Re: [Samba] A smbd process pegging CPU at near 100% with v3.0.10-1 FC2 RPM

2005-02-04 Thread Denis Vlasenko
On Wednesday 02 February 2005 18:11, Kel Way wrote:
 CPU 99.3%:
 2170 root  25   0 11656 3228  10m R 99.3  0.5   0:07.42 smbd
 
 We're having the same problems as many others with print queues, client 
 lock-ups, etc.  I think
 maybe this CPU problem is related as we have two servers in two locations 
 with the same versions,
 and both had the problem immediately after upgrading to 3.0.10.  We use the 
 YUM facility to
 upgrade Samba.  To react to these problems without waiting for the .11 
 release, is it possible to
 use the FC3 RPM of RC1 on a Fedora Core 2 box?  If not, a pointer to a FC2 
 binary would be
 appreciated.

strace -p smbd_PID ?
--
vda

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Logon Hours problems (really stuck)

2005-02-04 Thread David Wilson
Hi Christoph,
I haven't tried what you suggested yet however there is definitely something 
wrong with the time on my Samba server:
In my smb.conf I have the following under my [netlogon] share which creates 
a log indicating user login times:
preexec = echo %u logged into %h from %m (%I) at %T running %a.  
/tmp/samba-login.log

What is interesting is that the time indicated in my /tmp/samba-login.log is 
two hours behind the actual time on the server (which is synched to an 
international time server). This is what I get in the log:
aw088 logged into tux from lab4_6_208 (10.0.6.208) at 2005/02/04 08:39:25 
running WinXP.

If I type date on the server this is what I get:
Fri Feb  4 10:39:06 SAST 2005
As you can see, Samba believes it's two hours behind the actual (correct) 
time of the server.
The time offset = 120 option in the smb.conf does not seem to make any 
difference.

Is this still related to the hardware clock issues etc. you've mentioned 
below ?
Thanks for all your help so far, greatly appreciated.

Kindest regards
David Wilson
___
D c D a t a
Tel +27 33 342 7003
Fax +27 33 345 4155
Cell +27 82 4147413
http://www.dcdata.co.za
[EMAIL PROTECTED]
Powered by Linux, driven by passion !
___
Computers are not intelligent. They only think they are.
- Original Message - 
From: Christoph Scheeder [EMAIL PROTECTED]
To: David Wilson [EMAIL PROTECTED]
Cc: samba@lists.samba.org
Sent: Thursday, February 03, 2005 11:44 AM
Subject: Re: [Samba] Re: Logon Hours problems (really stuck)


Hi,
what i do is the following setup for linux-servers and time:
1.) set hardware-clock to GMT,
2.) tell the system the hardwareclock is set to GMT (how depends on 
distro)
3.) set local timezone to GMT+2  (again, depends on 
distro)
4.) check all win-Clients to have the correct timezone set
after that your system-clock should be showing the correct time in linux,
and samba should use the correct kickoff times.
as a sideefect it gives you the possibility to use ntp to sync your clock 
with
any timeserver out there in the internet.
Christoph

David Wilson schrieb:
Hi guys,
Unfortunately this is still happening I've tried restarting Samba. Users 
who should be denied access after 21:00 are being denied access at 19:00.

Our time zone in South Africa is GMT+2. Perhaps I should set the timezone 
on the server to UTC/GMT ?
Do you think this will help ? Should I then leave the time set to the 
current time in South Africa ? Or should I set the time to the time at 
UTC/GMT ?

There's something I must be missing here.
Kindest regards
David Wilson
___
D c D a t a
Tel +27 33 342 7003
Fax +27 33 345 4155
Cell +27 82 4147413
http://www.dcdata.co.za
[EMAIL PROTECTED]
Powered by Linux, driven by passion !
___
Computers are not intelligent. They only think they are.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] smbldap-populate failure

2005-02-04 Thread Heupink, Mourik Jan C.
oh yes, something important (maybe) that I forgot to mention...

the howto's tell me that the command to 'vampire' is:
net rpc vampire -Uadministrator%adminpassword

this FAILS here. without an error or anything, the cursor is simply returned
immediately, and nothing at all happened.

then what did:
added an administrator account to ldap, with my domain admin password, and
then issued the following:

net rpc vampire -S pdcname

that works, but with the errors as indicated earlier.

Apologies for not letting you know this in the first place. (I simply forgot
to mention it.)

Yours,
Mourik Jan

 -Original Message-
 From: Heupink, Mourik Jan C. [mailto:[EMAIL PROTECTED] 
 Sent: 03 February 2005 22:09
 To: 'Bruno Guerreiro'
 Cc: 'samba@lists.samba.org'
 Subject: RE: [Samba] smbldap-populate failure
 
 
 Hi!
 
  You're missing UID_START= and GID_START=  but i think that
  has been superseede by NextFreeUnixId. When you ran the 
  script, the sid was already defined, right? As the error 
  seems to occur when the userSID is beeing generated.
 You mean the sid of the current production nt4 domain in 
 smbldap.conf, right..? That's there, yes.
 
 What would you like me to show you, that could help? 
 smb.conf? smbldap.conf? /var/log/warn containing the errors? 
 I'm NOT using start tls (yet), what else would you like to know?
 
 A bit off topic perhaps, but:
 I wonder: shouldn't there be a script to modify a user? there 
 is add user script, delete user script, but no modify 
 user script. Is that right..?
 
 Thanks for the help so far!
 
 mj
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] $B%O%8%a%^%7%F(B

2005-02-04 Thread kaho_lunjp
[EMAIL PROTECTED]@$C$?$N$G%a!%k$7$F$_$^$7$?!J2?$,!K(B
$B;[EMAIL 
(BPROTECTED]@8$d$C$F$^$9!#(B25$B:P$G7k:'$7$F$^$9%1%I!";R6!$O5o$^$;$s!#(B
(B[EMAIL PROTECTED]"8+$?L\$O%$%s%F%j$C$]$$$+$J$!(B($B>P(B)
$B%a%,%M$H$+7k9=;w9g$&%?%$%W$G$9$M!#(B
$B$"[EMAIL PROTECTED](BH$B7O%M%?$H$+$bA4A3$*$C$1!<$G$9!#(B
$B$I$&$>%h%m%7%/$*4j$$$7$^$9$M!#(B
(B
(B
(B-- 
(BTo unsubscribe from this list go to the following URL and read the
(Binstructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Logon Hours problems (really stuck)

2005-02-04 Thread bgforum2002
I had some similar time problems with some versions of glibc. The solution was 
to point the link /etc/localtime from Sofia to Athens (we are in the same 
time zone). May be you could point that to some other city in the same time 
zone?

On Thursday 03 February 2005 10:23, David Wilson wrote:
 Hi guys,

 Unfortunately this is still happening I've tried restarting Samba. Users
 who should be denied access after 21:00 are being denied access at 19:00.

 Our time zone in South Africa is GMT+2. Perhaps I should set the timezone
 on the server to UTC/GMT ?
 Do you think this will help ? Should I then leave the time set to the
 current time in South Africa ? Or should I set the time to the time at
 UTC/GMT ?

 There's something I must be missing here.

 Kindest regards
 David Wilson
 ___
 D c D a t a
 Tel +27 33 342 7003
 Fax +27 33 345 4155
 Cell +27 82 4147413
 http://www.dcdata.co.za
 [EMAIL PROTECTED]
 Powered by Linux, driven by passion !
 ___

 Computers are not intelligent. They only think they are.

 - Original Message -
 From: David Wilson [EMAIL PROTECTED]
 To: david rankin [EMAIL PROTECTED]; samba
 samba@lists.samba.org
 Sent: Monday, January 31, 2005 8:48 AM
 Subject: Re: [Samba] Re: Logon Hours problems (really stuck)

  Hi David,
 
  Nice name ! :)
 
  Thanks for your reply.
  I'm pretty sure I did restart Samba, to double check I will restart it
  again this evening.
 
  Kindest regards
  David Wilson
  ___
  D c D a t a
  Tel +27 33 342 7003
  Fax +27 33 345 4155
  Cell +27 82 4147413
  http://www.dcdata.co.za
  [EMAIL PROTECTED]
  Powered by Linux, driven by passion !
  ___
 
  Computers are not intelligent. They only think they are.
 
  - Original Message -
  From: david rankin [EMAIL PROTECTED]
  To: samba samba@lists.samba.org
  Sent: Saturday, January 29, 2005 5:40 PM
  Subject: Re: [Samba] Re: Logon Hours problems (really stuck)
 
  Hi guys,
 
  The time offset option unfortunately did not solve my problem.
  Users that are meant to be kicked off at 21:00 keep getting kicked off
  at 19:00. The time on the server is right.
  What else could be causing my problem ?
 
  If you made changes, did you remember to restart samba? (stranger things
  have happened)
 
  --
  David C. Rankin, J.D., P.E.
  RANKIN LAW FIRM, PLLC
  510 Ochiltree Street
  Nacogdoches, Texas 75961
  (936) 715-9333
  (936) 715-9339 fax
  www.rankin-bertin.com
  --
  - Original Message -
  From: David Wilson [EMAIL PROTECTED]
  To: samba@lists.samba.org
  Sent: Saturday, January 29, 2005 5:01 AM
  Subject: [Samba] Re: Logon Hours problems (really stuck)
 
  Hi guys,
 
  I'm really sorry to bother you with this but I'm really battling and
  can't find any info to solve my problem.
  Please have a look at my issue below and give me some guidance as to
  what could be causing it.
 
  Thanks in advance.
 
  Kindest regards
  David Wilson
  ___
  D c D a t a
  Tel +27 33 342 7003
  Fax +27 33 345 4155
  Cell +27 82 4147413
  http://www.dcdata.co.za
  [EMAIL PROTECTED]
  Powered by Linux, driven by passion !
  ___
 
  Computers are not intelligent. They only think they are.
 
  - Original Message -
  From: David Wilson
  To: samba@lists.samba.org
  Sent: Thursday, January 27, 2005 3:43 PM
  Subject: Re: Logon Hours problems
 
 
 
 
  Kindest regards
  David Wilson
  ___
  D c D a t a
  Tel +27 33 342 7003
  Fax +27 33 345 4155
  Cell +27 82 4147413
  http://www.dcdata.co.za
  [EMAIL PROTECTED]
  Powered by Linux, driven by passion !
  ___
 
  Computers are not intelligent. They only think they are.
 
  - Original Message -
  From: David Wilson
  To: samba@lists.samba.org
  Sent: Tuesday, January 25, 2005 10:16 PM
  Subject: Re: Logon Hours problems
 
 
  I've found the time offset option from the smb.conf man page.
  In South Africa we are GMT+2, so I've set time offset = 120 in my
  smb.conf.
 
  Do you think this is the right thing to do ?
 
  Kindest regards
  David Wilson
  ___
  D c D a t a
  Tel +27 33 342 7003
  Fax +27 33 345 4155
  Cell +27 82 4147413
  http://www.dcdata.co.za
  [EMAIL PROTECTED]
  Powered by Linux, driven by passion !
  ___
 
  Computers are not intelligent. They only think they are.
 
  - Original Message -
  From: David Wilson
  To: samba@lists.samba.org
  Sent: Tuesday, January 25, 2005 2:11 PM
  Subject: Logon Hours problems
 
 
  More information on my problem below.
  It seems that users that were only meant to kicked off at 21:00 were
  kicked off at 19:00.
  I've checked the time and timezone on the Linux server and all seems
  correct.
  I think I've messed up something somewhere to do with Samba and time
  and Logon Hours restrictions.
 
  Please point me in the right 

Re: [Samba] Shares of Logged Out Users Still Visible By Next User

2005-02-04 Thread Doug VanLeuven
John,
[homes]
  comment = Home Directory
  browseable = no
  read only = no
  create mode = 0775
  directory mask = 0775
  csc policy = disable
I'm finding it happens if the previous process hasn't terminated.  
Ususally that's IPC$.
I have deadtime = 3 to get rid of them pretty fast, but rapidly logging 
in has that behavior.
I tested samba3_release svn tonight, but still the same on AIX 5.2, 
security = ads

I thought there was a bug out on this, but I can't find it.  Certainly 
it's been mentioned before.

Regards, Doug
John H Terpstra wrote:
Andy,
Please show us how you have configured the [homes] stanza. Are you using 
valid users = %S in the stanza?

- John T.
On Thursday 03 February 2005 21:32, [EMAIL PROTECTED] wrote:
 

If User A logs off Windows XP and User B logs on 30 or 40 seconds later,
sometimes User B can see and access private shares that only User A is
authorized to see or browse or read or write. It seems that User A's shares
will disappear from the Samba Server after a few minutes -- but during
those first minutes after logging on, User B can see both HIS shares and
User A's shares. During the transition period, User B can actually copy or
delete anything he wants from User A.
   

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] privileges in 3.11?

2005-02-04 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote:
Hello!
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dmitry Melekhov wrote:
| Certanly, root is member of Domain Admins group :-)
well not at least implicitly in the NT_USER_TOKEN
(although that might maker things easier if it was).
I added root to Domain Admins group...
| Anyway, do I understood right that root can do this
| with lates code  (from SVN)?
Yes.  The SAMBA_3_0_RELEASE is the staging area for
the final 3.0.11 release and this is fixed in that
branch.  The SAMBA_3_0 tree has moved on past 3.0.11
at this point with more changes.

