[Samba] Windows 98 user doubt

2004-11-19 Thread Thiago Lima


I'm using Windows98 and I want to authenticate into samba with a
user that is not the one I'm logged in.

XP/2000 allows me to do that. In 98 I can't. There's any way to do
it?

Ex: I'm logged as thiago in windows98, but I want do access
\\sambaserver as tlima user


Thanks alot
Thiago lima.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] what is nmbd doing on all interfaces?

2004-02-06 Thread Thiago Lima

Man smb.conf

  For  name service it causes nmbd to bind to ports 137 and 138
on
  the interfaces listed in the  interfaces  parameter.  nmbd
also
  binds  to  the  all addresses interface (0.0.0.0) on ports
137
  and 138 for the purposes of reading broadcast messages. If
this
  option is not set then nmbd will service name requests on all
of
  these sockets. If bind interfaces only is  set  then  nmbd
will
  check  the source address of any packets coming in on the
broad-
  cast sockets and discard any  that  don't  match  the
broadcast
  addresses of the interfaces in the interfaces parameter list.
As
  unicast packets are received on the other sockets it allows
nmbd
  to  refuse  to  serve  names  to machines that send packets
that
  arrive through any interfaces not listed in the interfaces
list.
  IP  Source  address spoofing does defeat this simple check,
how-
  ever, so it must not be used seriously as a security feature
for
  nmbd.
 

-Original Message-
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]
g] On Behalf Of thomas k.
Sent: Thursday, February 05, 2004 10:11 PM
To: [EMAIL PROTECTED]
Subject: [Samba] what is nmbd doing on all interfaces?

hi,

i just noticed the following running netstat:

udp0  0 192.168.1.100:137   0.0.0.0:* 19862/nmbd
udp0  0 0.0.0.0:137 0.0.0.0:* 19862/nmbd
udp0  0 192.168.1.100:138   0.0.0.0:* 19862/nmbd
udp0  0 0.0.0.0:138 0.0.0.0:* 19862/nmbd

in my smb.conf i got:

   interfaces = eth0
   bind interfaces only = yes

so what is nmbd doing on all interfaces? i hope it is not 
trying to reach other samba servers out there or is it?

thomas





--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] PDC/profile Migration to new Host (Domain)

2004-02-05 Thread Thiago Lima

Look at microsoft.com for 'migrating profiles' there's a tool that
you can use to export users profile and then import it again to another
user.

I've never tested it, but I'm planning to do it very soon.

Regards
Thiago.
 

-Original Message-
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]
g] On Behalf Of Daniel Khan
Sent: Thursday, February 05, 2004 7:48 AM
To: [EMAIL PROTECTED]
Subject: [Samba] PDC/profile Migration to new Host (Domain)

Hello,

I have to migrate a network with a samba 2.2 PDC to a new host 
with a Samba 3.0 PDC.
Samba 3.0 is up and running now.
The only thing that makes me nervous is how to migrate the 
profiles of the old PDC to the new PDC. Unfortunately 
usernames/machine names will also change.
The profiles are per user (not per machine) and will stay this way.
The clients are win2K pro, winXP pro.

Is it possible to logon to the old domain, join the new domain 
and have the current users profile copied to the new PDC?

Or better, what is the best way to do it?

Thanks in advance

--
Daniel Khan
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Office 2003 Temporary Files

2004-01-15 Thread Thiago Lima


I'm using samba 3.0.1 as a file server for my windows XP
clients.

Office 2003 is creating and not deleting all .tmp files. Some
are deleted and some are not. 

There's any reason for that? Any tips? I really don't want those
.tmp files filling my disks.


regards
thiago lima.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Pool printing via cups and notification via samba

2004-01-14 Thread Thiago Lima

 Use a class of printers in cups and then write a perl script to parse
cups logfile to get the user and printer. Then send a smb message to the
user telling what printer has been choose.

regards
thiago lima.


 -Original Message-
 From: 
 [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED]
 rg] On Behalf Of Jason Balicki
 Sent: Wednesday, January 14, 2004 1:21 PM
 To: [EMAIL PROTECTED]
 Subject: [Samba] Pool printing via cups and notification via samba
 
 
 Hello,
 
 I've been thinking about setting up some sort of pool 
 printing, where a job can be sent and the system can decide 
 which printer to send it to.
 
 I know that with cups I can define a pool, but I'd like to 
 have samba print a notification as to which printer cups sent 
 the job to.
 
 The rationale is:  I have multiple printers, each under a 
 maintenance agreement.  I have some printers that are way 
 under their image count on the agreement, and others that are 
 over.  So, I'd like to have the system automatically route 
 the jobs evenly so that the image counts can even up.  (For 
 those of you who don't know:  if we're under on our image 
 counts that means we're paying for service we're not getting, 
 if we're over that means we have to pay an overage charge per 
 image printed.)
 
 One problem I've got is that I can't put them all in the
 same room (I don't have the space), but they are all on the 
 same floor, and making people walk to them would be good for them.  :)
 
 The other problem is how do I get cups to tell samba which 
 printer has printed so that I can notify the user (either 
 with the messenger service or email) where their job printed.
 
