Re: [Samba] Am I reading this dump correctly?

2003-03-30 Thread Andrew Bartlett
On Wed, 2003-03-26 at 09:39, Barry, Christopher wrote:
 All,
 
 This debug level 5 snippet looks like it tries several 
 authentication protocols before settling on the NT LM 0.12 
 version. Am I correct in my thinking? 

See www.ubiqx.org/cifs for a good description of the protocol, and what
is happening here.

 Since we run with no less than Win2K in our shop, is there 
 a way to specify the auth to use? The reason I ask, is some of my
 users are having problems - not all of the time - but enough to get
 them annoyed. They will get locked out of a share (or shares). A
 client reboot seems to correct the problem, but I'm having a hell of a
 time figuring this one out. We use msdfs with security = server. 

This is probably your problem.  Never use 'security=server' if you can
help it.  Use 'security=domain'.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] cant set up a server without password :(

2003-03-30 Thread julius
hi
have problems to get an samba server up that offers shares for all 
without a password

heres my smb.conf file located under /usr/local/samba/lib/smb.conf

[global]
netbios name = DEATHB
server string = Samba %v on (%L)
workgroup = LANSTRIKE
encrypt passwords = yes
security = share
[homes]
browseable = no
[mp3]
comment = lmh
path = /var/glftpd/site/mp3/lame.r3mix/
browseable = yes
read only = yes
guest ok = yes
has anybody an idea ?

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] cant set up a no password login

2003-03-30 Thread julius
hi
have problems to get an samba server up that offers shares for all 
without a password

heres my smb.conf file located under /usr/local/samba/lib/smb.conf

[global]
netbios name = DEATHB
server string = Samba %v on (%L)
workgroup = LANSTRIKE
encrypt passwords = yes
security = share
[homes]
browseable = no
[mp3]
comment = lmh
path = /var/glftpd/site/mp3/lame.r3mix/
browseable = yes
read only = yes
guest ok = yes
has anybody an idea ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] cant set up a no password login

2003-03-30 Thread Michael Piko
Off the top of my head...

you need/should have this in the global section.
guest account = pcguest

you need to create an account named pcguest
useradd pcguest 
and then add a smbpasswd for that account.
smbpasswd -a pcguest



- Original Message - 
From: julius [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, March 30, 2003 6:59 PM
Subject: [Samba] cant set up a no password login


 hi
 have problems to get an samba server up that offers shares for all 
 without a password
 
 heres my smb.conf file located under /usr/local/samba/lib/smb.conf
 
 [global]
 netbios name = DEATHB
 server string = Samba %v on (%L)
 workgroup = LANSTRIKE
 encrypt passwords = yes
 security = share
 
 [homes]
 browseable = no
 
 [mp3]
 comment = lmh
 path = /var/glftpd/site/mp3/lame.r3mix/
 browseable = yes
 read only = yes
 guest ok = yes
 
 has anybody an idea ?
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] RES: Winbind broken after 2.2.8 upgrade

2003-03-30 Thread FRANCO

hello,  
  
thank you very much for the answer. I should say that my version is to 2.3a
that it comes with the distribution CONECTIVA. Before posting the messages I
make several tests and I place the maximum of information that I possess. If
my messages not answered they leave the frustrated people it is because many
of them pass for the same as me. So that you answered me I had to take
advantage of SUBJECT of a message. Excuse for that.

 I hve 3 installations with problems... I never saw this I think that 
 Im not a god SAMBA Administrator but I did read all the doc I 
 dont have any troubles with other soft, but with samba ehehehehehe

Samba is a complex peice of software.  It's interactions with (often
separately maintained) Windows DCs is particularly complex.

If it doesn't occur on all your DCs, then you should look at what is
different.  This information should be present when you contact the 
list.


My intranets are composed by PDCs, the only thing that can be different it
is that plan them linux he/she has firewall installed in them. I/you had
been that everything it is inside of the pattern of installation of
MICROSOFT. I also ordered already the configurations of my firewall for you
with the messages. and I already made COUNTLESS TEST WITH AND WITHOUT
FIREWALL. I wait to be being very clear on this subject. I wait that my
translator (portugues/ingles) it is not causing confusion. ;-)


===
 FIRST INSTALATION:
 
 Can yoiu help m?
 
 [EMAIL PROTECTED] /etc]# smbpasswd -j surson -r cleo -U Administrator
 Password:
 Joined domain SURSON.
 [EMAIL PROTECTED] /etc]#
 
 
 [EMAIL PROTECTED] /etc]# smbclient //firewall/PUBLICO -UAdministrator
 added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 
 Got a positive name query response from 192.168.1.2 ( 192.168.1.1 )
 Password:
 session setup failed: NT_STATUS_LOGON_FAILURE
 
 When I try \\firewall\PUBLICO in the NT I receive a BOX to type USER
 and PASSWD
 
 Joe log.cleo
 
 [2003/03/25 04:38:27, 0]
 smbd/password.c:connect_to_domain_password_server(1307)
   connect_to_domain_password_server: machine CLEO rejected the tconX
 on the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 
 04:38:27, 0]
 smbd/password.c:domain_client_validate(1554)
   domain_client_validate: Domain password server not available.
[2003/03/25

This looks like an issue with your PDC, not with Samba.

Your PDC is has 'restrict anonymous = 2' set.  The two options are to set a
username for Samba to use (wbinfo -Auser%pass), or to disable it. 
==

The webinfo -u works. The one that doesn't work is SMBCLIENT for the SAMBA
from within of LINUX and the connections comings of the NT. That that left
me was perplexed. He/she/you seems that PAM not this allowing the auth or
thing of the type. The smb_auth that I use in my SQUID makes everything
right.


==
If you already have a username/pw set (by wbinfo -A), then I would suspect
that you have SMB signing required, on a 'fixed' DC (MS did not used to
enforce this).
==

I don't know more than to do, therefore I already read countless documents
to I respect. If you want I give him/her the password of the ssh for that
you among in the system and verify. I am very depressed, because they are 2
facilities with the same problem.  
  
[]s

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] cant set up a no password login

2003-03-30 Thread Joel Hammer
You might make this work with just:

guest account = nobody

in [global]

You could use other users like root (not very secure but it all depends
on your needs) or any regular user you have defined on this server.

Joel

On Sun, Mar 30, 2003 at 10:59:05AM +0200, julius wrote:
 hi
 have problems to get an samba server up that offers shares for all 
 without a password
 
 heres my smb.conf file located under /usr/local/samba/lib/smb.conf
 
 [global]
 netbios name = DEATHB
 server string = Samba pv on (pL)
 workgroup = LANSTRIKE
 encrypt passwords = yes
 security = share
 
 [homes]
 browseable = no
 
 [mp3]
 comment = lmh
 path = /var/glftpd/site/mp3/lame.r3mix/
 browseable = yes
 read only = yes
 guest ok = yes
 
 has anybody an idea ?
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Difficulty with Samba 2.2.8 and native CUPS PS drivers

2003-03-30 Thread David F. Severski
Kurt,

First of all, thank you very much for your time and assistance here.  I greatly 
appreciate the effort.  Below are my results and some further information.

On Sun, Mar 30, 2003 at 12:14:01AM +0100, Kurt Pfeifle wrote:

 I've recently attempted to convert from the Adobe PostScript drivers for 
 my Canon BJC=2110 printer over to the native CUPS Windows PS drivers
 
 You can only do this if your CUPS version is sufficiently new.
 Check by reading man cupsaddsma. Does it already relate to the
 CUPS PostScript drivers?

The cupsaddsmb man page does mention the native CUPS drivers.  Sorry, I should 
have specified the CUPS version previously.  This is CUPS 1.1.18 running on 
a FreeBSD 4.8-RC (STABLE) machine.  Samba is, again, 2.2.8 and is compiled with 
the Recycle and SSL options.  Samba, CUPS, and the supporting gimp-print 
systems were all compiled from source via the FreeBSD ports system.

 You might need to restart Samba to get it to work (if you have the printer
 Canon_BJC, or any other, newly installed).

I've done a full stop of Samba, verifying that all smbd and nmbd processes have 
shut down, then restarted Samba.

 
 If this doesn't help, let root do a
 
smbcontrol smbd debug 3
 
 and then watch
 
tail -f /var/log/samba/log.smbd(or appropriate path)
 
 while you try to connect to Samba from XP.

No luck there, I'm afraid.  In tests with two machines, both generated the 
error message about missing driver files, even though the properties of the 
connection show that a Windows NT/2000 driver is installed, and the CUPS 
native PS driver files are copied successfully into the Windows\System32\Spool\
Drivers tree.  Attached are two gzipped log files, smb-desktop.log and 
smb-laptop.log.  

smb-desktop.log is an XP SP1 machine that is 
joined to the domain and logged in with an account that has write 
privileges to the print$ share.  The desktop had just been rebooted, logged 
in, the existing printer deleted, and the driver removed from the system 
via the Server Properties function.  No other printers or drivers were 
installed.

smb-laptop.log is an XP SP1 laptop that is not part of the domain.  From a 
command prompt, I connected to the print$ share as root before deleting the 
existing printer connection, removing the printer driver via Server 
Properties, then reconnected to the printer.
 
 Make sure the connection is as a user who can write to the [print$] share.
 Check which user you are from Samba's point of view, by asking for
 
smbstatus

Verified to be either root (for the laptop), or my privileged login account 
for the desktop.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Difficulty with Samba 2.2.8 and native CUPS PS drivers

2003-03-30 Thread David F. Severski
On Sun, Mar 30, 2003 at 06:55:36AM -0800, David F. Severski wrote:
 Drivers tree.  Attached are two gzipped log files, smb-desktop.log and 
 smb-laptop.log.  
 
 smb-desktop.log is an XP SP1 machine that is 
 joined to the domain and logged in with an account that has write 
 privileges to the print$ share.  The desktop had just been rebooted, logged 
 in, the existing printer deleted, and the driver removed from the system 
 via the Server Properties function.  No other printers or drivers were 
 installed.
 
 smb-laptop.log is an XP SP1 laptop that is not part of the domain.  From a 
 command prompt, I connected to the print$ share as root before deleting the 
 existing printer connection, removing the printer driver via Server 
 Properties, then reconnected to the printer.

It looks like my attachments got stripped.  I've posted the log files 
up at http://www.deadheaven.com/logs/ for reference.  Thanks again!

David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] cant set up a no password login

2003-03-30 Thread Joel Hammer
One thing you could do is set up a user on your server that belongs only to
his own unique group (user and group as mp3user, for example).
Then chmod mp3user.mp3user /var/glftpd/site/mp3/lame.r3mix
And, make guest acccount = mp3user.

guest account can be in the share, not just in the gloal section, methinks.
Read man smb.conf.

BTW, I haven't tried this.

Joel
 



On Sun, Mar 30, 2003 at 10:59:05AM +0200, julius wrote:
 hi
 have problems to get an samba server up that offers shares for all 
 without a password
 
 heres my smb.conf file located under /usr/local/samba/lib/smb.conf
 
 [global]
 netbios name = DEATHB
 server string = Samba pv on (pL)
 workgroup = LANSTRIKE
 encrypt passwords = yes
 security = share
 
 [homes]
 browseable = no
 
 [mp3]
 comment = lmh
 path = /var/glftpd/site/mp3/lame.r3mix/
 browseable = yes
 read only = yes
 guest ok = yes
 
 has anybody an idea ?
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba, ?

2003-03-30 Thread mike maxim
 Samba!

,Samba. .
  ,  ,   .

  : 
http://[EMAIL PROTECTED]/cgi-bin/gazeta/print.pl?s=wname=Samba[EMAIL PROTECTED]

: 
http://humor.rin.ru/cgi-bin/photo.pl?c=ns=wn=Samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba]

2003-03-30 Thread James Yale
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba joins win2k domain but can't authenticate

2003-03-30 Thread Elijah Savage
Because I never got answers from anyone I figured it might be a good
idea to post this resolution. It was very simple and I feel stupid for
not figuring it out sooner. Well my wife has a win2k machine that join
the domain fine but anytime she tried to access any of the files on the
samba server it would ask for user name and password. After verifying
that I had a good config and redoing everything many times I looked in
the logs which I should have done earlier hehehehe. Well here is the log
error

[2003/03/30 13:54:29, 0] smbd/password.c:domain_client_validate(1605)
  domain_client_validate: unable to validate password for user wife in
domain MOM to Domain controller cartman. Error was
NT_STATUS_NO_SUCH_USER.


