[Samba] samba windows-2-unix group mapping troubles
hi, i would like to allow access to specific samba shares, where the windows domain user is NOT authenticated against the share with it's username, but with a membership of a given windows-group. example: windows-domain user test01 -- which is a member of windows domain group smb_test01 -- which gets mapped to the unix-group smb01 -- which is granted access to the share testshare01. this is needed to allow group admins to change share access w/o needing to change anything on the samba server (not even add local users or change group relationships on the ux server). the samba 3.0.28 server is configured with SECURITY = ADS, is a full member of the domain and can authenticate the users successfully. smb.conf (essentials shown): [global] netbios name = TESTUNIX realm = test.local security = ADS server string = samba v3 testserver workgroup = TEST guest account = nobody map to guest = never idmap gid = 2000-2999 idmap uid = 2000-2999 [testshare01] path = /data/samba/test01 read only = no browseable = yes valid users = @smb01 unix user: smb01:x:2000:2000:testshare01:/data/samba/test01:/usr/bin/ksh unix group: smb01::2000: windows user: TEST\test01 windows group: TEST\smb_test01 # net ads join -U domainuser%password Using short domain name -- TEST Joined 'TESTUNIX' to realm 'TEST.LOCAL' # net groupmap add ntgroup=smb_test01 unixgroup=smb01 type=d No rid or sid specified, choosing a RID Got RID 5001 Successfully added group smb_test01 to the mapping db as a domain group error message from the smb log: [2009/04/06 17:38:06, 2, pid=9320, effective(0, 0), real(0, 0)] smbd/service.c:(616) user 'test01' (from session setup) not permitted to access this share (testshare01) please, if someone knows how to solve this, point me in the right direction :) cheers. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Execute on file access
Hi Samba-Folks, it might be a feature request, it might the the proof that I'm too stupid to find it in the documentation: I'd like to execute a binary program on each file which gets stored or modified on the samba server. Is that possible? I'd like to store images on a samba server, and from each image stored a thumbnail should be calculated. Thus, after a file is created/modified, I need to call a program passing the path name of the stored/modified file as a parameter. You might as well think about calling a virus scanner on the file just stored. I know that this might be a performance issue, but that will be my problem - not yours :-) Thank you for your replies, Peter -- - Angaben gemäß §35a GmbH-Gesetz: ITServ GmbH Sitz der Gesellschaft: 65474 Bischofsheim Eingetragen unter der Registernummer HRB54785 beim AG Darmstadt Vertretungsberechtigter Geschäftsführer: Peter Bauer Umsatzsteuer-ID: DE182270475 - -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Execute on file access
I'd like to store images on a samba server, and from each image stored a thumbnail should be calculated. Thus, after a file is created/modified, I need to call a program passing the path name of the stored/modified file as a parameter. Write a VFS module that connects to the close operation. Simple enough! Yes, give me two or three minutes, and I'll be done. ;-) Open Source makes everybody a brilliant programmer, true? However, thank you for your answer, which reads to a non-programmer like me as: no, that feature is missing. Peter -- - Angaben gemäß §35a GmbH-Gesetz: ITServ GmbH Sitz der Gesellschaft: 65474 Bischofsheim Eingetragen unter der Registernummer HRB54785 beim AG Darmstadt Vertretungsberechtigter Geschäftsführer: Peter Bauer Umsatzsteuer-ID: DE182270475 - -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] {Bounce} Unsolicited Commercial Email Rejected
The recipient has requested to have their mails scanned for Spam.
Our UCE (Spam) detectors have been triggered by a message you sent:
To: [EMAIL PROTECTED]
Subject: Nwm, #288;#279;#355; ready for Romá#328;#263;#279; in 15 míns
- #288;#279;#355; #266;#297;à#314;#297;#349; softatábs at upto
80#8453;Ð#297;#349;#263;õù#329;#355;
Date: Fri Feb 25 05:54:20 2005
This message has been rejected.
If the message is not Spam, please resend it with a modified subject
line and message body.
If a spammer is spoofing your email address and you did not send this
message, please disregard. All of our bounce-back messages are tagged
with the word {Bounce} in the subject. This can be used as the basis
of a message rule in your email reader so as to automatically discard
such emails.
If you have any questions, or you believe you have received this
message in error, please contact us or your network administrator.
--
Postmaster at Green Apple, Inc.
[EMAIL PROTECTED]
740-653-9890
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] {Bounce} Unsolicited Commercial Email Rejected
The recipient has requested to have their mails scanned for Spam.
