[Samba] one and a half nets

2004-06-25 Thread Nik Trevallyn-Jones
Hi all,

I am trying to configure a SAMBA server to be connected to two different 
networks in two different ways:

One network, on interface eth0, is the local network, the SAMBA server is the 
main file server for this network, and so I assume it would be best if the 
SAMBA server were the master on this network.

The other network, on interface eth3, is someone else's network. I am trying 
to make my SAMBA server as invisible as possible on this network, whilst 
still allowing file sharing.

I set this up as seemed to make sense, and it worked to my expectations. 
However, the single remote PC (Windows XP) on the eth3 network that was 
accessing my SAMBA server can access it no longer, and gets an An extended 
error occurred error when trying to re-create the network share. I have no 
idea what has changed to cause this, and suspect that perhaps it is the PC 
and not my server at fault.

Ideally, I want the SAMBA server to support all samba services, including 
browsing, on eth0. In contrast, I don't want the server to be visible in 
browse lists of PCs on eth3. I really only want PCs to connect by explicitly 
creating a network share on that PC. I especially *don't* want my SAMBA 
server to be any kind of controller on the eth3 network.

I have restricted access from eth3 by only including it in the hosts allow 
of a single share on the server.

I have some fairly general quations

Q1: Has anyone any idea what the extended error might mean?

Q2: Has anyone any suggestions on how to make a single SAMBA server behave 
like the main file server on one network, but be almost invisible on another?

Q3: Is there any way I can adjust my firewall so that a PC can connect to a 
shared drive on my SAMBA server, if it knows the address and share name, but 
the SAMBA server will not show up in browse lists, will not participate in 
master elections, and won't interfere with WINS servers on that same network?

And some more specific questions:

Q4: The parameters domain master local master preferred master are all 
global parameters, so if I enable any of them, my SAMBA server will set the 
corresponding behaviour on ALL connected networks, correct?

Q5: eth3 has a Microsoft domain controller - will anything nasty happen on 
eth3 if I have wins support = yes set on my SAMBA server?

Q6: Is the behaviour of the xxx master parameters restricted by the 
interfaces parameter?

Q7: Just what does the interfaces parameter restrict? If I omit eth3 from 
the interfaces parameter, will this disable connection to services, or just 
browsing, or...?

Q8: If my SAMBA server's address on eth3 is 123.456.789.100, then what are the 
differences, if any, between the following settings:

interfaces = eth0 eth3

interfaces = eth0 123.456.789.0/24

interfaces = eth0 123.456.789.100

Q9: The PCs on eth0 are all Window 2000 machines. If I disable all the xxx 
master and wins parameters on my SAMBA server, will the PCs on eth0 still 
be happy, or will I regret it?

Any and all help greatly appreciated.

Cheers!
Nik
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Special characters in the password

2004-06-25 Thread Carmen Wai
Dear all:

I am using samba+openldap as the PDC, I use to
smbldap-tool like smbldap-useradd.pl,
smbldap-usermod.pl .. to work on the user account, and
I find it is not able to create user password with
special character single quote character (') can
anyone able to solve this problem?

Also when a user login a Window NT/2000 machine
through my PDC, the user can't change password with
the password contain special character of single quote
('), double quote () and a space. In the smb.conf
script, the password program is set to
./smbldap-passwd.pl and I think there is something
weired on it... is anyone has any idea on this and
solve this?

Thanks a lot!
Carmen



__
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
http://promotions.yahoo.com/new_mail 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: string overflow in safe_strcpy

2004-06-25 Thread Carl
Corey Spalding wrote:
I recently upgraded both of my samba servers (mirrors of each other) to 
3.0.4, my log files now fill with the following messages (hundred lines 
per day):

Jun 24 13:55:33 Clyde smbd[8597]: [2004/06/24 13:55:33, 0] 
lib/util_str.c:safe_strcpy_fn(602)
Jun 24 13:55:33 Clyde smbd[8597]:   ERROR: string overflow by 1 (9 - 8) 
in safe_strcpy [LIBRA~V$.DOC]
Jun 24 14:20:34 Clyde smbd[8597]: [2004/06/24 14:20:34, 0] 
lib/util_str.c:safe_strcpy_fn(602)
Jun 24 14:20:34 Clyde smbd[8597]:   ERROR: string overflow by 1 (11 - 
10) in safe_strcpy [Config.pol.bak]

The messages appear when I'm browsing any share setup on either server.
Heres the smb.conf from the backup server.
# Global parameters
[global]
   unix charset = UTF8
   workgroup = SPRINGFIELD
   server string = Clyde
   security = SHARE
   map to guest = Bad User
   passwd program = /usr/bin/passwd%u
   passwd chat = *password* %n\n *password* %n\n *successful*
   log level = 1
   name resolve order = lmhosts host wins bcast
   mangling method = hash
   add user script = /usr/sbin/adduser -n -g machines -c Machine -d 
/dev/null -s /bin/false %m$
   add machine script = /usr/sbin/useradd -d /dev/null -g 503  -s 
/bin/false -M %u
   logon path = \\%L\Profiles\%U
   os level = 60
   preferred master = No
   local master = No
   domain master = No
   wins support = Yes
   ldap ssl = no
   idmap uid = 1-2
   idmap gid = 1-2
   winbind enum users = No
   winbind enum groups = No
   path = /var/spool/samba
   admin users = root, cspalding
   read only = No
   guest ok = Yes

[homes]
   comment = Home Directories
   path = /home/%U
   create mask = 0700
   directory mask = 0700
   guest ok = No
   nt acl support = No
   locking = No
[netlogon]
   comment = Network Logon Service
   path = /home/NETLOGON
   nt acl support = No
   locking = No
[Profiles]
   comment = Nt Roaming Profiles
   path = /home/profiles
   create mask = 0777
   guest ok = No
[public]
   comment = Public on Clyde
   path = /usr2/public
   create mask = 0777
   force create mode = 0777
   directory mask = 0777
   force directory mode = 0777
[printers]
   comment = All Printers
   printable = Yes
   browseable = No
[apache]
   comment = webserver share
   path = /var/www/html
   username = billy,@billy, nobody, cspalding
   valid users = cspalding, mcaley, lynn, billy
   admin users = cspalding, mcaley, corey
   write list = billy, @billy
[office]
   path = /usr2/office

Any ideas how to get rid of this error? Its more of a nuisance that 
anything else at the moment.


Yeah i get this problem too, with samba 3.04 on FC1 exactly the same, 
string errors when browsing any share which fills up my 
/var/log/messages file

Any one know a fix?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] poledit policy-file for w2k offline folders

2004-06-25 Thread Gunther Schlegel
To add an answer for the list archive:

I received an NT4 poledit adm File that contains lots of options for XP
and W2K. It is to big to be posted to the list, but I will pass it on if
someone asks for it.

 I am looking for a NT4 policy template (.adm) file I can deploy using
 samba 3 to change the behavior of the make folders available offline
 feature.

-- 
Gunther SchlegelRiege Software International GmbH
Manager System AdministrationMollsfeld 10
 40670 Meerbusch, Germany
Email: [EMAIL PROTECTED]  Phone: +49-2159-9148-0
  Fax:   +49-2159-9148-11
-

Disclaimer:
You may grab my GPG key from http://www.keyserver.net .
A nonproportional font is recommended for reading.


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] user member of groups

2004-06-25 Thread Collen Blijenberg MLHJ
is there an easy way, to find out to witch groups a user belongs to.?
(and i don't mean a user editor from linux it self, coz that's posb.
the only way..)

i couldn't figure it out with the tools that come with samba..!
l8r
-
Collen Blijenberg (Systeem/Netwerk Beheerder)

Montessori Lyceum 
Herman Jordan
Zeist

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba config

2004-06-25 Thread Olaf Eichhorn, Vermessungsbüro Pfeifer
Hi Chris
try to add the following option in Your smb.conf for the specific printer
use client driver = Yes
This worked for me, but I use samba 3.0.4.
I don't know exactly, whether this option is valid for samba 2.2.8.a
Olaf
PS: What a match yesterday Portugal - England!
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cannot install printers via CUPS in Samba3.0.2a on debian sarge

2004-06-25 Thread Olaf Eichhorn, Vermessungsbüro Pfeifer
Hi Wolfgang
Try the following line in Your smb.conf
printcap = cups
Olaf
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3 and policy

2004-06-25 Thread TMI-Concept
Ricardo Nuno a écrit :
hello list,
I'm doing some policys on my PDC and I was wondering is there a .ADM
or a registry entry to enable the Sharing options on Domain users ?
I just can't find anything on it, any help would be apreciated.
Regards,
-- RNuno
 

Hi,
What kind of clients do you have ?
Win98se ? win2k? winXP ?
I know you can find several .ADM models to create .POL files on the 
win98se installation disk.

I'm not sure what kind options you are looking for. By the way, look for 
chapter 22 of the samba3 how-to.

hope it helps.
TMI-Concept
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] The semaphore timeout period has expired

2004-06-25 Thread Aleksandrov, Oleg
Hello Hamish.

I found your message just googling for Suse and sk98lin.

Did you solve your problem?

I had the same case and only way to restore was to change NIS driver speed
settings from AUTO to 10Mb. And it was not related to OS as the same problem
is in WXP ( I have dual boot, ASUS P4P800, integrated GB NIS ).

Oleg.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Roaming profiles. How to do it ?

2004-06-25 Thread Flávio Henrique
Hi TMI,
see below
Flávio Henrique a écrit :
Hi all..
I'm using Samba 3.0.2a on Mandrake 10, serving +/- 50 win98 clients.
I'm using this options:
logon path = \\%N\%U\profile
logon home =  \\%N\%U\profile
but the roaming profile seems do not working... at least the way that 
I want. (maybe this is the right behavior).
   What I want:
   - When an user logins on MACHINE1 the profile that is saved in 
Linux begin download to MACHINE1
   - When this user logoff from MACHINE1 the profile must update on 
linux server
   - If this user logins on MACHINE2 the profile (updated) must be 
downloaded to MACHINE2

But is not happen like this. When the user logins for the first time 
on MACHINE1 a local profile is created using the All users folder 
(under \windows\profiles)

I'm not sure if the option  logon home = \\%N\%U\profile  tells 
Samba to do what I want.

Somone can help me ?
Thank you in advance.
Flávio Henrique

Hi,
It seems to me that your samba side parameters are good.
The logon path parameter won't be useful, it is only for win2k / winXP 
/ NT clients.
ok. thank you
You should now check:
1- permissions of the profile directory (be sure your users can write 
that directory)
the permissions is right (700 with owner user.user
the users can export the profile from win98, my problem is that they 
can't import the roaming profile when make login in another machine...
I read in somewhere that win98 can't deal correctly with roaming profiles...
I wish to know if someone is working with win98 roaming profile, 
importing the profile when logins in the first time...

2- did you activate the use of profiles in the nethood properties of 
the win98se clients ?
yes...
3- Check the samba-howto, chapters 22 and 23, it covers most of the 
basics for profiles to work (win98 included).
I will... thank you
hope it helps
TMI-Concept

Flávio Henrique
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] group policy (2000/XP)

2004-06-25 Thread Grégory TROUCHAUD
Hello all,

I am a new user of samba, that's look pretty cool.
I use samba 3.x. There are only windows 2000 client(and 1 XP) in french 
language. I don't have any license of some server version like windows NT4 
server, 2000 or 2003 server.

One think i would like to do is setting the time of the windows 2000 client.

I write in the logon script : 
net time /domain:mydomain /set /yes

The problem is that the client doesn't have the permission to to set the time.
I found 2 solutions: 

- the first is to set with the gpedit.msc application Modify System Hour 
key(That's the traduction key from french). I tried this, it work fine. The 
problem is that i have to do that manually on each computer that will log 
into the domain. 

- the second, is to set a policy with the poledit executable from the NT 4 
server cd. But i don't have any windows server. I try using the poledit.exe 
from a win98 cd that i have. But the ntconfig.pol that it generates don't 
seem to be ok for the windows 2000 client. And i don't have the key that let 
an authentified user setting the hour. Is it possible to get some .adm file 
that corrects that?


Well, if u have some clues about that, let me know

That care

greg

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The semaphore timeout period has expired

2004-06-25 Thread Hamish
Hi Oleg
It was not a samba problem at all! I did 2 things: changed the network 
card from the onboard Asus P4P800 Delux Mobo to an intel 1000. I had 
used a patch to update the kernel for the boards onboard RAID (it was 
not a raid patch, it just allowed the 2 extra ide channels to be seen by 
linux) and I reverted back to my old kernel (2.6.5-10 from SuSE rpm)
I have made no changes to the e1000 driver from default and it works fine.
It was a strange problem because the windows box that the copy was 
initiated from would give the error (The semaphore timeout period has 
expired) and the linux box would then slow down and eventually hang. I 
could not get anything to work - ssh, telnet, even direct on the box - 
the only way to get out of the hang was the 'hard' way...

The intel card now seems to be working fine, but i think the old one 
would be ok as well, I think it was a buggy kernel due to the patch. I 
am now using the board without the extra IDE channels (ASUS support 
linux by giving a binary only driver for redhat 7.2 - bollox. The patch 
I found was made by someone with the same problem)

I know it is off list, sorry, but if you find a way to make those IDE 
channels work reliably, please let me know!

Cheers,
Hamish
Aleksandrov, Oleg wrote:
Hello Hamish.
I found your message just googling for Suse and sk98lin.
Did you solve your problem?
I had the same case and only way to restore was to change NIS driver speed
settings from AUTO to 10Mb. And it was not related to OS as the same problem
is in WXP ( I have dual boot, ASUS P4P800, integrated GB NIS ).
Oleg.
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.4 acl problem

2004-06-25 Thread Prajjwal
Hi list
I have a strange problem with my Samba 3.04 server running on redhat 9 
with 2.4.24 kernel (with acl patch from acl.bestbits.at applied to it). 
 Acls are working fine on my system, and my server is working fine as a 
Samba PDC (or so it seems).

I can view and modify any permissions on the existing files that are 
being shared.  If setfacl has been used to grant additional users 
permissions, then those users are also displayed, and their permissions 
can also be set.

However, if I try to add any new users to the acl, a dialog box pops up, 
asking me to provide it with the username and password of a user with 
permissions to modify on my domain, and when I supply the username and 
password, the dialog responds that multiple connections to the shared 
resource are not allowed, and it asks me to close all other connections 
before trying again.

I've been baffled by the problem for quite a while, and am googling the 
net for an answer, but I haven't found a solution yet.  The strange 
thing is that when the user list is displayed in the acl select dialog, 
I get several weird lines in my samba machine log file.

I'm including the log lines with this letter.
I hope you can help me.
Thanks
Prajjwal Devkota

Strange log lines:
%m.log lines:
A. domain sid conflicts?
log lines:
rpc_parse/parse_samr.c:init_sam_user_info21A(5988)
  init_sam_user_info_21A: User root has Primary Group SID S-1-5-32-544,
  which conflicts with the domain sid 
S-1-5-21-2006529868-80066561-100632871.  Failing operation.

B. strange gid problem
log lines:
 rpc_server/srv_util.c:get_alias_user_groups(219)
  get_alias_user_groups: gid of user sam doesn't exist. Check your 
/etc/passwd and /etc/group files

but when I type the following command at the shell, I get a normal output:
id sam
uid=501(sam) gid=100(users) groups=100(users)
C. additional information:
net groupmap list
System Operators (S-1-5-32-549) - daemon
Replicators (S-1-5-32-552) - kmem
Guests (S-1-5-32-546) - nobody
Domain Guests (S-1-5-21-2006529868-80066561-100632871-514) - nobody
Domain Admins (S-1-5-21-2006529868-80066561-100632871-512) - root
Power Users (S-1-5-32-547) - -1
Print Operators (S-1-5-32-550) - -1
Administrators (S-1-5-32-544) - wheel
Account Operators (S-1-5-32-548) - wheel
Domain Users (S-1-5-21-2006529868-80066561-100632871-513) - users
Backup Operators (S-1-5-32-551) - bin
Users (S-1-5-32-545) - users
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem setting ACLs on files/folders... plz help!

