Re: [Samba] Fileserver integrated into windows domain, plus linux clients n eeded‏

2007-11-15 Thread herman
Making an AD Domain Member Server is not difficult. However, what is difficult, is getting it to work reliably. It seems to work OK for a week or so at a time, which is not particularly robust... Cheers, H. Ben Ladd wrote: Update: Each time we set up a new user on the system, passwords

Re: [Samba] Joining a win2k3 ads fails

2007-11-09 Thread herman
are not supposed to do those things and it may cause ADS to complain, but while WinXP clients will still work, Winbind will blow up. The only way to fix it is to find the offending records and delete them, but how to find them? It is a situation that is best avoided! Cheers, Herman Lex

Re: [Samba] Joining a win2k3 ads fails

2007-11-09 Thread herman
Hmm, I hear you, but since MS Windows is involved that doesn't mean anything... ;) H. Lex Brugman wrote: Please note that the same configuration works on another box in the same network (same win2k3 PDC) -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] Joining a win2k3 ads fails

2007-11-09 Thread herman
I have seen things behave differently between identical boxes and eventually the problem was solved on the server side, by rolling ADS back to a previous version. So, you got to make things as simple as possible in order to rule out as many weird interactions as possible. Bear in mind that

Re: [Samba] Re: binary does not run on samba-3.0.26a

2007-11-09 Thread herman
Did you remember to run 'testparm'? H. Henrik Carlqvist wrote: hce [EMAIL PROTECTED] wrote: I built the samba from source samba-3.0.26a on FC6. But when I run nmbd -F --debuglevel=5 --configfile=/home/test/smb.conf --log-basename=/home/test/log.txt, nothing happens. The process is not

Re: [Samba] Disable USB storage

2007-11-04 Thread herman
/2005/11/15/disabling-usb-storage-with-group-policy.html Cheers, Herman -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] BUILTIN groups mapping via winbind!!

2007-11-01 Thread herman
Kaustubh Chaudhari wrote: Hi Herman. This is really a helpful information, but i am not able to understand why in built group we cant see a mapping for a normal user, as if we look Builtin is also a OU and we have some Builtin users and groups in it. If i create a OU and groups or users

Re: [Samba] Active Directory member problem

2007-10-31 Thread herman
://www.aeronetworks.ca/LinuxActiveDirectory.html for troubleshooting tips. Cheers, Herman -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] BUILTIN groups mapping via winbind!!

2007-10-31 Thread herman
an old GUID and changes to text strings are applied inconsistently, which confuses winbind, so changing any text string after it has been defined can also screw things up. 'Hope that helps! Herman -- To unsubscribe from this list go to the following URL and read the instructions: https

Re: [Samba] can't remove groups in AD

2007-10-30 Thread herman
changing *anything* in ADS once created, and it really seems to work better this way. Cheers, Herman -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Compile samba to ARM cross compiler

2007-10-30 Thread herman
hce wrote: Hi, Can the samba be compiled by ARM cross compiler (arm/3.4.1/arm-linux)? I am currently downloaded samba-3.0.26a tar ball. I guess I have following two choices, please advice which one make sense. 1. Run configurate under a linux pc distribution such as FC6, then modify Makefile

Re: [Samba] Samba hijack the connection?

2007-10-21 Thread herman
Fajar Priyanto wrote: On Monday 22 October 2007 08:31:46 Fajar Priyanto wrote: Dear all, I have 2 domains: JUPITER.COM (Samba 3.0.23c - Centos5) and WIN.COM (Windows 2000 Adv Srv). I join a windows XP SP1 (MOON), first to Windows domain and then to Samba's. The problem is when I join the XP

Re: [Samba] Samba hijack the connection?

2007-10-21 Thread herman
Fajar Priyanto wrote: On Monday 22 October 2007 11:24:47 herman wrote: In Win XP, you can log into any one of a list of domains. However, you cannot be logged into more than one at a time. Hello Herman, Thanks for the reply. No, I don't want to logon to more than one domain

Re: [Samba] Problem with Net join

2007-10-18 Thread herman
bind failed on port 445 socket_addr = 0.0.0.0. Error = Address already in use I think that you are trying to run smb multiple times. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: ham, [Samba] getent passwd not listing domain users, nsswitch.conf is configured

2007-10-17 Thread herman
Peter Baumgartner wrote: Peter, Comment the idmap backend and winbind nss info parameters to let samba/winbind use the defaults. If it now works, this means that samba was not retrieving the info from the AD server. I ran into this problem, gave up, and used the defaults. You may be more

