Re: [Samba] HowTo move a samba print server

2006-12-13 Thread Dr.Peer-Joachim Koch

Hi,

thanks a lot. I will test it ... ;)


Bye, Peer

Martin Zielinski schrieb:


1st. Copy the ntprinters.tdb, ntdrivers.tdb and ntforms.tdb to your new
server.
2nd. Copy the driver directory to your new server.

3rd. Copy the spooler settings. Depends on your spooler. E.g. 
printers.conf and classes.conf in case of CUPS.


That should be all.

Bye,

Martin





--
Mit freundlichem Gruss
Peer-Joachim Koch
_
Max-Planck-Institut fuer Biogeochemie
Dr. Peer-Joachim Koch
Hans-Knöll Str.10Telefon: ++49 3641 57-6705
D-07745 Jena Telefax: ++49 3641 57-7705
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Null session problem when mounting share using domainuseraccount

2006-12-13 Thread Latrell Wang 王獻綱
My global session of smb.conf is as follows:
[global]
dos charset = UTF8
display charset = UTF8
unix charset = UTF8
server schannel=auto
netbios name = NSA1129
write ok = yes
guest account = smbguest
map to guest = bad user
encrypt passwords = yes
map archive = no
client use spnego = no
auth methods = guest sam_ignoredomain winbind:ntdomain
host msdfs = yes
winbind use default domain = yes

workgroup = NAS
security = ads
password server = 172.23.26.204 *
realm = NAS.LOCAL
idmap uid = 10-50
idmap gid = 10-50
winbind cache time = 15
template homedir = /tmp/users/home/%D/%U
template shell = /bin/bash

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Latrell Wang 王獻綱
Sent: Wednesday, December 13, 2006 1:56 PM
To: samba@lists.samba.org
Subject: RE: [Samba] Null session problem when mounting share using 
domainuseraccount

In samba 3.0.14a, I noticed one item:
* Disable schannel on the LSA and SAMR pipes in winbindd client 1190 code to 
deal with Windows 2003 SP1 and Windows 2000 SP4 SR1.

Does the fix related directly to my problem. The detailed debug message of 
smbmount is as follows:
[EMAIL PROTECTED]:~# smbmount //localhost/dd /mnt -o 
username=latrell1,password=1234qwer,debug=9
mount.smbfs started (version 3.0.21c)
added interface ip=172.23.26.67 bcast=172.23.26.255 nmask=255.255.255.0
Opening cache file at /etc/zyxel/samba/gencache.tdb
name localhost#20 found.
Connecting to 127.0.0.1 at port 445
socket option SO_KEEPALIVE = 0
socket option SO_REUSEADDR = 0
socket option SO_BROADCAST = 0
socket option TCP_NODELAY = 1
socket option TCP_KEEPCNT = 9
socket option TCP_KEEPIDLE = 7200
socket option TCP_KEEPINTVL = 75
socket option IPTOS_LOWDELAY = 0
socket option IPTOS_THROUGHPUT = 0
socket option SO_SNDBUF = 50160
socket option SO_RCVBUF = 87378
socket option SO_SNDLOWAT = 1
socket option SO_RCVLOWAT = 1
socket option SO_SNDTIMEO = 0
socket option SO_RCVTIMEO = 0
24240: session request ok
write_socket(4,183)
write_socket(4,183) wrote 183
size=85
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=49153
smb_tid=0
smb_pid=24240
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]=7 (0x7)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]=  256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]=   65 (0x41)
smb_vwv[ 5]=0 (0x0)
smb_vwv[ 6]=  256 (0x100)
smb_vwv[ 7]=45312 (0xB100)
smb_vwv[ 8]=   94 (0x5E)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=33011 (0x80F3)
smb_vwv[11]=32768 (0x8000)
smb_vwv[12]=17990 (0x4646)
smb_vwv[13]=31267 (0x7A23)
smb_vwv[14]=50974 (0xC71E)
smb_vwv[15]=1 (0x1)
smb_vwv[16]= 2048 (0x800)
smb_bcc=16
size=85
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=49153
smb_tid=0
smb_pid=24240
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]=7 (0x7)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]=  256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]=   65 (0x41)
smb_vwv[ 5]=0 (0x0)
smb_vwv[ 6]=  256 (0x100)
smb_vwv[ 7]=45312 (0xB100)
smb_vwv[ 8]=   94 (0x5E)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=33011 (0x80F3)
smb_vwv[11]=32768 (0x8000)
smb_vwv[12]=17990 (0x4646)
smb_vwv[13]=31267 (0x7A23)
smb_vwv[14]=50974 (0xC71E)
smb_vwv[15]=1 (0x1)
smb_vwv[16]= 2048 (0x800)
smb_bcc=16
write_socket(4,137)
write_socket(4,137) wrote 137
size=64
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=16385
smb_tid=0
smb_pid=24240
smb_uid=100
smb_mid=2
smt_wct=3
smb_vwv[ 0]=  255 (0xFF)
smb_vwv[ 1]=0 (0x0)
smb_vwv[ 2]=1 (0x1)
smb_bcc=23
24240: session setup ok
write_socket(4,69)
write_socket(4,69) wrote 69
size=35
smb_com=0x75
smb_rcls=1
smb_reh=0
smb_err=5
smb_flg=136
smb_flg2=1
smb_tid=0
smb_pid=24240
smb_uid=100
smb_mid=3
smt_wct=0
smb_bcc=0
24240: tree connect failed: ERRDOS - ERRnoaccess (Access denied.)
SMB connection failed

Latrell.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Latrell Wang 王獻綱
Sent: Tuesday, December 12, 2006 7:12 PM
To: samba@lists.samba.org
Subject: [Samba] Null session problem when mounting share using domain 
useraccount

Hi all:

 

As far as I know, windows 2003 sp1 restricts anonymous access to samr and 
lsarpc. On windows 2003, everyone group does not include anonymous logon, thus 
anonymous enumeration can’t be achieved unless anonymous logon is a member of 
pre-windows 2000 compatible group. I think this is the reason why smbmount 
using domain user account failed. The error message is as follows:

 

26520: tree connect failed: ERRDOS - ERRnoaccess (Access denied.)

SMB connection failed

 

The packets showed that “STATUS_ACCESS_DENIED” in SamrConnect2 request and 
reply. If anonymous logon belongs to pre-windows 2000 compatible group, 
smbmount ran successfully.

 

Will samba work around this issue?

 

Thanks for the replies.

 

Latrell.

-- 
To unsubscribe from this list 

Re: [Samba] Samba and automount?

2006-12-13 Thread Bjoern Tore Sund

Jiří Červenka wrote:

Hello,
thanks for reply.
Could you post example of your pam_cifs configuration. 


I'd rather not, unless you're wondering about something specific - 
there's a quite good example in the pam_cifs documentation.



Are your homedirs on w2k3 or w2k server?


No.  The Windows file systems don't have the correct functionality to be 
homedirs for Linux, you'll need a local homedirectory and then mount the 
real home directory in a subdirectory.  I didn't want that, so I'm using 
Samba on the server side.


Is it possible to use pam_cifs with winbind? Pam_cifs has pam_ldap in 
requisities.

I use pam_winbind for authetization.


Not tested, but I can't think of any reasons why it shouldn't work.  I'm 
one of the developers of pam_cifs, and I can't think of any reason 
pam_cifs with winbind shouldn't work.


Bjørn
--
Bjørn Tore Sund   Phone: 555-84894   Email:   [EMAIL PROTECTED]
IT department VIP:   81724   Support: http://bs.uib.no
Univ. of Bergen

When in fear and when in doubt, run in circles, scream and shout.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] create mode problems

2006-12-13 Thread Robert Mortimer
I have two directories that look the same but when a user edits a document
belonging to another user in one of them it sets the read-only flag. In the
other it does not.

I have the following in the main part of my smb.conf

create mode = 660
force create mode = 660
directory mode = 770
read only = no

Directory one has the following Unix and ACL permissions

drwxrwx---+ 2 rwallis TS_quality  4096 Dec 13 12:21 Processor
# file: Processor
# owner: rwallis
# group: TS_quality
user::rwx
user:rwallis:rwx
group::rwx
group:AD_Domain_Users:r-x
group:TS_quality:rwx
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:group:AD_Domain_Users:r-x
default:group:TS_quality:rwx
default:mask::rwx
default:other::---

if I (rmortimer member of TS_quality) edit a file it goes from

-rwxrwx---+ 1 rwallis   TS_main   30208 Dec 13 08:54 TP934_DVT1.doc
# file: TP934_DVT1.doc
# owner: rwallis
# group: TS_main
user::rwx
user:rwallis:rwx
group::rwx
group:AD_Domain_Users:r-x
group:TS_quality:rwx
mask::rwx
other::---

to
-rwxrwx---+ 1 rmortimer TS_main   30208 Dec 13 12:33 TP934_DVT1.doc
# file: TP934_DVT1.doc
# owner: rmortimer
# group: TS_main
user::rwx
user:rwallis:rwx
group::rwx
group:AD_Domain_Users:r-x
group:TS_quality:rwx
mask::rwx
other::---

Directory TWO has the following Unix and ACL permissions

drwxrwx---+  2 rwallis TS_quality   4096 Dec 13 12:21 Systems
# file: Systems
# owner: rwallis
# group: TS_quality
user::rwx
user:rwallis:rwx
group::rwx
group:AD_Domain_Users:r-x
group:TS_quality:rwx
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:group:AD_Domain_Users:r-x
default:group:TS_quality:rwx
default:mask::rwx
default:other::---

When I edit the following file

-rwxrwx---+ 1 rwallis   TS_quality 12800 Oct 26  1998 Tp3802.doc
# file: Tp3802.doc
# owner: rwallis
# group: TS_quality
user::rwx
user:rwallis:rwx
group::rwx
group:AD_Domain_Users:r-x
group:TS_quality:rwx
mask::rwx
other::---

I end up with

-r--rwx---+ 1 rmortimer TS_main24064 Dec 13 12:44 Tp3802.doc
# file: Tp3802.doc
# owner: rmortimer
# group: TS_main
user::r--
user:rwallis:rwx
group::---
group:AD_Domain_Users:r-x
group:TS_quality:rwx
mask::rwx
other::---

As you can see this is flagged as read only (user = r--)

Both these directories are on the same share

Any pointers?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with duplicated groups?

2006-12-13 Thread Victor Medina
Joel, 

you should do a vampire before starting samba. 

When you start samba for the first time, it will create all built ins
group by default and will map them to -1. If you do vampire, it will
import all groups predefined in the windows host, that's why you have
duplicated entrees, one corresponding to samba's original init and the
ones you imported from the windows server. 

You can try by deleting everything under /var/lib/samba (backup first,
shut down samba servers) and do a vampire, then start samba servers
again. Try a net groupmap list. 

Everything should be OK by now.:-)

Best Regards

Victor.


El mar, 12-12-2006 a las 14:04 -0400, Joel Rosental R. escribió:
 Hello, i have some problems migrating a Windows 2000 PDC to a Debian
 GNU/Linux Samba Server, i want to migrate it to a LDAP backend.. but as
 i'm kind of newbie with ldap and samba migration stuff, i preffered to
 migrate it to tdbsam first and try it for a while, if everything works
 fine, then switch to a ldap backend.
 
 The problem is that Essential Windows Groups are automatically created,
 so with a fresh samba installation and the smb.conf i put you above,
 this is the output that gives me a net groupmap list:
 
 System Operators (S-1-5-32-549) - -1
 Replicators (S-1-5-32-552) - -1
 Guests (S-1-5-32-546) - -1
 Domain Admins (S-1-5-21-2530314572-2208144836-3936822875-512) - -1
 Domain Guests (S-1-5-21-2530314572-2208144836-3936822875-514) - -1
 Power Users (S-1-5-32-547) - -1
 Print Operators (S-1-5-32-550) - -1
 Administrators (S-1-5-32-544) - -1
 Account Operators (S-1-5-32-548) - -1
 Domain Users (S-1-5-21-2530314572-2208144836-3936822875-513) - -1
 Backup Operators (S-1-5-32-551) - -1
 Users (S-1-5-32-545) - -1
 
 Ok, according to official documentation this is normal because i'm
 using tdbsam.
 
 After it, i map all those Windows groups to UNIX equivalents via a
 script like this:
 
 #!/bin/bash
 
 groupadd ntadmin
 groupadd domkrbtgt
 groupadd domcomp
 groupadd domcontr
 groupadd certadmin
 groupadd schemadmin
 groupadd enterpadmin
 groupadd poladmin
 
 groupadd foo
 groupadd bar
 
 ### Mapping Windows Groups
 
 net groupmap modify ntgroup=Domain Admins unixgroup=ntadmin  type=d
 net groupmap modify ntgroup=Domain Users unixgroup=users type=d
 net groupmap modify ntgroup=Domain Guests unixgroup=nogroup type=d
 #net groupmap add ntgroup=Domain KRBTGT unixgroup=domkrbtgt rid=502
 type=d
 net groupmap add ntgroup=Domain Computers unixgroup=domcomp rid=515
 type=d
 net groupmap add ntgroup=Domain Controllers unixgroup=domcontr rid=516
 type=dnet groupmap add ntgroup=Certificate Admins unixgroup=certadmin
 rid=517 type=d
 net groupmap add ntgroup=Schema Admins unixgroup=schemadmin rid=518
 type=d
 net groupmap add ntgroup=Enterprise Admins unixgroup=enterpadmin
 rid=519 type=d
 net groupmap add ntgroup=Policy Admins unixgroup=poladmin rid=520
 type=d
 net groupmap modify ntgroup=Administrators unixgroup=root
 net groupmap modify ntgroup=Users unixgroup=users
 net groupmap modify ntgroup=Guests unixgroup=nogroup
 net groupmap modify ntgroup=Power Users unixgroup=root
 net groupmap modify ntgroup=Account Operators unixgroup=sys
 net groupmap modify ntgroup=System Operators unixgroup=bin
 net groupmap modify ntgroup=Print Operators unixgroup=lp
 net groupmap modify ntgroup=Backup Operators unixgroup=daemon
 net groupmap modify ntgroup=Replicators unixgroup=sys
 
 ## Here i begin with my own groups
 
 net groupmap add ntgroup=Foo unixgroup=foo type=d
 net groupmap add ntgroup=Bar unixgroup=bar type=d
 
 Here it's the result:
 
 
 System Operators (S-1-5-32-549) - bin
 Sistemas (S-1-5-21-1085031214-299502267-1801674531-11041) - sistemas
 Replicators (S-1-5-32-552) - sys
 Guests (S-1-5-32-546) - nogroup
 Presupuesto (S-1-5-21-1085031214-299502267-1801674531-11035) -
 presupuesto
 Documanager (S-1-5-21-1085031214-299502267-1801674531-11029) -
 documanager
 Consulta en Sala (S-1-5-21-1085031214-299502267-1801674531-11023) -
 consultasala
 Soporte Tecnico (S-1-5-21-1085031214-299502267-1801674531-11043) -
 soportetec
 SAI (S-1-5-21-1085031214-299502267-1801674531-11037) - sai
 Domain Users (S-1-5-21-1085031214-299502267-1801674531-513) - users
 Power Users (S-1-5-32-547) - root
 Domain Computers (S-1-5-21-1085031214-299502267-1801674531-515) -
 domcomp
 Domain Admins (S-1-5-21-1085031214-299502267-1801674531-512) - ntadmin
 Domain Guests (S-1-5-21-1085031214-299502267-1801674531-514) - nogroup
 Domain Controllers (S-1-5-21-1085031214-299502267-1801674531-516) -
 domcontr
 Nomina (S-1-5-21-1085031214-299502267-1801674531-11031) - nomina
 Print Operators (S-1-5-32-550) - lp
 Administrators (S-1-5-32-544) - root
 Schema Admins (S-1-5-21-1085031214-299502267-1801674531-518) -
 schemadmin
 Contabilidad (S-1-5-21-1085031214-299502267-1801674531-11025) -
 contabilidad
 Certificate Admins (S-1-5-21-1085031214-299502267-1801674531-517) -
 certadmin
 Enterprise Admins (S-1-5-21-1085031214-299502267-1801674531-519) -
 enterpadminPolicy Admins 

Re: [Samba] Shares mount on linux but not windows?