2004-06-25 Thread Prajjwal
Hi
Did you build acl support into your kernel?
When you type smbd -b|grep -i acl, what kind of output do you get- you 
sure the acl support is compiled in properly into samba?

What kind of output do you get in your samba logs when and before you 
get the access denied messages?

Finally, I dont see any nt acl support = yes line in your smb.conf 
file-- why dont you add it in?

Regards
Prajjwal
Kirk Marple wrote:
I'm running Samba on a Mac OS X server, and the server is a member of a
Windows domain (Windows 2003).
 
Samba is setup for security=domain permissions.
 
I have opened up a file share to the Windows machines named AppDeployment.
I'm able to open \\xserve\AppDeployment on a Windows server, and am able to
create directories and copy files in there.   (Btw, when i attempt to net
use that directory from Windows, I'm required to enter an account from the
Mac server.)
 
Even if i login as 'root' on the Mac server when accessing that file share,
when i try and change the permissions of a folder (i.e. add ACLs for a
domain user via the Windows property page), I get an error dialog saying
Unable to save permission changes on directory name.  Access is denied.
when i try and apply the changes.
 
any thoughts on what could be going wrong?  i'm pretty stuck!   
 
am i going about this the wrong way?   basically i want to setup Samba so i
can have a file share on the Mac server that is exposed to the Windows
servers in the domain, and the Windows servers can set ACLs on the
files/folders using accounts in the domain.
 
thanks for any help!
Kirk
 

 
[global]
workgroup = ...
password server = *
hide files = .Trashes/Temporary Items/Desktop
*/TheFindByContentFolder/TheVolumeSettingsFolder/.DS_Store/.AppleDouble/
display charset = UTF-8-MAC
print command = /usr/sbin/PrintServiceAccess printps %p %s
lprm command = /usr/sbin/PrintServiceAccess remove %p %j
security = domain
guest account = unknown
encrypt passwords = yes
printing = BSD
allow trusted domains = yes
preferred master = no
lppause command = /usr/sbin/PrintServiceAccess hold %p %j
netbios name = xserve
wins support = no
max smbd processes = 0
printcap =
server string = Mac OS X
lpresume command = /usr/sbin/PrintServiceAccess release %p %j
client ntlmv2 auth = yes
domain logons = no
lpq command = /usr/sbin/PrintServiceAccess jobs %p
passdb backend = opendirectorysam guest
dos charset = CP437
unix charset = UTF-8-MAC
socket options = SO_RCVBUF=64240
auth methods = guest ntdomain opendirectory
local master = no
use spnego = yes
map to guest = Bad User
domain master = no
printer admin = @admin, @staff
log level = 3
 
[AppDeployment]
oplocks = 0
map archive = no
path = /Volumes/.../AppDeployment
read only = no
inherit permissions = 1
strict locking = 1
comment = macosx
create mask = 0666
guest ok = 1
public = yes
writeable = yes
directory mask = 0777
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Print Server Degradation

2004-06-25 Thread alaslavic




Our Samba print server seems to slowly degrade, and get more and more
errors over time, until it starts recieving tdb fetch failed messages,
fatal errors, and getting INTERNAL PANIC's and dumping core etc

I believe this to be related to .tdb corruption, but the tdbbackup utility
does not see any problem with the TDB's.  Eventually, certain printers will
go offline (especially with win98 clients) and clients will not be able
to see them.  I can restore the individual printer, by deleting the tdb
file associated with it, and restarting samba.  This seems to recreate the
.tdb files.

Is there a problem with deleting the printer specific tdb's on a nightly
basis?  What about recreating the print server, and saving off the good,
fresh tdb's and replacing them every night?

I'm working on upgrading to 3.0.4, so hopefully that will help as well.


Samba 3.0.2a on Suse SLES 8

Here are some of the messages:

[2004/06/23 07:35:00, 0, effective(11272, 1), real(11272, 0)]
smbd/connection.c:register_message_flags(220)
  register_message_flags: tdb_fetch failed
[2004/06/23 07:36:35, 0, effective(0, 0), real(0, 0)]
smbd/service.c:make_connection(857)
  y135 (10.7.0.143) couldn't find service media_laser,winspool,ne00:
[2004/06/23 07:36:36, 0, effective(0, 0), real(0, 0)]
smbd/service.c:make_connection(857)
  y135 (10.7.0.143) couldn't find service media_laser,winspool,ne00:
[2004/06/23 07:38:55, 0, effective(0, 0), real(0, 0)]
lib/util_sock.c:get_peer_addr(952)
  getpeername failed. Error was Transport endpoint is not connected
[2004/06/23 07:38:55, 0, effective(0, 0), real(0, 0)]
lib/util_sock.c:read_socket_data(342)
  read_socket_data: recv failure for 4. Error = Connection reset by peer
[2004/06/23 07:38:58, 1, effective(10472, 1), real(10472, 0)]
smbd/service.c:make_connection_snum(705)
  ===
[2004/06/23 07:39:29, 0, effective(11436, 1), real(11436, 0)]
lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 25681 (3.0.2a)
  Please read the appendix Bugs of the Samba HOWTO collection
[2004/06/23 07:39:29, 0, effective(11436, 1), real(11436, 0)]
lib/fault.c:fault_report(39)
  ===
[2004/06/23 07:39:29, 0, effective(11436, 1), real(11436, 0)]
lib/util.c:smb_panic(1400)
  PANIC: internal error
[2004/06/23 07:39:29, 0, effective(11436, 1), real(11436, 0)]
lib/util.c:smb_panic(1408)
  BACKTRACE: 16 stack frames:
   #0 /usr/local/samba/sbin/smbd(smb_panic+0x198) [0x1018f878]
   #1 /usr/local/samba/sbin/smbd [0x1017b0dc]
   #2 /usr/local/samba/sbin/smbd [0x1017b14c]
   #3 [0xe4d8]
   #4 /usr/local/samba/sbin/smbd [0x101b0b20]
   #5 /usr/local/samba/sbin/smbd(print_queue_status+0x144) [0x101b0dec]
   #6 /usr/local/samba/sbin/smbd [0x100478a4]
   #7 /usr/local/samba/sbin/smbd(api_reply+0x36c) [0x1004eda0]
   #8 /usr/local/samba/sbin/smbd [0x100449f8]
   #9 /usr/local/samba/sbin/smbd(reply_trans+0x978) [0x10045514]
   #10 /usr/local/samba/sbin/smbd [0x10084a24]
   #11 /usr/local/samba/sbin/smbd [0x10084b10]
   #12 /usr/local/samba/sbin/smbd(process_smb+0x1e8) [0x10084ec0]
   #13 /usr/local/samba/sbin/smbd(smbd_process+0x174) [0x10085aa8]
   #14 /usr/local/samba/sbin/smbd(main+0x6b8) [0x102018b0]
   #15 /lib/libc.so.6(__libc_start_main+0x19c) [0xfc0f18c]
[2004/06/23 07:39:30, 0, effective(11436, 1), real(11436, 0)]
lib/fault.c:fault_report(36)
  ===
[2004/06/23 07:39:30, 0, effective(11436, 1), real(11436, 0)]
lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 25683 (3.0.2a)
  Please read the appendix Bugs of the Samba HOWTO collection
[2004/06/23 07:39:30, 0, effective(11436, 1), real(11436, 0)]
lib/fault.c:fault_report(39)
  ===
[2004/06/23 07:39:30, 0, effective(11436, 1), real(11436, 0)]
lib/util.c:smb_panic(1400)
  PANIC: internal error
[2004/06/23 07:39:30, 0, effective(11436, 1), real(11436, 0)]
lib/util.c:smb_panic(1408)
  BACKTRACE: 16 stack frames:
   #0 /usr/local/samba/sbin/smbd(smb_panic+0x198) [0x1018f878]
   #1 /usr/local/samba/sbin/smbd [0x1017b0dc]
   #2 /usr/local/samba/sbin/smbd [0x1017b14c]
   #3 [0xe4d8]
   #4 /usr/local/samba/sbin/smbd [0x101b0b20]
   #5 /usr/local/samba/sbin/smbd(print_queue_status+0x144) [0x101b0dec]
   #6 /usr/local/samba/sbin/smbd [0x100478a4]
   #7 /usr/local/samba/sbin/smbd(api_reply+0x36c) [0x1004eda0]
   #8 /usr/local/samba/sbin/smbd [0x100449f8]
   #9 /usr/local/samba/sbin/smbd(reply_trans+0x978) [0x10045514]
   #10 /usr/local/samba/sbin/smbd [0x10084a24]
   #11 /usr/local/samba/sbin/smbd [0x10084b10]
   #12 /usr/local/samba/sbin/smbd(process_smb+0x1e8) [0x10084ec0]
   #13 /usr/local/samba/sbin/smbd(smbd_process+0x174) [0x10085aa8]
   #14 /usr/local/samba/sbin/smbd(main+0x6b8) [0x102018b0]
   #15 /lib/libc.so.6(__libc_start_main+0x19c) [0xfc0f18c]
[2004/06/23 

Re: [Samba] Re: [fwd: [Fwd: Re: network response] ]

2004-06-25 Thread Chris Garrigues
 From:  Jeremy Allison [EMAIL PROTECTED]
 Date:  Thu, 24 Jun 2004 16:20:40 -0700

 I can't reproduce this :-(.

I sent you a large log yesterday but it was blocked by some mail server due 
to the size.  I've just dropped the email messag on my web server at:

http://www.trinsics.com/~cwg/smblogmail

Chris

-- 
Chris Garrigues http://www.DeepEddy.Com/~cwg/
Trinsic Solutions   http://www.trinsics.com
1611-B West 6th Street
Austin, TX  78703-5074  512-322-0180

If you don't apply what you've learned, you haven't 
   learned anything.




pgpqKsOz2ZSXu.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] W2K Domain w/ SMB Workgroup

2004-06-25 Thread Paul Kissick
Is this possible?

I want to configure a W2K Domain for approx 20 comps/users, e.g.
'COMPANYDOM' and also have a workgroup which is separate, e.g. 'COMPANYWORK'
, and uses a linux server w/ SAMBA 3 giving access to shared folders which
are actually shares from the Domain.

i.e., the linux box is sharing shares! The main shares reciding on the W2K
server box, which the linux box is connecting to, smbclient, which the linux
box is then sharing again for the workgroup.

Again, is this whole principle possible. The company uses a lot of client
computers which are only on the network for about a week, which are then
loaded with proprietry software developed for specific purposes, and
connecting the clients comp to the domain seems like a pointless task, and
requires removing from the domain when the system is ready to ship.

Am i worrying too much about the problem, or should I just put them on the
domain?

Thanks in advance.

Paul Kissick

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] NT Backup patch - BUG ID 1345

2004-06-25 Thread Hamish
Hello all,
Sorry for asking such a silly question here, it is not exactly on topic:
I am having problems with NT backup and samba 3.0.3pre2-SUSE. I 
installed this from rpms which was really easy, I have now discovered 
that the problem I am having with NT Backup (getting access denied 
errors against the samba server) is patchable. This is my problem. I am 
not proud.
Please could someone point me in the right direction for patching my 
installation, bearing in mind that i have installed from rpms and that i 
am a bit of an idiot.
Cheers,
Hamish
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] /etc/group issue

2004-06-25 Thread Jaouich . Cyril
Good morning...

I ran into a problem yesterday and I am wondering about the way
samba (2.2.8) reads the /etc/group file. I have a group that has 2000+ users
in it, so the group is defined with multiple entry lines for the same group:

Groupa::1000:id1:id2:...
Groupa::1000:id100:id101:...

I have noticed that a user is in the 1st line of the group
definition (ie: id1), he can get access to the share no problem, but when he
is in the 2nd line (id100) he gets dropped. We use a PDC to get
authentication and there has recently been an upgrade on it, but it seems
like it behaves the same as before. Anyhow, the PDC could be the culprit,
but has anyone ever seen this problem with samba and very big /etc/group
file?

Exemple with id1

[EMAIL PROTECTED]:~]smbclient //shomd1/md1 -Uid1
Password:
Domain=[ZQC] OS=[Unix] Server=[Samba 2.2.8a]
smb: \

Exemple with id100

[EMAIL PROTECTED]:~]smbclient //shomd1/md1 -Uid1
Password:
Domain=[ZQC] OS=[Unix] Server=[Samba 2.2.8a]
tree connect failed: NT_STATUS_WRONG_PASSWORD

What is really funny, is that the PDC does seems to authenticate the user,
because I get a different msg if the password is not the right one (it does
seem like it's a problem with the groups  PDC)

Exemple with id100 (wrong passwd)

[EMAIL PROTECTED]:~]smbclient //shomd1/md1 -Uid100
Password:
Domain=[ZQC] OS=[Unix] Server=[Samba 2.2.8a]
tree connect failed: NT_STATUS_LOGON_FAILURE

Any ideas?

Cyril Jaouich (Consultant Unix)
--
Support technique des infrastructures Unix
--
Tél: 514-840-3000x5527
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Permissions problem

2004-06-25 Thread Doug Curtis
I am having problems settings permissions on files or directories.  I am
running Samba 3.0.4 with domain logins.

Let's say that I have a share where everyone in the domain has access to it
but there are a couple of files in that share that only two of the people in
the domain need access to them.  With my old NT domain, I could right-click
on the files and change the security settings.  Whenever I try to modify the
files security settings, I get an Access is denied message.  I am logging
into the domain with admin privledges.

So does this mean I have to either:

a) create a new share just for these two people?
or
b) create a group for these two people and chgrp the files to this newly
created group?
or
c) change some settings on my server because I should be able to modify a
files security settings?

Thanks,

Doug

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Linux group permissions change not reflected by Samba 3

2004-06-25 Thread Tom Polk
Hello,
I am running Samba 3.0 as PDC.
I am very satisfied with Samba.
When changing group ownership via Linux 
command line of any file, those changes
are not reflected by Samba, until smbd 
is restarted.
I have find, that probably group_mapping.tdb
is a place where Samba have cached those 
permissions mapping to Linux. This file is 
refreshed only when smbd is started.

But I need to control user rights via Linux
commands and need to have these rights
accepted when users are accessing via
Samba share.

Unfortunatelly I cannot restart Samba each time I change
permissions of some file, because this causes 
MS Access application crash, when have opened
files from Samba shares.

Is there any regular way how to tell smbd, that 
group permissions was changed?
I try signals, but was unsuccessful.
Maybe I am wrong in my smb.conf...?
(is attached to this post)

Thank you for any response or idea what to try...

