Re: [Samba] Re: 3.0.20b and Nonalphabetical File Lists on Windows Boxes

2005-12-13 Thread Marc Cousin
Le Lundi 12 Décembre 2005 13:46, Michael Lueck a écrit :
 Jonathon Schrader wrote:
  I'm running 3.0.20b on a Fedora Core 4 box (although I've seen the same
  results with a FC4 stock 3.0.14a release) and my Windows XP boxes
  (service pack 2) that are on my LAN.
  What I'm seeing is an inability for the machines to read a list of files
  in alphabetical order, with the folders at the top, and the files at the
  bottom.

 Possibly it is related to Bug 3269 which I opened. This bug is related to
 wild cards showing more files than it should as the wild card spec does not
 match a file returned. I would have thought alpha order sort, like DIR
 /O, would be a client side thing, but I really don't know for sure. With
 the wild card bug it makes me wonder if the sort is maybe done by the
 server over the CIFS protocol.

 Currently there has been no comment on the bug report, thus no clue if this
 type of issue is on the developer's radar map already and they are just
 choosing not to take the time to mark as dupe or what actually might be
 the status of this. So, join the ??? club. ;-)

 --
 Michael Lueck
 Lueck Data Systems
 http://www.lueckdatasystems.com/

 Remove the upper case letters NOSPAM to contact me directly.

Hello

Same problem here. But it depends on the windows applications and the OS... 
some work, some don't.
For instance, I've seen the problem with Office 2000 in XP.
The worst is with installshield, because it seems to require to have the files 
in the right order to build its archives (not sure of the exact cause of the 
problem, but the developpers complained that they cannot use installshield 
anymore with the fileserver).
I know it could be argued that the sort should be done on the client, or that 
windows interfaces should be coherent ...
But the problems, for me, are linked to this : it seems that the sort is done 
on the server when the server is a windows OS (maybe because the filesystem 
returns the file list allready sorted), and it's quite a problem for some 
apps (some managers here can't use the 'open file' menu from office because 
the files are displayed unsorted).

Of course, the problem is perceived as coming from samba (and it is, because 
it works fine with a windows 2003 server for instance).

Should I add some more at the end of the bug 3269 so that it is seen as 
important ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] 3.0.20b - vfs_GetWd: SMB_VFS_GETWD call failed

2005-12-13 Thread Pierre Lebrun

Hi,

I just migrate 2 networks with 3.0.20b as PDC with smbpasswd backend and 
discover the following error in log files:


[2005/12/13 08:43:30, 0, effective(20550, 2007), real(0, 0)] 
smbd/vfs.c:(851)

  vfs_GetWd: SMB_VFS_GETWD call failed, errno Permission denied

Does anyone know what this message is relevant for ?
I suppose a misconfiguration but have really no idea about the place
to look for.

Thank you for your help.

Pierre

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Would BDC Sync with Local Passwd?

2005-12-13 Thread Fabian Arrotin

Pavan krishna wrote:

Hi All,

I have a Samba PDC on my Suse 9.3 machine serving up to 25 clients 
with a OpenLdap backend.The samba user password  also *sync's with the 
LDAP Password and the Local User password*.


Why are you talking about Local user password if you're using LDAP ?
The goal of using ldap is to avoid creation of every users on every 
linux servers ...
You just have to configure your box as a ldap client and log in with a 
ldap account ... (see Yast for your Suse ...)
I suppose that all your ldap users are also posix users ? (and not only 
samba users ...)


 All Samba users also have a
local user account which is used by IMAP Server Accounts  Cyrus 
Authentication on the same machine. (So, One Password to email and samba 
for all users, if the user changes his password from the client machine 
all the passwords are synchronized). 


Same as before : if you have ldap, you don't need to create local users

Recently I have setup a BDC as well
which is working fine with the OpenLdap Replica. I would like to know 
whether the Samba BDC will also synchronizes with the local user 
password on the BDC machine. My Replica LDAP is updated on the BDC but 
am not sure whether the local user password is updated by the BDC in the 
same way as the PDC does. 


The local passwords are not synchronized from machine to machine (except 
if you're using ldap for all your accounts ...


(all user accounts are also created  on the

BDC machine.).

Thank's in advance.

cheers,
Pavan.




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: samba and sendmail

2005-12-13 Thread Fabian Arrotin

mallapadi niranjan wrote:

hi all
i have 2 servers , one is having sendmail + i would like to install samba
pdc with LDAP on other server.
can i integrate sendmail with samba, ie , i want mail users to be
authenticated with samba LDAP server.

Regards
Niranjan


Yes you can, but the question is not 'integrate sendmail with samba', 
but 'integrate sendmail with ldap' ...
As soon as your samba accounts are also posix accounts, you can 
configure sendmail to search ldap for mail addresses and use for example 
dovecot as imap server ...


Regards

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba Performance + File Access log veto files.

2005-12-13 Thread updatemyself .
Hai All,

I would like to know how to configure log about all file accesses on the
samba shares to investigate who has deleted or modified the files on the
share.

Also i would like to know how I can block users from copying mp3 file to
share. I found veto files option and wish to know more about it.

I having 2TB volumes. My samba server is authenticating to Windows 2003 ADS.

Hope some one can guide me to make my server more robust.

Here is my smb.conf file configuration...

#=== Global Settings

[global]

   workgroup = MYDOMAIN
   server string = Samba Server
   log file = /var/log/samba/%m.log
   max log size = 50
   security = ads
   encrypt passwords = yes
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   dns proxy = no


#=== Share Definitions
==
   #ldap idmap suffix = ou=emplist,dc=dqe,dc=com
   password server = 172.16.20.200
   realm = MYDOMAIN.COM
   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   template shell = /bin/bash
   template homedir = /home/%D/%U
   allow trusted domains = no
   idmap backend = idmap_rid:DQE=16777216-33554431
   winbind use default domain = yes


[vol7]
   path = /vol07_1000
   writable = yes
   valid users = @1629
   inherit owner = yes
   inherit permissions = yes
   inherit acls = yes
   nt acl support = yes
   create mask = 0644
   directory mask = 0775
   security mask = 0755
   force security mode = 
   directory security mask = 0777
   force directory security mode = 


=

Please Suggest me the changes for best performance!

Thank You in Advance,

Regards,
Jerrynikki.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Smaba no start

2005-12-13 Thread Rodrigo de Freitas Cabral
Since that I removed one of the interfaces of net of the server, the
Samba presents problems generating following log:

 

ec 13 09:41:46 sfs nmbd[2503]: [2005/12/13 09:41:46, 0]
nmbd/nmbd_browsesync.c:get_domain_master_name_node_status_fail(488) 

Dec 13 09:41:46 sfs nmbd[2503]:
get_domain_master_name_node_status_fail: 

Dec 13 09:41:46 sfs nmbd[2503]:   Doing a node status request to the
domain master browser at IP 172.16.42.2 failed. 

Dec 13 09:41:46 sfs nmbd[2503]:   Cannot get workgroup name. 

Dec 13 09:41:59 sfs crontab[2649]: (root) END EDIT (root)

Dec 13 09:44:21 sfs smbd[2671]: [2005/12/13 09:44:21, 0]
lib/util_sock.c:read_socket_data(384) 

Dec 13 09:44:21 sfs smbd[2671]:   read_socket_data: recv failure for 4.
Error = Connection reset by peer 

Dec 13 09:44:32 sfs smbd[2509]: [2005/12/13 09:44:32, 0]
smbd/service.c:make_connection(794) 

Dec 13 09:44:32 sfs smbd[2509]:   esc04 (172.16.42.122) couldn't find
service ::{2227a280-3aea-1069-a2de-08002b30309d} 

 

Somebody knows as to decide?  Already I removed the SAMBA I reinstalled,
but without success...

 

Thanks!!!

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Smaba no start

2005-12-13 Thread Frank Schifferstein
posting your smb.conf would help maybe 

:)

[EMAIL PROTECTED] wrote:
 Since that I removed one of the interfaces of net of the server, the
 Samba presents problems generating following log:
 
 
 
 ec 13 09:41:46 sfs nmbd[2503]: [2005/12/13 09:41:46, 0]
 nmbd/nmbd_browsesync.c:get_domain_master_name_node_status_fail(488)
 
 Dec 13 09:41:46 sfs nmbd[2503]:
 get_domain_master_name_node_status_fail:
 
 Dec 13 09:41:46 sfs nmbd[2503]:   Doing a node status request to the
 domain master browser at IP 172.16.42.2 failed.
 
 Dec 13 09:41:46 sfs nmbd[2503]:   Cannot get workgroup name.
 
 Dec 13 09:41:59 sfs crontab[2649]: (root) END EDIT (root)
 
 Dec 13 09:44:21 sfs smbd[2671]: [2005/12/13 09:44:21, 0]
 lib/util_sock.c:read_socket_data(384)
 
 Dec 13 09:44:21 sfs smbd[2671]:   read_socket_data: recv
 failure for 4.
 Error = Connection reset by peer
 
 Dec 13 09:44:32 sfs smbd[2509]: [2005/12/13 09:44:32, 0]
 smbd/service.c:make_connection(794)
 
 Dec 13 09:44:32 sfs smbd[2509]:   esc04 (172.16.42.122) couldn't find
 service ::{2227a280-3aea-1069-a2de-08002b30309d}
 
 
 
 Somebody knows as to decide?  Already I removed the SAMBA I
 reinstalled, but without success...
 
 
 
 Thanks!!!

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Unable to display security information on windows printers security tab

2005-12-13 Thread Grégory Benoist
Hello,

I just installed RHEL3 on a brand new server, with samba and cups. The
packages used are RHEL3 official RPMs samba-3.0.9-1.3E.5 and
cups-1.1.17-13.3.32.

I configured samba with security = ADS, and i can authenticate my
users on our windows domain AD; everything works fine with files and
shares, etc.

When i configure a cups printer, and then export it to samba, i can
add drivers  thru the windows interface into the [print$] share as a
printer administrator, connect to it, download and install drivers,
print a test page. it just works like a charm.

But... if i look in the printer properties window, i can't access the
security information of the printer. when i click on the security tab,
i get this message: Unable to display security information.

If i try to connect and auto install the printer drivers from a normal
user account, i get this message: Unable to connect. Access denied

I also tried with SERNET samba3 rpm version 3.0.20b, same problem.

When browsing the archive of this list, i found a post describing the
same problem, and Gerald (Jerry) Carter asked for the ouput of this
command:

[EMAIL PROTECTED] cups]# rpcclient medellin -U CCI_74+administrateur  -c
'getprinter X535-C3 3'
Password:
flags:[0x4]
DACL
ACL Num ACEs:   3   revision:   2
---
ACE
type: ACCESS ALLOWED (0) flags: 2
Specific bits: 0x0
Permissions: 0xe000: Generic execute access
Generic write access Generic read access
SID: S-0-0

ACE
type: ACCESS ALLOWED (0) flags: 9
Specific bits: 0x0
Permissions: 0x1000: Generic all access
SID: S-1-5-21-57989841-113007714-682003330-500

ACE
type: ACCESS ALLOWED (0) flags: 2
Specific bits: 0x0
Permissions: 0x1000: Generic all access
SID: S-1-5-21-57989841-113007714-682003330-500

Owner SID:  S-1-5-21-57989841-113007714-682003330-500


Does anyone know what cause this problem? Where should i look to
understand and hopefully fix this problem?

--
Grégory Benoist
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] samba - cups rights problem

2005-12-13 Thread Louis van Belle
nobody who knows the solution?  

-Oorspronkelijk bericht-
Van: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] 
Namens Louis van Belle
Verzonden: maandag 12 december 2005 16:35
Aan: samba@lists.samba.org
Onderwerp: [Samba] samba - cups rights problem

Hi, 

i have a small problem, 
i use CUPS - Raw printing, which works perfectly .. i thought.. 

When i , as Administrator ( or domain Admins ) print and want 5 copies 
there will be 5 copies.
But when i do this as a Domain User, i get only 1 copy.

Where am i missing something.

Here's my printer config.
 

## PRINTING Section 1 !! Global Settings !!
printing = cups
load printers = Yes
show add printer wizard = Yes
max print jobs = 100
printcap name = cups
printer admin = @Printer Operators,@Domain
Admins,Administrator,root
lpq cache time = 20
use client driver = No
disable spoolss = No
max reported print jobs = 1000

# PRINTING Section 2 !!
[printers]
comment = All Network Printers
printable = yes
path = /home/samba/spool
browseable = No
guest ok = yes
public = yes
read only = yes
writable = no
create mode = 0777
lpq command = /usr/bin/lpq -P'%p'
lprm command = /usr/bin/lprm -P'%p' %j
lppause command = /usr/sbin/lpc hold '%p' %j
lpresume command = /usr/sbin/lpc release '%p' %j
queueresume command = /usr/sbin/lpc start '%p'
queuepause command = /usr/sbin/lpc stop '%p'

 

 ### Printing Section 3 The Windows Printer drivers
[print$]
comment = Printer Drivers Download Area
path = /home/samba/printers
browseable = no
guest ok = no
read only = yes
write list = @Print Operators,@Domain 
Admins,Administrator,root
create mask = 0664
directory mask = 0775
valid users = @Domain Users,@Print Operators,@Domain
Admins,Administrator,root


 

 

 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: samba - cups rights problem

2005-12-13 Thread Pierre Lebrun

Louis van Belle wrote:
Hi, 

i have a small problem, 
i use CUPS - Raw printing, which works perfectly .. i thought.. 

When i , as Administrator ( or domain Admins ) print and want 5 copies 
there will be 5 copies.

But when i do this as a Domain User, i get only 1 copy.

Where am i missing something.

Here's my printer config.
 


## PRINTING Section 1 !! Global Settings !!
printing = cups
load printers = Yes
show add printer wizard = Yes
max print jobs = 100
printcap name = cups
printer admin = @Printer Operators,@Domain
Admins,Administrator,root
lpq cache time = 20
use client driver = No
disable spoolss = No
max reported print jobs = 1000

# PRINTING Section 2 !!
[printers]
comment = All Network Printers
printable = yes
path = /home/samba/spool
browseable = No
guest ok = yes
public = yes
read only = yes
writable = no
create mode = 0777
lpq command = /usr/bin/lpq -P'%p'
lprm command = /usr/bin/lprm -P'%p' %j
lppause command = /usr/sbin/lpc hold '%p' %j
lpresume command = /usr/sbin/lpc release '%p' %j
queueresume command = /usr/sbin/lpc start '%p'
queuepause command = /usr/sbin/lpc stop '%p'

 


 ### Printing Section 3 The Windows Printer drivers
[print$]
comment = Printer Drivers Download Area
path = /home/samba/printers
browseable = no
guest ok = no
read only = yes
write list = @Print Operators,@Domain Admins,Administrator,root
create mask = 0664
directory mask = 0775
valid users = @Domain Users,@Print Operators,@Domain
Admins,Administrator,root


Are you sure that the problem comes with CUPS ?
Did you try to replay the scenario on another WS ?
If no, I would think it could be something wrong with the printer driver 
on your workstation (privileges or broken driver).


