Re: [Samba] samba errror

2003-01-10 Thread Andrew Bartlett
' so that we can see where the problem actually is. Setup a 'panic action = /bin/sleep 9000' in your smb.conf, then attach to the dead process with gdb. Get a 'bt full', and post it back to the list. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager

Re: [Samba] Urgent help please: Samba constantly giving INTERNALERROR

2003-01-10 Thread Andrew Bartlett
) === [2003/01/08 12:10:23, 0] lib/util.c:(1092) PANIC: internal error The first thing to do is try and upgrade to Samba 2.2.7a. There are serious security issues with earlier versions anyway, and it might just solve your issue. Andrew Bartlett -- Andrew Bartlett

Re: [Samba] Can samba refres the connection to the PDC?

2003-01-10 Thread Andrew Bartlett
. Are you using winbind? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: [Samba] Samba-LDAP PDC - Disjoint uids required for differentou's?

2003-01-16 Thread Andrew Bartlett
different ou's? If samba is expected to read both - then yes. We don't *really* care about the uidNumber of the computer, but the RID must be unique. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED

Re: [Samba] Samba BDCs and machine trust account passwords

2003-01-16 Thread Andrew Bartlett
. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net

Re: [Samba] is use rhosts = yes still supported?

2003-01-16 Thread Andrew Bartlett
) but it does exist. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: [Samba] is use rhosts = yes still supported?

2003-01-16 Thread Andrew Bartlett
On Fri, 2003-01-17 at 08:20, [EMAIL PROTECTED] wrote: On Fri, Jan 17, 2003 at 08:18:42AM +1100, Andrew Bartlett wrote: It is used, and I think it's even on the automated testing system. Certainly I refactored this code in Samba HEAD/3.0, and it's no longer available under that option

Re: [Samba] security = server random failures

2003-01-16 Thread Andrew Bartlett
/password.c:server_validate(1175) password server TYR.IMAGE.COM rejected the password I found in the mailing list archives the following tidbit from Andrew Bartlett, dated 13 Aug 2002: Don't use 'security=server' when you have a real PDC. That's what security=domain is for. Furthermore, due to bugs only

Re: [Samba] Samba 2.2.7a discards LDAP attributes

2003-01-25 Thread Andrew Bartlett
rewrite of the auth code. We now specificly keep that data around for exactly that reason. Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3, Win2K, and MIT KDC -- possible?

2003-01-28 Thread Andrew Bartlett
secrets.tdb to store the password. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: [Samba] Samba 3 ADS current capabilities

2003-01-29 Thread Andrew Bartlett
to give some more info on the join, and any particular errors in the logs. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http

Re: [Samba] Auth PPTP X SAMBA

2003-01-31 Thread Andrew Bartlett
a Samba member server to do MSCHAPv2 authentication against a NT4 or AD domain. Unfortunately I don't know of any patches at present (MSCHAPv1 is possible with current infrastructure) - and I havn't had a chance to make the mods to Samba needed for the MSCHAPv2 part. Andrew Bartlett -- Andrew

Re: [Samba] what's up about NETAPP and SAMBA PDC ?

2003-01-31 Thread Andrew Bartlett
got much closer to MS semantics in 3.0, so I would give that a try. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http

RE: [Samba] Samba 3 ADS current capabilities [adr]

2003-01-31 Thread Andrew Bartlett
at the end of this also. Very helpful with all the restarts I had to do when making changes. 5) If I think of or discover anything else, I will post it. -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student

Re: [Samba] release-date of 3.0

2003-02-04 Thread Andrew Bartlett
complete, behaves a bit better compared to 2.2, and we have some new optional features, but there shouldn't be any 'upgrade issues'. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student

Re: [Samba] Linux as an AD Client questions

2003-02-04 Thread Andrew Bartlett
to mount a directory? pam_mount. I have seen reports of it being hacked up to function correctly. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College

Re: [Samba] Controlling use of roaming profiles

2003-02-05 Thread Andrew Bartlett
, Samba 3.0 works very nicely being trusted by NT4 at my site). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org

Re: [Samba] Controlling use of roaming profiles

2003-02-05 Thread Andrew Bartlett
On Thu, 2003-02-06 at 04:22, John H Terpstra wrote: On Wed, 5 Feb 2003, Andrew Bartlett wrote: If you want a 'real' read only profile, look into the 'vfs_fake_perms.so' VFS module in Samba HEAD. It fakes up the permissions on the files being sent to the client, so that you don't need