Best regards,
Tomas Polak

-- 
Tato sprava bola prehladana na vyskyt virusov a nebezpecneho obsahu antivirovym 
systemom na serveri spolocnosti Jaga Group s.r.o. a zda sa byt cista. Info: [EMAIL 
PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] I can't compile samba 3.0.4 with LDAP

2004-06-25 Thread Piotr Brudny
I have downloaded Samba 3.0.4 (tar.gz). I tryed to compile samba to work 
with OpenLDAP 2.1.30

I wrote:
./configure --with-ldapsam
and
make
Then when i issue the make file i get...
Using FLAGS = -O -I./popt -Iinclude 
-I/home/rootk/samba-3.0.4/source/include 
-I/home/rootk/samba-3.0.4/source/ubiqx 
-I/home/rootk/samba-3.0.4/source/smbwrapper -I. -D_LARGEFILE64_SOURCE 
-D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE -I/home/rootk/samba-3.0.4/source
LIBS = -lcrypt -lresolv -lnsl -ldl
LDSHFLAGS = -shared
LDFLAGS =
Compiling dynconfig.c
Compiling smbd/vfs.c
Compiling passdb/pdb_interface.c
Compiling passdb/pdb_ldap.c
passdb/pdb_ldap.c: In function `ldapsam_delete_entry':
passdb/pdb_ldap.c:276: warning: assignment makes pointer from integer 
without a cast
passdb/pdb_ldap.c: In function `ldapsam_update_sam_account':
passdb/pdb_ldap.c:1480: warning: assignment makes pointer from integer 
without a cast
passdb/pdb_ldap.c: In function `ldapsam_add_sam_account':
passdb/pdb_ldap.c:1627: warning: assignment makes pointer from integer 
without a cast
passdb/pdb_ldap.c:1675: warning: assignment makes pointer from integer 
without a cast
passdb/pdb_ldap.c: In function `ldapsam_add_group_mapping_entry':
passdb/pdb_ldap.c:2078: warning: assignment makes pointer from integer 
without a cast
passdb/pdb_ldap.c: In function `ldapsam_update_group_mapping_entry':
passdb/pdb_ldap.c:2163: warning: assignment makes pointer from integer 
without a cast
passdb/pdb_ldap.c: In function `ldapsam_modify_aliasmem':
passdb/pdb_ldap.c:2390: warning: assignment makes pointer from integer 
without a cast
passdb/pdb_ldap.c: In function `pdb_init_ldapsam_common':
passdb/pdb_ldap.c:2651: error: incompatible types in assignment
passdb/pdb_ldap.c: In function `pdb_init_ldapsam':
passdb/pdb_ldap.c:2737: error: incompatible types in assignment
make: *** [passdb/pdb_ldap.o] Error 1

Any sugestion ? Samba 3.0.4 dont work with Opan LDAP 2.1.30?/
Thanks for all information.
Piotr Brudny
[EMAIL PROTECTED]


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Compilation with Kerberos problem

2004-06-25 Thread Daniel Ramaley
I'm trying to compile Samba 3.0.4 with Active Directory support on 
OpenBSD 3.5, using the native Kerberos libraries (which happens to be 
Heimdal 0.6). Unfortunately, ./configure isn't working right. If anyone 
can help me figure out what the problem is, i would appreciate it.

First a bit of info on OpenBSD's Kerberos path layout, in case it 
matters:
/usr/libexec   - daemons such as: kadmind, kdc, kpasswdd
/usr/sbin  - admin programs such as: kadmin, kstash, ktutil
/usr/bin   - user programs such as: kauth, kinit, krb5-config,
kdestroy, klist
/usr/lib   - libraries
/etc/kerberosV - configuration file: krb5.conf
/usr/include/kerberosV - include files

Here's the configure command i'm using:

# ./configure --prefix=/usr/local/samba \
  --localstatedir=/var \
  --with-configdir=/etc/samba \
  --with-lockdir=/var/spool/samba \
  --with-piddir=/var/run \
  --with-logfilebase=/var/log \
  --with-privatedir=/etc/samba \
  --with-ads \
  --with-winbind \
  --with-krb5 \
  --with-ssl \
  --with-sslinc=/usr/include/ssl \
  --with-ssllib=/usr/lib \
   configure.out 2 configure.err


After it fails, configure.err contains this:


configure: WARNING: net/if.h: present but cannot be compiled
configure: WARNING: net/if.h: check for missing prerequisite headers?
configure: WARNING: net/if.h: proceeding with the preprocessor's result
configure: WARNING: rpcsvc/yp_prot.h: present but cannot be compiled
configure: WARNING: rpcsvc/yp_prot.h: check for missing prerequisite 
headers?
configure: WARNING: rpcsvc/yp_prot.h: proceeding with the preprocessor's 
result
configure: WARNING: sys/mount.h: present but cannot be compiled
configure: WARNING: sys/mount.h: check for missing prerequisite headers?
configure: WARNING: sys/mount.h: proceeding with the preprocessor's 
result
configure: WARNING: netinet/ip.h: present but cannot be compiled
configure: WARNING: netinet/ip.h: check for missing prerequisite 
headers?
configure: WARNING: netinet/ip.h: proceeding with the preprocessor's 
result
configure: error: libkrb5 is needed for Active Directory support


I don't understand why libkrb5 isn't found, since it is in /usr/lib and 
ldconfig knows where it is:
$ ls -l /usr/lib/libkrb5.*
-r--r--r--  5 root  bin  648812 Mar 29 13:51 /usr/lib/libkrb5.a
-r--r--r--  4 root  bin  457791 Mar 29 13:51 /usr/lib/libkrb5.so.13.0
$ ldconfig -r | grep krb5
12:-lkrb5.13.0 = /usr/lib/libkrb5.so.13.0


I won't bog the list down with the entirety of configure.out, but here 
are the last few lines of the file:


checking for Active Directory and krb5 support... yes
checking for krb5-config... /usr/bin/krb5-config
checking for working krb5-config... yes
checking krb5.h usability... yes
checking krb5.h presence... yes
checking for krb5.h... yes
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi/gssapi_generic.h usability... no
checking gssapi/gssapi_generic.h presence... no
checking for gssapi/gssapi_generic.h... no
checking gssapi/gssapi.h usability... no
checking gssapi/gssapi.h presence... no
checking for gssapi/gssapi.h... no
checking com_err.h usability... yes
checking com_err.h presence... yes
checking for com_err.h... yes
checking for _et_list in -lcom_err... no
checking for krb5_encrypt_data in -lk5crypto... no
checking for des_set_key in -lcrypto... no
checking for copy_Authenticator in -lasn1... no
checking for roken_getaddrinfo_hostspec in -lroken... no
checking for gss_display_status in -lgssapi... no
checking for krb5_mk_req_extended in -lkrb5... no
checking for gss_display_status in -lgssapi_krb5... no
checking for krb5_set_real_time... no
checking for krb5_set_default_in_tkt_etypes... no
checking for krb5_set_default_tgs_ktypes... no
checking for krb5_principal2salt... no
checking for krb5_use_enctype... no
checking for krb5_string_to_key... no
checking for krb5_get_pw_salt... no
checking for krb5_string_to_key_salt... no
checking for krb5_auth_con_setkey... no
checking for krb5_auth_con_setuseruserkey... no
checking for krb5_locate_kdc... no
checking for krb5_get_permitted_enctypes... no
checking for krb5_get_default_in_tkt_etypes... no
checking for krb5_free_ktypes... no
checking for krb5_free_data_contents... no
checking for krb5_principal_get_comp_string... no
checking for addrtype in krb5_address... no
checking for addr_type in krb5_address... yes
checking for enc_part2 in krb5_ticket... no
checking for keyvalue in krb5_keyblock... yes
checking for ENCTYPE_ARCFOUR_HMAC_MD5... yes
checking for KEYTYPE_ARCFOUR_56... no
checking for AP_OPTS_USE_SUBKEY... yes
checking for the krb5_princ_component macro... no
checking for key in krb5_keytab_entry... no
checking for keyblock in krb5_keytab_entry... yes

-- 

Re: [Samba] Re: [fwd: [Fwd: Re: network response] ]

2004-06-25 Thread Chris Garrigues
 From:  Chris Garrigues [EMAIL PROTECTED]
 Date:  Fri, 25 Jun 2004 07:59:10 -0500

 I sent you a large log yesterday but it was blocked by some mail server due 
 to the size.  I've just dropped the email messag on my web server at:
 
   http://www.trinsics.com/~cwg/smblogmail

I just had exactly the same thing happen again.  Since it was identical, I'm 
not going to post the log.  However, this time I ran smbstatus while it was 
hung and noticed two locks on the temporary file:

Locked files:
PidDenyMode   Access  R/WOplock   Name
--
2106   DENY_NONE  0x60080 RDONLY NONE 
/net/jupiter.trinsics.com/export/home/cwg/EC94B140   Fri Jun 25 09:19:33 2004
2106   DENY_ALL   0x7019f RDWR   NONE 
/net/jupiter.trinsics.com/export/home/cwg/EC94B140   Fri Jun 25 09:19:33 2004
2106   DENY_NONE  0x30089 RDONLY NONE 
/net/jupiter.trinsics.com/export/home/cwg/bbu projection.xls   Fri Jun 25 09:19:33 2004

In fact, I see that there are still two locks even after excel let me work 
again.

I hope this is all useful,

Chris

-- 
Chris Garrigues http://www.DeepEddy.Com/~cwg/
Trinsic Solutions   http://www.trinsics.com
1611-B West 6th Street
Austin, TX  78703-5074  512-322-0180

If you don't apply what you've learned, you haven't 
   learned anything.




pgpiPXtyh2PsO.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Inconsistent Connection

2004-06-25 Thread matthew . chow
Hi!
I am just curious if someone has experience this before.  I have a Linux acting
as a samba server and then have Windows 2000 and Windows XP workstations.  When
users log in, everyone can see other computers.  However, when they try to
connect to other machines, sometimes they may connect in, sometimes they will
get error message The system cannot find message text for message number 0x%1
in the message file for %2, othertime they will get error message An internal
windows 2000 error occured.  Like, at each moment, they may see different
situation.  Thus, will there be have a chance that someone will have a solution
for the above problem?
Thank you.

Regards,

Matthew.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] target link?

2004-06-25 Thread Manuele
Hi, I'm a newbie, and I've just installed Samba on my Debian Linux
Server.
All works fine, but I see (from Windows 2000 workstations) a
target.lnk folder (or link) before accessing real shares. Can anyone
explain what is this folder and if it is possible not to show it?

thanks!
Stefano
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Test please ignore!

2004-06-25 Thread Gmes Gza
Test please ignore!
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba config

2004-06-25 Thread chris
Thanks for the reply Keith but unforutnately I'm still not winning. I've
tried using security = share but was plagued with password requests
whether I created guest user with null passwords or stuck with the
default nobody user. I also tried security = user again without any joy
I went back to security domain. I can now see the printer but it shows
as Opening on the XP machine's printers and faxes dialog and if I
succeed in opening it I get the Access denied, can not connect message.

I have trawled the web and found a few references to this but few if any
suggestions. Also I have managed to create a TCPIP port in windows and
print to the printer. Also on the unix machine I can issue 
smbclient //samba/beyond

I get prompted for a password and just press return. I am then told that
anonymous logon is successful, however when I try to print a local file
I get the following: Error unable to open local file. 

As an aside I have been trying to print from Win98 via Samba without
success but I notice in the smbd log the following:

Unable to connect to CUPS server: connection refused

This may explain the problems but I have never installed CUPS on the
system so where is Samba picking this default setting up from?

For info my latest attempt at a config file is attached - the file share
is working perfectly but the printer share while visible in doing
nothing!! Can 

[Global]

netbios name = samba
workgroup = MMO
wins server = x.x.x.x
os level = 33
security = domain
encrypt passwords = yes
guest account = smbguest
guest ok = yes
  nt acl support = no
null passwords = yes
load printers = yes
[beyond]
path = /var/spool/lpd/beyond
printing = BSD
printable = yes
print command = /usr/bin/lpr -P%p -r -s%
use client driver = yes
guest ok = yes

[temp]
path = /usr/local/samba/tmp 
browseable = yes
read only = no
comment = Test share
guest ok = yes   

I apologies for being thick but I'm new to FreeBSD and Samba and my Unix
skills are a bit rusty - it's about three years since I last worked on
AIX. If anyone has a set by set Janet and John guide I'd be most
grateful.


Regards,
 
Chris
 
Christopher Moss
Murray McIntosh O'Brien
Wellesley House
204 London Road
Waterlooville
PO7 7AN
 
023 9223 1006

-Original Message-
From: Keith Edmunds [mailto:[EMAIL PROTECTED] 
Sent: 24 June 2004 17:11
To: chris
Subject: Re: [Samba] Samba config

Hi Chris

Saw your note on the Samba list. Some quick thoughts (sorry if you've
already checked these things):

 As far as security is
 concerned I am happy for guest/anonymous logon as the server will only
 be used for printing but I have set security to domain and added samba
 to the domain.

If you're happy with guest access then configure it for guest access -
much
easier than messing with domains.

 [global]
   netbios name = samba
   workgroup = MMO
   wins server = x.x.x.x#changed
   os level = 33
   security = domain
   encrypt passwords = yes
 # printcap name = /etc/printcap
   password server = * 
 
 [beyond]  # temporary printer share to test setup
   path = /var/spool/lpd

---is /var/spool/lpd writable by all?

   guest ok = yes
   printable = yes
   printing = BSD
   print command = /usr/bin/lpr -P%p -r %s

---su to your guest user and ensure that the above command works

 Can anyone suggest what I am doing wrong? Also should I use lpr or
cups
 as we don't have any postscript printers?

You can create raw queues in CUPS quite easily; CUPS is not limited to
PostScript printers.

I'd start by removing the server from the domain (keep it simple).

Good luck.

Keith

-- 
--
  Small business computer support: http://www.tiger-computing.co.uk   
   Linux consultancy: http://www.TheLinuxConsultancy.co.uk
--

---
Disclaimer

Privileged or confidential information may be contained in this message. 
If you are not the addressee of this message please notify the sender
 by return and delete it, and you may not use, copy, disclose or rely
 on the information contained in it. Internet e-mail may be susceptible 
to data corruption, interception and unauthorised amendment for which 
Murray McIntosh O'Brien does not accept liability. Likewise whilst we 
have taken reasonable precautions to ensure that this e-mail and any 
attachments have been swept for viruses, Murray McIntosh O'Brien 
does not accept liability for any losses caused as a result of viruses. 
Statements in this message that do not relate to the business of Murray 
McIntosh O'Brien are neither given nor endorsed by it or the Directors 
of Murray 

[Samba] small hickup in bugzilla server

2004-06-25 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Notice to all bugzilla.samba.org users:
There was a small hickup in the bugzilla server that resulted
in some data loss.  If you added information to an existing
bug report or filed a new report between 8am (GMT-8) on June
24 and 7am (GMT-8), June 25, please check to see if the information
needs to be resubmitted.
Thanks.  I apologize for the inconvenience.

cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
...a hundred billion castaways looking for a home. --- Sting
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA3EKgIR7qMdg1EfYRAkvaAKCEHhAMjl1cyR756zOv/xT97S4+UgCeMWGP
ei09Mx3BmnhidivnCZ89WZ8=
=iHex
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Joining NT4 workstations to a Samba 3 Domain

2004-06-25 Thread Chris Hobbs
Chris Hobbs wrote:
Should I submit this to bugzilla? I'd hate to do that until I've 
exhausted my options on the mailing list.
Well this turned out to be an empty threat -- turns out the general
public can't submit bugs at bugzilla.samba.org :)
I know (from private e-mail and IRC) that I'm not the only one with this
issue. Is there anyone on the list that has NT4 clients working with a
Samba3+LDAP domain?
Thanks in advance for your help,
Chris Hobbs wrote:
Linux: Fedora Core 2
Samba: 3.0.3
OpenLDAP: 2.1.29
I've noticed a couple of other messages in this month's archives that 
suggest they're having the same problem as I, but so far no 
resolution has been reported.

I've got a new Samba domain up and running with LDAP that allows me 
to join Win2K and XP clients, but not NT4 workstations. I've added 
the machine account with the command: smbldap-useradd -w MISTEST02

An ldapsearch confirms that the machine account has been created. On 
attmpting to join the domai nfrom the NT4 client I receive the 
following error message:

The machine account for this computer either does not exist or is 
inaccessible.

Amazingly, the machine account has now disappeared from the LDAP 
directory, as confirmed by running  ldapsearch.

Trying to add the machine without first running smbldap-useradd 
(which works fine for the 2K and XP clients) gives me the same error.

I'll be happy to provide confs, debug logs and tcpdumps if those will 
be helpful - simply let me know what needs to be captured. Thanks in 
advance for your help.



--
Chris Hobbs   Silver Valley Unified School District
Head geek:  Technology Services Coordinator
webmaster:   http://www.silvervalley.k12.ca.us/~chobbs/
postmaster:   [EMAIL PROTECTED]
pgp:  http://www.silvervalley.k12.ca.us/~chobbs/key.asc
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba 3.0.4 : cannot join domain with w2k clients.

