Re: [Samba] Win7/W2K8 R2 sp1

2011-07-22 Thread Gaiseric Vandal
On 03/10/2011 12:00 PM, Zuskov, M.S. wrote: After upgrading Win7 and W2K8 R2 clients to service pack 1 it is no longer possible to log in to domain(before the upgrade the clients can log in into domain). Clean installation of Win7/W2K8 R2 with integrated sp1 has the same effect. Our domain

Re: [Samba] Win7/W2K8 R2 sp1

2011-07-22 Thread Gaiseric Vandal
On 07/22/2011 10:43 AM, Gaiseric Vandal wrote: On 03/10/2011 12:00 PM, Zuskov, M.S. wrote: After upgrading Win7 and W2K8 R2 clients to service pack 1 it is no longer possible to log in to domain(before the upgrade the clients can log in into domain). Clean installation of Win7/W2K8 R2

Re: [Samba] Windows 7 Can't Join Samba 3.5.4 PDC

2011-07-21 Thread Gaiseric Vandal
On 07/21/2011 09:50 AM, Andrew Niemantsverdriet wrote: Hi all, When trying to join a windows 7 box to a samba 3.5.4 acting as a PDC I am getting an error on the windows 7 box that says DNS_ERROR_NO_DNS_SERVERS (the full error log is included at bottom of mail). WinXP machines are able to join

Re: [Samba] How to disable password caching in windows client

2011-07-19 Thread Gaiseric Vandal
On 07/19/2011 06:38 AM, Yu Liao wrote: Hi, I want to input user name and password every time I access the share, so I want to disable password caching in windows client. I google to find there is a way to modify the windows registry. But it does not work on windows 2003. Is there another way to

Re: [Samba] Upgrading from 3.0.37 to 3.5.9

2011-07-14 Thread Gaiseric Vandal
On 07/14/2011 04:50 AM, Willy Offermans wrote: Hello Ken and Samba Friends, On Tue, Jul 12, 2011 at 08:32:31AM -0500, Stringer Kenneth M NGA-PRTN USA CTR wrote: Willy, I have not yet attempted the upgrade so unfortunately I have no advice. I am thinking about doing a complete package

Re: [Samba] PDC + BDC + Roaming Profiles

2011-07-14 Thread Gaiseric Vandal
On 07/14/2011 03:53 AM, J. Echter wrote: Hi, i have a LDAP Master / Slave setup, but my roaming profiles are lying on the PDC. Whats the best method to keep the profiles in sync? Or should i use another FileServer for the profiles? what do i have to check in smb.conf for having profiles

Re: [Samba] Problem adding new users after upgrade to 3.4.0

2011-07-14 Thread Gaiseric Vandal
On 07/14/2011 01:21 AM, Ben Sigman wrote: After upgrading to 3.4.0, I can no longer add new users. Any users that were added beforehand work fine. Any users that I attempt to create cannot login (error: NT_STATUS_LOGON_FAILURE). I was able to get one new user account to work (see below), but

Re: [Samba] Problem adding new users after upgrade to 3.4.0

2011-07-14 Thread Gaiseric Vandal
On 07/14/2011 04:31 PM, Ben Sigman wrote: On Jul 14, 2011, at 7:13 AM, Gaiseric Vandal wrote: On 07/14/2011 01:21 AM, Ben Sigman wrote: After upgrading to 3.4.0, I can no longer add new users. Any users that were added beforehand work fine. Any users that I attempt to create cannot login

Re: [Samba] Upgrading from 3.0.37 to 3.5.9

2011-07-12 Thread Gaiseric Vandal
I believe you could also use smbpasswd -w to dump out the passwd file in plain text. Then you could manually restore the passwords if password database got trashed during the upgrade. The samba 3.5.x packages may actually be patches - which means they may check for the 3.0.x packages. I

Re: [Samba] PDC with LDAP-Samba 3.3. Now i want to install BDC

2011-07-12 Thread Gaiseric Vandal
This should be in the documentationn in samba.org. In general: You need an LDAP backend for samba. Probably should have an LDAP backend for unix accounts as well. The smb.conf file be similar to PDC # this is a DC domain logons = yes # but not the PDC

Re: [Samba] Help! permission denied when accessing folder

2011-07-11 Thread Gaiseric Vandal
I would guess this is ZFS? I think the problem occurs when samba+zfs interprets unix no rights granted to the world (other) as deny everyone in windows. For example, if you have a with unix perms of 770 - this means on the unix level that the user and group have full permissions, no rights

Re: [Samba] ????: Could not build Samba with ADS support on Solaris 10 [SEC=UNCLASSIFIED]

