similar to: net ads password

Samba doesn't allow connections from usernames that have & in them. For example, using 2.2.5 and winbind with security = DOMAIN password server = win2kmixed workgroup = MIXEDDOMAIN all my users can login, (for example MIXEDDOMAIN+aho, MIXEDDOMAIN+tdickson), but my users named "&" and "bobalso&" (which should be MIXEDDOMAIN+& and MIXEDDOMAIN+bobalso&)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sorry about that: enigmail got over excited! - -------- Original Message -------- Subject: Re: [Samba] Macro expansion in valid users = line? Date: Thu, 04 Sep 2003 13:15:42 -0700 From: Tom Dickson <tdickson@inostor.com> To: Gerald (Jerry) Carter <jerry@samba.org> CC: samba mailing list <samba@lists.samba.org> References:

I've got samba-3.0.0-beta3-rc1 running, and am trying to connect to a Windows 2000 domain using security = ADS After following the instructions in the Samba-HOWTO-Collection, I've got kinit working, and am able to browse the Windows 2000 machines shares with smbclient //win2kmixed/c\$ -k without a password. However, if I try to connect to the machine, either through network neighborhood

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Joining a mixed 2000 domain worked correctly for Samba 3.0.2a. After upgrading to either samba 3.0.9 or 3.0.10, the net ads join command completes successfully, and wbinfo -u returns a list of users, but any attempt to actually authenticate those users fails with NT_STATUS_PIPE_NOT_AVAILABLE. wbinfo -t also does not work, and produces the log file

Hello, Is it possible to put %U or %S in the valid users line? I'm trying: valid users = %D+%U for a certain homedir setup (automagically creates if non-existent), but the level 10 logs show that it always tries: checking |MIXEDDOMAIN+dl| against |%D+%U|, and does not expand the macro. This is with Samba-3.0.0rc2 (happens with beta3 also.) Same thing happens with %U or %S. It worked in

It might help if you view the default directory ACLs using the getfacl utility. These are what will be inherited by stuff created in the lower directories. I would ask yourself if you actually need ACLs at all. The Samba share permissions are pretty thorough and life is far easier without ACLs as you can clearly see what permissions are in use and backups are not an issue. ACLs can quickly

I've gotten samba working with ACLs over an XFS filesystem. Everything works pretty well with knowledge of the workarounds (cannot remove group everyone, etc.) The only major problem I have is that ACLs don't inherit correctly. The default in Windows 2000 is to have a sub folder inherit the permissions of the folder it is in on creation. By default, the Samba share's folders don't

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ~ /usr/bin/net ads join -Udennisb dennisb password: [2004/11/02 17:31:56, 0] libads/ldap.c:ads_add_machine_acct(1006) ~ Host account for if-srv-hos1 already exists - modifying old account [2004/11/02 17:31:56, 0] libads/ldap.c:ads_join_realm(1342) ~ ads_add_machine_acct: No such object ads_join_realm: No such object Also: net user | wc -l reports

Dear Samba Gurus, I've been R'ing TFM but I can't seem to find any help with this problelm. When I attempt to get samba to join the active directory domain I get the following error message: [2004/12/08 14:42:51, 0] libads/kerberos.c:get_service_ticket(335) get_service_ticket: kerberos_kinit_password BOBA-FETT$@WESTAM-US.CORP@WESTAM-US.CORP failed: Client not found in Kerberos

Running the command: wbinfo -aDOMAINNAME+Administrator%password works, in fact, all of the wbinfo commands report data as they should. However, when I try to connect to a share on the SMB server, I get the following error message in the logs: [2003/04/21 08:28:59, 0] smbd/password.c:connect_to_domain_password_server(1328) connect_to_domain_password_server: machine DWP rejected the tconX on

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 What is the standard procedure for making edits of smb.conf take hold? For example, what I'm seeing is a share that has given R/W access to a user named Tom, when I change Tom to read only, he is still able to write to that share until I stop Samba and restart it. The documentation seems to refer to a 1 minute reread of smb.conf, but I don't

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Would it not be possible to make the archive bit map to a Posix extended ACL instead of to the execute bit? - -Tom -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBWDuj2dxAfYNwANIRAvmnAJ4r1Q/2X7YyPKgGWbnnB3pv6WKDjwCgn+Vd 8USnnc35+uAa2GxUmejlDBc= =Bu48 -----END PGP

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Perhaps using a MS-DFS share would be more useful in this case? This would allow three real shares: \\server\accounting \\server\personal \\server\public which would appear as \\server\users\accounting \\server\users\personal \\server\users\public. See http://samba.org/~jht/HOWTO/Samba-HOWTO-Collection.pdf for more information on MS-DFS - -Tom

Hi all! I'm trying to setup a linux samba server as a domain member of a SINGLE FOREST MULTI DOMAINS. The forest is a 2 servers acting as a global catalog. Other domains are child domain with implicit trust with forest. I setup a linux server with samba as a domain member to work with squid, authenticating users and verify user's groups membership. I need to allow access to squid only to

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 After upgrading from 3.0.2 to 3.0.3 in a Windows 2000 Native Domain environment, 9x clients can't connect and wbinfo -t doesn't work: bash-2.05a# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac) Could not check secret Downgrading to 3.0.2 fixes this. I can get log files, but

Bryan -- I''m using the puppet augeas plugin at http://git.et.redhat.com/?p=ace.git;a=blob;f=modules/augeas/plugins/puppet/type/augeas.rb;h=2346c37d724d7607ed4e09b0413700bec2b7cbed;hb=HEAD I''m running into a behavior that I wouldn''t expect. I''d like to confirm an entry in sysctl.conf by changing the value if necessary or appending the key/value if it

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Is there a tentative release date for 3.0.1 yet? I'd like to go live with an official release as opposed to hand patching all the little fixes I've seen on the mailing list (i.e., sorry about that; here's a patch, will be in 3.0.1). Thank you for all your work! - -Tom Dickson InoStor, Inc. http://www.inostor.com -----BEGIN PGP

More questions! :) By setting create mask = 0700 directory mask = 0700 directory security mask = 0700 I get a sort-of-work around to the issue, but then I can't add the Everyone group back in! The Everyone group will turn into CREATOR OWNER the moment I hit "Apply." This creates the following output from getfacls: # file: tdickson # owner: tdickson # group: root user::rwx

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This patch is against samba-3.0.0beta3 (tested), but will also apply correctly to 3.0.0 (release) It makes wbinfo ask for a password if there is no password on the command line. So: wbinfo --set-auth-user=Administrator Will make it prompt Password: This is to make it easier to script wbinfo for nas appliances using expect to allow passwords with

Hello, We have multiple clients that are connecting to our rsync daemon, sending a small file, and then disconnecting. This works well, but rsync forks each time there is a connection. Is it possible to get a "pool" of waiting daemons, similar to how apache runs? -tom -------------- next part -------------- An HTML attachment was scrubbed... URL: