similar to: share is read-only since 3.0.3 - "access is denied"

Hi, I want to achieve, that the IT staff could add machines (2000/XP) to samba-3 (LDAP backend) on the fly. Creating a new machine account to LDAP requires special access to samba (uid=0). In samba-2.2.x was a great parameter called "domain admin group". So everyone, who belonged to the specified group and root (uid=0) could modify LDAP. Others got message - "cannot access LDAP

Howdi, I can't add a w2k workstation to samba3 domain with my username. If I add my username to "admin users" list, then I can add the box to domain (but overritten by euid). My goal is, that joining domain can be done without using "admin users" option. Groupmapping is done and works. When machine is in domain and log in, I get full admin rights on that box. Removing the

> -----Original Message----- > From: G?mes G?za [mailto:geza@kzsdabas.sulinet.hu] > > I've configured for testing pruposes an other PDC with tdbsam backend, > and found, that with this backend win9x clients could get > user and group > list, while with ldapsam I had no success in it. Quite strange in my > opinion:-( Same problem here too. In 9x the userlist is

Hi, I have a strange problem : some users cannot acces to diretcory, the message is "access denied". The ACL is correct # file: rsrv/vol2/data1/groupes/CORDAF # owner: root # group: Utilisateurs user::rwx user:mro:r-x user:sad:r-x group::--- group:administrateurs:rwx group:daf:rwx mask::rwx other::--- default:user::rwx default:user:mro:r-x default:user:sad:r-x default:group::---

Hi, Could someone explain, why was parameter "domain admin group" removed from samba3? passdb/pdb_ldap got totally rewritten... but why remove an useful variable... # Removed Parameters (order alphabetically): # * domain admin group In 2.2.8 (with LDAP backend) I defined domain admin group = @"Domain Admins" and added several users to that group for creating machine

add to each share writeable = yes or read-only = no This Helps! Rauno -----Original Message----- From: werner maes [mailto:werner.maes@cc.kuleuven.ac.be] Sent: 11. mai 2004. a. 16:19 To: samba@samba.org Subject: [Samba] BUG: Vfs audit module & samba 3.0.4 ==> share unaccessible Hello Maybe there's a bug in samba-3.0.4. The following configuration does NO longer work. It did

Well... It worked for me. Only thing I had to do was to add writeable = yes for each share. IMHO there is a slight difference since 3.0.3, not 1.9 ;) It would be nice to mention it in changelog too. Rauno -----Original Message----- From: Gerald (Jerry) Carter [mailto:jerry@samba.org] Jeff Umbach wrote: | They changed the read only default to "yes" in | versions 3.0.3 and 3.0.4.

G'day Rauno, Just wondering if you ever found a solution to your problem (http://lists.samba.org/archive/samba/2003-September/073997.html) regarding Windows 2K workstations joining a Samba3 domain. I seem to be experiencing the same problems - with the access denied message. Any ideas would be most appreciated. Regards Corey Johnston.

Hi, In smbldap-useradd.pl is a pice of code, which find the first unused uid starting from $UID_START (for example 1000). if (!defined($userUidNumber)) { # find first unused uid starting from $UID_START while (defined(getpwuid($UID_START))) { $UID_START++; } I've over 500 UID's in use (maximum UID is 1547). It works well, until you delete an user. After deleting an user,

hi, I ran also into the home share problem, as discussed earlier in this list (http://lists.samba.org/archive/samba/2004-February/080593.html). But so far I haven't seen any solution. In samba 3.0.2 changelog is a line: "BUG 977: Don't create a homes share for a user if a static share already exists by the same name." I don't know what was changed, but it affected the

I'm running Samba 3.4.7 on Ubuntu 10.04. This is a recent upgrade and we've starting experience a sporadic problem after this upgrade. When users are browsing through Windows Explorer they sometimes run across folders that appear as unassociated files. This requires the user to click the 'Refresh' button in Windows Explorer to properly see the folders. The files and folders are

> -----Original Message----- > From: Andrew Bartlett [mailto:abartlet@samba.org] > > passdb backend = ldapsam:"ldaps://ldap1 ldaps://ldap2" > is what you want. This helped me a little bit forward. I suggest to add this line also to samba-pdc help. But still I ran into problems. I fixed the passdb lines on PDC and BDC. If the second server (on PDC slave-ldap and on BDC

Hi, Samba-3 with LDAP backend is capable in this. I'm using it and it works. All you have to do, is to use LDAP and set proper account policies: $ pdbedit -P "bad lockout attempt" -C 5 (after 5 wrong password, user account will be locked out - samba sets password hashes to ***NOPASSWORD*** and user is unable to logon). $ pdbedit -P "min password length" -C 9 # password

Hello, been googling this for a while. Read GD's presentation on why printing is such a pain... Anyway, I'm using 3.4.8 on Freebsd 8.1 I've tried a few combinations - best luck is with 3.2.5, but I'd like to move forward a bit. So, I've got the ADS part working pretty good. happy with how that's going. my problem is when I attempt to load printer drivers.

Hi ! I was just wondering if that piece of code was important (for security and such), because I had to comment it in smbldap.c before compiling samba-3.0; otherwise, I would have errors like: "(Insufficient access)smbldap_open: cannot access LDAP when not root" #ifndef NO_LDAP_SECURITY if (geteuid() != 0) { DEBUG(0, ("smbldap_open: cannot access LDAP

Dear all, I experience now a strange bug with Samba 4.1.11 : When I define a fixed-name as logon script in smb.conf, it works : logon script = employee.bat But if I try either %g.bat or %G.bat, or even "%G.bat", it doesn't work : * logon script = %g.bat * logon script = %G.bat * logon script = "%G.bat" In the logs, there was a message showing that Samba was

Hi, I'm getting this error in my log: [2005/06/03 10:34:11, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "data/8WBS0043.TMP" [2005/06/03 10:34:11, 5] smbd/filename.c:unix_convert(179) unix_convert begin: name = Data/8WBS0043.TMP, dirpath = Data, start = 8WBS0043.TMP [2005/06/03 10:34:11, 5] smbd/filename.c:unix_convert(328) New file 8WBS0043.TMP [2005/06/03

Hi there, today I installed samba 3.0.0 rc 3 on redhat 9. Now I got following problem: "Illegal multibyte sequence" -> and all processors have a cpu-state of 99,9% while reading files... It seems to me that the iconv string does not work properly with my charset for german. Here're the entries from my smb.conf: unix charset = ISO-8859-15 display charset =

Dear Ricky, Yes, in my original post, below, I gave some details about smb.conf, but to summarize: * I am using Samba 4.1.11. * server role = classic primary domain controller * domain logons = yes * domain master = yes * When I define a fixed-name as logon script in smb.conf, it works : * logon script = employee.bat * But if I try either %g.bat or %G.bat, or even

Robert Gurdon robert.gurdon at gmail.com 12:49 (0 perce) c?mzett: samba Hai, I would like to set up a DFS with this configuration: I have 3 Samba4 servers (4.1.4). 2 of them should work as a DFS "client" the third one will be the DFS stotage (actualy this servers has the required amount of space). So, i configured all shares on DC3 and point to those shares on DC1 and DC2. Everything