2006-12-13 Thread Brian Atkins

James A. Dinkel wrote:

Do you get results from getent passwd and getent group that include
domain users?


Yes.


You valid users directive should be in the form: @DOMAIN+group name,
such as @DOMAIN+domain users and the part between the quotes should be
EXACLTY as the group appears with getent group, same case and
everything.


Yes, it does, but the woes I'm having are related to users, not groups. 
If I specify:


valid users = @DOMAIN+Domain Users

or even

valid users = @DOMAIN+Domain Admins, @DOMAIN+Sales Group

it works just fine. However, if I try to limit it to [a] specific user(s):

valid users = batkins

it fails miserably. The strange thing is that I have a nearly identical 
server with which this configuration works just fine.


Thanks for the response. I was beginning to wonder if my messages were 
going into limbo...

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ZENWorks Alternative

2006-12-13 Thread francisco F.
El Martes, 5 de Diciembre de 2006 15:40, C. L. escribió:
 I'm also looking for some Free Alternative to ZENWorks. Have you or anyone
 found anything?


http://wpkg.org/ ??
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] newbie question

2006-12-13 Thread Gary Dale

javier rojas wrote:

no, i haven'tthanks...

any idea on the part 3?...:)

On 12/12/06, Gary Dale [EMAIL PROTECTED] wrote:

On part 2, did you restart xinetd?



The error message state idmap uid range missing or invalid. I'd 
suggest believing it and adding a uid range in your smb.conf.  :)


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Read-only redundancy

2006-12-13 Thread Michael Coburn
We do much the same thing at our site where we load balance across a 
number of NFS machines that frontend our SAN via DNS round robin'ning 
with very low TTLS on just those file-serving machine records -- it 
works quite well.  I would expect that Samba should behave in a similar 
fashion.  One thing you should ensure is that your Win2k3 machines are 
doing hostname lookups via DNS and then WINS.


The Samba wiki has info on the challenges of clustering.

http://wiki.samba.org/index.php/Clustered_Samba
--
Michael Coburn
Enterprise Systems Administrator
Jupiterimages

Michael C. Wu wrote:

Hi Everyone,

We are setting up some READ-ONLY Samba servers, mounted from the same
volume on a SAN.  The files are media files to be played out by
Windows Media Servers mounted on Win2003.

Here are my thoughts about possible configurations, would someone mind
letting me know what would the best option be?

A) DNS Round Robin
Have foo.domain resolve to 10.0.0.1, 10.0.0.2, 10.0.0.3.

10.0.0.1
10.0.0.2
10.0.0.3 all have the same samba fileshare mount names configured.

Suppose WMS_server.domain connects to \\foo.domain\mount, and is
connected to 10.0.01, and 10.0.0.1 dies, WMS server retries, what
would happen?

B) Load balancing via VIP
Same setup, except that we give the VIP a DNS called foo-vip.domain
and let the Win2003 servers mount via \\foo-vip.domain

C) Samba HA with DRBD

What is the better route?  Would all 3 work? I'd like to make it the
simplest solution while remaining with redundancy to some extent.

Thanks in advance.

Michael

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Windows XP and Samba 2.0.5a

2006-12-13 Thread Jim Shanks
Updating to a Samba 3 will provide better support for XP clients.

That said, I used 2.2.7 for XP clients for about a year.  All that was
required was setting to 0 (zero) the Windows XP registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Service\Netlogon\Parameters\requiresignorseal

Then Windows XP should authenticate.

Jim


 I am looking for the answer for the same subject. Currently I have Linux
 2.0.36 running on my linux box.


 I would like to install Samba server on the box. I am expecting the
 Windows XP client will access to the box for file transfer.


 If someone have the answer for the question whether the Samba 2.0.5a
 support window XP client?


 It would be greatly appreciated for any idea or clue to help with the
 answer.


 Thanks.


 Frank


 [Samba] Windows XP and Samba 2.0.5a


 Debbie_Munsey at riverside.org.uk Debbie_Munsey at riverside.org.uk
 mailto:samba%40lists.samba.org?Subject=%5BSamba%5D%20Windows%20XP%20and
 %20Samba%202.0.5aIn-Reply-To=
 Fri Dec 19 11:24:17 GMT 2003

 * Previous message: [Samba] Re: help with winbind/pam
 http://lists.samba.org/archive/samba/2003-December/077371.html
 * Next message: [Samba] printing problems with 3.0.1
 http://lists.samba.org/archive/samba/2003-December/077312.html
 * Messages sorted by: [ date ]
 http://lists.samba.org/archive/samba/2003-December/date.html#77311  [
 thread ]
 http://lists.samba.org/archive/samba/2003-December/thread.html#77311
 [ subject ]
 http://lists.samba.org/archive/samba/2003-December/subject.html#77311
 [ author ]
 http://lists.samba.org/archive/samba/2003-December/author.html#77311

 





 I am running Samba version 2.0.5a.

 I am trying to run to my unix box using the run command in Windows XP
 and I
 get an error message saying
 The filename, directory name, or volume label syntax is incorrect.

 It all works fine from my Win2k, Window NT client pc's but not from any
 Windows XP clients.

 Do I need to update Samba? Or is there anything else I can do.

 Any help would be much appreciated.

 Thanks

 Debbie
 
 #
 Note:
 Disclaimer





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Shares mount on linux but not windows?

2006-12-13 Thread Brian Atkins

Chris Smith wrote:

You seem to be missing the the DOMAIN declaration in front of the username - 
it's not just for group names.


valid users = +DOMAIN\username

or in your case

valid users = +DOMAIN+batkins


Even with 'windbind use default domain = yes'?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Shares mount on linux but not windows?

2006-12-13 Thread Brian Atkins


Chris Smith wrote:

You seem to be missing the the DOMAIN declaration in front of the username - 
it's not just for group names.


valid users = +DOMAIN\username

or in your case

valid users = +DOMAIN+batkins


I stand corrected:

valid users = DOMAIN+batkins

works. Now I feel like a marooon!
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] svcctl - access denied

2006-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Dennis B. Hopp wrote:
 I have a samba 3.0.23a server that is a member of a Windows 2003 Active
 Directory domain.  I can use the Services MMC to see the services specified in
 the svcctl list option in smb.conf but trying to stop/start any services gives
 me an Access Denied.

You have to be a member of the local Administrators group
on the Samba box (or root).  Make sure you have winbindd
running and that 'net sam listmem Administrators' should
the domain admins group included in the local Administrators
group.

 Also, once this is figured out, is there a way to give 
 permissions to certain users to stop and start some
 services but not others (for example, developers may
 want to restart JBoss, but I don't necessarily want
 them messing with MySQL on the same box).

You can set the security descriptor using the sc.exe
command from a Windows client.  See the sdset and sdshoow
tool options.






cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFgCmGIR7qMdg1EfYRAhgMAJ9t6FAcd8iSMHgzPnyHPDhfwpvCxQCgvSGz
WFhKbEaWBoMbPxxwzNX6QYE=
=y5Il
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Shares mount on linux but not windows?

2006-12-13 Thread Geir A. Myrestrand

Brian Atkins wrote:

Chris Smith wrote:

You seem to be missing the the DOMAIN declaration in front of the 
username - it's not just for group names.


valid users = +DOMAIN\username

or in your case

valid users = +DOMAIN+batkins


Even with 'windbind use default domain = yes'?


'windbind'?   :-)

--

Geir A. Myrestrand
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Error

2006-12-13 Thread samba
Hi,

Can somebody tell me what these errors mean?
Samba 3.0232 on a Fedora 6 box

lib/util_sock.c:get_peer_addr(1229)  getpeername failed. Error was 
Overdrachtseindpunt is niet verbonden : 32 Time(s)
 lib/util_sock.c:write_data(562)  write_data: write failure in writing to 
client 0.0.0.0. Error Verbinding door partner opnieuw ingesteld : 16 Time(s)
 lib/util_sock.c:write_data(562)  write_data: write failure in writing to 
client 192.168.1.108. Error Verbinding door partner opnieuw ingesteld : 3 
Time(s)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] wierd message

2006-12-13 Thread Henrik Hudson
Hey List-

I keep having issues with my Master Browser and a OS X machine.

Master Browser: samba 3.0.23 (freebsd 6)
os level = 77
preferred master = yes
domain master = yes
local master = yes

The OS X keeps causing the system to reset and throwing logs like this:
[2006/12/13 09:39:01, 1] nmbd/nmbd_incomingdgrams.c:process_reset_browser(729)
  process_reset_browser: received diagnostic browser reset request from 
SCANNERS-COMPUT00 IP 10.0.0.185 state=0x2

So, what's supposed to be the master keeps getting reset and some of the other 
samba enabled computers start seeing the OS X machine as the master and 
logins don't work right.

Anyone know how to keep that error from happening or what is it doing?

Thanks.

henrik
-- 
Henrik Hudson
[EMAIL PROTECTED]
--
God, root, what is difference? Pitr; UF (http://www.userfriendly.org/)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Mount a DFS share

2006-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Charles E. Heizer wrote:
 Hello,
 I was wondering if it was possible to mount a DFS share using the mount
 command? The smbclient works fine for getting access to the share but I
 would like to mount it. I'm using RHEL 4 WS with samba3-3.0.23d.

Not yet.




cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFgDVVIR7qMdg1EfYRAt8pAKDvsr65nid4+jeKiFfXRWzosqnhWgCgsZBo
0FMZh1nJATgUjXBj6lCid4M=
=Ww6N
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Two domain groups with the same gid?

2006-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

James A. Dinkel wrote:
 Here is the result from getent:
 
 [EMAIL PROTECTED]:~$ getent group | grep 10208
 DOMAIN\group1:x:10208:
 BUILTIN\administrators:x:10208:DOMAIN\user1,DOMAIN\user2,DOMAIN\user3,DO
 MAIN\user4
 
 What is up with that?  Is there some way I can manually change the gid
 of one of these?  The group1 is a new group that I just set up btw.

See 'net idmap {dump,restore}





cehers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFgDWQIR7qMdg1EfYRAulvAKDMwkO8uep/pLZ6gXltgqQ8EEYpDgCghtpj
d+1Ya561BpFnYElhagJrfe4=
=PyV4
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Change existing accounts policy using pdbedit

2006-12-13 Thread Gareth Cummings

Hi,

Running Samba version 3.0.22-13.18 on Suse 10.1

I have just converted our smbpasswd to a tdbsam passdb backend so I 
could use the pdbedit tool.  I created a new policy using the pdbedit 
tool and it works fine for new accounts however I am wondering is there 
any way in applying this policy to existing accounts?


Thanks
Gareth

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A mass O trouble with solaris 10 and Samba+ADS

2006-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Robert Bannocks wrote:

 So my questions.
 
 1. Are these known bugs?  - i.e. if openldap was compiled 
 with sasl support then the compilation line requires a -lsasl.
 Is configure going to be fixed?

Your linker should be pulling in any indirect dependencies.
Use Gnu ld and not Sun's ld (IMO).

  2. For samba purposes is removing libldap's dependency on 
 sasl going to break or limit the functionality of samba
 in any way?

Currently no.

 3. Will samba ever be fixed to compile/configure with 
 native Solaris LDAP libraries.

Probably not unless someone else submits a patch and works
around the things we need from the ldap libs.

 4. It would be nice to see this documented somewhere, 
 my googleing found little on this topic.

Please add this to http://wiki.samba.org/.  We should create
a Building page for various OS lavors.




cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFgDaWIR7qMdg1EfYRAuXJAKCi40KRmkTymHfkMJp2lL5MXdsQ4ACcDTaN
f9YR+/jSRaVn1ErhvrGaILI=
=VK21
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Shares mount on linux but not windows?

2006-12-13 Thread Brian Atkins

Typo.

Geir A. Myrestrand wrote:


'windbind'?   :-)



Typo.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] problem with acls and dos mode in 3.0.23d

2006-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Dmitry Melekhov wrote:

 I'm user dm ;-)
 I can delete directory from console, but I can't do it from windows.
 And I see this directory as read-only...
 I tried to read debug 10 log, but can't find any reasons for such
 behaviour.
 Any ideas?

See 'map readonly' and possibly dos filemode' in smb.conf(5).





jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFgEIdIR7qMdg1EfYRArOcAJwLtsCrkT8NXrwydarTH4i97BZTVACbBqIs
iypAWoabqiRI6levJ3H2QrA=
=9j0b
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Does Samba/Winbind not follow nested groups in AD?!?

2006-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

James A. Dinkel wrote:
 Here's the situation:  We have users who are members of groups and those
 groups are sometimes members of a 2nd level of groups.  If a folder has
 permissions assigned to a 2nd level group, then the user can not access
 the share.  Doing a getent group | grep user | grep 2nd_level_group
 also returns nothing.  Samba seems to not be recognizing that a user is
 a member of a group under another group.
 
 Is there any way to enable Samba, or Winbind, to follow down the group
 hierarchy?

We (centeris) have a patch that will be merged upstream shortly.
Either myself or Danilo (it's his code) need to break it out
and submit it for review on samba-technical.  Look for this in 3.0.24.





cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFgEP7IR7qMdg1EfYRAoZQAJ93alsqd2U/sMaXujwTg7+RiqPiGgCePHud
OKepxuL0R4PEr5/TJLEsEuo=
=vFjw
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Failed to set servicePrincipalNames error

2006-12-13 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jason Haar wrote:

 Anyway, once I changed the netbios name entry to 
 netbios aliases = , net join works first time.
 
 I'd still say that was a bug in Samba - but the 
 workaround will do for now :-)

It's by design currently.  We could implement the same
type of settings that XP has (differentiate between the
hostname, fqdn, and netbios name) in the future.  If
someone wants to work on this, let me know.






cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFgETTIR7qMdg1EfYRAhRSAJ4+wV0bVNxKfaA5D8LSnslSSOEB7QCg8Ne+
5vX0gq0R7XuUM1ettI1dFWM=
=7LtV
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] W2k domain join fails Samba 3 pdc

2006-12-13 Thread Brad Askew
I cannot join any windows clients to my samba 3 pdc. I am seeing these 
logs in my samba log.machinename when I am attempting to join it to the 
domain. I am using an OpenLDAP backend hosted on the pdc. I can su, or 
ssh into the pdc with ldap only accounts without problem.