2004-06-25 Thread HM
Hello all.
I'm trying since a few jours to get my w2k clients join my domain, 
managed by my samba 3.0.4 PDC, without success. I can browse the server, 
share files with it with my station, but i can't join the domain. When i 
try to, i get the following message (sorry for the poor translation) :

   The following error occurred while trying to join domain 'SLS' :
   Failed to open a session : username unknown or invalid password.
I the logs, i get the following :
[2004/06/25 17:57:42, 0] lib/util_sock.c:get_peer_addr(978)
 getpeername failed. Error was Transport endpoint is not connected
[2004/06/25 17:57:42, 3] smbd/oplock.c:init_oplocks(1226)
 open_oplock_ipc: opening loopback UDP socket.
[2004/06/25 17:57:42, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
 Linux kernel oplocks enabled
[2004/06/25 17:57:42, 3] smbd/oplock.c:init_oplocks(1257)
 open_oplock ipc: pid = 3791, global_oplock_port = 1065
[2004/06/25 17:57:42, 3] smbd/process.c:process_smb(890)
 Transaction 0 of length 72
[2004/06/25 17:57:42, 2] smbd/reply.c:reply_special(208)
 netbios connect: name1=SERVEUR name2=SLS-PHY-14
[2004/06/25 17:57:42, 2] smbd/reply.c:reply_special(215)
 netbios connect: local=serveur remote=sls-phy-14, name type = 0
[2004/06/25 17:57:42, 0] lib/util_sock.c:get_peer_addr(978)
 getpeername failed. Error was Transport endpoint is not connected
[2004/06/25 17:57:42, 0] lib/util_sock.c:write_socket_data(413)
 write_socket_data: write failure. Error = Connection reset by peer
[2004/06/25 17:57:42, 0] lib/util_sock.c:write_socket(438)
 write_socket: Error writing 4 bytes to socket 5: ERRNO = Connection 
reset by peer
[2004/06/25 17:57:42, 0] lib/util_sock.c:send_smb(630)
 Error writing 4 bytes to client. -1. (Connection reset by peer)
[2004/06/25 17:57:42, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/06/25 17:57:42, 2] smbd/server.c:exit_server(568)
 Closing connections
[2004/06/25 17:57:42, 3] smbd/connection.c:yield_connection(69)
 Yielding connection to
[2004/06/25 17:57:42, 3] smbd/server.c:exit_server(611)
 Server exit (process_smb: send_smb failed.)

Of course, the user root is correctly mapped in the username map, and 
the password is correctly set.

Any idea ?
Thanks !
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] problems in samba

2004-06-25 Thread rani ahmed
when i try to copy a folder 2MB size containing many files and folders it takes me abt 
20min long , while if i copy one whole sole 12MB pdf file it takes me 10 mostly. why?

my config file:
=
# This is the main Samba configuration file. You should read the

# smb.conf(5) manual page in order to understand the options listed

# here. Samba has a huge number of configurable options (perhaps too

# many!) most of which are not shown in this example

#

# Any line which starts with a ; (semi-colon) or a # (hash)

# is a comment and is ignored. In this example we will use a #

# for commentry and a ; for parts of the config file that you

# may wish to enable

#

# NOTE: Whenever you modify this file you should run the command testparm

# to check that you have not made any basic syntactic errors.

#

#=== Global Settings =

[global]

netbios name = Linux 

# workgroup = NT-Domain-Name or Workgroup-Name

workgroup = domain

# server string is the equivalent of the NT Description field

server string = samba server

;interfaces = 172.0.0.1 127.0.0.1

;bind interfaces only = yes

# This option is important for security. It allows you to restrict

# connections to machines which are on your local network. The

# following example restricts access to two C class networks and

# the loopback interface. For more examples of the syntax see

# the smb.conf man page

; hosts allow = 192.168.1. 192.168.2. 127.

# if you want to automatically load your printer list rather

# than setting them up individually then you'll need this

printcap name = /etc/printcap

load printers = yes

# It should not be necessary to spell out the print system type unless

# yours is non-standard. Currently supported print systems include:

# bsd, sysv, plp, lprng, aix, hpux, qnx, cups

printing = cups

# Uncomment this if you want a guest account, you must add this to /etc/passwd

# otherwise the user nobody is used

; guest account = pcguest

# this tells Samba to use a separate log file for each machine

# that connects

log file = /var/log/samba/%m.log

log level = 2

;read size = 65536

# Put a capping on the size of the log files (in Kb).

max log size = 0

syslog=3

# Security mode. Most people will want user level security. See

# security_level.txt for details.

security = user 

# Use password server option only with security = server

# The argument list may include:

# password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]

# or to auto-locate the domain controller/s

# password server = *

; password server = NT-Server-Name

; password server = www

# Password Level allows matching of _n_ characters of the password for

# all combinations of upper and lower case.

; password level = 8

; username level = 8

# You may wish to use password encryption. Please read

# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.

# Do not enable this option unless you have read those documents

encrypt passwords = yes

smb passwd file = /etc/samba/smbpasswd

# The following is needed to keep smbclient from spouting spurious errors

# when Samba is built with support for SSL.

; ssl CA certFile = /usr/share/ssl/certs/ca-bundle.crt

# The following are needed to allow password changing from Windows to

# update the Linux system password also.

# NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above.

# NOTE2: You do NOT need these to allow workstations to change only

# the encrypted SMB passwords. They allow the Unix password

# to be kept in sync with the SMB password.

unix password sync = Yes

passwd program = /usr/bin/passwd %u

passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
*passwd:*all*authentication*tokens*updated*successfully*

# You can use PAM's password change control flag for Samba. If

# enabled, then PAM will be used for password changes when requested

# by an SMB client instead of the program listed in passwd program.

# It should be possible to enable this without changing your passwd

# chat parameter for most setups.

pam password change = yes

# Unix users can map to different SMB User names

; username map = /etc/samba/smbusers

# Using the following line enables you to customise your configuration

# on a per machine basis. The %m gets replaced with the netbios name

# of the machine that is connecting

; include = /etc/samba/smb.conf.%m

# This parameter will control whether or not Samba should obey PAM's

# account and session management directives. The default behavior is

# to use PAM for clear text authentication only and to ignore any

# account or session management. Note that Samba always ignores PAM

# for authentication in the case of encrypt passwords = yes

obey pam restrictions = yes

# Most people will find that this option gives better performance.

# See speed.txt and the manual pages for details

#socket address =

socket options = TCP_NODELAY SO_KEEPALIVE IPTOS_LOWDELAY 

RE: [Samba] Problem setting ACLs on files/folders... plz help!

2004-06-25 Thread Kirk Marple
This is actually a Mac OS X Server, and we didn't build the kernel
ourselves.   It's out of the box the way Apple configures it.

The results of smbd -b | grep -i acl shows:  HAVE_NO_ACLS.

That can't be good, can it?

I don't have nt acl support = yes in my smb.conf, but that's probably not
gonna help me since HAVE_NO_ACLS is set.

Am I just pretty screwed given the Samba that comes with Mac OS X Server?

Thanks,
Kirk

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Prajjwal
Sent: Friday, June 25, 2004 4:53 AM
To: [EMAIL PROTECTED]
Subject: Re: [Samba] Problem setting ACLs on files/folders... plz help!

Hi

Did you build acl support into your kernel?

When you type smbd -b|grep -i acl, what kind of output do you get- you sure
the acl support is compiled in properly into samba?

What kind of output do you get in your samba logs when and before you get
the access denied messages?

Finally, I dont see any nt acl support = yes line in your smb.conf
file-- why dont you add it in?

Regards
Prajjwal

Kirk Marple wrote:

 I'm running Samba on a Mac OS X server, and the server is a member of 
 a Windows domain (Windows 2003).
  
 Samba is setup for security=domain permissions.
  
 I have opened up a file share to the Windows machines named AppDeployment.
 I'm able to open \\xserve\AppDeployment on a Windows server, and am able
to
 create directories and copy files in there.   (Btw, when i attempt to net
 use that directory from Windows, I'm required to enter an account 
 from the Mac server.)
  
 Even if i login as 'root' on the Mac server when accessing that file 
 share, when i try and change the permissions of a folder (i.e. add 
 ACLs for a domain user via the Windows property page), I get an error 
 dialog saying Unable to save permission changes on directory name.
Access is denied.
 when i try and apply the changes.
  
 any thoughts on what could be going wrong?  i'm pretty stuck!   
  
 am i going about this the wrong way?   basically i want to setup Samba so
i
 can have a file share on the Mac server that is exposed to the Windows 
 servers in the domain, and the Windows servers can set ACLs on the 
 files/folders using accounts in the domain.
  
 thanks for any help!
 Kirk
  
 
  
 [global]
 workgroup = ...
 password server = *
 hide files = .Trashes/Temporary Items/Desktop 
 */TheFindByContentFolder/TheVolumeSettingsFolder/.DS_Store/.AppleDouble/
 display charset = UTF-8-MAC
 print command = /usr/sbin/PrintServiceAccess printps %p %s
 lprm command = /usr/sbin/PrintServiceAccess remove %p %j
 security = domain
 guest account = unknown
 encrypt passwords = yes
 printing = BSD
 allow trusted domains = yes
 preferred master = no
 lppause command = /usr/sbin/PrintServiceAccess hold %p %j
 netbios name = xserve
 wins support = no
 max smbd processes = 0
 printcap =
 server string = Mac OS X
 lpresume command = /usr/sbin/PrintServiceAccess release %p %j
 client ntlmv2 auth = yes
 domain logons = no
 lpq command = /usr/sbin/PrintServiceAccess jobs %p
 passdb backend = opendirectorysam guest
 dos charset = CP437
 unix charset = UTF-8-MAC
 socket options = SO_RCVBUF=64240
 auth methods = guest ntdomain opendirectory
 local master = no
 use spnego = yes
 map to guest = Bad User
 domain master = no
 printer admin = @admin, @staff
 log level = 3
  
 [AppDeployment]
 oplocks = 0
 map archive = no
 path = /Volumes/.../AppDeployment
 read only = no
 inherit permissions = 1
 strict locking = 1
 comment = macosx
 create mask = 0666
 guest ok = 1
 public = yes
 writeable = yes
 directory mask = 0777
  

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba 3.0.4 : cannot join domain with w2k clients.

2004-06-25 Thread HM
Sorry : i forgot my smb.conf :
Here it is :
[global]
   netbios name = serveur
   workgroup = sls
   passdb backend = smbpasswd:/etc/samba/private/smbpasswd
   os level = 255
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   security = user
   preferred master = yes
   domain logons = yes
   domain master = yes
   local master = yes
   logon path = \\%L\%U\.profile
   logon home = \\%L\%U
   logon script = %G.cmd
   logon drive = u:
   encrypt passwords = yes
   username map = /etc/samba/smbusers
   add machine script = /usr/sbin/useradd -d /dev/null -s 
/bin/false -c compte machine - client w2k -g machines %u

   printing = cups
   load printers = yes
   printcap name = cups
   #wins support = yes
   #name resolve order = host bcast
   log level = 3
   #guest account = nobody
[netlogon]
   path = /etc/samba/netlogon
   read only = yes
   write list = @wheel
   guest ok = no
   browseable = no
[profiles]
   path = \\%L\%U/.profile
   create mode = 0600
   directory mode = 0700
   read only = no
   profile acls = no
   browseable = no


HM a écrit :
Hello all.
I'm trying since a few jours to get my w2k clients join my domain, 
managed by my samba 3.0.4 PDC, without success. I can browse the 
server, share files with it with my station, but i can't join the 
domain. When i try to, i get the following message (sorry for the poor 
translation) :

   The following error occurred while trying to join domain 'SLS' :
   Failed to open a session : username unknown or invalid password.
I the logs, i get the following :
[2004/06/25 17:57:42, 0] lib/util_sock.c:get_peer_addr(978)
 getpeername failed. Error was Transport endpoint is not connected
[2004/06/25 17:57:42, 3] smbd/oplock.c:init_oplocks(1226)
 open_oplock_ipc: opening loopback UDP socket.
[2004/06/25 17:57:42, 3] 
smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
 Linux kernel oplocks enabled
[2004/06/25 17:57:42, 3] smbd/oplock.c:init_oplocks(1257)
 open_oplock ipc: pid = 3791, global_oplock_port = 1065
[2004/06/25 17:57:42, 3] smbd/process.c:process_smb(890)
 Transaction 0 of length 72
[2004/06/25 17:57:42, 2] smbd/reply.c:reply_special(208)
 netbios connect: name1=SERVEUR name2=SLS-PHY-14
[2004/06/25 17:57:42, 2] smbd/reply.c:reply_special(215)
 netbios connect: local=serveur remote=sls-phy-14, name type = 0
[2004/06/25 17:57:42, 0] lib/util_sock.c:get_peer_addr(978)
 getpeername failed. Error was Transport endpoint is not connected
[2004/06/25 17:57:42, 0] lib/util_sock.c:write_socket_data(413)
 write_socket_data: write failure. Error = Connection reset by peer
[2004/06/25 17:57:42, 0] lib/util_sock.c:write_socket(438)
 write_socket: Error writing 4 bytes to socket 5: ERRNO = Connection 
reset by peer
[2004/06/25 17:57:42, 0] lib/util_sock.c:send_smb(630)
 Error writing 4 bytes to client. -1. (Connection reset by peer)
[2004/06/25 17:57:42, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/06/25 17:57:42, 2] smbd/server.c:exit_server(568)
 Closing connections
[2004/06/25 17:57:42, 3] smbd/connection.c:yield_connection(69)
 Yielding connection to
[2004/06/25 17:57:42, 3] smbd/server.c:exit_server(611)
 Server exit (process_smb: send_smb failed.)

Of course, the user root is correctly mapped in the username map, and 
the password is correctly set.

Any idea ?
Thanks !

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] XP 2.2.8a issues

2004-06-25 Thread Tim Jordan
Use tail -f to watch your logs (you may have to tweak your log level in
smb.conf to at least 3).  Attempt your mapping connections and see if
you can define the error.  

TJ
On Fri, 2004-06-25 at 08:27, Tom Skeren wrote:

 I have some 30 XP boxes in one offices joined to a w2k domain.  The w2k 
 server has no problem mapping drives on the samba server, however, the 
 XP workstations refuse.  Put in user name and password in the box after 
 mapping, and it just pops back up like you've entered a wrong pass/user 
 name.  I have changed signorseal to 0 in registry to no avail.  Of 
 course, when the server was NT4, I had no problem.  And if the XP boxes 
 are in workgroup mode rather than domain mode there's also no problem 
 maping the samba drives. 
 
 Any advise would be appreciated, as I'm about to roof test the worthless 
 w2k server.
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ACL + XFS + SAMBA 3.0.4 + OpenLdap + PDC - permissions problem

2004-06-25 Thread Xavier
Just Ignore this thread please,
I was compiling samba without having installed before the ACL headers 
devel. files.
Now it works.

Xavier
Xavier wrote:
hi,
I've recently set up a SAMBA/PDC domain controler with LDAP.
My homes shares are in a XFS quota/acl enabled filesystem
setfacl/getfacl works onto the linux Mandrake 9.2 box well, I mean user with
more permissions set into ACL can write to the directory concerned.
My problem is that ACL file permissions seems to not be readed by Samba when
accessing files with a w2k box.
here is more details :
Share : /home/test
getfacl : 

#file: test
#owner: root
#group: test
user::rwx
user:test:rwx
group::r-x
mask::rwx
other::---
smb.conf :
[global]
(...)
nt acl support = yes 
(...)

[test]
 path=/home/test
 force group = test
 inherit permissions = yes
 inherit acls = yes
 hide files = /.*
 browseable = no  

is this correct for acl to works ?
someone in a thread may have had into smb.conf : writeable = yes , but with this
option everyone seems can write to the share (acl bypassed) !
any samba/acl guru man with an idea here ?

