[Samba] multiple names
Is it possible to make a samba (3) server answering with multiple netbios names? Luca -- Luca Ferrari, [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ldap machine suffix fixed?
Jim C. wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Did ldap machine suffix ever get fixed so that it can be in a sperate container from ldap user suffix? Is there any problem to be fix on samba side? I've been using separate container for machine without any problem ( almost 8 months now) -- --beast -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ldap machine suffix fixed?
Beast wrote: Jim C. wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Did ldap machine suffix ever get fixed so that it can be in a sperate container from ldap user suffix? Is there any problem to be fix on samba side? I've been using separate container for machine without any problem ( almost 8 months now) Yes, there was a problem, and maybe still is. You are using separate containers for users and machines, because you probably search for them in the whole LDAP tree. On systems with lots of machines and users this can lead to a bottleneck (searching for machines first in users, then in machines etc., instead of in machines only, and in users only if looking for users). Tomek -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Participation on Samba lists
Regardless of what is going on this is not right in my opinion. So we're going to ban Luke from posting to the Samba Lists for three months There must be another way to work things out. Open to suggestions. We've been trying and they haven't been working out. This was the action of last resort and we regret having to resort to it. But we ran out of options. This has been going on for a long time. My suggestion is, you lift the ban. It just doesn't sound right. It is censorship. We do tolerate all kinds of trolls who quote a lengthy letter for no reason other than to approve of its content, so what's so disruptive in Luke's letter? I personally tried to read Luke's letter but gave up on issues of style, terseness and casing. I'd rather Luke had contributed some new code instead. But banning him is not right. As another suggestion, why don't you create a separate samba mail list samba-politics and advise a contributor who doesn't stick to samba-user problems that he/she/it is off-topic? I don't have a problem to skip a posting I'm not interested in. I do have a problem, if someone does it for me. Cheers Dragan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ldap machine suffix fixed?
Did ldap machine suffix ever get fixed so that it can be in a sperate container from ldap user suffix? Is there any problem to be fix on samba side? I've been using separate container for machine without any problem ( almost 8 months now) Same, always have, never had this problem. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ldap machine suffix fixed?
Did ldap machine suffix ever get fixed so that it can be in a sperate container from ldap user suffix? Is there any problem to be fix on samba side? I've been using separate container for machine without any problem ( almost 8 months now) Yes, there was a problem, and maybe still is. You are using separate containers for users and machines, because you probably search for them in the whole LDAP tree. Yes. I did not specify filter on pam/nss_ldap. However the limitation is coming from nss_ldap not samba. Ah, I can see that. We met this limitation a long time ago (NSS only supports a single search base per object type, which actually seems reasonable. We simply structured the Dit in a different way - dc.. dc..,ou=SAM dc..,ou=SAM,ou=Groups dc..,ou=SAM,ou=Entities dc..,ou=SAM,ou=Entities,ou=People dc..,ou=SAM,ou=Entities,ou=System Accounts dc..,ou=SAM,ou=ipServices etc... NSS's account search base can be set to dc..,ou=SAM,ou=Entities for account objects and will see both; applications like Samba can be split. There is no need to search the 'whole LDAP tree', as that would be bad since it also contains things like - dc..,ou=Customers dc..,ou=Access Control etc... - and may be huge. If you insist on having a traditional dc..,ou=People that is simple enough with a subordinate back-ldap backend that rewrites ou=SAM,ou=Entities,ou=People to ou=People DN's. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.x in ADS mode in a Windows Krb AD forest domain, does it work?
Hi, With some luck someone on this list can tell me if what I'm trying to do is possible with Samba 3, and if I'm really lucky how to get it working. As I'm pretty stuck at the moment and have hit the limits of my knowledge. At present in my environment we are running numerous Samba 2 servers in server and domain level security (I know server level security is a bad idea), and everything works fine. However as time moves on we are looking to migrate our servers off Samba 2 and onto Samba 3 and switch all servers over to ads mode. However during testing (on Debian and HP-UX machines) we appear to have hit a problem that I can't resolve, namely I can't connect to any shares, as the servers don't appear to recognize the login domain. For this to make any sense I will attempt to explain our environment. At present we have an old legacy domain which is all based around NT trusts, and a new domain which uses Kerberos AD forest trusts. Now in our new domain we have central domain, with other sub domains hanging off it for users (one per geography) and organisational units (again one per OU unit). Now the way the domain has been configured is that user accounts live in the the user domains, and machine accounts live in the organisational units domains, all pretty simple. However when connecting to a Samba 3 host configured in ads mode that has successfully joined the OU domain we hit a problem that the server doesn't seem to recognise the login domain, and remaps the domain to the local OU and hence the login fails, as this logfile extract shows. [2004/12/16 11:02:27, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [EMAIL PROTECTED] with the new password interface [2004/12/16 11:02:27, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EMAIL PROTECTED] [2004/12/16 11:02:27, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/16 11:02:27, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/12/16 11:02:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/12/16 11:02:28, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/12/16 11:02:28, 2] auth/auth.c:check_ntlm_password(312) check_ntlm_password: Authentication for user [ricc] - [ricc] FAILED with err or NT_STATUS_ACCESS_DENIED However if I try and connect to an admin account that lives in the OUDOMAIN, everything works as Samba appears to recognize the domain as valid. As an additional test, I have tried to connect to the share using an old account in the Legacy domain which uses the old NTLM NT trust mechanisms, and this appears to work as the Samba server recognizes the domain, and hence leaves the domain prefix alone, as this logfile extract shows. [2004/12/16 11:26:47, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [EMAIL PROTECTED] RDWELL-R-3] with the new password interface [2004/12/16 11:26:47, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [EMAIL PROTECTED] [2004/12/16 11:26:47, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/12/16 11:26:47, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 So I guess my question is: Has anyone else managed to get samba to work in this kind of domain? or alternatively does anyone know if Samba 3 supports this kind of domain structure using Forest AD trusts yet? Thanks in advance, for any help you can provide, as this has been driving me (not so) slowly nuts. Rich Cardwell -- smb.conf for testhosts is as follows: #=== Global Settings === [global] ## Browsing/Identification ### # Change this to the workgroup/NT-domain name your Samba server will part of workgroup = OUDOMAIN.HPL.HP.COM debug level = 4 # server string is the equivalent of the NT Description field server string = %L server (Samba %v) # Windows Internet Name Serving Support Section: # WINS Support - Tells the NMBD component of Samba to enable its WINS Server wins support = no # WINS Server - Tells the NMBD components of Samba to be a WINS Client # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both wins server = XX.XX.XX.net # This will prevent nmbd to search for NetBIOS names through DNS. dns proxy = no # What naming service and in what order should we use to resolve host names # to IP addresses ; name resolve order = lmhosts host wins bcast Debugging/Accounting # This tells Samba to use a separate log file for each machine # that connects log file = /var/log/samba/log.%m # Put a capping on the size of the log files (in Kb). max log size = 1000 # If you want
[Samba] CAN-2004-1154 : Integer overflow could lead to remote code execution in Samba 2.x, 3.0.x = 3.0.9
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 == == == Subject: Possible remote code execution == CVE ID#: CAN-2004-1154 == == Versions:Samba 2.x 3.0.x = 3.0.9 == == Summary: A potential integer overflow when == unmarshalling specific MS-RPC requests == from clients could lead to heap == corruption and remote code execution. == == === Description === Remote exploitation of an integer overflow vulnerability in the smbd daemon included in Samba 2.0.x, Samba 2.2.x, and Samba 3.0.x prior to and including 3.0.9 could allow an attacker to cause controllable heap corruption, leading to execution of arbitrary commands with root privileges. Successful remote exploitation allows an attacker to gain root privileges on a vulnerable system. In order to exploit this vulnerability an attacker must possess credentials that allow access to a share on the Samba server. Unsuccessful exploitation attempts will cause the process serving the request to crash with signal 11, and may leave evidence of an attack in logs. == Patch Availability == A patch for Samba 3.0.9 (samba-3.0.9-CAN-2004-1154.patch) can be downloaded from http://www.samba.org/samba/ftp/patches/security/ The patch has been signed with the Samba Distribution Verification Key (ID F17F9772). = Protecting Unpatched Servers = The Samba Team always encourages users to run the latest stable release as a defense against attacks. However, under certain circumstances it may not be possible to immediately upgrade important installations. In such cases, administrators should read the Server Security documentation found at http://www.samba.org/samba/docs/server_security.html. === Credits === This security issue was reported to Samba developers by iDEFENSE Labs. The vulnerability was discovered by Greg MacManus, iDEFENSE Labs. == == Our Code, Our Bugs, Our Responsibility. == The Samba Team == -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwXzdIR7qMdg1EfYRAvnVAKCgJxELPsRo2oIwBcUq+wKNkjB3BwCgzn5l 3PtHselUE/u/xxC7PRYpxyA= =8JRM -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Running net join from web page
Hi all, i'm trying to make a linux box join a windows domain by calling NET JOIN from php/perl. The join works perfecly when used from the command line. I made a perl script that runs the actual command, set-uid it to root and ran it from php. Then i got this error: [2004/12/16 14:33:24, 0] libsmb/clientgen.c:cli_initialise(251) libsmb based programs must *NOT* be setuid root. How can i make net join run from a webpage/perl setup? Have anybody else tried this? BR and thanks, Thomas. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] two domains
Is it possible to have two domains in one subnet? I have a windows 2000 server and a samba server, but I want Active directory running on both, and I don't want them communicating with each other. Also, does Samba need to have a DNS entry for AD to work? Please please answer me I just want to finish this. Thank you -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [proposal] Samba Software Foundation
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 15 Dec 2004, Luke Kenneth Casson Leighton wrote: | dear samba users and developers, | | i'd like to put to you a proposal for your respectful | consideration: it is an idea that i believe has | strategic merit for the open source community and OS | users as a whole. The possibility of such a foundation to support and promote the Samba community has been discussed and considered in the past. I should point out however, that by his own choice Luke Leighton is no longer an active participant in the Samba development community. Luke and others have created a fork, which is known as Samba-TNG (http://www.samba-tng.org), of the Samba code in October, 2000. Our stance has always been supportive of Luke and the Samba-TNG developers. See http://www.samba.org/samba/tng.html However, given that Luke is no longer a developer on Samba, it is off-topic for him to propose a organizational change to a OSS project with which he is no longer associated. cheers, jerry - - Samba Team Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwKo4IR7qMdg1EfYRAjcIAKDs4Htd+GE1B7HgJ/1hKsx87fuKuwCgxTzX l7FVxIX6UihkskhrIdF2NYc= =W+sG -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Participation on Samba lists
On Thu, Dec 16, 2004 at 08:45:21AM +1100, Steve Simeonidis wrote: Regardless of what is going on this is not right in my opinion. So we're going to ban Luke from posting to the Samba Lists for three months There must be another way to work things out. As a quite long-term member of the Samba Team I've seen many discussions along these lines before. It was a decision not taken lightly, but from my point of view it had to be done. If you have other suggestions, please let us know. Regards, Volker Lendecke Samba Team pgpnDnpeN21Qm.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Running net join from web page
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas Madsen wrote: | Hi all, | | i'm trying to make a linux box join a windows domain by calling NET | JOIN from php/perl. | The join works perfecly when used from the command line. | | I made a perl script that runs the actual command, set-uid it to root | and ran it from php. | Then i got this error: | [2004/12/16 14:33:24, 0] libsmb/clientgen.c:cli_initialise(251) | libsmb based programs must *NOT* be setuid root. | | How can i make net join run from a webpage/perl setup? Have anybody | else tried this? | | BR and thanks, | Thomas. I would use sudo instead of setuid root. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwZeJIR7qMdg1EfYRAqPvAKClqA9wBaQG50klgYaZuzU24vL6XQCdHYlj 32YRgme//AmCUj542DcAPb4= =1r6f -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] mail loop fixed
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 There was a mail loop in the local delivery for this mailing list earlier today. All should be corrected now. Sorry for the noise. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwamFIR7qMdg1EfYRAsktAJ0Ur6+US2KSgwywwbHjIFJJmVRG/ACgp0Tf XLgkixdbLuXDRGSlP5w3s+E= =47uK -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Using samba on two domains
Hello all, We've been using samba version 3.0.4 on RH9 with success for quite a while now for shares on our domain (DOM1). Since this machine will have to be available in the near future in another domain (DOM2) as a webserver, and limited fileserver, another network interface has been added for the NIC. When browsing the shares from a WIN98SE computer in DOM2, we are able to see the computer, but when wanting to list the shares, we're prompted for a password. When entering the correct password, we still get Invalid password. When doing the same on the same WIN98SE computer in DOM1, it is successful. The computer has DSClient for windows 98 installed. The error logs for the connection from DOM2 gives the following: smbd/service.c: make_connection(706) make_connection: refusing to connect with no session setup We've tried the following to remedy the problem, without success: - in smb.conf, add the parameter interfaces, listing the two valid ip-ranges and subnetmasks. - set the windows registry key to send plain text passwords - set DOM2 as an accepted host - tried both encrypt password = yes and no - We even tried mapping bad password to log in as guest account Alas, none of these seem to work. Has anyone had issues with this before? I'd appreciate some pointers. Thanks in advance, Niki Van Strydonck Here's the smb.conf used [global] workgroup = DOM1 server string = server9 printcap name = /etc/printcap load printers = yes printing = cups log file = /var/log/samba/%m.log max log size = 0 pam password change = yes obey pam restrictions = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 username map = /etc/samba/smbusers guest ok = yes encrypt passwords = yes dns proxy = no [homes] comment = Home Directories browseable = no writeable = yes valid users = %S create mode = 0664 directory mode = 0775 [printers] comment = All Printers path = /var/spool/samba browseable = no printable = yes [test] comment = test path = /winshare/test writeable = yes -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Mandatory Profiles Problem...
Hello, I'm trying to use mandatory Profiles. Everything works fine - but Outlook and for example Visual Studio don't. As soon as I rename the NTUSER.DAT to NTuser.MAN - restart that Computer - and launch OUTLOOK it says that it can't find the outlook.pst in ...\local settings\... (which is a hidden folder) I would like to keep the .pst file on the PROFILE folder! Does anybody know a solution to this !!! Greetings Olli -- Bildungs-Center der AK Oliver Fink Schießstätte 16 A-6800 Feldkirch Tel. ++43/(0)5522-3551-16 Fax. ++43/(0)5522-3551-17 e-mail: mailto:[EMAIL PROTECTED] -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Way to salvage profiles after domain rejoin?
