Re: [Samba] really needs help on compiling samba 3.0.9 with ldap
IT WORKED, thanks for the help no I can finally start setting up samba for LDAP authentication instead of trying to compile it, Thanks again - Original Message - From: Gémes Géza [EMAIL PROTECTED] To: Adi Nugraha [EMAIL PROTECTED] Cc: Paul Gienger [EMAIL PROTECTED]; samba@lists.samba.org Sent: Wednesday, January 05, 2005 2:17 PM Subject: Re: [Samba] really needs help on compiling samba 3.0.9 with ldap already did and this is what I got : Builtin modules: pdb_smbpasswd pdb_tdbsam pdb_guest rpc_lsa rpc_reg rpc_lsa_ds rpc_wks rpc_net rpc_dfs rpc_srv rpc_spoolss rpc_samr idmap_tdb auth_rhosts auth_sam auth_unix auth_winbind auth_server auth_domain auth_builtin and I don't see any LDAP module built in, I decided to recompile it because when i tried pdbedit on a LDAP backend, samba shows that it was unable to find the ldap module, so can anyone help me with this issue, and as I've said I'm running Mandrake 9.1, the documentation doesn't seem to have anything specific to Mandrake thanks - Original Message - From: Paul Gienger [EMAIL PROTECTED] To: Adi Nugraha [EMAIL PROTECTED] Cc: thomas constans [EMAIL PROTECTED]; samba@lists.samba.org Sent: Wednesday, January 05, 2005 10:29 AM Subject: Re: [Samba] really needs help on compiling samba 3.0.9 with ldap I compiled it just to make sure that there is ldap support in this installations, my previous installations didn't have ldap support because I was unable to compile with ldap activated Rather than going through all the pain of possibly unnecessarily compiling, first try running smbd -b and grep for LDAP. This will tell you for sure what you've got compiled in. -- -- Paul GiengerOffice: 701-281-1884 Applied Engineering Inc. Systems Architect Fax:701-281-1322 URL: www.ae-solutions.com mailto: [EMAIL PROTECTED] My suggestion (Mandrake 9.2/10.0/10.1 mixture here): Download the samba source RPM (samba-3.0.10) from one of the cooker mirrors. Take care to have the development tools, plus libacl-devel, libattr-devel, libkrb5-devel, libldap-devel installed. Rebuild the source RPM, and you should have it. Good Luck! Geza -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: XP delete problem
I think it depends on your Samba version. We also had this problem using Samba2. Mircosoft changed the behaviour of the mbx driver (Hotfix Q812937) since XP SP2. Increase your log level and look for lines : map_share_mode: DELETE_ACCESS requested Older Samba versions cannot deal with this attribute. Regards M.Schlett -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] acl quotas
Thanks John for your answer. I installed Debian sarge 3.1 rc1 with kernel 2.6, XFS and quota. This works fine, i didn't have to recompile anyhing. But know i try the ACL. If i understood your message, i have to recompile the kernel, right ? What is EA, i just don't know what it is. Thxs John H Terpstra a écrit : On Tuesday 04 January 2005 01:48, Patrick DUBAU wrote: Hi, i'm about to reinstall samba 3.7 on debian sarge with quota and acl support. What is the best file system to use : ext3 or xfs ? Does i have to compile the kernel for having the quota and acl support ? On 2.4 kernel you need to patch in the best-bits ACLs and EA patches. The 2.6 kernel has them already. It is necessary to activate the ACLs and EA capabilities before building the kernel. Cheers, John T. -- Patrick DUBAU IUFM d'Alsace - Service Informatique : Parfois détruire, souvent construire, toujours Servir 200 avenue de Colmar 67100 STRASBOURG Téléphone: 03.88.40.79.76 -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba, AD and NIS
Hi, I'm trying to do this thing : Put some acl from a windows Workstation on a samba-shared file. When i press apply, everything disapear... System : FedoraCore2, samba-3.10-1.fc2. I place the samba-server in a Win2K3 domain (net ads join) and in the NIS domain (domainname and conf the nsswitch). The mapping works greatly until i try to put another right access on files/directories... Here's is my log file, i don't understand why he's giving the name of the pc instead of the user... [2005/01/04 16:27:14, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username DOMAIN.INSA\pc-ipti17$ is invalid on this system [2005/01/04 16:27:14, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username DOMAIN.INSA\pc-ipti17$ is invalid on this system Thanks a lot for helping me, i'm not really a samba-expert and i maybe do it the wrong way... Roderick. -- === # Roderick Petetin# # CRI - INSA Rennes # # # # [EMAIL PROTECTED] # === -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PDC and guest access
On Tuesday 4 January 2005 12:38 Ilia Chipitsine's cat walking on the keyboard wrote: Hi, is it possible to prepare a share with guest access (i.e., without username and password) on a server that is playing as PDC (i.e., security=user)? The security setting is global, thus it's like not possible, but I'm not sure. Thanks, Luca map to guest = bad user will do the job The map to guest option is global, while I'm searching for a way to make guesting a single share, not the whole samba. Furthermore, can anybody tell me why my configuration for host equiv seems not to work? In the config file I've the following line: host equiv = /etc/hosts.equiv and in the hosts.equiv file I've got: s88 (being s88 the name of the window machine, also listed in the /etc/hosts file). When I try to connect thru the s88 machine, I'm requested to put a password, while the machine should access anonymously. Any idea? Thanks, Luca -- Luca Ferrari, [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Article about Samba for Software 2.0 Extra!
Hello, We are currently working on an issue of Software 2.0 Extra! magazine devoted exclusively to programming in Linux. We want to show our readers, how to programming in Linux and show them interesting projects about this problem. Also we want to show them usefull tools, which make his work more simply. I think it would be great if we could including your or somebody from Samba-teams article about Samba. It may be something very easy, like installation configuration, with some your tips. Of course, we including Samba into cover CD, which will be added to our magazine. Now is my question: would you be interested in writing an article about Samba? On the technical side, the planned length of the article would be around 3 characters (about 6 pages in print) with some listing of codes, screen-shots. The deadline for the final version is 13.01.2005. Our magazine appears in four language versions: Polish (Poland), French (France, Belgium, Canada), German (Germany, Austria, Switzerland) and Spanish (Spain, Portugal) with a total circulation of about 3. Each issue is devoted to a different area of IT, with a general focus on programming. Please let me know if you are interested in cooperating with us on this issue, so we can start working on the text as soon as possible. Best regards, Dawid Federowicz Editor in Chief Software 2.0 Extra! -- Software-Wydawnictwo Sp. z o.o. ul. Lewartowskiego 6, 00-190 Warszawa POLAND tel.: +48 22 860-17-60 fax.: +48 22 860-17-71 http://www.software20.org [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PDC and guest access
On Tuesday 4 January 2005 12:38 Ilia Chipitsine's cat walking on the keyboard wrote: Hi, is it possible to prepare a share with guest access (i.e., without username and password) on a server that is playing as PDC (i.e., security=user)? The security setting is global, thus it's like not possible, but I'm not sure. Thanks, Luca map to guest = bad user will do the job The map to guest option is global, while I'm searching for a way to make guesting a single share, not the whole samba. Furthermore, can anybody tell put guest ok = no for those shares which You don't want to provide guest access to. guest ok = yes to those shares which You wish to be accessed as guest. me why my configuration for host equiv seems not to work? In the config file I've the following line: host equiv = /etc/hosts.equiv and in the hosts.equiv file I've got: s88 (being s88 the name of the window machine, also listed in the /etc/hosts file). When I try to connect thru the s88 machine, I'm requested to put a password, while the machine should access anonymously. Any idea? Thanks, Luca -- Luca Ferrari, [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA - Domain function levels (resent)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christopher Peter Welsh wrote: | Hi, | | Re-sent this; sorry, it came from my other account and it was not | subscribed to this list. | | I'm gonna have to be putting a good argument to my ICT team against | going to 2003 in 2003 server mode ( I think thats what they call the | highest mode for 2003 server) to keep samba at our school. I like what | windows 2003 has to offer, but do not want to lock samba out forever. | I know samba will work at lower mode. And that's what I'm pushing. Samba 3.0.x will work with the windows 2003 functional level. The difference between the 200 func. level and 2003 is most schema differences and some new features for manipulating entries in AD IIRC. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB2+u3IR7qMdg1EfYRAloxAJ40Iv3aQEuTxPP3xYfLWT/jq1s9pgCglHq9 9578aFS8zfAE5C8I4Kiv2o4= =mADh -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Turkish character problem
Hi; I use Solaris 5.9 with Samba 2.2.8a. I have changed my codepage to 857 and character set to 8859-9. I do not copy files between solaris and windows. I use samba to print text files from solaris server to windows Xp share printers. I can see and edit the text files inside with turkish characters in solaris. But when i print it from windows share printers, turkish characters does not appear on the page. What can i do for it. Sorry for my english. Thanks. Oguz. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Article about Samba for Software 2.0 Extra!
We are currently working on an issue of Software 2.0 Extra! magazine devoted exclusively to programming in Linux. We want to show our readers, how to programming in Linux and show them interesting projects about this problem. Also we want to show them usefull tools, which make his work more simply. I think it would be great if we could including your or somebody from Samba-teams article about Samba. It may be something very easy, like installation configuration, with some your tips. Of course, we including Samba into cover CD, which will be added to our magazine. Now is my question: would you be interested in writing an article about Samba? Since the emphasis is on programming how about an article concerning what is possible with some of the bindings? I think there is a binding to libsmb for Python in the samba source? I see almost nothing about actual use of these and I for one am curious to know more and what (if anything) these bindings can actually be used for. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] cant logon when i change winxp hostname
(excuse for my bad english) When I change WinXP hostname (both hostnames are in my hosts-list in ldap) I can´t logon onto domain. Now, when I use original hostname I logon successfully. I use samba 3.0.1pre1 Is this a bug ?! Leandro. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem installing printer driver wiht samba
Hi, I'm trying to install the printer drivers of my HP Inkjet 3000 PS Printer on a linux running samba and lprng. So far configuration of samba seems correct (working print$ and so on), but the adddriver command issued cia rpcclient terminates with NT_STATUS_UNSUCEDDFULL. So far my search in the web was unsucessful. I think I have correctly traced the problem via the samba log to the following lines: [2005/01/05 14:13:27, 2] smbd/open.c:open_file(246) TIGALCH opened file W32X86/HPBF322G.DLL read=Yes write=No (numopen=1) [2005/01/05 14:13:27, 6] printing/nt_printing.c:get_file_version(723) get_file_version: File [W32X86/HPBF322G.DLL] bad DOS magic = 0x5a53 [2005/01/05 14:13:27, 6] printing/nt_printing.c:get_correct_cversion(1134) get_correct_cversion: Version info not found [W32X86/HPBF322G.DLL] [2005/01/05 14:13:27, 2] smbd/close.c:close_normal_file(229) tigalch closed file W32X86/HPBF322G.DLL (numopen=0) First the DLL is opened, then the application wants to get the DLL-version, which does not sucedd, and therefore terminates. any hints would be welcome! thanks and regards Christoph -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] 3.0.10 with printing patch, NULL devmode, failing to fetch tdb and buffer overflow
Hi Jerry, hi @all, some users with 3.0.10 with printing patch have problems with old printjobs in her status monitor in windows. Loglevel 10 shows two problems: 1. The devmode for this printer was not set properly (I know, thiswill cause problems). log.smbd: [2005/01/05 14:02:09, 8] rpc_parse/parse_spoolss.c:smb_io_reldevmode(2407) boing, the devmode was NULL 2. A buffer overflow is logged. log.smbd: [2005/01/05 14:02:09, 5] smbd/ipc.c:send_trans_reply(91) send_trans_reply: buffer 1024 too large [2005/01/05 14:02:09, 3] smbd/error.c:error_packet(129) error packet at smbd/ipc.c(99) cmd=37 (SMBtrans) STATUS_BUFFER_OVERFLOW [2005/01/05 14:02:09, 5] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..1024] Is this a risk? Is it possible to avoid this even if the devmode is not set? Is this the reason for the failed fetching of the tdb?: [2005/01/05 12:53:03, 0] smbd/connection.c:register_message_flags(220) register_message_flags: tdb_fetch failed der tom __ Mit WEB.DE FreePhone mit hoechster Qualitaet ab 0 Ct./Min. weltweit telefonieren! http://freephone.web.de/?mc=021201 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] password server not failing over
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | In my smb.conf, I have 2 servers specified in password server | | E.g. | | password server = windc01, windc02 | | | windc01 crashed, and Samba did not fail over to the | second entry (windc02). Netbios/WINS resolution is | correct for both servers. The log entry corresponding | to this event was Connection to lost. Is this | expected behavior? | | smbd -V = Version 3.0.9-1 The failover happens for new connections where trhe first server in the list cannot be contacted. Not for existing connections. | | | [global] | workgroup = WinDomain | netbios aliases = servername0 | security = server security = server is deprecated (just so you know). Use security = domain instead. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB2/0GIR7qMdg1EfYRAmHzAKDsdqiTTQHdgRcagmiFaBfq0vnPfgCg0SSV sn4AVg/ZqCXBYLO6245xWzQ= =12C8 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] problems includind a samba server in a 2003 network
On 4 Jan, Pierre Le SIDANER wrote: Hello I am brand new on samba server I am trying to put a samba server in a windows 2003 domain the autentification have to be done by the 2003 AD, and my configuration does not work my samba version is samba-3.0.10-1 on redhat as i try to access samba server from a xp on the domain it does not work i have try to access the pdc with ads laurel with net join from the samba server with an acount Pierre_admin on the AD witch is administrator and it does not work [EMAIL PROTECTED] etc]# net join -S laurel.obspm.fr -U Pierre_admin%toto [2005/01/04 16:25:43, 0] libads/kerberos.c:ads_kinit_password(146) kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot find KDC for requested realm [2005/01/04 16:25:43, 0] utils/net_ads.c:ads_startup(186) ads_connect: Cannot find KDC for requested realm [2005/01/04 16:25:43, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(256) cli_nt_setup_creds: request challenge failed [2005/01/04 16:25:43, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(256) cli_nt_setup_creds: request challenge failed [2005/01/04 16:25:43, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(319) Error domain join verification (reused connection): NT_STATUS_INVALID_COMPUTER_NAME I give you my smb.conf config, thank you for some help [global] workgroup = SERVICES The first part of the 'net join' error is probably due to kerberos misconfiguration. Check the default_realm on krb5.conf is your domain name and/or fill the [realms] section with proper values. I might also recommend you to add 'realm = DOMAIN' and 'use kerberos keytab = yes' to smb.conf In my case, to add a machine (stock FC3 updated) to the domain I execute $ kinit Administrator $ net ads join and you get the machine on the domain and HOST/CIFS keys on krb5.keytab Javier Palacios This e-mail message and any attached files are intended SOLELY for the addressee/s identified herein. It may contain CONFIDENTIAL and/or LEGALLY PRIVILEGED information and may not necessarily represent the opinion of this company. If you receive this message in ERROR, please immediately notify the sender and DELETE it since you ARE NOT AUTHORIZED to use, disclose, distribute, print or copy all or part of the contained information. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] slow network for windows 9x samba 3.0.10
Hello, I experimented a slow network access for windows 9x and no problem for windows 200 with samba 3.0.10 version After some search, I find the printing.patch for 3.0.10. But this patch correct this problem or not. Thank you Stéphane Purnelle --- Stéphane PURNELLE [EMAIL PROTECTED] Service Informatique Corman S.A. Tel : 00 32 087/342467 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] second samba problem
Hello, second problem just arrised: The same user from the same host can print via samba/lprng using windows 98. If windows xp is booted on the same host/ip, samba returns: [2005/01/05 16:21:59, 3] rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(1181) access DENIED for printer open any hints regards Christoph Galuschka TI.KOM Tirol Kommunikation GmbH Eduard-Wallnöfer-Platz 2 A-6010 Innsbruck Neuer Markt 1/2 A-1010 Wien Ing. Christoph Galuschka Lead Consultant Tel.: +43 512 902 2832 Fax: +43 512 902 2850 Mobil: +43 676 666 2832 eMail: [EMAIL PROTECTED] http://www.tikom.at --- This email is confidential and may also be legally privileged. If you have received this email in error, you are in notice of its status. Please notify the sender immediately by reply e-mail and then delete this message from your system. Please do not copy or use it for any purposes, or disclose its contents to any other person: to do so could be a breach of confidence. Thank you for your co-operation. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of TI.KOM Tirol Kommunikation GmbH. Please contact our Office on +43 512 902 2801 or +43 1 902 2841 or e-mail [EMAIL PROTECTED] if you require further assistance. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] second samba problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christoph Galuschka wrote: | Hello, | | second problem just arrised: | The same user from the same host can print via samba/lprng | using windows 98. If windows xp is booted on the same | host/ip, samba returns: | [2005/01/05 16:21:59, 3] | rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(1181) | access DENIED for printer open crystal ball says Either install the drivers on the Samba servers and use the point-n-print support, or read the description of the 'user client driver' option in the smb.conf(5) man page. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3AiCIR7qMdg1EfYRAi8qAKCuPT6dO9Zkb6RHkdGSLK1TwPVhGACfeacw zNNHWhRcoNGjirCQ04e7r4I= =fLrs -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] ls error on mounted share
Hi there System: Samba 3.0.10 Gentoo Linux 2.6.9-gentoo-r12 gcc version 3.3.4 I am mounting a windows share. In one specific directory on the share, samba 95% does not list the files but gives a kernel error in syslog namely: kernel: smb_proc_readdir_long: error=-2, breaking This only happens in this directory. The share structure for the directory is \\xena\shared\Working Documents. Other directories with spaces work perfectly. It is only this directory. I have searched the list archives and came across one person who had the same problem but seems to have disappeared without much correspondence. Any ideas. Regards Ray Booysen -- Ray Booysen [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
(Fwd) Re: [Samba] second samba problem
Hello, the problem with this error is, allthough I tried both settings, I upgraded from 2.2.3a to 2.2.12 because of a bug in rpcclient - adddriver. The configuration is still untouched. Even when I switch back to 2.2.3a it doesn't work. And now the funny thing, I have a second box which is configured/compiled exactly the same way as the first one, and on this box it works regards Christoph --- Forwarded message follows --- Date sent: Wed, 05 Jan 2005 09:32:18 -0600 From: Gerald (Jerry) Carter [EMAIL PROTECTED] To: [EMAIL PROTECTED] Copies to: samba@lists.samba.org Subject:Re: [Samba] second samba problem -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christoph Galuschka wrote: | Hello, | | second problem just arrised: | The same user from the same host can print via samba/lprng | using windows 98. If windows xp is booted on the same | host/ip, samba returns: | [2005/01/05 16:21:59, 3] | rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(1181) | access DENIED for printer open crystal ball says Either install the drivers on the Samba servers and use the point-n-print support, or read the description of the 'user client driver' option in the smb.conf(5) man page. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3AiCIR7qMdg1EfYRAi8qAKCuPT6dO9Zkb6RHkd GSLK1TwPVhGACfeacw zNNHWhRcoNGjirCQ04e7r4I= =fLrs -END PGP SIGNATURE- --- End of forwarded message --- TI.KOM Tirol Kommunikation GmbH Eduard-Wallnöfer-Platz 2 A-6010 Innsbruck Neuer Markt 1/2 A-1010 Wien Ing. Christoph Galuschka Lead Consultant Tel.: +43 512 902 2832 Fax: +43 512 902 2850 Mobil: +43 676 666 2832 eMail: [EMAIL PROTECTED] http://www.tikom.at --- This email is confidential and may also be legally privileged. If you have received this email in error, you are in notice of its status. Please notify the sender immediately by reply e-mail and then delete this message from your system. Please do not copy or use it for any purposes, or disclose its contents to any other person: to do so could be a breach of confidence. Thank you for your co-operation. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of TI.KOM Tirol Kommunikation GmbH. Please contact our Office on +43 512 902 2801 or +43 1 902 2841 or e-mail [EMAIL PROTECTED] if you require further assistance. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Master domain browser after IP change?
