Re: [Samba] Problems with MySQL backend.

2006-01-07 Thread Florian Effenberger

Hello everyone,

again: I have not received any single message from you regarding the 
changes in 3.0.21 - maybe that's why no one responed? Maybe the message 
simply did not get through?


I asked again in Bugzilla to re-send that message, but I still received 
no message (but thanks to Volker the code works again).


So, what changes are you proposing for 3.0.22 that will render the 
pdb_mysql module unusable?


And why are you introducing such changes into the stable tree, so that 
every now and then a fix for the modules is important? Please shed a 
light, I really don't know what's going on at the moment... :-)


Can the MySQL bug (#3369) have something to do with the changes you 
introduced or is this something different that exists longer?


Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems with MySQL backend.

2006-01-05 Thread Florian Effenberger

Hi Filip,


Ok, I think it's time to someone say I will maintain this. So I'm
saying it :-) I can maintain pdb_*sql code - I depends on pdb_pgsql,
but I think it is effective to maintain both mysql and pgsql together.

Jeremy, do you think if it will be useful to create samba-sql mail
list for these who take interest on samba pdb_*sql modules?


thanks a lot for taking this over!

We have a [EMAIL PROTECTED] alias (but no real mailing list). 
Messages sent there get to a group of persons who want to contribute to 
the development of the SQL module.


Jerry, can you add Filip to this alias?

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems with MySQL backend.

2006-01-05 Thread Florian Effenberger

Hi Jerry,


He's already on it :-)


:-)


This really boils down to a communication problem.  Developers
are expected to subscribe to both the samba-cvs and the samba-technical
lists.  The samba-pdbsql alias is really only intended for use in
bugzilla (default owner of pdb_sql component).


Okay, that makes sense. Filip, Darrell, will you subscribe to this 
lists? I could, too, but I guess as a non-developer I can't do much with 
this... :-)



A simple small test server running the
SAMBA_3_0 tree (updated every few days or so).  That way, when
something in the pdb*sql modules break, whether intentionally or
not, you will know immediately.


Filip already told he can set up two test servers, so that should work. 
Currently, I have one production machine which I can test new releases 
of the module on in the evening (it's in a school, thus no users after 6 
or 7 pm). Will see if I can re-activate two old machines in-house and 
test there as well.


Filip, if you want, you can give me RDP and SSH access so I can debug on 
your machines as well. But that's not necessary (RDP is insecure).



Filip, you and I should stay in closer contact.  I'll try to
remember to ping you when there is any relevant developments that
I think you should be aware of.


Thanks for that offer, Jerry! I really appreciate all your (all Samba 
developers) work in this matter! I know you don't really want this 
module as it's not so widely used, so I appreciate your support even 
more! Thanks! :-)


Could you please ping the whole pdbsql list when something new 
happens? (Or, at least, write to me as well.)


Thanks!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems with MySQL backend.

2006-01-05 Thread Florian Effenberger

Hi,

At this moment I ca't have two small test servers - one for mysql and 
another for pgsql. So I can test code for mysql it it can compile and 
start, but I'm not able to test it for longer time. For pgsql I can do 
this. It will be great if for example Florian can test pdb_mysql more.


Can do, see my last message. :-)

OK, thanks a lot. I will look tomorrow and within weekend on current CVS 
code and I will try to tidy pdb_sql issues in bugzilla so we will know 
what is critical, what is already done etc.


Thanks a lot, Filip!

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems with MySQL backend.

2006-01-05 Thread Florian Effenberger

Hi,


Bugzilla is good for individual issues.  The samba-technical ml
is best for interaction with other Samba developers (like
Jeremy  Volker).


I'll subscribe to this and see how much traffic it is. :-)


Sounds like a good plan.  If testing resources become an
issue, let me know and I'll try to work out a better solution
for you.


I have three terminal servers (i.e., XP SP2 machines with RDP open) and 
SSH access to our PDC to test. However, I can't give anyone else access 
as it is a restricted network.


Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems with MySQL backend.

2006-01-04 Thread Florian Effenberger

Hi Jeremy,


It seems so, I'm sorry if that's the case. I did try and notify
people so this would not break.


no problem, the most important thing to me is that we can find a 
solution that everyone is happy with.



It's not important now, what's more important is ensuring
that the SQL modules are maintained going forward.


Agreed.

Volker (and others) are making passdb backend changes. You 
need to keep testing it with the SQL module as these changes are

made to make sure it keeps working. No one else is testing it
so the interface is fragile.


Testing the interface is no problem. My problem, however, is fixing bugs 
or changing/adapting functionality. (See below)



Haven't reviewed that bug - we need someone who will do
that (review the bugs) and maintain the module - no matter
what gets done. Of course the maintainer also gets to argue
and complain and *help* design the passdb changes :-).


I use the pdb_mysql module in an environment with about 100 clients and 
1.500 users. We have a self-written web interface, and Samba and the web 
interface are based on the pdb_mysql module.


However, I am no programmer, so I need your help.

I can test, debug and act as a contact person, however, I need someone 
supporting me as a developer, as I can't code a single line. :-)


Do you see any chance in this?

Looking forward to working with you!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] refresh problems when doing folder redirection for desktop

2005-10-16 Thread Florian Effenberger
Hello,

I have refresh problems when doing a folder redirection for the desktop.
My desktop is being redirected to H:\desktop (H=home directory on the
server, not on the local machine) and it works fine.

However, as soon as a new file is being saved on the desktop, I need to
hit F5 to refresh the view, it is not being automatically refreshed
(i.e. the file is not being shown). I read a lot of posts about that
problem, but no solution.

Anyone on the list has an idea?

Thanks
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] encrypting connection to Samba

2005-10-04 Thread Florian Effenberger
Hi Svend,

 Passwords should be encrypted using NTLM by default.  See the sections
 on 'encrypt passwords' and 'ntlm auth' in the smb.conf man page.
 
