Re: [Samba] samba with AD help.

2010-10-01 Thread Gaiseric Vandal
is under /usr/local/samba/bin/ i exicuted this testparm..that shows the sunfreeware samba's smb.conf settings. On Fri, Oct 1, 2010 at 2:22 PM, Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com wrote: This reminded me of something: Solaris is bundled

Re: [Samba] help with AD integration

2010-09-30 Thread Gaiseric Vandal
disclaimer: I don't use Samba as an ADS member server. I use samba as PDC with trusts to an ADS domain. So my observations may not be valuid. Did you try updating nsswitch.conf passwd: files winbind group:files winbind If you are using a Windows domain and have a user

Re: [Samba] help with AD integration

2010-09-30 Thread Gaiseric Vandal
/ben:/bin/sh/* you already have a unix ben and a ADS ben defined? Yes i defined the ben user in Unix and ADS...bcoz i don't have much knowledge about that sorry Hope u will help me Thanks Ben.T.George On Thu, Sep 30, 2010 at 3:59 PM, Gaiseric Vandal gaiseric.van...@gmail.com

Re: [Samba] help with AD integration

2010-09-30 Thread Gaiseric Vandal
, Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com wrote: Then it sounds like you need the AD integration. If the user's also login to the linux workstation directly (or via ssh) then you will need to configure winbind and nsswitch to support unix logins

Re: [Samba] cannot access samba server from outside domain

2010-09-30 Thread Gaiseric Vandal
Are the workstations XP, Vista or Win 7? What happens if you log in to the non-domain workstation using a username and password that match a valid domain name and password If you run testparm -v on the samba server do you have both ports 139 and 445 open? Yesterday I was trouble shooting a

Re: [Samba] help with AD integration

2010-09-30 Thread Gaiseric Vandal
, 2010 at 6:16 PM, Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com wrote: So to clarify the customer has a Sun Solaris 10 UNIX machine and a Linux workstation? FOR SOLARIS I had problems with getting nsswitch+winbind working with the samba from

Re: [Samba] help with AD integration

2010-09-30 Thread Gaiseric Vandal
I suspect Oracle won't be much help with 3rd party s/w.I had opened a ticket with Sun last year (?) when I had with domain trusts with the samba version they provided (the trusts worked BUT the cache would expire and not repopulate.) They had a cookie cutter setup for joining Samba to an

Re: [Samba] samba with AD help.

2010-09-29 Thread Gaiseric Vandal
In your smb.conf did you set security = ADS You may want to check the man page for smb.conf and security = options. On 09/29/2010 07:33 AM, Ben George wrote: when i try to join the domain in UNIX (Sun Solaris 10 SPARC),i got error message like this bash-3.00# ./net ads -d3 join -U

Re: [Samba] samba with AD help.

2010-09-29 Thread Gaiseric Vandal
-AD synchronization.. so please help me with these,for further steps. Again thanks for your reply Ben.T.George On Wed, Sep 29, 2010 at 4:04 PM, Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com wrote: In your smb.conf did you set security

Re: [Samba] how to run more than one logon script

2010-09-28 Thread Gaiseric Vandal
This is more of a Windows question (i.e. google searches windows login scripts may be helpfull. You scripts could use commands like ifmember groupname http://www.eggheadcafe.com/software/aspnet/30250014/login-script-group-membership.aspx That should let you map drives based on group

Re: [Samba] samba version to use on CentOS?

2010-09-28 Thread Gaiseric Vandal
If you want Windows 7 support, you need Samba 3.3.x. Which Fedora repo? I found that FC6 RPM's usually installed OK on RedHat RHEL5.x but anything above was likely to need a newer glibc or libc (or something like that.) On 09/28/2010 04:23 PM, scott_st...@trendmicro.com wrote: I see

Re: [Samba] solaris 10 -zfs - smb.conf

2010-09-27 Thread Gaiseric Vandal
I am making some guesses... Read the man page on idmap_rid. That might make the idmap stuff a little simpler (it doesn't apply to my environment so I am not 100% sure.) Does wbinfo -u and wbinfo -g list the AD domain users and groups? Does getent passwd and getent group list those users?

Re: [Samba] Problem with Samba - Openldap and domain autentication of Windows XP

2010-09-27 Thread Gaiseric Vandal
Do you have an underlying unix account for the pc (eg SOMEMACHINE$) It is possible to configure scripts that the unix account is created by samba if necessary when samba creates the Windows account for the machine. I don't have it set up this way, so I need to create the unix account 1st.

