[Samba] Can the logon script know username?

2004-12-20 Thread Diego Piacentino



--
GM Sinter Group
Tel:011/4516213
Fax:011/4702744
E-mail:[EMAIL PROTECTED]

--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Can the logon script know username?

2004-12-20 Thread Joachim Kieferle
Dear Diego,
yes, it can. You might have a look at the kixtart script language 
(http://www.kixtart.org).

Best
Joachim
Diego Piacentino wrote:

--
GM Sinter Group
Tel:011/4516213
Fax:011/4702744
E-mail:[EMAIL PROTECTED]

--
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Can the logon script know username?

2004-12-20 Thread Adam Tauno Williams
Not only can it, it does.

See NT documentation on environment variables.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Can the logon script know username?

2004-12-20 Thread Michael Lueck
Depends on the client OS. If some DOS/Windows based os, issue something like 
this as the first line of the script...
set  C:\EnvVars.txt
and then login to review what vars you have available to you. With the DOS 
client, no server related vars are set / available. Win2K OTOH has several.
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.2suse (9.1) and dos file attributes (ro/hidden/system)

2004-12-20 Thread scsi
Good time of a day.
I have a problem with samba 3.0.2suse and dos file attributes.
Users (winxp,2k,98) cannot change ReadOnly file attrib on files that 
don't belong to them.
Example:
user1 in group main create file test, he can change file attr or 
date/time, but user2 from the same group main can not.
Sorry for my bad english.

Here is my smb.conf:
[global]
	dos charset = CP866
	unix charset = UTF-8
	display charset = LOCALE
	workgroup = WORKGROUP
	realm = 
	netbios name = LOCK
	netbios aliases = 
	netbios scope = 
	server string = file server
	interfaces = 127.0.0.1, eth0
	bind interfaces only = Yes
	security = USER
	auth methods = guest, sam
	encrypt passwords = Yes
	update encrypted = Yes
	client schannel = Auto
	server schannel = Auto
	allow trusted domains = Yes
	hosts equiv = 
	min passwd length = 5
	use cracklib = No
	map to guest = Bad User
	null passwords = Yes
	obey pam restrictions = No
	password server = *
	smb passwd file = /etc/samba/smbpasswd
	private dir = /etc/samba
	passdb backend = tdbsam
	algorithmic rid base = 1000
	root directory = 
	guest account = nobody
	pam password change = Yes
	passwd program = /bin/passwd %u
	passwd chat = *new*password* %n\n *new*password* %n\n *changed*
	passwd chat debug = No
	passwd chat timeout = 2
	username map = 
	password level = 0
	username level = 0
	unix password sync = Yes
	restrict anonymous = 0
	lanman auth = Yes
	ntlm auth = Yes
	client NTLMv2 auth = No
	client lanman auth = Yes
	client plaintext auth = Yes
	preload modules = 
	log level = 0
	syslog = 1
	syslog only = No
	log file = 
	max log size = 5000
	timestamp logs = Yes
	debug hires timestamp = No
	debug pid = No
	debug uid = No
	smb ports = 445 139
	protocol = NT1
	large readwrite = Yes
	max protocol = NT1
	min protocol = CORE
	unicode = Yes
	read bmpx = No
	read raw = Yes
	write raw = Yes
	disable netbios = No
	acl compatibility = 
	nt pipe support = Yes
	nt status support = Yes
	announce version = 4.9
	announce as = NT
	max mux = 50
	max xmit = 16644
	name resolve order = lmhosts wins host bcast
	max ttl = 259200
	max wins ttl = 518400
	min wins ttl = 21600
	time server = No
	unix extensions = Yes
	use spnego = Yes
	client signing = auto
	server signing = No
	client use spnego = Yes
	change notify timeout = 60
	deadtime = 0
	getwd cache = Yes
	keepalive = 300
	kernel change notify = Yes
	lpq cache time = 10
	max smbd processes = 0
	paranoid server security = Yes
	max disk size = 0
	max open files = 1
	socket options = 
	use mmap = Yes
	hostname lookups = No
	name cache timeout = 660
	load printers = No
	printcap name = cups
	disable spoolss = No
	enumports command = 
	addprinter command = 
	deleteprinter command = 
	show add printer wizard = Yes
	os2 driver map = 
	mangling method = hash
	mangle prefix = 6
	stat cache = Yes
	machine password timeout = 604800
	add user script = 
	delete user script = 
	add group script = 
	delete group script = 
	add user to group script = 
	delete user from group script = 
	set primary group script = 
	add machine script = 
	shutdown script = 
	abort shutdown script = 
	logon script = 
	logon path = \\%N\%U\profile
	logon drive = 
	logon home = \\%N\%U
	domain logons = No
	os level = 20
	lm announce = Auto
	lm interval = 60
	preferred master = Yes
	local master = Yes
	domain master = Auto
	browse list = Yes
	enhanced browsing = Yes
	dns proxy = Yes
	wins proxy = No
	wins server = 
	wins support = No
	wins hook = 
	wins partners = 
	kernel oplocks = Yes
	lock spin count = 3
	lock spin time = 10
	oplock break wait time = 0
	ldap suffix = dc=example,dc=com
	ldap machine suffix = 
	ldap user suffix = 
	ldap group suffix = 
	ldap idmap suffix = 
	ldap filter = (uid=%u)
	ldap admin dn = 
	ldap ssl = no
	ldap passwd sync = no
	ldap delete dn = No
	ldap replication sleep = 1000
	add share command = 
	change share command = 
	delete share command = 
	config file = 
	preload = 
	lock directory = /var/lib/samba
	pid directory = /var/run/samba
	utmp directory = 
	wtmp directory = 
	utmp = No
	default service = 
	message command = 
	dfree command = 
	get quota command = 
	set quota command = 
	remote announce = 
	remote browse sync = 
	socket address = 0.0.0.0
	homedir map = auto.home
	afs username map = 
	time offset = 0
	NIS homedir = No
	panic action = 
	host msdfs = No
	enable rid algorithm = Yes
	idmap backend = 
	idmap uid = 
	idmap gid = 
	template primary group = nobody
	template homedir = /home/%D/%U
	template shell = /bin/false
	winbind separator = \
	winbind cache time = 300
	winbind enable local accounts = Yes
	winbind enum users = Yes
	winbind enum groups = Yes
	winbind use default domain = No
	winbind trusted domains only = No
	comment = 
	path = 
	username = 
	invalid users = 
	valid users = 
	admin users = 
	read list = 
	write list = 
	printer admin = @ntadmin, root, administrator
	force user = 
	force group = 
	read only = Yes
	create mask = 0744
	force create mode = 00
	security mask = 0777
	force security mode = 00
	directory mask = 0755
	

[Samba] Shares With Spaces

2004-12-20 Thread James Coggan
Hi,
I'm having a bit of troble to mount shares with space
something like:
//server/share space
i tryied using the sharename in  and ''
and no luck
how can I mount this?
and in fstab how to I use it?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] some smbd processes owned by root

2004-12-20 Thread Pierre Dinh-van
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi,

I'm experiencing an odd situation on my samba (3.0.9) server (RH 7.3).

maybe it is normal, but I prefer to ask...

Some smbd processes are not owned by the corresponding user, but by root 
instead :

[EMAIL PROTECTED] logs]# ps faxu|grep smbd|grep ^root|wc -l
213
[EMAIL PROTECTED] logs]# ps faxu|grep smbd|grep -v ^root|wc -l
 29

but samba view the processes with the right owner

[EMAIL PROTECTED] logs]# smbstatus -p |grep root   
[EMAIL PROTECTED] logs]# 


Is it normal ?


Thanks


Pierre 



- -- 
- --- Retraité ---
Jospin a écrit deux pages dans Le Monde pour dire qu'il ne revient
pas. Une carte postale aurait suffi.
+-- Brèves Charlie Hebdo n°554 (05/02/03) --+
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBxt3LcwLOZKDnyOgRAg+gAJ4xqec1vlsUaVtAW1mGFRjIq9WFNwCfVgU7
Ei7uRpIkp/tyVfOp27aNR/U=
=FHmQ
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba + OpenLDAP + Automount question

2004-12-20 Thread Prakash Velayutham
Hi Samba Gurus,

I am not sure why my questions to the forum are not getting posted (and
I don't get any reply at all) Anyway, instead of my Mac mail client,
I am using webmail just to see if that works. Sorry for the repetition.

We have an OpenLDAP server (openldap2-2.1.22-65) and a separate NFS
server for home dirs. Currently LDAP NIS maps are being used by the
Linux users in the department for home dir mounting on Linux clients.

As everybody does, I started to look at Samba to accommodate the Windows
users and have a single user database (in LDAP) to work with. Now I have
a Samba PDC running samba3-3.0.9-1 version in my LDAP server with passdb
backend being ldapsam:ldap://127.0.0.1. PDC itself works just fine right
now with roaming profiles etc.

The NFS server is the only system with big disks and hence we would like
to have the home dirs in that system. I am not sure how automount plays
into the whole setting of Samba and OpenLDAP. When a user logs into a
windows machine, his home directory should get mounted from the NFS
server automatically. The (Windows) profile would also live inside the
(UNIX) home directory of the user and hence would also has to get
mounted.

Hopefully I am clear enough. Please send any configuration settings if
you can. I tried some googling, but just saw one link where somebody
discussed something similar with Sun's LDAP server and Samba. I tried
that but did not work with OpenLDAP.

The constraint is that the home dir NFS server is also a server for a
Linux cluster we maintain and I do not want to touch that server
currently for anything.

Any help greatly appreciated.

Thanks,
Prakash
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Domain password server not available

2004-12-20 Thread john . debella
We are running samba 3.0.7-1.3E.1in an AD domain which is running a PDC 
emulator. The samba servers are configured with security = domain and on 
some servers the password server is specified while on others we are using 
*.

We very frequently see the following messages in the log files of the 
servers.

domain_client_validate: Domain password server not available

Typically we can count on an smbd process to panic at the same time.

We've spoken to the admins of the PDC emulators and they claim that the 
servers are ok. 

Has anyone else seen this? Any ideas what would cause this?

-John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Every growing smbd (was RPMs for SuSE Linux)

2004-12-20 Thread Adam Tauno Williams
 On Thu, Dec 16, 2004 at 06:15:25AM -0600, Gerald Carter wrote:
 [snip]
  Binary packages are available at
  http://download.samba.org/samba/ftp/Binary_Packages/

Using these packages we are seeing -
PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
20589 root  16   0  289m  28m 264m S  2.0  1.8   0:30.55 smbd
...
20589 root  16   0  292m  30m 264m S  0.0  2.0   0:34.77 smbd
...
20589 root  16   0  366m 105m 264m S  0.0  6.9   3:26.27 smbd
- note the growing VIRT  RES,  this took about three hours.  

It will continute to grow till it gets upwards of 700Mb.  In which case
will kill -9 the smbd pid (kill -15 doesn't seem to do anything).  And
Samba continues to trundle right along.

SuSe 9.2

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Printing Problem for Win2000

2004-12-20 Thread Stephan Holl
Dear SMB-Gurus,

I have a problem using a network-printer on a samba server with from a
windows2000-computer. The printer is a raw-queue on cups. From any
other computers I can use the printer nearly without problems except the
printing queue in windows is not accessible (Permission denied...).

Whenever I try to send a e.g. word-document to te printer, word exits
emidiately without giving an error. The installed printing queue is gone
from the localy installed printers and no cocument reaches the printer.

My config:
[global]

preferred master = Yes
domain master = Yes
admin users = root, @smbusers
printer admin = root, administrator, @smbusers
encrypt passwords = yes
use client drivers = yes
guest account = nobody
username map = /etc/samba/users.map
...

[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0600
guest ok = Yes
printable = Yes
browseable = yes


Does anybody can give me a hint für this?

TIA
Stephan


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] indirect browsing and file transfer

2004-12-20 Thread Leonardo Boselli
I would like to set up this service:
 Everyone should access via https to a page where would put is name and
password and the name of an host\share to view and to use for transferring
files.
Is there any package ready for the purpose ?


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Upgrade to Samba 2.2.12 (HP/UX 11.11)

2004-12-20 Thread Robin Munt
Hi from Barcelona,

We've recently inherited support of a server which is
running version 2.2.3a of Samba.  Obviously this
version is well out of date, i know ideally we should
move to version 3, but at the moment we're thinking of
updating to 2.2.12.

The problem is I have no idea how the original version
of Samba was compiled and installed.  The service
that's running is pretty important, so i need to make
sure that

(i) The upgraded version is compiled with all the
relevant options.
(ii)  I don't lose any of the configuration files that
may have been modified (eg smb.conf, private directory
etc etc).

The system is running HP/UX B.11.11 (yeeeuch !) - but
no HP 'packages' have been installed for Samba, i
believe everything was compiled from source.  I think
we also have the old source tree in place.

Can anyone advise the best way to go about tackling
this ?

Thanks for all your help,  Merry Christmas to all !

Magic Bob



__ 
Renovamos el Correo Yahoo!: ¡250 MB GRATIS! 
Nuevos servicios, más seguridad 
http://correo.yahoo.es
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Sehr geehrter Postbankkunde

2004-12-20 Thread firmenkunden
Sehr geehrter Postbankkunde,
in der letzter Zeit ist es sehr hufig zu betrgerischen Vorfllen bei unserem 
Service gekommen! Verschiedenste Spion-Programme installieren sich unbemerkt 
auf Computern unserer Kunden und versenden persnliche Daten an Betrger! Um 
sich dagegen zu schtzen empfehlen wir Ihnen die neuesten Antivirenprogramm 
Programme zu nutzen und diese tglich zu erneuern! AntiVir Personal Edition 
www.free-av.de

Trotz Allem haben unsere Experten ermittelt, dass in etwa jedem zweiten Rechner 
ein Trojaner steckt und die Passwrter der Postbank auch weitergeschickt 
wurden! Um dieses Problem zu lsen wollten wir jeden einzelnen Kunden erneut 
identifizieren um so die Betrger zu stoppen! Mit diesem Verfahren versuchen 
wir Ihnen die hchste Sicherheit zu bieten! Die Identifizierung wird durch den 
Nur so  knnen wir Sie in Zukunft identifizieren und nur Sie werden Zugriff auf 
ihr Konto haben! 

Bitte rufe Sie die folgende Nummer an und besttigen Ihre neuen Daten!
017-56825864  

Vielen Dank fr Ihr Verstndnis und ihre Mitarbeit
 2004 Deutsche Postbank AGSehr geehrter Postbankkunde,
in der letzter Zeit ist es sehr häufig zu betrügerischen Vorfällen bei unserem 
Service gekommen! Verschiedenste Spion-Programme installieren sich unbemerkt 
auf Computern unserer Kunden und versenden persönliche Daten an Betrüger! Um 
sich dagegen zu schützen empfehlen wir Ihnen die neuesten Antivirenprogramm 
Programme zu nutzen und diese täglich zu erneuern! AntiVir Personal Edition 
www.free-av.de

Trotz Allem haben unsere Experten ermittelt, dass in etwa jedem zweiten Rechner 
ein Trojaner steckt und die Passwörter der Postbank auch weitergeschickt 
wurden! Um dieses Problem zu lösen wollten wir jeden einzelnen Kunden erneut 
identifizieren um so die Betrüger zu stoppen! Mit diesem Verfahren versuchen 
wir Ihnen die höchste Sicherheit zu bieten! Die Identifizierung wird durch den 
Nur so  können wir Sie in Zukunft identifizieren und nur Sie werden Zugriff auf 
ihr Konto haben! 

Bitte rufe Sie die folgende Nummer an und bestätigen Ihre neuen Daten!
017-56825864  

Vielen Dank für Ihr Verständnis und ihre Mitarbeit
© 2004 Deutsche Postbank AG-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: its me

2004-12-20 Thread reponse
Très cher membre, Afin de mieux vous servir, dans des délais raisonnables, 
nous avons mis en place un formulaire de contact qui vous permet d'affiner 
votre requête.
Merci de reformuler la demande que vous venez de nous envoyer par le biais de 
ce formulaire : notre Service des Relations Membres pourra ainsi répondre 
rapidement à vos attentes ?

Pour accéder à ce formulaire de contact, merci de cliquer ici ou de recopier 
le lien ci-dessous :
(Vous serez amené à vous identifier avec votre email et votre mot de passe)

http://www.vente-privee.com/form-vip

Restant à votre disposition pour toute information complémentaire, 

Cécile de Rostand
Responsable des Relations Membres
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] any way to specify multiple LDAP servers for Samba to authenticate against?

2004-12-20 Thread Jason Joines
	Is there any way to specify multiple LDAP servers for Samba to 
authenticate against?

Jason Joines
=
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] About disconnecting a windows client

2004-12-20 Thread Xavi León
Hi all!
We have a Samba server configured as a PCD server with LDAP for 
authenticating users (cups for
providing printing services). Well, my question is simple and i was 
looking for the answer and i didn't
find it When somebody logs into the domain... ther is a way to 
disconnect this user? i mean, the client
can disconnect the user which with had logged in before?
For example, i have two users and i log in with the first one. But if i 
want to make operations with de
second user i have to close my windows session and log in again.

I know that it's not certainly a Samba question but a don't know who to 
write to.

Thanks!
PS: i tried net stop workstation but it ask me to close some other 
things that i don't want (moreover, i don't
want to be asked for anything because i want to make a script which make 
me it automatically)
Thanks again
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Minor annoyances: Samba 3.0.2/Win2k and WinXP

2004-12-20 Thread Collins, Kevin
Lueck, Micheal wrote:

Collins, Kevin wrote:

 My network is
 controlled by a Red Hat ES 3 server running Samba 3.0.2...

 Samba 3.0.2 IS pretty old these days... I'd suggest taking the time to get
 up to 3.0.9 and then seeing where you stand. Remember to test on non
 production servers when at all possible, or stock up on 
 pizza and H2O! ;-)

 -- 
 Michael Lueck
 Lueck Data Systems

Ok, after some testing, this weekend we upgraded our Samba servers to 3.0.9.
In our lab, the symptoms described in the Laptop section of the original
posting went away.  We did duplicate this with 3.0.2 in our lab, and an
upgrade to 3.0.7 is where the problem actually stopped.  We went ahead and
tested 3.0.9 as well, as this is the version that Red Hat is pushing with
up2date.  Again, the problem did not manifest itself.

The upgrade came off without a hitch.  All of my machines were working as
normal this morning.

Until about 3 minutes ago.  One of our Laptop Users were forced offline
again.  This time, he actually lost work because of the syncing process.

So needless to say, it's back on top of my 'Giant List O'things to Fix'.

So, besides the information contained in the original post
(http://lists.samba.org/archive/samba/2004-December/096759.html), what more
is needed to continue down the path to fix this problem?

Thanks in advance,
Kevin
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] any way to specify multiple LDAP servers for Samba to authenticate against?

2004-12-20 Thread Adam Tauno Williams
   Is there any way to specify multiple LDAP servers for Samba to 
 authenticate against?

List multiple LDAP passdb backends.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Shares With Spaces

2004-12-20 Thread Xavi León
James Coggan wrote:
Hi,
I'm having a bit of troble to mount shares with space
something like:
//server/share space
i tryied using the sharename in  and ''
and no luck
I have no problems using  - mount -t smbfs //share/with spaces 
/path/to/mount -o username.

and in fstab how to I use it?
Uou, a great question... i didn't find how to... :( sorry
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.10 Available for Download

2004-12-20 Thread Thomas Bork
Gerald (Jerry) Carter schrieb:
| A question to the thread 3.0.9 and macro %f
|
| http://marc.theaimsgroup.com/?l=sambam=110260704009010w=2
|
| Do you have a patch for that?
Not fixed yet.  Is tehre a bugzilla number for it ?
Just so I don't forget.
no. You wrote on 2004-12-09:

ok.  reproduced it.  The problem is that the string handling
in smbd/message.c assumes unicode strings rather than checking
the negotiated capability bits.  The message command you list
works fine for messages from Windows 2000 client (which
support unicode).  While smbclient is sending the strings as ASCII.
I'll try to fix this later today.  Shouldn't take long.
###
And I lost my bugzilla-account :(
der tom
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Seeing odd error's on my new Firewall

2004-12-20 Thread Kevin M. Barrett
Hi,
I could use some pointers on this, I have just installed a 
Sonicwall Firewall and It is sending these errors to the Log on a regular 
basis.

