Re: [Samba] Add Printer Wizard

2003-10-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jerry Haltom wrote:

| I also can't seem to get the Add Printer Drivers wizard
| to work right. I followed the instructions in the 3.0 howto
| as best as I could. My samba "admin" user, is named "samba",
| he has a uid 0. It's stored in LDAP. It works for
| joining computers to the domain.
|
| I added "samba" to printer admin, and when I try to
| log into a Windows computer, as this user, and add a
| driver, I get: Access Denied.
an admin user may not be the same as a printer
admin.  Your message isn't clear on what is considered to
be an 'admin' user.
| I'm not sure what I'm being denied access too! This user has uid 0.

give me more details and we'll figure out what is going on.

| After setting all this up, can I expect queue's to
| be consistant? I need to see, in the Windows queue, unix jobs
| submitted directly to cups. On the cup's queue, I'd like to
| see window's jobs.
This works fine.  smbd does use an 'lpq cache time' since
we cache the queue listing along with some addition job
information.
| Also, can samba be made to spool to cups AS it's receiving
| from the client? We regularly print out 900 page jobs, which
| take 30 pages to print from the client to the server. If the
| client has to sit there and spool all 900 pages before
| the job can even start, we've doubled our print time! As
| of now, Windows will start printing INSTATLY upon receiving
| data from the client, this may be more like "buffering"
| than "spooling".
Samba cannot give the job to the printing system until the
client has spooled the entire job to us.  SOrry.




cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oRzNIR7qMdg1EfYRAnbNAKDNsTcM7nZbrBxVvVb/ilaA7CO1nACeJUBl
/lpTJhIkmgQPWbahlPZ+xp8=
=zgJT
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] linux and win2k: who is blocking whose messages?

2003-10-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:

| [2003/10/29 15:26:15, 0] lib/access.c:check_access(328)
|   Denied connection from  (192.168.0.4)
...
|hosts allow = 192.169.0.4, 192.168.0.3, 192.168.0.2, 127.
~   ^^^
You have a typo here.




cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oR1XIR7qMdg1EfYRAoUmAJwMeLk8BAcz2ZYEZ3hM2Dc6suceeQCfSU/2
l6BnumqH11bdmVEXjSlc4b8=
=XZ7g
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Account Management Tool TCL/TK GUI Beta?

2003-10-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Thiago Lima wrote:
|
| Samba-howto-collection mention in chapter 11 that
| there will be a new Account Management Tool written in
| TCL/TK that should (hopefully) be announced in time
| for Samba-3.0.1 release.
|
| As we are right now seeing the beta of 3.0.1,
| I would like to know if there's a beta of this tool,
| and if so where can I get it?
I think the developer working on it dropped off
the earth for a while.  Haven;t heard back from
him in several months.
Of course I could be thinking of another user manager c
lone that was being work3ed on.


cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oYIDIR7qMdg1EfYRAtV6AKDboIQQ9jnzW7fnl0ka631v2oFKuwCfdFsZ
C/GYYDebHlRU8R1oSuwtq/k=
=w3rW
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba3 backend ldap max groups..

2003-10-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
|
| This restriction comes from Linux (NGroup_Max : 32).
| Is this the only workaround, too recompile the kernel?
| Did samba support groupmember more then 32? Have someone
| a idee to manage this problem?
There is a possiblity to take the first 32 groups
and truncate the list for initgroups().  That's the
call that is failing.  Problem with this is that
can provide some random behavior.  Access works one
times and fails another session.
I think bumping the max groups up and recompiling is the
best solution, but then you might have to recompile your
entire system :-)  (well maybe just glibc but that's enough).


cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oYOcIR7qMdg1EfYRArL4AJ0XmRjS4ns2FleyQQmxbd2mvsisoACg7o91
w14KrWUFOnknqfqK1COcQA8=
=gWqL
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] net groupmap modify bug

2003-10-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kristyan Osborne wrote:
| Hi,
|
| After a successful upgrade from samba3alpha19 to samba3.0.1pre1 I am
now doing the group mapping stage.
|
| The problem I am having is modifying a group in the LDAP directory. I
| am using net groupmap modify ntgroup=staff unixgroup=staff
| type=domain.
I think this might have just been fixed in the CVS tree today.
If not let me know.


| [2003/10/29 17:21:39, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1615)
|   ldapsam_search_one_group: searching
for:[(&(objectClass=posixGroup)(gidNumber=203))]
| net: decode.c:500: ber_scanf: Assertion `(( ber
)->ber_opts.lbo_valid==0x2)' failed.






cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oYRWIR7qMdg1EfYRAodRAKC/w0mFNSe0EjKPXEDFJ5E7crIY6ACfQ97w
AoG51OQ/2yeuUFNwVvfpAJ8=
=smaD
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Winbind usage PDC and Domain menber ?

2003-10-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Alban Browaeys wrote:

| Should winbind run on a PDC ?
| all account are supposed to exists on it or be managed
| via add user/ add machine
wionbindd on a Samba PDC is only needed if the PDC
has established trust relationships.
| Is winbind recommended on a multi file services network
| (SMB+NFS+AFS+etc) and when ACL are used:
| from various it seems not , winbind get the name only
| from the PDC and set a random id in the idmap, so id differs
| on pdc and menbers, also between menbers
This can be corrected using the ldap backend for
winbindd.  It's not really well documented I'm afraid.
| ps: and does running winbind on a PDC could get it to
| map the user to two id on it : one static created at account
| genesis and the other when the PDC use getpwnam , getting
| the libc to call teh local wibind . It depend on the order of
| the "passwd" attributes in /etc/nsswitch but
| waht if the admin setted winbind before compat (or unix) ?
If I understand you correctly the answer is no.
Think of of like this.  On a Samba PDC, smbd is
authoritative for its own domain accounts (which
must be UNIX users by definition) and winbindd is
used to provide UNIX accounts for users and groups
from trusted domains.
| I also had a difficult case with a domain menber
| (samba+winbind) where a local user had the same name
| as the domain one: with "winbind use default domain"
| set to yes a conflict arise , is there a rational
| behind this behing default ?
And yet another reason for me to hate that parameter

| For pam:
| is the winbind domain separator , only for local domain menber
| usage , or should it be setted up same on the PDC ?
I don't understand your question here.





cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oYZ3IR7qMdg1EfYRAv31AKCCXzyDYwapiQLvkqXIN5vytnAExgCgrwAS
rgIX4qJr+caHW9/ka7rl33o=
=t1zz
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Account Management Tool TCL/TK GUI Beta?

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Thiago Lima wrote:
|   There's any user manager that has being worked on?
|   
|   The only one I know is the LAM (LDAP).
Dave Fenwick was working on a Tcl/TK port of
User Manager.  Used RPC rather than manipulating
account information directly.




cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/omjmIR7qMdg1EfYRAmQ5AJ9JSaAi52cp2tkgME+pIzB6vVZM6ACdGql1
NZf8ClVJw+TMsJjyb9wdfhE=
=I7PS
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] a share with a dot

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
| Hi,
|
| I created a share with a dot.
|
| ["corman.pub"]
|  comment = corman.pub
|  path = /rsrv/data1/corman.pub
|  read only = No
|  inherit permissions = Yes
|  inherit acls = Yes
|
|
| testparm says "no problem", but when i try to acces to this share, I
have a
| window wessage : "could not find network name " and in the log :
|
| [2003/10/31 12:08:50, 0] smbd/service.c:make_connection(850)
|   infspu (10.217.5.46) couldn't find service corman.pub
|
| It's a bug or a share cannot have a dot.
It's probably the quotes that are messing you up.



cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/om6WIR7qMdg1EfYRApY8AJ49ryAloQKh5OyNwJZ5i5m8M5qPsQCgloTc
QaZvS1nRkUt29GTugxKLyQ8=
=c/4Q
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Account Management Tool TCL/TK GUI Beta?

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Adam Williams wrote:
|>There's any user manager that has being worked on?
|>The only one I know is the LAM (LDAP).
|
|
| Directory Administrator -
| http://diradmin.open-it.org/index.php
|
| It works, now and months ago.
|
| Of course, what we really need is one that plays nice with site-specific
| data (doesn't munch attributes it doesn't recognize) and ideally one
| that is extensible via some kind of plugin or whatnot.  Large networks
| usually have equally complicated directory schemas.
Adam,

I just checked version 1.5 and it is still only supporting
the sambaAccount (2.2) schema.  Is there a CVS tree
somewhere?




cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/om/uIR7qMdg1EfYRAo3KAKCko7Ri7dKsgtsq9dJMeuVMAeLtNgCfWaxK
tzl28RhivF9cj/kxLrgResg=
=EExE
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Account Management Tool TCL/TK GUI Beta?

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Adam Williams wrote:
|>|  There's any user manager that has being worked on?
|>|  
|>|  The only one I know is the LAM (LDAP).
|>Dave Fenwick was working on a Tcl/TK port of
|>User Manager.  Used RPC rather than manipulating
|>account information directly.
|
|
| Awesome (using RPC that is).  Enought reason to grab the CVS code just
| to see an example of that.
He never uploaded anything to samba.org.  I'm not sure were he kept the
source he was working on.


jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/onUhIR7qMdg1EfYRAmUiAKCJafxMlfFLaYKUG4Qw4pe+QC7IEgCcCYLt
TrpXf2bpKbeCL54+UFb3iCM=
=MX4U
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] anonymous login successful

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Stefan Fokuhl wrote:

| Domain=[MYDOMAIN] OS=[Unix] Server=[Samba 2.2.3a]
| ...
|
| How can I get rid of this message, because it's betraying my OS and
| Samba version.
Edit the strings returned in reply_sesssetup_and_X().



cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oncdIR7qMdg1EfYRAnFiAJ9p4gSafZGIjGwlSOi39z+ctSyX+gCfQPyz
EZxs7OPnzsQi+BMu6GPTbMI=
=mJhQ
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Winbind help?

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Mike Ely wrote:
| Hi there.
|
| I've posted a couple of winbind-related queries to the group over the
| last couple of months, but have yet to get a reply.  I've read the
| official howto, as well as any other documentation I could get my hands
| on, but am at an end to my personal understanding.
|
| Is there a separate mailinglist for winbind users, or have I simply
| asked a question nobody knows the answer to?  (my last question was
| posted today).
No.  This is the right place.  Just been noisy lately.  I'll look at
your previous post next.


cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oqJhIR7qMdg1EfYRAp56AJ0fb0/I3hlYChPf3jls5Jhz/k7bawCg8hNQ
HCYCyzpT6RGiHUlFN+ts3Oc=
=/sEI
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba3 and cups printserver

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
| Hello,
|   I've got an rh9 box which i am using for printing. I've got cups
| configured and my printer is working fine. Originally, i intended to use
| samba 2.2.x for printing, but then i saw that 3.0 was out so i installed
| it's rpm instead. My first of many questions, for printing to work
| correctly, samba and cups, what must be specified in terms of the
| printing line in smb.conf, bsd or lpRNG?
Neither :-)

~printing = cups

(and make sure that smbd was compiled with cups support).

~   $ bin/smbd -b | grep -i cups
~  HAVE_CUPS
cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oqLMIR7qMdg1EfYRAjRjAJ4t1SboaiVYfau1iG+lx21g/RYUuQCgirkd
oLAmZmCHblff2xbtVY7oVFk=
=Gf5v
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cannot update Sun One DS directory with smbpasswd

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hoferer, Patrick K. (Space Systems) wrote:
| I can't update the users within our LDAP database using smbpasswd. I have
| attached the output from the smbpasswd debugger below:
...
| smbldap_search_suffix: searching for:[(&(objectclass=sambaSamAccount))]
| smbldap_open: already connected to the LDAP server
| ldapsam_getsampwnam: Duplicate entries for this user [hoferpa] Failing.
| count=4
| Failed to find entry for user hoferpa.
| Failed to modify password entry for user hoferpa
|
| Below is the LDAP entry for the user hoferpa:
|
| isun02$ ldapsearch -h isun02.sbirs.eng -b dc=sbirs,dc=eng -D
| "uid=sambaadmin,cn=directory administrators,dc=sbirs,dc=eng" -w abc123
| uid=hoferpa
| uid=hoferpa,ou=people,dc=sbirs,dc=eng
...
| objectClass=sambasamaccount
| userPassword=abc123
| sambaPrimaryGroupSID=S-1-5-21-3648157004-3289977631-1919091730-500-9027
| sambaSID=S-1-5-21-3648157004-3289977631-1919091730-500-823304
You got me.  Have you looked at an ethereal trace to
see exactly what the directory server is sending back to smbd?
What do you have set for the various 'ldap XXX suffix' lines in smb.conf?


cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oqLZIR7qMdg1EfYRArudAKDeai1J29va+xq4tvtb48kpJL0VpACeOYB1
Q423O96qy1s8XEfUFvFd+Nc=
=6tv4
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Permission Denied over Night

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Robert Bartl wrote:
| Hy,
|
| I've setup up a Samba 3.0.0 Installation for ~30 Users.
| Today i got a call that nobody could write to any File on the Servers.
| After restarting smbd and nmbd access was granted again.
| I didnt have time to try it myself but i saw in the logs afterwards that
| there were many Permission denied Errors, even on files/dirs that the
| user owned.
|
| Is this a known problem, or could i do something to find the exact cause ?
Have you tried 3.0.1pre1?  There was a bug fixed post 3.0.0 that
related to certain MS applications refusing to write to files.


cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oqLvIR7qMdg1EfYRAoeqAKCkasAoxbdZ9uwQiui3q/jQ7Ut3MwCgpFjJ
rQ1yaf3eXhx13uMGxLtq4rA=
=+gE2
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Winbind: can't log in as domain user

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Mike Ely wrote:

| Basic problem is that domain users can't successfully log
| into the linux box.  I'm trying to set this box up as
| an ltsp server authenticating against our existing AD
...

| [libdefaults]
| default_realm = LTSP.FOO.BAR
| dns_lookup_realm = false
| dns_lookup_kdc = true
Did you enable the DNS lookup during compile?  If so then you can get
rid of the [realms] section below.
|
| [realms]
| LTSP.FOO.BAR = {
...
| I can successfully join the domain using "net ads join -U username" and
| all that.  Net ads info looks right, and smbd, nmbd, and winbindd start
| up successfully at boot (although winbindd shows up twice when I do "ps
| -ae | grep winbindd").
winbindd shoulod show up twice by default (in 3.0).

| kinit [EMAIL PROTECTED] works as it should, I think.  I get
| prompted for a password, and then klist shows the ticket, although the
| following also shows up with klist
|
| Kerberos 4 ticket cache: /tmp/tkt0
| klist: You have no tickets cached
That's fine as well.

| wbinfo -u shows all my top-level users, and wbinfo shows all my
| top-level groups - anyone in a secondary OU is not visible to wbinfo -
| problem 1.
How are the users/groups laid out in AD?

| Now, as root, I can change users to any domain user I want to without
| entering a password, using, for example:
| su LTSP+fred
| and "whoami" returns the correct value.  However, if I log in as a local
| non-root account and try the same thing, or if I attempt to connect
| remotely using "ssh -l LTSP+fred" I get a failed password error even
| though I'm using a known-good password for that account.  BIG problem #2.
Have you setup pam_winbind.so ?

| I'm sure there's something simple that needs to be changed and all will
| suddenly Just Work.  Once that happens, perhaps someone could answer
| this: how do I automatically map the home directory of a domain user to
| their AD-defined home directory (//ltsp-fs1/staff/fred <-->
| /home/LTSP/fred, for example)?  I want to have no local storage for
| domain users on the linux box.
See pam_mount.so and smbfs (or patches for the newer cifsvfs).





cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oqMAIR7qMdg1EfYRAmjYAJ9nlN/TjGltrXHdiIOV7Zt6MFIJRgCdEyX0
u9O/L9HZ/c6nYLURfzbilAE=
=aHTM
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Winbind usage PDC and Domain menber ?

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jérôme Fenal wrote:
| Gerald (Jerry) Carter wrote:
|
|> -BEGIN PGP SIGNED MESSAGE-
|> Hash: SHA1
|>
|> Alban Browaeys wrote:
|>
|> | Is winbind recommended on a multi file services network
|> | (SMB+NFS+AFS+etc) and when ACL are used:
|> | from various it seems not , winbind get the name only
|> | from the PDC and set a random id in the idmap, so id differs
|> | on pdc and menbers, also between menbers
|>
|> This can be corrected using the ldap backend for
|> winbindd.  It's not really well documented I'm afraid.
|
|
| Wow, had not seen that. Cool.
| I've just had a look at the documentation, it should be
| ok, but would just need the schema used, and some example
| of association (LDIF format).
The schema is included in exampls/LDAP/samba.schema
You don't have to create the entries.  winbindd will do
that for you.  You just need to make sure that the 'ldap idmap suffix'
is set correctly and exists in the DIT.
If you get stuck, let me know and I'll dig up some
more information for you.
| (I have not looked at the code) Is it using the posixAccount schema ?
| (my idea is to get the answer here, then on the Web via mail-archives ;-)
|
| Could it use a part of an AD LDAP server ? (in the context of an
| NT4-compatible DC ADS)
Not currently but Luke Howard @ PADL has written an AD
plugin for winbindd that you could use.  Check http://padl.com/.




cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oqMPIR7qMdg1EfYRAh08AJsFnJTx8Uz7fl6ptd8xm8CfQku/KgCePZ8N
0rCxvBrLOUUzYIdABwWsg6Q=
=Rh3c
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0 - ldap backend and idmap?

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
John H Terpstra wrote:

The passwd backend is a separate issue from the idmap backend. Of you will
never need more than just a PDC, then there is no compelling reason to
store idmap backend in an ldap database.
On the other hand, if you do need more than a single Samba PDC (ie: PDC
and one or more BDCs) and you need consistant UID/GIDs across the whole
network, then an idmap backend in ldap is a must.
Domain member server would need consistent SID<->uid mapping as well.
But remember that on a Samba PDC, winbindd is only useful mapping 
users/groups from trusted domains (not its own).



cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."
--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oqVfIR7qMdg1EfYRAvWuAJ9slzLLfRmq9UXdOQDl0Mv3rWihcwCgyjcx
xPZVZyErZcw0DWddCdyKFo8=
=0czf
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Winbind Issues in Samba 3.0.0

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Clay wrote:

On SambaFS1 now running 3.0.0 with winbind

I issue smbclient -L localhost -U (any domain member name) and get 
NT_STATUS_NO_LOGON_SERVERS
Look at the level 10 debug log from winbindd on the file
server and see why it reported that error.


cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."
--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oqv6IR7qMdg1EfYRAp6IAJ9SGxUgUVhknb1/BT3W8cLS1PqRpACffc+2
xKhywTVrx0YXGsk00NPwZu0=
=rifx
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0 in ADS

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Lewis Edward E wrote:
How do I connect a Samba3.0 server to a OU in  ADS ?? For example I 
> only have privilege to connect machines to OU test  which
> belongs to corp.domain.com.
You can define an OU to use with the net command when
joining the domain IIRC.




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."
--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oqw+IR7qMdg1EfYRAm9vAKCJQeY/EhXdhe6sD/kSfRECm6VchQCgvRuq
y/ljwwp/P77eDC6eJYfbcN8=
=hQ8z
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Bug or local Problem?

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Reinartz, Ralf wrote:

This weekend Winbind crashes with:
our bug.  Can you help me know how to reproduce it?
I fixed a bug similar to the backtrace you posted but
i can't remember if it was in 3.0.0 or post 3.0.0 release.


cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."
--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oq1FIR7qMdg1EfYRAvYoAKDMH2FQmlLFaoPJRGB7Wh3IDjSWlwCfRcl5
JWYG9cNahW/kpiT6Ky222dA=
=Yroz
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cross Realm Support

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Wachdorf, Daniel R wrote:
I am doing some testing in Samba 3.0.  I am using security=ADS.

I am wondering if Samba has any support for cross-realm trust.

For example, I have one AD forest SANDIA.GOV that has trust with
SANDIA2.GOV.  I have the Samba server on linux.sandia2.gov.  I have a local
user account on linux.sandia2.gov called user.  When I log into a win2k
client as SANDIA2.GOV/user and connect, it works fine.  When I log on to a
win2k box in SANDIA.GOV with the account SANDIA.GOV/user I can't connect.  
The log file displays:
	Username SANDIA.GOV\user is invalid on this system.

I am obtaining all the necessary Kerberos tickets.

Is there a way to map users from a trusted realm into a local account?
Thsi was fixed post 3.0.0 and is in the current SAMBA_3_0 cvs tree.



cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."
--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oq2qIR7qMdg1EfYRAp1EAKCVJ21l3MfkiDTOpaD9A87z9z6ZdwCgnqZj
7PexOwWPo5Ankum85ZXN53Y=
=NoUK
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] What may be causing these errors?

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tom Dickson wrote:
knorr smbd[5439]: [2003/10/31 10:27:02, 0]
lib/util_sock.c:get_socket_addr(919)
knorr smbd[5439]:   getpeername failed. Error was Transport endpoint is
not connected
knorr smbd[5439]: [2003/10/31 10:27:02, 0]
lib/util_sock.c:write_socket_data(388)
knorr smbd[5439]:   write_socket_data: write failure. Error = Connection
reset by peer
knorr smbd[5439]: [2003/10/31 10:27:02, 0] 
lib/util_sock.c:write_socket(412)
knorr smbd[5439]:   write_socket: Error writing 4 bytes to socket 5:
ERRNO = Connection reset by peer
knorr smbd[5439]: [2003/10/31 10:27:02, 0] lib/util_sock.c:send_smb(584)
knorr smbd[5439]:   Error writing 4 bytes to client. -1. (Connection
reset by peer)

Are these standard errors that can be safely ignored, or are they
critical? They're appearing in /var/log/messages.
Check for bad network hardware such as hubs, switches, or NIC's.



cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."
--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/oq5nIR7qMdg1EfYRAl3KAJwPFMI4y2jLWLeC8qsdSNo+sNN30wCeIVTE
+wbgP7ftB6m2dZ1rpJuP43A=
=7z06
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba3 and cups printserver

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ken Walker wrote:
| smbd invalid option --b
|
| and -b isnt in man smbd
|
| ?
Soirry that's a 3.0ism.  I should have paid more
attention to your mail.  Just run ldd against smbd
and look for libcups.so


cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/orXoIR7qMdg1EfYRAsMsAKC5ooJa6h/AzIsqNsgayOOqy37tBgCfWCb8
tH5mb7+MYyrtr3HtNfC50YU=
=Xywl
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] about samba 3.0.1

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Andrés Ricardo Almanza Junco wrote:
|
| hello
|
| Srs
|
| could you tell me when samba 3.0.1 was estable
Sometime during November probably.



cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/orYAIR7qMdg1EfYRAlbeAJ9egOVRKnkcH54ZrzCErfep9bkZEwCfWR2x
aFdFb7myWlxdvbyMZsQUoQc=
=qBYT
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] PATCH to Samba 3.0.0 to allow interactive --set-auth-user for wbinfo

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tom Dickson wrote:
| This patch is against samba-3.0.0beta3 (tested), but will also apply
| correctly to 3.0.0 (release)
|
| It makes wbinfo ask for a password if there is no password on the
| command line.
|
| So:
|
| wbinfo --set-auth-user=Administrator
|
| Will make it prompt
|
| Password:
Got it.  Thanks.



cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/osbOIR7qMdg1EfYRAk/kAKCjtCiKcygF4p1flI9k7TtRrX3KzgCg21VH
AX3nD3SMdYC3LTclqTbKd9Y=
=qXWk
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Win2K or Samba Caching?

