On 03/10/2011 12:00 PM, Zuskov, M.S. wrote:
After upgrading Win7 and W2K8 R2 clients to service pack 1 it is no longer
possible to log in to domain(before the upgrade the clients can log in into
domain). Clean installation of Win7/W2K8 R2 with integrated sp1 has the same
effect. Our domain
On 07/22/2011 10:43 AM, Gaiseric Vandal wrote:
On 03/10/2011 12:00 PM, Zuskov, M.S. wrote:
After upgrading Win7 and W2K8 R2 clients to service pack 1 it is no
longer possible to log in to domain(before the upgrade the clients
can log in into domain). Clean installation of Win7/W2K8 R2
On 07/21/2011 09:50 AM, Andrew Niemantsverdriet wrote:
Hi all,
When trying to join a windows 7 box to a samba 3.5.4 acting as a PDC I
am getting an error on the windows 7 box that says
DNS_ERROR_NO_DNS_SERVERS (the full error log is included at bottom of
mail). WinXP machines are able to join
On 07/19/2011 06:38 AM, Yu Liao wrote:
Hi,
I want to input user name and password every time I access the share, so I
want to disable password caching in windows client. I google to find there
is a way to modify the windows registry. But it does not work on windows
2003. Is there another way to
On 07/14/2011 04:50 AM, Willy Offermans wrote:
Hello Ken and Samba Friends,
On Tue, Jul 12, 2011 at 08:32:31AM -0500, Stringer Kenneth M NGA-PRTN USA CTR
wrote:
Willy,
I have not yet attempted the upgrade so unfortunately I have no advice. I am
thinking about doing a complete package
On 07/14/2011 03:53 AM, J. Echter wrote:
Hi,
i have a LDAP Master / Slave setup, but my roaming profiles are lying
on the PDC.
Whats the best method to keep the profiles in sync? Or should i use
another FileServer for the profiles?
what do i have to check in smb.conf for having profiles
On 07/14/2011 01:21 AM, Ben Sigman wrote:
After upgrading to 3.4.0, I can no longer add new users. Any users that were
added beforehand work fine. Any users that I attempt to create cannot login
(error: NT_STATUS_LOGON_FAILURE). I was able to get one new user account to
work (see below), but
On 07/14/2011 04:31 PM, Ben Sigman wrote:
On Jul 14, 2011, at 7:13 AM, Gaiseric Vandal wrote:
On 07/14/2011 01:21 AM, Ben Sigman wrote:
After upgrading to 3.4.0, I can no longer add new users. Any users
that were added beforehand work fine. Any users that I attempt to
create cannot login
I believe you could also use smbpasswd -w to dump out the passwd file
in plain text. Then you could manually restore the passwords if
password database got trashed during the upgrade.
The samba 3.5.x packages may actually be patches - which means they
may check for the 3.0.x packages. I
This should be in the documentationn in samba.org.
In general:
You need an LDAP backend for samba. Probably should have an LDAP
backend for unix accounts as well.
The smb.conf file be similar to PDC
# this is a DC
domain logons = yes
# but not the PDC
I would guess this is ZFS?
I think the problem occurs when samba+zfs interprets unix no rights
granted to the world (other) as deny everyone in windows.
For example, if you have a with unix perms of 770 - this means on the
unix level that the user and group have full permissions, no rights
I had had some success with the GCC and OpenLDAP from www.sunfreeware.com.
But otherwise had set environmental variables like you had.
Maybe setting PKG_CONFIG_PATH variable might help?
Both blastwave and sunfreeware have precompiled versions of Samba (at least
3.4.x.) I had problems with
What kind of DHCP server do you have? You should make sure that DHCP is
assigning the samba PDC's IP as the WINS server IP address to
clients. You also want to make sure the samba server is the only
WINS server.
Windows DHCP servers can OPTIONALLY update DNS info, which means somehow
I upgraded a while ago. I believe with samba 3.0.x from sun that the
executables are in /usr/sfw and that configuration and account info is
in /etc/samba. You will also have database files in /var/samba
You should run testparm -v to see the location of configuration files
and directories.