Re: [Samba] Problem with Samba - Openldap and domain autentication of Windows XP

2010-09-27 Thread Gaiseric Vandal
account info. On 09/27/2010 11:08 AM, Claudio Prono wrote: Gaiseric Vandal ha scritto: Do you have an underlying unix account for the pc (eg SOMEMACHINE$) It is possible to configure scripts that the unix account is created by samba if necessary when samba creates the Windows account

[Samba] Fwd: Re: Problem with Samba - Openldap and domain autentication of Windows XP

2010-09-27 Thread Gaiseric Vandal
, Sep 27, 2010 at 12:15 PM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: You user script may be adding a LOCAL unix account (in /etc/passwd.) Do you see the accounts in there? You may need to custom script that adds the accounts to ldap. The following may help https://gna.org/projects

Re: [Samba] Problem with Samba - Openldap and domain autentication of Windows XP

2010-09-27 Thread Gaiseric Vandal
street: 500 Pretroli Aiv telephoneNumber: 888-555-1212 userPassword: On 09/27/2010 12:15 PM, Claudio Prono wrote: Gaiseric Vandal ha scritto: You user script may be adding a LOCAL unix account (in /etc/passwd.) Do you see the accounts in there? You may need to custom script that adds

Re: [Samba] samba server dependents

2010-09-27 Thread Gaiseric Vandal
If you are starting with a clean machine, you can probably pick an OS distribution that already has Samba included. A fairly recent version of Fedora Core Linux (12 or 13) should have samba bundled with it (along with OpenLDAP and kerberos.) I would guess that most current Linux distros

Re: [Samba] Samba 3.5.4: log.smbd: PANIC (pid 16232692): sys_setgroups failed

2010-09-26 Thread Gaiseric Vandal
This may not be related- but on Solaris there is a ngroup_max system parameter (default is 16.) I found solaris 3.4.x would check to see if the user's group list exceeded this and would panic (by design) if it did. I don't know if this is to prevent using Windows to bypass Unix security?

Re: [Samba] connecting two samba shares on one pc with windows xp

2010-09-22 Thread Gaiseric Vandal
On 09/22/2010 08:23 AM, Chris McDonald wrote: I am trying to mount two shares on Linux box using XP windows machine. Both shares are valid and work independently, but I want both to be connected simultaneously. I am able to connect A but in order to connect B i have disconnect the A

Re: [Samba] NT4 Migration

2010-09-22 Thread Gaiseric Vandal
What do the following commands show? net getlocalsid net getdomainsid They should be the same. When you ran net rpc getsid did you include -S the_name_of_the_NT4_server ? Maybe it somehow talked to another domain controller. If your samba machine was configured as a BDC before

Re: [Samba] can Samba 2.2 join Windows 2003 R2 DC?

2010-09-20 Thread Gaiseric Vandal
I would bet this isn't going to work.I used to run PC NetLink (as an alternative to samba.) There were some registry changes (signorseal) that would let XP machines join a PCNL domain but they never worked with Win 2003.And that was with WIn 2003 as a domain member not a server. If

Re: [Samba] smbclient fails with NT_STATUS_NO_SUCH_USER for trusted domains, can't force anonymous access from Windows

2010-09-18 Thread Gaiseric Vandal
To: gaiseric.van...@gmail.com Cc: samba@lists.samba.org Subject: Re: [Samba] smbclient fails with NT_STATUS_NO_SUCH_USER for trusted domains, can't force anonymous access from Windows DId ya check your samba pam? On Wed, Sep 15, 2010 at 10:45 AM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: The samba

Re: [Samba] smbclient sending no frames outside local VLAN

2010-09-15 Thread Gaiseric Vandal
Is the print server a samba server or a CUPS server? If it is a CUPS server then maybe the smbclient is not the appropriate printing tool. I believe CUPS can share printers via several printing protocols (e.g. IPP and LPD.) I don’t know if it can make the printer appear to be a windows shared

Re: [Samba] smbclient fails with NT_STATUS_NO_SUCH_USER for trusted domains, can't force anonymous access from Windows

2010-09-15 Thread Gaiseric Vandal
, this share does not contain information that needs much protection.) Thanks From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Tuesday, September 14, 2010 1:16 PM To: samba@lists.samba.org Subject: RE: smbclient fails with NT_STATUS_NO_SUCH_USER for trusted domains, ntlm_auth

[Samba] smbclient fails with NT_STATUS_NO_SUCH_USER for trusted domains, ntlm_auth succeeds, wbinfo not caching

2010-09-14 Thread Gaiseric Vandal
relationship with a 2nd Windows domain that was no longer active- this fixed the slow wbinfo -u response but did not fix the smbclient authentication issue to the existing windows domain. From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Monday, September 13, 2010 3:55 PM To: samba

