Re: [Samba] samba not knowing new users

2011-01-18 Thread Gaiseric Vandal
Is this server a PDC or standalone server? What is the backend for samba accounts? Do you create unix accounts first as well, or are you using winbind/idmap backend to allocate unix id's for the samba accounts. Do accounts show up with wbinfo -u ? On 01/18/2011 09:28 AM, Hajo Locke wrote:

Re: [Samba] How to minimize authentication traffic

2011-01-18 Thread Gaiseric Vandal
You should be able to have a Samba PDC in the faraway site and set up trusts with the AD PDC in the central site. If the faraway users don't need to access files on the central server, than you probably don't even need trusts. On 01/18/2011 11:33 AM, t...@tms3.com wrote: --- Original

Re: [Samba] confusion and problem with Samba v3.3.8 as PDC with ldapsam backend

2011-01-18 Thread Gaiseric Vandal
Nt- I don't use the ldapsam:editposix option myself, if I understand it correctly it means you don't have to precreate the underlying unix accounts. However, I believe you still need to do the following Create a samba Administrator account Create samba Domain Admins and Domain Users

Re: [Samba] confusion and problem with Samba v3.3.8 as PDC with ldapsam backend

2011-01-18 Thread Gaiseric Vandal
: On Tue, Jan 18, 2011 at 2:35 PM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: Nt- I don't use the ldapsam:editposix option myself, if I understand it correctly it means you don't have to precreate the underlying unix accounts. That is my understanding as well. I've never used

Re: [Samba] UID Matching

2011-01-18 Thread Gaiseric Vandal
Just to clarify , by uid you mean then numerical user id? Unix uid's are different that Windows SID's - so they will never be identical. Samba has idmapping functionality to map unix id's (e.g. 123) to samba sid's (e.g S-1-5-xx-a-bbb-cc-1123) Since you

Re: [Samba] confusion and problem with Samba v3.3.8 as PDC with ldapsam backend

2011-01-18 Thread Gaiseric Vandal
wrote: On Tue, Jan 18, 2011 at 2:35 PM, Gaiseric Vandal gaiseric.van...@gmail.comwrote: -- snip -- net idmap secret MYDOMAIN net idmap secret alloc You do *not* need this is the you are not using explicit idmap alloc, just the default idmap

Re: [Samba] UID Matching

2011-01-18 Thread Gaiseric Vandal
As a disclaimer, I am not using samba as a AD member server- although I am also thinking about how I might make that happen. I am reading the man page for idmap_ad. The idmap_ad plugin provides a way for Winbind to read id mappings from an AD server that uses RFC2307/SFU

Re: [Samba] samba not knowing new users

2011-01-17 Thread Gaiseric Vandal
What do you mean users are in smb.conf? How are you creating the users? Can you see the user or users with pdbedit? On 01/17/2011 11:06 AM, Hajo Locke wrote: Hello, sometime i have the problem that samba ist not knowing my new created users. i can see the users in my smb.conf but

Re: [Samba] Winbind uselessly using up Idmap range in ldap

2011-01-17 Thread Gaiseric Vandal
I started on samba 3.0.x and upgrades to 3.4.x.Still having only partial success myself.I have different ou objects in ldap for the allocation range and each trusted domain . My smb.conf (editted somewhat) is below. I would that the idmapping would be created in the correct OU for

Re: [Samba] Upgrading samba 3.3.x to 3.5.x old smbpasswd file and domainaccounts

2011-01-14 Thread Gaiseric Vandal
I would have thought you needed to have unix machine accounts in the passwd/shadow file. Or are they using some sore of idmap allocation? On 01/14/2011 04:34 AM, Götz Reinicke - IT-Koordinator wrote: Hi, I plan to update our main RedHat EL 5.6 samba server from samba 3.3.x to 3.5.x . What I

Re: [Samba] MS Access

2011-01-13 Thread Gaiseric Vandal
What version of Access? I find that, in general Office 2003 plays a little nicer with Samba than Office 2007 (Office likes to change file perms on files.) Does Microsoft even supply security patches for Windows 2000 anymore? (For me, when MS did not provide patches for extended daylight

Re: [Samba] MS Access

2011-01-13 Thread Gaiseric Vandal
may be more consistent with windows. Original Message Subject:Re: [Samba] MS Access Date: Thu, 13 Jan 2011 09:07:05 -0500 From: Gaiseric Vandal gaiseric.van...@gmail.com Reply-To: gaiseric.van...@gmail.com To: samba@lists.samba.org What version of Access