Marc Sherman wrote: I just renumbered my local network, from 192.168.1/24 to 192.168.23/24. My samba 3.0.10 server, which is configured to be the local and master domain browser, seems to be a bit confused: Jan 4 22:03:34 pyloric nmbd[2308]: [2005/01/04 22:03:34, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327) Jan 4 22:03:34 pyloric nmbd[2308]: become_domain_master_browser_wins: Jan 4 22:03:34 pyloric nmbd[2308]: Attempting to become domain master browser on workgroup PROJECTILE_WRK, subnet UNICAST_SUBNET. Jan 4 22:03:34 pyloric nmbd[2308]: [2005/01/04 22:03:34, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341) Jan 4 22:03:34 pyloric nmbd[2308]: become_domain_master_browser_wins: querying WINS server from IP 192.168.23.5 for domain master browser name PROJECTILE_WRK1b on workgroup PROJECTILE_WRK Jan 4 22:03:34 pyloric nmbd[2308]: [2005/01/04 22:03:34, 0] nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225) Jan 4 22:03:34 pyloric nmbd[2308]: become_domain_master_query_success: Jan 4 22:03:34 pyloric nmbd[2308]: There is already a domain master browser at IP 192.168.1.5 for workgroup PROJECTILE_WRK registered on subnet UNICAST_SUBNET. It is successfully becomming the local master browser, but it's failing to become the domain master browser. Is there any way to get samba to forget about its own old IP address? Does anyone have any insight into this problem? I'm getting that same block of errors logged every 5 minutes, and I'm kinda drowning in logcheck mail right now... :) Would renaming the domain make this go away? - Marc -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] question regarding libsmbclient ´ s command lseek
hi everyone, hope this is the right place to post. please tell me if there´s a better one... my question is: to get the filesize of a file on an computer running xp sp1 i use the following command: long fileLength = smbc_lseek(my_fileHandle_, 0, SEEK_END) ; sadly it always returns just the offset(here 0). using SEEK_PUT or SEEK_CUR work as exspected... i am using samba 3.0.10 on fedora core 3 x86. can anyone tell if my approach is correct or what i am doing wrong? thx for your help max -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] v.3.0.4 upgrade problem...
My samba server is on Debian stable but I use the samba version from testing. Last night I upgraded from v3.0.0 to v3.0.4. Now I am having authentication problems with my nt4 domain controller. Here are some of the suspicious error codes I am getting from the smbd log: [2005/01/05 00:26:47, 2] smbd/sesssetup.c:setup_new_vc_session(602) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/01/05 00:26:47, 2] smbd/sesssetup.c:setup_new_vc_session(602) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/01/05 00:26:47, 2] lib/util_sock.c:open_socket_out(772) error connecting to 10.10.1.11:445 (Connection refused) [2005/01/05 00:26:47, 2] lib/util_sock.c:open_socket_out(772) error connecting to 10.10.1.11:445 (Connection refused) [2005/01/05 00:26:47, 0] auth/auth_util.c:make_server_info_info3(1120) make_server_info_info3: pdb_init_sam failed! Any ideas on what this means? What are the old resources mentioned? -- *Bob Wooldridge* */IT Director/* EDM Incorporated 220 Mansion House Center St. Louis, MO 63102 Office: 314 335.6911 FAX: 314 231.8167 www.edm-inc.com http://www.edm-inc.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] HOW TO ADD PLUS A HARD DRIVE INTO A SAMBA SERVER?
I have a server with Samba with a 20Gb hard drive and I´d like to add a new HD with 80Gb... Do you know how to put it without reinstalling (keeping the old HD with the system and creating a extention of the old one with this new HD) ? Thanks, Eduardo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] acl quotas
On Wednesday 05 January 2005 03:28, Patrick DUBAU wrote: Thanks John for your answer. I installed Debian sarge 3.1 rc1 with kernel 2.6, XFS and quota. This works fine, i didn't have to recompile anyhing. But know i try the ACL. If i understood your message, i have to recompile the kernel, right ? What is EA, i just don't know what it is. Thxs John H Terpstra a écrit : On Tuesday 04 January 2005 01:48, Patrick DUBAU wrote: Hi, i'm about to reinstall samba 3.7 on debian sarge with quota and acl support. What is the best file system to use : ext3 or xfs ? Does i have to compile the kernel for having the quota and acl support ? On 2.4 kernel you need to patch in the best-bits ACLs and EA patches. The 2.6 kernel has them already. It is necessary to activate the ACLs and EA capabilities before building the kernel. EA is extended attributes. Samba maps Windows 2000 ACLs to a combination of POSIX ACLs and EAs. - John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 3.0.10 with printing patch, NULL devmode, failing to fetch tdb and buffer overflow
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas Bork wrote: | Hi Jerry, hi @all, | | some users with 3.0.10 with printing patch have problems | with old printjobs in her status monitor in windows. Loglevel 10 | shows two problems: I'm still working on this. The two errors you mention are unrelated though. The last one might be related now that I think of it. | | 1. The devmode for this printer was not set properly (I know, | thiswill cause problems). log.smbd: | boing, the devmode was NULL | | 2. A buffer overflow is logged. | log.smbd: | [2005/01/05 14:02:09, 5] smbd/ipc.c:send_trans_reply(91) | send_trans_reply: buffer 1024 too large | [2005/01/05 14:02:09, 3] smbd/error.c:error_packet(129) | error packet at smbd/ipc.c(99) cmd=37 (SMBtrans) | STATUS_BUFFER_OVERFLOW The BUFFER_OVERFLOW error is a normal RPC error code when the reply PDU must be fragmented across multiple packets. | Is this the reason for the failed fetching of the tdb?: | [2005/01/05 12:53:03, 0] smbd/connection.c:register_message_flags(220) |register_message_flags: tdb_fetch failed | This was a bug in smbd when clients connected to port 445. Should be fixed in 3.0.11pre1. Could you test that and let me know if the print jobs are removed normally? Thanks. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3Ba7IR7qMdg1EfYRAubxAJ9Sjkt79JbnVSgWs2WNR2WFIyYWFQCZATtx Hbf1f3Sg7w7KQuNyv1T6DNA= =UHMa -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] HOW TO ADD PLUS A HARD DRIVE INTO A SAMBA SERVER?
with a 20Gb hard drive and I´d like to add a new HD with 80Gb... Do you know how to put it without reinstalling (keeping the old HD with the system and creating a extention of the old one with this new HD) ? Thanks, Eduardo Since Samba is runing exclusively (at least to my knowledge) on *nix boxes, adding more HDDs is not a problem at all, since Samba is sharing directories based on their path, simply partition, fromat, mount your new hard drive to a temporary mountpoint, move your data to that point, unmount it, then mount it to the final (now empty) place, and you are finished. To get a more detailed answer, we would need more details about your setup: smb.conf and fstab, and what would you like to move to the new disk. Cheers, Geza -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Article about Samba for Software 2.0 Extra!
Dawid, You are welcome to use any chapter of my book Samba-3 by Example for this magasine. I would suggest chapter 5 or 6 as it is they are the most interesting. A future article could be based on Chapters 8 and/or 9. This book is part of the official Samba documentation. It has also been published by Prentice-Hall (Addison Wesley). It provides completely canned network solutions for a series of progessively larger and more complex networks. If an administrator chooses the chapter that represents his business need and then follows each step carefully he/she will have a fully functional network implementation. If you would like me to write a specific separate article I could do that, but not before your deadline. You can download the Samba-3 by Example book from the Samba web site. It has been released under the GPL license terms. All I ask is that you give proper attribution in your publication. The URL is: http://www.samba.org/samba/docs/Samba-Guide.pdf If you visit http://www.samba.org/samba/docs you will also find links to the HTML version. Kindest regards, John T. On Wednesday 05 January 2005 04:35, Dawid Federowicz wrote: Hello, We are currently working on an issue of Software 2.0 Extra! magazine devoted exclusively to programming in Linux. We want to show our readers, how to programming in Linux and show them interesting projects about this problem. Also we want to show them usefull tools, which make his work more simply. I think it would be great if we could including your or somebody from Samba-teams article about Samba. It may be something very easy, like installation configuration, with some your tips. Of course, we including Samba into cover CD, which will be added to our magazine. Now is my question: would you be interested in writing an article about Samba? On the technical side, the planned length of the article would be around 3 characters (about 6 pages in print) with some listing of codes, screen-shots. The deadline for the final version is 13.01.2005. Our magazine appears in four language versions: Polish (Poland), French (France, Belgium, Canada), German (Germany, Austria, Switzerland) and Spanish (Spain, Portugal) with a total circulation of about 3. Each issue is devoted to a different area of IT, with a general focus on programming. Please let me know if you are interested in cooperating with us on this issue, so we can start working on the text as soon as possible. Best regards, Dawid Federowicz Editor in Chief Software 2.0 Extra! -- Software-Wydawnictwo Sp. z o.o. ul. Lewartowskiego 6, 00-190 Warszawa POLAND tel.: +48 22 860-17-60 fax.: +48 22 860-17-71 http://www.software20.org [EMAIL PROTECTED] -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 3.0.10 with printing patch, NULL devmode, failing to fetch tdb and buffer overflow
Hi Jerry, | some users with 3.0.10 with printing patch have problems | with old printjobs in her status monitor in windows. Loglevel 10 | shows two problems: I'm still working on this. The two errors you mention are unrelated though. The last one might be related now that I think of it. [...] | Is this the reason for the failed fetching of the tdb?: | [2005/01/05 12:53:03, 0] smbd/connection.c:register_message_flags(220) |register_message_flags: tdb_fetch failed | This was a bug in smbd when clients connected to port 445. Should be fixed in 3.0.11pre1. Could you test that and let me know if the print jobs are removed normally? Thanks. Yes, I have two users with this problem. Thanks a lot :) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] cant logon when i change winxp hostname
Hi Leandro Try to delete the original hostname from your host-list in your LDAP, change the domain to workgroup, reboot your machine, and change the workgroup again to domain. Bart - Original Message - From: Leandro (uyuyuy) [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Wednesday, January 05, 2005 2:53 PM Subject: [Samba] cant logon when i change winxp hostname (excuse for my bad english) When I change WinXP hostname (both hostnames are in my hosts-list in ldap) I can´t logon onto domain. Now, when I use original hostname I logon successfully. I use samba 3.0.1pre1 Is this a bug ?! Leandro. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] ldap idmap backend doesn't work
Hi, Ive got a problem with the ldap idmap backend capability. I've integrated a fedora Core3 with samba 3.0.10 box in an Active Directory 2003 domain. WinBind works correctly with the tdb backend but have some troubles with ldap functionality. I've modified my smb.conf file for use my OpenLDAP server to stock the maps. Smb.conf : idmap backend = ldap:ldap://fedogat.vdp.mdp ldap idmap suffix = ou=idmap,dc=vdp,dc=mdp ldap admin dn = cn=manager,dc=vdp,dc=mdp In a same time, ive created the admin dn password with : smbpasswd w secret Ive configured my OpenLDAP server : 1 Configure the slapd.conf file (include samba.schema; dc=vdp,dc=mdp; rootpw) 2 Create the manager object and the idmap organizational unit The OpenLDAP server is launched with the following command: Slapd f /etc/openldap/slapd.conf u ldap The /var/lib/ldap dir is owned by the ldap local user. But, when i start the winbindd daemon with the next command: Winbindd F S d 10 I can see that the connection to the ldap server is successful but after, Ive got the idmap_init: failed to initialize remote backend! error message. Perhaps, I forgot a stage in my configuration process. If someone can help me or redirect me towards a good tutorial to implement the ldap idmap backend. Regards -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Weird Share violation
Hi all! I've got an OS X Server (10.3.7) running the built-in version of Samba (3 something). I've got one sharepoint set up (Apps) with 2 DOS applications in it. One is an old DOS version of QA (4, if it really matters). The other is a custom application that is text based. (.bat files, for the most part. A couple of complied pieces done in Turbo Basic.) All of this was running on an ancient Novell Server. Moved them over to OS X Server (10.3.7). QA runs fine. I can have 4 people in it at the same time with no share violations. The custom app is a whole different story. When a second user tries to access a file already opened, they are kicked out of the application. The server shows an error log as follows: [2004/12/16 11:45:06, 2] /SourceCache/samba/samba-59/samba/source/smbd/dosmode.c:unix_mode(68) unix_mode(FSPOS/CUSTOMER.DAT) inherit mode 40775 [2004/12/16 11:45:06, 2] /SourceCache/samba/samba-59/samba/source/smbd/open.c: check_share_mode(515) Share violation on file (4,0,2,3941,FSPOS/CUSTOMER.DAT,fcbopen = 0, flags = 0) = 0 [2004/12/16 11:45:06, 2] /SourceCache/samba/samba-59/samba/source/smbd/open.c:open_file(240) SALES opened file FSPOS/CUSTOMER.DAT read=Yes write=No (numopen=7) I've talked to the programmer (who also set up the original Novell server way back in the day). He tells me if only we could flag that folder to share no matter what... I know it's generally bad practice to share a file that's already opened as rw. But a gal's gotta do what a gal's gotta do. Oplock and Strict lock are off. Anyone out there know a way around this crazy problem? TIA! -- Kat -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
Hello list, I've recently setup a samba/ldap bdc on an NT 4 domain. All the objects including machine account, groups, etc have been imported into LDAP. On the import I receive an error when trying to add a machine account Could not create posix account for MACHINENAME$. Everything I've read until now points to the fact that the machine name is in caps and is failing to add to the /etc/passwd file. Any help would be greatly appreciated. Cheers, Rudy -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] new printing patch for 3.0.10 may fix the 'failure to remove print jobs from queue list display'
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've uploaded a new draft of the printing patch for 3.0.10 to http://www.samba.org/~jerry/patches/post-3.0.10/ The only change is a small fix to fix the register_message_flags() error messages in the logs. After some thought, I think this might address the 'jobs failing to be removed from the queue list' bug. If people could test and let me know, I would appreciate it. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3CptIR7qMdg1EfYRAnruAKDEqHvZfHDA+OxyuQjquT+R6RXLSgCdHUpz er3/vj9lCMQxNotsYGHSuFU= =YW+/ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: samba 3.0.10 pkg
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | | # ./smbpasswd -a $user | New SMB password: | | Retype new SMB password: | | Failed to open group mapping database | failed to initialize group mapping | Failed to open account policy database | Failed to open account policy database | Failed to open account policy database | Added user $user | == | Any idea why I got this error??? These tdbs are created by smbd upon startup. If you haven't run smbd yet, these error messages are to be expected. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3CsSIR7qMdg1EfYRAsHTAJ46QoPmR2ro6FOuEWBTg8tVF66nUQCgh4V0 FrgX8f0otcr+hdJGc5Tcsx8= =ScaT -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] CUPS thinks jobs sent via samba are anonymous
I'm running samba as an ADS member server. I'm using the cups-pdf package (http://cip.physik.uni-wuerzburg.de/~vrbehr/cups-pdf/) to create a virtual PDF printer. All print jobs sent to this printer and converted into PDF files and should be placed in the user's directory under the PDF pickup folder. The problem I have is that I only get output into the ANONYMOUS folder...so samba doesn't seem to be sending the username to cups, or cups is replacing the DOMAIN\Username format with anonymous. Is there anything that can be done to ensure that print jobs are sent to cups with the proper username? -- Andrew S. Zbikowski | http://andy.zibnet.us A password is like your underwear; Change it frequently, don't share it with others, and don't ask to borrow someone else's. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] renaming default groups with groupmap
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Florian Effenberger wrote: | Hello, | | is it possible to rename the default groups with groupmap? I would like | to change | | Domain Users | Domain Admins | Domain Guests | | to the correct German translation. Should work fine. It's the SID that really matters. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3DAtIR7qMdg1EfYRAgIeAKChHUsMIwT+s51rchVrrl5KdGrOqQCdEXjB BaKl9m3bIUTvxKZRlfIXfBM= =dPIY -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] domain administrator is always mapped to root
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Florian Effenberger wrote: | Hello, | | I have found out that a domain administrator is always mapped to root in | the UNIX filesystem: | | drwx-- 2 jive smbguests 1024 2004-12-23 18:59 jive | drwx-- 13 salsa smbusers 1024 2004-12-23 18:58 salsa | drwx-- 13 root smbadmins 1024 2004-12-23 18:56 tango | | jive is a domain guest user, salsa a domain user and tango a domain | administrator. | | Is it possible to change the root ownership behaviour? sounds like you have an 'admin users' line in smb.conf. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3DBXIR7qMdg1EfYRApFVAJ9kFBxPZGBiDmMA4YTzljteOlz9fwCeLnuP vDa5Rvqih1Z1UlXloG75D5w= =BnPe -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: domain administrator is always mapped to root
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Florian Effenberger wrote: | Hi Michael, | | 2) Anyone who is a Samba Domain Admin will cause things in the log to | equate the user to being the root user. Just how Samba thinks about | things. | | | okay. Any chance to get that fixed by the Samba development | team? :-) The admin users option was never meant to control permissions for things like adding users on the Samba server, etc... So what you have now is behavior by design. I'm working on a new feature that will allow you to define rights for certain groups such as 'add computers to domain', 'restart server', etc I just keep getting sidetracked with other things. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3DQHIR7qMdg1EfYRAla2AKDpIV6gTl7jXxf/SLL3CM+3qiNIcwCgklf8 jb13ou5eJ8Yq8n/kPCStoS0= =7IAc -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Windows groups in smb.conf
I've been trying to figure out the proper way of doing this, but haven't stumbled across it yet. For example, I want to give a windows group write access to a share. [share] write list = XXX Should X be in the format of: @DOMAIN\Group DOMAIN\Group 'DOMAIN\Group' What about groups like Domain Users which have a space in the domain name? 'DOMAIN\Domain Users'? Myabe I've just been staring at my smb.conf too long... :) -- Andrew S. Zbikowski | http://andy.zibnet.us A password is like your underwear; Change it frequently, don't share it with others, and don't ask to borrow someone else's. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: domain administrator is always mapped to root
On Wed, 05 Jan 2005 12:37:59 -0600, Gerald (Jerry) Carter wrote: Florian Effenberger wrote: | Hi Michael, | | 2) Anyone who is a Samba Domain Admin will cause things in the log to | equate the user to being the root user. Just how Samba thinks about | things. | | | okay. Any chance to get that fixed by the Samba development | team? :-) The admin users option was never meant to control permissions for things like adding users on the Samba server, etc... So what you have now is behavior by design. I'm working on a new feature that will allow you to define rights for certain groups such as 'add computers to domain', 'restart server', etc I just keep getting sidetracked with other things. He was noticing that within the Samba logs you can see Samba realize that user xxx is a domain admin, thus shift to calling user xxx by the userid root. Thus files saved on the Samba share by a domain admin user show up as root owning them on the Linux filesystem. Any simple explanation why that behavior is withing the Samba code? Thanks! Michael Lueck Lueck Data Systems http://www.lueckdatasystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] LDAP+samba dc docs
Hi, Could someone please point me towards good documentation for setting up samba3 as a DC and using ldap for authentication. The part I'm having trouble with is setting up ldap in the right way, and the ldap docs are a bit confusing. I'm also looking for good docs on upgrading a DC from samba2.x to samba3, while upgrading the whole OS (SuSE 8.0 to SUSE 9.2). I have extracted the SID from the old box and figured out how to put it in the new one, but I'm not sure what else I have to look out for. Any help or links would be appreciated Thank you -- Kind regards Hans du Plooy Newington Consulting Services hansdp at newingtoncs dot co dot za -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Thank you! Upgrade from Novell 4.11 is complete
On Tue, Jan 04, 2005 at 10:51:05AM -0500, Misty Stanley-Jones wrote: My users are very very happy, and my boss is extremely pleased with the price-point and the performance. I just wanted to let you guys hear of a Samba success story. I will be happy to offer any advice for what I have learned along the way. Great news ! Well done - I bet it was a lot of hard work by you that made the difference. Thanks for letting us know. Would you be willing to do a write-up for the Samba News page ? Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: domain administrator is always mapped to root
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Lueck wrote: | On Wed, 05 Jan 2005 12:37:59 -0600, Gerald (Jerry) Carter wrote: | | |Florian Effenberger wrote: || Hi Michael, || || 2) Anyone who is a Samba Domain Admin will cause things in the log to || equate the user to being the root user. Just how Samba thinks about || things. || || || okay. Any chance to get that fixed by the Samba development || team? :-) | | The admin users option was never meant to control permissions | for things like adding users on the Samba server, etc... | So what you have now is behavior by design. I'm working on | a new feature that will allow you to define rights for certain | groups such as 'add computers to domain', 'restart server', | etc I just keep getting sidetracked with other things. | | | He was noticing that within the Samba logs you can see | Samba realize that user xxx is a domain admin, thus shift | to calling user xxx by the userid root. Thus files saved | on the Samba share by a domain admin user show up as root | owning them on the Linux filesystem. Any simple explanation | why that behavior is withing the Samba code? a domain admin != admin user. You'll have to show me a log that proves smbd is giving root privileges to a user list as a domain admin but not an admin user. And if you do, please send the evidence to [EMAIL PROTECTED] I've got working setups that never exhibit the behavior described in the original mail. So I'm finding your claim a little hard to believe. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3DzRIR7qMdg1EfYRAgMnAJ4pbzUCFdmyTwd+PoeCC4ivtygarwCeLR35 +mKqQCuuWUeE4bTXZOnyoCE= =FfLJ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.11pre1 Available for Download
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This is a preview release of the Samba 3.0.11 code base and is provided for testing only. This release is *not* intended for production servers. However, there have been several bug fixes since 3.0.10 that we feel are important to make available to the Samba community for wider testing. Common bugs fixed in 3.0.11pre1 include: ~ o Numerous printing bugs bugs including memory ~bloating on large/busy print servers. ~ o Compatibility issues with Exchange 5.5 SP4. ~ o sendfile fixes. Additional features introduced in Samba 3.0.11pre1: ~ o Winbindd performance improvements. ~ o More 'net rpc vampire' functionality. The uncompressed tarball and patch file have been signed using GnuPG (ID F17F9772). The source code and release notes can be downloaded from: http://download.samba.org/samba/ftp/pre/ Binary packages are available at http://download.samba.org/samba/ftp/Binary_Packages/ Our Code, Our Bugs, Our Responsibility. (https://bugzilla.samba.org/) --Enjoy The Samba Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3D2nIR7qMdg1EfYRAmzWAJ9mEgLwWZuMuS+fmy20kljdSRd2qwCcCLgp omGD3TbMCRsye7haUXMY0AM= =xvhh -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Migrating from NT4 to samba (do I still need a domain?)
We have a couple of NT4 boxes I'd like to replace with a single samba box. One is a PDC (no BDC) that now does nothing but handle authentication for the other box which is just an NT4 member server with a big hard drive and a whole bunch of shares. There are also a few printers that are littered around the place connected to various Windows (2000 and XP) client machines and shared across the network. I'm thinking this is possible with just one samba box and share level security? Will there be any issues with the printers if there isn't a Windows domain - this is where cups comes in, right? I'll be replacing an NT4/IIS box soon too - any hidden gotchas with an apache web/app server and samba on the same network? Thanks. Paul -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Isolated printer problem
Well this problem is not as isolated as first believed. I also have some XP users who can't see the print jobs. Everyone can _print_, they just cannot monitor or cancel any jobs, even their own. Could it be because of the permissions of the print jobs: -rw--- 1 nobody nobody539635 Dec 28 13:35 smbprn.0204.4XCc7j -rw--- 1 jeremy Domain Users 3462536 Dec 29 15:02 smbprn.0210.4x6DlV -rw--- 1 nobody nobody228372 Jan 4 10:13 smbprn.0538.CmELlI -rw--- 1 nobody nobody 87461 Jan 4 15:15 smbprn.0573.M4bJzk Shouldn't those jobs be readable by everyone? Also if a job gets submitted as a guest, would anyone be able to delete it, or would no-one? I've taken away guest access on all the printers and added create mode = 644 to every printer share. We will see if that helps. Misty On Tuesday 04 January 2005 17:41, Misty Stanley-Jones wrote: On Tuesday 04 January 2005 16:54, John H Terpstra wrote: Is the 10th user a manager of the printer operators group? No. Nobody is. At log level = 5 what do the logs for that 10th machine show has happened. I suspect you will find your answer there. log level = 5 max log size = 0 log file = /var/log/samba/%m Note: %m gets expanded to the name of the workstation. Of note -- It turns out through testing (rather than taking the user's word for it) that he is not able to see any spooled jobs on any network printer of his. Nothing odd that I can see here except that the message gets sent to the plotter 8 times ... maybe that is normal... Spewed here: [2005/01/04 17:21:11, 5] printing/notify.c:print_notify_send_messages_to_printer(169) print_notify_send_messages_to_printer: sending 8 print notify messages to printer plotter [2005/01/04 17:21:46, 3] smbd/process.c:process_smb(1092) Transaction 71331 of length 39 [2005/01/04 17:21:46, 5] lib/util.c:show_msg(461) [2005/01/04 17:21:46, 5] lib/util.c:show_msg(471) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=129 smb_mid=14665 smt_wct=0 smb_bcc=0 [2005/01/04 17:21:46, 3] smbd/process.c:switch_message(887) switch message SMBtdis (pid 25406) conn 0x83dc9c8 [2005/01/04 17:21:46, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/01/04 17:21:46, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2005/01/04 17:21:46, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/01/04 17:21:46, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/01/04 17:21:46, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /data/samba/netlogon [2005/01/04 17:21:46, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/01/04 17:21:46, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2005/01/04 17:21:46, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/01/04 17:21:46, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/01/04 17:21:46, 1] smbd/service.c:close_cnum(836) w2kgreg (192.168.1.57) closed connection to service netlogon [2005/01/04 17:21:46, 3] smbd/connection.c:yield_connection(69) Yielding connection to netlogon [2005/01/04 17:21:46, 4] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to / [2005/01/04 17:21:46, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/01/04 17:21:46, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2005/01/04 17:21:46, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/01/04 17:21:46, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/01/04 17:21:46, 5] lib/util.c:show_msg(461) [2005/01/04 17:21:46, 5] lib/util.c:show_msg(471) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=129 smb_mid=14665 smt_wct=0 smb_bcc=0 [2005/01/04 17:22:20, 3] smbd/process.c:process_smb(1092) Transaction 71332 of length 39 [2005/01/04 17:22:20, 5] lib/util.c:show_msg(461) [2005/01/04 17:22:20, 5] lib/util.c:show_msg(471) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=163 smb_mid=14729 smt_wct=0 smb_bcc=0 [2005/01/04 17:22:20, 3] smbd/process.c:switch_message(887) switch message SMBtdis (pid 25406) conn 0x840fa48 [2005/01/04 17:22:20, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/01/04 17:22:20, 5]
Re: [Samba] Windows groups in smb.conf
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrew Zbikowski wrote: | I've been trying to figure out the proper way of doing this, but | haven't stumbled across it yet. | | For example, I want to give a windows group write access to a share. | | [share] | write list = XXX | | Should X be in the format of: | | @DOMAIN\Group | DOMAIN\Group | 'DOMAIN\Group' ^^ This one but use double quotes. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3D8yIR7qMdg1EfYRAk7FAJ4yuvg9Oha0ubxK4wivF7ZrwkMBAQCdGX/u pbDUm+aLg1cywJlNXIR1/mI= =/dm/ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and Cups interaction
While trying to solve my printer problem, I have come up with another question that Google is not helping me with. What happens to a print job after Samba submits it to Cups? Is it 'finished' even though Cups is still printing it? Is that why my users aren't seeing their print jobs, because Cups has already snatched them and Samba assumes they are done? I would much rather if the user could see the print job through its whole life, and could cancel it if they wanted to (if it was 1000 pages long and they realized that someone had put stationery in the printer for instance)? This level of things is not covered in the docs to the best that I can find. :( Misty -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Migrating from NT4 to samba (do I still need a domain?)
Paul Smith wrote: We have a couple of NT4 boxes I'd like to replace with a single samba box. One is a PDC (no BDC) that now does nothing but handle authentication for the other box which is just an NT4 member server with a big hard drive and a whole bunch of shares. There are also a few printers that are littered around the place connected to various Windows (2000 and XP) client machines and shared across the network. I'm thinking this is possible with just one samba box and share level security? Withouth a domain, where will your user definitions come from? Do people log in with the 'this computer' entry or are they logging in with your domain specified? If you don't have a domain then you will have to run around and make users on all the workstations. Will there be any issues with the printers if there isn't a Windows domain - this is where cups comes in, right? Printing doesn't need a domain, but having login scripts that map those printers and connect drives and such does require the domain. -- -- Paul GiengerOffice: 701-281-1884 Applied Engineering Inc. Systems Architect Fax:701-281-1322 URL: www.ae-solutions.com mailto: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Isolated printer problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Misty Stanley-Jones wrote: | Well this problem is not as isolated as first believed. I also have some XP | users who can't see the print jobs. Everyone can _print_, they just cannot | monitor or cancel any jobs, even their own. The conditions we test for are you have to be (a) root, (b) a printer admin, or (c) own the job (i.e. username matches the information stored about the job in the tdb). I didn't see any spoolss calls in the log file you included. What client are you using ? Do you have 'disable spoolss = yes' ? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB3EQRIR7qMdg1EfYRAkd6AKCzV39gxWkica9Ef1nHSRFwE5zGtwCgyWZH kTFXGwl/O6xnacIv8XqPb7o= =yNC9 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] LDAP+samba dc docs
On Wednesday 05 January 2005 12:07, Hans du Plooy wrote: Hi, Could someone please point me towards good documentation for setting up samba3 as a DC and using ldap for authentication. The part I'm having trouble with is setting up ldap in the right way, and the ldap docs are a bit confusing. I'm also looking for good docs on upgrading a DC from samba2.x to samba3, while upgrading the whole OS (SuSE 8.0 to SUSE 9.2). I have extracted the SID from the old box and figured out how to put it in the new one, but I'm not sure what else I have to look out for. Any help or links would be appreciated Hans, Please check chapter 6 of the book Samba-3 by Example. If anything is not clear or does not work please contact me, I'll help you to get this working. You can purchase this book from Amazon.Com or download it from: http://www.samba.org/samba/docs/Samba-Guide.pdf You will need to use the latest version of the Idealx smbldap-tools from www.idealx.org. If you wish, give me a call on (801) 936-1368 and I can provide more info on how you can easily and rapidly set up Samba on SUSE 9.2. Cheers, John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba and Cups interaction
On Wednesday 05 January 2005 12:32, Misty Stanley-Jones wrote: While trying to solve my printer problem, I have come up with another question that Google is not helping me with. What happens to a print job after Samba submits it to Cups? Is it 'finished' even though Cups is still printing it? Is that why my users aren't seeing their print jobs, because Cups has already snatched them and Samba assumes they are done? I would much rather if the user could see the print job through its whole life, and could cancel it if they wanted to (if it was 1000 pages long and they realized that someone had put stationery in the printer for instance)? This level of things is not covered in the docs to the best that I can find. :( Misty, What is the source of your Samba binaries? What version are you using? Did you build them yourself? If so, when they were built was the cups-devel package installed? Please send me your smb.conf file (off-line). Please include the output of: smbd -b Cheers, John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba and Cups interaction
On Jan 5, 2005, at 1:32 PM, Misty Stanley-Jones wrote: While trying to solve my printer problem, I have come up with another question that Google is not helping me with. What happens to a print job after Samba submits it to Cups? Is it 'finished' even though Cups is still printing it? Is that why my users aren't seeing their print jobs, because Cups has already snatched them and Samba assumes they are done? I would much rather if the user could see the print job through its whole life, and could cancel it if they wanted to (if it was 1000 pages long and they realized that someone had put stationery in the printer for instance)? This level of things is not covered in the docs to the best that I can find. :( Even beyond the was cups support compiled in question, it is possible to not see jobs for their entire life in the samba queue: If the cups server you are using in conjunction with samba sends jobs directly to the printer, then the job should remain in the samba queue for the life of the job. If however you have separate cups server(s) that actually send jobs to printers and a local copy of cups on the samba box that just sends the jobs to the other cups server(s), then the job will only remain in the samba queue for the (short) amount of time it takes your local cups server to send the job to other cups servers, since all samba knows . [This setup allows you to have redundant/load balancing cups servers.] I believe you can specify a non-local cups server in the 3.x series of samba, but I don't remember the corresponding smb.conf parameters off-hand. [And doing this would make redundant/load balancing not work, unless you wanted to go round-robin DNS style, but that isn't quite the same thing.] -- David Schlenk Operating Systems Analyst Bethel University Saint Paul, Minnesota [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Migrating from NT4 to samba (do I still need a domain?)
Withouth a domain, where will your user definitions come from? Do people log in with the 'this computer' entry or are they logging in with your domain specified? If you don't have a domain then you will have to run around and make users on all the workstations. A fair comment - I guess that in the interests of my making the switch as invisible as possible to the users (and my sanity) I should look at replacing the NT4 domain with a samba domain, yes. I'd still like the single-box solution. I don't have hundreds or thousands of users so, performance-wise, can I still have the domain authentication and file server on the same box? Thanks Paul -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Migrating from NT4 to samba (do I still need a domain?)
On Wednesday 05 January 2005 13:31, Paul Smith wrote: Withouth a domain, where will your user definitions come from? Do people log in with the 'this computer' entry or are they logging in with your domain specified? If you don't have a domain then you will have to run around and make users on all the workstations. A fair comment - I guess that in the interests of my making the switch as invisible as possible to the users (and my sanity) I should look at replacing the NT4 domain with a samba domain, yes. I'd still like the single-box solution. I don't have hundreds or thousands of users so, performance-wise, can I still have the domain authentication and file server on the same box? Yes. You may find chapters 4 and 5 useful in the book Samba-3 by Example. This book can be bought from Amazon.Com or can be freely downloaded from: http://www.samba.org/samba/docs/Samba-Guide.pdf If anything is not clear, or you need more information, feel free to contact me directly. Cheers, John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba and Cups interaction
On Wednesday 05 January 2005 15:22, David Schlenk wrote: Even beyond the was cups support compiled in question, it is possible to not see jobs for their entire life in the samba queue: If the cups server you are using in conjunction with samba sends jobs directly to the printer, then the job should remain in the samba queue for the life of the job. If however you have separate cups server(s) that actually send jobs to printers and a local copy of cups on the samba box that just sends the jobs to the other cups server(s), then the job will only remain in the samba queue for the (short) amount of time it takes your local cups server to send the job to other cups servers, since all samba knows . [This setup allows you to have redundant/load balancing cups servers.] I believe you can specify a non-local cups server in the 3.x series of samba, but I don't remember the corresponding smb.conf parameters off-hand. [And doing this would make redundant/load balancing not work, unless you wanted to go round-robin DNS style, but that isn't quite the same thing.] This is interesting. The CUPS server is on the same machine as the Samba server. All I have in smb.conf is printing = cups and printcap = cups -- I have no directive telling it where to look for the CUPS server. Now I am pretty sure that a CUPS server is also a CUPS client locally. So I am wondering if this is what's happening and if I need to tell CUPS to send the jobs directly to the printer, rather than sending them to itself in a client-server kind of way. Misty -- David Schlenk Operating Systems Analyst Bethel University Saint Paul, Minnesota [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba share breaks msi-install process
On Mon, Jan 03, 2005 at 05:00:07PM +0100, Samba list wrote: Hi, I need advise by someone with knowledge about the inner workings of MS Installer to explain the behavioural difference between using a Samba share and a native Windows share. I'm trying to install a (commercial) package on multiple Windows machines. This package shares several database-like files in a central directory on a central share. Using a share on a Windows XP-machine works OK leaving the central files intact, using a Samba share breaks things. First I install the package on the first machine (say pcA). The central directory on the share is created and the files are installed. The package now works excellent. Then I install the package on the second machine (say pcB). The central share is found, but on Samba the important database file is reinitialised, deleting all the information put into it using pcA. The shares are mapped using the same account name and password (only one PC needs to be active at the same time). I have tried both Samba Version 2.0.5a, and Version 3.0.3pre2-2.pre2. Both behave exactly alike. Can you retry this with the recently release 3.0.11pre release - if you still get the problem we'll follow up. Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] read only share access after upgrade to 3.0.10 - an update
Hello. Remember this one? I'm in upgrade hell after upgrading my backup rh9 server and fc2 linux box to 3.0.10 from 3.0.7. rh9 rpm package was from the samba site and the fc2 rpms from redhat. I now have a system where the win xp and win98se machines on the network can read/write to the backup share but my fc2 box only has read only access to the share - it could write before the upgrade. snip... I have concluded that either the samba-3.0.10-1.fc2.i386.rpm binaries have a problem or that some corruption to my linux os occurred during the update. I've used the problem as an excuse to move on to fc3 and can report everything is working properly again (samba-3.0.10-1.fc3). :-) Regards, Graham -- Graham Vincent -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] 3.0.x and AIX 5.3
As of AIX 5.3 sys/var.h is loaded in sys/proc.h sys/space.h which are
loaded through a rather lengthy debacle of nested includes. AIX 5.2 does
not have this problem.
At any rate the result when using gcc 3.3 and vac 6.x:
Compiling web/cgi.c
web/cgi.c:33: error: redefinition of `struct var'
web/cgi.c: In function `cgi_load_variables':
web/cgi.c:138: error: structure has no member named `name'
web/cgi.c:139: error: structure has no member named `value'
...
Attached is a simple fix that just renames the struct var to struct
cgi_var. 3.0.10 and 3.0.11pre1 compile successfully on 5.3 after this
change.
Bill--- cgi.orig.c 2005-01-05 17:03:29.0 -0500
+++ cgi.aix.c 2005-01-05 17:04:03.0 -0500
@@ -30,12 +30,12 @@
extern void print_title(char *fmt, ...);
#endif
-struct var {
+struct cgi_var {
char *name;
char *value;
};
-static struct var variables[MAX_VARIABLES];
+static struct cgi_var variables[MAX_VARIABLES];
static int num_variables;
static int content_length;
static int request_post;
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.11pre1 Available for Download
On Jan 5, 2005, at 1:19 PM, Gerald Carter wrote: Common bugs fixed in 3.0.11pre1 include: ~ o Numerous printing bugs bugs including memory ~bloating on large/busy print servers. I can confirm that the job clearing bug present in unpatched 3.0.9/3.0.10 is gone from 3.0.11pre1 tested with 98, 2k and XP clients. I've got a new 3.0.10 package compiled with the new printing patch, results of tests tomorrow. -- David Schlenk Operating Systems Analyst Bethel University Saint Paul, Minnesota [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Kerberos and Samba
Hello all I am running a RHEL AS server. I want to make this a Kerberos KDC against which all windows clients can authenticate. Apart from this I want to mount the shared folders on the individual windows clients on to the RHEL server. I am assuming that I need to do this using Samba (bear with me as I am a Linux newbie). what mode do I set Samba in to do this? Would it need to authenticate against the KDC? I noticed a realm setting in smb.conf. But all references to this parameter has been in relation to Windows AD. Is it possible for me to have a single location for authentication information while enabling users to view shared folders on individual machines using Kerberos and Samba? I would appreciate any suggestions/comments/ideas. If anyone thinks I am going in the wrong direction I would appreciate any tutorials/references on doing what I need to. Thanks -- Ganeshram Iyer 415 South Oak St #117 Arlington, TX, 76010 Ph (H) - 817-274-7827 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PDC moved; domain admin user lost privs
FYI We had to revert back to the old PDC. Manually removing and re-adding machines to the domain as controlled by the new PDC only fixed the problem on W2K. WinXP didn't like the new PDC no matter what I tried. :'( When I get around to this again I suppose I'll first migrate the current PDC to Samba+LDAP, setup a second/new machine as a BDC and then elevate it to a PDC. Abe Abe Shelton wrote: Greetings, We recently moved our Samba PDC from one linux-based samba server to another. I copied samba's settings (rsync'd /etc/samba/*) exactly, and the new PDC has the same IP address, host name and overall config. (same version of samba, same kernel, etc) Since moving the PDC, Windows XP workstations no longer recognize the smb.conf defined admin users as domain admins. Prior to moving the PDC, WinXP workstations properly recognized the admin users as domain administrators without issue. One hardware component in the Samba PDC that did change is the MAC address of the network card. ** Perhaps WinXP clients will stop trusting a PDC if it's MAC address suddenly changes? ** Logins, roaming profiles and general file sharing works fine with the new PDC; the only thing that's giving us trouble is that admin users suddenly are not domain admins. (admin users do still have root-level access to files/shares on samba servers -- only domain admin functions fail.) We have found that manually removing and re-adding machines to the domain seems to fix the problem. But if reverting to the prior MAC address or some other trickery with the new samba PDC works, that is much preferred over a late night spent fixing a bunch of broken windows. Any advice is much appreciated. Thanks! Abe -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] session setup failed: NT_STATUS_LOGON_FAILURE
Hi, I'm having trouble joining a Samba 2.2.7a server running on RH9 into a domain that is being served by a Windows 2003 server running AD in mixed mode. The server successfully joins the domain when using smbpasswd, however, when running smbclient -L localhost I get the following error: session setup failed: NT_STATUS_LOGON_FAILURE Also when attempting to access shares from windows clients I'm prompted for a username and password, however, no accounts ever get granted access. We have another samba server with the same config, (RH9 and same samba version), and it is working fine. I'm including my smb.conf file below. Has anyone else run into this problem? -John - [global] workgroup = BEDFORD netbios name = AMLINK security = domain encrypt passwords = yes password server = bedford03-dc.atb.teradyne.com wins server = 131.101.77.31 server string = Linux ClearCase Server %v %h log file = /var/log/samba/%m.log log level = 4 max log size = 4000 username map = /etc/samba/smbusers read raw = no oplocks = no kernel oplocks = no level2 oplocks = no create mask = 0774 directory mask = 0775 map archive = No preserve case = yes dont descend = /view deadtime = 0 hide dot files = no [vobs] path = /export/vobs browsable = yes writable = yes public = yes comment = Vob Storage [hwvobs] path = /export/vobs/hw_vobs browsable = yes writable = yes public = yes comment = HWEngVobs [triggers] path = /var/adm/atria/triggers browsable = yes writable = no write list = vobadm force group = vobgrp force create mode = 664 force directory mode = 775 public = yes comment = storage for clearcase triggers csc policy = disable [profiles] path = /var/adm/atria/profiles browsable = yes writable = no write list = vobadm force group = vobgrp force create mode = 664 force directory mode = 775 public = yes comment = storage for clearcase profiles csc policy = disable -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] shifting samba machine
hi, i have a smba server working as pdc. users are managed using smbpasswd. i want to shift the server to a new machine (without changing any configuration). which all configuration files i have to copy to the new machine. greetings, -- Anu Bhaskar Linux Administrator Spectrum Softtech Solutions Pvt. Ltd. Tel: 914842345922 www.spectrum.net.in -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Using winbindd against Samba PDC doesn't work
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 22 Dec 2004, Gerry Valle wrote: Why would winbindd work correctly for the NT server but not for the FBSD Samba server? Does it request something specifically tailored only for NT machines? Does winbindd only work when used against NT servers? Any suggestions about which parameters I can adjust or check in the smb.conf? (I didn't change any parameters in the Linux member server's conf, except to put the new domain name). You'll need to check the winbindd log files. All my tests work out ok. There's nothing special about a Samba member server in a Samba domain. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQFB3HlaIR7qMdg1EfYRAjtcAJwPjrFNtbPsiSXPinmemcAKKmQMbwCguuAe uoHfuFuSbFrok+V3by9ONOo= =zNrt -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] General Samba Questions
Hi, We've been having lots of issues with our Linux based Samba servers since the Windows domains have migrated to AD. We were hoping and expecting that, at least in the short term, we could run in mixed mode and not have to make any changes to our Samba servers. However, things just aren't working well. Also, I've posted several issues to this list over the last several weeks and many of the issues I've encountered have gone unresolved. So, the question(s) I have is what is the recommended/suggested Samba version and configuration we should consider deploying in an infrastructure running with Windows 2003 servers and AD? We are running primarily RedHat 9 and RedHat ES 30 and a majority of our Samba servers are currently running 3.0.7 with some running 2.2.7a, (both of which are RedHat's distributions). We've had all kinds of problems varying from intermittent password server not available issues, to smbd locking up and most recently having problems changing a server from server to domain security style. Interestingly, (or maybe not), none of these problems existed prior to the AD upgrades I'm considering making an effort to go full ads mode on the samba servers, however, I've also seen that others have had issues doing this. I'm open to suggestions. Thanks, -John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Mysql Password Backend
Hi, I am trying to use the Mysql Password Backend for Samba and keep comming to this error. The Error: No builtin nor plugin backend for mysql found Loading mysql:mysql failed! The smb.conf: [global] passdb backend = mysql:mysql mysql:mysql database = samba mysql:mysql table = user Thanks, Evan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] LDAP+samba dc docs
John H Terpstra wrote: On Wednesday 05 January 2005 12:07, Hans du Plooy wrote: Hi, Could someone please point me towards good documentation for setting up samba3 as a DC and using ldap for authentication. The part I'm having trouble with is setting up ldap in the right way, and the ldap docs are a bit confusing. I'm also looking for good docs on upgrading a DC from samba2.x to samba3, while upgrading the whole OS (SuSE 8.0 to SUSE 9.2). I have extracted the SID from the old box and figured out how to put it in the new one, but I'm not sure what else I have to look out for. Any help or links would be appreciated Hans, Please check chapter 6 of the book Samba-3 by Example. If anything is not clear or does not work please contact me, I'll help you to get this working. You can purchase this book from Amazon.Com or download it from: http://www.samba.org/samba/docs/Samba-Guide.pdf You will need to use the latest version of the Idealx smbldap-tools from www.idealx.org. If you wish, give me a call on (801) 936-1368 and I can provide more info on how you can easily and rapidly set up Samba on SUSE 9.2. Cheers, John T. I think there was a recent post of you, which says all authentication, including Linux, should go through LDAP. If this is correct, I think this should be stressed in all documents concerning Samba/LDAP. -- Met vriendelijke groeten, Koenraad Lelong RD Manager ACE electronics n.v. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] LDAP+samba dc docs
On Thursday 06 January 2005 09:22, Koenraad Lelong wrote: I think there was a recent post of you, which says all authentication, including Linux, should go through LDAP. If this is correct, I think this should be stressed in all documents concerning Samba/LDAP. Hi Koenraad, I did post the LDAP athentication issue, but that was to a different list - post content was slightly different. SUSE offers LDAP authentication but I had trouble getting it setup. Apart from samba I need to have other things work with LDAP too. Thanks for your reply and to John H Terpstra Dankie -- Kind regards Hans du Plooy Newington Consulting Services hansdp at newingtoncs dot co dot za -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Different times on VMS and Windows for a file
Michael Mazzoni wrote: Environment: VMS v7.3 on an Alpha, Samba-VMS v2.2.8. Maybe the TCP/IP stack could also be important, but see below. My questions are: 1) is this a Samba-VMS problem? 2) if so, how do I fix it? 3) what is the format for POSIX$DEFAULT_TZ? 4) can someone post TIMEZONE_RULE.TXT or tell me where I can find it? 5) searching all the .c files in v2.8.8 doesn't find SYS$TIMEZONE_RULE, so how is the time differential handled? I can't answer your questions, but please try the following and look for the time differential factor. You can configure it, if something is wrong, with the same procedure. For me, the times are okay. $ @sys$manager:utc$time_setup show AUTO_DLIGHT_SAV is set to 0 and DTSS is not in use. You will have to manually change to/from Daylight Saving Time. You can do this by executing SYS$MANAGER:UTC$TIME_SETUP.COM, or you can use SYS$EXAMPLES:DAYLIGHT_SAVING.COM. LOCAL TIME ZONE = MET -- STANDARD TIME LOCAL SYSTEM TIME= 5-JAN-2005 10:20:35.35 (MET) TIME DIFFERENTIAL FACTOR = 1:00 TIME ZONE RULE = MET-1MET DST-2,M3.4.0/02,M10.5.0/03 Change MET to MET on the Fourth Sunday of March (27-Mar-2005) at 02:00 Change MET to MET on the Last Sunday of October (30-Oct-2005) at 03:00 If this doesn't help, please post the results of the shown command. BTW: did you check your PC's time zone setup? Albrecht PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING: http://www.catb.org/~esr/faqs/smart-questions.html
Re: Different times on VMS and Windows for a file
Michael Mazzoni wrote: Environment: VMS v7.3 on an Alpha, Samba-VMS v2.2.8. 1) is this a Samba-VMS problem? Yes and No. The code that uses that logical only needs to exist on binaries for OpenVMS 6.x and earlier. There is no reason to use those routines on current versions of OpenVMS. It is quite probable that the test is not even needed with the current sources. I would have to review the source to verify. 5) searching all the .c files in v2.8.8 doesn't find SYS$TIMEZONE_RULE, so how is the time differential handled? By the UTC routines in the CRTL. The usual reasons for the logical being missing after a reboot, is that DECNET-PLUS is running, but DTSS has not been disabled through use of the feature logical name. This is done in the SYS$STARTUP:NET$LOGICALS.COM file which is created from the NET$LOGICALS.TEMPLATE file. If the logical name is not defined on a DECNET-PLUS system, the timezone logical name is not created at boot, but will be manually created by running the timezone configuration. See the Timezone information in the VMS System Manager Guide and in the FAQ. -John [EMAIL PROTECTED] Personal Opinion Only PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING: http://www.catb.org/~esr/faqs/smart-questions.html
svn commit: lorikeet r169 - in trunk/white-papers: .
Author: vlendec Date: 2005-01-05 08:50:13 + (Wed, 05 Jan 2005) New Revision: 169 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=169 Log: typos Modified: trunk/white-papers/samba3-samba4.lyx Changeset: Modified: trunk/white-papers/samba3-samba4.lyx === --- trunk/white-papers/samba3-samba4.lyx2005-01-05 07:49:47 UTC (rev 168) +++ trunk/white-papers/samba3-samba4.lyx2005-01-05 08:50:13 UTC (rev 169) @@ -26,7 +26,7 @@ \layout Title -Possabilities for Samba 3.0 / Samba4 Intergration +Possibilities for Samba 3.0 / Samba4 Integration \layout Abstract This paper explores some of the options, both practial and otherwise, for
svn commit: lorikeet r170 - in trunk/white-papers: .
Author: vlendec Date: 2005-01-05 08:51:22 + (Wed, 05 Jan 2005) New Revision: 170 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=170 Log: Another typo ;-) Modified: trunk/white-papers/samba3-samba4.lyx Changeset: Modified: trunk/white-papers/samba3-samba4.lyx === --- trunk/white-papers/samba3-samba4.lyx2005-01-05 08:50:13 UTC (rev 169) +++ trunk/white-papers/samba3-samba4.lyx2005-01-05 08:51:22 UTC (rev 170) @@ -202,7 +202,7 @@ Samba3 backend for CIFS VFS \layout Standard -Volker Lendeke proposed a patch to Samba4 which caused an instance of Samba3 +Volker Lendecke proposed a patch to Samba4 which caused an instance of Samba3 to be launched to handle the file storage requirements of a Samba4 share connection. The purpose of this patch was to demonstrate the capabilities of Samba4,
svn commit: lorikeet r171 - in trunk/white-papers: .
Author: abartlet Date: 2005-01-05 09:03:43 + (Wed, 05 Jan 2005) New Revision: 171 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=171 Log: Thanks to VL for reminding me to spellcheck... Andrew Bartlett Modified: trunk/white-papers/gensec-white-paper.lyx trunk/white-papers/samba3-samba4.lyx Changeset: Sorry, the patch is too large (342 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=171
svn commit: samba r4531 - in branches/SAMBA_4_0/source/libcli/auth: .
Author: abartlet
Date: 2005-01-05 10:21:08 + (Wed, 05 Jan 2005)
New Revision: 4531
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4531
Log:
Include the OID locally, as it seems to be hard to get the includes
right.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/libcli/auth/gensec_gssapi.c
Changeset:
Modified: branches/SAMBA_4_0/source/libcli/auth/gensec_gssapi.c
===
--- branches/SAMBA_4_0/source/libcli/auth/gensec_gssapi.c 2005-01-05
03:21:45 UTC (rev 4530)
+++ branches/SAMBA_4_0/source/libcli/auth/gensec_gssapi.c 2005-01-05
10:21:08 UTC (rev 4531)
@@ -130,6 +130,10 @@
gss_buffer_desc name_token;
OM_uint32 maj_stat, min_stat;
+ gss_OID_desc hostbased = {10,
+ (void *)discard_const_p(char,
\x2a\x86\x48\x86\xf7\x12
+ \x01\x02\x01\x04)};
+
nt_status = gensec_gssapi_start(gensec_security);
if (!NT_STATUS_IS_OK(nt_status)) {
return nt_status;
@@ -144,7 +148,7 @@
maj_stat = gss_import_name (min_stat,
name_token,
- GSS_C_NT_HOSTBASED_SERVICE,
+ hostbased,
gensec_gssapi_state-server_name);
svn commit: samba-web r488 - in trunk: . history news/releases
Author: deryck Date: 2005-01-05 14:20:08 + (Wed, 05 Jan 2005) New Revision: 488 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=488 Log: Add news item on 3.0.11pre1 release. Move old release announcements to history. --deryck Added: trunk/news/releases/3.0.11pre1.html Modified: trunk/history/index.html trunk/index.html Changeset: Modified: trunk/history/index.html === --- trunk/history/index.html2005-01-05 03:41:28 UTC (rev 487) +++ trunk/history/index.html2005-01-05 14:20:08 UTC (rev 488) @@ -6,8 +6,8 @@ div class=latest ul - liLatest Release mdash; a href=/samba/index.html#latestSamba 3.0.10/a/li - liCurrent Stable Release mdash; a href=/samba/index.html#latestSamba 3.0.10/a/li + liLatest Release mdash; a href=/samba/index.html#latestSamba 3.0.11pre1/a/li + liCurrent Stable Release mdash; a href=#stableSamba 3.0.10/a/li !-- Second link will point to #stable on this page when current release is a development release -- /ul /div @@ -16,6 +16,26 @@ h2Previous Release Announcments/h2 +h4a name=stable16 December 2004/a/h4 +p class=headlineSecurity Release: Samba 3.0.10 Available for Download/p + +pSamba 3.0.10 is the latest stable +release of Samba, and is the version that production servers should +be running for all current bug-fixes. This is primarily a security +release to address a href=/samba/security/CAN-2004-1154.htmlCAN-2004-1154/a. +Please refer to the a href=/samba/history/samba-3.0.10.htmlrelease notes/a +for details regarding additional changes./p + +pThe a href=/samba/ftp/samba-3.0.10.tar.gzSamba 3.0.10 +source code/a can be downloaded now. The +a href=/samba/ftp/stable/samba-3.0.10.tar.ascGnuPG signature for +the uncompressed tarball/a is also available. +Precompiled packages for various platforms are available in the +a href=http://download.samba.org/samba/ftp/Binary_Packages/;Binary_Packages +download area/a. More will appear over the next week as they are provided by +volunteer package maintainers./p + + h424 September 2004/h4 p class=headlineSamba 3.1.0 Available for Download/p @@ -237,26 +257,5 @@ pa href=http://samba.org/~jerry/RPMS/samba/;RPMS for RedHat 8/9 and Fedora Core 1/2/a can also be downloaded./p -h422 July 2004/h4 -p class=headlineaSecurity Release - Samba 2.2.10 and 3.0.5 Available -for Download/a/p -pTwo potential buffer overruns have been discovered in Samba = 3.0.2 -a href=http://cve.mitre.org/;CAN-2004-0600,CAN-2004-0686/a). -One of these issues, CAN-2004-0686, also affects Samba 2.2.x. -Samba administrators are encouraged to review the a -href=/samba/history/samba-3.0.5.html3.0.5/a -and a href=/samba/history/samba-2.2.10.html2.2.10/a release notes -and upgrade any affected servers. -Samba 3.0.5 and 2.2.10 are identical to the previous release in each -respective series with the exception of fixing these issues. -Samba 3.0.5rc1 has been removed from the download area on Samba.org -and 3.0.6rc2 will be available later this week./p - -pThe 3.0.5 and 2.2.10 releases a href=/samba/ftp/are available for download/a -including the gpg signatures of the uncompressed tarballs. a -href=/samba/ftp/Binary_Packages/Binary packages for various platforms/a -will be available following the initial release./p - - !--#include virtual=footer_history.html -- Modified: trunk/index.html === --- trunk/index.html2005-01-05 03:41:28 UTC (rev 487) +++ trunk/index.html2005-01-05 14:20:08 UTC (rev 488) @@ -13,7 +13,7 @@ h2Current Release/h2 -h4a4 January 2005/a/h4 +h4a name=latest4 January 2005/a/h4 p class=headlineSamba 3.0.11pre1 Available for Download/p pThis is a preview release of the Samba 3.0.11 code base and @@ -31,24 +31,6 @@ a href=http://download.samba.org/samba/ftp/Binary_Packages/;Binary_Packages download area/a. /p -h4a name=latest16 December 2004/a/h4 -p class=headlineSecurity Release: Samba 3.0.10 Available for Download/p - -pSamba 3.0.10 is the latest stable - release of Samba, and is the version that production servers should - be running for all current bug-fixes. This is primarily a security - release to address a href=/samba/security/CAN-2004-1154.htmlCAN-2004-1154/a. - Please refer to the a href=/samba/history/samba-3.0.10.htmlrelease notes/a - for details regarding additional changes./p - -pThe a href=/samba/ftp/samba-3.0.10.tar.gzSamba 3.0.10 - source code/a can be downloaded now. The a href=/samba/ftp/stable/samba-3.0.10.tar.ascGnuPG - signature for the uncompressed tarball/a is also available. - Precompiled packages for various platforms are available in the - a href=http://download.samba.org/samba/ftp/Binary_Packages/;Binary_Packages - download area/a. More will appear over the next week as they
svn commit: samba r4532 - in branches/SAMBA_4_0/source: dsdb/samdb librpc/idl torture/rpc
Author: metze
Date: 2005-01-05 15:24:20 + (Wed, 05 Jan 2005)
New Revision: 4532
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4532
Log:
- rename bitmap - bits
the next commit is support for typedef bitmap {...}; in pidl
metze
Modified:
branches/SAMBA_4_0/source/dsdb/samdb/samdb.c
branches/SAMBA_4_0/source/librpc/idl/samr.idl
branches/SAMBA_4_0/source/torture/rpc/samr.c
branches/SAMBA_4_0/source/torture/rpc/samsync.c
Changeset:
Modified: branches/SAMBA_4_0/source/dsdb/samdb/samdb.c
===
--- branches/SAMBA_4_0/source/dsdb/samdb/samdb.c2005-01-05 10:21:08 UTC
(rev 4531)
+++ branches/SAMBA_4_0/source/dsdb/samdb/samdb.c2005-01-05 15:24:20 UTC
(rev 4532)
@@ -556,14 +556,14 @@
const int units_per_week = 168;
const struct ldb_val *val = ldb_msg_find_ldb_val(msg, attr);
ZERO_STRUCT(hours);
- hours.bitmap = talloc_array_p(mem_ctx, uint8, units_per_week);
- if (!hours.bitmap) {
+ hours.bits = talloc_array_p(mem_ctx, uint8, units_per_week);
+ if (!hours.bits) {
return hours;
}
hours.units_per_week = units_per_week;
- memset(hours.bitmap, 0xFF, units_per_week);
+ memset(hours.bits, 0xFF, units_per_week);
if (val) {
- memcpy(hours.bitmap, val-data, MIN(val-length,
units_per_week));
+ memcpy(hours.bits, val-data, MIN(val-length, units_per_week));
}
return hours;
}
@@ -888,7 +888,7 @@
struct ldb_wrap *sam_ctx = ctx;
struct ldb_val val;
val.length = hours-units_per_week / 8;
- val.data = hours-bitmap;
+ val.data = hours-bits;
return ldb_msg_add_value(sam_ctx-ldb, msg, attr_name, val);
}
Modified: branches/SAMBA_4_0/source/librpc/idl/samr.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/samr.idl 2005-01-05 10:21:08 UTC
(rev 4531)
+++ branches/SAMBA_4_0/source/librpc/idl/samr.idl 2005-01-05 15:24:20 UTC
(rev 4532)
@@ -568,7 +568,7 @@
/* this is also used in samr and netlogon */
typedef [public, flag(NDR_PAHEX)] struct {
uint16 units_per_week;
- [size_is(1260), length_is(units_per_week/8)] uint8 *bitmap;
+ [size_is(1260), length_is(units_per_week/8)] uint8 *bits;
} samr_LogonHours;
typedef struct {
Modified: branches/SAMBA_4_0/source/torture/rpc/samr.c
===
--- branches/SAMBA_4_0/source/torture/rpc/samr.c2005-01-05 10:21:08 UTC
(rev 4531)
+++ branches/SAMBA_4_0/source/torture/rpc/samr.c2005-01-05 15:24:20 UTC
(rev 4532)
@@ -245,11 +245,11 @@
s2.in.level = lvl1; \
u = *q.out.info; \
if (lvl1 == 21) { \
- uint8_t *bitmap = u.info21.logon_hours.bitmap; \
+ uint8_t *bits = u.info21.logon_hours.bits; \
ZERO_STRUCT(u.info21); \
if (fpval == SAMR_FIELD_LOGON_HOURS) { \
u.info21.logon_hours.units_per_week = 168; \
- u.info21.logon_hours.bitmap = bitmap; \
+ u.info21.logon_hours.bits = bits; \
} \
u.info21.fields_present = fpval; \
} \
@@ -324,10 +324,10 @@
TEST_USERINFO_INT(21, code_page, 21, code_page, __LINE__,
SAMR_FIELD_CODE_PAGE);
- TEST_USERINFO_INT(4, logon_hours.bitmap[3], 3, logon_hours.bitmap[3],
1, 0);
- TEST_USERINFO_INT(4, logon_hours.bitmap[3], 5, logon_hours.bitmap[3],
2, 0);
- TEST_USERINFO_INT(4, logon_hours.bitmap[3], 21, logon_hours.bitmap[3],
3, 0);
- TEST_USERINFO_INT(21, logon_hours.bitmap[3], 21, logon_hours.bitmap[3],
4,
+ TEST_USERINFO_INT(4, logon_hours.bits[3], 3, logon_hours.bits[3], 1,
0);
+ TEST_USERINFO_INT(4, logon_hours.bits[3], 5, logon_hours.bits[3], 2,
0);
+ TEST_USERINFO_INT(4, logon_hours.bits[3], 21, logon_hours.bits[3], 3,
0);
+ TEST_USERINFO_INT(21, logon_hours.bits[3], 21, logon_hours.bits[3], 4,
SAMR_FIELD_LOGON_HOURS);
TEST_USERINFO_INT_EXP(16, acct_flags, 5, acct_flags,
Modified: branches/SAMBA_4_0/source/torture/rpc/samsync.c
===
--- branches/SAMBA_4_0/source/torture/rpc/samsync.c 2005-01-05 10:21:08 UTC
(rev 4531)
+++ branches/SAMBA_4_0/source/torture/rpc/samsync.c 2005-01-05 15:24:20 UTC
(rev 4532)
@@ -453,7 +453,7 @@
TEST_INT_EQUAL(q.out.info-info21.logon_hours.units_per_week,
user-logon_hours.units_per_week);
if (ret) {
- if (memcmp(q.out.info-info21.logon_hours.bitmap,
svn commit: samba r4533 - in branches/SAMBA_4_0/source/build/pidl: .
Author: metze
Date: 2005-01-05 15:26:48 + (Wed, 05 Jan 2005)
New Revision: 4533
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4533
Log:
parsing support for:
typedef [bitmap16bit] bitmap {
FLAG1 = 0x0001,
FLAG2 = 0x8000
} fooflags;
metze
Modified:
branches/SAMBA_4_0/source/build/pidl/idl.yp
Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/idl.yp
===
--- branches/SAMBA_4_0/source/build/pidl/idl.yp 2005-01-05 15:24:20 UTC (rev
4532)
+++ branches/SAMBA_4_0/source/build/pidl/idl.yp 2005-01-05 15:26:48 UTC (rev
4533)
@@ -16,7 +16,7 @@
%%
idl:
#empty { {} }
-| idl interface { push(@{$_[1]}, $_[2]); $_[1] }
+ | idl interface { push(@{$_[1]}, $_[2]); $_[1] }
| idl coclass { push(@{$_[1]}, $_[2]); $_[1] }
;
@@ -96,7 +96,7 @@
}}
;
-type: struct | union | enum | identifier
+type: struct | union | enum | bitmap | identifier
| void { void }
;
@@ -117,6 +117,21 @@
| identifier '=' anytext { $_[1]$_[2]$_[3] }
;
+bitmap: 'bitmap' '{' bitmap_elements '}'
+{{
+ TYPE = BITMAP,
+ELEMENTS = $_[3]
+}}
+;
+
+bitmap_elements:
+ bitmap_element{ [ $_[1] ] }
+| bitmap_elements ',' bitmap_element { push(@{$_[1]}, $_[3]); $_[1] }
+;
+
+bitmap_element: identifier '=' anytext { $_[1] ( $_[3] ) }
+;
+
struct: 'struct' '{' element_list1 '}'
{{
TYPE = STRUCT,
@@ -313,7 +328,7 @@
$parser-YYData-{LAST_TOKEN} = $1;
if ($1 =~
/^(coclass|interface|const|typedef|union
- |struct|enum|void|case|default)$/x) {
+ |struct|enum|bitmap|void|case|default)$/x) {
return $1;
}
return('IDENTIFIER',$1);
svn commit: samba r4534 - in branches/SAMBA_4_0/source/build/pidl: .