Re: [Samba] smbclient fails with NT_STATUS_NO_SUCH_USER for trusted domains, ntlm_auth succeeds

2010-09-14 Thread Gaiseric Vandal
: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Tuesday, September 14, 2010 9:19 AM To: samba@lists.samba.org Subject: smbclient fails with NT_STATUS_NO_SUCH_USER for trusted domains, ntlm_auth succeeds, wbinfo not caching FYI The ntlm_auth command does work with users from

[Samba] NT_STATUS_NO_SUCH_USER for trusted domains

2010-09-13 Thread Gaiseric Vandal
I am running Samba 3.4.7 (compiled from source) on Solaris 10 as a PDC. I have trusted domains setup with a Windows 2003 Active Directory domain in 2003 native mode.Everything is in an LDAP backend (unix accounts for the Samba domain, idmap entries for trusted domains.) The Solaris 10

Re: [Samba] Multiple Samba PDCs doubt

2010-09-03 Thread Gaiseric Vandal
You should only have one PDC for a domain. You can have multiple Domain Controllers. But you can have only one Primary Domain Controller. Any other domain controllers must be Backup Domain Controllers. All domain controllers provide logon functionality to clients. All DC's use the same

Re: [Samba] samba 3.0.21b on Solaris 10 U5 : Error - checking configure summary ... configure: error: summary failure. Aborting config

2010-09-02 Thread Gaiseric Vandal
Solaris 10 (with latest patches) should have samba 3.0.37 already included. smbd -b indicates it was built with ADS support. I don't know if it really works reliably or not, since I am not integrating with active directory. Sunfreeware.com samba did not include either zfs or nsswitch

Re: [Samba] Domain not available even minutes after workstation startup

2010-08-31 Thread Gaiseric Vandal
. The XP workstation is using WINS, set via DHCP (option netbios-name-servers ip address of the PDC;) On Mon, Aug 30, 2010 at 10:43 PM, Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com wrote: Is the PDC also a WINS server? Are the XP workstations using WINS

Re: [Samba] Domain not available even minutes after workstation startup

2010-08-31 Thread Gaiseric Vandal
Any further insight? Abe On Tue, Aug 31, 2010 at 10:00 PM, Gaiseric Vandal gaiseric.van...@gmail.com wrote: Did you check the event logs in Windows- they may provide some additional info. This error sounded familiar- most of my users are in a Samba domain, but I have one group that uses

Re: [Samba] Domain not available even minutes after workstation startup

2010-08-30 Thread Gaiseric Vandal
Is the PDC also a WINS server? Are the XP workstations using WINS? On 08/29/2010 09:01 PM, Abe Lau wrote: Hi all, I have recently experienced an intermittent problem of getting the error message of Domain not available at initial logon of some XP workstations connected to a Samba PDC. The

Re: [Samba] Migrating samba domain to new computer.

2010-08-30 Thread Gaiseric Vandal
The localsid on a DC should be the domain sid.You should be able to fix this with net setlocalsid command. Generally in Windows you want to assign permissions and rights to a group rather than directly to a user.As long as your Administrator account is in the Domain Admins group and

Re: [Samba] Migrating samba domain to new computer.

2010-08-30 Thread Gaiseric Vandal
30 August 2010 07:54:55 am Gaiseric Vandal wrote: The localsid on a DC should be the domain sid.You should be able to fix this with net setlocalsid command. Generally in Windows you want to assign permissions and rights to a group rather than directly to a user.As long as your

Re: [Samba] Moving to a new PDC, and if possible, rename the domain name

2010-08-29 Thread Gaiseric Vandal
Is the existing server using tdbsam or LDAP? The pdbedit command has options to import/export from/to various backends. Once you copy the accounts from one server to another you could configure the new server to temporarily be a BDC, then make it a PDC and drop the original serve. Does the Mac

Re: [Samba] zfsacl and nfs4 settings

2010-08-20 Thread Gaiseric Vandal
On 08/19/2010 10:33 AM, Stroh, George wrote: I am looking for where zfsacl settings such as, zfsacl: acesort = dontcare , are documented. Do I need NFS settings such as, nfs4: mode = simple , if I am not using NFS? If I do, where are they documented? Thanks Samba documentation seems to

Re: [Samba] samba 3.4.8 / solaris / unix secondary groups

2010-08-20 Thread Gaiseric Vandal
Are they both using the same backend? Is the group mapping set up correctly #net groupmap list Also you can use samba net command to verify user's group list, and a group's user list. # net rpc group members some group -S yourserver -U Administrator # net rpc user info someuser -S

