[Samba] Re: samba 3 mandrake rpms...feedback

[Buchan Milne]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tim Jordan wrote:
> Hello again,
> I'm just getting back to testing your rpm builds for samba.
>
> Question: What kerberoes package are you using with your build?

The packages that ship with the specific distro (otherwise I would have
to provide them too ...). On 9.2, it's 1.3.x.

>
> I'm doing a wbinfo -u and getting all users in domains that my AD domain
> trusts and the local account but none from the domain I'm a Domain
> Member Server of.

Have you tried without the "winbind use default domain"? It might have
an effect ...

>
> I get the same result with getent passwd | grep /username/

And 'getent passwd' shows the domain users of the trusted domains? If
so, then winbind is working, so it may be a samba bug, you may want to
file a bug in samba bugzilla.

>
> I do have a kerberoes ticket for my domain.  I can log into a smb share
> on an XP workstation and 2K server...
>
> Here is my current smb.conf:
>
>
>>#======================= Global Settings
=====================================
>>[global]
>>
>># 1. Server Naming Options:
>>   workgroup = LABOR
>>   realm = LABOR.AK
>>   server string = Samba Server %v
>># 2. Printing Options:
>>   printcap name = cups
>>   load printers = yes
>>   printing = cups
>># This should work well for winbind:
>>  printer admin = @"Domain Admins"
>>
>># 3. Logging Options:
>>   log file = /var/log/samba3/log.%m
>>   max log size = 50
>>   log level = 3
>>
>># 4. Security and Domain Membership Options:
>>   security = ads
>>   password server = /IP OF PDC/
>>   encrypt passwords = yes
>>
>># 5. Winbind
>>   winbind uid = 10000-20000
>>   winbind gid = 10000-20000
>>   winbind use default domain = yes
>>   template homedir = /home/%D/%U
>>;  obey pam restrictions = yes
>>   template shell = /bin/bash
>>
>># 5. Browser Control and Networking Options:
>>   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>>   local master = no
>>   os level = 0
>>   domain master = no
>>   preferred master = no
>>
>># 6. Domain Control Options:
>>   domain logons = no
>>   add user script = /usr/sbin/useradd -s /bin/false '%u'
>>   idmap uid = 10000-20000
>>   idmap gid = 10000-20000
>>
>>
>># 7. Name Resolution Options:
>>   name resolve order = wins lmhosts bcast
>>   wins server = IP OF WINS SERVER
>>   dns proxy = no
>>
>>
>>#============================ Share Definitions
==============================
>>[homes]
>>   comment = Home Directories
>>   browseable = no
>>   writable = yes
>>
>>[printers]
>>   comment = All Printers
>>   path = /var/spool/samba3
>>   browseable = no
>># to allow user 'guest account' to print.
>>   guest ok = yes
>>   writable = no
>>   printable = yes
>>   create mode = 0700
>># =====================================
>># print command: see above for details.
>># =====================================
>>   print command = lpr-cups -P %p -o raw %s -r   # using client side
printer drivers.
>>
>>[print$]
>>   path = /var/lib/samba3/printers
>>   browseable = yes
>>   read only = yes
>>   write list = @adm root
>>   guest ok = yes
>>
>>[pdf-generator]
>>   path = /var/tmp
>>   guest ok = No
>>   printable = Yes
>>   comment = PDF Generator (only valid users)
>>   #print command = /usr/share/samba3/scripts/print-pdf file path
win_path recipient IP &
>>   print command = /usr/share/samba3/scripts/print-pdf %s ~%u //%L/%u
%m %I "%J" &


It looks fine, but I don't have a production network to test on at
present (I have a production box in a win2k network, but it's running
2.2.x and I won't be able to try samba3 on it any time soon).

Regards,
Buchan

- --
|--------------Another happy Mandrake Club member--------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x202
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/1iKYrJK6UGDSBKcRAguiAKCqNAD1NGt+jsmFW6dOLEcm4A2GygCdEZWR
pxgY6wiNwS5GFANRSZ3yARA=
=skI4
-----END PGP SIGNATURE-----