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: samba - cups rights problem

2005-12-13 Thread Louis van Belle
I tryed this on about 15 pc's.

As long as the user has administrator rights he is able 
to print multiple copies and if you are a user only 1  

here are the file system rights
drwxrwxr-x   5 Administrator Domain Admins 4096 Jun  7  2005 printers
drwxrwxrwx   2 Administrator Domain Admins 4096 Dec 13 15:53 spool
drwxrwxrwx   2 Administrator Domain Admins 4096 Oct 11 09:02 temp

Louis


-Oorspronkelijk bericht-
Van: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] 
Namens Pierre Lebrun
Verzonden: dinsdag 13 december 2005 15:08
Aan: samba@lists.samba.org
Onderwerp: [Samba] Re: samba - cups rights problem

Louis van Belle wrote:
 Hi, 
 
 i have a small problem, 
 i use CUPS - Raw printing, which works perfectly .. i thought.. 
 
 When i , as Administrator ( or domain Admins ) print and 
want 5 copies 
 there will be 5 copies.
 But when i do this as a Domain User, i get only 1 copy.
 
 Where am i missing something.
 
 Here's my printer config.
  
 
 ## PRINTING Section 1 !! Global Settings !!
 printing = cups
 load printers = Yes
 show add printer wizard = Yes
 max print jobs = 100
 printcap name = cups
 printer admin = @Printer Operators,@Domain
 Admins,Administrator,root
 lpq cache time = 20
 use client driver = No
 disable spoolss = No
 max reported print jobs = 1000
 
 # PRINTING Section 2 !!
 [printers]
 comment = All Network Printers
 printable = yes
 path = /home/samba/spool
 browseable = No
 guest ok = yes
 public = yes
 read only = yes
 writable = no
 create mode = 0777
 lpq command = /usr/bin/lpq -P'%p'
 lprm command = /usr/bin/lprm -P'%p' %j
 lppause command = /usr/sbin/lpc hold '%p' %j
 lpresume command = /usr/sbin/lpc release '%p' %j
 queueresume command = /usr/sbin/lpc start '%p'
 queuepause command = /usr/sbin/lpc stop '%p'
 
  
 
  ### Printing Section 3 The Windows Printer drivers
 [print$]
 comment = Printer Drivers Download Area
 path = /home/samba/printers
 browseable = no
 guest ok = no
 read only = yes
 write list = @Print Operators,@Domain 
Admins,Administrator,root
 create mask = 0664
 directory mask = 0775
 valid users = @Domain Users,@Print Operators,@Domain
 Admins,Administrator,root
 
Are you sure that the problem comes with CUPS ?
Did you try to replay the scenario on another WS ?
If no, I would think it could be something wrong with the 
printer driver 
on your workstation (privileges or broken driver).

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] New to Linux Samba client to Samba server - file owners / perms

2005-12-13 Thread Michael Lueck
I just had need to try out the Samba Client for the first time, having it connect to our Samba 3 PDC. I noticed an interesting behavior I was not at all expecting, and wonder what the explanation 
might be.


I was in the process of rescuing some data from an NTFS system with the INSERT CD, version 1.3.5a_en which comes with integrated Samba client and Captive for NTFS support. I used smbmount to attach to 
the server, then zipped the data onto the server.


The files created on the server, doing ls -al from the client side, show root:root for the security, and rwxr-xr-x. That is not the create mask I have on the share! However, going over to the server 
and checking the files, they are owned by the account I signed in to Samba with, and the create mask is properly 0777 which is what I had on that share.


So, why in the world is the Samba client showing AND ENFORCING different perms than actually got written to the filesystem on the server? I was expecting Linux client / server to be more in sync with 
matching settings, but this seems far less in sync than connecting to our server with Win2K!


TIA for shining some light on details I have obviously missed.

--
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/

Remove the upper case letters NOSPAM to contact me directly.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbclient lookup fails when querying local machine

2005-12-13 Thread ryan punt
No such luck:

in smb.conf:
name resolve order = host bcast

Results:
boothost:~# smbclient -L 172.21.23.1 -Uvalidusr
added interface ip=172.21.23.1 bcast=172.21.23.255 nmask=255.255.255.0
Password:
session setup failed: Call timed out: server did not respond after 2 
milliseconds

Can bad WINS entries affect results even if WINS isn't in the name resolve 
order?

--

 Adam Nielsen [EMAIL PROTECTED] 12/12/2005 4:33:00 PM 
 wins.dat should list the IP address for this host as 172.21.23.1.

In this case using -L 172.21... instead of -L BH1230 should work.
There was a post earlier with the subject Changed IP address that
recommended editing wins.dat to fix the IP problem.

Cheers,
Adam.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Migrating W2K Workstation to Samba Domain

2005-12-13 Thread Michael Urban
My message dated: Mon, 12 Dec 2005 10:16:14 EST
 I am replacing a W2K AD server with a Samba server.  The server has
 a single W2K Workstation client, in a public area and used by a dozen
 or so different users.  When I join the workstation to the Samba domain,
 it complains that it cannot load a roaming profile (in the W2K AD domain,
 it used local profiles), and it does not create a new local profile,
 instead using a temporary profile.
 
 Obviously a permission problem somewhere.  What is the exact problem,
 and what is the solution?


I am still at sea on this.  To clarify things a bit more, users of
this workstation (under the W2K server) have local profiles, not
floating profiles.  I would like to let them continue to have local
profiles, even if it proves impossible to let them use their old
ones due to permission problems.  However, even removing their
directories from C:\Documents and Settings does not help - Windows
does not create a new one for them (as all the documentation I have
read led me to believe it would).o

logon path=
logon home=

does not seem to affect this situation.  It still seems to try
to get a floating profile, fails, and then makes a local profile
in TEMP.

Hasn't anyone performed this sort of migration before?  What
other information can I provide (or try to glean from log files)
to get this sorted out?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Worked examples?

2005-12-13 Thread Donald Musser
I've been experimenting with Samba a bit. I won't claim to know a whole lot
about it, because I don't, and I'm even somewhat of a newbie when it comes
to Linux/UNIX. But I've been working with the worked examples that the HOW
TO docs describe on the website, configuring my smb.conf file as is stated.
I'm running Samba 3.0.14a-2 on Fedora Core 4, and I'm running into a bit of
a problem. When I work with the example of a simple Anonymous Read-Only File
Server, I am able to access those files from my WinXP system just fine.
However, when I get to the example of a Secure Office Server, I am able to
log in using any of the users I specified in my config, but none of the
users are able to view any files I've placed in that share -- not even the
owner of the files. This is the case when I try to access the files from
both my WinXP system and locally by logging into the Samba server from
command line. I can post my smb.conf file if needed, but I was wondering if
there's something common that I'm missing...

TIA,

~Myles
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Worked examples?

2005-12-13 Thread Craig White
On Tue, 2005-12-13 at 10:45 -0500, Donald Musser wrote:
 I've been experimenting with Samba a bit. I won't claim to know a whole lot
 about it, because I don't, and I'm even somewhat of a newbie when it comes
 to Linux/UNIX. But I've been working with the worked examples that the HOW
 TO docs describe on the website, configuring my smb.conf file as is stated.
 I'm running Samba 3.0.14a-2 on Fedora Core 4, and I'm running into a bit of
 a problem. When I work with the example of a simple Anonymous Read-Only File
 Server, I am able to access those files from my WinXP system just fine.
 However, when I get to the example of a Secure Office Server, I am able to
 log in using any of the users I specified in my config, but none of the
 users are able to view any files I've placed in that share -- not even the
 owner of the files. This is the case when I try to access the files from
 both my WinXP system and locally by logging into the Samba server from
 command line. I can post my smb.conf file if needed, but I was wondering if
 there's something common that I'm missing...

why not just figure out 1 share and the rest of the shares should be
obvious?

for example...one of my shares...

[files]
valid users = @dom_users
writable = yes
comment = Home Directories
path = /home/samba/files
create mode = 775
writable = yes
directory mode = 775

and to check the permissions on that directory...

# ls -ld /home/samba/files/
drwxrwsr-x6 root dom_users 4096 Mar 10
2005 /home/samba/files/

# getent group |grep cami
dom_users:x:503:cami,carley,craig,tom,teri

thus cami, who is a member of dom_users group has read/write access

Why not post something similar about one of your shares and perhaps it
will be obvious to use.

I am presuming that you are using 'security = user' in smb.conf.

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] deleting print jobs as user...

2005-12-13 Thread Thomas Besser
Hi,

I'm running a samba (3.0.14a) pdc with cups (1.1.20) on a debian stable box.

Domain Users can print without problems from windows (xp). But deleting
their own jobs is not possible: access denied. Same thing happens as
'printer admin'.

I found no documentation or samba options about that topic. So I have no
clue, where starting to solve this problem.

Any clues?

Regards
Thomas


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Can't see shares on a server member

2005-12-13 Thread Lapin(c)

Hi team,

I'm dealing with AS/U as a member server on a Samba 3.0.20 PDC.
Jonction seems ok, and from the member server I can see PDC's shares (with
net view) and authenticate user (with net logon user passwd
/domain:domainname).

On the other side, I fell into timeout when running smbclient -L member
from the PDC. Here is a log.nmbd loglevel 10 from PDC as there is no other
log generation. It seems to be located around SAMLOGON calls.
On member side, I can extract that AS/U is unable to locate a domain
controller even if it is well defined on NetBIOS layer :

AS/U Logs :
DATE: 12/13/05EVENT ID: 5719
TIME: 05:16:07PM  SOURCE:   NETLOGON
USER: N/A TYPE: Error
COMPUTER: U86FCATEGORY: None

DESCRIPTION: No domain controller is available for domain DOMAINNAME for the
following reason:  There are currently no logon servers available to
service the logon request.

Domaine name : U86F.DOM
PDC : U86H ; member : U86F
Samba log.nmbd :
[Tue Dec 13 17:09:08 2005
, 10] lib/util_sock.c:read_udp_socket(285)
  read_udp_socket: lastip 10.244.142.1 lastport 137 read: 50
[Tue Dec 13 17:09:08 2005
, 10] libsmb/nmblib.c:parse_nmb(506)
  parse_nmb: packet id = 33066
[Tue Dec 13 17:09:08 2005
, 5] libsmb/nmblib.c:read_packet(754)
  Received a packet of len 50 from (10.244.142.1) port 137
[Tue Dec 13 17:09:08 2005
, 4] libsmb/nmblib.c:debug_nmb_packet(112)
  nmb packet from 10.244.142.1(137) header: id=33066 opcode=Query(0)
response=No
  header: flags: bcast=Yes rec_avail=No rec_des=Yes trunc=No auth=No
  header: rcode=0 qdcount=1 ancount=0 nscount=0 arcount=0
  question: q_name=U86F.DOM1b q_type=32 q_class=1
[Tue Dec 13 17:09:08 2005
, 10] nmbd/nmbd_winsserver.c:packet_is_for_wins_server(155)
  packet_is_for_wins_server: failing WINS test #1.
[Tue Dec 13 17:09:08 2005
, 3] nmbd/nmbd_incomingrequests.c:process_name_query_request(453)
  process_name_query_request: Name query from 10.244.142.1 on subnet
10.244.142.
2 for name U86F.DOM1b
[Tue Dec 13 17:09:08 2005
, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70)
nmbd_subnetdb:namelist_entry_compare()
-2 == memcmp( U86F.DOM1b, U86F.DOM1d, 84 )
[Tue Dec 13 17:09:08 2005
, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70)
nmbd_subnetdb:namelist_entry_compare()
-1 == memcmp( U86F.DOM1b, U86F.DOM1c, 84 )
[Tue Dec 13 17:09:08 2005
, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70)
nmbd_subnetdb:namelist_entry_compare()
0 == memcmp( U86F.DOM1b, U86F.DOM1b, 84 )
[Tue Dec 13 17:09:08 2005
, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(123)
  find_name_on_subnet: on subnet 10.244.142.2 - found name U86F.DOM1b
source=2
[Tue Dec 13 17:09:08 2005
, 3] nmbd/nmbd_incomingrequests.c:process_name_query_request(569)
  OK
[Tue Dec 13 17:09:08 2005
, 4] nmbd/nmbd_packets.c:reply_netbios_packet(936)
  reply_netbios_packet: sending a reply of packet type: nmb_query
U86F.DOM1b t
o ip 10.244.142.1 for id 33066
[Tue Dec 13 17:09:08 2005
, 4] libsmb/nmblib.c:debug_nmb_packet(112)
  nmb packet from 10.244.142.1(137) header: id=33066 opcode=Query(0)
response=Ye
s
  header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes
  header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
  answers: nmb_name=U86F.DOM1b rr_type=32 rr_class=1 ttl=259200
  answers   0 char ..   hex 0AF48E02
[Tue Dec 13 17:09:08 2005
, 5] libsmb/nmblib.c:send_udp(776)
  Sending a packet of len 62 to (10.244.142.1) on port 137
[Tue Dec 13 17:09:08 2005
, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(172)
  find_workgroup_on_subnet: workgroup search for U86F.DOM on subnet
10.244.142.2
: found.
[Tue Dec 13 17:09:08 2005
, 10] nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(372)
  announce_myself_to_domain_master_browser: no unicast subnet, ignoring.
[Tue Dec 13 17:09:08 2005
, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(284)
  dump_workgroups()
   dump workgroup on subnet10.244.142.2: netmask=  255.255.252.0:
U86F.DOM(1) current master browser = U86H
U86H 400c9b2b (Serveur MMA)
U86F 40029b03 (Advanced Server for UNIX Systems)
[Tue Dec 13 17:09:08 2005
, 10] lib/util_sock.c:read_udp_socket(285)
  read_udp_socket: lastip 10.244.142.1 lastport 138 read: 268
[Tue Dec 13 17:09:08 2005
, 5] libsmb/nmblib.c:read_packet(754)
  Received a packet of len 268 from (10.244.142.1) port 138
[Tue Dec 13 17:09:08 2005
, 10] nmbd/nmbd_subnetdb.c:namelist_entry_compare(70)
nmbd_subnetdb:namelist_entry_compare()
0 == memcmp( U86F.DOM1b, U86F.DOM1b, 84 )
[Tue Dec 13 17:09:08 2005
, 9] nmbd/nmbd_namelistdb.c:find_name_on_subnet(123)
  find_name_on_subnet: on subnet 10.244.142.2 - found name U86F.DOM1b
source=2
[Tue Dec 13 17:09:08 2005
, 4] nmbd/nmbd_packets.c:process_dgram(1266)
  process_dgram: datagram from NetRFC ^H00 to U86F.DOM1b IP
10.244.142.1 for
 \MAILSLOT\NET\NTLOGON of type 18 len=92
[Tue Dec 13 17:09:08 2005
, 4] 

Re: [Samba] Add printer commad ...

