unsubscribe
Gian Paolo Valenza
gian at dsi.unive.it
Mon Feb 28 08:06:44 GMT 2000
At 12.49 24/02/00 +1100, you wrote:
> SAMBA Digest 2426
>
>For information on unsubscribing see http://lists.samba.org/
>
>Topics covered in this issue include:
>
> 1) Re: NIS+ support in samba....
> by monyo at home.monyo.com
> 2) Windows 2000
> by Jun Altea <junaltea at rocketmail.com>
> 3) Re: please help with new samba
> by "Keith G. Murphy" <keithmur at mindspring.com>
> 4) Problem with moving read-only files
> by "J. Mostert" <J.Mostert at geodelft.nl>
> 5) Re: Netscape Profiles
> by Manuel Bessler <mbessler at BfK-HD.de>
> 6) Samba share's from NFS exports file ?
> by "Kevin (HxPro) Wheatley" <hxpro at cinesite.co.uk>
> 7) Best way to do logins by group?
> by "Dan Malcolm" <dmalcolm at hiwaay.net>
> 8) Re: [Fwd: Re: NIS+ support in samba....]
> by Jeff Pajor <pajor at descent.net>
> 9) Re: Win2k & Samba compatibility?
> by Jeremy Allison <jeremy at valinux.com>
> 10) samba handles nt logon restrictions wrong
> by Heinz Christian <Christian.Heinz at nbg9.siemens.de>
> 11) newbie desperate for help
> by "Matthew Foust" <mfoust at martinwilliams.com>
> 12) potential bug with hosts allow and hosts deny
> by Markus Krieger <krieger at rz.uni-wuerzburg.de>
> 13) lower case forced on paths?
> by eoporto at viragelogic.com (Ernie Oporto)
> 14) phantom adm mount?
> by eoporto at viragelogic.com (Ernie Oporto)
> 15) Re: newbie desperate for help
> by Gerald Carter <cartegw at Eng.Auburn.EDU>
> 16) RE: newbie desperate for help
> by "whcc" <whcc at netscape.net>
>
>----------------------------------------------------------------------
>
>Date: Wed, 23 Feb 2000 23:44:31 +0900
>From: monyo at home.monyo.com
>To: samba at samba.org
>Subject: Re: NIS+ support in samba....
>Message-ID: <20000223234431N.monyo at home.monyo.com>
>Mime-Version: 1.0
>Content-Type: Text/Plain; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>
>
>Hi!
>
>Jeff Pajor wrote:
>
>> Hi all,
>>
>> I know this has probably been spoke about before,
>> but I'm looking for some documentation or other
>> info on setting up NIS+ with samba....
>
>I had once set NIS+ with Samba. This is a quick how-to...
>
>(1) generate NIS+ table
>
> # source/script/mknissmbpwdtbl.sh
>
>(2) convert existing smbpasswd to NIS+ table
>
> # cat smbpasswd | source/script/mknissmbpasswd.sh
>
>(3) add proper permissions to smbpasswd.org_dir and smb.groups_dir
>
>(4) modify smb.conf
> For example
>
> smb passwd file = smbpasswd.org_dir
> encrypt passwords = yes
>
>-----
>Motonobu TAKAHASHI mailto:monyo at samba.gr.jp
>Samba Users Group Japan http://www.samba.gr.jp/
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 06:55:11 -0800 (PST)
>From: Jun Altea <junaltea at rocketmail.com>
>To: samba at samba.org
>Subject: Windows 2000
>Message-ID: <20000223145511.6589.qmail at web1603.mail.yahoo.com>
>MIME-Version: 1.0
>Content-Type: text/plain; charset=us-ascii
>
>Hi everybody,
>
>We have just installed a Windows 2000 in our network
>which has been previously been using Samba.
>
>I tried using Samba server and Windows 2000 as a
>client and getting RPC error. Can anyone help on this?
>
>Thanks very much.
>__________________________________________________
>Do You Yahoo!?
>Talk to your friends online with Yahoo! Messenger.
>http://im.yahoo.com
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 09:35:40 -0600
>From: "Keith G. Murphy" <keithmur at mindspring.com>
>To: "Chris R. Martin" <nakor at texas.net>
>Subject: Re: please help with new samba
>Message-ID: <38B3FE4C.8F76B987 at mindspring.com>
>MIME-Version: 1.0
>Content-Type: text/plain; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>
>"Chris R. Martin" wrote:
>>
>> I upgraded my samba package to frozen (2.0.6), and now it doesn't work with
>> my old smb.conf file. I've been up and down the samba docs and I've tried
>> all sorts of options which don't seem to have any effect (which probably
>> means I'm missing something basic). I can't even list the shares on the
>> server itself:
>>
>> server:/etc/samba# smbclient -L server
>> added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0
>> Password:
>> session setup failed: ERRSRV - ERRbadpw (Bad password - name/password
pair in a
>> Tree Connect or Session Setup are invalid.)