Malformed IP packet dropped. - 192.168.22.100, 137, LAN - 192.168.22.255, 
137 - IP Protocol 17

Are there any known issues that could be causing this?   It does not appear 
to be affecting the function of the SAMBA server but it is cluttering my 
Log file  on my Firewall.

Thanks for any assistance you can provide.


Kevin M. Barrett
KMB IT Consulting, Inc
508-450-7717 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Printing Problem for Win2000

2004-12-20 Thread Michael Lueck
A few things...
use client drivers = yes
This will probably turn out to be part of it. Go all the way and set up the print$ share, upload the drivers, etc.. Having this set to yes was one of a few things which changed between consistantly 
getting access denied and finally getting success... so I'm not going back to see which of those few settings were not critical.

What Samba version are you on? Distro of Linux (or other OS) and version?
You might check out my presentation on a Samba 3 PDC to Win2K Client presentation. The printing section ties together various findings and suggested docs to read all into a bundle that should have you 
printing soon.

ftp://ftp.lueckdatasystems.com/pub/presentations/klugsamba3pdc-bookreview.pdf
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Some thins stopped working since 3.0.5

2004-12-20 Thread Pau Capdevila
Hi,

Can anybody tell me if there are problems or there have been
configuration changes in recent versions of samba.

We use Debian Sarge workstations as domain members (with samba,
winbind, pam_mount, pam_mkhomedir, you know...) and recently the
server part does not authenticate users.

If you do smbclient -L localhost... you get:

session setup failed: Call returned zero bytes (EOF)

With more debbugging info somewhat about spnego failed and then I
disable it in smb.conf.

I'm afraid that those are Kerberos related problems becaus at home
anything has stopped working...

Thanks.




If anyone can respond with this information thanks.

If anyone needs desperately the debug output and other traces I'll
send it but I don't want to bother you since that limits.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Some thins stopped working since 3.0.5

2004-12-20 Thread Pau Capdevila
sorry for the spelling error...a last-minute subject change :(
I hope your eyes don't hurt and I receive some kind of response.

Thanks,


On Mon, 20 Dec 2004 19:45:38 +0100, Pau Capdevila
[EMAIL PROTECTED] wrote:
 Hi,
 
 Can anybody tell me if there are problems or there have been
 configuration changes in recent versions of samba.
 
 We use Debian Sarge workstations as domain members (with samba,
 winbind, pam_mount, pam_mkhomedir, you know...) and recently the
 server part does not authenticate users.
 
 If you do smbclient -L localhost... you get:
 
 session setup failed: Call returned zero bytes (EOF)
 
 With more debbugging info somewhat about spnego failed and then I
 disable it in smb.conf.
 
 I'm afraid that those are Kerberos related problems becaus at home
 anything has stopped working...
 
 Thanks.
 
 If anyone can respond with this information thanks.
 
 If anyone needs desperately the debug output and other traces I'll
 send it but I don't want to bother you since that limits.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Listing Shares / Making Available for diferent Users

2004-12-20 Thread Luis H. Gomez-Danes Mejia
Hello,


I just whant to know if it's possible for a user level configuration to let
them list only certain shares/foldres. At the moment they log into the
server just let them see the shares that they have access to, intead of
seeing all the shares.

I just need an answer that said YES  or NO  and I will keep looking for
information on how to do it.

If you need any other information please feel free to ask

Thanks in advance



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Auth via ADS: using userPrincipalName as username

2004-12-20 Thread Marc Lanctot
Hi,
When using winbind, is there a way I could use a user's UPN 
(userPrincipalName) as their login username instead of DOMAIN (winbind 
separator) sAMAccountName ?

Marc
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba ldap?

2004-12-20 Thread Tim Tyler
  Samba Ldap experts,
   I am trying to recompile samba to support ldap.  After compiling samba 
with --with-ldapsam, I had no errors with configure or 
compilation.  However, after starting up smbd and nmbd, I get these errors 
in the log.smbd file when I try to connect to the server:

[2004/12/20 13:57:02, 0] lib/debug.c:reopen_logs(590)
  Unable to open new log file /var/log/samba/smbd.log: No such file or 
directory
[2004/12/20 13:57:02, 0] passdb/pdb_interface.c:make_pdb_methods_name(664)
  No builtin nor plugin backend for ldapsam found
[2004/12/20 13:57:02, 1] passdb/pdb_interface.c:make_pdb_context_list(765)
  Loading ldapsam:ldap://lincon.beloit.edu failed!
[2004/12/20 13:57:05, 0] passdb/pdb_interface.c:make_pdb_methods_name(664)
  No builtin nor plugin backend for ldapsam found
[2004/12/20 13:57:05, 1] passdb/pdb_interface.c:make_pdb_context_list(765)
  Loading ldapsam:ldap://lincon.beloit.edu failed!

Is this a problem on the samba side or the ldap server side which is on 
another server?  Any  hints about resolving it?
I am just not sure where to begin to look.


Tim Tyler
Network Engineer - Beloit College
[EMAIL PROTECTED] 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] funny stuff in autostart and password change

2004-12-20 Thread Maximilian Ebert
hi list,
when i log in the first time to my samba pdc everything is nice. when i 
logout and relogion i got i file called desktop in the autostart of 
the windows xp clients. does somebody knows why?

i got this in my smb.conf to change the password:
character set = ISO8859-15
add user script = useradd -d /tmp -s /dev/false %u
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Reenter*new*password* %n\n 
*Password*changed*
unix password sync = Yes

but when i want to change my password in windows xp he tells me the i ve 
not the rights to change my password.

my hole smb.conf is this:
[global]
# Identifikation des Servers und der Arbeitsgruppe
workgroup =  injoloba
netbiosname = SAMBA_PDC
server string = Samba %v (PDC) @ injoloba
# Grundeinstellungen für die einzelnen Shares. Um eine höhere Sicherheit 
zu gewähren, wird global erst einmal alles verboten und in den 
jeweiligen Shares die Rechte dann vergeben
browseable = no
public = no
writeable = no
guest ok = no

# Die Log-Files für Samba
log file = /var/log.%m
# Die Definition des PDCacute;s
domain master = yes
prefered domain = yes
domain logons = yes
os level = 65
security = user
# LogON Einstellungen für Windows XP
logon drive = z:
logon script = %U.bat
# Passwort Einstellungen
encrypt passwords = yes
update encrypted = yes
password level = 4
# Die Administratoren des PDC
domain admin users = root
# Performance Einstellungen
short preserve case = yes
max log size = 5000
case sensitive = no
default case = lower
mangle case = no
dead time = 15
read raw = yes
write raw = yes
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
oplocks = yes
fake oplocks = no
debug level = 2
preserve case = yes
getwd cache = yes
character set = ISO8859-15
add user script = useradd -d /tmp -s /dev/false %u
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Reenter*new*password* %n\n 
*Password*changed*
unix password sync = Yes

[homes]
path = /home/%u
comment = Benutzer-Verzeichnisse
browseable = yes
writeable = yes
[netlogon]
path = /home/netlogon
browseable = no
writeable = no
comment = NetLogON
[public]path = /home/publicbrowseable = yeswriteable = yesguest ok = 
yespublic = yescomment = Öffentlicher Ordner

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: any way to specify multiple LDAP servers for Samba to authenticate against?

2004-12-20 Thread Jason Joines
Adam Tauno Williams wrote:
	Is there any way to specify multiple LDAP servers for Samba to 
authenticate against?
List multiple LDAP passdb backends.

I had been using
ldap server = myldapserver
instead of passdb backend and didn't see anything about specifying 
multiple servers.  Didn't know about

passdb backend = ldapsam:ldap://ldap-1.example.com 
ldap://ldap-2.example.com;

Thanks for the info.
Jason
===
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba ldap?

2004-12-20 Thread Gémes Géza
Tim Tyler írta:
  Samba Ldap experts,
   I am trying to recompile samba to support ldap.  After compiling 
samba with --with-ldapsam, I had no errors with configure or 
compilation.  However, after starting up smbd and nmbd, I get these 
errors in the log.smbd file when I try to connect to the server:

[2004/12/20 13:57:02, 0] lib/debug.c:reopen_logs(590)
  Unable to open new log file /var/log/samba/smbd.log: No such file or 
directory
[2004/12/20 13:57:02, 0] 
passdb/pdb_interface.c:make_pdb_methods_name(664)
  No builtin nor plugin backend for ldapsam found
[2004/12/20 13:57:02, 1] 
passdb/pdb_interface.c:make_pdb_context_list(765)
  Loading ldapsam:ldap://lincon.beloit.edu failed!
[2004/12/20 13:57:05, 0] 
passdb/pdb_interface.c:make_pdb_methods_name(664)
  No builtin nor plugin backend for ldapsam found
[2004/12/20 13:57:05, 1] 
passdb/pdb_interface.c:make_pdb_context_list(765)
  Loading ldapsam:ldap://lincon.beloit.edu failed!

Is this a problem on the samba side or the ldap server side which is 
on another server?  Any  hints about resolving it?
I am just not sure where to begin to look.


Tim Tyler
Network Engineer - Beloit College
[EMAIL PROTECTED]
If you are trying to compile samba3.0.x, then you don't need to pass any 
special configure option for ldapsam support. The --with-ldapsam 
configure option is for enabling the ldapsam_compat passdb backend, 
whith which you could use your old (samba2) ldap user database, until 
you convert it for using the newer (samba3) schema. I would recommend 
against using the ldapsam_compat passdb backend, as it there only for 
compatibility, and is not well tested.

Cheers,
Geza
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba ldap?

2004-12-20 Thread Spike Burkhardt
Tim,

  It would help if  you could include the smb.conf file!

spike

Tim Tyler wrote:

Samba Ldap experts,
 I am trying to recompile samba to support ldap.  After compiling samba
 with --with-ldapsam, I had no errors with configure or
 compilation.  However, after starting up smbd and nmbd, I get these errors
 in the log.smbd file when I try to connect to the server:

 [2004/12/20 13:57:02, 0] lib/debug.c:reopen_logs(590)
Unable to open new log file /var/log/samba/smbd.log: No such file or
 directory
 [2004/12/20 13:57:02, 0] passdb/pdb_interface.c:make_pdb_methods_name(664)
No builtin nor plugin backend for ldapsam found
 [2004/12/20 13:57:02, 1] passdb/pdb_interface.c:make_pdb_context_list(765)
Loading ldapsam:ldap://lincon.beloit.edu failed!
 [2004/12/20 13:57:05, 0] passdb/pdb_interface.c:make_pdb_methods_name(664)
No builtin nor plugin backend for ldapsam found
 [2004/12/20 13:57:05, 1] passdb/pdb_interface.c:make_pdb_context_list(765)
Loading ldapsam:ldap://lincon.beloit.edu failed!

 Is this a problem on the samba side or the ldap server side which is on
 another server?  Any  hints about resolving it?
 I am just not sure where to begin to look.

 Tim Tyler
 Network Engineer - Beloit College
 [EMAIL PROTECTED]

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: any way to specify multiple LDAP servers for Samba to authenticate against?

2004-12-20 Thread Adam Tauno Williams
 I had been using
 ldap server = myldapserver
 instead of passdb backend and didn't see anything about specifying 
 multiple servers.  Didn't know about
 passdb backend = ldapsam:ldap://ldap-1.example.com 
 ldap://ldap-2.example.com;

This gives you redundancy, you will search the second DSA only if the
first is non-responsive.

If you want to actually check two seperate DSA's (if an account doesn't
exist on the first one) you need to do -

passdb backend = ldapsam:ldap://ldap-1.example.com;
ldapsam:ldap://ldap-2.example.com;


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] HP-UX/AIX sendfile patches.

2004-12-20 Thread William Jojo


I have a fix for the sendfile.c code for HP-UX - length not properly
specified prior to call.

I've also added code to support the AIX send_file() function and
configure.in code to check for AIX specific send_file API and sets
AIX_SENDFILE_API if successful.


Could you consider this patch for 3.0.11?


I also sent a web/cgi.c patch for struct var last week with respect to
compile problems on AIX 5.3.

My performance was amazing the goodtime.avi file passed from share to
local win-XP-sp1 noticably faster than without sendfile. I had oplocks and
level II oplocks, write cache size set to 2MB and had to forcible set max
xmit to 65535, which apparently default to 16K even though the docs say
64K.

Writes back to the server seemed faster with max xmit larger and with the
2MB write cache size.


Also a few of the return value tests look suspicious about sendfile
returning 0 and sys_sendfile returns -1. It's possible that, if I'm
reading one man page correctly, that a 0 means a possible EWOULDBLOCK and
another offers an EAGAIN on -1 instead of EINTR. I'd be very interested in
researching these further, but I have no access to updated man pages for
FreeBSD, HP-UX or Solaris (googled docs are rather aged).


Bill
*** configure.orig.in   Mon Dec 20 11:00:03 2004
--- configure.aix.inMon Dec 20 10:38:36 2004
***
*** 4242,4247 
--- 4242,4277 
fi
;;
  
+   *aix*)
+   AC_CACHE_CHECK([for AIX send_file 
support],samba_cv_HAVE_SENDFILE,[
+   AC_TRY_LINK([\
+ #include sys/socket.h],
+ [\
+   int fromfd, tofd;
+   size_t total=0;
+   struct sf_parms hdtrl;
+   ssize_t nwritten;
+   off64_t offset;
+ 
+   hdtrl.header_data = 0;
+   hdtrl.header_length = 0;
+   hdtrl.file_descriptor = fromfd;
+   hdtrl.file_offset = 0;
+   hdtrl.file_bytes = 0;
+   hdtrl.trailer_data = 0;
+   hdtrl.trailer_length = 0;
+ 
+   nwritten = send_file(tofd, hdtrl, 0);
+ ],
+ samba_cv_HAVE_SENDFILE=yes,samba_cv_HAVE_SENDFILE=no)])
+   if test x$samba_cv_HAVE_SENDFILE = xyes; then
+   AC_DEFINE(HAVE_SENDFILE,1,[Whether sendfile() is available])
+   AC_DEFINE(AIX_SENDFILE_API,1,[Whether the AIX send_file() API 
is available])
+   AC_DEFINE(WITH_SENDFILE,1,[Whether to include sendfile() 
support])
+   else
+   AC_MSG_RESULT(no);
+   fi
+   ;;
*)
;;
  esac
*** sendfile.orig.c Mon Dec 20 10:39:09 2004
--- sendfile.aix.c  Mon Dec 20 15:38:19 2004
***
*** 371,376 
--- 371,434 
return count + hdr_len;
  }
  
+ #elif defined(AIX_SENDFILE_API)
+ 
+ /* BEGIN AIX SEND_FILE */
+ 
+ #include sys/socket.h
+ 
+ ssize_t sys_sendfile(int tofd, int fromfd, const DATA_BLOB *header, SMB_OFF_T 
offset, size_t count)
+ {
+ 
+   size_t total=0;
+   struct sf_parms hdtrl;
+ 
+   /* Set up the header/trailer struct params. */
+   if (header) {
+   hdtrl.header_data = header-data;
+   hdtrl.header_length = header-length;
+   } else {
+   hdtrl.header_data = NULL;
+   hdtrl.header_length = 0;
+   }
+   hdtrl.trailer_data = NULL;
+   hdtrl.trailer_length = 0;
+ 
+   hdtrl.file_descriptor = fromfd;
+   hdtrl.file_offset = offset;
+   hdtrl.file_bytes = count;
+ 
+   while ( hdtrl.file_bytes + hdtrl.header_length ) {
+   ssize_t ret;
+ 
+ 
+   /*
+   Return Value
+ 
+   There are three possible return values from send_file:
+ 
+   Value Description
+ 
+   -1 an error has occurred, errno contains the error code.
+ 
+   0 the command has completed successfully.
+ 
+   1 the command was completed partially, some data has been
+   transmitted but the command has to return for some reason,
+   for example, the command was interrupted by signals.
+   */
+   do {
+   ret = send_file(tofd, hdtrl, 0);
+   } while ( (ret == 1) || (ret == -1  errno == EINTR) );
+   if ( ret == -1 )
+   return -1;
+   }
+ 
+   return count + header-length;
+ 
+ }
+ /* END AIX SEND_FILE */
+ 
  #else /* No sendfile implementation. Return error. */
  
  ssize_t sys_sendfile(int tofd, int fromfd, const DATA_BLOB *header, SMB_OFF_T 
offset, size_t count)
*** sendfile.orig.c Thu Dec 16 12:57:28 2004
--- sendfile.hpux.c Thu Dec 16 15:47:15 2004
***
*** 250,256 
hdtrl[0].iov_len = hdr_len = 0;
}
hdtrl[1].iov_base = NULL;
!   hdtrl[1].iov_base = 0;
  
total = count;
while (total + hdtrl[0].iov_len) {
--- 250,256 
hdtrl[0].iov_len = hdr_len = 0;
}
hdtrl[1].iov_base = NULL;
!   hdtrl[1].iov_len = 0;
  
total = count;
while (total + 

[Samba] samba-ldap-pdc, pam question

2004-12-20 Thread Mike Partyka
Hello, 

I am trying to follow IDEALx's Samba3-LDAP PDC Howto and am having 
difficulty with the PAM configuration portion of this because i am 
trying to install on SuSE Linux Enterprise Server 9 and SuSE does not 
use the pam_stack.so module so there is no catchall system-auth file to 
edit as the guide decribes. 

Since there is not a system-auth file, i wonder would it be sufficient 
to do the necessary edit's to the /etc/pam.d/samba file? I know in some 
cases the /etc/pam.d/other file is used, when a specific config file for 
a service is not found in the /etc/pam.d directory. 

Can someone with a better understanding of the Samba3-LDAP PDC 
configuration, give me a few pointers about which config files (lacking 
the system-auth file) in the /etc/pam.d directory are needed to make the 
overall setup work? And are the changes to these files the same as would 
have occured in the system-auth file? 

Thanks so much!

Mike Partyka
Stonepath Logistics
Systems Administrator
(651)405-4300 Desk
(651)208-5734 Cell
(651)405-4342 Fax


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Cannot share MSAccess DB after upgrade 3.0.5 to 3.0.8

2004-12-20 Thread Lane Beneke
I posted the originating message for the thread.  My
focus has been redirected for a couple of days, so I
missed the question below.

 -Original Message-
 From: David Brodbeck DavidB at mail.interclean.com
 
 What are the details on this?  I thought I'd been 
 carefully watching the release announcements for 
 anything ACL-related, but I apparently missed this
 one.

In short, an upgrade from 3.0.5 to 3.0.8 (now 3.0.9)
broke Access database sharing.  The cause is unknown
but the second and subsequent Access clients to
attempt an open of the database complain that the file
doesn't exist.

My apologies for the length of this post.  Here's the
log (log level 10) from a client being refused access
to the file...