Looking at this log I went wait a minute I know this machine joined the
domain because I did it and everything went ok. When my wife had
patience to sit and troubleshoot with me I had her logging in, and
wouldn't you know she was logging in locally to the machine which is
named MOM and not the domain. I go over to her machine and switch it to
log in to the domain and everything works perfectly. Hope this keeps
someone else from making the same stupid mistake I did. FreeBSD and
Samba great file server especially since I upgraded to gigabit. I got a
4 port hawkings gigabit switch and a cnet gigabit 32/64 gigabit card
which came with freebsd drivers installed no problem. This thing ROCKS.



-Original Message-
From: Elijah Savage 
Sent: Friday, March 28, 2003 7:01 PM
To: [EMAIL PROTECTED]
Subject: RE: [Samba] Samba joins win2k domain but can't authenticate

Yes the users do have accounts on the box just not smb accounts, but
looks like I might have to create them seems to be the only way I can
get it to work.

-Original Message-
From: Elijah Savage 
Sent: Friday, March 28, 2003 6:37 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Samba joins win2k domain but can't authenticate

All I got my samba server to join my win2k domain without any problems.
But if I change the config to read security=domain it prompts the user
for a username and password. If I change it to security=server it does
not prompt for user names. I did some searching in the list came up with
a few emails and this website
http://www.sugoi.org/bits/index.php?bit_id=10 but still no change. In
the /etc/host file I put the pdc name and address and made sure I could
ping it by name. Using Freebsd 4.7 and Samba 2.2.6. I have rebooted the
client and the PDC and also stopped and started samba a few times. Any
help would be appreciated, and thank you for even taking the time to
read my post.

 

# Samba config file created using SWAT
# from dad (192.168.11.5)
# Date: 2003/03/28 18:25:30
 
# Global parameters
[global]
workgroup = DIGITALRAGE
netbios name = SKYWALKER
server string = Samba
security = DOMAIN
encrypt passwords = Yes
password server = cartman
socket options = TCP_NODELAY SO_RCVBUF=4096 SO_SNDBUF=4096
IPTOS_LOWDELAY
preferred master = False
local master = No
domain master = False
wins server = 192.168.11.1

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba problems

2003-03-30 Thread Allen Smith
Umm.. I think i should make one thing clear because I'm getting alot of 
replies saying I should do smbpasswd -a username.  I just want to let you 
guys know that I have done this, I added the users I was testing out, ie. 
fred, root.  this is not the problem.  Also I'm using a newly installed 
version of redhat 8.0 and trying to make it work with samba2.2.8

Thanks for all your help so far





_
MSN 8 with e-mail virus protection service: 2 months FREE*  
http://join.msn.com/?page=features/virus

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WARNING: The printer driver locationoption isdeprecated

2003-03-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 26 Mar 2003, Andre Dieball wrote:

 After upgrade to 2.2.8-1 woody fom 2.2.7a I get (apart from other
 problems) the following error message:
 
 WARNING: The printer driver locationoption is deprecated

This parameter has been marked as deprecated for several versions
now.  This is not a recent change.  

 As I use the Samba server only for printing, I'm not sure, what this
 means to me, as I have the follwoing in my smb.conf:

See the printing chapter in the Samba-HOWTO-Collection.




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+h3TuIR7qMdg1EfYRAq0lAJsGnHk1frQyThOr9N1ttSihozzPngCgoBQy
Cczc2WedxPwfKeu3ph6GwTc=
=vJzy
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Winbind broken after 2.2.8 upgrade

2003-03-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 27 Mar 2003, Andrew Bartlett wrote:

 Winbind doens't *require* libnss_winbind - there are actually situations
 where it is used without it.  That said, I've implemented some extensive
 version checks from the client side - we certainly won't connect to a
 winbind with a different protocol version any more.

in Samba 2.2, if you are running winbind and smbd you must install the
NSS winbind library as well.   The reason is for the getpwnam() lookups.




cheers, jerry

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+h3YOIR7qMdg1EfYRAm5BAKCqLzMbFKDSgQy2hE1U5IgcGZaBfQCbB2PE
kYTwKTMV6ydHbeSnhzr93yg=
=nq3l
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] BUG report: smbclient

2003-03-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sun, 30 Mar 2003, Piero Filippin wrote:

 This is present in both 2.2.7 and 2.2.8. It worked on 2.2.5  (I
 installed it from RPMs on a Mandrake 9.1 system) 
  
 If I try to send a message to an host, it seems that smbclient appends a
 #0x3 to host name, so it cannot resolve it
  
 Here an example:
  
 [EMAIL PROTECTED] root]# smbclient -M condor
 added interface ip=192.168.0.1 bcast=192.168.0.255 nmask=255.255.255.0
 Cannot resolve name condor#0x3

In this case, smbclient has to resolve the netbios name 
(not DNS name) of the messenger service.  This is not a bug.
If you correct the problems with your netbuios name resolution, 
this will work fine.



cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+h4CAIR7qMdg1EfYRAtioAKC2HuD1Ko3Do5dvFKHaKIs6yqT17wCfWq8s
6W6yWwOEYLWjRkS7n/6hbnE=
=f496
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WinXP DFS problems

2003-03-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Fri, 21 Mar 2003, Eric Horst wrote:

 I can confirm this.  Upgrading from 2.2.7a to 2.2.8 breaks Dfs.  I've
 upgraded and reverted several times and it's certain.  I've been looking
 at logs, source and diffs between 2.2.7a and 2.2.8 all day.  I don't
 know what changed between the two versions to break it.  I'm continuing
 to look.
 
 Is msdfs actually working for anybody in 2.2.8?  Has those of you who
 have had trouble found any additional clues?

This is fixed in the SAMBA_2_2 cvs code in case you missed the commit 
message.  Only affect WinXP and .NET clients.




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+h4JAIR7qMdg1EfYRAu3lAJ40apktbuGmwahvRErOYrK0xXOtTwCff+UA
4t+T3Trja3D16tj9502ZopU=
=ZG1G
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] minor man page update (2.2.8)

2003-03-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Fri, 21 Mar 2003, Nathan Ehresman wrote:

 Just a friendly note about a minor man page update to the smb.conf in 
 2.2.8 (and beyond I would assume).  The variable substitution %a now 
 substitutes in WinXP as well as the documented Samba, WfWg, Win95, 
 WinNT, and Win2k substitutions.

Yeah.  This was a small thing I missed during the release.  I'll update it 
now.  Thanks for reminding me.





cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+h4J9IR7qMdg1EfYRAtbZAKDVu54eMnT+eyKZPxpjx9sfSanccACgtxSf
DCxh6INFTpsAbYe+CjXYCM4=
=4t6F
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Shares with long names not accessible from winNT...

2003-03-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Fri, 21 Mar 2003, Satish K. Pagare wrote:

 Hi All,
 
  I have the following section in my smb.conf file:
 [Satish' Hindi Alltime Hits - Gems]
 path= /mnt/d-drive/Music/Satish' Hindi Alltime Hits 
Gems
 browseable  = yes
 public  = yes
 readonly= yes
 guest ok= yes
 
 I am able to browse this share through win2k but not from winNT.
 But If I change the share name to [Satish] , basically a short name
 I am able to browse it thru winnt as well. Is this expected behaviour?
 Any workaround, solutions ?

It's a bug in WinNT due to the fact that Samba 2.2 doesn't support 
UNICODE.  Samba 3.0 fixes this.





cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+h4VGIR7qMdg1EfYRAkq8AKDglI0SZ4JsaCRoVDccESjwSPDtKACglnr3
oBHvnlGXvWGS0A0V7JtncsU=
=cNrv
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Password when connecting

2003-03-30 Thread Brian Ronk
I just got Samba up and running on my RH 7.2 machine (installed 
from source) and can finally see it.  The problem is that it's asking 
for a password to access the computer.  I thought I commented out 
all the parts pertaining to passwords, but I must have commented 
something I should have, or missed one.  What I am trying to access 
is a public r/w share.  Can someone give me a hint.  Thanks.

Brian Ronk
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Citrix reports no more connections to samba server

2003-03-30 Thread Phil Hale
Hi All

I have a Win2K server with Citrix Metaframe XPe installed on the network and
uses mapped network drives to a Samba file server. The Citrix server is
locking users out of the mapped network drive on the samba server.

Citrix has 125 concurrent licences and Terminal services licences of the
same amount
Samba version is 2.2.3a  Running on a Redhat 7.3 box.

Please advise if more into is required and what is required.

Has this been seen before and what is the possible solution.

Thanx in advance

Phil Hale
Technology Services Manager
Holiday Coast Credit Union - It's were you belong
http://www.hccu.com.au
mailto:[EMAIL PROTECTED]

You don't need technology to think outside the square




NOTICE
The information contained in this e-mail is confidential. Any views or
opinions expressed in this communication are those of the individual sender,
except where the sender specifically states that the views or opinions are
those of Holiday Coast Credit Union Ltd.

This communication is intended to be solely for the use of the addressee(s)
and may contain copyright and / or legally privileged information.

If you are not an authorised recipient of this e-mail, please contact
Holiday Coast Credit Union Ltd immediately by return e-mail or by telephone
on 61-2-65808222.

If you are not an authorised recipient of this e-mail you should destroy all
copies of this e-mail or any attachments. Any review, retransmission,
dissemination, copying or other use of, or taking any action in reliance
upon, this information by persons or entities other than the intended
recipient is prohibited.

You should only re-transmit, distribute or commercialise the material if you
are authorisedto do so.

As Internet communications are capable of data corruption, Holiday Coast
Credit Union Ltd does not guarantee the security of any information
electronically transmitted and does not accept responsibility for any
improper or incomplete transmission of the information contained in this
communication, nor for any delay in its receipt.

This notice should not be removed.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Password when connecting

2003-03-30 Thread Elijah Savage
Look into smbpasswd -a

Or man smbpasswd 

Should be all you need.

-Original Message-
From: Brian Ronk [mailto:[EMAIL PROTECTED] 
Sent: Friday, March 28, 2003 3:05 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Password when connecting

I just got Samba up and running on my RH 7.2 machine (installed 
from source) and can finally see it.  The problem is that it's asking 
for a password to access the computer.  I thought I commented out 
all the parts pertaining to passwords, but I must have commented 
something I should have, or missed one.  What I am trying to access 
is a public r/w share.  Can someone give me a hint.  Thanks.

Brian Ronk
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] W2K Explorer security propagation prob in 2.2.8 and Samba-3's and HEAD

2003-03-30 Thread Grant Bigham




I've have an NT4 PDC with Samba-2.2.8 joined as a domain member. When using
Explorer in W2K to change security settings on Samba shares, the security
settings are not propagted down the the directory tree - yes I have ticked
the Reset perms on all child.. I also see CREATOR OWNER and
CREATOR GROUP as accounts defined to all directories.

2.2.7a exhibits none of these issues, but 3 (Alpha 21) and HEAD both do.

BTW, I've tested on different Linux distribs (RedHat, SuSE and Debian) on
s390 and I686 arcs. One important point is that Samba is running
with-acl-support enabled on POSIX ACL enabled Kernels at 2.4.19 and 2.4.20.

Any help would be greatly appreciated.

Cheers, Grant

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Citrix reports no more connections to samba server

2003-03-30 Thread Ken McCord
We have this happen for us.  To work around the problem, I just set up a 
cron job to restart the Samba service at 4am every day.

Ken

Phil Hale wrote:

Hi All

I have a Win2K server with Citrix Metaframe XPe installed on the network and
uses mapped network drives to a Samba file server. The Citrix server is
locking users out of the mapped network drive on the samba server.
Citrix has 125 concurrent licences and Terminal services licences of the
same amount
Samba version is 2.2.3a  Running on a Redhat 7.3 box.
Please advise if more into is required and what is required.

Has this been seen before and what is the possible solution.

Thanx in advance

Phil Hale
Technology Services Manager
Holiday Coast Credit Union - It's were you belong
http://www.hccu.com.au
mailto:[EMAIL PROTECTED]
You don't need technology to think outside the square



NOTICE
The information contained in this e-mail is confidential. Any views or
opinions expressed in this communication are those of the individual sender,
except where the sender specifically states that the views or opinions are
those of Holiday Coast Credit Union Ltd.
This communication is intended to be solely for the use of the addressee(s)
and may contain copyright and / or legally privileged information.
If you are not an authorised recipient of this e-mail, please contact
Holiday Coast Credit Union Ltd immediately by return e-mail or by telephone
on 61-2-65808222.
If you are not an authorised recipient of this e-mail you should destroy all
copies of this e-mail or any attachments. Any review, retransmission,
dissemination, copying or other use of, or taking any action in reliance
upon, this information by persons or entities other than the intended
recipient is prohibited.
You should only re-transmit, distribute or commercialise the material if you
are authorisedto do so.
As Internet communications are capable of data corruption, Holiday Coast
Credit Union Ltd does not guarantee the security of any information
electronically transmitted and does not accept responsibility for any
improper or incomplete transmission of the information contained in this
communication, nor for any delay in its receipt.
This notice should not be removed.
 



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Remote Client Printing using CUPS

2003-03-30 Thread Mike Hannigan
I'm getting an error in my CUPS error log when I try to print from a WIN98 client to a 
HP2500C printer defined as LP on the host.  The error is as follows.

Unable to print file to lp - client-error-document-format-not-supported

I have tried printing just ASCII text with the same error.

Any help would be appreciated.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: How to verify the domain secret is good or bad?

2003-03-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sun, 30 Mar 2003, Joey Collins wrote:

 Why does Samba do this?  Does the secret expire after a certain period
 of time or is this done as a safety precaution?

See the machine password timeout smb.cinf(5) parameter.




cheers, jerry



-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+h7VnIR7qMdg1EfYRApCMAJ9kTmBqb4ILG8iFcu3FQmWSRf18IQCfeIob
y9fw2uvjAFoAbRf33myoaFY=
=grx5
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] cant set up a no password login

2003-03-30 Thread Brian Wiese
By default, samba disallows null passwords.  man smb.conf
So you might want to set:

null passwords = yes

hth, peace
Brian

On Sun, 30 Mar 2003 09:42:41 -0500
Joel Hammer [EMAIL PROTECTED] wrote:

|You might make this work with just:
|
|guest account = nobody
|
|in [global]
|
|You could use other users like root (not very secure but it all depends
|on your needs) or any regular user you have defined on this server.
|
|Joel
|
|On Sun, Mar 30, 2003 at 10:59:05AM +0200, julius wrote:
| hi
| have problems to get an samba server up that offers shares for all 
| without a password
| 
| heres my smb.conf file located under /usr/local/samba/lib/smb.conf
| 
| [global]
| netbios name = DEATHB
| server string = Samba pv on (pL)
| workgroup = LANSTRIKE
| encrypt passwords = yes
| security = share
| 
| [homes]
| browseable = no
| 
| [mp3]
| comment = lmh
| path = /var/glftpd/site/mp3/lame.r3mix/
| browseable = yes
| read only = yes
| guest ok = yes
| 
| has anybody an idea ?
| -- 
| To unsubscribe from this list go to the following URL and read the
| instructions:  http://lists.samba.org/mailman/listinfo/samba
|-- 
|To unsubscribe from this list go to the following URL and read the
|instructions:  http://lists.samba.org/mailman/listinfo/samba
|


  Brian Wiese | [EMAIL PROTECTED] | aim: unolinuxguru
--
  GnuPG/PGP key 0xF3220030 | FREEDOM! - Braveheart 
--  
This is not about Napster or DVDs. It's about your Freedom.
  I'll see your DMCA and raise you a First Amendment.
  http://www.anti-dmca.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba + LDAP + FreeBSD + a HOWTO

2003-03-30 Thread Adam Smith

Hi all!  I am having some trouble with the above equation.  Firstly:

Samba   == samba-2.2.8
LDAP== openldap21-2.1.12
   pam_ldap-1.6.1
FreeBSD == FreeBSD 5.0
HOWTO   == http://samba.idealx.org

I have been following the HOWTO at samba.idealx.org, and so far I've found
it extremely informative for someone who wants to get LDAP up and running
with Samba, and who has never used LDAP before.

On page 13 (lucky for some) of this HOWTO, I ran into problems.  It began
talking about using the smbldap-tool kit which I had installed on my
system.  The following command ran correctly:

smbldap-useradd.pl -m testuser1

This command failed:

smbldap-passwd.pl testuser1

Returning:

Can't return outside a subroutine at /usr/local/sbin/smbldap-passwd.pl line
165, STDIN line 2.

Is this an issue with the toolkit, with FreeBSD, or with something else?  I
do not know Perl well enough to begin troubleshooting this problem either,
unfortunately.  Is there anyone who has had experience with this setup that
can assist me in working out what is going wrong?

Thankyou :)


-- 
Adam Smith
Information Technology Officer
SAGE Automation Ltd.

[EMAIL PROTECTED]
http://www.sageautomation.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Change userrights in Windows

2003-03-30 Thread Gerd Mller
Hello,
is there a possibility to change userrights of files/folders in Windows 
with Samba 2.2.1a ?

Gerd Mueller

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 2.2.8 is failing on change machine account password

2003-03-30 Thread Hansjoerg Maurer
Andrew Bartlett wrote:


If you run 'smbpasswd -t' it should do it on demand.

Hi,

thank you for the information.
It makes testing easier.
But unfortunatlly I get the same error.
I had performed several tests concerning the case sensitiv writing of 
the domainname, but I got no solution.
(attached the matrix of values I have tested)
I removed the samba host (printserver3) each time from the domain unsing 
the servermanager und added ist (with servermanger)
First join with
smbpasswd -j NTROBOTIC -r ROBPDC2
works
second try with
smbpasswd -t NTROBOTIC
2003/03/31 08:24:56 : change_trust_account_password: Failed to change 
password f
or domain NTROBOTIC.
fails.

printserver3 is a test system only, so I can use it for testing until 
the end of the next week.
If I can supply further testing/information, please let me know.

Thank you

Hansjörg

smb.confsmbpasswd   Servermanager   Result
NTROBOTIC   NTROBOTIC   NTROBOTIC   n
ntrobotic   ntrobotic   ntrobotic
NTROBOTIC   ntrobotic   ntrobotic   17.03.2003 18:00 Uhr
Netbios/smb.conf Workgroup/smb.conf Domain/smbpasswd PDC/smbpaswd 
Servermanager/del Servermanager/add   dateResult
---  NTROBOTIC  NTROBOTICROBPDC2  
Y Y   25.03 8:30  bad
PRINTSERVER3 NTROBOTIC  NTROBOTICROBPDC2  
Y Y   25.03 16:30 bad
printserver3 NTROBOTIC  NTROBOTICROBPDC2  
Y Y   26.03 10:30 bad
printserver3 NTROBOTIC  NTROBOTICrobpdc2  
Y Y   26.03 15:30 bad
PRINTSERVER3 NTROBOTIC  NTROBOTICrobpdc2  
Y Y   26.03 17:00 bad
---  NTROBOTIC  NTROBOTICrobpdc2  
Y Y   26.03 17:50 bad
---  ntrobotic  NTROBOTICROBPDC2  
Y Y   27.03 8:30  bad
PRINTSERVER3 ntrobotic  NTROBOTICROBPDC2  
Y Y   27.03 16:30
printserver3 ntrobotic  NTROBOTICROBPDC2  
Y Y   27.03 10:30
--   NTROBOTIC  NTROBOTICROBPDC2  
Y Y (passwd server*)  27.03 10:30 bad
printserver3 ntrobotic  ntroboticrobpdc2  
Y Y   27.03 15:30



Andrew Bartlett





--
_
Dr.  Hansjoerg Maurer   | LAN-  System-Manager
   |
Deutsches Zentrum   | DLR Oberpfaffenhofen
 f. Luft- und Raumfahrt e.V.   |
Institut f. Robotik |
Postfach 1116   | Muenchner Strasse 20
82230 Wessling  | 82234 Wessling
Germany |
   |
Tel: 08153/28-2431  | E-mail: [EMAIL PROTECTED]
Fax: 08153/28-1134  | WWW: http://www.robotic.dlr.de/
__
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: How to verify the domain secret is good or bad?

2003-03-30 Thread Joey Collins


Gerald (Jerry) Carter wrote:
 

[snip]

  Also, sometimes I saw problems like wbinfo -t just says secret is bad,
  when all the daemons were running.  It sure was good at some point before.
 
 Samba periodially changes the password on the server.  secrets.tdb should
 be in sync with this.

Hi,

Why does Samba do this?  Does the secret expire after a certain period
of time or is this done as a safety precaution?

thanks,
Joey.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: tcon torture test

2003-03-30 Thread tridge
  Ah.  Bingo.  So the context is based on the file handle.  Makes sense.
 
 The same thing is true of the RPC handles for printing.

given that win2003 seems to now restrict SMBwriteX to be on the
'correct' tid, it would be interesting to retest the RPC case with a
win2003 server. Maybe they fixed this in more than one place?



Re: [patch] uppercase workgroup in browse request

2003-03-30 Thread Stephan Kulow
Am Thursday 27 March 2003 18:04 schrieb Christopher R. Hertel:
 On Thu, Mar 27, 2003 at 05:43:55PM +0100, Stephan Kulow wrote:
  Am Thursday 27 March 2003 03:43 schrieb Christopher R. Hertel:
   Stephan Kulow wrote:
Hi!
   
I noticed a difference between testsmbc smb://MYGRP and testsmbc
smb://mygrp (it doesn't make a difference for SAMBA servers, but it
does for XP and for winME) So please apply the included patch.
  
   Hang on...
  
   Do I read this correctly?  Are we forgetting to up-case the workgroup
   name? (...it always helps to provide a little clue along with the
   patch.)  :)
  
   Samba decodes NetBIOS names and then performs a case-insensitive
   comparison on the original name.  Windows (the versions I've tested)
   simply compares the wire-format strings.  That's faster, but it's also
   case sensitive.  I don't currently have any ME or XP systems to test.
 
  I don't understand. You seem to agree with the patch, still it's not
  applied.

 I don't understand.  I asked for clarification.  :)

 There's a question above.  I asked Do I read this correctly?.
You added a smiley behind it, so it appeared ironicly to me.

 So, what is your intention with this patch?  What was the problem you were
 detecting?  You never specified.  Before I dig into the patch I want to
 know what you are trying to accomplish.

Well, host names in URLs are usually case insensitive and with samba servers
smb://mygrp gives indeed the same as smb://MYGRP. But not when the server
is running winME, win98 or XP (that's the versions I tried). As KDE's URL 
handling lower cases the host part (and that's what MYGRP is), you'll 
notice.

Meanwhile Andrew pointed out that my patch wasn't safe, so I changed it to
use STR_UPPER.

Greetings, Stephan

-- 
Pace, Peace, Paix, Paz, Frieden, Pax, Pokój



charset confusion

2003-03-30 Thread Stephan Kulow
Hi!

I've done an experiment and configured my only windows
system (german win98) in the LAN to be named häßlich 
and be in the workgroup möbel.

Then tried testsmbc on smb://m%C3%B6bel/ (correctly
UTF-8 escaped samba URL). That tried a broadcast for
möbel1d, which I think it shouldn't. I'm not sure what
exactly it's supposed to do, but surely not UTF-8.

I then tried adding a pull_utf8 into the URL parsing of
libsmbclient, but that didn't change anything as the
default for unix charset is already UTF8 (and that's fine
for me). So I'm really wondering what's supposed to 
happen.

I then tried smbtree and that go results, but displayed them
incorrectly (from the attached log it seems to me as it wouldn't
convert the names it gets/sends at all).

So I'm asking for feedback how to fix that. libsmbclient.c
calls  cli_NetServerEnum with the supposedly correct workgroup
möbel (that's unix charset at least) and the call to push_ascii
is there too - so why doesn't it work?

Greetings, Stephan

-- 
Pace, Peace, Paix, Paz, Frieden, Pax, Pokój

log.gz
Description: GNU Zip compressed data


[patch] Fix source/Makefile.in to clean up everything

2003-03-30 Thread Green, Paul
The everything target makes some additional files that are not cleaned-up
by make clean.  This patch corrects the oversight. It should be applied to
both head and 3_0.  Tested today by me on Stratus VOS.

Thanks
PG
--
Paul Green, Senior Technical Consultant,
Stratus Technologies, Maynard, MA USA
Voice: +1 978-461-7557; FAX: +1 978-461-3610
Speaking from Stratus not for Stratus


diff -urp old/samba/source/Makefile.in new/samba/source/Makefile.in
--- old/samba/source/Makefile.inFri Mar 28 14:26:56 2003
+++ new/samba/source/Makefile.inSun Mar 30 14:20:12 2003
@@ -129,6 +129,8 @@ TORTURE_PROGS = bin/[EMAIL PROTECTED]@ b
 
 BIN_PROGS = $(BIN_PROGS1) $(BIN_PROGS2) $(BIN_PROGS3) @EXTRA_BIN_PROGS@
 
+EVERYTHING_PROGS = bin/[EMAIL PROTECTED]@ bin/[EMAIL PROTECTED]@ bin/[EMAIL 
PROTECTED]@
+
 SHLIBS = @SHLIB_PROGS@ @LIBSMBCLIENT@
 
 SCRIPTS = $(srcdir)/script/smbtar $(srcdir)/script/addtosmbpass 
$(srcdir)/script/convert_smbpasswd \
@@ -1184,7 +1186,8 @@ TOPFILES=dynconfig.o dynconfig.po
 
 clean: delheaders python_clean
-rm -f core */*~ *~ */*.o */*.po */*.po32 */[EMAIL PROTECTED]@ \
-   $(TOPFILES) $(BIN_PROGS) $(SBIN_PROGS) $(MODULES) $(TORTURE_PROGS) 
$(LIBSMBCLIENT) .headers.stamp
+   $(TOPFILES) $(BIN_PROGS) $(SBIN_PROGS) $(MODULES) $(TORTURE_PROGS) \
+   $(LIBSMBCLIENT) $(EVERYTHING_PROGS) .headers.stamp
 
 # This is quite ugly actually.. But we need to make 
 # sure the changes to include/config.h are used.
@@ -1279,7 +1282,7 @@ ctags:
ctags `find $(srcdir) -name *.[ch] | grep -v /CVS/`
 
 realclean: clean delheaders
-   -rm -f config.log $(BIN_PROGS) $(MODULES) $(SBIN_PROGS) bin/.dummy 
script/findsmb
+   -rm -f config.log bin/.dummy script/findsmb
 
 distclean: realclean
-rm -f include/stamp-h


[patch] Fix samba_2_2 to build on Stratus VOS

2003-03-30 Thread Green, Paul
This patch back-ports Makefile.in and configure.in logic from head/3.0 to
2.2 so that Stratus VOS can build Samba 2.2 properly. I have tested it
extensively on Stratus VOS without any problems (and of course it is tested
frequently in the other trees). Please apply it to Samba 2.2.

Thanks
PG
--
Paul Green, Senior Technical Consultant,
Stratus Technologies, Maynard, MA USA
Voice: +1 978-461-7557; FAX: +1 978-461-3610
Speaking from Stratus not for Stratus


diff -urp old/samba_2_2/source/Makefile.in new/samba_2_2/source/Makefile.in
--- old/samba_2_2/source/Makefile.inSun Feb  9 17:44:55 2003
+++ new/samba_2_2/source/Makefile.inTue Feb 11 07:35:51 2003
@@ -17,6 +17,7 @@ [EMAIL PROTECTED]@
 [EMAIL PROTECTED]@
 [EMAIL PROTECTED]@
 [EMAIL PROTECTED]@
[EMAIL PROTECTED]@
 
 [EMAIL PROTECTED]@
 [EMAIL PROTECTED]@
@@ -96,13 +97,15 @@ WINBIND_SPROGS = @WINBIND_STARGETS@
 WINBIND_PAM_PROGS = @WINBIND_PAM_TARGETS@
 WINBIND_LPROGS = @WINBIND_LTARGETS@
 
-SPROGS = bin/smbd bin/nmbd bin/swat
-PROGS1 = bin/smbclient bin/smbspool bin/testparm bin/testprns bin/smbstatus 
bin/smbcontrol bin/tdbbackup bin/make_printerdef @RUNPROG@ 
-PROGS2 = bin/smbpasswd bin/make_smbcodepage bin/rpcclient bin/make_unicodemap 
bin/smbcacls @WRAPPROG@ @WRAP@ @WRAP32@ @PAM_MOD@ @PDBEDIT@ @LIBSMBCLIENT@
+SPROGS = bin/smbd$(EXEEXT) bin/nmbd$(EXEEXT) bin/swat$(EXEEXT)
+PROGS1 = bin/smbclient$(EXEEXT) bin/smbspool$(EXEEXT) bin/testparm$(EXEEXT) 
bin/testprns$(EXEEXT) bin/smbstatus$(EXEEXT) \
+   bin/smbcontrol$(EXEEXT) bin/tdbbackup$(EXEEXT) bin/make_printerdef$(EXEEXT) 
@RUNPROG@ 
+PROGS2 = bin/smbpasswd$(EXEEXT) bin/make_smbcodepage$(EXEEXT) bin/rpcclient$(EXEEXT) 
bin/make_unicodemap$(EXEEXT) \
+   bin/smbcacls$(EXEEXT) @WRAPPROG@ @WRAP@ @WRAP32@ @PAM_MOD@ @PDBEDIT@ 
@LIBSMBCLIENT@
 MPROGS = @MPROGS@
 LPROGS = $(WINBIND_PAM_PROGS) $(WINBIND_LPROGS)
-PROGS = $(PROGS1) $(PROGS2) $(MPROGS) bin/nmblookup
-TORTURE_PROGS = bin/smbtorture bin/msgtest bin/masktest bin/locktest bin/locktest2
+PROGS = $(PROGS1) $(PROGS2) $(MPROGS) bin/nmblookup$(EXEEXT)
+TORTURE_PROGS = bin/smbtorture$(EXEEXT) bin/msgtest$(EXEEXT) bin/masktest$(EXEEXT) 
bin/locktest$(EXEEXT) bin/locktest2$(EXEEXT)
 SHLIBS = @LIBSMBCLIENT@
 
 SCRIPTS = $(srcdir)/script/smbtar  $(srcdir)/script/findsmb
@@ -438,27 +441,28 @@ libsmbclient : CHECK bin/libsmbclient.a 
 
 torture : CHECK $(TORTURE_PROGS)
 
-smbtorture : CHECK bin/smbtorture
+smbtorture : CHECK bin/smbtorture$(EXEEXT)
+bin/smbtorture : CHECK bin/smbtorture$(EXEEXT)
 
-masktest : CHECK bin/masktest
+masktest : CHECK bin/masktest$(EXEEXT)
 
-msgtest : CHECK bin/msgtest
+msgtest : CHECK bin/msgtest$(EXEEXT)
 
-locktest : CHECK bin/locktest
+locktest : CHECK bin/locktest$(EXEEXT)
 
-smbcacls : CHECK bin/smbcacls
+smbcacls : CHECK bin/smbcacls$(EXEEXT)
 
-locktest2 : CHECK bin/locktest2
+locktest2 : CHECK bin/locktest2$(EXEEXT)
 
-rpctorture : CHECK bin/rpctorture
+rpctorture : CHECK bin/rpctorture$(EXEEXT)
 
-bin/rpccheck: $(RPCCHECK_OBJ) bin/.dummy
+bin/rpccheck$(EXEEXT): $(RPCCHECK_OBJ) bin/.dummy
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(RPCCHECK_OBJ) $(LDFLAGS) $(LIBS)
 
-debug2html : CHECK bin/debug2html
+debug2html : CHECK bin/debug2html$(EXEEXT)
 
-smbfilter : CHECK bin/smbfilter
+smbfilter : CHECK bin/smbfilter$(EXEEXT)
 
 nsswitch : CHECK $(WINBIND_PROGS) $(WINBIND_SPROGS) $(LPROGS)
 
@@ -512,128 +516,127 @@ bin/.dummy:
  dir=bin $(MAKEDIR); fi
@:  $@ || :  $@ # what a fancy emoticon!
 
-bin/smbd: $(SMBD_OBJ) bin/.dummy
+bin/smbd$(EXEEXT): $(SMBD_OBJ) bin/.dummy
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(SMBD_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) $(LDAPLIBS)
 
-bin/nmbd: $(NMBD_OBJ) bin/.dummy
+bin/nmbd$(EXEEXT): $(NMBD_OBJ) bin/.dummy
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(NMBD_OBJ) $(LDFLAGS) $(LIBS)
 
-bin/swat: $(SWAT_OBJ) bin/.dummy
+bin/swat$(EXEEXT): $(SWAT_OBJ) bin/.dummy
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(SWAT_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) $(LDAPLIBS) 
 
-bin/rpcclient: $(RPCCLIENT_OBJ) bin/.dummy
+bin/rpcclient$(EXEEXT): $(RPCCLIENT_OBJ) bin/.dummy
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(RPCCLIENT_OBJ) $(LDFLAGS) $(DYNEXP) $(TERMLDFLAGS) 
$(TERMLIBS) $(LIBS) $(LDAPLIBS)
 
-bin/smbclient: $(CLIENT_OBJ) bin/.dummy
+bin/smbclient$(EXEEXT): $(CLIENT_OBJ) bin/.dummy
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(CLIENT_OBJ) $(LDFLAGS) $(TERMLDFLAGS) $(TERMLIBS) 
$(LIBS)
 
-bin/smbspool: $(CUPS_OBJ) bin/.dummy
+bin/smbspool$(EXEEXT): $(CUPS_OBJ) bin/.dummy
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(CUPS_OBJ) $(LDFLAGS) $(LIBS)
 
-bin/smbmount: $(MOUNT_OBJ) bin/.dummy
+bin/smbmount$(EXEEXT): $(MOUNT_OBJ) bin/.dummy
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(MOUNT_OBJ) $(LDFLAGS) $(LIBS)
 
-bin/smbmnt: $(MNT_OBJ) bin/.dummy
+bin/smbmnt$(EXEEXT): $(MNT_OBJ) bin/.dummy
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(MNT_OBJ) $(LDFLAGS) $(LIBS)
 
-bin/smbumount: 

RE: [SECURITY] Samba 2.2.8 available for download

2003-03-30 Thread Green, Paul
Green, Paul [mailto:[EMAIL PROTECTED] wrote:
 The 2.2.8 release notes say:
 
  A buffer overrun condition exists in the SMB/CIFS packet fragment
  re-assembly code in smbd which would allow an attacker to cause smbd
  to overwrite arbitrary areas of memory in its own process address
  space. This could allow a skilled attacker to inject binary specific
  exploit code into smbd.

I have written a short test case (available upon request) to confirm that
Stratus VOS, when running on the HP PA-RISC hardware, is not susceptible to
such an attack.  While such an attack can indeed be used to insert code onto
the VOS stack, as soon as the processor attempts to begin executing the code
it will take a no-execute permission fault or an invalid-page fault.
Therefore, the last sentence of this warning in the 2.2.8 release notes
about inject[ing] binary specific exploit code into smbd does not apply to
VOS on HP PA-RISC.

As other experts have noted, there are probably other OS/Hardware
combinations that are also immune to this attack.  I hope other maintainers
will post such information so that we can have a public record, and not
needlessly scare our customers.

Thanks
PG
--
Paul Green, Senior Technical Consultant,
Stratus Technologies, Maynard, MA USA
Voice: +1 978-461-7557; FAX: +1 978-461-3610
Speaking from Stratus not for Stratus



Re: charset confusion

2003-03-30 Thread Stephan Kulow
Am Sunday 30 March 2003 22:46 schrieb Stephan Kulow:
 Am Sunday 30 March 2003 20:37 schrieb Stephan Kulow:
  Hi!
 
  I've done an experiment and configured my only windows
  system (german win98) in the LAN to be named häßlich
  and be in the workgroup möbel.
 
  Then tried testsmbc on smb://m%C3%B6bel/ (correctly
  UTF-8 escaped samba URL). That tried a broadcast for
  möbel1d, which I think it shouldn't. I'm not sure what
  exactly it's supposed to do, but surely not UTF-8.

 Checking the wire, it seems the conversion from UTF-8 worked
 fine, just the strupper() call that's happening on the input doesn't
 work. At least the string on the wire is M94BEL (MöBEL) for
 libsmbclient and M99BEL (MÖBEL) for smbtree.

 I then tried to change the strupper in push_ascii to a call
 to unix_strupper, but that failed too for me - but I'm continuing
 there :)

Good I looked, now I understand the code much better - and I haven't said
anything. Even though I'd suggest the following patch to source/Makefile.in:

-   @$(SHEEL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) 
$(DESTDIR)$(BASEDIR) $(DESTDIR)$(CHARSETLIBDIR) $(CHARSET_MODULES)
-   @$(SHEEL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) 
$(DESTDIR)$(BASEDIR) $(DESTDIR)$(AUTHLIBDIR) $(AUTH_MODULES)
+   @$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) 
$(DESTDIR)$(BASEDIR) $(DESTDIR)$(CHARSETLIBDIR) $(CHARSET_MODULES)
+   @$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) 
$(DESTDIR)$(BASEDIR) $(DESTDIR)$(AUTHLIBDIR) $(AUTH_MODULES)

Greetings, Stephan

-- 
Pace, Peace, Paix, Paz, Frieden, Pax, Pokój


status of unixsam and guest passdb backends?

2003-03-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Andrew,

I notice that the default for the passdb backend parameter has been 
changed in SAMBA_3_0/HEAD, but the man page has not been updated.
Since it was passdb backend =  unixsam that was breaking 
'smbpasswd -a', I'm wondering is unixsam even useful anymore?
Maybe for a clear text password server





cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+h3RIIR7qMdg1EfYRAvzzAKCPwvcmkgMly1iagvC+QdLAtMedQACg8NHV
zKNStAakPUCgKdwt6cXyjHo=
=cSZs
-END PGP SIGNATURE-



RE: [SECURITY] Samba 2.2.8 available for download

2003-03-30 Thread Andrew Bartlett
On Mon, 2003-03-31 at 06:12, Green, Paul wrote:
 Green, Paul [mailto:[EMAIL PROTECTED] wrote:
  The 2.2.8 release notes say:
  
   A buffer overrun condition exists in the SMB/CIFS packet fragment
   re-assembly code in smbd which would allow an attacker to cause smbd
   to overwrite arbitrary areas of memory in its own process address
   space. This could allow a skilled attacker to inject binary specific
   exploit code into smbd.
 
