Îãíåóïîðû ïî öåíàì 2002 ãîäà 241811

2004-01-20 Thread 241811



  
  

   !
  


  
  .
  
   
  2003 .
  ,  
.
  
  :(35151) 
  9-77-85(35151) 9-76-88(35151) 9-76-64(35151) 
  9-76-11

  

  
 
:

  

  
  ,   . 
390-96,  8691-73
  
  6024-73
 
 390-96,   
   8691-73, 
21436-75,  
3272-71
  ,  
 1549-031-00188162-2000
,   ,
  
  
11586-69
 , 
  .  
  ,   . 
-1549-031-00188162-2000
   
.
  

  

.

 
11B2165B-371C2496-7703A633-5935D985-1D9D84B1
***
7DE9755-40A60BB7-482B52FF-4226614E-16A288DE
**
4131C260-26385BD2-1FF0B3E2-6A956444-28053B26
  






SGI Packaging

2004-01-20 Thread R DL
Hello,
 I am trying to figure out to make my own software
package in IRIX.
I noticed that samba has been packaged, and I looked
at the “mkrelease.sh” script which referred to the
spec.pl  idb.pl.
However I can not find those scripts.

I know how to build a package using the GUI “swpkg”.

However I would like to make a script to build this
without the GUI swpkg. 

I believe all you have to do is build a *.spec  *.idb
and then run gendist. Is this correct?

Any help you can provide would be very much
appreciated.

Thanks,
Ralph



__
Do you Yahoo!?
Yahoo! Hotjobs: Enter the Signing Bonus Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus


[Samba] Listing users in samba backend from win client

2004-01-20 Thread Jokke Heikkilä
I have samba3 and LDAP backend. Should it be possible to list the users 
in the samba backend? What i mean is,

1. I log in the XP client which is part of samba  domain
2. I select properties from any file or folder
3. I go to the security tab and I want to add an user to the list
4. Clicking 'advanced' gives me the 'find' button to show usergroups 
on my domain
5. Win client asks me to authenticate with administrative privilages to 
my samba machine
6. A list shows up showing groups and users.

I thought that now I should see the list of all my users on samba 
backend, but I see nothing else but the groups on the local machine. On 
the other hand, if I write manually MYSAMBADOMAIN\user and add this to 
the list, that user will have rights to the file/folder in question. Is 
anybody else able to get the listing of users on their domain through 
this way?

jokke h.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba Digest, Vol 13, Issue 31

2004-01-20 Thread peter
I will be out of the office starting from Dec 02 till Jan. 12th, 2004. If it is urgent 
please send e-mail to [EMAIL PROTECTED] and someone will assist you. Thanks.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba Digest, Vol 13, Issue 31

2004-01-20 Thread petera
I will be out of the office starting from Dec 02 till Jan. 12th, 2004. If it is urgent 
please send e-mail to [EMAIL PROTECTED] and someone will assist you. Thanks.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] network browserlist error(S)..

2004-01-20 Thread Collen
At 17:10 19/01/2004, you wrote:
Collen wrote:

G'day.. just haveing the straingest problem..

I'd upgraded to the 302rc1 version. i configed it to be an pdc 
controller, with wins to manage our local domain..
only when browsing the domain list.

it gives error(s) once in a while..
An extended error has occured 
the system cannot find massage text for message number 0x in the message 
file for \\hostname
I get this same error running 3.01 I have a PDC and multiple BDC's. The 
PDC has
os level  = 33
preferred master = yes
domain master = yes
domain logons = yes
local master = yes
wins support = yes

My BDC's have
os level = 32
preferred master = no
domain master = no
domain logons = yes
local master = no
wins server = ip.address.of.bdc
This is a problem because I have shares on some Windows 2000 SP4 servers 
that my users cannot get to, I have to reboot the server for it to 
work.  Is there someone who knows what is going on here or a suggestion to 
fix it?

this is when you try to acces a computer or share for a win2k box, it 
happens 10 out of 100 times..

on a linux box, log.smb reports:

lib/util_sock.c:matchname(941)
 sys_gethostname(host.domain): lookup failure
lib/util_sock.c:get_socket_name(1008)
 matchname failed os host.domain 192.168.x.x
the pdc is the master browser with smb.conf
os level = 66
preferred master = yes
domain master = yes
domain logons = yes
local master = yes
wins support = yes
with 300 version i have no problems, from 301rc1 the error starts..
sugestions ?? solutions ..??
l8r
Collen Blijenberg
MLHJ

Hmm just downgrade to samba 300, that did the trick for me.. (to bad coz' i 
wanted to run the l8test smba)
gues that some bug-fix didn't work out after 300 version.
i saw multiple people having the same problem, so i gues they work on it.
and fix it before the 302 release ??

till then, 300 works 99%.

l8r
Collen (MLHJ)
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Help! Samba 3.0 can't use null password with OS X

2004-01-20 Thread Andrew Bartlett
On Tue, 2004-01-20 at 14:28, Andrei Bazhgin wrote:
 The latest release (stable) of Samba is 3.0.1, get that - I am sure the bug is
 resolved in 3.0.1

I'm not sure what makes you so sure about that - I certainly don't think
that this issue is fixed.

However, the issue as described seems to be the result of misusing the
idea of 'null passwords' on the server - ie, storing the null string as
a password, rather than setting the 'no password required' flag.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Strange behaviour WinHP and 2.2.8a and inherit permissions

2004-01-20 Thread Dragan Krnic
Was that really your smb.conf or the long output of testparm?
It's difficult to use. I suggest you should remove all items
with default values.

Other than that I don't see anything wrong with it, although
my working equivalent of your [Dokumente] looks a little
different:

  [Dokumente]
path = /daten/shares/dokumente
read only = No
map system = No
inherit permissions = Yes
security mask = 0777
directory security mask = 0777
oplocks = No

Try it out. If it doesn't work for you, then you'll need to
bump the debugging level a little higher and try to figure
out what actually happens when you try to execute a WinProg
on this share with enabled permission inheritance.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3 net ads join to a w2k server error

2004-01-20 Thread Andrew Bartlett
On Sat, 2004-01-17 at 01:31, Martin Locas wrote:
 i try to join active directory but i got this error, i cant find doc on
 this.
 please help!!
 
 
 #net ads join -U admin
 
 net: relocation error: net: undefined symbol: krb5_cc_initialize

You have installed Samba binaries on a system without kerberos
libraries.  Rebuild Samba from source, or find binaries that are
compatible with your system.  

You will need the kerberos libraries and development headers to rebuild
from source, if you want to use 'net ads join'.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Capital Letters - Charset problem

2004-01-20 Thread Andrew Bartlett
On Tue, 2004-01-20 at 01:49, Alvaro Aguilera wrote:
 Hello,
 
 I have a strange problem with samba 3.0.1 on suse 8.1, when I mount an
 NT shared directory the accented capitals letters are not recognised.
 Everything works fine except for files having accented *capitals*.
 
 My smb.conf has:
 
 unix charset = ISO-8859-15
 display charset = ISO-8859-15
 dos charset = CP850
 unicode = No

NEVER  set 'unicode = no'. 

This is known to be buggy, as Microsoft has not had an ASCII-only server
in a long-time.  The move to unicode was one of the major reasons for
Samba 3.0, and other advances has caused MS clients to become more buggy
with this setting (I have seen a BSOD on login).

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba Backup Printserver

2004-01-20 Thread Carsten Büchner
Hi all,

I have set up two print servers with cups and samba 3.0.1.
One of the samba servers is active and serves the windows clients.
If the active server crashes (by hard- or software) I want to be able to make 
the other samba server active and act as the crashed samba server within minutes.

Due to the fact that installing the windows printer drivers on samba takes a 
long time ( belonging to the amount of printers), is there a way to clone the 
information in the tdb-files from one samba-server to the other?

Thanks in advamce for replying.

With best regards,
Carsten
--
Carsten Buechner
EDAG-Wolfsburg| Phone:+49-05361-799181
Schweriner Str. 4 | FAX:  +49-05361-799134
38444 Wolfsburg   | eMail:[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Strange behaviour WinHP and 2.2.8a and inherit permissions

2004-01-20 Thread Dragan Krnic
 ... I don't see anything wrong with it, although
 my working equivalent of your [Dokumente] looks a little
 different:

  [Dokumente]
path = /daten/shares/dokumente
read only = No
map system = No
inherit permissions = Yes
security mask = 0777
directory security mask = 0777
oplocks = No


Some more differences that would have been easier to pick
had you smb.conf been reduced to non-default essentials:

  [global]
...
  dos filemode = Yes
  mangle case = Yes
  character set = ISO8859-1
  map system = Yes
  map hidden = Yes
...

It doesn't strike me as possible cause but you can never
dismiss the possibility of side effects even in a well done
software suite like samba.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Need Samba printing help

2004-01-20 Thread Martin Zielinski
1. Please check, wether you have cups support compiled in.
(Does ldd smbd show the libcups.so...?).
It really seems, that it is not the case.

2. When using cups the print command smb-entry is ignored!
This is, what the HOWTO says.

Bye, 
Martin

On Monday 19 January 2004 22:45, Mark Fowle wrote:
 The printer is a Lexmark E323 network laser printer -

 In the smb.conf file I have:
 [global]
 .
 .
 .
printcap name = cups
load printers = yes
use client driver = no
disable spoolss = no
printing = cups
printer admin = @printadmin
show add printer wizard = yes
 .
 .
 .
 ### Shared Section ###
 .
 .
 [printers]
comment = All Printers
path = /var/spool/cups
browseable = no
guest ok = yes
writable = no
printable = yes
public = yes
read only = no

 [print$]
path = /etc/samba/drivers
browseable = yes
guest ok = yes
read only = yes
write list = root, @printadmin
 [E323]
  comment = E323 Test laser printer
  path = /var/spool/samba/E323
  printer name = E323
  writable = yes
  public = yes
  printable = yes
  print command = lpr-cups -P %p -o raw %s -r
  printer admin = root, @printadmin

 # A useful application of samba is to make a PDF-generation service
 # To streamline this, install windows postscript drivers (preferably
 colour)
 # on the samba server, so that clients can automatically install them.

 [pdf-generator]
path = /var/tmp
guest ok = No
printable = Yes
comment = PDF Generator (only valid users)
#print command = /usr/share/samba/scripts/print-pdf file path
 win_path recipient IP 
print command = /usr/share/samba/scripts/print-pdf %s ~%u
 %L%u %m %I 

 On Mon, 2004-01-19 at 15:59, [EMAIL PROTECTED] wrote:
  Post the printer - related parts of your smb.conf file.  There are some
  options like:
  printcap = cups
  printing = cups
 
  ...that may be necessary to allow cups to edit your printcap file.
  Additionally, you cannot add print drivers in samba if you have:
  use client driver = yes
 
  Alex Laslavic
  Havertys Tech Services
 
  [EMAIL PROTECTED] wrote on 01/19/2004
 
  03:16:52 PM:
   I am posting again - Please help.
  
   I am trying to add print drivers for a samba shared printer to a
   Windows2000 group - Everything up to this step works - I am using Samba
   3.0.1
  
   rpcclient -d 100 -Uroot -c 'adddriver Windows NT x86 \
   E323:LMAAE1DD.dll:\
   LMAAE1P1.PPD:LMAAE1DA.DLL:LMAAE1DA.HLP:\
   NULL:RAW:LMAA1B1.DLL,LMAAE1BJ.DLL,LMAAE1BT.DLL,LMAAE1DA.ALL,
   LMAAE1ED.DLL,LMAAE1PI.EXE,\
   LMAAE1TD.DLL,LMAAE1TE.DLL,LMAAE1DA.CNT,LMAAE1DF.DLL,LMAAE1DL.DLL,
   LMAAE1PU.DLL,\
   LMAAE1SE.DLL,LMAAE1TF.DLL,LMAAE1TH.HLP,LMAAE1UZ.ZIP' SambaEnt
  
   The result I get is:
  
   result was WERR_ACCESS_DENIED
  
   In the log.smbd I get the following error:
  
   [2004/01/18 17:29:22, 0] printing/pcap.c:pcap_printer_fn(361)  Unable
   to open printcap file cups for read!
  