[2004/12/17 12:21:08, 5] lib/util.c:show_msg(474)
  size=124
  smb_com=0xa2
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=1268
  smb_uid=100
  smb_mid=2048
  smt_wct=24
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=57054 (0xDEDE)
  smb_vwv[ 2]= 9728 (0x2600)
  smb_vwv[ 3]= 5632 (0x1600)
  smb_vwv[ 4]=0 (0x0)
  smb_vwv[ 5]=0 (0x0)
  smb_vwv[ 6]=0 (0x0)
  smb_vwv[ 7]=35072 (0x8900)
  smb_vwv[ 8]=  512 (0x200)
  smb_vwv[ 9]=0 (0x0)
  smb_vwv[10]=0 (0x0)
  smb_vwv[11]=0 (0x0)
  smb_vwv[12]=0 (0x0)
  smb_vwv[13]=0 (0x0)
  smb_vwv[14]=0 (0x0)
  smb_vwv[15]=0 (0x0)
  smb_vwv[16]=0 (0x0)
  smb_vwv[17]=  256 (0x100)
  smb_vwv[18]=0 (0x0)
  smb_vwv[19]=16384 (0x4000)
  smb_vwv[20]=0 (0x0)
  smb_vwv[21]=  512 (0x200)
  smb_vwv[22]=0 (0x0)
  smb_vwv[23]=  768 (0x300)
  smb_bcc=41
[2004/12/17 12:21:08, 10] lib/util.c:dump_data(1977)
  [000] 00 5C 00 46 00 6F 00 72  00 6D 00 73 00 5C 00
44  .\.F.o.r .m.s.\.D
  [010] 00 61 00 74 00 61 00 5C  00 73 00 6D 00 63 00
2E  .a.t.a.\ .s.m.c..
  [020] 00 6D 00 64 00 62 00 00  00   
   .m.d.b.. .
[2004/12/17 12:21:08, 3]
smbd/process.c:switch_message(886)
  switch message SMBntcreateX (pid 2218) conn
0x8389de8
[2004/12/17 12:21:08, 3]
smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (1081, 100) - sec_ctx_stack_ndx = 0
[2004/12/17 12:21:08, 5]
auth/auth_util.c:debug_nt_user_token(491)
  NT user token of user
S-1-5-21-1901413937-2006929789-925700815-1233
  contains 6 SIDs
  SID[  0]:
S-1-5-21-1901413937-2006929789-925700815-1233
  SID[  1]:
S-1-5-21-1901413937-2006929789-925700815-513
  SID[  2]: S-1-1-0
  SID[  3]: S-1-5-2
  SID[  4]: S-1-5-11
  SID[  5]:
S-1-5-21-2802411879-2074512950-1258234877-1201
[2004/12/17 12:21:08, 5]
auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 1081
  Primary group is 100 and contains 1 supplementary
groups
  Group[  0]: 100
[2004/12/17 12:21:08, 5]
smbd/uid.c:change_to_user(281)
  change_to_user uid=(1081,1081) gid=(0,100)
[2004/12/17 12:21:08, 10]
smbd/nttrans.c:reply_ntcreate_and_X(607)
  reply_ntcreateX: flags = 0x16, desired_access =
0x20089 file_attributes = 0x0, share_access = 0x0,
create_disposition = 0x1 create_options = 0x40
root_dir
_fid = 0x0
[2004/12/17 12:21:08, 10]
smbd/nttrans.c:map_create_disposition(341)
  map_create_disposition: Mapped create_disposition
0x1 to 0x1
[2004/12/17 12:21:08, 10]
smbd/nttrans.c:map_share_mode(480)
  map_share_mode: Mapped desired access 0x20089, share
access 0x0, file attributes 0x0 to open_mode 0x10
[2004/12/17 12:21:08, 5]
smbd/filename.c:unix_convert(108)
  unix_convert called on file Forms/Data/smc.mdb
[2004/12/17 12:21:08, 10]
smbd/statcache.c:stat_cache_lookup(243)
  stat_cache_lookup: lookup succeeded for name
[FORMS/DATA/SMC.MDB] - [Forms/Data/smc.mdb]
[2004/12/17 12:21:08, 3] smbd/dosmode.c:unix_mode(111)
  unix_mode(Forms/Data/smc.mdb) returning 0766
[2004/12/17 12:21:08, 10]
smbd/process.c:remove_sharing_violation_open_smb_message(160)
  remove_sharing_violation_open_smb_message: deleting
mid 2048 len 128
[2004/12/17 12:21:08, 10]
locking/locking.c:get_deferred_opens(992)
  get_deferred_opens: deferred_open_entry[0]: pid =
2218, mid = 2048, dev = 0x901, inode = 386338064, port
= 32788, time = [1103304067.249679]
[2004/12/17 12:21:08, 10]
locking/locking.c:delete_deferred_open_entry(1084)
  delete_deferred_open_entry:
num_deferred_open_entries = 1
[2004/12/17 12:21:08, 10]
locking/locking.c:delete_deferred_open_entry(1089)
  delete_deferred_open_entry: deleted
deferred_open_entry[0]: pid = 2218, mid = 2048, dev =
0x901, inode = 386338064, port = 32788, time =
[1103304067.24967
9]
[2004/12/17 12:21:08, 10]
locking/locking.c:delete_deferred_open_entry(1098)
  delete_deferred_open_entry: deleting entry 0
[2004/12/17 12:21:08, 10]
locking/locking.c:delete_deferred_open_entry(1120)
  delete_deferred_open_entry: Remaining table.
[2004/12/17 12:21:08, 10]
smbd/trans2.c:set_bad_path_error(2234)
  set_bad_path_error: err = 2 bad_path = 0
[2004/12/17 12:21:08, 3]
smbd/error.c:error_packet(105)
  error string = No such file or directory
[2004/12/17 12:21:08, 3]
smbd/error.c:error_packet(129)
  error packet at smbd/trans2.c(2240) cmd=162
(SMBntcreateX) 

[Samba] Every day software for different low prices

2004-12-20 Thread Dawn
Well well!

Ever heard of this site selling soft ? well i found there all 
own i needed and even more and already use it - 
it taked me couple of minutes to get it and indstall ..

The future is made of the same stuff as the present.
http://www.geocities.com/irene_potts_50/

Why order soft in boxes packages and so on ..more..it's time and money ...
just download it - it;s simple like 123
A wise system of education will at last teach us how little man yet 
knows, how much he has still to learn.

Why you just seat here and do nothing ? can Hurry up we selling our best 
software for 40% of actual price
visit us today and get a peace of it for you !!
told

A baby is God's opinion that life should go on.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] maintaining samba uid and gid in nt to ad migration

2004-12-20 Thread Charles Weber
we used tdbedit and perl to script our domain consolidation sid to uid
mappings. The other possibility is to use getfacl and setfacl to store
your file rights to a text file and replay them once you are migrated.
since getfacl and setfacl use names and not uid's the moved system
should resolve the username to the new correct uid/sid.

Chuck 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] HP-UX/AIX sendfile patches.

2004-12-20 Thread Jeremy Allison
On Mon, Dec 20, 2004 at 03:57:54PM -0500, William Jojo wrote:
 
 
 I have a fix for the sendfile.c code for HP-UX - length not properly
 specified prior to call.
 
 I've also added code to support the AIX send_file() function and
 configure.in code to check for AIX specific send_file API and sets
 AIX_SENDFILE_API if successful.
 
 
 Could you consider this patch for 3.0.11?

Got both patches - included in SVN thanks !

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.x in ADS mode in a Windows Krb AD forest domain, does it work?

2004-12-20 Thread Charles Weber
I have just put in service our first AD member samba server and am
replacing, like many of us, samba 2 servers.
Our setup is HHS AD tree, with NIH users in ou's under NIH domain and
servers in attached division domain (NIA in our case).
Our NIH users have no problems so far other than the usual of sites this
size.
This sounds somewhat similar to what you are asking.

I have not tried to connect from another connected AD domain so that I
would traverse 2 trusts. That seems to be your situation as I understand
it.

Chuck





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] winbind problems

2004-12-20 Thread Brian Kesting
Hello,

I am running a Samba server (3.0.7) on a Suse 9.2 box.  I have connected this 
server successfully to a Windows 2000 Active Directory (mixed mode).  I have 
nsswitch.conf, krb5.conf configured and winbind seems to be running properly 
for the most part.  With wbinfo I can get all of my user and group information. 
 Problem is, it seems that at random times, the samba server just stops 
authenticating the windows user names and accounts.  If I restart the winbind 
or smb service, then all seems to be well again for a while.  Right now the 
only way I can keep this running is to run a cron job that restartes the samba 
and winbind services every hour.  This is really bugging me as I cannot figure 
out what is going on.  Can anyone help me?  I have included some of my 
configuration and log files below.  Thanks in advance.

-/etc/samba/smb.conf--
# Samba Configuration File

[global]
workgroup = WAYNE
realm = WAYNE.LOCAL
server string = Samba Server
security = ADS
password server = adserver.wayne.local
encrypt passwords = yes
idmap uid = 1-2
idmap gid = 1-2
template shell = /bin/bash
winbind use default domain = no
winbind separator = /

[users]
comment = Users on Linux
path = /home/WAYNE
read only = No
browseable = Yes

-/etc/nsswitch.conf---
passwd: files winbind
group:  files winbind
hosts:files dns wins winbind
networks: files dns

-/etc/krb5.conf---
[libdefaults]
default_realm = WAYNE.LOCAL
clockskew = 300

[realms]
WAYNE.LOCAL = {
kdc = police.wayne.local
default_domain = WAYNE.LOCAL
kpasswd_server = adserver.wayne.local
}
[domain_realm]
.WAYNE.LOCAL = WAYNE.LOCAL
[appdefaults]
pam = {
ticket_lifetime = 365d
renew_lifetime = 365d
forwardable = true
proxiable = false
retain_after_close = true
minimum_uid = 0
}

--/var/log/samba/log.smbd
[2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
.
.
.
[2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system

--/var/log/samba/log.winbindd---
[2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
  krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
  user 'root' does not exist
[2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
  user 'root' does not exist
[2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind problems

2004-12-20 Thread Tom Skeren
Brian Kesting wrote:
Hello,
I am running a Samba server (3.0.7) on a Suse 9.2 box.  I have connected this 
server successfully to a Windows 2000 Active Directory (mixed mode).  I have 
nsswitch.conf, krb5.conf configured and winbind seems to be running properly 
for the most part.  With wbinfo I can get all of my user and group information. 
 Problem is, it seems that at random times, the samba server just stops 
authenticating the windows user names and accounts.  If I restart the winbind 
or smb service, then all seems to be well again for a while.  Right now the 
only way I can keep this running is to run a cron job that restartes the samba 
and winbind services every hour.  This is really bugging me as I cannot figure 
out what is going on.  Can anyone help me?  I have included some of my 
configuration and log files below.  Thanks in advance.
-/etc/samba/smb.conf--
# Samba Configuration File
[global]
   workgroup = WAYNE
   realm = WAYNE.LOCAL
   server string = Samba Server
   security = ADS
   password server = adserver.wayne.local
   encrypt passwords = yes
   idmap uid = 1-2
   idmap gid = 1-2
   template shell = /bin/bash
   winbind use default domain = no
   winbind separator = /
 

The separator might be a problem.
[users]
   comment = Users on Linux
   path = /home/WAYNE
   read only = No
   browseable = Yes
-/etc/nsswitch.conf---
passwd: files winbind
group:  files winbind
hosts:files dns wins winbind
networks: files dns
-/etc/krb5.conf---
[libdefaults]
   default_realm = WAYNE.LOCAL
   clockskew = 300
[realms]
WAYNE.LOCAL = {
   kdc = police.wayne.local
   default_domain = WAYNE.LOCAL
   kpasswd_server = adserver.wayne.local
}
[domain_realm]
   .WAYNE.LOCAL = WAYNE.LOCAL
[appdefaults]
pam = {
   ticket_lifetime = 365d
   renew_lifetime = 365d
   forwardable = true
   proxiable = false
   retain_after_close = true
   minimum_uid = 0
}
--/var/log/samba/log.smbd
[2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/LIEUTENANT1$ is invalid on this system
.
.
.
[2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/DISPATCH_GW1$ is invalid on this system
--/var/log/samba/log.winbindd---
[2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
 Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
 krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
 Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
 user 'root' does not exist
[2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
 user 'root' does not exist
[2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
 Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
 Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
 Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)

 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind problems

2004-12-20 Thread Brian Kesting
I have tried using a + separator with no success.

-- Original Message --
From: Tom Skeren [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 15:25:54 -0800

Brian Kesting wrote:

Hello,

I am running a Samba server (3.0.7) on a Suse 9.2 box.  I have connected this 
server successfully to a Windows 2000 Active Directory (mixed mode).  I have 
nsswitch.conf, krb5.conf configured and winbind seems to be running properly 
for the most part.  With wbinfo I can get all of my user and group 
information.  Problem is, it seems that at random times, the samba server just 
stops authenticating the windows user names and accounts.  If I restart the 
winbind or smb service, then all seems to be well again for a while.  Right 
now the only way I can keep this running is to run a cron job that restartes 
the samba and winbind services every hour.  This is really bugging me as I 
cannot figure out what is going on.  Can anyone help me?  I have included some 
of my configuration and log files below.  Thanks in advance.

-/etc/samba/smb.conf--
# Samba Configuration File

[global]
workgroup = WAYNE
realm = WAYNE.LOCAL
server string = Samba Server
security = ADS
password server = adserver.wayne.local
encrypt passwords = yes
idmap uid = 1-2
idmap gid = 1-2
template shell = /bin/bash
winbind use default domain = no
winbind separator = /
  

The separator might be a problem.

[users]
comment = Users on Linux
path = /home/WAYNE
read only = No
browseable = Yes

-/etc/nsswitch.conf---
passwd: files winbind
group:  files winbind
hosts:files dns wins winbind
networks: files dns

-/etc/krb5.conf---
[libdefaults]
default_realm = WAYNE.LOCAL
clockskew = 300

[realms]
WAYNE.LOCAL = {
kdc = police.wayne.local
default_domain = WAYNE.LOCAL
kpasswd_server = adserver.wayne.local
}
[domain_realm]
.WAYNE.LOCAL = WAYNE.LOCAL
[appdefaults]
pam = {
ticket_lifetime = 365d
renew_lifetime = 365d
forwardable = true
proxiable = false
retain_after_close = true
minimum_uid = 0
}

--/var/log/samba/log.smbd
[2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
.
.
.
[2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system

--/var/log/samba/log.winbindd---
[2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
  krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
  user 'root' does not exist
[2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
  user 'root' does not exist
[2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)


  




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind problems

2004-12-20 Thread Brian Kesting
I have tried using a + separator with no success.  I also get this in my 
log.winbindd file as soon as I restart winbind:

[2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
  krb5_cc_get_principal failed (No such file or directory)


-- Original Message --
From: Tom Skeren [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 15:25:54 -0800

Brian Kesting wrote:

Hello,

I am running a Samba server (3.0.7) on a Suse 9.2 box.  I have connected this 
server successfully to a Windows 2000 Active Directory (mixed mode).  I have 
nsswitch.conf, krb5.conf configured and winbind seems to be running properly 
for the most part.  With wbinfo I can get all of my user and group 
information.  Problem is, it seems that at random times, the samba server just 
stops authenticating the windows user names and accounts.  If I restart the 
winbind or smb service, then all seems to be well again for a while.  Right 
now the only way I can keep this running is to run a cron job that restartes 
the samba and winbind services every hour.  This is really bugging me as I 
cannot figure out what is going on.  Can anyone help me?  I have included some 
of my configuration and log files below.  Thanks in advance.

-/etc/samba/smb.conf--
# Samba Configuration File

[global]
workgroup = WAYNE
realm = WAYNE.LOCAL
server string = Samba Server
security = ADS
password server = adserver.wayne.local
encrypt passwords = yes
idmap uid = 1-2
idmap gid = 1-2
template shell = /bin/bash
winbind use default domain = no
winbind separator = /
  

The separator might be a problem.

[users]
comment = Users on Linux
path = /home/WAYNE
read only = No
browseable = Yes

-/etc/nsswitch.conf---
passwd: files winbind
group:  files winbind
hosts:files dns wins winbind
networks: files dns

-/etc/krb5.conf---
[libdefaults]
default_realm = WAYNE.LOCAL
clockskew = 300

[realms]
WAYNE.LOCAL = {
kdc = police.wayne.local
default_domain = WAYNE.LOCAL
kpasswd_server = adserver.wayne.local
}
[domain_realm]
.WAYNE.LOCAL = WAYNE.LOCAL
[appdefaults]
pam = {
ticket_lifetime = 365d
renew_lifetime = 365d
forwardable = true
proxiable = false
retain_after_close = true
minimum_uid = 0
}

--/var/log/samba/log.smbd
[2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
.
.
.
[2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system

--/var/log/samba/log.winbindd---
[2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
  krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
  user 'root' does not exist
[2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
  user 'root' does not exist
[2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)


  




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] winbind problems

2004-12-20 Thread Brian Kesting
I read something about nscd causing problems before I even installed the 
system, so I never even installed that service.  

Here is an updated /var/log/samba/log.winbindd file.btw, thanks for the 
quick help and tips so far, I appreciate it.

[2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
  krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 17:38:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:43:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:45:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
  user 'root' does not exist
[2004/12/20 17:49:01, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:52:26, 1] libads/ldap_utils.c:ads_do_search_retry(77)
  ads_search_retry: failed to reconnect (Invalid credentials)


-- Original Message --
From: Brett Stevens [EMAIL PROTECTED]
Date:  Tue, 21 Dec 2004 10:33:30 +1100

One thing I moticed when having simmilar problems is that for some reason
nscd seems to be a problem stop this service and restart all samba services
including smbd nmbd and winbind

Let us know how it goes.

Brett Stevens

-Original Message-
From: Brian Kesting [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, December 21, 2004 10:29 AM
To: [EMAIL PROTECTED]
Subject: [Samba] winbind problems


Hello,

I am running a Samba server (3.0.7) on a Suse 9.2 box.  I have connected
this server successfully to a Windows 2000 Active Directory (mixed mode).  I
have nsswitch.conf, krb5.conf configured and winbind seems to be running
properly for the most part.  With wbinfo I can get all of my user and group
information.  Problem is, it seems that at random times, the samba server
just stops authenticating the windows user names and accounts.  If I restart
the winbind or smb service, then all seems to be well again for a while.
Right now the only way I can keep this running is to run a cron job that
restartes the samba and winbind services every hour.  This is really bugging
me as I cannot figure out what is going on.  Can anyone help me?  I have
included some of my configuration and log files below.  Thanks in advance.

-/etc/samba/smb.conf--
# Samba Configuration File

[global]
workgroup = WAYNE
realm = WAYNE.LOCAL
server string = Samba Server
security = ADS
password server = adserver.wayne.local
encrypt passwords = yes
idmap uid = 1-2
idmap gid = 1-2
template shell = /bin/bash
winbind use default domain = no
winbind separator = /

[users]
comment = Users on Linux
path = /home/WAYNE
read only = No
browseable = Yes

-/etc/nsswitch.conf---
passwd: files winbind
group:  files winbind
hosts:files dns wins winbind
networks: files dns

-/etc/krb5.conf---
[libdefaults]
default_realm = WAYNE.LOCAL
clockskew = 300

[realms]
WAYNE.LOCAL = {
kdc = police.wayne.local
default_domain = WAYNE.LOCAL
kpasswd_server = adserver.wayne.local
}
[domain_realm]
.WAYNE.LOCAL = WAYNE.LOCAL
[appdefaults]
pam = {
ticket_lifetime = 365d
renew_lifetime = 365d
forwardable = true
proxiable = false
retain_after_close = true
minimum_uid = 0
}

--/var/log/samba/log.smbd
[2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20
15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20
15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20
15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
.
.
.
[2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20
16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20
16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system

--/var/log/samba/log.winbindd---
[2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
  krb5_cc_get_principal failed (No such file or directory) [2004/12/20
16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
 

RE: [Samba] winbind problems

2004-12-20 Thread Brian Kesting
Someone told me once to try to remove the Samba server from the domain, rename 
it, and rejoin the domain..would that solve any problems in your opinion?