Our UCE (Spam) detectors have been triggered by a message you sent:
To: [EMAIL PROTECTED]
Subject: Wildflower, #288;#279;#355; ready for Romá#328;#263;#279; in
15 míns - #288;#279;#355; #266;#297;à#314;#297;#349; softatábs at
upto 80#8453;Ð#297;#349;#263;õù#329;#355;
Date: Sat Feb 19 14:56:29 2005
This message has been rejected.
If the message is not Spam, please resend it with a modified subject
line and message body.
If a spammer is spoofing your email address and you did not send this
message, please disregard. All of our bounce-back messages are tagged
with the word {Bounce} in the subject. This can be used as the basis
of a message rule in your email reader so as to automatically discard
such emails.
If you have any questions, or you believe you have received this
message in error, please contact us or your network administrator.
--
Postmaster at Green Apple, Inc.
[EMAIL PROTECTED]
740-653-9890
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] {Bounce} Unsolicited Commercial Email Rejected
The recipient has requested to have their mails scanned for Spam.
Our UCE (Spam) detectors have been triggered by a message you sent:
To: [EMAIL PROTECTED]
Subject: Woodruff, our company offer Bran ded software at upto 80% disc
Date: Sun Feb 20 02:18:19 2005
This message has been rejected.
If the message is not Spam, please resend it with a modified subject
line and message body.
If a spammer is spoofing your email address and you did not send this
message, please disregard. All of our bounce-back messages are tagged
with the word {Bounce} in the subject. This can be used as the basis
of a message rule in your email reader so as to automatically discard
such emails.
If you have any questions, or you believe you have received this
message in error, please contact us or your network administrator.
--
Postmaster at Green Apple, Inc.
[EMAIL PROTECTED]
740-653-9890
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Byrne wishes you to use a different email address
To whom just sent me an e-mail, I am in the process of consolidating my various e-mail addresses/identities into one. I have been pretty liberal in the past about the addresses I will accept e-mail for. Technically, any e-mail sent to any user at majordojo.com will be directed to me. As it turns out many spammers have learned of the permissiveness of my domain and have begun to abuse it. As a result, I have decided to accept mail at only one address and bounce all the rest. For the time being however, I will continue to accept mail in the fashion I always have until my friends and family have time to update their address books. So please, update your address books and please send all e-mail to the following address: byrne at majordojo dot com Of course, replace the at with a @ and the dot with a .. :) Sorry for the brief inconconvience. Byrne -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Wrong charset when mounting WindowsXP shares
Hello, I don't seem to be able to mount a WindowsXP share with smbmount and get the correct charset. From what I understand Win2000/XP use UTF-8 for SMB shares, so I tried to mount with -o iocharset=utf8 but it did not make any difference. All extended characters are messed up or truncated. Here is what I found out using filenames with a 'å': When I mount a Windows share with Samba the 'å' becomes \206 when I do ls -b. If I create the file on the Samba share from Windows it becomes \303\245 when I list it with ls -b. when I simply create a file on the local filesystem in Linux it becomes \345. When I browse a samba share that has two filenames, \303\245 and \345 they both show up correct in Windows. Only \303\245 show up correct if I list that file in Apache (which is set to UTF-8). Is not \303\ the UTF-8 prefix? Can someone help me shed the light on this? http://se.samba.org/samba/docs/man/Samba-HOWTO-Collection/unicode.html -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Wrong charset when mounting WindowsXP shares
I solved the problem. Still, the solution is rather puzzling. The solution is to mount with -o iocharset=utf8,codepage=cp850. The puzzling part is the code page. The whole idea with Unicode and its UTF-8 implementation is to remove the need for local codepage conversions. As long as a application/system is using Unicode there should nerve be a need for codepages other than using Unicode. Or have I misunderstood something? ~S Hello, I don't seem to be able to mount a WindowsXP share with smbmount and get the correct charset. From what I understand Win2000/XP use UTF-8 for SMB shares, so I tried to mount with -o iocharset=utf8 but it did not make any difference. All extended characters are messed up or truncated. Here is what I found out using filenames with a 'å': When I mount a Windows share with Samba the 'å' becomes \206 when I do ls -b. If I create the file on the Samba share from Windows it becomes \303\245 when I list it with ls -b. when I simply create a file on the local filesystem in Linux it becomes \345. When I browse a samba share that has two filenames, \303\245 and \345 they both show up correct in Windows. Only \303\245 show up correct if I list that file in Apache (which is set to UTF-8). Is not \303\ the UTF-8 prefix? Can someone help me shed the light on this? http://se.samba.org/samba/docs/man/Samba-HOWTO-Collection/unicode.html -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] WinXP PDC logon problem...