Re: [Samba] Copy User/Pass from Samba to WinXP

2003-02-06 Thread Andrew Bartlett
). However, if you are just needing to run this WinXP server as a 'slave', then making your Samba machine a PDC and joining the WinXP machine to the domain should work. Your existing clients can still access the Samba server as-before, they are not forced to use domain logons etc. Andrew Bartlett

Re: [Samba] dual-boot and gettings SIDs to match

2003-02-07 Thread Andrew Bartlett
join under a different name. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: [Samba] Samba vs IPP printing

2003-02-12 Thread Andrew Bartlett
it doesn't handle authentication etc at all. For many organizations, the need to install an optional client on each computer kills things off pretty quickly. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL

Re: [Samba] NT_STATUS code list ?

2003-02-14 Thread Andrew Bartlett
help you. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net

Re: [Samba] WinNT Password Change Prompt

2003-02-14 Thread Andrew Bartlett
the 'pwdMustChange' LDAP attribute to 0. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

[Samba] Re: Adding Printer driver with cupsaddsmb

2003-02-13 Thread Andrew Bartlett
an issue that caused that error on the 'setdriver' command. (2.2 changes had not been merged to HEAD). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker

Re: [Samba] Mangling problem

2003-02-15 Thread Andrew Bartlett
set 'mangle method = hash2' in your smb.conf to 'fix' it. (chances of a hash collision are greatly reduced). This setting is now the default in Samba 3.0, but make sure you read the smb.conf manpage section on this, as it *will* change all your mangled (short) names. Andrew Bartlett -- Andrew

Re: [Samba] logging by name and ip address in 3.0a21

2003-02-17 Thread Andrew Bartlett
that name and so we can only use the IP address. If the logon is via NTLMSSP, we might get the name later, but if it is kerberos, we would never get another name. If you set 'hostname lookups = yes' we will use the reverse DNS name for %m and %M, instead of the IP address. Andrew Bartlett -- Andrew

Re: [Samba] The Big Plunge

2003-02-19 Thread Andrew Bartlett
, or a GUI? Scripts. I also use 'GQ' as an LDAP GUI admin tool. 4. Is it LDAP/Samba integration possible? It's the only way to go. Our LDAP backend currently doesn't deal with Groups and Privileges at present, but this is being worked on. Andrew Bartlett -- Andrew Bartlett

Re: [Samba] password aging

2003-02-19 Thread Andrew Bartlett
(currently alpha) and use the pdb_ldap backend to store your passwords, which fully supports password expiry, based on our own 'pwdMustChange' attribute. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED

RE: [Samba] Thoughts for you geniuses

2003-02-19 Thread Andrew Bartlett
MIT, with a couple of hacks for NT compatibility with how NT has historically been organized. Plus they added the PAC, which they have now documented. Running winbindd on your clients and joining the domain will certainly allow you to log into the workstation with domain passwords. Andrew Bartlett

Re: [Samba] pam_smbpass and ldap

2003-02-19 Thread Andrew Bartlett
going on.. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net

RE: [Samba] The Big Plunge

2003-02-19 Thread Andrew Bartlett
- development has certainly moved from 'new features' into 'stability' over the last few months. Thanks to everyone who has given feedback, I greatly appreciate it. Good luck with your deployment, and do tell us how it goes, or what problems you have. Andrew Bartlett -- Andrew Bartlett

Re: [Samba] moving a samba pdc

2003-02-22 Thread Andrew Bartlett
it back to the old value. Pin down that it isn't a 'real' file permissions issue - check you can get to the profile with smbclient etc. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student

Re: [Samba] XP logon to Samba in a AD Domain environment

2003-02-23 Thread Andrew Bartlett
supports kerberos and Active Directory domain membership, which is *much* better than NTLM, if you can get it to work. (MS will silently downgrade to NTLM if things are not exactly right.) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication

RE: [Samba] NT_STATUS question

2003-02-24 Thread Andrew Bartlett
into writing a VFS module to make out that call). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http

Re: [Samba] Samba - Expire Password

2003-02-25 Thread Andrew Bartlett
I give slightly different details each time). Your two options are to use PAM, or to use Samba 3.0alpha and pdb_ldap. In pdb_ldap, you want to set the 'pwdMustChange' attribute to 0. This works well in my production environment. Andrew Bartlett -- Andrew Bartlett

Re: [Samba] Samba on Novell 5

2003-02-25 Thread Andrew Bartlett
client is linux, then just look into the novell ncp clients. (which are not related to samba). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College

Re: [Samba] librsync ??