2011-07-10 Thread Gaiseric Vandal
I had had some success with the GCC and OpenLDAP from www.sunfreeware.com. But otherwise had set environmental variables like you had. Maybe setting PKG_CONFIG_PATH variable might help? Both blastwave and sunfreeware have precompiled versions of Samba (at least 3.4.x.) I had problems with

Re: [Samba] Win7 unable to join domain if PDC has a static IP address

2011-07-08 Thread Gaiseric Vandal
What kind of DHCP server do you have? You should make sure that DHCP is assigning the samba PDC's IP as the WINS server IP address to clients. You also want to make sure the samba server is the only WINS server. Windows DHCP servers can OPTIONALLY update DNS info, which means somehow

Re: [Samba] Upgrading from 3.0.37 to 3.5.9

2011-07-08 Thread Gaiseric Vandal
I upgraded a while ago. I believe with samba 3.0.x from sun that the executables are in /usr/sfw and that configuration and account info is in /etc/samba. You will also have database files in /var/samba You should run testparm -v to see the location of configuration files and directories.

Re: [Samba] Could not build Samba with ADS support on Solaris 10

2011-07-06 Thread Gaiseric Vandal
Samba on Solaris can be a real challenge. Your build is probably picking up the Sun native(non-openldap) ldap libraries which is why you have ldap support but not AD support. AD support always requires kerberos but the Solaris kerberos libraries Did you set LD_LIBRARY_PATH? You may also

Re: [Samba] WINS + BDC Problem

2011-07-06 Thread Gaiseric Vandal
A WINS client (be it Windows server, PDC, BDC , Samba server, XP client etc) will register itself with the WINS server. The WINS Server will register itself.Since Samba 3.x does not replicate WINS data, a machine registered with one WINS server may have trouble locating machines

Re: [Samba] Windows 7 caching credentials breaks with hibernation

2011-06-29 Thread Gaiseric Vandal
complained about not being able to authenticate users in the BDC2 domain, until I rebooted those servers. XP machines did not have any problems. -Original Message- From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Tuesday, June 28, 2011 5:12 PM To: Samba Subject

Re: [Samba] Needs to run smbldap-useradd as non-root user

2011-06-28 Thread Gaiseric Vandal
On 06/28/2011 09:43 AM, Dermot wrote: On 28 June 2011 14:02, Nathan Mahunm...@cyanide-studio.com wrote: Hello, The abstract is : How to run smbldap-useradd (and others) with a non-root user, knowing that giving Samba privileges to the user's account is enough. Now are details : My setup is

[Samba] Windows 7 caching credentials breaks with hibernation

2011-06-28 Thread Gaiseric Vandal
I am running Samba 3.5.5 on Solaris 10. I have one machine as a PDC, one as a BDC. If I logon to the domain from a Windows 7 Pro (64-bit) laptop, hibernate the machine, unplug the network cable and wake the machine, I can not unlock the screen. I will get the message There are currently

Re: [Samba] Oplocks offline files win 7

2011-06-27 Thread Gaiseric Vandal
On 06/27/2011 08:18 AM, Martin Hochreiter wrote: Am 2011-06-27 14:02, schrieb Ander Punnar: On Mon, Jun 27, 2011 at 14:22, Martin Hochreiter linux...@wavenet.at mailto:linux...@wavenet.at wrote: We experience problems with offline files - especially with xls or xlsx files - between

Re: [Samba] Samba and Ldap

2011-06-24 Thread Gaiseric Vandal
The user's unix LDAP password should be encrypted (technically I think it is actually hashed, since it is not reversible)- so no, you can't get their existing password. There are two options in smb.conf to have the password sync ldap passwd sync = yes or unix password sync =

Re: [Samba] BDC and ldap set-up problem

2011-06-15 Thread Gaiseric Vandal
The smb.conf looks correct On the BDC, does pdbedit -L show you all your domain users? On the BDC, does getent passwd show you all your users? I use ldap for both samba and unix backends, so pbedit -Lv and getent passwd show me the same output for my domain users and local unix users.I

Re: [Samba] Solaris 10 Samba Configuration

2011-06-12 Thread Gaiseric Vandal
What version of samba? If you have added all the latest patches you should be at samba 3.5.x. If a Windows machine is part of an AD domain it may be set to disable NetBios over TCP/IP (NBT)- which would not be needed for Windows 200x type file servers but would be needed to samba and Windows

Re: [Samba] ldap backend failing

2011-06-10 Thread Gaiseric Vandal
It looks like this is configured as a BDC - (domain logons= yes, domain master=no.) How is the underlying unix account created? Do you manually create them, or does a script create them?If you don't actually create a unix account, then you need to make sure winbindd is allocating a uid.

