date:20070228

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Here's how to:

1, Open YaST;
2, select Network Services, select Network Services (xinetd);
3, click[0] Enable if it's not already enabled[1];
4, scroll down the list until you find swat;
5, click the Toggle Status (On or Off) button;
6, click finish.

Doesn't matter whether it's 64 or 32 bit. The same procedure applies to
both, and also applies to previous versions as well.


[0] This assumes use of a GUI. If you're using a console, either use the
tab and cursor keys to highlight the required option and press return,
or press the alt-key and the highlighted letter.

[1] The good point is that xinetd is disabled by default, so if you
haven't already started a service, you will need to do step #3. If you
do have a running service, you can skip step #3 and go to step #4.


After doing this, swat works, but is not able to make the network
visible for browsing:

[EMAIL PROTECTED]:~ smbclient -L tribal-sfn2
Password:
Domain=[TRIBAL-SFN2] OS=[Unix] Server=[Samba 3.0.23d-19.2-1179-SUSE-SL10.2]
tree connect failed: NT_STATUS_BAD_NETWORK_NAME
[EMAIL PROTECTED]:~

while:

[EMAIL PROTECTED]:~ smbclient -L ibm-sfn3
Password:
Domain=[IBM-SFN3] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]

Sharename   Type  Comment
-     ---
IPC$IPC   Externe IPC
D$  Disk  Standaard-share
SharedDocs  Disk
print$  Disk  Printerstuurprogramma's
EPSONStyPrinter   EPSON Stylus C64 Series
ADMIN$  Disk  Beheer op afstand
C$  Disk  Standaard-share
Domain=[IBM-SFN3] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]

Server   Comment
----

WorkgroupMaster
----
[EMAIL PROTECTED]:~


I can access these shares only trough a networkfolder, created for easy
access..

- --


Have a nice day,

M9.   Now, is the only time that exists.



  OS:  Linux 2.6.18.2-34-default x86_64
  Huidige gebruiker:  [EMAIL PROTECTED]
  Systeem:  openSUSE 10.2 (X86-64)
  KDE:  3.5.5 release 45.2
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFF5W6iX5/X5X6LpDgRAnKCAKDTJIHr70nY5FJibjAYNn6gqm1ncwCfeJBU
H29r7lKt86qv2PxMDOD4ElA=
=gXmP
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] password alignment with /etc/passwd

2007-02-28 Thread Markus Franke

Dear Samba Users,

I have a Linux Server exporting its services (NFS/NIS) to some Linux
Clients. Now, I have installed a new Windows Client and I would like to
use Samba as a PDC.
My question is, if there is any possibility to align the passwords
between /etc/passwd and some backend (e.g. smbpasswd). I know that there
is mksmbpasswd.sh but it resets all passwords and just aligns usernames
with /etc/passwd. Is there a way to preserve also the passwords? Or is
there maybe also a special backend for doing so?

Thanks for help,


Regards,
Markus

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] How to get rid of: tree connect failed: NT_STATUS_BAD_NETWORK_NAME ?

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi,

Now the network is unaccesible, i am not able to print from this
machine, and no-one has acces to the music, movies, artwork and
executables which are stored on this machine...

What causes this, and how to change it?
- --


Have a nice day,

M9.   Now, is the only time that exists.



  OS:  Linux 2.6.18.2-34-default x86_64
  Huidige gebruiker:  [EMAIL PROTECTED]
  Systeem:  openSUSE 10.2 (X86-64)
  KDE:  3.5.5 release 45.2
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFF5W/aX5/X5X6LpDgRAhDNAJ4oY3GMvbupKk6KdPKRGd7LSXiVagCfS6OA
b1Epwrez970Cm0+d5ePW0U8=
=V6sv
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] vista: error accessing profile, xp works (solved)

2007-02-28 Thread Latrell Wang 王獻綱

Hi,
I have some problems with DFS, too.
I create a share (say, VistaShare) on Vista client, and have a DFS root share 
(say, SambaShare) with the VistaShare. I also set appropriate permission for 
the share. From windows XP, 2003 server, I can access the share without a 
problem.
But when I use the Vista client, I get permission deny message. 
I set host msdfs = yes in global session, and msdfs root = yes in 
SambaShare.
Are the two problems related?

Thanks,
Latrell.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rainer Traut
Sent: Wednesday, February 28, 2007 6:39 PM
To: [EMAIL PROTECTED]
Cc: samba@lists.samba.org
Subject: Re: [Samba] vista: error accessing profile, xp works (solved)

Hi,

as I said I'm using your sernet vista version.

msdfs root = no on the profile share is not enough, profile cannot be 
accessed.

host msdfs = no in the global section and everything works again.

Rainer

Volker Lendecke schrieb:
 On Tue, Feb 27, 2007 at 03:23:48PM +0100, Rainer Traut wrote:
 Solved:
 host msdfs = no
 is needed.
 
 Really? msdfs root = no on the profile share is not
 enough? I'm asking because I've changed the msdfs root
 default to no, and if Vista really barfs at host msdfs = yes 
 then we might have to reconsider
 
 Volker

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] samba problems. accounts expire after a hour, but work after reset

2007-02-28 Thread Collen Blijenberg


Hello I'm having some strange problems with samba 3.0.23d (PDC) on my FC6

if i start samba, everything works fine, but after an hour orso(some 
times 2 hours if there is not mutch traffic)

machines and user accounts start expiring.

i don't know why, but it is ?! after i do a restart, samba comes up and 
works again.
i checked the mysql server (coz' i use pdb-sql as backend) but the sql 
query's get executed and value's are returned. (even if goes into bug-mode)
so that part works ok!, all i can think of is that tdb files get 
corrupted ??


the funny part is that i also have a BDC running the same samba version 
and sql version, and that one has no prob's ad all

(only the smb.conf is differed and the netbios name)
but on the counter part, the bdc isn't really doing anything, ot's not 
serving shares or printers actively..


some input would be nice, coz' i really have no idea where to look... ???

Thx, Collen


I get error's like these:
---
[2007/02/27 09:48:26, 5] auth/auth_util.c:debug_unix_user_token(474)
 UNIX token of user 0
 Primary group is 0 and contains 0 supplementary groups
[2007/02/27 09:48:26, 5] auth/auth_util.c:is_trusted_domain(2020)
 is_trusted_domain: Checking for domain trust with [JORDANET]
[2007/02/27 09:48:26, 5] 
passdb/secrets.c:secrets_fetch_trusted_domain_password(340)

 secrets_fetch failed!
[2007/02/27 09:48:26, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/02/27 09:48:26, 10] lib/gencache.c:gencache_get(329)
 Cache entry with key = TDOM/JORDANET couldn't be found
[2007/02/27 09:48:26, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184)
 no entry for trusted domain JORDANET found.
[2007/02/27 09:48:26, 5] auth/auth_util.c:make_user_info(75)
 attempting to make a user_info for  ()
[2007/02/27 09:48:26, 5] auth/auth_util.c:make_user_info(85)
 making strings for 's user_info struct
===
[2007/02/27 09:48:42, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
 pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
[2007/02/27 09:48:42, 0] rpc_server/srv_netlog_nt.c:get_md4pw(258)
 get_md4pw: Workstation C6-2$: account is not a trust account
[2007/02/27 09:48:42, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(461)
 _net_auth2: failed to get machine password for account C6-2$: 
NT_STATUS_NO_TRUST_SAM_ACCOUNT

[2007/02/27 09:48:42, 5] rpc_parse/parse_prs.c:prs_debug(84)
 00 net_io_r_auth_2
=
[2007/02/27 12:09:16, 3] auth/auth.c:check_ntlm_password(221)
 check_ntlm_password:  Checking password for unmapped user 
[EMAIL PROTECTED] with the new password interface

[2007/02/27 12:09:16, 3] auth/auth.c:check_ntlm_password(224)
 check_ntlm_password:  mapped user is: [EMAIL PROTECTED]
[2007/02/27 12:09:16, 3] smbd/sec_ctx.c:push_sec_ctx(208)
 push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2007/02/27 12:09:16, 3] smbd/uid.c:push_conn_ctx(345)
 push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2007/02/27 12:09:16, 3] smbd/sec_ctx.c:set_sec_ctx(241)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2007/02/27 12:09:16, 2] pdb_mysql.c:mysqlsam_select_by_field(292)
 Executing query SELECT 
logon_time,logoff_time,kickoff_time,pass_last_set_time,pass_can_change_time,pass_must_change_time,username,domain,nt_username,nt_fullname,home_dir,dir_drive,logon_script,profile_path,acct_desc,workstations,unknown_str,munged_dial,user_sid,group_sid,lm_pw,nt_pw,NULL,acct_ctrl,logon_divs,hours_len,bad_password_count,logon_count,unknown_6,logon_hours,password_history 
FROM user WHERE username = 'ralph'

[2007/02/27 12:09:16, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1015)
 fetch gid from cache 1001 - S-1-5-21-1968991162-2130249723-1959552931-513
[2007/02/27 12:09:16, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1015)
 fetch gid from cache 1001 - S-1-5-21-1968991162-2130249723-1959552931-513
[2007/02/27 12:09:16, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/02/27 12:09:16, 3] libsmb/ntlm_check.c:ntlm_password_check(344)
 ntlm_password_check: NT MD4 password check failed for user lldummanne
[2007/02/27 12:09:16, 3] smbd/sec_ctx.c:push_sec_ctx(208)
 push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2007/02/27 12:09:16, 3] smbd/uid.c:push_conn_ctx(345)
 push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2007/02/27 12:09:16, 3] smbd/sec_ctx.c:set_sec_ctx(241)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2007/02/27 12:09:16, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/02/27 12:09:16, 3] smbd/sec_ctx.c:push_sec_ctx(208)
 push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2007/02/27 12:09:16, 3] smbd/uid.c:push_conn_ctx(345)
 push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2007/02/27 12:09:16, 3] smbd/sec_ctx.c:set_sec_ctx(241)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2007/02/27 12:09:16, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/02/27 12:09:16, 3] auth/auth_winbind.c:check_winbind_security(80)
 check_winbind_security: Not using winbind,

Re: [Samba] Users Rights

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Victor Medina wrote:
 FYI.
 
 from the Samba How-To
 
 The privileges that have been implemented in Samba-3.0.11 are shown
 below. It is possible, and likely, that additional privileges may be
 implemented in later releases of Samba. It is also likely that any
 privileges currently implemented but not used may be removed from future
 releases as a housekeeping matter, so it is important that the
 successful as well as unsuccessful use of these facilities should be
 reported on the Samba mailing lists.
 
 :) it works like charm! nice! thanks guys! (my two cents)

Always good to hear :-)





cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF5X+mIR7qMdg1EfYRAg5LAJ9+BtdNouK0k164WEtIPuXiUbvyRwCeLyWw
l791hAbQat0/v+E1QGbjfLs=
=pI4A
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Error message on domain member: User nobody with invalid SID

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Adam Tworkowski wrote:
 Hi,
 
 I am receiving the following error message on Samba domain member
 (SLES9/3.0.24).  Both PDC and BDC are Samba (smbldap) (SUSE 10.1 Samba
 3.0.22):
 
 User nobody with invalid SID
 S-1-5-21-3838309271-3077283710-20730714-2998 in passdb

If your guest account is set to nobody, make sure
that that user does not exist in the passdb list of accounts.
smbd will create a guest account SAM object as needed
at run-time.





cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF5YFzIR7qMdg1EfYRAqx5AKDBzsnwEvYXSjMVJ5BKdJg7t/Y3uACdEMpm
MHnNkHUmrTg2nSlQJLvefPs=
=hLq5
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] View the Client's SID

2007-02-28 Thread Beginner

Hi,

I am trying to debug some machine account errors. Is it possible to 
see what the client is sending to the server as it's SID? I want to 
ensure that the Client's SID and what the server has for the client 
SID match.