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Robert Rati wrote:
| I have a PDC that is Samba 3.0 setup to talk to an OpenLDAP server for
| authentication, and I was able to get a user to log in to a Windows 2000
| machine on the domain.  Then I tried adding additional users, but none
| of them could log in.  So I tried deleting the admin user from the LDAP
| database, but the user could still log into the Windows 2000 machine.
| Then I tried stopping the LDAP database completely, and while it took
| the Windows 2000 machine a long time to attempt to authenticate, the
| user could STILL log into the machine.  Does anyone know if Windows 2000
| or Samba 3.0 do any user/authentication cachine?  Is there any other
| explanation for this?
The windows client is cachign the logons.  It's controlled by a
registry key.  CacheLogonsCount or something like that.
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/ose7IR7qMdg1EfYRArzwAJ9LLVP/2bLEnSTVfpTBGCKJFf6T1ACfYA2i
9I/PWLatuDSG/yZAtkd+esw=
=srxm
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [patch] Samba 3.0.1pre1 : unable to link tdbbackup on Solaris 9

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jérôme Fenal wrote:
| Hi to all,
| On Solaris 9 (and below I think), Samba 3.0.1pre1's tdbbackup now
needs snprintf which is not included in Solaris.
| The following patch on master Makefile.in (~samba/source) should ease
the compilation of tdbbackup :
| diff -u Makefile.in.orig Makefile.in
| --- Makefile.in.origMon Oct 20 11:06:54 2003
| +++ Makefile.in Mon Oct 20 11:07:09 2003
| @@ -629,7 +629,7 @@
|  POPT_OBJS=popt/findme.o popt/popt.o popt/poptconfig.o \
|popt/popthelp.o popt/poptparse.o
| -TDBBACKUP_OBJ = tdb/tdbbackup.o tdb/tdbback.o $(TDBBASE_OBJ)
| +TDBBACKUP_OBJ = tdb/tdbbackup.o tdb/tdbback.o lib/snprintf.o
$(TDBBASE_OBJ)
|  NTLM_AUTH_OBJ = utils/ntlm_auth.o $(LIBSAMBA_OBJ) $(POPT_LIB_OBJ) \
| libsmb/asn1.o libsmb/spnego.o libsmb/clikrb5.o
libads/kerberos.o \
| It should be included in the case snprintf is absent from the system,
but it's done
| this way with other binaries.
This has been fixed in the CVS tree thanks.

cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/osn1IR7qMdg1EfYRAgeVAKCYBklUnGbUZz+NMMKDXo9QAi1HfwCg5sws
I7NTYzgfotfAkNnePl6m4x8=
=ujRy
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] wrong ACL on domain members

2003-11-03 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Thomas Otto wrote:
| Hi List!
|
| I have a share on an samba3 domain member (fileserver). The PDC is
| samba3 also.
| If i look on the file permissions with the explorer for shares on the
| PDC the owner is like MYDOMAIN/user.
| But if i look on the shares from my samba domain member (fileserver)
| they will be FILESERVER1/user. How can i change this to MYDOMAIN/user
| automatically for every share. this seems important for profiles and
| some backup programms.
| security = domain is set on the member server.
I'm working on this.  It has already been filed here:

~   https://bugzilla.samba.org/show_bug.cgi?id=680



cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/pnXzIR7qMdg1EfYRAiipAJ0fyL33gu+pfFYWTh/1I7RYXm7h+QCfdM+3
ZPRGQFo1xPcew+jCHZhYYSs=
=UgWx
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0 PDC and Group Listing on Samba Winbind Box

2003-11-03 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
T'Krin wrote:
|
| I setup a Samba 3.0 PDC using smbpasswd for authentication
| on a Mandrake 9.1 system.  (I will be looking at LDAP later.)
| I have also setup another linux box to use winbind and get
| user and group listings from the Samba PDC.  My problem
| is that no groups from the PDC get listed on the winbind box.
groups from a Samba PDC are only available if they have
a group mapping entry.


cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/pnfFIR7qMdg1EfYRAgy1AKCw1TGIPuEdse3iUfBpKsps9KI7swCfdpNW
bCLScphxtSJJN1k9StgQXk4=
=2/ub
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cannot find monthly digests

2003-11-03 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
a13 wrote:
| Hello rsync gurus,
|
| Pardon my ignorance but I am trying to find out the
| appriopriate URL in order to fetch old mailing lists.
| Several months ago I could easily navigate to the requested web
| page and fetch archived postings one month at a time.
| Will somebody give me a hint ?
See the Mailing lists page on http://samba.org.



cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/pnhCIR7qMdg1EfYRAq0YAJ9j9M6Lre5KP6AWjTGpXfHcih4B9ACgkRrC
CklPBF2/nDkMebMM6eilpCw=
=v9hF
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Winbind Issues in Samba 3.0.0

2003-11-03 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Clay wrote:
| Jerry,
|
| Hey thanks for the reply
|
| I am currently using Samba 2.2.8a on a slackware 9 box , both the PDC and
| the winbind computer. I have not done any of the pam stuff.
|
| But when I started up the 3.0.0 on each box, attached is part of the
winbind
| log at level 10, when I attempt to attach to the localhost using users on
| the PDC...ie smbclient -L localhost -U ckinney
|
| [2003/10/26 20:16:38, 3]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263)
|   [30739]: pam auth crap domain: PDC user: ckinney
| [2003/10/26 20:16:38, 2]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379)
|   NTLM CRAP authentication for user [PDC]\[ckinney] returned
| NT_STATUS_NO_LOGON_SERVERS (PAM: 4)
The failure to find the PDC is earlier in the log.
This snippet doesn't tell us much.  Sorry.


cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/pni0IR7qMdg1EfYRArkYAJ9EuYCiYziyhN4SPr6dcvVQbNZrjwCgjHXr
Fg831tU3TRcqq9HbHhJGlLc=
=AhAW
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Winbind Issues in Samba 3.0.0

2003-11-03 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Clay wrote:
| Jerry,
|
| Hey thanks for the reply
|
| I am currently using Samba 2.2.8a on a slackware 9 box , both the PDC and
| the winbind computer. I have not done any of the pam stuff.
|
| But when I started up the 3.0.0 on each box, attached is part of the
winbind
| log at level 10, when I attempt to attach to the localhost using users on
| the PDC...ie smbclient -L localhost -U ckinney
Wait...is localhost the domain member or the Samba PDC?

| [2003/10/26 20:16:38, 3]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263)
|   [30739]: pam auth crap domain: PDC user: ckinney
| [2003/10/26 20:16:38, 2]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379)
|   NTLM CRAP authentication for user [PDC]\[ckinney] returned
| NT_STATUS_NO_LOGON_SERVERS (PAM: 4)
Is PDC the name of your domain?





jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/pnkGIR7qMdg1EfYRAgPJAJ0T7y6/CTyRUmOJZcoNoOOi9Xhc9wCfXXiw
pPB0pioCGJjnGBI3+idBVUg=
=9FRz
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba-3.0.1pre1 and LDAP

2003-11-03 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kristyan Osborne wrote:
| Hiya,
|
| I have recently upgrade samba to 3.0.1pre1 from alpha3-19. The
| upgrade went well with no real problems, except .
|
| I have noticed today that the load on the LDAP server is
| extremely high. CPU usage on slapd is anywhere between 10%-80%.
| At one point to day everything came to a grinding halt. The
| only difference between I can think of is the samba upgrade.
| This is with an average load of about 300 users.
Check you indexes on the OpenLDAP server.
Look at the searches being made.  Make sure you
are indexing the rigth attributes.
Also see the OpenLDAP FAQ (http://www.openldap.org/)
for details on tuning bdb backends.  Limit regex's
in slapd.conf ACLs as well.




cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/pokBIR7qMdg1EfYRAnmRAJ93GJTyE3/PBYRVIkedA3NltsyMkwCglP/n
yiZ0S9fqpJ5U1bFFgbqof4Y=
=VOHL
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] upgrade 2.2.8a -> 3.0 Debian DOS long filename problem

2003-11-03 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Daniel Zeiss wrote:
| Hi,
|
| I tried to upgrade from Samba 2.2.8a to 3.0.
|
| It worked generally speaking fine and speed went up tremendously,
|
| BUT
|
| since then the DOS conversion of long file names is freaking me out.
|
| Using long file names produced a readable short version plus ~1 oder ~x.
| where x stands for a number.
|
| now long file names produce some cryptic 8 letter name plus extension.
| listing in a DOS box additionally shows the correct long name in the far
| right column, but DOS programs like word6 just get the cryptic name.
|
| Is this a result of new Samba 3.0 or Win98? Is it fixable or do I have
| to live with that?
See 'mangling method' in smb.conf(5).  The default in 3.0 was
changed from hash to hash2.


cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/polCIR7qMdg1EfYRApI6AKCu7co1K+taBzEI+LbZz9+eO6f8HgCg9EAS
Ow9gIxPMnSeWKlqwfSlzx2c=
=1MkB
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba-3.0.1pre1 and LDAP

2003-11-03 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kristyan Osborne wrote:

| The index's I have are uid, uidNumber, gidNumber,
| cn, objectClass, default  eq
I would add

	include		sambaSID	eq

and rerun slapindex.

| when I start slapd with debug level 2, I can see a lot
| of searches  for users and a hell of a lot of searches
| for groups. These happen virtually every second.
posixGroup? or sambaGroupMapping?





cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/po3SIR7qMdg1EfYRAuHxAJwLgytxOeIm8zqdj+Aun6D5bba9lACcCZjv
MJ/wbsMFrY+NOOPzRgSwdwQ=
=8Wc7
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind and getent ...

2003-11-05 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
C.Lee Taylor wrote:

   I have got my ADS/Win2K3 system and Samba3 using winbind.  I am able 
to do getent passwd, which returns users out of ADS.

   My problem is that I wish to have a Samba box at a remote location, 
which I currently have, using user accounts stored in LDAP, but have not 
choice but to move to ADS based users because of a Citrix application 
which we are not able to get to work with Samba and LDAP based accounts.

   If I enable domain logons, getent passwd returns only local accounts, 
not ADS based account, plus, I have also seen that if I set winbind 
trusted domains only = yes, then getent passwd also stops working.