>>
>> From a windoze machine, I'm asked for a password for \\SERVER\IPC$
>> connection, and I can't browse the shares. This used to all work fine with
>> the old samba. Basically I want the windoze PCs on the local network to
>> have complete password-free access to /public, and still keep home
>> directories private. Here's my (old) smb.conf:
>>
>> ; Make sure and restart the server after making changes to this file, ex:
>> ; /etc/rc.d/init.d/smb stop
>> ; /etc/rc.d/init.d/smb start
>>
>> [global]
>> ; Uncomment this if you want a guest account
>> guest account = ftp
>> log file = /var/log/samba-log.%m
>> lock directory = /var/lock/samba
>> share modes = yes
>> workgroup = ACMELABS
>> security = share
>> ; added EnablePlainTextPassword to Win98 registry
>> ; encrypt passwords = yes
>>
>> [homes]
>> comment = Home Directories
>> browseable = no
>> read only = no
>> create mode = 0750
>>
>> [public]
>> comment = Temporary file space
>> path = /public
>> read only = no
>> public = yes
>>
>> please, if there's anything I'm missing, let me know... this has been the
>> only "problem" I've seen with potato.. but it's a biggie for me.
>>
>Chris, I strongly suggest you get on the Samba mailing list for stuff
>like this. The Samba developers hang out there and are very helpful:
>
>http://lists.samba.org/cgi-bin/weblist?list=SAMBA;newuser=1
>
>It's not super-high-volume, either, like debian-users...
>
>Meanwhile, I've forwarded this to the list; this is probably old hat to
>somebody there.
>
>How about it, guys?
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 17:03:56 +0100
>From: "J. Mostert" <J.Mostert at geodelft.nl>
>To: samba at samba.org
>Subject: Problem with moving read-only files
>Message-ID: <38B404EC.9D5017 at GeoDelft.nl>
>MIME-Version: 1.0
>Content-Type: multipart/mixed;
> boundary="------------B91A4933C79B68B57A9D7E7A"
>
>This is a multi-part message in MIME format.
>--------------B91A4933C79B68B57A9D7E7A
>Content-Type: text/plain; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>
>I found a problem with moving files from one network-dir to another
>network-dir..
>
>Suppose there is FileA.txt, owned by user UserA, group GroupA,
>permissions 764. This file is located in /tmp/DirA, owned by user UserA,
>group GroupA, permissions 775.
>When I log on to the domain as user UserB and connect to the server, I
>can see my homedir as for instance drive G: In my homedir there is a
>symlink to the /tmp directory called tmp.
>
>Now I try to move file FileA.txt from G:\tmp\DirA to G:\, the root of my
>homedir with Windows Explorer. A window appears with title "Confirm File
>Replace". It asks if I want to replace the existing file FileA.txt.
>When I answer with "Yes", the next message is the error message: Cannot
>move FileA.txt: Cannot create a file when that file already exists.
>
>After clicking OK, I see that there is a file FileA.txt in G:\.
>Double-clicking it results in a warning from Notepad that I do not have
>the permission to open it. Looking in my homedir under Unix shows that
>FileA.txt is owned by UserA, group GroupA and has the permissions 600.
>All I can do with this file is deleting it.
>
>My opinion is that the moved file should at least have the same
>permissions as the original permissions, in this example 764. This is
>what happens if you try to move the file under Unix.
>
>Samba version: 2.0.6
>OS: HP-UX 10.20
>
>Kind regards,
>
>--------------B91A4933C79B68B57A9D7E7A
>Content-Type: text/x-vcard; charset=us-ascii;
> name="J.Mostert.vcf"
>Content-Transfer-Encoding: 7bit
>Content-Description: Card for J. Mostert
>Content-Disposition: attachment;
> filename="J.Mostert.vcf"
>
>begin:vcard
>n:Mostert;Jan
>tel;fax:+31-15-2610821
>tel;work:+31-15-2693828
>x-mozilla-html:FALSE
>url:www.geodelft.nl
>org:GeoDelft;ITG
>version:2.1
>email;internet:J.Mostert at GeoDelft.nl
>title:Senior Systeembeheerder
>adr;quoted-printable:;;Stieltjesweg 2=0D=0A2628 CK Delft;;;;Nederland
>fn:Jan Mostert
>end:vcard
>
>--------------B91A4933C79B68B57A9D7E7A--
>
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 19:11:46 +0100
>From: Manuel Bessler <mbessler at BfK-HD.de>
>To: samba at samba.org
>Subject: Re: Netscape Profiles
>Message-ID: <20000223191146.A18319 at linux-svr.BfK-HD.de>
>Mime-Version: 1.0
>Content-Type: text/plain; charset=us-ascii
>
>Hi
>
>On Sat, Feb 19, 2000 at 05:54:39AM +1100,
naughton at domino.danielwoodhead.com wrote:
>>
>>
>> There was a posting on Netscape Profiles mapped to network drives that I
was
>> hoping someone could help me with. Other than setting the key for password
>> encryption, I've never messed with the NT registry keys.