   I'm not sure whats causing this error. I have changed the permissions
   onthe /etc/printcap file to be wide open, and that doesn't seem to
   workeither.  Can anyone shed some light on where I might have messed
   up?
  
   Thanks,Mark
   --
   Mark Fowle
   [EMAIL PROTECTED]
  
  
   [attachment signature.asc deleted by Alex Laslavic/MIS/Havertys] --
   To unsubscribe from this list go to the following URL and read the
   instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Martin Zielinski   [EMAIL PROTECTED]
Software Development
SEH Computertechnik GmbH www.seh.de

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Can you use roaming profile in a workgroup environment?

2004-01-20 Thread Philip M Grisedale
All

Can you set-up roaming profiles in a workgroup environment?  or do I have to
migrate to PDC?

Many thanks

Phil

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: QAB, to leave here?

2004-01-20 Thread Francis
blond elucidate acquisitive conspiratorial austere 
berkelium dispelling face sampson qualitative rivet guthrie 
vogue pepsi flagrant patterson commerce million 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbmount won't work connecting to W2K on Samba 3

2004-01-20 Thread Jon Hardy
Anybody know why smbmount won't mount a Windows share on my (Fedora) 
machine? Keep getting:
27009: session setup failed: ERRDOS - ERRnoaccess (Access denied.)
SMB connection failed

HOWEVER, using smbclient , I CAN connect to the share, so the problem is not 
password encryption, access rights, etc.

Any help greatly appreciated. it all worked fine with Samba 2.2 on Mandrake 
9.2. Beginning to regret moving to Fedora/ Samba 3.

_
STOP MORE SPAM with the new MSN 8 and get 2 months FREE* 
http://join.msn.com/?page=features/junkmail

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Difference Between Domain and ADS security In Reference to Realms

2004-01-20 Thread Andrew Bartlett
On Thu, 2004-01-15 at 03:57, Harmon, Leigh wrote:
 Hi,
 
 I've been researching which type of security to use with Samba 3.0.1 and I still
 don't understand what the difference is between security=DOMAIN versus
 security=ADS.  I complied Samba to include ADS support, and I initially chose
 security=DOMAIN.  When I use the net command I can add it to my domain.
 However, if I set realm=our.ads.realm and do the same net command, then I
 get a message saying that server was added to the realm.  What is the difference
 between adding the Samba server to the realm using security=DOMAIN versus
 adding it to the realm using security=ADS?

Not much, but you should set 'security=ads' first.  It is my long-term
aim to remove the need for the artificial distinction here, and this is
why 'net join' tries an ADS join always, then falls back to RPC.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Fw: [Samba] ADS and Winbind ... Can't access with Samba host name ...

2004-01-20 Thread Nic le Roux
Hi There,

I apologise for posting this again but our mail server went up in flames 
and I missed all of yesterdays posts due to bounced emails.
The list then disabled my deliveries which I only realized hours 
afterward.

Please resend me the post if there were any regarding this.

Thanks and Regards
Nic


@ Matt McParland wrote:
@
@ | I saw the same symptoms using Samba 3.0.1 and a
@ | Win2k ADS.
@ |
@ | up the shares on the Samba server but still can't
@ | access any of those shares.
@ |
@ | It has taken a LONG time just to get to this point.
@
@ Ironically I'm working on this right now.  Apparently
@ entering the IP address causes the win2k client to use
@ encapsulated NTLMSSP rather than a kerberos ticket
@ to connect.
@
@With the latest 3.0.2pre binary release I'm actually able to browse the
@shares and do everything you'd expect.  NN works, and so does Start - 
Run
@\\hostname.
@
@If 3.0.2pre is broken, it's not totally broken because my fileserver 
seems
@to work.

I'm having the same problem, 
Using 3.0.2pre but no joy,

Getting promted for user name and password when trying to access machine 
via hostname.
Works fine with IP address.

Checked that NTLM authentication works but no matter what I try, (been 
trying for weeks)
the Kerberos tickets always fail.

All tests to check whether things are working goes through though 
following are commands that do work.

wbinfo -u
wbinfo -g
getent passwd
getent group

smbclient //server/share -k

Any Ideas ?


---
Disclaimer and Confidentiality Note

Please click on the link below:
http://www.rohlig.co.za/RohligNew/DesktopDefault.aspx?tabindex=31tabid=132





--

Disclaimer and Confidentiality Note

Everything in this e-mail and any attachment relating to the official 
business of the company is 
proprietary to the company. It is confidential, legally privileged and 
protected by law. The company 
does not own and endorse any other content. Views and opinions are those 
of the sender unless clearly 
stated as being that of the company.

The person addressed in the e-mail is the sole authorised recipient. 
Please notify the sender 
immediately if it has unintentionally reached you and do not read, 
disclose or use the content 
in any way.

The company cannot assure that the integrity of this communication has 
been maintained nor that it 
is free of errors, virus (however, we do have a Virus scanner in place), 
interception or interference.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba3 Printer drivers installation

2004-01-20 Thread Andrei Mikhailovsky
Hello,

I am having problems installing printer drivers for Samsung ML-4500 
printer, so windows workstation can just fetch them from print$ share. 
When I run rpcclient with -d 4 i get the following error:

whale:/home/samba/home# rpcclient -d 4 -Uroot% -c 'adddriver 
Windows NT x86 
SSGK2:ssgk2.cnt:ssgk2.dat:ssgk2.dll:ssgk2.hlp:ssgk2.ini:ssgk2.sdd:ssgk2su.dll:ssgk2ui.dll:ssgk2um.dll' 
WHALE
added interface ip=192.168.77.7 bcast=192.168.77.255 nmask=255.255.255.0
added interface ip=172.16.104.1 bcast=172.16.104.255 nmask=255.255.255.0
Connecting to host=WHALE
Connecting to 192.168.77.7 at port 445
Serverzone is 0
Doing spnego session setup (blob length=58)
got OID=1 3 6 1 4 1 311 2 2 10
got principal=NONE
Got challenge flags:
Got NTLMSSP neg_flags=0x60890215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_CHAL_TARGET_INFO
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60080215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60080215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
lsa_io_sec_qos: length c does not match size 8
result was WERR_INVALID_PARAM

Does anyone know what the problem is and how to fix it?

The snip of my smb.conf:

...
# CUPS printing.  See also the cupsaddsmb(8) manpage in the
# cupsys-client package.
   printing = cups
   printcap name = cups
...
[printers]
   comment = All Printers
   browseable = yes
   path = /tmp
   printable = yes
   public = no
   writable = no
   create mode = 0700
[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no
Thanks for all the help )

--
Andrei Mikhailovsky
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: ZUR, what is there

2004-01-20 Thread Mona Lamb
verdant patent squawk britain insulate 
pronto tribe vengeance camp vermiculite flung alfresco 
coachmen absenteeism pram ternary catnip 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] winbind hang

2004-01-20 Thread Ric Tibbetts
All;
I'm having an odd problem with winbind.

I just installed Samba 3.0.2 pre1 on a Solaris 9 server.
smbd/nmbd/winbindd all start ok.
But when it first starts, if I try wbinfo -u, it hangs. As does getent
passwd. This will continue for the first couple hours after a restart. Then,
things will suddenly start to work, and be fine for the rest of the time. Until I
have to restart it again.

Any thoughts?
This also occured with Samba 3.0.1

I would greatly appreciate any ideas on what's causing this.

-Ric






-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: PDC - initial profile creation

2004-01-20 Thread Antony Gelberg
Repost - didn't get through first time.

Antony Gelberg wrote:
 Hi all,
 
 I'm still suffering from the problem whereby a user can login to the
 domain, but a message comes up saying Windows cannot locate the
 server copy of your roaming profile...  DETAIL - The network path was
 not found.. 
 
 I have now found these entries in the logs:
 
 [2004/01/20 12:31:27, 1] smbd/service.c:make_connection_snum(698)
   pulse-laptop (192.168.0.101) connect to service netlogon initially
 as user antgel (uid=1003, gid=100) (pid 5659)
 [2004/01/20 12:31:31, 0] smbd/service.c:make_connection(850)
   pulse-laptop (192.168.0.101) couldn't find service %u
 [2004/01/20 12:31:31, 0] smbd/service.c:make_connection(850)
   pulse-laptop (192.168.0.101) couldn't find service %u
 [2004/01/20 12:31:34, 2]
   rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540) Returning domain
 sid for domain CHHAUSMANN - S-1-5-21-3247875428-2940378000-2436062379
 [2004/01/20 12:31:34, 0]
   rpc_server/srv_util.c:get_domain_user_groups(371)
 get_domain_user_groups: primary gid of user [antgel] is not a Domain
   group ! get_domain_user_groups: You should fix it, NT doesn't like
 that [2004/01/20 12:31:34, 0]
   rpc_server/srv_util.c:get_alias_user_groups(219)
 get_alias_user_groups: gid of user antgel doesn't exist. Check your
 /etc/passwd and /etc/group files 
 
 Clearly the two issues are couldn't find service %u and the primary
 gid error.  However user antgel has a primary group of users, which
 is mapped to Domain Users.
 
 Can anyone shed any light on this?
 
 Antony



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] (no subject)

2004-01-20 Thread crazy.linux
undefined
[Beta] HelpClick onthe image to chat with me
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] windows 98 Samba server IPC$

2004-01-20 Thread FRANCOISE Jacques
hello,

I have the same problem, did you find a solution?

Regards

Jacques
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Strange behaviour WinHP and 2.2.8a and inherit permissions

2004-01-20 Thread Dragan Krnic
  ... I don't see anything wrong with it, although
  my working equivalent of your [Dokumente] looks a little
  different:
 
   [Dokumente]
 path = /daten/shares/dokumente
 read only = No
 map system = No
 inherit permissions = Yes
 security mask = 0777
 directory security mask = 0777
 oplocks = No
 
 
 Some more differences that would have been easier to pick
 had you smb.conf been reduced to non-default essentials:
 
   [global]
 ...
   dos filemode = Yes
   mangle case = Yes
   character set = ISO8859-1
   map system = Yes
   map hidden = Yes
 ...
 
 It doesn't strike me as possible cause but you can never 
 dismiss the possibility of side effects even in a well done 
 software suite like samba.

[global]
   workgroup = ARBEITSGRUPPE
   server string = Samba Server
   encrypt passwords = Yes
   map to guest = Bad User
   time server = Yes
   unix extensions = Yes
   socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
   printcap name = CUPS
   os level = 2
   local master = No
   domain master = No
   printing = cups
   veto files = /*.eml/*.nws/riched20.dll/*.{*}/
[homes]
   comment = Home Directories
   valid users = %S
   read only = No
   create mask = 0640
   directory mask = 0750
   browseable = No
[print$]
   comment = Printer Drivers
   path = /var/lib/samba/drivers
   write list = @ntadmin root
   force group = ntadmin
   create mask = 0664
   directory mask = 0775
[Dokumente]
   path = /daten/shares/dokumente
   read only = No
   inherit permissions = Yes
   oplocks = No

 Map system, security mask, directory security mask dont show 
 because the values you have given are default values 

Default for map system is No. But since it is Yes in
[global], in order to make it compatible with some M$ dirty
tricks in user homes and profiles, it is only redefined No 
in this share. Some side effects from first enabling and 
then explicitely disabling might be what's missing. Or else
your smb.conf is basically the same as mine, in which case
you need to try to debug it.

There's also bug #51 which might be the cause of your problem
although it was defined in other terms. I had a problem that
excel sheets didn't open from paths containing German Umlauts.
Since I never checked if the bug persists without inheritance
it might be the same problem with different symptoms. There's 
a bugfix for that in Samba's bugzilla here:

  https://bugzilla.samba.org/show_bug.cgi?id=51

 The only different option was oplocks but it did not make 
 any difference. 

 Perhaps I get a little time this evenig and try samba3 or 
 going back to 2.2.6 wich worked fine.

That would be a pity and a security risk.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind local idmap/cache database security concerns

2004-01-20 Thread Shawn Iverson
I am currently working on implementing unified logons between linux and win
computers on an NT4 domain.  I have a samba test server with winbind working
properly.  All is going well, except that I am concerned about the winbind
idmap database stored on the local linux workstations.  My current
understanding of winbind is that it must be on every machine, unless an
winbind samba ldap backend/pam_smb combination is used.  However, with the
latter, all the features that winbind supports are lost since winbind is not
running on the local machine (such as changing ones password) so I currently
see no other way of implementing winbind.