   Now I am sure, I read somewhere, that you can't use winbind and 
domain logons, but I am hoping somebody might be able to give us better 
idea.
In Samba 3.0, winbindd should be used on a Samba PDC in order
to handle users/groups from trusted domains.


cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/qUXIIR7qMdg1EfYRAnGZAJ914DrS54QT/3NDgpMZqt15UbD1dgCdF4uu
t6wBar8oQmh4vBMvI3UqUSI=
=fCbA
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Solaris, Samba-3.0.1pre1 Compile error

2003-11-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jeff Gardiner wrote:
| Hello all, I currently run Samba 3.0 on a Solaris 9 machine in a
production
| environment.  I'm happy with it.
|
| I tried compiling samba-3.0.1pre1 using ./configure --with-ldap=no.
|
| However when it gets to linking bin/tdbbackup it fails.  This is the
error it
| gives:
|
| Using FLAGS =  -O -I./popt -Iinclude
| -I/scratch/build/samba-3.0.1pre1/source/include
| -I/scratch/build/samba-3.0.1pre1/source/ubiqx
| -I/scratch/build/samba-3.0.1pre1/source/smbwrapper  -I.
- -D_LARGEFILE_SOURCE
| -D_FILE_OFFSET_BITS=64 -I/scratch/build/samba-3.0.1pre1/source
|   LIBS = -lsendfile -lsec -lgen -lresolv -lsocket -lnsl -ldl
|   LDSHFLAGS = -G  -R/usr/lib
|   LDFLAGS = -R/usr/lib
| Linking bin/tdbbackup
| Undefined   first referenced
|  symbol in file
| smb_snprintftdb/tdbback.o
| ld: fatal: Symbol referencing errors. No output written to bin/tdbbackup
| collect2: ld returned 1 exit status
| make: *** [bin/tdbbackup] Error 1
|
|
| I've made clean a number of times to ensure it wasn't a dirty build.  Can
| anyone provide any clue.  I can post smb.conf info if need be, but I
don't
| think that influences the build.
This was our bug.  It's already been fixed in CVS.



cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/ql61IR7qMdg1EfYRAmahAKCnhmLfGBUatRKQXoLpwy/OPmPMrQCg3hbf
SO5OQQhPSn73ztv9rOu0VD8=
=vDhU
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind and getent ...

2003-11-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
C.Lee Taylor wrote:

|> In Samba 3.0, winbindd should be used on a Samba PDC in order
|> to handle users/groups from trusted domains.
|
|
|Okay, so if I understand what you are get at, is that I should setup
| an AD domain, make my Samba server belong to another domain and the
| Samba domain trust the AD domain, that way I get the AD users in my
| Samba domain, which will let me use domain logins, which is the big
| thing I am missing with Samba acting as a "Server role:
| ROLE_DOMAIN_MEMBER" ...
|
|Does this sound right?
Basically yes.



cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/qmTyIR7qMdg1EfYRAplhAJ90o4zskFWE1gCXNPnlNfozvR2GrQCgiv7G
4Cik4ZuOf5Boo9ILOv7wXVM=
=+0vD
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdbedit and ldap

2003-11-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dustin Rue wrote:
| I'm running RedHat Linux 9 and downloaded the RPM available from
| samba.org using LDAP as the back end.  So far I've found I can add and
| edit users but I can never delete them.  I always get an error referring
| to account requires uid attribute...
This is a bug I've been trying to get to.  Please log a bug in
bugzilla.samba.org.  Thanks.


cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/qmkqIR7qMdg1EfYRAiQfAJ0VfPRCT2AjhETGROhB3A7nfEa4EwCfcqGp
QIQpu24pt3Urrk1RoKtj1Xs=
=WAW3
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] strange error-report in smbd.log

2003-11-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
peter grotz wrote:
| Hi,
|
| I found the following strange report in smbd.log (using
Samba3.0.1pre2cvs):
|
| [2003/11/05 10:10:49, 0] lib/util_str.c:safe_strcpy_fn(577)
|   ERROR: NULL dest in safe_strcpy
| [2003/11/05 10:10:49, 0] lib/util_str.c:safe_strcpy_fn(577)
|   ERROR: NULL dest in safe_strcpy
| [2003/11/05 10:10:49, 0] lib/util_str.c:safe_strcpy_fn(577)
|   ERROR: NULL dest in safe_strcpy
|
| Can anyone help me? Is this all serious?
This has been fixed in CVS already.   It is caused by a
NULL printer device mode.  See the chapter on printer driver
download in the howto collection about initializing the driver
(or use 'default devmode = yes' as a last resort).


cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/qnPYIR7qMdg1EfYRAjccAKC0nGtQB+Jh/R4Wjb9o5sFRKGrw+ACdHuwb
i5l1tJozRcP1n8X9yur0ohE=
=Hjt6
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Samba 3.0.1pre1 winbind / getent problems

2003-11-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
C.Lee Taylor wrote:

|> When i try a "getent passwd" or "getent group", i don't
|> have the windows users.
|
|
| I had a same problem, and found that if I had "winbind trusted
| domains only = yes" or "domain logons = yes" then "getent passwd" would
| not work, change them both to "no" and it work fine ...
|
| I looked at you confs, but did not see this options.  Do a "testparm
| -v -s|less" and see if these are set.
|
|  I have ask the list if this is by design, but have not get a direct
| answer.
Yes.  It is by design.

'winbindd trusted domains only' is meant ot be used on
domain members where you already have UNIX entities matching
the users/groups in the domain.


cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/qnRAIR7qMdg1EfYRAtvfAJ9TKR0WeL9DzXFRcSbi304hD3oBeACg3NnY
41yZmrhQcILpFL+3UPA0ug8=
=qbVb
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Winbind + LDAP Idmap backend finally running!

2003-11-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Bernd Waldboth wrote:
| After many hours of trial and error I finally managed to get my Winbind
| server with Ldap Idmap backend up and running. I even had to go through
| parts of the sources but finally I found out what the reason was why my
| LDAP db never was updated.
|
| The problem was that at some point the uid/gid to sid mapping function
| referred to the "ldap idmap suffix" and at other times to "ldap group
| suffix" entries in the smb.conf (the exact name of the function is
| ldap_get_id_from_sid).
|
| The solution was to point both "ldap idmap suffix" and "ldap group
| suffix" (and to be sure also "ldap user suffix" and "ldap machine
| suffix") in the smb.conf to the desired idmap ou. I don't know if this
| was the desired behavior or not.
|
| Another thing I found out was that I had to remove the "ldap suffix"
| entry.
|
| I hope I could help someone with the same problem.
Would you mind trying the patch got bug #680
at https://bugzilla.samba.org/ and amke sure it doesn't
break things for you?
I'm about to change something here but I want to get some
testing on it first.


cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/qsU2IR7qMdg1EfYRAiI0AKC1km4v78bSwzQPE6Rko++rYKqaEgCfY2me
LPLqkHyHIZDTAEef87LZh2g=
=9DoO
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] idmap + ldap + nsswitch +winbindd

2003-11-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Matt Pusateri wrote:
| Hello,
|
| I have a couple of questions regarding group mapping.
| I am working on configuring Samba 3.0.0 on FreeBSD with
| LDAP support.
|
| 1. Am I correct in that winbindd needs nsswitch to work?
| If so I would need to run FreeBSD 5.1 and not FreeBSD
| 4.x so that I had NSSwitch support.
The general answer is yes.

| 3. If I don't need NSSwitch for Domain group
| functionality. Do I need to store groupmaps in
| LDAP or can I store users in LDAP and groupmaps
| in the winbindd_idmap.tdb?
group mappings can be stored locall in
group_mapping.tdb.  Winbindd is not
required for Samba 3's group mapping feature.


cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/qtSHIR7qMdg1EfYRAkrDAJ0dQqAow6rkxfr9N/lMYHCbeOxykgCePfb/
+lc00+HYmZUIZ+0nPMwaYCg=
=ypx2
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Winbind seems to have hosed my roaming profiles

2003-11-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Douglas Phillipson wrote:

| The next time I logged in on a client, I got the message that it
| couldn't create my profile on the DC.  I remove the existing profile
| from /home/profiles/ expecting it would recreate it but got
| the same message.  As soon as I commented out the above entries
| everything went back to normal.  I'd heard that winbind usually makes
| things better.  What's happening here???  Should I have made my samba
| and Linux users AFTER adding winbind?  I'm still not sure winbine is
| applicable in my situation because I have NO other real MS Domain
| Controllers.  Please advise...
Need more details.  Take a look at the log files.



cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/qxEYIR7qMdg1EfYRAtufAKC2Ipn3wP6a2k/B/jjT66S9hEF4NACeP20Y
H//7cUOc+ItqKGm4Qwdqgi8=
=nAYB
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3 still doesn't work - build errors (details)

2003-11-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ron Gage wrote:

| Besides spewing a ton of warnings about "/usr/include/compat.h:6:2:
warning:
| #warning "This header is obsolete, use ap_compat.h instead", it died when
| building the smbd server.
This has been fixed in CVS.  Remove the #include 
line from includes.h
| linking bin/smbd
| /usr/lib/libkrb5.a(cc_file.o)(.text+0x1d90): In function
| `krb5_fcc_generate_new':
| /root/samba/krb5-1.3.1/src/lib/krb5/ccache/cc_file.c:2063: warning:
the use of
| `mktemp' is dangerous, better use `mkstemp'
This is a MIT krb5 warning, not ours.

| tdb/tdbutil.o(.text+0x103a): In function `tdb_search_keys':
| tdb/tdbutil.c:791: undefined reference to `ap_fnmatch'
| collect2: ld returned 1 exit status
| make: *** [bin/smbd] Error 1
This will be corrected by removing the header include.





cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/qxa+IR7qMdg1EfYRAh++AKCsLodGTj6ifn75oo7EImJW8UdcxQCcCTgK
hVmTPvkkAXYGs/fRkJwPRCM=
=cdyS
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] General installation question: mksh error

2003-11-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Louwtjie Burger wrote:
| Here is the last output from the make install command:
|
| Installing bin/readonly.so as /usr/local/samba/lib/vfs/readonly.so
| Installing bin/cap.so as /usr/local/samba/lib/vfs/cap.so
| Installing bin/CP850.so as /usr/local/samba/lib/charset/CP850.so
| Installing bin/CP437.so as /usr/local/samba/lib/charset/CP437.so
| ./install-sh -c bin/libsmbclient.so /usr/local/samba/lib
| mksh: Fatal error: Cannot load command `./install-sh': Bad file number
| Current working directory /tmp/samba-3.0.0/source
| *** Error code 1 (ignored)
| : bin/libsmbclient.a /usr/local/samba/lib
| ./install-sh -c /tmp/samba-3.0.0/source/include/libsmbclient.h
/usr/local/samba/include
| mksh: Fatal error: Cannot load command `./install-sh': Bad file number
| Current working directory /tmp/samba-3.0.0/source
| *** Error code 1 (ignored)
~ $ chmod 755 install-sh

This was a bug in the packaging of 3.0.0 and was correct in 3.0.1pre1.





cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/qxSFIR7qMdg1EfYRAhP6AKCa/N9cM0R1SwuAznHzAVY6VGyhPACgoKSm
4NdG2o58Md1U0H0YdvUWmTk=
=s/9V
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Need help setting up a Samba 3.x Backup Domain Controller with LDAP

