[Samba] win2k wont join domain; tried everything

2004-01-19 Thread Nathan Brown
I have a fresh installation of Windows 2000. I added the machine account
to the samba server but no matter what I do, I can't get it to join the
domain.

I believe the problem lies with my samba server. The new net commandis
very confusing to me and I believe I messed something up.I am now unable
to login with the root user no matter what; which is required for loggin
Win2K into a domain.

I have done all of the obvious things such as smbpasswd -a root, etc.

What i really want to know is where all the setting are stored for the
net command and just clear it all out and start over. And maybe the list
of steps required to get this working (domain logon) as i can not find any
recent info thats very comprehendable.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] pam_winbind for mail server

2004-01-19 Thread greaneyr
I'm using pam_winbind to authenticate users on my mailserver. The problem
I'm having is that it authenticates ANY user who has an account on the NT
server. I don't want every single user to have a mail account, and it would
appear very simple to just put all mail users into a new group on the NT
Server if they require a mail account (say Mail Users for example). This
would work if Winbind filtered based on NT group membership.  

Does such a function exist anywhere in winbind?

Can it be set though that 'getent passwd' only returns the user info of all
local users on the Linux machine and those who are in a particular group on
the NT server?

Regards
Richard


This message was sent using InSPire Net Webmail.
http://www.inspire.net.nz


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Who know?

2004-01-19 Thread
Who know how to retrive full user name from W2k domain controller?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Bug#219197: PANIC: internal error

2004-01-19 Thread Mike Fedyk
On Fri, Jan 16, 2004 at 04:54:12PM -0800, Mike Fedyk wrote:
 On Wed, Nov 05, 2003 at 06:15:47PM -0600, Steve Langasek wrote:
  Ok, then, you *must* build debugging-enabled packages by running... :)
  
  The binaries are compiled with debugging turned on -- the debugging
  symbols are stripped out for packaging.
 
 Package: samba
 Version: 3.0.1-2-debug1
 
 OK, I have built debugging patches from samba 3.0.1-2, in a debian sarge
 environment.  The library dependancies are below.

s/patches/packages/

ii  samba 3.0.1-2-debug1a LanManager-like
file and printer server for Unix

Is samba dropping core files somewhere so that I can get better traces or
something?  What else can I do to help find this bug?

And here's some output from my logs:

[1]
[2004/01/17 12:59:08, 1] smbd/service.c:make_connection_snum(705)
  exec-danny-v (10.0.0.41) connect to service Production initially as user dvalencia 
(uid=1014, gid=500) (pid 27097)
[2004/01/17 13:00:47, 1] smbd/service.c:close_cnum(887)
  exec-danny-v (10.0.0.41) closed connection to service Production
[2004/01/17 13:04:33, 0] lib/fault.c:fault_report(36)
  ===
[2004/01/17 13:04:33, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 27097 (3.0.1-Debian)
  Please read the appendix Bugs of the Samba HOWTO collection
[2004/01/17 13:04:33, 0] lib/fault.c:fault_report(39)
  ===
[2004/01/17 13:04:33, 0] lib/util.c:smb_panic(1400)
  PANIC: internal error
[2004/01/17 13:04:33, 0] lib/util.c:smb_panic(1408)
  BACKTRACE: 3 stack frames:
   #0 /usr/sbin/smbd(smb_panic+0x101) [0x81bdcb1]
   #1 /usr/sbin/smbd [0x81ac097]
   #2 [0xe420]

[2]
[2004/01/16 17:30:09, 0] lib/fault.c:fault_report(36)
  ===
[2004/01/16 17:30:09, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 21507 (3.0.1-Debian)
  Please read the appendix Bugs of the Samba HOWTO collection
[2004/01/16 17:30:09, 0] lib/fault.c:fault_report(39)
  ===
[2004/01/16 17:30:09, 0] lib/util.c:smb_panic(1400)
  PANIC: internal error
[2004/01/16 17:30:09, 0] lib/util.c:smb_panic(1408)
  BACKTRACE: 23 stack frames:
   #0 /usr/sbin/smbd(smb_panic+0x101) [0x81bdcb1]
   #1 /usr/sbin/smbd [0x81ac097]
   #2 /lib/libc.so.6 [0x401da498]
   #3 /lib/libc.so.6 [0x40222b48]
   #4 /lib/libc.so.6(malloc+0x93) [0x40221d33]
   #5 /usr/sbin/smbd(Realloc+0x88) [0x81bce68]
   #6 /usr/sbin/smbd(convert_string_allocate+0x433) [0x81a9e63]
   #7 /usr/sbin/smbd(push_ucs2_allocate+0x48) [0x81aa708]
   #8 /usr/sbin/smbd(unix_strupper+0x24) [0x81a9fa4]
   #9 /usr/sbin/smbd(strupper_m+0x46) [0x81b6de6]
   #10 /usr/sbin/smbd [0x80cef8a]
   #11 /usr/sbin/smbd [0x80cfa1e]
   #12 /usr/sbin/smbd(mangle_map+0x82) [0x80cd8f2]
   #13 /usr/sbin/smbd [0x80abaed]
   #14 /usr/sbin/smbd [0x80ad481]
   #15 /usr/sbin/smbd(reply_trans2+0x6c6) [0x80b4386]
   #16 /usr/sbin/smbd [0x80c7dca]
   #17 /usr/sbin/smbd [0x80c8030]
   #18 /usr/sbin/smbd(process_smb+0x8c) [0x80c823c]
   #19 /usr/sbin/smbd(smbd_process+0x168) [0x80c8eb8]
   #20 /usr/sbin/smbd(main+0x4bc) [0x8228d4c]
   #21 /lib/libc.so.6(__libc_start_main+0xc6) [0x401c6da6]
   #22 /usr/sbin/smbd(chroot+0x35) [0x8077121]


[2004/01/16 17:30:10, 0] lib/fault.c:fault_report(36)
  ===
[2004/01/16 17:30:10, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 25103 (3.0.1-Debian)
  Please read the appendix Bugs of the Samba HOWTO collection
[2004/01/16 17:30:10, 0] lib/fault.c:fault_report(39)
  ===
[2004/01/16 17:30:10, 0] lib/util.c:smb_panic(1400)
  PANIC: internal error
[2004/01/16 17:30:10, 0] lib/util.c:smb_panic(1408)
  BACKTRACE: 15 stack frames:
   #0 /usr/sbin/smbd(smb_panic+0x101) [0x81bdcb1]
   #1 /usr/sbin/smbd [0x81ac097]
   #2 /lib/libc.so.6 [0x401da498]
   #3 /lib/libc.so.6 [0x40222b48]
   #4 /lib/libc.so.6(malloc+0x93) [0x40221d33]
   #5 /usr/sbin/smbd(Realloc+0x88) [0x81bce68]
   #6 /usr/sbin/smbd [0x80ac4ea]
   #7 /usr/sbin/smbd(reply_trans2+0x684) [0x80b4344]
   #8 /usr/sbin/smbd [0x80c7dca]
   #9 /usr/sbin/smbd [0x80c8030]
   #10 /usr/sbin/smbd(process_smb+0x8c) [0x80c823c]
   #11 /usr/sbin/smbd(smbd_process+0x168) [0x80c8eb8]
   #12 /usr/sbin/smbd(main+0x4bc) [0x8228d4c]
   #13 /lib/libc.so.6(__libc_start_main+0xc6) [0x401c6da6]
   #14 /usr/sbin/smbd(chroot+0x35) [0x8077121]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Group Mapping in MySQL backend

2004-01-19 Thread Bjoern Scheuermann
Hi,

are there any plans to add some support for storing not only user 
information, but also group mappings in the MySQL passdb backend? Or are 
there problems I'm not aware of why this cannot be done?

And - by the way - is there any reason why pdb_mysql should not (yet) be 
used in larger installations (several hundert clients), or why several 
servers shouldn't share one common database? Are there any experiences 
regarding such installations, or are any problems already known?

Thanks a lot,

Bjoern

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap-tools 8.3 populate errors

2004-01-19 Thread Manfred Odenstein
Am Sonntag, 18. Januar 2004 10:55 schrieb Jérôme Tournier:

  My system is now runnung, but I think there are some bugs in the populate
  script, e.g. the SID of the Administrator account should end with -500 as
  I know, because it's predefinded. Any comment from the author ???

 500 is the well-known RID for the domain administrator, not for
 the administrator account, am i wrong ?

AFAIK, if you operate as a PDC it have to be 500, because a NT PDC hasn't its 
own user-database, it uses the domain-database, so the administrator is the 
same as the Domain Adminstrator, maybe I'm wrong, but ...


  I've also changed the gidNumber and uidNumber of the guest account and
  Domain Guest group to the default values of my system (SuSE9)
 
  after this all worked correctly except some log-entries .
  Failed to open group mapping database 
  and
  failed to decode PDU

 Do you always have this error messages ? With every scripts ?
 Thanks for your report !
 --
 Jérôme

I've not tested this with other scripts (e.g. 0.8.2), because til I've tried 
0.8.3 I didn't noticed that if I want to add a user, the given script at add 
user script  isn't called with smbpasswd -a, if I added a user with net 
user add, the given script was called (I've written a dummy script with 
syslog output), and the I've tried 0.8.3 and it worked. but I will give 0.8.2 
a try if you want

odi

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] network browserlist error(S)..

2004-01-19 Thread Collen
G'day.. just haveing the straingest problem..

I'd upgraded to the 302rc1 version. i configed it to be an pdc controller, 
with wins to manage our local domain..
only when browsing the domain list.

it gives error(s) once in a while..
An extended error has occured 
the system cannot find massage text for message number 0x in the message 
file for \\hostname

this is when you try to acces a computer or share for a win2k box, it 
happens 10 out of 100 times..

on a linux box, log.smb reports:

lib/util_sock.c:matchname(941)
 sys_gethostname(host.domain): lookup failure
lib/util_sock.c:get_socket_name(1008)
 matchname failed os host.domain 192.168.x.x
the pdc is the master browser with smb.conf
os level = 66
preferred master = yes
domain master = yes
domain logons = yes
local master = yes
wins support = yes
with 300 version i have no problems, from 301rc1 the error starts..
sugestions ?? solutions ..??
l8r
Collen Blijenberg
MLHJ
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem with Samba

2004-01-19 Thread P . Jensen
Hey all,

I have got a problem with getting samba to work right for me. I am not a 
complete newbie, however files concerning security (like the pam files and 
nsswitch.conf) is not my strongest point 

What i done so far is edit the smb.conf to my likings and i added the 
linux server to my PDC. That part went fine, however i wanted to use the 
group names from the NT domain for secutiry within the smb.conf (Valid 
used @groupname). So i read in some documents i found on the internet that 
i had to use winbind. I followed all steps according to document : 
de.samba.org/samba/docs/man/winbindd.8.html
I edited the /etc/nsswitch.conf file and the /etc/pam.d/samba file with 
the changes mentioned in the document mentioned above.

When i start the winbindd (from /etc/rc.d/init.d/winbindd start) i see in 
the /etc/log/samba/log.winbindd the following :

[2004/01/19 10:23:14, 0] param/loadparm.c:map_parameter(2065)
Unknown parameter encountered: idmap uid
[2004/01/19 10:23:14, 0] param/loadparm.c:lp_do_parameter(2740)
Ignoring unknown parameter idmap uid
[2004/01/19 10:23:14, 0] param/loadparm.c:map_parameter(2065)
Unknown parameter encountered: idmap gid
[2004/01/19 10:23:14, 0] param/loadparm.c:lp_do_parameter(2740)
Ignoring unknown parameter idmap gid
[2004/01/19 10:23:15, 0] nsswitch/winbindd_util.c:winbindd_param_init(326)
winbind uid range missing or invalid

When i try the wbinfo -u command i get : Error looking up domain users.

My /etc/pam.d/samba looks like this atm : 

#%PAM-1.0
#auth required pam_nologin.so
#auth required pam_stack.so service=system-auth
auth required /lib/security/pam_securetty.so
auth required /lib/security/pam_nologin.so
auth sufficient /lib/security/pam_winbind.so
auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok

#account required pam_stack.so service=system-auth
account required /lib/security/pam_winbind.so
session required pam_stack.so service=system-auth
password required pam_stack.so service=system-auth

My /etc/nsswitch.conf looks like this atm :
passwd: files winbind
shadow: files 
group: files winbind

hosts: files nisplus dns

bootparams: nisplus [NOTFOUND=return] files

ethers: files
netmasks: files
networks: files
protocols: files nisplus
rpc: files
services: files nisplus

netgroup: files nisplus

publickey: nisplus

automount: files nisplus
aliases: files nisplus

Anymore info i got has to do with the winbindd .. it doesnt seem to start 
oke, i can constandly start it and start it ..when i try to stop the 
service i get an error .. so there is something wrong in there .. i just 
cant fingure out what it is.

The erros i mentioned above from the log.winbindd with the unknown 
parameter he probably gets from my smb.conf file. According to the 
document i mentioned above you had to add a few lines to the smb.conf :
idmap uid = 1-2
idmap gid = 1-2
winbind seperator = +
winbind enum users = yes
winbind enum groups = yes

Thats all the info i can think off right now to give you all .. i really 
would appriciate some help since im stuck atm.

Thanx in advance for replying, If the smb.conf file is needed in this 
thread then pls let me know.

With best regards,
rizza
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] terrible host\5Cusername ldap issue

2004-01-19 Thread Paolo Negri
Hi all.
I'm setting up a samba 2.2.8 with ldap auth.
On the same machine i use pam_ldap to auth unix users.
my current smb.conf is

--- begin ---

[global]
   netbios name = LDAP-TEST
   workgroup = LDAP-NET
   os level = 255
   time server = NO
   unix extensions = Yes
   encrypt passwords = Yes
   map to guest = Bad User
   printing = CUPS
   printcap name = CUPS
   socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
   wins support = No
   veto files = /*.eml/*.nws/riched20.dll/*.{*}/
   obey pam restrictions = No
   # inizio configurazione ldap
   ldap server = 127.0.0.1
   ldap port = 389
   ldap suffix = ou=People,dc=mydomain,dc=com
   ldap filter = ((uid=%u)) (objectclass=sambaAccount))
   ldap ssl = off
[homes]
   comment = Home Directories
   valid users = %S
   browseable = No
   read only = No
   create mask = 0640
   directory mask = 0750
[printers]
   comment = All Printers
   path = /var/tmp
   printable = Yes
   create mask = 0600
   browseable = No
[print$]
   comment = Printer Drivers
   path = /var/lib/samba/drivers
   write list = @ntadmin root
   force group = ntadmin
   create mask = 0664
   directory mask = 0775
I have unix account and samba account correctly inserted in ldap server.


When i try to login on samba from MACHINENAME as USERNAME i see in 
ldap's log and messages log

-
slapd[1179]: conn=124 op=1 SRCH base=ou=People,dc=modiano,dc=com 
scope=1 filter=((objectClass=posixAccount)(uid=MACHINENAME\5CUSERNAME))

slapd[1179]: conn=114 op=1 SRCH base=ou=People,dc=modiano,dc=com 
scope=1 filter=((objectClass=posixAccount)(uid=COMPU\5CP_NEGRI))
slapd[1179]: conn=114 op=1 SRCH attr=uid userPassword uidNumber 
gidNumber cn homeDirectory loginShell gecos description objectClass
slapd[1179]: conn=114 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
smbd[2077]: [2004/01/19 11:30:28, 0] passdb/secrets.c:fetch_ldap_pw(264)
smbd[2077]:   fetch_ldap_pw: no ldap secret retrieved!
smbd[2077]: [2004/01/19 11:30:28, 0] 
passdb/pdb_ldap.c:ldap_connect_system(308)
smbd[2077]:   ldap_connect_system: Failed to retrieve password for  from 
secrets.tdb
smbd[2077]: [2004/01/19 11:30:28, 0] passdb/secrets.c:fetch_ldap_pw(264)
smbd[2077]:   fetch_ldap_pw: no ldap secret retrieved!
smbd[2077]: [2004/01/19 11:30:28, 0] 
passdb/pdb_ldap.c:ldap_connect_system(308)
smbd[2077]:   ldap_connect_system: Failed to retrieve password for  from 
secrets.tdb
smbd[2077]: [2004/01/19 11:30:28, 0] passdb/secrets.c:fetch_ldap_pw(264)
smbd[2077]:   fetch_ldap_pw: no ldap secret retrieved!
smbd[2077]: [2004/01/19 11:30:28, 0] 
passdb/pdb_ldap.c:ldap_connect_system(308)
smbd[2077]:   ldap_connect_system: Failed to retrieve password for  from 
secrets.tdb

I think the issue is due to the fact that pam try to check if  
MACHINENAME\5CUSERNAME is an existing unix account; but the uid USERNAME 
exists, MACHINENAME\5CUSERNAME doesn't.

I'm sure it's a misconfiguration error, i've googled so much but without 
success.

Thanks in advance for any help.

