Re: [Samba] Samba 4 Packaging Issues

2013-04-29 Thread Jelmer Vernooij
Hi Mike,

On Thu, Apr 04, 2013 at 09:26:43AM -0500, Mike Ray wrote:
> Unfortunately not, I am still unable to get the 4.0.3 package to build 
> successfully due to the aforementioned error. I have yet to try a different 
> version as I think this to be a problem with my packaging attempts, not with 
> anything within that version of samba. 
Have you tried just building the 4.0.3 package from experimental, without any 
additional changes? Does that work?

The ldb error in particular seems odd - do you have libldb1 and the other build 
dependencies installed?

It is normal that there are some errors from dpkg-shlibdeps, it doesn't deal 
with internal libraries found using rpath very well. 

> As I'm new to this, I've been poking around for even just beginner tutorials 
> on the whole 'debianization' of packages in the hopes that maybe I made an 
> obvious slip-up. This has also not yielded anything particularly helpful. 
> 
> I think the problem probably has to do with me attempting to use the 
> --bundled-libraries option in the rules. As I understand it, 
> --bundled-libraries incorporates libraries into the package itself so that 
> the package need not rely on system libraries. This seemed like a safe way to 
> ensure that (even if for however unlikely) once the package built 
> successfully, it would *always* be functional. 
There should be no need to use --bundled-libraries. Debian makes sure that the
dependencies for Samba would always be present, while also giving you access to
(security) updates for them. --bundled-libraries also covers only a small
number of the libraries that Samba4 links with.

The reason --bundled-libraries exists is that on some platforms it is a hassle
to manually install all the libraries that Samba uses before actually building
Samba itself. On Debian, this is not necessary since the libraries are already
packaged.

Cheers,

Jelmer



 
> If I've gone astray in that thinking or you have some advice for me, I would 
> greatly appreciate it. 
> 
> Thanks for responding, 
> Mike Ray 
> 
> - Original Message -
> 
> From: "Jelmer Vernooij"  
> To: "Mike Ray"  
> Sent: Thursday, April 4, 2013 7:11:14 AM 
> Subject: Re: Fwd: Samba 4 Packaging Issues 
> 
> Hi Mike, 
> 
> Did you manage to get an updated version of the Samba package built in the 
> mean 
> time? If not, let me know. 
> 
> Cheers, 
> 
> Jelmer 
> 
> > -- Forwarded message -- 
> > From: Mike Ray  
> > Date: Wed, Mar 27, 2013 at 10:44 AM 
> > Subject: Samba 4 Packaging Issues 
> > To: debian-ment...@lists.debian.org 
> > 
> > 
> > Hello all- 
> > 
> > (After posting in -user, it was suggested I try this mailing list instead) 
> > 
> > Long story short, I am trying to package up a current version of Samba4 for 
> > Ubuntu Precise 12.04 so that I can easily and reliably deploy it to 
> > hardware from a PPA. 
> > I'm very new to debian packaging so I'll just start out by stating that 
> > anyone who can offer help on this is encouraged to *not* make assumptions 
> > about what I have or haven't done -- I'm new and bad at this. 
> > 
> > In any case, the samba 4.0.3 package (available in the experimental branch 
> > of debian packages http://packages.debian.org/source/experimental/samba4) 
> > is my base package and the provided debian folder was my starting point. I 
> > didn't use the samba packages for Precise because they are woefully old. 
> > I've tried to modify the files to meet my needs but am currently hitting an 
> > error on dpkg-shlibdeps. 
> > 
> > It spits out a lot of warnings about not being able to extract the name and 
> > version from certain libraries, but it is actually erroring out because it 
> > can't find certain libraries. 
> > dpkg-shlibdeps: error: couldn't find library libkrb5-samba4.so.26 needed by 
> > debian/libsamdb0/usr/lib/x86_64-linux-gnu/libsamdb.so.0.0.1 (ELF format: 
> > 'elf64-x86-64'; RPATH: '/usr/lib/x86_64-linux-gnu/samba'). 
> > dpkg-shlibdeps: error: couldn't find library libgssapi-samba4.so.2 needed 
> > by debian/libsamdb0/usr/lib/x86_64-linux-gnu/libsamdb.so.0.0.1 (ELF format: 
> > 'elf64-x86-64'; RPATH: '/usr/lib/x86_64-linux-gnu/samba'). 
> > And also: 
> > dpkg-shlibdeps: error: no dependency information found for 
> > /home/USER/samba4_4.0.4/samba4-4.0.4/debian/tmp/usr/lib/x86_64-linux-gnu/samba/libldb.so.1
> >  
> > (used by 
> > debian/libsamdb0/usr/lib/x86_64-linux-gnu/samba/libsamdb-common.so). 
> > 
> > dh_shlibdeps says this: 
> > dh_shlibdeps

Re: [Samba] [PATCH] Re: SYSVOL ACLs and GPOs

2012-11-05 Thread Jelmer Vernooij
On Tue, Nov 06, 2012 at 08:04:44AM +1100, Andrew Bartlett wrote:
> On Mon, 2012-11-05 at 22:02 +0100, Jelmer Vernooij wrote:
> > On Mon, Nov 05, 2012 at 01:10:13PM +1100, Andrew Bartlett wrote:
> > > diff --git a/source4/selftest/tests.py b/source4/selftest/tests.py
> > > index ca5bdd3..61540d0 100755
> > > --- a/source4/selftest/tests.py
> > > +++ b/source4/selftest/tests.py
> > > @@ -405,6 +405,8 @@ planpythontestsuite("dc:local", 
> > > "samba.tests.dcerpc.bare")
> > >  planpythontestsuite("dc:local", "samba.tests.dcerpc.unix")
> > >  planpythontestsuite("dc:local", "samba.tests.dcerpc.srvsvc")
> > >  planpythontestsuite("dc:local", "samba.tests.samba_tool.timecmd")
> > > +planpythontestsuite("dc:local", "samba.tests.samba_tool.gpo")
> > > +planpythontestsuite("plugin_s4_dc:local", "samba.tests.samba_tool.gpo")
> > Do we really need to run these tests against both environments? These
> > tests ought to be testing that the samba-tool gpo subcommand works
> > well, not our server side GPO support.
> > 
> > As far as I know the gpo subcommands don't have any different
> > behaviour for these two environments.
> 
> It's the only test we have at the moment for our server-side support
> (being able to add the GPO, with a valid acl and owner etc).
> 
> Indeed, that was why I added it, because it was suggested this tool
> showed up the issues we have been having (it didn't).
If we really want to run these tests against both environments, for
lack of any more appropriate tests, it would be nice to add a comment
saying so.

Cheers,

Jelmer


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] [PATCH] Re: SYSVOL ACLs and GPOs

2012-11-05 Thread Jelmer Vernooij
> +
> +
> diff --git a/source4/selftest/tests.py b/source4/selftest/tests.py
> index ca5bdd3..61540d0 100755
> --- a/source4/selftest/tests.py
> +++ b/source4/selftest/tests.py
> @@ -405,6 +405,8 @@ planpythontestsuite("dc:local", "samba.tests.dcerpc.bare")
>  planpythontestsuite("dc:local", "samba.tests.dcerpc.unix")
>  planpythontestsuite("dc:local", "samba.tests.dcerpc.srvsvc")
>  planpythontestsuite("dc:local", "samba.tests.samba_tool.timecmd")
> +planpythontestsuite("dc:local", "samba.tests.samba_tool.gpo")
> +planpythontestsuite("plugin_s4_dc:local", "samba.tests.samba_tool.gpo")
Do we really need to run these tests against both environments? These
tests ought to be testing that the samba-tool gpo subcommand works
well, not our server side GPO support.

As far as I know the gpo subcommands don't have any different
behaviour for these two environments.

>  planpythontestsuite("dc:local", "samba.tests.samba_tool.processes")
>  planpythontestsuite("dc:local", "samba.tests.samba_tool.user")
>  planpythontestsuite("dc:local", "samba.tests.samba_tool.group")

Cheers,

Jelmer
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Squeeze Debian package

2011-12-10 Thread Jelmer Vernooij

Hi Peter,

(Changing mailing list to sa...@samba.org, as samba-techni...@samba.org 
is for development discussion)


On 12/06/2011 05:13 PM, Peter Diks wrote:

As we use the standard samba package via apt-get within Squeeze to install
a samba-ldap as PDC ( version 3.5.6 ) we have noticed that cmd
*echo -ne Userpassword\\nUserpassword\\n" | smbldap-passwd username*
has to run twice for the user to be able to login on the domain.
The first time we run the command and configure the user as Zarafa-user,
Zarafa works fine but user cannot login to the samba-domain.
We set Shadowmax to 1 ( default 99 ) and run the command the second
time set sambaLMpassword to NULL and then the user can login. We use a
samba-domain ( no microsoft DC present ) with XP - clients on which in
gpedit.msc we enable NOT to look at roaming profiles.
We suspect that the first time the command is run, it is not written
completely.
Is this a known fact? Has anyone any experience with this. If so, is 3.6.1
the answer to this problem?
Samba 3.6 does not include smbldap - smbldap is a separate project. See 
http://gna.org/projects/smbldap-tools


Cheers,

Jelmer
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] web based backend

2011-01-02 Thread Jelmer Vernooij
Hi Vaclav, Andrew, Matthieu,

On Fri, 2010-12-31 at 01:44 +0300, Matthieu Patou wrote:
> On 25/12/2010 17:04, Vaclav Klecanda wrote:
> > Hi Andrew,
> > my original idea was rather implement a separate project, not included into
> > samba4 source but rather above it. If there was  an unified way to provision
> > samba related things it would not be problem to build a provisioning above
> > the samba. No matter it is web based or whatever else. But it would require
> > that the provisioning will not change and is well documented.
> > I like python and django, so my original idea was to use this to implement
> > web based provisioning to samba.
While end-to-end testing of AJAX applications is not as easy as, say, a
command-line application, it is certainly not impossible. The previous
incarnation of SWAT2 had no tests whatsoever, and it could easily have
had a lot better test coverage. Its main worker functions, which didn't
involve any AJAXy bits at all, should have had tests, but we didn't have
the habit of unit testing our swat2 EJS code.

There are several frameworks that help in doing end to end testing. I
only have (mixed) experiences with Windmill, see
http://www.getwindmill.com/

> SWAT2 development is still active, it's ricardo (a samba's soc) who is 
> doing stuff on it.
He's doing a great job, and I think it deserves a bit more visibility.
It would be nice to make it a bit more easily installable (it should
be just a matter of unpacking a tar.gz in the right location, but isn't
at the moment).

Cheers,

Jelmer


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Upgrade to Alfa13

2010-10-03 Thread Jelmer Vernooij
On Sun, 2010-09-26 at 20:47 +0200, Michael Wood wrote:
> On 26 September 2010 04:21, Andrew Bartlett  wrote:
> > On Sat, 2010-09-25 at 11:29 -0700, Jelmer Vernooij wrote:
> >> On Sat, 2010-09-25 at 18:54 +0200, Michael Wood wrote:
> >> > On 22 September 2010 14:15, Konstantin Pobudzey <5836...@gmail.com> 
> >> > wrote:
> >> > > ( I'm using zipped package from ftp://us1.samba.org/pub/samba/samba4/ )
> >> > > Also size is smaller then previous released . Is it should like this ? 
> >> > > )
> >> > I think the previous releases also contained the Samba 3 source code,
> >> > while the alpha 13 tarball does not.
> >> They didn't contain the source3 directory either (at least alpha11
> >> didn't). We no longer have big generated configure and Makefile's, I
> >> suspect that explains at least part of the reduction in size.
> >
> > We also don't have the generated PIDL output in the Samba4 tarball (this
> > will still be provided for Samba3 tarballs).  That is probably
> > responsible for more of the size difference.
> 
> In howto4.txt, the "Step 2bis: recompile Samba4" section says to run:
> 
>   $ cd samba4/source
>   $ make clean
>   $ ./autogen.sh
>   $ ./configure
>   $ make idl_full
>   $ make
> 
> Is the "make idl_full" really necessary?  Also, with waf is the make
> clean still necessary?

That howto looks fairly outdated by now. Should we perhaps just import
the copy from the wiki into our source tree as part of the release
process? 

Cheers,

Jelmer


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Upgrade to Alfa13

2010-10-03 Thread Jelmer Vernooij
On Sat, 2010-09-25 at 18:54 +0200, Michael Wood wrote:
> On 22 September 2010 14:15, Konstantin Pobudzey <5836...@gmail.com> wrote:
> > ( I'm using zipped package from ftp://us1.samba.org/pub/samba/samba4/ )
> > Also size is smaller then previous released . Is it should like this ? )
> I think the previous releases also contained the Samba 3 source code,
> while the alpha 13 tarball does not.
They didn't contain the source3 directory either (at least alpha11
didn't). We no longer have big generated configure and Makefile's, I
suspect that explains at least part of the reduction in size.

Cheers,

Jelmer


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] install samba 4 alpha13 on centos 5.5 make error

2010-09-30 Thread Jelmer Vernooij
On Thu, 2010-09-30 at 16:15 +0200, Daniel Müller wrote:
> downloaded  alpha13, did:
> ./autogen.sh
> This result in:
> [r...@node1 source4]# ./autogen.sh
> Setting up for waf build
> done. Now run ./configure or ./configure.developer then make.
> 
> ./configure.devloper ←ok
> Then:
> Make
> Error: data.mk:1881: *** Befehle beginnen vor dem ersten Ziel.  Schluss.
> Make does nothing?!
> Any idea1?
This doesn't seem right. You must still have some old makefile around,
we don't use data.mk anymore. Did you do a clean checkout, or use the
tarball?

Cheers,

jelmer
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] samba4 phyton-dns error

2010-07-24 Thread Jelmer Vernooij
On Thu, 2010-07-22 at 12:35 +0200, Michael Wood wrote:
> On 22 July 2010 10:49, Daniel Müller  wrote:

> > I compiled Samba 4.0.0alpha12 successful on my centos 5.5 box.
> [...]
> > Traceback (most recent call last):
> >   File "/usr/sbin/samba_dnsupdate", line 40, in ?
> > samba.ensure_external_module("dns", "dnspython")
> >   File "/usr/local/samba/lib/python2.4/site-packages/samba/__init__.py",
> > line 321, in ensure_external_module
> > sys.modules[modulename] = __import__(
> > TypeError: __import__() takes no keyword arguments
> [...]
> 
> I see you are using Python 2.4.
> 
> It seems that samba_dnsupdate needs Python 2.5:
> 
> http://docs.python.org/library/functions.html#__import__
> 
> "[...] Changed in version 2.5: Keyword support for parameters was added."
> 
> Perhaps the Samba4 HOWTO should be updated to state this requirement.
We should just avoid using keyword arguments there...

Cheers,

Jelmer


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] gsoc

2010-03-31 Thread Jelmer Vernooij
Hi Vikash,

On Wed, 2010-03-31 at 15:39 +0530, vikash agrawal wrote:
> Sir, i am new to gsoc and is was interested on projects like
> 
> Extension of the GTK+ frontends
> Create GUI or command-line tools for displaying /proc/fs/cifs
> statistics and and mount/session status

> Can you just help me out on these in an elaborate way
I'm happy to help but your request is quite vague. Can you please ask
more a specific question?