I just checked latest svn with
svn co svn://svnanon.samba.org/samba/branches/SAMBA_3_0_RELEASE 
samba-SAMBA_3_0_RELEASE

And I still have the same problem.
net  -S dm -U root rpc rights grant  'TEST\dm'  SeMachineAccountPrivilege
Password:
Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED)
log.smb is attached...
Thank you!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] privileges in 3.11?

2005-02-04 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote:
| /net -S dm -U dm rpc rights grant  'TEST\mail'
|   SeMachineAccountPrivilege
| Password:
| Could not connect to server dm
This is an error from the net command itself (not related
to rpc rights).  Have you look at the level 10 debug log from
this second failure?

Now (with latest SVN) it looks better :
net  -S dm -U dm rpc rights grant  'TEST\mail'  SeMachineAccountPrivilege
Password:
Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED)
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Out Of office

2005-02-04 Thread eric . vannerum
I will be out of the office starting  04/02/2005 and will not return until
11/02/2005.

Ik ben met verlof van 4 tot en met 11 februari.
U kan me terug bereiken op 14 februari.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] smbldap-populate failure

2005-02-04 Thread Heupink, Mourik Jan C.
finally solved this. SOO happy. :)

I'm posting it here, in case anyone else ever has this issue. It was my own
fault...

In the idealx howto, smb.conf has three entries commented out:

  # ldap filter = ((objectclass=sambaSamAccount)(uid=%u))
  #delete user script = /usr/local/sbin/smbldap-userdel %u
  #delete group script = /usr/local/sbin/smbldap-groupdel %g

I (accidentally?) uncommented the first one, so there was an ldap filter in
place. (no idea what the filter exactly does, but the result was my having
all these problems)

Anyway, glad to be able to proceed again! Stupid me! :)

Mourik Jan


 -Original Message-
 From: Heupink, Mourik Jan C. [mailto:[EMAIL PROTECTED] 
 Sent: 04 February 2005 10:39
 To: 'Bruno Guerreiro'
 Cc: 'samba@lists.samba.org'
 Subject: RE: [Samba] smbldap-populate failure
 
 
 oh yes, something important (maybe) that I forgot to mention...
 
 the howto's tell me that the command to 'vampire' is:
 net rpc vampire -Uadministrator%adminpassword
 
 this FAILS here. without an error or anything, the cursor is 
 simply returned immediately, and nothing at all happened.
 
 then what did:
 added an administrator account to ldap, with my domain admin 
 password, and then issued the following:
 
 net rpc vampire -S pdcname
 
 that works, but with the errors as indicated earlier.
 
 Apologies for not letting you know this in the first place. 
 (I simply forgot to mention it.)
 
 Yours,
 Mourik Jan
 
  -Original Message-
  From: Heupink, Mourik Jan C. [mailto:[EMAIL PROTECTED]
  Sent: 03 February 2005 22:09
  To: 'Bruno Guerreiro'
  Cc: 'samba@lists.samba.org'
  Subject: RE: [Samba] smbldap-populate failure
  
  
  Hi!
  
   You're missing UID_START= and GID_START=  but i think 
 that has been 
   superseede by NextFreeUnixId. When you ran the script, 
 the sid was 
   already defined, right? As the error seems to occur when 
 the userSID 
   is beeing generated.
  You mean the sid of the current production nt4 domain in
  smbldap.conf, right..? That's there, yes.
  
  What would you like me to show you, that could help?
  smb.conf? smbldap.conf? /var/log/warn containing the errors? 
  I'm NOT using start tls (yet), what else would you like to know?
  
  A bit off topic perhaps, but:
  I wonder: shouldn't there be a script to modify a user? there
  is add user script, delete user script, but no modify 
  user script. Is that right..?
  
  Thanks for the help so far!
  
  mj
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/listinfo/samba
  
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Preventing deletion of folders under a SAMBA share

2005-02-04 Thread Tony Earnshaw
Stuart Callender:

 Thanks for the reply.  I thought this too, but no matter what
 permissions I give for existing folders via Unix permissions (even tried
 sticky bits), or via the directory mask and force directory mode, the
 folders can still be deleted.

 Windows 2000 sees the folders as read only, but allows you to delete
 them.  According to O'Rielly's Samba book (based on Samba 2), all should
 work fine, but it doesn't.  I was wondering whether this is because of
 Windows 2000 allowing delete of Read Only files.  As such I may have to
 perhaps set up a Windows 95/98 box just to see.


Didn't see what your OS is, but if it's Linux/extfs3 or whatever, 'man
lsattr', 'man chattr'.

--Tonni

--
mail: [EMAIL PROTECTED]
http://www.billy.demon.nl

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] using printer on linux from windows

2005-02-04 Thread Tony Earnshaw
tj:

 I am at my wits end.


 I have a brother hl1440 laser which I have working with Linux under
 cups, but I cannot get it working with samba and seen by a Windows XP
 system. I already have disk shares working properly. The printers name
 under cups is 1440. I want it's Windows printing to be done by the Windows
 driver.

 All the docs I have found online all seem to assume you already are a
 Samba/Windows expert, which I am not.


 So, can any kind soul let memin on what entries need to be put in
 smb.config to get it working?

Dunno if this can help, I'm a samba newbie but I just set up XP printing
and nothing surprised me more than seeing it work :P

What I did. Bits of it were not as in the Samba HOWTO, but nevertheless it
works:

Test setup:

Basis Red Hat RHAS3 on an IBM T23 Thinkpad
Samba samba-3.0.9-1.3E.2, Openldap 2.2.20
CUPS cups-1.1.17-13.3.13
Gimp Print gimp-print-4.2.4-5
Windows XP Professional virgin 5 on a Compaq EA700
Epson C42UX inkjet color (el cheapo), USB0 onto the Thinkpad.

Set up Cups normally, define the printer normally.

Set up Samba printing to use CUPS as standard printing facility:

[printers]
comment = Epson C42UX
path = /var/spool/samba/raw_q
printer admin = Administrator, root
create mask = 0600
guest ok = Yes
printable = Yes
use client driver = Yes
browseable = No

Define the printer as raw device, as in the HOWTO chapter 19
/etc/cups/mime.types and /etc/cups/mime.convs. Do *not* muck about with
Postscript drivers.

Reload smbd/nmbd, restart cups

On the XP machine as an Admin user do *not* install the printer driver
from the manufacturer's CD (tried it and it didn't work), go to the Samba
printer share in My Network Places etc., double click on the share.
Windows says No driver installed and comes with a list of default Epson
drivers, none of which works :(

Under, it says: Have disk. Put the driver CD in the Windows M/C CD ROM
drive, click on Have disk, go to the Win 2000 drivers (there are no XP
drivers) and find a *inf for the correct printer. Printer gets installed
on the Windows machine, with the correct \\netbiosname\printershare.

Choose the printer in Control Panel, right click, choose to print test
page, hey presto test page is printed.

HTH,

--Tonni

--
mail: [EMAIL PROTECTED]
http://www.billy.demon.nl

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] privileges in 3.11?

2005-02-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dmitry Melekhov wrote:
| I just checked latest svn with
| svn co svn://svnanon.samba.org/samba/branches/SAMBA_3_0_RELEASE
| samba-SAMBA_3_0_RELEASE
|
| And I still have the same problem.
|
| net  -S dm -U root rpc rights grant  'TEST\dm'  SeMachineAccountPrivilege
| Password:
| Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED)
|
| log.smb is attached...
That was just a partial log file.  I need to see the initial
SMBsessionsetupX call.  The only way to get back
NT_STATUS_ACCESS_DENIED herre is :
if ( user.uid != sec_initial_uid()
 !nt_token_check_domain_rid( p-pipe_user.nt_user_token,
DOMAIN_GROUP_RID_ADMINS ) )
{
return NT_STATUS_ACCESS_DENIED;
}
| Now (with latest SVN) it looks better :
|
| net  -S dm -U dm rpc rights grant  'TEST\mail'
| SeMachineAccountPrivilege
| Password:
| Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED)
Can you send me your smb.conf, the output from `id dm`, the
output from 'net groupmap list', and the output from 'net getlocalsid'?
Thanks.

cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCA30EIR7qMdg1EfYRArV/AJ9s+i3noq2D5YhJ4+AqYggxD9JW0ACeO8lJ
4uhRmQhLUqf2HklxgqBBi0A=
=WuGB
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Preventing deletion of folders under a SAMBA share

2005-02-04 Thread kurt weiss

Stuart Callender:

Thanks for the reply.  I thought this too, but no matter what
permissions I give for existing folders via Unix permissions (even tried
sticky bits), or via the directory mask and force directory mode, the
folders can still be deleted.
the folder can be deleted if *the parent* folder has deletion rights.
e.g.
parent: 0555
parent/child: 0777
child cannot be deleted, all folders in child you can delete
if you have *no* linux fs (ext2/ext3/a.s.o.) e.g. FAT, this will take no 
effect... :-(

i hop it helped.
Windows 2000 sees the folders as read only, but allows you to delete
them.  According to O'Rielly's Samba book (based on Samba 2), all should
work fine, but it doesn't.  I was wondering whether this is because of
Windows 2000 allowing delete of Read Only files.  As such I may have to
perhaps set up a Windows 95/98 box just to see.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Shares of Logged Out Users Still Visible By Next User

2005-02-04 Thread AndyLiebman
In a message dated 2/4/2005 12:14:15 AM Eastern Standard Time, [EMAIL 
PROTECTED] 
writes:
Andy,

Please show us how you have configured the [homes] stanza. Are you using 
valid users = %S in the stanza?

- John T.
Hi John, 

Actually I don't use HOMES directories. And I am not using the valid users 
line anywhere in my smb.conf files. 

Each user has many private shares that only HE/SHE is supposed to be able to 
access. Those shares are defined in individual smb.username.conf files. In the 
GLOBAL section of my smb.conf file, I have the statement: 

include = /etc/samba/smb.%u.conf

The listings in the individual smb.username.conf files look like one of the 
two following models: 

[Private Projects]
comment = Metadata No Media Here
path = /home/andy/Projects
write list = @editors
read only = No
guest okay = No
create mask = 0775
directory mask = 0775
force directory mode = 2070
force group = editors

[andy_TuesdayFiles]
comment = Media Files
path = /RAIDS/RAID_1/media/andy_TuesdayFiles
write list = @editors
read only = No
guest okay = No
create mask = 0775
directory mask = 0775

Note:  The /RAIDS/RAID_1/media directory has the sticky bit set for the group 
, so the group is always editors inside the media folder. 

It's very important the the ownership and permissions of the files inside 
these shares be set broadly -- because they are often moved to other locations 
where other people need to access them. However, while they reside inside a 
particular user's share (and corresponding directory) they should only be 
accessible to that particular user. 

Andy


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RV: [Samba] Telefonia - Internet Satelital - Rural (CHILE) Consulte

2005-02-04 Thread Angel
 

 

-Mensaje original-
De: Angel [mailto:[EMAIL PROTECTED] 
Enviado el: viernes, 04 de febrero de 2005 15:10
Para: 'samba@lists.samba.org'
Asunto: [Samba] Telefonia - Internet Satelital - Rural (CHILE) Consulte

 

Desearía recibir información de precios y prestaciones para poder operar con
Internet y telefonía vía satélite en la zona de nueva de Imperial (Temuco),
ya que al parecer no es posible llevar hasta mi domicilio una línea física.

Esperando información reciban un cordial saludo.

[EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] samba + linux subdirectory 'other' permissions

2005-02-04 Thread Don Zajic
It looks somewhat obvious to change the create mask = 0660 which is
-rw-rw to 0775 which would be -rwxrwxr-x.  Then any file that is created
in the /home/public directory will have the appropriate permissions.

Am I off base here?

Don

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Justin
Sent: Thursday, February 03, 2005 9:52 PM
To: samba@lists.samba.org
Subject: Re: [Samba] samba + linux subdirectory 'other' permissions

Still struggling with this issue ... anyone able to provide some feedback
please?


On Tue, 2005-02-01 at 15:18, Justin wrote:

 Hi All
 
 I'm sure this is a fairly basic question out there for someone however 
 I haven't had much luck googling for an answer hence I thought I'd try 
 here. I'm having issues getting the correct permissions on a directory 
 for the 'other' users. Each time a file is created in this 
 subdirectory the permissions are set as -rw-rw and what I want to 
 achieve is -rwxrwx-r-x In other words, read/write/execute for user and 
 group but read only for other users.
 
 I have one parent directory shared as follows:
 
 [public]
 comment = Staff file sharing folders
 path = /home/public
 create mask = 0660
 directory mask = 770
 force create mode = 020
 force directory mode = 020
 read only = no
 writeable = yes
 guest ok = yes
 
 I want to create a sub directory under this parent directory with the 
 permissions as indicated in my opening paragraph. Is that possible?
 
