Re: [Samba] [Announce] Samba 4.0.0rc1 Available for Download

2012-09-14 Thread Ricky Nance
Maybe this will help ;) I also cleaned up references to 'beta'. Ricky On Thu, Sep 13, 2012 at 9:55 PM, Scott Lovenberg scott.lovenb...@gmail.comwrote: On Thu, Sep 13, 2012 at 6:40 AM, Karolin Seeger ksee...@samba.org wrote: [...] - Domain member support in the 'samba' binary is in it's

Re: [Samba] remove IP from DNS ldb

2012-10-12 Thread Ricky Nance
First make a backup of samba incase something goes wrong. Then `nslookup realm.tld` should give you a list of all the ip's linked to realm.tld, then you can use something like `samba-tool dns delete host realm.tld @ A ip.you.rem.oved -Uadministrator` also you will want to use `samba-tool dns

Re: [Samba] access my created share in smb.conf Only by Ip

2012-11-05 Thread Ricky Nance
With that provision line, you will default to the internal_dns dns server, if you want to use bind9_dlz you will need to specify --dns-backend=BIND9_DLZ ,this is the excerpt if you run samba-tool domain provision --help -dns-backend=NAMESERVER-BACKEND The DNS server

Re: [Samba] Samba 4.0 released - The First Free Software Active Directory Compatible Server is now available !

2012-12-13 Thread Ricky Nance
Very nice work! Congrats to all of the Samba team on achieving such a great milestone! Ricky On Tue, Dec 11, 2012 at 11:32 AM, Jeremy Allison j...@samba.org wrote: Samba Team Releases Samba 4.0 = December 11th 2012.

Re: [Samba] Replication Ok, or not?

2013-02-12 Thread Ricky Nance
I think that is just a bug. Not sure if its been reported yet or not though. Ricky On Feb 12, 2013 11:18 AM, Gregory Sloop gr...@sloop.net wrote: Setup a DC using 4.0.3 - all appears to go fine... Setup a second DC and everything works fine to here...but I'm not sure if replication is

Re: [Samba] s3fs or ntvfs

2013-02-12 Thread Ricky Nance
In more recent versions of samba, the server services line is typically omitted (as is the dcerpc endpoint servers). If you have +smb, -s3fs, you are using ntvfs, otherwise +s3fs does just what it says (and in your line there is no smb either, which is good if you are running s3fs). As far as I

Re: [Samba] Promoting a DC

2013-02-12 Thread Ricky Nance
Hi Greg, Yes, its really that simple, however you may end up needing to transfer them one role at a time if you end up getting errors (something I had to do once). Samba-tool needs a bit more documentation (on the wiki that is), however you can see more info by using --help after any command... I

Re: [Samba] map to guest = bad user ignored in Samba 4?

2013-02-13 Thread Ricky Nance
Hi Sebastian, Many of the per share options can now be done using ACL's. In this case you would open the netlogon share (via windows) start - run - \\MY-SERVER\netlogon (then press enter), then right click on a blank spot in that folder (not on any other file or folder) and select properties. Find

Re: [Samba] map to guest = bad user ignored in Samba 4?

2013-02-15 Thread Ricky Nance
wiki and everything else seems to be working fine. Sebastian On 14/02/13 05:31, Ricky Nance wrote: Hi Sebastian, Many of the per share options can now be done using ACL's. In this case you would open the netlogon share (via windows) start - run - \\MY-SERVER\netlogon (then press enter

Re: [Samba] smb.conf for Windows clients

2013-02-18 Thread Ricky Nance
Hi Greg, could you please provide more info on what you are needing samba to do? Is this going to be a PDC or AD DC, or simple sharing, a print server, the list goes on... give us a little bit more info to work with and someone will likely be able to help you out. Ricky On Mon, Feb 18, 2013 at

Re: [Samba] smb.conf for Windows clients

2013-02-18 Thread Ricky Nance
Alright, so you should find everything you are looking for here https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO_TEMP ACL's make share manipulation much easier, pretty much [share] path = /some/path/on/linux read only = no then from windows, login as the domain administrator and you can set

Re: [Samba] Error in DRS Showrepl

2013-02-20 Thread Ricky Nance
On DC2 do you have nameserver ip.to.dc.1 in your /etc/resolv.conf ? Also the Warnings are just that, a warning, they are safe to ignore. (I have them on mine, and my replication works fine.) Ricky On Wed, Feb 20, 2013 at 8:44 AM, BOTZ Franck (Informaticien) - DDT 67/SG/MGI/CI