[2006/12/13 12:36:05, 2] lib/smbldap.c:smbldap_open_connection(722)
 smbldap_open_connection: connection opened
[2006/12/13 12:36:05, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
 init_sam_from_ldap: Entry found for user: Admin
[2006/12/13 12:36:05, 2] passdb/pdb_ldap.c:init_group_from_ldap(2199)
 init_group_from_ldap: Entry found for group: 512
[2006/12/13 12:36:05, 2] auth/auth.c:check_ntlm_password(307)
 check_ntlm_password:  authentication for user [admin] - [admin] - 
[Admin] succeeded

[2006/12/13 12:36:06, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2659)
 Returning domain sid for domain TSCH - 
S-1-5-21-1413032332-99-6

[2006/12/13 12:36:06, 2] passdb/pdb_ldap.c:init_ldap_from_sam(1064)
 init_ldap_from_sam: Setting entry for user: readykey$
[2006/12/13 12:36:06, 2] passdb/pdb_ldap.c:ldapsam_add_sam_account(2141)
 ldapsam_add_sam_account: added: uid == readykey$ in the LDAP database
[2006/12/13 12:36:06, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
 init_sam_from_ldap: Entry found for user: readykey$
[2006/12/13 12:36:06, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
 init_sam_from_ldap: Entry found for user: readykey$
[2006/12/13 12:36:06, 0] libsmb/smbencrypt.c:decode_pw_buffer(514)
 decode_pw_buffer: incorrect password length (2118141193).
[2006/12/13 12:36:06, 0] libsmb/smbencrypt.c:decode_pw_buffer(515)
 decode_pw_buffer: check that 'encrypt passwords = yes'
[2006/12/13 12:36:06, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
 init_sam_from_ldap: Entry found for user: readykey$
[2006/12/13 12:36:06, 0] passdb/pdb_ldap.c:ldapsam_delete_entry(480)
 ldapsam_delete_entry: Could not delete attributes for 
uid=readykey$,ou=Computers,dc=tsch,dc=lan, error: Object class violation 
(attribute 'displayName' not allowed)

[2006/12/13 12:36:07, 2] smbd/server.c:exit_server(614)
 Closing connections
[2006/12/13 12:36:42, 2] lib/smbldap.c:smbldap_open_connection(722)
 smbldap_open_connection: connection opened
[2006/12/13 12:36:42, 2] smbd/server.c:exit_server(614)
 Closing connections
[2006/12/13 12:36:42, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
 init_sam_from_ldap: Entry found for user: Admin
[2006/12/13 12:36:42, 2] passdb/pdb_ldap.c:init_group_from_ldap(2199)
 init_group_from_ldap: Entry found for group: 512
[2006/12/13 12:36:42, 2] auth/auth.c:check_ntlm_password(307)
 check_ntlm_password:  authentication for user [admin] - [admin] - 
[Admin] succeeded

[2006/12/13 12:36:44, 2] smbd/server.c:exit_server(614)
 Closing connections

I used smbldap-tools to populate the dit. This created a cn=Admin 
account in the tree, with a uidNumber=0, and allowed me to set the 
password, I have been using this account to attempt to join the client. 
I see that even though the join fails, the machine account gets created 
in my ou=Computers.
The error I get on the windows workstation is Logon failure: unknown 
username or bad password.


Openldap server 2.2.30, freebsd 6.1-release, and samba 3.0.21b

my smb.conf

[global]
   netbios name = test-dc
   encrypt passwords = yes
   workgroup = tsch
   security = user
   invalid users = bin daemon sys man postfix mail ftp
   admin users = @wheel
#domain admin group = @wheel
#domain admin users = root
#wins support = yes
   printing = cups
   passdb backend = ldapsam:ldap://localhost
#username map = /etc/samba/smbusers
   enable privileges = yes
   os level = 65
   preferred master = yes
   show add printer wizard = yes
   local master = yes
   domain logons = yes
   domain master = yes
   logon path = \\%N\profiles\%U
   logon drive = H:
   logon home = \\%N\Users\%U
#logon script =
## idealx scripts for user, group, and machine account mgmt
   add user script = /usr/local/sbin/smbldap-useradd -m %u
   delete user script = /usr/local/sbin/smbldap-userdel %u
   add group script = /usr/local/sbin/smbldap-groupadd %g
   delete group script = /usr/local/sbin/smbldap-groupdel %g
   add user to group script = /usr/local/sbin/smbldap-groupmod -m %u %g
   delete user from group script = /usr/local/sbin/smbldap-groupmod -x 
%u %g

   set primary group script = /usr/local/sbin/smbldap-usermod -g %g %u
   add machine script = /usr/local/sbin/smbldap-useradd - w %u
## password sync
   passwd program = /usr/local/sbin/smbldap-passwd -o %u
   passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
*passwd:*all*authentication*tokens*updated*

   unix password sync = yes
## OpenLDAP stuff here
   ldap suffix = dc=tsch,dc=lan
   ldap user suffix = ou=People
   ldap group suffix = ou=Groups
   ldap machine suffix = ou=Computers
   ldap idmap suffix = ou=People
   ldap admin dn = cn=Manager,dc=tsch,dc=lan
   ldap passwd sync = yes
   ldap ssl = no
   ldap delete dn = no
#

[Samba] config of failover machine backing multiple samba print servers

2006-12-13 Thread SER.RI-TIC - David Losada
Hello,

in our organization we have a number of print servers scattered across
several organizational units and departments. These servers are
configured in a similar fashion (Samba 3+CUPS, raw print queues,
point-and-print drivers for clients, authentication backend in a
centralized directory).

We had this idea of trying to set-up a machine in our central offices,
for providing fail-over printing service. Upon notification of the
failure of a print server, a manual procedure would be performed and the
failover machine would impersonate the failed print server. We hoped to
achieve this by configuring samba with multiple virtual servers. We
would enable them selectively (upon real server failure). We want the
possibility of having more than one of them enabled at the same time (in
case of a specially bad day).

However, we found no joy in our attempts. Impersonating a print server
requires replicating the ntprinters.tdb (and possibly other .tdb files).
The problem for us is that, in a Samba instance, just one ntprinters.tdb
is queried, not possible to keep a separate one for each virtual server.
I'm not sure if adding the content of all the ntprinters.tdb keys in a
single ntprinters.tdb would work (and don't know how to do it)

Is all this just a bad idea? Or maybe can be done somehow?

cheers,

David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Can connect to shares via IP but not hostname

2006-12-13 Thread Chris Smith
On Wednesday 13 December 2006 12:28, Scott wrote:
 Yes.

Difficult to believe as lack of NetBIOS name resolution appears to be the 
culprit.

Check these items on your Windows systems:

NetBIOS is enabled.
WINS server addresses are configured (either manually or by DHCP) and point to 
your WINS server.
Firewall is off (at least during troubleshooting).
Make sure that your local hosts and lmhosts files are empty (except for the 
loopback info in the hosts file), so they are not overriding DNS and WINS 
lookup.

Check this on your Samba PDC:

That it is configured to be a WINS server (wins support = Yes).
That your wins.dat file has the proper information. If not, stop Samba and 
delete the wins.dat and wins.tdb files and restart.
Also check you nmbd log for info such as:

Samba server MYSERVER is now a domain master browser for workgroup MYDOMAIN 
on subnet ...

Samba name server MYSERVER is now a local master browser for workgroup 
MYDOMAIN on subnet...


Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] winbind wbinfo -u problem

2006-12-13 Thread Marcelo Terres

Hi

I'm using winbbind with an AD Server.

The wbinfo -u is not working but wbinfo -t is ok.

Let me show you what's happenin and my logs:

[EMAIL PROTECTED]:/# wbinfo -t
checking the trust secret via RPC calls succeeded
[EMAIL PROTECTED]:/# wbinfo -u
Error looking up domain users


My log debug level 10 from the wbinfo -u is:

accepted socket 16
client_read: read 1824 bytes. Need 0 more for a full request.
process_request: request fn INTERFACE_VERSION
[14656]: request interface version
client_write: wrote 1300 bytes.
client_read: read 1824 bytes. Need 0 more for a full request.
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[14656]: request location of privileged pipe
client_write: wrote 1300 bytes.
client_write: need to write 35 extra data bytes.
client_write: wrote 35 bytes.
client_write: client_write: complete response written.
accepted socket 17
client_read: read 1824 bytes. Need 0 more for a full request.
process_request: request fn LIST_USERS
[14656]: list users
client_write: wrote 1300 bytes.
client_read: read 0 bytes. Need 1824 more for a full request.
read failed on sock 16, pid 14656: EOF
client_read: read 0 bytes. Need 1824 more for a full request.
read failed on sock 17, pid 14656: EOF


Any ideas ?

Thanks.

--
Marcelo H. Terres
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: winbind wbinfo -u problem

2006-12-13 Thread Marcelo Terres

Another informations:

My distro is Debian Sarge and the samba and winbind packages are 3.0.14a-3sarge.

Thanks,

On 12/13/06, Marcelo Terres [EMAIL PROTECTED] wrote:

Hi

I'm using winbbind with an AD Server.

The wbinfo -u is not working but wbinfo -t is ok.

Let me show you what's happenin and my logs:

[EMAIL PROTECTED]:/# wbinfo -t
checking the trust secret via RPC calls succeeded
[EMAIL PROTECTED]:/# wbinfo -u
Error looking up domain users


My log debug level 10 from the wbinfo -u is:

accepted socket 16
client_read: read 1824 bytes. Need 0 more for a full request.
process_request: request fn INTERFACE_VERSION
[14656]: request interface version
client_write: wrote 1300 bytes.
client_read: read 1824 bytes. Need 0 more for a full request.
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[14656]: request location of privileged pipe
client_write: wrote 1300 bytes.
client_write: need to write 35 extra data bytes.
client_write: wrote 35 bytes.
client_write: client_write: complete response written.
accepted socket 17
client_read: read 1824 bytes. Need 0 more for a full request.
process_request: request fn LIST_USERS
[14656]: list users
client_write: wrote 1300 bytes.
client_read: read 0 bytes. Need 1824 more for a full request.
read failed on sock 16, pid 14656: EOF
client_read: read 0 bytes. Need 1824 more for a full request.
read failed on sock 17, pid 14656: EOF


Any ideas ?

Thanks.

--
Marcelo H. Terres
[EMAIL PROTECTED]




--
Marcelo H. Terres
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] 'system error 5 has occured' when mapping printer

2006-12-13 Thread Mark Rutherford

Hi all,

I have had this issue for a really long time that I had a workaround 
for, but this workaround

has caused more harm than good.

The issue is when mapping 'LPT1'
I know this is a local LPT port, etc and I know that non-administrators 
cannot map this port.
The port is needed by a legacy application, and it cannot be changed 
until this application goes the way of all things.


So, to work around this issue I simply made everyone local admins on 
their machines.
Problem is, now people download and install things and it is just a 
nuisance.


I need a better workaround to this port issue, but non presents itself.
If I use devcon to disable the port, in theory I can map it 
(devcon disable *PNP0401)


So, the thing that springs to mind is group policies.
This needs to happen at login, so is there a way to run this command as 
an admin, then process your login script as the user?

Or, does someone have a real workaround?
Or, is my workaround the only way and I need to stand over peoples' 
shoulders to keep them from downloading IMs and file sharing apps?


Thanks all.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] UNIX credentials for Samba Share

2006-12-13 Thread Travis Bullock
Greetings, 

For years I have been using my Samba server and authenticating users via 
winbind to my NT4.0. 

I am now in a situation where I want to provide shares to users who are not 
domain members. I have created the file shares and the UNIX users/groups that I 
want to use for this folder structure. I am using the 'setfacl' command to 
apply the user/groups access rights to the specific folders. 

When a Windows clients browses to these shares, I want them to enter UNIX 
usernames and passwords that I have supplied. Windows seems inisitent on 
predicating each username entered with either a Domain or simply their 
%computername%\username. It will not accept simply 'jdoe'. 

Any way around this? 

Cheers, 

Travis Bullock 
Systems Administrator 
Avmax Group Inc. 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] ACL issue with Samba 2.0.23d + GFS

2006-12-13 Thread Dex Chen
I build with ACL support and installed samba 2.0.23d on RedHat EL 2.6.9.
It runs fine. But, I ran into an issue with ACL support.  Here is the
detail:
I set up a cifs share (gfs_cifs) which is on Linux GFS (see the smb.conf
below), and mount it on a XP box. Then I try to change the permission of
the dir through Windows native security tab. When I apply the changes
(click on OK/Apply button), Unable to save permission changes ...
Access is denied error message is popped up. 

But, I was able to using setfacl command on linux to modify the acl of
dir.

In addition, I was able to do exactly same thing for a share (ext_cifs)
on ext3 file system.

At this point, it seems to me this problem has something to do with
combination of samba and GFS.

I tried all other options in smb.conf, and nothing is help.

Any help on this would be really appreciated.

Thanks,

Dex

smb.conf==

[global]
   workgroup = lab01.local
   netbios name = CUB02
   server string = cub01 Samba Server
   printcap name = /etc/printcap
   load printers = yes
   cups options = raw
   log file = /var/log/samba/%m.log
   max log size = 50
   local master = no
   preferred master = no
   os level = 0
   security = user
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   dns proxy = no
   template shell = /bin/false
   winbind use default domain = yes
   idmap uid = 5-6
   idmap gid = 5-6
   template homedir = /home/winnt/%d/%u
   template shell = /bin/bash
   encrypt passwords = yes
   acl compatibility = win2k
[ext_cifs]
   comment = test cif shares from Ext3
   path = /var/tmp/ext_cifs1
   public = no
   writable = yes
   dos filemode = yes
[gfs_cifs]
   comment =  test cif shares from GFS
   path = /mnt/volume1/export/gfs_cifs1
   public = no
   writable = yes
   dos filemode = yes
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Adding a Samba Domain Server

2006-12-13 Thread Chris Hane
Thanks for replying.  I took my time and re-setup the PDC server today 
just to make sure everything works on the PDC.


Next I ran the net rpc join on the client and get the following:

[EMAIL PROTECTED] samba]# net rpc join -Uroot%password
Password:
Could not connect to server SFSPDC1
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE

Two things:

First, it asks me for the password again.

Second, I'm sure the password of root is correct.  It is the same 
command I used to join the PDC machine to the PDC Samba installation.


Also, when I look in the log.member1 on the PDC server I get the following:

[2006/12/13 20:21:26, 0] passdb/pdb_interface.c:pdb_default_create_user(368)
  _samr_create_user: Running the command `/usr/sbin/smbldap-useradd -w 
member1$' gave 9

[2006/12/13 20:22:00, 0] lib/system.c:set_process_capability(723)
  set_process_capability: cap_set_proc failed: Operation not permitted


Anyone know how I can find out what return code 9 means?

Thoughts?

Thanks,
Chris

Here are the two configs:

PDC SMB.CONF

[EMAIL PROTECTED] samba]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section [homes]
Processing section [printers]
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions

[global]
 workgroup = SFS
 netbios name = SFSPDC1
 server string = Samba Server PDC
 passdb backend = ldapsam:ldap://127.0.0.1 ldap://192.168.0.62;
 log file = /var/log/samba/log.%m
 max log size = 50
 add user script = /usr/sbin/smbldap-useradd -m %u
 add group script = /usr/sbin/smbldap-groupadd -p %g
 add user to group script = /usr/sbin/smbldap-groupmod -m %u %g
 delete user from group script = /usr/sbin/smbldap-groupmod -x %u %g
 set primary group script = /usr/sbin/smbldap-usermod -g %g %u
 add machine script = /usr/sbin/smbldap-useradd -w %u
 domain logons = Yes
 os level = 33
 preferred master = Yes
 domain master = Yes
 dns proxy = No
 wins support = Yes
 ldap admin dn = cn=admin,dc=com
 ldap delete dn = Yes
 ldap group suffix = ou=Groups
 ldap idmap suffix = ou=Idmap
 ldap machine suffix = ou=Computers
 ldap suffix = ou=itsolut,dc=com
 ldap user suffix = ou=people
 idmap backend = ldap:ldap://192.168.0.62
 idmap uid = 2000 - 3000
 idmap gid = 2000 - 3000

[homes]
 comment = Home Directories
 read only = No
 browseable = No

[printers]
 comment = All Printers
 path = /var/spool/samba
 printable = Yes
 browseable = No

DOMAIN MEMBER SMB.CONF

[EMAIL PROTECTED] samba]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section [homes]
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

[global]
workgroup = SFS
netbios name = MEMBER1
server string = TESTBOX
security = DOMAIN
log file = /var/log/samba/log.%m
max log size = 50
dns proxy = No
idmap uid = 2000 - 3000
idmap gid = 2000 - 3000
winbind use default domain = Yes

[homes]
comment = Home Directories
read only = No
browseable = No


Jeffrey Lord wrote:

Have you tried doing a 'net rpc join' on the client?

- Original Message -
From: [EMAIL PROTECTED] 
[EMAIL PROTECTED]

To: samba@lists.samba.org samba@lists.samba.org
Sent: Tue Dec 12 18:12:35 2006
Subject: [Samba] Adding a Samba Domain Server


I have a Samba PDC setup using LDAP as the passdb.  I want to add
another Samba server to the mix.  I believe I want to add it in as a
Domain Server; however, I can't seem to get it working.

On the PDC server I am running:
  - linux (2.6.latest)
  - openldap (latest)
  - samba (3.latest)
  - nss

On the Domain Server I am running:
  - samba (latest 3.latest)
  - nss

I thought someone might see something obvious in my smb.conf
(particularly the second one below for the domain server).  I am going
to try starting from scratch tomorrow and any advice is appreciated.

Thanks in advance,
Chris


==
SMB.CONF for the PDC
[global]
workgroup = SFS1
netbios name = SFSPDC
encrypt passwords = Yes
hide dot files = Yes
null passwords = Yes
enable privileges = yes
interfaces = 192.168.0.28
server string = SFSMAIL PDC
security = user
local master = yes
os level = 33
hosts allow = 192.168.0. 127.
loglevel = 2
log file = /var/log/samba/log.%m
debug timestamp = yes
domain master = yes
domain logons = yes
#winbind use default domain=yes
logon path =
wins support = yes
passdb expand explicit = no
ldap passwd sync = Yes
passdb backend = ldapsam:ldap://127.0.0.1/ ldap://itsolut.com/;
ldap admin dn = cn=admin,dc=com
ldap suffix   = ou=sfsmail,dc=com
ldap group suffix = ou=Groups
ldap user suffix = ou=people
ldap machine suffix = ou=Computers
ldap idmap suffix = ou=people
#ldap 

Re: [Samba] Samba and Medisoft

2006-12-13 Thread Matt Skerritt


On 12/12/2006, at 3:46 AM, Scott Swaim wrote:

I am looking at putting the medisoft application on a samba share.   
I was wondering if there is currently anyone using this  
configuration and if so then what are some of the problems that I  
might encounter.  The app is currently being hosted on a Winxp pro  
machine and I need to move it to a server.  Any help would be  
greatly appreciated.


You may need to disable oplocks for certain data files. I have a  
setup that uses access files as a back-end database (sadly, I'm  
serious here - and no it's definitely not my creation), and we needed  
to veto the oplocks on those files to ensure usability.


Check out the veto oplocks configuration option for samba.

--
Matt Skerritt
[EMAIL PROTECTED]



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Help with Samba+JFS

2006-12-13 Thread Matt Skerritt
Hmmm ... I'd have a look at your network card first - I've seen those  
delayed write errors caused by the network giving out in some form or  
another during the file transfer. In one case I had a very similar  
problem caused by a power dip that happened whilst a workstation was  
writing to the share. I've also had them when a flaky network card  
was being used in a server.


Next time it happens, do a ps aux (or whatever the equivalent is on  
your platform), and see if any of your processes are in the D state  
(uninterruptable sleep) - if so, then that's why you have to reboot  
to get access to the folder again.


Also you may want to try using ssh or ftp or somesuch to see how the  
transfer speeds to your machine work (ie, test how it works without  
samba). I'd recommend small and large files for the test.


On 10/12/2006, at 6:00 AM, Will Constable wrote:

I have a network server running FC5, with a hardware raid 3 card  
using 5
drives, as one large (1.2TB) partition in JFS.  I chose JFS because  
of a
recommendation for performance from a MythTV tutorial, but I don't  
really

know much about file systems and am suspecting JFS to be causing my
problems.  I run samba, apache and MythTV on this machine, and  
there is

essentially only one problem as far as I know.



If I write to my server from the network (only tested from windows  
XP pc's
using samba), I often get either an error in windows (Delayed Write  
Failed),

or windows freezes while writing.  On the server side, I generally get
kernel messages from JFS that are completely meaningless to me,  
just a bunch
of cryptic numbers and function calls.  After one of these  
problems, I can't

access the directory that was being written to, or my prompt freezes.
Rebooting seems to be the only fix- jfs does some replaying and  
then the
filesystem is perfect again.  This sounds a lot like a cut and dry  
problem
with JFS. except that MythTV does quite a lot of high intensity  
writing to
the array and never has trouble like this, yet it happens  
frequently when

being written to from samba.



First of all, is there any known problem with using JFS with  
samba?  Aside
from that, I sort of figure maybe there is a samba configuration  
option that

is to blame.  Possibly something to do with buffering or with maximum
throughput allowed. I am just guessing, but can anyone help?



Thanks a lot!

Will

[EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



--
Matt Skerritt
[EMAIL PROTECTED]



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Vista to Samba maping LPT ports

2006-12-13 Thread John Duthie

I am currently testing our company's software with Vista RC-1
and I've run into a snag I cannot Authenticate a Printer connection to a
Samba server on a dos prompt
I can connect to the printer using the GUI for windows printing
But i Cannot map the printer to an LPT port

Every windows out there will connect to this box , from 95 thru to 2000, XP
and even Server 2003. But not Vista (as an admin user of course)

Am I doing somthing wrong with samba ?


[EMAIL PROTECTED]:~# smbd -V
Version 3.0.23d


C:\Users\Johnnet use  h: \\svl\z-public
The command completed successfully.


C:\Users\Johnnet use lpt1 \\svl\prt112
The password is invalid for \\svl\prt112.

Enter the user name for 'svl': samba
Enter the password for svl:
System error 5 has occurred.

Access is denied.


Settings of interest in smb.conf

[global]
   security = SHARE
   map to guest = Bad User
   null passwords = Yes
   guest account = samba
   password level = 4
   username level = 4
   client NTLMv2 auth = Yes
   load printers = No
   domain master = No
   printing = lprng

[print$]
   path = /share/printer
   write list = @ntadmin, root, administrator
   read only = No
   guest ok = Yes
   strict sync = Yes
   default case = upper

[z-public]
   comment = Public Stuff
   path = /share/z-drive
   read only = No
   guest ok = Yes
   strict sync = Yes
   sync always = Yes

[prt112]
   comment = hp LaserJet 1200
   path = /var/spool/samba
   printable = Yes
   use client driver = Yes
   guest ok = Yes
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Trouble accessing linux files from vmware guest

2006-12-13 Thread madcap
Hi all,

I'm having a problem with samba and vmware. I have a large file that I'm
trying to open in windows XP (guest OS) over smb to my linux host (same
machine, obviously).

Accesses to the directories themselves are rather sluggish, and the file
will not open. I see broken pipes in the smb log for the host. (Sorry, I
don't have a log handy, but I can produce one on request.)

A colleague of mine tried to access my samba server from his own VMWare
set up (which is basically the same as mine), and it worked fine. It only
appears to be a problem trying to access from the guest windows VM to the
same host linux box.

BTW, I have bridged networking on, host-only and NAT off.

Any guidance would be much appreciated!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Compilation error on Mac OS X 10.4.7

2006-12-13 Thread Olivier Meyer

Dear List:

I am having difficulties compiling samba-3.0.23d on mac os x.
Here is the output of 'uname -a':
Darwin TI-15 8.7.0 Darwin Kernel Version 8.7.0: Fri May 26 15:20:53
PDT 2006; root:xnu-792.6.76.obj~1/RELEASE_PPC Power Macintosh powerpc

The errors I get are:
Compiling lib/system.c
lib/system.c: In function 'sys_getxattr':
lib/system.c:1420: error: too few arguments to function 'getxattr'
lib/system.c: In function 'sys_fgetxattr':
lib/system.c:1504: error: too few arguments to function 'fgetxattr'
lib/system.c: In function 'sys_listxattr':
lib/system.c:1705: error: too few arguments to function 'listxattr'
lib/system.c: In function 'sys_flistxattr':
lib/system.c:1741: error: too few arguments to function 'flistxattr'
lib/system.c: In function 'sys_removexattr':
lib/system.c:1759: error: too few arguments to function 'removexattr'
lib/system.c: In function 'sys_fremovexattr':
lib/system.c:1811: error: too few arguments to function 'fremovexattr'
lib/system.c: In function 'sys_setxattr':
lib/system.c:1842: error: too few arguments to function 'setxattr'
lib/system.c: In function 'sys_fsetxattr':
lib/system.c:1939: error: too few arguments to function 'fsetxattr'

Since I am a C programmer, I looked at the prototype for getxattr.
It is  ssize_t getxattr(const char *path, const char *name, void
*value, size_t size, u_int32_t position, int options);
and in the lib/system.c, it is called as:
   return getxattr(path, name, value, size);

I think that position and options can safely be set to zero, but could
someone tell me if configure can be told to detect the prototype for
getxattr, and add 0,0 to the argument list.

I am not very good with auto(make|conf).
--
The information in this electronic mail (including attachments, if
any) is privileged and confidential and is intended only for the
recipient(s) listed above. Any review, use, disclosure, distribution
or copying of this electronic mail is prohibited except by or on
behalf of the intended recipient. If you have received this electronic
mail in error, please notify me immediately by reply email and destroy
all copies of this electronic mail. Thank you.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Compilation error on Mac OS X 10.4.7

2006-12-13 Thread James Peach

On 13/12/06, Olivier Meyer [EMAIL PROTECTED] wrote:

Dear List:

I am having difficulties compiling samba-3.0.23d on mac os x.
Here is the output of 'uname -a':
Darwin TI-15 8.7.0 Darwin Kernel Version 8.7.0: Fri May 26 15:20:53
PDT 2006; root:xnu-792.6.76.obj~1/RELEASE_PPC Power Macintosh powerpc

The errors I get are:
Compiling lib/system.c
lib/system.c: In function 'sys_getxattr':
lib/system.c:1420: error: too few arguments to function 'getxattr'
lib/system.c: In function 'sys_fgetxattr':
lib/system.c:1504: error: too few arguments to function 'fgetxattr'
lib/system.c: In function 'sys_listxattr':
lib/system.c:1705: error: too few arguments to function 'listxattr'
lib/system.c: In function 'sys_flistxattr':
lib/system.c:1741: error: too few arguments to function 'flistxattr'
lib/system.c: In function 'sys_removexattr':
lib/system.c:1759: error: too few arguments to function 'removexattr'
lib/system.c: In function 'sys_fremovexattr':
lib/system.c:1811: error: too few arguments to function 'fremovexattr'
lib/system.c: In function 'sys_setxattr':
lib/system.c:1842: error: too few arguments to function 'setxattr'
lib/system.c: In function 'sys_fsetxattr':
lib/system.c:1939: error: too few arguments to function 'fsetxattr'

Since I am a C programmer, I looked at the prototype for getxattr.
It is  ssize_t getxattr(const char *path, const char *name, void
*value, size_t size, u_int32_t position, int options);
and in the lib/system.c, it is called as:
return getxattr(path, name, value, size);

I think that position and options can safely be set to zero, but could
someone tell me if configure can be told to detect the prototype for
getxattr, and add 0,0 to the argument list.


This is fixed in the svn repository. To download and build this, see
http://us2.samba.org/samba/devel/

--
James Peach | [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Adding a Samba Domain Server

2006-12-13 Thread Chris Hane
To answer my own question:  I needed to configure the nsswitch correctly 
on the domain member server.  Than I followed this:


http://us3.samba.org/samba/docs/man/Samba-Guide/unixclients.html#sdcsdmldap

And it looks like everything works!

I'll test tomorrow with more shares; but it looks good with some quick 
testing tonight.


Chris

Chris Hane wrote:
Thanks for replying.  I took my time and re-setup the PDC server today 
just to make sure everything works on the PDC.


Next I ran the net rpc join on the client and get the following:

[EMAIL PROTECTED] samba]# net rpc join -Uroot%password
Password:
Could not connect to server SFSPDC1
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE

Two things:

First, it asks me for the password again.

Second, I'm sure the password of root is correct.  It is the same 
command I used to join the PDC machine to the PDC Samba installation.


Also, when I look in the log.member1 on the PDC server I get the following:

[2006/12/13 20:21:26, 0] 
passdb/pdb_interface.c:pdb_default_create_user(368)
  _samr_create_user: Running the command `/usr/sbin/smbldap-useradd -w 
member1$' gave 9

[2006/12/13 20:22:00, 0] lib/system.c:set_process_capability(723)
  set_process_capability: cap_set_proc failed: Operation not permitted


Anyone know how I can find out what return code 9 means?

Thoughts?

Thanks,
Chris

Here are the two configs:

PDC SMB.CONF

[EMAIL PROTECTED] samba]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section [homes]
Processing section [printers]
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions

[global]
 workgroup = SFS
 netbios name = SFSPDC1
 server string = Samba Server PDC
 passdb backend = ldapsam:ldap://127.0.0.1 ldap://192.168.0.62;
 log file = /var/log/samba/log.%m
 max log size = 50
 add user script = /usr/sbin/smbldap-useradd -m %u
 add group script = /usr/sbin/smbldap-groupadd -p %g
 add user to group script = /usr/sbin/smbldap-groupmod -m %u %g
 delete user from group script = /usr/sbin/smbldap-groupmod -x %u %g
 set primary group script = /usr/sbin/smbldap-usermod -g %g %u
 add machine script = /usr/sbin/smbldap-useradd -w %u
 domain logons = Yes
 os level = 33
 preferred master = Yes
 domain master = Yes
 dns proxy = No
 wins support = Yes
 ldap admin dn = cn=admin,dc=com
 ldap delete dn = Yes
 ldap group suffix = ou=Groups
 ldap idmap suffix = ou=Idmap
 ldap machine suffix = ou=Computers
 ldap suffix = ou=itsolut,dc=com
 ldap user suffix = ou=people
 idmap backend = ldap:ldap://192.168.0.62
 idmap uid = 2000 - 3000
 idmap gid = 2000 - 3000

[homes]
 comment = Home Directories
 read only = No
 browseable = No

[printers]
 comment = All Printers
 path = /var/spool/samba
 printable = Yes
 browseable = No

DOMAIN MEMBER SMB.CONF

[EMAIL PROTECTED] samba]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section [homes]
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

[global]
workgroup = SFS
netbios name = MEMBER1
server string = TESTBOX
security = DOMAIN
log file = /var/log/samba/log.%m
max log size = 50
dns proxy = No
idmap uid = 2000 - 3000
idmap gid = 2000 - 3000
winbind use default domain = Yes

[homes]
comment = Home Directories
read only = No
browseable = No


Jeffrey Lord wrote:

Have you tried doing a 'net rpc join' on the client?

- Original Message -
From: [EMAIL PROTECTED] 
[EMAIL PROTECTED]

To: samba@lists.samba.org samba@lists.samba.org
Sent: Tue Dec 12 18:12:35 2006
Subject: [Samba] Adding a Samba Domain Server


I have a Samba PDC setup using LDAP as the passdb.  I want to add
another Samba server to the mix.  I believe I want to add it in as a
Domain Server; however, I can't seem to get it working.

On the PDC server I am running:
  - linux (2.6.latest)
  - openldap (latest)
  - samba (3.latest)
  - nss

On the Domain Server I am running:
  - samba (latest 3.latest)
  - nss

I thought someone might see something obvious in my smb.conf
(particularly the second one below for the domain server).  I am going
to try starting from scratch tomorrow and any advice is appreciated.

Thanks in advance,
Chris


==
SMB.CONF for the PDC
[global]
workgroup = SFS1
netbios name = SFSPDC
encrypt passwords = Yes
hide dot files = Yes
null passwords = Yes
enable privileges = yes
interfaces = 192.168.0.28
server string = SFSMAIL PDC
security = user
local master = yes
os level = 33
hosts allow = 192.168.0. 127.
loglevel = 2
log file = /var/log/samba/log.%m
debug timestamp = yes
domain master = yes
domain logons = yes
#winbind use 

Re: [Samba] Can connect to shares via IP but not hostname

2006-12-13 Thread Scott

Chris Smith wrote:

That it is configured to be a WINS server (wins support = Yes).


This was it.  Thanks for suggesting it.

-Scott
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: FW: [Samba] Samba problem with APS .NET web farm (IIS) - change notify

2006-12-13 Thread Alex Orlov
Oh, eee :)
It works two days, and not crash...
Thnx.

-- Damien 'zaide' Desmarets, 11 декабря 2006 18:46:
 Effectively it solves my problem :)
 thanks :)
 
 max mux = 1 is a good value for me and it is the equivalent of a
 MaxMpxCt value inside the database on a windows server.
 