 
 
 TIA,
 
 Justin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Logging in via Linux machine to Windows Domain

2005-02-04 Thread Brad Otto
Hi List -

I have a friend that runs a Windows domain with Active Directory and is
setting up some new laptops with Redhat.  He wants to automate installs,
etc. on these laptops as he would on a Windows machine.

Just wondering if anyone has any experience with this - and also if anyone
knows of a good tutorial for joining a Linux machine to a Windows domain.
I've heard that it is possible.

Thanks,

- Brad
- Original Message - 
From: [EMAIL PROTECTED]
To: samba@lists.samba.org
Sent: Friday, February 04, 2005 4:04 AM
Subject: samba Digest, Vol 26, Issue 7


 Send samba mailing list submissions to
 samba@lists.samba.org

 To subscribe or unsubscribe via the World Wide Web, visit
 https://lists.samba.org/mailman/listinfo/samba
 or, via email, send a message with subject or body 'help' to
 [EMAIL PROTECTED]

 You can reach the person managing the list at
 [EMAIL PROTECTED]

 When replying, please edit your Subject line so it is more specific
 than Re: Contents of samba digest...







 Today's Topics:

1. Re: Res: Re: [Samba] Simple LDAP authentication
   (Gerald (Jerry) Carter)
2. Re: Samba question - Files bigger that 2GB (John H Terpstra)
3. Re: Large numbers of files in a directory - take #2 :-)
   (John H Terpstra)
4. Re: Large numbers of files in a directory - take #2 :-)
   (John H Terpstra)
5. Re: Large numbers of files in a directory - take #2 :-)
   (Jeremy Allison)
6. Re: Large numbers of files in a directory - take #2 :-)
   (Jeremy Allison)
7. Re: Samba question - Files bigger that 2GB (Carlos Knowlton)
8. XP SP2 and slow logins/offline files sync: RPC changes?
   (David Black)
9. opening share is slow (Nicola Bonelli)
   10. Re: Large numbers of files in a directory - take #2 :-)
   (Michael Lueck)
   11. Re: Re: Large numbers of files in a directory - take #2 :-)
   (Jeremy Allison)
   12. Re: smbd/sesssetup.c:reply_spnego_kerberos(173) Failed
   toverify incoming ticket! (Joysn)
   13. Re: smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to
   verify incoming ticket! (Joysn)
   14. RE: smbldap-populate failure (Heupink, Mourik Jan C.)
   15. Re: smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to
   verify incoming ticket! (Joysn)
   16. Preventing deletion of folders under a SAMBA share
   (Stuart Callender)
   17. hi ([EMAIL PROTECTED])
   18. RE: Samba authentication slow against PDC (Chris Snider)
   19. RE: Preventing deletion of folders under a SAMBA share
   (Steve Simeonidis)
   20. Delayed Write Failed and other similar errors on Windows
   machines (Michael J. Welch, Ph.D.)
   21. [www.tuttinudi.it] Finalmente venerd? ([EMAIL PROTECTED])
   22. System Error 53: SSH Tunnel and Windows File Sharing
   (Kilbey, Aaron)
   23. System Error 53: SSH Tunnel and Windows File Sharing
   (Aaron Kilbey)
   24. Problem logon WinXP SP2 to samba domain (Marcos Ribeiro)
   25. Re: Problem logon WinXP SP2 to samba domain (John H Terpstra)
   26. Re: Problem logon WinXP SP2 to samba domain (david rankin)
   27. Re: Problem logon WinXP SP2 to samba domain (John H Terpstra)
   28. Re: samba + linux subdirectory 'other' permissions (Justin)
   29. using printer on linux from windows (tj)
   30. Shares of Logged Out Users Still Visible By Next User
   ([EMAIL PROTECTED])
   31. Re: Shares of Logged Out Users Still Visible By Next User
   (John H Terpstra)
   32. RE: Preventing deletion of folders under a SAMBA share
   (Stuart Callender)
   33. Re: A smbd process pegging CPU at near 100% with v3.0.10-1
   FC2 RPM (Denis Vlasenko)
   34. Re: Re: Logon Hours problems (really stuck) (David Wilson)
   35. RE: smbldap-populate failure (Heupink, Mourik Jan C.)
   36. $B%O%8%a%^%7%F(B ([EMAIL PROTECTED])
   37. Re: Re: Logon Hours problems (really stuck)
   ([EMAIL PROTECTED])
   38. Re: Shares of Logged Out Users Still Visible By Next User
   (Doug VanLeuven)
   39. Re: privileges in 3.11? (Dmitry Melekhov)
   40. Re: privileges in 3.11? (Dmitry Melekhov)







 ___
 samba mailing list
 samba@lists.samba.org
 https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logging in via Linux machine to Windows Domain

2005-02-04 Thread Paul Gienger

setting up some new laptops with Redhat.  He wants to automate installs,
etc. on these laptops as he would on a Windows machine.
 

OT for this list, but you probably want kickstart.
knows of a good tutorial for joining a Linux machine to a Windows domain.
 

Check out the documentation on www.samba.org  There's two good detailed 
howtos there for just about anything not-off-the-wall you'd want to do 
there.

--
--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.9/10, missing 'net rap printq list' on HP-UX?

2005-02-04 Thread Ryan Novosielski
I have only this platform to try it on, but observe the following 
inconsistencies:

(from the manpage for 'net'):
RAP PRINTQ
RAP PRINTQ LIST QUEUE_NAME
Lists the specified print queue and print jobs on the server.  If the
  QUEUE_NAME is omitted, all queues are listed.
...OK, so:
[EMAIL PROTECTED] ~] /products/samba/bin/net rap printq list ljndemo
No command: list
net rap printq [misc. options] [targets]
or
net rap printq list [queue_name] [misc. options] [targets]
lists the specified queue and jobs on the target server.
If the queue name is not specified, all queues are listed.
...very curious, no? Could there be something here I don't know?
I'm running HP-UX 11i, 64-bit. I see no bugs reported on this subject yet.
Thank you for your time, and let me know if I can be of assistance.
 _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  |  | Ryan Novosielski - User Support Spec. III
|$| |__| |  | |__/ | \| _|  | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A smbd process pegging CPU at near 100% with v3.0.10-1 FC2 RPM

2005-02-04 Thread Kel Way
 strace -p smbd_PID ?

2170 root  25   0 11656 3228  10m R 95.9  0.5   2805:07 smbd

[EMAIL PROTECTED] root]# strace -p 2170
Process 2170 attached - interrupt to quit


No output...  just sits there until I quit.  Thanks -


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] A smbd process pegging CPU at near 100% with v3.0.10-1FC2 RPM

2005-02-04 Thread Kaplan, Marc
Maybe it's stuck in a library call loop. Try ltrace -p 2170 -f -o
smbd.2170.ltrace.out

-Marc

 -Original Message-
 From: Kel Way [mailto:[EMAIL PROTECTED]
 Sent: Friday, February 04, 2005 9:06 AM
 To: Denis Vlasenko; samba@lists.samba.org
 Subject: Re: [Samba] A smbd process pegging CPU at near 100% with
v3.0.10-
 1FC2 RPM
 
  strace -p smbd_PID ?
 
 2170 root  25   0 11656 3228  10m R 95.9  0.5   2805:07 smbd
 
 [EMAIL PROTECTED] root]# strace -p 2170
 Process 2170 attached - interrupt to quit
 
 
 No output...  just sits there until I quit.  Thanks -
 
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] A smbd process pegging CPU at near 100% with v3.0.10-1FC2 RPM

2005-02-04 Thread Kel Way
  strace -p smbd_PID ?
  
  2170 root  25   0 11656 3228  10m R 95.9  0.5   2805:07 smbd
  
  [EMAIL PROTECTED] root]# strace -p 2170
  Process 2170 attached - interrupt to quit
  
  
  No output...  just sits there until I quit.  Thanks -

 Maybe it's stuck in a library call loop. Try ltrace -p 2170 -f -o
 smbd.2170.ltrace.out

Thanks much for the suggestion... the out file is empty after 60 seconds... 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Preventing deletion of folders under a SAMBA share

2005-02-04 Thread Marco De Vitis
Il 03/02/2005, alle ore 22:13, Stuart Callender ha scritto:

 folder structure intact.  However this option seems to be ignored by
 Samba 3 and Windows 2000.  Windows 2000 will quite happily delete
 read-only files - which seems to be an annoying trait that cannot be

Uhm, as far as I recall, Win2000 deletes them only after asking the user
for confirmation (something like this folder is read-only, do you really
want to delete it?).
If you want to prevent them from being deleted even after confirmation,
then you could try setting to read-only the parent folder which contains
the undeletable folders (which would be the share root folder itself,
supposing the undeletable folders are at the first level).

-- 
Ciao,
  Marco.

...Dig?, Bill Bruford's Earthworks 1989

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A smbd process pegging CPU at near 100% with v3.0.10-1 FC2 RPM

2005-02-04 Thread Jeremy Allison
On Fri, Feb 04, 2005 at 09:06:27AM -0800, Kel Way wrote:
  strace -p smbd_PID ?
 
 2170 root  25   0 11656 3228  10m R 95.9  0.5   2805:07 smbd
 
 [EMAIL PROTECTED] root]# strace -p 2170
 Process 2170 attached - interrupt to quit
 
 
 No output...  just sits there until I quit.  Thanks -

Attach to it with gdb then get a backtrace.

Jeremy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba RPMs for RedHat/FC and idmap_rid

2005-02-04 Thread S Murthy Kambhampaty
As discussed previously on this list, Samba RPMs for
Fedora Core do not include idmap_rid support.  This is
also true for older RedHat distributions.  SuSE on the
other hand, seems to have been patching in idmap_rid
support since 3.0.5 or so; and with trusted domain
support, to boot.  Harrumph.

I've been able to rebuild samba srpms on FC2 and
RedHat 8 by patching the samba distributed rpms, and
get idmap_rid support which is a lot easier than using
the xad plugins (no offense to PADL and Luke H., but
our setup is simple so idmap_rid is all we need).  The
diffs are attached; it would be nice if they could be
mainlined.

Thanks, Murthy

PS: It is way cool that mappings produced by RH8, FC2
and SuSE 9.2 are same, with so little effort, thanks
for this feature, Samba team.





__ 
Do you Yahoo!? 
The all-new My Yahoo! - Get yours free! 
http://my.yahoo.com 
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3.0.11 Available for Download

2005-02-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
~From the Bernard-look-at-me-department:
This is the latest stable release of Samba. This is the
version that production Samba servers should run for all
current bug-fixes.  Please read the following important
changes in this release.
Common bugs fixed in 3.0.11 include:
~  o Crash in smbd when using CUPS printing.
~  o Parsing error of other SIDs included in the user_info_3
~structure returned from domain controllers.
~  o Inefficiencies when searching non-AD LDAP directories.
~  o Failure to expand variables in user domain attributes
~in tdbsam and ldapsam.
~  o Memory leaks.
~  o Failure to retrieve certain attribute when migrating from
~a Windows DC to a Samba DC via 'net rpc vampire'.
~  o Numerous printing bugs bugs including memory
~bloating on large/busy print servers.
~  o Compatibility issues with Exchange 5.5 SP4.
~  o sendfile fixes.
Additional features introduced in Samba 3.0.11:
~  o Winbindd performance improvements.
~  o More 'net rpc vampire' functionality.
~  o Support for the Windows privilege model to assign rights
~to specific SIDs.
~  o New administrative options to the 'net rpc' command.
LDAP Changes

If ldap user suffix or ldap machine suffix are defined in
smb.conf, all user-accounts must reside below the user suffix,
and all machine and inter-domain trust-accounts must be located
below the machine suffix.  Previous Samba releases would fall
back to searching the 'ldap suffix' in some cases.
Privilege Model
===
Samba 3.0.11 supports the following assignable rights
SeMachineAccountPrivilege  Add machines to domain
SePrintOperatorPrivilege   Manage printers
SeAddUsersPrivilegeAdd users and groups to the domain
SeRemoteShutdownPrivilege  Force shutdown from a remote system
SeDiskOperatorPrivilegeManage disk shares
These rights can be assigned to arbitrary users or groups
via the 'net rpc rights grant/revoke' command.  More details
of Samba's privilege implementation can be found in the
Samba-HOWTO-Collection.