 I have written a short test case (available upon request) to confirm that
 Stratus VOS, when running on the HP PA-RISC hardware, is not susceptible to
 such an attack.  While such an attack can indeed be used to insert code onto
 the VOS stack, as soon as the processor attempts to begin executing the code
 it will take a no-execute permission fault or an invalid-page fault.
 Therefore, the last sentence of this warning in the 2.2.8 release notes
 about inject[ing] binary specific exploit code into smbd does not apply to
 VOS on HP PA-RISC.
 
 As other experts have noted, there are probably other OS/Hardware
 combinations that are also immune to this attack.  I hope other maintainers
 will post such information so that we can have a public record, and not
 needlessly scare our customers.

I would not be so confident.  You don't need to modify the code that
will be executed, or cause a jump to your exploit to cause mischief.  If
you can overwrite an arbitrary position in memory, I'm sure you can find
some variable that is critical to Samba's internal state, and go from
there.  

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part


Re: status of unixsam and guest passdb backends?

2003-03-30 Thread Andrew Bartlett
On Mon, 2003-03-31 at 08:48, Gerald (Jerry) Carter wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Andrew,
 
 I notice that the default for the passdb backend parameter has been 
 changed in SAMBA_3_0/HEAD, but the man page has not been updated.
 Since it was passdb backend =  unixsam that was breaking 
 'smbpasswd -a', I'm wondering is unixsam even useful anymore?
 Maybe for a clear text password server

Unixsam was a useful hack and a bad idea.  Most of what it was trying to
do it couldn't really do, and will be replaced by idmap.  I had wanted
all rid-uid translations to go via the passdb.  However, we still have
to map uid-rid for 'non-existant' accounts, so the fallback code never
got removed, and having unixsam just confused things (particularly when
we were running winbindd too).

It also broke a pile of conventions about the relationship between unix
and Samba accounts, as you correctly note.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part


Re: status of unixsam and guest passdb backends?

2003-03-30 Thread Andrew Bartlett
On Mon, 2003-03-31 at 09:48, Andrew Bartlett wrote:
 On Mon, 2003-03-31 at 08:48, Gerald (Jerry) Carter wrote:
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
  
  Andrew,
  
  I notice that the default for the passdb backend parameter has been 
  changed in SAMBA_3_0/HEAD, but the man page has not been updated.
  Since it was passdb backend =  unixsam that was breaking 
  'smbpasswd -a', I'm wondering is unixsam even useful anymore?
  Maybe for a clear text password server
 
 Unixsam was a useful hack and a bad idea.  Most of what it was trying to
 do it couldn't really do, and will be replaced by idmap.  I had wanted
 all rid-uid translations to go via the passdb.  However, we still have
 to map uid-rid for 'non-existant' accounts, so the fallback code never
 got removed, and having unixsam just confused things (particularly when
 we were running winbindd too).
 
 It also broke a pile of conventions about the relationship between unix
 and Samba accounts, as you correctly note.

Guestsam is in there to provide the only useful thing unixsam did -
ensuring that the guest account really was the guest, and had the guest
RID.  It also helped with some Win2k behavior that assumed the presence
of the guest account.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part


ldapsam failure in 2.2.8 on OSX-10.2.4, yet working fine in 2.2.5

2003-03-30 Thread satadru
Background:

I have a externally firewalled server running OS X Server, on which I have 
compiled samba 2.2.5 with ldapsam using the Makefile for samba on the Apple 
Public CVS servers (attached), since the version of Samba that comes with 
OS X Server does not have ldap support compiled in (Which I need to use 
Samba as a PDC that authenticates against the builtin ldap server).

The ONLY changes I made to get samba to compile were to remove an 
unnecessary LDFLAGS=-lresolv in the configure generated Makefile (only 
relevant for 2.2.5, fixed by 2.2.8), and  adding --with-ldapsam and a 
--disable-cups to the configure options in the Apple Makefile.

Upon hearing of the recent security advisory and recommended update to 
2.2.8 (and receiving and having to reinstall samba 2.2.5 on top of more 
recent apple software updates), I downloaded 2.2.8 and compiled using the 
exact same methodology as with 2.2.5:

extract 2.2.8
copy the Apple Makefile to the top directory of the samba source tree
run make
Problem:

Samba 2.2.8 successfully compiles, but when used to share a filesystem, 
consistently has a PANIC: failed to set gid right after it gets through 
successfully authenticating the password to the ldap server.

Thinking that perhaps this was a problem with my compiler setup (or some 
problem that has exhibited itself through the various OS updates that have 
come out since I first installed 10.2) I recompiled 2.2.5.  2.2.5 works 
just fine.

I also pulled SAMBA_2_2 from cvs, and had the same problem.  I have not 
backtracked through CVS to find the exact date of failure, but if 
necessary, I can do so to track down the problem.  Any assistance with 
tracking down this problem would be appreciated.

Any other useful data and logs can be made available upon request.

Sincerely
Satadru Pramanik
Systems Administrator
Intercooperative Council at the University of Michigan
Details:

All of the following output is from trying to open a connection to the same 
share on the server.

Smbd log output at point of failure in 2.2.8

[2003/03/30 14:28:45, 2] passdb/pdb_ldap.c:get_single_attribute(441)
 get_single_attribute: [acctFlags] = [[U]]
[2003/03/30 14:28:45, 0] lib/util_sec.c:assert_gid(111)
 Failed to set gid privileges to (0,1000) now set to (1000,1000) uid=(0,0)
[2003/03/30 14:28:45, 0] lib/util.c:smb_panic(1094)
 PANIC: failed to set gid
[2003/03/30 14:28:55, 2] smbd/reply.c:reply_special(91)

This as opposed to that of a working 2.2.5 at the exact same point:

[2003/03/30 14:42:30, 2] passdb/pdb_ldap.c:get_single_attribute(360)
 get_single_attribute: [acctFlags] = [[U]]
[2003/03/30 14:42:30, 2] smbd/open.c:open_file(230)
 satadru opened file startup.cmd read=Yes write=No (numopen=2)
[2003/03/30 14:42:30, 2] smbd/open.c:open_file(230)
 satadru opened file startup.cmd read=Yes write=No (numopen=3)
[2003/03/30 14:42:30, 2] smbd/close.c:close_normal_file(211)
Here is output from running the 2.2.8 smbd -i (with log level of 10):

smb_password_ok: Checking SMB password for user satadru
smb_password_ok: challenge received
smb_password_ok: Checking NT MD4 password
smb_password_ok: NT MD4 password check succeeded
lp_servicenumber: couldn't find satadru
adding home directory satadru at /Volumes/Data/Home/satadru
register_vuid: (1000,1000) satadru satadru ICC guest=0
register_vuid: allocated vuid = 100
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
Failed to set gid privileges to (0,1000) now set to (1000,1000) uid=(0,0)
PANIC: failed to set gid
working 2.2.5 output of smbd -i (with log level of 10):

smb_password_ok: Checking SMB password for user satadru
smb_password_ok: challenge received
smb_password_ok: Checking NT MD4 password
smb_password_ok: NT MD4 password check succeeded
lp_servicenumber: couldn't find satadru
adding home directory satadru at /Volumes/Data/Home/satadru
register_vuid: (1000,1000) satadru satadru ICC guest=0
register_vuid: allocated vuid = 101
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
get_current_groups: user is in 3 groups: 1000, 20, 42
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
get_current_groups: user is in 3 groups: 0, 20, 42
uid_to_sid: local 1000 - SID HERE
gid_to_sid: local 1000 - SID HERE
(this keeps going as this smbd doesn't panic)



--
[EMAIL PROTECTED]
For a successful technology, reality must take precedence over
public relations, for nature cannot be fooled.
-R. P. Feynman,
Personal observations on the reliability of the Shuttle

Makefile
Description: Binary data


Re: status of unixsam and guest passdb backends?

2003-03-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 31 Mar 2003, Andrew Bartlett wrote:

  Unixsam was a useful hack and a bad idea.  Most of what it was trying
  to do it couldn't really do, and will be replaced by idmap.  I had
  wanted all rid-uid translations to go via the passdb.  However, we
  still have to map uid-rid for 'non-existant' accounts, so the
  fallback code never got removed, and having unixsam just confused
  things (particularly when we were running winbindd too).
  
  It also broke a pile of conventions about the relationship between
  unix and Samba accounts, as you correctly note.
 
 Guestsam is in there to provide the only useful thing unixsam did -
 ensuring that the guest account really was the guest, and had the guest
 RID.  It also helped with some Win2k behavior that assumed the presence
 of the guest account.

Could you update smb.conf(5) to this effect?  Thanks.
Should unixsam support be removed altogether so people can't
break their servers by listing it in the passdb backends?




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+h4eCIR7qMdg1EfYRAktRAKDf+1/gZTwnuV+PAaYCj+pnihWZNgCdE7+U
XeN14E1wNJRj6Lo2Uk1KYRI=
=6ky/
-END PGP SIGNATURE-



Re: status of unixsam and guest passdb backends?

2003-03-30 Thread Andrew Bartlett
On Mon, 2003-03-31 at 10:10, Gerald (Jerry) Carter wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 On 31 Mar 2003, Andrew Bartlett wrote:
 
   Unixsam was a useful hack and a bad idea.  Most of what it was trying
   to do it couldn't really do, and will be replaced by idmap.  I had
   wanted all rid-uid translations to go via the passdb.  However, we
   still have to map uid-rid for 'non-existant' accounts, so the
   fallback code never got removed, and having unixsam just confused
   things (particularly when we were running winbindd too).
   
   It also broke a pile of conventions about the relationship between
   unix and Samba accounts, as you correctly note.
  
  Guestsam is in there to provide the only useful thing unixsam did -
  ensuring that the guest account really was the guest, and had the guest
  RID.  It also helped with some Win2k behavior that assumed the presence
  of the guest account.
 
 Could you update smb.conf(5) to this effect?  Thanks.

Sure.

 Should unixsam support be removed altogether so people can't
 break their servers by listing it in the passdb backends?

Hmm...  Possibly.  On a system that has all authentication otherwise
redirected, it might have some value, but that's marginal.  It's only
current value is in sid-name and name-sid translations.  

My intention is to separate the sid-name issue into another layer, much
in the same way that the idmap is being split off.  That way we can do
the simple sid-name mapping for 'unix' users, but don't commit to
having a full passdb record for them.  I'll have to see how this impacts
on things like domain joins however.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part


New modules system and vfs_done

2003-03-30 Thread Andrew Bartlett
As per my recent commit, the new (VFS) modules system completely breaks
on tree disconnect!

We need to separate the different cases - the compat and the central
modules, and provide either a flag or a function pointer to the correct
way to shut down a module.

The code in conn_close is really in the wrong place - it's dealing with
the VFS, not the connection. 

And how should a internal module 'end' it's operations anyway?  We don't
seem to have that coded up at all...

Andrew Bartlett
-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part


Problems with ACL support in Samba 2.2.5 - 2.2.8

2003-03-30 Thread Johannes Tyve
Trying to add users using security tab i WinXP doesn't work for us, no 
users are added. Existing ACLs are possible to change and delete.

This behavior has been identified with both Solaris 2.6, Linux 2.4.9-31 
with XFS,  Samba 2.2.5 and 2.2.8. I'm attaching global part of out 
smb.conf and a snippet from the log.