-- Original Message --
From: Brian Kesting [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 18:05:47 -0600

I read something about nscd causing problems before I even installed the 
system, so I never even installed that service.  

Here is an updated /var/log/samba/log.winbindd file.btw, thanks for the 
quick help and tips so far, I appreciate it.

[2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
  krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 17:38:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:43:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:45:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
  user 'root' does not exist
[2004/12/20 17:49:01, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:52:26, 1] libads/ldap_utils.c:ads_do_search_retry(77)
  ads_search_retry: failed to reconnect (Invalid credentials)


-- Original Message --
From: Brett Stevens [EMAIL PROTECTED]
Date:  Tue, 21 Dec 2004 10:33:30 +1100

One thing I moticed when having simmilar problems is that for some reason
nscd seems to be a problem stop this service and restart all samba services
including smbd nmbd and winbind

Let us know how it goes.

Brett Stevens

-Original Message-
From: Brian Kesting [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, December 21, 2004 10:29 AM
To: [EMAIL PROTECTED]
Subject: [Samba] winbind problems


Hello,

I am running a Samba server (3.0.7) on a Suse 9.2 box.  I have connected
this server successfully to a Windows 2000 Active Directory (mixed mode).  I
have nsswitch.conf, krb5.conf configured and winbind seems to be running
properly for the most part.  With wbinfo I can get all of my user and group
information.  Problem is, it seems that at random times, the samba server
just stops authenticating the windows user names and accounts.  If I restart
the winbind or smb service, then all seems to be well again for a while.
Right now the only way I can keep this running is to run a cron job that
restartes the samba and winbind services every hour.  This is really bugging
me as I cannot figure out what is going on.  Can anyone help me?  I have
included some of my configuration and log files below.  Thanks in advance.

-/etc/samba/smb.conf--
# Samba Configuration File

[global]
workgroup = WAYNE
realm = WAYNE.LOCAL
server string = Samba Server
security = ADS
password server = adserver.wayne.local
encrypt passwords = yes
idmap uid = 1-2
idmap gid = 1-2
template shell = /bin/bash
winbind use default domain = no
winbind separator = /

[users]
comment = Users on Linux
path = /home/WAYNE
read only = No
browseable = Yes

-/etc/nsswitch.conf---
passwd: files winbind
group:  files winbind
hosts:files dns wins winbind
networks: files dns

-/etc/krb5.conf---
[libdefaults]
default_realm = WAYNE.LOCAL
clockskew = 300

[realms]
WAYNE.LOCAL = {
kdc = police.wayne.local
default_domain = WAYNE.LOCAL
kpasswd_server = adserver.wayne.local
}
[domain_realm]
.WAYNE.LOCAL = WAYNE.LOCAL
[appdefaults]
pam = {
ticket_lifetime = 365d
renew_lifetime = 365d
forwardable = true
proxiable = false
retain_after_close = true
minimum_uid = 0
}

--/var/log/samba/log.smbd
[2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20
15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20
15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20
15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
.
.
.
[2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20
16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20
16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system

--/var/log/samba/log.winbindd---
[2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command

Re: [Samba] winbind problems

2004-12-20 Thread Thomas M. Skeren III
Brian Kesting wrote:
I have tried using a + separator with no success.
 

I use _ which works well.  I'm just guessing here, but *nix's use / as a 
very significant charactrer.

-- Original Message --
From: Tom Skeren [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 15:25:54 -0800
Brian Kesting wrote:
 

Hello,
I am running a Samba server (3.0.7) on a Suse 9.2 box.  I have connected this 
server successfully to a Windows 2000 Active Directory (mixed mode).  I have 
nsswitch.conf, krb5.conf configured and winbind seems to be running properly 
for the most part.  With wbinfo I can get all of my user and group information. 
 Problem is, it seems that at random times, the samba server just stops 
authenticating the windows user names and accounts.  If I restart the winbind 
or smb service, then all seems to be well again for a while.  Right now the 
only way I can keep this running is to run a cron job that restartes the samba 
and winbind services every hour.  This is really bugging me as I cannot figure 
out what is going on.  Can anyone help me?  I have included some of my 
configuration and log files below.  Thanks in advance.
-/etc/samba/smb.conf--
# Samba Configuration File
[global]
  workgroup = WAYNE
  realm = WAYNE.LOCAL
  server string = Samba Server
  security = ADS
  password server = adserver.wayne.local
  encrypt passwords = yes
  idmap uid = 1-2
  idmap gid = 1-2
  template shell = /bin/bash
  winbind use default domain = no
  winbind separator = /
   

The separator might be a problem.
 

[users]
  comment = Users on Linux
  path = /home/WAYNE
  read only = No
  browseable = Yes
-/etc/nsswitch.conf---
passwd: files winbind
group:  files winbind
hosts:files dns wins winbind
networks: files dns
-/etc/krb5.conf---
[libdefaults]
  default_realm = WAYNE.LOCAL
  clockskew = 300
[realms]
WAYNE.LOCAL = {
  kdc = police.wayne.local
  default_domain = WAYNE.LOCAL
  kpasswd_server = adserver.wayne.local
}
[domain_realm]
  .WAYNE.LOCAL = WAYNE.LOCAL
[appdefaults]
pam = {
  ticket_lifetime = 365d
  renew_lifetime = 365d
  forwardable = true
  proxiable = false
  retain_after_close = true
  minimum_uid = 0
}
--/var/log/samba/log.smbd
[2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/LIEUTENANT1$ is invalid on this system
.
.
.
[2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/DISPATCH_GW1$ is invalid on this system
--/var/log/samba/log.winbindd---
[2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
user 'root' does not exist
[2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
user 'root' does not exist
[2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)

   


 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind problems

2004-12-20 Thread Thomas M. Skeren III
Brian Kesting wrote:
I have tried using a + separator with no success.  I also get this in my 
log.winbindd file as soon as I restart winbind:
[2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
 krb5_cc_get_principal failed (No such file or directory)
 

I've seen that one.  Do a kinit, and see if you get a kerberos ticket.
-- Original Message --
From: Tom Skeren [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 15:25:54 -0800
Brian Kesting wrote:
 

Hello,
I am running a Samba server (3.0.7) on a Suse 9.2 box.  I have connected this 
server successfully to a Windows 2000 Active Directory (mixed mode).  I have 
nsswitch.conf, krb5.conf configured and winbind seems to be running properly 
for the most part.  With wbinfo I can get all of my user and group information. 
 Problem is, it seems that at random times, the samba server just stops 
authenticating the windows user names and accounts.  If I restart the winbind 
or smb service, then all seems to be well again for a while.  Right now the 
only way I can keep this running is to run a cron job that restartes the samba 
and winbind services every hour.  This is really bugging me as I cannot figure 
out what is going on.  Can anyone help me?  I have included some of my 
configuration and log files below.  Thanks in advance.
-/etc/samba/smb.conf--
# Samba Configuration File
[global]
  workgroup = WAYNE
  realm = WAYNE.LOCAL
  server string = Samba Server
  security = ADS
  password server = adserver.wayne.local
  encrypt passwords = yes
  idmap uid = 1-2
  idmap gid = 1-2
  template shell = /bin/bash
  winbind use default domain = no
  winbind separator = /
   

The separator might be a problem.
 

[users]
  comment = Users on Linux
  path = /home/WAYNE
  read only = No
  browseable = Yes
-/etc/nsswitch.conf---
passwd: files winbind
group:  files winbind
hosts:files dns wins winbind
networks: files dns
-/etc/krb5.conf---
[libdefaults]
  default_realm = WAYNE.LOCAL
  clockskew = 300
[realms]
WAYNE.LOCAL = {
  kdc = police.wayne.local
  default_domain = WAYNE.LOCAL
  kpasswd_server = adserver.wayne.local
}
[domain_realm]
  .WAYNE.LOCAL = WAYNE.LOCAL
[appdefaults]
pam = {
  ticket_lifetime = 365d
  renew_lifetime = 365d
  forwardable = true
  proxiable = false
  retain_after_close = true
  minimum_uid = 0
}
--/var/log/samba/log.smbd
[2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/LIEUTENANT1$ is invalid on this system
.
.
.
[2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/DISPATCH_GW1$ is invalid on this system
--/var/log/samba/log.winbindd---
[2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
user 'root' does not exist
[2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
user 'root' does not exist
[2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)

   


 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind problems

2004-12-20 Thread Thomas M. Skeren III
Brian Kesting wrote:
Someone told me once to try to remove the Samba server from the domain, rename it, and rejoin the domain..would that solve any problems in your opinion?
 

That is an odd solution, unless AD is mangled with respect to the samba 
server name.  Methinks you have a kerberos problem.  My servers are 
FreeBSD, but I do have a bare bones guide for setting up samba as an AD 
member server in FreeBSD.  If you use Linux it can only be a reference, 
but it's an easy read.

http://www.fsklaw.com/fbsdconfig.html
-- Original Message --
From: Brian Kesting [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 18:05:47 -0600
I read something about nscd causing problems before I even installed the system, so I never even installed that service.  

Here is an updated /var/log/samba/log.winbindd file.btw, thanks for the 
quick help and tips so far, I appreciate it.
[2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
 krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 17:38:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
 Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:43:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
 Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:45:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
 user 'root' does not exist
[2004/12/20 17:49:01, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
 Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:52:26, 1] libads/ldap_utils.c:ads_do_search_retry(77)
 ads_search_retry: failed to reconnect (Invalid credentials)
-- Original Message --
From: Brett Stevens [EMAIL PROTECTED]
Date:  Tue, 21 Dec 2004 10:33:30 +1100
One thing I moticed when having simmilar problems is that for some reason
nscd seems to be a problem stop this service and restart all samba services
including smbd nmbd and winbind
Let us know how it goes.
Brett Stevens
-Original Message-
From: Brian Kesting [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, December 21, 2004 10:29 AM
To: [EMAIL PROTECTED]
Subject: [Samba] winbind problems

Hello,
I am running a Samba server (3.0.7) on a Suse 9.2 box.  I have connected
this server successfully to a Windows 2000 Active Directory (mixed mode).  I
have nsswitch.conf, krb5.conf configured and winbind seems to be running
properly for the most part.  With wbinfo I can get all of my user and group
information.  Problem is, it seems that at random times, the samba server
just stops authenticating the windows user names and accounts.  If I restart
the winbind or smb service, then all seems to be well again for a while.
Right now the only way I can keep this running is to run a cron job that
restartes the samba and winbind services every hour.  This is really bugging
me as I cannot figure out what is going on.  Can anyone help me?  I have
included some of my configuration and log files below.  Thanks in advance.
-/etc/samba/smb.conf--
# Samba Configuration File
[global]
   workgroup = WAYNE
   realm = WAYNE.LOCAL
   server string = Samba Server
   security = ADS
   password server = adserver.wayne.local
   encrypt passwords = yes
   idmap uid = 1-2
   idmap gid = 1-2
   template shell = /bin/bash
   winbind use default domain = no
   winbind separator = /
[users]
   comment = Users on Linux
   path = /home/WAYNE
   read only = No
   browseable = Yes
-/etc/nsswitch.conf---
passwd: files winbind
group:  files winbind
hosts:files dns wins winbind
networks: files dns
-/etc/krb5.conf---
[libdefaults]
   default_realm = WAYNE.LOCAL
   clockskew = 300
[realms]
WAYNE.LOCAL = {
   kdc = police.wayne.local
   default_domain = WAYNE.LOCAL
   kpasswd_server = adserver.wayne.local
}
[domain_realm]
   .WAYNE.LOCAL = WAYNE.LOCAL
[appdefaults]
pam = {
   ticket_lifetime = 365d
   renew_lifetime = 365d
   forwardable = true
   proxiable = false
   retain_after_close = true
   minimum_uid = 0
}
--/var/log/samba/log.smbd
[2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20
15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20
15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20
15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/LIEUTENANT1$ is invalid on this system
.
.
.
[2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20
16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username WAYNE/DISPATCH_GW1$ is invalid on this system 

Re: [Samba] winbind problems

2004-12-20 Thread Brian Kesting
My setup looks about identical to the setup you have listed in the link you 
provided.  

Since this line:
libsmb/clikrb5.c:ads_krb5_mk_req(313)
  krb5_cc_get_principal failed (No such file or directory)

keeps appearing in my winbind log file, I am thinking it is a kerberos problem 
too.  Do you see anything wrong with my /etc/krb5.conf file?

[libdefaults]
default_realm = WAYNE.LOCAL
clockskew = 300

[realms]
WAYNE.LOCAL = {
kdc = police.wayne.local
default_domain = WAYNE.LOCAL
kpasswd_server = police.wayne.local
}
[domain_realm]
.WAYNE.LOCAL = WAYNE.LOCAL
[appdefaults]
pam = {
ticket_lifetime = 365d
renew_lifetime = 365d
forwardable = true
proxiable = false
retain_after_close = true
minimum_uid = 0


-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 17:16:38 -0800

Brian Kesting wrote:

Someone told me once to try to remove the Samba server from the domain, rename 
it, and rejoin the domain..would that solve any problems in your opinion?
  

That is an odd solution, unless AD is mangled with respect to the samba 
server name.  Methinks you have a kerberos problem.  My servers are 
FreeBSD, but I do have a bare bones guide for setting up samba as an AD 
member server in FreeBSD.  If you use Linux it can only be a reference, 
but it's an easy read.

http://www.fsklaw.com/fbsdconfig.html

-- Original Message --
From: Brian Kesting [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 18:05:47 -0600

I read something about nscd causing problems before I even installed the 
system, so I never even installed that service.  

Here is an updated /var/log/samba/log.winbindd file.btw, thanks for the 
quick help and tips so far, I appreciate it.

[2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
  krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 17:38:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:43:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:45:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
  user 'root' does not exist
[2004/12/20 17:49:01, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:52:26, 1] libads/ldap_utils.c:ads_do_search_retry(77)
  ads_search_retry: failed to reconnect (Invalid credentials)


-- Original Message --
From: Brett Stevens [EMAIL PROTECTED]
Date:  Tue, 21 Dec 2004 10:33:30 +1100

One thing I moticed when having simmilar problems is that for some reason
nscd seems to be a problem stop this service and restart all samba services
including smbd nmbd and winbind

Let us know how it goes.

Brett Stevens

-Original Message-
From: Brian Kesting [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, December 21, 2004 10:29 AM
To: [EMAIL PROTECTED]
Subject: [Samba] winbind problems


Hello,

I am running a Samba server (3.0.7) on a Suse 9.2 box.  I have connected
this server successfully to a Windows 2000 Active Directory (mixed mode).  I
have nsswitch.conf, krb5.conf configured and winbind seems to be running
properly for the most part.  With wbinfo I can get all of my user and group
information.  Problem is, it seems that at random times, the samba server
just stops authenticating the windows user names and accounts.  If I restart
the winbind or smb service, then all seems to be well again for a while.
Right now the only way I can keep this running is to run a cron job that
restartes the samba and winbind services every hour.  This is really bugging
me as I cannot figure out what is going on.  Can anyone help me?  I have
included some of my configuration and log files below.  Thanks in advance.

-/etc/samba/smb.conf--
# Samba Configuration File

[global]
workgroup = WAYNE
realm = WAYNE.LOCAL
server string = Samba Server
security = ADS
password server = adserver.wayne.local
encrypt passwords = yes
idmap uid = 1-2
idmap gid = 1-2
template shell = /bin/bash
winbind use default domain = no
winbind separator = /

[users]
comment = Users on Linux
path = /home/WAYNE
read only = No
browseable = Yes

-/etc/nsswitch.conf---
passwd: files winbind
group:  files winbind
hosts:files dns wins winbind
networks: files dns

-/etc/krb5.conf---
[libdefaults]
default_realm = WAYNE.LOCAL
clockskew = 300

[realms]
WAYNE.LOCAL = {
kdc = police.wayne.local
default_domain = WAYNE.LOCAL
kpasswd_server = adserver.wayne.local
}
[domain_realm]

Re: [Samba] winbind problems

2004-12-20 Thread Brian Kesting
So the kticket needs to be valid for any samba/winbind services to work 
properly?  It appears that when I issued the kinit command, my ticket will 
expire in about 10 hours with a ticket renewable lifetime of 1 week..how do 
I change that?  

I am still getting the odd messages in my winbind log file thoughI am 
really perplexed.

-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 17:19:22 -0800

Brian Kesting wrote:

I have changed the separator to '+'

Also, my kerberos ticket was expired.i re-issued a kinit [EMAIL PROTECTED] 
command to renew it.

Could that be the source of my problems?
  

Yes.

-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 17:09:33 -0800

Brian Kesting wrote:

  

I have tried using a + separator with no success.
 



I use _ which works well.  I'm just guessing here, but *nix's use / as a 
very significant charactrer.

  

-- Original Message --
From: Tom Skeren [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 15:25:54 -0800

Brian Kesting wrote:

 



Hello,

I am running a Samba server (3.0.7) on 
  


a Suse 9.2 box.  I have connected this server successfully to a Windows 2000 
Active Directory (mixed mode).  I have nsswitch.conf, krb5.conf configured and 
winbind seems to be running properly for the most part.  With wbinfo I can get 
all of my user and group information.  Problem is, it seems that at random 
times, the samba server just stops authenticating the windows user names and 
accounts.  If I restart the winbind or smb service, then all seems to be well 
again for a while.  Right now the only way I can keep this running is to run a 
cron job that restartes the samba and winbind services every hour.  This is 
really bugging me as I cannot figure out what is going on.  Can anyone help 
me?  I have included some of my configuration and log files below.  Thanks in 
advance.
  

-/etc/samba/smb.conf--
# Samba Configuration File

[global]
  workgroup = WAYNE
  realm = WAYNE.LOCAL
  server string = Samba Server
  security = ADS
  password server = adserver.wayne.local
  encrypt passwords = yes
  idmap uid = 1-2
  idmap gid = 1-2
  template shell = /bin/bash
  winbind use default domain = no
  winbind separator = /


   

  

The separator might be a problem.

 



[users]
  comment = Users on Linux
  path = /home/WAYNE
  read only = No
  browseable = Yes

-/etc/nsswitch.conf---
passwd: files winbind
group:  files winbind
hosts:files dns wins winbind
networks: files dns

-/etc/krb5.conf---
[libdefaults]
  default_realm = WAYNE.LOCAL
  clockskew = 300

[realms]
WAYNE.LOCAL = {
  kdc = police.wayne.local
  default_domain = WAYNE.LOCAL
  kpasswd_server = adserver.wayne.local
}
[domain_realm]
  .WAYNE.LOCAL = WAYNE.LOCAL
[appdefaults]
pam = {
  ticket_lifetime = 365d
  renew_lifetime = 365d
  forwardable = true
  proxiable = false
  retain_after_close = true
  minimum_uid = 0
}

--/var/log/samba/log.smbd
[2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/LIEUTENANT1$ is invalid on this system
[2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/LIEUTENANT1$ is invalid on this system
.
.
.
[2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/DISPATCH_GW1$ is invalid on this system
[2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username WAYNE/DISPATCH_GW1$ is invalid on this system

--/var/log/samba/log.winbindd---
[2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
user 'root' does not exist
[2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
user 'root' does not exist
[2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:06:24, 1] 

Re: [Samba] winbind problems

2004-12-20 Thread Brian Kesting
I am using Suse 9.2 and heimdal 0.6.2

-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 17:43:07 -0800

Brian Kesting wrote:

My setup looks about identical to the setup you have listed in the link you 
provided.  

