Re: [Samba] reply_spnego_kerberos in log file
On 29.07-14:51, Andrew Bartlett wrote: [2005/07/28 09:46:32, 1] smbd/service.c:make_connection_snum(648) 10.11.50.51 (10.11.50.51) connect to service SHARE initially as user mpignoni (uid=5241, gid=) (pid 4784) [2005/07/28 09:46:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(263) Username GIDI.IT\CDM001$ is invalid on this system The strange is that I have 2 log files for my PC: log.hostname and log.IP Is it a big problem? The standard answer on this is to use winbindd, which will pick up the machine accounts from the DC, and allow the login. This is the machine itself trying to use it's credentials to login to your server (for some reason). I think this happens for some browsing or the like, but as you can see, it isn't a fatal problem for basic operation. I have a question on this: Is it possible, to have local useraccounts and using winbind only to get machine accounts from the DC? Chris -- -- Christoph Kaegi [EMAIL PROTECTED] -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] pdbedit - can't set password expiry, etc?
Hi All Have recently moved from a machine running 2.2 to a new machine running 3.0.10-1. I've just converted the smbpasswd database to tdbsam as I understand password ageing etc does not work with smbpasswd. I've set the line 'passdb backend = tdbsam' in the smb.conf, restarted the daemon and now I'm trying to force a user account to have to change his password the next time he logs in. I'm using the command #pdbedit -u justinh --pwd-must-change-time 0 and also tried #pdbedit --pwd-must-change-time=0 justinh but neither seems to modify the user; # pdbedit -Lv justinh Unix username:justinh NT username: Account Flags:[U ] User SID: S-1-5-21-179224907-3521905181-1287225574-2032 Primary Group SID:S-1-5-21-179224907-3521905181-1287225574-2201 Full Name:Justin.Hyde Home Directory: \\agnes\justinh HomeDir Drive: Logon Script: logon.bat Profile Path: \\agnes\justinh\profile Domain: MIDALIA Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Sat, 14 Dec 1901 04:45:51 GMT Kickoff time: Sat, 14 Dec 1901 04:45:51 GMT Password last set:Fri, 29 Jul 2005 13:12:12 GMT Password can change: Fri, 29 Jul 2005 13:12:12 GMT Password must change: Sat, 14 Dec 1901 04:45:51 GMT Last bad password : 0 Bad password count : 0 Logon hours : FF Can anyone suggest where I've gone wrong here? TIA Justin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can't validate [EMAIL PROTECTED] in Runas
A 17:48 28/07/2005 -0700, Linda W a écrit : Thierry ITTY wrote: can you open a session on your machine with the username/domain you wish to runas ? --- This was a semi-yes. It couldn't find the profile for Home/Linda, so said it would use the local profile -- then it said it couldn't find it, so it logged me in to a temporary directory. My home directory was setup as //servername/user -- not //DOMAIN/user. Despite unexpected location for the home directory, it did allow me to log in with the Domain/User credentials. It *may* be that I have drives mounted from the server and windows generally complains about having more than 1 connection to a server with different credentials (lame!?), but usually it says that's the problem instead of giving a failure with with wrong user/password, no? maybe if you access a share on a server as user1 and want to access another share on the same server as user2, windows complains that you can't use different credentials at the same time (error 1236 ? I think) thought this doesn't forbid you to have shares accessed as user1 and runas something as user2 the following works : open a session as user1, access a share, run cmd, then net use : you will see your share then runas cmd as user2. what will happen is that from user2's command prompt net use will show an empty list. but you'll be able to access the same or another share from there and net use will show it. user1 and user2 will access their shares each with their own credentials even on the same server the following doesn't work : open a session as user1, access a share (implicitely as user1), access a share as user2 on the same server (net use /user:...), this pops up the credentials error message I remember (?) that the program (bash ?) you want to exec is on a share then runas will set up user2's environment in which there are no shares (at least no one set up in user1's session) and thus thought bash.exe existed at the time runas was invoked, it didn't exist anymore when runas had to call it so the only solution I see is : open your session as user1, runas cmd as user2 (local program, no problem), access the share where bash is on, then run bash from the share I was hoping to have runas act as something like a su in linux... I hoped this too a while ago the main difference in such situations is that linux (and other unices) sets up shares at the system level whereas windows sets them up at the user level hth -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Usermap not linking accounts
Hello @ll, I have recently installed a RHEL 4 system with the default samba packages : samba-common-3.0.10-1.4E samba-swat-3.0.10-1.4E samba-3.0.10-1.4E samba-client-3.0.10-1.4E Now I have successfully linked this server to our Windows domain. This means that all the windows IDs are known. Now we have our systems setup in away that only people with existing GNULinux accounts can have access to there home folders. This setup is configured and working on several other server RHEL3 and HP-UX11.11 servers. But on the RHEL4 the link to the existing Unix account seems to be broken? Also the GNULinux accounts have been setup by a NIS, in case this would be important. contents of the smb.conf, basic setup actually : [global] workgroup = realm = server string = CLearCase server security = DOMAIN auth methods = winbind obey pam restrictions = Yes password server = username map = /etc/opt/samba/smbusers log level = 3 log file = /var/log/samba/smbd.log max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = No ldap ssl = no idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind separator = / winbind cache time = 10 winbind use default domain = Yes hosts allow = 192.168.1. [homes] comment = Home Directories path = %H read only = No [sharing] comment = File sharing area path = /home/sharing read only = No guest ok = Yes and the layout of the smbusers file is: LinuxAccount = DOMAIN\Windows.Account etc... also tried layout like this LinuxAccount = Windows.Account etc.. but no effect. Does anybody have any more ideas of what could be setup wrongly? Or is this related to a bug in samba? -- Kristof.Bruyninckx We are Microsoft. What you are experiencing is not a problem; it is an undocumented feature. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Why is netbios name duplicated on network after joining a samba domain?
Hi, I have a samba 3 PDC. My domain name is expl.test.com. In smb.conf I set WORKGROUP=EXPL and netbios name=EXPL. I can join a Windows XP client to the samba domain. But after rebooting the client machine to make changes effective, I get the error bellow: Windows system error, A DUPLICATE NAME EXISTS ON THE NETWORK. Also, if I choose to log on to the domain from the client machine (after rebooting it), I get this error message: The system cannot log you on now because the domain EXPL is not available. I changed the machine netbios name but the problem is still there. Would you please have any suggestion? Thanks ___ Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger Téléchargez cette version sur http://fr.messenger.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Linux-Samba-Server
Dear Samba Team, I have got a question concerning your product. We are using an ADS-Domain on Win2k3 servers in our Company. Now we want to join several subdomains to the existing network environment. Therefor I would like to use a Samba-Server on a Linux-System configured as domain-controller for these subdomains. Do you have any expirience concerning this subject? Does the replication between the Windows- an Linux-DCs work? Before starting a big project it would be good to know if this intention is actually possible. Would be very nice if you could help me with that. -- Mit freundlichen Grüssen Martin Walter === PC-System und Netzwerkadministration Martin Walter, A454, SAMSON AG Weismuellerstrasse 3, 60314 Frankfurt Tel.: (+49) 69 40 09 -2093, Fax: (+49) 69 40 09 -1660 EMail: [EMAIL PROTECTED] E-Mail Zentralabteilung: [EMAIL PROTECTED] Homepage: http://www.samson.de === -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] weird problem with smbldap-tools and usrmgr.exe
hi folks, i hope you can help me!!! i'm using samba v3.0.14a (sernet) on debian sarge. openldap v2 is my backend, smbldap-tools 0.8.4 (patched for our organization). when adding a user via usrmgr.exe to an existing domain group i get the following error: [in usrgmr] The following error occured changing the properies of the user xxx User does not belong to this group [in smbd.logs] smbldap-groupmod -m xxx group gave 0 NT_STATUS_MEMBER_NOT_IN_GROUP called ntsamr successfully the user is addedd to the group but the error message disturbs our admins :( thx in advance -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany Phone: 49 (0)341 - 3550 137 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] weird problem with smbldap-tools and usrmgr.exe
I know this problem, i also have this. But not with all the users, only some. You probely also have a unknown user. I have 1 unknow user, on some direcoties this Unknown user appers in the ACL of directories. If i remove this user and apply the rights, this one reappeers. I'm also on Debian Sarge, Ldap, but i use smbldap-tools 0.91, own rebuild to deb. -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Michael Gasch Verzonden: vrijdag 29 juli 2005 10:48 Aan: samba@lists.samba.org Onderwerp: [Samba] weird problem with smbldap-tools and usrmgr.exe hi folks, i hope you can help me!!! i'm using samba v3.0.14a (sernet) on debian sarge. openldap v2 is my backend, smbldap-tools 0.8.4 (patched for our organization). when adding a user via usrmgr.exe to an existing domain group i get the following error: [in usrgmr] The following error occured changing the properies of the user xxx User does not belong to this group [in smbd.logs] smbldap-groupmod -m xxx group gave 0 NT_STATUS_MEMBER_NOT_IN_GROUP called ntsamr successfully the user is addedd to the group but the error message disturbs our admins :( thx in advance -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany Phone: 49 (0)341 - 3550 137 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] smb_proc_readdir_long - ls not showing files
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Paul Warner Sent: 27 July 2005 12:37 To: samba@lists.samba.org Subject: [Samba] smb_proc_readdir_long - ls not showing files Hello, We are getting a baffling problem with a samba mounted drive on Redhat, mounted from a windows box. We cannot always see files in the mounted directory with ls or perl. The directory has 237 files in it. We sometimes see 197 files with ls. Sometimes we see nothing. This can happen from one try to the next (i.e. run ls, see the files, immediately run ls again and see nothing). We have searched the web, and searched the samba lists, but have not found an answer (although we have found postings about the same problem). We have tried adding a new file to the windows directory - then we can see the files! But delete the file in windows and suddenly we cannot see anything in the linux mount. We have found files that can break it as well, i.e., add the file in windows and you suddenly see no files at all in the linux mount. But it is not a specific file, since the same file with a different name will not cause a problem, or if you load the files in a different order the behavior can change as well. The directory contains files with very long names, such as: Bullying and Harassment- Fostering dignity at work and managing complaints.doc We are running Redhat Linux 9, and Redhat Enterprise Linux 3. We have the same problem on both systems, and in fact one of our colleagues observes the same problem on Suse 9.3 (with the 2.6 kernel). The windows box is running Windows 2003 Server. Our samba is version 3.0.14a. dmesg output when we have the problem: smb_proc_readdir_long: name=, result=-2, rcls=1, err=123 samba mount command: mount -t smbfs -o username=user,password=,gid=501,dmask=775,workgroup=internal //windowsserver/doc /mnt/doc This problem has broken an important perl script for us. Hopefully someone on the list can provide the answer, or point us to the place to get the answer. Thanks, Paul Hi again, I posted this email (above) a few days ago, and haven't received a reply. I'm not sure if it went through properly to the list or not, so I'm resending it. If no one really has an idea or an answer - should I post this as a samba bug? Thanks, Paul -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] browsing shares with ads
hi, i have a vanilla redhat 3 i'm trying to integrate into an ads tree. i think i'm pretty much there, but... net ads join worked net ads info works wbinfo -u works wbinfo -a user works smbclient -L localhost -U domain\user doesn't (but smbclient -L localhost does) if i try to browse from xp i can use a local (redhat) user to browse, but not the domain. 192.168.0.134.log gives: [2005/07/26 14:28:00, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username PORTFIELD\stevep is invalid on this system wierdly enough i did have it working for a couple of minutes, but then i did something... i've tried the documentation and google, but have just got bogged down. any pointers or suggestions would be gratefully received. thanks, mike. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] incoherent oplock request/reply
Hello, I'm running a samba 3.0.14a server in production on a fedora core 3 (kernel 2.6.9-1.667smp) with a least 250 clients (XP Pro SP2) (up to 400 sometimes). A few days ago, a problem appeared with a soft that we are using for a long time. (Petit Robert, a french dictionnary). When someone launch the dictionnary, many clients are freezed when they try to access to the start menu (a part of the windows XP menus are stored on the samba server) In the logs, we found : Broken leases in the /var/log/messages : Jul 29 09:44:06 Karma kernel: lease broken - owner pid = 14556 Jul 29 09:44:28 Karma kernel: lease broken - owner pid = 14556 Jul 29 09:46:47 Karma kernel: lease broken - owner pid = 14138 Jul 29 09:47:25 Karma kernel: lease broken - owner pid = 14138 Jul 29 09:47:25 Karma kernel: lease broken - owner pid = 14138 Jul 29 09:48:07 Karma kernel: lease broken - owner pid = 14795 Jul 29 09:48:42 Karma kernel: lease broken - owner pid = 15014 [...] If we look at the first incriminated pid (14556), it's a samba process accessing to the dictionnary. While looking in the samba logs, we can find various clients blocked by this pid : For one workstation it says : -- [2005/07/29 09:43:43, 0] smbd/oplock.c:request_oplock_break(1054) request_oplock_break: no response received to oplock break request to pid 14556 on port 59668 for dev = 6911, inode = 680216880, file_id = 3491 [2005/07/29 09:43:43, 0] smbd/open.c:open_mode_check(743) open_mode_check: exlusive oplock left by process 14556 after break ! For file PC-BIB/PC_BIB.EXE, dev = 6911, inode = 680216880. Deleting it to continue... [2005/07/29 09:43:43, 0] smbd/open.c:open_mode_check(747) open_mode_check: Existent process 14556 left active oplock. [2005/07/29 09:44:28, 0] smbd/oplock.c:process_local_message(420) process_local_message: Received unsolicited break reply - dumping info. [2005/07/29 09:44:28, 0] smbd/oplock.c:process_local_message(435) process_local_message: unsolicited oplock break reply from pid 14748, port 59668, dev = 6911, inode = 680216880, file_id = 3491 For another one, it says : -- [2005/07/29 09:43:21, 0] smbd/oplock.c:request_oplock_break(1054) request_oplock_break: no response received to oplock break request to pid 14556 on port 59668 for dev = 6811, inode = 2801670, file_id = 3503 [2005/07/29 09:43:21, 0] smbd/open.c:open_mode_check(743) open_mode_check: exlusive oplock left by process 14556 after break ! For file Bureautique/WROBERT/CITATION.EXE, dev = 6811, inode = 2801670. Deleting it to continue... [...] [2005/07/29 09:44:28, 0] smbd/oplock.c:process_local_message(420) process_local_message: Received unsolicited break reply - dumping info. [2005/07/29 09:44:28, 0] smbd/oplock.c:process_local_message(435) process_local_message: unsolicited oplock break reply from pid 14978, port 59668, dev = 6811, inode = 2801670, file_id = 3503 The process 14556 is owned by a third user : - [2005/07/29 09:08:17, 1] smbd/service.c:make_connection_snum(642) uc003135 (172.25.11.111) connect to service netlogon initially as user root (uid=0, gid=100) (pid 14556) [2005/07/29 09:08:32, 1] smbd/service.c:make_connection_snum(642) uc003135 (172.25.11.111) connect to service m-tchagaspanian initially as user m-tchagaspanian (uid=553, gid=100) (pid 14556) [...] [2005/07/29 09:42:37, 0] smbd/oplock.c:request_oplock_break(1054) request_oplock_break: no response received to oplock break request to pid 14402 on port 57594 for dev = 6911, inode = 201422791, file_id = 5454 [2005/07/29 09:42:37, 0] smbd/open.c:open_mode_check(743) open_mode_check: exlusive oplock left by process 14402 after break ! For file CDlepetitRobert/PR1Data/PR1.LCK, dev = 6911, inode = 201422791. Deleting it to continue... [2005/07/29 09:42:37, 0] smbd/open.c:open_mode_check(747) open_mode_check: Existent process 14402 left active oplock. [2005/07/29 09:44:06, 0] smbd/oplock.c:oplock_break(874) oplock_break: no break received from client within 30 seconds. oplock_break failed for file (null) (dev = 6811, inode = 2801670, file_id = 3503). [2005/07/29 09:44:28, 0] smbd/oplock.c:process_local_message(420) process_local_message: Received unsolicited break reply - dumping info. [2005/07/29 09:44:28, 0] smbd/oplock.c:process_local_message(435) process_local_message: unsolicited oplock break reply from pid 14556, port 57594, dev = 6911, inode = 201422791, file_id = 5454 The last 2 messages are strange... Doesn't it looks like a bug ? (such messages are appearing in my various tests) Any ideas to solve this problem ? Thanks in advance Pierre Dinh-van PS : sorry for my bad english -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smb_proc_readdir_long - ls not showing files
Paul Warner wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Paul Warner Sent: 27 July 2005 12:37 To: samba@lists.samba.org Subject: [Samba] smb_proc_readdir_long - ls not showing files Hello, We are getting a baffling problem with a samba mounted drive on Redhat, mounted from a windows box. We cannot always see files in the mounted directory with ls or perl. The directory has 237 files in it. We sometimes see 197 files with ls. Sometimes we see nothing. This can happen from one try to the next (i.e. run ls, see the files, immediately run ls again and see nothing). We have searched the web, and searched the samba lists, but have not found an answer (although we have found postings about the same problem). We have tried adding a new file to the windows directory - then we can see the files! But delete the file in windows and suddenly we cannot see anything in the linux mount. We have found files that can break it as well, i.e., add the file in windows and you suddenly see no files at all in the linux mount. But it is not a specific file, since the same file with a different name will not cause a problem, or if you load the files in a different order the behavior can change as well. The directory contains files with very long names, such as: Bullying and Harassment- Fostering dignity at work and managing complaints.doc We are running Redhat Linux 9, and Redhat Enterprise Linux 3. We have the same problem on both systems, and in fact one of our colleagues observes the same problem on Suse 9.3 (with the 2.6 kernel). The windows box is running Windows 2003 Server. Our samba is version 3.0.14a. dmesg output when we have the problem: smb_proc_readdir_long: name=, result=-2, rcls=1, err=123 samba mount command: mount -t smbfs -o username=user,password=,gid=501,dmask=775,workgroup=internal //windowsserver/doc /mnt/doc This problem has broken an important perl script for us. Hopefully someone on the list can provide the answer, or point us to the place to get the answer. Thanks, Paul Hi again, I posted this email (above) a few days ago, and haven't received a reply. I'm not sure if it went through properly to the list or not, so I'm resending it. If no one really has an idea or an answer - should I post this as a samba bug? Thanks, Paul Hi, Reply quoted rom a previous post about smbfs: Oops. This is a General Motors dealership, we do not do Ford warranty work. With that said, smbfs is a Linux kernel driver that is not part of Samba. smbfs has been superceded by cifsfs in the 2.6 kernel. Suggest you update and if you still have trouble contact with the cifsfs developers. You might also check the CIFSFS Home page at: http://us1.samba.org/samba/Linux_CIFS_client.html I don't personally use smbfs mounted drives. But I have this in my archives. Regards, Doug -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Scripts for NT Server Tools Handling
With the add user script and add group script etc. parameters, are these scripts executed before or after Samba actually adds the user to its password backend? I would guess that it is executed before, so that the UNIX user is ready for Samba. However, this is a problem because I'd like to be able to configure further options for the user in tdbsam at creation time (i.e. set their home directory and profile path), and at the time the script is run, the user doesn't exist in Samba so this fails. Can anyone see a way round this - is there a way to have a script take total control over the addition of a user rather than having Samba make the user after the script has run? It would be quite simple to arrange if this was possible - do the UNIX adduser first, then do the pdbedit user -a. Using: Samba 3.0.12 FreeBSD 5.4 tdbsam Backend -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.20rc1 Available for Download
Gerald (Jerry) Carter wrote: This is a release candidate of the 3.0.20 code base and [...] The release notes are available online at: http://www.samba.org/samba/ftp/pre/WHATSNEW-3-0-20rc1.txt http://www.samba.org/samba/ftp/rc/WHATSNEW-3-0-20rc1.txt der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] winbind: idmap = ad togeter with nested groups? + offline solution for notebooks available?