 I don't think the data traffic is encrypted.  You can tunnel port 139
 to encrypt everything via SSH.

thanks, that makes sense!

Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] encrypting connection to Samba

2005-10-03 Thread Florian Effenberger
Hello,

I've searched the Howtos, but I did not find anything, so I'm asking
this question onlist.

When are connections between Samba and the client encrypted? I run Samba
3.0.20a on a network with Windows XP SP2 and some Windows 98 machines.

- Are connections always encrypted? Are there any smb.conf settings I
have to make in order to get encryption working (server signing?)?

- Are just authentication requests encrypted or are file transfers
encrypted as well?

Thanks!
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] prevent normal users from getting userlist

2005-10-03 Thread Florian Effenberger
Hi Andrew,

 Not without breaking functionality.  See, any user should be able to run
 the ACL editor, and assign rights to users and groups.
 
 You could modify code to lock this down, but I would be worried about
 the consequences, as well as what other mean (direct LDAP query, for
 example) you would also need to lock down.
 
 I know this is difficult in strict privacy environments.  

you are right, of course, I did not think of the ACL features needed!
However, there are some environments where it could as well be illegal
to allow every user to fetch the whole user list.

Are there any plans to implement a feature to disable getting user list
for some users?

Thanks!
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] hide files but do not prevent accessing them

2005-10-03 Thread Florian Effenberger
Hi Jerry,

 'use ea's to stare the DOS hidden attribute on the files.

thanks, will try that!

Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] prevent normal users from getting userlist

2005-10-03 Thread Florian Effenberger
Hi,

 how would this be accomplished in a purely Microsoft Windows
 environment? This doesn't seem to be a samba question.

although a Windows server might not be able to do it, on the Samba side
this could be achieved with just returnin no users to the client, I
guess. But I'm not quite sure...

Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] prevent normal users from getting userlist

2005-10-03 Thread Florian Effenberger
Hi Craig,

I agree with you, but maybe such an option would be an idea for the todo
list, but with less priority. Samba can do a lot of things Windows can't
do. ;-)

Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] getting userlist and logon sometimes slow

2005-10-02 Thread Florian Effenberger
Hello,

I run Samba 3.0.20a with Windows XP Professional SP2 client. Sometimes,
the logon is a bit slot, i.e. it takes some seconds until the Loading
profile... dialog box comes up.

The same effect happens when I start a program with the Run as command
in the context menu. I enter my domain user and select run, and it takes
about 5 seconds until the program is invoked.

I guess it has something to do with getting/verifying user data. I run
the pdb_mysql backend. Might it be related to that, or is that behaviour
quite normal?

If that helps: I have not cached my profiles, nor have I cached
credentials (both prohibited via policy)

Thanks
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] prevent normal users from getting userlist

2005-10-02 Thread Florian Effenberger
Hello,

I run Samba 3.0.20a with Windows XP Professional SP2 client. I found out
that when a normal (i.e. not domain administrator) user runs the old
Windows NT 4 user client, it can retrieve the whole list of usernames
and fullnames.

Can that be prohibited in any way?

Thanks
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] hide files but do not prevent accessing them

2005-10-02 Thread Florian Effenberger
Hello,

is there an option to hide files for the Windows clients, but do not
prevent accessing or writing to them?

I want to hide some folders for my users. With the appropriate Samba
option, I can hide the files, but if Windows is configured to show
hidden files, they are shown nontheless.

Is there an option to force Samba not to show the files to Windows at
all, but still letting read and write to them?

Thanks
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] net rpc shutdown does not work

2005-09-13 Thread Florian Effenberger
Hello everyone,

using Samba 3.0.20, the net rcp shutdown command does not work. I use

/usr/local/samba/bin/net rpc shutdown --server=MYCLIENT
--user=DOMAIN_ADMIN_USER

and the result I get back is

[2005/09/09 18:00:15, 0, effective(0, 0), real(0, 0)]
utils/net_rpc.c:rpc_init_shutdown_internals(4485)
  Shutdown of remote machine failed!
[2005/09/09 18:00:15, 0, effective(0, 0), real(0, 0)]
utils/net_rpc.c:rpc_reg_shutdown_internals(4555)
  Shutdown of remote machine failed!

Using the old 3.0.14a rpcclient with the command

rpcclient MYCLIENT -c shutdowninit -t 15 -U DOMAIN_ADMIN_USER

just works fine. I also tried granting my admin user the shutdown
privilege, but
it does not help either.

If you need any debug logs, let me know. Client systems are XP Pro SP2.

Filed as Bug 3080.

Thanks
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] mass-adding users with pdbedit or smbpasswd leads to long delay

2005-09-13 Thread Florian Effenberger
Hello everyone,

Mass-adding users with pdbedit or smbpasswd leads to long delay. The
system is
fast enough, however, it takes one second per user.

Might there be any (hidden) delay in these tools?

The command to add the users is:

  ( echo $2 ; echo $2 ) | /usr/local/samba/bin/smbpasswd -a $1 -s
  /usr/local/samba/bin/pdbedit -r -u $1 -f $3 $4

whereas $1 is the logon name, $3 and $4 are the users first and last name.

Filed as bug 3081.

Thanks
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] mass-adding users with pdbedit or smbpasswd leads to long delay

2005-09-13 Thread Florian Effenberger
Hi Jerry,

 If you are using an ldap backend, then it is
 possible.

I use pdb_mysql (I know, experimental...). Don't know if this is a
general pdbedit problem or if it depends on the module.