Re: [Samba] getent group return only local users

2013-02-20 Thread Ricky Nance
Did you make the appropriate symlinks for winbind.so ? I use Ubuntu and mine look like the following: root@server:/lib/x86_64-linux-gnu# ls -alh | grep winbind lrwxrwxrwx 1 root root40 Nov 23 14:45 libnss_winbind.so - /usr/local/samba/lib/libnss_winbind.so.2 lrwxrwxrwx 1 root root40 Nov

Re: [Samba] Samba4 Auto-start

2013-02-20 Thread Ricky Nance
My bet is that smbd is spawning before your upstart script causing major problems. Try to issue a update-rc.d -f smbd remove then reboot and see if your problem goes away. Ricky On Wed, Feb 20, 2013 at 3:15 PM, Gregory Sloop gr...@sloop.net wrote: MR I'll cut to the chase -- several weeks

Re: [Samba] Possible bug in Samba 4 - no Recycle VFS object

2013-02-22 Thread Ricky Nance
Hi Sebastian, If you run ps ax | grep smbd while samba is running and see running smbd processes, then most (probably all even) vfs objects should run (including recycle). Ricky On Feb 22, 2013 4:01 AM, Sebastian Arcus s...@open-t.co.uk wrote: On 21/02/13 23:26, Jeremy Allison wrote: On Thu,

Re: [Samba] SaMBa 4.0.x homedir mapping - is possible without user account in system?

2013-02-23 Thread Ricky Nance
Sure, you need to setup winbind and a couple of config options and it should work fine. I will post a link later (on my mobile at the moment). This info needs added to the howto wiki. Ricky On Feb 23, 2013 10:34 AM, Celso Viana celso.via...@gmail.com wrote: Hi all, I'm testing the Samba4 and

Re: [Samba] Samba4 DC, Auth on linux side

2013-02-23 Thread Ricky Nance
I've not personally tried this, but have you seen how to setup this with a windows AD. I think it is a bit different , but should be possible. Remember that samba AD should work exactly as a windows AD as far as most programs are concerned. Ricky On Feb 23, 2013 11:56 AM, Chris Fischer

Re: [Samba] SaMBa 4.0.x homedir mapping - is possible without user account in system?

2013-02-23 Thread Ricky Nance
-linux-gnu). After adding those links and modifying the nsswitch.conf, you might want to add : template homedir = /home/%ACCOUNTNAME% to your smb.conf to make winbind a little happier (it defaults to /home/%WORKGROUP%/%ACCOUNTNAME%). Good luck, Ricky On Sat, Feb 23, 2013 at 12:41 PM, Ricky

Re: [Samba] some DNS trouble ...

2013-02-26 Thread Ricky Nance
Correct me if I am wrong, but isn't it dns forwarder = (not dns forwarderS) run your config through samba-tool testparm and see if it complains. Ricky On Tue, Feb 26, 2013 at 9:11 AM, Gregory Sloop gr...@sloop.net wrote: mmgc Well … just found that the options mmgc server role mmgc dns

Re: [Samba] kerberos

2013-03-08 Thread Ricky Nance
https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO_TEMP#Samba_AD_management may be of help. Ricky On Fri, Mar 8, 2013 at 12:53 AM, Andrew Bartlett abart...@samba.org wrote: On Wed, 2013-03-06 at 14:18 -0700, Saad Benateigha wrote: I am having a problem using kerberos I have installed

Re: [Samba] Logon scripts

2013-03-08 Thread Ricky Nance
Hello Terry, You will need to define a logon script for each user in the Active Directory Users and Computers (ADUC) tool or you can do this through user GPO's (there is a logon script option under the user module). In ADUC, select a user (or highlight several users) then under the profiles tab

Re: [Samba] Windows 7 logon script not executed

2013-03-11 Thread Ricky Nance
Just for testing add the following line to your [netlogon] root preexec = echo %u is in %G /home/samba/netlogon/groupname.txt then try a windows logon (it won't tell windows anything, but will create the file /home/samba/netlogon/groupname.txt), then on the samba server, cat

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Ricky Nance
With the BIND9_DLZ backend, bind actually handles the forwarding, so you will need to set that up in your named conf, something like the following: options { forwarders { 192.249.249.1; 192.249.249.3; }; }; Although, some distros break apart the named stuff, so you may need to find information

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Ricky Nance
Sorry I don't understand what you mean by views... the provision generated named.conf should be inserted into your /etc/named/named.conf (again this varies on different distros) as an include directive, it is not meant to be a full named.conf. Ricky On Mon, Mar 11, 2013 at 6:16 PM, Gerry Reno

