[Samba] Need connection log

2010-03-08 Thread Stéphane PURNELLE
Hi all, I need to have a connection log. I file who will contain all connection information : user/date/IP and a status FAIL or OK What is the better way : utmp/wtmp or VFS object audit on the IPC$ share ? I would like to log ALL connection . thanks for your help Stephane

Re: [Samba] Using Samba NTLM authentication

2010-03-08 Thread Arkady
Hi, I apologize for bothering you but I don't really understand what should I do when my proxy get this one *:* C -- S GET ... Authorization: NTLM base64-encoded type-1-message How should I call to ntlm_auth ? And what then ? I just novice in this area , so I am little

[Samba] Error 49152

2010-03-08 Thread Joerg Thuemmler
Hi, connecting to a XP Box trying to read printer queue I get an smb_err: 49152. Printing to this share works without errors, accessing another (disk) share with the same user too. Queue and cancel commands only are errornous. Could there be some windows rights problems? Firewalls were for

Re: [Samba] Using Samba NTLM authentication

2010-03-08 Thread Bjoern Meier
2010/3/8 Arkady arka...@pineapp.com: Hi, I apologize for bothering you but I don't really understand what should I do when  my proxy  get this one : C -- S GET ... Authorization: NTLM base64-encoded type-1-message How should I call to ntlm_auth ? And what then ? I just

[Samba] nss_winbind.so delivers first group only on Solaris 10

2010-03-08 Thread Preller, Markus
Hello, I'm trying to integrate some of our Solaris 10 10/09 hosts into Microsoft AD running on 2003/2008 R2 servers. After some compile trouble I finally managed to get the whole thing running including winbind in nsswitch.conf for users and groups and PAM for authentication. The problem is

Re: [Samba] samba file locking

2010-03-08 Thread Janez Kosmrlj
On Mon, Mar 1, 2010 at 4:03 PM, Janez Kosmrlj postnali...@googlemail.comwrote: On Mon, Feb 22, 2010 at 10:18 AM, Janez Kosmrlj postnali...@googlemail.com wrote: On Sun, Feb 21, 2010 at 8:46 PM, Janez Kosmrlj postnali...@googlemail.com wrote: On Fri, Feb 19, 2010 at 9:23 PM, Ernesto

Re: [Samba] samba file locking

2010-03-08 Thread Volker Lendecke
On Mon, Mar 08, 2010 at 01:42:16PM +0100, Janez Kosmrlj wrote: update. For now it looks like fakeoplocks=yes in smb.conf is the solution. Also the audit service on the client has to be turned off. We have to do some further testing, but this looks like it is it for now. NEVER use fake

Re: [Samba] Not another SAMBA through a firewall post

2010-03-08 Thread Brother Railgun of Reason
On Fri, Mar 05, 2010 at 08:44:00PM -0800, randa...@bioinfo.wsu.edu wrote: Kevin, Thanks for the response. I was kind of thinking along the same lines as what you described. I disabled the second NIC and every samba started working through the firewall. I even wrote a simple perl socket

Re: [Samba] nss_winbind.so delivers first group only on Solaris 10

2010-03-08 Thread Preller, Markus
Hello, sometimes it's so easy ... Having a look at the GIDs in their numeric form I saw that using the following line in smb.conf --- idmap config XX : range = 1-19000 --- excluded all my groups I'm interested in. So I changed my smb.conf to --- idmap config XX : range =

[Samba] Setting up LDAP Authentification - Tree design/search scope

2010-03-08 Thread Götz Reinicke - IT-Koordinator
Hi, recently I started to evaluate and think about setting up a central LDAP system for authentification and phonebook. I'm also new to LDAP. There is a lot of doc and well documented how tos, and I came across the following question: Where is the search scope for samba defiend? Or is the LDAP

Re: [Samba] Not another SAMBA through a firewall post

2010-03-08 Thread randalls
Thanks, I will look into the bonding approach. Randall Svancara Systems Administrator/DBA/Developer Main Bioinformatics Laboratory - Original Message - From: Brother Railgun of Reason ala...@caerllewys.net To: randa...@bioinfo.wsu.edu Cc: Kevin Keane subscript...@kkeane.com,

[Samba] Upgrading our domain to Windows 2008 AD DS

2010-03-08 Thread Vaudo, David
Hi, This is my first post. Please let me know if I do something that doesn't conform to the rules. We are in the process of upgrading our Active Directory to Windows 2008. We have many systems running Samba. I've been reading post all morning about problems joining boxes running Samba to a

[Samba] Win7: Older user accounts works (fwd)

2010-03-08 Thread Jori Mantysalo
I have still no idea about what to do with problem described below. I have confirmed this with another Fedora 12 installation. It was new clean system and I only yum-installed samba and set up remote password server. Is there any easy way to see from Windows side what information system