--
blank: Caught deadly signal TERM
blank: Finished. 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] shared folders ownership

2004-01-19 Thread Edd Payne
If everyone should have access to the directory, the best way is to put 
everyone into a group (if they're not already - eg if you're running RedHat), 
say for example 'users', then set the directory's group ownership to users, 
the permissions of the directory to something like 775 (or 770), and then in 
the share definition something like:

force group = users
create directory mode = 770
create mode = 660

which will make sure all files and directories created inside that directory 
have group read/write permissions and belong to the correct group. You may 
also need to set up a group mapping (net groupmap unixgroup=users 
ntgroup=Users)

If it's a subdirectory of a share, in which only the subdirectory needs write 
permissions for everybody, then you'll need to mess about with permissions - 
I *think* setting something like 2770 on the directory makes all files 
created in that directory belong to the same group as the directory, but I'm 
not an expert when it comes to that.

HTH

edd

On Sunday 18 Jan 2004 1:07 pm, Wes Wilcox wrote:
 what/who is the owner of a shared directory in Samba, on a network that
 requires every one to access the directory, when created as root with 0777
 it seems to revert back to root ownership and you can't write or delete
 from it. Relativily new at this, so would appreciate any help.
 Thanks
 Wes

-- 
Edd Payne
IT Co-ordinator
University of London Union
Malet Street, London WC1E 7HY

tel: 020 7664 2060
fax: 020 7436 4604

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba3 Ldap on Suse 8.2

2004-01-19 Thread Marco Schulze
Hi

I can't get a Windows 2000 SP4 client login on my PDC (SAMBA SERVER).
Here are some infos about the server Samba version 3.0.2pre1 running Suse 8.2 with a 
OpenLDAP server version 2.1.12, nss_ldap and pam_ldap.
I constantly get the message : User / Password is wrong from the client.
The root is created.Here are the debug messages I get, starting by the LDAP and SMBD 
logs:

###log.ldap###
Jan 16 16:01:05 tiger4 slapd[2813]: conn=37 fd=15 ACCEPT from IP=10.100.1.4:32863 
(IP=:: 389)
Jan 16 16:01:05 tiger4 slapd[2894]: conn=37 op=0 BIND 
dn=cn=Manager,dc=samba,dc=local method=128
Jan 16 16:01:05 tiger4 slapd[2894]: conn=37 op=0 AUTHZ 
dn=cn=Manager,dc=samba,dc=local mech=simple ssf=0
Jan 16 16:01:05 tiger4 slapd[2894]: conn=37 op=0 RESULT tag=97 err=0 text=
Jan 16 16:01:05 tiger4 slapd[2875]: conn=37 op=1 SRCH base=dc=samba,dc=local scope=2 
filter=((objectClass=sambaDomain)(sambaDomainName=SAMBA))
Jan 16 16:01:05 tiger4 slapd[2875]: conn=37 op=1 SEARCH RESULT tag=101 err=0 
nentries=1 text=
Jan 16 16:01:05 tiger4 slapd[2851]: conn=37 op=2 SRCH base=dc=samba,dc=local scope=2 
filter=(((uid=root)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount))
Jan 16 16:01:05 tiger4 slapd[2851]: conn=37 op=2 SEARCH RESULT tag=101 err=0 
nentries=1 text=
Jan 16 16:01:05 tiger4 slapd[2813]: conn=37 fd=15 closed
###lo.ldap end###

###log.machine###
[2004/01/16 16:01:05, 6] param/loadparm.c:lp_file_list_changed(2670)
  lp_file_list_changed()
  file /etc/samba/smb.conf - /etc/samba/smb.conf  last mod_time: Fri Jan 16 16:00:33 
2004

[2004/01/16 16:01:05, 5] smbd/connection.c:claim_connection(170)
  claiming  0
[2004/01/16 16:01:05, 5] smbd/reply.c:reply_special(154)
  init msg_type=0x81 msg_flags=0x0
[2004/01/16 16:01:05, 6] lib/util_sock.c:write_socket(407)
  write_socket(5,4)
[2004/01/16 16:01:05, 6] lib/util_sock.c:write_socket(410)
  write_socket(5,4) wrote 4
[2004/01/16 16:01:05, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
  got smb length of 133
[2004/01/16 16:01:05, 6] smbd/process.c:process_smb(889)
  got message type 0x0 of len 0x85
[2004/01/16 16:01:05, 3] smbd/process.c:process_smb(890)
  Transaction 1 of length 137
[2004/01/16 16:01:05, 5] lib/util.c:show_msg(456)
[2004/01/16 16:01:05, 5] lib/util.c:show_msg(466)
  size=133
  smb_com=0x72
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51283
  smb_tid=0
  smb_pid=65279
  smb_uid=0
  smb_mid=0
  smt_wct=0
  smb_bcc=98
[2004/01/16 16:01:05, 10] lib/util.c:dump_data(1830)
  [000] 02 50 43 20 4E 45 54 57  4F 52 4B 20 50 52 4F 47  .PC NETW ORK PROG
  [010] 52 41 4D 20 31 2E 30 00  02 4C 41 4E 4D 41 4E 31  RAM 1.0. .LANMAN1
  [020] 2E 30 00 02 57 69 6E 64  6F 77 73 20 66 6F 72 20  .0..Wind ows for
  [030] 57 6F 72 6B 67 72 6F 75  70 73 20 33 2E 31 61 00  Workgrou ps 3.1a.
  [040] 02 4C 4D 31 2E 32 58 30  30 32 00 02 4C 41 4E 4D  .LM1.2X0 02..LANM
  [050] 41 4E 32 2E 31 00 02 4E  54 20 4C 4D 20 30 2E 31  AN2.1..N T LM 0.1
  [060] 32 00 2. 
[2004/01/16 16:01:05, 3] smbd/process.c:switch_message(685)
  switch message SMBnegprot (pid 2980)
[2004/01/16 16:01:05, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/01/16 16:01:05, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2004/01/16 16:01:05, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2004/01/16 16:01:05, 5] smbd/uid.c:change_to_root_user(218)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [LANMAN1.0]
[2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [Windows for Workgroups 3.1a]
[2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [LM1.2X002]
[2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [LANMAN2.1]
[2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [NT LM 0.12]
[2004/01/16 16:01:05, 10] lib/util.c:set_remote_arch(1805)
  set_remote_arch: Client arch is 'Win2K'
[2004/01/16 16:01:05, 6] param/loadparm.c:lp_file_list_changed(2670)
  lp_file_list_changed()
  file /etc/samba/smb.conf - /etc/samba/smb.conf  last mod_time: Fri Jan 16 16:00:33 
2004

[2004/01/16 16:01:05, 6] param/loadparm.c:lp_file_list_changed(2670)
  lp_file_list_changed()
  file /etc/samba/smb.conf - /etc/samba/smb.conf  last mod_time: Fri Jan 16 16:00:33 
2004

[2004/01/16 16:01:05, 3] smbd/negprot.c:reply_nt1(329)
  using SPNEGO
[2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(532)
  Selected protocol NT LM 0.12
[2004/01/16 16:01:05, 5] smbd/negprot.c:reply_negprot(538)
  negprot index=5
[2004/01/16 16:01:05, 5] lib/util.c:show_msg(456)
[2004/01/16 16:01:05, 5] lib/util.c:show_msg(466)
  size=127
  smb_com=0x72
  smb_rcls=0
  

[Samba] cifs-vfs connecting to Netware 6 running cifs.nlm

2004-01-19 Thread Simon Crute
Hi All,
  I've got some problems accessing data on a netware server 6.0 running
cifs.nlm from a Suse9 linux box.
I was origanally trying to access it via smbfs however there were
problems with files being truncated when writing and not being read
properly.
After reading through the archives to this list/newsgroup, I figured I
might have better luck with the cifs-vfs module. However it isn't even
mounting the filesystem, and is causing bad password attempts to be
registered on the netware server.
I've taken a trace of the network communication and a couple of things
stand out.
The trace for the SMB mount has a field in the session setup ANDX
request packet called ANSI Password and Unicode Password.
The trace for the CIFS mount only has a Unicode Password field, and
the strings are different.
Is this the cause of my problem, or am I barking up the wrong tree ?

And even if it is (or isn't) where do I go from here ?

Thanks for any help.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] winbind and Solaris 9 with AD

2004-01-19 Thread Unix Service (ANTS)
Hi

have been trying to get winbind working on Solaris 9 but to no effect.

version info:

samba: 3.0.0
openldap: 2.1.23
kerberos: MIT 1.3.1

Have followed the instructions in every howto, usenet posting I could
find:

nscd not running
created relevant links in /lib and /lib/security/sparcv9
applied patch for nsswitch as recommended

kinit -e works
net ads join works
wbinfo -t works
wbinfo -u gives list of all users in all trusted domains
getent doesn't work
samba authentication doesn't work - get the following in winbindd.log:

[2004/01/19 10:59:27, 5] nsswitch/winbindd_pam.c:(379)
  NTLM CRAP authentication for user [DEV]\[test7] returned
NT_STATUS_OK (PAM: 0)
[2004/01/19 10:59:27, 3] nsswitch/winbindd_acct.c:(875)
  [ 3551]: create_user: user=(test7), group=()
[2004/01/19 10:59:27, 5] nsswitch/winbindd_acct.c:(521)
  wb_getgrnam: Did not find group (nobody)

my smb.conf is:

workgroup = DEV
#workgroup = DEV.ANTS.AD.ANPLC.CO.UK
realm = DEV.ANTS.AD.ANPLC.CO.UK
security = ADS
password server = lonsd010.dev.ants.ad.anplc.co.uk
dns proxy = no
idmap gid = 7-8
idmap uid = 80-90
winbind cache time = 15
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
encrypt passwords = yes
log level = 9

[temp]
path = /tmp
read list = @users

[docs]
path = /var/tmp/samba-3.0.0
read list = @users

I would appreciate any pointers as to further debugging I could do or
possible problems as being able to use winbind to deal with samba
authentication would make life a great deal easier.




***
This communication (including any attachments) contains confidential information.  If 
you are not the intended recipient and you have received this communication in error, 
you should destroy it without copying, disclosing or otherwise using its contents.  
Please notify the sender immediately of the error.

Internet communications are not necessarily secure and may be intercepted or changed 
after they are sent.  Abbey National Treasury Services plc does not accept liability 
for any loss you may suffer as a result of interception or any liability for such 
changes.  If you wish to confirm the origin or content of this communication, please 
contact the sender by using an alternative means of communication.

This communication does not create or modify any contract and, unless otherwise 
stated, is not intended to be contractually binding.

Abbey National Treasury Services plc. Registered Office:  Abbey National House, 2 
Triton Square, Regents Place, London NW1 3AN.  Registered in England under Company 
Registration Number: 2338548.  Regulated by the Financial Services Authority (FSA).
***

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba3.0.1 bug?

2004-01-19 Thread Gilberto Nunes

Hi

   Somebody  knows about the samba3.0.1 bugs?
   'cause I try to map unix group, same after run the net groupmap
command, but don't work...
   When I try the same think with samba3.0.0, this mapping work properly.
   Somebody explain this to me, please!


-- 
Gilberto Nunes
Suporte Rede Bonja - Bom Jesus/Ielusc
Fone: 433-0155 - ramal 235
www.ielusc.br - [EMAIL PROTECTED]
Linux User nº 199930
ICQ #136176504

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] patching 3.0.0 to 3.0.1

2004-01-19 Thread Steve Kennedy
On Mon, Jan 19, 2004 at 04:14:42AM +, Gerald Carter wrote:

 On Sun, 18 Jan 2004, Greg Chavez wrote:
  Okay, I realize at this point that's it's certainly easier for me to
  just compile 3.0.1 from scratch, but I'm irritated that I can't get
  patch to work right.  Maybe somebody will lead me in the right
  direction.  I've scoured the archives and Google for answers to this, to
  no avail so far.
  I'm running Samba 3.0 on Solaris 9.  I'm hoping that the new release
  will help me with some problems I've been having with character
  conversions using smbprint.sysv (you will hear more form me if it
  doesn't).
  I do this:
# cd samba-3.0.0/source
# make distclean
# ls patch*
patch-3.0.0-3.0.1.gz
 cd ..
# gzcat patch* | patch -p0## GNU patch 2.5.4
 gzcat source/patch* | patch -p1

Also make sure you're using GNU patch not the Solaris patch.


Steve

-- 
home steve at gbnet.org
NetTek Ltdtel/fax +44-(0)207 483 2455
Email to SMS steve - epage (at) gbnet dot net
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] winbindd and macs

2004-01-19 Thread startux.org webmaster
Hi,

I'm running a Samba server with authentication being made through a w2000
server with winbind.
Well, with Windows everything is ok.

But with Macs is not.
It seems that Macs are expecting a local account in the Samba server.
They appear not to retrive the information from the w2000 server.

Is there a wat to Macs get the info from the w2000 server ?
I didn't want to setup local accounts for Macs' users.

Any help would be appreciated.

Warm Regards,
Mário Gamito

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] winbind and Solaris 9 with AD

2004-01-19 Thread Ganguly, Sapan

I'm having trouble with this too but getent works for me, I'm not using AD
though.  

Have you edited nsswitch.conf?  

Passwd: files winbind
Group: files winbind

I'm stuck on getting logging in working...Sun seems to think there may be
some bug with PAM.

-Original Message-
From: Unix Service (ANTS) [mailto:[EMAIL PROTECTED] 
Sent: 19 January 2004 12:13
To: '[EMAIL PROTECTED]'
Subject: [Samba] winbind and Solaris 9 with AD


Hi

have been trying to get winbind working on Solaris 9 but to no effect.

version info:

samba: 3.0.0
openldap: 2.1.23
kerberos: MIT 1.3.1

Have followed the instructions in every howto, usenet posting I could
find:

nscd not running
created relevant links in /lib and /lib/security/sparcv9 applied patch for
nsswitch as recommended

kinit -e works
net ads join works
wbinfo -t works
wbinfo -u gives list of all users in all trusted domains
getent doesn't work
samba authentication doesn't work - get the following in winbindd.log:

[2004/01/19 10:59:27, 5] nsswitch/winbindd_pam.c:(379)
  NTLM CRAP authentication for user [DEV]\[test7] returned NT_STATUS_OK
(PAM: 0) [2004/01/19 10:59:27, 3] nsswitch/winbindd_acct.c:(875)
  [ 3551]: create_user: user=(test7), group=()
[2004/01/19 10:59:27, 5] nsswitch/winbindd_acct.c:(521)
  wb_getgrnam: Did not find group (nobody)

my smb.conf is:

workgroup = DEV
#workgroup = DEV.ANTS.AD.ANPLC.CO.UK
realm = DEV.ANTS.AD.ANPLC.CO.UK
security = ADS
password server = lonsd010.dev.ants.ad.anplc.co.uk
dns proxy = no
idmap gid = 7-8
idmap uid = 80-90
winbind cache time = 15
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
encrypt passwords = yes
log level = 9

[temp]
path = /tmp
read list = @users

[docs]
path = /var/tmp/samba-3.0.0
read list = @users

I would appreciate any pointers as to further debugging I could do or
possible problems as being able to use winbind to deal with samba
authentication would make life a great deal easier.




***
This communication (including any attachments) contains confidential
information.  If you are not the intended recipient and you have received
this communication in error, you should destroy it without copying,
disclosing or otherwise using its contents.  Please notify the sender
immediately of the error.

Internet communications are not necessarily secure and may be intercepted or
changed after they are sent.  Abbey National Treasury Services plc does not
accept liability for any loss you may suffer as a result of interception or
any liability for such changes.  If you wish to confirm the origin or
content of this communication, please contact the sender by using an
alternative means of communication.

This communication does not create or modify any contract and, unless
otherwise stated, is not intended to be contractually binding.

Abbey National Treasury Services plc. Registered Office:  Abbey National
House, 2 Triton Square, Regents Place, London NW1 3AN.  Registered in
England under Company Registration Number: 2338548.  Regulated by the
Financial Services Authority (FSA).
***

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Strange behavior WinXP and 2.2.8a and inherit permissions

2004-01-19 Thread Dragan Krnic
 I have a quite strange problem.
 I have updated my Server with Suse 9.0 to Samba 2.2.8a. 
 From that moment on I couln'd run programms directly 
 from the share anymore. The WinXP Client says: you 
 dont have the permission for this file. But I have
 all permissions for it. This only occurs in that shares 
 where I have set inherit permissions to yes. When I 
 set it to No it works again. I can run programms from 
 the share. I tried it on two XP Clients with same
 results. When I used a WinMe Client it worked all the 
 time. It looks for me a bit like a bug. For I have not 
 changed anything except updating samba to 2.2.8a 

Perhaps the group execute bit is interpreted as system
attribute. Try map system = No and leave inheritance on. 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: loading print driver question

2004-01-19 Thread Dragan Krnic
 I am trying to add print drivers for a samba shared 
 printer to a Windows 2000 group - Everything up to 
 this step works - I am using Samba 3.0.1

 rpcclient -d 100 -Uroot -c 'adddriver Windows NT x86 \
 E323:LMAAE1DD.dll:\
 LMAAE1P1.PPD:LMAAE1DA.DLL:LMAAE1DA.HLP:NULL:RAW:\
 LMAA1B1.DLL,LMAAE1BJ.DLL,LMAAE1BT.DLL,LMAAE1DA.ALL,\
 LMAAE1ED.DLL,LMAAE1PI.EXE,LMAAE1TD.DLL,LMAAE1TE.DLL,\
 LMAAE1DA.CNT,LMAAE1DF.DLL,LMAAE1DL.DLL,LMAAE1PU.DLL,\
 LMAAE1SE.DLL,LMAAE1TF.DLL,LMAAE1TH.HLP,LMAAE1UZ.ZIP' SambaEnt

 The result I get is:

 result was WERR_ACCESS_DENIED

 In the log.smbd I get the following error:

[2004/01/18 17:29:22, 0] printing/pcap.c:pcap_printer_fn(361)
  Unable to open printcap file cups for read!

