the settings are. If the default settings for passwd file and private directory are not to your liking you can specify the in the smb.conf file e.g. # testparm -v | grep -i priv Load smb config files from

Re: [Samba] Adding to Samba domain requires super-user password

2012-03-15 Thread Gaiseric Vandal
What version of samba? Do you have the same problems with an XP machine? Are you able to login as domain administrator on machines already in the domain? If you delete the local profile for domain administrator on a domain client, are you still able to login. By deleteing the local profile

Re: [Samba] samba PDC/NIS client

2012-03-12 Thread Gaiseric Vandal
: On Sat, Mar 10, 2012 at 4:24 PM, Gaiseric Vandal gaiseric.van...@gmail.comwrote: Do you have password sync enabled?If password sync is enabled, samba will try to use the passwd command to set the unix password. But with nis, you probably might need something nis specific. On solaris

Re: [Samba] samba PDC/NIS client

2012-03-10 Thread Gaiseric Vandal
sync. From: Simon Matthews [mailto:simon.d.matth...@gmail.com] Sent: Friday, March 09, 2012 4:04 PM To: gaiseric.van...@gmail.com Cc: samba@lists.samba.org Subject: Re: [Samba] samba PDC/NIS client On Fri, Mar 9, 2012 at 6:15 AM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: I

Re: [Samba] samba PDC/NIS client

2012-03-09 Thread Gaiseric Vandal
I don't think is this a samba issue. Samba accounts need to have a corresponding unix account. Shouldn't matter if they are in NIS or /etc/passwd. If you have users in both it could get a problem. Is getent passwd really showing the users from NIS? How about getent shadow (assuming

Re: [Samba] Best strategy for setup

2012-03-06 Thread Gaiseric Vandal
Security=user means the samba machine will be a domain controller. Are you familiar with Windows Domain vs Workgroup model? (this is not a samba specific thing.) Are the desktops and laptops Pro or Home? if they are Home they can not join a domain. If you can't use the domain

[Samba] Samba on solaris 8

2012-03-05 Thread Gaiseric Vandal
You should start a new e-mail thread instead of reply to all for You may be able to get a precompiled version of samba for solaris 8 from www.blastwave.org. If you are NOT familiar with solaris administration this will probably not be appropriate for you. Solaris 8 is very old. You are

Re: [Samba] How to Force Domain Clients to use new PDC

2012-02-17 Thread Gaiseric Vandal
You could try stopping the wins service, backing up and deleting the wins.tdb and wins.dat file, then starting the wins server again. (this is for the wins service from samba 3- I don't know how samba4wins handles this.) This should make sure that only the new PDC registers itself in the

Re: [Samba] Samba domain member server using only nss ldap

2012-02-16 Thread Gaiseric Vandal
Unfortunately I am not sure if the idmapping functionality in Samba depends on winbind. it appears that it does http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html I do have some member servers that I am not using winbindd. We are using LDAP for Unix level

Re: [Samba] How to Force Domain Clients to use new PDC

2012-02-16 Thread Gaiseric Vandal
Are all DC's truly in the same domain? (net getdomainsid command should show the same domain sid on all DC's.)Were the new servers joined to the existing domain when setting up or did you just configure the same domain name. What exactly are you using the NT4 server manager tool for?

Re: [Samba] Samba domain member server using only nss ldap

2012-02-15 Thread Gaiseric Vandal
On a member server, the ldap backend should not be needed for user and group look up. You do need some sort of idmapping for the unix level to see the UID's and GID's assigned to the samba users, and use those uid's and gid's to set file permissions. I haven't had much luck with member

Re: [Samba] Joining a MS sevrer 2008 R2 machine to a Samba domain

2012-02-13 Thread Gaiseric Vandal
This sounds like a Windows specific issue. Did you license per-seat or per-user? The server may expect to find a license server in the domain.I would suspect that if you take the machine out of the domain it will still eventually complain.Did you activate licenses before joining

Re: [Samba] Joining a MS sevrer 2008 R2 machine to a Samba domain

2012-02-13 Thread Gaiseric Vandal
Any chance you can downgrade to Win 2008 (not R2?) On 02/13/2012 11:21 AM, Stuart Bailey wrote: Thanks, I'll see if we can upgrade to S4. On Monday 13 February 2012 16:00:13 Aaron E. wrote: Unfortunately, 2008 servers require AD to function properly with licensing. This question has been

Re: [Samba] openldap integration failed after power cut

2012-02-13 Thread Gaiseric Vandal
Can you use ldapsearch or a GUI Ldap browser/editor (e.g. Apache Directory Studio) to make sure that your primary LDAP server really is working . Verify that the credentials are good. You may need to re enter the ldap pw in samba if your password store got corrupted # smbpasswd -w