Re: [Samba] Windows Server + Samba

2010-08-19 Thread Gaiseric Vandal
On 08/19/2010 08:21 AM, Maiquel Consalter wrote: Hi peopel, i am install the samba server version 3.5, and my Windows server when i try connect show that error: The device attached to the system not functioning. My client windows xp, vista, 7 connect with out errors. Someone help? It can't

Re: [Samba] help making fileserver

2010-08-19 Thread Gaiseric Vandal
On 08/18/2010 09:37 PM, Hernan Caffera wrote: Hi, folks ! Perhaps somebody can help me with a litle isuue. I´ve got a PDC with Ubuntu+Samba 3.5 +LDAP working fine in my network. But now I’m trying to implement a fileserver that autenticate against my domain server. If someone have any idea

Re: [Samba] authentication from one samba to another

2010-08-19 Thread Gaiseric Vandal
This is why people use a domain model. You should have one machine configured as a PDC and the other as a member server. On 08/19/2010 12:25 AM, Techienote com wrote: Hi, We have one samba server in our office. Let take it as A. We have created one new samba on another machine. Let take it

Re: [Samba] Error: You do not have permission to change your password

2010-08-18 Thread Gaiseric Vandal
I am pretty sure that the password command and script is run as root, not as the user changing the password.What happens if you run the password commands on the samba server? I don't have smbldap tools on my system (Solaris, so not provided by the Sun distro) so I had to rely on the OS

Re: [Samba] Error: You do not have permission to change your password

2010-08-18 Thread Gaiseric Vandal
...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Gaiseric Vandal Gesendet: Mittwoch, 18. August 2010 15:48 An: samba@lists.samba.org Betreff: Re: [Samba] Error: You do not have permission to change your password I am pretty sure that the password command and script is run

Re: [Samba] How to configure winbind to work with two domain controllers?

2010-08-11 Thread Gaiseric Vandal
You linux server need to be in one domain only. On the windows domain controllers, you can establish trusts between the domains. On your linux server you may need to specify separate idmap parameters for each domain. Based on man idmap_ad it might look something like ... idmap domains =

Re: [Samba] samba and ms server 2008

2010-08-09 Thread Gaiseric Vandal
http://wiki.samba.org/index.php/Windows7 I would be pretty sure that if Windows 7 doesn't work with Samba 3.0.x that Windows 2008 won't either. Rather than compiling samba 3.4 or 3.5 from source I would go with Fedora Core 11 (samba 3.3.x) or some other more up-to-date linux distro that

Re: [Samba] group members

2010-08-06 Thread Gaiseric Vandal
On 08/06/2010 10:16 AM, raveenpl wrote: Hi! I am currently using samba (3.5.4) with ADS domain. Do you know if it is possible to display all members of a single group? (I am not interested in parsing getent group/passwd output because I am using a huge amount of users and this takes a lot of

Re: [Samba] Domain trust between a Samba PDC domain and W2K AD domain

2010-08-05 Thread Gaiseric Vandal
It may depend somewhat on the domain or forest mode of the AD domain. I had partial success with Samba 3.0.x and a Windows 2003 domain in mixed mode. However the winbind idmap entries would expire from cache and not refresh.I couldn't get Samba 3.0.x to trust an AD domain in Windows

Re: [Samba] Domain trust between a Samba PDC domain and W2K AD domain

2010-08-05 Thread Gaiseric Vandal
He is correct that the Windows 2003 native shd be able to trust an NT4 domain (which is what Samba pretends to be.) AD domain in Windows mixed mode supports NT4 domain members- which is not what you are trying to do anyway. But it suggested to me that when the AD domain moves to native

Re: [Samba] Samba and ZFS

2010-08-04 Thread Gaiseric Vandal
Solaris 10 includes samba 3.0.x with zfs support. Sun backported zfs modules from newer sun releases.If you were to download samba from www.samba.org you would have to go with 3.4 or 3.5 for the zfs module. In the short term, assuming you don't have Vista or Windows 7 clients and

Re: [Samba] Samba and ZFS

2010-08-04 Thread Gaiseric Vandal
of more than 16 groups and are using ZFS acls. Faced this problem and could not solve even by compiling samba 3.5.4, adding ngroups_max=1024 in /etc/system and doing other things. On 08/ 4/10 04:44 PM, Gaiseric Vandal wrote: Solaris 10 includes samba 3.0.x with zfs support. Sun backported

Re: [Samba] Need suggestion for domain controller

2010-08-01 Thread Gaiseric Vandal
I would suggest that putting the PDC and LDAP server on the same machine does make sense, since they are (from the point of view of windows clients) so closely integrated. It is correctly that if you have the both services on the same machine, then if that machine goes down you lose both