What will keep a user from reading /var/cache/samba/winbind_cache.tdb and
winbind_idmap.tdb?  I know that the owner is root and that the each has the
permissions 0600 (idmap had 0644, but I changed it to 0600).  Despite that,
isn't it easy enough for a user to crack the filesystem and gain access to
these databases if so he/she wished?   I am especially concerned about this
because the cache and idmap contain information on what users and groups
exist on the network and who belongs to what group.  Is this not a potential
security concern?  For example, if a user gained access to these databases,
they could identify all domain administrator accounts, correct?

Perhaps there is a way to implement winbind so as to not have the cache and
idmaps stored locally and still retain winbind's functionality.  If anyone
knows how I would be very interested.

Shawn Iverson
Technology Associate
New Castle Community School Corporation
765-593-6691
[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Filename for printing?

2004-01-20 Thread William Enestvedt
Ken D'Ambrosio wrote:

 The jobname gives me:
 
 For websites:  the URL (which is great)
 For apps (eg. Word): Microsoft (which is less great)
 
   It's definitely in the way you qute the directive for Filename in your print 
command entry in smb.conf. I use this:
-start smb.conf snippet-
print command = /usr/local/bin/spr -P test_queue +no-banner +header %J %s
--end smb.conf snippet--
   (The spr command is part of the Xi-Text print management software I use.)
   If you plan to use this for the names of the PDFs you generate, beware of the 
spaces and/or slashes that the J% string will contain, as well as the useless 
Microsoft's that every Office print job will have.
-wde
--
Will Enestvedt
UNIX System Administrator
Johnson  Wales University -- Providence, RI
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] FORTUNE LOTTERIA WINNER!!!!!

2004-01-20 Thread FORTUNE PROMO LOTTERIA S.A.
 FROM: THE PRIZE AWARD DEPARTMENT
FORTUNE LOTTERIA,MADRID -SPAIN.


Congratulations Category A prize winner! You have been
selected as one of five winners of the Worldwide
loteria fortune Madrid-Spain computer ballot draws and thus will
be a privileged recipient of the grand draw prize of Euros705.366,87 (SEVEN HUNDRED 
AND FIVE THOUSAND THREE HUNDRED AND SIXTY SIX EUROS EIGHTY SEVEN CENT ONLY). Winning 
File Reference number for your prize is WWPL/ES/ 61-812087; ticket number 004 - 
05117963 - 198.

 We in the Worldwide loteria la fortune Spain is by this
program, launching our model computer balloting lottery draws,
developed and designed to satisfy the cravings of the ever
growing number of participants in our various lottery programs. With
funds accrued exclusively from previous draws, payouts to
all winners are guaranteed and will be transferred in record time.

After randomly selecting 15,000 participants from an
initial database of 300,000 emails and zoning all participants
by their respective continents from across the globe, we
produced an extensive list from which you have emerged as one of
the winners of the Grand Draw prize.

To ensure a smooth collection of your winnings, the
transfer of your prize is to be handled by our Prize
Transfer agents.You are to contact our agents by email
andwithin a week of receiving this notice.
Don´t forget to include your contact telephone and fax number.
Please find full contact details below:


Mr.Jason Hacman.
Your claims agent
Fortune Lotteria.
c/ Burgos 27
Madrid-Spain.
EMAIL:[EMAIL PROTECTED]

Also find all other relevant winning lottery information
below:
Draw Serial No:99375.
Batch No: 24/00319/IPD.
Grand Draw No:31 - 33 - 34 - 35 - 36 - 42.

You are seriously advised to keep all winning lottery
information and numbers from the public in line with
our company security protocol to avoid double claiming and
unwarranted abuse of this program by unscrupulous individuals.

Please direct all further correspondences and queries to your respective category 
Prize Transfer handlers.Congratulations once again from the Loteria fortune.

Note: Anybody under the age of 21 is automatically disqualified.



Sincerely,
Lopez Hernandez
International Promotions Manager
LOTERIA FORTUNE,MADRID-SPAIN.


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Domain Landrush: YOURNAME.EU

2004-01-20 Thread Luther Meza
We are now accepting advance orders for .eu
domain names.

See our web site:

http://www.europeanregistry.biz/?ref=j20

The .eu domain is approved by the European Union.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] winbind and Solaris 9 with AD

2004-01-20 Thread Unix Service (ANTS)
Hi 

have started compsring the winbindd log from the Solaris 9 host which isnt't
working and a linux host which is and the first thing I've noticed is the
following:

they both look the same up to the following point:

Solaris:
[2004/01/20 17:48:31, 10] nsswitch/winbindd.c:(455)
  client_read: read 1568 bytes. Need 0 more for a full request.
[2004/01/20 17:48:31, 10] nsswitch/winbindd.c:(305)
  process_request: request fn CREATE_USER
[2004/01/20 17:48:31, 3] nsswitch/winbindd_acct.c:(875)
  [28202]: create_user: user=(test7), group=()

Linux:
[2004/01/20 17:45:13, 10] nsswitch/winbindd.c:winbind_client_read(455)
  client_read: read 1568 bytes. Need 0 more for a full request.
[2004/01/20 17:45:13, 10] nsswitch/winbindd.c:process_request(305)
  process_request: request fn GETPWNAM
[2004/01/20 17:45:13, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(112)
  [ 4318]: getpwnam dev+test7

Why is the linux box now calling a different function to the solaris host -
is it because the linux host has already created the user and has it
cached some where ( if so, how can I delete the cache entry to see a
successful call to create_user etc. ).

thanks

tim


***
This communication (including any attachments) contains confidential information.  If 
you are not the intended recipient and you have received this communication in error, 
you should destroy it without copying, disclosing or otherwise using its contents.  
Please notify the sender immediately of the error.

Internet communications are not necessarily secure and may be intercepted or changed 
after they are sent.  Abbey National Treasury Services plc does not accept liability 
for any loss you may suffer as a result of interception or any liability for such 
changes.  If you wish to confirm the origin or content of this communication, please 
contact the sender by using an alternative means of communication.

This communication does not create or modify any contract and, unless otherwise 
stated, is not intended to be contractually binding.

Abbey National Treasury Services plc. Registered Office:  Abbey National House, 2 
Triton Square, Regents Place, London NW1 3AN.  Registered in England under Company 
Registration Number: 2338548.  Regulated by the Financial Services Authority (FSA).
***

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] AD Primary Group Masked by Local Primary Group

2004-01-20 Thread Klinger, John (N-CSC)
Solaris 8, Samba 3.0.1, Winbind with LDAP backend and security = ads.

This may or may not be a problem, depending on what is expected behaviour.

We came across a user that was defined both locally and in AD. Their local
primary group, call it localgrp, was not the same as their global primary
group, call it globalgrp. One important note is that by using an LDAP
browser, we can see that the user is not explicitly a Member Of globalgrp
(ie: there is no member entry for the user in globalgrp). The only way
the user is tied to the globalgrp is that it is his AD primary group.

Now, onto the solaris side. At logon, their groups are determined through
nsswitch and a call to the solaris wrapper function
nss_winbind_getgroupsbymember_solwrap. With the patch from Bug 972,
this returns all local and AD groups, including both the local primary
group, localgrp, and the AD primary group, globalgrp.

Other functions, like id -a username, go through the getgrent cycle,
and only return localgrp. This is due to the user not being an explicit
group member. The getgrent cycle does not see a user's primary group.

Parallels exist in other systems, like NIS, when a local primary group
overloads a directory's primary group. In those cases, only the local
is shown.

So, should the getgrent cycle go through User's primary groups too? The
concern is that some applications will use a function to check group
access by using a method that does not return the overloaded primary
group.

john

--

The first section below is a modified debug output of an su - user2a
execution, where both the local primary group, localgrp, and the global
primary group, globalgrp (10328), is returned.

[ 1277]: nss_winbind: Initialized nss_winbind group backend
[ 1277]: nss_winbind: _nss_winbind_getgroupsbymember
[ 1277]: initgroups user2a (10)
[ 1277]: initgroups gid=1
[ 1277]: initgroups gid=10328

Below is a modified debug output of an id -a user2a execution, where only
the local primary group, localgrp, is returned.

[  932]: nss_winbind: Initialized nss_winbind group backend
[  932]: nss_winbind: _nss_winbind_setgrent_solwrap
[  932]: setgrent
...
[  932]: getgrent
  group.gr_name   = Domain Users
  group.gr_passwd = x
  group.gr_gid= 1
  group.gr_mem= 0x25afc (user1a)
0x25b00 (user2a)
[  932]: nss_winbind: _nss_winbind_getgrent_solwrap: Returning group: Domain Users
...
[  932]: getgrent 
  group.gr_name   = globalgrp
  group.gr_passwd = x
  group.gr_gid= 10328
  group.gr_mem= 0x25af8 (user1a)
0x25b00 (domadmin)
[  932]: nss_winbind: _nss_winbind_getgrent_solwrap: Returning group: TBMCS
...
[  932]: getgrent
[  932]: nss_winbind: _nss_winbind_getgrent_solwrap: Returning error: 1.

[  932]: nss_winbind: _nss_winbind_endgrent_solwrap
[  932]: endgrent
[  932]: nss_winbind: _nss_winbind_group_destr
uid=1001(user2a) gid=10(localgrp) groups=1(other)[  932]: nss_winbind: Initialized 
nss_winbind group backend
[  932]: nss_winbind: _nss_winbind_getgrgid_solwrap
[  932]: getgrgid 1
,2(bin),4(adm),14(sysadmin),1(Domain Users)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbfs issue

2004-01-20 Thread Joe Polk
Okay, I've posted this before but I've done more testing.
I am getting some seriously slow speeds on a server using smbfs (not Samba 
Server). I'm using a Linux server and mounting Windows 2000 Server shares to 
it. In my test, the W2K server is on the same local subnet with the Linux 
server. I'm getting a little better than 10MByte per minute transfering files 
from the shared mount point to another directory on the Linux server. The 
Linux server is:
SuSE9
Proliant DL380
RAID 5 w/ 3200 HW RAID Controller
1G RAM
Intel 100 3163 NIC

I also have a RH 8 server on the same subnet. A similar test there yielded 
better results. A 14MByte transfer took 27secs.

I know my NIC is fine as I can ftp that 14MByte file back to the suspect 
server in about 17secs.

Furthermore, I tested a cp of a 20MByte file from a server offsite over a WAN 
link (same city, but a different site we have) and still achieved 10Mbyte per 
minute. Maybe I'm working under a limit of some sort?

Something is really screwing up the smb protocal on the Proliant. I can't 
figure it out. It's running Samba-client v.2.2.8a and a stock 2.4.21 kernel. 
I have the exact config on another server that runs fine. Is there anything I 
should be specifically looking for? I've checked the doc at samba.org and 
tried some tweaks. No luck. I get better speeds on my untweaked, relatively 
untouched server. I am completely at a loss. Any ideas would be greately 
appreciated.

JAV

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Join Computer Associates and DM Review for a Web Seminar

2004-01-20 Thread WebSeminar
Computer Associates and DM Review present a Web Seminar!
Dashboards: Discovering Hidden Opportunities Through On-Demand Information

Date: Wednesday, February 11, 2004 
Time: 11:00 a.m. PT/2:00 p.m. ET (Duration approx. 1 hr.) 

Making important decisions is your job. To make them effectively, you need the right 
information at the right time from all the right sources. 

Learn how dashboard applications can help you make those crucial decisions and improve 
your bottom line. Dashboard applications are recognized as a chief means of measuring 
the health and welfare of the business by delivering key enterprise information. 

Join us for an informative hour as industry expert Colin White, President, BI 
Research, outlines the key benefits of dashboard solutions. Also hear Rick Minicucci, 
CIO, National Center for Missing  Exploited Children (NCMEC) discuss how Computer 
Associates' (CA) technology and dashboard solutions provide on-demand information that 
helps retrieve missing children. 

For each participant, CA will make a generous donation to NCMEC. 