 I'm not sure whats causing this error. I have changed the 
 permissions on the /etc/printcap file to be wide open, and 
 that doesn't seem to work either. Can anyone shed some light 
 on where I might have messed up?

There are too many single points of failure - correct spelling 
and ordering of parameters, existence of driver files at the
right location, perms on the target model subdir etc. But all
these can usually be precisely detected by using a proper debug
level - of smbd, NOT of rpcclient. Jump the debug level with
smbcontrol and then look in the client log file after the
failure.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Can only login from Windows, when not a domain member

2004-01-19 Thread Arnst, Rainer
Hi,

I have set up Samba 3.0.1 to work as a Domain Member. Security is ADS.

wbinfo -a User%Pass works for the ADS users, winbind works as well.
wbinfo -t is ok as well.

When I try to connect to the computer from windows, it is only
successful, when I am not logged in as a member of the domain like
domain\user but logged in as a local user on the windows box
(Administrator).

I can also mount shares from another linux box via smbmount, ads
authentification works here as well. It only doesn't work from windows
machines, when the user logged in is a domain member. Anyone has any
clues?

Here are my settings.

Have a nice day,
Rainer

LINUX-PRINT:/var/log/samba# testparm
Load smb config files from /etc/samba/smb.conf
Processing section [homes]
Processing section [test]
Processing section [printers]
Loaded services file OK.
'winbind separator = +' might cause problems with group membership.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

# Global parameters
[global]
workgroup = DOMAIN
realm = REALM.DE
server string = %h server (Linux/Samba %v)
security = ADS
password server = server.domain.de
passdb backend = tdbsam, guest
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
log level = 4
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
name resolve order = wins lmhosts host bcast
printcap name = cups
wins server = server
panic action = /usr/share/samba/panic-action %d
idmap uid = 1-2
idmap gid = 1-2
template homedir = /home/ads/%U
template shell = /bin/bash
winbind separator = +
invalid users = root
printing = cups

[homes]
comment = Home Directories
read only = No
create mask = 0700
directory mask = 0700
browseable = No

[test]
comment = test
path = /tmp
read only = No

[printers]
comment = All Printers
path = /tmp
create mask = 0700
guest ok = Yes
printable = Yes
browseable = No

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] terrible host\5Cusername ldap issue

2004-01-19 Thread Paolo Negri
Solved. Missing ldap admin credential.
Tnx
--
blank: Caught deadly signal TERM
blank: Finished. 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Could not fetch trust account password for domain ...

2004-01-19 Thread P . Jensen
Heya ,

I just read this post on lists.samba.org about getting the error Error 
looking up domain users.

When i read your post i realise i got exacly the same problem atm. With me 
also the smbpasswd command to let the linux server join the NT network 
works fine, and also the wbinfo -p and -t work fine. the -A 
login%password goes fine. However, when i try -u or -g commands i get 
the same error as mentioned above.

Is there someone who could give me some helpfull tips ?

Thanx in advance.

With best regards,
Peter Jensen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] creating users from w2k with usrmgr and samba 3.0.1: Happy End!!

2004-01-19 Thread Alexander Goeres
Am Freitag, 16. Januar 2004 18:12 schrieb John H Terpstra:
 Not really. If your scripts (add user, add group, etc.) are correctly set
 up then you can use this tool to manage users and groups without problem.

That is true! It works!

 You observation is the result of configuration problems.
 ...
 You must be logged in a the Domain Administrator, and unfortunately I have
 discovered that there is no way around it, you must be logged on a the
 user called root.

For me it also works when the Domain Admin is administrator! 

 ...
 Unfortunately, this breaks. You have to use root. Duplicate accounts
 that share a UID break things badly. For example, having an account called
 root and one called Administrator, both with UID=0, break winbind
 operation.
 ...
 NT Domain Admins group needs to have GID=0.
 ...
 - John T.

My Samba-errors all came from messed up user to program rights.

Just a short description how my final config looks like:
Groupmapping:
Domain Admins - root
Domain Users - domuser (ad libitum)
Domain Guests - nogroup

Administrative Samba-Users:
root, primary Linux-Group: root
administrator, primary Linux-Group: root

Valid Samba-Users:
+root, +domuser, +nogroup

Samba Admin-Group:
+root

Machines are added to the group nogroup by default. When I first had them 
added to a machines-group an account for each computer could be created 
(Welcome to the Domain X), but later logon was denied with errors 
refering to missing computer-accounts. Obviously nobody has to be among the 
Valid Users because he/she/it does something during the logon process.

The result is, that I can logon at the Domain as administrator, start the 
NT4 tool usrmgr.exe and can create, delete and change users and groups within 
the domain.  Even my former complaint about the Debian tool adduser was 
wrong: with this config it works perfectly. 

Just one litte thing about strange error messages: if I set a password less 
than 5 characters, the usrmrg error is not password invalid.. too short or 
something along these lines, but it's: Access denied!. This is somewhat 
misleading. But the future users of this PDC will have to learn to use 
passwords longer than 4 characters, that can't be helped and won't harm 
them..

I'd be extremly glad if those people here who see some traps (resulting from 
such a config) lying ahead of me could inform me of them. But I'll see them, 
when I'm there..

But the future is bright and interesting and absolutely not harmful :-)

Thank's for the help and hints..

Greetings,
Alexander
-- 
---
agoeres _at_ lieblinx.net
tel.: +49 (0)30 / 61 20 26 87
fax: +49 (0)30 / 61 20 26 89
---
lieblinxNET
 we do software
a Marwood  Thiele GbR
---
reichenberger straße 125
10999 Berlin

http://lieblinx.net
---

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind Problems

2004-01-19 Thread David Childs
Hello

I hope someone can help me out. I have setup samba Version 3.0.0 to 
work with LDAP and winbind.

I can join the domain with a Win2k client but if I try to login it 
fails. When I try to view the users of the domain I can't but I can 
see the groups from the Win2k client.

The problem is that wbinfo -g reports correctly
[EMAIL PROTECTED] samba]# wbinfo -g
Domain Admins
Domain Users
Domain Guests
Domain Computers

But wbinfo -u has errors
[EMAIL PROTECTED] samba]# wbinfo -u
Error looking up domain users

Any ideas?
nsswitch.conf
passwd: files winbind
shadow: files
group:  files winbind

smb.conf
winbind use default domain = Yes
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
idmap gid = 1-2
idmap uid = 1-2
#use nss_winbind = yes
template homedir = /home/samba/%D/%U
template shell = /bin/false

ldap.conf
#nss_base_passwdou=People,dc=example,dc=com?one
nss_base_passwd dc=example,dc=com

#nss_base_shadowou=People,dc=example,dc=com?one
nss_base_shadow dc=example,dc=com











__
This email transmission and any documents, files or previous email 
messages attached to it may contain information that is confidential or 
legally privileged. If you are not the intended recipient or a person 
responsible for delivering this transmission to the intended recipient, 
you are hereby notified that you must not read this transmission and 
that any disclosure, copying, printing, distribution or use of this 
transmission is strictly prohibited. If you have received this 
transmission in error, please immediately notify the sender by telephone 
or return email and delete the original transmission and its attachments 
without reading or saving in any manner.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind and Solaris 9 with AD

2004-01-19 Thread Patrik Gustavsson
Hi,

I have the following libraries and links in /usr/lib and 
it works:

libnss_winbind.so
libnss_winbind.so.1 - libnss_winbind.so
nss_winbind.so.1 - libnss_winbind.so

/Patrik
On Mon, 2004-01-19 at 13:13, Unix Service (ANTS) wrote:
 Hi
 
 have been trying to get winbind working on Solaris 9 but to no effect.
 
 version info:
 
 samba: 3.0.0
 openldap: 2.1.23
 kerberos: MIT 1.3.1
 
 Have followed the instructions in every howto, usenet posting I could
 find:
 
 nscd not running
 created relevant links in /lib and /lib/security/sparcv9
 applied patch for nsswitch as recommended
 
 kinit -e works
 net ads join works
 wbinfo -t works
 wbinfo -u gives list of all users in all trusted domains
 getent doesn't work
 samba authentication doesn't work - get the following in winbindd.log:
 
 [2004/01/19 10:59:27, 5] nsswitch/winbindd_pam.c:(379)
   NTLM CRAP authentication for user [DEV]\[test7] returned
 NT_STATUS_OK (PAM: 0)
 [2004/01/19 10:59:27, 3] nsswitch/winbindd_acct.c:(875)
   [ 3551]: create_user: user=(test7), group=()
 [2004/01/19 10:59:27, 5] nsswitch/winbindd_acct.c:(521)
   wb_getgrnam: Did not find group (nobody)
 
 my smb.conf is:
 
 workgroup = DEV
 #workgroup = DEV.ANTS.AD.ANPLC.CO.UK
 realm = DEV.ANTS.AD.ANPLC.CO.UK
 security = ADS
 password server = lonsd010.dev.ants.ad.anplc.co.uk
 dns proxy = no
 idmap gid = 7-8
 idmap uid = 80-90
 winbind cache time = 15
 winbind use default domain = yes
 winbind enum users = yes
 winbind enum groups = yes
 encrypt passwords = yes
 log level = 9
 
 [temp]
 path = /tmp
 read list = @users
 
 [docs]
 path = /var/tmp/samba-3.0.0
 read list = @users
 
 I would appreciate any pointers as to further debugging I could do or
 possible problems as being able to use winbind to deal with samba
 authentication would make life a great deal easier.
 
 
 
 
 ***
 This communication (including any attachments) contains confidential information.  
 If you are not the intended recipient and you have received this communication in 
 error, you should destroy it without copying, disclosing or otherwise using its 
 contents.  Please notify the sender immediately of the error.
 
 Internet communications are not necessarily secure and may be intercepted or changed 
 after they are sent.  Abbey National Treasury Services plc does not accept liability 
 for any loss you may suffer as a result of interception or any liability for such 
 changes.  If you wish to confirm the origin or content of this communication, please 
 contact the sender by using an alternative means of communication.
 
 This communication does not create or modify any contract and, unless otherwise 
 stated, is not intended to be contractually binding.
 
 Abbey National Treasury Services plc. Registered Office:  Abbey National House, 2 
 Triton Square, Regents Place, London NW1 3AN.  Registered in England under Company 
 Registration Number: 2338548.  Regulated by the Financial Services Authority (FSA).
 ***
-- 
In a world without fences who needs Gates
Patrik Gustavsson, Senior Technical Consultant
[EMAIL PROTECTED] Telephone: +46 60 671540
http://glen.swedenMobile: +46 70 3551040
SUN MICROSYSTEMS  Fax: +46 60 671550
--


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba Digest, Vol 13, Issue 30

2004-01-19 Thread Thomas Bork
 I will be out of the office starting from Dec 02 till Jan. 12th, 2004. If
 it is urgent please send e-mail to [EMAIL PROTECTED] and
 someone will assist you. Thanks.
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

don't use this for mailinglists!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] mounting smbfs from a Solaris 7 box

2004-01-19 Thread Patrik Gustavsson

You can't, Solaris don't have the smbfs kernel driver.

/Patrik

On Wed, 2004-01-14 at 21:18, Knoll, Steve wrote:
 Has any Sun Solaris samba admin ever attempted to mount to a WindowsNT server?  
 Unfortunately after several attempts and some elaborate syntax I can not get this to 
 work.  I do not see that Sun supports smbfs as Linux does.  If anyone has any ideas 
 or tricks please drop me a line.
  
 Thanks,
 
 Steve Knoll 
 Intersil Corporation
 PAT Systems Group
 * (email)  mailto:[EMAIL PROTECTED]
 * (voice) 1(321)729-5871
 * (fax) 1(321)729-1194 
 
  
-- 
In a world without fences who needs Gates
Patrik Gustavsson, Senior Technical Consultant
[EMAIL PROTECTED] Telephone: +46 60 671540
http://glen.swedenMobile: +46 70 3551040
SUN MICROSYSTEMS  Fax: +46 60 671550
--


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Capital Letters - Charset problem

2004-01-19 Thread Alvaro Aguilera
Hello,

I have a strange problem with samba 3.0.1 on suse 8.1, when I mount an
NT shared directory the accented capitals letters are not recognised.
Everything works fine except for files having accented *capitals*.

My smb.conf has:

unix charset = ISO-8859-15
display charset = ISO-8859-15
dos charset = CP850
unicode = No

I tried compiling libiconv and recompiling samba with it, but with no
result.

Anyone can give me a hint?

Thanks a lot!



-- 
Alvaro Aguilera [EMAIL PROTECTED]
CONATEL S.A.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] winbind and Solaris 9 with AD

2004-01-19 Thread Ganguly, Sapan

Patrik,

Hello!  I have been waiting for you to get back, you may be able to help me.
I am having trouble making winbind work with Solaris 9.  I was wondering if
you could post a copy of your pam.conf again so that I can double check that
I have a correct copy of it?

The problem I am having is that when I try to log in with an NT username and
password the login process hangs after I put the password in.  I don't know
why this happens because getent works.  I decided to log what is going on in
PAM, here is what I got -

Jan 14 13:29:55 sun001 pam_winbind[15352]: [ID 571141 auth.debug]
libpam_winbind:pam_sm_close_sessio
n handler
Jan 14 13:29:59 sun001 login: [ID 634615 auth.debug]
pam_authtok_get:pam_sm_authenticate: flags = 0 Jan 14 13:30:05 sun001 login:
[ID 378613 auth.debug] pam_dhkeys: user ganguly not found Jan 14 13:30:05
sun001 login: [ID 896952 auth.debug] pam_unix_auth: entering
pam_sm_authenticate() Jan 14 13:30:05 sun001 login: [ID 219349 auth.debug]
pam_unix_auth: user ganguly not found Jan 14 13:30:05 sun001
pam_winbind[15369]: [ID 572310 auth.info] Verify user `ganguly' Jan 14
13:30:05 sun001 pam_winbind[15369]: [ID 614614 auth.notice] user 'ganguly'
granted acces Jan 14 13:30:05 sun001 login[15369]: [ID 509786 auth.debug]
roles pam_sm_authenticate, service = tel net user = ganguly ruser = not set
rhost = 192.168.224.90

Thanks for any help you can offer!

Sapan

-Original Message-
From: Patrik Gustavsson [mailto:[EMAIL PROTECTED] 
Sent: 19 January 2004 14:39
To: Unix Service (ANTS)
Cc: '[EMAIL PROTECTED]'
Subject: Re: [Samba] winbind and Solaris 9 with AD


Hi,

I have the following libraries and links in /usr/lib and 
it works:

libnss_winbind.so
libnss_winbind.so.1 - libnss_winbind.so
nss_winbind.so.1 - libnss_winbind.so

/Patrik
On Mon, 2004-01-19 at 13:13, Unix Service (ANTS) wrote:
 Hi
 
 have been trying to get winbind working on Solaris 9 but to no effect.
 
 version info:
 
 samba: 3.0.0
 openldap: 2.1.23
 kerberos: MIT 1.3.1
 
 Have followed the instructions in every howto, usenet posting I could
 find:
 
 nscd not running
 created relevant links in /lib and /lib/security/sparcv9 applied patch 
 for nsswitch as recommended
 
 kinit -e works
 net ads join works
 wbinfo -t works
 wbinfo -u gives list of all users in all trusted domains getent 
 doesn't work samba authentication doesn't work - get the following in 
 winbindd.log:
 
 [2004/01/19 10:59:27, 5] nsswitch/winbindd_pam.c:(379)
   NTLM CRAP authentication for user [DEV]\[test7] returned 
 NT_STATUS_OK (PAM: 0) [2004/01/19 10:59:27, 3] 
 nsswitch/winbindd_acct.c:(875)
   [ 3551]: create_user: user=(test7), group=()
 [2004/01/19 10:59:27, 5] nsswitch/winbindd_acct.c:(521)
   wb_getgrnam: Did not find group (nobody)
 
 my smb.conf is:
 
 workgroup = DEV
 #workgroup = DEV.ANTS.AD.ANPLC.CO.UK
 realm = DEV.ANTS.AD.ANPLC.CO.UK
 security = ADS
 password server = lonsd010.dev.ants.ad.anplc.co.uk
 dns proxy = no
 idmap gid = 7-8
 idmap uid = 80-90
 winbind cache time = 15
 winbind use default domain = yes
 winbind enum users = yes
 winbind enum groups = yes
 encrypt passwords = yes
 log level = 9
 
 [temp]
 path = /tmp
 read list = @users
 
 [docs]
 path = /var/tmp/samba-3.0.0
 read list = @users
 
 I would appreciate any pointers as to further debugging I could do or 
 possible problems as being able to use winbind to deal with samba 
 authentication would make life a great deal easier.
 