Re: [Samba] [printer]

2011-06-09 Thread Gaiseric Vandal
You know what they say about ASS-U-ME testparm -v will show you the current settings (whether explicitly set or default) man smb.conf (3.5.) shows a possible samba printer share as : [aprinter] path = /usr/spool/public read only = yes

Re: [Samba] Braindead Autoreply filters... WAS Re: samba Digest, Vol 102, Issue 8

2011-06-09 Thread Gaiseric Vandal
I am not sure how much control some e-mail apps/servers give you over auto-replies- Exchange 2007/Outlook 2007 lets you set a separate reply for internal vs external senders, and lets you restrict external responses to only senders in your address book. You can of course create a custom

Re: [Samba] [printer]

2011-06-09 Thread Gaiseric Vandal
mask = 0777 force directory security mode = 00 I did those printer settings already but due to security=user it won't let the localuser on XP machine to print. Is there anyway to let everyone print with security=user enabled. On Thu, Jun 9, 2011 at 9:22 AM, Gaiseric Vandal gaiseric.van

Re: [Samba] [printer]

2011-06-09 Thread Gaiseric Vandal
, ~A On Thu, Jun 9, 2011 at 9:45 AM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: I am not sure about printers but I ran into a similar issue with a guest share. I had security=user, and set up a guest share. But users in different domain could not connect, and the samba logs showed that the user

Re: [Samba] [printer]

2011-06-09 Thread Gaiseric Vandal
state configuration and things that users able to do.. Thanks, ~A On Thu, Jun 9, 2011 at 10:33 AM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: I think guest account = nobody is enabled by default. But I found when I went from 3.0.x to 3.4.x that samba would complain if the unix nobody

Re: [Samba] need recipe for samba to do user authentication against a centos 5.5 openldap server (NO IDMAPS! NO PDC!)

2011-06-08 Thread Gaiseric Vandal
In most cases, your users will have separate unix and windows passwords. Assuming you have password sync working (various ways to do this) this will still appear to be a single password to the users. Use something like Apache Directory Studio to verify that you can login to LDAP with the

Re: [Samba] Join W2008 R2 64bit to samba 3.5.8

2011-06-08 Thread Gaiseric Vandal
Did you try the nslookup command on the windows server itself? Does the windows VM appear to have multiple nic's (doesn't matter about the hyper-visor.) Can the windows server see shares from the samba server? Did you disable Netbios-over-TCP on Windows- this would definitely break stuff.

Re: [Samba] Reshare of a Samba mount

2011-06-08 Thread Gaiseric Vandal
I don't think you have to define a DFS root. On the unix level you can create a symbolic link e.g. server1# cd /export/data1 server1# ln -s msdfs:server2\sata2 data2 Assuming that server:/export/data1 is shared in samba as \\server1\data1 the link is meaningless for unix user but if a

Re: [Samba] Reshare of a Samba mount

2011-06-08 Thread Gaiseric Vandal
is RHEL C is NetApp B can be thought of sitting in a DMZ, so it can see A and C. A and C can not talk to each other. Would the solution below work ? Thanks Will On Jun 8, 2011, at 4:24 PM, Gaiseric Vandal wrote: I don't think you have to define a DFS root. On the unix level you can create

Re: [Samba] Reshare of a Samba mount

2011-06-08 Thread Gaiseric Vandal
...@me.com] Sent: Wednesday, June 08, 2011 4:00 PM To: gaiseric.van...@gmail.com Cc: Samba Subject: Re: [Samba] Reshare of a Samba mount I can use NFS, but then i come to the issue of file locking... The performance hit at the moment is quite a big deal... On Jun 8, 2011, at 8:21 PM, Gaiseric Vandal

Re: [Samba] Moving PDC

2011-06-07 Thread Gaiseric Vandal
If everything is an LDAP backend that makes it simpler. installing the new machine as BDC then promoting it should be easy enough.In my environment, the each DC was also a LDAP server (in a multi-master replication topology.) You may to make sure that when you switch a machine from

[Samba] getent passwd does not list trusted users

2011-06-06 Thread Gaiseric Vandal
I am running Samba 3.5.5 on Solaris 10. This is the latest Sun/Oracle provided build. I have an ldap backend for everything (unix+samba accounts, idmapping for domain trusts.) The Samba server is a PDC for a domain we can call SAMBA.Each samba account is tied to a unix account. I have

Re: [Samba] getent passwd does not list trusted users

2011-06-06 Thread Gaiseric Vandal
I do have the entries in /etc/nswitch.conf The getent passwd won't list the winbind users although I can get details on a specific user with the getent passwd SOMEDOMAIN\\someuser common I looked in the /var/samba/locks directory - I have a winbindd_cache.tdb file that is current. I

Re: [Samba] getent passwd does not list trusted users

2011-06-06 Thread Gaiseric Vandal
who didn't have idmappings, but getent passwd still doesn't work. Original Message Subject:Re: [Samba] getent passwd does not list trusted users Date: Mon, 06 Jun 2011 15:16:28 -0400 From: Gaiseric Vandal gaiseric.van...@gmail.com Reply-To: gaiseric.van