Download Details

The uncompressed tarball and patch file have been signed
using GnuPG (ID F17F9772).  The source code can be
downloaded from:
http://download.samba.org/samba/ftp/
The release notes are available online at:
http://www.samba.org/samba/history/samba-3.0.11.html
Binary packages are available at
http://download.samba.org/samba/ftp/Binary_Packages/
Our Code, Our Bugs, Our Responsibility.
(https://bugzilla.samba.org/)
--Enjoy
The Samba Team
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCA5sJIR7qMdg1EfYRAhJRAKC89EW5Fd7Eoud02v2jT/wcGHyFcQCfbT2F
o6+j8YGZFdD4BgImcs8Oe2w=
=2nJs
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba RPMs for RedHat/FC and idmap_rid

2005-02-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
S Murthy Kambhampaty wrote:
| As discussed previously on this list, Samba RPMs for
| Fedora Core do not include idmap_rid support.  This is
| also true for older RedHat distributions.  SuSE on the
| other hand, seems to have been patching in idmap_rid
| support since 3.0.5 or so; and with trusted domain
| support, to boot.  Harrumph.
|
| I've been able to rebuild samba srpms on FC2 and
| RedHat 8 by patching the samba distributed rpms, and
| get idmap_rid support which is a lot easier than using
| the xad plugins (no offense to PADL and Luke H., but
| our setup is simple so idmap_rid is all we need).  The
| diffs are attached; it would be nice if they could be
| mainlined.
|
| Thanks, Murthy
|
| PS: It is way cool that mappings produced by RH8, FC2
| and SuSE 9.2 are same, with so little effort, thanks
| for this feature, Samba team.
Murth,  If you will send me your spec file patches I'll
get them in for the next Samba release.  The attachments
were strippedby mailman (for samba.org at least).


cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCA8JrIR7qMdg1EfYRAsKDAJ4zf7VtN4di89PGmEVfbMpRHsRwgQCgqkij
nuaRWWLW5FIdSm2RUcZIHp4=
=z1uc
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] using printer on linux from windows

2005-02-04 Thread tj
Tony Earnshaw wrote:
tj:
 

I am at my wits end.
I have a brother hl1440 laser which I have working with Linux under
cups, but I cannot get it working with samba and seen by a Windows XP
system. I already have disk shares working properly. The printers name
under cups is 1440. I want it's Windows printing to be done by the Windows
driver.
All the docs I have found online all seem to assume you already are a
Samba/Windows expert, which I am not.
So, can any kind soul let memin on what entries need to be put in
smb.config to get it working?
   

Dunno if this can help, I'm a samba newbie but I just set up XP printing
and nothing surprised me more than seeing it work :P
What I did. Bits of it were not as in the Samba HOWTO, but nevertheless it
works:
Test setup:
Basis Red Hat RHAS3 on an IBM T23 Thinkpad
Samba samba-3.0.9-1.3E.2, Openldap 2.2.20
CUPS cups-1.1.17-13.3.13
Gimp Print gimp-print-4.2.4-5
Windows XP Professional virgin 5 on a Compaq EA700
Epson C42UX inkjet color (el cheapo), USB0 onto the Thinkpad.
Set up Cups normally, define the printer normally.
Set up Samba printing to use CUPS as standard printing facility:
[printers]
   comment = Epson C42UX
   path = /var/spool/samba/raw_q
   printer admin = Administrator, root
   create mask = 0600
   guest ok = Yes
   printable = Yes
   use client driver = Yes
   browseable = No
Define the printer as raw device, as in the HOWTO chapter 19
/etc/cups/mime.types and /etc/cups/mime.convs. Do *not* muck about with
Postscript drivers.
Reload smbd/nmbd, restart cups
On the XP machine as an Admin user do *not* install the printer driver
from the manufacturer's CD (tried it and it didn't work), go to the Samba
printer share in My Network Places etc., double click on the share.
Windows says No driver installed and comes with a list of default Epson
drivers, none of which works :(
Under, it says: Have disk. Put the driver CD in the Windows M/C CD ROM
drive, click on Have disk, go to the Win 2000 drivers (there are no XP
drivers) and find a *inf for the correct printer. Printer gets installed
on the Windows machine, with the correct \\netbiosname\printershare.
Choose the printer in Control Panel, right click, choose to print test
page, hey presto test page is printed.
HTH,
--Tonni
--
mail: [EMAIL PROTECTED]
http://www.billy.demon.nl
 

Which version of Samba are you using?
Also, how is a Linux user setup to allow  samba logins and how to 
specify that on the Windows XP machine?

tj
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logging in via Linux machine to Windows Domain

2005-02-04 Thread John H Terpstra
On Friday 04 February 2005 08:42, Brad Otto wrote:
 Hi List -

 I have a friend that runs a Windows domain with Active Directory and is
 setting up some new laptops with Redhat.  He wants to automate installs,
 etc. on these laptops as he would on a Windows machine.

 Just wondering if anyone has any experience with this - and also if anyone
 knows of a good tutorial for joining a Linux machine to a Windows domain.
 I've heard that it is possible.

Chapter 9 of the Samba-3 by Example book. You can download it from:

http://www.samba.org/samba/docs/Samba-Guide.pdf

Alternately, the book is sold through Amazon and many technical book 
resellers.

- John T.


 Thanks,

 - Brad
 - Original Message -
 From: [EMAIL PROTECTED]
 To: samba@lists.samba.org
 Sent: Friday, February 04, 2005 4:04 AM
 Subject: samba Digest, Vol 26, Issue 7

  Send samba mailing list submissions to
  samba@lists.samba.org
 
  To subscribe or unsubscribe via the World Wide Web, visit
  https://lists.samba.org/mailman/listinfo/samba
  or, via email, send a message with subject or body 'help' to
  [EMAIL PROTECTED]
 
  You can reach the person managing the list at
  [EMAIL PROTECTED]
 
  When replying, please edit your Subject line so it is more specific
  than Re: Contents of samba digest...

 ---
- 

  Today's Topics:
 
 1. Re: Res: Re: [Samba] Simple LDAP authentication
(Gerald (Jerry) Carter)
 2. Re: Samba question - Files bigger that 2GB (John H Terpstra)
 3. Re: Large numbers of files in a directory - take #2 :-)
(John H Terpstra)
 4. Re: Large numbers of files in a directory - take #2 :-)
(John H Terpstra)
 5. Re: Large numbers of files in a directory - take #2 :-)
(Jeremy Allison)
 6. Re: Large numbers of files in a directory - take #2 :-)
(Jeremy Allison)
 7. Re: Samba question - Files bigger that 2GB (Carlos Knowlton)
 8. XP SP2 and slow logins/offline files sync: RPC changes?
(David Black)
 9. opening share is slow (Nicola Bonelli)
10. Re: Large numbers of files in a directory - take #2 :-)
(Michael Lueck)
11. Re: Re: Large numbers of files in a directory - take #2 :-)
(Jeremy Allison)
12. Re: smbd/sesssetup.c:reply_spnego_kerberos(173) Failed
toverify incoming ticket! (Joysn)
13. Re: smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to
verify incoming ticket! (Joysn)
14. RE: smbldap-populate failure (Heupink, Mourik Jan C.)
15. Re: smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to
verify incoming ticket! (Joysn)
16. Preventing deletion of folders under a SAMBA share
(Stuart Callender)
17. hi ([EMAIL PROTECTED])
18. RE: Samba authentication slow against PDC (Chris Snider)
19. RE: Preventing deletion of folders under a SAMBA share
(Steve Simeonidis)
20. Delayed Write Failed and other similar errors on Windows
machines (Michael J. Welch, Ph.D.)
21. [www.tuttinudi.it] Finalmente venerd? ([EMAIL PROTECTED])
22. System Error 53: SSH Tunnel and Windows File Sharing
(Kilbey, Aaron)
23. System Error 53: SSH Tunnel and Windows File Sharing
(Aaron Kilbey)
24. Problem logon WinXP SP2 to samba domain (Marcos Ribeiro)
25. Re: Problem logon WinXP SP2 to samba domain (John H Terpstra)
26. Re: Problem logon WinXP SP2 to samba domain (david rankin)
27. Re: Problem logon WinXP SP2 to samba domain (John H Terpstra)
28. Re: samba + linux subdirectory 'other' permissions (Justin)
29. using printer on linux from windows (tj)
30. Shares of Logged Out Users Still Visible By Next User
([EMAIL PROTECTED])
31. Re: Shares of Logged Out Users Still Visible By Next User
(John H Terpstra)
32. RE: Preventing deletion of folders under a SAMBA share
(Stuart Callender)
33. Re: A smbd process pegging CPU at near 100% with v3.0.10-1
FC2 RPM (Denis Vlasenko)
34. Re: Re: Logon Hours problems (really stuck) (David Wilson)
35. RE: smbldap-populate failure (Heupink, Mourik Jan C.)
36. $B%O%8%a%^%7%F(B ([EMAIL PROTECTED])
37. Re: Re: Logon Hours problems (really stuck)
([EMAIL PROTECTED])
38. Re: Shares of Logged Out Users Still Visible By Next User
(Doug VanLeuven)
39. Re: privileges in 3.11? (Dmitry Melekhov)
40. Re: privileges in 3.11? (Dmitry Melekhov)

 ---
- 

  ___
  samba mailing list
  samba@lists.samba.org
  https://lists.samba.org/mailman/listinfo/samba

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to 

[Samba] RPMs for SuSE Linux (was: Samba 3.0.11 Available for Download)

2005-02-04 Thread Lars MÜLLER
On Fri, Feb 04, 2005 at 09:55:53AM -0600, Gerald Carter wrote:
[snip]
 Binary packages are available at
 
   http://download.samba.org/samba/ftp/Binary_Packages/

RPM packages of Samba 3.0.11 for SuSE Linux are available at
ftp://ftp.SuSE.com/pub/projects/samba/3.0/

The same packages are also available at
http://download.Samba.org/samba/ftp/Binary_Packages/SuSE/3.0/

Please use a mirror close to your site.  A list of Samba.org mirrors is
available at http://Samba.org/

There are also a bunch of SuSE mirrors.
A list of international mirrors sites is at
http://www.Novell.com/products/linuxprofessional/downloads/ftp/int_mirrors.html
A list of mirrors in Germany is at
http://www.SuSE.com/de/private/download/ftp/inland.html

Currently there are 3.0.11 packages for SuSE Linux (x86 and x86_64) 8.1,
9.0, 9.1, 9.2, UnitedLinux 1/ SLES 8, and SLES 9.

Packages for 8.1 and 8.2 are only available for i386 as there was no
x86_64 SuSE Linux product of these releases.

If you encounter any problem with these packages please don't blame the
Samba Team.  Instead file a bug to https://bugzilla.Samba.org/, pick
product Samba 3.0, then select 'component' Packaging and set 'assign to'
to lmuelle at suse dot de.

Our customers, our products, our responsibility.

Have a lot of fun...

Lars
-- 
Lars MLLER [la(r)z ml]
SuSE Linux, Maxfeldstrae 5, 90409 Nrnberg, Germany


pgpsjRNzGExud.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Changing a user's primary GID

2005-02-04 Thread Wong, G. MR EECS
I'm using samba version 3.0.10 on an Intel PC running Redhat Linux 3.0
AS.  I am using winbind with the idmap_rid module to authenticate users
to Windows AD.  All the current Linux user account names are exactly the
same as the corresponding Windows AD SAM acct names.  Everything works
beautifully EXCEPT for the GIDs generated from the from the AD Groups
that the Windows accounts belong to.  (The UIDs are NOT a problem.)  It
seems like they all belong to the same group of Domain Users.

This is what I DO NOT want!  At a minimum I need to have users in one of
2 Linux groups - as their primary group - a faculty or a student group
since our current utility programs use Linux group permissions to work
properly.  A student account can easily be determined from the
SAMaccountName - if it starts with a lowercase x.  If not it is a
faculty account.

I DO NOT control the info in the Windows AD system.

Is there a way to force a user be put into a particular (LOCAL) Linux
group when logging into a Linux host running Samba winbind.  This would
be there primary group while logged in.
I really have no use for the domain group.

Is there a utility or would the code have to be hacked?  If the latter
is true what C programs need to be modified?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Changing a user's primary GID

2005-02-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Wong, G. MR EECS wrote:
| I'm using samba version 3.0.10 on an Intel PC
| running Redhat Linux 3.0 AS.  I am using winbind with
| the idmap_rid module to authenticate users to Windows AD.
| All the current Linux user account names are exactly the
| same as the corresponding Windows AD SAM acct names.
| Everything works beautifully EXCEPT for the GIDs generated
| from the from the AD Groups that the Windows accounts belong
| to.  (The UIDs are NOT a problem.)  It seems like they all
| belong to the same group of Domain Users.
This is an optimization on our part for performance
reasons.  You're not the first one to complain about it.
| This is what I DO NOT want!  At a minimum I need to have
| users in one of 2 Linux groups - as their primary group -
| a faculty or a student group since our current utility
| programs use Linux group permissions to work
| properly.  A student account can easily be determined
| from the SAMaccountName - if it starts with a lowercase x.
| If not it is a faculty account.
|
| I DO NOT control the info in the Windows AD system.
|
| Is there a way to force a user be put into a
| particular (LOCAL) Linux group when logging into a
| Linux host running Samba winbind.  This would
| be there primary group while logged in.
| I really have no use for the domain group.
|
| Is there a utility or would the code have to be
| hacked?  If the latter is true what C programs need
| to be modified?
Look at source/ nsswitch/winbindd_user.c and modify
the winbind_fill_pwent() IIRC.  You can change this
to do what you want.

cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCA9gjIR7qMdg1EfYRAiS7AKCOtkP3TJpmR2kLtS11tzpC/UMNWwCgoNmb
vuFPC6FuAjvY4kDjar5qrN0=
=AAoD
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Changing a user's primary GID

2005-02-04 Thread John H Terpstra
Mr. G,

Are you using the net groupmap facility to assign local UNIX groups to your 
Windows Domain Groups?

ie: net groupmap modify ntgroup=Domain Whatsis unixgroup=aunixgroup

- John T.