Re: [Samba] Need suggestion for domain controller

2010-07-31 Thread Gaiseric Vandal
I would consider a newer Linux distribution besides CentOS 5.x I have worked with RHEL and Fedora. I think (not 100% sure) that Centos 5.x comes with Samba 3.0.x If you want Win 7 client support you would want samba 3.4.x or 3.5.x.Which means either a more current linux release or

Re: [Samba] [SAMBA] Problem connecting Computer to network

2010-07-30 Thread Gaiseric Vandal
=internaltest modifyTimestamp: 20100728230213Z So I am not quite sure what is going on here. On Thu, Jul 29, 2010 at 4:44 PM, Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com wrote: When you try to join a computer to the network, you mean you are trying to join

Re: [Samba] [SAMBA] Problem connecting Computer to network

2010-07-29 Thread Gaiseric Vandal
When you try to join a computer to the network, you mean you are trying to join a Windows PC (e.g. XP Pro) to the domain? Or you are trying to join the PDC machine to the domain? I would guess you need to manually create the PDC's unix account, even if samba is going to create the other

Re: [Samba] Samba LDAP ignores group information

2010-07-27 Thread Gaiseric Vandal
On 07/27/2010 03:38 PM, Daniel Deptuła wrote: W dniu 2010-07-27 20:05, alexan...@nautae.eti.br pisze: Hi. Excuse my English. I've installed Samba+OpenLDAP as a PDC. Everything works fine but Samba ignores completely group information. Linux is ok. Any clue? I'm going crazy here! Here's

Re: [Samba] Files missing (not hidden)

2010-07-27 Thread Gaiseric Vandal
I have run into this with various Office documents. When you save an Excel file it will delete the file and rewrite a brand new file with the same name.If you don't have sufficient permisisons to write the file AND set various attibrutes the save process will fail.You will probably

Re: [Samba] make fails with samba-3.5.4 Solaris 9

2010-07-20 Thread Gaiseric Vandal
Does it work if you have a simpler configure command e.g. ./configure --prefix=/opt/samba-3.5.4 I have not tried configuring samba when specifying the include subfolder or the actual *.h file in the ldap or krb5 option. (I always had to set compiler and linker flags to make sure it detected

Re: [Samba] Samba 3.0.23d

2010-07-19 Thread Gaiseric Vandal
. But if you aren't doing domain trusts and are using UFS it should also be fine. If you don't have the Solaris 10 DVD you can download it from Sun. On 07/19/2010 06:05 PM, Linux Addict wrote: On Thu, Jul 1, 2010 at 5:18 PM, Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-16 Thread Gaiseric Vandal
vfs_zfsacl MMM On 07/15/10 04:32 PM, Gaiseric Vandal wrote: I compiled Samba 3.4.x on Solaris 10.(I have a Samba 3.4.x pdc with two Samba 3.0.x BDC's.) Samba 3.0.x DCs will not support Windows 7 clients (don't have any yet but it is probably inevitable) and doesn't seem to support trusts

Re: [Samba] login with email

2010-07-16 Thread Gaiseric Vandal
The @ sign means you are specifying the domain. With Active Directory server you can have an internet-type domain name. Which means, as you saw, can simplify login experience for the user. I would guess the solution is to have your Samba server emulate an AD server.I don't think

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-15 Thread Gaiseric Vandal
I compiled Samba 3.4.x on Solaris 10.(I have a Samba 3.4.x pdc with two Samba 3.0.x BDC's.) Samba 3.0.x DCs will not support Windows 7 clients (don't have any yet but it is probably inevitable) and doesn't seem to support trusts with Windows 2003 Native domains (at least it didn't for

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-14 Thread Gaiseric Vandal
Here is the catch (at least for some people.) This can break NFS stuff.On my PDC I made a similar change. Home directories are not on the PDC. This fixed the problem of people getting login failures when logging into windows if they had more than 16 groups. But if a user tries to

Re: [Samba] Wrong results in dir listing with wildcard

2010-07-12 Thread Gaiseric Vandal
What does dir /x show? The /x option should give you the 8.3 version of the name. That may be being matched by the wildcard. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Jeffrey McLellan Sent: Friday, July 09, 2010 8:25 PM

Re: [Samba] samba3 domain client not auth some users

2010-07-12 Thread Gaiseric Vandal
Is the linux client configured as a samba server? Or is the user trying to access via console logion, ssh or nfs? -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Dirk Kleinhesselink Sent: Monday, July 12, 2010 2:12 PM To:

Re: [Samba] Migrate to NTLM V2

2010-07-09 Thread Gaiseric Vandal
Can you post the list if this works? A while back I tried changing smb.conf settings to require NTLM v2. I then tried logging in (via remote desktop) to a Win 2003 machine and was unable too. This wasn't critical so changed smb.conf back to allowing NTLM v1. -Original Message-

Re: [Samba] File owner SID instead of name showing for one user

2010-07-08 Thread Gaiseric Vandal
Also make sure that SID returned by wbinfo -n DOMAIN\name matches the name returned bywbinfo -s SID command. On 07/08/2010 01:45 PM, t...@tms3.com wrote: Hello, I recently migrated all data and user accounts from our old Samba file server to a new (Samba 3.4.0 on Unbuntu 9.10) one.

Re: [Samba] File owner SID instead of name showing for one user

2010-07-08 Thread Gaiseric Vandal
On 07/08/2010 03:10 PM, Gregory A. Cain wrote: Exactly. I checked 4 or 5 other users - no problems. Also did a spot-check of files belonging to other users in Windows Explorer. It appears this is the only user with the problem. I checked for duplicate UID's and found none. Using ls -l on

Re: [Samba] How to regenerate passdb.tdb

2010-07-08 Thread Gaiseric Vandal
On 07/08/2010 05:43 PM, Jeremy Allison wrote: On Thu, Jul 08, 2010 at 11:32:32AM +1000, Abe Lau wrote: Hi, I was having problem with the tdbsam backend in which a particular user got listed twice with pdbedit. (http://www.mail-archive.com/samba@lists.samba.org/msg109110.html) Without much

Re: [Samba] Problem After Upgrade - NT_STATUS_FILE_IS_A_DIRECTORY

2010-07-07 Thread Gaiseric Vandal
You can't buy extra licenses for XP- you would need to install Windows Server instead.That doesn't really simplify things. A fake raid card under Windows XP is useful since XP does not directly provide disk mirroring.Otherwise- in my opinion- you might as well stick with software

Re: [Samba] Access to administrative shares on Windows

2010-07-07 Thread Gaiseric Vandal
On the Windows machines, have you tried setting up an additional share? Maybe the the issue is not specific to Administrative shares? FYI I did verify from an XP machine (not in the domain) that net use \\server\ipc$ /user:mydom\administrator does work- I do get prompted for the pw because the

Re: [Samba] Samba Scenario

2010-07-06 Thread Gaiseric Vandal
Linux ext3 and ext4 file systems should support acl's, which allow for multiple users and groups and the more fine grained controls you are looking for.The setfacl and getfacl commands should verify if this is working. I am running Samba on Solaris with the zfs file system- so this is not

Re: [Samba] Set ACLs on Samba share from Windows

2010-07-04 Thread Gaiseric Vandal
It works for me - Solaris 10, ZFS file system, configured as a PDC or BDC #testparm -v | grep acl acl compatibility = auto acl check permissions = Yes acl group control = No acl map full control = Yes force unknown acl user = No nt acl support =

Re: [Samba] Identical user entry in pdbedit (tdbsam)

2010-07-04 Thread Gaiseric Vandal
What does the following command show? #getent passwd | grep -I UserA -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Abe Lau Sent: Sunday, July 04, 2010 8:27 PM To: samba@lists.samba.org Subject: [Samba] Identical user

Re: [Samba] pam_smbpass.so passdb.tdb support

2010-07-03 Thread Gaiseric Vandal
You need to first make sure that samba is working correctly before trouble shooting the ftp component. Are you using samba for windows clients? The testparm -v should show your current configuration, including which is the password backend. I do not see any reason to change to the older

Re: [Samba] pam_smbpass.so passdb.tdb support

2010-07-03 Thread Gaiseric Vandal
Maybe the solution is one of the following - use winbind, which includes update /etc/nsswitch.conf.This will let all basic unix services (including ftp) authenticate against your windows account. - enabled password sync in samba so that your windows and unix passwords are in sync. Then

Re: [Samba] Default Hidden Disk Shares

2010-07-02 Thread Gaiseric Vandal
I think I missed part of the conversation, but what would be the purpose of this feature? (I am not even sure why Windows does this.) On 07/02/2010 02:15 PM, Robert LeBlanc wrote: On Fri, Jul 2, 2010 at 2:05 AM, Atkinson, Robertratkin...@tbs-ltd.co.ukwrote: Interesting to see you say

Re: [Samba] Samba 3.0.23d - Solaris 10

2010-07-01 Thread Gaiseric Vandal
Solaris 10 comes with Samba 3.0.x (I think 3.0.35 is the most recent) so no need to compile it yourself.It includes backported support for zfs acl's.I have compiled Samab 3.4.x on solaris because I needed better support for domain trusts with Windows 2003 mode domains. -Original

