[Samba] MS ADS Authentication
Dear group, I have installed Fedora Core 2 with samba, winbind enabled and managed to join our ADS as member server. Using kinit [EMAIL PROTECTED] I receive a valid ticket an can connect to Windows share by smbclient //server/share -k Now my goal is to use the AD Usernames i.e. [EMAIL PROTECTED] for Login to Linux. I can't find the correct PAM settings, so could please somebody help me? Best regards, Marco -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with smbmount
Has anyone fixed this? I'm having the same problem Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now http://uk.messenger.yahoo.com/download/index.html -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Roaming profiles
On Wed, Nov 10, 2004 at 05:15:52PM -0500, Barry Roomberg wrote: It seems I have accidently turned roaming profiles that trigger when XP boxes login to my domain. How can I make sure they are turned off for good? (From http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html) In smb.conf Affect the following settings and ALL clients will be forced to use a local profile: logon home = and logon path = The arguments to these parameters must be left blank. It is necessary to include the = sign to specifically assign the empty value. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] different announces between w2k and xp
Hi, as I wrote in a previous e-mail, we are noting different announcing between a w2k computer and an xp one (both professional). The computers are not trying to log on a windows domain, and this time I can provide also a dump of traffic thru ethereal. As you can see from the attached files, the win2k computer sends also the username (marty) along the network, and we cannot understand why. Is just a problem of a different implementation of the SMB stacks among different operating systems, or there's a specific reason for this behavior? Thanks, Luca Luca -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Cannot resolve name name#0x3
Hi, I'm Havinge the same problem and that is happening only with some machines -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] implications of running nmbd without smbd?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark wrote: | Hello, | We just need the netbios broadcast registration/resolution | and/or NBNS wins server setup, so we are thinking of just | running nmbd without smbd. To help minimize security issues | etc. Samba version is 2.2.7 on redhat 7.3. any input would | be appreciated. Are there any potential problems etc? | TIA Should be fine. nmbd is responsible for (a) registering the netbios name from smb.conf (and the domain0x1[cb] records if 'domain [logons|master] = yes') (b) acting as a WINS server if wins support = yes (c) participating in browsing elections cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBk2cYIR7qMdg1EfYRAnWMAJ4xUHtetBOGfH92qOyYO8YMZ76j1wCeL0jI HDHZwzGsi1aHe3u0b+zjutQ= =eZ9h -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.8 compiles but fails to install
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kevin Statz wrote: | The errors are: | | # /etc/init.d/samba.server start | ld.so.1: /usr/local/samba/sbin/smbd: fatal: libpopt.so.0: open failed: | No such file or directory | Killed | ld.so.1: /usr/local/samba/sbin/nmbd: fatal: libpopt.so.0: open failed: | No such file or directory | Killed | | | The libpopt.so.0 files in /usr/local/lib are as follows: | | # ls -l libpopt* | -rw-r--r-- 1 bin bin 137464 Jan 8 2003 libpopt.a | -rwxr-xr-x 1 bin bin 827 Jan 8 2003 libpopt.la | lrwxrwxrwx 1 root other 16 Oct 27 16:24 libpopt.so - | libpopt.so.0.0.0 | lrwxrwxrwx 1 root other 16 Oct 27 16:24 libpopt.so.0 - | libpopt.so.0.0.0 | -rwxr-xr-x 1 bin bin 134696 Jan 8 2003 libpopt.so.0.0.0 | | Are these correct? | | Please help- I am at a loss. add /usr/local/lib to the library search path (LD_LIBRARY_PATH, the crle tool, or compile using 'gcc -Wl,-rpath,/usr/local/lib') Or just use the --with-included-popt configure option to Samba and forget about the one in /usr/local/lib. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBk2hVIR7qMdg1EfYRAg4ZAJ9tzprOowc9wLYNz96zDM4P1D2iawCfZjCM c+my9if9skgRR08q41kYGcg= =G/Bj -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba panics after error connecting to cups
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gil Freund wrote: | | We have an issue with Samba panicking after an error connecting to | CUPS (see log below). | | Samba 3.0.7 | CUPS 1.1.20 | Debian Woody | | After the panic, CUPS is still oparational, but not Samba. I have to | kill -9 the smbd process befor I can restart it using the init | scripts. | | Any pointers welcome. ... | PANIC: assert failed at printing/printing_db.c(40) This is fixed in 3.0.8. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBk2l+IR7qMdg1EfYRAthAAKCW7hoUTxSJ1KOpqPo9zJrLaWUK2ACgr0Z7 xK/nRmSTWIUZnckAZ/+Oazc= =MRM5 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [samba] Netscape samba schema needs updating!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel Wilson wrote: | Hi, | | This one is for the samba team i think... | | | Intro... | Im using Sun One Directory Server 5.2 as my LDAP, so i used the | samba-schema-netscapeds5.x schema, also samba 3.0.8. It's on my list to fix. Actually the best thing would be a script that generates the various schema files from the OpenLDAP version samba.schema since that is the one that always get updated. We'll have a 3.0.9 soon and will try to get that fixed before the release. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBk2nVIR7qMdg1EfYRAkECAKDrC/MNmnnCueGkRmbZrhSzLVseUACfTMxH OQeJTCnQuXxdcRPRC6fF6dI= =FBsh -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.8 Available for Download
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rick Brown wrote: | On Mon, 8 Nov 2004, Gerald (Jerry) Carter wrote: | | |Common bugs fixed in 3.0.8 include: | |~ o Fixes for kerberos interoperability with Windows 200x |~domains when using DES keys. | | | Yay! Compiled, installed, rejoined ADS and we once again | work. Good job Jerry n' crew! The crew in this case would be Jeremy Allison and Nalin Dahyabhai (from redhat). They both put in a lot of hard work to get this working. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBk2o8IR7qMdg1EfYRAj+6AKCBdgw3qGmSTyxSoazSxZ2g+KlR7gCg2Xvx hKxQPU2UnoWrvPE5mAT52Js= =YbzR -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Mini HowTo AIX4.3.3-AD-Winbind
Integrating SAMBA\WINBIND on AIX 4.3.3 with Microsoft Active Directory. Overview: This document is a roadmap on how you can integrate SAMBA with your Active Directory environment. This configuration will allow your Samba server to appear as a member of Active Directory. It will also allow your telnet sessions to use Active Directory for authentication. AIX Setup: Verify your system has all the BOS sub packages from the AIX install CD's. Install rpm package manager (rpm.rte) with installp: installp -qacXgd rpm.rte rpm.rte Install the following rpms (http://www-1.ibm.com/servers/aix/products/aixos/linux/download.html) If they are all in the same directory, you can do this by doing the following: rpm -ivh --nodeps *.rpm Packages Required: autoconf-2.53-1.aix4.3.noarch.rpm automake-1.5-1.aix4.3.noarch.rpm bash-2.05a-1.aix4.3.ppc.rpm bison-1.34-2.aix4.3.ppc.rpm db-3.3.11-3.aix4.3.ppc.rpm flex-2.5.4a-6.aix4.3.ppc.rpm gawk-3.1.0-2.aix4.3.ppc.rpm gettext-0.10.39-2.aix4.3.ppc.rpm glib-1.2.10-2.aix4.3.ppc.rpm glib-devel-1.2.10-2.aix4.3.ppc.rpm glib2-2.2.1-3.aix4.3.ppc.rpm glib2-devel-2.2.1-3.aix4.3.ppc.rpm gzip-1.2.4a-7.aix4.3.ppc.rpm libtool-1.4.2-1.aix4.3.ppc.rpm m4-1.4-14.aix4.3.ppc.rpm make-3.79.1-3.aix4.3.ppc.rpm openldap-2.0.21-4.aix4.3.ppc.rpm openldap-devel-2.0.21-4.aix4.3.ppc.rpm pkgconfig-0.15.0-1.aix4.3.ppc.rpm rpm-3.0.5-30.aix4.3.ppc.rpm sed-3.02-8.aix4.3.ppc.rpm tar-1.13-4.aix4.3.ppc.rpm Update PATH and LD_LIBRARY_PATH: PATH=/usr/bin:/etc:/usr/sbin:/usr/ucb:/usr/bin/X11:/sbin:/usr/local/bin:/usr /local/sbin:/usr/local/samba/bin:/usr/local/samba/sbin LD_LIBRARY_PATH=/usr/lib:/usr/local/lib:/lib Download binutils and gcc binaries: binutils.2.9.1.tar.gz (http://sunsite.lanet.lv/ftp/unix/aix-binaries/uclapub/binutils/RISC/4.2/exe c/) gcc.3.3.4.tar.Z (http://aixpdslib.seas.ucla.edu/packages/gcc.html) Download source code for the following: krb5-1.3.5.tar.gz (http://web.mit.edu/kerberos/www/dist/) openldap-2.2.18.tar.gz (http://www.openldap.org/software/download/) samba-3.0.8pre2.tar.gz (http://www.samba.org) Install binutils: gzip -d binutils.2.9.1.tar.gz cp binutils.2.9.1.tar / tar -xvf binutils.2.9.1.tar rm /binutils.2.9.1.tar **Note** Untar the binutils from the / directory so the files are placed into the proper locations. Install gcc: gzip -d gcc.3.3.4.tar.Z cp gcc.3.3.4.tar / tar -xvf gcc.3.3.4.tar rm /gcc.3.3.4.tar **Note** Untar the binutils from the / directory so the files are placed into the proper locations. Build and install Kerberos: gzip -d krb5-1.3.5.tar.gz tar -xvf krb5-1.3.5.tar cd krb5-1.3.5 ./configure --enable-dns --enable-dns-for-kdc --enable-dns-for-realm make make install Build and install OpenLDAP: gzip -d openldap-2.2.18.tar.gz tar -xvf openldap-2.2.18.tar cd openldap-2.2.18 ./configure --disable-slurpd --disable-bdb --disable-slapd --without-threads make make install Build and install Samba: gzip -d samba-3.0.8pre2.tar.gz tar -xvf samba-3.0.8pre2.tar cd samba-3.0.8pre2 ./configure --with-winbind --with-ldap --with-ads --with-krb5=/usr/local make make install Configure Kerberos: Edit /etc/krb5.conf to reflect the following (substitute DOMAIN.COM with your domain): [logging] default = FILE:/var/log/krb5/libs.log kdc = FILE:/var/log/krb5/kdc.log admin_server = FILE:/var/log/krb5/admin.log [libdefaults] ticket_lifetime = 24000 default_realm = DOMAIN.COM forwardable = true proxiable = true dns_lookup_realm = false dns_lookup_kdc = false [realms] DOMAIN.COM = { default_domain = domain.com kdc = ip address of AD server:88 admin_server = ip address of AD server:749 } [domain_realm] .domain.com = DOMAIN.COM domain.com = DOMAIN.COM [kdc] profile = /var/kerberos/krb5kdc/kdc.conf [pam] debug = false ticket_lifetime = 36000 renew_lifetime = 36000 forwardable = true krb4_convert = false Configure Samba: Edit /usr/local/samba/lib/smb.conf to reflect the following (substitute DOMAIN with your domain): **Note** That the shares are examples and may be different. [global] workgroup = DOMAIN netbios name = HOSTNAME server string = HOSTNAME security = ADS realm = DOMAIN.COM password server = ip address wins server = ip address client
Re: [Samba] Slow login/out with XP and SAMBA PDC?
On Wednesday 10 November 2004 13:19, Adam Tauno Williams wrote: I thought the profile copy was smart and only copied files that had changed? What can I do improve this performance? Maybe theoretically, but we've seen it 'stupid' on frequent occasions. Really best just to redirect the My Documents short cut to a real share (such as a home directory) that doesn't have to get copied all over the place. Along this same note ... I am pondering the implications of mapping certain parts of the profile (My Documents, maybe My Pictures) to a network drive. But I think this won't work for my truly roaming users (laptop users). Do any of you redirect the profile directories based on membership of, say, a 'laptop' group or some such thing? I know that I can write registry keys based on group membership with Kixtart. Or am I wrong and laptops won't have a problem with it? If a laptop user saves a file in My Documents they will expect to have access to the file even when offline. Thoughts? I would just like to know how you all generally handle it. Misty -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Quota/disk space display in windows
Hi all I have just noticed that Windows (98 and 2000) are not displaying the correct figure for disk space on any of my shares. FreeBSD 5.2.1-R Samba 3.0.7 from ports quotas enabled on the ufs2 filesystems samba compiled '--with-quotas' ok, a user gets a quota set like this edquota -e /home:8672278:8774678:0:0 denis now, those numbers are in 512 byte blocks and should represent 4234Mb, right? Certainly to FreeBSD they do. but windows 'MY computer' displays 8.27Gb for the drive mapped to that share a quick bit of calculating shows that 8.27GB results if you regard the number 8672278 as kilobytes 8672278 / 1204 / 1024 = 8.27 so, I take it then that Samba is unaware that the FreeBSD quotas work with 512 byte blocks! I see there is a 'dfree command' and a 'get quota' command option in the global section. I do not see exacly how those commands are used by Samba. Are they called every time a windows client requests the disk status? What is the difference between doing that and what it does by default? The obvious fix to me is to allow the setting of a 'free block size' or 'quota is in X units, multiply by Y to get bytes' = Y parameter that would fix this calculation internal to samba. I see in the globals there is a 'block size' setting but I find the help for it confusing I quote block size (S) This parameter controls the behavior of smbd(8) when reporting disk free sizes. By default, this reports a disk block size of 1024 bytes. Changing this parameter may have some effect on the efficiency of client writes, this is not yet confirmed. This parameter was added to allow advanced administrators to change it (usually to a higher value) and test the effect it has on client write performance without re-compiling the code. As this is an experimental option it may be removed in a future release. Changing this option does not change the disk free reporting size, just the block size unit reported to the client. No default I have just tried setting that to 512 and restarting samba but there is no change, the disk size is still wrong, and still 8.27GB. My web searches on this show arguments about what should be shown. Forget all that. What the user needs to see is his allocated space, and his free space. Total size of the server drive is not his concern, and at the moment Samba is reporting neither the real quota size (actually twice the set size), NOR the real disk size so this is clearly a BUG. Please help Samba to be 'correct', not 'worked around'. My server goes live on 26 November and I'd really like it to work correctly. -- DA Fo rsythNetwork Supervisor Principal Technical Officer -- Institute for Water Research http://www.ru.ac.za/institutes/iwr/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Suse 9.2/Samba 3.0.8 question
I just updated Samba on a PC to 3.0.8. The PC is running a recent upgrade to SuSE 9.2 Pro. Before upgrading the Network Browing worked fine, particularly the Windows Network browsing. Since upgrading to 3.0.8 yesterday, whenever I try to do that I get the following errors: An error occurred while loading smb:/: Could not start process Unable to create io-slave: klauncher said: Error loading 'kio_smb'. Any ideas? David Christensen Brokers International, Ltd. 1200 E Main St Panora, IA 50216 Phone: (641) 755-2775 Ext 1032 Cell: (515) 490-3936 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Suse 9.2/Samba 3.0.8 question
On Thursday 11 November 2004 11:46, [EMAIL PROTECTED] wrote: I just updated Samba on a PC to 3.0.8. The PC is running a recent upgrade to SuSE 9.2 Pro. Before upgrading the Network Browing worked fine, particularly the Windows Network browsing. Since upgrading to 3.0.8 yesterday, whenever I try to do that I get the following errors: An error occurred while loading smb:/: Could not start process Unable to create io-slave: klauncher said: Error loading 'kio_smb'. Any ideas? It is a KDE issue, not a Samba one. I don't know _what_ the KDE problem is, but kio* is the way that KDE interacts with devices. Try smbmount instead. Misty David Christensen Brokers International, Ltd. 1200 E Main St Panora, IA 50216 Phone: (641) 755-2775 Ext 1032 Cell: (515) 490-3936 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Suse 9.2/Samba 3.0.8 question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Misty Stanley-Jones wrote: | | I just updated Samba on a PC to 3.0.8. The PC is running | a recent upgrade to SuSE 9.2 Pro. | | Before upgrading the Network Browing worked fine, | particularly the Windows Network browsing. Since | upgrading to 3.0.8 yesterday, whenever I try to do | that I get the following errors: | | An error occurred while loading smb:/: | Could not start process Unable to create io-slave: | klauncher said: Error loading 'kio_smb'. | |Any ideas? | | | It is a KDE issue, not a Samba one. I don't know _what_ | the KDE problem is, but kio* is the way that KDE | interacts with devices. Try smbmount instead. Nope. This is our fault I think. There was a bug in the libsmbclient.so link commands. Has been fixed and there will be a 3.0.9 soon I think. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBk5wNIR7qMdg1EfYRAn+TAJ0QWCjEf5srzyWTo3pRp6PvufbgSgCgxd/U WhCHSvw2LPes2/01rfjLkIc= =Zps6 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Name not resolved in SWAT server status page
Hi, I am testing samba-vscan 0.3.5 / clamav 0.8 with samba 3.0.7 built from source on Solaris 9. With the samba server being a member of an MS active directory domain. Everything works as expected with viruses detected, removed or quarantined but sometimes when a virus is found there is no warning message sent to the windows box. On the SWAT status page I noticed that some active connections don't show client machine names and some do. This seems to link with if the virus notifications are sent correctly or not. If the name shows in the client column the notification is sent, if the name is not showing the notification fails. PID Client IP address Date 2536192.168.0.10192.168.0.10Thu Nov 11 09:03:20 2004 25637 mars192.168.0.11Wed Nov 10 11:21:21 2004 I tested this previously with samba 3.0.2 which was part of an NT domain and had no problems. Can anyone advise what to check to find why some IP's are resolved and some are not. Thanks in advance. Dean Plant -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 3.0.8 compile warnings and link error
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas Bork wrote: | + ac_cv_gnu_ld_version=GNU ld version 2.12 What platform is this (uname -a or linux distro ver.)? cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBk58cIR7qMdg1EfYRApkjAKDUFNkxSTBuSsRmxMkSafE8r/060gCfeBiR 20oAeJLypZhtdJ+tJ+TVxBQ= =Tzhc -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem with lowercase Computernames in winbind samba 3.0.8
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hansjoerg Maurer wrote: | Hi, | | we have several samba servers running as AD members (w2003 domain). | Since the Upgrade to samba 3.0.8 the following message appears, | when accessing a share on the memberserver from clienthost rmts2. | | | [2004/11/10 12:09:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) | Username NTROBOTIC\rmts2$ is invalid on this system | [2004/11/10 12:09:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) | Username NTROBOTIC\rmts2$ is invalid on this system | | [EMAIL PROTECTED] samba]# wbinfo -u | grep -i rmts2 | NTROBOTIC\RMTS2$ | | Cound that be a case Problem rmts2 ne RMTS2 Nope. I don't think so. Probably an issue with you libnss_winbind.so installation. does 'getent passwd NTROBOTIC\rmts2$' return an entry ? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBk6WuIR7qMdg1EfYRAvp7AKDEMmHOetHAe5SIf33Btp1MumGvcwCeJm0g pZwbqvzg4iThnz/uN4JI714= =pM8w -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 3.0.8 and testparm, smbstatus, tdbbackup
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas Bork wrote: | | testparm: | - | | testparm shows: | | ERROR: the 'passwd program' (/usr/bin/passwd %u) requires a '%u' parameter. | You can see, passwd program _is_ /usr/bin/passwd %u fixed. BUG # 2017 | smbstatus: | -- | | smbstatus command always shows processes _and_ shares even | if using the switches '-p' for showing processes only or | '-S' for showing shares only or '-B' for showing locks only: I'll look into this. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBk6ijIR7qMdg1EfYRAsg7AKDz6VGRvBC/1XoOELsLJTjRn9rpqQCg0ibf wMHhkDg6oVanW7jsBLKljTo= =l1qI -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.8 breaks all printing from Windows 98
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jonathan Knight wrote: | | We have small panic here as we've just put samba 3.0.8 | up to fix the DoS attack but all printing from Windows 98 | has now broken. Printing from Windows XP is still working fine. Reproduced it. Try this patch. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBk6PcIR7qMdg1EfYRAs1dAJ9pdRpLQHrS6I+Ag1ANUtCn0JHyEQCfQuQI CYX/Sdt0bhT9lx7SbKKkefQ= =kZ8M -END PGP SIGNATURE- Index: smbd/lanman.c === --- smbd/lanman.c (revision 3681) +++ smbd/lanman.c (working copy) @@ -2267,6 +2267,12 @@ return False; *rparam_len = 4; *rparam = REALLOC(*rparam,*rparam_len); + + if ( (snum = lp_servicenumber(sharename)) == -1 ) { + DEBUG(0,(api_PrintJobInfo: unable to get service number from sharename [%s]\n, + sharename)); + return False; + } *rdata_len = 0; -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Slow login/out with XP and SAMBA PDC?
I thought the profile copy was smart and only copied files that had changed? What can I do improve this performance? Maybe theoretically, but we've seen it 'stupid' on frequent occasions. Really best just to redirect the My Documents short cut to a real share (such as a home directory) that doesn't have to get copied all over the place. Along this same note ... I am pondering the implications of mapping certain parts of the profile (My Documents, maybe My Pictures) to a network drive. But I think this won't work for my truly roaming users (laptop users). Do any of you redirect the profile directories based on membership of, say, a We use some substitution smarts on the samba side to direct what a user sees as \\{server}\Documents, but otherwise we only use policies (via ntconfig.pol) for making changes on the client. 'laptop' group or some such thing? I know that I can write registry keys based on group membership with Kixtart. Or am I wrong and laptops won't have a problem with it? If a laptop user saves a file in My Documents they will expect to have access to the file even when offline. Thoughts? I would just like to know how you all generally handle it. We disable roaming profiles on laptops; they only lead to user confusion in that case (IMHO). You can still syncronize other folders using M$'s sync thingy, or use something like Novell's iFolder. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Migration to Samba
I'm migrating to Samba on about 50 desktops. After I join the domain (this is on Windows 2k or XP) I get a whole new set of settings (under documents and settings). Is there a way to tell Windows to use the old directory? It matches their username on samba if that helps. Note, I'm using local profiles. Thanks, Dean -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Browsing to Windows 2000 Servers winbind
I need to browse to a windows share from a fedora client running samba. I have winbind installed, I've tested it. I can logon to the samba box with my windows name and password. I can even use smbclient and connect to a share on a windows server just fine. However, I cannot interactively browse to the Windows Servers I get a message that says: The folder contents could not be displayed. You do not have the permissions necessary to view the contents of Windows Network:huskie. (Huskie is the name of my server). I've tried turning encypt passwords on and off in the smb.conf file. I'm using the + separator but don't know if that could cause a problem. In short it just seems like in a browse mode the Windows server doesn't know who I am or can't verify a password while if I connect explicitly using smbclient it works fine. Any trouble shooting tips would be greatly appreciated Tom Lockwood Technology Director, Hemlock Public Schools -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Office moving to a Domain system. Looking for some advice.
Hi, Thank you for your very informative post. I am hoping to roll out the network in stages, with openLDAP coming in a later stage, mostly due to my need to get up its learning curve a bit more before putting it into production. I am hoping that running winbind on the linux boxes that are not the PDC will give me a reasonable authentication solution for the time being in that I will not have to replicate usernames and passwords to each Linux/Samba system. I totally agree that there should be a standalone firewall that does nothing else, except maybe openVPN and DHCP for the internal network, but protect the network. I do not believe at this time that I need a DMZ, other than possibly for a webserver. The only exterior access needed to our network is via openVPN and SFTP when that is down. Our mailservers reside in a different local all together and they are not under my umbrella. I have a SUS server on the wishlist and am currently singing its praises to the higher ups. I know that I have a lot of research and documentation left to do before I get started so I can forsee any pitfalls before I get there. As mentioned before, my biggest stumbbling block is going to be settig up LDAP for authentication. I have yet to even get my hands damp with that software, let alone set it up for network usage. Thanks again for your reply Michael Kelly rruegner [EMAIL PROTECTED] 10/11/2004 3:33:55 pm Hi Michael, good choice , make the pdc a ldap server and let other nix machines be ldap clients the other parts are depend to what you plan to your network, normally you have standalone firewall with minimum 3 nics , web,dmz,intranet pdc should be placed in intranet also backup machine, ftp and www , proxy or an internal mail server too ( if you need this from outside in the dmz zone )proxy or an internal mail server here too. But there are many more setups thinkable a small solution fo a firewall , which is easy to setup if you have dynamic ip or just one ip is ipcop (transparent proxy possible) The firewall can be used as dhcp server and internal nameserver ( but you can let this be done by the pdc too ) If you want home workers connect to office network, pptpd is a good choice ( on the firewall or via kernel 2.4.27 pptp pom module on the pdc )openvpn is good for net to net connects on the firewall to other placed offices A domain system and roaming profiles is an up to date solution A sus server and a antivir update service is nice to have. I have serveral setups like this all working very nice But many things others would be done by others in another way , mostly of security reasons,so for your question theres no uni-answer Best Regards Michael Kelly schrieb: Hello all, I currently maintain an office of 15 employees. All clients are running Windows 200 Professional, although there has been discussion of introducing a couple of Linux workstations on a testing basis. As part of the office infrastructure we have three Linux machines, a firewall/gateway/webserver/FTP server/openVPN machine running Samba for access to webserver directories and documents, a Samba file server that also acts as a WINS server, and a machine that is dedicated to nightly backups of the file server, this box also runs Samba to share out the backup files. The office is currently setup using a workgroup system and we feel it is time to enjoy the benifits of a domain system with a Samba PDC. I have done some preliminary research into the setup of everything but would like to get some advice from those more experienced than myself before I begin my journey. This is what I would like. 1. The file server to be the PDC as well as an application server. not sure if we will go with roaming profiles yet or not. 2 All authentication to be centralized to the PDC. I beleive I can achieve this with winbind running on the two other machines running Samba. -currently I am maintaining the same Samba password files on all three systems and it is a pain to co-ordinate 3. Eliminate the need to have each workstation user also be a user on the Linux systems 4. Eventually be able to move to an openLDAP authentication system without have to redo everything. I know my point are pretty general, but I am just starting with the concepts and developing my requirements, also, this is my first entry into the world of domains so my knowledge is a little sparse. As a note I am reasonably comfortable with basic Samba configuration, manual edits, and administration with Linux Thanks for any assistance Michael Kelly -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] LDAP suffix question
I would like to have a DIT similar to this for my Samba server : ou=People,dc=domain,dc=com: users accounts ou=Group,dc=Domain,dc=com: groups ou=Hosts,dc=domain,dc=com: machine accounts ou=Samba,dc=domain,dc=com: Samba specific stuff, such as sambaDomain, sambaUnixIdPool, etc My understanding is that ldap [user|group|machine] suffix is relative to ldap suffix. Example : ldap suffix = dc=domain,dc=com ldap user suffix = ou=People Thus, the effective ldap user suffix would be ou=People,dc=domain,dc=com. This does not match the DIT I would like to achieve, as I would need to specify lateral suffix for user, group, machine. I tried : ldap suffix = ou=Samba,dc=domain,dc=com ldap user suffix = ou=People,dc=domain,dc=com ... But it does not work. Any idea how to achieve that ? The reason I would like to design my DIT in such a way is strictly cosmetic, as I would prefer not to clutter the root with sambaDomain and sambaUnixIdPool entry. I'd recommend creating something like ou=SAM,dc=domain,dc=... ou=People,ou=SAM,dc=domain,dc=... ou=Groups,ou=SAM,dc=domain,dc=... ou=Hosts,ou=SAM,dc=domain,dc=... And keep everything Samba (or NSS) uses under the ou=SAM. This totally avoids (a) having to do root level sub searches, which are always bad, expecially as your Dit grows to contain other stuff, (b) lets your partition the PDC stuff off from the rest of your Dit, good if you want it to have its own server or Samba decides to implement their own LDAP server, you can just place it in your Dit without having to refactor anything and (c) makes it easier to delegate the permission peculiar to PDC operations. If you really want an ou=People at the root that is still possible, you simply use a subordinate proxy to place the contents of ou=People,ou=SAM,... at ou=People,dc=domain,... then mail clients can query what they expect to find and you can also drop out all the attributes and objectclasses they don't need to see. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Compile issues on Fedora Core 3
Hello, I am having problems compileing samba-3.0.8 on fedora core 3 64 bit. The error message I am getting is: Compiling dynconfig.c /tmp/ccY0PMTp.s: Assembler messages: /tmp/ccY0PMTp.s:44: Error: suffix or operands invalid for `mov' /tmp/ccY0PMTp.s:97: Error: suffix or operands invalid for `mov' make: *** [dynconfig.o] Error 1 My config cmd was ./configure --with-winbind --with-pam --with-smbmount --enable-cups My CPU is a processor : 0 vendor_id : AuthenticAMD cpu family : 15 model : 5 model name : AMD Opteron(tm) Processor 244 stepping: 10 cpu MHz : 1792.724 cache size : 1024 KB fpu : yes fpu_exception : yes cpuid level : 1 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext lm 3dnowe xt 3dnow bogomips: 3522.56 TLB size: 1088 4K pages clflush size: 64 cache_alignment : 64 address sizes : 40 bits physical, 48 bits virtual power management: ts fid vid ttp The same thing broke on samba-3.0.7 with Fedora C2 Test 3... Any Idea on what is wrong Shane -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] distribute/deploy software to clients
On Sun, Nov 07, 2004 at 05:04:29PM +0100, Florian Effenberger wrote: Hello, I run a Windows domain based on Samba 3 and I am searching for a way to distribute/deploy software to clients. Sorry for the late response, but to add to the list of responses, http://www.pcrdist.org/ has always seemed like a neat idea. It's even free now. I haven't taken the time to thoroughly try it out yet though. Ed -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Migration to Samba
Dean Landry wrote: I'm migrating to Samba on about 50 desktops. After I join the domain (this is on Windows 2k or XP) I get a whole new set of settings (under documents and settings). Is there a way to tell Windows to use the old directory? It matches their username on samba if that helps. Note, I'm using local profiles. Thanks, Dean XP and 2k will try to use a directory under documents and settings for users profiles, from the domain or local or roaming. If the directory already exists, it will try username.domain and then username.domain.001 etc. If you want to keep users settings, you will need to copy them over - i am not aware of a tool to force it to use existing settings. To move the users over, log on as the new user, then log in as an administrator. Right click my computer advanced tab User Profiles: settings. In this window, select the old user (probably COMPUTERNAME\username) and click copy to Browse to documents and settings/newusername.domainname OK. Change permitted to use and add the user in the format DOMAIN\username (just username will not work for domain users) Hope that helps -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Restricting access to [homes]
Greetings! I've got a samba server that's serving Windows and Mac clients. I want to restrict the [homes] share such that users can *only* connect to their own home directory, and not make read-only connections to other people's home directories. For example, on a Mac, if I connect to my Samba server with: smb://servername/bbonds and then authenticate myself as: jgiambi (password) I'm given read-only access to bbonds' home directory. /var/log/samba/log.smbd shows: [2004/11/11 11:52:46, 1] smbd/service.c:make_connection_snum(648) server (192.168.94.17) connect to service bbonds initially as user jgiambi (uid=25, gid=45) (pid 15621) How can I prevent these sorts of accesses? 'jgiambi' should only be able to access the //servername/jgiambi share via [homes]. The [homes] share in /etc/samba/smb.conf reads: [homes] comment = Home Directories create mask = 0644 directory mask = 0755 browseable = no writable = yes guest ok = no Samba version 3.0.7 Thanks! Chris -- Christopher S. Swingley email: [EMAIL PROTECTED] (work) Intl. Arctic Research Center[EMAIL PROTECTED] (personal) University of Alaska Fairbanks www.frontier.iarc.uaf.edu/~cswingle/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] File case sensitivity
Hi; I'm re-posting this hoping that someone might be able to help me out -- I'm prepared to pay for support if necessary. I've run into a somewhat interesting issue in regards to IIS serving content from a samba share. Occasionly, IIS will return 404 errors for content that does infact exist. From the samba machine, I captured the following: This is an example of the site http://www.mysite.co.nz/foo not working: [2004/11/04 09:30:14, 3] smbd/trans2.c:call_trans2qfilepathinfo(2353) call_trans2qfilepathinfo: SMB_VFS_STAT of USER/MYSITE.CO.NZ/HTDOCS/FOO failed (No such file or directory) [2004/11/04 09:30:14, 3] smbd/error.c:error_packet(94) error string = No such file or directory [2004/11/04 09:30:14, 3] smbd/error.c:error_packet(114) error packet at smbd/trans2.c(2217) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_PATH_NOT_FOUND [2004/11/04 09:30:14, 3] smbd/process.c:process_smb(890) This is an example of the same site working, after I visited http://www.mysite.co.nz/ first, a few seconds later: [2004/11/04 09:34:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(2361) call_trans2qfilepathinfo user/mysite.co.nz/htdocs/foo (fnum = -1) level=1004 call=5 total_data=0 [2004/11/04 09:34:02, 3] smbd/process.c:process_smb(890) Transaction 8253551 of length 154 [2004/11/04 09:34:02, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 14455) [2004/11/04 09:34:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(2331) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/11/04 09:34:02, 3] smbd/trans2.c:call_trans2qfilepathinfo(2361) call_trans2qfilepathinfo user/mysite.co.nz/htdocs/foo (fnum = -1) level=1004 call=5 total_data=0 [2004/11/04 09:34:02, 3] smbd/process.c:process_smb(890) Transaction 8253552 of length 164 So the issue appears to be that samba is returning NT_STATUS_OBJECT_PATH_NOT_FOUND errors when IIS is requesting the file/path in uppercase. What I don't understand is that samba, by default, is configured to ignore case sensitivity. Has anyone else had similar problems and/or could point me in the right direction? TIA. --Brent -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Restricting access to [homes]
On Thursday 11 November 2004 16:03, Christopher Swingley wrote: [homes] comment = Home Directories create mask = 0644 directory mask = 0755 browseable = no writable = yes guest ok = no You need to make your create mask and directory mask more restrive. 600 and 700 respectively, is appropriate. You are giving your other users read-only access via Unix permissions. Misty Samba version 3.0.7 Thanks! Chris -- Christopher S. Swingley email: [EMAIL PROTECTED] (work) Intl. Arctic Research Center[EMAIL PROTECTED] (personal) University of Alaska Fairbanks www.frontier.iarc.uaf.edu/~cswingle/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Compile issues on Fedora Core 3
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Shane Drinkwater wrote: | Hello, | I am having problems compileing samba-3.0.8 on fedora core 3 64 bit. The | error message I am getting is: | Compiling dynconfig.c | /tmp/ccY0PMTp.s: Assembler messages: | /tmp/ccY0PMTp.s:44: Error: suffix or operands invalid for `mov' | /tmp/ccY0PMTp.s:97: Error: suffix or operands invalid for `mov' | make: *** [dynconfig.o] Error 1 Looks like a compiler bug to me. Try compiling with -O instead of -O2. Maybe contact the Fedora folks. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBk9TgIR7qMdg1EfYRAvE1AJ9TXcHsOTYpQPevtk+OhOZIbPDm6wCdFpdA sJ+gcBRAAhrhYMI8py+gAww= =+Y8s -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Restricting access to [homes]
On Thu, Nov 11, 2004 at 12:03:21PM -0900, Christopher Swingley wrote: Greetings! I've got a samba server that's serving Windows and Mac clients. I want to restrict the [homes] share such that users can *only* connect to their own home directory, and not make read-only connections to other people's home directories. For example, on a Mac, if I connect to my Samba server with: smb://servername/bbonds and then authenticate myself as: jgiambi (password) I'm given read-only access to bbonds' home directory. /var/log/samba/log.smbd shows: [2004/11/11 11:52:46, 1] smbd/service.c:make_connection_snum(648) server (192.168.94.17) connect to service bbonds initially as user jgiambi (uid=25, gid=45) (pid 15621) How can I prevent these sorts of accesses? 'jgiambi' should only be able to access the //servername/jgiambi share via [homes]. Common question. Add the line : valid users = %S to the homes share. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 3.0.8 and testparm, smbstatus, tdbbackup
Hallo Jerry, | testparm shows: | | ERROR: the 'passwd program' (/usr/bin/passwd %u) requires a '%u' parameter. | You can see, passwd program _is_ /usr/bin/passwd %u fixed. BUG # 2017 thanks a lot. | smbstatus command always shows processes _and_ shares even | if using the switches '-p' for showing processes only or | '-S' for showing shares only or '-B' for showing locks only: I'll look into this. Thanks again! der tom __ Mit WEB.DE FreePhone mit hoechster Qualitaet ab 0 Ct./Min. weltweit telefonieren! http://freephone.web.de/?mc=021201 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 3.0.8 compile warnings and link error
Hallo Jerry, | + ac_cv_gnu_ld_version=GNU ld version 2.12 What platform is this (uname -a or linux distro ver.)? eisfair - www.eisfair.org test2 # uname -a Linux test2 2.4.26-1 #15 Sun Oct 24 22:54:01 CEST 2004 i686 unknown der tom Verschicken Sie romantische, coole und witzige Bilder per SMS! Jetzt neu bei WEB.DE FreeMail: http://freemail.web.de/?mc=021193 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Beating a dead horse - Roaming profiles / logon scripts
Using samba 3.0.8 and Suse ES 9.0 I'm having problems getting roaming profiles/local profiles and logon scripts on a Win2k or WinXP workstation working correctly. My bdc is supposed to be doing the authentication against my PDC\LDAP server. Even when I enable Only allow local profiles on the XP machine it will logout a domain samba user with a sorry no roaming or local profile available and theres no storage space for one. I believe its permissions but nothing is showing up in the logs. The logon scripts aren't even trying to run. The only user that can login is root and myself with a local profile and once root logins it loads notepad opens up with the following displayed. [.ShellClassInfo] [EMAIL PROTECTED],-21787 PDC Info [global] username map = /etc/samba/smbusers log level = 1 log file = /var/log/samba/%m.log max log size = 0 logon path = \\%L\profiles\%u logon drive = H: domain logons = Yes wins support = Yes idmap uid = 1-2 idmap gid = 1-2 winbind use default domain = Yes map acl inherit = Yes [homes] comment = Home Directories valid users = %S read only = No inherit acls = Yes browseable = No [netlogon] comment = Network Logon Service path = /var/lib/samba/netlogon guest ok = Yes share modes = No [profiles] comment = Network Profiles Service path = /var/lib/samba/profiles/%u read only = No create mask = 0600 directory mask = 0700 store dos attributes = Yes browseable = No Groupt / Owner /var/log/samba/profiles user/root 777 ?Permission settings and user/group should be set to what /var/log/samba/netlogon Domain Users/root 775 ?Permission settings and user/group should be set to what /var/log/samba/netlogon/scripts Domain Admins/root 755 ?Permission settings and user/group should be set to what BDC Info [global] log level = 1 log file = /var/log/samba/%m.log max log size = 0 logon path = \\%L\profiles\%u logon drive = H: domain logons = Yes domain master = No wins server = 192.168.XX.XX idmap uid = 1-2 idmap gid = 1-2 winbind use default domain = Yes map acl inherit = Yes [homes] comment = Home Directories valid users = %S read only = No inherit acls = Yes browseable = No [netlogon] comment = Network Logon Service path = /var/lib/samba/netlogon guest ok = Yes share modes = No [profiles] comment = Network Profiles Service path = /var/lib/samba/profiles/%u read only = No create mask = 0600 directory mask = 0700 store dos attributes = Yes browseable = No Groupt / Owner /var/log/samba/profiles user/root 777 ?Permission settings and user/group should be set to what /var/log/samba/netlogon Domain Users/root 775 ?Permission settings and user/group should be set to what /var/log/samba/netlogon/scripts Domain Admins/root 755 ?Permission settings and user/group should be set to what Thanks Douglas Sterner -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Performance of Samba across WAN Links
Hi, Is anybody running Samba across T1 WAN links? If so, how's the peformance. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problem with lowercase Computernames in winbind samba 3.0.8
Hi thank you for your reply The host seems to be in the database [EMAIL PROTECTED] root]# getent passwd | grep rmts2 NTROBOTIC\rmts2$:x:10261:10005:RMTS2:/home/NTROBOTIC/rmts2_:/bin/false even if [EMAIL PROTECTED] root]# getent passwd NTROBOTIC\rmts2$ [EMAIL PROTECTED] root]# does not show a result (same without ) I allready wrote an message to samba technical about this issue. It's not a samba 3.0.8 problem as a thought at the beginning. I downgraded to samba 3.0.7, and the problem still exists. ( We moved from a NT4 domain to a w2003 domain and from 3.0.7 to 3.0.8 at the same time, and in the 3.0.7 testinstallation in a testdomain we dont recognize the problem (see below)) The problem occurs on redhat 8.0, suse 8.2 and solaris 8 ( 3 servers) Here is the newer email to samba technical: Greetings from munich Hansjörg I have successfully joined a W2003 AD with samba-3.0.8 Accessing shares from a samba server with a windows2000 host (rmts1) works but is significantly slower than before (samba as an NT4 Domain member). I found that when accessing the sahre samba starts logging. [2004/11/11 08:30:48, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username NTROBOTIC\rmts1$ is invalid on this system (i can send a level10 if it is needed) We have a Unix NIS Userdatabase and the same Usernames in AD. Winbindd is running and the domainusers are shown with. [EMAIL PROTECTED] samba]# wbinfo -u | grep -i rmts1 RMTS1$ or (depending on the settings of winbind trusted domains only) [EMAIL PROTECTED] samba]# wbinfo -u | grep -i rmts1 NTROBOTIC\RMTS1$ Even if I put winbind in my /etc/nsswitch.conf (which I actually don't want to, because we allready have the users in NIS) and getent passwd shows RMTS1$ or NTROBOTIC\RMTS1$, the error still occurs. Side Note: The error occurs only once, if I access the share via (search computer- doubleclick on computername etc or via network neibourghhood-whole network...) If I access it via a network resource, I added under network neibourghhood, the error from above is produced appears for every file i open, which slows down the progress a lot... Thank you very much Hansjörg Maurer -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: Thu 11.11.2004 18:47 To: Maurer, Hansjörg Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Problem with lowercase Computernames in winbind samba 3.0.8 -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hansjoerg Maurer wrote: | Hi, | | we have several samba servers running as AD members (w2003 domain). | Since the Upgrade to samba 3.0.8 the following message appears, | when accessing a share on the memberserver from clienthost rmts2. | | | [2004/11/10 12:09:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) | Username NTROBOTIC\rmts2$ is invalid on this system | [2004/11/10 12:09:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) | Username NTROBOTIC\rmts2$ is invalid on this system | | [EMAIL PROTECTED] samba]# wbinfo -u | grep -i rmts2 | NTROBOTIC\RMTS2$ | | Cound that be a case Problem rmts2 ne RMTS2 Nope. I don't think so. Probably an issue with you libnss_winbind.so installation. does 'getent passwd NTROBOTIC\rmts2$' return an entry ? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBk6WuIR7qMdg1EfYRAvp7AKDEMmHOetHAe5SIf33Btp1MumGvcwCeJm0g pZwbqvzg4iThnz/uN4JI714= =pM8w -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] GID-to-SID mapping fails
Name-to-SID works: [EMAIL PROTECTED] mpmCx]# wbinfo -n QA4\\DnsUpdateProxy S-1-5-21-3152226350-2923503207-3337354198-1105 Domain Group (2) SID-to-Name works [EMAIL PROTECTED] mpmCx]# wbinfo -s S-1-5-21-3152226350-2923503207-3337354198-1105 QA4\DnsUpdateProxy 2 SID-to-GID works: [EMAIL PROTECTED] mpmCx]# wbinfo -Y S-1-5-21-3152226350-2923503207-3337354198-1105 10010 GID-to-SID fails: [EMAIL PROTECTED] mpmCx]# wbinfo -G 10010 Could not convert gid 10010 to sid Any suggestions? Additional info: [EMAIL PROTECTED] mpmCx]# wbinfo --version Version 3.0.7-1.3E [EMAIL PROTECTED] mpmCx]# wbinfo -g BUILTIN\System Operators BUILTIN\Replicators BUILTIN\Guests BUILTIN\Power Users BUILTIN\Print Operators BUILTIN\Administrators BUILTIN\Account Operators BUILTIN\Backup Operators BUILTIN\Users QA4\Domain Computers QA4\Domain Controllers QA4\Schema Admins QA4\Enterprise Admins QA4\Domain Admins QA4\Domain Users QA4\Domain Guests QA4\Group Policy Creator Owners QA4\DnsUpdateProxy [EMAIL PROTECTED] mpmCx]# getent group | grep 10010 QA4\DnsUpdateProxy:x:10010: -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] [Very Strange] Windows Networking suddendly stopped working
Hi list, I hope that maybe one of you can shed some light on this, as this is a very strange case and I don't even have the slightest clue from what this symptom may all come from. Maybe not Samba, maybe Hardware, maybe buggy windows . Problem: We have running a Samba 3.0.7 (from backports.org) Debian 3.0 STABLE Server here for over a year now. On Tuesday this week we got the first report from 1 user, that the Windows Network Neighborhood is not accessable, we did not thought of a problem first. On Wednesday the next 2 reports from different users on different machines came in. And finally yesterday another 5 reports ( All within the same company using the same Server) NOTE: The error messages following were translated from a german localized version of Windows XP Prof. so they might be called differently in the english version So we started looking into the Problem, the error message given was, when trying to access the Windows Networking Neighborhood The network is not existent or was not started. It turned out that the services Server Service, Computer Browser Service were not started. Trying to start them manually ended with a timeout. The Event Log is showing nothing. And now the Fun begins We thought first of a network problem and to isolate this we directly connected 1 PC via a crosslink cable to the Samba Server, giving the PC a static IP address. (Normally we use DHCP). Even now the error message was the same, more strangely, if you pulled out the network cable completley the Computer and all Services started normally. Pluggin the cable back in, the same problems arose. Unfortunatley enough is, that sometimes it works *with* the network cable plugged in but then a minute later it doesn't. So in the next step we replaced the NIC of the Server with a new one, thinking we solved the problem (While replacing the NIC requries a complete reboot this step was done with this as well, a tdbbackup -v *.tdb was also done, showing everything is ok, and I removed manually the browse.dat ). The first try succeeded, but the second try was again the same result. And we found out that this problem is bound to the computer not the user, as the user can logon on another computer normal without any problems. All computers were running Windows XP Prof SP1a. Altough there is a virus Scanner (CA Etrust Inoculan) with up-to-date signatures on the computer, we scanned the computers in question by 2 additional Anti Virus Packages, 1. H+BEDV AntiVir and 2. Kasperksy, all scanners marking the computer clean. Running nbtstat -RR didn't also not solve the problem. Next, our MCSE decided to install Windows XP SP2 on the computers in question, and gues what, that solved the problem so far. So my question is what is the **REAL** Problem we seeing here, I don't believe that the solution is SP2, and normally I wouldn't worry if it would be 1 Computer showing this odd behavior, but the number increasing of the computers showing the same sympthoms within 3 days does make me nervous. I have looked thru samba log files and they were showing the things below and also rather frequently No route to host here is the output of them. There is no router between the PC's and the server, they are connected via a 3Com Super Stack III Switch. Logfile: [2004/11/12 02:34:14, 0] lib/util_sock.c:get_peer_addr(1000) getpeername failed. Error was Transport endpoint is not connected [2004/11/12 02:34:14, 0] lib/util_sock.c:write_socket_data(430) write_socket_data: write failure. Error = Connection reset by peer [2004/11/12 02:34:14, 0] lib/util_sock.c:send_smb(647) Error writing 4 bytes to client. -1. (Connection reset by peer) [2004/11/12 02:34:14, 0] smbd/service.c:make_connection(800) neckar (192.168.1.65) couldn't find service user [2004/11/12 02:38:40, 0] rpc_server/srv_util.c:get_alias_user_groups(219) get_alias_user_groups: gid of user xxx doesn't exist. Check your /etc/passwd and /etc/group files I double checked the above message, the gid *is* in /etc/group and the userid does also exist. I'm glad for every hint etc. etc. I could get, as it seems that this could turn out to be a real problem Regards Carsten -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Performance of Samba across WAN Links
Very interesting. When you state trim down roaming profiles, do you mean disable roaming profiles all together or to remove certain functionality from roaming profiles? If the latter is the case, which functions are removed to improve the speed? Thanks! On Thu, 11 Nov 2004 21:30:39 -0500, Eric Feldhusen [EMAIL PROTECTED] wrote: Baldwin Sung wrote: Hi, Is anybody running Samba across T1 WAN links? If so, how's the peformance. Thanks Yup, between 4 of my schools, I do just that. It works fine, the only time you notice any slowness, it's at login on Windows 2k/XP due to the roaming profiles, but that's not a problem with Samba, just with how Microsoft implimented roaming profiles for W2k/XP. Trim the roaming profiles down, logins speed up. -- NOTICE: New email address: [EMAIL PROTECTED] -- Eric Feldhusen Network Administrator for Adams, Chassell, Dollar Bay-Tamarack City, and Lake Linden-Hubbell Public Schools emailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Point n print woes
Hi, So I have setup Samba to allow print Point n Print. print$ is setup exactly as recommend. The various directories for different OS are setup. I follow the steps to upload the printer driver in WindowsXP - Using network neighborhood go to the printer I will to upload - Right click on printer - Select properties - Click on No when prompted to install drivers - Click on Advanced tab - Click on New driver The trouble is New driver is grey out and I can not click on it and the Driver drop down menu has nothing either. (And I have other printer already manually installed...)Soo I am stuck trying to upload drivers to the Samba server. Any suggestions on where to look? I have been working on this for a while and I am stumped. Thanks. --- Charles SMB.conf clip... [$print] comment = PRinter Drivers path = /var/lib/samba/drivers browseable = yes guest ok = no read only = yes write list = root -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] having problem with multipale interfaces
Hi, I am having some prob with my samba. I am runing samba as a PDC and one one interface it works better when I put another interface as I have more networks it gives me a message that the following domain is not avaliable. I don't know what prob it can be I have changed smb.conf many times with the follwing but still not able to get it work. interface=172.168.0.0/24 172.168.8.0/24 and with this also I have tried interface= eth0 but still it doesn't work I don't have for the time being any firewall on my network I can ping the other network client from samba but can't conect it with samba. I am really worry about it what it can be plz help me out with this. I will be really thank full to you people. thanks in advance -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
svn commit: samba-web r409 - in trunk: .
Author: deryck Date: 2004-11-11 15:07:48 + (Thu, 11 Nov 2004) New Revision: 409 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=409 Log: Update redirect page to reflect us3 being down temporarily. --deryck Modified: trunk/redirect_us.html Changeset: Modified: trunk/redirect_us.html === --- trunk/redirect_us.html 2004-11-10 19:22:53 UTC (rev 408) +++ trunk/redirect_us.html 2004-11-11 15:07:48 UTC (rev 409) @@ -13,10 +13,9 @@ randomMirror = new Array; randomMirror[0] = http://us1.samba.org/samba/; - randomMirror[1] = http://us3.samba.org/samba/; - randomMirror[2] = http://us4.samba.org/samba/; + randomMirror[1] = http://us4.samba.org/samba/; - n=Math.floor(Math.random()*3) + n=Math.floor(Math.random()*2) /script
svn commit: samba r3681 - branches/SAMBA_3_0/source trunk/source
Author: gd Date: 2004-11-11 15:38:21 + (Thu, 11 Nov 2004) New Revision: 3681 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3681 Log: Fix build of libsmbclient on x86_64. Patch from Lars Mueller [EMAIL PROTECTED] Guenther Modified: branches/SAMBA_3_0/source/Makefile.in trunk/source/Makefile.in Changeset: Modified: branches/SAMBA_3_0/source/Makefile.in === --- branches/SAMBA_3_0/source/Makefile.in 2004-11-11 05:29:58 UTC (rev 3680) +++ branches/SAMBA_3_0/source/Makefile.in 2004-11-11 15:38:21 UTC (rev 3681) @@ -472,7 +472,7 @@ $(UBIQX_OBJ) $(LIB_NONSMBD_OBJ) $(GROUPDB_OBJ) $(SECRETS_OBJ) \ $(POPT_LIB_OBJ) $(SMBLDAP_OBJ) $(DUMMYROOT_OBJ) -SMBGET_OBJ = utils/smbget.o $(POPT_LIB_OBJ) $(LIBSMBCLIENT_OBJ) $(SECRETS_OBJ) +SMBGET_OBJ = utils/smbget.o $(POPT_LIB_OBJ) $(LIBSMBCLIENT_OBJ) RPCCLIENT_OBJ1 = rpcclient/rpcclient.o rpcclient/cmd_lsarpc.o \ rpcclient/cmd_samr.o rpcclient/cmd_spoolss.o \ @@ -508,7 +508,8 @@ libsmb/libsmb_cache.o \ $(PARAM_OBJ) $(LIB_NONSMBD_OBJ) \ $(LIBSMB_OBJ) $(KRBCLIENT_OBJ) $(UBIQX_OBJ) \ - $(LIBMSRPC_OBJ) $(RPC_PARSE_OBJ) $(PASSDB_GET_SET_OBJ) + $(LIBMSRPC_OBJ) $(RPC_PARSE_OBJ) $(PASSDB_GET_SET_OBJ) \ + $(SECRETS_OBJ) # This shared library is intended for linking with unit test programs # to test Samba internals. It's called libbigballofmud.so to @@ -991,7 +992,7 @@ bin/[EMAIL PROTECTED]@: $(LIBSMBCLIENT_PICOBJS) @echo Linking libsmbclient shared library $@ @$(SHLD) $(LDSHFLAGS) -o $@ $(LIBSMBCLIENT_PICOBJS) $(LDFLAGS) $(LIBS) \ - $(KRB5LIBS) $(LDAP_LIBS) $(SECRETS_OBJ) \ + $(KRB5LIBS) $(LDAP_LIBS) \ @[EMAIL PROTECTED] [EMAIL PROTECTED](LIBSMBCLIENT_MAJOR) bin/libsmbclient.a: $(LIBSMBCLIENT_PICOBJS) Modified: trunk/source/Makefile.in === --- trunk/source/Makefile.in2004-11-11 05:29:58 UTC (rev 3680) +++ trunk/source/Makefile.in2004-11-11 15:38:21 UTC (rev 3681) @@ -480,7 +480,7 @@ $(UBIQX_OBJ) $(LIB_NONSMBD_OBJ) $(GROUPDB_OBJ) $(SECRETS_OBJ) \ $(POPT_LIB_OBJ) $(SMBLDAP_OBJ) $(DUMMYROOT_OBJ) libsmb/asn1.o -SMBGET_OBJ = utils/smbget.o $(POPT_LIB_OBJ) $(LIBSMBCLIENT_OBJ) $(SECRETS_OBJ) +SMBGET_OBJ = utils/smbget.o $(POPT_LIB_OBJ) $(LIBSMBCLIENT_OBJ) RPCCLIENT_OBJ1 = rpcclient/rpcclient.o rpcclient/cmd_lsarpc.o \ rpcclient/cmd_samr.o rpcclient/cmd_spoolss.o \ @@ -517,7 +517,8 @@ libsmb/libsmb_cache.o \ $(PARAM_OBJ) $(LIB_NONSMBD_OBJ) \ $(LIBSMB_OBJ) $(KRBCLIENT_OBJ) $(UBIQX_OBJ) \ - $(LIBMSRPC_OBJ) $(RPC_PARSE_OBJ) $(PASSDB_GET_SET_OBJ) + $(LIBMSRPC_OBJ) $(RPC_PARSE_OBJ) $(PASSDB_GET_SET_OBJ) \ + $(SECRETS_OBJ) # This shared library is intended for linking with unit test programs # to test Samba internals. It's called libbigballofmud.so to @@ -999,7 +1000,7 @@ bin/[EMAIL PROTECTED]@: $(LIBSMBCLIENT_PICOBJS) @echo Linking libsmbclient shared library $@ @$(SHLD) $(LDSHFLAGS) -o $@ $(LIBSMBCLIENT_PICOBJS) $(LDFLAGS) $(LIBS) \ - $(KRB5LIBS) $(LDAP_LIBS) $(SECRETS_OBJ) \ + $(KRB5LIBS) $(LDAP_LIBS) \ @[EMAIL PROTECTED] [EMAIL PROTECTED](LIBSMBCLIENT_MAJOR) bin/libsmbclient.a: $(LIBSMBCLIENT_PICOBJS)
svn commit: samba-web r410 - in trunk/news/calendar: .
Author: deryck Date: 2004-11-11 17:17:41 + (Thu, 11 Nov 2004) New Revision: 410 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=410 Log: Adding jht events to Team calendar. --deryck Added: trunk/news/calendar/jht_chicago.txt trunk/news/calendar/jht_sandiego.txt Modified: trunk/news/calendar/index.html trunk/news/calendar/showDate.js Changeset: Sorry, the patch is too large (307 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=410
svn commit: samba r3682 - in branches/SAMBA_3_0/source/smbd: .
Author: jerry Date: 2004-11-11 17:40:49 + (Thu, 11 Nov 2004) New Revision: 3682 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3682 Log: fix seg fault in lanman printing code caused by uninitialized variable Modified: branches/SAMBA_3_0/source/smbd/lanman.c Changeset: Modified: branches/SAMBA_3_0/source/smbd/lanman.c === --- branches/SAMBA_3_0/source/smbd/lanman.c 2004-11-11 15:38:21 UTC (rev 3681) +++ branches/SAMBA_3_0/source/smbd/lanman.c 2004-11-11 17:40:49 UTC (rev 3682) @@ -2267,6 +2267,12 @@ return False; *rparam_len = 4; *rparam = REALLOC(*rparam,*rparam_len); + + if ( (snum = lp_servicenumber(sharename)) == -1 ) { + DEBUG(0,(api_PrintJobInfo: unable to get service number from sharename [%s]\n, + sharename)); + return False; + } *rdata_len = 0;
svn commit: samba-web r411 - in trunk: history news/calendar
Author: deryck Date: 2004-11-11 17:52:27 + (Thu, 11 Nov 2004) New Revision: 411 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=411 Log: Get the number of days right for John's events. And since release notes are calling the old favicon from browser cache, add link to the correct version of favicon. --deryck Modified: trunk/history/rnotes_template trunk/news/calendar/index.html Changeset: Modified: trunk/history/rnotes_template === --- trunk/history/rnotes_template 2004-11-11 17:17:41 UTC (rev 410) +++ trunk/history/rnotes_template 2004-11-11 17:52:27 UTC (rev 411) @@ -4,6 +4,7 @@ head titleSamba - Release Notes Archive/title +link rel=shortcut icon href=/samba/images/favicon.ico / /head body Modified: trunk/news/calendar/index.html === --- trunk/news/calendar/index.html 2004-11-11 17:17:41 UTC (rev 410) +++ trunk/news/calendar/index.html 2004-11-11 17:52:27 UTC (rev 411) @@ -225,7 +225,7 @@ tda href=jht_sandiego.txt onclick=showDate(12); return false13/a/td tda href=jht_sandiego.txt onclick=showDate(12); return false14/a/td tda href=jht_sandiego.txt onclick=showDate(12); return false15/a/td - td16/td + tda href=jht_sandiego.txt onclick=showDate(12); return false16a/td td17/td td18/td /tr @@ -294,7 +294,7 @@ tda href=jht_chicago.txt onclick=showDate(13); return false24/a/td tda href=jht_chicago.txt onclick=showDate(13); return false25/a/td tda href=jht_chicago.txt onclick=showDate(13); return false26/a/td - td27/td + tda href=jht_chicago.txt onclick=showDate(13); return false27/a/td td28/td td29/td /tr
svn commit: samba r3683 - in branches/SAMBA_3_0/source/utils: .
Author: jerry Date: 2004-11-11 18:11:40 + (Thu, 11 Nov 2004) New Revision: 3683 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3683 Log: BUG 2017: fix testparm reporting for the passwd program string Modified: branches/SAMBA_3_0/source/utils/testparm.c Changeset: Modified: branches/SAMBA_3_0/source/utils/testparm.c === --- branches/SAMBA_3_0/source/utils/testparm.c 2004-11-11 17:40:49 UTC (rev 3682) +++ branches/SAMBA_3_0/source/utils/testparm.c 2004-11-11 18:11:40 UTC (rev 3683) @@ -145,7 +145,7 @@ ret = 1; } else /* check if there's a %u parameter present */ - if(strstr_m(lp_passwd_chat(), %u) == NULL) { + if(strstr_m(lp_passwd_program(), %u) == NULL) { fprintf(stderr, ERROR: the 'passwd program' (%s) requires a '%%u' parameter.\n, lp_passwd_program()); ret = 1; }
svn commit: samba r3684 - in branches/SAMBA_3_0_RELEASE: packaging/Debian/debian-stable packaging/Solaris source source/lib source/rpc_client source/rpc_parse source/rpcclient source/smbd source/utils
Author: jerry Date: 2004-11-11 20:37:44 + (Thu, 11 Nov 2004) New Revision: 3684 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3684 Log: syncing up some changes for 3.0.9 svn merge -r 3628:3638 $SVNURL/branches/SAMBA_3_0 svn merge -r 3688:3639 $SVNURL/branches/SAMBA_3_0 svn merge -r 3644:3645 $SVNURL/branches/SAMBA_3_0 svn merge -r 3645:3649 $SVNURL/branches/SAMBA_3_0 svn merge -r 3649:3650 $SVNURL/branches/SAMBA_3_0 svn merge -r 3666:3668 $SVNURL/branches/SAMBA_3_0 svn merge -r 3671:3673 $SVNURL/branches/SAMBA_3_0 svn merge -r 3674:3681 $SVNURL/branches/SAMBA_3_0 svn merge -r 3681:3682 $SVNURL/branches/SAMBA_3_0 svn merge -r 3682:3683 $SVNURL/branches/SAMBA_3_0 also pulled in updated solaris packaging from 3.0 Added: branches/SAMBA_3_0_RELEASE/packaging/Solaris/samba.init.master branches/SAMBA_3_0_RELEASE/packaging/Solaris/smb.conf.default Removed: branches/SAMBA_3_0_RELEASE/packaging/Solaris/pkg-specs/ branches/SAMBA_3_0_RELEASE/packaging/Solaris/samba.server.master Modified: branches/SAMBA_3_0_RELEASE/packaging/Debian/debian-stable/changelog branches/SAMBA_3_0_RELEASE/packaging/Solaris/makepkg.sh branches/SAMBA_3_0_RELEASE/packaging/Solaris/postinstall branches/SAMBA_3_0_RELEASE/packaging/Solaris/prototype.master branches/SAMBA_3_0_RELEASE/source/Makefile.in branches/SAMBA_3_0_RELEASE/source/VERSION branches/SAMBA_3_0_RELEASE/source/lib/util.c branches/SAMBA_3_0_RELEASE/source/rpc_client/cli_spoolss.c branches/SAMBA_3_0_RELEASE/source/rpc_parse/parse_spoolss.c branches/SAMBA_3_0_RELEASE/source/rpcclient/cmd_spoolss.c branches/SAMBA_3_0_RELEASE/source/smbd/dosmode.c branches/SAMBA_3_0_RELEASE/source/smbd/lanman.c branches/SAMBA_3_0_RELEASE/source/utils/testparm.c Changeset: Sorry, the patch is too large (579 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3684
svn commit: samba r3685 - in branches/SAMBA_3_0/source: .
Author: jerry Date: 2004-11-11 20:41:28 + (Thu, 11 Nov 2004) New Revision: 3685 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3685 Log: setting the 3.0 branch to 3.0.10pre1-svn Modified: branches/SAMBA_3_0/source/VERSION Changeset: Modified: branches/SAMBA_3_0/source/VERSION === --- branches/SAMBA_3_0/source/VERSION 2004-11-11 20:37:44 UTC (rev 3684) +++ branches/SAMBA_3_0/source/VERSION 2004-11-11 20:41:28 UTC (rev 3685) @@ -19,7 +19,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=0 -SAMBA_VERSION_RELEASE=8 +SAMBA_VERSION_RELEASE=10 # For 'pre' releases the version will be # @@ -29,7 +29,7 @@ # e.g. SAMBA_VERSION_PRE_RELEASE=1 # # - 2.2.9pre1 # -SAMBA_VERSION_PRE_RELEASE=2 +SAMBA_VERSION_PRE_RELEASE=1 # For 'rc' releases the version will be#
svn commit: samba r3686 - in branches/SAMBA_4_0/source: libcli/auth libcli/util librpc/idl librpc/rpc rpc_server/netlogon torture torture/rpc
Author: abartlet Date: 2004-11-11 23:24:30 + (Thu, 11 Nov 2004) New Revision: 3686 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3686 Log: The results of some work on the NETLOGON pipe: Break out the samsync tests from RPC-NETLOGON into a new RPC-SAMSYNC, that will cross-verify all the values. Add support for the way netlogon credentials are shared between the pipe that sets up schannel and the pipe that is encrypted with it. Test this support, by calling both NETLOGON and SAMR operations in the RPC-SCHANNEL test. Move some of the Netlogon NEG flags into the .idl, now we have an idea what a few of them really are. Rename the sam_pwd_hash into a name that has meaning (all other crypto functions were renamed in Samba4 ages ago). Break out NTLMv2 functionality for operation on the NT hash - I intend to do NTLMv2 logins in the samsync test in future, and naturally I only have the hash. Andrew Bartlett Modified: branches/SAMBA_4_0/source/libcli/auth/credentials.h branches/SAMBA_4_0/source/libcli/auth/gensec.h branches/SAMBA_4_0/source/libcli/util/smbdes.c branches/SAMBA_4_0/source/libcli/util/smbencrypt.c branches/SAMBA_4_0/source/librpc/idl/netlogon.idl branches/SAMBA_4_0/source/librpc/rpc/dcerpc_schannel.c branches/SAMBA_4_0/source/rpc_server/netlogon/schannel_state.c branches/SAMBA_4_0/source/torture/config.mk branches/SAMBA_4_0/source/torture/rpc/netlogon.c branches/SAMBA_4_0/source/torture/rpc/schannel.c branches/SAMBA_4_0/source/torture/rpc/xplogin.c branches/SAMBA_4_0/source/torture/torture.c Changeset: Sorry, the patch is too large (737 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3686
svn commit: samba r3687 - in branches/SAMBA_4_0/source/torture/rpc: .
Author: abartlet Date: 2004-11-11 23:25:33 + (Thu, 11 Nov 2004) New Revision: 3687 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3687 Log: Gaah - I forgot to add the new file for the RPC-SAMSYNC test... See -r 3686 Andrew Bartlett Added: branches/SAMBA_4_0/source/torture/rpc/samsync.c Changeset: Sorry, the patch is too large (428 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3687
svn commit: samba r3688 - in branches/SAMBA_3_0/source/utils: .
Author: jerry Date: 2004-11-11 23:30:32 + (Thu, 11 Nov 2004) New Revision: 3688 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3688 Log: fix output of smbstatus to make the man page; fix -L, -p, -S and the -u username functionality Modified: branches/SAMBA_3_0/source/utils/status.c Changeset: Modified: branches/SAMBA_3_0/source/utils/status.c === --- branches/SAMBA_3_0/source/utils/status.c2004-11-11 23:25:33 UTC (rev 3687) +++ branches/SAMBA_3_0/source/utils/status.c2004-11-11 23:30:32 UTC (rev 3688) @@ -47,6 +47,8 @@ static BOOL processes_only=False; static int show_brl; +const char *username = NULL; + /* added by OH */ static void Ucrit_addUsername(const char *username) { @@ -578,6 +580,7 @@ int c; static int profile_only = 0; TDB_CONTEXT *tdb; + BOOL show_processes, show_locks, show_shares; poptContext pc; struct poptOption long_options[] = { POPT_AUTOHELP @@ -585,7 +588,7 @@ {verbose, 'v', POPT_ARG_NONE, verbose, 'v', Be verbose }, {locks, 'L', POPT_ARG_NONE, locks_only, 'L', Show locks only }, {shares, 'S', POPT_ARG_NONE, shares_only, 'S', Show shares only }, - {user, 'u', POPT_ARG_STRING, 0, 'u', Switch to user }, + {user,'u', POPT_ARG_STRING, username, 'u', Switch to user }, {brief, 'b', POPT_ARG_NONE, brief, 'b', Be brief }, #ifdef WITH_PROFILE {profile, 'P', POPT_ARG_NONE, profile_only, 'P', Do profiling }, @@ -615,6 +618,15 @@ } } + /* setup the flags based on the possible combincations */ + + show_processes = !(shares_only || locks_only || profile_only) || processes_only; + show_locks = !(shares_only || processes_only || profile_only) || locks_only; + show_shares= !(processes_only || locks_only || profile_only) || shares_only; + + if ( username ) + Ucrit_addUsername( username ); + if (verbose) { d_printf(using configfile = %s\n, dyn_CONFIGFILE); } @@ -628,43 +640,50 @@ return profile_dump(); } - tdb = tdb_open_log(lock_path(sessionid.tdb), 0, TDB_DEFAULT, O_RDONLY, 0); - if (!tdb) { - d_printf(sessionid.tdb not initialised\n); - } else { - if (locks_only) goto locks; + if ( show_processes ) { + tdb = tdb_open_log(lock_path(sessionid.tdb), 0, TDB_DEFAULT, O_RDONLY, 0); + if (!tdb) { + d_printf(sessionid.tdb not initialised\n); + } else { + d_printf(\nSamba version %s\n,SAMBA_VERSION_STRING); + d_printf(PID Username Group Machine \n); + d_printf(---\n); - d_printf(\nSamba version %s\n,SAMBA_VERSION_STRING); - d_printf(PID Username Group Machine \n); - d_printf(---\n); + tdb_traverse(tdb, traverse_sessionid, NULL); + tdb_close(tdb); + } - tdb_traverse(tdb, traverse_sessionid, NULL); - tdb_close(tdb); + if (processes_only) + exit(0); } - tdb = tdb_open_log(lock_path(connections.tdb), 0, TDB_DEFAULT, O_RDONLY, 0); - if (!tdb) { - d_printf(%s not initialised\n, lock_path(connections.tdb)); - d_printf(This is normal if an SMB client has never connected to your server.\n); - } else { - if (verbose) { - d_printf(Opened %s\n, lock_path(connections.tdb)); + if ( show_shares ) { + tdb = tdb_open_log(lock_path(connections.tdb), 0, TDB_DEFAULT, O_RDONLY, 0); + if (!tdb) { + d_printf(%s not initialised\n, lock_path(connections.tdb)); + d_printf(This is normal if an SMB client has never connected to your server.\n); + } else { + if (verbose) { + d_printf(Opened %s\n, lock_path(connections.tdb)); + } + + if (brief) + exit(0); + + d_printf(\nService pid machine Connected at\n); + d_printf(---\n); + + tdb_traverse(tdb, traverse_fn1, NULL); + tdb_close(tdb); + +
svn commit: samba r3689 - in branches/SAMBA_4_0/source: build/pidl lib/dcom lib/dcom/common librpc/idl rpc_server/dcom torture/dcom
Author: jelmer Date: 2004-11-12 00:48:24 + (Fri, 12 Nov 2004) New Revision: 3689 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3689 Log: Large number of COM updates: - Work on server side and local COM support (should work, just no example classes yet) - Use vtables so that local and remote calls can be used transparently - Generate 'proxies and stubs' rather then heavily modified code in client.pm and server.pm. proxies (client side code) are generated in proxy.pm, stubs (server side dispatchers) are generated in stubs.pm - Support registering classes and interfaces - DCOM interfaces no longer have to be in the same IDL file as their base interface, which will allow us to split up dcom.idl Added: branches/SAMBA_4_0/source/build/pidl/proxy.pm branches/SAMBA_4_0/source/build/pidl/stub.pm branches/SAMBA_4_0/source/lib/dcom/common/tables.c branches/SAMBA_4_0/source/lib/dcom/local/ Removed: branches/SAMBA_4_0/source/lib/dcom/common/local.c branches/SAMBA_4_0/source/rpc_server/dcom/dcom.h Modified: branches/SAMBA_4_0/source/build/pidl/README branches/SAMBA_4_0/source/build/pidl/client.pm branches/SAMBA_4_0/source/build/pidl/header.pm branches/SAMBA_4_0/source/build/pidl/parser.pm branches/SAMBA_4_0/source/build/pidl/pidl.pl branches/SAMBA_4_0/source/build/pidl/server.pm branches/SAMBA_4_0/source/lib/dcom/common/dcom.h branches/SAMBA_4_0/source/lib/dcom/common/main.c branches/SAMBA_4_0/source/lib/dcom/config.mk branches/SAMBA_4_0/source/librpc/idl/dcom.idl branches/SAMBA_4_0/source/rpc_server/dcom/remact.c branches/SAMBA_4_0/source/rpc_server/dcom/rot.c branches/SAMBA_4_0/source/torture/dcom/simple.c Changeset: Sorry, the patch is too large (1648 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3689
svn commit: samba r3690 - in branches/SAMBA_4_0/source/build/smb_build: .
Author: jelmer Date: 2004-11-12 01:40:02 + (Fri, 12 Nov 2004) New Revision: 3690 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3690 Log: Use perl's 'use' statement to include the build system parts rather then using cat Added: branches/SAMBA_4_0/source/build/smb_build/config_mk.pm branches/SAMBA_4_0/source/build/smb_build/depend.pm branches/SAMBA_4_0/source/build/smb_build/input.pm branches/SAMBA_4_0/source/build/smb_build/main.pm branches/SAMBA_4_0/source/build/smb_build/makefile.pm branches/SAMBA_4_0/source/build/smb_build/output.pm branches/SAMBA_4_0/source/build/smb_build/smb_build_h.pm Removed: branches/SAMBA_4_0/source/build/smb_build/config_mk.pl branches/SAMBA_4_0/source/build/smb_build/depend.pl branches/SAMBA_4_0/source/build/smb_build/input.pl branches/SAMBA_4_0/source/build/smb_build/main.pl branches/SAMBA_4_0/source/build/smb_build/makefile.pl branches/SAMBA_4_0/source/build/smb_build/output.pl branches/SAMBA_4_0/source/build/smb_build/smb_build_h.pl Modified: branches/SAMBA_4_0/source/build/smb_build/core.m4 Changeset: Sorry, the patch is too large (4864 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3690
svn commit: samba r3691 - in branches/SAMBA_4_0/source/build: m4 smb_build
Author: jelmer Date: 2004-11-12 02:00:58 + (Fri, 12 Nov 2004) New Revision: 3691 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3691 Log: Use packages Added: branches/SAMBA_4_0/source/build/smb_build/dump.pm Removed: branches/SAMBA_4_0/source/build/smb_build/dump.pl Modified: branches/SAMBA_4_0/source/build/m4/rewrite.m4 branches/SAMBA_4_0/source/build/smb_build/config_mk.pm branches/SAMBA_4_0/source/build/smb_build/core.m4 branches/SAMBA_4_0/source/build/smb_build/depend.pm branches/SAMBA_4_0/source/build/smb_build/input.pm branches/SAMBA_4_0/source/build/smb_build/main.pm branches/SAMBA_4_0/source/build/smb_build/makefile.pm branches/SAMBA_4_0/source/build/smb_build/output.pm branches/SAMBA_4_0/source/build/smb_build/public.m4 branches/SAMBA_4_0/source/build/smb_build/smb_build_h.pm Changeset: Sorry, the patch is too large (401 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3691
svn commit: samba r3692 - in trunk/source: lib smbd
Author: jra Date: 2004-11-12 02:15:55 + (Fri, 12 Nov 2004) New Revision: 3692 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3692 Log: Correctly detect errno for no acl/ea support. Jeremy Modified: trunk/source/lib/sysacls.c trunk/source/smbd/posix_acls.c Changeset: Modified: trunk/source/lib/sysacls.c === --- trunk/source/lib/sysacls.c 2004-11-12 02:00:58 UTC (rev 3691) +++ trunk/source/lib/sysacls.c 2004-11-12 02:15:55 UTC (rev 3692) @@ -3196,3 +3196,23 @@ } #endif /* No ACLs. */ + +/ + Deliberately outside the ACL defines. Return 1 if this is a no acls + errno, 0 if not. +/ + +int no_acl_syscall_error(int err) +{ +#if defined(ENOSYS) + if (err == ENOSYS) { + return 1; + } +#endif +#if defined(ENOTSUP) + if (err == ENOTSUP) { + return 1; + } +#endif + return 0; +} Modified: trunk/source/smbd/posix_acls.c === --- trunk/source/smbd/posix_acls.c 2004-11-12 02:00:58 UTC (rev 3691) +++ trunk/source/smbd/posix_acls.c 2004-11-12 02:15:55 UTC (rev 3692) @@ -245,7 +245,7 @@ SAFE_FREE(pai_buf); DEBUG(10,(store_inheritance_attribute:%s for file %s\n, protected ? (protected) : , fsp-fsp_name)); - if (ret == -1 errno != ENOSYS) + if (ret == -1 !no_acl_syscall_error(errno)) DEBUG(1,(store_inheritance_attribute: Error %s\n, strerror(errno) )); } @@ -2243,7 +2243,7 @@ if (the_acl == NULL) { - if (errno != ENOSYS) { + if (!no_acl_syscall_error(errno)) { /* * Only print this error message if we have some kind of ACL * support that's not working. Otherwise we would always get this. @@ -2408,14 +2408,10 @@ * Some systems allow all the above calls and only fail with no ACL support * when attempting to apply the acl. HPUX with HFS is an example of this. JRA. */ - if (errno == ENOSYS) + if (no_acl_syscall_error(errno)) { *pacl_set_support = False; + } -#ifdef ENOTSUP - if (errno == ENOTSUP) - *pacl_set_support = False; -#endif - DEBUG(2,(set_canon_ace_list: sys_acl_set_file type %s failed for file %s (%s).\n, the_acl_type == SMB_ACL_TYPE_DEFAULT ? directory default : file, fsp-fsp_name, strerror(errno) )); @@ -2427,14 +2423,10 @@ * Some systems allow all the above calls and only fail with no ACL support * when attempting to apply the acl. HPUX with HFS is an example of this. JRA. */ - if (errno == ENOSYS) + if (no_acl_syscall_error(errno)) { *pacl_set_support = False; + } -#ifdef ENOTSUP - if (errno == ENOTSUP) - *pacl_set_support = False; -#endif - DEBUG(2,(set_canon_ace_list: sys_acl_set_file failed for file %s (%s).\n, fsp-fsp_name, strerror(errno) )); goto done;
svn commit: samba r3693 - in branches/SAMBA_3_0/source: lib smbd
Author: jra Date: 2004-11-12 02:16:00 + (Fri, 12 Nov 2004) New Revision: 3693 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3693 Log: Correctly detect errno for no acl/ea support. Jeremy Modified: branches/SAMBA_3_0/source/lib/sysacls.c branches/SAMBA_3_0/source/smbd/posix_acls.c Changeset: Modified: branches/SAMBA_3_0/source/lib/sysacls.c === --- branches/SAMBA_3_0/source/lib/sysacls.c 2004-11-12 02:15:55 UTC (rev 3692) +++ branches/SAMBA_3_0/source/lib/sysacls.c 2004-11-12 02:16:00 UTC (rev 3693) @@ -3196,3 +3196,23 @@ } #endif /* No ACLs. */ + +/ + Deliberately outside the ACL defines. Return 1 if this is a no acls + errno, 0 if not. +/ + +int no_acl_syscall_error(int err) +{ +#if defined(ENOSYS) + if (err == ENOSYS) { + return 1; + } +#endif +#if defined(ENOTSUP) + if (err == ENOTSUP) { + return 1; + } +#endif + return 0; +} Modified: branches/SAMBA_3_0/source/smbd/posix_acls.c === --- branches/SAMBA_3_0/source/smbd/posix_acls.c 2004-11-12 02:15:55 UTC (rev 3692) +++ branches/SAMBA_3_0/source/smbd/posix_acls.c 2004-11-12 02:16:00 UTC (rev 3693) @@ -245,7 +245,7 @@ SAFE_FREE(pai_buf); DEBUG(10,(store_inheritance_attribute:%s for file %s\n, protected ? (protected) : , fsp-fsp_name)); - if (ret == -1 errno != ENOSYS) + if (ret == -1 !no_acl_syscall_error(errno)) DEBUG(1,(store_inheritance_attribute: Error %s\n, strerror(errno) )); } @@ -2243,7 +2243,7 @@ if (the_acl == NULL) { - if (errno != ENOSYS) { + if (!no_acl_syscall_error(errno)) { /* * Only print this error message if we have some kind of ACL * support that's not working. Otherwise we would always get this. @@ -2408,14 +2408,10 @@ * Some systems allow all the above calls and only fail with no ACL support * when attempting to apply the acl. HPUX with HFS is an example of this. JRA. */ - if (errno == ENOSYS) + if (no_acl_syscall_error(errno)) { *pacl_set_support = False; + } -#ifdef ENOTSUP - if (errno == ENOTSUP) - *pacl_set_support = False; -#endif - DEBUG(2,(set_canon_ace_list: sys_acl_set_file type %s failed for file %s (%s).\n, the_acl_type == SMB_ACL_TYPE_DEFAULT ? directory default : file, fsp-fsp_name, strerror(errno) )); @@ -2427,14 +2423,10 @@ * Some systems allow all the above calls and only fail with no ACL support * when attempting to apply the acl. HPUX with HFS is an example of this. JRA. */ - if (errno == ENOSYS) + if (no_acl_syscall_error(errno)) { *pacl_set_support = False; + } -#ifdef ENOTSUP - if (errno == ENOTSUP) - *pacl_set_support = False; -#endif - DEBUG(2,(set_canon_ace_list: sys_acl_set_file failed for file %s (%s).\n, fsp-fsp_name, strerror(errno) )); goto done;
svn commit: samba r3694 - in branches/SAMBA_4_0/source/ntvfs/posix: .
Author: tridge Date: 2004-11-12 02:45:52 + (Fri, 12 Nov 2004) New Revision: 3694 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3694 Log: added support for the RENAME_INFORMATION level of setfileinfo and setpathinfo. pvfs now passes the RAW-SFILEINFO test. Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_resolve.c branches/SAMBA_4_0/source/ntvfs/posix/pvfs_setfileinfo.c Changeset: Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_resolve.c === --- branches/SAMBA_4_0/source/ntvfs/posix/pvfs_resolve.c2004-11-12 02:16:00 UTC (rev 3693) +++ branches/SAMBA_4_0/source/ntvfs/posix/pvfs_resolve.c2004-11-12 02:45:52 UTC (rev 3694) @@ -527,7 +527,7 @@ be someone trying to exploit a race condition. Certainly we don't want to continue operating on this file */ - DEBUG(0,(pvfs: WARNING: file '%s' changed during resole - failing\n, + DEBUG(0,(pvfs: WARNING: file '%s' changed during resolve - failing\n, name-full_name)); return NT_STATUS_UNEXPECTED_IO_ERROR; } Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_setfileinfo.c === --- branches/SAMBA_4_0/source/ntvfs/posix/pvfs_setfileinfo.c2004-11-12 02:16:00 UTC (rev 3693) +++ branches/SAMBA_4_0/source/ntvfs/posix/pvfs_setfileinfo.c2004-11-12 02:45:52 UTC (rev 3694) @@ -34,10 +34,9 @@ struct pvfs_filename *name, struct smb_rename_information *r) { -#if 0 NTSTATUS status; struct pvfs_filename *name2; - char *base_dir, *p; + char *new_name, *p; /* renames are only allowed within a directory */ if (strchr_m(r-new_name, '\\')) { @@ -49,22 +48,61 @@ return NT_STATUS_FILE_IS_A_DIRECTORY; } - /* work out the base directory that the source file is in */ - base_dir = talloc_strdup(name, name-full_name); - p = strrchr(base_dir, '/'); + /* w2k3 does not appear to allow relative rename */ + if (r-root_fid != 0) { + return NT_STATUS_INVALID_PARAMETER; + } + + /* construct the fully qualified windows name for the new file name */ + new_name = talloc_strdup(req, name-original_name); + if (new_name == NULL) { + return NT_STATUS_NO_MEMORY; + } + p = strrchr_m(new_name, '\\'); + if (p == NULL) { + return NT_STATUS_OBJECT_NAME_INVALID; + } *p = 0; + new_name = talloc_asprintf(req, %s\\%s, new_name, r-new_name); + if (new_name == NULL) { + return NT_STATUS_NO_MEMORY; + } + /* resolve the new name */ - status = pvfs_resolve_partial(pvfs, req, base_dir, r-new_name, name2); + status = pvfs_resolve_name(pvfs, name, new_name, PVFS_RESOLVE_NO_WILDCARD, name2); if (!NT_STATUS_IS_OK(status)) { return status; } - if (name2-exists !r-overwrite) { - return NT_STATUS_OBJECT_NAME_COLLISION; + /* if the destination exists, then check the rename is allowed */ + if (name2-exists) { + if (strcmp(name2-full_name, name-full_name) == 0) { + /* rename to same name is null-op */ + return NT_STATUS_OK; + } + + if (!r-overwrite) { + return NT_STATUS_OBJECT_NAME_COLLISION; + } + + status = pvfs_can_delete(pvfs, name2); + if (NT_STATUS_EQUAL(status, NT_STATUS_SHARING_VIOLATION)) { + return NT_STATUS_ACCESS_DENIED; + } + if (!NT_STATUS_IS_OK(status)) { + return status; + } } -#endif - return NT_STATUS_UNSUCCESSFUL; + + if (rename(name-full_name, name2-full_name) == -1) { + return map_nt_error_from_unix(errno); + } + + name-full_name = talloc_steal(name, name2-full_name); + name-original_name = talloc_steal(name, name2-original_name); + + return NT_STATUS_OK; } /*
svn commit: samba r3695 - in branches/SAMBA_4_0/source/build/smb_build: .
Author: jelmer Date: 2004-11-12 02:47:24 + (Fri, 12 Nov 2004) New Revision: 3695 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3695 Log: Add intermediate functions to use when migrating from .m4+.mk to .pm files Added: branches/SAMBA_4_0/source/build/smb_build/direct.pm Modified: branches/SAMBA_4_0/source/build/smb_build/main.pm Changeset: Added: branches/SAMBA_4_0/source/build/smb_build/direct.pm === --- branches/SAMBA_4_0/source/build/smb_build/direct.pm 2004-11-12 02:45:52 UTC (rev 3694) +++ branches/SAMBA_4_0/source/build/smb_build/direct.pm 2004-11-12 02:47:24 UTC (rev 3695) @@ -0,0 +1,63 @@ +# Subs for build system stuff without the .mk files +# Copyright (C) 2004 Jelmer Vernooij [EMAIL PROTECTED] + +use strict; + +our $SMB_BUILD_CTX; + +sub Subsystem($$) +{ + my $name = shift; + my $data = shift; + $data-{NAME} = $name; + %{$SMB_BUILD_CTX-{INPUT}{SUBSYSTEM}{$name}} = %{$data}; +} + +sub Module($$) +{ + my $name = shift; + my $data = shift; + $data-{NAME} = $name; + %{$SMB_BUILD_CTX-{INPUT}{MODULES}{$name}} = %{$data}; +} + +sub ExternalLibrary($$) +{ + my $name = shift; + my $data = shift; + $data-{NAME} = $name; + %{$SMB_BUILD_CTX-{INPUT}{EXT_LIBS}{$name}} = %{$data}; +} + +sub Library($$) +{ + my $name = shift; + my $data = shift; + $data-{NAME} = $name; + %{$SMB_BUILD_CTX-{INPUT}{LIBRARIES}{$name}} = %{$data}; +} + +sub Binary($$) +{ + my $name = shift; + my $data = shift; + $data-{NAME} = $name; + %{$SMB_BUILD_CTX-{INPUT}{BINARIES}{$name}} = %{$data}; +} + +sub DisableModule($) +{ + $SMB_BUILD_CTX-{INPUT}{MODULES}{shift}{ENABLE} = NO; +} + +sub DisableBinary($) +{ + $SMB_BUILD_CTX-{INPUT}{BINARIES}{shift}{ENABLE} = NO; +} + +sub DisableLibrary($) +{ + $SMB_BUILD_CTX-{INPUT}{LIBRARIES}{shift}{ENABLE} = NO; +} + +1; Modified: branches/SAMBA_4_0/source/build/smb_build/main.pm === --- branches/SAMBA_4_0/source/build/smb_build/main.pm 2004-11-12 02:45:52 UTC (rev 3694) +++ branches/SAMBA_4_0/source/build/smb_build/main.pm 2004-11-12 02:47:24 UTC (rev 3695) @@ -12,14 +12,16 @@ use input; use config_mk; use output; +use direct; use dump; use strict; sub smb_build_main($) { - my $SMB_BUILD_CTX = shift; + our $SMB_BUILD_CTX = shift; + input::check($SMB_BUILD_CTX); - + depend::create_depend($SMB_BUILD_CTX); output::create_output($SMB_BUILD_CTX); @@ -30,6 +32,7 @@ dump::dump_ctx($SMB_BUILD_CTX); + return 0; } 1;
svn commit: samba r3696 - in branches/SAMBA_4_0/source/build/smb_build: .
Author: jelmer Date: 2004-11-12 02:57:15 + (Fri, 12 Nov 2004) New Revision: 3696 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3696 Log: Feed directly to perl, rather then creating an intermediate file Modified: branches/SAMBA_4_0/source/build/smb_build/core.m4 Changeset: Modified: branches/SAMBA_4_0/source/build/smb_build/core.m4 === --- branches/SAMBA_4_0/source/build/smb_build/core.m4 2004-11-12 02:47:24 UTC (rev 3695) +++ branches/SAMBA_4_0/source/build/smb_build/core.m4 2004-11-12 02:57:15 UTC (rev 3696) @@ -1,6 +1,7 @@ dnl SMB Build Core System dnl --- dnl Copyright (C) Stefan (metze) Metzmacher 2004 +dnl Copyright (C) Jelmer Vernooij 2004 dnl Released under the GNU GPL dnl --- dnl @@ -18,22 +19,13 @@ AC_DEFUN([_SMB_BUILD_CORE], [ -echo config.status: creating ./config.smb_build.pl - -cat config.smb_build.pl \_SMB_ACEOF -#!$PERL -I$srcdir/build/smb_build -# - +$PERL -I$srcdir/build/smb_build \_SMB_ACEOF use strict; my \$SMB_BUILD_CTX; use main; -_SMB_ACEOF - -echo #line 8 \build/smb_build/core.m4\ config.smb_build.pl -cat config.smb_build.pl \_SMB_ACEOF ### ### First we list all info from configure ### ### @@ -70,6 +62,4 @@ _SMB_ACEOF -$PERL ./config.smb_build.pl || exit $? - ])
svn commit: samba r3697 - in branches/SAMBA_3_0/source/include: .
Author: jerry Date: 2004-11-12 03:36:15 + (Fri, 12 Nov 2004) New Revision: 3697 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3697 Log: BUG 2027: fix multiple declaration of MD5_CTX (do we really care about DOS compilers?). Will watch build farm though. Modified: branches/SAMBA_3_0/source/include/md5.h Changeset: Modified: branches/SAMBA_3_0/source/include/md5.h === --- branches/SAMBA_3_0/source/include/md5.h 2004-11-12 02:57:15 UTC (rev 3696) +++ branches/SAMBA_3_0/source/include/md5.h 2004-11-12 03:36:15 UTC (rev 3697) @@ -16,9 +16,4 @@ unsigned len); void MD5Final(unsigned char digest[16], struct MD5Context *context); -/* - * This is needed to make RSAREF happy on some MS-DOS compilers. - */ -typedef struct MD5Context MD5_CTX; - #endif /* !MD5_H */
svn commit: samba r3698 - in branches/SAMBA_4_0/source/script/tests: .
Author: tridge Date: 2004-11-12 03:38:47 + (Fri, 12 Nov 2004) New Revision: 3698 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=3698 Log: mark RAW-SFILEINFO as working Modified: branches/SAMBA_4_0/source/script/tests/test_posix.sh Changeset: Modified: branches/SAMBA_4_0/source/script/tests/test_posix.sh === --- branches/SAMBA_4_0/source/script/tests/test_posix.sh2004-11-12 03:36:15 UTC (rev 3697) +++ branches/SAMBA_4_0/source/script/tests/test_posix.sh2004-11-12 03:38:47 UTC (rev 3698) @@ -38,13 +38,13 @@ tests=$tests BASE-DELETE BASE-PROPERTIES BASE-MANGLE tests=$tests BASE-CHKPATH BASE-SECLEAK BASE-TRANS2 tests=$tests BASE-NTDENY1 BASE-NTDENY2 BASE-RENAME BASE-OPENATTR -tests=$tests RAW-QFSINFO RAW-QFILEINFO RAW-SFILEINFO-BUG +tests=$tests RAW-QFSINFO RAW-QFILEINFO RAW-SFILEINFO-BUG RAW-SFILEINFO tests=$tests RAW-LOCK RAW-MKDIR RAW-SEEK RAW-CONTEXT RAW-MUX RAW-OPEN tests=$tests RAW-UNLINK RAW-READ RAW-CLOSE RAW-IOCTL RAW-SEARCH RAW-CHKPATH tests=$tests LOCAL-ICONV LOCAL-TALLOC LOCAL-MESSAGING LOCAL-BINDING LOCAL-IDTREE soon=BASE-CHARSET -soon=$soon RAW-SFILEINFO RAW-OPLOCK RAW-NOTIFY +soon=$soon RAW-OPLOCK RAW-NOTIFY soon=$soon RAW-WRITE RAW-RENAME for t in $tests; do