2003-03-03 Thread Andrew Bartlett
Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc

Re: [Samba] Samba + UNICODE + Netapp

2003-03-03 Thread Andrew Bartlett
? ( using 3.0 Alpha 21 ) Thanks a lot Samba 3.0 uses unicode when requested by the client, and not explicitly disabled in the smb.conf. What problems are you having? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team

Re: re[2]: [Samba] librsync ??

2003-03-03 Thread Andrew Bartlett
Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net

RE: [Samba] security domain/server

2003-03-04 Thread Andrew Bartlett
as the clients are concerned, there is no difference between security=server and security=domain. So check the simple stuff - use smbclient for testing and ensure you have actually joined the domain correctly. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager

Re: [Samba] Multiple VFS modules per Share

2003-03-04 Thread Andrew Bartlett
. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc

Re: [Samba] Issues with domain auth

2003-03-04 Thread Andrew Bartlett
domain members significant problems, as you then cannot access the NETLOGON pipe required for domain authenticaion (among other things). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student

Re: [Samba] Issues with domain auth

2003-03-04 Thread Andrew Bartlett
domain members significant problems, as you then cannot access the NETLOGON pipe required for domain authenticaion (among other things). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student

Re: [Samba] Samba 3 and non-AD KDC

2003-03-05 Thread Andrew Bartlett
it in both places. This would then require that you manually create the account in the KDC. How you then get windows machines to get the tickets etc is up to you :-) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team

Re: [Samba] password aging

2003-03-05 Thread Andrew Bartlett
Dominion Diagnostics Andrew Bartlett [EMAIL PROTECTED] rg

Re: [Samba] Expire Password - Which is half the most easy one?

2003-03-05 Thread Andrew Bartlett
want to set the 'pwdMustChange' attribute to 0. (Andrew Bartlett) Good people, would like that they thought which is the way most easy to make this for a person who understands of SAMBA but she does not understand of LDAP and nor of PAM... My net is small simple e (~60 machines) and will only

Re: [Samba] Migration from WindowsNT to Samba

2003-03-07 Thread Andrew Bartlett
domain SID too). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: [Samba] samba and .NET (WIN 2003)

2003-03-07 Thread Andrew Bartlett
. (fortunately, the code is relatively small) -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: [Samba] cups printing and user names from trusted domains

2003-03-07 Thread Andrew Bartlett
, and will mean that they use the name in the form 'domain\username' if you used winbind or 'username' if you didn't. (Effectively). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student

Re: [Samba] cups printing and user names from trusted domains

2003-03-08 Thread Andrew Bartlett
On Sat, 2003-03-08 at 06:51, Andrew Bartlett wrote: On Sat, 2003-03-08 at 04:12, Wolfgang Ratzka wrote: -BEGIN PGP SIGNED MESSAGE- Im currently running some tests for a samba/CUPS based print server. The print server is a member of an NT domain and uses winbind to import NT

Re: [Samba] Winbind more infos

2003-03-11 Thread Andrew Bartlett
and password (smbpasswd -r cleo -j SURSON -Uadministrator) and set a username into 'wbinfo -Ausername%password' to allow winbind to use authenticate it's connection to the DC. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems

Re: [Samba] Setting up PDC with PAM

2003-03-11 Thread Andrew Bartlett
= No csc policy = disable -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL

Re: [Samba] pam_mkhomedir.so

2003-03-12 Thread Andrew Bartlett
is, if is possible to configure all of services (login, telnet, ftp, ssh, samba, kde...) centrally in one file or somewhere. Or it is not possible? That's what the system-auth stuff is about. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager

RE: [Samba] Windows XP and plain text password

2003-03-12 Thread Andrew Bartlett
a pretty lame excuse for almost complete incompatibility with out-of-the-box installations. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL

Re: [Samba] Threaten warnings while compiling Samba 2.2.7a onSolaris 2.5.1

2003-03-12 Thread Andrew Bartlett
these warnings *can* indicate bugs, we compile samba after every checkin on over 30 different compiler/arch combinations at build.samba.org, and developers are encouraged to study the compiler output presented there. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager

RE: [Samba] smbpasswd question

2003-03-12 Thread Andrew Bartlett
On Thu, 2003-03-13 at 08:18, [EMAIL PROTECTED] wrote: They do not need local accounts, however the company do not want to support winbind Is there any reason you cannot run 'security=domain' against the local accounts, as indicated in the documentation? Andrew Bartlett -- Andrew Bartlett

Re: [Samba] Windows XP SMBecho request every 30-33 secs

2003-03-14 Thread Andrew Bartlett
Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc

Re: [Samba] restrict anonymous used wbinfo -A what next?