Somehow my workstations lost their connection to the domain recently. I can rejoin them, but when I leave the domain and rejoin the previous user profiles are lost. Well, the data is still on the system, but all pre-rejoin domain profiles are listed as account unknown in the profile manager. I know I can probably use the Files and Settings Transfer Wizard on the XP machines as long as I do it before the rejoin, but there has got to be a way to preserve these profiles without resorting to that time-consuming procedure. Plus, I've got a healthy mix of XP and 2k boxes, and the FSTW isn't an option for the 2k machines. My users have lots of loca data, much of which can be copied after the fact (My Documents, etc) but things like Outlook pst files and whatnot are a bit more difficult. I don't want to spend an hour per machine importing pst files and copying data around. If it were only a few machines I wouldn't care, but it's more than a few. :( Does anyone have any ideas? Right now the workstations are functioning fine and are able to log in (probably with cached credentials) and work OK, but I've lost the abilty to remotely manage them and some other administrative software is no longer functioning correctly, such as Sophos Enterprise Manager that lets me monitor the anti-virus software status on the workstations. I believe this is related to the server change I made a few weeks ago. Some of you may recall that I had serious speed issues and I blew away a lot of tdb files in the process of trying to fix it. Things seemed fine for a while (again, I'm assuming things were cached) but now I'm having trouble. Thanks for any ideas, --J(K) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Way to salvage profiles after domain rejoin?
that I had serious speed issues and I blew away a lot of tdb files in the process of trying to fix it. Things seemed fine for a while (again, Sounds like you also lost your SID. Do you have any backup of your old files that you could load up, maybe on a test box, and salvage your SID from? You can always reset the SID on your domain, but you have to know what the old one was to do it. You could also try to determine it from your registry. In my machine, under HKEY_USERS I have a tree named: S-1-5-21-112718084-1284083569-2990761952-5532 which is my current user SID. The part before the 5532 (my user RID) is the domain portion. If you see two different sets (of similar length, the really short S- numbers are builtins), compare that to the result of net getlocalsid The one that doesn't match is your old sid. Replace the current one with the old one and see if things aren't better. I'm assuming things were cached) but now I'm having trouble. Thanks for any ideas, --J(K) -- -- Paul GiengerOffice: 701-281-1884 Applied Engineering Inc. Systems Architect Fax:701-281-1322 URL: www.ae-solutions.com mailto: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] two domains
eric wrote: Is it possible to have two domains in one subnet? Yes I have a windows 2000 server and a samba server, but I want Active directory running on both, You can't run Active Directory on *nix machines. Samba can only be an AD Domain Member server. and I don't want them communicating with each other. So build a Samba PDC and don't do any AD stuff. Also, does Samba need to have a DNS entry for AD to work? Yes, but you don't want them communicating so why ask. Please please answer me I just want to finish this. Finish what? Thank you -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] loosing connections after upgrade to 3.09
I had 3.05 running fine with an NT4 domain. I am using SERVER authentication with the machines and users. After the upgrade some of my users are no longer recognized ...or rather they are part of a trusted domain (NT4 - NT4 trust)and they do not get authenticated properlyso they can no longer map their home directory. Also, some people are loosing their mapping to their home directories... it is easy to re-establish them but they get confused The users log on and then within minutes their connection is dropped. This seems to be primarily with XP Pro boxes. The time out is set to 60 on samba server. It doesn't even show up as a disconnected network share (usually with a red X), the share is completely gone and must be recreated/established. I have 3 almost identical boxes running RedHat 9 (ugh...only supported OS for my IDE Raid controller) I compiled the 3.09 from a src rpm just because of RedHat's funky file arrangement. I have used samba for a number of years now with no really complicated setups and therefore I have never tried winbind. I am thinking of migrating to a winbind setup but .I have to read/research the issues first Anyway 1. Users having their connections dropped in XP (sp1 only). 2. Users part of a trusted domain not getting authenticated by Samba. (they can log in normally)...so no Home directory. Any help is appreciatedlet me know if I forgot to mention anything that would be helpful. Thanks, Michael J Barber WPTZ/WNNE Computer Services Administrator p 518-561- x563 m 518-572-6639 f 518-561-5940 I had 3.05 running fine with an NT4 domain. I am using SERVER authentication with the machines and users. After the upgrade some of my users are no longer recognized ...or rather they are part of a trusted domain (NT4 - NT4 trust)and they do not get authenticated properlyso they can no longer map their home directory. Also, some people are loosing their mapping to their home directories... it is easy to re-establish them but they get confused The users log on and then within minutes their connection is dropped. This seems to be primarily with XP Pro boxes. The time out is set to 60 on samba server. It doesn't even show up as a disconnected network share (usually with a red X), the share is completely gone and must be recreated/established. I have 3 almost identical boxes running RedHat 9 (ugh...only supported OS for my IDE Raid controller) I compiled the 3.09 from a src rpm just because of RedHat's funky file arrangement. I have used samba for a number of years now with no really complicated setups and therefore I have never tried winbind. I am thinking of migrating to a winbind setup but .I have to read/research the issues first Anyway 1. Users having their connections dropped in XP (sp1 only). 2. Users part of a trusted domain not getting authenticated by Samba. (they can log in normally)...so no Home directory. Any help is appreciatedlet me know if I forgot to mention anything that would be helpful. Thanks, Michael J Barber WPTZ/WNNE Computer Services Administrator p 518-561- x563 m 518-572-6639 f 518-561-5940 = This e-mail message is intended only for the personal use of the recipient(s) named above. If you are not an intended recipient, you may not review, copy or distribute this message. If you have received this communication in error, please notify the Hearst Information Services HelpDesk ([EMAIL PROTECTED]) immediately by e-mail and delete the original message. = -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Way to salvage profiles after domain rejoin?
Paul Gienger mailto:[EMAIL PROTECTED] wrote: Sounds like you also lost your SID. Do you have any backup of your old files that you could load up, maybe on a test box, and salvage your SID from? You can always reset the SID on your domain, but you have to know what the old one was to do it. I have determined what my old SID is, but how, exactly, do I go about resetting the SID to the old value? I've been googling for a bit, but I haven't found anything yet. Thank you very much, Paul, BTW. :) --J(K) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Way to salvage profiles after domain rejoin?
On Thursday 16 December 2004 11:26, Jason Balicki wrote: I have determined what my old SID is, but how, exactly, do I go about resetting the SID to the old value? I've been googling for a bit, but I haven't found anything yet. net setlocalsid old_sid Misty Thank you very much, Paul, BTW. :) --J(K) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Way to salvage profiles after domain rejoin?
Misty Stanley-Jones wrote: net setlocalsid old_sid Thanks Misty. Is this dangerous to do on a running system? --J(K) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Participation on Samba lists
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dragan Krnic wrote: | My suggestion is, you lift the ban. It just doesn't | sound right. It is censorship. We do tolerate all kinds | of trolls who quote a lengthy letter for no reason other | than to approve of its content, so what's so disruptive | in Luke's letter? Dragan, This is not about Luke's proposal. If you re-read the letter again you will see many hints of his previous comments. Trolls are no big deal. And a good troll can even be fun. But lies, threats, and abusive messages both on-list and off are not the active of a responsible member of a community. This is not a moderated list, not do I ever imagine it will be. But we do out best to make it a productive list[s]. Therefore we do perform certain content filtering for SPAM. Luke's messages over the past four years always degrade into SPAM. There is much more history in this decision than one post to a mailing list. I encourage anyone who wants to understand more background to search the mailing list archives which are linked from http://www.samba.org/samba/archives.html. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwcALIR7qMdg1EfYRAhxhAKCTgBlG5FhgTQ7rDMYI3kcweIAcCACcCDiQ yFA4igvnkgfcOCc6g/1+1eE= =/aaD -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Cannot share MSAccess DB after upgrade 3.0.5 to 3.0.8
Well, it turns out that the smbstatus/Access column/0x3 condition is not the cause of the problem. (I still don't understand the significance of that column.) A simple upgrade from 3.0.5 to 3.0.8 broke file sharing on a MSAccess 2k database (Win2k and WinXP clients.) There are Paradox databases on the same file-share that are working fine. The log files show no errors. I'm about to try increasing the debug level, but can anyone give me a clue in the meantime? Thanks, Lane Beneke --- Lane Beneke wrote: This is really strange. The samba server in question is a domain member server on a Windows NT 4.0 Domain network. It runs Gentoo 2004.3 with a 2.4.24 kernel. The Gentoo server was upgraded from Samba 3.0.5 to 3.0.8 last night. After the upgrade, the server had to be re-joined to the domain. After that, everything appeared to be working. This morning we found that the MSAccess database files can no longer be shared if the database users open the MDB file containing the tables. The first user in can use the database, and databases that are externally linked to the database in question can share the data just fine. (Weirdness) A quick look at smbstatus output reveals that no oplocks are placed on the MDB or the LDB files. However, the Access column of the smbstatus output shows 0x2019f for all files except the MDB files, which show 0x3. Does anyone know what this means? 32748 DENY_NONE 0x3 RDWR NONE /samba/common/smc.mdb 32748 DENY_NONE 0x2019f RDWR NONE /samba/common/smc.ldb Help! Lane Beneke __ Do you Yahoo!? Yahoo! Mail - Easier than ever with enhanced search. Learn more. http://info.mail.yahoo.com/mail_250 __ Do you Yahoo!? Take Yahoo! Mail with you! Get it on your mobile phone. http://mobile.yahoo.com/maildemo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Very slow network after Samba3 upgrade with 2k clients.
anyone having, had, or even have any thoughts on the issue described below? its killing me The short description of the problem is: using direct to server UNC type paths, we see 'normal' speeds. Going threw a DFS (re)director, we see very bad performance from any machine running 3.0.*, but not 2.2.3a. We make heavy use of DFS. This service is on a machine named N. This is running SAMBA3 code. The PDC services are handled by Samba3 with an LDAP backend. This was handled by old TNG code up until a week ago, we upgraded to samba3 hoping it might resolve these issues, it has not, however I'm glad the upgrade happened anyway. Clients are over 98% Win2k clients, with all current updates. All servers are connected via gigabit to a Foundry 1500 switch. All clients are connected via 100 or 1000 depending on the department. No jumbo frame enabled NICs are operating in the network. I'm positive its a protocol issue as at the same time the 4 meg xfer is taking 2 minutes to complete, I can pull another large test file at wire speed using almost any other protocol, NFS, FTP, SCP to name a few. Some folks complain about the 'N' drive going down, then windows wants to 'sync' files back to it... this also only started happening after the samba3 upgrades. This never happens on manually mounted (to a drive letter) shares. I'd be happy to provide further details and facilitate any requests which may help resolve this issue... thanks! Time to read \\odin\odin1\Development\writetest\v041_bld_tex_mt10_TEST.ma: 1.2963134 Testing UNC style path writes Time to write \\ba\ba1\j_test\write_test.ma: 11.687362 Time to write \\barney\barney1\j_test\write_test.ma: 10.312638 Time to write \\betty\betty1\j_test\write_test.ma: 10.562362 Time to write \\dino\dino1\j_test\write_test.ma: 11.375 Time to write \\echo\echo\j_test\write_test.ma: 7.25 Time to write \\fred\fred1\j_test\write_test.ma: 6.6086758 Time to write \\hannibal\hannibal1\j_test\write_test.ma: 6.75 Time to write \\murdock\murdock1\j_test\write_test.ma: 6.54700016975 Time to write \\nova\nova1\j_test\write_test.ma: 9.93699979782 Time to write \\odin\odin1\j_test\write_test.ma: 10.6560001373 Time to write \\pebbles\pebbles1\j_test\write_test.ma: 10.608676 Time to write \\tordist\porky1\j_test\write_test.ma: 13.0309998989 Time to write \\eng\thor1\j_test\write_test.ma: 10.828687 Time to write \\bonnie\v-rend\j_test\write_test.ma: 6.8286866 Time to write \\repo\v-comp\j_test\write_test.ma: 6.78099989891 Testing N: style path writes Time to write N:/ba1/j_test/write_test.ma: 67.8270001411 Time to write N:/barney1/j_test/write_test.ma: 75.934428 Time to write N:/betty1/j_test/write_test.ma: 10.5779998302 Time to write N:/dino1/j_test/write_test.ma: 11.453687 Time to write N:/echo/j_test/write_test.ma: 6.7336758 Time to write N:/fred1/j_test/write_test.ma: 61.4376376 Time to write N:/hannibal1/j_test/write_test.ma: 6.4210381 Time to write N:/murdock1/j_test/write_test.ma: 7.60900020599 Time to write N:/nova1/j_test/write_test.ma: 71.342076 Time to write N:/odin1/j_test/write_test.ma: 22.203687 Time to write N:/pebbles1/j_test/write_test.ma: 39.092352 Time to write N:/tordist/j_test/write_test.ma: 69.63839 Time to write N:/eng/j_test/write_test.ma: 71.9819998741 Time to write N:/bonnie/j_test/write_test.ma: 6.95299983025 Time to write N:/repo/j_test/write_test.ma: 39.0140001774 [EMAIL PROTECTED] writetest]# /opt/thunderbird/thunderbird all the slow servers are running SAMBA3 code. all the 'normal' servers are running samba 2.2.x code, mostly 2.2.3a all servers are linux and IRIX, same results on both no mater the SAMBA major version. thanks for your time, greg -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] RPMs for SuSE Linux (was: Samba 3.0.10 Available for Download)
On Thu, Dec 16, 2004 at 06:15:25AM -0600, Gerald Carter wrote: [snip] Binary packages are available at http://download.samba.org/samba/ftp/Binary_Packages/ RPM packages of Samba 3.0.10 for SuSE Linux are available at ftp://ftp.SuSE.com/pub/projects/samba/3.0/ The same packages are also available at http://download.Samba.org/samba/ftp/Binary_Packages/SuSE/3.0/ Please use a mirror close to your site. A list of Samba.org mirrors is available at http://Samba.org/ Also SuSE provides a bunch of mirrors. Lists are available for int http://www.SuSE.com/en/private/download/ftp/int_mirrors.html germany http://www.SuSE.com/de/private/download/ftp/inland.html Currently there are 3.0.10 packages for SuSE Linux (x86 and x86_64) 8.1, 9.0, 9.1, 9.2, UnitedLinux 1/ SLES 8, and SLES 9. Packages for 8.2 are only available for i386 as no SuSE Linux product for x86_64 was available for this release. If you encounter any problem with these packages please don't blame the Samba Team. Instead file a bug at https://bugzilla.Samba.org/ pick product Samba 3.0, then select 'component' Packaging and set 'assign to' to lmuelle at suse dot de. Have a lot of fun... Lars -- Lars MLLER [la(r)z ml] SuSE Linux Products GmbH, Maxfeldstrae 5, 90409 Nrnberg, Germany pgpLOCWX637RB.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] problem with win 98 clients
I'm from Mexico, I installed a samba server on a linux debian 2.4.26-1-386 and I had configured a print server with lpd, it was working good, I have win 98 and XP clients, but when I updated samba to 3.0.9-1 version my win 98 clients can't print, when I send a print job from MS Word, MS Word doesn't respond, sometimes the priint job is printed, but the application ddoesn't respond anymore. I changed lpd for CUPS 1.1.20final, and happend the same. thank you. -- by Kino Dias -- by Kino Dias -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Providing AD auth/access to only certain groups
My goal here is to share a directory that people ftp files to. [global] workgroup = TELEVOX_1 netbios name = samba server string = Debian Mass Storage Device security = domain realm = TELEVOX_1.LOCAL username map = /etc/samba/smbusers #password server = * encrypt passwords = yes interfaces = 192.168.169.31 localmaster = no winbind separator = + winbind cache time = 10 idmap uid = 1-2 idmap gid = 1-2 winbind enum users = yes winbind enum groups = yes winbind use default domain = yes winbind nested groups = Yes template homedir = /home/%D/%U template shell = /bin/bash [ftp] comment = Mass Storage path = /home/ftp valid users = @TELEVOX_1+TECHSUPPORT, @TECHSUPPORT, @Domain Admins admin users = @TELEVOX_1+seanb, @seanb, @Domain Admins, seanb read list = @TELEVOX_1+Domain Users, @Domain Users I'm getting this in log.winbindd: [2004/12/16 12:11:57, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(307) name 'seanb' is not a local or domain group: 1 [2004/12/16 12:12:44, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(307) name 'seanb' is not a local or domain group: 1 [2004/12/16 12:12:44, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(307) name 'seanb' is not a local or domain group: 1 My questions: Does the @ in the user lists (such as @Televox_1+techsupport) suggest it's a group? Should I not use that with individual user names? You can completely ignore/scratch all of this if you could simply suggest to me how to provide full access to certain group(s), read only to other group(s), and administrative to myself. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Providing AD auth/access to only certain groups
Just as a follow up with more information I should have provided: I'm deploying 6 servers, be it windows or linux (im trying to get this working so it can be linux) for 6 departments here in this company. Smbusers looks like this: root = seanb administrator I have POSIX acl's enabled on this kernel, from what I've read, im not sure that it's required or not. Any help here is appreciated. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sean Barmettler Sent: Thursday, December 16, 2004 12:22 PM To: [EMAIL PROTECTED] Subject: [Samba] Providing AD auth/access to only certain groups My goal here is to share a directory that people ftp files to. [global] workgroup = TELEVOX_1 netbios name = samba server string = Debian Mass Storage Device security = domain realm = TELEVOX_1.LOCAL username map = /etc/samba/smbusers #password server = * encrypt passwords = yes interfaces = 192.168.169.31 localmaster = no winbind separator = + winbind cache time = 10 idmap uid = 1-2 idmap gid = 1-2 winbind enum users = yes winbind enum groups = yes winbind use default domain = yes winbind nested groups = Yes template homedir = /home/%D/%U template shell = /bin/bash [ftp] comment = Mass Storage path = /home/ftp valid users = @TELEVOX_1+TECHSUPPORT, @TECHSUPPORT, @Domain Admins admin users = @TELEVOX_1+seanb, @seanb, @Domain Admins, seanb read list = @TELEVOX_1+Domain Users, @Domain Users I'm getting this in log.winbindd: [2004/12/16 12:11:57, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(307) name 'seanb' is not a local or domain group: 1 [2004/12/16 12:12:44, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(307) name 'seanb' is not a local or domain group: 1 [2004/12/16 12:12:44, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(307) name 'seanb' is not a local or domain group: 1 My questions: Does the @ in the user lists (such as @Televox_1+techsupport) suggest it's a group? Should I not use that with individual user names? You can completely ignore/scratch all of this if you could simply suggest to me how to provide full access to certain group(s), read only to other group(s), and administrative to myself. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] ldap search timed out
I've got a Samba 3.0.7 server pointed at an OpenLDAP 2.2.6 server for authentication. I'm not doing anything with domains and not using TLS. Most of the time everything works fine. However, occasionally users can't connect and this shows up in log.smbd [2004/12/16 14:52:41, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 1 try! [2004/12/16 14:52:42, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 2 try! [2004/12/16 14:52:43, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 3 try! [2004/12/16 14:52:44, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 4 try! [2004/12/16 14:52:45, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 5 try! [2004/12/16 14:52:46, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 6 try! [2004/12/16 14:52:47, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 7 try! [2004/12/16 14:52:48, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 8 try! [2004/12/16 14:52:49, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 9 try! [2004/12/16 14:52:50, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 10 try! [2004/12/16 14:52:51, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 11 try! [2004/12/16 14:52:52, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 12 try! [2004/12/16 14:52:53, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 13 try! [2004/12/16 14:52:54, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 14 try! [2004/12/16 14:52:55, 1] lib/smbldap.c:another_ldap_try(936) Connection to LDAP server failed for the 15 try! [2004/12/16 14:52:57, 0] lib/smbldap.c:smbldap_search_suffix(1101) smbldap_search_suffix: Problem during the LDAP search: (unknown) (Timed out) While this is happening I can use ldapsearch to connect to the ldap server from the Samba server, authenticate with the same user Samba is using, and perform a successfull search. Any ideas where this Timed out is coming from? Jason Joines = -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Changing the password server in smb.conf
Hi, Is it enough to run service smb reload when changing the password server setting in smb.conf or is a complete restart required? -John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] [proposal] Samba Software Foundation
Skipped content of type multipart/signed-- next part -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba mike, hi, not entirely sure what happened here but the samba technical archives appear to be having difficulties displaying a message that i was able to access from someone else's browser, yesterday. from memory, if i recall correctly, you mentioned something about me giving samba a fait accompli - is that right? i'm so so sorry if i have the wrong end of the stick on this one and it wasn't you that said that. i really do have to point out that if you _did_ say that, it could not be further from the truth. as gerry rightly points out, i have no authority, and never did - as do none of us. all i can do is make suggestions: this _particular_ suggestion has an added incentive for it to be accepted - that _if_ it is accepted, the foundation receives lots of code. that's the carrot - putting it bluntly. the stick is that if the members that i assume would be there break the conditions of the charter - they lose what they were given. now, i've been thinking a bit more since i sent that message. on the basis that should the directors break the conditions of the charter, they'd likely get a bit more than a slapped wrist - on reflection, the stick conditions that i initially proposed _probably_ aren't even necessary. especially as these charters (e.g. the ASF's) are legally binding (usually in delaware :) ... what could be worse for [the proposed] SSF board members than to break the conditions of the charter that they are there to uphold? sincerely, l. ___ Win a castle for NYE with your mates and Yahoo! Messenger http://uk.messenger.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] support his husband with the pain
what about their sickness H*Y*D_R.0'C^o^D.O*N.E 30/325 m^g 3o PiLLS 109.oo 6O PIL|S 189.oo 90 PIL|S 259.00 36O P|llS 739.OO 0.r.d.e.r quickly : http://squander.medzstoreonline.com/s/?acc5 Same Day Sh1pp1ng To Cease : http://argillaceous.medzstoreonline.com/rms.html your wachovia account Charlie Tatum hrpersonals Al-Bhatti Merchandising Company (Pvt.) Limited, Pattoki (55300), Pakistan Phone: 441-111-6417 Mobile: 492-777-1264 Email: [EMAIL PROTECTED] THIS IS AN AUTO-GENERATED MESSAGE - PLEASE DO NOT REPLY TO THIS MESSAGE This freeware is a 14 hour trial software NOTES: The contents of this e-mail is for your exclusive use and should not be forfeit cougar immeasurable torture nasa Time: Fri, 17 Dec 2004 00:50:22 +0200 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Love is Golden: all ideas have and always will be.
I am delighted to be able to tell you that I have taken a decision to relinquish Copyright ownership of all Samba-related code that I have ever written. I would like to take this as an opportunity to formally request the Samba Team to reopen the case for forming an ASF-like Samba Software Foundation. As you are no doubt aware, I started work on NT Domain analysis in 1997, with Paul Ashton. We succeeded! Since then, the transformation, acceptance and usefulness of that knowledge into Open Source Projects has met with limited success, and there are many many reasons for that. It is my sincere belief that if the research had taken place under an umbrella organisation such as the ASF (or similar), that the utilisation of the initial research would have borne far richer fruit. There are many definitions of what is a Successful Open Source project. number of lines of code. number of users. number of developers. useability. conformance to standards. ... Not many Open Source projects measure success by the look on manager's faces when they are told they have another choice other than windows. In the case of Windows compatibility, the issues are unbelievably layered, complex, many-hydra-headed and many-headed-hydrad - and Microsoft would not have it any other way. As an example, in order for Mono, the Open Source .NET clone, to support authenticating to NT Domains, if they were to start from scratch i estimate that they would need to reverse-engineer nearly HALF A MILLION lines of code. Microsoft has businesses by balls that businesses (and U.S Depts) didn't and don't even know they'd sold you. Now, it is very very unfortunate that, at the time I was working on Samba, i had - and to some extent still have - very little understanding of social interaction. You can research that to your heart's content: it's not pretty reading, and there is no benefit to relaying it here. The _consequences_ however _are_ worthwhile iterating here. The consequences are that the acceptance of various ideas that would have opened up the Microsoft-dominated arena to users and developers were... stalled. Key strategic opportunities to put in special outsourcing interfaces were lost. That may require some explanation: Microsoft's approach is to layer data within other layers - effectively and literally to build on last year's success with yet more success - both in technical terms _and_ in strategic lock-in terms. By analysing their network protocols and implementing them, it becomes possible to interact at higher and higher levels, and for yet more Open Source (and proprietary!) projects to Interoperate. Where i failed was that at a key interface point - known as the NT Named Pipes interface (see Microsoft's MSDN CreateNamedPipe API) i could not persuade the samba team to allow other projects to Interoperate at this level. You see the similarity? Namely that your options were to use Microsoft with all its warts and risks but full functionality and closed-source proprietary lock-in, or to use a more secure, robust, worthy - but limited and _equally_ locked in open source clone! You only have to look at the Wine Team's attempt to reimplement the Network Neighbourhood due to 1) bugs in the Windows NetBIOS stack 2) License incompatibilities between Samba and Wine to recognise that Samba's design is in some ways _more_ restrictive than using Windows! At least on Windows you _can_ write your own Project - Open Source or Proprietary - using the Win32 CreateNamedPipe API or the Win32 NetBIOS API, whereas with Samba you must take the source code and modify it or you must reinvent it (10 to 20 man-years of work, if you're lucky). I am reiterating a point that I have made many times before, so I will stop here. In a recent post to the Samba Mailing lists, I offered the Samba Team an incentive to initiate a Samba Software Foundation. It looks like the offer was rejected. So, as a gesture of goodwill, in order to demonstrate that i really AM serious about how important I believe it is that an SSF exists, I really really AM relinquishing all copyright of all Samba-related source code that i have ever written, and am placing all that code into the Public Domain. Specifically, but not limited to, that includes the code in samba which made its way into nmbd (dating right back to 1.9.15.p6 and before, and also including the nmbd_multiworkgroup version), all modifications of smbd that made their way into versions of 1.9.15 and up, all versions known as samba_ntdom _and_ Samba TNG, the code that i cut/paste over to FreeDCE to integrate a NamedPipe Interface plugin and also the FreeDCE NTLMSSP authentication plugin i worked on. i think that just about covers it... [by the way, if anyone knows of any formal / legal incantations that must be met for that to be recognised, please contact me, i need to know what they are]. oh - one other quite important thing: a couple of people donated or assigned copyright to me on the
Re: Re-2: [Samba] Samba 3.0.9 doesn't remove printjobs ?
... after upgrading my samba installation from 3.0.2 to 3.0.9, the printjobs (sent from XP Workstations) aren't removed from the joblist anymore. Had the same problem on Solaris 9 with Berkeley lpd print subsystem and samba versions 3.0.6-3.0.8 (3.0.5 was ok). The problem was fixed in samba 3.0.9 but reappeared with Gerald's 3.0.9 printing patch (confirmed by reversing the patch and noting that the problem disappeared). Mike McCarthy School of Psychology University of Queensland -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: Cannot share MSAccess DB after upgrade 3.0.5 to 3 .0.8
-Original Message- From: Lane Beneke [mailto:[EMAIL PROTECTED] A simple upgrade from 3.0.5 to 3.0.8 broke file sharing on a MSAccess 2k database (Win2k and WinXP clients.) There are Paradox databases on the same file-share that are working fine. The log files show no errors. I'm about to try increasing the debug level, but can anyone give me a clue in the meantime? I don't think this is the problem, but you should make sure to disable oplocks on Access databases. Multi-user databases and oplocks just don't play nice together. ;) Something like this: veto oplock files = /*.MDB/*.LDB/*.mdb/*.ldb/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Temp fix for users getting smb_trans2: invalid data in messages log file
Hello all, I was having this problem and finally found a temp fix for it. The symptoms seem to be this: -- You are on a linux client -- You have mounted a samba drive from you linux client to a linux server. -- When you try to make modifications or copy file from your client to the server, it takes a long time or times-out. -- Your /var/log/mesages file states smb_trans2: invalid data , disp=0, cnt=0, tot=0, ofs=0 It seems that some CIFS code got trampled on during a smb kernel patch. I believe this will be fixed in the 2.6.10 kernel (pretty soon I hope). For now, you can add the following entry to your smb.conf file: unix extensions = no This temp solution was posted to the samba listserver last month, but I thought I would post it again since it cause me a lot of headaches. Cheers everyone. Happy Holidays. Mike Lee -- [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Temp fix for users getting smb_trans2: invalid data in messages log file
On Thu, 2004-12-16 at 17:26 -0700, Mike Lee wrote: Hello all, I was having this problem and finally found a temp fix for it. The symptoms seem to be this: -- You are on a linux client -- You have mounted a samba drive from you linux client to a linux server. -- When you try to make modifications or copy file from your client to the server, it takes a long time or times-out. -- Your /var/log/mesages file states smb_trans2: invalid data , disp=0, cnt=0, tot=0, ofs=0 It seems that some CIFS code got trampled on during a smb kernel patch. I believe this will be fixed in the 2.6.10 kernel (pretty soon I hope). For now, you can add the following entry to your smb.conf file: unix extensions = no This temp solution was posted to the samba listserver last month, but I thought I would post it again since it cause me a lot of headaches. Cheers everyone. Happy Holidays. Mike Lee -- Mike, Thanks for the fix. Can I ask a dumb question - do you apply this to the local or remote smb.conf? I'd assume remote, but wanted to confirm. Thanks and regards, Des -- Des Dougan, Principal Dougan Consulting Group Ph: 604-980-2848 Email: des at DouganConsulting dot com www.DouganConsulting.com Design - Implementation - Support -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: ldap machine suffix fixed?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OK, so what I am hearing is that: 1. It is still a problem. 2. But it isn't a Samba problem, it is an nss_ldap problem. 3. There might be some work arounds. Possible workarounds: A. Burry the Two OU's one deeper and do a subtree search on the parent OU. Works but not scaleable. B. Add filter keyword to uh... Is it /etc/ldap.conf or nss_switch.conf? Syntax? Am I in the right ballpark here? :-) Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwoPU57L0B7uXm9oRAvFRAJ49HG+hh+tVITu09dPBqRyPvGmOzQCeL7Xy 2JbBI6+wWIlLhJrp+QxRgAs= =2WmN -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Way to salvage profiles after domain rejoin?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | I take it that the SID does not actually change (from ... | I didn't do something wrong or neglect something. Don't forget to change the SID in any scripts that you are using also. smbldap-tools for example. Might also want to chech and see what SID's are in any user records you've created recently. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwoq157L0B7uXm9oRAiBVAKCB5krP2RXdbQFVwulYXOs1Qc58AwCeMd3h 0wan1rHlVXziXHkzXZB59aw= =h4TG -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Can not Rights to users
Hi, I've configured samba with ldap support and all is going well with normal users. I wanted to know how to give special right/privileges to users using any windows tool. I tried to use w2k's support tool (Active Directory Users and Computers) and nt's srvtools(usermgr) but none of these worked. win2k says can not connect to pre-windows 2000 domain nt connects and gets everything as expected but it just can not set/change anything (except password and some user flags). When i try to change group membership and add user to Domain Admins group is says The Group name can not be found users is the output of my groupmap list. Domain Admins (S-1-5-21-4276035903-123456789-2739979074-512) - Domain Admins Domain Users (S-1-5-21-4276035903-123456789-2739979074-513) - Domain Users Domain Guests (S-1-5-21-4276035903-123456789-2739979074-514) - Domain Guests Administrators (S-1-5-21-4276035903-123456789-2739979074-544) - Administrators users (S-1-5-21-4276035903-123456789-2739979074-545) - users Guests (S-1-5-21-4276035903-123456789-2739979074-546) - Guests Power Users (S-1-5-21-4276035903-123456789-2739979074-547) - Power Users Account Operators (S-1-5-21-4276035903-123456789-2739979074-548) - Account Operators Server Operators (S-1-5-21-4276035903-123456789-2739979074-549) - Server Operators Print Operators (S-1-5-21-4276035903-123456789-2739979074-550) - Print Operators Backup Operators (S-1-5-21-4276035903-123456789-2739979074-551) - Backup Operators Replicator (S-1-5-21-4276035903-123456789-2739979074-552) - Replicator Domain Computers (S-1-5-21-4276035903-123456789-2739979074-553) - Domain Computers Users are created with the membership of users group by default. # id savas uid=1014(savas) gid=545(users) groups=545(users) Am i supposed to give membership from unix as well? like say Domain Admins ? As a reminder, i can use shares, and can logon to samba pdc domain with users successfully, what i cant do is, change some settings of users using some tool. I'm starting to wonder if there is another tool for samba pdc? Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Odd - some users can mount /home, others cannot
LS, What could cause the following situation: Most users CAN connect to their /home other users CANNOT connect to their /home and get the error 66 message. All users concerned are in the same group and thus share the same gid. I am aware of security stuff putting directories on 0777. Setup is: Win98SE Fedora2 Samba 3.0.3-5 Funny thing is that a smclient -U username server\username password works fine - so I can get a the data I need from the Linux side. Error log reads as follows at log level 1: [2004/12/16 10:14:59, 0] smbd/service.c:make_connection(771) fslinux (192.168.11.200) couldn't find service home Now increased the loglevel to 10 for some detail. A net use command on the Win98 machine reveals that the UNC mapping to the users /home dir exists but it does not get mapped to the drive. smb.cnf as follows: [global] workgroup = Domein netbios name = fslinux server string = www security = user encrypt passwords = Yes update encrypted = Yes password server = * log level = 1 log file = /var/log/samba/log.%U time server = Yes add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u logon script = %U.bat logon path = \\%N\netlogon\%u logon drive = x: logon home = \\%L\%U domain logons = Yes os level = 65 preferred master = True domain master = True wins support = yes winbind use default domain = yes utmp = yes map acl inherit = yes acl compatibility = auto admin users = root antoinem rob printing = cups printcap name = cups queuepause command = /usr/bin/disable %p queueresume command = /usr/bin/enable %p [netlogon] path = /etc/samba/netlogon/ browseable = No [homes] comment = Home Directories path = /home/%U read only = No create mask = 0700 force create mode = 0700 directory mask = 0700 force directory mode = 0700 browseable = No [profile] path = /home/%U read only = no profile acl = yes [homedirs] comment = homedirs path = /home/homedirs/%U read only = No create mask = 0755 force create mode = 0755 directory mask = 0755 force directory mode = 0755 browsable = No [groepen] comment = groepen path = /home/groepen/%U read only = No create mask = 0777 force create mode = 0777 directory mask = 0777 force directory mode = 0777 browsable = No [appl] comment = onderwijs software path = /home/appl admin users = (real names removed) read list = @users write list = @users,@leerlingen,@onderwijzers read only = No create mask = 0777 directory mask = 0777 browseable = No [SOFTWARE] comment = SOFTWARE path = /home/software read only = No browseable = No [MEMO] comment = SOFTWARE path = /home/memo read only = No browseable = No admin users = xxx (real names removed read list = @users write list = @users read only = No create mask = 0777 directory mask = 0777 [OVERZICHT] comment = homedirs path = /home/groepen read only = No create mask = 0755 force create mode = 0755 directory mask = 0755 force directory mode = 0755 browsable = No [SYSADMIN] path = / valid users = xxx (real names removed) admin users = xxx (real names removed) read only = No browseable = No [CDROM] path = /mnt/cdrom valid users = @users admin users = xxx browseable = No [PRINTERS] path = /var/spool/samba printer admin = root printable = yes use client driver = yes browseable = no [educat] path = /mnt/jb01 read only = yes browseable= No -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] multiple names
Luca Ferrari wrote: Is it possible to make a samba (3) server answering with multiple netbios names? yes. use netbios aliases = server, name, secondname, etc for that. Tomek -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ldap machine suffix fixed?
Tomasz Chmielewski wrote: Beast wrote: Jim C. wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Did ldap machine suffix ever get fixed so that it can be in a sperate container from ldap user suffix? Is there any problem to be fix on samba side? I've been using separate container for machine without any problem ( almost 8 months now) Yes, there was a problem, and maybe still is. You are using separate containers for users and machines, because you probably search for them in the whole LDAP tree. Yes. I did not specify filter on pam/nss_ldap. However the limitation is coming from nss_ldap not samba. On systems with lots of machines and users this can lead to a bottleneck (searching for machines first in users, then in machines etc., instead of in machines only, and in users only if looking for users). You can still use 1 dedicated (slave) ldap server for each samba server as I do on my setup or using nscd to cache passwd, group etc. Tomek -- --beast -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Cannot share MSAccess DB after upgrade 3.0.5 to 3.0.8
This is really strange. The samba server in question is a domain member server on a Windows NT 4.0 Domain network. It runs Gentoo 2004.3 with a 2.4.24 kernel. The Gentoo server was upgraded from Samba 3.0.5 to 3.0.8 last night. After the upgrade, the server had to be re-joined to the domain. After that, everything appeared to be working. This morning we found that the MSAccess database files can no longer be shared if the database users open the MDB file containing the tables. The first user in can use the database, and databases that are externally linked to the database in question can share the data just fine. (Weirdness) A quick look at smbstatus output reveals that no oplocks are placed on the MDB or the LDB files. However, the Access column of the smbstatus output shows 0x2019f for all files except the MDB files, which show 0x3. Does anyone know what this means? 32748 DENY_NONE 0x3 RDWR NONE /samba/common/smc.mdb 32748 DENY_NONE 0x2019f RDWR NONE /samba/common/smc.ldb Help! Lane Beneke __ Do you Yahoo!? Yahoo! Mail - Easier than ever with enhanced search. Learn more. http://info.mail.yahoo.com/mail_250 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Migration to Samba
Basiclly you need to change the registry to point to the profile directory to the old place. Here is what I got from the net a while ago. Hope it helps. -- Kang Have you ever had a profile problem? No, not you, never. You have a laptop or a regular computer the was in a domain, but now does not have access to the domain. Below are the steps to allow you to control that profile information. 1) Logon in as WORKGROUP\USERID a) Check to see what directory gets created under C:\Documents and Settings. - most likely will be USERID.WORKGROUP or USERID.WORKGROUP.000 This is the path you will CHANGE in the registry in a later step b) Check old DOMAIN directory ? most likely will be C:\Documents and Settings\USERID This is the path you will USE in the registry in a later step 2) Logout Login as Local Administrator or Domain Admin 3) Add WORKGROUP\USERID to Local Administrators Group 4) Check number of profiles under User Profiles tool Windows 2000 ? Right Mouse Click on My Computer ? User Profiles Windows XP ? Right Mouse Click on My Computer ? Advanced - User Profiles ? Settings Should see two profiles - DOMAIN\USERID and WORKGROUP\USERID 5) Open Registry - REGEDIT a) Go to this key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList b) Find DOMAIN SID ? Look for the path in Step 1b to under ProfileImagePath key c) Find WORKGROUP SID - Look for the path in Step 1a to under ProfileImagePath key d) Highlight ProfileImagePath key in right-hand window for WORKGROUP SID Double-click and change path to match old DOMAIN path noted about in Step 1b. - will most likely be %SystemDrive%\Documents and Settings\USERID - This path is case sensitive e) Find DOMAIN SID Highlight SID in left-hand window and Delete 6) Logout Login as WORKGROUP\USERID 7) Check number of profiles under User Profiles tool Should see only one profile now - WORKGROUP\USERID This will also work if you are moving from one domain to another. Just substitute new domain for WORKGROUP. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] CAN-2004-1154 : Integer overflow could lead to remote code execution in Samba 2.x, 3.0.x = 3.0.9
Today's security patch doesn't work if you also want to use the printing patch for 3.0.9 mentioned recently on this list. Build error: Linking bin/smbd printing/printing.o(.text+0x2d4b): In function `print_queue_update': printing/printing.c:1421: undefined reference to `smb_xmalloc' collect2: ld returned 1 exit status make: *** [bin/smbd] Error 1 This is patching with the printing patch first, followed by the security patch, using the %patch macros of rpm. I'll try the other way around, but it takes awhile on my slow test box, so I thought I'd see if anyone had any success building with both patches. On Dec 16, 2004, at 6:17 AM, Gerald Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 == == == Subject: Possible remote code execution == CVE ID#: CAN-2004-1154 == == Versions:Samba 2.x 3.0.x = 3.0.9 == == Summary: A potential integer overflow when == unmarshalling specific MS-RPC requests == from clients could lead to heap == corruption and remote code execution. == == === Description === Remote exploitation of an integer overflow vulnerability in the smbd daemon included in Samba 2.0.x, Samba 2.2.x, and Samba 3.0.x prior to and including 3.0.9 could allow an attacker to cause controllable heap corruption, leading to execution of arbitrary commands with root privileges. Successful remote exploitation allows an attacker to gain root privileges on a vulnerable system. In order to exploit this vulnerability an attacker must possess credentials that allow access to a share on the Samba server. Unsuccessful exploitation attempts will cause the process serving the request to crash with signal 11, and may leave evidence of an attack in logs. == Patch Availability == A patch for Samba 3.0.9 (samba-3.0.9-CAN-2004-1154.patch) can be downloaded from http://www.samba.org/samba/ftp/patches/security/ The patch has been signed with the Samba Distribution Verification Key (ID F17F9772). = Protecting Unpatched Servers = The Samba Team always encourages users to run the latest stable release as a defense against attacks. However, under certain circumstances it may not be possible to immediately upgrade important installations. In such cases, administrators should read the Server Security documentation found at http://www.samba.org/samba/docs/server_security.html. === Credits === This security issue was reported to Samba developers by iDEFENSE Labs. The vulnerability was discovered by Greg MacManus, iDEFENSE Labs. == == Our Code, Our Bugs, Our Responsibility. == The Samba Team == -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwXzdIR7qMdg1EfYRAvnVAKCgJxELPsRo2oIwBcUq+wKNkjB3BwCgzn5l 3PtHselUE/u/xxC7PRYpxyA= =8JRM -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- David Schlenk Operating Systems Analyst Bethel University Saint Paul, Minnesota [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
printing patch for 3.0.10 [was Re: [Samba] CAN-2004-1154....]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Schlenk wrote: | Today's security patch doesn't work if you also want to use | the printing patch for 3.0.9 mentioned recently on this list. | Build error: | | Linking bin/smbd | printing/printing.o(.text+0x2d4b): In function `print_queue_update': | printing/printing.c:1421: undefined reference to `smb_xmalloc' | collect2: ld returned 1 exit status | make: *** [bin/smbd] Error 1 | | This is patching with the printing patch first, followed by | the security patch, using the %patch macros of rpm. I'll try | the other way around, but it takes awhile on my slow test box, | so I thought I'd see if anyone had any success building | with both patches. New patch posted for 3.0.10 (should apply to 3.0.19+CAN-2004-1154.patch as well). http://samba.org/~jerry/patches/post-3.0.10/ cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwbnWIR7qMdg1EfYRAl+7AJ9uPt9SWcU20CxjqvTaNPqQ6hNldgCdHK5r HvJ34brMInBxkiEXva4U2t4= =ywaE -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Participation on Samba lists
I had the same concerns initially, but if you look through the history of his posts on the lists, they tend to always degrade into accusations and name calling in the end. Telling him it is off-topic only feeds the flames. This was discussed extensively among the team and unfortunately this seems the only reasonable thing to do at the moment. I concur with the action. Herb Samba Team Dragan Krnic wrote: Regardless of what is going on this is not right in my opinion. So we're going to ban Luke from posting to the Samba Lists for three months There must be another way to work things out. Open to suggestions. We've been trying and they haven't been working out. This was the action of last resort and we regret having to resort to it. But we ran out of options. This has been going on for a long time. My suggestion is, you lift the ban. It just doesn't sound right. It is censorship. We do tolerate all kinds of trolls who quote a lengthy letter for no reason other than to approve of its content, so what's so disruptive in Luke's letter? I personally tried to read Luke's letter but gave up on issues of style, terseness and casing. I'd rather Luke had contributed some new code instead. But banning him is not right. As another suggestion, why don't you create a separate samba mail list samba-politics and advise a contributor who doesn't stick to samba-user problems that he/she/it is off-topic? I don't have a problem to skip a posting I'm not interested in. I do have a problem, if someone does it for me. Cheers Dragan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Way to salvage profiles after domain rejoin?
I take it that the SID does not actually change (from the domains perspective) until a Samba restart? I went ahead and did net setlocalsid old-sid but none of the clients see it right now. I plan on restarting Samba tonight, but I just wanted to make sure that I didn't do something wrong or neglect something. --J(K) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] CAN-2004-1154 : Integer overflow could lead to remote code execution in Samba 2.x, 3.0.x = 3.0.9
On Thu, Dec 16, 2004 at 10:17:29AM -0600, David Schlenk wrote: Today's security patch doesn't work if you also want to use the printing patch for 3.0.9 mentioned recently on this list. Build error: Linking bin/smbd printing/printing.o(.text+0x2d4b): In function `print_queue_update': printing/printing.c:1421: undefined reference to `smb_xmalloc' collect2: ld returned 1 exit status make: *** [bin/smbd] Error 1 Change that reference at line 1421 to SMB_XMALLOC_ARRAY(char, len ); should do it (if it's the change I think it is). Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.10 Available for Download
Gerald Carter schrieb: This is the latest stable release of Samba. This is the version that production Samba servers should be running for all current bug-fixes. This is primarily a security release to address CAN-2004-1154. Compiles ok with changed configure and printing-3-0-10.patch :) A question to the thread 3.0.9 and macro %f http://marc.theaimsgroup.com/?l=sambam=110260704009010w=2 Do you have a patch for that? der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: print$ worked in 3.0.7, broken after upgrading to 3.0.9
Well, my problem has changed. I rolled back to Samba 3.0.7 and the issue was still there, telling me that it was a case of corrupted printer drivers in the print$ share most likely. I tried to recopy them in there manually but that didn't work, so I deleted them and reinstalled the drivers using the WinXP Add Printer Driver Wizard. This worked and now all computers can download drivers automatically, but to my puzzlement the print$ share is still empty. I looked in the directory that it is connected with, /usr/local/samba/printers, but it was empty. So now the drivers are out there, but where? I'm going to examine the server but does anyone have any ideas or have seen this kind of behavior before? Jeff Umbach wrote: Franz Pförtsch wrote: Do you have tried: smbclient //server/print$ -U windowsuser what is happening? I tried following the solution in that thread and it didn't help. I can print to the printers if I install the driver manually, but I cannot get it to install the driver automatically from the print$ share anymore. The Access Denied message refers to the printer status. I am printing from WinXP Pro SP2, not Linux. There are no other Linux systems on this network. All the other Windows computers that already had their printers installed still work but if I uninstall a printer I cannot reinstall it properly. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Trusted domain problem (maybe networking)
I finally ran into a problem with domain trusts that was solved by doing the following: resolve hosts order = wins lmhosts hosts ...in smb.conf and: XX.XX.XX.XX DOMA#1b XX.XX.XX.XX DOMA#1c in lmhosts for DOMB... and the opposite for DOMA. This seemed to work properly. 1B is apparently for PDC and 1c is for login server. HTH, _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - User Support Spec. III |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Wed, 15 Dec 2004, Misty Stanley-Jones wrote: On Tuesday 14 December 2004 21:36, you wrote: I set remote browse sync to the 'broadcast' address of the remote network... i.e. Network A 192.168.0.0/255.255.255.0 broadcast address is 192.168.0.255 Network B 192.168.1.0/255.255.255.0 broadcast address is 192.168.1.255 smb.conf on server on Network A remote browse sync = 192.168.1.255 smb.conf on server on Network B remote browse sync = 192.168.0.255 I had it like this at first. I've put it back for shits and giggles. and lastly, clients are set to use wins server This is already in place via dhcpd. and dhcpd of clients sets 'option netbios-node-type 8;' #broadcast I've put this in just for fun. But by the way, I am trying the nmblookup command on the Samba servers themselves, which also act as DHCP servers and hence do not use DHCP to get their IP information. Make your changes, shutdown samba, delete wins.dat and restart samba Can't do this until after 5PM today. I will let y'all know the results. I didn't try deleting wins.dat yesterday. Misty Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
CAN-2004-1154 : Integer overflow could lead to remote code execution in Samba 2.x, 3.0.x = 3.0.9
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 == == == Subject: Possible remote code execution == CVE ID#: CAN-2004-1154 == == Versions:Samba 2.x 3.0.x = 3.0.9 == == Summary: A potential integer overflow when == unmarshalling specific MS-RPC requests == from clients could lead to heap == corruption and remote code execution. == == === Description === Remote exploitation of an integer overflow vulnerability in the smbd daemon included in Samba 2.0.x, Samba 2.2.x, and Samba 3.0.x prior to and including 3.0.9 could allow an attacker to cause controllable heap corruption, leading to execution of arbitrary commands with root privileges. Successful remote exploitation allows an attacker to gain root privileges on a vulnerable system. In order to exploit this vulnerability an attacker must possess credentials that allow access to a share on the Samba server. Unsuccessful exploitation attempts will cause the process serving the request to crash with signal 11, and may leave evidence of an attack in logs. == Patch Availability == A patch for Samba 3.0.9 (samba-3.0.9-CAN-2004-1154.patch) can be downloaded from http://www.samba.org/samba/ftp/patches/security/ The patch has been signed with the Samba Distribution Verification Key (ID F17F9772). = Protecting Unpatched Servers = The Samba Team always encourages users to run the latest stable release as a defense against attacks. However, under certain circumstances it may not be possible to immediately upgrade important installations. In such cases, administrators should read the Server Security documentation found at http://www.samba.org/samba/docs/server_security.html. === Credits === This security issue was reported to Samba developers by iDEFENSE Labs. The vulnerability was discovered by Greg MacManus, iDEFENSE Labs. == == Our Code, Our Bugs, Our Responsibility. == The Samba Team == -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBwXzMIR7qMdg1EfYRAit2AJ9s+bs338Qc5VXAlLS+Uz7Qx6iz6QCgjvjW 8iuG72I7fyzWzLEtLVdRQM0= =Ad3P -END PGP SIGNATURE-
svn commit: samba-web r471 - in trunk/history: .
Author: jerry Date: 2004-12-16 12:06:27 + (Thu, 16 Dec 2004) New Revision: 471 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=471 Log: fix misplaced /pre tag Modified: trunk/history/samba-3.0.10.html Changeset: Modified: trunk/history/samba-3.0.10.html === --- trunk/history/samba-3.0.10.html 2004-12-16 11:59:25 UTC (rev 470) +++ trunk/history/samba-3.0.10.html 2004-12-16 12:06:27 UTC (rev 471) @@ -12,7 +12,6 @@ p pre -/pre == Release Notes for Samba 3.0.10 Dec 16, 2004
svn commit: samba r4227 - in branches/SAMBA_4_0/source: .
Author: tridge Date: 2004-12-16 12:24:25 + (Thu, 16 Dec 2004) New Revision: 4227 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4227 Log: index the privilege attribute to make lsa privilege calls efficient Modified: branches/SAMBA_4_0/source/provision.ldif Changeset: Modified: branches/SAMBA_4_0/source/provision.ldif === --- branches/SAMBA_4_0/source/provision.ldif2004-12-15 19:37:35 UTC (rev 4226) +++ branches/SAMBA_4_0/source/provision.ldif2004-12-16 12:24:25 UTC (rev 4227) @@ -6,6 +6,7 @@ @IDXATTR: member @IDXATTR: unixID @IDXATTR: unixName [EMAIL PROTECTED]: privilege dn: @ATTRIBUTES realm: CASE_INSENSITIVE
svn commit: samba r4228 - in branches/SAMBA_4_0/source/libcli/raw: .
Author: tridge Date: 2004-12-16 12:25:23 + (Thu, 16 Dec 2004) New Revision: 4228 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4228 Log: make sure the caller knows the packet is in error when a signing error occurs Modified: branches/SAMBA_4_0/source/libcli/raw/clitransport.c Changeset: Modified: branches/SAMBA_4_0/source/libcli/raw/clitransport.c === --- branches/SAMBA_4_0/source/libcli/raw/clitransport.c 2004-12-16 12:24:25 UTC (rev 4227) +++ branches/SAMBA_4_0/source/libcli/raw/clitransport.c 2004-12-16 12:25:23 UTC (rev 4228) @@ -416,6 +416,7 @@ transport-error.etype = ETYPE_SOCKET; transport-error.e.socket_error = SOCKET_READ_BAD_SIG; req-state = SMBCLI_REQUEST_ERROR; + req-status = NT_STATUS_ACCESS_DENIED; goto error; };
svn commit: samba r4229 - in branches/SAMBA_4_0/source/libcli/raw: .
Author: tridge
Date: 2004-12-16 12:29:04 + (Thu, 16 Dec 2004)
New Revision: 4229
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4229
Log:
- added support for multi-part SMBtrans and SMBtrans2 requests in the
client code. This was essential to test the multi-part server code
(which I will commit soon)
- when the request state is an error, ensure that req-status is not
NT_STATUS_OK
Modified:
branches/SAMBA_4_0/source/libcli/raw/rawrequest.c
branches/SAMBA_4_0/source/libcli/raw/rawtrans.c
Changeset:
Modified: branches/SAMBA_4_0/source/libcli/raw/rawrequest.c
===
--- branches/SAMBA_4_0/source/libcli/raw/rawrequest.c 2004-12-16 12:25:23 UTC
(rev 4228)
+++ branches/SAMBA_4_0/source/libcli/raw/rawrequest.c 2004-12-16 12:29:04 UTC
(rev 4229)
@@ -48,8 +48,11 @@
DLIST_REMOVE(req-transport-pending_recv, req);
}
- /* ahh, its so nice to destroy a complex structure in such a
- simple way! */
+ if (req-state == SMBCLI_REQUEST_ERROR
+ NT_STATUS_IS_OK(req-status)) {
+ req-status = NT_STATUS_INTERNAL_ERROR;
+ }
+
status = req-status;
talloc_free(req);
return status;
@@ -95,7 +98,7 @@
setup a SMB packet at transport level
*/
struct smbcli_request *smbcli_request_setup_transport(struct smbcli_transport
*transport,
- uint8_t command, uint_t wct,
uint_t buflen)
+ uint8_t command, uint_t
wct, uint_t buflen)
{
struct smbcli_request *req;
@@ -119,8 +122,10 @@
SCVAL(req-out.hdr,HDR_FLG, FLAG_CASELESS_PATHNAMES);
SSVAL(req-out.hdr,HDR_FLG2, 0);
- /* assign a mid */
- req-mid = smbcli_transport_next_mid(transport);
+ if (command != SMBtranss command != SMBtranss2) {
+ /* assign a mid */
+ req-mid = smbcli_transport_next_mid(transport);
+ }
/* copy the pid, uid and mid to the request */
SSVAL(req-out.hdr, HDR_PID, 0);
Modified: branches/SAMBA_4_0/source/libcli/raw/rawtrans.c
===
--- branches/SAMBA_4_0/source/libcli/raw/rawtrans.c 2004-12-16 12:25:23 UTC
(rev 4228)
+++ branches/SAMBA_4_0/source/libcli/raw/rawtrans.c 2004-12-16 12:29:04 UTC
(rev 4229)
@@ -20,8 +20,10 @@
*/
#include includes.h
+#include dlinklist.h
#include libcli/raw/libcliraw.h
+#define TORTURE_TRANS_DATA 0
/*
check out of bounds for incoming data
@@ -198,20 +200,21 @@
return smb_raw_trans2_recv(req, mem_ctx, parms);
}
-/
- trans/trans2 raw async interface - only BLOBs used in this interface.
- note that this doesn't yet support multi-part requests
-/
+
+/*
+ trans/trans2 raw async interface - only BLOBs used in this interface.
+*/
struct smbcli_request *smb_raw_trans_send_backend(struct smbcli_tree *tree,
- struct smb_trans2 *parms,
- uint8_t command)
+ struct smb_trans2 *parms,
+ uint8_t command)
{
int wct = 14 + parms-in.setup_count;
- struct smbcli_request *req;
+ struct smbcli_request *req, *req2;
uint8_t *outdata,*outparam;
int i;
int padding;
size_t namelen = 0;
+ uint16_t data_disp, data_length, max_data;
if (command == SMBtrans)
padding = 1;
@@ -236,6 +239,19 @@
/* make sure we don't leak data via the padding */
memset(req-out.data, 0, padding);
+ data_length = parms-in.data.length;
+
+ max_data = smb_raw_max_trans_data(tree, parms-in.params.length);
+ if (max_data data_length) {
+ data_length = max_data;
+ }
+
+#if TORTURE_TRANS_DATA
+ if (data_length 1) {
+ data_length /= 2;
+ }
+#endif
+
/* primary request */
SSVAL(req-out.vwv,VWV(0),parms-in.params.length);
SSVAL(req-out.vwv,VWV(1),parms-in.data.length);
@@ -247,7 +263,7 @@
SSVAL(req-out.vwv,VWV(8),0); /* reserved */
SSVAL(req-out.vwv,VWV(9),parms-in.params.length);
SSVAL(req-out.vwv,VWV(10),PTR_DIFF(outparam,req-out.hdr)+namelen);
- SSVAL(req-out.vwv,VWV(11),parms-in.data.length);
+ SSVAL(req-out.vwv,VWV(11),data_length);
SSVAL(req-out.vwv,VWV(12),PTR_DIFF(outdata,req-out.hdr)+namelen);
SSVAL(req-out.vwv,VWV(13),parms-in.setup_count);
for (i=0;iparms-in.setup_count;i++) {
@@ -257,22 +273,88 @@
smbcli_req_append_blob(req, parms-in.params);
}
if (parms-in.data.data) {
-
svn commit: samba r4230 - in branches/SAMBA_4_0/source/ntvfs/posix: .
Author: tridge Date: 2004-12-16 12:29:47 + (Thu, 16 Dec 2004) New Revision: 4230 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4230 Log: now that we set the FLAGS2_EXTENDED_ATTRIBUTES flag, we should mark empty EAs as being of size 4, not size 0 Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_fileinfo.c Changeset: Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_fileinfo.c === --- branches/SAMBA_4_0/source/ntvfs/posix/pvfs_fileinfo.c 2004-12-16 12:29:04 UTC (rev 4229) +++ branches/SAMBA_4_0/source/ntvfs/posix/pvfs_fileinfo.c 2004-12-16 12:29:47 UTC (rev 4230) @@ -95,7 +95,7 @@ name-dos.attrib = dos_mode_from_stat(pvfs, name-st); name-dos.alloc_size = pvfs_round_alloc_size(pvfs, name-st.st_size); name-dos.nlink = name-st.st_nlink; - name-dos.ea_size = 0; + name-dos.ea_size = 4; name-dos.file_id = (((uint64_t)name-st.st_dev)32) | name-st.st_ino; name-dos.flags = 0;
svn commit: samba r4232 - in branches/SAMBA_4_0/source/smb_server: .
Author: tridge Date: 2004-12-16 12:31:34 + (Thu, 16 Dec 2004) New Revision: 4232 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4232 Log: added server support for multi-part SMBtrans requests, while maintaining the async nature of the server. This is done with a SMBtrans request queue for partially completed requests. The smb signing issues with this get a little tricky, but it now seems to work fine Modified: branches/SAMBA_4_0/source/smb_server/smb_server.c branches/SAMBA_4_0/source/smb_server/smb_server.h branches/SAMBA_4_0/source/smb_server/trans2.c Changeset: Sorry, the patch is too large (446 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4232
svn commit: samba r4233 - in tags: .
Author: jerry Date: 2004-12-16 12:33:24 + (Thu, 16 Dec 2004) New Revision: 4233 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4233 Log: tagging release-3-0-10 Added: tags/release-3-0-10/ Changeset: Copied: tags/release-3-0-10 (from rev 4232, branches/SAMBA_3_0_RELEASE)
svn commit: samba-docs r305 - in tags: .
Author: jerry Date: 2004-12-16 12:33:57 + (Thu, 16 Dec 2004) New Revision: 305 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=305 Log: tagging docs for release-3-0-10 Added: tags/release-3-0-10/ Changeset: Copied: tags/release-3-0-10 (from rev 304, trunk)
svn commit: samba-web r472 - in trunk: .
Author: jerry Date: 2004-12-16 12:37:42 + (Thu, 16 Dec 2004) New Revision: 472 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=472 Log: adding item about 3.0.10 release Modified: trunk/index.html Changeset: Modified: trunk/index.html === --- trunk/index.html2004-12-16 12:06:27 UTC (rev 471) +++ trunk/index.html2004-12-16 12:37:42 UTC (rev 472) @@ -13,7 +13,26 @@ h2Current Release/h2 -h4a name=latest19 November 2004/a/h4 +h4a name=latest16 December 2004/a/h4 +p class=headlineSecurity Release: Samba 3.0.10 Available for Download/p + +pSamba 3.0.10 is the latest stable + release of Samba, and is the version that production servers should + be running for all current bug-fixes. This is primarily a security + release to address a href=/samba/security/CAN-2004-1154.htmlCAN-2004-1154/a. + Please refer to the a href=/samba/history/samba-3.0.10.htmlrelease notes/a + for details regarding additional changes./p + +pThe a href=/samba/ftp/samba-3.0.10.tar.gzSamba 3.0.10 + source code/a can be downloaded now. The a href=/samba/ftp/stable/samba-3.0.10.tar.ascGnuPG + signature for the uncompressed tarball/a is also available. + Precompiled packages for various platforms are available in the + a href=http://download.samba.org/samba/ftp/Binary_Packages/;Binary_Packages + download area/a. More will appear over the next week as they are provided by + volunteer package maintainers./p + + +h4a name=19 November 2004/a/h4 p class=headlineSamba 3.0.9 Available for Download/p pSamba 3.0.9 is the latest stable
svn commit: samba r4231 - in branches/SAMBA_3_0_RELEASE: . examples/VFS source source/auth source/client source/groupdb source/include source/intl source/lib source/libads source/libsmb source/locking source/modules source/nmbd source/nsswitch source/param source/passdb source/printing source/registry source/rpc_client source/rpc_parse source/rpc_server source/rpcclient source/sam source/script source/smbd source/tdb source/utils source/web
Author: jerry Date: 2004-12-16 12:30:49 + (Thu, 16 Dec 2004) New Revision: 4231 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4231 Log: commiting changes to 3.0.10 Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt branches/SAMBA_3_0_RELEASE/examples/VFS/shadow_copy_test.c branches/SAMBA_3_0_RELEASE/source/VERSION branches/SAMBA_3_0_RELEASE/source/auth/auth.c branches/SAMBA_3_0_RELEASE/source/auth/auth_ntlmssp.c branches/SAMBA_3_0_RELEASE/source/auth/auth_util.c branches/SAMBA_3_0_RELEASE/source/client/client.c branches/SAMBA_3_0_RELEASE/source/client/clitar.c branches/SAMBA_3_0_RELEASE/source/configure.in branches/SAMBA_3_0_RELEASE/source/groupdb/mapping.c branches/SAMBA_3_0_RELEASE/source/include/smb.h branches/SAMBA_3_0_RELEASE/source/include/smb_macros.h branches/SAMBA_3_0_RELEASE/source/intl/lang_tdb.c branches/SAMBA_3_0_RELEASE/source/lib/access.c branches/SAMBA_3_0_RELEASE/source/lib/account_pol.c branches/SAMBA_3_0_RELEASE/source/lib/adt_tree.c branches/SAMBA_3_0_RELEASE/source/lib/bitmap.c branches/SAMBA_3_0_RELEASE/source/lib/charcnv.c branches/SAMBA_3_0_RELEASE/source/lib/data_blob.c branches/SAMBA_3_0_RELEASE/source/lib/debug.c branches/SAMBA_3_0_RELEASE/source/lib/dprintf.c branches/SAMBA_3_0_RELEASE/source/lib/gencache.c branches/SAMBA_3_0_RELEASE/source/lib/iconv.c branches/SAMBA_3_0_RELEASE/source/lib/interface.c branches/SAMBA_3_0_RELEASE/source/lib/ldap_escape.c branches/SAMBA_3_0_RELEASE/source/lib/messages.c branches/SAMBA_3_0_RELEASE/source/lib/module.c branches/SAMBA_3_0_RELEASE/source/lib/ms_fnmatch.c branches/SAMBA_3_0_RELEASE/source/lib/privileges.c branches/SAMBA_3_0_RELEASE/source/lib/secace.c branches/SAMBA_3_0_RELEASE/source/lib/secacl.c branches/SAMBA_3_0_RELEASE/source/lib/secdesc.c branches/SAMBA_3_0_RELEASE/source/lib/server_mutex.c branches/SAMBA_3_0_RELEASE/source/lib/smbldap.c branches/SAMBA_3_0_RELEASE/source/lib/substitute.c branches/SAMBA_3_0_RELEASE/source/lib/system.c branches/SAMBA_3_0_RELEASE/source/lib/system_smbd.c branches/SAMBA_3_0_RELEASE/source/lib/talloc.c branches/SAMBA_3_0_RELEASE/source/lib/time.c branches/SAMBA_3_0_RELEASE/source/lib/util.c branches/SAMBA_3_0_RELEASE/source/lib/util_file.c branches/SAMBA_3_0_RELEASE/source/lib/util_getent.c branches/SAMBA_3_0_RELEASE/source/lib/util_pw.c branches/SAMBA_3_0_RELEASE/source/lib/util_sid.c branches/SAMBA_3_0_RELEASE/source/lib/util_smbd.c branches/SAMBA_3_0_RELEASE/source/lib/util_str.c branches/SAMBA_3_0_RELEASE/source/lib/util_unistr.c branches/SAMBA_3_0_RELEASE/source/lib/wins_srv.c branches/SAMBA_3_0_RELEASE/source/lib/xfile.c branches/SAMBA_3_0_RELEASE/source/libads/ads_struct.c branches/SAMBA_3_0_RELEASE/source/libads/authdata.c branches/SAMBA_3_0_RELEASE/source/libads/kerberos_keytab.c branches/SAMBA_3_0_RELEASE/source/libads/kerberos_verify.c branches/SAMBA_3_0_RELEASE/source/libads/krb5_setpw.c branches/SAMBA_3_0_RELEASE/source/libads/ldap.c branches/SAMBA_3_0_RELEASE/source/libads/ldap_printer.c branches/SAMBA_3_0_RELEASE/source/libads/ldap_utils.c branches/SAMBA_3_0_RELEASE/source/libads/sasl.c branches/SAMBA_3_0_RELEASE/source/libsmb/asn1.c branches/SAMBA_3_0_RELEASE/source/libsmb/clientgen.c branches/SAMBA_3_0_RELEASE/source/libsmb/clifile.c branches/SAMBA_3_0_RELEASE/source/libsmb/clilist.c branches/SAMBA_3_0_RELEASE/source/libsmb/cliquota.c branches/SAMBA_3_0_RELEASE/source/libsmb/clireadwrite.c branches/SAMBA_3_0_RELEASE/source/libsmb/clitrans.c branches/SAMBA_3_0_RELEASE/source/libsmb/conncache.c branches/SAMBA_3_0_RELEASE/source/libsmb/libsmb_cache.c branches/SAMBA_3_0_RELEASE/source/libsmb/libsmb_compat.c branches/SAMBA_3_0_RELEASE/source/libsmb/libsmbclient.c branches/SAMBA_3_0_RELEASE/source/libsmb/namequery.c branches/SAMBA_3_0_RELEASE/source/libsmb/nmblib.c branches/SAMBA_3_0_RELEASE/source/libsmb/ntlmssp.c branches/SAMBA_3_0_RELEASE/source/libsmb/samlogon_cache.c branches/SAMBA_3_0_RELEASE/source/libsmb/smb_signing.c branches/SAMBA_3_0_RELEASE/source/libsmb/spnego.c branches/SAMBA_3_0_RELEASE/source/locking/brlock.c branches/SAMBA_3_0_RELEASE/source/locking/locking.c branches/SAMBA_3_0_RELEASE/source/locking/posix.c branches/SAMBA_3_0_RELEASE/source/modules/vfs_netatalk.c branches/SAMBA_3_0_RELEASE/source/modules/vfs_recycle.c branches/SAMBA_3_0_RELEASE/source/modules/vfs_shadow_copy.c branches/SAMBA_3_0_RELEASE/source/nmbd/nmbd_become_lmb.c branches/SAMBA_3_0_RELEASE/source/nmbd/nmbd_browserdb.c branches/SAMBA_3_0_RELEASE/source/nmbd/nmbd_browsesync.c branches/SAMBA_3_0_RELEASE/source/nmbd/nmbd_incomingrequests.c branches/SAMBA_3_0_RELEASE/source/nmbd/nmbd_namelistdb.c branches/SAMBA_3_0_RELEASE/source/nmbd/nmbd_nameregister.c branches/SAMBA_3_0_RELEASE/source/nmbd/nmbd_packets.c
svn commit: samba-web r474 - in trunk: . history
Author: deryck Date: 2004-12-16 15:35:06 + (Thu, 16 Dec 2004) New Revision: 474 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=474 Log: Moving 3.1 release announcement to history. Modified: trunk/history/index.html trunk/index.html Changeset: Modified: trunk/history/index.html === --- trunk/history/index.html2004-12-16 15:22:17 UTC (rev 473) +++ trunk/history/index.html2004-12-16 15:35:06 UTC (rev 474) @@ -16,6 +16,28 @@ h2Previous Release Announcments/h2 +h424 September 2004/h4 +p class=headlineSamba 3.1.0 Available for Download/p + +pWelcome to the first release of the 3.1.0 development branch. +This is an unstable release series intended only for use by +testers and developers. We make no claims as to whether it even +works./p + +pThe purpose of the 3.1.x releases is similar to what we've used +the 'alpha' tag for in the past. These are unstable, development +releases that may beat you up and take your lunch money. We make +no guarantees. But the 3.1 tree will also has some new experimental +features that may entice you to take a look (we hope)./p + +p(a href=/samba/ftp/unstable/WHATSNEW-3-1-0.txt...more release notes/a)./p + +pThe a href=/samba/ftp/unstable/samba-3.1.0.tar.gzSamba 3.1.0 +source code/a can be downloaded now. The +a href=/samba/ftp/unstable/samba-3.1.0.tar.ascGnuPG signature for the +uncompressed tarball/a is also available for download./p + + h4a19 November 2004/a/h4 p class=headlineSamba 3.0.9 Available for Download/p @@ -236,36 +258,5 @@ href=/samba/ftp/Binary_Packages/Binary packages for various platforms/a will be available following the initial release./p -h425 May 2004/h4 -p class=headlineSamba 3.0.5pre1 Available for Download/p -pThe first preview release of Samba 3.0.5 is now available for -download in a href=/samba/ftp/pre/samba-3.0.5pre1.tar.gzgzipped -format/a. The a href= -/samba/ftp/pre/samba-3.0.5pre1.tar.ascGPG signature/a is for -the uncompressed tarball. There have been several bug fixes since -the 3.0.4 release that we feel are important to make available to -the Samba community for wider testings. This release is bnot/b -intended for production servers. Use at your own risk. Please refer -to the a href=/samba/ftp/pre/WHATSNEW-3-0-5pre1.txtRelease -Notes/a for descriptions of the exact changes./p -pbATTENTION! NEW BEHAVIOR!/b/p -pBeginning with Samba 3.0.5pre1, clients supporting the UNIX -extensions to the CIFS protocol can create symlinks to absolute -paths which emwill be followed/em by the server. This -functionality has been requested in order to correctly support -certain applications when the user's home directory is mounted -using some type of CIFS client (e.g. the cifsvfs in the Linux 2.6 -kernel)./p -pIf this behavior is not acceptable for your production -environment, you can set a href= -/samba/docs/man/smb.conf.5.htmlwide links = no/a in the -specific share declaration in the server's smb.conf. Be aware that -disabling wide link support out of a share in Samba may impact the -server's performance due to the fact that smbd will now have to -check each path additional times before traversing it./p -pa href=http://samba.org/~jerry/RPMS/samba/;RPMS for RedHat -8/9 and Fedora Core 1/a can be also be downloaded./p - - !--#include virtual=footer_history.html -- Modified: trunk/index.html === --- trunk/index.html2004-12-16 15:22:17 UTC (rev 473) +++ trunk/index.html2004-12-16 15:35:06 UTC (rev 474) @@ -30,28 +30,8 @@ a href=http://download.samba.org/samba/ftp/Binary_Packages/;Binary_Packages download area/a. More will appear over the next week as they are provided by volunteer package maintainers./p - - -h424 September 2004/h4 -p class=headlineSamba 3.1.0 Available for Download/p - -pWelcome to the first release of the 3.1.0 development branch. - This is an unstable release series intended only for use by - testers and developers. We make no claims as to whether it even - works./p - -pThe purpose of the 3.1.x releases is similar to what we've used - the 'alpha' tag for in the past. These are unstable, development - releases that may beat you up and take your lunch money. We make - no guarantees. But the 3.1 tree will also has some new experimental - features that may entice you to take a look (we hope)./p - -p(a href=/samba/ftp/unstable/WHATSNEW-3-1-0.txt...more release notes/a)./p - -pThe a href=/samba/ftp/unstable/samba-3.1.0.tar.gzSamba 3.1.0 - source code/a can be downloaded now. The a href=/samba/ftp/unstable/samba-3.1.0.tar.ascGnuPG signature for the uncompressed tarball/a is also available for download./p - - + + div class=plugs a href=/samba/team/tshirt.htmlimg
svn commit: samba r4234 - in branches/SAMBA_3_0/source: printing utils
Author: jra Date: 2004-12-16 21:06:33 + (Thu, 16 Dec 2004) New Revision: 4234 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4234 Log: More malloc fixes to use the macros. Jeremy. Modified: branches/SAMBA_3_0/source/printing/print_svid.c branches/SAMBA_3_0/source/utils/editreg.c branches/SAMBA_3_0/source/utils/smbget.c Changeset: Sorry, the patch is too large (503 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4234
svn commit: samba r4235 - in trunk/source: printing utils
Author: jra Date: 2004-12-16 21:06:40 + (Thu, 16 Dec 2004) New Revision: 4235 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4235 Log: More malloc fixes to use the macros. Jeremy. Modified: trunk/source/printing/print_svid.c trunk/source/utils/editreg.c trunk/source/utils/smbget.c Changeset: Sorry, the patch is too large (503 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4235
svn commit: samba r4236 - in branches/SAMBA_3_0/source: auth lib smbwrapper torture
Author: jra
Date: 2004-12-16 21:12:29 + (Thu, 16 Dec 2004)
New Revision: 4236
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4236
Log:
More *alloc fixes.
Jeremy.
Modified:
branches/SAMBA_3_0/source/auth/pampass.c
branches/SAMBA_3_0/source/lib/sysquotas.c
branches/SAMBA_3_0/source/smbwrapper/smbw.c
branches/SAMBA_3_0/source/smbwrapper/smbw_cache.c
branches/SAMBA_3_0/source/torture/cmd_vfs.c
Changeset:
Modified: branches/SAMBA_3_0/source/auth/pampass.c
===
--- branches/SAMBA_3_0/source/auth/pampass.c2004-12-16 21:06:40 UTC (rev
4235)
+++ branches/SAMBA_3_0/source/auth/pampass.c2004-12-16 21:12:29 UTC (rev
4236)
@@ -59,7 +59,7 @@
/*
* Macros to help make life easy
*/
-#define COPY_STRING(s) (s) ? strdup(s) : NULL
+#define COPY_STRING(s) (s) ? SMB_STRDUP(s) : NULL
/***
PAM error handler.
Modified: branches/SAMBA_3_0/source/lib/sysquotas.c
===
--- branches/SAMBA_3_0/source/lib/sysquotas.c 2004-12-16 21:06:40 UTC (rev
4235)
+++ branches/SAMBA_3_0/source/lib/sysquotas.c 2004-12-16 21:12:29 UTC (rev
4236)
@@ -73,9 +73,9 @@
continue ;
if (S.st_dev == devno) {
- (*mntpath) = strdup(mnt-mnt_dir);
- (*bdev) = strdup(mnt-mnt_fsname);
- (*fs) = strdup(mnt-mnt_type);
+ (*mntpath) = SMB_STRDUP(mnt-mnt_dir);
+ (*bdev) = SMB_STRDUP(mnt-mnt_fsname);
+ (*fs) = SMB_STRDUP(mnt-mnt_type);
if ((*mntpath)(*bdev)(*fs)) {
ret = 0;
} else {
@@ -124,8 +124,8 @@
* but I don't know how
* --metze
*/
- (*mntpath) = strdup(path);
- (*bdev) = strdup(dev_disk);
+ (*mntpath) = SMB_STRDUP(path);
+ (*bdev) = SMB_STRDUP(dev_disk);
if ((*mntpath)(*bdev)) {
ret = 0;
} else {
@@ -152,7 +152,7 @@
(*bdev) = NULL;
(*fs) = NULL;
- (*mntpath) = strdup(path);
+ (*mntpath) = SMB_STRDUP(path);
if (*mntpath) {
ret = 0;
} else {
Modified: branches/SAMBA_3_0/source/smbwrapper/smbw.c
===
--- branches/SAMBA_3_0/source/smbwrapper/smbw.c 2004-12-16 21:06:40 UTC (rev
4235)
+++ branches/SAMBA_3_0/source/smbwrapper/smbw.c 2004-12-16 21:12:29 UTC (rev
4236)
@@ -546,7 +546,7 @@
DEBUG(4,( tconx ok\n));
- srv = (struct smbw_server *)malloc(sizeof(*srv));
+ srv = SMB_MALLOC_P(struct smbw_server);
if (!srv) {
errno = ENOMEM;
goto failed;
@@ -558,25 +558,25 @@
srv-dev = (dev_t)(str_checksum(server) ^ str_checksum(share));
- srv-server_name = strdup(server);
+ srv-server_name = SMB_STRDUP(server);
if (!srv-server_name) {
errno = ENOMEM;
goto failed;
}
- srv-share_name = strdup(share);
+ srv-share_name = SMB_STRDUP(share);
if (!srv-share_name) {
errno = ENOMEM;
goto failed;
}
- srv-workgroup = strdup(workgroup);
+ srv-workgroup = SMB_STRDUP(workgroup);
if (!srv-workgroup) {
errno = ENOMEM;
goto failed;
}
- srv-username = strdup(username);
+ srv-username = SMB_STRDUP(username);
if (!srv-username) {
errno = ENOMEM;
goto failed;
@@ -664,7 +664,7 @@
return fd;
}
- file = (struct smbw_file *)malloc(sizeof(*file));
+ file = SMB_MALLOC_P(struct smbw_file);
if (!file) {
errno = ENOMEM;
goto failed;
@@ -672,7 +672,7 @@
ZERO_STRUCTP(file);
- file-f = (struct smbw_filedes *)malloc(sizeof(*(file-f)));
+ file-f = SMB_MALLOC_P(struct smbw_filedes);
if (!file-f) {
errno = ENOMEM;
goto failed;
@@ -681,7 +681,7 @@
ZERO_STRUCTP(file-f);
file-f-cli_fd = fd;
- file-f-fname = strdup(path);
+ file-f-fname = SMB_STRDUP(path);
if (!file-f-fname) {
errno = ENOMEM;
goto failed;
@@ -1288,7 +1288,7 @@
goto failed;
}
- file2 = (struct smbw_file *)malloc(sizeof(*file2));
+ file2 = SMB_MALLOC_P(struct smbw_file);
if (!file2) {
close(fd2);
errno = ENOMEM;
@@ -1340,7 +1340,7 @@
goto failed;
}
- file2 = (struct smbw_file *)malloc(sizeof(*file2));
+ file2 = SMB_MALLOC_P(struct smbw_file);
if (!file2) {
close(fd2);
svn commit: samba r4237 - in trunk/source: auth lib smbwrapper torture
Author: jra
Date: 2004-12-16 21:12:35 + (Thu, 16 Dec 2004)
New Revision: 4237
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4237
Log:
More *alloc fixes.
Jeremy.
Modified:
trunk/source/auth/pampass.c
trunk/source/lib/sysquotas.c
trunk/source/smbwrapper/smbw.c
trunk/source/smbwrapper/smbw_cache.c
trunk/source/torture/cmd_vfs.c
Changeset:
Modified: trunk/source/auth/pampass.c
===
--- trunk/source/auth/pampass.c 2004-12-16 21:12:29 UTC (rev 4236)
+++ trunk/source/auth/pampass.c 2004-12-16 21:12:35 UTC (rev 4237)
@@ -59,7 +59,7 @@
/*
* Macros to help make life easy
*/
-#define COPY_STRING(s) (s) ? strdup(s) : NULL
+#define COPY_STRING(s) (s) ? SMB_STRDUP(s) : NULL
/***
PAM error handler.
Modified: trunk/source/lib/sysquotas.c
===
--- trunk/source/lib/sysquotas.c2004-12-16 21:12:29 UTC (rev 4236)
+++ trunk/source/lib/sysquotas.c2004-12-16 21:12:35 UTC (rev 4237)
@@ -73,9 +73,9 @@
continue ;
if (S.st_dev == devno) {
- (*mntpath) = strdup(mnt-mnt_dir);
- (*bdev) = strdup(mnt-mnt_fsname);
- (*fs) = strdup(mnt-mnt_type);
+ (*mntpath) = SMB_STRDUP(mnt-mnt_dir);
+ (*bdev) = SMB_STRDUP(mnt-mnt_fsname);
+ (*fs) = SMB_STRDUP(mnt-mnt_type);
if ((*mntpath)(*bdev)(*fs)) {
ret = 0;
} else {
@@ -124,8 +124,8 @@
* but I don't know how
* --metze
*/
- (*mntpath) = strdup(path);
- (*bdev) = strdup(dev_disk);
+ (*mntpath) = SMB_STRDUP(path);
+ (*bdev) = SMB_STRDUP(dev_disk);
if ((*mntpath)(*bdev)) {
ret = 0;
} else {
@@ -152,7 +152,7 @@
(*bdev) = NULL;
(*fs) = NULL;
- (*mntpath) = strdup(path);
+ (*mntpath) = SMB_STRDUP(path);
if (*mntpath) {
ret = 0;
} else {
Modified: trunk/source/smbwrapper/smbw.c
===
--- trunk/source/smbwrapper/smbw.c 2004-12-16 21:12:29 UTC (rev 4236)
+++ trunk/source/smbwrapper/smbw.c 2004-12-16 21:12:35 UTC (rev 4237)
@@ -546,7 +546,7 @@
DEBUG(4,( tconx ok\n));
- srv = (struct smbw_server *)malloc(sizeof(*srv));
+ srv = SMB_MALLOC_P(struct smbw_server);
if (!srv) {
errno = ENOMEM;
goto failed;
@@ -558,25 +558,25 @@
srv-dev = (dev_t)(str_checksum(server) ^ str_checksum(share));
- srv-server_name = strdup(server);
+ srv-server_name = SMB_STRDUP(server);
if (!srv-server_name) {
errno = ENOMEM;
goto failed;
}
- srv-share_name = strdup(share);
+ srv-share_name = SMB_STRDUP(share);
if (!srv-share_name) {
errno = ENOMEM;
goto failed;
}
- srv-workgroup = strdup(workgroup);
+ srv-workgroup = SMB_STRDUP(workgroup);
if (!srv-workgroup) {
errno = ENOMEM;
goto failed;
}
- srv-username = strdup(username);
+ srv-username = SMB_STRDUP(username);
if (!srv-username) {
errno = ENOMEM;
goto failed;
@@ -664,7 +664,7 @@
return fd;
}
- file = (struct smbw_file *)malloc(sizeof(*file));
+ file = SMB_MALLOC_P(struct smbw_file);
if (!file) {
errno = ENOMEM;
goto failed;
@@ -672,7 +672,7 @@
ZERO_STRUCTP(file);
- file-f = (struct smbw_filedes *)malloc(sizeof(*(file-f)));
+ file-f = SMB_MALLOC_P(struct smbw_filedes);
if (!file-f) {
errno = ENOMEM;
goto failed;
@@ -681,7 +681,7 @@
ZERO_STRUCTP(file-f);
file-f-cli_fd = fd;
- file-f-fname = strdup(path);
+ file-f-fname = SMB_STRDUP(path);
if (!file-f-fname) {
errno = ENOMEM;
goto failed;
@@ -1288,7 +1288,7 @@
goto failed;
}
- file2 = (struct smbw_file *)malloc(sizeof(*file2));
+ file2 = SMB_MALLOC_P(struct smbw_file);
if (!file2) {
close(fd2);
errno = ENOMEM;
@@ -1340,7 +1340,7 @@
goto failed;
}
- file2 = (struct smbw_file *)malloc(sizeof(*file2));
+ file2 = SMB_MALLOC_P(struct smbw_file);
if (!file2) {
close(fd2);
errno = ENOMEM;
Modified: trunk/source/smbwrapper/smbw_cache.c
===
---
svn commit: samba r4238 - in branches/SAMBA_3_0/source/python: .
Author: jra
Date: 2004-12-16 21:14:08 + (Thu, 16 Dec 2004)
New Revision: 4238
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4238
Log:
More *alloc fixes.
Jeremy.
Modified:
branches/SAMBA_3_0/source/python/py_common.c
Changeset:
Modified: branches/SAMBA_3_0/source/python/py_common.c
===
--- branches/SAMBA_3_0/source/python/py_common.c2004-12-16 21:12:35 UTC
(rev 4237)
+++ branches/SAMBA_3_0/source/python/py_common.c2004-12-16 21:14:08 UTC
(rev 4238)
@@ -144,34 +144,34 @@
password_obj = PyDict_GetItemString(creds, password);
if (!username_obj) {
- *errstr = strdup(no username field in credential);
+ *errstr = SMB_STRDUP(no username field in credential);
return False;
}
if (!domain_obj) {
- *errstr = strdup(no domain field in credential);
+ *errstr = SMB_STRDUP(no domain field in credential);
return False;
}
if (!password_obj) {
- *errstr = strdup(no password field in credential);
+ *errstr = SMB_STRDUP(no password field in credential);
return False;
}
/* Check type of required fields */
if (!PyString_Check(username_obj)) {
- *errstr = strdup(username field is not string type);
+ *errstr = SMB_STRDUP(username field is not string
type);
return False;
}
if (!PyString_Check(domain_obj)) {
- *errstr = strdup(domain field is not string type);
+ *errstr = SMB_STRDUP(domain field is not string type);
return False;
}
if (!PyString_Check(password_obj)) {
- *errstr = strdup(password field is not string type);
+ *errstr = SMB_STRDUP(password field is not string
type);
return False;
}
@@ -226,7 +226,7 @@
username, domain, password, 0, Undefined, NULL);
if (!NT_STATUS_IS_OK(result)) {
- *errstr = strdup(error connecting to IPC$ pipe);
+ *errstr = SMB_STRDUP(error connecting to IPC$ pipe);
return NULL;
}
svn commit: samba r4240 - in trunk/source/lib: .
Author: jra
Date: 2004-12-16 21:16:41 + (Thu, 16 Dec 2004)
New Revision: 4240
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4240
Log:
More *alloc fixes.
Jeremy.
Modified:
trunk/source/lib/replace.c
Changeset:
Modified: trunk/source/lib/replace.c
===
--- trunk/source/lib/replace.c 2004-12-16 21:14:15 UTC (rev 4239)
+++ trunk/source/lib/replace.c 2004-12-16 21:16:41 UTC (rev 4240)
@@ -205,7 +205,7 @@
struct group *g;
char *gr;
- if((grouplst = (gid_t *)malloc(sizeof(gid_t) * max_gr)) == NULL) {
+ if((grouplst = SMB_MALLOC_ARRAY(gid_t, max_gr)) == NULL) {
DEBUG(0,(initgroups: malloc fail !\n));
return -1;
}
@@ -311,6 +311,11 @@
/
duplicate a string
/
+
+#ifdef strdup
+#undef strdup
+#endif
+
char *strdup(const char *s)
{
size_t len;
@@ -319,7 +324,7 @@
if (!s) return(NULL);
len = strlen(s)+1;
- ret = (char *)malloc(len);
+ ret = (char *)SMB_MALLOC(len);
if (!ret) return(NULL);
memcpy(ret,s,len);
return(ret);
svn commit: samba r4241 - in branches/SAMBA_3_0/source/lib: .
Author: jra
Date: 2004-12-16 21:16:48 + (Thu, 16 Dec 2004)
New Revision: 4241
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4241
Log:
More *alloc fixes.
Jeremy.
Modified:
branches/SAMBA_3_0/source/lib/replace.c
Changeset:
Modified: branches/SAMBA_3_0/source/lib/replace.c
===
--- branches/SAMBA_3_0/source/lib/replace.c 2004-12-16 21:16:41 UTC (rev
4240)
+++ branches/SAMBA_3_0/source/lib/replace.c 2004-12-16 21:16:48 UTC (rev
4241)
@@ -205,7 +205,7 @@
struct group *g;
char *gr;
- if((grouplst = (gid_t *)malloc(sizeof(gid_t) * max_gr)) == NULL) {
+ if((grouplst = SMB_MALLOC_ARRAY(gid_t, max_gr)) == NULL) {
DEBUG(0,(initgroups: malloc fail !\n));
return -1;
}
@@ -311,6 +311,11 @@
/
duplicate a string
/
+
+#ifdef strdup
+#undef strdup
+#endif
+
char *strdup(const char *s)
{
size_t len;
@@ -319,7 +324,7 @@
if (!s) return(NULL);
len = strlen(s)+1;
- ret = (char *)malloc(len);
+ ret = (char *)SMB_MALLOC(len);
if (!ret) return(NULL);
memcpy(ret,s,len);
return(ret);
svn commit: linux-cifs-client r20 - in branches/linux-2.4/fs/cifs: .
Author: sfrench Date: 2004-12-16 22:11:52 + (Thu, 16 Dec 2004) New Revision: 20 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=linux-cifs-clientrev=20 Log: Merge 2.6 1.28 version of cifs vfs backport to 2.4 Modified: branches/linux-2.4/fs/cifs/AUTHORS branches/linux-2.4/fs/cifs/CHANGES branches/linux-2.4/fs/cifs/README branches/linux-2.4/fs/cifs/TODO branches/linux-2.4/fs/cifs/asn1.c branches/linux-2.4/fs/cifs/cifs_debug.c branches/linux-2.4/fs/cifs/cifs_fs_sb.h branches/linux-2.4/fs/cifs/cifs_uniupr.h branches/linux-2.4/fs/cifs/cifsencrypt.c branches/linux-2.4/fs/cifs/cifsfs.c branches/linux-2.4/fs/cifs/cifsfs.h branches/linux-2.4/fs/cifs/cifsglob.h branches/linux-2.4/fs/cifs/cifspdu.h branches/linux-2.4/fs/cifs/cifsproto.h branches/linux-2.4/fs/cifs/cifssmb.c branches/linux-2.4/fs/cifs/misc.c branches/linux-2.4/fs/cifs/netmisc.c branches/linux-2.4/fs/cifs/ntlmssp.h branches/linux-2.4/fs/cifs/smbencrypt.c branches/linux-2.4/fs/cifs/smberr.h Changeset: Sorry, the patch is too large (6706 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=linux-cifs-clientrev=20
svn commit: samba r4242 - in branches/SAMBA_4_0/source/ntvfs/posix: .
Author: tridge Date: 2004-12-17 03:39:29 + (Fri, 17 Dec 2004) New Revision: 4242 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4242 Log: added support for storing xattrs in a tdb. This allows all advanced NT attributes (streams, EAs, NT ACLs, timestamps etc) to be used on filesystems that don't support xattrs. It also allows for large streams, although they are very inefficient. I won't enable this by default, as I really wrote it as a way of testing large stream support while still using ext3, but perhaps with a bit more work this could be generally usable. To enable this use: posix:eadb = /home/test/myeas.tdb Added: branches/SAMBA_4_0/source/ntvfs/posix/xattr_system.c branches/SAMBA_4_0/source/ntvfs/posix/xattr_tdb.c Modified: branches/SAMBA_4_0/source/ntvfs/posix/config.mk branches/SAMBA_4_0/source/ntvfs/posix/pvfs_open.c branches/SAMBA_4_0/source/ntvfs/posix/pvfs_unlink.c branches/SAMBA_4_0/source/ntvfs/posix/pvfs_xattr.c branches/SAMBA_4_0/source/ntvfs/posix/vfs_posix.c branches/SAMBA_4_0/source/ntvfs/posix/vfs_posix.h Changeset: Sorry, the patch is too large (628 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4242
svn commit: samba r4243 - in branches/SAMBA_4_0/source: include libcli/raw ntvfs/posix smb_server torture torture/raw
Author: tridge Date: 2004-12-17 04:51:23 + (Fri, 17 Dec 2004) New Revision: 4243 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4243 Log: a sniff from kukks showed that the ea_set interface in trans2 setfileinfo allows for multiple EAs to be set at once. This fixes all the ea code to allow for that. Modified: branches/SAMBA_4_0/source/include/smb_interfaces.h branches/SAMBA_4_0/source/libcli/raw/raweas.c branches/SAMBA_4_0/source/libcli/raw/rawsetfileinfo.c branches/SAMBA_4_0/source/ntvfs/posix/pvfs_mkdir.c branches/SAMBA_4_0/source/ntvfs/posix/pvfs_open.c branches/SAMBA_4_0/source/ntvfs/posix/pvfs_setfileinfo.c branches/SAMBA_4_0/source/smb_server/trans2.c branches/SAMBA_4_0/source/torture/gentest.c branches/SAMBA_4_0/source/torture/raw/eas.c branches/SAMBA_4_0/source/torture/torture_util.c Changeset: Sorry, the patch is too large (398 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4243
svn commit: samba r4244 - in branches/SAMBA_4_0/source/ntvfs/posix: .
Author: tridge
Date: 2004-12-17 05:03:57 + (Fri, 17 Dec 2004)
New Revision: 4244
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4244
Log:
add more calls to pvfs_xattr_unlink_hook() on file/dir create, to try to beat
race
conditions in the tdb xattr backend
Modified:
branches/SAMBA_4_0/source/ntvfs/posix/pvfs_mkdir.c
Changeset:
Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_mkdir.c
===
--- branches/SAMBA_4_0/source/ntvfs/posix/pvfs_mkdir.c 2004-12-17 04:51:23 UTC
(rev 4243)
+++ branches/SAMBA_4_0/source/ntvfs/posix/pvfs_mkdir.c 2004-12-17 05:03:57 UTC
(rev 4244)
@@ -49,6 +49,8 @@
return pvfs_map_errno(pvfs, errno);
}
+ pvfs_xattr_unlink_hook(pvfs, name-full_name);
+
status = pvfs_resolve_name(pvfs, req, md-t2mkdir.in.path, 0, name);
if (!NT_STATUS_IS_OK(status)) {
return status;
@@ -105,6 +107,8 @@
return pvfs_map_errno(pvfs, errno);
}
+ pvfs_xattr_unlink_hook(pvfs, name-full_name);
+
return NT_STATUS_OK;
}
svn commit: samba-web r475 - in trunk: . scripts
Author: deryck
Date: 2004-12-17 05:40:26 + (Fri, 17 Dec 2004)
New Revision: 475
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=475
Log:
Fixing my mirrors script to do a us mirror redirect again.
Adding back the redirect page for the same reason.
--deryck
Added:
trunk/redirect_us.html
Modified:
trunk/scripts/js_redirect.py
Changeset:
Added: trunk/redirect_us.html
===
--- trunk/redirect_us.html 2004-12-16 15:35:06 UTC (rev 474)
+++ trunk/redirect_us.html 2004-12-17 05:40:26 UTC (rev 475)
@@ -0,0 +1,30 @@
+html
+
+head
+
+titleSamba -- Opening Windows to a Wider World/title
+
+meta http-equiv=Content-Type content=text/html; charset=utf-8 /
+meta http-equiv=Content-Language content=en-us /
+meta name=keywords content=Samba SMB CIFS /
+meta name=description content=Home of Samba, the SMB file server /
+
+!--#include virtual=/samba/redirect_include.html --
+
+/head
+
+
+body onload=javascript:window.location=randomMirror[n]
+noscript
+h2Samba -- Opening Windows to a Wider World/h2
+h3Please choose a mirror/h3
+
+h4For the samba.org web site:/h4
+!--#include virtual=/samba/web_hosts.html --
+
+h4For download ftp sites:/h4
+!--#include virtual=/samba/ftp_hosts.html --
+/noscript
+/body
+/html
+
Modified: trunk/scripts/js_redirect.py
===
--- trunk/scripts/js_redirect.py2004-12-16 15:35:06 UTC (rev 474)
+++ trunk/scripts/js_redirect.py2004-12-17 05:40:26 UTC (rev 475)
@@ -1,23 +1,46 @@
#! /usr/bin/python
+#
+# js_redirect.ps -- setup by Deryck Hodge [EMAIL PROTECTED]
+# to run via cron every hour on dp.
+#
+# This does two things:
+# 1) Create the list of options for the select-a-mirror drop-down menu, and
+# 2) generate the Javascript to redirect samba.org to a random US mirror.
+#
-# Create list of options for mirrors drop-down menu
-
import os, re
os.chdir('/data/httpd/html/samba')
hosts = open('web_hosts.html', 'r').readlines()
mirrors = []
+us_mirrors = []
for line in hosts:
if line[:4] == 'li':
parts = re.match('lia href=(.*)samba.html(.*)/a', line)
# Make list of mirror_name/url pairs to preserve web_hosts sort.
mirrors.append((parts.group(2), parts.group(1)))
+# While we're here, get the US mirrors on their own
+if re.match('lia href=(.*)samba.htmlUSA/a', line):
+us_mirrors.append(re.match('lia href=(.*)samba.htmlUSA/a',
line).group(1))
-# For drop-down mirror selection list
+# Write all mirrors to drop-down menu
menu = open('menu_options.html', 'w')
for m in mirrors:
menu.write('option value=' + m[1] + '' + m[0] + '/option\n')
menu.close()
+us_mirrors.sort
+# Write the js for a US mirror redirect
+js = open('redirect_include.html', 'w')
+js.write('script language=Javascript type=text/javascript\n')
+js.write('!-- Hide from old browsers\n')
+js.write('randomMirror = new Array;\n')
+for i in range(len(us_mirrors)):
+js.write('randomMirror[' + str(i) + '] = ' + us_mirrors[i] + '\n')
+js.write('\n')
+js.write('n = Math.floor(Math.random()*' + str(len(us_mirrors)) + ')\n')
+js.write('// end hide --\n')
+js.write('/script')
+js.close()
svn commit: samba r4245 - in branches/SAMBA_4_0: .
Author: tridge Date: 2004-12-17 06:32:04 + (Fri, 17 Dec 2004) New Revision: 4245 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4245 Log: add a note about using a tdb to store xattr information, so you can have all Samba4 features on a plain posix filesystem. Modified: branches/SAMBA_4_0/howto.txt Changeset: Modified: branches/SAMBA_4_0/howto.txt === --- branches/SAMBA_4_0/howto.txt2004-12-17 05:03:57 UTC (rev 4244) +++ branches/SAMBA_4_0/howto.txt2004-12-17 06:32:04 UTC (rev 4245) @@ -107,12 +107,18 @@ smbclient //localhost/test -Uadministrator%SOMEPASSWORD or - ./script/tests/test_posix.sh //localhost/test administrator -SOMEPASSWORD + ./script/tests/test_posix.sh //localhost/test administrator SOMEPASSWORD Note that to pass all the tests you would need to be using a filesystem with user_xattr support. On many Linux systems with an ext3 filesystem this means mounting with the -o user_xattr option. Consult your filesystem and kernel docs for more details. +If you don't have a filesystem with xattr support, then you can +simulate it by using the option: + posix:eadb = /usr/local/samba/eadb.tdb + +that will place all extra file attributes (NT ACLs, DOS EAs, streams +etc), in that tdb. It is not efficient, and doesn't scale well, but at +least it gives you a choice when you don't have a modern filesystem.
svn commit: samba r4246 - in branches/SAMBA_4_0: .
Author: tridge Date: 2004-12-17 06:34:13 + (Fri, 17 Dec 2004) New Revision: 4246 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4246 Log: some very brief notes to myself on solving the case insensitivity problem, and the del *.* mangling problem. I promised jra that I would write a longer description of these soon. Modified: branches/SAMBA_4_0/prog_guide.txt Changeset: Modified: branches/SAMBA_4_0/prog_guide.txt === --- branches/SAMBA_4_0/prog_guide.txt 2004-12-17 06:32:04 UTC (rev 4245) +++ branches/SAMBA_4_0/prog_guide.txt 2004-12-17 06:34:13 UTC (rev 4246) @@ -764,3 +764,18 @@ trans2 and other calls handle servers that don't have the setattre call in torture add max file coponent length test and max path len test + +case-insenstive idea: + all filenames on disk lowercase + real case in extended attribute + keep cache of what dirs are all lowercase + when searching for name, don't search if dir is definately all lowercase + when creating file, use dnotify to tell if someone else creates at + same time + +solve del *.* idea: + make mangle cache dynamic size + fill during a dir scan + setup a timer + destroy cache after 30 sec + destroy if a 2nd dir scan happens on same dir
svn commit: samba r4247 - in branches/SAMBA_4_0/source/ntvfs/posix: .
Author: tridge
Date: 2004-12-17 06:35:11 + (Fri, 17 Dec 2004)
New Revision: 4247
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4247
Log:
two more places that need the unlink hook
Modified:
branches/SAMBA_4_0/source/ntvfs/posix/pvfs_open.c
Changeset:
Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_open.c
===
--- branches/SAMBA_4_0/source/ntvfs/posix/pvfs_open.c 2004-12-17 06:34:13 UTC
(rev 4246)
+++ branches/SAMBA_4_0/source/ntvfs/posix/pvfs_open.c 2004-12-17 06:35:11 UTC
(rev 4247)
@@ -202,6 +202,9 @@
if (mkdir(name-full_name, mode) == -1) {
return pvfs_map_errno(pvfs,errno);
}
+
+ pvfs_xattr_unlink_hook(pvfs, name-full_name);
+
status = pvfs_resolve_name(pvfs, req, io-ntcreatex.in.fname,
0, name);
if (!NT_STATUS_IS_OK(status)) {
return status;
@@ -436,6 +439,8 @@
return pvfs_map_errno(pvfs, errno);
}
+ pvfs_xattr_unlink_hook(pvfs, name-full_name);
+
/* if this was a stream create then create the stream as well */
if (name-stream_name) {
status = pvfs_stream_create(pvfs, name, fd);
svn commit: samba-web r470 - in trunk: history security
Author: jerry Date: 2004-12-16 11:59:25 + (Thu, 16 Dec 2004) New Revision: 470 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=470 Log: adding notes for 3.0.10 Added: trunk/history/samba-3.0.10.html trunk/security/CAN-2004-1154.html Modified: trunk/history/security.html Changeset: Sorry, the patch is too large (3349 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=470
svn commit: samba-web r473 - in trunk: . devel history news/releases style
Author: deryck Date: 2004-12-16 15:22:17 + (Thu, 16 Dec 2004) New Revision: 473 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=473 Log: Adding 3.0.10 announcement to news. Also, lots of related house cleaning: moving 3.0.9 to history, adding last few release notes to history header, updating 'current stable' notes here and there, and a little CSS tweak to release notes column on the history page. --deryck Added: trunk/news/releases/3.0.10.html Modified: trunk/devel/index.html trunk/header2.html trunk/history/header_history.html trunk/history/index.html trunk/index.html trunk/style/history.css Changeset: Modified: trunk/devel/index.html === --- trunk/devel/index.html 2004-12-16 12:37:42 UTC (rev 472) +++ trunk/devel/index.html 2004-12-16 15:22:17 UTC (rev 473) @@ -13,7 +13,7 @@ pAs of 4 April 2004, the Samba Team converted from CVS to Subversion for maintaining the Samba source code. All current development is done in a Subversion repository. All older code is in the original CVS tree; this would include 2.2.x versions of Samba, which are no longer in active development./p -pThe latest stable release is emSamba 3.0.8/em (a href=/samba/history/samba-3.0.8.htmlrelease notes/a and a href=/samba/download/download/a). The next major stable release will be emSamba 3.2/em. A release date has yet to be projected for 3.2, but it will be made available when the current development branch, Samba 3.1, becomes stable. Samba 4, an ambitious reworking of the Samba code, is being developed concurrently with Samba3./p +pThe latest stable release is emSamba 3.0.10/em (a href=/samba/history/samba-3.0.10.htmlrelease notes/a and a href=/samba/download/download/a). The next major stable release will be emSamba 3.2/em. A release date has yet to be projected for 3.2, but it will be made available when the current development branch, Samba 3.1, becomes stable. Samba 4, an ambitious reworking of the Samba code, is being developed concurrently with Samba3./p br / Modified: trunk/header2.html === --- trunk/header2.html 2004-12-16 12:37:42 UTC (rev 472) +++ trunk/header2.html 2004-12-16 15:22:17 UTC (rev 473) @@ -135,9 +135,9 @@ div class=releases h4Current Stable Releases/h4 ul -lia href=/samba/ftp/samba-3.0.9.tar.gzSamba 3.0.9 (gzipped)/a/li -lia href=/samba/history/samba-3.0.9.htmlRelease Notes/a/li -lia href=/samba/ftp/stable/samba-3.0.9.tar.ascSignature/a/li +lia href=/samba/ftp/samba-3.0.10.tar.gzSamba 3.0.10 (gzipped)/a/li +lia href=/samba/history/samba-3.0.10.htmlRelease Notes/a/li +lia href=/samba/ftp/stable/samba-3.0.10.tar.ascSignature/a/li /ul ul Modified: trunk/history/header_history.html === --- trunk/history/header_history.html 2004-12-16 12:37:42 UTC (rev 472) +++ trunk/history/header_history.html 2004-12-16 15:22:17 UTC (rev 473) @@ -84,6 +84,9 @@ div class=notes h6Release Notes/h6 ul +lia href=samba-3.0.10.htmlsamba-3.0.10.html/a/li +lia href=samba-3.0.9.htmlsamba-3.0.9.html/a/li +lia href=samba-3.0.8.htmlsamba-3.0.8.html/a/li lia href=samba-3.0.7.htmlsamba-3.0.7.html/a/li lia href=samba-3.0.6.htmlsamba-3.0.6.html/a/li lia href=samba-3.0.5.htmlsamba-3.0.5.html/a/li Modified: trunk/history/index.html === --- trunk/history/index.html2004-12-16 12:37:42 UTC (rev 472) +++ trunk/history/index.html2004-12-16 15:22:17 UTC (rev 473) @@ -6,8 +6,8 @@ div class=latest ul - liLatest Release mdash; a href=/samba/index.html#latestSamba 3.0.9/a/li - liCurrent Stable Release mdash; a href=/samba/index.html#latestSamba 3.0.9/a/li + liLatest Release mdash; a href=/samba/index.html#latestSamba 3.0.10/a/li + liCurrent Stable Release mdash; a href=/samba/index.html#latestSamba 3.0.10/a/li !-- Second link will point to #stable on this page when current release is a development release -- /ul /div @@ -16,7 +16,25 @@ h2Previous Release Announcments/h2 +h4a19 November 2004/a/h4 +p class=headlineSamba 3.0.9 Available for Download/p +pSamba 3.0.9 is the latest stable +release of Samba, and is the version that production servers should +be running for all current bug-fixes. There have been several +important issues fixed since the 3.0.8 release. +(a href=/samba/history/samba-3.0.9.htmlrelease notes/a)/p + +pThe a href=/samba/ftp/samba-3.0.9.tar.gzSamba 3.0.9 +source code/a can be downloaded now. +The a href=/samba/ftp/stable/samba-3.0.9.tar.ascGnuPG +signature for the uncompressed tarball/a is also available. +Precompiled packages for various platforms are available in the +a
svn commit: samba r4239 - in trunk/source/python: .
Author: jra
Date: 2004-12-16 21:14:15 + (Thu, 16 Dec 2004)
New Revision: 4239
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4239
Log:
More *alloc fixes.
Jeremy.
Modified:
trunk/source/python/py_common.c
Changeset:
Modified: trunk/source/python/py_common.c
===
--- trunk/source/python/py_common.c 2004-12-16 21:14:08 UTC (rev 4238)
+++ trunk/source/python/py_common.c 2004-12-16 21:14:15 UTC (rev 4239)
@@ -144,34 +144,34 @@
password_obj = PyDict_GetItemString(creds, password);
if (!username_obj) {
- *errstr = strdup(no username field in credential);
+ *errstr = SMB_STRDUP(no username field in credential);
return False;
}
if (!domain_obj) {
- *errstr = strdup(no domain field in credential);
+ *errstr = SMB_STRDUP(no domain field in credential);
return False;
}
if (!password_obj) {
- *errstr = strdup(no password field in credential);
+ *errstr = SMB_STRDUP(no password field in credential);
return False;
}
/* Check type of required fields */
if (!PyString_Check(username_obj)) {
- *errstr = strdup(username field is not string type);
+ *errstr = SMB_STRDUP(username field is not string
type);
return False;
}
if (!PyString_Check(domain_obj)) {
- *errstr = strdup(domain field is not string type);
+ *errstr = SMB_STRDUP(domain field is not string type);
return False;
}
if (!PyString_Check(password_obj)) {
- *errstr = strdup(password field is not string type);
+ *errstr = SMB_STRDUP(password field is not string
type);
return False;
}
@@ -226,7 +226,7 @@
username, domain, password, 0, Undefined, NULL);
if (!NT_STATUS_IS_OK(result)) {
- *errstr = strdup(error connecting to IPC$ pipe);
+ *errstr = SMB_STRDUP(error connecting to IPC$ pipe);
return NULL;
}