Samba on Solaris can be a real challenge. Your build is probably
picking up the Sun native(non-openldap) ldap libraries which is why you
have ldap support but not AD support. AD support always requires
kerberos but the Solaris kerberos libraries
Did you set LD_LIBRARY_PATH?
You may also
A WINS client (be it Windows server, PDC, BDC , Samba server, XP client
etc) will register itself with the WINS server. The WINS Server will
register itself.Since Samba 3.x does not replicate WINS data, a
machine registered with one WINS server may have trouble locating
machines
complained about not
being able to authenticate users in the BDC2 domain, until I rebooted those
servers.
XP machines did not have any problems.
-Original Message-
From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com]
Sent: Tuesday, June 28, 2011 5:12 PM
To: Samba
Subject
On 06/28/2011 09:43 AM, Dermot wrote:
On 28 June 2011 14:02, Nathan Mahunm...@cyanide-studio.com wrote:
Hello,
The abstract is :
How to run smbldap-useradd (and others) with a non-root user, knowing that
giving Samba privileges to the user's account is enough.
Now are details :
My setup is
I am running Samba 3.5.5 on Solaris 10. I have one machine as a PDC,
one as a BDC.
If I logon to the domain from a Windows 7 Pro (64-bit) laptop,
hibernate the machine, unplug the network cable and wake the machine, I
can not unlock the screen. I will get the message There are currently
On 06/27/2011 08:18 AM, Martin Hochreiter wrote:
Am 2011-06-27 14:02, schrieb Ander Punnar:
On Mon, Jun 27, 2011 at 14:22, Martin Hochreiter linux...@wavenet.at
mailto:linux...@wavenet.at wrote:
We experience problems with offline files - especially with xls or
xlsx files - between
The user's unix LDAP password should be encrypted (technically I think
it is actually hashed, since it is not reversible)- so no, you can't
get their existing password.
There are two options in smb.conf to have the password sync
ldap passwd sync = yes
or
unix password sync =
The smb.conf looks correct
On the BDC, does pdbedit -L show you all your domain users?
On the BDC, does getent passwd show you all your users?
I use ldap for both samba and unix backends, so pbedit -Lv and getent
passwd show me the same output for my domain users and local unix
users.I
What version of samba? If you have added all the latest patches you should
be at samba 3.5.x.
If a Windows machine is part of an AD domain it may be set to disable
NetBios over TCP/IP (NBT)- which would not be needed for Windows 200x type
file servers but would be needed to samba and Windows
It looks like this is configured as a BDC - (domain logons= yes, domain
master=no.)
How is the underlying unix account created? Do you manually create
them, or does a script create them?If you don't actually create a
unix account, then you need to make sure winbindd is allocating a uid.
You know what they say about ASS-U-ME
testparm -v will show you the current settings (whether explicitly set
or default)
man smb.conf (3.5.) shows a possible samba printer share as :
[aprinter]
path = /usr/spool/public
read only = yes
I am not sure how much control some e-mail apps/servers give you over
auto-replies- Exchange 2007/Outlook 2007 lets you set a separate reply
for internal vs external senders, and lets you restrict external
responses to only senders in your address book.
You can of course create a custom
mask = 0777
force directory security mode = 00
I did those printer settings already but due to security=user it won't
let the localuser on XP machine to print. Is there anyway to let
everyone print with security=user enabled.
On Thu, Jun 9, 2011 at 9:22 AM, Gaiseric Vandal
gaiseric.van
,
~A
On Thu, Jun 9, 2011 at 9:45 AM, Gaiseric Vandal
gaiseric.van...@gmail.com wrote:
I am not sure about printers but I ran into a similar issue with a guest
share. I had security=user, and set up a guest share. But users in
different domain could not connect, and the samba logs showed that the user
state
configuration and things that users able to do..