Thanx,
Dp.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] problem with Samba, nsswitch.conf - wins

2007-02-28 Thread Antonín Večeřa


Hello all,

can you help me please - I have FreeBSD 6.2 + Samba installed. I try to
setup it so that I needn't to maintain /etc/hosts file and my FreeBSD
station will know all my local computers with MS-Windows by hostname.

I guess, I should add wins option to my /etc/nsswitch.conf file but it
doesn't work for me. :-(

My config files look like this:

/etc/nsswitch.conf:
hosts: files wins

/etc/rc.conf:
 nmbd_enable=YES

/usr/local/etc/smb.conf:
[global]
workgroup = HOME
log file = /var/log/samba/log.%m
max log size = 50

But it is not working, when I try on pc1bsd ping pc2win, the pc2win is
unknown and on console is:

pc1bsd ping: NSSWITCH(nss_load_module): wins, Undefined symbol
nss_module_register

The library /usr/local/lib/nss_wins.so.1 really doesn't contain any text
nss_module_register.
To the contrary from Windows station it works, when I ping pc1bsd, I have
immediate reply.
It just shows, that nmbd works OK.

What is wrong? Or is it a bug?

Antonin V.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smbclient dfs-aware? part 2: getting pas dfs junction point?

2007-02-28 Thread werner maes


update:

I found some people with the same problem as me:

http://www.cs.washington.edu/lab/sw/uwcsesamba.html

Smbclient is not Dfs-aware. This means you can specify \\ntdfs\cs as 
a share, but when you attempt to drill down past the so-called Dfs 
junction points you will not get anywhere. In the following example 
this is illustrated. You cannot get to //ntdfs/cs/cse/www using 
smbclient.



% smbclient //ntdfs/cs
Password:
Domain=[CSERESEARCH] OS=[Windows Server 2003 3790] Server=[Windows 
Server 2003 5.2]

smb: \ ls
  .   D0  Thu Oct 16 16:17:54 2003
  ..  D0  Thu Oct 16 16:17:54 2003
  cse D0  Thu Oct 28 10:25:56 2004
  nt  D0  Wed Feb 25 15:28:09 2004

34522 blocks of size 1048576. 29260 blocks available
smb: \ cd cse
smb: \cse\ ls
  .   D0  Thu Oct 28 10:25:56 2004
  ..  D0  Thu Oct 28 10:25:56 2004

  www D0  Thu Oct 28 10:25:56 2004
  www2D0  Thu Oct 16 16:16:58 2003

34522 blocks of size 1048576. 29260 blocks available
smb: \cse\ cd www
smb: \cse\www\ ls
NT_STATUS_PATH_NOT_COVERED listing \cse\www\\*

34522 blocks of size 1048576. 29260 blocks available
smb: \cse\www\ q

hello

a quick question: is the smbclient program a dfs-aware client? can it 
access dfs points on a microsoft dfs server?


kind regards

werner


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] What is happening here?

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi readers of this list,

I have this nasty problem, that looks fixed, but everytime something
else annoying happens...

- From SuSE10.0, there are problems with browsing LAN, due to
susefirewall, was said...and partialy this is true..
All kind of strange things, incompatibilities, or bugs, keep me from
just browsing shares in the network...
I filed a bug on this issue: Bug # 246770

Today, i removed ashare, that was created as test, and was not nessesary
anymore, result: network invisible!

[EMAIL PROTECTED]:~ smbclient -L//tribal-sfn2
Password:
Domain=[TRIBAL-SFN2] OS=[Unix] Server=[Samba 3.0.23d-19.2-1179-SUSE-SL10.2]
tree connect failed: NT_STATUS_BAD_NETWORK_NAME
[EMAIL PROTECTED]:~

What has happened here?
I only removed one single share!

To show i am serious, the cat log for the unexisting network in this
case tribal-sfn2, from which i want to acces other pc's in the network..


[EMAIL PROTECTED]:~ cat /etc/samba/smb.conf

[global]
winbind gid = 1-2
winbind uid = 1-2
usershare max shares = 100
workgroup = mshome
add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody -s
/bin/false %m$
domain master = no
restrict anonymous = no
max protocol = NT
acl compatibility = winnt
ldap ssl = No
server signing = Auto
map to guest = Bad User
guest ok = yes
case sensitive = no
strict locking = no
msdfs proxy = no
read only = no
preferred master = no

[divx]
comment = films
inherit acls = yes
path = /windowsF/Divx/
read only = no
#   case sensitive = no
#   strict locking = no
#   msdfs proxy = no

[mp3]
comment = muziek
inherit acls = Yes
path = /windowsD/MP3/
read only = No

## Share disabled by YaST
# [netlogon]

[shared]
comment = muziek
inherit acls = Yes
path = /shared/
read only = No

[documenten]
comment = documenten
inherit acls = Yes
path = /windowsC/Documents and Settings/All Users/Documenten/
read only = No

[tekeningen]
comment = tekeningen
inherit acls = Yes
path = /windowsE/Tekeningen/
read only = No
[EMAIL PROTECTED]:~

these we commented out, entrances made by the kde config module, and
with which this share did not exist..

#   case sensitive = no
#   strict locking = no
#   msdfs proxy = no

Is there something in this config which should look different?
- --


Have a nice day,

M9.   Now, is the only time that exists.



  OS:  Linux 2.6.18.2-34-default x86_64
  Huidige gebruiker:  [EMAIL PROTECTED]
  Systeem:  openSUSE 10.2 (X86-64)
  KDE:  3.5.5 release 45.2
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFF4vn1X5/X5X6LpDgRAubiAJwLbBH7W+t3FQ3wYs8WNRTDkVM86QCgoq63
EtkwFXYe3p1Nfk3AuvSbudM=
=Gyyg
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] What is happening here?

2007-02-28 Thread Collen Blijenberg


Could you the message with a higher debug level ??

also is  tribal-sfn2 your domain name or server name ??

Cheers, Collen

M9. wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi readers of this list,

I have this nasty problem, that looks fixed, but everytime something
else annoying happens...

- From SuSE10.0, there are problems with browsing LAN, due to
susefirewall, was said...and partialy this is true..
All kind of strange things, incompatibilities, or bugs, keep me from
just browsing shares in the network...
I filed a bug on this issue: Bug # 246770

Today, i removed ashare, that was created as test, and was not nessesary
anymore, result: network invisible!

[EMAIL PROTECTED]:~ smbclient -L//tribal-sfn2
Password:
Domain=[TRIBAL-SFN2] OS=[Unix] Server=[Samba 3.0.23d-19.2-1179-SUSE-SL10.2]
tree connect failed: NT_STATUS_BAD_NETWORK_NAME
[EMAIL PROTECTED]:~

What has happened here?
I only removed one single share!

To show i am serious, the cat log for the unexisting network in this
case tribal-sfn2, from which i want to acces other pc's in the network..


[EMAIL PROTECTED]:~ cat /etc/samba/smb.conf

[global]
winbind gid = 1-2
winbind uid = 1-2
usershare max shares = 100
workgroup = mshome
add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody -s
/bin/false %m$
domain master = no
restrict anonymous = no
max protocol = NT
acl compatibility = winnt
ldap ssl = No
server signing = Auto
map to guest = Bad User
guest ok = yes
case sensitive = no
strict locking = no
msdfs proxy = no
read only = no
preferred master = no

[divx]
comment = films
inherit acls = yes
path = /windowsF/Divx/
read only = no
#   case sensitive = no
#   strict locking = no
#   msdfs proxy = no

[mp3]
comment = muziek
inherit acls = Yes
path = /windowsD/MP3/
read only = No

## Share disabled by YaST
# [netlogon]

[shared]
comment = muziek
inherit acls = Yes
path = /shared/
read only = No

[documenten]
comment = documenten
inherit acls = Yes
path = /windowsC/Documents and Settings/All Users/Documenten/
read only = No

[tekeningen]
comment = tekeningen
inherit acls = Yes
path = /windowsE/Tekeningen/
read only = No
[EMAIL PROTECTED]:~

these we commented out, entrances made by the kde config module, and
with which this share did not exist..

#   case sensitive = no
#   strict locking = no
#   msdfs proxy = no

Is there something in this config which should look different?
- --


Have a nice day,

M9.   Now, is the only time that exists.



  OS:  Linux 2.6.18.2-34-default x86_64
  Huidige gebruiker:  [EMAIL PROTECTED]
  Systeem:  openSUSE 10.2 (X86-64)
  KDE:  3.5.5 release 45.2
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFF4vn1X5/X5X6LpDgRAubiAJwLbBH7W+t3FQ3wYs8WNRTDkVM86QCgoq63
EtkwFXYe3p1Nfk3AuvSbudM=
=Gyyg
-END PGP SIGNATURE-
  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba + Quantum StorNext FS (SNFS)

2007-02-28 Thread Michael Gasch

hi,

more a general question: does anyone know about problems running samba
on a clustered filesystem like Quantum/ ADIC SNFS???

i know, i´m not allowed to export the same FS/mountpoint on different
samba servers. i´m more interested in POSIX conformity, locking issues, etc.

may be somebody already runs SNFS and samba in a large environment?!?!

thx for any help!
micha
-- 
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT Staff)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
   49 (0)341 - 3550 374

Fax:   49 (0)341 - 3550 399

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] vfs_shadow and [homes]

2007-02-28 Thread Michael Gasch

hi,

i was able to successfully run vfs_shadow on a samba share with win xp
shadow copy client. but i think it´s currently not implemented that one
could export [homes] with this vfs object, because AFAIK each @GMT-snap
has to resist directly under the samba share. but [homes] is a virtual
share representing different shares (depending on users).

has anybody hints about using vfs_shadow with [homes]?

thx!
-- 
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT Staff)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
   49 (0)341 - 3550 374

Fax:   49 (0)341 - 3550 399

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] What is happening here?

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I would send the message with a higher debuglevel, if i only knew how?
I do not know were to look to change: tree connect failed:
NT_STATUS_BAD_NETWORK_NAME

When i look at DNS and Hostname i see: Hostname: tribal-sfn2,
domainname: site

Collen Blijenberg schreef:
 Could you the message with a higher debug level ??

 also is  tribal-sfn2 your domain name or server name ??

 Cheers, Collen

 M9. wrote:
 Hi readers of this list,

 I have this nasty problem, that looks fixed, but everytime something
 else annoying happens...snip


- --


Have a nice day,

M9.   Now, is the only time that exists.



  OS:  Linux 2.6.18.2-34-default x86_64
  Huidige gebruiker:  [EMAIL PROTECTED]
  Systeem:  openSUSE 10.2 (X86-64)
  KDE:  3.5.5 release 45.2
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFF5ZulX5/X5X6LpDgRAmdGAJ96wQ3Fs1FuRq7UqsHaCZDqZ7EfAwCguf/6
41vvundJCHwLtml6bwoWS2E=
=+Nk5
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] What is happening here?

2007-02-28 Thread Collen Blijenberg


try smbclient -d10 -Lservername

my guess is that ether the machine you smbclient from isn't in the domain,
or the machine name is wrong...
coz' in the previous mail there was:   Domain=[TRIBAL-SFN2] OS=[Unix] 
Server=[Samba 3.0.23d-19.2-1179-SUSE-SL10.2]

and as you can see domain states the machine name ?
and that's what's wrong...  (i think?)

Have fun debugging...

Collen

M9. wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I would send the message with a higher debuglevel, if i only knew how?
I do not know were to look to change: tree connect failed:
NT_STATUS_BAD_NETWORK_NAME

When i look at DNS and Hostname i see: Hostname: tribal-sfn2,
domainname: site

Collen Blijenberg schreef:
  

Could you the message with a higher debug level ??

also is  tribal-sfn2 your domain name or server name ??