Re: [Samba] Samba 4 AD DC and BIND

2013-03-11 Thread Ricky Nance
I am not 100% sure, but anywhere in the named.conf config should be sufficient, DLZ is Dynamically Loadable Zones, so samba ends up being its own zone as far as I know. Ricky On Mon, Mar 11, 2013 at 7:43 PM, Gerry Reno gr...@verizon.net wrote: On 03/11/2013 08:27 PM, Ricky Nance wrote

Re: [Samba] S4 Cannot Unlock Account

2013-03-16 Thread Ricky Nance
You should be able to use samba-tool user enable Testuser2 or possibly samba-tool user setexpiry (add a --help for more info on how to use it). Good luck, Ricky On Tue, Feb 12, 2013 at 7:17 AM, Thomas Simmons twsn...@gmail.com wrote: On Mon, Feb 11, 2013 at 6:56 PM, Thomas Simmons

Re: [Samba] Samba 4 AD DC and BIND

2013-03-19 Thread Ricky Nance
I seen this error recently myself, and haven't yet investigated whats going on for sure, but I suspect its the way dns_connect is parsing everything (I seen it with the | or ) ... try with -Uadministrator%password (replacing password to be the administrator password you use) and report back

Re: [Samba] Samba 4 AD DC and BIND

2013-03-19 Thread Ricky Nance
| grep LISTEN . Ricky On Tue, Mar 19, 2013 at 7:47 PM, Gerry Reno gr...@verizon.net wrote: On 03/19/2013 08:38 PM, Ricky Nance wrote: I seen this error recently myself, and haven't yet investigated whats going on for sure, but I suspect its the way dns_connect is parsing everything (I

Re: [Samba] Samba 4 AD DC and BIND

2013-03-19 Thread Ricky Nance
, this will cause that tool to use kerberos instead of the regular login. Ricky On Tue, Mar 19, 2013 at 8:09 PM, Gerry Reno gr...@verizon.net wrote: On 03/19/2013 09:00 PM, Ricky Nance wrote: Try samba-tool dns query netbiosname company.com http://company.com @ ALL -Uadministrator%HIDDEN (where

Re: [Samba] Samba 4 AD DC and BIND

2013-03-19 Thread Ricky Nance
What is the error message now? Ricky On Tue, Mar 19, 2013 at 10:06 PM, Gerry Reno gr...@verizon.net wrote: On 03/19/2013 10:57 PM, Ricky Nance wrote: Try first a kinit administrator, then enter the administrator password, then /usr/local/samba/bin/samba-tool dns query COMPANY.company.com

Re: [Samba] Samba 4 DC Firewall settings

2013-03-25 Thread Ricky Nance
I think 1024 is used for replication between DC's, and since its above the 1024 range, it will jump ports if needed. Ricky On Mon, Mar 25, 2013 at 10:22 PM, steve st...@steve-ss.com wrote: On 24/03/13 15:17, Thomas Simmons wrote: On Mar 24, 2013 7:04 AM, steve st...@steve-ss.com wrote:

Re: [Samba] Resetting administrator password

2013-03-25 Thread Ricky Nance
As root, samba-tool user setpassword Administrator Ricky On Mon, Mar 25, 2013 at 11:10 PM, Abha Sinha abhasinh...@gmail.com wrote: Hi, Is there anyway to reset administrator password in Samba4 if I have forgotten the current admin password ? -- To unsubscribe from this list go to the

Re: [Samba] GPO Computer settings not applied

2013-03-29 Thread Ricky Nance
Have you tried samba-tool ntacl sysvolreset yet? Ricky On Mar 29, 2013 2:16 PM, Pavel Valach valach.pa...@outlook.com wrote: Hello, I'm having one strange issue with latest stable Samba 4.0.4. I'm testing it as a domain controller for two virtual machines. The Samba AD DC is Debian stable,

Re: [Samba] Ran classiupgrade, users not there

2013-04-01 Thread Ricky Nance
Did you fix the duplicate entries? Also does samba-tool user list show your users? Ricky On Fri, 29 Mar 2013, simon+sa...@matthews.eu wrote: I am attempting to do an upgrade from SAMBA3 to SAMBA4. I am working on a new VM rather than the existing SAMBA3 server. The old server uses tdbsam

