Re: [Samba] Roaming Profiles - WinXP and Win7

2012-12-15 Thread Thierry Lacoste
(...) is there a solution to this behavior. Partial folder redirection? Why partial? Are there folders not to redirect? Regards, Thierry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] recommended procedure for mandatory roaming profiles for win7 with samba 3

2012-12-03 Thread Thierry Lacoste
Hello, I have a PDC and a File (member) server for homes and profiles (Samba 3.4.17). For XP clients I have mandatory profiles with all user shell folders redirected to their respective home share. Now I'm adding win 7 clients to the mix and I want the same thing. It's (almost) working but I

Re: [Samba] issues with Windows 7 roaming profiles

2012-11-13 Thread Thierry Lacoste
On 12 nov. 2012, at 21:44, Preston Hagar wrote: On Mon, Nov 12, 2012 at 6:02 AM, Thierry Lacoste laco...@u-pec.fr wrote: I made some modifications but still cannot use my Windows7 with a domain account. On 10 nov. 2012, at 12:27, Thierry Lacoste wrote: Hello, I have a centOS 5.5 box

Re: [Samba] issues with Windows 7 roaming profiles

2012-11-12 Thread Thierry Lacoste
I made some modifications but still cannot use my Windows7 with a domain account. On 10 nov. 2012, at 12:27, Thierry Lacoste wrote: Hello, I have a centOS 5.5 box acting as as a PDC with samba 3.4.9 and openldap 2.4.22. Then I joined the domain with a centOS box (samba 3.4.17) which

[Samba] issues with Windows 7 roaming profiles

2012-11-10 Thread Thierry Lacoste
the profile when logging in. See below a level 2 log.smdb from the file server when I log in with a domain account. Is the unable to create profs/lacoste.V2 the culprit ? What do I have to do to make it work ? Best regards, Thierry Lacoste. [2012/11/09 13:17:40, 2] smbd/sesssetup.c:1360

Re: [Samba] issues with smbclient 3.0.x against 3.4.x server

2011-02-17 Thread Thierry Lacoste
On 16 févr. 11, at 12:59, Thierry Lacoste wrote: Hello, I'm upgrading my samba installation from 3.0.34 (FreeBSD 6.4) to 3.4.x (CentOS 5.5) from SerNet. I have LDAP based samba domain (PDC and BDC) and a homes/Profiles member server. I first upgraded my DCs to 3.4.9 with no problem. I

[Samba] issues with smbclient 3.0.x against 3.4.x server

2011-02-16 Thread Thierry Lacoste
Hello, I'm upgrading my samba installation from 3.0.34 (FreeBSD 6.4) to 3.4.x (CentOS 5.5) from SerNet. I have LDAP based samba domain (PDC and BDC) and a homes/Profiles member server. I first upgraded my DCs to 3.4.9 with no problem. I have recently installed a new file server (samba

Re: [Samba] Changing passwords from Windows

2011-01-28 Thread Thierry Lacoste
On 27 janv. 11, at 16:55, TAKAHASHI Motonobu wrote: 2011/1/26 Joe Tseng joe_ts...@hotmail.com: Is it possible for a user to change his/her password from Windows? I tried it out last night as a test user against my PDC and it only changed for Samba; I was still able to log into the PDC

Re: [Samba] Changing passwords from Windows

2011-01-28 Thread Thierry Lacoste
On 28 janv. 11, at 11:26, TAKAHASHI Motonobu wrote: 2011/1/28 Thierry Lacoste laco...@u-pec.fr: On 27 janv. 11, at 16:55, TAKAHASHI Motonobu wrote: I tried to use smbldap-passwd as the test user, but I got a message back saying I had insufficient privileges: Have you set by self write

Re: [Samba] Does the BDC need to join a domain?

2009-10-14 Thread Thierry Lacoste
On 14 oct. 09, at 22:57, Mariano Absatz wrote: On Wed, Oct 14, 2009 at 13:36, Gaiseric Vandal gaiseric.van...@gmail.com wrote: I supposed it depends if Samba is configured to automatically create the underlying unix accounts when you create samba accounts. My setup doesn't. I created a

Re: [Samba] Does the BDC need to join a domain?