 I haven't looked into this too deeply yet, but I wanted to
 get a general feel for if it was possible, or better yet
 find someone who's already done it and will now reply with 
 Yeah, and here are my config files
 
 Thanks,
 
 --J(K)
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] spam (way offtopic, sorry ;-)

2004-01-13 Thread Thiago Lima

USER_IN_WHITELIST,  SpamAssassin knows some famous mailing lists and put
a very big value for then.

regards
thiago.


 -Original Message-
 From: 
 [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED]
 rg] On Behalf Of Sam Hart
 Sent: Tuesday, January 13, 2004 5:07 PM
 To: [EMAIL PROTECTED]
 Subject: [Samba] spam (way offtopic, sorry ;-)
 
 
 In the Spam that made it onto this list yesterday I took the 
 time to look 
 into the headers (out of curiosity) and I found this:
 
 X-Spam-Checker-Version: SpamAssassin 2.61 
 (1.212.2.1-2003-12-09-exp) on 
 dp.samba.org
 X-Spam-Status: No, hits=-84.0 required=3.5 
 tests=BANG_GUARANTEE,BAYES_99,
 BEST_PORN,CLICK_BELOW_CAPS,DATE_IN_FUTURE_06_12,HTML_50_60,
 
 HTML_LINK_CLICK_CAPS,HTML_LINK_CLICK_HERE,HTML_MESSAGE,LESBIAN,
 LIVE_PORN,USER_IN_WHITELIST autolearn=no version=2.61
 
 So SpamAssassin (which I am a big fan of, BTW) scanned the 
 message and 
 somehow determine that the hits for it should be -84 in spite 
 of all the 
 various marks against it? What's up with that?
 
 Uh... could it be that the Samba lists server isn't set up 
 properly for 
 SpamAssassin? Anyway, perhaps someone should point that out 
 to whomever is 
 maintaining the lists on samba.org ;-)
 
 (Sorry for OT, I just found that very odd indeed ;-)
 
 -- 
 Sam Hart
 University/Work addr. [EMAIL PROTECTED]
 Personal addr. [EMAIL PROTECTED]
 Alternative [EMAIL PROTECTED]
 end
 
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] best, safest and easiest way to provide remote access to files onlinux machine

2004-01-09 Thread Thiago Lima

You could setup a VPN between your linux server and your remote clients.
Using freeswan (opensource) and win2000/xp native suport for it.

regards
thiago.
 


 -Original Message-
 From: 
 [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED]
 rg] On Behalf Of Heupink, Mourik Jan C.
 Sent: Friday, January 09, 2004 2:07 PM
 To: [EMAIL PROTECTED]
 Subject: [Samba] best,safest and easiest way to provide 
 remote access to files onlinux machine
 
 
 dear list.
 
 this question is rather related to samba, although not 
 exclusively. I consider it related enough to ask here, please 
 apologise if you don't.
 
 we are in the process of setting up a samba domain at my 
 company. a goal is to replace our current nt4 servers. 
 another goal is to provide an easy way to access the 
 documents on the lan (and peoples home directories) from 
 'outside' (anywhere on the internet)
 
 A way to do this, seems to be the so called 'web folders', 
 which appears to be the m$ name for webdav.
 
 Now the questions. I'm sure that wanting this is very common, 
 I guess lot's of you experts have setup similar things in the 
 places you work. So, the
 questions:
 
 Is web folders the way to go? And how to implement this 
 server-side? (mod_dav does not seem to be able to do exactly 
 what i want) (davenport, http://davenport.sourceforge.net/ 
 doesn't seem very mature) What are the alternatives? (either 
 open source, or paid software) (suse openexchange 4.1
 (http://www.suse.com/us/business/products/openexchange/) 
 seems to have some sort of webdav interface. any experiences 
 if that will do what i want?)
 
 Any experiences in user authentication? Things I should keep 
 into consideration when setting up my samba domain? (as 
 nothing has been setup yet, so we can completely start from scratch)
 
 Any comments would be very much appreciated!
 
 Again apologies for the slight off-topic issue. Just pointers 
 in the right direction would be appreciated, and, in case 
 someone knows, but doesn't want to continue this discussion 
 here, please don't hestitate to contact me directly.
 
 Have a nice weekend all of you!
 Mourik Jan
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Password Asking in XP

2003-12-26 Thread Thiago Lima


I'm using samba 3.0.1 as a file server, with no domain.

All my users are exacly the same (even case preserving) as
windows logon users.

So I think that when they try to access a share the windows
should first try to send the loged user and pwd, right?

For some reason it is working in some machines and in some is
not. When the user tries to access the share it is asked for
login/password even if it is the same as his login. 

The clients are WindowsXP Pro/Home.


Any tips?

regards
thiago lima.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Password Asking in XP

2003-12-26 Thread Thiago Lima

Hmm, no I can't because I use user security.

I belive that this will make my things stop working, right?

regards.
thiago.


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
 Sent: Friday, December 26, 2003 11:51 AM
 To: Thiago Lima
 Cc: [EMAIL PROTECTED]
 Subject: Re: [Samba] Password Asking in XP
 
 
 can you try with this option.
 
  security = shared
 -SR
 
 
  I'm using samba 3.0.1 as a file server, with no domain.
 
