[Samba] Re: Client login delays - especially after reboot (solved!)
I found it hard to believe that my config or client settings were causing the problem, since I never had any problem running samba 2. I searched google for :- 'wins_srv_is_dead' as my logs suggested that there may be a samba problem doing wins lookups. I found a couple of posts refering to a bug in versions around 3.0.12 so I decided to update my samba to the current release 3.0.21c The problem has now dissapeared! Thanks for your help Barry. Kilner Vacuumation Co. Ltd. http://www.kilner-vacuum-lifting.com Tel. +44 1246 416441Fax. +44 1246 290573 Scanned for viruses by F-Prot Antivirus - http://www.f-prot.com All information contained in this email is confidential and may be used by the intended recipient only. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] [Samba4]
Hi, I am going to test samba 4, but unfortunatly there is no documentation on how to use it, nor any new syntax is mentioned. Does anybody know, where to get this information? regards Torsten -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Error compiling samba 3.0.21c, AIX 52 ML7 gcc 3.3.2
Can anyone help with the following error I get whilst comiling samba, configured with following flags:- ./configure --prefix=/opt/samba-3.0.21c --with-ldap --with-ads --with-krb5 --with-pam --with-winbind heimal kerberos heimdal-0.7.2 openldap openldap-2.3.20 [WMSTRAIN:root]/appfs2/samba/samba-3.0.21c/source make make install Using FLAGS = -O -D_SAMBA_BUILD_ -I./popt -Iinclude -I/appfs2/samba/samba-3.0.21c/source/include -I/appfs2/samba/samba-3.0.21 c/sour ce/ubiqx -I/appfs2/samba/samba-3.0.21c/source/tdb -I. -DLDAP_DEPRECATED -I/appfs2/samba/samba-3.0.21c/source -D_SAMBA_BUILD_ LIBS = LDSHFLAGS = -Wl,-bexpall,-bM:SRE,-bnoentry,-berok LDFLAGS = PIE_CFLAGS = PIE_LDFLAGS = Compiling dynconfig.c Compiling smbd/vfs.c Compiling passdb/pdb_interface.c Compiling lib/iconv.c Compiling auth/auth.c Compiling smbd/build_options.c Compiling smbd/server.c Linking bin/smbd Linking bin/nmbd Linking bin/swat Compiling sam/idmap.c Linking bin/winbindd Linking bin/smbclient Linking bin/net Linking bin/smbspool Linking bin/testparm Linking bin/smbstatus Linking bin/smbget Linking bin/smbcontrol Linking bin/smbtree Linking bin/nmblookup Linking bin/pdbedit Linking bin/smbpasswd Linking bin/rpcclient Linking bin/smbcacls Linking bin/profiles Linking bin/ntlm_auth Linking bin/smbcquotas Linking bin/eventlogadm Linking bin/wbinfo Compiling nsswitch/pam_winbind.c with -O2 nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:76: warning: passing arg 3 of `pam_get_item' from incompatible pointer type nsswitch/pam_winbind.c:79: warning: passing arg 2 of pointer to function from incompatible pointer type nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:94: warning: assignment discards qualifiers from pointer target type nsswitch/pam_winbind.c: In function `_winbind_read_password': nsswitch/pam_winbind.c:334: warning: passing arg 3 of `pam_get_item' from incompatible pointer type nsswitch/pam_winbind.c:346: error: `PAM_AUTHTOK_RECOVER_ERR' undeclared (first use in this function) nsswitch/pam_winbind.c:346: error: (Each undeclared identifier is reported only once nsswitch/pam_winbind.c:346: error: for each function it appears in.) nsswitch/pam_winbind.c:367: warning: assignment discards qualifiers from pointer target type nsswitch/pam_winbind.c:375: warning: assignment discards qualifiers from pointer target type nsswitch/pam_winbind.c:381: warning: assignment discards qualifiers from pointer target type nsswitch/pam_winbind.c:439: warning: passing arg 3 of `pam_get_item' from incompatible pointer type nsswitch/pam_winbind.c: At top level: nsswitch/pam_winbind.c:454: error: syntax error before int nsswitch/pam_winbind.c: In function `pam_sm_authenticate': nsswitch/pam_winbind.c:467: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c: At top level: nsswitch/pam_winbind.c:535: error: syntax error before int nsswitch/pam_winbind.c:546: error: syntax error before int nsswitch/pam_winbind.c: In function `pam_sm_acct_mgmt': nsswitch/pam_winbind.c:558: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c:580: warning: passing arg 3 of `pam_get_data' from incompatible pointer type nsswitch/pam_winbind.c: At top level: nsswitch/pam_winbind.c:614: error: syntax error before int nsswitch/pam_winbind.c:624: error: syntax error before int nsswitch/pam_winbind.c:636: error: syntax error before int nsswitch/pam_winbind.c: In function `pam_sm_chauthtok': nsswitch/pam_winbind.c:656: warning: passing arg 2 of `pam_get_user' from incompatible pointer type nsswitch/pam_winbind.c:733: warning: passing arg 3 of `pam_get_item' from incompatible pointer type make: 1254-004 The error code from the last command is 1. Stop. You have mail in /usr/spool/mail/root [WMSTRAIN:root]/appfs2/samba/samba-3.0.21c/source gcc -v Reading specs from /usr/local/lib/gcc-lib/powerpc-ibm-aix5.2.0.0/3.3.2 /specs Configured with: ../gcc-3.3.2/configure : (reconfigured) ../gcc-3.3.2 /configure --disable-nls : (reconfigured) ../gcc-3.3.2/configu re --disable-nls Thread model: aix gcc version 3.3.2 Thanks Mark Find out how to protect your home from frost this winter at www.yorkshirewater.com YORKSHIRE WATER - WINNER OF THE UTILITY OF THE YEAR AWARD 2004 AND 2005 The information in this e-mail is confidential and may also be legally privileged. The contents are intended for recipient only and are subject to the legal notice available at http://www.keldagroup.com/email.htm Yorkshire Water Services Limited Registered Office Western House Halifax Road Bradford BD6 2SZ Registered in England and Wales No 2366682 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Error compiling samba 3.0.21c, AIX 52 ML7 gcc 3.3.2
Hi, On Tue, Mar 28, 2006 at 10:30:45AM +0100, [EMAIL PROTECTED] wrote: Can anyone help with the following error I get whilst comiling samba, can you please retry with the following patch? Guenther -- Günther DeschnerGPG-ID: 8EE11688 Novell / SUSE LINUX [EMAIL PROTECTED] Samba Team [EMAIL PROTECTED] Index: nsswitch/pam_winbind.h === --- nsswitch/pam_winbind.h (revision 14747) +++ nsswitch/pam_winbind.h (working copy) @@ -26,7 +26,7 @@ #define PAM_SM_ACCOUNT #define PAM_SM_PASSWORD -#if defined(SUNOS5) || defined(SUNOS4) || defined(HPUX) || defined(FREEBSD) +#if defined(SUNOS5) || defined(SUNOS4) || defined(HPUX) || defined(FREEBSD) || defined(AIX) /* Solaris always uses dynamic pam modules */ #define PAM_EXTERN extern pgp6J7gjgKtu2.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Error compiling samba 3.0.21c, AIX 52 ML7 gcc 3.3.2
Hi Guenther, Thanks for the code. Even I managed to understand that ;-0 It has got the make past the point it failed last time, should this be flagged as a bug? Regards Mark |-+ | | Guenther Deschner [EMAIL PROTECTED] | | | Sent by: | | | [EMAIL PROTECTED]| | | s.samba.org | | || | || | | 28/03/2006 11:01 | | || | | Message Size: 7.3Kb | |-+ --| | | | To: [EMAIL PROTECTED] | | cc: samba@lists.samba.org | | Subject: Re: [Samba] Error compiling samba 3.0.21c, AIX 52 ML7 gcc 3.3.2 | --| Hi, On Tue, Mar 28, 2006 at 10:30:45AM +0100, [EMAIL PROTECTED] wrote: Can anyone help with the following error I get whilst comiling samba, can you please retry with the following patch? Guenther -- Günther DeschnerGPG-ID: 8EE11688 Novell / SUSE LINUX [EMAIL PROTECTED] Samba Team [EMAIL PROTECTED] (See attached file: diff) (See attached file: C.DTF) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba Find out how to protect your home from frost this winter at www.yorkshirewater.com YORKSHIRE WATER - WINNER OF THE UTILITY OF THE YEAR AWARD 2004 AND 2005 The information in this e-mail is confidential and may also be legally privileged. The contents are intended for recipient only and are subject to the legal notice available at http://www.keldagroup.com/email.htm Yorkshire Water Services Limited Registered Office Western House Halifax Road Bradford BD6 2SZ Registered in England and Wales No 2366682 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] XP does not login Samba PDC
Hi all, I'm usigin Samba version 3.0 with OpenLDAP 2.2.23 server:~# smbd -V Version 3.0.14a-Debian server:~# slapd -V @(#) $OpenLDAP: slapd 2.2.23 I was using the Windows XP client login on Samba PDC but after some days, unexpectedly it didn't login anymore The client: client$ id added on LDAP and the configurations above are sets on Windows XP: Domain member: Digitally encrypt or sign secure channel (always) - disabled Domain member: Disable machine account password changes - disabled Domain member: Require strong (Windows 2000 or later) session key - disabled HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netlogon\parameters RequireSignOrSeal=dword: XP was succesfully put on domain NB Above are the log files log.10.0.0.2 and log.client of samba server: log.10.0.0.2 [2006/03/20 11:36:22, 2] lib/access.c:check_access(324) Allowed connection from (10.0.0.2) [2006/03/20 11:36:22, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/03/20 11:36:22, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. log.client (client = hostname of windows xp) [2006/03/20 11:35:26, 2] lib/access.c:check_access(324) Allowed connection from (10.0.0.2) [2006/03/20 11:35:26, 2] lib/smbldap.c:smbldap_open_connection(692) smbldap_open_connection: connection opened [2006/03/20 11:35:26, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: client$ [2006/03/20 11:35:26, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: client$ [2006/03/20 11:35:37, 2] smbd/server.c:exit_server(609) Closing connections [2006/03/20 11:36:22, 2] lib/access.c:check_access(324) Allowed connection from (10.0.0.2) [2006/03/20 11:36:22, 2] lib/smbldap.c:smbldap_open_connection(692) smbldap_open_connection: connection opened [2006/03/20 11:36:22, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: client$ [2006/03/20 11:36:22, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: client$ [2006/03/20 11:36:33, 2] smbd/server.c:exit_server(609) Closing connections Someone has any idea about why clientes doest not login ? Regards. Regards. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Access shares over IPSEC
!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.0 Transitional//EN HTMLHEAD META http-equiv=Content-Type content=text/html; charset=us-ascii META content=MSHTML 6.00.2800.1528 name=GENERATOR/HEAD BODY DIVSPAN class=843421412-28032006FONT face=Arial size=2Hi, togehther,/FONT/SPAN/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2/FONT/SPANnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2my problem is:/FONT/SPAN/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2/FONT/SPANnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2if we connect our company network over a IPSec Client, we can connect at windows shares, but not the/FONT/SPAN/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2shares on our samba (2.8) server. Error: network path not found./FONT/SPAN/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2All other services on the linux box are accessible, (ssh, telnet, ping, etc...) so I think this is not a routing/FONT/SPAN/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2problem./FONT/SPAN/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2/FONT/SPANnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2I hope, anyone has an idea./FONT/SPAN/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2/FONT/SPANnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2Michael./FONT/SPAN/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2/FONT/SPANnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2/FONT/SPANnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2The global options:/FONT/SPAN/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2/FONT/SPANnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2[global]BRnbsp;nbsp; workgroup =nbsp;xxBRnbsp;nbsp; server string =nbsp;x Main Server/FONT/SPAN/DIV DIVnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2nbsp;nbsp; interfaces = eth0 loBRnbsp;nbsp; debug level = 4BRnbsp;nbsp; load printers = noBRnbsp;nbsp; printing = cups/FONT/SPAN/DIV DIVnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2nbsp;nbsp; max log size = 5000BRnbsp;nbsp; security = userBRnbsp;nbsp; encrypt passwords = yesBRnbsp;nbsp; unix password sync = yesBRnbsp;nbsp; passwd program = /usr/bin/passwd %uBRnbsp;nbsp; add user script = useradd -d /dev/null -s /bin/false %u/FONT/SPAN/DIV DIVnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2nbsp;nbsp; os level = 128BRnbsp;nbsp; local master = yesBRnbsp;nbsp; domain master = yesBRnbsp;nbsp; domain logons = yesBRnbsp;nbsp; preferred master = yesBRnbsp;nbsp; wins support = yesBRnbsp;nbsp; name resolve order = hosts wins lmhosts bcast/FONT/SPAN/DIV DIVnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2nbsp;nbsp; time server = yesBRnbsp;nbsp; time offset = 0/FONT/SPAN/DIV DIVnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2nbsp;nbsp; logon drive = h:BRnbsp;nbsp; logon script = %U.batBRnbsp;nbsp; logon path = A href=file://\\%L\profile\%U\\%L\profile\%U/A/FONT/SPAN/DIV DIVnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2nbsp;nbsp; logon home = A href=file://\\%L\%U\\%L\%U/A/FONT/SPAN/DIV DIVnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2nbsp;nbsp; username map=/etc/samba/user.map/FONT/SPAN/DIV DIVnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2nbsp;nbsp; client code page = 850BRnbsp;nbsp; character set = ISO8859-1BRnbsp;nbsp; mangle case = yesBRnbsp;nbsp; case sensitive = noBRnbsp;nbsp; default case = lowerBRnbsp;nbsp; preserve case = yesBRnbsp;nbsp; short preserve case = yes/FONT/SPAN/DIV DIVnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2nbsp;nbsp; dos filetimes = yesBRnbsp;nbsp; dos filetime resolution = yes/FONT/SPAN/DIV DIVnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2nbsp;nbsp; map hidden = yesBRnbsp;nbsp; map system = yes/FONT/SPAN/DIV DIVnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2;TUNING/FONT/SPAN/DIV DIVnbsp;/DIV DIVSPAN class=843421412-28032006FONT face=Arial size=2nbsp;nbsp; kernel oplocks = noBRnbsp;nbsp; wide links = noBRnbsp;nbsp; follow symlinks = noBRnbsp;nbsp; deadtime = 15BRnbsp;nbsp; keep alive = 120BRnbsp;nbsp; getwd cache = yesBRnbsp;nbsp; socket options = TCP_NODELAYBR/FONT/SPAN/DIV/BODY/HTML -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Access shares over IPSEC
