RE: [Samba] samba PDC

2002-11-11 Thread Noel Kelly



You missed a crucial piece of information - what client are you 
using?

If it 
is XP then you will need to apply a registry change - read http://hr.uoregon.edu/davidrl/samba.html

"Use 
the Group Policy editor (gpedit.msc) and disable the "Domain Member: Digitally 
encrypt or sign secure channel data". Alternately, you can make the following 
change to the registry:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]"requiresignorseal"=dword:
"


Noel


  -Original Message-From: Liviu Balan 
  [mailto:[EMAIL PROTECTED]]Sent: 11 November 2002 
  08:47To: [EMAIL PROTECTED]Subject: [Samba] samba 
  PDC
  Hello
  I'm trying to replace the windows PDC of my 
  company with a linux one.
  I've tried doing this with samba...It allows me 
  to join a computer to the specific domain, but it won't allow me to log in, 
  although i've created the users and passwords (useradd and 
  smbpasswd)
  Can anyone please email me a smb.conf example 
  that works for him/her?
  Thank you
  ---Incoming mail is certified Virus Free.Checked by 
  AVG anti-virus system (http://www.grisoft.com).Version: 6.0.410 / Virus 
  Database: 231 - Release Date: 
31/10/2002


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002
 


Re: [Samba] File corruption with write cache enabled - patch included

2002-11-11 Thread Bo Jacobsen
 On Thu, Oct 03, 2002 at 12:52:10PM +0200, Rasmus Borup Hansen wrote:
  I recently found out that write caching in samba sometimes leads to
  file corruption (the setup program for Sophos Antivirus generates
  corrupted files when making a central installation on a Samba
  share).
  
  This morning I tracked down the place in the Samba code that leads to
  corruption. Here is what happened to me:
  
  write cache size is 8192 bytes. A client opens a new file and writes
  byte no. 30959. This byte is cached. Then the program write byte
  no. 61919 which is written directly to the disk, since the cache
  doesn't go that far. The client then writes bytes no. 0 through
  61920. Since these bytes don't fit into the cache they are written
  directly to the disk. However, the cached byte at position 30959 is
  not discarded. When this byte is later written to the disk, the file
  will get corrupted.
  
  The patch below detects this situation and discards the cached
  byte(s). I guess that some profiling code should also be added at some
  time. The patch is against version 2.2.5.
  
  Perhaps you should warn users of current versions against using write
  caching.
  
  I believe that this bug is the same as bug no. 24502 submitted by
  Henrik Qwinto [EMAIL PROTECTED].
  
  Best regards, and thank you for making Samba,
 
 Damn good call ! Very good bugfix. I've committed it to all
 Samba branches. Thanks a *lot* for this fix !
 
 Jeremy.
 -- 

Is this patch included in 2.2.6.

 Perhaps you should warn users of current versions against using write
  caching.

Are we talking about oplocked files or has it also something to do with strict sync.

Bo.


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] MSDFS...

2002-11-11 Thread Andrew Bartlett
On Mon, 2002-11-11 at 18:52, Fabrizio Morbini wrote:
 Hi, After some experiment with MSDFS on Samba I have seen this problems 
 and I don't know if this are caused by my possible wrong configuration or 
 if are feature of MSDFS:

 So my question is: How can I use the replication feature (if exists) of 
 MSDFS?

MSDFS is distributed, but not replicated.  

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


[Samba] Import File Size Limits?

2002-11-11 Thread Lloyd Lowe
Hi There,

Can you tell me why we can't import a MBOX folder which is 67Mb ion
size. It was a Outlook Folder whcih was imported to Netscape copied to
Mozilla On the linux 8.0m system and I have asked Ximian to Import the
folder, The problem is that It times out and the same applies to another
folder which is about 65Mb in size. Can you supply me with a patch or
temp fix.

Secondly , can you tell me how I can import Outlook Contacts into
Ximian. We are officially moving to Linux as our chosen Operating
System, and this move is issential for our staff members..

Thanks
Lloyd



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Multiple Groups Assigned to a File

2002-11-11 Thread Buchan Milne
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

 Message: 14
 From: Noel Kelly [EMAIL PROTECTED]
 To: 'Jess Cannata' [EMAIL PROTECTED], [EMAIL PROTECTED]
 Subject: RE: [Samba] Multiple Groups Assigned to a File
 Date: Wed, 6 Nov 2002 15:07:33 -


 -Original Message-
 From: Jess Cannata [mailto:doubtful500;hotmail.com]
 Sent: 06 November 2002 14:28
 To: [EMAIL PROTECTED]
 Subject: [Samba] Multiple Groups Assigned to a File


 I'm new to this group so I hope that this is the right place to ask this
 question (if not, let me know):

 We are setting up several Samba servers and we've run into a problem
with
 file permissions. We've have a few shared folders that we'd like for
some
 GROUPS to have read/write access and other GROUPS to have only read
access.
 I cannot figure out how to do this because Linux/Unix seems to have the
 limitation that a file can only be owned by one user and one group,
and the
 permissions are only applicable to the owner (user and group). Is
there a
 way to assign more than one group to a file, and make it so the
different
 groups have different permissions (Like NDS and Microsoft do)? If
not, how
 do people get around this?

 Thanks for any help.

 Should have added that if you want more sophisticated (and therefore more
 complex administration) permissions then you can use ACLs.  However at the
 moment this requires that you compile your kernel with ACL support using
 patches or grab an ACL enabled kernel/filesystem like XFS from SGI.


ACLs don't require that you recompile your kernel, just choose your
distro. ACLs (with support in samba) have worked out the box (on XFS) on
Mandrake since 8.1, and 9.0 also supports ACLs on ext2/ext3. With 2.4.19
kernels and later however, you need to mount any FS which uses ACLs with
the acl option before they will work, and this is not the default (since
it breaks LSB-copmliance).

I think SuSE also has ACL support, but I don't use it, so can't be sure.

Regards,
Buchan

- --
|Registered Linux User #182071-|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE9z4YKrJK6UGDSBKcRAg0gAJwKNEiqjEN1RDgONG/RzhSghdyKBQCgjBk/
nUWefO9nZ3IZ9DlcNA9agTM=
=IGfp
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Samba and non-ASCII characters

2002-11-11 Thread Fabio Lindner
Hi,

I'm have my first Samba PDC 2.2.6 up and running (great!) but I have a
problem with *some* non-ASCII characters.

Here are some details:

- Windows (Win98, Win2k and WinXP) clients use Portuguese-Brazillian (pt-BR)
as language.
- Linux distribuition: Mandrake 9.0 with the latest updates (from
MandrakeSoft) and Portuguese-Brazillian support.
- 'chcp' from a command prompt give me: Active code page = 850
- Some relevant options in my smb.conf:
  client code page = 850
  character set = ISO8859-1
  default case = lower
  preserve case = yes
  case sensitive = no
  short preserve case = yes

I'm logged as root in my Linux box and as administrator in my NT server box
and smbmounted a share of my interest. I'm just trying to copy some folders
from NT to Linux. Now my real problem:

I can't access a directory or file named 'Atualização' or 'Á.doc' for
example. A ls or cp command give me 'No such file or directory' error
message. If I rename them (server-side) to 'Atualizaçao' or 'Atualizaçéo',
etc. I can
access them. Any other file or directory I can access w/o a problem.

Have you experienced something like that ? Probably I'm doing a mistake
somewhere...

Thanks.

---
Fabio Lindner

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] nmbd is not working

2002-11-11 Thread Taki
Hi,

I'm having a hard time running samba.  I was going through the
DIAGNOSIS.txt, and found that on test 4, nmblookup -B... returns nothing.

I was trying to run samba from swat's status.  smbd seems to work since
when I click start button, the daemon appears on the list, but nmbd doesn't.

I was thinking that nmbd was incorrectly installed as described in 
DIAGNOSIS,txt, but how many times I redownload samba, nothing changes.

I'm using samba 2.2.6 on redhat 7.3.

Thanks in advance

Taki
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] making Samba works together with PAM

2002-11-11 Thread Alceu Rodrigues de Freitas Jr.
Ok fellows,

This is my last try. Please, anybody tell me if
something is missing on this list!

I need to setup on a Linux + Samba (PDC) to restrict
just one login per ID (not allow two logins with same
id).So:

1 - edit /etc/pam.d/samba - chaging session line with
session required /lib/security/pam_limits.so

2 - in /etc/security/limits.conf:
   *   - maxlogins   1

3 - in smb.conf:
   obey pam restrictions = yes 
   utmp = yes

4 - compile Samba --with-utmp

And the last question: Samba provided by RedHat
7.3(valhalla) as RPM package has the --with-utmp
option compiled, or I must download the source code of
2.2.6 to get this feature?

Thank you very much,


=
Alceu Rodrigues de Freitas Junior
--
[EMAIL PROTECTED]
http://www.imortais.cjb.net
--
Hell is empty and all the devils are here.
-- Wm. Shakespeare, The Tempest

___
Yahoo! GeoCities
Tudo para criar o seu site: ferramentas fáceis de usar, espaço de sobra e acessórios.
http://br.geocities.yahoo.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] System error 53 has occurred

2002-11-11 Thread Marian Mlcoch, Ing



Your test take two missconf.
1. On samba server you must have: encrypt passwords 
= yes and domain logons = no and security=user in global conf
2. On W2K server you must have not domain only 
workgroup and you must log in as user with name and password identicall for 
samba smbpasswd -a used. I mean that tcpip on both work ok.

Bye.

  - Original Message - 
  From: 
  Chai-Wang Chang 
  To: [EMAIL PROTECTED] 
  Sent: Monday, November 11, 2002 11:43 
  AM
  Subject: [Samba] System error 53 has 
  occurred
  
  
  Dear 
  Sir,
  
  I have 
  been getting this error on the PC site when I tried to connect to the Samba 
  server. I have Red Hat 8.0 installed and I am using Windows 2000 Server as 
  client. I have tried all the steps listed in the ‘DIAGNOSIS.txt’ and here are 
  the results.
  Test 1, 
  2,3,4 passed.
  Test 5: 
  I can only use IP but not PC Name.
  Test 6, 
  7 passed.
  Test 8: 
  I got “System error 53 has occurred.” from PC. I did add server name to the 
  lmhosts file and the result is still the 
  same.
  Test 9: 
  Failed. Same error as Test 
  8.
  Test 
  10: passed.
  Test 
  11: The samba server did appear in the File Manager. But, when I double click 
  on the name, the same error as Test 8 appeared.
  
  I am 
  looking for help and any suggestion to solve this problem. Your kindly 
  response is greatly appreciated. Thanks.
  
  Best 
  regards,
  Chai-Wang 
  Chang


[Samba] Smbmount password interfaces

2002-11-11 Thread W. Michael Petullo
I'm the new maintainer of pam_mount, a PAM module that allows SMB (and
other types of) volumes to be mounted for a user when he logs in using
his system password.  In the past, pam_mount has passed a volume password
to smbmount using the -P parameter or PASSWD environment variable.

This is not acceptable, as any user can learn other's passwords with
some creative ps usage.  However, smbmount does not currently allow a
more secure means to enter passwords.

Using a credentials file is not really appropriate for pam_mount either.
Pam_mount needs to be able to get the system password from PAM and ship
it off to smbmount somehow.  A static password file does not really
work nicely.

Mount allows passwords to be read from stdin if the -p parameter is used:

mount -p0 ...

The number is the file descriptor to read the password from.

Could you implement a similar option in smbmount?  When the current
version of smbmount prompts for a password, it tries to read it from
/dev/tty.  Allowing a user to tell smbmount to read its password from
stdin would make smbmount more flexible in pipelines.

-- 
Mike

:wq
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] W32.Klez.E removal tools

2002-11-11 Thread bill
WARNING!!! (from heimdall.inter.net.il)

The following message attachments were flagged by the antivirus scanner:

Attachment [2.2] install.exe, virus infected: W32/Klez-H.  Action taken: deleted

attachment: 65cars015[1].jpg


[Samba] error conecting from winxp to samba on tru64 or linux

2002-11-11 Thread parthoens
Hello

My name is Ronald Parthoens and I have problems with my samba.  When 
connecting with my windows XP to my samba server (version 2.2.5)on Tru 64.  I 
receive an error.
That error I receive on every XP workstation that is in the company.

I allready did the following winxp registry update.
Windows Registry Editor Version 5.00
;
; This registry key is needed for a Windows XP Client to join
; and logon to a Samba domain. Note: Samba 2.2.3a contained 
; this key in a broken format which did nothing to the registry - 
; however XP reported registry key imported. If in doubt
; check the key by hand with regedit.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
requiresignorseal=dword:

Do you know what I can also try to connect to my samba server.

Thanks in advance

Ronald Parthoens
Belgium

attachment: foutmelding samba.gif

Re: [Samba] Installing samba 2.2.6 on Mac OS 10.2.x

2002-11-11 Thread Frank Matthieß
On Mon, Nov 11, 2002 at 05:00:23AM -0800, Ian Roberts wrote:
 I am trying to install Samba 2.2.6 over the default installation of samba 2.2.3a 
that ships with Mac OS 10.2.1.
 I have tried to install this with the configure line from apple's guide to compiling 
samba 
 http://www.opensource.apple.com/projects/documentation/ howto/html/osxsmb.html, but 
this was with a previous version of os 10.
 
 The configure line reads,
 ./configure --with-syslog --prefix=/etc/samba \
   --bindir=/usr/bin --sbindir=/usr/sbin --libdir=/etc/samba --mandir=/usr/share/man
 
 This config line could not install samba, because there was a problem with cups, so 
I added-

./configure isn't for install the source package.


The typical way ist 

./configure
./make
./make install

The last step must be as superuser/root/admin/bofh or else.


 --disable-cups to the config line.


This should be ok, id you havn't cups on your maschine.

-- 
Frank Matthieß[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] RE: samba with redhat and act

2002-11-11 Thread Tony McGrew
Yes I get that.  I am able to get it to work properly by giving complete
world access to the file and folders, which means basically it has to be on
a share by itself, or one that has complete rwxrwxrwx.  I would of course
prefer to have only group access but that doesn't work for this act
database.  I also turned off op locks. Don't know if that will cause any
problems. but it made the file close properly when someone gets out of it.

Tony McGrew
www.multicam.com

-Original Message-
From: Kevin Brown [mailto:isp;dotgonepc.com]
Sent: Saturday, November 09, 2002 11:58 PM
To: [EMAIL PROTECTED]
Subject: samba with redhat and act


I am having similar problems since moving from 2.0.7 samba.
when you type in smbstatus do you get status codes that say:
0x3 and 0x1

kevin

I have all my Novell stuff finally moved over to the samba server and most
all of it is working. I have a problem with an act database though. Whenever
I
try to open it windows 2000 reports that it is locked by another user. I
check
the status and the files are not open at all so it should not be a locking
issue.
Other files (spreadsheets, docs etc..) all open fine. The system is RH7.3
with
Samba 2.2.5 I have a bunch of engineers sharing solidworks files and they
are
having no problems, only act it appears. Any help will be appreciated. Tony
McGrew www.multicam.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Does samba use NSS to find users/groups ?

2002-11-11 Thread Saulius Gurklys
sauron wrote:

For this features i'm use nss_ldap from  www.padl.com :)



Yes, I know that. And actualy it works with other servises(ssh,ftp)
just fine, but not with samba... (maybe just for me ?) :(

--
Saulius

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] 2.2.6 and printer questions

2002-11-11 Thread Eirik Thorsnes
Gerald (Jerry) Carter wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 On Fri, 8 Nov 2002, Thomas Bork wrote:

   Is it correct, that the automatic download of printer drivers is only
   possible for printers, which are associated with an printcap entry?
   When I'm uploading a postscript driver for a *virtuell* printer, which
   is not associated with an printcap entry and then making an automatic
   installation of the driver on w2k, the status of this printer is
   always Failure. The definition in smb.conf is:

 No.  Any printer can have drivers associated with it.




 cheers, jerry
  -
  Hewlett-Packard   - http://www.hp.com
  SAMBA Team-- http://www.samba.org
  GnuPG Key  http://www.plainjoe.org/gpg_public.asc
  ISBN 0-672-32269-2SAMS Teach Yourself Samba in 24 Hours 2ed
  I never saved anything for the swim back. Ethan Hawk in Gattaca
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.2.0 (GNU/Linux)
 Comment: For info see http://quantumlab.net/pine_privacy_guard/

 iD8DBQE9z8CbIR7qMdg1EfYRApPvAJ9XERToLG0lXTzqNTJ9ng/mk8STVwCglGYO
 TMHHKq64hrwr4iCG4Y4eM1A=
 =JTgf
 -END PGP SIGNATURE-


Of course, but since the lpq command for a virtual printer don't give a
successfull result - you get an error on the client for the status.
My solution here was to set a special lpq command for the virtual
printer, which always returned a successful result when asked.

Eirik Thorsnes

-- 
REAL Programmers never work 9 to 5.
If any REAL Programmers are around at 9 AM,
it's because they were up all night.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Roaming profiles problem - loading failure

2002-11-11 Thread Hall, Ken (ECSS)
I just came out of a meeting where we narrowed our version of this problem down to a 
particular build level (or two) of Win2K.  NT appears to be fine, and so does XP.

We're going to try a couple of different builds and hopefully get a level 10 log of a 
failing case.

If anyone has any more information on this, I'd love to hear it, and if the Samba 
folks need any additional doc, speak now!

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:jra;dp.samba.org]
 Sent: Tuesday, November 05, 2002 1:29 PM
 To: Andrew Gaffney
 Cc: Peter Polkinghorne; Samba
 Subject: Re: [Samba] Roaming profiles problem - loading failure
 
 
 On Tue, Nov 05, 2002 at 08:48:42AM -0600, Andrew Gaffney wrote:
  I have been having this same problem. There is nothing in 
 2.2.6 that 
  fixes it. I still have no idea what's causing it.
  
  Peter Polkinghorne wrote:
   I have a samba 2.2.4 PDC which acts as the repository of 
 roaming profiles.
   Just recently some of our users have experienced failure 
 to load roaming 
   profiles.  The clients are on a pair of Windows 2000 
 terminal servers.
   The failure does not seem to be confined to one server 
 and only affects some 
   people.
   
   The error given takes place during the loading profile stage:
   
   Windows can not copy:
   \\Samba server\profiles\aaa\Application 
 Data\Microsoft\Outlook\FAVF.tmp to
   C:\Documents and Settings\aaa.KINGSFORDS\Application 
   Data\Microsoft\Outlook\FAVF.tmp
   
   DETAIL - Access is denied
 
 More details please, a packet sniff or log file extract
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] problem with different user

2002-11-11 Thread SALOME Alexandre
Title: problem with different user





Hi ,


I need to do my user_windows eng.processo to acess my unix solaris 2.x as user_unix cs02929.
As like indicate, I create in global of file smb.conf the command: username map = /etc/smbusers
and into the file /etc/smbuser, the command: cs02929 = eng.processo.
This it don´t work. Please, what do I do to this work? Do I forgot anythink?


thanks


 ...OLE_Obj... 
,
Atenciosamente
Alexandre Salomé
Comau System _ Sistemas Engenharia
tel: 0055 031 9944 8646
fax:0055 031 3529 6533





[Samba] ERROR: no seteuid method available

2002-11-11 Thread Bruno Gimenes Pereti
Hi,

I´m installing samba in a new machine.

RedHat-7.1
Kernel-2.4.19 (with ext2 acl-support)

When I try:

./configure --without-swat --with-pam --with-ldapsam --with-quota --with-utm
p --with-acl-support

I get the following error:

...
checking configure summary... WARNING: No automated network interface
determination
ERROR: no seteuid method available
configure: error: summary failure. Aborting config

I tried ./configure without parameter and in the old kernel 2.4.2-2 but I
get the same error. I think I uninstalled some needed library.

can some body help me please...

TIA,
Bruno

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] problem with different user

2002-11-11 Thread Bradley W. Langhorst
On Mon, 2002-11-11 at 14:22, SALOME Alexandre wrote:
 
  Hi ,
  
  I need to do my user_windows eng.processo to acess my unix solaris 2.x
  as user_unix cs02929.
  As like indicate, I create in global of file smb.conf the command:
  username map = /etc/smbusers
  and into the file /etc/smbuser, the command:  cs02929 = eng.processo.
  This it don´t work. Please, what do I do to this work? Do I forgot
  anythink?
did you try it without the quotes?
username mapping works fine for me but my users don't have . in their
names

brad

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Manually adding Samba attributes from Perl

2002-11-11 Thread Nate Carlson
Hey all,

I need to create a perl script that will add Samba attributes to existing
LDAP accounts; basically, I just need to replicate what smbpasswd does in
Perl.

I've found a perl module that will create the password hashes for me, so
that part's taken care of. The one thing I'm not sure how to do is
generate the rid and PrimaryGroupID entries. Does anyone know how these
are generated? I've thought of just looking at the existing entries and
adding one to the highest each time; would that be acceptable?

Thanks for any help you guys can provide!

-- 
Nate Carlson [EMAIL PROTECTED]   | Phone : (952)943-8700
http://www.real-time.com| Fax   : (952)943-8500


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] PDF Creation

2002-11-11 Thread Bradley W. Langhorst
On Mon, 2002-11-11 at 17:10, Duane Ellis wrote:
 I am not on the SAMBA list - so please if you reply remember to CC me.
 
 My Linux users have access to ps2pdf - a nice tool to convert Postscript 
 files
 to PDF files.I'd like to make it available to my PC Users - who don't 
 understand
 what a command line prompt is
 
 I know the following works:
 
 1) On my Windows machine - Add a new printer
an APPLE LASER POSTSCRIPT WRITER
But specify it's output to be a FILE.
 
 2) Print a document to the file.
 
 3) Transfer it to my Linux box and run ps2pdf - works like a charm.
 
 So - why can't I do this with Samba (answer: I don't know samba well enough)
 
 a) Configure a printer under SAMBA
 
 b) Instead of going to a PRINT QUE the data should be piped through
 the program ps2pdf
 
 c) The output is a PDF file.. Normally Adobe PDF writer would
  put the result file some place on my Windows hard drive.
 
 d) I think the SAMBA print service knows the Windows USER NAME
 why can't SAMBA email the PDF file back to me.
 
 Sure - I don't get all those fancy features that Adobes PDF Writer gives me.
 I don't need them - nor do I want them, I never change the default settings
 anyway.
 
 For my users who really need that flexabilty - I'll purchase the full 
 PDF Writer
 package. Or maybe - I could setup another PDF2MAIL script with the
 options they want or need in place.
 
 Should be nothing more then a 10 to 20 line shell script of some type and
 knowing where in side of samba to put it.
 
 I did try to search the samba site for info about this - but it is 
 fruitless - do you knonw
 how many times the phrase pdf shows up...
its a tough search since it finds all the docs...
however the the list archive is a good place to look

http://marc.theaimsgroup.com/?l=sambaw=2r=1s=pdfq=b

 
 My idea is just a thought - and a wish.

this already works - there is an example in the source ball

/packaging/Mandrake/samba-print-pdf.sh

you may want to use redmon and ghostscript on the local machine to avoid
the mailing kludge.

brad

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] PDF Creation

2002-11-11 Thread Duane Ellis

 this already works - there is an example in the source ball

Thank you.

As with all things - ask and you shall receive 
Somebody out there has done just about everything already..

-Duane.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] How to join a linux machine to a Active Directory Domain using Samba.

2002-11-11 Thread Jacob Malmberg
Hi,
having read through tons of different how-to's about how to do this specific 
task has made me quite sick. Do someone know a good guide for this or can 
she/he make a quick how-to? I am atm using samba 3.0 alpha 20 but I gladly 
change to 2.xx if that would do the trick. Anyone?

regards,
Jacob Malmberg

_
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. 
http://join.msn.com/?page=features/virus

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Manually adding Samba attributes from Perl

2002-11-11 Thread Andrew Bartlett
On Tue, 2002-11-12 at 06:18, Nate Carlson wrote:
 Hey all,
 
 I need to create a perl script that will add Samba attributes to existing
 LDAP accounts; basically, I just need to replicate what smbpasswd does in
 Perl.
 
 I've found a perl module that will create the password hashes for me, so
 that part's taken care of. The one thing I'm not sure how to do is
 generate the rid and PrimaryGroupID entries. Does anyone know how these
 are generated? I've thought of just looking at the existing entries and
 adding one to the highest each time; would that be acceptable?
 
 Thanks for any help you guys can provide!

Use 2*uid+1000 for users, 2*gid+1001 for groups.  In Samba 3.0 you have
more flexibility, but if you have any choice, stick to the algorithm.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


[Samba] samba browser problem!

2002-11-11 Thread Rakhee Sood
Title: Message



Hi 
Andrew,

I have upgraded 
recently samba1.9 to samba2.2.5. At the weekend there was an unexpected 
shutdown, during that time samba machine upgraded itself to Master Browser, 
earlier it was an NT 4.0 machine. Now when I rebooted the NT machine, both NT 
machine and samba machine are considering themselves Master Browser. I want only 
NT to be master browser. How I can disable samba to act as Master 
Browser.

Or if there is any 
other thing which i can do to diable samba acting as a Master 
Browser.

Thanks,
Rakhee Sood Techcomm Simulation Pty Ltd 
Ph. - 96903617 
e-mail - 
[EMAIL PROTECTED] 



Re: [Samba] Forcing Password change from Win2k client

2002-11-11 Thread Yura Pismerov


Not much help here, but it does work perfectly with LDAP backend (via
pwdMustChange attribute).


 Sauro Saltini wrote:
 
 Hi, everybody.
 I've read many posts about forcing users to change their passwords at
 logon time from windows clients, but still I can't make it work.
 
 I've set up a Samba PDC with the latest stable version (2.2.6) of
 samba and configured it to do Unix password syncing through PAM.
 Then I've set up Unix passwords with the right aging parameters and
 all works fine in Unix (I've got logon messages about password
 expiration and I'm forced to change password after expiration time)
 
 From a Win2K client I can't get it work :
 - the account is enabled until password expiry and I have no kind of
 notification about the expiration of password
 - then a nice day the password really expires and, instead of been
 forced to change it, the user is simply LOCKED OUT (account disabled)
 
 Note that in UNIX the user is still active as I've set a long Interval
 beetwen pwd expiry and account locking !
 
 The only functionality needed is a correct expiration / change-forcing
 behaviour from Win2K, so I don't want to use LDAP as i think Samba +
 PAM might be sufficient for this.
 
 It seems there's something wrong (or simply limited) with PAM -
 Samba interaction when managing account restrictions.
 
 So the final questions are :
 1) Is it possible to make Samba force a password change request at
 client side during logon due to PAM account restrictions ?
 2) If YES : where I've gone wrong ?
 3) If NO : Is there a stable/production alternative for password
 expiry in Samba?
 
 Many thanks in advance.
 
 Sorry for my english.
 
 Sauro Saltini
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] problem with different user

2002-11-11 Thread Matthew Hannigan
On Mon, Nov 11, 2002 at 12:25:55PM -0300, SALOME Alexandre wrote:
 and into the file /etc/smbuser, the command:  cs02929 = eng.processo.

Try it without the quotes around eng.processo.

Matt
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Switching to another Samba server

2002-11-11 Thread David Donahue
I've been running Samba 2.2.2 for a while as a domain controller on my
mostly Windows network.  It's been working great up to this point.
Anyway, I just put together a new Linux server and installed 2.2.2 on it
as well.

I copied the conf file and pretty much mirrored everything on the
existing server, changed the paths and the workgroup field in the conf
file to match the new server, and ran the software.  I'm able to join
the domain, but when I attempt to login to it after rebooting, it says
the domain is not available.  And when I login to the Windows machine as
the local Administrator and try to connect to the domain it says the
server is not configured for transactions.  

The log file samba generated for that client's connection repeats
attempts to access /root/tmp (I don't know why) and keeps saying that a
password server is unavailable.  Any ideas?

Could the problem be some kind of conflict with the current server on
the other machine?  Until the new one is fully working I still have the
old one running on the other computer.  Admittedly, I don't know what
every setting in the conf file does.  So is it likely that, for certain
fields, identical settings on both machines would cause some kind of
conflict during a logon?



David P. Donahue
[EMAIL PROTECTED]
First Call Computer Solutions 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Switching to another Samba server

2002-11-11 Thread John H Terpstra
David,

Suggest you update to samba-2.2.6 or later (there will be an update later
this week). The /root/tmp issue was a known problem with 2.2.2 and has
been fixed. Best advice is to update to 2.2.6. If you then still have a
problem, email me [EMAIL PROTECTED] and I will try to assist.

- John T.

On Mon, 11 Nov 2002, David Donahue wrote:

 I've been running Samba 2.2.2 for a while as a domain controller on my
 mostly Windows network.  It's been working great up to this point.
 Anyway, I just put together a new Linux server and installed 2.2.2 on it
 as well.

 I copied the conf file and pretty much mirrored everything on the
 existing server, changed the paths and the workgroup field in the conf
 file to match the new server, and ran the software.  I'm able to join
 the domain, but when I attempt to login to it after rebooting, it says
 the domain is not available.  And when I login to the Windows machine as
 the local Administrator and try to connect to the domain it says the
 server is not configured for transactions.

 The log file samba generated for that client's connection repeats
 attempts to access /root/tmp (I don't know why) and keeps saying that a
 password server is unavailable.  Any ideas?

 Could the problem be some kind of conflict with the current server on
 the other machine?  Until the new one is fully working I still have the
 old one running on the other computer.  Admittedly, I don't know what
 every setting in the conf file does.  So is it likely that, for certain
 fields, identical settings on both machines would cause some kind of
 conflict during a logon?



 David P. Donahue
 [EMAIL PROTECTED]
 First Call Computer Solutions
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
John H Terpstra
Email: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Can'T log on to samba server

2002-11-11 Thread John H Terpstra
Daniel,

We love helping folks but we are not psychics.

What version of samba?

What OS platform?

Did you build samba yourself? If so, how?
If not, wher did you obtain the binary package?

On Mon, 11 Nov 2002, Daniel Levesque wrote:


 I need help with SAMBA.
 After editing the smb.conf file manually,
 after trying to edit the file with SWAT,
 after trying to setup SAMBA with webmin...
 Well, nothing works! i see the server icon from distant pc but i just can't
 logon
 From the server itself, i can go in a terminal and isue:
 smbclient -L localhost
 and i see the share, the master is the server itself, the workgroup is the
 good one.

Looks like something IS working! So, do you have a firewall?
What is in your smb.cofn file?

 From the client,
 i have a loggon screen but that's it... can't logon

 i've try to log with xp: nothing
 i've boot on W98 and it try to log on and i see that it tries on:
 serverSAMBA/IPC$

The IPC$ share is rather important - that's how when you browse a remote
machine for shares it gets that information.

 is that the problem?

Can't answer this, not enough information! What is in your samba log
files?

 Should an anonymous login work, i also tried that but without success
 Servername\anonymous without psw again it doesn't work...

Not the account anonymous unless you have created an account called
'anonymous'. Have you read The entire HOWTO collection link that is
available from the SWAT home page?

- John T.

-- 
John H Terpstra
Email: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Switching to another Samba server

2002-11-11 Thread Andrew Bartlett
On Tue, 2002-11-12 at 14:02, John H Terpstra wrote:
 David,
 
 Suggest you update to samba-2.2.6 or later (there will be an update later
 this week). The /root/tmp issue was a known problem with 2.2.2 and has
 been fixed. Best advice is to update to 2.2.6. If you then still have a
 problem, email me [EMAIL PROTECTED] and I will try to assist.

Was it fixed?  My understanding was that the init scripts were fixed to
unset TMPDIR, but that Samba itself wasn't changed.  (This is also the
quick fix, just 'export TMPDIR=/tmp' before smbd starts in your init
scripts).  

This was a bug particularly evident on Linux Mandrake, due to their move
to per-user TMPDIR stuff.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


Re: [Samba] Printer driver downloads...?

2002-11-11 Thread Mark Belfanti
Hi, See the Samba-HowTo-Collection Chapter 7.
Ifloowed this and it works a charm for W2k.
Mark

On Tue, 2002-11-12 at 07:20, [EMAIL PROTECTED] wrote:
 I've been googling around for quite some time, and haven't managed to find
 anything useful.  Is there some moderately up-to-date information on how 
 to set up the automatic print-driver download in Samba 2.2.x?  I know about
 the old way of doing things, but it doesn't seem to fly with Win2K drivers.
 
 Any and all help, and pointers to FD so I can RTFD (again, haven't had much 
 luck with the standard docs) are appreciated!
 
 Thanks-in-advance!
 
 -- 
 Don Werve [EMAIL PROTECTED] (Unix System Administrator)
 
 Yorn desh born, der ritt de gitt der gue,
 Orn desh, dee born desh, de umn bork! bork! bork!
-- 
Mark Belfanti [EMAIL PROTECTED]
Mentat IT

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] authentication problems

2002-11-11 Thread Brian Henning
i am trying to set up a bunch of users on a freeBSD box with smb access to
their home accounts from windows.  I decided to use homes as the method to
do this. everything is almost working i was able to edit the smb.conf with
swat and the only problem is i can't get the password correct.. i added the
users with smbpasswd -a user  when i run testparm everything seems to
check out ok with the smb.conf file is it possible that it is not
authenticating? do i need to set a path for another password file? i am
kinda stuck could someone give me some advice on what to try?  thanks...

b
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Which list for general help?

2002-11-11 Thread TheStar

Hello, I am having enormous difficulty in getting samba to work correctly on the
local network when the local network is on eth1.

I have never had any trouble with samba when I used eth0...

Here is my routing table...

Kernel IP routing table
Destination Gateway Genmask Flags Metric RefUse Iface
255.255.255.255 *   255.255.255.255 UH0  00 eth1
192.168.1.0 *   255.255.255.0   U 0  00 eth1
192.168.0.0 *   255.255.255.0   U 0  00 eth0
default 192.168.0.1 0.0.0.0 UG1  00 eth0


This same computer works perfectly in every other area.  eth0 is dedicated to the 
internet and masq's the network.


findsmb can only see the local computer.

I do not have an interfaces line in my smb.conf, and adding it apparently makes little
difference.
eg,
without the line, it apparently defaults to eth0
With the line interfaces = eth1, the ip of the local computer changes, to the ip that 
eth1
uses, however, findsmb can still only see the local computer.

The other computers on the network can't see this local...

Any suggestions?

I have recently subscribed, but since I haven't recieved any messages for the past 24 
hours, I do not know if I subscribed correctly, hence, could you please 'cc' me?  I do 
not mind having several copies of a reply... 

Thanks in advance!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Viewing Windows shared resources in Linux

2002-11-11 Thread Michael Marriott
Can samba view windows shared resources? Something like a network
neighbourhood in KDE or Gnome?
Is there a binary that can build a list or data structure of network
resources that can be traversed?

Michael Marriott

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Viewing Windows shared resources in Linux

2002-11-11 Thread Freeman, Peter (ERHS)

Can samba view windows shared resources? Something like a network
neighbourhood in KDE or Gnome?
Is there a binary that can build a list or data structure of network
resources that can be traversed?

Komba is quite nice, haven't seen it recently, but was very impressed
at the time, kind of like network neighborhood on steroids.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: Write down the migration document

2002-11-11 Thread Tommaso Di Donato
At 15.55 09/11/2002 +0100, you wrote:

If you're not in hurry wait for samba 3.0, otherwise you may use pwdum
plus the utility richard sharpe has just released to change the SID in
the profiles to have a smoother transition.


I think I can wait (even if I'll try also the migration with samba 2.2.x). ;)
But I would like to help you testing things out, so I would like to know 
what to try in Samba3.0alpha. this is the main reason I would like to find 
documentation about migration utilities in 3.0.
So, if I would like to test net rpc vampire, what are the steps? I can 
guess: set up my winNT PDC and my lan, connect a linux box, use the 
command But my question is: to use vampire, the linux box must have 
joined the domain (as a standalone workstation, for example), or must be 
outside the windows network?

Btw you cannot yet move only the PDC or the BDC to samba, it is an all
or nothing situation


Yes, I know this very well... I was thinking about these steps: migrate 
PDC, and,later, set up a BDC.

Thank you very much!

Tommaso dido Di Donato



Group Domain Users

2002-11-11 Thread Michael Steffens
Hi,

recently David Shapiro complained about getent group not working
in large domain groups, in particular Domain Users:

 http://lists.samba.org/pipermail/samba-technical/2002-November/040646.html

I was facing the same problem, which I found annoying because it
always blocks winbindd without producing anything, while applications
like ls just wanted to determine group names. Which occurs frequently,
because Domain Users has been selected as default primary group.

And it will hardly ever succeed, as large domains quickly exceed
buffer sizes provided by applications or libc for getgrgid()
or getgrgid_r().

Resolved the problem in my local version by modifying winbindd_group.c
such that domain groups Domain Users will never get members filled
in the result. This is somewhat anologous to the habit not to
list primary group members in /etc/group in order not to exceed
maximum group sizes on systems with many local users.

Not ideal, not elegant, but it happens to produce the desired result :)

In the attached patches I also disabled enumeration of domain
users and groups in winbindd_list_users() and winbindd_list_groups()
depending on parameters winbind enum users and winbind enum groups.

It's done the same way as in winbindd_setpwent() and winbindd_setgrent().

Reason: processing these requests take extremely long in our environment
(hours to days), while winbindd will block other requests. And it won't
stop when a user of, for example, wbinfo -u aborts his request by
killing wbinfo. You would need to kill winbindd and restart it for
domain users to be able to log on again.

Cheers!
Michael





Index: source/nsswitch/winbindd_group.c
===
RCS file: /cvsroot/samba/source/nsswitch/winbindd_group.c,v
retrieving revision 1.3.4.25
diff -u -r1.3.4.25 winbindd_group.c
--- source/nsswitch/winbindd_group.c14 Oct 2002 03:00:14 -  1.3.4.25
+++ source/nsswitch/winbindd_group.c11 Nov 2002 11:40:25 -
 -77,6 +77,17 
 goto done;
}
 
+   /* Always skip members of Domain Users */
+
+   if (group_rid == DOMAIN_GROUP_RID_USERS) {
+   DEBUG(10, (skip enumerating members of %s\\Domain Users\n, 
+ domain-name));
+   *gr_mem_len = 0;
+   *gr_mem = NULL;
+   result = True;
+   goto done;
+   }
+
/* Lookup group members */
status = domain-methods-lookup_groupmem(domain, mem_ctx, group_rid, 
num_names, 
  rid_mem, names, name_types);
 -690,6 +701,11 
int extra_data_len = 0, i;
 
DEBUG(3, ([%5d]: list groups\n, state-pid));
+
+   /* Check user has enabled this */
+
+   if (!lp_winbind_enum_groups())
+   return WINBINDD_ERROR;
 
/* Enumerate over trusted domains */
 

Index: source/nsswitch/winbindd_user.c
===
RCS file: /cvsroot/samba/source/nsswitch/winbindd_user.c,v
retrieving revision 1.3.4.17
diff -u -r1.3.4.17 winbindd_user.c
--- source/nsswitch/winbindd_user.c 14 Oct 2002 03:00:14 -  1.3.4.17
+++ source/nsswitch/winbindd_user.c 11 Nov 2002 11:41:11 -
 -556,6 +556,11 
 
DEBUG(3, ([%5d]: list users\n, state-pid));
 
+   /* Check user has enabled this */
+
+   if (!lp_winbind_enum_users())
+   return WINBINDD_ERROR;
+
if (!(mem_ctx = talloc_init_named(winbindd_list_users)))
return WINBINDD_ERROR;
 



nmbd stuff

2002-11-11 Thread Stefan (metze) Metzmacher
Hi all,

I need help!!! why are there only 0.0.0.0 addresses???

(I modify nmbd a bit to make wrepld working)

here're the structs I use:
---
struct nmb_addr {
struct in_addr ip;  /* address of the record */
time_t ttl; /* The time the record should be refreshed. */
struct in_addr owner;   /* the adress of the wins server this 
record comes from */
};
struct nmb_data {
uint16 nb_flags; /* Netbios flags. */
int wins_flags; /* similar to the netbios flags but 
different ! */
struct in_addr owner;   /* the adress of the wins server this 
record comes from */
SMB_BIG_UINT id;/* unique id */
time_t ttl; /* The time the record must be removed (do not 
remove if 0). */
time_t refresh_time;/* The time the record should be refreshed. */
int num_addrs; /* Number of ip_records entries. */
struct nmb_addr *addrs;  /* The ip_record list for this name. */
};
/* This structure represents an entry in a local netbios name list. */
struct name_record {
ubi_trNodenode[1];
struct subnet_record *subnet;
enum name_source source; /* Where the name came from. */
struct nmb_name name;/* The netbios name. */
struct nmb_data data;   /* address,... of the netbios name */
};
-

here the code that didn't work

struct nmb_record *namerec;
struct nmb_addr *addr_list;

...

  /* Copy the IPs. */
  namerec-data.num_addrs = num_addrs;
  for(i=0;inum_addrs;i++) {
namerec-data.addrs[i] = addr_list[i];
/*  namerec-data.addrs[i].ttl = addr_list[i].ttl;
namerec-data.addrs[i].owner = addr_list[i].owner;
namerec-data.addrs[i].ip = addr_list[i].ip;
*/  DEBUG(0,(NAME: %-19s OWNER: %s/%s IP: %s/%s %s\n,
nmb_namestr(namerec-name),
inet_ntoa(namerec-data.addrs[i].owner),
inet_ntoa(addr_list[i].owner),
inet_ntoa(namerec-data.addrs[i].ip),
inet_ntoa(addr_list[i].ip),
inet_ntoa(addr_list[0].ip)));
  }
  /* Data source. */
  namerec-source = source;
  /* Now add the record to the name list. */
  update_name_in_namelist( subrec, namerec );
  DEBUG( 3, ( add_name_to_subnet: Added netbios name %s with first IP %s \
ttl=%d nb_flags=%2x to subnet %s\n,
nmb_namestr( namerec-name ),
inet_ntoa( addr_list[0].ip ),  /*  here 
it works !!!  */
ttl,
(unsigned int)nb_flags,
subrec-subnet_name ) );


---

and here the logs:


[2002/11/11 14:48:59, 0] nmbd/nmbd_namelistdb.c:add_name_to_subnet(243)
  NAME: *00   OWNER: 0.0.0.0/0.0.0.0 IP: 0.0.0.0/0.0.0.0 0.0.0.0
[2002/11/11 14:48:59, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(269)
  add_name_to_subnet: Added netbios name *00 with first IP 192.168.0.250 
ttl=0 nb_flags=60 to subnet WINS_SERVER_SUBNET



the right ip is 192.168.0.250


metze
-
Stefan metze Metzmacher [EMAIL PROTECTED]



Re: Daily 3.0 and HEAD snapshots

2002-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sat, 9 Nov 2002, Jelmer Vernooij wrote:

 Hi!
 
 I've written a simple script to produce daily snapshots of the 3.0 and
 HEAD branches. Available at:
 
 http://samba.org/~jelmer/snapshot/

All I ask is that people be good citizens and use bandwidth efficiently.
no need to pulll the entire tarball if cvs update will work for you.
Thanks.




cheers, jerry
 -
 Hewlett-Packard   - http://www.hp.com
 SAMBA Team-- http://www.samba.org
 GnuPG Key  http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2SAMS Teach Yourself Samba in 24 Hours 2ed
 I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE9z8ppIR7qMdg1EfYRAghHAKCx7SOZpUck7srKGwa2XN6+IemR0QCfawAg
FniV1bOjGtc9l8pZe8uu7MI=
=yki9
-END PGP SIGNATURE-




PANIC: failed to set gid on Jaguar

2002-11-11 Thread Jon L . Gardner
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Is there something funky going on with the assert_gid function under 
Mac OS X 10.2.1? Anytime I try to pull a browse list from my 10.2.1 
Samba server (2.2.6, configured as a PDC), from any Windows client, the 
client says that the network is not available, and I get the PANIC: 
failed to set gid error in log.smbd.

[2002/11/11 09:16:11, 3] smbd/negprot.c:reply_negprot(426)
  Selected protocol NT LM 0.12
[2002/11/11 09:16:11, 5] smbd/negprot.c:reply_negprot(433)
  negprot index=5
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(268)
  size=87
  smb_com=0x72
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=1
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(276)
  smb_tid=0
  smb_pid=65279
  smb_uid=0
  smb_mid=0
  smt_wct=17
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[0]=5 (0x5)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[1]=12803 (0x3203)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[2]=256 (0x100)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[3]=1024 (0x400)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[4]=65 (0x41)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[5]=0 (0x0)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[6]=256 (0x100)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[7]=47104 (0xB800)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[8]=18 (0x12)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[9]=63744 (0xF900)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[10]=227 (0xE3)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[11]=32768 (0x8000)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[12]=24303 (0x5EEF)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[13]=38212 (0x9544)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[14]=49801 (0xC289)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[15]=26625 (0x6801)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[16]=2049 (0x801)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(291)
  smb_bcc=18
[2002/11/11 09:16:11, 6] lib/util_sock.c:write_socket(518)
  write_socket(6,91)
[2002/11/11 09:16:11, 6] lib/util_sock.c:write_socket(521)
  write_socket(6,91) wrote 91
[2002/11/11 09:16:11, 6] smbd/process.c:process_smb(877)
  got message type 0x0 of len 0x82
[2002/11/11 09:16:11, 3] smbd/process.c:process_smb(878)
  Transaction 2 of length 134
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(268)
  size=130
  smb_com=0x73
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=18439
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(276)
  smb_tid=0
  smb_pid=65279
  smb_uid=0
  smb_mid=64
  smt_wct=13
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[0]=117 (0x75)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[1]=100 (0x64)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[2]=16644 (0x4104)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[3]=50 (0x32)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[4]=0 (0x0)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[5]=4792 (0x12B8)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[6]=0 (0x0)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[7]=1 (0x1)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[8]=0 (0x0)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[9]=0 (0x0)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[10]=0 (0x0)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[11]=212 (0xD4)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(285)
  smb_vwv[12]=0 (0x0)
[2002/11/11 09:16:11, 5] lib/util.c:show_msg(291)
  smb_bcc=39
[2002/11/11 09:16:11, 3] smbd/process.c:switch_message(685)
  switch message SMBsesssetupX (pid 4792)
[2002/11/11 09:16:11, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2002/11/11 09:16:11, 5] smbd/uid.c:change_to_root_user(216)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2002/11/11 09:16:11, 3] smbd/reply.c:reply_sesssetup_and_X(857)
  Domain=[]  NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 
5.0]
[2002/11/11 09:16:11, 3] smbd/reply.c:reply_sesssetup_and_X(868)
  sesssetupX:name=[]
[2002/11/11 09:16:11, 6] param/loadparm.c:lp_file_list_changed(2297)
  lp_file_list_changed()
  file /usr/local/samba/lib/smb.conf - /usr/local/samba/lib/smb.conf  
last mod_time: Mon Nov 11 09:15:32 2002

[2002/11/11 09:16:11, 3] smbd/sec_ctx.c:push_sec_ctx(296)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2002/11/11 09:16:11, 3] smbd/uid.c:push_conn_ctx(285)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2002/11/11 09:16:11, 3] smbd/sec_ctx.c:set_sec_ctx(328)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2002/11/11 09:16:11, 0] lib/util_sec.c:assert_gid(111)
  Failed to set gid privileges to (0,205) now set to (205,205) uid=(0,0)
[2002/11/11 09:16:11, 0] 

Netbios name register bug on Samba 3.0 a20

2002-11-11 Thread Jianliang Lu
Hi,
On a samba-3.0-a20 machine, when the Netbios End-Node is configured 
as a B-node, i.e. it doesn't use the Wins to register the Netbios
names but use the broadcast to do it, the domain group name (DomainName#1C) 
is not registered. So, if we have not the Wins server we'll have some 
problems??

Jianliang Lu
[EMAIL PROTECTED]
--
TieSse S.P.A.



Duplicate lock under FreeBSD 5.0 (-Current)

2002-11-11 Thread David W. Chapman Jr.
It seems a few people have seen this recently on -current

Attached on -d10 log files of what happens after boot.

 FreeBSD outel.org 5.0-CURRENT FreeBSD 5.0-CURRENT #0: Thu Nov  7 
 05:13:19 PST 2002 
 [EMAIL PROTECTED]:/disk2/usr.src/sys/i386/compile/testGeneric.nonsmp i386
 
 acquiring duplicate lock of same type: inp
 1st inp @ ../../../netinet/udp_usrreq.c:290
 2nd inp @ ../../../netinet/udp_usrreq.c:290
 
 this comes up once right after I boot up.
 


smb.tar.bz2
Description: Binary data


Please reply to unsubscribe from UG_Discussion

2002-11-11 Thread Yahoo!Groups Notification

Hello,

We have received a request from you to unsubscribe from the
UG_Discussion group.  Please confirm your request by 
replying to this message.  If you do not wish to unsubscribe from 
UG_Discussion, please ignore this message.

Regards,

Yahoo! Groups Customer Care

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
 






Re: Group Domain Users

2002-11-11 Thread Tim Potter
On Mon, Nov 11, 2002 at 01:40:25PM +0100, Michael Steffens wrote:

 recently David Shapiro complained about getent group not working
 in large domain groups, in particular Domain Users:
 
  http://lists.samba.org/pipermail/samba-technical/2002-November/040646.html

 Resolved the problem in my local version by modifying winbindd_group.c
 such that domain groups Domain Users will never get members filled
 in the result. This is somewhat anologous to the habit not to
 list primary group members in /etc/group in order not to exceed
 maximum group sizes on systems with many local users.

I think this would be a candidate for Yet Another New Parameter.  We
could either have a parameter to explicitly disable the Domain Users
group, or maybe some generic filtering mechanism where you can specify
group names or rids not to resolve.

Looking at it perhaps the second option seems a bit complicated.

 In the attached patches I also disabled enumeration of domain
 users and groups in winbindd_list_users() and winbindd_list_groups()
 depending on parameters winbind enum users and winbind enum groups.
 
 It's done the same way as in winbindd_setpwent() and winbindd_setgrent().

The winbind enum users/groups parameter deliberately doesn't stop wbinfo
from listing the groups so there is at least one way to enumerate users
and groups.  

The fact that a client disconnecting doesn't stop winbindd is a bug in 
winbindd but I think it will be hard to fix properly.


Tim.



FW: Segfault with net ads password

2002-11-11 Thread James Willard
Title: Message



Hi 
All,

I'm 
still having the issues I've described below. I've tried to give as much detail 
as possible, and I'm hoping to help fix this segfault bug in what will become 
Samba 3. I don't believe that this problem is isolated to me and I do believe 
that it does affect every other user. Please help me and allow me to help the 
Samba project.

Thanks,

James 
Willard
[EMAIL PROTECTED]


  
  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]] On Behalf Of James 
  WillardSent: Friday, November 01, 2002 6:04 PMTo: 'Esh, 
  Andrew'; [EMAIL PROTECTED]Subject: RE: Segfault with "net 
  ads password"
  Andrew,
  
  It 
  seems like you're right about the null pointer. Given the code block you 
  mentioned, I rebuilt with --enable-krb5developer and ran gdb over it again 
  with a breakpoint at net_ads_password() anddisplaying ads, ads-auth, 
  and ads-auth.kdc_server. The following is the output from gdb at the line 
  justbefore line 885 where kerberos_set_password() is 
  called:
  
  3: ads-auth = {realm = 0x0, 
  password = 0x0, user_name = 0x0, kdc_server = 0x0, flags = 0, time_offset = 
  0}2: ads-auth.kdc_server 
  = 0x01: ads = (ADS_STRUCT *) 0x81af8e0
  And 
  of course, the call itself... null values and all... (usernames/passwords 
  substituted)
  
  (gdb) 
  kerberos_set_password (kpasswd_server=0x0, auth_principal=0x815c560 [EMAIL PROTECTED], 
   auth_password=0x815c57c "Adminpass", target_principal=0xbbe5 [EMAIL PROTECTED],  
  new_password=0x81535a0 "User", 
  time_offset=0) at 
  libads/krb5_setpw.c:470470 
  return krb5_set_password(kpasswd_server, target_principal, new_password, 
  time_offset);
  Ok, this officially goes beyond my abilities... who 
  maintains the "net ads" portion of Samba that could help me look into this 
  further?
  
  Thanks,
  
  James Willard
  [EMAIL PROTECTED]
  
  

-Original Message-From: Esh, Andrew 
[mailto:[EMAIL PROTECTED]] Sent: Friday, November 01, 2002 4:54 
PMTo: 'James Willard'; 
[EMAIL PROTECTED]Subject: RE: Segfault with "net ads 
password"Importance: High
Looks like this bit of code is failing: 
utils/net_ads.c, lines 877-886, function 
"net_ads_password" 
 /* use the realm so we can eventually 
change passwords for users  in 
realms other than default */  if 
(!(ads = ads_init(realm, NULL, NULL))) return -1; 
 asprintf(prompt, "Enter new password 
for %s:", argv[0]); 
 new_password = getpass(prompt); 

 ret = 
kerberos_set_password(ads-auth.kdc_server, auth_principal, 
 
 
 
 auth_password, 
argv[0], new_password, ads-auth.time_offset); 
the last line is reached with "ads-auth.kdc_server" as a 
bad (null?) pointer. The "ads_init" function creates the ads structure 
and zeroes it. It doesn't appear to me as though "ads_init" initializes 
ads-auth, and I don't see where else it gets set.
-Original Message- From: 
James Willard [mailto:[EMAIL PROTECTED]] 
Sent: Friday, November 01, 2002 2:23 PM To: [EMAIL PROTECTED] Subject: RE: 
Segfault with "net ads password" 
And as a follow-up to myself... The following is a backtrace 
from gdb: 
Program received signal SIGSEGV, Segmentation fault. 
0x080ec329 in interpret_addr () (gdb) bt #0 0x080ec329 in 
interpret_addr () #1 0x080ec462 in 
interpret_addr2 () #2 0x080efbe0 in 
open_udp_socket () #3 0x0810f56c in 
krb5_set_password () #4 0x0810fdbf in 
kerberos_set_password () #5 0x0806b17c in 
net_ads_password () #6 0x08068690 in 
net_run_function () #7 0x0806b51c in net_ads 
() #8 0x08068690 in net_run_function () 
#9 0x080697d3 in main () #10 
0x42017589 in __libc_start_main () from /lib/i686/libc.so.6 
Thanks, 
James Willard [EMAIL PROTECTED] 
-Original Message- From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
On Behalf Of James Willard Sent: Friday, November 01, 2002 2:12 PM To: 
[EMAIL PROTECTED] Subject: Segfault with 
"net ads password" 
Hi, 
I'm trying to troubleshoot a problem I've been having for 
the past several weeks with "net ads password" 
attempting to change a users' password. I'm using 
the Samba 3.0 CVS tree updated this morning (even though there has been no difference in behavior in the past month 
or so). I'm running: 
net ads password [EMAIL PROTECTED] -U 
[EMAIL PROTECTED]%Password 
I receive a prompt: 
Enter new password for [EMAIL PROTECTED]: 
I enter a password and then it segfaults. Below are excerpts 
from a strace: 
... write(3, "kadmin", 
6) 
= 6 write(3, "\0\0\0\10", 
4) 
= 4 write(3, "changepw", 
8) 
= 8 ... write(3, "\0\0\0\0", 
4) 
= 4 write(3, NULL, 
0) 
= 0 fcntl64(3, F_SETLKW, {type=F_UNLCK, 
whence=SEEK_SET, start=0, len=0}) = 0 
close(3) 
= 0 time(NULL) 
= 1036176903 

You have been unsubscribed from UG_Discussion

2002-11-11 Thread Yahoo!Groups Notification

Hello,

This is to inform you that your request to unsubscribe from
UG_Discussion has been completed.

Regards,

Yahoo! Groups Customer Care

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
 






Re: Smbmount password interfaces

2002-11-11 Thread Urban Widmark
On Mon, 11 Nov 2002, W. Michael Petullo wrote:

 Could you implement a similar option in smbmount?  When the current
 version of smbmount prompts for a password, it tries to read it from
 /dev/tty.  Allowing a user to tell smbmount to read its password from
 stdin would make smbmount more flexible in pipelines.

You should be able to set PASSWD_FD to a file descriptor to read the
password from. (see source/client/smbmount.c:get_password_file)

Not that I have a problem with adding 'passwordfd=0' if that makes it any 
easier for you.

/Urban




Re: FW: Segfault with net ads password

2002-11-11 Thread Andrew Bartlett
On Tue, 2002-11-12 at 05:48, James Willard wrote:
 Hi All,
  
 I'm still having the issues I've described below. I've tried to give as
 much detail as possible, and I'm hoping to help fix this segfault bug in
 what will become Samba 3. I don't believe that this problem is isolated
 to me and I do believe that it does affect every other user. Please help
 me and allow me to help the Samba project.

Yes, it's a real bug, and I can see exactly how it occurs.  The problem
is figuring out how to fix it...

(The auto-find-dc code currently does LDAP stuff, which this code
explicitly avoids).

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread Bradley W. Langhorst
Is that statement true?

if so why?

I've just tried an upgrade to 3.0a20
and domain logons stopped working for me.
a downgrade restores functionality

im using 

passdb backend = ldapsam_nua:ldap://.../


and i have this line in my smbusers file
nobody = guest pcguest smbguest

does this have something to do with this?
 - Always make guest rid 501 (abartlet)

brad





Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread Andrew Bartlett
On Tue, 2002-11-12 at 10:59, Bradley W. Langhorst wrote:
 Is that statement true?

Yes, or also use the unixsam backend

 if so why?

Because the Guest account is a 'well known' account, and as such should
have a fixed RID.  This is enforced via the passdb backend because to do
otherwise would have nasty consequences when mapping back and forth
between uids and RIDs.  (We are working hard to ensure that there is
only one point at which uids and RIDs are mapped, and currently this is
in the passdb.)

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread John E. Malmberg
Andrew Bartlett wrote:


Because the Guest account is a 'well known' account, and as such 
should have a fixed RID.  This is enforced via the passdb backend 
because to do otherwise would have nasty consequences when mapping 
back and forth between uids and RIDs.  (We are working hard to ensure
that there is only one point at which uids and RIDs are mapped, and 
currently this is in the passdb.)

On a related note, does SAMBA still use the guest account in place of 
the (unkown) internal user for enumerating shares?

An NT client can not browse a SAMBA server with the guest account 
disabled, but having a guest account enabled is not required on an NT 
account to do the same thing.

-John
[EMAIL PROTECTED]
Personal Opinion Only




Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread Andrew Bartlett
On Tue, 2002-11-12 at 13:16, John E. Malmberg wrote:
 Andrew Bartlett wrote:
 
  Because the Guest account is a 'well known' account, and as such 
  should have a fixed RID.  This is enforced via the passdb backend 
  because to do otherwise would have nasty consequences when mapping 
  back and forth between uids and RIDs.  (We are working hard to ensure
  that there is only one point at which uids and RIDs are mapped, and 
  currently this is in the passdb.)
 
 On a related note, does SAMBA still use the guest account in place of 
 the (unkown) internal user for enumerating shares?
 
 An NT client can not browse a SAMBA server with the guest account 
 disabled, but having a guest account enabled is not required on an NT 
 account to do the same thing.

A Samba server must have a guest account, and (now) it must have RID
501.  I'm not sure the guest account is 'disabled' on NT, it is just
that the groups it is given membership of changes.  IE on NT, the
restrictanonymous setting can remove 'guest' from domain users, and
'everyone'.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


Can't access to Domain!!

2002-11-11 Thread werachat sittiparsong
Dear
i've provided samba for act ass PDC and itz work as well 
for now,i don't know what i did it wrong.
some user can log on from windows 98 SE such ass user:root
but the another userscan't logon from that machine.it'll give error message as "the share name was not found. besure you typed it correctly"
What should ido.
this problem had happended since i've use Webmin-1.020-1 on RH7.2
and i've changeda severalconfigure.
Maybe this is problem??

Best regards
werachat
Do you Yahoo!?
U2 on LAUNCH - Exclusive medley & videos from Greatest Hits CD

Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread John E. Malmberg
Andrew Bartlett wrote:


On Tue, 2002-11-12 at 13:16, John E. Malmberg wrote:
 
On a related note, does SAMBA still use the guest account in place 
of the (unkown) internal user for enumerating shares?

An NT client can not browse a SAMBA server with the guest account 
disabled, but having a guest account enabled is not required on an 
NT account to do the same thing.

A Samba server must have a guest account, and (now) it must have RID
 501.  I'm not sure the guest account is 'disabled' on NT, it is just
 that the groups it is given membership of changes.  IE on NT, the 
restrictanonymous setting can remove 'guest' from domain users, and 
'everyone'.

The GUEST account can definitely be disabled on an NT workstation.  You 
can not access shares through it when it is disabled, yet browsing works.

You can enable it and then access shares through the guest account.

SAMBA should work the same way, but does not.  This puts a minor 
security hole in SAMBA that is not present in Microsoft Windows NT.

Microsoft advises that the guest account be disabled if you are 
concerned about security, and on NT Servers it is disabled by default.

-John
[EMAIL PROTECTED]
Personal Opinion Only




Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread Andrew Bartlett
On Tue, 2002-11-12 at 14:48, John E. Malmberg wrote:
 Andrew Bartlett wrote:
 
  On Tue, 2002-11-12 at 13:16, John E. Malmberg wrote:
   
  On a related note, does SAMBA still use the guest account in place 
  of the (unkown) internal user for enumerating shares?
  
  An NT client can not browse a SAMBA server with the guest account 
  disabled, but having a guest account enabled is not required on an 
  NT account to do the same thing.
  
  A Samba server must have a guest account, and (now) it must have RID
   501.  I'm not sure the guest account is 'disabled' on NT, it is just
   that the groups it is given membership of changes.  IE on NT, the 
  restrictanonymous setting can remove 'guest' from domain users, and 
  'everyone'.
 
 The GUEST account can definitely be disabled on an NT workstation.  You 
 can not access shares through it when it is disabled, yet browsing works.

My point is that they do this by fiddling group membership.  The by
disabling password access to that account, it is no longer a member of
the authenticated users group, or something similar.  This then fails
certain NT ACL checks.  The account certainly still exists, and is used
even on NT servers.  A *lot* of NT domain operations occur as guest.

 You can enable it and then access shares through the guest account.
 
 SAMBA should work the same way, but does not.  This puts a minor 
 security hole in SAMBA that is not present in Microsoft Windows NT.

As far as I know, we have the same defaults as NT.  We do not offer
shares to guest by default.  

Taking this further, MS implemented 'restrict anonymous' which removed
further groups form the 'guest' account, making even connecting to IPC$
impossible at RestrictAnonymous=2 (I believe).   We implement 'restrict
anonymous =1' as a smb.conf setting in Samba 3.0.

 Microsoft advises that the guest account be disabled if you are 
 concerned about security, and on NT Servers it is disabled by default.

In Samba, access by the guest user is determined per-share, so I'm not
sure exactly what you mean here.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


Re: Group Domain Users

2002-11-11 Thread Michael Steffens
Tim Potter wrote:

On Mon, Nov 11, 2002 at 01:40:25PM +0100, Michael Steffens wrote:
The winbind enum users/groups parameter deliberately doesn't stop wbinfo
from listing the groups so there is at least one way to enumerate users
and groups.  

Yes, but specifically in an environment where domains are very large,
with many trust relationships, and with domain controllers being distributed
all over the world, benefits of this possibilty doesn't outweigh the costs
any more.



The fact that a client disconnecting doesn't stop winbindd is a bug in 
winbindd but I think it will be hard to fix properly.

With excessively long queries being disabled it isn't that dramatic
for me.

BTW: I love Winbind! :))




Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread Andrew Bartlett
On Tue, 2002-11-12 at 16:10, John E. Malmberg wrote:
 Andrew Bartlett wrote:
  In Samba, access by the guest user is determined per-share, so I'm 
  not sure exactly what you mean here.
 
 The NT behavior is that if the guest account is enabled, than if any 
 shares have the everyone group associated with them, then the shares 
 can be accessed from any LANMAN client on the network.  The security log 
 will log that the guest account was used to access the account.
 
 And the everyone group includes anyone on the network, not just the 
 workgroup or the domain.
 
 If you set the disable flag for the guest account, then none of the 
 shares will be accessable unless the user belongs to a group that is 
 otherwise allowed access to the share.
 
 The execption is getting the browse list.  This still works even if the 
 guest account is disabled.  And the security log does not register this 
 as a guest access.

The exception is much more than that - all sorts of things go over IPC$,
and they are protected by their individual ACLs.  Enumerating users, all
sorts of things.  Domain logons are a particular thing that occour
initially as guest (pipe-level authentication is done on netlogon,
likewise password changes are as guest).

 This has bitten several OpenVMS users as they disable or do not create 
 guest account because they do not plan to allow everyone on to access 
 their shares.  It has turned out to be one of the causes of the most 
 common problems reported.
 
 
 Having the SAMBA guest account have different visible functionality than 
 what is the visible behavior of Windows NT is going to be a continuing 
 source of confusion.

As far as I can tell, it is quite consistent actually.

 It would be better to have a different name for the internal uses that 
 are not directly visible, and have the guest account just be used for 
 guest access.  More politically correct and accurate.
 
 There are many sites that have security standards that prohibit a guest 
 account from being enabled.

So what does 'ident' or 'echo' or 'time' run as?  That is the point of
the guest account, Samba needs a user to become, an unprivileged user
that cannot break the entire system if Samba were to accidentally allow
file access, for example.  

So you propose having 2 accounts?  

We have the 'guest ok' parameter, NT ACLs and the 'restrict anonymous'
parameter for controlling thing kind of thing, I think adding an new
smb.conf option would just break every site out there!

On most other systems, we use the 'nobody' account, which already exists
and requires no further configuration.  The default configuration for
3.0 has a 'unixsam' backend, which maps this to the 501 rid.  So by
default, this looks exactly like NT.

 So while it may be technically correct that the NT GUEST account is 
 used for some functions based on observations, the practice is not 
 consistent with what Microsoft has been telling NT Administrators.

It is consistent with what occurs on the wire, and really, that's the
best we can do.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


CVS update: samba/source/include

2002-11-11 Thread idra

Date:   Mon Nov 11 09:01:24 2002
Author: idra

Update of /data/cvs/samba/source/include
In directory dp.samba.org:/tmp/cvs-serv29424/include

Modified Files:
gums.h 
Log Message:

union is better to avoid problems with pointers



Revisions:
gums.h  1.1 = 1.2
http://www.samba.org/cgi-bin/cvsweb/samba/source/include/gums.h?r1=1.1r2=1.2



CVS update: samba/docs/docbook/faq

2002-11-11 Thread jelmer

Date:   Mon Nov 11 13:29:46 2002
Author: jelmer

Update of /home/cvs/samba/docs/docbook/faq
In directory dp.samba.org:/tmp/cvs-serv9836/faq

Modified Files:
errors.sgml 
Log Message:

Add note about error that happens when the loopback device doesn't work


Revisions:
errors.sgml 1.3 = 1.4

http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/faq/errors.sgml?r1=1.3r2=1.4



CVS update: samba/examples/pdb/mysql

2002-11-11 Thread jelmer

Date:   Mon Nov 11 13:49:25 2002
Author: jelmer

Update of /home/cvs/samba/examples/pdb/mysql
In directory dp.samba.org:/tmp/cvs-serv10828/examples/pdb/mysql

Modified Files:
mysql.dump 
Log Message:

Fix typo


Revisions:
mysql.dump  1.1 = 1.2

http://www.samba.org/cgi-bin/cvsweb/samba/examples/pdb/mysql/mysql.dump?r1=1.1r2=1.2



CVS update: samba/examples/pdb/mysql

2002-11-11 Thread jelmer

Date:   Mon Nov 11 13:49:39 2002
Author: jelmer

Update of /home/cvs/samba/examples/pdb/mysql
In directory dp.samba.org:/tmp/cvs-serv11342/examples/pdb/mysql

Modified Files:
  Tag: SAMBA_3_0
mysql.dump 
Log Message:

Fix typo


Revisions:
mysql.dump  1.1.2.1 = 1.1.2.2

http://www.samba.org/cgi-bin/cvsweb/samba/examples/pdb/mysql/mysql.dump?r1=1.1.2.1r2=1.1.2.2



CVS update: samba/source/rpcclient

2002-11-11 Thread jmcd

Date:   Mon Nov 11 15:41:04 2002
Author: jmcd

Update of /home/cvs/samba/source/rpcclient
In directory dp.samba.org:/tmp/cvs-serv23440

Modified Files:
cmd_spoolss.c 
Log Message:
Add getdata and getdataex commands

Revisions:
cmd_spoolss.c   1.96 = 1.97

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/cmd_spoolss.c?r1=1.96r2=1.97



CVS update: samba/source/rpcclient

2002-11-11 Thread jmcd

Date:   Mon Nov 11 15:43:09 2002
Author: jmcd

Update of /home/cvs/samba/source/rpcclient
In directory dp.samba.org:/tmp/cvs-serv23713

Modified Files:
  Tag: SAMBA_3_0
cmd_spoolss.c 
Log Message:
Add getdata and getdataex commands

Revisions:
cmd_spoolss.c   1.82.2.9 = 1.82.2.10

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/cmd_spoolss.c?r1=1.82.2.9r2=1.82.2.10



CVS update: samba/source/passdb

2002-11-11 Thread jelmer

Date:   Mon Nov 11 18:41:28 2002
Author: jelmer

Update of /home/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv6713/passdb

Modified Files:
pdb_mysql.c 
Log Message:

Add extra debug info


Revisions:
pdb_mysql.c 1.5 = 1.6

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_mysql.c?r1=1.5r2=1.6



CVS update: samba/source/passdb

2002-11-11 Thread jelmer

Date:   Mon Nov 11 18:42:13 2002
Author: jelmer

Update of /home/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv7062

Modified Files:
  Tag: SAMBA_3_0
pdb_mysql.c 
Log Message:

Add more debug info


Revisions:
pdb_mysql.c 1.4.2.2 = 1.4.2.3

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_mysql.c?r1=1.4.2.2r2=1.4.2.3



CVS update: samba/source/passdb

2002-11-11 Thread jelmer

Date:   Mon Nov 11 18:53:23 2002
Author: jelmer

Update of /home/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv8370/passdb

Modified Files:
pdb_mysql.c 
Log Message:

More improvement of DEBUG output


Revisions:
pdb_mysql.c 1.6 = 1.7

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_mysql.c?r1=1.6r2=1.7



CVS update: samba/source/passdb

2002-11-11 Thread jelmer

Date:   Mon Nov 11 18:54:13 2002
Author: jelmer

Update of /home/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv8398/source/passdb

Modified Files:
  Tag: SAMBA_3_0
pdb_mysql.c 
Log Message:

Improve DEBUG output somewhat more


Revisions:
pdb_mysql.c 1.4.2.3 = 1.4.2.4

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_mysql.c?r1=1.4.2.3r2=1.4.2.4



CVS update: samba/docs/docbook/projdoc

2002-11-11 Thread jelmer

Date:   Mon Nov 11 19:20:23 2002
Author: jelmer

Update of /home/cvs/samba/docs/docbook/projdoc
In directory dp.samba.org:/tmp/cvs-serv10785

Modified Files:
pdb_mysql.sgml 
Log Message:

fix typo(s/plaintext pass column/plain pass column/)


Revisions:
pdb_mysql.sgml  1.1 = 1.2

http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/projdoc/pdb_mysql.sgml?r1=1.1r2=1.2



Re: CVS update: samba/source/passdb

2002-11-11 Thread Volker.Lendecke
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

 Make smbpasswd use the group mapping, and fix spelling in ldapsam.

Ouch... Thanks!

Did I say I did compile this?

Volker

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Key-ID D32186CF, Fingerprint available: phone +49 551 370

iD8DBQE90CE9OmSXH9Mhhs8RAqMgAJoCD18KsBJttu+Q1GpsOK/SmDKSxwCcCA4t
1++vZDEUoCWskgMiaqCfFGs=
=73p8
-END PGP SIGNATURE-



Re: CVS update: samba/source/passdb

2002-11-11 Thread Andrew Bartlett
On Tue, 2002-11-12 at 08:29, [EMAIL PROTECTED] wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
  Make smbpasswd use the group mapping, and fix spelling in ldapsam.
 
 Ouch... Thanks!
 
 Did I say I did compile this?

It worked fine, because all the references were misspelled :-)

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


CVS update: samba/source/rpc_server

2002-11-11 Thread jerry

Date:   Mon Nov 11 22:02:01 2002
Author: jerry

Update of /data/cvs/samba/source/rpc_server
In directory dp.samba.org:/tmp/cvs-serv23613/rpc_server

Modified Files:
  Tag: APPLIANCE_HEAD
srv_spoolss_nt.c 
Log Message:
fix for CR 601.  Only call addprinter command when the port, driver, comment, or 
location field changed

Revisions:
srv_spoolss_nt.c1.95.2.221 = 1.95.2.222

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c?r1=1.95.2.221r2=1.95.2.222



CVS update: samba/source/rpc_server

2002-11-11 Thread jerry

Date:   Mon Nov 11 22:05:05 2002
Author: jerry

Update of /data/cvs/samba/source/rpc_server
In directory dp.samba.org:/tmp/cvs-serv24174/rpc_server

Modified Files:
srv_spoolss_nt.c 
Log Message:
fix for CR 601.  Only call addprinter command when the port, driver, comment, or 
location field changed

Revisions:
srv_spoolss_nt.c1.360 = 1.361

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c?r1=1.360r2=1.361



CVS update: samba/source/rpc_server

2002-11-11 Thread jerry

Date:   Mon Nov 11 22:05:33 2002
Author: jerry

Update of /data/cvs/samba/source/rpc_server
In directory dp.samba.org:/tmp/cvs-serv24252/rpc_server

Modified Files:
  Tag: SAMBA_3_0
srv_spoolss_nt.c 
Log Message:
fix for CR 601.  Only call addprinter command when the port, driver, comment, or 
location field changed

Revisions:
srv_spoolss_nt.c1.277.2.20 = 1.277.2.21

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c?r1=1.277.2.20r2=1.277.2.21



CVS update: samba/source/lib

2002-11-11 Thread jra

Date:   Mon Nov 11 22:12:48 2002
Author: jra

Update of /data/cvs/samba/source/lib
In directory dp.samba.org:/tmp/cvs-serv24915/lib

Modified Files:
charcnv.c 
Log Message:
Fix all returns to be size_t (they are all unsigned). Fixup strlen being
done on ucs2 strings.
Jeremy.


Revisions:
charcnv.c   1.65 = 1.66
http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/charcnv.c?r1=1.65r2=1.66