[Samba] error today

2010-03-08 Thread Mike Eggleston
Morning, I have a user that keeps getting a temporary profile. The user is logging into the machine so the authentication through samba to ldap is working. The only item that looks odd to me in the machine log (/var/log/samba/$MACHINE.log) is 'Re-using invalid record'. I've had the user boot the

Re: [Samba] error today

2010-03-08 Thread John Drescher
On Mon, Mar 8, 2010 at 9:57 AM, Mike Eggleston mikee...@mac.com wrote: Morning, I have a user that keeps getting a temporary profile. The user is logging into the machine so the authentication through samba to ldap is working. The only item that looks odd to me in the machine log

Re: [Samba] print jobs 4GB

2010-03-08 Thread Oncaphillis
thanks for the fast reply I've stumbled over a problem with large print jobs coming from windows vista clients. Jobs above 4GB fail to be printed. The file in the spool directory grows to a size a little above 4GB and then printing is aborted. Transfer via smbclient -c print works fine and

Re: [Samba] Why isn't Samba honouring UNIX permissions? [NOT PROTECTIVELY MARKED]

2010-03-08 Thread Nigel.Pain
Classification: NOT PROTECTIVELY MARKED I recompiled and it now appears to be working. The things that were different in the compile were: The previous compile was done with ADS, Kerberos and LDAP whereas I didn't add any switches this time (not using ADS security). The person who compiled it

Re: [Samba] Setting up LDAP Authentification - Tree design/search scope

2010-03-08 Thread Gaiseric Vandal
smb.conf will list where samba searches in ldap. e.g. ldap suffix=o=abc.com ldap user suffix=ou=employees,ou=people ldap group suffix = ou=groups ldap machine suffix=ou=machines,ou=people I think the main challenge will be configuring access control lists. If you have a server you only

Re: [Samba] error today

2010-03-08 Thread Mike Eggleston
On Mon, 08 Mar 2010, John Drescher might have said: On Mon, Mar 8, 2010 at 9:57 AM, Mike Eggleston mikee...@mac.com wrote: Morning, I have a user that keeps getting a temporary profile. The user is logging into the machine so the authentication through samba to ldap is working. The

Re: [Samba] error today

2010-03-08 Thread Gaiseric Vandal
On 03/08/2010 10:37 AM, John Drescher wrote: On Mon, Mar 8, 2010 at 9:57 AM, Mike Egglestonmikee...@mac.com wrote: Morning, I have a user that keeps getting a temporary profile. The user is logging into the machine so the authentication through samba to ldap is working. The only item that

[Samba] Time stamps

2010-03-08 Thread Richard Hillis
I am new to SAMBA and I have what I'm not even sure is an issue. I am aware of the difference in time stamps between *nix and Windows. What I don't understand is this: I used touch to modify the time stamps of a large number of files on the file server from the server side to match the time in

Re: [Samba] Time stamps

2010-03-08 Thread Felix Miata
On 2010/03/08 11:39 (GMT-0500) Richard Hillis composed: I am new to SAMBA and I have what I'm not even sure is an issue. I am aware of the difference in time stamps between *nix and Windows. What I don't understand is this: I used touch to modify the time stamps of a large number of files

Re: [Samba] smbget returns wrong exit code

2010-03-08 Thread Jason Schaefer
found the same behavior using smbget with errornous parameters. Maybe it should do so: return not the error code but the count of files it got? Although that would be really strange... cu jth No, its just that the exit status is reversed from the standard. Successful completion should return

Re: [Samba] Setting up LDAP Authentification - Tree design/search scope

2010-03-08 Thread Brother Railgun of Reason
On Mon, Mar 08, 2010 at 11:04:42AM -0500, Gaiseric Vandal wrote: But in terms of an address book, if someone has an LDAP address book client (e.g. thunderbird) you can't prevent them from trying to recursively query ou=people,) vs ou=students.You can advise end users whether they

Re: [Samba] Time stamps

2010-03-08 Thread Gary Wardell
Hi, My guess is that it's your setup. I just checked some files on my systems (openSUSE 11.1, SAMBA 3.2.7; and Windows 2000 with Active Directory) and the dates and times match. Check that all systems are using the same time source and that all systems are set to the same time offset (time

Re: [Samba] error today

2010-03-08 Thread Gaiseric Vandal
On 03/08/2010 11:05 AM, Mike Eggleston wrote: On Mon, 08 Mar 2010, John Drescher might have said: On Mon, Mar 8, 2010 at 9:57 AM, Mike Egglestonmikee...@mac.com wrote: Morning, I have a user that keeps getting a temporary profile. The user is logging into the machine so the

Re: [Samba] error today

2010-03-08 Thread Mike Eggleston
On Mon, 08 Mar 2010, Gaiseric Vandal might have said: Looks like the problem is some how with the machine account (failed to find Unix account for plato$) Does pbedit plato$ show info on the machine account? Does the user have same problem on other machines?Can you remove the machine

Re: [Samba] error today [SOLVED]

2010-03-08 Thread Mike Eggleston
On Mon, 08 Mar 2010, Mike Eggleston might have said: On Mon, 08 Mar 2010, Gaiseric Vandal might have said: Looks like the problem is some how with the machine account (failed to find Unix account for plato$) Does pbedit plato$ show info on the machine account? Does the user have

[Samba] Security problem with Samba on Linux - affects 3.5.0, 3.4.6 and 3.3.11

2010-03-08 Thread Jeremy Allison
Security problem with Samba on Linux In Samba releases 3.5.0, 3.4.6 and 3.3.11 new code was added to fix a problem with Linux asynchronous IO handling. This code introduced a severe security flaw which was undetected until now. We are releasing new binaries

[Samba] about samba user issue

2010-03-08 Thread 严力
hi: recently, i download the samba Version 3.6.0-GIT-9ddeac1-devel,use cross complie and run on arm board.when set the share level = share, it's ok,but when i set the share level = user, it will can not work .it is my smb.conf as follow: [global] log file = /var/log/samba/log.%m max log

Re: [Samba] Setting up LDAP Authentification - Tree design/search scope

2010-03-08 Thread Götz Reinicke - IT-Koordinator
Hi, the ACLs are indeed one of the importent topics. Therefore I was hoping, that samba searches sub-trees for the login and auth information. Than I could set up LDAP ACLs so samba looks up all information in the tree for all groups (we do have only one fileserver for all user groups togehter)

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Stefan Metzmacher
The branch, master has been updated via 818d518... s4-gensec: Fixed wrong usage of error_string. from 85598be... s4:extended_dn_out LDB module - change counter variables to unsigned where appropriate http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch v3-4-test updated

2010-03-08 Thread Karolin Seeger
The branch, v3-4-test has been updated via f94a377... mount.cifs: don't allow it to be run as setuid root program via 5532a5d... mount.cifs: check for invalid characters in device name and mountpoint via c4a342c... mount.cifs: take extra care that mountpoint isn't

[SCM] Samba Shared Repository - branch v3-5-test updated

2010-03-08 Thread Karolin Seeger
The branch, v3-5-test has been updated via e6c856a... mount.cifs: don't allow it to be run as setuid root program via ae24005... mount.cifs: check for invalid characters in device name and mountpoint via a60afce... mount.cifs: take extra care that mountpoint isn't

[SCM] Samba Shared Repository - branch v3-5-test updated

2010-03-08 Thread Karolin Seeger
The branch, v3-5-test has been updated via cb627d3... s3: Fix the build of net_afs.c with --fake-kaserver=yes, bug 7216 from e6c856a... mount.cifs: don't allow it to be run as setuid root program http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test - Log

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Matthias Dieter Wallnöfer
The branch, master has been updated via f8dba77... s4:ldb_ldap.c - fix indentation via 2d03011... LDB:TDB backend - change counter variables to unsigned where appropriate via 4a2b78a... LDB:SQLITE3 backend - change counter variables to unsigned where appropriate

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Matthias Dieter Wallnöfer
The branch, master has been updated via 30ff229... s4:LDB TDB index code - reintroduce accidentally removed code part from f8dba77... s4:ldb_ldap.c - fix indentation http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Matthias Dieter Wallnöfer
The branch, master has been updated via 4e16a28... LDB:common - Change counters to unsigned where appropriate from 30ff229... s4:LDB TDB index code - reintroduce accidentally removed code part http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Jeff Layton
The branch, master has been updated via f4cb528... samba: remove cifs-utils tools from build systems from 4e16a28... LDB:common - Change counters to unsigned where appropriate http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Björn Jacke
The branch, master has been updated via 2f1fa4f... s3: add man page for vfs_crossrename via 0769a18... s3: add vfs_crossrename via 583de7b... s3: remove cross-device rename support from vfs_default from f4cb528... samba: remove cifs-utils tools from build systems

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Björn Jacke
The branch, master has been updated via a4dc50e... s3: add missing Makefile.in changes for vfs_crossrename from 2f1fa4f... s3: add man page for vfs_crossrename http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Matthias Dieter Wallnöfer
The branch, master has been updated via 8d3b7d4... LDB:asq module - change counters to unsigned where appropriate via df17e1b... LDB:sort module - change counters to unsigned where appropriate via 8248069... LDB:rdn name module - change counters to unsigned where

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Matthias Dieter Wallnöfer
The branch, master has been updated via fde707a... s4:dns_update_list file: install it properly into the private directory via a34eafc... Revert s4:script/installmisc.sh - install dns_update_list to target setup folder from 8d3b7d4... LDB:asq module - change counters to

