Re: [Samba] Domain Admins can't modify ldapsam entries

2005-10-19 Thread Michael Gasch

hi,

well if i do enable privileges = no and admin users = @myadmins this 
works intentionally. but jerry is right: there should be no use of uid=0 
anymore.


greez



Günter Gersdorf wrote:

Domain Admins are not allowed to modify the ldapsam database via usrmgr.
  lib/smbldap.c: smbldap_open: cannot access LDAP when not root..

Is this by design?

Günter Gersdorf



--
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


AW: [Samba] Samba creating multiple isntances of the deamon

2005-10-19 Thread Elmar Bihler
   Jerry, I'm sorry I still could not provide you with the traces you asked
for, but in the meantime we have not had any fatal crash.
   The one thing that changed on our network since the weekend is that we
shutdown an old DNS server on a different machine which held partially
incorrect data (but which was only our tertiary DNS server and so perhaps
was not used for lookups anyway). We still experience the unexplainable
hangs correlated with smbd processes not listed by smbstatus building up to
some point, but after a minute or so the processes vanish again and
everything seems fine).
   Bennoit, could you perhaps give Jerry the information he was asking for?
Also perhaps you would like to check your DNS servers for incorrect entries.

CU,
Elmar.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: samba-3.0.10-1.4E (RHEL4): logon failures with 2003 server pdc

2005-10-19 Thread Sanjay Upadhyay
So just add OTHERNAME entry to the DNS and check reverse resolution is
also configured properly in your DNS.

regards

On 10/19/05, Ville Herva [EMAIL PROTECTED] wrote:
 On Wed, Oct 19, 2005 at 09:54:36AM +0530, you [Sanjay Upadhyay] wrote:
  Check the DNS entries.. in case the AD is configured with the DNS,
  enter the correct entries for the linux boxes and check...

 The AD uses linux servers for DNS, and I can't find anything strange in the
 DNS records. The SAMBASERVER.my.dom entry points to the correct ip but the
 OTHERNAME netbios alias doesn't exist in the DNS. Weird.



 -- v --

 [EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Phantom competing domain master browser

2005-10-19 Thread David Maier

Snip

Craig White wrote:


try shutting down samba and deleting wins.dat file and then start samba
again and see if that helps

Craig


That's done it!  Thanks Craig, and Joe, for your help.

Dave

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Add samba to a Win2003 AD

2005-10-19 Thread Lars
Hi

I trying to add a samba fileserver (v3@ Debian Sarge) to Windows 2003
domain. I've followed a couple of HowTo's including the officiel one, but
i'm having trouble even with the basic connection.
kinit [EMAIL PROTECTED]
kinit(v5): Cannot resolv network address for KDC in requested realm while
getting initial credentials.

The Win2003-server is written in my /etc/hosts, and i can't ping it.
General i'm having trouble understanding the different part, such as
kerberos password server and similar.

- smb.conf - (192.168.0.2 = Win2003 server)
[global]
workgroup = debianserver
realm = dom.net
wins server = 192.168.0.2
security = ADS
encrypt passwords = yes
password server = dom.net

domain master = no
idmap uid = 1-2
idmap gid = 1-2


- krb5.conf ---
[libdefaults]
default_realm = DOM.NET

[realms]
DOM.NET = {
kdc = WINDOWSSERVER.DOM.NET
}

[domain_realms]
.kerberos.server = DOM.NET


Any help is welcome, because googling around has brought me no futher..

/Lars



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


re: [Samba] User unable to change their password using smbpasswd

2005-10-19 Thread FCG Lu Bei
Hello, yaya
Where to set the line? Thanks.

-原始邮件-
发件人: yaya [mailto:[EMAIL PROTECTED]
发送时间: 2005年10月14日 15:17
收件人: FCG Lu Bei; samba@lists.samba.org
主题: Re: [Samba] User unable to change their password using smbpasswd


Try to set

pam restrict change = yes

yaya

From: FCG Lu Bei [EMAIL PROTECTED]
To: yaya [EMAIL PROTECTED]; samba@lists.samba.org
Sent: Thursday, October 13, 2005 12:03 PM
Subject: re: [Samba] User unable to change their password using smbpasswd


Hello, yaya
This is the configuration, would you please check:

# Global parameters
[global]
#   workgroup = CC_FND-AD_NGNGW
netbios name = NGNVOB02
server string = Samba Server
security = DOMAIN
encrypt passwords = Yes
username map = /usr/local/samba/lib/username.map
log file = /usr/local/samba/var/log.%m
max log size = 50
dns proxy = No
kernel oplocks = No
create mask = 0755
oplocks = No



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] [Solved] Re: Win XP SP2 and Offline Files

2005-10-19 Thread Fabian Arrotin

Hi,

Thanks for your messages, but i avoid (if possible) upgrade of rpms if 
this machine is covered by Redhat for the support ...
Anyway, it seems i forgot to put the following parameters in the 
smb.conf file :


inherit permissions = yes
inherit acls = yes
nt acl support = yes

These 3 parameters solved my 'access denied' message when a laptop tried 
to synchronize this folder after the user created a new file when 
offline ... (I supposed this was due to the fact that Windows tries 
firts to create the file, and put acls on it after ...)


Gerald (Jerry) Carter wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Fabian Arrotin wrote:
| Hi,
|
| I have a Samba 3.0.9 running on a RHEL 3 server.
| This server is member of a Active Directory domain.
| I have the following problem (and searching the list,
| it seems i'm not the only one ...) :
|
| All 'online' access are correct, but when a laptop
| users goes offline, modify some files and reconnect ,
| Offline Files sync says that 'Access is denied'
|
| I'm sure all permissions are ok on the share,
| so what's wrong ?
|
| Any help will be appreciated ...

If you can reproduce this again 3.0.20b, I'll look
into it some.





ciao, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
There's an anonymous coward in all of us.   --anonymous
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDTq/WIR7qMdg1EfYRAleUAJ4086C4Vut0aH8T5LN4LERYOuzfVwCbB01I
2hUAHIB55ww+ZA6H3q+YAhA=
=UBI6
-END PGP SIGNATURE-


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Is max connections applicable to homes section?

2005-10-19 Thread Warren Beldad
Hi all,
 if I put max connections = 5 in the homes section, does this mean that only
5 users can login to their home directory simultaneously?
[homes]
comment = %u's personal share folder
browsable = NO
read only = NO
map archive = YES
case sensitive = no
sync always = yes
hide dot files = no
max connections = 5
besides homes, max connections is working, but in homes looks like this is
not working. I created 6 users and login all of them simultaneous in their
home directory without error.
or does this mean that a certain user is allowed only to open simultaneously
5 connections to his home directory?
 thanks,
warren
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] err: Client not found in Kerberos Database

2005-10-19 Thread Lars
Hi

My overall project is to get a Debian Sarge mail/samba-server to connect
with a Windows server 2003, but i'm having problem with the kerberos/LPAD
connection. I started uot with this guide:
http://www.enterprisenetworkingplanet.com/netos/article.php/3487081 And i
got all the components (Have_KRB5_H and etc.), but no connection..

If i test the conn with:
kinit [EMAIL PROTECTED]
kinit(v5): Client not found in Kerberos database while getting initial
credentials

And if i test with:
kinit [EMAIL PROTECTED]
kinit(v5): Cannot resolve network address for KDC in requested realm while
getting initial credentials


So in general I'm having trouble defining what is what and what to
install.  When typing my Kerberos server in the conf i put in the
windows-server, but should that be the linuxserver? And have much should i
install on the linuxserver to make it into a kerberos server. I already
got these.
libpam-krb5 krb5-user krb5-doc krb5-config krb5-kdc libkrb53

- krb5.conf ---
[libdefaults]
default_realm = DOM.NET

[realms]
DOM.NET = {
kdc = WINDOWSSERVER.DOM.NET
}

[domain_realms]
.kerberos.server = DOM.NET


Hope anyone can guide me through this...

/Lars

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd looping and consuming 100% CPU

2005-10-19 Thread Carli Cathomen
Tomek,

for the moment I have to stay on that level.
To what version did you migrate?

Carli




   
  Tomasz
   
  Chmielewski  To:   Carli Cathomen [EMAIL 
PROTECTED]
  [EMAIL PROTECTED]cc:   
samba@lists.samba.org 
   Subject:  Re: [Samba] smbd 
looping and consuming 100% CPU   
  18.10.2005 20:45  
   

   




Carli Cathomen schrieb:
 Hi All,

 I have a samba 3.0.4 installation on AIX 5.2 ML05. The problem I am
facing
 is that sometimes one smbd is looping and consuming up to 100% CPU time.
 In the log I see the following entry:

  ===
 [2005/10/18 11:35:34, 0] lib/fault.c:fault_report(37)
   INTERNAL ERROR: Signal 11 in pid 39316 (3.0.4)
   Please read the appendix Bugs of the Samba HOWTO collection
 [2005/10/18 11:35:34, 0] lib/fault.c:fault_report(39)
   ===

 Did anybody face the same issue? Any help appreciated

Recently I has a similar issue with smbd (Samba 3.0.10) consuming 100%
CPU, although I didn't have such nice logs.

Upgrading to a newer Samba version solved it.

--
Tomek
http://wpkg.org
WPKG - software deployment and upgrades with Samba








*** PLEASE NOTE ***
This message, along with any attachments, may be confidential or legally
privileged.  It is intended only for the named person(s), who is/are the
only authorized recipients. If this message has reached you in error,
kindly destroy it without review and notify the sender immediately. Thank
you for your help.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd looping and consuming 100% CPU

2005-10-19 Thread Tomasz Chmielewski

Carli Cathomen schrieb:

Tomek,

for the moment I have to stay on that level.
To what version did you migrate?


I think I migrated from 3.0.10 to 3.0.13, because I had such packages 
ready for my distro and it was the fastest/easiest.



--
Tomek
http://wpkg.org
WPKG - software deployment and upgrades with Samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba-3.0.10-1.4E (RHEL4); Invalid key XXX given to dptr_close

2005-10-19 Thread Stefan Sabolowitsch
Hi List,

need your help, property the here following.

OS / Samba = samba-3.0.10-1.4E (RHEL4)
Error message in Samba logfile =  Invalid key XXX given to dptr_close

This message comes then if by NT server with BrighStore a Backup is started.
The Backup is made by a Share.

all the same with or without

kernel oplocks = no
level2 oplocks = no
oplocks = no

without success


Info:
Error Log from BrightStore

E3323  2005/10/19 12:48:37 212  1Unexpected retrun
from find next file.  Unable to backup files after
(FILE=\\SFE002\ALLES\daten\arthur\HD-C\WinCommander\LANGUAGE\WCMD_DUT.LNG,
EC=UNEXP NET ERR)
E3406  2005/10/19 12:48:37 212  1Unable to read
file.
(FILE=\\SFE002\ALLES\daten\arthur\HD-C\WinCommander\LANGUAGE\WCMD_DAN.MNU,
EC=INVALID HANDLE)
E3323  2005/10/19 12:47:27 212  1Unexpected retrun
from find next file.  Unable to backup files after
(FILE=\\SFE002\ALLES\daten\arthur\HD-C\win32app\nsr\bin\winworkr.exe,
EC=UNEXP NET ERR)
E3323  2005/10/19 12:46:07 212  1Unexpected retrun
from find next file.  Unable to backup files after
(FILE=\\SFE002\ALLES\daten\arthur\HD-D\Arthur\old\Arthur-Update\v4088\demo\d
isk1\ANGEBEND.FO_, EC=UNEXP NET ERR)
E3323  2005/10/19 12:40:12 212  1Unexpected retrun
from find next file.  Unable to backup files after
(FILE=\\SFE002\ALLES\daten\arthur\HD-D\Marvin\Standard\Liste\Abschla2.lst,
EC=UNEXP NET ERR)
E3323  2005/10/19 12:39:02 212  1Unexpected retrun
from find next file.  Unable to backup files after
(FILE=\\SFE002\ALLES\daten\arthur\HD-D\Marvin\Standard\Formular\kunde.for,
EC=UNEXP NET ERR)
E3406  2005/10/19 12:39:02 212  1Unable to read
file.
(FILE=\\SFE002\ALLES\daten\arthur\HD-D\Marvin\Standard\Formular\kundea15.for
, EC=INVALID HANDLE)

Thanks

Stefan

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] sambaLogonHours and timezones

2005-10-19 Thread David Wilson

Hi guys,

Any takers ?


Kind regards

David Wilson
CNS, CLS, Linux+
033 3427003
082 4147413
0860-1-LINUX
[EMAIL PROTECTED]


- Original Message - 
From: David Wilson [EMAIL PROTECTED]

To: samba@lists.samba.org
Sent: Saturday, October 15, 2005 2:16 PM
Subject: sambaLogonHours and timezones



Hi guys/girls,

How are you keeping ?

A while ago I mentioned a problem that I'm picking up with Samba with 
OpenLDAP and the logon hours restrictions which are implemented via the 
NT 4.0 User Manager.


Basically my problem was that users were unable to login 2 hours before 
the actual restriction should kick in.
At the time I thought that perhaps the problem was caused by Slackware 
Linux and it's timezone implementation of SAST (GMT+2).

Since then I've experienced the same problem on SLES9 and Suse Linux 9.3.

From what I can see, the sambaLogonHours value is always set with GMT in 
mind.
Because in South Africa we are at GMT+2 Samba enforces restrictions 2 
hours before it should.
For example if users should only denied login access at 16:00, Samba is 
denying them access at 14:00.


I've looked all over and cannot find a solution to the problem other than 
adding two hours to the logon hours restrictions for each user when using 
the NT User Manager tool.


Does anyone know of a workaround for this ? Is there a way to get Samba to 
check the time zone on the server first and make calculations before 
writing values for the sambaLogonHours attribute ?


Links/references:
Explanation of feature: http://www.archive-two.com/new-2794385-2895.html
http://lists.samba.org/archive/samba-technical/2004-December/038271.html
http://archives.free.net.ph/message/20051006.181854.4d7c50dc.en.html
http://archives.free.net.ph/message/20050701.071531.eeffd7e5.en.html
http://lists.samba.org/archive/samba/2005-February/099778.html

Thanks in advance.

Kind regards

David Wilson
CNS, CLS, Linux+
033 3427003
082 4147413
0860-1-LINUX



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: samba-3.0.10-1.4E (RHEL4); Invalid key XXX given to dptr_close

2005-10-19 Thread Fabian Arrotin

Off-Topic but why not use the Linux agent for Brightstore Arcserve Backup ?
I've already installed this on several Linux machines if the central 
backup server was running Windows/Arcserve.


Note that this agent will speed up backup process ...

Stefan Sabolowitsch wrote:

Hi List,

need your help, property the here following.

OS / Samba = samba-3.0.10-1.4E (RHEL4)
Error message in Samba logfile =  Invalid key XXX given to dptr_close

This message comes then if by NT server with BrighStore a Backup is started.
The Backup is made by a Share.

all the same with or without

kernel oplocks = no
level2 oplocks = no
oplocks = no

without success


Info:
Error Log from BrightStore

E3323  2005/10/19 12:48:37 212  1Unexpected retrun
from find next file.  Unable to backup files after
(FILE=\\SFE002\ALLES\daten\arthur\HD-C\WinCommander\LANGUAGE\WCMD_DUT.LNG,
EC=UNEXP NET ERR)
E3406  2005/10/19 12:48:37 212  1Unable to read
file.
(FILE=\\SFE002\ALLES\daten\arthur\HD-C\WinCommander\LANGUAGE\WCMD_DAN.MNU,
EC=INVALID HANDLE)
E3323  2005/10/19 12:47:27 212  1Unexpected retrun
from find next file.  Unable to backup files after
(FILE=\\SFE002\ALLES\daten\arthur\HD-C\win32app\nsr\bin\winworkr.exe,
EC=UNEXP NET ERR)
E3323  2005/10/19 12:46:07 212  1Unexpected retrun
from find next file.  Unable to backup files after
(FILE=\\SFE002\ALLES\daten\arthur\HD-D\Arthur\old\Arthur-Update\v4088\demo\d
isk1\ANGEBEND.FO_, EC=UNEXP NET ERR)
E3323  2005/10/19 12:40:12 212  1Unexpected retrun
from find next file.  Unable to backup files after
(FILE=\\SFE002\ALLES\daten\arthur\HD-D\Marvin\Standard\Liste\Abschla2.lst,
EC=UNEXP NET ERR)
E3323  2005/10/19 12:39:02 212  1Unexpected retrun
from find next file.  Unable to backup files after
(FILE=\\SFE002\ALLES\daten\arthur\HD-D\Marvin\Standard\Formular\kunde.for,
EC=UNEXP NET ERR)
E3406  2005/10/19 12:39:02 212  1Unable to read
file.
(FILE=\\SFE002\ALLES\daten\arthur\HD-D\Marvin\Standard\Formular\kundea15.for
, EC=INVALID HANDLE)

Thanks

Stefan



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Domain Admins can't modify ldapsam entries

2005-10-19 Thread Gerald (Jerry) Carter

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Eric A. Hall wrote:
| On 10/18/2005 9:26 AM, Gerald (Jerry) Carter wrote:
| -BEGIN PGP SIGNED MESSAGE-
| Hash: SHA1
|
| Günter Gersdorf wrote:
|
| | Domain Admins are not allowed to modify the ldapsam
| | database via usrmgr.
| |   lib/smbldap.c: smbldap_open: cannot access LDAP when not root..
| |
| | Is this by design?
|
| Yes.  It is by design.  You have to assign the
| SeAddUsersPrivilege  to the Domain Admins group.
|
| Where are the privs stored nowadays? I found lots of references to
| privilege[s].tdb but nothing like that seems to exist anywhere.

account_pol.tdb







cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVivhIR7qMdg1EfYRAkXGAKCEY2GIWFv9PVeJFVibdbEQhiF2gACgzOUZ
tvPaLcmdeltTlZuNdqzXbhM=
=CHd2
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] err: Client not found in Kerberos Database

2005-10-19 Thread Lars Roland
On 10/19/05, Lars [EMAIL PROTECTED] wrote:
 Hi

 My overall project is to get a Debian Sarge mail/samba-server to connect
 with a Windows server 2003, but i'm having problem with the kerberos/LPAD
 connection. I started uot with this guide:
 http://www.enterprisenetworkingplanet.com/netos/article.php/3487081 And i
 got all the components (Have_KRB5_H and etc.), but no connection..


I have written a small guide that will show how to get Samba working
with AD (it should also work around your error):

http://wiki.randompage.org/index.php/Using_Samba_on_Debian_Linux_to_authenticate_against_Active_Directory


--
Regards.

Lars Roland
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


AW: [Samba] Re: samba-3.0.10-1.4E (RHEL4); Invalid key XXX given to dptr_close

2005-10-19 Thread Stefan Sabolowitsch
Fabian,

Fast explains.
On the NT server work BrightStore with version r9, more highly does not go
because of NT.
On the REHL4 side works (worked) BrightStore Linux Client r11.5. Smaller
version does not work goes because of RHEL4.

BrightStore servers r9 and Linux Client r11.5 are not compatible
unfortunately.
I must now decide everything with the version Share to work to get.
Or the operating systems on the servers change.

little sadly

Stefan






-Ursprüngliche Nachricht-
Von:[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]  Im
Auftrag von Fabian Arrotin
Gesendet:   Mittwoch, 19. Oktober 2005 13:05
An: samba@lists.samba.org
Betreff:[Samba] Re: samba-3.0.10-1.4E (RHEL4); Invalid key XXX given
to dptr_close

Off-Topic but why not use the Linux agent for Brightstore Arcserve Backup ?
I've already installed this on several Linux machines if the central 
backup server was running Windows/Arcserve.

Note that this agent will speed up backup process ...

Stefan Sabolowitsch wrote:
 Hi List,
 
 need your help, property the here following.
 
 OS / Samba = samba-3.0.10-1.4E (RHEL4)
 Error message in Samba logfile =  Invalid key XXX given to dptr_close
 
 This message comes then if by NT server with BrighStore a Backup is
started.
 The Backup is made by a Share.
 
 all the same with or without
 
 kernel oplocks = no
 level2 oplocks = no
 oplocks = no
 
 without success
 
 
 Info:
 Error Log from BrightStore
 
 E3323  2005/10/19 12:48:37 212  1Unexpected retrun
 from find next file.  Unable to backup files after
 (FILE=\\SFE002\ALLES\daten\arthur\HD-C\WinCommander\LANGUAGE\WCMD_DUT.LNG,
 EC=UNEXP NET ERR)
 E3406  2005/10/19 12:48:37 212  1Unable to read
 file.
 (FILE=\\SFE002\ALLES\daten\arthur\HD-C\WinCommander\LANGUAGE\WCMD_DAN.MNU,
 EC=INVALID HANDLE)
 E3323  2005/10/19 12:47:27 212  1Unexpected retrun
 from find next file.  Unable to backup files after
 (FILE=\\SFE002\ALLES\daten\arthur\HD-C\win32app\nsr\bin\winworkr.exe,
 EC=UNEXP NET ERR)
 E3323  2005/10/19 12:46:07 212  1Unexpected retrun
 from find next file.  Unable to backup files after

(FILE=\\SFE002\ALLES\daten\arthur\HD-D\Arthur\old\Arthur-Update\v4088\demo\d
 isk1\ANGEBEND.FO_, EC=UNEXP NET ERR)
 E3323  2005/10/19 12:40:12 212  1Unexpected retrun
 from find next file.  Unable to backup files after
 (FILE=\\SFE002\ALLES\daten\arthur\HD-D\Marvin\Standard\Liste\Abschla2.lst,
 EC=UNEXP NET ERR)
 E3323  2005/10/19 12:39:02 212  1Unexpected retrun
 from find next file.  Unable to backup files after
 (FILE=\\SFE002\ALLES\daten\arthur\HD-D\Marvin\Standard\Formular\kunde.for,
 EC=UNEXP NET ERR)
 E3406  2005/10/19 12:39:02 212  1Unable to read
 file.