>>
>> I see this folder:
>> \Registry\Machine\SOFTWARE\Netscape\Netscape Navigator\Users =
>>
>> But making this part, I could use some help:
>> CurrentUser = Default
>> Default
>> DirRoot = h:\.netscape
>> UserName =
>> EmailAddr =
>I set my Netscape Profiles dir to subdirectory netscape on my samba [Homes]
>which is mapped via logon-script to H:
>
>I use Netscape 4.51 (German) under win9x. At the first nescape install i
>entered H:\netscape into the ProfilesFolder entry.
>
>I couldn't find the above Registry Key on one of my Win98 machines
>
>I think you can change the Profiles folder in the Preferences Menu.
>Maybe if you change the local mail spool directory in the mail-server section
>
>
>MB
>--
>---use Linux
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 18:36:31 +0000
>From: "Kevin (HxPro) Wheatley" <hxpro at cinesite.co.uk>
>To: samba at samba.org
>Subject: Samba share's from NFS exports file ?
>Message-ID: <38B428AF.ECE48080 at cinesite.co.uk>
>MIME-Version: 1.0
>Content-Type: multipart/mixed;
> boundary="------------FA62815C961F3D710EE22394"
>
>This is a multi-part message in MIME format.
>--------------FA62815C961F3D710EE22394
>Content-Type: text/plain; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>
>Hi,
>
>not sure if anybody has any use for this sort of thing, or if anything
>similar exists already... but I've started to write a perl script to
>turn an NFS /etc/exports file into a samba share file that can be
>'include'd into your smb.conf
>
>It's this so far anyway ...
>
>Kevin
>
>--
>| Kevin Wheatley | These are the opinions of nobody |
>| Technical Services Manager | and are not shared by my employers |
>| Cinesite Digital Studios | |
>--------------FA62815C961F3D710EE22394
>Content-Type: application/x-perl;
> name="gen_smb_exports.pl"
>Content-Transfer-Encoding: 7bit
>Content-Disposition: inline;
> filename="gen_smb_exports.pl"
>
>#!/usr/sbin/perl -w
># Written by <hxpro at cinesite.com> (Kevin Wheatley)
># Work in progress Feb 2000
># version 0.01
>
>use strict;
>use FileHandle;
>
>my ($i, %exports, @fields, $infile);
>
>if ($#ARGV != 0)
>{
> print STDERR "Usage: $0 <exports file>\n";
> exit 1;
>}
>$infile = new FileHandle("< $ARGV[0]") || die "Error opening file $infile:
$!\n";
>LINE:
>while (<$infile>)
>{
> s/\w*\#.*$//;
> next LINE if /^$/;
> @fields = split;
> if (! exists($exports{$fields[0]}) )
> {
> $exports{$fields[0]} = [ @fields[1..$#fields] ];
> }
> else
> {
> print STDERR "Warning: duplicate export found, ignoring duplicate\n";
> }
>}
>close($infile);
>
>foreach $i (keys %exports)
>{
> my ($share_name, $field, $readonly, @hosts);
> $readonly = "No";
> ($share_name) = $i =~ m/\/(.+)$/;
> if (length($share_name) > 13)
> {
> print STDERR "Error: share name too long, 12 chars max ($share_name)\n";
> exit 1;
> }
> foreach $field (@{ $exports{$i} })
> {
> if ($field =~ /^\-/)
> {
> my (@subfields, $subfield);
> $field =~ s/^\-(.*)/$1/;
> foreach $subfield (split(",", $field))
> {
> if ($subfield eq "ro")
> {
> $readonly = "Yes";
> }
> else
> {
> print STDERR "Warning: unknown option $subfield\n";
> }
> }
> }
> else
> {
> push(@hosts, $field);
> }
> }
> print "[$share_name]\n";
> print "\tcomment = $share_name (Samba \%v)\n";
> print "\tpath = $i\n";
> print "\tread only = $readonly\n";
> if ($#hosts >= 1)
> {
> print "\thosts allow = @hosts\n";
> }
> print "\n";
>}
>
>exit 0;
>
>--------------FA62815C961F3D710EE22394--
>
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 12:54:44 -0600
>From: "Dan Malcolm" <dmalcolm at hiwaay.net>
>To: <arittner at gris.grad.uconn.edu>
>Cc: <samba at samba.org>
>Subject: Best way to do logins by group?