2003-11-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Travis L. Bean wrote:

|   From the man page and Samba how-to documentation,
| I understand this "idmap" reference to only be used
| for member servers and backup domain
| controllers that don't have their own "passdb"?
All BDC's must share the same passdb backend as the PDC.
winbindd is only needed on a DC to handle trusted users/groups.
| So when you setup the reference in the Backup Domain
| Controllers smb.conf do you only include
| the following reference to "idmap" and leave out the reference to
| "passdb backend=ldapsam"?  Something like this?:
|
| idmap backend = ldap:ldap://bdc-srv.domain.com
| idmap gid = 1-2
| idmap uid = 1-2
| ldap idmap suffix = ou=idmap,dc=domain,dc=com
remove this and keep the "passdb backend = ldapsam"
line
| and use something like this for the primary domain controller??:
|
| ldap suffix = dc=domain,dc=com
| passdb backend = ldapsam:"ldap//pdc-srv.domain.com \
| ldap//bdc-srv.domain.com"
Note the "'s I've added to use the server failure
in the LDAP libs.
| Also, in the backup domain controller's smb.conf I assume I set "local
| master", "domain master" and "preferred master" all to "no", etc, etc.
domain master = no is the only one you really need to worry about.



cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/qxiGIR7qMdg1EfYRAtjXAJsGz2HSvEuWy/tNXY88MmbIKoCkZwCg2OcD
N/4Ec53NTPJqxR6QPqE2AwU=
=7C59
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: Réf. : [Samba] Net groupmap fails

2003-11-07 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kent L. Nasveschuk wrote:

| [EMAIL PROTECTED]:~# /usr/local/samba/bin/net groupmap add ntgroup="Domain
| Admins" unixgroup="Domain Admins" rid=512
| Can't lookup UNIX group Domain Admins
|
| Is there something with initial compiling samba 3.0.0 that would disable
| this? All the documentation that I've seen makes it look so easy, but I
| can't get it to work.
Should work as far as I can tell.  try running

~  net groupmap add ntgroup="Domain Admins" \
~  unixgroup="Domain Admins" rid=512 --debuglevel=10
and see if you get any clues.



cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/q7rgIR7qMdg1EfYRApNLAJ9Vl+zRDF6dcF/ILcLBXx1KUyEniQCg2jm8
awcVVG2Haash31wV5FKIRvo=
=AzvU
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3 ACL's not Shown for Directories

2003-11-07 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Müller, Thorsten wrote:
|
| I use samba 3 on a Redhat 8 box.
| My clients are WintNT, Win2k and WinXP systems.
| I want to have ACL to simulate NTFS Security for my clients.
| This works without problems for files,
| But not for directories.
| When i create directories and have a look at the Security
| Tab on the Windows Properties they show me no security
| information (Read, Write, Full permission)
| even if getfacl  shows me information (see down).
| I tried several options in smb.conf but nothing seems to help.
| I also tried to set serveral values for the mask with setfacl.
I remember a bug that prevented displaying acl's
if the uid/gid<->SId mapping failed.  I think this
was resolved in 3.0.1pre1 but you might want to just
try the CVS tree or wait until 3.0.1pre2 due out later today.


cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/q7uaIR7qMdg1EfYRAsabAJ9MaqP2EHPDJdthQ8Cj+f/aYnlgsQCfXNR9
uHCzOR6TS7VL4pc8kmDiHJw=
=nvxZ
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Groups & LDAP

2003-11-07 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Milos Webmail wrote:
| I'm running samba+ldap on my RH 2.1 AS and I'm getting this errot when I
| try to list groups:
|
|
|
| [EMAIL PROTECTED] etc]# net groupmap list
|
| [2003/11/07 15:49:10, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2048)
|
|   ldapsam_setsamgrent: LDAP search failed: No such object
smbd is searching for "(objectclass=sambaGroupMapping)"

cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/q7ySIR7qMdg1EfYRAgGGAJ0XxkvO+2Lk8vGBA67iCnuTmQUgxwCeMk6u
CHUlS5/g+/Z8jxxt7+COmhY=
=YZYe
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.0 & OpenBSD 3.3: ldap.h not found

2003-11-07 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jyri wrote:
| Hi!
|
| I'm trying to install Samba 3.0.0 into an OpenBSD 3.3 server. I have
| copied ldap.h from OpenLDAP 2.1.22 distribution to /usr/local/include.
| However, configure does not seem to find it:
|
| checking for LDAP support... auto
| checking ldap.h usability... no
| checking ldap.h presence... no
| checking for ldap.h... no
|
| I get the same result with ./configure --libdir=/usr/local/lib
| --includedir=/usr/local/include.
|
| I have also tried making symlink from /usr/local/include/ldap.h to
| /usr/include/ldap.h but this makes no difference.
|
| It seems I have the same problem with lber.h which is also located in
| /usr/local/include:
|
| checking lber.h usability... no
| checking lber.h presence... no
| checking for lber.h... no
| configure: WARNING: ldap.h is needed for LDAP support
|
| Any ideas how to make this work? Thanks in advance!
Check the config.log for the source of the error.  Might
be missing a library or something.  Does OpenBSD require
the -lrsolv lib still?  (vague memories of this)


cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/q7zuIR7qMdg1EfYRAj/WAJ9gAmXlq4s1WREZILvAen8EiTGZZgCeIztS
kGwAhPg2/brhkCB7301DD0U=
=Ldoc
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: Réf. : [Samba] Net groupmap fails

2003-11-07 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
John H Terpstra wrote:

|>Should work as far as I can tell.  try running
|>
|>~  net groupmap add ntgroup="Domain Admins" \
|>~  unixgroup="Domain Admins" rid=512 --debuglevel=10
|>
|>and see if you get any clues.
|
|
| Hint: Make sure that you have all your "add  scripts"
| in place.  Also, make sure that these scripts can handle
| object names that have > upper case characters and/or
| spaces in them.
Does matter here.  net group map doesn't run them
for you anyways.  And in this case the group already
existed.
| PS: groupadd does NOT permit spaces or upper case
| characters in a group name.
In the unix group name?  or the nt group name?
I know the ntgroup name is fine.  If the unix group
name won't accept spaces, then this is a bug.
(which is why I asked for a log to start with).


ciao, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/q8OvIR7qMdg1EfYRAsyGAKDtVsl4h/vIi+E1ZuMjuV368esfwwCgxZ8W
gDyTYIou+TeI+46od+gdbxU=
=YkeB
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: Réf. : [Samba] Net groupmap fails

2003-11-07 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
John H Terpstra wrote:

|>Does matter here.  net group map doesn't run them

and this was supposed to "does not".  Sorry for the typo.

|>for you anyways.  And in this case the group already
|>existed.
|
|
| It matters if you do a "net rpc vampire", which does
| call the "add X scripts".
Right.  I know this.  I've worked on that code a fair
amount. :-)  But that is not what we are doing here.
Let's not confuse the issue.
| Please note that I specifically said that the "groupadd"
| utility does not permit uppercase of spaces. Linux works
| fine with groups that have up to 32 characters, even
| with uppercase and spaces.
ok.  but i'll point out that you are confusing
the issue again.  Let's stay on topic here.
We are dealing with ldap posixGroups here.


ciao, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/q8r2IR7qMdg1EfYRApYDAJwNkDvotJj3bjAufwtp4vZ+LbOXSwCZAYg9
e+k0mFmgYx3mse2+80NmWmA=
=q3hV
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: Réf. : [Samba] Net groupmap fails

2003-11-07 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kent L. Nasveschuk wrote:
| Did run a lower debug level -d 2 which gave me a clue that there was no
| objectclass sambaGroupMapping.
There shoudl be no match it you haven't added a
group mapping entry.  You've bypassed the problem but
not helped me to figure out why it was failing in
this place.


cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/q9GYIR7qMdg1EfYRAoGjAJ4xKnOC12vNc8Ylr5Sg9p6ANXL6RwCfVSR+
HvFxGmmg90drgJGAoeUEz4o=
=e+IK
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.1pre2 available for download

2003-11-07 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
This is another preview release of the Samba 3.0.1 code
base and is provided for testing only.  This release
is *not* intended for production servers.  Use at
your own risk.  There have been several bug fixes
since 3.0.0 that we feel are important to make
available to the Samba community for wider testing.
The source code can be downloaded from :

~  http://download.samba.org/samba/ftp/pre/

The uncompressed tarball and patch file have been signed
using GnuPG.  The Samba public key is available at
~  http://download.samba.org/samba/ftp/samba-pubkey.asc

Binary packages are available at

~  http://download.samba.org/samba/ftp/Binary_Packages/

A simplified version of the CVS log of updates since 3.0.1pre1
can be found in the the download directory under the name
ChangeLog-3.0.1pre1-3.0.0pre2.  The release notes are also
available in the same directory.
As always, all bugs are our responsibility.

~  --Enjoy
~  The Samba Team
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/rGpiIR7qMdg1EfYRAvmQAKDEFCLtSLOJGocwbEepM6wDI2EVfQCgtMRr
UjqaHweh6Nn8iq3qId1Osds=
=WAE8
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba-3.0.0 release won't authenticate

2003-10-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kristis Makris wrote:

| I've just upgraded from samba3-alpha23 to samba3.0.0 release. I'm
| running samba with an LDAP backend and I used the convertSambaAccount
| conversion script, and now the latest 3.0.0 ldap schema. The problem I
| have is that no Windows user can authenticate against their home
| directory, or any other machine. Authentication against the login screen
| works, but not to any shares.
|
| I don't understand how this happens all of the sudden, given that
| alpha23 had no problems with authentication. Is there anything else I
| need to know about rids, SIDS, UID/GID mappings?
|
| Also, when I try to join a Win2k machine to the domain I get the error:
|
| "No mapping between account names and security IDs was done".
Look at a level 10 debug log and find out what is going on.

| Do I need to use an "idmap backend" entry in smb.conf ?

No.  This is not needed.

cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/orYnIR7qMdg1EfYRAmxsAKDVF9gm/k0mAaQxQdb+Jy4twQj91QCgk4FE
dbUjcyxclYGyXBFHUBW0faY=
=AY/Q
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.0 - LDAP Authetication trouble

2003-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Bart Bekker wrote:
| Thanks, problem solved.
| But I am still confused. Why are those password tools delivered with
| Samba, if they are not useful.. I saw in the LDAP that smbpasswd uses a
| SMD5 encryption for the password; the smbldap-passwd tools adds them
| using SSHA. No wonder it did not work.
NT password hashes are not the same as SMD5.  It sounds like
you are getting the samba[LM|NT]Passwqord and userPassword
attributes confused.


cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/sQKJIR7qMdg1EfYRAol5AKCE/uqt7hMh/FLCUASC0/fkMQiNKACgsgLh
jmoQivLwLrBe45NILpKBOxs=
=eI7S
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cannot enable browsing, chdir to /tmp denied...

2003-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marcus Widerberg / EMF Textile wrote:

| I am a newbie at looking at the logs, I see the
| access denied to the /tmp dir recurring.
So what are the permissions on /tmp?  They should be 1777

| Any clues GREATLY appreciated. I never had any such
| problem with samba 2.2.x - am completely stuck! If I cant
| fix it I will have to go with a windows PDC...
btwcomments like this come off a threats to get people
to offer help.  I'm sure you didn't mean it like this, but
it's one of my pet peeves.


- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/sQMjIR7qMdg1EfYRAgG7AJsHP1xvt+lMkg8s74ccznNRJ8NoZQCfbNiy
R7tmt5L3zUxprUfwEJlCLlI=
=qu7f
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] logging print jobs

2003-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:

| Is there a method to place the actual filename
| of the printjob into this type of log?
See "%J'



cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/sQh2IR7qMdg1EfYRAgyWAKCGnee3zPlnu/jHcqKJBrHCvSbTLACg0Bhx
SGLUMdCP5aoD6R82hTpve4w=
=Dm8/
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba 1.9.18 swat

2003-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
| Hello
|
| Our customer  wants  to use SWAT with Samba.
| On  z/OS  1.2   we  have  in  Unix System Services
| Samba  Version  1.9.18 from 1999. In this release there
| is no SWAT-function. What  should  we do  to implement
| SWAT  in this environment  ?
Your only options are to backport SWAT or upgrade.  Sorry.

cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/sQUdIR7qMdg1EfYRAlg3AJ4grhXGpkZBJ3Fqm+5oVXxtckwP1ACgkFmr
c0jyS0TjPrzEsKjR4Rnh7Sc=
=rRF6
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Translation Dok to German, first file, deutsche Übersetzung Der Samba Doku erste Datei

2003-11-12 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I'm dropping in late here, so apologies if I recover any
ground already discussed,
Stefan G. Weichinger wrote:

|> A CVS tree is a good idea, but hosting on samba.org
|> is rather difficult.  If you can get a sourceforge (or
|> similar) account, then you will probably find it easier.
|
| Why is it difficult to host that samba-german-docs-tree
| on samba.org? Can you recommend or do you (or the Samba
| Team in general) prefer some project-portal?
Account maintaince.  I've seen too many Samba volunteers
get started and then fade away.  I don't want set of a
cvs module and create accounts on Samba.org and then watch
the accounts sit there for 2 years unused.
No offense, i would just prefer to see the trans-doc
project mature and get some momentum first.  sourceforge.net
is a reasonable alternative.
| I take your words as given but have to say that it has
| to be kept in mind that the volunteers in this
| translation-project don´t have the experience in
| open-source-development and project-management the Samba
| Team already has (and proves to have every day,
| as I think).
|
| So I want to point to the fact that the difficulties
| resulting from hosting the (still fictious)
| samba-german-docs-tree on samba.org may be smaller
| than the difficulties generated by letting the few
| volunteers start over this "new" project on another
| CVS.
|
| If the Samba Team wants to keep non-english-docs
| separated from the core-software-source-trees this seems
| logical to me from a programmer´s view.
|
| Please share your thoughts with us. The Samba project
| is far from the start right now and deserves that
| people think about further steps instead of just acting.
I understand your concerns.  However, it's the PM
resources that are scarce.  The best model here is to
let the german-docs project have its own leader who
can interact with the core Samba Team over releases,
intergration, etc...  There is another good reason
for a separate project leader--most of us don't
speak German. :-)
And I'm not violently opposed to hosting it on Samba.org.
I just want to see some structure first before we move
forward.
ciao, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/skH5IR7qMdg1EfYRAsTCAJ9JeCbW8Cm8ZBCAT6esv4XRQxHVZQCg7981
9TltYD7C0EYDvszvY9jH6fg=
=2Cto
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbusers and wildcards

2003-11-12 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kall, Bruce A. wrote:

| It is my understanding that if you have a wildcard
| in smbusers, it  should only apply this if the
| particular users is not in your /etc/password file.
| Is this true?  It appears like samba is rolling
| down the smbusers file and everything gets mapped
| to my wildcard user.
|
| Eg.
|
| smbusers:
|
| root = administrator admin
| nobody = guest pcguest smbguest
| myunixlogin = mysmblogin
| www-users = *
See the comments about the '!' character in
'username map' in smb.conf(5).
cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/skfJIR7qMdg1EfYRAngsAKC+gjbTUAQENHCjBIeMtOO+g6VC6QCg0lq3
qjJVQlM+uKRwNz28ckvnV3E=
=EJhd
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] HP1120c

2003-11-12 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Andrew Bartlett wrote:

|> ...but i will try one more time ask :-)
|> There is one more thing, when install "HP DeskJet
|> 1120c Printer" driver, on windows client when trying
|> to select "Default Print Settings", from "Properties"
|> Tab,  i've got message like that  "Can not continue,
|> because out of resources"
|>
|>Meaby some one foud out a bit of time to answer !
|
|
| Install the driver locally (plug the printer in
| locally), then connect to the network printer, then tell
| it to use the driver, as found on this machine.  I think
| that is finally how I got around this.  Yes, it
| drove me nuts...
|
| I think the problem is that the 'devmode' isn't
| initialised on the server, so is NULL, so it thinks
| a malloc() call must have failed...
It's more likely missing printer data because the driver
has not been initialized.  I've seen this before and it
was always due to a missing P{rinterDriverData entry.




cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/skiGIR7qMdg1EfYRApqpAKC7IxT2Lf4Q91o2Zjm0U4RJN6aKKwCgxE/J
Q/ltWjgQaSicbm0BjgNiYPM=
=3j6z
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] File Disappearance after copy?

2003-11-12 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
| Hi.  I'm converting a group that was using Mac OS
| X Server (we were dissatisfied) to Mandrake PPC
| Linux with Samba.  The Mandrake-supplied package is
| version 2.2.7a-8mdk.  So far it works great - but
| we have a serious and odd problem that I couldn't
| find in previous postings to this list.
|
| When I copy files from an OS X server to this
| Mandrake/Samba server they usually disappear.  Which is
| bad, from a service point of view.  I can often copy a
| single file to the share and it works fine, but subsequent
| files vanish.
I would suggest getting a network trace and looking
for any SMBunlink commands showung up.  You could get
a samba level 10 debug log and do the same thing.  My
guess is that the mac server is deleting the file
and Samba is just doing what it was told to do.




cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/skrrIR7qMdg1EfYRAtHsAKDBY68icXCC4d/4q8QhIOLvRL9NvQCgkXs/
tlKdiz9e/8T9Z585NrUQAUk=
=2B0+
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba 3011

2003-11-12 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Francisco Ruiz wrote:

| Thanks guys.  Next problem joining the domain went well
| as per you directions, but when I configure my win2k
| machine at start up to log on the domain I get this error
| message " The system can not log you on due to the
| following error" "A device attached to the system is
| not functioning please try again or consult your sys admin".
Everytime I have seen this error it has been caused by
the primary group setting for the user in the passdb
backend being mismatched from the domain.  Check the group
SID and compare it with the domain SID.
cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/skt0IR7qMdg1EfYRAkchAJ0RNDQylp25mVdQeMVKKh0UchZ7uwCcCPyX
lKDlwQz/o44mrp+He+hlBqY=
=nYhx
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba permissions..

2003-11-12 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dirk Broodryk wrote:

| I am running samba 2.2.7a on 9.1 p4 2400
...
| Mainly I have two problems.. and it doesn't matter what
| I do.. I can't get it fixed.. Mangement is at to point of
| discarding the samba server and going back to NT wich
| I am trying to stop.. So please.. any help or
| ideas will be helpfull.. and this is realy urgent..
I would suggest testing 3.0 since the locking
code has been worked on lot since 2.2.


cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/skwoIR7qMdg1EfYRAt6RAJ9L2jnNQ+lUWRCe1U2LEhvVV+aFuQCg396L
3wtiBSUllualm7mzRTM8K+A=
=VGhw
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] HOWTO is missing TOC

2003-11-12 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jonathan Johnson wrote:
| Saw that a new version (12 Nov) of Samba-HOWTO-Collection.pdf was
| posted on the docs page. It's missing the Table of Contents.
|
| 23 Sep version has the TOC. It's also somewhat larger (462pp); has
| something been removed from the 12 Nov version (404pp)?
|
| link: http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf
We're reworking the docs build and have automated
it out of the cvs tree.  The page difference could
be due to font differences on the new build host.
I'll have to check.  The TOC is a known issue.
We're trying to track down which package needs to
be updated (probably teTex).


cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/spyhIR7qMdg1EfYRAm7fAJ49anVFGpoJ8aHWGjwv/jYHwVGO7QCg5EvR
EXOhTX8+18/q9tHeJxiCBVQ=
=GhwW
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Client accessing Samba doesn't authenticate against Active Directory

2003-11-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jonathan Johnson wrote:
| When a Windows client attempts to browse shares on a Samba 3.0 server
| authenticating against a Windows 2003 Active Directory domain, it
| requests credentials. Typing in user name and password fails
Looks like you don't have the MIT krb5 1.3.1 libs or the
latest version of Heimdal (don't remembe which version
you need...cvs development snapshot maybe).
| Output of smbclient -k -L license [EMAIL PROTECTED]
| [2003/11/12 16:03:45, 0] libsmb/clientgen.c:cli_receive_smb(121)
|   SMB Signature verification failed on incoming packet!
| session setup failed: Server packet had invalid SMB signature!
...
| -
| Interesting lines of /var/log/samba/log.192.168.254.202:
|
| [2003/11/12 14:00:24, 1] smbd/sesssetup.c:reply_spnego_kerberos(172)
|   Failed to verify incoming ticket!
|  (message is repeated twice)
|
cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/s7YNIR7qMdg1EfYRAre8AJ4tW64CC2OTjxDD/zaU7k+HFcPungCfdZmC
RLnMHyR095uIzJ48yg5EQ2Y=
=4M/D
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT4 PDC and Samba 3

2003-11-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Don Bivens wrote:

| When I try to copy almost everything else from anywhere on the LAN to
| the Samba share it freezes up and the connection eventually times out.
|
| I spent the better part of 5 hours banging my head against the wall.
Make sure you swicthes and hubs are not dropping packets.



- --
cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/tGRUIR7qMdg1EfYRAmVEAJ4hHhUVOPEHVkxwjD0EfKThkp8LAwCcC5ie
jmnm7RQQA0YQsK4gSqYsmU8=
=NZqZ
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3 as Domain Member / W2k ADS

2003-11-14 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Arnst, Rainer wrote:
| Hi,
|
| I set up Samba to be a Domain Member in W2k ADS Domain. The
| authentication basically works, the only problem is, that a unix account
| with the same name is needed on the samba machine for it to work. (The
| pw though checked against the ad.)
|
| How do I get rid of the neccessity to have corresponding unix accounts
| for the ads users?
Read about winbindd.



- --
cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/tPXdIR7qMdg1EfYRAqfIAKC23c6epqLLcOxcj6mPP77mBvkItgCfVhwU
eCNPoHwOLv5YhlrLSIzBIPc=
=aHXq
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] rid format in sambaSID

2003-11-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 13 Nov 2003, John H Terpstra wrote:

> On Thu, 13 Nov 2003 [EMAIL PROTECTED] wrote:
> 
> >
> > Using ldap as my sam backend and Samba 3.0.0-2, I'm showing that samba
> > stops parsing a RID when it encounters a letter.  For example, I have an
> > accounting group with gid 2771 and therefore rid ad3.  When I list the
> > groups in the samba domain, however, I get this listing:
> >
> > Domain Admins (DOMAINSID-512) -> Domain Admins
> > Domain Users (DOMAINSID-513) -> Domain Users
> > Domain Guests (DOMAINSID-514) -> Domain Guests
> > marketing (DOMAINSID-0) -> marketing
> > support (DOMAINSID-0) -> support
> > sales (DOMAINSID-0) -> sales
> > integrators (DOMAINSID-0) -> integrators
> > accounting (DOMAINSID-0) -> accounting

Did you manually set the sambaSID string?  We always set it in 
decimal.