Thanks,
~A
On Thu, Jun 9, 2011 at 10:33 AM, Gaiseric Vandal
gaiseric.van...@gmail.com wrote:
I think
guest account = nobody
is enabled by default. But I found when I went from 3.0.x to 3.4.x that
samba would complain if the unix nobody
In most cases, your users will have separate unix and windows
passwords. Assuming you have password sync working (various ways to do
this) this will still appear to be a single password to the users.
Use something like Apache Directory Studio to verify that you can login
to LDAP with the
Did you try the nslookup command on the windows server itself? Does the
windows VM appear to have multiple nic's (doesn't matter about the
hyper-visor.)
Can the windows server see shares from the samba server?
Did you disable Netbios-over-TCP on Windows- this would definitely
break stuff.
I don't think you have to define a DFS root.
On the unix level you can create a symbolic link
e.g.
server1# cd /export/data1
server1# ln -s msdfs:server2\sata2 data2
Assuming that server:/export/data1 is shared in samba as \\server1\data1
the link is meaningless for unix user but if a
is RHEL
C is NetApp
B can be thought of sitting in a DMZ, so it can see A and C.
A and C can not talk to each other.
Would the solution below work ?
Thanks
Will
On Jun 8, 2011, at 4:24 PM, Gaiseric Vandal wrote:
I don't think you have to define a DFS root.
On the unix level you can create
...@me.com]
Sent: Wednesday, June 08, 2011 4:00 PM
To: gaiseric.van...@gmail.com
Cc: Samba
Subject: Re: [Samba] Reshare of a Samba mount
I can use NFS, but then i come to the issue of file locking...
The performance hit at the moment is quite a big deal...
On Jun 8, 2011, at 8:21 PM, Gaiseric Vandal
If everything is an LDAP backend that makes it simpler. installing the
new machine as BDC then promoting it should be easy enough.In my
environment, the each DC was also a LDAP server (in a multi-master
replication topology.) You may to make sure that when you switch a
machine from
I am running Samba 3.5.5 on Solaris 10. This is the latest Sun/Oracle
provided build. I have an ldap backend for everything (unix+samba
accounts, idmapping for domain trusts.) The Samba server is a PDC for a
domain we can call SAMBA.Each samba account is tied to a unix
account.
I have
I do have the entries in /etc/nswitch.conf
The getent passwd won't list the winbind users although I can get
details on a specific user with the getent passwd
SOMEDOMAIN\\someuser common
I looked in the /var/samba/locks directory -
I have a winbindd_cache.tdb file that is current. I
who
didn't have idmappings, but getent passwd still doesn't work.
Original Message
Subject:Re: [Samba] getent passwd does not list trusted users
Date: Mon, 06 Jun 2011 15:16:28 -0400
From: Gaiseric Vandal gaiseric.van...@gmail.com
Reply-To: gaiseric.van
that is a symptom that idmap is trying to create
idmap entries but can't post them to ldap.
On 06/06/2011 03:26 PM, Frank Mori Hess wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Monday, June 06, 2011, Gaiseric Vandal wrote:
I do have the entries in /etc/nswitch.conf
The getent
Windows Active Directory users SRV DNS records to locate Active
Directory servers (.e.g _ldap.mydomain.com - mypdc.domain.com) Since a
Samba domain controller is (sort of) an NT4 server these won't be
relevant for Windows clients.
Are you using a WINS server? Are your samba server and
Check the man page for idmap_rid.
The idmap_rid backend provides a way to use an algorithmic mapping
scheme to map UIDs/GIDs and SIDs. No database is required in
this case
as the mapping is deterministic.
I think it calculates the uid and gid, rather than just assigning
Do you have a password change chat script configured and defined in smb.conf
?
I run solaris 10 with Sun/Oracle Directory Server for LDAP backend. Samba
runs as root but root is NOT a ldap administrator. My chat script has to
run with ldap admin priveledges. Though I could have probably had
It may be related to a caching issue. Use testparm -v to check the
values for the following:
idmap cache time
winbind cache time
I had a problem with samba 3.0.x where idmap entries would populate for
users in a trusted domain- but after the cache time expired the cache
Can you have hard link or symbolically link one (or more) log files to
another?