Register here:
http://www.dmreview.com/eletters/clickReg.cfm?URLID=3599

To unsubscribe send a blank e-mail to [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: PDC upgrade Fedora core 1 / Samba version 3.0.0-15

2004-01-20 Thread Mark
[EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 I just finished upgrading my PDC to Fedora core 1 with Samba version
 3.0.0-15 and I am having a few problems.

 I see from
 http://www.samba.org/samba/docs/man/upgrading-to-3.0.html#id2969141 that
 the domain admin group and vfs options were removed.

 Is there functional replacements for these? I was using the wheel group
 for administrative purposes and was also using the network recycle folder.

Assign a unix group to the ntgroup as follows:
net groupmap modify ntgroup=Domain Admins unixgroup=wheel

See if it worked with the command:
net groupmap list

Put the following in the share definition:
vfs objects = recycle
I've never used this so I don't know any more.

 Even with these items commented out my roaming profiles have stopped
 working and I am getting the Invalid combination of parameters for
 service profile. Level II oplocks can only be set if oplocks are also
 set. error.

When I upgrade to Fedora, my roaming profiles wouldn't load correctly
because there was a bad character in the filename for floppy disk in the
Send to folder.  I think it was the 1/2 in 3 1/2 floppy, that got
messed up because of Fedora's use of UTF or something.  Anyway, I just
deleted these from the profiles and they started working again.  Who really
needs to send anything to a floppy anyway?

If you don't want oplocks, then set both of the following in the share
definition:

oplocks = False
level2 oplocks = False

Since they are True by default, you can't turn oplocks off without also
turning level2 oplocks off.

Mark



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: MFBV, he had difficulty

2004-01-20 Thread Foster
goddess deforestation skyward upsetting retrogressive stenography aerodynamic ny 
chevy stead corporeal support moonlit alcove 
greek kneecap rustle hackneyed tomato 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind local idmap and cache database security concerns

2004-01-20 Thread Shawn Iverson
I am currently working on implementing unified logons between linux and win
computers on an NT4 domain. 
I have a samba test server with winbind working properly.  All is going
well, except that I am concerned 
about the winbind idmap database stored on the local linux workstations.  My
current understanding of
winbind is that it must be on every machine, unless an winbind samba ldap
backend/pam_smb
combination is used.  However, with the latter, all the features that
winbind supports are lost since
winbind is not running on the local machine (such as changing ones password)
so I currently see no
other way of implementing winbind.

What will keep a user from reading /var/cache/samba/winbind_cache.tdb and
winbind_idmap.tdb?  I know
that the owner is root and that the each has the permissions 0600 (idmap had
0644, but I changed it to
0600).  Despite that, isn't it easy enough for a user to crack the
filesystem and gain access to these
databases if so he/she wished?   I am especially concerned about this
because the cache and idmap
contain information on what users and groups exist on the network and who
belongs to what group. 
Is this not a potential security concern?  For example, if a user gained
access to these databases, they
could identify all domain administrator accounts, correct?

Perhaps there is a way to implement winbind so as to not have the cache and
idmaps stored locally 
and still retain winbind's functionality.  If anyone knows how I would be
very interested.



Shawn Iverson
Technology Associate
New Castle Community School Corporation
765-593-6691
[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Accentuated letters and solaris 9.

2004-01-20 Thread Jean Frontin
Helo, I am looking for a friend who uses samba 3.0.0 and solaris . I 
encounter troubles with accentuated letters in file names and I have no 
ISO8859-1.so in /usr/local/samba/lib/charset

Pehraps, has somebody the solution easy to install.

Jean Frontin
System team
I R I T
Université Paul-Sabatier
118, rte de Narbonne
31062 Toulouse cedex 04
France
tel  (33)(0)5 61 55 63 03
mail [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Group and Client Access Problems w/Samba 3

2004-01-20 Thread Wil Cooley
[Sorry this is so long; I've tried to be thorough.  Please CC: any
responses to me, because I haven't gotten any messages from the Samba
list in over 15 hours and am concerned something is awry with my
subscription.]

I have recently set up a Samba 3.0.1 PDC/BDC installation with LDAP
master/slave.  It has been mostly successful, however, there are a few
niggling issues that remain.  First, a bit about our setup:  There are
two sites connected via VPN, the headquaters in Alaska are the PDC and
LDAP master, and the remote site in Oregon the BDC and LDAP slave.  For
simplicity, I will refer to them as the AK and OR sites.  The AK site
has the sever at 192.168.0.10 and the OR site at 192.168.2.10.

Software version is Samba 3.0.1, built from a self-rolled RPM by
modifying the Red Hat Enterprise 3 SRPM, and removed all patches
(because the didn't apply cleanly).  The server on the AK site is Red
Hat Linux 9 and the OR site is Red Hat Enterprise Linux 3.  Both are
running the same binary of Samba.

Aside from the errors below, which themselves may be cosmetic or may be
symptomatic of other problems, there is one problem for which I cannot
precisely find a corresponding problem in the logs.  Previously, the
sites were configured with one 2.2.8 PDC on the AK site and the OR
router gave the WINS server via DHCP.  The OR users were almost entirely
peer-to-peer, since there wasn't a local server and the remote server
was far too slow over the VPN.  Now, there are intermittent problems
with p2p access.  The workstations appear on the browse lists, however,
attempting to list shares results in odd errors on the workstations,
like internal Windows 2000 errors and some strange things that look
like format-strings not being interpolated, like 0x%1 %2.

I have noticed schannel errors in the logs, like this:

[2004/01/20 09:59:06, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
  failed to decode PDU
[2004/01/20 09:59:06, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605) 
process_request_pdu: failed to do schannel processing.

---
Here is how 'configure' was run (RPM macro):

%configure \
--with-acl-support \
--with-automount \
--with-codepagedir=%{_datadir}/samba/codepages \
--with-fhs \
--with-libsmbclient \
--with-lockdir=/var/cache/samba \
--with-mmap \
--with-pam \
--with-pam_smbpass \
--with-piddir=/var/run \
--with-privatedir=%{_sysconfdir}/samba \
--with-quotas \
--with-smbmount \
--with-swatdir=%{_datadir}/swat \
--with-syslog \
--with-utmp \
--with-vfs \
--without-smbwrapper

OpenLDAP is 2.0.27-11 on the OK site and 2.0.27-8 on the AK site.

The global section of smb.conf from AK site (PDC):
[global]
workgroup = DOMAIN
server string =
passdb backend = ldapsam:ldap://localhost
passwd program = /usr/local/sbin/smbldap-passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
*all*authentication*tokens*updated*
max log size = 5
time server = Yes
add user script = /usr/local/sbin/smbldap-useradd -m %u
delete user script = /usr/local/sbin/smbldap-userdel %u
add group script = /usr/local/sbin/smbldap-groupadd -p %g
delete group script = /usr/local/sbin/smbldap-groupdel %g
add user to group script = /usr/local/sbin/smbldap-groupmod -m %u %g   
 
delete user from group script = /usr/local/sbin/smbldap-groupmod -x %u %g
set primary group script = /usr/local/sbin/smbldap-usermod -g %g %u
add machine script = /usr/local/sbin/smbldap-useradd -w %u
logon script = %m.bat
logon path =
logon drive = c:
logon home = \\pdc\%U
domain logons = Yes
os level = 60
preferred master = Yes
domain master = Yes
wins support = Yes
ldap suffix = dc=example,dc=com
ldap machine suffix = ou=Computers
ldap user suffix = ou=People
ldap group suffix = ou=Group
ldap admin dn = cn=SambaAdministrator,dc=example,dc=com
ldap passwd sync = Yes
ldap delete dn = Yes

and the OR side (BDC):

[global]
workgroup = DOMAIN
server string =
passdb backend = ldapsam:ldap://localhost
time server = Yes
logon script = %m.bat
logon path =
logon drive = H:
logon home = \\bdc\%U
domain logons = Yes
preferred master = Yes
domain master = No
wins server = 192.168.0.200
ldap suffix = dc=example,dc=com
ldap machine suffix = ou=Computers
ldap user suffix = ou=People
ldap group suffix = ou=Group
ldap admin dn = cn=SambaAdministrator,dc=example,dc=com
ldap passwd sync = Yes


DHCP is configured on each end to provide the local server's IP address
for WINS to workstations.

The basic group mappings are set up: 

Re: [Samba] 'multi-layered' authentication

2004-01-20 Thread Andrew Bartlett
On Sat, 2004-01-17 at 07:00, [EMAIL PROTECTED] wrote:
 I need to allow [read] access to a Samba server using both IP filtering  
 UserIDs .
 
 For a given list of IP subnets, any user should have access.
 Outside these 'trusted' subnets, I need to do User authentication.
 
 I can handle the User authentication OK in several ways.
 However, I don't see any way to do the 'short circuit' allow for some IPs, 
 then use User authentication after that.
 If I do a 'deny', in the InetD or in Samba, then the 'untrusted' subnets 
 are denied,  not allowed to try logging-in .
 
 Any ideas?
 
 I originally thought that PAM would give me this functionality, but now I 
 don't see it.
 Is PAM at all popular for Samba 'authentication' ?

You could set 'obey pam restrictions', and then write an 'account'
module the enforced these restrictions.  That assumes you want to always
require passwords, but only allow some particular accounts from the
untrusted IPs.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] samba Digest, Vol 13, Issue 33

2004-01-20 Thread peter
I will be out of the office starting from Dec 02 till Jan. 12th, 2004. If it is urgent 
please send e-mail to [EMAIL PROTECTED] and someone will assist you. Thanks.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Can't See Share

2004-01-20 Thread Norman Zhang
Hi,

I rsynced some files from an old server to a new server with permissions 
attached. Though I can start Samba but I can't see the shares from the 
client. Does anyone know what I'm doing wrong?

Regards,
Norman
authrequired  /lib/security/pam_env.so
authsufficient/lib/security/pam_winbind.so
authsufficient/lib/security/pam_unix.so likeauth nullok 
use_first_pass
authrequired  /lib/security/pam_deny.so

account sufficient/lib/security/pam_winbind.so
account required  /lib/security/pam_unix.so
passwordrequired  /lib/security/pam_cracklib.so retry=3 minlen=4 
 dcredit=0  ucredit=0
passwordsufficient/lib/security/pam_unix.so nullok use_authtok 
md5 shadow
passwordrequired  /lib/security/pam_deny.so

session required  /lib/security/pam_mkhomedir.so skel=/etc/skel/ 
umask=0022
session required  /lib/security/pam_limits.so
session required  /lib/security/pam_unix.so

[global]
workgroup = ARKONDOMAIN
netbios name = SMB1
server string = Samba Server %v
security = DOMAIN
encrypt passwords = Yes
obey pam restrictions = Yes
password server = BAKSERVER
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
load printers = No
printcap name = cups
show add printer wizard = No
preferred master = No
local master = No
domain master = No
dns proxy = No
winbind uid = 1-2
winbind gid = 1-2
winbind use default domain = Yes
printing = cups
browseable = No
available = No
dos filetimes = Yes
[homes]
comment = Home Directories
available = yes
writable = yes
path = %H
[transfer]
directory mask = 0777
comment = Temporary Storage
available = yes
writable = yes
create mask = 0777
path = /usrswap/transfer
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba winbind secondary group problem

2004-01-20 Thread asim_is
Hello all,

I am having some serious problems getting winbind to recognize secondary group 
memberships.  I have a samba server version samba-3.0.0-14.3E running on RHES v.3.
This is running on a 2x Xeon 2.4 Ghz IBM Server with 2G Ram.  nscd is not running.  
See below for smb.conf.

cat /proc/version:  Linux version 2.4.21-9.ELsmp ([EMAIL PROTECTED]) (gcc version 
3.2.3 20030502 (Red Hat Linux 3.2.3-26)) #1 SMP Thu Jan 8 17:08:56 EST 2004

I have joined the domain with: net rpc join -U administrator -r PDC
I successfully joined the domain. passdb backend = smbpasswd. wbinfo -u shows all the 
domain users and wbinfo -g shows all the domain groups.  ls -l shows the correct 
domain user/group ownerships.  Users can access shares owned by them or their PRIMARY 
domain group.  But when they try to access a share owned by a secondary group that 
they belong to, it is access denied.  The only way I can get a secondary group to 
resolve is by putting a local unix group in /etc/group and giving it the same GID as 
the corresponding domain group, then adding the users to the local unix group.  

