Re: [Samba] NTFS ACLs - access denied

2004-10-18 Thread Matías Barletta
Samba 3.0.7 with acl support - File System Reiser Suse 9.1 Pro ACL supported
by kernel

When trying to secure copy the files I get TOO MANY ACE ENTRIES FOR FILE ...
from the log file, I think that this is the problem, but dunno why its
happen and how to solve it
Thanks

  fetch uid from cache 1 - S-1-5-21-538738344-134243190-1478062314-1003
[2004/10/17 20:54:53, 3] passdb/lookup_sid.c:fetch_uid_from_cache(173)
  fetch uid from cache 1 - S-1-5-21-538738344-134243190-1478062314-1003
[2004/10/17 20:54:53, 3] smbd/dosmode.c:unix_mode(111)
  unix_mode(.) returning 0744
[2004/10/17 20:54:53, 3]
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2506)
  convert_canon_ace_to_posix_perms: Too many ACE entries for file . to
convert to posix perms.
[2004/10/17 20:54:53, 3] smbd/posix_acls.c:set_nt_acl(3147)
  set_nt_acl: failed to convert file acl to posix permissions for file ..
[2004/10/17 20:54:53, 3] smbd/error.c:error_packet(105)
  error string = Function not implemented
[2004/10/17 20:54:53, 3] smbd/error.c:error_packet(129)
  error packet at smbd/nttrans.c(2020) cmd=160 (SMBnttrans)
NT_STATUS_ACCESS_DENIED
[2004/10/17 20:54:53, 3] smbd/process.c:process_smb(1092)
  Transaction 3644 of length 46


- Original Message - 
From: Gerald (Jerry) Carter [EMAIL PROTECTED]
To: Matías Barletta [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Thursday, October 14, 2004 8:00 AM
Subject: Re: [Samba] NTFS ACLs - access denied


 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Matías Barletta wrote:
 | People, I had gone panic... there is no way to migrate
 | Files from my NT 4, to the Samba BDC Server. I had vampired
 | all the users. but still I get access denied in robocopy
 | when it tries to copy the NTFS Security.
 |
 | Any Idea what could it be??
 |
 | I swear to god, that I will share a bit of my salary
 | to solve this out!! 2 weeks fighting and going throw forums,
 | and this weekend my boss will go with win2000 if I dont
 | find a solution!!

 What version of Samba ?  We'll need a lot more details.





 cheers, jerry
 - -
 Alleviating the pain of Windows(tm)  --- http://www.samba.org
 GnuPG Key- http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song--Switchfoot (2003)
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.2.4 (GNU/Linux)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

 iD8DBQFBboaBIR7qMdg1EfYRAm7QAJ9GCaJ57Y7ruymLyxeX/ycTjMU3OACgt4hX
 CoW9En0CexPh6GnQYse19VQ=
 =xYOW
 -END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba with ldap and digest-md5

2004-10-18 Thread Ben Booble
Hi all,
I am running samba-server-3.0.6-4.1.100mdk,  openldap-servers-2.1.25-6mdk, 
lib64sasl2-plug-digestmd5-2.1.15-10.1.100mdk.  I have searched through the 
lists and I am wondering if I am the only one doing this kind of set-up..

Anyway question is as follows:  In my ldap server I have normal posix 
accounts with plain text password that are sorted out by a sasl-regex in the 
slapd.conf and that works well.  With smb, how does it handle passwords 
between it and ldap and does anyone know of any special configuration 
settings should be in place to get it to work?  I have read the IDEALX doco 
and several contradictory ones so god knows which is right.  At the moment 
the smb server sees the request from a client (adding a pc to the domain), 
goes off to authenticate but comes back with invalid credentials for the 
administrator user.   I am almost sure it is because of the way samba send 
the password but I don't really know.

I know more about ldap than I do about samba so I am hoping to get some 
extra insight to how smb works.   Will samba work with sasl digest-md5 at 
all?

Here are relevant details from smb.conf:
  security = user
  encrypt passwords = yes
  smb passwd file = /etc/samba/smbpasswd
  unix password sync = Yes
  passwd program = /usr/bin/passwd %u
  passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
*passwd:*all*authentication*tokens*updated*successfully*
  pam password change = yes
 encrypt passwords = yes
 smb passwd file = /etc/samba/smbpasswd
 obey pam restrictions = yes
 domain master = yes
 local master = yes
 domain logons = yes
add user script = /usr/share/samba/scripts/smbldap-useradd.pl '%u'
delete user script = /usr/share/samba/scripts/smbldap-userdel.pl '%u'
add user to group script = /usr/share/samba/scripts/smbldap-groupmod.pl -m 
'%u' '%g'
delete user from group script = /usr/share/samba/scripts/smbldap-groupmod.pl 
-x '%u' '%g'
set primary group script = /usr/share/samba/scripts/smbldap-usermod.pl -g 
'%g' '%u'
add group script = /usr/share/samba/scripts/smbldap-groupadd.pl '%g'  
/usr/share/samba/scripts/smbldap-groupshow.pl %g|awk '/^gidNumber:/ {print 
$2}'
delete group script = /usr/share/samba/scripts/smbldap-userdel.pl '%g'

passdb backend = ldapsam:ldaps://newser1.cpc.net.au smbpasswd guest
ldap admin dn = uid=administrator,ou=System,ou=People,dc=cpc
ldap port = 389
ldap suffix = dc=cpc
ldap machine suffix = ou=Hosts,ou=System
ldap user suffix = ou=People
ldap group suffix = ou=Group
ldap machine suffix = ou=Hosts,ou=System
ldap user suffix = ou=Utiba,ou=People
ldap group suffix = ou=grpUtiba,ou=Group
smb.log :
 ldap_connect_system: Binding to ldap server ldaps://newser1.cpc.net.au as 
uid=administrator,ou=System,ou=People,dc=cpc
[2004/10/19 01:54:31, 2] lib/smbldap.c:smbldap_connect_system(796)
 failed to bind to server with dn= 
uid=administrator,ou=System,ou=People,dc=cpc Error: Invalid credentials

Regards,
Ben
_
Don't just search. Find. Check out the new MSN Search! 
http://search.msn.com/

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba, ldap and winbind - almost there!

2004-10-18 Thread Stephen
Hi All,
I'm in the process of setting up samba with ldap and winbind and haven't 
been able to find an article anywhere on how to do this. I've managed to 
troll together everything except the directory setup.

I'm stuck on what I need to add into the directory (ldif files) to make 
it all go. I've included the steps I took and so hopefully it'll be easy 
to spot what needs doing.

Here is where I'm up to so far and then below are the errors I'm getting.
1. System is Gentoo Linux with openldap 2.1.30,  samba 3.0.5. Working to 
an AD system on a Windows 2003 server.
[1a. Set up a working winbind system prior to adding LDAP to the mix 
then deleted /etc/samba/secrets.tdb, /var/cache/samba/*.tdb and run net 
ads leave]
2. /etc/slapd.conf. No openldap ACLs are defined as Winbind accesses the 
directory as root (I can tie it down later). Also, I haven't included 
the indexes for brevity.

include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/samba.schema
databasebdb
suffix  dc=abc,dc=local
rootdn  cn=Manager,dc=abc,dc=local
rootpw  password
3. smbpasswd -w password
4. Edited ldap.conf
host 127.0.0.1
base dc=abc,dc=local
binddn  cn=Manager,dc=abc,dc=local
bindpwpassword
pam_password exop
ssl no
5. Edit smb.conf and added
idmap backend = ldap:ldap://127.0.0.1
ldap suffix = dc=abc,dc=local
ldap idmap suffix = ou=idmap
ldap admin dn = cn=Manager,dc=abc,dc=local
7. net ads join -U administrator --- result was joined to the domain successfully
8. wbinfo -u and wbinfo -g work successfully
9. getent passwd and getent groups don't show domain accounts.
---
The winbind idmaps aren't being written to the directory
1. slapcat shows nothing at all
2. tail /var/log/syslog
	Oct 18 18:53:58 fluoron slapd[2030]: do_search: invalid dn(ou=idmap,dc=abc,dc=local)
	Oct 18 18:53:58 fluoron slapd[2030]: conn=4 op=842 RESULT tag=101 err=34 text=invalid DN
	Oct 18 18:53:58 fluoron slapd[2030]: do_search: invalid dn (ou=idmap,dc=abc,dc=local)
	Oct 18 18:53:58 fluoron slapd[2030]: conn=4 op=843 RESULT tag=101 err=34 text=invalid DN
	Oct 18 18:53:58 fluoron slapd[2030]: do_search: invalid dn (ou=idmap,dc=abc,dc=local)
3. tail /var/log/samba/log/smbd
	[2004/10/18 18:53:58, 1] nsswitch/winbindd_user.c:winbindd_getpwent(571) could not lookup domain user jack
	[2004/10/18 18:53:58, 1] nsswitch/winbindd_user.c:winbindd_fill_pwent(50) error getting user id for sid S-1-5-21-1949245599-2602856593-3224012141-4049
	[2004/10/18 18:53:58, 1] nsswitch/winbindd_user.c:winbindd_getpwent(571) could not lookup domain user jill
	[2004/10/18 18:53:58, 1] nsswitch/winbindd_user.c:winbindd_fill_pwent(50) error getting user id for sid 
S-1-5-21-1949245599-2602856593-3224012141-4052

-
I figured it needs some structure there and tried this...
$ cat  idmap.ldif
dn: ou=Idmap,dc=abc,dc=local
objectClass: organizationalUnit
ou: idmap
$ ldapadd -x -D cn=Manager,dc=abc,dc=local -W  /etc/openldap/idmap.ldif
Enter LDAP Password:
adding new entry ou=Idmap,dc=abc,dc=local
ldapadd: update failed: ou=Idmap,dc=abc,dc=local
ldap_add: Constraint violation (19)
additional info: structuralObjectClass: no user modification allowed
structuralObjectClass: organizationalUnit
-
Help would be really appreciated.
Thank you
Cheers
Stephen
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] cups logs ?

2004-10-18 Thread ip.guy
Doesn't anyone analise any cups logs ?

Hi all
What do you guys use for analyzing cups logs ?
I'm looking for a web based (apache style) log analyses tool
regards
-ipguy
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] cups logs ?

2004-10-18 Thread Jerome Alet
On Mon, Oct 18, 2004 at 05:20:07PM +1000, ip.guy wrote:
 Doesn't anyone analise any cups logs ?

You could ask this to the [EMAIL PROTECTED] mailing list instead.

Anyway, these logs, particularly the page_log file, can't be trusted,
because the page_log is only filled when the proper driver
is used on the client (a PostScript driver). And even in this
case the result can be incorrect.

I'd suggest you to use a real print accounting system for CUPS instead.

bye

Jerome Alet
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Group membership

2004-10-18 Thread Tarjei Huse
Wow! I think this is the best post I've seen on any mailinglist -ever- !

A minor comment/question:
 3. If you want the Domain Admins group to be able to manage your Samba servers 
 you must ensure that this group, or its members, somehow maps to the user 
 'root' or the group 'root' (GID=0, on some systems this maps to the group 
 'wheel').

So to add / remove users and join domains the vital part is not to have
uid0==0 but gid == 0? 

I've always thought that the only way to do this was to have a user with
uid 0. 

Geza Gemes: If you just want a set of users to add/remove users without
beeing root when doing other tasks, use LDAP. 

Tarjei


 
 You can either map Domain Admins to the GID=0 group on the UNIX system, or 
 as explained below, you can do this using the admin users parameter in the 
 smb.conf global section.
 
 You have choice in how UNIX admin capability is provided for domain users. 
 There are no right or wrong choices - but there are solutions that do or do 
 not work. If you fail to think through the chain of rights and privileges as 
 a user passes from a DMC to the domain then through to Samba and the UNIX OS 
 that hosts it, you will find the result frustrating. But if you can figure 
 out the simple steps from one point to another the solution is simple and 
 frustration will be avoided.
 
 If someone would care to review the appropriate chapters of the 
 Samba-HOWTO-Collection and suggest updates I will be happy to incorporate 
 them into the document.
 
 - John T.
 
 
 On Sunday 17 October 2004 05:29, Gémes Géza wrote:
  Hi everybody,
 
   Ok, the logic goes like this...
  
   If you want to use root for Domain administration purposes it has to
   be in the Domain user database.
   If it's a Domain user its primary group should be a Domain group.
   All Domain groups in Samba are mappings from UNIX groups into SIDs.
   If mapping for a particular gid is not present it will be created
   automatically using arithmetic approach.
  
   Therefore, if you want your root user to keep its primary gid but to
   be associated with a Domain group 'Domain Admins' the best approach
   will be to map this Domain group into UNIX group 'root' instead of
   creating additional UNIX group 'Domain Admins'.
  
   Another approach will be to use some other user to administer your
   Domain and put it into 'admin users' list in smb.conf then you will be
   free to choose any primary group for it you like just keep the
   consistency between gidNumber and sambaPrimaryGroupSID. All users in
   the 'admin users' list are forced into been root when they access
   Samba so you will have the same control you would have with root.
 
  Some things to note here:
  admin users is not generally the same as domain admins.
  Members of the domain admin group will have administrator privileges on
  a Windows (NT based) workstation, but no special rights on the Samba
  shares, nor the right to manipulate the users, groups, or machines,
  databases.
  Members of the admin users will be able to act as root to Samba (all
  privileges), but not necessary to be administrators, for the Windows
  workstations, only if they are also members of the Domain Admins group.
 
  I steel have some things not very clear to me: can I have a group added
  to admin users in the global section, while in the share definitions
  specify another admin users (e.g. admin users = root), limiting in this
  way their access to other users data, while giving them the possibility,
  to join machines to the domain?
 
   I don't know why this is not documented... I don't read documentation
   that often.. I do know though that Samba team welcomes all suggestions
   to make documentation better. If you know which part of the
   documentation got you confused - let them know how to make it more clear.
  
   Hope it helps,
   Igor
 
  Thanks,
 
  Geza
 
 -- 
 John H Terpstra
 Samba-Team Member
 Phone: +1 (650) 580-8668
 
 Author:
 The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
 Samba-3 by Example, ISBN: 0131472216
 Hardening Linux, ISBN: 0072254971
 OpenLDAP by Example, ISBN: 0131488732
 Other books in production.
-- 
Tarjei Huse [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba with ldap and digest-md5

2004-10-18 Thread Tarjei Huse
man, 18,.10.2004 kl. 06.40 +, skrev Ben Booble:
 Hi all,
 
 I am running samba-server-3.0.6-4.1.100mdk,  openldap-servers-2.1.25-6mdk, 
 lib64sasl2-plug-digestmd5-2.1.15-10.1.100mdk.  I have searched through the 
 lists and I am wondering if I am the only one doing this kind of set-up..
 
 Anyway question is as follows:  In my ldap server I have normal posix 
 accounts with plain text password that are sorted out by a sasl-regex in the 
 slapd.conf and that works well.  With smb, how does it handle passwords 
 between it and ldap and does anyone know of any special configuration 
 settings should be in place to get it to work?  I have read the IDEALX doco 
 and several contradictory ones so god knows which is right.  At the moment 
 the smb server sees the request from a client (adding a pc to the domain), 
 goes off to authenticate but comes back with invalid credentials for the 
 administrator user.   I am almost sure it is because of the way samba send 
 the password but I don't really know.
 
 I know more about ldap than I do about samba so I am hoping to get some 
 extra insight to how smb works.   Will samba work with sasl digest-md5 at 
 all?
No.
Samba uses it's own passwordhashes that are stored in the
sambaNTPassword and sambaLMpassword attributes to each user. The
passwordexchange between samba and the windowscomputers is done using
this passwordhash. So no digest-md5 there.

But: As samba doesn't relate to the userPassword attribute at all, you
may have digest-md5 for other uses, like mail etc.

Also, there is a patch to cyrus-sasl so that cyrus-sasl can use domain
to check if a user is authenticated. I haven't tested it, but if I've
understood the patch correctly then the patch may be used to grant
clients SSO to saslenabled services. (Abartlett: yes or no?)

Even if it doesn't do that, you'll get a more secure passwordexchange
than just plaintext for those clients.

Also, there's a module to Openldap 2.2.x that makes Openldap take over
the job of syncing passwords between the differen hashes stored in the
database. It might be worth looking at that.

Tarjei

 
 Here are relevant details from smb.conf:
security = user
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
 *passwd:*all*authentication*tokens*updated*successfully*
pam password change = yes
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd
   obey pam restrictions = yes
   domain master = yes
   local master = yes
   domain logons = yes
 add user script = /usr/share/samba/scripts/smbldap-useradd.pl '%u'
 delete user script = /usr/share/samba/scripts/smbldap-userdel.pl '%u'
 add user to group script = /usr/share/samba/scripts/smbldap-groupmod.pl -m 
 '%u' '%g'
 delete user from group script = /usr/share/samba/scripts/smbldap-groupmod.pl 
 -x '%u' '%g'
 set primary group script = /usr/share/samba/scripts/smbldap-usermod.pl -g 
 '%g' '%u'
 add group script = /usr/share/samba/scripts/smbldap-groupadd.pl '%g'  
 /usr/share/samba/scripts/smbldap-groupshow.pl %g|awk '/^gidNumber:/ {print 
 $2}'
 delete group script = /usr/share/samba/scripts/smbldap-userdel.pl '%g'
 
 passdb backend = ldapsam:ldaps://newser1.cpc.net.au smbpasswd guest
 ldap admin dn = uid=administrator,ou=System,ou=People,dc=cpc
 ldap port = 389
 ldap suffix = dc=cpc
 ldap machine suffix = ou=Hosts,ou=System
 ldap user suffix = ou=People
 ldap group suffix = ou=Group
 ldap machine suffix = ou=Hosts,ou=System
 ldap user suffix = ou=Utiba,ou=People
 ldap group suffix = ou=grpUtiba,ou=Group
 
 smb.log :
   ldap_connect_system: Binding to ldap server ldaps://newser1.cpc.net.au as 
 uid=administrator,ou=System,ou=People,dc=cpc
 [2004/10/19 01:54:31, 2] lib/smbldap.c:smbldap_connect_system(796)
   failed to bind to server with dn= 
 uid=administrator,ou=System,ou=People,dc=cpc Error: Invalid credentials
 
 Regards,
 
 Ben
 
 _
 Don't just search. Find. Check out the new MSN Search! 
 http://search.msn.com/
 
-- 
Tarjei Huse [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Experience on using Samba with XP SP2

2004-10-18 Thread Walter Willmertinger
We have problems with printing after installing XP SP2.
In nearly every software it takes about 10 seconds to 30 seconds, if you 
click on Print-Button and wait for the print dialogue window.
Extremly slow are programs like MS Word (30 seconds, when you open a 
document the first time).

Another problem, (but I am sure it's not a samba related problem): In 
some word documents you have problems viewing embedded graphics. 
Sometimes you see the graphics, sometimes not. It is not a problem with 
wrong settings (View - Use placeholders for Graphics). In preview there 
is no graphics, maybe after some scrolling the graphics appear, on the 
printout graphics are contained.

Samba installed is 3.0.7 (compiled on RH 9.0 with standard options)!
Regards, Walter
rruegner schrieb:
CHAN YICK WAI schrieb:
Just would like to ask if anyone has experience with Samba with XP 
SP2, can
you share with us?

Thanks,
Yw
Hi, for sure we share : it works
read the samba faqs for more info, and/or give us more detailed questions
Regards

--
Mit freundlichen Grüßen,
Dr. Walter Willmertinger
CONSYS Gesellschaft für Softwaretechnologie und Systementwicklung mbH
Dr. Walter Willmertinger
Landsberger Strasse 402   EMail: [EMAIL PROTECTED]
81241 MuenchenPhone: 089-589 789 0
Germany Fax: 089-589 789 99
WWW-Homepage: http://www.consys.de
So finden Sie zu uns: http://mail.map24.com/consys-muenchen
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba + AD + NIS

2004-10-18 Thread Martial Paupe
Hello,

I use UNIX/Linux machines, which are in a NIS domain and samba version 
2.x in NT4 domain.

The rights applied to the files systems are those of the NIS and the 
rights on the shares are those of NT4 domain.

I wish to obtain the same result with Samba3 integrated into Active 
Directory.  I succeeded has to integrate it into the AD with 
samba+winbind+MIT Kerberos 5. But not with NIS domain.

Je souhaite obtenir le même résultat avec Samba3 intégré à un Active 
Directory. J'ai réussi 100% AD avec samba+winbind+MIT kerberos 5.

Is there a solution?

-- 
Martial Paupe
IT Department

Kudelski Group|   Tel direct : +41 21 732 04 55
1033 Cheseaux |   E-mail : martial.paupeATnagra.com
Switzerland
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] script in netlogon isn't run

2004-10-18 Thread Patrick DUBAU
I did what Mattia and DA Forsyth said :
- using unix2dos command (thks Mattia  apt-get install sysutils works 
under Debian sarge) to have logon.bat in DOS format.
But the script still isn't played while logging.

New informations :
When i go to the share netlogon in network neighberhood i got the 
sand-glass for a long time, then  i launch logon.bat it takes about 6 
minutes to open a DOS windows and to run (the maping are then created).
Same behaviour when copying  logon.bat in the commun' share and try to 
launch it from there.


DA Forsyth a écrit :
On 14 Oct 2004 , Patrick DUBAU entreated about
[Samba] script in netlogon isn't run:
} i have samba 3.0.7 and set a logon.bat script in /home/samba/netlogon
} But when i log in my domaine (from a windows xp sp1 machine) Domi the
} script isn't run, no error  message   at log in Just going on the share
} netlogon i got the sand-hour and nothing more happens 

hi
you don't need to map anything to the netlogon share, Windows does 
this by itself, temporarily during login

make sure that the batch file is in DOS format not unix format.  I 
found that unix format won't run at all because it is read by Windows 
expecting a DOS format file.   I ensure this by setting up all my 
scripts via an 'editable' share on the netlogon folder by using a 
  write list = +admin
and I am a member of the 'admin' group
I do the mapping for this from the command line when I need it.

--
  DA Fo rsythNetwork Supervisor
Principal Technical Officer  -- Institute for Water Research
http://www.ru.ac.za/institutes/iwr/

 


--

Patrick DUBAU
IUFM d'Alsace -  Service Informatique : Parfois détruire, souvent construire, toujours 
Servir
200 avenue de Colmar 67100 STRASBOURG
Téléphone: 03.88.40.79.76
--
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] remove wins entries - samba 3

2004-10-18 Thread Gerald Griessner
Hi,
I'm using samba 3.0.7 as file server and WINS server.
We have a primary domain called BIKER which is working great.
Anyhow, for some testing purpose we are using different Workgroups now and 
then.
The problem is, those Workgroups stay in the Network Neighborhood 
although they are offline for quite a while.
When I'm moving a Workstation from a workgroup to the domain, it still 
stays available in the Workgroup.
Additionally when we switch off a Domain member for a few days it still 
stays in the Domain.

This is quite annoying since we now have tons of entries currently not used 
any more.
I was browsing the Net and the Mailing lists, ...
The only solution was remove wins.dat and browse.dat and restart samba
Despite that I'm not very happy with this solution in a productive 
environment, all the entries came back.

Is there a possibility to limit the network neighborhood to one 
domain/workgroup?
What is the best solution to permanently remove a workstation from the wins?

Thx in advance
 Gerald
p.s. here is my config (the relevant parts, ...):
wins support = yes
wins proxy =  no
domain master = yes
local master = yes
preferred master = yes
os level = 50
name resolve order = wins host
max ttl = 7200
max wins ttl = 7200
min wins ttl = 3600
dns proxy =  no
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Active directory

2004-10-18 Thread Roger Hall
What kind of changes have to be made to samba to work with active directory.

Roger Hall
Public Works
Information Resources
918-596-9454
email [EMAIL PROTECTED]


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem in SAMBA Installation Configuration

2004-10-18 Thread shailesh kale
Hello,

I m in the process of installing SAMBA3.07 in my
network.I have installed 1.2.4-1.krb5-devel,
krb5-libs,krb5-workstation.i have installed SAMBA
also.Now while testing the kerberos connection with
the command/usr/kerberos/bin/bin/kinit
[EMAIL PROTECTED] iget the following error
message

/usr/kerberos/bin/kinit:relocation error:
/usr/kerberos/lib/libkrb4.so.2:symbolerrno,
version
GLIBC_2.0not defined in file libc.so.6with link
time
reference.
Also when i try to bind it gives following message
Bindingtodomainwithcommand/usr/bin/netjoin-U
username-Sdomainname..

usernamepassword:
[2004/10/0717:13:16,0]
libads/kerberos.c:ads_kinit_password(136)
[EMAIL PROTECTED]
failed:Cannot find KDC for requested realm
[2004/10/0717:13:16,0]
utils/net_ads.c:ads_startup(183)
ads_connect:Cannot find KDC for requested realm
[2004/10/0717:13:16,0]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(256)
cli_nt_setup_creds:request challenge failed
[2004/10/0717:13:16,0]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(256)
cli_nt_setup_creds:request challenge failed
[2004/10/0717:13:16,0]
utils/net_rpc_join.c:net_rpc_join_newstyle(319)
Error domain join verification(reused
connection):
NT_STATUS_INVALID_COMPUTER_NAME

Unable to join domain

Also i am not able to run KINIT deamon.
Also when i try to telnet into my ADCserver with port
88 as it gives me the same error message.

[EMAIL PROTECTED]/usr/kerberos/bin/kinit
[EMAIL PROTECTED]
/usr/kerberos/bin/kinit:relocation error:
/usr/kerberos/lib/libkrb4.so.2:symbol errno,version
GLIBC_2.0not defined in file libc.so.6with link  time
reference

can anybody throw some light on this issue.Also pl.if
you can proide me some guidelines for correct
configuration  tests points i would be highly
obliged.

Shailesh




__
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
http://promotions.yahoo.com/new_mail 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] win98 and domain logins, Can't browse network

2004-10-18 Thread Carl Brewer
Hello,
I've just replaced an NT4 server with a NetBSD box running
Samba 3.0.7.
There's 2 win98 boxes on the network, which were logging into
the NT server, so I set up samba as :
[global]
   workgroup = BENFAB2
   log level = 1
   browsable = yes
   server string = Samba %v (%h)
   security = user
   hosts allow = 10.0.0. 127.
   load printers = yes
   printcap name = /etc/printcap
   printing = bsd
   log file = /var/log/samba/log.%m
   password level = integer
   passdb backend = smbpasswd
   interfaces = 10.0.0.1/24
   local master = yes
   domain master = yes
   preferred master = yes
   domain logons = yes
   logon path = \\%L\Profiles\%U
   wins support = yes
[homes]
   comment = Home Directories
   browseable = yes
   writable = yes
   valid users = %S
[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   guest ok = yes
   public = yes
   writable = no
   printable = yes
[print$]
comment = Printer Driver Download Area
path = /home/samba/drivers
browseable = yes
guest ok = yes
read only = yes
write list = @staff, root
[groups]
   path = /home/samba/groups
   writable = yes
   valid users = ben,administrator,irene
   public = no
   create mask = 0765
[netlogon]
path = /home/samba/netlogon
[Profiles]
path = /home/samba/profiles
browsable = yes
guest ok = yes
writable = yes
create mask = 0765

The 2 win98 boxes can log in to the domain (as far as I can tell), they
load their profiles into the profiles directory anyway.  They can
both mount the server shares if I do a manual mount of a filesystem,
they can use the printer that's set up on the samba server too.
But they can't browse, if I click on 'browse' in the win98 GUI,
I get errors telling me it can't see the network.  This would
be ok, except I need to share a printer on one of the PCs to the
other one, and I'd like it to 'work properly' for aesthetic
reasons.
I don't mind having to rejig the PCs to just use workgroups rather
than domain logins, if that's a 'better' way to do a pretty simple
network.  I was trying to reproduce the NT setup on the Sambe
server, but am not idealogically committed to it. Can anyone make a
suggestion for how to go about this?  I'm no samba wiz, I've cobbled
the config above from various howtos that seemed pretty close to
what I wanted to achieve, but I've made mistakes, I'm sure!
thanks!
Carl
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Experience on using Samba with XP SP2

2004-10-18 Thread Thomas Bork
Hallo,

 We have problems with printing after installing XP SP2.
 In nearly every software it takes about 10 seconds to 30 seconds, if you 
 click on Print-Button and wait for the print dialogue window.
 Extremly slow are programs like MS Word (30 seconds, when you open a 
 document the first time).

same problem here. This a known but _unresolved_ problem for Samba 3.0.7 and 2.2.12 - 
you can read about in the mailing list archive (read the complete threads):

http://marc.theaimsgroup.com/?l=sambam=109410258903823w=2
http://marc.theaimsgroup.com/?l=sambam=108006188614178w=2

Excerpt:
#

| Yes, but I was hoping for some way in Samba to make
| it timeout faster when it cannot connect back.
|
| Or some way to have 'disable spoolss' not stop downloading
| of drivers as this was still possible in the old days.

XP sp2 seems to be forcing the issue.  We'll have to code
a way to turn off the change notify functionality somehow.





cheers, jerry

#

It would be very nice, if the actual Samba versions 2.2.12/3.0.7 were not so painfully 
slow in printing with XP SP2 or XP SP1 with active XP-firewall. It's a real pain in 
the ass in production environments :(

Kindly regards
__
Mit WEB.DE FreePhone mit hoechster Qualitaet ab 0 Ct./Min.
weltweit telefonieren! http://freephone.web.de/?mc=021201

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem mapping to public share from XP

2004-10-18 Thread Swenson, Chris
I have a stand alone RH ES 3 server which handles student email and a home
directory for each student.  It is not linked to the Active Directory side
of my house and it does not need to be.  No student accounts are in Active
Directory.  They exist solely on this Server.

I am running Samba 3.0.4  (The upgrades after this have caused problems with
how I create accounts and set passwords)

Within this setup we have a share called Common that anybody is free to map
to and deposit or withdraw files.  There is no user name or password
required to reach this share.  The users should be able to browse to it.

The problem is on some PC's when I map the drive it works fine, I am not
prompted for a user name or password. 
On some PC's when I map the drive I am prompted for a user name and
password. (Win XP or home or W2k, it makes no difference)  
Any legit username/password combo on the server will work, but according to
the politics of the situation that is not sufficient.  IT must be no
username or password prompting.  I suspect it is something on the windows
side.

Here are some particulars.

# workgroup = NT-Domain-Name or Workgroup-Name
   workgroup = CURRYNET

# server string is the equivalent of the NT Description field
   server string = Stumail Server

# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the loopback interface. For more examples of the syntax see
# the smb.conf man page
  hosts allow = 192.168. 10.16. 127.

;  guest account = pcguest

# Cause this host to announce itself to local subnets here
;   remote announce = 192.168.1.255 192.168.2.44

[common]
path=/home/patches/common
public = yes
only guest = yes
writable = yes
printable = no

thanks for any advice.

Chris S.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind success BUT blank root password

2004-10-18 Thread Matt R
I have just gotten my samba machine, a SuSE 9.1
install, to work completely with my Win2k domain (in
my test network, anyway.)

However, after rebooting, I was unable to log into my
root account on the SuSE box.  In disgust, I tried to
login as root with no password.  Imagine my shock when
it worked.  Now, no matter how many times I reset my
root password, using passwd or SuSE's GUI tools, I can
only log into my root account with a blank password.

I'm guessing PAM is to blame, but I don't even know
where to start on this one.  Does anyone had any
ideas?

-Matt

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba causing high load

2004-10-18 Thread Vegard Hanssen
We have experienced some trouble with samba lately. The servers load going 
from 5 to 20 causing everything to go very slow, but when I use top to 
check which process could be the cause of the trouble nothing uses CPU 
cycles. We have about 90% idle CPU usage, but load from 5-20.

When I kill samba (service smb stop) the root-smb process still hangs and 
when I kill it (kill -9) the load goes back to normal (0.20). Then starting 
samba again and all is fine - for a couple of days.

Any suggestion to what I can check for? I have tried checking the open 
files, network traffic (pr IP too) but nothing unnormal shows up.

We're running samba-3.0.7-2.FC1
Vegard
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba 3.0.5 dying

2004-10-18 Thread Scott C Klimek

Samba seems to die now that we have an increase of users accessing it.  It
seems to lock up and I have to stop/start it. Here is my conf file.  Is
there something I am overlooking?  I am fairly new to SAMBA.

[global]
; [general settings]
   server string = Restricted Access File Server
   workgroup = unix-smb
;   netbios name = CAD
   wins server = 136.180.45.97
   lock directory = /opt/samba/var/locks
   log file = /opt/samba/var/samba.log
   log level = 2
   interfaces = 136.180.70.24/255.255.255.0
#   interfaces = 136.180.69.99/255.255.255.0
   bind interfaces only = yes
; [security settings]
   hosts allow = 136.180. 127.
   password server = is002906, is002907, is002908
   min protocol = NT1
   lanman auth = No

; [performance settings]
   dead time = 5
   max open files = 1000
   socket options = TCP_NODELAY SO_KEEPALIVE
   getwd cache = yes


 netbios aliases = cad caerh pub asd
; include = /opt/samba/lib/smb.conf.caerh
 include = /opt/samba/lib/smb.conf.%L





Scott Klimek
CSC - Unix Admin.
(586) 825-5701





This is a PRIVATE message. If you are not the intended recipient, please
delete without copying and kindly advise us by e-mail of the mistake in
delivery. NOTE: Regardless of content, this e-mail shall not operate to
bind CSC to any order or other contract unless pursuant to explicit written
agreement or government initiative expressly permitting the use of e-mail
for such purpose.




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Timestamp problem

2004-10-18 Thread Guillermo
Listing with -a

bash-2.03# ls -al
total 20096
drwxrwxrwx   2 dcenter  hermes 13312 Oct 18 09:48 .
dr-xr-xr-x  13 dcenter  hermes   512 Oct 14 17:03 ..
-rwxr--r--   1 jblanco  hermes30 Oct 18  2004 22626.log
-rwxr--r--   1 jblanco  hermes503011 Oct 18  2004 22626.pdf

See the different timestamps, first two entries (local and parent dir)
have timestamps with hour stamp in the ls command output.

The third and fourth entries do not shows hour stamp but only the date.

Our application sees the same problem and do not process the files
(the files has to have complete timestamps in order to be processed).
Those file were created just copying and pasting in a Windows machine in
our network to our Samba server.

Previously we were using ftp as the method to upload the files without
this issue so even considering i might not be completely understanding
what's going on, it's a Samba 3 file creation issue in my Solaris 8.

I really appreciate any help on this topic since the Samba is already in
production and users are complaining already.

regards

Guillermo


On Wed, 2004-10-13 at 06:10, Mac wrote:
 
 Hi
 
 When new files or copied files are putted in a Samba share (3.0.2
 Solaris) from Win clients, it has no time stamp, only date stamp,
 example:
 
 -rwxr--r--   1 me me 740762 Oct 11  2004 test.jpg
 
 This looks like an 'ls' command.
 
 Also, you have a slight misunderstanding of UNIX timestamps.
 
 Every file has a full time stamp with time and date. However,
 the 'ls' command shows the time stamp in one of two different ways:-
 
either 'Mon DD  '  or  'Mon  DD HH:MM'
 
 
 It chooses the second form if the file has been modified within
 the last three months.  It chooses the first form (with the year)
 if the file's modification time is not within the last three months.
 
 The important thing here is that when the time stamp on a file is _ahead_
 of the current time, then the 'within the last three months' test fails.
 
 I'll bet that you file has a timestamp that's further ahead in time than
 the system clock of the server you ran the 'ls' command on.
 
 
 Here's a rough timeline  ('the past' on the left, 'the future' on the right)
 
 
  +++N-
   321o
  w
 
   |--|   
 
 
 The number represent months.  The lower line is the period for which
 'ls' will display the 'Mon DD HH:MM' format.  I think the timestamp
 on your file is to the right of 'Now'.
 
 
 There's various things you can do to check this.  If your OS has
 a command 'stat' then that will show you all the timestamps in full detail.
 
 
 Or you can use the 'stat' function in perl maybe, or the stat(2) system call.
 
 Or, you can wait for a few hours, until the time on your server catches up
 with the timestamp on the file and then 'ls' will display what you're
 looking for.
 
 Remember all of this does not in any way affect the actual timestamp,
 just the way 'ls' presents it to you.
 
 
 
 The underlying problme is almost certainly one of time-syncing.  Or TimeZone
 differences.  Have a look at all of them.  And have a look at the timestamp
 from a client machine too.
 
 
 
 
Mac
   Assistant Systems Adminstrator @nibsc.ac.uk
 [EMAIL PROTECTED]
Work: +44 1707 641565  Everything else: +44 7956 237670 (anytime)


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Timestamp problem

2004-10-18 Thread Gabor Kiss [Bitman]
 bash-2.03# ls -al
 total 20096
 drwxrwxrwx   2 dcenter  hermes 13312 Oct 18 09:48 .
 dr-xr-xr-x  13 dcenter  hermes   512 Oct 14 17:03 ..
 -rwxr--r--   1 jblanco  hermes30 Oct 18  2004 22626.log
 -rwxr--r--   1 jblanco  hermes503011 Oct 18  2004 22626.pdf

 See the different timestamps, first two entries (local and parent dir)
 have timestamps with hour stamp in the ls command output.

 The third and fourth entries do not shows hour stamp but only the date.

These files probably have future timestamp.
Wait an hour or two and try it again.

Gabor
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] scrambled filename.

2004-10-18 Thread J . Martens




Hello there,

If i create a file starting with nul. via command shell access, example:
nul.txt or nul.blaat.txt
Samba show's this file scrambled, i've tested this on samba 3.04 on AIX and
FC2 Linux  samba 3.0.7-2.

My file nul.txt is showed via samba as: NDH6SA~M.TXT.

I have a default samba configuration:

[global]
workgroup = C3D-VR.COM
server string = C3D Samba Server
log file = /var/log/samba/%m.log
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
ldap ssl = no
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431

[homes]
comment = Home Directories
read only = No
browseable = No

Does somebody know how samba can show the file as it is?

With kind regards,

J. Martens

Lekkerland Nederland b.v.
Department ICT

E-mail: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] script in netlogon isn't run

2004-10-18 Thread Patrick DUBAU
I found a part of my problem why my logon.bat script wasn't run on loging.
I 've created my user with idealx tools like : smbldap-useradd -a -m -c 
Pat DUBAU pat and so the following fields where filed in ldap
   sambaLogonScript: pat.cmd
   sambaProfilePath: \\FS1\profiles\pat
   sambaHomePath: \\FS1\home\pat
   sambaHomeDrive: logondrive:
(configuration found in /etc/smbldap-tools/smbldap.conf)
It seems that samba won't take the instructions in smb.conf when this 
datas exists in LDAP...

So i have a question : what's the sense to put this information in samba 
fields in LDAP ? Is there a special reason ?

I removed this field from my ldap account. When i loging now the 
logon.bat script is run but VERY slowly (about 5 minutes)  for  just 2 
mappings!
The network drives are created.

Second question :  why is it so long for the script to be run ? also 
when i click on the netlogon share then on an another share i still have 
the sand-hour for several minutes (not when i go from share 'commun' at 
share 'prothee

thanks for any help
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] User authentication on XP workstations from remote Domain

2004-10-18 Thread opk Bronislav
Dear All,
I have a problem with authentication on XP workstaions from trusted domain. 
I have two domains:
domaina   servera trusting domain

domainb   serverb trusted domain

When I try to logon the user from domainb on XP workstation(in domaina) it gave
me a fail but when I write on servera:

smbclient -L servera -W DOMAINB -U user

the authenticaton is succeded and after then I authenticate user on XP
workstations to. I thing that is the problem in creating unix account on
servera for user from domainb.

Thank you, Sopik Bronislav
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Group membership

2004-10-18 Thread Gémes Géza
Tarjei Huse írta:
Wow! I think this is the best post I've seen on any mailinglist -ever- !
A minor comment/question:
 

3. If you want the Domain Admins group to be able to manage your Samba servers 
you must ensure that this group, or its members, somehow maps to the user 
'root' or the group 'root' (GID=0, on some systems this maps to the group 
'wheel').
   

So to add / remove users and join domains the vital part is not to have
uid0==0 but gid == 0? 

I've always thought that the only way to do this was to have a user with
uid 0. 

Geza Gemes: If you just want a set of users to add/remove users without
beeing root when doing other tasks, use LDAP. 

Tarjei
 

Sorry, but IMHO you are wrong at this point joining a machine to a 
domain with on the fly machine account creation relies on the fact of 
being root (uid=0), anyway I'm using LDAP from some years, and manage 
users and groups via scripts, and gived (via sudo) that right to the 
mentioned group.

Thanks,
Geza Gemes
You can either map Domain Admins to the GID=0 group on the UNIX system, or 
as explained below, you can do this using the admin users parameter in the 
smb.conf global section.

You have choice in how UNIX admin capability is provided for domain users. 
There are no right or wrong choices - but there are solutions that do or do 
not work. If you fail to think through the chain of rights and privileges as 
a user passes from a DMC to the domain then through to Samba and the UNIX OS 
that hosts it, you will find the result frustrating. But if you can figure 
out the simple steps from one point to another the solution is simple and 
frustration will be avoided.

If someone would care to review the appropriate chapters of the 
Samba-HOWTO-Collection and suggest updates I will be happy to incorporate 
them into the document.

- John T.
On Sunday 17 October 2004 05:29, Gémes Géza wrote:
   

Hi everybody,
 

Ok, the logic goes like this...
If you want to use root for Domain administration purposes it has to
be in the Domain user database.
If it's a Domain user its primary group should be a Domain group.
All Domain groups in Samba are mappings from UNIX groups into SIDs.
If mapping for a particular gid is not present it will be created
automatically using arithmetic approach.
Therefore, if you want your root user to keep its primary gid but to
be associated with a Domain group 'Domain Admins' the best approach
will be to map this Domain group into UNIX group 'root' instead of
creating additional UNIX group 'Domain Admins'.
Another approach will be to use some other user to administer your
Domain and put it into 'admin users' list in smb.conf then you will be
free to choose any primary group for it you like just keep the
consistency between gidNumber and sambaPrimaryGroupSID. All users in
the 'admin users' list are forced into been root when they access
Samba so you will have the same control you would have with root.
   

Some things to note here:
admin users is not generally the same as domain admins.
Members of the domain admin group will have administrator privileges on
a Windows (NT based) workstation, but no special rights on the Samba
shares, nor the right to manipulate the users, groups, or machines,
databases.
Members of the admin users will be able to act as root to Samba (all
privileges), but not necessary to be administrators, for the Windows
workstations, only if they are also members of the Domain Admins group.
I steel have some things not very clear to me: can I have a group added
to admin users in the global section, while in the share definitions
specify another admin users (e.g. admin users = root), limiting in this
way their access to other users data, while giving them the possibility,
to join machines to the domain?
 

I don't know why this is not documented... I don't read documentation
that often.. I do know though that Samba team welcomes all suggestions
to make documentation better. If you know which part of the
documentation got you confused - let them know how to make it more clear.
Hope it helps,
Igor
   

Thanks,
Geza
 

--
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668
Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
OpenLDAP by Example, ISBN: 0131488732
Other books in production.
   

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Incorrect function with Windows XP offline files

2004-10-18 Thread Tom Laermans
Hello,
One of our users is trying to use the function Make available offline 
to locally store and sync some files on one of our network shares. 
However, since he upgraded to Windows XP (from Windows 2000), he now 
gets the error Incorrect function and no files are synched 
(directories are, however).

Our samba version is 3.0.7 (well, 3.0.7-0.backports.org.1 on debian to 
be exact).

Something that *might* be the cause is that that PC has Windows XP SP2 
installed, while others (where the synchronizing works) are Windows XP SP1.

Any pointers? Is this a bug? Did microsoft introduce something new in 
SP2 again which breaks Samba?

Thanks,
--
Tom Laermans
System Administrator
Luciad NV
Parijsstraat 74, 3000 Leuven, Belgium
Email   [EMAIL PROTECTED]
Web http://www.luciad.com
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba with ldap and digest-md5

2004-10-18 Thread Tarjei Huse
Hi again,
 Also, there is a patch to cyrus-sasl so that cyrus-sasl can use domain
 to check if a user is authenticated. I haven't tested it, but if I've
 understood the patch correctly then the patch may be used to grant
 clients SSO to saslenabled services. (Abartlett: yes or no?)
Just for the record. Abartlet answered yes on this question.

Tarjei
 Even if it doesn't do that, you'll get a more secure passwordexchange
 than just plaintext for those clients.
 
 Also, there's a module to Openldap 2.2.x that makes Openldap take over
 the job of syncing passwords between the differen hashes stored in the
 database. It might be worth looking at that.
 
 Tarjei
 
  
  Here are relevant details from smb.conf:
 security = user
 encrypt passwords = yes
 smb passwd file = /etc/samba/smbpasswd
 unix password sync = Yes
 passwd program = /usr/bin/passwd %u
 passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
  *passwd:*all*authentication*tokens*updated*successfully*
 pam password change = yes
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
obey pam restrictions = yes
domain master = yes
local master = yes
domain logons = yes
  add user script = /usr/share/samba/scripts/smbldap-useradd.pl '%u'
  delete user script = /usr/share/samba/scripts/smbldap-userdel.pl '%u'
  add user to group script = /usr/share/samba/scripts/smbldap-groupmod.pl -m 
  '%u' '%g'
  delete user from group script = /usr/share/samba/scripts/smbldap-groupmod.pl 
  -x '%u' '%g'
  set primary group script = /usr/share/samba/scripts/smbldap-usermod.pl -g 
  '%g' '%u'
  add group script = /usr/share/samba/scripts/smbldap-groupadd.pl '%g'  
  /usr/share/samba/scripts/smbldap-groupshow.pl %g|awk '/^gidNumber:/ {print 
  $2}'
  delete group script = /usr/share/samba/scripts/smbldap-userdel.pl '%g'
  
  passdb backend = ldapsam:ldaps://newser1.cpc.net.au smbpasswd guest
  ldap admin dn = uid=administrator,ou=System,ou=People,dc=cpc
  ldap port = 389
  ldap suffix = dc=cpc
  ldap machine suffix = ou=Hosts,ou=System
  ldap user suffix = ou=People
  ldap group suffix = ou=Group
  ldap machine suffix = ou=Hosts,ou=System
  ldap user suffix = ou=Utiba,ou=People
  ldap group suffix = ou=grpUtiba,ou=Group
  
  smb.log :
ldap_connect_system: Binding to ldap server ldaps://newser1.cpc.net.au as 
  uid=administrator,ou=System,ou=People,dc=cpc
  [2004/10/19 01:54:31, 2] lib/smbldap.c:smbldap_connect_system(796)
failed to bind to server with dn= 
  uid=administrator,ou=System,ou=People,dc=cpc Error: Invalid credentials
  
  Regards,
  
  Ben
  
  _
  Don't just search. Find. Check out the new MSN Search! 
  http://search.msn.com/
  
 -- 
 Tarjei Huse [EMAIL PROTECTED]
 
-- 
Tarjei Huse [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problems with Samba on Mandrake

2004-10-18 Thread Kristiaan Davies
Hello just to let everyone know ima using

Linux 9.2 installed via FTp from a Mandrake Mirror using inbuilt version of samba that 
came with it.

the problem i have got is this i cannot get the PC to showup on my windows network 
it`s configured and if i use the internal IP address i acn access all the shares as 
normal i have changed the Samba name a few times and as a result somehow have three 
names on my workgroup display Lulu1, Lulus and Linux none of these are accessable and 
none of them show any file shares not to mention this i still have another workgroup 
MDKgroup which is not accessable and i assume has no PC`s in it, my question is howdo 
i setup the PC to show on my workgroup and give me access to it from

\\lulu\ NOT \\10.0.0.163\ which is the only way i can currently access the machine
 i`m also a Linux newbie so if you want to know anything techincal you`ll have to let 
me know what i need todo to get it.


thanks
Kris

p.s. this is very urgent as my present fileserver is`nt working and i`m trying to get 
this setup to replace it
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] connecting to resource IPC$ problems -samba 2.2.8

2004-10-18 Thread Steve G
Hello,

Sorry to bother you but I found your question from back in 2003 at 
http://lists.samba.org/archive/samba/2003-April/064960.html  

and wondered if you ever sorted it as I have simulair problems myself this week 
between XP-SP2 and an older Win98SE machine.

regards
Steve G

  hello I am running Samba 2.2.8 (latest) that I downloaded the 
  binary
  from the Samba site. I have this problem in older versions of 
  Samba as well.
  I have under Redhat 8.0

  security level = user
  works fine under NT/2000/XP platforms,
  but when I try to login from a Windows 95/98/98se/Me machine,
  samba prompts me for a password to resource  \\netbiosname\IPC$

  how do I prevent this from happening in 95/98/se/me platforms
  and have it prompt the user for an id and password like it does
  in XP?

  I have about exhausted every option, I tried enabling domain 
  master,
  I tried enabling wins logons, I tried enabling domain master, 
  etc,
  nothing seems to have any affect :( still same problem.

  any ideas?? anyone?

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] change password AS_ROOT=FALSE

2004-10-18 Thread rick talbot
Using Samba 3.07 i wanna the passwd program to be run as the user.
Is this possible ?


Here's my smb.conf the general section of my smb.conf.

log level = 100
passwd program = passwd %u
passwd chat = *old*password*%o\n *new*password*%n\n *new*password*%n\n *
passwd chat debug = true
unix password sync = yes


Doing it this way forces samba to change it as root, and this is giving me 
another problem.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Intermittent failed logon for one computer

2004-10-18 Thread Daniel Gapinski
Hello, 
 
We have been using Samba 3.0.7 for almost a month now, and today marks
the second time that I see a machine (one out of twelve on our network
that gives this error when I log in:
 
 The system cannot log you on to this domain because the system's
computer account in its primary domain is missing or the password on
that account is incorrect.
 
Last time this happened, I thought it might be a problem with that
computer needing to be removed and then rejoined to the domain, which
didn't work (the user still was not able to log on), and then half an
hour later, the user could log on again. 
 
Can anybody tell me what might be wrong - on other posts it looks like a
problem with the guest account (nobody), but specifying the nobody
account as guest doesn't seem to help (though I did check to make sure
that a nobody account in fact existed). 
 
I should mention that the 2 computers that had this problem are on a
subnet (192.168.1.0). I am sending my smb.conf as a post script. Thanks
for your help!!!
 
My best, 
Dan Gapinski
 
[global]
;
;+ Server Settings  +
;
 workgroup = QUASAR
 netbios name = Jupiter
 server string = QSI Office Server %v
 hosts allow = 192.168.1. 192.168.0. 192.168.2. 192.168.3. 192.168.4.
127.0.0.1
 log level = 2
 log file = /var/log/samba/%m.log
 max log size = 0
 time server = yes
 
;
;+ Domain Settings  +
;
 os level = 35
 domain logons = yes
 
;
;+ Browse Settings  +
;
 domain master = yes
 local master = yes
 preferred master = yes
 remote browse sync = 192.168.1.255 192.168.2.255 192.168.3.255
192.168.4.255
 remote announce = 192.168.1.255 192.168.2.255 192.168.3.255
192.168.4.255
 
;
;+ WINS Settings  +
;
 wins support = yes
 guest ok = yes
 dns proxy = no
 
;
;+ User and Security Settings   +
;
 logon drive = z:
 logon home = 
 logon path = 
 encrypt passwords = yes
 smb passwd file = /etc/samba/smbpasswd
 username map = /etc/samba/smbusers
 min password length = 3
 guest account = nobody
 
;++
;+ added 10-Sep-2003 for file server support  +
;++
# admin users = @public
 nt acl support = yes
 security mask = 0777
 force security mode = 0
 directory security mask = 0777
 force directory security mode = 0
 
;++
;+ Management Scripts   +
;++
 add user script = /usr/sbin/useradd -m %u
 delete user script = /usr/sbin/userdel -r %u
 add group script = /usr/sbin/groupadd %g
 delete group script = /usr/sbin/groupdel %g
 add user to group script = /usr/sbin/usermod -G %g %u
 add machine script = /usr/sbin/useradd -d /dev/null -g machines -s
/bin/false -M %u
 
;++
;+ Logon Scripts   +
;++
# NOTE: SAMBA CAN ONLY RUN ONE SCRIPT AT A TIME!
# run a general logon batch file for everyone
 logon script = logon.bat
# run a specific logon batch file per workstation (machine)
#logon script = %m.bat
# run a specific logon batch file per username
#logon script = %U.bat
 
;++
;+ General Share Settings +
;++
 preserve case = yes
 short preserve case = no
 default case = lower
 case sensitive = no
 
(then the share settings...)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] can mount share, cannot join domain

2004-10-18 Thread jason kawaja
On Thu, 14 Oct 2004, jason kawaja wrote:

 On Thu, 14 Oct 2004, jason kawaja wrote:

  On Thu, 14 Oct 2004, Anton K. wrote:
 
   jason kawaja wrote:
  
   On Tue, 12 Oct 2004, jason kawaja wrote:
   
   i am not using ldap.  samba 3.0.7 on sparc solaris.  winxp pro client.
 
  /usr/local/samba/var/log.smbd:  check_ntlm_password:  authentication for
  user [root] - [root] - [root] succeeded
 
  which im assuming means root authenticated.

 log.smbd on another attempt to join domain (log level=5) :

 [2004/10/14 10:44:36, 5] lib/username.c:Get_Pwnam_internals(251)
   Get_Pwnam_internals didn't find user [kobile$]!
 [2004/10/14 10:44:36, 3]
 rpc_server/srv_samr_nt.c:_samr_create_user(2251)
   _samr_create_user: winbind_create_user(kobile$) failed

 is that perhaps the problem? kobile is the machine attempting to join.

im sure that is why, anyhow...

i manually created the /etc/passwd (manually entered the add user
script from conf file) and smbpasswd entry for kobile$ (smbpasswd -a -m
kobile$) and am able to join domain now, although that does not explain
why the add user script was not working to begin with.

--
Jason Kawaja
http://www.ietf.org/rfc/rfc1855.txt
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] offline files sync delay and Windows XP SP2

2004-10-18 Thread David Black
I'm scratching my head at the following issue that surfaced with Windows 
XP Prof. + SP2.  First, a summary of my configuration:

. Running Samba 3.0.7 in a LDAP-based PDC configuration, and with 
separate machine as member server for home directories.
. The OS for PDC is Mandrake 9.2, the file server (FILES) is Mandrake 10.0.
. 1000BaseT Ethernet.

With XP SP1 and Samba 3.0.7 or prior, offline files work normally.  
Immediately after the application of SP2, about a minute delay (~67 
seconds) is seen before the offline files sync operation actually does 
anything.   This is easily replicated - back out SP2, delay goes away.   
Reapply it, delay reappears.  I've found no other leads on this issue so 
far.  Some facts:

. Behaves same way in SP2 whether client Windows firewall is enabled or 
disabled.  In fact, I have it enabled in SP1 and offline files work 
fine.  In any case, nothing is logged as being blocked when it was on 
and logging enabled.
. I also see nothing odd in packet captures - the client just seems to 
sit there; no network traffic is seen while it pauses, nor is there any 
obvious unreplied-to query from the client.
. Doesn't matter whether the target server is FILES or PDC.  (I have 
shares and offline files enabled on both/either.)
. No problems accessing network drives with either SP - this just 
affects offline files sync.

Searching the samba archives, the closest issue noted has to do with 
similar delays waiting to print and something about the client expecting 
a connection back, and mention of it being an unresolved issue in Samba 
3.0.7 and 2.2.12.  Maybe related?

My smb.conf files for the pdc and file server are attached FYI.   They 
both run in a high-availability configuration and so are set to talk 
only on their respective HA interfaces (caused no problems of itself).

Thanks in advance for any help.
Dave
[global]
workgroup = MYDOMAIN
netbios name = FILES
server string = Samba Server %v
interfaces = 192.168.10.232
security = DOMAIN
map to guest = Bad User
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = No
wins server = 192.168.10.230
ldap ssl = no

[homes]
comment = Home Directories
read only = No
browseable = No

[temp]
comment = Temporary file space
path = /ha3/tmp
read only = No
guest ok = Yes
[global]
workgroup = MYDOMAIN
netbios name = PDC
server string = Samba Server %v
interfaces = 192.168.10.230
map to guest = Bad User
private dir = /ha1/etc/samba
passdb backend = ldapsam:ldap://ldap.mydomain.com
pam password change = Yes
username map = /ha1/etc/samba/smbusers
lanman auth = No
log level = 1
log file = /var/log/samba/log.%m
time server = Yes
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192 
SO_KEEPALIVE
add user script = /usr/share/samba/scripts/smbldap-useradd.pl -amn 
delete user script = /usr/share/samba/scripts/smbldap-userdel.pl 
add group script = /usr/share/samba/scripts/smbldap-groupadd.pl -p 
delete group script = /usr/share/samba/scripts/smbldap-groupdel.pl 
add user to group script = /usr/share/samba/scripts/smbldap-groupmod.pl -m 
delete user from group script = /usr/share/samba/scripts/smbldap-groupmod.pl 
-x 
set primary group script = /usr/share/samba/scripts/smbldap-usermod.pl -g 
add machine script = /usr/share/samba/scripts/smbldap-useradd.pl -w 
logon script = LOGON.BAT
logon path = 
logon drive = H:
logon home = \\files\%U
domain logons = Yes
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
ldap admin dn = uid=admin,dc=mydomain,dc=com
ldap group suffix = ou=Groups
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=mydomain,dc=com
ldap ssl = no
ldap user suffix = ou=Users
printer admin = @adm

[netlogon]
comment = Network Logon Service
path = /ha1/var/lib/samba/netlogon
write list = admin
guest ok = Yes
browseable = No

[web]
comment = Internal web root
path = /ha1/var/www
read only = No

[shared]
comment = Shared File Space
path = /ha1/var/www/html/shared
read only = No

[software]
comment = Software Downloads
path = /ha1/var/www/html/dl
read only = No

[printers]
comment = All Printers
path = /ha1/var/spool/samba
create mask = 0700
guest ok = Yes
printable = Yes
browseable = No

[print$]
path = /ha1/var/lib/samba/printers
write list = @adm, root
guest ok = Yes


[Samba] W2k Permissions to Samba Share- ACE convert to posix Failed

2004-10-18 Thread Matías Barletta
Guys. I did find when trying to set up permissions within W2k to a Samba
Shared File, I get access denied, 
My Conf is Suse 9.1 Pro Samba 3.0.7 (ACL support)  Reiserfs with ACL
support - Winbind works great - Everything smooth
The file has only 4 ACL, so its not a problem of amount of ACLs in the
file.

but I can see that log message says...
 Too many ACE entries for file . to convert to posix perms.
-- I say... they are not so many!

The log Message shows this

[2004/10/18 09:13:40, 3] passdb/lookup_sid.c:fetch_uid_from_cache(173)
  fetch uid from cache 1 -
S-1-5-21-538738344-134243190-1478062314-1003
[2004/10/18 09:13:40, 3] passdb/lookup_sid.c:fetch_uid_from_cache(173)
  fetch uid from cache 1 -
S-1-5-21-538738344-134243190-1478062314-1003
[2004/10/18 09:13:40, 3] smbd/dosmode.c:unix_mode(111)
  unix_mode(.) returning 0744
[2004/10/18 09:13:40, 3]
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2506)
  convert_canon_ace_to_posix_perms: Too many ACE entries for file . to
convert to posix perms.
[2004/10/18 09:13:40, 3] smbd/posix_acls.c:set_nt_acl(3147)
  set_nt_acl: failed to convert file acl to posix permissions for
file ..
[2004/10/18 09:13:40, 3] smbd/error.c:error_packet(105)
  error string = Function not implemented
[2004/10/18 09:13:40, 3] smbd/error.c:error_packet(129)
  error packet at smbd/nttrans.c(2020) cmd=160 (SMBnttrans)
NT_STATUS_ACCESS_DENIED

Thanks!!!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Intermittent Network name cannot be found error when accessing XP roaming profile

2004-10-18 Thread David Wilson
Hi guys,
How are you ?
I've installed samba-3.0.7 from source on a Slackware Linux 10.0 server 
configured with --with-ldap as a backend (OpenLDAP-2.2.13) and with 
nss_ldap installed. I have my profiles share configured as follows:
[profiles]
comment = Profile Share
path = /data/profiles
writeable = yes
guest ok = yes
browseable = no
profile acls = yes
csc policy = disable

Permissions on a user's profile folder:
drwxrwxr-x  12 pupil Domain Admins 424 2004-10-14 13:46 pupil
Most of the time logins from Windows X.P. (SP1) PCs work perfectly and 
the roaming profile comes across, however sometimes an error Cannot 
access roaming profile ... ... .. network name cannot be found 
comes up.
The error is intermittent and does not seem to stick to any sort of 
pattern. I've looked all over and found that other people have 
experienced the same problem but I can't seem to find a solid fix for it.
Perhaps installing X.P. Service Pack 2 will sort it out ?

Can anyone point me in the right direction on how I can resolve this 
problem ?
Thank you for your time.

David.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] domain member problem

2004-10-18 Thread ARamos
Hi...
 
I've installed samba3 from source onto a SuSE 8.1 system... I didn't do
anything special when compiled, just a regular ./configure; make; make
install... 
 
Now I added the following to the smb.conf file...
 
security = domain
workgroup = tssi
password server = orl-fps
netbios name = testbed
server string = testbed (Samba3 source)
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
preferred master = No
local master = No
domain master = No
dns proxy = No
idmap uid = 1-2
idmap gid = 1-2
winbind separator = +
winbind cache time = 15
ldap ssl = no
log level = 2
os level = 10
 
[Tomcat]
path = /var/lib/tomcat
comment = Tomcat
browseable = yes
read only = No
guest ok = no
writeable = yes
 
[homes]
comment = Home Directories
valid users = %S
browseable = no
read only = No
guest ok = no
writeable = yes
 
[profiles]
path = /home/samba/profiles
profile acls = yes
writeable = yes
browseable = no
guest ok = yes
 
[tmp]
comment = Temporary file space
path = /tmp
read only = no
public = yes

 
Then started smbd and winbindd
 
Did the following to join the server to the domain...
 
net join -S TSSI -Uaramos
 
It gives me the following ...
 
Unable to find a suitable server
 
Unable to find a suitable server

With the same configuration on a SuSE 9.1 server that already comes with
samba3 worked fine, is there an option I should add when compiling or
something in the conf file that I have to add in the source?  I've been
trying to figure it out for the last couple of weeks on my own with no
success, so I'm asking for help!!! 

Alvin Ramos 
Operations 
___ 
eSchool Solutions, Inc. 
3330 Edgewater Drive 
Orlando, FL 32804 
407.835.9899 Ext. 258 
407.405.2676 Cell 
407.835.9838 Fax 

 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Group problems and at my wits' end!

2004-10-18 Thread Misty Stanley-Jones
Hi,

I posted before that I was having problems with root showing up as a member of 
GID 1001 which I had set to 'engr'.  Someone sent me an email saying that 
this was because gid=0 was also trying to map to RID=1001.  Well, ok.  So I 
made an explicit mapping from gid=0 to rid=0.  I don't want Domain Admins 
to also be gid=0.  It seems like it could cause more damage.  So I have a 
grup mapping from gid=512 to rid=512 (Domain Admins).  It always worked 
before.  Everything worked except for the weird problem of root putting 
itself into rid=1001.

Well, now after all of my messing around and changing things, I can't even 
join a Windows 2000 workstation to the domain.  I get The user name could 
not be found.  I am using 'root' and the password for root.  This same 
username and password works just fine with smbclient command which tells me 
that root is still in the database.  And root still shows up as a member of 
Domain Admins.  

The funny thing is that I even restored the LDAP db from before I started 
messing with things and even then, it doesn't work.  Something has happened 
to my root user in Samba, from me messing around with mappings, and I don't 
know what it is.  Any help is greatly appreciated in debugging.  I have 
looked at the level 10 debug log and I get nothing useful.  The closest thing 
I see is:
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] HELP: samba ldap pdc - windows xp problem

2004-10-18 Thread Martynas
Hello,

I configured samba+ldap+nss_ldap on fedora 2 like PDC.
Now I have problem: windows XP joins domain, after that it asks to reboot,
and after reboot user cannot login to domain (it gets error on windows,
like wrong username or password). But in smaba log I see, that auth was
successful: [2004/10/18 19:51:09, 3] auth/auth.c:check_ntlm_password(268)
  check_ntlm_password: sam authentication for user [adamsas] succeeded

So, could you help me? What is the problem there?

regards,
Martynas Bieliauskas




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba Errors in my log file

2004-10-18 Thread Elijah Savage
 Just for others to know.

I am not sure why this has made m errors go away in my log files and
also fixed my speed issue when copying from the samba server to my
clients but it did.

I added this

server signing = auto

To my smb.conf and it fixed bot the speed issue and the errors below I
pasted in my first email. I was read the Samba book and was reading
about signing and just decided to see what affect this might have little
did I know it would resovle my issues.

Just FYI

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Of Elijah Savage
Sent: Thursday, October 14, 2004 11:29 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Samba Errors in my log file

FreeBSD 4.10
Latest version of Samba
Domain Member
WinXP machines with SP2

Why do these errors continue to come up, it does not seem to be hurting
a thing as the box is working perfectly no complaints other than these
errors in my log file.

Oct 14 16:07:00 ns1 smbd[82463]:   getpeername failed. Error was Socket
is not connected
Oct 14 16:07:00 ns1 smbd[82463]: [2004/10/14 16:07:00, 0]
lib/util_sock.c:write_socket_data(430) 
Oct 14 16:07:00 ns1 smbd[82463]:   write_socket_data: write failure.
Error = Broken pipe
Oct 14 16:07:00 ns1 smbd[82463]: [2004/10/14 16:07:00, 0]
lib/util_sock.c:write_socket(455) 
Oct 14 16:07:00 ns1 smbd[82463]:   write_socket: Error writing 4 bytes
to socket 22: ERRNO = Broken pipe
Oct 14 16:07:00 ns1 smbd[82463]: [2004/10/14 16:07:00, 0]
lib/util_sock.c:send_smb(647) 
Oct 14 16:07:00 ns1 smbd[82463]:   Error writing 4 bytes to client. -1.
(Broken pipe
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Errors in my log file

2004-10-18 Thread Jeremy Allison
On Mon, Oct 18, 2004 at 02:55:17PM -0400, Elijah Savage wrote:
  Just for others to know.
 
 I am not sure why this has made m errors go away in my log files and
 also fixed my speed issue when copying from the samba server to my
 clients but it did.
 
 I added this
 
 server signing = auto
 
 To my smb.conf and it fixed bot the speed issue and the errors below I
 pasted in my first email. I was read the Samba book and was reading
 about signing and just decided to see what affect this might have little
 did I know it would resovle my issues.

This has the side effect of turning off sendfile (as we have to read
the entire reply before signing) which is probably what fixed your
problem...

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba Errors in my log file

2004-10-18 Thread Elijah Savage
So is this something I should need to do? I guess I need to read up on
sendfile because I am not sure why this would improve my speed one way
and make the errors go away.

The speed issue I had was all clients no matter O/S could copy or move
via drag and drop to the samba machine very quickly it has a gig'e'
connection. But try to pull that same file back to the client using the
same method and it took 5 times longer.

-Original Message-
From: Jeremy Allison [mailto:[EMAIL PROTECTED] 
Sent: Monday, October 18, 2004 2:58 PM
To: Elijah Savage
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Samba Errors in my log file

On Mon, Oct 18, 2004 at 02:55:17PM -0400, Elijah Savage wrote:
  Just for others to know.
 
 I am not sure why this has made m errors go away in my log files and 
 also fixed my speed issue when copying from the samba server to my 
 clients but it did.
 
 I added this
 
 server signing = auto
 
 To my smb.conf and it fixed bot the speed issue and the errors below I

 pasted in my first email. I was read the Samba book and was reading 
 about signing and just decided to see what affect this might have 
 little did I know it would resovle my issues.

This has the side effect of turning off sendfile (as we have to read the
entire reply before signing) which is probably what fixed your
problem...

Jeremy.


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Error in documentatio in interdomain trust relationships

2004-10-18 Thread Gustavo Lima
  Dear development team of samba,

Reading over and over again samba docs, trying to solve a unstable trust
relationship problem, I found
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/InterdomainTrusts.html#id2546222

Adding the machine account with smbldap-useradd.pl -w domain_name just
creates it but no samba attributes are added.

You need to add the samba attributes with the command smbldap-usermod -a
domain_machine$ to solve it.

Here in my servers just worked this way.

If Im wrong please correct me.

Gustavo


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] W2K can't join 3.0.7 domain

2004-10-18 Thread Misty Stanley-Jones
I've got an unpatched W2K Pro system and I'm trying to join it to the 3.0.7 
domain.  I put in root and root's password for the domain administrator.  The 
root user's uid is 0 and root is in Domain Users and works for logging into 
other workstations in the domain.

W2K reports User not found when I try to join the domain.  However, the 
machine account is indeed created in LDAP!  But the machine doesn't think it 
has joined.

I saw some references to problems with the 'nobody' account in W2K.  I have a 
Domain Guests group RID 514 mapped to UNIX GID 514.  The GID exists on the 
domain only.  THe mapping shows up in the 'net' command.

Even on that W2K machine, I can browse the domain through Network Places.  So 
it is some other user that is not found.  Maybe the machine name isn't 
found??  I looked in the LDAP and Samba logs and I see nothing.  Here is my 
Add machine script line:
add machine script = /usr/local/sbin/smbldap-useradd -w %u
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Intermittent Network name cannot be found error when accessing XP roaming profile

2004-10-18 Thread David Wilson
Further to my email earlier
I've come across 
http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html#id2577285
This explains that a group policy must be set up so that Do not check 
for user ownership of Roaming Profile Folders is enabled.
Does anyone know of another way to do this other than doing it through 
active directory or on each XP workstation ?
Could this be what's causing the problem I'm experiencing ?

Thank you in advance.
David.

David Wilson wrote:
Hi guys,
How are you ?
I've installed samba-3.0.7 from source on a Slackware Linux 10.0 
server configured with --with-ldap as a backend (OpenLDAP-2.2.13) 
and with nss_ldap installed. I have my profiles share configured as 
follows:
[profiles]
comment = Profile Share
path = /data/profiles
writeable = yes
guest ok = yes
browseable = no
profile acls = yes
csc policy = disable

Permissions on a user's profile folder:
drwxrwxr-x  12 pupil Domain Admins 424 2004-10-14 13:46 pupil
Most of the time logins from Windows X.P. (SP1) PCs work perfectly and 
the roaming profile comes across, however sometimes an error Cannot 
access roaming profile ... ... .. network name cannot be found 
comes up.
The error is intermittent and does not seem to stick to any sort of 
pattern. I've looked all over and found that other people have 
experienced the same problem but I can't seem to find a solid fix for it.
Perhaps installing X.P. Service Pack 2 will sort it out ?

Can anyone point me in the right direction on how I can resolve this 
problem ?
Thank you for your time.

David.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] suse 9.1Doing a node status request to the domain master browser - Cannot sync browser lists.

2004-10-18 Thread ab
I changed the ip on my samba 3.0.4 server from using dhcpd allotted 
192.168.0.165 to a static 192.168.0.5
Now my windows clients get a message:
'the specified domain either does not exist or could not be contacted'
but it is contacting the domain because otherwise it would have given me 
an error saying it can't find it.
I have done a gg: search to no avail
please help i am goining on a few hours trying to solve this prob.
i have shut off all machines on the net, restarted the smb box, still 
has this cache. I have modified the hosts file, done various
nmblookup -U server01 -R lfsoffice
if i use another domain name the windoze machines can join the domain.
after i changed the domain name, i left the smb box on for 2 days, 
hoping it would clear the nmbd cache, but it did not.
and i want to keep the lfsoffice domainname.

here is a cut from my messages:
ct 18 13:33:59 smb nmbd[11194]: [2004/10/18 13:33:59, 0] 
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327)
Oct 18 13:33:59 smb nmbd[11194]:   become_domain_master_browser_wins:
Oct 18 13:33:59 smb nmbd[11194]:   Attempting to become domain master 
browser on workgroup LFSOFFICE, subnet UNICAST_SUBNET.
Oct 18 13:33:59 smb nmbd[11194]: [2004/10/18 13:33:59, 0] 
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341)
Oct 18 13:33:59 smb nmbd[11194]:   become_domain_master_browser_wins: 
querying WINS server from IP 192.168.0.5 for domain master browser name 
LFSOFFICE1b on workgroup LFSOFFICE
Oct 18 13:34:00 smb nmbd[11194]: [2004/10/18 13:34:00, 0] 
nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225)
Oct 18 13:34:00 smb nmbd[11194]:   become_domain_master_query_success:
Oct 18 13:34:00 smb nmbd[11194]:   There is already a domain master 
browser at IP 192.168.0.165 for workgroup LFSOFFICE registered on subnet 
UNICAST_SUBNET.
Oct 18 13:34:21 smb nmbd[11194]: [2004/10/18 13:34:21, 0] 
nmbd/nmbd_browsesync.c:domain_master_node_status_fail(247)
Oct 18 13:34:21 smb nmbd[11194]:   domain_master_node_status_fail:
Oct 18 13:34:21 smb nmbd[11194]:   Doing a node status request to the 
domain master browser
Oct 18 13:34:21 smb nmbd[11194]:   for workgroup LFSOFFICE at IP 
192.168.0.165 failed.
Oct 18 13:34:21 smb nmbd[11194]:   Cannot sync browser lists.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] print que not updating

2004-10-18 Thread Spike Burkhardt
All,

  There was a similar thread in August but I'm not sure if this is the
same problem.  Basically what's happening is that I'm printing a desktop
file(Word/Excel/IE) to a printer served up on my samba server.  The job
prints, the file get deleted on the server but in my system tray, it
seems like the job never gets removed from the que or it's extremely
slow. Sometimes the job does get deleted from the que.  It seems like
once the job doesn't get removed from the que it won't unless I
specifically cancel the job or I restart the samba server.  I'm running
3.0.6 on Solaris 8.  The desktop is NT 4 SP6.   Can anyone help me out?
Thanks!

spike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Issues/Questions about Samba 3.x.x versus it's Working Status

2004-10-18 Thread Melfi . Marcello
Hi,

I have been trying to setup Samba with ADS for a while now without success.

I compiled Samba 3.0.7, along with MIT Kerberos 1.3.5 and OpenLDAP 2.2.17. I
did not compiled PAM since I do not need to have Windows users to log on the
Unix box. Although not necessary, I setup the krb5.conf file. I was able to
do a net join ads after performing a kinit with the Win2K3 server's
Administrator's username and password. With the klist, I validated that
tickets were issued, therefore the Kerberos installation seems to work
correctly, at least without Samba.

My success ends there. When trying to make this works with Samba, it
doesn't. It looks like NTLM is used as a fallback... What am I missing here?

Here are some questions I have which could shed some lights to the overall
problem:

1. I once asked if it was possible not to use winbindd and just use the
username map parameter/file. I never got any answer to that... Is that a
tough question?

2. When using winbindd, can I still use the username map parameter/file so
that I link Windows accounts to the same Unix one? Right now, this does not
seem to work... Is there some issues with this? What is the exact syntax?

3. Is PAM absolutely required? I do not think so, but, hey, you never
know...

4. I saw in a few mails on Google that the command wbinfo --set-auth-user
DOMAINNAME\\Administrator%password is sometime required? Is it true? What
is it all about?

5. I saw also in a lot of mails on Google and Samba list that it was
required to copy the libnss_winbind.so (from the nsswitch directory in the
samba source) to the /lib directory. However, the target filename is
sometime nss_winbnid.so, sometime libnss_winbind.so, sometime ending with
.so.1 or .so.2, etc. What is it all about? What is really required? Is this
system specific?

6. Does the Samba server (aka the Unix box) need to be in the same domain as
the Win2K3 server? Same question for the client workstations?

7. I saw in some other mails/documents (too many read in a short period)
that it may be required to change the Windows account's password? Is this
true? If so, when is it required and with what typical configuration?

I really need some help to make this work. Maybe I am doing (or have done)
something wrong. If asked for, I can provide all the various config files I
am using.

Regards,

Marcello Melfi
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] polling for options on printing commands

2004-10-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
For people with print servers:
I'm working on fixing a bug for 3.0.8 and need to know how many
people use smb.conf variables other than the standard printing
vars like %p, %j, etc... in the various printing commands.
Please send me examples if you use things like %U, or %m.
Thanks.

cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBdDDBIR7qMdg1EfYRAvk4AJ0QvMunvCcENe85oVjku04nG0TFbACcDnlB
GscKyNThRnBxdPyymPeGdOA=
=o+IQ
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] domain member problem

2004-10-18 Thread Dusan Djordjevic
 net join -S TSSI -Uaramos

I'm not Samba expert, but try

net rpc join -U user

and also, if you have only one domain controller, try

password server = *
-- 
Eng. Dusan Djordjevic (RHCE)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Experience on using Samba with XP SP2

2004-10-18 Thread rruegner
Hi Walter,
i have the same setup samba 3.07 , cups win xp serv pack 2 german.
I have noticed that something changed in behavior after the upgrade to 
win xp serv pack 2 , but non of your described failures are comming
up in my setups for hp laser printers , and canon bjc 2000 as well as my 
pdf printer.
I only noticed after upgrade to serv pack 2 that ich have to refresh
the pinter icon in the taskbar now after printing is done to disapear.
also my standart paper size is now switching to letter and not staying 
to default dina 4.
But i have not upgraded my cups or/and win drivers ( which is allways 
recomended ), i wanted to cotroll this stuff these days but as this bugs 
are not really heavy for me , i will wait until there is time.
I dont think this is really a problem with samba.
Are you using cups?
How is your smb.conf, have you checked cups logs,
do you have the latest printers?
What are this Printers ( Manufacter )
Have disabled the xp firewall as well as the webclient services on xp,
what are the event logs talking at the win xp?
Is file sharing running corect with your samba machine?
Is it a stand alone spooler , do you do accounting, are you printing
via a printserver device or direct over lpd/usb
Do you use postscript/ghostscript filters, or direct win drivers?
All this stuff must be tested and controlled to give you the right 
answer/help...there is no naturally reason why printing with samba
should fail with win xp as far i know
Best Regards
Walter Willmertinger schrieb:
We have problems with printing after installing XP SP2.
In nearly every software it takes about 10 seconds to 30 seconds, if you 
click on Print-Button and wait for the print dialogue window.
Extremly slow are programs like MS Word (30 seconds, when you open a 
document the first time).

Another problem, (but I am sure it's not a samba related problem): In 
some word documents you have problems viewing embedded graphics. 
Sometimes you see the graphics, sometimes not. It is not a problem with 
wrong settings (View - Use placeholders for Graphics). In preview there 
is no graphics, maybe after some scrolling the graphics appear, on the 
printout graphics are contained.

Samba installed is 3.0.7 (compiled on RH 9.0 with standard options)!
Regards, Walter
rruegner schrieb:
CHAN YICK WAI schrieb:
Just would like to ask if anyone has experience with Samba with XP 
SP2, can
you share with us?

Thanks,
Yw
Hi, for sure we share : it works
read the samba faqs for more info, and/or give us more detailed questions
Regards


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] problems with multiple linux boxes hitting WIN2000 shares, cifs cifs-1.20c-2.4, linux 2.4.27 kernel

2004-10-18 Thread Joe

We have a cluster of webservers running smbfs mounts.
I switched one box to cifs, 5 shares pointing at a Win2000,
Monday 11 Oct - a week ago. The box ran fine all week.
It is a moderate use production system - /proc/fs/cifs/Stats
reports several hundred thousand SMBs in a week.

Today I switched another box in the cluster to cifs.
Immediately both boxes began spewing errors like:
Oct 18 11:35:42 dlib2 kernel:  CIFS VFS: No response buffer
Oct 18 11:35:42 dlib2 last message repeated 2 times
Oct 18 11:35:42 dlib2 kernel:  CIFS VFS: Error -104 sending data on socket to server.
Oct 18 11:35:42 dlib2 kernel:  CIFS VFS: Error -32 sending data on socket to server.
Oct 18 11:35:42 dlib2 kernel:  CIFS VFS: Error 0xffe0 or on cifs_get_inode_info in 
lookup
Oct 18 11:35:42 dlib2 kernel:  CIFS VFS: No response buffer
Oct 18 11:35:42 dlib2 kernel:  CIFS VFS: No response buffer
Oct 18 11:35:42 dlib2 kernel:  CIFS VFS: Send error in Close = -11
Oct 18 11:36:50 dlib2 kernel:  CIFS VFS: No response buffer

Stats also shows: 2156 session 1688 share reconnects

One box finally gave up. I could not get apache to let go of the cifs
mounts. When I did a shutdown the box hung and I had to do a power cycle.

I switched the second box back to smbfs and now the first box is again
happily running cfis.

Any hints above how I can get both boxes to talk to the Win2000 server
at the same time? The WIN2000 event logs didn't pick up any errors.

Thanks, Joe Edwards
UW Libraries

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: smbfs mount issues

2004-10-18 Thread Igor Belyi
Have you tried to browse this share with smbclient?
Igor
Jason Pirok wrote:
This problem began a couple months ago with my new install of (you
guessed it) XP sp2.  Now, when i mount a share from the xp machine to
my debian box, everyone, including rot, gets a permission denied
trying to ls the dir.
I've read posts about switching to cifs, but that has opened a whole
new can of worms.  I'd just like to see smbfs mount my shares properly
the way they used to.
My version of samba is 3.0.7-1 according to dpkg on debian unstable.  
the mount command is

mount -t smbfs -o
credentials=cred.file,netbiosname=intruder,workgroup=workgroup,ip=111.111.111.111
//host/share /path/to/mount/dir
I've done lots of look ups on google regarding many combinations of xp
smbfs and the problems encountered to no avail.  I'm at wits end and
don't know what else to do.
Sincerely,
Jason
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: password change error

2004-10-18 Thread Igor Belyi
Can you be a little bit more specific?
What do you mean by 'users cannot change their passwords? Does it mean 
that they cannot change it via Windows' Change Password dialog? What 
error message they get? Can Administrator do it for them? Can they 
change it under Linux with smbpasswd? Is there any error messages in 
smbd logs?

Igor
Gurnish Anand wrote:
Hi,
 We migrated from redhat 7.1 to redhat 3 ES and ran into one road block 
after the other.
Most of them were solved except this last one.
Users cannot change their passwords and then I read somewhere that samba 
3.0 and MS KB828471 or 741 don't want to be friends. Then I upgraded my 
samba to be samba 3.0.7 (which i guess is the latest)

Then I un-installed the KBB patch being accused. Still cannot change my 
passwords. Please advice. The following 
is my smb.conf

# Global parameters
[global]
   workgroup = sambapdc
   netbios name = PCSERVER
   server string = primary domain server running samba%v
   min password length = 6
;   obey pam restrictions = Yes
   pam password change = Yes
;   username map = /etc/passwd
   smb passwd file = /etc/samba/smbpasswd
   passwd program = /usr/bin/passwd %u
   encrypt passwords = yes
   passwd chat = *New*Unix*Password* %n\n 
*Retype*new*Unix*password*%n\n *passwd: all authentication tokens 
updated successfully* %n
   passwd chat debug = Yes
   username level = 10
   unix password sync = Yes
   log level = 2
   case sensitive = no
   log file = /var/log/samba/log.%m
   max log size = 50
   time server = Yes
   unix extensions = Yes
   socket options = TCP_NODELAY SO_KEEPALIVE IPTOS_LOWDELAY 
SO_SNDBUF=8192 SO_RCVBUF=8192
   admin users = worldofbanking\gurnish,  @employee, administrator, 
@administrators
   add user script = /usr/sbin/useradd -d /dev/null -g machines -c 
'Machine Account' -s /bin/false -M %u
   logon script = netlogon.bat
   logon path = \\%L\profile\%u.pds
   logon home =
   domain logons = Yes
   os level = 64
   preferred master = Yes
   domain master = yes
   wins support = Yes
   hosts allow = 127.0.0.1 192.168.2.0/255.255.255.0
;   password server = None
   hosts deny = 0.0.0.0/0 @web 192.168.2.200

[profile]
   path = /home/samba/profile
   force user = %U
   writeable = yes
   create mask = 0600
   directory mask = 0700
   guest ok = Yes
   profile acls = Yes
   browseable = No
   csc policy = disable
[netlogon]
   path = /home/samba/netlogon
   write list = root @administrator
   browseable = No
[pcshare]
   path = /home/samba
   writeable = yes
   create mask = 0
   directory mask = 0
   guest ok = Yes
[Wywo]
   path = /home/samba/WYWO
   writeable = yes
   create mask = 0
   directory mask = 0
   guest ok = Yes
[temp]
   path = /home/samba/temp
   writeable = yes
   create mask = 0
   directory mask = 0
   guest ok = Yes
[Docs]
   path = /home/samba/MB/DOCS
   writeable = yes
   create mask = 0
   directory mask = 0
[epsonprint]
   path = /tmp
   printable = Yes
[EMAIL PROTECTED] root]#

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] browseable shares need password for browsing

2004-10-18 Thread Nick Barov
Hello,
I have a standalone samba server with security = user, and a collection of 
XP and Win2K clients. In this mode, listing the available shares on the 
server requires a password, even though I have set browseable = yes for 
each share. This behavior is consistent with the Samba documentation. But 
I wonder if there is a way to make the shares browseable without a 
password? I am running Samba version 3.0.7-2.FC2 on Fedora Core 2.

-Nick Barov
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 'credentials' file doesn't work - also observed by others

2004-10-18 Thread Michael Woodhams
On Wed, 2004-10-13 at 23:45, Tony Breeds wrote:

[on the format of the credentials file]
 Isn't the syntax
 ---
 user = fred
 password = *
 domain = bloggs

and another direct email suggested 'domain=domain' in fstab, and user
without domain in the credentials file. I could not get anything with
'domain=' to work in any variation.

However, the man page for 'smbmount' uses the terminology 'workgroup'
instead of 'domain', and I have now succeeded with the following:

fstab:
//server/disk /mnt/point smbfs
workgroup=DOMAIN,uid=me,gid=me,credentials=/etc/smbpassword 0 0
[that's all one line]
and /etc/smbpassword:
username = me
password = pa55w0rd



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] polling for options on printing commands

2004-10-18 Thread Andrew Bartlett
On Tue, 2004-10-19 at 07:08, Gerald (Jerry) Carter wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 For people with print servers:
 
 I'm working on fixing a bug for 3.0.8 and need to know how many
 people use smb.conf variables other than the standard printing
 vars like %p, %j, etc... in the various printing commands.
 Please send me examples if you use things like %U, or %m.
 Thanks.

Well, you know what buggery I get up to:

include = smb.conf.%m

and in that file (for a machine in room 900):

printer name = rm900_laser

(And yes, long term I think I'll try to get CUPS to handle this one for
me :-)

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Authentication Developer, Samba Teamhttp://samba.org
Student Network Administrator, Hawker College   [EMAIL PROTECTED]


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] scrambled filename.

2004-10-18 Thread Andrew Bartlett
On Tue, 2004-10-19 at 00:24, [EMAIL PROTECTED] wrote:
 
 
 Hello there,
 
 If i create a file starting with nul. via command shell access, example:
 nul.txt or nul.blaat.txt

nul is a reserved word on windows filesystems.  Bad things happen if you
have files named with reserved words, so we mangle it for your
protection ;-)

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Authentication Developer, Samba Teamhttp://samba.org
Student Network Administrator, Hawker College   [EMAIL PROTECTED]


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Query re. add machine script

2004-10-18 Thread Adrian Hicks
Hi.

I've managed to get a Win 2000 machine to join our Samba domain, though the 
result of the add machine script is not as I would expect.

The command includes '-g machines'.  The machines group is gid 2004, 
however in /etc/passwd the primary group is listed as 100.

Any idea why the group for the machine becomes 100 when I've specified 
another group?


Adrian Hicks
-- 
MIS  Facilities Manager
Auston Int'l Group Ltd
45 Middle Rd, #01-00 Auston Unicentre
Singapore 188954

Tel: (65) 6334 5900  ext. 229
Fax: (65) 6339 7600
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


SAMBA 2.2.12 source kit for 8.2 (and possibly earlier)

2004-10-18 Thread John E. Malmberg

For those interested in being more on the bleeding edge, I have now
merged in the SAMBA 2.2.12 changes with last source kit that I produced.

I also fixed the bug that I accidently introduced, and implemented the
fsync() on the 1 byte writes to try to improve the large file issues.

The source kits can be found at:

  http://encompasserve.org/~malmberg/samba/

  SAMBA_2_2_12-V82-SRC-20041017_BCK.ZIP

This has not undergone any significant testing, all I did was verify that the
server will transfer some files.

I have only done a test build on OpenVMS ALPHA 8.2 EFT at this time.  I
attempted to make this code build on older versions, but as yet I have not had
time to do any test builds.

Same caveats as the previous code drop.  Unless something else happens,
I am going to start concentrating on the SAMBA 3.x and 4.x streams.

-John
[EMAIL PROTECTED]
Personal Opinion Only

PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:

http://www.catb.org/~esr/faqs/smart-questions.html


svn commit: samba r3029 - in branches/SAMBA_4_0/source: include lib/messaging ntvfs/common ntvfs/posix torture/basic torture/raw

2004-10-18 Thread tridge
Author: tridge
Date: 2004-10-18 07:40:17 + (Mon, 18 Oct 2004)
New Revision: 3029

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=3029nolog=1

Log:
implemented byte range lock timeouts.

This adds a pvfs_wait_message() routine which uses the new messaging
system, event timers and talloc destructors to give a nice generic
async event handling system with a easy to use interface. The
extensions to pvfs_lock.c are based on calls to pvfs_wait_message()
routines.

We now pass all of our smbtorture locking tests, although while
writing this code I have thought of some additonal tests that should
be added, particularly for lock cancel operations. I'll work on that
soon.

This commit also extends the smbtorture lock tests to test the rather
weird 0xEEFF locking semantics that I have discovered in
win2003. Win2003 treats the 0xEEFF boundary as special, and will
give different error codes on either side of it. Locks on both sides
are allowed, the only difference is which error code is given when a
lock is denied. Anyone like to hazard a guess as to why? It has
me stumped.

Added:
   branches/SAMBA_4_0/source/ntvfs/posix/pvfs_wait.c
Modified:
   branches/SAMBA_4_0/source/include/messages.h
   branches/SAMBA_4_0/source/include/smb.h
   branches/SAMBA_4_0/source/lib/messaging/messaging.c
   branches/SAMBA_4_0/source/ntvfs/common/brlock.c
   branches/SAMBA_4_0/source/ntvfs/posix/config.mk
   branches/SAMBA_4_0/source/ntvfs/posix/pvfs_lock.c
   branches/SAMBA_4_0/source/ntvfs/posix/pvfs_open.c
   branches/SAMBA_4_0/source/ntvfs/posix/vfs_posix.c
   branches/SAMBA_4_0/source/torture/basic/locking.c
   branches/SAMBA_4_0/source/torture/raw/lock.c


Changeset:
Sorry, the patch is too large (1190 lines) to include; please use WebSVN to see it!
WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=3029nolog=1


svn commit: samba r3031 - in branches/SAMBA_4_0/source/ntvfs: common posix

2004-10-18 Thread tridge
Author: tridge
Date: 2004-10-18 09:16:55 + (Mon, 18 Oct 2004)
New Revision: 3031

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/ntvfsrev=3031nolog=1

Log:
added support for lock cancelation, which effectively just triggers an early lock 
timeout

added support for more of the bizarre special lock offset semantics of w2k3



Modified:
   branches/SAMBA_4_0/source/ntvfs/common/brlock.c
   branches/SAMBA_4_0/source/ntvfs/posix/pvfs_lock.c
   branches/SAMBA_4_0/source/ntvfs/posix/pvfs_open.c
   branches/SAMBA_4_0/source/ntvfs/posix/vfs_posix.h


Changeset:
Modified: branches/SAMBA_4_0/source/ntvfs/common/brlock.c
===
--- branches/SAMBA_4_0/source/ntvfs/common/brlock.c 2004-10-18 08:41:44 UTC (rev 
3030)
+++ branches/SAMBA_4_0/source/ntvfs/common/brlock.c 2004-10-18 09:16:55 UTC (rev 
3031)
@@ -117,8 +117,16 @@
 static BOOL brl_overlap(struct lock_struct *lck1, 
struct lock_struct *lck2)
 {
-   if (lck1-start = (lck2-start + lck2-size) ||
-   lck2-start = (lck1-start + lck1-size)) {
+   /* this extra check is not redundent - it copes with locks
+  that go beyond the end of 64 bit file space */
+   if (lck1-size != 0 
+   lck1-start == lck2-start 
+   lck1-size == lck2-size) {
+   return True;
+   }
+   
+   if (lck1-start = (lck2-start+lck2-size) ||
+   lck2-start = (lck1-start+lck1-size)) {
return False;
}
return True;
@@ -193,11 +201,12 @@
return NT_STATUS_FILE_LOCK_CONFLICT;
}
brl-last_lock_failure = *lock;
-   if (lock-start = 0xEF00) {
+   if (lock-start = 0xEF00  
+   (lock-start  63) == 0) {
/* amazing the little things you learn with a test
   suite. Locks beyond this offset (as a 64 bit
-  number!) always generate the conflict error
-  code. */
+  number!) always generate the conflict error code,
+  unless the top bit is set */
return NT_STATUS_FILE_LOCK_CONFLICT;
}
return NT_STATUS_LOCK_NOT_GRANTED;

Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_lock.c
===
--- branches/SAMBA_4_0/source/ntvfs/posix/pvfs_lock.c   2004-10-18 08:41:44 UTC (rev 
3030)
+++ branches/SAMBA_4_0/source/ntvfs/posix/pvfs_lock.c   2004-10-18 09:16:55 UTC (rev 
3031)
@@ -45,7 +45,8 @@
 }
 
 /* this state structure holds information about a lock we are waiting on */
-struct pending_state {
+struct pvfs_pending_lock {
+   struct pvfs_pending_lock *next, *prev;
struct pvfs_state *pvfs;
union smb_lock *lck;
struct pvfs_file *f;
@@ -55,7 +56,6 @@
time_t end_time;
 };
 
-
 /*
   a secondary attempt to setup a lock has failed - back out
   the locks we did get and send an error
@@ -89,7 +89,7 @@
 */
 static void pvfs_pending_lock_continue(void *private, BOOL timed_out)
 {
-   struct pending_state *pending = private;
+   struct pvfs_pending_lock *pending = private;
struct pvfs_state *pvfs = pending-pvfs;
struct pvfs_file *f = pending-f;
struct smbsrv_request *req = pending-req;
@@ -107,6 +107,8 @@
rw = WRITE_LOCK;
}
 
+   DLIST_REMOVE(f-pending_list, pending);
+
status = brl_lock(pvfs-brl_context,
  f-locking_key,
  req-smbpid,
@@ -130,8 +132,10 @@
if (timed_out) {
/* no more chances */
pvfs_lock_async_failed(pvfs, req, f, locks, 
pending-pending_lock, status);
+   } else {
+   /* we can try again */
+   DLIST_ADD(f-pending_list, pending);
}
-   /* we can try again */
return;
}
 
@@ -170,6 +174,8 @@
 pending);
if (pending-wait_handle == NULL) {
pvfs_lock_async_failed(pvfs, req, f, locks, i, 
NT_STATUS_NO_MEMORY);
+   } else {
+   DLIST_ADD(f-pending_list, pending);
}
return;
}
@@ -192,6 +198,42 @@
 
 
 /*
+  cancel a set of locks
+*/
+static NTSTATUS pvfs_lock_cancel(struct pvfs_state *pvfs, struct smbsrv_request *req, 
union smb_lock *lck,
+struct pvfs_file *f)
+{
+   struct pvfs_pending_lock *p;
+
+   for (p=f-pending_list;p;p=p-next) {
+   /* check if the lock request matches exactly - you can only cancel 
with exact matches */
+   if (p-lck-lockx.in.ulock_cnt == 

svn commit: samba r3032 - in branches/SAMBA_4_0: . source/librpc/rpc source/script/tests

2004-10-18 Thread jelmer
Author: jelmer
Date: 2004-10-18 11:43:26 + (Mon, 18 Oct 2004)
New Revision: 3032

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0rev=3032nolog=1

Log:
Somewhat stricter syntax for binding strings:

 [] is now mandatory
 : after the hostname is no longer allowed

examples of allowed binding strings:

ncacn_np:myhost[samr]
ncacn_ip_tcp:10.0.0.1[1045]
ncacn_ip_tcp:2001:7b8:37b:1:210:dcff:fecb:a9e3[1024,sign,seal]
ncacn_np:myhost
ncacn_ip_tcp:192.168.4.2
[EMAIL PROTECTED]:192.168.4.2
[EMAIL PROTECTED]:192.168.4.2[,print]

Note that the last two lines are not recognized by smbtorture as a binding 
 string yet. dcerpc_parse_binding() does accept them though.


Added:
   branches/SAMBA_4_0/source/script/tests/test_binding_string.sh
Modified:
   branches/SAMBA_4_0/prog_guide.txt
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc.h
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_util.c
   branches/SAMBA_4_0/source/script/tests/test_echo.sh


Changeset:
Sorry, the patch is too large (309 lines) to include; please use WebSVN to see it!
WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0rev=3032nolog=1


svn commit: samba r3034 - in branches/SAMBA_4_0/source: lib/messaging ntvfs/posix torture/raw

2004-10-18 Thread tridge
Author: tridge
Date: 2004-10-18 11:47:13 + (Mon, 18 Oct 2004)
New Revision: 3034

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=3034nolog=1

Log:
 - fixed a bug in message dispatch, when the dispatch function called 
messaging_deregister()

 - added a pvfs_lock_close_pending() hook to remove pending locks on file close

 - fixed the private ptr argument to messaging_deregister() in pvfs_wait

 - fixed a bug in continuing lock requests after a lock that is blocking a pending 
lock is removed

 - removed bogus brl_unlock() call in lock continue

 - corrected error code for LOCKING_ANDX_CHANGE_LOCKTYPE

 - expanded the lock cancel test suite to test lock cancel by unlock and by close

 - added a testsuite for LOCKING_ANDX_CHANGE_LOCKTYPE



Modified:
   branches/SAMBA_4_0/source/lib/messaging/messaging.c
   branches/SAMBA_4_0/source/ntvfs/posix/pvfs_lock.c
   branches/SAMBA_4_0/source/ntvfs/posix/pvfs_open.c
   branches/SAMBA_4_0/source/ntvfs/posix/pvfs_wait.c
   branches/SAMBA_4_0/source/torture/raw/lock.c


Changeset:
Sorry, the patch is too large (303 lines) to include; please use WebSVN to see it!
WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=3034nolog=1


svn commit: samba r3035 - in branches/SAMBA_4_0/source/ntvfs/posix: .

2004-10-18 Thread tridge
Author: tridge
Date: 2004-10-18 12:06:21 + (Mon, 18 Oct 2004)
New Revision: 3035

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/ntvfs/posixrev=3035nolog=1

Log:
if the ntvfs layers prior to us have said that we can't perform an
operation asynchronously (such as the nbench module), then ignore lock
timeouts, as they would make no sense



Modified:
   branches/SAMBA_4_0/source/ntvfs/posix/pvfs_lock.c


Changeset:
Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_lock.c
===
--- branches/SAMBA_4_0/source/ntvfs/posix/pvfs_lock.c   2004-10-18 11:47:13 UTC (rev 
3034)
+++ branches/SAMBA_4_0/source/ntvfs/posix/pvfs_lock.c   2004-10-18 12:06:21 UTC (rev 
3035)
@@ -295,7 +295,8 @@
}
 
/* now the lockingX case, most common and also most complex */
-   if (lck-lockx.in.timeout != 0) {
+   if (lck-lockx.in.timeout != 0  
+   req-async.send_fn) {
pending = talloc_p(req, struct pvfs_pending_lock);
if (pending == NULL) {
return NT_STATUS_NO_MEMORY;



svn commit: samba r3036 - in branches/SAMBA_4_0/source/librpc/ndr: .

2004-10-18 Thread tpot
Author: tpot
Date: 2004-10-18 12:18:54 + (Mon, 18 Oct 2004)
New Revision: 3036

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/librpc/ndrrev=3036nolog=1

Log:
Add function to pull an array of structures.  Abstracts away the
individual routines in ndr_spoolss_buf.c.

Modified:
   branches/SAMBA_4_0/source/librpc/ndr/ndr.c


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr.c
===
--- branches/SAMBA_4_0/source/librpc/ndr/ndr.c  2004-10-18 12:06:21 UTC (rev 3035)
+++ branches/SAMBA_4_0/source/librpc/ndr/ndr.c  2004-10-18 12:18:54 UTC (rev 3036)
@@ -249,7 +249,28 @@
return NT_STATUS_OK;
 }
 
+/*
+  pull a constant size array of structures
+*/
+NTSTATUS ndr_pull_struct_array(struct ndr_pull *ndr, uint32_t count,
+  size_t elsize, void **info,
+  NTSTATUS (*pull_fn)(struct ndr_pull *, int, void *))
+{
+   int i;
+   char *base;
 
+   NDR_ALLOC_N_SIZE(ndr, *info, count, elsize);
+   base = (char *)*info;
+
+   for (i = 0; i  count; i++) {
+   ndr-data += ndr-offset;
+   ndr-offset = 0;
+   NDR_CHECK(pull_fn(ndr, NDR_SCALARS|NDR_BUFFERS, base[count * 
elsize]));
+   }
+
+   return NT_STATUS_OK;
+}
+
 /*
   print a generic array
 */



svn commit: samba r3037 - in hooks: .

2004-10-18 Thread metze
Author: metze
Date: 2004-10-18 12:50:05 + (Mon, 18 Oct 2004)
New Revision: 3037

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/hooksrev=3037nolog=1

Log:
add ciabot_svn.py to post-commit

---
Hi Metze.  I want to add Samba to the list of projects tracked by the
CIA project tracking system.  All this involves is adding a call to
a python script from the Samba post-commit hook.  I've attached a patch.
Could you please apply it and update the hooks directory?

The CIA project is at http://cia.navi.cx/


Tim.
---

metze

Modified:
   hooks/post-commit


Changeset:
Modified: hooks/post-commit
===
--- hooks/post-commit   2004-10-18 12:18:54 UTC (rev 3036)
+++ hooks/post-commit   2004-10-18 12:50:05 UTC (rev 3037)
@@ -39,3 +39,5 @@
 ${REPOS}/hooks/commit-email.pl -s svn commit: ${NAME} ${REPOS} ${REV} [EMAIL 
PROTECTED]
 (cd ${REPOS}/hooks; ./hot-backup.py ${REPOS} /backup/svn_backup/${NAME} )
 ${REPOS}/hooks/synchooks.sh ${REPOS} ${REV}
+python2.2 /home/svnanon/bin/ciabot_svn.py ${REPOS} ${REV} Samba
+



svn commit: samba r3038 - in hooks: .

2004-10-18 Thread metze
Author: metze
Date: 2004-10-18 12:51:53 + (Mon, 18 Oct 2004)
New Revision: 3038

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/hooksrev=3038nolog=1

Log:
don't wait for ciabot_svn.py to finish

metze

Modified:
   hooks/post-commit


Changeset:
Modified: hooks/post-commit
===
--- hooks/post-commit   2004-10-18 12:50:05 UTC (rev 3037)
+++ hooks/post-commit   2004-10-18 12:51:53 UTC (rev 3038)
@@ -39,5 +39,5 @@
 ${REPOS}/hooks/commit-email.pl -s svn commit: ${NAME} ${REPOS} ${REV} [EMAIL 
PROTECTED]
 (cd ${REPOS}/hooks; ./hot-backup.py ${REPOS} /backup/svn_backup/${NAME} )
 ${REPOS}/hooks/synchooks.sh ${REPOS} ${REV}
-python2.2 /home/svnanon/bin/ciabot_svn.py ${REPOS} ${REV} Samba
+(python2.2 /home/svnanon/bin/ciabot_svn.py ${REPOS} ${REV} Samba )
 



svn commit: samba r3041 - in branches/SAMBA_4_0/source/build/smb_build: .

2004-10-18 Thread metze
Author: metze
Date: 2004-10-18 14:55:35 + (Mon, 18 Oct 2004)
New Revision: 3041

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/build/smb_buildrev=3041nolog=1

Log:
a start of a README/HOWTO for the samba4 build system.
(still incomplete, but should be a good start...)

can someone look for spelling and grammar mistakes...

metze

Added:
   branches/SAMBA_4_0/source/build/smb_build/README.txt
Modified:
   branches/SAMBA_4_0/source/build/smb_build/public.m4


Changeset:
Added: branches/SAMBA_4_0/source/build/smb_build/README.txt
===
--- branches/SAMBA_4_0/source/build/smb_build/README.txt2004-10-18 13:58:41 
UTC (rev 3040)
+++ branches/SAMBA_4_0/source/build/smb_build/README.txt2004-10-18 14:55:35 
UTC (rev 3041)
@@ -0,0 +1,84 @@
+The Samba Build System
+--
+--
+
+Object Types
+
+the build system knows about the following object types
+
+SUBSYSTEM:
+   a SUBSYSTEM is basicly a collection of functions, which provide an
+   an generic API for a specific problem (e.g. libldb provides an api
+   for gneric ldb databases. libldb_plugin provides a generic api
+   for calling ldb plugins, so 'libldb' and 'libldb_plugin' are subsystems)
+
+MODULE:
+   a MODULE is a specify implementation of a API provided by a SUBSYSTEM.
+   (e.g. 'libldb_tdb' and 'libldb_ldap' are implementations of the subsystem 
'libldb' API,
+and 'libldb_plugin_timestamp' is a module of the 'libldb_plugin' subsystem)   
 
+
+EXT_LIB:
+   an EXT_LIB is an external library which is needed by a SUBSYSTEM, MODULE, 
BINARY or LIBRARY.
+   (e.g. 'gtk' or 'KRB5')
+
+BINARY:
+   a BINARY means a executable binary file.
+   (e.g. 'smbtorture' or 'ldbedit')
+   a BINARY typicly has only commandline handling and basic 
+   functionality code in it and depends on the functions of
+   EXT_LIB's (required_libraries/REQUIRED_LIBRARIES) and/or
+   SUBSYSTEM's (required_subsystems/REQUIRED_SUBSYSTEMS).
+
+LIBRARY:
+   a LIBRARY means a static and/or shared library,
+   which depends on the used OS.
+   (e.g. for libldb 'libldb.so', 'libldb.so.0' 'libldb.so.0.0.1'
+ and libldb.a are created on linux)
+   a LIBRARY typicly has only glue code in it and depends on
+   the functions of EXT_LIB's (required_libraries/REQUIRED_LIBRARIES) 
+   and/or SUBSYSTEM's (required_subsystems/REQUIRED_SUBSYSTEMS).
+
+
+Macrodescriptions
+
+On top of build/smb_build/public.m4 is a list of all public macros of the build 
system.
+
+
+Layout
+---
+
+Toplevel file: configure.in
+- included by autogen.sh: aclocal.m4
+  which includes the SMB_YXZ*() macros
+
+- default tests of the build system
+  are in build/smb_build/check_*.m4
+  (mostly compiler and basic C type and function
+   checks)
+
+- subsystem specific stuff should be included by 'SMB_INLUDE_M4()'
+
+
+Generating of 'configure'
+-
+you need to rerun ./autogen.sh when 'configure.in' or any
+'.m4' file was modified, then you need to rerun configure.
+
+
+Generating of 'config.status'
+-
+you need to run ./config.status (or 'configure') after a '.mk'
+file was changed.
+
+
+Examples
+
+for now please take a look at the .m4 and .mk files
+you find in the source tree, they should be a good reference to start.
+
+
+README-TODO
+
+SMB_XYZ() vs. SMB_XYZ_MK()
+meaning of the macros parameters and the .mk file handling
+examples

Modified: branches/SAMBA_4_0/source/build/smb_build/public.m4
===
--- branches/SAMBA_4_0/source/build/smb_build/public.m4 2004-10-18 13:58:41 UTC (rev 
3040)
+++ branches/SAMBA_4_0/source/build/smb_build/public.m4 2004-10-18 14:55:35 UTC (rev 
3041)
@@ -13,7 +13,7 @@
 dnl3:default_build,
 dnl4:init_obj_files,
 dnl5:add_obj_files,
-dnl6:required_libs,
+dnl6:required_libraries,
 dnl7:required_subsystems
 dnl)
 dnl
@@ -45,7 +45,7 @@
 dnl1:name,
 dnl2:init_obj_files,
 dnl3:add_obj_files,
-dnl4:required_libs,
+dnl4:required_libraries,
 dnl5:required_subsystems
 dnl)
 dnl
@@ -95,7 +95,7 @@
 dnl3:minor_version
 dnl4:release_version
 dnl5:obj_files,
-dnl6:required_libs,
+dnl6:required_libraries,
 dnl7:required_subsystems
 dnl)
 dnl
@@ -127,7 +127,7 @@
 dnl2:build_targets,
 dnl3:install_path
 dnl4:obj_files,
-dnl5:required_libs,
+dnl5:required_libraries,
 dnl6:required_subsystems
 dnl)
 dnl



svn commit: samba r3042 - in branches/SAMBA_4_0/source: .

2004-10-18 Thread metze
Author: metze
Date: 2004-10-18 15:14:20 + (Mon, 18 Oct 2004)
New Revision: 3042

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=3042nolog=1

Log:
ignore every file with a '.' in it in the source dir
(this mean only th efile which are not yet in the repository)

metze

Modified:
   branches/SAMBA_4_0/source/


Changeset:

Property changes on: branches/SAMBA_4_0/source
___
Name: svn:ignore
   - *.po
*.po32
.headers.stamp
.inslog2
.ix*
.proto.check
.proto.stamp
autom4te.cache
autom4te-2.53.cache
ID
Makefile*
config.cache
config.log
config.status
configure.tridge
cvs.log
diffs
dmalloc.log
dmallog.log
dox
trace.out
typescript*
configure
config.smb_build.*
*.dat
TAGS
tags

   + ID
Makefile*
dox
typescript*
configure
TAGS
tags
*.*




svn commit: samba r3043 - in branches/SAMBA_4_0/source: build/pidl librpc/idl librpc/rpc ntvfs/ipc rpc_server rpc_server/epmapper

2004-10-18 Thread jelmer
Author: jelmer
Date: 2004-10-18 15:18:05 + (Mon, 18 Oct 2004)
New Revision: 3043

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=3043nolog=1

Log:
Use binding strings for specifying endpoints. The property for 
specifying a endpoint is now also 'endpoint' instead of 'endpoints'. The
default endpoint (if none is specified) is still ncacn_np:[\\pipe\\ifacename],
where ifacename is the name of the interface.

Examples:

[
  uuid(60a15ec5-4de8-11d7-a637-005056a20182),
  endpoint(ncacn_np:[\\pipe\\rpcecho], ncacn_ip_tcp:)
]
interface rpcecho
{
void dummy();
}

dcerpc_binding is now converted to ep_description in the server, but I hope to 
completely eliminate ep_description later on.

The eventual goal of all these changes is to make it easier to add 
 transports as I'm going to add support for 
 ncalrpc (local RPC over named pipes) and ncacn_unix_stream (Unix sockets).


Modified:
   branches/SAMBA_4_0/source/build/pidl/parser.pm
   branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl
   branches/SAMBA_4_0/source/librpc/idl/echo.idl
   branches/SAMBA_4_0/source/librpc/idl/epmapper.idl
   branches/SAMBA_4_0/source/librpc/idl/lsa.idl
   branches/SAMBA_4_0/source/librpc/idl/lsads.idl
   branches/SAMBA_4_0/source/librpc/idl/netlogon.idl
   branches/SAMBA_4_0/source/librpc/idl/oxidresolver.idl
   branches/SAMBA_4_0/source/librpc/idl/samr.idl
   branches/SAMBA_4_0/source/librpc/idl/spoolss.idl
   branches/SAMBA_4_0/source/librpc/idl/w32time.idl
   branches/SAMBA_4_0/source/librpc/idl/winreg.idl
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_smb.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_util.c
   branches/SAMBA_4_0/source/ntvfs/ipc/vfs_ipc.c
   branches/SAMBA_4_0/source/rpc_server/dcerpc_server.c
   branches/SAMBA_4_0/source/rpc_server/epmapper/rpc_epmapper.c


Changeset:
Sorry, the patch is too large (417 lines) to include; please use WebSVN to see it!
WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=3043nolog=1


svn commit: samba r3045 - in branches/SAMBA_4_0/source/torture: .

2004-10-18 Thread jelmer
Author: jelmer
Date: 2004-10-18 15:33:34 + (Mon, 18 Oct 2004)
New Revision: 3045

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/torturerev=3045nolog=1

Log:
Allow [EMAIL PROTECTED] binding strings

Modified:
   branches/SAMBA_4_0/source/torture/torture.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/torture.c
===
--- branches/SAMBA_4_0/source/torture/torture.c 2004-10-18 15:26:16 UTC (rev 3044)
+++ branches/SAMBA_4_0/source/torture/torture.c 2004-10-18 15:33:34 UTC (rev 3045)
@@ -3553,6 +3553,18 @@
exit(1);
 }
 
+static BOOL is_binding_string(const char *binding_string)
+{
+   TALLOC_CTX *mem_ctx = talloc_init(is_binding_string);
+   struct dcerpc_binding binding_struct;
+   NTSTATUS status;
+   
+   status = dcerpc_parse_binding(mem_ctx, binding_string, binding_struct);
+
+   talloc_destroy(mem_ctx);
+   return NT_STATUS_IS_OK(status);
+}
+
 /
   main program
 /
@@ -3648,7 +3660,7 @@
}
 
/* see if its a RPC transport specifier */
-   if (strncmp(argv_new[1], ncacn_, 6) == 0) {
+   if (is_binding_string(argv_new[1])) {
lp_set_cmdline(torture:binding, argv_new[1]);
} else {
char *binding = NULL;



svn commit: samba r3047 - in branches/SAMBA_4_0/source: librpc/rpc ntvfs/ipc

2004-10-18 Thread jelmer
Author: jelmer
Date: 2004-10-18 16:25:36 + (Mon, 18 Oct 2004)
New Revision: 3047

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=3047nolog=1

Log:
Always include a \ again before the pipe name we're opening. Without a 
backslash works, but is not like Windows does it.

Modified:
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_util.c
   branches/SAMBA_4_0/source/ntvfs/ipc/vfs_ipc.c


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/rpc/dcerpc_util.c
===
--- branches/SAMBA_4_0/source/librpc/rpc/dcerpc_util.c  2004-10-18 16:07:08 UTC (rev 
3046)
+++ branches/SAMBA_4_0/source/librpc/rpc/dcerpc_util.c  2004-10-18 16:25:36 UTC (rev 
3047)
@@ -456,6 +456,10 @@
!strncasecmp(pipe_name, \\pipe\\, 6)) {
pipe_name+=6;
}
+
+   if (pipe_name[0] != '\\') {
+   pipe_name = talloc_asprintf(mem_ctx, \\%s, pipe_name);
+   }

if (!username || !username[0]) {
status = smbcli_full_connection(NULL, cli, lp_netbios_name(),

Modified: branches/SAMBA_4_0/source/ntvfs/ipc/vfs_ipc.c
===
--- branches/SAMBA_4_0/source/ntvfs/ipc/vfs_ipc.c   2004-10-18 16:07:08 UTC (rev 
3046)
+++ branches/SAMBA_4_0/source/ntvfs/ipc/vfs_ipc.c   2004-10-18 16:25:36 UTC (rev 
3047)
@@ -215,6 +215,8 @@
return NT_STATUS_NO_MEMORY;
}
 
+   while (fname[0] == '\\') fname++;
+
p-pipe_name = talloc_asprintf(p, \\pipe\\%s, fname);
if (!p-pipe_name) {
talloc_free(p);
@@ -240,6 +242,7 @@
  finalised for Samba4
*/
 
+   printf(FINDING: %s\n, p-pipe_name);
ep_description.type = ENDPOINT_SMB;
ep_description.info.smb_pipe = p-pipe_name;
 
@@ -303,10 +306,6 @@
NTSTATUS status;
const char *fname = oi-openx.in.fname;
 
-   if (strncasecmp(fname, PIPE\\, 5) != 0) {
-   return NT_STATUS_OBJECT_NAME_NOT_FOUND;
-   }
-
status = ipc_open_generic(ntvfs, req, fname, p);
if (!NT_STATUS_IS_OK(status)) {
return status;



svn commit: samba r3048 - in trunk/source/locking: .

2004-10-18 Thread jra
Author: jra
Date: 2004-10-18 17:17:27 + (Mon, 18 Oct 2004)
New Revision: 3048

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/trunk/source/lockingrev=3048nolog=1

Log:
Fix from tridge :

when checking for the existance of a lock we are only doing a single
tdb call, so there is no need to get the chainlock. This reduces the
number of tdb locking calls made on file IO

Jeremy.

Modified:
   trunk/source/locking/brlock.c


Changeset:
Modified: trunk/source/locking/brlock.c
===
--- trunk/source/locking/brlock.c   2004-10-18 16:25:36 UTC (rev 3047)
+++ trunk/source/locking/brlock.c   2004-10-18 17:17:27 UTC (rev 3048)
@@ -563,7 +563,6 @@
 
dbuf.dptr = NULL;
 
-   tdb_chainlock(tdb, kbuf);
dbuf = tdb_fetch(tdb, kbuf);
 
lock.context.smbpid = smbpid;
@@ -594,12 +593,10 @@
 
/* no conflicts - we could have added it */
SAFE_FREE(dbuf.dptr);
-   tdb_chainunlock(tdb, kbuf);
return True;
 
  fail:
SAFE_FREE(dbuf.dptr);
-   tdb_chainunlock(tdb, kbuf);
return False;
 }
 



svn commit: samba r3049 - in branches/SAMBA_3_0/source: lib printing rpc_server smbd

2004-10-18 Thread jerry
Author: jerry
Date: 2004-10-18 19:57:03 + (Mon, 18 Oct 2004)
New Revision: 3049

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_3_0/sourcerev=3049nolog=1

Log:
fixing some calls in the printing code to stanard_sub_basic(); fix standard_sub_snum() 
to use the current user's gid;  add some (snum == -1) checks to standard_sub_advanced()
Modified:
   branches/SAMBA_3_0/source/lib/substitute.c
   branches/SAMBA_3_0/source/printing/nt_printing.c
   branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c
   branches/SAMBA_3_0/source/smbd/lanman.c


Changeset:
Modified: branches/SAMBA_3_0/source/lib/substitute.c
===
--- branches/SAMBA_3_0/source/lib/substitute.c  2004-10-18 17:17:27 UTC (rev 3048)
+++ branches/SAMBA_3_0/source/lib/substitute.c  2004-10-18 19:57:03 UTC (rev 3049)
@@ -446,7 +446,8 @@
string_sub(p,%P, connectpath, l); 
break;
case 'S': 
-   string_sub(p,%S, lp_servicename(snum), l); 
+   if ( snum != -1 )
+   string_sub(p,%S, lp_servicename(snum), l); 
break;
case 'g': 
string_sub(p,%g, gidtoname(gid), l); 
@@ -463,7 +464,8 @@
 * path = string in [homes] and so needs the
 * service name, not the username.  */
case 'p': 
-   string_sub(p,%p, automount_path(lp_servicename(snum)), l); 
+   if ( snum != -1 )
+   string_sub(p,%p, 
automount_path(lp_servicename(snum)), l); 
break;
case '\0': 
p++; 
@@ -797,6 +799,6 @@
cached_uid = current_user.uid;
}
 
-   standard_sub_advanced(snum, cached_user, , -1,
+   standard_sub_advanced(snum, cached_user, , current_user.gid,
  smb_user_name, str, len);
 }

Modified: branches/SAMBA_3_0/source/printing/nt_printing.c
===
--- branches/SAMBA_3_0/source/printing/nt_printing.c2004-10-18 17:17:27 UTC (rev 
3048)
+++ branches/SAMBA_3_0/source/printing/nt_printing.c2004-10-18 19:57:03 UTC (rev 
3049)
@@ -4080,7 +4080,7 @@
fstrcpy( servername, print_hnd-servername );
else {
fstrcpy( servername, %L );
-   standard_sub_basic( NULL, servername, 
sizeof(servername)-1 );
+   standard_sub_basic( , servername, 
sizeof(servername)-1 );
}

/* 

Modified: branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c
===
--- branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c   2004-10-18 17:17:27 
UTC (rev 3048)
+++ branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c   2004-10-18 19:57:03 
UTC (rev 3049)
@@ -2766,7 +2766,7 @@
uint32 len;
 
fstrcpy( temp_name, %L );
-   standard_sub_basic( NULL, temp_name, sizeof(temp_name)-1 );
+   standard_sub_basic( , temp_name, sizeof(temp_name)-1 );
 
 
len = rpcstr_push(temp, temp_name, sizeof(temp)-2, STR_TERMINATE);
@@ -6623,7 +6623,7 @@
return WERR_BADFID;
}
 
-   if (!print_job_exists(snum, jobid)) {
+   if (!print_job_exists(lp_const_servicename(snum), jobid)) {
return WERR_INVALID_PRINTER_NAME;
}
 
@@ -8640,7 +8640,7 @@
 *  a failure condition
 */
 
-   if ( !(nt_devmode=print_job_devmode( snum, jobid )) )
+   if ( !(nt_devmode=print_job_devmode( lp_const_servicename(snum), jobid )) )
devmode = construct_dev_mode(snum);
else {
if ((devmode = (DEVICEMODE *)malloc(sizeof(DEVICEMODE))) != NULL) {

Modified: branches/SAMBA_3_0/source/smbd/lanman.c
===
--- branches/SAMBA_3_0/source/smbd/lanman.c 2004-10-18 17:17:27 UTC (rev 3048)
+++ branches/SAMBA_3_0/source/smbd/lanman.c 2004-10-18 19:57:03 UTC (rev 3049)
@@ -441,7 +441,7 @@
   /* the client expects localtime */
   t -= TimeDiff(t);
 
-  PACKI(desc,W,pjobid_to_rap(snum,queue-job)); /* uJobId */
+  PACKI(desc,W,pjobid_to_rap(lp_const_servicename(snum),queue-job)); /* uJobId */
   if (uLevel == 1) {
 PACKS(desc,B21,queue-fs_user); /* szUserName */
 PACKS(desc,B,);/* pad */
@@ -549,7 +549,7 @@
PACKS(desc, z, driver.info_3-monitorname); /* language monitor */

fstrcpy(location, %L\\print$\\WIN40\\0);
-   standard_sub_basic( NULL, location, sizeof(location)-1 );
+   standard_sub_basic( , location, 

svn commit: samba-web r375 - in trunk: .

2004-10-18 Thread sfrench
Author: sfrench
Date: 2004-10-18 21:49:19 + (Mon, 18 Oct 2004)
New Revision: 375

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=samba-webpath=/trunkrev=375nolog=1

Log:
Fix broken links to penguin image

Modified:
   trunk/Linux_CIFS_client.html


Changeset:
Modified: trunk/Linux_CIFS_client.html
===
--- trunk/Linux_CIFS_client.html2004-10-15 14:19:03 UTC (rev 374)
+++ trunk/Linux_CIFS_client.html2004-10-18 21:49:19 UTC (rev 375)
@@ -10,11 +10,12 @@
 BR
 nbsp;
 PLATEST UPDATES - mount.cifs mount helper now updated in Samba svn to version
-1.5. cifs vfs 1.22 version included in 2.6.9 kernels and fixes a few big
-endian bugsBR
-Linux XATTRS (extended attributes now supported) as are per mount statistics.
-Whether the client should (in addition to the server) also do permission
-checking and how uids are set can now be configured in /proc/fs/cifs/P
+1.5. cifs vfs 1.22 version is included in 2.6.9 kernels and fixes a few
+big endian bugsBR
+Linux XATTRS (extended attributes) are now supported as are per mount statistics.
+New /proc/fs/cifs configuration options: whether the client should (in
+addition to the server) also do permission checking and whether local or
+remote uid should be used when creating files/directories /P
 TABLE cellSpacing=2 cellPadding=2 width=100% border=0
   CAPTION
   /CAPTION
@@ -32,8 +33,7 @@
 /TR
 TR
   TD vAlign=top width=20% bgColor=#ee!-- Menu (Left Column) --!-- Menu 
--
-  CENTERIMG alt=http://us6.samba.org/samba/images/penguin.gif 
-  src=Linux CIFS Client_files/penguin.gif/CENTER
+  CENTERIMG alt=http://us1.samba.org/samba/images/penguin.gif; 
src=samba/images/penguin.gif/CENTER
   A 
   href=mailto:[EMAIL PROTECTED]Questions to developers/A
   PDocumentationnbsp;
@@ -69,21 +69,18 @@
 place of those in the fs/cifs directory  A 
 href=http://us1.samba.org/samba/ftp/cifs-cvs/cifs-1.20c-2.6.tar.gz;1.20 for 
2.6 kernels/A.
 LIA 
-href=http://www.samba.org/samba/ftp/cifs-cvs/mount.cifs;Prebuilt mount 
-helper utility (/sbin/mount.cifs version 1.3) built for i386/A
-LIA 
-
href=http://cvs.samba.org/cgi-bin/cvsweb/samba/source/client/mount.cifs.c;Source 
+href=http://www.samba.org/samba/ftp/cifs-cvs/mount.cifs;Prebuilt mount 
helper utility (/sbin/mount.cifs version 1.5) built for
+i386/A
+LIA href=http://www.samba.org/samba/ftp/cifs-cvs/mount.cifs.c;Source 
 for cifs mount utility on sambaweb/A
 LIA href=http://www.samba.org/samba/ftp/cifs-cvs/mount.cifs.8;man 
 page for mount utility /Anbsp;
-LIA href=http://cvs.samba.org/cgi-bin/cvsweb/cifsvfs/;CIFS Files 
-via CVS Web/Anbsp;
+LIA href=http://cvs.samba.org/cgi-bin/cvsweb/cifsvfs/;2.4 kernel CIFS 
Files via CVS Web/Anbsp;
 LIVia CVSnbsp;
 PREcvs -z5 -dnbsp;
 :pserver:[EMAIL PROTECTED]:/cvsroot
 co cifsvfs/PRE
-LIA href=http://cifs.bkbits.net/;Most current 2.5 source at 
-cifs.bkbits.net (requires installation of BitKeeper)/A/LI
+LIA href=http://cifs.bkbits.net/;Most current 2.6 source at 
cifs.bkbits.net (requires installation of BitKeeper)/A/LI
   /UL
   /TD
   TD vAlign=top bgColor=#ff!-- Main Contents --
@@ -126,8 +123,7 @@
 TR
   TD vAlign=top/TD
   TD vAlign=topThanks to SNIA, IBM and the Samba TeamBR
-  nbsp;IMG 
-  src=Linux CIFS Client_files/samba_banner.gif BR
+  nbsp;IMG src=samba/images/samba_banner.gif 
alt=http://us1.samba.org/samba/images/samba_banner.gif; BR
   for their assistance 
   and support./TD
 /TR



svn commit: samba r3050 - in branches/SAMBA_3_0/source: include locking smbd

2004-10-18 Thread jra
Author: jra
Date: 2004-10-18 22:01:10 + (Mon, 18 Oct 2004)
New Revision: 3050

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_3_0/sourcerev=3050nolog=1

Log:
Steal from Samba4 :-). Make us pass most of the new lock tests (except for
the cancel lock which I have to add).
Jeremy.

Modified:
   branches/SAMBA_3_0/source/include/smb.h
   branches/SAMBA_3_0/source/locking/brlock.c
   branches/SAMBA_3_0/source/smbd/files.c
   branches/SAMBA_3_0/source/smbd/reply.c


Changeset:
Sorry, the patch is too large (252 lines) to include; please use WebSVN to see it!
WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_3_0/sourcerev=3050nolog=1


svn commit: samba r3051 - in trunk/source: include locking smbd

2004-10-18 Thread jra
Author: jra
Date: 2004-10-18 22:01:10 + (Mon, 18 Oct 2004)
New Revision: 3051

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/trunk/sourcerev=3051nolog=1

Log:
Steal from Samba4 :-). Make us pass most of the new lock tests (except for
the cancel lock which I have to add).
Jeremy.

Modified:
   trunk/source/include/smb.h
   trunk/source/locking/brlock.c
   trunk/source/smbd/files.c
   trunk/source/smbd/reply.c


Changeset:
Sorry, the patch is too large (252 lines) to include; please use WebSVN to see it!
WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/trunk/sourcerev=3051nolog=1


svn commit: lorikeet r93 - in trunk/samba4-ad-thesis: .

2004-10-18 Thread abartlet
Author: abartlet
Date: 2004-10-19 01:56:57 + (Tue, 19 Oct 2004)
New Revision: 93

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=lorikeetpath=/trunk/samba4-ad-thesisrev=93nolog=1

Log:
Add in information about the 'NTLM' join, early Samba versions, and
some of the security negotiation stuff.

Spellcheck.

Andrew Bartlett

Modified:
   trunk/samba4-ad-thesis/chapters.lyx


Changeset:
Sorry, the patch is too large (388 lines) to include; please use WebSVN to see it!
WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=lorikeetpath=/trunk/samba4-ad-thesisrev=93nolog=1