Re: [Samba] getent passwd does not list trusted users

2011-06-06 Thread Gaiseric Vandal
that is a symptom that idmap is trying to create idmap entries but can't post them to ldap. On 06/06/2011 03:26 PM, Frank Mori Hess wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday, June 06, 2011, Gaiseric Vandal wrote: I do have the entries in /etc/nswitch.conf The getent

Re: [Samba] Join W2008 R2 64bit to samba 3.5.8

2011-06-01 Thread Gaiseric Vandal
Windows Active Directory users SRV DNS records to locate Active Directory servers (.e.g _ldap.mydomain.com - mypdc.domain.com) Since a Samba domain controller is (sort of) an NT4 server these won't be relevant for Windows clients. Are you using a WINS server? Are your samba server and

Re: [Samba] Where is the winbindd_idmap.tdb?

2011-05-27 Thread Gaiseric Vandal
Check the man page for idmap_rid. The idmap_rid backend provides a way to use an algorithmic mapping scheme to map UIDs/GIDs and SIDs. No database is required in this case as the mapping is deterministic. I think it calculates the uid and gid, rather than just assigning

Re: [Samba] Error when changing domain password in Windows XP

2011-05-26 Thread Gaiseric Vandal
Do you have a password change chat script configured and defined in smb.conf ? I run solaris 10 with Sun/Oracle Directory Server for LDAP backend. Samba runs as root but root is NOT a ldap administrator. My chat script has to run with ldap admin priveledges. Though I could have probably had

Re: [Samba] Winbind Trust -- grr

2011-05-25 Thread Gaiseric Vandal
It may be related to a caching issue. Use testparm -v to check the values for the following: idmap cache time winbind cache time I had a problem with samba 3.0.x where idmap entries would populate for users in a trusted domain- but after the cache time expired the cache

Re: [Samba] human understandable log format?

2011-05-25 Thread Gaiseric Vandal
Can you have hard link or symbolically link one (or more) log files to another? I use perl to split up and restructure log file entries- not for the samba logs tho. It looks like samba can send messages to syslog. If you use syslog-ng you have a lot of flexibility for logging events based

Re: [Samba] Can I write to wondows folder

2011-05-25 Thread Gaiseric Vandal
I am not sure if the Administrators group is required on the PDC- any way it would be a group specific to the PDC. Making domain users members of the Domain Administrators group should have worked. When an XP machine joins the domain , the Domain Users group should be added automatically

Re: [Samba] Cannot authenticate new ldap users (unless they are in /etc/passwd too)

2011-05-25 Thread Gaiseric Vandal
, Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com wrote: You still need a unix account to back the samba account- this can be done in several ways - have a local unix acct in /etc/passwd - have the LDAP entry for your samba user also include your

Re: [Samba] Cannot authenticate new ldap users (unless they are in /etc/passwd too)

2011-05-24 Thread Gaiseric Vandal
You still need a unix account to back the samba account- this can be done in several ways - have a local unix acct in /etc/passwd - have the LDAP entry for your samba user also include your unix account info. - have winbind allocate unix uid's and gid's dynamically for samba

Re: [Samba] Win ME couln't login

2011-05-16 Thread Gaiseric Vandal
run testparm -v You may need to make sure LANMAN authentication is enabled. You may also need to make sure that you have an LANMAN pw set for the user (this should be a separate LDAP field from the NTLM password.) Or better yet- replace the machine on the assumption that Windows ME may

Re: [Samba] build samba on solaris 10 fails on libwbclient

2011-05-16 Thread Gaiseric Vandal
On solaris you should be using Sun Studio compilers as well as sun dmake (not sun or gnu make.) You may want to configure and compile with minimal options then incrementally enable and recompile additional options. If you really want to use gcc, you could try something like mv

Re: [Samba] Access denied to samba server from win7 64bit behind a VPN

2011-05-13 Thread Gaiseric Vandal
Is this a client-to-site or site-to-site VPN? Does new view \\IP_ADDRESS_OF_SERVER work? I have one samba server (compiled from source) where Windows VPN clients can't access it by name UNLESS using either WINS ior an lmhosts file is configured. packet sniffing showed the client connecting

Re: [Samba] Linker error for Samba 3.5.8 on Solaris 5.8

2011-05-11 Thread Gaiseric Vandal
What compiler are you using? On Solaris 10, I found that you needed Solaris Studio and dmake. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of line...@halo.nu Sent: Tuesday, May 03, 2011 6:33 PM To: samba@lists.samba.org