I have a RedHat 9 box with the same configuration that works the way it's supposed to 
- ie - honoring secondary group memberships from the domain(of course it is samba 
version samba-2.2.7a-8.9.0).  

This is a very critical situation for us.  Any help/suggestions would be greatly 
appreciated.

Below is a snip from the samba log file(shows 3 supplementary groups even though this 
user belongs to about 20 groups).

[2004/01/20 19:17:44, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 10504
  Primary group is 10013 and contains 3 supplementary groups
  Group[  0]: 10013
  Group[  1]: 10013
  Group[  2]: 10029

#Begin smb.conf
passdb backend = smbpasswd
#winbind configuration--
winbind separator = +
winbind use default domain =  yes 
template shell  = /bin/false
template homedir = /netarray/shares/home/%U
idmap uid = 1-2
idmap gid = 1-2
#end winbind configuration-
   security = domain 
   password server = PDC BDC
   password level = 8
   username level = 8

[Shared]
 available = yes
 browseable = yes
 comment = 
 path = /netarray/shares/Shared
 public = no
 writable = yes
 valid users = @Domain Users @Domain Admins @Global ITS @d_users @d_admins @g_its
 invalid users = internet1 internet2 hrtest



  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] changing desktop/profiles

2004-01-20 Thread kent E.
hi to all...

just one thing that annoys me in a day... that an employee will approach
me and tell me that his/her settings was changed

i did even disabled the profiles long before so they are using the
locally stored cache .. and why does it still change..???

and im also having these error
=
get_domain_user_groups: primary gid of user [leslie] is not a Domain
group !
Jan 19 13:02:31 genesis smbd[3994]:   get_domain_user_groups: You should
fix it, NT doesn't like that
=

but this user is in the ntadmins groups as mapped as domainAdmins


help



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] LDAP don't up

2004-01-20 Thread Gilberto Nunes
Hi for everybody

I upgrade my system, to Fedora COre 1, and now, my ldap service don't
'up'...

This's the debug messages:
@(#) $OpenLDAP: slapd 2.1.22 (Oct 23 2003 10:23:24) $
[EMAIL 
PROTECTED]:/usr/src/build/319319-i386/BUILD/openldap-2.1.22/build-servers/servers/slapd
daemon_init: listen on ldap:///
daemon_init: 1 listeners to open...
ldap_url_parse_ext(ldap:///)
daemon: socket() failed errno=97 (Address family not supported by protocol)
daemon: initialized ldap:///
daemon_init: 2 listeners opened
slapd init: initiated server.
slap_sasl_init: initialized!
bdb_initialize: initialize BDB backend
bdb_initialize: Sleepycat Software: Berkeley DB 4.1.25: (December 19, 2002)
 dnNormalize: cn=Subschema
= ldap_bv2dn(cn=Subschema,0)
= ldap_bv2dn(cn=Subschema,0)=0
= ldap_dn2bv(272)
= ldap_dn2bv(cn=subschema,272)=0
 dnNormalize: cn=subschema
error loading ucdata (error -127)
slapd shutdown: freeing system resources.
slapd stopped.
connections_destroy: nothing to destroy.

   Somebody knows what is this?


-- 
Gilberto Nunes
Suporte Rede Bonja - Bom Jesus/Ielusc
Fone: 433-0155 - ramal 235
www.ielusc.br - [EMAIL PROTECTED]
Linux User nº 199930
ICQ #136176504
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Import posixAccount to LDAP

2004-01-20 Thread Jim C.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tried the migration scripts in /usr/share/samba3/scripts ?

smbldap-migrate-accounts.pl
smbldap-migrate-groups.pl
Bruno Gimenes Pereti wrote:
| Hi friends,
|
| I´m running a Samba 3.0.0 in a production server with Redhat. I´m
trying to
| migrate my users and machine accounts to LDAP, I used pdbedit but it
imports
| only the sambaSamAccount attributes and I want to import the posixAccount
| attributes too.
| How can I do that?
|
| Thank´s
|
| Bruno Pereti.
|
- --

- -
| I can be reached on the following messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADeBX57L0B7uXm9oRAnYNAJ9DnUIfuliuZdm2aIcj6dXADXqnzQCfaFpR
kYGOCtU4DgJb0ycvQ/OOpec=
=Kxqh
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: My story installing Samba-LDAP PDC (it has a happy ending)

2004-01-20 Thread Bevan C. Bennett
Andrei Mikhailovsky wrote:
Hello again )

I have followed your suggestion. changed the ldap.conf so the nsswitch 
will do sub search and changed the nss_passwd/group/shadow to search at 
the root of the database. Still no luck.
Can you 'finger' the computer accounts? That should show if the NSS is 
configured correctly. I had a similar problem with 'smbpasswd -a -m' not 
finding my machine accounts under 'ou=Computers' and made a similar 
modification to that recently suggested, which (for me) solved the problem.

Original /etc/ldap.conf snippet:
base dc=internal,dc=avlsi,dc=com
pam_filter objectclass=posixAccount
pam_password exop
nss_base_passwdou=People,dc=internal,dc=avlsi,dc=com?one
nss_base_shadowou=People,dc=internal,dc=avlsi,dc=com?one
nss_base_group ou=Groups,dc=internal,dc=avlsi,dc=com?one
Revised /etc/ldap.conf snippet:
base dc=internal,dc=avlsi,dc=com
pam_filter objectclass=posixAccount
pam_password exop
nss_base_passwddc=internal,dc=avlsi,dc=com?sub
nss_base_shadowou=People,dc=internal,dc=avlsi,dc=com?one
nss_base_group ou=Groups,dc=internal,dc=avlsi,dc=com?one
You do not have to have an Administrator account with uid=0, but you do 
need to have -some- account with uid=0.

I put the following in LDAP to satisfy that requirement:
dn: uid=root,ou=people,dc=internal,dc=avlsi,dc=com
objectClass: account
objectClass: sambaSamAccount
sambaPwdCanChange: 1072123497
sambaPwdLastSet: 1072123497
sambaAcctFlags: [U  ]
displayName: root
sambaSID: S-1-5-21-3418961212-346530541-152393462-1000
sambaLMPassword: NICE-TRY
sambaNTPassword: NICE-TRY
uid: root
sambaPwdMustChange: 2147483647
sambaPrimaryGroupSID: S-1-5-21-3418961212-346530541-152393462-512
(root's posixaccount is in local files, not LDAP)
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] network name no longer available

2004-01-20 Thread Bevan C. Bennett
I have a samba PDC/BDC setup with a small number of W2k clients.
Not too long ago I set up a set of new servers on fresh Fedora 1 boxes 
using Samba 3.0.1 and migrated my LDAP to the new schema. It was all 
working quite well until recently.

Suddenly, when I try to change permissions on a windows share (from the 
windows box), after I give the root password, I get a message that The 
specified network name is no longer available and everything fails.

I get the same message when I go into network neighborhood and try to 
browse to either of the SAMBA boxes. Something must have gotten 
glitched, but I'm not quite stumped as to what. I even updated to 
3.0.2rc1 to see if it made a difference...

The one thing that may be relevant is that I had had my primary LDAP 
server hang for a period of time (too many open files, hopefully now 
resolved) which made everyone somewhat upset (oddly, even the BDC which 
is it's own ldap server).

At this point I'd greatly appreciate any suggestions or debugging advice 
that might be offered. I'll try to stick around and offer the benefit of 
my limited knowledge in return.

The other samba system can see everything just fine.
 smbclient -L skuld
Password: enter
Anonymous login successful
Sharename  Type  Comment
-    ---
netlogon   Disk  Network Logon Service
fooDisk  Test Share
IPC$   IPC   IPC Service (Samba BDC)
ADMIN$ IPC   IPC Service (Samba BDC)
Anonymous login successful
Server   Comment
----
SKULDSamba BDC
VERDANDI Samba PDC
WorkgroupMaster
----
FULCRUM  VERDANDI
net view on the windows client lists all of the local systems, including 
the samba servers, just fine.

The BDC is currently configured in this fashion, although this hasn't 
really changed:

% testparm
Load smb config files from /etc/samba/smb.conf
Processing section [netlogon]
Processing section [foo]
Loaded services file OK.
Server role: ROLE_DOMAIN_BDC
Press enter to see a dump of your service definitions
# Global parameters
[global]
workgroup = FULCRUM
server string = Samba BDC
passdb backend = ldapsam:ldap://ldap2.internal.avlsi.com
lanman auth = No
log file = /var/log/samba/%m.log
max log size = 50
name resolve order = wins host bcast
time server = Yes
server signing = auto
logon script = logon.cmd
logon path =
domain logons = Yes
local master = No
domain master = No
wins server = 10.0.80.13
ldap suffix = dc=internal,dc=avlsi,dc=com
ldap machine suffix = ou=computers
ldap user suffix = ou=people
ldap group suffix = ou=groups
ldap idmap suffix = ou=idmap
ldap admin dn = cn=Manager,dc=internal,dc=avlsi,dc=com
ldap ssl = start tls
ldap passwd sync = Yes
idmap backend = ldap:ldap://ldap2.internal.avlsi.com
idmap uid = 4-5
idmap gid = 4-5
hosts allow = 10.0., 127.
[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
write list = Administrator
[foo]
comment = Test Share
path = /usr/add/foo
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Winbind local idmap/cache database security concerns

2004-01-20 Thread Andrew Bartlett
On Wed, 2004-01-21 at 02:24, Shawn Iverson wrote:
 I am currently working on implementing unified logons between linux and win
 computers on an NT4 domain.  I have a samba test server with winbind working
 properly.  All is going well, except that I am concerned about the winbind
 idmap database stored on the local linux workstations.  My current
 understanding of winbind is that it must be on every machine, unless an
 winbind samba ldap backend/pam_smb combination is used.  

You should never use pam_smb.  You should always use pam_winbind,
particularly as you are already using winbindd :-)

The idmap ldap backend is about ensuring a consistant UID mapping on
each machine, so things like NFS do not break.

 However, with the
 latter, all the features that winbind supports are lost since winbind is not
 running on the local machine (such as changing ones password) so I currently
 see no other way of implementing winbind.

Why are you not running winbind on each machine?  I'm a bit confused -
the idea is that you run winbindd on each client, so that they can
participate in the domain.

 What will keep a user from reading /var/cache/samba/winbind_cache.tdb and
 winbind_idmap.tdb?  I know that the owner is root and that the each has the
 permissions 0600 (idmap had 0644, but I changed it to 0600).  Despite that,
 isn't it easy enough for a user to crack the filesystem and gain access to
 these databases if so he/she wished?   

Indeed - but they could also run 'getent group' and 'getent passwd' -
it's much faster ;-).  This information is available to any user who is
in the domain.

 I am especially concerned about this
 because the cache and idmap contain information on what users and groups
 exist on the network and who belongs to what group.  Is this not a potential
 security concern?  For example, if a user gained access to these databases,
 they could identify all domain administrator accounts, correct?
 
 Perhaps there is a way to implement winbind so as to not have the cache and
 idmaps stored locally and still retain winbind's functionality.  If anyone
 knows how I would be very interested.

I think you are looking for problems that don't exist.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] windows 98 Samba server IPC$

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Tue, 20 Jan 2004, FRANCOISE Jacques wrote:

hello,

I have the same problem, did you find a solution?
Enable encrypted passwords on the Samba server.





cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADfMrIR7qMdg1EfYRAji4AKDBt6M3FB8HsVL0P6sSvjlzkreF5ACgt5OA
aOjInWkBf+YfVJpHW/P2A2c=
=Bq+p
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] win2k wont join domain; tried everything

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, 19 Jan 2004, Nathan Brown wrote:

I have tried that. That was one of the first preliminary things I did. 
That isnt the problem. Its with windows 2000, where you have to type in 
a username and password to join a domain, and its not accepting root, 
and my password.
There was a bug in 3.0.1 that prevented pre sp2 win2k clients from joining
a Samba domain.  Fixed in 3.0.2pre1.


cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADfNVIR7qMdg1EfYRAny1AJ9w4MIyCNhecwS23XGS1/aZA0sKkQCcD4sy
coPlCyze2Qy74JSipDS3IeY=
=/3ih
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Add user script, with winbind, without PAM (Solaris 9)

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, 16 Jan 2004, Paul Coray wrote:

Dear all

We've been running sucessfully a 2.2.8a Fileserver, member of our NT 
domain, authentication with winbind, on a Solaris box. As I've 
experienced stability issues with winbind and some minor problems with 
missing unicode support, I'm very happy that these problems hopefully 
will be gone with version 3.