  All my users are exacly the same (even case preserving) 
 as windows 
  logon users.
 
  So I think that when they try to access a share the 
 windows should 
  first try to send the loged user and pwd, right?
 
  For some reason it is working in some machines and in 
 some is not. 
  When the user tries to access the share it is asked for 
 login/password 
  even if it is the same as his login.
 
  The clients are WindowsXP Pro/Home.
 
 
  Any tips?
 
  regards
  thiago lima.
 
 
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Security mode 0x03: smbclient-2.2.8a sends password, 3.0 doesn't

2003-12-17 Thread Thiago Lima

Don't know why by I had to use a \n before the yes. Now it worked.

regards

 -Original Message-
 From: 
 [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED]
 rg] On Behalf Of David Wuertele
 Sent: Wednesday, December 17, 2003 5:23 PM
 To: [EMAIL PROTECTED]
 Subject: [Samba] Security mode 0x03: smbclient-2.2.8a sends 
 password,3.0 doesn't
 
 
 I'm having trouble accessing a share using smbclient-3.0.  
 The same share (served by a samba server on linux) is 
 accessible from the same account using smbclient-2.2.8a.  
 Here is the command I'm using to access the share:
 
   smbclient '//adventure/dood' -I 192.168.5.11 -U dood
 
 The server's smb.conf file includes the following three lines:
 
   security = user
   encrypt passwords = yes
   null passwords = yes
 
 If I change the 'encrypt passwords' to '= no', smbclient-3.0 
 works fine.  The problem is that I have the exact same 
 problem on hosts over which I have no control of the smb.conf 
 file, for example Mac OS X 10.3.  10.3 appears to have the 
 same behavior as my linux samba host with the above three 
 lines in the smb.conf.
 
 When I analyze the packets sent between the client and the 
 server, I see the following difference in the frames (see 
 attatchments for full frame decode):
 
   samba-2.2.8a sending encrypted null password:
 
 Byte Count (BCC): 69
 ANSI Password: 4C0154EFEF076CCBAE3A6256E351DF5A...
 Unicode Password: B30B73818904C5A7111948521702F985...
 Account: DOOD
 Primary Domain: ABCD
 
   samba-3.0 sending no password:
 
 Byte Count (BCC): 26
 Account: dood
 Primary Domain: WORKGROUP
 
 Note that the primary domain is also different: 3.0 uses the 
 default domain WORKGROUP, while 2.2.8a uses the default 
 domain of the client (ABCD).
 
 What can I do on the CLIENT side to make smbclient-3.0 send 
 the encrypted null password?
 
 Thanks,
 Dave
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Security mode 0x03: smbclient-2.2.8a sends password, 3.0 doesn't

2003-12-17 Thread Thiago Lima

I'm very sorry, I've sent the wrong message to the list.

regards and my deepest apoligize.
thiago lima.


 -Original Message-
 From: 
 [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED]
 rg] On Behalf Of David Wuertele
 Sent: Wednesday, December 17, 2003 6:19 PM
 To: [EMAIL PROTECTED]
 Subject: [Samba] Re: Security mode 0x03: smbclient-2.2.8a 
 sends password, 3.0 doesn't
 
 
 Thiago Don't know why by I had to use a \n before the yes. Now it 
 Thiago worked.
 
 I don't understand --- if you are referring to the smb.conf 
 file, it works fine for me already.  It is smbclient-3.0 that 
 doesn't work.
 
 Dave
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] VPN and Samba

2003-12-10 Thread Thiago Lima

Hi,

I'm using samba in my local network as master brownser and wins
server. 

When I'm connected directly in my network I can just brownse thru
all my workgroups with no problem, but when I'm thru VPN (freeswan
ipsec+l2tp using ips in the same network and sendind the wins server
thru pppd) I can't brownse thru the network.

If I know the machine name I can access it using \\machine, but
brownsing just don't work. It only shows me the road warrior machine.


The road warrior client is a XP Pro.

Any tips?

regards
thiago lima.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] upgrade from 2.2.7a to 3.0.0, problem with client code page [long]

2003-12-08 Thread Thiago Lima


This will help you. It's a tool to convert your filenames from CP850
(what samba 2.x used) to UTF8 (what samba 3 uses)

http://j3e.de/linux/convmv/



 -Original Message-
 From: 
 [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED]
 rg] On Behalf Of Stefan G. Weichinger
 Sent: Monday, December 08, 2003 4:31 AM
 To: samba
 Subject: Re: [Samba] upgrade from 2.2.7a to 3.0.0,problem 
 with client code page [long]
 
 
 Hello, Mariusz,
 
 Montag, 08. Dezember 2003, 06:20 you wrote:
 
 
 MM Now I trying migrate existing configuration and 
 filesystem to samba 
 MM 3.0.0, and I have some problems with client code page, 
 because, when 
 MM I add line above to smb.conf in version 3.0.0 then I get 
 following 
 MM errors in
 