Sorry, I have send this message in html. Maybe corrupted, now in text-format. my problem is: if we connect our company network over a IPSec Client, we can connect at windows shares, but not the shares on our samba (2.8) server. Error: network path not found. All other services on the linux box are accessible, (ssh, telnet, ping, etc...) so I think this is not a routing problem. I hope, anyone has an idea. Michael. The global options: [global] workgroup = xx server string = x Main Server interfaces = eth0 lo debug level = 4 load printers = no printing = cups max log size = 5000 security = user encrypt passwords = yes unix password sync = yes passwd program = /usr/bin/passwd %u add user script = useradd -d /dev/null -s /bin/false %u os level = 128 local master = yes domain master = yes domain logons = yes preferred master = yes wins support = yes name resolve order = hosts wins lmhosts bcast time server = yes time offset = 0 logon drive = h: logon script = %U.bat logon path = \\%L\profile\%U logon home = \\%L\%U username map=/etc/samba/user.map client code page = 850 character set = ISO8859-1 mangle case = yes case sensitive = no default case = lower preserve case = yes short preserve case = yes dos filetimes = yes dos filetime resolution = yes map hidden = yes map system = yes ;TUNING kernel oplocks = no wide links = no follow symlinks = no deadtime = 15 keep alive = 120 getwd cache = yes socket options = TCP_NODELAY -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with samba3 and groups
Hi, we have just moved our file services from an old hpux system to a new linux system. I used the old config as a template for the new smb.conf. Most things are working, but not everything. The main problem is in the moment, that samba seem's to use the primary group only for accessing file and folders. To explain what I mean: we have a share called ABC, valid group AG_X within this folder there is a subfolder DEF, owned by AG_Z and the permissions 770 (open only for group members). This is working perfectly under linux itself, but samba only pop up a message access denied. [BSY_2] comment = Datenbereich der Abteilung Heimann - AG_Heimann2 path = /Net/Groups/BSY/BSY_2 valid users = @AG_Heimann,@AG_DV force group = AG_Heimann create mask = 01664 force directory mode = 01774 read only = No The same setting worked without any problems under hpux,but with samba 2.x. Any hint is welcome !!! -- Thanks, Peer _ Max-Planck-Institut fuer Biogeochemie Dr. Peer-Joachim Koch Hans-Knöll Str.10Telefon: ++49 3641 57-6705 D-07745 Jena Telefax: ++49 3641 57-7705 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] XP does not login Samba PDC
Hi, Reboot your server and you can login. please try it. Louis -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Pedro Drimel Neto Verzonden: dinsdag 28 maart 2006 13:57 Aan: samba@lists.samba.org Onderwerp: [Samba] XP does not login Samba PDC Hi all, I'm usigin Samba version 3.0 with OpenLDAP 2.2.23 server:~# smbd -V Version 3.0.14a-Debian server:~# slapd -V @(#) $OpenLDAP: slapd 2.2.23 I was using the Windows XP client login on Samba PDC but after some days, unexpectedly it didn't login anymore The client: client$ id added on LDAP and the configurations above are sets on Windows XP: Domain member: Digitally encrypt or sign secure channel (always) - disabled Domain member: Disable machine account password changes - disabled Domain member: Require strong (Windows 2000 or later) session key - disabled HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netlogon\p arameters RequireSignOrSeal=dword: XP was succesfully put on domain NB Above are the log files log.10.0.0.2 and log.client of samba server: log.10.0.0.2 [2006/03/20 11:36:22, 2] lib/access.c:check_access(324) Allowed connection from (10.0.0.2) [2006/03/20 11:36:22, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/03/20 11:36:22, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. log.client (client = hostname of windows xp) [2006/03/20 11:35:26, 2] lib/access.c:check_access(324) Allowed connection from (10.0.0.2) [2006/03/20 11:35:26, 2] lib/smbldap.c:smbldap_open_connection(692) smbldap_open_connection: connection opened [2006/03/20 11:35:26, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: client$ [2006/03/20 11:35:26, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: client$ [2006/03/20 11:35:37, 2] smbd/server.c:exit_server(609) Closing connections [2006/03/20 11:36:22, 2] lib/access.c:check_access(324) Allowed connection from (10.0.0.2) [2006/03/20 11:36:22, 2] lib/smbldap.c:smbldap_open_connection(692) smbldap_open_connection: connection opened [2006/03/20 11:36:22, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: client$ [2006/03/20 11:36:22, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499) init_sam_from_ldap: Entry found for user: client$ [2006/03/20 11:36:33, 2] smbd/server.c:exit_server(609) Closing connections Someone has any idea about why clientes doest not login ? Regards. Regards. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Join to ADS Type or Value Exists
Hello, I am new to samba and I am trying to set it up to be a member server of my ADS Domain. I keep getting the same error whenever I do this. At the point where I have logged in and type net ads join myOUname I get the error: libads/ldap.c:ads_join_realm(1640) ads_add_machine_acct (my_server_name): Type or value existsads_join_realm: Type or value exists. I am running Fedora Core 3 with the latest version of samba. It appears to say that my server has already been joined but I cannot find it anywhere in AD. I have synched time with my DC, and I know that I can talk to AD because I can authenticate and when I do a net ads info I get all the correct information regarding my ADS. I can also query AD from my Samba box and get a list of users and groups. I have tried googling the problem and found several people that experienced this same problem but have yet to find a solution. Any help is greatly appreciated. Thank you, Adam Katulak -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba user session
I want that each user can only open one session on my samba pdc, any idea about that ??? thinks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Little help on PDC and BDC needed
Hi guys, I need some tricks to set up a PDC and a BDC together. I successfully installed PDCs, but now I need redundancy. Thanx in advance Giovanni -- Nessun virus nel messaggio in uscita. No virus found in this outgoing message. Controllato da AVG Antivirus. Versione: 7.1.384 / Database dei virus: 268.3.2/294 - Data di rilascio: 27/03/06 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE : RE : [Samba] CHANGING PRIMARY GROUP
Hi to all, I had forgotten to use the 'Force Group' option in the share definition. With this option correctly defined, all is working properly. Thanks. Patrick -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Patrick AUDON Envoyé : jeudi 23 mars 2006 15:05 À : 'Michael Billerbeck' Cc : samba@lists.samba.org Objet : RE : [Samba] CHANGING PRIMARY GROUP Hi Michael, Apparently, the pdbedit tool is only available for local users. My problem is for users from the trusted domain. The primary group for these users is defined on the PDC of the NT4 domain, and apparently, I couldn't change it on the winbind database. The way I have found is to change the mode to 777 on the shared directory to allow trusted domain users to access it. Another way is to use usermap, but the administration isn't so easy because I need to create all the users of the trusted domain in the usermap file. Best Regards. Patrick -Message d'origine- De : Michael Billerbeck [mailto:[EMAIL PROTECTED] Envoyé : jeudi 23 mars 2006 12:15 À : Patrick AUDON Cc : samba@lists.samba.org Objet : re: [Samba] CHANGING PRIMARY GROUP Hi Patrick, [EMAIL PROTECTED] schrieb am 23.03.2006 11:30:10: Hi to all, I have a samba acting as a PDC with 'passdb backend=smbpasswd'. My version of samba is 3.0.14a on linux Debian 2.6.8. First of all: if I read correctly it's better to use at least the password backend tdbsam (trivial database sam) in this context. That's what I have read in the How-To or by-Example. I have defined an interdomain trusted connection with a NT4 domain. I can see the trusted accounts and groups, and add them to local group with the 'net rpc group.' command. My problem is when I want to allow one user from this trusted domain to access to a share. The group seen by samba and sent to unix is the primary group which is the domain account group. I want to change this primary group, but I haven't seen tools for that. Could you help me ? You can change the primary group RID or SID by using pdbedit: pdbedit -r username -G SID or pdbedit -r username -G RID If the parameter after the G-option (-G) doesn't start with 'S-' pdbedit assumes you passed an RID because SIDs start with S-1-5... example: pdbedit -r michael -G 513 513 ist the well-known RID for users windows environments. cheers, Michael -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Little help on PDC and BDC needed
Nanni X wrote: Hi guys, I need some tricks to set up a PDC and a BDC together. I successfully installed PDCs, but now I need redundancy. And your problem is...? -- Tomasz Chmielewski Software deployment with Samba http://wpkg.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Little help on PDC and BDC needed
just copy your smb.conf to the BDC but change these lines to be no preferred master = no domain master = no local master = no Nanni X wrote: Hi guys, I need some tricks to set up a PDC and a BDC together. I successfully installed PDCs, but now I need redundancy. Thanx in advance Giovanni -- Daniel Wilson Systems Manager Student and Learning Support University of Sunderland Tel: 0191 515 2695 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Little help on PDC and BDC needed
- Original Message - From: Tomasz Chmielewski [EMAIL PROTECTED] To: Nanni X [EMAIL PROTECTED] Cc: samba@lists.samba.org Sent: Tuesday, March 28, 2006 4:07 PM Subject: Re: [Samba] Little help on PDC and BDC needed Nanni X wrote: Hi guys, I need some tricks to set up a PDC and a BDC together. I successfully installed PDCs, but now I need redundancy. And your problem is...? -- Tomasz Chmielewski Software deployment with Samba http://wpkg.org -- Nessun virus nel messaggio in arrivo. No virus found in this incoming message. Controllato da AVG Antivirus. Versione: 7.1.384 / Database dei virus: 268.3.2/294 - Data di rilascio: 27/03/06 You are right, I'm sorry. I need some tricks to configure my BDC's smb.conf file. And what about using LDAP? Have I to use LDAP o I can do without? Nanni -- Nessun virus nel messaggio in uscita. No virus found in this outgoing message. Controllato da AVG Antivirus. Versione: 7.1.384 / Database dei virus: 268.3.2/294 - Data di rilascio: 27/03/06 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Little help on PDC and BDC needed