Re: [Samba] SAMBA4: pdbedit not changing SID

2013-04-01 Thread Ricky Nance
http://wiki.samba.org/index.php/Samba4/samba-tool/domain/classicupgrade/HOWTOhttps://wiki.samba.org/index.php/Samba4/samba-tool/domain/classicupgrade/HOWTO should help. Ricky On Tue, Apr 2, 2013 at 12:06 AM, Gémes Géza g...@kzsdabas.hu wrote: 2013-04-02 05:35 keltezéssel,

Re: [Samba] Samba4 fails to work following upgrade - library version errors

2013-04-03 Thread Ricky Nance
The last time you did ./configure, did you specify any arguments, if so, you will need the same arguments on this install. Also, I typically start 'fresh' by issuing a git clean -x -f -d after git pull and before ./configure. Ricky On Wed, Apr 3, 2013 at 11:06 AM, Graeme Porter

Re: [Samba] Samba4 fails to work following upgrade - library version errors

2013-04-06 Thread Ricky Nance
Rowland, while that MAY work, in his case it still would have failed, you need /usr/local/samba/bin and sbin BEFORE $PATH (eg, export PATH=/usr/local/samba/bin:/usr/local/samba/sbin:$PATH) otherwise the search will be done on /bin (or sbin) before it hits the correct binary. Personally, I add the

Re: [Samba] Doubt create user samba via DSA.msc

2013-04-08 Thread Ricky Nance
Look at https://wiki.samba.org/index.php/Samba4/Winbind , also, samba 4 (AD DC) uses ACL's now, so you really don't need to do any per share changes anymore. Have fun, Ricky On Mon, Apr 8, 2013 at 3:03 PM, Ricardo Barbosa spidersl...@yahoo.com.brwrote: Hi. I deploy samba 4 and create user

Re: [Samba] Internal DNS not running

2013-04-09 Thread Ricky Nance
What samba version are you using (samba -V) ? Also what is the output of samba-tool testparm -v --suppress-prompt | grep server services Ricky On Tue, Apr 9, 2013 at 6:34 PM, simon+sa...@matthews.eu wrote: After running the classicupgrade, configuring and starting krb5, starting the new

Re: [Samba] Internal DNS not running

2013-04-09 Thread Ricky Nance
On Tue, Apr 9, 2013 at 7:22 PM, simon+sa...@matthews.eu wrote: On Tue, 9 Apr 2013, Ricky Nance wrote: What samba version are you using (samba -V) # samba -V Version 4.0.4 ? Also what is the output of samba-tool testparm -v --suppress-prompt | grep server services # samba-tool

Re: [Samba] Internal DNS not running

2013-04-09 Thread Ricky Nance
Glad to hear :) Ricky On Tue, Apr 9, 2013 at 8:15 PM, Simon Matthews si...@matthews-family.org.uk wrote: On Tue, 9 Apr 2013, Ricky Nance wrote: That looks normal... Can you pastebin your log.samba... first mv or rm /usr/local/samba/var/log.**samba, then restart samba, then pastebin

Re: [Samba] Samba-tool modify users info?

2013-04-11 Thread Ricky Nance
Mike please don't encourage users to use ldbedit, there is more than a little chance that a lot of damage can be easily done. Other than that, it looks like you can still use `net sam set pwdmustchangenow user yes` Luc. Good luck, Ricky On Thu, Apr 11, 2013 at 10:54 AM, Mike Ray

Re: [Samba] Version?

2013-04-11 Thread Ricky Nance
Bill apt-get purge would be a better option, other than that, make sure that /usr/local/samba/bin and sbin are first in your path and all should be well still... add the following line to /root/.bashrc at the very end: export PATH=/usr/local/samba/sbin:/usr/local/samba/bin:$PATH then as root do

Re: [Samba] migrating from samba3+openldap+autofs to samba4 AD DC?

2013-04-16 Thread Ricky Nance
Id think the standard migration guide https://wiki.samba.org/index.php/Samba4/samba-tool/domain/classicupgrade/HOWTO on a test vm to work out any 'kinks' would be a good start, but you can't really sync it with openldap I don't think. However, most applications have been written to where you can

Re: [Samba] Rsyncing Samba4 Roaming Profiles between servers

2013-04-17 Thread Ricky Nance
See the plus on drwxrwx---+, that means you have either extended attributes or ACL's (my guess would be ACL's) so, I am willing to bet you haven't told rsync to preserve xattribs or acl's in your script. getfacl, setfacl, getfattr, and setfattr will be helpful in sorting this out. Good luck,