Re: [Samba] openldap integration failed after power cut

2012-02-13 Thread Gaiseric Vandal
try ldapsearch with -x for simple (non sasl) authentication. On 02/13/2012 01:29 PM, Fergus Clarke wrote: Hi Thanks for your reply, much appreciated. When I run ldapsearch on the Samba server it prompts me for a password and this fails when tried with the credentials for the ldap bind

Re: [Samba] Screenshot

2012-02-09 Thread Gaiseric Vandal
Can't see the attached screenshot. I don't think the lists support it. Did you set up group mapping (net group map list should show this.) I have samba 3.5.x with ldap backend. Make sure the windows domain admins group is mapping to a unix group with RID 512. On 02/09/2012 02:50 AM,

Re: [Samba] Group Mappings

2012-02-09 Thread Gaiseric Vandal
Do you have any XP clients? Do they have the same issue? What backend are you using? On 02/08/2012 03:03 PM, Simon Faulkner wrote: Samba 3.6.2 My Domain Admins, including root, don't get admin permissions on local PCs. My Windows 7 clients can join the domain but when I look in the

Re: [Samba] net rpc testjoin error

2011-12-23 Thread Gaiseric Vandal
Not sure if this is related, but I had problems joining or rejoining XP or Win 7 machines to the domain after upgrading to Samba 3.5.x. I have a Samba PDC and Samba BDC with an LDAP backend. The backend unix account would already exist. i would have to delete the samba machine account and

Re: [Samba] net rpc testjoin error

2011-12-22 Thread Gaiseric Vandal
Did you make the required registry changes http://wiki.samba.org/index.php/Windows7 HKLM\System\CCS\Services\LanmanWorkstation\Parameters DWORD DomainCompatibilityMode = 1 DWORD DNSNameResolutionRequired = 0 Do you have problems with XP machines? On

Re: [Samba] XP SP3 can't authenticate

2011-12-16 Thread Gaiseric Vandal
init_sam_from_ldap: Entry found for user: pharma Unix username:pharma NT username: pharma Logon Script: pharma.bat Can it be a problem in the register of windows ? The machine is a XP Pro SP3 ... Regards Le 15/12/2011 17:40, Gaiseric Vandal a écrit : It might be an issues

Re: [Samba] XP SP3 can't authenticate

2011-12-15 Thread Gaiseric Vandal
It might be an issues with group mappings (for the well know groups.) Can you verify that the net groupmap list shows at a minimum Domain Users and Domain Admins. If you login as Administrator, can you can network users or groups to the local Users group? Does pdbedit -Lv show the

Re: [Samba] PDC file server on same machine?

2011-12-12 Thread Gaiseric Vandal
Windows clients will give preference to a BDC (if available) when selecting a logon server over a PDC. On 12/08/2011 08:36 AM, Aaron E. wrote: I have a s3.4 pdc with a bdc,, pdc is serving around 80 users on terminal services and another 50 fat clients,,, acts as the file server.. roaming

Re: [Samba] Configure samba to not look for domain master browser

2011-12-06 Thread Gaiseric Vandal
Windows / Samba machines should elect a domain master browser among themselves. Normally the PDC should win. With out domain browsing, you can't see machines in the My Network Places or network neighborhood etc.Depending on network size, you may want to implement a WINS server. On

Re: [Samba] cant access shares on members of samba domain from windows domain

2011-12-05 Thread Gaiseric Vandal
On 12/02/2011 03:44 AM, damiien wrote: Hi, I have a network with two domains. DOMAIN A has samba 3.0.28 as PDC (I know its old but it cant be updated due to political reasons). DOMAIN B is a Windows 2003 domain. Samba PDC (domain A) has few shares on it and everyone can access those shares

Re: [Samba] Windows client with two NICs

2011-12-05 Thread Gaiseric Vandal
Is this a persistent VPN connection There are different mechanisms involved in pinging a machine compared to locating machines in My Network Places (or Network depending on your OS version.) I would make sure your internal DNS server has entries for all the servers in question. I would

Re: [Samba] winbind and getent again

2011-11-02 Thread Gaiseric Vandal
Does it work if you explicitly state a domain user? e.g getent passwd TRUSTEDOMAIN\someuser I have the same symptom on my system- I don't think it actually breaks anything. On 11/02/2011 12:26 PM, Victor Mataré wrote: Hi everyone, I'm trying to use winbind as nsswitch module on a

Re: [Samba] NT4 SP3 PDC with MS Exchange 5.5 to Samba 3.x ldapbacked PDC and MS Exchange 5.5 still

2011-10-28 Thread Gaiseric Vandal
If you are getting rid of the exchange server it seems a lot of work to do the trusts thing. Having outlook remember your password isn't a major problem. Except of course then people are pretty likely to have forgotten their e-mail password if they ever use another PC. I have found Samba