Since this line:
libsmb/clikrb5.c:ads_krb5_mk_req(313)
  krb5_cc_get_principal failed (No such file or directory)

keeps appearing in my winbind log file, I am thinking it is a kerberos problem 
too.  Do you see anything wrong with my /etc/krb5.conf file?

[libdefaults]
default_realm = WAYNE.LOCAL
clockskew = 300
  

Try adding :

dns_lookup_realm = false
 dns_lookup_kdc = false

Also which OS are you using? What Kerberos?  The default etypes lines 
are necessary for Heimdal, but I don't think they are necessary for MIT.

[realms]
WAYNE.LOCAL = {
kdc = police.wayne.local
default_domain = WAYNE.LOCAL
kpasswd_server = police.wayne.local
}
  

Try:

kdc =   KERBEROS.WAYNE.LOCAL
admin_server = police.wayne.local
default_domain = wayne.local

[domain_realm]
.WAYNE.LOCAL = WAYNE.LOCAL
  

Probably not enough info here.  Try: (Remember caps must be in caps).

.wayne.local =  WAYNE.LOCAL
wayne.local = WAYNE.LOCAL
.WAYNE.LOCAL = WAYNE.LOCAL
kerberos.server =  KERBEROS.WAYNE.LOCAL

[appdefaults]
pam = {
ticket_lifetime = 365d
renew_lifetime = 365d
forwardable = true
proxiable = false
retain_after_close = true
minimum_uid = 0
  

Pam stuff is more OS dependent, so I have no suggestions here.  MAKE 
SURE THAT YOU SAMBA SERVER IS USING THE W2K ADS SERVER AS DNSTHIS IS 
ABSOLUTELY CRITICAL.


-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 17:16:38 -0800

Brian Kesting wrote:

  

Someone told me once to try to remove the Samba server from the domain, 
rename it, and rejoin the domain..would that solve any problems in your 
opinion?
 



That is an odd solution, unless AD is mangled with respect to the samba 
server name.  Methinks you have a kerberos problem.  My servers are 
FreeBSD, but I do have a bare bones guide for setting up samba as an AD 
member server in FreeBSD.  If you use Linux it can only be a reference, 
but it's an easy read.

http://www.fsklaw.com/fbsdconfig.html

  

-- Original Message --
From: Brian Kesting [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 18:05:47 -0600

I read something about nscd causing problems before I even installed the 
system, so I never even installed that service.  

Here is an updated /var/log/samba/log.winbindd file.btw, thanks for the 
quick help and tips so far, I appreciate it.

[2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
 krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 17:38:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
 Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:43:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
 Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:45:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
 user 'root' does not exist
[2004/12/20 17:49:01, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
 Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:52:26, 1] libads/ldap_utils.c:ads_do_search_retry(77)
 ads_search_retry: failed to reconnect (Invalid credentials)


-- Original Message --
From: Brett Stevens [EMAIL PROTECTED]
Date:  Tue, 21 Dec 2004 10:33:30 +1100

One thing I moticed when having simmilar problems is that for some reason
nscd seems to be a problem stop this service and restart all samba services
including smbd nmbd and winbind

Let us know how it goes.

Brett Stevens

-Original Message-
From: Brian Kesting [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, December 21, 2004 10:29 AM
To: [EMAIL PROTECTED]
Subject: [Samba] winbind problems


Hello,

I am running a Samba server (3.0.7) on a Suse 9.2 box.  I have connected
this server successfully to a Windows 2000 Active Directory (mixed mode).  I
have nsswitch.conf, krb5.conf configured and winbind seems to be running
properly for the most part.  With wbinfo I can get all of my user and group
information.  Problem is, it seems that at random times, the samba server
just stops authenticating the windows user names and accounts.  If I restart
the winbind or smb service, then all seems to be well again for a while.
Right now the only way I can keep this running is to run a cron job that
restartes the samba and winbind services every hour.  This is really bugging
me as I cannot figure out what is going on.  Can anyone help me?  I have
included some of my configuration and log files below.  Thanks in advance.

-/etc/samba/smb.conf--
# Samba Configuration File


[Samba] removing unused machine account

2004-12-20 Thread Beast
Is there anyway to find out which machine account is currently not being 
used anymore? half of my clients are already migrate to linux and some 
machine are already join using different name.

--
--beast
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind problems

2004-12-20 Thread Brian Kesting
Even if I do not have users logging into this samba box locally, i still need 
to edit /etc/pam.d/login?


-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 18:31:53 -0800

Brian Kesting wrote:

When I made those changes to krb5.conf I got the following in my smb log
and I could not access my samba share...

[2004/12/20 20:13:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
  Failed to verify incoming ticket!
[2004/12/20 20:13:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
  Failed to verify incoming ticket!
[2004/12/20 20:14:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
  Failed to verify incoming ticket!
[2004/12/20 20:14:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
  Failed to verify incoming ticket!

Not sure what I am missing, I may just start this whole project over from 
scratch and see if I have better luck.
  

As I stated in my guide,

Note:  If you have a server and it isn't a production server, has 
nothing of value on it, and you have been stuffing programs on it to get 
Samba to work with ADS , but failed, put that 5.3 Release install cd 
into the cdrom drive, and reinstall FBSD 5.3 formatting the drives along 
the way.  Don't bug me if you didn't start with a nice clean install.

Make sure you have the pam.d/login stuff done.  Without it pam can't 
authenticate non local users.


-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 17:50:47 -0800

Brian Kesting wrote:

  

I am using Suse 9.2 and heimdal 0.6.2
 




In that case you need:

  default_etypes = des-cbc-crc des-cbc-md5
 default_etypes_des = des-cbc-crc des-cbc-md5

In libdefaults.  Read my whole response as I made changes throughout 
your krb5.conf file.  You may also need a keytab file, but I doubt it.

  

-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 17:43:07 -0800

Brian Kesting wrote:




  

 



My setup looks about identical to the setup you have listed in the link you 
provided.  

Since this line:
libsmb/clikrb5.c:ads_krb5_mk_req(313)
krb5_cc_get_principal failed (No such file or directory)

keeps appearing in my winbind log file, I am thinking it is a kerberos 
problem too.  Do you see anything wrong with my /etc/krb5.conf file?

[libdefaults]
  default_realm = WAYNE.LOCAL
  clockskew = 300


   

  

Try adding :

dns_lookup_realm = false
dns_lookup_kdc = false

Also which OS are you using? What Kerberos?  The default etypes lines 
are necessary for Heimdal, but I don't think they are necessary for MIT.

 



[realms]
WAYNE.LOCAL = {
  kdc = police.wayne.local
  default_domain = WAYNE.LOCAL
  kpasswd_server = police.wayne.local
}


   

  

Try:

kdc =   KERBEROS.WAYNE.LOCAL
admin_server = police.wayne.local
default_domain = wayne.local

 



[domain_realm]
  .WAYNE.LOCAL = WAYNE.LOCAL


   

  

Probably not enough info here.  Try: (Remember caps must be in caps).

.wayne.local =  WAYNE.LOCAL
wayne.local = WAYNE.LOCAL
.WAYNE.LOCAL = WAYNE.LOCAL
kerberos.server =  KERBEROS.WAYNE.LOCAL

 



[appdefaults]
pam = {
  ticket_lifetime = 365d
  renew_lifetime = 365d
  forwardable = true
  proxiable = false
  retain_after_close = true
  minimum_uid = 0


   

  

Pam stuff is more OS dependent, so I have no suggestions here.  MAKE 
SURE THAT YOU SAMBA SERVER IS USING THE W2K ADS SERVER AS DNSTHIS IS 
ABSOLUTELY CRITICAL.

 



-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 17:16:38 -0800

Brian Kesting wrote:



   

  

Someone told me once to try to remove the Samba server from the domain, 
rename it, and rejoin the domain..would that solve any problems in your 
opinion?


  

 



That is an odd solution, unless AD is mangled with respect to the samba 
server name.  Methinks you have a kerberos problem.  My servers are 
FreeBSD, but I do have a bare bones guide for setting up samba as an AD 
member server in FreeBSD.  If you use Linux it can only be a reference, 
but it's an easy read.

http://www.fsklaw.com/fbsdconfig.html



   

  

-- Original Message --
From: Brian Kesting [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 18:05:47 -0600

I read something about nscd causing problems before I even installed the 
system, so I never even installed that service.  

Here is an updated /var/log/samba/log.winbindd file.btw, thanks for the 
quick help and tips so far, I appreciate it.

[2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
krb5_cc_get_principal failed (No such file or directory)
[2004/12/20 17:38:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
Failed to parse NTLMSSP packet, could 

RE: [Samba] winbind problems

2004-12-20 Thread Brian Kesting
I do have both servers pointed to the same ntp serverthe time issue should 
be negligent here.i hope (lol)


-- Original Message --
From: Brett Stevens [EMAIL PROTECTED]
Date:  Tue, 21 Dec 2004 14:21:10 +1100

One other problem that I experenced was time. Make sure that your servers
are synced closely, preferbaly with the same server.
Brett Stevens

-Original Message-
From: Brian Kesting [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, December 21, 2004 10:29 AM
To: [EMAIL PROTECTED]
Subject: [Samba] winbind problems


Hello,

I am running a Samba server (3.0.7) on a Suse 9.2 box.  I have connected
this server successfully to a Windows 2000 Active Directory (mixed mode).  I
have nsswitch.conf, krb5.conf configured and winbind seems to be running
properly for the most part.  With wbinfo I can get all of my user and group
information.  Problem is, it seems that at random times, the samba server
just stops authenticating the windows user names and accounts.  If I restart
the winbind or smb service, then all seems to be well again for a while.
Right now the only way I can keep this running is to run a cron job that
restartes the samba and winbind services every hour.  This is really bugging
me as I cannot figure out what is going on.  Can anyone help me?  I have
included some of my configuration and log files below.  Thanks in advance.

-/etc/samba/smb.conf--
# Samba Configuration File

[global]
workgroup = WAYNE
realm = WAYNE.LOCAL
server string = Samba Server
security = ADS
password server = adserver.wayne.local
encrypt passwords = yes
idmap uid = 1-2
idmap gid = 1-2
template shell = /bin/bash
winbind use default domain = no
winbind separator = /

[users]
comment = Users on Linux
path = /home/WAYNE
read only = No
browseable = Yes

-/etc/nsswitch.conf---
passwd: files winbind
group:  files winbind
hosts:files dns wins winbind
networks: files dns

-/etc/krb5.conf---
[libdefaults]
default_realm = WAYNE.LOCAL
clockskew = 300

[realms]
WAYNE.LOCAL = {
kdc = police.wayne.local
default_domain = WAYNE.LOCAL
kpasswd_server = adserver.wayne.local
}
[domain_realm]
.WAYNE.LOCAL = WAYNE.LOCAL
[appdefaults]
pam = {
ticket_lifetime = 365d
renew_lifetime = 365d
forwardable = true
proxiable = false
retain_after_close = true
minimum_uid = 0
}

--/var/log/samba/log.smbd
[2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20
15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20
15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20
15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/LIEUTENANT1$ is invalid on this system
.
.
.
[2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20
16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20
16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username WAYNE/DISPATCH_GW1$ is invalid on this system

--/var/log/samba/log.winbindd---
[2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313)
  krb5_cc_get_principal failed (No such file or directory) [2004/12/20
16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
  user 'root' does not exist
[2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
  user 'root' does not exist
[2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command
[2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind problems

2004-12-20 Thread Brian Kesting
Ok, I will set that up tomorrow.  I had it setup at one time, but thought that 
if I didn't have local users logging into the local system I didn't need it.

I really appreciate your quick and informative responses to my questions Thomas 
and everyone elseI really appreciate it.

-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 20:12:05 -0800

Brian Kesting wrote:

Even if I do not have users logging into this samba box locally, i still need 
to edit /etc/pam.d/login?
  

Yes


-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 18:31:53 -0800

Brian Kesting wrote:

  

When I made those changes to krb5.conf I got the following in my smb log
and I could not access my samba share...

[2004/12/20 20:13:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
 Failed to verify incoming ticket!
[2004/12/20 20:13:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
 Failed to verify incoming ticket!
[2004/12/20 20:14:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
 Failed to verify incoming ticket!
[2004/12/20 20:14:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
 Failed to verify incoming ticket!

Not sure what I am missing, I may just start this whole project over from 
scratch and see if I have better luck.
 



As I stated in my guide,

Note:  If you have a server and it isn't a production server, has 
nothing of value on it, and you have been stuffing programs on it to get 
Samba to work with ADS , but failed, put that 5.3 Release install cd 
into the cdrom drive, and reinstall FBSD 5.3 formatting the drives along 
the way.  Don't bug me if you didn't start with a nice clean install.

Make sure you have the pam.d/login stuff done.  Without it pam can't 
authenticate non local users.

  

-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 17:50:47 -0800

Brian Kesting wrote:

 



I am using Suse 9.2 and heimdal 0.6.2


   

  

In that case you need:

 default_etypes = des-cbc-crc des-cbc-md5
default_etypes_des = des-cbc-crc des-cbc-md5

In libdefaults.  Read my whole response as I made changes throughout 
your krb5.conf file.  You may also need a keytab file, but I doubt it.

 



-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 17:43:07 -0800

Brian Kesting wrote:
   

  

 



   

  

My setup looks about identical to the setup you have listed in the link you 
provided.  

Since this line:
libsmb/clikrb5.c:ads_krb5_mk_req(313)
krb5_cc_get_principal failed (No such file or directory)

keeps appearing in my winbind log file, I am thinking it is a kerberos 
problem too.  Do you see anything wrong with my /etc/krb5.conf file?

[libdefaults]
 default_realm = WAYNE.LOCAL
 clockskew = 300


  

 



Try adding :

dns_lookup_realm = false
dns_lookup_kdc = false

Also which OS are you using? What Kerberos?  The default etypes lines 
are necessary for Heimdal, but I don't think they are necessary for MIT.



   

  

[realms]
WAYNE.LOCAL = {
 kdc = police.wayne.local
 default_domain = WAYNE.LOCAL
 kpasswd_server = police.wayne.local
}


  

 



Try:

kdc =   KERBEROS.WAYNE.LOCAL
admin_server = police.wayne.local
default_domain = wayne.local



   

  

[domain_realm]
 .WAYNE.LOCAL = WAYNE.LOCAL


  

 



Probably not enough info here.  Try: (Remember caps must be in caps).

.wayne.local =  WAYNE.LOCAL
wayne.local = WAYNE.LOCAL
.WAYNE.LOCAL = WAYNE.LOCAL
kerberos.server =  KERBEROS.WAYNE.LOCAL



   

  

[appdefaults]
pam = {
 ticket_lifetime = 365d
 renew_lifetime = 365d
 forwardable = true
 proxiable = false
 retain_after_close = true
 minimum_uid = 0


  

 



Pam stuff is more OS dependent, so I have no suggestions here.  MAKE 
SURE THAT YOU SAMBA SERVER IS USING THE W2K ADS SERVER AS DNSTHIS IS 
ABSOLUTELY CRITICAL.



   

  

-- Original Message --
From: Thomas M. Skeren III [EMAIL PROTECTED]
Date:  Mon, 20 Dec 2004 17:16:38 -0800

Brian Kesting wrote:



  

 



Someone told me once to try to remove the Samba server from the domain, 
rename it, and rejoin the domain..would that solve any problems in 
your opinion?


 



   

  

That is an odd solution, unless AD is mangled with respect to the samba 
server name.  Methinks you have a kerberos problem.  My servers are 
FreeBSD, but I do have a bare bones guide for setting up samba as an AD 
member server in FreeBSD.  If you use Linux it can only be a reference, 
but it's an easy read.

http://www.fsklaw.com/fbsdconfig.html



  

 



-- Original Message --
From: 

[Samba] Re: Shares With Spaces

2004-12-20 Thread Jim C.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
| I'm having a bit of troble to mount shares with space
| something like:
| //server/share space
| i tryied using the sharename in  and ''
| and no luck
| I have no problems using  - mount -t smbfs //share/with spaces
| /path/to/mount -o username.
| and in fstab how to I use it?
| Uou, a great question... i didn't find how to... :( sorry
You've probably tried this but what about:
//share/with\ spaces
Jim C.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: j_c_llings @ hotmail.com  AIM: WyteLi0n  ICQ: 123291844  |
|---|
| Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBx67H57L0B7uXm9oRAntiAJ49xdI1vxilwRNLaX/hmtUde/jShgCcCUNq
pd89gv54huINsemApobObpA=
=4LRq
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Can the logon script know username?

2004-12-20 Thread Jim C.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Type 'set' in any dos window to see the list of environment variables
for a windows user.  Pay particular attention to %USERNAME%.
Jim C.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: j_c_llings @ hotmail.com  AIM: WyteLi0n  ICQ: 123291844  |
|---|
| Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBx69b57L0B7uXm9oRAlDAAJ9at2dEUxjspe6fy8f+87V/Unj7CACeI4Gm
/KZxs5ScUT7HHljEJAx4rzc=
=BX3v
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] write performance of Win xpp sp2

2004-12-20 Thread John Ward
Gentlemen,

I have noticed (!) an unbelievable drop in performance with
Windows xp pro sp2 systems, compared to sp1.  The performance 
I have noticed is 122 seconds to write 65,000 indexed records
to a dBase type file under sp2 and the same job in sp1 is 
7 seconds!!  I can't believe that this is a 'normal' feature
of Windows sp2 software when working with Samba.  Is it possible that Microsoft 
has made changes that make Samba under Linux totaly uncompetitive.  

ps. the performance drop is still there using the 'copy' 
command from the command prompt.  The file in question is 8.1 Meg, large but 
not unreasonable.  ANY help would be appreciated.


[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Unix password synch

2004-12-20 Thread Anish Mathew
Hi all,

Is there any way to automatically update the samba
password when a user changes his unix account password
using the passwd command.

I want samba to look in passwd file for
authentication. I dont want to create two accounts one
for local unix and then for the samba.

I am not planning to deploy ldap as a solution.

Is there any workaround.

Anish






___ 
ALL-NEW Yahoo! Messenger - all new features - even more fun! 
http://uk.messenger.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Unix password synch

2004-12-20 Thread Ow Mun Heng
On Tue, 2004-12-21 at 13:45, Anish Mathew wrote:
 Hi all,
 
 Is there any way to automatically update the samba
 password when a user changes his unix account password
 using the passwd command.
Short Answer - Yes.
 
 I want samba to look in passwd file for
 authentication. I dont want to create two accounts one
 for local unix and then for the samba.

How to get passwd to sync both Linux and smbpasswd

Update  :   Ow Mun Heng
Date:   Long Time Ago

The pam_smbpass PAM module can be used to sync users' Samba passwords
with their system passwords when the passwd command is used. If a user
invokes the passwd command, the password he uses to log in to the Red
Hat Linux system as well as the password he must provide to connect to a
Samba share are changed. 
To enable this feature, add the following line to /etc/pam.d/system-auth
below the pam_cracklib.so invocation: 
password required /lib/security/pam_smbpass.so nullok use_authtok
try_first_pass

This module is incorporated into the samba source/rpm package

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
authrequired  /lib/security/pam_env.so
authsufficient/lib/security/pam_unix.so likeauth nullok
authrequired  /lib/security/pam_deny.so

account required  /lib/security/pam_unix.so

passwordrequired  /lib/security/pam_cracklib.so retry=3 type=
passwordrequired  /lib/security/pam_smbpass.so nullok
use_authtok try_first_pass
passwordsufficient/lib/security/pam_unix.so nullok use_authtok
md5 shadow
passwordrequired  /lib/security/pam_deny.so

session required  /lib/security/pam_limits.so
session required  /lib/security/pam_unix.so

# less /usr/share/doc/samba-2.2.7/docs/pam_smbpass/README


--
Ow Mun Heng
Gentoo/Linux on D600 1.4Ghz 
98% Microsoft(tm) Free!!
Neuromancer 14:06:56 up 4:56, 6 users, 0.47, 0.55, 0.25 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


SAMBA startup + shutdown

2004-12-20 Thread Albrecht Schlosser
Hi,
here are some minor problems I found with Samba startup and shutdown, using 
Samba 2.2.8, release 2004-1021 with SAMBA_SHUTDOWN.COM by R. Regier 15-Sep-04:

(1) The shutdown procedure disables the services SMBD and SWAT. This is useful 
(only) if you want to (temporary) disable the service(s) on a running system and 
start them later again. The unmodified procedure SAMBA_STARTUP.COM does not 
enable the service, because they should be enabled by the TCPIP startup 
procedure. However, this is not true, if you run SAMBA_SHUTDOWN.COM for any 
reason and want to start the service again with SAMBA_STARTUP.COM.