Re: [Samba] Samba 3.0.23d

2010-07-01 Thread Gaiseric Vandal
What area? The initial packages should be on the solaris DVD bash-3.00# pkginfo | grep -i samba system SUNWsmbacsamba - A Windows SMB/CIFS fileserver for UNIX (client) system SUNWsmbarsamba - A Windows SMB/CIFS fileserver for UNIX

Re: [Samba] Can Map shares but cannot write

2010-06-30 Thread Gaiseric Vandal
Did you try temporarily commenting out the valid users and write list lines. That should make it writable by default.If you are then able to write it suggests that samba is not correctly matching up the users' groups to the valid users and write list groups. Although if this were the

Re: [Samba] Can Map shares but cannot write

2010-06-30 Thread Gaiseric Vandal
What happens if you try to mount a samba share via CIFS from linux (e.g. smbclient, mount -o cifs ?) Or may be mount the drive in windows with the net use command.Either way you explicitly set the domain/username. Do any of the other log files refer to issues with mapping users? What is

Re: [Samba] Using pdbedit to list users - inconsistent result?

2010-06-29 Thread Gaiseric Vandal
Is this for all users or just some users? If for some users and not others, does pdbedit -Lv someuser show anything different? What happens if you delete and recreate a samba account e.g. smbpasswd -x drew smbpasswd -a drew On 06/29/2010 06:06 AM, Alastair Sherringham wrote:

Re: [Samba] limit access to folder without mapping a new drive

2010-06-29 Thread Gaiseric Vandal
Change the file permissions, either via Windows or with unix chmod, chown etc on the server.. The share perms will not override the file system permissions. On 06/29/2010 12:19 PM, c cc wrote: Hi, Under our file structure, we have /files/all/departments/. We want everyone to have access to

Re: [Samba] getent behavior since 3.5.x

2010-06-26 Thread Gaiseric Vandal
Are you use the nss_winbind or winbind_nss files compiled? They may be in a separate directory or explicitly require make nsswitch command. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of David Boyd Sent: Friday, June 25,

Re: [Samba] migration of PDC tdbsam backend to BDC - failed to fetch domain database

2010-06-25 Thread Gaiseric Vandal
What version of samba? The vampire command can be used to pull account info from an NT4 server into a Samba 3.x domain. I am not sure if it can be used against a Samba 3.x server. I could be wrong. Samba 4 would be a different situation. You may be able to copy the samba private and

Re: [Samba] Anyone try 'ssh server and get Password for DOMAIN\USER:

2010-06-25 Thread Gaiseric Vandal
I might be wrong but couldn't you modify /etc/nsswitch.conf to use passwd: files winbind group: files winbind instead? IS the Samba server the PDC? Do you have local unix accounts on it? On 06/25/2010 01:12 AM, L. A. Walsh wrote: I'm trying to use 'ssh'

Re: [Samba] wbinfo messed up (was Re: Anyone try 'ssh server and get Password for DOMAIN\USER:)

2010-06-25 Thread Gaiseric Vandal
domain. I would check the results of net groupmap list. Make sure that Domain Users and Domain Administrators are mapped. On 06/25/2010 03:59 PM, Linda W wrote: Gaiseric Vandal wrote: IS the Samba server the PDC? Do you have local unix accounts on it? (yes, yes).. I might be wrong

Re: [Samba] Blocking workgroup discovery

2010-06-24 Thread Gaiseric Vandal
I think, by the fundamental nature of how networking protocols work, that broadcasts do not pass through routers - although with a VPN it may be a little different. However, I have the same situation. A Windows server on the host network shows my home workgroup in the network neighborhood.

Re: [Samba] Solaris 10 Configuration file

2010-06-23 Thread Gaiseric Vandal
You can download talloc and tdb from talloc.samba.org and tdb.talloc.org. I might configure them both --with-prefix=/usr/local/samba-extras. LD_LIBRARY_PATH should include /usr/local/samba-extras/lib, while PKG_CONFIG_PATH should include /usr/local/samba-extras/pkgconfig. I am not sure if these

Re: [Samba] Winbind problem: can't convert sids and gids

2010-06-23 Thread Gaiseric Vandal
Which samba version? I had Samba 3.0.x on Solaris 10, and winbind able to allocate uids and gids to users and groups from trusted domain (at least to Windows 2003 domains in mixed mode.) When I switched to a Samba 3.4.x PDC the allocation of new uids and gids broke.I suspect there is