>Message-ID: <002001bf7e2f$73da1ce0$6f498cd0 at gets1000.com>
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
> boundary="----=_NextPart_000_001D_01BF7DFD.2854B0A0"
>
>This is a multi-part message in MIME format.
>
>------=_NextPart_000_001D_01BF7DFD.2854B0A0
>Content-Type: text/plain;
> charset="Windows-1252"
>Content-Transfer-Encoding: quoted-printable
>
>Have you thought about using virtual servers? Samba can be made to =
>appear as more than one server, each server having seperate resources.
>If you are interested, go to my homepage to see how I did it. =20
>
>http://home.hiwaay.net/~dmalcolm
>
>-------------------------------------------------------------------------=
>------------------------------------
>In my house I am king, and my law is, "whatever my wife says shall be
>done."=20
>
>Daniel R. Malcolm
>dmalcolm at hiwaay.net
>Dan.Malcolm at gets-1000.com
>
>------=_NextPart_000_001D_01BF7DFD.2854B0A0
>Content-Type: text/html;
> charset="Windows-1252"
>Content-Transfer-Encoding: quoted-printable
>
><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
><HTML><HEAD>
><META content=3D"text/html; charset=3Dwindows-1252" =
>http-equiv=3DContent-Type>
><META content=3D"MSHTML 5.00.3013.2600" name=3DGENERATOR>
><STYLE></STYLE>
></HEAD>
><BODY bgColor=3D#ffffff>
><DIV>Have you thought about using virtual servers? Samba can be =
>made to=20
>appear as more than one server, each server having seperate =
>resources.</DIV>
><DIV>If you are interested, go to my homepage to see how I did it. =
></DIV>
><DIV> </DIV>
><DIV><A=20
>href=3D"http://home.hiwaay.net/~dmalcolm">http://home.hiwaay.net/~dmalcol=
>m</A></DIV>
><DIV> </DIV>
><DIV>--------------------------------------------------------------------=
>-----------------------------------------<BR>In=20
>my house I am king, and my law is, "whatever my wife says shall =
>be<BR>done."=20
></DIV>
><DIV> </DIV>
><DIV>Daniel R. Malcolm<BR><A=20
>href=3D"mailto:dmalcolm at hiwaay.net">dmalcolm at hiwaay.net</A><BR><A=20
>href=3D"mailto:Dan.Malcolm at gets-1000.com">Dan.Malcolm at gets-1000.com</A></=
>DIV></BODY></HTML>
>
>------=_NextPart_000_001D_01BF7DFD.2854B0A0--
>
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 14:11:34 +0000 (GMT)
>From: Jeff Pajor <pajor at descent.net>
>To: samba at samba.org
>Subject: Re: [Fwd: Re: NIS+ support in samba....]
>Message-ID: <Pine.BSF.4.20.0002231403200.361-100000 at io.descent.net>
>MIME-Version: 1.0
>Content-Type: TEXT/PLAIN; charset=US-ASCII
>
>
>Thanks for the replies.... I am stuck on the second step of your
>list... I do not have a smbpasswd file, so I am not sure how I can create
>on... also, when I run smbpasswd (the executable) as root, I get the
>following:
># ./smbpasswd
>New SMB password:
>Retype new SMB
>password:
Failed
>to find entry for user root.
>Failed to change password entry for root
>
>Any help you can provide to me would be very apprciated....
>
>thank you
>
>Jeff
>pajor at descent.net
>
>
>On Wed, 23 Feb 2000, Gerald Carter wrote:
>
>> Just in case.
>>
>> -------- Original Message --------
>> Subject: Re: NIS+ support in samba....
>> Date: Thu, 24 Feb 2000 01:49:10 +1100
>> From: monyo at home.monyo.com
>> To: Multiple recipients of list SAMBA <samba at samba.org>
>> References: <38B3E7D3.2705D4AD at eng.auburn.edu>
>>
>>
>> Jeff Pajor wrote:
>>
>> > Hi all,
>> >
>> > I know this has probably been spoke about before,
>> > but I'm looking for some documentation or other
>> > info on setting up NIS+ with samba....
>>
>> I had once set NIS+ with Samba. This is a quick how-to...
