similar to: pam_ldap for unix accounts, smbpassword for samba?

Hi, I recently did a complete upgrade and reinstall of one of our Samba servers. No problem, I backed up all the data, the Samba configuration files, and the secrets.tdb. Just compiled 3.0.8 on the new server (which has the same hostname), copied the smb.conf to /usr/local/samba/lib and copied th secrets.tdb to /usr/local/samba/private. Started Samba, did 'net getlocalsid' and it

Hi all, I have been working on this for days to no avail. I am unable to join any machine to my domain. I think the server's machine password got corrupted but don't know how to change it. From the PDC, I try: oink:/usr/local/src/samba-3.0.12/source # net join PDC Password: Could not connect to server CORPSRV The username or password was not correct. From a member server, I try:

Hello, I have spent the afternoon learning how to configure my routers to allow directed-broadcast with an access list, so that I can allow two different domains on different subnets to trust each other. Now I can do a broadcast ping from either subnet to the other, and I can also do smbclient -L <remote_pdc> and get the shares, from one side. From the other side I cannot. Let me

Hi, I'm a tad confused about something. I've got a production instance of Samba running. I am trying to get a test version running on the same box, with the same SID. Without the test server running, I used "net setlocalSID <oldsid>" (the net binary is the one for the new server). Then when I issued 'net getlocalsid' it returned it. I thought I was fine.

Hello Samba people, My goal is to upgrade our Samba 2.2.9 PDC to 3.0.6. 2.2.9 was installed from an RPM, but 3.0.6 is compiled from source. No special options except --with-prefix and other location-specific ones. We are using the typical smbpasswd back-end. So I have compiled and installed 3.0.6. I have tweaked the smb.conf to reflect what I believe are the new values for 3.x. The

Hi all, I have gotten the 'profiles' command to work for NT and Win2K profiles very well. In Windows XP, I am able to change the 'owner' but not the 'group' SID. It gives no errors but it just doesn't change them. A snippet of the profile in question is below: furnsrv:/data/samba/profiles/jon # profiles NTUSER.DAT |grep S-1-5 Owner SID: S-1-5-32-544 Group

I as sending this again in the hopes that someone will respond. Surely I am not the only one with this setup. Thanks, Misty ---------- Forwarded Message ---------- Subject: [Samba] Cross-subnet browsing and VPN Date: Monday 06 June 2005 09:54 am From: Misty Stanley-Jones <misty@borkholder.com> To: samba@lists.samba.org We have two subnets which both belong to the domain CORP, and

Not sure if this is where I should ask about this, but if I try to run any of the smbldap-* scripts, I get the following kind of output: oink:/usr/local/sbin # ./smbldap-populate Using builtin directory structure erreur LDAP: Can't contact master ldap server (IO::Socket::INET: Bad protocol 'tcp') at /usr/local/sbin//smbldap_tools.pm line 153. I feel like this must be from a typo

Hello, I am having a small issue with LDAP, and I hope someone here might be able to provide a few tips. I am unable to authenticate as user 'testuser' on server 'storage' and the following errors appear in /var/log/messages on server 'storage' Sep 19 16:56:17 storage sshd(pam_unix)[3124]: check pass; user unknown Sep 19 16:56:17 storage sshd(pam_unix)[3124]:

Hello, Can someone tell me how to resolve the "winbindd: Exceeding 200 client connections, no idle connection found" error in my log.winbind? I see tons of them on a regular basis. samba-3.0.28,1 squid-2.6.18 FreeBSD 6.2-STABLE #1: Thu Mar 15 01:46:50 CDT 2007 Kind regards, Elvar

Hi, I've just moved a second Samba domain to LDAP -- it works great! However, the first domain is now dead in the water. It refuses to autenticate, and from the logs it looks like it's not find the SambaDomainName entry in the LDAP tree. Here is a diagram of how my LDAP tree is set up. dc=mycompany,dc=com |___ ou=computers |___ ou=people |___ ou=groups |___ sambaDomain=domain1 |___

I am using Samba PDC with OpenLDAP2 and smbldap-tools. As part of my logon.bat, I call a script called ifmember.exe. This script can list out the groups a user is a member of. It is reporting that my root user is a member of the group 'engr.' I don't know if this is a bug with ifmember.exe or if it's an issue in Samba or in LDAP. Here is some relevant data:

Can someone verify that testparm in 3.0.7 always reports the [printers] share as browseable = no ? I think this is a bug in 3.0.7. It might be affecting smbclient listing of printer shares too. Misty

When I used smbldap-populate way back when I set up my LDAP server, I got two sambaDomainName objects in my LDAP tree -- one for the domain name (CORP) and one for the PDC Netbios name (CORPSRV). My Windows XP systems complain that they can't find the PDC for the domain CORPSRV. I am wondering if I even need the second sambaDomainName in LDAP at all. Any ideas? Misty

In short this is the problem. The XP Home machine called "misty" cannot see any other machines. It cannot see the Linux machines and it cannot see the XP Home machines or the XP Pro machine. In spite of this blindness it can map to all the XP machines and define so-called network places. But "misty" cannot map through the SAMBA protocal used by the Linux machines to make

Hi all, I have been having the weirdest network browsing problems on my network the past week. Come to find out the wins.dat file got corrupted. Removing that file fixed everything. Because our systems typically have uptimes measured in months rather than days, and it is difficult for me to restart Samba except as a scheduled task (which I'm afraid to do because there are users who

OK, I just took my first non-root user live on my Samba 3.0.7 system. Printing is via cups, with drivers stored in the print$ share. This user is a local power user. She can add printers, or root can add them. Root can also print from them. If this user tries to print anything (a test page even) she gets a non-verbose error that looks like a permissions error. She can view the queues

Hi all, i have ACLs working fine on my PDC, but they do not work on a member server. Here is a summary of my set-up: I am using LDAP backend, with nss_ldap on all of my member servers. Samba 3.0.12pre1 on the PDC and Samba 3.0.14a on the member server. I have winbindd running on my member server, and it is pointing at LDAP as its backend. ?wbinfo -u and wbinfo -g both work. I am using

I've got a WinXP machine that was configured for local profiles. I have now joined that machine to the domain, but when I try to log in as a user, it tries to use a roaming profile. Fine, that's what I want anyway. But it doesn't do the smart thing and copy the user's local profile to roaming -- it gives an error instead. OK, no problem, I will change the type. I log in as

Hi all, This is maybe not the play to ask, but i'll just ask. I googled a lot but im stuck.. Im having samba 3.0.26a on a debian etch server with ldap. Im using a setup like the idealx setup. ( samba pdc + ldap ) I have replicated my ldap database to a other server. On this server im having a database application running and my users must login with telnet on this server. Now my