2005-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 8 Dec 2005, Jeff Hardy wrote:

 Download the samba source and check out
 the /examples/scripts/printing/cups directory for some EXTREMELY
 skeletal examples of these scripts. :)

If anyone has any better examples, please send them. 






cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
Centeris ---  http://www.centeris.com
There's an anonymous coward in all of us.   --anonymous
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFDnvsNIR7qMdg1EfYRAuYNAJ4+nTdJ5e7PUYLnWqLe61g0BchOtACdEtZn
Ih0730q2u3eX9ocIyhReiO4=
=ClVR
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Build error of rpm for samba-3.0.21rc2 on Centos 4.2

2005-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Fri, 9 Dec 2005, Oliver Schulze L. wrote:

 I think rpmbuild picks the packaging/Fedora/samba.spec file.

run sh makerpms.sh.  Don't use the spec file directly.






cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
Centeris ---  http://www.centeris.com
There's an anonymous coward in all of us.   --anonymous
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFDnvtKIR7qMdg1EfYRAukBAJ4nNCl43qs0u/PT4vAqnZ7dpOgDuQCgijn5
3AWIGi3Ya59IhDykXaWgsYA=
=1z8w
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Hanging SMBD processes - Samba CRASHING

2005-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 8 Dec 2005, Matt Johnson wrote:

 On Thu, 8 Dec 2005, [EMAIL PROTECTED] wrote:
 
  We've had similar troubles with Samba 3.x on our ClearCase VOB server
  running RHEL3.  Our fix was to go back to the old 2.2.12, and we haven't
  had a problem since.  Unfortunately I was never able to devote enough
  time
  to tracking down the problem fully.  I had hoped that upgrading to RHEL4
  using a 2.6 kernel would help, but your experience doesn't bode well for
  that.
 
 We had similar problems. stracing hung child smbd processes pointed the 
 finger at *local* locking issues: processes were hanging in 
 fcntl(...,F_SETLKW64,...) for one byte locks on fd 14 = locking.tdb; the 
 culprit function is tdb_brlock.

What is the local filesystem?  And remind me what server OS this.
RHEL 4 ?  Thanks.

 Turning off oplocks seems to have helped, but we'd also like to get to 
 the bottom of this... is this fcntl/locking hang behavior what you are 
 seeing too?

The tdb files make extensive use of byte range locking and a coherent
map implementation on the server. 





cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
Centeris ---  http://www.centeris.com
There's an anonymous coward in all of us.   --anonymous
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFDnvwSIR7qMdg1EfYRAmbHAJkB3Rt2LLUvAg00fMlSjo6gVghXFwCdG4Re
DMzt05E+Z/lXasn5YwsthlM=
=i6ui
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] cant start samba 3.0.20b binary on AIX 5.3

2005-12-13 Thread Brad Fulda
Hey all,

 

I downloaded the 3.0.20b binary (tar package) for AIX 5.3 and tried to
start the smbd and nmbd  daemons.  I initially ran into the AIO problems
listed in the Known issues section of the readme.  I made the
appropriate corrections and now I get this error msg:

 

[EMAIL PROTECTED] sbin]$./nmbd -D;./smbd -D
exec(): 0509-036 Cannot load program ./nmbd because of the following
errors:
0509-130 Symbol resolution failed for nmbd because:
0509-136   Symbol statvfs64 (number 134) is not exported from
   dependent module /usr/lib/libc.a(shr.o).
0509-136   Symbol opendir64 (number 169) is not exported from
   dependent module /usr/lib/libc.a(shr.o).
0509-136   Symbol closedir64 (number 170) is not exported from
   dependent module /usr/lib/libc.a(shr.o).
0509-136   Symbol readdir64 (number 171) is not exported from
   dependent module /usr/lib/libc.a(shr.o).
0509-136   Symbol seekdir64 (number 180) is not exported from
   dependent module /usr/lib/libc.a(shr.o).
0509-136   Symbol telldir64 (number 228) is not exported from
   dependent module /usr/lib/libc.a(shr.o).
0509-192 Examine .loader section symbols with the
 'dump -Tv' command.
exec(): 0509-036 Cannot load program ./smbd because of the following
errors:
0509-130 Symbol resolution failed for smbd because:
0509-136   Symbol statvfs64 (number 143) is not exported from
   dependent module /usr/lib/libc.a(shr.o).
0509-136   Symbol opendir64 (number 179) is not exported from
   dependent module /usr/lib/libc.a(shr.o).
0509-136   Symbol closedir64 (number 180) is not exported from
   dependent module /usr/lib/libc.a(shr.o).
0509-136   Symbol readdir64 (number 181) is not exported from
   dependent module /usr/lib/libc.a(shr.o).
0509-136   Symbol seekdir64 (number 190) is not exported from
   dependent module /usr/lib/libc.a(shr.o).
0509-136   Symbol telldir64 (number 245) is not exported from
   dependent module /usr/lib/libc.a(shr.o).
0509-192 Examine .loader section symbols with the
 'dump -Tv' command.

 

Here is also some pertinent info to go along with it:

 oslevel -r

   5300-00

 bootinfo -y

   64

  genkex|grep 64

3e7C000   398   /usr/lib/drivers/syscalls64.ext

3B44000   1A648   /usr/lib/drivers/pci/sisscsi_dd

Tia,

 

Brad Fulda

3D Research Corporation

Future Combat Systems

(256) 325-5949

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Hanging SMBD processes - Samba CRASHING

2005-12-13 Thread Matt Johnson

On Tue, 13 Dec 2005, Gerald (Jerry) Carter wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 8 Dec 2005, Matt Johnson wrote:


On Thu, 8 Dec 2005, [EMAIL PROTECTED] wrote:


We've had similar troubles with Samba 3.x on our ClearCase VOB server
running RHEL3.  Our fix was to go back to the old 2.2.12, and we haven't
had a problem since.  Unfortunately I was never able to devote enough
time
to tracking down the problem fully.  I had hoped that upgrading to RHEL4
using a 2.6 kernel would help, but your experience doesn't bode well for
that.


We had similar problems. stracing hung child smbd processes pointed the
finger at *local* locking issues: processes were hanging in
fcntl(...,F_SETLKW64,...) for one byte locks on fd 14 = locking.tdb; the
culprit function is tdb_brlock.


What is the local filesystem?  And remind me what server OS this.
RHEL 4 ?  Thanks.


Same problem on both ext3 and xfs. This is running on Mandrake 10.2 
(Mandriva Linux 2005 LE), with a 2.6.13 kernel.


Since turning off oplocks things have become *much* more stable, if 
rather slow.


--
==
Matt Johnson [EMAIL PROTECTED]   (020) 7594 8440 / x48440
Systems Programmer, Computing Support Group Office: Huxley 225
Department of Computing, Imperial College London
==
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Why not using the windows configuration wizard (joining a domain) with Samba-3?

2005-12-13 Thread Eric Roseme

John H Terpstra wrote:


On Monday 12 December 2005 02:22, Michael Billerbeck wrote:
 


Hi,

On Monday 12 Decemver 2005 09:46, John H Terpstra wrote:
   


On Sunday 11 December 2005 15:51, Michael Billerbeck wrote:
 


Hello,

in the Samba How-to I've read not to use the configuration wizard with
samba-3 when joining a domain.
Why that? Is there a problem?

Thanks,
Michael
   

Please point me at the specific reference in the HOWTO. I need to 
understand what causes you concern.


Please help me to understand your concern. If the documentation is
inadequate
 


I must correct of extend it.

Thanks.
 


In chapter 8.2.2 Joining a domain: Windows 2000/XP Professional (on page
131) point 4 says:
Click the computer name tab. [...] Clicking the Network ID button will
launch the configuration wizard. Do not use this with Samba-3.
I was asking this because I used it also with Samba-3 and I would like to
know if there are some side effects when using it or why it is explicitly
mentioned.
   



Joining through use of this tool did not work with early releases of Samba-3.
Try it. Let me know if it works now.

PS: If you try the NetworkID Wizard, and it fails, reboot the Windows PC 
before attempting to use the Change button. In the past, a failure when 
usign the NetworkID wizard would hose up the Windows client so that it then 
count not resolve the netbios name of the domain controller.


- John T.
 

Using the Users and Computers MMC adds the Samba computer object with a 
different UserAccountControl attribute value than when you use net ads 
join.  It used to be that the (apparent) default value of 4128 would 
not allow auth-n with MD5.  I just tested this (W2003SP1 and 3.0.14a) 
and it now works with MD5.  In other words, using the MMC to add the 
computer object, then doing a net ads join (Modifying Existing 
Object), now results in successful client auth-n - at least in this test 
case.  I have heard the same testimony from other sources.  I would 
still recommend adding the object with the net ads join, and the 
resulting UserAccountControl attribute value of 2166784.


Eric Roseme
Hewlett-Packard
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Printer Issue with Access XP

2005-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 7 Dec 2005, Joe Cipale wrote:

 Personally.. I would say scrap Samba printing as a printing solution 
 between linux/unix and XP and install a dedicated print server. HP, 
 Linksys and D-Link all make very good, reliable solutions that are very 
 easy to setup and configure.
 
 This will save you a great deal of time, energy and headaches. Just my 
 opinion, mind you.

This is pretty bad advice in large environments.  In smaller networks,
direct IP printing is a breeze.  But in larger networks centeralized 
driver management is a must.







cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
Centeris ---  http://www.centeris.com
There's an anonymous coward in all of us.   --anonymous
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFDnvyGIR7qMdg1EfYRAg/+AJ93RzRV299Cg/zzf321+GnHTdSL8gCgsAzB
/DLSAcVRylABX3Tcn976nHE=
=Fqlq
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Enumerate computers in WG/domain

2005-12-13 Thread Henrik Zagerholm

Hi!
Is there any smaba tool that will let me enumerate all computers in a  
specific domain or workgroup?

Have been looking through the normal commands but havn't found anything.

Regards,
Henrik
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Build error of rpm for samba-3.0.21rc2 on Centos 4.2

2005-12-13 Thread Oliver Schulze L.

Hi Jerry,
I'm could build sucessfully in Centos4.2 (RHEL4 U2 compatible) with this
patch to the file:
packaging/Redhat/makerpms.sh

# diff makerpms.sh makerpms.sh.centos4
49c49
 4.[12]*)
---
 4.[123]*)

In centos4.2 I have this:
$ rpm --version
RPM version 4.3.3

HTH
Oliver

Gerald (Jerry) Carter wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Fri, 9 Dec 2005, Oliver Schulze L. wrote:

  

I think rpmbuild picks the packaging/Fedora/samba.spec file.



run sh makerpms.sh.  Don't use the spec file directly.

  


--
Oliver Schulze L.
[EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Build error of rpm for samba-3.0.21rc2 on Centos 4.2

2005-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 13 Dec 2005, Oliver Schulze L. wrote:

 Hi Jerry,
 I'm could build sucessfully in Centos4.2 (RHEL4 U2 compatible) with this
 patch to the file:
 packaging/Redhat/makerpms.sh
 
 # diff makerpms.sh makerpms.sh.centos4
 49c49
  4.[12]*)
 ---
  4.[123]*)
 
 In centos4.2 I have this:
 $ rpm --version
 RPM version 4.3.3

ok.  THanks.  I'll fix that.






cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
Centeris ---  http://www.centeris.com
There's an anonymous coward in all of us.   --anonymous
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFDnxfZIR7qMdg1EfYRAgSwAKCU+otXqS1C3BAUYyPdkdq/yGdZWgCg5P/h
bghRXg7x7PXQsJjeiqE59N8=
=DFik
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba Question - Windows / Linux

2005-12-13 Thread Jamie Borst
I'll preface this by saying I'm a sales person and am not super technical.

Question:
We are looking to implement an iSCSI SAN that will be accessed by
Windows and Linux servers.  We want everyone to have access to all files so
the question is: will Samba on the Linux servers allow them to access the
same files the Windows folks can?  All servers have iSCSI initiators on
them.

If you need more info to answer the question, please let me know.

Thanks


Jamie Borst
Scale Datacom LLC
T: 603.432.4891
F: 603.251.6535
AIM: JamieScale
http://www.scaledatacom.com
-- Datacom / Storage --


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Worked examples?

2005-12-13 Thread Mark Sarria
Post your Config file, let's take a look!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Donald Musser
Sent: Tuesday, December 13, 2005 7:46 AM
To: samba@lists.samba.org
Subject: [Samba] Worked examples?

I've been experimenting with Samba a bit. I won't claim to know a whole lot
about it, because I don't, and I'm even somewhat of a newbie when it comes
to Linux/UNIX. But I've been working with the worked examples that the HOW
TO docs describe on the website, configuring my smb.conf file as is stated.
I'm running Samba 3.0.14a-2 on Fedora Core 4, and I'm running into a bit of
a problem. When I work with the example of a simple Anonymous Read-Only File
Server, I am able to access those files from my WinXP system just fine.
However, when I get to the example of a Secure Office Server, I am able to
log in using any of the users I specified in my config, but none of the
users are able to view any files I've placed in that share -- not even the
owner of the files. This is the case when I try to access the files from
both my WinXP system and locally by logging into the Samba server from
command line. I can post my smb.conf file if needed, but I was wondering if
there's something common that I'm missing...

TIA,

~Myles
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba to Samba

2005-12-13 Thread jdickens
Hi all,

Very new to the linux world.  Trying to determine how to setup two samba 
servers.  One is already setup and running as the main Samba File Server. 
The new one I am trying to add will just be an additional file server for 
users. 

When I turn the Samba service on the new server, it constantly forces 
elections on which server is the local master and which one is not.  When 
this occurs, it appears that the network slows down considerably.

Global Settings for Server 1(Existing Server) are:
os level = 35
domain master = yes
preferred master = yes

Global settings for Server 2(New Server) are:
os level = 0
local master = no
domain master = no
preferred master = no

How do I stop the Force Election?