[Samba] oracle has released samba 3.5.5 on solaris

2011-05-11 Thread Gaiseric Vandal
Just found out that Sun (Oracle) has released supported patches for Solaris 10, to bring Samba from 3.0.37 to 3.5.5 (back in Feb.) http://sparcv9.blogspot.com/2011/02/samba-355-update-for-solaris-10.html?sho wComment=1299265836812#c4735248300290186719 Solaris 10 sparc 119757-19 and

Re: [Samba] windows 7 logon problem

2011-04-17 Thread Gaiseric Vandal
Check the wiki https://wiki.samba.org/index.php/Windows7 Did you set the following? HKLM\System\CCS\Services\LanmanWorkstation\Parameters DWORD DomainCompatibilityMode = 1 DWORD DNSNameResolutionRequired = 0 I have noticed then when I reboot a Win 7 machine

Re: [Samba] windows 7 logon problem

2011-04-14 Thread Gaiseric Vandal
https://wiki.samba.org/index.php/Windows7 On 04/14/2011 10:29 AM, Jeff Savastano wrote: hi, i am able to join my domain with windows 7. when i reboot i get a Unkown error has occurred. when i check my event log i see that there is a netlogon 3210 error: This computer could not authenticate

Re: [Samba] Samba over IPX

2011-04-12 Thread Gaiseric Vandal
Even Novell Netware made the switch from IPX/SPX to TCP/IP years ago as their preferred network stack.And netware itself is end-of-lifed. That I think would the the final nail for IPX. On 04/11/2011 05:10 PM, Volker Lendecke wrote: On Mon, Apr 11, 2011 at 03:03:20PM -0600, jfree

Re: [Samba] what architecture is required for having a samba working ?

2011-04-07 Thread Gaiseric Vandal
I don't think DNS dynamic updates is required for Windows clients. Windows clients do not provide services (in most cases) so they don't need to be located in DNS/AD. I found, when running BIND9 as my primary DNS server that I did not like the why DDNS updated and resorted my zone files. I

Re: [Samba] difference between samba running on solaris 10 and centos 5.5

2011-04-01 Thread Gaiseric Vandal
I believe ZFS uses NFSv4 Acl's while Ext3 (or UFS) uses Posix. Supposedly the NFSv4 ACL's are closer to Windows. My experience was that ZFS gave more headaches than UFS in conjunction with Samba- with ZFS a perm such as 660 (i.e. user and group can read and write, but not rights to anyone

Re: [Samba] Samba4 domain trust to windows 2003 domain

2011-04-01 Thread Gaiseric Vandal
Would Samba4 support Kerberos trusts? On 04/01/2011 12:53 AM, Andrew Bartlett wrote: On Tue, 2011-03-15 at 18:37 +0100, Luca Zanon wrote: Hi, i have installed Samba4 ALPHA 15 on debian/ubuntu how to described in http://wiki.samba.org/index.php/Samba4/HOWTO all ok i created a domain and i

Re: [Samba] Unable to join to Windows 2003 PDC using samba 3.5.8 from a linux machine!!

2011-04-01 Thread Gaiseric Vandal
So your samba server thinks it is joining an NT4 domain. Is the ADS domain in NT4 compatibility mode or windows 2003 native mode?I think that NT4 machines can still join ADS domains even if the ADS domains are in 2000/2003 mode. Did you try adding the kerberos realm info for

Re: [Samba] Mounting samba volume by IP fails trust in AD

2011-03-30 Thread Gaiseric Vandal
I have run into issues where by IP it worked, but not by name (this was with one particular samba server, with VPN clients, with WINS and Netbios not enabled over VPN.) So it does seem possible that the server handles requests based on name and IP differently. Are all machines (samba, win

Re: [Samba] Samba Authentication wrecking my head [ADS]

2011-03-30 Thread Gaiseric Vandal
What version of samba? I found that samba 3.0.x (as bundled with solaris) had problems with idmap. This was with LDAP backend, a Samba DC with trusts to Windows 2003 domain (in NT domain compatibility mode.) Samba would allocate idmap entries in ldap, and would populate the TDB cache

Re: [Samba] Mounting samba volume by IP fails trust in AD

2011-03-30 Thread Gaiseric Vandal
Do you have PTR entries in DNS for all the servers? On 03/30/2011 12:35 PM, Walt Park wrote: Well.. all my samba boxes are behaving the same way. When joined to the AD, they work when addressed by name, but fail trust with the AD when addressed by IP. AD is controlled by windows 2003, not by

Re: [Samba] Unreliable connection to Samba PDC - Connections get lost, Roaming Profiles do not sync, Files can't be written, etc..