On Tue, 28 Mar 2006, Daniel Wilson wrote: just copy your smb.conf to the BDC but change these lines to be no preferred master = no domain master = no local master = no That's not going to be enough. Samba 3 doesn't support the Windows protocols for synchronization among DCs, so the BDCs won't have any idea what the valid accounts are, etc. See: http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/FastStart.html The PDC needs to use an LDAP back end, and the BDCs can consult that same back end or have their own backup LDAP servers to make it easier to turn one of them into a real PDC. -- Thomas Boutell Boutell.Com, Inc. http://www.boutell.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Little help on PDC and BDC needed
ah sorry i forgot to mention we use LDAP backend! Thomas Boutell wrote: On Tue, 28 Mar 2006, Daniel Wilson wrote: just copy your smb.conf to the BDC but change these lines to be no preferred master = no domain master = no local master = no That's not going to be enough. Samba 3 doesn't support the Windows protocols for synchronization among DCs, so the BDCs won't have any idea what the valid accounts are, etc. See: http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/FastStart.html The PDC needs to use an LDAP back end, and the BDCs can consult that same back end or have their own backup LDAP servers to make it easier to turn one of them into a real PDC. -- Thomas Boutell Boutell.Com, Inc. http://www.boutell.com/ -- Daniel Wilson Systems Manager Student and Learning Support University of Sunderland Tel: 0191 515 2695 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Little help on PDC and BDC needed
It seems I've to use LDAP. This is a bit harder: I never installed/configured it. Anyhow, now I have a starting point. PS. trivial question : Is a samba BDC really useful to improve a network reliability? As you can image, I'm a newbie :-) Nanni - Original Message - From: Daniel Wilson [EMAIL PROTECTED] To: Thomas Boutell [EMAIL PROTECTED] Cc: Nanni X [EMAIL PROTECTED]; samba@lists.samba.org Sent: Tuesday, March 28, 2006 4:32 PM Subject: Re: [Samba] Little help on PDC and BDC needed ah sorry i forgot to mention we use LDAP backend! Thomas Boutell wrote: On Tue, 28 Mar 2006, Daniel Wilson wrote: just copy your smb.conf to the BDC but change these lines to be no preferred master = no domain master = no local master = no That's not going to be enough. Samba 3 doesn't support the Windows protocols for synchronization among DCs, so the BDCs won't have any idea what the valid accounts are, etc. See: http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/FastStart.html The PDC needs to use an LDAP back end, and the BDCs can consult that same back end or have their own backup LDAP servers to make it easier to turn one of them into a real PDC. -- Thomas Boutell Boutell.Com, Inc. http://www.boutell.com/ -- Daniel Wilson Systems Manager Student and Learning Support University of Sunderland Tel: 0191 515 2695 -- Nessun virus nel messaggio in arrivo. No virus found in this incoming message. Controllato da AVG Antivirus. Versione: 7.1.384 / Database dei virus: 268.3.2/294 - Data di rilascio: 27/03/06 -- Nessun virus nel messaggio in uscita. No virus found in this outgoing message. Controllato da AVG Antivirus. Versione: 7.1.384 / Database dei virus: 268.3.2/294 - Data di rilascio: 27/03/06 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Smbd hanging
I'm having the same problem... but with a 520 print queues samba server and 20.000 AD users. I'm getting desperate! I did a lot of tuning changes. but nothing helps! Bruno 2006/3/27, Matt Lung [EMAIL PROTECTED]: mallapadi niranjan wrote: Hi matt Did you get any success. No luck yet. I've tried to get help with this before but all I've ever gotten are replies from other people having the same problem with the SMBD's growing until the service is unreachable. I've tried to set a few parameters different like 'machine password timeout' and turned kernel oplocks off, but none of which helped. It always seems like it does at first because it doesn't happen for a while, but then eventually it does reoccur. It doesn't really happen in any sort of set period. It could crash one day, and then not crash for 3 months. On the other hand I've seen it crash one day and then crash right away the next day. I wish I could explain it, but I'm really at a loss and thats why I'm on here asking for help. I have other domain member servers with exactly the same samba version and config parameters that never exhibit this behavior. one more query , do you have logon scripts in place. ? Yes we do and they work fine (not on the server with our problems however). I didn't see a netlogon share or parameters in your smb.conf file to specify your logon scripts. You may try adding that and see if that helps. logon script = %U.bat [netlogon] comment = Network Logon Service path = /home/netlogon invalid users = bin adm daemon lp sync shutdown halt mail news uucp operator games gopher ftp gdm postgres vacation named rebound guest ok = Yes browseable = No at my server. i have place logon scripts but are not working correctly some time logon scripts run when user logons. some times it doesn't run, when runs gives semaphore error below is my configuration, can you help me out. I have a samba 3.0.21c with ldap backend , i have about 100 users connecting to my domain. i have a linux system which acts as a file server (prjsrv01) where i have declared 2 shares. projects and datalib. The users get drives mapped with the help of logon script. so i map projects share as P: drive net use p: //prjsrv01/projects. but whent the logon script runs the command. it says semaphore error. At the prjsrv01. i increased the log level and the following is the output of the file . when user locuz logged in. [2006/03/25 12:43:17, 4] lib/username.c:map_username(143) Scanning username map /usr/local/samba3c2/lib/smbusers [2006/03/25 12:43:17, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [MSDPL.COMhttp://msdpl.com/[EMAIL PROTECTED] with the new password interface [2006/03/25 12:43:17, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [MSDPL.COM http://msdpl.com/ [EMAIL PROTECTED] [2006/03/25 12:43:17, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/03/25 12:43:17, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/03/25 12:43:17, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/03/25 12:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/03/25 12:43:27, 2] auth/auth.c:check_ntlm_password(317) check_ntlm_password: Authentication for user [locuz] - [locuz] FAILED with error NT_STATUS_IO_TIMEOUT [2006/03/25 12:43:31, 3] smbd/process.c:process_smb(1194) Transaction 9 of length 43 [2006/03/25 12:43:31, 3] smbd/process.c:switch_message(993) switch message SMBulogoffX (pid 3596) conn 0x0 [2006/03/25 12:43:31, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/03/25 12:43:31, 3] smbd/reply.c:reply_ulogoffX(1595) ulogoff, vuser id 102 does not map to user. [2006/03/25 12:43:31, 3] smbd/reply.c:reply_ulogoffX(1606) ulogoffX vuid=102 [2006/03/25 12:43:31, 3] smbd/process.c:timeout_processing(1447) timeout_processing: End of file from client (client has disconnected). [2006/03/25 12:43:31, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/03/25 12:43:31, 2] smbd/server.c:exit_server(614) Closing connections [2006/03/25 12:43:31, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2006/03/25 12:43:31, 3] smbd/server.c:exit_server(655) Server exit (normal exit) [2006/03/25 12:43:31, 4] lib/username.c:map_username(143) Scanning username map /usr/local/samba3c2/lib/smbusers [2006/03/25 12:43:31, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user
RE: [Samba] Access shares over IPSEC
if we connect our company network over a IPSec Client, we can connect at windows shares, but not the shares on our samba (2.8) server. Error: network path not found. All other services on the linux box are accessible, (ssh, telnet, ping, etc...) so I think this is not a routing problem. have your remote guys configure WINS in their advanced TCP/IP config on their windows clients to point to your WINS server (on that same samba box probably) -C -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Domain Browsing broken after upgrade from 3.0.10 - 3.0.21
Or maybe it was the upgrade from FC2 - FC4.. I recently was running a FC2 Samba PDC and OpenLDAP, using Samba-3.0.10. After I upgraded the server from FC2 to FC4 samba was broken and wouldn't load because it was complaining about a library file not existing. (libldap.so.2) I believe.. Sure enough it wasn't there. So I had to recompile Samba 3.0.10 again. Well the compile failed for 3.0.10 with the following error --snip--- ./configure --prefix=/opt/samba-3.0.10 --with-ldapsam --snip--- # make Using FLAGS = -O -Iinclude -I/usr/src/samba-3.0.10/source/include -I/usr/src/samba-3.0.10/source/ubiqx -I/usr/src/samba-3.0.10/source/smbwrapper -I. -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE -I/usr/src/samba-3.0.10/source LIBS = -lcrypt -lresolv -lnsl -ldl LDSHFLAGS = -shared -Wl,-Bsymbolic LDFLAGS = Compiling dynconfig.c In file included from include/smb.h:1679, from include/includes.h:819, from dynconfig.c:21: include/popt_common.h:25: error: array type has incomplete element type include/popt_common.h:26: error: array type has incomplete element type include/popt_common.h:27: error: array type has incomplete element type include/popt_common.h:28: error: array type has incomplete element type --snip--- So i downloaded the latest version of samba, 3.0.21c and it compiled just fine but when i started the SMB server, I wasn't able to browse the servers within the domain. They just wouldn't show up. What I do in my WinXP pro clients is click: Start-My Network Places-Entire Network-Microsoft Windows Network-BUNSIZE I see the BUNSIZE domain, but as soon as I click BUNSIZE I get a blank screen. In version 3.0.10 I used to see my two servers, OSCAR HEFE-WEZIEN However, when I put in the Exploder address bar, \\OSCAR \\HEFE-WEIZEN, I am able to browse those servers. They just aren't showing up in the Domain view. Is there some kind of special upgrade procedure that I was supposed to follow to maybe update the secret.tdb or is it just as easy as creating a new one? Also, when I try to browse the domain ON the FC4 server, I am unable to see it and the servers. So this just doesn't seem to be a Winblows issue. All firewalls are off in the server. I am wondering if FC4 has some hidden security features that I am not aware of.. --smb.conf--- [global] ; unix charset = LOCALE netbios name = OSCAR workgroup = BUNSIZE server string = Primary Domain Controller ; interfaces = eth0, lo remote announce = 135.33.39.255 use sendfile = no ; bind interfaces only = Yes passdb backend = ldapsam:ldap://127.0.0.1 ; username map = /opt/samba/private/smbusers log level = 6 syslog = 0 log file = /var/log/samba/%m max log size = 50 smb ports = 139 445 ; name resolve order = wins bcast hosts time server = Yes add user script = /opt/samba/sbin/smbldap-useradd -a -m %u delete user script = /opt/samba/sbin/smbldap-userdel %u add group script = /opt/samba/sbin/smbldap-groupadd -p %g delete group script = /opt/samba/sbin/smbldap-groupdel %g add user to group script = /opt/samba/sbin/smbldap-groupmod -m %u %g delete user from group script = /opt/samba/sbin/smbldap-groupmod -x %u %g set primary group script = /opt/samba/sbin/smbldap-usermod -g %g %u add machine script = /opt/samba/sbin/smbldap-useradd -w %u logon script = scripts\logon.bat logon path = \\%L\profiles\%U logon drive = X: domain logons = yes os level = 255 preferred master = yes domain master = yes security = user local master = yes wins support = yes browseable = yes ldap suffix = dc=xx,dc=xxx,dc=com ldap machine suffix = ou=Computers ldap user suffix = ou=Pee ldap group suffix = ou=Groups ldap idmap suffix = ou=Users ldap admin dn = cn=Manager,dc=xx,dc=xx,dc=com idmap backend = ldap:ldap://127.0.0.1 idmap uid = 1-2 idmap gid = 1-2 # printer configuration load printers = Yes printing = cups printcap name = cups guest account = nobody --snip--- Thanks in advance for any help that you can provide. -G -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Smbd hanging
On Tue, Mar 28, 2006 at 12:11:14PM -0300, Bruno Gomes Pessanha wrote: I'm having the same problem... but with a 520 print queues samba server and 20.000 AD users. I'm getting desperate! I did a lot of tuning changes. but nothing helps! How about reporting a bug with logs and straces and other info to enable people to track it down :-). That might help :-). Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Access shares over IPSEC
