headers
Rodolphe A. | 1 Apr 2007 14:23
Picon

RE: Issue joining a PC to a Samba domain from a subnet otherthe one that Samba PDC

Hello,

Please, enable log in samba server
And check log for ip/name workstation.

Rodolphe

-----Message d'origine-----
De : powderskier9  <at> hotmail.com [mailto:powderskier9 <at> hotmail.com] 
Envoyé : samedi 31 mars 2007 16:53
À : samba <at> lists.samba.org
Objet : [Samba] Issue joining a PC to a Samba domain from a subnet otherthe
one that Samba PDC 

Hello,

Thanks in advance for taking the time to look at this issue. We are 
currently experiencing an issue with PC's not being able to join a Samba PDC

controlled domain when the PC's are located outside of the subnet that the 
Samba PDC is part of. The PC's are located in the same physical building as 
the PDC, connecting over a Cisco VLAN to the Samba PDC subnet. For example, 
the PDC is part of the 192.168.1.x subnet and the client PC is part of 
192.168.70.x . subnet.  If the client tries to join the domain from this 
network segment, then error message;

Logon failure: unknown username or bad password

will appear on the client end. The client PC's are Windows XP SP2 systems. 
They have File & Printer sharing enabled, disabled Windows Firewall,
(Continue reading)

Permalink | Reply | 1 comment |
headers
Marcus Sobchak | 1 Apr 2007 15:41
Picon

deny second or multiple logins

Hi,

I'd like to deny multiple logins to a samba domain. I already searched
the archive and found some threads about it. This one seems to be a good
idea: 

  http://lists.samba.org/archive/samba/2006-April/119867.html 

Does anyone know where to find such scipt examples?

Thanks,
Marcus

--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
Permalink | Reply | 13 comments |
headers
Freitas | 1 Apr 2007 15:49
Picon

Re: deny second or multiple logins

> I'd like to deny multiple logins to a samba domain. I already searched
> the archive and found some threads about it. This one seems to be a good
> idea:
>
>   http://lists.samba.org/archive/samba/2006-April/119867.html
>
> Does anyone know where to find such scipt examples?

     You can try here.
http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/AdvancedNetworkManagement.html#id386516

   Regards,

Freitas
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
Permalink | Reply | 10 comments |
headers
Helmut Hullen | 1 Apr 2007 16:10
Picon
Favicon

Re: deny second or multiple logins

Hallo, Marcus,

Du (lists) meintest am 01.04.07:

> I'd like to deny multiple logins to a samba domain. I already
> searched the archive and found some threads about it. This one seems
> to be a good idea:

>   http://lists.samba.org/archive/samba/2006-April/119867.html

> Does anyone know where to find such scipt examples?

What about "max connections" for the desired shares?

Viele Gruesse!
Helmut
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
Permalink | Reply | 1 comment |
headers
Marcus Sobchak | 1 Apr 2007 16:31
Picon

Re: deny second or multiple logins

Hi,

Am Sonntag, den 01.04.2007, 10:49 -0300 schrieb Freitas:
> > I'd like to deny multiple logins to a samba domain. I already searched
> > the archive and found some threads about it. This one seems to be a good
> > idea:
> >
> >   http://lists.samba.org/archive/samba/2006-April/119867.html
> >
> > Does anyone know where to find such scipt examples?
> 
>      You can try here.
> http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/AdvancedNetworkManagement.html#id386516

Ah, great link. I was playing with smbstatus in these minutes :-) I'd
like to put the preexec script paramteter to global or to netlogon
section, not to a user's share section. What's best location?. 

At my netlogon section there is already the following line to create
dynamic login scripts:

 root preexec = /usr/local/bin/make_logon_script '%m' '%U' '%a' '%g' '%
L'

How do I combine these two lines? The script PermitSingleLogon.sh should
be executed before my old make_logon_script and if the return is 1 the
login process should be aborted completely.