Thanks
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] mass-adding users with pdbedit or smbpasswd leads to long delay

2005-09-13 Thread Florian Effenberger
Hi Jerry,

 Can you reproduce the delays with tdbsam?

unfortunately, I currently don't have a testing machine here. ;-(

If anyone else on this list is willing to test this out, let us know the
results. Otherwise I will set up a test system and then attach my
results to the output, but it can take a while. :)

Thanks!
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] mass-adding users with pdbedit or smbpasswd leads to long delay

2005-09-13 Thread Florian Effenberger
 unfortunately, I currently don't have a testing machine here. ;-(
 
 If anyone else on this list is willing to test this out, let us know the
 results. Otherwise I will set up a test system and then attach my
 results to the output, but it can take a while. :)

Addendum:
The machine I experienced the problems on is now a production system for
daily use of 1'500 users and I don't want to test it there, too risky. ;-)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdb_mysql.c | SQL insert command missing data

2005-08-22 Thread Florian Effenberger
Hi John,

look at these:

https://bugzilla.samba.org/show_bug.cgi?id=2531

and

https://bugzilla.samba.org/show_bug.cgi?id=3018

and

https://bugzilla.samba.org/show_bug.cgi?id=3019

Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] MySQL/Postgres pdb: cannot add new users

2005-08-22 Thread Florian Effenberger
Hello Jerry,
Hello Jelmer,
Hello all,

 At the CIFS conference you indicated that you would like
 to transition the pdb_mysql module to another owner.
 You still feel like that?  If so, I'll start looking for
 a new maintainer.

unfortunately, I am no programmer, otherwise I would fix the outstanding
bugs. I don't want to interfere with your current tasks, but I feel that
fixing this module is somewhat critical, as the current version is not
usable and destroys some running production systems by preventing them
to upgrade to anything beyond 3.0.14a (with the pdb_mysql module from
3.0.11).

I think the outstanding bugs should be not too complicated, looks like
some SQL query/syntax errors, and I am willing to help by any means, but
please look to get that one fixed, if possible. :)

I don't see any need for new features, but the current bugs should be fixed.

Thanks!
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] MySQL/Postgres pdb: cannot add new users

2005-08-22 Thread Florian Effenberger
Hello,

 I understand you position, but I will point out that
 this is exactly why I marked those extra pdb modules
 as experimental to start with.  We have the resources
 to support the code passdb code and modules but not
 all the variants available.

yes, I know the problem with that, but in our environment, MySQL was the
only choice to go with, and it worked fine. It shouldn't be too much
work to fix it, as I guess it is just a SQL query that needs to be
fixed. I will give you any help possible, but I have absolutely no
programming skills, so I cannot fix it by myself .:-(

As a workaround, I will try to use the 3.0.14a pdbedit (with the 3.0.11
pdb_mysql.c), but a fix would be nice.

Thanks!
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] MySQL/Postgres pdb: cannot add new users

2005-08-22 Thread Florian Effenberger
Hi Jelmer,

 Well, I'd be happy to keep maintaining it (just keeping it working), 
 but if there's somebody stepping up who's willing to take over, that'd 
 probably be better. I no longer have a production 
 system that uses pdb_mysql so my testing is pretty ad-hoc.

thanks, that sounds good! I have a production system that uses pdb_mysql
and would be happy to help with testing. I guess there will be some
others who run pdb_mysql systems and will volunteer for testing as well.
 There are no new features that need to be implemented, as far as I
know, but there are at least these three open bugs:

https://bugzilla.samba.org/show_bug.cgi?id=3019

https://bugzilla.samba.org/show_bug.cgi?id=2531

https://bugzilla.samba.org/show_bug.cgi?id=3018

 I'll have a look at the 3.0.20 bugs later this week (most likely on
 wednesday).

In short, the SQL module should

- update only those cells who are affected by an update and not the
whole row (what you planned to have for 3.0.20 and is buggy since 3.0.12
or so)

- should not modify all database entries but only the one affected (the
bug that came with 3.0.20 and destroys the whole database)

- and the SQL schema should be corrected

As far as I know, that's it. Let me know if you need help, and thanks
for your fast reaction, good to know that someone is caring! ;-)

Florian


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] MySQL/Postgres pdb: cannot add new users

2005-08-21 Thread Florian Effenberger
Hello everyone,
Hello Jelmer,

in 3.0.20, it still is not possible to add new users using pdbedit. See
bug report at

https://bugzilla.samba.org/show_bug.cgi?id=2531

In 3.0.14a it was possible to copy pdb_sql.c and pdb_mysql.c from 3.0.11
and it worked, but this workaround does not help anymore, as the files
seem to be incompatible.

Jelmer, could you please have a look at this one? I consider this being
very important. I can help you debug and test this, but as I am not a
programmer, I need your help to get it fixed.

If everyone else has an idea on how to fix that, please let me know and
I'll test it!

Thanks!
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] CUPS: Report errors and problems back to Windows clients

2005-08-08 Thread Florian Effenberger
Hi Jerry,

 The original printing backend was written for interaction with
 lpd systems.  The cups backend was tacked on.  So the interface
 is not as rich as it should be.  What you are asking about is
 kind of known issue at this time.
 
 https://bugzilla.samba.org/show_bug.cgi?id=2685

thanks for that link, that exactly describes what I'm looking for!

Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] CUPS: Report errors and problems back to Windows clients

2005-08-04 Thread Florian Effenberger
Hi there,

my CUPS server runs fine, I can print from within Windows and Linux.
However, if I stop the printer in CUPS or some other error occurs,
Windows clients never get notified, neither via IPP nor via SMB
printing. Windows always sends out the print job, the user thinks the
job has been print, although some problem might have happened on the
CUPS server.

Is it possible to report errors and problems back to Windows clients?
Like having Windows giving out a printer error when the CUPS server
can't print? Must be something like don't spool and forget about the
job, but instead wait from CUPS reply.

Is something like that possible?

