similar to: Access to a server using multiple netbios names and include files

I think I've looked over every post that has acl or sid or winbind in it. I don't think this has been discussed quite this way. The symptom is similar to other posts but the environment is a bit different. We can do perms through samba, and we can see acls that have been set using setfacl, but we can't change the acls (e.g., add a user). We get: [2002/11/15 17:02:17, 0]

We have what may be a very, very bad situation here and I'm hoping someone may be able to point out either where I'm misinterpreting this or where I missed the memo. We're testing 3.0.23d so we can upgrade from 3.0.14a. Our servers are all currently Solaris 9, and we build samba from source with MIT krb5 and openldap libraries. We have used security = ads since 3.0 after having

Hello, I have attached a small patch that enables OpenSSH 4.7p1 to use netgroups for users and hosts entries in the AllowUsers and DenyUsers configuration options in sshd_config. This has the following advantages: * hostnames or ip addresses don't have to be maintained in sshd_config, but you can use meaningful names for groups of users and groups of hosts. * large scale installations can

I'm testing SAMBA 3.0.2 on a Solaris 9 box with a UFS file system. The ACLs appear to be working well with the security tab, etc. However, once a permission setting has been made from a security tab on a directory, the mask and default mask parameters no longer appear in a getfacl. In addition, the #effective permission is incorrect. Has anyone seen this? I searched the archives and I

I've compiled samba-3.0.25rc3, using Sun Studio11, and linking in openldap-2.3.21 and krb5-1.4.3 client libraries. The same problem that I've reported since 3.0.23d still exists. If anyone has a suggestion, or if I missed something in release notes or anything, please let me know. Fundamentally, the SAMBA server is not honouring the UNIX file system permissions. My groups listing in

Hi, I have some problems using netgroups with samba, at the moment I'm using the debian-package with Version samba-2.2.3a-6 on a debian testing system. The problem is that samba checks for wrong host-name in the nis-database here is my snippet of the smb.conf to have a exchange partition: --------smb.conf [export] path = /Mirror/export writeable = Yes guest only = Yes

Hello, Has anyone got netgroups working with Samba 3.0.14a where the netgroups are stored in the LDAP directory? I'm using Solaris 9 and SUN's directory server v5.2. What I'm seeing is that samba goes through the motions of looking up a host in a netgroup, but no query is seen by the LDAP server or on the network and the host is never found in the netgroup. Any help would be

Hello, everyone, I'm new to this mailing list. So please excuse me if this topic has been discussed before. We have a network that consists of a few subnetworks. Each subnetwork has its own network address. In each subnet there are Windows 95/98/NT machines, as well as Linux/Unix machines that run Samba. NO NT Domain is used! I've configured cross-subnetwork browsing by 1. using

We've just built a RHEL 5 ES server to test the issues we've been having with group permissions since 3.0.23 (re: 3.0.23d UNIX vs. AD group permissions) and we found we have the same issue with the Redhat built rpm of version 3.0.23c. The following is the ldap and winbind portion of our smb.conf, the same as used on our current Solaris production servers: # ldap settings ldap

Hi I have been searching for commands to "debug" netgroup membership. I am using netgroups provided by ldap. I can do a ldap query but it seems a bit unwieldy to do. I have found a package on ubuntu called ng-utils https://launchpad.net/ubuntu/jaunty/+source/ng-utils/0.7-1 which does what I require and compiles very easily. It contains two commands netgroup and innetgr to query netgroup

Hello; Forgive me for asking on this list, but I've noticed that their has been some recent changes to the code with regards to netgroup.h, and hoping that someone on this list can help, I've already tried the users list. I am having difficulties setting up ssh (ossh4.3p2 with PAM-enabled [DO I NEED IT?] - NIS -Solaris8/Sparc) to authenticate and allow users passwordless entry based

Hi, I'm trying to limit access to pre-defined set of hosts. I already have a netgroup (in NIS) defined, which I would like to use. Now the man pages for samba say that I can do : hosts allow = @netgroup When I try this I am asked for a username/password even though the share has: public=yes If I limit the hosts to specific hosts i.e.: hosts allow = hostname1, hostname2 This works fine

Dear all, We're using LDAP for user, group and netgroup information. Obviously, samba does not care about /etc/nsswitch.conf when it comes to netgroups and heads for NIS directly, which is what the manpage of smb.conf correctly states. Is there a way to make samba retrieve the netgroup information from LDAP instead of NIS? In case that way is to implement it, may I post this as a feature

I am using CentOS 5.7. I have an /etc/security/access.conf file which has the following: + : root : LOCAL + : @mynetgroup : ALL - : ALL : ALL I thought this is supposed to restrict access to the system to only root and the accounts in the mynetgroup netgroup; however, anyone NIS account is still able to login. It appears that the access.conf is being ignored completely, so I'm thinking

G'day, I figured some others might benefit from this patch. It allows you to use the samba style @netgroup names in hosts allow and hosts deny. I've tested it on solaris and linux with no apparent problems.. I'll get rid of the static string in a couple of days when I have to worry about trying to get this into prod .. but with any luck someone else may have done that for me.. :)

Hello, I'm in the process of migrating from Samba 2.2.8a to 3.0.14a and also changing from NIS to LDAP. I've installed and populated SUN's Directory Server v5.2 and added the required schema extensions and imported some accounts for testing with Samba. Previously I used a NIS netgroup in the hosts allow clause, of the form @hosts_smb and this worked when the samba server system was

http://bugzilla.mindrot.org/show_bug.cgi?id=1018 Summary: Incorrect parsing of hosts.equiv for netgroups Product: Portable OpenSSH Version: -current Platform: All URL: http://marc.theaimsgroup.com/?l=openssh-unix- dev&m=110909300030444&w=2 OS/Version: All Status: NEW Severity:

Hi, I have set up our samba box in 'ADS' mode; the problem I have is clients connecting to the server can not do so by using its netbios name. Only when they use the IP address of the machine are they able to be authenticated and browse the box. When clients connect via the netbios name this message will appear in my samba logs with the IP of the connecting client;

su testuser11 cd /storage/CME/test No problem. But when I try to access the same directory in windows I get these entries in my logs.... /var/log/samba/log.smbd ------------------ [2010/01/04 16:08:25, 1] smbd/sesssetup.c:reply_spnego_kerberos(350) Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE! log.winbindd reports no errors so it seems that the SIU/UID mapping

Alle, We are looking to transition from OpenLDAP to CentOS DS. We currently using OpenLDAP V2.3.43-3 with both RHEL 5.4 and Solaris10 clients (auth/netgroup/automount). We restrict user login access to the RHEL and Solaris machines using netgroups. After configuring the CentOS DS, we noticed that while the RHEL restrictions using the /etc/pam.d/system-auth-ac and /etc/security/access.conf