similar to: ipchains question

After reading through the documentation, I realized that as a part of the migration process from Samba-2.2.X to Samba-3.0.0 I needed to convert everyone in my smbadmin group (previously domain admin group = @smbadmin) to the "Domain Admins" group w/rid=512. So, I issued the following command: [root@localhost profile]# net groupmap modify ntgroup="Domain Admins"

The firewall problem seems to be fine now. Second question, I am on a NT server trying to access samba shares. If I add encrypt-passwords = yes to smb.conf I get a login box for username and password. It starts by telling me the username or password is wrong. I can enter any username, but the box keeps coming back. If I remove encrypt- passwords I get "The account is not authorized to login

I have not gotten a reply to my last post about not being able to access samba shares, so I would like to start from scratch. I am new to samba and I would like to start with a simple smb.conf that would guarantee access to a share by anyone, then start adding security measures until I have a secure working config. Does anyone have a smb.conf file they could send me that would get me started? --

I have been working most of the afternoon on this, but cannot figure out why workstations can only see my samba server via IP. Is there more I need to add, so it can be browsed by name? [global] logon script = scripts\%U.bat add user script = /usr/sbin/adduser -n -g machines -c Machine -d share modes = no domain admin group = @adm domain logons = yes

I tried migrating our samba settings from one machine to another, but Windows sees it as a different server. I currently have an older version of samba setup on an old machine. I setup the latest version of samba on a different machine with different build specs (e.g. acl support, etc.). I migrated over the usernames/passwords and MACHINE.SID file (is this even used anymore?) and setup smb.conf

I have tried to replace these lines from ipchains to work with shorewall. # /NFS requires 111/tcp (sunrpc/portmapper) and *all* UDP ports./ # ipchains -A input -p tcp -s $SUBNET -i eth0 -d 0/0 111 -j ACCEPT ipchains -A input -p udp -s $SUBNET -i eth0 -d 0/0 -j ACCEPT # /These ports are required by bootp, tftpd, and PXE./ # /There are also a handful of udp ports that need to/ # /be open,

µë-

Hello, I just narrowed down an rsync command that keeps failing to the --delete flag: rsync -vv --delete --backup-dir=backup_target --archive /etc myuser@localhost: It gives the following output: ... backup_dir is --delete/ building file list ... done Invalid file index: 1868985864 (count=0) [receiver] delta-transmission enabled rsync error: protocol incompatibility (code 2) at sender.c(189)

In the past, I had restricted rsync so that the -e option was disallowed. As of rsync-3.0.0, I'm now seeing the following requests being made (on the server side): rsync --server -vlogDtprze.iL . I want to prevent '-e' as a client side option so arbitrary programs can't be executed. I found the following, but didn't trace through to verify exactly where I was in the code

Just a quick word - I spent two days trying to get Samba to work. The whole problem was a lack of knowledge about ipchains (firewall). It was part of the RH7.1 install package, and the medium security setting stops all tcp and udp traffic for a lot of ports, including those needed for NetBIOS (137-139) It is pretty easy to fix, the IPCHAINS-HOWTO is a good and humorous read, and by the end of

Hi- I heard about a bug in ipchains, could you please tell me what to do? Thanks

Hi stef; imq patch of 2.2.17 form http://luxik.cdi.cz/~devik/qos/imq.htm diff against 2.2.17 Can you tell me how imq work with ipchains? thanks for your help regards, haipe _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

How can I tell if its running? Where is the default location? Thanks.. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20080528/647f6634/attachment-0005.html>

Hi all! I try to make port based routing, because a have two connections to the internet. My router is a "one disk floppy router for linux". It is a big router project www.fli4l.de. I try also to make a opt, it is like a plugin for this router. This project uses Kernel 2.2.19 compiled with libc5 (because it is small and you can use one floppy disk). At the moment, iproute2 is not

[username@localhost source]# ./configure --with-fhs --prefix=/usr --sysconfdir=/etc --with-privatedir=/etc/samba --with-lockdir=/var/state/samba --localstatedir=/var --with-netatalk --with-smbmount --with-pam --with-syslog --with-sambabook --with-utmp --with-acl-support > ~/myconfig.out 2>&1 [username@localhost source]# cat ~/myconfig.out | grep acl checking for sys/acl.h... yes

I figured this out -- looks like 2.5.1p1 is now using ports < 1024 on the client side (wasn't before?). I had a ipchains rule to allow ACK packets to 1024:65535, which was good enough for <= 2.3.0p1 : #allow only ACK tcp packed ipchains -A input -j ACCEPT -i eth0 -s any/0 --dport 1024:65535 -p tcp ! -y So I added the following : #allow return from ssh connections ipchains -A input -j

Hello, on my old system I''m using ipchains. Can anyone help me with converting rule /sbin/ipchains -A forward -j MASQ -s source_addr -d destination_addr 443 -p tcp to shorewall. I know that I can write eth0 source_addr to /etc/shorewall/masq file but I can''t found where I can specify the destination address. The reason for this is to allow one user (computer) access only to

I work for a school dist, and I am having a bit of trouble with the "Student Server" We have about 3000 students all with their own accounts. I had the samba server setup to share their home directories but their home directories are the same as their login name. So jamie.mcparland would be an example of a share name. But in Win 9X it gets truncated to jamie.mcparla then we get the error

To all those that wanted to know how I was filtering particular ICMP packets here is a few snippets from my firewall script which is based on one by Ian Hall-Beyer. I hope this helps you get started. Also note the output of the command: ipchains -h icmp Shawn Mitchell mentioned blocking all ICMP echos and especially broadcast echos. Perhaps he''d care to elaborate with a similar

I just recently installed OpenSSH 2.5.1p1 on a RH6.2 box (kernel 2.2.17). I run ipchains to do packet filtering, allowing incoming connections only to 22 and 80 (and some other ports for specific machines). I was able to run prior versions of openssh in this fashion (I've run it from the first release, I think). Upon installing 2.5.1p1 I found that my attempts to connect hang, here is ssh