 ?sgeir Halld?rsson a ?crit :
  Forgot to send to list also
  
  Regards,
  ?sgeir Halld?rsson
  
  
  -Original Message-
  From: ?sgeir Halld?rsson
  Sent: 9. desember 2006 04:01
  To: 'Damien 'zaide' Desmarets'
  Subject: RE: [Samba] Samba problem with APS .NET web farm (IIS) - change 
  notify
  
  Hi,
  
  This might help in samba config
  
  [global]
   max open files = 65536
   max mux = 2147483547
   smb ports = 445
  
  Regards,
  ?sgeir Halld?rsson
  
  
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Damien 
  'zaide' Desmarets
  Sent: 7. desember 2006 15:43
  To: Alex Orlov
  Cc: samba@lists.samba.org
  Subject: Re: [Samba] Samba problem with APS .NET web farm (IIS) - change 
  notify
  
  Alex Orlov a ?crit :
  Hi,
  Hello
  i have problems with change notify in my ASP server...
  problem details in this KB http://support.microsoft.com/kb/810886
  but i dont know how fix it in samba?
 
  this man have same problem...
  http://www.nabble.com/Samba-problem-with-web-farm-t2755718.html
  yep and it steel continue
  PS: http://support.microsoft.com/default.aspx?scid=kb;en-us;281253
  
  It could bee cool to found the default value of the MaxMpxCt value in
  samba this could explain something (but i don't think).
  I think it's more a microsoft bug, cause the value you set in your data
  base is ignored at the first packet send by the web server to establish
  a SMB session. You can found this be doing a network capture with wireshark.
  So the answer must come from microsoft and not samba i think.
  Thank to give me your advance in the resolution of this problem.
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/listinfo/samba
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Rev 38: Using struct type instead of typedefs. in http://samba.org/~tridge/psomogyi/

2006-12-13 Thread psomogyi

revno: 38
revision-id: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: Peter Somogyi [EMAIL PROTECTED]
branch nick: ctdb
timestamp: Wed 2006-12-13 11:02:49 +0100
message:
  Using struct type instead of typedefs.
modified:
  ib/ibwrapper.c ibwrapper.c-20061204130028-0125b4f5a72f4b11
  ib/ibwrapper.h ibwrapper.h-20061204130028-32755c6266dd3c49
  ib/ibwrapper_internal.h
ibwrapper_internal.h-20061204130028-47f0a7e658b16ca2
=== modified file 'ib/ibwrapper.c'
--- a/ib/ibwrapper.c2006-12-12 18:09:16 +
+++ b/ib/ibwrapper.c2006-12-13 10:02:49 +
@@ -45,13 +45,13 @@
 static void ibw_event_handler_verbs(struct event_context *ev,
struct fd_event *fde, uint16_t flags, void *private_data);
 
-static int ibw_init_memory(ibw_conn *conn)
+static int ibw_init_memory(struct ibw_conn *conn)
 {
-   ibw_ctx_priv *pctx = talloc_get_type(conn-ctx-internal, ibw_ctx_priv);
-   ibw_conn_priv *pconn = talloc_get_type(conn-internal, ibw_conn_priv);
+   struct ibw_ctx_priv *pctx = talloc_get_type(conn-ctx-internal, struct 
ibw_ctx_priv);
+   struct ibw_conn_priv *pconn = talloc_get_type(conn-internal, struct 
ibw_conn_priv);
 
int i;
-   ibw_wr  *p;
+   struct ibw_wr   *p;
 
pconn-buf = memalign(pctx-page_size, pctx-max_msg_size);
if (!pconn-buf) {
@@ -65,10 +65,10 @@
return -1;
}
 
-   pconn-wr_index = talloc_size(pconn, pctx-qsize * sizeof(ibw_wr *));
+   pconn-wr_index = talloc_size(pconn, pctx-qsize * sizeof(struct ibw_wr 
*));
 
for(i=0; ipctx-qsize; i++) {
-   p = pconn-wr_index[i] = talloc_zero(pconn, ibw_wr);
+   p = pconn-wr_index[i] = talloc_zero(pconn, struct ibw_wr);
p-msg = pconn-buf + (i * pctx-max_msg_size);
p-wr_id = i;
 
@@ -80,7 +80,7 @@
 
 static int ibw_ctx_priv_destruct(void *ptr)
 {
-   ibw_ctx *pctx = talloc_get_type(ctx-internal, ibw_ctx_priv);
+   struct ibw_ctx *pctx = talloc_get_type(ctx-internal, struct 
ibw_ctx_priv);
assert(pctx!=NULL);
 
if (pctx-pd) {
@@ -106,7 +106,7 @@
 
 static int ibw_ctx_destruct(void *ptr)
 {
-   ibw_ctx *ctx = talloc_get_type(ptr, ibw_ctx);
+   struct ibw_ctx *ctx = talloc_get_type(ptr, struct ibw_ctx);
assert(ctx!=NULL);
 
return 0;
@@ -114,7 +114,7 @@
 
 static int ibw_conn_priv_destruct(void *ptr)
 {
-   ibw_conn *pconn = talloc_get_type(ptr, ibw_conn_priv);
+   struct ibw_conn *pconn = talloc_get_type(ptr, struct ibw_conn_priv);
assert(pconn!=NULL);
 
/* free memory regions */
@@ -156,8 +156,8 @@
 
 static int ibw_conn_destruct(void *ptr)
 {
-   ibw_conn *conn = talloc_get_type(ptr, ibw_conn);
-   ibw_ctx *ctx;
+   struct ibw_conn *conn = talloc_get_type(ptr, struct ibw_conn);
+   struct ibw_ctx  *ctx;
 
assert(conn!=NULL);
ctx = ibw_conn-ctx;
@@ -167,18 +167,18 @@
return 0;
 }
 
-static ibw_conn *ibw_conn_new(ibw_ctx *ctx)
+static struct ibw_conn *ibw_conn_new(struct ibw_ctx *ctx)
 {
-   ibw_conn *conn;
-   ibw_conn_priv *pconn;
+   struct ibw_conn *conn;
+   struct ibw_conn_priv *pconn;
 
-   conn = talloc_zero(ctx, ibw_conn);
+   conn = talloc_zero(ctx, struct ibw_conn);
assert(conn!=NULL);
-   talloc_set_destructor(conn, ibw_conn_destruct);
+   talloc_set_destructor(conn, struct ibw_conn_destruct);
 
-   pconn = talloc_zero(ctx, ibw_conn_priv);
+   pconn = talloc_zero(ctx, struct ibw_conn_priv);
assert(pconn!=NULL);
-   talloc_set_destructor(pconn, ibw_conn_priv_destruct);
+   talloc_set_destructor(pconn, struct ibw_conn_priv_destruct);
 
conn-ctx = ctx;
 
@@ -187,10 +187,10 @@
return conn;
 }
 
-static int ibw_setup_cq_qp(ibw_conn *conn)
+static int ibw_setup_cq_qp(struct ibw_conn *conn)
 {
-   ibw_ctx_priv *pctx = talloc_get_type(conn-ctx-internal, ibw_ctx_priv);
-   ibw_conn_priv *pconn = talloc_get_type(conn-internal, ibw_conn_priv);
+   struct ibw_ctx_priv *pctx = talloc_get_type(conn-ctx-internal, struct 
ibw_ctx_priv);
+   struct ibw_conn_priv *pconn = talloc_get_type(conn-internal, struct 
ibw_conn_priv);
struct ibv_qp_init_attr init_attr;
int rc;
 
@@ -243,10 +243,10 @@
return rc;
 }
 
-static int ibw_refill_cq_recv(ibw_conn *conn)
+static int ibw_refill_cq_recv(struct ibw_conn *conn)
 {
-   ibw_ctx_priv *pctx = talloc_get_type(conn-ctx-internal, ibw_ctx_priv);
-   ibw_conn_priv *pconn = talloc_get_type(conn-internal, ibw_conn_priv);
+   struct ibw_ctx_priv *pctx = talloc_get_type(conn-ctx-internal, struct 
ibw_ctx_priv);
+   struct ibw_conn_priv *pconn = talloc_get_type(conn-internal, struct 
ibw_conn_priv);
int i, rc;
struct ibv_sge list = {
.addr   = (uintptr_t) NULL,
@@ -259,7 +259,7 @@

svn commit: samba r20149 - in branches/SAMBA_4_0/source: auth dsdb/samdb include ldap_server librpc/idl nbt_server param rpc_server/common rpc_server/lsa rpc_server/samr script/tests torture/rpc

2006-12-13 Thread abartlet
Author: abartlet
Date: 2006-12-13 11:19:51 + (Wed, 13 Dec 2006)
New Revision: 20149

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20149

Log:
Remove the smb.conf distinction between PDC and BDC.  Now the correct
way to setup a Samba4 DC is to set 'server role = domain controller'.

We use the fSMORoleOwner attribute in the base DN to determine the PDC.

This patch is quite large, as I have corrected a number of places that
assumed taht we are always the PDC, or that used the smb.conf
lp_server_role() to determine that.

Also included is a warning fix in the SAMR code, where the IDL has
seperated a couple of types for group display enumeration.

We also now use the ldb database to determine if we should run the
global catalog service.  

In the near future, I will complete the DRSUAPI
DsGetDomainControllerInfo server-side on the same basis.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/auth/auth_sam.c
   branches/SAMBA_4_0/source/dsdb/samdb/samdb.c
   branches/SAMBA_4_0/source/include/core.h
   branches/SAMBA_4_0/source/ldap_server/ldap_server.c
   branches/SAMBA_4_0/source/librpc/idl/samr.idl
   branches/SAMBA_4_0/source/nbt_server/nbt_server.c
   branches/SAMBA_4_0/source/nbt_server/nbt_server.h
   branches/SAMBA_4_0/source/nbt_server/register.c
   branches/SAMBA_4_0/source/param/loadparm.c
   branches/SAMBA_4_0/source/rpc_server/common/server_info.c
   branches/SAMBA_4_0/source/rpc_server/lsa/dcesrv_lsa.c
   branches/SAMBA_4_0/source/rpc_server/samr/dcesrv_samr.c
   branches/SAMBA_4_0/source/script/tests/mktestsetup.sh
   branches/SAMBA_4_0/source/torture/rpc/samr.c


Changeset:
Sorry, the patch is too large (1091 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20149


Rev 39: Made ibwrapper compilable. in http://samba.org/~tridge/psomogyi/

2006-12-13 Thread psomogyi

revno: 39
revision-id: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: Peter Somogyi [EMAIL PROTECTED]
branch nick: ctdb
timestamp: Wed 2006-12-13 15:00:41 +0100
message:
  Made ibwrapper compilable.
  Adjusted makefile to include the project.
  libibverbs and librdmacm has to be installed with headers.
removed:
  config.h   config.h-20061117234101-o3qt14umlg9en8z0-5
  config.h.inconfig.h.in-20061117234101-o3qt14umlg9en8z0-6
modified:
  Makefile.inmakefile.in-20061117234101-o3qt14umlg9en8z0-1
  ib/ibwrapper.c ibwrapper.c-20061204130028-0125b4f5a72f4b11
  ib/ibwrapper.h ibwrapper.h-20061204130028-32755c6266dd3c49
  ib/ibwrapper_internal.h
ibwrapper_internal.h-20061204130028-47f0a7e658b16ca2

Diff too large for email (2175, the limit is 1000).


svn commit: samba r20150 - in branches/SAMBA_3_0/source: nsswitch script/tests

2006-12-13 Thread idra
Author: idra
Date: 2006-12-13 16:39:50 + (Wed, 13 Dec 2006)
New Revision: 20150

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20150

Log:

better memory handling for some functions, make sure we don't
leak memory by using the wrong(long lived)  mem context


Modified:
   branches/SAMBA_3_0/source/nsswitch/idmap_rid.c
   branches/SAMBA_3_0/source/nsswitch/winbindd_async.c
   branches/SAMBA_3_0/source/nsswitch/winbindd_group.c
   branches/SAMBA_3_0/source/nsswitch/winbindd_util.c
   branches/SAMBA_3_0/source/script/tests/selftest.sh


Changeset:
Modified: branches/SAMBA_3_0/source/nsswitch/idmap_rid.c
===
--- branches/SAMBA_3_0/source/nsswitch/idmap_rid.c  2006-12-13 11:19:51 UTC 
(rev 20149)
+++ branches/SAMBA_3_0/source/nsswitch/idmap_rid.c  2006-12-13 16:39:50 UTC 
(rev 20150)
@@ -81,12 +81,12 @@
return ret;
 }
 
-static NTSTATUS idmap_rid_id_to_sid(struct idmap_rid_context *ctx, struct 
id_map *map)
+static NTSTATUS idmap_rid_id_to_sid(TALLOC_CTX *memctx, struct 
idmap_rid_context *ctx, struct id_map *map)
 {
char *domname, *name;
enum lsa_SidType sid_type;
 
-   if (!ctx || !map) {
+   if (!memctx || !ctx || !map) {
return NT_STATUS_INVALID_PARAMETER;
}
 
@@ -99,7 +99,7 @@
 
sid_compose(map-sid, ctx-dom_sid, map-xid.id - ctx-low_id + 
ctx-base_rid);
 
-   if (winbindd_lookup_name_by_sid(ctx, map-sid, domname, name, 
sid_type)) {
+   if (winbindd_lookup_name_by_sid(memctx, map-sid, domname, name, 
sid_type)) {
switch (sid_type) {
case SID_NAME_USER:
if (map-xid.type != ID_TYPE_UID) {
@@ -136,13 +136,13 @@
  Single sid to id lookup function. 
 **/
 
-static NTSTATUS idmap_rid_sid_to_id(struct idmap_rid_context *ctx, struct 
id_map *map)
+static NTSTATUS idmap_rid_sid_to_id(TALLOC_CTX *memctx, struct 
idmap_rid_context *ctx, struct id_map *map)
 {
char *domname, *name;
enum lsa_SidType sid_type;
uint32_t rid;
 
-   if (!ctx || !map) {
+   if (!memctx || !ctx || !map) {
return NT_STATUS_INVALID_PARAMETER;
}
 
@@ -150,7 +150,7 @@
map-xid.id = rid - ctx-base_rid + ctx-low_id;
 
/* check if this is a valid SID and set the type */
-   if (winbindd_lookup_name_by_sid(ctx, map-sid, domname, name, 
sid_type)) {
+   if (winbindd_lookup_name_by_sid(memctx, map-sid, domname, name, 
sid_type)) {
switch (sid_type) {
case SID_NAME_USER:
map-xid.type = ID_TYPE_UID;
@@ -188,17 +188,24 @@
 
 static NTSTATUS idmap_rid_unixids_to_sids(struct idmap_domain *dom, struct 
id_map **ids)
 {
-   struct idmap_rid_context *ctx;
+   struct idmap_rid_context *ridctx;
+   TALLOC_CTX *ctx;
NTSTATUS ret;
int i;
 
-   ctx = talloc_get_type(dom-private_data, struct idmap_rid_context);
+   ridctx = talloc_get_type(dom-private_data, struct idmap_rid_context);
 
+   ctx = talloc_new(dom);
+   if ( ! ctx) {
+   DEBUG(0, (Out of memory!\n));
+   return NT_STATUS_NO_MEMORY;
+   }
+
for (i = 0; ids[i]; i++) {
/* make sure it is marked as unmapped before resolveing */
ids[i]-mapped = False;
 
-   ret = idmap_rid_id_to_sid(ctx, ids[i]);
+   ret = idmap_rid_id_to_sid(ctx, ridctx, ids[i]);
 
if (( ! NT_STATUS_IS_OK(ret)) 
( ! NT_STATUS_EQUAL(ret, NT_STATUS_NONE_MAPPED))) {
@@ -207,6 +214,7 @@
}
}
 
+   talloc_free(ctx);
return NT_STATUS_OK;
 }
 
@@ -216,17 +224,24 @@
 
 static NTSTATUS idmap_rid_sids_to_unixids(struct idmap_domain *dom, struct 
id_map **ids)
 {
-   struct idmap_rid_context *ctx;
+   struct idmap_rid_context *ridctx;
+   TALLOC_CTX *ctx;
NTSTATUS ret;
int i;
 
-   ctx = talloc_get_type(dom-private_data, struct idmap_rid_context);
+   ridctx = talloc_get_type(dom-private_data, struct idmap_rid_context);
 
+   ctx = talloc_new(dom);
+   if ( ! ctx) {
+   DEBUG(0, (Out of memory!\n));
+   return NT_STATUS_NO_MEMORY;
+   }
+
for (i = 0; ids[i]; i++) {
/* make sure it is marked as unmapped before resolveing */
ids[i]-mapped = False;
 
-   ret = idmap_rid_sid_to_id(ctx, ids[i]);
+   ret = idmap_rid_sid_to_id(ctx, ridctx, ids[i]);
 
if (( ! NT_STATUS_IS_OK(ret)) 
( ! NT_STATUS_EQUAL(ret, NT_STATUS_NONE_MAPPED))) {
@@ -236,6 +251,7 @@
}
}
 
+   talloc_free(ctx);
return NT_STATUS_OK;
 }
 

Modified: branches/SAMBA_3_0/source/nsswitch/winbindd_async.c
===
--- 

Re: svn commit: samba r20150 - in branches/SAMBA_3_0/source: nsswitch script/tests

2006-12-13 Thread simo
Opss I didn't mean to commit the last file in this commit, but that
should remove a warning we have in using samba4 smbtroture anyway, so
I'll not revert unless the build farm becomes unhappy.