Re: [Samba] MS Access

2011-01-13 Thread Gaiseric Vandal
I mentioned zfs , not because linux uses zfs specifically, but some of the issues you might run into using a unix file system that supports ACL's. Sometimes a file may be created that then can't get deleted, or a file may be created and then MS Office CHANGES the perms on the file so that

Re: [Samba] can connect to 2 samba servers by name but to one by IPonly

2011-01-13 Thread Gaiseric Vandal
nslookup on windows machines does require the FQDN name- i.e. pdc1.mydomain.com. ping does not (windows will appropriately add the domain name.) I have not tried net use \\pdc1.mydomain.com from a VPN connection. I know that nslookup and ping in Windows have separate name resolution

Re: [Samba] Samba migration to a new server

2011-01-12 Thread Gaiseric Vandal
It may actually be easier to move everything including hostname and IP to the new server and just shutdown the old (this would have to be off hours.) You should be able to do the following- - Configure the new server as a BDC. I don't know for use if you can configure a BDC with a TDB backend-

Re: [Samba] can connect to 2 samba servers by name but to one by IP only

2011-01-12 Thread Gaiseric Vandal
2011/1/6 Gaiseric Vandal gaiseric.van...@gmail.com: In fact this seems to work for any samba or windows machine on the network EXCEPT the Samba 3.4.x PDC. It seems to work for Win 2003 machines, Samba 3.4.x member servers, XP machines, etc. To analyze the problem, first put the entry

Re: [Samba] When is a machine SID created?

2011-01-09 Thread Gaiseric Vandal
You should be able to use the net command to set the machine sid as well- on the DC's, the machine sid should be the same as the domain sid. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Taso Hatzi Sent: Sunday, January 09, 2011

Re: [Samba] Read-only alert for MS Office files on samba share

2011-01-07 Thread Gaiseric Vandal
Which version of Office?Do you have full rights to the parent directory? Maybe it creates temp files in a different location? When you double-click the file, was office already running? I can't see why it would matter. ALl I can think is that when you double-click a document

Re: [Samba] can connect to 2 samba servers by name but to one by IP only

2011-01-06 Thread Gaiseric Vandal
Yes From: t...@tms3.com [mailto:t...@tms3.com] Sent: Wednesday, January 05, 2011 10:53 PM To: gaiseric.van...@gmail.com Subject: Re: [Samba] can connect to 2 samba servers by name but to one by IP only Just a quick thought...is pdc1 in DNS? On Wednesday 05/01/2011 at 7:42 pm, Gaiseric

Re: [Samba] can connect to 2 samba servers by name but to one by IP only

2011-01-06 Thread Gaiseric Vandal
Even though it is a fully virtual NIC I think the firewall (Sonicwall) still blocks Netbios broadcasts.So as far as I can tell, using DNS is the only way a VPN client could resolve a windows machine name. When I connect to the vpn, I can immediately use net use \\someserver on pretty much

Re: [Samba] Solaris 10 winbind authentication with ADS

2011-01-06 Thread Gaiseric Vandal
I am guessing it also updated samba (unless you had previously patched samba.) Did you try backing up and deleting any TDB files relating to idmap or winbind and restarting samba? On 01/06/2011 03:49 PM, CJ Keist wrote: So, no one has a clue here? -- Well,

Re: [Samba] e-pub or downloadable xhtml of the manuals?

2011-01-05 Thread Gaiseric Vandal
http://samba.org/samba/docs/ the tarball downloads should include pdfs. On 01/05/2011 02:29 AM, Christ Schlacta wrote: http://samba.org/samba/docs/man/Samba-HOWTO-Collection/ This document has provided more information to me than I can adequately express, and as masochistic as it sounds, I'd

Re: [Samba] Promote samba-3 BDC to PDC

2011-01-05 Thread Gaiseric Vandal
Client machines shouldn't care if if the DC is a PDC or BDC. Are the sites currently linked via VPN? Will they no longer be linked via VPN? Will each site have the same domain name ? If the two sites are linked somehow you want to make sure you use a WINS server on each site to make

Re: [Samba] Domain trust between a Samba PDC domain and W2K ADdomain

2011-01-05 Thread Gaiseric Vandal
I have a samba domain (Samba 3.4.x PDC) and a Windows 2003 (in 2003 native mode) domain. Trusts MOSTLY work- having Samba recognize AD users is a little trickier. For samba to trust windows, make sure you have idmap info defined in smb.conf. I have an ldap backend- it may not be quite