(FILE=\\SFE002\ALLES\daten\arthur\HD-D\Marvin\Standard\Formular\kundea15.for
 , EC=INVALID HANDLE)
 
 Thanks
 
 Stefan
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Is max connections applicable to homes section?

2005-10-19 Thread Gerald (Jerry) Carter

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Warren Beldad wrote:

|  if I put max connections = 5 in the homes section, does
| this mean that only 5 users can login to their
| home directory simultaneously?

no.  it means that 5 connections are allowed to any
given home directory.







cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
There's an anonymous coward in all of us.   --anonymous
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDViyNIR7qMdg1EfYRArZeAKDw2BJVyKyE1lcETdw0yhb2h/7tGACggKHs
y28628sV2PFzY6qoaORez+4=
=d2Ux
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] lots of temp files in /tmp directory

2005-10-19 Thread Gerald (Jerry) Carter

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Software Groups wrote:
| I am running samba 3.0.20a in my FC4 linux machine, its running for
two days.
| In /tmp direcotry I see lots of temporary files.
|
| Is it safe to  remove these files? also I would like to why its
| creating these many files?
|
| SMBclose.8.req  SMBreadX.58.resp  SMBsesssetupX.61.req

These are create when you set a debug level of 50 or higher. They
are they raw individual packates.





cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDViz1IR7qMdg1EfYRApNUAKDw0c4rjjfxmu0VzAyF38c7WUyYLwCgkcT9
N1AUCgsJgMHPajcpeKiVsRM=
=HKMo
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WINS 1c query, many responses: who is chosen?

2005-10-19 Thread Gerald (Jerry) Carter

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Andreas wrote:
| Scenario (everything samba-3):
| - many subnets, each with a BDC
| - one PDC somewhere else
| - one WINS at that PDC server
| - windows using wins first, bcast next (node-type 8)
|
| When one workstation asks the wins server about the
| 1c netbios name type, the server will answer with the
| PDC and BDCs IP. What prevents the workstation from
| using a controller outside its subnet? Is this
| intelligence part of the windows workstation DC
| selection algorithm? To choose the closest one?

Yes.  The DC selection heuristic is built in to the
windows client.  The client also uses the GETDC mailslots
for selecting DC's.






cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVi3DIR7qMdg1EfYRAkdbAJ9xmR0AZGH9YOMDph8dKJzfagGI6QCeLl6Y
3s3F8siYHhYkPFS545iidhs=
=VOU6
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] sambaLogonHours and timezones

2005-10-19 Thread Gerald (Jerry) Carter

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

David Wilson wrote:
| Hi guys/girls,
|
| How are you keeping ?
|
| A while ago I mentioned a problem that I'm picking up with Samba with
| OpenLDAP and the logon hours restrictions which are implemented via
| the NT 4.0 User Manager.
|
| Basically my problem was that users were unable to login 2 hours before
| the actual restriction should kick in.
| At the time I thought that perhaps the problem was caused by Slackware
| Linux and it's timezone implementation of SAST (GMT+2).
| Since then I've experienced the same problem on SLES9 and Suse Linux 9.3.
|
| From what I can see, the sambaLogonHours value is always set with
| GMT in

sambaLogonHours is localtime.  Not GMT IIRC.






cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVi+CIR7qMdg1EfYRAtOjAKDrZ7nl63r9N3t0lCU6mT5UNNW3PgCfcJGx
PGEvZLagxfsG1UrX0XabuaY=
=NWZc
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba creating multiple isntances of the deamon

2005-10-19 Thread Benoit Gauthier
(2005.10.19, 07:36)

 OK. I've figured out how to do it. Which of the numerous Samba
 processes should I do this on though?

 On one of those you've tried to kill with a normal kill command but
 hasn't died

Here is such an output.

Benoît



Attaching to program: /usr/sbin/smbd, process 3456
(no debugging symbols found)
Loaded symbols for /usr/sbin/smbd
Reading symbols from /usr/lib/libldap-2.2.so.7...(no debugging symbols 
found)...done.
Loaded symbols for /usr/lib/libldap-2.2.so.7
Reading symbols from /usr/lib/liblber-2.2.so.7...(no debugging symbols 
found)...done.
Loaded symbols for /usr/lib/liblber-2.2.so.7
Reading symbols from /usr/lib/libgssapi_krb5.so.2...(no debugging symbols 
found)...done.
Loaded symbols for /usr/lib/libgssapi_krb5.so.2
Reading symbols from /usr/lib/libkrb5.so.3...(no debugging symbols 
found)...done.
Loaded symbols for /usr/lib/libkrb5.so.3
Reading symbols from /usr/lib/libk5crypto.so.3...
(no debugging symbols found)...done.
Loaded symbols for /usr/lib/libk5crypto.so.3
Reading symbols from /usr/lib/libkrb5support.so.0...(no debugging symbols 
found)...done.
Loaded symbols for /usr/lib/libkrb5support.so.0
Reading symbols from /lib/libcom_err.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/libcom_err.so.2
Reading symbols from /lib/libresolv.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /usr/lib/libcups.so.2...
(no debugging symbols found)...done.
Loaded symbols for /usr/lib/libcups.so.2
Reading symbols from /lib/libssl.so.5...(no debugging symbols found)...done.
Loaded symbols for /lib/libssl.so.5
Reading symbols from /lib/libcrypto.so.5...(no debugging symbols found)...done.
Loaded symbols for /lib/libcrypto.so.5
Reading symbols from /lib/libnsl.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libcrypt.so.1...
(no debugging symbols found)...done.
Loaded symbols for /lib/libcrypt.so.1
Reading symbols from /lib/libpam.so.0...(no debugging symbols found)...done.
Loaded symbols for /lib/libpam.so.0
Reading symbols from /lib/libattr.so.1...done.
Loaded symbols for /lib/libattr.so.1
Reading symbols from /lib/libacl.so.1...done.
Loaded symbols for /lib/libacl.so.1
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /usr/lib/libpopt.so.0...done.
Loaded symbols for /usr/lib/libpopt.so.0
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /usr/lib/libsasl2.so.2...done.
Loaded symbols for /usr/lib/libsasl2.so.2
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/libaudit.so.0...done.
Loaded symbols for /lib/libaudit.so.0
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /usr/lib/gconv/UTF-16.so...done.
Loaded symbols for /usr/lib/gconv/UTF-16.so
Reading symbols from /usr/lib/gconv/IBM850.so...done.
Loaded symbols for /usr/lib/gconv/IBM850.so
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
0x007d1402 in ?? ()
(gdb) bt
#0  0x007d1402 in ?? ()
#1  0x005e40a6 in flock () from /lib/libc.so.6
#2  0x0098cb52 in open_file_ntcreate () from /usr/sbin/smbd
#3  0x0095c105 in reply_ntcreate_and_X () from /usr/sbin/smbd
#4  0x009a200f in push_oplock_pending_smb_message () from /usr/sbin/smbd
#5  0x009a2668 in process_smb () from /usr/sbin/smbd
#6  0x009a2aa2 in smbd_process () from /usr/sbin/smbd
#7  0x00b5e970 in main () from /usr/sbin/smbd
(gdb)

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd and winbindd refuse to start, but nmbd runs fine on Redhat 9.0

2005-10-19 Thread Gerald (Jerry) Carter

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Dustin Navea wrote:

| Gerald, hi.  Thanks for the quick reply, I apparently
| missed it, so thanks for the archives too!  How do I get
| a level 10 debug log?  I'm not totally familiar with
| samba yet, so I'm not sure about how to do
| that, but once I receive your reply, I will be more
| than happy to send it.

The easiest methid is to pass '-d 10' to the daemon at startup.
For example, 'winbindd -d 10'



cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
There's an anonymous coward in all of us.   --anonymous
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVjbEIR7qMdg1EfYRAuq1AKDT5e4uo468nBnV6/ZOMBWSyzmoRwCg5qn1
8BRn4An25sTqDvCJSv8gZ7A=
=p4CA
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba 3.0.20b - still getting

2005-10-19 Thread Rex Dieter

PC wrote:


Rex, this seemed to fix the issue un RH 3.0.20-22, but nogo for 3.0.20b

I changed my selinux setting via system-config-securitylevel
and set winbind_disable_trans and use_samba_home_dirs to active.

getsebool -a | grep win
winbind_disable_trans -- active
getsebool -a | grep sam
use_samba_home_dirs -- active

I get the following syslog error when starting winbind under Samba3-3.0.20b

Oct 18 17:20:27 ht-server winbind: winbindd shutdown succeeded
Oct 18 17:20:27 ht-server winbindd[21841]: [2005/10/18 17:20:27, 0]
lib/util.c:smb_panic2(1548) 
Oct 18 17:20:27 ht-server winbindd[21841]:   
PANIC: Could not fetch our SID - did we join? 


winbind is reporting this box isn't a member of the domain.  Check that 
first.  You may have to re-join.


-- Rex

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: samba-3.0.10-1.4E (RHEL4): logon failures with 2003 server pdc

2005-10-19 Thread Ville Herva
On Wed, Oct 19, 2005 at 09:54:36AM +0530, you [Sanjay Upadhyay] wrote:
 Check the DNS entries.. in case the AD is configured with the DNS,
 enter the correct entries for the linux boxes and check...

The AD uses linux servers for DNS, and I can't find anything strange in the
DNS records. The SAMBASERVER.my.dom entry points to the correct ip but the
OTHERNAME netbios alias doesn't exist in the DNS. Weird.



-- v -- 

[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: samba-3.0.10-1.4E (RHEL4): logon failures with 2003 server pdc

2005-10-19 Thread Ville Herva
On Wed, Oct 19, 2005 at 12:35:34PM +0530, you [Sanjay Upadhyay] wrote:
 So just add OTHERNAME entry to the DNS and check reverse resolution is
 also configured properly in your DNS.

But the \\OTHERNAME\SHARE is the one that works for everybody, the
\\SAMBASERVER\SHARE is the one that faisl from workstations that are members
of the domain.

Reverse DNS for OTHERNAME.my.dom points to the correct ip.
 
Thanks.


-- v -- 

[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Profiles on quota, hard or soft limit?

2005-10-19 Thread Marco Gaiarin

[i'm not subscribe to this list, please put me on CC...]

I've asked this on samba-it (italian) mailing list, but with no clue.


In my installation (debian sarge, samba 3.0.14a, kernel 2.6 and xfs
filesystem) i've put roaming profile on quotas, and something i think
strange happens.
The client say to the user that cannot update the profile, also if it
was under the soft (and hard) quota limit.

I've googled a bit, and found that this is expected, and also i've
found the suggestion to put (via policy) a roaming profile size of an
half of quota.
AFA i've understood well, copying roaming profiles windows machine
dupes many file, so the effectively space used during profile
syncronization increase. 50% seems to me too much, but...

Anyway the problem are other:

  trinity:~# repquota -a | grep roberta
  roberta   --  545400 1048576 2097152   1936 1 15000

and if user roberta enlarge a bit their profile, syncronization errors
popup.

I've tried (with explorer) to copy files to the profile's network share
by user roberta, and i can fill all the two megabytes.

How can 600/650MB profile could make trouble with 2GB quota? Or samba
explicitly look at soft limit instead of hard one?


Many thanks.

-- 
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''http://www.sv.lnf.it/
  Polo FVG  -  Via della Bontà, 7 - 33078  -  San Vito al Tagliamento (PN)
  gaio(at)sv.lnf.it tel +39-0434-842711fax +39-0434-842797

Grazie parlamento europeo!
http://punto-informatico.it/p.asp?i=53925r=PI
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] sambaLogonHours and timezones

2005-10-19 Thread David Wilson

Hi Jerry,

Thanks for your reply.

The time on the server is set to localtime, the timezone set to SAST (GMT+2) 
as are all the XP workstations.

The time on the server and workstations is correct.

Any ideas why my values are out by 2 hours each time ?

Thanks for your help so far.

Kind regards

David Wilson
CNS, CLS, Linux+
033 3427003
082 4147413
0860-1-LINUX
[EMAIL PROTECTED]


- Original Message - 
From: Gerald (Jerry) Carter [EMAIL PROTECTED]

To: David Wilson [EMAIL PROTECTED]
Cc: samba@lists.samba.org
Sent: Wednesday, October 19, 2005 1:35 PM
Subject: Re: [Samba] sambaLogonHours and timezones



-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

David Wilson wrote:
| Hi guys/girls,
|
| How are you keeping ?
|
| A while ago I mentioned a problem that I'm picking up with Samba with
| OpenLDAP and the logon hours restrictions which are implemented via
| the NT 4.0 User Manager.
|
| Basically my problem was that users were unable to login 2 hours before
| the actual restriction should kick in.
| At the time I thought that perhaps the problem was caused by Slackware
| Linux and it's timezone implementation of SAST (GMT+2).
| Since then I've experienced the same problem on SLES9 and Suse Linux 
9.3.

|
| From what I can see, the sambaLogonHours value is always set with
| GMT in

sambaLogonHours is localtime.  Not GMT IIRC.






cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVi+CIR7qMdg1EfYRAtOjAKDrZ7nl63r9N3t0lCU6mT5UNNW3PgCfcJGx
PGEvZLagxfsG1UrX0XabuaY=
=NWZc
-END PGP SIGNATURE- 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] file permissions with samba shares

2005-10-19 Thread Jack Malone
I am wondering if there is a way I can setup permission on 
directories in the directory that I have setup for samba shares so 
that no one can move or delete them. The problem I am having of late 
is that someone from within windows will move the directories around 
. I think they do it not knowing they are doing it. Its happened 
several times of late now. I have always found the missing directory 
nested into another directory in the samba shares. thanks for any 
info.   I am running just in workgroup setup with samba here no 
domain in the picture. Running suse linux 9.3 as the os on the server.



jack malone

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba/cups/lpq

2005-10-19 Thread [EMAIL PROTECTED]
I use , cups and samba on a mandriva2006 linux box. (Cups is compiled 
with samba.
ldd /usr/sbin/smbd give libcups.so.2 = /usr/lib/libcups.so.2 
(0xb7e55000)
and i'd like to see the print queue of cups from the windows client.(Xp 
for example) but i see nothing into the windows queueing.


Iv'e tried many things:
  - using  lpq command, etc..., to force a lpq command, and changing or 
not printing = cups to validate the new lpq command
   - if i use the smbclient command (linux command) to connect to 
printer defined onto the server
 smbclient -U user server\\printer and use the queue 
command i see the the queue and files on it.


My printers are defined as raw, and the drivers are installed on each 
windows client.


Printing is ok from windows client, the only problem is :
  - see the queue of the printers
  - disable printers
  - enable printers
  from the windows client.

So does anyone has a correct configuration wich permit these functions ?
thanks a lot

.[printers]
 comment = All Printers
 path = /var/spool/samba
 browseable = yes
 guest ok = yes
 writable = no
 printable = yes
 create mode = 0700
# =
# print command: see above for details.
# =
#   print command = lpr-cups -P %p -o raw %s -r   # using client side 
printer drivers.
 print command = lpr-cups -P %p -o raw %s -r   # using client side 
printer drivers.

lpq command = lpstat -o %p
 lprm command = cancel %p-%j
#   print command = lpr-cups -P %p %s # using cups own drivers (use 
generic PostScript on clients).

# If you install drivers on the server, you will want to uncomment this so
# clients request the driver
 use client driver = yes
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] cups/samba/filename

2005-10-19 Thread [EMAIL PROTECTED]

Hi all,

I use cups and samba on a mandriva2006 linux box. (Cups is compiled with 
samba.
ldd /usr/sbin/smbd give libcups.so.2 = /usr/lib/libcups.so.2 
(0xb7e55000)

and i'd like to see the correct filename printed,
not the samba filename smbprn.xx
is there a function in  samba ?

Any suggestions and examples are welcome !
thanks in adance

my conf
My printers are defined as raw, and the drivers are installed on each 
windows client.



.[printers]
 comment = All Printers
 path = /var/spool/samba
 browseable = yes
 guest ok = yes
 writable = no
 printable = yes
 create mode = 0700
# =
# print command: see above for details.
# =
#   print command = lpr-cups -P %p -o raw %s -r   # using client side 
printer drivers.
 print command = lpr-cups -P %p -o raw %s -r   # using client side 
printer drivers.

lpq command = lpstat -o %p
 lprm command = cancel %p-%j
#   print command = lpr-cups -P %p %s # using cups own drivers (use 
generic PostScript on clients).

# If you install drivers on the server, you will want to uncomment this so
# clients request the driver
 use client driver = yes


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] hp officejet 9130 and samba

2005-10-19 Thread kurt weiss

did you not recieve my mails?

kurt weiss schrieb:

hello jerry

i did not hear anything from you.
did you recieve my last mail with attachment tcpdump?
is it enough?

thx
gk


Gerald (Jerry) Carter schrieb:



Can you send me an ethereal trace of the failure?





--
--
greetings,
kurt, austria. (http://www.kwnet.at)
===
this is a posting from a samba *user* - not a samba developer.
the posting is created on the base of experiences an may be faulty.
so, if contains any mistakes, please feel free to correct it
===

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] file permissions with samba shares

2005-10-19 Thread Josh Kelley
On 10/19/05, Jack Malone [EMAIL PROTECTED] wrote:
 I am wondering if there is a way I can setup permission on
 directories in the directory that I have setup for samba shares so
 that no one can move or delete them. The problem I am having of late
 is that someone from within windows will move the directories around

Denying write permission to the parent directory should prevent
someone from deleting or moving child directories.

If that won't work, you might instead try using the audit or
extd_audit vfs module to log directory moves and deletions.  Then you
could at least get after the responsible party.

Josh Kelley
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd processes 99% cpu and end-user locks up

2005-10-19 Thread Nathan Vidican
Okay, re-compiled with -g, (I think), assuming the -g was to CFLAGS, I 
attached the output of ./configure --prefix=/usr/samba CFLAGS=-g, the 
output of make, and the warnings reported by make.


When I run a `top` and get an output similar to this (pardon the 
word-wrap mangling):


last pid: 39681;  load averages:  1.04,  1.02,  0.88   up 3+17:11:28 
10:06:34

67 processes:  1 running, 66 sleeping
CPU states:  6.9% user,  0.0% nice, 43.1% system,  0.0% interrupt, 50.0% 
idle

Mem: 56M Active, 1530M Inact, 228M Wired, 59M Cache, 213M Buf, 9144K Free
Swap: 4087M Total, 48K Used, 4087M Free

  PID USERNAME   THR PRI NICE   SIZERES STATE  C   TIME   WCPU 
COMMAND

39389 root 1 1140 30716K  8704K CPU0   0  33:04 99.17% smbd
  494 ldap 4  200   118M  7768K kserel 0   0:20  0.00% 
slapd
 7249 root 1  960 21460K  4188K select 0   0:07  0.00% 
cupsd
  318 root 1  960  3532K   940K select 0   0:03  0.00% 
syslogd

39470 root 1  960 30852K  8836K select 0   0:03  0.00% smbd
39505 pcarlini 1  960 31256K  9292K select 1   0:03  0.00% smbd


I then tried a 'gdb 39389', which gave me a prompt something like this:

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain 
conditions.

Type show copying to see the conditions.
There is absolutely no warranty for GDB.  Type show warranty for details.
This GDB was configured as amd64-marcel-freebsd...39389: No such file 
or directory.


(gdb)

Where I then tried 'bt' as you instructed and got:

(gdb) bt
No stack.
(gdb)

What am I doing wrong? Admittedly never done anything before with gdb 
and not too sure of what I'm doing here... assuming CFLAGS=-g was what 
you meant by compile smbd with -g, and I didn't get any warnings running 
gdb pid, so assuming it worked... what next?



--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate  Tool Ltd.
http://www.wmptl.com/

Jeremy Allison wrote:

On Tue, Oct 18, 2005 at 04:28:44PM -0400, Nathan Vidican wrote:

Still having a situation, in particular with Microsoft Office products 
(Excel, MS Word, etc), wherein a user locks up while saving a file.


