Re: [Samba] gpedit.msc as centralized policy for 2k/xp clients
Hi Uli, Is it possible to apply these at logon? through/via logon scripts to centralize admin? I believe the user side is not applied till login anyway? regards, Richard Coates. On Fri, 2003-03-14 at 03:30, Ulrich Kohlhase wrote: We use local (!) GPOs on our Win2k clients with great success: - log on to master workstation as administrator - create a link to the C:\WINNT\system32\GroupPolicy folder on your administrator's desktop - optionally add gpedit.msc to mmc (add snapin ...) - change settings in GPOs to fit your needs or your company's security policy (especially admin templates) - export and import on other workstations or clone master workstation Please bear in mind that LGPOs affect ALL local users and Samba domain users, including the local administrator account. So be careful when changing the LGPOs since the user-specific policy settings are immediately effective! Administrators control can be retained by denying read access on the GroupPolicy folder, logging off and logging on again. This trick probably won't work on WinXP any more, so you will need to find a different solution. Please post your findings, especially if an alternative for WinXP and/or central policy management is at all possible. Good luck, Uli -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How can I login at home and work
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I have a windows 2000 professional portable, with a user account that logs in to a domain at work (this account seems to give me administrator priveleges on the machine, although it is not the adminstrator acccount of the machine). At home I have a small lan with a linux server running samba (set as workgroup browse master) and providing file sharing and access to a colour printer. The server also servers dhcp addresses and provides a gateway out to the internet. There is also a windows 98 machine on the lan which shares its printer. I would like to access these resources from the user account on my portable, but the workgroup does not seem to appear in my network places. (although I do have network access out to the internet). How can I set up to get access to these resources? I tried following the howto on making the samba server a domain controller - and then attempted to join the portable to it (from my user account) but it failed to recognise any username or password (and I tried combination of accounts including root etc). I also tried setting log level to 10 in smb.conf - but it didn't give me any information I could understand. Step by step instructions (to which I can ask questions or give feedback here) would be nice. Thanks - -- Alan Chandler [EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+dFIuuFHxcV2FFoIRAu8BAJ4+0NSmLxycxl8Qkbc/YPB06mQ4PgCfSeB1 GfwoCE+DkRt9zupYW5+M4cc= =GLEb -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Adding users
Hi, I've isntalled samba, and I have problems (I have read the docs, etc...). I can't add samba users. The smbadduser program outputs the following: [EMAIL PROTECTED]:~ smbadduser okovacs:okovacs No such map passwd.byname. Reason: Request arguments bad ERROR: okovacs Not in passwd database SKIPPING... user okovacs is listed in the /etc/passwd. I have a SuSE 7.2 system, however I have installed samba from SuSE 7.3 rpm. What do I do wrong? Leva __ E-Mail: [EMAIL PROTECTED] AIM: ha5ogl ICQ: 48710903 MSN: [EMAIL PROTECTED] Yahoo!: kieg_tk16 Home Page: http://web.interware.hu/leva Public key: http://web.interware.hu/leva/cuccok/public_key /\ \ /ASCII Ribbon Campaign X against HTML email vCards / \ http://arc.pasp.de/ Have Fun, Linux! 73 for all by HA5OGL. This message was generated by Sylpheed. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] How can I login at home and work
You're not going to be able to login to both domains from your portable. Windows 2k or XP does not support this. Once you put this machine in a domain that is the only domain it can be a part of without removing it from your work domain and adding it to your home domain every time you want to login. And your privileges on the machine probably do not allow you to remove the machine from the domain at work, I know mine does not. But for me I have the same thing I just come home and login to the machine and I can still see my samba box and shares from my portable without doing all that crap. You just have to make sure you set the permissions right on the shares. When you try to access a samba share from your portable it should simply ask you for username and password if you enter the correct credentials you should be in very simple. -Original Message- From: Alan Chandler [mailto:[EMAIL PROTECTED] Sent: Sunday, March 16, 2003 5:30 AM To: [EMAIL PROTECTED] Subject: [Samba] How can I login at home and work -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I have a windows 2000 professional portable, with a user account that logs in to a domain at work (this account seems to give me administrator priveleges on the machine, although it is not the adminstrator acccount of the machine). At home I have a small lan with a linux server running samba (set as workgroup browse master) and providing file sharing and access to a colour printer. The server also servers dhcp addresses and provides a gateway out to the internet. There is also a windows 98 machine on the lan which shares its printer. I would like to access these resources from the user account on my portable, but the workgroup does not seem to appear in my network places. (although I do have network access out to the internet). How can I set up to get access to these resources? I tried following the howto on making the samba server a domain controller - and then attempted to join the portable to it (from my user account) but it failed to recognise any username or password (and I tried combination of accounts including root etc). I also tried setting log level to 10 in smb.conf - but it didn't give me any information I could understand. Step by step instructions (to which I can ask questions or give feedback here) would be nice. Thanks - -- Alan Chandler [EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+dFIuuFHxcV2FFoIRAu8BAJ4+0NSmLxycxl8Qkbc/YPB06mQ4PgCfSeB1 GfwoCE+DkRt9zupYW5+M4cc= =GLEb -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
SV: [Samba] Adding users
Hello i had the same problem 2 days ago :) and the nice people here tolt me what to do .. smbpasswd -a username(valid unix) and then define the password this shuld do the job :) Ps -axe |grep Ketil 79 ?S 1:09 /usr/sbin/klogd -c 3 -x PWD=/ CONSOLE=/dev/console -x (Ketil Braun Larsen) -Oprindelig meddelelse- Fra: Leva [mailto:[EMAIL PROTECTED] Sendt: 16. marts 2003 13:35 Til: [EMAIL PROTECTED] Emne: [Samba] Adding users Hi, I've isntalled samba, and I have problems (I have read the docs, etc...). I can't add samba users. The smbadduser program outputs the following: [EMAIL PROTECTED]:~ smbadduser okovacs:okovacs No such map passwd.byname. Reason: Request arguments bad ERROR: okovacs Not in passwd database SKIPPING... user okovacs is listed in the /etc/passwd. I have a SuSE 7.2 system, however I have installed samba from SuSE 7.3 rpm. What do I do wrong? Leva __ E-Mail: [EMAIL PROTECTED] AIM: ha5ogl ICQ: 48710903 MSN: [EMAIL PROTECTED] Yahoo!: kieg_tk16 Home Page: http://web.interware.hu/leva Public key: http://web.interware.hu/leva/cuccok/public_key /\ \ /ASCII Ribbon Campaign X against HTML email vCards / \ http://arc.pasp.de/ Have Fun, Linux! 73 for all by HA5OGL. This message was generated by Sylpheed. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] oplocks and w2k
Hi, I resubmit my mail because my server become in production and the client must be correct. I have a PDC server with profiles share enabled. When a w2k client computer logout from domain, the client display a message the system cannot transfert the file xxx to //TOTO/profiles/yvan because this file is used by a other process. When I look on workstation.log I have oplock break. I apply a solution : I disabled the oplocks for the profiles share, but this change not resolve my problem. Description : Samba 2.2.7a with ldapsam and ACL support. The samba 2.2.8 version can resolve my problem ? Can anyone help me ? thank you -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Win 95/98/Me problem.
Hi, As I was unable to find solution anywhere else, I write here: I have a problem sharing win 95/98/Me resources with samba (2.2.7a) as a PDC. Windows can't get userlist from PDC (it seems, that windows times out). Win 2k and XP don't have that problem. Is it just a configuration problem, or is it a general problem with samba?? How can I add a user to share's access list??? Regards, M.W. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] integrating multiple NT4 domains with Samba
On 2.2.8 workgroup = is ignored in include files smb.conf: ... [global] include = /usr/local/samba/lib/smb.conf.global.%m /usr/local/samba/lib/smb.conf.global.machinename: ... netbios name = SAMBA workgroup = SOMEWHERE security = domain password server = somewhere-nt4-pdc ... machinename connects with this result: [2003/03/16 06:09:41, 0] smbd/password.c:(1558) domain_client_validate: could not fetch trust account password for domain WORKGROUP Conclusion: New value for workgroup = should have been SOMEWHERE . workgroup = can no longer (since 2.0) by overridden by include files. It is can be set only once in the main config file. This prevents integration of multiple NT4 domains by single samba server. - Original Message - From: thephly [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, March 15, 2003 2:03 AM Subject: [Samba] integrating multiple NT4 domains with Samba On version 2.0 using security = domain and include = globals.%m I could specify what PDC to use depending on client name. This was a neat arrangement to integrate legacy NT4 domains - I asked the remote admins to add the samba server to their domain, and ran smbpasswd -j various -r various pdc's to end up with multiple machine.sid's in private. All was wonderful, and then I upgraded . . . Now 2.2.7a with single secrets.tdb, samba is again added to the various domains, and can authenticate to any of them individually (their workgroup in smb.conf), but a %m globals match always produces an auth2 error. I think samba's pulling the wrong SID out of secrets.tdb, always using the %m workgroup, but the smb.conf global workgroup SID to authenticate! Does anyone else bring together NT4 domains with samba to avoid trusts? Do you use this method, how does it work for you? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem starting samba :/
Okay i have now installed samba from source (www.samba.org) and have done a ./configure Make Make install But how do I start, I have tried to do a /path/bin/smbd and the same with nmbd ... but nothing seems to work :/ it just dosent start.. what am I not seeing ? :/ Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem starting samba :/
There may be a startup script. The binary likely is in /usr/local/samba/bin. This is all I do in my startup script. #!/bin/bash case $1 in start) killall smbd killall nmbd /usr/local/samba/bin/smbd -D /usr/local/samba/bin/nmbd -D ;; stop) killall smbd killall nmbd ;; reload) kill -SIGHUP `cat /usr/local/samba/var/locks/smbd.pid` kill -SIGHUP `cat /usr/local/samba/var/locks/nmbd.pid` ;; *) echo Usage: echo start stop reload ;; esac exit 0 Joel On Sun, Mar 16, 2003 at 03:29:36PM +0100, Ketil Braun Larsen wrote: Okay i have now installed samba from source (www.samba.org) and have done a ./configure Make Make install But how do I start, I have tried to do a /path/bin/smbd and the same with nmbd ... but nothing seems to work :/ it just dosent start.. what am I not seeing ? :/ Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem starting samba :/
On Sun, 16 Mar 2003 15:29:36 +0100 Ketil Braun Larsen [EMAIL PROTECTED] wrote: Okay i have now installed samba from source (www.samba.org) and have done a ./configure Make Make install But how do I start, I have tried to do a /path/bin/smbd and the same with nmbd ... but nothing seems to work :/ it just dosent start.. what am I not seeing ? :/ Thanks Are you running as root? smbd and nmbd fail silently if you are not root. This is mainly (only) due to the unix convention of only allowing root to bind to ports 1024. mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win 95/98/Me problem.
On Sun, 16 Mar 2003, Marcin Wolcendorf wrote: Hi, As I was unable to find solution anywhere else, I write here: I have a problem sharing win 95/98/Me resources with samba (2.2.7a) as a PDC. Windows can't get userlist from PDC (it seems, that windows times out). Win 2k and XP don't have that problem. Is it just a configuration problem, or is it a general problem with samba?? How can I add a user to share's access list??? For starters, if you want help you will have to tell us what you have done. We do not have a crystal ball. I have three (3) WinMe machines that all use User Level Access Control without problems since 2.2.2. Was running 2.2.7a until a week ago, now 2.2.8. Recommend that you update - 2.2.8 is a security release. So tell us now: Specifically what have you configured in your Win 9x/Me network configuration? Also show us the globals section of your smb.conf file. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] slow connect
Hi People ! I checked my connect via ftp. And problem is the same . I copyed one file 3,6 MB and when ... from windows to linux speed was very good ,but from linux to windows speed was very very slowly These behavior is in case of samba What should I do now ? Greetings to Norman Zhang -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] I feel abandoned
Hello friends, I am Brazilian and I don't know how to write as well as I speak in English. I am using a translator. Good, I find strange this list.. It is the first list in the last 12 years in that I write but NOBODY ANSWERS ME. I try to always order examples than this happening me but NOBODY answers me. I don't believe that the desenvolvedores is not interested in the problems caused by the software, and so a little that my problems are so ONLY since I installed LINUX+SAMBA + WINBIN in 15 places and in the 15it gave problem. The errors are always the same ones. Impossible that nobody has had problems with the autentication and winbind. The MOST INCREDIBLE is that in the google don't appear clear answers although they exist more than 15 cases same to mine. What to do? To who to SCREAM? To have a list for solving SIMPLE problems I don't think the case. Hugs and excuse for the relief, but I feel abandoned. Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.462 / Virus Database: 261 - Release Date: 13/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] slow connect
- Original Message - From: Norman Zhang [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, March 14, 2003 5:08 PM Subject: Re: [Samba] slow connect Did you try putting the w2k's ip in your samba server's host file? Norman Dariusz Blada wrote: Hello ! My problem is : I have very slow transfer if I copy files from server samba to windows 2000. In the opposite direction transfer is very good. Please help Greet All -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba Hi Norman , Hi people ! This case finished very good for me ,because I solved problem . What was wrong! It's only phisical connect (conductor) That wasn't configuraton's problems See ya -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RES: [Samba] I feel abandoned
FROM NT \\firewall.surson runs perfectly WHY??? [EMAIL PROTECTED] init.d]# ./smb status smbd (pid 12183) está rodando... nmbd (pid 1397) está rodando... [EMAIL PROTECTED] init.d]# smbclient //firewall.surson/profile -Ucatena%motpock added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 Domain=[SURSON] OS=[Unix] Server=[Samba 2.2.3a] tree connect failed: NT_STATUS_BAD_NETWORK_NAME [EMAIL PROTECTED] init.d]# smbclient //firewall.surson/profile -UAdministrator%paocomo added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 Domain=[SURSON] OS=[Unix] Server=[Samba 2.2.3a] tree connect failed: NT_STATUS_BAD_NETWORK_NAME [EMAIL PROTECTED] init.d]# Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 -Mensagem original- De: Trey Nolen [mailto:[EMAIL PROTECTED] Enviada em: domingo, 16 de março de 2003 13:54 Para: FRANCO Assunto: Re: [Samba] I feel abandoned Winbind is fairly new. The majority of people are not using it yet. Google doesn't show results because people are not yet having the problems, and are not asking about them. If someone knows how to fix it, they will answer. When noone answers, noone knows. See if you can do your installation without winbind. Trey Nolen - Original Message - From: FRANCO [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: 'Gerald (Jerry) Carter' [EMAIL PROTECTED] Sent: Sunday, March 16, 2003 10:45 AM Subject: [Samba] I feel abandoned Hello friends, I am Brazilian and I don't know how to write as well as I speak in English. I am using a translator. Good, I find strange this list.. It is the first list in the last 12 years in that I write but NOBODY ANSWERS ME. I try to always order examples than this happening me but NOBODY answers me. I don't believe that the desenvolvedores is not interested in the problems caused by the software, and so a little that my problems are so ONLY since I installed LINUX+SAMBA + WINBIN in 15 places and in the 15it gave problem. The errors are always the same ones. Impossible that nobody has had problems with the autentication and winbind. The MOST INCREDIBLE is that in the google don't appear clear answers although they exist more than 15 cases same to mine. What to do? To who to SCREAM? To have a list for solving SIMPLE problems I don't think the case. Hugs and excuse for the relief, but I feel abandoned. Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.462 / Virus Database: 261 - Release Date: 13/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.462 / Virus Database: 261 - Release Date: 13/3/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.462 / Virus Database: 261 - Release Date: 13/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] local user admin rights on samba pdc
Raj, I have noticed that it is causing a problem for some other software also. I know that i need to grant local admin rights for that user but what is the best method on doing this? If I try to access softare by logging in as root on the win2k boxon the pdc domain it still prevents me from installing a palm pilot or running some particular software. All of the software that needs some sort of admin priveledges work fine if you logon as administrator to the local machine. Domain users are common users with limited privileges. This is by design and affects pure Windows domains also. Several non MS software products are written pretty badly and rely on changes to be written to system registry but common users usually do not have permission to alter registry keys. You need to change the registry keys in question in order to get your special software to work properly for local common users and domain users. Get regmon, a nice tool to monitor registry access at http://www.sysinternals.com/ntw2k/source/regmon.shtml and - login as domain user - runas /user:administrator regmon - change regmon's filter to include ACCDENIED - start palm software as usual and watch the ACCDENIED flying by :-) - double click on one of the ACCDENIED entries and change security settings for the registry key This is a tedious and time consuming approach to fix one or the other software package, but at least the only reliable method I know of. You may want to try to add the domain users group to the local power user group - didn't work for us at that time. Things might change when Samba 3.0 is released and group mapping support will be available (?) Good luck, Uli -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] logon script not working
Hi, my logon.bat was working for weeks now (since i created it) - and recently i recompiled my samba with ldap support. now ldap and everything works really well, but: the logon.bat won't get executed! i tried changing the folder, changing the rights of the file, renaming it and everything. but the thing won't execute! samba is not givin any error, nor does my winxp client. when i browse to \\linux\netlogon and double click logon.bat everything gets mapped wonderful. but not automatically. -rwxrwxrwx1 root root 471 Mar 9 15:12 /samba/netlogon/logon.bat smb.conf: domain logons = Yes logon script = logon.bat [netlogon] comment = Domnenanmeldedienst path= /samba/netlogon public = no locking = no writeable = no browseable = no #also tried the following: #[netlogon] #comment = Network Logon Service #path = /samba/netlogon #public = no #writeable = no #browseable = no #[netlogon] #comment = Network Logon Service #path = /samba/netlogon #write list = 101 #create mask = 0640 #hide unreadable = Yes thanks a log woerns -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] logon script not working
Le dim 16/03/2003 à 19:00, Woerns Urstmann a écrit : Hi, my logon.bat was working for weeks now (since i created it) - and recently i recompiled my samba with ldap support. now ldap and everything works really well, but: the logon.bat won't get executed! i tried changing the folder, changing the rights of the file, renaming it and everything. but the thing won't execute! samba is not givin any error, nor does my winxp client. when i browse to \\linux\netlogon and double click logon.bat everything gets mapped wonderful. but not automatically. -rwxrwxrwx1 root root 471 Mar 9 15:12 /samba/netlogon/logon.bat smb.conf: domain logons = Yes logon script = logon.bat [netlogon] comment = Domänenanmeldedienst path= /samba/netlogon public = no locking = no writeable = no browseable = no #also tried the following: #[netlogon] #comment = Network Logon Service #path = /samba/netlogon #public = no #writeable = no #browseable = no #[netlogon] #comment = Network Logon Service #path = /samba/netlogon #write list = @101 #create mask = 0640 #hide unreadable = Yes thanks a log woerns The samba schéma contain a scriptpath field wich contain your command. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: XP logon failure but still logs on -- no roamingprofile
Brian, Did you try a plain and simple logon.bat first, like - @ECHO OFF NET USE X: \\share\tmp /persistent:no - just to make sure your logon.bat isn't faulty ? You could even use a logoff.bat (net use * /delete ...) if you suspect the mapped drives to cause the errors. net use o: \\share\office2000p /persistent:no /yes Wonder what's the /yes switch for, doesn't seem to be documented in the XP net use manual page (?) net time \\share /set /yes At least on Win2k workstations your users need power user privileges to change or set time service settings. As local administrator do the following: - net stop w32time (in case the service is running) - net time /setsntp:192.168.x.x - net start w32time (and/or change service start type) Any errors or warnings in your workstations logs? The XP/Win2k profile issue has been discussed in recent threads, so we added nt acl support = No to stop local caching of roaming profiles in our Win2k only domain: [netlogon] comment = ... path = /usr/local/samba/netlogon root preexec = /usr/local/samba/scripts/genlogon.pl %u %g %m root postexec = /usr/local/samba/scripts/genlogoff.pl %u read only = No browseable = No guest ok = Yes locking = No [profile] comment = ... path = /profile/NT5 read only = No guest ok = No browseable = No # fix for Win2k = SP2: nt acl support = No # fix for XP = SP1: #csc policy = disable #share modes = No Good luck, Uli -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] gpedit.msc as centralized policy for 2k/xp clients
Richard, Is it possible to apply these at logon? through/via logon scripts to centralize admin? I believe the user side is not applied till login anyway? regards, Richard Coates. LGPOs are applied at logon, at least the user-specific part. The machine-specific part comes to effect after rebooting the system. As I understand the GPO stuff usually depends on an AD environment if (more or less time consuming) LGPO tweaking on each and every non AD local machine is not an option. In the document you mentioned http://charon.minilab.bdeb.qc.ca/anonym/nt/2000/ads/TTGW2KGP_Vol1through4.pd f The answer to question 6.2 says the scripting possibilities are limited so logon scripts probably won't work. This GPO stuff is very powerful and interesting in terms of user and machine restrictions but MUCH more complicated compared to the NT4 policy scheme (sigh). I don't have time to investigate any further on this right now, sorry. After applying LGPOs the users profile folders contain the following files: -- ... NTUSER.DAT ... ntuser.dat.LOG ntuser.ini ntuser.pol -- May be it's possible to set up LGPOs on one computer and copy ntuser.pol (GPO settings) and ntuser.ini (profile Exclusion List) to users profile folders on other machines? Just guessing and hoping there's a clean and easy solution ... The following guide provided by MS may be of interest too: http://www.microsoft.com/windows2000/techinfo/planning/management/groupsteps .asp Good luck, Uli On Fri, 2003-03-14 at 03:30, Ulrich Kohlhase wrote: We use local (!) GPOs on our Win2k clients with great success: - log on to master workstation as administrator - create a link to the C:\WINNT\system32\GroupPolicy folder on your administrator's desktop - optionally add gpedit.msc to mmc (add snapin ...) - change settings in GPOs to fit your needs or your company's security policy (especially admin templates) - export and import on other workstations or clone master workstation -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] gpedit.msc as centralized policy for 2k/xp clients
You sound like you are having the same problem we did at our site. The key is to get Win2K SP3, get the POLEDIT.EXE file out of it. Search local hard disks for .ADM files, load these into POLEDIT. This will give you most of GPEDIT's functionality but inside POLEDIT, it may be an idea to convert the .ADMs to standard TEXT, NOT Unicode just for completeness. Hope this helps. K. Hawkes - Original Message - From: Ulrich Kohlhase [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, March 16, 2003 6:49 PM Subject: Re: [Samba] gpedit.msc as centralized policy for 2k/xp clients Richard, Is it possible to apply these at logon? through/via logon scripts to centralize admin? I believe the user side is not applied till login anyway? regards, Richard Coates. LGPOs are applied at logon, at least the user-specific part. The machine-specific part comes to effect after rebooting the system. As I understand the GPO stuff usually depends on an AD environment if (more or less time consuming) LGPO tweaking on each and every non AD local machine is not an option. In the document you mentioned http://charon.minilab.bdeb.qc.ca/anonym/nt/2000/ads/TTGW2KGP_Vol1through4.pd f The answer to question 6.2 says the scripting possibilities are limited so logon scripts probably won't work. This GPO stuff is very powerful and interesting in terms of user and machine restrictions but MUCH more complicated compared to the NT4 policy scheme (sigh). I don't have time to investigate any further on this right now, sorry. After applying LGPOs the users profile folders contain the following files: -- ... NTUSER.DAT ... ntuser.dat.LOG ntuser.ini ntuser.pol -- May be it's possible to set up LGPOs on one computer and copy ntuser.pol (GPO settings) and ntuser.ini (profile Exclusion List) to users profile folders on other machines? Just guessing and hoping there's a clean and easy solution ... The following guide provided by MS may be of interest too: http://www.microsoft.com/windows2000/techinfo/planning/management/groupsteps .asp Good luck, Uli On Fri, 2003-03-14 at 03:30, Ulrich Kohlhase wrote: We use local (!) GPOs on our Win2k clients with great success: - log on to master workstation as administrator - create a link to the C:\WINNT\system32\GroupPolicy folder on your administrator's desktop - optionally add gpedit.msc to mmc (add snapin ...) - change settings in GPOs to fit your needs or your company's security policy (especially admin templates) - export and import on other workstations or clone master workstation -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] local user admin rights on samba pdc
Uli, I will give this a shot and let everyone know. Yeah for most users it is ok but some scientific software especially when they look up license keys are really bad. Thanks, Raj -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Ulrich Kohlhase Sent: Sunday, March 16, 2003 9:34 AM To: [EMAIL PROTECTED] Subject: Re: [Samba] local user admin rights on samba pdc Raj, I have noticed that it is causing a problem for some other software also. I know that i need to grant local admin rights for that user but what is the best method on doing this? If I try to access softare by logging in as root on the win2k boxon the pdc domain it still prevents me from installing a palm pilot or running some particular software. All of the software that needs some sort of admin priveledges work fine if you logon as administrator to the local machine. Domain users are common users with limited privileges. This is by design and affects pure Windows domains also. Several non MS software products are written pretty badly and rely on changes to be written to system registry but common users usually do not have permission to alter registry keys. You need to change the registry keys in question in order to get your special software to work properly for local common users and domain users. Get regmon, a nice tool to monitor registry access at http://www.sysinternals.com/ntw2k/source/regmon.shtml and - login as domain user - runas /user:administrator regmon - change regmon's filter to include ACCDENIED - start palm software as usual and watch the ACCDENIED flying by :-) - double click on one of the ACCDENIED entries and change security settings for the registry key This is a tedious and time consuming approach to fix one or the other software package, but at least the only reliable method I know of. You may want to try to add the domain users group to the local power user group - didn't work for us at that time. Things might change when Samba 3.0 is released and group mapping support will be available (?) Good luck, Uli -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.461 / Virus Database: 260 - Release Date: 3/10/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.461 / Virus Database: 260 - Release Date: 3/10/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Login Script Doesn't
Hi, I've been trying to get the logon script to with in XP. This same logon script works in Win98. I finally discovered that it will work if I change logon drive = to logon drive = z: Now I'm really confused. The Netlogon is path is /home/samba and shared as \\server\netlogon. Z: is mapped as \\server\home\. This means the path to the logon script is Z:\samba\logon.bat Not Z:\logon.bat. Why? And is this correct? XP will not run \\server\netlogon\logon.bat from the command prompt. Samba is 2.2.7a Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Win95 Win98 - NOT WORKING - NT,2000, XP are ok (re posted)
Our setup is peer to peer, rather than a domain setup. So security is set to server Generally though, we are using the same conf. file for this new Samba as the one we had (have) in production (on Samba 2.0.6). So I guess what I need to know is what has changed in regards to printing with Win95, 98 from 2.0.6 to 2.2.7a ? thanks -peter. Peter Carpenter [EMAIL PROTECTED] on 14/03/2003 09:45:28 PM Did you change your security setting in your new Samba e.g. from share to domain? -Original Message- From: [EMAIL PROTECTED] I tried adding the [printers] section to my conf file as John suggested, but this didn't solve the problem. Still able to print from NT, 2000, XP and not from Win95, 98 just recapping - am able to print from all clients with the old version (2.0.6) which we are still using in production With the new Samba (2.2.7a) the file sharing is fine, but printing only works for NT,2000,XP With Win95 Win98 only, the file gets put in the spool directory but doesn't seem to get sent from the spool directory to the printer. (or picked up by the printer - however it works...) Any idea if Win95, 98 printing is treated differently to the newer OS's ? thanks for any thoughts. see below for other details... -peter. Sorry to have to repost this (didn't get any response on the first post), we really need some of the fixes of the new Samba but cannot go ahead without the support for the older machines. Need to prove that Samba is the great product that I believe it is. Hi folks - I am having printing problems with our older machines. Printing is working fine for our Windows NT, 2000 and XP clients. However, with windows 95 98, the print job gets put into the Samba spool directory (path = /var/spool/lp/tmp/samba) but doesn't make it to the printer. The print files stay there in the directory - don't get removed. Samba version is 2.2.7a, on Solaris 8 Printers are HP printers - e.g. HP 8100dn All clients including 95/98 were happily printing on a very much older version of Samba (2.0.6) printing directly from Unix to the printer is working ok Has anyone experienced this problem or have any advice on how to get my older boxes printing with the latest Samba? any thoughts welcome - no really - anything - please :-) -peter. (p.s. Just for a wild stab in the dark I tried setting the disable spoolss = yes but this stopped all printing from making it to the computer - even from the clients that were originally working.) relevant bits of conf. file included below... note that I don't have print command explicitly stated, but testparm indicates that it is configured properly... [global] printing = sysv lprm command = /usr/bin/cancel %p-%j lppause command = lp -i %p-%j -H hold lpresume command = lp -i %p-%j -H resume load printers = no [hp8100DN1] printer = hp8100dn_1 comment = HP LaserJet hp8100 DN path = /var/spool/lp/tmp/samba guest account = nobody guest ok = yes browseable = yes printable = yes writable = yes Opinions contained in this e-mail do not necessarily reflect the opinions of the Queensland Department of Main Roads, Queensland Transport or National Transport Secretariat, or endorsed organisations utilising the same infrastructure. If you have received this electronic mail message in error, please immediately notify the sender and delete the message from your computer. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba problems
Tried your suggestions but same problems on LRP. Trying the 2.2.8 smbpasswd on my SuSE box worked fine. Go figure. On Sun, 16 Mar 2003, Spiro Philopoulos wrote: Thanks for responding. I've appended my smb.conf and smbpasswd files. Ok. So are smb1 ... smbn all in your /etc/passwd file? Why do all have the same uid? The nobody uid. Do NOT do this. You need to have separate uids for each entry in smbpasswd. You should add your Unix users by: useradd 'username' passwd 'username' then to smbpasswd by: smbpasswd -a 'username' Do NOT put a guest account in smbpasswd. Samba should use the 'nobody' account from /etc/passwd for all connections to the IPC$ share. - John T. On Sat, 15 Mar 2003, Spiro Philopoulos wrote: I'm trying the latest versions of Samba on a LRP box (kernel 2.2.19), namely versions 2.2.7a and 2.2.8, but whenever I try to access a share it fails and the smbd log has the following error message: build_sam_account: smbpasswd database is corrupt! username smb1 not in unix passwd database! Email me your smb.conf and smbpasswd file please to [EMAIL PROTECTED] - NOT to this list. I have the user accounts defined in the smbpasswd file and in /etc/passwd. When using an older version (2.0.4b) I have no problems at all. Also, when trying to change a Samba password using smbpasswd I get a similar error message: build_sam_account: smbpasswd database is corrupt! username smb1 not in unix passwd database! Failed to find entry for user smb1. Failed to modify password entry for user smb1 I configured it during the build to use the traditional smbpasswd file. Does anybody know what this is?. Another issue is that nmbd won't start up if I have interfaces = all If you want all interfaces (even if it is just one) comment out this line. ie: Comment out interfaces = specified in the global section of smb.conf, which again wasn't a problem with the older version. Thanks in advance for any help. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- John H Terpstra Email: [EMAIL PROTECTED] -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Single shared directory, with a universal password
Hello, I am using Samba Version 2.2.3a-12 for Debian on a Debian 3.0 system. I have looked at lots of Samba documentation and have not been able to find anything explaining what I need. I want to create a single directory on my Samba server that is ok for any user (e.g. 'guest ok = yes'), but is password protected. Meaning, I want a share that any user can access as long as they have the password to that specific directory. I haven't seen how to do this anywhere, so any assistance that you could offer would be most appreciative. Thanks a lot! -indy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: A few swat comments. was:Re: [Samba] Does the SWAT tool comewith the Red Hat 8.0 distribution?
On Tue, 2003-03-11 at 19:56, John H Terpstra wrote: On Tue, 11 Mar 2003, mark wrote: On Tue, 11 Mar 2003 07:06:41 + (GMT) John H Terpstra [EMAIL PROTECTED] wrote: I like this suggestion. Could you specify your dream wishes more clearly please. ie: I run SWAT and write the back-up file. Now I run it again and overwrite the backup file again? Where is the gain then? Do I only back it up if it does not exist? Then what about subsequent changes I make? Should it back it up to a file with time and date extensions? If so, homw many backups should I keep? Your suggestion perplexees me. I want some consensus on this before I change anything here. Consensus? Dude! You are a powerful overlord with cvs access! You don't need no stinking consensus! The biggest challenge of all is to have power and then use it only sparingly! :-) But that spoils all the fun! You are right about the difficulty of figuring out how many times to back up a smb.conf file. In the few minutes I've though about it, I came up with the idea of having swat itself write a few extra bytes at the top of the file along the lines of #Swat generated. or #0xaed9883344c2a2. Something to indicate that this file should not be backed up. Really what I would like is if I have a smb.conf file that I've hand edited I would like for smb.conf to back that file up. So if a smb.conf file didn't have the above mentioned few bytes it would be backed up. If you provide patches I'll do my best to integrate them. :) Other than that, I'll take your comments on advice and will do something next time I make a change. Anyone else have any suggestions or wishes here? Well, putting an MD5 sum at the top (or bottom) of the file would not be that hard - and could be quite useful... Maybe just a warning along the lines of about to overwrite your smb.conf, would you like to save your original? Ok. I'll implement that one. Or what about just calling RCS on the file? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Single shared directory, with a universal password
Create a user on your Samba Box, create a share that is accessible to that user, then use the username parameter so that whatever user the Windows client sends, Samba will check the password against the user you created. Mar 16 8:04pm They hang the man and flog the woman That steal the goose from off the common, But let the greater villain loose That steals the common from the goose. --English folk poem, circa 1764 On Mon, 17 Mar 2003 [EMAIL PROTECTED] wrote: Hello, I am using Samba Version 2.2.3a-12 for Debian on a Debian 3.0 system. I have looked at lots of Samba documentation and have not been able to find anything explaining what I need. I want to create a single directory on my Samba server that is ok for any user (e.g. 'guest ok = yes'), but is password protected. Meaning, I want a share that any user can access as long as they have the password to that specific directory. I haven't seen how to do this anywhere, so any assistance that you could offer would be most appreciative. Thanks a lot! -indy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Single shared directory, with a universal password
On Mon, 2003-03-17 at 11:37, [EMAIL PROTECTED] wrote: Hello, I am using Samba Version 2.2.3a-12 for Debian on a Debian 3.0 system. I have looked at lots of Samba documentation and have not been able to find anything explaining what I need. I want to create a single directory on my Samba server that is ok for any user (e.g. 'guest ok = yes'), but is password protected. Meaning, I want a share that any user can access as long as they have the password to that specific directory. I haven't seen how to do this anywhere, so any assistance that you could offer would be most appreciative. Thanks a lot! Set 'security=share' on the server, and create an account in smbpasswd for a new user 'share_user' (or whatever you like to call it). Then put 'user = share_user' and 'valid users = share_user' in the declaration for that share. This gets you pretty close to the 'share level' password on Win9X. Not quite (because we map to unix users) but pretty close. Note that setting 'security=share' will affect other shares on the server, so you might want to look into a %L include to host this on a separate virtual hostname. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba need a Domain to function as fileserver ?
Hi Friends We are using Samba 2.2.5 on Redhat Linux 7.1. At present we have one OS/2 Domain controller and it is going to decommision. My question is that,this Samba fileserver will work with out Domain controller. for that what I need to do in smb.conf file Please help me Thanks and Regards Satyanarayana. Vaka Strategic Outsourcing IBM Global Services Notes ID : [EMAIL PROTECTED] , Voice : Office : (65) 6840 2635 Mobile : (65) 9271 0347 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Seperate servers for home directory space and logins
I'm trying to run the PDC for my domain on a seperate server from the home directory space. Also, I want each user to be able to FTP in with their domain username and password and access files in their home directory and only -their- home directory. It seems that I would need a seperate linux account for every user on the home directory server in order to fulfill my FTP requirement. Then the problem of syncing passwords between two linux servers appears. I'd like to avoid this if at all possible. I can't seem to find any documentation on implementing a system like this. I thought of mounting the home directories on the PDC server, but then I think both the PDC and home directory server's system resources would be used when a user accesses a file. I know I need security = user on the PDC server, and I think I need security = server on the home directory server. I've looked in to Kerberos, and unfortunatly it is not an option at the moment. Any help anyone can provide would be greatly appreciated, -Bryan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Seperate servers for home directory space and logins
On Mon, 2003-03-17 at 16:30, Bryan Helmkamp wrote: I'm trying to run the PDC for my domain on a seperate server from the home directory space. Also, I want each user to be able to FTP in with their domain username and password and access files in their home directory and only -their- home directory. It seems that I would need a seperate linux account for every user on the home directory server in order to fulfill my FTP requirement. Then the problem of syncing passwords between two linux servers appears. I'd like to avoid this if at all possible. I can't seem to find any documentation on implementing a system like this. I thought of mounting the home directories on the PDC server, but then I think both the PDC and home directory server's system resources would be used when a user accesses a file. I know I need security = user on the PDC server, and I think I need security = server on the home directory server. I've looked in to Kerberos, and unfortunatly it is not an option at the moment. You want 'security=domain' on your fileserver. If you run and configure winbind you can use 'pam_winbindd' on the domain member you can have all the authentication (both Samba and FTP) redirected to the PDC. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Outlook .pst files on Samba PDC
in a view issues, there's broken security rights on the client the reason... Alex schrieb: Occasional problems arise where the .pst file just will not copy from the users profile on the server. Doesn't seem to be related to the file size. Has anyone had issues with outlook and Samba PDC - (win2k clients). Solutions that have worked have ranged from complete loss of the .pst file to restarting users profile from scratch. thanks Alex Genna -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Profiles problem
On Sat, 2003-03-15 at 19:50, Raj Saxena wrote: Hi Grigory, I just implemented my server about 3 months ago and i tend to find some weird things here and there. Try to shut these machines down for 15-30 mins. Then turn them back on and see if you get this error. The reasoning for this is if you remember in nt4 the elections tend to happen every 15 min from nt4 servers to see who is browse master. I know it's a long shot and it may not be the right solution but give it a try. No master browser is exactly samba's servers and with it is all Ok. Problems IMHO in samba's profiles working... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: FW: encrypt passwords = no, security=user, samba 3.0a22
Here you go. Enjoy :) N. -- Nir Soffer -=- Exanet Inc. -=- http://www.evilpuppy.org Father, why are all the children weeping? / They are merely crying son O, are they merely crying, father? / Yes, true weeping is yet to come -- Nick Cave and the Bad Seeds, The Weeping Song -Original Message- From: Richard Sharpe [mailto:[EMAIL PROTECTED] Sent: Saturday, March 15, 2003 2:30 AM To: Nir Soffer Cc: Christopher R. Hertel; [EMAIL PROTECTED] Subject: RE: FW: encrypt passwords = no, security=user, samba 3.0a22 On Tue, 11 Mar 2003, Nir Soffer wrote: FWIW turning off unicode with unicode=no helps somewhat, and both ethereal and Samba parse the session request correctly: Hmmm, I fixed a problem in Ethereal around Unicode handling last week at Connectathon. I would be very interested in a trace that shows the problem. Regards - Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com badpass.cap Description: badpass.cap aftersp.cap Description: aftersp.cap nounicode.cap Description: nounicode.cap
Samba 2.2.8 acl compatibility documentation error
Hello I think there is a small error in the 'acl compatibility' documentation. In the first sentence in the smb.conf.5.html web page it currently says: New in Samba 2.2.8 and above, this string parameter tells smbd if it should modify any Windows access control lists created from POSIX access control lists to remove features which are not supported by Windows 2000 but not supported by ^^^ ^^^ the Windows NT ACL edit. control. ^ I think it should say: New in Samba 2.2.8 and above, this string parameter tells smbd if it should modify any Windows access control lists created from POSIX access control lists to remove features which are supported by Windows 2000 but not supported by the Windows NT ACL edit control. But I may be wrong - perhaps the 'but' should be an 'or'. Regards Nick
Samba 2.2.8 large file bug in smbwrapper and permissions bug?
Hello Compiling 2.2.8 and smbwrapper on Solaris 9, I saw the following warnings: Compiling smbwrapper/smbw.c with -KPIC smbwrapper/smbw.c, line 1258: warning: argument #4 is incompatible with prototype: prototype: pointer to ullong : include/proto.h, line 303 argument : pointer to uint Compiling smbwrapper/smbw_stat.c with -KPIC smbwrapper/smbw_stat.c, line 149: warning: argument #4 is incompatible with prototype: prototype: pointer to ullong : include/proto.h, line 303 argument : pointer to uint (Also several less worrying int/uint warnings). These warnings worried me so I tested smbsh listing a large file created using mkfile in a directory which is shared by Samba: $ /usr/sbin/mkfile 5g 5gig $ ls -l 5gig -rw--- 1 nick staff5368709120 Mar 16 11:47 5gig $ smbsh Username: Password: $ cd /smb/ $ ls -l 5gig -rw-r--r-- 1 nick staff1073741824 Mar 16 11:47 5gig *** I also just noticed the differences in permissions - that is more worrying than the large file problem. *** BTW I notice that smbwrapper is not built on the Solaris systems in the bulid farm. Can it be added? Regards Nick
Question - Latest security alery of samba
Hi all, Just wanted to know if the latest security alert is all about quotas.c. An upgrade (for me) is a bit problematic at the moment. If I patch this specific source code myself and recompile smbd - is it (basically) enough ? Thanks, Nir
RE: rd /s, can't find the file specified (internal reference b1996)
Following up to myself, reproducing this is apparently even simpler than I thought - simply do a: touch nir test test and try to delete it from a DOS command line. It will fail. nirtest123456 fails as well, but nirtest12345 so it seems to filename size related. 13 characters won't work and 12 will. Perhaps it's because something is geared towards 8 characters, a dot, and 3 characters somewhere along the line? Needless to say, it works fine on w2k shares... Nir. -- Nir Soffer -=- Exanet Inc. -=- http://www.evilpuppy.org Father, why are all the children weeping? / They are merely crying son O, are they merely crying, father? / Yes, true weeping is yet to come -- Nick Cave and the Bad Seeds, The Weeping Song -Original Message- From: Nir Soffer Sent: Sunday, March 16, 2003 1:58 PM To: [EMAIL PROTECTED] Subject: rd /s, can't find the file specified (internal reference b1996) Hi! Our QA department stumbled across the following problem: From the W2K commandline rd /s on a large directory reports: The system cannot find the file specified. on a rather large amount of files. I've yet to figure out what the connection between them is, but I'm starting to believe they're files with spaces. I've encountered this problem on Samba v3.0a20, v3.0a22, and latest Samba 3 CVS. I did not encounter this problem on all that variants of Samba v2.2 I've tried (Specifically v2.2.1a, and some more I don't really remember now). I didn't even encounter it on v2.0.7. To reproduce, simply do a: net use * \\server\share D: (or whatever drive you got) mkdir bug cd bug xcopy /e C:\winnt cd .. rd /s bug Apparently del *.* is having problems with these files as well, and regular del Soap Bubbles.bmp also returned with the same error. In case I wasn't clear, this happens only via the command line, and NOT via the Windows Explorer. Deleting from there works just fine. Attached is an l10 log of me trying to delete a file... Anyone have any ideas, or anything he wants me to try? For reference, the internal bug number of this at Exanet is Bug 1996. Thanks, Nir. -- Nir Soffer -=- Exanet Inc. -=- http://www.evilpuppy.org Father, why are all the children weeping? / They are merely crying son O, are they merely crying, father? / Yes, true weeping is yet to come -- Nick Cave and the Bad Seeds, The Weeping Song
Re: Question - Latest security alery of samba
On Sun, Mar 16, 2003 at 04:27:04PM +0200, Nir Livni wrote: Hi all, Just wanted to know if the latest security alert is all about quotas.c. An upgrade (for me) is a bit problematic at the moment. If I patch this specific source code myself and recompile smbd - is it (basically) enough ? No, it is not all about quotas.c. Please read carefully announcement. You will also find there some suggestions how to make break harder in mean time, when you are working on upgrade. The upgrade is really required. -- / Alexander Bokovoy Samba Team http://www.samba.org/ ALT Linux Team http://www.altlinux.org/ Midgard Project Ry http://www.midgard-project.org/
Showstopper! Samba 2.2.8 can't read TDB files from previous versions.
It seems that Samba 2.2.8 is unable to open TDB files written by older versions. Instead it just overwrites them with a fresh file. This caused our domain-server to loose the domain SID leaving all our NT clients out in the cold. We use a domain SID extracted from the previous PDC, an old WinNT 4.0 server that was scrapped. Our print server also lost it's registry of printerdrivers and settings. To verify this yourself, try the tdbtool utility. The 2.2.8 version can't open old TDB files. The other way round works though, tdbtool from 2.2.7a can open new TDB files written by 2.2.8. To salvage the domain SID I copied smbpasswd.c from 2.2.8 into a 2.2.7a source tree and compiled it, then I could use the new -X and -W options to extract the SID from the old secrets.tdb and write it into a fresh TDB from 2.2.8. I'm still working on the printersettings... Anyway, if anyone can replicate this I'd suggest that 2.2.8 should be retracted or atleast a big fat warning should be posted that you may loose your domain SID effectively killing your domain-controller. Regards, Fredrik -- Only two things are infinite, the universe and human stupidity; and I'm not sure about the former. - Albert Einstein Fredrik Öhrn Chalmers University of Technology [EMAIL PROTECTED] Sweden
RE: Question - Latest security alery of samba
I've read the announcement carefully. The announcement does not point a specific threat in the samba code. It mentions that This version of Samba adds explicit overrun and overflow checks on fragment re-assembly of SMB/CIFS packets to ensure that only valid re-assembly is performed by smbd. It also mentions that samba is highly vulnerable to attacks from an external network, And that 1. host based protection 2. interface protection 3. Using a firewall 4. Using a IPC$ share deny May reduce vulnerability to such attacks. There is no access to my samba servers from the internet, but I would like to know more about this security issue - specially, which source codes are involved. (SMB client code is currently no issue for me) Any list of affected source files would be appreciated. Thanks, Nir -Original Message- From: Alexander Bokovoy [mailto:[EMAIL PROTECTED] Sent: Sunday, March 16, 2003 4:31 PM To: Nir Livni; [EMAIL PROTECTED] Subject: Re: Question - Latest security alery of samba On Sun, Mar 16, 2003 at 04:27:04PM +0200, Nir Livni wrote: Hi all, Just wanted to know if the latest security alert is all about quotas.c. An upgrade (for me) is a bit problematic at the moment. If I patch this specific source code myself and recompile smbd - is it (basically) enough ? No, it is not all about quotas.c. Please read carefully announcement. You will also find there some suggestions how to make break harder in mean time, when you are working on upgrade. The upgrade is really required. -- / Alexander Bokovoy Samba Team http://www.samba.org/ ALT Linux Team http://www.altlinux.org/ Midgard Project Ry http://www.midgard-project.org/
Re: Showstopper! Samba 2.2.8 can't read TDB files from previousversions.
Fredrik Ohrn wrote: It seems that Samba 2.2.8 is unable to open TDB files written by older versions. Instead it just overwrites them with a fresh file. This caused our domain-server to loose the domain SID leaving all our NT clients out in the cold. We use a domain SID extracted from the previous PDC, an old WinNT 4.0 server that was scrapped. Our print server also lost it's registry of printerdrivers and settings. To verify this yourself, try the tdbtool utility. The 2.2.8 version can't open old TDB files. The other way round works though, tdbtool from 2.2.7a can open new TDB files written by 2.2.8. To salvage the domain SID I copied smbpasswd.c from 2.2.8 into a 2.2.7a source tree and compiled it, then I could use the new -X and -W options to extract the SID from the old secrets.tdb and write it into a fresh TDB from 2.2.8. I'm still working on the printersettings... Anyway, if anyone can replicate this I'd suggest that 2.2.8 should be retracted or atleast a big fat warning should be posted that you may loose your domain SID effectively killing your domain-controller. Hmm, at least secrets.tdb and winbind_idmap.tdb survived the upgrade well on four machines here, previous versions 2.2.7a and 2.2.6. All of them running as domain members, however, none being DC... Cheers! Michael
Re: Showstopper! Samba 2.2.8 can't read TDB files from previousversions.
On Sun, 16 Mar 2003, Fredrik Ohrn wrote: To salvage the domain SID I copied smbpasswd.c from 2.2.8 into a 2.2.7a source tree and compiled it, then I could use the new -X and -W options to extract the SID from the old secrets.tdb and write it into a fresh TDB from 2.2.8. I am glad to be of help :-) Regards - Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com
RE: Question - Latest security alery of samba
On Sun, 16 Mar 2003, Nir Livni wrote: I've read the announcement carefully. The announcement does not point a specific threat in the samba code. It mentions that This version of Samba adds explicit overrun and overflow checks on fragment re-assembly of SMB/CIFS packets to ensure that only valid re-assembly is performed by smbd. It also mentions that samba is highly vulnerable to attacks from an external network, And that 1. host based protection 2. interface protection 3. Using a firewall 4. Using a IPC$ share deny May reduce vulnerability to such attacks. There is no access to my samba servers from the internet, but I would like to know more about this security issue - specially, which source codes are involved. (SMB client code is currently no issue for me) Any list of affected source files would be appreciated. How can we be sure that you are not a script-kiddie? Regards - Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com
RE: Question - Latest security alery of samba
:-) I guess my only proof could be Jeremy. Jeremy knows me a bit. I gave him a little help with one of the latest fixes in 2.2.8 (delete on close). Appreciate your help, Nir Livni -Original Message- From: Richard Sharpe [mailto:[EMAIL PROTECTED] Sent: Sunday, March 16, 2003 8:06 PM To: Nir Livni Cc: [EMAIL PROTECTED] Subject: RE: Question - Latest security alery of samba On Sun, 16 Mar 2003, Nir Livni wrote: I've read the announcement carefully. The announcement does not point a specific threat in the samba code. It mentions that This version of Samba adds explicit overrun and overflow checks on fragment re-assembly of SMB/CIFS packets to ensure that only valid re-assembly is performed by smbd. It also mentions that samba is highly vulnerable to attacks from an external network, And that 1. host based protection 2. interface protection 3. Using a firewall 4. Using a IPC$ share deny May reduce vulnerability to such attacks. There is no access to my samba servers from the internet, but I would like to know more about this security issue - specially, which source codes are involved. (SMB client code is currently no issue for me) Any list of affected source files would be appreciated. How can we be sure that you are not a script-kiddie? Regards - Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com
Re: Showstopper! Samba 2.2.8 can't read TDB files from previousversions.
Le dim 16/03/2003 à 19:01, Richard Sharpe a écrit : On Sun, 16 Mar 2003, Fredrik Ohrn wrote: To salvage the domain SID I copied smbpasswd.c from 2.2.8 into a 2.2.7a source tree and compiled it, then I could use the new -X and -W options to extract the SID from the old secrets.tdb and write it into a fresh TDB from 2.2.8. I am glad to be of help :-) Regards - Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com Ok, can anyone are sure that the upgrade read old tbd file. I use samba 2.2.7a and OpenLdap, I am not connected to the internet, but the point 51 are very interesting for my problem (submited in samba-list). My server will become in production. I don't would like lose my SID and workstation SID. can I have a answer today ? thanks Stéphane Purnelle
Re: Showstopper! Samba 2.2.8 can't read TDB files from previousversions.
Fredrik Ohrn wrote: It seems that Samba 2.2.8 is unable to open TDB files written by older versions. Instead it just overwrites them with a fresh file. This caused our domain-server to loose the domain SID leaving all our NT clients out in the cold. We use a domain SID extracted from the previous PDC, an old WinNT 4.0 server that was scrapped. Our print server also lost it's registry of printerdrivers and settings. I have not seen any problem on the two Samba PDC's I upgraded (although my test system went from 2.2.7a to 2.2.8 via 2.2.8pre2). I seem to be able to logon as a domain user and access network drives OK. Roaming profiles seem to copy OK. I can use rpcclient to enumerate drivers OK, but I have not really been using Samba for printing because of the printer settings problem on Solaris (hopefully fixed now). I only have Windows 2000 clients. It is probably worth posting more information about your setup. Regards Nick
Re: Question - Latest security alery of samba
On Sun, Mar 16, 2003 at 05:54:17PM +0200, Nir Livni wrote: Any list of affected source files would be appreciated. I have replied to Nir privately off-list. Jeremy.
Re: Showstopper! Samba 2.2.8 can't read TDB files from previousversions.
On Sun, 16 Mar 2003, Nicholas Brealey wrote: Fredrik Ohrn wrote: It seems that Samba 2.2.8 is unable to open TDB files written by older versions. Instead it just overwrites them with a fresh file. This caused our domain-server to loose the domain SID leaving all our NT clients out in the cold. We use a domain SID extracted from the previous PDC, an old WinNT 4.0 server that was scrapped. Our print server also lost it's registry of printerdrivers and settings. I have not seen any problem on the two Samba PDC's I upgraded (although my test system went from 2.2.7a to 2.2.8 via 2.2.8pre2). I seem to be able to logon as a domain user and access network drives OK. Roaming profiles seem to copy OK. I can use rpcclient to enumerate drivers OK, but I have not really been using Samba for printing because of the printer settings problem on Solaris (hopefully fixed now). I only have Windows 2000 clients. It is probably worth posting more information about your setup. Regards Nick We upgraded from 2.2.7a to 2.2.8. Server OS is RedHat 8.0. The sectrets.tdb file was created a log time ago with an older version and some hacking around with tdbtool to insert the SID. After more than a cursory look the print-server did infact keep it's settings. It has lost information about some but not all of the printers but we have had that problem before so it's not related to the upgrade. I can post the old sectrets.tdb file that gets instantly replaced by samba 2.2.8 in case that is of any help. Regards, Fredrik -- Only two things are infinite, the universe and human stupidity; and I'm not sure about the former. - Albert Einstein Fredrik Öhrn Chalmers University of Technology [EMAIL PROTECTED] Sweden
Re: Passwd sync on ldapsam
On Sun, 2003-03-16 at 06:27, Kri¨tof Petr wrote: Hi, I configured samba 2.2.7a with --ldapsam. Works fine. Pasword changes are updated on ldap server on lmPassword and ntPassword atributes. Good. But I want to synchronize unix password too. You need to either tell pam_ldap your Manger DN and password (keep that file secure!) or use the feature 'ldap passwd sync' in Samba 3.0. Samba did not update userPassword or never call /bin/passwd or pam to change it. This behavior doesnt depend on setting unix password sync = yes or pam password change = yes smbpasswd does: - bind ldap seerver search (uid=joe)(objectClass=sambaAccount) - bind ldap server search (objectClass=posixAccount)(uid=joe) - bind ldap server modify DN: uid=joe,dc=People,dc=company,dc=com attribute ntPassword attribute lmPassword - bind ldap server search (uid=joe)(objectClass=sambaAccount) search (objectClass=posixAccount)(uid=joe) I think correct behavior is modify userPassword too. The attribute might not be present - we might not even have a matching posixAccount. In Samba 2.2 we don't have the codepaths to get the plaintext password to the parts doing the LDAP modifications easily. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
Re: [PATCH] Joining domains specifying auth realm
On Sat, 2003-03-15 at 03:01, Ken Cross wrote: Let's try this again. The previous patch I submitted didn't work in some configurations. (ads-auth.realm needs to be preserved over the ads_connect call.) If it's not preserved, won't it be free()ed in the process? And shouldn't change the code that's clobbering it instead? I applied the previous patch - can you get me the changes against current HEAD? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
RE: rd /s, can't find the file specified (internal reference b1996)
On Sun, 16 Mar 2003, Nir Soffer wrote: Following up to myself, reproducing this is apparently even simpler than I thought - simply do a: touch nir test test and try to delete it from a DOS command line. It will fail. nirtest123456 fails as well, but nirtest12345 so it seems to filename size related. 13 characters won't work and 12 will. Perhaps it's because something is geared towards 8 characters, a dot, and 3 characters somewhere along the line? Needless to say, it works fine on w2k shares... Can you get us a sniff? Regards - Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com
CVS update: samba/source/smbd
Date: Sun Mar 16 13:15:29 2003 Author: abartlet Update of /data/cvs/samba/source/smbd In directory dp.samba.org:/tmp/cvs-serv4216/smbd Modified Files: statcache.c Log Message: New statcache internals - this time it's actually possible to follow what's going on. In particular, add doxygen documentation. Andrew Bartlett Revisions: statcache.c 1.16 = 1.17 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/statcache.c?r1=1.16r2=1.17
CVS update: samba/source/smbd
Date: Sun Mar 16 13:16:42 2003 Author: abartlet Update of /data/cvs/samba/source/smbd In directory dp.samba.org:/tmp/cvs-serv4573/smbd Modified Files: sesssetup.c Log Message: Try to avoid dereferencing a null pointer. Andrew Bartlett Revisions: sesssetup.c 1.94 = 1.95 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/sesssetup.c?r1=1.94r2=1.95
CVS update: samba/source/smbd
Date: Sun Mar 16 13:21:12 2003 Author: abartlet Update of /data/cvs/samba/source/smbd In directory dp.samba.org:/tmp/cvs-serv4739/smbd Modified Files: trans2.c mangle.c mangle_hash2.c mangle_map.c chgpasswd.c Log Message: - Make ReadDirName return a const char*. - Consequential changes from that - mark our fstring/pstring assumptions in function prototypes Andrew Bartlett Revisions: trans2.c1.244 = 1.245 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/trans2.c?r1=1.244r2=1.245 mangle.c1.74 = 1.75 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/mangle.c?r1=1.74r2=1.75 mangle_hash2.c 1.19 = 1.20 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/mangle_hash2.c?r1=1.19r2=1.20 mangle_map.c1.3 = 1.4 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/mangle_map.c?r1=1.3r2=1.4 chgpasswd.c 1.100 = 1.101 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/chgpasswd.c?r1=1.100r2=1.101
CVS update: samba/source/client
Date: Sun Mar 16 13:21:13 2003 Author: abartlet Update of /data/cvs/samba/source/client In directory dp.samba.org:/tmp/cvs-serv4739/client Modified Files: client.c Log Message: - Make ReadDirName return a const char*. - Consequential changes from that - mark our fstring/pstring assumptions in function prototypes Andrew Bartlett Revisions: client.c1.237 = 1.238 http://www.samba.org/cgi-bin/cvsweb/samba/source/client/client.c?r1=1.237r2=1.238
CVS update: samba/source/lib
Date: Sun Mar 16 13:21:12 2003 Author: abartlet Update of /data/cvs/samba/source/lib In directory dp.samba.org:/tmp/cvs-serv4739/lib Modified Files: util.c Log Message: - Make ReadDirName return a const char*. - Consequential changes from that - mark our fstring/pstring assumptions in function prototypes Andrew Bartlett Revisions: util.c 1.394 = 1.395 http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/util.c?r1=1.394r2=1.395
CVS update: samba/source/smbd
Date: Sun Mar 16 13:23:12 2003 Author: abartlet Update of /data/cvs/samba/source/smbd In directory dp.samba.org:/tmp/cvs-serv5320/smbd Modified Files: dir.c Log Message: Add const. Revisions: dir.c 1.82 = 1.83 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/dir.c?r1=1.82r2=1.83
CVS update: samba/source/smbd
Date: Sun Mar 16 13:24:36 2003 Author: abartlet Update of /data/cvs/samba/source/smbd In directory dp.samba.org:/tmp/cvs-serv5356/smbd Modified Files: reply.c service.c Log Message: Make sure we mark the assumption of a fstring parameter for 'devicetype' in the function prototype, and change callers to respect this. Andrew Bartlett Revisions: reply.c 1.418 = 1.419 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/reply.c?r1=1.418r2=1.419 service.c 1.114 = 1.115 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/service.c?r1=1.114r2=1.115
CVS update: samba/source/rpc_server
Date: Sun Mar 16 13:24:36 2003 Author: abartlet Update of /data/cvs/samba/source/rpc_server In directory dp.samba.org:/tmp/cvs-serv5356/rpc_server Modified Files: srv_srvsvc_nt.c Log Message: Make sure we mark the assumption of a fstring parameter for 'devicetype' in the function prototype, and change callers to respect this. Andrew Bartlett Revisions: srv_srvsvc_nt.c 1.87 = 1.88 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_srvsvc_nt.c?r1=1.87r2=1.88
CVS update: sambaweb
Date: Sun Mar 16 18:47:00 2003 Author: sfrench Update of /home/cvs/sambaweb In directory dp.samba.org:/tmp/cvs-serv8497/sambaweb Modified Files: Linux_CIFS_client.html Log Message: Update cifs vfs version number and URL to cifs mount helper utility Revisions: Linux_CIFS_client.html 1.31 = 1.32 http://www.samba.org/cgi-bin/cvsweb/sambaweb/Linux_CIFS_client.html?r1=1.31r2=1.32
CVS update: samba/source/smbd
Date: Sun Mar 16 22:07:36 2003 Author: abartlet Update of /data/cvs/samba/source/smbd In directory dp.samba.org:/tmp/cvs-serv30589/smbd Modified Files: service.c Log Message: Missed one when I move 'share_sanity_checks' to use an fstring for 'dev'. Andrew Bartlett Revisions: service.c 1.115 = 1.116 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/service.c?r1=1.115r2=1.116
CVS update: samba/source/smbd
Date: Mon Mar 17 03:47:15 2003 Author: abartlet Update of /data/cvs/samba/source/smbd In directory dp.samba.org:/tmp/cvs-serv29793/smbd Modified Files: statcache.c Log Message: Fix memory leaks and add parinoioa code to our stat() cache. Andrew Bartlett Revisions: statcache.c 1.17 = 1.18 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/statcache.c?r1=1.17r2=1.18
CVS update: samba/source/nsswitch
Date: Mon Mar 17 03:56:58 2003 Author: tpot Update of /data/cvs/samba/source/nsswitch In directory dp.samba.org:/tmp/cvs-serv30955 Modified Files: wbinfo.c Log Message: Some cosmetic changes to make the popt --usage output look nicer. Revisions: wbinfo.c1.58 = 1.59 http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/wbinfo.c?r1=1.58r2=1.59
CVS update: samba/source/libsmb
Date: Mon Mar 17 04:42:57 2003 Author: abartlet Update of /data/cvs/samba/source/libsmb In directory dp.samba.org:/tmp/cvs-serv3421/libsmb Modified Files: trusts_util.c Log Message: Fix a memory leak - 'smbcontrol smbd pool-usage' is your freind! Andrew Bartlett Revisions: trusts_util.c 1.2 = 1.3 http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/trusts_util.c?r1=1.2r2=1.3
CVS update: samba/source/rpcclient
Date: Mon Mar 17 05:55:41 2003 Author: tpot Update of /data/cvs/samba/source/rpcclient In directory dp.samba.org:/tmp/cvs-serv10490/rpcclient Modified Files: cmd_dfs.c cmd_ds.c cmd_lsarpc.c cmd_netlogon.c cmd_reg.c cmd_samr.c cmd_spoolss.c cmd_srvsvc.c rpcclient.c rpcclient.h Log Message: Applied waider's patch to return DOS error codes for pipes that support it. Revisions: cmd_dfs.c 1.12 = 1.13 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/cmd_dfs.c?r1=1.12r2=1.13 cmd_ds.c1.4 = 1.5 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/cmd_ds.c?r1=1.4r2=1.5 cmd_lsarpc.c1.74 = 1.75 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/cmd_lsarpc.c?r1=1.74r2=1.75 cmd_netlogon.c 1.54 = 1.55 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/cmd_netlogon.c?r1=1.54r2=1.55 cmd_reg.c 1.48 = 1.49 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/cmd_reg.c?r1=1.48r2=1.49 cmd_samr.c 1.158 = 1.159 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/cmd_samr.c?r1=1.158r2=1.159 cmd_spoolss.c 1.108 = 1.109 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/cmd_spoolss.c?r1=1.108r2=1.109 cmd_srvsvc.c1.41 = 1.42 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/cmd_srvsvc.c?r1=1.41r2=1.42 rpcclient.c 1.211 = 1.212 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/rpcclient.c?r1=1.211r2=1.212 rpcclient.h 1.5 = 1.6 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/rpcclient.h?r1=1.5r2=1.6