Re: [Samba] Need help with redhat build to --prefix

2011-10-21 Thread Gaiseric Vandal
So you are able to build? you probably need to set your LD_LIBRARY_PATH to list /app/radius/samba/lib first. If you explicitly set LD_LIBRARY_PATH you will probably want to include /usr/lib directory as well. On 10/21/2011 10:56 AM, Joy Veronneau wrote: Hi all, I need to build

Re: [Samba] XP machine wont join domain

2011-10-21 Thread Gaiseric Vandal
On 10/20/2011 09:08 PM, zoolook wrote: 2011/10/20 Lachlan Musicmandata...@gmail.com that 'only root can add a machine to a domain'. or any user in admin users = Regards, Norberto When I went from samba 3.4.x to 3.5.x I started having problems adding new machines to the domain. If

Re: [Samba] How to alter domain name in Windows logon cache

2011-10-19 Thread Gaiseric Vandal
XP or Win 7? Can they login specifying the SERVER name in the from field? Or may login as SERVER\username. I had something a little weird with Win 7 clients where they occasionally had problems logging in offline with domain credentials. (This happended if they did hibernate instead of a

Re: [Samba] samba with nfs mount in path and MS Office App's

2011-10-13 Thread Gaiseric Vandal
Is the samba server your PDC? Maybe the trick is to use the NetApp as a windows server- if you can join it to the Samba domain. On 10/13/2011 07:38 AM, free...@gmx.ch wrote: Hi Thanks for the input so far So far i've tried following: Setting *** strict locking = yes oplocks = no ***

Re: [Samba] samba with nfs mount in path and MS Office App's

2011-10-12 Thread Gaiseric Vandal
I have Solaris 10. I used to use UFS for the file system - which is I think similar enough to ext3 for this situation. It supports the basic ugo perms as well as some ACL's.In general, a samba share on top of an autofs mount was OK. For example, the H: drive would be mapped to /home

Re: [Samba] Fwd: Win 7 Pro

2011-10-04 Thread Gaiseric Vandal
On 10/04/2011 01:45 PM, Harry Jede wrote: On 19:40:52 wrote sa...@printflow.eu: I added WINS server to my DHCP config and now I join domain. THX ! I did not undo settings from http://wiki.samba.org/index.php/Windows7 to check. I will try with next machine in about week. This page also noted

Re: [Samba] LDAP: Mixing local and LDAP-Users

2011-10-04 Thread Gaiseric Vandal
On 10/04/2011 01:21 PM, Felipe Augusto van de Wiel wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 04-10-2011 04:16, Daniel Müller wrote: When you use LDAP?! Why do you need local users and ldap users? Just you need LDAP that’s all. I'm pretty sure different networks have

Re: [Samba] windows 7 cannot connect

2011-08-11 Thread Gaiseric Vandal
Upgrading from 3.0x. to 3.4. has come up several times in the past. You may see some earlier post from me on the subject. Make a copy of your current smb.conf, private directory and locks directory. (These directories should include your password database and other key files.) Assuming a

Re: [Samba] Change the IP/name of the domain member server

2011-08-11 Thread Gaiseric Vandal
Maybe you should also copy the private directory from the old to the new server. That may include the machine password used by the samba server to connect to the domain. Run testparm -v on both servers. Are both servers samba version of samba? On 08/10/2011 02:37 PM, Piotr Legiecki wrote:

Re: [Samba] SSO's availability

2011-08-03 Thread Gaiseric Vandal
On 08/03/2011 04:30 AM, Bruce Richardson wrote: On Tue, Aug 02, 2011 at 08:17:01PM +0200, Frédéric Bérard wrote: Is it possible to configure a system of authentication based on SSO samba (and certainly ldap and lot of others things) ? Which things need to authenticate? At my current

Re: [Samba] Samba PDC 3.4 + wins server

2011-07-27 Thread Gaiseric Vandal
On 07/27/2011 05:52 AM, Jubacca wrote: Hi , I use Samba 3.4.7 PDC + ldap backend . I can't put the machine if I don't specify the wins server on Pc-client. I try different name resolve order , but nothing change ? Can you help me ? My global is : [global] workgroup = workgroup netbios

Re: [Samba] Can't rename win7 machine in samba domain

2011-07-25 Thread Gaiseric Vandal
On 07/25/2011 03:41 AM, Vytautas Kasparavicius wrote: Hello, Samba 3.5.8-68 on F15 64bit with all latest updates. Part of smb.conf file: set primary group script = /usr/sbin/usermod -g %g %u add user script = /usr/sbin/useradd -g 100 %u add group script = /usr/sbin/groupadd %g add

<    1   2   3   4   5   6   7   >