Regards,
Johannes

smb.conf:
[global]
workgroup = SGU
security = DOMAIN
encrypt passwords = Yes
min passwd length = 6
password server = sys4 sgu4
username map = /usr/local/samba/lib/users.map
log file = /var/opt/samba/log/%m
deadtime = 10
character set = ISO8859-1
wins server = 10.1.20.104
invalid users = smsclitoknacct smsclisvcacct
create mask = 0644
host msdfs = yes
inherit acls = yes
log level = 2

Log:

[2003/03/28 16:09:27, 2] lib/util_sock.c:open_socket_out(873)
  error connecting to 10.1.20.104:445 (Connection refused)
[2003/03/28 16:09:28, 1] smbd/service.c:make_connection(636)
  sp078 (10.1.20.94) connect to service lab as user jste (uid=133, 
gid=100) (pid 10936)
[2003/03/28 16:09:39, 0] smbd/service.c:make_connection(251)
  sp078 (10.1.20.94) couldn't find service la
[2003/03/28 16:09:42, 2] 
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2050)
  Returning domain sid for domain PCHYD29 - 
S-1-5-21-195616947-1880241807-4126645089
[2003/03/28 16:09:42, 2] passdb/pdb_smbpasswd.c:startsmbfilepwent(170)
  startsmbfilepwent_internal: unable to open file /etc/samba/smbpasswd. 
Error was No such file or directory
[2003/03/28 16:09:42, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1418)
  unable to open passdb database.
[2003/03/28 16:09:46, 0] smbd/posix_acls.c:create_canon_ace_lists(1017)
  create_canon_ace_lists: unable to map SID 
S-1-5-21-1444693150-211357965-837300805-2170 to uid or gid.
[2003/03/28 16:11:25, 0] smbd/service.c:make_connection(251)
  sp078 (10.1.20.94) couldn't find service la
[2003/03/28 16:11:28, 2] 
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2050)
  Returning domain sid for domain PCHYD29 - 
S-1-5-21-195616947-1880241807-4126645089
[2003/03/28 16:11:35, 0] smbd/posix_acls.c:create_canon_ace_lists(1017)
  create_canon_ace_lists: unable to map SID 
S-1-5-21-1444693150-211357965-837300805-1084 to uid or gid.
[2003/03/28 16:11:37, 0] smbd/service.c:make_connection(251)
  sp078 (10.1.20.94) couldn't find service la
[2003/03/28 16:11:39, 2] 
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2050)
  Returning domain sid for domain PCHYD29 - 
S-1-5-21-195616947-1880241807-4126645089
[2003/03/28 16:12:06, 0] smbd/service.c:make_connection(251)
  sp078 (10.1.20.94) couldn't find service la
[2003/03/28 16:12:08, 2] 
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2050)
  Returning domain sid for domain PCHYD29 - 
S-1-5-21-195616947-1880241807-4126645089
[2003/03/28 16:12:17, 0] smbd/posix_acls.c:create_canon_ace_lists(1017)
  create_canon_ace_lists: unable to map SID 
S-1-5-21-1444693150-211357965-837300805-1029 to uid or gid.
[2003/03/28 16:13:35, 1] smbd/service.c:close_cnum(675)
  sp078 (10.1.20.94) closed connection to service lab
[2003/03/28 16:13:35, 2] smbd/server.c:exit_server(511)


Re: [patch] uppercase workgroup in browse request

2003-03-30 Thread Christopher R. Hertel
On Sun, Mar 30, 2003 at 04:03:45PM +0200, Stephan Kulow wrote:
:
  There's a question above.  I asked Do I read this correctly?.
 You added a smiley behind it, so it appeared ironicly to me.

It was just an attempt to appear friendly.

  So, what is your intention with this patch?  What was the problem you were
  detecting?  You never specified.  Before I dig into the patch I want to
  know what you are trying to accomplish.
 
 Well, host names in URLs are usually case insensitive and with samba servers
 smb://mygrp gives indeed the same as smb://MYGRP. But not when the server
 is running winME, win98 or XP (that's the versions I tried). As KDE's URL 
 handling lower cases the host part (and that's what MYGRP is), you'll 
 notice.

The problem is that NetBIOS names are supposed to be upper case, though 
Windows sometimes gets this wrong.  Samba decodes the wire-format of the 
name and uses a case insensitive comparison.  Windows systems do not 
decode the wire format, so their comparison is case sensitive.

 Meanwhile Andrew pointed out that my patch wasn't safe, so I changed it to
 use STR_UPPER.

Please check that the correct patch was applied.  I believe Richard Sharpe 
(who is the primary maintainer of libsmbclient) has applied a fix, which 
should be in the current CVS.

Thanks!

Chris -)-

PS.  Will you be at the Samba/eXPo conference?

-- 
Samba Team -- http://www.samba.org/ -)-   Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/   -)-   ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/ -)-   [EMAIL PROTECTED]
OnLineBook -- http://ubiqx.org/cifs/-)-   [EMAIL PROTECTED]


Re: How to verify the domain secret is good or bad?

2003-03-30 Thread Joey Collins


Gerald (Jerry) Carter wrote:
 

[snip]

  Also, sometimes I saw problems like wbinfo -t just says secret is bad,
  when all the daemons were running.  It sure was good at some point before.
 
 Samba periodially changes the password on the server.  secrets.tdb should
 be in sync with this.

Hi,

Why does Samba do this?  Does the secret expire after a certain period
of time or is this done as a safety precaution?

thanks,
Joey.


CVS update: samba/source/libsmb

2003-03-30 Thread tridge

Date:   Sun Mar 30 09:45:37 2003
Author: tridge

Update of /home/cvs/samba/source/libsmb
In directory dp.samba.org:/tmp/cvs-serv13375

Modified Files:
clifile.c 
Log Message:
added simple tests for SMBchkpath and SMBioctl


Revisions:
clifile.c   1.45 = 1.46

http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/clifile.c?r1=1.45r2=1.46


CVS update: samba/source/torture

2003-03-30 Thread tridge

Date:   Sun Mar 30 09:45:45 2003
Author: tridge

Update of /home/cvs/samba/source/torture
In directory dp.samba.org:/tmp/cvs-serv13413

Modified Files:
torture.c 
Log Message:
added simple tests for SMBchkpath and SMBioctl


Revisions:
torture.c   1.89 = 1.90

http://www.samba.org/cgi-bin/cvsweb/samba/source/torture/torture.c?r1=1.89r2=1.90


CVS update: samba/docs

2003-03-30 Thread jelmer

Date:   Sun Mar 30 11:22:19 2003
Author: jelmer

Update of /home/cvs/samba/docs
In directory dp.samba.org:/tmp/cvs-serv22074

Modified Files:
Samba-HOWTO-Collection.pdf 
Log Message:

- Regenerate docs
- Document 'preload modules'


Revisions:
Samba-HOWTO-Collection.pdf  1.27 = 1.28

http://www.samba.org/cgi-bin/cvsweb/samba/docs/Samba-HOWTO-Collection.pdf?r1=1.27r2=1.28


CVS update: samba/docs/docbook/smbdotconf/misc

2003-03-30 Thread jelmer

Date:   Sun Mar 30 11:22:20 2003
Author: jelmer

Update of /home/cvs/samba/docs/docbook/smbdotconf/misc
In directory dp.samba.org:/tmp/cvs-serv22074/docbook/smbdotconf/misc

Added Files:
preloadmodules.xml 
Log Message:

- Regenerate docs
- Document 'preload modules'


Revisions:
preloadmodules.xml  NONE = 1.1

http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/smbdotconf/misc/preloadmodules.xml?rev=1.1


CVS update: samba/docs/htmldocs

2003-03-30 Thread jelmer

Date:   Sun Mar 30 11:22:22 2003
Author: jelmer

Update of /home/cvs/samba/docs/htmldocs
In directory dp.samba.org:/tmp/cvs-serv22074/htmldocs

Modified Files:
Samba-HOWTO-Collection.html ads.html appendixes.html 
bugreport.html compiling.html diagnosis.html 
domain-security.html groupmapping.html groupprofiles.html 
improved-browsing.html integrate-ms-networks.html 
introduction.html msdfs.html optional.html other-clients.html 
pam.html passdb.html portability.html printing.html 
samba-bdc.html samba-howto-collection.html samba-pdc.html 
securing-samba.html securitylevels.html speed.html type.html 
unix-permissions.html vfs.html winbind.html 
Log Message:

- Regenerate docs
- Document 'preload modules'


Revisions:
Samba-HOWTO-Collection.html 1.20 = 1.21

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/Samba-HOWTO-Collection.html?r1=1.20r2=1.21
ads.html1.5 = 1.6
http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/ads.html?r1=1.5r2=1.6
appendixes.html 1.4 = 1.5

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/appendixes.html?r1=1.4r2=1.5
bugreport.html  1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/bugreport.html?r1=1.8r2=1.9
compiling.html  1.1 = 1.2

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/compiling.html?r1=1.1r2=1.2
diagnosis.html  1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/diagnosis.html?r1=1.8r2=1.9
domain-security.html1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/domain-security.html?r1=1.8r2=1.9
groupmapping.html   1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/groupmapping.html?r1=1.8r2=1.9
groupprofiles.html  1.2 = 1.3

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/groupprofiles.html?r1=1.2r2=1.3
improved-browsing.html  1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/improved-browsing.html?r1=1.8r2=1.9
integrate-ms-networks.html  1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/integrate-ms-networks.html?r1=1.8r2=1.9
introduction.html   1.4 = 1.5

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/introduction.html?r1=1.4r2=1.5
msdfs.html  1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/msdfs.html?r1=1.8r2=1.9
optional.html   1.4 = 1.5

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/optional.html?r1=1.4r2=1.5
other-clients.html  1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/other-clients.html?r1=1.8r2=1.9
pam.html1.8 = 1.9
http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/pam.html?r1=1.8r2=1.9
passdb.html 1.2 = 1.3

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/passdb.html?r1=1.2r2=1.3
portability.html1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/portability.html?r1=1.8r2=1.9
printing.html   1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/printing.html?r1=1.8r2=1.9
samba-bdc.html  1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/samba-bdc.html?r1=1.8r2=1.9
samba-howto-collection.html 1.5 = 1.6

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/samba-howto-collection.html?r1=1.5r2=1.6
samba-pdc.html  1.5 = 1.6

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/samba-pdc.html?r1=1.5r2=1.6
securing-samba.html 1.1 = 1.2

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/securing-samba.html?r1=1.1r2=1.2
securitylevels.html 1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/securitylevels.html?r1=1.8r2=1.9
speed.html  1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/speed.html?r1=1.8r2=1.9
type.html   1.4 = 1.5
http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/type.html?r1=1.4r2=1.5
unix-permissions.html   1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/unix-permissions.html?r1=1.8r2=1.9
vfs.html1.4 = 1.5
http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/vfs.html?r1=1.4r2=1.5
winbind.html1.15 = 1.16

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/winbind.html?r1=1.15r2=1.16


CVS update: samba/docs/manpages

2003-03-30 Thread jelmer

Date:   Sun Mar 30 11:22:22 2003
Author: jelmer

Update of /home/cvs/samba/docs/manpages
In directory dp.samba.org:/tmp/cvs-serv22074/manpages

Modified Files:
nmbd.8 pdbedit.8 smb.conf.5 smbsh.1 winbindd.8 
Log Message:

- Regenerate docs
- Document 'preload modules'


Revisions:
nmbd.8  1.56 = 1.57
http://www.samba.org/cgi-bin/cvsweb/samba/docs/manpages/nmbd.8?r1=1.56r2=1.57
pdbedit.8   1.12 = 1.13

http://www.samba.org/cgi-bin/cvsweb/samba/docs/manpages/pdbedit.8?r1=1.12r2=1.13
smb.conf.5  1.138 = 1.139

http://www.samba.org/cgi-bin/cvsweb/samba/docs/manpages/smb.conf.5?r1=1.138r2=1.139
smbsh.1 1.17 = 1.18
http://www.samba.org/cgi-bin/cvsweb/samba/docs/manpages/smbsh.1?r1=1.17r2=1.18
winbindd.8  1.25 = 1.26

http://www.samba.org/cgi-bin/cvsweb/samba/docs/manpages/winbindd.8?r1=1.25r2=1.26


CVS update: samba/docs/docbook/manpages

2003-03-30 Thread jelmer

Date:   Sun Mar 30 11:22:20 2003
Author: jelmer

Update of /home/cvs/samba/docs/docbook/manpages
In directory dp.samba.org:/tmp/cvs-serv22074/docbook/manpages

Modified Files:
smb.conf.5.sgml 
Log Message:

- Regenerate docs
- Document 'preload modules'


Revisions:
smb.conf.5.sgml 1.82 = 1.83

http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/manpages/smb.conf.5.sgml?r1=1.82r2=1.83


CVS update: samba/source/lib

2003-03-30 Thread jelmer

Date:   Sun Mar 30 12:42:18 2003
Author: jelmer

Update of /home/cvs/samba/source/lib
In directory dp.samba.org:/tmp/cvs-serv28420/lib

Modified Files:
module.c 
Log Message:

- Point users at the HOWTO Collection instead of 'README' in modules/mysql.c
- Make passdb work with absolute paths (passdb backend = /path/to/smbpasswd.so works 
now). vfs, rpc and charset will follow


Revisions:
module.c1.9 = 1.10
http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/module.c?r1=1.9r2=1.10


CVS update: samba/source/passdb

2003-03-30 Thread jelmer

Date:   Sun Mar 30 12:42:18 2003
Author: jelmer

Update of /home/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv28420/passdb