You could be SOL then. -Original Message- From: Michael Voss [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 28, 2006 10:30 AM To: Barry, Christopher Subject: AW: [Samba] Access shares over IPSEC Hm, but i don't no where i can this make. We connect over an IPSec-Client and here is it impossible to make WINS-entry. I become a local Ip (i.e. 192.168.10.50) and that's all. I can't see my details of the IPSec connection. I have a internet connection via UMTS and with ipconfig /all I see only the details of the UMTS-internet connection. Regards, Michael. -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Barry, Christopher Gesendet: 28. Mrz 2006 17:14 An: samba@lists.samba.org Betreff: RE: [Samba] Access shares over IPSEC if we connect our company network over a IPSec Client, we can connect at windows shares, but not the shares on our samba (2.8) server. Error: network path not found. All other services on the linux box are accessible, (ssh, telnet, ping, etc...) so I think this is not a routing problem. have your remote guys configure WINS in their advanced TCP/IP config on their windows clients to point to your WINS server (on that same samba box probably) -C -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] hide folders which I can't access
Is it possible that the folders that I don't have permission to enter wouldn't appear at all? Or at least make them hidden, although in this case they would show if the user has set that hidden folders are visible. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] No account in domain error when upgrading to Samba-3 moving to a new server
Greetings all, I'm attempting to move a Samba-2 PDC to a new server and upgrade it to Samba-3. I'm seeing the error message get_md4pw: Workstation WS1$: no account in domain. I have read the instructions at: http://www.samba.org/samba/docs/man/Samba-Guide/upgrades.html The new server and a test workstation (WS1) are on a separate network to avoid interference with the live network. I have: 1) Made sure the new server has the same network settings as the current one: IP address, hostname, etc. 2) Copied relevant accounts/groups from /etc/passwd, /etc/shadow /etc/group from the old server to the new server. 3) Copied configuration files in /etc/samba from the current server to the new server, including smb.conf, smbpasswd and secrets.tdb. 4) Copied all *.tdb files from /var/cache/samba to the new server. According to the instructions, it seems like Samba should automatically read upgrade the *.tdb files, preserving my existing domain, but this doesn't appear to be the case. Does the workstation case make any difference? Existing workstations are in lowercase, the error is all uppercase? I didn't add a script for add machine script to smb.conf. I've added the machine accounts in the past and since there should already be one, I'm guessing I don't need this configuration. I have a feeling I've missed something simple, but I don't know what it is. Any help is most appreciated. -Eric -- Eric Sisler [EMAIL PROTECTED] Library Applications Specialist Westminster Public Library Westminster, CO USA Linux - Don't fear the Penguin. Want to know what we use Linux for? Visit http://wallace.westminster.lib.co.us/linux -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Can samba ensure that a user did not enter the previous password when password expired?
Hello, I have working PDC with ldap samba 3.0.21c-1 I try to force users change their password by setting password expiration. It works - the samba asks a user to change his password. But user can set value of the password to the previos one and system accepts it - at the end no change was made :-) Can samba check whether user really changed value of his password? I tried to change password format from SSHA to SHA (it can be checked) but no result. Thanks for advice, Jan Stavel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba does not lock files
On Tue, Mar 28, 2006 at 03:25:26AM +, Douglas D. Germann, Sr. wrote: Adam-- You are a wonder worker! I entered your command and the response I got was-- libgnomevfs-2.so.0 = /usr/lib/libgnomevfs-2.so.0 (0xb7b53000) which I suspect is pretty much what you expected. Right? In any case, after reading HOWTOs and man files and README files I edited /etc/fstab and changed the instances of smbfs to cifs. It mounted right away, and the files now lock linux to linux and linux to winXP Pro. (At least for OOo. KWord does not respect the locks, nor does gedit. I suspect that will not be a problem, but I wonder why not?) Thank you, thank you, thank you! Adam you have rescued me from having spent 2 1/2 weeks of work till midnight trying to get some file locking going! You are a wonder, Adam! I downloaded and looked through the OO code on Linux to understand what it does to lock a file. It tries to take a fcntl write lock over the entire file, and uses this to determine if the file is being shared. This means it should interoperate correctly (at least on Linux with kernel oplocks) with OO or Microsoft Office running on Windows clients (ie. they'll see each others locks). gedit or kword probably don't look at the locks at all, and as they're advisory not mandatory then they will not see any conflicts. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can samba ensure that a user did not enter the previous password when password expired?
you need to setup some password policies.. I was just playing with this a couple days ago.. seems to work very nicely :) It stores all the information in the LDAP Entry for the Domain (sambaDomainName=yourdomain) anyway.. here's the link I learnt from: http://searchopensource.techtarget.com/tip/1,289483,sid39_gci1152805,00.html?bucket=ETA specifically, you need to set the password history setting. I don't think you can just modify the entries in ldap.. I think you have to use pdbedit, as stated on the document.. good luck :) Jan Stavel wrote: Hello, I have working PDC with ldap samba 3.0.21c-1 I try to force users change their password by setting password expiration. It works - the samba asks a user to change his password. But user can set value of the password to the previos one and system accepts it - at the end no change was made :-) Can samba check whether user really changed value of his password? I tried to change password format from SSHA to SHA (it can be checked) but no result. Thanks for advice, Jan Stavel -- Matt Ingram Intermediate Unix Administrator, IS Canadian Bank Note Company, Limited \m/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Access shares over IPSEC
Barry, Christopher wrote: You could be SOL then. -Original Message- From: Michael Voss [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 28, 2006 10:30 AM To: Barry, Christopher Subject: AW: [Samba] Access shares over IPSEC Hm, but i don't no where i can this make. We connect over an IPSec-Client and here is it impossible to make WINS-entry. I become a local Ip (i.e. 192.168.10.50) and that's all. I can't see my details of the IPSec connection. I have a internet connection via UMTS and with ipconfig /all I see only the details of the UMTS-internet connection. Well it's not the preferred method, but lmhosts can do the job. windir/system32/drivers/etc/lmhosts Add any machine names that are needed. Regards, Doug -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Linux-to-Linux Samba Migration
I'm working on migrating from Mandrake 10.0 to Ubuntu 5.10. The last, and probably most important, service to be moved is Samba... The setup is fairly simple, here is is: - Mandrake Linux 10.0 - Samba 3.0.10 Here's the global Samba configuration of my server: [global] workgroup = workgroup name server string = string passdb backend = tdbsam:/etc/samba/passdb.tdb passwd program = /usr/bin/passwd %u unix password sync = Yes time server = Yes load printers = No add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g add user to group script = /usr/sbin/usermod -G %g %u add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u logon script = scripts\%U.bat logon drive = H: logon home = \\%N\%U\profile.w98 domain logons = Yes wins support = Yes ldap ssl = no idmap uid = 15000-2 idmap gid = 15000-2 admin users = root, tom create mask = 0770 directory mask = 0770 veto oplock files = /*.xls/ Transferring the files and the associated shares is the easy part. What I'm concerned about is getting the domain and user/group information to transfer without having to reconfigure all of the workstations or all of the user/group accounts on the new server. I looked to see if I could find such a guide for doing this but wasn't able to--not sure if maybe I'm searching for the wrong terms or whatnot. Any suggestions offered and/or pointers to documentation would be greatly appreciated. Thanks in advance for your help. ~ Tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] File versioning with Samba (on a Linux filesystem)?
I'm pretty sure this can be done with a VFS module. I couldn't say exactly which one though. Cheers, Henrik 28 mar 2006 kl. 19:38 skrev Terry Jones: Apologies if this question is answered somewhere obvious. I just spent a couple of hours surfing around trying to find an answer. I'd like to provide windows clients with access to files via samba and have samba (or other) do file versioning. In the case that a user happens to delete a file or we want to return to an earlier version, that should be possible. Is there a standard solution for this? I can think of various ways it might be done, but there doesn't seem to be much on the net about doing it in practice. Support at the (in this case Linux) filesystem level would be good. If Samba had an option to do it automatically, that would be good. I saw something about making a .recycle bin for file removal, but I didn't get the impression this was going to provide file versioning. Less good would be having Samba hooks allowing external scripts to be run pre or post file save, so that one could use an external source code control system. Least good is to simply rely on your backup schedule to hopefully allow recovery. Thanks for any help... Regards, Terry Jones -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] File versioning with Samba (on a Linux filesystem)?
Henrik Zagerholm wrote: I'm pretty sure this can be done with a VFS module. I couldn't say exactly which one though. I guess there is no such VFS module :) Another possibility would be to use some FUSE filesystem on a Samba server, and then make a share out of it. Take a look at this page: http://fuse.sourceforge.net/wiki/index.php/FileSystems and there look for: User-level Versioning File System Name: Wayback Homepage: http://wayback.sourceforge.net/ Description When you use a Wayback file system, old versions of files are never lost. No matter how much you change a file or directory, everything is always kept in a versioning file so that you never lose important data. Wayback provides the ability to remount any already mounted file system with versioning support under a different directory. I didn't test it personally, but we'll all curious if you do :) Let us know how it works then of course, it's an interesting topic. -- Tomasz Chmielewski Software deployment with Samba http://wpkg.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Linux-to-Linux Samba Migration
Maybe you can try with NIS or NIS+. What database backend are you using? Regards On 3/28/06, Tom Smith [EMAIL PROTECTED] wrote: I'm working on migrating from Mandrake 10.0 to Ubuntu 5.10. The last, and probably most important, service to be moved is Samba... The setup is fairly simple, here is is: - Mandrake Linux 10.0 - Samba 3.0.10 Here's the global Samba configuration of my server: [global] workgroup = workgroup name server string = string passdb backend = tdbsam:/etc/samba/passdb.tdb passwd program = /usr/bin/passwd %u unix password sync = Yes time server = Yes load printers = No add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g add user to group script = /usr/sbin/usermod -G %g %u add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u logon script = scripts\%U.bat logon drive = H: logon home = \\%N\%U\profile.w98 domain logons = Yes wins support = Yes ldap ssl = no idmap uid = 15000-2 idmap gid = 15000-2 admin users = root, tom create mask = 0770 directory mask = 0770 veto oplock files = /*.xls/ Transferring the files and the associated shares is the easy part. What I'm concerned about is getting the domain and user/group information to transfer without having to reconfigure all of the workstations or all of the user/group accounts on the new server. I looked to see if I could find such a guide for doing this but wasn't able to--not sure if maybe I'm searching for the wrong terms or whatnot. Any suggestions offered and/or pointers to documentation would be greatly appreciated. Thanks in advance for your help. ~ Tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] File versioning with Samba (on a Linux filesystem)?
