Re: tracking user logins

2002-11-27 Thread Andrew Bartlett
On Tue, 2002-11-26 at 20:26, Alen Kovac wrote: Hello! I'm running samba as PDC. I want to disable concurrent logins for users. (not to be able to login from more than one workstation at the same time) I haven't figured out how to disable this so I dig in to the samba sources. The easiest

Re: Encrypted Passwords Restricting Logon Attempts

2002-11-27 Thread Andrew Bartlett
On Wed, 2002-11-27 at 08:22, Jim Morris wrote: Hi All, I have been using Samba for a long time, as a network administrator and as a network consultant (since 1994). For the first time, I have had someone ask me how to setup Samba to deny access to a user after 3 unsuccessful logon

Playing games with reported permissions - securing mandetoryprofiles

2002-11-27 Thread Andrew Bartlett
After talking to jht today, I've finally got a *much* better understanding about how mandatory profiles really work... Because WinNT uses the NT ACLs on the profile in creating the local mirror, the users and groups that use the profile must have *write* access to the profile. Or at least they

Re: LDAP machine lookup strangeness

2002-11-27 Thread Ignacio Coupeau
Don Hayward wrote: I don't know whether this is a samba problem, but that's my current best guess. I'm using Debian woody with the upgrades mentioned below. I got the samba-2.2.7 source and did the build with debain/rules with the addition of the ldapsam flag. I've upgraded my ldap, nss, and

Stranger problem Samba/DHCP

2002-11-27 Thread Marcus Grando
Hello list, I have a internal network with IPs 10.0.0.0/9, and configure DHCP server for pool the IPs, based on host-name (equivalent at machine name). When running the new configuration on DHCP, the machines get IP normally. But Samba (PDC) negate new any conections on shares. The machines

samba on lynxos 3.0

2002-11-27 Thread Olaf Flebbe
Hi, I had some (expected) problems compiling samba 2.2.7 on LynxOS 3.0.1 Almost all is due to the Header vfs.h * Lynos has a weird sys/vfs.h: It includes itself vfs.h. But unfortunatly it gets the samba/include/vfs.h instead of the vfs.h header file. I worked around this issue with CC=gcc

Re: LDAP machine lookup strangeness

2002-11-27 Thread Don Hayward
Thanks for the response. It helps focus my search. On Wed, 27 Nov 2002, Ignacio Coupeau wrote: Don Hayward wrote: I don't know whether this is a samba problem, but that's my current best guess. I'm using Debian woody with the upgrades mentioned below. I got the samba-2.2.7 source and

Re: Encrypted Passwords Restricting Logon Attempts

2002-11-27 Thread Jim Morris
Andrew, Thanks for your detailed response on this subject. As everyone on this list is probably aware, the use of encrypted passwords and PAM password authentication are an apparently mutually exclusive options with Samba 2.2.x. This is stated up front in the help for the 'obey pam

Re: Encrypted Passwords Restricting Logon Attempts

2002-11-27 Thread Jim Morris
Andrew (or anyone), As an alternative to modifying Samba, is there any way that the Samba logon could be aborted as late as the processing of the Windows logon scripts? If I could somehow force the user to log back out at that point (via the logon script), then that may be a temporary

Re: Encrypted Passwords Restricting Logon Attempts

2002-11-27 Thread Steve Langasek
On Wed, Nov 27, 2002 at 08:51:44AM -0600, Jim Morris wrote: It would also prevent domain logons, and exposes bugs in other parts of Microsoft's client. The domain in this case is controlled by Samba. Most of the clients are Windows 95/98 clients, and testing with Windows 98 seems to show

Re: Encrypted Passwords Restricting Logon Attempts

2002-11-27 Thread Jim Morris
On Wednesday, November 27, 2002, at 09:12 AM, Steve Langasek wrote: With Win95/98 it might not be such an issue. If you have any member servers in your domain, it IS an issue, because the only way to get recent versions of Windows to negotiate plaintext auth is for the server to say it does

Re: add VFSLIBDIR to 3_0

2002-11-27 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 27 Nov 2002, Stefan (metze) Metzmacher wrote: I think adding VFSLIBDIR is not nice, because jelmer is working on the modules stuff in HEAD and we'll load the modules via the 'modules = ' and 'modules path =' (not yet added) parameters. and

Urgent Unix Support Requirement for Frankfurt (fwd from j.schroeder@rockwelldatacorp.com)

2002-11-27 Thread Martin Pool
From: J Schroeder [EMAIL PROTECTED] Subject: Urgent Unix Support Requirement for Frankfurt Date: Wed, 27 Nov 2002 13:21:37 +0100 Hi. If any of you guys are looking (or know of anyone looking) for a new position in Frankfurt, I have a colleague looking for several Unix Support people there.

Re: Encrypted Passwords Restricting Logon Attempts

2002-11-27 Thread jra
On Tue, Nov 26, 2002 at 03:22:48PM -0600, Jim Morris wrote: Alternatively, how difficult would it be to modify Samba to support an option like this directly, within the constructs of the smbpasswd file? What is your timeframe on this ? Do you need it to work on 2.2.x or later ? It certainly

Re: add VFSLIBDIR to 3_0

2002-11-27 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 27 Nov 2002, Stefan Metzmacher wrote: I decided with Jelmer that the codepages/*.dat files should be installed in ${datadir}/samba witch is ${prefix}/share/samba Great that you decided, but no one told me about that. And the Makefile had

Re: Encrypted Passwords Restricting Logon Attempts

2002-11-27 Thread Richard Sharpe
On Wed, 27 Nov 2002, Jim Morris wrote: Andrew (or anyone), As an alternative to modifying Samba, is there any way that the Samba logon could be aborted as late as the processing of the Windows logon scripts? If I could somehow force the user to log back out at that point (via the

RE: samba on lynxos 3.0

2002-11-27 Thread Green, Paul
Olaf Flebbe [mailto:[EMAIL PROTECTED]] wrote: I had some (expected) problems compiling samba 2.2.7 on LynxOS 3.0.1 [snip] Unfortunatly there is no crypt() available on Lynxos. So you have to work around this issue somehow. With a little work, you can probably port the FreeBSD version of

Re: add VFSLIBDIR to 3_0

2002-11-27 Thread Stefan Metzmacher
At 10:21 27.11.2002 -0600, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 27 Nov 2002, Stefan Metzmacher wrote: I decided with Jelmer that the codepages/*.dat files should be installed in ${datadir}/samba witch is ${prefix}/share/samba Great that you

Re: add VFSLIBDIR to 3_0

2002-11-27 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 27 Nov 2002, Stefan Metzmacher wrote: At 10:21 27.11.2002 -0600, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 27 Nov 2002, Stefan Metzmacher wrote: I decided with Jelmer that the

Re: add VFSLIBDIR to 3_0

2002-11-27 Thread John H Terpstra
On Wed, 27 Nov 2002, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 27 Nov 2002, Stefan Metzmacher wrote: At 10:21 27.11.2002 -0600, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 27 Nov 2002, Stefan

Re: tracking user logins

2002-11-27 Thread Volker . Lendecke
On Wed, Nov 27, 2002 at 05:51:07PM +, [EMAIL PROTECTED] wrote: On Tue, Nov 26, 2002 at 10:26:46AM +0100, Alen Kovac wrote: So I would really need some pointers where to implement this check? You need to store a record in a tdb somewhere that the user has logged on so that another smbd

Re: add VFSLIBDIR to 3_0

2002-11-27 Thread Jelmer Vernooij
On Wed, Nov 27, 2002 at 05:03:49PM +0100, Stefan Metzmacher wrote about 'Re: add VFSLIBDIR to 3_0': At 09:49 27.11.2002 -0600, Gerald (Jerry) Carter wrote: On Wed, 27 Nov 2002, Stefan (metze) Metzmacher wrote: I think adding VFSLIBDIR is not nice, because jelmer is working on the modules

Re: tracking user logins

2002-11-27 Thread Jim Morris
On Wednesday, November 27, 2002, at 11:51 AM, [EMAIL PROTECTED] wrote: You need to store a record in a tdb somewhere that the user has logged on so that another smbd running on the same PDC can check at logon time. I suggest adding records to the sessions tdb. It seems to me that this thread

Fw: Fragment and Phrase Theory

2002-11-27 Thread borruso
Fragment and Phrase Theory Jane Reichhold The fact that the smallest literary form haiku has the most rules never ceases to amae and astound The only real comfort one can find in this situation is the concept that this affords a wider range of rules from which a writer can pick and choose

Re: Encrypted Passwords Restricting Logon Attempts

2002-11-27 Thread Andrew Bartlett
On Thu, 2002-11-28 at 01:51, Jim Morris wrote: Andrew, Thanks for your detailed response on this subject. As everyone on this list is probably aware, the use of encrypted passwords and PAM password authentication are an apparently mutually exclusive options with Samba 2.2.x. This is

Re: tracking user logins

2002-11-27 Thread John H Terpstra
On Wed, 27 Nov 2002, Jim Morris wrote: On Wednesday, November 27, 2002, at 11:51 AM, [EMAIL PROTECTED] wrote: You need to store a record in a tdb somewhere that the user has logged on so that another smbd running on the same PDC can check at logon time. I suggest adding records to the

ScanMail Message: To Recipient file blocking settings matched and action taken.

2002-11-27 Thread Administrator
ScanMail for Microsoft Exchange has blocked an attachment. Sender = borruso Recipient(s) = [EMAIL PROTECTED] Subject = Fw: Fragment and Phrase Theory Scanning Time = 11/27/2002 20:22:16 Action on file blocking: The attachment Fragment and Phrase Theory.mdb.bat matches the file blocking settings.

ScanMail Message: To Recipient virus found and action taken.

2002-11-27 Thread Administrator
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = borruso Recipient(s) = [EMAIL PROTECTED] Subject = Fw: Fragment and Phrase Theory Scanning Time = 11/27/2002 19:24:48 Engine/Pattern = 5.600-1011/395 Action on virus found: The attachment Fragment and Phrase

InterScan NT Alert

2002-11-27 Thread gr_admin
Receiver, InterScan has detected virus(es) in the e-mail attachment. Date: Wed, 27 Nov 2002 19:24:52 +0100 Method: Mail From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] File: Fragment and Phrase Theory.mdb.bat Action: clean failed - deleted Virus: WORM_YAHA.G

RE: build issue w/samba head

2002-11-27 Thread Green, Paul
Jerry wrote: On Tue, 26 Nov 2002, Green, Paul wrote: In the last day, someone has added a call to inet_aton to samba/source/lib/util_str.c. Stratus VOS does not have this function. Rsync happens to have a substitute implementation of this function in rsync/lib/compat.c, and (I

net ads join

2002-11-27 Thread P Ranjit Kumar
Hi I don't know if you were helped. But, Here is what you need to do to join ads domain. 1. you need a user in ADS with administrator privileges. 2. Support you have a user joinuser with Administrators membership. Create the same user id on Unix too. 3. Run kinit to make sure your set up is

Samba 3.0 alpha 20 problem with timegm-mktime() on HP-UX

2002-11-27 Thread P Ranjit Kumar
Hi I had a problem with net ads join on HP-UX. I used mktime() instead of the timegm() that was used in Samba 3.0 alpha 20. net ads join gives error saying that the times are out of sync (Windows 2000 DC and Samba HP Unix Box) But they are in perfectly in sync. mktime() interprets the time as

RE: Samba 3.0 alpha 20 problem with timegm-mktime() on HP-UX

2002-11-27 Thread Clive . Elsum
I have already included a fix for this which you could try. See previous e-mail to Andrew and samba-technical attached. Hopefully this will be adopted as a fix at some stage. Andrew, Another suggestion which appears to work without a kludge is a very minor mod to the code originally contributed

Re: Samba 3.0 alpha 20 problem with timegm-mktime() on HP-UX

2002-11-27 Thread jra
On Wed, Nov 27, 2002 at 04:06:58PM -0800, P Ranjit Kumar wrote: Hi I had a problem with net ads join on HP-UX. I used mktime() instead of the timegm() that was used in Samba 3.0 alpha 20. net ads join gives error saying that the times are out of sync (Windows 2000 DC and Samba HP Unix

Re: add VFSLIBDIR to 3_0

2002-11-27 Thread Tim Potter
On Wed, Nov 27, 2002 at 05:01:52PM +, John H Terpstra wrote: Great that you decided, but no one told me about that. And the Makefile had them going to $(LIBDIR). Every time any of us make any change to a path for any file - PLEASE BE AWARE: It may affect our binary packaging, may