Is that really causing the slow response time on the existing server?

Any help would be greatly appreciated.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Worked examples?

2005-12-13 Thread Donald Musser
Alright, here it is...

[global]
workgroup = swtest
netbios name = nagios-02
printcap name = cups
disable spoolss = Yes
show add printer wizard = No
printing = cups

[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No

[public]
comment = Data
paht = /export1
force user = maryo
force group = users
guest ok = Yes
read only = No

[printers]
comment = All Printers
path /var/spool/samba
printer admin - root, maryo
create mask = 0600
guest ok = Yes
printable = Yes
use client driver = Yes
browseable = No

#EOF

[EMAIL PROTECTED] /]# ls -al export1
total 24
drwxr-x---   2 maryo users 4096 Dec 12 13:49 .
drwxr-xr-x  25 root  root  4096 Dec 13 14:03 ..
-rw-r--r--   1 root  root   644 Dec 12 13:49 hi

Notice anything? Anymore info you need? I've been logging in mainly as maryo
in this setup.

-Myles



On 12/13/05, Mark Sarria [EMAIL PROTECTED] wrote:

 Post your Config file, let's take a look!


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf
 Of
 Donald Musser
 Sent: Tuesday, December 13, 2005 7:46 AM
 To: samba@lists.samba.org
 Subject: [Samba] Worked examples?

 I've been experimenting with Samba a bit. I won't claim to know a whole
 lot
 about it, because I don't, and I'm even somewhat of a newbie when it comes
 to Linux/UNIX. But I've been working with the worked examples that the HOW
 TO docs describe on the website, configuring my smb.conf file as is
 stated.
 I'm running Samba 3.0.14a-2 on Fedora Core 4, and I'm running into a bit
 of
 a problem. When I work with the example of a simple Anonymous Read-Only
 File
 Server, I am able to access those files from my WinXP system just fine.
 However, when I get to the example of a Secure Office Server, I am able to
 log in using any of the users I specified in my config, but none of the
 users are able to view any files I've placed in that share -- not even the
 owner of the files. This is the case when I try to access the files from
 both my WinXP system and locally by logging into the Samba server from
 command line. I can post my smb.conf file if needed, but I was wondering
 if
 there's something common that I'm missing...

 TIA,

 ~Myles
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.20 acls not working anymore and problem with winbindd_idmap.tdb

2005-12-13 Thread Sabine Jordan
Hi Folks,

I am experiencing some problems with samba 3.0.20 which I can not solve
on my own. We have updated from samba 3.0.10 to samba 3.0.20, but I am
not sure when the problems started.

We had a problem with idmap - I had hoped to solve - before. Whenever
we rebooted the server, all of the ACLs got jumbled up. I thought that
our winbindd_idmap.tdb somehow got broken. I re-created it, but still
the problem persists. We use winbindd to get all the Groups and Users
from Active Directory, and we have 2 samba-servers joined to the same
domain. Now I have found out that this could be the cause of the
problem I have with my idmap. Is it a good idea to change winbindd
configuration to windbindd with an NSS/LDAP backend-based idmap
facility? How can I change form local tdb to ldap-tbs without using my
user and group assignsments? I can not afford to loose all or mess up
all the ALCs on the first server. I think this is a bigger issue and
needs to be thought over carefully.

But now to the other problem I have on the second and smaller
samba-server. I have had some trouble concerning access rights where
users were trying to save a file on a share getting File exits error
messages. (But the file did not exist before!) After another attempt to
save the same file the operation was successfull. I could not trace the
problem after examining the acls with getfacl on the server. Everything
seemed to be alright.

Here's the global-section of my smb.conf:

# Global parameters
[global]
workgroup = DTMS
netbios name = MAX
security = domain
password server = skynet, orion, *
server string = MAX rate one Fileserver
domain master = no
os level = 2
unix extensions = Yes
encrypt passwords = yes
interfaces = eth0

log level = 2
log file = /var/log/samba/%m
max log size = 2048
syslog = 0

acl check permissions = yes
   #seems to change nothing...

name resolve order = lmhosts hosts bcast
wins support = no
wins server = 192.168.9.4
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY

#   
#   winbind section
#   
winbind uid = 1-2
winbind gid = 1-2
template shell = /bin/bash
template homedir = /distributed/samba-freigaben/user/%U
template shell = /bin/false
nt acl support = yes
winbind separator = +
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
obey pam restrictions = yes

Removing and resetting the acls with setfacl as well as rebooting the
machine did not help either. I have tried to view the ACLS via mapped
Share through windows, but I don't even see the ACLs there. I only see
the local unix-rights (user and owner-group)

I have tried to view and change ACLS for a file named glossar.htm with
the following rights:

max:~ # ls -la /distributed/samba-freigaben/marketing/glossar.htm
-rwxrwxrwx+ 1 jordans Marketing_ges 26190 Apr 11  2001
/distributed/samba-freigaben/marketing/glossar.htm

max:~ # getfacl /distributed/samba-freigaben/marketing/glossar.htm
# file: distributed/samba-freigaben/marketing/glossar.htm
# owner: jordans
# group: Marketing_ges
user::rwx
group::rw-
group:RO_Management:rwx
group:RO_Technik:rwx
group:RO_marketing_intern:rwx
group:RO_marketing_extern:rwx
mask::rwx
other::rwx

Here's the configuration for the share marketing where the file
glossar.htm can be found:

[marketing]
comment = Marketing
path = /distributed/samba-freigaben/marketing
nt acl support = no
writeable = yes
browsable = yes
valid users = @ntadmins @RO_Technik @RO_Management
@RO_marketing_intern @marketing_extern
admin users = @ntadmins

[marketing_a]
comment = Adminshare marketing
copy = marketing
nt acl support = yes
browsable = no
admin users = @DTMS+Domänen-Admins DTMS+WenkP DTMS+JordanS
valid users = @DTMS+Domänen-Admins DTMS+WenkP DTMS+JordanS

I have mapped the Adminshare, that I can see nt acls... But I don't see
the ACLs, I just see the owner (JordanS) and group (Marketing_ges), as
well as root/Max.

Here are the IDs for this user and group:

max:~ # getent passwd |grep 10002
jordans:x:10002:1:Jordan,
Sabine:/distributed/samba-freigaben/user/jordans:/bin/false
max:~ # getent group |grep
10044
Marketing_ges:x:10044:HeideE,EhrlicC,GibmeiA,KrieseB,partnership,HoefliO,KoriteS,VorbecM,BarossM,ReiterB,DildeiF,LindemY,ConzenN,WirtzP,BockmaA,ZechliT,BuchD,JoergeM,PelkmaR,KottbusM,KartziO,LehmanM

When I try to change permissions via file properties/security tab I get
an Windows Access Denied - message... I have turned on Samba log
(loglevel10) and here are some 

[Samba] The single WINS problem: question

2005-12-13 Thread werner maes


hello

I've been reading the thread 
(http://marc.theaimsgroup.com/?t=11328637691r=1w=2) and I have 
the same limitation with WINS in a PDC/BDC.


That's why I have the following (experimental) setup:

PDC == wins support = yes, passdb backend: master ldap
BDC == wins support = yes, passdb backend: slave ldap

I configured some of my XP clients to use both WINS servers and it 
seems to work.


but in the manual of smb.conf I read:

wins support (G)
  Note that you should NEVER set this to yes  on
  more than one machine in your network.


What could happen if you use more than one WINS server on your network?

thanks

werner maes


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Winbind adding users... is `useradd` being called? %u parameter?

2005-12-13 Thread Stroller


On Dec 12, 2005, at 1:06 pm, Fabian Arrotin wrote:


Stroller wrote:

Hi there,
This is probably a dumb question, so my apologies, but I've set up 
WinBind on my my Samba box  it seems to be authenticating against 
the domain, however new user accounts do not seem to be added.


They will never be added : you're using winbind to avoid that !
Don't forget that add user script is used when samba is acting as a 
domain controller, but that's not the case here.
Winbind is used to simulate local unix users instead of create them 
locally.


Ah, I see. Looks like I hadn't been getting it.

If you want your Windows users to log on your Samba server for IMAP, 
create first a home directory with correct permissions ... (i know it 
exists pam_mkhomedir.so, but i've never played with it )
Anyway : why do you want Windows users to log on your imap server ? 
Have you already configured your sendmail (or postfix) MTA server to 
work with Windows users ? Your MTA server will have to know where to 
look for  virtual users and where to drop mails 

Question is : what's the context of the whole thing ?


I have users added on the Windows domain (Windows Server SBS 2003) and 
want to use IMAP on Linux for the mailserver. The most important thing 
is that if the user changes their Windows domain password then their 
password for mail should also be changed, but also it would be nice if 
I could just add users to the Windows domain  not concern myself with 
adding them on the Linux server. I have used Samba on the mailserver 
only because winbind seemed to be an appropriate way of handling this.


I have installed courier-imap on the mailserver, and as you can see 
from the logs it seems to be authenticating the users ok. But I'm not 
clear on how to tell Courier (or any other IMAP server) where to store 
messages for the Windows domain users - I had understood (mistakenly, I 
now see) that winbind would create home directories for the Windows 
domain users the first time they log on to email (Courier expects to 
deliver mail to ~/Maildir).


Apologies for my confusion on this subject - how have others managed 
this problem?


Stroller.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Beyond Samba : Unix authentication

2005-12-13 Thread caricand
Hi,

I've a very simple question. I've finish to configure my Samba/OpenLDAP
server. All works fine. My Windows Users can log to Samba PDC. My question
: is it possible to use sambaSamAccount to authenticate a linux user with
the same LDAP server ?

Thank.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Restricting logins to certain clients

2005-12-13 Thread Hans Musil
I run samba-3 as PDC for a small domain with 4 clients. User 
A should be allowed to login on all client machines, while 
logins for the privileged user B should be restricted to 2 
machines for security reasons. Any ideas how to manage 
that? Suggestions for further reading would be highly 
appreciated?

Hans Musil
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] [PATCH] undetected bug in smbfs kernel module ?

2005-12-13 Thread Daniel

dear smbfs maintainers!
i sent this mail to you, since i got no answer from sending it to the M: 
entry of SMBFS.
 ___

i had problems with setting permissions on a mounted smb file system.
therefore i took a look at the smbfs code and a suspicious code part caught my 
eye.
IMHO the patched line can't be correct, because comparing uids to gids doesn't 
make any sense.
But i'm wondering that nobody has yet discovered it.

Maybe it's even dead code?

TIA for your revision,
Daniel



--- fs/smbfs/inode.c.orig   Tue Oct 18 12:43:00 2005
+++ fs/smbfs/inode.cTue Oct 18 15:40:02 2005
@@ -685,7 +685,7 @@ smb_notify_change(struct dentry *dentry,
if ((attr-ia_valid  ATTR_UID)  (attr-ia_uid != server-mnt-uid))
goto out;
 
-   if ((attr-ia_valid  ATTR_GID)  (attr-ia_uid != server-mnt-gid))
+   if ((attr-ia_valid  ATTR_GID)  (attr-ia_gid != server-mnt-gid))
goto out;
 
if ((attr-ia_valid  ATTR_MODE)  (attr-ia_mode  ~mask))


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] NET VIEW equivalent in Samba

2005-12-13 Thread Henrik Zagerholm

Hi!
Is there a NET VIEW equivalent in samba?
I looked at smbclient -L but then I have to know the browser master.  
I only want to specifiy a workgroup..


Regards,
Henrik
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The single WINS problem: question

2005-12-13 Thread John H Terpstra
On Monday 12 December 2005 02:02, werner maes wrote:
   hello

 I've been reading the thread
 (http://marc.theaimsgroup.com/?t=11328637691r=1w=2) and I have
 the same limitation with WINS in a PDC/BDC.

 That's why I have the following (experimental) setup:

 PDC == wins support = yes, passdb backend: master ldap
 BDC == wins support = yes, passdb backend: slave ldap

 I configured some of my XP clients to use both WINS servers and it
 seems to work.

Well, you CAN do this, but then it is necessary to use the remote browse 
sync and remote announce parameters on both systems to gain cross-subnet 
browsing and name resolution capability. You will likely find that Windows 
hosts will register with only one WINS server - that is one of the key 
reasons for the advice that is in the man page and in the HOWTO book.


 but in the manual of smb.conf I read:

 wins support (G)
Note that you should NEVER set this to yes  on
more than one machine in your network.


 What could happen if you use more than one WINS server on your network?

You COULD (likely will) have broken NetBIOS name resolution, with the result 
that windows clients can panic and blue-screen.

- John T.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Error when trying to view printer properties

2005-12-13 Thread Philip Washington

I have a problem installing a printer shared to windows.

When I go to properties on the printer I have shared I get
Function address 0x606407fe caused a protection fault. (exception code 
0xc005) Some or all property pages may not be displayed.


Using HP Inkjet 1200
samba-3.0.20b

edited mime.conv
and mime.types and uncomented lines
application/octet-streamapplication/vnd.cups-raw0   -
application/octet-stream

[global]
   workgroup = DOMAINA
   netbios name = SAMBA-CUPS
   server string = Samba Server
   log file = /var/log/samba/%m.log
   max log size = 50
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   printcap name = cups
   dns proxy = No
   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   printer admin = root
   cups options = raw
[printers]
   comment = All Printers
   path = /var/spool/samba
   read only = No
   guest ok = Yes
   printable = Yes
   browseable = No

[print$]
   comment = Printer driver Download Area
   path = /etc/samba/drivers
   write list = root
   guest ok = Yes
---

smbclient //SAMBA-CUPS/print$ -Uroot -c 'cd W32X86;
put hpf0xc12.dat;
put hpfmom12.hlp;
put hpwnsvb.dll;
put hpz2ku12.dll;
put hpzcfg12.exe;
put hpzeng12.exe;
put hpzflt12.dll;
put hpzime12.dll;
put hpzjui12.dll;
put hpzl3212.dll;
put hpzlnt12.dll;
put hpzpm312.dll;
put hpzpre12.exe;
put hpzres12.dll;
put hpzrm312.dll;
put  hpzvip12.dll'

rpcclient -Uroot SAMBA-CUPS
rpcclientadddriver Windows NT x86 
'hp1200:hpz2ku12.dll:hpf0xc12.dat:hpzpm312.dll:hpfmom12.hlp:NULL:RAW:

hpzcfg12.exe,hpzeng12.exe,hpzflt12.dll,hpzime12.dll,hpzjui12.dll,hpzpre12.exe,
hpzvip12.dll,hpzlnt12.dll,hpzl3212.dll,hpzres12.dll,hpzrm312.dll,hpwnsvb.dll'

I then added a printer using the Printing Configuration and named it 
MACH_PRINTER with raw print queue.


restarted cups and samba.