Re: [Samba] Domain trust between a Samba PDC domain and W2K ADdomain

2011-01-05 Thread Gaiseric Vandal
a Samba PDC domain and W2K ADdomain Date: Wed, 05 Jan 2011 17:53:48 -0500 From: Gaiseric Vandal gaiseric.van...@gmail.com Reply-To: gaiseric.van...@gmail.com To: samba@lists.samba.org I have a samba domain (Samba 3.4.x PDC) and a Windows 2003 (in 2003 native mode) domain. Trusts

[Samba] can connect to 2 samba servers by name but to one by IP only

2011-01-05 Thread Gaiseric Vandal
I have a samba domain with a Samba 3.4.x PDC (compiled from source on Solaris 10) and two Samba 3.0.x BDC's (Sun-bundled Samba on Solaris 10.) XP clients use DHCP. When on the LAN, DHCP includes WINS server (the WINS server is one of the Samba 3.0.x machines.) We also have a VPN for remote

Re: [Samba] winbind and group permissions

2011-01-04 Thread Gaiseric Vandal
...@gmail.com Cc: samba@lists.samba.org Subject: Re: [Samba] winbind and group permissions Gaiseric, thank you sooo much for the reply I will make comments inline: On Mon, 2011-01-03 at 20:06 -0500, Gaiseric Vandal wrote: Winbind is used for allowing unix things like file system access, getent

Re: [Samba] Pdbedit problem

2011-01-04 Thread Gaiseric Vandal
testparm -v should show you the backend in use. The pdbedit command has options for exporting and importing between formats. On 01/04/2011 10:50 AM, Chris Smith wrote: On Tue, Jan 4, 2011 at 9:30 AM, Michel, Loubert lmic...@astoriafederal.com wrote: I think I am using passdb backend =

Re: [Samba] winbind and group permissions

2011-01-04 Thread Gaiseric Vandal
comments inline: On Mon, 2011-01-03 at 20:06 -0500, Gaiseric Vandal wrote: Winbind is used for allowing unix things like file system access, getent passwd and getent group to handle windows users (windows users and groups get unix uid's and gid's allocated.) To say this another way

Re: [Samba] cant login with my samba password only with my linux password

2011-01-04 Thread Gaiseric Vandal
to change a user's password? On 12/27/2010 12:30 PM, Hartmut wrote: On Mon, Dec 27, 2010 at 2:16 AM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: I can't see any way that, with your configuration, samba could be using your linux password as a samba password. You would have to be using

Re: [Samba] Samba 3.5.6 with Win7 failure (XP works)

2011-01-04 Thread Gaiseric Vandal
this may be of help http://wiki.samba.org/index.php/Windows7 On 01/04/2011 04:32 PM, Jeff Blaine wrote: Hi all, We're testing 3.5.6 as an upgrade to our old 3.0.x instance. Our XP boxes can see our Samba 3.5.6 shares fine. Our Win7 boxes cannot. The specified network name is no longer

Re: [Samba] winbind and group permissions

2011-01-03 Thread Gaiseric Vandal
Winbind is used for allowing unix things like file system access, getent passwd and getent group to handle windows users (windows users and groups get unix uid's and gid's allocated.)I don't use winbind to login to a unix system as a windows user but I do use it to allow the unix file system

Re: [Samba] cant login with my samba password only with my linux password

2010-12-26 Thread Gaiseric Vandal
I can't see any way that, with your configuration, samba could be using your linux password as a samba password. You would have to be using plain text passwords in windows have samba authenticate it against your linux password.Is it really using your linux password, or at some point was your

Re: [Samba] few quick domain questions

2010-12-23 Thread Gaiseric Vandal
1. Domain Admins, Domain Computers etc Those are well known groups. Do you have any windows servers or are they just samba servers?If you have, or plan to have, any Windows machines in the domain you are probably better off setting up the groups correctly rather than trying to fix it

Re: [Samba] Multiple LDAP backends with different search base

2010-12-22 Thread Gaiseric Vandal
I would guess that if have have multiple LDAP backends it would be for redundancy- which means the ldap servers would need to be configured for replication, which means they would need to have the same suffixes for the accounts. -Original Message- From: samba-boun...@lists.samba.org

Re: [Samba] solaris 10 winbind authentication with ADS

2010-12-21 Thread Gaiseric Vandal
Is this to support authentication for unix users (e.g. via ssh) or windows users (via samba?) I found that after upgrading from samba 3.0.x to 3.4.x that the idmap allocation stopped working. In my case I already had the imdap entries populated into ldap. can you use wbinfo

Re: [Samba] Samba upgrade question

2010-12-20 Thread Gaiseric Vandal
The key advantages of the Solaris provided version is that - someone already did the compilation work - ZFS support is included (this is backported by Sun and not included with 3.0.x source code from samba.) - nsswitch support is also enabled The big problems I had with Sun's version

Re: [Samba] name resolution: dns name different to windows machine name

2010-12-20 Thread Gaiseric Vandal
I am not sure how you would have a DNS server assign random names. But if you aren't going to have the correct entries for the XP machine in DNS, then you probably should not have any DNS entries for those machines.XP machines can register their hostnames directly in DNS (if the DNS server

Re: [Samba] Ldap Users only?