>>
>> (1) generate NIS+ table
>>
>> # source/script/mknissmbpwdtbl.sh
>>
>> (2) convert existing smbpasswd to NIS+ table
>>
>> # cat smbpasswd | source/script/mknissmbpasswd.sh
>>
>> (3) add proper permissions to smbpasswd.org_dir and smb.groups_dir
>>
>> (4) modify smb.conf
>> For example
>>
>> smb passwd file = smbpasswd.org_dir
>> encrypt passwords = yes
>>
>> -----
>> Motonobu TAKAHASHI mailto:monyo at samba.gr.jp
>> Samba Users Group Japan http://www.samba.gr.jp/
>>
>>
>
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 12:34:41 -0800
>From: Jeremy Allison <jeremy at valinux.com>
>To: "Romeril, Alan" <a.romeril at ic.ac.uk>, samba at samba.org
>Subject: Re: Win2k & Samba compatibility?
>Message-ID: <38B44461.826CB0D5 at valinux.com>
>MIME-Version: 1.0
>Content-Type: text/plain; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>
>"Romeril, Alan" wrote:
>>
>> You were right all along of course, sorry if I`ve sent you on a wild goose
>> chase.
>> And sorry for sending you another 2 meg of debug, but this one might
>> actually be what you want.
>
>Close - but you haven't given me the name of the directory that
>has zero permissions. I need the exact name of the directory
>that ends up with mode 000.
>
>> This is a user w2ktest2 logging on to and off from a W2k box, after having
>> the profile created with NT4.
>>
>> It does a call_nt_transact_query_security_desc
>> and gets an error packet
>> smbd/error.c:error_packet(127)
>> 32 bit error packet at line 81 cmd=160 (SMBnttrans) eclass=c0000023 [Error:
>> Unknown error (35,49152)]
>
>This is actually ok, and is the correct response. NT does
>a query_sd with a buffer size of zero, Samba returns the
>c0000023 error (no space), then NT re-does the query with
>a proper buffer size. It does this all the time.
>
>I've looked through this log and can't find any problems
>in it.
>
>> I had an idea, and set the samba server to use LANMAN2 as the protocol, and
>> roaming profiles work fine with Win2k!!! All of the permissions get written
>> back fine.
>
>Easier to add "nt smb support = no" and it should have the
>same effect.
>
>What I *really* need is the following :
>
>1). Create the profile from NT 4.x.
>2). Ensure the permissions are correct.
>3). Do an ls -lR >logfile on the profile
>directory - store this.
>4). Set smbd up in debug level 10.
>5). Have the user log on/log off from W2k.
>6). Do an ls -lR >logfile2 on the profile
>directory.
>
>Send me *all* the logs from the above (the
>ls -lR logs, the smbd logs).
>
>It's frustrating, I keep getting fragmented bits
>of info from you but never enough to fix it :-) :-).
>
>Thanks for your help though, I really appreciate
>it !!!
>
>Jeremy.
>
>
>--
>--------------------------------------------------------
>Buying an operating system without source is like buying
>a self-assembly Space Shuttle with no instructions.
>--------------------------------------------------------
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 20:36:29 +0100
>From: Heinz Christian <Christian.Heinz at nbg9.siemens.de>
>To: Multiple recipients of list SAMBA <samba at samba.org>
>Subject: samba handles nt logon restrictions wrong
>Message-ID: <11DD9734B036D311947400805F0DD60774F305 at NBGV101A>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="iso-8859-1"
>Content-Transfer-Encoding: 8BIT
>
>
>we use samba as member servers with security=domain pointing towards a
WinNT4 PDC.
>accounts that have workstation logon restrictions are unable to connect to
samba shared ressources
>but are able to connect to windows nt shared ressources as they should.
>normally, workstation logon restriction should deny only interactive logons.
>
>the 2.0.5 logfile entry:
>----------------------------------------------------
>[2000/02/23 18:49:41, 0] rpc_client/cli_netlogon.c:cli_net_sam_logon(392)
> cli_net_sam_logon: NT_STATUS_WRONG_PASSWORD
>[2000/02/23 18:49:41, 0] smbd/password.c:domain_client_validate(1369)
> domain_client_validate: unable to validate password for user XXXXXXXX in
domain YYYYYYY to Domain controller ZZZZZZZZZ. Error was
NT_STATUS_WRONG_PASSWORD.
>[2000/02/23 18:49:41, 1] smbd/password.c:pass_check_smb(532)
>----------------------------------------------------
>
>the 2.0.6 logfile entry:
>----------------------------------------------------
>[2000/02/23 19:14:24, 0] rpc_client/cli_netlogon.c:cli_net_sam_logon(392)
> cli_net_sam_logon: NT_STATUS_INVALID_WORKSTATION
>[2000/02/23 19:14:24, 0] smbd/password.c:domain_client_validate(1431)
> domain_client_validate: unable to validate password for user XXXXXXXXXX
in domain YYYYYYYYYY to Domain controller ZZZZZZZZZ. Error was
NT_STATUS_INVALID_WORKSTATION.