1.Works idmap with ad-plugin (for uid/gid from sfu) also together with nested groups ? 2. Is a offline solution (caching) for notebooks available with idmap = ad ? works backend for this situation? Can anybody send me his [globals] from smb.conf as template? thanks a lot Best regards Steffen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[SOLVED] Re: [Samba] weird problem with smbldap-tools and usrmgr.exe
hi, thank you for your response louis!!! i fixed it by commenting out all print statements when adding/modifying/deleting users/groups nothing will be printed to STDOUT currently when working with usrmgr.exe which seems to be fine greez -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany Phone: 49 (0)341 - 3550 137 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] How to prevent users from deleting users from domain via usrmgr.exe ???
hi, weird thing: i thought when commenting out delete user script and ldap delete dn nobody is able to delete users from the domain. what happens: users are deleted, to be more specific their samba attributes are deleted but not their posix values. i won't let our admins delete users from our domain becaus we have another management to add/delete users to/from a domain. adding does not work already because samba does not find posix account information and add user script is set to blank. i thought of setting delete user script to blank but samba does not care about that and deletes only samba attributes. to be clear: none of the attributes of a user should be removed!!! any help without patching the source? thx -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany Phone: 49 (0)341 - 3550 137 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem to logon after join LDAP/SAMBA domain
Hi all, I'm using SAMBA with LDAP as my PDC but after I join a workstations Windows XP to the domain, I can't authenticate any user with this workstation, It gives the fallowing error when I press ctrl+alt+del and try to logon: The system can't authenticate the user. Check if the user and password is correct then retype them press ok etc. In the server, I can see the workstation in Ldap database, in getent passwd. The users I try to logon works when I authenticate in ftp, ssh and other several services when I use the same workstation as a local machine. I'm using: samba-3.0.14 pam_ldap-178-1 openldap-devel-2.2.17-1 nss_ldap-238-1 smbldap-tools-0.8.8-1 openldap-2.2.17-1 Someone know what is going on? Is there any problem with windows or with me? best regards, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] How to prevent users from deleting users from domain via usrmgr.exe ???
You should use the LDAP access rights to do this. http://www.idealx.org/prj/samba/smbldap-howto.en.html read section 5 and section 11.1.1 good luck -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Michael Gasch Verzonden: vrijdag 29 juli 2005 14:15 Aan: samba@lists.samba.org Onderwerp: [Samba] How to prevent users from deleting users from domain via usrmgr.exe ??? hi, weird thing: i thought when commenting out delete user script and ldap delete dn nobody is able to delete users from the domain. what happens: users are deleted, to be more specific their samba attributes are deleted but not their posix values. i won't let our admins delete users from our domain becaus we have another management to add/delete users to/from a domain. adding does not work already because samba does not find posix account information and add user script is set to blank. i thought of setting delete user script to blank but samba does not care about that and deletes only samba attributes. to be clear: none of the attributes of a user should be removed!!! any help without patching the source? thx -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany Phone: 49 (0)341 - 3550 137 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problem to logon after join LDAP/SAMBA domain
I think you have to do this on the console 1 set the password again for the user. = reset the password 2 smbldap-usermod -J username = enable the user somethimes users are disabled, you can check this with the usrmgr.exe from the nt tools -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Felipe Verzonden: vrijdag 29 juli 2005 14:22 Aan: Samba users-list Onderwerp: [Samba] Problem to logon after join LDAP/SAMBA domain Hi all, I'm using SAMBA with LDAP as my PDC but after I join a workstations Windows XP to the domain, I can't authenticate any user with this workstation, It gives the fallowing error when I press ctrl+alt+del and try to logon: The system can't authenticate the user. Check if the user and password is correct then retype them press ok etc. In the server, I can see the workstation in Ldap database, in getent passwd. The users I try to logon works when I authenticate in ftp, ssh and other several services when I use the same workstation as a local machine. I'm using: samba-3.0.14 pam_ldap-178-1 openldap-devel-2.2.17-1 nss_ldap-238-1 smbldap-tools-0.8.8-1 openldap-2.2.17-1 Someone know what is going on? Is there any problem with windows or with me? best regards, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] No Printer Port
Hi, I am having problems adding printers to Windows. The printers are setup on a Samba 3.0.2a server running on Solaris 9 and using CUPS. When I add the printer to Windows it seems to install OK but no printer port is added. The Comment and Location fields in the Windows printers box are also empty as though it isn't talking to the Samba server. When I look at the Ports page of the printer properties, I can see all the usual LPT and COM ports ( although none are ticked ), but the Add Port, Delete Port and Configure Port are greyed out. This did not used to be the case. We have been working fine since we moved onto our new Sun V250 about a year ago. We have added printers since then and they worked OK. Does anyone have any ideas? Thanks for any help Stuart K Jeffery CONFIDENTIALITY NOTICE The information contained in this e-mail is intended only for the confidential use of the above named recipient. If you are not the intended recipient or person responsible for delivering it to the intended recipient, you have received this communication in error and must not distribute or copy it. Please accept the sender's apologies, notify the sender immediately by return e-mail and delete this communication. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.20rc1 Available for Download
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas Bork wrote: Gerald (Jerry) Carter wrote: This is a release candidate of the 3.0.20 code base and [...] The release notes are available online at: http://www.samba.org/samba/ftp/pre/WHATSNEW-3-0-20rc1.txt http://www.samba.org/samba/ftp/rc/WHATSNEW-3-0-20rc1.txt Doh! My infamous proofreading skilzs strike again. Thanks Tom. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFC6i5UIR7qMdg1EfYRAobDAJsG1fDDp9GBu4TJ00kt59WfcdFgQQCgvUK4 gCPlSh3O2uDU6Hu5O1UBBLg= =+I6Y -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] writing to windows 2003 cifs-mounted share?
Hello world; currently I am running into some strange problem with a setup that incorporates servers running Windows 2003 and Debian GNU stable (samba 3.0.14). Here's the situation: * There's a share on the windows box that the unix machines need to access. This is mounted using CIFS with uid= / oid= options to ensure the desired unix user account is able to access the data in the share. * When I do ls -l across the share, I see that the permissions, same as owner and group information, are the way I want them to. * Anyhow, whenever I try to write to that share as the user that (obviously) owns all the files on it, I just get a permission denied. This is strange. Can anyone point me a way out? TIA and bye, Kris -- Kristian Rink -- Programmierung/Systembetreuung planConnect GmbH * Strehlener Str. 12 - 14 * 01069 Dresden Tel. 0351 4657716 * Fax 0351 4657707 * [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] problems with Windows XP clients becoming local master?
Hi there. First time posting to this but I'm getting desperate so apologies for any netiquette faux pas... I'm running a Suse box with Samba on it, with Windows XP SP2 clients viewing it in a workgroup. Some pc's are having timeouts when attempting to view a network share though. In the logs, sometimes at the same time as the timeouts, this appears: [2005/07/28 13:19:08, 0] nmbd/nmbd_incomingdgrams.c:process_local_master_announce(311) process_local_master_announce: Server PCSTEVE at IP 192.168.0.204 is announcing itself as a local master browser for workgroup WORKGROUP and we think we are master. Forcing election. [2005/07/28 13:19:08, 0] nmbd/nmbd_become_lmb.c:unbecome_local_master_success (149) * Samba name server WORKGROUPSHARE has stopped being a local master browser for workgroup WORKGROUP on subnet 192.168.0.10 * [2005/07/28 13:19:26, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2 (396) * Samba name server WORKGROUPSHARE is now a local master browser for workgroup WORKGROUP on subnet 192.168.0.10 * And thus it carries on until someone else on the network tries to take over. On the net, there are loads of people querying this but mostly either samba v samba conflicts (solved by making one master and one not) or other windows conflicts (solved by raising the os level). The os level of this server is already at 65 when an XP client is apparently at 16. At no point should samba give up (even for a second, as I understand it) it's master browser rights to an XP client. The smb.conf is listed below in part. Can anyone PLEASE shed light on this since this is driving me nuts and users are complaining of slow access to files on the WORKGROUPSHARE samba box's share. Thanks very much Steve smb.conf (in part) follows: [global] workgroup = WORKGROUPSHARE netbios name = WORKGROUPSHARE server string = PAH Network Share interfaces = 127.0.0.1, eth0 bind interfaces only = Yes security = SHARE map to guest = Bad User add machine script = /usr/sbin/useradd -c Machine - d /var/lib/nobody -s /bin/false %m$ domain logons = Yes os level = 65 preferred master = Yes domain master = Yes ldap suffix = dc=pahltd,dc=com printer admin = @ntadmin, root, administrator -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] uid + gid mapping problem
Hi everyone, Ok I can log in locally as a windows user. I can su to a windows user as well. But once I'm there: [EMAIL PROTECTED] ~]# su mluich bash-3.00$ whoami whoami: cannot find username for UID 16777253 bash-3.00$ ls -l total 4 drwxr-xr-x 2 16777253 16777218 4096 Jul 28 16:21 Desktop -rwxr--r-- 1 16777253 167772180 Jul 28 15:31 test.txt Getent passwd returns: mluich:*:16777253:16777218:Mike Luich:/home/mluich:/bin/bash Plus others. The system does not seem to be mapping uid's + gid's correctly. Any idea's? [EMAIL PROTECTED] ~]# ps -ef|grep nscd root 3491 2907 0 13:33 pts/100:00:00 grep nscd Smb.conf: [global] workgroup = dsci server string = Samba Server printcap name = /etc/printcap cups options = raw log file = /var/log/samba/%m.log max log size = 50 socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 dns proxy = no template shell = /bin/bash password server = 192.168.109.1 restrict anonymous = no domain master = no preferred master = no max protocol = NT ldap ssl = No server signing = Auto realm = DSCICORP.COM security = ads idmap uid = 1-5 idmap gid = 1-5 winbind trusted domains only = no template homedir = /home/%U winbind use default domain = yes winbind separator = + nsswitch.conf: passwd: files winbind ldap shadow: files winbind ldap group: files winbind ldap hosts: files dns bootparams: nisplus [NOTFOUND=return] files ethers: files netmasks: files networks: files protocols: files winbind ldap rpc:files services: files winbind ldap netgroup: files winbind ldap publickey: nisplus automount: files winbind ldap aliases:files nisplus pam.d/sshd: auth required pam_stack.so service=system-auth auth sufficient pam_winbind.so auth required pam_nologin.so accountrequired pam_stack.so service=system-auth accountsufficient pam_winbind.so password required pam_stack.so service=system-auth sessionrequired pam_stack.so service=system-auth Michael Luich Unix Admininstrator DSCI corp [EMAIL PROTECTED] cell: 603-475-5799 The mark of an immature man is that he wants to die nobly for a cause, while the mark of the mature man is that he wants to live humbly for one. --W. Stekel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problem to logon after join LDAP/SAMBA domain
Have you tried this register hacks already. /snap cut here. REGEDIT4 ;- ; do not roam the following folders [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] ExcludeProfileDirs=Temporary Internet Files;History;Temp ;- ; force Windows XP Professional clients to accept Samba as a PDC [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] requiresignorseal=dword: signsecurechannel=dword: ;- ; Do not check for user ownership of Roaming Profile Folders [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System] CompatibleRUPSecurity=dword:0001 /snap end. -Oorspronkelijk bericht- Van: Felipe [mailto:[EMAIL PROTECTED] Verzonden: vrijdag 29 juli 2005 15:14 Aan: Louis van Belle Onderwerp: Re: [Samba] Problem to logon after join LDAP/SAMBA domain Thanks Louis, but unfortunately no... it didn't work.. it seems that the Samba isn't getting the user and pass or the windows XP isn't sending in the right way because in the log.workstation file the last line is: 2005/07/29 10:01:39, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535) Doing spnego session setup [2005/07/29 10:01:39, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2005/07/29 10:01:39, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606) Got user=[] domain=[] workstation=[TEC01] len1=1 len2=0 other ideas? 2005/7/29, Louis van Belle [EMAIL PROTECTED]: I think you have to do this on the console 1 set the password again for the user. = reset the password 2 smbldap-usermod -J username = enable the user somethimes users are disabled, you can check this with the usrmgr.exe from the nt tools -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Felipe Verzonden: vrijdag 29 juli 2005 14:22 Aan: Samba users-list Onderwerp: [Samba] Problem to logon after join LDAP/SAMBA domain Hi all, I'm using SAMBA with LDAP as my PDC but after I join a workstations Windows XP to the domain, I can't authenticate any user with this workstation, It gives the fallowing error when I press ctrl+alt+del and try to logon: The system can't authenticate the user. Check if the user and password is correct then retype them press ok etc. In the server, I can see the workstation in Ldap database, in getent passwd. The users I try to logon works when I authenticate in ftp, ssh and other several services when I use the same workstation as a local machine. I'm using: samba-3.0.14 pam_ldap-178-1 openldap-devel-2.2.17-1 nss_ldap-238-1 smbldap-tools-0.8.8-1 openldap-2.2.17-1 Someone know what is going on? Is there any problem with windows or with me? best regards, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Subcribe
-- Marcos Altamirano A. [EMAIL PROTECTED] Este mensaje es confidencial y puede contener informacion privilegiada y protegida por ley. Si Ud. no es el destinatario, debera abtenerse de copiarlo, distribuirlo, divulgarlo o usar la informacion contenida en cualquier forma. Por favor, avise inmediatamente al emisor y borre este mensaje de su sistema. Los mensajes electronicos son susceptibles de ser cambiados, infectados o adulterados sin autorizacion; no asumimos responsabilidad alguna por ninguna clase de cambios o sus consecuencias. Ud. debe estar informado que la Empresa puede hacer un seguimiento de sus mensajes electronicos. This e-mail is confidential and may contain legally privileged information. If you are not the intended recipient, you should not copy, distribute, disclose or use the information it contains in any way. Please e-mail the sender inmediately and delete this message from your system. E-mail are susceptible to corruption, interception and unauthorized amendment; we do not accept liability for any such changes, or their consequences. You should be aware, that the Company may monitor your e-mails. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] problems with Windows XP clients becoming local master?
You can prevent Windows XP clients from trying to become the master browser by changing this registry setting. HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services Browser Parameters MaintainServerList Default value is Auto. Change value to No and reboot machine. daryn [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 07/29/2005 08:36 AM To samba@lists.samba.org cc Subject [Samba] problems with Windows XP clients becoming local master? Hi there. First time posting to this but I'm getting desperate so apologies for any netiquette faux pas... I'm running a Suse box with Samba on it, with Windows XP SP2 clients viewing it in a workgroup. Some pc's are having timeouts when attempting to view a network share though. In the logs, sometimes at the same time as the timeouts, this appears: [2005/07/28 13:19:08, 0] nmbd/nmbd_incomingdgrams.c:process_local_master_announce(311) process_local_master_announce: Server PCSTEVE at IP 192.168.0.204 is announcing itself as a local master browser for workgroup WORKGROUP and we think we are master. Forcing election. [2005/07/28 13:19:08, 0] nmbd/nmbd_become_lmb.c:unbecome_local_master_success (149) * Samba name server WORKGROUPSHARE has stopped being a local master browser for workgroup WORKGROUP on subnet 192.168.0.10 * [2005/07/28 13:19:26, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2 (396) * Samba name server WORKGROUPSHARE is now a local master browser for workgroup WORKGROUP on subnet 192.168.0.10 * And thus it carries on until someone else on the network tries to take over. On the net, there are loads of people querying this but mostly either samba v samba conflicts (solved by making one master and one not) or other windows conflicts (solved by raising the os level). The os level of this server is already at 65 when an XP client is apparently at 16. At no point should samba give up (even for a second, as I understand it) it's master browser rights to an XP client. The smb.conf is listed below in part. Can anyone PLEASE shed light on this since this is driving me nuts and users are complaining of slow access to files on the WORKGROUPSHARE samba box's share. Thanks very much Steve smb.conf (in part) follows: [global] workgroup = WORKGROUPSHARE netbios name = WORKGROUPSHARE server string = PAH Network Share interfaces = 127.0.0.1, eth0 bind interfaces only = Yes security = SHARE map to guest = Bad User add machine script = /usr/sbin/useradd -c Machine - d /var/lib/nobody -s /bin/false %m$ domain logons = Yes os level = 65 preferred master = Yes domain master = Yes ldap suffix = dc=pahltd,dc=com printer admin = @ntadmin, root, administrator -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] problems with Windows XP clients becoming local master?
Or set your samba server to be the master, this is prefered. example.. prefered master = yes Domain Master = Yes os level = 65 -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Vickie L. Kidder Verzonden: vrijdag 29 juli 2005 15:57 Aan: samba@lists.samba.org Onderwerp: Re: [Samba] problems with Windows XP clients becoming local master? You can prevent Windows XP clients from trying to become the master browser by changing this registry setting. HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services Browser Parameters MaintainServerList Default value is Auto. Change value to No and reboot machine. daryn [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 07/29/2005 08:36 AM To samba@lists.samba.org cc Subject [Samba] problems with Windows XP clients becoming local master? Hi there. First time posting to this but I'm getting desperate so apologies for any netiquette faux pas... I'm running a Suse box with Samba on it, with Windows XP SP2 clients viewing it in a workgroup. Some pc's are having timeouts when attempting to view a network share though. In the logs, sometimes at the same time as the timeouts, this appears: [2005/07/28 13:19:08, 0] nmbd/nmbd_incomingdgrams.c:process_local_master_announce(311) process_local_master_announce: Server PCSTEVE at IP 192.168.0.204 is announcing itself as a local master browser for workgroup WORKGROUP and we think we are master. Forcing election. [2005/07/28 13:19:08, 0] nmbd/nmbd_become_lmb.c:unbecome_local_master_success (149) * Samba name server WORKGROUPSHARE has stopped being a local master browser for workgroup WORKGROUP on subnet 192.168.0.10 * [2005/07/28 13:19:26, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2 (396) * Samba name server WORKGROUPSHARE is now a local master browser for workgroup WORKGROUP on subnet 192.168.0.10 * And thus it carries on until someone else on the network tries to take over. On the net, there are loads of people querying this but mostly either samba v samba conflicts (solved by making one master and one not) or other windows conflicts (solved by raising the os level). The os level of this server is already at 65 when an XP client is apparently at 16. At no point should samba give up (even for a second, as I understand it) it's master browser rights to an XP client. The smb.conf is listed below in part. Can anyone PLEASE shed light on this since this is driving me nuts and users are complaining of slow access to files on the WORKGROUPSHARE samba box's share. Thanks very much Steve smb.conf (in part) follows: [global] workgroup = WORKGROUPSHARE netbios name = WORKGROUPSHARE server string = PAH Network Share interfaces = 127.0.0.1, eth0 bind interfaces only = Yes security = SHARE map to guest = Bad User add machine script = /usr/sbin/useradd -c Machine - d /var/lib/nobody -s /bin/false %m$ domain logons = Yes os level = 65 preferred master = Yes domain master = Yes ldap suffix = dc=pahltd,dc=com printer admin = @ntadmin, root, administrator -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] problems with Windows XP clients becoming local master?
On Friday 29 July 2005 09:36 am, daryn wrote: Are these two items: domain logons = Yes domain master = Yes really even valid or useful in security-share mode? There a comment about this in the smb.conf man page: preferred master = Yes Maybe leaving it at the default (auto) is better. Chris -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] problems with Windows XP clients becoming local master?
Sorry for that, if you use only secure share dont set the domain logons and the domain master. next time ill read better ;-) i think my pain killers are working.. u CAN use preferred master = yes though, somebody correct me if im wrong. -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Chris Verzonden: vrijdag 29 juli 2005 16:13 Aan: samba@lists.samba.org Onderwerp: Re: [Samba] problems with Windows XP clients becoming local master? On Friday 29 July 2005 09:36 am, daryn wrote: Are these two items: domain logons = Yes domain master = Yes really even valid or useful in security-share mode? There a comment about this in the smb.conf man page: preferred master = Yes Maybe leaving it at the default (auto) is better. Chris -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] problems with win98 and samba 3
we're using samba 3.0.11 (updated from 2.2.19) after the update, the windows 98 machines all showing only the short filenames on the server. (on other servers there are long filenames still available). can anybody give me an idea? thx in advance kurt smb.conf: == [global] # 2005-01-05 einbau wixp # vfs object = /opt/GData/lib/bdvfs228a.so # log level = 9 log level = 1 log file = /usr/local/samba/var/log.%m server string = PDC (%L) samba %v workgroup = keepalive = 60 guest account = nobody keep alive = 30 os level = 65 security = users encrypt passwords = yes add user script = /usr/sbin/useradd -d /dev/null -g100 -s /bin/false -M %u netbios name = sv01samba printing = lprng printcap name = /etc/printcap load printers = yes socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=33288 SO_RCVBUF=33288 # socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=16644 SO_RCVBUF=16644 # socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=8322 SO_RCVBUF=8322 map to guest = Bad User local master = yes interfaces = *** bind interfaces only = yes hosts allow = *** wins support = no logon script =%G.bat domain logons = yes domain master = yes logon path = \\%N\profiles\%u logon drive = i: logon home = \\%N\ich admin users = root ### ###wixp ###use nameserver instead of... name resolve order = host lmhosts bcast disable spoolss = yes max protocol = LANMAN2 time server = yes ###/wixp ### [netlogon] comment = skripts fuer login browsable = yes path = /usr/smbdata/netlogon writable = yes create mask = 0744 directory mask = 2744 [profiles] csc policy = disable browsable = no # nt acl support = no profile acls = yes path = /usr/smbdata/profiles writable = yes create mask = 0600 directory mask = 0700 [ich] comment = Heimatverzeichnis browseable = no read only = no create mask = 0750 directory mask = 2750 path = /usr/smbdata/daten/kwnet.at/%G/%U [cdrom] comment = Linux CD-ROM path = /cdrom read only = yes locking = no [floppy] comment = Linux CD-ROM path = /floppy read only = no locking = no [printers] printer admin = @edv comment = All Printers browseable = no printable = yes public = yes read only = no create mode = 0666 path = /tmp use client driver = yes lpq command = /usr/bin/lpq -P%p lprm command = /usr/bin/lprm -P%p %j ... == -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba, VPN, and Mac OSX 10.4.2
We're having an odd problem with connecting to Samba shares over a VPN with a Mac client. We have several Mac clients connecting to a Samba 3.0.10-1.fc2 installation. Prior to upgrading them to Tiger, everything worked fine both local and over an IPSec VPN. After upgrading to Tiger, they still work fine when on our LAN. But if they try to connect to a share over the VPN, Finder hangs. The Mac logs the following messages in /var/log/system.log during the hang: Jul 29 09:59:46 brian-daniels-powerbook-g4-15 kernel[0]: bug: ecnt = 32, but m_len = 0 and m_next = 0 (please report) Jul 29 09:59:46 brian-daniels-powerbook-g4-15 kernel[0]: bug: ecnt = 33, but m_len = 0 and m_next = 0 (please report) Jul 29 09:59:46 brian-daniels-powerbook-g4-15 kernel[0]: bug: ecnt = 32, but m_len = 0 and m_next = 0 (please report) Jul 29 09:59:46 brian-daniels-powerbook-g4-15 kernel[0]: bug: ecnt = 33, but m_len = 0 and m_next = 0 (please report) Jul 29 09:59:46 brian-daniels-powerbook-g4-15 kernel[0]: bug: ecnt = 32, but m_len = 0 and m_next = 0 (please report) Jul 29 09:59:46 brian-daniels-powerbook-g4-15 kernel[0]: bug: ecnt = 33, but m_len = 0 and m_next = 0 (please report) Jul 29 09:59:46 brian-daniels-powerbook-g4-15 kernel[0]: bug: ecnt = 32, but m_len = 0 and m_next = 0 (please report) Jul 29 09:59:46 brian-daniels-powerbook-g4-15 kernel[0]: bug: ecnt = 33, but m_len = 0 and m_next = 0 (please report) Jul 29 09:59:46 brian-daniels-powerbook-g4-15 kernel[0]: bug: ecnt = 32, but m_len = 0 and m_next = 0 (please report) Jul 29 09:59:47 brian-daniels-powerbook-g4-15 kernel[0]: t) Jul 29 09:59:47 brian-daniels-powerbook-g4-15 kernel[0]: bug: ecnt = 32, but m_len = 0 and m_next = 0 (please report) It keeps logging these errors until Finder is forced to quit. Interestingly, if the server connected to has only a few files (~30) in the root directory, then the hang does not occur. But if the user then tries to cd to a dir containing more files, the above problem appears. Other actions over the VPN (ssh, VNC, etc) work without problems. I'd appreciate any suggestions. Thanks, Brian -- Brian Daniels -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] winbind gives NT_STATUS_INSUFFICIENT_RESOURCES error after a few hours of running
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We have a samba 3.0.14a server connected via NT4 to an ADS domain, and after a few hours of access, winbind stops autheticating, and gives errors like this: [2005/07/29 09:32:33, 1] nsswitch/winbindd_group.c:fill_grent_mem(133) ~ could not lookup membership for group rid S-1-5-21-1957994488-1409082233-725345543-512 in domain MERCYHOME (error: NT_STATUS_INSUFFICIENT_RESOURCES) [2005/07/29 09:32:33, 1] nsswitch/winbindd_group.c:fill_grent_mem(133) ~ could not lookup membership for group rid S-1-5-21-1957994488-1409082233-725345543-513 in domain MERCYHOME (error: NT_STATUS_INSUFFICIENT_RESOURCES) Restarting smbd and winbindd doesn't help, I have to make it use another domain controller or reboot the domain controller. What can I do to make this not happen? - -tom -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFC6j432dxAfYNwANIRAn0iAJsFtDUpgMcdJoxzoM8BddJY3NXdxgCbBunw 5nkWIXrQT0ibBIMbj/cnXjY= =ri7a -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] problems with Windows XP clients becoming local master?