I'm not sure what would be the best solution, but for now I decided to uncomment 
the enable service commands in the startup procedure. Maybe it would be a good 
idea to add SAMBA_STOP.COM and SAMBA_START.COM (or similar) to stop and start 
Samba temporarily ...

(2) One bigger problem with this release (and previous 2.2.8 releases) is the 
fact that the NMBD process creates the file samba_root:[var.locks]nmbd.pid and 
checks this file when started. NMBD exits with the following error message in 
the file SAMBA_ROOT:[VAR]LOG.NMBD:


[2004/12/20 11:07:17, 0] 
DISK$SWAP:[JYC.SAMBA.SAMBA-2_2_8-VMS73-SRC.SOURCE.LIB]PIDFILE.C;10:(87)
  ERROR: nmbd is already running. File /samba_root/var/locks/nmbd.pid exists 
and process id 543 is running.


It happened to me that the process was running indeed, but it was another server 
process. Therefore NMBD exited whenever it was started :-(

My solution is to add these lines to SAMBA_SHUTDOWN.COM:
$   SECTION3:
$!
$! delete obsolete .PID file ...
$!
$if f$search(samba_root:[var.locks]nmbd.pid).nes.  then -
delete/log/noconf samba_root:[var.locks]nmbd.pid;*
$!
$ ECHO [ Finished NMBD process termination ]
(the first and last lines are from the original procedure).
Is there a way to stop NMBD in a safe way that it can delete the .PID file? If 
not, then I think that the check should not be done (under VMS). Setting the 
process name to NMBD is safe enough if the UIC group of the NMBD process is known.

Regards
Albrecht
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:
http://www.catb.org/~esr/faqs/smart-questions.html


svn commit: samba r4286 - branches/SAMBA_3_0/source/auth branches/SAMBA_3_0/source/include branches/SAMBA_3_0/source/nsswitch branches/SAMBA_3_0/source/rpc_client branches/SAMBA_3_0/source/rpc_parse trunk/source/auth trunk/source/include trunk/source/nsswitch trunk/source/rpc_client trunk/source/rpc_parse

2004-12-20 Thread gd
Author: gd
Date: 2004-12-20 11:36:39 + (Mon, 20 Dec 2004)
New Revision: 4286

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4286

Log:
Give back 8 byte lm_session_key in Netrsamlogon-reply.

The old #ifdef JRATEST-block was copying 16 bytes and thus overwriting
acct_flags with bizarre values, breaking a lot of things.

This patch is successfully running in a production environment for quite
some time now and is required to finally allow Exchange 5.5 to access
another Exchange Server when both are running on NT4 in a
samba-controlled domain. This also allows Exchange Replication to take
place, Exchange Administrator to access other Servers in the network,
etc. Fixes Bugzilla #1136.

Thanks abartlet for helping me with that one.

Guenther

Modified:
   branches/SAMBA_3_0/source/auth/auth_util.c
   branches/SAMBA_3_0/source/include/rpc_netlogon.h
   branches/SAMBA_3_0/source/nsswitch/winbindd_pam.c
   branches/SAMBA_3_0/source/rpc_client/cli_netlogon.c
   branches/SAMBA_3_0/source/rpc_parse/parse_net.c
   trunk/source/auth/auth_util.c
   trunk/source/include/rpc_netlogon.h
   trunk/source/nsswitch/winbindd_pam.c
   trunk/source/rpc_client/cli_netlogon.c
   trunk/source/rpc_parse/parse_net.c


Changeset:
Sorry, the patch is too large (267 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4286


svn commit: samba-docs r307 - in trunk/manpages: .

2004-12-20 Thread gd
Author: gd
Date: 2004-12-20 12:30:14 + (Mon, 20 Dec 2004)
New Revision: 307

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=307

Log:
Fix from Bjoern Jacke.

add description of %i variable and unify lower case usage of starting
letter in variable section. 

Guenther

Modified:
   trunk/manpages/smb.conf.5.xml


Changeset:
Modified: trunk/manpages/smb.conf.5.xml
===
--- trunk/manpages/smb.conf.5.xml   2004-12-19 16:26:02 UTC (rev 306)
+++ trunk/manpages/smb.conf.5.xml   2004-12-20 12:30:14 UTC (rev 307)
@@ -372,7 +372,7 @@
 
varlistentry
term%d/term
-   listitemparaThe process id of the current server
+   listitemparathe process id of the current server
process./para/listitem
/varlistentry

@@ -389,23 +389,29 @@

varlistentry
term%I/term
-   listitemparaThe IP address of the client machine./para
+   listitemparathe IP address of the client machine./para
/listitem
/varlistentry
 
varlistentry
+   term%i/term
+   listitemparathe local IP address to which a client 
connected./para
+   /listitem
+   /varlistentry
+
+   varlistentry
term%T/term
listitemparathe current date and time./para/listitem
/varlistentry
 
varlistentry
term%D/term
-   listitemparaName of the domain or workgroup of the current 
user./para/listitem
+   listitemparaname of the domain or workgroup of the current 
user./para/listitem
/varlistentry

varlistentry
term%$(replaceableenvvar/replaceable)/term
-   listitemparaThe value of the environment variable
+   listitemparathe value of the environment variable
replaceableenvar/replaceable./para/listitem
/varlistentry
/variablelist



svn commit: samba r4287 - branches/SAMBA_3_0/source/include branches/SAMBA_3_0/source/rpc_parse branches/SAMBA_3_0/source/utils trunk/source/include trunk/source/rpc_parse trunk/source/utils

2004-12-20 Thread gd
Author: gd
Date: 2004-12-20 12:52:33 + (Mon, 20 Dec 2004)
New Revision: 4287

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4287

Log:
Vampire SAM_DELTA_DOMAIN_INFO.

Based on samba4-idl. The decoding of account-lockout-string is somewhat
experimental though.

Guenther

Modified:
   branches/SAMBA_3_0/source/include/rpc_misc.h
   branches/SAMBA_3_0/source/include/rpc_netlogon.h
   branches/SAMBA_3_0/source/rpc_parse/parse_misc.c
   branches/SAMBA_3_0/source/rpc_parse/parse_net.c
   branches/SAMBA_3_0/source/utils/net_rpc_samsync.c
   trunk/source/include/rpc_misc.h
   trunk/source/include/rpc_netlogon.h
   trunk/source/rpc_parse/parse_misc.c
   trunk/source/rpc_parse/parse_net.c
   trunk/source/utils/net_rpc_samsync.c


Changeset:
Sorry, the patch is too large (781 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4287


svn commit: samba-docs r308 - in trunk/manpages: .

2004-12-20 Thread gd
Author: gd
Date: 2004-12-20 14:03:32 + (Mon, 20 Dec 2004)
New Revision: 308

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=308

Log:
Fix whitespace.

Guenther

Modified:
   trunk/manpages/smbstatus.1.xml


Changeset:
Modified: trunk/manpages/smbstatus.1.xml
===
--- trunk/manpages/smbstatus.1.xml  2004-12-20 12:30:14 UTC (rev 307)
+++ trunk/manpages/smbstatus.1.xml  2004-12-20 14:03:32 UTC (rev 308)
@@ -98,8 +98,7 @@
 
varlistentry
term-u|--user=lt;usernamegt;/term
-   listitemparaselects information relevant to 
-   parameterusername/parameter only./para
+   listitemparaselects information relevant to 
parameterusername/parameter only./para
/listitem
/varlistentry
 



svn commit: samba r4288 - in branches/SAMBA_4_0/source: build/pidl rpc_server rpc_server/epmapper rpc_server/remote

2004-12-20 Thread metze
Author: metze
Date: 2004-12-20 14:37:54 + (Mon, 20 Dec 2004)
New Revision: 4288

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4288

Log:
don't use struct dcerpc_interface_table anymore in the
main rpc server code. let the backends specify a ndr_push/ndr_pull function
like we already do with the dispatch() function.

this allows an interface implmentation to work as real proxy
without needing to know the idl for an interface that means
just the plain decrypted payload can be forwarded

If someone want to write such a backend, patches are wellcome

metze

Modified:
   branches/SAMBA_4_0/source/build/pidl/server.pm
   branches/SAMBA_4_0/source/build/pidl/stub.pm
   branches/SAMBA_4_0/source/rpc_server/dcerpc_server.c
   branches/SAMBA_4_0/source/rpc_server/dcerpc_server.h
   branches/SAMBA_4_0/source/rpc_server/epmapper/rpc_epmapper.c
   branches/SAMBA_4_0/source/rpc_server/remote/dcesrv_remote.c


Changeset:
Sorry, the patch is too large (730 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4288


svn commit: samba r4289 - branches/SAMBA_3_0/source/lib trunk/source/lib

2004-12-20 Thread gd
Author: gd
Date: 2004-12-20 18:42:58 + (Mon, 20 Dec 2004)
New Revision: 4289

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4289

Log:
Close LDAP-Connection before retrying to open a new connection in the
retry-loop.

This fixes a deadlock-situation when ldapsam is used with the ldapi
interface: getpeername won't fail while trying to detect dead
connections on unix domain sockets. When the ldapi-connection was closed
server-side (due to OpenLDAP's idletimeout) we *never* got a new LDAP
connection.

Guenther

Modified:
   branches/SAMBA_3_0/source/lib/smbldap.c
   trunk/source/lib/smbldap.c


Changeset:
Modified: branches/SAMBA_3_0/source/lib/smbldap.c
===
--- branches/SAMBA_3_0/source/lib/smbldap.c 2004-12-20 14:37:54 UTC (rev 
4288)
+++ branches/SAMBA_3_0/source/lib/smbldap.c 2004-12-20 18:42:58 UTC (rev 
4289)
@@ -977,6 +977,7 @@
 
*attempts += 1;
 
+   smbldap_close(ldap_state);
open_rc = smbldap_open(ldap_state);
 
if (open_rc == LDAP_SUCCESS) {

Modified: trunk/source/lib/smbldap.c
===
--- trunk/source/lib/smbldap.c  2004-12-20 14:37:54 UTC (rev 4288)
+++ trunk/source/lib/smbldap.c  2004-12-20 18:42:58 UTC (rev 4289)
@@ -999,6 +999,7 @@
 
*attempts += 1;
 
+   smbldap_close(ldap_state);
open_rc = smbldap_open(ldap_state);
 
if (open_rc == LDAP_SUCCESS) {



svn commit: samba-web r480 - in trunk/news/users: .

2004-12-20 Thread deryck
Author: deryck
Date: 2004-12-20 19:38:22 + (Mon, 20 Dec 2004)
New Revision: 480

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=480

Log:

This is a change requested by the author, Alan Horkin.
  

Modified:
   trunk/news/users/babelmedia_converts.html


Changeset:
Modified: trunk/news/users/babelmedia_converts.html
===
--- trunk/news/users/babelmedia_converts.html   2004-12-19 14:28:17 UTC (rev 
479)
+++ trunk/news/users/babelmedia_converts.html   2004-12-20 19:38:22 UTC (rev 
480)
@@ -10,13 +10,11 @@
 PC, mobile, TV games developers. We specialise in QA and localisation
 and have test facilities in UK, US and India./p 
  
-pI recently have taken on a mission to migrate as many services away
-from Microsoft technology after realising that the word dependency is
-too vital to operating a successful Microsoft environment.  We have  
-now been using SAMBA on one of our file servers in AD mode
-for three months with no regrets. Its faster and more reliable than its
-Windows counterparts. I have no hesitation now to use SAMBA for file
-serving to any platform./p
+pI recently have taken on a mission to migrate some services away
+from Microsoft technology.  We have now been using SAMBA on a couple
+of our file servers in AD mode for three months with no regrets. 
+It's as fast and reliable as its Windows counterparts. I have 
+no hesitation now to use SAMBA for file serving to any platform./p
 /blockquote
 
 p class=creditIf you have a testimonial about your experience with



svn commit: samba r4291 - in branches/SAMBA_3_0/source: client lib libsmb modules utils

2004-12-20 Thread jra
Author: jra
Date: 2004-12-20 21:14:28 + (Mon, 20 Dec 2004)
New Revision: 4291

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4291

Log:
More *alloc fixes inspired by Albert Chin ([EMAIL PROTECTED]).
Jeremy

Modified:
   branches/SAMBA_3_0/source/client/tree.c
   branches/SAMBA_3_0/source/lib/afs_settoken.c
   branches/SAMBA_3_0/source/lib/sysacls.c
   branches/SAMBA_3_0/source/lib/util_smbd.c
   branches/SAMBA_3_0/source/libsmb/clikrb5.c
   branches/SAMBA_3_0/source/modules/vfs_afsacl.c
   branches/SAMBA_3_0/source/utils/editreg.c
   branches/SAMBA_3_0/source/utils/net_rpc_samsync.c


Changeset:
Sorry, the patch is too large (438 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4291


svn commit: samba r4292 - in trunk/source/smbd: .

2004-12-20 Thread jra
Author: jra
Date: 2004-12-20 22:01:18 + (Mon, 20 Dec 2004)
New Revision: 4292

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4292

Log:
Fix inspired by debug trace from Rob Foehl [EMAIL PROTECTED] - catch sendfile
errors correctly and return the correct values we want the caller to return (-1
meaning none in correct cases).
Jeremy.

Modified:
   trunk/source/smbd/reply.c


Changeset:
Modified: trunk/source/smbd/reply.c
===
--- trunk/source/smbd/reply.c   2004-12-20 21:14:28 UTC (rev 4291)
+++ trunk/source/smbd/reply.c   2004-12-20 22:01:18 UTC (rev 4292)
@@ -1783,6 +1783,11 @@
header.free = NULL;
 
if ( SMB_VFS_SENDFILE( smbd_server_fd(), fsp, fsp-fd, header, 
startpos, nread) == -1) {
+   /* Returning ENOSYS means no data at all was sent. Do 
this as a normal read. */
+   if (errno == ENOSYS) {
+   goto normal_readbraw;
+   }
+
/*
 * Special hack for broken Linux with no working 
sendfile. If we
 * return EINTR we sent the header but not the rest of 
the data.
@@ -1808,6 +1813,8 @@
 
}
 
+  normal_readbraw:
+
 #endif
 
if (nread  0) {
@@ -2157,12 +2164,18 @@
header.length = data - outbuf;
header.free = NULL;
 
-   if ( SMB_VFS_SENDFILE( smbd_server_fd(), fsp, fsp-fd, header, 
startpos, smb_maxcnt) == -1) {
+   if ((nread = SMB_VFS_SENDFILE( smbd_server_fd(), fsp, fsp-fd, 
header, startpos, smb_maxcnt)) == -1) {
+   /* Returning ENOSYS means no data at all was sent. Do 
this as a normal read. */
+   if (errno == ENOSYS) {
+   goto normal_read;
+   }
+
/*
 * Special hack for broken Linux with no working 
sendfile. If we
 * return EINTR we sent the header but not the rest of 
the data.
 * Fake this up by doing read/write calls.
 */
+
if (errno == EINTR) {
/* Ensure we don't do this again. */
set_use_sendfile(SNUM(conn), False);
@@ -2174,7 +2187,10 @@
fsp-fsp_name, strerror(errno) 
));
exit_server(send_file_readX: 
fake_sendfile failed);
}
-   return nread;
+   DEBUG( 3, ( send_file_readX: fake_sendfile 
fnum=%d max=%d nread=%d\n,
+   fsp-fnum, (int)smb_maxcnt, (int)(nread 
+ (data - outbuf)) ) );
+   /* Returning -1 here means successful sendfile. 
*/
+   return -1;
}
 
DEBUG(0,(send_file_readX: sendfile failed for file %s 
(%s). Terminating\n,
@@ -2184,6 +2200,7 @@
 
DEBUG( 3, ( send_file_readX: sendfile fnum=%d max=%d 
nread=%d\n,
fsp-fnum, (int)smb_maxcnt, (int)nread ) );
+   /* Returning -1 here means successful sendfile. */
return -1;
}
 
@@ -2208,6 +2225,7 @@
DEBUG( 3, ( send_file_readX fnum=%d max=%d nread=%d\n,
fsp-fnum, (int)smb_maxcnt, (int)nread ) );
 
+   /* Returning the number of bytes we want to send back - including 
header. */
return outsize;
 }
 



svn commit: samba r4293 - in branches/SAMBA_3_0/source/smbd: .

2004-12-20 Thread jra
Author: jra
Date: 2004-12-20 22:01:42 + (Mon, 20 Dec 2004)
New Revision: 4293

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4293

Log:
Fix inspired by debug trace from Rob Foehl [EMAIL PROTECTED] - catch sendfile
errors correctly and return the correct values we want the caller to return (-1
meaning none in correct cases).
Jeremy.

Modified:
   branches/SAMBA_3_0/source/smbd/reply.c


Changeset:
Modified: branches/SAMBA_3_0/source/smbd/reply.c
===
--- branches/SAMBA_3_0/source/smbd/reply.c  2004-12-20 22:01:18 UTC (rev 
4292)
+++ branches/SAMBA_3_0/source/smbd/reply.c  2004-12-20 22:01:42 UTC (rev 
4293)
@@ -1783,6 +1783,11 @@
header.free = NULL;
 
if ( SMB_VFS_SENDFILE( smbd_server_fd(), fsp, fsp-fd, header, 
startpos, nread) == -1) {
+   /* Returning ENOSYS means no data at all was sent. Do 
this as a normal read. */
+   if (errno == ENOSYS) {
+   goto normal_readbraw;
+   }
+
/*
 * Special hack for broken Linux with no working 
sendfile. If we
 * return EINTR we sent the header but not the rest of 
the data.
@@ -1808,6 +1813,8 @@
 
}
 
+  normal_readbraw:
+
 #endif
 
if (nread  0) {
@@ -2157,12 +2164,18 @@
header.length = data - outbuf;
header.free = NULL;
 
-   if ( SMB_VFS_SENDFILE( smbd_server_fd(), fsp, fsp-fd, header, 
startpos, smb_maxcnt) == -1) {
+   if ((nread = SMB_VFS_SENDFILE( smbd_server_fd(), fsp, fsp-fd, 
header, startpos, smb_maxcnt)) == -1) {
+   /* Returning ENOSYS means no data at all was sent. Do 
this as a normal read. */
+   if (errno == ENOSYS) {
+   goto normal_read;
+   }
+
/*
 * Special hack for broken Linux with no working 
sendfile. If we
 * return EINTR we sent the header but not the rest of 
the data.
 * Fake this up by doing read/write calls.
 */
+
if (errno == EINTR) {
/* Ensure we don't do this again. */
set_use_sendfile(SNUM(conn), False);
@@ -2174,7 +2187,10 @@
fsp-fsp_name, strerror(errno) 
));
exit_server(send_file_readX: 
fake_sendfile failed);
}
-   return nread;
+   DEBUG( 3, ( send_file_readX: fake_sendfile 
fnum=%d max=%d nread=%d\n,
+   fsp-fnum, (int)smb_maxcnt, (int)(nread 
+ (data - outbuf)) ) );
+   /* Returning -1 here means successful sendfile. 
*/
+   return -1;
}
 
DEBUG(0,(send_file_readX: sendfile failed for file %s 
(%s). Terminating\n,
@@ -2184,6 +2200,7 @@
 
DEBUG( 3, ( send_file_readX: sendfile fnum=%d max=%d 
nread=%d\n,
fsp-fnum, (int)smb_maxcnt, (int)nread ) );
+   /* Returning -1 here means successful sendfile. */
return -1;
}
 
@@ -2208,6 +2225,7 @@
DEBUG( 3, ( send_file_readX fnum=%d max=%d nread=%d\n,
fsp-fnum, (int)smb_maxcnt, (int)nread ) );
 
+   /* Returning the number of bytes we want to send back - including 
header. */
return outsize;
 }
 



svn commit: samba-docs r309 - in trunk/Samba-HOWTO-Collection: .