2010-12-20 Thread Gaiseric Vandal
Your example is a text-book case of why you would use domains. I am not sure why it would be unacceptable- since you already have a samba machine and, from the user POV, the login process is practically the same. The LDAP component is for the samba backend- you would need an LDAP backend for

Re: [Samba] samba to act as bdc for w2k8 AD?

2010-12-18 Thread Gaiseric Vandal
Samba 3 won't work as a BDC for a Windows PDC. I don't think Samba 4 would either but you have to check the documentation at samba.org. But you could probably make the samba server a member server in the Windows domain- assuming that the WAN connection between the two is persistent and

Re: [Samba] Your home directory is listed as :'home/xxxx' but it does not appear to exist

2010-12-18 Thread Gaiseric Vandal
: Samba Subject: Re: [Samba] Your home directory is listed as :'home/' but it does not appear to exist Hi Gaiseric Vandal, yes linux system is the PDC yes i joined the windows machines in PDC Domain yes i able to logged in to the linux system successfully, I able to browse

Re: [Samba] samba to act as bdc for w2k8 AD?

2010-12-18 Thread Gaiseric Vandal
Dec 2010, Gaiseric Vandal wrote: Samba 3 won't work as a BDC for a Windows PDC. Yes, it will. I'm using 3.5 and it works fine. Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from

Re: [Samba] Samba upgrade question

2010-12-18 Thread Gaiseric Vandal
You would have to define a new Solaris 10 service for the new samba. I don't know how to do this myself- the solaris documentation should say how, but it always looked pretty complicated to me. You have to define the dependencies. You are probably better off creating an /etc/init.d/samba

Re: [Samba] Need a little help with Samba 3.5.5 on FreeNAS 7.2.5543

2010-12-18 Thread Gaiseric Vandal
What happens if you remote the radio_tr.txt file? Do you still get no stations found or does it actually complain that the file is missing? Does the file system support ACL's (ie. extended file permissions?) Is it case specific all of a sudden? Is there an issue with the file being more than

Re: [Samba] Your home directory is listed as :'home/xxxx' but it does not appear to exist

2010-12-17 Thread Gaiseric Vandal
stored in LDAP BUT they are different fields. On 12/17/2010 01:51 AM, Muqtadir Kamal wrote: Hi Gaiseric Vandal, Thanks for your quick response. I have clicked create Home directory in Authentication tab. Now I am able to login to Linux client. But whenever I browse a windows system in LDAP

Re: [Samba] Your home directory is listed as :'home/xxxx' but it does not appear to exist

2010-12-16 Thread Gaiseric Vandal
What is your client machine? This sounds like a Linux client error. LDAP autofs tables point to a home directory that is not valid. If your home dir is not mounted in linux of course you will get errors about files in home missing. possible causes - typo in ldap autofs table

Re: [Samba] samba 3.5.x, pdbedit smb.conf and profiles

2010-12-06 Thread Gaiseric Vandal
I would guess that the per-user settings should override the general smb.conf settings. I had problems with roaming profiles- I didn't want to use them but sometimes on client logins/logouts the XP client would try to load or create one. I have an ldap backend and eventually just deleted

Re: [Samba] Missing secondary groups

2010-11-29 Thread Gaiseric Vandal
My configuration has Samba domain controllers, not Windows domain controllers, so my setup may not be applicable to you. However, in order for unix to use windows groups I believe it needs to use getent group to pull the information from winbind. First of all, you need to make sure that

Re: [Samba] networking problem/Domain not available

2010-11-29 Thread Gaiseric Vandal
pm Gaiseric Vandal wrote: Is your test PC on the same switch as the samba servers? No. Were you able to look at the event logs on the XP machines? No. Well, not yet. If this problem occurs with the new switch and the PDC but not the new server , the only thing I

Re: [Samba] Missing secondary groups

2010-11-29 Thread Gaiseric Vandal
The problem seems to be with idmapping.In you smb.conf file do you have a section for idmap- this tells samba which unix user id and group id ranges can be used to correspond to windows users and id's. the docs on samba.org may be a little out of date so you should also check the man