Now I noticed, that it seems not to be possible any longer to have an 
add user script creating homedirs on the fly without a local user 
repository (smbpasswd or LDAP and PAM), which worked just fine before. 
The problem might also be the missing support for pam_mkhomedir.so in 
Solaris.
You can do anything you want is an 'add user script' including creating
the user's home directory.  Maybe I misuderstood you question.




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADfNZIR7qMdg1EfYRAnlIAJ4kMIyVK4yTKQa/QdrnLtpN+6cg5gCfVyw2
/8TmdV77beQPjFmJ8SuVKFA=
=/pGh
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] network browserlist error(S)..

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, 19 Jan 2004, Collen wrote:

G'day.. just haveing the straingest problem..

I'd upgraded to the 302rc1 version. i configed it to be an pdc controller, 
with wins to manage our local domain..
only when browsing the domain list.

it gives error(s) once in a while..
An extended error has occured 
the system cannot find massage text for message number 0x in the message 
file for \\hostname
Doh!  I thought I had this fixed in 3.0.2rc1.  I need a level 10 debug 
log on this one.  Can you send it to me?  Thanks.



cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADfNRIR7qMdg1EfYRAt8lAJ9GBAx5/WrJMNY5JaSexy0IyyMOKACg5Dba
KqfChHInglV6qw4iFF4g5fU=
=gopS
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Add Printer Wizard and Slowness

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, 8 Jan 2004, Jeffrey M. Hardy wrote:

We have a Samba box set up as our primary campus print server, running
CUPS 1.1.19 and Samba 3.3.0.  Our primary interface for adding printers
is the Add Printer Wizard.  I am finding very slow response while
adding/modifying/deleting printers.
Making changes to any of the settings for a printer (default tray,
driver, etc) can take 20-40 seconds or will sometimes timeout, requiring
a Samba restart before any of the printers will show again.  Sometimes I
can avoid this by restarting Samba ahead of time, which kills all the
active Samba connections to the server (usually around 50).  I can then
get several minutes of acceptable response time.
If your interested, I have an idea.  Check with me on Monday and
the patch details.


cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADfNgIR7qMdg1EfYRAr6xAJ93Hpi9GLZI83EJvb4W8/SeqtvjjACgmOil
UrZwXmWIxVCk/CUNcbW0EjQ=
=sj/q
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 2.2.8a: Deleting all files

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, 12 Jan 2004 [EMAIL PROTECTED] wrote:

I have a directory on Unix exposed as a Samba share. All the filenames
are greater than 8.3 format. When I go to this directory from a DOS
prompt and do 'del *.*', I get a bunch of errors 'Unable to find file
...'..
Try setting 'mangling method = hash2' in smb.conf.





cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADfNkIR7qMdg1EfYRAnfjAKCyo6LkhKM2TKpsO5UZ2KmzsZcLqwCgnx12
gGJPLCfrBy2DR0NX9xXM6x8=
=Syel
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] W2k/SQL Authentication problems 3.0.1, help please

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, 12 Jan 2004, Jason Jeremias wrote:

I upgraded from Samba 2.2.8a to Samba 3.0.1, since doing I'm having 
problems with my SQL Server and applications running on Windows 2000.  
When a users (running a windows 98 client) attempts to query the SQL 
Server, either using ODBC (even the Test Sources) or an application that 
uses the db.  I get a login failed from the sql app, and from the ODBC I 
get:

 Login failed for user '(null)', Reason: Not associated with a trusted 
SQL Server connection. 

That error shows up in the SQL Server Logs, and its displayed at the client.

On the Samba side I see some NT user token: (NULL), in the logs but I'm 
not sure what else to look for..

I'm not sure what is going on but it seems like the W2k/SQL Server is 
not doing the Windows Authentication properly.

I've attached a testparm -vs and my smb.conf, I can provide logs or 
whatever is needed to help me solve the problem.
This might have been fixed in 3.0.2rc1.  Could you test it and let me
know?  Thanks.








cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADfNnIR7qMdg1EfYRAkFoAKCff/H0oUzBtDjbwmE9t+ui0dywWgCgg6bW
UHPy7wlSJSoU00iHb0Z1CkI=
=xwtN
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind hang

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Tue, 20 Jan 2004, Ric Tibbetts wrote:

I just installed Samba 3.0.2 pre1 on a Solaris 9 server.
smbd/nmbd/winbindd all start ok. But when it first starts, if I try
wbinfo -u, it hangs. As does getent passwd. This will continue for
the first couple hours after a restart. Then, things will suddenly start
to work, and be fine for the rest of the time. Until I have to restart
it again.
Any thoughts?
This also occured with Samba 3.0.1
I would greatly appreciate any ideas on what's causing this.
run 'winbindd -d 10 -i' and see where the log hangs.  Probably name
resolution if I were to guess.




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADfNqIR7qMdg1EfYRAmYgAJ9Akdsd0cwVkMvegc4vtCi8YPXNZgCaAjHI
K43oxNGnIeI8DXwyCasYDIg=
=/Pht
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] winbind and Solaris 9 with AD

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Tue, 20 Jan 2004, Unix Service (ANTS) wrote:

Why is the linux box now calling a different function to the solaris
host - is it because the linux host has already created the user and
has it cached some where ( if so, how can I delete the cache entry to
see a successful call to create_user etc. ).
wbinfo -x 'username'



cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADfNyIR7qMdg1EfYRAtfgAKDDnk0zur2urnCJ5EhrMBDeAvXlKgCfeKBy
LP/jQE1NkML2bHX8o/QUIY8=
=oEMD
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] My story installing Samba-LDAP PDC (it has a happy ending)

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, 15 Jan 2004, Beast wrote:

But I need some clarification from samba team (Jerry?) whether we can
use this filter without breaking any other functions or not, because
they must be has strong reason using default filter.
My opinion is that the 'ldap filter' option in smb.conf should never be
set.  There are 2 many different LDAP searches now being done (group
mapping, users, etc...) and we don't use that option consistently
internally anyways.  Best to leave it alone IMO.


cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADfNuIR7qMdg1EfYRAoAcAKCHGbzbettI2RNipUFIXxZ0sbYmBQCgzye3
3mG3mlLvte0OBC91lZuXtPE=
=6Qs+
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Reloading in usrmgr.exe

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, 16 Jan 2004, Karel Kulhavy wrote:

usrmgr.exe administration works for me.

However, sometimes it is necessary to reopen the domain up to couple
of times until the administration starts working.
Allegedly also it's not necessary to press F5-reload after adding an
user on Windows NT. However didn't test it, never used Windows NT for
adding users on an Windows NT DC :) With Samba, I always have to press
F5-reload in usrmgr.exe after adding an user.
Is this some kind of bug-reliance of usrmgr.exe - NT 4.0 DC
communication that is not implemented in Samba or is it a lack in Samba?
Is this behaviour common or does it occur only for me?
If you file a bug report @ https://bugzilla.samba.org/ we'll try to get
this fixed.


cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADfNdIR7qMdg1EfYRAo9eAJ4lflLVAgE2dFy8iLQONalAIcEXxgCdHcob
I+BS+/+15IhvT2t9sNaPil0=
=0ZF8
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba PDC Questions

2004-01-20 Thread Robert Brugman
Hello,
I am setting up Samba as my primary domain controller for my network to
connect all my windows machines.  I can get the machines to join the
network, but I have a couple problems.  Maybe someone here can help:
1.) When switching from a workgroup (single client machines) to the 
domain,
is there a way to transfer the profiles, so everyone's 
desktop/icons/files
are the same as they were?

2.) On the local machine, I use MultiRes to change the resolution of my
screen on Windows 2000.  When I log in, it goes to 1600x1200 and when I 
log
out, it goes back to 1024.  When I join the domain, it doesn't load on
startup anymore, and when I log off, it says can't write Multires.exe,
etc.  How do I fix this problem?

3.) My last question is how come only my user has their home directory
mapped to H when they log in?  I thought I set it up correctly.  Below I
have pasted in my config.  Maybe I'm just stupid and have something 
wrong.

Thanks!

Robert
P.S. This may be quite long.
[global]

# workgroup = NT-Domain-Name or Workgroup-Name, eg: LINUX2
   ;basic server settings
   workgroup = freenet
   netbios name = Orion
   server string= Samba PDC running %v
   socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 
SO_RCVBUF=8192

   ;PDC and master browser settings
   os level = 64
   preferred master = yes
   local master = yes
   domain master = yes
   ;security and logging settings
   security = user
   encrypt passwords = yes
   domain logons = yes
   log file = /var/log/samba/log.%m
   log level = 2
   max log size = 50
   hosts allow = 127.0.0.1 192.168.0.0/255.255.255.0
   ;user profiles and home directory
   logon name = \\%L\%U\.profile
   logon drive = H:
   logon path = \\%L\profiles\%U
[homes]
   comment = Home Directories
   browseable = no
   writeable = yes
[profiles]
   path = /home/samba/profiles
   writeable = yes
   browseable = no
   create mask = 0600
   directory mask = 0700
[netlogon]
   path = /usr/local/samba/lib/netlogon
   read only = yes
   write list = ntadmin
   ;add user script
   add user script = /usr/sbin/useradd -d /dev/null -g machines -s
/bin/false -M %u
   ;sync UNIX passwords
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* 
%n\n
*Enter* *new*UNIX*password* %n\n *Retype*new*UN$
   authentication*tokens*updated*successfully*

[rbrugman]
   comment = Robert's Stuff
   path = /home/rbrugman/
   valid users = rbrugman
   public = no
   writable = yes
   printable = no
;   create mask = 0765
[music]
   comment = Music Server
   path = /home/music/
   public = yes
   valid users = rbrugman
   writable = yes
   printable = no


Thanks,
Robert
~Robert Brugman~
This e-mail is X.509 happy ;-)
GPG Fingerprint: D710 B8D9 C72A AB56 174F  71AC 3619 9F32 8250 6034
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] LDAP don't up

2004-01-20 Thread Beast
* Gilberto Nunes [EMAIL PROTECTED] nulis:

 error loading ucdata (error -127)

I think this nothing to do with samba, could you post in ol list?

It was because incompatible database. you must export it to ldif and then add again to 
new ldap.
good luck!


--beast

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbclient -M machinename generates session request failed - why?

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Joshua Beall wrote:
Hi All,

When I try to do cat message.txt | smbclient -M machinename or
smbclient -M machinename, I get:
added interface ip=192.168.0.100 bcast=192.168.0.255 nmask=255.255.255.0
snip all other interfaces; about 25 more
Got a positive name query response from 192.168.0.12 ( 192.168.0.12 )
session request failed
Try cat message.txt | smbclient -M machinename or
smbclient -p 139 -M machinename
   ^^


cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFADftsIR7qMdg1EfYRAquvAKCnz0UGCjk/+dEGpLW77q/vsu7wVACg3M6q
j8seUsEXVIKfy7DFkAHz9DU=
=Hx9S
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Help Please, Net RPC user failed.

2004-01-20 Thread Widi Pradnyana
Hi
I've setup two Samba domain controller, they configured with almost same
values. But one of them can list users by net rpc user, and the other
cannot. This condition make the last one cannot become a domain controller
for Windows Client.

Any suggest for what should I do?