Cheers, Collen

M9. wrote:
Hi readers of this list,

I have this nasty problem, that looks fixed, but everytime something
else annoying happens...snip




- --


Have a nice day,

M9.   Now, is the only time that exists.



  OS:  Linux 2.6.18.2-34-default x86_64
  Huidige gebruiker:  [EMAIL PROTECTED]
  Systeem:  openSUSE 10.2 (X86-64)
  KDE:  3.5.5 release 45.2
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFF5ZuEX5/X5X6LpDgRAlscAKDFwFQGM6RqoipoelsGH3TW2Ou/oQCfT+/X
rFud/NdSmP1wOBZD9Zs5SzI=
=VMqD
-END PGP SIGNATURE-
  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba + Quantum StorNext FS (SNFS)

2007-02-28 Thread Peer-Joachim Koch

Hi,

we have STorNEXT together with samba and NFS.
All StorNEXT Clients have all 6 FS mounted. 
The samba server exporting different mount points.
But it is possible to export the same folders from both sides.

We have our whole file service on SNFS ( nearly 40TB) 12 Clients.

What kind of problem do you have ?

Bye, Peer 

_
Max-Planck-Institut fuer Biogeochemie
Dr. Peer-Joachim Koch
Hans-Knöll Str.10Telefon: ++49 3641 57-6705
D-07745 Jena Telefax: ++49 3641 57-7705

Am Mi 28.02.2007 16:05 schrieb Michael Gasch [EMAIL PROTECTED]:

 hi,
 
 more a general question: does anyone know about problems running samba
 on a clustered filesystem like Quantum/ ADIC SNFS???
 
 i know, i´m not allowed to export the same FS/mountpoint on different
 samba servers. i´m more interested in POSIX conformity, locking
 issues, etc.
 
 may be somebody already runs SNFS and samba in a large environment?!?!
 
 thx for any help!
 micha
 -- 
 Michael Gasch
 Max Planck Institute for Evolutionary Anthropology
 Department of Human Evolution (IT Staff)
 Deutscher Platz 6
 D-04103 Leipzig
 Germany
 
 Phone: 49 (0)341 - 3550 137
49 (0)341 - 3550 374
 
 Fax:   49 (0)341 - 3550 399
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] password alignment with /etc/passwd

2007-02-28 Thread stephen mulcahy

Hi Markus,

If you configure your Samba as follows

   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   pam password change = yes

Then everytime a user changes their samba password (using smbpasswd on
the Samba server or CTRL-ALT-DEL/Change Password on a client logged into
the domain) the password will also be copied to /etc/passwd so they will
always remain in sync.

Is this what you want?

The only minor headache is ensuring your users use smbpasswd rather than
passwd to change their password even when they want to change their
Linux/UNIX system password.

-stephen

Markus Franke wrote:
 Dear Samba Users,
 
 I have a Linux Server exporting its services (NFS/NIS) to some Linux
 Clients. Now, I have installed a new Windows Client and I would like to
 use Samba as a PDC.
 My question is, if there is any possibility to align the passwords
 between /etc/passwd and some backend (e.g. smbpasswd). I know that there
 is mksmbpasswd.sh but it resets all passwords and just aligns usernames
 with /etc/passwd. Is there a way to preserve also the passwords? Or is
 there maybe also a special backend for doing so?
 
 Thanks for help,
 
 
 Regards,
 Markus
 
 

-- 
Stephen Mulcahy, Applepie Solutions Ltd, Innovation in Business Center,
   GMIT, Dublin Rd, Galway, Ireland.  mailto:[EMAIL PROTECTED]
  mobile:+353.87.2930252  office:+353.91.751262  http://www.aplpi.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] migrate users to ldap

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 02/27/2007 08:16 PM, Markus Krause wrote:
 Thank you for your answer.
 I actually did not point out exactly enough what i want to do, 
 sorry for that ...
 
 I read these postings and also some sections in the samba howto 
 and several descriptions on the net, but i understand all these
 in that way, that the samba server is reconfigured to use ldap
 and stays there. at the moment we are some time away from
 finally migrating all samba accounts, which are currently stored
 in smbpasswd, to ldap and it is no option to take down and
 reconfigure samba even for a short time.

Hmmm, sorry, but I can see how you want to accomplish that.
You are changing the backend, you need to tell samba about this.


 so what i in fact need is a way to get a snapshot of the current
 accounts and copy them into ldap, the samba server should/can/must 
 not be touched (i mean start/stop/reconfigure etc.) in any way
 during this process. can this be done ?

I'm not sure I _really_ understood what you want, but
using some of the famous migration script, you can create your
new LDAP database in a few minutes, them you need to tell
Samba to start using the new backend (LDAP) instead of the old
backend (smbpasswd file).


 thanks in advance for any hints!
 regards
   markus

Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF5bGqCj65ZxU4gPQRAm1aAKCkfwywzZdifkYh84nBH/aUurFevACgx+KV
QY5t4fxioStZsod6apo5UCc=
=7Pnw
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.0.10 join domain

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 02/27/2007 03:57 PM, Daniel Davidson wrote:
 I have found a fixed my previous problems (two typos that were hard to
 find) and now the smbldap-tools all work as expected if I run them as
 root.  However when I try to join a domain from a windows machine, the
 scripts never run and get an Access is denied message.  Since I am
 using 0.10 I do not think I can use net rpc rights, so do I need to add
 that into ldap manually?  

Add what into LDAP?


 Or do I have to use a specific user other than
 just someone in domain admins?

AFAIK, privileges came with 3.0.11, so you need to use
root account, or an account with uid:gid equivalent (0:0). And
Domain Admins would not work as expected on versions previous
than 3.0.11.




 thanks,
 Dan

Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF5bJkCj65ZxU4gPQRAg0nAJ9bo8WPgDLBwwpHaLCKGJUj3nJuLwCgo+Bk
8VTD+FbIspVL7fKzyChFh6E=
=y0NK
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Scripting net command problem

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 02/27/2007 02:32 PM, Henrik Zagerholm wrote:
 Hello list,
 
 I'm writing some scripts that executes the net command.
 I have noticed that sometimes when things goes wrong the net 
 command asks for input i.e a password which results in a
 hanging script.
 Is there some way to avoid this?
 I've looked at the different flags fro net command but haven't 
 found anything that could help me with this.
 
 Cheers,
 henrik

If you can't find a way, perhaps you should report a
wishlist bug against Samba Bugzilla.


Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF5bK/Cj65ZxU4gPQRAs9NAJ9gXbEo4UulcJqeOx+inarhzSTpaQCdHOlM
NPYPgPlyOorWUZcbnZo8M/g=
=98zG
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba PDC and Win2k PDC

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 02/26/2007 09:26 AM, Stefan Weber wrote:
 hi,
 
 I would like to change the old windows 2000 domain structure 
 into one samba 3 domain. the migration is to take place
 gradually for the departments. I had imagined to packing the
 samba pdc with another domain name into the same subnetz as
 windows pdc.
 
 Windows 2k DN = work.wurst.local
 Samba 3 DN = work.wurst.de
 IP Subnet = 192.168.2.0/24 (Samba and Windows)
 
 is it possible ?

IHMO, yes. Without the entire picture it becomes hard to
confirm that, but as I would imagine it, yes, it should be
possible to add a PDC in another Domain and move your workstantions
gradually to the new domain. You will need to check how would you
share the files and printers while you have two domains, maybe a
InterTrust Domain can help, maybe just a set of ACLs and special
shares.


 thank
 stefan

Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF5bOqCj65ZxU4gPQRArRJAJ45wsY6DciUxJ0JWjTnAmFJcq52jACdFiJ5
epROdmqfjaQLnP1OaGXoXq4=
=YTl0
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Unable to upload printer drivers to 3.0.21 Samba

2007-02-28 Thread x


Hi Lou,

did you try a differente approch ???
instead of upload, use smbclient to connect to windows
workstation to download the printer driver. then use
rpcclient to register the files of the printer driver.

Marcos

--- Lou Hensley [EMAIL PROTECTED] escreveu:

 Hi Shane.
  
 I came across your post about the Not WinXP
 compatible and was
 wondering if you found the answer?
  
 I am having the same issue and am kind of lost, as I
 am rather new, but
 am learning, Linux.
  
  
 Thank you so much in advance for any ideas!!
 Sincerely, 
 --
 To unsubscribe from this list go to the following
 URL and read the
 instructions: 
 https://lists.samba.org/mailman/listinfo/samba
 


__
Fale com seus amigos  de graça com o novo Yahoo! Messenger 
http://br.messenger.yahoo.com/ 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] password alignment with /etc/passwd

2007-02-28 Thread Markus Franke

Hello,

thanks for reply.

stephen mulcahy wrote:
 Then everytime a user changes their samba password (using smbpasswd on
 the Samba server or CTRL-ALT-DEL/Change Password on a client logged into
 the domain) the password will also be copied to /etc/passwd so they will
 always remain in sync.
 
 Is this what you want?

well it's actually very close to what I want. The problem is that the
existing user passwords should be preserved. I don't want to create new
passwords for each user. Is it somehow possible to convert the encoded
password string in /etc/passwd to /etc/samba/smbpasswd?

 The only minor headache is ensuring your users use smbpasswd rather than
 passwd to change their password even when they want to change their
 Linux/UNIX system password.

This would be not a problem.

Regards,
Markus
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.0.10 join domain

2007-02-28 Thread Daniel Davidson

This is really getting frustrating.  The exact message when joining the
domain is user name could not be found, however I have the
Administrator account set up with the proper data.  And i have tried
administrator with and without the A in caps.  I can take this username,
log into the server, and the files I create show up as owned by root.

# Administrator, People, igb.uiuc.edu
dn: uid=Administrator,ou=People,dc=igb,dc=uiuc,dc=edu
uid: Administrator
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
cn: Administrator
sn: Administrator
mail: [EMAIL PROTECTED]
loginShell: /bin/bash
homeDirectory: /home/a-m/Administrator
gecos: Administrator
sambaSID: S-1-5-21-3679620730-2824407525-958489067-500
sambaPrimaryGroupSID: S-1-5-21-3679620730-2824407525-958489067-512
sambaAcctFlags: UX
gidNumber: 0
uidNumber: 0
sambaLMPassword: somethingremoved
sambaNTPassword: somethingremoved

My Sid matches up:

[EMAIL PROTECTED] samba]# net getlocalsid
SID for domain IGB-FILE-SERVER is:
S-1-5-21-3679620730-2824407525-958489067

The server should be the master browser:

  *
[2007/02/28 10:20:43, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup IGB on subnet
128.174.124.12
[2007/02/28 10:20:43, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
  become_domain_master_browser_bcast: querying subnet 128.174.124.12 for
domain master browser on workgroup IGB
[2007/02/28 10:20:47, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(124)
  become_logon_server_success: Samba is now a logon server for workgroup
IGB on subnet 128.174.124.12
[2007/02/28 10:20:51, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *

  Samba server IGB-FILE-SERVER is now a domain master browser for
workgroup IGB on subnet 128.174.124.12

  *


If I look at the log for doing the add, it appears as if this might be
where the error is if I look at the tail end of the smb log for the
client trying to add with a loglevel of 5:


[2007/02/28 10:31:12, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2007/02/28 10:31:12, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2007/02/28 10:31:12, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
  wct=12 flg2=0xc807
[2007/02/28 10:31:12, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2007/02/28 10:31:12, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
  Doing spnego session setup
[2007/02/28 10:31:12, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
  NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002
5.1] PrimaryDomain=[]
[2007/02/28 10:31:12, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(615)
  Got user=[administrator] domain=[igb] workstation=[SAMMY] len1=24
len2=24
[2007/02/28 10:31:12, 5]
auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(66)
  auth_context challenge set by NTLMSSP callback (NTLM2)
[2007/02/28 10:31:12, 5]
auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(67)
  challenge is: 
[2007/02/28 10:31:12, 5] lib/util.c:dump_data(1999)
  [000] 81 8F 46 13 26 F9 07 3E   ..F... 