Re: [Samba] Missing secondary groups

2010-11-29 Thread Gaiseric Vandal
idmapping does not work perfectly for me. idmap_ad backend means it should use active directory info to determine the unix uid and gid. It may bypass the issues with local tdb files. If you read the man page on wbinfo, you can manually allocate uid's and gid's [--set-uid-mapping

Re: [Samba] networking problem/Domain not available

2010-11-28 Thread Gaiseric Vandal
Is your test PC on the same switch as the samba servers? Were you able to look at the event logs on the XP machines? If this problem occurs with the new switch and the PDC but not the new server , the only thing I could think to try would be to lock the server's NIC settings to force 1 speed

Re: [Samba] Missing secondary groups

2010-11-28 Thread Gaiseric Vandal
Does getent group show the Windows groups? -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Peter Trifonov Sent: Saturday, November 27, 2010 11:58 AM To: samba@lists.samba.org Subject: [Samba] Missing secondary groups Hello all,

Re: [Samba] samba replacing novell

2010-11-22 Thread Gaiseric Vandal
Does the application create temporary files? Or does it try to create temporary files? Can you configure the app to use the local client hard drive for temporary files.I found that some MS Office Apps do funny things with file permissions that are more likely to show up on a Samba server

Re: [Samba] Compatibility of Samba

2010-11-20 Thread Gaiseric Vandal
You should clarify the question- You can, at least in theory, compile any version of Samba to run on Solaris 9.So the question really would be which versions of Samba are compatible with which versions of Windows? And even which versions of Windows are compatible with other versions of

Re: [Samba] Samba domain member (re)creates sambaDomainName record in LDAP on PDC

2010-11-15 Thread Gaiseric Vandal
I see that happen as well- although my entries are just sambaDomainName=MEMBERNAME not sambaDomainName=MEMBERNAME,dc=example,dc=com Otherwise, this seems to be normal. On 11/13/2010 01:52 AM, Konstantin Boyandin wrote: Hello, I have followed the steps mentioned in

Re: [Samba] how to map shared folders when start user profile in XP

2010-11-15 Thread Gaiseric Vandal
Are you using a login script? That should take care of mapping shared folders to drive letters. You can't use login scripts to setup printers. If the printers are properly shared from a Windows server or Samba server users should be able to easily locate them in My Network Places. On

Re: [Samba] how to map shared folders when start user profile in XP

2010-11-15 Thread Gaiseric Vandal
for giving relpy,I have made the samba successfully,it access to all the user,i want only script to add multiple user with password to samba server. On Mon, Nov 15, 2010 at 10:25 PM, Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com wrote: Are you using a login script

Re: [Samba] Samba 3.0.33, security = domain and Windows 2008 R2

2010-11-04 Thread Gaiseric Vandal
Looking through the release notes for samba 3.0.28a - 3.0.37 there does not seem to be mention on 2008 R2.The following link may explain why it doesn't work and a possible fix. http://www.openg.info/entry/win-2008-r2-samba But Samba 3.0.x. is end-of-lifed so I think your best off moving to

Re: [Samba] Samba 3.5.6 Syncing passwords

2010-11-04 Thread Gaiseric Vandal
I used to run NIS.I did not use the pam password change option- the unix password sync password program and password chat options were sufficient. If you run smbpasswd from command line as a regular user, what happens? All I can guess is that samba things the unix script failed for some

Re: [Samba] NTLM Authentication against multiple domain comtrollers

2010-11-03 Thread Gaiseric Vandal
Could you create a an extra domain, which imports the accounts from all the other domains. If it is an ldap backend you can use ldap queries nightly to pull info out. if a TBD backend up can use smbpasswd to dump info out nightly. You may need to modify the data to make sure there are no

Re: [Samba] NTLM Authentication against multiple domain comtrollers

2010-11-03 Thread Gaiseric Vandal
I think it might work in the Windows world if you had multiple domains in the same Active Domain forest. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Daniel Müller Sent: Wednesday, November 03, 2010 3:29 AM To: 'Mayank

Re: [Samba] Very odd problem

2010-11-01 Thread Gaiseric Vandal
I have a file /var/samba/locks/browse.dat.Browsing does not require wins so I suspect that deleting the wins cache was not sufficient. What is the output of hosted on the servers? I am guessing that 408c9b2b and 40899b2b are the host id's of your two servers. When you login to a domain

Re: [Samba] Very odd problem

2010-11-01 Thread Gaiseric Vandal
] BDC120 UNIQUE 192.168.1.1550 PDC 20 UNIQUE 192.168.1.2555 DOMAIN 1C GROUP 192.168.1.1587 -Original Message- From: Gaiseric Vandal [mailto:gaiseric.van