 MM log.nmbd
 
 MM [2003/12/02 07:28:29, 0] nmbd/nmbd.c:main(664)
 MM   Netbios nameserver version 3.0.0 started.
 MM   Copyright Andrew Tridgell and the Samba Team 1994-2003 
 [2003/12/02 
 MM 07:28:29, 0] param/loadparm.c:map_parameter(2422)
 MM   Unknown parameter encountered: client code page [2003/12/02 
 MM 07:28:29, 0] param/loadparm.c:lp_do_parameter(3150)
 MM   Ignoring unknown parameter client code page
 MM [2003/12/02 07:28:29, 0] param/loadparm.c:map_parameter(2422)
 MM   Unknown parameter encountered: character set [2003/12/02 
 MM 07:28:29, 0] param/loadparm.c:lp_do_parameter(3150)
 MM   Ignoring unknown parameter character set
 
 Samba-3 does not know about client code page and character 
 set. It uses Unicode instead. Remove or comment these 2 parameters.
 
 MM In efect:
 
 MM When I running new samba software, people can't open files with 
 MM polish character in file name.
 
 MM I installed new samba from source, and configured samba by type 
 MM ./configure make
 MM make install
 
 MM In catalog
 MM /usr/local/samba/lib/charset, I see CP850.so file , but I 
 can't find 
 MM CP852.so, should I download some packet  ?.
 
 MM (Old) samba in version 2.2.7a that have been installed 
 from rpm (my 
 MM Linux is RH9.0) had this files in
 
 MM /usr/share/samba/codepages/
 
 MM codepage.852
 MM unicode_map.852
 MM unicode_map.ISO8859-2
 
 MM What shuld I do to resolve this problem ?
 
 AFAIK, Samba-3 does not need those files anymore.
 
 Have you gotten rid of the old Samba-rpms already?
 
 If no, remove Samba-3 with
 
 $ make uninstall
 
 then remove Samba-2 with something like
 
 $ rpm -e samba-client.rpm
 $ rpm -e samba-server.rpm
 
 Check any remains with
 
 $ rpm -qa | grep samba
 $ rpm -qa | grep smb
 
 Then reinstall Samba-3:
 
 $ make install
 
 --
 
 How much data do you have on that Samba-server?
 -- 
 best regards,
 Stefan G. Weichinger
 mailto:[EMAIL PROTECTED]
 
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] MySQL passdb backend (mysql_init)?

2003-12-08 Thread Thiago Lima

Looks like the compilation didn't worked well.

Did you used ?

--with-mysql
--with-expsam=mysql

regards
thiago



 -Original Message-
 From: 
 [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED]
 rg] On Behalf Of Didde Brockman
 Sent: Monday, December 08, 2003 10:16 AM
 To: [EMAIL PROTECTED]
 Subject: [Samba] MySQL passdb backend (mysql_init)?
 
 
 Greetings All,
 
 I am trying to use MySQL4 as the backend for authentication 
 through Samba 3.0.0. When I finally got it to compile ok 
 (damn that mysql/mysql.h) I cannot get it to work. Below 
 you'll find the log transcript from when I try to connect 
 with any client -- smbclient in this case. And yes, I have 
 the MySQL-part setup correctly using the example mysql.dump 
 from the dist and the user can connect ok and perform selects...
 
 I would appreciate to hear from anyone who has attempted to 
 pull off the same setup to see if this actually can be done!
 
 Thanks!
 
 
 The relevant rows from smb.conf are:
 passdb backend = mysql:mailserv
 mailserv:mysql host = [IP]
 mailserv:mysql password = [PASSWD]
 mailserv:mysql user = samba
 mailserv:mysql database = samba
 mailserv:mysql port = 3306
 mailserv:table = users
 
 
 Log file entries:
 [2003/12/08 13:07:48, 5] 
 passdb/pdb_interface.c:make_pdb_methods_name(431)
   Attempting to find an passdb backend to match 
 mysql:mailserv (mysql) No builtin backend found, trying to 
 load plugin
 [2003/12/08 13:07:48, 5] lib/module.c:smb_probe_module(102)
   Probing module 'mysql'
 [2003/12/08 13:07:48, 5] lib/module.c:smb_probe_module(113)
   Probing module 'mysql': Trying to load from 
 /usr/local/samba3/lib/pdb/mysql.so
 [2003/12/08 13:07:48, 5] 
 passdb/pdb_interface.c:smb_register_passdb(55)
   Attempting to register passdb backend mysql
 [2003/12/08 13:07:48, 5] 
 passdb/pdb_interface.c:smb_register_passdb(68)
   Successfully added passdb backend 'mysql'
 [2003/12/08 13:07:48, 2] lib/module.c:do_smb_load_module(64)
   Module '/usr/local/samba3/lib/pdb/mysql.so' loaded 
 [2003/12/08 13:07:48, 5] 
 passdb/pdb_interface.c:make_pdb_methods_name(452)
   Found pdb backend mysql
 [2003/12/08 13:07:48, 1] passdb/pdb_mysql.c:mysqlsam_init(922)
   Connecting to database server, host: [IP], user: samba, 
 password: [PASSWD], database: samba, port: 3306
 sbin/smbd: relocation error: 
 /usr/local/samba3/lib/pdb/mysql.so: undefined symbol: mysql_init
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] [CSI] smb.conf share definition force group = option