For info, my globals from smb.conf are


[global]
workgroup = igb
netbios name = IGB-FILE-SERVER
server string = Samba Server
passdb backend = ldapsam:ldap://auth.igb.uiuc.edu
log file = /var/log/samba/%m.log
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
domain logons = Yes
dns proxy = No
wins support = Yes
ldap admin dn = cn=someonespecial,dc=igb,dc=uiuc,dc=edu
ldap group suffix = ou=group
ldap suffix = dc=igb,dc=uiuc,dc=edu
ldap ssl = on
ldap user suffix = ou=People
ldap machine suffix =  ou=computer
cups options = raw
log level = 10

add machine script
= /usr/share/doc/samba-3.0.10/LDAP/smbldap-tools/smbldap-useradd.pl -w
preferred master = Yes
domain master = Yes
os level = 65
password server = None
idmap uid = 1000-33554431
idmap gid = 1000-33554431
template shell = /bin/false
username map = /etc/samba/smbusers
winbind use default domain = no


Any help still very much appreciated,

Dan

On Tue, 2007-02-27 at 12:57 -0600, Daniel Davidson wrote:
 I have found a fixed my previous problems (two typos that were hard to
 find) and now the smbldap-tools all work as expected if I run them as
 root.  However when I try to join a domain from a windows machine, the
 scripts never run and get an Access is denied message.  Since I am
 using 0.10 I do not think I can use net rpc rights, so do I need to add
 that into ldap manually?  Or do I

Re: [Samba] Samba 3.0.10 join domain

2007-02-28 Thread Andrew Watkins



Daniel,

Try adding ldap idmap suffix = ou=People

Since I noticed that ldap user suffix and ldap group suffix do not 
seem to be used.


Also, check you LDAP log files to see if you can spot the samba search 
string!


Andrew


This is really getting frustrating.  The exact message when joining the
domain is user name could not be found, however I have the
Administrator account set up with the proper data.  And i have tried
administrator with and without the A in caps.  I can take this username,
log into the server, and the files I create show up as owned by root.

# Administrator, People, igb.uiuc.edu
dn: uid=Administrator,ou=People,dc=igb,dc=uiuc,dc=edu
uid: Administrator
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
cn: Administrator
sn: Administrator
mail: [EMAIL PROTECTED]
loginShell: /bin/bash
homeDirectory: /home/a-m/Administrator
gecos: Administrator
sambaSID: S-1-5-21-3679620730-2824407525-958489067-500
sambaPrimaryGroupSID: S-1-5-21-3679620730-2824407525-958489067-512
sambaAcctFlags: UX
gidNumber: 0
uidNumber: 0
sambaLMPassword: somethingremoved
sambaNTPassword: somethingremoved

My Sid matches up:

[EMAIL PROTECTED] samba]# net getlocalsid
SID for domain IGB-FILE-SERVER is:
S-1-5-21-3679620730-2824407525-958489067

The server should be the master browser:

  *
[2007/02/28 10:20:43, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup IGB on subnet
128.174.124.12
[2007/02/28 10:20:43, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
  become_domain_master_browser_bcast: querying subnet 128.174.124.12 for
domain master browser on workgroup IGB
[2007/02/28 10:20:47, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(124)
  become_logon_server_success: Samba is now a logon server for workgroup
IGB on subnet 128.174.124.12
[2007/02/28 10:20:51, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
  *

  Samba server IGB-FILE-SERVER is now a domain master browser for
workgroup IGB on subnet 128.174.124.12

  *


If I look at the log for doing the add, it appears as if this might be
where the error is if I look at the tail end of the smb log for the
client trying to add with a loglevel of 5:


[2007/02/28 10:31:12, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2007/02/28 10:31:12, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2007/02/28 10:31:12, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
  wct=12 flg2=0xc807
[2007/02/28 10:31:12, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2007/02/28 10:31:12, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
  Doing spnego session setup
[2007/02/28 10:31:12, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
  NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002
5.1] PrimaryDomain=[]
[2007/02/28 10:31:12, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(615)
  Got user=[administrator] domain=[igb] workstation=[SAMMY] len1=24
len2=24
[2007/02/28 10:31:12, 5]
auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(66)
  auth_context challenge set by NTLMSSP callback (NTLM2)
[2007/02/28 10:31:12, 5]
auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(67)
  challenge is: 
[2007/02/28 10:31:12, 5] lib/util.c:dump_data(1999)
  [000] 81 8F 46 13 26 F9 07 3E   ..F... 



For info, my globals from smb.conf are


[global]
workgroup = igb
netbios name = IGB-FILE-SERVER
server string = Samba Server
passdb backend = ldapsam:ldap://auth.igb.uiuc.edu
log file = /var/log/samba/%m.log
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
domain logons = Yes
dns proxy = No
wins support = Yes
ldap admin dn = cn=someonespecial,dc=igb,dc=uiuc,dc=edu
ldap group suffix = ou=group
ldap suffix = dc=igb,dc=uiuc,dc=edu
ldap ssl = on
ldap user suffix = ou=People
ldap machine suffix =  ou=computer
cups options = raw
log level = 10

add machine script
= /usr/share/doc/samba-3.0.10/LDAP/smbldap-tools/smbldap-useradd.pl -w
preferred master = Yes
domain master = Yes
os level = 65
password server = None
idmap uid = 1000-33554431
idmap gid = 1000-33554431
template shell = /bin/false
username map = /etc/samba/smbusers
winbind use default domain = no


Any help still very much appreciated,

Dan

On Tue, 2007-02-27 at 12:57 -0600, Daniel Davidson wrote:

I have found a fixed my previous problems (two typos that were hard to
find) and now the smbldap-tools all work as expected if I run them as
root.  However

Re: [Samba] Samba 3.0.10 join domain

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Daniel,

 This is really getting frustrating.  The exact message 
 when joining the domain is user name could not
 be found,

When joining a Samba domain usually this means that
the machine account could not be found.but I haven't
followed this entire thread.






cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF5b9aIR7qMdg1EfYRAuuFAKDvPHM/juyXpiNNQvyQjgQJjMNn9wCg0PMU
2E9XjIT7NdkPIDunK4g69qc=
=N2GS
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] password alignment with /etc/passwd

2007-02-28 Thread stephen mulcahy

Hi Markus,


Markus Franke wrote:
 well it's actually very close to what I want. The problem is that the
 existing user passwords should be preserved. I don't want to create new
 passwords for each user. Is it somehow possible to convert the encoded
 password string in /etc/passwd to /etc/samba/smbpasswd?

As far as I know this isn't possible ... but I'm not a samba expert. I'd
be delighted to find out otherwise.

-stephen

-- 
Stephen Mulcahy, Applepie Solutions Ltd, Innovation in Business Center,
   GMIT, Dublin Rd, Galway, Ireland.  mailto:[EMAIL PROTECTED]
  mobile:+353.87.2930252  office:+353.91.751262  http://www.aplpi.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] password alignment with /etc/passwd

2007-02-28 Thread Rashkae


stephen mulcahy wrote:

Hi Markus,


Markus Franke wrote:

well it's actually very close to what I want. The problem is that the
existing user passwords should be preserved. I don't want to create new
passwords for each user. Is it somehow possible to convert the encoded
password string in /etc/passwd to /etc/samba/smbpasswd?


As far as I know this isn't possible ... but I'm not a samba expert. I'd
be delighted to find out otherwise.


The encoded passwords can't be moved over directly, to the best of my 
knowledge.  I've never tried this before, but if I needed to so 
something like this, I would try attacking my my /etc/passwd with John 
the Ripper to get plaintext of most of the passowrds, then feed those 
into smbpasswd (by script if theres enough to warrant it.)

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Trying to share HP Officejet 5610 Multi-function

2007-02-28 Thread Forrest D

Thanks Dale. I'll give it a try. This isn't the first time I've done
this. I had no problems setting up my workstation at work to be a printer
server for an HP9000, or HP5050. I just installed the printer via cups. I
enabled printer sharing in CUPS, it showed up in the shares listed, so I
installed it on my XP workstation and it worked, easy-peasy, plane and
easy.

I kind of thought that wasn't the correct location for printer drivers.
Also, I'm not sure how I ended up with a SWAT-made smb.conf. Must have been
drinking...

On 2/27/07, Dale Schroeder [EMAIL PROTECTED] wrote:

Forrest,

First you will need a [print$] share (which is where the drivers reside)
as described here:
http://us4.samba.org/samba/docs/man/Samba-HOWTO-Collection/classicalprinting.html#id358044

/var/spool/samba is for the print jobs, not the drivers.
Move printing = cups to global. Add to global printcap name = cups.
There are other options that you may want to set like load printers or
use client driver

For installation, perhaps this is what you need:
http://us4.samba.org/samba/docs/man/Samba-HOWTO-Collection/classicalprinting.html#inst-rpc

It is quite involved. I hope I never have to use it. All our printers
have Windows inf files for the add printer wizard, or ppd files for
CUPS.

If this doesn't work, consider foomatic/HPLIP packages.
Your printer is supported
here: http://hplip.sourceforge.net/supported_devices/inkjet_aio.html
Setting up printing through Samba can be quite daunting/frustrating the
1st time.

Dale

Forrest D wrote:
I'm trying to share my HP 5610 on my Samba (3.0.24-1 fc6 x86_64)
machine and
am running into a typical HP related SANFU. The XP drivers supplied
only
install through the installation program. (ie. I can't use device
manager
to point XP to the driver and install it) So I installed the printer
on my
XP machine, used the installation program to install the drivers and
then
shared the printer out and copied the folders and files in the print$
share
to my samba machine /var/spool/samba/ (rwxrwxrwt) . I then restarted
samba
and when I connect to the printer on my XP machine it still asks me
for the
driver. I read somewhere that you have to force samba to recognize
drivers
installed this way and think this is what I have to do, but I can't
figure
out how to do it. Any help would be most appreciated.

Here is my smb.conf

[global]
workgroup = MOYA
realm = MOYA.FARSCAPE.LOCAL
server string =
security = ADS
username map = /etc/samba/smbusers
log file = /var/log/samba/%m.log
max log size = 50
preferred master = No
local master = No
domain master = No
dns proxy = No
wins server = #
ldap ssl = no
cups options = raw

[homes]
comment = Home Directories
read only = No
browseable = yes

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = no
printing = cups
public = yes

TIA,
-Forrest

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] What is happening here?

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



Collen Blijenberg schreef:
 try smbclient -d10 -Lservername

This gives a lot of info, that can point someone who knows what it means
 in the right direction.
 
 my guess is that ether the machine you smbclient from isn't in the domain,
 or the machine name is wrong...
 coz' in the previous mail there was:   Domain=[TRIBAL-SFN2] OS=[Unix]
 Server=[Samba 3.0.23d-19.2-1179-SUSE-SL10.2]
 and as you can see domain states the machine name ?
 and that's what's wrong...  (i think?)

Yes something with netbiosname, ?

as user:

  added interface ip=192.168.1.6 bcast=192.168.1.255 nmask=255.255.255.0
 Netbios name list:-
 my_netbios_names[0]=TRIBAL-SFN2
 Client started (version 3.0.23d-19.2-1179-SUSE-SL10.2).
 Opening cache file at /var/lib/samba/gencache.tdb
 tdb(unnamed): tdb_open_ex: could not open file /var/lib/samba/gencache.tdb: 
 Toegang geweigerd
 gencache_init: Opening cache file /var/lib/samba/gencache.tdb read-only.
 Cache entry with key = AD_SITENAME/DOMAIN/ couldn't be found
 sitename_fetch: No stored sitename for
 internal_resolve_name: looking up tribal-sfn2#20 (sitename (null))
 Returning expired cache entry: key = NBT/TRIBAL-SFN2#20, value = 127.0.0.2:0, 
 timeout = Sun Feb 25 16:26:45 2007
 no entry for tribal-sfn2#20 found.
 resolve_lmhosts: Attempting lmhosts lookup for name tribal-sfn20x20
 getlmhostsent: lmhost entry: 127.0.0.1 localhost
 resolve_wins: Attempting wins lookup for name tribal-sfn20x20
 resolve_wins: WINS server resolution selected and no WINS servers listed.
 resolve_hosts: Attempting host lookup for name tribal-sfn20x20
 remove_duplicate_addrs2: looking for duplicate address/port pairs
 namecache_store: storing 1 address for tribal-sfn2#20: 127.0.0.2:0
 internal_resolve_name: returning 1 addresses: 127.0.0.2:0
_

 SPNEGO login failed: NT_STATUS_END_OF_FILE
 lang_tdb_init: /usr/lib64/samba/nl_NL.UTF-8.msg: Onbekend bestand of map
 session setup failed: Call returned zero bytes (EOF)
___

as root:

 my_netbios_names[0]=TRIBAL-SFN2
 Client started (version 3.0.23d-19.2-1179-SUSE-SL10.2).
 Opening cache file at /var/lib/samba/gencache.tdb
 Cache entry with key = AD_SITENAME/DOMAIN/ couldn't be found
 sitename_fetch: No stored sitename for
 internal_resolve_name: looking up tribal-sfn2#20 (sitename (null))
 Returning expired cache entry: key = NBT/TRIBAL-SFN2#20, value = 127.0.0.2:0, 
 timeout = Sun Feb 25 16:26:45 2007
 no entry for tribal-sfn2#20 found.
 resolve_lmhosts: Attempting lmhosts lookup for name tribal-sfn20x20
 getlmhostsent: lmhost entry: 127.0.0.1 localhost
 resolve_wins: Attempting wins lookup for name tribal-sfn20x20
 resolve_wins: WINS server resolution selected and no WINS servers listed.
 resolve_hosts: Attempting host lookup for name tribal-sfn20x20
 remove_duplicate_addrs2: looking for duplicate address/port pairs
 namecache_store: storing 1 address for tribal-sfn2#20: 127.0.0.2:0
 Adding cache entry with key = NBT/TRIBAL-SFN2#20; value = 127.0.0.2:0 and 
 timeout = Wed Feb 28 19:03:47 2007
  (660 seconds ahead)
 internal_resolve_name: returning 1 addresses: 127.0.0.2:0

and furteron:

 SMB signing enabled!
 cli_simple_set_signing: user_session_key
 [000] C1 97 80 51 E8 CC 54 83  2D 82 24 F4 33 D7 2E C4  ...Q..T. -.$.3...
 cli_simple_set_signing: NULL response_data
 simple_packet_signature: sequence number 0
 client_sign_outgoing_message: sent SMB signature of
 [000] E7 59 05 31 B1 9B 74 47   .Y.1..tG
 store_sequence_for_reply: stored seq = 1 mid = 3
 get_sequence_for_reply: found seq = 1 mid = 3
 simple_packet_signature: sequence number 1
 client_check_incoming_message: BAD SIG: wanted SMB signature of
 [000] CE F0 0D BE F1 6A 3E E8   .j.
 client_check_incoming_message: BAD SIG: got SMB signature of
 [000] 42 53 52 53 50 59 4C 20   BSRSPYL
 simple_packet_signature: sequence number 4294967292
 simple_packet_signature: sequence number 4294967293
 simple_packet_signature: sequence number 4294967294
 simple_packet_signature: sequence number 4294967295
 simple_packet_signature: sequence number 0
 simple_packet_signature: sequence number 1
 simple_packet_signature: sequence number 2
 simple_packet_signature: sequence number 3
 simple_packet_signature: sequence number 4
 simple_packet_signature: sequence number 5
 srv_check_incoming_message: signing negotiated but not required and peer
 isn't sending correct signatures. Turning off.
 Domain=[TRIBAL-SFN2] OS=[Unix] Server=[Samba 3.0.23d-19.2-1179-SUSE-SL10.2]
  session setup ok
 write_socket(5,92)
 write_socket(5,92) wrote 92
 got smb length of 35
 size=35
 smb_com=0x75
 smb_rcls=204
 smb_reh=0
 smb_err=49152
 smb_flg=136
 smb_flg2=51205
 smb_tid=0
 smb_pid=15092
 smb_uid=101
 smb_mid=4
 smt_wct=0
 smb_bcc=0
 lang_tdb_init:

Re: [Samba] password alignment with /etc/passwd

2007-02-28 Thread Gary Dale


Rashkae wrote:

stephen mulcahy wrote:

Hi Markus,


Markus Franke wrote:

well it's actually very close to what I want. The problem is that the
existing user passwords should be preserved. I don't want to create new
passwords for each user. Is it somehow possible to convert the encoded
password string in /etc/passwd to /etc/samba/smbpasswd?


As far as I know this isn't possible ... but I'm not a samba expert. I'd
be delighted to find out otherwise.


The encoded passwords can't be moved over directly, to the best of my 
knowledge.  I've never tried this before, but if I needed to so 
something like this, I would try attacking my my /etc/passwd with John 
the Ripper to get plaintext of most of the passowrds, then feed those 
into smbpasswd (by script if theres enough to warrant it.)
The passwords in /etc/passwd should be unrecoverable in theory (apart 
from a brute-force attack) if you are using a reasonable encrypting 
scheme (every distro I know defaults to a decent one) and 
strength-checking (not usually used) . And the encryption scheme is 
different from what Windows uses, so there is no reasonable way of 
converting them.


You could try the suggested dictionary attack which will get the weak 
passwords.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.0.10 join domain

2007-02-28 Thread Daniel Davidson

Apologies for the nast of the accompanied text, but I thought it best to
include everying from the ldap log in relation to a request to join a
domain.  It all looks fine to me, except for the text= string never
being populated, but please let me know if you can find anything of if
that is a problem.  The idmap suffix did not resolve the issue.  I do
not need to set this account up locally, right?

thanks,

Dan


Feb 28 12:20:53 auth slapd[6527]: conn=636 fd=40 ACCEPT from
IP=128.174.124.12:54545 (IP=0.0.0.0:389) 
Feb 28 12:20:53 auth slapd[6527]: conn=636 op=0 BIND
dn=cn=ldapadmin,dc=igb,dc=uiuc,dc=edu method=128 
Feb 28 12:20:53 auth slapd[6527]: conn=636 op=0 BIND
dn=cn=ldapadmin,dc=igb,dc=uiuc,dc=edu mech=SIMPLE ssf=0 
Feb 28 12:20:53 auth slapd[6527]: conn=636 op=0 RESULT tag=97 err=0
text= 
Feb 28 12:20:53 auth slapd[6527]: conn=636 op=1 SRCH
base=dc=igb,dc=uiuc,dc=edu scope=2
filter=((uid=administrator)(objectClass=sambaSamAccount)) 
Feb 28 12:20:53 auth slapd[6527]: conn=636 op=1 SRCH attr=uid uidNumber
gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange
sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn
displayName sambaHomeDrive sambaHomePath sambaLogonScript
sambaProfilePath description sambaUserWorkstations sambaSID
sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName
objectClass sambaAcctFlags sambaMungedDial sambaBadPasswordCount
sambaBadPasswordTime sambaPasswordHistory modifyTimestamp
sambaLogonHours modifyTimestamp 
Feb 28 12:20:53 auth slapd[6527]: conn=636 op=1 SEARCH RESULT tag=101
err=0 nentries=1 text= 
Feb 28 12:20:53 auth slapd[6527]: conn=637 fd=41 ACCEPT from
IP=128.174.124.12:54546 (IP=0.0.0.0:389) 
Feb 28 12:20:53 auth slapd[6527]: conn=637 op=0 BIND dn= method=128 
Feb 28 12:20:53 auth slapd[6527]: conn=637 op=0 RESULT tag=97 err=0
text= 
Feb 28 12:20:53 auth slapd[6527]: conn=637 op=1 SRCH
base=dc=igb,dc=uiuc,dc=edu scope=2
filter=((objectClass=posixAccount)(uid=Administrator)) 
Feb 28 12:20:53 auth slapd[6527]: conn=637 op=1 SRCH attr=uid
userPassword uidNumber gidNumber cn homeDirectory loginShell gecos
description objectClass 
Feb 28 12:20:53 auth slapd[6527]: conn=637 op=1 SEARCH RESULT tag=101
err=0 nentries=1 text= 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=2 SRCH
base=dc=igb,dc=uiuc,dc=edu scope=2
filter=((objectClass=posixAccount)(uid=Administrator)) 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=2 SEARCH RESULT tag=101
err=0 nentries=1 text= 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=3 SRCH
base=dc=igb,dc=uiuc,dc=edu scope=2
filter=((objectClass=posixGroup)(|(memberUid=Administrator)(uniqueMember=uid=administrator,ou=people,dc=igb,dc=uiuc,dc=edu)))
 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=3 SRCH attr=gidNumber 
Feb 28 12:20:54 auth slapd[6527]: = bdb_equality_candidates:
(memberUid) index_param failed (18) 
Feb 28 12:20:54 auth slapd[6527]: = bdb_equality_candidates:
(uniqueMember) index_param failed (18) 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=3 SEARCH RESULT tag=101
err=0 nentries=2 text= 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=4 SRCH
base=dc=igb,dc=uiuc,dc=edu scope=2
filter=((objectClass=posixGroup)(uniqueMember=cn=domain
admins,ou=group,dc=igb,dc=uiuc,dc=edu)) 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=4 SRCH attr=gidNumber 
Feb 28 12:20:54 auth slapd[6527]: = bdb_equality_candidates:
(uniqueMember) index_param failed (18) 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=4 SEARCH RESULT tag=101
err=0 nentries=0 text= 
Feb 28 12:20:54 auth slapd[6527]: conn=636 op=2 SRCH
base=ou=group,dc=igb,dc=uiuc,dc=edu scope=2
filter=((objectClass=sambaGroupMapping)(gidNumber=0)) 
Feb 28 12:20:54 auth slapd[6527]: conn=636 op=2 SRCH attr=gidNumber
sambaSID sambaGroupType sambaSIDList description displayName cn
objectClass 
Feb 28 12:20:54 auth slapd[6527]: conn=636 op=2 SEARCH RESULT tag=101
err=0 nentries=0 text= 
Feb 28 12:20:54 auth slapd[6527]: conn=636 op=3 SRCH
base=ou=group,dc=igb,dc=uiuc,dc=edu scope=2
filter=((objectClass=sambaGroupMapping)(gidNumber=512)) 
Feb 28 12:20:54 auth slapd[6527]: conn=636 op=3 SRCH attr=gidNumber
sambaSID sambaGroupType sambaSIDList description displayName cn
objectClass 
Feb 28 12:20:54 auth slapd[6527]: conn=636 op=3 SEARCH RESULT tag=101
err=0 nentries=1 text= 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=5 SRCH
base=dc=igb,dc=uiuc,dc=edu scope=2
filter=((objectClass=posixAccount)(uid=Administrator)) 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=5 SRCH attr=uid
userPassword uidNumber gidNumber cn homeDirectory loginShell gecos
description objectClass 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=5 SEARCH RESULT tag=101
err=0 nentries=1 text= 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=6 SRCH
base=dc=igb,dc=uiuc,dc=edu scope=2
filter=((objectClass=posixAccount)(uid=administrator)) 
Feb 28 12:20:54 auth slapd[6527]: conn=637 op=6 SRCH attr=uid
userPassword uidNumber gidNumber cn homeDirectory loginShell gecos
description objectClass 
Feb 28 12:20:54 auth

[Samba] How I can remove system share ADMIN$

2007-02-28 Thread юКЕЙЯЮМДП оПХУНДЭЙН

How I can remove system share ADMIN$ on samba-3.0.24? or to forbid 
through Computer managment console on windows clients to look:

shares
sessions
open files
users!!!
services
on samba server?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] What is happening here?