Author: metze Date: 2005-01-05 15:28:10 + (Wed, 05 Jan 2005) New Revision: 4534 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4534 Log: update the yapp generated code metze Modified: branches/SAMBA_4_0/source/build/pidl/idl.pm Changeset: Sorry, the patch is too large (1695 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4534
svn commit: samba r4535 - in branches/SAMBA_4_0/source: build/pidl librpc/ndr
Author: metze
Date: 2005-01-05 15:36:26 + (Wed, 05 Jan 2005)
New Revision: 4535
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4535
Log:
add full support for
typedef bitmap {
FLAG1 = 0x01
} fooflags;
typedef struct {
fooflags flags;
}
metze
Modified:
branches/SAMBA_4_0/source/build/pidl/header.pm
branches/SAMBA_4_0/source/build/pidl/parser.pm
branches/SAMBA_4_0/source/build/pidl/util.pm
branches/SAMBA_4_0/source/librpc/ndr/ndr_basic.c
Changeset:
Sorry, the patch is too large (404 lines) to include; please use WebSVN to see
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4535
svn commit: samba r4536 - in branches/SAMBA_4_0/source/librpc/idl: .
Author: metze
Date: 2005-01-05 15:37:43 + (Wed, 05 Jan 2005)
New Revision: 4536
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4536
Log:
make use of the new enum and bitmap feature of pidl
metze
Modified:
branches/SAMBA_4_0/source/librpc/idl/dssetup.idl
Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/dssetup.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/dssetup.idl2005-01-05 15:36:26 UTC
(rev 4535)
+++ branches/SAMBA_4_0/source/librpc/idl/dssetup.idl2005-01-05 15:37:43 UTC
(rev 4536)
@@ -24,21 +24,23 @@
DS_ROLE_PRIMARY_DC = 5
} dssetup_DsRole;
- const uint32 DS_ROLE_PRIMARY_DS_RUNNING = 0x0001;
- const uint32 DS_ROLE_PRIMARY_DS_MIXED_MODE = 0x0002;
- const uint32 DS_ROLE_UPGRADE_IN_PROGRESS= 0x0004;
- const uint32 DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT= 0x0100;
+ typedef bitmap {
+ DS_ROLE_PRIMARY_DS_RUNNING = 0x0001,
+ DS_ROLE_PRIMARY_DS_MIXED_MODE = 0x0002,
+ DS_ROLE_UPGRADE_IN_PROGRESS = 0x0004,
+ DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT = 0x0100
+ } dssetup_DsRoleFlags;
typedef struct {
- uint16role;
- uint32flags;
- unistr*domain;
- unistr*dns_domain;
- unistr*forest;
- GUID domain_guid;
+ dssetup_DsRole role;
+ dssetup_DsRoleFlags flags;
+ unistr *domain;
+ unistr *dns_domain;
+ unistr *forest;
+ GUIDdomain_guid;
} dssetup_DsRolePrimaryDomInfoBasic;
- typedef enum {
+ typedef [v1_enum] enum {
DS_ROLE_NOT_UPGRADING = 0,
DS_ROLE_UPGRADING = 1
} dssetup_DsUpgrade;
@@ -50,8 +52,8 @@
} dssetup_DsPrevious;
typedef struct {
- uint32 upgrading;
- uint16 previous_role;
+ dssetup_DsUpgrade upgrading;
+ dssetup_DsPrevious previous_role;
} dssetup_DsRoleUpgradeStatus;
typedef enum {
@@ -61,7 +63,7 @@
} dssetup_DsRoleOp;
typedef struct {
- uint16 status;
+ dssetup_DsRoleOp status;
} dssetup_DsRoleOpStatus;
typedef enum {
@@ -77,7 +79,7 @@
} dssetup_DsRoleInfo;
WERROR dssetup_DsRoleGetPrimaryDomainInformation(
- [in] uint16 level,
+ [in] dssetup_DsRoleInfoLevel level,
[out,switch_is(level)] dssetup_DsRoleInfo *info
);
svn commit: samba r4537 - in trunk/source/utils: .
Author: jmcd
Date: 2005-01-05 16:02:30 + (Wed, 05 Jan 2005)
New Revision: 4537
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4537
Log:
Fix bugzilla 2198, accounts which have password last set to 0 are getting
no passwords after vampire. Set password last set field to now.
Modified:
trunk/source/utils/net_rpc_samsync.c
Changeset:
Modified: trunk/source/utils/net_rpc_samsync.c
===
--- trunk/source/utils/net_rpc_samsync.c2005-01-05 15:37:43 UTC (rev
4536)
+++ trunk/source/utils/net_rpc_samsync.c2005-01-05 16:02:30 UTC (rev
4537)
@@ -453,6 +453,8 @@
stored_time = pdb_get_pass_last_set_time(account);
if (stored_time != unix_time)
pdb_set_pass_last_set_time(account, unix_time,
PDB_CHANGED);
+ } else {
+ pdb_set_pass_last_set_time(account, time(NULL),
PDB_CHANGED);
}
#if 0
svn commit: samba r4538 - in branches/SAMBA_3_0/source/utils: .
Author: jmcd
Date: 2005-01-05 16:02:56 + (Wed, 05 Jan 2005)
New Revision: 4538
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4538
Log:
Fix bugzilla 2198, accounts which have password last set to 0 are getting
no passwords after vampire. Set password last set field to now.
Modified:
branches/SAMBA_3_0/source/utils/net_rpc_samsync.c
Changeset:
Modified: branches/SAMBA_3_0/source/utils/net_rpc_samsync.c
===
--- branches/SAMBA_3_0/source/utils/net_rpc_samsync.c 2005-01-05 16:02:30 UTC
(rev 4537)
+++ branches/SAMBA_3_0/source/utils/net_rpc_samsync.c 2005-01-05 16:02:56 UTC
(rev 4538)
@@ -445,6 +445,9 @@
stored_time = pdb_get_pass_last_set_time(account);
if (stored_time != unix_time)
pdb_set_pass_last_set_time(account, unix_time,
PDB_CHANGED);
+ } else {
+ /* no last set time, make it now */
+ pdb_set_pass_last_set_time(account, time(NULL), PDB_CHANGED);
}
#if 0
svn commit: samba r4539 - in branches/SAMBA_3_0/source: . printing smbd utils
Author: jerry Date: 2005-01-05 16:20:35 + (Wed, 05 Jan 2005) New Revision: 4539 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4539 Log: patch from Rob -- adding real printcap name cache function to speed up printcap reloads Added: branches/SAMBA_3_0/source/printing/print_aix.c Modified: branches/SAMBA_3_0/source/Makefile.in branches/SAMBA_3_0/source/printing/load.c branches/SAMBA_3_0/source/printing/nt_printing.c branches/SAMBA_3_0/source/printing/pcap.c branches/SAMBA_3_0/source/printing/print_cups.c branches/SAMBA_3_0/source/printing/print_svid.c branches/SAMBA_3_0/source/printing/printing.c branches/SAMBA_3_0/source/smbd/process.c branches/SAMBA_3_0/source/smbd/server.c branches/SAMBA_3_0/source/smbd/service.c branches/SAMBA_3_0/source/utils/testprns.c Changeset: Sorry, the patch is too large (1285 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4539
svn commit: samba r4540 - in branches/SAMBA_4_0/source/build/pidl: .
Author: metze
Date: 2005-01-05 16:31:05 + (Wed, 05 Jan 2005)
New Revision: 4540
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4540
Log:
sync enum and bitmap code
metze
Modified:
branches/SAMBA_4_0/source/build/pidl/header.pm
branches/SAMBA_4_0/source/build/pidl/parser.pm
branches/SAMBA_4_0/source/build/pidl/util.pm
Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/header.pm
===
--- branches/SAMBA_4_0/source/build/pidl/header.pm 2005-01-05 16:20:35 UTC
(rev 4539)
+++ branches/SAMBA_4_0/source/build/pidl/header.pm 2005-01-05 16:31:05 UTC
(rev 4540)
@@ -98,7 +98,7 @@
my($enum) = shift;
my($name) = shift;
-util::register_enum($name);
+util::register_enum($enum, $name);
$res .= \nenum $name {\n;
$tab_depth++;
Modified: branches/SAMBA_4_0/source/build/pidl/parser.pm
===
--- branches/SAMBA_4_0/source/build/pidl/parser.pm 2005-01-05 16:20:35 UTC
(rev 4539)
+++ branches/SAMBA_4_0/source/build/pidl/parser.pm 2005-01-05 16:31:05 UTC
(rev 4540)
@@ -469,17 +469,14 @@
!util::has_property($utype, nodiscriminant)) {
my $e2 = find_sibling($e, $switch);
my $type_decl = $e2-{TYPE};
- my $type_fn = $e2-{TYPE};
pidl \tif (($ndr_flags) NDR_SCALARS) {\n;
if (util::is_enum($e2-{TYPE})) {
$type_decl = util::enum_type_decl($e2);
- $type_fn = util::enum_type_fn($e2);
} elsif (util::is_bitmap($e2-{TYPE})) {
$type_decl = util::bitmap_type_decl($e2);
- $type_fn = util::bitmap_type_fn($e2);
}
pidl \t\t$type_decl _level;\n;
- pidl \t\tNDR_CHECK(ndr_pull_$type_fn(ndr, _level));\n;
+ pidl \t\tNDR_CHECK(ndr_pull_$e2-{TYPE}(ndr, _level));\n;
if ($switch_var =~ /r-in/) {
pidl \t\tif (!(ndr-flags LIBNDR_FLAG_REF_ALLOC)
_level != $switch_var) {\n;
} else {
@@ -804,16 +801,11 @@
sub ParseEnumPush($)
{
my($enum) = shift;
+ my($type_fn) = util::enum_type_fn($enum);
start_flags($enum);
- if (util::has_property($enum-{PARENT}, v1_enum)) {
- pidl \tNDR_CHECK(ndr_push_uint32(ndr, r));\n;
- } elsif (util::has_property($enum-{PARENT}, enum8bit)) {
- pidl \tNDR_CHECK(ndr_push_uint8(ndr, r));\n;
- } else {
- pidl \tNDR_CHECK(ndr_push_uint16(ndr, r));\n;
- }
+ pidl \tNDR_CHECK(ndr_push_$type_fn(ndr, r));\n;
end_flags($enum);
}
@@ -823,19 +815,12 @@
sub ParseEnumPull($)
{
my($enum) = shift;
+ my($type_fn) = util::enum_type_fn($enum);
start_flags($enum);
- if (util::has_property($enum-{PARENT}, v1_enum)) {
- pidl \tuint32_t v;\n;
- pidl \tNDR_CHECK(ndr_pull_uint32(ndr, v));\n;
- } elsif (util::has_property($enum-{PARENT}, enum8bit)) {
- pidl \tuint8_t v;\n;
- pidl \tNDR_CHECK(ndr_pull_uint8(ndr, v));\n;
- } else {
- pidl \tuint16_t v;\n;
- pidl \tNDR_CHECK(ndr_pull_uint16(ndr, v));\n;
- }
+ pidl \t$type_fn v;\n;
+ pidl \tNDR_CHECK(ndr_pull_$type_fn(ndr, v));\n;
pidl \t*r = v;\n;
end_flags($enum);
@@ -873,7 +858,6 @@
sub ParseBitmapPush($)
{
my($bitmap) = shift;
- my($type_decl) = util::bitmap_type_decl($bitmap);
my($type_fn) = util::bitmap_type_fn($bitmap);
start_flags($bitmap);
@@ -888,12 +872,11 @@
sub ParseBitmapPull($)
{
my($bitmap) = shift;
- my($type_decl) = util::bitmap_type_decl($bitmap);
my($type_fn) = util::bitmap_type_fn($bitmap);
start_flags($bitmap);
- pidl \t$type_decl v;\n;
+ pidl \t$type_fn v;\n;
pidl \tNDR_CHECK(ndr_pull_$type_fn(ndr, v));\n;
pidl \t*r = v;\n;
Modified: branches/SAMBA_4_0/source/build/pidl/util.pm
===
--- branches/SAMBA_4_0/source/build/pidl/util.pm2005-01-05 16:20:35 UTC
(rev 4539)
+++ branches/SAMBA_4_0/source/build/pidl/util.pm2005-01-05 16:31:05 UTC
(rev 4540)
@@ -202,10 +202,11 @@
my %enum_list;
-sub register_enum($)
+sub register_enum($$)
{
+ my $enum = shift;
my $name = shift;
- $enum_list{$name} = 1;
+ $enum_list{$name} = $enum;
}
sub is_enum($)
@@ -214,16 +215,27 @@
return defined $enum_list{$name}
}
+sub get_enum($)
+{
+ my $name = shift;
+ return $enum_list{$name};
+}
+
sub enum_type_decl($)
{
- my $e = shift;
- return enum $e-{TYPE};
+ my $enum = shift;
+ return enum $enum-{TYPE};
}
sub enum_type_fn($)
{
- my $e =
svn commit: samba r4541 - in branches/SAMBA_4_0/source/librpc/idl: .
Author: metze Date: 2005-01-05 16:48:58 + (Wed, 05 Jan 2005) New Revision: 4541 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4541 Log: make use of new enum and bitmap features metze Modified: branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl Changeset: Sorry, the patch is too large (256 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4541
svn commit: samba r4542 - in branches/SAMBA_4_0/source/librpc/idl: .
Author: metze
Date: 2005-01-05 16:54:51 + (Wed, 05 Jan 2005)
New Revision: 4542
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4542
Log:
use bitmap for samr_FieldsPresent and samr_AcctFlags
metze
Modified:
branches/SAMBA_4_0/source/librpc/idl/samr.idl
Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/samr.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/samr.idl 2005-01-05 16:48:58 UTC
(rev 4541)
+++ branches/SAMBA_4_0/source/librpc/idl/samr.idl 2005-01-05 16:54:51 UTC
(rev 4542)
@@ -16,19 +16,20 @@
] interface samr
{
/* account control (acct_flags) bits */
- const int ACB_DISABLED = 0x0001; /* 1 = User account disabled */
- const int ACB_HOMDIRREQ = 0x0002; /* 1 = Home directory required */
- const int ACB_PWNOTREQ = 0x0004; /* 1 = User password not required */
- const int ACB_TEMPDUP = 0x0008; /* 1 = Temporary duplicate account */
- const int ACB_NORMAL= 0x0010; /* 1 = Normal user account */
- const int ACB_MNS = 0x0020; /* 1 = MNS logon user account */
- const int ACB_DOMTRUST = 0x0040; /* 1 = Interdomain trust account */
- const int ACB_WSTRUST = 0x0080; /* 1 = Workstation trust account */
- const int ACB_SVRTRUST = 0x0100; /* 1 = Server trust account */
- const int ACB_PWNOEXP = 0x0200; /* 1 = User password does not expire
*/
- const int ACB_AUTOLOCK = 0x0400; /* 1 = Account auto locked */
+ typedef bitmap {
+ ACB_DISABLED = 0x0001, /* 1 = User account disabled */
+ ACB_HOMDIRREQ = 0x0002, /* 1 = Home directory required */
+ ACB_PWNOTREQ = 0x0004, /* 1 = User password not required
*/
+ ACB_TEMPDUP = 0x0008, /* 1 = Temporary duplicate account
*/
+ ACB_NORMAL= 0x0010, /* 1 = Normal user account */
+ ACB_MNS = 0x0020, /* 1 = MNS logon user account */
+ ACB_DOMTRUST = 0x0040, /* 1 = Interdomain trust account */
+ ACB_WSTRUST = 0x0080, /* 1 = Workstation trust account */
+ ACB_SVRTRUST = 0x0100, /* 1 = Server trust account */
+ ACB_PWNOEXP = 0x0200, /* 1 = User password does not
expire */
+ ACB_AUTOLOCK = 0x0400 /* 1 = Account auto locked */
+ } samr_AcctFlags;
-
/**/
/* Function: 0x00 */
NTSTATUS samr_Connect (
@@ -271,7 +272,7 @@
NTSTATUS samr_EnumDomainUsers(
[in,ref] policy_handle *domain_handle,
[in,out,ref] uint32 *resume_handle,
- [in] uint32 acct_flags,
+ [in] samr_AcctFlags acct_flags,
[in] uint32 max_size,
[out] samr_SamArray *sam,
[out] uint32 num_entries
@@ -292,7 +293,7 @@
NTSTATUS samr_EnumDomainAliases(
[in,ref] policy_handle *domain_handle,
[in,out,ref] uint32 *resume_handle,
- [in] uint32 acct_flags,
+ [in] samr_AcctFlags acct_flags,
[out] samr_SamArray *sam,
[out] uint32 num_entries
);
@@ -589,7 +590,7 @@
samr_LogonHours logon_hours;
uint16 bad_password_count;
uint16 logon_count;
- uint32 acct_flags;
+ samr_AcctFlags acct_flags;
} samr_UserInfo3;
typedef struct {
@@ -614,7 +615,7 @@
uint16 logon_count;
NTTIME last_password_change;
NTTIME acct_expiry;
- uint32 acct_flags;
+ samr_AcctFlags acct_flags;
} samr_UserInfo5;
typedef struct {
@@ -656,7 +657,7 @@
} samr_UserInfo14;
typedef struct {
- uint32 acct_flags;
+ samr_AcctFlags acct_flags;
} samr_UserInfo16;
typedef struct {
@@ -668,19 +669,21 @@
} samr_UserInfo20;
/* this defines the bits used for fields_present in info21 */
- const int SAMR_FIELD_NAME = 0x0002;
- const int SAMR_FIELD_DESCRIPTION = 0x0010;
- const int SAMR_FIELD_COMMENT = 0x0020;
- const int SAMR_FIELD_LOGON_SCRIPT = 0x0100;
- const int SAMR_FIELD_PROFILE_PATH = 0x0200;
- const int SAMR_FIELD_WORKSTATION = 0x0400;
- const int SAMR_FIELD_LOGON_HOURS = 0x2000;
- const int SAMR_FIELD_ACCT_FLAGS = 0x0010;
- const int SAMR_FIELD_PARAMETERS = 0x0020;
- const int SAMR_FIELD_COUNTRY_CODE = 0x0040;
- const int SAMR_FIELD_CODE_PAGE= 0x0080;
- const int SAMR_FIELD_PASSWORD = 0x0100; /* either of these */
- const int
svn commit: samba r4543 - in trunk/source: . printing smbd utils
Author: jerry Date: 2005-01-05 16:55:33 + (Wed, 05 Jan 2005) New Revision: 4543 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4543 Log: patch from Rob -- adding real printcap name cache function to speed up printcap reloads Added: trunk/source/printing/print_aix.c Modified: trunk/source/Makefile.in trunk/source/printing/load.c trunk/source/printing/nt_printing.c trunk/source/printing/pcap.c trunk/source/printing/print_cups.c trunk/source/printing/print_svid.c trunk/source/printing/printing.c trunk/source/smbd/process.c trunk/source/smbd/server.c trunk/source/smbd/service.c trunk/source/utils/testprns.c Changeset: Sorry, the patch is too large (1168 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4543
svn commit: samba-web r489 - in trunk/support: .