Re: [Samba] username with @ (at character) - problems with authentication (CUPS)

2007-10-16 Thread herman
Piotr Kierklo wrote: Hi all I tried to set up a printer, which I need to acces using my username. Unfortunatelly, username contains @ (at) inside. I tried different form of escaping (using backslash, unicode value, quotes etc). Nothing works. Yup, Samba doesn't like funny characters. In

[Samba] FIXED AGAIN: Win2003 ADS, wbinfo -u and -g bug

2007-10-12 Thread herman
it and it worked. I haven't been able to break it again for the rest of the day. Cheers, Herman -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

[Samba] NOT FIXED: Win2003 ADS, wbinfo -u and -g bug

2007-10-11 Thread herman
]: cli_session_setup_blob: recieve failed (NT_STATUS_LOGON_TYPE_NOT_GRANTED) Does anyone have any better ideas, or should I get the source code and debug it myself? Cheers, Herman -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman

Re: [Samba] Winbind problem

2007-10-05 Thread herman
I'm looking into the same kind of problem. I have found that it is related to something on the AD Server itself. By rolling the Windows server back a few days, things work again, without making any changes in Linux. It seems to have something to do with the definition of Security groups or

[Samba] FIXED: Win2003 ADS, wbinfo -u and -g almost works

2007-10-05 Thread herman
Unless I'm overlooking it in your smb.conf, I don't see winbind enum users = Yes winbind enum groups = Yes These should allow you to view the domain users and groups. Keep in mind that if you have a large number of users, this will be slow. --- FIXES: Firstly, I forgot the parameters

Re: [Samba] Win2003 ADS, wbinfo -u and -g almost works

2007-10-03 Thread herman
Do authentication etc work? My 'wbinfo -u' only return Error looking up domain users and always had. Nope, I get the same error and authentication also doesn't work, so I have to fix this. It is a bit hard to get the data from the lab to here - I'll copy things to a memory stick or

Re: [Samba] Win2003 ADS, wbinfo -u and -g almost works

2007-10-03 Thread herman
Hi guys, So far, I have figured out that it has something to do with the definition of security groups in ADS. WinXP clients work perfectly so the setup is valid, but Winbind blows up, as shown below. I have ADS running on VMware, so I can switch between working and non-working versions

Re: [Samba] Samba and AD: Still problem with conection

2007-10-02 Thread herman
It looks to me like a windbindd problem in Samba 3.0.23c shipped with RedHat EL5. I'm trying to build an RPM for the 3.0.26a stable version on RHEL5, but I'm having trouble since the 3.0.23c SRPM supplied with RHEL5 won't build. It looks like RedHat built it on Fedora and simply chucked the

[Samba] Win2003 ADS, wbinfo -u and -g almost works

2007-10-02 Thread herman
. However, 'wbinfo -g' returns only two groups then gives a failure message and 'wbinfo -u', doesn't return anything. So, it almost works. Can anyone give me a clue on where to look for this problem? Cheers, Herman -- To unsubscribe from this list go to the following URL and read the instructions

[Samba] wbinfo -u fails on RHEL5

2007-09-30 Thread herman
as the systems that worked before. I am now installing the whole kettle of fish on VMware so I can experiment better. Has anyone seen this and know where I should start digging? Cheers, Herman -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org

Re: [Samba] wbinfo -u fails on RHEL5

2007-09-30 Thread herman
Matthew Nelson wrote: make sure that you have ntp setup to sync with your DC and do a 'net time set' I'm aware of the Kerberos time requirements and do a 'net time set -S w.x.y.z' with the ADS from cron.hourly, so this is not the issue. I can join the domain, which uses Kerberos, so Kerberos

[Samba] Winbind to more than one Domain

2004-06-04 Thread Herman (ISTD)
Dear all, I am using Winbind for my squid box authentication. The problem is that my squid users are distributed in two different Windows Domain (AD), do anyone know to enable Winbind authenticating with two different domains ? Thank you very much. Regards, herman -- To unsubscribe from

RE: [Samba] Winbind to more than one Domain [HELP]

2004-06-04 Thread Herman (ISTD)
Dear all, Anybody can help me ? I want my samba box to be able to join two different domain and authenticate to those different domains using Winbind. Thank's. Regards, herman -Original Message- From: Herman (ISTD) [mailto:[EMAIL PROTECTED] Sent: 04 Juni 2004 16:41 To: [EMAIL