Thanks
Florian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] receive_smb: SMB Signature verification failed on incoming packet

2005-07-19 Thread Florian Effenberger

Hello,

I am trying to connect a 2nd Linux machine to my Samba PDC using 
smbmount. Both machines run Samba 3.0.14a. However, when trying to mount 
using


machine2# /usr/local/samba/bin/smbmount //pdc/wpkg /raid/samba/mount -o 
username=abc,password=123


it takes some seconds and then only brings up an I/O error. The log on 
the primary machine brings up


[2005/07/19 10:28:36, 1, effective(1008, 1008), real(1008, 0)] 
smbd/service.c:make_connection_snum(642)
  192.168.x.y (192.168.x.y) signed connect to service share initially 
as user user (uid=1008, gid=1008) (pid 10480)
[2005/07/19 10:28:36, 0, effective(0, 0), real(0, 0)] 
libsmb/smb_signing.c:srv_check_incoming_message(779)

  srv_check_incoming_message: BAD SIG: seq 4 wanted SMB signature of
[2005/07/19 10:28:36, 0, effective(0, 0), real(0, 0)] 
libsmb/smb_signing.c:srv_check_incoming_message(783)

  srv_check_incoming_message: BAD SIG: seq 4 got SMB signature of
[2005/07/19 10:28:36, 0, effective(0, 0), real(0, 0)] 
libsmb/smb_signing.c:signing_good(240)

  signing_good: BAD SIG: seq 4
[2005/07/19 10:28:36, 0, effective(0, 0), real(0, 0)] 
lib/util_sock.c:receive_smb(619)

  receive_smb: SMB Signature verification failed on incoming packet!
[2005/07/19 10:28:36, 1, effective(0, 0), real(0, 0)] 
smbd/service.c:close_cnum(830)

  192.168.x.y (192.168.x.y) closed connection to service share

Anyone knows what this is? Disabling server signing helps, but I guess 
this is not a good security setting...


Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Copying user profiles via command line?

2005-06-12 Thread Florian Effenberger

Hi Ilia,

ntuser.dat contains certain SID, so I'm afraid mandatory profiles 
won't work for a group of users.


it works just fine if you set the same profile path for some/a group of 
users and copy the profile via the Windows internal tool. :-)


Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Copying user profiles via command line?

2005-06-12 Thread Florian Effenberger

Hi,


there's special utility, called profiles which comes with samba.
it changes SIDs withing registry files.


that doesn't work with my XP profiles, I still have some occurences left 
of the old SID. The man page for profiles says that it only works with 
NT profiles, maybe that's the problem.


if You actually copy profiles with windowish tools, probably they also 
change SID within profiles. Or You mean that the same instance of profile

is being used by many of users ?


Exactly, *one* mandatory profile for *several* users.

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] sharing profiles

2005-06-12 Thread Florian Effenberger

Hi there,


Could someone tell me or point me in the right direction how I could
share a profile among three users all win2000 workstations.  I created
a profile on machine A and want B and C to also use it without having
to copy it over by hand.  The profile does not have to be a .MAN, just
a standard profile.   I am pretty sure that everyone needs read and
write access to it and I think that my User Path in the smb.conf
should point to the samba share where I want the profile stored.


just give all three users the same profile path using pdbedit. Then copy 
over the profile using System - Profiles - Copy to and set Permissions 
to the appropriate users or groups.


Don't know if it works with .DAT instead of .MAN, though.

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Copying user profiles via command line?

2005-06-11 Thread Florian Effenberger

Hello,

In order to maintain some sort of group profile (i.e. one mandatory 
profile shared between a group of users that have the same profile 
path), I would like to copy profiles between users. This works fine with 
System/Advanced/User Profiles/Copy To. However, I would like to automate 
this using a command line tool for Windows or Linux (I use the Samba3 
server).


Does anyone know what tool I could use?

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Remote Desktop Users as ADM-template?

2005-05-30 Thread Florian Effenberger

Hi Thomasz,

I'm 100% sure with win2k (and Remote Desktop installed from a msi 
package), but with XP I will check it tomorrow when I'm back to work.


thanks, that's great, I'm curious about what comes out. ;-)

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Remote Desktop Users as ADM-template?

2005-05-30 Thread Florian Effenberger

Hi Thomasz,

yeah, with a clean XP install mstsc (Terminal Server Client) works for a 
normal user, too.


thanks for looking up! Is your machine in a Samba NT4-style domain, or 
is it standalone?


Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Remote Desktop Users as ADM-template?

2005-05-30 Thread Florian Effenberger

Hi Thomasz,


actually, it's an AD-client :)


hm, maybe that makes the difference, although I doubt. :)
Would you mind checking the contents of

Start\Settings\Control Panel\System\Remote\Remote Users

for me? Whats listed in there?

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Remote Desktop Users as ADM-template?

2005-05-30 Thread Florian Effenberger

Hi Thomasz,

I will know today later or tomorrow perhaps, as I will roll out a new 
Samba domain with XP clients.


that would be great! Maybe we can compare our settings then. I read via 
Google Groups that XP non-admin users normally *cannot* logon via RDP. 
You have to add them to the list I mentioned, possibly adding them into 
the (local!) Remote Users Groups would be working, too. However, no clue 
on how to achieve that with a policy.


Maybe you made some settings in the templates that make RDP possible for 
non-admins, maybe it's a setting in the AD.



Would you mind checking the contents of
Start\Settings\Control Panel\System\Remote\Remote Users
for me? Whats listed in there?

so the first one was checked, the one below not.


What do you mean by first and last one?

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Remote Desktop Users as ADM-template?

2005-05-30 Thread Florian Effenberger

Hi Thomasz,


hmm, I'm beginning to doubt if we're talking about the same :)


maybe you are right. ;-) I am *not* using a Windows Terminal Server 
(Windows 2000 Server, Windows Server 2003), but rather enable the Remote 
Desktop functionality on my XP machine, so users can connect via RDP to 
the XP machine as server.


There must be a template somewhere in order to allow non-admin users 
connect *to* my XP machine. :-)


Thanks, and sorry for the confusion,
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Remote Desktop Users as ADM-template?

2005-05-29 Thread Florian Effenberger

Hi Robert,
Hi Thomasz,
Hello list,


yes this should be possible use
adms from
http://www.gruppenrichtlinien.de/
or use reg2adm to create your own


thanks for your feedback! I did not find anything in the ADM templates 
regarding the Remote Desktop Users. Did you?