 
 
 
 **
 *
 This communication (including any attachments) contains confidential
information.  If you are not the intended recipient and you have received
this communication in error, you should destroy it without copying,
disclosing or otherwise using its contents.  Please notify the sender
immediately of the error.
 
 Internet communications are not necessarily secure and may be 
 intercepted or changed after they are sent.  Abbey National Treasury 
 Services plc does not accept liability for any loss you may suffer as 
 a result of interception or any liability for such changes.  If you 
 wish to confirm the origin or content of this communication, please 
 contact the sender by using an alternative means of communication.
 
 This communication does not create or modify any contract and, unless 
 otherwise stated, is not intended to be contractually binding.
 
 Abbey National Treasury Services plc. Registered Office:  Abbey 
 National House, 2 Triton Square, Regents Place, London NW1 3AN.
Registered in England under Company Registration Number: 2338548.  Regulated
by the Financial Services Authority (FSA).

***
-- 
In a world without fences who needs Gates
Patrik Gustavsson, Senior Technical Consultant
[EMAIL PROTECTED] Telephone: +46 60 671540
http://glen.swedenMobile: +46 70 3551040
SUN MICROSYSTEMS  Fax: +46 60 671550

[Samba] w2k/XP won't join samba pdc

2004-01-19 Thread Lists
Hi

I'm sure this must have come up before - if so I apologise.
I have googled, read HOWTOs FAQ and numerous personal accounts on how to
configure samba as a PDC but to no avail - neither w2k nor XP  will join the
domain. NT4 Workstation and Win9x I have working fine - where have I gone
wrong ?

Linux SETUP:  RedHat 7.3, samba-2.2.7-3.7.3 (upgraded from 2.2.3a)
Win2k SETUP: Win 2000 Pro, Service pack 4
Win XP SETUP Win XP Pro
I have used the Samba-HOWTO-Collection to configure the server

os level = 64
preferred master = yes
domain master = yes
local master = yes
security = user
domain logons = yes
logon path = \\%L\Profiles\%u

[netlogon]
   comment = Network Logon Service
   path = /usr/share/samba/netlogon
   guest ok = yes
   writable = no
   share modes = no

[Profiles]
path = /export/smb/ntprofiles
browseable = no
guest ok = yes

/usr/share/samba/netlogon  is drwxr-xr-x2 root root
/export/smb/ntprofilesis drwxr-xr-x2 root root

I have also added to the global section in smb.conf,
   admin users = jim
   domain admin group = root jim @wheel
which  found referenced in a news article

jim is a user on the linux box, exists in the smbpasswd file and is an
administrator W2k system

I have also manually created the two machine accounts admin1$ (w2k) and
admin2$ (XP). and added them to the smbpasswd file as described in the
Samba-HOWTO-Collection

In | Advanced | Network identification | properties I change the workgroup
to domain NEWDOM
win prompts me for a username (jim) and password (XXX) and I get the
following...

Windows error
The following error occurred attempting to join the domain NEWDOM
Logon failure: unknown user name or bad password

Samba error (#tail -f  admin1.log)
...
[2004/01/19 16:26:24, 0] smbd/service.c:make_connection(381)
  make_connection: jim logged in as admin user (root privileges)
[2004/01/19 16:26:25, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(670)
  api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
[2004/01/19 16:26:25, 0] rpc_server/srv_samr_nt.c:_samr_set_userinfo(2480)
  _samr_set_userinfo: Unable to get smbpasswd entry for uid 0
[2004/01/19 16:26:25, 0] smbd/service.c:make_connection(381)
  make_connection: jim logged in as admin user (root privileges)
...

:-(

on XP the samba log is the same

initially I thought it was a permissions error on the smbpasswd file which
is 0600, I changed it to 0640 but once I try and connect samba changes it
back to 0600

any ideas, suggestions would be greatly appreciated

James

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Printer problem, does somebody could help me please?

2004-01-19 Thread Samuel Jobin
Hi!

I got a Linux server (slack 8.1) running samba (2.2.4) to share home 
directories, printers and stuff like that.  Recently, I got a problem 
with my printer.  On Windows 2000, when I'm trying to print on my print 
server (samba), i get the following status on windows in the printer 
status:  supressing.  I don't understand why.  I removed all the job in 
my printer queue, I restarted lpd, smbd and nmbd and I reinstalled the 
printer on my Win 2000.  But I always got the same message.  Does 
somebody have never seen something like that?  That is wrong?

here is my printer share definition on smb.conf:

[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   guest ok = yes
   printable = yes
   print command = lpr -r -Znoff -P%p %s
And the definition in /etc/printcap:

dfax_ps|Envoi massif postscript:\
  :lp=/dev/null:\
  :sd=/u/spool/lpd/dfax_ps:\
  :sh:\
  :mx#0:\
  :if=/util/Filters/nocover_ps:
Thanks a lot,

Sam
--
Samuel Jobin
[EMAIL PROTECTED]
Software Development
_
--== GNI inc.==--
5075 Wilfrid-Hamel O.
Suite 220
Québec (QC), G2E 5G3
Phone: (418) 864-7721
Fax:   (418) 263-3150
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] win2k wont join domain; tried everything

2004-01-19 Thread Nathan Brown
I have tried that. That was one of the first preliminary things I did. 
That isnt the problem. Its with windows 2000, where you have to type in 
a username and password to join a domain, and its not accepting root, 
and my password.

On Jan 19, 2004, at 2:57 AM, [EMAIL PROTECTED] wrote:

OK. Why don't you try to just 'useradd PC1$' and 'smbpasswd -a -m PC1'
if the machine's name is PC1. It still works in samba 3.0.0.1final...
Cheers,
Juanjo
- Mensaje Original -
Remitente: Nathan Brown [EMAIL PROTECTED]
Fecha: Lunes, Enero 19, 2004 8:01 am
Asunto: [Samba] win2k wont join domain; tried everything
I have a fresh installation of Windows 2000. I added the machine
accountto the samba server but no matter what I do, I can't get it
to join the
domain.
I believe the problem lies with my samba server. The new net
commandisvery confusing to me and I believe I messed something
up.I am now unable
to login with the root user no matter what; which is required for
logginWin2K into a domain.
I have done all of the obvious things such as smbpasswd -a
root, etc.
What i really want to know is where all the setting are stored for the
net command and just clear it all out and start over. And maybe
the list
of steps required to get this working (domain logon) as i can not
find any
recent info thats very comprehendable.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba PDC and Automatic Printer Install

2004-01-19 Thread Michael Aldrich
The below mentioned have all been fixed. I can see the printer 'HP2300' from
my XP Pro machine (in 'Ready' status), but I cannot print to it.
In my /var/log/cups/error_log, I see:

E [19/Jan/2004:10:22:23 -0500] get_jobs: resource name '/printers/HP2300' no
good!
E [19/Jan/2004:10:22:23 -0500] get_printer_attrs: resource name
'/printers/::{2227a280-3aea-1069-a2de-08002b30309d}' no good!
E [19/Jan/2004:10:22:32 -0500] print_job: resource name '/printers/HP2300'
no good!

Thanks
Mike

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf
Of Kurt Pfeifle
Sent: Saturday, January 17, 2004 8:12 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Samba PDC and Automatic Printer Install


 Michael Aldrich maldrich at i-centrix.com
 Wed Jan 14 15:35:11 GMT 2004

 Hello,
 I am trying to install automatic printer driver download and install.
 I am running Samba 3, as a PDC, on RedHat 7.3.


Sorry, Mike,

I'm currently not able to follow the mails on this list one by one. Just
an occasional glance. So I haven't looked deeply into your problem either...

 It seems everything is setup correctly,

No. Not completely. You are trying to use a driver downloaded from the
Samba server, yet you still have set smb.comf to use client driver = Yes.
Delete this line. Restart smbd. Then try again.

[...]

 rpcclient $ setdriver lp HP LaserJet 2300 Series PCL 6
 SetPrinter call failed!

[]

 Snip from my smb.conf:
 [printers]

[]

 printing = cups
 use client driver = Yes
   ^^^
[]

 [lp]

[]

 use client driver = Yes
   ^^^

 oplocks = No

[]

 Why do I get WERR_ACCESS_DENIED from SetPrinter?


What you try to do is not compatible with use client driver = Yes

 Thanks
 Mike


 And thanks to Kurt for getting me this far


;-)

Cheers,
Kurt


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] winbind and Solaris 9 with AD

2004-01-19 Thread Unix Service (ANTS)
Hi

Thanks to everyone for their intial replies.

I have edited nsswitch.conf and I have the links that Patrik mentioned.

I'm not really too fussed about getent working ( only in so far as getent
not working maybe indicates a more general problem )  or allowing users to
log on - I just want users without unix accounts to be able to access samba
shares without having to use username.map or leaving shares wide open.

So all I'm looking at is using winbind for samba authentication only - has
anybody got this working on Solaris 9 with 3.0.0 and security=ADS?

tim



***
This communication (including any attachments) contains confidential information.  If 
you are not the intended recipient and you have received this communication in error, 
you should destroy it without copying, disclosing or otherwise using its contents.  
Please notify the sender immediately of the error.

Internet communications are not necessarily secure and may be intercepted or changed 
after they are sent.  Abbey National Treasury Services plc does not accept liability 
for any loss you may suffer as a result of interception or any liability for such 
changes.  If you wish to confirm the origin or content of this communication, please 
contact the sender by using an alternative means of communication.

This communication does not create or modify any contract and, unless otherwise 
stated, is not intended to be contractually binding.

Abbey National Treasury Services plc. Registered Office:  Abbey National House, 2 
Triton Square, Regents Place, London NW1 3AN.  Registered in England under Company 
Registration Number: 2338548.  Regulated by the Financial Services Authority (FSA).
***

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] w2k/XP won't join samba pdc

2004-01-19 Thread Alexander Goeres
Am Montag, 19. Januar 2004 15:56 schrieb Lists:
 /usr/share/samba/netlogon  is drwxr-xr-x2 root root
 /export/smb/ntprofilesis drwxr-xr-x2 root root

Accoring to all I've learned during the past 2 weeks, the profile-directory 
should be writable to everyone that wants to write in it ..

 Windows error
 The following error occurred attempting to join the domain NEWDOM
 Logon failure: unknown user name or bad password

 Samba error (#tail -f  admin1.log)
 ...
 [2004/01/19 16:26:24, 0] smbd/service.c:make_connection(381)
   make_connection: jim logged in as admin user (root privileges)
 [2004/01/19 16:26:25, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(670)
   api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
 [2004/01/19 16:26:25, 0] rpc_server/srv_samr_nt.c:_samr_set_userinfo(2480)
   _samr_set_userinfo: Unable to get smbpasswd entry for uid 0

That bit with unable to get smbpasswd entry for uid 0 looks as if samba is 
looking for a samba-user with the uid 0, i.e. root as a samba user. Is root 
already a valid samba user?

Alexander
-- 
---
agoeres _at_ lieblinx.net
tel.: +49 (0)30 / 61 20 26 87
fax: +49 (0)30 / 61 20 26 89
---
lieblinxNET
 we do software
a Marwood  Thiele GbR
---
reichenberger straße 125
10999 Berlin

http://lieblinx.net
---

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] patching 3.0.0 to 3.0.1

2004-01-19 Thread Greg Chavez

On Mon, 19 Jan 2004, Gerald Carter wrote:
 On Sun, 18 Jan 2004, Greg Chavez wrote:

  I'm running Samba 3.0 on Solaris 9.  I'm hoping that the new release
  will help me with some problems I've been having with character
  conversions using smbprint.sysv (you will hear more form me if it
  doesn't).
 
  I do this:
 
# cd samba-3.0.0/source
# make distclean
# ls patch*
patch-3.0.0-3.0.1.gz

 cd ..

# gzcat patch* | patch -p0## GNU patch 2.5.4

 gzcat source/patch* | patch -p1

That was the magic pill.  I grep'd source/ from the patchfile and
noticed that many of the file paths begin with samba/source.  So you
need run patch from the samba/ directory, not samba/source, and strip
off samba/ with -p1.  Weird.  Thanks to jerry for a speedy response.

--Greg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] network browserlist error(S)..

2004-01-19 Thread Spencer
Collen wrote:

G'day.. just haveing the straingest problem..

I'd upgraded to the 302rc1 version. i configed it to be an pdc 
controller, with wins to manage our local domain..
only when browsing the domain list.

it gives error(s) once in a while..
An extended error has occured 
the system cannot find massage text for message number 0x in the 
message file for \\hostname

I get this same error running 3.01 I have a PDC and multiple BDC's. The
PDC has
os level  = 33
preferred master = yes
domain master = yes
domain logons = yes
local master = yes
wins support = yes
My BDC's have
os level = 32
preferred master = no
domain master = no
domain logons = yes
local master = no
wins server = ip.address.of.bdc
This is a problem because I have shares on some Windows 2000 SP4 servers
that my users cannot get to, I have to reboot the server for it to
work.  Is there someone who knows what is going on here or a suggestion
to fix it?
this is when you try to acces a computer or share for a win2k box, it 
happens 10 out of 100 times..

on a linux box, log.smb reports:

lib/util_sock.c:matchname(941)
 sys_gethostname(host.domain): lookup failure
lib/util_sock.c:get_socket_name(1008)
 matchname failed os host.domain 192.168.x.x
the pdc is the master browser with smb.conf
os level = 66
preferred master = yes
domain master = yes
domain logons = yes
local master = yes
wins support = yes
with 300 version i have no problems, from 301rc1 the error starts..
sugestions ?? solutions ..??
l8r
Collen Blijenberg
MLHJ



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba with Linux and Windows clients

2004-01-19 Thread Adriano Vasconcelos
I don't autenticate linux in the samba server. The usernames are known but the passwd 
are invalid. It happend when try install the pamsmb and NIS. What I do? 

In the documentation, is necessary modify the autentication for no use MD5 ou Shadow 
passord when there are systems operations diferents. Is correct ?

Configuration:
Server - Freebsd - Samba 3
Client - Linux Mandrake 9.1 / Kurumim 2.12
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] New install version question

2004-01-19 Thread Matthew Daubenspeck
I am planning on a mid-sized migration from Novell Netware to Samba. The
server will eventually have about 400 concurrent logins with mainly
shared home directories and printers. I am setting up a test server now,
and was wondering what version of Samba I should start with. I see that
a lot of linux distros still have 2.2.8 as the stable version to use
[2.2.3 for Debian].

Is it safe to try a 3.x version, or should I stick with 2.2.8? Are
there any specifics that 3.x will give me over 2.2.8?

Thanks in advance.
-- 
:wq!

  Matthew Daubenspeck
  http://www.oddprocess.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] winbind + trusted domain

2004-01-19 Thread Thierry ITTY
hello

I have a linux samba file server, 2.2.7a
I have a win nt4 pdc for domain HOME, which the above server is a member of
winbind is installed on samba, it works fine

I recently set up a trusted relationship between domain HOME and another
domain FOREIGN, which pdc is a w2k ad server

from windows point of view (I mean windows clients), everything is fine

from samba point of view, I can get access to FOREIGN resources, but
FOREIGN users can't get access to samba.

wbinfo -m shows FOREIGN as trusted domain
wbinfo -a FOREIGN\\user2%password2 works
wbinfo -n HOME\\user1 works
wbinfo -n FOREIGN\\user2 doesn't work (could not lookup name)

I googled around for some hours but didn't find anything

is it (really) a samba problem ?
what's the solution ?

tia


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] w2k/XP won't join samba pdc

2004-01-19 Thread Alexander Goeres
sorry, answer was mislead..
Am Montag, 19. Januar 2004 17:40 schrieb Lists:
 looking for a samba-user with the uid 0, i.e. root as a samba user. Is
  root already a valid samba user?

 I thought root was prohibited from being a root user - will try though

might be an unnessesary hint, but give the samba root a different pw than the
real root
-- 
---
agoeres _at_ lieblinx.net
tel.: +49 (0)30 / 61 20 26 87
fax: +49 (0)30 / 61 20 26 89
---
lieblinxNET
 we do software
a Marwood  Thiele GbR
---
reichenberger straße 125
10999 Berlin

http://lieblinx.net
---

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] netatalk Sambas' winbind

2004-01-19 Thread startux.org webmaster
Hi,

I've got a SuSE 9.0 running Samba 3.0.1  and Netatalk 1.6.3

Samba is a member server of a win2k domain, I'm using winbind to authnticate
my users.

Well, with the Windows users, everything is ok.
But not with the Mac users

I'd like to setup Netatalk to authenticate my Macs against the win2k domain
as with Windows.
Is this possible?  

I've sarched the web all around and couldn't find any info on the subject.

Warm regards,
Mário Gamito

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: smbldap-tools 8.3 populate errors

2004-01-19 Thread Curtis Grote
On Sun, 18 Jan 2004 10:55:15 +0100, Jérôme Tournier wrote:

 Le Sat, Jan 17, 2004 at 04:00:23PM +0100, Manfred Odenstein a ecrit:
 The tgz file is incomplete, I've notced this too. The rpm is complete, so I've 
 downloaded the rpm file instead, unpacked it, and copied the scripts to their 
 respective location.
 Yes, you are write. The archive now include the file.