Simo.

On Wed, 2006-12-13 at 16:39 +, [EMAIL PROTECTED] wrote:
 Author: idra
 Date: 2006-12-13 16:39:50 + (Wed, 13 Dec 2006)
 New Revision: 20150
 
 WebSVN: 
 http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20150
 
 Log:
 
 better memory handling for some functions, make sure we don't
 leak memory by using the wrong(long lived)  mem context
 
 
 Modified:
branches/SAMBA_3_0/source/nsswitch/idmap_rid.c
branches/SAMBA_3_0/source/nsswitch/winbindd_async.c
branches/SAMBA_3_0/source/nsswitch/winbindd_group.c
branches/SAMBA_3_0/source/nsswitch/winbindd_util.c
branches/SAMBA_3_0/source/script/tests/selftest.sh
 
 
 Changeset:
 Modified: branches/SAMBA_3_0/source/nsswitch/idmap_rid.c
 ===
 --- branches/SAMBA_3_0/source/nsswitch/idmap_rid.c2006-12-13 11:19:51 UTC 
 (rev 20149)
 +++ branches/SAMBA_3_0/source/nsswitch/idmap_rid.c2006-12-13 16:39:50 UTC 
 (rev 20150)
 @@ -81,12 +81,12 @@
   return ret;
  }
  
 -static NTSTATUS idmap_rid_id_to_sid(struct idmap_rid_context *ctx, struct 
 id_map *map)
 +static NTSTATUS idmap_rid_id_to_sid(TALLOC_CTX *memctx, struct 
 idmap_rid_context *ctx, struct id_map *map)
  {
   char *domname, *name;
   enum lsa_SidType sid_type;
  
 - if (!ctx || !map) {
 + if (!memctx || !ctx || !map) {
   return NT_STATUS_INVALID_PARAMETER;
   }
  
 @@ -99,7 +99,7 @@
  
   sid_compose(map-sid, ctx-dom_sid, map-xid.id - ctx-low_id + 
 ctx-base_rid);
  
 - if (winbindd_lookup_name_by_sid(ctx, map-sid, domname, name, 
 sid_type)) {
 + if (winbindd_lookup_name_by_sid(memctx, map-sid, domname, name, 
 sid_type)) {
   switch (sid_type) {
   case SID_NAME_USER:
   if (map-xid.type != ID_TYPE_UID) {
 @@ -136,13 +136,13 @@
   Single sid to id lookup function. 
  **/
  
 -static NTSTATUS idmap_rid_sid_to_id(struct idmap_rid_context *ctx, struct 
 id_map *map)
 +static NTSTATUS idmap_rid_sid_to_id(TALLOC_CTX *memctx, struct 
 idmap_rid_context *ctx, struct id_map *map)
  {
   char *domname, *name;
   enum lsa_SidType sid_type;
   uint32_t rid;
  
 - if (!ctx || !map) {
 + if (!memctx || !ctx || !map) {
   return NT_STATUS_INVALID_PARAMETER;
   }
  
 @@ -150,7 +150,7 @@
   map-xid.id = rid - ctx-base_rid + ctx-low_id;
  
   /* check if this is a valid SID and set the type */
 - if (winbindd_lookup_name_by_sid(ctx, map-sid, domname, name, 
 sid_type)) {
 + if (winbindd_lookup_name_by_sid(memctx, map-sid, domname, name, 
 sid_type)) {
   switch (sid_type) {
   case SID_NAME_USER:
   map-xid.type = ID_TYPE_UID;
 @@ -188,17 +188,24 @@
  
  static NTSTATUS idmap_rid_unixids_to_sids(struct idmap_domain *dom, struct 
 id_map **ids)
  {
 - struct idmap_rid_context *ctx;
 + struct idmap_rid_context *ridctx;
 + TALLOC_CTX *ctx;
   NTSTATUS ret;
   int i;
  
 - ctx = talloc_get_type(dom-private_data, struct idmap_rid_context);
 + ridctx = talloc_get_type(dom-private_data, struct idmap_rid_context);
  
 + ctx = talloc_new(dom);
 + if ( ! ctx) {
 + DEBUG(0, (Out of memory!\n));
 + return NT_STATUS_NO_MEMORY;
 + }
 +
   for (i = 0; ids[i]; i++) {
   /* make sure it is marked as unmapped before resolveing */
   ids[i]-mapped = False;
  
 - ret = idmap_rid_id_to_sid(ctx, ids[i]);
 + ret = idmap_rid_id_to_sid(ctx, ridctx, ids[i]);
  
   if (( ! NT_STATUS_IS_OK(ret)) 
   ( ! NT_STATUS_EQUAL(ret, NT_STATUS_NONE_MAPPED))) {
 @@ -207,6 +214,7 @@
   }
   }
  
 + talloc_free(ctx);
   return NT_STATUS_OK;
  }
  
 @@ -216,17 +224,24 @@
  
  static NTSTATUS idmap_rid_sids_to_unixids(struct idmap_domain *dom, struct 
 id_map **ids)
  {
 - struct idmap_rid_context *ctx;
 + struct idmap_rid_context *ridctx;
 + TALLOC_CTX *ctx;
   NTSTATUS ret;
   int i;
  
 - ctx = talloc_get_type(dom-private_data, struct idmap_rid_context);
 + ridctx = talloc_get_type(dom-private_data, struct idmap_rid_context);
  
 + ctx = talloc_new(dom);
 + if ( ! ctx) {
 + DEBUG(0, (Out of memory!\n));
 + return NT_STATUS_NO_MEMORY;
 + }
 +
   for (i = 0; ids[i]; i++) {
   /* make sure it is marked as unmapped before resolveing */
   ids[i]-mapped = False;
  
 - ret = idmap_rid_sid_to_id(ctx, ids[i]);
 + ret = idmap_rid_sid_to_id(ctx, ridctx, ids[i]);
  
   if (( ! NT_STATUS_IS_OK(ret)) 
   ( ! NT_STATUS_EQUAL(ret, 

svn commit: samba r20151 - in branches/SAMBA_3_0/source/nsswitch: .

2006-12-13 Thread idra
Author: idra
Date: 2006-12-13 18:29:00 + (Wed, 13 Dec 2006)
New Revision: 20151

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20151

Log:

remove meaningless checks


Modified:
   branches/SAMBA_3_0/source/nsswitch/idmap_rid.c


Changeset:
Modified: branches/SAMBA_3_0/source/nsswitch/idmap_rid.c
===
--- branches/SAMBA_3_0/source/nsswitch/idmap_rid.c  2006-12-13 16:39:50 UTC 
(rev 20150)
+++ branches/SAMBA_3_0/source/nsswitch/idmap_rid.c  2006-12-13 18:29:00 UTC 
(rev 20151)
@@ -86,10 +86,6 @@
char *domname, *name;
enum lsa_SidType sid_type;
 
-   if (!memctx || !ctx || !map) {
-   return NT_STATUS_INVALID_PARAMETER;
-   }
-
/* apply filters before checking */
if ((map-xid.id  ctx-low_id) || (map-xid.id  ctx-high_id)) {
DEBUG(5, (Requested id (%u) out of range (%u - %u). 
Filtered!\n,
@@ -142,10 +138,6 @@
enum lsa_SidType sid_type;
uint32_t rid;
 
-   if (!memctx || !ctx || !map) {
-   return NT_STATUS_INVALID_PARAMETER;
-   }
-
sid_peek_rid(map-sid, rid);
map-xid.id = rid - ctx-base_rid + ctx-low_id;
 



svn commit: samba r20152 - in branches/SAMBA_4_0/source: kdc setup

2006-12-13 Thread abartlet
Author: abartlet
Date: 2006-12-13 20:47:24 + (Wed, 13 Dec 2006)
New Revision: 20152

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20152

Log:
Commit missing files from last night's commit.  We no longer maintain
a distinction between PDC and BDC in the configuration files, only as
an entry in the ldb.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/kdc/kdc.c
   branches/SAMBA_4_0/source/setup/provision.ldif
   branches/SAMBA_4_0/source/setup/provision.smb.conf
   branches/SAMBA_4_0/source/setup/provision_basedn_modify.ldif


Changeset:
Modified: branches/SAMBA_4_0/source/kdc/kdc.c
===
--- branches/SAMBA_4_0/source/kdc/kdc.c 2006-12-13 18:29:00 UTC (rev 20151)
+++ branches/SAMBA_4_0/source/kdc/kdc.c 2006-12-13 20:47:24 UTC (rev 20152)
@@ -543,8 +543,7 @@
case ROLE_DOMAIN_MEMBER:
task_server_terminate(task, kdc: no KDC required in member 
server configuration);
return;
-   case ROLE_DOMAIN_PDC:
-   case ROLE_DOMAIN_BDC:
+   case ROLE_DOMAIN_CONTROLLER:
/* Yes, we want a KDC */
break;
}

Modified: branches/SAMBA_4_0/source/setup/provision.ldif
===
--- branches/SAMBA_4_0/source/setup/provision.ldif  2006-12-13 18:29:00 UTC 
(rev 20151)
+++ branches/SAMBA_4_0/source/setup/provision.ldif  2006-12-13 20:47:24 UTC 
(rev 20152)
@@ -221,6 +221,7 @@
 objectClass: applicationSettings
 objectClass: nTDSDSA
 cn: NTDS Settings
+options: 1
 instanceType: 4
 showInAdvancedViewOnly: TRUE
 systemFlags: 33554432

Modified: branches/SAMBA_4_0/source/setup/provision.smb.conf
===
--- branches/SAMBA_4_0/source/setup/provision.smb.conf  2006-12-13 18:29:00 UTC 
(rev 20151)
+++ branches/SAMBA_4_0/source/setup/provision.smb.conf  2006-12-13 20:47:24 UTC 
(rev 20152)
@@ -2,6 +2,6 @@
netbios name= ${HOSTNAME}
workgroup   = ${DOMAIN}
realm   = ${REALM}
-   server role = pdc
+   server role = domain controller
 
 

Modified: branches/SAMBA_4_0/source/setup/provision_basedn_modify.ldif
===
--- branches/SAMBA_4_0/source/setup/provision_basedn_modify.ldif
2006-12-13 18:29:00 UTC (rev 20151)
+++ branches/SAMBA_4_0/source/setup/provision_basedn_modify.ldif
2006-12-13 20:47:24 UTC (rev 20152)
@@ -69,6 +69,9 @@
 replace: objectCategory
 objectCategory: CN=Domain-DNS,CN=Schema,CN=Configuration,${BASEDN}
 -
+replace: fSMORoleOwner
+fSMORoleOwner: CN=NTDS 
Settings,CN=${NETBIOSNAME},CN=Servers,CN=${DEFAULTSITE},CN=Sites,CN=Configuration,${BASEDN}
+-
 replace: isCriticalSystemObject
 isCriticalSystemObject: TRUE
 -



svn commit: samba r20153 - in branches/SAMBA_3_0_24/source: . utils

2006-12-13 Thread herb
Author: herb
Date: 2006-12-13 21:00:45 + (Wed, 13 Dec 2006)
New Revision: 20153

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20153

Log:
allow bin/sharesec to be built (not by default)

Added:
   branches/SAMBA_3_0_24/source/utils/sharesec.c
Modified:
   branches/SAMBA_3_0_24/source/Makefile.in


Changeset:
Modified: branches/SAMBA_3_0_24/source/Makefile.in
===
--- branches/SAMBA_3_0_24/source/Makefile.in2006-12-13 20:47:24 UTC (rev 
20152)
+++ branches/SAMBA_3_0_24/source/Makefile.in2006-12-13 21:00:45 UTC (rev 
20153)
@@ -685,6 +685,11 @@
registry/reg_eventlog.o rpc_server/srv_eventlog_lib.o 
registry/reg_util.o \
registry/reg_db.o 
 
+SHARESEC_OBJ0 = utils/sharesec.o 
+SHARESEC_OBJ  = $(SHARESEC_OBJ0) $(PARAM_OBJ) $(LIB_NONSMBD_OBJ) 
$(REGOBJS_OBJ) \
+   $(ERRORMAP_OBJ) $(RPC_PARSE_OBJ1) $(LIBSAMBA_OBJ) $(DOSERR_OBJ) 
\
+$(POPT_LIB_OBJ) $(SECRETS_OBJ)
+
 TALLOCTORT_OBJ = lib/talloc/testsuite.o $(PARAM_OBJ) $(LIB_NONSMBD_OBJ) \
  $(RPC_PARSE_OBJ1) $(DOSERR_OBJ) $(LIBSAMBA_OBJ) $(SECRETS_OBJ)
 
@@ -865,6 +870,8 @@
 
 eventlogadm: SHOWFLAGS bin/[EMAIL PROTECTED]@
 
+sharesec: SHOWFLAGS bin/[EMAIL PROTECTED]@
+
 talloctort : SHOWFLAGS bin/[EMAIL PROTECTED]@
 
 replacetort : SHOWFLAGS bin/[EMAIL PROTECTED]@
@@ -1096,6 +1103,10 @@
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(EVTLOGADM_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) 
$(LDAP_LIBS) @POPTLIBS@
 
+bin/[EMAIL PROTECTED]@: $(SHARESEC_OBJ) @BUILD_POPT@ bin/.dummy
+   @echo Linking $@
+   @$(CC) $(FLAGS) -o $@ $(SHARESEC_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) 
$(LDAP_LIBS) @POPTLIBS@ 
+
 bin/[EMAIL PROTECTED]@: $(LOCKTEST_OBJ) bin/.dummy
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(LOCKTEST_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) 
$(KRB5LIBS) $(LDAP_LIBS)

Added: branches/SAMBA_3_0_24/source/utils/sharesec.c
===
--- branches/SAMBA_3_0_24/source/utils/sharesec.c   2006-12-13 20:47:24 UTC 
(rev 20152)
+++ branches/SAMBA_3_0_24/source/utils/sharesec.c   2006-12-13 21:00:45 UTC 
(rev 20153)
@@ -0,0 +1,415 @@
+/*
+ *  Unix SMB/Netbios implementation.
+ *  Utility for managing share permissions
+ *
+ *  Copyright (C) Tim Potter2000
+ *  Copyright (C) Jeremy Allison2000
+ *  Copyright (C) Jelmer Vernooij   2003
+ *  Copyright (C) Gerald (Jerry) Carter 2005.
+ *
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 2 of the License, or
+ *  (at your option) any later version.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+ */
+
+
+#include includes.h
+
+#define CREATE_ACCESS_READ READ_CONTROL_ACCESS
+
+/* numeric is set when the user wants numeric SIDs and ACEs rather
+   than going via LSA calls to resolve them */
+static BOOL numeric = False;
+
+enum acl_mode {SMB_ACL_REMOVE, SMB_ACL_MODIFY, SMB_ACL_ADD, SMB_ACL_REPLACE,  
SMB_ACL_VIEW };
+enum exit_values {EXIT_OK, EXIT_FAILED, EXIT_PARSE_ERROR};
+
+struct perm_value {
+   const char *perm;
+   uint32 mask;
+};
+
+/* These values discovered by inspection */
+
+static const struct perm_value special_values[] = {
+   { R, 0x00120089 },
+   { W, 0x00120116 },
+   { X, 0x001200a0 },
+   { D, 0x0001 },
+   { P, 0x0004 },
+   { O, 0x0008 },
+   { NULL, 0 },
+};
+
+static const struct perm_value standard_values[] = {
+   { READ,   0x001200a9 },
+   { CHANGE, 0x001301bf },
+   { FULL,   0x001f01ff },
+   { NULL, 0 },
+};
+
+/
+ print an ACE on a FILE, using either numeric or ascii representation
+/
+
+static void print_ace(FILE *f, SEC_ACE *ace)
+{
+   const struct perm_value *v;
+   fstring sidstr;
+   int do_print = 0;
+   uint32 got_mask;
+
+   sid_to_string(sidstr, ace-trustee);
+
+   fprintf(f, %s:, sidstr);
+
+   if (numeric) {
+   fprintf(f, %d/%d/0x%08x, 
+   ace-type, ace-flags, ace-info.mask);
+   return;
+   }
+
+   /* Ace type */
+
+   if (ace-type == SEC_ACE_TYPE_ACCESS_ALLOWED) {
+   fprintf(f, ALLOWED);
+   } else if (ace-type == 

svn commit: samba r20154 - in branches/SAMBA_3_0/source/nsswitch: .