Modified Files:
pdb_interface.c 
Log Message:

- Point users at the HOWTO Collection instead of 'README' in modules/mysql.c
- Make passdb work with absolute paths (passdb backend = /path/to/smbpasswd.so works 
now). vfs, rpc and charset will follow


Revisions:
pdb_interface.c 1.39 = 1.40

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_interface.c?r1=1.39r2=1.40


CVS update: samba/source/utils

2003-03-30 Thread jelmer

Date:   Sun Mar 30 12:42:18 2003
Author: jelmer

Update of /home/cvs/samba/source/utils
In directory dp.samba.org:/tmp/cvs-serv28420/utils

Modified Files:
pdbedit.c 
Log Message:

- Point users at the HOWTO Collection instead of 'README' in modules/mysql.c
- Make passdb work with absolute paths (passdb backend = /path/to/smbpasswd.so works 
now). vfs, rpc and charset will follow


Revisions:
pdbedit.c   1.77 = 1.78

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/pdbedit.c?r1=1.77r2=1.78


CVS update: samba/source/modules

2003-03-30 Thread jelmer

Date:   Sun Mar 30 12:42:18 2003
Author: jelmer

Update of /home/cvs/samba/source/modules
In directory dp.samba.org:/tmp/cvs-serv28420/modules

Modified Files:
mysql.c 
Log Message:

- Point users at the HOWTO Collection instead of 'README' in modules/mysql.c
- Make passdb work with absolute paths (passdb backend = /path/to/smbpasswd.so works 
now). vfs, rpc and charset will follow


Revisions:
mysql.c 1.4 = 1.5
http://www.samba.org/cgi-bin/cvsweb/samba/source/modules/mysql.c?r1=1.4r2=1.5


CVS update: samba/source/smbd

2003-03-30 Thread vlendec

Date:   Sun Mar 30 16:36:21 2003
Author: vlendec

Update of /data/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv14118/smbd

Modified Files:
service.c 
Log Message:
This changes our handling of invalid service types that the
client requested on tconx. We now return the same error
code like NT4SP6 and W2kSP3 return.

TCONDEV is a little test for this.

Volker


Revisions:
service.c   1.117 = 1.118

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/service.c?r1=1.117r2=1.118


CVS update: samba/source/torture

2003-03-30 Thread vlendec

Date:   Sun Mar 30 16:36:21 2003
Author: vlendec

Update of /data/cvs/samba/source/torture
In directory dp.samba.org:/tmp/cvs-serv14118/torture

Modified Files:
torture.c 
Log Message:
This changes our handling of invalid service types that the
client requested on tconx. We now return the same error
code like NT4SP6 and W2kSP3 return.

TCONDEV is a little test for this.

Volker


Revisions:
torture.c   1.90 = 1.91

http://www.samba.org/cgi-bin/cvsweb/samba/source/torture/torture.c?r1=1.90r2=1.91


CVS update: samba/source/smbd

2003-03-30 Thread vlendec

Date:   Sun Mar 30 16:37:10 2003
Author: vlendec

Update of /data/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv14452/smbd

Modified Files:
  Tag: SAMBA_3_0
service.c 
Log Message:
This changes our handling of invalid service types that the
client requested on tconx. We now return the same error
code like NT4SP6 and W2kSP3 return.

TCONDEV is a little test for this.

Volker



Revisions:
service.c   1.85.2.12 = 1.85.2.13

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/service.c?r1=1.85.2.12r2=1.85.2.13


CVS update: samba/source/passdb

2003-03-30 Thread vlendec

Date:   Sun Mar 30 16:40:13 2003
Author: vlendec

Update of /data/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv14634

Modified Files:
pdb_ldap.c 
Log Message:
This fixes group updates in LDAP the same way as user updates 
are handled, though we assume that always everything needs to
be updated in LDAP. PDB_IS_* is not done yet for groups. 
Do we need it?

Volker


Revisions:
pdb_ldap.c  1.96 = 1.97

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_ldap.c?r1=1.96r2=1.97


CVS update: samba/source/passdb

2003-03-30 Thread vlendec

Date:   Sun Mar 30 16:40:42 2003
Author: vlendec

Update of /data/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv14755

Modified Files:
  Tag: SAMBA_3_0
pdb_ldap.c 
Log Message:
This fixes group updates in LDAP the same way as user updates 
are handled, though we assume that always everything needs to
be updated in LDAP. PDB_IS_* is not done yet for groups. 
Do we need it?

Volker


Revisions:
pdb_ldap.c  1.28.2.30 = 1.28.2.31

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_ldap.c?r1=1.28.2.30r2=1.28.2.31


CVS update: samba/source/utils

2003-03-30 Thread vlendec

Date:   Sun Mar 30 16:46:04 2003
Author: vlendec

Update of /data/cvs/samba/source/utils
In directory dp.samba.org:/tmp/cvs-serv15362

Modified Files:
  Tag: SAMBA_3_0
net_rpc_samsync.c 
Log Message:
This sets the domain for the user in vampire. Otherwise
we end up with an empty domain field, which a workstation 
does not really like in sam_logon..

Volker


Revisions:
net_rpc_samsync.c   1.8.2.10 = 1.8.2.11

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/net_rpc_samsync.c?r1=1.8.2.10r2=1.8.2.11


CVS update: samba/source/utils

2003-03-30 Thread vlendec

Date:   Sun Mar 30 16:46:28 2003
Author: vlendec

Update of /data/cvs/samba/source/utils
In directory dp.samba.org:/tmp/cvs-serv15417

Modified Files:
net_rpc_samsync.c 
Log Message:
This sets the domain for the user in vampire. Otherwise
we end up with an empty domain field, which a workstation 
does not really like in sam_logon..

Volker


Revisions:
net_rpc_samsync.c   1.19 = 1.20

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/net_rpc_samsync.c?r1=1.19r2=1.20


Re: CVS update: samba/source/passdb

2003-03-30 Thread Andrew Bartlett
On Mon, 2003-03-31 at 02:40, [EMAIL PROTECTED] wrote:
 
 Date: Sun Mar 30 16:40:42 2003
 Author:   vlendec
 
 Update of /data/cvs/samba/source/passdb
 In directory dp.samba.org:/tmp/cvs-serv14755
 
 Modified Files:
   Tag: SAMBA_3_0
   pdb_ldap.c 
 Log Message:
 This fixes group updates in LDAP the same way as user updates 
 are handled, though we assume that always everything needs to
 be updated in LDAP. PDB_IS_* is not done yet for groups. 
 Do we need it?

I think we do, but that is slightly longer term.

Thanks for doing this!

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part


CVS update: samba/source

2003-03-30 Thread jelmer

Date:   Sun Mar 30 21:23:01 2003
Author: jelmer

Update of /home/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv6510

Modified Files:
Makefile.in 
Log Message:

Fix installation of auth and charset modules (reported by Stephan Kulow)


Revisions:
Makefile.in 1.656 = 1.657
http://www.samba.org/cgi-bin/cvsweb/samba/source/Makefile.in?r1=1.656r2=1.657


CVS update: samba/source/smbd

2003-03-30 Thread jerry

Date:   Sun Mar 30 23:03:11 2003
Author: jerry

Update of /data/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv14510/smbd

Modified Files:
  Tag: SAMBA_3_0
server.c 
Log Message:
update copyright notice since it we are now almost 4 months into 2003

Revisions:
server.c1.372.2.15 = 1.372.2.16

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/server.c?r1=1.372.2.15r2=1.372.2.16


CVS update: samba/source/nmbd

2003-03-30 Thread jerry

Date:   Sun Mar 30 23:03:11 2003
Author: jerry

Update of /data/cvs/samba/source/nmbd
In directory dp.samba.org:/tmp/cvs-serv14510/nmbd

Modified Files:
  Tag: SAMBA_3_0
nmbd.c 
Log Message:
update copyright notice since it we are now almost 4 months into 2003

Revisions:
nmbd.c  1.134.2.8 = 1.134.2.9

http://www.samba.org/cgi-bin/cvsweb/samba/source/nmbd/nmbd.c?r1=1.134.2.8r2=1.134.2.9


CVS update: samba/source/smbd

2003-03-30 Thread jerry

Date:   Sun Mar 30 23:03:27 2003
Author: jerry

Update of /data/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv14583/smbd

Modified Files:
server.c 
Log Message:
update copyright notice since it we are now almost 4 months into 2003

Revisions:
server.c1.417 = 1.418

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/server.c?r1=1.417r2=1.418


CVS update: samba/source/nmbd

2003-03-30 Thread jerry

Date:   Sun Mar 30 23:03:27 2003
Author: jerry

Update of /data/cvs/samba/source/nmbd
In directory dp.samba.org:/tmp/cvs-serv14583/nmbd

Modified Files:
nmbd.c 
Log Message:
update copyright notice since it we are now almost 4 months into 2003

Revisions:
nmbd.c  1.151 = 1.152
http://www.samba.org/cgi-bin/cvsweb/samba/source/nmbd/nmbd.c?r1=1.151r2=1.152


CVS update: samba/source/include

2003-03-30 Thread jerry

Date:   Sun Mar 30 23:04:17 2003
Author: jerry

Update of /data/cvs/samba/source/include
In directory dp.samba.org:/tmp/cvs-serv14689/include

Modified Files:
  Tag: SAMBA_2_2
version.h 
Log Message:
update copyright notice since it we are now almost 4 months into 2003

Revisions:
version.h   1.74.6.21 = 1.74.6.22

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/version.h?r1=1.74.6.21r2=1.74.6.22


CVS update: samba/source/smbd

2003-03-30 Thread jerry

Date:   Sun Mar 30 23:04:17 2003
Author: jerry

Update of /data/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv14689/smbd

Modified Files:
  Tag: SAMBA_2_2
server.c 
Log Message:
update copyright notice since it we are now almost 4 months into 2003

Revisions:
server.c1.305.2.51 = 1.305.2.52

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/server.c?r1=1.305.2.51r2=1.305.2.52


CVS update: samba/source/nmbd

2003-03-30 Thread jerry

Date:   Sun Mar 30 23:04:17 2003
Author: jerry

Update of /data/cvs/samba/source/nmbd
In directory dp.samba.org:/tmp/cvs-serv14689/nmbd

Modified Files:
  Tag: SAMBA_2_2
nmbd.c 
Log Message:
update copyright notice since it we are now almost 4 months into 2003

Revisions:
nmbd.c  1.105.2.20 = 1.105.2.21

http://www.samba.org/cgi-bin/cvsweb/samba/source/nmbd/nmbd.c?r1=1.105.2.20r2=1.105.2.21


CVS update: samba/docs

2003-03-30 Thread jht

Date:   Sun Mar 30 23:21:51 2003
Author: jht

Update of /home/cvs/samba/docs
In directory dp.samba.org:/tmp/cvs-serv16306

Modified Files:
  Tag: SAMBA_3_0
Samba-HOWTO-Collection.pdf 
Log Message:
Updating from HEAD branch.


Revisions:
Samba-HOWTO-Collection.pdf  1.14.2.7 = 1.14.2.8

http://www.samba.org/cgi-bin/cvsweb/samba/docs/Samba-HOWTO-Collection.pdf?r1=1.14.2.7r2=1.14.2.8


CVS update: samba/source

2003-03-30 Thread tpot

Date:   Sun Mar 30 23:44:22 2003
Author: tpot

Update of /data/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv18119

Modified Files:
Makefile.in 
Log Message:
distclean fixups from Paul Green.


Revisions:
Makefile.in 1.657 = 1.658
http://www.samba.org/cgi-bin/cvsweb/samba/source/Makefile.in?r1=1.657r2=1.658


CVS update: samba/source/include

2003-03-30 Thread jerry

Date:   Mon Mar 31 00:53:03 2003
Author: jerry

Update of /data/cvs/samba/source/include
In directory dp.samba.org:/tmp/cvs-serv29749/source/include

Modified Files:
  Tag: SAMBA_3_0
version.h 
Log Message:
set version string

Revisions:
version.h   1.82.2.8 = 1.82.2.9

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/version.h?r1=1.82.2.8r2=1.82.2.9


CVS update: samba/source/rpc_server

2003-03-30 Thread jerry

Date:   Mon Mar 31 00:59:58 2003
Author: jerry

Update of /data/cvs/samba/source/rpc_server
In directory dp.samba.org:/tmp/cvs-serv1360/source/rpc_server

Modified Files:
  Tag: SAMBA_3_0
srv_spoolss_nt.c 
Log Message:
add a few error checks in EnumPrinterData()

Revisions:
srv_spoolss_nt.c1.277.2.48 = 1.277.2.49

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c?r1=1.277.2.48r2=1.277.2.49


CVS update: samba/source/rpc_server

2003-03-30 Thread jerry

Date:   Mon Mar 31 01:00:34 2003
Author: jerry

Update of /data/cvs/samba/source/rpc_server
In directory dp.samba.org:/tmp/cvs-serv1870/source/rpc_server

Modified Files:
srv_spoolss_nt.c 
Log Message:
add a few error checks in EnumPrinterData()

Revisions:
srv_spoolss_nt.c1.391 = 1.392

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c?r1=1.391r2=1.392


CVS update: samba/source/smbd

2003-03-30 Thread abartlet

Date:   Mon Mar 31 01:08:59 2003
Author: abartlet

Update of /data/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv6940/smbd

Modified Files:
conn.c 
Log Message:
Don't try and dlsym or dlclose a NULL pointer.