2009-10-14 Thread Thierry Lacoste
On 14 oct. 09, at 18:36, Gaiseric Vandal wrote: I supposed it depends if Samba is configured to automatically create the underlying unix accounts when you create samba accounts. My setup doesn't. I created a user account in ldap for my BDC. (the unix passwd shd be *LK* and the shell

[Samba] default log level

2009-05-05 Thread Thierry Lacoste
Hello, According to 'man smb.conf' and 'testparm -v' the default log level 0 while it seems to be actually 1. Regards, Thierry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Re: Samba does not change UNIX password after OpenLDAP server upgraded

2009-04-30 Thread Thierry Lacoste
On 1 mai 09, at 01:45, John Du wrote: David Markey wrote: John Du wrote: David Markey wrote: I would imagine that you'll need to re-jig your ACLs in slapd.conf, Please supply logs. Thank you very much. I can use /opt/IDEALX/sbin/smbldap-passwd to change both the Windows and UNIX

[Samba] questions about bug 5535

2009-04-01 Thread Thierry Lacoste
AFAICs Simo's patch for bug 5535 was only applied to the 3.3 series. Does the closing comment in https://bugzilla.samba.org/show_bug.cgi?id=5535 mean that the inconsistencies about RID calculation won't be addressed in the 3.0 and 3.2 series? Does the fact that 3.3.2 always uses sambaNextRid

[Samba] questions about bug 5535

2009-04-01 Thread Thierry Lacoste
AFAICs Simo's patch for bug 5535 was only applied to the 3.3 series. Does the closing comment in https://bugzilla.samba.org/show_bug.cgi?id=5535 mean that the inconsistencies about RID calculation won't be addressed in the 3.0 and 3.2 series? Does the fact that 3.3.2 always uses sambaNextRid

[Samba] questions about bug 5535

2009-04-01 Thread Thierry Lacoste
AFAICs Simo's patch for bug 5535 was only applied to the 3.3 series. Does the closing comment in https://bugzilla.samba.org/show_bug.cgi?id=5535 mean that the inconsistencies about RID calculation won't be addressed in the 3.0 and 3.2 series? Does the fact that 3.3.2 always uses sambaNextRid

[Samba] questions about bug 5535

2009-04-01 Thread Thierry Lacoste
AFAICs Simo's patch for bug 5535 was only applied to the 3.3 series. Does the closing comment in https://bugzilla.samba.org/show_bug.cgi?id=5535 mean that the inconsistencies about RID calculation won't be addressed in the 3.0 and 3.2 series? Does the fact that 3.3.2 always uses sambaNextRid

Re: [Samba] Conflicting RID creation

2009-03-30 Thread Thierry Lacoste
Quoting Thierry Lacoste laco...@miage.univ-paris12.fr: With samba 3.0.34 I have the issue described here http://webui.sourcelabs.com/samba/issues/5535 That is smbpasswd -a joe gives RID=2*UID+1000 while net rpc user add joe gives the value of the sambaNextRid attribute of the sambaDomainName

Re: [Samba] Conflicting RID creation

2009-03-30 Thread Thierry Lacoste
Quoting Miguel Medalha miguelmeda...@sapo.pt: Is there something I can do to ensure that RID=2*UID+1000 in every case? See attribute sambaAlgorithmicRidBase under class sambaDomain. I don't understand. The value of this attribute is 1000 in my LDAP DB. Changing it to say 10 will give

[Samba] Conflicting RID creation

2009-03-29 Thread Thierry Lacoste
With samba 3.0.34 I have the issue described here http://webui.sourcelabs.com/samba/issues/5535 That is smbpasswd -a joe gives RID=2*UID+1000 while net rpc user add joe gives the value of the sambaNextRid attribute of the sambaDomainName LDAP entry. Also smbpasswd -am machine gives

[Samba] Re: problem with sambaNextRid (WAS: updating samba/ldap: do I need new attributes?)

2009-03-25 Thread Thierry Lacoste
a text file that contains my next available UID and GID in it and increment when i add a user. i do everything by hand with .ldif files though. Thierry Lacoste wrote: Hello, I did the steps described below and I have a problem with machine RIDs. When I first join a machine, samba adds to my

[Samba] Re: problem with sambaNextRid (WAS: updating samba/ldap: do I need new attributes?)

2009-03-25 Thread Thierry Lacoste
groupmap add rid= ntgroup=what ever unixgroup=whatever type=d and i think your math is wrong, it is group # * 2 + 1001. to get a UID's RID, it is uid * 2 + 1000. Thierry Lacoste wrote: Sorry if I missed your point but I have no problems with UIDs and GIDs. The smbldap-tools keep the next available

[Samba] problem with sambaNextRid (WAS: updating samba/ldap: do I need new attributes?)

2009-03-24 Thread Thierry Lacoste
Hello, I did the steps described below and I have a problem with machine RIDs. When I first join a machine, samba adds to my sambaDomainName ldap entry a sambaNextRid attribute with a value of 1000. Now samba uses this value (incremented each time) to give its RID to the machine. This is going

Re: [Samba] Outlook and roaming profiles?

2008-11-20 Thread Thierry Lacoste
you may put pst files on a samba share, as the place where they get hosted is free configurable in outlook i e. you can setup their default place with an adm to users home which has normally nothing to do with profile share but as default a pst file can only be opened by one user at the same

Re: [Samba] smbldap and password expiration

2008-10-02 Thread Thierry Lacoste
On 29 sept. 08, at 21:28, Onatawahtaw wrote: Greetings, I just recently set up a new server with samba and openldap authentication using smbldap. The passwords seem to be expiring after about 30 days. How do I set them so that they don't expire? Change the value of defaultMaxPasswordAge

Re: [Samba] Samba on FreeBSD 7.0

2008-06-13 Thread Thierry Lacoste
On Friday 13 June 2008 20:40, white list wrote: Hello ALL, does any body know the options to enable when installing samba from ports collection? It depends what you intend to do with samba. A good start could be the first part of samba 3 by example

Re: [Samba] How to have a Default Profile per group ?

2008-02-07 Thread Thierry Lacoste
FWIW here's the method I'm using here (I'm using mandatory profiles but it will also work with normal profiles). I build three different profiles on an XP box (for teachers, students and administrators) and make then usable by everybody. I copy each resulting NTUSER.DAT file to the root of the

Re: [Samba] Samba+ldap in FreeBSD

2007-10-30 Thread Thierry Lacoste
On Tuesday 30 October 2007 20:01, Roylan Suarez Reyes wrote: Hello friends I am trying to configure Samba + ldap for my domain, the server is FreeBSD ... When I try to run the following command smbldap-populate It gives me the following error: adding new entry: cn=Backup

Re: [Samba] Pam_mount + cifs

2007-10-19 Thread Thierry Lacoste
I have it working in an LDAP context. However I was unable to make KDE work. http://lists.samba.org/archive/samba/2006-July/122347.html If you make some progress please let me know. Regards, Thierry. On Wednesday 17 October 2007 19:18, Diego Obetko wrote: Hi, i'm probably not the first but i

[Samba] strange uid=domain\5Cuser ldap search requests

2007-10-10 Thread Thierry Lacoste
Hello, I have a Samba/OpenLDAP domain (PDB+BDC) and a member Samba server hosting homes and profiles which is identifying users with nss_ldap and is issuing some strange ldap searches. I have these messages in my slapd logs: conn=14143 op=2 SRCH base=ou=XXX scope=1 deref=0

Re: [Samba] logon requests on the BDC

2007-09-08 Thread Thierry Lacoste
On Monday 06 August 2007 05:38, Volker Lendecke wrote: On Mon, Aug 06, 2007 at 10:39:14AM +1000, Andrew Bartlett wrote: Are there special things to do to make the BDC bias work? How can I troubleshoot the reason why it does not work? It has more to do with the order that the WINS server

[Samba] sambaPwdCanChange and sambaPwdMustChange (WAS: ldap passwd sync only)

2007-08-16 Thread Thierry Lacoste
On Wednesday 15 August 2007 01:59, Michal Bruncko wrote: Hello I have exactly the same trouble as described here: http://www.nabble.com/ldap-passwd-sync-on-3.0.25a-tf4261008.html on samba-3.0.25b-2.fc7. When i set ldap passwd sync to only and I change password on some ldap samba user,

Re: [Samba] ppolicy overlay (WAS: Enforcing Password Policies...)

2007-08-13 Thread Thierry Lacoste
On Monday 13 August 2007 03:11, Andrew Bartlett wrote: On Thu, 2007-08-09 at 00:56 +0200, Thierry Lacoste wrote: On Wednesday 08 August 2007 20:17, Matt Anderson wrote: Dear Help, I'm currently running Samba with an LDAP passdb backend. I'm trying to figure out how to NOT allow

[Samba] ldap passwd sync on 3.0.25a

2007-08-13 Thread Thierry Lacoste
I have an strange issue with ldap passwd sync = only on FreeBSD 6.1 with Samba 3.0.25a + OpenLDAP 2.3.37 I have the OpenLDAP smbk5pwd overlay which successfuly synchronizes LM and NT passwords: $ ldappasswd -D 'cn=sambamgr,ou=managers,o=stars' -w sambapass -s secret1