There was a registry file distributed with Samba before. This is the one I have from Samba 2.x: PDCLogon.reg: ~~~START~~~ Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netlogon\Parameters] DisablePasswordChange=dword: maximumpasswordage=dword:001e requiresignorseal=dword: requirestrongkey=dword: sealsecurechannel=dword:0001 signsecurechannel=dword:0001 Update=no ~~~END~~~ Hi all, I've seen this raised as an issue on other mailing lists, but I've not seen a solution, and I've seen a number of notes to post to this alias instead, so here I am. I've setup Samba as a PDC running on Solaris. I have a WinXP (latest patch levels) PC which I want to join to the domain. I can successfully join the domain using root authentication, but I am unable to logon with any of my NIS users (stored in both /etc/passwd and smbpasswd)...? I've seen a comment to edit a Windows registry setting (requiresignorseal) and I tried this, but nothing changed. Is there a solution to this issue, or will I be fored back to the hell of an Active Directory/WinNT PDC? :( Cheers, Ryan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Lost Connection when transfering large files...
Did you try copying between two Samba 3 machines? I am going to try during this weekend to see if the problem persist or not. There are no kernel messages or network errors otherwise that I have found so far. ~S hi all, same problem here, using redhat 7.3 and 9.0 both with samba 3.0.2a and Win2K. While copying files thru the share it simply hangs up the connection. FTP-ing it over the network works like a spark. I've been trying to debug some information out of it. but the only thing i get out of the logs is that it has a socket error or something. Does anyone have a clue what is going on and how to fix it? With regards, Michel van der Breggen Spam [EMAIL PROTECTED] schreef in bericht news:[EMAIL PROTECTED] Using Gentoo with kernel 2.6.1 and 2.6.3 and Samba 2.2.8a and 3.0.2a. Mostly when I transfer large (100+MB) files from a WinXP machine to the Samba server I get the following error: [smbd] lib/util_sock.c:read_socket_data(342)_ [smbd] read_socket_data: recv failure for 34944. Error = Connection reset by peer_ The WinXP machines also say Delayed write failed. The data has been lost. What can be the problem and where do I start to look to solve it? ~S -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [OT] Fyodor terminates SCO nmap rights -- how about Samba?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 27 Feb 2004 17:43:51 -0500 Rashkae [EMAIL PROTECTED] wrote: As much as I would like to see a slew of copyright infringement claims get filed against SCO, from my reading of the GPL, violations of the license only terminates your right to distribute the software which was violated. AFAIK, the only GPL software who's license SCO has arguably violated, to date, is Linux. Making derogatory comments My question is this: by declaring the GPL as invalid, isn't that non-acceptance of the license, which in turn invalidates your right to distribute all GPL software? (SCO does distribute Samba in its products, while at the same time they have a document on their website declaring the GPL invalid; See: http://www.thescogroup.com/copyright/ for details) I believe acceptance of the license is required to distribute GPL products, although IANAL. Michael Brown I am not sure it is. I think they mean that because the GPL is invalid then it has no legal binding what so ever. That is why (in their minds) they can continue to use GPL code. However if that is the case, then the code would be protected under normal copyright laws. I think that SCO sees this problem and will probably claim that the intent of the people releasing code under GPL is that the code would be public domain and thus free to use even for SCO. Or they simply ignore the copyright law as each copyright holder must them selfs proceed legally (and make proof that they are indeed the copyright holder) for SCO to stop using their code. Of course I am just rambling as I know very little of US laws. ~S -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] NTFS file streams and Samba?