>----------------------------------------------------
>
>as long as the mentioned logon restriction is in place, no connection can
be made (against 2.0.5 and 2.0.6) - but the error message from 2.0.6 sounds
a little better ...
>
>is this a known issue (i didn´t find anything in the archives)?
>
>
>greetings,
>
>Christian Heinz
>100750.65 at compuserve.com
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 13:43:17 -0600
>From: "Matthew Foust" <mfoust at martinwilliams.com>
>To: <samba at samba.org>
>Subject: newbie desperate for help
>Message-ID: <s8b3e412.056 at mw2.martinwilliams.com>
>Mime-Version: 1.0
>Content-Type: text/plain; charset=US-ASCII
>Content-Transfer-Encoding: 8BIT
>Content-Disposition: inline
>
>I just installed Samba for the first time. Installed and setup like a
dream. Unfortunately, I can't login to save my life. The server appears
in the Net. Neighborhood, but when I double-click to login, the login
window give the following message:
>
>Incorrect password or unknown username for \\SERVERNAME
>
>Entering a username and password (from /etc/passwd) returns:
>
>\\SERVERNAME is not accessible. THe acouunt is not authorized ...
>
>What am I doing wrong? Here is my smb.conf file:
>
>[global]netbios name = SERVERNAMEworkgroup = ITsecurity =
user[newshare]comment = if you can read this you are too closepath =
/usr/local/newshare
>writeable = yesvalid users = @developerslocking = yescreate mode =
0664directory mode = 0775[devshare]comment = if you can read this you are
too closepath = /usr/local/devsharewriteable = yesbrowsable = uesvalid
users = @developerslocking = yescreate mode = 0600directory mode =
0700[homes]comment = home directories for developerspath = %Hwriteable =
yesvalid users = %Screate mode = 0600directory mode = 0700locking = no
>
>Matthew Foust
>Technology Manager
>Martin/Williams Advertising
>60 South Sixth Street, 28th Floor
>Minneapolis, MN 55402
>TEL (612) 340-0800
>FAX (612) 342-9700
>mfoust at martinwilliams.com
>
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 22:10:07 +0100
>From: Markus Krieger <krieger at rz.uni-wuerzburg.de>
>To: samba at samba.org
>Subject: potential bug with hosts allow and hosts deny
>Message-ID: <38B44CAF.A4C7B5FF at rz.uni-wuerzburg.de>
>MIME-Version: 1.0
>Content-Type: text/plain; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>
>hello,
>when trying to allow or deny hosts the access to my samba server and
>testing
>the access with testparm i found the following irritating behaviour:
>
>both samba and testparm don't properly resolve names.
>When providing an unqualified hostname in "hosts allow", "hosts deny" or
>to testparm, then the name resolver obviously doesn't expand the name
>and
>retreive the correct ip.
>
>The problem concerns both samba 2.0.6 and pre-3.0.0 CVS from 23.02.2000
>with SuSE linux 6.3 on Intel x86
>
>example:
>
>i have a private network and within i have a samba server and a host:
>172.16.13.15 shadow00.private
>172.16.13.152 shadow12.private
>
>i've put the following line into my smb.conf
>
> hosts deny = 172.16.
>
>when i call "testparm hostname 172.16.13.152" the output is
>
> Load smb config files from /usr/local/samba21/lib/smb.conf
> Processing section "[homes]"
> Processing section "[printers]"
> Loaded services file OK.
> Deny connection from hostname (172.16.13.152) to homes
> Deny connection from hostname (172.16.13.152) to printers
>
>When i call "testparm hostname shadow12" i get
>
> Processing section "[homes]"
> Processing section "[printers]"
> Loaded services file OK.
> Allow connection from hostname (shadow12) to homes
> Allow connection from hostname (shadow12) to printers
>
>However i'm not able to connect to the service
>
>The problem gets worse, when i try to do something like
>
> hosts deny = shadow12
>
>(I.E. not providing a fully quallified name)
>
>Now i get:
>shadow00:~ # testparm hostname 172.16.13.152
> Load smb config files from /usr/local/samba21/lib/smb.conf
> Processing section "[homes]"
> Processing section "[printers]"
> Loaded services file OK.
> Allow connection from hostname (172.16.13.152) to homes
> Allow connection from hostname (172.16.13.152) to printers
>shadow00:~ # testparm hostname shadow12
> Load smb config files from /usr/local/samba21/lib/smb.conf
> Processing section "[homes]"
> Processing section "[printers]"
> Loaded services file OK.