Went to the Windows client and connected to it as root.
Went to Printers and right clicked white background and checked that it 
could see the hp1200 driver and looked at the files there.


rcpclient -Uroot SAMBA-CUPS
rpcclient $ setdriver MACH_PRINTER hp1200
Succesfully set MACH_PRINTER to driver hp1200.
rpcclient $ enumdrivers

[Windows NT x86]
Printer Driver Info 1:
   Driver Name: [hp1200]


[Windows NT x86]
Printer Driver Info 1:
   Driver Name: [hp1200]

restart samba
when I try to go to properties on the MACH_PRINTER I get error
Function address 0x606407fe caused a protection fault. (exception code 
0xc005) Some or all property pages may not be displayed.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The single WINS problem: question

2005-12-13 Thread Andreas
On Tue, Dec 13, 2005 at 04:17:04PM -0700, John H Terpstra wrote:
 On Monday 12 December 2005 02:02, werner maes wrote:
  hello
 
  I've been reading the thread
  (http://marc.theaimsgroup.com/?t=11328637691r=1w=2) and I have
  the same limitation with WINS in a PDC/BDC.
 
  That's why I have the following (experimental) setup:
 
  PDC == wins support = yes, passdb backend: master ldap
  BDC == wins support = yes, passdb backend: slave ldap
 
  I configured some of my XP clients to use both WINS servers and it
  seems to work.
 
 Well, you CAN do this, but then it is necessary to use the remote browse 
 sync and remote announce parameters on both systems to gain cross-subnet 

Do these parameters have something to do with name resolution? If they
are only for network browsing, the minute an user clicks on a machine
that appeared in his/her network neighbourhood the name resolution will
come into place and possibly fail.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] The single WINS problem: question

2005-12-13 Thread John H Terpstra
On Tuesday 13 December 2005 17:15, Andreas wrote:
 On Tue, Dec 13, 2005 at 04:17:04PM -0700, John H Terpstra wrote:
  On Monday 12 December 2005 02:02, werner maes wrote:
 hello
  
   I've been reading the thread
   (http://marc.theaimsgroup.com/?t=11328637691r=1w=2) and I have
   the same limitation with WINS in a PDC/BDC.
  
   That's why I have the following (experimental) setup:
  
   PDC == wins support = yes, passdb backend: master ldap
   BDC == wins support = yes, passdb backend: slave ldap
  
   I configured some of my XP clients to use both WINS servers and it
   seems to work.
 
  Well, you CAN do this, but then it is necessary to use the remote browse
  sync and remote announce parameters on both systems to gain
  cross-subnet

 Do these parameters have something to do with name resolution? If they
 are only for network browsing, the minute an user clicks on a machine
 that appeared in his/her network neighbourhood the name resolution will
 come into place and possibly fail.

As I have firmly stated in my books on Samba - WINS is your friend. 

Samba does NOT at this time support multiple distriubted WINS servers. If you 
use multiple WINS servers you will need to use the remote browse sync and 
remote announce  together with DNS name resolution. 

Even this will NOT provide reliable cross-segment services. That's the way it 
is right now. Sorry.

- John T.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Beyond Samba : Unix authentication

2005-12-13 Thread Edy Sulai
that would be pam_ldap if i'm not mistaken. 
try google for pam ldap. 

On Mon, 2005-12-12 at 22:36, [EMAIL PROTECTED] wrote:
 Hi,
 
 I've a very simple question. I've finish to configure my Samba/OpenLDAP
 server. All works fine. My Windows Users can log to Samba PDC. My question
 : is it possible to use sambaSamAccount to authenticate a linux user with
 the same LDAP server ?
 
 Thank.


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Add printer commad ...

2005-12-13 Thread Jeff Hardy
I am actually still using scripts largely like these, plus some internal
stuff that would needlessly complicate any examples.  I do have in my
notes one thing that didn't make it into the final example script
though.  The addprinter script should print the share name to STDOUT as
its last action in order to trigger samba to reload its config.  Failing
this, I saw Access Denied... in my testing.


.
.
.
#print sharename plus newline to make samba reload config
print ($shname\n);



Also, I have another variation that trolls the /usr/share/cups/model
directory, using the modelname given from the windows driver to try to
find a matching ppd to assign in CUPS.  However, I would guess that most
people using the APW to add printers probably really want raw printing.

On the other hand, I do do this with cups options = raw in samba.
This allows for a ppd assigned to the CUPS queue for IPP jobs (and LPR
if desired), while Samba merrily serves up the proper vendor drivers for
Windows clients and prints jobs raw.  Anyway, if you think this would be
a good addition, and won't just confuse things, I'll send it.




On Tue, 2005-12-13 at 10:47 -0600, Gerald (Jerry) Carter wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 On Thu, 8 Dec 2005, Jeff Hardy wrote:
 
  Download the samba source and check out
  the /examples/scripts/printing/cups directory for some EXTREMELY
  skeletal examples of these scripts. :)
 
 If anyone has any better examples, please send them. 
 
 
 
 
 
 
 cheers, jerry
 =
 Alleviating the pain of Windows(tm)  --- http://www.samba.org
 Centeris ---  http://www.centeris.com
 There's an anonymous coward in all of us.   --anonymous
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.0 (GNU/Linux)
 Comment: For info see http://quantumlab.net/pine_privacy_guard/
 
 iD8DBQFDnvsNIR7qMdg1EfYRAuYNAJ4+nTdJ5e7PUYLnWqLe61g0BchOtACdEtZn
 Ih0730q2u3eX9ocIyhReiO4=
 =ClVR
 -END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Add printer commad ...

2005-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jeff Hardy wrote:

 I am actually still using scripts largely like these, 
 plus some internal stuff that would needlessly complicate
 any examples.  I do have in my notes one thing that didn't make
 it into the final example script though.  The
 addprinter script should print the share name to STDOUT as
 its last action in order to trigger samba to reload its 
 config.  Failing this, I saw Access Denied... in my testing.

I removed that requirement a few releases ago.  The returned line
was supposed to the port name.  The existing scripts work
so it's probably better to keep them simple and let people
expand them to fit their needs.






cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
Centeris ---  http://www.centeris.com
There's an anonymous coward in all of us.   --anonymous
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDn4DUIR7qMdg1EfYRAu+8AJ9S8kRdaWvf+8HyectVKlAU60HIUQCgjnXz
TLaWrlPzYEVR+6I6KRZUmPg=
=CVVV
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Windows sometimes authenticates with wrong user

2005-12-13 Thread AndyLiebman
Sorry in advance for the long post. But this is a bit of a detective story. 
 
We are having an authentication issue with a small number of Windows XP  
(SP2) machines. The Windows machines are set up to have only a single user --  
let's say the user is called Writer. There is no password set up for this 
user  
called Writer. User1 logs on to the machine and connects to our Linux Samba 
 Server (3.0.13). None of the shares on the server allow guests (guest ok = 
no)  -- so when connecting to a public share on the server, User1 is prompted 
for a  username and password. User1 supplies his Linux/samba username and 
password --  the server authenticates him -- and now he can access the public 
shares. His  own private shares also now become visible (home directory, and 
shares defined  with a %u variable in the path). 

All is fine. This is how things are  supposed to work

But now, User1 logs off (literally logs off Windows --  back to the Windows 
user log on screen -- fast user switching is NOT enabled)  and a couple of 
minutes later User2 logs on. When User2 clicks on a public  share, on these 
Windows machines she is NOT asked for a username and password.  Instead, she 
immediately gets access to the public share and can also see and  use all of 
User1's private shares! 

For some reason, it seems Windows is  still telling the Samba Server that it 
is User1 who is connecting -- Windows has  not forgotten that User1 logged out 
-- and Samba just obliges and serves up  User1's shares. 

We see the same behavior if we disconnect shares via  net use * /d. The 
shares disconnect, but when we connect again we're not asked  to authenticate 
again. 

This behavior is extremely rare. We have  thousands of Windows clients 
accessing hundreds of Samba Servers. In  many of the cases, users log on and 
log off 
just as I described above without  any problem. But we have a few machines 
out in the field that just keep behaving  in this unexpected way (Note: 
Unfortunately,  it's not always feasible for  users to log in on every Windows 
client 
where they might work with usernames and  passwords that match their 
Linux/samba names and passwords. We encourage  organizations that have users 
moving 
around a lot to set up a PDC, but many  can't do that so they use our on the 
spot authentication.)

My question  is:  is there a way to force Windows to clear all knowledge of 
what user  was previously using a machine? 

I kind of doubt this is a Samba issue.  But COULD IT BE POSSIBLE that Samba 
is matching up a Username to a Mac address  or IP address and therefore not 
recognizing that one user has logged out  (disconnecting all network shares) 
and 
another logged on? Is there something  that can make Samba hold on to thinking 
User1 is still connected when it's  acutally User2? If so, what can we do to 
correct THIS? 
 
Can a switch that's in between the client and server be a culprit?  

As a related issue -- we produce servers that are deployed in isolated  and 
totally separate environments. The servers ALL go out with the exact same  
NetBios names. They are essentially clones of one another -- and all have the  
same set of public shares. We always test the servers in our office before  
they go out.  Over time, a couple of our Windows clients in the office just  
won't connect to certain public shares on the Samba Machines. We get an error 
 
message to the effect of Windows can't find this resource requested or you  
don't have authority to access this resource. Please consult with your network  
administrator We don't get a username and password prompt. If we click on a  
DIFFERENT public share, we get the username and password prompt. After  
authenticating, we can THEN access the first share that gave us the error.  

My question is, can Windows machines get stuck thinking that a share  called 
\\Server\ShareA  that it ONCE connected to on a Server Serial #  131 is 
still supposed to be the same share that when we try to connect to  
\\Server\ShareA on Server Serial # 133 -- and because it's not exactly the  
same share (how 
could windows figure that out -- by the Mac Address of the  Server?), it 
throws the error? 

Again, we cycle many server clones into  and out of our place and this is a 
rare event. But we have a two Windows clients  that sometimes seem to resist 
the switch from one server to another. The Windows  clients can be shut down 
for days, but when we boot them up again and try to  connect to a completely 
different server, we can have this issue. Is there some  sort of cache on the 
Windows clients that we can clear out? 

By the way,  we use Samba 3.0.13 on our systems because of a couple of 
specific Samba issues  that appeared in 3.0.14 and 3.0.20 that affect our 
software 
and that haven't yet  been resolved. 

We also do NOT tell Windows to reconnect at logon.  

Hope somebody can shed some light here. 

Thanks,
Andy 
 
-- 
To unsubscribe from this list go to the following URL and 

[Samba] Joining a Samba 3 domain

2005-12-13 Thread Mike

Hello

I have set up a Samba 3 PDC on RHEL4 using the tdbsam backed. I can log 
in as a user who has been added to the tdbsam database from a 
workstation. When I try to add the workstation to the domain (after 
breaking user connections to the server) I get The following error 
occurred while trying to joining the domain xyz.com. Access denied.


I havent seen any instructions in the how-tos on how to create the 
Administrative account on the server to accept workstations to join the 
domain?


How do I create security groups and join them to users ie Joe is a 
member of managers, accounts, engineers etc?


Many thanks

Mike
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba timekeeping

2005-12-13 Thread Taso Hatzi

Andrew Bartlett wrote:

On Sat, 2005-12-03 at 12:57 +1100, taso wrote:


Just wondering why Samba time and system time are different.

Eg:
# net time;date
Sat Dec  3 12:56:57 2005
Sat Dec  3 12:56:22 EST 2005



Which server is 'net time' talking to?  It should be looking for the PDC
I think.  If that's not the local machine, it could explain it.

You can specify a server with -S



That is the explanation, but why is 'net time' consulting another host?
The commands are being run on the Sanba host which is the domain master
and the browse master (according to nmblookup). The server used by 'net
time' does not even belong to the domain - it is a XP workstation.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Fwd: roaming profile contents

2005-12-13 Thread Adrian
What exactly comprises a profile? Do they have anything more than the
contents of a user's Documents and Settings directory?

To what extent is profile data shared between Windows OSes?

Thanks.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] SAMBA + PAM module

2005-12-13 Thread GMAIL

Hi all

I would like to setup SAMBA 3 with LDAP, on Redhat Enterprise server 4.0 
. So i am configuring PAM, to include pam_unix2.so .
i don't have any file called pam_unix2.so, i have only pam_unix.so. so 
how do i go about it.


Regards
Niranjan




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


svn commit: samba r12206 - in branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal: .

2005-12-13 Thread jelmer
Author: jelmer
Date: 2005-12-13 13:14:23 + (Tue, 13 Dec 2005)
New Revision: 12206

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12206

Log:
Fix some issues in NOEMIT

Modified:
   branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal/Conformance.pm
   branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal/NDR.pm


Changeset:
Modified: branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal/Conformance.pm
===
--- branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal/Conformance.pm   
2005-12-13 01:56:04 UTC (rev 12205)
+++ branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal/Conformance.pm   
2005-12-13 13:14:23 UTC (rev 12206)
@@ -232,11 +232,10 @@
 
 sub handle_noemit($$$)
 {
-   my ($pos,$data) = @_;
-   my $type;
+   my $pos = shift;
+   my $data = shift;
+   my $type = shift;
 
-   $type = shift if ($#_ == 1);
-
if (defined($type)) {
$data-{noemit}-{$type} = 1;
} else {

Modified: branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal/NDR.pm
===
--- branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal/NDR.pm   
2005-12-13 01:56:04 UTC (rev 12205)
+++ branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal/NDR.pm   
2005-12-13 13:14:23 UTC (rev 12206)
@@ -22,6 +22,7 @@
 use Parse::Pidl::NDR qw(ContainsString GetNextLevel);
 use Parse::Pidl::Dump qw(DumpTypedef DumpFunction);
 use Parse::Pidl::Ethereal::Conformance qw(ReadConformance);
+use File::Basename;
 
 use vars qw($VERSION);
 $VERSION = '0.01';
@@ -206,6 +207,7 @@
if (defined($conformance-{tfs}-{$hf_bitname})) {
pidl_def
$conformance-{tfs}-{$hf_bitname}-{TRUE_STRING},;
pidl_def
$conformance-{tfs}-{$hf_bitname}-{FALSE_STRING},;
+   $conformance-{tfs}-{$hf_bitname}-{USED} = 1;
} else {
pidl_def\$en is SET\,;
pidl_def\$en is NOT SET\,;
@@ -827,7 +829,6 @@
$res{headers} .= #include \packet-dcerpc-nt.h\\n;
$res{headers} .= #include \packet-windows-common.h\\n;
 
-   use File::Basename; 
my $h_basename = basename($h_filename);
 
$res{headers} .= #include \$h_basename\\n;
@@ -1009,6 +1010,12 @@
print $_-{POS}: warning: description never used\n;
}
}
+
+   foreach (values %{$conformance-{tfs}}) {
+   if (not $_-{USED}) {
+   print $_-{POS}: warning: True/False description never 
used\n;
+   }
+   }
 }
 
 1;



svn commit: lorikeet r506 - in trunk/heimdal: lib/krb5 tests/db

2005-12-13 Thread abartlet
Author: abartlet
Date: 2005-12-13 15:35:22 + (Tue, 13 Dec 2005)
New Revision: 506

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=506

Log:
In lorikeet-heimdal, if the local hostname is not fully qualified, we
will not do DNS lookups to try and guess a realm.