Thanks for the fix. I downloaded it today and it works. I noticed however, that it
creates an 'Administrator' account with a uidNumber of 0. In a reply to a
post of mine on 2004-01-13 John Terpstra instructed me to avoid assigning
a UID of 0 to 'Administrator' because it would break winbind. Instead he
recommended using a 'root' account. Are you aware of this? John also
mentioned that the root account should have an rid (sambaSID?) of 500.
There still seems to be a lot of confusion as to the required sambaSID of
the root, administrator, and nobody accounts. Is any progress being made
in solidifying the rquirements?
 
 
 My system is now runnung, but I think there are some bugs in the populate 
 script, e.g. the SID of the Administrator account should end with -500 as I 
 know, because it's predefinded. Any comment from the author ???
 500 is the well-known RID for the domain administrator, not for
 the administrator account, am i wrong ?
  
 and please take care of the default groups in the smbldap.conf file, default 
 machine account points to Print Operators (550) should be Domain 
 Computers (553).
 Yes, fixed.
  
 I've also changed the gidNumber and uidNumber of the guest account and Domain 
 Guest group to the default values of my system (SuSE9)
 
 after this all worked correctly except some log-entries .
 Failed to open group mapping database 
 and 
 failed to decode PDU
 Do you always have this error messages ? With every scripts ?
 Thanks for your report !

Curtis Grote
Memorial Hospital

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Solaris 9 + Samba 3.0.2rc1 problem

2004-01-19 Thread Hai Wu
I thought I got them working and it turned out I still have the same problem. 

This is a domain member server, joined to NT PDC. These commands are all working Ok: 
wbinfo -u, wbinfo -g, getent passwd, except getent group. It always stops at some 
point, I noticed these log messages:
[2004/01/19 13:09:56, 10] nsswitch/winbindd.c:winbind_client_read(458)
client_read: read 0 bytes. Need 1568 more for a full request.
[2004/01/19 13:09:56, 5] nsswitch/winbindd.c:winbind_client_read(465)
read failed on sock 22, pid 23630: EOF


Some configuration entries in smb.conf:
encrypt passwords = yes
idmap uid = 1-8
winbind gid = 1-8
winbind enum users = yes
winbind enum groups = yes
winbind separator = +
winbind use default domain = yes

Here's how I compile Cyrus+SASL 2.1.17:
../configure --enable-shared --enable-gssapi=/usr/local/lib --with-openssl=/u
sr/local/ssl

I noticed in config.log, it says NTLM: disabled. Not sure if it matters here.

Here's how I compile Samba 3.0.2rc1:
 ./configure --with-krb5=/usr --with-pam --with-libsmbclient --with-manpages-
langs=en --with-winbind --with-ads --with-ldap --with-acl-support --with-libicon
v=/usr/local

I tried the above in Samba 3.0.1, Samba 3.0.2pre1, and Samba 3.0.2rc1 in Solaris 9, 
they all have the same getent group problem. But I noticed the winbindd in Samba 
3.0.2rc1 handles ls -l request much faster than before.

Thanks,
Hai



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Fw: [Samba] w2k/XP won't join samba pdc

2004-01-19 Thread Lists

  sorry, answer was mislead..
  Am Montag, 19. Januar 2004 17:40 schrieb Lists:
   looking for a samba-user with the uid 0, i.e. root as a samba user.
Is
root already a valid samba user?
  
   I thought root was prohibited from being a root user - will try though
 
  might be an unnessesary hint, but give the samba root a different pw
than
 the
  real root
  -- 

 you're correct :-)  now works fine except I get an error on creating the
 user's profile
 just when I though I'd conquered all -

 I'll play around with the permissions on the profiles share and see what
 works

 thanks again for the help

 regards

 James



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Filename for printing?

2004-01-19 Thread kend
Hi, all.  I'm trying to create a PDF queue... or, rather, I already have a
homebrew solution I hacked together with an lprng filter, and it doesn't
work too well.  The solution at www.linuxgazette.com/issue72/bright.html,
which uses the smb.conf and print command paramaters, appears to be much
more elegant, but has one major shortfall: I don't see any way to get the
filename of the file I'm printing.  The jobname gives me:

For websites:  the URL (which is great)
For apps (eg. Word): Microsoft (which is less great)

Many of the documents my users will be printing have detailed part
descriptions and partnumbers; it'd be a drag to not be able to have those
automatically associated with the PDFs being generated.  Does anyone see
an elegant way to make this work?  Or is it back to my inelegant, but
functional, lprng solution?

Thanks!

Ken D'Ambrosio
Sr. SysAdmin,
Xanoptix, Inc.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Need Samba printing help

2004-01-19 Thread Mark Fowle
I am posting again - Please help.

I am trying to add print drivers for a samba shared printer to a
Windows2000 group - Everything up to this step works - I am using Samba
3.0.1

rpcclient -d 100 -Uroot -c 'adddriver Windows NT x86 \
E323:LMAAE1DD.dll:\
LMAAE1P1.PPD:LMAAE1DA.DLL:LMAAE1DA.HLP:\
NULL:RAW:LMAA1B1.DLL,LMAAE1BJ.DLL,LMAAE1BT.DLL,LMAAE1DA.ALL,LMAAE1ED.DLL,LMAAE1PI.EXE,\
LMAAE1TD.DLL,LMAAE1TE.DLL,LMAAE1DA.CNT,LMAAE1DF.DLL,LMAAE1DL.DLL,LMAAE1PU.DLL,\
LMAAE1SE.DLL,LMAAE1TF.DLL,LMAAE1TH.HLP,LMAAE1UZ.ZIP' SambaEnt

The result I get is:

result was WERR_ACCESS_DENIED

In the log.smbd I get the following error:

[2004/01/18 17:29:22, 0] printing/pcap.c:pcap_printer_fn(361)  Unable to
open printcap file cups for read!

I'm not sure whats causing this error. I have changed the permissions
onthe /etc/printcap file to be wide open, and that doesn't seem to
workeither.  Can anyone shed some light on where I might have messed up?

Thanks,Mark
-- 
Mark Fowle
[EMAIL PROTECTED]



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Serious bug in Samba 3.0.2pre1 !!!

2004-01-19 Thread Alex de Vaal
Summarization of the bug in Samba 3.0.2pre1:
It seems that an ADS group is not valid or detected anymore to access a
samba share, in case only an ADS group is used a valid user on a Samba
share, because Kerberos is reporting: Username (null) is invalid on this
system.
Besides that, connecting to a share (service) reports with Samba 3.0.0-2
REALM\username (NH-TEST.NL\fo6), but with Samba 3.0.2pre1 connecting to
a share (service) reports only username (fo6)
Downgrading to Samba 3.0.0-2 solves this problem!
 
Subjoined the steps to reproduce the bug:
 
 
Windows 2003 native mode
Realm: NH-TEST.NL
 
Red Hat Linux release 9 (Shrike)
Kernel 2.4.20-8 on an i686 
 
Linux (server) newly installed on clean system.
 
Directly after Linux installation:
 
rpmbuild --rebuild krb5-1.3.1-7.src.rpm
Installed the resulting Kerberos packages. (rpm -Uhv  -- force -- nodeps
krb5*)
 
rpmbuild -- rebuild samba-3.0.1-2.src.rpm
Installed the resulting Samba package
 
Samba configured for the use of winbind.
 
Joined NH-TEST.NL realm.
wbinfo -u, wbinfo -g, getent passwd, getent group, wbinfo -I ip_address,
wbinfo -N netbios_name is working.
 
Samba share grp 
# Group Directory
[grp]
   writeable = yes
   inherit permissions = yes
   path = /data/grp
   comment = Group Directory
   valid users = @NH-TEST.NL\FO_GRP
   browsable = yes
 
getent group
FO_GRP:x:10014:fo7,fo6
 
chown root:FO_GRP /data/grp/fog
[EMAIL PROTECTED] data]# ls -l grp
drwxrws---5 root FO_GRP   4096 Jan 16 17:34 fog
 
Output log.smbd
[2004/01/15 11:58:27, 0] smbd/server.c:main(747)
  smbd version 3.0.1 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2003
 
On a Win2k workstation logged in on the domain as user fo6 accessing the
grp results in 10.15.69.101.log:
[2004/01/15 12:06:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(172)
  Failed to verify incoming ticket!
 
Left the NH-TEST.NL realm
 
rpmbuild -- rebuild samba-3.0.2pre1-1.src.rpm
rpmbuild -- rebuild samba-3.0.0-2.src.rpm
 
Installed the resulting Samba package: samba-3.0.2pre1-1.i386.rpm
 
Joined NH-TEST.NL realm.
wbinfo -u, wbinfo -g, getent passwd, getent group, wbinfo -I ip_address,
wbinfo -N netbios_name is working.
 
Output log.smbd
[2004/01/16 14:50:24, 0] smbd/server.c:main(747)
  smbd version 3.0.2pre1 started.
 
On a Win2k workstation logged in on the domain as user fo6 accessing the
grp share results in 10.15.69.101.log:
[2004/01/16 15:02:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(248)
  Username (null) is invalid on this system
 
And NO access to the grp share!!!
 
Changed on the grp share in smb.conf
valid users = fo6
(user fo6 is only available as ADS user and not as local Linux user!)
 
On a Win2k workstation logged in on the domain as user fo6 accessing the
grp share results in 10.15.69.101.log:
[2004/01/16 15:13:15, 1] smbd/service.c:make_connection_snum(705)
  10.15.69.101 (10.15.69.101) connect to service public initially as
user fo6 (uid=10004, gid=1) (pid 1161)
 
(getent group: Domain Users:x:1:)
(getent passwd: fo6:x:10004:1:fo6:/data/hom/fo6:/bin/bash)
 
and access to the grp share!!! However no access to the fog
directory!!!
 
[EMAIL PROTECTED] data]# ls -l grp
drwxrws---5 root FO_GRP   4096 Jan 16 17:34 fog
 
chown fo6:FO_GRP /data/grp/fog
[EMAIL PROTECTED] data]# ls -l grp
drwxrws---5 fo6 FO_GRP   4096 Jan 16 17:34 fog
 
Now access to the fog directory!
 
Left the NH-TEST.NL realm
 
Installed the Samba package: samba-3.0.0-2.i386.rpm
 
Joined NH-TEST.NL realm.
wbinfo -u, wbinfo -g, getent passwd, getent group, wbinfo -I ip_address,
wbinfo -N netbios_name is working.
 
Output log.smbd
[2004/01/16 16:08:49, 0] smbd/server.c:main(747)
  smbd version 3.0.0 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2003
 
Changed on the grp share in smb.conf
valid users = @NH-TEST.NL\FO_GRP
 
chown root:FO_GRP /data/grp/fog
[EMAIL PROTECTED] data]# ls -l grp
drwxrws---5 root FO_GRP   4096 Jan 16 17:34 fog
 
On a Win2k workstation logged in on the domain as user fo6 accessing the
grp share results in 10.15.69.101.log:
[2004/01/16 16:11:22, 1] smbd/service.c:make_connection_snum(698)
  10.15.69.101 (10.15.69.101) connect to service grp initially as user
NH-TEST.NL\fo6 (uid=10004, gid=1) (pid 1102)
 
Now I can access as fo6 user the grp share and I can access the fog
directory and this is possible when the user fo6 is given access to the
grp share only as group membership of the ADS group FO_GRP!

  
Summarization of the bug in Samba 3.0.2pre1:
It seems that an ADS group is not valid or detected anymore to access a
samba share, in case only an ADS group is used a valid user on a Samba
share, because Kerberos is reporting: Username (null) is invalid on this
system.
Besides that, connecting to a share (service) reports with Samba 3.0.0-2
REALM\username (NH-TEST.NL\fo6), but with Samba 3.0.2pre1 connecting to
a share (service) reports only username (fo6)
Downgrading to Samba 3.0.0-2 solves this problem!
 
 

[Samba] SQL 2000 Failed Authentication

2004-01-19 Thread Jerry Haltom
I am runnign a Samba 3.0.1 PDC, serving a domain named FEEDBACK. Joined
to this domain we have about 30 workstations and 2 Windows 2000 Servers.
These servers run MS SQL Server 2000. SQL Server is using Windows
authentication. This allows users/applications on our LAN to connect to
the server using Windows authentication.

This process has been flakey for the last month, with authentication
failing (SQL applications say: username (null) not associated with a
trusted connection). Since upgrading to Samba 3.0.1 about 2 days ago, it
has barely worked. It does work, if you try to connect enough times.
Perhaps 1/10 times.

I am unable to put a finger on what is causing the problem. We are not
having other problems with other computers or services on our network.
People can log in and access their shares just fine.

Both SQL servers show hte same problems, with no helpful messages in the
event log:

SubSystem Message - Job 'DOTTIE-Clients-GREG-13'
(0x7FAE23BF34367744869B36C09E3B81D2), step 2 - Login failed for user
'(null)'. Reason: Not associated with a trusted SQL Server connection.
The process could not connect to Subscriber 'GREG'. 

We have tried rebooting both servers, as well as disjoining and
rejoining one to the domain. The disjoining and rejoining is flawless,
but it doesn't fix the problem. We are unable to determine what to try
next.

Can anybody help us out? Thanks.

Please include me in the reply.

Jerry Haltom
Feedback Plus, Inc.

-- 
Jerry Haltom [EMAIL PROTECTED]
Feedback Plus, Inc.


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] winbind and Solaris 9 with AD

2004-01-19 Thread Unix Service (ANTS)
Looked through source and noticed there were some debug entries at level 10
for winbind - so upped log level and this time I get this:

[2004/01/19 18:18:47, 10] nsswitch/winbindd.c:(305)
  process_request: request fn CREATE_USER
[2004/01/19 18:18:48, 3] nsswitch/winbindd_acct.c:(875)
  [17805]: create_user: user=(test7), group=()
[2004/01/19 18:18:48, 5] libads/ldap_utils.c:(52)
  Search for (objectCategory=user) gave 18764 replies
[2004/01/19 18:18:48, 5] nsswitch/winbindd_acct.c:(521)
  wb_getgrnam: Did not find group (nobody)



-Original Message-
From: Patrik Gustavsson [mailto:[EMAIL PROTECTED] 
Sent: 19 January 2004 14:39
To: Unix Service (ANTS)
Cc: '[EMAIL PROTECTED]'
Subject: Re: [Samba] winbind and Solaris 9 with AD


Hi,

I have the following libraries and links in /usr/lib and 
it works:

libnss_winbind.so
libnss_winbind.so.1 - libnss_winbind.so
nss_winbind.so.1 - libnss_winbind.so

/Patrik
On Mon, 2004-01-19 at 13:13, Unix Service (ANTS) wrote:
 Hi
 
 have been trying to get winbind working on Solaris 9 but to no effect.
 
 version info:
 
 samba: 3.0.0
 openldap: 2.1.23
 kerberos: MIT 1.3.1
 
 Have followed the instructions in every howto, usenet posting I could
 find:
 
 nscd not running
 created relevant links in /lib and /lib/security/sparcv9 applied patch 
 for nsswitch as recommended
 
 kinit -e works
 net ads join works
 wbinfo -t works
 wbinfo -u gives list of all users in all trusted domains getent 
 doesn't work samba authentication doesn't work - get the following in 
 winbindd.log:
 
 [2004/01/19 10:59:27, 5] nsswitch/winbindd_pam.c:(379)
   NTLM CRAP authentication for user [DEV]\[test7] returned 
 NT_STATUS_OK (PAM: 0) [2004/01/19 10:59:27, 3] 
 nsswitch/winbindd_acct.c:(875)
   [ 3551]: create_user: user=(test7), group=()
 [2004/01/19 10:59:27, 5] nsswitch/winbindd_acct.c:(521)
   wb_getgrnam: Did not find group (nobody)
 
 my smb.conf is:
 
 workgroup = DEV
 #workgroup = DEV.ANTS.AD.ANPLC.CO.UK
 realm = DEV.ANTS.AD.ANPLC.CO.UK
 security = ADS
 password server = lonsd010.dev.ants.ad.anplc.co.uk
 dns proxy = no
 idmap gid = 7-8
 idmap uid = 80-90
 winbind cache time = 15
 winbind use default domain = yes
 winbind enum users = yes
 winbind enum groups = yes
 encrypt passwords = yes
 log level = 9
 
 [temp]
 path = /tmp
 read list = @users
 
 [docs]
 path = /var/tmp/samba-3.0.0
 read list = @users
 
 I would appreciate any pointers as to further debugging I could do or 
 possible problems as being able to use winbind to deal with samba 
 authentication would make life a great deal easier.
 
 
 
 
 **
 *
 This communication (including any attachments) contains confidential
information.  If you are not the intended recipient and you have received
this communication in error, you should destroy it without copying,
disclosing or otherwise using its contents.  Please notify the sender
immediately of the error.
 
 Internet communications are not necessarily secure and may be 
 intercepted or changed after they are sent.  Abbey National Treasury 
 Services plc does not accept liability for any loss you may suffer as 
 a result of interception or any liability for such changes.  If you 
 wish to confirm the origin or content of this communication, please 
 contact the sender by using an alternative means of communication.
 