2004-12-20 Thread mimir
Author: mimir
Date: 2004-12-20 22:03:51 + (Mon, 20 Dec 2004)
New Revision: 309

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=309

Log:
Typo fix.


rafal


Modified:
   trunk/Samba-HOWTO-Collection/PolicyMgmt.xml


Changeset:
Modified: trunk/Samba-HOWTO-Collection/PolicyMgmt.xml
===
--- trunk/Samba-HOWTO-Collection/PolicyMgmt.xml 2004-12-20 14:03:32 UTC (rev 
308)
+++ trunk/Samba-HOWTO-Collection/PolicyMgmt.xml 2004-12-20 22:03:51 UTC (rev 
309)
@@ -214,7 +214,7 @@
para
 indextermprimaryGPOs/primary/indexterm
The older NT4-style registry-based policies are known as 
emphasisAdministrative Templates/emphasis
-   in MS Windows 2000/XP Group Policy Objects (GPOs). The later includes 
the ability to set various security
+   in MS Windows 2000/XP Group Policy Objects (GPOs). The latter includes 
the ability to set various security
configurations, enforce Internet Explorer browser settings, change and 
redirect aspects of the
users desktop (including the location of filenameMy 
Documents/filename files (directory), as
well as intrinsics of where menu items will appear in the Start menu). 
An additional new



svn commit: samba r4294 - in trunk/source/smbd: .

2004-12-20 Thread jra
Author: jra
Date: 2004-12-20 22:04:44 + (Mon, 20 Dec 2004)
New Revision: 4294

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4294

Log:
Don't include header len in data write debug.
Jeremy.

Modified:
   trunk/source/smbd/reply.c


Changeset:
Modified: trunk/source/smbd/reply.c
===
--- trunk/source/smbd/reply.c   2004-12-20 22:01:42 UTC (rev 4293)
+++ trunk/source/smbd/reply.c   2004-12-20 22:04:44 UTC (rev 4294)
@@ -2188,7 +2188,7 @@
exit_server(send_file_readX: 
fake_sendfile failed);
}
DEBUG( 3, ( send_file_readX: fake_sendfile 
fnum=%d max=%d nread=%d\n,
-   fsp-fnum, (int)smb_maxcnt, (int)(nread 
+ (data - outbuf)) ) );
+   fsp-fnum, (int)smb_maxcnt, (int)nread 
) );
/* Returning -1 here means successful sendfile. 
*/
return -1;
}



svn commit: samba r4295 - in branches/SAMBA_3_0/source/smbd: .

2004-12-20 Thread jra
Author: jra
Date: 2004-12-20 22:04:53 + (Mon, 20 Dec 2004)
New Revision: 4295

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4295

Log:
Don't include header len in data write debug.
Jeremy.

Modified:
   branches/SAMBA_3_0/source/smbd/reply.c


Changeset:
Modified: branches/SAMBA_3_0/source/smbd/reply.c
===
--- branches/SAMBA_3_0/source/smbd/reply.c  2004-12-20 22:04:44 UTC (rev 
4294)
+++ branches/SAMBA_3_0/source/smbd/reply.c  2004-12-20 22:04:53 UTC (rev 
4295)
@@ -2188,7 +2188,7 @@
exit_server(send_file_readX: 
fake_sendfile failed);
}
DEBUG( 3, ( send_file_readX: fake_sendfile 
fnum=%d max=%d nread=%d\n,
-   fsp-fnum, (int)smb_maxcnt, (int)(nread 
+ (data - outbuf)) ) );
+   fsp-fnum, (int)smb_maxcnt, (int)nread 
) );
/* Returning -1 here means successful sendfile. 
*/
return -1;
}



svn commit: samba r4297 - in trunk/source: . lib

2004-12-20 Thread jra
Author: jra
Date: 2004-12-20 22:33:43 + (Mon, 20 Dec 2004)
New Revision: 4297

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4297

Log:
Patch from William Jojo [EMAIL PROTECTED] to fix HPUX sendfile and add
configure.in tests and code for sendfile on AIX.
Jeremy.

Modified:
   trunk/source/configure.in
   trunk/source/lib/sendfile.c


Changeset:
Modified: trunk/source/configure.in
===
--- trunk/source/configure.in   2004-12-20 22:33:37 UTC (rev 4296)
+++ trunk/source/configure.in   2004-12-20 22:33:43 UTC (rev 4297)
@@ -4224,7 +4224,36 @@
AC_MSG_RESULT(no);
fi
;;
+   *aix*)
+   AC_CACHE_CHECK([for AIX send_file 
support],samba_cv_HAVE_SENDFILE,[
+   AC_TRY_LINK([\
+#include sys/socket.h],
+[\
+   int fromfd, tofd;
+   size_t total=0;
+   struct sf_parms hdtrl;
+   ssize_t nwritten;
+   off64_t offset;
 
+   hdtrl.header_data = 0;
+   hdtrl.header_length = 0;
+   hdtrl.file_descriptor = fromfd;
+   hdtrl.file_offset = 0;
+   hdtrl.file_bytes = 0;
+   hdtrl.trailer_data = 0;
+   hdtrl.trailer_length = 0;
+
+   nwritten = send_file(tofd, hdtrl, 0);
+],
+samba_cv_HAVE_SENDFILE=yes,samba_cv_HAVE_SENDFILE=no)])
+   if test x$samba_cv_HAVE_SENDFILE = xyes; then
+   AC_DEFINE(HAVE_SENDFILE,1,[Whether sendfile() is available])
+   AC_DEFINE(AIX_SENDFILE_API,1,[Whether the AIX send_file() API 
is available])
+   AC_DEFINE(WITH_SENDFILE,1,[Whether to include sendfile() 
support])
+   else
+   AC_MSG_RESULT(no);
+   fi
+   ;;
*)
;;
 esac

Modified: trunk/source/lib/sendfile.c
===
--- trunk/source/lib/sendfile.c 2004-12-20 22:33:37 UTC (rev 4296)
+++ trunk/source/lib/sendfile.c 2004-12-20 22:33:43 UTC (rev 4297)
@@ -274,7 +274,7 @@
hdtrl[0].iov_len = hdr_len = 0;
}
hdtrl[1].iov_base = NULL;
-   hdtrl[1].iov_base = 0;
+   hdtrl[1].iov_len = 0;
 
total = count;
while (total + hdtrl[0].iov_len) {
@@ -395,6 +395,62 @@
return count + hdr_len;
 }
 
+#elif defined(AIX_SENDFILE_API)
+
+/* BEGIN AIX SEND_FILE */
+
+/* Contributed by William Jojo [EMAIL PROTECTED] */
+#include sys/socket.h
+
+ssize_t sys_sendfile(int tofd, int fromfd, const DATA_BLOB *header, SMB_OFF_T 
offset, size_t count)
+{
+   size_t total=0;
+   struct sf_parms hdtrl;
+
+   /* Set up the header/trailer struct params. */
+   if (header) {
+   hdtrl.header_data = header-data;
+   hdtrl.header_length = header-length;
+   } else {
+   hdtrl.header_data = NULL;
+   hdtrl.header_length = 0;
+   }
+   hdtrl.trailer_data = NULL;
+   hdtrl.trailer_length = 0;
+
+   hdtrl.file_descriptor = fromfd;
+   hdtrl.file_offset = offset;
+   hdtrl.file_bytes = count;
+
+   while ( hdtrl.file_bytes + hdtrl.header_length ) {
+   ssize_t ret;
+
+   /*
+Return Value
+
+There are three possible return values from send_file:
+
+Value Description
+
+-1 an error has occurred, errno contains the error code.
+
+0 the command has completed successfully.
+
+1 the command was completed partially, some data has been
+transmitted but the command has to return for some reason,
+for example, the command was interrupted by signals.
+   */
+   do {
+   ret = send_file(tofd, hdtrl, 0);
+   } while ( (ret == 1) || (ret == -1  errno == EINTR) );
+   if ( ret == -1 )
+   return -1;
+   }
+
+   return count + header-length;
+}
+/* END AIX SEND_FILE */
+
 #else /* No sendfile implementation. Return error. */
 
 ssize_t sys_sendfile(int tofd, int fromfd, const DATA_BLOB *header, SMB_OFF_T 
offset, size_t count)



svn commit: samba r4298 - in branches/SAMBA_4_0/source: include lib/registry

2004-12-20 Thread jelmer
Author: jelmer
Date: 2004-12-21 00:01:02 + (Tue, 21 Dec 2004)
New Revision: 4298

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4298

Log:
Update to credentials.h after feedback from Andrew Bartlett
Move pack/unpack of values in ldb registry backend to seperate functions

Modified:
   branches/SAMBA_4_0/source/include/credentials.h
   branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c


Changeset:
Modified: branches/SAMBA_4_0/source/include/credentials.h
===
--- branches/SAMBA_4_0/source/include/credentials.h 2004-12-20 22:33:43 UTC 
(rev 4297)
+++ branches/SAMBA_4_0/source/include/credentials.h 2004-12-21 00:01:02 UTC 
(rev 4298)
@@ -29,8 +29,10 @@
const char *domain;
const char *realm;
 
-   const char *(*username_cb) (void);
-   const char *(*password_cb) (void);
-   const char *(*domain_cb) (void);
-   const char *(*realm_cb) (void);
+   const char *(*username_cb) (struct cli_credentials *);
+   const char *(*password_cb) (struct cli_credentials *);
+   const char *(*domain_cb) (struct cli_credentials *);
+   const char *(*realm_cb) (struct cli_credentials *);
+
+   void *priv_data;
 };

Modified: branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c
===
--- branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c2004-12-20 
22:33:43 UTC (rev 4297)
+++ branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c2004-12-21 
00:01:02 UTC (rev 4298)
@@ -36,8 +36,34 @@
return 0;
 }
 
+static void reg_ldb_unpack_value(TALLOC_CTX *mem_ctx, struct ldb_message *msg, 
char **name, uint32 *type, void **data, int *len)
+{
+   const struct ldb_val *val;
+   *name = talloc_strdup(mem_ctx, ldb_msg_find_string(msg, value, NULL));
+   *type = ldb_msg_find_uint(msg, type, 0);
+   val = ldb_msg_find_ldb_val(msg, data);
+   *data = talloc_memdup(mem_ctx, val-data, val-length);
+   *len = val-length;
+}
 
+static struct ldb_message *reg_ldb_pack_value(struct ldb_context *ctx, 
TALLOC_CTX *mem_ctx, const char *name, uint32 type, void *data, int len)
+{
+   struct ldb_val val;
+   struct ldb_message *msg = talloc_zero_p(mem_ctx, struct ldb_message);
+   char *type_s;
 
+   ldb_msg_add_string(ctx, msg, value, talloc_strdup(mem_ctx, name));
+   val.length = len;
+   val.data = data;
+   ldb_msg_add_value(ctx, msg, data, val);
+
+   type_s = talloc_asprintf(mem_ctx, %u, type);
+   ldb_msg_add_string(ctx, msg, type, type_s); 
+
+   return msg;
+}
+
+
 static int reg_close_ldb_key (void *data)
 {
struct registry_key *key = data;
@@ -121,9 +147,7 @@
 static WERROR ldb_get_value_by_id(TALLOC_CTX *mem_ctx, struct registry_key *k, 
int idx, struct registry_value **value)
 {
struct ldb_context *c = k-hive-backend_data;
-   struct ldb_message_element *el;
struct ldb_key_data *kd = k-backend_data;
-   const struct ldb_val *val;
 
/* Do the search if necessary */
if (kd-values == NULL) {
@@ -136,16 +160,11 @@
}
 
if(idx = kd-value_count) return WERR_NO_MORE_ITEMS;
-   
-   el = ldb_msg_find_element(kd-values[idx], value);
-   
+
*value = talloc_p(mem_ctx, struct registry_value);
-   (*value)-name = talloc_strdup(mem_ctx, el-values[0].data);
-   (*value)-data_type = ldb_msg_find_uint(kd-values[idx], type, 0);
-   val = ldb_msg_find_ldb_val(kd-values[idx], data);
-   (*value)-data_blk = talloc_memdup(mem_ctx, val-data, val-length);
-   (*value)-data_len = val-length;
 
+   reg_ldb_unpack_value(mem_ctx, kd-values[idx], (*value)-name, 
(*value)-data_type, (*value)-data_blk, (*value)-data_len);
+
return WERR_OK;
 }
 
@@ -275,28 +294,18 @@
 static WERROR ldb_set_value (struct registry_key *parent, const char *name, 
uint32 type, void *data, int len)
 {
struct ldb_context *ctx = parent-hive-backend_data;
-   struct ldb_message msg;
-   struct ldb_val val;
+   struct ldb_message *msg;
struct ldb_key_data *kd = parent-backend_data;
int ret;
-   char *type_s;
TALLOC_CTX *mem_ctx = talloc_init(ldb_set_value);
 
-   ZERO_STRUCT(msg);
+   msg = reg_ldb_pack_value(ctx, mem_ctx, name, type, data, len);
 
-   msg.dn = talloc_asprintf(mem_ctx, value=%s,%s, name, kd-dn);
+   msg-dn = talloc_asprintf(mem_ctx, value=%s,%s, name, kd-dn);
 
-   ldb_msg_add_string(ctx, msg, value, talloc_strdup(mem_ctx, name));
-   val.length = len;
-   val.data = data;
-   ldb_msg_add_value(ctx, msg, data, val);
-
-   type_s = talloc_asprintf(mem_ctx, %u, type);
-   ldb_msg_add_string(ctx, msg, type, type_s); 
-
-   ret = ldb_add(ctx, msg);
+   ret = ldb_add(ctx, msg);
if (ret  0) {
-   ret = ldb_modify(ctx, msg);
+   ret = 

svn commit: samba r4299 - in branches/SAMBA_4_0/source: . lib/registry lib/registry/common

2004-12-20 Thread jelmer
Author: jelmer
Date: 2004-12-21 00:31:18 + (Tue, 21 Dec 2004)
New Revision: 4299

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4299

Log:
Store REG_SZ, REG_EXPAND_SZ and REG_DWORD values in human-readable (and 
human-editable) format in
the ldb registry backend.

Modified:
   branches/SAMBA_4_0/source/lib/registry/common/reg_util.c
   branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c
   branches/SAMBA_4_0/source/registry.ldif


Changeset:
Modified: branches/SAMBA_4_0/source/lib/registry/common/reg_util.c
===
--- branches/SAMBA_4_0/source/lib/registry/common/reg_util.c2004-12-21 
00:01:02 UTC (rev 4298)
+++ branches/SAMBA_4_0/source/lib/registry/common/reg_util.c2004-12-21 
00:31:18 UTC (rev 4299)
@@ -124,7 +124,7 @@
case REG_DWORD:
(*value)-data_len = sizeof(uint32);
(*value)-data_blk = talloc_p(mem_ctx, uint32);
-   *((uint32 *)(*value)-data_blk) = atol(data_str);
+   *((uint32 *)(*value)-data_blk) = strtol(data_str, 
NULL, 0);
break;
 
case REG_NONE:

Modified: branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c
===
--- branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c2004-12-21 
00:01:02 UTC (rev 4298)
+++ branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c2004-12-21 
00:31:18 UTC (rev 4299)
@@ -42,8 +42,25 @@
*name = talloc_strdup(mem_ctx, ldb_msg_find_string(msg, value, NULL));
*type = ldb_msg_find_uint(msg, type, 0);
val = ldb_msg_find_ldb_val(msg, data);
-   *data = talloc_memdup(mem_ctx, val-data, val-length);
-   *len = val-length;
+
+   switch (*type)
+   {
+   case REG_SZ:
+   case REG_EXPAND_SZ:
+   *len = convert_string_talloc(mem_ctx, CH_UTF8, CH_UTF16, 
val-data, val-length, data);
+   break;
+
+   case REG_DWORD_LE:
+   *len = 4;
+   *data = talloc_p(mem_ctx, uint32);
+   SIVAL(*data, 0, strtol(val-data, NULL, 0));
+   break;
+
+   default:
+   *data = talloc_memdup(mem_ctx, val-data, val-length);
+   *len = val-length;
+   break;
+   }
 }
 
 static struct ldb_message *reg_ldb_pack_value(struct ldb_context *ctx, 
TALLOC_CTX *mem_ctx, const char *name, uint32 type, void *data, int len)
@@ -53,10 +70,23 @@
char *type_s;
 
ldb_msg_add_string(ctx, msg, value, talloc_strdup(mem_ctx, name));
-   val.length = len;
-   val.data = data;
-   ldb_msg_add_value(ctx, msg, data, val);
 
+   switch (type) {
+   case REG_SZ:
+   case REG_EXPAND_SZ:
+   val.length = convert_string_talloc(mem_ctx, CH_UTF16, CH_UTF8, 
data, len, val.data);
+   ldb_msg_add_value(ctx, msg, data, val);
+   break;
+   case REG_DWORD_LE:
+   ldb_msg_add_string(ctx, msg, data, talloc_asprintf(mem_ctx, 
0x%x, IVAL(data, 0)));
+   break;
+   default:
+   val.length = len;
+   val.data = data;
+   ldb_msg_add_value(ctx, msg, data, val);
+   }
+
+
type_s = talloc_asprintf(mem_ctx, %u, type);
ldb_msg_add_string(ctx, msg, type, type_s); 
 

Modified: branches/SAMBA_4_0/source/registry.ldif
===
--- branches/SAMBA_4_0/source/registry.ldif 2004-12-21 00:01:02 UTC (rev 
4298)
+++ branches/SAMBA_4_0/source/registry.ldif 2004-12-21 00:31:18 UTC (rev 
4299)
@@ -6,7 +6,7 @@
 
 dn: 
value=ProductType,key=productoptions,key=control,key=currentcontrolset,key=system,hive=
 value: ProductType
-data:: VwBpAG4ATgBUAA=
+data: WinNT
 type: 1
 
 dn: key=productoptions,key=control,key=currentcontrolset,key=system,hive=



svn commit: samba r4300 - in trunk/source/smbd: .

2004-12-20 Thread jra
Author: jra
Date: 2004-12-21 01:04:04 + (Tue, 21 Dec 2004)
New Revision: 4300

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4300

Log:
One more *alloc - SMB_MALLOC (not compiled by default).
Jeremy.