Cheers,

Jelmer



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] samba4 and ncacn_http

2009-11-09 Thread Jelmer Vernooij
Hi,

On Mon, Nov 09, 2009 at 05:58:48PM +0200, CB wrote:
> I've seen several posts on the expected samba4 ncacn_http support.
> Can you please share information on the status and ETA of ncacn_http
> support?
There is a branch with some initial work on git.samba.org, but it's against 
an older version of Samba 4 so I doubt it's of much use anymore. I'm not 
acitvely working on ncacn_http support at the moment.

Chers,

Jelmer
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Re: TOSHARG-DomainMember.xml translate finish and some bug found

2009-07-06 Thread Jelmer Vernooij
Hi,

OPC oota wrote:
> Now, TOSHARG-DomainMember.xml translate to Japanese finished.
>
> and Some bug found.
>
> 
> Server Manager Account Machine Account Management
>   ---Domain?
> 
> From the menu select Computer.
> 
>
> When the user elects to make the client a domain member, Windows 200x 
> prompts for
> an account and password that has privileges to create  machine 
> accounts in the domain.
> A Samba administrator account (i.e., a Samba account that has 
> root privileges on the
> Samba server) must be entered here; the operation will fail if an 
> ordinary user
> account is given.
>
> ---> Can user who have SeMachineAccountPrivilege rights  join machine ?
>   
I'm not sure how this works in Samba 3 actually, hopefully somebody else
knows.
> 
> ADS
> SRV records
> DNS zon
> ---zone?
>   
Fixed.
> Kerberos
> Create the Computer Account
> Testing Server Setup
> 
>-why null?
>   
Thanks, fixed.
> If all you want is Kerberos support in &smbclient;, then you can skip 
> directly to 
>
> kinit
> rights
> You need to log in to the domain using kinit
> ---
> login ?
> 
> USERNAME@REALM.
> USERNAME must be a user who has rights to 
> add a machine to the domain.
> 
>
>   
Similar to the previous chapter, I think "log in" is also valid.

Cheers,

Jelmer
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] TOSHARG-BDC.xml translate finish and some bug found

2009-06-19 Thread Jelmer Vernooij
On Fri, Jun 19, 2009 at 11:19:58AM +0900, OPC oota wrote:
> Samba-3 can act as a Backup Domain Controller (BDC) to another Samba Primary 
> Domain Controller (PDC). A
> Samba-3 PDC can operate with an LDAP account backend. The LDAP backend can be 
> either a common master LDAP
> server or a slave server. The use of a slave LDAP server has the benefit that 
> when the master is down, clients
> may still be able to log onto the network.  This effectively gives Samba a 
> high degree of scalability and is
>  -
>  logon to?
> an effective solution for large organizations. If you use an LDAP slave 
> server for a PDC, you will need to

> Whenever a user logs into a Windows NT4/200x/XP Professional workstation,
> - log onto? or logon to? 
>   (login -> unix  ,logon -> windows?)
> the workstation connects to a domain controller (authentication server) to 
> validate that
> the username and password the user entered are valid. If the information 
> entered
Afaik "logon to" is correct as well, but I'm not a native speaker.
John?

> The domain SID has to be the same on the PDC and the BDC. In Samba versions 
> pre-2.2.5, the domain SID was
> stored in the file private/MACHINE.SID.  For all 
> versions of Samba released since 2.2.5
> the domain SID is stored in the file 
> private/secrets.tdb. This file is unique to each
> server and cannot be copied from a PDC to a BDC; the BDC will generate a new 
> SID at startup. It will overwrite
> the PDC domain SID with the newly created BDC SID.  There is a procedure that 
> will allow the BDC to aquire the
>   
>   --
>       
>   acquire?
> domain SID. This is described here.
Thanks, fixed.

Cheers,

Jelmer


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Failed to join domain

2008-11-21 Thread Jelmer Jaarsma
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Thomas,


Thomas Sondag wrote:
> I would like to know how and why this server have been chosen, and If
> I could restrict the join on the DC01 server ?

No idea how the selection proces works, but by specifying -S DC01 you
can force it to DC01 if I'm not mistaken.
Regards,

Jelmer Jaarsma
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkkmxH8ACgkQ3bV1+S5veEjECgCfYfHK6kTpVUxIcW4MH93GMAMm
64kAmwWbNujQu4KnueaRJMU/nSf1KaD0
=a9ac
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba, Solaris, Windows 2008 - Kerberos Guess Realm Wrong?

2008-11-19 Thread Jelmer Jaarsma
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Paul,

I just wanted to state that I am seeing this issue as well. Haven't
tried your hack yet but I plan to if a better solution won't be
provided. Thanks for reporting this to the list!

Jelmer Jaarsma

Paul Sobey wrote:
> 
> On Wed, 12 Nov 2008, Paul Sobey wrote:
> 
>> On Wed, 5 Nov 2008, Paul Sobey wrote:
>>
>>> I've just built Samba 3.2.4 on Solaris 10, with ADS support. Domain join to
>>> a Windows 2008 domain works perfectly, having pre-created the servername in
>>> the appropriate OU.
>>>
>>> In my winbind logs, I see the following (domain name obfuscated):
>>> [2008/11/05 11:28:06,  2]
>>> libsmb/cliconnect.c:cli_session_setup_kerberos(619)
>>>  Doing kerberos session setup
>>>
>>> [2008/11/05 11:28:06,  1] libsmb/clikrb5.c:ads_krb5_mk_req(680)
>>>  ads_krb5_mk_req: krb5_get_credentials failed for [EMAIL PROTECTED] (Cannot
>>> resolve network address for KDC in requested realm)
>>>
>>> [2008/11/05 11:28:06,  1]
>>> libsmb/cliconnect.c:cli_session_setup_kerberos(626)
>>>  cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot resolve
>>> network address for KDC in requested realm
>>>
>>> The realm is guessed wrongly - only the short name of the domain, rather
>>> than the fully qualified realm name, as specified in krb5.conf.
>>>
>>> My AD full name is foo.bar.com, short name FOO. My question is - when
>>> guessing the principal for the target DC, why does Samba guess 'FOO',
>>> rather than 'FOO.BAR.COM'? I have a Linux machine joined to the same domain
>>> running 3.0.28 which correctly guesses the realm.
>> Not sure whether this helps diagnose, but I just upgraded my Linux desktop to
>> Samba 3.2.4 and now get exactly the same error - winbind is refusing to
>> authenticate me at all. In my pam.conf I have krb5_auth set to try and make
>> winbind authenticate my via kerberos.
>>
>> How can I troubleshoot this? It seems Samba 3.2.4 gets the Kerberos realm
>> wrong when authenticating against Windows 2008. I thought it was a Solaris
>> issue before but it seems to be OS independent. Is anybody else seeing it?
> 
> Not sure whether this helps anybody, but by patching the source of
> libsmb/cliconnect.c with the following, ie hard coding the proper name of
> the Kerberos realm, the error goes away.
> 
> 893a894
>>   DEBUG(3,("cli_session_setup_spnego:
> dest_realm is %s\n", dest_realm));
> 895a897,900
>>   DEBUG(3,("cli_session_setup_spnego:
> hacking realm!\n", dest_realm));
>>   realm = SMB_STRDUP("FOO.BAR.COM");
>>   strupper_m(realm);
>>   DEBUG(3,("cli_session_setup_spnego: realm
> is now %s\n", realm));
> 896a902
>>   DEBUG(3,("cli_session_setup_spnego:
> getting realm from cache\n", realm));
> 
> To reiterate - under 3.2.4 code, 'realm' gets set to 'FOO', rather than
> 'FOO.BAR.COM'.
> 
> Difference in winbind logs:
> 
> Bad version:
> 
> [2008/11/12 15:49:17,  3]
> libsmb/cliconnect.c:cli_session_setup_spnego(839)
>got [EMAIL PROTECTED]
> 
> [2008/11/12 15:49:17,  3]
> libsmb/cliconnect.c:cli_session_setup_spnego(880)
>cli_session_setup_spnego: got a bad server principal, trying to guess
> ...
> 
> [2008/11/12 15:49:17,  3]
> libsmb/cliconnect.c:cli_session_setup_spnego(908)
>cli_session_setup_spnego: guessed server
> [EMAIL PROTECTED]
> 
> [2008/11/12 15:49:17,  2]
> libsmb/cliconnect.c:cli_session_setup_kerberos(619)
>Doing kerberos session setup
> 
> [2008/11/12 15:49:17,  1] libsmb/clikrb5.c:ads_krb5_mk_req(680)
>ads_krb5_mk_req: krb5_get_credentials failed for [EMAIL PROTECTED]
>(Cannot resolve network address for KDC in requested realm)
> 
> [2008/11/12 15:49:17, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(626)
>cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot
> resolve network address for KDC in requested realm
> 
> [2008/11/12 15:49:17, 4] winbindd/winbindd_cm.c:cm_prepare_connection(843)
>failed kerberos session setup with Cannot resolve network address for
> KDC in requested realm
> 
> [2008/11/12 15:49:17,  3]
> libsmb/cliconnect.c:cli_session_setup_spnego(804)
>Doing spnego session setup (blob length=124)
> 
> Hacked version:
> 
> [2008/11/12 18:23:55,  3]
> libsmb/cliconnect.c:cli_sessi

[Samba] regression in 3.2.4? Homedir not retrieved with idmap_ad backend

2008-11-06 Thread Jelmer Jaarsma
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi,

I'm currently running Ubuntu Intrepid and I'm testing Samba (winbind
specifically) with our Active Directory.
Our AD schema has been extended with the proper fields for storing
rfc2307 information.

Short explanation:

With Samba 3.2.3 the homedir fields are properly being read from the AD,
with Samba 3.2.4 they are not, the values returned by "wbinfo -i "
and/or "getent passwd" will have the format of /home/%D/%U, which is the
default for the "template homedir" setting which I have *not* specified
in my smb.conf. A workaround for me currently is to specify the
"template homedir" setting with the correct format in smb.conf.

More detailed info:

When I'm using the samba-3.2.3 package currently in Ubuntu Intrepid
everything is working properly, except that Winbind keeps on
segfaulting. I believe it is related to the fact that we have users and
groups who do NOT have the RFC2307 fields filled. This specific bug was
fixed in Samba 3.2.4 (and I've filed a bug at Ubuntu for it).

Since Ubuntu is currently not shipping a samba 3.2.4 package I took the
package sources from Debian unstable and recompiled those on Intrepid.
Since the samba-3.2.3 package from Ubuntu had been synched with Debian I
doubt that this is much of a problem.

So just to be clear about this, I'm comparing the Ubuntu
2:3.2.3-1ubuntu3 package to the Debian 2:3.2.4-1 package.

You will find my smb.conf attached below.
Kind regards,

Jelmer Jaarsma



My smb.conf:

[global]
workgroup = KA
realm = KA.SARA.NL
server string = %h server (Samba, Ubuntu)
security = ADS
map to guest = Bad User
obey pam restrictions = Yes
disable netbios = yes
passdb backend = tdbsam
pam password change = Yes
use kerberos keytab = Yes
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
usershare allow guests = Yes
panic action = /usr/share/samba/panic-action %d
idmap backend = ad
idmap uid = 1-2
idmap gid = 1-2
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind nss info = rfc2307
winbind offline logon = true
winbind refresh tickets = true
winbind expand groups = 10
auth methods = winbind
log level = 0 winbind:5
debug class = yes
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkkSxyAACgkQ3bV1+S5veEiMeQCeOgM+uE92U2VU8zoTO6bnBWQ3
IYMAoJNL5F/Vbnf5BTSFa76JpvSfOp11
=cB+a
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Strange problems with Samba 3.0.32 as ADS member of W2k3 domain

2008-10-29 Thread Jelmer Jaarsma
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Masopust, Christian wrote:
> hello,
> 
> i've some strange problems with my samba-servers acting as domain-member
> (ADS) in a W2k3 active directory.
> 
> we have 3 DCs here and running samba without specifying a dedicated "password 
> server"
> doesn't work!  the 3 DCs have the following roles:
> 
> - DC1: PDC-emulator, has global catalog
> - DC2: RID-master, infrastructure-master, no global catalog
> - DC3: no special role, has global catalog

Have DC1 and DC2 been upgraded to Windows Server 2008 by any chance? I
had similar problems. Machines that had already been joined worked fine
but new machines had to be joined to the domain by specifying a DC that
was still running W2k3.
Upgrading to Samba 3.2 fixed those problems.
Regards,

Jelmer Jaarsma
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkkIanYACgkQ3bV1+S5veEjCBACeNDiFDMmcG+iIFplgMuSWh4ur
pO0An0ULYJn66eZ3JBCduuuhWj/pDtvZ
=NcM1
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdc

2008-10-27 Thread Jelmer Jaarsma
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Steven Geerts wrote:
> I think your mixing with netbios name.
> 
> How do you specify otherwise whether your domain is .com or .be, or ...

In the case of Active Directory you do so by specifying the "realm"
option in your smb.conf, the workgroup parameter should be filled with
the netbios representation of your domain.
Regards,

Jelmer Jaarsma
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkkFk/kACgkQ3bV1+S5veEi5lwCeIXBM701QwpmAkfyqfVpVulcr
9XAAnRdsOxTUU6AJDBDdNjTdmxQcQr/o
=klAC
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.2 experiences

2008-07-24 Thread Jelmer Jaarsma
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello,

I've been trying to get Samba 3.2 to work in the past few days, and I'm
running into a few problems which I have been unable to solve myself.

My first problem isn't blocking for me, but it seems not consistent with
documentation. I can't join my server using a domain admin's kerberos
ticket. I need to specify "-U ) I get an error
telling me that it failed to create the Kerberos keytab. If I run a
testjoin after that it tells me everything is okay :-)
Output of a "net ads join -d3" and a listing of the created keytab over
here: http://pastebin.org/56716

So far I've assumed that the error about not being able to join the
domain is bogus, since everything appears to be working. A "wbinfo -u"
returns all users it ought to report.
However, I can't get the nss details from the trusted domain. It's
working awesome for the primary domain though (where the Samba machine
is in itself). What am I doing wrong here? Please see my smb.conf linked
at the bottom.

I hope I'm providing enough information, if not, please let me know and
I'll provide whatever is needed

Thanks in advance,

Jelmer Jaarsma

== Configuration details ==

I'm using Ubuntu Hardy 8.04 with the package from the Intrepid
repository (which is synched with Debian), currently at version
3.2.0-4ubuntu1. I also build the package for libtalloc1 from Intrepid
(version 1.2.0~git20080616-1) which is Jelmer Vernooij's package)

My smb.conf: http://pastebin.org/56705
My krb5.conf: http://pastebin.org/56707

Our Windows environment exists of w2k8 servers, running in w2k3 native
mode. We have 4 domains in total with some trusts in between them, the
domains are: KA, VANCIS, PROJECTS and VPROJECTS.