I use perl to split up and restructure log file entries- not for the
samba logs tho.
It looks like samba can send messages to syslog. If you use syslog-ng
you have a lot of flexibility for logging events based
I am not sure if the Administrators group is required on the PDC- any
way it would be a group specific to the PDC.
Making domain users members of the Domain Administrators group should
have worked. When an XP machine joins the domain , the Domain Users
group should be added automatically
, Gaiseric Vandal gaiseric.van...@gmail.com
mailto:gaiseric.van...@gmail.com wrote:
You still need a unix account to back the samba account- this
can be done in several ways
- have a local unix acct in /etc/passwd
- have the LDAP entry for your samba user also include your
You still need a unix account to back the samba account- this can be
done in several ways
- have a local unix acct in /etc/passwd
- have the LDAP entry for your samba user also include your unix
account info.
- have winbind allocate unix uid's and gid's dynamically for samba
run testparm -v
You may need to make sure LANMAN authentication is enabled. You may
also need to make sure that you have an LANMAN pw set for the user (this
should be a separate LDAP field from the NTLM password.)
Or better yet- replace the machine on the assumption that Windows ME
may
On solaris you should be using Sun Studio compilers as well as sun
dmake (not sun or gnu make.) You may want to configure and compile
with minimal options then incrementally enable and recompile additional
options.
If you really want to use gcc, you could try something like
mv
Is this a client-to-site or site-to-site VPN?
Does new view \\IP_ADDRESS_OF_SERVER work?
I have one samba server (compiled from source) where Windows VPN clients
can't access it by name UNLESS using either WINS ior an lmhosts file is
configured. packet sniffing showed the client connecting
What compiler are you using?
On Solaris 10, I found that you needed Solaris Studio and dmake.
-Original Message-
From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
On Behalf Of line...@halo.nu
Sent: Tuesday, May 03, 2011 6:33 PM
To: samba@lists.samba.org
Just found out that Sun (Oracle) has released supported patches for Solaris
10, to bring Samba from 3.0.37 to 3.5.5 (back in Feb.)
http://sparcv9.blogspot.com/2011/02/samba-355-update-for-solaris-10.html?sho
wComment=1299265836812#c4735248300290186719
Solaris 10 sparc 119757-19 and
Check the wiki
https://wiki.samba.org/index.php/Windows7
Did you set the following?
HKLM\System\CCS\Services\LanmanWorkstation\Parameters
DWORD DomainCompatibilityMode = 1
DWORD DNSNameResolutionRequired = 0
I have noticed then when I reboot a Win 7 machine
https://wiki.samba.org/index.php/Windows7
On 04/14/2011 10:29 AM, Jeff Savastano wrote:
hi,
i am able to join my domain with windows 7. when i reboot i get a Unkown error
has occurred. when i check my event log i see that there is a netlogon 3210
error:
This computer could not authenticate
Even Novell Netware made the switch from IPX/SPX to TCP/IP years ago as
their preferred network stack.And netware itself is end-of-lifed.
That I think would the the final nail for IPX.
On 04/11/2011 05:10 PM, Volker Lendecke wrote:
On Mon, Apr 11, 2011 at 03:03:20PM -0600, jfree
I don't think DNS dynamic updates is required for Windows clients.
Windows clients do not provide services (in most cases) so they don't
need to be located in DNS/AD. I found, when running BIND9 as my primary
DNS server that I did not like the why DDNS updated and resorted my
zone files. I
I believe ZFS uses NFSv4 Acl's while Ext3 (or UFS) uses Posix.
Supposedly the NFSv4 ACL's are closer to Windows. My experience was
that ZFS gave more headaches than UFS in conjunction with Samba- with
ZFS a perm such as 660 (i.e. user and group can read and write, but
not rights to anyone
Would Samba4 support Kerberos trusts?