Modified:
   trunk/source/smbd/quotas.c


Changeset:
Modified: trunk/source/smbd/quotas.c
===
--- trunk/source/smbd/quotas.c  2004-12-21 00:31:18 UTC (rev 4299)
+++ trunk/source/smbd/quotas.c  2004-12-21 01:04:04 UTC (rev 4300)
@@ -471,7 +471,7 @@
 
len=strcspn(mnttype, :);
pathname=strstr(mnttype, :);
-   cutstr = (char *) malloc(len+1);
+   cutstr = (char *) SMB_MALLOC(len+1);
if (!cutstr)
return False;
 
@@ -1000,7 +1000,7 @@
 
len=strcspn(mnttype, :);
pathname=strstr(mnttype, :);
-   cutstr = (char *) malloc(len+1);
+   cutstr = (char *) SMB_MALLOC(len+1);
if (!cutstr)
return False;
 



svn commit: samba r4301 - in branches/SAMBA_3_0/source/smbd: .

2004-12-20 Thread jra
Author: jra
Date: 2004-12-21 01:04:11 + (Tue, 21 Dec 2004)
New Revision: 4301

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4301

Log:
One more *alloc - SMB_MALLOC (not compiled by default).
Jeremy.

Modified:
   branches/SAMBA_3_0/source/smbd/quotas.c


Changeset:
Modified: branches/SAMBA_3_0/source/smbd/quotas.c
===
--- branches/SAMBA_3_0/source/smbd/quotas.c 2004-12-21 01:04:04 UTC (rev 
4300)
+++ branches/SAMBA_3_0/source/smbd/quotas.c 2004-12-21 01:04:11 UTC (rev 
4301)
@@ -471,7 +471,7 @@
 
len=strcspn(mnttype, :);
pathname=strstr(mnttype, :);
-   cutstr = (char *) malloc(len+1);
+   cutstr = (char *) SMB_MALLOC(len+1);
if (!cutstr)
return False;
 
@@ -1000,7 +1000,7 @@
 
len=strcspn(mnttype, :);
pathname=strstr(mnttype, :);
-   cutstr = (char *) malloc(len+1);
+   cutstr = (char *) SMB_MALLOC(len+1);
if (!cutstr)
return False;
 



Re: svn commit: samba r4289 - branches/SAMBA_3_0/source/lib trunk/source/lib

2004-12-20 Thread Volker Lendecke
On Mon, Dec 20, 2004 at 06:42:59PM +, [EMAIL PROTECTED] wrote:
 This fixes a deadlock-situation when ldapsam is used with the ldapi
 interface: getpeername won't fail while trying to detect dead

I think a failing getpeername just *will* fail as an indication of a unix
domain socket whose other end has disconnected. 

Anybody out here who knows the standard way to detect a socket who is not
connected anymore just because the other end has closed the connection?

Volker


svn commit: samba r4302 - in branches/SAMBA_4_0/source/gtk: common tools

2004-12-20 Thread tridge
Author: tridge
Date: 2004-12-21 03:28:26 + (Tue, 21 Dec 2004)
New Revision: 4302

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4302

Log:
fixed all of the annoying gtk warnings. The code all seems to still work, but 
given my lack of gtk experience, there are no guarantees.

Modified:
   branches/SAMBA_4_0/source/gtk/common/gtk-smb.c
   branches/SAMBA_4_0/source/gtk/common/select.c
   branches/SAMBA_4_0/source/gtk/common/select.h
   branches/SAMBA_4_0/source/gtk/tools/gepdump.c
   branches/SAMBA_4_0/source/gtk/tools/gregedit.c
   branches/SAMBA_4_0/source/gtk/tools/gwcrontab.c
   branches/SAMBA_4_0/source/gtk/tools/gwsam_user.c


Changeset:
Modified: branches/SAMBA_4_0/source/gtk/common/gtk-smb.c
===
--- branches/SAMBA_4_0/source/gtk/common/gtk-smb.c  2004-12-21 01:04:11 UTC 
(rev 4301)
+++ branches/SAMBA_4_0/source/gtk/common/gtk-smb.c  2004-12-21 03:28:26 UTC 
(rev 4302)
@@ -289,7 +289,7 @@
 
 GtkWidget *gtk_rpc_binding_dialog_new (BOOL nocredentials, struct sam_pipe 
*sam_pipe)
 {
-   GtkRpcBindingDialog *d = GTK_RPC_BINDING_DIALOG ( gtk_type_new 
(gtk_rpc_binding_dialog_get_type ()));
+   GtkRpcBindingDialog *d = GTK_RPC_BINDING_DIALOG ( g_object_new 
(gtk_rpc_binding_dialog_get_type (), NULL));
if (nocredentials) {
gtk_widget_hide_all(d-frame_credentials);
}

Modified: branches/SAMBA_4_0/source/gtk/common/select.c
===
--- branches/SAMBA_4_0/source/gtk/common/select.c   2004-12-21 01:04:11 UTC 
(rev 4301)
+++ branches/SAMBA_4_0/source/gtk/common/select.c   2004-12-21 03:28:26 UTC 
(rev 4302)
@@ -123,7 +123,7 @@

  
 GtkWidget *gtk_select_domain_dialog_new (struct dcerpc_pipe *sam_pipe)
 {
-   GtkSelectDomainDialog *d = gtk_type_new 
(gtk_select_domain_dialog_get_type ());
+   GtkSelectDomainDialog *d = 
g_object_new(gtk_select_domain_dialog_get_type (), NULL);
NTSTATUS status;
struct samr_EnumDomains r;
struct samr_Connect cr;
@@ -258,5 +258,5 @@

  
 GtkWidget *gtk_select_host_dialog_new (struct sam_pipe *sam_pipe, BOOL 
nocredentials)
 {
-return GTK_WIDGET ( gtk_type_new (gtk_select_host_dialog_get_type ()));
+return GTK_WIDGET ( g_object_new (gtk_select_host_dialog_get_type (), 
NULL ));
 }

Modified: branches/SAMBA_4_0/source/gtk/common/select.h
===
--- branches/SAMBA_4_0/source/gtk/common/select.h   2004-12-21 01:04:11 UTC 
(rev 4301)
+++ branches/SAMBA_4_0/source/gtk/common/select.h   2004-12-21 03:28:26 UTC 
(rev 4302)
@@ -24,6 +24,8 @@
 
 #ifdef HAVE_GTK
 
+#define GTK_DISABLE_DEPRECATED
+
 #include gtk/gtk.h
 
 typedef struct _GtkSelectDomainDialog GtkSelectDomainDialog;

Modified: branches/SAMBA_4_0/source/gtk/tools/gepdump.c
===
--- branches/SAMBA_4_0/source/gtk/tools/gepdump.c   2004-12-21 01:04:11 UTC 
(rev 4301)
+++ branches/SAMBA_4_0/source/gtk/tools/gepdump.c   2004-12-21 03:28:26 UTC 
(rev 4302)
@@ -359,7 +359,7 @@
 
gtk_tree_view_append_column(GTK_TREE_VIEW(tree_eps), curcol);
 
-   store_eps = gtk_tree_store_new(3, GTK_TYPE_STRING, GTK_TYPE_STRING, 
GTK_TYPE_POINTER);
+   store_eps = gtk_tree_store_new(3, G_TYPE_STRING, G_TYPE_STRING, 
G_TYPE_POINTER);
gtk_tree_view_set_model(GTK_TREE_VIEW(tree_eps), 
GTK_TREE_MODEL(store_eps));
g_object_unref(store_eps);
 

Modified: branches/SAMBA_4_0/source/gtk/tools/gregedit.c
===
--- branches/SAMBA_4_0/source/gtk/tools/gregedit.c  2004-12-21 01:04:11 UTC 
(rev 4301)
+++ branches/SAMBA_4_0/source/gtk/tools/gregedit.c  2004-12-21 03:28:26 UTC 
(rev 4302)
@@ -580,18 +580,18 @@
open_nt4 = gtk_image_menu_item_new_with_mnemonic(Open _NT4 
file);
gtk_container_add (GTK_CONTAINER (menu_file_menu), open_nt4);
 
-   g_signal_connect ((gpointer) open_nt4, activate,
- G_CALLBACK 
(on_open_file_activate),
- (gpointer)nt4);
+   g_signal_connect(open_nt4, activate,
+G_CALLBACK (on_open_file_activate),
+discard_const_p(char, nt4));
}
 
if(reg_has_backend(w95)) {
open_w95 = gtk_image_menu_item_new_with_mnemonic(Open Win_9x 
file);
gtk_container_add (GTK_CONTAINER (menu_file_menu), open_w95);
 
-   g_signal_connect ((gpointer) open_w95, 

svn commit: samba r4303 - in branches/SAMBA_4_0/source/client: .

2004-12-20 Thread tridge
Author: tridge
Date: 2004-12-21 03:29:09 + (Tue, 21 Dec 2004)
New Revision: 4303

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4303

Log:
a bit more consistent help on privileges commands in smbclient

Modified:
   branches/SAMBA_4_0/source/client/client.c


Changeset:
Modified: branches/SAMBA_4_0/source/client/client.c
===
--- branches/SAMBA_4_0/source/client/client.c   2004-12-21 03:28:26 UTC (rev 
4302)
+++ branches/SAMBA_4_0/source/client/client.c   2004-12-21 03:29:09 UTC (rev 
4303)
@@ -1847,7 +1847,7 @@
struct dom_sid *sid;
 
if (!next_token(cmd_ptr,buf,NULL,sizeof(buf))) {
-   d_printf(lookup name|sid\n);
+   d_printf(lookup sid|name\n);
talloc_free(mem_ctx);
return 1;
}
@@ -1939,7 +1939,7 @@
struct lsa_RightSet rights;
 
if (!next_token(cmd_ptr,buf,NULL,sizeof(buf))) {
-   d_printf(addprivileges sid privilege...\n);
+   d_printf(addprivileges sid|name privilege...\n);
talloc_free(mem_ctx);
return 1;
}
@@ -1989,7 +1989,7 @@
struct lsa_RightSet rights;
 
if (!next_token(cmd_ptr,buf,NULL,sizeof(buf))) {
-   d_printf(delprivileges sid privilege...\n);
+   d_printf(delprivileges sid|name privilege...\n);
talloc_free(mem_ctx);
return 1;
}
@@ -2577,7 +2577,7 @@
 } commands[] = 
 {
   {?,cmd_help,[command] give help on a command,{COMPL_NONE,COMPL_NONE}},
-  {addprivileges,cmd_addprivileges,sid|user privilege... add privileges 
for a user,{COMPL_NONE,COMPL_NONE}},
+  {addprivileges,cmd_addprivileges,sid|name privilege... add privileges 
for a user,{COMPL_NONE,COMPL_NONE}},
   {altname,cmd_altname,file show alt name,{COMPL_NONE,COMPL_NONE}},
   {acl,cmd_acl,file show file ACL,{COMPL_NONE,COMPL_NONE}},
   {allinfo,cmd_allinfo,file show all possible info about a 
file,{COMPL_NONE,COMPL_NONE}},
@@ -2587,7 +2587,7 @@
   {chmod,cmd_chmod,src mode chmod a file using UNIX 
permission,{COMPL_REMOTE,COMPL_REMOTE}},
   {chown,cmd_chown,src uid gid chown a file using UNIX uids and 
gids,{COMPL_REMOTE,COMPL_REMOTE}},
   {del,cmd_del,mask delete all matching files,{COMPL_REMOTE,COMPL_NONE}},
-  {delprivileges,cmd_delprivileges,sid|user privilege... remove 
privileges for a user,{COMPL_NONE,COMPL_NONE}},
+  {delprivileges,cmd_delprivileges,sid|name privilege... remove 
privileges for a user,{COMPL_NONE,COMPL_NONE}},
   {deltree,cmd_deltree,dir delete a whole directory 
tree,{COMPL_REMOTE,COMPL_NONE}},
   {dir,cmd_dir,mask list the contents of the current 
directory,{COMPL_REMOTE,COMPL_NONE}},
   {du,cmd_du,mask computes the total size of the current 
directory,{COMPL_REMOTE,COMPL_NONE}},
@@ -2597,7 +2597,7 @@
   {history,cmd_history,displays the command 
history,{COMPL_NONE,COMPL_NONE}},
   {lcd,cmd_lcd,[directory] change/report the local current working 
directory,{COMPL_LOCAL,COMPL_NONE}},
   {link,cmd_link,src dest create a UNIX hard 
link,{COMPL_REMOTE,COMPL_REMOTE}},
-  {lookup,cmd_lookup,name|sid show SID for name or name for 
SID,{COMPL_NONE,COMPL_NONE}},
+  {lookup,cmd_lookup,sid|name show SID for name or name for 
SID,{COMPL_NONE,COMPL_NONE}},
   {lowercase,cmd_lowercase,toggle lowercasing of filenames for 
get,{COMPL_NONE,COMPL_NONE}},  
   {ls,cmd_dir,mask list the contents of the current 
directory,{COMPL_REMOTE,COMPL_NONE}},
   {mask,cmd_select,mask mask all filenames against 
this,{COMPL_REMOTE,COMPL_NONE}},



svn commit: samba r4305 - in branches/SAMBA_3_0/source/lib: .

2004-12-20 Thread jra
Author: jra
Date: 2004-12-21 04:34:14 + (Tue, 21 Dec 2004)
New Revision: 4305

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4305

Log:
Fix from Albert Chin ([EMAIL PROTECTED]) to fix the
earlier malloc changes.
Jeremy.

Modified:
   branches/SAMBA_3_0/source/lib/sysacls.c
   branches/SAMBA_3_0/source/lib/util_smbd.c


Changeset:
Modified: branches/SAMBA_3_0/source/lib/sysacls.c
===
--- branches/SAMBA_3_0/source/lib/sysacls.c 2004-12-21 04:34:07 UTC (rev 
4304)
+++ branches/SAMBA_3_0/source/lib/sysacls.c 2004-12-21 04:34:14 UTC (rev 
4305)
@@ -722,7 +722,7 @@
 * acl[] array, this actually allocates an ACL with room
 * for (count+1) entries
 */
-   if ((a = SMB_MALLOC(sizeof(*a) + count * sizeof(struct acl))) == NULL) {
+   if ((a = SMB_MALLOC(sizeof(struct SMB_ACL_T) + count * sizeof(struct 
acl))) == NULL) {
errno = ENOMEM;
return NULL;
}
@@ -1353,7 +1353,7 @@
 * acl[] array, this actually allocates an ACL with room
 * for (count+1) entries
 */
-   if ((a = SMB_MALLOC(sizeof(*a) + count * sizeof(struct acl))) == NULL) {
+   if ((a = SMB_MALLOC(sizeof(struct SMB_ACL_T) + count * sizeof(struct 
acl))) == NULL) {
errno = ENOMEM;
return NULL;
}
@@ -1982,7 +1982,7 @@
 {
SMB_ACL_T   a;
 
-   if ((a = SMB_MALLOC_P(SMB_ACL_T)) == NULL) {
+   if ((a = SMB_MALLOC_P(struct SMB_ACL_T)) == NULL) {
errno = ENOMEM;
return NULL;
}
@@ -1999,7 +1999,7 @@
 {
SMB_ACL_T   a;
 
-   if ((a = SMB_MALLOC_P(SMB_ACL_T)) == NULL) {
+   if ((a = SMB_MALLOC_P(struct SMB_ACL_T)) == NULL) {
errno = ENOMEM;
return NULL;
}
@@ -2056,7 +2056,7 @@
return NULL;
}
 
-   if ((a = SMB_MALLOC_P(struct acl)) == NULL) {
+   if ((a = SMB_MALLOC(sizeof(struct SMB_ACL_T) + sizeof(struct acl))) == 
NULL) {
errno = ENOMEM;
return NULL;
}

Modified: branches/SAMBA_3_0/source/lib/util_smbd.c
===
--- branches/SAMBA_3_0/source/lib/util_smbd.c   2004-12-21 04:34:07 UTC (rev 
4304)
+++ branches/SAMBA_3_0/source/lib/util_smbd.c   2004-12-21 04:34:14 UTC (rev 
4305)
@@ -54,7 +54,7 @@

gid_t *groups_tmp;

-   groups_tmp = SMB_REALLOC(temp_groups, gid_t, max_grp);
+   groups_tmp = SMB_REALLOC_ARRAY(temp_groups, gid_t, max_grp);

if (!groups_tmp) {
SAFE_FREE(temp_groups);



svn commit: samba r4306 - in branches/SAMBA_3_0/source: lib printing

2004-12-20 Thread jra
Author: jra
Date: 2004-12-21 07:08:11 + (Tue, 21 Dec 2004)
New Revision: 4306

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4306

Log:
Couple more MALLOC fixes from albert chin ([EMAIL PROTECTED]).
Jeremy.

Modified:
   branches/SAMBA_3_0/source/lib/util_smbd.c
   branches/SAMBA_3_0/source/printing/print_svid.c


Changeset:
Modified: branches/SAMBA_3_0/source/lib/util_smbd.c
===
--- branches/SAMBA_3_0/source/lib/util_smbd.c   2004-12-21 04:34:14 UTC (rev 
4305)
+++ branches/SAMBA_3_0/source/lib/util_smbd.c   2004-12-21 07:08:11 UTC (rev 
4306)
@@ -45,7 +45,7 @@
int i;
 
max_grp = groups_max();
-   temp_groups = SMB_MALLOC_P(gid_t, max_grp);
+   temp_groups = SMB_MALLOC_ARRAY(gid_t, max_grp);
if (! temp_groups) {
return False;
}

Modified: branches/SAMBA_3_0/source/printing/print_svid.c
===
--- branches/SAMBA_3_0/source/printing/print_svid.c 2004-12-21 04:34:14 UTC 
(rev 4305)
+++ branches/SAMBA_3_0/source/printing/print_svid.c 2004-12-21 07:08:11 UTC 
(rev 4306)
@@ -88,7 +88,7 @@
*tmp = '\0';

/* add it to the cache */
-   if ((ptmp = malloc(sizeof (*ptmp))) != NULL) {
+   if ((ptmp = SMB_MALLOC_P(printer_t)) != NULL) {
ZERO_STRUCTP(ptmp);
if((ptmp-name = SMB_STRDUP(name)) == NULL)
DEBUG(0,(populate_printers: malloc fail in 
strdup !\n));



svn commit: samba r4307 - in trunk/source: lib printing

2004-12-20 Thread jra
Author: jra
Date: 2004-12-21 07:08:16 + (Tue, 21 Dec 2004)
New Revision: 4307

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4307

Log:
Couple more MALLOC fixes from albert chin ([EMAIL PROTECTED]).
Jeremy.

Modified:
   trunk/source/lib/util_smbd.c
   trunk/source/printing/print_svid.c


Changeset:
Modified: trunk/source/lib/util_smbd.c
===
--- trunk/source/lib/util_smbd.c2004-12-21 07:08:11 UTC (rev 4306)
+++ trunk/source/lib/util_smbd.c2004-12-21 07:08:16 UTC (rev 4307)
@@ -45,7 +45,7 @@
int i;
 
max_grp = groups_max();
-   temp_groups = SMB_MALLOC_P(gid_t, max_grp);
+   temp_groups = SMB_MALLOC_ARRAY(gid_t, max_grp);
if (! temp_groups) {
return False;
}

Modified: trunk/source/printing/print_svid.c
===
--- trunk/source/printing/print_svid.c  2004-12-21 07:08:11 UTC (rev 4306)
+++ trunk/source/printing/print_svid.c  2004-12-21 07:08:16 UTC (rev 4307)
@@ -88,7 +88,7 @@
*tmp = '\0';

/* add it to the cache */
-   if ((ptmp = malloc(sizeof (*ptmp))) != NULL) {
+   if ((ptmp = SMB_MALLOC_P(printer_t)) != NULL) {
ZERO_STRUCTP(ptmp);
if((ptmp-name = SMB_STRDUP(name)) == NULL)
DEBUG(0,(populate_printers: malloc fail in 
strdup !\n));