On Friday 04 February 2005 13:06, Wong, G. MR   EECS wrote:
 I'm using samba version 3.0.10 on an Intel PC running Redhat Linux 3.0
 AS.  I am using winbind with the idmap_rid module to authenticate users
 to Windows AD.  All the current Linux user account names are exactly the
 same as the corresponding Windows AD SAM acct names.  Everything works
 beautifully EXCEPT for the GIDs generated from the from the AD Groups
 that the Windows accounts belong to.  (The UIDs are NOT a problem.)  It
 seems like they all belong to the same group of Domain Users.

 This is what I DO NOT want!  At a minimum I need to have users in one of
 2 Linux groups - as their primary group - a faculty or a student group
 since our current utility programs use Linux group permissions to work
 properly.  A student account can easily be determined from the
 SAMaccountName - if it starts with a lowercase x.  If not it is a
 faculty account.

 I DO NOT control the info in the Windows AD system.

 Is there a way to force a user be put into a particular (LOCAL) Linux
 group when logging into a Linux host running Samba winbind.  This would
 be there primary group while logged in.
 I really have no use for the domain group.

 Is there a utility or would the code have to be hacked?  If the latter
 is true what C programs need to be modified?

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Changing Passwords

2005-02-04 Thread Mike Horton
Is it possible to expire passwords in samba and let the users create new
passwords when they log onto windows.

Thank you
Mike Horton



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] deleting a file

2005-02-04 Thread Biggs, Eric J [ITS]
Has anyone observed this behavior when deleting a file?

I had a user map a Samba share to his WIN2K machine and use the Windows
Explorer delete function to delete a rather large file (600M). Windows
prompted him in the usual manner: 'Are you sure you want to delete this
file?'  (By the way it was the actual delete warning, not the recycle
bin warning.)  In the Explorer window, the file disappeared.  When he
refreshed the window, the file reappeared.  It hadn't been deleted at
all.

I investigated from the Linux side and determined that his userid didn't
have appropriate authority to delete the file.  We changed the
permissions accordingly, went back to Explorer, and successfully deleted
the file.  That explains why he couldn't delete it, but why didn't Samba
prompt him with some sort of access violation, or some other message?
Is this working as designed, or is there some parameter that I can turn
on to fix this?

We're using Red Hat AS 3.0, Samba Version: 3.0.4 (Red Hat RPM), Release:
6.3E.  We're not part of any domain controller or active directory, just
plain Linux authentication.

Thanks,

Eric Biggs

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Are you satisfied with what you have today?

2005-02-04 Thread Ferdinand A.
Greetings,

Several months ago my friends were rolling on the
floor laughing when I told them I was going to
build a profitable Internet business. Yeah fat
chance they all said since I had absolutely very
little computer skills and zero marketing
experience! (Hint, I still don't!)

You could waste months (and thousands of dollars)
trying to figure out what really works on the
Internet. Or you could save yourself the
frustration, time and mistakes by following my
lead.

If you want to join and recieve a more detailed
information about this business for free, just
email To:

[EMAIL PROTECTED]

In the body of the letter just include the following information about
yourself.

FIRST NAME:
LASTNAME:
COUNTRY:
ALTERNATIVE EMAIL ADDRESS:

So why not give it a try?...  it's FREE anyway!...
Just give me a chance to show you how our program
works.


Looking forward to hearing from you.

Sincerely yours,

Ferdinand Arche
Income Specialist

You are in my address book as a result of you
posting to links of income opportunity seekers. To
receive no more emails, send email here:

[EMAIL PROTECTED]

Subject line is NOthing.

Not a solicitaion but a Blessing yet unrealized.






-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Delayed Write Failed and other similar errors on Windows machines

2005-02-04 Thread Jeremy Allison
On Thu, Feb 03, 2005 at 03:39:30PM -0800, Michael J. Welch, Ph.D. wrote:
 
 [An attempt to copy a file.]
 The specified network name is no longer available.
 [The file is not copied, but the name is placed into the directory.
 A second attempt works normally, unless one backs out of the folder,
 then comes back in again, in which case the failure is repeated.]
 
 [An attempt to open a VS C++ project with no .NCB file. VS tries to
 build another file, but fails during the write.]
 Windows - Delayed Write Failed
 Windows was unable to save all the data for the file
 \\Server\icr\active\Copy of Ctrl 4-3-1-33\SKAN_Talk.ncb. The data has
 been lost. This error may be caused by a failure of your
 computer hardware or network connection. Please try to save
 the file elsewhere.
 [The file is partially created.]

What messages are you getting in the Samba logs ? This looks like an
oplock break failure or in the extreme case smbd crash.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] XP SP2 and slow logins/offline files sync: RPC changes?

2005-02-04 Thread Jeremy Allison
On Thu, Feb 03, 2005 at 02:15:43PM -0600, David Black wrote:

 Since I keep seeing odd RPC-type unauthenticated user calls happening 
 when things go slow, I wonder if the following may have anything to do 
 with it (RPC changes in XP SP2)?  More to the point: has Samba accounted 
 for the changes and/or does it need to?
 
 http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2netwk.mspx#EGAA

I don't think so. From the above link : RPC clients that use the named pipe 
protocol
sequence (ncacn_np) are exempt from all restrictions discussed in this section. 
The
named pipe protocol sequence cannot be restricted by default, due to several 
significant
backwards compatibility issues. 

Samba3 only implements the named pipe RPC's - only Samba4 does RPC over TCP.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] ldap passwd sync not working

2005-02-04 Thread Alexander Zubkov
Hi.
I've samba-3.0.11 now, installed from rpm on Redhat 9.0. Problem was 
with 3.0.10 too. I don't exactly know when it was broken, because I 
found it week ago.
I've samba as PDC with LDAP backend some time ago when user changes 
password in windows or when password chenged with smbpasswd - LDAP 
password of this user was changed too. Now LDAP passwords remains the 
same as it was.
Configure files wasn't changed - only adding/removing some shares, 
testparm shows ldap passwd sync = yes.
I've searched this list a while and found only one mail, said that it 
was broken there when upgrading from 3.0.7 to 3.0.9, but there was no 
answer: http://lists.samba.org/archive/samba/2005-January/098466.html
Any ideas what is broken?


Alexander Zubkov
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ldap passwd sync not working

2005-02-04 Thread Mark Sarria



 Hi.
 I've samba-3.0.11 now, installed from rpm on Redhat 9.0. Problem was 
 with 3.0.10 too. I don't exactly know when it was broken, because I 
 found it week ago.
 I've samba as PDC with LDAP backend some time ago when user changes 
 password in windows or when password chenged with smbpasswd - LDAP 
 password of this user was changed too. Now LDAP passwords remains the 
 same as it was.
 Configure files wasn't changed - only adding/removing some shares, 
 testparm shows ldap passwd sync = yes.

whats your passwd program= (say) 
and are you using the IDEALX to add users and so on...?



 I've searched this list a while and found only one mail, said that it 
 was broken there when upgrading from 3.0.7 to 3.0.9, but there was no 
 answer: http://lists.samba.org/archive/samba/2005-January/098466.html
 Any ideas what is broken?
 
 
 Alexander Zubkov
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba can't list all accounts from ldap

2005-02-04 Thread dahopkins
I am using samba 2.2.x with openldap.  I have over 825 accounts.  However, 
pdbedit -l only lists 811 of these accounts.  All users are able to log onto 
systems using their accounts, but none of the new accounts can be added to 
access list, groups on the MS systems since they aren't returned in lookups.  I 
have changed sizelimit in ldap.conf and slapd.conf,  restarted nscd, ldap, smb, 
but still can't see more than 811 accounts.

Any ideas?

Thanks,
Dave Hopkins
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Why Windows sucks.

2005-02-04 Thread Jeremy Allison
The most eloquant rant on Windows I've read for a long long time


http://sfgate.com/cgi-bin/article.cgi?file=/gate/archive/2005/02/04/notes020405.DTL


There is nothing else like this phenomenon in the entire consumer culture. If
anything else performed as horribly as Windows, and on such a global scale,
consumers would scream bloody murder and demand their money back and there
would be some sort of investigation, class-action litigation, a demand for
Bill Gates' cute little geeky head on a platter.


Maybe people are finally starting to wake up on this. My 77 year old
Mum has been running on Linux now for 2 years - I only set her up
with an Internet account once I'd moved her over. I remote manage
it from here (Cupertino, CA - USA). She never has any problems. I
don't think she knows what a virus is :-).


I know I'm preaching to the choir here, but something in this rant
struck a chord.


Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Why Windows sucks.

2005-02-04 Thread Craig White
On Fri, 2005-02-04 at 17:55 -0800, Jeremy Allison wrote:
 The most eloquant rant on Windows I've read for a long long time
   
   
 http://sfgate.com/cgi-bin/article.cgi?file=/gate/archive/2005/02/04/notes020405.DTL
   
   
 There is nothing else like this phenomenon in the entire consumer culture. If
 anything else performed as horribly as Windows, and on such a global scale,
 consumers would scream bloody murder and demand their money back and there
 would be some sort of investigation, class-action litigation, a demand for
 Bill Gates' cute little geeky head on a platter.
   
   
 Maybe people are finally starting to wake up on this. My 77 year old
 Mum has been running on Linux now for 2 years - I only set her up
 with an Internet account once I'd moved her over. I remote manage
 it from here (Cupertino, CA - USA). She never has any problems. I
 don't think she knows what a virus is :-).
   
   
 I know I'm preaching to the choir here, but something in this rant
 struck a chord.

you are not preaching to the choir.

Mac users are known to be violently anti-Microsoft

Most Linux users understand that computers are just tools but Macintosh
users lose all sense of perspective and their computer becomes an
extension of their ego - sort of like the cross that they bear

If Linux or Macintosh enjoyed the market penetration rates of users
desktops that Windows has, they would be suffering from extensive
exploits too.

Then of course, there is the notion that Windows users invariably
operate with root privileges, giving access to every exploit under the
sun and most network admins know that happy machines have users with
very few privileges.

Then of course, Macintosh users invariably operate with root privileges
and Apple has gone a further step, requiring root to authenticate with
password when installing software and there has already been exploits
that got around (and they've patched) for that.

Then of course, there's Linux distro's that operate primarily with root
shell.

Then of course, there are Linux users that run everything as root
because they can't be bothered by the notion of users.

yes, the average home user, is under informed and ill-prepared to
experience the world via a computer and direct connection to the
internet which is why Microsoft finally (and probably in the better late
than never category) installing firewall and pop-up blocking with WinXP
SP2 - it ain't perfect, it ain't all that great but it's a start.

I am neither a Windows lover nor a Mac lover, but rather a computer
enthusiast which is what really excites me about Linux in general.

Thanks

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Why Windows sucks.

2005-02-04 Thread Thomas M. Skeren III
snip
Then of course, there's Linux distro's that operate primarily with root
shell
Then of course, there are Linux users that run everything as root
because they can't be bothered by the notion of users.
 

Then there's the BSD's and it's users.  But, of course we know not to do 
these things.  MAC's are now BSD's too. But why the bang on Linux's?  
While the bloated gui of SuSE 9.2 is annoying, it warns to not run as 
root, and a root login to the GUI is nowhere near as friendly as using 
the non root account created during startup. 

Further, where's your evidence?  Whilst nimrods run as root in Linux, do 
you have evidence that a majority do?  How about MAC users?  I know 
large MAC networks that require passwords to do this.  Sure you can 
kinda do this in Winblowz XP Pro...but XP Home?  Yeah right.

yes, the average home user, is under informed and ill-prepared to
experience the world via a computer and direct connection to the
internet which is why Microsoft finally (and probably in the better late
than never category) installing firewall and pop-up blocking with WinXP
SP2 - it ain't perfect, it ain't all that great but it's a start.
I am neither a Windows lover nor a Mac lover, but rather a computer
enthusiast which is what really excites me about Linux in general.
Thanks
Craig
 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba RPMs for RedHat/FC and idmap_rid

2005-02-04 Thread S Murthy Kambhampaty
--- Gerald (Jerry) Carter [EMAIL PROTECTED] wrote:

[snip]
 Murth,  If you will send me your spec file patches
 I'll
 get them in for the next Samba release.  The
 attachments
 were strippedby mailman (for samba.org at least).
 

Gerry, I've attached those patches as requested.

Thanks for picking this up, Murthy



__ 
Do you Yahoo!? 
The all-new My Yahoo! - What will yours do?
http://my.yahoo.com -- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] 3.0.11 - configure can't see ldap.h

2005-02-04 Thread Mike
My server is running OpenBSD 3.6.  I wish to join this machine to a 
Windows 2003 AD domain so Windows clients can copy files to and from it 
for FTP use.

I have untar'd the following files to /usr/src:
  openldap-stable-20050125.tgz
  samba-3.0.11.tar.gz
When running configure it stops with this error:
checking for LDAP support... yes
checking ldap.h usability... no
checking ldap.h presence... no
checking for ldap.h... no
checking lber.h usability... no
checking lber.h presence... no
checking for lber.h... no
configure: error: ldap.h is needed for LDAP support
These are my configure options:
./configure \
--with-ldap \
--with-ads \
--includedir=/usr/src/openldap-2.2.23/ \
--with-krb5=/etc/kerberosV
The missing file *is* in the openldap-2.2.23/include folder.  I have 
tried copying the ldap.h file to the samba/source/include folder but 
that doesn't help.  I can't seem to get Samba to see this file.  Sorry 
if this an often asked question.  I searched Google for an hour and 
found other people with this problem but no solution.