2011-03-30 Thread Gaiseric Vandal
Is this with one Windows 7 X64 client or all of them? Do XP machines have the same problem? Do the disconnects occur after the machine has been in sleep mode? On 03/30/2011 04:21 PM, Tom H. Lautenbacher wrote: Hello all! I am having severe problems with my Samba PDC. 1. My Roaming profile

Re: [Samba] Fw: PDC/wins on multiple networks

2011-03-25 Thread Gaiseric Vandal
I haven't used the remote annouce or wins proxy feature- I think that is for a samba server on one subnet to relay wins stuff to the Samba WINS server on another subnet. The simplest thing is probably to have all clients- regardless of subnet- point to a single WINS server. Your wins

Re: [Samba] Winbindd where to use it ? in which environnement ?

2011-03-25 Thread Gaiseric Vandal
If you have domain with the following specs- you do not need winbind - samba PDC - no samba member servers - samba BDC's optional - no trusted domains You would need winbind in any of following cases- - you have a Samba PDC but you need to trust Windows domains - you

Re: [Samba] Upgrade from Samba 3.0.33 to 3.5.8 woes

2011-03-23 Thread Gaiseric Vandal
If you have trouble accessing a machine, are you able to access it from a windows command line with net use \\SERVERNAME or net use \\SERVERIP I had upgraded one of my servers from 3.0.x to 3.4.x. I probably missed something in the compile. Normally an XP/Win7 client should be

Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC

2011-03-23 Thread Gaiseric Vandal
Did you try manually creating a unix user account for the samba machine? Does getent passwd show that machine? I don't have samba configured to automatically create unix user accounts or allocate ids in winbind, so I need to manually create unix accounts for users or machines. The ldap

Re: [Samba] Samba 3.4.7 can't retrieve idmap infor from ldap

2011-03-21 Thread Gaiseric Vandal
one the other side, you verified binding via normal LDAPSEARCH command , as in ldapserach -DCN=directory manager -b objectclass=* ? hope it helps /ayman -Original Message- From: Gaiseric Vandal Sent: Thursday, March 17, 2011 20:12 To: Samba Subject: [Samba] Samba 3.4.7 can't retrieve

Re: [Samba] Samba 3.4.7 can't retrieve idmap infor from ldap

2011-03-21 Thread Gaiseric Vandal
,, on the other side what are you seeing under the Access and Errors logs for DS? are you seeing the actual bind coming in? on the FC machine I presume you are running over proxyagent? hope it helps /ayman -Original Message- From: Gaiseric Vandal Sent: Monday, March 21, 2011 16:21 To: Ayman

Re: [Samba] Samba 3.4.7 can't retrieve idmap infor from ldap

2011-03-21 Thread Gaiseric Vandal
. On 03/21/2011 04:17 PM, Gaiseric Vandal wrote: Linux unix authentication uses a proxyagent account. There is no particular reason that Samba should use this account. However, to rule out the spaces and quotes being an issue, I updated the smb.conf on this machine (Fedora Core 11 linux

Re: [Samba] Upgrading system on file server

2011-03-17 Thread Gaiseric Vandal
You should build a 2nd box with Suse 11.3- you can configure it as a DC either in same or test domain to make sure it works OK. If you have LDAP as a backend, configure a BDC is possible. Is the purpose of the upgrade to upgrade Suse or to upgrade Samba? if you just want to upgrade samba

Re: [Samba] Upgrading system on file server

2011-03-17 Thread Gaiseric Vandal
Soluciones wrote: I am using LDAP, we still auth with /etc/passwd and /etc/shadow. We need to upgrade Suse, we were upgrading only Samba but now it's a must to upgrade Suse for other reasons. Why do i have to backup private and lock directories?? Bayardo. El 17/03/2011 12:16 p.m., Gaiseric

[Samba] Samba 3.4.7 can't retrieve idmap infor from ldap

2011-03-17 Thread Gaiseric Vandal
I am running Samba 3.4.7on Fedora Core 11 Linux. This is a domain member. My PDC is Samba 3.4.9 on Solaris 10. I have LDAP as a backend (Sun/Oracle Directory Server 6.)I have an OU for user accounts, and an OU for idmap entries. The PDC has already populated some idmap entries. An

[Samba] idmap allocation does not work Samba 3.4.7 on FC11

2011-03-16 Thread Gaiseric Vandal
I have setup a Samba 3.4.7 on Fedora Core 11 Linux (this is the samba version installed with yum update.) This is a domain member server. The PDC is a Samba 3.4.9 on Solaris 10. Winbind is running I am trying to get idmap allocation working. The unix accounts for the samba

Re: [Samba] Win7/W2K8 R2 sp1

2011-03-15 Thread Gaiseric Vandal
I had two Win 7 (x64) machines. Both of which crashed while installing updates (presumably SP1) via auto-updates yesterday morning. I was talking to someone from another company and this is clearly a common event. I have done a clean install of one with Win 7 (x64.) I then downloaded and

Re: [Samba] create_builtin_administrators: Failed to create Administrators (Solaris 10)?