 This communication does not create or modify any contract and, unless 
 otherwise stated, is not intended to be contractually binding.
 
 Abbey National Treasury Services plc. Registered Office:  Abbey 
 National House, 2 Triton Square, Regents Place, London NW1 3AN.
Registered in England under Company Registration Number: 2338548.  Regulated
by the Financial Services Authority (FSA).

***
-- 
In a world without fences who needs Gates
Patrik Gustavsson, Senior Technical Consultant
[EMAIL PROTECTED] Telephone: +46 60 671540
http://glen.swedenMobile: +46 70 3551040
SUN MICROSYSTEMS  Fax: +46 60 671550
--



***
This communication (including any attachments) contains confidential information.  If 
you are not the intended recipient and you have received this communication in error, 
you should destroy it without copying, disclosing or otherwise using its contents.  
Please notify the sender immediately of the error.

Internet communications are not necessarily secure and may be intercepted or changed 
after they are sent.  Abbey National Treasury Services plc does not accept liability 
for any loss you may suffer as a result of interception or any liability for such 
changes.  If you wish to confirm the origin or content of this communication, please 
contact the sender by using an alternative means of communication.

This communication does not 

Re: [Samba] W2k/SQL Authentication problems 3.0.1, help please

2004-01-19 Thread Jerry Haltom
Have you resolved this? I am having the same problem.

On Mon, 2004-01-12 at 13:02, Jason Jeremias wrote:
 I upgraded from Samba 2.2.8a to Samba 3.0.1, since doing I'm having 
 problems with my SQL Server and applications running on Windows 2000.  
 When a users (running a windows 98 client) attempts to query the SQL 
 Server, either using ODBC (even the Test Sources) or an application that 
 uses the db.  I get a login failed from the sql app, and from the ODBC I 
 get:
 
  Login failed for user '(null)', Reason: Not associated with a trusted 
 SQL Server connection. 
 
 That error shows up in the SQL Server Logs, and its displayed at the client.
 
 On the Samba side I see some NT user token: (NULL), in the logs but I'm 
 not sure what else to look for..
 
 I'm not sure what is going on but it seems like the W2k/SQL Server is 
 not doing the Windows Authentication properly.
 
 I've attached a testparm -vs and my smb.conf, I can provide logs or 
 whatever is needed to help me solve the problem.
 
 
 
 
 
 
 
 __
 # Global parameters
 [global]
   dos charset = CP850
   unix charset = UTF-8
   display charset = LOCALE
   workgroup = UNICOM
   afs username map = 
   netbios name = CARTMAN
   netbios aliases = 
   netbios scope = 
   server string = Cartman Anchorage Samba Server %v
   interfaces = 
   bind interfaces only = No
   security = USER
   auth methods = 
   encrypt passwords = Yes
   update encrypted = No
   client schannel = Auto
   server schannel = Auto
   allow trusted domains = Yes
   hosts equiv = 
   min passwd length = 5
   map to guest = Never
   null passwords = No
   obey pam restrictions = No
   password server = *
   smb passwd file = /etc/samba/private/smbpasswd
   private dir = /etc/samba/private
   passdb backend = smbpasswd
   algorithmic rid base = 1000
   root directory = 
   guest account = nobody
   pam password change = No
   passwd program = 
   passwd chat = *new*password* %n\n *new*password* %n\n *changed*
   passwd chat debug = No
   passwd chat timeout = 2
   username map = 
   password level = 0
   username level = 0
   unix password sync = No
   restrict anonymous = 0
   lanman auth = Yes
   ntlm auth = Yes
   client NTLMv2 auth = No
   client lanman auth = Yes
   client plaintext auth = Yes
   preload modules = 
   log level = 3
   syslog = 1
   syslog only = No
   log file = /var/log/samba3/log.%m
   max log size = 850
   timestamp logs = Yes
   debug hires timestamp = No
   debug pid = No
   debug uid = No
   smb ports = 445 139
   protocol = NT1
   large readwrite = Yes
   max protocol = NT1
   min protocol = CORE
   unicode = Yes
   read bmpx = No
   read raw = Yes
   write raw = Yes
   disable netbios = No
   acl compatibility = 
   nt pipe support = Yes
   nt status support = Yes
   announce version = 4.9
   announce as = NT
   max mux = 50
   max xmit = 16644
   name resolve order = lmhosts wins host bcast
   max ttl = 259200
   max wins ttl = 518400
   min wins ttl = 21600
   time server = No
   unix extensions = Yes
   use spnego = Yes
   client signing = auto
   server signing = No
   client use spnego = Yes
   change notify timeout = 60
   deadtime = 0
   getwd cache = Yes
   keepalive = 300
   kernel change notify = Yes
   lpq cache time = 10
   max smbd processes = 0
   paranoid server security = Yes
   max disk size = 0
   max open files = 1
   read size = 16384
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   use mmap = Yes
   hostname lookups = No
   name cache timeout = 660
   load printers = Yes
   printcap name = cups
   disable spoolss = No
   enumports command = 
   addprinter command = 
   deleteprinter command = 
   show add printer wizard = Yes
   os2 driver map = 
   mangling method = hash2
   mangle prefix = 1
   stat cache = Yes
   machine password timeout = 604800
   add user script = /usr/sbin/useradd -s /bin/false '%u'
   delete user script = /usr/sbin/userdel '%s'
   add group script = /usr/sbin/groupadd %g  getent group '%g'|awk -F: '{print 
 $3}'
   delete group script = /usr/sbin/groupdel '%g'
   add user to group script = /usr/bin/gpasswd -a '%u' '%g'
   delete user from group script = /usr/bin/gpasswd -d '%u' '%g'
   set primary group script = /usr/sbin/usermod -g '%g' '%u'
   add machine script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine 
 Account' -s /bin/false -M %u
   shutdown script = 
   abort shutdown script = 
   logon script = %U.bat
   logon path = 
 

Re: [Samba] Need Samba printing help

2004-01-19 Thread alaslavic





Post the printer - related parts of your smb.conf file.  There are some
options like:
printcap = cups
printing = cups

...that may be necessary to allow cups to edit your printcap file.
Additionally, you cannot add print drivers in samba if you have:
use client driver = yes

Alex Laslavic
Havertys Tech Services

[EMAIL PROTECTED] wrote on 01/19/2004
03:16:52 PM:

 I am posting again - Please help.

 I am trying to add print drivers for a samba shared printer to a
 Windows2000 group - Everything up to this step works - I am using Samba
 3.0.1

 rpcclient -d 100 -Uroot -c 'adddriver Windows NT x86 \
 E323:LMAAE1DD.dll:\
 LMAAE1P1.PPD:LMAAE1DA.DLL:LMAAE1DA.HLP:\
 NULL:RAW:LMAA1B1.DLL,LMAAE1BJ.DLL,LMAAE1BT.DLL,LMAAE1DA.ALL,
 LMAAE1ED.DLL,LMAAE1PI.EXE,\
 LMAAE1TD.DLL,LMAAE1TE.DLL,LMAAE1DA.CNT,LMAAE1DF.DLL,LMAAE1DL.DLL,
 LMAAE1PU.DLL,\
 LMAAE1SE.DLL,LMAAE1TF.DLL,LMAAE1TH.HLP,LMAAE1UZ.ZIP' SambaEnt

 The result I get is:

 result was WERR_ACCESS_DENIED

 In the log.smbd I get the following error:

 [2004/01/18 17:29:22, 0] printing/pcap.c:pcap_printer_fn(361)  Unable to
 open printcap file cups for read!

 I'm not sure whats causing this error. I have changed the permissions
 onthe /etc/printcap file to be wide open, and that doesn't seem to
 workeither.  Can anyone shed some light on where I might have messed up?

 Thanks,Mark
 --
 Mark Fowle
 [EMAIL PROTECTED]


 [attachment signature.asc deleted by Alex Laslavic/MIS/Havertys] --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba3.0.1 bug?

2004-01-19 Thread Andrei Bazhgin
Gilberto, the latest and most stable version of Samba is 3.0.1, and you should
not de-grade to 3.0.0 because it has some bugs that are obvious right out of the
box,

Try monitoring your Samba log files.

First, kill all samba processes:

ps ax | grep smbd
kill ... (might need to su or sudo this)

Now start Samba with a higher debug level:

smbd -D -d 2 (call this from root)

And now monitor the logfiles:

tail -f /var/log/samba.log

While you have `tail' running, try doing the same operation that you were having
problems on and see if the log files report anything usefull. If there is too
mutch information coming from them, then try setting the debug level to 1.

Post any usefull information that you find.

On Mon, Jan 19, 2004 at 10:25:52AM -0200, Gilberto Nunes wrote:
 
 Hi
 
Somebody  knows about the samba3.0.1 bugs?
'cause I try to map unix group, same after run the net groupmap
 command, but don't work...
When I try the same think with samba3.0.0, this mapping work properly.
Somebody explain this to me, please!
 
 
 -- 
 Gilberto Nunes
 Suporte Rede Bonja - Bom Jesus/Ielusc
 Fone: 433-0155 - ramal 235
 www.ielusc.br - [EMAIL PROTECTED]
 Linux User n? 199930
 ICQ #136176504
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
andrei bazhgin | aftermath
programmer
http://nan2d.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] AW: Strange behavior WinXP and 2.2.8a and inherit permissions

2004-01-19 Thread Markus Thüer

 This only occurs in that shares 
  where I have set inherit permissions to yes. When I 
  set it to No it works again. I can run programms from 
  the share. 
 
 Perhaps the group execute bit is interpreted as system 
 attribute. Try map system = No and leave inheritance on. 
 
I tried it but with no success. The map system is by default no and I
have quiet simple shares. 
Perhaps you have a look at my smb.conf

# Samba config file created using SWAT
# from 192.168.123.102 (192.168.123.102)
# Date: 2004/01/19 22:24:21

# Global parameters
[global]
coding system = 
client code page = 850
code page directory = /usr/share/samba/codepages
workgroup = ARBEITSGRUPPE
netbios name = 
netbios aliases = 
netbios scope = 
server string = Samba Server
interfaces = 
bind interfaces only = No
security = USER
encrypt passwords = Yes
update encrypted = No
allow trusted domains = Yes
hosts equiv = 
min passwd length = 5
map to guest = Bad User
null passwords = No
obey pam restrictions = No
password server = 
smb passwd file = /etc/samba/smbpasswd
root directory = 
pam password change = No
passwd program = /usr/bin/passwd
passwd chat = *new*password* %n\n *new*password* %n\n *changed*
passwd chat debug = No
username map = 
password level = 0
username level = 0
unix password sync = No
restrict anonymous = No
lanman auth = Yes
use rhosts = No
admin log = No
log level = 0
syslog = 1
syslog only = No
log file = 
max log size = 5000
timestamp logs = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
protocol = NT1
large readwrite = Yes
max protocol = NT1
min protocol = CORE
read bmpx = No
read raw = Yes
write raw = Yes
acl compatibility = 
nt smb support = Yes
nt pipe support = Yes
nt status support = Yes
server schannel = Auto
announce version = 4.9
announce as = NT
max mux = 50
max xmit = 16644
name resolve order = lmhosts host wins bcast
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = Yes
unix extensions = Yes
change notify timeout = 60
deadtime = 0
getwd cache = Yes
keepalive = 300
lpq cache time = 10
max smbd processes = 0
max disk size = 0
max open files = 1
name cache timeout = 660
read size = 16384
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
stat cache size = 50
use mmap = Yes
total print jobs = 0
load printers = Yes
printcap name = CUPS
disable spoolss = No
enumports command = 
addprinter command = 
deleteprinter command = 
show add printer wizard = Yes
os2 driver map = 
strip dot = No
mangling method = hash
character set = 
mangled stack = 50
stat cache = Yes
domain admin group = 
domain guest group = 
machine password timeout = 604800
add user script = 
delete user script = 
logon script = 
logon path = \\%N\%U\profile
logon drive = 
logon home = \\%N\%U
domain logons = No
os level = 2
lm announce = Auto
lm interval = 60
preferred master = Auto
local master = No
domain master = No
browse list = Yes
enhanced browsing = Yes
dns proxy = Yes
wins proxy = No
wins server = 
wins support = No
wins hook = 
kernel oplocks = Yes
lock spin count = 3
lock spin time = 10
oplock break wait time = 0
add share command = 
change share command = 
delete share command = 
config file = 
preload = 
lock dir = /var/lib/samba
pid directory = /var/run/samba
utmp directory = 
wtmp directory = 
utmp = No
default service = 
message command = 
dfree command = 
valid chars = 
remote announce = 
remote browse sync = 
socket address = 0.0.0.0
homedir map = auto.home
time offset = 0
NIS homedir = No
source environment = 
panic action = 
hide local users = No
host msdfs = No
winbind uid = 
winbind gid = 
template homedir = /home/%D/%U
template shell = /bin/false
winbind separator = \
winbind cache time = 15
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = No

Re: [Samba] Need Samba printing help

2004-01-19 Thread Mark Fowle
The printer is a Lexmark E323 network laser printer -

In the smb.conf file I have:
[global]
.
.
.
   printcap name = cups
   load printers = yes
   use client driver = no
   disable spoolss = no
   printing = cups
   printer admin = @printadmin
   show add printer wizard = yes
.
.
.
### Shared Section ###
.
.
[printers]
   comment = All Printers
   path = /var/spool/cups
   browseable = no
   guest ok = yes
   writable = no
   printable = yes
   public = yes
   read only = no

[print$]
   path = /etc/samba/drivers
   browseable = yes
   guest ok = yes
   read only = yes
   write list = root, @printadmin
[E323]
 comment = E323 Test laser printer
 path = /var/spool/samba/E323
 printer name = E323
 writable = yes
 public = yes
 printable = yes
 print command = lpr-cups -P %p -o raw %s -r
 printer admin = root, @printadmin

# A useful application of samba is to make a PDF-generation service
# To streamline this, install windows postscript drivers (preferably
colour)
# on the samba server, so that clients can automatically install them.

[pdf-generator]
   path = /var/tmp
   guest ok = No
   printable = Yes
   comment = PDF Generator (only valid users)
   #print command = /usr/share/samba/scripts/print-pdf file path
win_path recipient IP 
   print command = /usr/share/samba/scripts/print-pdf %s ~%u
%L%u %m %I 





On Mon, 2004-01-19 at 15:59, [EMAIL PROTECTED] wrote:
 
 
 
 Post the printer - related parts of your smb.conf file.  There are some
 options like:
 printcap = cups
 printing = cups
 
 ...that may be necessary to allow cups to edit your printcap file.
 Additionally, you cannot add print drivers in samba if you have:
 use client driver = yes
 
 Alex Laslavic
 Havertys Tech Services
 
 [EMAIL PROTECTED] wrote on 01/19/2004
 03:16:52 PM:
 
  I am posting again - Please help.
 
  I am trying to add print drivers for a samba shared printer to a
  Windows2000 group - Everything up to this step works - I am using Samba
  3.0.1
 
  rpcclient -d 100 -Uroot -c 'adddriver Windows NT x86 \
  E323:LMAAE1DD.dll:\
  LMAAE1P1.PPD:LMAAE1DA.DLL:LMAAE1DA.HLP:\
  NULL:RAW:LMAA1B1.DLL,LMAAE1BJ.DLL,LMAAE1BT.DLL,LMAAE1DA.ALL,
  LMAAE1ED.DLL,LMAAE1PI.EXE,\
  LMAAE1TD.DLL,LMAAE1TE.DLL,LMAAE1DA.CNT,LMAAE1DF.DLL,LMAAE1DL.DLL,
  LMAAE1PU.DLL,\
  LMAAE1SE.DLL,LMAAE1TF.DLL,LMAAE1TH.HLP,LMAAE1UZ.ZIP' SambaEnt
 
  The result I get is:
 
  result was WERR_ACCESS_DENIED
 
  In the log.smbd I get the following error:
 
  [2004/01/18 17:29:22, 0] printing/pcap.c:pcap_printer_fn(361)  Unable to
  open printcap file cups for read!
 
  I'm not sure whats causing this error. I have changed the permissions
  onthe /etc/printcap file to be wide open, and that doesn't seem to
  workeither.  Can anyone shed some light on where I might have messed up?
 
  Thanks,Mark
  --
  Mark Fowle
  [EMAIL PROTECTED]
 
 
  [attachment signature.asc deleted by Alex Laslavic/MIS/Havertys] --
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
Mark Fowle
[EMAIL PROTECTED]



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] winbind and Solaris 9 with AD

2004-01-19 Thread Unix Service (ANTS)
Have done some more digging through the log files and found the following (
see extracts at bottom ):

21.22.05 smbd asks winbind to create user
21.22.05 winbindd appears to do this successfully ( wb_storepwnam: Success )
21.22.13 smbd never seems to receive notification of this and times out.