Re: [Samba] Workgroup compared to Domain

2010-10-29 Thread Gaiseric Vandal
You may want to read up on some of the Microsoft documentation. The fundamental difference is that with a domain, the user and computer accounts are centralized, not maintained separately on each computer. My experience is that once you get before 5 machines managing a workgroup gets

Re: [Samba] Winbind behaviour odd in 3.4.9 and 3.5.6 vs 3.2.14 (Samba domain with Samba member servers)

2010-10-26 Thread Gaiseric Vandal
You may need to specify separate idmap sections for each domain, as well as general settings. Samples of my smb.conf (samba 3.4.x ) are below. When I was on samba 3.0.x, idmap entries would populate for each domain in the correct OU. It would use the general idmap range, not domain specific

Re: [Samba] Winbind behaviour odd in 3.4.9 and 3.5.6 vs 3.2.14 (Samba domain with Samba member servers)

2010-10-26 Thread Gaiseric Vandal
are from idmap alloc config:range. I guess the domain specific ranges are where idmap is supposed to check for existing mappings first? On 10/26/2010 12:02 PM, Alex Crow wrote: On 26/10/10 16:32, Gaiseric Vandal wrote: You may need to specify separate idmap sections for each domain, as well

Re: [Samba] SAMBA weird situation

2010-10-24 Thread Gaiseric Vandal
In windows, do you change the folder settings so that any hidden files and system files are displayed. In Linux, are you using ls -a to show any hidden files? In Linux/unix, if you have r rights on the parent directory you should be able to see all files with ls -a, even the hidden ones

Re: [Samba] ldap user suffix

2010-10-22 Thread Gaiseric Vandal
If the two organizations having nothing to do with each other, does that mean they don't need access to the same files? Will the following solution work for you - configure a 2nd IP on the server - run two instances of samba- each samba instance has its own smb.conf file, with unique ip,

Re: [Samba] Trusted domain users unwantedly mapping onto local domain users

2010-10-21 Thread Gaiseric Vandal
I have similar issues. II am running Samba 3.4 (compiled from source) on Solaris 10- so selinux is NOT an issue for me. Otherwise I have similar config (LDAP backend for samba, trusted domains to windows 2003 server.) thought this used to work but a month or so ago it wasn't. getent

Re: [Samba] Trusted domain users unwantedly mapping onto local domain users

2010-10-21 Thread Gaiseric Vandal
-uid.) On 10/21/2010 05:15 PM, Bruce Richardson wrote: On Thu, Oct 21, 2010 at 05:02:55PM -0400, Gaiseric Vandal wrote: I have not tried ssh'ing in as a trusted domain user (I definately don't want that available..) It's not something I want to make available

Re: [Samba] Winbind user authentication (-a) fails, but kerberos authentication succeeds

2010-10-21 Thread Gaiseric Vandal
What kind of domain - samba PDC or Windows Active Directory ? Maybe the samba version is just too old. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Steven Moyse Sent: Thursday, October 21, 2010 8:52 PM To:

Re: [Samba] Application will not run for domain user

2010-10-21 Thread Gaiseric Vandal
Two possible options: 1) It may not be a local vs domain user issue. It may be an administrator vs non administrator issus. Can you add the domain user to the local administrators group? 2) It may be the file permissions- samba doesn't always translate the unix acl's to windows

Re: [Samba] Error was Transport endpoint is not connected

2010-10-19 Thread Gaiseric Vandal
, Gaiseric Vandal wrote: Did you try changing smb.conf on the NAS to be port 139 only? Also, it seems that 55 GB should not take one hour to copy (55 GBytes is 440 Gbit, and at 1 Gbit/sec and 60 secs / min, the transfer sohuld take about minutes- at least in theory.) I am guessing

Re: [Samba] problems with login and browsing on 3.5.4 LDAP PDC

2010-10-19 Thread Gaiseric Vandal
Is your samba server also a WINS server? That may help browsing issues. Do you have smb ports defined in smb.conf? The default is smb ports = 445 139 I found if I set smb ports = 139 some clients would have trouble locating shares or authenticating to servers. wiki.samba.org should

Re: [Samba] problems with login and browsing on 3.5.4 LDAP PDC

2010-10-19 Thread Gaiseric Vandal
Maybe I missed it- but do you have problems if the client and server are on the same network segment? Are all the local WINS servers samba servers or something else? On 10/19/2010 12:45 PM, Eric A. Hall wrote: On 10/19/2010 9:47 AM, Gaiseric Vandal wrote: Is your samba server also