2011-03-15 Thread Gaiseric Vandal
Is this a domain member/ standalone server? You may want to try defining gruop mappings for some of the local well known built in Windows groups e.g. BUILTIN\ADMINISTRATORS S-1-5-32-544 BUILTIN\USERS S-1-5-32-545 BUILTIN\GUESTS S-1-5-32-546 BUILTIN\POWER USERS

Re: [Samba] getpeername failed. Error was Transport endpoint is notconnected (3.0.37)

2011-03-10 Thread Gaiseric Vandal
I find I have to have both ports open- then again my main samba servers are configured as DC's. I don't know about member servers, but DC file server are using SMB-over-NetBIOS-over-IP (NT4 style) - I don't think they can support pure SMB-over-TCP/IP. I had tried setting to 139 only- I

Re: [Samba] SAMBA4 and Solaris 10 X86

2011-03-07 Thread Gaiseric Vandal
I have not tried Samba 4 on Solaris. However, I found compiling Samba 3.4.x on Solaris to be quite challenging. I had to use GCC from SunFreeware. I also have to install additional packages from Sunfreeware including libtool, libiconv, binutils, openldap and bash. GCC from Sun freeware

Re: [Samba] Samba WINS issues over VPN

2011-03-03 Thread Gaiseric Vandal
von Gaiseric Vandal Gesendet: Mittwoch, 2. März 2011 20:44 An: Samba Betreff: [Samba] Samba WINS issues over VPN I am running Samba 3.4.8 as a PDC on Solaris 10.I recently made this the WINS master- previously the BDC (Samba 3.0.37 on another Solaris 10 server.) I also use Sonicwall ipsec

[Samba] Samba WINS issues over VPN

2011-03-02 Thread Gaiseric Vandal
I am running Samba 3.4.8 as a PDC on Solaris 10.I recently made this the WINS master- previously the BDC (Samba 3.0.37 on another Solaris 10 server.) I also use Sonicwall ipsec VPN for remote access (Windows XP clients.) The sonicwall client creates a virtual NIC on the client so that

[Samba] can connect to 2 samba servers by name but to one by IP only

2011-03-02 Thread Gaiseric Vandal
(This is a follow up on an earlier post but I have tried to summarize a little better.) I am having problems connecting to one samba server by host name (e.g net use \\servername or via windows explorer) over IPSec VPN. I can connect via net use \\IPADDRESS. For every other Samba or Windows

Re: [Samba] Working simultaneously with the same user account

2011-03-01 Thread Gaiseric Vandal
03:09 AM, Aniruddha wrote: On Mon, Feb 28, 2011 at 9:37 PM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: Are users logging into the PC with this one account? Or are they logging into PC's with unique accounts? Are they accessing other shares besides this one? If this is the only share

Re: [Samba] Working simultaneously with the same user account

2011-02-28 Thread Gaiseric Vandal
Are users logging into the PC with this one account? Or are they logging into PC's with unique accounts? Are they accessing other shares besides this one? If this is the only share, it shouldn't be a problem (technically.) On 02/28/2011 11:40 AM, Aniruddha wrote: I would like to

Re: [Samba] FW: making BDC samba + ldap server

2011-02-27 Thread Gaiseric Vandal
:-) Thanks And Best Regards 2011/2/26 Gaiseric Vandal gaiseric.van...@gmail.com Can you clarify what your goal is? Your original post said My question is to reduce the use of net ... Are you trying to reduce the network traffic between LDAP servers? Are both LDAP servers OpenLDAP?It looks like

[Samba] FW: making BDC samba + ldap server

2011-02-26 Thread Gaiseric Vandal
relation between ldap.samba server and a future ldap mail server, master.master o master slave? Thanks And Best Regards 2011/2/25 Gaiseric Vandal gaiseric.van...@gmail.com I don't understand your question. What does mail have to do with Samba? Does your mail server use LDAP authentication? Or do you

Re: [Samba] FW: making BDC samba + ldap server

2011-02-26 Thread Gaiseric Vandal
the courier/ldap is the slave. No problems! single sign on for windows and outlook (Same user same password!) If it is from interest I can post my setup and relations. On Sat, 26 Feb 2011 10:13:22 -0500, Gaiseric Vandal gaiseric.van...@gmail.com wrote: Is this Samba 3 or Samba 4? If samba 3

Re: [Samba] making BDC samba + ldap server

2011-02-25 Thread Gaiseric Vandal
I don't understand your question. What does mail have to do with Samba? Does your mail server use LDAP authentication? Or do you want to use the LDAp server as an central address book for your mail clients. Either way, your LDAP server should be able to support attributes for both