However, I found out that adding with gpedit.msc and adding with the 
Remote Desktop Users Box is *not* the same. One is for the real 
Terminal Services (XP does not support as server), the other for the 
remote desktop.


Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Remote Desktop Users as ADM-template?

2005-05-29 Thread Florian Effenberger

Hi Thomasz,

hmm, but on my XP stations, default installation with no changes, users 
can use the Remote Desktop?


are you sure that your users are *no* admins on the machine, but users 
with limited access?


Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Remote Desktop Users as ADM-template?

2005-05-28 Thread Florian Effenberger

Hello,

I run a Samba3 server with XP-Clients and I would like to give some 
users the ability to use the Remote Desktop, although they are *no* 
Domain Admin.


Either, I can put them in the Remote Desktop Users group, or I put their 
username or group into the list on gpedit.msc - Computer Configuration 
- Windows Settings - Security Settings - Local Policies - Setting 
User Rights - Allow Logon via Terminal Services.


I have some questions regarding that. :-)

- Is it possible to deploy this setting via ADM template as NT4-policy?
- Would it be possible to deploy this setting with a real 2003 server 
as GPO?
- Is there any workaround, or am I left with adding each and any user on 
every workstation?


Thanks in advance
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] preparing registry for Default User profile

2005-02-23 Thread Florian Effenberger
Hello,
how do you prepare a registry for use with the Default User profile?
I log on using a template user, but the registry contains some GIDs 
(these {12345-12345-} strings) and some absolute paths, and I'm 
searching for a tool to automate the removal of these entries, so a new 
user gets a new, fresh profile with my default settings.

Thanks!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] modify NTUSER.DAT security descriptors/ACLs via command line?

2005-02-15 Thread Florian Effenberger
Hello
is there a tool to modify NTUSER.DAT security descriptors/ACLs via 
command line?

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: modify NTUSER.DAT security descriptors/ACLs via command line?

2005-02-15 Thread Florian Effenberger
Hi Michael,
oh, sorry, I forgot to mention - I want to modify its data contents, as 
my ext3 has no ACL so far. ;-)

It works fine when copying using the Windows GUI, but I search for a way 
of doing that scriptable/automated on the command line. Either using a 
Windows tool or a Linux tool. Tried the Samba profiles utility, but it 
doesn't seem to be what I've been looking for...

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] same profile for several users

2005-02-12 Thread Florian Effenberger
Hi there,
I would like to have the same (mandatory) profile for a group of users. 
I tried by setting the same profile path using pdbedit and allowing 
everyone of them read/write access to the appropriate Linux files, 
including executable access to the appropriate directories of the profile.

However, it does not work. At least Windows always saves my NTUSER.DAT 
and some other files with exclusive read/write access for the current 
user, so others get a permission denied.

What would be an appropriate way of having the same (mandatory) profile 
for a group of users?

Thanks!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] same profile for several users

2005-02-12 Thread Florian Effenberger
Hi,
For a mandatory profile you should rename the NTUSER.DAT to NTUSER.MAN, 
then you can disable any write access for that group. This way it worked 
for me.
thanks, but the problem is that I still need one NTUSER.MAN file and a 
profile directory per user. I would like to serve a bunch of users out 
of one directory. :-)

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Bug 2288 - impossible to rename Windows domain group name

2005-01-30 Thread Florian Effenberger
Hello there,
I have a bug report, filed as #2288:
It is impossible to rename the Windows domain group name, e.g. from 
Domain Users to Domänenbenutzer (German version)

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] installation without logging on as administrator

2005-01-27 Thread Florian Effenberger
Hello there,
I'm quite new to software distribution, so I would like to ask you a 
question. ;-) Is it posible to install software without logging on as 
administrator on every machine? If yes, how does it work? Via a Windows 
service? Via a script that is being run as admin even if a normal user 
logs on?

Thanks!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] installation without logging on as administrator

2005-01-27 Thread Florian Effenberger
Hi there,
Add your users to power users group or run install programs as 
administrator: right_click-run_as-administrator,passwd.
It is also possible to change system policies (not trivial).
is there a solution where I do NOT need to give the users admin permissions?
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] installation without logging on as administrator

2005-01-27 Thread Florian Effenberger
Hi there,
maybe I have found something, I will check that out tomorrow. First of 
all, there is an option to run all MSI packages with admin privileges 
and apart from that, I found a way (Windows Server 2003 Resource Kit) to 
install applications as service, i.e. running with administrative 
privileges.

I'll see what works. ;-)
Thanks!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] same profile for all users

2005-01-24 Thread Florian Effenberger
Hi Tony,
Isn't this described very fully in Inge-HÃ¥vard Hunstad's contribution to
the LDAP HOWTO?
where can I get this HOWTO? Google wasn't very useful ;-(
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] same profile for all users

2005-01-24 Thread Florian Effenberger
Hi Craig,
I think some checking in the How-To should provide the answer. It's
'mandatory' profiles and you should be able to accomplish this by having
a Default User profile on the profile server and having the policy of
deleting local profile at log off from each workstation.
wouldn't that mean that this is valid for *all* users?
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] same profile for all users

2005-01-24 Thread Florian Effenberger
Hi Paul,
If I'm not mistaken, in the examples, mandatory profiles are integrated 
with folder redirection for this exact situation.
I read through that chapter, but isn't it just about implementing 
registry changes - in this case folder redirection - into the Default 
Profile, which doesn't help for my situation?

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] same profile for all users

2005-01-24 Thread Florian Effenberger
Hi Ilia,
you mean that changing the path in the users profile from
 \\mypdc\profiles\user1
 \\mypdc\profiles\user2
 and so on
 to
 \\mypdc\profiles\students
would do the trick?
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] change settings in all profiles

2005-01-23 Thread Florian Effenberger
Hello list,
I have successfully set up my Samba domain with profile management and 
now have a Default User profile. When I create a new user and log on for 
the first time, I have the pre-defined profile as a template, so 
necessary changes only need to be made in one profile.