Re: [Samba] ACLs and winbind

2007-08-10 Thread Thierry Lacoste
On Thursday 09 August 2007 15:58, Angela Gavazzi wrote: My working nsswitch.conf look like this: passwd: files winbind ldap group: files winbind ldap shadow: files winbind ldap By, Angela Can nss_winbind be used against a Samba domain? AFAICS it is only used to

Re: [Samba] ACLs and winbind

2007-08-09 Thread Thierry Lacoste
On Thursday 09 August 2007 08:38, Henrik Zagerholm wrote: 8 aug 2007 kl. 16:18 skrev Thierry Lacoste: I'm trying to allow XP clients to add ACLs in the homes share. It appears that I'm unable to do it unless I use winbind although I'm in a pure Samba/OpenLDAP environment. I have a PDC

[Samba] ACLs and winbind

2007-08-08 Thread Thierry Lacoste
I'm trying to allow XP clients to add ACLs in the homes share. It appears that I'm unable to do it unless I use winbind although I'm in a pure Samba/OpenLDAP environment. I have a PDC and BDC with Samba/OpenLDAP and a member Samba server with homes and profiles (below is its smb.conf) on which I

Re: [Samba] Enforcing Password Policies...

2007-08-08 Thread Thierry Lacoste
On Wednesday 08 August 2007 20:17, Matt Anderson wrote: Dear Help, I'm currently running Samba with an LDAP passdb backend. I'm trying to figure out how to NOT allow a particular user to change their password (through Windows, or any interface). I've tried modifying the values for

[Samba] ppolicy overlay (WAS: Enforcing Password Policies...)

2007-08-08 Thread Thierry Lacoste
On Wednesday 08 August 2007 20:17, Matt Anderson wrote: Dear Help, I'm currently running Samba with an LDAP passdb backend. I'm trying to figure out how to NOT allow a particular user to change their password (through Windows, or any interface). I've tried modifying the values for

Re: [Samba] logon requests on the BDC

2007-08-06 Thread Thierry Lacoste
On Monday 06 August 2007 05:38, Volker Lendecke wrote: On Mon, Aug 06, 2007 at 10:39:14AM +1000, Andrew Bartlett wrote: Are there special things to do to make the BDC bias work? How can I troubleshoot the reason why it does not work? It has more to do with the order that the WINS server

Re: 2 questions about start_tls (was: Re: [Samba] TLS and ldap referals)

2007-07-26 Thread Thierry Lacoste
When I shutdown the PDC, logon to a windows client and update my password I get a domain unavailable error as expected. When I restart the master and do it again, evrything is OK. Therefore I guess the referal is chased and TLS is used, or did I miss something? I miserably screwed up my

2 questions about start_tls (was: Re: [Samba] TLS and ldap referals)

2007-07-25 Thread Thierry Lacoste
On Thursday 14 June 2007 13:56, Thierry Lacoste wrote: On Thursday 14 June 2007 10:17, Andrew Bartlett wrote: On Wed, 2007-06-06 at 22:40 +0200, Thierry Lacoste wrote: I have a samba PDC with a master openldap server and a samba BDC with a slave openldap server. Replication is done

Re: [Samba] Roaming profile - Folder redirection - Erase file on server

2007-07-01 Thread Thierry Lacoste
Maybe a problem with offline files. Did you disable them? If not try to do it with gpedit.msc Thierry. On Saturday 30 June 2007 03:01, Patrik Dufresne wrote: [I post the same message on Ubuntu forum] Hi, I need help to fix a problem with Samba as PDC and Folder redirection on a Roaming

Re: [Samba] TLS and ldap referals

2007-06-14 Thread Thierry Lacoste
On Thursday 14 June 2007 10:17, Andrew Bartlett wrote: On Wed, 2007-06-06 at 22:40 +0200, Thierry Lacoste wrote: I have a samba PDC with a master openldap server and a samba BDC with a slave openldap server. Replication is done with slurpd with a TLS connection and the slave ldap server

[Samba] TLS and ldap referals

2007-06-06 Thread Thierry Lacoste
I have a samba PDC with a master openldap server and a samba BDC with a slave openldap server. Replication is done with slurpd with a TLS connection and the slave ldap server has an updateref pointing to the master (I don't use ldaps). On each domain controller my smb.conf contains: passdb

Re: [Samba] Replicated Failover Domain Controller and file server using LDAP

2007-02-02 Thread Thierry Lacoste
Hello, Unless I missed something, it appears to me that in the slurpd version of the master slapd.conf, you don't need any of the by dn=cn=syncuser,dc=differentialdesign,dc=org read In fact the only place where the syncuser dn has to appear is in the replica directive. I guess this is