2007-02-28 Thread Volker Lendecke

On Wed, Feb 28, 2007 at 07:47:44PM +0100, M9. wrote:
 This gives a lot of info, that can point someone who knows what it means
  in the right direction.

The server side is MUCH more interesting.

Set debug level = 10 in the [global] section of your
smb.conf and send the smbd log file which might reside in
/var/log/samba/log.smbd depending on your system.

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] password alignment with /etc/passwd

2007-02-28 Thread Markus Franke

Gary Dale wrote:
 The passwords in /etc/passwd should be unrecoverable in theory (apart
 from a brute-force attack) if you are using a reasonable encrypting
 scheme (every distro I know defaults to a decent one) and
 strength-checking (not usually used) . And the encryption scheme is
 different from what Windows uses, so there is no reasonable way of
 converting them.

HmmmI can't believe this. Let's consider the case that you have a
network with NFS/NIS Installation and Linux only clients and about 100
users. Now I want to add just one...only one windows box...and it should
be possible that the existing users can login on this box via their
usual password and they should get their Linux home directory directly
mounted via Samba. In this case I would have to change the passwords of
100 users just to enable the usage of 1 windows pc? Is there really no
other solution except of john the ripper? (which would probably not be
able to resolve all the passwords)

Thanks for reply,

Markus Franke
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] How I can remove system share ADMIN$

2007-02-28 Thread summary


How I can remove system share ADMIN$ on samba-3.0.24? or to forbid
through Computer managment console on windows clients to look:
shares
sessions
open files
users!!!
services
on samba server?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] password alignment with /etc/passwd

2007-02-28 Thread simo

On Wed, 2007-02-28 at 20:13 +0100, Markus Franke wrote:
 Gary Dale wrote:
  The passwords in /etc/passwd should be unrecoverable in theory (apart
  from a brute-force attack) if you are using a reasonable encrypting
  scheme (every distro I know defaults to a decent one) and
  strength-checking (not usually used) . And the encryption scheme is
  different from what Windows uses, so there is no reasonable way of
  converting them.
 
 HmmmI can't believe this. Let's consider the case that you have a
 network with NFS/NIS Installation and Linux only clients and about 100
 users. Now I want to add just one...only one windows box...and it should
 be possible that the existing users can login on this box via their
 usual password and they should get their Linux home directory directly
 mounted via Samba. In this case I would have to change the passwords of
 100 users just to enable the usage of 1 windows pc? Is there really no
 other solution except of john the ripper? (which would probably not be
 able to resolve all the passwords)

No you disable encrypted password = yes, and change th relevant windows
box registry to allow plain text password to be exchanged between the
client and the samba server.
This will lower the security, but there is no other way, we do not
control what windows client can send or how they do it.

Another solution is to change your pam configuration so that when you
users change the password they will also update the /etc/samba/smbpasswd
file. Every user that wnat to log in into that box will have to change
the password at least once. It is not a big requirement after all.

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: [EMAIL PROTECTED]
http://samba.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] How I can remove system share ADMIN$

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

[EMAIL PROTECTED] wrote:
 How I can remove system share ADMIN$ on samba-3.0.24? 

See 'enable asu support' in smb.conf(5)





cheers, jerry

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF5dd+IR7qMdg1EfYRAmJxAJ4nqz5tJgyAU0emf2xZJRZQ2a4zIQCePj8G
0cDuoa7+rYKhDl2mIc1QMEQ=
=sMKs
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] What is happening here?

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



Volker Lendecke schreef:
 On Wed, Feb 28, 2007 at 07:47:44PM +0100, M9. wrote:
 This gives a lot of info, that can point someone who knows what it means
  in the right direction.
 
 The server side is MUCH more interesting.
 
 Set debug level = 10 in the [global] section of your
 smb.conf and send the smbd log file which might reside in
 /var/log/samba/log.smbd depending on your system.
 
 Volker
 
Send the logfile were? To this list?

- --


Have a nice day,

M9.   Now, is the only time that exists.



  OS:  Linux 2.6.18.2-34-default x86_64
  Huidige gebruiker:  [EMAIL PROTECTED]
  Systeem:  openSUSE 10.2 (X86-64)
  KDE:  3.5.5 release 45.2
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFF5eEZX5/X5X6LpDgRAhibAKCQld05N6GRLDq199bKgw7BVMiH3gCeNNl8
pII/yGj9qvfeOVizoZoPJpw=
=W8Et
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: hosts allow on smb.conf

2007-02-28 Thread Daniel Sung


Hi,

Can I know if anyone can help me this?

B.Rgds

Daniel Sung
Information Technology - Shipco Transport

Tel : +852 2574 3188 (General Lines)
Tel : +852 2574 7274 (Direct Line)
Fax : +852 2573 3936
e-mail : [EMAIL PROTECTED]

*** For access to STI-Online which offers on-line schedules, bookings, 
documentation, shipment tracking and other e-commerce tools, please visit our 
website, www.shipco.com ***



 Original Message  
Subject: hosts allow on smb.conf
From: Daniel Sung [EMAIL PROTECTED]
To: samba@lists.samba.org
Cc: Niklas Palmqvist [EMAIL PROTECTED]
Date: Thu Feb 15 2007 09:09:33 GMT+0800 (China Standard Time)

Hi,

I have some query about the samba security, we are trying to setup 
remote map drive for vpn client, since this kind of client connection 
which using different IP address,  the only way we can do is to set 
'hosts allow' to nothing.  We just want to know if this change is 
risky or not, our samba was setup as a DC, and client computers 
already join to Linux Domain.  The VPN protocol is using ipsec and the 
samba is inside the network which has Firewall protected.


Kindly please advice if any comments about that.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows 98 caching too much

2007-02-28 Thread Alex Satrapa


On 23/02/2007, at 14:51 , Daniel O'Connor wrote:


We have an old Win98 box at work that is used for programming GALs and
EEPROMs, however we find that if the file is modified on the Unix  
side the
Win98 box doesn't notice. This is rather annoying when you are  
iterating a

design as you can imagine!



[projects]
comment = Project source code
path = /usr/local/Genesis/work
writeable = Yes
guest ok = Yes
force create mode = 0775
force directory mode = 0775


What happens if you add the following parameter to the [projects]  
share decription:


   oplocks = no

This should make Samba tell the client (your Win98 box) that it  
should not attempt to cache the content of files.


More on this exact topic here:
http://lists.samba.org/archive/samba/2000-August/020202.html

Alex

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] fam error

2007-02-28 Thread Willy Offermans

Hello James and samba friends,

Since Sep 2006 I got the following error again and again:

snip
...
Feb 23 16:46:17 sun smbd[35310]: [2007/02/23 16:46:17, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:46:17 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:46:21 sun smbd[35310]: [2007/02/23 16:46:21, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:46:21 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:46:22 sun smbd[35310]: [2007/02/23 16:46:22, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:46:22 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:46:44 sun smbd[35310]: [2007/02/23 16:46:44, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:46:44 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:46:46 sun smbd[35310]: [2007/02/23 16:46:46, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:46:46 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:46:59 sun smbd[35310]: [2007/02/23 16:46:59, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:46:59 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:47:12 sun smbd[35310]: [2007/02/23 16:47:12, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:47:12 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:47:15 sun smbd[35310]: [2007/02/23 16:47:15, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:47:15 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:47:16 sun smbd[35310]: [2007/02/23 16:47:16, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:47:16 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:47:20 sun smbd[35310]: [2007/02/23 16:47:20, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:47:20 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:47:23 sun smbd[35310]: [2007/02/23 16:47:23, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:47:23 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:47:43 sun smbd[35310]: [2007/02/23 16:47:43, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:47:43 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:48:34 sun smbd[35310]: [2007/02/23 16:48:34, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:48:34 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:48:38 sun smbd[35310]: [2007/02/23 16:48:38, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:48:38 sun smbd[35310]:   failed to connect to FAM service
Feb 23 16:48:41 sun smbd[35310]: [2007/02/23 16:48:41, 0] 
smbd/notify_fam.c:fam_check_reconnect(136)
Feb 23 16:48:41 sun smbd[35310]:   failed to connect to FAM service
...
/snip

I have reported this already a long time ago. Nothing happened since
then.

Currently I'm running Samba version 3.0.24 on FreeBSD 6.1.

Does anybody have a clue how to solve this issue?

On Sat, Sep 09, 2006 at 11:20:21PM +1000, James Peach wrote:
 On 09/09/06, Willy Offermans [EMAIL PROTECTED] wrote:
 On Mon, Sep 04, 2006 at 10:27:35PM +1000, James Peach wrote:
  On 04/09/06, Willy Offermans [EMAIL PROTECTED] wrote:
  Dear Samba Friends,
  
  I got the following error again and again:
  
  snip
  .
  Sep  4 10:58:18 sun smbd[94479]: [2006/09/04 10:58:18, 0]
  smbd/notify_fam.c:fam_check_reconnect(136)
  Sep  4 10:58:18 sun smbd[94479]:   failed to connect to FAM service
  Sep  4 10:58:23 sun smbd[94479]: [2006/09/04 10:58:23, 0]
  smbd/notify_fam.c:fam_check_reconnect(136)
  Sep  4 10:58:23 sun smbd[94479]:   failed to connect to FAM service
  Sep  4 10:58:24 sun smbd[94479]: [2006/09/04 10:58:24, 0]
  smbd/notify_fam.c:fam_check_reconnect(136)
  Sep  4 10:58:24 sun smbd[94479]:   failed to connect to FAM service
  Sep  4 10:58:25 sun smbd[94479]: [2006/09/04 10:58:25, 0]
  smbd/notify_fam.c:fam_check_reconnect(136)
  Sep  4 10:58:25 sun smbd[94479]:   failed to connect to FAM service
  Sep  4 10:58:25 sun smbd[94479]: [2006/09/04 10:58:25, 0]
  smbd/notify_fam.c:fam_check_reconnect(136)
  Sep  4 10:58:25 sun smbd[94479]:   failed to connect to FAM service
  Sep  4 11:23:22 sun smbd[94479]: [2006/09/04 11:23:22, 0]
  smbd/notify_fam.c:fam_check_reconnect(136)
  Sep  4 11:23:22 sun smbd[94479]:   failed to connect to FAM service
  .
  /snip
  
  I'm using samba-3.0.23b,1 on FreeBSD 6.1
 
  I've only ever tested the FAM support on IRIX. smbd will automatically
  attempt to use FAM if it appears to be available, but it shouldn't
 
  I did not specify anything with respect to fam in my
  /usr/local/etc/smb.conf file.
  
  I have only noticed that a new directory has been created in /tmp/
  
  drwx--  2 root  wheel  512 Sep  4 08:45 /tmp/fam-root/
  
  This directory is empty and updated once and a while. I mean the
  directory is recreated at a later time. Attributes and owner do not
  change.
  
  In the clients log files I find the following:
  
  snip
  
  [2006/09/04 11:36:41, 0] smbd/notify_fam.c:fam_check_reconnect(136)
failed to connect to FAM service
Socket directory

[Samba] First time linux and samba user having 100% cpu usage by smbd.

2007-02-28 Thread Bryan Buss

I am running RedHat Enterprise Linux 4 update 2 on a HP ML110 G4 with 2
x 500GB SATA drives in RAID1 using the onboard HP SATA RAID.  

I have installed both the .rpm for SAMBA that came with RedHat
Enterprise Linux 4 and subsequently uninstalled and then installed the
current 3.0.24.

The problem that I am experiencing is that this server is to be used for
backup.  Two other windows servers on the network backup to a SAMBA
share through windows backup but after about 2GB on any transfer to the
SAMBA share the SMBD process (or processes) pause, SMB transfer stops
for about 5 seconds and then SMB transfer returns showing the process in
top as taking 99.9% and the transfer speed to in the backup goes down
severely (1/20th the speed of before the pause).

 

I am so very new to SAMBA and Linux in general that I can't say I have a
great idea even how to troubleshoot this...

I have verified that the symptoms occur when a backup is initiated from
two different windows servers (server 2k3) so I don't believe it is a
client related problem.  I have also tried copying a large file (4GB)
from the SAMBA share to a windows computer and this gave consistent
transfer speed.  Copying another (same file, different name) file from
the same windows computer to the SAMBA share resulted in the same pause
and wild running SMBD process as well as very cyclical transfer rates.

 

Are there log files that would be of assistance in troubleshooting this?

Any direction in where to look would help.

 

Thank you,

 

-Bryan

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba Authentication Trust Relationship Problem

2007-02-28 Thread S Mohan


Dear SAMBA Mailing List

I am using Samba samba-3.0.9-1.3E.10, OS Centos 4.4

We have got the problem. when I am issuing a net rpc trustdom list
command  some time it is showing ok and sometime it is showing error
message. and some time not. It is  creating a problem to authenticate other
Samba workstartion to PDC Server.

1) [EMAIL 
PROTECTED]javascript:open_compose_win('to=root%40pdcdelthismailbox=INBOX.sent-mail');samba]#
net rpc trustdom list
   Password:
  Trusted domains list:

CSWNS-1-5-21-4226246216-841769125-2743635684
CSWGS-1-5-21-2182516265-3119084770-3204029048

Trusting domains list:

[2007/02/27 07:47:43, 0] rpc_client/cli_pipe.c:rpc_api_pipe(435)
 cli_pipe: return critical error. Error was Call timed out: server did not
respond after 1 milliseconds
[2007/02/27 07:47:43, 0] utils/net_rpc.c:rpc_trustdom_list(4688)
 Couldn't enumerate accounts. Error was: NT_STATUS_UNSUCCESSFUL

2)
[EMAIL 
PROTECTED]javascript:open_compose_win('to=root%40pdcdelthismailbox=INBOX.sent-mail');samba]#
net rpc trustdom list
Password:
Could not connect to server PDCDEL
The username or password was not correct.
[2007/02/27 07:49:03, 0] utils/net_rpc.c:rpc_trustdom_list(4565)
 Couldn't connect to domain controller


3)
[EMAIL 
PROTECTED]javascript:open_compose_win('to=root%40pdcdelthismailbox=INBOX.sent-mail');samba]#
net rpc trustdom list
  Password:
  Trusted domains list:

CSWNS-1-5-21-4226246216-841769125-2743635684
CSWGS-1-5-21-2182516265-3119084770-3204029048

Trusting domains list:

CSWNS-1-5-21-4226246216-841769125-2743635684
CSWGS-1-5-21-2182516265-3119084770-3204029048
[EMAIL 
PROTECTED]javascript:open_compose_win('to=root%40pdcdelthismailbox=INBOX.sent-mail');samba]#
net rpc trustdom list
Password:
Trusted domains list:

CSWNS-1-5-21-4226246216-841769125-2743635684
CSWGS-1-5-21-2182516265-3119084770-3204029048

Trusting domains list:

CSWNS-1-5-21-4226246216-841769125-2743635684
CSWGS-1-5-21-2182516265-3119084770-3204029048


This is the log status (Output of /var/log/messages)
Feb 27 14:47:30 pdcdel samba(pam_unix)[12925]: session closed for user kth
Feb 27 14:47:30 pdcdel smbd[12913]: [2007/02/27 14:47:30, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:30 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:30 pdcdel smbd[12913]: [2007/02/27 14:47:30, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:30 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:30 pdcdel smbd[12913]: [2007/02/27 14:47:30, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:30 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:30 pdcdel smbd[12913]: [2007/02/27 14:47:30, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:30 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:30 pdcdel smbd[12913]: [2007/02/27 14:47:30, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:30 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:31 pdcdel smbd[12913]: [2007/02/27 14:47:31, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:31 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:31 pdcdel smbd[12913]: [2007/02/27 14:47:31, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:31 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:31 pdcdel smbd[12913]: [2007/02/27 14:47:31, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:31 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:31 pdcdel smbd[12913]: [2007/02/27 14:47:31, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:31 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:31 pdcdel smbd[12913]: [2007/02/27 14:47:31, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:31 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:31 pdcdel smbd[12913]: [2007/02/27 14:47:31, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:31 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!

Please Help.

--
S.Murli Mohan


There are only two ways to lead your life -- one, let things happen in
their own way and tolerate it,
and second, take responsibility to change it

Rang De Basanti.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] VFS module and C++

2007-02-28 Thread Roman Bouchner

Hi
I need to write a simple VFS module and I have to use C++ instead of C.
I took sample files, compiled it and everything does work. However, when
I compile it as C++, during the runtime I can see errors in the log:
Can't find a vfs module.
I am not experienced C or C++ programmer in linux environment, probably
I do some silly mistake, but I am really stucked now. I am using Samba
version 3.0.23a. Thanks for any help.
Roman

The fragment of the code looks like this:

extern C {
 #include includes.h
};

# skeleton methods, tuples are there...

extern C {
NTSTATUS init_module(void)
{
DEBUG(2,(Inicialization does work));
return smb_register_vfs(SMB_VFS_INTERFACE_VERSION, mytest_vfs,
skel_op_tuples);
}
};


And my Makefile:
CC  = gcc
CFLAGS  = -g -O2
CPPFLAGS=
LDFLAGS =
LDSHFLAGS   = -shared
INSTALLCMD  = /usr/bin/install -c
SAMBA_SOURCE= ../../source
SHLIBEXT= so
OBJEXT  = o
FLAGS   = $(CFLAGS) -Iinclude -I$(SAMBA_SOURCE)/include
-I$(SAMBA_SOURCE)/popt -I$(SAMBA_SOURCE)/smbwrapper  -I. $(CPPFLAGS)
-I$(SAMBA_SOURCE) -I/home/roman/ace/ACE_wrappers/TAO/tao -fPIC


prefix  = /usr/local/samba
libdir  = ${prefix}/lib

VFS_LIBDIR  = $(libdir)/vfs

# Auto target
default: $(patsubst %.cpp,%.$(SHLIBEXT),$(wildcard *.cpp))

# Pattern rules

%.$(SHLIBEXT): %.$(OBJEXT)
@echo Linking $@
@$(CC) $(LDSHFLAGS) $(LDFLAGS) -o $@ $

%.$(OBJEXT): %.cpp
@echo Compiling $
@$(CC) $(FLAGS) -c $


install: default
$(INSTALLCMD) -d $(VFS_LIBDIR)
$(INSTALLCMD) -m 755 *.$(SHLIBEXT) $(VFS_LIBDIR)

# Misc targets
clean:
rm -rf .libs
rm -f core *~ *% *.bak *.o *.$(SHLIBEXT)

distclean: clean
rm config.* Makefile

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] AW: groups with foreign users don't list members

2007-02-28 Thread Voelz Alexander

 

-Ursprüngliche Nachricht-
Von: Voelz Alexander 
Gesendet: Dienstag, 27. Februar 2007 17:39
An: samba@lists.samba.org
Betreff: WG: groups with foreign users don't list members

 

I have a Server, that joined an ADS. But we use multiple domains. My Server S 
is Member of the domain A. Now a wbinfo -u gives me all users in all domains, 
and wbinfo -g gives me all groups in all domains, as expected.

Now I have an ADS-group G that has members of domain A.


 getent group G

gives me the correct listing with the members. However, when I add a Member of 
another Domain A' to the group, a
 getent group G will give me just the group infos and not show the members.

Does anyone have an idea why this could be so? I am using 3.0.10-1.4E.9.

Thanks,
Alexander
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] groups with foreign users don't list members

2007-02-28 Thread Voelz Alexander

I have a Server, that joined an ADS. But we use multiple domains. My
Server S is Member of the domain A. Now a wbinfo -u gives me all users
in all domains, and wbinfo -g gives me all groups in all domains, as
expected.

Now I have an ADS-group G that has members of domain A.


 getent group G

gives me the correct listing with the members. However, when I add a
Member of another Domain A' to the group, a
 getent group G will give me just the group infos and not show the
members.

Does anyone have an idea why this could be so? I am using 3.0.10-1.4E.9.

Thanks,
Alexander
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] WG: groups with foreign users don't list members

2007-02-28 Thread Voelz Alexander

 

I have a Server, that joined an ADS. But we use multiple domains. My
Server S is Member of the domain A. Now a wbinfo -u gives me all users
in all domains, and wbinfo -g gives me all groups in all domains, as
expected.

Now I have an ADS-group G that has members of domain A.


 getent group G

gives me the correct listing with the members. However, when I add a
Member of another Domain A' to the group, a
 getent group G will give me just the group infos and not show the
members.

Does anyone have an idea why this could be so? I am using 3.0.10-1.4E.9.

Thanks,
Alexander
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Migrating Windows Machine Accounts fron Active Directory win2k

2007-02-28 Thread Ruben Tato

Hi, 

I'm migrating from a Windows2000 Active Directory Domain Master to
Samba. I copied the Domain SID from the windows Master to the Samba one,
everything works ok, but I want to do the following: 

I can join the machines to the Samba domain using a Domain Admin user,
and the Machines Accounts are created ok in the LDAP,  but what I want
to do is to set up the machine accounts in LDAP and be able to log into
the domain without rejoining the domain again from the workstations, I
mean, disconnect the Windows Master Browser and reaplace it with the
SAMBA Master Browser, without workstations modification, by creating
this accounts in LDAP.

I think is related with the sambaSamAccount ,etc atributes but I don't
know how to setup this values so the machine is able to join the domain
as thinking is been not Domain Master change.

Thanks!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] How to enable swat on SuSE10.2 x86_64?

2007-02-28 Thread John H Terpstra

On Tuesday 27 February 2007 14:23, M9. wrote:
 You mean by rereading the xinetd.d ?
 I do not know what to do than in the worsed case restartx, or end
 current session, and call upon localhost:904 (in this case..

 Do i miss something?

On OpenSUSE 10.2:

chkconfig swat on

will turn swat on for you. Also, you need to start xientd by executing:

chkconfig xinetd on

That should do it.

- John T.


 Gary Dale schreef:
  Have you re/started the SWAT service?
 
  M9. wrote:
  Well that was clear enough, i changed the port in the xinetd.d also, but
  i am not able to invoke swat.
  when trying to call localhost:904 (unassigned port) i get the message:
  can not connect to server on localhost 904
 
  Gary Dale schreef:
  Sorry if that's not clear. You need to edit /etc/services to give SWAT
  a different port number - see man swat and man services for
  information.
 
 
  Change it to an unassigned port.
 
  M9. wrote:
  Some things are not fine, like swat uses port 901/tcp..
  what if this port allready has been taken?
 
  omginitialrefs  900/udp# OMG Initial Refs
  #   Christian Callsen [EMAIL PROTECTED]
  swat901/tcp   # CONFLICT, not official assigned!
  smpnameres  901/tcp# SMPNAMERES
  smpnameres  901/udp# SMPNAMERES
 
  What to do in a case like this?
 
  M9. schreef:
  Tha manual at the box tells:
 
  In /etc/inetd.conf you should add a line like this:
 
   swat stream tcp nowait.400 root /usr/local/samba/sbin/swat swat
 
  Should this in this case be:
 
   swat stream tcp nowait.400 root /usr/sbin/swat ?
 