28 mar 2006 kl. 22:27 skrev Tomasz Chmielewski: Henrik Zagerholm wrote: I'm pretty sure this can be done with a VFS module. I couldn't say exactly which one though. I guess there is no such VFS module :) OK, but as he also asked for deleted recycle support, I'm about 50% correct as there is a recycle VFS module :) But wouldn't it be possible to write a version control VFS module? That intercept saves of existing files and saves the old one with a different name? I might be really wrong here :) Another possibility would be to use some FUSE filesystem on a Samba server, and then make a share out of it. That would be a good alternative if it is possible to replace the filesystem used. =) Take a look at this page: http://fuse.sourceforge.net/wiki/index.php/FileSystems and there look for: User-level Versioning File System Name: Wayback Homepage: http://wayback.sourceforge.net/ Description When you use a Wayback file system, old versions of files are never lost. No matter how much you change a file or directory, everything is always kept in a versioning file so that you never lose important data. Wayback provides the ability to remount any already mounted file system with versioning support under a different directory. I didn't test it personally, but we'll all curious if you do :) Let us know how it works then of course, it's an interesting topic. -- Tomasz Chmielewski Software deployment with Samba http://wpkg.org Cheers, Henrik -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] File versioning with Samba (on a Linux filesystem)?
On Tue, Mar 28, 2006 at 10:40:20PM +0200, Henrik Zagerholm wrote: 28 mar 2006 kl. 22:27 skrev Tomasz Chmielewski: Henrik Zagerholm wrote: I'm pretty sure this can be done with a VFS module. I couldn't say exactly which one though. I guess there is no such VFS module :) OK, but as he also asked for deleted recycle support, I'm about 50% correct as there is a recycle VFS module :) But wouldn't it be possible to write a version control VFS module? That intercept saves of existing files and saves the old one with a different name? I might be really wrong here :) No you're correct - this is a perfect use for a VFS module. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] File versioning with Samba (on a Linux filesystem)?
On Tue, 2006-03-28 at 17:18 -0500, simo wrote: On Tue, 2006-03-28 at 14:12 -0800, Jeremy Allison wrote: On Tue, Mar 28, 2006 at 10:40:20PM +0200, Henrik Zagerholm wrote: 28 mar 2006 kl. 22:27 skrev Tomasz Chmielewski: Henrik Zagerholm wrote: I'm pretty sure this can be done with a VFS module. I couldn't say exactly which one though. I guess there is no such VFS module :) OK, but as he also asked for deleted recycle support, I'm about 50% correct as there is a recycle VFS module :) But wouldn't it be possible to write a version control VFS module? That intercept saves of existing files and saves the old one with a different name? I might be really wrong here :) No you're correct - this is a perfect use for a VFS module. It is, but it is not easy at all to properly handle all cases, think for example of how some MS Office apps handle documents: open original file crete a temp file with modifications delete original file rename temp file to original ideally these operations should end up just being a single commit of a new version of the original file in a versioning system, no deletes, no renames. Any VFS should have some exclusions and IIRC, '$' in the file name is Microsoft's method of marking a temp file. Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] File versioning with Samba (on a Linux filesystem)?
29 mar 2006 kl. 00:18 skrev simo: On Tue, 2006-03-28 at 14:12 -0800, Jeremy Allison wrote: On Tue, Mar 28, 2006 at 10:40:20PM +0200, Henrik Zagerholm wrote: 28 mar 2006 kl. 22:27 skrev Tomasz Chmielewski: Henrik Zagerholm wrote: I'm pretty sure this can be done with a VFS module. I couldn't say exactly which one though. I guess there is no such VFS module :) OK, but as he also asked for deleted recycle support, I'm about 50% correct as there is a recycle VFS module :) But wouldn't it be possible to write a version control VFS module? That intercept saves of existing files and saves the old one with a different name? I might be really wrong here :) No you're correct - this is a perfect use for a VFS module. It is, but it is not easy at all to properly handle all cases, think for example of how some MS Office apps handle documents: It is never easy when dealing with MS code logic =) open original file crete a temp file with modifications delete original file rename temp file to original True, but as this is the case it would be rather simple just handle the delete event as the recycle module does right now and keep that one as old version. =) ideally these operations should end up just being a single commit of a new version of the original file in a versioning system, no deletes, no renames. Simo. -- Simo Sorce Samba Team GPL Compliance Officer email: [EMAIL PROTECTED] http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with folder redirection and guest user
Hi all, I am setting up my second server with Samba 3.0.21c with LDAP as described in Samba3-ByExample. The server OS is Slackware Linux 10.2, without PAM. All seemed to work perfect until I decided to try folder redirection. I followed the instructions given in the happy users chapter, but now new users cant log in. When trying to log in with a new user (umgrtest16) from a WinXP SP2 client, I get a error message about Windows cannot log you on because your profile cannot be loaded. When I look in the Samba log for the computer I tried to log in from (s100$), I find that Samba is trying to do something as the guest user. guest user (from session setup) not permitted to access this share (profdata) See more of the log below. To further test this, I set guest ok = yes on the profdata share, and try to log in as the new user again. Now the new user can log in! The problem is that the folder containig the redirected folders (\\SOT01\profdata\umgrtest16) and all its content are owned by the user nobody, and the group Domain Guests. The home and profile folders and all their content are owned by umgrtest16.Domain Users. I am struggling with figuring out why I must set guest ok = yes. Is there anybody out there that can give me any kind of help with this? Please excuse my English, it is not my native tongue. Regards Joran Kvalvaag s100$ logfile: [2006/03/28 23:06:44, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/03/28 23:06:44, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/03/28 23:06:44, 2] libsmb/credentials.c:creds_server_check(159) creds_server_check: credentials check failed. [2006/03/28 23:06:44, 2] rpc_server/srv_netlog_nt.c:_net_sam_logon(667) _net_sam_logon: creds_server_step failed. Rejecting auth request from client S100 machine account S100$ [2006/03/28 23:06:44, 2] lib/smbldap.c:smbldap_open_connection(722) smbldap_open_connection: connection opened [2006/03/28 23:06:44, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640) init_sam_from_ldap: Entry found for user: s100$ [2006/03/28 23:06:44, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640) init_sam_from_ldap: Entry found for user: umgrtest16 [2006/03/28 23:06:44, 2] passdb/pdb_ldap.c:init_group_from_ldap(2199) init_group_from_ldap: Entry found for group: 513 [2006/03/28 23:06:44, 2] auth/auth.c:check_ntlm_password(307) check_ntlm_password: authentication for user [umgrtest16] - [umgrtest16] - [umgrtest16] succeeded [2006/03/28 23:06:44, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640) init_sam_from_ldap: Entry found for user: umgrtest16 [2006/03/28 23:06:44, 2] auth/auth.c:check_ntlm_password(307) check_ntlm_password: authentication for user [umgrtest16] - [umgrtest16] - [umgrtest16] succeeded [2006/03/28 23:06:44, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2670) Returning domain sid for domain SOT - S-1-5-21-995782943-3300503536-3180620993 [2006/03/28 23:06:44, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640) init_sam_from_ldap: Entry found for user: umgrtest16 [2006/03/28 23:06:44, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640) init_sam_from_ldap: Entry found for user: umgrtest16 [2006/03/28 23:06:44, 1] smbd/service.c:make_connection_snum(693) s100 (10.0.2.1) connect to service profiles initially as user umgrtest16 (uid=1127, gid=513) (pid 22671) [2006/03/28 23:06:44, 1] smbd/service.c:make_connection_snum(693) s100 (10.0.2.1) connect to service netlogon initially as user umgrtest16 (uid=1127, gid=513) (pid 22671) [2006/03/28 23:06:44, 2] smbd/open.c:open_file(350) umgrtest16 opened file Default User/NTUSER.DAT.LOG read=Yes write=No (numopen=1) [2006/03/28 23:06:44, 2] smbd/open.c:open_file(350) umgrtest16 opened file Default User/NTUSER.DAT read=Yes write=No (numopen=2) [2006/03/28 23:06:45, 2] smbd/open.c:open_file(350) umgrtest16 opened file Default User/Templates/wordpfct.wpg read=Yes write=No (numopen=3) ---cut away a lot of files--- [2006/03/28 23:06:46, 2] smbd/open.c:open_file(350) umgrtest16 opened file Default User/Application Data/desktop.ini read=Yes write=No (numopen=55) [2006/03/28 23:06:46, 2] smbd/close.c:close_normal_file(308) umgrtest16 closed file Default User/Start Menu/Programs/Accessories/Program Compatibility Wizard.lnk (numopen=54) [2006/03/28 23:06:46, 2] smbd/close.c:close_normal_file(308) umgrtest16 closed file Default User/Start Menu/Programs/Accessories/Command Prompt.lnk (numopen=53) [2006/03/28 23:06:46, 2] smbd/close.c:close_normal_file(308) umgrtest16 closed file Default User/Start Menu/Programs/Accessories/desktop.ini (numopen=52) [2006/03/28 23:06:47, 2] smbd/service.c:make_connection_snum(316) guest user (from session setup) not permitted to access this share (profdata) ## problem??? [2006/03/28 23:06:55, 2] smbd/close.c:close_normal_file(308)
[Samba] windows 2003
I am running samba 2.2.12 under a 2.2.22 linux kernel (slakware). Is it possible using this version of samba to join a domain and become a domain member if the pdc (or whatever it is called under this version of windows) is running windows 2003? Is there even a concept of a domain here or do I have to support active directory by going to samba 3? Whenever I try to join the domain, I get an access denied error message failed tcon_X NT_STATUS_ACCESS_DENIED unable to join domain Any help would be appreciated. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] auth problem: wbinfo works, smbclient doesn't