--
Regards,
Mike
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Why Windows sucks.

2005-02-04 Thread Jeremy Allison
On Fri, Feb 04, 2005 at 07:24:23PM -0700, Craig White wrote:
 
 If Linux or Macintosh enjoyed the market penetration rates of users
 desktops that Windows has, they would be suffering from extensive
 exploits too.

No, I don't believe that's true. The counter-example to this is
Apache, which has greater than 60% market share, and a lot lower
exploit rate than IIS.

But we're digressing from Samba here, so if you want to reply
please do it directly to me and let's take if off list.

Thanks,

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 3.0.11 - configure can't see ldap.h

2005-02-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Mike wrote:
| My server is running OpenBSD 3.6.  I wish to join this machine to a
| Windows 2003 AD domain so Windows clients can copy files to and from it
| for FTP use.
|
| I have untar'd the following files to /usr/src:
|
|   openldap-stable-20050125.tgz
|   samba-3.0.11.tar.gz
|
| When running configure it stops with this error:
|
| checking for LDAP support... yes
| checking ldap.h usability... no
| checking ldap.h presence... no
| checking for ldap.h... no
| checking lber.h usability... no
| checking lber.h presence... no
| checking for lber.h... no
| configure: error: ldap.h is needed for LDAP support
|
| These are my configure options:
| ./configure \
| --with-ldap \
| --with-ads \
| --includedir=/usr/src/openldap-2.2.23/ \
| --with-krb5=/etc/kerberosV
I don;t think the includedir works. Just a hunch.
Use
CPPFLAGS=-I/usr/src/openldap-2.2.23/include
LDFLAGS=-L/usr/src/openldap-2.2.23/lib


cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCBD4qIR7qMdg1EfYRArL7AJ9QZfsCIXoLyJDNKwVNgtUt4u7EEgCgx02S
1YOuw7PzS52Ivg50e9v8E+U=
=FrRD
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Window Protection Fault With Samba 3.0.10

2005-02-04 Thread Jimmy James
Hey guys, I'm trying to get Samba running to share some stuff out over my 
network.  My main box is running gentoo, but I've got two more machines that 
run windows (for work, ugh, I hate it, don't think I'm a microsoft lover)   
Anyhoo.  I got it setup and got cups installed and setup my smb.conf 
(included below).  I can connect to the shares and copy/rename/move/etc, 
works PERFECTLY.  I even got  PDF Printer setup in cups and shared out.  
However, my actual printer, an HP Deskjet 5550 has a little glitch.  I got 
it to share out and I uploaded new drivers for it.   I can install it in any 
of my machines, but when I try to print, whatever program I'm using just 
crashes.  If I try to view the properties of it, I get a protection fault.  
It seems to be a problem others have had, but I can't find any solutions to 
it.  I played around with renaming the printer under the print$ share (so it 
matched the CUPS queue name) and now it seems to work on my laptop, but it's 
still giving me the protection fault on the other machine.  I have a feeling 
if I delete it and reinstall it, it'll start misbehaving again on my laptop. 
 Can ANYONE help me with this?  I'm pulling my hair out, my smb.conf is 
below, edited to remove usernames =)

#=== Global Settings 
=
[global]
  # Basic Computer Descriptions
  workgroup = WORKGROUP
  netbios name  = RAIN-DESKTOP
  server string = Desktop Machine

  # Basic Printer Settings
  printcap name = cups
  load printers = yes
  printing  = cups
  printer admin = , 
  # Logging Settings, Log File Won't Go Over 50KB
  log file = /var/log/samba3/log.%m
  max log size = 50
  # Only Allow Hosts From The Local Network, Deny ALL Others
  hosts allow = 192.168.1. 127.
  hosts deny  = ALL
  # Sets up the guest account, just uses nobody
  # Allows Anonymous Printing
  guest account = nobody
  guest ok = yes
  #passdb backend = tdbsam
# Security mode. Most people will want user level security. See
# security_level.txt for details.
  security = user
  encrypt passwords = yes
  smb passwd file = /etc/samba/private/smbpasswd
  #socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
  interfaces = lo eth0
  bind interfaces only = yes
# This sets up on access virus scanning
#  vfs object = vscan-clamav
#  vscan-clamav: config-file = /etc/samba/vscan-clamav.conf
# Share Definitions 
==
[HD-2]
 comment = Second Hard Drive
 path = /mnt/win_c2
 valid users = 
 public = no
 writable = yes
 printable = no

[Home]
 comment =  Home Directory
 path= /home/
 valid users = 
 public = no
 writable = yes
 printable = no
#=== Printers 


[HP_Deskjet_5550]
 comment = HP Deskjet 5550
 printable = yes
 path = /var/spool/samba
 public = yes
 guest ok = yes
 printer admin = , 
[PDFs]
 comment = PDF Printer Output
 guest ok = yes
 path = /usr/PDFs
 read only = no
[PDF_Printer]
comment = PDF Printer
path = /tmp
printable = yes
guest ok = yes
lpq command =
lprm command =
[printers]
  comment = All Printers
  path = /var/spool/samba
  browseable = no
  guest ok = yes
  writable = no
  printable = yes
  public = yes
  printer admin = , 
  create mode = 0700
  print command = lpr-cups -P %p -o raw %s -r   # using client side printer 
drivers.

[print$]
  comment = Printer Drivers
  path = /var/lib/samba/printers
  browseable = yes
  read only = yes
  write list = , 
  guest ok = no
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Delayed Write Failed and other similar errors on Windows machines

2005-02-04 Thread Michael J. Welch, Ph.D.
On Friday 04 February 2005 16:10, Jeremy Allison wrote:

 What messages are you getting in the Samba logs ? This looks like an
 oplock break failure or in the extreme case smbd crash.

 Jeremy.

On Windoze:
It doesn't seem like smbd is crashing because it continues to work after the 
errors. For example, I go to a folder and try to delete--I get an error, but 
the file deletes. I try to delete another and it deletes with no error. I go 
up to the folder's parent, then back into the folder, and try to delete 
again, and the error repeats. In all this, certain operations always work, 
such as reading a file.

I did notice that in the log.linux there is a message Mapping user 
[TUX-NET]\[linux] from workstation [LINUX]--this may refer to the SuSE Live 
DVD connect, but I logged on with a proper username and password.

BTW, the delayed write failed error does not occur if I use a share on a 
windows machine, only on the SuSE machine. I used the same 3.0.7 under 
Mandrake without this problem, so perhaps it has something to do with the 
SuSE configuration.

The logs and smb.conf can be found at ftp://dev.horchatafactory.com/

I was out of the office today, and I just turned on my Windoze machine to 
repeat the error, and it isn't showing up at this moment. Usually a Windows 
reboot has no effect on the problem. This is the first time I've seen the 
problem go away without a SuSE reboot, and SuSE was last rebooted 2 days 9 
hours ago.

-- Thanks,  Mike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Tom Skeren has a misconfigured server

2005-02-04 Thread Craig White
Tom sent me a private email.

I replied and got this back.

  From: 
Mail Administrator
[EMAIL PROTECTED]
  Reply-To: 
[EMAIL PROTECTED]
To: 
[EMAIL PROTECTED]
   Subject: 
Mail System Error - Returned Mail
  Date: 
Sat, 5 Feb 2005 01:44:16 -0500
(Fri, 23:44 MST)

is usually due to a mis-configured account or mail delivery system on
the
destination computer; however, it could be caused by your message since
some mail systems refuse messages with invalid header information, or if
they are too large.

Your message was rejected by thor-new.fsklaw.com for the following
reason:

 Address [EMAIL PROTECTED] assumed to be invalid - Impossible
to verify

The following recipients did not receive this message:

 [EMAIL PROTECTED] 
  
 Please reply to [EMAIL PROTECTED] 
 if you feel this message to be in error.

I appreciate that mx for sklaw.com want's to be selective in its
handling of inbound email. 

He shouldn't send private mail if his mail server is so configured that
his system won't receive replies from valid sources, via valid smtp
server.

If he wishes to investigate - I don't have any significant headers - the
above is the only details except that I use a mail server on my local
network and 'smarthost' send mail through cox.net mail server. This has
not been a problem for any other email activity anywhere else and
automated cox.net smtp system suggests that problem is due to mis-
configured mail delivery system on the destination computer.

Craig

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Samba 3.0.11 Available for Download

2005-02-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
~From the Bernard-look-at-me-department:
This is the latest stable release of Samba. This is the
version that production Samba servers should run for all
current bug-fixes.  Please read the following important
changes in this release.
Common bugs fixed in 3.0.11 include:
~  o Crash in smbd when using CUPS printing.
~  o Parsing error of other SIDs included in the user_info_3
~structure returned from domain controllers.
~  o Inefficiencies when searching non-AD LDAP directories.
~  o Failure to expand variables in user domain attributes
~in tdbsam and ldapsam.
~  o Memory leaks.
~  o Failure to retrieve certain attribute when migrating from
~a Windows DC to a Samba DC via 'net rpc vampire'.
~  o Numerous printing bugs bugs including memory
~bloating on large/busy print servers.
~  o Compatibility issues with Exchange 5.5 SP4.
~  o sendfile fixes.
Additional features introduced in Samba 3.0.11:
~  o Winbindd performance improvements.
~  o More 'net rpc vampire' functionality.
~  o Support for the Windows privilege model to assign rights
~to specific SIDs.
~  o New administrative options to the 'net rpc' command.
LDAP Changes

If ldap user suffix or ldap machine suffix are defined in
smb.conf, all user-accounts must reside below the user suffix,
and all machine and inter-domain trust-accounts must be located
below the machine suffix.  Previous Samba releases would fall
back to searching the 'ldap suffix' in some cases.
Privilege Model
===
Samba 3.0.11 supports the following assignable rights
SeMachineAccountPrivilege  Add machines to domain
SePrintOperatorPrivilege   Manage printers
SeAddUsersPrivilegeAdd users and groups to the domain
SeRemoteShutdownPrivilege  Force shutdown from a remote system
SeDiskOperatorPrivilegeManage disk shares
These rights can be assigned to arbitrary users or groups
via the 'net rpc rights grant/revoke' command.  More details
of Samba's privilege implementation can be found in the
Samba-HOWTO-Collection.

Download Details

The uncompressed tarball and patch file have been signed
using GnuPG (ID F17F9772).  The source code can be
downloaded from:
http://download.samba.org/samba/ftp/
The release notes are available online at:
http://www.samba.org/samba/history/samba-3.0.11.html
Binary packages are available at
http://download.samba.org/samba/ftp/Binary_Packages/
Our Code, Our Bugs, Our Responsibility.
(https://bugzilla.samba.org/)
--Enjoy
The Samba Team

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCA5v1IR7qMdg1EfYRAn8AAKDGKWNgu2fuDFJsS/Ly82RzqrfONACgt+YA
2CKq5dthHU5cZyrBKpHm8ds=
=2gDY
-END PGP SIGNATURE-


svn commit: samba r5226 - in trunk/source/nsswitch: .

2005-02-04 Thread vlendec
Author: vlendec
Date: 2005-02-04 13:58:42 + (Fri, 04 Feb 2005)
New Revision: 5226

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5226

Log:
Make wbinfo -D async.

Volker

Modified:
   trunk/source/nsswitch/winbindd_cm.c
   trunk/source/nsswitch/winbindd_misc.c
   trunk/source/nsswitch/winbindd_util.c


Changeset:
Sorry, the patch is too large (335 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5226


svn commit: samba r5227 - in branches/SAMBA_3_0/packaging/SuSE: .

2005-02-04 Thread jerry
Author: jerry
Date: 2005-02-04 14:03:57 + (Fri, 04 Feb 2005)
New Revision: 5227

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5227

Log:
removed SuSE spec file @ Lars' request and updated read to point to package 
download areas
Removed:
   branches/SAMBA_3_0/packaging/SuSE/samba-3.0.0.files.tar.bz2
   branches/SAMBA_3_0/packaging/SuSE/samba-mutual-auth.diff
   branches/SAMBA_3_0/packaging/SuSE/samba-vscan-0.3.2b.tar.bz2
   branches/SAMBA_3_0/packaging/SuSE/samba3-3.0.0-Makefiles-heimdal.diff
   branches/SAMBA_3_0/packaging/SuSE/samba3-3.0.0-heimdal-06.diff
   branches/SAMBA_3_0/packaging/SuSE/samba3-3.0.0-pdb.diff
   branches/SAMBA_3_0/packaging/SuSE/samba3-Makefile.diff
   branches/SAMBA_3_0/packaging/SuSE/samba3-com_err.diff
   branches/SAMBA_3_0/packaging/SuSE/samba3-net_ads_password.diff
   branches/SAMBA_3_0/packaging/SuSE/samba3-smbwrapper.diff
   branches/SAMBA_3_0/packaging/SuSE/samba3-vscan.diff
   branches/SAMBA_3_0/packaging/SuSE/samba3.spec
Modified:
   branches/SAMBA_3_0/packaging/SuSE/README


Changeset:
Sorry, the patch is too large (1579 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5227


svn commit: samba r5228 - in branches/SAMBA_3_0/packaging/SuSE: .