Thanks,
Marcus
(Continue reading)

Permalink | Reply | 0 comments |
headers
Marcus Sobchak | 1 Apr 2007 16:39
Picon

Re: deny second or multiple logins

Am Sonntag, den 01.04.2007, 16:10 +0200 schrieb Helmut Hullen:
> Hallo, Marcus,
> 
> Du (lists) meintest am 01.04.07:
> 
> > I'd like to deny multiple logins to a samba domain. I already
> > searched the archive and found some threads about it. This one seems
> > to be a good idea:
> 
> >   http://lists.samba.org/archive/samba/2006-April/119867.html
> 
> > Does anyone know where to find such scipt examples?
> 
> What about "max connections" for the desired shares?

But then the user is already logged in :-) The user should be stoped one
step before.

Ciao!

--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
Permalink | Reply | 0 comments |
headers
Thomas Bork | 1 Apr 2007 20:28
Picon

Re: deny second or multiple logins

Freitas wrote:

>     You can try here.
>
http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/AdvancedNetworkManagement.html#id386516 

Sorry for being so stupid but how should this working?

 From the above link:

preexec script = /sbin/PermitSingleLogon.sh

Okay, this script is called without parameters before the share is opened.

Here the script from the above link:

#!/bin/bash

IFS="-"
RESULT=$(smbstatus -S -u $1 2> /dev/null | awk 'NF \
         > 6 {print $1}' | sort | uniq -d)

if [ "X${RESULT}" == X  ]; then
   exit 0
else
   exit 1
fi

smbstatus is called with '-u $1' (user). But no parameter for the user 
is given in the preexec script and so $1 is empty.
(Continue reading)

Permalink | Reply | 8 comments |
headers
Stefan Drees | 1 Apr 2007 21:55
Picon
Favicon

How to change SID in ntuser.dat?

Hello,
i try to migrate user/groups from NT4 PDC to Samba3 with LDAP backend.
There is already an NIS-Server with Samba runing, so there exists two
userlists.
I migrated the user/ groups from windows via net rpc vampire and
added/changed
the UID´s from the NIS-Server but didn´t change the SID.
A teammate told me, there could be some access problems, if i don´t
change the SID.
So i tried to change the SID in ntuser.dat to produce a samba equal SID
(RID = 2xUID +1000).
/usr/bin/profiles dumps me only the reghive, but doesn´t change the SID.
I´m using Samba 3.0.24.

Any hints?

Regards
Stefan D.
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
Permalink | Reply | 2 comments |
headers
Mark Hull-Richter | 2 Apr 2007 07:18
Picon

Can't see samba drives in host Linux from VMWare guest Windows

I have my machine configured to run VMWare Server with a NAT ethernet
connection, and with samba running,  I can see the host with "printers and
faxes" and "scheduled tasks," but no drives.  The whole point of this is to
get access to my host drives from my Windows on VMWare guest.  Here's my
smb.conf:

# cat smb.conf
# Global parameters
[global]
        workgroup = MARKGROUP
        server string = Samba Server
        log file = /var/log/samba/%m.log
        max log size = 50
        username map = /etc/samba/smbusers
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        printcap name = /etc/printcap
        preferred master = Yes
        dns proxy = No
        wins support = Yes
        idmap uid = 16777216-33554431
        idmap gid = 16777216-33554431
        hosts allow = 192.168.230. 192.168.108. 127.
        cups options = raw

[homes]
        comment = Home Directories
        path = /home/%u
        valid users = %S
        read only = No
        browseable = No
(Continue reading)

Permalink | Reply | 0 comments |
headers
mail | 2 Apr 2007 09:52

PDC and BDC problem

Hello,

   The following is my PDC and BDC some setting: 

PDC: 

local master = yes 
os level = 65 
domain master = yes 
preferred master = yes 
domain logon = yes 

BDC: 

local master = no 
os level = 33 
domain master = no 
preferred master = no 
domain logon = yes 

 I has windows xp sp1(created in vmware + fc5(created in vmware)+Samba x2+
LDAP x2(Replication) for testing.

http://www.wilson-kwok.com/ldap.GIF

 I turned off BDC and PDC work find when user login, but I turned off PDC
and user cannot login to BDC, can someone tell me what is the problem ?

Thanks
(Continue reading)

Permalink | Reply | 0 comments |

Gmane