Is there any way to keep file streams over Samba shares? I realize that Linux filesystems does not have something similar. However one way Samba could do it is to use additional files (hidden to users). It could also be possible to use a plugin module for ReiserFS 4? ~S -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Slow, and I have high Quality NICS
Would not the first action to be to test transmitting data with another application than Samba? For example trying NFS, FTP or something similar. I have also problems with Samba when transmitting larger amounts of data (100MiB or so) to the Samba machine. Samba (or something) would simply drop connections. However, using FTP or NFS things are nice and speedy. (Tested with 2.6.x and Samba 2.2.8a/3.0.2a) Anson, Can you try setting the NIC to 10Mbps/Half and Full Duplex to see if the transfer times improve? I put in a switch a while back , and have a Lexmark Optra printer with a NIC capable\ of 10/100. The LAN cabling is shielded CAT3. The Optra would negotiate to 100Mbps with the switch, but printing took forever. I locked the NIC at 10Mbps, and normal printing resumed immediately. Sounds a little like your problem. I suspect something similar on your connection; CAT3/CAT4 cabling or bad cabling, and the NIC negotiating a higher connection speed than is actually supported. Hope this helps. Jim -Original Message- From: Anson Rinesmith [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 24, 2004 12:13 PM To: [EMAIL PROTECTED] Subject: [Samba] Samba Slow, and I have high Quality NICS I have SLOW file transfers across samba to my Windows Server 2000 domain. I am using a built in 100bT Intel Pro NIC, I have tried the built in gigabit NIC and a PCI 3com, all with the same results. Using iperf, I get about 45-90Mb of bandwidth from my PC's to my samba server. I can pull it up by \\servername file:///\\servername or \\ipaddress file:///\\ipaddress with out any issues. I can ping servername successfully. It is taking about 15 minutes to just pull across a 10mb file. I've seen a lot of complaints about this on the web via google but no one seems to have conquered it. Anyone have a fix for this? I would owe you a steak dinner. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Lost Connection when transfering large files...
Using Gentoo with kernel 2.6.1 and 2.6.3 and Samba 2.2.8a and 3.0.2a. Mostly when I transfer large (100+MB) files from a WinXP machine to the Samba server I get the following error: [smbd] lib/util_sock.c:read_socket_data(342)_ [smbd] read_socket_data: recv failure for 34944. Error = Connection reset by peer_ The WinXP machines also say Delayed write failed. The data has been lost. What can be the problem and where do I start to look to solve it? ~S -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] reduce the size of samba 3.0 binary
800MB seem very large, or do you calculate size with all possible dependencies? Even so it seem large. I have had Samba on a Linux system where the total size is smaller than 800MB. Another possibility would be to use Unix services for Windows. It is a package which you can download from microsoft.com. It contains many standard GNU utils (even gcc I think!) including NFS support. Or simply use FTP. Windows Explorer can browse FTP servers (though not optimally). I installed samba 3.0. It works. But the only problem is that the whole binary package is 800MB (Solaris 2.8) It's a big package to fit in a 2g of / partition. Is there way we can reduce the size of the binary by select function/local/etc? I don't need all the funcations it supports. Only support UNIX nfs data to PC. thanks, Jeffrey -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Mail Transaction Failed
... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] SWAT could not start -localhost:901
Make sure you have the SMBD and the SWAT check marked in the services screen, make sure you have the swat 901 listing in the port services file, and make sure the swat entry is in the xinetd file as mentioned in the readme file in the swat folder from the downloaded file. [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Steve Meisner Sent: Friday, October 04, 2002 4:36 PM To: [EMAIL PROTECTED] Subject: Re: [Samba] SWAT could not start -localhost:901 What distribution do you have? If it's Mandrake, then you need to fix the xinetd for swat. Joel Hammer wrote: This certainly sounds like a firewall problem or a problem with xinetd. Joel On Thu, Oct 03, 2002 at 11:49:18PM +0800, Stephen Liu wrote: Hi all, Could not start SWAT Browser:- Mozilla (also tried Konqueror) http://locathost:901 Alert !!! The connection was refused when attempting to contact localhost:901 Kindly advise. Thanks Stephen Liu -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Autoreply to samba digest, Vol 1 #1685 - 12 msgs
I had the same problem and was fixed. Just open the readme file in the SWAT folder, and add the needed line to the xinetd file, and then add the line to the services file that will add port 901 to the table listing. I did have the same problem and these items fixed it. Thank You, John Berry, Owner Lantex Voice Data Systems 6093 Horton Dr La Mesa, Ca 91942 phone 619-690-4428 fax 619-741-6823 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, October 03, 2002 8:59 AM To: [EMAIL PROTECTED] Subject: [Samba] Autoreply to samba digest, Vol 1 #1685 - 12 msgs Vielen Dank für Ihre e-mail. Da ich vom 30.09.-06.10 in Urlaub bin, kann ich sie leider erst danach bearbeiten bzw. beantworten. In dringenden Fällen, können Sie sich gerne an meinen Kollegen Herrn Lamotte wenden. Er hat die email-Adresse [EMAIL PROTECTED] und ist telefonisch unter 07142/596-152 zu erreichen. Mit freundlichen Grüßen Michael Müller G. Umbreit GmbH Co.KG -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