2005-02-04 Thread vlendec
Author: vlendec
Date: 2005-02-04 14:38:12 + (Fri, 04 Feb 2005)
New Revision: 5228

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5228

Log:
Fix typo, mention officially supported samba3/SLES8 packages on ftp.sernet.de.

Volker

Modified:
   branches/SAMBA_3_0/packaging/SuSE/README


Changeset:
Modified: branches/SAMBA_3_0/packaging/SuSE/README
===
--- branches/SAMBA_3_0/packaging/SuSE/README2005-02-04 14:03:57 UTC (rev 
5227)
+++ branches/SAMBA_3_0/packaging/SuSE/README2005-02-04 14:38:12 UTC (rev 
5228)
@@ -1,12 +1,15 @@
 ### SuSE readme begin
 Dear SuSE user,
 
-prebuild Samba RPMs for all SuSE Linux versions are available at:
+prebuilt Samba RPMs for all SuSE Linux versions are available at:
 ftp://ftp.SuSE.com/pub/projects/samba/
 
 The same package are also available at:
 http://download.Samba.org/samba/ftp/Binary_Packages/SuSE/
 
+Samba 3 is not supported by SuSE on SuSE Linux Enterprise Server 8. You find
+SerNet-supported packages on http://ftp.sernet.de/pub/samba/
+
 If you encounter any problem with these packages please don't blame the
 Samba Team.  Instead file a bug at https://bugzilla.Samba.org/ pick
 product Samba 3.0, then select 'component' Packaging and set 'assign to'



svn commit: samba r5229 - in branches/SAMBA_3_0_RELEASE/packaging/SuSE: .

2005-02-04 Thread jerry
Author: jerry
Date: 2005-02-04 14:44:18 + (Fri, 04 Feb 2005)
New Revision: 5229

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5229

Log:
sync suse packaging changes from 3.0
Removed:
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/samba-3.0.0.files.tar.bz2
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/samba-mutual-auth.diff
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/samba-vscan-0.3.2b.tar.bz2
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/samba3-3.0.0-Makefiles-heimdal.diff
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/samba3-3.0.0-heimdal-06.diff
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/samba3-3.0.0-pdb.diff
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/samba3-Makefile.diff
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/samba3-com_err.diff
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/samba3-net_ads_password.diff
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/samba3-smbwrapper.diff
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/samba3-vscan.diff
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/samba3.spec
Modified:
   branches/SAMBA_3_0_RELEASE/packaging/SuSE/README


Changeset:
Sorry, the patch is too large (1581 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5229


svn commit: samba r5230 - in tags: .

2005-02-04 Thread jerry
Author: jerry
Date: 2005-02-04 14:44:49 + (Fri, 04 Feb 2005)
New Revision: 5230

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5230

Log:
had a few changes.  Will need to retag the release.


Removed:
   tags/release-3-0-11/


Changeset:


svn commit: samba r5231 - in tags: .

2005-02-04 Thread jerry
Author: jerry
Date: 2005-02-04 14:54:35 + (Fri, 04 Feb 2005)
New Revision: 5231

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5231

Log:
tagging 3.0.11
Added:
   tags/release-3-0-11/


Changeset:
Copied: tags/release-3-0-11 (from rev 5230, branches/SAMBA_3_0_RELEASE)



svn commit: samba r5232 - in trunk/source/nsswitch: .

2005-02-04 Thread vlendec
Author: vlendec
Date: 2005-02-04 15:40:29 + (Fri, 04 Feb 2005)
New Revision: 5232

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5232

Log:
Don't add a domain twice.

Volker

Modified:
   trunk/source/nsswitch/winbindd_util.c


Changeset:
Modified: trunk/source/nsswitch/winbindd_util.c
===
--- trunk/source/nsswitch/winbindd_util.c   2005-02-04 14:54:35 UTC (rev 
5231)
+++ trunk/source/nsswitch/winbindd_util.c   2005-02-04 15:40:29 UTC (rev 
5232)
@@ -248,7 +248,6 @@
while ((p != NULL)  (*p != '\0')) {
char *sidstr;
DOM_SID sid;
-   struct winbindd_domain *domain;
 
sidstr = strchr(p, '\\');
if (sidstr == NULL) {
@@ -264,8 +263,12 @@
break;
}
 
-   domain = add_trusted_domain(p, NULL, cache_methods, sid);
-   setup_domain_child(domain-child);
+   if (find_domain_from_sid_noinit(sid) == NULL) {
+   struct winbindd_domain *domain;
+   domain = add_trusted_domain(p, NULL, cache_methods,
+   sid);
+   setup_domain_child(domain-child);
+   }
 
p = strchr(sidstr, '\n');
if (p != NULL)
@@ -579,18 +582,15 @@
 
 /* Given a domain sid, return the struct winbindd domain info for it */
 
-struct winbindd_domain *find_domain_from_sid(const DOM_SID *sid)
+struct winbindd_domain *find_domain_from_sid_noinit(const DOM_SID *sid)
 {
struct winbindd_domain *domain;
 
/* Search through list */
 
for (domain = domain_list(); domain != NULL; domain = domain-next) {
-   if (sid_compare_domain(sid, domain-sid) == 0) {
-   if (!domain-initialized)
-   set_dc_type_and_flags(domain);
+   if (sid_compare_domain(sid, domain-sid) == 0)
return domain;
-   }
}
 
/* Not found */
@@ -598,6 +598,21 @@
return NULL;
 }
 
+struct winbindd_domain *find_domain_from_sid(const DOM_SID *sid)
+{
+   struct winbindd_domain *domain;
+
+   domain = find_domain_from_sid_noinit(sid);
+
+   if (domain == NULL)
+   return NULL;
+
+   if (!domain-initialized)
+   set_dc_type_and_flags(domain);
+
+   return domain;
+}
+
 /* Given a domain sid, return the struct winbindd domain info for it */
 
 struct winbindd_domain *find_our_domain(void)



svn commit: samba-web r542 - in trunk: . history

2005-02-04 Thread jerry
Author: jerry
Date: 2005-02-04 18:35:25 + (Fri, 04 Feb 2005)
New Revision: 542

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=542

Log:
sending 3.0.11 out to the world
Added:
   trunk/history/samba-3.0.11.html
Modified:
   trunk/header2.html
   trunk/index.html


Changeset:
Sorry, the patch is too large (3764 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=542


svn commit: samba-docs r351 - in trunk/Samba-HOWTO-Collection: .

2005-02-04 Thread jht
Author: jht
Date: 2005-02-04 20:27:37 + (Fri, 04 Feb 2005)
New Revision: 351

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=351

Log:
Adding patches and updats.
Modified:
   trunk/Samba-HOWTO-Collection/AccessControls.xml
   trunk/Samba-HOWTO-Collection/PolicyMgmt.xml
   trunk/Samba-HOWTO-Collection/ProfileMgmt.xml


Changeset:
Modified: trunk/Samba-HOWTO-Collection/AccessControls.xml
===
--- trunk/Samba-HOWTO-Collection/AccessControls.xml 2005-02-04 04:23:11 UTC 
(rev 350)
+++ trunk/Samba-HOWTO-Collection/AccessControls.xml 2005-02-04 20:27:37 UTC 
(rev 351)
@@ -402,6 +402,67 @@
group members will be able to write to (or delete) them.
/para
 
+   sect3
+   titleProtecting Directories and Files from Deletion/title
+
+   para
+   People have asked on the Samba mailing list how is it possible to 
protect files or directories from deletion by users.
+   For example, Windows NT/2K/XP provides the capacity to set access 
controls on a directory into which people can
+   write files but not delete them. It is possible to set an ACL on a 
Windows file that permits the file to be written to
+   but not deleted. Such concepts are foreign to the UNIX operating system 
file space. Within the UNIX file system
+   anyone who has the ability to create a file can write to it, and has 
the capability to delete it. Of necessity, Samba
+   is subject to the file system semantics of the host operating system. 
Samba is therefore limited in the file system
+   capabilities that can be made available through Windows ACLs, and 
therefore performs a quotebest fit/quote
+   translation to POSIX ACLs. Some UNIX file systems do however support a 
feature known as extended attributes. Only
+   the Windows concept of quoteinheritance/quote is implemented by 
Samba through the appropriate extended attribute.
+   /para 
+
+   para
+   The specific semantics of the extended attributes are not consistent 
across UNIX and UNIX-like systems such as Linux.
+   For example, it is possible on some implementations of the extended 
attributes to set a flag that prevents the directory
+   or file from being deleted. The extended attribute that may achieve 
this is called the constantimmutible/constant bit.
+   Unfortunately, the implementation of the immutible flag is NOT 
consistent with published documentation. For example, the
+   man page for the commandchattr/command on SUSE Linux 9.2 says:
+screen
+A file with thei attribute cannot be modified: it cannot be deleted or 
renamed,
+no link can be created to this file and no data can be written to the file. 
Only
+the superuser or a process possessing the CAP_LINUX_IMMUTABLE capability can 
set
+or clear this attribute.
+/screen
+   A simple test can be done to check if the immutible flag is supported 
on files in the file system of the Samba host
+   server.
+   /parao
+
+procedure
+   steppara
+   Create a file called filenamefilename/filename
+   /para/step
+
+   steppara
+   Login as the constantroot/constant user, then set the immutibile 
flag on a test file as follows:
+screen
+rootprompt; chatter +i 'filename'
+/screen
+   /para/step
+
+   steppara
+   Login as the user who owns the file (not root) attempt to remove the 
file as follows:
+screen
+mystic:/home/hannibal  rm filename
+/screen
+   It will not be possible to delete the file if the immutible flag is 
correctly honored.
+   /para/step
+/procedure
+
+   para
+   On those systems and file system types that support the immutible bit 
it is possible to create directories
+   that can not be deleted. Check the man page on your particular host 
system to determine whether or not
+   immutable directories are writable. If they are not, then the entire 
directory and its contents will effectively
+   by protected from writing (file creation also) and deletion.
+   /para
+
+   /sect3
+
/sect2
 
 /sect1

Modified: trunk/Samba-HOWTO-Collection/PolicyMgmt.xml
===
--- trunk/Samba-HOWTO-Collection/PolicyMgmt.xml 2005-02-04 04:23:11 UTC (rev 
350)
+++ trunk/Samba-HOWTO-Collection/PolicyMgmt.xml 2005-02-04 20:27:37 UTC (rev 
351)
@@ -99,7 +99,7 @@
 para
 Before embarking on the configuration of network and system policies, it is 
highly
 advisable to read the documentation available from Microsoft's Web site 
regarding
-ulink 
url=http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp;
+ulink 
url=http://www.microsoft.com/ntserver/techresources/management/prof_policies.asp;
 Implementing Profiles and Policies in Windows NT 4.0/ulink available from 
Microsoft.
 There are a large number of documents in addition to this old one that should 
also
 be read and 

svn commit: samba-web r543 - in trunk: . news/releases

2005-02-04 Thread deryck
Author: deryck
Date: 2005-02-04 20:49:35 + (Fri, 04 Feb 2005)
New Revision: 543

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=543

Log:

Add news item about 3.0.11 and fix typo.

deryck

Added:
   trunk/news/releases/3.0.11.html
Modified:
   trunk/index.html


Changeset:
Modified: trunk/index.html
===
--- trunk/index.html2005-02-04 18:35:25 UTC (rev 542)
+++ trunk/index.html2005-02-04 20:49:35 UTC (rev 543)
@@ -19,7 +19,7 @@
 pThis is the latest stable release of Samba. This is 
the version that production Samba servers should run
for all current bug-fixes.  Many issues have been fixed 
-   since the the 3.0.10 release.  New features 
+   since the 3.0.10 release.  New features 
that have been added include: better migration of user 
information from Windows NT domains, the capability to 
delegate certain operations, such as joining clients to 

Added: trunk/news/releases/3.0.11.html
===
--- trunk/news/releases/3.0.11.html 2005-02-04 18:35:25 UTC (rev 542)
+++ trunk/news/releases/3.0.11.html 2005-02-04 20:49:35 UTC (rev 543)
@@ -0,0 +1,26 @@
+h3a name=3.0.11Samba 3.0.11 Available for Download/a/h3 
+
+div class=article
+pThis is the latest stable release of Samba. This is 
+   the version that production Samba servers should run
+   for all current bug-fixes.  Many issues have been fixed 
+   since the 3.0.10 release.  New features 
+   that have been added include: better migration of user 
+   information from Windows NT domains, the capability to 
+   delegate certain operations, such as joining clients to 
+   a Samba domain, to non-root users, and performance 
+   improvements to winbindd.  Full details are available in the 
+   a href=/samba/history/samba-3.0.11.htmlRelease Notes/a
+   and in the a href=/samba/docs/updated Samba Documentation/a.
+   /p
+
+pThe a href=/samba/ftp/samba-3.0.11.tar.gzSamba 3.0.11
+   source code/a can be downloaded now.  The a
+   href=/samba/ftp/samba-3.0.11.tar.ascGnuPG
+   signature for the emun/emcompressed tarball/a is also available.
+   Precompiled packages for various platforms are available in the
+   a href=/samba/ftp/Binary_Packages/Binary_Packages
+   download area/a./p
+/div
+
+   



svn commit: samba-web r544 - in trunk: . devel history

2005-02-04 Thread deryck
Author: deryck
Date: 2005-02-04 20:54:58 + (Fri, 04 Feb 2005)
New Revision: 544