2003-12-03 Thread Thiago Lima


I've used : 

0775 root.samba /home/samba/shares/files

regards




 -Original Message-
 From: MList [mailto:[EMAIL PROTECTED] 
 Sent: Wednesday, December 03, 2003 9:15 PM
 To: Thiago Lima ; [EMAIL PROTECTED]
 Subject: Re: [Samba] [CSI] smb.conf share definition force 
 group = option
 
 
 i know others have it working finedon't know why i can't 
 get it right
 
 how did you setup permission for your folders in Linux? 
 what does ls-al 
 say
 
 
 p.s. users are not logging into the samba machine directly, 
 only thru thier 
 win9x clients...
 
 -- 
 Regards,
 MList
 Sharing The Power Of IT Through Linux
 
 On Wednesday 03 December 2003 05:09, Thiago Lima wrote:
  I'm using it here in samba 3.0.1 and it is working allright
 
  [companyfiles]
  path = /home/samba/shares/files
  valid users = @samba
  force group = samba
  write list = user1 user2 @group1 @group2
  read list = @group3
 
 
  Setting a 0777 in a directory is something really insecure.
 
  The above is secure only if you DONT have users in samba group 
  logging into your machine. They should use just use samba.
 
  regards
  thiago.
 
  
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbmount discontinued?

2003-11-26 Thread Thiago Lima
 
In a past thread I've notice that smbmount (and mount's suport for
it) will be discontinued and smbclient should be used insted.
 
Sorry if the question is too lame but I use it in some of my systems
now and I think I'll have trouble porting then to smbclient.
 
Is smbmount been removed because it relays on kernel smb support?
Samba will not need smb support in kernel in the future?
 
Can anyone give me a brief ( or maybe a full explanation? :)) 
 
 
regards
thiago.
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Restricting access to SAMBA Server for particular user+workstation combination

2003-11-20 Thread Thiago Lima

Hmm, In 2.2.8 I really don't know but in 3.0.x you can edit an user with
pdbedit and set machines that he can log into.

regards
thiago

 
 Is it possible in SAMBA 2.2.8 to restrict particular user to 
 loggin in SAMBA-driven domain from particular workstations?
 
 For example, user john can login from workstation WS01,
 but can't login from WS02, user mary can login from both 
 workstations, and user mark can login only from WS02.
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] File Permissions. Two unix groups having write access to the same share without 0777

2003-11-19 Thread Thiago Lima


I'm using samba 3.0.1pre3 as fileserver for my windows clients
(xp and 98)

My users are separated in many groups and some dirs should be
writeable for 2 groups at once.

Unix permissions does not allow to have 2 groups for a directory
or file. I could put 777 in the directory and force umasks, but that
really anoys me.

So I did a little workaround to make it work and now I wonder if
it is secure and if it will work as it should.

I've put all my users in group 'samba' as their secondary unix
group and set samba to force group = samba in the share configuration.
Their primary group still one of those (marketing, salles, tech, etc) 

smb.conf share definition : 

[companyfiles]
path = /home/samba/shares/files
valid users = @samba
force group = samba
write list = user1 user2 @group1 @group2 
read list = @group3 

It seens to be working allright. All files are created using
user.samba and mask 0664 and dir 0775. 

Now all permission control is been done by samba. Can I trust
it? 

The only problem I could have is if an user could log into the
unix and CD around, because unix permissions would permit him to see
things that he shouldn't, right?

What this looks like to you guys? Secure enogth ? I'll have no
shell users in this machine. 

any comments, opnions and sugestions would be apreciated.   


thanks and sorry about the poor english. I hope I made myself clear.
thiago lima.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] tracking user actions

2003-11-18 Thread Thiago Lima

Audit VFS does not log IP/username, only the actions. 


 
  We have either a disgruntle user or one who is inadvertently 
  moving/deleting files.  This has been going on for some 
 time now and 
  I'd like to learn who it is so we may go speak with 
 her/him. How might 
  we go about logging file/folder moves/deletes?  Increasing the log 
  level in smb.conf does not seem to provide the information we are 
  after. Changing file perms/ownership/groups is not an 
 option in this 
  case at this time.
 
 Perhaps the Audit VFS modules as documented in the Samba 
 HOWTO Collection PDF.
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] pdbedit in scripts?

2003-11-18 Thread Thiago Lima
 
There's any way to use pdbedit in scripts just like smbpasswd -s ? 
 
I'm writing a script to addusers and I like to use pdbedit to add
users, but I can't enter the user password.
 
thanks
thiago lima.
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Caracteres ñ á é ó ú enarchives names not are reading

2003-11-17 Thread Thiago Lima

I had the same problem some time ago and I changed the unix charset. How
to convert the filenames to the correct charset? And how to discover
what charset is beeing using in a file?

regards.
thiago.



 This is the 'unix charset' problem.  You have two options:
 
 Convert the filenames on the server to UTF8
 
 or
 
 Set the unix charset to what your clients were using as their 
 DOS charset (for example, CP850).  
 