Re: [Samba] samba4 internal dns update

2013-04-17 Thread Ricky Nance
Sounds like you are hitting this bug ... https://bugzilla.samba.org/show_bug.cgi?id=9216 There are instructions there on how to work around this issue. Ricky On Wed, Apr 17, 2013 at 11:03 AM, Nick Semenkovich seme...@alum.mit.eduwrote: Hey Cristian: This sounds exactly like the issue I had,

Re: [Samba] Freebsd 3.5-4 New Server Profile Paths Lost

2013-04-17 Thread Ricky Nance
These attributes should be defined in Active Directory Users and Computers, take a look at https://wiki.samba.org/index.php/Samba_AD_management_from_windows for how to get it running, then you can select all your users and define them using the %USERNAME% variable, for home directory

Re: [Samba] Strange behavior when using 'hosts allow' parameter

2013-04-19 Thread Ricky Nance
Do you see the same behavior if you add localhost and your hostname to hosts allow? Also, with s3fs it'd be interesting to know if the hosts allow parameter is even recognized by smbd, though I am not seeing how to check that right at the moment. example for your config: hosts allow = 10.0.0.

Re: [Samba] Samba 3 dynamically enable or disable share

2013-04-29 Thread Ricky Nance
Instead of repartitioning you could create a filesystem inside of a file... http://freecode.com/articles/virtual-filesystem-building-a-linux-filesystem-from-an-ordinary-file . Just a thought, Ricky On Mon, Apr 29, 2013 at 9:05 AM, Mauricio Alvarez maurialvarez...@rocketmail.com wrote:

Re: [Samba] Samba4 home share problem

2013-04-30 Thread Ricky Nance
So for the homes (Yes HOMES not HOME) share to work you need winbind functioning (not necessarily pam auth, but at least winbind). You can follow http://wiki.samba.org/index.php/Samba4/Winbind ... If I get some time today I will write up some sharing stuff in the S4 howto. You will also need to

Re: [Samba] Samba4 does't run netlogon scripts and batch files

2013-05-01 Thread Ricky Nance
So a couple of things come into play here, when moving to AD you need to either create a Group Policy that will run the logon script, or set the logon script per individual. Secondly, .bat should be able to run off the network drive by setting the correct ACL's (I was thinking chmod 755 from linux

Re: [Samba] Samba4 does't run netlogon scripts and batch files

2013-05-01 Thread Ricky Nance
Sorry I made the wrong assumption that you were using it as an AD DC. Conventional samba 3 stuff should all remain the same, so without testing this I am not sure what's going on. On May 1, 2013 8:44 AM, Varda Zklir v...@yahoo.com wrote: Thnaks for you reply. So a couple of things come into

Re: [Samba] [samba4] Build requires libncurses-dev

2013-05-03 Thread Ricky Nance
I'd like to get a dev's input as to why this is now required, I have no problem adding it to the wiki as long as they expect it and it wasn't just something that crept in. If Jeremy or Andrew (or any other dev that sees this) would confirm this I will add it. Ricky On Fri, May 3, 2013 at 2:23

Re: [Samba] Samba4 no longer installing samba_upgradeprovision?

2013-05-09 Thread Ricky Nance
This tool has been 'turned off' until it can be properly fixed, or completely implemented into samba-tool dbcheck (at least that is my very limited knowledge on this subject). Ricky On Thu, May 9, 2013 at 11:42 PM, Nick Semenkovich seme...@alum.mit.eduwrote: From the latest samba4 git HEAD, I

Re: [Samba] Procedure for installing Windows drivers on Samba with CUPS

2013-05-22 Thread Ricky Nance
Those instructions should still work for XP, but its quite a bit different for windows 7, I need to do a wiki page on it, and will when I get some spare time, but not sure when that will be. Ricky On Wed, May 22, 2013 at 4:32 PM, steve st...@steve-ss.com wrote: On Wed, 2013-05-22 at 13:41

Re: [Samba] Samba4 + Shared Folders

2013-05-28 Thread Ricky Nance
First, this line in your config is formed wrong... server = s3fs services, rpc, nbt, wrepl, ldap, CLDAP, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate IF you have a need to define it yourself it should look like: server services = s3fs, rpc, nbt, wrepl, ldap, CLDAP, kdc, drepl, winbind,

Re: [Samba] Samba4 + Shared Folders

2013-05-28 Thread Ricky Nance
/ = On Tue, May 28, 2013 at 2:49 PM, Ricky Nance ricky.na...@gmail.com wrote: First, this line in your config is formed wrong... server = s3fs services, rpc, nbt, wrepl, ldap, CLDAP, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate IF you have a need to define it yourself it should look

Re: [Samba] Samba 4 and Profile directory issues.