Re: [Samba] Settings ACLS from Windows via member server

2011-02-24 Thread Gaiseric Vandal
Once upon a time I had only samba 3.0.x servers. They were in a samba domain (with a samba PDC) and had a trust relationship with a windows 2003 AD domain. I had to use Winbind + idmap + nsswitch.conf so that users from the trusted Windows AD domain could be allocated unix uid's and gid's. I

Re: [Samba] Samba with multiple domains with LDAP backend

2011-02-24 Thread Gaiseric Vandal
You should create a distinct smb.conf for each domain. You will want to allocate a unique IP on your server for each domain. You will want to allocate a unique ldap toplevel container for each domain. You will need to run separate instances of smbd (and nmbd and winbindd ) for each domain- you

Re: [Samba] samba policies? logon scripts?

2011-02-09 Thread Gaiseric Vandal
pdbedit lets you set the login script and various windows variables for each user. smb.conf sets the netlogon share path.The actual syntax of a login script is for of a windows question. I would look at (or google for) the Microsoft documentation on this.You should be able to have

Re: [Samba] Samba PDC Exchange 2000 Server

2011-02-05 Thread Gaiseric Vandal
exchange 2000 requires Active Directory. I would guess MAYBE you could use Samba 4. BUt I don't know if Samba 4 supports all the account attributes that Exchange would require. I would guess not. postfile/amavis/spamassasin/mail relaying would be topics for forums. Windows 2000 is no longer

Re: [Samba] Adding LDAP Backend to Samba

2011-02-03 Thread Gaiseric Vandal
Does pbdedit -Lv show the users, groups and machines? On 02/03/2011 02:34 PM, J. Echter wrote: Am 03.02.2011 20:26, schrieb J. Echter: Hi, im trying to use our LDAP server as backend for Samba (PDC). I used smbldap-tools to transfer samba users to our LDAP server. Now i have

Re: [Samba] multiple samba accounts

2011-02-03 Thread Gaiseric Vandal
On 02/03/2011 03:01 PM, Doug Lytle wrote: Marc Fromm wrote: Is it possible on a windows computer to connect to a linux server with two samba accounts, simultaneous? If you're using just simple file sharing with authentication, then yes. Connect the first share using the machine name, connect

Re: [Samba] can connect to 2 samba servers by name but to one by IPonly

2011-02-02 Thread Gaiseric Vandal
XP machine doesn't help either. It also should not matter how the server resolves hostnames. Any thoughts? Thanks -Original Message- From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Thursday, January 13, 2011 2:14 PM To: TAKAHASHI Motonobu Cc: Samba Subject: Re: [Samba

Re: [Samba] can connect to 2 samba servers by name but to one by IPonly

2011-02-02 Thread Gaiseric Vandal
: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Wednesday, February 02, 2011 7:39 AM To: 'Samba' Subject: RE: [Samba] can connect to 2 samba servers by name but to one by IPonly This is where things stand so far: Pdc1 is samba 3.4.x Bdc1 is samba 3.0.x (also the WINS server) Bdc2 is samba

Re: [Samba] Multiple domains issue

2011-02-01 Thread Gaiseric Vandal
may also want to change the file shares to be everyone and then rely on file permissions for the security. On 01/31/2011 05:53 PM, Ron García-Vidal wrote: Thanks for your reply. On 01/31/2011 05:22 PM, Gaiseric Vandal wrote: Did you reestablish the domain trusts between your NT domain and your

Re: [Samba] Multiple domains issue

2011-01-31 Thread Gaiseric Vandal
Did you reestablish the domain trusts between your NT domain and your AD domain? Does wbinfo -u and wbinfo -g on your samba server show the users and groups from the trusted AD domain? Does getent passwd and getent group on your samba server show the users and groups from the trusted AD

Re: [Samba] Basic question for user/pass authentication

2011-01-28 Thread Gaiseric Vandal
If you have a Windows of Samba machine that is not a domain member, having the workgroup name match the domain name will make browsing for resources easier. If you have Windows or Samba machine that is not a domain member, using the same password for the local account as the domain accounts

Re: [Samba] some users can login

2011-01-24 Thread Gaiseric Vandal
Look at the event logs on your PC. Look at the samba logs on the server. If only two users can even log into the XP machines, how can ALL users access the shares? Or are they accessing shares from non-XP machines? Did you check pdbedit -v someuser to compare the users who can login with the

Re: [Samba] samba not knowing new users

2011-01-19 Thread Gaiseric Vandal
For a standalone server, with unix accounts for the users, you will not need winbind anyway.Did you modify /etc/nsswitch.conf to look for users in winbind- you do not want to do this. Does pdbedit -Lv show the users? How are you viewing the smbpasswd file? It should be a TDB type file

<    1   2   3   4   5   6   7   >