 If you can manage it, then converting the filenames is a much 
 better option - as UTF8 can represent all possible unicode 
 values that can occour in CIFS.  Bad things happen when we 
 cannot convert names :-(

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] security = user , but no username asked?

2003-11-06 Thread Thiago Lima
 
Hi,
 
I've been using samba for a long time with security=share, with that
any of my clients (w98 machines) could read/write any file on a public
share.
 
Now I'm using security=user  but I still want to have a public share
that should be accessed by anyone without password. Using public=yes
guest ok=yes guest only=yes didn't worked. When I try to access the
share I still get a user/pwd prompt.
 
there's any way to do that? I've read security.txt but could't find
the solution.
 
 
thanks alot
thiago lima.
 
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Account Management Tool TCL/TK GUI Beta?

2003-10-31 Thread Thiago Lima

There's any user manager that has being worked on? 

The only one I know is the LAM (LDAP).

regards
thiago.


 
 Thiago Lima wrote:
 |
 | Samba-howto-collection mention in chapter 11 that
 | there will be a new Account Management Tool written in
 | TCL/TK that should (hopefully) be announced in time
 | for Samba-3.0.1 release.
 |
 | As we are right now seeing the beta of 3.0.1,
 | I would like to know if there's a beta of this tool,
 | and if so where can I get it?
 
 I think the developer working on it dropped off
 the earth for a while.  Haven;t heard back from
 him in several months.
 
 Of course I could be thinking of another user manager 
 clone that was being work3ed on.
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] adding computer in domain with user other than root

2003-10-31 Thread Thiago Lima

The user MUST be root, if you want to use another user map it to root in
smbusers.


regards.
thiago.


 I tried to add a computer to a Samba domain using another account 
 (testuser) than root.
 I use LDAP for authentication and added the account 
 (testuser) with uid=0 
 in ldap. If I use this account to add an computer to the 
 domain I get the 
 error: Access is denied.
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Account Management Tool TCL/TK GUI Beta?

2003-10-30 Thread Thiago Lima
 
Samba-howto-collection mention in chapter 11 that there will be a
new Account Management Tool written in TCL/TK that should (hopefully) be
announced in time for Samba-3.0.1 release. 
 
As we are right now seeing the beta of 3.0.1,  I would like to know
if there's a beta of this tool, and if so where can I get it? 
 
 
regards
Thiago Lima.
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Stupid Little Doubt

2003-10-30 Thread Thiago Lima
 
I'm reading the samba-howto-collection and just got a doubt.
 
Even using mysql or ldap I still have to have one user for each
username I insert in pdbedit (smbpasswd/ldap/mysql/etc) ? 
 
There's no way to automatize it just like the add user command to
add machines in the passwd? 
 
regards
thiago lima.
 
 
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Stupid Little Doubt

2003-10-30 Thread Thiago Lima

So when I issue a pdbedit -a -u user1 , it will automatic issue
a '/usr/sbin/adduser user1' ?

Is that?

tks
thiago.


 -Original Message-
 From: rruegner [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, October 30, 2003 3:07 PM
 To: Thiago Lima ; [EMAIL PROTECTED]
 Subject: Re: [Samba] Stupid Little Doubt 
 
 
 Hi , i cant talk bout mysql but see example for user adding , 
 machine adding ( here for suse distro )
 
 a linux group Machines has to be there
 
 addmachinescript = /usr/sbin/useradd -g Machines -c Machine 
 -d /dev/null -s /bin/false %u
 
 adduserscript = /usr/sbin/useradd -m %u
 
 study man smb.conf for more options ( these are valid for samba 3 )
 
 Best Regards
 
 - Original Message - 
 From: Thiago Lima  [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Thursday, October 30, 2003 3:53 PM
 Subject: [Samba] Stupid Little Doubt
 
 
 
  I'm reading the samba-howto-collection and just got a doubt.
 
  Even using mysql or ldap I still have to have one user for each 
  username I insert in pdbedit (smbpasswd/ldap/mysql/etc) ?
 
  There's no way to automatize it just like the add user 
 command to 
  add machines in the passwd?
 
  regards
  thiago lima.
 
 
 
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba
 
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.1Pre1 and windows 2000, domain problem

2003-10-29 Thread Thiago Lima
 
Hi,
 
I'm using samba-3.0.1pre1-1 (rpm)  and I'm trying to make it as a
PDC. 
 
Using WindowsXP Pro I'm able to join the domain I've made in samba. 
 
The problem is that when I try to join the domain using a Win2000
I'm able to join the domain using 'Network Identification-Properties' ,
but when I try to add a user in control-panel from the domain I got the
following error : 
 
The Trust relationship between this workstation and the primary
domain failed
 
I'm using samba with smbpasswd (this is a test machine)  and I've
added the machine and user account.
 
I tried to enable netbios over TCP in w2000 to see it it changed
anything, but it made no difference.
 
