[Samba] Samba shares after eboot Windows
Hello all, When I reboot Windows, the shares from Linux to Windows setup as mount points via Samba do not work anymore; I need to first reboot Linux. I suspect there is a solution but cannot find it. Could someone please assist me? Kind regards Emmanuel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Compatible version
I am running AIX version 4.2.1.0 and I would like to know which versions if any of SAMBA are compatible with this version of AIX and with Windows XP SP2. Sally -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Msdfs
Hi! I'm trying to set up a msdfs to complete the move of our id-department fileshares from a win2003 server to samba. But it doesn't work and from what I can understand when reading the logs Samba doesn't make any attemt to connect the share on the other server. So, my question is, how can I confirm that msdfs acctually are compiled into my samba-version? I add a trace from the log for you to see in case there are any leads to why it doesn't work. Thanks in advance Roland Carlsson trace from log.smbd --- [2005/02/14 12:40:52, 10] lib/util.c:dump_data(1977) [000] 04 5C 00 69 00 74 00 00 00 .\.i.t.. . [2005/02/14 12:40:52, 3] smbd/process.c:switch_message(886) switch message SMBchkpth (pid 14942) conn 0x83a54b8 [2005/02/14 12:40:52, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2005/02/14 12:40:52, 5] smbd/filename.c:unix_convert(108) unix_convert called on file it [2005/02/14 12:40:52, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [IT] - [it] [2005/02/14 12:40:52, 5] smbd/filename.c:unix_convert(179) unix_convert begin: name = it, dirpath = , start = it [2005/02/14 12:40:52, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled it ? [2005/02/14 12:40:52, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component it (len 2) ? [2005/02/14 12:40:52, 10] smbd/mangle_hash2.c:is_mangled(276) is_mangled it ? [2005/02/14 12:40:52, 10] smbd/mangle_hash2.c:is_mangled_component(215) is_mangled_component it (len 2) ? [2005/02/14 12:40:52, 5] smbd/statcache.c:stat_cache_add(135) stat_cache_add: Added entry (839f298:size3) IT - it [2005/02/14 12:40:52, 5] smbd/statcache.c:stat_cache_add(135) stat_cache_add: Added entry (839f298:size3) IT - it [2005/02/14 12:40:52, 5] smbd/filename.c:unix_convert(393) conversion finished it - it [2005/02/14 12:40:52, 3] smbd/error.c:error_packet(105) error string = No such file or directory [2005/02/14 12:40:52, 3] smbd/error.c:error_packet(129) error packet at smbd/reply.c(586) cmd=16 (SMBchkpth) NT_STATUS_OBJECT_NAME_NOT_FOUND [2005/02/14 12:40:52, 5] lib/util.c:show_msg(464) [2005/02/14 12:40:52, 5] lib/util.c:show_msg(474) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] browsing on windows network
Hi, i installed samba on my pc and i am a domain-member of a windows 2003 domain but when i browse my network via gnome and go to a server with shared maps, then i get an error with the message: THE FOLDER CONTENTS COULD NOT BE DISPLAYED you do not have the permissions necesarry to view the contents of windows netwerk: servertest. How can i browse my network and view the sharings just like an XP pc ? i thought that because i am a member of the domain that i also could browse on the mappings with sharings for the regular windows domain user. cheers, Phil. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Windows users that have a space character
Hello, Our site has implemented network login user ID's that now include a space, for example fred smith. Can Samba support this? Our current Samba release is 2.0.5a but doesn't seem to like users with a space character? Thanks. James Briar Technical Support Chief Exec Dept - Infrastructure - 6th floor * 3807 ^**^ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. [EMAIL PROTECTED] http://www.merton.gov.uk ** -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] browsing on windows network
Hi Phil, have you joined the domain!? Set the Parameter: smb ports = 139 in your smb.conf an test it. And the User who browse the share must allow in the Domain Controler to login on your workstation. Andreas Am Montag, den 14.02.2005, 13:20 +0100 schrieb fluppe: Hi, i installed samba on my pc and i am a domain-member of a windows 2003 domain but when i browse my network via gnome and go to a server with shared maps, then i get an error with the message: THE FOLDER CONTENTS COULD NOT BE DISPLAYED you do not have the permissions necesarry to view the contents of windows netwerk: servertest. How can i browse my network and view the sharings just like an XP pc ? i thought that because i am a member of the domain that i also could browse on the mappings with sharings for the regular windows domain user. cheers, Phil. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Hackers on my Web server
I have discovered that a gamer has hacked into my web server through a backdoor left open by my predecessor. I have closed the door, but when I try to delete the folders left behind I receive Access Denied, or when I try to take ownership I receive Unable to Find File I have removed most of the files to obtain enough space to continue operations but would like to remove this threat entirely. Also for FYI the folders go thirty deep, and some have no names (or hidden names), some start with a ~ , or a ; or a . . I am really baffled, so if there is someone who may assist me or direct me as to where to look it would be greatly appreciated. Thank You, Gary Mlinek Sr. Network Analyst Madonna University (734) 432-5462 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Hackers on my Web server
Have the Hacker install a new Kernel!? see at www.chkrootkit.org and check your system Am Montag, den 14.02.2005, 08:20 -0500 schrieb Mlinek, Gary: I have discovered that a gamer has hacked into my web server through a backdoor left open by my predecessor. I have closed the door, but when I try to delete the folders left behind I receive Access Denied, or when I try to take ownership I receive Unable to Find File I have removed most of the files to obtain enough space to continue operations but would like to remove this threat entirely. Also for FYI the folders go thirty deep, and some have no names (or hidden names), some start with a ~ , or a ; or a . . I am really baffled, so if there is someone who may assist me or direct me as to where to look it would be greatly appreciated. Thank You, Gary Mlinek Sr. Network Analyst Madonna University (734) 432-5462 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Mount 2k3 hidden share
Hello everyone Sorry, I know this has been asked before, but according to my searches, has been answered in as many different ways, I have tried a couple of them and failed: Basics: I can browse the share fine using konqueror (smb:/[EMAIL PROTECTED]/statdata$) I am using SuSE rpms - Version 3.0.11 I would like to mount a hidden share on a server 2003 machine. It denies me access to the mount point after mounting. I have suid'd smbmnt and then run this as the user I want to use to browse the share: smbmount //2k3server/statdata$ /home/user/winmounts -o username=user,gid=100 Password: This completes without error, but now I cannot browse the mount point: ls winmounts /bin/ls: winmounts: Permission denied I get the same when running the command as root. What am I doing wrong? Thanks, H pgpOi1J8TFfv1.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] winbind: lookup_usergroups_alt() and lookup_usergroups() returning differnet list
using samba 3.0.10, Windows 2000 ADS running in native mode Hello all, I observed on our server that for some users winbind uses the function lookup_usergroups() and for others the function lookup_usergroups_alt(). (I found this out by running winbind with a higher debug level). Looking at the source-code I see the comment for lookup_usergroups_alt(): /* Lookup groups a user is a member of - alternate method, for when tokenGroups are not available. */ and later: /* buggy server, no tokenGroups. Instead lookup what groups this user is a member of by DN search on member*/ These are the debug lines of intereset while running winbindd -s /etc/samba/smb.conf -FSni -d 3: ==8= # user QLEAP+testi5 rpc: name_to_sid name=testi5 name_to_sid [rpc] testi5 for domain QLEAP ads: lookup_usergroups ads sid_to_dn mapped CN=testi5,CN=Users,DC=q-leap,DC=de ads: lookup_usergroups_alt ads lookup_usergroups (alt) for dn=CN=testi5,CN=Users,DC=q-leap,DC=de ads: fetch sequence_number for QLEAP # user QLEAP+testi4 ads: lookup_usergroups ads sid_to_dn mapped CN=testi4,CN=Users,DC=q-leap,DC=de ads lookup_usergroups for sid=S-1-5-21-823518204-2111687655-1060284298-1169 ads: fetch sequence_number for QLEAP ==8= Both users are a member of the same global security group which is a member of another global security group. But this meta-group is only listed for the user testi4. There are no differences in the users' properties, and the same happens with other users. It is always the same: whenever winbind uses lookup_usergroups_alt() those meta-groups are not listed, but they are listed when winbind uses lookup_usergroups(). From the comments above I would think that there must be a difference in ADS-Servers: one with tokenGroups and one without. But in this case there is only one server! What makes winbind use the one function instead of the other? Why is the result of the two functions different? How can I make winbind use only lookup_usergroups()? What are tokenGroups? Hope you can help. Regards, Peter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] browsing on windows network
okay, i will test it but i think you have a point that my user must be allowed but as i said, i added the COMPUTER to the domain. How can i login with my linux machine with a USER onto a windows sharing ? On Mon, 2005-02-14 at 13:54 +0100, Andreas Koch wrote: Hi Phil, have you joined the domain!? Set the Parameter: smb ports = 139 in your smb.conf an test it. And the User who browse the share must allow in the Domain Controler to login on your workstation. Andreas Am Montag, den 14.02.2005, 13:20 +0100 schrieb fluppe: Hi, i installed samba on my pc and i am a domain-member of a windows 2003 domain but when i browse my network via gnome and go to a server with shared maps, then i get an error with the message: THE FOLDER CONTENTS COULD NOT BE DISPLAYED you do not have the permissions necesarry to view the contents of windows netwerk: servertest. How can i browse my network and view the sharings just like an XP pc ? i thought that because i am a member of the domain that i also could browse on the mappings with sharings for the regular windows domain user. cheers, Phil. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Using SeMachineAccountPrivilege returns NT_STATUS_NO_SUCH_PRIVILEGE
Greg Folkert wrote: Shouldn't that be: SetMachineAccountPrivilege vs. SeMachineAccountPrivilege I think that should help. Still fails with the same error message. I had copied the SeM spelling for Jerry's preview docs for these new features. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Unable to add new group/user to acl from windows
Hi, i'm working on debian testing. i installed samba 3.0.10-1, and a 2.6.8 kernel with acl support. i create an xfs partition with mkfs.xfs. i'm using libnss-ldap for uid/gid translation with a windows 2000 server. (active directory patched with sfu 3.5) I can modify, add users/group from the samba server. ex: (test.txt owned by admin, and toto is a user on AD) $ setfacl -m u:toto:rw test.txt $ getfacl test.txt # file: test.txt # owner: admin # group: admin user::rw- user:toto:rw- group::r-- mask::rw- other::r-- from windows, toto can read and modify the file test.txt. i tested all sorts of situations and all rights are respected by windows. But from windows, i can only modify existing rights and delete existing users/groups acl. i can't add new users/groups acl on a file/folder. i can't copy a file from windows to the samba share without its rights beeing set to the owner user/group only. Can someone help me with this problem ? (i'm trying not to use winbind) Thanks in advance for your help ;) A. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Using SeMachineAccountPrivilege returns NT_STATUS_NO_SUCH_PRIVILEGE
On Mon, 2005-02-14 at 08:41 -0500, Michael Lueck wrote: Greg Folkert wrote: Shouldn't that be: SetMachineAccountPrivilege vs. SeMachineAccountPrivilege I think that should help. Still fails with the same error message. I had copied the SeM spelling for Jerry's preview docs for these new features. Ah, okay then, sorry for the interruption, we now return you to your regularly scheduled life. :-D -- greg, [EMAIL PROTECTED] The technology that is Stronger, better, faster: Linux signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Using SeMachineAccountPrivilege returns NT_STATUS_NO_SUCH_PRIVILEGE
Michael Lueck wrote: When I issue 'net rpc rights grant auserid SeMachineAccountPrivilege' OK, trick seems to be DOMAIN\auserid vs expecting it to assume the local domain name. No more error message. However when I 'net rpc rights list DOMAIN\auserid' and enter my password, no error is given and no rights are shown. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] browsing on windows network
Use winbind and ldap authentication on winbind Am Montag, den 14.02.2005, 14:42 +0100 schrieb fluppe: okay, i will test it but i think you have a point that my user must be allowed but as i said, i added the COMPUTER to the domain. How can i login with my linux machine with a USER onto a windows sharing ? On Mon, 2005-02-14 at 13:54 +0100, Andreas Koch wrote: Hi Phil, have you joined the domain!? Set the Parameter: smb ports = 139 in your smb.conf an test it. And the User who browse the share must allow in the Domain Controler to login on your workstation. Andreas Am Montag, den 14.02.2005, 13:20 +0100 schrieb fluppe: Hi, i installed samba on my pc and i am a domain-member of a windows 2003 domain but when i browse my network via gnome and go to a server with shared maps, then i get an error with the message: THE FOLDER CONTENTS COULD NOT BE DISPLAYED you do not have the permissions necesarry to view the contents of windows netwerk: servertest. How can i browse my network and view the sharings just like an XP pc ? i thought that because i am a member of the domain that i also could browse on the mappings with sharings for the regular windows domain user. cheers, Phil. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Incorrect disk size reported at 20.0 MB
[2005/02/14 06:04:41, 1] smbd/service.c:make_connection_snum(645) xp-rlf (10.11.132.178) connect to service home initially as user richardf (uid=447, gid=10) (pid 4612) [2005/02/14 06:04:41, 0] smbd/dfree.c:disk_free(138) WARNING: dfree is broken on this system Jeremy has asked for a debug level 10 which produced 200K in seconds. The above snip looks like the most likely piece of information. This is Solaris 8, not patched lately due to legacy requirements. I can send the large debug capture if requested, thoughts so far? Richard. Date: Sat, 12 Feb 2005 11:08:31 -0800 From: Jeremy Allison [EMAIL PROTECTED] To: Richard Felkins [EMAIL PROTECTED] Cc: samba@lists.samba.org Subject: Re: [Samba] Incorrect disk size reported at 20.0 MB Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.4.1i On Fri, Feb 11, 2005 at 07:47:34AM -0800, Richard Felkins wrote: I'm recently seeing an issue with how Samba is reporting the disk space available from a NFS share. Checking the properties from a PC system displays all mapped network drives as having 20.0 MB size with zero free disk space available. We updated to Samba version 3.0.11 this morning with no change in results. I have checked the bug reports and haven't found anything that resembles this problem. Any ideas where I might look? A network capture showing the disk space request would help, as would a debug level 10 from smbd. Jeremy. Richard L. Felkins SAIC Systems 10260 Campus Point Dr. MS-A Email: [EMAIL PROTECTED] San Diego, CA 92121 Phone: 858-826-3321 Cell: 858-354-4563 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Administrator member of Domain Users and Domain Admins group
Hi, I set up my LDAP to contain the administrator user in Domain Users and Domain Admins group. But this user have not the administrators right, all users which in Domain Admins group have not the full right. I would like to know if this problem is due to the user is in Domain Admins and also Domain Users . Thanks Stéphane Purnelle --- Stéphane PURNELLE [EMAIL PROTECTED] Service Informatique Corman S.A. Tel : 00 32 087/342467 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] TLS question. Does it work?
Hi all! I'm using Debian Sarge with openldap, samba and TLS. I can't figure out if TLS works or not so please help me out here. The certificate verification is OK. I installed the server looking at the howtos on idealx.org I can add users, groups and computers to ldap. I've tried with sucess to add computer to the domain. Now to the point. When I do a test like: ldapsearch -x -ZZ -D cn=admin,dc=dbb,dc=su,dc=se -W -b '' -s base '(objectClass=*)' namingContexts Everything works only if I have TLSVerifyClient allow or none. If I use TLSVerifyClient try or demand which generate a ldap_bind: Can't contact LDAP server (81) I estimate the server choosed not to use TLS at all But when I try to make a lookup error in ldap.conf. I change the the HOST from FQDN to it's ip address. Now if using TLSVerifyClient allow I get a certificate error which should be correct. This must also mean that ldapsearch reads correct ldap.conf and certificate. I'm very confused here and really need some help. Peter Nyberg Institutionen för Biokemi och Biofysik (DBB) Sv.Arrhenius vägen 12 106 91 Stockholm Tel: 08-16 24 69 Mobil: 070 339 24 69 Fax 08 153679 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] login with windows account on linux computer
Hello, i understand that it is possible to configure samba with winbind so that i can login with a windows user account on my linux machine ? my question is simple: how can i do it ? :) i have latest samba, debian linux. The windows network is windows 2003. do i need ads ? ldap ? pam ? what extra keys do i need to add when compiling ? grtz, Ph. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] ldap and valid users
which syntax should apply to ldap groups ? valid users = @group or valid user = @WORKGROUP/group this is the group ou being searched. ldap group suffix = ou=Group and this is what groups look like in ldap dn: cn=mygroup,ou=Group,dc=mydomain,dc=com objectClass: posixGroup objectClass: top cn: mygroup gidNumber: 10004 memberUid: user1 memberUid: user2 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Hackers on my Web server
I believe you mean cracked. Please don't confuse crackers with hackers. On Mon, 14 Feb 2005, Mlinek, Gary wrote: Date: Mon, 14 Feb 2005 08:20:56 -0500 From: Mlinek, Gary [EMAIL PROTECTED] To: samba@lists.samba.org Subject: [Samba] Hackers on my Web server I have discovered that a gamer has hacked into my web server through a backdoor left open by my predecessor. I have closed the door, but when I try to delete the folders left behind I receive Access Denied, or when I try to take ownership I receive Unable to Find File I have removed most of the files to obtain enough space to continue operations but would like to remove this threat entirely. Also for FYI the folders go thirty deep, and some have no names (or hidden names), some start with a ~ , or a ; or a . . I am really baffled, so if there is someone who may assist me or direct me as to where to look it would be greatly appreciated. Thank You, Gary Mlinek Sr. Network Analyst Madonna University (734) 432-5462 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- J. L. Blank, Systems Administrator, twu.net -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Using SeMachineAccountPrivilege returns NT_STATUS_NO_SUCH_PRIVILEGE
This may be a silly question, but did you make sure to set: enable privileges = yes ...in smb.conf? I assume so or the previous step should not have worked, but... it explains the original message too. Try: net rpc rights list accounts ...and see what that gives you. _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - User Support Spec. III |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Mon, 14 Feb 2005, Michael Lueck wrote: Michael Lueck wrote: When I issue 'net rpc rights grant auserid SeMachineAccountPrivilege' OK, trick seems to be DOMAIN\auserid vs expecting it to assume the local domain name. No more error message. However when I 'net rpc rights list DOMAIN\auserid' and enter my password, no error is given and no rights are shown. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] possible to not have a password?
man 5 smb.conf Look at null passwords (a global param). _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - User Support Spec. III |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Mon, 7 Feb 2005, Zé wrote: For what i have seen, where i enter a user with no password, or the password field in blank, then i it becomes impossible to have it in windows machine or mount it. So what i ask is what is needed to set and how to be able to share without the need of a password. greets, Zé -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbpasswd -w
Did you do --with-ldap or --with-ldapsam as well? _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - User Support Spec. III |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Mon, 7 Feb 2005, Jochen Witte wrote: Hi, I try to set up samba (latest) to use LDAP. I get # smbpasswd -w secret -w not available unless configured --with-ldapsam I xompiled with LDAP support. Any hints? -- Jochen Witte [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: rpcclient error / printer driver issue
How about this one (on 3.0.11, matter of fact)? rpcclient $ enumdrivers [Windows NT x86] Printer Driver Info 1: Driver Name: [HP 2500C Series Printer] Printer Driver Info 1: Driver Name: [HP 2500C Series PS3] rpcclient $ getdriver HP 2500C Series PS3 Error opening printer handle for HP 2500C Series PS3! result was NT_STATUS_UNSUCCESSFUL Thanks for any advice. I don't think I've gone and screwn anything up. :) _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - User Support Spec. III |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Tue, 8 Feb 2005, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris McKeever wrote: | everything seems to be working good other than this strange nuance | (that doesnt seem to effect anything) | | drivers get listed twice - any ideas? or should I just | forget I saw this -- ! Fixed in 3.0.11. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCCQ5OIR7qMdg1EfYRAi3wAJ9CExmfOKXTNg5Bmogq1VqjagKZfgCglbEY EgX0PsuDXA2fJc0No0fv2cA= =raM5 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Joining a domain with a non-administrator account
Yes, and Jerry Carter already wrote back to you with a list of relevant questions. _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - User Support Spec. III |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Thu, 10 Feb 2005, David Sonenberg wrote: Does anyone know? David Sonenberg wrote: I guess I wasn't clear. My PDC is samba box. It's not Active Directory. Wayne Rasmussen wrote: In Active Directory, make sure the console is view-Advance Features. In the OU there should be a computer account for this machine. Open it and go to the security tab. Click on the add button, then add the user you are using with kinit. Go to the permissions section for this user, make sure he has the following permissions or checked to allow: Read, Write, Reset Password, Validate Write to DNS Hostname, Validate Write to Service Principal Name. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David Sonenberg Sent: Tuesday, February 08, 2005 8:14 AM To: samba@lists.samba.org Subject: [Samba] Joining a domain with a non-administrator account I'm trying to set it up so I can join the domain with a regular user that is part of the domain admin group. I have a user dsonenberg that is in the domain admin group(512), but I can't join the domain with that account. For the record I can login with that account and Administrator can join the domain. The PDC has an LDAP backend. Here's the log. 2005/02/08 10:26:25, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/02/08 10:26:25, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/02/08 10:26:25, 2] passdb/pdb_ldap.c:init_sam_from_ldap(511) init_sam_from_ldap: Entry found for user: dsonenberg [2005/02/08 10:26:25, 2] passdb/pdb_ldap.c:init_group_from_ldap(2011) init_group_from_ldap: Entry found for group: 512 [2005/02/08 10:26:25, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [dsonenberg] - [dsonenberg] - [dsonenberg] succeeded [2005/02/08 10:26:25, 2] smbd/server.c:exit_server(571) Closing connections [2005/02/08 10:26:26, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/02/08 10:26:26, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/02/08 10:26:26, 2] passdb/pdb_ldap.c:init_sam_from_ldap(511) init_sam_from_ldap: Entry found for user: dsonenberg [2005/02/08 10:26:26, 2] passdb/pdb_ldap.c:init_group_from_ldap(2011) init_group_from_ldap: Entry found for group: 512 [2005/02/08 10:26:26, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [dsonenberg] - [dsonenberg] - [dsonenberg] succeeded [2005/02/08 10:26:26, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2482) Returning domain sid for domain STROZLLC - S-1-5-21-1001378032-4272845324-1772824492 [2005/02/08 10:26:26, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x0211) [2005/02/08 10:26:26, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2482) Returning domain sid for domain STROZLLC - S-1-5-21-1001378032-4272845324-1772824492 [2005/02/08 10:26:26, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(115) _samr_create_user: ACCESS DENIED (granted: 0x0201; required: 0x0010) [2005/02/08 10:26:26, 2] smbd/server.c:exit_server(571) Closing connections -- David Sonenberg Systems / Network Administrator Stroz Friedberg, LLC 15 Maiden Lane 15th Floor New York, NY 10038 212.981.6527 (o) | 917.495.4918 (c) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- David Sonenberg Systems / Network Administrator Stroz Friedberg, LLC 15 Maiden Lane 15th Floor New York, NY 10038 212.981.6527 (o) | 917.495.4918 (c) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Printer queue problem
FYI, the printing problem is gone on HP-UX now! :-D Thanks, it was really killing me. _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - User Support Spec. III |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Mon, 7 Feb 2005, Ryan Novosielski wrote: I noticed this too, on my test box. I will upgrade in production and see if it helps there... _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - User Support Spec. III |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Mon, 7 Feb 2005, Samba List Unetix wrote: I upgraded this weekend one of my sambaservers to 3.0.11 and the printer queue problem seems to have gone. Great work samba team Thanx Wim Bakker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Using SeMachineAccountPrivilege returns NT_STATUS_NO_SUCH_PRIVILEGE
Ryan Novosielski wrote: enable privileges = yes aarrrggg, I missed that detail. I have added it to the gloabl section now and bounced the samba daemons. Added the permission again and checked it, still nothing retruned upon checking. net rpc rights list accounts No one is assigned to any of the groupings. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Charset and codepage problems
Hello to you all! I have some nice problems with Fedora3 and Samba: I have some different Redhat-servers running (Redhat 9 with samba 2.x) and Fedora-Servers. Is there a simple way to exermine which charset and codepage is used on the Serverside and how to adjust the client site, so that all special characters are shown correctly? I have rad many newsgroup-postings saying: try and error, but with many servers and updates you get fuzzy very quick! As a programmer (but on windowsside) I think (hope), there should be a logical way to solve this. Some said: Adjust your i18.conf configuration but this will not work for me because I had to adjust it to see the local fat and ntfs partitions correctly. Does anyone have some hints for me? Thanks! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] My Documents doesn't sync unless logged off
John, how is this done if you don't mind my asking? Or is it just a once per user thing? _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - User Support Spec. III |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Wed, 9 Feb 2005, John H Terpstra wrote: On Wednesday 09 February 2005 13:00, Choudary Mumtaz wrote: My Documents folder doesn't sync with the server unless users log off from the machine and log back in. Is there a way to sync the My Documents folder during the session? Thank you. The only way to keep My Documents in sync with a server source is to use folder redirection. This way the entire My Documents affair will be actually stored on the server and all updates will be direct to it. - John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Prints ok, but says Access denied, unable to connect. win2k and samba 2.2.1a
Hi, Am Montag, 14. Februar 2005 01:17 schrieb Bruce Hohl: Hi, I had the same problem and solved it by adding use client driver = yes to the [printers] section. I'm not quite sure whether this option is available in Samba 2.2.1a Loading the printer drivers onto the server will also eliminate these error messages ... at leaset in version 3.0.9. However, see the following from man smb.conf: use client driver (S) If this parameter is enabled for a printer, then any attempt to open the printer with the PRINTER_ACCESS_ADMINISTER right is mapped to PRINTER_ACCESS_USE instead. Thus allowing the OpenPrinterEx() call to succeed. This parameter MUST not be able enabled on a print share which has valid print driver installed on the Samba server. Default: use client driver = no I experienced the error message on a samba 3.0.10, with installed printer drivers. The windows client had already used this driver for installation and then got the error message. I then set use client driver = yes and the error message disappeared. Since I read the man page, especially the last paragraph, I used another Win2k-client to see, whether it is still possible to use the printer drivers - it was. If I understand this last paragraph correctly, a value of yes would cause the client to look for the drivers locally, but as far as I saw, this did not happen. Stefan -- * in-put GbR - Das Linux-Systemhaus Stefan-Michael Guenther Moltkestrasse 49 D-76133 Karlsruhe Tel./Fax : +49 (0)721 / 83044 - 98/93 http://www.in-put.de * -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Incorrect disk size reported at 20.0 MB
I do believe there is a parameter in smb.conf that will allow you to replace the dfree call with a script that will determine the free space. However, there may be a more elegant solution of which I am unaware. _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - User Support Spec. III |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Mon, 14 Feb 2005, Richard Felkins wrote: [2005/02/14 06:04:41, 1] smbd/service.c:make_connection_snum(645) xp-rlf (10.11.132.178) connect to service home initially as user richardf (uid=447, gid=10) (pid 4612) [2005/02/14 06:04:41, 0] smbd/dfree.c:disk_free(138) WARNING: dfree is broken on this system Jeremy has asked for a debug level 10 which produced 200K in seconds. The above snip looks like the most likely piece of information. This is Solaris 8, not patched lately due to legacy requirements. I can send the large debug capture if requested, thoughts so far? Richard. Date: Sat, 12 Feb 2005 11:08:31 -0800 From: Jeremy Allison [EMAIL PROTECTED] To: Richard Felkins [EMAIL PROTECTED] Cc: samba@lists.samba.org Subject: Re: [Samba] Incorrect disk size reported at 20.0 MB Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.4.1i On Fri, Feb 11, 2005 at 07:47:34AM -0800, Richard Felkins wrote: I'm recently seeing an issue with how Samba is reporting the disk space available from a NFS share. Checking the properties from a PC system displays all mapped network drives as having 20.0 MB size with zero free disk space available. We updated to Samba version 3.0.11 this morning with no change in results. I have checked the bug reports and haven't found anything that resembles this problem. Any ideas where I might look? A network capture showing the disk space request would help, as would a debug level 10 from smbd. Jeremy. Richard L. Felkins SAIC Systems 10260 Campus Point Dr. MS-A Email: [EMAIL PROTECTED] San Diego, CA 92121 Phone: 858-826-3321 Cell: 858-354-4563 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] pdbedit how to change a domain
Samba version 3.0.9 on Red Hat 9.0 workstations: NT 4.0 SP6 When I took over this project, there were two domains connected by a VPN. For reasons that I'm unable to understand, some new users wound up with the intended domain of SATA and some wound up in SATB (even though they joined the SATA domain. Recently, all kinds of problems have materialized and the only thing I can find wrong is the fact that people logging into the SATA domain are sometimes (at least according to pdbedit) members of the SATB domain (now defunct, and shut off). My immediate fix was to remove the user's profile, and recreate it from scratch, but this is a heavy handed and clumsy approach, and not efficient when you have hundreds problems like this to address. Using google, I looked for a way to change the domain, and it appears as though this is unsupported, or at least is not a common enough issue to have been asked and answered. There must be a way to move people from one domain to another fairly easily, but I don't know what it is. Consulting man pdbedit also gives no hints, so I may not even be using the right tool. Could someone enlighten me on what I'm missing? //example follows User krish logs into SATA every morning, but seems to get bizarre errors when opening her documents and using other domain resources. User maggieg has no issues of any kind. In fact, all (hundreds) users with permissions issues have the SATB domain instead of the SATA domain. There are no issues with users who have the SATA domain, so I concluded that the problems are caused by the wrong domain. Here's some output from pdbedit -L -v to illustrate: --- Unix username:krish NT username: Account Flags:[U ] User SID: S-1-5-21-3135006320-233574996-2523178827-5648 Primary Group SID:S-1-5-21-3135006320-233574996-2523178827-3005 Full Name:KRIS HOSINO Home Directory: \\firewall2\krish HomeDir Drive: Logon Script: kix32.exe sat.kix Profile Path: \\FIREWALL2\profiles\krish Domain: SATB Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Mon, 18 Jan 2038 19:14:07 GMT Kickoff time: Mon, 18 Jan 2038 19:14:07 GMT Password last set:Thu, 27 Jan 2005 19:55:26 GMT Password can change: Thu, 27 Jan 2005 19:55:26 GMT Password must change: Mon, 18 Jan 2038 19:14:07 GMT Last bad password : 0 Bad password count : 0 Logon hours : FF --- Unix username:maggieg NT username: Account Flags:[U ] User SID: S-1-5-21-3135006320-233574996-2523178827-6900 Primary Group SID:S-1-5-21-3135006320-233574996-2523178827-3005 Full Name:MARGARET GAGNON Home Directory: \\firewall2\maggieg HomeDir Drive: Logon Script: kix32.exe sat.kix Profile Path: \\FIREWALL2\profiles\maggieg Domain: SATA Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Mon, 18 Jan 2038 19:14:07 GMT Kickoff time: Mon, 18 Jan 2038 19:14:07 GMT Password last set:Mon, 24 Jan 2005 08:14:02 GMT Password can change: Mon, 24 Jan 2005 08:14:02 GMT Password must change: Mon, 18 Jan 2038 19:14:07 GMT Last bad password : 0 Bad password count : 0 Logon hours : FF --- TIA -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Using SeMachineAccountPrivilege returns NT_STATUS_NO_SUCH_PRIVILEGE
Michael Lueck wrote: Michael Lueck wrote: When I issue 'net rpc rights grant auserid SeMachineAccountPrivilege' OK, trick seems to be DOMAIN\auserid vs expecting it to assume the local domain name. No more error message. However when I 'net rpc rights list DOMAIN\auserid' and enter my password, no error is given and no rights are shown. A bit more about this problem. I wrapped the net command in a Rexx script so I could capture the exit code from net. The grant invocation returns with an exit of 1 though it does not complain of an error. The list accounts invocation correctly exits with a 0 code. Guess I best crank up the Samba log level unless anyone has a better suggestion / place to look. TIA! -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem when i join Win XP-SP2 client to samba
Hi, i have a lot of win XP clients with SP2 preinstalled and when i try to join to samba PDC i get an error: [...] user unknown or incorrect password. [...] The other clients (win 2000-SP4, NT-SP6, XP-SP1) work correctly, the problem is with XP-SP2. My version of samba is samba-2.2.8a. Exists any solution without having to update to last samba? thanks Joan Ramos Ramos mailto:[EMAIL PROTECTED] Dpto. Informática Tel.: +34 932 232 552 (Ext. 260) Fax.: +34 932 230 151 Este mensaje es confidencial y atañe exclusivamente a las personas a las que va dirigido. Cualquier opinión en el contenida, es exclusivo de su autor y no representa necesariamente la opinion de UNIPOST, S.A. Si Ud. no es el destinatario del mensaje, considerese advertido que lo ha recibido por error y que cualquier difusión o copia estan terminantemente prohibidos. Si ha recibido por error, por favor comuniquelo a UNIPOST, S.A. al número +34 93 223 25 52 o correo electrónico a [EMAIL PROTECTED]. This e-mail is confidential and intended solely for the use of the individual to whom it is addressed. Any opinions presented are solely those of the author and do not necessarily represent those of UNIPOST, S.A. If you are not the intended recipient, be advised that you have received this e-mail in error and that dissemination, forwarding or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please notify it to UNIPOST, S.A. by telephone on number +34 93 223 25 52 or by e-mail to [EMAIL PROTECTED]. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba + ldap + pdc
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi. I am configuring the samba to legalize in ldap (PDC) of my network. I am with the problem in the hour to legalize the domain see logs: [ 2005/02/14 15:07:31, 0 ] passdb/pdb_ldap.c:ldapsam_search_one_group(1982) ldapsam_search_one_group: Problem during the LDAP search: Error LDAP: (In such object) What's this probleman? []'s __ Márcio Luciano Donada mdonada at auroraalimentos dot com dot br FreeBSD - The uptime is mesuared in years! -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCEOc1yJq2hZEymxcRAoWyAKCslB/jrUZm6HL7yQhJg7x2GgG/JACgheTn hWlmktAcm5UunKBth1/BKy4= =JahE -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Using SeMachineAccountPrivilege returns NT_STATUS_NO_SUCH_PRIVILEGE
Michael Lueck wrote: Guess I best crank up the Samba log level unless anyone has a better suggestion / place to look. Truth was in the logs. It was looking up DOMAINauserid without a slash, though I had one in the command line. I double slashed in the command line, received single in the logs, and of course the privilege was successfully added. fffeeewww -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Joining a domain with a non-administrator account
I am running 3.0.10. Do I need to upgrade to 3.0.11 to get this to work? Gerald (Jerry) Carter wrote: Are you running 3.0.11 ? Did you set 'enable privileges = yes' ? Did you grant the SeMachineAccountPrivilege to the 'DOMAIN\Domain Admins' group ? - David Sonenberg Systems / Network Administrator Stroz Friedberg, LLC 15 Maiden Lane 15th Floor New York, NY 10038 212.981.6527 (o) | 917.495.4918 (c) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Joining a domain with a non-administrator account
I am running 3.0.10. Do I need to upgrade to 3.0.11 to get this to work? Yep, that's a new feature for this version, as stated in the release notes for 3.0.11. Gerald (Jerry) Carter wrote: Are you running 3.0.11 ? Did you set 'enable privileges = yes' ? Did you grant the SeMachineAccountPrivilege to the 'DOMAIN\Domain Admins' group ? - David Sonenberg Systems / Network Administrator Stroz Friedberg, LLC 15 Maiden Lane 15th Floor New York, NY 10038 212.981.6527 (o) | 917.495.4918 (c) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Access Denied after Upgrade passed 3.0.2a
I have upgraded many Samba versions over the years with great success. I use Samba on Solaris/Sparc systems strickly as member servers (file servers) of my normal Windows XP Domain. Recently I have attempted to upgrade from Samba 3.0.2a to anything newer, specifically 3.0.8, 3.0.10, and 3.0.11. I've successfully compiled Samba 308 3011. Everything works GREAT, except I have no write access to my shares UNLESS I chmod 777 on the unix directory. That's not good! Example: When I upgrade, I'll upgrade my legacy code which is in /opt/samba302a and has worked great for long time - no issues. I'll then compile new Samba and make install it in /opt/samba3011 configure, make, and make install all execute flashlessly - like always ( thanks Samba team nice job! ) I'll copy my pre-exising smb.conf file from old to new Samba cp /opt/samba302a/lib/smb.conf /opt/samba3011/lib/smb.conf cd /opt/samba3011/bin ./net join -U administrator (put the password in) and Poof, I'm back in the domain. All's well. I check with my PC client and I naturally see all my shares. Cool. But now I cannot write to any of the shared folders, again, unless I do a chmod 777 /share_directory in Solaris. I've checked for errors in all samba log files - NON. I've even used Steve Christianen's pre-compiled (version 3.0.10) version to check my compilation. His does the same thing. NOTE: When I revert back to my old Samba 3.0.2a and rejoin the domain, all's well again in the universe. I run Samba on 6 Solaris servers. This is the first time I've seen this issue. I compiled with all required packages installed, as I have done for many years! command: ./configure --prefix=/opt/samba3011 --with-winbind --with-acl-support make make install (all's perfect) Steve did not use --winbind so that's not the problem I think. What am I missing? I'm sure something very simple and stupid. This occurs on more than one server. Maybe all, I'm not sure yet. What has changed between 3.0.2a and the newer versions that I've missed. I'll like to upgrade. Thanks for your time and suggestions -- Chris -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba unable to change password :smbpasswd
Hi , I am getting following error while changinf the password. [ux18750](sapara)home/sapara$/usr/local/samba/bin/smbpasswd load_unicode_map: filename /usr/local/samba/lib/codepages/unicode_map.850 does not exist. load_unicode_map: filename /usr/local/samba/lib/codepages/unicode_map.ISO8859-1 does not exist. Old SMB password: New SMB password: Retype new SMB password: machine 127.0.0.1 rejected the session setup. Error was : NT_STATUS_LOGON_FAILURE. Failed to change password for sapara Can any one please advise me what could be wrong and how I can rectify this error. Regards, Sanjeev. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba logs created with IP addresses, not names
Hi Folks, I have Samba 3.0.10 installed on a Mandrake 10.0 box. It is a domain member server in a 2000 domain and everything seems to authenticate nicely. I have winbind smbd and nmbd all showing up in my processes list and it all seems happy. The shares all work fine and my domain users can autheticate. Yay! I can resolve workstation's names from the linux box with ping otherbox and net lookup otherbox. I can also resolve the samba box from workstations using net view sambabox and ping sambabox. In the globals, I have log files = /var/log/samba/log.%m yet rather than seeing log.otherbox generated when other boxes access the share, I get log.w.x.y.z. This is not what I would expect and not what I'd like Below are my globals. [global] unix charset = LOCALE workgroup = OURDOMAIN realm = OURDOMAIN.FULLVERSION.COM server string = Samba Server %v security = ADS username map = /etc/samba/smbusers password server = 2000DC.OURDOMAIN.FULLVERSION.COM log level = 1 syslog = 0 log file = /var/log/samba/log.%m max log size = 150 dns proxy = No wins server = 192.168.X.Y ldap ssl = no idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind separator = + domain master = no local master = no preferred master = no os level = 10 Am I missing anything obvious? Anyone have any tips regarding where else I could look? Thanks in advance for any tips you may have. Ed. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Command to verify config options at compile time
All- What is the command to verify config options of Samba at compile time? Thanks. Jeff -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Command to verify config options at compile time
On Mon, 2005-02-14 at 14:16 -0800, Jeff Yana wrote: All- What is the command to verify config options of Samba at compile time? You tell me. Here is the output from smbd --help king:~# smbd --help Usage: smbd [OPTION...] -D, --daemon Become a daemon (default) -i, --interactive Run interactive (not a daemon) -F, --foreground Run daemon in foreground (for daemontools etc) -S, --log-stdout Log to stdout -b, --build-optionsPrint build options -p, --port=STRING Listen on the specified ports Help options: -?, --help Show this help message --usageDisplay brief usage message Common samba options: -d, --debuglevel=DEBUGLEVELSet debug level -s, --configfile=CONFIGFILEUse alternative configuration file -l, --log-basename=LOGFILEBASE Basename for log/debug files -V, --version Print version king:~# obviously it is smbd -b Good luck. -- greg, [EMAIL PROTECTED] The technology that is Stronger, better, faster: Linux signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Joining a domain with a non-administrator account
I just upgraded to 3.0.11. I read the Samba Rights Howto, and this looks like a nice addition to Samba. My question is this... I have 1 samba LDAP/PDC, and 2 samba slave LDAP/BDC's. The changes I make with the 'net rpc rights' command don't propagate to my BDC's. Is there something special I have to do in this setup? Paul Gienger wrote: I am running 3.0.10. Do I need to upgrade to 3.0.11 to get this to work? Yep, that's a new feature for this version, as stated in the release notes for 3.0.11. Gerald (Jerry) Carter wrote: Are you running 3.0.11 ? Did you set 'enable privileges = yes' ? Did you grant the SeMachineAccountPrivilege to the 'DOMAIN\Domain Admins' group ? - David Sonenberg Systems / Network Administrator Stroz Friedberg, LLC 15 Maiden Lane 15th Floor New York, NY 10038 212.981.6527 (o) | 917.495.4918 (c) -- David Sonenberg Systems / Network Administrator Stroz Friedberg, LLC 15 Maiden Lane 15th Floor New York, NY 10038 212.981.6527 (o) | 917.495.4918 (c) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Intended behaviour of add user and smbpasswd
Hi, I'd like to upgrade my 2.2 samba to the latest 3.x stable, so I'm experimenting with the new features of 3.x on a RHEL 3 clone. I've run into some difficulty when using usrmgr.exe for administrating users. I've filled out the 'add user script' define with: add user script = /usr/sbin/useradd -g sambausers -c Samba User -d /dev/null -s /bin/false -M %u When I try an add a user using usrmgr.exe, I get an 'Access is Denied' message. I turned on debugging and I could see the request being made, and I noticed that the unix account was being created, but the smb backend account was not. It seems like the desired behaviour of 'add user' would add the smb account in my backend (smbpasswd file) I've searched high and low on Google, but I've been unable to find an answer to this question. I have been able to find several smb.conf files that look like mine. I'd appreciate any input. Blue Skies, Ritch Melton -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Can't save new Excel 2003 files to Windows 98 pc's
It's an odd network, but it's 2 separate, somewhat related companies on one subnet for shared printers, etc. I am a computer consultant, but am pretty new to Linux/Samba. The first company has a newly installed server with CentOS 3.3 (Red Hat Enterprise Linux 3.3), running Samba 3.0.11. The second company has a Windows 98 server on it, which should eventually be upgraded to a Linux server once I get the first company's server running correctly. Immediately after installing the Samba server, the second company's Windows XP Pro pc's cannot save new Excel 2003 files to their Windows 98 server. Nor can they save new Excel 2003 files to any other Windows 98 pc's with a share available. They can save new Excel files to the first company's Samba server or to the local hard drive just fine. The error they get upon attempts to save new Excel 2003 files to their Windows 98 server is: The folder 'M:\foo\foo.xls' isn't accessible. The folder may be located in an unavailable location, protected with a password, or the filename contains a / or \. If the Windows XP pc overwrites an existing file with a new file on the Windows 98 server, it works just fine. If a pc running Windows 98 and Excel 97 saves a new file to the Windows 98 server, it works just fine. Saving new files in notepad or wordpad from the Windows XP pc's to the Windows 98 server works fine too. At this point, I'm not sure where to look for the cause, but suspect it's in the Samba config as seen below (without all the shares, which are all the same). All pc's are set to be a member of WORKGROUP. Any ideas? Thanks, Jack D. Browning jac at netNOSPAMdor dot com - begin smb.conf --- [global] workgroup = WORKGROUP server string = company1 Samba Server hosts allow = 10.0.0. 127. log file = /var/log/samba/smbd.log max log size = 50 smb ports = 139 445 encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd unix password sync = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 os level = 35 security = share name resolve order = wins lmhosts hosts bcast printcap name = CUPS show add printer wizard = No wins support = yes dns proxy = no printing = CUPS domain master = yes preferred master = yes [printers] comment = SMB Print Spool path = /var/spool/samba printable = Yes use client driver = Yes browseable = Yes guest ok = yes [DATA] comment = Data path = /shares_company1/data writable = yes share modes = yes oplocks = yes force create mode = 0660 force directory mode = 0770 guest ok = yes - end smb.conf --- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] problems with special characters
Hello NG, maybe anybody can help me... I got trouble with the german special characters. After upgrading to v3.0.11 any special character will be displayed as an underscore. Also the modification of the smb.conf couldn't fix the problems: character set = ISO8859-1 client code page = 850 Since v3 these options are out of date, but I used them anyway. After switching back to v3.0.3 all the characters will be displayed correctly. But I recordnized another problem: The characters won't be correctly displayed on the machine itself (using ls). So I guess it's a main problem, but I'm not sure. I set my locale to de_DE and if i touched a file with those characters in the filename it will be shown as it should. Even via samba. So, anybody experience with setting the right character encoding? Oh yes - I'm using redhat v8. Thanks, bastian -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] desktop.ini file appearing in folders.
hi, i have the lastest stable samba running as a PDC in a home network environment. i get the file desktop.ini pop up, and in start menus, and in favourates as well. I can manually delete them. but when i log onto another machine, it reappears again. is there anything i can do to fix this as it is annoying to some of the users in the domain. Thanks. This message was sent using IMP, the Internet Messaging Program. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] desktop.ini file appearing in folders.
In your smb.conf file, in the [profiles] share, add the line: hide files = /desktop.ini/ Regards, Andy Liebman In a message dated 2/15/2005 2:41:38 A.M. Eastern Standard Time, [EMAIL PROTECTED] writes: hi, i have the lastest stable samba running as a PDC in a home network environment. i get the file desktop.ini pop up, and in start menus, and in favourates as well. I can manually delete them. but when i log onto another machine, it reappears again. is there anything i can do to fix this as it is annoying to some of the users in the domain. Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] desktop.ini file appearing in folders.
On Mon, 2005-02-14 at 23:41 -0800, [EMAIL PROTECTED] wrote: hi, i have the lastest stable samba running as a PDC in a home network environment. i get the file desktop.ini pop up, and in start menus, and in favourates as well. I can manually delete them. but when i log onto another machine, it reappears again. is there anything i can do to fix this as it is annoying to some of the users in the domain. I believe you can add to smb.conf something like... veto files = /desktop.ini/ Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
svn commit: samba r5392 - in branches/SAMBA_4_0/source: lib libcli/nbt nbt_server
Author: tridge Date: 2005-02-14 09:15:24 + (Mon, 14 Feb 2005) New Revision: 5392 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5392 Log: added secure WINS server processing. Send a WACK on name registrations from anyone who isn't a current owner, then query the owner addresses to see if they still want it. Added: branches/SAMBA_4_0/source/nbt_server/winswack.c Modified: branches/SAMBA_4_0/source/lib/util_strlist.c branches/SAMBA_4_0/source/libcli/nbt/namequery.c branches/SAMBA_4_0/source/nbt_server/config.mk branches/SAMBA_4_0/source/nbt_server/packet.c branches/SAMBA_4_0/source/nbt_server/winsdb.c branches/SAMBA_4_0/source/nbt_server/winsdb.h branches/SAMBA_4_0/source/nbt_server/winsserver.c Changeset: Sorry, the patch is too large (526 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5392
svn commit: samba r5393 - in branches/SAMBA_4_0/source/lib/events: .
Author: metze Date: 2005-02-14 09:43:36 + (Mon, 14 Feb 2005) New Revision: 5393 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5393 Log: trigger timed events not to early, better do it a bit to late metze Modified: branches/SAMBA_4_0/source/lib/events/events_standard.c Changeset: Modified: branches/SAMBA_4_0/source/lib/events/events_standard.c === --- branches/SAMBA_4_0/source/lib/events/events_standard.c 2005-02-14 09:15:24 UTC (rev 5392) +++ branches/SAMBA_4_0/source/lib/events/events_standard.c 2005-02-14 09:43:36 UTC (rev 5393) @@ -380,7 +380,8 @@ int timeout = -1; if (tvalp) { - timeout = (tvalp-tv_usec / 1000) + (tvalp-tv_sec*1000); + /* it's better to trigger timed events a bit later than to early */ + timeout = ((tvalp-tv_usec+999) / 1000) + (tvalp-tv_sec*1000); } ret = epoll_wait(ev-epoll_fd, events, maxevents, timeout);
svn commit: samba r5394 - in branches/SAMBA_4_0/source/torture/rpc: .
Author: metze Date: 2005-02-14 09:44:58 + (Mon, 14 Feb 2005) New Revision: 5394 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5394 Log: as the timing should be fixed in the server now, don't accept to early replies anymore, also print out usecs in the debug messages metze Modified: branches/SAMBA_4_0/source/torture/rpc/echo.c Changeset: Modified: branches/SAMBA_4_0/source/torture/rpc/echo.c === --- branches/SAMBA_4_0/source/torture/rpc/echo.c2005-02-14 09:43:36 UTC (rev 5393) +++ branches/SAMBA_4_0/source/torture/rpc/echo.c2005-02-14 09:44:58 UTC (rev 5394) @@ -263,19 +263,18 @@ r[i].out.result, r[i].in.seconds, (uint_t)diff[i].tv_sec); ret = False; } else { - if (r[i].out.result diff[i].tv_sec+1) { - printf(Failed - Sleeped for %u seconds (but reply takes only %u seconds)\n, - r[i].out.result, (uint_t)diff[i].tv_sec); - ret = False; + if (r[i].out.result diff[i].tv_sec) { + printf(Failed - Sleeped for %u seconds (but reply takes only %u.%06u seconds)\n, + r[i].out.result, (uint_t)diff[i].tv_sec, (uint_t)diff[i].tv_usec); } else if (r[i].out.result+1 == diff[i].tv_sec) { - printf(Sleeped for %u seconds (but reply takes %u seconds - busy server?)\n, - r[i].out.result, (uint_t)diff[i].tv_sec); + printf(Sleeped for %u seconds (but reply takes %u.%06u seconds - busy server?)\n, + r[i].out.result, (uint_t)diff[i].tv_sec, (uint_t)diff[i].tv_usec); } else if (r[i].out.result == diff[i].tv_sec) { - printf(Sleeped for %u seconds (reply takes %u seconds - ok)\n, - r[i].out.result, (uint_t)diff[i].tv_sec); + printf(Sleeped for %u seconds (reply takes %u.%06u seconds - ok)\n, + r[i].out.result, (uint_t)diff[i].tv_sec, (uint_t)diff[i].tv_usec); } else { - printf((Failed) - Not async - Sleeped for %u seconds (but reply takes %u seconds)\n, - r[i].out.result, (uint_t)diff[i].tv_sec); + printf((Failed) - Not async - Sleeped for %u seconds (but reply takes %u.%06u seconds)\n, + r[i].out.result, (uint_t)diff[i].tv_sec, (uint_t)diff[i].tv_usec); /* TODO: let the test fail here, when we support async rpc on ncacn_np ret = False;*/ }
svn commit: samba r5395 - in branches/SAMBA_4_0/source/param: .
Author: tridge Date: 2005-02-14 10:08:10 + (Mon, 14 Feb 2005) New Revision: 5395 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5395 Log: fixed some loadparm memory leaks Modified: branches/SAMBA_4_0/source/param/loadparm.c Changeset: Modified: branches/SAMBA_4_0/source/param/loadparm.c === --- branches/SAMBA_4_0/source/param/loadparm.c 2005-02-14 09:44:58 UTC (rev 5394) +++ branches/SAMBA_4_0/source/param/loadparm.c 2005-02-14 10:08:10 UTC (rev 5395) @@ -1444,7 +1444,7 @@ const char *value = get_parametrics(lookup_service, type, option); if (value) - return str_list_make(NULL, value, separator); + return str_list_make(talloc_autofree_context(), value, separator); return NULL; } @@ -1862,7 +1862,8 @@ strupper(*(char **)dest_ptr); break; case P_LIST: - *(const char ***)dest_ptr = str_list_copy(NULL, *(const char ***)src_ptr); + *(const char ***)dest_ptr = str_list_copy(talloc_autofree_context(), + *(const char ***)src_ptr); break; default: break; @@ -2374,7 +2375,8 @@ break; case P_LIST: - *(const char ***)parm_ptr = str_list_make(NULL, pszParmValue, NULL); + *(const char ***)parm_ptr = str_list_make(talloc_autofree_context(), + pszParmValue, NULL); break; case P_STRING: @@ -2934,7 +2936,7 @@ continue; switch (parm_table[i].type) { case P_LIST: - parm_table[i].def.lvalue = str_list_copy(NULL, + parm_table[i].def.lvalue = str_list_copy(talloc_autofree_context(), *(const char ***)parm_table[i].ptr); break; case P_STRING:
svn commit: samba r5396 - in branches/SAMBA_4_0/source/libcli/nbt: .
Author: tridge Date: 2005-02-14 11:31:48 + (Mon, 14 Feb 2005) New Revision: 5396 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5396 Log: fixed parsing of NBT type 0xc0 compressed name pointers Modified: branches/SAMBA_4_0/source/libcli/nbt/nbtname.c Changeset: Modified: branches/SAMBA_4_0/source/libcli/nbt/nbtname.c === --- branches/SAMBA_4_0/source/libcli/nbt/nbtname.c 2005-02-14 10:08:10 UTC (rev 5395) +++ branches/SAMBA_4_0/source/libcli/nbt/nbtname.c 2005-02-14 11:31:48 UTC (rev 5396) @@ -55,8 +55,9 @@ if (1 + *offset = ndr-data_size) { return NT_STATUS_BAD_NETWORK_NAME; } + *max_offset = MAX(*max_offset, *offset + 2); *offset = ((len0x3F)8) | ndr-data[1 + *offset]; - *max_offset = MAX(*max_offset, *offset + 1); + *max_offset = MAX(*max_offset, *offset); loops++; continue; }
svn commit: samba r5397 - in branches/SAMBA_4_0/source: nbt_server torture/nbt
Author: tridge Date: 2005-02-14 12:46:03 + (Mon, 14 Feb 2005) New Revision: 5397 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5397 Log: added testing and server support for the special handling required for the 0x1d local master browser name in WINS Modified: branches/SAMBA_4_0/source/nbt_server/winsserver.c branches/SAMBA_4_0/source/torture/nbt/wins.c Changeset: Modified: branches/SAMBA_4_0/source/nbt_server/winsserver.c === --- branches/SAMBA_4_0/source/nbt_server/winsserver.c 2005-02-14 11:31:48 UTC (rev 5396) +++ branches/SAMBA_4_0/source/nbt_server/winsserver.c 2005-02-14 12:46:03 UTC (rev 5397) @@ -112,6 +112,12 @@ uint16_t nb_flags = packet-additional[0].rdata.netbios.addresses[0].nb_flags; const char *address = packet-additional[0].rdata.netbios.addresses[0].ipaddr; + /* as a special case, the local master browser name is always accepted + for registration, but never stored */ + if (name-type == NBT_NAME_MASTER) { + goto done; + } + rec = winsdb_load(winssrv, name, packet); if (rec == NULL) { rcode = wins_register_new(nbtsock, packet, src_address, src_port); Modified: branches/SAMBA_4_0/source/torture/nbt/wins.c === --- branches/SAMBA_4_0/source/torture/nbt/wins.c2005-02-14 11:31:48 UTC (rev 5396) +++ branches/SAMBA_4_0/source/torture/nbt/wins.c2005-02-14 12:46:03 UTC (rev 5397) @@ -111,7 +111,7 @@ CHECK_STRING(io.out.wins_server, address); CHECK_VALUE(io.out.rcode, 0); - if (nb_flags NBT_NM_GROUP) { + if (name-type != NBT_NAME_MASTER nb_flags NBT_NM_GROUP) { printf(Try to register as non-group\n); io.in.nb_flags = ~NBT_NM_GROUP; status = nbt_name_register_wins(nbtsock, mem_ctx, io); @@ -132,6 +132,14 @@ query.in.retries = 0; status = nbt_name_query(nbtsock, mem_ctx, query); + if (name-type == NBT_NAME_MASTER) { + if (!NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) { + printf(Bad response from %s for name query - %s\n, + address, nt_errstr(status)); + return False; + } + return ret; + } if (NT_STATUS_EQUAL(status, NT_STATUS_IO_TIMEOUT)) { printf(No response from %s for name query\n, address); return False; @@ -287,6 +295,11 @@ name.scope = NULL; ret = nbt_test_wins_name(mem_ctx, address, name, NBT_NODE_H); + name.type = NBT_NAME_MASTER; + ret = nbt_test_wins_name(mem_ctx, address, name, NBT_NODE_H); + + ret = nbt_test_wins_name(mem_ctx, address, name, NBT_NODE_H | NBT_NM_GROUP); + name.scope = example; name.type = 0x72; ret = nbt_test_wins_name(mem_ctx, address, name, NBT_NODE_H);
svn commit: samba r5398 - in branches/SAMBA_4_0/source/libcli/nbt: .
Author: tridge Date: 2005-02-14 23:36:42 + (Mon, 14 Feb 2005) New Revision: 5398 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5398 Log: fixed encoding of *SMBSERVER name (thanks to Karl Melcher for spotting this) Modified: branches/SAMBA_4_0/source/libcli/nbt/nbtname.c Changeset: Modified: branches/SAMBA_4_0/source/libcli/nbt/nbtname.c === --- branches/SAMBA_4_0/source/libcli/nbt/nbtname.c 2005-02-14 12:46:03 UTC (rev 5397) +++ branches/SAMBA_4_0/source/libcli/nbt/nbtname.c 2005-02-14 23:36:42 UTC (rev 5398) @@ -133,7 +133,7 @@ cname[2*i] = 'A' + (name[i]4); cname[1+2*i] = 'A' + (name[i]0xF); } - if (name[0] == '*') { + if (strcmp(name, *) == 0) { pad_char = 0; } else { pad_char = ' ';
svn commit: samba r5401 - in branches/SAMBA_4_0/source/lib: .
Author: tridge Date: 2005-02-15 02:24:57 + (Tue, 15 Feb 2005) New Revision: 5401 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5401 Log: using talloc_array() is neater here Modified: branches/SAMBA_4_0/source/lib/util_strlist.c Changeset: Modified: branches/SAMBA_4_0/source/lib/util_strlist.c === --- branches/SAMBA_4_0/source/lib/util_strlist.c2005-02-15 01:11:20 UTC (rev 5400) +++ branches/SAMBA_4_0/source/lib/util_strlist.c2005-02-15 02:24:57 UTC (rev 5401) @@ -34,7 +34,7 @@ sep = LIST_SEP; } - ret = talloc_realloc(mem_ctx, NULL, const char *, 1); + ret = talloc_array(mem_ctx, const char *, 1); if (ret == NULL) { return NULL; }
svn commit: samba r5402 - in branches/SAMBA_4_0/source/librpc: . idl
Author: tridge Date: 2005-02-15 02:27:45 + (Tue, 15 Feb 2005) New Revision: 5402 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5402 Log: a initial attempt at a IDL definition of the WINS replication protocol on tcp port 42. This is enough to reasonably decode (with ndrdump) all the packets I have seen on the wire. It will need some fine tuning once I understand the protocol a bit more. Added: branches/SAMBA_4_0/source/librpc/idl/winsrepl.idl Modified: branches/SAMBA_4_0/source/librpc/config.mk branches/SAMBA_4_0/source/librpc/idl/nbt.idl Changeset: Modified: branches/SAMBA_4_0/source/librpc/config.mk === --- branches/SAMBA_4_0/source/librpc/config.mk 2005-02-15 02:24:57 UTC (rev 5401) +++ branches/SAMBA_4_0/source/librpc/config.mk 2005-02-15 02:27:45 UTC (rev 5402) @@ -293,7 +293,13 @@ NOPROTO = YES REQUIRED_SUBSYSTEMS = LIBNDR NDR_MISC +[SUBSYSTEM::NDR_WINSREPL] +INIT_OBJ_FILES = librpc/gen_ndr/ndr_winsrepl.o +INIT_FUNCTION = dcerpc_winsrepl_init +NOPROTO = YES +REQUIRED_SUBSYSTEMS = LIBNDR NDR_MISC + [SUBSYSTEM::NDR_ALL] REQUIRED_SUBSYSTEMS = NDR_AUDIOSRV NDR_ECHO NDR_DCERPC NDR_EXCHANGE \ NDR_DSBACKUP NDR_EFS NDR_MISC NDR_LSA NDR_DFS NDR_DRSUAPI \ @@ -302,7 +308,7 @@ NDR_WINREG NDR_MGMT NDR_PROTECTED_STORAGE NDR_DCOM NDR_OXIDRESOLVER \ NDR_REMACT NDR_WZCSVC NDR_BROWSER NDR_W32TIME NDR_SCERPC NDR_NTSVCS \ NDR_NETLOGON NDR_TRKWKS NDR_KEYSVC NDR_KRB5PAC NDR_XATTR NDR_SCHANNEL \ - NDR_ROT NDR_DRSBLOBS NDR_SVCCTL NDR_NBT LIB_SECURITY_NDR + NDR_ROT NDR_DRSBLOBS NDR_SVCCTL NDR_NBT NDR_WINSREPL LIB_SECURITY_NDR [SUBSYSTEM::RPC_NDR_ROT] ADD_OBJ_FILES = librpc/gen_ndr/ndr_rot_c.o Modified: branches/SAMBA_4_0/source/librpc/idl/nbt.idl === --- branches/SAMBA_4_0/source/librpc/idl/nbt.idl2005-02-15 02:24:57 UTC (rev 5401) +++ branches/SAMBA_4_0/source/librpc/idl/nbt.idl2005-02-15 02:27:45 UTC (rev 5402) @@ -50,7 +50,7 @@ /* we support any 8bit name type, but by defining the common ones here we get better debug displays */ - typedef [enum8bit] enum { + typedef [enum8bit,public] enum { NBT_NAME_CLIENT = 0x00, NBT_NAME_MS = 0x01, NBT_NAME_USER = 0x03, Added: branches/SAMBA_4_0/source/librpc/idl/winsrepl.idl === --- branches/SAMBA_4_0/source/librpc/idl/winsrepl.idl 2005-02-15 02:24:57 UTC (rev 5401) +++ branches/SAMBA_4_0/source/librpc/idl/winsrepl.idl 2005-02-15 02:27:45 UTC (rev 5402) @@ -0,0 +1,139 @@ +#include idl_types.h + +/* + IDL structures for WINS replication protocol (port 42) + + Note that WINS replication is not traditionally encoded using + IDL/NDR + + Written by Andrew Tridgell [EMAIL PROTECTED] +*/ + +[ + uuid(0-1-2-3-4), + version(0.0), + pointer_default(unique), + depends(nbt) +] +interface wrepl +{ + const int WINS_REPLICATION_PORT = 42; + + declare enum nbt_name_type; + + typedef [flag(NDR_BIG_ENDIAN)] struct { + ipv4address owner; + ipv4address ip; + } wrepl_ip; + + typedef [flag(NDR_LITTLE_ENDIAN)] struct { + uint32 num_ips; + wrepl_ip ips[num_ips]; + ipv4address unknown; + } wrepl_address_list; + + typedef [nodiscriminant] union { + [case(0)] wrepl_ip address; + [case(2)] wrepl_address_list addresses; + } wrepl_addresses; + + typedef struct { + uint32 id_high; + uint32 id_low; + } wrepl_id; + + typedef struct { + uint32 name_len; + astring15 name; + nbt_name_type type; + uint32 unknown; + uint32 flags; + [flag(NDR_LITTLE_ENDIAN)] uint32 group_flag; + wrepl_id id; + [switch_is(flags 2)] wrepl_addresses addresses; + } wrepl_wins_name; + + typedef struct { + uint32 num_names; + wrepl_wins_name names[num_names]; + } wrepl_send_reply; + + typedef struct { + ipv4address address; + wrepl_id max_version; + wrepl_id min_version; + uint32 type; + } wrepl_wins_owner; + + typedef struct { + uint32 partner_count; + wrepl_wins_owner partners[partner_count]; + ipv4address initiator; + } wrepl_table; + + typedef [v1_enum] enum { + WREPL_REPL_TABLE_QUERY = 0, + WREPL_REPL_TABLE_REPLY = 1, + WREPL_REPL_SEND_REQUEST = 2, + WREPL_REPL_SEND_REPLY = 3, + WREPL_REPL_UPDATE = 4, + WREPL_REPL_INFORM = 8 + }
svn commit: samba r5403 - in branches/SAMBA_4_0/source/torture: . nbt
Author: tridge Date: 2005-02-15 04:55:56 + (Tue, 15 Feb 2005) New Revision: 5403 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5403 Log: a simple WINS benchmarking program Added: branches/SAMBA_4_0/source/torture/nbt/winsbench.c Modified: branches/SAMBA_4_0/source/torture/config.mk branches/SAMBA_4_0/source/torture/torture.c Changeset: Sorry, the patch is too large (330 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5403
svn commit: samba r5405 - in branches/SAMBA_4_0/source/libcli/nbt: .
Author: tridge Date: 2005-02-15 05:39:12 + (Tue, 15 Feb 2005) New Revision: 5405 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5405 Log: try to use NBT name pointers when a netbios name is repeated in a NBT packet. This allows much longer names to fit within the limits of NBT name packets (rfc1002.txt also says this should be done, although Samba3 never generates them). The main reason for doing this is it means that our NBT name pointer decoding code is tested with the smbtorture tests Modified: branches/SAMBA_4_0/source/libcli/nbt/nbtname.c Changeset: Modified: branches/SAMBA_4_0/source/libcli/nbt/nbtname.c === --- branches/SAMBA_4_0/source/libcli/nbt/nbtname.c 2005-02-15 05:14:09 UTC (rev 5404) +++ branches/SAMBA_4_0/source/libcli/nbt/nbtname.c 2005-02-15 05:39:12 UTC (rev 5405) @@ -214,8 +214,9 @@ uint_t num_components; uint8_t *components[MAX_COMPONENTS]; char *dscope=NULL, *p; - uint8_t *cname; + uint8_t *cname, *fullname; int i; + int fulllen; if (!(ndr_flags NDR_SCALARS)) { return NT_STATUS_OK; @@ -246,15 +247,32 @@ if (num_components == MAX_COMPONENTS) { return NT_STATUS_BAD_NETWORK_NAME; } + + fullname = talloc_asprintf(ndr, %c%s, (unsigned char)strlen(cname), cname); + NT_STATUS_HAVE_NO_MEMORY(fullname); - /* push the components */ - for (i=0;inum_components;i++) { - uint8_t len = strlen(components[i]); - NDR_CHECK(ndr_push_uint8(ndr, NDR_SCALARS, len)); - NDR_CHECK(ndr_push_bytes(ndr, components[i], len)); + for (i=1;inum_components;i++) { + fullname = talloc_asprintf_append(fullname, %c%s, + (unsigned char)strlen(components[i]), components[i]); + NT_STATUS_HAVE_NO_MEMORY(fullname); } - NDR_CHECK(ndr_push_uint8(ndr, NDR_SCALARS, 0)); + /* see if we can find the fullname in the existing packet - if + so, we can use a NBT name pointer. This allows us to fit + longer names into the packet */ + fulllen = strlen(fullname)+1; + for (i=0;i + fulllen ndr-offset;i++) { + if (ndr-data[i] == fullname[0] + memcmp(fullname, ndr-data[i], fulllen) == 0) { + talloc_free(fullname); + return ndr_push_uint16(ndr, NDR_SCALARS, 0xC000 | i); + } + } + + NDR_CHECK(ndr_push_bytes(ndr, fullname, fulllen)); + + talloc_free(fullname); + return NT_STATUS_OK; }
svn commit: samba r5406 - in branches/SAMBA_4_0/source/librpc: .
Author: tridge Date: 2005-02-15 06:46:31 + (Tue, 15 Feb 2005) New Revision: 5406 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5406 Log: fixed dependencies for the WREPL subsystem Modified: branches/SAMBA_4_0/source/librpc/config.mk Changeset: Modified: branches/SAMBA_4_0/source/librpc/config.mk === --- branches/SAMBA_4_0/source/librpc/config.mk 2005-02-15 05:39:12 UTC (rev 5405) +++ branches/SAMBA_4_0/source/librpc/config.mk 2005-02-15 06:46:31 UTC (rev 5406) @@ -297,7 +297,7 @@ INIT_OBJ_FILES = librpc/gen_ndr/ndr_winsrepl.o INIT_FUNCTION = dcerpc_winsrepl_init NOPROTO = YES -REQUIRED_SUBSYSTEMS = LIBNDR NDR_MISC +REQUIRED_SUBSYSTEMS = LIBNDR NDR_NBT [SUBSYSTEM::NDR_ALL]