similar to: LDAP, checkpwnam and PDC

Hi, I'd like to know if any of you have ever implemented Samba 3 with OpenLDAP multimaster (using syncrepl, maybe) or Fedora-DS. The basic idea would be: - WAN link dies, the remote office's BDC would promote itself to PDC (using some kind of monitoring script), and will start accepting changes to the user base. Also, some change to the local WINS server would be necessary. - WAN link

I am running vsftp pretty much 'out of the box', though I turned off IPv4 and have it listening on IPv6. I have stopped ip6tables, as the simple rule to enable port 21 is not allowing gftp to connect (pasv mode, I think). gftp to the IPv6 address, it connects and gets a directory listing. I am running gftp from my normal login userid, connecting to my normal login userid on the

Hi all, Has anyone been able to get local groups support with a Samba Server through winbindd? Specifically, i am able to store several SIDs in sambaSIDList, but i can't get winbind working to retrieve (or expand) its members. Is Winbindd supposed to work _only_ with NT servers? -- Carlos Eduardo Pedroza Santiviago Analista de Suporte <carlos@prognus.com.br> Prognus Solu??es Livres

Hi, I have a domain using LDAP backend, and recently we've managed to establish a trust relation with another domain in our network, which uses a pure NT4 server. After that, some accounts from the trusted domain started being created in our base. The user created doesn't have the same attributes as a valid user (he doesn't have sambaSamAccount, for example). But for auditing

Hi, just wondering if there was a way to boot while ignoring sysctl.conf... A colleague messed up one parameter, that ended up crashing the server at boot time. Booting in single was not helping. Fixed it by booting on a live CD and modifying the sysctl file but, it would be convenient to know if there was a kernel parameter to add to the grub entry or something to bypass it... But I see it is

Hi, Recently, i worked in a pilot project to migrate a NT4 Domain to Samba3 + OpenLDAP. They have a quite large user base, approx. 2500 accounts, plus approx. 1800 groups, which 200 are local groups. Unfortunately, we faced some problems, and i'd like to know if anyone has faced them too, and how overcame them: - User Rights and Privileges: This is kinda new in latest Samba release, 3.0.11,

Hi, I'd like to know if samba offers any way to audit user/group management tasks. I need to audit those events. AFAIK, i can change the smbldap-tools scripts to do some debugging, but doing it from samba would be nice. Is there any way? Maybe increasing the log level? How about some audit option in the config file? thanks.

I have a Samba server with Windows XP clients, and roaming profiles for every user. At this moment everyone can log onto any workstation, but it shouldn't be like that: there are some workstations where anyone can log into, but three of them should be restricted to some specific users. I thought about making local users for them, but we need all users to have roaming profiles, I can't

Hello AIX folks, I am changing the packaging of Samba for AIX. Presently Samba is built with a truckload of static libs and bound up in a package that has no other support for the supporting infrastructure. What I'd like to do instead is make as much of the package dependant upon shared libs and to allow for completeness of the package. In other words, BDB, OpenSSL, OpenLDAP, SASL, KRB5,

Hi, Does anyone know of a stable / working "2way authentication" system for SSH, and even web authentication services? Most of the banks in South Africa have a system that, when you want to make a payment, they send you an SMS and you need to verify the action with a secret code which was SMS'd to you. gmail also has this. Does anyone know of a "universal" plugin /

Hi all! I've a running Samba PDC (LDAP backend) with windows clients. All the users are in the LDAP, including the 'guest' user. All except the 'root' user which is a regular user. Then change in the smb.conf ldapsam:trusted = yes ldapsam:editposix = yes and noticed some speed-up when listing groups, look file ownerships, and so on. But I can't add machines to the

I've been working at this for a few days now and I can't figure out what is broken. Google turns up similar issues from years back, but I hope this is a bug resurfacing. ACL entries are being deleted when files are saved. Here is an example: username: user1 group membership: Domain Users directory: /share/test file: test.xls getfacl /share # file: share # owner: DOMAIN+backupuser #

Hello, I have two Domains (DOM1 and DOM2). Each trust each other. Now I configured winbind on PDC1 with the following settings: winbind separator = + idmap backend = ldap:ldap://192.168.1.4 idmap uid = 10000-20000 idmap gid = 10000-20000 winbind enum users = yes winbind enum groups = yes template homedir = /home/%U template shell =

Here's the situation: We have users who are members of groups and those groups are sometimes members of a 2nd level of groups. If a folder has permissions assigned to a 2nd level group, then the user can not access the share. Doing a "getent group | grep user | grep 2nd_level_group" also returns nothing. Samba seems to not be recognizing that a user is a member of a group under

Gidday I am in the process of finishing a server migration (to a new server), and am having problems with samba on the new server. The old server was running samba 3.0.22-r3 on a Gentoo machine, and the new server is running Samba 3.0.25a on a Solaris 10 machine. I have copied the files across OK, I have copied the samba configuration OK, samba runs fine, connects to the ldap backend

I am newbie for samba configuration at security level. I have read all the documents but could not resolve my problem. My problem is as below and would like your help to resolve it I have installed Samba - 3.0.0-14 on Redhat ES 3 and everthing is working fine. But I want that all the member can read the files and put the file on shared folder but can not delete it. I want to protect it from

I am looking at putting the medisoft application on a samba share. I was wondering if there is currently anyone using this configuration and if so then what are some of the problems that I might encounter. The app is currently being hosted on a Winxp pro machine and I need to move it to a server. Any help would be greatly appreciated. Scott Swaim

Hi, Im trying to run samba as a non-root user and I was wondering if this is even possible, and if not what is preventing it from being ran as a normal user??

Hello list, I'm trying to setup Samba to use: ldapsam:editposix = yes but I'm having problems to add users via "smbpasswd -a". It seems smbpasswd tries to modify an existing entry (and falling of course) instead of adding a new entry. Is that a bug, a configuration problem, or intended behavior? Do I need to create a postixaccount entry prior to use "smbpasswd

Heyho. My apologies if this mail arrives twice. The first time I sent it my email address didn't correspond to the one I signed onto the list with (one was an alias for the other). I'm not sure if the original will eventually make it through or not. I have a NT Domain which is run by my samba server (v3.0.22-r3 on Gentoo Linux). Everything works well, and the backend database is