 
Any tips?
 
 
commands and configuration
 
 /usr/sbin/useradd  -g machines -d /dev/null -c 'test'  jungletres$  -s
/sbin/nologin
 smbpasswd  -a -m jungletres

 
 
Load smb config files from /etc/samba/smb.conf
Processing section [homes]
Processing section [netlogon]
Processing section [Profiles]
Processing section [printers]
Processing section [publico]
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions
 
# Global parameters
[global]
workgroup = MYDOMAIN
server string = test server
interfaces = 192.168.0.254/24
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n
*ReType*new*UNIX*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
unix password sync = Yes
log file = /var/log/samba/log.%m
max log size = 50
name resolve order = wins hosts lmhosts bcast
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = cups
domain logons = Yes
os level = 33
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
hosts allow = 192.168.0.
printing = cups
 
[homes]
comment = Home Directories
read only = No
browseable = No
 
[netlogon]
comment = Network Logon Service
path = /home/netlogon
guest ok = Yes
share modes = No
 
[Profiles]
path = /home/samba/profiles
guest ok = Yes
browseable = No
 
[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
 
[publico]
comment = Publico
path = /home/samba/public/
guest ok = Yes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Windows print spool is usefull when using remote samba+cups printers?

2003-10-12 Thread Thiago Lima

I'm using cups + samba with windows 98 clients to print. And I'm
using RAW printing with windows own printer drivers. The printer is
connected direcly on my linux box.

I've configured  windows 98  printing clients to don't send jobs to
w98 spool, print directly to printers. Since cups will do the spool and
cups can support multiple simultaneous clients I believe that would be
the best thing to do. I'm right? 

Is this the best thing do to? Will that improve performance of
printing without the risk of loosing jobs? Any tips/pros/cons?


Thanks alot
Thiago Lima.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba + Cups + Filter Access

2003-10-09 Thread Thiago Lima

Using Adobe PS drivers
(http://www.adobe.com/support/downloads/product.jsp?product=44platform=
win ) I'm able to print from Windows XP using IPP directly to cups.

I cound't use it thru samba. 

[]s
Thiago Lima.


-Original Message-
From: Sheldon Hearn [mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 09, 2003 10:34 AM
To: Thiago Lima
Cc: 'Chris Smith'; [EMAIL PROTECTED]
Subject: Re: [Samba] Samba + Cups + Filter Access


On (2003/10/08 15:49), Thiago Lima  wrote:

   Any tips? I can't believe that nobody ever had this problem.  :(

Other people have had this problem, it just hasn't been solved
publically.  Google shows at least two people having problems with
auto-loaded drivers from a cups-samba server to a Windows client.

Neither one of them got a solution that was posted back to the list.

My wife's going away for two weeks today, so I'll have a little free
time to tackle it.  Problem is, I _still_ can't find the Adobe PS
drivers mentioned in the cupsaddsmb(8) manpage. :-)

Ciao,
Sheldon.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba + Cups + Filter Access

2003-10-08 Thread Thiago Lima

Hi,

I'm trying to use Cups + Samba to make a print server for many
purpouses. The main one is to account how many pages where printed by
whom and centralize all printers in one server.

If I configure samba and cups in the RAW mode using windows original
drivers of the printers, everything works fine, but this way I can't use
cups accounting. 

So I reinstaled all my printers in cups using their PPD (using
redhat printconf) , and followed the tutorial in linuxprinting.org
(http://www.linuxprinting.org/kpfeifle/SambaPrintHOWTO/Samba-HOWTO-Colle
ction-3.0-PrintingChapter-11th-draft.html). But even if I got no errors
in the process I can't print from my windows using the cups postscript
drivers.

Let me tell what have I done, and how.

Software :
Redhat 9.0
Cups  1.1.17 (rpm)
Samba 2.2.8a  (rpm) (recompiled from SRPM to force --with-cups )
Windows XP Pro SP1 as client

1) configured my printer in cups using printconf. It is working
fine, I can print any postscript from the box.
2) configured samba  [printers] and [print$] 
3) installed cups-samba-1.1.19.tgz (in /usr/share/cups/drivers) 
4) As my server is running in security = share, so I've changed it
to = root (set a smb password for root) and then :  cupsaddsmb  -H
servername  -U root -v D9001 (cupsaddsmb does not seens to work with
security = share) 
   It worked FINE, I got no errors, the files where uploaded to
/etc/samba/drivers/W32X86/2/, rcpcclient where able to adddriver and
setdriver for the printer.

5) I've changed back security = share to my smb.conf 

6) In my windows client I've tried to install the printer. (on XP
\\servername right-click on printer, connect). Got no errors

7) If I go in
control-panel-printersfaxes-right-click--server-properties-drivers
I CAN see the driver for the printer. (and If I look in the folder
C:\WIwNDOWS\System32\spool\DRIVERS\W32X86\2 there're there) 

BUT even with everything working fine I can't print. If I try to
print anything windows gives me an Error, and if I click in properties
of the printer (in my printerfaxes) it says :  The printername
printer driver is not installed on this computer. Some printer
properties will not be accessible unless you install the printer driver.
Do you want to install the driver now? 

I'm trying this for 5 days now, and I can't find anything on the
net. I really can't imagine where the problem is, because I followed
every single step that the manuals says and got no errors. 

Here are the snips...

SAMBA : 

ldd /usr/sbin/smbd
libcups.so.2 = /usr/lib/libcups.so.2 (0x4001c000)
libssl.so.4 = /lib/libssl.so.4 (0x40036000)
libcrypto.so.4 = /lib/libcrypto.so.4 (0x4006b000)
libnsl.so.1 = /lib/libnsl.so.1 (0x4015c000)
libpam.so.0 = /lib/libpam.so.0 (0x40171000)
libpopt.so.0 = /usr/lib/libpopt.so.0 (0x40179000)
libc.so.6 = /lib/libc.so.6 (0x40182000)
libdl.so.2 = /lib/libdl.so.2 (0x402bb000)
libresolv.so.2 = /lib/libresolv.so.2 (0x402be000)
libgssapi_krb5.so.2 = /usr/kerberos/lib/libgssapi_krb5.so.2
(0x402d)
libkrb5.so.3 = /usr/kerberos/lib/libkrb5.so.3 (0x402e3000)
libk5crypto.so.3 = /usr/kerberos/lib/libk5crypto.so.3
(0x40341000)
libcom_err.so.3 = /usr/kerberos/lib/libcom_err.so.3
(0x40352000)
libz.so.1 = /usr/lib/libz.so.1 (0x40354000)
/lib/ld-linux.so.2 = /lib/ld-linux.so.2 (0x4000)

smb.conf

# Global parameters
[global]
workgroup = ESCRITORIO
netbios name = PENSO-GW
server string = Penso Server
interfaces = 192.168.0.254/24
bind interfaces only = Yes
security = SHARE
log level = 0
log file = /var/log/samba/log.%m
max log size = 50
name resolve order = hosts wins lmhosts bcast
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = cups
dns proxy = No
wins support = Yes
hosts allow = 192.168.0. 127.
printing = cups

[printers]
comment = All Printers
path = /var/spool/samba
printer admin = root
read only = No
guest ok = Yes
printable = Yes
use client driver = Yes
browseable = No

[print$]
comment = Printer Drivers
path = /etc/samba/drivers
write list = root
guest ok = Yes


CUPS

printers.conf
DefaultPrinter D9001
Info Created by redhat-config-printer 0.6.x
DeviceURI smb://printer:[EMAIL PROTECTED]/maber-001/hpdesk990
State Idle
Accepting Yes
JobSheets none none
QuotaPeriod 0
PageLimit 0
KLimit 0
/Printer
Printer Deskjet990
Info SP
Location Sp
DeviceURI smb://printer:[EMAIL PROTECTED]/maber-001/hpdesk990
State Idle
Accepting Yes
JobSheets none none
QuotaPeriod 0
PageLimit 0
KLimit 0
/Printer

cupsd.conf ( just an part of it)

Location /printers/D9001
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 192.168.0.0/24

RE: [Samba] Samba + Cups + Filter Access

2003-10-08 Thread Thiago Lima


On Wednesday 08 October 2003 14:49, Thiago Lima wrote:
   Any tips? I can't believe that nobody ever had this problem.  :(

I never had a problem getting the CUPS Windows PS drivers working but
had an 
entirely different problem in the use of them. What I experienced was
when a 
user requested multiple copies, each copy was separately sent and
decoded 
tying up the printer for ages. With the native Windows drivers the page
is 
sent and decoded once and then printed many times. Unfortunately I had
to 
give up page accounting over this issue.

Two things in the works that may help: Easy Software is working on a new
user 
mode Windows PS driver and CUPS 1.2 is to have a bi-directional back-end

which may allow one to query a printer's counter even when using the
Windows 
native drivers.


I've read something about it, but there's just one problem : they're not
ready. :) Not even a beta.

I guess I'll use the RAW printing and wait for then.

Thanks and regards
Thiago Lima.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] file sharing over Internet

2003-10-08 Thread Thiago Lima

If you setup an VPN you can use your machine (and samba) over the
Internet in a secure way.

Ahh, for for that take a look at WINS, it will enable you to use \\NAME

regards
Thiago Lima.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Gavin Davenport
Sent: Wednesday, October 08, 2003 6:33 PM
To: CHEUNG Chi Wai, Chris; [EMAIL PROTECTED]
Subject: RE: [Samba] file sharing over Internet


Thats a very bad idea as thats how lots of windows virusses try to
spread :)

Have a look at SSH; you can login, copy files, run remote sessions, all
reasonably securely. You can probably tunnel a samba connection through
an ssh connection too :)

Gavs

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of CHEUNG Chi Wai, Chris
Sent: 07 October 2003 08:01
To: '[EMAIL PROTECTED]'
Subject: [Samba] file sharing over Internet


Hi,

I have setup a Samba in Local network and working perfect. I want to
release my share over Internet so that my PC at home can access this
share at the RUN \\MYIPADDRESS. Is it possible?

Cris
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba logging file modifications

2003-03-13 Thread Thiago Lima
 
Hi,
 
I'm using samba as a file server for my network. Samba 2.2.6 is
running on a linux/2.4.18 and all my clients access the share as guest. 
 
I want to log every file modification/upload/delete and the machine
that did it, there's any way to do that?
 
Thanks alot
Thiago
 
 
 
 
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba