[Samba] MS ADS Authentication

2004-11-11 Thread Marco
Dear group,

I have installed Fedora Core 2 with samba, winbind enabled and managed to join 
our ADS as member server.
Using kinit [EMAIL PROTECTED] I receive a valid ticket an can connect to 
Windows share by smbclient //server/share -k
Now my goal is to use the AD Usernames i.e. [EMAIL PROTECTED] for Login to 
Linux. 
I can't find the correct PAM settings, so could please somebody help me?

Best regards,
Marco

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem with smbmount

2004-11-11 Thread Zaki
Has anyone fixed this? I'm having the same problem


Yahoo! Messenger - Communicate instantly...Ping 
your friends today! Download Messenger Now 
http://uk.messenger.yahoo.com/download/index.html
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Roaming profiles

2004-11-11 Thread Andreas
On Wed, Nov 10, 2004 at 05:15:52PM -0500, Barry Roomberg wrote:
 It seems I have accidently turned roaming profiles that trigger when XP boxes 
 login to my domain.  How can I make sure they are turned off for good?

(From 
http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html)

In smb.conf

Affect the following settings and ALL clients will be forced to use a local
profile: logon home = and logon path =

The arguments to these parameters must be left blank. It is necessary to
include the = sign to specifically assign the empty value. 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] different announces between w2k and xp

2004-11-11 Thread Luca Ferrari
Hi,
as I wrote in a previous e-mail, we are noting different announcing between a 
w2k computer and an xp one (both professional). The computers are not trying 
to log on a windows domain, and this time I can provide also a dump of 
traffic thru ethereal. As you can see from the attached files, the win2k 
computer sends also the username (marty) along the network, and we cannot 
understand why. Is just a problem of a different implementation of the SMB 
stacks among different operating systems, or there's a specific reason for 
this behavior?

Thanks,
Luca  Luca
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Cannot resolve name name#0x3

2004-11-11 Thread ARGCRP-SAILER, LEONARDO
Hi, I'm Havinge the same problem and that is happening only with some
machines
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] implications of running nmbd without smbd?

2004-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Mark wrote:
| Hello,
| We just need the netbios broadcast registration/resolution
| and/or NBNS wins server setup, so we are thinking of just
| running nmbd without smbd.   To help minimize security issues
| etc. Samba version is 2.2.7 on redhat  7.3. any input would
| be appreciated. Are there any potential problems etc?
| TIA
Should be fine.  nmbd is responsible for
(a) registering the netbios name from smb.conf (and the
domain0x1[cb] records if 'domain [logons|master] = yes')
(b) acting as a WINS server if wins support = yes
(c) participating in browsing elections


cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBk2cYIR7qMdg1EfYRAnWMAJ4xUHtetBOGfH92qOyYO8YMZ76j1wCeL0jI
HDHZwzGsi1aHe3u0b+zjutQ=
=eZ9h
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.8 compiles but fails to install

2004-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kevin Statz wrote:
| The errors are:
|
| # /etc/init.d/samba.server start
| ld.so.1: /usr/local/samba/sbin/smbd: fatal: libpopt.so.0: open failed:
| No such file or directory
| Killed
| ld.so.1: /usr/local/samba/sbin/nmbd: fatal: libpopt.so.0: open failed:
| No such file or directory
| Killed
|
|
| The libpopt.so.0 files in /usr/local/lib are as follows:
|
| # ls -l libpopt*
| -rw-r--r--   1 bin  bin   137464 Jan  8  2003 libpopt.a
| -rwxr-xr-x   1 bin  bin  827 Jan  8  2003 libpopt.la
| lrwxrwxrwx   1 root other 16 Oct 27 16:24 libpopt.so -
| libpopt.so.0.0.0
| lrwxrwxrwx   1 root other 16 Oct 27 16:24 libpopt.so.0 -
| libpopt.so.0.0.0
| -rwxr-xr-x   1 bin  bin   134696 Jan  8  2003 libpopt.so.0.0.0
|
| Are these correct?
|
| Please help- I am at a loss.
add /usr/local/lib to the library search path (LD_LIBRARY_PATH,
the crle tool, or compile using 'gcc -Wl,-rpath,/usr/local/lib')
Or just use the --with-included-popt configure option to Samba
and forget about the one in /usr/local/lib.


cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBk2hVIR7qMdg1EfYRAg4ZAJ9tzprOowc9wLYNz96zDM4P1D2iawCfZjCM
c+my9if9skgRR08q41kYGcg=
=G/Bj
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba panics after error connecting to cups

2004-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Gil Freund wrote:
|
| We have an issue with Samba panicking after an error connecting to
| CUPS (see log below).
|
| Samba 3.0.7
| CUPS 1.1.20
| Debian Woody
|
| After the panic, CUPS is still oparational, but not Samba.  I have to
| kill -9 the smbd process befor I can restart it using the init
| scripts.
|
| Any pointers welcome.
...
|   PANIC: assert failed at printing/printing_db.c(40)
This is fixed in 3.0.8.

cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBk2l+IR7qMdg1EfYRAthAAKCW7hoUTxSJ1KOpqPo9zJrLaWUK2ACgr0Z7
xK/nRmSTWIUZnckAZ/+Oazc=
=MRM5
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [samba] Netscape samba schema needs updating!

2004-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Daniel Wilson wrote:
| Hi,
|
| This one is for the samba team i think...
|
|
| Intro...
| Im using Sun One Directory Server 5.2 as my LDAP, so i used the
| samba-schema-netscapeds5.x schema, also samba 3.0.8.
It's on my list to fix.  Actually the best thing would be a
script that generates the various schema files from the
OpenLDAP version samba.schema since that is the one that
always get updated.
We'll have a 3.0.9 soon and will try to get that fixed
before the release.

cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBk2nVIR7qMdg1EfYRAkECAKDrC/MNmnnCueGkRmbZrhSzLVseUACfTMxH
OQeJTCnQuXxdcRPRC6fF6dI=
=FBsh
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.8 Available for Download

2004-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Rick Brown wrote:
| On Mon, 8 Nov 2004, Gerald (Jerry) Carter wrote:
|
|
|Common bugs fixed in 3.0.8 include:
|
|~  o Fixes for kerberos interoperability with Windows 200x
|~domains when using DES keys.
|
|
| Yay!  Compiled, installed, rejoined ADS and we once again
| work.   Good job Jerry n' crew!
The crew in this case would be Jeremy Allison and Nalin
Dahyabhai (from redhat).  They both put in a lot of hard work
to get this working.


cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBk2o8IR7qMdg1EfYRAj+6AKCBdgw3qGmSTyxSoazSxZ2g+KlR7gCg2Xvx
hKxQPU2UnoWrvPE5mAT52Js=
=YbzR
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Mini HowTo AIX4.3.3-AD-Winbind

2004-11-11 Thread Ben Schmaus
Integrating SAMBA\WINBIND on AIX 4.3.3 with Microsoft Active Directory.

Overview:  This document is a roadmap on how you can integrate SAMBA with
your Active Directory environment.  This configuration will allow  
your Samba server to appear as a member of Active Directory.  It will also
allow your telnet sessions to use Active Directory for  
authentication.

AIX Setup:
Verify your system has all the BOS sub packages from the AIX install
CD's.

Install rpm package manager (rpm.rte) with installp:

installp -qacXgd rpm.rte rpm.rte

Install the following rpms
(http://www-1.ibm.com/servers/aix/products/aixos/linux/download.html)
If they are all in the same directory, you can do this by doing the
following:

rpm -ivh --nodeps *.rpm

Packages Required:

autoconf-2.53-1.aix4.3.noarch.rpm
automake-1.5-1.aix4.3.noarch.rpm
bash-2.05a-1.aix4.3.ppc.rpm
bison-1.34-2.aix4.3.ppc.rpm
db-3.3.11-3.aix4.3.ppc.rpm
flex-2.5.4a-6.aix4.3.ppc.rpm
gawk-3.1.0-2.aix4.3.ppc.rpm
gettext-0.10.39-2.aix4.3.ppc.rpm
glib-1.2.10-2.aix4.3.ppc.rpm
glib-devel-1.2.10-2.aix4.3.ppc.rpm
glib2-2.2.1-3.aix4.3.ppc.rpm
glib2-devel-2.2.1-3.aix4.3.ppc.rpm
gzip-1.2.4a-7.aix4.3.ppc.rpm
libtool-1.4.2-1.aix4.3.ppc.rpm
m4-1.4-14.aix4.3.ppc.rpm
make-3.79.1-3.aix4.3.ppc.rpm
openldap-2.0.21-4.aix4.3.ppc.rpm
openldap-devel-2.0.21-4.aix4.3.ppc.rpm
pkgconfig-0.15.0-1.aix4.3.ppc.rpm
rpm-3.0.5-30.aix4.3.ppc.rpm
sed-3.02-8.aix4.3.ppc.rpm
tar-1.13-4.aix4.3.ppc.rpm

Update PATH and LD_LIBRARY_PATH:


PATH=/usr/bin:/etc:/usr/sbin:/usr/ucb:/usr/bin/X11:/sbin:/usr/local/bin:/usr
/local/sbin:/usr/local/samba/bin:/usr/local/samba/sbin
LD_LIBRARY_PATH=/usr/lib:/usr/local/lib:/lib
 
Download binutils and gcc binaries:

binutils.2.9.1.tar.gz
(http://sunsite.lanet.lv/ftp/unix/aix-binaries/uclapub/binutils/RISC/4.2/exe
c/)

gcc.3.3.4.tar.Z (http://aixpdslib.seas.ucla.edu/packages/gcc.html)

Download source code for the following:

krb5-1.3.5.tar.gz (http://web.mit.edu/kerberos/www/dist/)
openldap-2.2.18.tar.gz (http://www.openldap.org/software/download/)
samba-3.0.8pre2.tar.gz (http://www.samba.org)

Install binutils:

gzip -d binutils.2.9.1.tar.gz 
cp binutils.2.9.1.tar /
tar -xvf binutils.2.9.1.tar 
rm /binutils.2.9.1.tar 
**Note** Untar the binutils from the / directory so the files are
placed into the proper locations.


Install gcc:

gzip -d gcc.3.3.4.tar.Z 
cp gcc.3.3.4.tar /
tar -xvf gcc.3.3.4.tar 
rm /gcc.3.3.4.tar 
**Note** Untar the binutils from the / directory so the files are
placed into the proper locations.


Build and install Kerberos:

gzip -d krb5-1.3.5.tar.gz 
tar -xvf krb5-1.3.5.tar
cd krb5-1.3.5
./configure --enable-dns --enable-dns-for-kdc --enable-dns-for-realm
make
make install

Build and install OpenLDAP:

gzip -d openldap-2.2.18.tar.gz 
tar -xvf openldap-2.2.18.tar
cd openldap-2.2.18
./configure --disable-slurpd --disable-bdb --disable-slapd
--without-threads 
make
make install

Build and install Samba:

gzip -d samba-3.0.8pre2.tar.gz 
tar -xvf samba-3.0.8pre2.tar
cd samba-3.0.8pre2
./configure --with-winbind --with-ldap --with-ads
--with-krb5=/usr/local
make
make install

Configure Kerberos:

Edit /etc/krb5.conf to reflect the following (substitute DOMAIN.COM with
your domain):

[logging]
default = FILE:/var/log/krb5/libs.log
kdc = FILE:/var/log/krb5/kdc.log
admin_server = FILE:/var/log/krb5/admin.log

[libdefaults]
ticket_lifetime = 24000
default_realm = DOMAIN.COM
forwardable = true
proxiable = true
dns_lookup_realm = false
dns_lookup_kdc = false

[realms]
DOMAIN.COM = {
default_domain = domain.com
kdc = ip address of AD server:88
admin_server = ip address of AD server:749
} 

[domain_realm]
.domain.com = DOMAIN.COM
domain.com = DOMAIN.COM

[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf

[pam]
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false

 

Configure Samba:

Edit /usr/local/samba/lib/smb.conf to reflect the following (substitute
DOMAIN with your domain):
**Note** That the shares are examples and may be different.

[global] 
workgroup = DOMAIN 
netbios name = HOSTNAME 
server string = HOSTNAME 
security = ADS
realm = DOMAIN.COM 
password server = ip address
wins server = ip address
client 

Re: [Samba] Slow login/out with XP and SAMBA PDC?

2004-11-11 Thread Misty Stanley-Jones
On Wednesday 10 November 2004 13:19, Adam Tauno Williams wrote:
  I thought the profile copy was smart and only copied files that had
  changed? What can I do improve this performance?

 Maybe theoretically, but we've seen it 'stupid' on frequent occasions.
 Really best just to redirect the My Documents short cut to a real share
 (such as a home directory) that doesn't have to get copied all over the
 place.

Along this same note ... I am pondering the implications of mapping certain 
parts of the profile (My Documents, maybe My Pictures) to a network drive.  
But I think this won't work for my truly roaming users (laptop users).  Do 
any of you redirect the profile directories based on membership of, say, a 
'laptop' group or some such thing?  I know that I can write registry keys 
based on group membership with Kixtart.  Or am I wrong and laptops won't have 
a problem with it?  If a laptop user saves a file in My Documents they will 
expect to have access to the file even when offline.  Thoughts?  I would just 
like to know how you all generally handle it.

Misty
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Quota/disk space display in windows

2004-11-11 Thread DA Forsyth
Hi all

I have just noticed that Windows (98 and 2000) are not displaying the 
correct figure for disk space on any of my shares.

FreeBSD 5.2.1-R
Samba 3.0.7 from ports
quotas enabled on the ufs2 filesystems
samba compiled '--with-quotas'

ok, a user gets a quota set like this
   edquota -e /home:8672278:8774678:0:0 denis
now, those numbers are in 512 byte blocks and should represent 
4234Mb, right?  Certainly to FreeBSD they do.

but windows 'MY computer' displays 8.27Gb for the drive mapped to 
that share 

a quick bit of calculating shows that 8.27GB results if you regard 
the number
   8672278
as kilobytes
8672278 / 1204 / 1024 = 8.27

so, I take it then that Samba is unaware that the FreeBSD quotas work 
with 512 byte blocks!

I see there is a 'dfree command' and a 'get quota' command option in 
the global section.  I do not see exacly how those commands are used 
by Samba.  Are they called every time a windows client requests the 
disk status?  What is the difference between doing that and what it 
does by default?
The obvious fix to me is to allow the setting of a 'free block size' 
or 
'quota is in X units, multiply by Y to get bytes' = Y 
parameter that would fix this calculation internal to samba.

I see in the globals there is a 'block size' setting but I find the 
help for it confusing

I quote

block size (S)

This parameter controls the behavior of smbd(8) when reporting
disk free sizes. By default, this reports a disk block size of
1024 bytes. 

Changing this parameter may have some effect on the efficiency
of client writes, this is not yet confirmed. This parameter was
added to allow advanced administrators to change it (usually to
a higher value) and test the effect it has on client write
performance without re-compiling the code. As this is an
experimental option it may be removed in a future release. 

Changing this option does not change the disk free reporting
size, just the block size unit reported to the client. 

No default


I have just tried setting that to 512 and restarting samba but there 
is no change, the disk size is still wrong, and still 8.27GB.
My web searches on this show arguments about what should be shown.
Forget all that.  What the user needs to see is his allocated space, 
and his free space.  Total size of the server drive is not his 
concern, and at the moment Samba is reporting neither the real quota 
size (actually twice the set size), NOR the real disk size so this is 
clearly a BUG.

Please help Samba to be 'correct', not 'worked around'.  My server 
goes live on 26 November and I'd really like it to work correctly.




--
   DA Fo rsythNetwork Supervisor
Principal Technical Officer  -- Institute for Water Research
http://www.ru.ac.za/institutes/iwr/



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Suse 9.2/Samba 3.0.8 question

2004-11-11 Thread DChristensen
I just updated Samba on a PC to 3.0.8.  The PC is running a recent upgrade
to SuSE 9.2 Pro.

Before upgrading the Network Browing worked fine, particularly the Windows
Network browsing.  Since upgrading to 3.0.8 yesterday, whenever I try to do
that I get the following errors:

An error occurred while loading smb:/:
Could not start process Unable to create io-slave:
klauncher said: Error loading 'kio_smb'.

Any ideas?

David Christensen
Brokers International, Ltd.
1200 E Main St
Panora, IA  50216
Phone: (641) 755-2775 Ext 1032
Cell: (515) 490-3936
[EMAIL PROTECTED]



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Suse 9.2/Samba 3.0.8 question

2004-11-11 Thread Misty Stanley-Jones
On Thursday 11 November 2004 11:46, [EMAIL PROTECTED] wrote:
 I just updated Samba on a PC to 3.0.8.  The PC is running a recent upgrade
 to SuSE 9.2 Pro.

 Before upgrading the Network Browing worked fine, particularly the Windows
 Network browsing.  Since upgrading to 3.0.8 yesterday, whenever I try to do
 that I get the following errors:

   An error occurred while loading smb:/:
   Could not start process Unable to create io-slave:
   klauncher said: Error loading 'kio_smb'.

 Any ideas?

It is a KDE issue, not a Samba one.  I don't know _what_ the KDE problem is, 
but kio* is the way that KDE interacts with devices.  Try smbmount instead.

Misty


 David Christensen
 Brokers International, Ltd.
 1200 E Main St
 Panora, IA  50216
 Phone: (641) 755-2775 Ext 1032
 Cell: (515) 490-3936
 [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Suse 9.2/Samba 3.0.8 question

2004-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Misty Stanley-Jones wrote:
|
| I just updated Samba on a PC to 3.0.8.  The PC is running
| a recent upgrade to SuSE 9.2 Pro.
|
| Before upgrading the Network Browing worked fine,
| particularly the Windows Network browsing.  Since
| upgrading to 3.0.8 yesterday, whenever I try to do
| that I get the following errors:
|
| An error occurred while loading smb:/:
|   Could not start process Unable to create io-slave:
|   klauncher said: Error loading 'kio_smb'.
|
|Any ideas?
|
|
| It is a KDE issue, not a Samba one.  I don't know _what_
| the KDE problem is,  but kio* is the way that KDE
| interacts with devices.  Try smbmount instead.
Nope.  This is our fault I think.
There was a bug in the libsmbclient.so link commands.  Has
been fixed and there will be a 3.0.9 soon I think.


cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBk5wNIR7qMdg1EfYRAn+TAJ0QWCjEf5srzyWTo3pRp6PvufbgSgCgxd/U
WhCHSvw2LPes2/01rfjLkIc=
=Zps6
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Name not resolved in SWAT server status page

2004-11-11 Thread Plant, Dean
Hi,

I am testing samba-vscan 0.3.5 / clamav 0.8 with samba 3.0.7 built from
source on Solaris 9. With the samba server being a member of an MS active
directory domain.

Everything works as expected with viruses detected, removed or quarantined
but sometimes when a virus is found there is no warning message sent to the
windows box.

On the SWAT status page I noticed that some active connections don't show
client machine names and some do. This seems to link with if the virus
notifications are sent correctly or not.

If the name shows in the client column the notification is sent, if the name
is not showing the notification fails.

PID Client  IP address  Date
2536192.168.0.10192.168.0.10Thu Nov 11 09:03:20 2004
25637   mars192.168.0.11Wed Nov 10 11:21:21 2004

I tested this previously with samba 3.0.2 which was part of an NT domain and
had no problems. 

Can anyone advise what to check to find why some IP's are resolved and some
are not.

Thanks in advance.

Dean Plant


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 3.0.8 compile warnings and link error

2004-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Thomas Bork wrote:
| + ac_cv_gnu_ld_version=GNU ld version 2.12
What platform is this (uname -a or linux distro ver.)?



cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBk58cIR7qMdg1EfYRApkjAKDUFNkxSTBuSsRmxMkSafE8r/060gCfeBiR
20oAeJLypZhtdJ+tJ+TVxBQ=
=Tzhc
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with lowercase Computernames in winbind samba 3.0.8

2004-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hansjoerg Maurer wrote:
| Hi,
|
| we have several samba servers running as AD members (w2003 domain).
| Since the Upgrade to samba 3.0.8 the following message appears,
| when accessing a share on the memberserver from clienthost rmts2.
|
|
| [2004/11/10 12:09:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
|  Username NTROBOTIC\rmts2$ is invalid on this system
| [2004/11/10 12:09:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
|  Username NTROBOTIC\rmts2$ is invalid on this system
|
| [EMAIL PROTECTED] samba]# wbinfo -u | grep -i  rmts2
| NTROBOTIC\RMTS2$
|
| Cound that be a case Problem rmts2 ne RMTS2
Nope.  I don't think so.  Probably an issue with you
libnss_winbind.so installation.
does 'getent passwd NTROBOTIC\rmts2$' return an entry ?

cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBk6WuIR7qMdg1EfYRAvp7AKDEMmHOetHAe5SIf33Btp1MumGvcwCeJm0g
pZwbqvzg4iThnz/uN4JI714=
=pM8w
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 3.0.8 and testparm, smbstatus, tdbbackup

2004-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Thomas Bork wrote:
|
| testparm:
| -
|
| testparm shows:
|
| ERROR: the 'passwd program' (/usr/bin/passwd %u) requires a '%u'
parameter.
| You can see, passwd program _is_ /usr/bin/passwd %u
fixed.  BUG # 2017
| smbstatus:
| --
|
| smbstatus command always shows processes _and_ shares even
| if using the  switches '-p' for showing processes only or
| '-S' for showing shares only  or '-B' for showing locks only:
I'll look into this.




cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBk6ijIR7qMdg1EfYRAsg7AKDz6VGRvBC/1XoOELsLJTjRn9rpqQCg0ibf
wMHhkDg6oVanW7jsBLKljTo=
=l1qI
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.8 breaks all printing from Windows 98

2004-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jonathan Knight wrote:
|
| We have small panic here as we've just put samba 3.0.8
| up to fix the DoS  attack but all printing from Windows 98
| has now broken.  Printing from  Windows XP is still working fine.
Reproduced it.  Try this patch.


cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBk6PcIR7qMdg1EfYRAs1dAJ9pdRpLQHrS6I+Ag1ANUtCn0JHyEQCfQuQI
CYX/Sdt0bhT9lx7SbKKkefQ=
=kZ8M
-END PGP SIGNATURE-
Index: smbd/lanman.c
===
--- smbd/lanman.c   (revision 3681)
+++ smbd/lanman.c   (working copy)
@@ -2267,6 +2267,12 @@
return False;
*rparam_len = 4;
*rparam = REALLOC(*rparam,*rparam_len);
+
+   if ( (snum = lp_servicenumber(sharename)) == -1 ) {
+   DEBUG(0,(api_PrintJobInfo: unable to get service number from 
sharename [%s]\n,
+   sharename));
+   return False;
+   }
   
*rdata_len = 0;

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Slow login/out with XP and SAMBA PDC?

2004-11-11 Thread Adam Tauno Williams
   I thought the profile copy was smart and only copied files that had
   changed? What can I do improve this performance?
  Maybe theoretically, but we've seen it 'stupid' on frequent occasions.
  Really best just to redirect the My Documents short cut to a real share
  (such as a home directory) that doesn't have to get copied all over the
  place.
 Along this same note ... I am pondering the implications of mapping certain 
 parts of the profile (My Documents, maybe My Pictures) to a network drive.  
 But I think this won't work for my truly roaming users (laptop users).  Do 
 any of you redirect the profile directories based on membership of, say, a 

We use some substitution smarts on the samba side to direct what a user
sees as \\{server}\Documents, but otherwise we only use policies (via
ntconfig.pol) for making changes on the client.

 'laptop' group or some such thing?  I know that I can write registry keys 
 based on group membership with Kixtart.  Or am I wrong and laptops won't have 
 a problem with it?  If a laptop user saves a file in My Documents they will 
 expect to have access to the file even when offline.  Thoughts?  I would just 
 like to know how you all generally handle it.

We disable roaming profiles on laptops; they only lead to user confusion
in that case (IMHO).  You can still syncronize other folders using M$'s
sync thingy, or use something like Novell's iFolder.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Migration to Samba

2004-11-11 Thread Dean Landry
I'm migrating to Samba on about 50 desktops.  After I join the domain 
(this is on Windows 2k or XP) I get a whole new set of settings (under 
documents and settings).  Is there a way to tell Windows to use the old 
directory?  It matches their username on samba if that helps.  Note, I'm 
using local profiles.

Thanks,
Dean
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Browsing to Windows 2000 Servers winbind

2004-11-11 Thread Tom Lockwood
I need to browse to a windows share from a fedora client running samba.

 

I have winbind installed, I've tested it. I can logon to the samba box
with my windows name and password. I can even use smbclient and connect
to a share on a windows server just fine. However, I cannot
interactively browse to the Windows Servers I get a message that says:

 

The folder contents could not be displayed. You do not have the
permissions necessary to view the contents of Windows Network:huskie.
(Huskie is the name of my server).

 

I've tried turning encypt passwords on and off in the smb.conf file.
I'm using the + separator but don't know if that could cause a problem.
In short it just seems like in a browse mode the Windows server doesn't
know who I am or can't verify a password while if I connect explicitly
using smbclient it works fine.

 

Any trouble shooting tips would be greatly appreciated

 

Tom Lockwood

Technology Director, Hemlock Public Schools

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Office moving to a Domain system. Looking for some advice.

2004-11-11 Thread Michael Kelly
Hi,

Thank you for your very informative post. I am hoping to roll out the
network in stages, with openLDAP coming in a later stage, mostly due to
my need to get up its learning curve a bit more before putting it into
production. I am hoping that running winbind on the linux boxes that are
not the PDC will give me a reasonable authentication solution for the
time being in that I will not have to replicate usernames and passwords
to each Linux/Samba system. I totally agree that there should be a
standalone firewall that does nothing else, except maybe openVPN and
DHCP for the internal network, but protect the network. I do not believe
at this time that I need a DMZ, other than possibly for a webserver. The
only exterior access needed to our network is via openVPN and SFTP when
that is down. Our mailservers reside in a different local all together
and they are not under my umbrella. I have a SUS server on the wishlist
and am currently singing its praises to the higher ups.

I know that I have a lot of research and documentation left to do
before I get started so I can forsee any pitfalls before I get there. As
mentioned before, my biggest stumbbling block is going to be settig up
LDAP for authentication. I have yet to even get my hands damp with that
software, let alone set it up for network usage.

Thanks again for your reply
Michael Kelly

 rruegner [EMAIL PROTECTED] 10/11/2004 3:33:55 pm 
Hi Michael,
good choice , make the pdc a ldap server
and let other nix machines be ldap clients
the other parts are depend to what you plan
to your network,
normally you have standalone firewall with
minimum 3 nics , web,dmz,intranet
pdc should be placed in intranet also backup machine,
ftp and www , proxy or an internal mail server too ( if you need this 
from outside in the dmz zone )proxy or an internal mail server here
too.
But there are many more setups thinkable
a small solution fo a firewall , which is easy to setup if you have 
dynamic ip or just one ip is ipcop (transparent proxy possible)
The firewall can be used as dhcp server and internal nameserver ( but 
you can let this be done by the pdc too )
If you want home workers connect to office network, pptpd is a good 
choice ( on the firewall or via kernel 2.4.27 pptp pom module on the
pdc 
  )openvpn is good for net to net connects on the firewall to other 
placed offices
A domain system and roaming profiles is an up to date solution
A sus server and a antivir update service is nice to have.
I have serveral setups like this all working very nice
But many things others would be done by others in another way , mostly

of security reasons,so for your question theres no uni-answer
Best Regards



Michael Kelly schrieb:
 Hello all,
 
 I currently maintain an office of 15 employees. All clients are
running
 Windows 200 Professional, although there has been discussion of
 introducing a couple of Linux workstations on a testing basis. 
 
 As part of the office infrastructure we have three Linux machines, a
 firewall/gateway/webserver/FTP server/openVPN machine running Samba
for
 access to webserver directories and documents, a Samba file server
that
 also acts as a WINS server, and a machine that is dedicated to
nightly
 backups of the file server, this box also runs Samba to share out
the
 backup files.
 
 The office is currently setup using a workgroup system and we feel
it
 is time to enjoy the benifits of a domain system with a Samba PDC. I
 have done some preliminary research into the setup of everything but
 would like to get some advice from those more experienced than
myself
 before I begin my journey.
 
 This is what I would like.
 1. The file server to be the PDC as well as an application server.
not
 sure if we will go with roaming profiles yet or not.
 2  All authentication to be centralized to the PDC. I beleive I can
 achieve this with winbind running on the two other machines running
 Samba.
   -currently I am maintaining the same Samba
password
 files on all three systems and it is a pain to co-ordinate
 3. Eliminate the need to have each workstation user also be a user
on
 the Linux systems
 4. Eventually be able to move to an openLDAP authentication system
 without have to redo everything.
 
 
 I know my point are pretty general, but I am just starting with the
 concepts and developing my requirements, also, this is my first
entry
 into the world of domains so my knowledge is a little sparse.
 
 As a note I am reasonably comfortable with basic Samba
configuration,
 manual edits, and administration with Linux
 
 Thanks for any assistance
 Michael Kelly
 
 
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] LDAP suffix question

2004-11-11 Thread Adam Tauno Williams
 I would like to have a DIT similar to this for my Samba server :
 ou=People,dc=domain,dc=com: users accounts
 ou=Group,dc=Domain,dc=com: groups
 ou=Hosts,dc=domain,dc=com: machine accounts
 ou=Samba,dc=domain,dc=com: Samba specific stuff, such as sambaDomain, 
 sambaUnixIdPool, etc
 My understanding is that ldap [user|group|machine] suffix is relative 
 to ldap suffix.  Example :
 ldap suffix = dc=domain,dc=com
 ldap user suffix = ou=People
 Thus, the effective ldap user suffix would be ou=People,dc=domain,dc=com.
 This does not match the DIT I would like to achieve, as I would need to 
 specify lateral suffix for user, group, machine.  I tried :
 ldap suffix = ou=Samba,dc=domain,dc=com
 ldap user suffix = ou=People,dc=domain,dc=com
 ...
 But it does not work. Any idea how to achieve that ?
 The reason I would like to design my DIT in such a way is strictly 
 cosmetic, as I would prefer not to clutter the root with sambaDomain and 
 sambaUnixIdPool entry.

I'd recommend creating something like 

ou=SAM,dc=domain,dc=...
ou=People,ou=SAM,dc=domain,dc=...
ou=Groups,ou=SAM,dc=domain,dc=...
ou=Hosts,ou=SAM,dc=domain,dc=...

And keep everything Samba (or NSS) uses under the ou=SAM.  This totally
avoids (a) having to do root level sub searches, which are always bad,
expecially as your Dit grows to contain other stuff, (b) lets your
partition the PDC stuff off from the rest of your Dit, good if you want
it to have its own server or Samba decides to implement their own LDAP
server, you can just place it in your Dit without having to refactor
anything and (c) makes it easier to delegate the permission peculiar to
PDC operations.

If you really want an ou=People at the root that is still possible, you
simply use a subordinate proxy to place the contents of
ou=People,ou=SAM,... at ou=People,dc=domain,...  then mail clients can
query what they expect to find and you can also drop out all the
attributes and objectclasses they don't need to see.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Compile issues on Fedora Core 3

2004-11-11 Thread Shane Drinkwater
Hello,
I am having problems compileing samba-3.0.8 on fedora core 3 64 bit. The
error message I am getting is:
Compiling dynconfig.c
/tmp/ccY0PMTp.s: Assembler messages:
/tmp/ccY0PMTp.s:44: Error: suffix or operands invalid for `mov'
/tmp/ccY0PMTp.s:97: Error: suffix or operands invalid for `mov'
make: *** [dynconfig.o] Error 1

My config cmd was
./configure --with-winbind --with-pam --with-smbmount --enable-cups

My CPU is a 
processor   : 0
vendor_id   : AuthenticAMD
cpu family  : 15
model   : 5
model name  : AMD Opteron(tm) Processor 244
stepping: 10
cpu MHz : 1792.724
cache size  : 1024 KB
fpu : yes
fpu_exception   : yes
cpuid level : 1
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca
cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext lm 3dnowe
xt 3dnow
bogomips: 3522.56
TLB size: 1088 4K pages
clflush size: 64
cache_alignment : 64
address sizes   : 40 bits physical, 48 bits virtual
power management: ts fid vid ttp

The same thing broke on samba-3.0.7 with Fedora C2 Test 3... Any Idea on
what is wrong
Shane
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] distribute/deploy software to clients

2004-11-11 Thread Ed Plese
On Sun, Nov 07, 2004 at 05:04:29PM +0100, Florian Effenberger wrote:
 Hello,
 
 I run a Windows domain based on Samba 3 and I am searching for a way to 
 distribute/deploy software to clients.

Sorry for the late response, but to add to the list of responses,
http://www.pcrdist.org/ has always seemed like a neat idea.  It's even
free now.  I haven't taken the time to thoroughly try it out yet though.

Ed
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Migration to Samba

2004-11-11 Thread Hamish
Dean Landry wrote:
I'm migrating to Samba on about 50 desktops.  After I join the domain 
(this is on Windows 2k or XP) I get a whole new set of settings (under 
documents and settings).  Is there a way to tell Windows to use the 
old directory?  It matches their username on samba if that helps.  
Note, I'm using local profiles.

Thanks,
Dean
XP and 2k will try to use a directory under documents and settings for 
users profiles, from the domain or local or roaming. If the directory 
already exists, it will try username.domain and then username.domain.001 
etc.
If you want to keep users settings, you will need to copy them over - i 
am not aware of a tool to force it to use existing settings.
To move the users over, log on as the new user, then log in as an 
administrator. Right click my computer  advanced tab  User Profiles: 
settings.
In this window, select the old user (probably COMPUTERNAME\username) and 
click copy to  Browse to documents and 
settings/newusername.domainname  OK. Change permitted to use and add 
the user in the format DOMAIN\username (just username will not work for 
domain users)
Hope that helps
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Restricting access to [homes]

2004-11-11 Thread Christopher Swingley
Greetings!

I've got a samba server that's serving Windows and Mac clients.  I want 
to restrict the [homes] share such that users can *only* connect to 
their own home directory, and not make read-only connections to other 
people's home directories.

For example, on a Mac, if I connect to my Samba server with:

smb://servername/bbonds

and then authenticate myself as:

jgiambi
(password)

I'm given read-only access to bbonds' home directory.  
/var/log/samba/log.smbd shows:

[2004/11/11 11:52:46, 1] smbd/service.c:make_connection_snum(648)
  server (192.168.94.17) connect to service bbonds initially as user 
  jgiambi (uid=25, gid=45) (pid 15621)

How can I prevent these sorts of accesses?  'jgiambi' should only be 
able to access the //servername/jgiambi share via [homes].

The [homes] share in /etc/samba/smb.conf reads:

[homes]
comment = Home Directories
create mask = 0644
directory mask = 0755
browseable = no
writable = yes
guest ok = no

Samba version 3.0.7

Thanks!

Chris
-- 
Christopher S. Swingley  email: [EMAIL PROTECTED] (work)
Intl. Arctic Research Center[EMAIL PROTECTED] (personal)
University of Alaska Fairbanks   www.frontier.iarc.uaf.edu/~cswingle/

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] File case sensitivity

2004-11-11 Thread Brent McDowell

Hi;

I'm re-posting this hoping that someone might be able to help me out -- 
I'm prepared to pay for support if necessary.

I've run into a somewhat interesting issue in regards to IIS serving 
content from a samba share. Occasionly, IIS will return 404 errors for 
content that does infact exist.

From the samba machine, I captured the following:

This is an example of the site http://www.mysite.co.nz/foo not working:

[2004/11/04 09:30:14, 3] smbd/trans2.c:call_trans2qfilepathinfo(2353)
  call_trans2qfilepathinfo: SMB_VFS_STAT of USER/MYSITE.CO.NZ/HTDOCS/FOO failed 
(No such file or directory)
[2004/11/04 09:30:14, 3] smbd/error.c:error_packet(94)
  error string = No such file or directory
[2004/11/04 09:30:14, 3] smbd/error.c:error_packet(114)
  error packet at smbd/trans2.c(2217) cmd=50 (SMBtrans2) 
NT_STATUS_OBJECT_PATH_NOT_FOUND
[2004/11/04 09:30:14, 3] smbd/process.c:process_smb(890)


This is an example of the same site working, after I visited
http://www.mysite.co.nz/ first, a few seconds later:

[2004/11/04 09:34:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(2361)
  call_trans2qfilepathinfo user/mysite.co.nz/htdocs/foo (fnum = -1) level=1004 
call=5 total_data=0
[2004/11/04 09:34:02, 3] smbd/process.c:process_smb(890)
  Transaction 8253551 of length 154
[2004/11/04 09:34:02, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans2 (pid 14455)
[2004/11/04 09:34:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(2331)
  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2004/11/04 09:34:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(2361)
  call_trans2qfilepathinfo user/mysite.co.nz/htdocs/foo (fnum = -1) level=1004 
call=5 total_data=0
[2004/11/04 09:34:02, 3] smbd/process.c:process_smb(890)
  Transaction 8253552 of length 164

So the issue appears to be that samba is returning 
NT_STATUS_OBJECT_PATH_NOT_FOUND errors when IIS is requesting the 
file/path in uppercase. What I don't understand is that samba, by default, 
is configured to ignore case sensitivity.

Has anyone else had similar problems and/or could point me in the right 
direction?

TIA.

--Brent
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Restricting access to [homes]

2004-11-11 Thread Misty Stanley-Jones
On Thursday 11 November 2004 16:03, Christopher Swingley wrote:


 [homes]
 comment = Home Directories
 create mask = 0644
 directory mask = 0755
 browseable = no
 writable = yes
 guest ok = no

You need to make your create mask and directory mask more restrive.  600 and 
700 respectively, is appropriate.  You are giving your other users read-only 
access via Unix permissions.

Misty


 Samba version 3.0.7

 Thanks!

 Chris
 --
 Christopher S. Swingley  email: [EMAIL PROTECTED] (work)
 Intl. Arctic Research Center[EMAIL PROTECTED] (personal)
 University of Alaska Fairbanks   www.frontier.iarc.uaf.edu/~cswingle/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Compile issues on Fedora Core 3

2004-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Shane Drinkwater wrote:
| Hello,
| I am having problems compileing samba-3.0.8 on fedora core 3 64 bit. The
| error message I am getting is:
| Compiling dynconfig.c
| /tmp/ccY0PMTp.s: Assembler messages:
| /tmp/ccY0PMTp.s:44: Error: suffix or operands invalid for `mov'
| /tmp/ccY0PMTp.s:97: Error: suffix or operands invalid for `mov'
| make: *** [dynconfig.o] Error 1
Looks like a compiler bug to me.  Try compiling with -O
instead of -O2.  Maybe contact the Fedora folks.


cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBk9TgIR7qMdg1EfYRAvE1AJ9TXcHsOTYpQPevtk+OhOZIbPDm6wCdFpdA
sJ+gcBRAAhrhYMI8py+gAww=
=+Y8s
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Restricting access to [homes]

2004-11-11 Thread Jeremy Allison
On Thu, Nov 11, 2004 at 12:03:21PM -0900, Christopher Swingley wrote:
 Greetings!
 
 I've got a samba server that's serving Windows and Mac clients.  I want 
 to restrict the [homes] share such that users can *only* connect to 
 their own home directory, and not make read-only connections to other 
 people's home directories.
 
 For example, on a Mac, if I connect to my Samba server with:
 
 smb://servername/bbonds
 
 and then authenticate myself as:
 
 jgiambi
 (password)
 
 I'm given read-only access to bbonds' home directory.  
 /var/log/samba/log.smbd shows:
 
 [2004/11/11 11:52:46, 1] smbd/service.c:make_connection_snum(648)
   server (192.168.94.17) connect to service bbonds initially as user 
   jgiambi (uid=25, gid=45) (pid 15621)
 
 How can I prevent these sorts of accesses?  'jgiambi' should only be 
 able to access the //servername/jgiambi share via [homes].

Common question. Add the line :

valid users = %S

to the homes share.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 3.0.8 and testparm, smbstatus, tdbbackup

2004-11-11 Thread Thomas Bork
Hallo Jerry,

 | testparm shows:
 |
 | ERROR: the 'passwd program' (/usr/bin/passwd %u) requires a '%u'
 parameter.
 | You can see, passwd program _is_ /usr/bin/passwd %u
 
 fixed.  BUG # 2017

thanks a lot.

 | smbstatus command always shows processes _and_ shares even
 | if using the  switches '-p' for showing processes only or
 | '-S' for showing shares only  or '-B' for showing locks only:
 
 I'll look into this.

Thanks again!

der tom
__
Mit WEB.DE FreePhone mit hoechster Qualitaet ab 0 Ct./Min.
weltweit telefonieren! http://freephone.web.de/?mc=021201

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 3.0.8 compile warnings and link error

2004-11-11 Thread Thomas Bork
Hallo Jerry,

 | + ac_cv_gnu_ld_version=GNU ld version 2.12
 
 What platform is this (uname -a or linux distro ver.)?

eisfair - www.eisfair.org

test2 # uname -a
Linux test2 2.4.26-1 #15 Sun Oct 24 22:54:01 CEST 2004 i686 unknown

der tom

Verschicken Sie romantische, coole und witzige Bilder per SMS!
Jetzt neu bei WEB.DE FreeMail: http://freemail.web.de/?mc=021193

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Beating a dead horse - Roaming profiles / logon scripts

2004-11-11 Thread Douglas Sterner
Using samba 3.0.8 and Suse ES 9.0 I'm having problems getting roaming 
profiles/local profiles and logon scripts on a Win2k or WinXP workstation 
working correctly. My bdc is supposed to be doing the authentication 
against my PDC\LDAP server. Even when I enable Only allow local profiles 
on the XP machine it will logout a domain samba user with a sorry no 
roaming or local profile available and theres no storage space for one. I 
believe its permissions but nothing is showing up in the logs. The logon 
scripts aren't even trying to run. The only user that can login is root 
and myself with a local profile and once root logins it loads notepad 
opens up with the following displayed.

[.ShellClassInfo]
[EMAIL PROTECTED],-21787

PDC Info

[global]
 
username map = /etc/samba/smbusers
log level = 1
log file = /var/log/samba/%m.log
max log size = 0
logon path = \\%L\profiles\%u
logon drive = H:
domain logons = Yes
wins support = Yes
idmap uid = 1-2
idmap gid = 1-2
winbind use default domain = Yes
map acl inherit = Yes

[homes]
comment = Home Directories
valid users = %S
read only = No
inherit acls = Yes
browseable = No

[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
guest ok = Yes
share modes = No

[profiles]
comment = Network Profiles Service
path = /var/lib/samba/profiles/%u
read only = No
create mask = 0600
directory mask = 0700
store dos attributes = Yes
browseable = No
Groupt / Owner
/var/log/samba/profiles user/root 777 ?Permission settings and 
user/group should be set to what
/var/log/samba/netlogon Domain Users/root 775 ?Permission settings 
and user/group should be set to what
/var/log/samba/netlogon/scripts Domain Admins/root 755  ?Permission 
settings and user/group should be set to what


BDC Info

[global]
log level = 1
log file = /var/log/samba/%m.log
max log size = 0
logon path = \\%L\profiles\%u
logon drive = H:
domain logons = Yes
domain master = No
wins server = 192.168.XX.XX
idmap uid = 1-2
idmap gid = 1-2
winbind use default domain = Yes
map acl inherit = Yes

[homes]
comment = Home Directories
valid users = %S
read only = No
inherit acls = Yes
browseable = No

[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
guest ok = Yes
share modes = No

[profiles]
comment = Network Profiles Service
path = /var/lib/samba/profiles/%u
read only = No
create mask = 0600
directory mask = 0700
store dos attributes = Yes
browseable = No

Groupt / Owner
/var/log/samba/profiles user/root 777 ?Permission settings and 
user/group should be set to what
/var/log/samba/netlogon Domain Users/root 775 ?Permission settings 
and user/group should be set to what
/var/log/samba/netlogon/scripts Domain Admins/root 755  ?Permission 
settings and user/group should be set to what



Thanks

Douglas Sterner
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Performance of Samba across WAN Links

2004-11-11 Thread Baldwin Sung
Hi,

Is anybody running Samba across T1 WAN links? If so, how's the peformance.

Thanks
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Problem with lowercase Computernames in winbind samba 3.0.8

2004-11-11 Thread Hansjoerg.Maurer
Hi 

thank you for your reply
The host seems to be in the database
[EMAIL PROTECTED] root]# getent passwd | grep rmts2
NTROBOTIC\rmts2$:x:10261:10005:RMTS2:/home/NTROBOTIC/rmts2_:/bin/false

even if
[EMAIL PROTECTED] root]# getent passwd NTROBOTIC\rmts2$
[EMAIL PROTECTED] root]#
does not show a result
(same without )

I allready wrote an message to samba technical about this issue.
It's not a samba 3.0.8 problem as a thought at the beginning.

I downgraded to samba 3.0.7, and the problem still exists.
( We moved from a NT4 domain to a w2003 domain and from 3.0.7 to 3.0.8
at the same time, and in the 3.0.7 testinstallation in a testdomain
we dont recognize the problem (see below))

The problem occurs on redhat 8.0, suse 8.2 and solaris 8 ( 3 servers)

Here is the newer email to samba technical:

Greetings from munich

Hansjörg

I have successfully joined a W2003 AD with samba-3.0.8
Accessing shares from a samba server with a windows2000 host (rmts1)
works but is significantly slower than before (samba as an NT4 Domain member).


I found that when accessing the sahre samba starts logging.
[2004/11/11 08:30:48, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
 Username NTROBOTIC\rmts1$ is invalid on this system

(i can send a level10 if it is needed)

We have a Unix NIS Userdatabase and the same Usernames in AD.
Winbindd is running and the domainusers are shown with.
[EMAIL PROTECTED] samba]# wbinfo -u | grep -i rmts1
RMTS1$
or (depending on the settings of winbind trusted domains only)
[EMAIL PROTECTED] samba]# wbinfo -u | grep -i rmts1
NTROBOTIC\RMTS1$


Even if I put winbind in my /etc/nsswitch.conf (which I actually don't want to, 
because we allready have the users in NIS)
and getent passwd shows RMTS1$ or NTROBOTIC\RMTS1$, the error still occurs.

Side Note:
The error occurs only once, if I access the share via (search computer- 
doubleclick on computername etc or via network neibourghhood-whole network...)
If I access it via a network resource, I added under network neibourghhood, the 
error from above is produced appears for every file i open,
which slows down the progress a lot...

Thank you very much

Hansjörg Maurer




-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]
Sent: Thu 11.11.2004 18:47
To: Maurer, Hansjörg
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Problem with lowercase Computernames in winbind samba 3.0.8
 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hansjoerg Maurer wrote:
| Hi,
|
| we have several samba servers running as AD members (w2003 domain).
| Since the Upgrade to samba 3.0.8 the following message appears,
| when accessing a share on the memberserver from clienthost rmts2.
|
|
| [2004/11/10 12:09:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
|  Username NTROBOTIC\rmts2$ is invalid on this system
| [2004/11/10 12:09:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
|  Username NTROBOTIC\rmts2$ is invalid on this system
|
| [EMAIL PROTECTED] samba]# wbinfo -u | grep -i  rmts2
| NTROBOTIC\RMTS2$
|
| Cound that be a case Problem rmts2 ne RMTS2

Nope.  I don't think so.  Probably an issue with you
libnss_winbind.so installation.

does 'getent passwd NTROBOTIC\rmts2$' return an entry ?




cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBk6WuIR7qMdg1EfYRAvp7AKDEMmHOetHAe5SIf33Btp1MumGvcwCeJm0g
pZwbqvzg4iThnz/uN4JI714=
=pM8w
-END PGP SIGNATURE-


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] GID-to-SID mapping fails

2004-11-11 Thread Matt Seitz
Name-to-SID works:
[EMAIL PROTECTED] mpmCx]# wbinfo -n QA4\\DnsUpdateProxy
S-1-5-21-3152226350-2923503207-3337354198-1105 Domain Group (2)
SID-to-Name works
[EMAIL PROTECTED] mpmCx]# wbinfo -s 
S-1-5-21-3152226350-2923503207-3337354198-1105
QA4\DnsUpdateProxy 2
SID-to-GID works:
[EMAIL PROTECTED] mpmCx]# wbinfo -Y 
S-1-5-21-3152226350-2923503207-3337354198-1105
10010
GID-to-SID fails:
[EMAIL PROTECTED] mpmCx]# wbinfo -G 10010
Could not convert gid 10010 to sid
Any suggestions?
Additional info:
[EMAIL PROTECTED] mpmCx]# wbinfo --version
Version 3.0.7-1.3E
[EMAIL PROTECTED] mpmCx]# wbinfo -g
BUILTIN\System Operators
BUILTIN\Replicators
BUILTIN\Guests
BUILTIN\Power Users
BUILTIN\Print Operators
BUILTIN\Administrators
BUILTIN\Account Operators
BUILTIN\Backup Operators
BUILTIN\Users
QA4\Domain Computers
QA4\Domain Controllers
QA4\Schema Admins
QA4\Enterprise Admins
QA4\Domain Admins
QA4\Domain Users
QA4\Domain Guests
QA4\Group Policy Creator Owners
QA4\DnsUpdateProxy
[EMAIL PROTECTED] mpmCx]# getent group | grep 10010
QA4\DnsUpdateProxy:x:10010:
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] [Very Strange] Windows Networking suddendly stopped working

2004-11-11 Thread Carsten Menke
Hi list,
I hope that maybe one of you can shed some light on this, as this is a very 
strange case and I don't even
have the slightest clue from what this symptom may all come from. Maybe not 
Samba, maybe Hardware, maybe buggy
windows .

Problem:
We have running  a Samba 3.0.7 (from backports.org) Debian 3.0 STABLE Server here
for over a year now. On Tuesday this week we got the first report from 1 user,
that the Windows Network Neighborhood is not accessable, we did not thought of a 
problem
first.  On Wednesday the next 2 reports from different users on different 
machines came in. And finally
yesterday another 5 reports ( All within the same company using the same Server)

NOTE: The error messages following were translated from a german localized 
version of Windows XP Prof.
so they might be called differently in the english version

So we started looking into the Problem, the error message given was, when trying 
to access the Windows Networking Neighborhood

The network is not existent or was not started.
It turned out that the services Server Service, Computer Browser Service were 
not started. Trying to start them manually
ended with a timeout. The Event Log is showing nothing.

And now the Fun begins 
We thought first of a network problem and to isolate this we directly connected 
1 PC via a crosslink
cable to the Samba Server, giving the PC  a static IP address. (Normally we use 
DHCP). Even
now the error message was the same, more strangely, if you pulled out the 
network cable completley
the Computer and all Services started normally. Pluggin the cable back in, the 
same problems arose.

Unfortunatley enough is, that sometimes it works *with* the network cable 
plugged in
but then a minute later it doesn't.

So in the next step we replaced the NIC of the Server with a new one, thinking 
we solved the problem
(While replacing the NIC requries a complete reboot this step was done with this 
as well, a tdbbackup -v *.tdb was
also done, showing everything is ok, and I removed manually the browse.dat ).
The first try succeeded, but the second try was again the same result.

And we found out that this problem is bound to the computer not the user, as the 
user can logon on another computer
normal without any problems. All computers were running Windows XP Prof SP1a.
Altough there is a virus Scanner (CA Etrust Inoculan) with up-to-date signatures 
on the computer, we scanned the computers in question
by 2 additional Anti Virus Packages, 1. H+BEDV AntiVir and 2. Kasperksy, all 
scanners marking the computer clean.
Running nbtstat -RR didn't also not solve the problem.

Next, our MCSE decided to install Windows XP SP2 on the computers in question, 
and gues what, that solved the problem so far.

So my question is what is the **REAL** Problem we seeing here, I don't believe 
that the solution is SP2, and normally I wouldn't worry
if it would be 1 Computer showing this odd behavior, but the number increasing 
of the computers showing the same sympthoms within
3 days does make me nervous.

I have looked thru samba log files and they were showing the things below  and also
rather frequently No route to host here is the output of them. There is no 
router between
the PC's and the server, they are connected via a 3Com Super Stack III Switch.

Logfile:
[2004/11/12 02:34:14, 0] lib/util_sock.c:get_peer_addr(1000)
  getpeername failed. Error was Transport endpoint is not connected
[2004/11/12 02:34:14, 0] lib/util_sock.c:write_socket_data(430)
  write_socket_data: write failure. Error = Connection reset by peer
[2004/11/12 02:34:14, 0] lib/util_sock.c:send_smb(647)
  Error writing 4 bytes to client. -1. (Connection reset by peer)
[2004/11/12 02:34:14, 0] smbd/service.c:make_connection(800)
  neckar (192.168.1.65) couldn't find service user
[2004/11/12 02:38:40, 0] rpc_server/srv_util.c:get_alias_user_groups(219)
  get_alias_user_groups: gid of user xxx doesn't exist. Check your /etc/passwd 
and /etc/group files

I double checked the above message, the gid *is* in /etc/group and the userid 
does also exist.

I'm glad for every hint etc. etc. I could get, as it seems that this could turn 
out to be a real problem

Regards
Carsten
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Performance of Samba across WAN Links

2004-11-11 Thread Baldwin Sung
Very interesting. When you state trim down roaming profiles, do you
mean disable roaming profiles all together or to remove certain
functionality from roaming profiles? If the latter is the case, which
functions are removed to improve the speed? Thanks!


On Thu, 11 Nov 2004 21:30:39 -0500, Eric Feldhusen
[EMAIL PROTECTED] wrote:
 Baldwin Sung wrote:
 
 
  Hi,
 
  Is anybody running Samba across T1 WAN links? If so, how's the peformance.
 
  Thanks
 
 Yup, between 4 of my schools, I do just that. It works fine, the only
 time you notice any slowness, it's at login on Windows 2k/XP due to the
 roaming profiles, but that's not a problem with Samba, just with how
 Microsoft implimented roaming profiles for W2k/XP.  Trim the roaming
 profiles down, logins speed up.
 
 --
 NOTICE: New email address: [EMAIL PROTECTED]
 --
 Eric Feldhusen
 Network Administrator for Adams, Chassell,
 Dollar Bay-Tamarack City, and
 Lake Linden-Hubbell Public Schools
 emailto:[EMAIL PROTECTED]
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Point n print woes

2004-11-11 Thread AWC Maillists
Hi,
So I have setup Samba to allow print Point n Print.
print$ is setup exactly as recommend.  The various directories for 
different OS are setup.

I follow the steps to upload the printer driver in WindowsXP
- Using network neighborhood go to the printer I will to upload
- Right click on printer
- Select properties
- Click on No when prompted to install drivers
- Click on Advanced tab
- Click on New driver
The trouble is New driver is grey out and I can not click on it 
and the Driver drop down menu has nothing either.  (And I have other 
printer already manually installed...)Soo I
am stuck trying to upload drivers to the Samba server.

Any suggestions on where to look?  I have been working on this for a 
while and I am stumped.

Thanks.
--- Charles
SMB.conf clip...
[$print]
comment = PRinter Drivers
path = /var/lib/samba/drivers
browseable = yes
guest ok = no
read only = yes
write list = root
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] having problem with multipale interfaces

2004-11-11 Thread najeeb

Hi, 

I am having some prob with my samba. I am runing samba as a PDC and one 
one interface it works better when I put another interface as I have 
more networks it gives me a message that the following domain is not 
avaliable. I don't know what prob it can be I have changed smb.conf 
many times with the follwing but still not able to get it work.

interface=172.168.0.0/24 172.168.8.0/24

and with this also I have tried

interface= eth0

but still it doesn't work I don't have for the time being any firewall 
on my network I can ping the other network client from samba but can't 
conect it with samba. I am really worry about it what it can be plz 
help me out with this. I will be really thank full to you people.
thanks in advance


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


svn commit: samba-web r409 - in trunk: .

2004-11-11 Thread deryck
Author: deryck
Date: 2004-11-11 15:07:48 + (Thu, 11 Nov 2004)
New Revision: 409

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=409

Log:

Update redirect page to reflect us3 being down temporarily.

--deryck

Modified:
   trunk/redirect_us.html


Changeset:
Modified: trunk/redirect_us.html
===
--- trunk/redirect_us.html  2004-11-10 19:22:53 UTC (rev 408)
+++ trunk/redirect_us.html  2004-11-11 15:07:48 UTC (rev 409)
@@ -13,10 +13,9 @@
 
randomMirror = new Array;
randomMirror[0] = http://us1.samba.org/samba/;
-   randomMirror[1] = http://us3.samba.org/samba/;
-   randomMirror[2] = http://us4.samba.org/samba/;
+   randomMirror[1] = http://us4.samba.org/samba/;

-   n=Math.floor(Math.random()*3)   
+   n=Math.floor(Math.random()*2)   

 /script
 



svn commit: samba r3681 - branches/SAMBA_3_0/source trunk/source

2004-11-11 Thread gd
Author: gd
Date: 2004-11-11 15:38:21 + (Thu, 11 Nov 2004)
New Revision: 3681

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3681

Log:
Fix build of libsmbclient on x86_64.
Patch from Lars Mueller [EMAIL PROTECTED]

Guenther


Modified:
   branches/SAMBA_3_0/source/Makefile.in
   trunk/source/Makefile.in


Changeset:
Modified: branches/SAMBA_3_0/source/Makefile.in
===
--- branches/SAMBA_3_0/source/Makefile.in   2004-11-11 05:29:58 UTC (rev 
3680)
+++ branches/SAMBA_3_0/source/Makefile.in   2004-11-11 15:38:21 UTC (rev 
3681)
@@ -472,7 +472,7 @@
$(UBIQX_OBJ) $(LIB_NONSMBD_OBJ) $(GROUPDB_OBJ) $(SECRETS_OBJ) \
$(POPT_LIB_OBJ) $(SMBLDAP_OBJ) $(DUMMYROOT_OBJ)
 
-SMBGET_OBJ = utils/smbget.o $(POPT_LIB_OBJ) $(LIBSMBCLIENT_OBJ) $(SECRETS_OBJ)
+SMBGET_OBJ = utils/smbget.o $(POPT_LIB_OBJ) $(LIBSMBCLIENT_OBJ)
 
 RPCCLIENT_OBJ1 = rpcclient/rpcclient.o rpcclient/cmd_lsarpc.o \
 rpcclient/cmd_samr.o rpcclient/cmd_spoolss.o \
@@ -508,7 +508,8 @@
   libsmb/libsmb_cache.o \
   $(PARAM_OBJ) $(LIB_NONSMBD_OBJ) \
   $(LIBSMB_OBJ) $(KRBCLIENT_OBJ) $(UBIQX_OBJ) \
-  $(LIBMSRPC_OBJ) $(RPC_PARSE_OBJ) $(PASSDB_GET_SET_OBJ)
+  $(LIBMSRPC_OBJ) $(RPC_PARSE_OBJ) $(PASSDB_GET_SET_OBJ) \
+  $(SECRETS_OBJ) 
 
 # This shared library is intended for linking with unit test programs
 # to test Samba internals.  It's called libbigballofmud.so to
@@ -991,7 +992,7 @@
 bin/[EMAIL PROTECTED]@: $(LIBSMBCLIENT_PICOBJS)
@echo Linking libsmbclient shared library $@
@$(SHLD) $(LDSHFLAGS) -o $@ $(LIBSMBCLIENT_PICOBJS) $(LDFLAGS) $(LIBS) \
-   $(KRB5LIBS) $(LDAP_LIBS) $(SECRETS_OBJ) \
+   $(KRB5LIBS) $(LDAP_LIBS) \
@[EMAIL PROTECTED] [EMAIL PROTECTED](LIBSMBCLIENT_MAJOR)
 
 bin/libsmbclient.a: $(LIBSMBCLIENT_PICOBJS)

Modified: trunk/source/Makefile.in
===
--- trunk/source/Makefile.in2004-11-11 05:29:58 UTC (rev 3680)
+++ trunk/source/Makefile.in2004-11-11 15:38:21 UTC (rev 3681)
@@ -480,7 +480,7 @@
$(UBIQX_OBJ) $(LIB_NONSMBD_OBJ) $(GROUPDB_OBJ) $(SECRETS_OBJ) \
$(POPT_LIB_OBJ) $(SMBLDAP_OBJ) $(DUMMYROOT_OBJ) libsmb/asn1.o
 
-SMBGET_OBJ = utils/smbget.o $(POPT_LIB_OBJ) $(LIBSMBCLIENT_OBJ) $(SECRETS_OBJ)
+SMBGET_OBJ = utils/smbget.o $(POPT_LIB_OBJ) $(LIBSMBCLIENT_OBJ)
 
 RPCCLIENT_OBJ1 = rpcclient/rpcclient.o rpcclient/cmd_lsarpc.o \
 rpcclient/cmd_samr.o rpcclient/cmd_spoolss.o \
@@ -517,7 +517,8 @@
   libsmb/libsmb_cache.o \
   $(PARAM_OBJ) $(LIB_NONSMBD_OBJ) \
   $(LIBSMB_OBJ) $(KRBCLIENT_OBJ) $(UBIQX_OBJ) \
-  $(LIBMSRPC_OBJ) $(RPC_PARSE_OBJ) $(PASSDB_GET_SET_OBJ)
+  $(LIBMSRPC_OBJ) $(RPC_PARSE_OBJ) $(PASSDB_GET_SET_OBJ) \
+  $(SECRETS_OBJ) 
 
 # This shared library is intended for linking with unit test programs
 # to test Samba internals.  It's called libbigballofmud.so to
@@ -999,7 +1000,7 @@
 bin/[EMAIL PROTECTED]@: $(LIBSMBCLIENT_PICOBJS)
@echo Linking libsmbclient shared library $@
@$(SHLD) $(LDSHFLAGS) -o $@ $(LIBSMBCLIENT_PICOBJS) $(LDFLAGS) $(LIBS) \
-   $(KRB5LIBS) $(LDAP_LIBS) $(SECRETS_OBJ) \
+   $(KRB5LIBS) $(LDAP_LIBS) \
@[EMAIL PROTECTED] [EMAIL PROTECTED](LIBSMBCLIENT_MAJOR)
 
 bin/libsmbclient.a: $(LIBSMBCLIENT_PICOBJS)



svn commit: samba-web r410 - in trunk/news/calendar: .

2004-11-11 Thread deryck
Author: deryck
Date: 2004-11-11 17:17:41 + (Thu, 11 Nov 2004)
New Revision: 410

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=410

Log:

Adding jht events to Team calendar.

--deryck

Added:
   trunk/news/calendar/jht_chicago.txt
   trunk/news/calendar/jht_sandiego.txt
Modified:
   trunk/news/calendar/index.html
   trunk/news/calendar/showDate.js


Changeset:
Sorry, the patch is too large (307 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=410


svn commit: samba r3682 - in branches/SAMBA_3_0/source/smbd: .

2004-11-11 Thread jerry
Author: jerry
Date: 2004-11-11 17:40:49 + (Thu, 11 Nov 2004)
New Revision: 3682

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3682

Log:
fix seg fault in lanman printing code caused by uninitialized variable
Modified:
   branches/SAMBA_3_0/source/smbd/lanman.c


Changeset:
Modified: branches/SAMBA_3_0/source/smbd/lanman.c
===
--- branches/SAMBA_3_0/source/smbd/lanman.c 2004-11-11 15:38:21 UTC (rev 
3681)
+++ branches/SAMBA_3_0/source/smbd/lanman.c 2004-11-11 17:40:49 UTC (rev 
3682)
@@ -2267,6 +2267,12 @@
return False;
*rparam_len = 4;
*rparam = REALLOC(*rparam,*rparam_len);
+
+   if ( (snum = lp_servicenumber(sharename)) == -1 ) {
+   DEBUG(0,(api_PrintJobInfo: unable to get service number from 
sharename [%s]\n,
+   sharename));
+   return False;
+   }
   
*rdata_len = 0;




svn commit: samba-web r411 - in trunk: history news/calendar

2004-11-11 Thread deryck
Author: deryck
Date: 2004-11-11 17:52:27 + (Thu, 11 Nov 2004)
New Revision: 411

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=411

Log:

Get the number of days right for John's events.
And since release notes are calling the old favicon
from browser cache, add link to the correct version 
of favicon.

--deryck

Modified:
   trunk/history/rnotes_template
   trunk/news/calendar/index.html


Changeset:
Modified: trunk/history/rnotes_template
===
--- trunk/history/rnotes_template   2004-11-11 17:17:41 UTC (rev 410)
+++ trunk/history/rnotes_template   2004-11-11 17:52:27 UTC (rev 411)
@@ -4,6 +4,7 @@
 
 head
 titleSamba - Release Notes Archive/title
+link rel=shortcut icon href=/samba/images/favicon.ico /
 /head
 
 body

Modified: trunk/news/calendar/index.html
===
--- trunk/news/calendar/index.html  2004-11-11 17:17:41 UTC (rev 410)
+++ trunk/news/calendar/index.html  2004-11-11 17:52:27 UTC (rev 411)
@@ -225,7 +225,7 @@
tda href=jht_sandiego.txt onclick=showDate(12); return 
false13/a/td
tda href=jht_sandiego.txt onclick=showDate(12); return 
false14/a/td
tda href=jht_sandiego.txt onclick=showDate(12); return 
false15/a/td
-   td16/td
+   tda href=jht_sandiego.txt onclick=showDate(12); return 
false16a/td
td17/td
td18/td
  /tr
@@ -294,7 +294,7 @@
tda href=jht_chicago.txt onclick=showDate(13); return 
false24/a/td
tda href=jht_chicago.txt onclick=showDate(13); return 
false25/a/td
tda href=jht_chicago.txt onclick=showDate(13); return 
false26/a/td
-   td27/td
+   tda href=jht_chicago.txt onclick=showDate(13); return 
false27/a/td
td28/td
td29/td
  /tr



svn commit: samba r3683 - in branches/SAMBA_3_0/source/utils: .

2004-11-11 Thread jerry
Author: jerry
Date: 2004-11-11 18:11:40 + (Thu, 11 Nov 2004)
New Revision: 3683

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3683

Log:
BUG 2017: fix testparm reporting for the passwd program string
Modified:
   branches/SAMBA_3_0/source/utils/testparm.c


Changeset:
Modified: branches/SAMBA_3_0/source/utils/testparm.c
===
--- branches/SAMBA_3_0/source/utils/testparm.c  2004-11-11 17:40:49 UTC (rev 
3682)
+++ branches/SAMBA_3_0/source/utils/testparm.c  2004-11-11 18:11:40 UTC (rev 
3683)
@@ -145,7 +145,7 @@
ret = 1;
} else 
/* check if there's a %u parameter present */
-   if(strstr_m(lp_passwd_chat(), %u) == NULL) {
+   if(strstr_m(lp_passwd_program(), %u) == NULL) {
fprintf(stderr, ERROR: the 'passwd program' (%s) 
requires a '%%u' parameter.\n, lp_passwd_program());
ret = 1;
}



svn commit: samba r3684 - in branches/SAMBA_3_0_RELEASE: packaging/Debian/debian-stable packaging/Solaris source source/lib source/rpc_client source/rpc_parse source/rpcclient source/smbd source/utils

2004-11-11 Thread jerry
Author: jerry
Date: 2004-11-11 20:37:44 + (Thu, 11 Nov 2004)
New Revision: 3684

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3684

Log:
syncing up some changes for 3.0.9

svn merge -r 3628:3638 $SVNURL/branches/SAMBA_3_0
svn merge -r 3688:3639 $SVNURL/branches/SAMBA_3_0
svn merge -r 3644:3645 $SVNURL/branches/SAMBA_3_0
svn merge -r 3645:3649 $SVNURL/branches/SAMBA_3_0
svn merge -r 3649:3650 $SVNURL/branches/SAMBA_3_0
svn merge -r 3666:3668 $SVNURL/branches/SAMBA_3_0
svn merge -r 3671:3673 $SVNURL/branches/SAMBA_3_0
svn merge -r 3674:3681 $SVNURL/branches/SAMBA_3_0
svn merge -r 3681:3682 $SVNURL/branches/SAMBA_3_0
svn merge -r 3682:3683 $SVNURL/branches/SAMBA_3_0

also pulled in updated solaris packaging from 3.0



Added:
   branches/SAMBA_3_0_RELEASE/packaging/Solaris/samba.init.master
   branches/SAMBA_3_0_RELEASE/packaging/Solaris/smb.conf.default
Removed:
   branches/SAMBA_3_0_RELEASE/packaging/Solaris/pkg-specs/
   branches/SAMBA_3_0_RELEASE/packaging/Solaris/samba.server.master
Modified:
   branches/SAMBA_3_0_RELEASE/packaging/Debian/debian-stable/changelog
   branches/SAMBA_3_0_RELEASE/packaging/Solaris/makepkg.sh
   branches/SAMBA_3_0_RELEASE/packaging/Solaris/postinstall
   branches/SAMBA_3_0_RELEASE/packaging/Solaris/prototype.master
   branches/SAMBA_3_0_RELEASE/source/Makefile.in
   branches/SAMBA_3_0_RELEASE/source/VERSION
   branches/SAMBA_3_0_RELEASE/source/lib/util.c
   branches/SAMBA_3_0_RELEASE/source/rpc_client/cli_spoolss.c
   branches/SAMBA_3_0_RELEASE/source/rpc_parse/parse_spoolss.c
   branches/SAMBA_3_0_RELEASE/source/rpcclient/cmd_spoolss.c
   branches/SAMBA_3_0_RELEASE/source/smbd/dosmode.c
   branches/SAMBA_3_0_RELEASE/source/smbd/lanman.c
   branches/SAMBA_3_0_RELEASE/source/utils/testparm.c


Changeset:
Sorry, the patch is too large (579 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3684


svn commit: samba r3685 - in branches/SAMBA_3_0/source: .

2004-11-11 Thread jerry
Author: jerry
Date: 2004-11-11 20:41:28 + (Thu, 11 Nov 2004)
New Revision: 3685

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3685

Log:
setting the 3.0 branch to 3.0.10pre1-svn
Modified:
   branches/SAMBA_3_0/source/VERSION


Changeset:
Modified: branches/SAMBA_3_0/source/VERSION
===
--- branches/SAMBA_3_0/source/VERSION   2004-11-11 20:37:44 UTC (rev 3684)
+++ branches/SAMBA_3_0/source/VERSION   2004-11-11 20:41:28 UTC (rev 3685)
@@ -19,7 +19,7 @@
 
 SAMBA_VERSION_MAJOR=3
 SAMBA_VERSION_MINOR=0
-SAMBA_VERSION_RELEASE=8
+SAMBA_VERSION_RELEASE=10
 
 
 # For 'pre' releases the version will be   #
@@ -29,7 +29,7 @@
 # e.g. SAMBA_VERSION_PRE_RELEASE=1 #
 #  -  2.2.9pre1 #
 
-SAMBA_VERSION_PRE_RELEASE=2
+SAMBA_VERSION_PRE_RELEASE=1
 
 
 # For 'rc' releases the version will be#



svn commit: samba r3686 - in branches/SAMBA_4_0/source: libcli/auth libcli/util librpc/idl librpc/rpc rpc_server/netlogon torture torture/rpc

2004-11-11 Thread abartlet
Author: abartlet
Date: 2004-11-11 23:24:30 + (Thu, 11 Nov 2004)
New Revision: 3686

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3686

Log:
The results of some work on the NETLOGON pipe:

Break out the samsync tests from RPC-NETLOGON into a new RPC-SAMSYNC,
that will cross-verify all the values.

Add support for the way netlogon credentials are shared between the
pipe that sets up schannel and the pipe that is encrypted with it.

Test this support, by calling both NETLOGON and SAMR operations in the
RPC-SCHANNEL test.

Move some of the Netlogon NEG flags into the .idl, now we have an idea
what a few of them really are.

Rename the sam_pwd_hash into a name that has meaning (all other crypto
functions were renamed in Samba4 ages ago).

Break out NTLMv2 functionality for operation on the NT hash - I intend
to do NTLMv2 logins in the samsync test in future, and naturally I
only have the hash.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/libcli/auth/credentials.h
   branches/SAMBA_4_0/source/libcli/auth/gensec.h
   branches/SAMBA_4_0/source/libcli/util/smbdes.c
   branches/SAMBA_4_0/source/libcli/util/smbencrypt.c
   branches/SAMBA_4_0/source/librpc/idl/netlogon.idl
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_schannel.c
   branches/SAMBA_4_0/source/rpc_server/netlogon/schannel_state.c
   branches/SAMBA_4_0/source/torture/config.mk
   branches/SAMBA_4_0/source/torture/rpc/netlogon.c
   branches/SAMBA_4_0/source/torture/rpc/schannel.c
   branches/SAMBA_4_0/source/torture/rpc/xplogin.c
   branches/SAMBA_4_0/source/torture/torture.c


Changeset:
Sorry, the patch is too large (737 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3686


svn commit: samba r3687 - in branches/SAMBA_4_0/source/torture/rpc: .

2004-11-11 Thread abartlet
Author: abartlet
Date: 2004-11-11 23:25:33 + (Thu, 11 Nov 2004)
New Revision: 3687

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3687

Log:
Gaah - I forgot to add the new file for the RPC-SAMSYNC test...

See -r 3686

Andrew Bartlett

Added:
   branches/SAMBA_4_0/source/torture/rpc/samsync.c


Changeset:
Sorry, the patch is too large (428 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3687


svn commit: samba r3688 - in branches/SAMBA_3_0/source/utils: .

2004-11-11 Thread jerry
Author: jerry
Date: 2004-11-11 23:30:32 + (Thu, 11 Nov 2004)
New Revision: 3688

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3688

Log:
fix output of smbstatus to make the man page; fix -L, -p,  -S and the -u 
username functionality
Modified:
   branches/SAMBA_3_0/source/utils/status.c


Changeset:
Modified: branches/SAMBA_3_0/source/utils/status.c
===
--- branches/SAMBA_3_0/source/utils/status.c2004-11-11 23:25:33 UTC (rev 
3687)
+++ branches/SAMBA_3_0/source/utils/status.c2004-11-11 23:30:32 UTC (rev 
3688)
@@ -47,6 +47,8 @@
 static BOOL processes_only=False;
 static int show_brl;
 
+const char *username = NULL;
+
 /* added by OH */
 static void Ucrit_addUsername(const char *username)
 {
@@ -578,6 +580,7 @@
int c;
static int profile_only = 0;
TDB_CONTEXT *tdb;
+   BOOL show_processes, show_locks, show_shares;
poptContext pc;
struct poptOption long_options[] = {
POPT_AUTOHELP
@@ -585,7 +588,7 @@
{verbose, 'v', POPT_ARG_NONE, verbose, 'v', Be verbose 
},
{locks,   'L', POPT_ARG_NONE, locks_only, 'L', Show 
locks only },
{shares,  'S', POPT_ARG_NONE, shares_only, 'S', 
Show shares only },
-   {user, 'u', POPT_ARG_STRING,  0, 'u', Switch to user },
+   {user,'u', POPT_ARG_STRING,   username, 'u', Switch 
to user },
{brief,   'b', POPT_ARG_NONE, brief, 'b', Be brief 
},
 #ifdef WITH_PROFILE
{profile, 'P', POPT_ARG_NONE, profile_only, 'P', Do 
profiling },
@@ -615,6 +618,15 @@
}
}
 
+   /* setup the flags based on the possible combincations */
+
+   show_processes = !(shares_only || locks_only || profile_only) || 
processes_only;
+   show_locks = !(shares_only || processes_only || profile_only) || 
locks_only;
+   show_shares= !(processes_only || locks_only || profile_only) || 
shares_only;
+
+   if ( username )
+   Ucrit_addUsername( username );
+
if (verbose) {
d_printf(using configfile = %s\n, dyn_CONFIGFILE);
}
@@ -628,43 +640,50 @@
return profile_dump();
}

-   tdb = tdb_open_log(lock_path(sessionid.tdb), 0, TDB_DEFAULT, 
O_RDONLY, 0);
-   if (!tdb) {
-   d_printf(sessionid.tdb not initialised\n);
-   } else {
-   if (locks_only) goto locks;
+   if ( show_processes ) {
+   tdb = tdb_open_log(lock_path(sessionid.tdb), 0, TDB_DEFAULT, 
O_RDONLY, 0);
+   if (!tdb) {
+   d_printf(sessionid.tdb not initialised\n);
+   } else {
+   d_printf(\nSamba version %s\n,SAMBA_VERSION_STRING);
+   d_printf(PID Username  Group Machine   
 \n);
+   
d_printf(---\n);
 
-   d_printf(\nSamba version %s\n,SAMBA_VERSION_STRING);
-   d_printf(PID Username  Group Machine   
 \n);
-   
d_printf(---\n);
+   tdb_traverse(tdb, traverse_sessionid, NULL);
+   tdb_close(tdb);
+   }
 
-   tdb_traverse(tdb, traverse_sessionid, NULL);
-   tdb_close(tdb);
+   if (processes_only) 
+   exit(0);
}
   
-   tdb = tdb_open_log(lock_path(connections.tdb), 0, TDB_DEFAULT, 
O_RDONLY, 0);
-   if (!tdb) {
-   d_printf(%s not initialised\n, lock_path(connections.tdb));
-   d_printf(This is normal if an SMB client has never connected 
to your server.\n);
-   }  else  {
-   if (verbose) {
-   d_printf(Opened %s\n, lock_path(connections.tdb));
+   if ( show_shares ) {
+   tdb = tdb_open_log(lock_path(connections.tdb), 0, 
TDB_DEFAULT, O_RDONLY, 0);
+   if (!tdb) {
+   d_printf(%s not initialised\n, 
lock_path(connections.tdb));
+   d_printf(This is normal if an SMB client has never 
connected to your server.\n);
+   }  else  {
+   if (verbose) {
+   d_printf(Opened %s\n, 
lock_path(connections.tdb));
+   }
+
+   if (brief) 
+   exit(0);
+   
+   d_printf(\nService  pid machine   
Connected at\n);
+   
d_printf(---\n);
+   
+   tdb_traverse(tdb, traverse_fn1, NULL);
+   tdb_close(tdb);
+
+

svn commit: samba r3689 - in branches/SAMBA_4_0/source: build/pidl lib/dcom lib/dcom/common librpc/idl rpc_server/dcom torture/dcom

2004-11-11 Thread jelmer
Author: jelmer
Date: 2004-11-12 00:48:24 + (Fri, 12 Nov 2004)
New Revision: 3689

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3689

Log:
Large number of COM updates:
 - Work on server side and local COM support (should work, just no 
  example classes yet)
 - Use vtables so that local and remote calls can be used transparently
 - Generate 'proxies and stubs' rather then heavily modified code in client.pm 
and server.pm. proxies (client side code) are generated in proxy.pm, stubs 
(server side dispatchers) are generated in stubs.pm
 - Support registering classes and interfaces
 - DCOM interfaces no longer have to be in the same IDL file as their 
base interface, which will allow us to split up dcom.idl


Added:
   branches/SAMBA_4_0/source/build/pidl/proxy.pm
   branches/SAMBA_4_0/source/build/pidl/stub.pm
   branches/SAMBA_4_0/source/lib/dcom/common/tables.c
   branches/SAMBA_4_0/source/lib/dcom/local/
Removed:
   branches/SAMBA_4_0/source/lib/dcom/common/local.c
   branches/SAMBA_4_0/source/rpc_server/dcom/dcom.h
Modified:
   branches/SAMBA_4_0/source/build/pidl/README
   branches/SAMBA_4_0/source/build/pidl/client.pm
   branches/SAMBA_4_0/source/build/pidl/header.pm
   branches/SAMBA_4_0/source/build/pidl/parser.pm
   branches/SAMBA_4_0/source/build/pidl/pidl.pl
   branches/SAMBA_4_0/source/build/pidl/server.pm
   branches/SAMBA_4_0/source/lib/dcom/common/dcom.h
   branches/SAMBA_4_0/source/lib/dcom/common/main.c
   branches/SAMBA_4_0/source/lib/dcom/config.mk
   branches/SAMBA_4_0/source/librpc/idl/dcom.idl
   branches/SAMBA_4_0/source/rpc_server/dcom/remact.c
   branches/SAMBA_4_0/source/rpc_server/dcom/rot.c
   branches/SAMBA_4_0/source/torture/dcom/simple.c


Changeset:
Sorry, the patch is too large (1648 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3689


svn commit: samba r3690 - in branches/SAMBA_4_0/source/build/smb_build: .

2004-11-11 Thread jelmer
Author: jelmer
Date: 2004-11-12 01:40:02 + (Fri, 12 Nov 2004)
New Revision: 3690

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3690

Log:
Use perl's 'use' statement to include the build system parts 
rather then using cat

Added:
   branches/SAMBA_4_0/source/build/smb_build/config_mk.pm
   branches/SAMBA_4_0/source/build/smb_build/depend.pm
   branches/SAMBA_4_0/source/build/smb_build/input.pm
   branches/SAMBA_4_0/source/build/smb_build/main.pm
   branches/SAMBA_4_0/source/build/smb_build/makefile.pm
   branches/SAMBA_4_0/source/build/smb_build/output.pm
   branches/SAMBA_4_0/source/build/smb_build/smb_build_h.pm
Removed:
   branches/SAMBA_4_0/source/build/smb_build/config_mk.pl
   branches/SAMBA_4_0/source/build/smb_build/depend.pl
   branches/SAMBA_4_0/source/build/smb_build/input.pl
   branches/SAMBA_4_0/source/build/smb_build/main.pl
   branches/SAMBA_4_0/source/build/smb_build/makefile.pl
   branches/SAMBA_4_0/source/build/smb_build/output.pl
   branches/SAMBA_4_0/source/build/smb_build/smb_build_h.pl
Modified:
   branches/SAMBA_4_0/source/build/smb_build/core.m4


Changeset:
Sorry, the patch is too large (4864 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3690


svn commit: samba r3691 - in branches/SAMBA_4_0/source/build: m4 smb_build

2004-11-11 Thread jelmer
Author: jelmer
Date: 2004-11-12 02:00:58 + (Fri, 12 Nov 2004)
New Revision: 3691

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3691

Log:
Use packages

Added:
   branches/SAMBA_4_0/source/build/smb_build/dump.pm
Removed:
   branches/SAMBA_4_0/source/build/smb_build/dump.pl
Modified:
   branches/SAMBA_4_0/source/build/m4/rewrite.m4
   branches/SAMBA_4_0/source/build/smb_build/config_mk.pm
   branches/SAMBA_4_0/source/build/smb_build/core.m4
   branches/SAMBA_4_0/source/build/smb_build/depend.pm
   branches/SAMBA_4_0/source/build/smb_build/input.pm
   branches/SAMBA_4_0/source/build/smb_build/main.pm
   branches/SAMBA_4_0/source/build/smb_build/makefile.pm
   branches/SAMBA_4_0/source/build/smb_build/output.pm
   branches/SAMBA_4_0/source/build/smb_build/public.m4
   branches/SAMBA_4_0/source/build/smb_build/smb_build_h.pm


Changeset:
Sorry, the patch is too large (401 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3691


svn commit: samba r3692 - in trunk/source: lib smbd

2004-11-11 Thread jra
Author: jra
Date: 2004-11-12 02:15:55 + (Fri, 12 Nov 2004)
New Revision: 3692

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3692

Log:
Correctly detect errno for no acl/ea support.
Jeremy

Modified:
   trunk/source/lib/sysacls.c
   trunk/source/smbd/posix_acls.c


Changeset:
Modified: trunk/source/lib/sysacls.c
===
--- trunk/source/lib/sysacls.c  2004-11-12 02:00:58 UTC (rev 3691)
+++ trunk/source/lib/sysacls.c  2004-11-12 02:15:55 UTC (rev 3692)
@@ -3196,3 +3196,23 @@
 }
 
 #endif /* No ACLs. */
+
+/
+ Deliberately outside the ACL defines. Return 1 if this is a no acls
+ errno, 0 if not.
+/
+
+int no_acl_syscall_error(int err)
+{
+#if defined(ENOSYS)
+   if (err == ENOSYS) {
+   return 1;
+   }
+#endif
+#if defined(ENOTSUP)
+   if (err == ENOTSUP) {
+   return 1;
+   }
+#endif
+   return 0;
+}

Modified: trunk/source/smbd/posix_acls.c
===
--- trunk/source/smbd/posix_acls.c  2004-11-12 02:00:58 UTC (rev 3691)
+++ trunk/source/smbd/posix_acls.c  2004-11-12 02:15:55 UTC (rev 3692)
@@ -245,7 +245,7 @@
SAFE_FREE(pai_buf);
 
DEBUG(10,(store_inheritance_attribute:%s for file %s\n, protected ?  
(protected) : , fsp-fsp_name));
-   if (ret == -1  errno != ENOSYS)
+   if (ret == -1  !no_acl_syscall_error(errno))
DEBUG(1,(store_inheritance_attribute: Error %s\n, 
strerror(errno) ));
 }
 
@@ -2243,7 +2243,7 @@
 
if (the_acl == NULL) {
 
-   if (errno != ENOSYS) {
+   if (!no_acl_syscall_error(errno)) {
/*
 * Only print this error message if we have some kind 
of ACL
 * support that's not working. Otherwise we would 
always get this.
@@ -2408,14 +2408,10 @@
 * Some systems allow all the above calls and only fail 
with no ACL support
 * when attempting to apply the acl. HPUX with HFS is 
an example of this. JRA.
 */
-   if (errno == ENOSYS)
+   if (no_acl_syscall_error(errno)) {
*pacl_set_support = False;
+   }
 
-#ifdef ENOTSUP
-   if (errno == ENOTSUP)
-   *pacl_set_support = False;
-#endif
-
DEBUG(2,(set_canon_ace_list: sys_acl_set_file type %s 
failed for file %s (%s).\n,
the_acl_type == SMB_ACL_TYPE_DEFAULT ? 
directory default : file,
fsp-fsp_name, strerror(errno) ));
@@ -2427,14 +2423,10 @@
 * Some systems allow all the above calls and only fail 
with no ACL support
 * when attempting to apply the acl. HPUX with HFS is 
an example of this. JRA.
 */
-   if (errno == ENOSYS)
+   if (no_acl_syscall_error(errno)) {
*pacl_set_support = False;
+   }
 
-#ifdef ENOTSUP
-   if (errno == ENOTSUP)
-   *pacl_set_support = False;
-#endif
-
DEBUG(2,(set_canon_ace_list: sys_acl_set_file failed 
for file %s (%s).\n,
fsp-fsp_name, strerror(errno) ));
goto done;



svn commit: samba r3693 - in branches/SAMBA_3_0/source: lib smbd

2004-11-11 Thread jra
Author: jra
Date: 2004-11-12 02:16:00 + (Fri, 12 Nov 2004)
New Revision: 3693

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3693

Log:
Correctly detect errno for no acl/ea support.
Jeremy

Modified:
   branches/SAMBA_3_0/source/lib/sysacls.c
   branches/SAMBA_3_0/source/smbd/posix_acls.c


Changeset:
Modified: branches/SAMBA_3_0/source/lib/sysacls.c
===
--- branches/SAMBA_3_0/source/lib/sysacls.c 2004-11-12 02:15:55 UTC (rev 
3692)
+++ branches/SAMBA_3_0/source/lib/sysacls.c 2004-11-12 02:16:00 UTC (rev 
3693)
@@ -3196,3 +3196,23 @@
 }
 
 #endif /* No ACLs. */
+
+/
+ Deliberately outside the ACL defines. Return 1 if this is a no acls
+ errno, 0 if not.
+/
+
+int no_acl_syscall_error(int err)
+{
+#if defined(ENOSYS)
+   if (err == ENOSYS) {
+   return 1;
+   }
+#endif
+#if defined(ENOTSUP)
+   if (err == ENOTSUP) {
+   return 1;
+   }
+#endif
+   return 0;
+}

Modified: branches/SAMBA_3_0/source/smbd/posix_acls.c
===
--- branches/SAMBA_3_0/source/smbd/posix_acls.c 2004-11-12 02:15:55 UTC (rev 
3692)
+++ branches/SAMBA_3_0/source/smbd/posix_acls.c 2004-11-12 02:16:00 UTC (rev 
3693)
@@ -245,7 +245,7 @@
SAFE_FREE(pai_buf);
 
DEBUG(10,(store_inheritance_attribute:%s for file %s\n, protected ?  
(protected) : , fsp-fsp_name));
-   if (ret == -1  errno != ENOSYS)
+   if (ret == -1  !no_acl_syscall_error(errno))
DEBUG(1,(store_inheritance_attribute: Error %s\n, 
strerror(errno) ));
 }
 
@@ -2243,7 +2243,7 @@
 
if (the_acl == NULL) {
 
-   if (errno != ENOSYS) {
+   if (!no_acl_syscall_error(errno)) {
/*
 * Only print this error message if we have some kind 
of ACL
 * support that's not working. Otherwise we would 
always get this.
@@ -2408,14 +2408,10 @@
 * Some systems allow all the above calls and only fail 
with no ACL support
 * when attempting to apply the acl. HPUX with HFS is 
an example of this. JRA.
 */
-   if (errno == ENOSYS)
+   if (no_acl_syscall_error(errno)) {
*pacl_set_support = False;
+   }
 
-#ifdef ENOTSUP
-   if (errno == ENOTSUP)
-   *pacl_set_support = False;
-#endif
-
DEBUG(2,(set_canon_ace_list: sys_acl_set_file type %s 
failed for file %s (%s).\n,
the_acl_type == SMB_ACL_TYPE_DEFAULT ? 
directory default : file,
fsp-fsp_name, strerror(errno) ));
@@ -2427,14 +2423,10 @@
 * Some systems allow all the above calls and only fail 
with no ACL support
 * when attempting to apply the acl. HPUX with HFS is 
an example of this. JRA.
 */
-   if (errno == ENOSYS)
+   if (no_acl_syscall_error(errno)) {
*pacl_set_support = False;
+   }
 
-#ifdef ENOTSUP
-   if (errno == ENOTSUP)
-   *pacl_set_support = False;
-#endif
-
DEBUG(2,(set_canon_ace_list: sys_acl_set_file failed 
for file %s (%s).\n,
fsp-fsp_name, strerror(errno) ));
goto done;



svn commit: samba r3694 - in branches/SAMBA_4_0/source/ntvfs/posix: .

2004-11-11 Thread tridge
Author: tridge
Date: 2004-11-12 02:45:52 + (Fri, 12 Nov 2004)
New Revision: 3694

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3694

Log:
added support for the RENAME_INFORMATION level of setfileinfo and
setpathinfo. pvfs now passes the RAW-SFILEINFO test.


Modified:
   branches/SAMBA_4_0/source/ntvfs/posix/pvfs_resolve.c
   branches/SAMBA_4_0/source/ntvfs/posix/pvfs_setfileinfo.c


Changeset:
Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_resolve.c
===
--- branches/SAMBA_4_0/source/ntvfs/posix/pvfs_resolve.c2004-11-12 
02:16:00 UTC (rev 3693)
+++ branches/SAMBA_4_0/source/ntvfs/posix/pvfs_resolve.c2004-11-12 
02:45:52 UTC (rev 3694)
@@ -527,7 +527,7 @@
 be someone trying to exploit a race
 condition. Certainly we don't want to continue
 operating on this file */
-   DEBUG(0,(pvfs: WARNING: file '%s' changed during resole - 
failing\n,
+   DEBUG(0,(pvfs: WARNING: file '%s' changed during resolve - 
failing\n,
 name-full_name));
return NT_STATUS_UNEXPECTED_IO_ERROR;
}

Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_setfileinfo.c
===
--- branches/SAMBA_4_0/source/ntvfs/posix/pvfs_setfileinfo.c2004-11-12 
02:16:00 UTC (rev 3693)
+++ branches/SAMBA_4_0/source/ntvfs/posix/pvfs_setfileinfo.c2004-11-12 
02:45:52 UTC (rev 3694)
@@ -34,10 +34,9 @@
struct pvfs_filename *name,
struct smb_rename_information *r)
 {
-#if 0
NTSTATUS status;
struct pvfs_filename *name2;
-   char *base_dir, *p;
+   char *new_name, *p;
 
/* renames are only allowed within a directory */
if (strchr_m(r-new_name, '\\')) {
@@ -49,22 +48,61 @@
return NT_STATUS_FILE_IS_A_DIRECTORY;
}
 
-   /* work out the base directory that the source file is in */
-   base_dir = talloc_strdup(name, name-full_name);
-   p = strrchr(base_dir, '/');
+   /* w2k3 does not appear to allow relative rename */
+   if (r-root_fid != 0) {
+   return NT_STATUS_INVALID_PARAMETER;
+   }
+
+   /* construct the fully qualified windows name for the new file name */
+   new_name = talloc_strdup(req, name-original_name);
+   if (new_name == NULL) {
+   return NT_STATUS_NO_MEMORY;
+   }
+   p = strrchr_m(new_name, '\\');
+   if (p == NULL) {
+   return NT_STATUS_OBJECT_NAME_INVALID;
+   }
*p = 0;
 
+   new_name = talloc_asprintf(req, %s\\%s, new_name, r-new_name);
+   if (new_name == NULL) {
+   return NT_STATUS_NO_MEMORY;
+   }
+
/* resolve the new name */
-   status = pvfs_resolve_partial(pvfs, req, base_dir, r-new_name, name2);
+   status = pvfs_resolve_name(pvfs, name, new_name, 
PVFS_RESOLVE_NO_WILDCARD, name2);
if (!NT_STATUS_IS_OK(status)) {
return status;
}
 
-   if (name2-exists  !r-overwrite) {
-   return NT_STATUS_OBJECT_NAME_COLLISION;
+   /* if the destination exists, then check the rename is allowed */
+   if (name2-exists) {
+   if (strcmp(name2-full_name, name-full_name) == 0) {
+   /* rename to same name is null-op */
+   return NT_STATUS_OK;
+   }
+
+   if (!r-overwrite) {
+   return NT_STATUS_OBJECT_NAME_COLLISION;
+   }
+
+   status = pvfs_can_delete(pvfs, name2);
+   if (NT_STATUS_EQUAL(status, NT_STATUS_SHARING_VIOLATION)) {
+   return NT_STATUS_ACCESS_DENIED;
+   }
+   if (!NT_STATUS_IS_OK(status)) {
+   return status;
+   }
}
-#endif
-   return NT_STATUS_UNSUCCESSFUL;
+
+   if (rename(name-full_name, name2-full_name) == -1) {
+   return map_nt_error_from_unix(errno);
+   }
+
+   name-full_name = talloc_steal(name, name2-full_name);
+   name-original_name = talloc_steal(name, name2-original_name);
+
+   return NT_STATUS_OK;
 }
 
 /*



svn commit: samba r3695 - in branches/SAMBA_4_0/source/build/smb_build: .

2004-11-11 Thread jelmer
Author: jelmer
Date: 2004-11-12 02:47:24 + (Fri, 12 Nov 2004)
New Revision: 3695

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3695

Log:
Add intermediate functions to use when migrating from .m4+.mk to .pm files

Added:
   branches/SAMBA_4_0/source/build/smb_build/direct.pm
Modified:
   branches/SAMBA_4_0/source/build/smb_build/main.pm


Changeset:
Added: branches/SAMBA_4_0/source/build/smb_build/direct.pm
===
--- branches/SAMBA_4_0/source/build/smb_build/direct.pm 2004-11-12 02:45:52 UTC 
(rev 3694)
+++ branches/SAMBA_4_0/source/build/smb_build/direct.pm 2004-11-12 02:47:24 UTC 
(rev 3695)
@@ -0,0 +1,63 @@
+# Subs for build system stuff without the .mk files
+# Copyright (C) 2004 Jelmer Vernooij [EMAIL PROTECTED]
+
+use strict;
+
+our $SMB_BUILD_CTX;
+
+sub Subsystem($$)
+{
+   my $name = shift;
+   my $data = shift;
+   $data-{NAME} = $name;
+   %{$SMB_BUILD_CTX-{INPUT}{SUBSYSTEM}{$name}} = %{$data};
+}
+
+sub Module($$)
+{
+   my $name = shift;
+   my $data = shift;
+   $data-{NAME} = $name;
+   %{$SMB_BUILD_CTX-{INPUT}{MODULES}{$name}} = %{$data};
+}
+
+sub ExternalLibrary($$)
+{
+   my $name = shift;
+   my $data = shift;
+   $data-{NAME} = $name;
+   %{$SMB_BUILD_CTX-{INPUT}{EXT_LIBS}{$name}} = %{$data};
+}
+
+sub Library($$)
+{
+   my $name = shift;
+   my $data = shift;
+   $data-{NAME} = $name;
+   %{$SMB_BUILD_CTX-{INPUT}{LIBRARIES}{$name}} = %{$data};
+}
+
+sub Binary($$)
+{
+   my $name = shift;
+   my $data = shift;
+   $data-{NAME} = $name;
+   %{$SMB_BUILD_CTX-{INPUT}{BINARIES}{$name}} = %{$data};
+}
+
+sub DisableModule($)
+{
+   $SMB_BUILD_CTX-{INPUT}{MODULES}{shift}{ENABLE} = NO;
+}
+
+sub DisableBinary($)
+{
+   $SMB_BUILD_CTX-{INPUT}{BINARIES}{shift}{ENABLE} = NO;
+}
+
+sub DisableLibrary($)
+{
+   $SMB_BUILD_CTX-{INPUT}{LIBRARIES}{shift}{ENABLE} = NO;
+}
+
+1;

Modified: branches/SAMBA_4_0/source/build/smb_build/main.pm
===
--- branches/SAMBA_4_0/source/build/smb_build/main.pm   2004-11-12 02:45:52 UTC 
(rev 3694)
+++ branches/SAMBA_4_0/source/build/smb_build/main.pm   2004-11-12 02:47:24 UTC 
(rev 3695)
@@ -12,14 +12,16 @@
 use input;
 use config_mk;
 use output;
+use direct;
 use dump;
 use strict;
 
 sub smb_build_main($)
 {
-   my $SMB_BUILD_CTX = shift;
+   our $SMB_BUILD_CTX = shift;
+
input::check($SMB_BUILD_CTX);
-
+   
depend::create_depend($SMB_BUILD_CTX);
 
output::create_output($SMB_BUILD_CTX);
@@ -30,6 +32,7 @@
 
dump::dump_ctx($SMB_BUILD_CTX);
 
+
return 0;
 }
 1;



svn commit: samba r3696 - in branches/SAMBA_4_0/source/build/smb_build: .

2004-11-11 Thread jelmer
Author: jelmer
Date: 2004-11-12 02:57:15 + (Fri, 12 Nov 2004)
New Revision: 3696

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3696

Log:
Feed directly to perl, rather then creating an intermediate file

Modified:
   branches/SAMBA_4_0/source/build/smb_build/core.m4


Changeset:
Modified: branches/SAMBA_4_0/source/build/smb_build/core.m4
===
--- branches/SAMBA_4_0/source/build/smb_build/core.m4   2004-11-12 02:47:24 UTC 
(rev 3695)
+++ branches/SAMBA_4_0/source/build/smb_build/core.m4   2004-11-12 02:57:15 UTC 
(rev 3696)
@@ -1,6 +1,7 @@
 dnl SMB Build Core System
 dnl ---
 dnl  Copyright (C) Stefan (metze) Metzmacher 2004
+dnl  Copyright (C) Jelmer Vernooij 2004
 dnl  Released under the GNU GPL
 dnl ---
 dnl
@@ -18,22 +19,13 @@
 AC_DEFUN([_SMB_BUILD_CORE],
 [
 
-echo config.status: creating ./config.smb_build.pl
-
-cat  config.smb_build.pl \_SMB_ACEOF
-#!$PERL -I$srcdir/build/smb_build
-#
-
+$PERL -I$srcdir/build/smb_build \_SMB_ACEOF
 use strict;
 
 my \$SMB_BUILD_CTX;
 
 use main;
 
-_SMB_ACEOF
-
-echo #line 8 \build/smb_build/core.m4\  config.smb_build.pl
-cat  config.smb_build.pl \_SMB_ACEOF
 ###
 ### First we list all info from configure  ###
 ###
@@ -70,6 +62,4 @@
 
 _SMB_ACEOF
 
-$PERL ./config.smb_build.pl || exit $?
-
 ])



svn commit: samba r3697 - in branches/SAMBA_3_0/source/include: .

2004-11-11 Thread jerry
Author: jerry
Date: 2004-11-12 03:36:15 + (Fri, 12 Nov 2004)
New Revision: 3697

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3697

Log:
BUG 2027: fix multiple declaration of MD5_CTX (do we really care about DOS 
compilers?).  Will watch build farm though.
Modified:
   branches/SAMBA_3_0/source/include/md5.h


Changeset:
Modified: branches/SAMBA_3_0/source/include/md5.h
===
--- branches/SAMBA_3_0/source/include/md5.h 2004-11-12 02:57:15 UTC (rev 
3696)
+++ branches/SAMBA_3_0/source/include/md5.h 2004-11-12 03:36:15 UTC (rev 
3697)
@@ -16,9 +16,4 @@
   unsigned len);
 void MD5Final(unsigned char digest[16], struct MD5Context *context);
 
-/*
- * This is needed to make RSAREF happy on some MS-DOS compilers.
- */
-typedef struct MD5Context MD5_CTX;
-
 #endif /* !MD5_H */



svn commit: samba r3698 - in branches/SAMBA_4_0/source/script/tests: .

2004-11-11 Thread tridge
Author: tridge
Date: 2004-11-12 03:38:47 + (Fri, 12 Nov 2004)
New Revision: 3698

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3698

Log:
mark RAW-SFILEINFO as working

Modified:
   branches/SAMBA_4_0/source/script/tests/test_posix.sh


Changeset:
Modified: branches/SAMBA_4_0/source/script/tests/test_posix.sh
===
--- branches/SAMBA_4_0/source/script/tests/test_posix.sh2004-11-12 
03:36:15 UTC (rev 3697)
+++ branches/SAMBA_4_0/source/script/tests/test_posix.sh2004-11-12 
03:38:47 UTC (rev 3698)
@@ -38,13 +38,13 @@
 tests=$tests BASE-DELETE BASE-PROPERTIES BASE-MANGLE
 tests=$tests BASE-CHKPATH BASE-SECLEAK BASE-TRANS2
 tests=$tests BASE-NTDENY1 BASE-NTDENY2  BASE-RENAME BASE-OPENATTR
-tests=$tests RAW-QFSINFO RAW-QFILEINFO RAW-SFILEINFO-BUG
+tests=$tests RAW-QFSINFO RAW-QFILEINFO RAW-SFILEINFO-BUG RAW-SFILEINFO
 tests=$tests RAW-LOCK RAW-MKDIR RAW-SEEK RAW-CONTEXT RAW-MUX RAW-OPEN
 tests=$tests RAW-UNLINK RAW-READ RAW-CLOSE RAW-IOCTL RAW-SEARCH RAW-CHKPATH
 tests=$tests LOCAL-ICONV LOCAL-TALLOC LOCAL-MESSAGING LOCAL-BINDING 
LOCAL-IDTREE
 
 soon=BASE-CHARSET
-soon=$soon RAW-SFILEINFO RAW-OPLOCK RAW-NOTIFY
+soon=$soon RAW-OPLOCK RAW-NOTIFY
 soon=$soon RAW-WRITE RAW-RENAME
 
 for t in $tests; do