- --
cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE/tEY3IR7qMdg1EfYRAh8FAJ9Bej5FcfNQy/t2XiiKAZrIPvR0UACfTbnd
WJ/EQvAnKiMensIYhjCySWg=
=aobt
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.1pre3 available for download

2003-11-13 Thread Gerald (Jerry) Carter
This is another preview release of the Samba 3.0.1 code
base and is provided for testing only.  This release
is *not* intended for production servers.  Use at
your own risk.  There have been several bug fixes
since 3.0.0 that we feel are important to make
available to the Samba community for wider testing.
This release does fix a few core dumps in the 3.0.1pre2
release and corrects point-n-print for Windows 2K/XP
clients.
The source code can be downloaded from :

  http://download.samba.org/samba/ftp/pre/

The uncompressed tarball and patch file have been signed
using GnuPG.  The Samba public key is available at
  http://download.samba.org/samba/ftp/samba-pubkey.asc

Binary packages are available at

  http://download.samba.org/samba/ftp/Binary_Packages/

A simplified version of the CVS log of updates since 3.0.1pre2
can be found in the the download directory under the name
ChangeLog-3.0.1pre2-3.0.0pre3.  The release notes are also
available in the same directory.
As always, all bugs are our responsibility.

  --Enjoy
  The Samba Team
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] rid format in sambaSID

2003-11-14 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:

| Effectively, yes.  My SAM is currently in LDAP being
| served by a samba-tng PDC.  I'm migrating the SAM config
| and generating the sambaSID value by tacking the hex rid attribute
| value onto the domain SID.  If samba3 expects the RID to be
| represented in decimal, does that mean that DOMAINSID-512
| isn't acually the Domain Admins goup?  Should it actually be
| DOMAINSID-1298?
512 is base 10 rid for the "Domain Admins" group.





cheers,  jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/tPK3IR7qMdg1EfYRAlsDAJ4lzvCmGJgKJO4iSkqWhxw2+5JgtQCg2e6Y
qp7vWeqODqHDoXZOa9UbPPU=
=OTFH
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] printer permissions <-> ERROR: NULL dest in safe_strcpy (samba 3.0.0)

2003-11-17 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
|
Hey Christoph,

| I'm using SAMBA 3.0.0 on Solaris 9, it looks very
| cute, unfortunately I can not set the permissions
| on the printers (I can as an admin add a user etc.
| but all changes are lost after applying):-(
There was a significant printing fix for 200X/XP
clients in 3.0.1pre3.  I just tested the latest
SAMBA_3_0 cvs and setting a printer acl works
so you might want to try the latest 3.0.1 snapsnot.
| Is this somehow related to the error entries in
| the log file:
|
| [2003/11/17 14:45:31, 0] lib/util_str.c:safe_strcpy_fn(577)
|   ERROR: NULL dest in safe_strcpy
This was fixed in 3.0.1pre1 I think (i know it was
fixed...just don't remember when).


- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/uOAIIR7qMdg1EfYRAsoZAKDBvnFzzvuLATBXBHJTff8hW2SVwwCfXYFF
b9JHuxjnqnBo64bpC7ZgZPY=
=fr40
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SWAT adds suffix

2003-11-17 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Taymour A. El Erian wrote:
|
| I just tried SWAT that comes with Samba
| 3.0.0, it keeps appending the ldap suffix to
| the user,group and computer suffix and thus
| corrupting my smb.conf
Known issue.  We're working on it

~   https://bugzilla.samba.org/show_bug.cgi?id=328



ciao, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/uOGtIR7qMdg1EfYRArTkAKCMvhwyAyjyDJ7LkPt+RqfBJBobbQCgswIy
C9pdB7CaeTbQT7gMW+hXc9A=
=a1xb
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] printer permissions <-> ERROR: NULL dest in safe_strcpy (samba 3.0.0)

2003-11-17 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
|
| thanks I will try that out during this week, I have another one:
|
| I'm mapping everyone to 'nobody' unfortunately the acl's of
| the temprorary files are not readable by the user 'lp':
|
| [printsrv4] ~lp/etc # tail -f /tmp/samba_acls.txt
| -rw---   1 nobody   nobody111614 Nov 17 15:58
smbprn.0026.EaaqrB
| -rw---   1 nobody   nobody111613 Nov 17 16:01
smbprn.0027.rUai4B
|
| I tried 'force create mode = 0777' but it doesn't
| seem to have any impact on the acl's of the temporary
| spool files. Did I miss something, I think
| the same configuration worked fine under 2.2.x (?)
Yeah.  See lib/util.c:smb_mkstemp().  I just checked though and
the code is identical to what is in 2..  Are you doing guest
printing?  The problem might be the facft that the 'guest
account' parameter in now global rather than on a per share basis
like it was in 2.2.
You could try 'force user = lp'.  That would work for 9x
clients but not for NT or later.
- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/uPcOIR7qMdg1EfYRAnyNAKDmN/xjkroAEd2bpd0ay6md/zzibgCcDMtK
xN2FeS3ZADEma+48n9fIwc0=
=pCIy
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3 and CUPs printer causes explorer to abend

2003-11-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tim Kelley wrote:

| However, accessing the printer properties from within
| windows after  installing the driver would cause
| the application to crash, 100% of the time (the error
| IIRC was something to do with C++).  I cranked up my
| (samba) log level to 10 and couldn't find anything
| useful to debug this, everything looked normal.  Nada
| in the windowz logs either, but I kinda expect that.
This was our bug.  It's fixed in 3.0.1pre3.  See the
Changelog in the WHATSNEW for details.  Sorry abotu the bug.


- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/ujE3IR7qMdg1EfYRAnAfAKDBg2jq2uQtVd7442k5oW4bM24+YQCffy5H
T5DAbzra9tntxmukfCsHHiQ=
=Zm9F
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Supporting multiple clients -- per machine/os config?

2003-11-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Matt Staroscik wrote:
|
| Short version: Different clients need different socket options to
| perform well. Can I point to a different smb.conf file as a function of
| the client name or OS?
See the %m and %a variables in smb.conf(5) as well
as the "include" parameter.


cheers, jerry

- --
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/ukjbIR7qMdg1EfYRAltqAJ42FqapalABLdZGGLrL6tMEq2yPfQCg0acb
fR9ALNfdusu/thIQtjFScjI=
=VG9c
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba opens many files.

2003-11-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Markus Wenke wrote:
| Hi,
|
| I have a dir with more than 16000 files in it.
| If I klick with MS-Explorer on this Dir to see
| which files are in it, smbd opens every file and
| so it takes some seconds to show this Dir!
| (and CPU usage is at 100%).
We only do what the client asks us to.
This is probably explorer.exe looking for icon.


- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/ukkeIR7qMdg1EfYRAvRFAJ4mPDjAESkdxttp8C0ar0FFHR8pZQCeJtVf
/JVaPqlnG2Z5yohc//riKSY=
=2nzd
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbpasswd fails to add machine account with ldapsam

2003-11-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Patrick wrote:
| Hi,
|
| I do believe this is a bug in samba 3.  If you use the same
| ou as the  user accounts it will work.
Yeah it is.  The code assumes that 'ldap suffix' is set
to the common parent of the machine suffix and the user suffix.


- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/ukn5IR7qMdg1EfYRAgr7AJ9hAPSFQFnD+/3CXNl/n9ZNuY0hhwCg5dkq
LV8Hg+Fz9gXUzQZT0x5sefM=
=7vF3
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] printer.tdb (tdb_oob len errors) and Quirkiness: Solaris 9, Samba 3.0.0

2003-11-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jeff Gardiner wrote:
| I set up printing IAW:
| http://us4.samba.org/samba/docs/man/printing.html
|
| I've confirmed the drivers are being installed to
/etc/samba/drivers/W32X86.
| Yet I am unable to print even a test page.  I get the following error:
|
| "Test page failed to print.  Would you like to view the print trouble
shooter
| for assistance?  Access is denied."
|
| And I get the following errors in my samba log file:
|
| tdb(/usr/local/samba/var/locks/printing/irl.tdb): tdb_oob len 1600941951
| beyond eof at 67552
| [2003/11/18 11:05:20, 0] tdb/tdbutil.c:tdb_log(724)
|   tdb(/usr/local/samba/var/locks/printing/irl.tdb): tdb_oob len 858730825
| beyond eof at 67552
| [2003/11/18 11:05:20, 0] tdb/tdbutil.c:tdb_log(724)
|   tdb(/usr/local/samba/var/locks/printing/irl.tdb): tdb_oob len
1600941951
| beyond eof at 67552
I would test 3.0.1pre3 first, but the tdb_oob is
troubling. That smells like an unitialized variable
somewhere.


- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/ulbBIR7qMdg1EfYRAl7ZAJ0S6vQqrPPZ45U+6FePHHmakD6RXACgnh00
K/n27TX+Q1yrwFQmBlB9JLg=
=DhyW
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ACLs and samba

2003-11-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marius Grannæs wrote:

|>Suggest you add to smb.conf [globals]:
|>
|>   winbind trusted domains only = Yes
|>
|>Then run winbindd. This was added to solve the problem you are seeing.
|
|
| Thanks! This is just what I wanted :-). I've been pulling
| my hair for days over this. Is this in the documentation
| somewhere?
from smb.conf(5)

~  winbind trusted domains only (G)
~ This  parameter  is designed to allow Samba servers
~ that are members of a Samba  controlled  domain  to
~ use  UNIX  accounts  distributed  via NIS, rsync, or
~ LDAP as the uid's for winbindd users in  the  hosts
~ primary  domain.  Therefore, the user 'SAMBA\user1'
~ would  be  mapped  to  the   account   'user1'   in
~ /etc/passwd instead of allocating a new uid for him
~ or her.
~ Default: winbind trusted domains only = 

- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/ul9DIR7qMdg1EfYRAgr6AJ9HHXIHZOfTKXlmo70tVXQfkLZLtwCfbdrR
s8jtUP8Lo1MGwzBhOJP5xGM=
=KK46
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] printing and 'hosts deny' with samba 2.2.

2003-11-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Johannes Laemmermann wrote:
| Hell Samba Team!
|
| Samba Ver: 2.2.3a-12.3
| Where can I get information about 'hosts deny' in a
| printabel share.
| The parameter works fine checking limitations with
| testparm. But Windows NT client are still able to print.
|
| Where can I get any help?
This was fixed sometime after 2.2.3a IIRC.  Don't
remember exactly which version though.


- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/ulKYIR7qMdg1EfYRArq2AJ4syElNF7yfw65hIUWtmJCSXkOmhACg7yA7
S4RnFv28sLIUw8bargoJuDc=
=/6Sg
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] gdb compile error

2003-11-19 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
ww m-pubsyssamba wrote:

| ok I know this isn't realy a samba issue but I'm trying
| to gather some debug info on winbindd for the samba
| development guys, but I can't compile gdb 5.x or 6.0
| on my solaris 9 box! Every other compile problem
| I've come across I've resolved by searching through
| google but not this time. If anyone can help I'd
| really appreciate it, problem is (using gcc 3.3.2)
You might save yourself some trouble and just grab
a package from http://sunfreeware.com/
| gcc -g -O2  -I/usr/include/v9 \
| -o gdb gdb.o main.o cli-dump.o cli-decode.o

| Undefined   first referenced
|  symbol in file
| libintl_textdomain  main.o
| libintl_dgettext../bfd/libbfd.a(bfd.o)
| libintl_gettext main.o
| libintl_bindtextdomain  main.o
| ld: fatal: Symbol referencing errors. No output written to gdb
| collect2: ld returned 1 exit status
| make[1]: *** [gdb] Error 1
| make[1]: Leaving directory `/tmp/gdb-6.0/gdb'
| make: *** [all-gdb] Error 2
or try linking with -libintl IIRC.

- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/u4QMIR7qMdg1EfYRAh+uAKCUduthOzUinK7bRt2Jw19nTn7JEgCgtZBd
071DyAXs7563JBeqjoyTcck=
=qVFy
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Fun with veto files

2003-11-19 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Morten wrote:
|
| Hi. I have a fileserver running samba 2.2.7 and netatalk 1.5.5 for old
| mac clients. Because the mac's are quite spammy with creating
| .AppleDouble and other system directories, I've added the following to
| smb.conf:
|
| veto files = /.AppleDesktop/.AppleDouble/Network Trash Folder/TheFindByC
| ontentFolder/TheVolumeSettingsFolder/System Volume Information/Recycled/
|
| Now, when a windows client tries to delete a folder which a mac user has
| implicitly created eg. .AppleDouble, the delete fails because the
| windows client cannot "see" the file to delete:
|
|   cannot remove "tiff2; the directory is not empty"
|
| The dir contains the .AppleDouble still, and the samba user does have
| proper permissions to delete this.
|
| Is this a known issue? Any workarounds?
See "delete veta files" in smb.conf(5)



- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/u7icIR7qMdg1EfYRAm6NAKDXVqF8RkSWWxknRshg8ZyyC/78IACg6rNy
8R4rwPjZxuW+rsJsgF/98ds=
=6Vwe
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] cvs samba-docs missing configure and makefile

2003-11-19 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hendrik wrote:
| Hi all,
|
| I just got the repository samba-docs from pserver.samba.org.
| I want to make the html files out of the docbook tree.
|
| Please help, what have I to do to convert the existing
| docbook tree to for example html.
You have to run autoconf to generate the configfure script
and Makefile.


cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/u9eXIR7qMdg1EfYRAkKaAKCBjymdsl3dYuPQ+Qte9G6klfWsWwCg5LzP
rThhxYpCt75/fSL/AFHKjxk=
=Hl2f
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 0xc0000022 error / winbind

2003-11-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
leopardb wrote:

| I run linux mandrake 9.2 on a NT2K domain with a
| win2k server (in native  mode) I've installed samba 2.2.8 on
| the linux box with winbind. I've followed
| the samba howtos (joined the domain etc...) and
| everything's running  fine except that :
|
| wbinfo -t
| Secret is good
|
| wbinfo -u
| 0xc022
|
| wbinfo -g
| 0xc022
~From include/nterr.h:

~  #define NT_STATUS_ACCESS_DENIED NT_STATUS(0xC000 | 0x0022)

You need to use --set-auth-user option to wbinfo (or -A in 2.2).



- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/vNvOIR7qMdg1EfYRArz6AKClkTMLGlqhGBqCg/fnMJ0hebWgyACeLfkP
kplMOoXA6cAlpGf65ly9Ahw=
=u2He
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Printing Buffer Overflow

2003-11-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Alejandro Soler wrote:
| Hi,
|
| I have a print server, with RH9 and the last Samba
| 3 version (i have to update because i have this problems
| many times with previus samba versions)
|
| When i try to print from WinNt 4, from Oracle Reports
| 3, drWatson come in. In the print server i have this log:
...
| [2003/11/19 10:10:30, 3] smbd/error.c:error_packet(118)
|   error packet at smbd/ipc.c(99) cmd=37 (SMBtrans)
| STATUS_BUFFER_OVERFLOW
This is normal for fragmenting rpc PDU's across multiple SMB reads/writes.

Is it only Oracle reports that fails printing?
What printer driver?  Please provide more details.




cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/vOOyIR7qMdg1EfYRAklYAKCXQ6uh5Ndw2xG3XrTgUcFbbFEQsgCfTiDt
afkvytLwWIso4aeHnon8rtw=
=zvJH
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba opens many files.

2003-11-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Markus Wenke wrote:

| If I change "case sensitive" to yes, this problem is
| fixed, but if I  make in the windows-C-file a simple
| _findfirst() the same behavior appears.
| If I makt it to a Dir with 2 files, every file will be
| opened at least  one time. Why opens samba this files? for
| only _findfirst() the files  musn't be opened or?
| and if I make a tcpdump, I see that windows(the client)
| doesn't ask to open this files, there are only <50 packets
| for 16000 files.
Windows clients expect case insensitive semantics.  So smbd
has to scan the directory to implement that.  If you have
a case insensitive file system, then smbd wouldn't need to
do this for you.
- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/vOZEIR7qMdg1EfYRApvzAJ9iogm3PZ/JlE0EBqW3YP/uGzW2SACfRmrm
G/xjxS0uoFN3RAYFId4Qgc4=
=0B35
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: 0xc0000022 error / winbind

2003-11-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
leopardb wrote:

| But when i try to connect to the /home share on my linux
| Box from the win2k machine named mc-coy,
| 1) the file /var/log/samba/log.mc-coy is incremented with :
| passdb/pampass.c:smb_pam_error_handler(71)
| smb_pam_error_handler: PAM: session setup failed : Permission denied
| 2) a box asking for password appears and each time i enter a good
| password, 1) re-occurs
Unless you really know what you are doing and need pam,
I would set 'obey pam restrictions = no'
If you want to fix it, you'll need to debug the
session lines in /etc/pam.d/samba.


- --
cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/vPfLIR7qMdg1EfYRArvnAJ9Ver/06SKYWOK5/7ckRl9eAxE+sgCfZJgv
Ps3DOrWEE8G7uTPlR0wG2HU=
=1Fhp
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3 and CUPs printer causes explorer to abend

2003-11-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Orwig, Paul wrote:

| A complication that has me puzzled...
| After updating to 3.0.1pre3, I can no longer
| upload drivers using the GUI. I now get an
| Access Denied message with no indication what
| access is being denied. Printers that were setup
| before the fix are working fine. I can update
| the printer properties, I just can't upload drivers.
|
| Is this a result of the fix?
Works fine here.  Cherck the log file and see why
you are getting denied access (and and what stage).




cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/vREoIR7qMdg1EfYRAlVRAJ0R2S7tummeNRoeA5qV0ccJ6vHbvwCfZ17Q
vrI3P13QOgZowWYPaZeOd7Q=
=xvos
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] net getlocalsid fails

2003-11-24 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Brett Blackham wrote:
| I am using Samba 3.0 and when I run net getlocalsid I receive:
|
| [2003/11/21 04:38:08, 0] utils/net.c:net_getlocalsid(414)
|
|   Can't fetch domain SID for name: REDHAT
|
| What am I doing wrong?
Are you runnin g net as root ?



ciao, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/wlorIR7qMdg1EfYRAn4PAKC/WRnwCt8IWp5bZPk3VvIW1prwCACeNEcc
EPNfl/jK24UFe0TtNA6ZUus=
=xc/c
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: WG: [Samba] User manager for Domains for samba 3.0 PDC

2003-11-25 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
John H Terpstra wrote:

|> When using swat, be carefull, because swat appends
|> the ldap suffix ,with each change you make within swat,
|> to the user,group,machine and imap suffix. This can also
|> result in "illegal stub" or causing logon problems. This
|> is a reported bug in swat.
|
| Please note that this is being corrected. Suggest you
| move to Samba-3.0.1 when it is released (or sooner
| if you feel the need).
already fixed in the SAMBA_3_0 cvs tree (post 3.0.1pre3).



- --
ciao, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/w3xkIR7qMdg1EfYRAktdAKDnuu9BN3LYt9K5L6JC7TtqHfw60gCZAXsc
piNnweFpRWfBSLlr5IEdJ+k=
=YIqq
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Understanding of SID generation

2003-11-25 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Nicholas Fechner wrote:
| Hi,
| can anyone point me to a good source on how to
| generate correct SIDs for our users? We store
| them in LDAP using Samba 3.0 on Debian/unstable.
| Tnx in advance, Nicholas
Best to let samba do it using smbpasswd or pdbedit
(or smbd).  Too easy to get into trouble otherwise.


cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/w4gMIR7qMdg1EfYRAkTDAKCUTO3DJX9vC1d8ECAZAt5NEnEcKgCgxG3S
amdFRx47X3UzoxGCPx6bIqg=
=W7wx
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Bug in installclientlib

2003-11-25 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
William R. Knox wrote:
| Needless to say, this patch should be against Makefile.in. Here is the
| proper patch.
Thanks Bill. i'll get this checked in later today.  Will be fixed
be in 3.0.1


cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/w5CHIR7qMdg1EfYRApoQAKCBoYhp4hDwmKNSHJqn9CcjhBJN/ACePDVh
/agFkfDZ+Na5uyPSK4r6cTo=
=tPQ+
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: WG: [Samba] User manager for Domains for samba 3.0 PDC

2003-11-26 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ionut Gumeni wrote:
| Gerald (Jerry) Carter wrote:
|
| I am using now samba3.0.1pre3 downloaded yesterday and I still have
| problems with User Manager for Domains:
I haven't started looking into this yet.  My comment
was only about the swat bug.  Hang in there.  This will
probably be a 3.0.2 fix.
| |> When using swat, be carefull, because swat appends
| |> the ldap suffix ,with each change you make within swat,
| |> to the user,group,machine and imap suffix. This can also
| |> result in "illegal stub" or causing logon problems. This
| |> is a reported bug in swat.
| |
| | Please note that this is being corrected. Suggest you
| | move to Samba-3.0.1 when it is released (or sooner
| | if you feel the need).
|
| already fixed in the SAMBA_3_0 cvs tree (post 3.0.1pre3).


cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/xK1DIR7qMdg1EfYRAmb3AJ9iBenLSkzp7zTLuNMEemhJRjpETwCg5Xto
+Avdnz6WttaePyvg8erq0kI=
=N32G
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] wbinfo -c duplicate entry

2003-12-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Raphaël Berghmans wrote:
| Hi,
|
| With "wbinfo -c user", a entry is created in winbind_idmap.tdb. But if I
| retype the same command with same username a second entry (with a
| different uid) is created in tdb file.
|
| Is behavior normal ?
no.  It would be a bug.  Please file a report for me at
https://bugzilla.samba.org/.  Thanks.


- --
cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/y0ZHIR7qMdg1EfYRAhodAJ0QGLtYJYnGy6tLWpulxtZE4CGscgCeNVjz
7BzPGfouR+dsyp11PsBAgmw=
=xpIc
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Add printer wizard... No server listed...

2003-12-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tait Shrum wrote:
| We have a Samba 3.01 pre3 server that acts as a print server among other
| things.  When our users go to the add printer wizard in Windows, it
| doesn't show our samba server!  The only way to add a printer is by
| manually entering the path.  That's really inconvenient if you don't
| know the path.  :)  Is there some way we can resolve this?
I think this is what you are seeing

~   https://bugzilla.samba.org/show_bug.cgi?id=101

It's in the queue to be fixed.  But probably not for 3.0.1



cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/z1yhIR7qMdg1EfYRAs5jAJ47T5lp+EnVwrQo65UYLrxrF2TqdgCgvmo5
iUMOht9/mqK0TIrGUkP34Y8=
=i+82
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] FYI: Solaris 9 profiles binary core dumping

2003-12-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jeff Gardiner wrote:
| Hello all,
|
| Just wanted to report that the samba/bin/profiles binary
| in Solaris 9 causes  Segmentation fault.  I can send the core
| file to anyone who wants for  inspection.
Please file a bug @ https://bugzilla.samba.org/



ciao, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/z2IKIR7qMdg1EfYRAgYTAJ40mXqgcnCLR0Qbol9VcSgLHA1BCACfSJGz
1JcYAg4fGhhOZRr/kTvv6mk=
=ddds
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


  1   2   3   4   5   6   7   8   9   10   >