KA and VANCIS trust eachother
KA and PROJECTS trust eachother
VANCIS and VPROJECTS trust eachother

All trusts are 2-way, non-transitive

The schema for the KA and VANCIS domains have been extended with the
rfc2307 schema and for the relevent users and groups the details have
been filled in.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIiJHr3bV1+S5veEgRAoiFAJ0TfmZv5uwrOz6gvnt67PJMm8P/GACeKr1h
ltB8xrScx7MEgzbHaRzHlLM=
=zW/2
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.2 experiences

2008-07-24 Thread Jelmer Jaarsma
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Doh, I forgot 1 important thing in my story, the log entries produced in
log.winbindd when I do a "getent passwd":

For each user in 1 of the trusted domains, an entry like this is logged:

[2008/07/24 17:07:21,  1] winbindd/winbindd_user.c:winbindd_getpwent(766)
  could not lookup domain user jelmeradmin


Once again, all rfc2307 fields are present in the trusted domain
(VANCIS), nss lookups using libnss-ldap function properly, but I would
like it to be handled with winbind.

Regards,

Jelmer Jaarsma
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIiJuH3bV1+S5veEgRAjiAAJ9KZPvhgZcC+/vacLYEHGiWmhfehgCfRbSp
/tGTY04sRTIdy71tjlwIOVM=
=uTFU
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Pkg-samba-maint] [Samba] Binary_Packages/Debian

2007-05-31 Thread Jelmer Vernooij
Christian Perrier wrote:
> All this should make both packaging styles to converge together and,
> ideally, the DEB files published on samba.org could then be simple
> backports of the packages in Debian unstable.
> 
> The major obstacle to this are the patches we use. Just after SambaXP,
> I and Steve Langasek examined all of them and commented them. Several
> are marked "forward upstream" so it's just a matter of time for us to
> recover from the recent security fixes/release hype (and the
> associated bug reports mini-flood) and come back at you discussing
> about these patches.
I've committed most that were marked as "forward upstream" a couple of
weeks ago, except for the famous "fix FHS" one and some smbfs stuff.

Cheers,

Jelmer
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: How to add CIFS Server to a Windows domain as a member

2007-05-17 Thread Jelmer Vernooij
Dear mjwang,

Please ask generic Samba questions on the user email list
([EMAIL PROTECTED]). See https://lists.samba.org/mailman/listinfo/samba
for more information.

Kind regards,

Jelmer Vernooij

mjwang wrote:
> Mr Vernooij:
> 
>  I'm sorry to send this mail to your JABBER mailbox
> 
>  Here is the question:
> 
>  In our company we use ADS on Windows 2000 server as PDC and now I
> want to setup a Samba Server and add it to the domain.
> 
>  So I run the following cmd:
> 
>  # net ads join -W  -S  -U
> administrator
> 
>  Then it prompted me to input the password and I did, after that it
> output the following errors:
> 
>  
> 
>  [2007/05/16 20:50:20, 0] libads/kerberos.c:ads_kinit_password(146)
> 
>kerberos_kinit_password [EMAIL PROTECTED] failed:
> Can't open
> 
> /find Kerberos configuration file
> 
> [2007/05/16 20:50:20, 0] utils/net_ads.c:ads_startup(191)
> 
>ads_connect: Can't open/find Kerberos configuration file
> 
>  
> 
>  
> 
>  
> 
> So
> 
>  
> 
> Question 1: Why did that happen? Is it the problem of our PDC? Any advice?
> 
>  
> 
> Question 2: If I succeed, what does this command actually do? I've read the
> manual page about it written by you but I'm sorry that I didn't get it.
> 
>  
> 
> I'll very appreciate if you reply
> 
>   Best regards
> 
>  Jay
> 
>  2007-5-17
> 
> 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: psexec for Linux and svcctl.idl changes

2006-07-06 Thread Jelmer Vernooij
On Thu, 2006-07-06 at 10:10 -0700, Jeremy Allison wrote:
> On Thu, Jul 06, 2006 at 06:44:18PM +0200, Tomasz Chmielewski wrote:
> > Jeremy Allison wrote:
> > 
> > (...)
> > 
> > >>I'm sending this also to samba list, this tool has been very often 
> > >>requested on various Samba groups.
> > >
> > >Tomasz, can you please post this patch to the samba-technical
> > >list rather than leaving it on a web page. That way it's unambiguous
> > >that you want to donate it to Samba under the GPL.
> > 
> > I meant (sending) the announcement (to samba list), because originally 
> > it was only sent to samba-technical.
> > 
> > The author (Andrzej Hajda) sent the patch to samba-technical already:
> > 
> > http://lists.samba.org/archive/samba-technical/2006-June/047847.html
> > http://lists.samba.org/archive/samba-technical/2006-June/047848.html
> 
> No, he sent a link to his web page to Samba technical already.
> I haven't seen the patch on samba-technical, that's what we need
> to see in order to be able to accept it.
He did send the diff to the IDL file, which I've just applied. 

However, I'm not too keen on putting in the winexe patch (at least not
in the current state.. I think linking a Windows binary into Samba is a
very very bad idea. 

Also, there are also other minor issues:

 * Code style
 * Use of // for comments
 * Use of manually written prototypes in the C files
 * Use of direct headers (, etc) instead of 
 * CamelCasing
 * The Windows code should (imho) go in some different place
 * Even /if/ we did think including a .exe in Samba was ok, 'winexe'
should be made optional because we don't want to require people to
install MSVC in order to build Samba.

Cheers,

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://samba.org/~jelmer/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 4.0 compilation problem

2006-04-18 Thread Jelmer Vernooij
On Fri, 2006-04-14 at 13:38 -0700, jasmine mary wrote:
> Thank u Jelmer ..It started to compile once i updated with the new release of
> GCC(3.4.2). But still it is giving errors. Please help me out of this.


> Compiling heimdal/lib/vers/print_version.c with host compiler
> In file included from heimdal_build/roken.h:7,
>  from heimdal/lib/vers/print_version.c:38:
> ./heimdal/lib/roken/roken.h:556: error: conflicting types for 'gai_strerror'
> /usr/include/netdb.h:307: error: previous declaration of 'gai_strerror' was
> here
> ./heimdal/lib/roken/roken.h:556: error: conflicting types for 'gai_strerror'
> /usr/include/netdb.h:307: error: previous declaration of 'gai_strerror' was
> here
> Compiling heimdal/lib/asn1/main.c with host compiler
> In file included from heimdal_build/roken.h:7,
>  from heimdal/lib/asn1/gen_locl.h:51,
>  from heimdal/lib/asn1/main.c:34:
> ./heimdal/lib/roken/roken.h:556: error: conflicting types for 'gai_strerror'
> /usr/include/netdb.h:307: error: previous declaration of 'gai_strerror' was
> here
> ./heimdal/lib/roken/roken.h:556: error: conflicting types for 'gai_strerror'
> /usr/include/netdb.h:307: error: previous declaration of 'gai_strerror' was
> here
Can you send me your config.log file? It'll be hard to figure out why
this is being caused without it.

> Building heimdal/lib/asn1/lex.l with lex
> "lex.l":line 295: Error: Too many positions
> Try using %p num
> Generating dependencies for heimdal/lib/asn1/lex.c
> gcc: heimdal/lib/asn1/lex.c: No such file or directory
> gcc: no input files
Which version of Samba4 are you running? If this is TP2, please upgrade
to a recent version from SVN, in which this bug has been fixed.

Are you sure you want to run Samba4 and not Samba3 instead? Samba 4 is
far from being ready for production use. 

Cheers,

Jelemr


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 4.0 compilation problem

2006-04-12 Thread Jelmer Vernooij
On Mon, 2006-04-10 at 08:53 -0700, jasmine mary wrote:
> I am compiling the Samba4.0 which provides built in AD support. I compiled
> it successfully by using the command configure.When i was issuing the make
> proto all, i am getting the following error.
> 
> # make proto all
> Compiling heimdal/lib/asn1/main.c with host compiler
> In file included from heimdal_build/roken.h:7,
>  from heimdal/lib/asn1/gen_locl.h:51,
>  from heimdal/lib/asn1/main.c:34:
> heimdal/lib/roken/roken.h:556: conflicting types for `gai_strerror'
> /usr/include/netdb.h:307: previous declaration of `gai_strerror'
> *** Error code 1
> make: Fatal error: Command failed for target `heimdal/lib/asn1/main.ho'

Can you please attach the generated config.log file?

> # echo $PATH
> /usr/local/bin/:/usr/local/doc/:/usr/ccs/bin/:/usr/share/lib/:/usr/sbin:/usr/bin
> 
> Path is set to gcc and make commands.
> 
> GCC version is 2.95.2. Solaris version is 8.
I'm not sure whether GCC 2.95 will be able to compile Samba 4 because of
missing features. 

Cheers,

Jelmer
--
Jelmer Vernooij <[EMAIL PROTECTED]> http://samba.org/~jelmer/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Migrate tdbsam to LDAP - issues?

2005-09-28 Thread Jelmer Vernooij
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Paul Smith wrote:

> I currently have a pure samba domain running off a Suse 9.1
> machine. When I installed this domain I wasn't really comfortable
> with linux or LDAP so I used a tdbsam password file, and as there
> are only 30 or so users it seemed the way to go in the small amount
> of time I had available.
>
> Well, now I want to add a BDC to the mix I find I need to move to
> an LDAP backend. I only have two boxes at my disposal so I'm
> hoping I can run Samba PDC and master LDAP on one and Samba BDC and
> slave LDAP on the other.
>
> I figure I should set up the second box as a master LDAP, transfer
> the accounts from the original box, then I can start afresh with
> the old machine and make it into a BDC/slave LDAP.
>
> Is that even possible? Has anyone done this, and did you run into
> any issues?

Have a look at the 'pdbedit' manpage, specifically the "-i" and "-e"
options.

Cheers,

Jelmer

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDOsP3Pa9Uoh7vUnYRAoUTAJ4q6Tp+158UsKTrA/y5p8/V/nBUnACffb4E
DBR7IJYdPHCoSlAE6BCk4bQ=
=RCoG
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdb_mysql, pdb_pgsql and pdb_xml modules: request for maintainer

2005-09-24 Thread Jelmer Vernooij
Hi Martin,

On Sat, Sep 24, 2005 at 05:26:28PM +0200, MARTIN Pierre wrote about 'Re: 
[Samba] pdb_mysql,?pdb_pgsql and pdb_xml modules: request for maintainer':
> I am actually compiling version 3.0.11 since Collen told me it was a 
> good choice for these PDB compilation issues (and i will keep people 
> informed on what i have done if it works).

> About the mysql compilation problem, i don't think you should 
> discontinue it, i bet many users are using it for convenience purpose, 
> having a little network with many shares makes useless deployment of a 
> big thing as LDAP, and is really easy to get some mysql DB accounts. 
Rather then discontinuing these modules, I'm trying to hand them over
to somebody else who has sufficient time and actually uses the
modules. That way the modules will hopefully be better maintained. See
one of the other emails in this thread for details.

> I 
> am used to do the same with my QMail or VSFTP installation (From source 
> either, just because it was easyier to set up this kind of account 
> storage method).
For a small number of users (everything below a 1000 users, probably?)
there's really no need for using SQL instead of tdbsam.

> If i can't sove the problem directly from the samba package (the 
> compilation process is too much complex for me, i'm a c++ developper but 
> i never do big projects  :-( ) so if i you discontinue the samba+pdb 
> modules bundles, i will manage to make a tutorial on how to make them 
> work...
Please contact whomever will be taking over pdb_mysql if you have
additional docs; if you think there is a bug in the pdb_mysql module, file a 
bug on http://bugzilla.samba.org/.

> In advance, excuse my bad english since it is not my kernel language  
> :-) , and keep in touch if i have time to help!
No worries, as long as we understand each other :-)

Cheers,

Jelmer

> Jelmer Vernooij wrote:

> >-BEGIN PGP SIGNED MESSAGE-
> >Hash: SHA1

> >Hi!

> >The experimental pdb modules (pdb_mysql, pdb_pgsql and pdb_xml) have
> >been a bit neglected during the last few releases of Samba 3 as they
> >haven't been actively maintained. I was the original author and
> >maintainer, but I no longer work on Samba 3 and I no longer use any of
> >the modules in production.

> >I'll remove these modules unless somebody steps up as a maintainer. If
> >there's anyone willing to take over maintainance of either one of
> >these modules, please let me know. Otherwise, I'll put the modules up
> >on my samba.org homepage as a separate tarball for those interested
> >(including some of the patches that have been published).

> >Cheers,

> >Jelmer
> >-BEGIN PGP SIGNATURE-
> >Version: GnuPG v1.4.1 (GNU/Linux)

> >iD8DBQFDND9jPa9Uoh7vUnYRApXaAJsE+Zz2kn83jDOQ0BnOrbVfkvRTXACglGIG
> >6w/LFEbti8VrtM3tY83Ofe0=
> >=9L5h
> >-END PGP SIGNATURE-




-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
OSS Contributions in the last day: 



signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] pdb_mysql, pdb_pgsql and pdb_xml modules: request for maintainer

2005-09-23 Thread Jelmer Vernooij
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi!

The experimental pdb modules (pdb_mysql, pdb_pgsql and pdb_xml) have
been a bit neglected during the last few releases of Samba 3 as they
haven't been actively maintained. I was the original author and
maintainer, but I no longer work on Samba 3 and I no longer use any of
the modules in production.

I'll remove these modules unless somebody steps up as a maintainer. If
there's anyone willing to take over maintainance of either one of
these modules, please let me know. Otherwise, I'll put the modules up
on my samba.org homepage as a separate tarball for those interested
(including some of the patches that have been published).

Cheers,

Jelmer
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDND9jPa9Uoh7vUnYRApXaAJsE+Zz2kn83jDOQ0BnOrbVfkvRTXACglGIG
6w/LFEbti8VrtM3tY83Ofe0=
=9L5h
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba PDC, ldap or mysql????

2005-08-25 Thread Jelmer Vernooij
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Mark,

Mark Nehemiah wrote:

> I'd really like to understand the advantages/disadvantages of ldap
> vs mysql for backend. Would like our other *windows admins* to be
> able to add users,machines,groups etc. easily.
>
> I think I'd like best to store in mysql, but want to know if
> there's any functionality I'll miss using mysql instead of ldap.
> seems ldap for backend has been around a while.

The MySQL backend is currently still experimental. It's broken in
3.0.14a and 3.0.20, but we're working on fixing it. It also doesn't
have support for group mapping support (yet). If you have no specific
reasons for going with MySQL (such as already having another user
database in MySQL), I'd advice going with LDAP.