This means we will look for the default realm of our hostname.  I added
code that uses our default realm from the config file as the fallback
here, but this now recurses in the absense of [libdefualts]
default_realm.

So, this patch avoids recursion in the case were we don't have a
default realm in the krb5.conf, and makes the tests pass again by
specifying one into the config file.

Andrew Bartlett

Modified:
   trunk/heimdal/lib/krb5/set_default_realm.c
   trunk/heimdal/tests/db/krb5.conf.in


Changeset:
Modified: trunk/heimdal/lib/krb5/set_default_realm.c
===
--- trunk/heimdal/lib/krb5/set_default_realm.c  2005-12-12 15:11:31 UTC (rev 
505)
+++ trunk/heimdal/lib/krb5/set_default_realm.c  2005-12-13 15:35:22 UTC (rev 
506)
@@ -77,8 +77,19 @@
  libdefaults,
  default_realm,
  NULL);
-   if (realms == NULL)
-   ret = krb5_get_host_realm(context, NULL, realms);
+   if (realms == NULL) {
+   char hostname[MAXHOSTNAMELEN];
+   if (gethostname (hostname, sizeof(hostname))) {
+   return errno;
+   }
+
+   if (strchr(hostname, '.') == NULL) {
+   /* There is no way we can get this mapping, as we can't do DNS 
*/
+   return KRB5_CONFIG_NODEFREALM;
+   }
+   ret = krb5_get_host_realm(context, hostname,
+ realms);
+   }
 } else {
ret = string_to_list (context, realm, realms);
 }

Modified: trunk/heimdal/tests/db/krb5.conf.in
===
--- trunk/heimdal/tests/db/krb5.conf.in 2005-12-12 15:11:31 UTC (rev 505)
+++ trunk/heimdal/tests/db/krb5.conf.in 2005-12-13 15:35:22 UTC (rev 506)
@@ -1,3 +1,5 @@
+[libdefaults]
+default_realm = EXAMPLE.ORG
 
 [realms]
EXAMPLE.ORG = {



svn commit: lorikeet r507 - in trunk/heimdal: . doc kadmin kdc kuser lib/asn1 lib/com_err lib/gssapi lib/hdb lib/kadm5 lib/krb5 lib/roken tests

2005-12-13 Thread abartlet
Author: abartlet
Date: 2005-12-13 15:42:33 + (Tue, 13 Dec 2005)
New Revision: 507

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=507

Log:
Merge to Heimdal CVS as of 2005-12-12.

I needed to do a bit of work to have 'make check' pass: In particular
I ensured a few more hdb_entry_ex structures were always zero'ed.

I also pushed the hdb_entry_ex into kerberos4.c, kerberos5.c and
kaserver.c.  This is required to correctly free the entries, as well
as for Samba's extended behaviours.

Thanks Love for doing the legwork to merge hdb_entry_ex!  (A way to
add callback functions to hdb entries, for the PAC, access control and
similar).

Andrew Bartlett

Added:
   trunk/heimdal/lib/com_err/com_err.3
Modified:
   trunk/heimdal/ChangeLog
   trunk/heimdal/Makefile.am
   trunk/heimdal/TODO
   trunk/heimdal/doc/apps.texi
   trunk/heimdal/doc/install.texi
   trunk/heimdal/doc/kerberos4.texi
   trunk/heimdal/kadmin/load.c
   trunk/heimdal/kdc/524.c
   trunk/heimdal/kdc/Makefile.am
   trunk/heimdal/kdc/config.c
   trunk/heimdal/kdc/hprop.c
   trunk/heimdal/kdc/hprop.h
   trunk/heimdal/kdc/hpropd.c
   trunk/heimdal/kdc/kaserver.c
   trunk/heimdal/kdc/kdc_locl.h
   trunk/heimdal/kdc/kerberos4.c
   trunk/heimdal/kdc/kerberos5.c
   trunk/heimdal/kdc/misc.c
   trunk/heimdal/kdc/mit_dump.c
   trunk/heimdal/kuser/kinit.c
   trunk/heimdal/lib/asn1/ChangeLog
   trunk/heimdal/lib/asn1/gen.c
   trunk/heimdal/lib/asn1/parse.y
   trunk/heimdal/lib/asn1/symbol.h
   trunk/heimdal/lib/asn1/test.asn1
   trunk/heimdal/lib/com_err/ChangeLog
   trunk/heimdal/lib/gssapi/ChangeLog
   trunk/heimdal/lib/gssapi/add_cred.c
   trunk/heimdal/lib/gssapi/context_time.c
   trunk/heimdal/lib/gssapi/gss_acquire_cred.3
   trunk/heimdal/lib/gssapi/gssapi.h
   trunk/heimdal/lib/gssapi/test_acquire_cred.c
   trunk/heimdal/lib/hdb/Makefile.am
   trunk/heimdal/lib/hdb/common.c
   trunk/heimdal/lib/hdb/db.c
   trunk/heimdal/lib/hdb/db3.c
   trunk/heimdal/lib/hdb/hdb-ldap.c
   trunk/heimdal/lib/hdb/hdb.c
   trunk/heimdal/lib/hdb/hdb.h
   trunk/heimdal/lib/hdb/keytab.c
   trunk/heimdal/lib/hdb/ndbm.c
   trunk/heimdal/lib/hdb/print.c
   trunk/heimdal/lib/kadm5/ChangeLog
   trunk/heimdal/lib/kadm5/chpass_s.c
   trunk/heimdal/lib/kadm5/create_s.c
   trunk/heimdal/lib/kadm5/delete_s.c
   trunk/heimdal/lib/kadm5/ent_setup.c
   trunk/heimdal/lib/kadm5/get_princs_s.c
   trunk/heimdal/lib/kadm5/get_s.c
   trunk/heimdal/lib/kadm5/iprop-log.c
   trunk/heimdal/lib/kadm5/ipropd_master.c
   trunk/heimdal/lib/kadm5/ipropd_slave.c
   trunk/heimdal/lib/kadm5/log.c
   trunk/heimdal/lib/kadm5/modify_s.c
   trunk/heimdal/lib/kadm5/randkey_s.c
   trunk/heimdal/lib/kadm5/rename_s.c
   trunk/heimdal/lib/krb5/acl.c
   trunk/heimdal/lib/krb5/changepw.c
   trunk/heimdal/lib/krb5/crypto.c
   trunk/heimdal/lib/krb5/derived-key-test.c
   trunk/heimdal/lib/krb5/keytab_memory.c
   trunk/heimdal/lib/krb5/krb5.3
   trunk/heimdal/lib/krb5/krb5_principal.3
   trunk/heimdal/lib/krb5/name-45-test.c
   trunk/heimdal/lib/krb5/parse-name-test.c
   trunk/heimdal/lib/krb5/principal.c
   trunk/heimdal/lib/krb5/store-test.c
   trunk/heimdal/lib/krb5/string-to-key-test.c
   trunk/heimdal/lib/krb5/test_keytab.c
   trunk/heimdal/lib/roken/ChangeLog
   trunk/heimdal/lib/roken/getifaddrs.c
   trunk/heimdal/tests/ChangeLog


Changeset:
Sorry, the patch is too large (5851 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=507


svn commit: lorikeet r508 - in trunk/heimdal: . lib/hdb lib/kadm5

2005-12-13 Thread abartlet
Author: abartlet
Date: 2005-12-13 15:52:37 + (Tue, 13 Dec 2005)
New Revision: 508

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=508

Log:
Love fixed many of the same (and more) bugs regarding need to zero
hdb_entry_ex structures that I did, so update to Heimdal CVS as of
2005-12-13, and merge my changes back out.

Andrew Bartlett

Modified:
   trunk/heimdal/ChangeLog
   trunk/heimdal/lib/hdb/common.c
   trunk/heimdal/lib/hdb/db.c
   trunk/heimdal/lib/hdb/db3.c
   trunk/heimdal/lib/hdb/ndbm.c
   trunk/heimdal/lib/kadm5/ChangeLog
   trunk/heimdal/lib/kadm5/chpass_s.c
   trunk/heimdal/lib/kadm5/create_c.c
   trunk/heimdal/lib/kadm5/delete_s.c
   trunk/heimdal/lib/kadm5/get_s.c
   trunk/heimdal/lib/kadm5/log.c
   trunk/heimdal/lib/kadm5/modify_s.c
   trunk/heimdal/lib/kadm5/randkey_s.c
   trunk/heimdal/lib/kadm5/rename_s.c


Changeset:
Sorry, the patch is too large (341 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=508


svn commit: samba r12207 - in branches/SAMBA_4_0: packaging packaging/debian packaging/debian/po testprogs/ejs

2005-12-13 Thread jelmer
Author: jelmer
Date: 2005-12-13 16:11:45 + (Tue, 13 Dec 2005)
New Revision: 12207

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12207

Log:
More improvements to the Debian package by Steinar Gunderson.

Added:
   branches/SAMBA_4_0/packaging/debian/TODO
   branches/SAMBA_4_0/packaging/debian/po/
   branches/SAMBA_4_0/packaging/debian/po/POTFILES.in
   branches/SAMBA_4_0/packaging/debian/po/templates.pot
   branches/SAMBA_4_0/packaging/debian/samba4-server.config
   branches/SAMBA_4_0/packaging/debian/samba4-server.postinst
   branches/SAMBA_4_0/packaging/debian/samba4-server.samba4.init
   branches/SAMBA_4_0/packaging/debian/samba4-server.templates
Modified:
   branches/SAMBA_4_0/packaging/
   branches/SAMBA_4_0/packaging/debian/control
   branches/SAMBA_4_0/packaging/debian/rules
   branches/SAMBA_4_0/packaging/debian/samba4-common.install
   branches/SAMBA_4_0/packaging/debian/samba4-swat.install
   branches/SAMBA_4_0/packaging/debian/smb.conf
   branches/SAMBA_4_0/testprogs/ejs/


Changeset:
Sorry, the patch is too large (555 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12207


svn commit: samba r12208 - in branches/SAMBA_4_0/source/build: .

2005-12-13 Thread jelmer
Author: jelmer
Date: 2005-12-13 16:25:07 + (Tue, 13 Dec 2005)
New Revision: 12208

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12208

Log:
Remove obsolete scons directory

Removed:
   branches/SAMBA_4_0/source/build/scons/


Changeset:


svn commit: samba r12209 - in branches/SAMBA_4_0/source: build/smb_build gtk/man lib/ldb/man lib/registry/man torture/man utils/man

2005-12-13 Thread jelmer
Author: jelmer
Date: 2005-12-13 16:48:37 + (Tue, 13 Dec 2005)
New Revision: 12209

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12209

Log:
Fix some issues with XML entities.

Modified:
   branches/SAMBA_4_0/source/build/smb_build/TODO
   branches/SAMBA_4_0/source/gtk/man/gregedit.1.xml
   branches/SAMBA_4_0/source/lib/ldb/man/ldb.3.xml
   branches/SAMBA_4_0/source/lib/ldb/man/ldbadd.1.xml
   branches/SAMBA_4_0/source/lib/ldb/man/ldbdel.1.xml
   branches/SAMBA_4_0/source/lib/ldb/man/ldbedit.1.xml
   branches/SAMBA_4_0/source/lib/ldb/man/ldbmodify.1.xml
   branches/SAMBA_4_0/source/lib/ldb/man/ldbrename.1.xml
   branches/SAMBA_4_0/source/lib/ldb/man/ldbsearch.1.xml
   branches/SAMBA_4_0/source/lib/registry/man/regdiff.1.xml
   branches/SAMBA_4_0/source/lib/registry/man/regpatch.1.xml
   branches/SAMBA_4_0/source/lib/registry/man/regshell.1.xml
   branches/SAMBA_4_0/source/lib/registry/man/regtree.1.xml
   branches/SAMBA_4_0/source/torture/man/gentest.1.xml
   branches/SAMBA_4_0/source/torture/man/locktest.1.xml
   branches/SAMBA_4_0/source/torture/man/masktest.1.xml
   branches/SAMBA_4_0/source/torture/man/smbtorture.1.xml
   branches/SAMBA_4_0/source/utils/man/ndrdump.1.xml


Changeset:
Sorry, the patch is too large (350 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12209


svn commit: samba r12210 - in branches/tmp/samba4_ldap_controls/source/lib/ldb/common: .

2005-12-13 Thread idra
Author: idra
Date: 2005-12-13 17:14:00 + (Tue, 13 Dec 2005)
New Revision: 12210

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12210

Log:

Import qsort.c from glibc, I plan to modify it to pass an opaque pointer to the 
compare function.
This is the original file, I commit it here so that I do not forget about it.


Added:
   branches/tmp/samba4_ldap_controls/source/lib/ldb/common/qsort.c


Changeset:
Sorry, the patch is too large (255 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12210


svn commit: samba r12211 - in branches/SAMBA_4_0/source/torture/nbt: .

2005-12-13 Thread metze
Author: metze
Date: 2005-12-13 17:39:24 + (Tue, 13 Dec 2005)
New Revision: 12211

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12211

Log:
remove unused element

metze
Modified:
   branches/SAMBA_4_0/source/torture/nbt/winsreplication.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/nbt/winsreplication.c
===
--- branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-12-13 
17:14:00 UTC (rev 12210)
+++ branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-12-13 
17:39:24 UTC (rev 12211)
@@ -1193,7 +1193,7 @@
BOOL sgroup_merge;
struct wrepl_wins_owner *merge_owner;
BOOL sgroup_cleanup;
-   } r1, r2, result;
+   } r1, r2;
} records[] = {
/* 
 * NOTE: the first record and the last applied one



svn commit: samba r12212 - in trunk/source: include locking smbd

2005-12-13 Thread jra
Author: jra
Date: 2005-12-13 18:11:47 + (Tue, 13 Dec 2005)
New Revision: 12212

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12212

Log:
Final fix for #3303 - send rename messages to smbd's
that have open file handles to allow them to correctly
implement delete on close. There is a further correctness
fix I'm intending to add to this to cope with different share
paths, but not right now...
Jeremy.