> Deny connection from hostname (shadow12) to homes
> Deny connection from hostname (shadow12) to printers
>
>And most of all, i'm able to connect to the service!
>
>markus at shadow00:~ > smbclient -L shadow00
> added interface ip=172.16.13.152 bcast=172.16.255.255 nmask=255.255.0.0
> Password:
> Domain=[SAMBA] OS=[Unix] Server=[Samba pre-3.0.0]
> .
> .
> .
>
>when i supply the fully qualified hostname, the service is again
>unavailable,
>but testparm tells me the folowing:
>
> shadow00:~ # testparm hostname 172.16.13.152
> Load smb config files from /usr/local/samba21/lib/smb.conf
> Processing section "[homes]"
> Processing section "[printers]"
> Loaded services file OK.
> Allow connection from hostname (172.16.13.152) to homes
> Allow connection from hostname (172.16.13.152) to printers
>
> shadow00:~ # testparm hostname shadow12
> Load smb config files from /usr/local/samba21/lib/smb.conf
> Processing section "[homes]"
> Processing section "[printers]"
> Loaded services file OK.
> Allow connection from hostname (shadow12) to homes
> Allow connection from hostname (shadow12) to printers
>
> shadow00:~ # testparm hostname shadow12.private
> Load smb config files from /usr/local/samba21/lib/smb.conf
> Processing section "[homes]"
> Processing section "[printers]"
> Loaded services file OK.
> Deny connection from hostname (shadow12.private) to homes
> Deny connection from hostname (shadow12.private) to printers
>
>If you need further information, please contact me
>
>regards,
>markus krieger
>e-mail: krieger at rz.uni-wuerzburg.de
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 16:23:21 -0500
>From: eoporto at viragelogic.com (Ernie Oporto)
>To: <samba at samba.org>
>Subject: lower case forced on paths?
>Message-ID: <NDBBKCEHKMFLPNGFIELBAEGKCBAA.Ernie.Oporto at viragelogic.com>
>MIME-Version: 1.0
>Content-Type: multipart/mixed;
> boundary="----=_NextPart_000_0015_01BF7E1A.4D04C170"
>
>This is a multi-part message in MIME format.
>
>------=_NextPart_000_0015_01BF7E1A.4D04C170
>Content-Type: text/plain;
> charset="iso-8859-1"
>Content-Transfer-Encoding: 7bit
>
>I have the following setup in my smb.conf to access automounted partitions.
>It works for all cases except where there is a capitalized letter in the
>case:
>
> default service = default
> preserve case = yes
> short preserve case = yes
> default case = lower
> case sensitive = yes
># /auto disks
>[default]
> comment = automount partition
> path = /auto/%S
> read only = No
> guest ok = No
> browseable = no
>
>when I try to connect to something like \\samba\v8_C4_ss5 (note the caps) I
>am told in the logs that /auto/v8_c4_ss5 doesn't exist.
>Of course, it doesn't exist, but the capitalized version does, which is what
>was typed in the "Run..." dialog. Is there any reason that the case in the
>mount path is being altered? Is there any way for me to alter this other
>than renaming our mounts and messing up access for our engineers?
>
>-Ernie
>
>
>
>------=_NextPart_000_0015_01BF7E1A.4D04C170
>Content-Type: text/x-vcard;
> name="Ernie Oporto.vcf"
>Content-Transfer-Encoding: 7bit
>Content-Disposition: attachment;
> filename="Ernie Oporto.vcf"
>
>BEGIN:VCARD
>VERSION:2.1
>N:Oporto;Ernie
>FN:Ernie Oporto
>EMAIL;PREF;INTERNET:eoporto at viragelogic.com
>REV:20000209T194835Z
>END:VCARD
>
>------=_NextPart_000_0015_01BF7E1A.4D04C170--
>
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 16:25:58 -0500
>From: eoporto at viragelogic.com (Ernie Oporto)
>To: <samba at samba.org>
>Subject: phantom adm mount?
>Message-ID: <NDBBKCEHKMFLPNGFIELBMEGKCBAA.Ernie.Oporto at viragelogic.com>
>MIME-Version: 1.0
>Content-Type: multipart/mixed;
> boundary="----=_NextPart_000_001C_01BF7E1A.AA4066A0"
>
>This is a multi-part message in MIME format.
>
>------=_NextPart_000_001C_01BF7E1A.AA4066A0
>Content-Type: text/plain;
> charset="iso-8859-1"
>Content-Transfer-Encoding: 7bit
>
>We have an automounted partition called /auto/adm. When I try to connect
>with the following in my smb.conf, I get the server's local /var/adm mount
>instead of the location I really wanted. Is this a feature in samba that I
>might be able to disable?