2003-03-15 Thread Andrew Bartlett
advantage is we get kerberos, which works much better anyway :-) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org

Re: [Samba] Samba PDC and MMC - Problems changing password ofservices

2003-03-15 Thread Andrew Bartlett
to do with rpc-call and there authentication, but i'm absolutly not sure. Only the network and logfile traces will really tell you. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network

Re: [Samba] Windows LocalSystem Account - Linux Samba Server -What's the userID?

2003-03-15 Thread Andrew Bartlett
userID do I need to define on the Samba server to allow LocalSystem to access files on a Samba share? I think the way you do this is to add a domain user, with the right privs, and then start the service as that user, with that password. However, I've never played with this myself. Andrew Bartlett

Re: [Samba] Windows XP SMBecho request every 30-33 secs

2003-03-15 Thread Andrew Bartlett
with the 'offline file cache'. Either way, I think that ignoring the smbecho as 'activity' would probably be a bad idea. In this case it's a bit of a pity that the cost of processing that echo is so high, but I can't really see a good way around it. Andrew Bartlett -- Andrew Bartlett

Re: [Samba] smblib/auth

2003-03-15 Thread Andrew Bartlett
and pam_winbind or ntlm_auth (new in 3.0 alpha). smblib has had a number of issues over the years, and I understand that the authentication is usually just LM based (case-insensitive). More particularly, there is no way for it to tell if it's actually talking to the DC. Andrew Bartlett -- Andrew Bartlett

Re: [Samba] file corruption problem - smb log informationwrittento files on shares

2003-03-15 Thread Andrew Bartlett
have been chasing this one for a while, and I'm pretty sure we came to some resolution since 2.2.6 or 2.2.7. You should upgrade to 2.2.8 for the security fixes anyway, and see if the problem persists. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager

[Samba] Re: Samba 3.0 alpha22 confiugre problem

2003-03-15 Thread Andrew Bartlett
these generated files in CVS. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: A few swat comments. was:Re: [Samba] Does the SWAT tool comewith the Red Hat 8.0 distribution?

2003-03-16 Thread Andrew Bartlett
not be that hard - and could be quite useful... Maybe just a warning along the lines of about to overwrite your smb.conf, would you like to save your original? Ok. I'll implement that one. Or what about just calling RCS on the file? Andrew Bartlett -- Andrew Bartlett

Re: [Samba] Single shared directory, with a universal password

2003-03-16 Thread Andrew Bartlett
' password on Win9X. Not quite (because we map to unix users) but pretty close. Note that setting 'security=share' will affect other shares on the server, so you might want to look into a %L include to host this on a separate virtual hostname. Andrew Bartlett -- Andrew Bartlett

Re: [Samba] Seperate servers for home directory space and logins

2003-03-16 Thread Andrew Bartlett
the authentication (both Samba and FTP) redirected to the PDC. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http

Re: [Samba] Unix Realname with samba 2.2.4

2003-03-17 Thread Andrew Bartlett
the option to turn this off was rather pointless, so it's always enabled. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http

Re: [Samba] Samba vs Windows SAK

2003-03-17 Thread Andrew Bartlett
environment - but they neglect to mention that you also have the opportunity to integrate it into your environment - not integrate your environment into it! (This is what makes a Samba NAS more than a rack-mounted Windows install IMHO). Andrew Bartlett -- Andrew Bartlett

Re: [Samba] Possible Bug?? (was: Win95 Win98 - NOT WORKING -NT,2000, XP are ok)

2003-03-19 Thread Andrew Bartlett
browseable = yes printable = yes writable = yes Well, I'll start by saying that this last statement will probably just confuse things - it might turn it back into a disk share. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems

Re: [Samba] Where can I read about redirecting My Documents andApplication Data?