The new modules system does not always dlopen() it's modules, and when it 
does, it keeps them open for the life of the server, not the life of the 
connection.

This caused a segfault on every tree disconnect!

Andrew Bartlett


Revisions:
conn.c  1.22 = 1.23
http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/conn.c?r1=1.22r2=1.23


CVS update: samba/source/smbd

2003-03-30 Thread abartlet

Date:   Mon Mar 31 01:30:19 2003
Author: abartlet

Update of /data/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv21891/smbd

Modified Files:
vfs.c 
Log Message:
Success is not a level-0 issue...

Andrew Bartlett


Revisions:
vfs.c   1.74 = 1.75
http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/vfs.c?r1=1.74r2=1.75


CVS update: samba/source

2003-03-30 Thread tpot

Date:   Mon Mar 31 01:44:43 2003
Author: tpot

Update of /data/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv31459

Modified Files:
Makefile.in 
Log Message:
Break the current build dependency on perl.  Perl is required for
include/tdbsam2_parse_info.h which is included by sam/gumm_tdb.c which
doesn't seem to be used anywhere.

It would be nice to have the tdbsam2 stuff hidden behind a --with
configuration parameter so it doesn't interfere with normal builds.

(One of the build farm machines doesn't have perl installed).


Revisions:
Makefile.in 1.658 = 1.659
http://www.samba.org/cgi-bin/cvsweb/samba/source/Makefile.in?r1=1.658r2=1.659


CVS update: samba/docs/docbook/manpages

2003-03-30 Thread jerry

Date:   Mon Mar 31 01:57:13 2003
Author: jerry

Update of /data/cvs/samba/docs/docbook/manpages
In directory dp.samba.org:/tmp/cvs-serv6803/docbook/manpages

Modified Files:
  Tag: SAMBA_3_0
pdbedit.8.sgml smb.conf.5.sgml 
Log Message:
updated passdb backend parameter

Revisions:
pdbedit.8.sgml  1.3.4.8 = 1.3.4.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/manpages/pdbedit.8.sgml?r1=1.3.4.8r2=1.3.4.9
smb.conf.5.sgml 1.24.2.19 = 1.24.2.20

http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/manpages/smb.conf.5.sgml?r1=1.24.2.19r2=1.24.2.20


CVS update: samba/docs/htmldocs

2003-03-30 Thread jerry

Date:   Mon Mar 31 01:57:15 2003
Author: jerry

Update of /data/cvs/samba/docs/htmldocs
In directory dp.samba.org:/tmp/cvs-serv6803/htmldocs

Modified Files:
  Tag: SAMBA_3_0
pdbedit.8.html smb.conf.5.html 
Log Message:
updated passdb backend parameter

Revisions:
pdbedit.8.html  1.2.4.4 = 1.2.4.5

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/pdbedit.8.html?r1=1.2.4.4r2=1.2.4.5
smb.conf.5.html 1.29.2.8 = 1.29.2.9

http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/smb.conf.5.html?r1=1.29.2.8r2=1.29.2.9


CVS update: samba/docs/manpages

2003-03-30 Thread jerry

Date:   Mon Mar 31 01:57:16 2003
Author: jerry

Update of /data/cvs/samba/docs/manpages
In directory dp.samba.org:/tmp/cvs-serv6803/manpages

Modified Files:
  Tag: SAMBA_3_0
pdbedit.8 smb.conf.5 
Log Message:
updated passdb backend parameter

Revisions:
pdbedit.8   1.4.4.6 = 1.4.4.7

http://www.samba.org/cgi-bin/cvsweb/samba/docs/manpages/pdbedit.8?r1=1.4.4.6r2=1.4.4.7
smb.conf.5  1.119.2.11 = 1.119.2.12

http://www.samba.org/cgi-bin/cvsweb/samba/docs/manpages/smb.conf.5?r1=1.119.2.11r2=1.119.2.12


CVS update: samba

2003-03-30 Thread jerry

Date:   Mon Mar 31 02:21:37 2003
Author: jerry

Update of /data/cvs/samba
In directory dp.samba.org:/tmp/cvs-serv24178

Modified Files:
  Tag: SAMBA_3_0
WHATSNEW.txt 
Log Message:
updating release notes for next alpha

Revisions:
WHATSNEW.txt1.52.2.12 = 1.52.2.13

http://www.samba.org/cgi-bin/cvsweb/samba/WHATSNEW.txt?r1=1.52.2.12r2=1.52.2.13


CVS update: samba

2003-03-30 Thread jerry

Date:   Mon Mar 31 02:29:19 2003
Author: jerry

Update of /data/cvs/samba
In directory dp.samba.org:/tmp/cvs-serv29070

Modified Files:
  Tag: SAMBA_3_0
WHATSNEW.txt 
Log Message:
update version number in release notes

Revisions:
WHATSNEW.txt1.52.2.13 = 1.52.2.14

http://www.samba.org/cgi-bin/cvsweb/samba/WHATSNEW.txt?r1=1.52.2.13r2=1.52.2.14


CVS update: samba/source/smbd

2003-03-30 Thread abartlet

Date:   Mon Mar 31 02:30:49 2003
Author: abartlet

Update of /data/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv29840/smbd

Modified Files:
reply.c 
Log Message:
NT4 is particularly fussy about getting this right.

Andrew Bartlett


Revisions:
reply.c 1.424 = 1.425
http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/reply.c?r1=1.424r2=1.425


CVS update: samba

2003-03-30 Thread jerry

Date:   Mon Mar 31 02:36:31 2003
Author: jerry

Update of /data/cvs/samba
In directory dp.samba.org:/tmp/cvs-serv1171

Modified Files:
  Tag: SAMBA_3_0
WHATSNEW.txt 
Log Message:
preparing for release of 3.0alpha23

Revisions:
WHATSNEW.txt1.52.2.14 = 1.52.2.15

http://www.samba.org/cgi-bin/cvsweb/samba/WHATSNEW.txt?r1=1.52.2.14r2=1.52.2.15


CVS update: samba

2003-03-30 Thread jerry

Date:   Mon Mar 31 03:07:13 2003
Author: jerry

Update of /data/cvs/samba
In directory dp.samba.org:/tmp/cvs-serv15532

Modified Files:
  Tag: SAMBA_3_0
WHATSNEW.txt 
Log Message:
preparing for release of 3.0alpha23

Revisions:
WHATSNEW.txt1.52.2.15 = 1.52.2.16

http://www.samba.org/cgi-bin/cvsweb/samba/WHATSNEW.txt?r1=1.52.2.15r2=1.52.2.16


CVS update: samba/packaging/RedHat

2003-03-30 Thread jerry

Date:   Mon Mar 31 04:05:32 2003
Author: jerry

Update of /data/cvs/samba/packaging/RedHat
In directory dp.samba.org:/tmp/cvs-serv21219/packaging/RedHat

Modified Files:
  Tag: SAMBA_3_0
samba2.spec.tmpl 
Log Message:
removing duplicate listing of files

Revisions:
samba2.spec.tmpl1.23.2.14 = 1.23.2.15

http://www.samba.org/cgi-bin/cvsweb/samba/packaging/RedHat/samba2.spec.tmpl?r1=1.23.2.14r2=1.23.2.15


CVS update: samba/source/nsswitch

2003-03-30 Thread tpot

Date:   Mon Mar 31 04:36:00 2003
Author: tpot

Update of /data/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv25070/nsswitch

Modified Files:
winbind_nss_solaris.c winbind_nss_config.h wb_client.c 
Added Files:
winbind_nss_solaris.h winbind_nss_linux.h winbind_nss_linux.c 
winbind_nss_irix.h winbind_nss_irix.c winbind_nss_hpux.h 
winbind_nss.h 
Removed Files:
winbind_nss.c nss.h hp_nss_dbdefs.h hp_nss_common.h 
Log Message:
Cleanup of winbind client side code.

Mostly this consists of untangling the existing code and moving it in
to operating system specific files.  The winbind client code for all
supported operating systems is now in nsswitch/winbind_nss_OSNAME.[ch]
to make things a bit clearer.


Revisions:
winbind_nss_solaris.h   NONE = 1.1

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbind_nss_solaris.h?rev=1.1
winbind_nss_linux.h NONE = 1.1

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbind_nss_linux.h?rev=1.1
winbind_nss_linux.c NONE = 1.1

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbind_nss_linux.c?rev=1.1
winbind_nss_irix.h  NONE = 1.1

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbind_nss_irix.h?rev=1.1
winbind_nss_irix.c  NONE = 1.1

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbind_nss_irix.c?rev=1.1
winbind_nss_hpux.h  NONE = 1.1

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbind_nss_hpux.h?rev=1.1
winbind_nss.h   NONE = 1.1
http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbind_nss.h?rev=1.1
winbind_nss_solaris.c   1.5 = 1.6

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbind_nss_solaris.c?r1=1.5r2=1.6
winbind_nss_config.h1.17 = 1.18

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbind_nss_config.h?r1=1.17r2=1.18
wb_client.c 1.41 = 1.42

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/wb_client.c?r1=1.41r2=1.42
winbind_nss.c   1.21 = NONE

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbind_nss.c?rev=1.21
nss.h   1.5 = NONE
http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/nss.h?rev=1.5
hp_nss_dbdefs.h 1.4 = NONE

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/hp_nss_dbdefs.h?rev=1.4
hp_nss_common.h 1.4 = NONE

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/hp_nss_common.h?rev=1.4


CVS update: samba/source

2003-03-30 Thread tpot

Date:   Mon Mar 31 04:36:01 2003
Author: tpot

Update of /data/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv25070

Modified Files:
configure.in Makefile.in 
Log Message:
Cleanup of winbind client side code.

Mostly this consists of untangling the existing code and moving it in
to operating system specific files.  The winbind client code for all
supported operating systems is now in nsswitch/winbind_nss_OSNAME.[ch]
to make things a bit clearer.


Revisions:
configure.in1.443 = 1.444
http://www.samba.org/cgi-bin/cvsweb/samba/source/configure.in?r1=1.443r2=1.444
Makefile.in 1.659 = 1.660
http://www.samba.org/cgi-bin/cvsweb/samba/source/Makefile.in?r1=1.659r2=1.660


CVS update: samba/source/include

2003-03-30 Thread tpot

Date:   Mon Mar 31 04:36:01 2003
Author: tpot

Update of /data/cvs/samba/source/include
In directory dp.samba.org:/tmp/cvs-serv25070/include

Modified Files:
includes.h 
Log Message:
Cleanup of winbind client side code.

Mostly this consists of untangling the existing code and moving it in
to operating system specific files.  The winbind client code for all
supported operating systems is now in nsswitch/winbind_nss_OSNAME.[ch]
to make things a bit clearer.


Revisions:
includes.h  1.310 = 1.311

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/includes.h?r1=1.310r2=1.311


CVS update: samba/source

2003-03-30 Thread tpot

Date:   Mon Mar 31 05:46:32 2003
Author: tpot

Update of /data/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv31073

Modified Files:
configure.in 
Log Message:
autoconf change to compile winbindd for AIX.  The client side code
is still under development.


Revisions:
configure.in1.444 = 1.445
http://www.samba.org/cgi-bin/cvsweb/samba/source/configure.in?r1=1.444r2=1.445


CVS update: samba/source/nsswitch

2003-03-30 Thread tpot

Date:   Mon Mar 31 05:47:59 2003
Author: tpot

Update of /data/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv31281

Added Files:
winbind_nss_aix.c 
Log Message:
Placeholder for winbind aix client.


Revisions:
winbind_nss_aix.c   NONE = 1.1

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbind_nss_aix.c?rev=1.1


CVS update: samba/source

2003-03-30 Thread tpot

Date:   Mon Mar 31 05:51:41 2003
Author: tpot

Update of /data/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv31712

Modified Files:
configure.in 
Log Message:
Tidyup of winbindd client OS specific autoconf code.


Revisions:
configure.in1.445 = 1.446
http://www.samba.org/cgi-bin/cvsweb/samba/source/configure.in?r1=1.445r2=1.446