On 04/01/2011 12:53 AM, Andrew Bartlett wrote:
On Tue, 2011-03-15 at 18:37 +0100, Luca Zanon wrote:
Hi,
i have installed Samba4 ALPHA 15 on debian/ubuntu how to described in
http://wiki.samba.org/index.php/Samba4/HOWTO
all ok
i created a domain and i
So your samba server thinks it is joining an NT4 domain.
Is the ADS domain in NT4 compatibility mode or windows 2003 native
mode?I think that NT4 machines can still join ADS domains even if
the ADS domains are in 2000/2003 mode.
Did you try adding the kerberos realm info for
I have run into issues where by IP it worked, but not by name (this was
with one particular samba server, with VPN clients, with WINS and
Netbios not enabled over VPN.) So it does seem possible that the
server handles requests based on name and IP differently.
Are all machines (samba, win
What version of samba? I found that samba 3.0.x (as bundled with
solaris) had problems with idmap. This was with LDAP backend, a Samba
DC with trusts to Windows 2003 domain (in NT domain compatibility
mode.) Samba would allocate idmap entries in ldap, and would populate
the TDB cache
Do you have PTR entries in DNS for all the servers?
On 03/30/2011 12:35 PM, Walt Park wrote:
Well.. all my samba boxes are behaving the same way.
When joined to the AD, they work when addressed by name, but
fail trust with the AD when addressed by IP. AD is controlled
by windows 2003, not by
Is this with one Windows 7 X64 client or all of them?
Do XP machines have the same problem?
Do the disconnects occur after the machine has been in sleep mode?
On 03/30/2011 04:21 PM, Tom H. Lautenbacher wrote:
Hello all!
I am having severe problems with my Samba PDC.
1. My Roaming profile
I haven't used the remote annouce or wins proxy feature- I think that
is for a samba server on one subnet to relay wins stuff to the Samba
WINS server on another subnet.
The simplest thing is probably to have all clients- regardless of
subnet- point to a single WINS server. Your wins
If you have domain with the following specs- you do not need winbind
- samba PDC
- no samba member servers
- samba BDC's optional
- no trusted domains
You would need winbind in any of following cases-
- you have a Samba PDC but you need to trust Windows domains
- you
If you have trouble accessing a machine, are you able to access it from
a windows command line with
net use \\SERVERNAME
or
net use \\SERVERIP
I had upgraded one of my servers from 3.0.x to 3.4.x. I probably missed
something in the compile. Normally an XP/Win7 client should be
Did you try manually creating a unix user account for the samba
machine? Does getent passwd show that machine?
I don't have samba configured to automatically create unix user accounts
or allocate ids in winbind, so I need to manually create unix accounts
for users or machines. The ldap
one the other side, you verified binding via normal LDAPSEARCH command ,
as in ldapserach -DCN=directory manager -b objectclass=* ?
hope it helps
/ayman
-Original Message- From: Gaiseric Vandal Sent: Thursday, March
17, 2011 20:12 To: Samba Subject: [Samba] Samba 3.4.7 can't retrieve
,,
on the other side what are you seeing under the Access and Errors logs
for DS?
are you seeing the actual bind coming in?
on the FC machine I presume you are running over proxyagent?
hope it helps
/ayman
-Original Message- From: Gaiseric Vandal
Sent: Monday, March 21, 2011 16:21
To: Ayman
.
On 03/21/2011 04:17 PM, Gaiseric Vandal wrote:
Linux unix authentication uses a proxyagent account. There is no
particular reason that Samba should use this account.
However, to rule out the spaces and quotes being an issue, I updated
the smb.conf on this machine (Fedora Core 11 linux
You should build a 2nd box with Suse 11.3- you can configure it as a DC
either in same or test domain to make sure it works OK. If you have
LDAP as a backend, configure a BDC is possible.
Is the purpose of the upgrade to upgrade Suse or to upgrade Samba? if
you just want to upgrade samba
Soluciones wrote:
I am using LDAP, we still auth with /etc/passwd and /etc/shadow.
We need to upgrade Suse, we were upgrading only Samba but now it's a
must to upgrade Suse for other reasons.
Why do i have to backup private and lock directories??
Bayardo.