Cheers,

Jelmer
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDDfl4Pa9Uoh7vUnYRAhzDAJ0cu99+Gd5imtaD/mQYmKDPTodJhgCfV/DC
T04yucwBhFdYCY4wOixo3sM=
=Wo5G
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 4

2005-08-25 Thread Jelmer Vernooij
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Farkas Levente wrote:

> Gerald (Jerry) Carter wrote:
>
>> Farkas Levente wrote:
>>
>>> Gerald (Jerry) Carter wrote:
>>>
>>>> Samba 4 does include its own LDAP Directory service and
>>>> Heimdal based KDC. The reasons for this are to get a working
>>>> implementation up and running. Later efforts will probably
>>>> focus more on integration of other 3rd party pieces
>>>
>>>
>>> this means, that samba4 has it's own build in ldap server which
>>> is neither OpenLDAP nor Fedora Directory Server?
>>
>>
>>
>> Yes. Written from scratch.
>
> this seems to me a bit of waste of resources:-(

There is a good reason for this: AD clients expect non-standard
behaviour from their LDAP server, so we can't just use OpenLDAP. The
Samba4 LDAP server can function pass thru requests to any other
standards-compliant LDAP server.

Cheers,

Jelmer
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDDfO1Pa9Uoh7vUnYRArGJAJ9EoDFqI4JgkVHOPi+E5doEQ5TlKQCdFTJn
rfAFUCEKpvgO6UhnFy60EdE=
=arv+
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] MySQL/Postgres pdb: cannot add new users

2005-08-22 Thread Jelmer Vernooij
Hi Jerry, Florian,

On Mon, Aug 22, 2005 at 07:37:11AM -0500, Gerald (Jerry) Carter wrote about 
'Re: [Samba] MySQL/Postgres pdb: cannot add new users':
> Florian Effenberger wrote:
> | In 3.0.14a it was possible to copy pdb_sql.c and
> | pdb_mysql.c from 3.0.11 and it worked, but this workaround
> | does not help anymore, as the files seem to be incompatible.
> |
> | Jelmer, could you please have a look at this one? I
> | consider this being very important. I can help you
> | debug and test this, but as I am not a programmer,
> | I need your help to get it fixed.
> |
> | If everyone else has an idea on how to fix that, please
> | let me know and I'll test it!
> Jelmer,

> At the CIFS conference you indicated that you would like
> to transition the pdb_mysql module to another owner.
> You still feel like that?  If so, I'll start looking for
> a new maintainer.
Well, I'd be happy to keep maintaining it (just keeping it working), 
but if there's somebody stepping up who's willing to take over, that'd 
probably be better. I no longer have a production 
system that uses pdb_mysql so my testing is pretty ad-hoc.

I'll have a look at the 3.0.20 bugs later this week (most likely on
wednesday).

Cheers,

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Profiles tool doesn't write changes!

2005-06-08 Thread Jelmer Vernooij

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Gerald (Jerry) Carter wrote:

| Misty Stanley-Jones wrote:
|
| | It does not work with profiles created in XP and newer.
|
| Really ?  Strange.  Should be the same regf file format.
Have you tried reading NTUSER.DAT files using your registry library?

AFAIK, there are at least three different registry formats:

- - CREG (used by Win9x)
- - regf (used by NT4, Win2k)
- - winxp (used by Windows XP for some registry hives; it still uses the
Win2k format for the others)

HKEY_CURRENT_USER might be living in the new format, though I have
never looked at a NTUSER.DAT file from XP. I also don't know how
different the XP format is from the NT4/Win2k one.
Cheers,

Jelmer
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCp1esPa9Uoh7vUnYRAo8oAJ4h4SI6A1QFTA9qS/p0jX1LwzNhrACeO3q7
nBiLsNst1YZd/tijRZtx5Wo=
=rStU
-END PGP SIGNATURE-

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Unwanted MySQL logging

2005-01-16 Thread Jelmer Vernooij
Hi,

On Mon, Jan 17, 2005 at 12:03:03AM +0100, Simon A. F. Lund wrote about '[Samba] 
Unwanted MySQL logging':
> I'm running samba 3.0.10 as a PDC with users stored in MySQL on FreeBSD 
> 5.3. And it works great. But i have one litte hickup.

> My samba logs are getting flooded with entries like this on:

> "Connecting to database server, host: localhost, user: XXX, password: 
> XXX, database: auth, port: 3306"

> Containing the actual mysql username/password, it logs this everytime 
> samba does a mysql query. Needlees to say i do not want samba to do 
> this. But my problem is i do not know how to stop this unwanted logging. 
> I've google'd and searched the mailinglist but have found no answers.
> I hope you will help me with this :)
I've fixed this issue in SVN, so it should be fixed in 3.0.11. 

In the mean time, please try setting "log level" to 0. 

Thanks for the bugreport,

Cheers,

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
OSS Contributions in the last 5 days: 
ctrlproxy: 72 %, samba: 27 %


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] pam auth with mysql

2005-01-15 Thread Jelmer Vernooij
Hi,

On Sat, Jan 15, 2005 at 12:06:05PM +0100, Lukas Pataki wrote about '[Samba] pam 
auth with mysql':
> [EMAIL PROTECTED] common-auth
> [EMAIL PROTECTED] common-account
> [EMAIL PROTECTED] common-session
> auth requiredpam_mysql.so   user=root passwd=** db=samba table=users 
> usercolumn=login passwdcolumn=password crypt=1
> account  requiredpam_mysql.so   user=root passwd=**  db=samba table=users 
> usercolumn=login passwdcolumn=password crypt=1
> password requiredpam_mysql.so   user=root passwd=**  db=samba table=users 
> usercolumn=login passwdcolumn=password crypt=1
> session  requiredpam_mysql.so   user=root passwd=**  db=samba table=users 
> usercolumn=login passwdcolumn=password crypt=1

> i see that pam is doing the right mysq_query
> "SELECT password FROM users WHERE login='root'" 
> but  i alwas getting a an error:
> session setup failed: NT_STATUS_LOGON_FAILURE

> without the mysql_auth in pam samba is working fine.

> isn?t a solution for this?
PAM will not work for password validation when "encrypt passwords =
yes". You will have to use either a custom module in Samba (pdb_mysql)
or switch to storing your user info somewhere different (such as 
in LDAP).

Cheers,

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Samba-HOWTO-Collection/StandAloneServer.html#simplynice

2004-12-19 Thread Jelmer Vernooij
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Julius Junghans wrote:
| Jim C. wrote:
|
|> | After reading smb.conf the option "passdb backend = guest" looks wrong?
|> | guest isnt listed as a possibility in the manpage.
|> | Ive changed nothing in my passwd/smbpasswd file.
|> | Why is it not working?
|>
|> passdb backend tells samba where to find it's records.  You need to read
|> up on this.
|>
|> http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html
|>
|>
|> Jim C.
|> --
|> -
|> | I can be reached on the following Instant Messenger services: |
|> |---|
|> | MSN: j_c_llings @ hotmail.com  AIM: WyteLi0n  ICQ: 123291844  |
|> |---|
|> | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz|
|
|
|
| Yes, but reading the mentioned site doesnt helpguest still looks
| wrong :(
| there should be a password backend like tdbsam, ldapsam or mysqlsam.
| It makes no sense.
the 'guest' passdb backend doesn't have to be specified explicitly
anymore (Samba adds it if necessary), so I think using just 'passdb
backend = ' should suffice. Specifying 'guest' doesn't hurt though.
Cheers,
Jelmer
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBxc1MPa9Uoh7vUnYRArvxAJ9hBaNLbSVbjbT0yavUdDAukcDoYgCcCuNy
YTnlcQfLQxrSTlPNX/Fh4qU=
=O4na
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba and mysql backend

2004-11-04 Thread Jelmer Vernooij
Hi,

On Thu, Nov 04, 2004 at 03:54:26PM -0500, Frank Torontour wrote about '[Samba] samba 
and mysql backend':
>   Samba is able to connect to the database with no errors. I used
> mysql.dump to create the database. All went good at this part and the
> database looks ok. Then I used pdbedit to create a user called username.
> Now what is happening when I try to mount the drive from windows I get
> an error in the log:

> [2004/11/04 12:58:20, 0] smbd/service.c:make_connection(800)
>   mach5 (66.201.209.1) couldn't find service username

Do you have a [homes] service?

Cheers,

Jelmer


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] does SMB run over DCOM ?

2004-09-16 Thread Jelmer Vernooij
Hi,

On Thu, Sep 16, 2004 at 04:11:55PM +0100, Mario de Sousa wrote about '[Samba] does SMB 
run over DCOM ?':
>  OPC is a standard that specifies a collection of DCOM interfaces
> heavely used in the industrial automation domain.
> (http://www.opcfoundation.org)

>  I would like to access these OPC objects that run in Windows from Linux
> computers, using the DCOM framework.

>  Instead of implementing DCOM from scratch for Linux, I was considering
> 'stealing' some code off the SAMBA project relating to the DCOM rpc
> stuff.

>  Could anybody please confirm that SMB really does run over DCOM, in
> other words, does the SAMBA code include some kind of implementation of
> the DCOM protocols?
It is the other way around. DCOM runs over DCE/RPC, which /can/ run
over SMB. I have been working on an initial implementation of DCOM in
Samba4. It is still in the initial phase of development (some RPC
stuff is there), but let me know if you're interested in helping out.

Cheers,

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
My Samba bugs: 39


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] missing docs on smb.conf

2004-07-13 Thread Jelmer Vernooij
Hi David,

I've just fixed this in current SVN. Should be fixed on the web
(http://us1.samba.org/samba/docs/man/smb.conf.5.html) soon.

Cheers,

Jelmer

On Wed, 2004-07-14 at 00:27, David Bear wrote:
> trying to look at smb.conf reference and I get
> 
> ---
> EXPLANATION OF EACH PARAMETER
> 
> 
> --
> 
> anyone know where all parameters' info can be found?
> -- 
> David Bear
> phone:480-965-8257
> fax:  480-965-9189
> College of Public Programs/ASU
> Wilson Hall 232
> Tempe, AZ 85287-0803
>  "Beware the IP portfolio, everyone will be suspect of trespassing"

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Account desc mysql backend

2004-07-07 Thread Jelmer Vernooij
Collen Blijenberg  wrote:
Hiya Jelmer,
Well, when i make an account,from a win box (i think from linux also)
and fill in username, Fullname, and description..
the description field is left blank.. (in the sql base)
my smb.conf, is configured to just query the sql server.
so no extra field options...
i'm not sure, if that is the only field that is kept blank/not used.
 

Can you please send me the relevant parts of your smb.conf ?
Cheers,
Jelmer
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Account desc mysql backend

2004-07-01 Thread Jelmer Vernooij
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Collen,

On Thursday 24 June 2004 12:35, Collen Blijenberg  wrote:
> ehh, just a little remark/note for the mysql passwd backend users and
> developers...
>
> when adding a user, the 'account desc' field is NOT filled in..!
> when adding some text manualy, and doing pdbedit -v  the field
> showes up,
>
> so when reading from the passwdbackend, the fields are resolved, when
> writting too the passwdbackend , the description field (and maybe more
> important fields) are kept empty..!
What exactly do you mean? Changes to the description fields don't get written 
to the database? Or they don't get written when they're set to the default?
What is your configuration?

Thanks,

Cheers,

Jelmer


- -- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
My Samba bugs: 25 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFA5IYaPa9Uoh7vUnYRAmAHAJ9iuGfGnpIX4+kiOXzP0ETaKt42dACeOnWW
fPdDr2bo7hmegRAyIPBBOBo=
=OMvi
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] update sugestions..

2004-06-11 Thread Jelmer Vernooij
Collen Blijenberg  wrote:
Ehmmm, i would like to make some sugestions
for the new samba release..
the "hide files =" in the smb.conf is a [global]
parameter, wouldn't it be nice to make this
a [section] parameter...
(incase you have some hidden files/dirs in 1 share
and in an other the same file/dir names, witch should not be hidden)
 

"hide files" is actually already a share parameter. See the smb.conf(5) 
manpage and source/param/loadparm.c

and second, please please please make an option in pdbedit
so that U can set the user_must_change_passwd option... !
 

Please file a bugreport for this at htp://bugzilla.samba.org/
Cheers,
Jelmer
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] PDBEdit modules

2004-05-25 Thread Jelmer Vernooij
Hi,

On Tue, May 25, 2004 at 12:15:58PM -0400, Daniel Campbell wrote about '[Samba] PDBEdit 
modules':
> I am trying to run pdbedit with a samba server setup for ldap/ldaps and it
> comes back with no builtin support and then searches for modules.  Anyone
> have any idea where these modules can be found/downloaded?
These modules come with Samba, but you have to have them compiled in
at compile time. They're automatically compiled in if the LDAP
libraries are present.

Cheers,

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
OSS Contributions in the last 3 days: 
samba: 100 %
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] compiling editreg (was: read (and edit?) registry files on Linux)

2004-05-22 Thread Jelmer Vernooij
On Sat, May 22, 2004 at 01:18:48PM +0200, Mi wrote about 'Re: [Samba] compiling 
editreg (was: read (and edit?) registry files on Linux)':
> >> but it looks like editreg has not been compiled:
> >try:
> >make bin/editreg

> Great! Thanks a lot, Jelmer! It works.

> It works so well to list the registry data, that I now want to edit it! 
> With the help of editreg, I quickly found which users did not have an 
> "ExcludeProfileDirs" in their registry (and keep copying their Internet 
> Explorer cache and other crap to the server).

> It looks like the "-c command-file" switch would do that but isn't 
> implemented yet. Well...
We're working on write support for registry files and remote
registries in Samba 4 at the moment.

Cheers,

Jelmer
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] compiling editreg (was: read (and edit?) registry files on Linux)

2004-05-22 Thread Jelmer Vernooij
On Sat, May 22, 2004 at 11:56:04AM +0200, Mi wrote about 'Re: [Samba] compiling 
editreg (was: read (and edit?) registry files on Linux)':

> >> On the Samba site, I found a man page about editreg, but it's not very
> >> clear, and I don't have it on my system.

> >editreg is probably not build and installed by default on debian, so
> >you'll need the source distribution.

> OK, I got the source (samba-3.0.2a.tar.gz, so it would be the same version 
> as my Debian install), and did:

>   # ./configure
>   # make

> but it looks like editreg has not been compiled:

try:

make bin/editreg

Cheers,

Jelmer
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] read (and edit?) registry files on Linux

2004-05-21 Thread Jelmer Vernooij
Hi,

On Sat, May 22, 2004 at 01:40:08AM +0200, Mi wrote about 'Re: [Samba] read (and edit?) 
registry files on Linux':

> >In that case, either editreg or regtree/regshell should do fine.
> Hm... I dont't find any of these on my Debian box with Samba 3.0.2a.

> Googling for regshell, I seem to only find references to a wsh regshell 
> object or something. Is there another regshell for Linux/Samba which I 
> would have missed?
regshell is part of Samba4, which is only available from Subversion at
the moment (see http://samba.org/samba/subversion.html)

> On the Samba site, I found a man page about editreg, but it's not very 
> clear, and I don't have it on my system.

editreg is probably not build and installed by default on debian, so
you'll need the source distribution.

> About editreg, http://www.samba.org/samba/docs/man/editreg.1.html says:

> "editreg ? A utility to report and change SIDs in registry files"
> and
> "editreg is a utility that can visualize windows registry files (currently 
> only NT4) and apply so-called commandfiles to them."
Whoops, looks like a type.. I'll fix it.