2013-05-30 Thread Ricky Nance
wrote: Hi, On 5/30/2013 8:17 AM, Ricky Nance wrote: Are you logged in as DOMAIN\Administrator to the windows machine? My own dumb mistakes, I created a remote desktop connection to that server and hadn't noticed I as logged in as a non admin user. Now home directories are created

Re: [Samba] Problems during connect to server and listing files

2013-06-03 Thread Ricky Nance
Jerry, you could install a commercially supported linux or other OS and then you would have a help line in your time of need... I am sorry if your free software doesn't have the support you would like to see, but there is no call to be rude about it. I have seen this happen more on the samba lists

Re: [Samba] Replication Samba PDC to Samba BDC

2013-06-04 Thread Ricky Nance
@Giedrius Not exactly, as I wrote in my other posts to mailing list, this is glibc's nss dns resolvers' (libnss_dns.so) issue that is ignoring hostnames with _ (*_*msdcs) Which OS's does that affect? @David, Is your nameserver (in /etc/resolv.conf) on dcA ip.to.dc.a and on dcB ip.to.dc.b if so,

Re: [Samba] Problem with AD users and groups

2013-06-07 Thread Ricky Nance
I'd double check on the samba server it self if you can connect to it using smbclient... `smbclient //localhost/sysvol -Uadministrator` if that fails try `smbclient //localhost/sysvol -d5 -Uadministrator` and paste the output in your reply. If it succeeds then you can pretty much bet on a

Re: [Samba] Problem with AD users and groups

2013-06-07 Thread Ricky Nance
wrote: On 6/7/13 10:51 AM, Ricky Nance wrote: I'd double check on the samba server it self if you can connect to it using smbclient... `smbclient //localhost/sysvol -Uadministrator` if that fails try `smbclient //localhost/sysvol -d5 -Uadministrator` and paste the output in your reply

Re: [Samba] Samba 4 Additional DC existing domain

2013-06-11 Thread Ricky Nance
Kinit doesn't have output on all systems (ubuntu is one of them) after running that, klist should show that you have an active ticket. Also do what Marc says samba -i -M single and see where samba is failing the startup. Ricky On Tue, Jun 11, 2013 at 10:38 AM, Marc Muehlfeld

Re: [Samba] Samba 4.0.6 Ubuntu Package Available

2013-06-11 Thread Ricky Nance
On Tue, Jun 11, 2013 at 11:38 AM, Mike Ray m...@xes-inc.com wrote: On a possibly related note: replication spits out WERR_BADFILE for all inbound/outbound neighbors on the PDC. The secondary DC states the inbound is successful (even though they appear to not actually be) but attempts nothing

Re: [Samba] Samba 4 Additional DC existing domain

2013-06-11 Thread Ricky Nance
On Tue, Jun 11, 2013 at 3:19 PM, Marc Muehlfeld sa...@marc-muehlfeld.dewrote: I changed the HowTo a bit, to make it more clear, that the output shown is from klist and not kinit. Marc, thanks for adding that :). Also dns forwarder = 8.8.8.8 the 8.8.8.8 there is a Google dns server, so that

Re: [Samba] How to add a client to a domain?

2013-06-18 Thread Ricky Nance
You should use either root or administrator (depending on your setup), however, any user with the SeMachineAccountPrivilege http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/rights.html will be able to add machines to the domain (root just has all of the Se privileges by default). Ricky

Re: [Samba] Again, Windows 7 access to Samba server: Strange performance/delay problems while opening share

2013-06-18 Thread Ricky Nance
Hi Ralf, please have a look at https://lists.samba.org/archive/samba/2013-June/173960.html Ricky On Tue, Jun 18, 2013 at 3:42 AM, Ralf lists.samba@rb.7bg.de wrote: Hello list, when i wrote my first mail with this content, I received only the lists digest. To be able to answer, I

Re: [Samba] Samba+LDAP: NT_STATUS_UNSUCCESSFUL because of primary group SID mismatch

2013-06-20 Thread Ricky Nance
You might look into net getlocalsid, net getdomainsid, net setlocalsid and net setdomainsid commands, you may be able to set the samba servers the same as your ldap sid... just a though. Remember, messing around with SID's can cause major issues, so export all sids to file and be ready set them

Re: [Samba] sysvol path samba-tool classic upgrade

2013-06-25 Thread Ricky Nance
Is this during provision or after? If its after, you can just modify your smb.conf under the [sysvol] change the path= line... if its during, then I will need to do some checking when I get home as I don't have S4 setup here at work. Ricky On Tue, Jun 25, 2013 at 9:37 AM, Stéphane PURNELLE

Re: [Samba] file server or member server?

2013-07-01 Thread Ricky Nance
Steve, in simplest terms, a member server is just that, a member of the domain serving something (print services, file services, etc). A file server is generally part of either a member server, or it can be part of the domain server, its simply the part of the server that is handling how the files

Re: [Samba] Samba Domain Rename

2013-07-02 Thread Ricky Nance
Like Michael said, samba 4 as an AD DC would probably not be happy if you just change the 'workgroup = ' line in your smb.conf (as a matter of fact, that line shouldn't exist in a AD DC setup in my opinion) the domain is more than likely embedded very deep inside of the LDB's, and I would strongly

Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Ricky Nance
Can you log into the linux machine with the user mark and write files to /home/mark without issue? What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look at\try. Ricky -- To unsubscribe from this list go to the following URL and

Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Ricky Nance
AM, Ricky Nance ricky.na...@gmail.comwrote: Can you log into the linux machine with the user mark and write files to /home/mark without issue? What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look at\try. Ricky

Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Ricky Nance
Try yum install samba-client as root, then see if that command will work. If smbclient works then, it would probably be best to see if we can get a packet capture of when you try to access the share from the windows 8 machine (btw, which version of windows 8 are you running?). Also, does it work

Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-03 Thread Ricky Nance
So what is the output of `ls -alhZ /home | grep mark` ? Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-03 Thread Ricky Nance
You just did, there are rules there ' unconfined_u:object_r:user_home_dir_t' this leads me to think selinux is your issue, however, I can't say that I have messed around with selinux at all, so maybe someone else can chime in and help you out. You should be able to disable it temporarly just to

Re: [Samba] Problem to demote samba4 dc

2013-07-31 Thread Ricky Nance
I had this happen the other day and ran it down to the DomainDNS and ForestDNS not transferring fully. I haven't yet had time to file a bug on this. Ricky On Wed, Jul 31, 2013 at 8:35 AM, Davy HUBERT davy.hub...@univ-montp3.frwrote: Hi all, I recently migrated our samba 3 domain to an AD

Re: [Samba] Samba 4 as member server

2013-08-06 Thread Ricky Nance
How does your /etc/krb5.conf file look? On Tue, Aug 6, 2013 at 2:21 PM, Klaus Rörig kroe...@gmail.com wrote: Hi! Authentication works when I set 'password server = server01', but then testparm complains: WARNING: The setting 'security=ads' should NOT be combined with the 'password server'

Re: [Samba] Speed differences for windows clients

2013-08-13 Thread Ricky Nance
If you have a socket options line in your config, comment it out and restart smbd and see if that helps. On Aug 13, 2013 4:17 AM, Philipp Lies philipp.l...@cin.uni-tuebingen.de wrote: Am 8/13/2013 10:50 AM, schrieb L.P.H. van Belle: Try the following. Since Win7 does traffic shaping. in

Re: [Samba] Options for paid Samba (4) support

2013-08-14 Thread Ricky Nance
Hi Mark, not trying to hijack the thread, but I can give you some roaming profile tips in a new thread if you will create it. As for the paid support, you might look into Sernet ( http://www.sernet.de/ ), I am not sure of the extent of what they support and where, but I know they are one option.

Re: [Samba] share permissions

2013-08-16 Thread Ricky Nance
Temporarily turn off selinux, if that fixes your issue you will need to adjust the selinux rules to take care of the problem (or just completely disable selinux). Also if you do a ls -alhDZ /home/me/mytestshare before you turn it off it can tell you if selinux is on, then run that again after its

Re: [Samba] share permissions

2013-08-17 Thread Ricky Nance
dir per the HOWTO at http://wiki.centos.org/HowTos/**SetUpSambahttp://wiki.centos.org/HowTos/SetUpSamba. I'm pretty sure that's why it says samba_share_t on the ls output above. Kev On 2013-08-16 11:52 AM, Ricky Nance wrote: Temporarily turn off selinux, if that fixes your issue you

Re: [Samba] share permissions

2013-08-20 Thread Ricky Nance
like to know exactly how this works, but in any case, I'll try moving the share and see how it goes. Thanks, Kev On 2013-08-17 9:47 AM, Ricky Nance wrote: Have a look at http://www.centos.org/docs/5/**html/5.2/Deployment_Guide/sec-** sel-enable-disable.htmlhttp://www.centos.org/docs/5

Re: [Samba] share permissions

2013-08-22 Thread Ricky Nance
irrelevant to the application of sharing the given directory.) Am I missing something? Thanks, Kev On 2013-08-20 11:22 AM, Ricky Nance wrote: Permissions are hard to explain (possibly because I don't fully understand them myself I guess), but if you have a directory (say /srv) and you

Re: [Samba] share permissions

2013-08-22 Thread Ricky Nance
at 10:54 AM, Kevin Field k...@brantaero.com wrote: Oh, so it only looks at the immediate parent's permissions? Not the grandparent? I find that even more bewildering but a whole lot easier to work with if that's the case :) Thanks, Kev On 2013-08-22 11:44 AM, Ricky Nance wrote

Re: [Samba] share permissions

2013-08-22 Thread Ricky Nance
No problem, glad its working :) Ricky On Thu, Aug 22, 2013 at 11:59 AM, Kevin Field k...@brantaero.com wrote: Oh, I see. At first I read it as /home/me/srv. Gotcha. It works! Thanks very much Ricky! -K On 2013-08-22 12:49 PM, Ricky Nance wrote: It looks at all of them

Re: [Samba] AD DC eventually not browsable without restart

2013-08-24 Thread Ricky Nance
I wonder if your hitting the /run/lock fill up that another user reported on a week or two ago (they are using ubuntu). I think the solution was to make that tmpfs partition bigger (like 50 mb instead of 5 mb). next time it is unresponsive check and see what the output of 'df -h' is. Ricky On

Re: [Samba] OpenSSH auth in SAMBA4 LDAP

2013-08-26 Thread Ricky Nance
If you are using winbind, you can use template home directory = and template shell = in your smb.conf (man smb.conf for a more accurate description).. Ricky On Mon, Aug 26, 2013 at 2:58 PM, Bruno Vane bro...@gmail.com wrote: Marc, it seems that the problem was actually that the posix

Re: [Samba] Samba 3.6.9 on Centos 6.4 and very slow first access to fileserver

2013-09-04 Thread Ricky Nance
On Wed, Sep 4, 2013 at 4:16 PM, Michal Bruncko michal.brun...@gmail.comwrote: socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 I'd start with commenting out that line and see if things get better.. then check also with (on the samba machine) smbclient //localhost/share -d10

Re: [Samba] How to allow users to be local admin

2013-09-05 Thread Ricky Nance
Its been a long time, but I think NTPoledit would let you create a .pol file you could put on the netlogon share and have the groups linked. Example, make a domain group called privileged and then create a policy that adds the privileged group to the local admins group... It'd be worth a shot.

Re: [Samba] AD DC eventually not browsable without restart

2013-09-06 Thread Ricky Nance
5.9G 0% /dev/shm But I'll check anyway next opportunity and report back if it's a positive. Kev On 2013-08-24 11:51 AM, Ricky Nance wrote: I wonder if your hitting the /run/lock fill up that another user reported on a week or two ago (they are using ubuntu). I think the solution

Re: [Samba] AD DC eventually not browsable without restart

2013-09-06 Thread Ricky Nance
, Kev On 2013-09-06 1:46 PM, Ricky Nance wrote: Next time its unresponsive, try hitting it with \\ip.to.new.dc and see if its browsable, also get the output of netstat -anp | grep samba\|smbd as well as tail -n 50 /usr/local/samba/var/log.samba and tail -n 50 usr/local/samba/var/log.smbd

Re: [Samba] AD DC eventually not browsable without restart

2013-09-06 Thread Ricky Nance
has anything to say about samba or smbd (as for processor and memory usage). Ricky On Fri, Sep 6, 2013 at 12:12 PM, Kevin Field k...@brantaero.com wrote: Yep, that's exactly it. Thanks! Kev On 2013-09-06 10:16 AM, Ricky Nance wrote: Have you disabled syslinux? That is what that change

Re: [Samba] manpage Samba4

2013-09-07 Thread Ricky Nance
Which distribution are you running? On Sep 7, 2013 7:02 PM, Erik Silva eriky...@gmail.com wrote: Hi there, I installed the samba4 following the wiki : https://wiki.samba.org/index.* *php/Samba_AD_DC_HOWTOhttps://wiki.samba.org/index.php/Samba_AD_DC_HOWTO ./configure make make install

Re: [Samba] delete kerberos databases and start over

2013-09-24 Thread Ricky Nance
Everything you mention shows that you are using samba as an AD DC, with that being said, you should NOT be running your own KDC server, samba provides this already. With samba stopped, double check that port 88 is not being used ' netstat -anp | grep 88 | grep LISTEN ' If there is something using