Modified:
   trunk/source/include/messages.h
   trunk/source/include/smb.h
   trunk/source/locking/locking.c
   trunk/source/smbd/close.c
   trunk/source/smbd/open.c
   trunk/source/smbd/reply.c
   trunk/source/smbd/server.c
   trunk/source/smbd/service.c


Changeset:
Sorry, the patch is too large (332 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12212


svn commit: samba r12213 - in branches/SAMBA_3_0/source: include locking smbd

2005-12-13 Thread jra
Author: jra
Date: 2005-12-13 18:11:50 + (Tue, 13 Dec 2005)
New Revision: 12213

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12213

Log:
Final fix for #3303 - send rename messages to smbd's
that have open file handles to allow them to correctly
implement delete on close. There is a further correctness
fix I'm intending to add to this to cope with different share
paths, but not right now...
Jeremy.

Modified:
   branches/SAMBA_3_0/source/include/messages.h
   branches/SAMBA_3_0/source/include/smb.h
   branches/SAMBA_3_0/source/locking/locking.c
   branches/SAMBA_3_0/source/smbd/close.c
   branches/SAMBA_3_0/source/smbd/open.c
   branches/SAMBA_3_0/source/smbd/reply.c
   branches/SAMBA_3_0/source/smbd/server.c
   branches/SAMBA_3_0/source/smbd/service.c


Changeset:
Sorry, the patch is too large (332 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12213


svn commit: samba r12214 - in branches/SAMBA_3_0/source/nmbd: .

2005-12-13 Thread jra
Author: jra
Date: 2005-12-13 19:37:05 + (Tue, 13 Dec 2005)
New Revision: 12214

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12214

Log:
Fix compile if SYNC_DNS is set.
Jeremy.

Modified:
   branches/SAMBA_3_0/source/nmbd/asyncdns.c


Changeset:
Modified: branches/SAMBA_3_0/source/nmbd/asyncdns.c
===
--- branches/SAMBA_3_0/source/nmbd/asyncdns.c   2005-12-13 18:11:50 UTC (rev 
12213)
+++ branches/SAMBA_3_0/source/nmbd/asyncdns.c   2005-12-13 19:37:05 UTC (rev 
12214)
@@ -323,7 +323,7 @@
struct in_addr dns_ip;
unstring qname;
 
-   pull_ascii_nstring(qname, question-name);
+   pull_ascii_nstring(qname, sizeof(qname), question-name);
 
DEBUG(3,(DNS search for %s - , nmb_namestr(question)));
 



svn commit: samba r12215 - in trunk/source/nmbd: .

2005-12-13 Thread jra
Author: jra
Date: 2005-12-13 19:38:00 + (Tue, 13 Dec 2005)
New Revision: 12215

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12215

Log:
Fix compile if SYNC_DNS is set.
Jeremy.

Modified:
   trunk/source/nmbd/asyncdns.c


Changeset:
Modified: trunk/source/nmbd/asyncdns.c
===
--- trunk/source/nmbd/asyncdns.c2005-12-13 19:37:05 UTC (rev 12214)
+++ trunk/source/nmbd/asyncdns.c2005-12-13 19:38:00 UTC (rev 12215)
@@ -323,7 +323,7 @@
struct in_addr dns_ip;
unstring qname;
 
-   pull_ascii_nstring(qname, question-name);
+   pull_ascii_nstring(qname, sizeof(qname), question-name);
 
DEBUG(3,(DNS search for %s - , nmb_namestr(question)));
 



svn commit: samba r12216 - in branches/SAMBA_4_0/source: build/smb_build include lib lib/com lib/com/dcom lib/replace libcli script/tests

2005-12-13 Thread jelmer
Author: jelmer
Date: 2005-12-13 19:38:12 + (Tue, 13 Dec 2005)
New Revision: 12216

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12216

Log:
Couple of small fixes: reduce include/includes.h a bit, simplify headers 
in build/smb_build/, remove unused pstring macros

Modified:
   branches/SAMBA_4_0/source/build/smb_build/TODO
   branches/SAMBA_4_0/source/build/smb_build/config_mk.pm
   branches/SAMBA_4_0/source/build/smb_build/env.pm
   branches/SAMBA_4_0/source/build/smb_build/input.pm
   branches/SAMBA_4_0/source/build/smb_build/main.pl
   branches/SAMBA_4_0/source/build/smb_build/makefile.pm
   branches/SAMBA_4_0/source/build/smb_build/output.pm
   branches/SAMBA_4_0/source/build/smb_build/smb_build_h.pm
   branches/SAMBA_4_0/source/include/includes.h
   branches/SAMBA_4_0/source/include/safe_string.h
   branches/SAMBA_4_0/source/include/structs.h
   branches/SAMBA_4_0/source/lib/com/dcom/dcom.h
   branches/SAMBA_4_0/source/lib/com/tables.c
   branches/SAMBA_4_0/source/lib/replace/README
   branches/SAMBA_4_0/source/lib/replace/replace.h
   branches/SAMBA_4_0/source/lib/util_str.c
   branches/SAMBA_4_0/source/libcli/config.mk
   branches/SAMBA_4_0/source/script/tests/test_rpc_quick.sh


Changeset:
Sorry, the patch is too large (302 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12216


svn commit: samba r12217 - in branches/SAMBA_4_0/source/nbt_server/wins: .

2005-12-13 Thread metze
Author: metze
Date: 2005-12-13 19:45:24 + (Tue, 13 Dec 2005)
New Revision: 12217

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12217

Log:
add my copyright

metze
Modified:
   branches/SAMBA_4_0/source/nbt_server/wins/winsdb.c
   branches/SAMBA_4_0/source/nbt_server/wins/winswack.c


Changeset:
Modified: branches/SAMBA_4_0/source/nbt_server/wins/winsdb.c
===
--- branches/SAMBA_4_0/source/nbt_server/wins/winsdb.c  2005-12-13 19:38:12 UTC 
(rev 12216)
+++ branches/SAMBA_4_0/source/nbt_server/wins/winsdb.c  2005-12-13 19:45:24 UTC 
(rev 12217)
@@ -4,7 +4,8 @@
WINS database routines
 
Copyright (C) Andrew Tridgell   2005
-   
+   Copyright (C) Stefan Metzmacher 2005
+  
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or

Modified: branches/SAMBA_4_0/source/nbt_server/wins/winswack.c
===
--- branches/SAMBA_4_0/source/nbt_server/wins/winswack.c2005-12-13 
19:38:12 UTC (rev 12216)
+++ branches/SAMBA_4_0/source/nbt_server/wins/winswack.c2005-12-13 
19:45:24 UTC (rev 12217)
@@ -4,6 +4,7 @@
secure wins server WACK processing
 
Copyright (C) Andrew Tridgell   2005
+   Copyright (C) Stefan Metzmacher 2005

This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by



svn commit: samba r12220 - in branches/tmp/samba4_ldap_controls/source: lib/ldb lib/ldb/common lib/ldb/include lib/ldb/modules lib/ldb/tools libcli/ldap

2005-12-13 Thread idra
Author: idra
Date: 2005-12-13 22:37:04 + (Tue, 13 Dec 2005)
New Revision: 12220

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12220

Log:
introduce a glibc qsort() based ldb_qsort() sorting function.
this function can take an opaque pointer that will be passed
as the 3rd argument of the comparison function.

Simo.


Modified:
   branches/tmp/samba4_ldap_controls/source/lib/ldb/common/qsort.c
   branches/tmp/samba4_ldap_controls/source/lib/ldb/config.mk
   branches/tmp/samba4_ldap_controls/source/lib/ldb/include/ldb.h
   branches/tmp/samba4_ldap_controls/source/lib/ldb/modules/sort.c
   branches/tmp/samba4_ldap_controls/source/lib/ldb/tools/ldbsearch.c
   branches/tmp/samba4_ldap_controls/source/libcli/ldap/ldap_ildap.c


Changeset:
Sorry, the patch is too large (293 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12220


Build status as of Wed Dec 14 00:00:02 2005

2005-12-13 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2005-12-13 
00:00:47.0 +
+++ /home/build/master/cache/broken_results.txt 2005-12-14 00:01:06.0 
+
@@ -1,17 +1,17 @@
-Build status as of Tue Dec 13 00:00:01 2005
+Build status as of Wed Dec 14 00:00:02 2005
 
 Build counts:
 Tree Total  Broken Panic 
-ccache   9  2  0 
-distcc   13 3  0 
-lorikeet-heimdal 28 12 0 
+ccache   7  1  0 
+distcc   14 2  0 
+lorikeet-heimdal 30 17 0 
 ppp  16 0  0 
-rsync17 2  0 
+rsync11 1  0 
 samba2  0  0 
 samba-docs   0  0  0 
-samba4   33 16 1 
+samba4   33 16 0 
 samba_3_033 5  0 
-smb-build24 2  0 
+smb-build23 2  0 
 talloc   7  4  0 
-tdb  6  2  0 
+tdb  5  1  0 
 


svn commit: samba r12221 - in branches/SAMBA_3_0/source/locking: .

2005-12-13 Thread jra
Author: jra
Date: 2005-12-14 00:42:40 + (Wed, 14 Dec 2005)
New Revision: 12221

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12221

Log:
Fix error code paths that can potentially leave a dangling lock.
Jeremy.

Modified:
   branches/SAMBA_3_0/source/locking/locking.c


Changeset:
Modified: branches/SAMBA_3_0/source/locking/locking.c
===
--- branches/SAMBA_3_0/source/locking/locking.c 2005-12-13 22:37:04 UTC (rev 
12220)
+++ branches/SAMBA_3_0/source/locking/locking.c 2005-12-14 00:42:40 UTC (rev 
12221)
@@ -595,12 +595,18 @@
return NULL;
}
 
+   /* Ensure we set every field here as the destructor must be
+  valid even if parse_share_modes fails. */
+
+   lck-servicepath = NULL;
+   lck-filename = NULL;
lck-dev = dev;
lck-ino = ino;
-   lck-delete_on_close = False;
lck-num_share_modes = 0;
lck-share_modes = NULL;
+   lck-delete_on_close = False;
lck-modified = False;
+   lck-fresh = False;
 
if (tdb_chainlock(tdb, key) != 0) {
DEBUG(3, (Could not lock share entry\n));
@@ -608,6 +614,12 @@
return NULL;
}
 
+   /* We must set the destructor immediately after the chainlock
+  ensure the lock is cleaned up on any of the error return
+  paths below. */
+
+   talloc_set_destructor(lck, share_mode_lock_destructor);
+
data = tdb_fetch(tdb, key);
lck-fresh = (data.dptr == NULL);
 
@@ -634,7 +646,6 @@
}
}
 
-   talloc_set_destructor(lck, share_mode_lock_destructor);
SAFE_FREE(data.dptr);
 
return lck;



svn commit: samba r12222 - in trunk/source/locking: .

2005-12-13 Thread jra
Author: jra
Date: 2005-12-14 00:42:43 + (Wed, 14 Dec 2005)
New Revision: 1

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=1

Log:
Fix error code paths that can potentially leave a dangling lock.
Jeremy.

Modified:
   trunk/source/locking/locking.c


Changeset:
Modified: trunk/source/locking/locking.c
===
--- trunk/source/locking/locking.c  2005-12-14 00:42:40 UTC (rev 12221)
+++ trunk/source/locking/locking.c  2005-12-14 00:42:43 UTC (rev 1)
@@ -595,12 +595,18 @@
return NULL;
}
 
+   /* Ensure we set every field here as the destructor must be
+  valid even if parse_share_modes fails. */
+
+   lck-servicepath = NULL;
+   lck-filename = NULL;
lck-dev = dev;
lck-ino = ino;
-   lck-delete_on_close = False;
lck-num_share_modes = 0;
lck-share_modes = NULL;
+   lck-delete_on_close = False;
lck-modified = False;
+   lck-fresh = False;
 
if (tdb_chainlock(tdb, key) != 0) {
DEBUG(3, (Could not lock share entry\n));
@@ -608,6 +614,12 @@
return NULL;
}
 
+   /* We must set the destructor immediately after the chainlock
+  ensure the lock is cleaned up on any of the error return
+  paths below. */
+
+   talloc_set_destructor(lck, share_mode_lock_destructor);
+
data = tdb_fetch(tdb, key);
lck-fresh = (data.dptr == NULL);
 
@@ -634,7 +646,6 @@
}
}
 
-   talloc_set_destructor(lck, share_mode_lock_destructor);
SAFE_FREE(data.dptr);
 
return lck;



svn commit: samba r12223 - in branches/SAMBA_3_0_RELEASE/source/locking: .

2005-12-13 Thread jerry
Author: jerry
Date: 2005-12-14 01:02:58 + (Wed, 14 Dec 2005)
New Revision: 12223

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12223

Log:
jeremy fix for the deadlock in locking.tdb
Modified:
   branches/SAMBA_3_0_RELEASE/source/locking/locking.c


Changeset:
Modified: branches/SAMBA_3_0_RELEASE/source/locking/locking.c
===
--- branches/SAMBA_3_0_RELEASE/source/locking/locking.c 2005-12-14 00:42:43 UTC 
(rev 1)
+++ branches/SAMBA_3_0_RELEASE/source/locking/locking.c 2005-12-14 01:02:58 UTC 
(rev 12223)
@@ -582,11 +582,16 @@
return NULL;
}
 
+   /* Ensure we set every field here as the destructor must be
+  valid even if parse_share_modes fails. */
+
+   lck-filename = NULL;
lck-dev = dev;
lck-ino = ino;
-   lck-delete_on_close = False;
lck-num_share_modes = 0;
lck-share_modes = NULL;
+   lck-delete_on_close = False;
+   lck-fresh = False;
lck-modified = False;
 
if (tdb_chainlock(tdb, key) != 0) {
@@ -595,6 +600,12 @@
return NULL;
}
 
+   /* We must set the destructor immediately after the chainlock
+  ensure the lock is cleaned up on any of the error return
+  paths below. */
+
+   talloc_set_destructor(lck, share_mode_lock_destructor);
+
data = tdb_fetch(tdb, key);
lck-fresh = (data.dptr == NULL);
 
@@ -619,7 +630,6 @@
}
}
 
-   talloc_set_destructor(lck, share_mode_lock_destructor);
SAFE_FREE(data.dptr);
 
return lck;



svn commit: samba r12224 - branches/SAMBA_3_0/source/rpc_server branches/SAMBA_3_0_RELEASE/source/rpc_server trunk/source/rpc_server

2005-12-13 Thread jerry
Author: jerry
Date: 2005-12-14 01:09:46 + (Wed, 14 Dec 2005)
New Revision: 12224

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12224

Log:
adding more characters to the invalid share name string
Modified:
   branches/SAMBA_3_0/source/rpc_server/srv_srvsvc_nt.c
   branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_srvsvc_nt.c
   trunk/source/rpc_server/srv_srvsvc_nt.c


Changeset:
Modified: branches/SAMBA_3_0/source/rpc_server/srv_srvsvc_nt.c
===
--- branches/SAMBA_3_0/source/rpc_server/srv_srvsvc_nt.c2005-12-14 
01:02:58 UTC (rev 12223)
+++ branches/SAMBA_3_0/source/rpc_server/srv_srvsvc_nt.c2005-12-14 
01:09:46 UTC (rev 12224)
@@ -29,7 +29,7 @@
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_RPC_SRV
 
-#define INVALID_SHARENAME_CHARS *?|
+#define INVALID_SHARENAME_CHARS *?|/\\+=;:\,
 
 /
  Check a string for any occurrences of a specified list of invalid 

Modified: branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_srvsvc_nt.c
===
--- branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_srvsvc_nt.c
2005-12-14 01:02:58 UTC (rev 12223)
+++ branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_srvsvc_nt.c
2005-12-14 01:09:46 UTC (rev 12224)
@@ -29,7 +29,7 @@
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_RPC_SRV
 
-#define INVALID_SHARENAME_CHARS *?|
+#define INVALID_SHARENAME_CHARS *?|/\\+=;:\,
 
 /
  Check a string for any occurrences of a specified list of invalid 

Modified: trunk/source/rpc_server/srv_srvsvc_nt.c
===
--- trunk/source/rpc_server/srv_srvsvc_nt.c 2005-12-14 01:02:58 UTC (rev 
12223)
+++ trunk/source/rpc_server/srv_srvsvc_nt.c 2005-12-14 01:09:46 UTC (rev 
12224)
@@ -29,7 +29,7 @@
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_RPC_SRV
 
-#define INVALID_SHARENAME_CHARS *?|
+#define INVALID_SHARENAME_CHARS *?|/\\+=;:\,
 
 /
  Check a string for any occurrences of a specified list of invalid 



svn commit: samba r12225 - in branches/SAMBA_3_0: . examples/libsmbclient source/libsmb source/rpc_client

2005-12-13 Thread derrell
Author: derrell
Date: 2005-12-14 04:00:58 + (Wed, 14 Dec 2005)
New Revision: 12225

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12225

Log:
 [EMAIL PROTECTED]:  derrell | 2005-12-13 22:59:45 -0500
 1. Fix a crash bug which should have reared its ugly head ages ago, but for
some reason, remained dormant until recently.  The bug pertained to
libsmbclient doing a structure assignment of a cli after having opened a
pipe.  The pipe open code makes a copy of the cli pointer that was passed
to it.  If the cli is later copied (and that cli pointer that was saved
is no longer valid), the pipe code will cause a crash during shutdown or
when the copied cli is closed.
 
 2. The 'type' field in enumerated shares was not being set correctly with
the new RPC-based mechanism for enumerating shares.
 

Modified:
   branches/SAMBA_3_0/
   branches/SAMBA_3_0/examples/libsmbclient/testbrowse2.c
   branches/SAMBA_3_0/source/libsmb/clientgen.c
   branches/SAMBA_3_0/source/libsmb/libsmbclient.c
   branches/SAMBA_3_0/source/rpc_client/cli_pipe.c


Changeset:

Property changes on: branches/SAMBA_3_0
___
Name: svk:merge
   - 3a72dc49-98ff-0310-ab52-9b7ed7945d91:/local/samba3:10812
   + 3a72dc49-98ff-0310-ab52-9b7ed7945d91:/local/samba3:11729

Modified: branches/SAMBA_3_0/examples/libsmbclient/testbrowse2.c
===
--- branches/SAMBA_3_0/examples/libsmbclient/testbrowse2.c  2005-12-14 
01:09:46 UTC (rev 12224)
+++ branches/SAMBA_3_0/examples/libsmbclient/testbrowse2.c  2005-12-14 
04:00:58 UTC (rev 12225)
@@ -85,7 +85,7 @@
 
 strncpy(wrkgrp, workgroup, wrkgrplen - 1); wrkgrp[wrkgrplen - 1] = 0;
 strncpy(user, username, userlen - 1); user[userlen - 1] = 0;
-strncpy(passwd, password, passwdlen - 1); passwd[passwdlen - 1] = 0;   
+strncpy(passwd, password, passwdlen - 1); passwd[passwdlen - 1] = 0;
 }
 
 SMBCCTX* create_smbctx(){

Modified: branches/SAMBA_3_0/source/libsmb/clientgen.c
===
--- branches/SAMBA_3_0/source/libsmb/clientgen.c2005-12-14 01:09:46 UTC 
(rev 12224)
+++ branches/SAMBA_3_0/source/libsmb/clientgen.c2005-12-14 04:00:58 UTC 
(rev 12225)
@@ -358,11 +358,13 @@
 void cli_rpc_pipe_close(struct rpc_pipe_client *cli)
 {
if (!cli_close(cli-cli, cli-fnum)) {
-   DEBUG(0,(cli_rpc_pipe_close: cli_close failed on pipe %s 
-   to machine %s.  Error was %s\n,
-   cli-pipe_name,
-   cli-cli-desthost,
-   cli_errstr(cli-cli)));
+   DEBUG(0,(cli_rpc_pipe_close: cli_close failed on pipe %s, 
+ fnum 0x%x 
+ to machine %s.  Error was %s\n,
+ cli-pipe_name,
+ (int) cli-fnum,
+ cli-cli-desthost,
+ cli_errstr(cli-cli)));
}
 
if (cli-auth.cli_auth_data_free_func) {

Modified: branches/SAMBA_3_0/source/libsmb/libsmbclient.c
===
--- branches/SAMBA_3_0/source/libsmb/libsmbclient.c 2005-12-14 01:09:46 UTC 
(rev 12224)
+++ branches/SAMBA_3_0/source/libsmb/libsmbclient.c 2005-12-14 04:00:58 UTC 
(rev 12225)
@@ -82,7 +82,6 @@
 /*
  * Find an lsa pipe handle associated with a cli struct.
  */
-
 static struct rpc_pipe_client *find_lsa_pipe_hnd(struct cli_state *ipc_cli)
 {
struct rpc_pipe_client *pipe_hnd;
@@ -855,14 +854,27 @@
 return NULL;
 }
 
+ipc_srv = SMB_MALLOC_P(SMBCSRV);
+if (!ipc_srv) {
+errno = ENOMEM;
+cli_shutdown(ipc_cli);
+return NULL;
+}
+
+ZERO_STRUCTP(ipc_srv);
+ipc_srv-cli = *ipc_cli;
+
+free(ipc_cli);
+
 if (pol) {
-pipe_hnd = cli_rpc_pipe_open_noauth(ipc_cli,
+pipe_hnd = cli_rpc_pipe_open_noauth(ipc_srv-cli,
 PI_LSARPC,
 nt_status);
 if (!pipe_hnd) {
 DEBUG(1, (cli_nt_session_open fail!\n));
 errno = ENOTSUP;
-cli_shutdown(ipc_cli);
+cli_shutdown(ipc_srv-cli);
+free(ipc_srv);
 return NULL;
 }
 
@@ -874,30 +886,18 @@
 
 nt_status = rpccli_lsa_open_policy(
 pipe_hnd,
-

svn commit: samba r12226 - in trunk/source: libsmb rpc_client

2005-12-13 Thread jra
Author: jra
Date: 2005-12-14 06:26:03 + (Wed, 14 Dec 2005)
New Revision: 12226

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12226

Log:
Janitor for  derrell:
 1. Fix a crash bug which should have reared its ugly head ages ago, but for
some reason, remained dormant until recently.  The bug pertained to
libsmbclient doing a structure assignment of a cli after having opened a
pipe.  The pipe open code makes a copy of the cli pointer that was passed
to it.  If the cli is later copied (and that cli pointer that was saved
is no longer valid), the pipe code will cause a crash during shutdown or
when the copied cli is closed.

 2. The 'type' field in enumerated shares was not being set correctly with
the new RPC-based mechanism for enumerating shares.
Jeremy.

Modified:
   trunk/source/libsmb/clientgen.c
   trunk/source/libsmb/libsmbclient.c
   trunk/source/rpc_client/cli_pipe.c


Changeset:
Modified: trunk/source/libsmb/clientgen.c
===
--- trunk/source/libsmb/clientgen.c 2005-12-14 04:00:58 UTC (rev 12225)
+++ trunk/source/libsmb/clientgen.c 2005-12-14 06:26:03 UTC (rev 12226)
@@ -358,11 +358,13 @@
 void cli_rpc_pipe_close(struct rpc_pipe_client *cli)
 {
if (!cli_close(cli-cli, cli-fnum)) {
-   DEBUG(0,(cli_rpc_pipe_close: cli_close failed on pipe %s 
-   to machine %s.  Error was %s\n,
-   cli-pipe_name,
-   cli-cli-desthost,
-   cli_errstr(cli-cli)));
+   DEBUG(0,(cli_rpc_pipe_close: cli_close failed on pipe %s, 
+ fnum 0x%x 
+ to machine %s.  Error was %s\n,
+ cli-pipe_name,
+ (int) cli-fnum,
+ cli-cli-desthost,
+ cli_errstr(cli-cli)));
}
 
if (cli-auth.cli_auth_data_free_func) {

Modified: trunk/source/libsmb/libsmbclient.c
===
--- trunk/source/libsmb/libsmbclient.c  2005-12-14 04:00:58 UTC (rev 12225)
+++ trunk/source/libsmb/libsmbclient.c  2005-12-14 06:26:03 UTC (rev 12226)
@@ -82,7 +82,6 @@
 /*
  * Find an lsa pipe handle associated with a cli struct.
  */
-
 static struct rpc_pipe_client *find_lsa_pipe_hnd(struct cli_state *ipc_cli)
 {
struct rpc_pipe_client *pipe_hnd;
@@ -855,14 +854,27 @@
 return NULL;
 }
 
+ipc_srv = SMB_MALLOC_P(SMBCSRV);
+if (!ipc_srv) {
+errno = ENOMEM;
+cli_shutdown(ipc_cli);
+return NULL;
+}
+
+ZERO_STRUCTP(ipc_srv);
+ipc_srv-cli = *ipc_cli;
+
+free(ipc_cli);
+
 if (pol) {
-pipe_hnd = cli_rpc_pipe_open_noauth(ipc_cli,
+pipe_hnd = cli_rpc_pipe_open_noauth(ipc_srv-cli,
 PI_LSARPC,
 nt_status);
 if (!pipe_hnd) {
 DEBUG(1, (cli_nt_session_open fail!\n));
 errno = ENOTSUP;
-cli_shutdown(ipc_cli);
+cli_shutdown(ipc_srv-cli);
+free(ipc_srv);
 return NULL;
 }
 
@@ -874,30 +886,18 @@
 
 nt_status = rpccli_lsa_open_policy(
 pipe_hnd,
-ipc_cli-mem_ctx,
+ipc_srv-cli.mem_ctx,
 True, 
 GENERIC_EXECUTE_ACCESS,
 pol);
 
 if (!NT_STATUS_IS_OK(nt_status)) {
-errno = smbc_errno(context, ipc_cli);
-cli_shutdown(ipc_cli);
+errno = smbc_errno(context, ipc_srv-cli);
+cli_shutdown(ipc_srv-cli);
 return NULL;
 }
 }
 
-ipc_srv = SMB_MALLOC_P(SMBCSRV);
-if (!ipc_srv) {
-errno = ENOMEM;
-cli_shutdown(ipc_cli);
-return NULL;
-}
-
-ZERO_STRUCTP(ipc_srv);
-ipc_srv-cli = *ipc_cli;
-
-free(ipc_cli);
-
 /* now add it to the cache (internal or external) */
 
 errno = 0;  /* let cache function set errno if it likes */
@@ -2191,12 +2191,23 @@
SMBCFILE *dir = (SMBCFILE 

svn commit: samba r12227 - in branches/SAMBA_4_0/source: auth auth/credentials auth/gensec dsdb/samdb ldap_server lib lib/ldb/ldb_ildap lib/registry libnet nbt_server/wins ntptr/simple_ldb passdb scri

2005-12-13 Thread abartlet
Author: abartlet
Date: 2005-12-14 07:22:25 + (Wed, 14 Dec 2005)
New Revision: 12227

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12227

Log:
I realised that I wasn't yet seeing authenticated LDAP for the ldb
backend. 

The idea is that every time we open an LDB, we can provide a
session_info and/or credentials.  This would allow any ldb to be remote
to LDAP.  We should also support provisioning to a authenticated ldap
server.

(They are separate so we can say authenticate as foo for remote, but
here we just want a token of SYSTEM).

Andrew Bartlett


Modified:
   branches/SAMBA_4_0/source/auth/auth_util.c
   branches/SAMBA_4_0/source/auth/credentials/credentials.c
   branches/SAMBA_4_0/source/auth/credentials/credentials_files.c
   branches/SAMBA_4_0/source/auth/gensec/schannel_state.c
   branches/SAMBA_4_0/source/dsdb/samdb/samdb.c
   branches/SAMBA_4_0/source/ldap_server/ldap_simple_ldb.c
   branches/SAMBA_4_0/source/lib/db_wrap.c
   branches/SAMBA_4_0/source/lib/ldb/ldb_ildap/ldb_ildap.c
   branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c
   branches/SAMBA_4_0/source/libnet/libnet_join.c
   branches/SAMBA_4_0/source/nbt_server/wins/winsdb.c
   branches/SAMBA_4_0/source/ntptr/simple_ldb/ntptr_simple_ldb.c
   branches/SAMBA_4_0/source/passdb/secrets.c
   branches/SAMBA_4_0/source/scripting/ejs/smbcalls_auth.c
   branches/SAMBA_4_0/source/scripting/ejs/smbcalls_ldb.c
   branches/SAMBA_4_0/source/scripting/libjs/provision.js


Changeset:
Sorry, the patch is too large (474 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12227