2003-03-19 Thread Andrew Bartlett
point the way to this information? It's possible with System policies. These are 'shell dirs'. If you grab the NT system policy editor, and things like the office resource kit for policy templates. I did it with PowerToys (tweak ui) and a mandatory profile myself. Andrew Bartlett -- Andrew

[Samba] Re: NT sends empty username to 3.0a21

2003-03-08 Thread Andrew Bartlett
' in your smb.conf). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: [Samba] Winbind Memory Leak bug

2003-03-22 Thread Andrew Bartlett
. Is there anyway to verify that these mails are getting to the list? If you are subscribed, then you will get your posting back. Or just wait for a reply :-) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL

RE: [Samba] Change somebody else's domain password?

2003-03-22 Thread Andrew Bartlett
Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description

Re: [Samba] 3.0alpha22 does not execute add user script ?

2003-03-22 Thread Andrew Bartlett
, it was decided a *long* time ago that also executing it (ie, the same script and parameter) for 'no homedir' was just plain silly. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator

Re: [Samba] Samba as PDC and PAM authentication

2003-03-24 Thread Andrew Bartlett
you enable encrypted passwords. (and you need to apply the registry patch). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED

Re: [Samba] Samba 3.0 - a bunch of really high level questions

2003-03-26 Thread Andrew Bartlett
On Wed, Mar 26, 2003 at 09:08:18AM +, John H Terpstra wrote: On Wed, 26 Mar 2003 [EMAIL PROTECTED] wrote: Hello everyone... I am a long time samba user (3 or 4 years), though I never ventured into the alpha stages until recently (alpha 21, I'll move to 22 in the near future once I get

Re: [Samba] Samba 3.0 - a bunch of really high level questions

2003-03-26 Thread Andrew Bartlett
a 'stable' release out the door, but it's a slow process. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org

Re: [Samba] Change password 1st logon

2003-03-26 Thread Andrew Bartlett
possible for NT4 and above with PAM and 'obey pam restrictions = yes', but not quite as clean. (Naturally, this requires 'unix passwd sync = yes'. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED

Re: [Samba] Re: Winbind broken after 2.2.8 upgrade

2003-03-26 Thread Andrew Bartlett
. Yes, we need to work on that - the outsource of this into LDAP is one example of these efforts - and we did have a project to dump/import the tdb to a text file, but I'm not sure what happened to it... Andrew Bartlett On 25 Mar 2003 at 10:32, [EMAIL PROTECTED] wrote: I have just upgraded two

Re: [Samba] Access to shares for authenticated domain users only

2003-03-26 Thread Andrew Bartlett
username/pw pair. Fundementally, any restriction imposed by logon script/.pol files can be avoided - you must never trust the client to actually follow their directions... Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org

Re: [Samba] trouble configuring and compiling

2003-03-26 Thread Andrew Bartlett
: /usr/include/linux - /usr/src/linux/include/linux /usr/include/asm - /usr/src/linux/include/asm-i386 everything worked. You should not do this - you should get the kernel that your glibc was compiled against, and use that. Redhat has a glibc-kernel-headers for exactly this task. Andrew

Re: [Samba] Re: Winbind broken after 2.2.8 upgrade

2003-03-26 Thread Andrew Bartlett
On Thu, Mar 27, 2003 at 01:27:26AM +, Andrew Bartlett wrote: On Wed, Mar 26, 2003 at 04:11:13PM -0800, Shawn Wright wrote: Ok, stupid me. Somehow I missed updating /lib/libnss_winbind.so on both these machines. Presumably this would have also caused corruption of the winbind idmap

Re: RES: RES: [Samba] Re: Winbind broken after 2.2.8 upgrade

2003-03-27 Thread Andrew Bartlett
), or to disable it. However, setting this only really works for Samba 3.0 - for 2.2 you really can't run with this set. If you already have a username/pw set (by wbinfo -A), then I would suspect that you have SMB signing required, on a 'fixed' DC (MS did not used to enforce this). Andrew Bartlett

Re: [Samba] Maximum characters for valid users = ?