Cheers,

Jelmer


-- 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] read (and edit?) registry files on Linux

2004-05-21 Thread Jelmer Vernooij
Hi,

On Sat, May 22, 2004 at 12:41:53AM +0200, Mi wrote about '[Samba] read (and edit?) 
registry files on Linux':
> Is there a way in Linux to read Windows registry files?
See the regdiff, regpatch, gregedit, regtree and regshell utilities
included with Samba 4 or editreg included with Samba 3.

> I have only ssh access to the Linux/Samba server, and would like to be able 
> to check settings in user profiles (in their ntuser.dat files). Best would 
> be if I could even edit settings in there.

> For now, it seems the only thing I can do is scp the files to a Windows 
> machine, and manually load the hives in regedt32. Very cumbersome. I'm 
> looking for a more Linux-like solution: command-line, scriptable, etc.
In that case, either editreg or regtree/regshell should do fine.

Cheers,

Jelmer


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Pdb-useredit

2004-05-10 Thread Jelmer Vernooij
Hi Collen,

On Mon, May 10, 2004 at 10:47:40AM +0200, Collen Blijenberg  wrote about 
'[Samba] Pdb-useredit':
> i had a few day's off, and was able to make
> samba-3's first user editor (it's actualy an front-end for pdbedit!!)

> check out : http://213.34.118.231/pdbedit/
That host appears to be down.

Cheers,

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
Latest patch: ctrlproxy-1304.diff
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] cvs dead?

2004-04-22 Thread Jelmer Vernooij
On Thu, Apr 22, 2004 at 08:52:42PM +0200, [EMAIL PROTECTED] wrote about '[Samba] cvs 
dead?':

> hello,

> cvs instructions from the site don't work!
We migrated to Subversion a couple of weeks ago, see: 

http://samba.org/samba/subversion.html

Cheers,

jelmer
-- 
Jelmer Vernooij  <[EMAIL PROTECTED]>
http://samba.org/~jelmer/ http://samba.vernstok.nl/
My Samba bugs: 42 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Group Mapping in MySQL backend

2004-02-04 Thread Jelmer Vernooij
Bjoern Scheuermann wrote:

Hi Jelmer,

 

I also consider a little patch for being able to use one single table for
nss_mysql's and samba's data. More precise, I don't want smbpasswd -a or
a samba domain join to fail if a row with the given UID/username already
exists, but rather to fill the "samba-columns", i.e. doing an UPDATE
instead of an INSERT, if the ID already exists.
 

That's a one-liner. INSERT should be replaced with REPLACE in that
case.
   

ah - no. I don't want to lose the values in all the non-samba columns. :-)
 

You won't. pdb_mysql only INSERTs (and if you replace INSERT with 
REPLACE), only REPLACE's the fields Samba knows about.

Jelmer
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Group Mapping in MySQL backend

2004-02-04 Thread Jelmer Vernooij
Hi Bjoern,

On Wed, Feb 04, 2004 at 06:01:42PM +0100, Bjoern Scheuermann wrote about 'Re: [Samba] 
Group Mapping in MySQL backend':
> > > I'd maybe be willing to try doing this on my own, if sombeody could give
> > > me some hints on how to start. Is it just the implementation of the
> > > methods for storing and retrieving the group mappings which I've found in
> > > the LDAP backend code? Or is there anything more to do?
> > Yep, that's all.

> Doesn't seem to be much of a problem then, maybe I'll really try this. I have 
> to finish some other stuff first, too; maybe in two or three weeks.

> I also consider a little patch for being able to use one single table for 
> nss_mysql's and samba's data. More precise, I don't want smbpasswd -a or a 
> samba domain join to fail if a row with the given UID/username already 
> exists, but rather to fill the "samba-columns", i.e. doing an UPDATE instead 
> of an INSERT, if the ID already exists.
That's a one-liner. INSERT should be replaced with REPLACE in that
case. 

> > > > And - by the way - is there any reason why pdb_mysql should not (yet)
> > > > be used in larger installations (several hundert clients), or why
> > > > several servers shouldn't share one common database? Are there any
> > > > experiences regarding such installations, or are any problems already
> > > > known?

> > > Nobody using it with more than a few users/clients?
> > > What a pitty...

> > There are a couple of large installations out there. It's just that LDAP
> > is more commonly used for user databases. Other reasons might be:

> > - libnss_mysql doesn't work very well (at least, last time I tried it)
> Works fine for me at the moment, although just in a really small experimental 
> setup. Do you have some more information on what kind of problems occured? 
> Maybe I could do some more specific tests then.
I had random crashes, etc, so I wrote my own
libnss_mysql back then. I'm not sure how the code is these days,
though.

> > - user databases are most of the time read-only operations, something
> > LDAP is optimized for
> > - Easier extension of fields stored for users - it's easy to add a
> > schema, while in MySQL you would have to modify your table.

> We're working on an authentication scheme for server installations in schools, 
> and we'll regularly have some quite complicated and large-scale automated 
> modifications in the user and group structure -- at least once a year. 
> Additionally we have some privilege-related user- and group-metadata with 
> various kinds of relations, which doesn't fit into a tree structure very well 
> and gets updated quite often.
> Therefore we got the idea of putting it all into a SQL database.
Ah, cool. It's always nice to hear when people are using the software
you wrote :-)

Jelmer

-- 
Jelmer Vernooij  <[EMAIL PROTECTED]>
http://samba.org/~jelmer/ http://samba.vernstok.nl/
My Samba bugs: 18 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Group Mapping in MySQL backend

2004-02-04 Thread Jelmer Vernooij
Hi Bjoern,

On Wed, 2004-02-04 at 17:21, Bjoern Scheuermann wrote:
> think I have to reply to my own mail, if nobody else does... :-)
Sorry, I think I didn't notice it the first time...

> > are there any plans to add some support for storing not only user
> > information, but also group mappings in the MySQL passdb backend? Or are
> > there problems I'm not aware of why this cannot be done?
After I finish the registry library work, this is one of the things I'm
going to look at next. Could take a few months though...

> I'd maybe be willing to try doing this on my own, if sombeody could give me 
> some hints on how to start. Is it just the implementation of the methods for 
> storing and retrieving the group mappings which I've found in the LDAP 
> backend code? Or is there anything more to do?
Yep, that's all.

> > And - by the way - is there any reason why pdb_mysql should not (yet) be
> > used in larger installations (several hundert clients), or why several
> > servers shouldn't share one common database? Are there any experiences
> > regarding such installations, or are any problems already known?
> Nobody using it with more than a few users/clients?
> What a pitty...
There are a couple of large installations out there. It's just that LDAP
is more commonly used for user databases. Other reasons might be: 

- libnss_mysql doesn't work very well (at least, last time I tried it)
- user databases are most of the time read-only operations, something
LDAP is optimized for
- Easier extension of fields stored for users - it's easy to add a
schema, while in MySQL you would have to modify your table. 

Jelmer

--
Jelmer Vernooij http://samba.org/~jelmer/ http://samba.vernstok.nl/ Last
CVS commit: Sat Jan 10 22:05:38 2004 (24d 18h 20m ago) Bugs in bugzilla:
18 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Small glitch in howto

2004-01-29 Thread Jelmer Vernooij
Hi J?r?me,

Thanks for noticing. I've fixed it in CVS.

Best regards,

Jelmer

On Thu, Jan 29, 2004 at 11:01:39PM +0100, J?r?me Fenal wrote about '[Samba] Small 
glitch in howto':
> Hi list,

> I'm on the way to translate the BDC Howto into french, and encountered a 
>  too quick Yjjjp (copy+down{3}+paste).

> It is in the table 6.1, last cell :
> Use rsync to synchronize the TDB database files from the PDC to the BDC.
> should read
> Use rsync to synchronize the smbpasswd file from the PDC to the BDC.

> Regards,

> J?r?me

> -- 
> J?r?me Fenal - Consultant Unix/SAN/Logiciel Libre
> Groupe Expert & Managed Services - LogicaCMG France
> http://www.logicacmg.com/fr/ - <mailto:jerome.fenal AT logicacmg.com>

> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
Todo: 35
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smb3 + ldap howto?

2004-01-19 Thread Jelmer Vernooij
Oscar Retana M. wrote:

Hello.

Is there somewhere a smb3+ldap howto?

I'm trying to use one found here [*] but it is currently under total 
re-construcction in order to support smb3.

I will appreciate *any* guide or document that cans help me!

Please try the one at
http://samba.org/samba/docs/Samba-HOWTO-Collection.pdf or 
http://samba.org/samba/docs/man/ (HTML version)

Jelmer

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Questions regarding [patch] PostgreSQL pdb backend

2004-01-12 Thread Jelmer Vernooij
Hi Nilu,

Nilanjan Bhowmik wrote:

Is postgress passdb backend submitted by Hamish patch available in the 
CVS?
If true, then please put a post in the newsgroup and let us know.
 
I am ready to test the patch when it is part of the CVS since it is 
easier to send you the feedback.
Yes, the patch is currently in the SAMBA_3_0 branch of CVS and will also 
be in the Samba 3.0.2 prereleases.

Use ./configure --with-expsam=pgsql to compile it in.

All comments/bugfixes regarding the pgSQL backend are welcome.

Cheers,
Jelmer
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdbedit bug?

2004-01-08 Thread Jelmer Vernooij
Bret Jordan wrote:

If I try to do the following:
/usr/local/samba/bin/pdbedit -a -u someusername -U 5000
This works as one would think, the account is created with a RID of 5000.
But when I do:
/usr/local/samba/bin/pdbedit -a -m -u somemachinename -U 3000
It does not work as you would think.  The account is created but with 
the RID of the Unix UID*2+1000 not, a RID of 3000 as specificed on the 
command line.  And if you try to modify that RID after the account is 
created with a:
/usr/local/samba/bin/pdbedit -r -u somemachinename$ -U 3000
It just causes all kinds of problems.

Is there a way around this, is this a bug in the pdbedit program?
Please respond directly to me at [EMAIL PROTECTED]
RID's are only changeable when you're using idmap. In all other cases, 
the rid is derived from the uid.

(... or at least, last time I looked at this code, please correct me if 
I'm wrong)

Cheers,

Jelmer
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] tdbdump utility

2004-01-05 Thread Jelmer Vernooij
Hi,

On Mon, Jan 05, 2004 at 01:01:56PM +0100, kidlark wrote about '[Samba] tdbdump 
utility':
> how do I install the tdbdump utility ? When I cd to /samba/source/tdb and I
> execute "make", I do get following error message:
Go to the source/ directory (not source/tdb) and type 'make bin/tdbdump'.

> gcc -DSTANDALONE -DTDB_DEBUG -g -DHAVE_MMAP=1   -c -o tdbtest.o tdbtest.c
> tdbtest.c:13: gdbm.h: No such file or directory
> make: *** [tdbtest.o] Error 1

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba + MySQL

2003-11-25 Thread Jelmer Vernooij
Hi Ben,

On Tue, Nov 25, 2003 at 10:29:48AM -0600, Ben Davis wrote about 'Re: [Samba] Samba + 
MySQL':

> >If you don't want to store this field in the database, set the value of
> >'identifier:unknown string column' to NULL:
> The INSERT query executes successfully,  however, it seems that 
> smbpasswd tried to execute another query (that can't be seen) before it 
> does the insert, because I still get the error:  "Error while executing 
> MySQL query Unknown column 'unknown_5' in 'field list'"even though 
> the insert was successful.   I still  get that same error when trying to 
> execute "pdbedit -L".  Any ideas?
That's the query for receiving the data that is failing. What have you
set the 'unknown 5 column' to?

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba + MySQL

2003-11-25 Thread Jelmer Vernooij
Hi Ben,
> I can't seem to exclude fields from the database that I won't be using.
> For instance, when I don't include the "unkown 6 column",  I get the
> following error when executing `smbpasswd -a user`:
>
> Error while executing MySQL query Unknown column 'unknown_str' in
> 'field list'
>
> I get the same error when trying to use `pdbedit -L`Are these fields
> actually required by samba in order to work??
If you don't want to store this field in the database, set the value of
'identifier:unknown string column' to NULL:

Check the MySQL section in the Account Database chapter of the Samba HOWTO
Collection for details.

Jelmer

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] doc bugreport compiling.html samba 3.0.0

2003-11-23 Thread Jelmer Vernooij
Hi Karel,

I've fixed this issue in CVS. Thanks for reporting!

Jelmer

On Fri, Nov 14, 2003 at 02:58:28PM +0100, Karel Kulhav? wrote about '[Samba] doc 
bugreport compiling.html samba 3.0.0':
> samba-3.0.0/docs/htmldocs/compiling.html reads:

> "wget http://us1.samba.org/samba/ftp/samba-2.2.8a.tar.asc";


> --14:58:11--  http://us1.samba.org/samba/ftp/samba-2.2.8a.tar.asc
>=> `samba-2.2.8a.tar.asc'
> Resolving us1.samba.org... done.
> Connecting to us1.samba.org[216.251.47.16]:80... connected.
> HTTP request sent, awaiting response... 404 Not Found
> 14:58:12 ERROR 404: Not Found.


> Cl<
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Jelmer Vernooij  <[EMAIL PROTECTED]>
http://samba.org/~jelmer/ http://samba.vernstok.nl/
Bugs in bugzilla: 17 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Translation Dok to German, first file, deutsche ?bersetzung Der Samba Doku erste Datei

2003-11-10 Thread Jelmer Vernooij
Hi John,

I just saw this message on the mailinglist...

On Tue, Nov 11, 2003 at 12:12:40AM +0100, Stefan G. Weichinger wrote about 'Re: 
[Samba] Samba Translation Dok to German, first file, deutsche ?bersetzung Der Samba 
Doku erste Datei':
> Guten Tag Kurt Pfeifle,
> KP> I know that DocBook/XML is rather difficult for people who are not used
> KP> to it and it makes them slow down a lot. (I myself haven't written my
> KP> part of the HOWTO Collection in XML. but in HTML and one kind soul did
> KP> convert it for me). However, it makes it more easy to create PDFs and
> KP> other formats from that input.

> We talked to John H Terpstra and he told us that he would take the
> part of converting to XML (I hope it still is like that ;-) )

> So we can happily use our little crappy html-editors and concentrate
> at translating english-german instead of converting html-xml.
Are we really sure we can/want to convert all those pages back to XML?
Getting a volunteer to do it is probably harder then for Kurt's
docs...

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Check whether a unix user is a samba user

2003-11-09 Thread Jelmer Vernooij
On Sun, Nov 09, 2003 at 10:25:05AM -0600, McKeever Chris wrote about 'Re: [Samba] 
Check whether a unix user is a samba user':
> On Sun, 9 Nov 2003 13:11 , [EMAIL PROTECTED] sent:
> >What is the command one should use
> >to check whether a unix user is a
> >samba user (that is, its username is
> >in one of the samba password backends).
> you can do a grep 'username' /etc/smb/smbpasswd 
try doing a 'pdbedit -u username'

Jelmer
-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smb_register_charset error in Samba 3.0.0

2003-10-14 Thread Jelmer Vernooij
Hi Jim,

On Tue, Oct 14, 2003 at 09:31:59AM -0500, Jim Morris wrote about '[Samba] 
smb_register_charset error in Samba 3.0.0':
> I upgraded one of my servers to Samba 3.0.0 over the weekend, using the 
> source.  Since doing so, I have had a huge number of errors logged on 
> that system that are all related to usage of the smbmont command.  
> Running smbmount (or mount.smbfs) gives the following error:

> mount.smbfs: error in loading shared libraries: 
> /usr/local/samba/lib/charset/CP850.so: undefined symbol: 
> smb_register_charset

> Any ideas here?  I build Samba using the same options I used to build 
> Samba 2.2.8a, which does not produce the error:

> ./configure --with-smbmount --with-pam --with-pam_smbpass --with-quotas 
> --with-winbind --with-utmp

> Any thoughts are appreciated!  Note that the server in question is 
> running a Linux 2.2.x kernel, if that has any bearing on the issue.  It 
> is an old Redhat 6.0 box that I have kept up to date manually from 
> tarballs, since Redhat stopped producing errata for Redhat 6.x.
This may be a bug from our side, though it should always work if you
have libiconv installed. Did configure detect libiconv and its
headers?

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Mysql + Samba, please help....

2003-10-09 Thread Jelmer Vernooij
On Thu, 2003-10-09 at 12:14, open wrote:
> Hi Guruz, sorry for the bad English and the stupid question...
> I configure samba-3.0 with such options
>  ./configure --prefix=/usr/local/samba --with-expsam=xml,mysql --with-pam 
> --with-pam_smbpass
> 
> after install
> i try ./pdbedit -L and i get the following error
> 
> No builtin nor plugin backend for mysqlsam found
> Loading mysqlsam failed!
> 
> my config file
> ..
> passdb backend = mysqlsam
> ;passdb backend = plugin:/usr/local/samba/lib/pdb_mysql.so:mysql
> 
> ;passdb backend = mysql:mysql
> mysql:mysql host = localhost
> mysql:mysql user = root
> mysql:mysql password = alexander
> mysql:mysql database = samba
> 
> 
> i try many variants  but get the same error
> 
> No builtin nor plugin backend for mysqlsam found
> Loading mysqlsam failed!
Did configure detect the mysql library and headers? That's most likely
the problem you're experiencing.f

Jelmer
--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] charsets in samba3

2003-10-08 Thread Jelmer Vernooij
On Wed, 2003-10-08 at 16:10, Andre de Koning wrote:
> Is there any way to make samba use whatever the default charset was on samba
> 2.2.x (like 2.2.3?).
Set the unix charset to the charset your clients are using. E.g. unix
charset = CP850 and also make sure you dos charset is set correctly.
However, you should rather try to convert the filenames to the correct
charset.

> I've just upgraded to samba 3 and just about every second file displays
> incorrectly on my windows clients and most of them refuse to open because of
> this.  THis is causing absolute chaos to the point where I (an avid windows
> hater) am starting to look at reload all the servers in question with w2k
> server.
> 
> I've played around with "dos charset", "unix charset" and "display charset"
> but have no luck.  I have no clue what this should be set to to make this
> work like they did before with samba 2.2.3 and don't even have a clue what
> options I can choose from - nothing in the man page except one example!
Read the Unicode chapter in the Samba HOWTO Collection for details about
these options. This chapter also contains a link to a utility that can
convert your filenames to the correct unix charset.

Jelmer

--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] urgent help needed! pam_smb auth any password...

2003-10-08 Thread Jelmer Vernooij
On Wed, 2003-10-08 at 14:50, Luís Miguel Silva wrote:
> Hello all,
> 
> I need *urgent* help with this one!
> 
> I have a samba 3.0 server which auths on mysql, the confs are the following:
> [global]
> netbios name = AUTH
> workgroup = COMPANY
> security = user
> domain logons = yes
> domain master = yes
> local master = yes
> os level = 69
> passdb backend = mysql:mysql
> mysql:mysql host = 192.168.1.1
> mysql:mysql user = samba
> mysql:mysql password = whocares
> mysql:mysql database = samba
> 
> domain logons = yes
> logon script=/home/samba/netlogon/todos.bat %U
> name resolve order = host wins lmhosts bcast
> wins support = yes
> dns proxy = yes
> 
> logon path=
> logon home=
> 
> [netlogon]
> comment = Network Logon Service
> path = /home/samba/netlogon
> guest ok = yes
> writable = no
> share modes = no
> 
> All the other samba servers auth nicely on samba 3.0, and im able to logon the 
> domain, but...
> when i try to auth an account with pam_smb, i can ALLWAYS connect!
> 
> It accepts ANY login/password pair!
> 
> I read the pam_smb "warning" which said:
> This version contains a bug-fix that stops pam_smb from authenticating 
> against servers in share mode i.e. Win 95 or samba in share mode.
> If you had a share mode server by mistake in your pam_smb.conf
> anyone could log in to any a/c on your machine with no password !!!
> 
> I allready installed this version...and checked the code and it doesnt seem to do no 
> good.
> 
> Can anybody help me with this?
> 
> My pam_smb version is 1.1.7
pam_smb is not a module from Samba, so you probably would have a better
response at the pam_smb mailinglist.

Jelmer

--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] 3.0.0 and libiconv

2003-10-08 Thread Jelmer Vernooij
On Wed, 2003-10-08 at 16:12, William Jojo wrote:
> I'm sure i'm missing something stupid, but I'm getting the following
> message when compiling 3.0.0 on AIX 5.2. bos.rte.iconv is installed as
> part of the OS, but I installed libiconv 1.9.1 from gnu into /usr/local
> and it still happens.
> 
> checking for iconv in /usr/local... yes
> 
> checking can we convert from CP850 to UCS2-LE?... no
> checking can we convert from IBM850 to UCS2-LE?... no
> checking can we convert from ASCII to UCS2-LE?... no
> checking can we convert from 646 to UCS2-LE?... no
> checking can we convert from UTF-8 to UCS2-LE?... no
> checking can we convert from UTF8 to UCS2-LE?... no
> configure: WARNING: Sufficient support for iconv function was not found.
> Install libiconv from http://freshmeat.net/projects/libiconv/ for
> better charset compatibility!
Looks like something went wrong in the configure script. Please file a
bug report at https://bugzilla.samba.org/ and include your config.log.

Jelmer
--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] pdb_mysql not working for me

2003-10-07 Thread Jelmer Vernooij
On Mon, 2003-10-06 at 21:42, Andrew St. Denis wrote:
> I have been attempting to setup Samba 3 with mysql authentication for some 
> time now and I keep see the following error in both the log.smbd and when 
> running pdbedit:
> 
> ./pdbedit: relocation error: /usr/local/samba3/lib/pdb/mysql.so: undefined 
> symbol: mysql_init
> 
> I have searched google and the newsgroups and the only reference I found to 
> mysql_init has to do with perl modules and not samba.  Any ideas?
Looks like a problem with exporting symbols. What OS are you running?

In the meantime, try running ./configure --with-expsam=mysql
--with-static-modules=pdb_mysql

Jelmer

--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3 + mysql + add new user?

2003-10-04 Thread Jelmer Vernooij
Hi Miguel,

On Thu, Oct 02, 2003 at 04:33:12PM +0100, Miguel Manso wrote about '[Samba] Samba 3 + 
mysql + add new user?':
> I've installed the new samba3 distribution and I'd like to use the mysql
> backend for the autentication instead of the normal passwd file.

> I've read the docs and I've added the correct info to smb.conf.

> Now, I'd like to create a new user in the database. Is there any script
> for that or I must do the "INSERT ..." by and (or create a script for
> that)
You can use pdbedit to add a new user to the database or create one
yourself using INSERT, whichever you prefer.

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] OpenBSD 3.4/Samba 3.0.0 CP850.so core dump

2003-09-30 Thread Jelmer Vernooij
On Tue, 2003-09-30 at 18:50, Van Sickler, Jim wrote:
> I'm trying to install Samba 3.0.0, and it seems to compile ok.
> 
> When I run testparm or try to start either daemon, I get the
> following:
> 
> testparm:/usr/local/lib/charset/CP850.so: undefined symbol
> 'smb_register_charset'
> lazy binding failed!
Looks like the linker didn't export all the symbols in the daemons...
Can you check the documentation of your linker and check what arguments
it needs to export symbols from an executable?

Jelmer

--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] unable to save share permissions changes with 3.0

2003-09-30 Thread Jelmer Vernooij
On Tue, 2003-09-30 at 14:16, Eamonn Hamilton wrote:
> Hi.
> 
> I'm trying to change the permissions on a samba share on my system. I've
> connected to it using W2K and tried adding an account to the access list
> as a trial, but when I try and save it I get "access denied". My domain
> account is mapped to a local user, and that user is an admin on the
> share.
> 
> Any ideas or gotchas I should know?
Do you have POSIX ACL's set up correctly? 

Jelmer

--
Jelmer Vernooij http://samba.org/~jelmer/ http://samba.vernstok.nl/ Last
CVS commit: Mon Sep 29 02:39:41 2003 (1d 9h 46m ago) Bugs in bugzilla:
15 


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 2.2.x die?

2003-09-30 Thread Jelmer Vernooij
On Tue, 2003-09-30 at 14:01, Pavel V.Zheltobryukhov wrote:
> What about new versions of Samba 2.2? Does this branch collapsed after releasing of 
> Samba 3.0.0?
Most likely there will be only new versions of Samba 2.2 with bugfixes.
No new features.

Jelmer
--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba3: domain member server: user mapping problem (ldap)

2003-09-30 Thread Jelmer Vernooij
On Tue, 2003-09-30 at 12:27, Gunther Schlegel wrote:
> > You should set 'security = domain' (that way, the user and group lists
> > are retrieved from the PDC), no 'passdb backend'. Though 'idmap backend'
> > should be set (SID-to-UID and SID-to-GID mappings can't be retrieved
> > from the PDC).
> 
> This is in fact the first configuration I tried because it seemed to be
> the "natural" solution. 
> 
> I still have some questions and hope you can help me again:
> 
> a) I had to use winbind to get any use of the passdb backend setting.
> However, in opposite to the HowTo Collection §10.2.3 / Example table
> 10.1 the line in smb.conf had to be 
> 
> idmap backend  = ldap:ldap://leibniz.rsidus.riege.de, and not
>  
> 
> idmap backend  = ldapsam:ldap://leibniz.rsidus.riege.de
>  ^^^ 
Thanks, I fixed it in the documentation.

> b) am I supposed to use winbind at all? I am already using pam_ldap and
> nss_ldap on the server. The winbind settings are:
> 
> idmap uid = 1-2
> idmap gid = 1-2
> winbind trusted domains only = yes
> 
> The UIDs/GIDs actually used in LDAP are in between 600 and 3000.
I figure idmap is not working correctly (or it's supposed to work
differently as the last time I looked at it..)

> c) net groupmap still does not list anything.
'net groupmap list' does not give any output _at all_ ?

> d) In windows the system still shows the rights as [member
> server]\username instead of DOMAIN\username. 
> 
> e) do I have to adjust the member servers SID? It created it's own one
> and it is different from the domains SID. 
Have you joined the domain correctly? Each workstation also has it's own
SID, so that shouldn't be a problem.

--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem when upgrading to samba 3.0.0

2003-09-30 Thread Jelmer Vernooij
On Tue, 2003-09-30 at 12:25, Manuel Arenaz wrote:
> Hello,
> 
> I am using samba 2.2.5 as file and print server.
> I want to upgrade to samba 3.0.0, but when I use
> samba 3.0.0 the name of some files is displayed
> using chinese-like characters.
> 
> Furthermore, the uploading/downloading of windows
> printer drivers to/from the servers seems to be 
> affected by the problem because the PCL code
> generated by the driver contains strange control
> characters.
> 
> How can I solve this problem?
> 
> Thanks in advance and congratulations for your
> great work.
Read the unicode chapter of the Samba HOWTO Collection.

Jelmer

--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba PDC - WinXP Issues

2003-09-29 Thread Jelmer Vernooij
On Tue, 2003-09-30 at 02:38, Simran Hansrai wrote:
> Hi Guys,
> 
> I have installed and configure samba on a redhate 8.0 box to act as a 
> PDC.  When I try and add a user to my domain from my WinXP client 
> machine, I get the following error:
> 
> "The user could not be added because of the following error has occured: 
>   The trust relationship between this workstation and the primary domain 
> failed."
> 
> I have search google.com and have tried a couple of different things but 
> none seem to work.
> 
> The following is my entry for my workstations in /etc/passwd:
> enermax$:x:534:201:enermax:/dev/null:/bin/false
> jeonamur$:x:535:201:jeonamur:/dev/null:/bin/false
> 
> /etc/smbpasswd:
> jeonamur$:535:AE7D4C9527EFD952B97F4EB3E2D4130F:3E7FE739CDEB16486F4686B96ED02CBF:[W 
>   ]:LCT-3F78B510:
> enermax$:534:DA838D55F99FD0BC6879F19168D4B105:F47AE8F4B8B7E2B13F237B73849D4799:[W 
>   ]:LCT-3F78CF75:
You should either patch the registry on your XP workstations to disable
the signing or switch to Samba 3.0.

Jelmer


--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems joining workstation with samba3

2003-09-29 Thread Jelmer Vernooij
On Mon, 2003-09-29 at 18:13, Filippo Panessa wrote:
> Jelmer Vernooij il 29 settembre 2003, alle 16:17 ha scritto:
> 
> > > Yeah, but this server should be the PDC.
> > If this machine should be the PDC, there's no need to do a testjoin.
> Ok, but no one w2k clients can join the domain. w2k says "Unable to find
> HOME domain in the net". So I try with testjoin.
testjoin is not aimed to work at a PDC. You should have more luck
running it on a domain member. 

Jelmer
--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] [Fwd: Winbind under 3.0

2003-09-29 Thread Jelmer Vernooij
On Mon, 2003-09-29 at 17:05, Ron Garcia-Vidal wrote:
> I'm having a problem getting a browse list from my Samba box.  I'm
> running debian testing with the 3.0beta2-1 package.  Winbind appears to
> be installed properly and functioning properly:
> 
> [EMAIL PROTECTED]:~# wbinfo -t
> checking the trust secret via RPC calls succeeded
> 
> [EMAIL PROTECTED]:~# wbinfo -a Administrator%x
> plaintext password authentication succeeded
> challenge/response password authentication succeeded
> 
> wbinfo -u and -g gives me all the users and groups I'm expecting, as
> does getent passwd and getent group.  I've even set up the PAM modules
> for login, ssh and su to recognize winbind and am able to log in via
> console and ssh using my NT credentials.
> 
> The problem comes when I try to access via smbclient or Windows
> Explorer.  I get the following error on the console (with smbclient):
> 
> [EMAIL PROTECTED]:~# smbclient -L //dbs -UAdministrator
> Password:
> session setup failed: NT_STATUS_LOGON_FAILURE
> 
> And the logs show the following:
> 
> [2003/09/25 12:29:04, 0] auth/pampass.c:smb_pam_account(573)
> ~  smb_pam_account: PAM: UNKNOWN PAM ERROR (9) during Account Management
> for User: Administrator
> [2003/09/25 12:29:04, 0] auth/pampass.c:smb_pam_accountcheck(781)
> ~  smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User
> Administrator!
> 
> So under 2.8 this was happening, until I realized I hadn't installed
> libpam-smbpass.  Once I did this, access was granted.  After I upgraded
> I checked that all relevant packages were at 3.0beta2 and they were,
> including libpam-smbpass.  So am I missing another library?  Am I
> missing something in my smb.conf file?  Here's the output of testparm:
libpam-smbpass is not required to make samba work correctly. It is of
absolutely no use when you put it inside /etc/pam.d/samba.