Author: deryck Date: 2005-01-05 23:02:47 + (Wed, 05 Jan 2005) New Revision: 489 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=489 Log: Adding a support provider. --deryck Modified: trunk/support/canada.html Changeset: Modified: trunk/support/canada.html === --- trunk/support/canada.html 2005-01-05 14:20:08 UTC (rev 488) +++ trunk/support/canada.html 2005-01-05 23:02:47 UTC (rev 489) @@ -177,6 +177,28 @@ /small/pre +!-- Added: 05 January 2005 -- +hr / +presmall +Net Direct Inc. +a href=http://netdirect.ca/support/contact.php;http://netdirect.ca/support/contact.php/a +564 Weber St. North, Unit 12 +Waterloo, Ontario +N2L 5C6 Canada + +Support (1-866-883-1172 *5104) +Sales (1-866-883-1172 *5101) + +Net Direct Inc. is the Technology Triangles Premier Linux solutions +provider. Our mission is to provide the best IT support to small and +mediums businesses. As experts in systems consulting, we are able to +configure, set-up, train, install and maintain your computer system you +have. Our certified technicians will assist you via the phone, on-line +or live support if needed. +/small/pre + + + !-- Updated: 19 May 2004 -- hr / h3Quebec/h3
svn commit: lorikeet r172 - in trunk/white-papers: .
Author: abartlet Date: 2005-01-05 23:56:35 + (Wed, 05 Jan 2005) New Revision: 172 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=172 Log: A bit more clarifying detail on the white papers. Andrew Bartlett Modified: trunk/white-papers/gensec-white-paper.lyx trunk/white-papers/samba3-samba4.lyx Changeset: Modified: trunk/white-papers/gensec-white-paper.lyx === --- trunk/white-papers/gensec-white-paper.lyx 2005-01-05 09:03:43 UTC (rev 171) +++ trunk/white-papers/gensec-white-paper.lyx 2005-01-05 23:56:35 UTC (rev 172) @@ -146,6 +146,23 @@ communications channel, such that only the other party can decrypt it. \layout Subsection* +Transparency and Single Sign on +\layout Standard + +One of the biggest challenges in building a security subsystem is correct + implementation of `Single Sign On' and single source of password solutions. + Users expect that if they have `logged on' to the network, that further + network access will not require them to re-enter their passwords, and any + security subsystem should be designed to accommodate this. + The challenge is to do so in a way that does not allow the user to unwittingly + compromise their own security. +\layout Standard + +Likewise, the choice of data integrity and encryption functions should be + transparent to the user, and to a large extent to the applications using + the security subsystem. +\layout Subsection* + Authorization problems \layout Standard @@ -227,6 +244,8 @@ SCHANNEL implementation. While it did work, the lack of clear boundaries around many parts of this code made extracting and consolidating this infrastructure a nightmare. + A lack of clear interfaces also meant that libsmbclient and smbclient were + largely unable to use Kerberos session credentials, when available. With Samba4, the opportunity was grasped to get in early, before too much code was written, and to ensure that boundaries were indeed kept. @@ -317,10 +336,28 @@ While it has been listed above as a security protocol, it really is a security negotiation protocol, which in turn selects a real protocol to handle the connection. - GENSEC avoids cluttering each implementation module with understanding - about this special wrapping, and handles all the details in the SPNEGO - module. + As such, GENSEC has been designed with such recursing in mind, with most + of the details handled in the SPNEGO module. +\layout Subsection* + +Single Sign On +\layout Standard + +Following on from the special handling of SPNEGO is a particular problem + for the implementation of Single Sign On solutions. + On a Unix-like platform, the only Single Sign On technology currently available + is Kerberos, and this is selected (typically) via SPNEGO. + This means that the calling application has no idea if Kerberos is available, + nor if the user has sufficient credentials to use it. + (Only NTLMSSP may be available, or the KDC may be un-contactable, which + would require a password prompt). +\layout Standard + +As such, an infrastructure of callbacks has and is being developed, to correctly + handle all the different cases. + This is not only at the GENSEC layer, but also into the calling applications, + which must no longer unconditionally prompt for a password. \layout Section* GENSEC Interfaces Modified: trunk/white-papers/samba3-samba4.lyx === --- trunk/white-papers/samba3-samba4.lyx2005-01-05 09:03:43 UTC (rev 171) +++ trunk/white-papers/samba3-samba4.lyx2005-01-05 23:56:35 UTC (rev 172) @@ -230,9 +230,19 @@ the pace at which Samba4 moved, and an unwillingness on the part of Samba4 developers to `slow down' or compromise the Samba4 development to accommodate the half-merge. - +\begin_inset Foot +collapsed true + \layout Standard +Had a compromise been reached, certain `no go' zones been established, internal + interfaces fixed and significant effort put into the merge, it was feared + that Samba4 development could stall out entirely. +\end_inset + + +\layout Standard + Merging code-bases is perhaps one of the hardest tasks in software development, particularly when they have diverged in the way that Samba 3.0 and Samba4 have. @@ -301,6 +311,19 @@ Win9X clients) must be explicitly handled. \layout Subsubsection* +Authentication +\layout Standard + +It should be noted that redirection of incoming PDUs on named pipes is not + as simple as simply forwarding datagrams, as there is a significant amount + of state that is inherited from the CIFS level connection. + Correctly handling this state transfer has for the XAD and Samba-TNG cases + been done by an `out of band' mechanism, or by prefixing it to the first + message. + In either case, details such as user identity, groups and session keys + must be communicated and accepted. +\layout Subsubsection* +
Build status as of Thu Jan 6 00:00:01 2005
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2005-01-05 00:00:03.0 + +++ /home/build/master/cache/broken_results.txt 2005-01-06 00:00:51.0 + @@ -1,34 +1,52 @@ -Build status as of Wed Jan 5 00:00:01 2005 +Build status as of Thu Jan 6 00:00:01 2005 Build counts: Tree Total Broken Panic -ccache 32 2 0 -distcc 30 1 0 +ccache 34 2 0 +distcc 32 3 0 ppp 9 0 0 -rsync33 2 0 -samba2 2 1 +rsync35 2 0 +samba2 2 0 samba-docs 0 0 0 -samba4 36 15 0 -samba_3_035 12 1 +samba4 37 11 0 +samba_3_037 35 0 Currently broken builds: Host Tree Compiler Status -mungerasamba_3_0gccok/ok/ok/ 2/PANIC +mungerasamba_3_0gccok/ 2/?/? fusberta samba4 gccok/ 2/?/? +fusberta samba_3_0gccok/ 2/?/? +samba-s390 samba_3_0gccok/ 2/?/? +rhonwynsamba_3_0gccok/ 2/?/? rhonwynsamba4 gcc-4.0ok/ 2/?/? rhonwynsamba_3_0gcc-4.0ok/ 2/?/? +quango samba_3_0gccok/ 2/?/? superego samba4 gccok/ 2/?/? -cl012 samba_3_0gcc 2/?/?/? +superego samba_3_0gccok/ 2/?/? +cl012 samba_3_0gccok/ 2/?/? +berks samba_3_0gccok/ 2/?/? gc8samba4 gccok/ 1/?/? -aretnapsamba4 gccok/ 1/?/? -aretnapsamba_3_0gcc 127/?/?/? -smartserv1 samba_3_0gcc-4.0ok/ok/ok/ 2 +gc8samba_3_0gccok/ 1/?/? +aretnapsamba_3_0gccok/ 1/?/? +aretnapsamba_3_0iccok/ 1/?/? +gc4samba_3_0gccok/ 1/?/? +sbfsamba_3_0gccok/ 1/?/? +smartserv1 samba_3_0gccok/ 1/?/? +smartserv1 samba_3_0gcc-4.0ok/ 1/?/? gwen distcc cc ok/ 1/?/? gwen samba4 cc ok/ 1/?/? +gwen samba_3_0cc ok/ 1/?/? +au2distcc cc ok/ 1/?/? +au2samba_3_0cc ok/ 1/?/? +au2distcc gccok/ 1/?/? +au2samba_3_0gccok/ 1/?/? us4samba4 cc ok/ 1/?/? +us4samba_3_0cc ok/ 1/?/? us4samba4 gccok/ 1/?/? +us4samba_3_0gccok/ 1/?/? +trip samba_3_0gccok/ 2/?/? flock samba4 gccok/ 1/?/? -svamp samba_3_0gccok/ok/ok/ 42 +svamp samba_3_0gccok/ 2/?/? opisol10 ccache gccok/ok/ok/ 1 opisol10 samba4 gccok/ 1/?/? opisol10 samba_3_0gccok/ 1/?/? @@ -36,15 +54,18 @@ gc20 samba4 gccok/ 2/?/? gc20 samba_3_0gccok/ 2/?/? sun1 samba_3_0cc ok/ 2/?/? -sun1 samba4 gccok/ 2/?/? -sun1 samba_3_0gccok/ok/ok/ 1 +sun1 samba_3_0gccok/ 2/?/? +Isis samba_3_0gccok/ 2/?/? fire1 samba_3_0cc ok/ 2/?/? +fire1 samba_3_0gccok/ 2/?/? m30ccache gccok/ok/ok/ 2 m30rsyncgccok/ 2/?/? m30samba4 gccok/ 2/?/? m30samba_3_0gccok/ok/ok/ 42 metze02sambagccok/ 2/?/? -metze02samba4 gccok/ 2/?/? -metze02samba4 gcc-3.4ok/ 2/?/? -metze01sambagccok/ok/ok/ 1/PANIC +metze02samba_3_0gccok/ 2/?/? +metze01sambagccok/ 2/?/? +metze01samba_3_0gccok/ 2/?/? +PCS1 samba_3_0gccok/ 2/?/? +opisamba_3_0gccok/ 2/?/?
svn commit: samba r4544 - in trunk/source/lib: .
Author: jra
Date: 2005-01-06 00:45:39 + (Thu, 06 Jan 2005)
New Revision: 4544
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4544
Log:
Fix based on work by [EMAIL PROTECTED] :
* In an application with signals, it was possible for functions to block
indefinitely while awaiting timeouts. This patch ensures that if a system
call with a timeout is aborted and needs to be restarted, it is restarted
with a timeout which is adjusted for the amount of time already waited.
Jeremy.
Modified:
trunk/source/lib/select.c
Changeset:
Modified: trunk/source/lib/select.c
===
--- trunk/source/lib/select.c 2005-01-05 16:55:33 UTC (rev 4543)
+++ trunk/source/lib/select.c 2005-01-06 00:45:39 UTC (rev 4544)
@@ -128,12 +128,23 @@
{
int ret;
fd_set *readfds2, readfds_buf, *writefds2, writefds_buf, *errorfds2,
errorfds_buf;
- struct timeval tval2, *ptval;
+ struct timeval tval2, *ptval, end_time;
readfds2 = (readfds ? readfds_buf : NULL);
writefds2 = (writefds ? writefds_buf : NULL);
errorfds2 = (errorfds ? errorfds_buf : NULL);
- ptval = (tval ? tval2 : NULL);
+ if (tval) {
+ GetTimeOfDay(end_time);
+ end_time.tv_sec += tval-tv_sec;
+ end_time.tv_usec += tval-tv_usec;
+ end_time.tv_sec += end_time.tv_usec / 100;
+ end_time.tv_usec %= 100;
+ errno = 0;
+ tval2 = *tval;
+ ptval = tval2;
+ } else {
+ ptval = NULL;
+ }
do {
if (readfds)
@@ -142,9 +153,20 @@
writefds_buf = *writefds;
if (errorfds)
errorfds_buf = *errorfds;
- if (tval)
- tval2 = *tval;
+ if (ptval (errno == EINTR)) {
+ struct timeval now_time;
+ SMB_BIG_INT tdif;
+ GetTimeOfDay(now_time);
+ tdif = usec_time_diff(end_time, now_time);
+ if (tdif = 0) {
+ ret = 0; /* time expired. */
+ break;
+ }
+ ptval-tv_sec = tdif / 100;
+ ptval-tv_usec = tdif % 100;
+ }
+
ret = sys_select(maxfd, readfds2, writefds2, errorfds2, ptval);
} while (ret == -1 errno == EINTR);
svn commit: samba r4545 - in branches/SAMBA_3_0/source/lib: .
Author: jra
Date: 2005-01-06 00:45:39 + (Thu, 06 Jan 2005)
New Revision: 4545
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4545
Log:
Fix based on work by [EMAIL PROTECTED] :
* In an application with signals, it was possible for functions to block
indefinitely while awaiting timeouts. This patch ensures that if a system
call with a timeout is aborted and needs to be restarted, it is restarted
with a timeout which is adjusted for the amount of time already waited.
Jeremy.
Modified:
branches/SAMBA_3_0/source/lib/select.c
Changeset:
Modified: branches/SAMBA_3_0/source/lib/select.c
===
--- branches/SAMBA_3_0/source/lib/select.c 2005-01-06 00:45:39 UTC (rev
4544)
+++ branches/SAMBA_3_0/source/lib/select.c 2005-01-06 00:45:39 UTC (rev
4545)
@@ -128,12 +128,23 @@
{
int ret;
fd_set *readfds2, readfds_buf, *writefds2, writefds_buf, *errorfds2,
errorfds_buf;
- struct timeval tval2, *ptval;
+ struct timeval tval2, *ptval, end_time;
readfds2 = (readfds ? readfds_buf : NULL);
writefds2 = (writefds ? writefds_buf : NULL);
errorfds2 = (errorfds ? errorfds_buf : NULL);
- ptval = (tval ? tval2 : NULL);
+ if (tval) {
+ GetTimeOfDay(end_time);
+ end_time.tv_sec += tval-tv_sec;
+ end_time.tv_usec += tval-tv_usec;
+ end_time.tv_sec += end_time.tv_usec / 100;
+ end_time.tv_usec %= 100;
+ errno = 0;
+ tval2 = *tval;
+ ptval = tval2;
+ } else {
+ ptval = NULL;
+ }
do {
if (readfds)
@@ -142,9 +153,20 @@
writefds_buf = *writefds;
if (errorfds)
errorfds_buf = *errorfds;
- if (tval)
- tval2 = *tval;
+ if (ptval (errno == EINTR)) {
+ struct timeval now_time;
+ SMB_BIG_INT tdif;
+ GetTimeOfDay(now_time);
+ tdif = usec_time_diff(end_time, now_time);
+ if (tdif = 0) {
+ ret = 0; /* time expired. */
+ break;
+ }
+ ptval-tv_sec = tdif / 100;
+ ptval-tv_usec = tdif % 100;
+ }
+
ret = sys_select(maxfd, readfds2, writefds2, errorfds2, ptval);
} while (ret == -1 errno == EINTR);
svn commit: samba r4546 - in branches/SAMBA_4_0/source/scripting/swig: .
Author: tpot Date: 2005-01-06 02:10:33 + (Thu, 06 Jan 2005) New Revision: 4546 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4546 Log: Use talloc_p() instad of talloc() Modified: branches/SAMBA_4_0/source/scripting/swig/dcerpc.i Changeset: Modified: branches/SAMBA_4_0/source/scripting/swig/dcerpc.i === --- branches/SAMBA_4_0/source/scripting/swig/dcerpc.i 2005-01-06 00:45:39 UTC (rev 4545) +++ branches/SAMBA_4_0/source/scripting/swig/dcerpc.i 2005-01-06 02:10:33 UTC (rev 4546) @@ -313,7 +313,7 @@ return; } - *s = talloc(mem_ctx, sizeof(DATA_BLOB)); + *s = talloc_p(mem_ctx, DATA_BLOB); (*s)-length = PyString_Size(obj); (*s)-data = PyString_AsString(obj);
svn commit: samba r4547 - in branches/SAMBA_4_0/source: client dsdb/samdb ldap_server lib lib/ldb/ldb_ldap lib/talloc libcli libcli/raw libcli/util ntvfs/common ntvfs/posix ntvfs/unixuid torture torture/basic torture/local torture/raw
Author: tridge Date: 2005-01-06 02:32:43 + (Thu, 06 Jan 2005) New Revision: 4547 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4547 Log: - added talloc_new(ctx) macro that is a neater form of the common talloc(ctx, 0) call. - cleaned up some talloc usage in various files I'd like to get to the point that we have no calls to talloc(), at which point we will rename talloc_p() to talloc(), to encourage everyone to use the typesafe functions. Modified: branches/SAMBA_4_0/source/client/client.c branches/SAMBA_4_0/source/dsdb/samdb/samdb_privilege.c branches/SAMBA_4_0/source/ldap_server/ldap_parse.c branches/SAMBA_4_0/source/ldap_server/ldap_server.c branches/SAMBA_4_0/source/lib/events.c branches/SAMBA_4_0/source/lib/ldb/ldb_ldap/ldb_ldap.c branches/SAMBA_4_0/source/lib/talloc/talloc.h branches/SAMBA_4_0/source/lib/talloc/talloc_guide.txt branches/SAMBA_4_0/source/lib/talloc/testsuite.c branches/SAMBA_4_0/source/libcli/clilist.c branches/SAMBA_4_0/source/libcli/raw/rawfile.c branches/SAMBA_4_0/source/libcli/util/clilsa.c branches/SAMBA_4_0/source/ntvfs/common/sidmap.c branches/SAMBA_4_0/source/ntvfs/posix/pvfs_rename.c branches/SAMBA_4_0/source/ntvfs/posix/pvfs_xattr.c branches/SAMBA_4_0/source/ntvfs/posix/xattr_tdb.c branches/SAMBA_4_0/source/ntvfs/unixuid/vfs_unixuid.c branches/SAMBA_4_0/source/torture/basic/denytest.c branches/SAMBA_4_0/source/torture/local/idtree.c branches/SAMBA_4_0/source/torture/raw/search.c branches/SAMBA_4_0/source/torture/torture_util.c Changeset: Sorry, the patch is too large (461 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4547
svn commit: samba r4548 - in branches/SAMBA_4_0/source/build/pidl: .
Author: tpot
Date: 2005-01-06 02:36:59 + (Thu, 06 Jan 2005)
New Revision: 4548
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4548
Log:
Convert to talloc_p() and talloc_array_p() where appropriate.
(swig stuff seems broken atm though)
Modified:
branches/SAMBA_4_0/source/build/pidl/swig.pm
Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/swig.pm
===
--- branches/SAMBA_4_0/source/build/pidl/swig.pm2005-01-06 02:32:43 UTC
(rev 4547)
+++ branches/SAMBA_4_0/source/build/pidl/swig.pm2005-01-06 02:36:59 UTC
(rev 4548)
@@ -51,7 +51,7 @@
}
if (!util::is_constant($e-{ARRAY_LEN})) {
- $result .= \ts-$prefix$e-{NAME} = talloc(mem_ctx, $size *
sizeof($type));\n;
+ $result .= \ts-$prefix$e-{NAME} = talloc_array_p(mem_ctx, $type,
$size);\n;
}
$result .= \tif (!PyDict_GetItemString(obj, \$e-{NAME}\)) {\n;
@@ -120,7 +120,7 @@
}
}
} else {
- $result .= \ts-$prefix$e-{NAME} = talloc(mem_ctx,
sizeof($e-{TYPE}));\n;
+ $result .= \ts-$prefix$e-{NAME} = talloc_p(mem_ctx,
$e-{TYPE});\n;
$result .= \t*s-$prefix$e-{NAME} = $e-{TYPE}_from_python($obj,
\$e-{NAME}\);\n;
}
} else {
@@ -271,7 +271,7 @@
$result .= \t\t\treturn NULL;\n;
$result .= \t}\n\n;
-$result .= \ts = talloc(mem_ctx, sizeof(struct $fn-{NAME}));\n\n;
+$result .= \ts = talloc_p(mem_ctx, struct $fn-{NAME});\n\n;
# Remove this when all elements are initialised
$result .= \tmemset(s, 0, sizeof(struct $fn-{NAME}));\n\n;
@@ -411,7 +411,7 @@
$result .= \t\treturn NULL;\n;
$result .= \t}\n\n;
-$result .= \ts = talloc(mem_ctx, sizeof(struct $s-{NAME}));\n\n;
+$result .= \ts = talloc_p(mem_ctx, struct $s-{NAME});\n\n;
foreach my $e (@{$s-{DATA}{ELEMENTS}}) {
$result .= FieldFromPython($e, );
@@ -468,8 +468,42 @@
$result .= \treturn obj;\n;
$result .= }\n\n;
+if (util::has_property($s-{DATA}, public)) {
+
+ # Generate function to unmarshall a structure. Used
+ # exclusively (?) in the spoolss pipe.
+
+ $result .= /* Unmarshall a structures from a Python string */\n\n;
+
+ $result .= NTSTATUS unmarshall_$s-{NAME}(DATA_BLOB *blob, TALLOC_CTX
*mem_ctx, struct $s-{NAME} *info)\n;
+ $result .= {\n;
+ $result .= \tstruct ndr_pull *ndr;\n;
+ $result .= \tndr = ndr_pull_init_blob(blob, mem_ctx);\n;
+ $result .= \tif (!ndr) {\n;
+ $result .= \t\treturn NT_STATUS_NO_MEMORY;\n;
+ $result .= \t}\n;
+ $result .= \tNDR_CHECK(ndr_pull_$s-{NAME}(ndr,
NDR_SCALARS|NDR_BUFFERS, info));\n\n;
+ $result .= \treturn NT_STATUS_OK;\n;
+ $result .= }\n\n;
+}
+
$result .= %}\n\n;
+if (util::has_property($s-{DATA}, public)) {
+
+ $result .= %typemap(in, numinputs=0) struct $s-{NAME} *EMPTY (struct
$s-{NAME} temp_$s-{NAME}) {\n;
+ $result .= \t\$1 = temp_$s-{NAME};\n;
+ $result .= }\n\n;
+
+ $result .= %typemap(argout) (struct $s-{NAME} *EMPTY) {\n;
+ $result .= \tTALLOC_CTX *mem_ctx =
talloc_init(\unmarshall_$s-{NAME}\);\n\n;
+ $result .= \t\$result = $s-{NAME}_ptr_to_python(mem_ctx, \$1);\n\n;
+ $result .= \ttalloc_free(mem_ctx);\n;
+ $result .= }\n\n;
+
+ $result .= NTSTATUS unmarshall_$s-{NAME}(DATA_BLOB *blob, TALLOC_CTX
*mem_ctx, struct $s-{NAME} *EMPTY);\n\n;
+}
+
return $result;
}
@@ -503,7 +537,7 @@
$result .= \t\treturn NULL;\n;
$result .= \t}\n\n;
-$result .= \tu = talloc(mem_ctx, sizeof(union $u-{NAME}));\n\n;
+$result .= \tu = talloc_p(mem_ctx, union $u-{NAME});\n\n;
for my $e (@{$u-{DATA}{DATA}}) {
if (defined $e-{DATA}{NAME}) {
svn commit: samba r4549 - in branches/SAMBA_4_0/source: build/pidl dsdb/samdb ldap_server lib lib/registry lib/registry/common lib/talloc libcli/auth libcli/ldap libcli/raw libcli/security libcli/util librpc/ndr librpc/rpc ntvfs ntvfs/posix param rpc_server/echo rpc_server/remote smb_server torture torture/basic torture/raw torture/rpc utils
Author: tridge Date: 2005-01-06 03:06:58 + (Thu, 06 Jan 2005) New Revision: 4549 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4549 Log: got rid of a lot more uses of plain talloc(), instead using talloc_size() or talloc_array_p() where appropriate. also fixed a memory leak in pvfs_copy_file() (failed to free a memory context) Modified: branches/SAMBA_4_0/source/build/pidl/server.pm branches/SAMBA_4_0/source/build/pidl/stub.pm branches/SAMBA_4_0/source/dsdb/samdb/samdb.c branches/SAMBA_4_0/source/ldap_server/ldap_parse.c branches/SAMBA_4_0/source/lib/data_blob.c branches/SAMBA_4_0/source/lib/genrand.c branches/SAMBA_4_0/source/lib/registry/common/reg_util.c branches/SAMBA_4_0/source/lib/registry/reg_backend_nt4.c branches/SAMBA_4_0/source/lib/talloc/talloc.h branches/SAMBA_4_0/source/lib/talloc/testsuite.c branches/SAMBA_4_0/source/lib/util_str.c branches/SAMBA_4_0/source/libcli/auth/ntlmssp.c branches/SAMBA_4_0/source/libcli/ldap/ldap.c branches/SAMBA_4_0/source/libcli/ldap/ldap_client.c branches/SAMBA_4_0/source/libcli/raw/clitransport.c branches/SAMBA_4_0/source/libcli/raw/rawrequest.c branches/SAMBA_4_0/source/libcli/raw/rawtrans.c branches/SAMBA_4_0/source/libcli/security/dom_sid.c branches/SAMBA_4_0/source/libcli/util/asn1.c branches/SAMBA_4_0/source/librpc/ndr/ndr.c branches/SAMBA_4_0/source/librpc/rpc/dcerpc.c branches/SAMBA_4_0/source/ntvfs/ntvfs_generic.c branches/SAMBA_4_0/source/ntvfs/posix/pvfs_rename.c branches/SAMBA_4_0/source/ntvfs/posix/pvfs_resolve.c branches/SAMBA_4_0/source/ntvfs/posix/pvfs_util.c branches/SAMBA_4_0/source/param/loadparm.c branches/SAMBA_4_0/source/rpc_server/echo/rpc_echo.c branches/SAMBA_4_0/source/rpc_server/remote/dcesrv_remote.c branches/SAMBA_4_0/source/smb_server/reply.c branches/SAMBA_4_0/source/smb_server/request.c branches/SAMBA_4_0/source/smb_server/search.c branches/SAMBA_4_0/source/torture/basic/charset.c branches/SAMBA_4_0/source/torture/gentest.c branches/SAMBA_4_0/source/torture/raw/streams.c branches/SAMBA_4_0/source/torture/rpc/echo.c branches/SAMBA_4_0/source/torture/rpc/netlogon.c branches/SAMBA_4_0/source/torture/rpc/samsync.c branches/SAMBA_4_0/source/torture/rpc/schannel.c branches/SAMBA_4_0/source/torture/rpc/svcctl.c branches/SAMBA_4_0/source/torture/rpc/xplogin.c branches/SAMBA_4_0/source/utils/getntacl.c Changeset: Sorry, the patch is too large (861 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4549
svn commit: samba r4550 - in branches/SAMBA_4_0/source: lib/talloc librpc/ndr
Author: tridge
Date: 2005-01-06 03:20:56 + (Thu, 06 Jan 2005)
New Revision: 4550
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4550
Log:
talloc() is now typesafe. It is exactly equivalent to the old talloc_p() macro.
Use
talloc_size() if you want the old behaviour.
I have kept talloc_p() as an alias for now. Once we change all calls
to be plain talloc() then we can remove it.
Modified:
branches/SAMBA_4_0/source/lib/talloc/talloc.c
branches/SAMBA_4_0/source/lib/talloc/talloc.h
branches/SAMBA_4_0/source/lib/talloc/talloc_guide.txt
branches/SAMBA_4_0/source/lib/talloc/testsuite.c
branches/SAMBA_4_0/source/librpc/ndr/libndr.h
Changeset:
Modified: branches/SAMBA_4_0/source/lib/talloc/talloc.c
===
--- branches/SAMBA_4_0/source/lib/talloc/talloc.c 2005-01-06 03:06:58 UTC
(rev 4549)
+++ branches/SAMBA_4_0/source/lib/talloc/talloc.c 2005-01-06 03:20:56 UTC
(rev 4550)
@@ -857,7 +857,7 @@
for (len=0; p[len] lenn; len++) ;
- ret = talloc(t, len + 1);
+ ret = _talloc(t, len + 1);
if (!ret) { return NULL; }
memcpy(ret, p, len);
ret[len] = 0;
@@ -883,7 +883,7 @@
len = vsnprintf(NULL, 0, fmt, ap2);
- ret = talloc(t, len+1);
+ ret = _talloc(t, len+1);
if (ret) {
VA_COPY(ap2, ap);
vsnprintf(ret, len+1, fmt, ap2);
Modified: branches/SAMBA_4_0/source/lib/talloc/talloc.h
===
--- branches/SAMBA_4_0/source/lib/talloc/talloc.h 2005-01-06 03:06:58 UTC
(rev 4549)
+++ branches/SAMBA_4_0/source/lib/talloc/talloc.h 2005-01-06 03:20:56 UTC
(rev 4550)
@@ -33,11 +33,11 @@
#define __location__ __FILE__ : __LINESTR__
/* useful macros for creating type checked pointers */
-#define talloc(ctx, size) talloc_named_const(ctx, size, __location__)
+#define talloc(ctx, type) (type *)talloc_named_const(ctx, sizeof(type), #type)
+#define talloc_p(ctx, type) talloc(ctx, type)
#define talloc_size(ctx, size) talloc_named_const(ctx, size, __location__)
#define talloc_zero(ctx, size) _talloc_zero(ctx, size, __location__)
#define talloc_realloc(ctx, ptr, size) _talloc_realloc(ctx, ptr, size,
__location__)
-#define talloc_p(ctx, type) (type *)talloc_named_const(ctx, sizeof(type),
#type)
#define talloc_new(ctx) talloc_named_const(ctx, 0, talloc_new: __location__)
#define talloc_zero_p(ctx, type) (type *)_talloc_zero(ctx, sizeof(type), #type)
#define talloc_zero_array_p(ctx, type, count) (type *)talloc_zero_array(ctx,
sizeof(type), count, __location__)
Modified: branches/SAMBA_4_0/source/lib/talloc/talloc_guide.txt
===
--- branches/SAMBA_4_0/source/lib/talloc/talloc_guide.txt 2005-01-06
03:06:58 UTC (rev 4549)
+++ branches/SAMBA_4_0/source/lib/talloc/talloc_guide.txt 2005-01-06
03:20:56 UTC (rev 4550)
@@ -58,11 +58,11 @@
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-void *talloc(const void *context, size_t size);
+(type *)talloc(const void *context, type);
-The talloc() function is the core of the talloc library. It takes a
-memory context, and returns a pointer to a new area of memory of the
-given size.
+The talloc() macro is the core of the talloc library. It takes a
+memory context and a type, and returns a pointer to a new area of
+memory of the given type.
The returned pointer is itself a talloc context, so you can use it as
the context argument to more calls to talloc if you wish.
@@ -74,20 +74,20 @@
The context argument to talloc() can be NULL, in which case a new top
level context is created.
+=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+void *talloc_size(const void *context, size_t size);
+The function talloc_size() should be used when you don't have a
+convenient type to pass to talloc(). Unlike talloc(), it is not type
+safe (as it returns a void *), so you are on your own for type checking.
+
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
void *talloc_p(const void *context, type);
-The talloc_p() macro is the equivalent of
+talloc_p() is a alias for talloc(). It only exists as a backwards
+compatibity macro for code from the bad old days when talloc() was not
+type safe.
- (type *)talloc(ctx, sizeof(type))
-
-You should use it in preference to talloc() whenever possible, as it
-provides additional type safety. It also automatically calls the
-talloc_set_name_const() function with the name being a string holding
-the name of the type.
-
-
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
int talloc_free(void *ptr);
@@ -231,7 +231,7 @@
The talloc_named() function creates a named talloc pointer. It is
equivalent to:
- ptr = talloc(context, size);
+ ptr = talloc_size(context, size);
svn commit: samba r4551 - in branches/SAMBA_4_0/source/build/pidl: .
Author: metze Date: 2005-01-06 06:32:07 + (Thu, 06 Jan 2005) New Revision: 4551 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4551 Log: add support for a pidl extensions 'declare bitmap foo1;' 'declare enum foo2;' and also allow typedef [public] bitmap ... typedef [public] enum ... you need to a forward declaration of bitmaps and enums when you want to use them in another idl file, and you need to make the real declaration to be public see the next commit to samr.idl and netlogon.idl metze Modified: branches/SAMBA_4_0/source/build/pidl/header.pm branches/SAMBA_4_0/source/build/pidl/idl.pm branches/SAMBA_4_0/source/build/pidl/idl.yp branches/SAMBA_4_0/source/build/pidl/parser.pm Changeset: Sorry, the patch is too large (2165 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4551