Re: [Samba] Samba 3.5.6 - configure creates Makefile with errors on Solaris 10

2010-10-18 Thread Gaiseric Vandal
Have you tried the precompiled samba version from sunfreeware.com? It is only 3.4.2 but should have AD support. It won't have ZFS support (an issue for Solaris 10 but Solaris 9.) the winbind nsswitch stuff may be require a little work to setup. On 10/18/2010 10:05 AM, Robert M. Martel

Re: [Samba] Unable to compile Samba 3.5.6 on Solaris 9 - more winbind issues

2010-10-18 Thread Gaiseric Vandal
I had a lot of trouble with compiling Samba on Solaris 10.(Thumbs down to Sun for abandoning Samba.) The ld command was a problem.Sunfreeware gcc is hard coded to use /usr/ccs/bin/ld. I had set up a symlink so that /usr/ccs/bin/ld actually pointed to gld (e.g. /usr/sfw/bin/gld or

Re: [Samba] winbindd completely stopped responding

2010-10-18 Thread Gaiseric Vandal
idmap and winbind may be caching the entries (use testparm -v to look for cache or timeout values.) windbind or idmap processes may load data when they start, cache it, but when the cache expires they DON'T reload the data. Just a guest. I had this problem with samba 3.0.x but not 3.4.x.

Re: [Samba] Error was Transport endpoint is not connected

2010-10-15 Thread Gaiseric Vandal
-boun...@lists.samba.org] Im Auftrag von Gaiseric Vandal Gesendet: Montag, 11. Oktober 2010 16:48 An: samba@lists.samba.org Betreff: Re: [Samba] Error was Transport endpoint is not connected By default samba listens on two TCP ports- 445 and 139. You can specify this in smb.conf smb ports

Re: [Samba] Problems with Windows 7 on domain, Samba server not

2010-10-15 Thread Gaiseric Vandal
is a feature of Windows 7 and not an actual bug. On 10/15/2010 04:09 PM, Joshua J. Kugler wrote: [Accidentally sent this to Gaiseric. Oops] On Wednesday 13 October 2010, Gaiseric Vandal elucidated thus: Do you have an account (or accounts) for on the samba server for the Windows user(s

Re: [Samba] how to prevent copying programs on local harddisk from samba share

2010-10-14 Thread Gaiseric Vandal
What is the program they are running? What kind of files? Is the issue that once they give them selves write access they are then able to read data they couldn't see before? On 10/14/2010 04:19 AM, Daniel Müller wrote: I think you can restrict users of installing programs with policies

Re: [Samba] Browsing shares

2010-10-13 Thread Gaiseric Vandal
I think the ports in question will be 137-139 and 445 Or even 139 and 445 should be sufficient. But I would make sure the firewall rules only allow access on those ports for the samba server IP's. Browsing over the internet seems a little unreliable. Remote users may want to know

Re: [Samba] Problems with Windows 7 on domain, Samba server not

2010-10-13 Thread Gaiseric Vandal
Do you have an account (or accounts) for on the samba server for the Windows user(s)? Are the passwords the same? Does the samba server workgroup name match the domain name on the windows clients? Can you use the username map option in smb.conf and have a username map file that maps

Re: [Samba] Domain trusts with W2003 and SAMBA 3.0.33 on RHEL (Added info)

2010-10-13 Thread Gaiseric Vandal
Trusts are between domains. If you configure a trust so that DomainA trusts DomainB, a machine account for DomainA is created in DomainB- this allows DomainA to retreive a list of user names that it can trust. WHen you configure the outgoing trust in Windows (i.e. to you ask another

Re: [Samba] Moved PDC now issues

2010-10-13 Thread Gaiseric Vandal
On windows machines netdiag, dcdiag or nbtstat may help you determine which DC your machine has authenticated to. (dcdiag and netdiag should be in the windows 2003 resource kit or something like that from microsoft downloads.) In general, Windows clients will want to authenticate to a BDC

Re: [Samba] Moved PDC now issues

2010-10-13 Thread Gaiseric Vandal
...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Donny Brooks Sent: Wednesday, October 13, 2010 5:59 PM To: samba@lists.samba.org Subject: Re: [Samba] Moved PDC now issues On 10/13/2010 4:43 PM, Gaiseric Vandal wrote: On windows machines netdiag, dcdiag or nbtstat may help you

Re: [Samba] Error was Transport endpoint is not connected

2010-10-12 Thread Gaiseric Vandal
, Gaiseric Vandal wrote: By default samba listens on two TCP ports- 445 and 139. You can specify this in smb.conf smb ports = 445 139 445 is the newer smb over tcp.139 is the older smb over netbios over tcp/ip. 445 was for Windows 2000 and newer clients.. I am not sure why