I don't know enough about the smbd/winbindd interaction to work out what's
happening ( will look at a working linux box to try and get an idea ) - has
anyone seen this before or know what could possibly cause this behaviour?

thanks

tim

Log.smbd:

[2004/01/19 21:22:05, 3] auth/auth_util.c:(1009)
  User test7 does not exist, trying to add it
[2004/01/19 21:22:05, 10] auth/auth_util.c:(74)
  auth_add_user_script: no 'add user script'.  Asking winbindd
[2004/01/19 21:22:05, 10] nsswitch/wb_client.c:(390)
  winbind_create_user: test7
[2004/01/19 21:22:05, 5] lib/username.c:(288)
  Finding user DEV\test7
[2004/01/19 21:22:05, 5] lib/username.c:(223)
  Trying _Get_Pwnam(), username as lowercase is dev\test7
[2004/01/19 21:22:05, 5] lib/username.c:(230)
  Trying _Get_Pwnam(), username as given is DEV\test7
[2004/01/19 21:22:05, 5] lib/username.c:(239)
  Trying _Get_Pwnam(), username as uppercase is DEV\TEST7
[2004/01/19 21:22:05, 5] lib/username.c:(247)
  Checking combinations of 0 uppercase letters in dev\test7
[2004/01/19 21:22:05, 5] lib/username.c:(251)
  Get_Pwnam_internals didn't find user [DEV\test7]!
[2004/01/19 21:22:05, 5] lib/username.c:(288)
  Finding user test7
[2004/01/19 21:22:05, 5] lib/username.c:(223)
  Trying _Get_Pwnam(), username as lowercase is test7
^C[2004/01/19 21:22:05, 5] lib/username.c:(239)
  Trying _Get_Pwnam(), username as uppercase is TEST7
[2004/01/19 21:22:05, 5] lib/username.c:(247)
  Checking combinations of 0 uppercase letters in test7
[2004/01/19 21:22:05, 5] lib/username.c:(251)
  Get_Pwnam_internals didn't find user [test7]!
[2004/01/19 21:22:05, 0] auth/auth_util.c:(1017)
  make_server_info_info3: pdb_init_sam failed!
[2004/01/19 21:22:05, 5] auth/auth.c:(268)
  check_ntlm_password: winbind authentication for user [test7] FAILED with
error
 NT_STATUS_NO_SUCH_USER
[2004/01/19 21:22:05, 2] auth/auth.c:(309)
  check_ntlm_password:  Authentication for user [test7] - [test7] FAILED
with e
rror NT_STATUS_NO_SUCH_USER
[2004/01/19 21:22:05, 5] auth/auth_util.c:(1185)
  attempting to free (and zero) a user_info structure
[2004/01/19 21:22:05, 10] auth/auth_util.c:(1188)
  structure was created for test7
[2004/01/19 21:22:06, 6] lib/util_sock.c:(407)
  write_socket(16,98)
[2004/01/19 21:22:06, 6] lib/util_sock.c:(410)
  write_socket(16,98) wrote 98
[2004/01/19 21:22:13, 10] lib/util_sock.c:(336)
  read_socket_data: recv of 4 returned 0. Error = Error 0
[2004/01/19 21:22:13, 10] lib/util_sock.c:(512)
  receive_smb: length  0!
[2004/01/19 21:22:13, 3] smbd/process.c:(1099)
  timeout_processing: End of file from client (client has disconnected).
[2004/01/19 21:22:13, 5] lib/gencache.c:(88)
  Closing cache file
[2004/01/19 21:22:13, 5] libsmb/namecache.c:(79)

Log.winbind:

[2004/01/19 21:22:05, 10] nsswitch/winbindd.c:(305)
  process_request: request fn CREATE_USER
[2004/01/19 21:22:05, 3] nsswitch/winbindd_acct.c:(875)
  [27622]: create_user: user=(test7), group=()
[2004/01/19 21:22:05, 5] nsswitch/winbindd_acct.c:(521)
  wb_getgrnam: Did not find group (nobody)
[2004/01/19 21:22:05, 10] sam/idmap_tdb.c:(125)
  db_allocate_id: ID_USERID (*id).uid = 80
[2004/01/19 21:22:05, 10] nsswitch/winbindd_acct.c:(157)
  passwd2string: converting passwd struct for test7
[2004/01/19 21:22:05, 10] nsswitch/winbindd_acct.c:(486)
  wb_storepwnam: Success -
test7:x:80:60001:test7:/home/ANTS431/test7:/bin
/false
[2004/01/19 21:22:05, 10] nsswitch/winbindd.c:(502)
  client_write: wrote 1304 bytes.
[2004/01/19 21:22:13, 10] nsswitch/winbindd.c:(455)
  client_read: read 0 bytes. Need 1568 more for a full request.


***
This communication (including any attachments) contains confidential information.  If 
you are not the intended recipient and you have received this communication in error, 
you should destroy it without copying, disclosing or otherwise using its contents.  
Please notify the sender immediately of the error.

Internet communications are not necessarily secure and may be intercepted or changed 
after they are sent.  Abbey National Treasury Services plc does not accept liability 
for any loss you may suffer as a result of interception or any liability for such 
changes.  If you wish to confirm the origin or content of this communication, please 
contact the sender by using an alternative means of communication.

This communication does not create or modify any contract and, unless otherwise 
stated, is not intended to be contractually binding.

Abbey National Treasury Services plc. Registered Office:  Abbey National House, 2 
Triton Square, Regents Place, London NW1 3AN.  Registered in England under Company 
Registration 

[Samba] smb3 + ldap howto?

2004-01-19 Thread Oscar Retana M.
Hello.

Is there somewhere a smb3+ldap howto?

I'm trying to use one found here [*] but it is currently under total 
re-construcction in order to support smb3.

I will appreciate *any* guide or document that cans help me!

Thanks.



[*] http://www.unav.es/cti/ldap-smb-howto.html

--
Oscar Retana M.
GridShield S.A.
Protección y Monitoreo de Redes
Tel:   +(506) 258-5757 ext 112
Cel:   +(506) 830-1631
Email: [EMAIL PROTECTED]
Web:   www.gridshield.net
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Career Site Linking

2004-01-19 Thread James A Kirk
Hello,

Does your organization link to sites focusing on career advancement for women?  
http://www.advancingwomen.net is specifically for women seeking career advancement and 
those organizations building a diverse workforce.  Please reply with the subject Add 
my link too if you wish to have your link added to AdvancingWomen.net. Included your 
site's title, url, and discription. Exchanging links will help build search engine 
placement for both sites. Thank you in advance for your prompt response.

Please forward this message to the appropriate parties if you are unable to make 
decisions about your organization's website.  Below is our link information.

Link: http://www.advancingwomen.net
Link Title: Job Search Engine for Women
Discription: Career advancement for professional women with free job search and 
anonymous resume posting. 

Regards,
James A Kirk
Links Manager
http://www.AdvancingWomen.net


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smb3 + ldap howto?

2004-01-19 Thread Jelmer Vernooij
Oscar Retana M. wrote:

Hello.

Is there somewhere a smb3+ldap howto?

I'm trying to use one found here [*] but it is currently under total 
re-construcction in order to support smb3.

I will appreciate *any* guide or document that cans help me!

Please try the one at
http://samba.org/samba/docs/Samba-HOWTO-Collection.pdf or 
http://samba.org/samba/docs/man/ (HTML version)

Jelmer

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


FW: [Samba] Problem updating/creating files with winbind and a wi n2k box

2004-01-19 Thread Harmon, Leigh

It appears that whenever the winbind process is running on my Solaris 8 machine,
I can't perform a long listing of the test share that I created (that is local
on the Solaris machine).  However, if I turn the winbind process off, then I can
get the results of a long listing (ls -l).

Also, when winbindd is running, it is eating up about 45% of the CPU.  I have
double checked the linking of the winbind libraries, my nsswitch.conf file, and
made sure that nscd is not running.  I can successfully run wbinfo -t, wbinfo
-u, wbinfo -g, getent passwd, and getent group.  I do not have a ld.config file
if that is a problem.  It would seem that winbind checks the local winbind_idmap
database and then returns the correct UID information associated with a file
almost instantly.

Nsswitch.conf
passwd: files winbind
shadow: files
group:  files winbind


Any help would be greatly appreciated!!!

-Original Message-
From: Harmon, Leigh [mailto:[EMAIL PROTECTED] 
Sent: Friday, January 16, 2004 3:48 PM
To: '[EMAIL PROTECTED]'
Subject: [Samba] Problem updating/creating files with winbind and a win2k box


Hi,

I'm having a strange issue with Samba 3.0.1 running on Solaris 8, and
updating/creating files on a Win2k machine.  I have a test share created on the
Solaris machine (path=/export) with initially no files in it.

I have no problem accessing the test share from the Win2k machine.  I can
successfully create/update a file in the test share from the Win2k machine.  The
problem occurs when I get on the Solaris machine and try to do a long listing of
all of the files in the test directory (/export) to look at the permission.  I
can perfrom a normal ls command and cat command, but a ls -l never returns
an answer:  

# pwd
/export

# ls
win2000.txt

# cat win2000.txt
This is a win 2000 test

# ls -al
^C

If I reboot my Solaris box, and perform the same ls -l command, then I can see
all of the information that I am supposed to see.  However, If I attempt to
update the file again, then the same issue occurs when doing a long listing.  It
appears that after an update occurs, the Solaris machine cannot return the
information from winbind to display the owner and group of the win2000.txt file.


Has anyone else ever experience this issue?

Thanks!!!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Filename for printing?

2004-01-19 Thread Ryan Novosielski
Check your quoting. You could end up with the whole filename which I
assume is what you want. Try putting single quotes around it wherever you
are using it.

 _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  |  | Ryan Novosielski - Jr. UNIX Systems Admin
|$| |__| |  | |__/ | \| _|  | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630

On Mon, 19 Jan 2004 [EMAIL PROTECTED] wrote:

 Hi, all.  I'm trying to create a PDF queue... or, rather, I already have a
 homebrew solution I hacked together with an lprng filter, and it doesn't
 work too well.  The solution at www.linuxgazette.com/issue72/bright.html,
 which uses the smb.conf and print command paramaters, appears to be much
 more elegant, but has one major shortfall: I don't see any way to get the
 filename of the file I'm printing.  The jobname gives me:

 For websites:  the URL (which is great)
 For apps (eg. Word): Microsoft (which is less great)

 Many of the documents my users will be printing have detailed part
 descriptions and partnumbers; it'd be a drag to not be able to have those
 automatically associated with the PDFs being generated.  Does anyone see
 an elegant way to make this work?  Or is it back to my inelegant, but
 functional, lprng solution?

 Thanks!

 Ken D'Ambrosio
 Sr. SysAdmin,
 Xanoptix, Inc.
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.2rc1 / LDAP login fails, pdbedit shows user

2004-01-19 Thread John Schmerold
I'm running 3.0.2rc1.  User authentication was working, until I got
the bright idea to change ntgroup _users_ to users
Now no one can login, any ideas how to fix?
I've tried deleting the tree  starting over from scratch, no joy:
[EMAIL PROTECTED] root]# smbclient //chs/tmp -U doj
Password:
tree connect failed: Call returned zero bytes (EOF)
[EMAIL PROTECTED] root]#
When I run pdbedit -v, the use is listed

I can browse the LDAP tree with Jarek Gawor's LDAP Browser\Editor

smb.conf is as follows:
[global]
force user = root
hosts allow = 192.168.10. 192.168.20.
hosts deny = all
interfaces = eth0 eth1
passdb backend = ldapsam
ldap suffix = dc=hbclp,dc=com
#ldap machine suffix = ou=_COMPUTERS_
#ldap user suffix = ou=_USERS_
#ldap group suffix = ou=_GROUPS_
ldap machine suffix = ou=computers
ldap group suffix = ou=groups
ldap user suffix = ou=users
ldap admin dn = cn=root,dc=hbclp,dc=com
#not using ssl because this is all happening on the localhost
ldap ssl = no
#ldap ssl = Yes
#ldap ssl = start tls
idmap backend = ldap:ldap://127.0.0.1
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
wins support = yes
idmap gid = 1-2
idmap uid = 1-2
passwd chat debug = Yes
passwd program =/usr/bin/smbldap-passwd.pl -o %u
passwd chat = *new*password* %n\n *new*password:* %n\ *successfully*
#mentioned that these options improve performance
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 

add machine script = /usr/bin/smbldap-useradd.pl -w %ms
add user script = /usr/bin/smbldap-useradd.pl -a %u
delete user script = /usr/bin/smbldap-userdel.pl %u
add group script = /usr/bin/smbldap-groupadd.pl %g
delete group script = /usr/bin/smbldap-groupdel.pl %g
add user to group script = /usr/bin/smbldap-groupmod.pl -m %u %g
delete user from group script = /usr/bin/smbldap-groupmod.pl -x %u %g
set primary group script = /usr/bin/smbldap-usermod.pl -G %g %u
workgroup = workgroup
netbios name = chs 
comment = Chesterfield Server
server string = Chesterfield Server
security = user
null passwords = yes
encrypt passwords = yes
logon script=logon.bat

### These left Blank will force local profiles but will not override LDAP config
##if set LDAP takes precedence.
logon drive =
logon path =
domain master = yes
domain logons = yes
preferred master = yes
os level = 33
wins support = no 
wins proxy = no

log file = /var/log/samba/%m.log

public = No
browseable = yes
writable = No
; necessary share for domain controller
[netlogon]
path = /netlogon
locking = no
read only = yes
write list = ntadmin 

;test share
[tmp]
writeable = yes
public = yes
path = /tmp
[profiles]
path = /profiles
read only = no
writeable = yes
create mask = 0600
directory mask = 0700
[sys]
public=yes
   path = /home/sys
   read only = No
[vol1]
public=yes
   path = /home/vol1
   read only = No
[cdroms]
public=yes
   path = /home/cdroms
   read only = No
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Help! Samba 3.0 can't use null password with OS X

2004-01-19 Thread David Wuertele
When I made the move to 3.0, I noticed that smbclient no longer works
with null passwords.  Am I missing something?  I read the FAQ, which
suggests that the server is rejecting the null password.  But I know
that null passwords work fine for the 2.2.8a client, so the server is
not the issue.  The FAQ recommends smbclient -L host -U%, but I
don't want to set the username to null.  I want a non-null username
with a null password.

I traced the packets on the two smbclients, and I see several
differences.  The command I ran was:

  smbclient //g4-box-1/dood  -I 192.168.5.90 -U dood

I used the same command on both 2.2.8a and 3.0 systems.  Here are the
differences I saw in the packets:

1.  client sends Extended Security Negotiation: Extended security
negotiation is supported on 3.0, but not on 2.2.8a

2.  2.2.8a client sends ANSI Password, Unicode Password, and
uppercased-account name.  Meanwhile, 3.0 client doesn't send
either passwords, and sends a lowercased-account name.  I think
this is actually the key here.

3.  the primary domain sent by 2.2.8a is the client's default
domain, while the primary domain sent by 3.0 is the domain of
the share being accessed

4.  2.2.8a sends SMB Command: Session Setup AndX (0x73) and gets
response NT Status: STATUS_SUCCESS (0x)
3.0 sends same command and gets response
   NT Status: STATUS_LOGON_FAILURE (0xc06d)

Any suggestions how to get 3.0 to work with null passwords?

Thanks,
Dave

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Help! Samba 3.0 can't use null password with OS X

2004-01-19 Thread Andrei Bazhgin
The latest release (stable) of Samba is 3.0.1, get that - I am sure the bug is
resolved in 3.0.1

On Mon, Jan 19, 2004 at 05:53:10PM -0800, David Wuertele wrote:
 When I made the move to 3.0, I noticed that smbclient no longer works
 with null passwords.  Am I missing something?  I read the FAQ, which
 suggests that the server is rejecting the null password.  But I know
 that null passwords work fine for the 2.2.8a client, so the server is
 not the issue.  The FAQ recommends smbclient -L host -U%, but I
 don't want to set the username to null.  I want a non-null username
 with a null password.
 
 I traced the packets on the two smbclients, and I see several
 differences.  The command I ran was:
 
   smbclient //g4-box-1/dood  -I 192.168.5.90 -U dood
 
 I used the same command on both 2.2.8a and 3.0 systems.  Here are the
 differences I saw in the packets:
 
 1.  client sends Extended Security Negotiation: Extended security
 negotiation is supported on 3.0, but not on 2.2.8a
 
 2.  2.2.8a client sends ANSI Password, Unicode Password, and
 uppercased-account name.  Meanwhile, 3.0 client doesn't send
 either passwords, and sends a lowercased-account name.  I think
 this is actually the key here.
 
 3.  the primary domain sent by 2.2.8a is the client's default
 domain, while the primary domain sent by 3.0 is the domain of
 the share being accessed
 
 4.  2.2.8a sends SMB Command: Session Setup AndX (0x73) and gets
 response NT Status: STATUS_SUCCESS (0x)
 3.0 sends same command and gets response
NT Status: STATUS_LOGON_FAILURE (0xc06d)
 
 Any suggestions how to get 3.0 to work with null passwords?
 
 Thanks,
 Dave
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
andrei bazhgin | aftermath
programmer
http://nan2d.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap-tools 8.3 populate errors

2004-01-19 Thread Beast
On Sun, 18 Jan 2004 10:55:15 +0100
Jérôme Tournier [EMAIL PROTECTED] wrote:

  know, because it's predefinded. Any comment from the author ???
 500 is the well-known RID for the domain administrator, not for
 the administrator account, am i wrong ?

Domain admin should have rid 512, admin account should have rid 500 and group rid 512.