>
> default service = default
> preserve case = yes
> short preserve case = yes
> default case = lower
> case sensitive = yes
># /auto disks
>[default]
> comment = automount partition
> path = /auto/%S
> read only = No
> guest ok = No
> browseable = no
>
>-Ernie
>
>------=_NextPart_000_001C_01BF7E1A.AA4066A0
>Content-Type: text/x-vcard;
> name="Ernie Oporto.vcf"
>Content-Transfer-Encoding: 7bit
>Content-Disposition: attachment;
> filename="Ernie Oporto.vcf"
>
>BEGIN:VCARD
>VERSION:2.1
>N:Oporto;Ernie
>FN:Ernie Oporto
>EMAIL;PREF;INTERNET:eoporto at viragelogic.com
>REV:20000209T194835Z
>END:VCARD
>
>------=_NextPart_000_001C_01BF7E1A.AA4066A0--
>
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 15:56:08 -0600
>From: Gerald Carter <cartegw at Eng.Auburn.EDU>
>To: mfoust at martinwilliams.com
>Subject: Re: newbie desperate for help
>Message-ID: <38B45778.D65C9827 at eng.auburn.edu>
>MIME-Version: 1.0
>Content-Type: text/plain; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>
>Matthew Foust wrote:
>>
>> \\SERVERNAME is not accessible. THe acouunt is not authorized ...
>>
>
>Matthew,
>
>Either enable plain text password authentication on
>(see NT4_PlainPassword.reg or the one for win2k
>depending on your setup) the NT box or enable password
>encryption on the Samba server (see ENCRYPTION.txt).
>
>
>
>
>
>Cheers,
>jerry
>________________________________________________________________________
> Gerald ( Jerry ) Carter
>Engineering Network Services Auburn University
>jerry at eng.auburn.edu http://www.eng.auburn.edu/users/cartegw
>
> "...a hundred billion castaways looking for a home."
> - Sting "Message in a Bottle" ( 1979 )
>
>------------------------------
>
>Date: Wed, 23 Feb 2000 14:57:50 -0800
>From: "whcc" <whcc at netscape.net>
>To: <mfoust at martinwilliams.com>,
> "Multiple recipients of list SAMBA" <samba at samba.org>
>Subject: RE: newbie desperate for help
>Message-ID: <NBBBJKGKIJNDFILCGKDPIEOODPAA.whcc at netscape.net>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="iso-8859-1"
>Content-Transfer-Encoding: 7bit
>
>Have you created an smbpassword file with the users that are allowed to
>access the user through Samba?
>
>-----Original Message-----
>From: samba at samba.org [mailto:samba at samba.org]On Behalf Of Matthew Foust
>Sent: Wednesday, February 23, 2000 12:27 PM
>To: Multiple recipients of list SAMBA
>Subject: newbie desperate for help
>
>
>I just installed Samba for the first time. Installed and setup like a
>dream. Unfortunately, I can't login to save my life. The server appears in
>the Net. Neighborhood, but when I double-click to login, the login window
>give the following message:
>
>Incorrect password or unknown username for \\SERVERNAME
>
>Entering a username and password (from /etc/passwd) returns:
>
>\\SERVERNAME is not accessible. THe acouunt is not authorized ...
>
>What am I doing wrong? Here is my smb.conf file:
>
>[global]netbios name = SERVERNAMEworkgroup = ITsecurity =
>user[newshare]comment = if you can read this you are too closepath =
>/usr/local/newshare
>writeable = yesvalid users = @developerslocking = yescreate mode =
>0664directory mode = 0775[devshare]comment = if you can read this you are
>too closepath = /usr/local/devsharewriteable = yesbrowsable = uesvalid users
>= @developerslocking = yescreate mode = 0600directory mode =
>0700[homes]comment = home directories for developerspath = %Hwriteable =
>yesvalid users = %Screate mode = 0600directory mode = 0700locking = no
>
>Matthew Foust
>Technology Manager
>Martin/Williams Advertising
>60 South Sixth Street, 28th Floor
>Minneapolis, MN 55402
>TEL (612) 340-0800
>FAX (612) 342-9700
>mfoust at martinwilliams.com
>
>
>------------------------------
>
>End of SAMBA Digest 2426
>************************
>
>
---------------------------------
Gian Paolo Valenza
---------------------------------
Centro di Calcolo
Dipartimento di Informatica
Universita' Ca'Foscari di Venezia
---------------------------------
More information about the samba
mailing list