Re: [Samba] Error was Transport endpoint is not connected

2010-10-11 Thread Gaiseric Vandal
By default samba listens on two TCP ports- 445 and 139. You can specify this in smb.conf smb ports = 445 139 445 is the newer smb over tcp.139 is the older smb over netbios over tcp/ip. 445 was for Windows 2000 and newer clients.. I am not sure why samba enables 445 by

Re: [Samba] Domain trusts with W2003 and SAMBA 3.0.33 on RHEL (Added info)

2010-10-11 Thread Gaiseric Vandal
I would try disabling the machine account scripts, and manually creating the unix level account domain trust with what ever tools you use to for ldap accounts. That should help eliminate if the script is just not running correctly. When you join local windows machine to the domain, are

Re: [Samba] Change password via ctrl+alt+del

2010-10-11 Thread Gaiseric Vandal
Is this an XP machine? Do you have password sync enabled? If password sync is enabled BUT the chat script (or whatever mechanism you use to change the unix password) is broken then password change can fail. The first thing I would try would be disabling the password sync feature and seeing if

Re: [Samba] smb_panic sys_setgroups failed

2010-10-05 Thread Gaiseric Vandal
What OS? I am running Solaris 10 machines with Samba 3.4.x and 3.0.x Samba 3.4.x (and presumably 3.5.x) checks to see how many windows groups the user belongs to. It checks what the max number of groups a user is allowed to belong to by the unix syste. If the windows group list exceeds

Re: [Samba] Windows 7 cannot connect to domain member

2010-10-05 Thread Gaiseric Vandal
I think that even with out that explicitly set domain members should be able to locate the domain controller. Does this problem exist with Windows clients that are joined to the domain? In smb.conf, have you set the ports? By default 139 and 445 are listening- if you disable 445 it

Re: [Samba] Need help compiling Samba on Solaris

2010-10-05 Thread Gaiseric Vandal
with a windows 2008 dc. -Original Message- From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Monday, October 04, 2010 17:02 To: samba@lists.samba.org Subject: Re: [Samba] Need help compiling Samba on Solaris Sort of compiled? Does that mean some options didn't compile? I

Re: [Samba] help with AD integration

2010-10-04 Thread Gaiseric Vandal
/samba. You have still not clarified why nsswitch.conf has entries for ldap. On 10/04/2010 05:17 AM, Ben George wrote: please check this link http://bentgeorge.com/samba/ all are mentioned here Thanks Ben.T.George On Thu, Sep 30, 2010 at 10:16 PM, Gaiseric Vandal gaiseric.van...@gmail.com

Re: [Samba] File permissions getting destroyed with M$ software on ZFS

2010-10-04 Thread Gaiseric Vandal
I had a lot of problems with this as well.I found it hard to find much documentation on the zfs module in samba from either samba or sun. (PS- A big thumbs down to Sun and the OpenSolaris crowd for apparently abandoning samba.) I am running Samba 3.0.x from Sun on two servers and samba

Re: [Samba] help with AD integration

2010-10-04 Thread Gaiseric Vandal
to allow access through pam only enabled accounts since usually the access is restricted to shadow by default. On 10/4/10 7:11 AM, Gaiseric Vandal wrote: According to your page getent passwd is showing the domain users. If you try to ssh into your linux machine as ben, with the way

Re: [Samba] Need help compiling Samba on Solaris

2010-10-04 Thread Gaiseric Vandal
Sort of compiled? Does that mean some options didn't compile? I was able to compile samba 3.4.x. (as you point out, it requires tinkering with the CPPFLAGS etc.)The latest OpenLDAP from sunfreeware should be fine (plus its dependencies, which are listed.) Presumably you are using GCC

Re: [Samba] ACL from win2k doesn't work

2010-10-03 Thread Gaiseric Vandal
Are you logged into your workstation as a Administrator? Is the local Administrator password on your workstation same as on the server? Even if this is the case, the samba may still complain that you initially connected as one user (PC\Administrator) and now want to connect as another use

Re: [Samba] samba with AD help.

2010-10-01 Thread Gaiseric Vandal
This reminded me of something: Solaris is bundled with Kerberos. However, with sunfreeware samba you may have also installed Kerberos packages from sun freeware. Assuming the PATH is let for /usr/local/bin:/usr/local/sbin:$PATH and LD_LIBRARY_PATH is set /usr/local/lib: you should be

<    1   2   3   4   5   6   7   >