Thank you.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba ver 2.2.2 - socket read - WinXP

2004-01-20 Thread Greg Banschbach - Sandata - 292

Jan. 21, 2004

Dear All, 

I have enjoyed some success with Samba version 2.2.2.  I am using 
it to serve Micro$ Access to end users.  It works very well on a prior 
version of Unix, with older Win2k clients.  Now, with my current version, 
and Win XP Pro, I have problems.  Periodically, they get abruptly kicked out.
I get syslog errors which look like:

kforce-adm-# tail syslog
Jan  7 16:29:09 hforce smbd[29915]: [2004/01/07 16:29:09, 0] 
lib/util_sock.c:read_socket_data(478)
Jan  7 16:29:09 hforce smbd[29915]:   read_socket_data: recv failure for 4. Error = 
Connection reset by peer
Jan  7 16:29:50 hforce smbd[14128]: [2004/01/07 16:29:50, 0] 
lib/util_sock.c:read_socket_data(478)
Jan  7 16:29:50 hforce smbd[14128]:   read_socket_data: recv failure for 4. Error = 
Connection reset by peer
Jan  7 16:30:44 hforce smbd[3310]: [2004/01/07 16:30:44, 0] 
lib/util_sock.c:read_socket_data(478)
Jan  7 16:30:44 hforce smbd[3310]:   read_socket_data: recv failure for 4. Error = 
Connection reset by peer
Jan  7 16:38:43 hforce smbd[2706]: [2004/01/07 16:38:43, 0] 
lib/util_sock.c:read_socket_data(478)
Jan  7 16:38:43 hforce smbd[2706]:   read_socket_data: recv failure for 4. Error = 
Connection timed out


And I get log.client entries that look like:
 
kforce-var-# tail log.hfuser6
[2003/12/16 17:26:28, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer
[2003/12/19 15:57:55, 0] smbd/nttrans.c:call_nt_transact_ioctl(1762)
  call_nt_transact_ioctl: Currently not implemented.
[2003/12/19 16:36:14, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer
[2004/01/02 08:31:15, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer
[2004/01/07 16:26:42, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer

kforce-var-# tail log.hfuser3
[2003/12/19 16:36:59, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer
[2004/01/02 08:28:18, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer
[2004/01/07 16:27:45, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer
kforce-var-# tail log.hfuser10
[2004/01/07 16:29:50, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by peer
kforce-var-#

Is it the WinXP/Access? or is the newer Unix having socket library issues.
My netstat -m output shows no failures. Connecton reset by peer makes me
think Access is the culprit.  The samba config is setup to have very public
folders and no samba passwords - a very fat security hole behind the firewall.
Pobody's nerfect. 8-).   Anyway,  I also saw some code changes related to 
read() versus recv().   I suspect this is not really a bad code issue, when 
I am seeing connection reset by peer.   Rather, the code might not work so
well with this version of the system libraries?

TIA,

Greg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] bugzilla.samba.org not work ?

2004-01-20 Thread stephane . purnelle
I would like to post a bug, on bugzilla.samba.org, but the website don't
respond.

My bug is :

Some users can't save file correctly the firts time, a second try work
fine, but the first try cause an error on workstations.
In smbd.log, I have :

[2004/01/20 11:13:54, 5] libsmb/namecache.c:namecache_enable(45)
  namecache_enable: disabling netbios name cache
[2004/01/20 11:13:54, 5] tdb/tdbutil.c:tdb_log(724)
  tdb(unnamed): tdb_brlock failed (fd=12) at offset 4 rw_type=1
lck_type=13: Ressource temporairement non disponible
[2004/01/20 11:13:54, 5] tdb/tdbutil.c:tdb_log(724)
  tdb(unnamed): tdb_brlock failed (fd=13) at offset 4 rw_type=1
lck_type=13: Ressource temporairement non disponible
[2004/01/20 11:13:54, 5] tdb/tdbutil.c:tdb_log(724)
  tdb(unnamed): tdb_brlock failed (fd=17) at offset 4 rw_type=1
lck_type=13: Ressource temporairement non disponible
[2004/01/20 11:13:54, 5] tdb/tdbutil.c:tdb_log(724)
  tdb(unnamed): tdb_brlock failed (fd=18) at offset 4 rw_type=1
lck_type=13: Ressource temporairement non disponible

bye

 Stéphane

---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: JEUSFS, tapping the glass

2004-01-20 Thread Mccray Lindsey
attempt interstitial stilt whatley 
damn subterranean bacilli frolic 
calculi wouldn't advantage academe 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] CONGRATULATIONS !!!!!!!!!!!!!!!!Pls contact us for your prize claim.

2004-01-20 Thread Mr.
TAPQ LOTTO INTERNATIONAL. BV PROMO/PRIZE AWARD DEPARTMENT
Keizersgracht Amsterdam 1015 CS.
--
REF: ZD/994438-55/04, BATCH: CHN-8358/IPDU.
--
DATE:20th of January
--
RE: AWARD FINAL NOTIFICATION.
--
We are pleased to inform you of the announcement today, 20th of January,
2004 of winners of the SCIENTIFIC GAME PROMO LOTTERY; THE NETHERLANDS /
INTERNATIONAL, PROGRAMS held on 21st of November, 2003. Your Name and
email address attached to ticket number 90-00893897, with serial number
4731ZD drew the lucky numbers 45-21-44-42-63-63, and consequently won the
lottery in the 1st category. You have therefore been approved of a lump
sum pay out of US$1,600,050.00 (0NE MILLION, SIX HUNDRED THOUSAND AND
FIFTY UNITED STATE DOLLARS ONLY) credited to file REF NO. ZD/994438-55/04.
This is from total prize money of US$5,500,000.00 shared among the seventeen 
international winners in 1st-3rd categories. All participants were selected through a 
computer ballot system drawn form 25,000 company email addresses and 30,000,000 
individual email addresses from Australia, New Zealand, America, Europe, North America 
and Asia as part of International Promotions Program,which is conducted annually.
CONGRATULATIONS !!!
Your fund is now in custody of a financial Institution insured with your FILE 
REFERENCE INFORMATION. Due to the mix up of some numbers and names, we ask that you 
keep this award strictly from public notice until your claim has been processed and 
your money remitted to your account. This is part of our security protocol to avoid 
double claiming or unscrupulous
acts by participants of this program.
Our group of philanthropist headed by Bill Gates promoted this lottery program. We 
hope with a part of you prize, you will participate in our end of year high stakes 
US$10,000,000 million Dollars International Lottery and our TAPQ Investment programme 
give people the tools they need to work their way out of poverty,by providing micro 
loans and business training
to poor women and men to start their own businesses, TAPQ 's  partner lending 
organizations help people work their own way up the economic ladder, with dignity and 
pride.
To begin your claim, please contact your file/claim officer:
MR.JERRY HEERM, of TAPQ LOTTO INVESTMENT PROMOTION
TEL: 0031-625 -552-172,Email Address: [EMAIL PROTECTED]
Please be aware that your Paying Authority will Effect Payment Swiftly upon 
satisfactory Report, Verifications and validation provided by our processing Agent; 
that would be designated to your file.For due processing and remittance of your 
winning prize to your designated account of your choice. Remember, all prize money 
must be claimed not
later than 1st of March 2004. After this date, all funds will be returned as unclaimed.
--
NOTE: In order to avoid unnecessary delays and complications,please remember to quote 
your reference and batch numbers in every one of your correspondences with your agent. 
Furthermore, should there be any change of your address, do inform your claims agent 
as soon as possible.
--
Congratulations once again from our team of staff and thank you for being part of our 
promotional program.
Note: Candidates under the age of 18 and Non-Tax payerwhere AUTOMATICALY
DISQUALIFIED.
kamphuisen Tom (Mr.)
(Lottery Coordinator Netherlands Branch)   -- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: RGLNMXFV, stations in various

2004-01-20 Thread Randall Roxie
blithe valediction trawl pernicious thermal juvenile decker country 
anthracnose fatten passionate beckman sped shanghai 
beetle associate codfish vertebral 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: WTLZJ, it was growing

2004-01-20 Thread Holly
exogamy eh spaniel amateurish beirut 
threefold expunge petunia activism sigh mallory dishwasher midband ratepayer gig 
lenient notocord loggerhead microfiche 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Atencion: Mail Comercial Personal temporal y outsourcing informatico

2004-01-20 Thread Equipo de e-marketing
Si no puede visualizar esta información, favor click aquí!



Si norecibir nuevamente esta información, favor remove aquí!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] FORTUNE LOTTERIA WINNER!!!!!

2004-01-20 Thread FORTUNE PROMO LOTTERIA S.A.
 FROM: THE PRIZE AWARD DEPARTMENT
FORTUNE LOTTERIA,MADRID -SPAIN.


Congratulations Category A prize winner! You have been
selected as one of five winners of the Worldwide
loteria fortune Madrid-Spain computer ballot draws and thus will
be a privileged recipient of the grand draw prize of Euros705.366,87 (SEVEN HUNDRED 
AND FIVE THOUSAND THREE HUNDRED AND SIXTY SIX EUROS EIGHTY SEVEN CENT ONLY). Winning 
File Reference number for your prize is WWPL/ES/ 61-812087; ticket number 004 - 
05117963 - 198.

 We in the Worldwide loteria la fortune Spain is by this
program, launching our model computer balloting lottery draws,
developed and designed to satisfy the cravings of the ever
growing number of participants in our various lottery programs. With
funds accrued exclusively from previous draws, payouts to
all winners are guaranteed and will be transferred in record time.

After randomly selecting 15,000 participants from an
initial database of 300,000 emails and zoning all participants
by their respective continents from across the globe, we
produced an extensive list from which you have emerged as one of
the winners of the Grand Draw prize.

To ensure a smooth collection of your winnings, the
transfer of your prize is to be handled by our Prize
Transfer agents.You are to contact our agents by email
andwithin a week of receiving this notice.
Don´t forget to include your contact telephone and fax number.
Please find full contact details below:


Mr.Jason Hacman.
Your claims agent
Fortune Lotteria.
c/ Burgos 27
Madrid-Spain.
EMAIL:[EMAIL PROTECTED]

Also find all other relevant winning lottery information
below:
Draw Serial No:99375.
Batch No: 24/00319/IPD.
Grand Draw No:31 - 33 - 34 - 35 - 36 - 42.

You are seriously advised to keep all winning lottery
information and numbers from the public in line with
our company security protocol to avoid double claiming and
unwarranted abuse of this program by unscrupulous individuals.

Please direct all further correspondences and queries to your respective category 
Prize Transfer handlers.Congratulations once again from the Loteria fortune.

Note: Anybody under the age of 21 is automatically disqualified.



Sincerely,
Lopez Hernandez
International Promotions Manager
LOTERIA FORTUNE,MADRID-SPAIN.


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re:

2004-01-20 Thread
1110  e-mail  +  M
  :
 2 249$   10 299$ !
.095 961- .82047
  /. 

ps. .



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] LOTTO WINNER

2004-01-20 Thread CARLOS PREMIER LOTTO
FROM:
THE PRIZE AWARD DEPARTMENT
CARLOS PREMIER LOTTO MADRID, SPAIN.
20th JANUARY 2004


Congratulations Category A prize winner! You have been
selected as one of two winners of the CARLOS PREMIER LOTTO
MADRID, SPAIN computer ballot draws and thus will
be a privileged recipient of the grand draw prize of € 750,820.00 (SEVEN HUNDRED AND 
FIFTY THOUSAND, EIGHT HUNDRED AND TWENTY EUROS). Winning File
Reference number for your prize is WWPG/spain/ 14-912068; ticket number
009-216-48/B.

We in the Worldwide Premier Lotto Spain is by this
program, launching our model computer balloting lottery draws,
developed and designed to satisfy the cravings of the ever
growing number of participants in our various lottery programs. With
funds accrued exclusively from previous draws, payouts to
all winners are guaranteed and will be transferred in record time.

After randomly selecting 15,000 participants from an
initial database of 300,000 emails and zoning all participants
by their respective continents from across the globe, we
produced an extensive list from which you have emerged as one of
the winners of the Grand Draw prize.

To ensure a smooth collection of your winnings, the
transfer of your prize is to be handled by our Prize
Transfer agents. You are to contact our agents by email
and/or tel. within a week of receiving this notice.
Please find full contact details
below:

Mr. Roy Mcslowski
Finance Director
Liberty Finance and Trust Ltd.
15 - 19 Calle Leonard's
28089 Madrid, Spain.
FOREIGN SERVICE NUMBER:64218 525
EMAIL:[EMAIL PROTECTED]

PRIVATE EMAIL:[EMAIL PROTECTED]



Also find all other relevant winning lottery information
below:
Draw Serial No: 35/751346
Batch No: 06-A852
Zonal Draw No: A2-003
Grand Draw No: 12099

You are seriously advised to keep all winning lottery
information and numbers from the public in line with
our company security protocol to avoid double claiming and
unwarranted abuse of this program by unscrupulous individuals.

