Re: Machine Account Passwords are changed on the WRONG server!!

2003-02-14 Thread Ignacio Coupeau
Brian M Hoy wrote: Summary The second point happens, because the PC will _occasionally_ use a different DC to authenticate against (it's secure channel partner in MS parlance). If it just so happens to change its machine account password with this SCP, then the machine's domain membership is

Re: Fw: About passwd changin

2003-02-14 Thread Rafal Szczesniak
On Mon, Dec 30, 2002 at 10:56:19AM +0800, David wrote: Hi, Thanks for your kindly reply. So, you mean I should add a guest account to my unix system? Such as: pcguest? You probably already have one. It is called 'guest' or 'nobody' in Linux distributions. Commonly, leaving 'guest account'

Urgent! XP SP1 Profiles troubles

2003-02-14 Thread
Help, please I have a several WinXP (w/o any SP, Russian) in Samba domain. Trouble: WinXP cann't load roaming profile. Workaround: add current user to local group Administrators. Working fine. Yesterday several WinXP SP1 Eng was installed. Trouble: WinXP cann't load roaming profile.

Re: Samba 3.0alpha21, Windows XP SP1 and Kerberos authentication

2003-02-14 Thread Luke Howard
Check the sPNMappings attribute: looks like the Windows 2000 KDC maps a number of things to HOST: dn: cn=Directory Service,cn=Windows NT,cn=Services,cn=Configuration,dc=xad-0,d c=padl,dc=com sPNMappings: host=alerter,appmgmt,cisvc,clipsrv,browser,dhcp,dnscache,replicat

Re: Samba 3.0alpha21, Windows XP SP1 and Kerberos authentication

2003-02-14 Thread Antti Tikkanen
On Fri, 14 Feb 2003, Luke Howard wrote: Check the sPNMappings attribute: looks like the Windows 2000 KDC maps a number of things to HOST: dn: cn=Directory Service,cn=Windows NT,cn=Services,cn=Configuration,dc=xad-0,d c=padl,dc=com sPNMappings:

Re: LDAP machine accounts

2003-02-14 Thread Daniel T. Gynn
On Fri, 2003-02-14 at 01:24, Stefan (metze) Metzmacher wrote: witch samba version are you using? 2.2.7a BTW: there are no files attached to your mail... They were attached, I will attach them again metze -

Re: LDAP machine accounts

2003-02-14 Thread Illtud Daniel
Daniel T. Gynn wrote: On Fri, 2003-02-14 at 01:24, Stefan (metze) Metzmacher wrote: BTW: there are no files attached to your mail... They were attached, I will attach them again Nope. None again. But looking in the headers: X-Content-Filtered-By: Mailman/MimeDel 2.1 The mailing list

Re: LDAP machine accounts

2003-02-14 Thread Daniel T. Gynn
On Fri, 2003-02-14 at 10:37, Illtud Daniel wrote: Nope. None again. But looking in the headers: X-Content-Filtered-By: Mailman/MimeDel 2.1 The mailing list stripped the attachments (as it should, IMHO!). Can't you send diff patches for the changes you made? The diff for pdb_ldap.c is:

Re: LDAP machine accounts

2003-02-14 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13 Feb 2003, Daniel T. Gynn wrote: Hi all. I have been implementing a Windows Domain using Samba and LDAP and noticed that when validating a workstation, Samba would only check the /etc/passwd file and not LDAP. I changed the pdb_ldap.c and

Re: Machine Account Passwords are changed on the WRONG server!!

2003-02-14 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 14 Feb 2003, Brian M Hoy wrote: If you believe the MS document, then the Samba BDC should pass the machine account password change request to the PDC. That would be nice! If you are using read-only replicas for Samba BDCs then the password

limits question

2003-02-14 Thread William Jojo
what do the following values in local.h do with respect to a single smbd or are they absolute limits? please explain... #define MAX_DIRECTORY_HANDLES 2048 #define MAX_OPEN_DIRECTORIES 256 #define MAX_OPEN_PIPES 2048 Thank you! Bill

Re: [PATCH] file change notification

2003-02-14 Thread Juergen Hasch
Hello Hal, thanks for coding this patch, unfortunately it doesn't work for me. Checking the generated network packets with ethereal shows that the NT_NOTIFY packet I receive on the Windwows side is invalid. The packet (frame size as shown in ethereal) is much too short, it's size is 93 bytes,

Re: 3.0Alpha21 and W2K AD 'dorking' Samba machine acct?

2003-02-14 Thread Andrew Bartlett
On Thu, 2003-02-13 at 01:30, Nik Conwell wrote: On Thu, 30 Jan 2003, Andrew Bartlett wrote: On Thu, 2003-01-30 at 23:32, Nik Conwell wrote: Anybody seeing a scenario like this? net ads join adds our machine entry to AD just fine. The machine entry object in the AD

Re: Pushing Samba functions into the kernel

2003-02-14 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 13 Feb 2003, Richard Sharpe wrote: On Thu, 13 Feb 2003 [EMAIL PROTECTED] wrote: Ok, my feelings on Samba in the kernel are the following. 1). We need to be able to de-multiplex incoming SMB's at the kernel level to get over the

Re: init_unistr2 length calculation

2003-02-14 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 13 Feb 2003, Shirish Kalele wrote: In init_unistr2, the string length for the UNISTR2 structure seems to be set equal to the number of bytes occupied by the string when encoded in the Unix charset (i.e. the value returned by strlen()).

Re: init_unistr2 length calculation

2003-02-14 Thread Shirish Kalele
Thanks for clearing that up. I took a look at the log for the file and saw that tridge expected the 'len' argument to init_unistr2() to be the character length, not the byte length of the string. So it appears the callers will have to be fixed, not the function as I thought. Would be good to

Re: [PATCH] file change notification

2003-02-14 Thread Juergen Hasch
Hi Tim, Am Freitag, 14. Februar 2003 21:52 schrieb Tim Potter: On Fri, Feb 14, 2003 at 08:28:55PM +0100, Juergen Hasch wrote: Hello Hal, thanks for coding this patch, unfortunately it doesn't work for me. Checking the generated network packets with ethereal shows that the NT_NOTIFY

Question about smbtorture

2003-02-14 Thread Srikanta Shivanna
When I run OPLOCK2 smbtorture test against a CIFS server, I don't see smbtorture responding to oplock break request from CIFS server, any idea about this problem? Sri

Re: Question about smbtorture

2003-02-14 Thread Richard Sharpe
On Fri, 14 Feb 2003, Srikanta Shivanna wrote: When I run OPLOCK2 smbtorture test against a CIFS server, I don't see smbtorture responding to oplock break request from CIFS server, any idea about this problem? So, are you observing this on the wire? Which version of smbtorture are you using?

Re: cross compiling samba-2.2.7a

2003-02-14 Thread Andrew Bartlett
On Fri, 2003-02-14 at 02:22, Vincent Sanders wrote: Hi I have recently had cause to cross compile samba 2.2.7a from x86 to arm uclibc linux. During the make i have come across a problem with the int32 macro definition in /include/includes.h (line 459) the check works out everything to do with

Re: [PATCH] file change notification

2003-02-14 Thread Tim Potter
On Fri, Feb 14, 2003 at 10:21:04PM +0100, Juergen Hasch wrote: actually it looks quite good :-) That's good to hear! Attached is a capture from two W2K machines talking to each other. Packet No. 19 shows the NT NOTIFY response packet. This capture was made using the Windows version of

Error in libsmb/clispnego.c

2003-02-14 Thread Richard Sharpe
Hi, In libsmb/clispnego.c, in spnego_gen_krb5_wrap, there is the following piece of code: asn1_push_tag(data, ASN1_APPLICATION(0)); asn1_write_OID(data, OID_KERBEROS5); asn1_write_BOOLEAN(data, 0); asn1_write(data, ticket.data, ticket.length);