That is great, however, I have a question. If, after some time, I want 
to add something to all profiles (for example: a registry setting, a 
shortcut on the desktop, etc.), what is the best way to do this? 
Deleting all profiles and let them rebuild with a new Default User 
profile is no option, since I don't want to destroy the users personal 
settings.

Is there no other way than scripting, i.e. placing something in the 
netlogon.bat file? Or is there a trick?

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] documentation on group profiles

2005-01-23 Thread Florian Effenberger
Hello list,
does anyone have a good documentation regarding group profiles? The 
Samba HOWTO collection only says that its possible, but I don't 
understand how it works, how I can set a specific profile for a group of 
users...

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] same profile for all users

2005-01-23 Thread Florian Effenberger
Hello list,
is it possible to have the same profile for some users (or a group of 
users) without having to use a separate profile directory for each user?

I would like to set up a pre-defined mandatory profile for a school with 
more than 1,000 students. Each student should have the same, 
unchangeable profile. Is it possible to run it out of one profile 
directory? If yes, how?

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Where are Windows file permissions stored and how to change them?

2005-01-11 Thread Florian Effenberger
Hello there,
where are the Windows file permissions (i.e. ACL) stored when using Samba?
How can I change them from within Linux? Or is it only possible with the 
Windows file permissions dialogue?

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Where are Windows file permissions stored and how to change them?

2005-01-11 Thread Florian Effenberger
Hi Abo,
Hi Ruth,
thanks for that information, that sounds reasonable. I even didn't know 
that ext3 has ACL support. ;-)

However, I know that when I want to copy a profile from user A to user 
B, I cannot just use the Unix cp command, but I have to do this with the 
Windows tools, because otherwise, the SID would be wrong. Do you know 
where this is stored and how I can copy profiles with simple Unix 
commands, so Windows accepts them?

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Where are Windows file permissions stored and how to change them?

2005-01-11 Thread Florian Effenberger
Hi there,
well, im not really sure about what im going to say, but i think you
must add users to samba with smbpasswd or import them from an existing
users table.
anyone else can give some light?
adding the users is not the problem. If I added them and then just cp 
the profile, Windows complains about permission problems...

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Where are Windows file permissions stored and how to change them?

2005-01-11 Thread Florian Effenberger
Hi,
Have you tried cp -a (it saves owner and standard permissions, not sure 
about acls though)
no, have not tried that, but I have to change Unix permissions to the 
new user nontheless. Somewhere in the profile, maybe in the .DAT file 
itself, Windows stores the users SID, taht seems to be the problem.

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Where are Windows file permissions stored and how to change them?

2005-01-11 Thread Florian Effenberger
Hi,
If you have your drive mounted with acls, the owner is stored with the 
file, and samba will translate this. I have been able to chown files 
like so: chown DOMAIN+user file and it works. getfacl filename should 
list the owner and group, as well as any ACLs
I have no files mounted with acls. I will try again and see if I can 
reproduce the error. :-)

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: domain administrator is always mapped to root

2004-12-25 Thread Florian Effenberger
Hi Jim,
okay, I guess I got the point. :-)
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: domain administrator is always mapped to root

2004-12-24 Thread Florian Effenberger
Hi Michael,
2) Anyone who is a Samba Domain Admin will cause things in the log to 
equate the user to being the root user. Just how Samba thinks about things.
okay. Any chance to get that fixed by the Samba development team? :-)
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: domain administrator is always mapped to root

2004-12-24 Thread Florian Effenberger
Hi,
Get what fixed?  The OS is Unix.  The administrator IS root.  What is 
there to fix?
root is root (Unix admin, Domain admin). tango is tango (NOT an Unix 
admin, but Domain admin). Is there a technical necessity of mapping 
tango to root?

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] HOWTO for setting up Samba as a PDC

2004-12-23 Thread Florian Effenberger
Hello fellow list members,
does anyone knows of a good HOWTO (or a book) for setting up Samba as a PDC?
I have been dealing around with the Samba HOWTO collection, but to be 
honest, this is a hard job. There are some errors in it and descriptions 
are not this good. I even don't know what all the tools are for.

I'm really experienced in Linux server stuff, but this one drives me mad.
Any tips are welcome. :-)
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] HOWTO for setting up Samba as a PDC

2004-12-23 Thread Florian Effenberger
Hi Mark,
The book Samba-3 By Example, available in hard copy from a bookstore or via 
download from the Samba site, is a terrific cookbook in that it gives you 
specific, step-by-step instructions for a variety of real-world situations, 
including setting up a PDC.
thanks, that sounds good! Will check it out!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] HOWTO for setting up Samba as a PDC

2004-12-23 Thread Florian Effenberger
Hi,
ftp://ftp.lueckdatasystems.com/pub/presentations/klugsamba3pdc-bookreview.pdf
that one is cool, thanks a lot!
I have been dealing around with the Samba HOWTO collection, but to be 
honest, this is a hard job. 
No, not really.
It contains errors (Ex: net command has rid setting when using modify) 
and the differnet tools (pdbedit, net, ...) are not described completely.

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] renaming default groups with groupmap

2004-12-23 Thread Florian Effenberger
Hello,
is it possible to rename the default groups with groupmap? I would like 
to change

Domain Users
Domain Admins
Domain Guests
to the correct German translation.
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] domain administrator is always mapped to root

2004-12-23 Thread Florian Effenberger
Hello,
I have found out that a domain administrator is always mapped to root in 
the UNIX filesystem:

drwx--   2 jive  smbguests 1024 2004-12-23 18:59 jive
drwx--  13 salsa smbusers  1024 2004-12-23 18:58 salsa
drwx--  13 root  smbadmins 1024 2004-12-23 18:56 tango
jive is a domain guest user, salsa a domain user and tango a domain 
administrator.

Is it possible to change the root ownership behaviour?
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] setting options before user logs on via policies

2004-12-23 Thread Florian Effenberger
Hello,
is it possible to set options before a user logs on via policies, or 
does this depend on active directory?