Please direct all further correspondences and queries
to your respective category Prize Transfer
handlers. Congratulations once again from the CARLOS Premier Lotto family.


Sincerely,

MARISKA BOWL
International Promotions Manager
CARLOS PREMIER LOTTO SPAIN






--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


ldap filter and man page [WAS Re: [Samba] My story installing Samba-LDAP PDC (it has a happy ending)

2004-01-20 Thread Beast
* Gerald (Jerry) Carter [EMAIL PROTECTED] nulis:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 On Thu, 15 Jan 2004, Beast wrote:
 
  But I need some clarification from samba team (Jerry?) whether we can
  use this filter without breaking any other functions or not, because
  they must be has strong reason using default filter.
 
 My opinion is that the 'ldap filter' option in smb.conf should never be
 set.  There are 2 many different LDAP searches now being done (group
 mapping, users, etc...) and we don't use that option consistently
 internally anyways.  Best to leave it alone IMO.

If I did not set ldap filter then according man page (smb.conf) it will be:

 Default: ldap filter = ((uid=%u)(objectclass=sambaAccount))

which is 'not work'. I migh wrong here.

Also man page for smb.conf(5) in samba-3.0.2rc1 is truncated, only 1 page long, at 
least in srpm package.

fyi, I've tried 3.0.2rc1 without setting 'ldap filter' in smb.conf and put computer 
account under ou=computer and it able to add machine. 
Any strong reason to not putting computer account different than user accounts?


--beast

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] LOTTO WINNER

2004-01-20 Thread CARLOS PREMIER LOTTO
FROM:
THE PRIZE AWARD DEPARTMENT
CARLOS PREMIER LOTTO MADRID, SPAIN.
20th JANUARY 2004


Congratulations Category A prize winner! You have been
selected as one of two winners of the CARLOS PREMIER LOTTO
MADRID, SPAIN computer ballot draws and thus will
be a privileged recipient of the grand draw prize of € 750,820.00 (SEVEN HUNDRED AND 
FIFTY THOUSAND, EIGHT HUNDRED AND TWENTY EUROS). Winning File
Reference number for your prize is WWPG/spain/ 14-912068; ticket number
009-216-48/B.

We in the Worldwide Premier Lotto Spain is by this
program, launching our model computer balloting lottery draws,
developed and designed to satisfy the cravings of the ever
growing number of participants in our various lottery programs. With
funds accrued exclusively from previous draws, payouts to
all winners are guaranteed and will be transferred in record time.

After randomly selecting 15,000 participants from an
initial database of 300,000 emails and zoning all participants
by their respective continents from across the globe, we
produced an extensive list from which you have emerged as one of
the winners of the Grand Draw prize.

To ensure a smooth collection of your winnings, the
transfer of your prize is to be handled by our Prize
Transfer agents. You are to contact our agents by email
and/or tel. within a week of receiving this notice.
Please find full contact details
below:

Mr. Roy Mcslowski
Finance Director
Liberty Finance and Trust Ltd.
15 - 19 Calle Leonard's
28089 Madrid, Spain.
FOREIGN SERVICE NUMBER:64218 525
EMAIL:[EMAIL PROTECTED]

PRIVATE EMAIL:[EMAIL PROTECTED]



Also find all other relevant winning lottery information
below:
Draw Serial No: 35/751346
Batch No: 06-A852
Zonal Draw No: A2-003
Grand Draw No: 12099

You are seriously advised to keep all winning lottery
information and numbers from the public in line with
our company security protocol to avoid double claiming and
unwarranted abuse of this program by unscrupulous individuals.

Please direct all further correspondences and queries
to your respective category Prize Transfer
handlers. Congratulations once again from the CARLOS Premier Lotto family.


Sincerely,

MARISKA BOWL
International Promotions Manager
CARLOS PREMIER LOTTO SPAIN






--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Ó¡Ë¢²»¸É½º±êÇ©¡¢PVC±êÅÆ¡¢Ë®¾§µÎËܱêÅÆ¡¢ËµÃ÷Êé¡¢°ü×°ºÐ

2004-01-20 Thread ±êÇ©¡¢±êÅÆ




!
;
,,7014;
,
http://tkhome.6456.com 
[EMAIL PROTECTED] QQ36768830








-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: KAE, the only thing

2004-01-20 Thread Millard Rojas
inequivalent fumigate firepower druid bloodstone shaggy sleepy angeline 
forgetting stem roundhead befogging snack sister jaime 
iceland savoyard multifarious desire prank alcohol 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] [] 10 !

2004-01-20 Thread mailer


 http://baramsoft.net  
.   
   
,   . 

.(Reject Mail)  ...
mailto:[EMAIL PROTECTED] E-mail Reception
RejectBody= .  
. Please do not
send me more emails. Delete my email Address!!!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] PREMIER LOTTO WINNER

2004-01-20 Thread CARLOS PREMIER LOTTO
FROM:
THE PRIZE AWARD DEPARTMENT
CARLOS PREMIER LOTTO MADRID, SPAIN.
20th JANUARY 2004


Congratulations Category A prize winner! You have been
selected as one of two winners of the CARLOS PREMIER LOTTO
MADRID, SPAIN computer ballot draws and thus will
be a privileged recipient of the grand draw prize of € 750,820.00 (SEVEN HUNDRED AND 
FIFTY THOUSAND, EIGHT HUNDRED AND TWENTY EUROS). Winning File
Reference number for your prize is WWPG/spain/ 14-912068; ticket number
009-216-48/B.

We in the Worldwide Premier Lotto Spain is by this
program, launching our model computer balloting lottery draws,
developed and designed to satisfy the cravings of the ever
growing number of participants in our various lottery programs. With
funds accrued exclusively from previous draws, payouts to
all winners are guaranteed and will be transferred in record time.

After randomly selecting 15,000 participants from an
initial database of 300,000 emails and zoning all participants
by their respective continents from across the globe, we
produced an extensive list from which you have emerged as one of
the winners of the Grand Draw prize.

To ensure a smooth collection of your winnings, the
transfer of your prize is to be handled by our Prize
Transfer agents. You are to contact our agents by email
and/or tel. within a week of receiving this notice.
Please find full contact details
below:

Mr. Roy Mcslowski
Finance Director
Liberty Finance and Trust Ltd.
15 - 19 Calle Leonard's
28089 Madrid, Spain.
FOREIGN SERVICE NUMBER:64218 525
EMAIL:[EMAIL PROTECTED]

PRIVATE EMAIL:[EMAIL PROTECTED]



Also find all other relevant winning lottery information
below:
Draw Serial No: 35/751346
Batch No: 06-A852
Zonal Draw No: A2-003
Grand Draw No: 12099

You are seriously advised to keep all winning lottery
information and numbers from the public in line with
our company security protocol to avoid double claiming and
unwarranted abuse of this program by unscrupulous individuals.

Please direct all further correspondences and queries
to your respective category Prize Transfer
handlers. Congratulations once again from the CARLOS Premier Lotto family.


Sincerely,

MARISKA BOWL
International Promotions Manager
CARLOS PREMIER LOTTO SPAIN






--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Serious bug in Samba 3.0.2pre1 !!!

2004-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Alex de Vaal wrote:

Summarization of the bug in Samba 3.0.2pre1:
It seems that an ADS group is not valid or detected anymore to access a
samba share, in case only an ADS group is used a valid user on a Samba
share, because Kerberos is reporting: Username (null) is invalid on this
system.
Besides that, connecting to a share (service) reports with Samba 3.0.0-2
REALM\username (NH-TEST.NL\fo6), but with Samba 3.0.2pre1 connecting to
a share (service) reports only username (fo6)
Downgrading to Samba 3.0.0-2 solves this problem!
Please read the release notes (WHATSNEW).

   winbind use default domain = yes
Disable this parameter and you will get your desired behavior.





- -- 
cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFADfr1IR7qMdg1EfYRAmGZAJ9T4V9vg/5xkQyKq3MgmwmwOr8DLgCfQy8C
T1iIjC46l8aV8GCT1NTiujk=
=HSmy
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: Set up problems (apologies if this *did* get out before)

2004-01-20 Thread Hearn, Rich J.

Hi Folks,

I'm trying to set up Samba_2.2-8 for VMS (I did the linking from sources); I had the 
same problem with 2.2-7a that I'm running into now, so I upgraded to 2.2-8 in case it 
corrected
a problem.  Has anybody seen this before?  Test3 in DIAGNOSIS.TXT has not been able to 
shed any light as to what I'm running into.  I've got about 4 days into this,  would 
like to see where I'm going wrong.  Brian Tillman gave me an assist last month - 
thanks Brian, it did get me further along to this point.

*
VIA04::[RJHEARN]_
VIA04::[RJHEARN]_smbclient -L via04 
load_unicode_map: filename /samba_root/lib/codepages/unicode_map.ISO8859-1 does not 
exist.
added interface ip=10.7.40.71 bcast=10.7.41.255 nmask=255.255.254.0
added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
Password: 
  Anonymous login successful
Domain=[VIA04] OS=[OpenVMS] Server=[Samba 2.2.8]
tree connect failed: NT_STATUS_BAD_NETWORK_NAME
VIA04::[RJHEARN]_
VIA04::[RJHEARN]_smbclient  //via04/tmp
load_unicode_map: filename /samba_root/lib/codepages/unicode_map.ISO8859-1 does not 
exist.
added interface ip=10.7.40.71 bcast=10.7.41.255 nmask=255.255.254.0
added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
Password: 
  Anonymous login successful
Domain=[VIA04] OS=[OpenVMS] Server=[Samba 2.2.8]
tree connect failed: NT_STATUS_BAD_NETWORK_NAME
VIA04::[RJHEARN]_
*

Would anyone be willing to run samba_root[bin]testparm  post the entire dump of the
service definitions it displays of the smb.conf?  Would anyone be willing to show the 
entire directory structure of samba_device:[Samba...]*.* showing ownership  
protections
(acl's too)for it on a working system?  I have tried just about everything I can think 
of
with no success.

Btw:  This appears to work, so some things are correct...

VIA04::[RJHEARN]_nmblookup -B via04 __SAMBA__
querying __samba__ on 10.7.40.71
10.7.40.71 __samba__00
VIA04::[RJHEARN]_

Thoughts welcomed,

 Thanks, 

Rich

===
Rich Hearn  personal phone: 802-847-8015
Fletcher Allen Health Care  24hr Helpdesk:  802-847-8100
Information Servicespager:  802-351-7249
One Burlington Square
Burlington, VT 05401email:  [EMAIL PROTECTED]   
===




Confidentiality Notice:
This message, and any attachments, may contain information that is confidential, 
privileged, and/or protected from disclosure under state and federal laws that deal 
with the privacy and security of medical information. If you received this message in 
error or through inappropriate means, please reply to this message to notify the 
Sender that the message was received by you in error, and then permanently delete this 
message from all storage media, without forwarding or retaining a copy.
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:

http://www.catb.org/~esr/faqs/smart-questions.html


Re: NFOMPJR, long spark flew

2004-01-20 Thread Janna Mcmillan
term manama io judiciary counselor un vienna 
gresham bernardo motor bid hug 
ellipsis utopia univalent bifurcate tideland woodrow blink snifter tactic 
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:

http://www.catb.org/~esr/faqs/smart-questions.html


CVS update: samba4/source/torture/raw

2004-01-20 Thread tridge

Date:   Wed Jan 21 03:30:03 2004
Author: tridge

Update of /home/cvs/samba4/source/torture/raw
In directory dp.samba.org:/tmp/cvs-serv5696

Modified Files:
qfileinfo.c 
Log Message:
cope with a wider range of broken servers in the RAW-QFILEINFO test


Revisions:
qfileinfo.c 1.4 = 1.5

http://www.samba.org/cgi-bin/cvsweb/samba4/source/torture/raw/qfileinfo.c.diff?r1=1.4r2=1.5