> 
> [EMAIL PROTECTED]:~# testparm
> Load smb config files from /etc/samba/smb.conf
> Processing section "[homes]"
> Processing section "[printers]"
> Processing section "[Backup]"
> Loaded services file OK.
> 'winbind separator = +' might cause problems with group membership.
> Server role: ROLE_DOMAIN_MEMBER
> Press enter to see a dump of your service definitions
> 
> # Global parameters
> [global]
> ~workgroup = DOMAIN1
> ~    netbios name = DBS
> ~server string = %h server (Samba %v)
> ~security = DOMAIN
> ~obey pam restrictions = Yes
^^ obey pam restrictions is only useful if you have 'encrypt passwords =
no'

Jelmer
--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba3: domain member server: user mapping problem (ldap)

2003-09-29 Thread Jelmer Vernooij
On Mon, 2003-09-29 at 17:04, Gunther Schlegel wrote:
> Hi,
> 
> I have noticed a strange behavior regarding samba 3 domain member
> servers:
> 
> I have a LDAP based Samba3 PDC + BDC setup running and want to add a
> third machine as "Domain member server" (name: HILBERT ). 
> 
> Problem:
> When I look up the file ownership from a W2K Workstation Client both PDC
> and BDC show the owners account to be a domain account: 
> e.g.: DOMAIN\schlegel
> 
> Hilbert behaves differently. It shows local users and mapped group in
> the form:
> HILBERT\[local user on hilbert|centrally mapped group]
> 
> and ldap-users like this:
> 
> HILBERT\(the Users SID)
> 
> I expect it to at least show mapped groups and ldap users in the form
> DOMAIN\username.
> 
> I am also not quite sure whether I should run the server in "domain" or
> "user" security mode, but I found out I have to use the LDAP backend to
> get the central group mapping. I also found out that both setups work
> and that the domain setup is talking to the PDC while the user setup
> does not. This is like I expected it.
> 
> However, the behavior regarding hostname vs. domainname is the same.
> 
> nss_ldap + pam_ldap work fine, the UIDs are mapped on the OS level.
> Environment software is openldap 2.1.22, nss_ldap 202, RedHat 9.

Hi Gunther, 

You should set 'security = domain' (that way, the user and group lists
are retrieved from the PDC), no 'passdb backend'. Though 'idmap backend'
should be set (SID-to-UID and SID-to-GID mappings can't be retrieved
from the PDC).

Jelmer

--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems joining workstation with samba3

2003-09-29 Thread Jelmer Vernooij
On Mon, 2003-09-29 at 13:49, Filippo Panessa wrote:
> Jelmer Vernooij il 29 settembre 2003, alle 04:22 ha scritto:
> 
> > Can you try again with a higher debug level?

> > > And, I can't understand want means 'ldap is not used in domain mode'.
> > > There a domain mode for ldap ?
> > In domain mode, all users and groups are retrieved from the PDC. They're
> > not fetched from LDAP at all. 
> 
> Yeah, but this server should be the PDC.
If this machine should be the PDC, there's no need to do a testjoin.
Also, if the machine is the PDC, set 'security = user', not 'security =
domain' (I was under the impression you were trying to configure a
domain member).

Jelmer

--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] solaris 9 and compiling

2003-09-29 Thread Jelmer Vernooij
On Mon, 2003-09-29 at 15:40, Schreiber Martin wrote:
> Hello,
> 
> I have a problem to build the samba_3.0 sources for sol9 , i am running
> gcc-3.3. It works , but the binaries became huge , the samba.pkg is about
> 450 MB . Now my question; do i need any compiler flags ? i did it with
> default-settings.
Samba 3.0.0 always put in debugging symbols. This will be fixed in
3.0.1.

For now, try using the 'strip' utility on the binaries.

Jelmer

--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbclient et al: -k by default?

2003-09-29 Thread Jelmer Vernooij
On Mon, 2003-09-29 at 12:10, Alexander List wrote:
> Hello,
> 
> I tried to find something in the HOWTOs and the mailing list, but failed
> so far...
> 
> Is it possible to tell smbclient and the other command line client utils
> to use kerberos auth by default? security=ads is already set, smbclient -k
> works fine. I just don't want to specify -k at the commandline all the
> time but configure that somewhere in smb.conf
You might be able to do something like that by putting a line in ~/.popt
(Samba uses popt for argument handling). Read the popt documentation for
details.

Jelmer


--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] nested logon scripts

2003-09-29 Thread Jelmer Vernooij
Hi Andre,

On Mon, 2003-09-29 at 11:37, Andre de Koning wrote:
> I Have my users organised in 1: Whole Company, 2: Department, 3: User
> 
> I need a logon script that executes certain comments for all users, certain
> commands per department and certain comments per user.
> 
> For user andre in department sales it would thus execute all.cmd, sales.cmd
> and andre.cmd

> Is this possible?

Yeah, sure. You can either run sales.cmd from andre.cmd and all.cmd from
sales.cmd or generate one cmd file per user on the Samba server. Read
the Samba HOWTO Collection (look for genlogon.pl) for details.

Jelmer
--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [SAMBA] smbmnt file size limitation, still?

2003-09-29 Thread Jelmer Vernooij
On Mon, 2003-09-29 at 06:06, Steven C. Henry wrote:
>   I know this may be an old subject, but I couldn't find an answer.
>   However, when I use smbmnt via smbmount to mount a Windows XP from SuSE 8.1, there 
> is still the size limitation of 2 gigabytes (2 x 1024M). Is there anyway to fix this?
Perhaps Steve French's new cifsfs (included by default in 2.5 and 2.6
kernels) doesn't have such a limit, but I'm not 100% sure.

Jelmer

--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: [Fwd: Samba 3.0.0-1 user privileges problem]

2003-09-29 Thread Jelmer Vernooij
Hi,

Please send all user questions to [EMAIL PROTECTED]

On Sun, 2003-09-28 at 23:59, Joe Daily wrote:
> Thanks you for your responses, but i now have a couple of stupid questions
> for you guys.
> 
> First,
> 
> I seems that the "domain admin group=" does not work in samba 3.0.0-1.
> testparm says that:
> 
> Unknown parameter encountered: "domain admin group"
> Ignoring unknown parameter "domain admin group"
> 
> is there another way to map my root user to domain admins?
Use 'net groupmap' (read the Samba HOWTO Collection for details).

Jelmer
--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems joining workstation with samba3

2003-09-28 Thread Jelmer Vernooij
On Mon, 2003-09-29 at 03:42, Filippo Panessa wrote:
> Jelmer Vernooij il 29 settembre 2003, alle 03:32 ha scritto:
> 
> > > # net rpc testjoin
> > > [2003/09/29 02:46:45, 0] utils/net_rpc_join.c:net_rpc_join_ok(73)
> > >   Error in domain join verfication
> > >   Join to domain 'HOME' is not valid
> > You don't have 'security = domain'. Also, ldap is not used in domain mode.
> Thanks for your answer, but I tried with 'security = domain' and:
>
> # net rpc testjoin
> [2003/09/29 03:40:36, 0] utils/net_rpc_join.c:net_rpc_join_ok(66)
> Join to domain 'HOME' is not valid
Can you try again with a higher debug level?

> And, I can't understand want means 'ldap is not used in domain mode'.
> There a domain mode for ldap ?
In domain mode, all users and groups are retrieved from the PDC. They're
not fetched from LDAP at all. 

Jelmer

--
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems joining workstation with samba3

2003-09-28 Thread Jelmer Vernooij
On Mon, 2003-09-29 at 03:22, Filippo Panessa wrote:
> Hi all,
> I am trying to set up a samba server with samba3-final (I've got a PDC
> with samba-2.2.8 + ldap and it works great, now I would like to
> migrate).
> 
> I can't join machines to the domain:
> 
> # net rpc testjoin
> [2003/09/29 02:46:45, 0] utils/net_rpc_join.c:net_rpc_join_ok(73)
>   Error in domain join verfication
>   Join to domain 'HOME' is not valid
You don't have 'security = domain'. Also, ldap is not used in domain mode.

Jelmer


> My global section in smb.conf file is:
> 
> # smb.conf
> [global]
>ldap server = laptop.home
>ldap suffix = ou=Users,dc=laptop,dc=home
>ldap admin dn = cn=manager,dc=laptop,dc=home
>ldap ssl = off
>ldap delete dn = yes
>ldap group suffix = ou=Groups
>ldap user suffix = ou=Users
>ldap machine suffix = ou=Machines
>ldap passwd sync = yes
> 
>admin users = root Administrator
>workgroup = HOME
>comment = %h server (Samba %v)
>socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 \
>   SO_RCVBUF=4096
>invalid users = bin daemon adm sync shutdown halt mail news uucp \
>operator gopher
>log file = /var/log/samba/log.%m
> 
>domain master = yes
>domain logons = yes
>preferred master = yes
>os level = 255
> 
>security = user
>null passwords = yes
>encrypt passwords = true
> 
> And in ldap database I've got:
> 
> dn: dc=laptop,dc=home
> dc: laptop
> objectClass: top
> objectClass: domain
> objectClass: domainRelatedObject
> associatedDomain: laptop.home
> structuralObjectClass: domain
> entryUUID: 8c6fc14c-7efa-1027-9c89-97d20690e775
> creatorsName: cn=manager,dc=laptop,dc=home
> modifiersName: cn=manager,dc=laptop,dc=home
> createTimestamp: 20030919143732Z
> modifyTimestamp: 20030919143732Z
> entryCSN: 2003091914:37:32Z#0x0001#0#
> 
> dn: sambaDomainName=HOME,dc=laptop,dc=home
> sambaDomainName: HOME
> sambaSID: S-1-5-21-1993653893-1826843911-45253619
> sambaAlgorithmicRidBase: 1000
> objectClass: sambaDomain
> structuralObjectClass: sambaDomain
> entryUUID: 9b621a42-7efa-1027-87df-f23cf538bc34
> creatorsName: cn=manager,dc=laptop,dc=home
> createTimestamp: 20030919143758Z
> entryCSN: 2003091914:37:58Z#0x0001#0#
> modifiersName: cn=manager,dc=laptop,dc=home
> modifyTimestamp: 20030919143758Z
> 
> [...]
> 
> ... also users and groups.
> 
> And groumap works great:
> 
> # net groupmap list
> Domain Admins (S-1-5-21-1993653893-1826843911-45253619-512) -> root
> Domain Users (S-1-5-21-1993653893-1826843911-45253619-513) -> users
> Domain Guests (S-1-5-21-1993653893-1826843911-45253619-514) -> nogroup
> System Operators (S-1-5-32-1993653893-1826843911-4294967295-547) -> sys
> Backup Operators (S-1-5-32-1993653893-1826843911-4294967295-551) -> bin
> Print Operators (S-1-5-32-1993653893-1826843911-4294967295-550) -> lp
> Replicators (S-1-5-32-1993653893-1826843911-4294967295-552) -> daemon
> 
> Any idea or suggestions ? Thanks
> 
> -- 
> Sigmentation fault, core dumped.
Jelmer Vernooij  - http://jelmer.vernstok.nl/


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] pdb_mysql question...

2003-09-27 Thread Jelmer Vernooij
Hi again!

On Sat, Sep 27, 2003 at 06:53:03PM +0100, Luís Miguel Silva wrote about 'RE: [Samba] 
pdb_mysql question...':
> I now need a way to generate NT4/LM hashes so i can insert new accounts without 
> using smbpasswd.
> Has anybody got a script/windows program/cgi/whatever to do this?

Look in /examples/LDAP/smbldap-tools/mkntpwd

Jelmer
-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdb_mysql question...

2003-09-27 Thread Jelmer Vernooij
Hi,

On Sat, Sep 27, 2003 at 05:54:56PM +0100, Luís Miguel Silva wrote about 'RE: [Samba] 
pdb_mysql question...':
> However..im getting another problem.
> I thought "smbpasswd -a user password" would create the user on the db...but it 
> doesnt:

> [EMAIL PROTECTED] /usr/local/samba/bin# ./smbpasswd -a user password
> Connecting to database server, host: localhost, user: samba, password: ambas, 
> database: samba, port: 3306
> Failed initialise SAM_ACCOUNT for user user.
> Failed to modify password entry for user user
> [EMAIL PROTECTED] /usr/local/samba/bin#

> (on the mysql server i see this:)
> 030927 17:48:28  42 Connect [EMAIL PROTECTED] on samba
>  42 Query   SELECT 
> logon_time,logoff_time,kickoff_time,pass_last_set_time,pass_can_change_time,pass_must_change_time,username,domain,nt_username,nt_fullname,home_dir,dir_drive,logon_script,profile_path,acct_desc,workstations,unknown_str,munged_dial,user_sid,group_sid,lm_pw,nt_pw,NULL,acct_ctrl,unknown_3,logon_divs,hours_len,unknown_5,unknown_6
>  FROM user WHERE username = 'user'

> Which evidently tells me it is trying to GET the account before changing it!
It checks whether the account already exists. Oh, make sure there is a
unix account named 'user' before you add a Samba account with such a
name.

> Poking around the binaries i saw this new one:
> [EMAIL PROTECTED] /usr/local/samba/bin# ./pdbedit -a user
> Server's Role (logon server) NOT ADVISED with domain-level security
> Connecting to database server, host: localhost, user: samba, password: ambas, 
> database: samba, port: 3306
> Connecting to database server, host: localhost, user: samba, password: ambas, 
> database: samba, port: 3306
> could not create account to add new user user
> [EMAIL PROTECTED] /usr/local/samba/bin#

> and on the mysql server i see:
> 030927 17:50:11  45 Connect [EMAIL PROTECTED] on samba
>  46 Connect [EMAIL PROTECTED] on samba

> It just connects and logs off!
Probably because there's no unix account for the user yet...

> How do i had a user/change its password?

> Is there any official howto on how to (sucessfully) use pdb_mysql???
Read the HOWTO collection from the tarball and/or read
the version generated out of CVS at http://samba.vernstok.nl/.

Jelmer
-- 
Jelmer Vernooij  <[EMAIL PROTECTED]>
http://samba.org/~jelmer/ http://samba.vernstok.nl/
Last CVS commit: Fri Sep 26 12:22:04 2003 (1d 4h 30m ago)
Bugs in bugzilla: 14 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdb_mysql question...

2003-09-27 Thread Jelmer Vernooij
Hi,

On Sat, Sep 27, 2003 at 05:35:15PM +0100, Luís Miguel Silva wrote about '[Samba] 
pdb_mysql question...':
> Iam trying to install samba 3.0 with pdb_mysql support though im getting some 
> trouble i cant understand.

> After reading the output of ./configure --help, i used the following configure args:
> ./configure --with-expsam=xml,mysql --with-pam --with-pam_smbpass
> make
> make install

> then i took a look at ./examples/pdb/mysql/smb.conf and:
> [EMAIL PROTECTED] /usr/src/installs/samba-3.0.0/examples/pdb/mysql# cat smb.conf
> [global]
> netbios name = FOOBAR
> workgroup = TESTGROUP
> security = domain
> domain logons = yes
> domain master = yes
> passdb backend = plugin:/usr/local/samba/lib/pdb_mysql.so:mysql
> mysql:mysql host = rhonwyn
> mysql:mysql user = samba
> mysql:mysql password = ambas
> mysql:mysql database = samba
> [EMAIL PROTECTED] /usr/src/installs/samba-3.0.0/examples/pdb/mysql# ls -l 
> /usr/local/samba/lib/pdb_mysql.so
> /bin/ls: /usr/local/samba/lib/pdb_mysql.so: No such file or directory
> [EMAIL PROTECTED] /usr/src/installs/samba-3.0.0/examples/pdb/mysql# ls -l 
> /usr/local/samba/lib/pdb/mysql.so
> -rwxr-xr-x1 root root   270098 Sep 27 17:15 
> /usr/local/samba/lib/pdb/mysql.so*
> [EMAIL PROTECTED] /usr/src/installs/samba-3.0.0/examples/pdb/mysql#

> So i made up a simple test with:
> [EMAIL PROTECTED] /usr/src/installs/samba-3.0.0/examples/pdb/mysql# cat 
> /usr/local/samba/lib/smb.conf
> [global]
> netbios name = FOOBAR
> workgroup = TESTGROUP
> security = domain
> domain logons = yes
> domain master = yes
> passdb backend = plugin:/usr/local/samba/lib/pdb/mysql.so:mysql
> mysql:mysql host = localhost
> mysql:mysql user = samba
> mysql:mysql password = ambas
> mysql:mysql database = samba
> [EMAIL PROTECTED] /usr/src/installs/samba-3.0.0/examples/pdb/mysql#

> It booted up correctly but when i try to had a user i get:
> [EMAIL PROTECTED] /usr/local/samba/bin# ./smbpasswd -a lms
> New SMB password:
> Retype new SMB password:
> No builtin nor plugin backend for plugin found
> Loading plugin:/usr/local/samba/lib/pdb/mysql.so:mysql failed!
> Failed initialise SAM_ACCOUNT for user lms.
> Failed to modify password entry for user lms
> [EMAIL PROTECTED] /usr/local/samba/bin#

> Can anybody tell me how to solve this? i cant find this "error" mentioned anywhere 
> on the net.
> I need to upgrade a server to use this auth in a couple of days so im pretty 
> desperate.

Try the following in your smb.conf:

 passdb backend = mysql:mysql

(the 'plugin' backend is obsolete).

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Mysql probs..

2003-09-26 Thread Jelmer Vernooij
On Fri, Sep 26, 2003 at 02:25:36PM +0200, collen blijenberg wrote about '[Samba] Mysql 
probs..':
> G'day..

> I'm trying to compile samba with the expsam=mysql.

> but it gives back an error:

> sswitch/wb_common.c: In function winbind_named_pipe_sock':
> nsswitch/wb_common.c:136: storage size of `sunaddr' isn't known
> make: *** [nsswitch/wb_common.o] Error 1

> mysql is working fine so no probs there..
> even without-winbind compilation it keeps
> rerturning...
Does the compile go fine if you run ./configure without
--with-expsam=mysql ?

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] how set samba use mysql

2003-09-25 Thread Jelmer Vernooij
It's included in the source distribution of Samba. Run 
./configure --with-expsam=mysql,xml

Jelmer

On Thu, Sep 25, 2003 at 06:02:56PM -0700, [EMAIL PROTECTED] wrote about 'Re: [Samba] 
how set samba use mysql':
> where i can't download ?

> > Hi,


> > Try compiling pdb_mysql from source/, not from examples/.

> > Jelmer

> > On Thu, Sep 25, 2003 at 05:33:49PM -0700, [EMAIL PROTECTED] wrote
> > about '[Samba] how set samba use mysql':
> >> i see source that samba 3.0 support mysql , how to make it happen i have
> >> been complie with mysql support but how use make plugin i try like this
> >> :
> >> [EMAIL PROTECTED] pdb]# make
> >> libtool gcc  -I../../source -I../../source/include -I../../source/ubiqx
> >> -I../../source/smbwrapper -Wall -g -c pdb_test.c
> >> mkdir .libs
> >> gcc -I../../source -I../../source/include -I../../source/ubiqx
> >> -I../../source/smbwrapper -Wall -g -c pdb_test.c  -fPIC -DPIC -o
> >> .libs/pdb_test.lo
> >> In file included from pdb_test.c:21:
> >> ../../source/include/includes.h:896:19: proto.h: No such file or
> >> directory
> >> pdb_test.c: In function `testsam_init':
> >> pdb_test.c:111: warning: implicit declaration of function
> >> `make_pdb_methods'
> >> pdb_test.c:111: incompatible types in assignment
> >> pdb_test.c:129: warning: implicit declaration of function
> >> `debug_add_class'
> >> pdb_test.c: In function `init_module':
> >> pdb_test.c:145: warning: implicit declaration of function
> >> `smb_register_passdb'
> >> make: *** [pdb_test.lo] Error 1
> >> [EMAIL PROTECTED] pdb]#


> >> --
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  http://lists.samba.org/mailman/listinfo/samba

> > --
> > Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/


> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] how set samba use mysql

2003-09-25 Thread Jelmer Vernooij
Hi,

Try compiling pdb_mysql from source/, not from examples/.

Jelmer

On Thu, Sep 25, 2003 at 05:33:49PM -0700, [EMAIL PROTECTED] wrote about '[Samba] how 
set samba use mysql':
> i see source that samba 3.0 support mysql , how to make it happen i have
> been complie with mysql support but how use make plugin i try like this :
> [EMAIL PROTECTED] pdb]# make
> libtool gcc  -I../../source -I../../source/include -I../../source/ubiqx
> -I../../source/smbwrapper -Wall -g -c pdb_test.c
> mkdir .libs
> gcc -I../../source -I../../source/include -I../../source/ubiqx
> -I../../source/smbwrapper -Wall -g -c pdb_test.c  -fPIC -DPIC -o
> .libs/pdb_test.lo
> In file included from pdb_test.c:21:
> ../../source/include/includes.h:896:19: proto.h: No such file or directory
> pdb_test.c: In function `testsam_init':
> pdb_test.c:111: warning: implicit declaration of function `make_pdb_methods'
> pdb_test.c:111: incompatible types in assignment
> pdb_test.c:129: warning: implicit declaration of function `debug_add_class'
> pdb_test.c: In function `init_module':
> pdb_test.c:145: warning: implicit declaration of function
> `smb_register_passdb'
> make: *** [pdb_test.lo] Error 1
> [EMAIL PROTECTED] pdb]#


> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Recommended passdb backend

2003-08-14 Thread Jelmer Vernooij
On Thu, Aug 07, 2003 at 05:21:51PM -0400, Damian Gerow wrote about '[Samba] 
Recommended passdb backend':
> We're in the midst of setting up a Samba 3 system as our PDC.  I come from a
> Samba 2 world, where the passdb backend was smbpasswd.  What's the ...  er,
> 'best' passdb backend at this point?

> To qualify best, there's no limitations on the type of storage used (LDAP,
> MySQL, XML, etc).  I'm just looking for something that's going to make
> integration with a 2000/XP domain easier, and is going to be well supported
> into the future.

Here's a rough list of what backend to use when:

tdb - Small (fresh) installation, only one DC
ldap - Larger (fresh) installation
smbpasswd - for backwards compatibility only
mysql - for those who have a current system with MySQL and want to
integrate that
xml - for backup purposes

Jelmer
-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/


pgp0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] FAQ or Doc f?r Samba 3 beta 1 -

2003-06-16 Thread Jelmer Vernooij
On Mon, Jun 16, 2003 at 02:26:40PM +0200, boris blaha wrote about 'AW: [Samba]  FAQ or 
Doc f?r Samba 3 beta 1 - ':
> hi

> just a question:
> what os/distribution you have
> for your samba 3.0beta1

> i have a problem on suse 8.2 with
> charset modules

What problem do you have with charset modules?

Jelmer

> > -Urspr?ngliche Nachricht-
> > Von: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] Auftrag
> > von Wolf, Alexander (CC UK)
> > Gesendet: Montag, 16. Juni 2003 13:21
> > An: '[EMAIL PROTECTED]'
> > Betreff: [Samba] FAQ or Doc f?r Samba 3 beta 1 -


> > Hello everybody,

> > is there any FAQ or correct documentation for the Samba 3
> > beta 1 release?
> > The one in the samba 3 package seems to be in some points
> > incorrect or not
> > updated.

> > I need hints to set up Samba 3.0 with winbindd as a member
> > Server in a nt4
> > Domain and also how to backup nt4 samba shares from a windows
> > box to the
> > local filesystem on a linux box with samba 3.0 client
> > software. There are
> > existing problems with non standard characters in filenames
> > such as ? or ?.
> > Any help would be appreciated!

> > regards
> > Alexander Wolf

> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba


> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/


pgp0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.0 alpha 24 and LDAP

2003-06-03 Thread Jelmer Vernooij
On Sun, Jun 01, 2003 at 08:11:38AM -0600, Jeff Means wrote about '[Samba] Samba 3.0 
alpha 24 and LDAP':
> failed to add user dn= uid=jeff-w$,ou=Computers,o=smb,dc=meanspc,dc=com
> with: No such object
> parent does not exist
> failed to modify/add user with uid = jeff-w$ (dn =
> uid=jeff-w$,ou=Computers,o=smb,dc=meanspc,dc=com)
> Failed to add entry for user jeff-w$.
> Failed to modify password entry for user jeff-w$
> [EMAIL PROTECTED] samba]#
Check whether the entry ou=Computers,o=smb,dc=meanspc,dc=com exists.

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/


pgp0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3 Docs?

2003-06-03 Thread Jelmer Vernooij
On Sat, May 24, 2003 at 06:58:52AM -0400, Michael Lueck wrote about '[Samba] Samba 3 
Docs?':
> On the Samba 3 roadmap page it shows that some docs are done, such as the Win2K
> AD support. Where would I find those docs?
Check the "Documentation" section on the Samba website. There's a link
to the 3.0/HEAD HOWTO collection there.

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/


pgp0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] CVS-HEAD -- make error: "smbd/vfs.c:267:`static_init_vfs' undeclared (first use in this function)"

2003-06-03 Thread Jelmer Vernooij
On Thu, May 15, 2003 at 08:05:18PM +0200, Kurt Pfeifle wrote about '[Samba] CVS-HEAD 
-- make error: "smbd/vfs.c:267: `static_init_vfs' undeclared (first use in this 
function)"':
> I configured "--with-vfs" -- "make" produced this error:
There is no such option in 3.0/HEAD. Are you sure you have regenerated
configure by running ./autogen.sh?

> []
> Compiling smbd/vfs.c
> smbd/vfs.c: In function `vfs_init_custom':
> smbd/vfs.c:267: `static_init_vfs' undeclared (first use in this function)
> smbd/vfs.c:267: (Each undeclared identifier is reported only once
> smbd/vfs.c:267: for each function it appears in.)
> make: *** [smbd/vfs.o] Error 1
Can you check whether 'static_init_vfs' is defined in include/config.h
?

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://jelmer.vernstok.nl/


pgp0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Translating end-of-line sequence

2003-06-03 Thread Jelmer Vernooij
On Fri, May 09, 2003 at 02:01:49AM +, John H Terpstra wrote about 'Re: [Samba] 
Translating end-of-line sequence':
> I owe you my apologies. I started to write a reply about how boring this
> question is. I should not treat you this way even though it seems you
> might have done some homework before asking.

> The problem is how to identify a file that needs to be converted and make
> sure that one that should not be converted remains un affected.

> Additionally, how should we estimate the file  size, given that the size
> will change on conversion. This creates mayhem on directory listings.

> Do you need more information?

> I will make sure this gets into the next HOWTO document.
This is probably also something for the (Meta)-FAQ.

Jelmer


pgp0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] VFS module programming

2003-04-01 Thread Jelmer Vernooij
On Tue, Apr 01, 2003 at 09:25:15AM +0200, Joachim Förster wrote about '[Samba] VFS 
module programming':
> I'm interested in VFS module programming. So I took the examples 
> (doc/examples/VFS) and compiled them. Then I added a "vfs object" line to my 
> smb.conf. I took the audit.so example.

> Result: It does not work! I can't access the share. I enabled logging and 
> found out that there is an error message, which says that samba could not 
> load the VFS module, because there is something like an unresolved symbol 
> called "default_vfs_ops".
> default_vfs_ops is declared as "extern" in audit.c. And I found the "real" 
> decleration of "default_vfs_ops" in the samba source files. So what?

> Why isn't it found by the loader? It IS there! What's wrong?
What version of samba is this with ? I don't have any problems in
3.0/HEAD

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://nl.linux.org/~jelmer/
 12:40:03 up 2 days, 20:57, 14 users,  load average: 0.04, 0.12, 0.13


pgp0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] query WINS for all registered machines in an workgroup ordomain

2003-03-24 Thread Jelmer Vernooij
On Mon, Mar 24, 2003 at 10:34:33PM +0100, Thomas Bork wrote about '[Samba] query WINS 
for all registered machines in an workgroup or domain':
> Hi,

> I searched the documentation and the web but cannot find a way to query
> a wins server for all registered machines in an workgroup or domain.
> If I want to ask the wins with nmblookup, I have to specify a single
> name to lookup, wildcards are not allowed.

> If using the broadcast facility I can search with wildcards:

> nmblookup '*' -B 192.168.0.255
> querying * on 192.168.0.255
> 192.168.0.7 *<00>
> 192.168.0.3 *<00>
> 192.168.0.10 *<00>

Is the smbtree utility what you're looking for ? 
-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://nl.linux.org/~jelmer/
 22:39:37 up 7 days,  4:54, 22 users,  load average: 3.17, 4.63, 5.26
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdb-mysql HOWTO

2003-02-14 Thread Jelmer Vernooij
On Thu, Feb 13, 2003 at 05:04:20PM +0100, Kenni wrote about '[Samba] pdb-mysql HOWTO':
> Hi,

> Does anyone know where I can find a tutorial about pdb-mysql ?
> I always checked
> http://us2.samba.org/samba/ftp/cvs_current/docs/htmldocs/pdb-mysql.html, but
> It seems to be a little bit complicated for me...
> I created a table called "user", but I don't know how to fill it...
Check out the contents of the directory examples/pdb/mysql/ in 
CVS HEAD.

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://nl.linux.org/~jelmer/
 01:43:35 up 3 days,  9:18, 13 users,  load average: 1.20, 0.93, 0.48



msg14364/pgp0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



  1   2   >