According the the docs, samba should always win elections with these settings. For whatever reason it sometimes doesn't and loses to a Windows XP machine. local master = yes preferred master = yes domain master = yes os level = 255 Changing the registry setting on the clients solved the problem for us. We never want a Windows XP client to be the master anyway. Chris [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 07/29/2005 09:13 AM To samba@lists.samba.org cc Subject Re: [Samba] problems with Windows XP clients becoming local master? On Friday 29 July 2005 09:36 am, daryn wrote: Are these two items: domain logons = Yes domain master = Yes really even valid or useful in security-share mode? There a comment about this in the smb.conf man page: preferred master = Yes Maybe leaving it at the default (auto) is better. Chris -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] profiles reverting from local to roaming
Hello, I have a shiny new RHES4 box running Samba 3.0.10-1.4E (as included in the Red Hat distribution) which is set up as a domain controller, using openLDAP and the IdealX scripts. User PCs are Windows 2000 and XP. We would like to avoid roaming profiles altogether, so we set logon path = and logon home = (with no argument to the right of the equals sign) in smb.conf. We also went around to user Windows PCs and, from the System control panel, changed profiles from roaming to local. However, when the user logs out and back in, the profile changes back to roaming, with ugly consequences on our WAN. I do have a profiles share defined, and when the user is set for roaming profiles it does work correctly, but I need not to do roaming profiles at all. Thanks, Jonathan Wilson -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba permissions
I am working on my permissions and something does not quite make sense to me. Here is what I have set. /DIR (Unix permissions are 3777) Then in samba I have the following [dir] path = /DIR read only = no valid users @teach @student create mask 3660 directory mask 3770 Then from a windows workstation, I create a new directory inside 'dir', and call it 'teach'. The permissions of 'teach' are 2770. It looks like it should be 3770 to me since the 'directory mask' commands does a bitwise 'AND'. Anyone know why this is? Maybe it is because of the DOS attributes or something. Thanks for any help. -- Scott Mayo Technology Coordinator Bloomfield Schools PH: 573-568-5669 FA: 573-568-4565 Pager: 800-264-2535 X2549 Duct tape is like the force, it has a light side and a dark side and it holds the universe together. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] windows security of files and folders
Hi, i have a samba 3.0.12 PDC (LDAP) with many windows clients. All works correctly but when i show properties (security) of one file or folder many times i see the SID and not the user or group. I can't assign the perms with the windows because i don't see the groups of ldap. My configuration: 1 samba-3 PDC-LDAP (scripts, bats, etc. This scripts mount shares of other samba) In this samba, if i mount a share and click security of a file i see the users but not the groups 1 Samba-3 (other samba, server FS) (shares, data, etc) In this samba, if i mount a share and click security of a file i don't see users and groups) My groupmap: # net groupmap list Domain Computers (S-1-5-21-3984604316-2900431957-2958281145-515) - maquinaspdc Domain Admins (S-1-5-21-3984604316-2900431957-2958281145-512) - domadmin Domain Users (S-1-5-21-3984604316-2900431957-2958281145-513) - domuser PDC configuration: [global] workgroup = LDAP server string = Servidor LDAP netbios name = serverldap os level = 128 time server = Yes unix extensions = Yes encrypt passwords = Yes add user script = /etc/samba/idealx/smbldap-useradd -m %u add machine script = /etc/samba/idealx/smbldap-useradd -w %u add group script = /etc/samba/idealx/smbldap-groupadd -p %g add user to group script = /etc/samba/idealx/smbldap-groupmod -m %u %g delete user from group script = /etc/samba/idealx/smbldap-groupmod -x %u %g set primary group script = /etc/samba/idealx/smbldap-usermod -g %g %u username map = /etc/samba/smbusers map to guest = Bad User security = user include = /etc/samba/dhcp.conf ;LDAP passdb backend = ldapsam:ldap://127.0.0.1; ldap suffix = o=root ldap admin dn = cn=Manager, o=root idmap backend = ldap:ldap://127.0.0.1 ldap idmap suffix = o=root ldap passwd sync = yes idmap uid = 1000-3 idmap gid = 1000-3 hosts allow = 192.168. 192.9.200. 127. localhost remote announce = 192.9.200.146 remote browse sync = 192.9.200.146 local master = yes preferred master = yes domain master = yes domain logons = yes wins support = yes name resolve order = wins hosts lmhosts bcast time server = yes # log level = 10 [netlogon] path = /opt/samba/netlogon guest ok = Yes [...] The other smb configuration (FS server): [global] workgroup = LDAP server string = Servidor FICHEROS netbios name = serversamba os level = 65 unix extensions = Yes encrypt passwords = Yes username map = /etc/samba/smbusers map to guest = Bad User security = user #include = /etc/samba/dhcp.conf ;LDAP passdb backend = ldapsam:ldap://192.168.1.146; ldap suffix = o=root ldap admin dn = cn=Manager, o=root idmap backend = ldap:ldap://192.168.1.146 ldap idmap suffix = o=root ldap passwd sync = yes idmap uid = 1000-3 idmap gid = 1000-3 hosts allow = 192.168. 192.9.200. 127. localhost # remote announce = 192.9.200.146 # remote browse sync = 192.9.200.146 wins support = no wins server = 192.168.1.146 name resolve order = wins hosts lmhosts bcast acl compatibility = Win2k [shares definition] [...] before i had samba-2 in two samba and the users and groups i saw them anyone help me please? thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba, VPN, and Mac OSX 10.4.2
* [EMAIL PROTECTED] [29/07/2005 1028EDT]: We're having an odd problem with connecting to Samba shares over a VPN with a Mac client. [...] Brian Daniels Brian, curious -- which VPN client are you using? I know there were issue w/ Tiger and some versions of Cisco's client. Keith -- SA Valaran Corp GPG: 0xEC705AE9 I put the sh in IT. pgpwaJndoYGZt.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba permissions
* [EMAIL PROTECTED] [29/07/2005 1119EDT]: I am working on my permissions and something does not quite make sense to me. Here is what I have set. /DIR (Unix permissions are 3777) Then in samba I have the following [dir] path = /DIR read only = no valid users @teach @student create mask 3660 directory mask 3770 Then from a windows workstation, I create a new directory inside 'dir', and call it 'teach'. The permissions of 'teach' are 2770. It looks like it should be 3770 to me since the 'directory mask' commands does a bitwise 'AND'. Anyone know why this is? Maybe it is because of the DOS attributes or something. You're right about the bitwise AND. But default mode for a new directory is 0777. Observe: [EMAIL PROTECTED]:~$ cd tmp [EMAIL PROTECTED]:~/tmp$ umask 0 [EMAIL PROTECTED]:~/tmp$ umask [EMAIL PROTECTED]:~/tmp$ file foodir foodir: cannot open (foodir) [EMAIL PROTECTED]:~/tmp$ mkdir foodir [EMAIL PROTECTED]:~/tmp$ ls -ld foodir drwxrwxrwx 2 kw users 4096 Jul 29 11:59 foodir However, your new directory *inherited* the setgid bit (effectively a bitwise OR); this is simply the behavior of setgid bits on directories. From the man page for the stat() system call (section 2): The set GID bit (S_ISGID) has several special uses: For a directory it indicates that BSD semantics is to be used for that directory: files created there inherit their group ID from the directory, not from the effective gid of the creating process, and directories created there will also get the S_ISGID bit set. For a file that does not have the group execution bit (S_IXGRP) set, it indicates mandatory file/record locking. So, for your case: (3770 0777) | 2000 = 2770 It is doing exactly what it should be doing. :) Keith -- SA Valaran Corp GPG: 0xEC705AE9 I put the sh in IT. pgp7T4uJeN89b.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba permissions
* [EMAIL PROTECTED] [29/07/2005 1205EDT]: [...] However, your new directory *inherited* the setgid bit (effectively a bitwise OR); this is simply the behavior of setgid bits on directories. From the man page for the stat() system call (section 2): The set GID bit (S_ISGID) has several special uses: For a directory it indicates that BSD semantics is to be used for that directory: files created there inherit their group ID from the directory, not from the effective gid of the creating process, and directories created there will also get the S_ISGID bit set. For a file that does not have the group execution bit (S_IXGRP) set, it indicates mandatory file/record locking. So, for your case: (3770 0777) | 2000 = 2770 I hate replying to my own mails, but just to clarify it'd make more sense to write the above like so: 0777|2000 = 2777 = new dir mode before 'directory mask' 3770 is applied 27773770 = 2770 = new dir mode after directory mask is applied -- SA Valaran Corp GPG: 0xEC705AE9 I put the sh in IT. pgpwuwJQSGEvn.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba permissions
Keith Warno wrote: * [EMAIL PROTECTED] [29/07/2005 1119EDT]: I am working on my permissions and something does not quite make sense to me. Here is what I have set. /DIR (Unix permissions are 3777) Then in samba I have the following [dir] path = /DIR read only = no valid users @teach @student create mask 3660 directory mask 3770 Then from a windows workstation, I create a new directory inside 'dir', and call it 'teach'. The permissions of 'teach' are 2770. It looks like it should be 3770 to me since the 'directory mask' commands does a bitwise 'AND'. Anyone know why this is? Maybe it is because of the DOS attributes or something. You're right about the bitwise AND. But default mode for a new directory is 0777. Observe: [EMAIL PROTECTED]:~$ cd tmp [EMAIL PROTECTED]:~/tmp$ umask 0 [EMAIL PROTECTED]:~/tmp$ umask [EMAIL PROTECTED]:~/tmp$ file foodir foodir: cannot open (foodir) [EMAIL PROTECTED]:~/tmp$ mkdir foodir [EMAIL PROTECTED]:~/tmp$ ls -ld foodir drwxrwxrwx 2 kw users 4096 Jul 29 11:59 foodir However, your new directory *inherited* the setgid bit (effectively a bitwise OR); this is simply the behavior of setgid bits on directories. From the man page for the stat() system call (section 2): The set GID bit (S_ISGID) has several special uses: For a directory it indicates that BSD semantics is to be used for that directory: files created there inherit their group ID from the directory, not from the effective gid of the creating process, and directories created there will also get the S_ISGID bit set. For a file that does not have the group execution bit (S_IXGRP) set, it indicates mandatory file/record locking. So, for your case: (3770 0777) | 2000 = 2770 It is doing exactly what it should be doing. :) Keith Ok, I guess that makes sense after you explained it. I got it to work by using both the 'directory mask' and the 'force directory mode'. That works but I have no idea why. I also just tried to use the 'force directory mode' which is a bitwise 'OR' to see what I would get and here are the permissions that I end up with in both cases. I cannot figure out where they are coming from. With both 'directory mask = 3770' and 'force directory mode = 3770' I get: drwxrws--T DIR (which would be 3770) If I just use 'force directory mode = 3770', then I get the following permissions: drwxrwsr-t DIR (which would be 3775) Thanks for any help. I am glad that it works in with using both directives, but I just want to understand why. I have been doing a lot of reading, and just when I think that I understand how it should work...it throws me a curve. :) -- Scott Mayo Technology Coordinator Bloomfield Schools PH: 573-568-5669 FA: 573-568-4565 Pager: 800-264-2535 X2549 Duct tape is like the force, it has a light side and a dark side and it holds the universe together. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba, VPN, and Mac OSX 10.4.2
Keith Warno wrote: * [EMAIL PROTECTED] [29/07/2005 1028EDT]: We're having an odd problem with connecting to Samba shares over a VPN with a Mac client. [...] Brian Daniels Brian, curious -- which VPN client are you using? I know there were issue w/ Tiger and some versions of Cisco's client. Keith We have tried both IPSecuritas and VPN Tracker on the client machines. Both have the same errors. A google on that error message suggests that it is being generated in smbfs_smb.c in the Samba code. One thing I forgot to mention - the Mac clients can connect without problems to a WinNT server, VPN or local. Dangit. -- Brian Daniels -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba permissions
Scott Mayo wrote: Keith Warno wrote: * [EMAIL PROTECTED] [29/07/2005 1119EDT]: I am working on my permissions and something does not quite make sense to me. Here is what I have set. /DIR (Unix permissions are 3777) Then in samba I have the following [dir] path = /DIR read only = no valid users @teach @student create mask 3660 directory mask 3770 Then from a windows workstation, I create a new directory inside 'dir', and call it 'teach'. The permissions of 'teach' are 2770. It looks like it should be 3770 to me since the 'directory mask' commands does a bitwise 'AND'. Anyone know why this is? Maybe it is because of the DOS attributes or something. You're right about the bitwise AND. But default mode for a new directory is 0777. Observe: [EMAIL PROTECTED]:~$ cd tmp [EMAIL PROTECTED]:~/tmp$ umask 0 [EMAIL PROTECTED]:~/tmp$ umask [EMAIL PROTECTED]:~/tmp$ file foodir foodir: cannot open (foodir) [EMAIL PROTECTED]:~/tmp$ mkdir foodir [EMAIL PROTECTED]:~/tmp$ ls -ld foodir drwxrwxrwx 2 kw users 4096 Jul 29 11:59 foodir However, your new directory *inherited* the setgid bit (effectively a bitwise OR); this is simply the behavior of setgid bits on directories. From the man page for the stat() system call (section 2): The set GID bit (S_ISGID) has several special uses: For a directory it indicates that BSD semantics is to be used for that directory: files created there inherit their group ID from the directory, not from the effective gid of the creating process, and directories created there will also get the S_ISGID bit set. For a file that does not have the group execution bit (S_IXGRP) set, it indicates mandatory file/record locking. So, for your case: (3770 0777) | 2000 = 2770 It is doing exactly what it should be doing. :) Keith Ok, I guess that makes sense after you explained it. I got it to work by using both the 'directory mask' and the 'force directory mode'. That works but I have no idea why. I also just tried to use the 'force directory mode' which is a bitwise 'OR' to see what I would get and here are the permissions that I end up with in both cases. I cannot figure out where they are coming from. With both 'directory mask = 3770' and 'force directory mode = 3770' I get: drwxrws--T DIR (which would be 3770) If I just use 'force directory mode = 3770', then I get the following permissions: drwxrwsr-t DIR (which would be 3775) Thanks for any help. I am glad that it works in with using both directives, but I just want to understand why. I have been doing a lot of reading, and just when I think that I understand how it should work...it throws me a curve. :) Actually the first one does make sense I guess, but not the 2nd. Here is how I understand it. [(3777 0770) | 3770] | 2000 = 3770 I have no ide where the rx permissions come from in the last example though. -- Scott Mayo Technology Coordinator Bloomfield Schools PH: 573-568-5669 FA: 573-568-4565 Pager: 800-264-2535 X2549 Duct tape is like the force, it has a light side and a dark side and it holds the universe together. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Automatically creating home directories?
Hello to all. I want to use winbind to automatically create email accounts. I've added several linux boxes to our win2k3 AD and working pretty well (more in a new post about this). When I create a new user on the win2k3 box, users can access various shares on the linux boxes, as it should be. I also have a sendmail server sitting in a DMZ. I have to create the email user account on this box separately. I'd like to eliminate this step. I've added 3.0.14a to the email server, and fired up winbind. It works like a charm! But ... I still need to create user home directories so that mail gets deilvered to thier mailboxes. I know there's a samba directive as follows: template homedir = home/%D/%U. Should this create user home directories? If not, is there a way to do this automatically, and if so, how. As always, many thanks. Dimitri -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba permissions
Scott Mayo wrote: Scott Mayo wrote: Keith Warno wrote: * [EMAIL PROTECTED] [29/07/2005 1119EDT]: I am working on my permissions and something does not quite make sense to me. Here is what I have set. /DIR (Unix permissions are 3777) Then in samba I have the following [dir] path = /DIR read only = no valid users @teach @student create mask 3660 directory mask 3770 Then from a windows workstation, I create a new directory inside 'dir', and call it 'teach'. The permissions of 'teach' are 2770. It looks like it should be 3770 to me since the 'directory mask' commands does a bitwise 'AND'. Anyone know why this is? Maybe it is because of the DOS attributes or something. You're right about the bitwise AND. But default mode for a new directory is 0777. Observe: [EMAIL PROTECTED]:~$ cd tmp [EMAIL PROTECTED]:~/tmp$ umask 0 [EMAIL PROTECTED]:~/tmp$ umask [EMAIL PROTECTED]:~/tmp$ file foodir foodir: cannot open (foodir) [EMAIL PROTECTED]:~/tmp$ mkdir foodir [EMAIL PROTECTED]:~/tmp$ ls -ld foodir drwxrwxrwx 2 kw users 4096 Jul 29 11:59 foodir However, your new directory *inherited* the setgid bit (effectively a bitwise OR); this is simply the behavior of setgid bits on directories. From the man page for the stat() system call (section 2): The set GID bit (S_ISGID) has several special uses: For a directory it indicates that BSD semantics is to be used for that directory: files created there inherit their group ID from the directory, not from the effective gid of the creating process, and directories created there will also get the S_ISGID bit set. For a file that does not have the group execution bit (S_IXGRP) set, it indicates mandatory file/record locking. So, for your case: (3770 0777) | 2000 = 2770 It is doing exactly what it should be doing. :) Keith Ok, I guess that makes sense after you explained it. I got it to work by using both the 'directory mask' and the 'force directory mode'. That works but I have no idea why. I also just tried to use the 'force directory mode' which is a bitwise 'OR' to see what I would get and here are the permissions that I end up with in both cases. I cannot figure out where they are coming from. With both 'directory mask = 3770' and 'force directory mode = 3770' I get: drwxrws--T DIR (which would be 3770) If I just use 'force directory mode = 3770', then I get the following permissions: drwxrwsr-t DIR (which would be 3775) Thanks for any help. I am glad that it works in with using both directives, but I just want to understand why. I have been doing a lot of reading, and just when I think that I understand how it should work...it throws me a curve. :) Actually the first one does make sense I guess, but not the 2nd. Here is how I understand it. [(3777 0770) | 3770] | 2000 = 3770 I have no ide where the rx permissions come from in the last example though. Well, I had to reply to my post twice. :) Thanks for the help. I think I see it now. 'directory mask' defaults to 755. That is where the rx came in on my last example. Thanks for the great explanation. -- Scott Mayo Technology Coordinator Bloomfield Schools PH: 573-568-5669 FA: 573-568-4565 Pager: 800-264-2535 X2549 Duct tape is like the force, it has a light side and a dark side and it holds the universe together. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem joining a samba domain
To update my post from yesterday. I went ahead and exported an LDIF and here is what my machine account looks like: dn: uid=vpcpc$,ou=Machines,dc=engr,dc=arizona,dc=edu objectClass: top objectClass: inetOrgPerson objectClass: posixAccount objectClass: organizationalPerson objectClass: person cn: vpcpc$ sn: vpcpc$ uid: vpcpc$ uidNumber: 1007 gidNumber: 515 homeDirectory: /dev/null loginShell: /bin/false description: Computer gecos: Computer creatorsName: cn=sambaagent,ou=profile,dc=engr,dc=arizona,dc=edu modifiersName: cn=sambaagent,ou=profile,dc=engr,dc=arizona,dc=edu createTimestamp: 20050727223420Z modifyTimestamp: 20050727223420Z nsUniqueId: 861f2581-1dd211b2-804df911-84f2b358 So it looks like the idealx script is working, but the samba piece isn't doing its part to complete the account. Does Samba still not recognize accounts that sit in another ou than the regular user accounts (I remember this behavior was by design, but wasn't it changed?)? Thanks, Tony -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Automatically creating home directories?
You can add a pam module to create them but that would require users to login first. I did a quick google and found this which might help you. http://mirrors.techiesabode.com/linuxgazette/101/levkovich.html Michael Luich Unix Admininstrator DSCI corp [EMAIL PROTECTED] cell: 603-475-5799 The mark of an immature man is that he wants to die nobly for a cause, while the mark of the mature man is that he wants to live humbly for one. --W. Stekel -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dimitri Yioulos Sent: Friday, July 29, 2005 12:50 PM To: Samba Subject: [Samba] Automatically creating home directories? Hello to all. I want to use winbind to automatically create email accounts. I've added several linux boxes to our win2k3 AD and working pretty well (more in a new post about this). When I create a new user on the win2k3 box, users can access various shares on the linux boxes, as it should be. I also have a sendmail server sitting in a DMZ. I have to create the email user account on this box separately. I'd like to eliminate this step. I've added 3.0.14a to the email server, and fired up winbind. It works like a charm! But ... I still need to create user home directories so that mail gets deilvered to thier mailboxes. I know there's a samba directive as follows: template homedir = home/%D/%U. Should this create user home directories? If not, is there a way to do this automatically, and if so, how. As always, many thanks. Dimitri -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba, VPN, and Mac OSX 10.4.2
* [EMAIL PROTECTED] [29/07/2005 1242EDT]: We have tried both IPSecuritas and VPN Tracker on the client machines. Both have the same errors. A google on that error message suggests that it is being generated in smbfs_smb.c in the Samba code. At least we know where the problem is probably hiding. I don't have access to Tiger; still running Panther (10.3.9) on my laptop. However I could try to reproduce this error over the weekend. Any other mac users out there? Please chime in. :) One thing I forgot to mention - the Mac clients can connect without problems to a WinNT server, VPN or local. Dangit. :/ -- SA Valaran Corp GPG: 0xEC705AE9 I put the sh in IT. pgp0IYUaO5qk5.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.20rc1 Available for Download
Gerald (Jerry) Carter wrote: This is a release candidate of the 3.0.20 code base and Is this ok?: [2005/07/17 21:32:10, 0] smbd/server.c:main(802) smbd version 3.0.20pre2 started. Copyright Andrew Tridgell and the Samba Team 1992-2004 [2005/07/17 21:32:10, 0] printing/nt_printing.c:upgrade_to_version_5(505) upgrade_to_version_5: normalizing printer keys [...] [2005/07/29 19:24:38, 0] smbd/server.c:main(802) smbd version 3.0.20rc1 started. Copyright Andrew Tridgell and the Samba Team 1992-2004 [2005/07/29 19:24:38, 0] printing/nt_printing.c:upgrade_to_version_4(438) upgrade_to_version_4: upgrading printer security descriptors [2005/07/29 19:24:38, 0] printing/nt_printing.c:upgrade_to_version_5(505) upgrade_to_version_5: normalizing printer keys First samba version was 3.0.20pre2 with http://www.samba.org/~jerry/patches/post-3.0.20pre2/print_upgrade_v1.patch tdb's were upgraded to version 5 Second samba version is 3.0.20rc1. tdb's were upgraded to version 4 and then to 5, but the old version was 5... der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Sessions migration
Hello there, Is there a way I can use my local windows session even if I log on to a samba domain? I maen that after joining the samba domain, I would like to logg on to the same session I used to before joining the domain. Thanks ___ Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger Téléchargez cette version sur http://fr.messenger.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Michael Weiss ist außer Haus.
Ich werde ab 29.07.2005 nicht im Büro sein. Ich kehre zurück am 30.07.2005. Bitte wenden Sie sich mit wichtigen Angelegenheiten an [EMAIL PROTECTED] Danke. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Sessions migration
On Friday 29 Jul 2005 18:48, Bahya NASSR EDDINE wrote: Hello there, Is there a way I can use my local windows session even if I log on to a samba domain? How is Samba setup? Roaming profiles? I maen that after joining the samba domain, I would like to logg on to the same session I used to before joining the domain. You can do all sorts with yout profile, see: http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html Thanks ___ Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger Téléchargez cette version sur http://fr.messenger.yahoo.com -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] My Windows RAS won't authenticate against Samba PDC; do I need radius
We're replacing an NT4 PDC with a samba PDC and after a bit of work everything is working fine except that our VPN server won't authenticate users against the domain. We're using Windows 2003 Server Remote Access Service (RAS) as our VPN server and it was working with our old NT4 PDC. The Windows 2003 Server is otherwise cooperating with the new Samba PDC (I can log in using domain accounts, etc). And for various reasons, we don't wish to change our VPN server at this time. First, I just wanted to make sure that I'm not wasting a lot of time going down a dead end. RAS operates in two general modes for authentication: Windows Authentication, and using a radius server. We had been using Windows Authentication mode. Does anyone know if Windows Authentication in RAS will operate with a Samba PDC (if I can just find the right configuration)? If so, any pointers on the configuration. Or, (as my reading seems to suggest) do I have to install a radius server and have RAS authenticate against that? I'm running Samba 3.0.4 with an LDAP backend on SLES 9. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] smbclient (2.6 kernel): File size limit exceeded
Hi All, In attempting to `dd if=/dev/zero of=/mnt/windows-share)`, the dd stops at 2.0GB with an error that states 'File size limit exceeded'. The share was mounted with `mount -t smbfs //SERVER/share /mnt/windows-share`. The box is a Red Hat Enterprise Linux 4 box running the 2.6.9-11.EL kernel. -- William R. Lorenz [EMAIL PROTECTED] -- http://www.express.org/~wrl/ ; Every revolution was first -- a thought in one man's mind. - Ralph Waldo Emerson -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: smbclient (2.6 kernel): File size limit exceeded
Perhaps I should flush out the question a bit more, ;) Are there any filesize limitations in the smbfs/cifs drivers in 2.6.9? How can I access files 2GB using Samba and remote Windows shares? On Fri, 29 Jul 2005, William R. Lorenz wrote: In attempting to `dd if=/dev/zero of=/mnt/windows-share)`, the dd stops at 2.0GB with an error that states 'File size limit exceeded'. The share was mounted with `mount -t smbfs //SERVER/share /mnt/windows-share`. The box is a Red Hat Enterprise Linux 4 box running the 2.6.9-11.EL kernel. -- William R. Lorenz [EMAIL PROTECTED] -- http://www.express.org/~wrl/ ; Every revolution was first -- a thought in one man's mind. - Ralph Waldo Emerson -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind gives NT_STATUS_INSUFFICIENT_RESOURCES error after a few hours of running
Hi, On Fri, Jul 29, 2005 at 07:33:28AM -0700, Tom Dickson wrote: We have a samba 3.0.14a server connected via NT4 to an ADS domain, and after a few hours of access, winbind stops autheticating, and gives errors like this: [2005/07/29 09:32:33, 1] nsswitch/winbindd_group.c:fill_grent_mem(133) ~ could not lookup membership for group rid S-1-5-21-1957994488-1409082233-725345543-512 in domain MERCYHOME (error: NT_STATUS_INSUFFICIENT_RESOURCES) [2005/07/29 09:32:33, 1] nsswitch/winbindd_group.c:fill_grent_mem(133) ~ could not lookup membership for group rid S-1-5-21-1957994488-1409082233-725345543-513 in domain MERCYHOME (error: NT_STATUS_INSUFFICIENT_RESOURCES) Restarting smbd and winbindd doesn't help, I have to make it use another domain controller or reboot the domain controller. What can I do to make this not happen? What exactly do you mean with connected via NT4 to an ADS domain ? Is this a more complex trusted domain setup? Is MERCYHOME running on NT4 or on Windows 2000/2003 ? This sounds like an effect I've seen somewhere else. Could you, when the error shows up, call net rpc file -S DC_OF_MERCYHOME -U administrator%password and send us the output ? Thanks, Guenther -- Günther DeschnerGPG-ID: 8EE11688 Novell / SUSE LINUX [EMAIL PROTECTED] Samba Team [EMAIL PROTECTED] pgpSmd8papvmF.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind gives NT_STATUS_INSUFFICIENT_RESOURCES error after a few hours of running
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We're using NT4 style authentication (security = domain) against an 2000 ADS server. I'll run that command the next time it happens. - -tom Guenther Deschner wrote: | Hi, | | On Fri, Jul 29, 2005 at 07:33:28AM -0700, Tom Dickson wrote: | |We have a samba 3.0.14a server connected via NT4 to an ADS domain, and after a few |hours of access, winbind stops autheticating, and gives errors like this: | |[2005/07/29 09:32:33, 1] nsswitch/winbindd_group.c:fill_grent_mem(133) |~ could not lookup membership for group rid |S-1-5-21-1957994488-1409082233-725345543-512 in domain MERCYHOME (error: |NT_STATUS_INSUFFICIENT_RESOURCES) |[2005/07/29 09:32:33, 1] nsswitch/winbindd_group.c:fill_grent_mem(133) |~ could not lookup membership for group rid |S-1-5-21-1957994488-1409082233-725345543-513 in domain MERCYHOME (error: |NT_STATUS_INSUFFICIENT_RESOURCES) | |Restarting smbd and winbindd doesn't help, I have to make it use another domain |controller or reboot the domain controller. | |What can I do to make this not happen? | | | What exactly do you mean with connected via NT4 to an ADS domain ? Is | this a more complex trusted domain setup? Is MERCYHOME running on NT4 or | on Windows 2000/2003 ? | | This sounds like an effect I've seen somewhere else. Could you, when the | error shows up, call | | net rpc file -S DC_OF_MERCYHOME -U administrator%password | | and send us the output ? | | Thanks, | Guenther -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFC6qFh2dxAfYNwANIRAie4AKCArt3j/9RYZJc5VeZeauNb2t5wLQCfeKWn MDOeYKObL05cPFLWsZ9tArU= =vmjD -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba-vscan
Hi people, im using Debian Sarge with samba 3.0.14a. Im using tdbsam with 400 users. My specs are: vendor_id : AuthenticAMD cpu family : 6 model : 8 model name : AMD Athlon(tm) XP 2000+ stepping: 1 cpu MHz : 1670.860 cache size : 256 KB fdiv_bug: no hlt_bug : no f00f_bug: no coma_bug: no fpu : yes fpu_exception : yes cpuid level : 1 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 mmx fxsr sse syscall mmxext 3dnowext 3dnow bogomips: 3309.56 total used free sharedbuffers cached Mem:516608 509516 7092 0 96988 337520 -/+ buffers/cache: 75008 441600 Swap: 979956664 979292 My idea is to start using samba-vscan + clamd to check my fileserver. Questions: Anyone using this on a production server? Comments? How much this would impact on my performance? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba-vscan
Guido Lorenzutti wrote: Hi people, im using Debian Sarge with samba 3.0.14a. Im using tdbsam with 400 users. Well, if you run without a gui then it would be tight. With the gui I doubt your users would be at all happy with performance. I run all my samba servers on FBSD without X. I wouldn't try what your doing on FBSD with those limited resources. Recomend: If this thing can run sata drives, do it. Also plan ~ 5mb per smb childso that's 2.0GB Memory. In actuality 1.5 GB should be enough. TMS III My specs are: vendor_id : AuthenticAMD cpu family : 6 model : 8 model name : AMD Athlon(tm) XP 2000+ stepping: 1 cpu MHz : 1670.860 cache size : 256 KB fdiv_bug: no hlt_bug : no f00f_bug: no coma_bug: no fpu : yes fpu_exception : yes cpuid level : 1 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 mmx fxsr sse syscall mmxext 3dnowext 3dnow bogomips: 3309.56 total used free sharedbuffers cached Mem:516608 509516 7092 0 96988 337520 -/+ buffers/cache: 75008 441600 Swap: 979956664 979292 My idea is to start using samba-vscan + clamd to check my fileserver. Questions: Anyone using this on a production server? Comments? How much this would impact on my performance? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NTLMv2 - wrong password with samba? (SOLVED)
On Thu, 2005-07-28 at 10:57 -0400, Tim P wrote: I upgraded as well after seeing your post but it still gives me the same error. Any log files I should be looking at on windows or the samba side. I know the password is correct, I logged into windows with it and didn't fat-finger it. There is clearly some more we need to understand about NTLMv2 in these environments. The plaintext failures don't matter, nor do the 'wrong password' warnings on tests that don't spit out a 'test failed' message. This testsuite has been migrated to Samba4, where the RPC-SAMLOGON smbtorture test tests a few more combinations of this area. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Samba Developer, SuSE Labs, Novell Inc.http://suse.de Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] ADS/Winbind - works for everything except actually authenticating Windows logins!
On Thursday 21 July 2005 12:36 pm, [EMAIL PROTECTED] wrote: I'm having a bizarre problem doing authentication via winbind against a Windows 2003 server. [...etc...] Following up, still having this strange problem. More information - from the Samba box (now running the X86_64 SLES9 3.0.20rc1 rpm's, previously running the 3.0.14a ones) ALL of the wbinfo functions seem to work correctly: wbinfo -n (name) pulls up an SID. wbinfo -t says it's okay. wbinfo -a (user)%(password) succeeds. wbinfo -u gets the username list, etc. getent passwd successfully shows all users (including domain users) and getent group shows the domain groups in the list. getent passwd (name of user that worked fine in 'wbinfo -n') fails - no output at all, including no error messages. Same for getent group (domain group name) and getent group (gid). /var/log/samba/log.winbind shows: [2005/07/29 18:33:53, 1] nsswitch/winbindd.c:main(977) winbindd version 3.0.20rc1-0.1-SUSE started. Copyright The Samba Team 2000-2004 [2005/07/29 18:34:36, 0] nsswitch/winbindd.c:request_len_recv(573) process_loop: Invalid request size received: 1824 [2005/07/29 18:40:54, 0] nsswitch/winbindd.c:request_len_recv(573) process_loop: Invalid request size received: 1824 And, of course, trying to connect to a share from a Windows box, logged into the domain with an authorized user account, it pops up with the enter your name and password box, and the name and password don't work. I'm assuming this is caused by the same problem that's causing getent passwd (user) to fail. Any hints where to go from here? Thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Validating as different users, domain user mapping to local (not happening?)
Thierry ITTY a écrit: maybe if you access a share on a server as user1 and want to access another share on the same server as user2, windows complains that you can't use different credentials at the same time (error 1236 ? I think) --- Yeah, something similar thought this doesn't forbid you to have shares accessed as user1 and runas something as user2 I doesn't seem like it should. the following works : open a session as user1, access a share, run cmd, then net use : you will see your share --- Yes. then runas cmd as user2. what will happen is that from user2's command prompt net use will show an empty list. --- Yes. but you'll be able to access the same or another share from there and net use will show it. Yes. (had to map local account to remote user 'user1'), as local user2 didn't exist on the server. user1 and user2 will access their shares each with their own credentials even on the same server --- Yep -- as soon as I created user2 on the server (:-)). the following doesn't work : open a session as user1, access a share (implicitely as user1), access a share as user2 on the same server (net use /user:...), this pops up the credentials error message --- Haven't tried that scenario, specifically. Where I've seen it is on trying to add sharing permissions on a directory: - Click Menu (right click on my mouse) over a folder to share and choose Sharing and Security. - Select Sharing tab, select Share this folder, then select Permissions. (You can duplicate the problem using the Security tab as well on an NTFS-based directory) - Click Add On my computer, the *default* location to select objects from is my domain name. If you are not part of a domain, I'm not sure if this error will come up. I should note that my file server in my home also functions as the PDC (right now I really only have a 2 computer setup: 1 server (linux based), 1 client (Win XP-Pro)). - Select a username from the domain (or the computer you have open share's to). (in my case, I chose user1 using your above examples). - click OK; Now I see a Popup Dialog that says: *** Enter Network Password: Enter the name and password of an account with permissions for DOMAINNAME. *** I have tried user1 as well as Domain\user1. I get the dual connection error message here: *** The following error occured while using the username (user1) and password you entered: Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed. Disconnect all previous connections to the server or shared resource and try again. *** The only way I've gotten around this is by unsharing (net use [drive|sharename] /d). ... Hm...ok...now RUNAS is working (though not exactly as I'd like...but can probably figure that out by consulting my books)... Seems [EMAIL PROTECTED] doesn't work in simple case -- their example shows: [EMAIL PROTECTED] Maybe it needs the dots in the domain name? As for the \\ syntax...it doesn't want a double slash in front of the domain name and I have to remember to quote the backslash before the user, either double \ or single (not double! *kick self*) quotes around the argument. so the only solution I see is : open your session as user1, runas cmd as user2 (local program, no problem), access the share where bash is on, then run bash from the share - Bash.exe (cygwin toolset) is on the local machine. I can now start bash, but not explorer. When I try to start Explorer, I get no error message and nothing happens (or starts). Even though my remote user is listed as being in the Domain Admins group, trying to run, say the disk defragmenter gives an error about my remote user not having administrative priviledges. Well...guess that's more work to figure out in the future... I hoped this too a while ago the main difference in such situations is that linux (and other unices) sets up shares at the system level whereas windows sets them up at the user level Yes, I can see that if I log in as a different user. Thanks for the things to try...made some progress on this-- just have to figure out what is needed for remote users to have their remote privileges. My original intent was to have my credential information be on the Domain Server (but cached locally), and to have my home directory on the local machine. What I think I ended up with is a local-only account that happens to work with file-sharing because the passwords for the two users on the two boxes are the same. I'd wanted domain based security and know I had security=domain in my smb.conf file, but it appears to have been removed, perhaps by an upgrade in my SuSE version around December of last year. Do you happen to know the default for security when a server is setup to be both a domain master and a domain logon server? Thanks, Linda p.s. -- think I'll take a break;
[Samba] Automated reply from [EMAIL PROTECTED]
Thank you for your email. I will be on leave until August and may not be checking emails regularly. If you need assistance for library or archival matters, please contact Niles Parker at [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] create and manage groups
I have a samba PDC 3.0.14a and is running as a PDC. My domain members are windows 2003. I have several users and several unix groups. I want to create some domain groups and map them to the unix groups. When i check my current groups i get this: net rpc group list Password: System Operators Replicators Guests Power Users Print Operators Administrators Account Operators Backup Operators Users But when i want to add a new group... net rpc group add SysAdmins Password: add group failed: NT_STATUS_ACCESS_DENIED grep root /etc/samba/smb.conf admin users = root Any ideas? Tnxs in advance. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba share file permission problems
Dear all: Is it possible to set Samba share (and the files under the share) from Samba using setfacl? I want to set up a common directory for certain group of people to read, write and execute it (user::rwx group::rwx). I assigned user1 as the owner of all the files under this common directory and here is the thing: when user2(or any other users in the same group) accessed any of the files, she becomes owner of the files and the group permission changes to read only so other people in the group cannot edit the same file. Why is this happening? Is it because it's not a good idea to use setfacl? If so, is there any other tool to do it? Thanks in advance for any help. hc -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] adddriver strange behavior
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 andreas burger wrote: | # /usr/local/samba/bin/rpcclient -c 'getdriver... | | [Windows NT x86] | Printer Driver Info 3: | Version: [3] | Driver Name: [x4500] | Architecture: [Windows NT x86] | Driver Path: [\\xxx\print$\W32X86\3\PSCRIPT5.DLL] | Datafile: [\\xxx\print$\W32X86\3\XR4500DT.PPD] | Configfile: [\\xxx\print$\W32X86\3\PS5UI.DLL] | Helpfile: [\\xxx\print$\W32X86\3\PSCRIPT.HLP] | | Dependentfiles: [\\xxx\print$\W32X86\3\XR4500DT.OPT] | | Monitorname: [] | Defaultdatatype: [RAW] | | *** | | it seems, that the printer works, but i think, that all these | depend files bring some additional possiblities, that are not | given with only one of them installed. How did you install the driver ? From a Windows client? Samba does not modify the driver info structure per say. We take is as the client describes it in the AddPrinterDriver() call. If you installed the driver by some other means, try using a Windows client instead. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFC6qQLIR7qMdg1EfYRAiohAKCZxN4p0OfAJfc1lhIaENf9ukoVowCeKKC3 bRDB440lmSXSj69QPi1zIkk= =rM3H -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Programatically Modifying Users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nigel Rantor wrote: | | - Is there a set of documentation around for the API? | I can't seem to find any on the samba site, the developer | docs talk about the underlying protocols and provide | starting points for that but I can't seem to find | API docs. Nope. no api docs. But what I would suggest is talking to Chris Nichols on the samba-technical mailing list about his libmsrpc work. The better choice here in my opinion would be to use the SAMR rpc functions and talk to smbd directly. you could also be doing us and the Samba community a great service to help this mature. | - Is there an existing set of Java JNI wrappers for | this kind of functionality (I know, I'm reaching now...) Nope. But if you follow the line of thinking above, you might be able to use jCIFS. | - If I just want to access the SAM database functionality | which bits of Samba will i need to link against (of | course, this will be easy to find out from trial-and-error) Our code is not currently easy to pull parts from. but if you choose to follow the passdb API route, then look at the Makefile for linking pdbedit. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFC6qVFIR7qMdg1EfYRAi0vAJ9qNcqWLIpVnJL4AdjIXm3c7YmYKgCcDZzG akPSLYBP+ER6EKn8VvSIE18= =4vLl -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] net join fails but it tells Joined domain
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mauro wrote: | | when i try to join to domain vi anet join command i | got some errors but net joins tells Joined domain. | Could you help me? ... | rpc command function failed! (NT_STATUS_ACCESS_DENIED) | Joined domain mydomain. | return code = 0 Best to look at a level 10 debug log and get a better description of the error. My probably are missing an error check somewhere. I assume that the machine account is not successfully created on the domain controller? cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFC6qXcIR7qMdg1EfYRAsF4AKCKjDysE8H28NzzxRzUvIlz/yPG3QCffzFg +PUMDkRceul0w2PUvh6/qWQ= =THaG -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba ignores supplementary groups for acl
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kent Tong wrote: | [EMAIL PROTECTED]:~$ getfacl /var/Share/ | getfacl: Removing leading '/' from absolute path names | # file: var/Share | # owner: root | # group: root | user::rwx | group::r-x | group:staff:r-x | mask::r-x | other::--- | default:user::rwx | default:group::r-x | default:group:staff:r-x | default:mask::r-x | default:other::--- | | [EMAIL PROTECTED]:~$ id | uid=1(CYBERLAB+kent) gid=1(CYBERLAB+domain users) | groups=50(staff),1 (CYBERLAB+domain users), | 10001(CYBERLAB+staffs) | I believe this problem only happens when used with | winbind (a domain user whose is in a linux group). If I | set security to user and access the share as linux user | kent who is in the staff group (but not primary group), | then it will work. This is actually by design. smbd only uses the Windows group when setting the group list for a domain user. So you cannot mix winbind and unix groups. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFC6qjjIR7qMdg1EfYRAgbPAKCOkMi/VFbQ1Wwn+1Ijk8AdMXqS5wCfQxdy 9Ck0NkIQpGlq/U8mypf3dco= =Z7yc -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can't rename read-only files
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bradley Tate wrote: | G'day, | | We have some software which uses the ability of Windows | to rename read-only files. To me it makes no sense to | allow this, but that's what the developers have done | and what Windows does. Renaming seems to work normally | on Samba 3.0.10 (Centos4) but gives an Access Denied error | when tried on Samba 3.0.13 (Suse9.3). Does anyone | know if this might be an issue with the O/S or with Samba? Might be fixed in 3.0.14a. Should be fixed for sure in 3.0.20rc1. Please test and let me know. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFC6qlGIR7qMdg1EfYRAoElAKDZ0OOrbTg+i906AEyETulINl36BACgl4m9 j0PAeHcze8cIw66LVkefK64= =mp/i -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Duplicate entries in winbindd_idmap.tdb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | We are having problems with numerous duplicate entries in | winbindd_idmap.tdb resulting in the available userid | range set in smb.conf being quickly and repeatedly exhausted. | The duplicate entries all appear to have a WBA_PASSWD key, e.g Set 'winbind enable local accounts = no' in smbn.conf. This parameter and the associated functionality has been removed in the upcoming 3.0.20 release. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFC6qpyIR7qMdg1EfYRAsk8AJ9P3KGZqLfBsnX/XJ/eri4rkT0bTgCgyUr9 gCte+hJ1kkVXrs91MiW1sw0= =ZcQt -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Local groups support
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Carlos Eduardo Pedroza Santiviago wrote: | Hi all, | | Has anyone been able to get local groups support with a | Samba Server through winbindd? Specifically, i am able | to store several SIDs in sambaSIDList, but i | can't get winbind working to retrieve (or expand) its members. | Is Winbindd supposed to work _only_ with NT servers? Local groups are local to winbindd (or should be at least). Works fine for me last I checked. That might have been in 3.0.15pre2 or something. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFC6qv5IR7qMdg1EfYRArd8AKDavVZRLaCZpLPhvBZTgzY/zzDr6gCgz5zX sppOe0nl088/r/hzzwEamnk= =Wdxj -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problems uploading printer drivers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cyrille Bollu wrote: | | Hi Jerry, | | Sorry to contact you directly but we have quite the | same problem here in my company. | | Did you finally succeed in solving this issue? | | Here we have several dozen of printers but a particular | Dell 3000cn won't work (with approximately the same | behaviour). We follow the same procedure as Greg do. Cyrille, Did you see greg's post about the dns cname records? Does that match your situation as well? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFC6q+zIR7qMdg1EfYRAs4ZAKDiCU/PWjJjNGneSkPb9L1ixzl4xwCfako5 UpwIdYu/D121liyHpEQsXFs= =w436 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Can't see files/directories with Last Changed Attribute set
Following on from my missing directories post the other day, I have narrowed the problem down to the following cases. It seems that I can see files or directories where the Last Changed Attribute of a file or directory is Unknown. Where it is set to a valid date, the file simply doesn't appear. It doesn't matter is I'm connecting from Linux or Windows. Any thoughts welcome. Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
svn commit: samba r8845 - in branches/SAMBA_4_0/source/libnet: .
Author: mimir
Date: 2005-07-29 06:42:43 + (Fri, 29 Jul 2005)
New Revision: 8845
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8845
Log:
Removing unnecessary string length calculations. Thanks abartlet
for noticing that.
rafal
Modified:
branches/SAMBA_4_0/source/libnet/userman.c
Changeset:
Modified: branches/SAMBA_4_0/source/libnet/userman.c
===
--- branches/SAMBA_4_0/source/libnet/userman.c 2005-07-29 02:35:48 UTC (rev
8844)
+++ branches/SAMBA_4_0/source/libnet/userman.c 2005-07-29 06:42:43 UTC (rev
8845)
@@ -518,40 +518,30 @@
if (s-change.fields) {
if (s-change.fields USERMOD_FIELD_ACCOUNT_NAME) {
level = 7;
- i-info7.account_name.length =
2*strlen_m(s-change.account_name);
- i-info7.account_name.size =
2*strlen_m(s-change.account_name);
i-info7.account_name.string = s-change.account_name;
s-change.fields ^= USERMOD_FIELD_ACCOUNT_NAME;
} else if (s-change.fields USERMOD_FIELD_FULL_NAME) {
level = 8;
- i-info8.full_name.length =
2*strlen_m(s-change.full_name);
- i-info8.full_name.size =
2*strlen_m(s-change.full_name);
i-info8.full_name.string = s-change.full_name;
s-change.fields ^= USERMOD_FIELD_FULL_NAME;
} else if (s-change.fields USERMOD_FIELD_DESCRIPTION) {
level = 13;
- i-info13.description.length =
2*strlen_m(s-change.description);
- i-info13.description.size =
2*strlen_m(s-change.description);
i-info13.description.string = s-change.description;
s-change.fields ^= USERMOD_FIELD_DESCRIPTION;
} else if (s-change.fields USERMOD_FIELD_LOGON_SCRIPT) {
level = 11;
- i-info11.logon_script.length =
2*strlen_m(s-change.logon_script);
- i-info11.logon_script.size =
2*strlen_m(s-change.logon_script);
i-info11.logon_script.string = s-change.logon_script;
s-change.fields ^= USERMOD_FIELD_LOGON_SCRIPT;
} else if (s-change.fields USERMOD_FIELD_PROFILE_PATH) {
level = 12;
- i-info12.profile_path.length =
2*strlen_m(s-change.profile_path);
- i-info12.profile_path.size =
2*strlen_m(s-change.profile_path);
i-info12.profile_path.string = s-change.profile_path;
s-change.fields ^= USERMOD_FIELD_PROFILE_PATH;
@@ -564,8 +554,8 @@
}
}
- s-setuser.in.level= level;
- s-setuser.in.info = i;
+ s-setuser.in.level = level;
+ s-setuser.in.info = i;
s-req = dcerpc_samr_SetUserInfo_send(s-pipe, c, s-setuser);
svn commit: samba r8846 - in branches/SAMBA_4_0/source/torture/rpc: .
Author: abartlet Date: 2005-07-29 08:48:39 + (Fri, 29 Jul 2005) New Revision: 8846 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8846 Log: Test yet more NTLMv2 combinations. I can't get a few of the session key values right (and these tests are #if 0'ed out), but this expands the testing. Andrew Bartlett Modified: branches/SAMBA_4_0/source/torture/rpc/samlogon.c Changeset: Sorry, the patch is too large (275 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8846
svn commit: lorikeet r385 - in trunk/sangria/src: .
Author: amit Date: 2005-07-29 09:38:56 + (Fri, 29 Jul 2005) New Revision: 385 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=385 Log: different classes put into different files and the new class handling the user accounts added Added: trunk/sangria/src/Accounts.py trunk/sangria/src/Comment.py trunk/sangria/src/FileAndPrintService.py trunk/sangria/src/test.py Removed: trunk/sangria/src/new_make_smb_conf.py Changeset: Sorry, the patch is too large (678 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=385
svn commit: samba r8847 - in branches/SAMBA_4_0/source: include libnet utils/net
Author: abartlet Date: 2005-07-29 10:58:05 + (Fri, 29 Jul 2005) New Revision: 8847 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8847 Log: Rework the Samba4 'net join' code. I'm trying to get this closer to what WinXP does when joining an AD domain, but in the meantime this removes the excess unions, and uses the LSA pipe in same way XP does. Andrew Bartlett Modified: branches/SAMBA_4_0/source/include/structs.h branches/SAMBA_4_0/source/libnet/config.mk branches/SAMBA_4_0/source/libnet/libnet_join.c branches/SAMBA_4_0/source/libnet/libnet_join.h branches/SAMBA_4_0/source/utils/net/net_join.c Changeset: Sorry, the patch is too large (872 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8847
svn commit: samba-web r763 - in trunk: history news/releases
Author: deryck Date: 2005-07-29 14:22:39 + (Fri, 29 Jul 2005) New Revision: 763 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=763 Log: Add news announcement for 3.0.20rc1. Move older announcemnet to history page. Added: trunk/news/releases/3.0.20rc1.html Modified: trunk/history/index.html Changeset: Modified: trunk/history/index.html === --- trunk/history/index.html2005-07-28 23:22:07 UTC (rev 762) +++ trunk/history/index.html2005-07-29 14:22:39 UTC (rev 763) @@ -6,7 +6,7 @@ div class=latest ul - liLatest Release mdash; a href=/samba/index.html#latestSamba 3.0.20pre2/a/li + liLatest Release mdash; a href=/samba/index.html#latestSamba 3.0.20rc1/a/li liCurrent Stable Release mdash; a href=#stableSamba 3.0.14a/a/li !-- Second link will point to #stable on this page when current release is a development release -- /ul @@ -16,6 +16,49 @@ h2Previous Release Announcments/h2 +h4a22 July 2005/a/h4 +p class=headlineSamba 3.0.20pre2 Available for Download/p + +pSamba 3.0.20pre2 is the second preview release of the Samba 3.0.20 +code base (fourth if you count 3.0.15pre1 - 2) and +is provided for testing only. This release is emnot/em intended +for production servers. There has been a substantial amount +of development since the 3.0.14a production release. We would like +to ask the Samba +community for help in testing these changes as we work towards +the next official, production Samba 3.0 release. It is strongly +recommended that you read the +a href=/samba/ftp/pre/WHATSNEW-3-0-20pre2.txtchanges in this +preview release/a to learn about smb.conf changes, new features, +etc... This is the last anticipated preview release before +moving on to the Release Candidate state./p + +pemSo what happened to 3.0.15 trough 3.0.19?/em After some +discussion it was deemed that the amount of changes +going into the next Samba 3.0 release needed something to catch +people's attention. Skipping several releases was chosen as +the best solution with the least overhead. There will be no +3.0.15 - 3.0.19 ever released. The next production release +following 3.0.20 should be 3.0.21. You can also read the +a href=http://marc.theaimsgroup.com/?l=sambam=111721010206997w=2;original +announcement on the samba mailing list/a./p + +pThe a href=/samba/ftp/pre/samba-3.0.20pre2.tar.gzSamba 3.0.20pre2 +source code/a can be downloaded now. The a +href=/samba/ftp/pre/samba-3.0.20pre2.tar.ascGnuPG +signature for the emun/emcompressed tarball/a is also available. +Precompiled packages for Fedora Core 3 are available in the +a href=/samba/ftp/Binary_Packages/Binary_Packages +download area/a. Packages for other platforms will be available +shortly./p + +pSamba 3.0.20pre2 is also available via BitTorrent +(a href=http://torrent.samba.org/samba/ftp/pre/samba-3.0.20pre2.tar.gz.torrent;samba-3.0.20pre2.tar.gz.torrent/a). +Note that when downloading via BitTorrent, you are encouraged +to verify the resulting uncompressed tarball's +a href=/samba/ftp/pre/samba-3.0.20pre2.tar.ascGPG signature/a./p + + h4a21 June 2005/a/h4 p class=headlineSamba 3.0.20pre1 Available for Download/p @@ -239,23 +282,5 @@ a href=/samba/ftp/Binary_Packages/Binary_Packages download area/a./p -h4a21 January 2005/a/h4 -p class=headlineSamba 3.0.11pre2 Available for Download/p -pThis is a preview release of the Samba 3.0.11 code base and -is provided for testing only. This release is *not* intended -for production servers. However, there have been several bug -fixes since 3.0.10 that we feel are important to make available -to the Samba community for wider testing. Please refer to the -a href=/samba/ftp/pre/WHATSNEW-3-0-11pre2.txtRelease Notes/a for -details on specific changes./p - -pThe a href=/samba/ftp/pre/samba-3.0.11pre2.tar.gzSamba 3.0.11pre2 -source code/a can be downloaded now. The a href=/samba/ftp/pre/samba-3.0.11pre2.tar.ascGnuPG -signature for the uncompressed tarball/a is also available. -Precompiled packages for various platforms are available in the -a href=/samba/ftp/Binary_Packages/Binary_Packages -download area/a./p - - !--#include virtual=footer_history.html -- Added: trunk/news/releases/3.0.20rc1.html === --- trunk/news/releases/3.0.20rc1.html 2005-07-28 23:22:07 UTC (rev 762) +++ trunk/news/releases/3.0.20rc1.html 2005-07-29 14:22:39 UTC (rev 763) @@ -0,0 +1,41 @@ +h3a name=3.0.20rc1Samba 3.0.20rc1 Available for Download/a/h3 + +div class=article +pSamba 3.0.20rc1 is the first release candidate of the 3.0.20 code + base and is provided for testing purposes only. While close to + the final stable release, this snapshot is emnot/em intended for + production servers. If all goes well, this could become the final + 3.0.20 release. We would like to ask the Samba +
svn commit: samba r8848 - in trunk/source/rpc_server: .
Author: jra
Date: 2005-07-29 16:24:39 + (Fri, 29 Jul 2005)
New Revision: 8848
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8848
Log:
Fix first eventlog initialization crash. There are others...
Jeremy.
Modified:
trunk/source/rpc_server/srv_eventlog_nt.c
Changeset:
Modified: trunk/source/rpc_server/srv_eventlog_nt.c
===
--- trunk/source/rpc_server/srv_eventlog_nt.c 2005-07-29 10:58:05 UTC (rev
8847)
+++ trunk/source/rpc_server/srv_eventlog_nt.c 2005-07-29 16:24:39 UTC (rev
8848)
@@ -209,8 +209,7 @@
/* for each eventlog that we have, find info related to it and copy to
the new DB */
evtlog_list = lp_eventlog_list();
- while (*evtlog_list)
- {
+ while (evtlog_list *evtlog_list) {
DEBUG(10,(cleanup_eventlog_parameters: Cleaning up
=[%s]\n,*evtlog_list));
safe_strcpy(evtlogname,(*evtlog_list),sizeof(evtlogname)-1);
svn commit: samba r8849 - in trunk/source/rpc_server: .
Author: jra Date: 2005-07-29 16:45:03 + (Fri, 29 Jul 2005) New Revision: 8849 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8849 Log: Fix more eventlog crash bugs. Make this code look like the rest of Samba. Jeremy. Modified: trunk/source/rpc_server/srv_eventlog_nt.c Changeset: Sorry, the patch is too large (1152 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8849
svn commit: samba r8850 - in branches/SOC/SAMBA_4_0: source source/build/m4 source/build/pidl source/build/pidl/Parse source/build/pidl/Parse/Pidl source/build/pidl/Parse/Pidl/Ethereal source/build/pi
Author: brad Date: 2005-07-29 19:07:57 + (Fri, 29 Jul 2005) New Revision: 8850 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8850 Log: Bringing my tree up to date Added: branches/SOC/SAMBA_4_0/source/Makefile branches/SOC/SAMBA_4_0/source/Makefile.in branches/SOC/SAMBA_4_0/source/build/pidl/Makefile.PL branches/SOC/SAMBA_4_0/source/build/pidl/Parse/ branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/ branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Compat.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Dump.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Ethereal/ branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Ethereal/NDR/ branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Ethereal/NDR/Header.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Ethereal/NDR/Parser.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/IDL.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/NDR.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/ODL.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/ branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/COM/ branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/COM/Header.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/COM/Proxy.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/COM/Stub.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/EJS.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/EJSHeader.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/Header.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/NDR/ branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/NDR/Client.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/NDR/Header.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/NDR/Parser.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/NDR/Server.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/SWIG.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Samba/Template.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Test.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Typelist.pm branches/SOC/SAMBA_4_0/source/build/pidl/Parse/Pidl/Util.pm branches/SOC/SAMBA_4_0/source/build/pidl/pidl branches/SOC/SAMBA_4_0/source/build/smb_build/main.pl branches/SOC/SAMBA_4_0/source/build/tests/os2_delete.c branches/SOC/SAMBA_4_0/source/config.cache branches/SOC/SAMBA_4_0/source/config.log branches/SOC/SAMBA_4_0/source/config.mk branches/SOC/SAMBA_4_0/source/config.pm branches/SOC/SAMBA_4_0/source/config.status branches/SOC/SAMBA_4_0/source/configure branches/SOC/SAMBA_4_0/source/dsdb/samdb/ldb_modules/objectguid.c branches/SOC/SAMBA_4_0/source/extra_cflags.txt branches/SOC/SAMBA_4_0/source/heimdal/ branches/SOC/SAMBA_4_0/source/heimdal/kdc/ branches/SOC/SAMBA_4_0/source/heimdal/kdc/524.c branches/SOC/SAMBA_4_0/source/heimdal/kdc/default_config.c branches/SOC/SAMBA_4_0/source/heimdal/kdc/headers.h branches/SOC/SAMBA_4_0/source/heimdal/kdc/kaserver.c branches/SOC/SAMBA_4_0/source/heimdal/kdc/kdc-protos.h branches/SOC/SAMBA_4_0/source/heimdal/kdc/kdc.h branches/SOC/SAMBA_4_0/source/heimdal/kdc/kdc_locl.h branches/SOC/SAMBA_4_0/source/heimdal/kdc/kerberos4.c branches/SOC/SAMBA_4_0/source/heimdal/kdc/kerberos5.c branches/SOC/SAMBA_4_0/source/heimdal/kdc/log.c branches/SOC/SAMBA_4_0/source/heimdal/kdc/misc.c branches/SOC/SAMBA_4_0/source/heimdal/kdc/pkinit.c branches/SOC/SAMBA_4_0/source/heimdal/kdc/process.c branches/SOC/SAMBA_4_0/source/heimdal/kdc/rx.h branches/SOC/SAMBA_4_0/source/heimdal/lib/ branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/ branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/asn1-common.h branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/asn1_err.et branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/asn1_err.h branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/asn1_files branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/der.h branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/der_cmp.c branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/der_copy.c branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/der_free.c branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/der_get.c branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/der_length.c branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/der_locl.h branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/der_put.c branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/gen.c branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/gen_copy.c branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/gen_decode.c branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/gen_encode.c branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/gen_free.c branches/SOC/SAMBA_4_0/source/heimdal/lib/asn1/gen_glue.c
svn commit: samba r8851 - in branches/SOC/SAMBA_4_0/source: include torture/rpc
Author: brad Date: 2005-07-29 22:48:04 + (Fri, 29 Jul 2005) New Revision: 8851 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8851 Log: making dssync.c more ldb-centric, reverted samlogon.c from rev. 8845 to get my branch to compile again. Added: branches/SOC/SAMBA_4_0/source/torture/rpc/samlogon.c Removed: branches/SOC/SAMBA_4_0/source/torture/rpc/samlogon.c Modified: branches/SOC/SAMBA_4_0/source/include/version.h branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c Changeset: Sorry, the patch is too large (3280 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8851
svn commit: samba r8852 - in branches/SAMBA_4_0/source/torture/rpc: .
Author: tridge
Date: 2005-07-29 23:31:44 + (Fri, 29 Jul 2005)
New Revision: 8852
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8852
Log:
fixed the build
andrew, please check
Modified:
branches/SAMBA_4_0/source/torture/rpc/samlogon.c
Changeset:
Modified: branches/SAMBA_4_0/source/torture/rpc/samlogon.c
===
--- branches/SAMBA_4_0/source/torture/rpc/samlogon.c2005-07-29 22:48:04 UTC
(rev 8851)
+++ branches/SAMBA_4_0/source/torture/rpc/samlogon.c2005-07-29 23:31:44 UTC
(rev 8852)
@@ -1146,7 +1146,9 @@
{test_lmv2_no_dom, LMv2 (no domain), False},
{test_ntlmv2_lmv2_broken, NTLMv2 and LMv2, LMv2 broken, False},
{test_ntlmv2_lmv2_broken_no_dom, NTLMv2 and LMv2, LMv2 broken (no
domain), False},
+#if 0
{test_ntlmv2_ntlmv2_broken, NTLMv2 and LMv2, NTLMv2 broken, False},
+#endif
#if 0
{test_ntlmv2_ntlmv2_broken_no_dom, NTLMv2 and LMv2, NTLMv2 broken (no
domain), False},
#endif
svn commit: samba r8853 - in branches/SAMBA_4_0/source/build/m4: .
Author: tridge
Date: 2005-07-29 23:33:11 + (Fri, 29 Jul 2005)
New Revision: 8853
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8853
Log:
fixed path to smb.conf
Jelmer, is this what you intended?
Modified:
branches/SAMBA_4_0/source/build/m4/check_path.m4
Changeset:
Modified: branches/SAMBA_4_0/source/build/m4/check_path.m4
===
--- branches/SAMBA_4_0/source/build/m4/check_path.m42005-07-29 23:31:44 UTC
(rev 8852)
+++ branches/SAMBA_4_0/source/build/m4/check_path.m42005-07-29 23:33:11 UTC
(rev 8853)
@@ -20,7 +20,7 @@
privatedir=\${CONFIGDIR}/private
libdir=\${prefix}/lib/samba
swatdir=\${DATADIR}/samba/swat,
-configdir=\${libdir}
+configdir=\${LIBDIR}
logfilebase=\${localstatedir}
lockdir=\${localstatedir}/locks
piddir=\${localstatedir}/locks
svn commit: samba r8854 - in branches/SAMBA_4_0/source/torture/rpc: .
Author: abartlet
Date: 2005-07-29 23:39:11 + (Fri, 29 Jul 2005)
New Revision: 8854
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8854
Log:
#if 0 out the right things this time. (Sorry about the build breakage)
Use for the no domain case.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/torture/rpc/samlogon.c
Changeset:
Modified: branches/SAMBA_4_0/source/torture/rpc/samlogon.c
===
--- branches/SAMBA_4_0/source/torture/rpc/samlogon.c2005-07-29 23:33:11 UTC
(rev 8853)
+++ branches/SAMBA_4_0/source/torture/rpc/samlogon.c2005-07-29 23:39:11 UTC
(rev 8854)
@@ -722,7 +722,7 @@
case NO_DOMAIN:
/* TODO - test with various domain cases, and without domain */
if (!SMBNTLMv2encrypt(samlogon_state-mem_ctx,
- samlogon_state-account_name, NULL,
+ samlogon_state-account_name, ,
samlogon_state-password,
samlogon_state-chall,
names_blob,
lmv2_response, ntlmv2_response,
@@ -894,17 +894,17 @@
return test_lmv2_ntlmv2_broken(samlogon_state, BREAK_LM, NO_DOMAIN,
error_string);
}
-#if 0
static BOOL test_ntlmv2_ntlmv2_broken(struct samlogon_state *samlogon_state,
char **error_string)
{
return test_lmv2_ntlmv2_broken(samlogon_state, BREAK_NT, UPPER_DOMAIN,
error_string);
}
-#endif
+#if 0
static BOOL test_ntlmv2_ntlmv2_broken_no_dom(struct samlogon_state
*samlogon_state, char **error_string)
{
return test_lmv2_ntlmv2_broken(samlogon_state, BREAK_NT, NO_DOMAIN,
error_string);
}
+#endif
static BOOL test_ntlmv2_both_broken(struct samlogon_state *samlogon_state,
char **error_string)
{
@@ -1146,9 +1146,7 @@
{test_lmv2_no_dom, LMv2 (no domain), False},
{test_ntlmv2_lmv2_broken, NTLMv2 and LMv2, LMv2 broken, False},
{test_ntlmv2_lmv2_broken_no_dom, NTLMv2 and LMv2, LMv2 broken (no
domain), False},
-#if 0
{test_ntlmv2_ntlmv2_broken, NTLMv2 and LMv2, NTLMv2 broken, False},
-#endif
#if 0
{test_ntlmv2_ntlmv2_broken_no_dom, NTLMv2 and LMv2, NTLMv2 broken (no
domain), False},
#endif
Build status as of Sat Jul 30 00:00:02 2005
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2005-07-29 00:00:14.0 + +++ /home/build/master/cache/broken_results.txt 2005-07-30 00:00:16.0 + @@ -1,16 +1,16 @@ -Build status as of Fri Jul 29 00:00:01 2005 +Build status as of Sat Jul 30 00:00:02 2005 Build counts: Tree Total Broken Panic -ccache 35 7 0 -distcc 35 5 0 +ccache 34 6 0 +distcc 34 5 0 lorikeet-heimdal 32 10 0 ppp 20 2 0 -rsync35 3 0 +rsync33 2 0 samba-docs 0 0 0 -samba4 36 12 0 -samba_3_035 5 0 -smb-build31 4 0 -talloc 33 11 0 -tdb 34 16 0 +samba4 36 32 0 +samba_3_034 5 0 +smb-build30 4 0 +talloc 33 12 0 +tdb 33 15 0
svn commit: samba r8855 - in branches/SAMBA_4_0/source/librpc/idl: .
Author: abartlet
Date: 2005-07-30 00:14:48 + (Sat, 30 Jul 2005)
New Revision: 8855
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8855
Log:
Share this enum (describing the SamSync databases) between nbt and netlogon.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/librpc/idl/misc.idl
branches/SAMBA_4_0/source/librpc/idl/nbt.idl
branches/SAMBA_4_0/source/librpc/idl/netlogon.idl
Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/misc.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/misc.idl 2005-07-29 23:39:11 UTC
(rev 8854)
+++ branches/SAMBA_4_0/source/librpc/idl/misc.idl 2005-07-30 00:14:48 UTC
(rev 8855)
@@ -31,4 +31,13 @@
SEC_CHAN_DOMAIN = 4,
SEC_CHAN_BDC = 6
} netr_SchannelType;
+
+ /* SAM database types */
+ typedef [public,v1_enum] enum {
+ SAM_DATABASE_DOMAIN = 0, /* Domain users and groups */
+ SAM_DATABASE_BUILTIN = 1, /* BUILTIN users and groups */
+ SAM_DATABASE_PRIVS = 2 /* Privileges */
+ } netr_SamDatabaseID;
+
+
}
Modified: branches/SAMBA_4_0/source/librpc/idl/nbt.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/nbt.idl2005-07-29 23:39:11 UTC
(rev 8854)
+++ branches/SAMBA_4_0/source/librpc/idl/nbt.idl2005-07-30 00:14:48 UTC
(rev 8855)
@@ -405,11 +405,13 @@
uint16 lm20_token;
} nbt_netlogon_response_from_pdc2;
+ declare enum netr_SamDatabaseID;
+
/* announce change to UAS or SAM */
typedef struct {
- uint32 db_index;
- hyperserial;
- NTTIME timestamp;
+ netr_SamDatabaseID db_index;
+ hyperserial;
+ NTTIME timestamp;
} nbt_db_change;
/* used to announce SAM changes */
Modified: branches/SAMBA_4_0/source/librpc/idl/netlogon.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/netlogon.idl 2005-07-29 23:39:11 UTC
(rev 8854)
+++ branches/SAMBA_4_0/source/librpc/idl/netlogon.idl 2005-07-30 00:14:48 UTC
(rev 8855)
@@ -291,12 +291,7 @@
/*/
/* Function 0x07 */
- /* SAM database types */
- typedef [v1_enum] enum {
- SAM_DATABASE_DOMAIN = 0, /* Domain users and groups */
- SAM_DATABASE_BUILTIN = 1, /* BUILTIN users and groups */
- SAM_DATABASE_PRIVS = 2 /* Privileges */
- } netr_SamDatabaseID;
+ declare enum netr_SamDatabaseID;
typedef struct {
unistr *account_name;
svn commit: samba r8856 - in branches/SOC/SAMBA_4_0/source/torture/rpc: .
Author: brad
Date: 2005-07-30 01:20:33 + (Sat, 30 Jul 2005)
New Revision: 8856
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8856
Log:
I think I have the ldb code down in test_CompleteJoin (not complete yet though)
Modified:
branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c
Changeset:
Modified: branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c
===
--- branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c 2005-07-30 00:14:48 UTC
(rev 8855)
+++ branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c 2005-07-30 01:20:33 UTC
(rev 8856)
@@ -321,12 +321,8 @@
static BOOL test_CompleteJoin(struct DsSyncTest *ctx)
{
NTSTATUS status;
- //const char *ldif;
- // * struct ldap_message *req, *rep;
BOOL ret = True;
int rtn;
- //struct ldb_message *ldb_msg;
- //struct ldb_ldif *ldb_req;
rtn = ldb_connect(ctx-ldb_ctx,ctx-ldap_url,0,NULL);
if (rtn != 0) {
@@ -346,33 +342,23 @@
// userAccountControl: %u\n,
// ctx-new_dc.dc_info2.computer_dn,
// UF_SERVER_TRUST_ACCOUNT|UF_TRUSTED_FOR_DELEGATION);
- //printf(dn: %s.\n,ctx-new_dc.dc_info2.computer_dn);
- //ldb_req = ldb_ldif_read_string(ldb_ctx,ldif);
- // * req = ldap_ldif2msg(ctx, ldif);
- // * req-type = LDAP_TAG_ModifyRequest;
- // * req-r.ModifyRequest.dn = ctx-new_dc.dc_info2.computer_dn;
- // * req-r.ModifyRequest.num_mods = 1;
- // * req-r.ModifyRequest.mods-type = LDAP_MODIFY_REPLACE;
- // * req-r.ModifyRequest.mods-attrib.flags = LDB_FLAG_MOD_REPLACE;
- // * req-r.ModifyRequest.mods-attrib.name = userAccountControl;
- // * req-r.ModifyRequest.mods-attrib.num_values = 1;
- // * req-r.ModifyRequest.mods-attrib.values-data =
UF_SERVER_TRUST_ACCOUNT|UF_TRUSTED_FOR_DELEGATION;
- // * req-r.ModifyRequest.mods-attrib.values-length =
sizeof(req-r.ModifyRequest.mods-attrib.values-data);
// = UF_SERVER_TRUST_ACCOUNT|UF_TRUSTED_FOR_DELEGATION;
+
+ ctx-ldb_msg = ldb_msg_new(ctx);
+
ldb_msg_add_fmt(ctx-ldb_ctx,ctx-ldb_msg,userAccountControl,%u,UF_SERVER_TRUST_ACCOUNT|UF_TRUSTED_FOR_DELEGATION);
ctx-ldb_msg-dn = ctx-new_dc.dc_info2.computer_dn;
- ctx-ldb_msg-num_elements = 1;
ctx-ldb_msg-elements-flags = LDB_FLAG_MOD_REPLACE;
- ctx-ldb_msg-elements-name = userAccountControl;
- ctx-ldb_msg-elements-num_values = 1;
- ctx-ldb_msg-elements-values-data =
UF_SERVER_TRUST_ACCOUNT|UF_TRUSTED_FOR_DELEGATION;
-
+
rtn = ldb_modify(ctx-ldb_ctx,ctx-ldb_msg);
if (rtn != 0) {
printf(test_CompleteJoin() ldb_modify() failed: %s.\n,
ldb_errstring(ctx-ldb_ctx));
return False;
}
+ printf(ldb_modify() succeeded.\n);
+ ldb_msg_free(ctx-ldb_ctx,ctx-ldb_msg);
+
// * rtn = ldap_transaction(ctx-admin.ldap.conn, req);
/* add entry CN=NETBIOSNAME,CN=Servers
@@ -392,7 +378,9 @@
ctx-new_dc.dc_info2.computer_dn);
ldb_req = ldb_ldif_read_string(ldb_ctx,ldif);
*/
+
printf(dn: %s\nserverReference:
%s.\n,ctx-new_dc.dc_info2.server_dn,ctx-new_dc.dc_info2.computer_dn);
+
// * req = ldap_ldif2msg(ctx, ldif);
// * req-type = LDAP_TAG_AddRequest;
// * req.r.AddRequest.dn = ctx-new_dc.dc_info2.server_dn;
@@ -412,15 +400,22 @@
// * req.r.AddRequest.attributes.name = 'serverReference';
// * req.r.AddRequest.attributes.num_values = 1;
// * req.r.AddRequest.attributes.values = ctx-new_dc.dc_info2.computer_dn;
- printf(test\n);
+
//rtn = ldb_modify(ldb_ctx,ldb_req-msg);
+ ctx-ldb_msg = ldb_msg_new(ctx);
+ ldb_msg_add_string(ctx-ldb_ctx,ctx-ldb_msg,objectClass,server);
+ ldb_msg_add_string(ctx-ldb_ctx,ctx-ldb_msg,systemFlags,5000);
+
ldb_msg_add_string(ctx-ldb_ctx,ctx-ldb_msg,serverReference,ctx-new_dc.dc_info2.computer_dn);
+ ctx-ldb_msg-dn = ctx-new_dc.dc_info2.server_dn;
+ ctx-ldb_msg-elements-flags = LDB_FLAG_MOD_REPLACE;
+
rtn = ldb_add(ctx-ldb_ctx,ctx-ldb_msg);
if (rtn != 0) {
printf(test_CompleteJoin(): ldb_add() failed: %s.\n,
ldb_errstring(ctx-ldb_ctx));
return False;
}
- printf(test2\n);
+ printf(ldb_add() succeeded.\n);
// rtn = ldap_transaction(ctx-admin.ldap.conn, req);
/* add entry CN=NTDS Settings
@@ -805,11 +800,13 @@
mem_ctx = talloc_init(torture_rpc_dssync);
ctx = test_create_context(mem_ctx);
+ ctx-ldb_ctx = ldb_init(mem_ctx);
+ //ctx-ldb_msg = talloc_init(ldb_message);
// url = talloc_asprintf(mem_ctx, ldap://%s/,host);
// ldb method
- ctx-ldb_ctx = ldb_init(mem_ctx);
+
//printf(ctx-ldap_url: %s.\n,ctx-ldap_url);
rtn =
Re: svn commit: samba r8856 - in branches/SOC/SAMBA_4_0/source/torture/rpc: .
On Sat, 30 Jul 2005 [EMAIL PROTECTED] wrote: Author: brad Date: 2005-07-30 01:20:33 + (Sat, 30 Jul 2005) New Revision: 8856 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8856 Log: I think I have the ldb code down in test_CompleteJoin (not complete yet though) Modified: @@ -346,33 +342,23 @@ // userAccountControl: %u\n, // ctx-new_dc.dc_info2.computer_dn, Hmmm, I thought we preferred to avoid C++ style comments in our C code? Regards - Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com
svn commit: samba r8857 - in branches/SAMBA_4_0/source/setup: .
Author: tridge Date: 2005-07-30 02:02:52 + (Sat, 30 Jul 2005) New Revision: 8857 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8857 Log: please don't get fancy with embedded boolean statements in js code. Especially as this is a new language for most Samba developers, it is far better to err strongly on the side of readability rather than trying to save a line of code by using fancy tricks Modified: branches/SAMBA_4_0/source/setup/provision Changeset: Modified: branches/SAMBA_4_0/source/setup/provision === --- branches/SAMBA_4_0/source/setup/provision 2005-07-30 01:20:33 UTC (rev 8856) +++ branches/SAMBA_4_0/source/setup/provision 2005-07-30 02:02:52 UTC (rev 8857) @@ -106,8 +106,10 @@ subobj[key] = options[r]; } +var blank = (options[blank] != undefined); + message(Provisioning for %s in realm %s\n, subobj.DOMAIN, subobj.REALM); message(Using administrator password: %s\n, subobj.ADMINPASS); -provision(subobj, message, options[blank] != undefined); +provision(subobj, message, blank); message(All OK\n); return 0;
svn commit: smb-build r16 - in trunk/testprog: .
Author: tridge
Date: 2005-07-30 03:30:01 + (Sat, 30 Jul 2005)
New Revision: 16
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=smb-buildrev=16
Log:
deliberately break the build to test the new build breakage emails
Modified:
trunk/testprog/testprog.c
Changeset:
Modified: trunk/testprog/testprog.c
===
--- trunk/testprog/testprog.c 2005-07-13 09:29:14 UTC (rev 15)
+++ trunk/testprog/testprog.c 2005-07-30 03:30:01 UTC (rev 16)
@@ -4,6 +4,8 @@
#error the build hacks don't work
#endif
+#error the build is now broken
+
int main(int argc,char *argv[])
{
printf(I'm a happy test program\n);
svn commit: smb-build r17 - in trunk/testprog: .
Author: tridge
Date: 2005-07-30 03:43:32 + (Sat, 30 Jul 2005)
New Revision: 17
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=smb-buildrev=17
Log:
and fix it again ...
Modified:
trunk/testprog/testprog.c
Changeset:
Modified: trunk/testprog/testprog.c
===
--- trunk/testprog/testprog.c 2005-07-30 03:30:01 UTC (rev 16)
+++ trunk/testprog/testprog.c 2005-07-30 03:43:32 UTC (rev 17)
@@ -4,8 +4,6 @@
#error the build hacks don't work
#endif
-#error the build is now broken
-
int main(int argc,char *argv[])
{
printf(I'm a happy test program\n);
svn commit: samba r8858 - in branches/SAMBA_4_0/source/torture: .
Author: tridge Date: 2005-07-30 03:47:59 + (Sat, 30 Jul 2005) New Revision: 8858 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8858 Log: just to make sure it works on the main trees, deliberately break the samba4 build I expect to get a flood of nastygrams from [EMAIL PROTECTED] for this Modified: branches/SAMBA_4_0/source/torture/torture.c Changeset: Modified: branches/SAMBA_4_0/source/torture/torture.c === --- branches/SAMBA_4_0/source/torture/torture.c 2005-07-30 02:02:52 UTC (rev 8857) +++ branches/SAMBA_4_0/source/torture/torture.c 2005-07-30 03:47:59 UTC (rev 8858) @@ -1,3 +1,5 @@ +#error remove this line to fix the build + /* Unix SMB/CIFS implementation. SMB torture tester
svn commit: samba r8859 - in branches/SAMBA_4_0/source/torture: .
Author: tridge Date: 2005-07-30 03:59:17 + (Sat, 30 Jul 2005) New Revision: 8859 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8859 Log: having been successfully mailbombed by [EMAIL PROTECTED], fix the build again Modified: branches/SAMBA_4_0/source/torture/torture.c Changeset: Modified: branches/SAMBA_4_0/source/torture/torture.c === --- branches/SAMBA_4_0/source/torture/torture.c 2005-07-30 03:47:59 UTC (rev 8858) +++ branches/SAMBA_4_0/source/torture/torture.c 2005-07-30 03:59:17 UTC (rev 8859) @@ -1,5 +1,3 @@ -#error remove this line to fix the build - /* Unix SMB/CIFS implementation. SMB torture tester
svn commit: samba r8860 - in branches/SOC/SAMBA_4_0/source/torture/rpc: .
Author: brad
Date: 2005-07-30 05:08:13 + (Sat, 30 Jul 2005)
New Revision: 8860
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=8860
Log:
Changed comments to C style /**/ (thanks Richard), some more changes to
test_CompleteJoin().
Modified:
branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c
Changeset:
Modified: branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c
===
--- branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c 2005-07-30 03:59:17 UTC
(rev 8859)
+++ branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c 2005-07-30 05:08:13 UTC
(rev 8860)
@@ -151,13 +151,14 @@
ldb_errstring(ctx-ldb_ctx));
return;
}
- // * req = ldap_ldif2msg(ctx, ldif);
- // * req.messageid = ;
- //req-type = LDAP_TAG_DelRequest;
- //req-r.DelRequest.dn = ctx-new_dc.dc_info2.ntds_dn;
- // * req.num_controls = ;
- // * req.controls = ;
- //rtn = ldap_transaction(ctx-admin.ldap.conn, req);
+ /* req = ldap_ldif2msg(ctx, ldif);
+req.messageid = ;
+req-type = LDAP_TAG_DelRequest;
+req-r.DelRequest.dn = ctx-new_dc.dc_info2.ntds_dn;
+req.num_controls = ;
+req.controls = ;
+ rtn = ldap_transaction(ctx-admin.ldap.conn, req);
+ */
}
{
@@ -177,10 +178,12 @@
ldb_errstring(ctx-ldb_ctx));
return;
}
- //req = ldap_ldif2msg(ctx, ldif);
- //req-type = LDAP_TAG_DelRequest;
- //req-r.DelRequest.dn = ctx-new_dc.dc_info2.ntds_dn;
- //rtn = ldap_transaction(ctx-admin.ldap.conn, req);
+ /*
+ req = ldap_ldif2msg(ctx, ldif);
+ req-type = LDAP_TAG_DelRequest;
+ req-r.DelRequest.dn = ctx-new_dc.dc_info2.ntds_dn;
+ rtn = ldap_transaction(ctx-admin.ldap.conn, req);
+ */
}
if (ctx-new_dc.join) {
@@ -306,7 +309,7 @@
ctx-schema_dn = talloc_asprintf(ctx, CN=Schema,%s, ctx-config_dn);
ctx-new_dc.dc_info2.server_dn = talloc_asprintf(ctx,
-//
CN=%s,CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,%s,
+/*
CN=%s,CN=Servers,CN=Standardname-des-ersten-Standorts,CN=Sites,CN=Configuration,%s,
*/
CN=%s,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,%s,
TEST_MACHINE_NAME, ctx-domain_dn);
@@ -333,17 +336,16 @@
printf(test_CompleteJoin(): Connected to %s.\n,ctx-ldap_url);
/* userAccountControl: 532480 0x82000
-* UF_SERVER_TRUST_ACCOUNT|UF_TRUSTED_FOR_DELEGATION
-*/
- //ldif = talloc_asprintf(ctx,
- // dn: %s\n
- // changetype: modify\n
- // replace: userAccountControl\n
- // userAccountControl: %u\n,
- // ctx-new_dc.dc_info2.computer_dn,
- // UF_SERVER_TRUST_ACCOUNT|UF_TRUSTED_FOR_DELEGATION);
-
-// = UF_SERVER_TRUST_ACCOUNT|UF_TRUSTED_FOR_DELEGATION;
+* UF_SERVER_TRUST_ACCOUNT|UF_TRUSTED_FOR_DELEGATION
+ ldif = talloc_asprintf(ctx,
+ dn: %s\n
+ changetype: modify\n
+ replace: userAccountControl\n
+ userAccountControl: %u\n,
+ ctx-new_dc.dc_info2.computer_dn,
+ UF_SERVER_TRUST_ACCOUNT|UF_TRUSTED_FOR_DELEGATION);
+ */
+/* = UF_SERVER_TRUST_ACCOUNT|UF_TRUSTED_FOR_DELEGATION;*/
ctx-ldb_msg = ldb_msg_new(ctx);
ldb_msg_add_fmt(ctx-ldb_ctx,ctx-ldb_msg,userAccountControl,%u,UF_SERVER_TRUST_ACCOUNT|UF_TRUSTED_FOR_DELEGATION);
@@ -359,7 +361,7 @@
printf(ldb_modify() succeeded.\n);
ldb_msg_free(ctx-ldb_ctx,ctx-ldb_msg);
- // * rtn = ldap_transaction(ctx-admin.ldap.conn, req);
+ /* rtn = ldap_transaction(ctx-admin.ldap.conn, req); */
/* add entry CN=NETBIOSNAME,CN=Servers
* objectClass: server
@@ -381,27 +383,6 @@
printf(dn: %s\nserverReference:
%s.\n,ctx-new_dc.dc_info2.server_dn,ctx-new_dc.dc_info2.computer_dn);
-// * req = ldap_ldif2msg(ctx, ldif);
-// * req-type = LDAP_TAG_AddRequest;
-// * req.r.AddRequest.dn = ctx-new_dc.dc_info2.server_dn;
-// * req.r.AddRequest.num_attributes = 3;
-
-// * req.r.AddRequest.attributes.flags = LDB_FLAG_MOD_ADD;
-// * req.r.AddRequest.attributes.name = 'objectClass';
-// * req.r.AddRequest.attributes.num_values = 1;
-// * req.r.AddRequest.attributes.values = 'server';
-
-// * req.r.AddRequest.attributes.flags = LDB_FLAG_MOD_ADD;
-// * req.r.AddRequest.attributes.name = 'systemFlags';
-// * req.r.AddRequest.attributes.num_values = 1;
-// *
