su99ort | 1 Sep 2005 01:49

Re: Access from Mac OS X

>
> But, I have a couple of Mac OS X machines that also need to access  
> this
> share and are currently unable to do so.  How do I go about getting  
> Mac
> OS X to recognize this share?

FINDER > GO > CONNECT TO SERVER

smb://servernamehere  (or IP)

it will mount in finder

be careful though there are issues with excel files... they should be  
resolved if your running the latest samba release...

--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

moof48 | 1 Sep 2005 03:15
Picon
Favicon

Account deactivations

Is there a way to turn off deactivation of accounts when too 
many failed password attempts kick in and deatcivates the 
account by putting the D flag in sambaAcctflags.  How about 
a way to increase the number to lets say 10 instead of 3.

Just looking for a way w/o going into the source.
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Martin Lefebvre | 1 Sep 2005 05:39
Picon

Samba password change problem

Hey guys,

I need some help here...
I have a PDC built with samba 3.0.10 using MySQL for the passdb backend

Everything works fine until I try to get my Unix and Samba password sync'd 
For example if I run:

# smbpasswd -D 100 -U root -r cirion &> log

Without the unix password sync = yes enabled in the config file, the samba 
password is changed, and the resulting log file shows:

000018 samr_io_r_chgpasswd_user
    0018 status: NT_STATUS_OK

However, if I run the same command with unix password =yes enabled in the 
config, I get an error:

machine cirion rejected the password change: Error was : RAP86: The specified 
password is invalid.
Failed to modify password entry for user root

If I look deeper in the log file, I get:

000018 samr_io_r_chgpasswd_user
    0018 status: NT_STATUS_ACCESS_DENIED

Is there any kind of "allow user password change = yes" anywhere or any other 
option that could be causing that?
(Continue reading)

Craig White | 1 Sep 2005 05:43

Re: Account deactivations

On Wed, 2005-08-31 at 21:15 -0400, moof48 <at> temple.edu wrote:
> Is there a way to turn off deactivation of accounts when too 
> many failed password attempts kick in and deatcivates the 
> account by putting the D flag in sambaAcctflags.  How about 
> a way to increase the number to lets say 10 instead of 3.
> 
> Just looking for a way w/o going into the source.
----
probably a whole lot easier to look at man pages

man pdbedit

I think you find just the example of what you are looking for.

Craig

--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Tom Diehl | 1 Sep 2005 06:33

wbinfo problems and documentation questions

Hi all,

I have a samba pdc running 3.0.20 + the patches on
http://hostopia.samba.org/samba/patches running RHEL4 on an x86_64 platform. I
have configured it to use an ldapsam backend per 
http://us2.samba.org/samba/docs/man/Samba-Guide/2000users.html

Since there is not much in the way of testing listed in the "2000users" section
I used the tests listed under the making users happy section. With the
exception of the ldapsearch -x -b "dc=keenanmotorgroup,dc=com" "(ObjectClass=*)"
test all work as advertised. It appears to me that in order for this test to
work I need to have the following in the slapd.conf file:

access to dn.base=""
        by self write
        by * auth

access to attr=userPassword
        by self write
        by * auth

access to attr=shadowLastChange
        by self write
        by * read

access to *
        by * read
        by anonymous auth

Without the above in the slapd.conf file I only get the following output:
(Continue reading)

Eric A. Hall | 1 Sep 2005 07:18

ldap guest account mapping looks broken

I'm running the samba-client-3.0.20-0.1 SUSE RPM. I was using the
version that came with 9.3 but upgraded to see if this specific
problem would go away.

Guest access does not appear to be working correctly, and it looks
like the problem is due to guest not getting mapped into the LDAP
query correctly.

Specifically, I can login with local account, join workstation to the
domain, browse shares, and everything else that requires
authentication, but cannot login to domain nor browse the domain in
explorer or anything else that requires guest access.