--beast

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbclient connect problem

2004-01-19 Thread Bob Guely
I've tried everything I can think of, but still cannot
connect to a Windows 2000 share using smbclient.  I
know the shared directory is set up OK because I can
get to it with another Windows box.  My smbclient
command line should be OK because the same syntax
works on another Linux box at work (running a slightly
older version of smbclient) to a similarly setup
Windows box.  This is what I get with d3 debug:

smbclient //guelyb-2k-2/pool mypassword  -N -U GUELYB
-d3
[2004/01/19 17:59:08, 3]
param/loadparm.c:lp_load(3926)
  lp_load: refreshing parameters
[2004/01/19 17:59:08, 3]
param/loadparm.c:init_globals(1303)
  Initialising global parameters
[2004/01/19 17:59:08, 3]
param/params.c:pm_process(566)
  params.c:pm_process() - Processing configuration
file /etc/samba/smb.conf
[2004/01/19 17:59:08, 3]
param/loadparm.c:do_section(3429)
  Processing section [global]
[2004/01/19 17:59:08, 2]
lib/interface.c:add_interface(79)
  added interface ip=192.168.1.102 bcast=192.168.1.255
nmask=255.255.255.0
[2004/01/19 17:59:08, 3] client/client.c:main(2954)
  Client started (version 3.0.0-15).
[2004/01/19 17:59:08, 3]
libsmb/namequery.c:resolve_lmhosts(850)
  resolve_lmhosts: Attempting lmhosts lookup for name
guelyb-2k-20x20
[2004/01/19 17:59:08, 3]
lib/util_sock.c:open_socket_out(690)
  Connecting to 192.168.1.101 at port 445
[2004/01/19 17:59:08, 2]
libsmb/cliconnect.c:cli_session_setup_spnego(635)
  Doing spnego session setup (blob length=16)
[2004/01/19 17:59:08, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(639)
  server didn't supply a full spnego negprot
[2004/01/19 17:59:08, 3]
libsmb/ntlmssp.c:ntlmssp_client_challenge(469)
  Got challenge flags:
[2004/01/19 17:59:08, 3]
libsmb/ntlmssp.c:debug_ntlmssp_flags(33)
  Got NTLMSSP neg_flags=0x60890215
[2004/01/19 17:59:08, 3]
libsmb/ntlmssp.c:ntlmssp_client_challenge(518)
  NTLMSSP: Set final flags:
[2004/01/19 17:59:08, 3]
libsmb/ntlmssp.c:debug_ntlmssp_flags(33)
  Got NTLMSSP neg_flags=0x60080215
Anonymous login successful
[2004/01/19 17:59:10, 1]
client/client.c:do_connect(2598)
  Domain=[MERRIT] OS=[Windows 5.0] Server=[Windows
2000 LAN Manager]
tree connect failed: NT_STATUS_ACCESS_DENIED

This is what I get without the -N OPTION:

smbclient //guelyb-2k-2/pool mypassword  -U GUELYB -d3
[2004/01/19 18:14:23, 3]
param/loadparm.c:lp_load(3926)
  lp_load: refreshing parameters
[2004/01/19 18:14:23, 3]
param/loadparm.c:init_globals(1303)
  Initialising global parameters
[2004/01/19 18:14:23, 3]
param/params.c:pm_process(566)
  params.c:pm_process() - Processing configuration
file /etc/samba/smb.conf
[2004/01/19 18:14:23, 3]
param/loadparm.c:do_section(3429)
  Processing section [global]
[2004/01/19 18:14:23, 2]
lib/interface.c:add_interface(79)
  added interface ip=192.168.1.102 bcast=192.168.1.255
nmask=255.255.255.0
[2004/01/19 18:14:23, 3] client/client.c:main(2954)
  Client started (version 3.0.0-15).
[2004/01/19 18:14:23, 3]
libsmb/namequery.c:resolve_lmhosts(850)
  resolve_lmhosts: Attempting lmhosts lookup for name
guelyb-2k-20x20
[2004/01/19 18:14:23, 3]
lib/util_sock.c:open_socket_out(690)
  Connecting to 192.168.1.101 at port 445
[2004/01/19 18:14:23, 2]
libsmb/cliconnect.c:cli_session_setup_spnego(635)
  Doing spnego session setup (blob length=16)
[2004/01/19 18:14:23, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(639)
  server didn't supply a full spnego negprot
[2004/01/19 18:14:24, 3]
libsmb/ntlmssp.c:ntlmssp_client_challenge(469)
  Got challenge flags:
[2004/01/19 18:14:24, 3]
libsmb/ntlmssp.c:debug_ntlmssp_flags(33)
  Got NTLMSSP neg_flags=0x60890215
[2004/01/19 18:14:24, 3]
libsmb/ntlmssp.c:ntlmssp_client_challenge(518)
  NTLMSSP: Set final flags:
[2004/01/19 18:14:24, 3]
libsmb/ntlmssp.c:debug_ntlmssp_flags(33)
  Got NTLMSSP neg_flags=0x60080215
session setup failed: NT_STATUS_LOGON_FAILURE

Any help you can offer will be GREATLY appreciated.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


CVS update: samba/source/passdb

2004-01-19 Thread idra

Date:   Mon Jan 19 08:52:53 2004
Author: idra

Update of /data/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv26621/source/passdb

Modified Files:
passdb.c pdb_get_set.c pdb_gums.c pdb_ldap.c pdb_mysql.c 
pdb_pgsql.c pdb_sql.c pdb_xml.c 
Log Message:

1. The most part of this patch changed the unknown_3 flag to the now known
meaning of fields_present bit mask. Also avoid it being saved in backends (0
is saved where removing the unit32 would have produced a format change).
Also add support in samr functions to correctly interpret the flags.
Flags still not set properly (eg. still set all flags 0xff as previous
code), need a tool to test this properly (I',ve done preliminary tests with
samba4 rpc torture and it seem to work properly against w2k).

2. Patch for handlig the flag user must change password at next logon
in usrmgr based on Jianliang Lu [EMAIL PROTECTED] patch





Revisions:
passdb.c1.216 = 1.217

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/passdb.c.diff?r1=1.216r2=1.217
pdb_get_set.c   1.31 = 1.32

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_get_set.c.diff?r1=1.31r2=1.32
pdb_gums.c  1.4 = 1.5

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_gums.c.diff?r1=1.4r2=1.5
pdb_ldap.c  1.130 = 1.131

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_ldap.c.diff?r1=1.130r2=1.131
pdb_mysql.c 1.16 = 1.17

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_mysql.c.diff?r1=1.16r2=1.17
pdb_pgsql.c 1.2 = 1.3

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_pgsql.c.diff?r1=1.2r2=1.3
pdb_sql.c   1.2 = 1.3

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_sql.c.diff?r1=1.2r2=1.3
pdb_xml.c   1.12 = 1.13

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_xml.c.diff?r1=1.12r2=1.13


CVS update: samba/source/rpcclient

2004-01-19 Thread idra

Date:   Mon Jan 19 08:52:53 2004
Author: idra

Update of /data/cvs/samba/source/rpcclient
In directory dp.samba.org:/tmp/cvs-serv26621/source/rpcclient

Modified Files:
cmd_samr.c 
Log Message:

1. The most part of this patch changed the unknown_3 flag to the now known
meaning of fields_present bit mask. Also avoid it being saved in backends (0
is saved where removing the unit32 would have produced a format change).
Also add support in samr functions to correctly interpret the flags.
Flags still not set properly (eg. still set all flags 0xff as previous
code), need a tool to test this properly (I',ve done preliminary tests with
samba4 rpc torture and it seem to work properly against w2k).

2. Patch for handlig the flag user must change password at next logon
in usrmgr based on Jianliang Lu [EMAIL PROTECTED] patch





Revisions:
cmd_samr.c  1.163 = 1.164

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/cmd_samr.c.diff?r1=1.163r2=1.164


CVS update: samba/source/sam

2004-01-19 Thread idra

Date:   Mon Jan 19 08:52:54 2004
Author: idra

Update of /data/cvs/samba/source/sam
In directory dp.samba.org:/tmp/cvs-serv26621/source/sam

Modified Files:
gums_api.c gums_helper.c gums_tdbsam2.c 
Log Message:

1. The most part of this patch changed the unknown_3 flag to the now known
meaning of fields_present bit mask. Also avoid it being saved in backends (0
is saved where removing the unit32 would have produced a format change).
Also add support in samr functions to correctly interpret the flags.
Flags still not set properly (eg. still set all flags 0xff as previous
code), need a tool to test this properly (I',ve done preliminary tests with
samba4 rpc torture and it seem to work properly against w2k).

2. Patch for handlig the flag user must change password at next logon
in usrmgr based on Jianliang Lu [EMAIL PROTECTED] patch





Revisions:
gums_api.c  1.7 = 1.8

http://www.samba.org/cgi-bin/cvsweb/samba/source/sam/gums_api.c.diff?r1=1.7r2=1.8
gums_helper.c   1.5 = 1.6

http://www.samba.org/cgi-bin/cvsweb/samba/source/sam/gums_helper.c.diff?r1=1.5r2=1.6
gums_tdbsam2.c  1.2 = 1.3

http://www.samba.org/cgi-bin/cvsweb/samba/source/sam/gums_tdbsam2.c.diff?r1=1.2r2=1.3


CVS update: samba4/source/torture/rpc

2004-01-19 Thread idra

Date:   Mon Jan 19 08:59:14 2004
Author: idra

Update of /data/cvs/samba4/source/torture/rpc
In directory dp.samba.org:/tmp/cvs-serv29453/source/torture/rpc

Modified Files:
samr.c 
Log Message:

Add test to set single fields in fields_present with info21.



Revisions:
samr.c  1.38 = 1.39

http://www.samba.org/cgi-bin/cvsweb/samba4/source/torture/rpc/samr.c.diff?r1=1.38r2=1.39


CVS update: samba4/source

2004-01-19 Thread Stefan Metzmacher

Date:   Mon Jan 19 14:22:32 2004
Author: metze

Update of /home/cvs/samba4/source
In directory dp.samba.org:/tmp/cvs-serv31622

Modified Files:
Makefile.in configure.in dynconfig.c 
Log Message:
remove all unused stuff from Makefile.in
and some stuff from configure.in and dynconfig.[ch]

make all 

makes
bin/gentest   bin/masktest   bin/smbd
bin/locktest  bin/smbclient  bin/smbtorture
bin/ndrdump

now

metze


Revisions:
Makefile.in 1.67 = 1.68

http://www.samba.org/cgi-bin/cvsweb/samba4/source/Makefile.in.diff?r1=1.67r2=1.68
configure.in1.11 = 1.12

http://www.samba.org/cgi-bin/cvsweb/samba4/source/configure.in.diff?r1=1.11r2=1.12
dynconfig.c 1.1.1.1 = 1.2

http://www.samba.org/cgi-bin/cvsweb/samba4/source/dynconfig.c.diff?r1=1.1.1.1r2=1.2


CVS update: samba4/source/include

2004-01-19 Thread Stefan Metzmacher

Date:   Mon Jan 19 14:22:32 2004
Author: metze

Update of /home/cvs/samba4/source/include
In directory dp.samba.org:/tmp/cvs-serv31622/include

Modified Files:
dynconfig.h 
Log Message:
remove all unused stuff from Makefile.in
and some stuff from configure.in and dynconfig.[ch]

make all 

makes
bin/gentest   bin/masktest   bin/smbd
bin/locktest  bin/smbclient  bin/smbtorture
bin/ndrdump

now

metze


Revisions:
dynconfig.h 1.1.1.1 = 1.2

http://www.samba.org/cgi-bin/cvsweb/samba4/source/include/dynconfig.h.diff?r1=1.1.1.1r2=1.2


CVS update: samba4/source

2004-01-19 Thread Stefan Metzmacher

Date:   Mon Jan 19 14:57:56 2004
Author: metze

Update of /home/cvs/samba4/source
In directory dp.samba.org:/tmp/cvs-serv8089

Modified Files:
Makefile.in 
Log Message:
add make [un]installtorture
and let this be called by make [un]install

we can later change this and the make all
to not do the torture stuff, but for know only developers will
use samba4...

metze


Revisions:
Makefile.in 1.68 = 1.69

http://www.samba.org/cgi-bin/cvsweb/samba4/source/Makefile.in.diff?r1=1.68r2=1.69


CVS update: samba4/source/rpc_server

2004-01-19 Thread tridge

Date:   Tue Jan 20 04:32:17 2004
Author: tridge

Update of /home/cvs/samba4/source/rpc_server
In directory dp.samba.org:/tmp/cvs-serv22990

Modified Files:
dcerpc_server.c 
Log Message:
avoid a copy of the data being input to the dcerpc server in the most
common case of there being no pending partial data and a full dcerpc
packet being received.

We should use this same model for the smb server. It gives us
efficient memory usage while allowing for completely async socket
operations.


Revisions:
dcerpc_server.c 1.22 = 1.23

http://www.samba.org/cgi-bin/cvsweb/samba4/source/rpc_server/dcerpc_server.c.diff?r1=1.22r2=1.23


CVS update: samba4/source/ntvfs/ipc

2004-01-19 Thread tridge

Date:   Tue Jan 20 05:54:12 2004
Author: tridge

Update of /home/cvs/samba4/source/ntvfs/ipc
In directory dp.samba.org:/tmp/cvs-serv8192

Modified Files:
vfs_ipc.c 
Log Message:
dcerpc server output now copes with the client blocking part way
through a read. This happens to also avoid a memcpy on output for
dcerpc over tcp.



Revisions:
vfs_ipc.c   1.11 = 1.12

http://www.samba.org/cgi-bin/cvsweb/samba4/source/ntvfs/ipc/vfs_ipc.c.diff?r1=1.11r2=1.12


CVS update: samba4/source/rpc_server

2004-01-19 Thread tridge

Date:   Tue Jan 20 05:54:17 2004
Author: tridge

Update of /home/cvs/samba4/source/rpc_server
In directory dp.samba.org:/tmp/cvs-serv8207

Modified Files:
dcerpc_server.c dcerpc_tcp.c 
Log Message:
dcerpc server output now copes with the client blocking part way
through a read. This happens to also avoid a memcpy on output for
dcerpc over tcp.



Revisions:
dcerpc_server.c 1.23 = 1.24

http://www.samba.org/cgi-bin/cvsweb/samba4/source/rpc_server/dcerpc_server.c.diff?r1=1.23r2=1.24
dcerpc_tcp.c1.6 = 1.7

http://www.samba.org/cgi-bin/cvsweb/samba4/source/rpc_server/dcerpc_tcp.c.diff?r1=1.6r2=1.7


CVS update: samba4/source/librpc/rpc

2004-01-19 Thread tridge

Date:   Tue Jan 20 06:07:04 2004
Author: tridge

Update of /home/cvs/samba4/source/librpc/rpc
In directory dp.samba.org:/tmp/cvs-serv10795

Modified Files:
dcerpc.h dcerpc_smb.c dcerpc_tcp.c dcerpc_util.c 
Log Message:
added code to the RPC-SPOOLSS test that demonstrates that policy
handles are not shared between open dcerpc connections, even when
those connections are on the same SMB socket. I have tested this with
w2k3, w2k and NT4. It seems that policy handles have a strict scope of
the dcerpc connection on which they were opened.

I realise that this goes against existing folk-law in the team, but it
seems that the previous testing (I'm not sure who did this?) was
wrong. Perhaps clients do send us policy handles from other
connections, but if they do then the correct thing to do is to fail
the operation with a dcerpc fault. I suspect that failing it with
exactly the right dcerpc fault code is important.


Revisions:
dcerpc.h1.16 = 1.17

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/rpc/dcerpc.h.diff?r1=1.16r2=1.17
dcerpc_smb.c1.8 = 1.9

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/rpc/dcerpc_smb.c.diff?r1=1.8r2=1.9
dcerpc_tcp.c1.6 = 1.7

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/rpc/dcerpc_tcp.c.diff?r1=1.6r2=1.7
dcerpc_util.c   1.18 = 1.19

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/rpc/dcerpc_util.c.diff?r1=1.18r2=1.19


CVS update: samba4/source/torture/rpc

2004-01-19 Thread tridge

Date:   Tue Jan 20 06:07:09 2004
Author: tridge

Update of /home/cvs/samba4/source/torture/rpc
In directory dp.samba.org:/tmp/cvs-serv10826

Modified Files:
spoolss.c 
Log Message:
added code to the RPC-SPOOLSS test that demonstrates that policy
handles are not shared between open dcerpc connections, even when
those connections are on the same SMB socket. I have tested this with
w2k3, w2k and NT4. It seems that policy handles have a strict scope of
the dcerpc connection on which they were opened.

I realise that this goes against existing folk-law in the team, but it
seems that the previous testing (I'm not sure who did this?) was
wrong. Perhaps clients do send us policy handles from other
connections, but if they do then the correct thing to do is to fail
the operation with a dcerpc fault. I suspect that failing it with
exactly the right dcerpc fault code is important.


Revisions:
spoolss.c   1.30 = 1.31

http://www.samba.org/cgi-bin/cvsweb/samba4/source/torture/rpc/spoolss.c.diff?r1=1.30r2=1.31