El 17/03/2011 12:16 p.m., Gaiseric
I am running Samba 3.4.7on Fedora Core 11 Linux. This is a domain member.
My PDC is Samba 3.4.9 on Solaris 10. I have LDAP as a backend
(Sun/Oracle Directory Server 6.)I have an OU for user accounts, and
an OU for idmap entries. The PDC has already populated some idmap entries.
An
I have setup a Samba 3.4.7 on Fedora Core 11 Linux (this is the samba
version installed with yum update.) This is a domain member server. The
PDC is a Samba 3.4.9 on Solaris 10.
Winbind is running
I am trying to get idmap allocation working. The unix accounts for the
samba
I had two Win 7 (x64) machines. Both of which crashed while installing
updates (presumably SP1) via auto-updates yesterday morning. I was
talking to someone from another company and this is clearly a common event.
I have done a clean install of one with Win 7 (x64.) I then downloaded and
Is this a domain member/ standalone server?
You may want to try defining gruop mappings for some of the local well
known built in Windows groups
e.g.
BUILTIN\ADMINISTRATORS S-1-5-32-544
BUILTIN\USERS S-1-5-32-545
BUILTIN\GUESTS S-1-5-32-546
BUILTIN\POWER USERS
I find I have to have both ports open- then again my main samba servers are
configured as DC's. I don't know about member servers, but DC file server
are using SMB-over-NetBIOS-over-IP (NT4 style) - I don't think they can
support pure SMB-over-TCP/IP. I had tried setting to 139 only- I
I have not tried Samba 4 on Solaris.
However, I found compiling Samba 3.4.x on Solaris to be quite
challenging. I had to use GCC from SunFreeware. I also have to
install additional packages from Sunfreeware including libtool,
libiconv, binutils, openldap and bash. GCC from Sun freeware
von Gaiseric Vandal
Gesendet: Mittwoch, 2. März 2011 20:44
An: Samba
Betreff: [Samba] Samba WINS issues over VPN
I am running Samba 3.4.8 as a PDC on Solaris 10.I recently made this
the WINS master- previously the BDC (Samba 3.0.37 on another Solaris 10
server.)
I also use Sonicwall ipsec
I am running Samba 3.4.8 as a PDC on Solaris 10.I recently made this
the WINS master- previously the BDC (Samba 3.0.37 on another Solaris 10
server.)
I also use Sonicwall ipsec VPN for remote access (Windows XP clients.)
The sonicwall client creates a virtual NIC on the client so that
(This is a follow up on an earlier post but I have tried to summarize a
little better.)
I am having problems connecting to one samba server by host name (e.g
net use \\servername or via windows explorer) over IPSec VPN. I can
connect via net use \\IPADDRESS. For every other Samba or Windows
03:09 AM, Aniruddha wrote:
On Mon, Feb 28, 2011 at 9:37 PM, Gaiseric Vandal
gaiseric.van...@gmail.com wrote:
Are users logging into the PC with this one account? Or are they logging
into PC's with unique accounts? Are they accessing other shares besides
this one? If this is the only share
Are users logging into the PC with this one account? Or are they logging
into PC's with unique accounts? Are they accessing other shares besides
this one? If this is the only share, it shouldn't be a problem
(technically.)
On 02/28/2011 11:40 AM, Aniruddha wrote:
I would like to
:-)
Thanks And Best Regards
2011/2/26 Gaiseric Vandal gaiseric.van...@gmail.com
Can you clarify what your goal is? Your original post said My question is
to reduce the use of net ...
Are you trying to reduce the network traffic between LDAP servers?
Are both LDAP servers OpenLDAP?It looks like
relation between ldap.samba server and a future ldap mail
server, master.master o master slave?
Thanks And Best Regards
2011/2/25 Gaiseric Vandal gaiseric.van...@gmail.com
I don't understand your question. What does mail have to do with Samba?
Does your mail server use LDAP authentication? Or do you
the courier/ldap is the slave.
No problems! single sign on for windows and outlook (Same user same
password!)
If it is from interest I can post my setup and relations.