Re: [Samba] one user member of multiple groups

2010-06-22 Thread Gaiseric Vandal
You should be able to have the unix user listed in multiple unix groups e.g cat /etc/passwd ... marketing:1500:user-1,user-2,user-3 ... If the groups are mapped to windows groups (verify with net groupmap list) that should be sufficient. On 06/21/2010 09:54 PM, mrdlnf wrote: Hi All,

Re: [Samba] xp clients can't auth after reboot without smb restart

2010-06-22 Thread Gaiseric Vandal
Which samba version? Are these XP Pro or XP Home machines. If XP Pro, have you tried joining the machine to the domain? When you map a drive letter to a samba share from XP, are you using LocalPC\yourname or Domain\Yourname when specifying credentials? Are you mapping the drive with

Re: [Samba] xp clients can't auth after reboot without smb restart

2010-06-22 Thread Gaiseric Vandal
On 06/22/2010 01:55 PM, John Drescher wrote: An error occurred while reconnecting Z: to \\domain-fs\business Microsoft Windows Network: The specified network name is no longer available This connection has not been restored. Looks like a browsing problem to me. Try to reconnect using ip

Re: [Samba] xp clients can't auth after reboot without smb restart

2010-06-22 Thread Gaiseric Vandal
and I'm prompted for login info, specifying domain\username or just username produces the same results. According to samba and ldap logs, these credentials are never passed to the server at that time. On Tue, Jun 22, 2010 at 12:44 PM, Gaiseric Vandal gaiseric.van...@gmail.com

Re: [Samba] xp clients can't auth after reboot without smb restart

2010-06-22 Thread Gaiseric Vandal
are not using dhcp, or if your dhcp server can not assign wins, you can statically set it on the XP client. On 06/22/2010 04:24 PM, delpheye wrote: On Tue, Jun 22, 2010 at 1:07 PM, Gaiseric Vandal gaiseric.van...@gmail.com mailto:gaiseric.van...@gmail.com wrote: On 06/22/2010 01:55 PM

Re: [Samba] Changing ACLs via windows dialgue box ? Is it possible ? [SEC=UNCLASSIFIED]

2010-06-20 Thread Gaiseric Vandal
Which platform? The idmap suggestion seems to make sense. I had the same problem with member servers until I set up idmap (even though the unix id's were consistent between all machines.) I did not have a problem though on the PDC. Is this a domain controller? -Original Message-

Re: [Samba] Samba 3.5.2 getent passwd does not work

2010-06-20 Thread Gaiseric Vandal
Did you update /etc/nsswitch.conf with files: winbind groups: winbind -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Piotr Sikora Sent: Friday, June 18, 2010 6:24 AM To: samba@lists.samba.org Subject: [Samba]

Re: [Samba] AD + Samba/OpenLDAP

2010-06-20 Thread Gaiseric Vandal
So is the Samba server going to be configured as a member server or a PDC or a BDC? Are you treating the AD server as just an LDAP server? You can use an LDAP browser (e.g. Active Directory Studio) to browse the LDAP structure of an active domain server. I think all the fields you might need

Re: [Samba] how to make ms xp save login credentials

2010-06-18 Thread Gaiseric Vandal
Add the following to the command /persistent:yes You can type net /? to get the possible options. You can also use windows explorer to map drives. If the XP machine is joined to a domain you shouldn't need to enter a user name and password. On 06/18/2010 03:41 AM, Jelle de Jong

Re: [Samba] Transferring PDC responsibility without LDAP

2010-06-18 Thread Gaiseric Vandal
Deutschmann wrote: On Tue, 15 Jun 2010, Gaiseric Vandal wrote: Is the new machine going to have the same IP address and machine name? I [...] I'm aware of that possibility, and in some sense I've done that in the past. But for this particular hop, I'd prefer to keep the IP and hostname

Re: [Samba] Problem with Windows XP: Cannot join Samba PDC

2010-06-17 Thread Gaiseric Vandal
For an NT4/Samba domain, DNS is not relevant. The XP client will locate the PDC via netbios. WINS is not essential but definately helps. On the XP machine, type ipconfig /all and make sure that your XP machine is configured for the WINS server. Also, make sure on your XP TCP/IP settings

Re: [Samba] samba migration to another llinux distro

2010-06-16 Thread Gaiseric Vandal
If you are moving the RAID controller with the disks then it should be OK. And in that case using RAID5 should be OK for /boot. You can also, with the 3ware, configure all the disks in a single RAID5 (or maybe RAID5+1 or RAID6), and then use 3ware to create two separate LUN's (logical

<    1   2   3   4   5   6   7   >