I would like to set things like screensaver at logon dialogue, 
ctrl-alt-del requirement, clear last user at logon, etc., but it seems 
to be impossible using policies.

A workaround I can think of is doing that via MSI files.
Any tip is welcome. :-)
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] HOWTO for setting up Samba as a PDC

2004-12-23 Thread Florian Effenberger
Hi John,
no problem, I was just a little bit confused by all those tools.
What I miss most in the documentation, is a description of what the 
tools actually do. What are they for, when do I need them. Why shall I 
groupmap a user to Domain User group when it works fine without?

One particular error I recall is in the example when you do net groupmap 
to local groups. The correct syntax is

net groupmap modify ntgroup=Domain Admins unixgroup=smbadmins
net groupmap modify ntgroup=Domain Users unixgroup=smbusers
net groupmap modify ntgroup=Domain Guests unixgroup=smbguests
and, AFAIR, you did something with rid=512/3/4 which leads to an error 
message.

Bug repord has been filed in September.
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: HOWTO for setting up Samba as a PDC

2004-12-23 Thread Florian Effenberger
Hi Michael,
Yup, those caused errors for me as well. I never did understand what 
these commands were meant to acomplish. I found alternate commands to 
map Linux groups to domain groups and those domain groups to local 
groups. All documented in that presentation PDF file.
they work just fine. If I change the net groupmap and the Linux users 
group, I can become user, admin or guest, that's perfect. The 
documentation is just wrong, as the rid tag only works when *creating* a 
group, not when modifying it.

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] domain administrator is always mapped to root

2004-12-23 Thread Florian Effenberger
Hi Tom,
Yes, if tango is listed as admin user in smb.conf.
Don't list Tango as admin user in smb.conf.
Is there any other way of having tango as domain admin than listing it 
as admin user?

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: domain administrator is always mapped to root

2004-12-23 Thread Florian Effenberger
Hi Michael,
Yup, found that as well. It seems to be hard coded behavior in the Samba 
code. Even though it would make sense to never log in as root, you can 
not tell Samba root is an invalid user or you will not like the results. 
Been there, Done that... documented in the PDF as well.
@Samba team: is this by intense or is this a bug? I find it is a problem 
when you switch from Domain Admin to Domain User, as the unix 
permissions are wrong then... :)

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-09 Thread Florian Effenberger
http://www.opennet.ru/docs/RUS/windows_auto_inst/index.html
I'm not sure most people understand russian, but the article itself is 
just amazing!

If You won't find any translator, let me know, I'll translate it.
/me doesn't understand Russian. ;-)
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-08 Thread Florian Effenberger
Hi,
We have been using AutoIt with wpkg scripts for a while as a deployment
solution with win2k workstations.
It is quite simple solution but has been good enough for us.
http://sourceforge.net/projects/wpkg/
Thanks for the feedback, will have a look at it! :-)
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-08 Thread Florian Effenberger
Hi Robert,
thanks for these links, I will check them out! I wonder that no one has 
ever deployed a real good solution. We can fly to the moon, but we can't 
install packages pre-configured automatically. What a mess... ;-)

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-08 Thread Florian Effenberger
Hi there,
I see, it'll be a lot of work. ;-) But the unattended.sf.net site has 
some valueable information that might help!

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-08 Thread Florian Effenberger
Hi Eric,
Not really samba related, but as nothing better has popped up atm :
http://adamoto.sourceforge.net/
Thanks, has been bookmarked!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-08 Thread Florian Effenberger
Hi John,
All submissions of working methods that anyone is using to solve this mess are 
most welcome. I'll summarize them into the Samba-HOWTO-Collection.
I will try to implement something throughout the next months and will 
let you know as soon as I have it. :-)

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] distribute/deploy software to clients

2004-11-07 Thread Florian Effenberger
Hello,
I run a Windows domain based on Samba 3 and I am searching for a way to 
distribute/deploy software to clients.

I.e., a user logging on to a client, software should be automatically 
installed or upgraded. Is there any common solution? I heard of MSI 
packages, but I don't know if it is necessary to create MSI packages of 
all installations...

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-07 Thread Florian Effenberger
Hi John,
Please keep me updated on your findings and in particular on the solution you 
end up using. I believe it would be most useful to document this in the 
Samba-HOWTO-Collection.
Of course, will do as soon as I know something. ;-)
A good page is www.gruppenrichtlinien.de , but it seems that it is 
impossible without manual scripting.

Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: distribute/deploy software to clients

2004-11-07 Thread Florian Effenberger
Hi Michael,
The name of the game is to get the right files in the right places, the 
right registry entries in the right places, and BINGO! the software 
works. That's it!
thanks for the feedback. However - simple question: How to achieve that? 
It's not that easy figuring out all those entries...

ftp://ftp.lueckdatasystems.com/pub/presentations/iccm2002tfm.pdf
Thanks, I'll have a look at it!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: distribute/deploy software to clients

2004-11-07 Thread Florian Effenberger
Hi Michael,
Novadigm (now HP) Radia is maybe the best vendor tool. They won't 
answer the phone unless you have at least 1000 nodes. (Which is stupid 
in my opinion) Good support of distributing MSI's over HTTP.

These tools are pretty good for low end:
http://www.newboundary.com/
I have PrismPack wrapped into my Opus 3 technology to managed Win2K 
clients. Disk imaging is my own. Automation of putting the correct Prism 
packages on the machine is mine as well. As for pre/post scan this tool 
is about the best out there for now.

And I can't comment on what LDS will be offering at this time, what Opus 
4 will / will not turn out to be.
Thanks, but these are all commercial solutions, whereas I need something 
free. ;-)

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-07 Thread Florian Effenberger
Hi Thomasz,
is this page available also in English?
Unfortunately not. :-(
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-07 Thread Florian Effenberger
Hi Thomasz,
The only solution I'm aware of is MS Active Directory (distributed 
software installation)...
Which needs a MS Windows 2000/2003 Server, and that's exactly what I 
wanted to omit using Samba. ;-)

If you just want to install a system + your applications, try Unattended 
(unattended.sf.net).
Do you know if unattended can install some software afterwards, or has 
the whole system to be reinstalled as soon as I change something in my 
package list?