2003-03-27 Thread Andrew Bartlett
? No. And, is there a better way to deal with spaces in usernames than User Name ? Note: The same thing happens with write list =. This should be fixed in Samba 3.0, due to a change to the way we process such lists, but you are much advised to use a group on the server. Andrew Bartlett -- Andrew

Re: [Samba] Does active directory support include policy support

2003-03-27 Thread Andrew Bartlett
- they often 'fall back' in parts of the protocol. It may well be possible to create such policies - In the end, they are just a file in a particular file share. It would be an interesting challenge for somebody to work on. :-) Andrew Bartlett -- Andrew Bartlett [EMAIL

Re: [Samba] Access to shares for authenticated domain users only

2003-03-27 Thread Andrew Bartlett
notebooks etc. connecting to the network and then disappearing off home with sensitive data from the server on their drives. Really, the best you can do is per-user passwords, strong passwords, correctly set permissions, and policies (human policies, not computer ones :-). Andrew Bartlett -- Andrew

Re: [Samba] Samba 2.2.8 is failing on change machine accountpassword

2003-03-28 Thread Andrew Bartlett
'smbpasswd -t' it should do it on demand. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http

Re: [Samba] Samba 2.2.8 is failing on change machine accountpassword

2003-03-28 Thread Andrew Bartlett
On Fri, 2003-03-28 at 23:44, Eric Boehm wrote: On Fri, Mar 28, 2003 at 10:00:47PM +1100, Andrew Bartlett wrote: Andrew == Andrew Bartlett [EMAIL PROTECTED] writes: Andrew On Fri, 2003-03-28 at 19:44, Hansjoerg Maurer wrote: Andrew If you run 'smbpasswd -t' it should do

RE: [Samba] Access to shares for authenticated domain users only

2003-03-28 Thread Andrew Bartlett
... The only secure computer is turned off, disconnected from the world, under 5 feet of concrete with an armed guard standing on top. And then somebody will probably just bribe the guard... Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager

RE: [Samba] Samba and CCC

2003-03-28 Thread Andrew Bartlett
available via telnet from the Internet. More info, for anyone who's interested, here:http://www.testdrive.compaq.com/ We have a number of testdrive machines already participating on the 'build farm' (build.samba.org). It's on my list to expand this, but it's a long list :-) Andrew Bartlett

Re: [Samba] WINBIND with usernames with

2003-03-29 Thread Andrew Bartlett
/msg00060.html You could add to your list there. I've 'fixed' this in 3.0, by only doing this paranoid check for %U - all other uses of the username are direct off-the-wire (charset conversion only). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager

Re: [Samba] print$ share problem URGENT - BUG

2003-03-26 Thread Andrew Bartlett
be ptrace'ed... I'm glad jelmer added that backtrace() code... Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Am I reading this dump correctly?

2003-03-30 Thread Andrew Bartlett
to correct the problem, but I'm having a hell of a time figuring this one out. We use msdfs with security = server. This is probably your problem. Never use 'security=server' if you can help it. Use 'security=domain'. Andrew Bartlett -- Andrew Bartlett [EMAIL

[Samba] Re: Samba 3.0 won't join Samba-TNG domain

2003-04-02 Thread Andrew Bartlett
a real bug, not a misconfiguration). However, if it is real, and somebody at Samba-TNG wants to propose a patch that makes us (Samba 3.0) detect this situation properly, it might get considered. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager

Re: [Samba] Password Aging Policies - SAMBA

2003-04-04 Thread Andrew Bartlett
implemented in Samba 3.0, for pdb_ldap, pdb_tdbsam. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http

Re: [Samba] samba 3 as a pretend DC?

2003-04-04 Thread Andrew Bartlett
), then there isn't anything much you can do. However, this isn't a usual configuration, even for 'native mode' DCs. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator

Re: [Samba] samba_3_0+ldapsam: Bug?

2003-04-04 Thread Andrew Bartlett
On Sat, 2003-04-05 at 03:01, Dariush Forouher wrote: Hi, after upgrading samba 3.0 from ~ Jan. 03 cvs - today's cvs, samba crashes while contacting an LDAP server. Sorry about that - I fixed it in HEAD but only just merged it to 3.0. Andrew Bartlett -- Andrew Bartlett

Re: [Samba] net rpc samdump error on samba-3.0alpha22

2003-04-04 Thread Andrew Bartlett
= no'. (yes, we need to make this easier) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org

Re: [Samba] windows 2000 PDC

2003-04-05 Thread Andrew Bartlett
On Sat, 2003-04-05 at 15:53, samah Ibrahim wrote: can samba v 2.2.5 server function as a windows 2000 PDC with active No. See the samba.org website for the progress of Samba 3.0 as an Active Directory member server. Andrew Bartlett -- Andrew Bartlett [EMAIL

  1   2   3   4   5   6   7   8   9   10   >