The scenario goes as follows:

user opens up a file (excel document, word document, etc), user changes 
file, user hits save, user hangs...


`top` reports an smbd belonging to user locked in some sort of loop 
causing 99% cpu utilization.


net status sessions | grep 'usermachinename' reports two smbd processes 
belonging to the end user, the first (99% cpu), and the second.


kill looped process   does nothing, kill -9 takes it out and the 
user's machine returns to normal, they save their file and we save the 
day until ten minutes later when someone else calls us with the same 
problem. This is happening a few time per hour, usually with a handfull 
of the same users (about 6-7 users have issues).



Ensure that smbd is compiled with -g, and when the smbd is in this
state attach to it with gdb and type bt to get a backtrace.

Please post the results of this to the list.

Thanks,

Jeremy.


# make  make.output
rpc_parse/parse_prs.c: In function `prs_pointer':
rpc_parse/parse_prs.c:601: warning: cast from pointer to integer of different 
size
rpc_parse/parse_misc.c: In function `smb_io_dom_sid2_p':
rpc_parse/parse_misc.c:299: warning: cast from pointer to integer of different 
size
rpc_parse/parse_misc.c: In function `prs_io_unistr2_p':
rpc_parse/parse_misc.c:1006: warning: cast from pointer to integer of different 
size
rpc_parse/parse_misc.c: In function `prs_io_unistr2':
rpc_parse/parse_misc.c:1041: warning: cast from pointer to integer of different 
size
libsmb/ntlmssp_parse.c: In function `msrpc_parse':
libsmb/ntlmssp_parse.c:219: warning: cast to pointer from integer of different 
size
libsmb/ntlmssp_parse.c:247: warning: cast to pointer from integer of different 
size
libsmb/ntlmssp_parse.c:275: warning: cast to pointer from integer of different 
size
rpc_server/srv_reg_nt.c: In function `construct_registry_sd':
rpc_server/srv_reg_nt.c:87: warning: passing arg 8 of `make_sec_desc' from 
incompatible pointer type
rpc_server/srv_reg_nt.c: In function `make_default_reg_sd':
rpc_server/srv_reg_nt.c:1015: warning: passing arg 8 of `make_sec_desc' from 
incompatible pointer type
registry/regfio.c: In function `lookup_hbin_block':
registry/regfio.c:564: warning: cast from pointer to integer of different size
rpc_server/srv_svcctl_nt.c: In function `construct_scm_sd':
rpc_server/srv_svcctl_nt.c:102: warning: passing arg 8 of `make_sec_desc' from 
incompatible pointer type
rpc_server/srv_svcctl_nt.c: In function `construct_service_sd':
rpc_server/srv_svcctl_nt.c:137: warning: passing arg 8 of `make_sec_desc' from 
incompatible pointer type
rpc_parse/parse_buffer.c: In function `prs_rpcbuffer_p':
rpc_parse/parse_buffer.c:109: 

Re: [Samba] smbd processes 99% cpu and end-user locks up

2005-10-19 Thread Martin Zielinski

On Linux the syntax is gdb -p pid.
   ^^^
The ..39389: No such file... message seems to tell, that you didn't 
attach to the process but tried to debug a file called 39389.




Nathan Vidican wrote:
Okay, re-compiled with -g, (I think), assuming the -g was to CFLAGS, I 
attached the output of ./configure --prefix=/usr/samba CFLAGS=-g, the 
output of make, and the warnings reported by make.


When I run a `top` and get an output similar to this (pardon the 
word-wrap mangling):


last pid: 39681;  load averages:  1.04,  1.02,  0.88   up 3+17:11:28 
10:06:34

67 processes:  1 running, 66 sleeping
CPU states:  6.9% user,  0.0% nice, 43.1% system,  0.0% interrupt, 50.0% 
idle

Mem: 56M Active, 1530M Inact, 228M Wired, 59M Cache, 213M Buf, 9144K Free
Swap: 4087M Total, 48K Used, 4087M Free

  PID USERNAME   THR PRI NICE   SIZERES STATE  C   TIME   WCPU 
COMMAND

39389 root 1 1140 30716K  8704K CPU0   0  33:04 99.17% smbd
  494 ldap 4  200   118M  7768K kserel 0   0:20  0.00% 
slapd
 7249 root 1  960 21460K  4188K select 0   0:07  0.00% 
cupsd
  318 root 1  960  3532K   940K select 0   0:03  0.00% 
syslogd

39470 root 1  960 30852K  8836K select 0   0:03  0.00% smbd
39505 pcarlini 1  960 31256K  9292K select 1   0:03  0.00% smbd


I then tried a 'gdb 39389', which gave me a prompt something like this:

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you 
are
welcome to change it and/or distribute copies of it under certain 
conditions.

Type show copying to see the conditions.
There is absolutely no warranty for GDB.  Type show warranty for details.
This GDB was configured as amd64-marcel-freebsd...39389: No such file 
or directory.


(gdb)

Where I then tried 'bt' as you instructed and got:

(gdb) bt
No stack.
(gdb)

What am I doing wrong? Admittedly never done anything before with gdb 
and not too sure of what I'm doing here... assuming CFLAGS=-g was what 
you meant by compile smbd with -g, and I didn't get any warnings running 
gdb pid, so assuming it worked... what next?






--
Martin Zielinski [EMAIL PROTECTED]
Software Development
SEH Computertechnik GmbH www.seh.de
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] 3.0.20a nmbd/wins problems - can't find domain

2005-10-19 Thread Paul Griffith
Greetings,

Our setup:
Xeon 2x2.8Ghz/2GB RAM
Red Hat Linux release 7.3 (Valhalla)
Kernel 2.4.29 on an i686
multihomed - 5 subnets, samba operates only on 4
firewalled
Samba: v3.0.20a
Clients: Windows XP SP2 fully patched; MacOS X 10.3/10.4

We are having intermittent problems with nmbd/wins. At one point our
admin users couldn't logon for upto 2 hours. When any of our user login
into the domain they *may* get the eror message stating that the domain
is not available. 

Here are the steps we have taken to try to solve this problem

1 - move Samba from xinetd to standalone startup script
2 - update Samba from 3.0.11 to 3.0.20a
3 - open up firewall to allow udp ports 137-139;445 from our 4 subnets
4 - tested against a fully unpatched WinXP SP2 client to see if it was a 
MS patch

All the above steps failed :-(

How we can reproduce the error...

1 - login to domain
2 - turn off computer, not log off
3 - login into domain when the login screen appears
4 - goto step 2 and repeat until domain login fails (about 2-3 times)


Using etherreal we have notice that the only difference between a good
or bad session is..

bad session - client doesn't do anything with the NB name query and
goes to DNS to find the IP of the server that handles the CSYORKUCA
domain. We dont't have the netbios name in our DNS

good session - client doesn't goto dns, it works with the NB name
query and talks to the server that handles the CSYORKUCA domain.

In the past we had never put the 'netbios name' into the DNS. I was
under the impression that netios wasn't routable? How would this work
with 4 subnets?

Any advice

Thanks
Paul


---smb.conf--- 
[global]
display charset = ascii
workgroup = CSYORKUCA
netbios name = PCSERVER
netbios aliases = SILVER
server string = CS Samba %v Server
interfaces = 130.63.xx.xx/255.255.255.0, 130.63.xx.xx/255.255.255.0, 
130.63.xx.xx/255.255.255.0, 130.63.xx.xx/255.255.255.0
bind interfaces only = Yes
passdb backend = pdb_udb
enable privileges = Yes
passwd program = /cs/local/lib/udb/smbchange %u
passwd chat = . %n\n
username map = /cs/local/share/samba/usermap
unix password sync = Yes
client NTLMv2 auth = Yes
client lanman auth = No
client plaintext auth = No
log level = 2
max log size = 0
deadtime = 3
printcap name = /cs/local/share/LPRng/printcap
logon script = default.bat
logon path = 
logon home = 
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
invalid users = root
inherit permissions = Yes
hosts allow = 127.0.0.1/24, 130.63.xx.0/255.255.255.0, 
130.63.xx.0/255.255.255.0, 130.63.xx.0/255.255.255.0, 
130.63.xx.0/255.255.255.0, 130.63.xxx.0/255.255.255.0, 
130.63.xx.0/255.255.255.0, 130.63.xx.91/255.255.255.0, 
130.63.xx.200/255.255.255.0
print command = /cs/local/bin/lpr -b -P%p %s ; rm -f %s
lpq command = /cs/local/bin/lpq -P%p
lprm command = /cs/local/bin/lprm -P%p %j
use client driver = Yes
oplocks = No
level2 oplocks = No

[netlogon]
path = /cs/local/share/samba/netlogon

[homes]
comment = Home Directories
valid users = %S
read only = No
csc policy = disable

[printers]
comment = All Printers
path = /tmp
create mask = 0700
printable = Yes
browseable = No



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd processes 99% cpu and end-user locks up

2005-10-19 Thread Gerald (Jerry) Carter

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Martin Zielinski wrote:
| On Linux the syntax is gdb -p pid.
|^^^
| The ..39389: No such file... message seems to tell, that you didn't
| attach to the process but tried to debug a file called 39389.

actually you need the path to the debug binary and the pid

# gdb /usr/sbin/smbd 39389

There's many variations of course



cheers, jerry

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVl9nIR7qMdg1EfYRAg0NAJ0UYc/vcstwJ42h2vuWsYTWlYPtZwCeMOAA
PQ2/Sujtio7fvykWSGjNgL4=
=yiD6
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] RE: High CPU load on smiod

2005-10-19 Thread adrian sender

Hello Jools,

Some more information would really help;  ie logs.

Instead of mounting the samba shares on the NT4 machine, you could mount the 
NT shares on the samba box and sync them with rsync.


Something like this should do it 
mount -t smbfs -o username=tridge,password=foobar //fjall/test /data/test
rsync -avz /mnt/point/ /destination

If you have problems with smbfs try using cifs instead.

Either your CPU's are dual core xeons, which is actually 2 die on the one 
cpu, or you have hyperthreading enabled;  consult your motherboard manual 
which should indicate how to disable this in the bios.


Hope this helps.

Cheers,

Adrian Sender.

--
From: jools [EMAIL PROTECTED]
To: samba@lists.samba.org
Subject: [Samba] High CPU load on smiod
Sent: Wednesday, 19 October 2005 10:06:01 AM
Hi all,

I'm running Samba 3.0.13 on Mandrake 10.2 (LE2005) and have mounted the 
shares

on an NT4 server to rsync the files over to the Samba box.

The only thing is that Linux sees the dual Xeons in the server as four CPUs
and the first core on CPU1 hits 100% while the files are copying over. Every
so often, CPU1, core 2 takes over (at 100%) for a short period and then core
1 goes back to 100%. Is this normal?

When the CPU load hits 100% the mouse and keyboard become unresponsive and 
the

whole plot turns clunky. I've also had to turn apic off with linux apic=off
in Lilo.

Cheers all,

Jools
---


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba net ads failure

2005-10-19 Thread Daniel Hindbo Jensen
Hello Everyone

Im having some serious issues with my samba server
It was working nicely and one day after a reboot it stopped working
(It was working but a bit slow)
I tried net ads testjoin and this is the error I got
[2005/10/19 16:53:48, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: No such file or directory

can this be due to corrupt file system or failing hardware? I get this during 
boot as well (Not really samba related)...

4hda: dma_intr: status=0x51 { DriveReady SeekComplete Error }
4hda: dma_intr: error=0x84 { DriveStatusError BadCRC }
4ide: failed opcode was: unknown

Same goes for my other harddrive (hdb)

(I boot from /dev/hda)

Current versions are
install:/var/log # wbinfo -V
Version 3.0.20-4-SUSE

install:/var/log # uname -r
2.6.13-15-default

I will be happy to send more information :)


-- 
Kind Regards
Daniel H. Jensen

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Need help with username map

2005-10-19 Thread bdehn
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Rex Dieter wrote:
| [EMAIL PROTECTED] wrote:
| We have setup a Samba member server using Winbind (3.0.14a and NT4). I
| am trying to map the NT Domain ids to root  (root = admin
| administrator rdehn) but this seems to be ignored when I try and
| connect to a share. The username map = /etc/samba/smbusers line is
| in the Global section of smb.conf and testparm is OK. What am I
| missing? Is this not possible?
|
| Recent versions of samba (from 3.0.14a?), requires one to
| include the  domain, so you'd want in smbusers:
| root = my_domain\Administrator

The change was introduced in 3.0.8 actually.






cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVTvfIR7qMdg1EfYRAvIHAJ9oC6z/QIbGhDyIW/FYc6VfuBustACeI3ou
4eJOo2GpnQt+t/rbFCbfIZ4=
=+ihN
-END PGP SIGNATURE-

Rex and Jerry,

Thanks for the help! That was it.

Bob Dehn
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] err: Client not found in Kerberos Database

2005-10-19 Thread Lars
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Lars Roland wrote:
 I have written a small guide that will show how to get Samba working
 with AD (it should also work around your error):

 http://wiki.randompage.org/index.php/Using_Samba_on_Debian_Linux_to_authenticate_against_Active_Directory

The guide is relly nice, and i got the connection. I found out that
among other things, a misconfigured DNS wasn't helping..

But that opens up for another group of questions.

1) With net ads group can i only see the default groups, not the ones
created in the AD... And the windows-workstations cant connect the
samba-share (but still see the server)..
HelpServicesGroup
TelnetClients
DHCP Users
DHCP Administrators
Administrators

2) In the future, when i connect to the samba-server, will i stil
control the share with, FX:
read list= @produktion
write list= @produktion

3) Whenever the samba-server or AD restart do i then have enter these to
lines again and again..?

kinit [EMAIL PROTECTED]
net ads join -W testdomain -S win2003test -U administrator


- --
/Lars
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDVmUwSdVv6NOAbD4RAsenAJ9gqtO4PWQdg7pxfwuPdlHNENBhBgCeJhlI
M44hCaKmaTykl/PpC9lBsnk=
=AxXa
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] file permissions with samba shares

2005-10-19 Thread Jack Malone

At 09:05 AM 10/19/2005, Josh Kelley wrote:

On 10/19/05, Jack Malone [EMAIL PROTECTED] wrote:
 I am wondering if there is a way I can setup permission on
 directories in the directory that I have setup for samba shares so
 that no one can move or delete them. The problem I am having of late
 is that someone from within windows will move the directories around

Denying write permission to the parent directory should prevent
someone from deleting or moving child directories.
If I do this will that make it where they can not put files into that 
directory or not. I'm thinking this is happening with drag an drop of 
files from someone that does not know what they are doing or even doing it.






If that won't work, you might instead try using the audit or
extd_audit vfs module to log directory moves and deletions.  Then you
could at least get after the responsible party.

How is this setup, guess I need to see if I find it in the samba docs.

thanks for the reply / info

jack 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd processes 99% cpu and end-user locks up (good gdb attached)

2005-10-19 Thread Nathan Vidican
Thanks, makes sense... so I waited for another (locked up) pid, and did a `gdb 
/usr/samba/sbin/smbd pid` , and got a (hopefully useful) gdb output. I have 
atatched the output here, along with the logfile of the user which the smbd 
process belonged to when it happened.


So here goes guys, what next?


--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate  Tool Ltd.
http://www.wmptl.com/

Martin Zielinski wrote:

On Linux the syntax is gdb -p pid.
   ^^^
The ..39389: No such file... message seems to tell, that you didn't 
attach to the process but tried to debug a file called 39389.




Nathan Vidican wrote:

Okay, re-compiled with -g, (I think), assuming the -g was to CFLAGS, I 
attached the output of ./configure --prefix=/usr/samba CFLAGS=-g, the 
output of make, and the warnings reported by make.


When I run a `top` and get an output similar to this (pardon the 
word-wrap mangling):


last pid: 39681;  load averages:  1.04,  1.02,  0.88   up 3+17:11:28 
10:06:34

67 processes:  1 running, 66 sleeping
CPU states:  6.9% user,  0.0% nice, 43.1% system,  0.0% interrupt, 
50.0% idle

Mem: 56M Active, 1530M Inact, 228M Wired, 59M Cache, 213M Buf, 9144K Free
Swap: 4087M Total, 48K Used, 4087M Free

  PID USERNAME   THR PRI NICE   SIZERES STATE  C   TIME   WCPU 
COMMAND
39389 root 1 1140 30716K  8704K CPU0   0  33:04 99.17% 
smbd
  494 ldap 4  200   118M  7768K kserel 0   0:20  0.00% 
slapd
 7249 root 1  960 21460K  4188K select 0   0:07  0.00% 
cupsd
  318 root 1  960  3532K   940K select 0   0:03  0.00% 
syslogd
39470 root 1  960 30852K  8836K select 0   0:03  0.00% 
smbd
39505 pcarlini 1  960 31256K  9292K select 1   0:03  0.00% 
smbd



I then tried a 'gdb 39389', which gave me a prompt something like this:

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and 
you are
welcome to change it and/or distribute copies of it under certain 
conditions.

Type show copying to see the conditions.
There is absolutely no warranty for GDB.  Type show warranty for 
details.
This GDB was configured as amd64-marcel-freebsd...39389: No such 
file or directory.


(gdb)

Where I then tried 'bt' as you instructed and got:

(gdb) bt
No stack.
(gdb)

What am I doing wrong? Admittedly never done anything before with gdb 
and not too sure of what I'm doing here... assuming CFLAGS=-g was what 
you meant by compile smbd with -g, and I didn't get any warnings 
running gdb pid, so assuming it worked... what next?






wmptwo# gdb /usr/samba/sbin/smbd 39579
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type show copying to see the conditions.
There is absolutely no warranty for GDB.  Type show warranty for details.
This GDB was configured as amd64-marcel-freebsd...
Attaching to program: /usr/samba/sbin/smbd, process 39579
Reading symbols from /usr/local/lib/libldap-2.2.so.7...done.
Loaded symbols for /usr/local/lib/libldap-2.2.so.7
Reading symbols from /usr/local/lib/liblber-2.2.so.7...done.
Loaded symbols for /usr/local/lib/liblber-2.2.so.7
Reading symbols from /usr/lib/libgssapi.so.8...done.
Loaded symbols for /usr/lib/libgssapi.so.8
Reading symbols from /usr/lib/libkrb5.so.8...done.
Loaded symbols for /usr/lib/libkrb5.so.8
Reading symbols from /usr/lib/libasn1.so.8...done.
Loaded symbols for /usr/lib/libasn1.so.8
Reading symbols from /lib/libcrypto.so.4...done.
Loaded symbols for /lib/libcrypto.so.4
Reading symbols from /usr/lib/libroken.so.8...done.
Loaded symbols for /usr/lib/libroken.so.8
Reading symbols from /lib/libcrypt.so.3...done.
Loaded symbols for /lib/libcrypt.so.3
Reading symbols from /usr/lib/libcom_err.so.3...done.
Loaded symbols for /usr/lib/libcom_err.so.3
Reading symbols from /usr/local/lib/libcups.so.2...done.
Loaded symbols for /usr/local/lib/libcups.so.2
Reading symbols from /usr/local/lib/libgnutls.so.12...done.
Loaded symbols for /usr/local/lib/libgnutls.so.12
Reading symbols from /usr/local/lib/libgcrypt.so.13...done.
Loaded symbols for /usr/local/lib/libgcrypt.so.13
Reading symbols from /usr/local/lib/libgpg-error.so.1...done.
Loaded symbols for /usr/local/lib/libgpg-error.so.1
Reading symbols from /lib/libz.so.3...done.
Loaded symbols for /lib/libz.so.3
Reading symbols from /usr/local/lib/libiconv.so.3...done.
Loaded symbols for /usr/local/lib/libiconv.so.3
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /usr/lib/libssl.so.4...done.
Loaded symbols for /usr/lib/libssl.so.4
Reading symbols from /usr/local/lib/libintl.so.6...done.
Loaded symbols for /usr/local/lib/libintl.so.6
Reading symbols from /usr/local/lib/nss_ldap.so.1...done.
Loaded symbols for 

Re: [Samba] Samba 3.0.20b - still getting Winbind Dead but subsys locked

2005-10-19 Thread Sanjay Upadhyay
Hi,
Just omitted --without-sys-quotas, when building and the winbind
stopped rashing...
just to inform

regards
Sanjay Upadhyay

 +++ Gerald (Jerry) Carter [Tue, Oct 18, 2005 at 11:38:01AM -0500]:
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
 
  Sanjay Upadhyay wrote:
 
  | Sending you the smbd, and winbind logs, both fail. I am
  | sorry to state, net ads join which actuall was
  | successfull when first I had tried fails now. so I am
  | attaching a level 10 log for 'net ad join' also.
  | winbind fails even by hand, logs attached. However I
  | tried a manuall build of samba 3.0.20b on RHEL4 and that
  | worked, so it seems there is some problem in the
  | enterprise builds...
 
  Volker, are you aware of any issues with the 3.0.20b
  builds from SerNet?
 
 
 
 
 
 
 
 
 
  cheers, jerry
  =
  Alleviating the pain of Windows(tm)  --- http://www.samba.org
  GnuPG Key- http://www.plainjoe.org/gpg_public.asc
  There's an anonymous coward in all of us.   --anonymous
  -BEGIN PGP SIGNATURE-
  Version: GnuPG v1.4.0 (GNU/Linux)
  Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
 
  iD8DBQFDVSTpIR7qMdg1EfYRAkupAKDZdpBMSERP+mzcGNDmo2+21J7pbgCgg7mN
  EZ5j3UhFt/1Ad0ADRFbKkPY=
  =KkC7
  -END PGP SIGNATURE-

 --
 ==
 You possess a mind not merely twisted, but actually sprained.
 ==
  Sanjay Upadhyay
  http://supadhyay.blogspot.com


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbd processes 99% cpu and end-user locks up (good gdb attached)

2005-10-19 Thread Gerald (Jerry) Carter

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Nathan Vidican wrote:

| Thanks, makes sense... so I waited for another (locked up)
| pid, and did  a `gdb /usr/samba/sbin/smbd pid` , and
| got a (hopefully useful) gdb output. I have atatched
| the output here, along with the logfile of the
| user which the smbd process belonged to when it happened.

Looks like the OpenLDAP client libs are stuck in a select()
call.  What version of OL are you using?  Is there a newer version you
could try?



(gdb) bt
#0  0x000801cdc1dc in select () from /lib/libc.so.6
#1  0x00080097ab45 in ldap_result () from
/usr/local/lib/libldap-2.2.so.7
#2  0x00080097f32b in ldap_sasl_bind_s () from
/usr/local/lib/libldap-2.2.so.7
#3  0x00080097f830 in ldap_simple_bind_s () from
/usr/local/lib/libldap-2.2.so.7
#4  0x006bc278 in smbldap_connect_system (ldap_state=0x90eb48,
ldap_struct=0x991200) at lib/smbldap.c:780
#5  0x006bc787 in smbldap_open (ldap_state=0x90eb48) at
lib/smbldap.c:860






cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVmxCIR7qMdg1EfYRAsfeAJ9qzQGJoJ/v9mHJNRP8JPa5jr5iowCfW7wF
N7SfAtnlJBizThAQP87QpDw=
=qBu1
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd processes 99% cpu and end-user locks up (good gdb attached)

2005-10-19 Thread Nathan Vidican
I've got openldap-2.2.27 installed via FreeBSD ports-collection; made from 
source on this machine, I can quite easily swap it out for another version, any 
suggestions? - OpenLDAP.org lists 2.2.26 as the most 'stable' version, I have 
tried newer ones with little success before.


Do I need to re-compile samba after updating openldap? Does samba include 
updated source files/libraries from openldap, or does it just access system 
openldap libs as it appaears in the gdb output (ie: upgrade 
/usr/local/lib/libldap-2.2.so.7 vs upgrading openldap+samba too)



Gerald (Jerry) Carter wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Nathan Vidican wrote:

| Thanks, makes sense... so I waited for another (locked up)
| pid, and did  a `gdb /usr/samba/sbin/smbd pid` , and
| got a (hopefully useful) gdb output. I have atatched
| the output here, along with the logfile of the
| user which the smbd process belonged to when it happened.

Looks like the OpenLDAP client libs are stuck in a select()
call.  What version of OL are you using?  Is there a newer version you
could try?



(gdb) bt
#0  0x000801cdc1dc in select () from /lib/libc.so.6
#1  0x00080097ab45 in ldap_result () from
/usr/local/lib/libldap-2.2.so.7
#2  0x00080097f32b in ldap_sasl_bind_s () from
/usr/local/lib/libldap-2.2.so.7
#3  0x00080097f830 in ldap_simple_bind_s () from
/usr/local/lib/libldap-2.2.so.7
#4  0x006bc278 in smbldap_connect_system (ldap_state=0x90eb48,
ldap_struct=0x991200) at lib/smbldap.c:780
#5  0x006bc787 in smbldap_open (ldap_state=0x90eb48) at
lib/smbldap.c:860






cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVmxCIR7qMdg1EfYRAsfeAJ9qzQGJoJ/v9mHJNRP8JPa5jr5iowCfW7wF
N7SfAtnlJBizThAQP87QpDw=
=qBu1
-END PGP SIGNATURE-





--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate  Tool Ltd.
http://www.wmptl.com/
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba Users

2005-10-19 Thread Van Hoff, Mike
I am running Samba version 3.0.13-1.1-SUSE.

 

I am a bit new to samba. I am running Samba version 3.0.13-1.1-SUSE with
unix users as samba users (no AD).

 

Is there a method of listing enabled samba users other than viewing the
/etc/passwd file?

 

Thanks

 

 

 



CONFIDENTIAL NOTICE:
This e-mail message and any attachment(s) (collectively, this 'Email') are 
intended
only for the confidential use of the recipient(s) named above. If the reader of 
this
message is not the intended recipient named above or an agent responsible for
delivering it to the intended recipient named above, you have received this 
Email in error.
Please notify the sender immediately and permanently delete this Email and any 
copies thereof.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba with ADS. winbindd ignore for user authentication

2005-10-19 Thread Oliver Neubauer

Hello,

I'm trying to set up samba using ADS for authentication.

I can successfully join the samba machine to the domain. Windows hosts 
can see the samba machine.


After successfully joining, doing:
# wbinfo -u
shows me ADS-defined users. Same goes for groups.

However, when I try and assign one of those users ownership of a file, I 
get:


# chown user1 /tmp/test
chown: test1: illegal user name

even though that user is a valid AD user.

Interestingly, I was able to do this successfully on another install. As 
long as smbd/winbindd are running, I could assign file ownership to AD 
users (from the samba machine). Accordingly, they would be mapped in the 
winbindd_idmap.tdb file, and for all intents and purposes, were valid 
filesystem users.


On this particular problem-install it seems that winbindd is never even 
consulted when changing ownership (tracing the process shows no activity 
during chowns). I have set the nsswitch.conf file accordingly:


# cat /etc/nsswitch.conf
group: files winbind
group_compat: nis
hosts: files dns
networks: files
passwd: files winbind
passwd_compat: nis
shells: files

Similarly, trying to access the shares via a windows machine fails. The 
pertinent log dump from smbd shows this:


[2005/10/19 11:46:12, 1] smbd/sesssetup.c:reply_spnego_kerberos(263)
  Username NTFWIN\test1 is invalid on this system

So it's like the system doesn't know about the AD users at all, therefor 
no authetication can take place, and the SID to User ID mappings are 
irrelevant.


The most  obvious difference between the working and not-working 
installs are that the one I am having a problem with is operating in a 
chrooted environment. (yes, the nsswitch.conf file is set within the 
chroot as well ;).


It's also running on 4.x FreeBSD as opposed to 5.x.
Now, I know there were some issues with 4.x and AD with regards to 
OpenSSL/Kerberos, but given  that eveything compiled, I can connect to 
the domain, list AD users, and see the correct user names in the smbd 
log, I think all of that is working. Maybe I'm wrong.


If anyone has any insight or troubleshooting tips I would greatly 
appreciate it.


cheers
Oliver


# smbd -b
snip

Paths:
   SBINDIR: /usr/local/nf/sbin
   BINDIR: /usr/local/nf/bin
   SWATDIR: /usr/local/nf/swat
   CONFIGFILE: /usr/local/nf/etc/smb.conf
   LOGFILEBASE: /usr/local/nf/var/samba
   LMHOSTSFILE: /usr/local/nf/etc/lmhosts
   LIBDIR: /usr/local/nf/lib
   SHLIBEXT: so
   LOCKDIR: /usr/local/nf/var/samba/lock
   PIDDIR: /usr/local/nf/var/samba/pid
   SMB_PASSWD_FILE: /usr/local/nf/var/samba/private/smbpasswd
   PRIVATE_DIR: /usr/local/nf/var/samba/private

 System Headers:
   HAVE_SYS_ACL_H
   HAVE_SYS_CDEFS_H
   HAVE_SYS_EXTATTR_H
   HAVE_SYS_FCNTL_H
   HAVE_SYS_FILIO_H
   HAVE_SYS_IOCTL_H
   HAVE_SYS_IPC_H
   HAVE_SYS_MMAN_H
   HAVE_SYS_MOUNT_H
   HAVE_SYS_PARAM_H
   HAVE_SYS_RESOURCE_H
   HAVE_SYS_SELECT_H
   HAVE_SYS_SHM_H
   HAVE_SYS_SOCKET_H
   HAVE_SYS_SOCKIO_H
   HAVE_SYS_STAT_H
   HAVE_SYS_SYSCALL_H
   HAVE_SYS_SYSLOG_H
   HAVE_SYS_TIME_H
   HAVE_SYS_TYPES_H
   HAVE_SYS_UIO_H
   HAVE_SYS_UNISTD_H
   HAVE_SYS_UN_H
   HAVE_SYS_WAIT_H

 Headers:
   HAVE_AIO_H
   HAVE_ARPA_INET_H
   HAVE_COM_ERR_H
   HAVE_CTYPE_H
   HAVE_DIRENT_H
   HAVE_DLFCN_H
   HAVE_FCNTL_H
   HAVE_GLOB_H
   HAVE_GRP_H
   HAVE_GSSAPI_H
   HAVE_INTTYPES_H
   HAVE_KRB5_H
   HAVE_LANGINFO_H
   HAVE_LBER_H
   HAVE_LDAP_H
   HAVE_LIMITS_H
   HAVE_LOCALE_H
   HAVE_MEMORY_H
   HAVE_NETINET_IN_SYSTM_H
   HAVE_NETINET_IP_H
   HAVE_NETINET_TCP_H
   HAVE_NET_IF_H
   HAVE_POLL_H
   HAVE_READLINE_HISTORY_H
   HAVE_READLINE_READLINE_H
   HAVE_RPCSVC_NIS_H
   HAVE_RPCSVC_YPCLNT_H
   HAVE_RPC_RPC_H
   HAVE_SECURITY_PAM_APPL_H
   HAVE_SECURITY_PAM_MODULES_H
   HAVE_SECURITY__PAM_MACROS_H
   HAVE_STDARG_H
   HAVE_STDLIB_H
   HAVE_STRINGS_H
   HAVE_STRING_H
   HAVE_SYSLOG_H
   HAVE_TERMIOS_H
   HAVE_UNISTD_H
   HAVE_UTIME_H

 UTMP Options:
   HAVE_UTMP_H
   HAVE_UT_UT_HOST
   HAVE_UT_UT_NAME
   HAVE_UT_UT_TIME
   WITH_UTMP

 HAVE_* Defines:
   HAVE_ADDR_TYPE_IN_KRB5_ADDRESS
   HAVE_AP_OPTS_USE_SUBKEY
   HAVE_ASPRINTF
   HAVE_ASPRINTF_DECL
   HAVE_ATEXIT
   HAVE_BER_SCANF
   HAVE_C99_VSNPRINTF
   HAVE_CHMOD
   HAVE_CHOWN
   HAVE_CHROOT
   HAVE_CONNECT
   HAVE_COPY_AUTHENTICATOR
   HAVE_CRYPT
   HAVE_DEVICE_MAJOR_FN
   HAVE_DEVICE_MINOR_FN
   HAVE_DLCLOSE
   HAVE_DLERROR
   HAVE_DLOPEN
   HAVE_DLSYM
   HAVE_DUP2
   HAVE_ENCTYPE_ARCFOUR_HMAC_MD5
   HAVE_ENDNETGRENT
   HAVE_ERRNO_DECL
   HAVE_EXECL
   HAVE_EXPLICIT_LARGEFILE_SUPPORT
   HAVE_FCHMOD
   HAVE_FCHOWN
   HAVE_FCNTL_LOCK
   HAVE_FSTAT
   HAVE_FSYNC
   HAVE_FTRUNCATE
   HAVE_FTRUNCATE_EXTEND
   HAVE_FUNCTION_MACRO
   HAVE_GETCWD
   HAVE_GETDENTS
   HAVE_GETDIRENTRIES
   HAVE_GETGRENT
   HAVE_GETGRNAM
   HAVE_GETGROUPLIST
   HAVE_GETNETGRENT
   HAVE_GETRLIMIT
   HAVE_GETTIMEOFDAY_TZ
   HAVE_GLOB
   HAVE_GSSAPI
   HAVE_GSS_DISPLAY_STATUS
   HAVE_ICONV
   HAVE_IFACE_AIX
   HAVE_IMMEDIATE_STRUCTURES
   HAVE_INITGROUPS
   HAVE_INNETGR
   HAVE_KRB5
   

Re: [Samba] Samba creating multiple isntances of the deamon

2005-10-19 Thread Jeremy Allison
On Wed, Oct 19, 2005 at 07:37:05AM -0400, Benoit Gauthier wrote:
 (2005.10.19, 07:36)
 
  OK. I've figured out how to do it. Which of the numerous Samba
  processes should I do this on though?
 
  On one of those you've tried to kill with a normal kill command but
  hasn't died
 
 Here is such an output.
 (gdb) bt
 #0  0x007d1402 in ?? ()
 #1  0x005e40a6 in flock () from /lib/libc.so.6
 #2  0x0098cb52 in open_file_ntcreate () from /usr/sbin/smbd
 #3  0x0095c105 in reply_ntcreate_and_X () from /usr/sbin/smbd
 #4  0x009a200f in push_oplock_pending_smb_message () from /usr/sbin/smbd
 #5  0x009a2668 in process_smb () from /usr/sbin/smbd
 #6  0x009a2aa2 in smbd_process () from /usr/sbin/smbd
 #7  0x00b5e970 in main () from /usr/sbin/smbd
 (gdb)

The flock is called only if HAVE_KERNEL_SHARE_MODES is set to true.
What kernel are you running on ? Do you know if any NFS client have
files open on the Samba share also ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] LDAP Account Manager 0.5.1 released

2005-10-19 Thread Roland Gruber

LDAP Account Manager (LAM) 0.5.1 - October 19th, 2005
=


A web frontend for managing accounts stored in an OpenLDAP directory.


Announcement:
-

This release closes some bugs which were reported since 0.5.0.
The Samba 3 module now supports setting the account expiration date.


Features:
-

* management of Unix user and group accounts (posixAccount/posixGroup)
* management of Samba 2.x/3 user and host accounts
  (sambaAccount/sambaSamAccount)
* management of Kolab 2 accounts (kolabInetorgPerson)
* profiles for account creation
* account creation via file upload
* automatic creation/deletion of home directories
* setting quotas
* PDF output for all accounts
* editor for organizational units (OU)
* schema browser
* tree view
* multiple configuration files
* multi-language support (Catalan, English, French, German, Hungarian,
  Italian, Japanese, Spanish)
* support for LDAP+SSL


Availability:
-

This software is available under the GNU General Public License V2.0.

You can get the newest version at http://lam.sf.net.
It may take some time until you can download the files from all mirrors.

File formats: DEB, tar.gz

There is also a FreeBSD port.

Debian users may use the packages in unstable.


Support:


If you find a bug please file a bug report. For questions or
implementing new features please use the forum and feature request
tracker at our Sourceforge homepage http://www.sf.net/projects/lam.



Authors  Copyright:


Copyright (C) 2003 - 2005:
Michael Duergner [EMAIL PROTECTED]
Roland Gruber [EMAIL PROTECTED]
Tilo Lutz [EMAIL PROTECTED]


LAM is published under the GNU General Public License.
The comlete list of licenses can be found in the copyright file.





signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Windows group file permission problem

2005-10-19 Thread Colht, Charles
CentOS 3.5 
samba3-3.0.20a-24
Security ADS

I can't get windows group permissions on shares to work except for 'domain 
users'. The windows group I am trying to use is Unix.Samba. This group does not 
exist on the linux box. It resolves correctly using getent group and when I 
chgrp files to unix.samba, ls shows the group ownership as Unix.Samba. getent 
group shows this group with the proper members. From XP, I am logged in with an 
account in this group. But if I try to access files, I get denied if the files 
aren't world read/write.If I change the unix group on the file to 'Domain 
users' it works. I noticed in swat if I look at status, my group is listed as 
'Domain Users'. I assume this is my default group.

What am I doing wrong? Sorry about the long post. 

Chuck

smb.conf:


[global]
workgroup = XXX
realm = CORP.XX.COM
server string = ONMS-Samba
security = ADS
auth methods = winbind
password server = XXXad6
username map = /etc/samba/smbusers
log level = 10
syslog = 0
log file = /var/log/samba/%m.log
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
load printers = No
printcap name = CUPS
disable spoolss = Yes
show add printer wizard = No
add user script = /usr/sbin/adduser -g winusers %U
preferred master = No
dns proxy = No
ldap ssl = no
idmap uid = 15000-35000
idmap gid = 15000-35000
template homedir = /home/win/%D/%U
template shell = /bin/bash
winbind use default domain = no
winbind nested groups = Yes
cups options = raw

[test]
comment = test Stuff
path = /usr/local/samba
valid users = @Unix.Samba
read only = No

#

winbindd log:


[2005/10/19 08:13:42, 6] nsswitch/winbindd.c:new_connection(596)
  accepted socket 27
[2005/10/19 08:13:42, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2005/10/19 08:13:42, 3] 
nsswitch/winbindd_misc.c:winbindd_interface_version(460)
  [0]: request interface version
[2005/10/19 08:13:42, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2005/10/19 08:13:42, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(493)
  [0]: request location of privileged pipe
[2005/10/19 08:13:42, 6] nsswitch/winbindd.c:new_connection(596)
  accepted socket 34
[2005/10/19 08:13:42, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn DOMAIN_INFO
[2005/10/19 08:13:42, 3] nsswitch/winbindd_misc.c:winbindd_domain_info(355)
  [0]: domain_info [CORP.ACSALASKA.COM]
[2005/10/19 08:13:42, 6] nsswitch/winbindd.c:new_connection(596)
  accepted socket 27
[2005/10/19 08:13:42, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn INTERFACE_VERSION
[2005/10/19 08:13:42, 3] 
nsswitch/winbindd_misc.c:winbindd_interface_version(460)
  [0]: request interface version
[2005/10/19 08:13:42, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2005/10/19 08:13:42, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(493)
  [0]: request location of privileged pipe
[2005/10/19 08:13:42, 6] nsswitch/winbindd.c:new_connection(596)
  accepted socket 35
[2005/10/19 08:13:42, 10] nsswitch/winbindd.c:process_request(325)
  process_request: request fn GETPWNAM
[2005/10/19 08:13:42, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(336)
  [0]: getpwnam acs\acsxpeit$
[2005/10/19 08:13:42, 10] 
nsswitch/winbindd_cache.c:cache_retrieve_response(1533)
  Retrieving response for pid 12260
[2005/10/19 08:13:42, 10] 
nsswitch/winbindd_cache.c:cache_retrieve_response(1533)
  Retrieving response for pid 12260
[2005/10/19 08:13:42, 10] sam/idmap_util.c:idmap_sid_to_uid(144)
  idmap_sid_to_uid: sid = [S-1-5-21-335968984-468744214-619646970-18705]
[2005/10/19 08:13:42, 10] sam/idmap_tdb.c:db_get_id_from_sid(315)
  db_get_id_from_sid
[2005/10/19 08:13:42, 10] sam/idmap_tdb.c:internal_get_id_from_sid(221)
  internal_get_id_from_sid: fetching record 
S-1-5-21-335968984-468744214-619646970-18705 of type 0x1
[2005/10/19 08:13:42, 10] sam/idmap_tdb.c:internal_get_id_from_sid(228)
  internal_get_id_from_sid: record S-1-5-21-335968984-468744214-619646970-18705 
- UID 17095
[2005/10/19 08:13:42, 10] sam/idmap_tdb.c:internal_get_id_from_sid(243)
  internal_get_id_from_sid: ID_USERID fetching record 
S-1-5-21-335968984-468744214-619646970-18705 - UID 17095
[2005/10/19 08:13:42, 10] sam/idmap_tdb.c:internal_get_sid_from_id(190)
  internal_get_sid_from_id: fetching record UID 17095
[2005/10/19 08:13:42, 10] sam/idmap_tdb.c:internal_get_sid_from_id(196)
  internal_get_sid_from_id: fetching record UID 17095 - 
S-1-5-21-335968984-468744214-619646970-18705
[2005/10/19 08:13:42, 10] 

Re: [Samba] Samba creating multiple isntances of the deamon

2005-10-19 Thread Benoit Gauthier
(2005.10.19, 13:10)

 The flock is called only if HAVE_KERNEL_SHARE_MODES is set to
 true. What kernel are you running on ?

Does 2.6.11 make sense?

 Do you know if any NFS client have files open on the Samba share
 also ?

The configuration is like this:

4 external computers run NFS servers.

One Linux box on my network connects to each of these via NFS (thus,
there is only one NFS client machine).

One Windows machine sees the NFS mounts on the local Linux Box via
Samba and a mapped drive L:; it performs the back-ups from the 4
servers.

A second Windows machine also has the Linux box mapped on its own
drive L:.

There are no mounts from the Linux box to the Windows machines (i.e.,
the Linux box cannot see the Windows hard drives).

Does that answer your question? Does it help?


Benoît

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba Users

2005-10-19 Thread John H Terpstra
On Wednesday 19 October 2005 10:19, Van Hoff, Mike wrote:
 I am running Samba version 3.0.13-1.1-SUSE.
 I am a bit new to samba. I am running Samba version 3.0.13-1.1-SUSE with
 unix users as samba users (no AD).
 Is there a method of listing enabled samba users other than viewing the
 /etc/passwd file?

Suggest you follow the examples in the book Samba-3 by Example. It is 
available from Amazon.Com in hard copy, or in PDF from:

http://www.samba.org/samba/docs/Samba3-ByExample.pdf


Enjoy.

- John T.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba creating multiple isntances of the deamon

2005-10-19 Thread Jeremy Allison
On Wed, Oct 19, 2005 at 01:16:57PM -0400, Benoit Gauthier wrote:
 (2005.10.19, 13:10)
 
  The flock is called only if HAVE_KERNEL_SHARE_MODES is set to
  true. What kernel are you running on ?
 
 Does 2.6.11 make sense?
 
  Do you know if any NFS client have files open on the Samba share
  also ?
 
 The configuration is like this:
 
 4 external computers run NFS servers.
 
 One Linux box on my network connects to each of these via NFS (thus,
 there is only one NFS client machine).
 
 One Windows machine sees the NFS mounts on the local Linux Box via
 Samba and a mapped drive L:; it performs the back-ups from the 4
 servers.
 
 A second Windows machine also has the Linux box mapped on its own
 drive L:.
 
 There are no mounts from the Linux box to the Windows machines (i.e.,
 the Linux box cannot see the Windows hard drives).
 
 Does that answer your question? Does it help?

Ok, if I understand you you're re-exporting an NFS mount from the
Linux box to the Windows clients via Samba. Looks to me like the
kernel share mode code isn't working over NFS properly. Can you
try removing the define #define HAVE_KERNEL_SHARE_MODES 1 from
include/config.h and rebuilding - that should stop it making this
call.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Permissions when MOVING files

2005-10-19 Thread Travis Knabe
We've got a large user base.

They all have a home directory and within it a public_html directory.  Each of 
the directories have and need different permissions set on them.

I've tried using ACL's, setgid bits, all the  samba options, however when a 
file is _MOVED_ from their home directory to their  public_html directory the 
permissions don't change.  Even with the different options discussed above.  I 
imagine that if the file is moved on the same filesystem, the file attributes 
don't change at all, its only when the file has to be created, and that's why a 
copy works.  Anyone else have similar issues?  If so how did you  overcome?

Thanks in advance.




Travis Knabe 
Assistant Director
Computing Services
Western Oregon University
(503) 838-8507

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba Users

2005-10-19 Thread Jeremy Allison
On Wed, Oct 19, 2005 at 11:37:15AM -0600, John H Terpstra wrote:
 On Wednesday 19 October 2005 10:19, Van Hoff, Mike wrote:
  I am running Samba version 3.0.13-1.1-SUSE.
  I am a bit new to samba. I am running Samba version 3.0.13-1.1-SUSE with
  unix users as samba users (no AD).
  Is there a method of listing enabled samba users other than viewing the
  /etc/passwd file?
 
 Suggest you follow the examples in the book Samba-3 by Example. It is 
 available from Amazon.Com in hard copy, or in PDF from:
 
 http://www.samba.org/samba/docs/Samba3-ByExample.pdf

By the way John, I just wanted to congratulate you
publicly on the servies of articles that got linked
to on Slashdot yesterday : 

http://linux.slashdot.org/article.pl?sid=05/10/18/2036220tid=109tid=106

Really well written, very important and incisive work !

Thanks a lot !

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd processes 99% cpu and end-user locks up (good gdb attached)

2005-10-19 Thread Nathan Vidican
Attached two more gdb's, seems to be the same output - working on compiling new 
openldap librairies now just thought to include in case something differed or 
sparked other ideas.



Gerald (Jerry) Carter wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Nathan Vidican wrote:

| Thanks, makes sense... so I waited for another (locked up)
| pid, and did  a `gdb /usr/samba/sbin/smbd pid` , and
| got a (hopefully useful) gdb output. I have atatched
| the output here, along with the logfile of the
| user which the smbd process belonged to when it happened.

Looks like the OpenLDAP client libs are stuck in a select()
call.  What version of OL are you using?  Is there a newer version you
could try?



(gdb) bt
#0  0x000801cdc1dc in select () from /lib/libc.so.6
#1  0x00080097ab45 in ldap_result () from
/usr/local/lib/libldap-2.2.so.7
#2  0x00080097f32b in ldap_sasl_bind_s () from
/usr/local/lib/libldap-2.2.so.7
#3  0x00080097f830 in ldap_simple_bind_s () from
/usr/local/lib/libldap-2.2.so.7
#4  0x006bc278 in smbldap_connect_system (ldap_state=0x90eb48,
ldap_struct=0x991200) at lib/smbldap.c:780
#5  0x006bc787 in smbldap_open (ldap_state=0x90eb48) at
lib/smbldap.c:860






cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVmxCIR7qMdg1EfYRAsfeAJ9qzQGJoJ/v9mHJNRP8JPa5jr5iowCfW7wF
N7SfAtnlJBizThAQP87QpDw=
=qBu1
-END PGP SIGNATURE-





--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate  Tool Ltd.
http://www.wmptl.com/
wmptwo# top
last pid: 64237;  load averages:  1.18,  0.68,  0.30
up 3+20:40:56  13:36:02
72 processes:  3 running, 69 sleeping
CPU states: 10.3% user,  0.0% nice, 40.0% system,  0.0% interrupt, 49.7% idle
Mem: 59M Active, 1486M Inact, 226M Wired, 73M Cache, 213M Buf, 37M Free
Swap: 4087M Total, 48K Used, 4087M Free

  PID USERNAME   THR PRI NICE   SIZERES STATE  C   TIME   WCPU COMMAND
63860 root 1 1230 31072K  9000K CPU0   0   3:04 99.02% smbd
64222 asmyrnis 1  960 30680K  8684K select 1   0:00  0.05% smbd
  494 ldap 4  200   118M  7780K kserel 1   0:23  0.00% slapd
 7249 root 1  960 21460K  4184K select 0   0:15  0.00% cupsd
39470 rtalbot  1  960 30904K  8796K select 1   0:05  0.00% smbd
39505 root 1  960 31252K  9216K select 0   0:05  0.00% smbd
wmptwo#

wmptwo# /usr/samba/bin/net status sessions | grep asmyrnis
63860   asmyrnis  estimatingwmpest01 (10.0.0.22)
64222   asmyrnis  estimatingwmpest01 (10.0.0.22)
wmptwo#

wmptwo# gdb /usr/samba/sbin/smbd 63860
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type show copying to see the conditions.
There is absolutely no warranty for GDB.  Type show warranty for details.
This GDB was configured as amd64-marcel-freebsd...
Attaching to program: /usr/samba/sbin/smbd, process 63860
Reading symbols from /usr/local/lib/libldap-2.2.so.7...done.
Loaded symbols for /usr/local/lib/libldap-2.2.so.7
Reading symbols from /usr/local/lib/liblber-2.2.so.7...done.
Loaded symbols for /usr/local/lib/liblber-2.2.so.7
Reading symbols from /usr/lib/libgssapi.so.8...done.
Loaded symbols for /usr/lib/libgssapi.so.8
Reading symbols from /usr/lib/libkrb5.so.8...done.
Loaded symbols for /usr/lib/libkrb5.so.8
Reading symbols from /usr/lib/libasn1.so.8...done.
Loaded symbols for /usr/lib/libasn1.so.8
Reading symbols from /lib/libcrypto.so.4...done.
Loaded symbols for /lib/libcrypto.so.4
Reading symbols from /usr/lib/libroken.so.8...done.
Loaded symbols for /usr/lib/libroken.so.8
Reading symbols from /lib/libcrypt.so.3...done.
Loaded symbols for /lib/libcrypt.so.3
Reading symbols from /usr/lib/libcom_err.so.3...done.
Loaded symbols for /usr/lib/libcom_err.so.3
Reading symbols from /usr/local/lib/libcups.so.2...done.
Loaded symbols for /usr/local/lib/libcups.so.2
Reading symbols from /usr/local/lib/libgnutls.so.12...done.
Loaded symbols for /usr/local/lib/libgnutls.so.12
Reading symbols from /usr/local/lib/libgcrypt.so.13...done.
Loaded symbols for /usr/local/lib/libgcrypt.so.13
Reading symbols from /usr/local/lib/libgpg-error.so.1...done.
Loaded symbols for /usr/local/lib/libgpg-error.so.1
Reading symbols from /lib/libz.so.3...done.
Loaded symbols for /lib/libz.so.3
Reading symbols from /usr/local/lib/libiconv.so.3...done.
Loaded symbols for /usr/local/lib/libiconv.so.3
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /usr/lib/libssl.so.4...done.
Loaded symbols for /usr/lib/libssl.so.4
Reading symbols from /usr/local/lib/libintl.so.6...done.
Loaded symbols for /usr/local/lib/libintl.so.6
Reading symbols from /usr/local/lib/nss_ldap.so.1...done.

[Samba] Re: samba with ADS. winbindd ignore for user authentication

2005-10-19 Thread Rex Dieter

Oliver Neubauer wrote:


I'm trying to set up samba using ADS for authentication.

I can successfully join the samba machine to the domain. Windows hosts 
can see the samba machine.


After successfully joining, doing:
# wbinfo -u
shows me ADS-defined users. Same goes for groups.

However, when I try and assign one of those users ownership of a file, I 
get:


# chown user1 /tmp/test
chown: test1: illegal user name
even though that user is a valid AD user.


You need to configure pam to use nss_winbind, see
http://us1.samba.org/samba/docs/man/Samba3-HOWTO/winbind.html#id2634773
for example, my /etc/pam.d/system-auth contains references to pam_winbind:

authsufficient/lib/security/$ISA/pam_winbind.so use_first_pass
...
account [default=bad success=ok user_unknown=ignore] 
/lib/security/$ISA/pam_winbind.so

...
passwordsufficient/lib/security/$ISA/pam_winbind.so use_authtok

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Permissions when MOVING files

2005-10-19 Thread Andrew Morgan


On Wed, 19 Oct 2005, Travis Knabe wrote:


We've got a large user base.

They all have a home directory and within it a public_html directory. 
Each of the directories have and need different permissions set on them.


I've tried using ACL's, setgid bits, all the samba options, however when 
a file is _MOVED_ from their home directory to their public_html 
directory the permissions don't change.  Even with the different options 
discussed above.  I imagine that if the file is moved on the same 
filesystem, the file attributes don't change at all, its only when the 
file has to be created, and that's why a copy works.  Anyone else have 
similar issues?  If so how did you overcome?


We have two shares for each user, one for their homedir and one for their 
public_html.  Here is our share config:


[homes]
comment = Home Directories
browseable = false
read only = no
create mode = 0700
hide files = /public_html/

[public_html]
comment = Web page
read only = no
path = %H/public_html
create mode = 0755



Andy
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Help with connection reset by peer

2005-10-19 Thread Steve
Got a wireless A network. 1 client is connected to a wireless access 
point, which is running WPA-PSK (TKIP)


Several times each day, client Windows XP machine loses connection, on 
the Samba server, log file only shows:


[2005/10/19 14:00:53, 0] lib/util_sock.c:read_socket_data(384)
  read_socket_data: recv failure for 4. Error = Connection reset by peer

Other than Samba, which client pc is connected to 8 hours a day, client 
pc has no trouble with web browsing, email, etc. only Samba.


Wired, this does not happen obviously, but, no good way for that machine 
to be wired.


Used to run Wireless G, there are more than 20 networks in our area, 
and, we could never get anywhere with G, so, have been using A with 
great signal strength for quite some time now. It's just this annoyance.


Is there any tunable settings that might prevent these disconnects on 
the Samba end?


Anyone have thoughts on the PC or access point end?

Steve

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Help with connection reset by peer

2005-10-19 Thread Jeremy Allison
On Wed, Oct 19, 2005 at 02:33:37PM -0500, Steve wrote:
 Got a wireless A network. 1 client is connected to a wireless access 
 point, which is running WPA-PSK (TKIP)
 
 Several times each day, client Windows XP machine loses connection, on 
 the Samba server, log file only shows:
 
 [2005/10/19 14:00:53, 0] lib/util_sock.c:read_socket_data(384)
   read_socket_data: recv failure for 4. Error = Connection reset by peer
 
 Other than Samba, which client pc is connected to 8 hours a day, client 
 pc has no trouble with web browsing, email, etc. only Samba.
 
 Wired, this does not happen obviously, but, no good way for that machine 
 to be wired.
 
 Used to run Wireless G, there are more than 20 networks in our area, 
 and, we could never get anywhere with G, so, have been using A with 
 great signal strength for quite some time now. It's just this annoyance.
 
 Is there any tunable settings that might prevent these disconnects on 
 the Samba end?

This is not a Samba problem. The client is dropping the TCP
connection - we don't know why. That's what the message Connection reset by 
peer
means.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Help with connection reset by peer

2005-10-19 Thread Steve





This is not a Samba problem. The client is dropping the TCP
connection - we don't know why. That's what the message Connection reset by 
peer
means.

Jeremy.


Yes, I suppose it could be, except it runs internet applications 24 
hours a day and they do not lose their connections (some are background 
jobs). So, perhaps you are saying for some nanosecond it has done 
something different that only affects Samba and not other connections. 
And that could well be true. Which is why I am hoping someone somewhere 
can help determine a tuning that is specific to Samba as there is no 
trouble running the other 10 or so apps that are run on that machine. 
So, one could say it is not a Samba question, but, it only occurs with 
Samba, it may not be the fault of Samba, still, it is a Samba related 
question. If one asked in a wireless group, they say it's not a wireless 
problem (and they don't know the first thing about Samba). So, there is 
a solution or reason somewhere, just have to find where or hope someone 
with this experience has a solution.


More info: 3 different access points from the 3 typical manufactuers, 3 
different client cards, same result.


Steve

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Help with connection reset by peer

2005-10-19 Thread Jeremy Allison
On Wed, Oct 19, 2005 at 03:32:58PM -0500, Steve wrote:
 
 Yes, I suppose it could be, except it runs internet applications 24 
 hours a day and they do not lose their connections (some are background 
 jobs). So, perhaps you are saying for some nanosecond it has done 
 something different that only affects Samba and not other connections. 
 And that could well be true.

That component would be the Microsoft client redirector software on
the client. That's the difference between SMB and the internet
applications (which I'm assuming run pure WinSock).

 More info: 3 different access points from the 3 typical manufactuers, 3 
 different client cards, same result.

Of course. If it's a redirector client problem, that wouldn't make
a difference at all.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] LDAP Account Manager 0.5.1 released

2005-10-19 Thread Robert Schetterer

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Roland,
i tried lam 0.5.1
and everything worked nice, but lamdaemon on suse 9.3 failed
i could do auth as is written in the faqs but
failed for creation of user homes on user add from lam.
So i will give lam 5.1 a try at suse 10
Anyoneone else knows this on suse 9.3 ?
Regards

Roland Gruber schrieb:
| LDAP Account Manager (LAM) 0.5.1 - October 19th, 2005
| =
|
|
| A web frontend for managing accounts stored in an OpenLDAP directory.
|
|
| Announcement:
| -
|
| This release closes some bugs which were reported since 0.5.0.
| The Samba 3 module now supports setting the account expiration date.
|
|
| Features:
| -
|
| * management of Unix user and group accounts (posixAccount/posixGroup)
| * management of Samba 2.x/3 user and host accounts
|   (sambaAccount/sambaSamAccount)
| * management of Kolab 2 accounts (kolabInetorgPerson)
| * profiles for account creation
| * account creation via file upload
| * automatic creation/deletion of home directories
| * setting quotas
| * PDF output for all accounts
| * editor for organizational units (OU)
| * schema browser
| * tree view
| * multiple configuration files
| * multi-language support (Catalan, English, French, German, Hungarian,
|   Italian, Japanese, Spanish)
| * support for LDAP+SSL
|
|
| Availability:
| -
|
| This software is available under the GNU General Public License V2.0.
|
| You can get the newest version at http://lam.sf.net.
| It may take some time until you can download the files from all mirrors.
|
| File formats: DEB, tar.gz
|
| There is also a FreeBSD port.
|
| Debian users may use the packages in unstable.
|
|
| Support:
| 
|
| If you find a bug please file a bug report. For questions or
| implementing new features please use the forum and feature request
| tracker at our Sourceforge homepage http://www.sf.net/projects/lam.
|
|
|
| Authors  Copyright:
| 
|
| Copyright (C) 2003 - 2005:
| Michael Duergner [EMAIL PROTECTED]
| Roland Gruber [EMAIL PROTECTED]
| Tilo Lutz [EMAIL PROTECTED]
|
|
| LAM is published under the GNU General Public License.
| The comlete list of licenses can be found in the copyright file.
|
|
|
|


- --
Mit freundlichen Gruessen
Best Regards
Robert Schetterer

robert_at_schetterer.org
Munich / Bavaria / Germany
https://www.schetterer.org

\**
\* gnupgp
\* public key:
\* https://www.schetterer.org/public.key
\**
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVrB+b0iqzJq+0MgRAiVsAJ4sJJ0wp53yckoJIHaeeyfbkmg3RwCcDp/O
nlX3Di7db5jL5nwnJZBCNtE=
=Dxln
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.0.21pre1 Available for Download

2005-10-19 Thread Robert Schetterer

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Jerry ,

Incompatibilities with newer MS Windows hotfixes,
what kind of hotfixes exactly?
is there an more detailed faq about this and thenice new features
online...or in soures?
Nice Work
Regards

Gerald (Jerry) Carter schrieb:
| ==
|  I feel like I'm waiting on some event
|before I grow up. Please wake me up
|so I don't miss it.
|   -- anonymous
| ==
| Release Announcements
| =
|
| This is a preview release of the Samba 3.0.21 code base and
| is provided for testing only.  This release is *not* intended
| for production servers.  There has been a substantial amount
| of development since the 3.0.20 stable release series.  We
| would like to ask the Samba community for help in testing
| these changes as we work towards the next official, production
| Samba 3.0 release.
|
| Common bugs fixed in 3.0.21pre1 include:
|
| o Missing groups in a user's token when logging
|   in via kerberos
| o Incompatibilities with newer MS Windows hotfixes
|   and embedded OS platforms
|
| New features introduced in Samba 3.0.21pre1 include:
|
| o Complete NTLMv2 support by consolidating
|   authentication mechanism used at the CIFS and
|   RPC layers.
| o The capability to manage Unix services using
|   the Win32 Service Control API.
| o The capability to view external Unix log files
|   via the Microsoft Event Viewer.
| o New libmsrpc share library for application
|   developers.
| o Rewrite of CIFS oplock implementation.
|
|
| smb.conf changes
| 
|
| Parameter Name Action
| -- --
| eventlog list  New
| iprint server  New
| map read only  New
| rename user script New
| svcctl listRenamed from 'enable svcctl'
|
|
| 
| Download Details
| 
|
| The uncompressed tarball and patch files have been signed
| using GnuPG (ID F17F9772).  The source code can be
| downloaded from:
|
| http://download.samba.org/samba/ftp/
|
| The release notes are available online at:
|
| http://www.samba.org/samba/ftp/pre/WHATSNEW-3-0-20pre1.txt
|
| Binary packages are available at
|
| http://download.samba.org/samba/ftp/Binary_Packages/
|
| Our Code, Our Bugs, Our Responsibility.
| (https://bugzilla.samba.org/)
|
| --Enjoy
| The Samba Team

- --
Mit freundlichen Gruessen
Best Regards
Robert Schetterer

robert_at_schetterer.org
Munich / Bavaria / Germany
https://www.schetterer.org

\**
\* gnupgp
\* public key:
\* https://www.schetterer.org/public.key
\**
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVrFQb0iqzJq+0MgRAhb5AJ9QWf+BgIwgXY5leZbrhKJvBpGF7gCghwkB
psJcjoIRh1WUHxSPvamBAwo=
=jM8r
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Help with connection reset by peer

2005-10-19 Thread Steve





Of course. If it's a redirector client problem, that wouldn't make
a difference at all.

Jeremy.


So, on XP, I take it you are referring to

Client for Microsoft Networks, correct? You are suggesting the problem 
lies with this client, which is used with non Samba servers (native 
Windoze servers) just fine. Any tips as to how to solve that then? 
Tunings, etc.?


Steve

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba creating multiple isntances of the deamon

2005-10-19 Thread Benoit Gauthier
(2005.10.19, 16:59)

 Ok, if I understand you you're re-exporting an NFS mount from the
 Linux box to the Windows clients via Samba. Looks to me like the
 kernel share mode code isn't working over NFS properly. Can you try
 removing the define #define HAVE_KERNEL_SHARE_MODES 1 from
 include/config.h and rebuilding - that should stop it making this
 call.

I can't find the include/config.h in question. Is this in the kernel
code or in the Samba code (which I don't have)? Can you be more
specific as to where this would be found?

Thanks!

Benoît

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Help with connection reset by peer

2005-10-19 Thread Jeremy Allison
On Wed, Oct 19, 2005 at 03:52:51PM -0500, Steve wrote:
 
 So, on XP, I take it you are referring to
 
 Client for Microsoft Networks, correct? You are suggesting the problem 
 lies with this client, which is used with non Samba servers (native 
 Windoze servers) just fine. Any tips as to how to solve that then? 
 Tunings, etc.?

Yep. Now, if it works over the same wireless interface to Windows
server correctly, but not Samba ones then I'd suggest doing monitoring
using a packet sniffer like ethereal and capture the long term traffic
between the Windows client - Windows server and Windows client - Samba
server and we'll take a look at the differences. Note when the client
reports connection lost.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd processes 99% cpu and end-user locks up (good gdb attached)

2005-10-19 Thread Nathan Vidican
I managed to update the system ldap librairies to 2.2.9, but I cannot update 
them beyond that becuase of the dependency from nss_ldap.


Long-story short, the only source of nss_ldap I can get to even run make on is 
that included in the freebsd ports collection (cvsup'd this afternoon), which is 
nss_ldap-1.239, the most current code beying 243. I'm gonna bounce a few emails 
back and forth with nss_ldap developers, but it gave me a good question about 
samba and it's dependancy upon ldap librairies.


Can samba (preferably via ./configure script) have the location to which it 
seeks the ldap librairies over-ridden? As-in with nss_ldap, I can specify 
--with-openldap=/openldap/installed/somewhere/else/ and it seeks lib/libldap*.so 
and include/ldap.h from their. Reason being I have compiled openldap 2.3.11 
using --prefix=/usr/openldap23, I have configured and imported my ldap tree and 
am now using slapd-2.3.11 from this installation, but the system (/usr/local) 
librairies for ldap are still 2.2.9.


So is there an easy way to point samba towards compiling itself to use a 
different openldap distribution, or would this be something one might accomplish 
at run-time?


In the meantime, I'll continue to run using openldap-2.2.9 and see if the issue 
persists.


--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate  Tool Ltd.
http://www.wmptl.com/


Gerald (Jerry) Carter wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Nathan Vidican wrote:

| Thanks, makes sense... so I waited for another (locked up)
| pid, and did  a `gdb /usr/samba/sbin/smbd pid` , and
| got a (hopefully useful) gdb output. I have atatched
| the output here, along with the logfile of the
| user which the smbd process belonged to when it happened.

Looks like the OpenLDAP client libs are stuck in a select()
call.  What version of OL are you using?  Is there a newer version you
could try?



(gdb) bt
#0  0x000801cdc1dc in select () from /lib/libc.so.6
#1  0x00080097ab45 in ldap_result () from
/usr/local/lib/libldap-2.2.so.7
#2  0x00080097f32b in ldap_sasl_bind_s () from
/usr/local/lib/libldap-2.2.so.7
#3  0x00080097f830 in ldap_simple_bind_s () from
/usr/local/lib/libldap-2.2.so.7
#4  0x006bc278 in smbldap_connect_system (ldap_state=0x90eb48,
ldap_struct=0x991200) at lib/smbldap.c:780
#5  0x006bc787 in smbldap_open (ldap_state=0x90eb48) at
lib/smbldap.c:860






cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVmxCIR7qMdg1EfYRAsfeAJ9qzQGJoJ/v9mHJNRP8JPa5jr5iowCfW7wF
N7SfAtnlJBizThAQP87QpDw=
=qBu1
-END PGP SIGNATURE-



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.21pre1 Available for Download

2005-10-19 Thread Gerald (Jerry) Carter

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Robert Schetterer wrote:
| Hi Jerry ,
|
| Incompatibilities with newer MS Windows hotfixes,
| what kind of hotfixes exactly?
| is there an more detailed faq about this and thenice new features
| online...or in soures?

The one line summary is that now we have unified the
authentication mechanisms used by the session setup code
and the rpc bin code so that you should no longer see
unknown auth type 0x9 when dealing with SPNEGO in
rpc bind requests.  And we have complete NTLMv2 support
through the CIFS and RPC layers in Samba now.

What we are still dealing with is the schannel changes in
Windows 2003 sp1 and Windows 200 SP4 SR1.  Those winbindd
issues will be fixed soon.  But maybe not in time for 3.0.21.

WRT to the other features (service control and eventlogs),
we working on some HOWTOs.

I can summarize the ServiceControl stuff like this

$ net groupmap set sid=S-1-5-32-544 unixgroup=admingrp

add 'svcctl list = cups' to smb.conf

$ cd /usr/local/samba/lib (assuming default install)
$ mkdir svcctl
$ cd svcctl
$ ln -s /etc/init.d/cups

Now connect using the service control applet (or MMC
plugin to manage remote computers) using an account
that is a member of the admingrp Unix group.  You
should see some internal services and the CUPS
service listed.  You should be able to start and
stop the cups service  using the Windows tools.




cheers, jerry









cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVrVjIR7qMdg1EfYRAnXoAKCXcRKGDWKXreraFlKbGC/XFGK6kACcDlw+
VjFpbHt2B8fjVLWlrNM5Hs0=
=rg50
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba creating multiple isntances of the deamon

2005-10-19 Thread Jeremy Allison
On Wed, Oct 19, 2005 at 05:00:51PM -0400, Benoit Gauthier wrote:
 (2005.10.19, 16:59)
 
  Ok, if I understand you you're re-exporting an NFS mount from the
  Linux box to the Windows clients via Samba. Looks to me like the
  kernel share mode code isn't working over NFS properly. Can you try
  removing the define #define HAVE_KERNEL_SHARE_MODES 1 from
  include/config.h and rebuilding - that should stop it making this
  call.
 
 I can't find the include/config.h in question. Is this in the kernel
 code or in the Samba code (which I don't have)? Can you be more
 specific as to where this would be found?

Yes, this is in the Samba source code. You should have it as it's
GPL - it's easily downloaded.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd processes 99% cpu and end-user locks up (good gdb attached)

2005-10-19 Thread Gerald (Jerry) Carter

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Nathan Vidican wrote:

| So is there an easy way to point samba towards compiling
| itself to use a  different openldap distribution, or would
| this be something one might accomplish at run-time?

Look at my build script (http://www.samba.org/~jerry/build-samba)
Set
DIRPATH=/path/to/top/level/openldap

and it should work.  It encodes the library search path in
the resulting binaries.  You'll also need to update the
SRCDIR variable.




cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVrakIR7qMdg1EfYRAio2AKCxh4CG4KMLB3M7Chf8F08GxkP0SgCfR201
+ypCRzGhk7PrwkbehjZ5EiM=
=B2H2
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Permissions when MOVING files

2005-10-19 Thread Travis Knabe
Well I was hoping to get away from having to have each user have 2 shares, but 
this is what we've resolved to.  Your implementation is quite nice, and we've 
copied that.  Thanks for the response.

-Travis

On Wed, 2005-10-19 at 10:59, Andrew Morgan wrote:
 On Wed, 19 Oct 2005, Travis Knabe wrote:
 
  We've got a large user base.
 
  They all have a home directory and within it a public_html directory. 
  Each of the directories have and need different permissions set on them.
 
  I've tried using ACL's, setgid bits, all the samba options, however when 
  a file is _MOVED_ from their home directory to their public_html 
  directory the permissions don't change.  Even with the different options 
  discussed above.  I imagine that if the file is moved on the same 
  filesystem, the file attributes don't change at all, its only when the 
  file has to be created, and that's why a copy works.  Anyone else have 
  similar issues?  If so how did you overcome?
 
 We have two shares for each user, one for their homedir and one for their 
 public_html.  Here is our share config:
 
 [homes]
  comment = Home Directories
  browseable = false
  read only = no
  create mode = 0700
  hide files = /public_html/
 
 [public_html]
  comment = Web page
  read only = no
  path = %H/public_html
  create mode = 0755
 
 
 
   Andy



Travis Knabe 
Assistant Director
Computing Services
Western Oregon University
(503) 838-8507

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Dir ec* returns dir name starting with letters EA... come again!?

2005-10-19 Thread Michael Lueck

I take it that this is a bug, maybe related to the fun of Samba and XFS getting 
along I do not know. And I am back level on Samba awaiting the new .deb's. 
Anyway, with that disclamer...

Z:\Download\Topic\OS2\eCSdir ..\ec*
 Volume in drive Z is data
 Volume Serial Number is 1F68-027E

 Directory of Z:\Download\Topic\OS2

08/07/2005  03:10p  DIR  EABrowser
10/17/2005  11:33p  DIR  eCS
   0 File(s)  0 bytes
   2 Dir(s)   8,342,110,208 bytes free

I wondered why EABrowser showed up on my tab key accellerator in one directory 
up. Doing a dir to double check... sure enough it thinks a dir starting EA 
matches the ec* search.

Win2K SP4 client OS
Samba PDC running on Debian Sarge with the 3.0.14a deb that came with Debian 
Sarge.
XFS filesystem on the server

Don't think I am doing anything else / using anything else which would add to 
the potential for this to happen. Any point in sniffing or otherwise since I am 
back level on Samba code?

--
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/

Remove the upper case letters NOSPAM to contact me directly.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] net rpc vampire and filling userPassword

2005-10-19 Thread Thomas.Meyer
Hello,

recently we succeeded in doing a test migration from NT4 to a samba
BDC with LDAP. The LDAP directory is now filled with machine, group
and user account information.

My question:

as I have set the smb.conf parameter ldap passwd sync = Yes, I
would have expected that net rpc vampire would also set the UNIX
password of the LDAP user account entries, i.e. the attribute
userPassword.

This password appears to be empty.

Can somebody offer help?

Regards,

 Thomas Meyer, EDV-Systemadministrator
  [EMAIL PROTECTED]
  Deutsches Literaturarchiv Marbach
  Bereich EDV
  Schillerhoehe 8-10
  D-71672 Marbach
 Telefon: +49-7144-848-141
 Fax:  ...-154
 WWW: http://www.dla-marbach.de
  http://www.schillerjahr.de

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] solaris pam_winbind.so session timeout

2005-10-19 Thread Naber, Peter
Hi,

i have installed the pam_winbind.so Library to authentificate the User again 
ADS. It works fine, but the User will disconnect after the timeout to wait 
before abandoning a login session you can configure in /etc/default/login.
With pam_winbind.so of samba 3.0.7 it works without any error with the same 
pam.conf Konfiguration.
I use solaris 8.

Whats wrong ??

regards,

Peter Naber
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.20b - still getting Winbind Dead but subsys locked

2005-10-19 Thread Sanjay Upadhyay
Hi,
Just omitted --without-sys-quotas, when building and the winbind stopped 
crashing...
just to inform

regards

+++ Gerald (Jerry) Carter [Tue, Oct 18, 2005 at 11:38:01AM -0500]:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Sanjay Upadhyay wrote:
 
 | Sending you the smbd, and winbind logs, both fail. I am
 | sorry to state, net ads join which actuall was
 | successfull when first I had tried fails now. so I am
 | attaching a level 10 log for 'net ad join' also.
 | winbind fails even by hand, logs attached. However I
 | tried a manuall build of samba 3.0.20b on RHEL4 and that
 | worked, so it seems there is some problem in the
 | enterprise builds...
 
 Volker, are you aware of any issues with the 3.0.20b
 builds from SerNet?
 
 
 
 
 
 
 
 
 
 cheers, jerry
 =
 Alleviating the pain of Windows(tm)  --- http://www.samba.org
 GnuPG Key- http://www.plainjoe.org/gpg_public.asc
 There's an anonymous coward in all of us.   --anonymous
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.0 (GNU/Linux)
 Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
 
 iD8DBQFDVSTpIR7qMdg1EfYRAkupAKDZdpBMSERP+mzcGNDmo2+21J7pbgCgg7mN
 EZ5j3UhFt/1Ad0ADRFbKkPY=
 =KkC7
 -END PGP SIGNATURE-

-- 
==
You possess a mind not merely twisted, but actually sprained.
==
 Sanjay Upadhyay
 http://supadhyay.blogspot.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Unable to join domain

2005-10-19 Thread Daulton Theodore
I am attempting to have a Samba3-0.10 server join an NT domain with no 
success. Samba has been installed (./configure --with-syslog 
--with-acl-support) on a SunFire V240 with Solaris 9 as the OS.
From what I've read if the machine account exists on the domain then I should
not have to provide a password. I am however being prompted for a password 
even though th account exists. I am appending the output from my join attempt
(net rpc join MEMBER -S eagle.domain -d 10 -l) hoping that someone
out there would spot something that would help me overcome this obstacle.
Thanks in advance for any suggestions/comments.

Script started on Wed Oct 19 11:32:48 2005
#  net rpc join MEMBER -S eagle.domain -d 10 -l
[2005/10/19 11:32:54, 5] lib/debug.c:debug_dump_status(366)
  INFO: Current debug levels:
all: True/10
tdb: False/0
printdrivers: False/0
lanman: False/0
smb: False/0
rpc_parse: False/0
rpc_srv: False/0
rpc_cli: False/0
passdb: False/0
sam: False/0
auth: False/0
winbind: False/0
vfs: False/0
idmap: False/0
quota: False/0
acls: False/0
[2005/10/19 11:32:54, 3] param/loadparm.c:lp_load(3902)
  lp_load: refreshing parameters
[2005/10/19 11:32:54, 3] param/loadparm.c:init_globals(1312)
  Initialising global parameters
[2005/10/19 11:32:54, 3] param/params.c:pm_process(566)
  params.c:pm_process() - Processing configuration file 
/usr/local/samba/lib/smb.conf
[2005/10/19 11:32:54, 3] param/loadparm.c:do_section(3395)
  Processing section [globals]
  doing parameter netbios name = horntail
[2005/10/19 11:32:54, 4] param/loadparm.c:handle_netbios_name(2740)
  handle_netbios_name: set global_myname to: HORNTAIL
  doing parameter server string = Library's %L %v
  doing parameter workgroup = CARLETON.CA
  doing parameter local master = no
  doing parameter allow hosts = X.X.10. X.X.200.
  doing parameter security = domain
  doing parameter browsable = yes
  doing parameter password server = X.X.Y.117 ccsdcr01 ccsdcr02
  doing parameter machine password timeout = 314496000
  doing parameter remote announce = X.X.Y.95
  doing parameter wins server = blackbird.domain
  doing parameter interfaces = X.X.10.213/255.255.255.0
  doing parameter bind interfaces only = yes
  doing parameter socket options = SO_KEEPALIVE TCP_NODELAY
  doing parameter deadtime = 0
  doing parameter encrypt passwords = yes
  doing parameter username map = /usr/local/samba/lib/nt-names
  doing parameter smb passwd file = /usr/local/samba/private/smbpasswd
  doing parameter invalid users = root daemon bin sys adm lp listen sshd
  doing parameter writeable = yes
  doing parameter log level = 2
  doing parameter log file = /usr/local/samba/var/log.%m
  doing parameter max log size = 2000
  doing parameter debug timestamp = yes
  doing parameter printing = SYSV
  doing parameter load printers = yes
  doing parameter use client driver = yes
  doing parameter printer admin = dtheodor
[2005/10/19 11:32:54, 4] param/loadparm.c:lp_load(3933)
  pm_process() returned Yes
[2005/10/19 11:32:54, 7] param/loadparm.c:lp_servicenumber(4043)
  lp_servicenumber: couldn't find homes
[2005/10/19 11:32:54, 10] param/loadparm.c:set_server_role(3842)
  set_server_role: role = ROLE_DOMAIN_MEMBER
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UCS-2LE
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UCS-2LE
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UTF-16LE
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UTF-16LE
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UCS-2BE
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UCS-2BE
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UTF-16BE
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UTF-16BE
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UTF8
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UTF8
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset UTF-8
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset UTF-8
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset ASCII
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset ASCII
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset 646
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(111)
  Registered charset 646
[2005/10/19 11:32:54, 5] lib/iconv.c:smb_register_charset(103)
  Attempting to register new charset ISO-8859-1
[2005/10/19 11:32:54, 5] 

Re: [Samba] net rpc vampire and filling userPassword

2005-10-19 Thread John H Terpstra
On Wednesday 19 October 2005 08:09, Thomas.Meyer wrote:
 Hello,

 recently we succeeded in doing a test migration from NT4 to a samba
 BDC with LDAP. The LDAP directory is now filled with machine, group
 and user account information.

 My question:

 as I have set the smb.conf parameter ldap passwd sync = Yes, I
 would have expected that net rpc vampire would also set the UNIX
 password of the LDAP user account entries, i.e. the attribute
 userPassword.

 This password appears to be empty.

 Can somebody offer help?

This can not be done without decrypting the NT passwords. That is not an 
option.

- John T.


 Regards,

  Thomas Meyer, EDV-Systemadministrator
   [EMAIL PROTECTED]
   Deutsches Literaturarchiv Marbach
   Bereich EDV
   Schillerhoehe 8-10
   D-71672 Marbach
  Telefon: +49-7144-848-141
  Fax:  ...-154
  WWW: http://www.dla-marbach.de
   http://www.schillerjahr.de

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, 2 Ed., ISBN: 0131882228
Samba-3 by Example, 2 Ed., ISBN: 0131882221X
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] SambaBDC cannot join SambaPDC

2005-10-19 Thread Philip Washington
I have set up a Samba PDC migrating from NT4.  I can logon computers and 
users that came from the old NT4 domain.  I began setting up a SambaBDC 
following the directions in Section 5.5 of Samba3 by Example.  Using 
samba3.0.20b on RHEL4


whenever try
# net rpc join -U root%secret
or
# net rpc join -S SAMBAPDC -U root%secret
I get the following error
--
[2005/10/19 19:08:26, 0] rpc_client/cli_pipe.c:rpc_api_pipe(438)
 cli_pipe: return critical error. Error was Call timed out: server did 
not respond after 1 milliseconds

Creation of workstation account failed
Unable to join domain DOMAINA.
-
#net getlocalsid
Can't fetch domain SID for name: SAMBABDC

if I turn on the samba server and run smbclient //SAMBABDC/accounts -Uuser1
I can login and put a file in the share.  When I look at the properties 
of the file  I see that it is owned by user1 and the group is Domain 
Users.  So it appears that samba is using the ldap server correctly.

#getent passwd
#getent group
appear to be returning the correct information when I compare it to the 
directions.


What and where else should I be looking for a problem?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SambaBDC cannot join SambaPDC

2005-10-19 Thread Craig White
On Wed, 2005-10-19 at 20:05 -0500, Philip Washington wrote:
 I have set up a Samba PDC migrating from NT4.  I can logon computers and 
 users that came from the old NT4 domain.  I began setting up a SambaBDC 
 following the directions in Section 5.5 of Samba3 by Example.  Using 
 samba3.0.20b on RHEL4
 
 whenever try
 # net rpc join -U root%secret
 or
 # net rpc join -S SAMBAPDC -U root%secret
 I get the following error
 --
 [2005/10/19 19:08:26, 0] rpc_client/cli_pipe.c:rpc_api_pipe(438)
   cli_pipe: return critical error. Error was Call timed out: server did 
 not respond after 1 milliseconds
 Creation of workstation account failed
 Unable to join domain DOMAINA.
 -
 #net getlocalsid
 Can't fetch domain SID for name: SAMBABDC
 
 if I turn on the samba server and run smbclient //SAMBABDC/accounts -Uuser1
 I can login and put a file in the share.  When I look at the properties 
 of the file  I see that it is owned by user1 and the group is Domain 
 Users.  So it appears that samba is using the ldap server correctly.
 #getent passwd
 #getent group
 appear to be returning the correct information when I compare it to the 
 directions.
 
 What and where else should I be looking for a problem?

not enough info to do much more than guess but I did something stupid
that took me a few minutes to figure out.

I had a hosts allow = 192.168.1. statement and then when I tried to have
a user connect from a VPN, connections to the samba server would time
out because the remote host ip wasn't in the 192.168.1.0/24 subnet

It might be something that simple

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Admit Mac and Samba

2005-10-19 Thread AndyLiebman
Hi Jerry, 

I sent you some information  about AdmitMac a few days ago -- about where to 
download it. I don't remember  what you were specifically going to check out 
about AdmitMac, but I'm having a  problem with it and Samba 3.0.20b that I 
never had with previous versions (a  least up until 3.0.14). 

Now that I have upgraded my Linux machines to  3.0.20b, I simply cannot 
connect from any OS X machine running Tiger 10.4.2 and  AdmitMac 3. Whereas 
when 
the Linux machines were running 3.0.13 and 3.0.14 I  COULD connect. 

Attached is the error log. It's pretty stark. It just  says:

[2005/10/19 17:59:46, 1]  smbd/service.c:make_connection(731)
make_connection: refusing to  connect with no session setup
[2005/10/19 18:02:38, 1]  smbd/service.c:make_connection(731)
make_connection: refusing to  connect with no session setup

I'll try to run with log level set to 10  tomorrow to see if I get more 
information. 

Andy Liebman  

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Can auth with smbclient, but not workstation.

2005-10-19 Thread Allen Bolderoff
We have a setup (that has worked since samba 3 was released), where we
have a windows 2000 ADC, and a debian sarge based (running all current
patches and only Debian packages (nothing related to samba/winbind is
compiled by us) samba 3.0.xx server set up with winbind/pam to act as a
domain member serving files, whilst authenticating from our Windows ADC.

- so what happens is... Ctrl-alt-del, login credentials are supplied,
client goes to ADC, authenticates, gets given logon script, which then
attaches drives and pulls profile from the samba server to the client-
not rocket science - it just works, or at least it used to.

Things have been working fine for the last 2 years or so. We are very
happy - so thanks for all of you guys' hard work - you know who you
are

Now, what has happened is that recently we have experienced a situation
where Windows XP Laptops (desktops are fine) are effectively failing to
authenticate to the Samba server. 

So, what happens is we connect to the ADC as per normal, scripts get
run, and all of a sudden we are getting error messages pop up about
roaming profile not being available due to Username or Password not
being valid.

We get system error 1326 whilst trying to reconnect to shared drives
from the Samba server.

What we know:

- The user can log on from a workstation no problems.
- Password is up to date on all users.
- User can access the ADC once logged in with no problems and is
authenticated without probs. (profile is stored on samba file server)
- If we run smbclient -Uusername%pass //sambaserver/datashare we connect
fine. 
- wbinfo -a username%pass authenticates fine.
- *if* we try to connect directly to the samba server using net use
from the client, we get user no known or wrong password style errors.
- If we try to connect via explorer - username and password is rejected.


Does anyone have any ideas? 

What are the appropriate logs and files you want to see in order to help
us with this problem? I have quite a large range of log files, including
winbindd logs, samba logs in %m.%U format...

Thanks

Allen Bolderoff

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] RE: Can auth with smbclient, but not workstation.

2005-10-19 Thread Allen Bolderoff


 -Original Message-
 From: Allen Bolderoff
 Sent: Thursday, 20 October 2005 12:22 PM
 To: samba@lists.samba.org
 Subject: Can auth with smbclient, but not workstation.
 

Extract of samba log file.

[2005/10/20 09:20:17, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/10/20 09:20:17, 3] smbd/uid.c:push_conn_ctx(365)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/10/20 09:20:17, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/10/20 09:20:17, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/10/20 09:20:17, 2] auth/auth.c:check_ntlm_password(312)
  check_ntlm_password:  Authentication for user [lallan] - [lallan]
FAILED with error NT_STATUS_WRONG_PA
SSWORD
[2005/10/20 09:20:17, 3] smbd/process.c:timeout_processing(1334)
  timeout_processing: End of file from client (client has disconnected).
[2005/10/20 09:20:17, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/10/20 09:20:17, 2] smbd/server.c:exit_server(609)
  Closing connections
[2005/10/20 09:20:17, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to
[2005/10/20 09:20:17, 3] smbd/server.c:exit_server(652)
  Server exit (normal exit)
[2005/10/20 09:20:18, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user
[EMAIL PROTECTED] with the new
password interface
[2005/10/20 09:20:18, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: [EMAIL PROTECTED]
[2005/10/20 09:20:18, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/10/20 09:20:18, 3] smbd/uid.c:push_conn_ctx(365)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/10/20 09:20:18, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/10/20 09:20:18, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/10/20 09:20:18, 2] auth/auth.c:check_ntlm_password(312)
  check_ntlm_password:  Authentication for user [lallan] - [lallan]
FAILED with error NT_STATUS_WRONG_PA
SSWORD
[2005/10/20 09:20:18, 3] smbd/process.c:timeout_processing(1334)
  timeout_processing: End of file from client (client has disconnected).
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Merging 2.2.8 and 2.2.12 distribution

2005-10-19 Thread Kikelj, Gorazd
 
HI,

I'm in the process of merging JYC 2.2.8 and JEM 2.2.12 version of samba
into 2.2.12 version.

Also I compile both versions on itanium. With 2.2.8 i need to modify
#ifdef __ALPHA with 
#ifdef __VMS #ifndef __VAX construct. Version 2.2.12 compile cleanly
with some informational messages (manly unnecessary includes). I didn't
test 2.2.12 yet, but 2.2.8 runs on Itanium.

I'll put, when I'm finish, distribution on ftp server for anybody to
test it. I have very limited resources :-( to really test samba. 

Is there any demands for VAX version also?

Best, Gorazd
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:

http://www.catb.org/~esr/faqs/smart-questions.html


RE: RE : Merging 2.2.8 and 2.2.12 distribution

2005-10-19 Thread Kikelj, Gorazd
Hi Jean,

I'm very happy to provide you with joined version. I hope that first
version will be completed till end of this week, but no promises.

As for newest samba version I'll go to the
http://h71000.www7.hp.com/openvms/roadmap/openvms_roadmaps.htm slide
38.


Best, Gorazd
  

 -Original Message-
 From: COLLOT Jean-Yves [mailto:[EMAIL PROTECTED] 
 Sent: Wednesday, October 19, 2005 9:46 AM
 To: Kikelj, Gorazd
 Subject: RE : Merging 2.2.8 and 2.2.12 distribution
 
 This is really good news. I would have done it myself, but I 
 had no time for it.
 
 When it is done, I'll be happy to put that new version on the 
 site where I put the 2.2.8, if you want me to. I'll be happy 
 to help for testing and maintaining (if needed).
 
 JYC
 
 NB : we have no news from JEB's project of porting newer 
 Samba versions.
 Does anyone know about it ?
 
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:

http://www.catb.org/~esr/faqs/smart-questions.html


svn commit: samba r11171 - in branches/SAMBA_4_0/source/scripting/ejs: .

2005-10-19 Thread metze
Author: metze
Date: 2005-10-19 06:09:14 + (Wed, 19 Oct 2005)
New Revision: 11171

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11171

Log:
fix the build

metze
Modified:
   branches/SAMBA_4_0/source/scripting/ejs/smbcalls_sys.c


Changeset:
Modified: branches/SAMBA_4_0/source/scripting/ejs/smbcalls_sys.c
===
--- branches/SAMBA_4_0/source/scripting/ejs/smbcalls_sys.c  2005-10-19 
02:50:45 UTC (rev 11170)
+++ branches/SAMBA_4_0/source/scripting/ejs/smbcalls_sys.c  2005-10-19 
06:09:14 UTC (rev 11171)
@@ -72,12 +72,13 @@
 static int ejs_sys_unix2nttime(MprVarHandle eid, int argc, struct MprVar 
**argv)
 {
NTTIME nt;
+   struct MprVar v;
if (argc != 1 || !mprVarIsNumber(argv[0]-type)) {
ejsSetErrorMsg(eid, sys_unix2nttime invalid arguments);
return -1;
}
unix_to_nt_time(nt, mprVarToNumber(argv[0]));
-   struct MprVar v = mprCreateNumberVar(nt);
+   v = mprCreateNumberVar(nt);
mpr_Return(eid, v);
return 0;
 }



svn commit: samba r11173 - in branches/SAMBA_4_0/source/torture/nbt: .

2005-10-19 Thread metze
Author: metze
Date: 2005-10-19 06:30:05 + (Wed, 19 Oct 2005)
New Revision: 11173

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11173

Log:
print out the correct messages

metze
Modified:
   branches/SAMBA_4_0/source/torture/nbt/winsreplication.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/nbt/winsreplication.c
===
--- branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-10-19 
06:13:53 UTC (rev 11172)
+++ branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-10-19 
06:30:05 UTC (rev 11173)
@@ -2944,6 +2944,25 @@
}
 
if (!records[i].cleanup) {
+   const char *expected;
+   const char *ips;
+
+   if (records[i].r2.merge_expected) {
+   expected = MERGE;
+   } else if (records[i].r2.apply_expected) {
+   expected = REPLACE;
+   } else {
+   expected = NOT REPLACE;
+   }
+
+   if (!records[i].r1.ips  !records[i].r2.ips) {
+   ips = no;
+   } else if (records[i].r1.ips==records[i].r2.ips) {
+   ips = same;
+   } else {
+   ips = different;
+   }
+
printf(%s,%s%s vs. %s,%s%s with %s ip(s) = %s\n,
wrepl_name_type_string(records[i].r1.type),
wrepl_name_state_string(records[i].r1.state),
@@ -2951,8 +2970,7 @@
wrepl_name_type_string(records[i].r2.type),
wrepl_name_state_string(records[i].r2.state),
(records[i].r2.is_static?,static:),
-   
(records[i].r1.ips==records[i].r2.ips?same:different),
-   (records[i].r2.apply_expected?REPLACE:NOT 
REPLACE));
+   ips, expected);
}
 
/*



svn commit: samba r11174 - in branches/SAMBA_4_0/source/torture/nbt: .

2005-10-19 Thread metze
Author: metze
Date: 2005-10-19 07:00:31 + (Wed, 19 Oct 2005)
New Revision: 11174

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11174

Log:
- add special group vs. multi homed section
- disable special group vs. special group,
  I need to look closer at this, as I'm getting strange timeouts
  randomly, so the server might be doing some challegnes while
  doing the merging of special group records, witch reaches
  timeouts

metze
Modified:
   branches/SAMBA_4_0/source/torture/nbt/winsreplication.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/nbt/winsreplication.c
===
--- branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-10-19 
06:30:05 UTC (rev 11173)
+++ branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-10-19 
07:00:31 UTC (rev 11174)
@@ -2806,6 +2806,184 @@
},
 
 /*
+ * special groups vs multi homed section,
+ */
+   /* 
+* sgroup,active vs. mhomed,active
+* = should NOT be replaced
+*/
+   {
+   .line   = __location__,
+   .name   = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+   .r1 = {
+   .owner  = ctx-a,
+   .type   = WREPL_TYPE_SGROUP,
+   .state  = WREPL_STATE_ACTIVE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),
+   .ips= addresses_A_1,
+   .apply_expected = True
+   },
+   .r2 = {
+   .owner  = ctx-b,
+   .type   = WREPL_TYPE_MHOMED,
+   .state  = WREPL_STATE_ACTIVE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),
+   .ips= addresses_A_1,
+   .apply_expected = False
+   }
+   },
+
+   /* 
+* sgroup,active vs. mhomed,tombstone
+* = should NOT be replaced
+*/
+   {
+   .line   = __location__,
+   .name   = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+   .r1 = {
+   .owner  = ctx-a,
+   .type   = WREPL_TYPE_SGROUP,
+   .state  = WREPL_STATE_ACTIVE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),
+   .ips= addresses_A_1,
+   .apply_expected = True
+   },
+   .r2 = {
+   .owner  = ctx-b,
+   .type   = WREPL_TYPE_MHOMED,
+   .state  = WREPL_STATE_TOMBSTONE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),
+   .ips= addresses_A_1,
+   .apply_expected = False
+   }
+   },
+
+   /* 
+* sgroup,released vs. mhomed,active
+* = should be replaced
+*/
+   {
+   .line   = __location__,
+   .name   = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+   .r1 = {
+   .owner  = ctx-a,
+   .type   = WREPL_TYPE_SGROUP,
+   .state  = WREPL_STATE_RELEASED,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),
+   .ips= addresses_A_1,
+   .apply_expected = False
+   },
+   .r2 = {
+   .owner  = ctx-b,
+   .type   = WREPL_TYPE_MHOMED,
+   .state  = WREPL_STATE_ACTIVE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_B_1),
+   .ips= addresses_B_1,
+   .apply_expected = True
+   }
+   },
+
+   /* 
+* sgroup,released vs. mhomed,tombstone
+* = should be replaced
+*/
+   {
+   .line   = __location__,
+   .name   = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+   .r1 = {
+   .owner  = ctx-b,
+   .type   = WREPL_TYPE_SGROUP,

svn commit: samba r11175 - in branches/SAMBA_4_0/source/torture/nbt: .

2005-10-19 Thread metze
Author: metze
Date: 2005-10-19 07:12:26 + (Wed, 19 Oct 2005)
New Revision: 11175

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11175

Log:
- add multi homed vs. normal group section

metze
Modified:
   branches/SAMBA_4_0/source/torture/nbt/winsreplication.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/nbt/winsreplication.c
===
--- branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-10-19 
07:00:31 UTC (rev 11174)
+++ branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-10-19 
07:12:26 UTC (rev 11175)
@@ -2982,6 +2982,183 @@
}
},
 
+/*
+ * multi homed vs. normal group section,
+ */
+   /* 
+* mhomed,active vs. group,active
+* = should be replaced
+*/
+   {
+   .line   = __location__,
+   .name   = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+   .r1 = {
+   .owner  = ctx-a,
+   .type   = WREPL_TYPE_MHOMED,
+   .state  = WREPL_STATE_ACTIVE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),
+   .ips= addresses_A_1,
+   .apply_expected = True
+   },
+   .r2 = {
+   .owner  = ctx-b,
+   .type   = WREPL_TYPE_GROUP,
+   .state  = WREPL_STATE_ACTIVE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_B_1),
+   .ips= addresses_B_1,
+   .apply_expected = True
+   }
+   },
+
+   /* 
+* mhomed,active vs. group,tombstone
+* = should NOT be replaced
+*/
+   {
+   .line   = __location__,
+   .name   = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+   .r1 = {
+   .owner  = ctx-b,
+   .type   = WREPL_TYPE_MHOMED,
+   .state  = WREPL_STATE_ACTIVE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_B_1),
+   .ips= addresses_B_1,
+   .apply_expected = True
+   },
+   .r2 = {
+   .owner  = ctx-a,
+   .type   = WREPL_TYPE_GROUP,
+   .state  = WREPL_STATE_TOMBSTONE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_B_1),
+   .ips= addresses_B_1,
+   .apply_expected = False
+   }
+   },
+
+   /* 
+* mhomed,released vs. group,active
+* = should be replaced
+*/
+   {
+   .line   = __location__,
+   .name   = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+   .r1 = {
+   .owner  = ctx-b,
+   .type   = WREPL_TYPE_MHOMED,
+   .state  = WREPL_STATE_RELEASED,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_B_1),
+   .ips= addresses_B_1,
+   .apply_expected = False
+   },
+   .r2 = {
+   .owner  = ctx-a,
+   .type   = WREPL_TYPE_GROUP,
+   .state  = WREPL_STATE_ACTIVE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),
+   .ips= addresses_A_1,
+   .apply_expected = True
+   }
+   },
+
+   /* 
+* mhomed,released vs. group,tombstone
+* = should be replaced
+*/
+   {
+   .line   = __location__,
+   .name   = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+   .r1 = {
+   .owner  = ctx-a,
+   .type   = WREPL_TYPE_MHOMED,
+   .state  = WREPL_STATE_RELEASED,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),

svn commit: samba r11176 - in branches/SAMBA_4_0/source/torture/nbt: .

2005-10-19 Thread metze
Author: metze
Date: 2005-10-19 07:24:36 + (Wed, 19 Oct 2005)
New Revision: 11176

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11176

Log:
- add multi homed vs. special group section

metze
Modified:
   branches/SAMBA_4_0/source/torture/nbt/winsreplication.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/nbt/winsreplication.c
===
--- branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-10-19 
07:12:26 UTC (rev 11175)
+++ branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-10-19 
07:24:36 UTC (rev 11176)
@@ -3159,6 +3159,184 @@
}
},
 
+/*
+ * multi homed vs. special group section,
+ */
+   /* 
+* mhomed,active vs. sgroup,active
+* = should NOT be replaced
+*/
+   {
+   .line   = __location__,
+   .name   = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+   .r1 = {
+   .owner  = ctx-a,
+   .type   = WREPL_TYPE_MHOMED,
+   .state  = WREPL_STATE_ACTIVE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),
+   .ips= addresses_A_1,
+   .apply_expected = True
+   },
+   .r2 = {
+   .owner  = ctx-b,
+   .type   = WREPL_TYPE_SGROUP,
+   .state  = WREPL_STATE_ACTIVE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),
+   .ips= addresses_A_1,
+   .apply_expected = False
+   }
+   },
+
+   /* 
+* mhomed,active vs. group,tombstone
+* = should NOT be replaced
+*/
+   {
+   .line   = __location__,
+   .name   = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+   .r1 = {
+   .owner  = ctx-a,
+   .type   = WREPL_TYPE_MHOMED,
+   .state  = WREPL_STATE_ACTIVE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),
+   .ips= addresses_A_1,
+   .apply_expected = True
+   },
+   .r2 = {
+   .owner  = ctx-b,
+   .type   = WREPL_TYPE_SGROUP,
+   .state  = WREPL_STATE_TOMBSTONE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),
+   .ips= addresses_A_1,
+   .apply_expected = False
+   }
+   },
+
+   /* 
+* mhomed,released vs. sgroup,active
+* = should be replaced
+*/
+   {
+   .line   = __location__,
+   .name   = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+   .r1 = {
+   .owner  = ctx-a,
+   .type   = WREPL_TYPE_MHOMED,
+   .state  = WREPL_STATE_RELEASED,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_A_1),
+   .ips= addresses_A_1,
+   .apply_expected = False
+   },
+   .r2 = {
+   .owner  = ctx-b,
+   .type   = WREPL_TYPE_SGROUP,
+   .state  = WREPL_STATE_ACTIVE,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= ARRAY_SIZE(addresses_B_1),
+   .ips= addresses_B_1,
+   .apply_expected = True
+   }
+   },
+
+   /* 
+* mhomed,released vs. group,tombstone
+* = should be replaced
+*/
+   {
+   .line   = __location__,
+   .name   = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+   .r1 = {
+   .owner  = ctx-b,
+   .type   = WREPL_TYPE_MHOMED,
+   .state  = WREPL_STATE_RELEASED,
+   .node   = WREPL_NODE_B,
+   .is_static  = False,
+   .num_ips= 

svn commit: samba r11177 - in branches/SAMBA_4_0/source/torture/nbt: .

2005-10-19 Thread metze
Author: metze
Date: 2005-10-19 07:47:29 + (Wed, 19 Oct 2005)
New Revision: 11177

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11177

Log:
move unique vs * and normal group vs * into this form

ACTIVE  vs ACTIVE
ACTIVE  vs TOMBSTONE
RELEASEDvs ACTIVE
RELEASEDvs TOMBSTONE
TOMBSTONE   vs ACTIVE
TOMBSTONE   vs TOMBSTONE

as it seems that is all we need to test,
and w2k3 only decides between ACTIVE and NON-ACTIVE (REALEASED or TOMBSTONE)
when it gets new replica objects

also I have removed all the extra test, we only test the worst cases now,
and this will make the algorithms more clear when you look at the output
of the NBT-WINSREPLICATION torture test

metze
Modified:
   branches/SAMBA_4_0/source/torture/nbt/winsreplication.c


Changeset:
Sorry, the patch is too large (782 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11177


svn commit: samba r11178 - in branches/SAMBA_4_0/source/wrepl_server: .

2005-10-19 Thread metze
Author: metze
Date: 2005-10-19 09:41:54 + (Wed, 19 Oct 2005)
New Revision: 11178

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11178

Log:
add some logic functions for the replica_vs_replica conflict handling
to our winsrepl server, but it handles only the simple cases (without merging)
and we still didn't apply records to our wins.ldb, we just print out what we 
would do

metze
Modified:
   branches/SAMBA_4_0/source/wrepl_server/wrepl_apply_records.c


Changeset:
Sorry, the patch is too large (280 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11178


svn commit: samba r11179 - in branches/SAMBA_4_0/source/librpc/idl: .

2005-10-19 Thread metze
Author: metze
Date: 2005-10-19 09:43:48 + (Wed, 19 Oct 2005)
New Revision: 11179

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11179

Log:
revert to the old code, till jelmer find a solution how to
handle a UTF16 string in a uint8 array

metze
Modified:
   branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl2005-10-19 09:41:54 UTC 
(rev 11178)
+++ branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl2005-10-19 09:43:48 UTC 
(rev 11179)
@@ -430,7 +430,7 @@
/* UnicodeString values */
typedef struct {
[range(0,10485760)] uint32 length;
-   [size_is(length),charset(UTF16)] uint16 *string;
+   [subcontext(4)] nstring *string;
} drsuapi_DsAttributeValueUnicodeString;
 
typedef struct {



svn commit: samba r11180 - in tags: .

2005-10-19 Thread jerry
Author: jerry
Date: 2005-10-19 12:11:14 + (Wed, 19 Oct 2005)
New Revision: 11180

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11180

Log:
tagging 3.0.21pre1
Added:
   tags/release-3-0-21pre1/


Changeset:
Copied: tags/release-3-0-21pre1 (from rev 11179, branches/SAMBA_3_0_RELEASE)



svn commit: samba-web r833 - in trunk/news/users: .

2005-10-19 Thread deryck
Author: deryck
Date: 2005-10-19 14:28:38 + (Wed, 19 Oct 2005)
New Revision: 833

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=833

Log:
Add news link to a HOWTO on KDE network browsing.

deryck


Added:
   trunk/news/users/smb_browse_kde.html


Changeset:
Added: trunk/news/users/smb_browse_kde.html
===
--- trunk/news/users/smb_browse_kde.html2005-10-19 04:20:53 UTC (rev 
832)
+++ trunk/news/users/smb_browse_kde.html2005-10-19 14:28:38 UTC (rev 
833)
@@ -0,0 +1,26 @@
+h3a name=smb_browse_kdeNetwork Browsing with KDE HOWTO/a/h3 
+
+div class=article
+  pa href=http://www.linux-mag.com/;Linux Magazine/a is running an
+  article on network browsing with KDE.  The piece is nice little HOWTO on
+  using KDE tools for browsing.  From the article:/p
+
+  blockquote
+pOn a network of just Windows machines, connecting to file shares 
+is a fairly easy process: just click on the My Network or Network 
+Neighborhood icon, click on a nearby server or workstation with a 
+file share, and away you go./p
+
+pHowever, on a network of Linux and Windows machines, connecting a 
+Linux box to a Windows server can still require some manual 
+configuration to get file sharing between the two operating systems 
+working just the way you want it to./p
+  /blockquote
+
+  pThe article then continues with a step by step walk through of 
+  installation and configuration.  For the rest of the HOWTO, see 
+  a href=http://www.linux-mag.com/content/view/2276/;SMB Browsing with 
+  KDE/a./p
+/div
+
+   



svn commit: samba r11183 - branches/SAMBA_3_0/source/libads branches/SAMBA_3_0/source/smbd trunk/source/libads trunk/source/smbd

2005-10-19 Thread gd
Author: gd
Date: 2005-10-19 14:34:17 + (Wed, 19 Oct 2005)
New Revision: 11183

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11183

Log:
add small helper function to return a PAC_LOGON_INFO.

Guenther

Modified:
   branches/SAMBA_3_0/source/libads/authdata.c
   branches/SAMBA_3_0/source/smbd/sesssetup.c
   trunk/source/libads/authdata.c
   trunk/source/smbd/sesssetup.c


Changeset:
Modified: branches/SAMBA_3_0/source/libads/authdata.c
===
--- branches/SAMBA_3_0/source/libads/authdata.c 2005-10-19 14:08:39 UTC (rev 
11182)
+++ branches/SAMBA_3_0/source/libads/authdata.c 2005-10-19 14:34:17 UTC (rev 
11183)
@@ -924,4 +924,20 @@
return nt_status;
 }
 
+ PAC_LOGON_INFO *get_logon_info_from_pac(PAC_DATA *pac_data) 
+{
+   PAC_LOGON_INFO *logon_info = NULL;
+   int i;
+   
+   for (i=0; i  pac_data-num_buffers; i++) {
+
+   if (pac_data-pac_buffer[i].type != PAC_TYPE_LOGON_INFO)
+   continue;
+
+   logon_info = pac_data-pac_buffer[i].ctr-pac.logon_info;
+   break;
+   }
+   return logon_info;
+}
+
 #endif

Modified: branches/SAMBA_3_0/source/smbd/sesssetup.c
===
--- branches/SAMBA_3_0/source/smbd/sesssetup.c  2005-10-19 14:08:39 UTC (rev 
11182)
+++ branches/SAMBA_3_0/source/smbd/sesssetup.c  2005-10-19 14:34:17 UTC (rev 
11183)
@@ -182,16 +182,7 @@
}
 
if (pac_data) {
-
-   /* get the logon_info */
-   for (i=0; i  pac_data-num_buffers; i++) {
-   
-   if (pac_data-pac_buffer[i].type != PAC_TYPE_LOGON_INFO)
-   continue;
-
-   logon_info = 
pac_data-pac_buffer[i].ctr-pac.logon_info;
-   break;
-   }
+   logon_info = get_logon_info_from_pac(pac_data);
}
 
DEBUG(3,(Ticket name is [%s]\n, client));

Modified: trunk/source/libads/authdata.c
===
--- trunk/source/libads/authdata.c  2005-10-19 14:08:39 UTC (rev 11182)
+++ trunk/source/libads/authdata.c  2005-10-19 14:34:17 UTC (rev 11183)
@@ -924,4 +924,20 @@
return nt_status;
 }
 
+ PAC_LOGON_INFO *get_logon_info_from_pac(PAC_DATA *pac_data) 
+{
+   PAC_LOGON_INFO *logon_info = NULL;
+   int i;
+   
+   for (i=0; i  pac_data-num_buffers; i++) {
+
+   if (pac_data-pac_buffer[i].type != PAC_TYPE_LOGON_INFO)
+   continue;
+
+   logon_info = pac_data-pac_buffer[i].ctr-pac.logon_info;
+   break;
+   }
+   return logon_info;
+}
+
 #endif

Modified: trunk/source/smbd/sesssetup.c
===
--- trunk/source/smbd/sesssetup.c   2005-10-19 14:08:39 UTC (rev 11182)
+++ trunk/source/smbd/sesssetup.c   2005-10-19 14:34:17 UTC (rev 11183)
@@ -182,16 +182,7 @@
}
 
if (pac_data) {
-
-   /* get the logon_info */
-   for (i=0; i  pac_data-num_buffers; i++) {
-   
-   if (pac_data-pac_buffer[i].type != PAC_TYPE_LOGON_INFO)
-   continue;
-
-   logon_info = 
pac_data-pac_buffer[i].ctr-pac.logon_info;
-   break;
-   }
+   logon_info = get_logon_info_from_pac(pac_data);
}
 
DEBUG(3,(Ticket name is [%s]\n, client));



svn commit: samba r11184 - in branches/SAMBA_4_0/source/build/m4: .

2005-10-19 Thread jelmer
Author: jelmer
Date: 2005-10-19 14:35:25 + (Wed, 19 Oct 2005)
New Revision: 11184

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11184

Log:
Remove test that checks whether ftruncate() needs root, because I can't
find the file it tries to use (build/tests/ftruncroot.c) and the value 
it defines is not used anywhere.

Modified:
   branches/SAMBA_4_0/source/build/m4/rewrite.m4


Changeset:
Modified: branches/SAMBA_4_0/source/build/m4/rewrite.m4
===
--- branches/SAMBA_4_0/source/build/m4/rewrite.m4   2005-10-19 14:34:17 UTC 
(rev 11183)
+++ branches/SAMBA_4_0/source/build/m4/rewrite.m4   2005-10-19 14:35:25 UTC 
(rev 11184)
@@ -448,13 +448,6 @@
 AC_DEFINE(HAVE_MMAP,1,[Whether mmap works])
 fi
 
-AC_CACHE_CHECK([for ftruncate needs root],samba_cv_FTRUNCATE_NEEDS_ROOT,[
-AC_TRY_RUN([#include ${srcdir-.}/build/tests/ftruncroot.c],
-   
samba_cv_FTRUNCATE_NEEDS_ROOT=yes,samba_cv_FTRUNCATE_NEEDS_ROOT=no,samba_cv_FTRUNCATE_NEEDS_ROOT=cross)])
-if test x$samba_cv_FTRUNCATE_NEEDS_ROOT = xyes; then
-AC_DEFINE(FTRUNCATE_NEEDS_ROOT,1,[Whether ftruncate() needs root])
-fi
-
 AC_CACHE_CHECK([for st_blocks in struct stat],samba_cv_HAVE_STAT_ST_BLOCKS,[
 AC_TRY_COMPILE([#include sys/types.h
 #include sys/stat.h



svn commit: samba-web r834 - in trunk/docs: .

2005-10-19 Thread jerry
Author: jerry
Date: 2005-10-19 15:27:16 + (Wed, 19 Oct 2005)
New Revision: 834

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=834

Log:
updatign links to generated man pages
Modified:
   trunk/docs/index.html


Changeset:
Modified: trunk/docs/index.html
===
--- trunk/docs/index.html   2005-10-19 14:28:38 UTC (rev 833)
+++ trunk/docs/index.html   2005-10-19 15:27:16 UTC (rev 834)
@@ -33,40 +33,40 @@
   td
 h3Man Pages/h3
 ul
-   lia href=man/samba.7.htmlsamba(7)/a/li
-   lia href=man/findsmb.1.htmlfindsmb(1)/a/li
-   lia href=man/lmhosts.5.htmllmhosts(5)/a/li
-   lia href=man/log2pcap.1.htmllog2pcap(1)/a/li
-   lia href=man/mount.cifs.8.htmlmount.cifs(8)/a/li
-   lia href=man/net.8.htmlnet(8)/a/li
-   lia href=man/nmbd.8.htmlnmbd(8)/a/li
-   lia href=man/nmblookup.1.htmlnmblookup(1)/a/li
-   lia href=man/ntlm_auth.1.htmlntlm_auth(1)/a/li
-   lia href=man/pdbedit.8.htmlpdbedit(8)/a/li
-   lia href=man/profiles.1.htmlprofiles(1)/a/li
-   lia href=man/rpcclient.1.htmlrpcclient(1)/a/li
-   lia href=man/smbcacls.1.htmlsmbcacls(1)/a/li
-   lia href=man/smbclient.1.htmlsmbclient(1)/a/li
-   lia href=man/smb.conf.5.htmlsmb.conf(5)/a/li
-   lia href=man/smbcontrol.1.htmlsmbcontrol(1)/a/li
-   lia href=man/smbcquotas.1.htmlsmbcquotas(1)/a/li  
-   lia href=man/smbd.8.htmlsmbd(8)/a/li
-   lia href=man/smbmnt.8.htmlsmbmnt(8)/a/li
-   lia href=man/smbmount.8.htmlsmbmount(8)/a/li
-   lia href=man/smbpasswd.5.htmlsmbpasswd(5)/a/li
-   lia href=man/smbpasswd.8.htmlsmbpasswd(8)/a/li
-   lia href=man/smbsh.1.htmlsmbsh(1)/a/li
-   lia href=man/smbspool.8.htmlsmbspool(8)/a/li
-   lia href=man/smbstatus.1.htmlsmbstatus(1)/a/li
-   lia href=man/smbtar.1.htmlsmbtar(1)/a/li
-   lia href=man/smbtree.1.htmlsmbtree(1)/a/li
-   lia href=man/smbumount.8.htmlsmbumount(8)/a/li
-   lia href=man/swat.8.htmlswat(8)/a/li
-   lia href=man/tdbbackup.8.htmltdbbackup(8)/a/li
-   lia href=man/testparm.1.htmltestparm(1)/a/li
-   lia href=man/vfstest.1.htmlvfstest(1)/a/li
-   lia href=man/wbinfo.1.htmlwbinfo(1)/a/li
-   lia href=man/winbindd.8.htmlwinbindd(8)/a/li
+   lia href=manpages-3/samba.7.htmlsamba(7)/a/li
+   lia href=manpages-3/findsmb.1.htmlfindsmb(1)/a/li
+   lia href=manpages-3/lmhosts.5.htmllmhosts(5)/a/li
+   lia href=manpages-3/log2pcap.1.htmllog2pcap(1)/a/li
+   lia href=manpages-3/mount.cifs.8.htmlmount.cifs(8)/a/li
+   lia href=manpages-3/net.8.htmlnet(8)/a/li
+   lia href=manpages-3/nmbd.8.htmlnmbd(8)/a/li
+   lia href=manpages-3/nmblookup.1.htmlnmblookup(1)/a/li
+   lia href=manpages-3/ntlm_auth.1.htmlntlm_auth(1)/a/li
+   lia href=manpages-3/pdbedit.8.htmlpdbedit(8)/a/li
+   lia href=manpages-3/profiles.1.htmlprofiles(1)/a/li
+   lia href=manpages-3/rpcclient.1.htmlrpcclient(1)/a/li
+   lia href=manpages-3/smbcacls.1.htmlsmbcacls(1)/a/li
+   lia href=manpages-3/smbclient.1.htmlsmbclient(1)/a/li
+   lia href=manpages-3/smb.conf.5.htmlsmb.conf(5)/a/li
+   lia href=manpages-3/smbcontrol.1.htmlsmbcontrol(1)/a/li
+   lia href=manpages-3/smbcquotas.1.htmlsmbcquotas(1)/a/li   
+   lia href=manpages-3/smbd.8.htmlsmbd(8)/a/li
+   lia href=manpages-3/smbmnt.8.htmlsmbmnt(8)/a/li
+   lia href=manpages-3/smbmount.8.htmlsmbmount(8)/a/li
+   lia href=manpages-3/smbpasswd.5.htmlsmbpasswd(5)/a/li
+   lia href=manpages-3/smbpasswd.8.htmlsmbpasswd(8)/a/li
+   lia href=manpages-3/smbsh.1.htmlsmbsh(1)/a/li
+   lia href=manpages-3/smbspool.8.htmlsmbspool(8)/a/li
+   lia href=manpages-3/smbstatus.1.htmlsmbstatus(1)/a/li
+   lia href=manpages-3/smbtar.1.htmlsmbtar(1)/a/li
+   lia href=manpages-3/smbtree.1.htmlsmbtree(1)/a/li
+   lia href=manpages-3/smbumount.8.htmlsmbumount(8)/a/li
+   lia href=manpages-3/swat.8.htmlswat(8)/a/li
+   lia href=manpages-3/tdbbackup.8.htmltdbbackup(8)/a/li 
+   lia href=manpages-3/testparm.1.htmltestparm(1)/a/li
+   lia href=manpages-3/vfstest.1.htmlvfstest(1)/a/li
+   lia href=manpages-3/wbinfo.1.htmlwbinfo(1)/a/li
+   lia href=manpages-3/winbindd.8.htmlwinbindd(8)/a/li
 /ul
   /td
   td



svn commit: samba-web r835 - in trunk/docs: .

2005-10-19 Thread jerry
Author: jerry
Date: 2005-10-19 15:30:57 + (Wed, 19 Oct 2005)
New Revision: 835

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=835

Log:
really fix link this time
Modified:
   trunk/docs/index.html


Changeset:
Modified: trunk/docs/index.html
===
--- trunk/docs/index.html   2005-10-19 15:27:16 UTC (rev 834)
+++ trunk/docs/index.html   2005-10-19 15:30:57 UTC (rev 835)
@@ -33,40 +33,40 @@
   td
 h3Man Pages/h3
 ul
-   lia href=manpages-3/samba.7.htmlsamba(7)/a/li
-   lia href=manpages-3/findsmb.1.htmlfindsmb(1)/a/li
-   lia href=manpages-3/lmhosts.5.htmllmhosts(5)/a/li
-   lia href=manpages-3/log2pcap.1.htmllog2pcap(1)/a/li
-   lia href=manpages-3/mount.cifs.8.htmlmount.cifs(8)/a/li
-   lia href=manpages-3/net.8.htmlnet(8)/a/li
-   lia href=manpages-3/nmbd.8.htmlnmbd(8)/a/li
-   lia href=manpages-3/nmblookup.1.htmlnmblookup(1)/a/li
-   lia href=manpages-3/ntlm_auth.1.htmlntlm_auth(1)/a/li
-   lia href=manpages-3/pdbedit.8.htmlpdbedit(8)/a/li
-   lia href=manpages-3/profiles.1.htmlprofiles(1)/a/li
-   lia href=manpages-3/rpcclient.1.htmlrpcclient(1)/a/li
-   lia href=manpages-3/smbcacls.1.htmlsmbcacls(1)/a/li
-   lia href=manpages-3/smbclient.1.htmlsmbclient(1)/a/li
-   lia href=manpages-3/smb.conf.5.htmlsmb.conf(5)/a/li
-   lia href=manpages-3/smbcontrol.1.htmlsmbcontrol(1)/a/li
-   lia href=manpages-3/smbcquotas.1.htmlsmbcquotas(1)/a/li   
-   lia href=manpages-3/smbd.8.htmlsmbd(8)/a/li
-   lia href=manpages-3/smbmnt.8.htmlsmbmnt(8)/a/li
-   lia href=manpages-3/smbmount.8.htmlsmbmount(8)/a/li
-   lia href=manpages-3/smbpasswd.5.htmlsmbpasswd(5)/a/li
-   lia href=manpages-3/smbpasswd.8.htmlsmbpasswd(8)/a/li
-   lia href=manpages-3/smbsh.1.htmlsmbsh(1)/a/li
-   lia href=manpages-3/smbspool.8.htmlsmbspool(8)/a/li
-   lia href=manpages-3/smbstatus.1.htmlsmbstatus(1)/a/li
-   lia href=manpages-3/smbtar.1.htmlsmbtar(1)/a/li
-   lia href=manpages-3/smbtree.1.htmlsmbtree(1)/a/li
-   lia href=manpages-3/smbumount.8.htmlsmbumount(8)/a/li
-   lia href=manpages-3/swat.8.htmlswat(8)/a/li
-   lia href=manpages-3/tdbbackup.8.htmltdbbackup(8)/a/li 
-   lia href=manpages-3/testparm.1.htmltestparm(1)/a/li
-   lia href=manpages-3/vfstest.1.htmlvfstest(1)/a/li
-   lia href=manpages-3/wbinfo.1.htmlwbinfo(1)/a/li
-   lia href=manpages-3/winbindd.8.htmlwinbindd(8)/a/li
+   lia href=man/manpages-3/samba.7.htmlsamba(7)/a/li
+   lia href=man/manpages-3/findsmb.1.htmlfindsmb(1)/a/li
+   lia href=man/manpages-3/lmhosts.5.htmllmhosts(5)/a/li
+   lia href=man/manpages-3/log2pcap.1.htmllog2pcap(1)/a/li
+   lia href=man/manpages-3/mount.cifs.8.htmlmount.cifs(8)/a/li
+   lia href=man/manpages-3/net.8.htmlnet(8)/a/li
+   lia href=man/manpages-3/nmbd.8.htmlnmbd(8)/a/li
+   lia href=man/manpages-3/nmblookup.1.htmlnmblookup(1)/a/li
+   lia href=man/manpages-3/ntlm_auth.1.htmlntlm_auth(1)/a/li
+   lia href=man/manpages-3/pdbedit.8.htmlpdbedit(8)/a/li
+   lia href=man/manpages-3/profiles.1.htmlprofiles(1)/a/li
+   lia href=man/manpages-3/rpcclient.1.htmlrpcclient(1)/a/li
+   lia href=man/manpages-3/smbcacls.1.htmlsmbcacls(1)/a/li
+   lia href=man/manpages-3/smbclient.1.htmlsmbclient(1)/a/li
+   lia href=man/manpages-3/smb.conf.5.htmlsmb.conf(5)/a/li
+   lia href=man/manpages-3/smbcontrol.1.htmlsmbcontrol(1)/a/li
+   lia href=man/manpages-3/smbcquotas.1.htmlsmbcquotas(1)/a/li   
+   lia href=man/manpages-3/smbd.8.htmlsmbd(8)/a/li
+   lia href=man/manpages-3/smbmnt.8.htmlsmbmnt(8)/a/li
+   lia href=man/manpages-3/smbmount.8.htmlsmbmount(8)/a/li
+   lia href=man/manpages-3/smbpasswd.5.htmlsmbpasswd(5)/a/li
+   lia href=man/manpages-3/smbpasswd.8.htmlsmbpasswd(8)/a/li
+   lia href=man/manpages-3/smbsh.1.htmlsmbsh(1)/a/li
+   lia href=man/manpages-3/smbspool.8.htmlsmbspool(8)/a/li
+   lia href=man/manpages-3/smbstatus.1.htmlsmbstatus(1)/a/li
+   lia href=man/manpages-3/smbtar.1.htmlsmbtar(1)/a/li
+   lia href=man/manpages-3/smbtree.1.htmlsmbtree(1)/a/li
+   lia href=man/manpages-3/smbumount.8.htmlsmbumount(8)/a/li
+   lia href=man/manpages-3/swat.8.htmlswat(8)/a/li
+   lia href=man/manpages-3/tdbbackup.8.htmltdbbackup(8)/a/li 
+   lia href=man/manpages-3/testparm.1.htmltestparm(1)/a/li
+   lia href=man/manpages-3/vfstest.1.htmlvfstest(1)/a/li
+   lia href=man/manpages-3/wbinfo.1.htmlwbinfo(1)/a/li
+   lia href=man/manpages-3/winbindd.8.htmlwinbindd(8)/a/li
 /ul
   /td
   td



  1   2   >