BTW, http://unattended.sourceforge.net/installers.html is very interesting!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-07 Thread Florian Effenberger
Hi,
OK, I know *some* German, but not computer / technical German :)
Before I start translating this page - could you sum up what's that about?
And if this solution is open source, or not?
It's from a Microsoft Most Valuable Professional (MVP) describing the 
group policies, offering some downloads and has also a Samba section. 
But nothing that helps for our problem.

Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: distribute/deploy software to clients

2004-11-07 Thread Florian Effenberger
Hi Michael,
I do not know of ANY free tools AT THIS TIME that run on Windows. It is 
rare for ESD to be used / developed, then you want to narrow the playing 
field down to the free ones?! And someone still needs to support free... 
food and housing for the people doing it?! Look at Samba, they have lots 
of corporate backing. I just might allow my Opus 4 (cross platform ESD) 
to go open source with funding in place to allow it to kick some serious 
butt in the IT world. TODAY I do not see that funding... (Most people do 
know ESD even exists!)
That principle works with a whole operating system, so why shouldn't it 
work with a tool? :-)

I.e.: I have hope that there are some utilities around there.
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-07 Thread Florian Effenberger
Hi Tomek,
unattended itself can't - but I'm sure people at its mailing groups will 
have some knowledge - I saw some of the topics there is about automatic 
software installation, also after OS is installed.
so - who starts the topic there, you or me? :)
Could you check these lists and get back to the Samba list when you have 
some information around? ;-)

there is also a scripting language, Kixtart - http://www.kixtart.org/ - 
which I've heard is capable of doing such stuff - but never used it (see 
my topic netlogon scripts for machines / groups - possible? from 
04.11.04 on samba*lists.samba.org).
Will check that, thanks!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-07 Thread Florian Effenberger
Hi Tomek,
OK, will ask them and elaborate on that here as soon as I get any replies.
Thanks!
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] CUPS integration does not work properly when not linked

2004-09-08 Thread Florian Effenberger
I have a Samba 3.0.6 server and a CUPS 1.2.0 server running on my machine.
They have been compiled with:
Samba:
./configure --with-pam --with-pam_smbpass --with-quotas --with-sys-quotas
CUPS:
./configure --prefix=/usr/local/cups --with-cups-user=cups --with-cups-
group=cups --with-docdir=/usr/local/cups/docdir --with-
logdir=/usr/local/cups/logdir --with-rcdir=/usr/local/cups/rcdir 
--enable-ssl

As you can see, CUPS lies in an unusual path, so Samba did NOT see the cups-
config file and was NOT linked to CUPS. Your documentation states that even
without linking it should work fine, however, it doesn't.
/etc/printcap contains:
===
# This file was automatically generated by cupsd(8) from the
# /usr/local/cups/etc/cups/printers.conf file.  All changes to this file
# will be lost.
Kyocera_FS-3750|Kyocera_FS-3750:rm=flux:rp=Kyocera_FS-3750:
===
This is the printer I set up via CUPS. I can print to it using the CUPS web
interface (print test page).
My /usr/local/samba/lib/smb.conf looks like:
===
# Samba config file created using SWAT
# from 192.168.10.105 (192.168.10.105)
# Date: 2004/09/08 17:58:00
# Global parameters
[global]
workgroup = MYGROUP
netbios aliases = FILESERVER
server string = Dateiserver
security = SHARE
passdb backend = tdbsam
passwd program = /usr/bin/passwd %u
passwd chat = *new*password* %n\n *new*password* %n\n *updated*
unix password sync = Yes
time server = Yes
deadtime = 15
printcap name = cups
os level = 65535
preferred master = Yes
domain master = Yes
ldap ssl = no
invalid users = root
admin users = flux
write list = flux
printer admin = flux
create mask = 0700
directory mask = 0700
printing = cups
print command = /usr/local/cups/bin/lp -c -d%p %s; rm %s
lpq command = /usr/local/cups/bin/lpstat -o%p
lprm command = /usr/local/cups/bin/cancel %p-%j
lppause command = /usr/local/cups/bin/lp -i %p-%j -H hold
lpresume command = /usr/local/cups/bin/lp -i %p-%j -H resume
queuepause command = /usr/local/cups/bin/disable %p
queueresume command = /usr/local/cups/bin/enable %p
(and then some file shares follow)
===
I cannot see the CUPS printers in my list (using Windows and smbclient). 
There
is no chance to print with my Windows clients.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: CUPS integration does not work properly when not linked

2004-09-08 Thread Florian Effenberger
Hi Adam,
Maybe I'm missing something here, but you won't see your printer
in the browse lists unless you create a share for that printer.  You can
either create a specific printer stanza for Kyocera_FS-3750, or create a
[printers] stanza to export all printers listed in printcap.
I will try that tomorrow, thanks for the tip. But shouldn't
load printers = yes
which is the default show up this printer automagically?
Thanks
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] disabling user access to SWAT

2003-12-06 Thread Florian Effenberger
Hi,

is there any option to disable the user access to SWAT for anyone else than
root?

Currently, every user can log on and view the system configuration. I would
only like to let root logon.

Thanks
Florian

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] disabling user access to SWAT

2003-12-06 Thread Florian Effenberger
Hi Joel,

swat is called without -a here.

Florian

- Original Message - 
From: Joel Hammer [EMAIL PROTECTED]
To: Florian Effenberger [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Saturday, December 06, 2003 2:24 PM
Subject: Re: [Samba] disabling user access to SWAT


I am rusty on this, but, if swat is started with -a, authentication is
disabled. Look in inetd.conf or xinetd? and see how swat is called.

Joel

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba