Re: [Samba] Turning Off Roaming Profiles?

2003-02-16 Thread Dmitry Melekhov
Hello!

I'm interesting in this too.
Cold you tell me how to have roaming profiles for some users and local
for others with samba 2.2 PDC?

- Original Message -
From: Kurt Weiss [EMAIL PROTECTED]
To: Jarl McConnel [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Sunday, February 16, 2003 11:40 AM
Subject: Re: [Samba] Turning Off Roaming Profiles?




 Jarl McConnel schrieb:
  Basically, as the subject says, I've found heaps of information on
turning them on, but I don't particularly want them as my profile is quite
large.

 *) u can use a policy file to turn them off
 *) u can switch it at the client to a local profile

 *) we always move the temporary internet files and the temp files
 away from profiles, so the profiles kept small.

 gk

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Turning Off Roaming Profiles? (resend)

2003-02-16 Thread John H Terpstra
On Sun, 16 Feb 2003, Jarl McConnel wrote:

 Sigh, here is me, trying to make a decent first impression of myself by
 providing as much information as I could, and then Outlook Expresses 'Send
 message later' option does something I didn't expect it to. So, here is the
 full message.

 Basically, as the subject says, I've found heaps of information on turning
 them on, but I don't particularly want them as my profile is quite large.
 I'm not quite sure why its even trying to use roaming profiles, I don't have
 a logon path = set in my smb.conf.

 My only guess is that if it doesn't find the logon path, it just puts the
 profile in your logon home directory in a subdirectory called profile.  If
 anyone can give me some info in to how to turn this functionality off it'd
 be greatly appreciated.

 Below is what I believe to be relevant bits of my smb.conf file.

 [global]
 netbios name = CASPAR
 encrypt passwords = true
 local master = yes
 preferred master = yes
 logon script = logon.bat
 domain logons = yes
 domain master = yes
 logon drive = H:
 logon home = \\caspar\%u

  logon home =

This should do. Note: Nothing after the '=' should set this to 'do not
use'.


 os level = 99

 [homes]
 path = /home/%u/shared
 create mode = 0600
 directory mode = 0700
 read only = No
 browseable = No

 [netlogon]
 path = /home/samba/netlogon
 read only = No
 read list = nobody


 Domain logons work (almost) perfectly for my needs except for this problem.
 The other problems aren't so much ones which would stop me from using samba
 as a PDC, just little annoyances like group mappings.

Please check previous postings on this. You should use Linux file system
permission to control this.

- John T.


 I am using samba version 2.2.3a-12 for Debian (Debian 3.0).

 If anyone could help it'd be greatly appreciated.




-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Access Denied when trying to login to samba PDC

2003-02-16 Thread Thomas Graham
While trying to set up samba as a PDC, I followed O'Reillys Using Samba. This resulted 
in the
following smb.conf:

[global]
workgroup = GRAHAM
encrypt passwords = true
log level = 1
max log size = 1000
hosts allow = 192.168.0/24 192.168.1/24
hosts deny = 1.1.1.1/0.0.0.0
domain logons = yes

security = user
os level = 34
local master = yes
preferred master = yes
domain master = yes

[temp]
comment = shared temporary directory
path = /usr/tmp
readonly = no
guest ok = yes

[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
create mode = 0664
directory mode = 0775
map to guest = bad user

If I try to join the domain GRAHAM from any of the WinXP(NT5.1) machines, by 
changing from
workgroup GRAHAM to Domain GRAHAM, then click OK, I am prompted to Enter the name and 
password of
an account with permission to join the domain.

If I enter a valid username and password (that allows access to the shared drives) I 
get the
response:
The following error occurred attempting to access the domain GRAHAM: ACCESS 
IS DENIED.

[2003/02/16 11:30:47, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
  unable to open passdb database.

If I enter a bad username/pass I get the response:
The following error occurred attempting to access the domain GRAHAM: Logon 
failure:
Unknown username/bad password

[2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:17, 1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'tg-1998': authentication failed
[2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:18, 1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'tg-1998': authentication failed


nmbd.log:
[2003/02/16 11:45:15, 0] nmbd/nmbd_logonnames.c:add_logon_names(156)
  add_domain_logon_names:
  Attempting to become logon server for workgroup GRAHAM on subnet 192.168.0.108 
[2003/02/16
11:45:15, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup GRAHAM on subnet 
192.168.0.108 [2003/02/16
11:45:15, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305)
  become_domain_master_browser_bcast: querying subnet 192.168.0.108 for domain master 
browser on
workgroup GRAHAM [2003/02/16 11:45:19, 0] 
nmbd/nmbd_logonnames.c:become_logon_server_success(115)
  become_logon_server_success: Samba is now a logon server for workgroup GRAHAM on 
subnet
192.168.0.108 [2003/02/16 11:45:19, 0] 
nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 30328 received with no matching record. 
[2003/02/16
11:45:19, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 30329 received with no matching record. 
[2003/02/16
11:45:24, 0] nmbd/nmbd_become_dmb.c:become_domain_master_stage2(115)
  *

  Samba server SUN is now a domain master browser for workgroup GRAHAM on subnet 
192.168.0.108

  *
[2003/02/16 11:45:38, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(404)
  *

  Samba name server SUN is now a local master browser for workgroup GRAHAM on subnet 
192.168.0.108

  *
[2003/02/16 11:46:34, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:34, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x7

I am running samba 2.2.3a-12 on a Sun Sparc64 running Debian GNU/Linux 3.0 woody. 
All the client
machines will be running windows XP pro/home edition.

Thomas Graham.

--
But be not afraid of greatness:
   some men are born great, some achieve greatness,
   and some have greatness thrust upon them.
--


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Access Denied when trying to login to samba PDC

2003-02-16 Thread Don Zajic
One of the main things you need to remember when joining a system to the
domain is, when prompted for a username and password, always use root
as the user.  

Don Zajic


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On
Behalf Of Thomas Graham
Sent: Sunday, February 16, 2003 6:45 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Access Denied when trying to login to samba PDC


While trying to set up samba as a PDC, I followed O'Reillys Using Samba.
This resulted in the following smb.conf:

[global]
workgroup = GRAHAM
encrypt passwords = true
log level = 1
max log size = 1000
hosts allow = 192.168.0/24 192.168.1/24
hosts deny = 1.1.1.1/0.0.0.0
domain logons = yes

security = user
os level = 34
local master = yes
preferred master = yes
domain master = yes

[temp]
comment = shared temporary directory
path = /usr/tmp
readonly = no
guest ok = yes

[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
create mode = 0664
directory mode = 0775
map to guest = bad user

If I try to join the domain GRAHAM from any of the WinXP(NT5.1)
machines, by changing from workgroup GRAHAM to Domain GRAHAM, then click
OK, I am prompted to Enter the name and password of an account with
permission to join the domain.

If I enter a valid username and password (that allows access to the
shared drives) I get the
response:
The following error occurred attempting to access the domain
GRAHAM: ACCESS IS DENIED.

[2003/02/16 11:30:47, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
  unable to open passdb database.

If I enter a bad username/pass I get the response:
The following error occurred attempting to access the domain
GRAHAM: Logon failure: Unknown username/bad password

[2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:17, 1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'tg-1998': authentication failed
[2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:18, 1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'tg-1998': authentication failed


nmbd.log:
[2003/02/16 11:45:15, 0] nmbd/nmbd_logonnames.c:add_logon_names(156)
  add_domain_logon_names:
  Attempting to become logon server for workgroup GRAHAM on subnet
192.168.0.108 [2003/02/16 11:45:15, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup GRAHAM on
subnet 192.168.0.108 [2003/02/16 11:45:15, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305)
  become_domain_master_browser_bcast: querying subnet 192.168.0.108 for
domain master browser on workgroup GRAHAM [2003/02/16 11:45:19, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(115)
  become_logon_server_success: Samba is now a logon server for workgroup
GRAHAM on subnet 192.168.0.108 [2003/02/16 11:45:19, 0]
nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 30328 received with no
matching record. [2003/02/16 11:45:19, 0]
nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 30329 received with no
matching record. [2003/02/16 11:45:24, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(115)
  *

  Samba server SUN is now a domain master browser for workgroup GRAHAM
on subnet 192.168.0.108

  *
[2003/02/16 11:45:38, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(404)
  *

  Samba name server SUN is now a local master browser for workgroup
GRAHAM on subnet 192.168.0.108

  *
[2003/02/16 11:46:34, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:34, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x7

I am running samba 2.2.3a-12 on a Sun Sparc64 running Debian GNU/Linux
3.0 woody. All the client machines will be running windows XP pro/home

[Samba] Access Denied when trying to login to samba PDC

2003-02-16 Thread Thomas Graham
Having managed to join my system to the domain using the root user, when I try to 
logon from the
WinNT login screen, I get the response Windows cannot connect to the domain, either 
because the
domain controller is down or otherwise unavailable, or because your computer account 
was not found.

nmbd.log:
[2003/02/16 14:25:58, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12

---

On 16th Feb Don Zaijic said:

One of the main things you need to remember when joining a system to the domain is, 
when prompted
for a username and password, always use root as the
user.  

---

While trying to set up samba as a PDC, I followed O'Reillys Using Samba. This resulted 
in the
following smb.conf:

[global]
workgroup = GRAHAM
encrypt passwords = true
log level = 1
max log size = 1000
hosts allow = 192.168.0/24 192.168.1/24
hosts deny = 1.1.1.1/0.0.0.0
domain logons = yes

security = user
os level = 34
local master = yes
preferred master = yes
domain master = yes

[temp]
comment = shared temporary directory
path = /usr/tmp
readonly = no
guest ok = yes

[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
create mode = 0664
directory mode = 0775
map to guest = bad user



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Access Denied when trying to login to samba PDC

2003-02-16 Thread Don Zajic
Have you created both a linux user account and samba user account for
the username you are attempting with?

On your linux system prompt type:  adduser -u nnn username  
Where nnn is the userid number that you want to assign to this user and
of course username is a valid domain user name
This will create the entry in the /etc/passwd file
Then on your linux system type:  smbadduser -a username
Again where user name is the user name you just created in the passwd
file.

Now attempt to login to the domain from a Windows system with that user
name.

The short of it is the user must exist in both the linux passwd file and
the samba smbpasswd file with the same UID value.

Don

-Original Message-
From: Thomas Graham [mailto:[EMAIL PROTECTED]] 
Sent: Sunday, February 16, 2003 9:25 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Access Denied when trying to login to samba PDC


Having managed to join my system to the domain using the root user, when
I try to logon from the WinNT login screen, I get the response Windows
cannot connect to the domain, either because the domain controller is
down or otherwise unavailable, or because your computer account was not
found.

nmbd.log:
[2003/02/16 14:25:58, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12

---

On 16th Feb Don Zaijic said:

One of the main things you need to remember when joining a system to 
the domain is, when prompted
for a username and password, always use root as the
user.

---

While trying to set up samba as a PDC, I followed O'Reillys Using Samba.
This resulted in the following smb.conf:

[global]
workgroup = GRAHAM
encrypt passwords = true
log level = 1
max log size = 1000
hosts allow = 192.168.0/24 192.168.1/24
hosts deny = 1.1.1.1/0.0.0.0
domain logons = yes

security = user
os level = 34
local master = yes
preferred master = yes
domain master = yes

[temp]
comment = shared temporary directory
path = /usr/tmp
readonly = no
guest ok = yes

[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
create mode = 0664
directory mode = 0775
map to guest = bad user





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] No domain server was available to validate your password.

2003-02-16 Thread Terence Kew
Hi all,

I have a strange problem with the Samba server as PDC.
I periodically get the error message No domain server
was available to validate your password. But, at
other times it would login fine and execute the login
scripts to handle all the map drives.

I don't have the slightest clue where the problem is.
When the problem arise, I don't even need to do
anything about it. If I leave it alone for awhile,
sometimes up to a day, it will just go away, and it
will work again.

Please help, please forward all your replies to
[EMAIL PROTECTED] as I am not subscribed to the
list.

Thanks.

Regards,
Terence Kew


__
Do You Yahoo!?
Promote your business from just $5 a month!
http://sg.biztools.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Customizing login script

2003-02-16 Thread Terence Kew
Hi,

I have a scenario here, I have users of different
groups login onto the Samba server as PDC. I want to
have a login script that will basically look at the
unix group that they belong to and map share drives
accordingly.

Please provide any form of assistance possible, or
alternative method of achieving what I need to do.

Please forward your correspondence to
[EMAIL PROTECTED] as I am not this mailing
list.

Thanks.

Best regards,
Terence Kew


__
Do You Yahoo!?
Promote your business from just $5 a month!
http://sg.biztools.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Access Denied when trying to login to samba PDC

2003-02-16 Thread Thomas Graham
I made sure this was the case, altough I thought it was. Still no luck - it just comes 
back with the
same message instantly.

Thomas
 -Original Message-
 From: Don Zajic [mailto:[EMAIL PROTECTED]] 
 Sent: 16 February 2003 14:41
 To: 'Thomas Graham'; [EMAIL PROTECTED]
 Subject: RE: [Samba] Access Denied when trying to login to samba PDC
 
 
 Have you created both a linux user account and samba user 
 account for the username you are attempting with?

 Now attempt to login to the domain from a Windows system with 
 that user name.
 
 The short of it is the user must exist in both the linux 
 passwd file and the samba smbpasswd file with the same UID value.
 
 Don
 
 -Original Message-
 From: Thomas Graham [mailto:[EMAIL PROTECTED]] 
 Sent: Sunday, February 16, 2003 9:25 AM
 To: [EMAIL PROTECTED]
 Subject: [Samba] Access Denied when trying to login to samba PDC
 
 
 Having managed to join my system to the domain using the root 
 user, when I try to logon from the WinNT login screen, I get 
 the response Windows cannot connect to the domain, either 
 because the domain controller is down or otherwise 
 unavailable, or because your computer account was not found.
 
 nmbd.log:
 [2003/02/16 14:25:58, 1]
 nmbd/nmbd_processlogon.c:process_logon_packet(69)
   process_logon_packet: Logon from 192.168.0.2: code = 0x12
 
 While trying to set up samba as a PDC, I followed O'Reillys 
 Using Samba. This resulted in the following smb.conf:
 
 [global]
 workgroup = GRAHAM
 encrypt passwords = true
 log level = 1
 max log size = 1000
 hosts allow = 192.168.0/24 192.168.1/24
 hosts deny = 1.1.1.1/0.0.0.0
 domain logons = yes
 
 security = user
 os level = 34
 local master = yes
 preferred master = yes
 domain master = yes
 
 [temp]
 comment = shared temporary directory
 path = /usr/tmp
 readonly = no
 guest ok = yes
 
 [homes]
 comment = Home Directories
 browseable = no
 writable = yes
 valid users = %S
 create mode = 0664
 directory mode = 0775
 map to guest = bad user
 
 
 
 
 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Low-cost SMS gateway in South Africa

2003-02-16 Thread ExpertSMS South Africa
South African SMS Gateway.

BULK SMS for 0.0445050 EUR.

www.expertsms.com




To be removed click here [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] os X finder wonkiness

2003-02-16 Thread fogboy
i would bet anything someone's already asked and had this answered, but 
since the archives of these listss aren't searchable, and since i 
couldn't find the info in the docs or elsewhere on net, here goes:

i've got 3 shares active on a debian box, accessing them fine from an 
OS X g4 and 2 win 98 boxes
(the were set up and configured via the samba web admin tool from a 
browser when using gnome)
(os X is 10.2.1)

when i access dirs on those shares from the PC's, there's no problem, 
read, write all good.

but from the mac, 2 important yuk things happen -

1. the cmd-option-arrow or opt-arrow keystrokes normally used in the os 
X finder don't work in those folders that are in the share

2. after closing folders and their subfolders, then closing windows, i 
come back to that folder right away or after other operations, and the 
folders and subfolders i closed are open as before. v. odd

any pointers much appreciated!
thanks
eli
fogboyATmovementbuildingDOTorg

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba Member of NT-Domain: Prefix

2003-02-16 Thread Klaus Spengler
Hello!

I'm new here. I've a problem with my Samba (SuSE 8.1, Samba 2.2.5) Server.
It's Member of a MS NT 4 Domain, means it authentificate at NT 4 PDC.

When I logged in with my Computer in Domain Account, the connection to my
Samba ressources hasn't any Problem, but when I didn't log on with my Domain
Account (means i log on to my Computer saved account), Samba doesn't
authentificate the user.
Then I'll give Samba the Username in the following syntax:

DOMAIN\USER

Here my smb.conf, hope somebody can help my (or somebody understands my kind
of english!)

[global]
workgroup = nt01
netbios name = samba
security = DOMAIN
password server = *
encrypt passwords = Yes
username level = 8
password level = 8
add user script = /etc/samba/smbbenutzer %U
log level = 3
fstype = samba!

Thank you, Klaus

-- 
+++ GMX - Mail, Messaging  more  http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] No domain server was available to validate your password.

2003-02-16 Thread Raj Saxena
How is your dns setup? do you have a local dns or wins running on your
server ?

Raj

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
Terence Kew
Sent: Sunday, February 16, 2003 6:41 AM
To: [EMAIL PROTECTED]
Subject: [Samba] No domain server was available to validate your
password.


Hi all,

I have a strange problem with the Samba server as PDC.
I periodically get the error message No domain server
was available to validate your password. But, at
other times it would login fine and execute the login
scripts to handle all the map drives.

I don't have the slightest clue where the problem is.
When the problem arise, I don't even need to do
anything about it. If I leave it alone for awhile,
sometimes up to a day, it will just go away, and it
will work again.

Please help, please forward all your replies to
[EMAIL PROTECTED] as I am not subscribed to the
list.

Thanks.

Regards,
Terence Kew


__
Do You Yahoo!?
Promote your business from just $5 a month!
http://sg.biztools.yahoo.com
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.449 / Virus Database: 251 - Release Date: 1/27/2003

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.449 / Virus Database: 251 - Release Date: 1/27/2003


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] recycle icon?

2003-02-16 Thread John H Terpstra
On Mon, 17 Feb 2003, Thomas Bork wrote:

 Hi,

 I searched the archives but could not found an answer for my question:
 Is there a way to show the normal windows icon for the vfs-recycle-bin
 from samba?

No, there is not. VFS_Recycle_Bin is handled entirely within the
Unix/Linux OS. Your users will be able to see a directory called .recycle
and from it they will be able to recover files. They will not be able to
delete the .recycle directory from within Windows.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] samba Digest, Vol 2, Issue 54

2003-02-16 Thread Martin Pool
On 15 Mar 2003, [EMAIL PROTECTED] wrote:

 O email [EMAIL PROTECTED] foi alterado para
 [EMAIL PROTECTED], entretanto a sua mensagem foi
 redirecionada para o novo email.  Atenciosamente, American BankNote
 Ltda

This person has been unsubscribed.

Please engage brain before starting autoresponder.

-- 
Martin 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Testparm Solaris 8

2003-02-16 Thread Jody Hobbs
Apologies if this has been covered already, I can't find any helpful hints
after 2 hours searching
Testparm refuses to work on my e250 box - says it can't find the file?
Any pointers to useful docs will be greatly appreciated (other than SAMS
books and O'Rielly - been there, done that!), especially any relating to
Solaris 8 and SAMBA!

TIA

Jo


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Testparm Solaris 8

2003-02-16 Thread Michael Noble
I have Samba 2.2.5 running on an Ultra60 with Solaris8.  I can do a
which with the following results:

which testparm
/opt/samba/bin/testparm

Did you add the path to the samba bin directory into your $PATH 
statement?
Try going to the samba bin directory and running:
./testparm

Mike

On Sun, 2003-02-16 at 18:24, Jody Hobbs wrote:
 Apologies if this has been covered already, I can't find any helpful hints
 after 2 hours searching
 Testparm refuses to work on my e250 box - says it can't find the file?
 Any pointers to useful docs will be greatly appreciated (other than SAMS
 books and O'Rielly - been there, done that!), especially any relating to
 Solaris 8 and SAMBA!
 
 TIA
 
 Jo
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
Michael G. Noble  RF Magic, Inc.
Senior System Administrator   10182 Telesis Ct., 4th Floor
  San Diego, CA.   92121
mailto:[EMAIL PROTECTED] voice: (858) 546-2401 x207
  fax:   (858) 546-2402
--
There is Sanity in my Madness!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] logging by name and ip address in 3.0a21

2003-02-16 Thread Bradley W. Langhorst

Does anybody else see two sets of logs with 
log file = /var/log/samba/log.smbd.%m ? 

i get both logs like
log.smbd.192.168.0.3
and
log.smbd.testpc

when testpc has the ip address 192.168.0.3
I've tried %M and with no obvious effect


thanks

-- 
Bradley W. Langhorst [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [PATCH] ADS changes for joining accounts w/o full Administratorrights

2003-02-16 Thread Andrew Bartlett
On Wed, 2003-02-12 at 22:16, Antti Andreimann wrote:
 Ühel kenal päeval (kolmapäev, 12. veebruar 2003 00:16) kirjutas Andrew 
 Bartlett:
  I think we need to do a few things here:
   - We should record the principal name we joined with, and only ever
  send that to our clients.
 
 That's a good idea. I'll look into it hopefully sometime during this week.
 
  should add a typedef from krb5_error to somthing harmless, or better
  still look into our ADS_ERROR stuff (partly created for exactly this
  kind of thing).  Returning an ADS_ERROR would probably be the best
  solution here.
 
 Nope, that's not possible. The function is passed to 
 krb5_get_init_creds_password as a pointer to function and the prototype is 
 therefore dictated by kerberos libs. This could be overriden by some clever 
 use of typecasts but this would be an ugly hack in my opinion.
 
  Well, I don't think this is sufficient reason not to do this properly.
  Duplicated code *will* break as two slightly different versions emerge.
 
 Well I do agree. Now that I have an official permission to hack the build 
 system I'll happily do it ;)
 However a thought came to me last night that maybe this function is not needed 
 after all. It's there as a workaround to a bug/feature (go figure ;) in 
 kerberos libs but I think I know an easier way to solve it. I just have to 
 test if it works.

BTW, I've applied your patch, minus the session-setup changes, and with
only one copy of the kinit function.

Thankyou very much for the patch!

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


bug fix?: 2.2.7a, nmbd/nmbd_packets.c, listen_for_packets()

2003-02-16 Thread Peter Hurley
This is a follow-up to WINS server incorrectly ignores 127.0.0.1
requests.

When running a WINS server using the following configuration:
[global]
wins support = yes
interfaces = 192.168.1.0/24
bind interfaces only = true
the WINS server erroneously discards 127.0.0.1 requests from SMBD
children.  This happens whenever libsmb/resolve_wins() is called.  I ran
into this trying to understand why bringing up a Print dialog would take
 6 secs, but I would guess that there are other places this would come
up.

As a temporary solution, adding 127.0.0.0/8 to the interfaces = 
configuration works, but has the side effect of starting SMBD on
127.0.0.1:139.

I would suggest two possible alterate fixes:
1) Change the 137 packet handler. In nmbd/nmbd_packets.c,
listen_for_packets(), lines# 1847~1860, reads:

if(lp_bind_interfaces_only()  (sock_array[i] == ClientNMB) 
   (!is_local_net(packet-ip))) {
 DEBUG(7,(discarding nmb packet sent to broadcast socket from
%s:%d\n,
   inet_ntoa(packet-ip),packet-port));
 free_packet(packet);
} else if (ip_equal(loopback_ip, packet-ip) 
   packet-port == global_nmb_port) {
 DEBUG(7,(discarding own packet from %s:%d\n,
   inet_ntoa(packet-ip),packet-port));
 free_packet(packet);
} else {
 /* Save the file descriptor this packet came in on. */
 packet-fd = sock_array[i];
 queue_packet(packet);
}

Replace with:

BOOL is_loopback = ip_equal(loopback_ip, packet-ip);
if (!is_loopback  lp_bind_interfaces_only() 
 (sock_array[i] == ClientNMB)  (!is_local_net(packet-ip) )) {
 DEBUG(7,(discarding nmb packet sent to broadcast socket from
%s:%d\n,
   inet_ntoa(packet-ip),packet-port));
 free_packet(packet);
} else if (is_loopback  packet-port == global_nmb_port) {
 DEBUG(7,(discarding own packet from %s:%d\n,
   inet_ntoa(packet-ip),packet-port));
 free_packet(packet);
} else {
 /* Save the file descriptor this packet came in on. */
 packet-fd = sock_array[i];
 queue_packet(packet);
}

** OR **
2) return true from is_local_net if param ip is 127.0.0.1.  I have not
tried this because is_local_net() is used in two other places, both of
which are looking for DMB (one in smbd/password.c and one in
nsswitch/winbinddd_cm.c).  It's unclear to me what the side effects
would be here.

BTW, similar logic exists for the 138 handler in the same function. I'm
not sure whether that is cause for concern and if it should be fixed
like the 137 handler above.

Thanks,

Peter Hurley
[EMAIL PROTECTED]




how to call smbpasswd from setuid program?

2003-02-16 Thread Martin Rasp
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi.

I'm developing a samba frontend which is called Take a Joint (Project 
page: http://www.linux-fuer-alle.de/mr/taj/). To allow users to share 
directories which should be protected by a password I need to call 
smbpasswd from my installed setuid program. Unfortunately I'm getting 
smbpasswd must *NOT* be setuid root. because you don't test smbpasswd's 
setuid flags, but the effective user id.

How could I add temporary users to smbpasswd file within my setuid program?

Bye, Martin
- --
http://www.linux-fuer-alle.de/mr/taj/
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE+T8aGRqiZxpiH/1ERAtKTAJ9BsZXpnQOjQlq20eauE+zuMI8csgCfYiy/
cRfqgNAMSaxDSiwhF2odB8c=
=Uyoc
-END PGP SIGNATURE-




Re: bug fix?: 2.2.7a, nmbd/nmbd_packets.c, listen_for_packets()

2003-02-16 Thread Andrew Bartlett
On Mon, 2003-02-17 at 03:11, Peter Hurley wrote:
 This is a follow-up to WINS server incorrectly ignores 127.0.0.1
 requests.
 
 When running a WINS server using the following configuration:
   [global]
   wins support = yes
   interfaces = 192.168.1.0/24
   bind interfaces only = true
 the WINS server erroneously discards 127.0.0.1 requests from SMBD
 children.  This happens whenever libsmb/resolve_wins() is called.  I ran
 into this trying to understand why bringing up a Print dialog would take
  6 secs, but I would guess that there are other places this would come
 up.

I don't see how this is erroneous.  If you specifically configure Samba
not to listen on an interface, I might imagine that it might just happen
to not listen on that interface.  The documentation is quite clear on
this matter - you really should include localhost in your interface
list.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


Re: improved dos attribute handling

2003-02-16 Thread Ola Lundqvist
Hi

On Sat, Feb 15, 2003 at 09:19:46PM -0500, John E. Malmberg wrote:
 Ola Lundqvist wrote:
 Sorry. I'm not subscribed to this list so I could not
 preserve the reply-to header. Please Cc: me if you
 want me to know the mail. :)
 
 Bcc: by request.

Thanks. I have now subscribed but I think it failed so please Cc: me
until I got my subscription right.

 snipped
 On the other hand, with the current setup users must have administrative
 rights to modify read-only bit. This is a problem because in a windows
 environment (with users used to windows stuff) there is no such thing as
 file owners.
 
 There is such a thing as file owners in a domain file server.  This will 
 show up in the file properties on Windows under the security properties.
 
 As long as your patch is a selectable behavior, there are probably a lot 
 of systems that could use it.

Right now it is selectable but not as a new option. In fact it is activated
by the 'dos filemode' option. If someone can give me a pointer to or
a good advice on how to add such an option.

 I just wanted to make clear that it does have side effects when you are 
 not running in an appliance mode, or if your users are in multiple UNIX 
 groups.

That is true.

 I do not run UNIX, I run OpenVMS.  It uses a UIC based protection model 
 that is similar to UNIX but there might be some differences that are 
 important that I may be overlooking.
 
 I can give users write access to a file with out giving them write 
 access to the entire directory.  Write access to the directory implies 
 that they can add and remove files.
 
 So adding the world write permission back to a file that the user owns 
 when the READONLY bit is cleared will allow every other user on the 
 system write access to that file, if they know it's path.

On the other hand you can still do that because the user can copy the file,
delete the old one, create a new one and copy in the content.

 Does UNIX require you to have write access to a directory to modify a 
 file that you have write access to?

No.

 You simply do not know what the Group and World settings were prior to 
 the Readonly attribute being set.
 
 And that is why I check the directory permissions. Iff the user has
 write access to the directory and is member of the file it can
 modify the permissions.
 
 As I pointed out above, at least on OpenVMS, that is not a valid 
 assumption as to what the users wishes are for the world and group 
 access.  Just because they have permission to set them does not mean 
 that they mean to.

I do not know openvms good enough so I can not tell. :)

Regards,

// Ola

 
 -John
 [EMAIL PROTECTED]
 Personal Opinion Only
 

-- 
 - Ola Lundqvist ---
/  [EMAIL PROTECTED] Annebergsslingan 37  \
|  [EMAIL PROTECTED] 654 65 KARLSTAD  |
|  +46 (0)54-10 14 30  +46 (0)70-332 1551   |
|  http://www.opal.dhs.org UIN/icq: 4912500 |
\  gpg/f.p.: 7090 A92B 18FE 7994 0C36  4FE4 18A1 B1CF 0FE5 3DD9 /
 ---



Re: [PATCH] module stuff (BIG patch :-)

2003-02-16 Thread Jelmer Vernooij
On Wed, Dec 18, 2002 at 05:30:42PM +0100, Stefan (metze) Metzmacher wrote about 
'[PATCH] module stuff (BIG patch :-)':
 I have tested this patch this afternoon and I have no problems...
Hi Stefan,

Could you please send me a patch for the winsdb stuff only? The patch 
should really be splitted up in small pieces. Also, it contains a lot 
of architectural changes (especially the modules stuff) that haven't 
been discussed yet.

Jelmer



msg06133/pgp0.pgp
Description: PGP signature


Re: Machine Account Passwords are changed on the WRONG server!!

2003-02-16 Thread Brian M Hoy
On Sat, 2003-02-15 at 07:06, Gerald (Jerry) Carter wrote:

 On 14 Feb 2003, Brian M Hoy wrote:
 
  If you believe the MS document, then the Samba BDC should pass the
  machine account password change request to the PDC.  That would be nice!
 
 If you are using read-only replicas for Samba BDCs then the password 
 change should be passed onto the master LDAP server via a referral.
 Did you say you were using samba 2.2?  This is one fix that will be in 
 2.2.8 (was already in HEAD/SAMBA_3_0)
 

Thank you for your comments.  I will try 2.2.8 when it is released and
let the group know if it solves the problem.  Also, many thanks to all
the others who replied to me personally.  It is very much appreciated.

Regards,
Brian




getdirentries rather than readdir in the Samba VFS layer

2003-02-16 Thread Richard Sharpe
Hi,

Given the performance improvements in using getdents/getdirentries on 
those systems that have them, it seems to me to be better to have 
getdirentries in the VFS rather than readdir. For those systems that do 
not have getdents and getdirentries, we would simply fall back to readdir 
in the VFS layer.

Does anyone have any comments? (Apart from the amount of work involved in 
doing it :-)

Regards
-
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com




RE: bug fix?: 2.2.7a, nmbd/nmbd_packets.c, listen_for_packets()

2003-02-16 Thread Peter Hurley
 
  When running a WINS server using the following configuration:
  [global]
  wins support = yes
  interfaces = 192.168.1.0/24
  bind interfaces only = true
  the WINS server erroneously discards 127.0.0.1 requests from SMBD
  children.  This happens whenever libsmb/resolve_wins() is called.  I
ran
  into this trying to understand why bringing up a Print dialog would
take
   6 secs, but I would guess that there are other places this would
come
  up.
 
 I don't see how this is erroneous.  If you specifically configure
Samba
 not to listen on an interface, I might imagine that it might just
happen
 to not listen on that interface.  The documentation is quite clear on
 this matter - you really should include localhost in your interface
 list.


I think there are several good reasons to include this fix:
1)  I think the documentation is ambiguous on this subject.

The smb.conf man page states:

   interfaces (G)
 This  option  allows  you to override the default network
inter-
 faces list that Samba will use for browsing,  name
registration
 and  other  NBT  traffic. By default Samba will query the
kernel
 for the list of all active interfaces  and  use  any
interfaces
 except 127.0.0.1 that are broadcast capable.
.
.
   For example, the following line:

   interfaces = eth0 192.168.2.10/24 192.168.3.10/255.255.255.0
.
.
   Default: all active interfaces  except  127.0.0.1  that  are
broadcast
   Capable
*
I think this documentation implies that 127.0.0.1 is an unnecessary
interface as far as Samba is concerned.
a) The sample given does not include 127.0.0.0/8
b) Twice it states that the default will NOT acquire 127.0.0.1.

There's little mention of interfaces= in the Samba HOWTO.
In section 4.6 of Using Samba, the example smb.conf does not add the
loopback interface (only in 4.6.1.4 does it say,

If you set bind interfaces only to yes, you should add the localhost
address (127.0.0.1) to the interfaces list. Otherwise, smbpasswd will
be unable to connect to the server using its default mode in order to
change a password. -- BTW, not actually true. smbpasswd works fine
without this.

I could only find two appropriate entries: section 6.1 of the
Unofficial Samba How-To and an e-mail from Martin Rusko on a Debian
Security mailing list.

2) interfaces= is an overloaded option.  Setting the loopback address
in interfaces= has both SMBD and NMBD listening to it.  But in the
default mode, SMBD will only listen to all broadcast addresses EXCEPT
loopback, whereas NMBD will listen to every address.

3) I've seen quite a few misconfigured interfaces=.  I think this is
probably a very common oversight that goes largely undetected.  In my
case, I was running this misconfiguration on one server for two years,
and on another for 9 mos.  It was only because I decided to seriously
bulldog a seemlingly unrelated problem (long time to bring up Print
dialog) that I uncovered the misconfiguration for myself.

4) I believe this to be the most serious.  The only indication that
something is wrong is that things run slow or sporadically slow.  But
slow-running stuff is hard to diagnose.  It could be network hardware,
server hardware, misconfigured network hardware, corrupted firewalls,
complex multi-subnet installations, etc.  The security-conscious (a lot
of people) are going to and do use bind interfaces only = yes, without
realizing all the ramifications.

A lot of posts on the samba list are about complex problems that start:
it's running slow.  Remember the thread, How Samba let us down?  Quite
a furor:  interestingly, Chris de Vidal states in his e-mail of 23
October 2002, 10:46:29, I did try WINS in testing; I would see
WINS server appears to be down...Have you seen better documents on
implementing Samba WINS...

I think in this situation a small change could go a long way.

Thanks,

Peter Hurley
[EMAIL PROTECTED]




[PATCH] string_to_sid audit

2003-02-16 Thread Martin Pool
In several cases, the return code from string_to_sid is not checked.
So if the user enters a syntactically invalid SID, the program will
proceed to use uninitialized data.

This patch checks for a few such cases that I found.  Can somebody
please review it?

Index: groupdb/mapping.c
===
RCS file: /data/cvs/samba/source/groupdb/mapping.c,v
retrieving revision 1.44
diff -u -U6 -r1.44 mapping.c
--- groupdb/mapping.c   2 Jan 2003 09:07:02 -   1.44
+++ groupdb/mapping.c   17 Feb 2003 04:21:37 -
@@ -301,13 +301,17 @@
if(!init_group_mapping()) {
DEBUG(0,(failed to initialize group mapping));
return(False);
}

map.gid=gid;
-   string_to_sid(map.sid, sid);
+   if (!string_to_sid(map.sid, sid)) {
+   DEBUG(0, (string_to_sid failed: %s, sid));
+   return False;
+   }
+   
map.sid_name_use=sid_name_use;
fstrcpy(map.nt_name, nt_name);
fstrcpy(map.comment, comment);
map.systemaccount=systemaccount;
 
map.priv_set.count=priv_set.count;
Index: nsswitch/wb_client.c
===
RCS file: /data/cvs/samba/source/nsswitch/wb_client.c,v
retrieving revision 1.40
diff -u -U6 -r1.40 wb_client.c
--- nsswitch/wb_client.c7 Aug 2002 07:28:24 -   1.40
+++ nsswitch/wb_client.c17 Feb 2003 04:21:37 -
@@ -53,13 +53,14 @@
 
fstrcpy(request.data.name.dom_name, dom_name);
fstrcpy(request.data.name.name, name);
 
if ((result = winbindd_request(WINBINDD_LOOKUPNAME, request, 
   response)) == NSS_STATUS_SUCCESS) {
-   string_to_sid(sid, response.data.sid.sid);
+   if (!string_to_sid(sid, response.data.sid.sid))
+   return False;
*name_type = (enum SID_NAME_USE)response.data.sid.type;
}
 
return result == NSS_STATUS_SUCCESS;
 }
 
@@ -155,13 +156,14 @@
 
result = winbindd_request(WINBINDD_UID_TO_SID, request, response);
 
/* Copy out result */
 
if (result == NSS_STATUS_SUCCESS) {
-   string_to_sid(sid, response.data.sid.sid);
+   if (!string_to_sid(sid, response.data.sid.sid))
+   return False;
} else {
sid_copy(sid, global_sid_NULL);
}
 
return (result == NSS_STATUS_SUCCESS);
 }
@@ -221,13 +223,14 @@
 
result = winbindd_request(WINBINDD_GID_TO_SID, request, response);
 
/* Copy out result */
 
if (result == NSS_STATUS_SUCCESS) {
-   string_to_sid(sid, response.data.sid.sid);
+   if (!string_to_sid(sid, response.data.sid.sid))
+   return False;
} else {
sid_copy(sid, global_sid_NULL);
}
 
return (result == NSS_STATUS_SUCCESS);
 }
Index: python/py_lsa.c
===
RCS file: /data/cvs/samba/source/python/py_lsa.c,v
retrieving revision 1.16
diff -u -U6 -r1.16 py_lsa.c
--- python/py_lsa.c 23 Dec 2002 23:53:55 -  1.16
+++ python/py_lsa.c 17 Feb 2003 04:21:37 -
@@ -232,23 +232,29 @@

memset(sids, 0, num_sids * sizeof(DOM_SID));

for (i = 0; i  num_sids; i++) {
PyObject *obj = PyList_GetItem(py_sids, i);

-   string_to_sid(sids[i], PyString_AsString(obj));
+   if (!string_to_sid(sids[i], PyString_AsString(obj))) {
+   PyErr_SetString(PyExc_ValueError, string_to_sid 
+failed);
+   return NULL;
+   }
}
 
} else {
 
/* Just a single element */
 
num_sids = 1;
sids = (DOM_SID *)talloc(hnd-mem_ctx, sizeof(DOM_SID));
 
-   string_to_sid(sids[0], PyString_AsString(py_sids));
+   if (!string_to_sid(sids[0], PyString_AsString(py_sids))) {
+   PyErr_SetString(PyExc_ValueError, string_to_sid failed);
+   return NULL;
+   }
}
 
ntstatus = cli_lsa_lookup_sids(hnd-cli, hnd-mem_ctx, hnd-pol,
   num_sids, sids, domains, names, 
   types);
 
Index: rpc_parse/parse_net.c
===
RCS file: /data/cvs/samba/source/rpc_parse/parse_net.c,v
retrieving revision 1.102
diff -u -U6 -r1.102 parse_net.c
--- rpc_parse/parse_net.c   14 Feb 2003 23:04:02 -  1.102
+++ rpc_parse/parse_net.c   17 Feb 2003 04:21:38 -
@@ -882,17 +882,19 @@
*ppsids = (DOM_SID2 *)talloc_zero(ctx, count * sizeof(DOM_SID2));

Re: CVS update: samba/source/include

2003-02-16 Thread Andrew Bartlett
On Sat, 2003-02-15 at 21:45, Simo Sorce wrote:
 Are you sure it wasn't on purpose?
 is uint32 defined elsewhere?

Yep, right below it.  It's pretty clear that it was a typo.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


CVS update: samba/source/utils

2003-02-16 Thread sharpe

Date:   Sun Feb 16 17:16:06 2003
Author: sharpe

Update of /data/cvs/samba/source/utils
In directory dp.samba.org:/tmp/cvs-serv27137/utils

Modified Files:
editreg.c 
Log Message:

Recover much of my changes to editreg.c. Add some const and start coding
the regedit file parser etc.



Revisions:
editreg.c   1.27 = 1.28

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/editreg.c?r1=1.27r2=1.28



CVS update: samba/source/nsswitch

2003-02-16 Thread jra

Date:   Sun Feb 16 19:27:53 2003
Author: jra

Update of /data/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv15745/nsswitch

Modified Files:
  Tag: APPLIANCE_HEAD
winbindd_rpc.c 
Log Message:
Do retries correctly if the connection to the DC has failed. Based on
work by Michael Steffens. No CR#.
Jeremy.


Revisions:
winbindd_rpc.c  1.28.2.17 = 1.28.2.18

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_rpc.c?r1=1.28.2.17r2=1.28.2.18



CVS update: samba/source/nsswitch

2003-02-16 Thread jra

Date:   Sun Feb 16 19:38:34 2003
Author: jra

Update of /data/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv17351/nsswitch

Modified Files:
  Tag: SAMBA_2_2
winbindd_rpc.c 
Log Message:
Do retries correctly if the connection to the DC has failed. Based on
work by Michael Steffens. 
Jeremy.


Revisions:
winbindd_rpc.c  1.22.2.14 = 1.22.2.15

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_rpc.c?r1=1.22.2.14r2=1.22.2.15



CVS update: sambaweb/support

2003-02-16 Thread mimir

Date:   Sun Feb 16 20:30:53 2003
Author: mimir

Update of /home/cvs/sambaweb/support
In directory dp.samba.org:/tmp/cvs-serv25557/support

Modified Files:
poland.html 
Log Message:
Removed an address that's no longer (for quite a time) valid
and one typo fixed.


Rafal



Revisions:
poland.html 1.5 = 1.6
http://www.samba.org/cgi-bin/cvsweb/sambaweb/support/poland.html?r1=1.5r2=1.6



CVS update: sambaweb

2003-02-16 Thread mimir

Date:   Sun Feb 16 20:32:23 2003
Author: mimir

Update of /home/cvs/sambaweb
In directory dp.samba.org:/tmp/cvs-serv26030

Modified Files:
team.html 
Log Message:
Jelmer is certainly not the new team member anymore :-)


Rafal



Revisions:
team.html   1.30 = 1.31
http://www.samba.org/cgi-bin/cvsweb/sambaweb/team.html?r1=1.30r2=1.31



CVS update: samba/source/auth

2003-02-16 Thread abartlet

Date:   Sun Feb 16 22:10:48 2003
Author: abartlet

Update of /data/cvs/samba/source/auth
In directory dp.samba.org:/tmp/cvs-serv6931/auth

Modified Files:
auth_ntlmssp.c auth_sam.c 
Log Message:
Add the 'session key' output of the NTLMSSP exchange to the cli struct, so 
it can be used for 'net rpc join'.  

Also fix a bug in our server-side NTLMSSP code - a client without any domain
trust links to us may calculate the NTLMv2 response with  as the domain.

Andrew Bartlett


Revisions:
auth_ntlmssp.c  1.5 = 1.6

http://www.samba.org/cgi-bin/cvsweb/samba/source/auth/auth_ntlmssp.c?r1=1.5r2=1.6
auth_sam.c  1.50 = 1.51

http://www.samba.org/cgi-bin/cvsweb/samba/source/auth/auth_sam.c?r1=1.50r2=1.51



CVS update: samba/source/utils

2003-02-16 Thread abartlet

Date:   Sun Feb 16 22:10:48 2003
Author: abartlet

Update of /data/cvs/samba/source/utils
In directory dp.samba.org:/tmp/cvs-serv6931/utils

Modified Files:
net_rpc_join.c 
Log Message:
Add the 'session key' output of the NTLMSSP exchange to the cli struct, so 
it can be used for 'net rpc join'.  

Also fix a bug in our server-side NTLMSSP code - a client without any domain
trust links to us may calculate the NTLMv2 response with  as the domain.

Andrew Bartlett


Revisions:
net_rpc_join.c  1.22 = 1.23

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/net_rpc_join.c?r1=1.22r2=1.23



CVS update: samba/source/include

2003-02-16 Thread abartlet

Date:   Sun Feb 16 22:10:49 2003
Author: abartlet

Update of /data/cvs/samba/source/include
In directory dp.samba.org:/tmp/cvs-serv6931/include

Modified Files:
client.h 
Log Message:
Add the 'session key' output of the NTLMSSP exchange to the cli struct, so 
it can be used for 'net rpc join'.  

Also fix a bug in our server-side NTLMSSP code - a client without any domain
trust links to us may calculate the NTLMv2 response with  as the domain.

Andrew Bartlett


Revisions:
client.h1.57 = 1.58

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/client.h?r1=1.57r2=1.58



CVS update: samba/source/auth

2003-02-16 Thread abartlet

Date:   Sun Feb 16 22:23:33 2003
Author: abartlet

Update of /home/cvs/samba/source/auth
In directory dp.samba.org:/tmp/cvs-serv9094

Modified Files:
  Tag: SAMBA_3_0
auth_sam.c 
Log Message:
Merge from HEAD - allow  as a domain in the NLTMv2 hash calculations.  Fixes
interop with clients not in our domain.

Andrew Bartlett


Revisions:
auth_sam.c  1.36.2.8 = 1.36.2.9

http://www.samba.org/cgi-bin/cvsweb/samba/source/auth/auth_sam.c?r1=1.36.2.8r2=1.36.2.9



CVS update: samba/source

2003-02-16 Thread abartlet

Date:   Mon Feb 17 00:07:38 2003
Author: abartlet

Update of /data/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv18970

Modified Files:
configure.in 
Removed Files:
acconfig.h 
Log Message:
People were being tripped up by the fact that we havn't updated acconfig.h
as we don't need it for autoconf 2.53.  Remove it from CVS, and assert the 
newer autotools in configure.in

Andrew Bartlett



Revisions:
configure.in1.404 = 1.405
http://www.samba.org/cgi-bin/cvsweb/samba/source/configure.in?r1=1.404r2=1.405
acconfig.h  1.102 = NONE
http://www.samba.org/cgi-bin/cvsweb/samba/source/acconfig.h?rev=1.102



CVS update: samba/source

2003-02-16 Thread abartlet

Date:   Mon Feb 17 00:10:37 2003
Author: abartlet

Update of /home/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv19253

Modified Files:
  Tag: SAMBA_3_0
configure.in 
Removed Files:
  Tag: SAMBA_3_0
acconfig.h 
Log Message:
People were being tripped up by the fact that we havn't updated acconfig.h
as we don't need it for autoconf 2.53.  Remove it from CVS, and assert the 
newer autotools in configure.in

Andrew Bartlett



Revisions:
configure.in1.300.2.46 = 1.300.2.47

http://www.samba.org/cgi-bin/cvsweb/samba/source/configure.in?r1=1.300.2.46r2=1.300.2.47
acconfig.h  1.83.2.10 = NONE
http://www.samba.org/cgi-bin/cvsweb/samba/source/acconfig.h?rev=1.83.2.10



CVS update: samba/source/auth

2003-02-16 Thread abartlet

Date:   Mon Feb 17 00:58:47 2003
Author: abartlet

Update of /data/cvs/samba/source/auth
In directory dp.samba.org:/tmp/cvs-serv23620/auth

Modified Files:
auth_util.c 
Log Message:
If we didn't make the server_info correctly, then don't segfault trying to
set the 'guest' bit.

Andrew Bartlett


Revisions:
auth_util.c 1.62 = 1.63

http://www.samba.org/cgi-bin/cvsweb/samba/source/auth/auth_util.c?r1=1.62r2=1.63



CVS update: samba/source/rpc_client

2003-02-16 Thread tpot

Date:   Mon Feb 17 04:35:32 2003
Author: tpot

Update of /data/cvs/samba/source/rpc_client
In directory dp.samba.org:/tmp/cvs-serv12329/rpc_client

Modified Files:
cli_srvsvc.c 
Log Message:
Return a WERROR instead of a NTSTATUS like the rest of the srvsvc
rpc calls.


Revisions:
cli_srvsvc.c1.27 = 1.28

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_client/cli_srvsvc.c?r1=1.27r2=1.28



CVS update: samba/source

2003-02-16 Thread tpot

Date:   Mon Feb 17 04:41:08 2003
Author: tpot

Update of /data/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv12987

Modified Files:
Makefile.in 
Log Message:
Add KRBCLIENT_OBJ to PYTHON_OBJ list.


Revisions:
Makefile.in 1.616 = 1.617
http://www.samba.org/cgi-bin/cvsweb/samba/source/Makefile.in?r1=1.616r2=1.617



CVS update: samba/source/python

2003-02-16 Thread tpot

Date:   Mon Feb 17 04:43:09 2003
Author: tpot

Update of /data/cvs/samba/source/python
In directory dp.samba.org:/tmp/cvs-serv13146/python

Modified Files:
setup.py 
Added Files:
py_srvsvc.c py_srvsvc.h 
Log Message:
Added SRVSVC pipe support.  I've started implementing NetServerGetInfo()


Revisions:
py_srvsvc.c NONE = 1.1
http://www.samba.org/cgi-bin/cvsweb/samba/source/python/py_srvsvc.c?rev=1.1
py_srvsvc.h NONE = 1.1
http://www.samba.org/cgi-bin/cvsweb/samba/source/python/py_srvsvc.h?rev=1.1
setup.py1.8 = 1.9
http://www.samba.org/cgi-bin/cvsweb/samba/source/python/setup.py?r1=1.8r2=1.9



CVS update: samba/source/rpcclient

2003-02-16 Thread mbp

Date:   Mon Feb 17 16:42:36 2003
Author: mbp

Update of /data/cvs/samba/source/rpcclient
In directory dp.samba.org:/tmp/cvs-serv18685

Modified Files:
rpcclient.c 
Log Message:
Start reworking rpcclient to use popt rather than next_token to parse
command lines.  This makes the code much simpler and also stops
trivial syntax errors from causing a crash.

Also fix support for semicolon-separated commands in -c, which is
promised by the manual but apparently never working due to an
off-by-one error.


Revisions:
rpcclient.c 1.204 = 1.205

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/rpcclient.c?r1=1.204r2=1.205