Gacq: /* Force passwd change */

2009-11-09T19:42:45Z

‎Force passwd change

Gacq en 18:17 9 nov 2009

2009-11-09T18:17:37Z

192.168.0.105 en 18:15 27 jul 2006

2006-07-27T18:15:12Z

Página nueva

= Guias y documentos =
== Oficiales ==
*[http://www.samba.org/samba/docs/man/Samba3-HOWTO/ The Official Samba-3 HOWTO and Reference Guide]
*[http://www.samba.org/samba/docs/man/Samba3-ByExample/ Samba-3 by Example]
*[http://www.samba.org/samba/docs/using_samba/toc.html Using Samba, 2nd Edition]

== Otras ==
*[http://www.unav.es/cti/ldap-smb/smb-ldap-3-compat-howto.html Samba (v.3) PDC LDAP (compat mode) howto]
*[http://www.unav.es/cti/ldap-smb/smb-ldap-3-howto.html Samba (v.3) PDC LDAP howto]

= Integracion OpenLDAP y Samba =

== Seguridad en desktops ==

=== Windows ===

Mediante la utilización de Group Policies

A system policy can be used in a Windows NT domain as a remote administration tool for implementing a similar computing environment on all clients and limiting the abilities of users to change configuration settings on their systems or allowing them to run only a limited set of programs. One application of system policies is to use them along with mandatory profiles to implement a collection of computers for public use, such as in a library, school, or Internet cafe.

A system policy is a collection of registry settings that is stored in a file on the PDC and is automatically downloaded to the clients when users log on to the domain. The file containing the settings is created on a Windows system using the System Policy Editor. Because the format of the registry is different between Windows 95/98/Me and Windows NT/2000/XP, it is necessary to make sure that the file that is created is in the proper format. This is a very simple matter because when the System Policy Editor runs on Windows 95/98/Me, it will create a file in the format for Windows 95/98/Me, and if it is run on Windows NT/2000/XP, it will use the format needed by those versions. After the policy file is created with the System Policy Editor, it is stored on the primary domain controller and is automatically downloaded by the clients during the logon process, and the policies are applied to the client system.

On Windows NT 4.0 Server, you can run the System Policy Editor by logging in to the system as Administrator or another user in the Administrators group, opening the Start menu, and selecting Programs, then Administrative Tools, then System Policy Editor. On Windows 2000 Advanced Server, open the Start menu and click Run . . . . In the dialog box that comes up, type in C:\winnt\poledit.exe, and click the OK button.

=== Group policies ===
Samba supports some group policies. To do so, it must be acting as a PDC, or using winbind
that is pointing to a DC. This is because users must log on for the policies to be applied. See
3.12, “Setting up a Samba PDC” on page 71 and 3.13, “Setting up roaming profiles” on
page 75 for these two setups.

Samba supports:
*Roaming profiles and folder redirection
*Logon scripts
*NT 4 System policies

Samba does not support:
*Software distribution
*Rights management and other security-oriented features
*Desktop configuration and control

Samba-3 will support many more group policies.

Not available at this time - it requires tight integration with Active Directory, and that's a Samba4 issue. NT4 system policies are the best you can hope for with Samba 3.0.

System Policy Editor - poledit

== Definicion de GPOs en Windows 200x ==

=== nitrobit group policy ===

http://www.nitrobit.com/GroupPolicy.html

----
Explicacion de las politicas
*http://www.infopeople.org/resources/security/workstation/policies.html
*http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/PolicyMgmt.html
*https://adelie.ucs.ed.ac.uk/dstwiki/index.php/GPO

Notas:
*http://www.windowsitpro.com/SQLServer/Article/ArticleID/45614/SQLServer_45614.html
*http://www2.cio.com/analyst/report2346.html

=== Articulos relacionados a la integracion ===

Guias
*http://www.ldapguru.com/modules/mylinks/visit.php?cid=7&lid=80
*http://www.idealx.org/prj/samba/smbldap-howto.fr.html
*http://samba.idealx.org/
*http://g.unsa.edu.ar/trinidad/
*http://lucas.ok.cl/Tutoriales/doc-openldap-samba-cups-python/htmls/
*http://groucho.dsic.upv.es/cursos/Integracion/html/
*http://es.tldp.org/Tutoriales/doc-openldap-samba-cups-python/html/ldap+samba+cups+pykota.html
*http://aqua.subnet.at/~max/ldap/
*http://www.cxro.lbl.gov/comp_services/samba_ldap_pdc_howto.htm
*http://www.unav.es/cti/smb-ldap-3-howto.html

*[http://www.chivers.info/Samba3-OpenLDAP-slave-server-config.html Samba 3 / OpenLDAP Slave Server Configuration]

Notas:
*http://searchdatacenter.techtarget.com/originalContent/0,289142,sid80_gci1066308,00.html

= Samba configuration tips =

*In order to visualize correctly from a windows machine files containing french accents I use the following charset option in /etc/samba/smb.conf in the general section:

<pre><nowiki>
unix charset = iso8859-15
</nowiki></pre>

== Mounting a Windows share using a domain account ==
<pre><nowiki>
mount -t smbfs -o username=domain\\miusuario,password=mipass //192.168.124.1/public /mnt/public
</nowiki></pre>

== Browsear samba desde el nautilus ==
Para que funcione el smb:// hay que instalar
<pre><nowiki>
apt-get install libsmbclient libgnomevfs2-extra
</nowiki></pre>

= Errores =
= "smbfs: mount_data version 1919251317 is not supported" al montar un share =
Solucion:
<pre><nowiki>
apt-get install smbfs
</nowiki></pre>

@@ Línea 101: / Línea 101: @@
 == Force passwd change ==
   net sam set pwdmustchangenow <username> yes
 = Errores =

← Revisión anterior		Revisión del 18:17 9 nov 2009
Línea 100:		Línea 100:
	</nowiki></pre>		</nowiki></pre>

		+	== Force passwd change ==
		+	net sam set pwdmustchangenow <username> yes

Samba - Historial de revisiones

Gacq: /* Force passwd change */

Gacq en 18:17 9 nov 2009

192.168.0.105 en 18:15 27 jul 2006