Looking at the smbd log with loglevel 4 shows:

[2005/09/01 01:00:02, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606)
  Got user=[] domain=[] workstation=[RHINO-VM-PC-1] len1=1 len2=0
[2005/09/01 01:00:02, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/09/01 01:00:02, 3] smbd/uid.c:push_conn_ctx(388)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/09/01 01:00:02, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/09/01 01:00:02, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/09/01 01:00:02, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user
[]\[] <at> [RHINO-VM-PC-1] with the new password interface
[2005/09/01 01:00:02, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: [LABS]\[] <at> [RHINO-VM-PC-1]
(Continue reading)

Craig White | 1 Sep 2005 07:54

Re: wbinfo problems and documentation questions

You're trying to bite off too much at one time. This makes it extra
difficult.

I'm gonna suggest that you not worry about samba at all for now.

see answers inline.

On Thu, 2005-09-01 at 00:33 -0400, Tom Diehl wrote:
> Hi all,
> 
> I have a samba pdc running 3.0.20 + the patches on
> http://hostopia.samba.org/samba/patches running RHEL4 on an x86_64 platform. I
> have configured it to use an ldapsam backend per 
> http://us2.samba.org/samba/docs/man/Samba-Guide/2000users.html
> 
> Since there is not much in the way of testing listed in the "2000users" section
> I used the tests listed under the making users happy section. With the
> exception of the ldapsearch -x -b "dc=keenanmotorgroup,dc=com" "(ObjectClass=*)"
> test all work as advertised. It appears to me that in order for this test to
> work I need to have the following in the slapd.conf file:
> 
> access to dn.base=""
>         by self write
>         by * auth
---
seems too restrictive. I would probably just have 'by * read' as the
only ACL here
----
> 
> access to attr=userPassword
(Continue reading)

Markus PASCHINGER | 1 Sep 2005 08:04
Picon

Kerberos problem with net ads join under AIX

Hello!

If i try a net ads join i get a kerberos error , but my kerberos works
fine, i can do a kinit,klist and so on.

the error i get is the following.

[2005/09/01 08:02:16, 0] libads/kerberos.c:ads_kinit_password(146)
  kerberos_kinit_password root <at> MY.DOMAIN.COM failed: Cannot resolve network
address for KDC in requested realm
[2005/09/01 08:02:16, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: Cannot resolve network address for KDC in requested realm

I tried nearly everthing until now, but i get no other result than the one
above - can anybody help me?

I run under AIX 5.3 .

      Regards
      Markus
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Martin Bergien | 1 Sep 2005 10:08
Picon

Re: Samba 3 problem with unc name connections

Gerald (Jerry) Carter wrote:

>Could you send me a
>raw network packet trace and I'll look in it.

I'm sorry, I can't because we work with very serious data and have no
test environment.
But I'm not the only one, having this problem and I'm sure, that will
have the same problem in any test environment.
Could you (ore anyone else) create a trace in a test environment?

-- 
bye
    Martin Bergien

--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Bruno Guerreiro | 1 Sep 2005 10:19
Picon
Favicon

RE: USRMGR.EXE doesn't work anymore.

Hi,
I've got the same problem (
http://lists.samba.org/archive/samba/2005-August/109895.html ).
It seems this has been laying around since RC1/2 (
http://lists.samba.org/archive/samba/2005-August/109465.html )
I've already supplied a level 10 log to Günther Deschner,
If you wish I may forward it to you.

Best Regards,
Bruno Guerreiro

>-----Original Message-----
>From: Gerald (Jerry) Carter [mailto:jerry <at> samba.org]
>Sent: quarta-feira, 31 de Agosto de 2005 17:45
>To: Umberto Zanatta
>Cc: samba <at> lists.samba.org
>Subject: Re: [Samba] USRMGR.EXE doesn't work anymore.
>
>
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>Umberto Zanatta wrote:
>| This is the log about usrmgr.
>|
>|
>| Aug 31 18:26:55 provtvlp smbd[17237]: [2005/08/31 18:26:55, 0,
>| effective(0, 512), real(0, 0)] rpc_parse/parse_prs.c:prs_mem_get(533)
>| Aug 31 18:26:55 provtvlp smbd[17237]:   prs_mem_get: reading data of
>| size 4 would overrun buffer.
(Continue reading)


Gmane