Hi guys, I have a strange problem. I can authenticate a user with wbinfo from my domain controller (security =3D ads), however when I try and map a share, the authentication fails. i.e. # wbinfo -a 'COAL+bcanglo%bcpass' plaintext password authentication succeeded challenge/response password authentication succeeded # smbclient '\\xxx\timtest' -U 'COAL\bcanglo' bcpass added interface ip=3D10.xxx.xxx.101 bcast=3D10.xxx.xxx.255 nmask=255.255.255.0 Client started (version 3.0.14a based HP CIFS Server A.02.02). Connecting to 10.xxx.xxx.101 at port 445 session setup failed: NT_STATUS_LOGON_FAILURE Note: That share definately exists. I'm running winbindd in debug mode and I can see both commands talk to winbind and both attempt to talk to the domain controller. Yet wbinfo works fine, and smbclient fails with this: add_trusted_domain: COAL is an ADS native mode domain [ 2547]: request interface version [ 2547]: request location of privileged pipe [ 2547]: getpwnam coal+bcanglo ads: fetch sequence_number for COAL sys_gethostbyname: Unknown host. \\10.xx.xx.101 ads_connect for domain COAL failed: No such file or directory user 'bcanglo' does not exist [ 2547]: getpwnam COAL+bcanglo user 'bcanglo' does not exist [ 2547]: getpwnam COAL+BCANGLO user 'BCANGLO' does not exist ..and smbd debug says: check_ntlm_password: Authentication for user [bcanglo] - [bcanglo] FAILED with error NT_STATUS_NO_SUCH_USER which makes no sense, because the user DEFINATELY exists, and the winbindd/krb/ldap stuff is DEFINATELY set up and working: # wbinfo -n 'COAL+bcanglo' S-1-5-21-1955927045-6-239210854-5002 User (1) # wbinfo -n 'COAL+BCANGLO' S-1-5-21-1955927045-6-239210854-5002 User (1) Now, interestingly if I use smbclient and intentionally get the password wrong, smbd says this: check_ntlm_password: Authentication for user [bcanglo] - [bcanglo] FAILED with error NT_STATUS_WRONG_PASSWORD Busted! So I know its talking to the domain controller, and I know that it knows the user exists. Note: The COAL domain is a trusted domain: # wbinfo -m XX BUILTIN COAL I'm running the latest HP-UX packages and recommended libraries, so this version of Samba is: # smbd -V Version 3.0.14a based HP CIFS Server A.02.02 So why can I test out a username/password with wbinfo, but get User does not exist when I try and map a share with smbclient? If you need more verbose debug output from smbd or winbindd, I'll be happy to put some in. Thanks, Tim. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] windows 2003
On Tue, Mar 28, 2006 at 05:19:45PM -0800, fausto milinazzo wrote: I am running samba 2.2.12 under a 2.2.22 linux kernel (slakware). Samba 2.2 will not properly talk to Windows 2003 anymore. Windows 2003 as a DC mandates smb signing which Samba 2.2 does not do. You could change security settings on the DC, but your best option would be to upgrade to Samba3. Volker pgpj6e90ukbTF.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] NT_STATUS_BAD_NETWORK_NAME
Hello, I could use a bit of help with a samba install. Installation is Samba 3.0.21c on fedora 4 No major changes to smb.conf just added a share point. [disk] comment = Disk shares path =/disk public = yes writable = yes printable = no guest ok = yes I opened my share up wide. ls -l drwxrwxrwx 10 bob users 1024 Mar 21 16:07 disk I get my share info as expected smbclient -L localhost Password: Domain=[SHARE] OS=[Unix] Server=[Samba 3.0.14a-2] Sharename Type Comment - --- diskDisk Disk shares tmpDisk I can connect to to tmp smbclient //localhost/tmp -Ufranks Password: Domain=[SHARE] OS=[Unix] Server=[Samba 3.0.14a-2] smb: \ However when I try to connect to local host I get this error smbclient //localhost/disk -Ubob Password: Domain=[SHARE] OS=[Unix] Server=[Samba 3.0.21c] tree connect failed: NT_STATUS_BAD_NETWORK_NAME following errs in /var/log error.log :: [2006/03/28 20:31:13, 0] smbd/service.c:make_connection_snum(615) '/disk' does not exist or is not a directory, when connecting to [disk] share.log :: [2006/03/28 20:22:49, 0] smbd/service.c:make_connection_snum(615) '/disk' does not exist or is not a directory, when connecting to [disk] Anyone have any ideas? Thanks in advance. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Remove Directory Recursively
How do I remove a directory recursively in 'smbclient'? I am trying 'rm -fr', but it is not working. Youssef Eldakar Bibliotheca Alexandrina -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
svn commit: lorikeet r520 - in trunk/mod_ntlm_winbind: .
Author: abartlet Date: 2006-03-28 10:42:08 + (Tue, 28 Mar 2006) New Revision: 520 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=520 Log: Ronan Waide [EMAIL PROTECTED] has put a lot of work into mod_ntlm_winbind, adding Apache2 support, plaintext auth support and fixed a number of bugs. This is a great improvement over the old module, and is something I've been hoping to see for many years. Many thanks! Andrew Bartlett Modified: trunk/mod_ntlm_winbind/Makefile.in trunk/mod_ntlm_winbind/configure.in trunk/mod_ntlm_winbind/mod_ntlm_winbind.c Changeset: Sorry, the patch is too large (1434 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=520
svn commit: samba r14748 - branches/SAMBA_3_0/source/nsswitch trunk/source/nsswitch
Author: jerry
Date: 2006-03-28 13:34:13 + (Tue, 28 Mar 2006)
New Revision: 14748
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14748
Log:
store the name/ip address combination when we doa reverse look up in case
future forward lookups would fail
Modified:
branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c
trunk/source/nsswitch/winbindd_cm.c
Changeset:
Modified: branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c
===
--- branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c2006-03-27 19:50:46 UTC
(rev 14747)
+++ branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c2006-03-28 13:34:13 UTC
(rev 14748)
@@ -581,23 +581,31 @@
static void dcip_to_name( const char *domainname, const char *realm,
const DOM_SID *sid, struct in_addr ip, fstring name )
{
+ struct ip_service ip_list;
+ ip_list.ip = ip;
+ ip_list.port = 0;
+
/* try GETDC requests first */
if (send_getdc_request(ip, domainname, sid)) {
int i;
smb_msleep(100);
for (i=0; i5; i++) {
- if (receive_getdc_response(ip, domainname, name))
+ if (receive_getdc_response(ip, domainname, name)) {
+ namecache_store(name, 0x20, 1, ip_list);
return;
+ }
smb_msleep(500);
}
}
/* try node status request */
- if ( name_status_find(domainname, 0x1c, 0x20, ip, name) )
+ if ( name_status_find(domainname, 0x1c, 0x20, ip, name) ) {
+ namecache_store(name, 0x20, 1, ip_list);
return;
+ }
/* backup in case the netbios stuff fails */
@@ -627,6 +635,7 @@
}
fstrcpy(name, ads-config.ldap_server_name);
+ namecache_store(name, 0x20, 1, ip_list);
ads_destroy( ads );
}
Modified: trunk/source/nsswitch/winbindd_cm.c
===
--- trunk/source/nsswitch/winbindd_cm.c 2006-03-27 19:50:46 UTC (rev 14747)
+++ trunk/source/nsswitch/winbindd_cm.c 2006-03-28 13:34:13 UTC (rev 14748)
@@ -581,23 +581,31 @@
static void dcip_to_name( const char *domainname, const char *realm,
const DOM_SID *sid, struct in_addr ip, fstring name )
{
+ struct ip_service ip_list;
+ ip_list.ip = ip;
+ ip_list.port = 0;
+
/* try GETDC requests first */
if (send_getdc_request(ip, domainname, sid)) {
int i;
smb_msleep(100);
for (i=0; i5; i++) {
- if (receive_getdc_response(ip, domainname, name))
+ if (receive_getdc_response(ip, domainname, name)) {
+ namecache_store(name, 0x20, 1, ip_list);
return;
+ }
smb_msleep(500);
}
}
/* try node status request */
- if ( name_status_find(domainname, 0x1c, 0x20, ip, name) )
+ if ( name_status_find(domainname, 0x1c, 0x20, ip, name) ) {
+ namecache_store(name, 0x20, 1, ip_list);
return;
+ }
/* backup in case the netbios stuff fails */
@@ -627,6 +635,7 @@
}
fstrcpy(name, ads-config.ldap_server_name);
+ namecache_store(name, 0x20, 1, ip_list);
ads_destroy( ads );
}
svn commit: samba r14749 - in trunk/source/lib: .
Author: gd
Date: 2006-03-28 13:44:42 + (Tue, 28 Mar 2006)
New Revision: 14749
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14749
Log:
Fixing the build.
Wow that doubled content for newly added files happens a lot lately :)
Guenther
Modified:
trunk/source/lib/repdir.c
Changeset:
Modified: trunk/source/lib/repdir.c
===
--- trunk/source/lib/repdir.c 2006-03-28 13:34:13 UTC (rev 14748)
+++ trunk/source/lib/repdir.c 2006-03-28 13:44:42 UTC (rev 14749)
@@ -216,221 +216,3 @@
}
#endif
#endif /* REPLACE_READDIR */
-/*
- Unix SMB/CIFS implementation.
-
- Copyright (C) Andrew Tridgell 2005
- Updated for Samba3 64-bit cleanliness (C) Jeremy Allison 2006
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-/*
- a replacement for opendir/readdir/telldir/seekdir/closedir for BSD systems
-
- This is needed because the existing directory handling in FreeBSD
- and OpenBSD (and possibly NetBSD) doesn't correctly handle unlink()
- on files in a directory where telldir() has been used. On a block
- boundary it will occasionally miss a file when seekdir() is used to
- return to a position previously recorded with telldir().
-
- This also fixes a severe performance and memory usage problem with
- telldir() on BSD systems. Each call to telldir() in BSD adds an
- entry to a linked list, and those entries are cleaned up on
- closedir(). This means with a large directory closedir() can take an
- arbitrary amount of time, causing network timeouts as millions of
- telldir() entries are freed
-
- Note! This replacement code is not portable. It relies on getdents()
- always leaving the file descriptor at a seek offset that is a
- multiple of DIR_BUF_SIZE. If the code detects that this doesn't
- happen then it will abort(). It also does not handle directories
- with offsets larger than can be stored in a long,
-
- This code is available under other free software licenses as
- well. Contact the author.
-*/
-
-#include include/includes.h
-
- void replace_readdir_dummy(void);
- void replace_readdir_dummy(void) {}
-
-#if defined(REPLACE_READDIR)
-
-#if defined(PARANOID_MALLOC_CHECKER)
-#ifdef malloc
-#undef malloc
-#endif
-#endif
-
-#define DIR_BUF_BITS 9
-#define DIR_BUF_SIZE (1DIR_BUF_BITS)
-
-struct dir_buf {
- int fd;
- int nbytes, ofs;
- SMB_OFF_T seekpos;
- char buf[DIR_BUF_SIZE];
-};
-
-#if defined(HAVE_EXPLICIT_LARGEFILE_SUPPORT) defined(HAVE_OPENDIR64)
- SMB_STRUCT_DIR *opendir64(const char *dname)
-#else
- SMB_STRUCT_DIR *opendir(const char *dname)
-#endif
-{
- struct dir_buf *d;
- d = malloc(sizeof(*d));
- if (d == NULL) {
- errno = ENOMEM;
- return NULL;
- }
-#if defined(HAVE_EXPLICIT_LARGEFILE_SUPPORT) defined(HAVE_OPEN64)
- d-fd = open64(dname, O_RDONLY);
-#else
- d-fd = open(dname, O_RDONLY);
-#endif
-
- if (d-fd == -1) {
- free(d);
- return NULL;
- }
- d-ofs = 0;
- d-seekpos = 0;
- d-nbytes = 0;
- return (SMB_STRUCT_DIR *)d;
-}
-
-#if defined(HAVE_EXPLICIT_LARGEFILE_SUPPORT) defined(HAVE_READDIR64)
- SMB_STRUCT_DIRENT *readdir64(SMB_STRUCT_DIR *dir)
-#else
- SMB_STRUCT_DIRENT *readdir(SMB_STRUCT_DIR *dir)
-#endif
-{
- struct dir_buf *d = (struct dir_buf *)dir;
- SMB_STRUCT_DIRENT *de;
-
- if (d-ofs = d-nbytes) {
-#if defined(HAVE_EXPLICIT_LARGEFILE_SUPPORT) defined(HAVE_LSEEK64)
- d-seekpos = lseek64(d-fd, 0, SEEK_CUR);
-#else
- d-seekpos = lseek(d-fd, 0, SEEK_CUR);
-#endif
-
-#if defined(HAVE_EXPLICIT_LARGEFILE_SUPPORT) defined(HAVE_GETDENTS64)
- d-nbytes = getdents64(d-fd, d-buf, DIR_BUF_SIZE);
-#else
- d-nbytes = getdents(d-fd, d-buf, DIR_BUF_SIZE);
-#endif
- d-ofs = 0;
- }
- if (d-ofs = d-nbytes) {
- return NULL;
- }
- de = (SMB_STRUCT_DIRENT *)d-buf[d-ofs];
- d-ofs += de-d_reclen;
- return de;
-}
-
-#if defined(HAVE_EXPLICIT_LARGEFILE_SUPPORT) defined(HAVE_TELLDIR64)
- long telldir64(SMB_STRUCT_DIR *dir)
-#else
- long telldir(SMB_STRUCT_DIR *dir)
-#endif
-{
- struct dir_buf *d = (struct dir_buf *)dir;
- if (d-ofs =
svn commit: samba r14750 - in trunk/source: include lib
Author: jra
Date: 2006-03-28 15:49:57 + (Tue, 28 Mar 2006)
New Revision: 14750
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14750
Log:
Use the noreturn attribute to try and tell coverity that
smb_panic can't return.
Jeremy.
Modified:
trunk/source/include/includes.h
trunk/source/lib/util.c
Changeset:
Modified: trunk/source/include/includes.h
===
--- trunk/source/include/includes.h 2006-03-28 13:44:42 UTC (rev 14749)
+++ trunk/source/include/includes.h 2006-03-28 15:49:57 UTC (rev 14750)
@@ -1554,4 +1554,13 @@
#define CONST_DISCARD(type, ptr) ((type) ((void *) (ptr)))
#define CONST_ADD(type, ptr) ((type) ((const void *) (ptr)))
+#ifndef NORETURN_ATTRIBUTE
+#if (__GNUC__ = 3)
+#define NORETURN_ATTRIBUTE __attribute__ ((noreturn))
+#else
+#define NORETURN_ATTRIBUTE
+#endif
+#endif
+
+void smb_panic( const char *why ) NORETURN_ATTRIBUTE ;
#endif /* _INCLUDES_H */
Modified: trunk/source/lib/util.c
===
--- trunk/source/lib/util.c 2006-03-28 13:44:42 UTC (rev 14749)
+++ trunk/source/lib/util.c 2006-03-28 15:49:57 UTC (rev 14750)
@@ -1542,14 +1542,6 @@
}
/***
- legacy wrapper for smb_panic2()
-/
-void smb_panic( const char *why )
-{
- smb_panic2( why, True );
-}
-
-/***
Something really nasty happened - panic !
/
@@ -1557,7 +1549,7 @@
#include libexc.h
#endif
-void smb_panic2(const char *why, BOOL decrement_pid_count )
+static void smb_panic2(const char *why, BOOL decrement_pid_count )
{
char *cmd;
int result;
@@ -1664,6 +1656,17 @@
}
/***
+ wrapper for smb_panic2()
+/
+
+ void smb_panic( const char *why )
+{
+ smb_panic2( why, True );
+ /* Notreached. */
+ abort();
+}
+
+/***
A readdir wrapper which just returns the file name.
/
svn commit: samba r14751 - in branches/SAMBA_3_0/source: include lib
Author: jra
Date: 2006-03-28 15:50:13 + (Tue, 28 Mar 2006)
New Revision: 14751
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14751
Log:
Use the noreturn attribute to try and tell coverity that
smb_panic can't return.
Jeremy.
Modified:
branches/SAMBA_3_0/source/include/includes.h
branches/SAMBA_3_0/source/lib/util.c
Changeset:
Modified: branches/SAMBA_3_0/source/include/includes.h
===
--- branches/SAMBA_3_0/source/include/includes.h2006-03-28 15:49:57 UTC
(rev 14750)
+++ branches/SAMBA_3_0/source/include/includes.h2006-03-28 15:50:13 UTC
(rev 14751)
@@ -1553,4 +1553,13 @@
#define CONST_DISCARD(type, ptr) ((type) ((void *) (ptr)))
#define CONST_ADD(type, ptr) ((type) ((const void *) (ptr)))
+#ifndef NORETURN_ATTRIBUTE
+#if (__GNUC__ = 3)
+#define NORETURN_ATTRIBUTE __attribute__ ((noreturn))
+#else
+#define NORETURN_ATTRIBUTE
+#endif
+#endif
+
+void smb_panic( const char *why ) NORETURN_ATTRIBUTE ;
#endif /* _INCLUDES_H */
Modified: branches/SAMBA_3_0/source/lib/util.c
===
--- branches/SAMBA_3_0/source/lib/util.c2006-03-28 15:49:57 UTC (rev
14750)
+++ branches/SAMBA_3_0/source/lib/util.c2006-03-28 15:50:13 UTC (rev
14751)
@@ -1542,14 +1542,6 @@
}
/***
- legacy wrapper for smb_panic2()
-/
-void smb_panic( const char *why )
-{
- smb_panic2( why, True );
-}
-
-/***
Something really nasty happened - panic !
/
@@ -1557,7 +1549,7 @@
#include libexc.h
#endif
-void smb_panic2(const char *why, BOOL decrement_pid_count )
+static void smb_panic2(const char *why, BOOL decrement_pid_count )
{
char *cmd;
int result;
@@ -1664,6 +1656,17 @@
}
/***
+ wrapper for smb_panic2()
+/
+
+ void smb_panic( const char *why )
+{
+ smb_panic2( why, True );
+ /* Notreached. */
+ abort();
+}
+
+/***
A readdir wrapper which just returns the file name.
/
svn commit: samba r14752 - in trunk/source/locking: .
Author: jra
Date: 2006-03-28 17:10:20 + (Tue, 28 Mar 2006)
New Revision: 14752
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14752
Log:
POSIX locks don't care about the fnum - only the dev/ino
pair. Ensure this is reflected in the lock split/merge
and lock delete code.
Jeremy.
Modified:
trunk/source/locking/brlock.c
Changeset:
Modified: trunk/source/locking/brlock.c
===
--- trunk/source/locking/brlock.c 2006-03-28 15:50:13 UTC (rev 14751)
+++ trunk/source/locking/brlock.c 2006-03-28 17:10:20 UTC (rev 14752)
@@ -163,7 +163,8 @@
/
See if lock2 can be added when lock1 is in place - when both locks are POSIX
- flavour.
+ flavour. POSIX locks ignore fnum - they only care about dev/ino which we
+ know already match.
/
static BOOL brl_conflict_posix(const struct lock_struct *lck1,
@@ -183,9 +184,8 @@
return False;
}
- /* Locks on the same context on the same fnum con't conflict. */
- if (brl_same_context(lck1-context, lck2-context)
- (lck1-fnum == lck2-fnum)) {
+ /* Locks on the same context con't conflict. Ignore fnum. */
+ if (brl_same_context(lck1-context, lck2-context)) {
return False;
}
@@ -226,6 +226,7 @@
/
Check to see if this lock conflicts, but ignore our own locks on the
same fnum only. This is the read/write lock check code path.
+ This is never used in the POSIX lock case.
/
static BOOL brl_conflict_other(const struct lock_struct *lck1, const struct
lock_struct *lck2)
@@ -403,16 +404,15 @@
{
BOOL lock_types_differ = (ex-lock_type != plock-lock_type);
- /* We can't merge non-conflicting locks on different context
- or not on the same fnum */
+ /* We can't merge non-conflicting locks on different context - ignore
fnum. */
- if (!brl_same_context(ex-context, plock-context) || (ex-fnum !=
plock-fnum)) {
+ if (!brl_same_context(ex-context, plock-context)) {
/* Just copy. */
memcpy(lck_arr[0], ex, sizeof(struct lock_struct));
return 1;
}
- /* We now know we have the same context and fnum. */
+ /* We now know we have the same context. */
/* Did we overlap ? */
@@ -583,7 +583,8 @@
/* Never get here. */
smb_panic(brlock_posix_split_merge\n);
- return 0;
+ /* Notreached. */
+ abort();
}
/
@@ -766,12 +767,6 @@
lock-start == plock-start
lock-size == plock-size) {
-#if 0
- if (pre_unlock_fn) {
- (*pre_unlock_fn)(pre_unlock_data);
- }
-#endif
-
/* found it - delete it */
if (i br_lck-num_locks - 1) {
memmove(locks[i], locks[i+1],
@@ -803,13 +798,6 @@
return False;
}
-#if 0
- /* Do any POSIX unlocks needed. */
- if (pre_unlock_fn) {
- (*pre_unlock_fn)(pre_unlock_data);
- }
-#endif
-
/* Send unlock messages to any pending waiters that overlap. */
for (j=0; j br_lck-num_locks; j++) {
struct lock_struct *pend_lock = locks[j];
@@ -885,10 +873,9 @@
lock = locks[i];
- /* Only remove our own locks */
+ /* Only remove our own locks - ignore fnum. */
if (!brl_same_context(lock-context, plock-context) ||
- lock-lock_type == PENDING_LOCK ||
- lock-fnum != plock-fnum ) {
+ lock-lock_type == PENDING_LOCK) {
memcpy(tp[count], lock, sizeof(struct lock_struct));
count++;
continue;
@@ -956,13 +943,6 @@
return True;
}
-#if 0
- /* Do any POSIX unlocks needed. */
- if (pre_unlock_fn) {
- (*pre_unlock_fn)(pre_unlock_data);
- }
-#endif
-
/* Realloc so we don't leak entries per unlock call. */
if (count) {
tp = (struct lock_struct *)SMB_REALLOC(tp, count *
sizeof(*locks));
@@ -1186,6 +1166,7 @@
for (i = 0; i br_lck-num_locks; i++) {
struct lock_struct *lock = locks[i];
+ /* For pending locks we *always* care about the fnum. */
if (brl_same_context(lock-context, context)
svn commit: samba-web r934 - in trunk/news/announcements: .
Author: deryck Date: 2006-03-28 19:26:51 + (Tue, 28 Mar 2006) New Revision: 934 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=934 Log: Add friendly reminder (to news) that sambaXP quickly approaches. deryck Added: trunk/news/announcements/sambaxp_06_reminder.html Changeset: Added: trunk/news/announcements/sambaxp_06_reminder.html === --- trunk/news/announcements/sambaxp_06_reminder.html 2006-03-23 01:41:18 UTC (rev 933) +++ trunk/news/announcements/sambaxp_06_reminder.html 2006-03-28 19:26:51 UTC (rev 934) @@ -0,0 +1,15 @@ +h3a name=sambaxp_06_reminderReminder: Samba eXPerience 2006/a/h3 + +div class=article + pThere's less than a month to go until + a href=http://www.sambaxp.org/;Samba eXPerience 2006/a. sambaXP + is the only international conference devoted exclusively to Samba. + The conference also offers an excellent opportunity to meet many Samba + Team members./p + + pInfo on registration, hotels, and conference schedule can be found + on the a href=http://www.sambaxp.org/;sambaXP site/a. Consider + this your friendly news.samba.org reminder./p +/div + +
svn commit: samba-docs r933 - in trunk/smbdotconf/winbind: .