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=544

Log:

Moving older release announcement to history.  Updating Latest
Stable Release links throughout.

deryck

Modified:
   trunk/devel/index.html
   trunk/history/index.html
   trunk/index.html


Changeset:
Modified: trunk/devel/index.html
===
--- trunk/devel/index.html  2005-02-04 20:49:35 UTC (rev 543)
+++ trunk/devel/index.html  2005-02-04 20:54:58 UTC (rev 544)
@@ -13,7 +13,7 @@
 
 pAs of 4 April 2004, the Samba Team converted from CVS to Subversion for 
maintaining the Samba source code.  All current development is done in a 
Subversion repository.  All older code is in the original CVS tree; this would 
include 2.2.x versions of Samba, which are no longer in active development./p
 
-pThe latest stable release is emSamba 3.0.10/em (a 
href=/samba/history/samba-3.0.10.htmlrelease notes/a and a 
href=/samba/download/download/a).  The next major stable release will be 
emSamba 3.2/em.   A release date has yet to be projected for 3.2, but it 
will be made available when the current development branch, Samba 3.1, becomes 
stable.  Samba 4, an ambitious reworking of the Samba code, is being developed 
concurrently with Samba3./p
+pThe latest stable release is emSamba 3.0.11/em (a 
href=/samba/history/samba-3.0.11.htmlrelease notes/a and a 
href=/samba/download/download/a).  The next major stable release will be 
emSamba 3.2/em.   A release date has yet to be projected for 3.2, but it 
will be made available when the current development branch, Samba 3.1, becomes 
stable.  Samba 4, an ambitious reworking of the Samba code, is being developed 
concurrently with Samba3./p
 
 
 br /

Modified: trunk/history/index.html
===
--- trunk/history/index.html2005-02-04 20:49:35 UTC (rev 543)
+++ trunk/history/index.html2005-02-04 20:54:58 UTC (rev 544)
@@ -6,8 +6,8 @@
 
 div class=latest 
   ul
-  liLatest Release mdash; a href=/samba/index.html#latestSamba 
3.0.11rc1/a/li
-  liCurrent Stable Release mdash; a href=#stableSamba 3.0.10/a/li 
+  liLatest Release mdash; a href=/samba/index.html#latestSamba 
3.0.11/a/li
+  liCurrent Stable Release mdash; a href=/samba/index.html#latestSamba 
3.0.11/a/li 
   !-- Second link will point to #stable on this page when current release is 
a development release --
   /ul
 /div
@@ -16,6 +16,23 @@
 
 
 h2Previous Release Announcments/h2
+h4a28 January 2005/a/h4
+p class=headlineSamba 3.0.11rc1 Available for Download/p
+
+pThis is a release candidate of the Samba 3.0.11 code base and is
+provided for testing only.  While close to the final stable release,
+this snapshot is emnot/em intended for production servers.  If all
+goes well, this version will become the final 3.0.11 stable
+release (with possible minor changes).  Please refer to the 
+a href=/samba/ftp/rc/WHATSNEW-3-0-11rc1.txtRelease Notes/a for
+details on specific changes in this version./p
+
+pThe a href=/samba/ftp/rc/samba-3.0.11rc1.tar.gzSamba 3.0.11rc1
+source code/a can be downloaded now.  The a 
href=/samba/ftp/rc/samba-3.0.11rc1.tar.ascGnuPG signature for the 
emun/emcompressed tarball/a is 
+also available. Precompiled packages for various platforms are available in the
+a href=/samba/ftp/Binary_Packages/Binary_Packages download area/a./p
+ 
+
 h4a21 January 2005/a/h4
 p class=headlineSamba 3.0.11pre2 Available for Download/p
 
@@ -233,21 +250,4 @@
 downloaded from Samba.org mirrors./p 

 
-h419 August 2004/h4
-
-p class=headlineSamba 3.0.6 Available for Download/p
-
-pThis is the latest stable release of Samba. This is the version
-that production Samba servers should be running for all
-current bug-fixes.  There have been several issues fixed since
-the 3.0.4/5 release and new features have been added as well.
-See the a href=/samba/history/samba-3.0.6.htmluChanges/u section of 
the Release 
-Notes/a for details on exact updates and any changes in behavior./p
-
-pSamba 3.0.6 can be downloaded in a 
href=/samba/ftp/samba-3.0.6.tar.gzgzipped 
-format/a.  The a href=/samba/ftp/samba-3.0.6.tar.ascGPG signature/a is 
for the 
-uncompressed tarball.  Binary packages are available
-a href=http://download.samba.org/samba/ftp/Binary_Packages/;here/a./p
-
-
 !--#include virtual=footer_history.html --

Modified: trunk/index.html
===
--- trunk/index.html2005-02-04 20:49:35 UTC (rev 543)
+++ trunk/index.html2005-02-04 20:54:58 UTC (rev 544)
@@ -37,24 +37,6 @@
a href=/samba/ftp/Binary_Packages/Binary_Packages
download area/a./p
 
-h4a name=28 January 2005/a/h4
-p class=headlineSamba 3.0.11rc1 Available for Download/p
-
-pThis is a release candidate of the Samba 3.0.11 code base and is
-   provided for 

svn commit: samba r5234 - branches/SAMBA_3_0/source/utils trunk/source/utils

2005-02-04 Thread gd
Author: gd
Date: 2005-02-04 22:27:14 + (Fri, 04 Feb 2005)
New Revision: 5234

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5234

Log:
Do not use the Local Unix Group-default description for all kinds of
group-mappings. 

Guenther

Modified:
   branches/SAMBA_3_0/source/utils/net_groupmap.c
   trunk/source/utils/net_groupmap.c


Changeset:
Modified: branches/SAMBA_3_0/source/utils/net_groupmap.c
===
--- branches/SAMBA_3_0/source/utils/net_groupmap.c  2005-02-04 17:46:30 UTC 
(rev 5233)
+++ branches/SAMBA_3_0/source/utils/net_groupmap.c  2005-02-04 22:27:14 UTC 
(rev 5234)
@@ -277,8 +277,22 @@
sid_to_string(string_sid, sid);
}
 
-   if (!ntcomment[0])
-   fstrcpy(ntcomment, Local Unix group);
+   if (!ntcomment[0]) {
+   switch (sid_type) {
+   case SID_NAME_WKN_GRP:
+   fstrcpy(ntcomment, Wellknown Unix group);
+   break;
+   case SID_NAME_DOM_GRP:
+   fstrcpy(ntcomment, Domain Unix group);
+   break;
+   case SID_NAME_ALIAS:
+   fstrcpy(ntcomment, Local Unix group);
+   break;
+   default:
+   fstrcpy(ntcomment, Unix group);
+   break;
+   }
+   }

if (!ntgroup[0] )
fstrcpy( ntgroup, unixgrp );

Modified: trunk/source/utils/net_groupmap.c
===
--- trunk/source/utils/net_groupmap.c   2005-02-04 17:46:30 UTC (rev 5233)
+++ trunk/source/utils/net_groupmap.c   2005-02-04 22:27:14 UTC (rev 5234)
@@ -277,8 +277,22 @@
sid_to_string(string_sid, sid);
}
 
-   if (!ntcomment[0])
-   fstrcpy(ntcomment, Local Unix group);
+   if (!ntcomment[0]) {
+   switch (sid_type) {
+   case SID_NAME_WKN_GRP:
+   fstrcpy(ntcomment, Wellknown Unix group);
+   break;
+   case SID_NAME_DOM_GRP:
+   fstrcpy(ntcomment, Domain Unix group);
+   break;
+   case SID_NAME_ALIAS:
+   fstrcpy(ntcomment, Local Unix group);
+   break;
+   default:
+   fstrcpy(ntcomment, Unix group);
+   break;
+   }
+   }

if (!ntgroup[0] )
fstrcpy( ntgroup, unixgrp );



svn commit: samba r5235 - branches/SAMBA_3_0/source/lib trunk/source/lib

2005-02-04 Thread gd
Author: gd
Date: 2005-02-04 23:01:52 + (Fri, 04 Feb 2005)
New Revision: 5235

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5235

Log:
Fix compile warning.

Modified:
   branches/SAMBA_3_0/source/lib/account_pol.c
   trunk/source/lib/account_pol.c


Changeset:
Modified: branches/SAMBA_3_0/source/lib/account_pol.c
===
--- branches/SAMBA_3_0/source/lib/account_pol.c 2005-02-04 22:27:14 UTC (rev 
5234)
+++ branches/SAMBA_3_0/source/lib/account_pol.c 2005-02-04 23:01:52 UTC (rev 
5235)
@@ -271,7 +271,7 @@
}
 
DEBUGADD(1,(\tmigrating account policy (#%d: %s with value: 
%d) to passdb\n, 
-   i, (char *)decode_account_policy_name(i), tmp_val));
+   i, decode_account_policy_name(i), tmp_val));
 
/* set policy via new passdb api */
if (!pdb_set_account_policy(i, tmp_val)) {

Modified: trunk/source/lib/account_pol.c
===
--- trunk/source/lib/account_pol.c  2005-02-04 22:27:14 UTC (rev 5234)
+++ trunk/source/lib/account_pol.c  2005-02-04 23:01:52 UTC (rev 5235)
@@ -271,7 +271,7 @@
}
 
DEBUGADD(1,(\tmigrating account policy (#%d: %s with value: 
%d) to passdb\n, 
-   i, (char *)decode_account_policy_name(i), tmp_val));
+   i, decode_account_policy_name(i), tmp_val));
 
/* set policy via new passdb api */
if (!pdb_set_account_policy(i, tmp_val)) {



svn commit: samba r5236 - in branches/SAMBA_3_0/source/client: .

2005-02-04 Thread sfrench
Author: sfrench
Date: 2005-02-04 23:30:27 + (Fri, 04 Feb 2005)
New Revision: 5236

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5236

Log:
Ignore users mount parm (since unneeded by cifs kernel code).  Suggested by 
Dirk Jagdmann.

Modified:
   branches/SAMBA_3_0/source/client/mount.cifs.c


Changeset:
Modified: branches/SAMBA_3_0/source/client/mount.cifs.c
===
--- branches/SAMBA_3_0/source/client/mount.cifs.c   2005-02-04 23:01:52 UTC 
(rev 5235)
+++ branches/SAMBA_3_0/source/client/mount.cifs.c   2005-02-04 23:30:27 UTC 
(rev 5236)
@@ -290,7 +290,11 @@
value++;
}
 
-   if (strncmp(data, user, 4) == 0) {
+   if (strncmp(data, users,5) == 0) {
+   if(!value || !*value) {
+   strncpy(data,,,5);
+   }
+   } else if (strncmp(data, user, 4) == 0) {
if (!value || !*value) {
if(data[4] == '\0') {
if(verboseflag)



Build status as of Sat Feb 5 00:00:02 2005

2005-02-04 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2005-02-04 
00:00:17.0 +
+++ /home/build/master/cache/broken_results.txt 2005-02-05 00:00:23.0 
+
@@ -1,15 +1,15 @@
-Build status as of Fri Feb  4 00:00:01 2005
+Build status as of Sat Feb  5 00:00:02 2005
 
 Build counts:
 Tree Total  Broken Panic 
 ccache   38 5  0 
 distcc   38 4  0 
 ppp  21 4  0 
-rsync37 3  0 
+rsync37 4  0 
 samba1  1  1 
 samba-docs   0  0  0 
-samba4   40 11 0 
-samba_3_037 10 1 
+samba4   40 12 0 
+samba_3_037 12 1 
 
 Currently broken builds:
 Host   Tree Compiler   Status
@@ -25,6 +25,9 @@
 gc8samba4   gccok/ 1/?/? 
 aretnapccache   iccok/ok/ok/ 1
 aretnapsamba4   iccok/ 1/?/? 
+sbfrsyncgcc 1/?/?/?  
+sbfsamba4   gccok/ 1/?/? 
+sbfsamba_3_0gccok/ 1/?/? 
 smartserv1 samba_3_0gcc-4.0ok/ok/ok/ 2
 gwen   distcc   cc ok/ 1/?/? 
 gwen   samba4   cc ok/ 1/?/? 
@@ -39,6 +42,7 @@
 sol10  samba4   gccok/ 1/?/? 
 sun1   samba4   cc ok/ 2/?/? 
 sun1   samba_3_0cc ok/ 2/?/? 
+sun1   samba_3_0gccok/ok/ok/ 2
 Isis   ccache   cc  77/?/?/? 
 Isis   distcc   cc  77/?/?/? 
 Isis   rsynccc  77/?/?/?