Re: [Samba] Samba Domain Problem

2006-11-27 Thread Thierry Lacoste
My guess is that you have misconfigured nss-ldap. What is the value of nss_base_passwd in your nss-ldap configuration? Thierry. On Monday 27 November 2006 17:43, [EMAIL PROTECTED] wrote: Good Afternoon I have some problems in my samba domain. When I try add some machine on samba domain his

Re: [Samba] security with normal profiles

2006-09-15 Thread Thierry Lacoste
Thanks a lot. It is not advisable that the NTuser.dat file be made read-only This indeed limits my options. I guess I'll have to stik to mandatory profiles. Can somebody share his experience with redirecting Favorites to the user's home share? I fond contradictory informations wether it's

[Samba] security with normal profiles

2006-09-13 Thread Thierry Lacoste
Following TOSHARG and Samba 3 by examples I implemented Folder redirection plus some security restrictions by building a custom NTUSER.DAT which is the default profile of my users. The problem is that each user has read/write access to its profile share therefore he can replace its NTUSER.DAT.

Re: [Samba] 'ldap machine suffix' is ignored?

2006-08-07 Thread Thierry Lacoste
And I can't join domain from WinXP workstation (WINHOST, for ex.) with the error No such user smbldap-useradd -w %u works perfectly and adds winhost$ to ou=computers , ldapsearch found it. Maybe an issue with nss_ldap configuration. What's the output of 'id winhost$' ? -- To unsubscribe

[Samba] issues with folder redirection and synchronisation

2006-08-01 Thread Thierry Lacoste
I have a samba/ldap PDC with a netlogon share and a samba member server (called sirius) with Profiles and homes shares (samba 3.0.14). Each user in the LDAP database has its sambaHomeDrive attribute set to H:. I'm trying to follow http://samba.org/samba/docs/man/Samba-Guide/happy.html#redirfold

[Samba] prefered configuration for a homes share server

2006-07-01 Thread Thierry Lacoste
I'm using FreeBSD 6.1 DCs with samba-3.0.22 and openldap-2.3.24. I have two DCs. The first one runs the master ldap server and the other runs a replica. They both hold only the [netlogon] share. I have a third machine which holds the [homes] and [profiles] share. This machine is simply joined to

[Samba] issues with cifs mount

2006-06-10 Thread Thierry Lacoste
I have a samba 3.0.14a PDC on FreeBSD 6.0-RELEASE. With pam_mount on Ubuntu 5.10 users have their home mounted with mount.cifs. I have 2 issues with this setting. First with the evolution email client, when I pop my mails I have the following error: Cannot append message to mbox file:

[Samba] cifs mount and quotas

2006-06-07 Thread Thierry Lacoste
I configured a samba 3.0.14a PDC on FreeBSD 6.0-RELEASE with a [homes] share on which I activated user quotas. From an Ubuntu 5.10 client with smbmount 3.0.14 when I do smbmount //carioca/user1 /mnt -o username=user1 and copy a large file to /mnt I have a No space left on device error which is

[Samba] password sync and ldap acls

2006-06-04 Thread Thierry Lacoste
Hello, I followed the Linux Samba-OpenLDAP Howto from IDEALX. My slapd.conf rootdn is cn=ldapmgr,ou=Managers,o=miage My smb.conf ldap admin dn is cn=sambamgr,ou=Managers,o=miage With the ACLs from section 5 (Security considerations) of the Howto when I change a user password from windows XP the

Re: [Samba] password sync and ldap acls

2006-06-02 Thread Thierry Lacoste
On Thursday 01 June 2006 23:23, Thierry Lacoste wrote: I'm using samba 3.0.14a + openldap .2.27 on FreeBSD 6.0-RELEASE. I followed the Linux Samba-OpenLDAP Howto from IDEALX. My slapd.conf rootdn is cn=ldapmgr,ou=Managers,o=miage My smb.conf ldap admin dn is cn=sambamgr,ou=Managers,o=miage

[Samba] password sync and ldap acls

2006-06-01 Thread Thierry Lacoste
I'm using samba 3.0.14a + openldap .2.27 on FreeBSD 6.0-RELEASE. I followed the Linux Samba-OpenLDAP Howto from IDEALX. My slapd.conf rootdn is cn=ldapmgr,ou=Managers,o=miage My smb.conf ldap admin dn is cn=sambamgr,ou=Managers,o=miage With the ACLs from section 5 (Security considerations) of