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Jeff Layton
The branch, master has been updated via 8a76352... samba: remove Linux cifs-utils files from samba master branch from fde707a... s4:dns_update_list file: install it properly into the private directory http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch v3-5-stable updated

2010-03-08 Thread Karolin Seeger
The branch, v3-5-stable has been updated via 1c9494c... Revert Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to respond to a read or write. via cd499ea... WHATSNEW: Prepare release notes for Samba 3.5.1. via ab98964... VERSION: Raise version number up

[SCM] Samba Shared Repository - annotated tag release-3-5-1 created

2010-03-08 Thread Karolin Seeger
The annotated tag, release-3-5-1 has been created at e70dd664c57a77822f845ac8ec987ad9ebd86cc1 (tag) tagging 1c9494c76cc9686c61e0966f38528d3318f3176f (commit) replaces release-3-5-0 tagged by Karolin Seeger on Mon Mar 8 20:40:09 2010 +0100 - Log

[SCM] Samba Shared Repository - branch v3-4-stable updated

2010-03-08 Thread Karolin Seeger
The branch, v3-4-stable has been updated via 49fc62c... Revert Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to respond to a read or write. via bdad635... WHATSNEW: Prepare release notes for Samba 3.4.7. via df5a563... WHATSNEW: Start release notes for

[SCM] Samba Shared Repository - annotated tag release-3-4-7 created

2010-03-08 Thread Karolin Seeger
The annotated tag, release-3-4-7 has been created at 574d9ad7b6c795cfcdd8bb53456f656908c29bc9 (tag) tagging 49fc62cc5d8bcb2ef246fa6505c99071b406c413 (commit) replaces release-3-4-6 tagged by Karolin Seeger on Mon Mar 8 20:54:29 2010 +0100 - Log

[SCM] Samba Shared Repository - branch v3-3-stable updated

2010-03-08 Thread Karolin Seeger
The branch, v3-3-stable has been updated via 007f9c9... Revert Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to respond to a read or write. via cb608fe... WHATSNEW: Prepare release notes for Samba 3.3.12. via 689fd1b... VERSION: Raise version number up

[SCM] Samba Shared Repository - annotated tag release-3-3-12 created

2010-03-08 Thread Karolin Seeger
The annotated tag, release-3-3-12 has been created at cf4bfa915b638bce6ad9433328a8a4a7d6ba562d (tag) tagging 007f9c90e952aeea2d8f73cff3ccd0f747a9c06e (commit) replaces release-3-3-11 tagged by Karolin Seeger on Mon Mar 8 21:09:38 2010 +0100 - Log

svn commit: samba-web r1407 - in trunk: . devel history

2010-03-08 Thread kseeger
Author: kseeger Date: 2010-03-08 14:06:10 -0700 (Mon, 08 Mar 2010) New Revision: 1407 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=1407 Log: Announce Samba 3.5.1, 3.4.7 and 3.3.12 Karolin Added: trunk/history/samba-3.3.12.html

svn commit: samba-web r1408 - in trunk/security: .

2010-03-08 Thread kseeger
Author: kseeger Date: 2010-03-08 14:36:30 -0700 (Mon, 08 Mar 2010) New Revision: 1408 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=1408 Log: Add security advisory Karolin Added: trunk/security/CVE-2010-0728.html Changeset: Added:

svn commit: samba-web r1409 - in trunk/security: .

2010-03-08 Thread vlendec
Author: vlendec Date: 2010-03-08 15:00:48 -0700 (Mon, 08 Mar 2010) New Revision: 1409 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=1409 Log: Mention the bug reporter Modified: trunk/security/CVE-2010-0728.html Changeset: Modified:

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Michael Adam
The branch, master has been updated via b845025... s3:release-scripts: fix create-tarball to treat vendor patch level correctly from 8a76352... samba: remove Linux cifs-utils files from samba master branch http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Michael Adam
The branch, master has been updated via 9113e14... s3:build: Fix automatic building of vfs_tsmsm if gpfs and dmapi are present. from b845025... s3:release-scripts: fix create-tarball to treat vendor patch level correctly http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master

[SCM] Samba Shared Repository - branch master updated

2010-03-08 Thread Jeremy Allison
The branch, master has been updated via 56b13ee... Revert Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to respond to a read or write. from 9113e14... s3:build: Fix automatic building of vfs_tsmsm if gpfs and dmapi are present.

Build status as of Tue Mar 9 07:00:06 2010

2010-03-08 Thread build
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2010-03-08 00:00:20.0 -0700 +++ /home/build/master/cache/broken_results.txt 2010-03-09 00:00:06.0 -0700 @@ -0,0 +1,21 @@ +Build status as of Tue Mar 9 07:00:06 2010 + +Build counts: +Tree