Author: vlendec Date: 2006-03-28 19:46:15 + (Tue, 28 Mar 2006) New Revision: 933 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=933 Log: Small (but I think important...) fix for the idmap backend parameter syntax. Thanks to Karolin Seeger [EMAIL PROTECTED] :-) Volker Modified: trunk/smbdotconf/winbind/idmapbackend.xml Changeset: Modified: trunk/smbdotconf/winbind/idmapbackend.xml === --- trunk/smbdotconf/winbind/idmapbackend.xml 2006-03-22 15:06:19 UTC (rev 932) +++ trunk/smbdotconf/winbind/idmapbackend.xml 2006-03-28 19:46:15 UTC (rev 933) @@ -32,6 +32,6 @@ value type=default/value value type=exampleldap:ldap://ldapslave.example.com/value -value type=exampleidmap_rid:BUILTIN=1000-1999,DOMNAME=2000-1/value +value type=exampleidmap_rid:BUILTIN=1000-1999,DOMNAME=2000-1/value value type=exampleidmap_ad/value /samba:parameter
svn commit: samba-web r935 - in trunk/vendors: .
Author: deryck Date: 2006-03-28 19:52:28 + (Tue, 28 Mar 2006) New Revision: 935 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=935 Log: Add vendors entry for Centrify. Added: trunk/vendors/centrify.html trunk/vendors/centrify_logo.gif Modified: trunk/vendors/index.html Changeset: Added: trunk/vendors/centrify.html === --- trunk/vendors/centrify.html 2006-03-28 19:26:51 UTC (rev 934) +++ trunk/vendors/centrify.html 2006-03-28 19:52:28 UTC (rev 935) @@ -0,0 +1,17 @@ +img src=centrify_logo.gif alt=Centrify style=float:left;margin:35px / + +pThe Centrify DirectControl suite seamlessly integrates UNIX, Linux, Mac, +Java and web platforms with Microsoft Active Directory's identity, access +and policy management services. DirectControl extends Active Directory to +allow customers to centralize UNIX / Linux user and group properties and +associate these properties with Active Directory accounts./p + +pDirectControl for Samba is now available. This solution allows Samba +to store all user and group information centrally in Active Directory and +enables new access management capabilities for Samba servers through the +DirectControl Zones technology. Other features include full Active Directory +group support and additional capabilities for secure cross domain single +sign-on./p + +pFor more information on DirectControl for Samba, see: +a href=http://www.centrify.com/directcontrol-for-samba;http://www.centrify.com/directcontrol-for-samba/a./p \ No newline at end of file Added: trunk/vendors/centrify_logo.gif === (Binary files differ) Property changes on: trunk/vendors/centrify_logo.gif ___ Name: svn:mime-type + application/octet-stream Modified: trunk/vendors/index.html === --- trunk/vendors/index.html2006-03-28 19:26:51 UTC (rev 934) +++ trunk/vendors/index.html2006-03-28 19:52:28 UTC (rev 935) @@ -36,6 +36,10 @@ H2Cobalt Networks, Inc./H2 !--#include virtual=cobalt.html -- +!-- Added: 28 March 06 -- +hr //br / +!--#include virtual=centrify.html -- + hrbr !--#include virtual=emergecore.html --
svn commit: samba-web r936 - in trunk/support: .
Author: deryck Date: 2006-03-28 20:06:50 + (Tue, 28 Mar 2006) New Revision: 936 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=936 Log: New support providers added to lists in Finland and Costa Rica deryck Modified: trunk/support/costarica.html trunk/support/finland.html Changeset: Modified: trunk/support/costarica.html === --- trunk/support/costarica.html2006-03-28 19:52:28 UTC (rev 935) +++ trunk/support/costarica.html2006-03-28 20:06:50 UTC (rev 936) @@ -17,5 +17,16 @@ Servidores de Dominio (PDC). /small/pre +!-- Added: 28 March 06 -- +hr / +presmall +CORAL SYSTEMS +Apartado 1049-2050 +San José, Costa Rica +Tel. (506) 280-8297 +Fax. (506) 225-6143 +a href=mailto:[EMAIL PROTECTED][EMAIL PROTECTED]/a +a href=http://www.coral-systems.com;http://www.coral-systems.com/a +/small/pre !--#include virtual=footer_support.html -- Modified: trunk/support/finland.html === --- trunk/support/finland.html 2006-03-28 19:52:28 UTC (rev 935) +++ trunk/support/finland.html 2006-03-28 20:06:50 UTC (rev 936) @@ -4,8 +4,28 @@ h2Commercial Support -- Finland/h2 +!-- Added: 28 March 06 -- +h3Helsinki/h3 +presmall +Pronetko networks Inc +homepage: a href=http://www.pronetko.fi;http://www.pronetko.fi/a +email: a href=mailto:[EMAIL PROTECTED][EMAIL PROTECTED]/a + +Pronetko Networks Oy consults and implements Linux-based client and server +systems and solutions. + +Committed to delivering innovation, Pronetko Networks Oy collaborates with its +clients and partners to help them benefit from the power of Linux, Samba, PHP +and MySQL solutions. + +Pronetko Networks is a privately held company, founded in 2000. The company +headquarter is in Helsinki, Finland. +/small/pre + + !-- Added: 29 Nov 2005 -- +hr / h3Turku/h3 presmall Homepage: a href=http://www.inoi.fi/;http://www.inoi.fi//a
svn commit: lorikeet r521 - in trunk/mod_ntlm_winbind: .
Author: abartlet
Date: 2006-03-28 20:59:49 + (Tue, 28 Mar 2006)
New Revision: 521
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=521
Log:
Another patch from Ronan Waide [EMAIL PROTECTED].
In adding plaintext support, we lost NTLM support.
Andrew Bartlett
Modified:
trunk/mod_ntlm_winbind/mod_ntlm_winbind.c
Changeset:
Modified: trunk/mod_ntlm_winbind/mod_ntlm_winbind.c
===
--- trunk/mod_ntlm_winbind/mod_ntlm_winbind.c 2006-03-28 10:42:08 UTC (rev
520)
+++ trunk/mod_ntlm_winbind/mod_ntlm_winbind.c 2006-03-28 20:59:49 UTC (rev
521)
@@ -469,7 +469,7 @@
}
/* get the current request's auth helper or fork one */
-static int get_auth_helper( request_rec *r, ntlm_config_rec *crec, struct
_ntlm_auth_helper *auth_helper, char *cmd, void (*cleanup)(void *)) {
+static struct _ntlm_auth_helper *get_auth_helper( request_rec *r, struct
_ntlm_auth_helper *auth_helper, char *cmd, void (*cleanup)(void *)) {
ntlm_context_t *ctxt = get_connection_context( r-connection );
#ifdef APACHE2
apr_procattr_t *attr;
@@ -489,11 +489,11 @@
auth_helper-helper_pid = 0;
#ifdef APACHE2
-apr_tokenize_to_argv( crec-ntlm_plaintext_helper, argv_out, pool );
+apr_tokenize_to_argv( cmd, argv_out, pool );
#else
ap_register_cleanup( pool, auth_helper, cleanup, ap_null_cleanup );
#endif
-cld.argv0 = crec-ntlm_plaintext_helper;
+cld.argv0 = cmd;
cld.r = r;
ctxt-ntlm_plaintext_helper = auth_helper;
@@ -504,7 +504,7 @@
auth_helper-proc = (apr_proc_t *)apr_pcalloc(pool,
sizeof(apr_proc_t)) ;
if ( apr_proc_create( auth_helper-proc, argv_out[0], (const char *
const *)argv_out, NULL, attr, pool ) != APR_SUCCESS ) {
RERROR( errno, couldn't spawn child ntlm helper process: %s,
argv_out[0]);
-return HTTP_INTERNAL_SERVER_ERROR;
+return NULL;
}
#else
auth_helper-helper_pid = ap_bspawn_child(pool, helper_child,
@@ -515,12 +515,12 @@
if (auth_helper-helper_pid == -1) {
RERROR( errno, couldn't spawn child ntlm helper process: %s,
cld.argv0);
-return HTTP_INTERNAL_SERVER_ERROR;
+return NULL;
}
#endif
}
-return OK;
+return auth_helper;
}
/* Call winbind to authenticate a (user, password)
@@ -533,14 +533,13 @@
char args_from_helper[HUGE_STRING_LEN];
unsigned int bytes_written;
int bytes_read;
-int retval;
#ifdef APACHE2
int exit;
apr_exit_why_e why;
#endif
-if (( retval = get_auth_helper( r, crec, ctxt-ntlm_plaintext_helper,
crec-ntlm_plaintext_helper, CLEANUP(cleanup_ntlm_plaintext_helper))) != OK ) {
-return retval;
+if (( ctxt-ntlm_plaintext_helper = get_auth_helper( r,
ctxt-ntlm_plaintext_helper, crec-ntlm_plaintext_helper,
CLEANUP(cleanup_ntlm_plaintext_helper))) == NULL ) {
+return HTTP_INTERNAL_SERVER_ERROR;
}
if ( ctxt-connected_user_authenticated == NULL ) {
@@ -671,26 +670,24 @@
#endif
unsigned int bytes_written;
int bytes_read;
-int retval;
struct _ntlm_auth_helper *auth_helper;
/* If this is the first request with this connection, then create
* a ntlm_auth_helper entry for it. It will be cleaned up when the
* connection is dropped */
-retval = HTTP_INTERNAL_SERVER_ERROR;
if (strcmp(auth_type, NEGOTIATE_AUTH_NAME) == 0) {
-retval = get_auth_helper( r, crec, ctxt-negotiate_ntlm_auth_helper,
crec-negotiate_ntlm_auth_helper, CLEANUP(cleanup_negotiate_ntlm_auth_helper));
-auth_helper = ctxt-negotiate_ntlm_auth_helper;
+auth_helper = get_auth_helper( r, ctxt-negotiate_ntlm_auth_helper,
crec-negotiate_ntlm_auth_helper, CLEANUP(cleanup_negotiate_ntlm_auth_helper));
+ctxt-negotiate_ntlm_auth_helper = auth_helper;
} else if (strcmp(auth_type, NTLM_AUTH_NAME) == 0) {
-retval = get_auth_helper( r, crec, ctxt-ntlm_auth_helper,
crec-ntlm_auth_helper, CLEANUP(cleanup_ntlm_auth_helper));
-auth_helper = ctxt-ntlm_auth_helper;
+auth_helper = get_auth_helper( r, ctxt-ntlm_auth_helper,
crec-ntlm_auth_helper, CLEANUP(cleanup_ntlm_auth_helper));
+ctxt-ntlm_auth_helper = auth_helper;
} else {
auth_helper = NULL;
}
-if ( retval != OK ) {
-return retval;
+if ( auth_helper == NULL ) {
+return HTTP_INTERNAL_SERVER_ERROR;
}
if ( ctxt-connected_user_authenticated == NULL ) {
Build status as of Wed Mar 29 00:00:02 2006
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2006-03-28 00:00:17.0 + +++ /home/build/master/cache/broken_results.txt 2006-03-29 00:00:03.0 + @@ -1,4 +1,4 @@ -Build status as of Tue Mar 28 00:00:02 2006 +Build status as of Wed Mar 29 00:00:02 2006 Build counts: Tree Total Broken Panic @@ -6,12 +6,12 @@ distcc 8 2 0 lorikeet-heimdal 28 28 0 ppp 15 0 0 -rsync9 1 0 -samba2 1 0 +rsync30 1 0 +samba2 0 0 samba-docs 0 0 0 -samba4 35 28 0 -samba_3_035 6 0 -smb-build20 0 0 +samba4 34 27 0 +samba_3_034 6 0 +smb-build21 0 0 talloc 29 16 0 tdb 4 1 0