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Compilation with Kerberos problem

2004-06-25 Thread Tim Jordan
On Fri, 2004-06-25 at 06:07, Daniel Ramaley wrote:

 I'm trying to compile Samba 3.0.4 with Active Directory support on 
 OpenBSD 3.5, using the native Kerberos libraries (which happens to be 
 Heimdal 0.6). Unfortunately, ./configure isn't working right. If anyone 
 can help me figure out what the problem is, i would appreciate it.
 
 First a bit of info on OpenBSD's Kerberos path layout, in case it 
 matters:
 /usr/libexec   - daemons such as: kadmind, kdc, kpasswdd
 /usr/sbin  - admin programs such as: kadmin, kstash, ktutil
 /usr/bin   - user programs such as: kauth, kinit, krb5-config,
 kdestroy, klist
 /usr/lib   - libraries
 /etc/kerberosV - configuration file: krb5.conf
 /usr/include/kerberosV - include files
 
 Here's the configure command i'm using:
 
 # ./configure --prefix=/usr/local/samba \
   --localstatedir=/var \
   --with-configdir=/etc/samba \
   --with-lockdir=/var/spool/samba \
   --with-piddir=/var/run \
   --with-logfilebase=/var/log \
   --with-privatedir=/etc/samba \
   --with-ads \
   --with-winbind \
   --with-krb5 \


--with-krb5=/usr/lib \


   --with-ssl \
   --with-sslinc=/usr/include/ssl \
   --with-ssllib=/usr/lib \
configure.out 2 configure.err
 
 
 After it fails, configure.err contains this:
 
 
 configure: WARNING: net/if.h: present but cannot be compiled
 configure: WARNING: net/if.h: check for missing prerequisite headers?
 configure: WARNING: net/if.h: proceeding with the preprocessor's result
 configure: WARNING: rpcsvc/yp_prot.h: present but cannot be compiled
 configure: WARNING: rpcsvc/yp_prot.h: check for missing prerequisite 
 headers?
 configure: WARNING: rpcsvc/yp_prot.h: proceeding with the preprocessor's 
 result
 configure: WARNING: sys/mount.h: present but cannot be compiled
 configure: WARNING: sys/mount.h: check for missing prerequisite headers?
 configure: WARNING: sys/mount.h: proceeding with the preprocessor's 
 result
 configure: WARNING: netinet/ip.h: present but cannot be compiled
 configure: WARNING: netinet/ip.h: check for missing prerequisite 
 headers?
 configure: WARNING: netinet/ip.h: proceeding with the preprocessor's 
 result
 configure: error: libkrb5 is needed for Active Directory support
 
 
 I don't understand why libkrb5 isn't found, since it is in /usr/lib and 
 ldconfig knows where it is:
 $ ls -l /usr/lib/libkrb5.*
 -r--r--r--  5 root  bin  648812 Mar 29 13:51 /usr/lib/libkrb5.a
 -r--r--r--  4 root  bin  457791 Mar 29 13:51 /usr/lib/libkrb5.so.13.0
 $ ldconfig -r | grep krb5
 12:-lkrb5.13.0 = /usr/lib/libkrb5.so.13.0
 
 
 I won't bog the list down with the entirety of configure.out, but here 
 are the last few lines of the file:
 
 
 checking for Active Directory and krb5 support... yes
 checking for krb5-config... /usr/bin/krb5-config
 checking for working krb5-config... yes
 checking krb5.h usability... yes
 checking krb5.h presence... yes
 checking for krb5.h... yes
 checking gssapi.h usability... yes
 checking gssapi.h presence... yes
 checking for gssapi.h... yes
 checking gssapi/gssapi_generic.h usability... no
 checking gssapi/gssapi_generic.h presence... no
 checking for gssapi/gssapi_generic.h... no
 checking gssapi/gssapi.h usability... no
 checking gssapi/gssapi.h presence... no
 checking for gssapi/gssapi.h... no
 checking com_err.h usability... yes
 checking com_err.h presence... yes
 checking for com_err.h... yes
 checking for _et_list in -lcom_err... no
 checking for krb5_encrypt_data in -lk5crypto... no
 checking for des_set_key in -lcrypto... no
 checking for copy_Authenticator in -lasn1... no
 checking for roken_getaddrinfo_hostspec in -lroken... no
 checking for gss_display_status in -lgssapi... no
 checking for krb5_mk_req_extended in -lkrb5... no
 checking for gss_display_status in -lgssapi_krb5... no
 checking for krb5_set_real_time... no
 checking for krb5_set_default_in_tkt_etypes... no
 checking for krb5_set_default_tgs_ktypes... no
 checking for krb5_principal2salt... no
 checking for krb5_use_enctype... no
 checking for krb5_string_to_key... no
 checking for krb5_get_pw_salt... no
 checking for krb5_string_to_key_salt... no
 checking for krb5_auth_con_setkey... no
 checking for krb5_auth_con_setuseruserkey... no
 checking for krb5_locate_kdc... no
 checking for krb5_get_permitted_enctypes... no
 checking for krb5_get_default_in_tkt_etypes... no
 checking for krb5_free_ktypes... no
 checking for krb5_free_data_contents... no
 checking for krb5_principal_get_comp_string... no
 checking for addrtype in krb5_address... no
 checking for addr_type in krb5_address... yes
 checking for enc_part2 in krb5_ticket... no
 checking for keyvalue in krb5_keyblock... yes
 checking for ENCTYPE_ARCFOUR_HMAC_MD5... yes
 checking for 

Re: [Samba] I can't compile samba 3.0.4 with LDAP

2004-06-25 Thread Tim Jordan
Is your samba scheme defined in slapd.conf?

On Fri, 2004-06-25 at 06:06, Piotr Brudny wrote:

 I have downloaded Samba 3.0.4 (tar.gz). I tryed to compile samba to work 
 with OpenLDAP 2.1.30
 
 I wrote:
 ./configure --with-ldapsam
 and
 
 make
 
 Then when i issue the make file i get...
 
  
 Using FLAGS = -O -I./popt -Iinclude 
 -I/home/rootk/samba-3.0.4/source/include 
 -I/home/rootk/samba-3.0.4/source/ubiqx 
 -I/home/rootk/samba-3.0.4/source/smbwrapper -I. -D_LARGEFILE64_SOURCE 
 -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE -I/home/rootk/samba-3.0.4/source
 LIBS = -lcrypt -lresolv -lnsl -ldl
 LDSHFLAGS = -shared
 LDFLAGS =
 Compiling dynconfig.c
 Compiling smbd/vfs.c
 Compiling passdb/pdb_interface.c
 Compiling passdb/pdb_ldap.c
 passdb/pdb_ldap.c: In function `ldapsam_delete_entry':
 passdb/pdb_ldap.c:276: warning: assignment makes pointer from integer 
 without a cast
 passdb/pdb_ldap.c: In function `ldapsam_update_sam_account':
 passdb/pdb_ldap.c:1480: warning: assignment makes pointer from integer 
 without a cast
 passdb/pdb_ldap.c: In function `ldapsam_add_sam_account':
 passdb/pdb_ldap.c:1627: warning: assignment makes pointer from integer 
 without a cast
 passdb/pdb_ldap.c:1675: warning: assignment makes pointer from integer 
 without a cast
 passdb/pdb_ldap.c: In function `ldapsam_add_group_mapping_entry':
 passdb/pdb_ldap.c:2078: warning: assignment makes pointer from integer 
 without a cast
 passdb/pdb_ldap.c: In function `ldapsam_update_group_mapping_entry':
 passdb/pdb_ldap.c:2163: warning: assignment makes pointer from integer 
 without a cast
 passdb/pdb_ldap.c: In function `ldapsam_modify_aliasmem':
 passdb/pdb_ldap.c:2390: warning: assignment makes pointer from integer 
 without a cast
 passdb/pdb_ldap.c: In function `pdb_init_ldapsam_common':
 passdb/pdb_ldap.c:2651: error: incompatible types in assignment
 passdb/pdb_ldap.c: In function `pdb_init_ldapsam':
 passdb/pdb_ldap.c:2737: error: incompatible types in assignment
 make: *** [passdb/pdb_ldap.o] Error 1
 
 Any sugestion ? Samba 3.0.4 dont work with Opan LDAP 2.1.30?/
 
 Thanks for all information.
 
 Piotr Brudny
 [EMAIL PROTECTED]
 
 
 
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] XP 2.2.8a issues

2004-06-25 Thread Tom Skeren
Nope, the problem arose when I upgraded the NT 4 domain controller to 
w2k.  Further, I have 1 XP box that can --usually-- map a drive on the 
samba server.  Up untill last week my XP work station could map samba 
drives.  After a recent reboot, no dice.   I have to doubt that machine 
accounts on the stand alone samba server is the problem.  In workgroup 
mode the XP machines have no problem mapping the samba share.
Jason Balicki wrote:

Tom Skeren  wrote:
 

I have some 30 XP boxes in one offices joined to a w2k domain.  The
w2k server has no problem mapping drives on the samba server,
however, the XP workstations refuse.  Put in user name and password
in the box after mapping, and it just pops back up like you've
entered a wrong pass/user name.  I have changed signorseal to 0 in
registry to no avail.  Of course, when the server was NT4, I had no
problem.  And if the XP boxes are in workgroup mode rather than
domain mode there's also no problem maping the samba drives.
Any advise would be appreciated, as I'm about to roof test the
worthless w2k server.
   

Just a quickie:  did you add machine accounts for the windows
boxes on the samba server?
--J(K)
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Windows 2003 problem

2004-06-25 Thread Curt Shaffer
I am fighting with this box to get it to mount a drive to a windows 2003
server domain controller. The Linux box is fedora core 1 with all of the
newest updates, samba version 3.0.3, which I downgraded from version 
3.0.4
in efforts to help and still nothing. I get 4374: session setup failed:
ERRDOS - ERRnoaccess (Access denied). I can telnet to all of the 
necessary
ports and I quadruple checked to make sure the UN and pass were 
correct. The
weirdest thing is if I try to mount like: smbmount //server/share
/mnt/windows -o username=user..it prompts me for the password which I 
enter
ever so carefully and I get the error. However if I issue mount -t 
smbfs -o
username=user,password=password //server/share /mnt/windows it mounts. 
I can connect manually with the client and browse without an issue. But 
mounting does not work. Any help would be appreciated.

Thanks
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba 3.0.4 : cannot join domain with w2k clients.

2004-06-25 Thread Tomás Polák
Hi,
I compared your smb.conf with mine.
I am running Samba 3 PDC with W2K clients very well.

My Samba version is 3.0.2a-1 (using Debian Sarge distribution)

After try to join domain, are there created new user and/or machine accounts
in /etc/smbpasswd?
Do you already have appropriate user account in /etc/passwd ?
When I am joining new computer to domain, I first creating user account on
Linux on both
/etc/passwd and /etc/samba/smbpasswd places (from console). Next log as
Administrator to W2K and join
domain with Samba root username and root's password from
/etc/samba/passwd. This
works well for me.

From my remote view is seems, that you may try to add add machine script
directive
and check writability of your Samba system shares (netlogon, homes).

I this will not be helpful, do not hesitate to contanct me to send you my
whole /etc/smb.conf

And I am using WINS servers in my local network, but PDC was working for me
before
I have them, so they are not mandatory.

TP

So there are differences (regadless of importancy):

[global]
panic action = /usr/share/samba/panic-action %d
unix charset = iso8859-2
dos charset = CP852
netbios name = cartman
passdb backend = smbpasswd guest

not using logon script directive
logon drive = J: (capital letter)

time server = yes

remote announce = wins2.jaga.sk
remote browse sync = wins2.jaga.sk

add user script = I am using -g 50 instead of group name
add machine script = usr/sbin/useradd - /dev/null -s /bin/false %m\$

not using username map directive

log file = /var/log/samba/log.%m

syslog = 0

obey pam restrictions = yes

printer admin = I have there comma separated list of priter admin users

wins support = yes

unix password sync = yes

passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n *success*
passwd chat debug = true

min password lenght = 0

[netlogon]
path=/usr/local/samba/netlogon
writable = no
share mnodes = no
guest ok = yes

[profiles]
path=/home/samba-ntprof
writable = yes
create mask = 0700
directory mask = 0700

[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   guest ok = no
   create mask = 0775
   directory mask = 0775
   force group = staff
   #this hide marks UNIX dot files with DOS hidden flag
   hide dot files = yes
   #this veto hiddes UNIX dot files, but leaves . as current directory
   veto files = /.?*/
   map archive = no

   recycle:keeptree = true
   recycle:touch = true
   recycle:versions = true
   recycle:exclude = *.tmp *.temp *.ldb ~$*
   vfs object = recycle




-- 
Tato sprava bola prehladana na vyskyt virusov a nebezpecneho obsahu antivirovym 
systemom na serveri spolocnosti Jaga Group s.r.o. a zda sa byt cista. Info: [EMAIL 
PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Compilation with Kerberos problem

2004-06-25 Thread Tom Skeren
Wow, 3.5.  I had a number of problems on 5.2.1, maybe they're similar.  
Here's the configure I use:
./configure --exec-prefix=/usr/local --localstatedir=/var 
--with-configdir=/usr/local/etc --with-libdir=/usr/local/lib/samba 
--with-swatdir=/usr/local/share/swat --with-piddir=/var/run 
--with-lockdir=/var/db/samba --with-privatedir=/usr/local/private 
--with-logfilebase=/var/log/samba --with-manpages-langs=en 
--with-libiconv=/usr/local --with-pam --with-readline 
--with-sendfile-support --with-libsmbclient --without-python 
--disable-cups --without-syslog --without-quotas --with-winbind 
--with-ldapsam --without-pam_smbpass --with-ads --with-krb5 --with-ldap 
--prefix=/usr/local i386-portbld-freebsd5.2.1

Tim Jordan wrote:
On Fri, 2004-06-25 at 06:07, Daniel Ramaley wrote:
 

I'm trying to compile Samba 3.0.4 with Active Directory support on 
OpenBSD 3.5, using the native Kerberos libraries (which happens to be 
Heimdal 0.6). Unfortunately, ./configure isn't working right. If anyone 
can help me figure out what the problem is, i would appreciate it.

First a bit of info on OpenBSD's Kerberos path layout, in case it 
matters:
   /usr/libexec   - daemons such as: kadmind, kdc, kpasswdd
   /usr/sbin  - admin programs such as: kadmin, kstash, ktutil
   /usr/bin   - user programs such as: kauth, kinit, krb5-config,
   kdestroy, klist
   /usr/lib   - libraries
   /etc/kerberosV - configuration file: krb5.conf
   /usr/include/kerberosV - include files

Here's the configure command i'm using:
# ./configure --prefix=/usr/local/samba \
 --localstatedir=/var \
 --with-configdir=/etc/samba \
 --with-lockdir=/var/spool/samba \
 --with-piddir=/var/run \
 --with-logfilebase=/var/log \
 --with-privatedir=/etc/samba \
 --with-ads \
 --with-winbind \
 --with-krb5 \
   


   --with-krb5=/usr/lib \
 

 --with-ssl \
 --with-sslinc=/usr/include/ssl \
 --with-ssllib=/usr/lib \
  configure.out 2 configure.err
After it fails, configure.err contains this:
configure: WARNING: net/if.h: present but cannot be compiled
configure: WARNING: net/if.h: check for missing prerequisite headers?
configure: WARNING: net/if.h: proceeding with the preprocessor's result
configure: WARNING: rpcsvc/yp_prot.h: present but cannot be compiled
configure: WARNING: rpcsvc/yp_prot.h: check for missing prerequisite 
headers?
configure: WARNING: rpcsvc/yp_prot.h: proceeding with the preprocessor's 
result
configure: WARNING: sys/mount.h: present but cannot be compiled
configure: WARNING: sys/mount.h: check for missing prerequisite headers?
configure: WARNING: sys/mount.h: proceeding with the preprocessor's 
result
configure: WARNING: netinet/ip.h: present but cannot be compiled
configure: WARNING: netinet/ip.h: check for missing prerequisite 
headers?
configure: WARNING: netinet/ip.h: proceeding with the preprocessor's 
result
configure: error: libkrb5 is needed for Active Directory support

I don't understand why libkrb5 isn't found, since it is in /usr/lib and 
ldconfig knows where it is:
$ ls -l /usr/lib/libkrb5.*
-r--r--r--  5 root  bin  648812 Mar 29 13:51 /usr/lib/libkrb5.a
-r--r--r--  4 root  bin  457791 Mar 29 13:51 /usr/lib/libkrb5.so.13.0
$ ldconfig -r | grep krb5
   12:-lkrb5.13.0 = /usr/lib/libkrb5.so.13.0

I won't bog the list down with the entirety of configure.out, but here 
are the last few lines of the file:

checking for Active Directory and krb5 support... yes
checking for krb5-config... /usr/bin/krb5-config
checking for working krb5-config... yes
checking krb5.h usability... yes
checking krb5.h presence... yes
checking for krb5.h... yes
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi/gssapi_generic.h usability... no
checking gssapi/gssapi_generic.h presence... no
checking for gssapi/gssapi_generic.h... no
checking gssapi/gssapi.h usability... no
checking gssapi/gssapi.h presence... no
checking for gssapi/gssapi.h... no
checking com_err.h usability... yes
checking com_err.h presence... yes
checking for com_err.h... yes
checking for _et_list in -lcom_err... no
checking for krb5_encrypt_data in -lk5crypto... no
checking for des_set_key in -lcrypto... no
checking for copy_Authenticator in -lasn1... no
checking for roken_getaddrinfo_hostspec in -lroken... no
checking for gss_display_status in -lgssapi... no
checking for krb5_mk_req_extended in -lkrb5... no
checking for gss_display_status in -lgssapi_krb5... no
checking for krb5_set_real_time... no
checking for krb5_set_default_in_tkt_etypes... no
checking for krb5_set_default_tgs_ktypes... no
checking for krb5_principal2salt... no
checking for krb5_use_enctype... no
checking for krb5_string_to_key... no
checking for krb5_get_pw_salt... no
checking for krb5_string_to_key_salt... no
checking 

Re: [Samba] Joining NT4 workstations to a Samba 3 Domain

2004-06-25 Thread Henrique
I have this problem. I solved deleting a line set primary group script
But, this is a samba3 bug? I can fix it. I need this line? What i can make?
Help!

- Original Message - 
From: Chris Hobbs [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, June 25, 2004 12:18 PM
Subject: Re: [Samba] Joining NT4 workstations to a Samba 3 Domain


 Chris Hobbs wrote:
 
  Should I submit this to bugzilla? I'd hate to do that until I've 
  exhausted my options on the mailing list.
 
 Well this turned out to be an empty threat -- turns out the general
 public can't submit bugs at bugzilla.samba.org :)
 
 I know (from private e-mail and IRC) that I'm not the only one with this
 issue. Is there anyone on the list that has NT4 clients working with a
 Samba3+LDAP domain?
 
 Thanks in advance for your help,
 
 
  Chris Hobbs wrote:
 
  Linux: Fedora Core 2
  Samba: 3.0.3
  OpenLDAP: 2.1.29
 
  I've noticed a couple of other messages in this month's archives that 
  suggest they're having the same problem as I, but so far no 
  resolution has been reported.
 
  I've got a new Samba domain up and running with LDAP that allows me 
  to join Win2K and XP clients, but not NT4 workstations. I've added 
  the machine account with the command: smbldap-useradd -w MISTEST02
 
  An ldapsearch confirms that the machine account has been created. On 
  attmpting to join the domai nfrom the NT4 client I receive the 
  following error message:
 
  The machine account for this computer either does not exist or is 
  inaccessible.
 
  Amazingly, the machine account has now disappeared from the LDAP 
  directory, as confirmed by running  ldapsearch.
 
  Trying to add the machine without first running smbldap-useradd 
  (which works fine for the 2K and XP clients) gives me the same error.
 
  I'll be happy to provide confs, debug logs and tcpdumps if those will 
  be helpful - simply let me know what needs to be captured. Thanks in 
  advance for your help.
 
 
 
 
 
 -- 
 Chris Hobbs   Silver Valley Unified School District
 Head geek:  Technology Services Coordinator
 webmaster:   http://www.silvervalley.k12.ca.us/~chobbs/
 postmaster:   [EMAIL PROTECTED]
 pgp:  http://www.silvervalley.k12.ca.us/~chobbs/key.asc
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Compilation with Kerberos problem

2004-06-25 Thread Tim Jordan
I think if you do a ./configure --help you can find out default dir's. 
Then you have to define you ./configure..

TJ
On Fri, 2004-06-25 at 08:58, Tom Skeren wrote:

 Wow, 3.5.  I had a number of problems on 5.2.1, maybe they're
 similar.  Here's the configure I use:
 ./configure --exec-prefix=/usr/local --localstatedir=/var
 --with-configdir=/usr/local/etc --with-libdir=/usr/local/lib/samba
 --with-swatdir=/usr/local/share/swat --with-piddir=/var/run
 --with-lockdir=/var/db/samba --with-privatedir=/usr/local/private
 --with-logfilebase=/var/log/samba --with-manpages-langs=en
 --with-libiconv=/usr/local --with-pam --with-readline
 --with-sendfile-support --with-libsmbclient --without-python
 --disable-cups --without-syslog --without-quotas --with-winbind
 --with-ldapsam --without-pam_smbpass --with-ads --with-krb5
 --with-ldap --prefix=/usr/local i386-portbld-freebsd5.2.1
 
 
 Tim Jordan wrote:
 
  On Fri, 2004-06-25 at 06:07, Daniel Ramaley wrote:
  

  
   I'm trying to compile Samba 3.0.4 with Active Directory support on 
   OpenBSD 3.5, using the native Kerberos libraries (which happens to be 
   Heimdal 0.6). Unfortunately, ./configure isn't working right. If anyone 
   can help me figure out what the problem is, i would appreciate it.
   
   First a bit of info on OpenBSD's Kerberos path layout, in case it 
   matters:
   /usr/libexec   - daemons such as: kadmind, kdc, kpasswdd
   /usr/sbin  - admin programs such as: kadmin, kstash, ktutil
   /usr/bin   - user programs such as: kauth, kinit, krb5-config,
   kdestroy, klist
   /usr/lib   - libraries
   /etc/kerberosV - configuration file: krb5.conf
   /usr/include/kerberosV - include files
   
   Here's the configure command i'm using:
   
   # ./configure --prefix=/usr/local/samba \
 --localstatedir=/var \
 --with-configdir=/etc/samba \
 --with-lockdir=/var/spool/samba \
 --with-piddir=/var/run \
 --with-logfilebase=/var/log \
 --with-privatedir=/etc/samba \
 --with-ads \
 --with-winbind \
 --with-krb5 \
   
  
  
  --with-krb5=/usr/lib \
  
  

  
 --with-ssl \
 --with-sslinc=/usr/include/ssl \
 --with-ssllib=/usr/lib \
  configure.out 2 configure.err
   
   
   After it fails, configure.err contains this:
   
   
   configure: WARNING: net/if.h: present but cannot be compiled
   configure: WARNING: net/if.h: check for missing prerequisite headers?
   configure: WARNING: net/if.h: proceeding with the preprocessor's result
   configure: WARNING: rpcsvc/yp_prot.h: present but cannot be compiled
   configure: WARNING: rpcsvc/yp_prot.h: check for missing prerequisite 
   headers?
   configure: WARNING: rpcsvc/yp_prot.h: proceeding with the preprocessor's 
   result
   configure: WARNING: sys/mount.h: present but cannot be compiled
   configure: WARNING: sys/mount.h: check for missing prerequisite headers?
   configure: WARNING: sys/mount.h: proceeding with the preprocessor's 
   result
   configure: WARNING: netinet/ip.h: present but cannot be compiled
   configure: WARNING: netinet/ip.h: check for missing prerequisite 
   headers?
   configure: WARNING: netinet/ip.h: proceeding with the preprocessor's 
   result
   configure: error: libkrb5 is needed for Active Directory support
   
   
   I don't understand why libkrb5 isn't found, since it is in /usr/lib and 
   ldconfig knows where it is:
   $ ls -l /usr/lib/libkrb5.*
   -r--r--r--  5 root  bin  648812 Mar 29 13:51 /usr/lib/libkrb5.a
   -r--r--r--  4 root  bin  457791 Mar 29 13:51 /usr/lib/libkrb5.so.13.0
   $ ldconfig -r | grep krb5
   12:-lkrb5.13.0 = /usr/lib/libkrb5.so.13.0
   
   
   I won't bog the list down with the entirety of configure.out, but here 
   are the last few lines of the file:
   
   
   checking for Active Directory and krb5 support... yes
   checking for krb5-config... /usr/bin/krb5-config
   checking for working krb5-config... yes
   checking krb5.h usability... yes
   checking krb5.h presence... yes
   checking for krb5.h... yes
   checking gssapi.h usability... yes
   checking gssapi.h presence... yes
   checking for gssapi.h... yes
   checking gssapi/gssapi_generic.h usability... no
   checking gssapi/gssapi_generic.h presence... no
   checking for gssapi/gssapi_generic.h... no
   checking gssapi/gssapi.h usability... no
   checking gssapi/gssapi.h presence... no
   checking for gssapi/gssapi.h... no
   checking com_err.h usability... yes
   checking com_err.h presence... yes
   checking for com_err.h... yes
   checking for _et_list in -lcom_err... no
   checking for krb5_encrypt_data in -lk5crypto... no
   checking for des_set_key in -lcrypto... no
   checking for copy_Authenticator in -lasn1... no
   checking for 

Re: [Samba] Joining NT4 workstations to a Samba 3 Domain

2004-06-25 Thread Chris Hobbs
Henrique wrote:
I have this problem. I solved deleting a line set primary group script
But, this is a samba3 bug? I can fix it. I need this line? What i can make?
Help!
 

Thanks Henrique -- commenting out that line in my smb.conf allows me to 
join the NT4 client to the domain now as well. I guess this implies a 
bug in the smbldap-usermod script. This is from idealx, I believe. Is 
there a more appropriate place to take this discussion?

Henrique wrote:
I have this problem. I solved deleting a line set primary group script
But, this is a samba3 bug? I can fix it. I need this line? What i can make?
Help!
- Original Message - 
From: Chris Hobbs [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, June 25, 2004 12:18 PM
Subject: Re: [Samba] Joining NT4 workstations to a Samba 3 Domain

 

Chris Hobbs wrote:
   

Should I submit this to bugzilla? I'd hate to do that until I've 
exhausted my options on the mailing list.
 

Well this turned out to be an empty threat -- turns out the general
public can't submit bugs at bugzilla.samba.org :)
I know (from private e-mail and IRC) that I'm not the only one with this
issue. Is there anyone on the list that has NT4 clients working with a
Samba3+LDAP domain?
Thanks in advance for your help,
   

Chris Hobbs wrote:
 

Linux: Fedora Core 2
Samba: 3.0.3
OpenLDAP: 2.1.29
I've noticed a couple of other messages in this month's archives that 
suggest they're having the same problem as I, but so far no 
resolution has been reported.

I've got a new Samba domain up and running with LDAP that allows me 
to join Win2K and XP clients, but not NT4 workstations. I've added 
the machine account with the command: smbldap-useradd -w MISTEST02

An ldapsearch confirms that the machine account has been created. On 
attmpting to join the domai nfrom the NT4 client I receive the 
following error message:

The machine account for this computer either does not exist or is 
inaccessible.

Amazingly, the machine account has now disappeared from the LDAP 
directory, as confirmed by running  ldapsearch.

Trying to add the machine without first running smbldap-useradd 
(which works fine for the 2K and XP clients) gives me the same error.

I'll be happy to provide confs, debug logs and tcpdumps if those will 
be helpful - simply let me know what needs to be captured. Thanks in 
advance for your help.

   

 

--
Chris Hobbs   Silver Valley Unified School District
Head geek:  Technology Services Coordinator
webmaster:   http://www.silvervalley.k12.ca.us/~chobbs/
postmaster:   [EMAIL PROTECTED]
pgp:  http://www.silvervalley.k12.ca.us/~chobbs/key.asc
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
   


--
Chris Hobbs   Silver Valley Unified School District
Head geek:  Technology Services Coordinator
webmaster:   http://www.silvervalley.k12.ca.us/~chobbs/
postmaster:   [EMAIL PROTECTED]
pgp:  http://www.silvervalley.k12.ca.us/~chobbs/key.asc
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] cupsaddsmb encounter with good info supplied (Plain text)

2004-06-25 Thread Mark Maas
Sorry, Should have used plain text to begin with and better wrapping:
Hi People,
Trying to be as informative as possible: I'm trying to add printers
drivers to cups-owned, samba shared printer. Called PDF-Creator
But when I issue the command cupsaddsmb -U root -v PDF-Creator I 
get a
NT_STATUS_LOGON_FAILURE

Weird thing is: I was able to do this a few months ago. But I noticed
the drivers where missing when I wanted to add this printer to one 
of my
windows workstations. So I thought: Well let's just run the good-ol
cupsaddsmb and where fine... No go evidently...

Only thing changed since then is a newer version of Samba (3.0.4) and a
newer version of Cups that came with it (Debian Distro, Sarge)
Here's what I have:
# pdbedit -L root -v
Unix username:root
NT username:
Account Flags:[U  ]
User SID: S-1-5-21-2607698634-1356104974-381704672-1000
Primary Group SID:S-1-5-21-2607698634-1356104974-381704672-513
Full Name:
Home Directory:
HomeDir Drive:
Logon Script:
Profile Path:
Domain:   ENTERPRISE
Account desc:
Workstations:
Munged dial:
Logon time:   0
Logoff time:  Fri, 13 Dec 1901 21:45:51 GMT
Kickoff time: 0
Password last set:Fri, 25 Jun 2004 19:15:25 GMT
Password can change:  Mon, 28 Jun 2004 19:15:25 GMT
Password must change: Thu, 23 Sep 2004 19:15:25 GMT
Last bad password   : Fri, 25 Jun 2004 19:16:08 GMT
Bad password count  : 1
# cupsaddsmb -U root -v PDF-Creator
Password for root required to access localhost via SAMBA:
tree connect failed: NT_STATUS_LOGON_FAILURE
Password for root required to access localhost via SAMBA:
Anonymous login successful
NT_STATUS_NETWORK_ACCESS_DENIED making remote directory \W32X86
NT_STATUS_ACCESS_DENIED opening remote file \W32X86/PDF-Creator.ppd
NT_STATUS_ACCESS_DENIED opening remote file \W32X86/cupsdrv5.dll
NT_STATUS_ACCESS_DENIED opening remote file \W32X86/cupsui5.dll
NT_STATUS_ACCESS_DENIED opening remote file \W32X86/cups5.hlp
Running command: smbclient //localhost/print\$ -N -U'root%keepitsimple'
-c 'mkdir W32X86;put /var/spool/cups/tmp/40dc5e1025de6
W32X86/PDF-Creator.ppd;put /usr/share/cups/drivers/cupsdrv5.dll
W32X86/cupsdrv5.dll;put /usr/share/cups/drivers/cupsui5.dll
W32X86/cupsui5.dll;put /usr/share/cups/drivers/cups5.hlp 
W32X86/cups5.hlp'

Running command: smbclient //localhost/print\$ -N -U'root%' -c 'mkdir
W32X86;put /var/spool/cups/tmp/40dc5e1025de6 W32X86/PDF-Creator.ppd;put
/usr/share/cups/drivers/cupsdrv5.dll W32X86/cupsdrv5.dll;put
/usr/share/cups/drivers/cupsui5.dll W32X86/cupsui5.dll;put
/usr/share/cups/drivers/cups5.hlp W32X86/cups5.hlp'
Samba log says:
[2004/06/25 19:17:07, 0] smbd/service.c:make_connection_snum(541)
 Can't become connected user!
[2004/06/25 19:17:09, 1] smbd/service.c:make_connection_snum(619)
 menem (127.0.0.1) connect to service print$ initially as user nobody
(uid=65534, gid=65534) (pid 8880)
[2004/06/25 19:17:09, 1] smbd/service.c:close_cnum(801)
 menem (127.0.0.1) closed connection to service print$
So what does Can't become connected user! mean? Googling it does not
reveal anything?
Thanks for any help!
Mark
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Looping auth problem

2004-06-25 Thread John Goerzen
Hello,

We have had an unusual problem start this week.  I observed smbd process
using lots of CPU time for an extended period of time.  Upon looking at
the log for that machine with debug=2, I discovered that a client PC was
looking for information on a particular user on our network over and
over.  That user is a valid user on our network.  Killing the effected
smbd process did not work; another would start up in its place.

If I'd reboot the particular client, it would be better.  However, some
other PC on the network would begin doing the exact same thing.  I have
no idea why they would go one at a time like this.  I also don't know
how they'd manage to coordinate like this -- always exactly one of them
causing the trouble.

This is putting a severe burden on our LDAP server.

Any ideas?

-- John

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] cupsaddsmb encounter with good info supplied (Plain text)

2004-06-25 Thread Tomás Polák
 But when I issue the command cupsaddsmb -U root -v PDF-Creator I 
 get a
 NT_STATUS_LOGON_FAILURE

There can be a difference, what root password you are using.
One root user with own password can exist in /etc/smbpasswd file
and another in /etc/passwd as true UNIX root.
Its a good security practice to keep those users have different passwords.
For cupsaddsmb you must provide /etc/smbpasswd root password.

TP

-- 
Tato sprava bola prehladana na vyskyt virusov a nebezpecneho obsahu antivirovym 
systemom na serveri spolocnosti Jaga Group s.r.o. a zda sa byt cista. Info: [EMAIL 
PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Looping auth problem

2004-06-25 Thread Tom Polk
From my point of view you must provide more informations about you
environment.
Acts your Samba as PDC?
Which OS have your PCs?
Do you have Wins servers?
Which kind of authorisation you are using between Samba and PCs?
Also your smb.conf will be helpfull when seen...
TP


-- 
Tato sprava bola prehladana na vyskyt virusov a nebezpecneho obsahu antivirovym 
systemom na serveri spolocnosti Jaga Group s.r.o. a zda sa byt cista. Info: [EMAIL 
PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Compilation with Kerberos problem

2004-06-25 Thread Daniel Ramaley
Thank you for your response. Unfortunately, i had already tried this to 
the same effect. I'm sorry i did not mention it before. Any other 
ideas?

 # ./configure --prefix=/usr/local/samba \
   --localstatedir=/var \
   --with-configdir=/etc/samba \
   --with-lockdir=/var/spool/samba \
   --with-piddir=/var/run \
   --with-logfilebase=/var/log \
   --with-privatedir=/etc/samba \
   --with-ads \
   --with-winbind \
   --with-krb5 \

--with-krb5=/usr/lib \

   --with-ssl \
   --with-sslinc=/usr/include/ssl \
   --with-ssllib=/usr/lib \
configure.out 2 configure.err

-- 

Dan Ramaley
Digital Media Library Specialist
(515) 271-1934
Cowles Library 140, Drake University

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] cupsaddsmb encounter with good info supplied (Plain text)

2004-06-25 Thread Tomás Polák
 But when I issue the command cupsaddsmb -U root -v PDF-Creator I
No more experiences from my side helpfull for you. Maybe minus in
PDF-Creator is parsed
as additional flags for cupsaddsmb? What about PDF_Creator?
TP


-- 
Tato sprava bola prehladana na vyskyt virusov a nebezpecneho obsahu antivirovym 
systemom na serveri spolocnosti Jaga Group s.r.o. a zda sa byt cista. Info: [EMAIL 
PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] cupsaddsmb encounter with good info supplied (Plain text)

2004-06-25 Thread Mark Maas
Tomás Polák wrote:
But when I issue the command cupsaddsmb -U root -v PDF-Creator I 
get a
NT_STATUS_LOGON_FAILURE
   

There can be a difference, what root password you are using.
One root user with own password can exist in /etc/smbpasswd file
and another in /etc/passwd as true UNIX root.
Its a good security practice to keep those users have different passwords.
For cupsaddsmb you must provide /etc/smbpasswd root password.
TP
 

True, the /etc/passwd version is a different thing than the samba
account. I tried with the /etc/passwd version first and then when that
did not work I tried adding the root account to samba with 
smbpasswd -a
root

So both accounts gave this error.
I'm still trying different things, but right now any help would be
apreciated!
Thanks again,
Mark
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba 3.0.4 : cannot join domain with w2k clients.

2004-06-25 Thread Jonathan Johnson
On Fri, 25 Jun 2004, HM wrote:

 Hello all.
 
 I'm trying since a few jours to get my w2k clients join my domain, 
 managed by my samba 3.0.4 PDC, without success. I can browse the server, 
 share files with it with my station, but i can't join the domain. When i 
 try to, i get the following message (sorry for the poor translation) :
 
 The following error occurred while trying to join domain 'SLS' :
 Failed to open a session : username unknown or invalid password.
 

Just a hunch: from a command line on the w2k box, issue
net use * /delete

and try joining again.

-Jon

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Winbind/LDAP Backend question

2004-06-25 Thread Nik Reiman
On Jun 24, 2004, at 4:09 PM, Paul Gienger wrote:
To do that part you issue a
smbpasswd -w passwordstring
on the command line of your samba box to set the bind password to 
associate with the ldap admin dn.
Thanks; I forgot about this step.  However, the machine still won't 
authenticate... there's a really long pause, and eventually it rejects 
the correct login password.  I checked the system logs, but since this 
goes through pam, it may be out of samba's hands

Have you tried storing your winbind idmap on an openldap (or other 
ldap) server?  You could either manually pull the SIDs from the 
windows directory and then sync them with uids with a script, or you 
could change the uid stored in the idmap database to match the uid 
manually as the users connect.  I suppose you could store that in your 
AD server as well, no real reason you couldn't.  This wouldn't be 
reinventing the wheel quite as much and samba will work out of the box 
with that idmap data.
Although I'm not a big fan of openldap, this was suggested.  
Unfortunately, due to decisions made out of my hands, AD was chosen as 
the single database to hold all of our login and user information.

-Nik
--
// Nik Reiman || [EMAIL PROTECTED] || http://www.aboleo.net \\
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Questions about Samba and a WINS server...update

2004-06-25 Thread Jason Williams
Ok...trying to follow up here and see if someone can help me out, and let 
me know what is exactly hapening here. I have a few ideas, but I wanted to 
post here.

As I said in my previous post, I am having problems browsing the corporate 
network from a Branch Office.

Doing some testing, here is some output from my log.nmbd on my WINS server:
[2004/06/25 12:20:45, 0] nmbd/nmbd.c:terminate(54)
  Got SIGTERM: going down...
[2004/06/25 12:20:45, 0] nmbd/nmbd.c:main(664)
  Netbios nameserver version 3.0.4 started.
  Copyright Andrew Tridgell and the Samba Team 1994-2004
[2004/06/25 12:20:45, 0] 
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327)
  become_domain_master_browser_wins:
  Attempting to become domain master browser on workgroup COURTESY, subnet 
UNICAST_SUBNET.

[2004/06/25 12:20:45, 0] 
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341)
  become_domain_master_browser_wins: querying WINS server from IP 
192.168.1.50 for domain master browser name COURTESY1b on workgroup COURTESY

[2004/06/25 12:20:45, 0] 
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *

  Samba server OXYGEN is now a domain master browser for workgroup 
COURTESY on subnet UNICAST_SUBNET

  *
[2004/06/25 12:20:45, 0] 
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup COURTESY on 
subnet 192.168.1.50

[2004/06/25 12:20:45, 0] 
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
  become_domain_master_browser_bcast: querying subnet 192.168.1.50 for 
domain master browser on workgroup COURTESY

[2004/06/25 12:20:45, 0] 
nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225)
  become_domain_master_query_success:
  There is already a domain master browser at IP 192.168.1.20 for 
workgroup COURTESY registered on subnet 192.168.1.50.

[2004/06/25 12:21:08, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *
  Samba name server OXYGEN is now a local master browser for workgroup 
COURTESY on subnet 192.168.1.50

  *
I'm posting this again, because I think I may know what is going on, but 
trying to gete verification. This line:

There is already a domain master browser at IP 192.168.1.20 for workgroup 
COURTESY registered on subnet 192.168.1.50.

...I am pretty sure is what is causing the problem. The WINS Server, 
OXYGEN, has the IP of 192.168.1.50:
The NT 4.0 server has the IP address of 192.168.1.20.

What is stumping me is that for some reason, it appears that the NT box is 
still  becoming the Domain Master Browser, which could be the reason why i 
can't browse properly, right?

So how can I make sure that OXYGEN becomes the DMB? It is already the LMB, 
but seems to be losing to the NT 4.0 server for the DMB?

I just thought of something: The NT 4.0 box has the domain setup as 
COURTESY. In looking at my smb.conf file, I setup the WORKGROUP as 
COURTESY. I think I read in the Samba book that this could cause a problem. 
If my thinking is correct, if I were to shut off the NT box, I bet I could 
browse the network from a Branch office, correct? If that is the case, what 
are my options to resolve that? Keep in mind, I have to keep the NT 4.0 box 
for now. :/

Any recommendations?
Jason
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Directories vanished

2004-06-25 Thread Greg Talbot
I have a server running 3.0 with 3 shares on it.  I recently downed the
server while the shares were mapped to a windows 2k workstation.  When the
server was brought back all those directories were gone.
fsck turned up nothing and the only account on it is root/administrator
and the history shows no deletions,and the samba logs only show that it
can now not connect to those shares any longer.

I also noticed that the SMART deamon no longer sees that partion.  But it
is there and still has 2 of the 5 directories that were there
before. (Those that were not Samba shares)

Any idea on this?



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Is it possible to manipulate ACLs through smbclient?

2004-06-25 Thread Tom Dickson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
For example,
smbclient //sambaserv/share -U administrator
Password:
smb aclmod booog
or something like that?
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA3IRv2dxAfYNwANIRAkMFAJ9N5W/NUhl2lOdQ+BEpH9Kgn9aY/gCfTjNx
ROpc5TzEvOZ291SLX+mt0sc=
=pLVe
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Net user does not display users.

2004-06-25 Thread Ely Zavin
Hi,
I am using samba-3.0.4 with ldap.
Everything is working except the command net user.
That command does not display domain users.
For the same reason I can see only domain groups but not users in Windows
2000 Select Users or Groups
window while adding domain user to local Administrators group.
The command net user info user displays user's group. Net groups also
displays domain groups.
The ldap log file shows no error connecting and searching ldap database.
The ldap permissions are OK because ldapsearch command displays all users.
By the way pdbedit -L also displays all users.

What is wrong ?
Regards,
Ely Zavin.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Is it possible to manipulate ACLs through smbclient?

2004-06-25 Thread Herb Lewis
use smbcacls instead
Tom Dickson wrote:
For example,
smbclient //sambaserv/share -U administrator
Password:
smb aclmod booog
or something like that?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Looping auth problem

2004-06-25 Thread John Goerzen
On 2004-06-25, Tomá¹ Polák [EMAIL PROTECTED] wrote:
From my point of view you must provide more informations about you
 environment.
 Acts your Samba as PDC?

Yes, the Samba server in question is the PDC.  Most, but not all, client
PCs are logging in to the domain.

 Which OS have your PCs?

Mostly XP, but as low as Windows 98.  All of the effected PCs are
running XP.

 Do you have Wins servers?

No.

 Which kind of authorisation you are using between Samba and PCs?

Not sure what you mean here.

 Also your smb.conf will be helpfull when seen...

Included below.


#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
# $Id: smb.conf,v 1.9 2002/11/11 04:20:37 vorlon Exp $
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which 
# are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash) 
# is a comment and is ignored. In this example we will use a #
# for commentary and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command
# testparm to check that you have not many any basic syntactic 
# errors. 
#

#=== Global Settings ===

[global]
kernel oplocks = no
# This needed for vserver ctx13 patch with 2.4.19
log level = 2
# admin users = root
printer admin = root
time server = yes
domain logons = yes
domain admin group = root kweaver jgoerzen djschmidt @tempadmins
logon script = GENERIC.BAT
# Change this for the workgroup/NT-domain name your Samba server will part of
   workgroup = LINUX

# server string is the equivalent of the NT Description field
   server string = %h server (Samba %v)

# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
   load printers = yes

# lpr(ng) printing. You may wish to override the location of the
# printcap file
;   printing = bsd
;   printcap name = /etc/printcap

# cups printing.  See also the cupsaddsmb(8) manpage
   printing = cups
   printcap name = cups

;   guest account = nobody
;   invalid users = root

# This tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/log.%m

# Put a capping on the size of the log files (in Kb).
   max log size = 1000

# If you want Samba to log though syslog only then set the following
# parameter to 'yes'. Please note that logging through syslog in
# Samba is still experimental.
;   syslog only = no

# We want Samba to log a minimum amount of information to syslog. Everything
# should go to /var/log/samba/log.{smb,nmb} instead. If you want to log
# through syslog you should set the following parameter to something higher.
   syslog = 0

# security = user is always a good idea. This will require a Unix account
# in this server for every user accessing the server. See
# security_level.txt for details.
;   security = user

# You may wish to use password encryption. Please read ENCRYPTION.html,
# Win95.txt and WinNT.txt in the Samba documentation. Do not enable this
# option unless you have read those documents
   encrypt passwords = true
#   passdb backend = smbpasswd unixsam

# If you are using encrypted passwords, Samba will need to know what
# password database type you are using.  
#   passdb backend = ldapsam:ldap://ldap unixsam

ldap admin dn = cn=admin,dc=excelhustler,dc=com
ldap server = ldap.internal.excelhustler.com
ldap ssl = off
ldap port = 389
ldap suffix = ou=People,dc=excelhustler,dc=com
# ldap passwd sync = yes


# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
;   include = /home/samba/etc/smb.conf.%m

# Most people will find that this option gives better performance.
# See speed.txt and the manual pages for details
# You may want to add the following on a Linux system:
# SO_RCVBUF=8192 SO_SNDBUF=8192
   socket options = TCP_NODELAY

# --- Browser Control Options ---

# Please _read_ BROWSING.txt and set the next four parameters according
# to your network setup. The defaults are specified below (commented
# out.) It's important that you read BROWSING.txt so you don't break
# browsing in your network!

# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
   local master = yes

# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
;   os level = 20

# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
   domain master = yes

# Preferred Master causes Samba to force a 

Re: [Samba] Re: Questions about Samba and a WINS server...update

2004-06-25 Thread Jason Williams

I just thought of something: The NT 4.0 box has the domain setup as 
COURTESY. In looking at my smb.conf file, I setup the WORKGROUP as 
COURTESY. I think I read in the Samba book that this could cause a 
problem. If my thinking is correct, if I were to shut off the NT box, I 
bet I could browse the network from a Branch office, correct? If that is 
the case, what are my options to resolve that? Keep in mind, I have to 
keep the NT 4.0 box for now. :/

Any recommendations?
Jason
Hey guys, I think I found my problem. Now I just need to figure out how to 
fix it.

I checked the NT 4.0 box, and for network identification, it has the DOMAIN 
set to COURTESY.
In smb.conf, the workgroup = COURTESY.

Went through the book, and it stated that if it is set like that, you will 
experience problems. :-/

Ok...now I need to figure out how to fix this.
The tricky part is, all our users have a mapped drive to the NT 4.0 server. 
I have to take that into consideration before I make some changes.

Anyone have some suggestions on what I can do to fix this?
I appreciate it.
Jas 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] PDC Prblems solved - Thx

2004-06-25 Thread Matthew Koster
I just wanted to thank all though who tried to help me out.
What has happened was I have update my Samba to 3.0.5pre1 uring the RPMs built for 
Mandrake 10, this involved a lot of force uninstalling and reinstalling of things like 
perl-base, perl, and other apps, but I got it all to work within an hour of 
reformating (reformating, uninstlation, reinstalation and creation of foulders and 
accounts).

Easy as pie.

Thanks again-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] SOLVED: Roaming profiles not updating XP

2004-06-25 Thread Ramy Szekely
Hi Mac,

 

I just wanted to say thanks!

 

No, I don't have Samba - I don't even know what it is - but I do have an
nVidia FX 5200 card.

 

I even went as far as reformatting my hard drive (it needed it anyway!), and
of course this PC still wouldn't save the profile (the other pc's in the
network did).

 

And then I hit upon your post on the web, downgraded the driver - and presto
- it works!

 

By the way, no mention of this nVidia on MSDN, nor of roaming profile
problems on nVidia's site.

 

Being brought up in Canada, I suppose I should switch to ATI !

 

Thanks again!

 

Ramy Szekely

Nahariya, Israel

 

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: [fwd: [Fwd: Re: network response] ]

2004-06-25 Thread Jeremy Allison
On Fri, Jun 25, 2004 at 09:25:29AM -0500, Chris Garrigues wrote:
  From:  Chris Garrigues [EMAIL PROTECTED]
  Date:  Fri, 25 Jun 2004 07:59:10 -0500
 
  I sent you a large log yesterday but it was blocked by some mail server due 
  to the size.  I've just dropped the email messag on my web server at:
  
  http://www.trinsics.com/~cwg/smblogmail
 
 I just had exactly the same thing happen again.  Since it was identical, I'm 
 not going to post the log.  However, this time I ran smbstatus while it was 
 hung and noticed two locks on the temporary file:

Ok, I've found a logic error in the deferred open code w.r.t. renames.
I'll email when I've fixed it in SVN.

Thanks,

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Domain member help

2004-06-25 Thread MWiley
I noticed you had the same problem I had with Winbind.  Did you ever get it
working.  I see alot of people with this problem but no solutions posted.
 
Thanks
 
Michael S. Wiley
Manager, Information Technology
@Wabtec Global Services
Boulder, CO 
303-447-2889 Ext 225
303-882-9790 Wireless
 


* CONFIDENTIALITY NOTE *
The content contained in this e-mail transmission is legally privileged and 
confidential information intended only for the use of the individual or entity named 
herein. If the reader of this transmission is not the intended recipient, you are 
hereby notified that any dissemination, distribution, or copying of this transmission 
is strictly prohibited.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Domain member help

2004-06-25 Thread Bill Mann
I have no solution and am near wits end.  There must be an answer and I
intend to find it!

Bill Mann

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Friday, June 25, 2004 5:32 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Domain member help

I noticed you had the same problem I had with Winbind.  Did you ever get it
working.  I see alot of people with this problem but no solutions posted.
 
Thanks
 
Michael S. Wiley
Manager, Information Technology
@Wabtec Global Services
Boulder, CO 
303-447-2889 Ext 225
303-882-9790 Wireless
 


* CONFIDENTIALITY NOTE *
The content contained in this e-mail transmission is legally privileged and
confidential information intended only for the use of the individual or
entity named herein. If the reader of this transmission is not the intended
recipient, you are hereby notified that any dissemination, distribution, or
copying of this transmission is strictly prohibited.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Domain member help

2004-06-25 Thread Norman Zhang
Bill Mann wrote:
I have no solution and am near wits end.  There must be an answer and I
intend to find it!
-Original Message-
From: [EMAIL PROTECTED]
I noticed you had the same problem I had with Winbind.  Did you ever get it
working.  I see alot of people with this problem but no solutions posted.
Are you talking about samba can authenticate with NT domain users using 
winbind but not local root? Can you do stop/restart winbind with root?

If so, we are seeing the same problem too despite /etc/nsswitch.conf 
specifies

passwd: files nisplus nis winbind
shadow: files nisplus nis
group:  files nisplus nis winbind
Samba 3.0.x seems to have change something. I have digged through the 
documents, Chapter 10. Account Information Databases seem to mention 
something about this, but does address this strange behavior. It works 
under Samba 2.7.x, 2.8.x. I'm thinking of downgrade to 2.8.x until this 
is sorted out in 3.0.x. Is this a known bug? Googling does show anything 8(

Regards,
Norman
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: [fwd: [Fwd: Re: network response] ]

2004-06-25 Thread Jeremy Allison
On Fri, Jun 25, 2004 at 09:25:29AM -0500, Chris Garrigues wrote:
  From:  Chris Garrigues [EMAIL PROTECTED]
  Date:  Fri, 25 Jun 2004 07:59:10 -0500
 
  I sent you a large log yesterday but it was blocked by some mail server due 
  to the size.  I've just dropped the email messag on my web server at:
  
  http://www.trinsics.com/~cwg/smblogmail
 
 I just had exactly the same thing happen again.  Since it was identical, I'm 
 not going to post the log.  However, this time I ran smbstatus while it was 
 hung and noticed two locks on the temporary file:

Ok, can you check out the current SVN and tell me if you can still reproduce it ?
I just fixed a missing deferred open bug which would allow two copies of the same
open to be reprocessed simultaneously (and send 2 replies !) in the NTrename
case.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: [fwd: [Fwd: Re: network response] ]

2004-06-25 Thread Jeremy Allison
On Fri, Jun 25, 2004 at 09:25:29AM -0500, Chris Garrigues wrote:
  From:  Chris Garrigues [EMAIL PROTECTED]
  Date:  Fri, 25 Jun 2004 07:59:10 -0500
 
  I sent you a large log yesterday but it was blocked by some mail server due 
  to the size.  I've just dropped the email messag on my web server at:
  
  http://www.trinsics.com/~cwg/smblogmail
 
 I just had exactly the same thing happen again.  Since it was identical, I'm 
 not going to post the log.  However, this time I ran smbstatus while it was 
 hung and noticed two locks on the temporary file:
 
 Locked files:
 PidDenyMode   Access  R/WOplock   Name
 --
 2106   DENY_NONE  0x60080 RDONLY NONE 
 /net/jupiter.trinsics.com/export/home/cwg/EC94B140   Fri Jun 25 09:19:33 2004
 2106   DENY_ALL   0x7019f RDWR   NONE 
 /net/jupiter.trinsics.com/export/home/cwg/EC94B140   Fri Jun 25 09:19:33 2004
 2106   DENY_NONE  0x30089 RDONLY NONE 
 /net/jupiter.trinsics.com/export/home/cwg/bbu projection.xls   Fri Jun 25 09:19:33 
 2004
 
 In fact, I see that there are still two locks even after excel let me work 
 again.

Ok, Chris - if you svn update you'll find I've added a new global parameter to
control the action of the defer open code. It's called

defer sharing violations and it's set to yes by default (to emulate Windows
correctly). Can you svn update and try and reproduce your problem with
this parameter set to yes. If you can, try setting it to no and seeing
if the problem goes away.

Thanks,

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] NT4 DC Problem I hope Samba Solves

2004-06-25 Thread Timothy Birth
I have a general question about samba.  I purchased NT
4 Server and it was working well.  However, I have
Windows 2000/XP Clients that are having problems.  The
problem is that domain users are considered users and
not power users.  Domain users cannot edit the
registry.  I have tried everything I can think of to
fix this, but I can't get it to work.  

If samba would allow my Windows 2000/XP clients to be
NT 4 Domain Guest Power Users, my problem would be
solved.  By design, guest profiles are deleted when
the user logs off the local computer.
  -I want them to be guests so that they use the
   default user profile when they log on.  I do
   not want a bunch of local profiles to be
   maintained when they log off.  
  -I want them to be power users so they can edit
   the registry.
I know how to set up local users as guest power users,
but I can't figure out how to get domain users to be
guest power users.

From what I have read, Windows 2000 Active Directory
Server allows domain users to be power users.  I do
not need Active Directory if samba can solve the
problem.  

I would gladly switch to samba if this problem is
solved.  Thank you for your assistance with this
matter!  I am looking forward to your reply!!!

Sincerely,


Tim Birth



__
Do you Yahoo!?
Read only the mail you want - Yahoo! Mail SpamGuard.
http://promotions.yahoo.com/new_mail 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] NT4 DC Problem I hope Samba Solves

2004-06-25 Thread Timothy Birth
I received a reply, but I cannot read the language of
your reply.  There is a work around I thought of and I
will explain it.  The auto login feature in Windows XP
could be used to keep users logged on.  A program
could be written that would require them to respond
before allowing any other program to run.  I believe
the term for this is a modal window.  This program
would validate their user information.  If they are
not a valid user, the system would log them off.  If a
program like this existed that could interact with the
samba user information it would be a way around the
problem.

Tim

--

I have a general question about samba.  I purchased NT
4 Server and it was working well.  However, I have
Windows 2000/XP Clients that are having problems.  The
problem is that domain users are considered users and
not power users.  Domain users cannot edit the
registry.  I have tried everything I can think of to
fix this, but I can't get it to work.  

If samba would allow my Windows 2000/XP clients to be
NT 4 Domain Guest Power Users, my problem would be
solved.  By design, guest profiles are deleted when
the user logs off the local computer.
  -I want them to be guests so that they use the
   default user profile when they log on.  I do
   not want a bunch of local profiles to be
   maintained when they log off.  
  -I want them to be power users so they can edit
   the registry.
I know how to set up local users as guest power users,
but I can't figure out how to get domain users to be
guest power users.

From what I have read, Windows 2000 Active Directory
Server allows domain users to be power users.  I do
not need Active Directory if samba can solve the
problem.  

I would gladly switch to samba if this problem is
solved.  Thank you for your assistance with this
matter!  I am looking forward to your reply!!!

Sincerely,


Tim Birth




__
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


svn commit: samba r1251 - trunk/source/nsswitch

2004-06-25 Thread vlendec
Author: vlendec
Date: 2004-06-25 08:10:22 + (Fri, 25 Jun 2004)
New Revision: 1251

Modified:
   trunk/source/nsswitch/winbindd.c
   trunk/source/nsswitch/winbindd.h
   trunk/source/nsswitch/winbindd_cache.c
   trunk/source/nsswitch/winbindd_dual.c
   trunk/source/nsswitch/winbindd_nss.h
Log:
This is an alternative prototype of asyncronous winbind processing. You can
fill the cache with a wbinfo -n or -s, then do wbinfo -u for your huge domain
and the wbinfo -n for the same name still works concurrently. wbinfo -n for
another user does not work concurrently yet, as we only have one dual
daemon. The architecture allows for multiple worker daemons though.

cache_list_users_next is a model for the state machine that has to be
implemented. list_users is simple, getgrent should be the most complex one.

Now HEAD winbind has both models implemented as prototypes. All who are
interested in winbind scalability care to take a look?

Abartlet, as tridge said we could very well open multiple netlogon pipes in
different worker daemons. This would make multiple concurrent auth requests
possible.

Comments?

Volker


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1251nolog=1


svn commit: samba r1252 - trunk/source/include

2004-06-25 Thread vlendec
Author: vlendec
Date: 2004-06-25 13:33:05 + (Fri, 25 Jun 2004)
New Revision: 1252

Modified:
   trunk/source/include/messages.h
Log:
Missing patch for asynchronous winbind

WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1252nolog=1


svn commit: samba r1253 - trunk/source/nsswitch

2004-06-25 Thread vlendec
Author: vlendec
Date: 2004-06-25 13:55:04 + (Fri, 25 Jun 2004)
New Revision: 1253

Modified:
   trunk/source/nsswitch/winbindd.c
   trunk/source/nsswitch/winbindd_cache.c
Log:
List groups via the dual daemon

Volker


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1253nolog=1


svn commit: samba r1254 - trunk/source/smbd

2004-06-25 Thread jra
Author: jra
Date: 2004-06-25 21:33:21 + (Fri, 25 Jun 2004)
New Revision: 1254

Modified:
   trunk/source/smbd/reply.c
   trunk/source/smbd/trans2.c
Log:
Ensure we check attributes correctly on rename request. Gets us further with
Samba4 RAW-RENAME test.
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1254nolog=1


svn commit: samba r1255 - branches/SAMBA_3_0/source/smbd

2004-06-25 Thread jra
Author: jra
Date: 2004-06-25 21:33:21 + (Fri, 25 Jun 2004)
New Revision: 1255

Modified:
   branches/SAMBA_3_0/source/smbd/reply.c
   branches/SAMBA_3_0/source/smbd/trans2.c
Log:
Ensure we check attributes correctly on rename request. Gets us further with
Samba4 RAW-RENAME test.
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1255nolog=1


svn commit: samba r1256 - trunk/source/smbd

2004-06-25 Thread jra
Author: jra
Date: 2004-06-25 22:37:45 + (Fri, 25 Jun 2004)
New Revision: 1256

Modified:
   trunk/source/smbd/nttrans.c
Log:
Ensure we deferr a sharing violation on rename correctly.
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1256nolog=1


svn commit: samba r1257 - branches/SAMBA_3_0/source/smbd

2004-06-25 Thread jra
Author: jra
Date: 2004-06-25 22:37:50 + (Fri, 25 Jun 2004)
New Revision: 1257

Modified:
   branches/SAMBA_3_0/source/smbd/nttrans.c
Log:
Ensure we deferr a sharing violation on rename correctly.
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1257nolog=1


svn commit: samba r1258 - trunk/source/smbd

2004-06-25 Thread jra
Author: jra
Date: 2004-06-25 23:48:20 + (Fri, 25 Jun 2004)
New Revision: 1258

Modified:
   trunk/source/smbd/nttrans.c
Log:
Ensure we pass Samba4 RAW-RENAME test.
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1258nolog=1


svn commit: samba r1259 - branches/SAMBA_3_0/source/smbd

2004-06-25 Thread jra
Author: jra
Date: 2004-06-25 23:48:23 + (Fri, 25 Jun 2004)
New Revision: 1259

Modified:
   branches/SAMBA_3_0/source/smbd/nttrans.c
Log:
Ensure we pass Samba4 RAW-RENAME test.
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1259nolog=1


svn commit: samba r1261 - in trunk/source: param smbd

2004-06-25 Thread jra
Author: jra
Date: 2004-06-26 00:48:05 + (Sat, 26 Jun 2004)
New Revision: 1261

Modified:
   trunk/source/param/loadparm.c
   trunk/source/smbd/open.c
Log:
Added new parameter in the protocol section. defer sharing violations,
by default set to yes (to correctly emulate Windows). I've added this to
ensure if we find a critical problem with this new code when 3.0.5 ships
it can be turned off to test for bugs.
Jeremy.


WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/trunk/sourcerev=1261nolog=1


svn commit: samba r1262 - in trunk/source: param smbd

2004-06-25 Thread jra
Author: jra
Date: 2004-06-26 01:03:48 + (Sat, 26 Jun 2004)
New Revision: 1262

Modified:
   trunk/source/param/loadparm.c
   trunk/source/smbd/close.c
   trunk/source/smbd/open.c
   trunk/source/smbd/process.c
Log:
Make defer sharing violations a global parameter.
Jeremy.


WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/trunk/sourcerev=1262nolog=1


svn commit: samba r1263 - in branches/SAMBA_3_0/source: param smbd

2004-06-25 Thread jra
Author: jra
Date: 2004-06-26 01:04:02 + (Sat, 26 Jun 2004)
New Revision: 1263

Modified:
   branches/SAMBA_3_0/source/param/loadparm.c
   branches/SAMBA_3_0/source/smbd/close.c
   branches/SAMBA_3_0/source/smbd/open.c
   branches/SAMBA_3_0/source/smbd/process.c
Log:
Make defer sharing violations a global parameter.
Jeremy.


WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_3_0/sourcerev=1263nolog=1