On Sat, 26 Feb 2011 10:13:22 -0500, Gaiseric Vandal
gaiseric.van...@gmail.com wrote:
Is this Samba 3 or Samba 4?
If samba 3
I don't understand your question. What does mail have to do with
Samba? Does your mail server use LDAP authentication? Or do you want
to use the LDAp server as an central address book for your mail
clients. Either way, your LDAP server should be able to support
attributes for both
Once upon a time I had only samba 3.0.x servers. They were in a samba
domain (with a samba PDC) and had a trust relationship with a windows 2003
AD domain. I had to use Winbind + idmap + nsswitch.conf so that users
from the trusted Windows AD domain could be allocated unix uid's and gid's.
I
You should create a distinct smb.conf for each domain. You will want to
allocate a unique IP on your server for each domain. You will want to
allocate a unique ldap toplevel container for each domain. You will need to
run separate instances of smbd (and nmbd and winbindd ) for each domain-
you
pdbedit lets you set the login script and various windows variables
for each user. smb.conf sets the netlogon share path.The actual
syntax of a login script is for of a windows question. I would look at
(or google for) the Microsoft documentation on this.You should be
able to have
exchange 2000 requires Active Directory. I would guess MAYBE you could use
Samba 4. BUt I don't know if Samba 4 supports all the account attributes
that Exchange would require. I would guess not.
postfile/amavis/spamassasin/mail relaying would be topics for forums.
Windows 2000 is no longer
Does pbdedit -Lv show the users, groups and machines?
On 02/03/2011 02:34 PM, J. Echter wrote:
Am 03.02.2011 20:26, schrieb J. Echter:
Hi,
im trying to use our LDAP server as backend for Samba (PDC).
I used smbldap-tools to transfer samba users to our LDAP server.
Now i have
On 02/03/2011 03:01 PM, Doug Lytle wrote:
Marc Fromm wrote:
Is it possible on a windows computer to connect to a linux server
with two samba accounts, simultaneous?
If you're using just simple file sharing with authentication, then yes.
Connect the first share using the machine name, connect
XP machine doesn't help
either.
It also should not matter how the server resolves hostnames.
Any thoughts?
Thanks
-Original Message-
From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com]
Sent: Thursday, January 13, 2011 2:14 PM
To: TAKAHASHI Motonobu
Cc: Samba
Subject: Re: [Samba
: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com]
Sent: Wednesday, February 02, 2011 7:39 AM
To: 'Samba'
Subject: RE: [Samba] can connect to 2 samba servers by name but to one by
IPonly
This is where things stand so far:
Pdc1 is samba 3.4.x
Bdc1 is samba 3.0.x (also the WINS server)
Bdc2 is samba
may also want to change the file shares to be everyone and then
rely on file permissions for the security.
On 01/31/2011 05:53 PM, Ron García-Vidal wrote:
Thanks for your reply.
On 01/31/2011 05:22 PM, Gaiseric Vandal wrote:
Did you reestablish the domain trusts between your NT domain and your
Did you reestablish the domain trusts between your NT domain and your AD
domain?
Does wbinfo -u and wbinfo -g on your samba server show the users and
groups from the trusted AD domain?
Does getent passwd and getent group on your samba server show the
users and groups from the trusted AD
If you have a Windows of Samba machine that is not a domain member,
having the workgroup name match the domain name will make browsing for
resources easier.
If you have Windows or Samba machine that is not a domain member, using
the same password for the local account as the domain accounts
Look at the event logs on your PC.
Look at the samba logs on the server.
If only two users can even log into the XP machines, how can ALL users
access the shares? Or are they accessing shares from non-XP machines?
Did you check pdbedit -v someuser to compare the users who can login
with the
For a standalone server, with unix accounts for the users, you will not
need winbind anyway.Did you modify /etc/nsswitch.conf to look for
users in winbind- you do not want to do this.
Does pdbedit -Lv show the users?
How are you viewing the smbpasswd file? It should be a TDB type file
201 - 300 of 695 matches
Mail list logo