2006-12-13 Thread idra
Author: idra
Date: 2006-12-13 21:03:38 + (Wed, 13 Dec 2006)
New Revision: 20154

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20154

Log:

Fix nasty typo, hunting another bug


Modified:
   branches/SAMBA_3_0/source/nsswitch/winbindd_user.c


Changeset:
Modified: branches/SAMBA_3_0/source/nsswitch/winbindd_user.c
===
--- branches/SAMBA_3_0/source/nsswitch/winbindd_user.c  2006-12-13 21:00:45 UTC 
(rev 20153)
+++ branches/SAMBA_3_0/source/nsswitch/winbindd_user.c  2006-12-13 21:03:38 UTC 
(rev 20154)
@@ -261,7 +261,7 @@
}
 
s-uid = uid;
-   winbindd_sid2gid_async(s-state-mem_ctx, s-group_sid,
+   winbindd_sid2uid_async(s-state-mem_ctx, s-group_sid,
   getpwsid_sid2gid_recv, s);
 }
 



svn commit: samba r20155 - in branches/SAMBA_3_0/source/nsswitch: .

2006-12-13 Thread idra
Author: idra
Date: 2006-12-13 21:05:47 + (Wed, 13 Dec 2006)
New Revision: 20155

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20155

Log:

revert, I misread


Modified:
   branches/SAMBA_3_0/source/nsswitch/winbindd_user.c


Changeset:
Modified: branches/SAMBA_3_0/source/nsswitch/winbindd_user.c
===
--- branches/SAMBA_3_0/source/nsswitch/winbindd_user.c  2006-12-13 21:03:38 UTC 
(rev 20154)
+++ branches/SAMBA_3_0/source/nsswitch/winbindd_user.c  2006-12-13 21:05:47 UTC 
(rev 20155)
@@ -261,7 +261,7 @@
}
 
s-uid = uid;
-   winbindd_sid2uid_async(s-state-mem_ctx, s-group_sid,
+   winbindd_sid2gid_async(s-state-mem_ctx, s-group_sid,
   getpwsid_sid2gid_recv, s);
 }
 



svn commit: samba r20156 - in branches/SAMBA_3_0_24/source: client include libsmb modules nsswitch printing smbd

2006-12-13 Thread herb
Author: herb
Date: 2006-12-13 21:19:33 + (Wed, 13 Dec 2006)
New Revision: 20156

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20156

Log:
clean up nested extern declaration warnings

Modified:
   branches/SAMBA_3_0_24/source/client/smbmount.c
   branches/SAMBA_3_0_24/source/include/smb_macros.h
   branches/SAMBA_3_0_24/source/libsmb/clientgen.c
   branches/SAMBA_3_0_24/source/modules/vfs_expand_msdfs.c
   branches/SAMBA_3_0_24/source/modules/vfs_full_audit.c
   branches/SAMBA_3_0_24/source/nsswitch/winbindd_ads.c
   branches/SAMBA_3_0_24/source/nsswitch/winbindd_cache.c
   branches/SAMBA_3_0_24/source/nsswitch/winbindd_cm.c
   branches/SAMBA_3_0_24/source/nsswitch/winbindd_dual.c
   branches/SAMBA_3_0_24/source/nsswitch/winbindd_util.c
   branches/SAMBA_3_0_24/source/printing/print_generic.c
   branches/SAMBA_3_0_24/source/printing/printing.c
   branches/SAMBA_3_0_24/source/smbd/blocking.c
   branches/SAMBA_3_0_24/source/smbd/nttrans.c
   branches/SAMBA_3_0_24/source/smbd/sesssetup.c


Changeset:
Modified: branches/SAMBA_3_0_24/source/client/smbmount.c
===
--- branches/SAMBA_3_0_24/source/client/smbmount.c  2006-12-13 21:05:47 UTC 
(rev 20155)
+++ branches/SAMBA_3_0_24/source/client/smbmount.c  2006-12-13 21:19:33 UTC 
(rev 20156)
@@ -26,6 +26,8 @@
 
 extern BOOL in_client;
 extern pstring user_socket_options;
+extern char *optarg;
+extern int optind;
 
 static pstring credentials;
 static pstring my_netbios_name;
@@ -712,7 +714,6 @@
int opt;
char *opts;
char *opteq;
-   extern char *optarg;
int val;
char *p;
 
@@ -862,8 +863,6 @@
 /
  int main(int argc,char *argv[])
 {
-   extern char *optarg;
-   extern int optind;
char *p;
 
DEBUGLEVEL = 1;

Modified: branches/SAMBA_3_0_24/source/include/smb_macros.h
===
--- branches/SAMBA_3_0_24/source/include/smb_macros.h   2006-12-13 21:05:47 UTC 
(rev 20155)
+++ branches/SAMBA_3_0_24/source/include/smb_macros.h   2006-12-13 21:19:33 UTC 
(rev 20156)
@@ -86,10 +86,10 @@
 #define IS_IPC(conn)   ((conn)  (conn)-ipc)
 #define IS_PRINT(conn)   ((conn)  (conn)-printer)
 /* you must add the following extern declaration to files using this macro
+ * (do not add it to the macro as that causes nested extern declaration 
warnings)
  * extern struct current_user current_user;
  */
 #define FSP_BELONGS_CONN(fsp,conn) do {\
-   extern struct current_user current_user;\
if (!((fsp)  (conn)  ((conn)==(fsp)-conn)  
(current_user.vuid==(fsp)-vuid))) \
return ERROR_NT(NT_STATUS_INVALID_HANDLE); \
} while(0)
@@ -97,10 +97,10 @@
 #define FNUM_OK(fsp,c) ((fsp)  !(fsp)-is_directory  (c)==(fsp)-conn  
current_user.vuid==(fsp)-vuid)
 
 /* you must add the following extern declaration to files using this macro
+ * (do not add it to the macro as that causes nested extern declaration 
warnings)
  * extern struct current_user current_user;
  */
 #define CHECK_FSP(fsp,conn) do {\
-   extern struct current_user current_user;\
if (!(fsp) || !(conn)) \
return ERROR_NT(NT_STATUS_INVALID_HANDLE); \
else if (((conn) != (fsp)-conn) || current_user.vuid 
!= (fsp)-vuid) \

Modified: branches/SAMBA_3_0_24/source/libsmb/clientgen.c
===
--- branches/SAMBA_3_0_24/source/libsmb/clientgen.c 2006-12-13 21:05:47 UTC 
(rev 20155)
+++ branches/SAMBA_3_0_24/source/libsmb/clientgen.c 2006-12-13 21:19:33 UTC 
(rev 20156)
@@ -20,6 +20,8 @@
 
 #include includes.h
 
+extern int smb_read_error;
+
 /
  Change the timeout (in milliseconds).
 /
@@ -79,7 +81,6 @@
 
 BOOL cli_receive_smb(struct cli_state *cli)
 {
-   extern int smb_read_error;
BOOL ret;
 
/* fd == -1 causes segfaults -- Tom ([EMAIL PROTECTED]) */

Modified: branches/SAMBA_3_0_24/source/modules/vfs_expand_msdfs.c
===
--- branches/SAMBA_3_0_24/source/modules/vfs_expand_msdfs.c 2006-12-13 
21:05:47 UTC (rev 20155)
+++ branches/SAMBA_3_0_24/source/modules/vfs_expand_msdfs.c 2006-12-13 
21:19:33 UTC (rev 20156)
@@ -23,6 +23,8 @@
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_VFS
 
+extern userdom_struct current_user_info;
+
 /**
   Under mapfile we expect a table of the following format:
 
@@ -110,7 +112,6 @@
int filename_len;
pstring targethost;
pstring new_target;

svn commit: samba r20157 - in branches/SAMBA_3_0_24/source: lib lib/talloc libaddns printing smbd utils

2006-12-13 Thread herb
Author: herb
Date: 2006-12-13 21:24:02 + (Wed, 13 Dec 2006)
New Revision: 20157

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20157

Log:
get rid of a few no previous prototype warnings

Modified:
   branches/SAMBA_3_0_24/source/lib/interfaces.c
   branches/SAMBA_3_0_24/source/lib/talloc/talloc.h
   branches/SAMBA_3_0_24/source/libaddns/dns.h
   branches/SAMBA_3_0_24/source/printing/print_cups.c
   branches/SAMBA_3_0_24/source/printing/print_iprint.c
   branches/SAMBA_3_0_24/source/smbd/oplock_irix.c
   branches/SAMBA_3_0_24/source/smbd/server.c
   branches/SAMBA_3_0_24/source/utils/status_profile.c


Changeset:
Modified: branches/SAMBA_3_0_24/source/lib/interfaces.c
===
--- branches/SAMBA_3_0_24/source/lib/interfaces.c   2006-12-13 21:19:33 UTC 
(rev 20156)
+++ branches/SAMBA_3_0_24/source/lib/interfaces.c   2006-12-13 21:24:02 UTC 
(rev 20157)
@@ -362,6 +362,7 @@
return r;
 }
 
+int get_interfaces(struct iface_struct *ifaces, int max_interfaces);
 /* this wrapper is used to remove duplicates from the interface list generated
above */
 int get_interfaces(struct iface_struct *ifaces, int max_interfaces)

Modified: branches/SAMBA_3_0_24/source/lib/talloc/talloc.h
===
--- branches/SAMBA_3_0_24/source/lib/talloc/talloc.h2006-12-13 21:19:33 UTC 
(rev 20156)
+++ branches/SAMBA_3_0_24/source/lib/talloc/talloc.h2006-12-13 21:24:02 UTC 
(rev 20157)
@@ -123,6 +123,7 @@
 const char *talloc_get_name(const void *ptr);
 void *talloc_check_name(const void *ptr, const char *name);
 void *talloc_parent(const void *ptr);
+const char *talloc_parent_name(const void *context);
 void *talloc_init(const char *fmt, ...) PRINTF_ATTRIBUTE(1,2);
 int talloc_free(void *ptr);
 void talloc_free_children(void *ptr);

Modified: branches/SAMBA_3_0_24/source/libaddns/dns.h
===
--- branches/SAMBA_3_0_24/source/libaddns/dns.h 2006-12-13 21:19:33 UTC (rev 
20156)
+++ branches/SAMBA_3_0_24/source/libaddns/dns.h 2006-12-13 21:24:02 UTC (rev 
20157)
@@ -405,6 +405,9 @@
const char *name,
const in_addr_t *ip,
struct dns_rrec **prec);
+DNS_ERROR dns_create_name_not_in_use_record(TALLOC_CTX *mem_ctx,
+   const char *name, uint32 type,
+   struct dns_rrec **prec);
 DNS_ERROR dns_create_delete_record(TALLOC_CTX *mem_ctx, const char *name,
   uint16 type, uint16 r_class,
   struct dns_rrec **prec);

Modified: branches/SAMBA_3_0_24/source/printing/print_cups.c
===
--- branches/SAMBA_3_0_24/source/printing/print_cups.c  2006-12-13 21:19:33 UTC 
(rev 20156)
+++ branches/SAMBA_3_0_24/source/printing/print_cups.c  2006-12-13 21:24:02 UTC 
(rev 20157)
@@ -1201,5 +1201,6 @@
 
 #else
  /* this keeps fussy compilers happy */
+ void print_cups_dummy(void);
  void print_cups_dummy(void) {}
 #endif /* HAVE_CUPS */

Modified: branches/SAMBA_3_0_24/source/printing/print_iprint.c
===
--- branches/SAMBA_3_0_24/source/printing/print_iprint.c2006-12-13 
21:19:33 UTC (rev 20156)
+++ branches/SAMBA_3_0_24/source/printing/print_iprint.c2006-12-13 
21:24:02 UTC (rev 20157)
@@ -1235,5 +1235,6 @@
 
 #else
  /* this keeps fussy compilers happy */
+ void print_iprint_dummy(void);
  void print_iprint_dummy(void) {}
 #endif /* HAVE_IPRINT */

Modified: branches/SAMBA_3_0_24/source/smbd/oplock_irix.c
===
--- branches/SAMBA_3_0_24/source/smbd/oplock_irix.c 2006-12-13 21:19:33 UTC 
(rev 20156)
+++ branches/SAMBA_3_0_24/source/smbd/oplock_irix.c 2006-12-13 21:24:02 UTC 
(rev 20157)
@@ -266,5 +266,6 @@
return koplocks;
 }
 #else
+ void oplock_irix_dummy(void);
  void oplock_irix_dummy(void) {}
 #endif /* HAVE_KERNEL_OPLOCKS_IRIX */

Modified: branches/SAMBA_3_0_24/source/smbd/server.c
===
--- branches/SAMBA_3_0_24/source/smbd/server.c  2006-12-13 21:19:33 UTC (rev 
20156)
+++ branches/SAMBA_3_0_24/source/smbd/server.c  2006-12-13 21:24:02 UTC (rev 
20157)
@@ -786,7 +786,7 @@
mkproto.h.  Mixing $(builddir) and $(srcdir) source files in the current
prototype generation system is too complicated. */
 
-void build_options(BOOL screen);
+extern void build_options(BOOL screen);
 
  int main(int argc,const char *argv[])
 {

Modified: branches/SAMBA_3_0_24/source/utils/status_profile.c
===
--- 

svn commit: samba r20158 - in branches/SAMBA_3_0_24/source/libads: .

2006-12-13 Thread herb
Author: herb
Date: 2006-12-13 21:27:45 + (Wed, 13 Dec 2006)
New Revision: 20158

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20158

Log:
get rid of defined but not used warning - static function only used
inside the #ifdef HAVE_KRB5

Modified:
   branches/SAMBA_3_0_24/source/libads/sasl.c


Changeset:
Modified: branches/SAMBA_3_0_24/source/libads/sasl.c
===
--- branches/SAMBA_3_0_24/source/libads/sasl.c  2006-12-13 21:24:02 UTC (rev 
20157)
+++ branches/SAMBA_3_0_24/source/libads/sasl.c  2006-12-13 21:27:45 UTC (rev 
20158)
@@ -136,6 +136,7 @@
return ADS_ERROR(rc);
 }
 
+#ifdef HAVE_KRB5
 /* 
perform a LDAP/SASL/SPNEGO/KRB5 bind
 */
@@ -165,6 +166,7 @@
 
return ADS_ERROR(rc);
 }
+#endif
 
 /* 
this performs a SASL/SPNEGO bind



svn commit: samba r20159 - in branches/SAMBA_3_0_24/source/lib: .

2006-12-13 Thread herb
Author: herb
Date: 2006-12-13 21:28:45 + (Wed, 13 Dec 2006)
New Revision: 20159

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20159

Log:
get rid of defined but not used warning - static function only used
inside the #ifdef HAVE_NATIVE_ICONV

Modified:
   branches/SAMBA_3_0_24/source/lib/iconv.c


Changeset:
Modified: branches/SAMBA_3_0_24/source/lib/iconv.c
===
--- branches/SAMBA_3_0_24/source/lib/iconv.c2006-12-13 21:27:45 UTC (rev 
20158)
+++ branches/SAMBA_3_0_24/source/lib/iconv.c2006-12-13 21:28:45 UTC (rev 
20159)
@@ -128,6 +128,7 @@
}
 }
 
+#ifdef HAVE_NATIVE_ICONV
 /* if there was an error then reset the internal state,
this ensures that we don't have a shift state remaining for
character sets like SJIS */
@@ -135,7 +136,6 @@
const char **inbuf, size_t *inbytesleft,
char **outbuf, size_t *outbytesleft)
 {
-#ifdef HAVE_NATIVE_ICONV
size_t ret = iconv((iconv_t)cd, 
   (char **)inbuf, inbytesleft, 
   outbuf, outbytesleft);
@@ -145,11 +145,8 @@
errno = saved_errno;
}
return ret;
-#else
-   errno = EINVAL;
-   return -1;
-#endif
 }
+#endif
 
 /**
  * This is a simple portable iconv() implementaion.



svn commit: samba r20160 - in branches: SAMBA_3_0/source/lib SAMBA_3_0_24/source/lib

2006-12-13 Thread jra
Author: jra
Date: 2006-12-13 22:19:10 + (Wed, 13 Dec 2006)
New Revision: 20160

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20160

Log:
Fix long-standing (ie. from initial code I think) bug
in tdb message processing. If we're inside a dispatch
function and we delete our own handler we'd walk onto
the next pointer from a deleted memory block. Fixes
crash bug in winbindd (and goodness knows where else).
Jeremy.

Modified:
   branches/SAMBA_3_0/source/lib/messages.c
   branches/SAMBA_3_0_24/source/lib/messages.c


Changeset:
Modified: branches/SAMBA_3_0/source/lib/messages.c
===
--- branches/SAMBA_3_0/source/lib/messages.c2006-12-13 21:28:45 UTC (rev 
20159)
+++ branches/SAMBA_3_0/source/lib/messages.c2006-12-13 22:19:10 UTC (rev 
20160)
@@ -471,7 +471,6 @@
char *buf;
char *msgs_buf;
size_t len, total_len;
-   struct dispatch_fns *dfn;
int n_handled;
 
if (!received_signal)
@@ -485,11 +484,15 @@
return;
 
for (buf = msgs_buf; message_recv(msgs_buf, total_len, msg_type, src, 
buf, len); buf += len) {
+   struct dispatch_fns *dfn, *next;
+
DEBUG(10,(message_dispatch: received msg_type=%d 
  src_pid=%u\n, msg_type,
  (unsigned int) procid_to_pid(src)));
+
n_handled = 0;
-   for (dfn = dispatch_fns; dfn; dfn = dfn-next) {
+   for (dfn = dispatch_fns; dfn; dfn = next) {
+   next = dfn-next;   
if (dfn-msg_type == msg_type) {
DEBUG(10,(message_dispatch: processing message 
of type %d.\n, msg_type));
dfn-fn(msg_type, src, len ? (void *)buf : 
NULL, len);

Modified: branches/SAMBA_3_0_24/source/lib/messages.c
===
--- branches/SAMBA_3_0_24/source/lib/messages.c 2006-12-13 21:28:45 UTC (rev 
20159)
+++ branches/SAMBA_3_0_24/source/lib/messages.c 2006-12-13 22:19:10 UTC (rev 
20160)
@@ -471,7 +471,6 @@
char *buf;
char *msgs_buf;
size_t len, total_len;
-   struct dispatch_fns *dfn;
int n_handled;
 
if (!received_signal)
@@ -485,11 +484,15 @@
return;
 
for (buf = msgs_buf; message_recv(msgs_buf, total_len, msg_type, src, 
buf, len); buf += len) {
+   struct dispatch_fns *dfn, *next;
+
DEBUG(10,(message_dispatch: received msg_type=%d 
  src_pid=%u\n, msg_type,
  (unsigned int) procid_to_pid(src)));
+
n_handled = 0;
-   for (dfn = dispatch_fns; dfn; dfn = dfn-next) {
+   for (dfn = dispatch_fns; dfn; dfn = next) {
+   next = dfn-next;   
if (dfn-msg_type == msg_type) {
DEBUG(10,(message_dispatch: processing message 
of type %d.\n, msg_type));
dfn-fn(msg_type, src, len ? (void *)buf : 
NULL, len);



svn commit: samba r20161 - in branches/SAMBA_4_0/source/libnet: .

2006-12-13 Thread mimir
Author: mimir
Date: 2006-12-13 23:35:50 + (Wed, 13 Dec 2006)
New Revision: 20161

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20161

Log:
Prevent potential segfault in case account is unknown.


rafal


Modified:
   branches/SAMBA_4_0/source/libnet/libnet_lookup.c


Changeset:
Modified: branches/SAMBA_4_0/source/libnet/libnet_lookup.c
===
--- branches/SAMBA_4_0/source/libnet/libnet_lookup.c2006-12-13 22:19:10 UTC 
(rev 20160)
+++ branches/SAMBA_4_0/source/libnet/libnet_lookup.c2006-12-13 23:35:50 UTC 
(rev 20161)
@@ -418,14 +418,18 @@
 
/* TODO: verify if returned pointers are non-null */
 
-   io-out.domain_sid = *domains-domains[0].sid;
-   io-out.rid= sids-sids[0].rid;
-   io-out.sid_type   = sids-sids[0].sid_type;
+   if (sids-count  0) {
+   io-out.rid= sids-sids[0].rid;
+   io-out.sid_type   = sids-sids[0].sid_type;
+   }
 
-   num_auths = io-out.domain_sid.num_auths++;
-   io-out.domain_sid.sub_auths[num_auths] = io-out.rid;
+   if (domains-count  0) {
+   io-out.domain_sid = *domains-domains[0].sid;
+   num_auths = io-out.domain_sid.num_auths++;
+   io-out.domain_sid.sub_auths[num_auths] = 
io-out.rid;
 
-   io-out.sidstr = dom_sid_string(mem_ctx, 
io-out.domain_sid);
+   io-out.sidstr = dom_sid_string(mem_ctx, 
io-out.domain_sid);
+   }
}
 
io-out.error_string = talloc_strdup(mem_ctx, Success);



svn commit: samba r20162 - in branches/SAMBA_4_0/source/libnet: .

2006-12-13 Thread mimir
Author: mimir
Date: 2006-12-13 23:36:34 + (Wed, 13 Dec 2006)
New Revision: 20162

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20162

Log:
Always return some error string.


rafal


Modified:
   branches/SAMBA_4_0/source/libnet/libnet_user.c


Changeset:
Modified: branches/SAMBA_4_0/source/libnet/libnet_user.c
===
--- branches/SAMBA_4_0/source/libnet/libnet_user.c  2006-12-13 23:35:50 UTC 
(rev 20161)
+++ branches/SAMBA_4_0/source/libnet/libnet_user.c  2006-12-13 23:36:34 UTC 
(rev 20162)
@@ -804,6 +804,9 @@
r-out.acct_flags = info-acct_flags;
 
r-out.error_string = talloc_strdup(mem_ctx, Success);
+
+   } else {
+   r-out.error_string = talloc_asprintf(mem_ctx, Error: %s, 
nt_errstr(status));
}
 
talloc_free(c);



svn commit: samba r20163 - in branches/SAMBA_4_0/source/scripting/ejs: .

2006-12-13 Thread mimir
Author: mimir
Date: 2006-12-13 23:37:22 + (Wed, 13 Dec 2006)
New Revision: 20163

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20163

Log:
Return null object if no user is found.


rafal


Modified:
   branches/SAMBA_4_0/source/scripting/ejs/ejsnet.c


Changeset:
Modified: branches/SAMBA_4_0/source/scripting/ejs/ejsnet.c
===
--- branches/SAMBA_4_0/source/scripting/ejs/ejsnet.c2006-12-13 23:36:34 UTC 
(rev 20162)
+++ branches/SAMBA_4_0/source/scripting/ejs/ejsnet.c2006-12-13 23:37:22 UTC 
(rev 20163)
@@ -367,11 +367,15 @@
status = libnet_UserInfo(ctx, mem_ctx, req);
if (!NT_STATUS_IS_OK(status)) {
ejsSetErrorMsg(eid, %s, req.out.error_string);
+   
+   /* create null object to return */
+   mprUserInfo = mprCreateNullVar();
+   goto done;
}
 
/* create UserInfo object */
mprUserInfo = mprObject(UserInfo);
-
+   
mprAccountName = mprString(req.out.account_name);
mprFullName = mprString(req.out.full_name);
mprDescription = mprString(req.out.description);



svn commit: samba r20164 - in branches/SAMBA_4_0/source/script/tests: .

2006-12-13 Thread mimir
Author: mimir
Date: 2006-12-13 23:53:42 + (Wed, 13 Dec 2006)
New Revision: 20164

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20164

Log:
Disable the test till tomorrow when I find out what caused
the crash.


rafal


Modified:
   branches/SAMBA_4_0/source/script/tests/test_ejs.sh


Changeset:
Modified: branches/SAMBA_4_0/source/script/tests/test_ejs.sh
===
--- branches/SAMBA_4_0/source/script/tests/test_ejs.sh  2006-12-13 23:37:22 UTC 
(rev 20163)
+++ branches/SAMBA_4_0/source/script/tests/test_ejs.sh  2006-12-13 23:53:42 UTC 
(rev 20164)
@@ -27,7 +27,7 @@
 testit $f $SCRIPTDIR/$f $CONFIGURATION ncalrpc: -U$USERNAME%$PASSWORD || 
failed=`expr $failed + 1`
 done
 
-testit ejsnet.js $SCRIPTDIR/ejsnet.js $CONFIGURATION -U$USERNAME%$PASSWORD 
$DOMAIN ejstestuser || failed=`expr $failed + 1`
+#testit ejsnet.js $SCRIPTDIR/ejsnet.js $CONFIGURATION -U$USERNAME%$PASSWORD 
$DOMAIN ejstestuser || failed=`expr $failed + 1`
 
 testit ldb.js $SCRIPTDIR/ldb.js `pwd` $CONFIGURATION || failed=`expr $failed 
+ 1`
 



Build status as of Thu Dec 14 00:00:02 2006

2006-12-13 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2006-12-13 
00:00:50.0 +
+++ /home/build/master/cache/broken_results.txt 2006-12-14 00:01:45.0 
+
@@ -1,22 +1,22 @@
-Build status as of Wed Dec 13 00:00:03 2006
+Build status as of Thu Dec 14 00:00:02 2006
 
 Build counts:
 Tree Total  Broken Panic 
 SOC  0  0  0 
 build_farm   0  0  0 
-ccache   42 7  0 
+ccache   43 7  0 
 ctdb 0  0  0 
 distcc   2  0  0 
 ldb  41 4  0 
-libreplace   39 2  0 
-lorikeet-heimdal 34 19 0 
-ppp  17 0  0 
-rsync42 3  0 
+libreplace   40 2  0 
+lorikeet-heimdal 35 17 0 
+ppp  18 0  0 
+rsync43 3  0 
 samba0  0  0 
 samba-docs   0  0  0 
-samba4   40 29 4 
-samba_3_042 31 0 
-smb-build39 1  0 
-talloc   42 1  0 
-tdb  41 2  0 
+samba4   41 34 16
+samba_3_043 33 0 
+smb-build40 1  0 
+talloc   43 1  0 
+tdb  42 2  0 
 


svn commit: samba r20165 - in branches: SAMBA_3_0/source/lib SAMBA_3_0_24/source/lib

2006-12-13 Thread jra
Author: jra
Date: 2006-12-14 01:00:16 + (Thu, 14 Dec 2006)
New Revision: 20165

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20165

Log:
Change messaging subsystem to only allow one message
per type - this is all we use right now and makes
re-entrancy problems with deleting handlers with
a message dispatch loop go away.
Jeremy.

Modified:
   branches/SAMBA_3_0/source/lib/messages.c
   branches/SAMBA_3_0_24/source/lib/messages.c


Changeset:
Modified: branches/SAMBA_3_0/source/lib/messages.c
===
--- branches/SAMBA_3_0/source/lib/messages.c2006-12-13 23:53:42 UTC (rev 
20164)
+++ branches/SAMBA_3_0/source/lib/messages.c2006-12-14 01:00:16 UTC (rev 
20165)
@@ -458,8 +458,7 @@
 
 /
  Receive and dispatch any messages pending for this process.
- Notice that all dispatch handlers for a particular msg_type get called,
- so you can register multiple handlers for a message.
+ JRA changed Dec 13 2006. Only one message handler now permitted per type.
  *NOTE*: Dispatch functions must be able to cope with incoming
  messages on an *odd* byte boundary.
 /
@@ -509,7 +508,8 @@
 }
 
 /
- Register a dispatch function for a particular message type.
+ Register/replace a dispatch function for a particular message type.
+ JRA changed Dec 13 2006. Only one message handler now permitted per type.
  *NOTE*: Dispatch functions must be able to cope with incoming
  messages on an *odd* byte boundary.
 /
@@ -520,6 +520,13 @@
 {
struct dispatch_fns *dfn;
 
+   for (dfn = dispatch_fns; dfn; dfn = dfn-next) {
+   if (dfn-msg_type == msg_type) {
+   dfn-fn = fn;
+   return;
+   }
+   }
+
dfn = SMB_MALLOC_P(struct dispatch_fns);
 
if (dfn != NULL) {
@@ -550,6 +557,7 @@
if (dfn-msg_type == msg_type) {
DLIST_REMOVE(dispatch_fns, dfn);
SAFE_FREE(dfn);
+   return;
}
}   
 }

Modified: branches/SAMBA_3_0_24/source/lib/messages.c
===
--- branches/SAMBA_3_0_24/source/lib/messages.c 2006-12-13 23:53:42 UTC (rev 
20164)
+++ branches/SAMBA_3_0_24/source/lib/messages.c 2006-12-14 01:00:16 UTC (rev 
20165)
@@ -458,8 +458,7 @@
 
 /
  Receive and dispatch any messages pending for this process.
- Notice that all dispatch handlers for a particular msg_type get called,
- so you can register multiple handlers for a message.
+ JRA changed Dec 13 2006. Only one message handler now permitted per type.
  *NOTE*: Dispatch functions must be able to cope with incoming
  messages on an *odd* byte boundary.
 /
@@ -509,7 +508,8 @@
 }
 
 /
- Register a dispatch function for a particular message type.
+ Register/replace a dispatch function for a particular message type.
+ JRA changed Dec 13 2006. Only one message handler now permitted per type.
  *NOTE*: Dispatch functions must be able to cope with incoming
  messages on an *odd* byte boundary.
 /
@@ -520,6 +520,13 @@
 {
struct dispatch_fns *dfn;
 
+   for (dfn = dispatch_fns; dfn; dfn = dfn-next) {
+   if (dfn-msg_type == msg_type) {
+   dfn-fn = fn;
+   return;
+   }
+   }
+
dfn = SMB_MALLOC_P(struct dispatch_fns);
 
if (dfn != NULL) {
@@ -550,6 +557,7 @@
if (dfn-msg_type == msg_type) {
DLIST_REMOVE(dispatch_fns, dfn);
SAFE_FREE(dfn);
+   return;
}
}   
 }