  M9. schreef:
  Correct, the executable is present there, thnx ;)
 
Roman Bigler schreef:
  Ok, still not completely sure what you mean, but this might help
  you:
  http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/SWAT.h
 tml#xinetd
 
 
  The location of the executable is usually /usr/sbin.
  On Feb. 27, 2007, at 17:52 , M9. wrote:
  Well, to invoke swat, you have to specify its location, this
  location i
  need to know..
 
  Roman Bigler schreef:
  You have to specify which files you mean. We don't have
  magic crystal balls, unfortunately.
 
 
  Hi,
 
  As a result of not being able to control the shares,
  (invisible network), i wanted to enable swat, but the files
  are not were they
  supposed to be
 
  Can anyone help me?

 --


 Have a nice day,

 M9.   Now, is the only time that exists.



   OS:  Linux 2.6.18.2-34-default x86_64
   Huidige gebruiker:  [EMAIL PROTECTED]
   Systeem:  openSUSE 10.2 (X86-64)
   KDE:  3.5.5 release 45.2

-- 
John H Terpstra, CTO
PrimaStasys Inc.
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, 2 Ed., ISBN: 0131882228
Samba-3 by Example, 2 Ed., ISBN: 0131882221X
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba Trust Relationship Problem

2007-02-28 Thread S Mohan


Dear SAMBA Mailing List

I am using Samba samba-3.0.9-1.3E.10, OS Centos 4.4

We have got the problem. when I am issuing a net rpc trustdom list
command  some time it is showing ok and sometime it is showing error
message. and some time not. It is  creating a problem to authenticate other
Samba workstartion to PDC Server.

1) [ [EMAIL PROTECTED] samba]# net rpc trustdom list
   Password:
  Trusted domains list:

CSWNS-1-5-21-4226246216-841769125-2743635684
CSWGS-1-5-21-2182516265-3119084770-3204029048

Trusting domains list:

[2007/02/27 07:47:43, 0] rpc_client/cli_pipe.c:rpc_api_pipe(435)
 cli_pipe: return critical error. Error was Call timed out: server did not
respond after 1 milliseconds
[2007/02/27 07:47:43, 0] utils/net_rpc.c:rpc_trustdom_list(4688)
 Couldn't enumerate accounts. Error was: NT_STATUS_UNSUCCESSFUL

2)   [ [EMAIL PROTECTED] samba]# net rpc trustdom list
Password:
Could not connect to server PDCDEL
The username or password was not correct.
[2007/02/27 07:49:03, 0] utils/net_rpc.c:rpc_trustdom_list(4565)
 Couldn't connect to domain controller


3)  [EMAIL PROTECTED] samba]# net rpc trustdom list
  Password:
  Trusted domains list:

CSWNS-1-5-21-4226246216-841769125-2743635684
CSWGS-1-5-21-2182516265-3119084770-3204029048

Trusting domains list:

CSWNS-1-5-21-4226246216-841769125-2743635684
CSWGS-1-5-21-2182516265-3119084770-3204029048
[ [EMAIL PROTECTED] samba]# net rpc trustdom list
Password:
Trusted domains list:

CSWNS-1-5-21-4226246216-841769125-2743635684
CSWGS-1-5-21-2182516265-3119084770-3204029048

Trusting domains list:

CSWNS-1-5-21-4226246216-841769125-2743635684
CSWGS-1-5-21-2182516265-3119084770-3204029048


This is the log status (Output of /var/log/messages)
Feb 27 14:47:30 pdcdel samba(pam_unix)[12925]: session closed for user kth
Feb 27 14:47:30 pdcdel smbd[12913]: [2007/02/27 14:47:30, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:30 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:30 pdcdel smbd[12913]: [2007/02/27 14:47:30, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:30 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:30 pdcdel smbd[12913]: [2007/02/27 14:47:30, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:30 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:30 pdcdel smbd[12913]: [2007/02/27 14:47:30, 0]
auth/auth_util.c:make_server_info_info3(1134)
Feb 27 14:47:30 pdcdel smbd[12913]:   make_server_info_info3: pdb_init_sam
failed!
Feb 27 14:47:30 pdcdel smbd[12913]: [2007/02/27 14:47:30, 0]
auth/auth_util.c:make_server_info_info3(1134)

Please Help.

--
S.Murli Mohan

--
S.Murli Mohan


There are only two ways to lead your life -- one, let things happen in
their own way and tolerate it,
and second, take responsibility to change it

Rang De Basanti.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.0.10 join domain

2007-02-28 Thread Daniel Davidson

I was looking around for more help on my problem and found this info on
a gentoo page even though I am using RHEL4 regarding the configuration
of ldap.  Anyone know what they are talking about by Field names here
must be all caps?

Dan


for database you can either use bdb or ldbm. bdb is generally
favoured by the openldap project as it is faster and more stable, it is
somewhat difficult to setup when your server is under high load. Hint:
create a DB_CONFIG file in your data directory (/var/lib/openldap-data/)
and read the berkeley db documentation at sleepycat.com. suffix is the
suffix for the root of our LDAP tree. The field names here must be all
caps, or Windows will turn up its nose when asked to join your domain,
with an error stating User account not found. It will be very
frustrating. directory designates the data directory for our LDAP
database. 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: hosts allow on smb.conf

2007-02-28 Thread Rashkae


Daniel Sung wrote:


Hi,

I have some query about the samba security, we are trying to setup 
remote map drive for vpn client, since this kind of client connection 
which using different IP address,  the only way we can do is to set 
'hosts allow' to nothing.  




If your VPN setup is anything like those I'm familiar with, your clients 
should be connecting with a 'virtual' tunneled IP address.  That's the 
IP you need hosts allow to allow, not the actual Internet address.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba + Quantum StorNext FS (SNFS)

2007-02-28 Thread Michael Gasch


hi,

thank you for your answer.
currently we run several clients on SNFS:
- MAC OSX
- WinXP 32
- RedHat EL 4

the linux machine exports one filesystem via samba.
now we want to upgrade to:

- more WinXP machines (64Bit, so we have to wait for v3.0)
- more linux/ samba servers, which export 10TB SNFS partitions each (5x)

in total there will be ~22 SNFS clients, five of them samba servers.

so far we did not experience any trouble with samba + SNFS on the one 
node. i'm afraid this could change with more samba servers without 
having any ideas why. that's why i'm posting, hoping for experiences 
with samba + SNFS in large enterprises. i think SNFS is not fully POSIX 
compliant or is there any document from ADIC which proves the opposite?


 But it is possible to export the same folders from both sides.
how would you accomplish this as this could break locking? or are you 
speaking about r/o exports?


thx!
micha


Peer-Joachim Koch wrote:

Hi,

we have STorNEXT together with samba and NFS.
All StorNEXT Clients have all 6 FS mounted. 
The samba server exporting different mount points.

But it is possible to export the same folders from both sides.

We have our whole file service on SNFS ( nearly 40TB) 12 Clients.

What kind of problem do you have ?

Bye, Peer 


_
Max-Planck-Institut fuer Biogeochemie
Dr. Peer-Joachim Koch
Hans-Knöll Str.10Telefon: ++49 3641 57-6705
D-07745 Jena Telefax: ++49 3641 57-7705

Am Mi 28.02.2007 16:05 schrieb Michael Gasch [EMAIL PROTECTED]:


hi,

more a general question: does anyone know about problems running samba
on a clustered filesystem like Quantum/ ADIC SNFS???

i know, i´m not allowed to export the same FS/mountpoint on different
samba servers. i´m more interested in POSIX conformity, locking
issues, etc.

may be somebody already runs SNFS and samba in a large environment?!?!

thx for any help!
micha
--
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT Staff)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
   49 (0)341 - 3550 374

Fax:   49 (0)341 - 3550 399

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-02-28 Thread Harald Strack

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Greetings!

I run samba 3 since several years in a domain with more than 1 users
and multiple departments. We have a central Domain running a PDC and
some domains in the departments. The domains in the
departments are connected to the central domain via interdomain trusts.
All PDCs are samba 3 using the same LDAP backends (very fast SunONE LDAP
infrastructure). This way the administrators of the
departments are able to handle the profiles of their users and
workstations locally while the user database is in the central domain:

Picture:

Central PDC  -- trust --- (1..n) department PDCs

This works quite well. But their is a really serious problem how
winbindd in the domains of the departments handles logons /
authentication:  concurrent logons are serial processed, not parallel!

How I understand the changelog of samba this was the desired behavior up
to samba 3.0.14a. From samba 3.0.20 onwards winbindd was reimplemented
to work asynchronly, so it should be able to process
logons now in parallel.

I tested it with the actual samba 3.0.24 but it is still very slow and a
lot of requests are ending up in timeouts. When I look in the logs of
winbindd I see that it accepts all connections (pipes)
from local samba processes but uses still only one TCP connection to the
central Domain to process the SID to uid/gid mappings.

Picture of the situation:

Central PDC (smbd) --- TCP  ---  department PDC (winbind) --  (1..n)
smbd -- 1..n Workstations / Logons

The TCP connection between the central PDC and the department PDC
(winbindd) seems to be still a bottleneck. Is this right? What can I do?
Any help or comment on this issue is very very welcome!

However I have this problem since a long time and I actually use a samba
version where I patched out all SID/gid mappings via winbind. This bad
hack speeds up everything so that up to about 40
concurrent logins are possible but that's no long-term solution...


Best regards

Harald Strack
  

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFF5fEvczpSApoeLSQRAu2FAKDkwVYD5dHt6vsmsg9snEArg4ihygCfYx/4
4AT6PVOqi/4a41ROT4mIv9g=
=sOCv
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-02-28 Thread Volker Lendecke

On Wed, Feb 28, 2007 at 10:16:32PM +0100, Harald Strack wrote:
 The TCP connection between the central PDC and the department PDC
 (winbindd) seems to be still a bottleneck. Is this right? What can I do?
 Any help or comment on this issue is very very welcome!

Yes. The async stuff in Winbind is to enable parallel
operations to different trusted domains. Each domain is
serialized still.

 However I have this problem since a long time and I actually use a samba
 version where I patched out all SID/gid mappings via winbind. This bad
 hack speeds up everything so that up to about 40
 concurrent logins are possible but that's no long-term solution...

So the login as such (the SamLogon call verifying the user's
pw) is not your problem, it's the sid2gid calls that follow?

Hmm. Why does a trusting call the central DC for these? For
the SamLogon calls yes, but the sid2gid stuff? Or do you
mean sid2name? There's something I don't get here.

Volker


pgpUXmvvUcUiN.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] VFS module and C++

2007-02-28 Thread Laurent Pinchart

Hi Roman,

 I need to write a simple VFS module and I have to use C++ instead of C.
 I took sample files, compiled it and everything does work. However, when
 I compile it as C++, during the runtime I can see errors in the log:
 Can't find a vfs module.
 I am not experienced C or C++ programmer in linux environment, probably
 I do some silly mistake, but I am really stucked now. I am using Samba
 version 3.0.23a. Thanks for any help.
 Roman

 The fragment of the code looks like this:

 extern C {
  #include includes.h
 };

 # skeleton methods, tuples are there...

 extern C {
 NTSTATUS init_module(void)
 {
 DEBUG(2,(Inicialization does work));
 return smb_register_vfs(SMB_VFS_INTERFACE_VERSION, mytest_vfs,
 skel_op_tuples);
 }
 };


 And my Makefile:
 CC  = gcc

This doesn't look good. You need to use g++ to compile C++.

 CFLAGS  = -g -O2
 CPPFLAGS=
 LDFLAGS =
 LDSHFLAGS   = -shared
 INSTALLCMD  = /usr/bin/install -c
 SAMBA_SOURCE= ../../source
 SHLIBEXT= so
 OBJEXT  = o
 FLAGS   = $(CFLAGS) -Iinclude -I$(SAMBA_SOURCE)/include
 -I$(SAMBA_SOURCE)/popt -I$(SAMBA_SOURCE)/smbwrapper  -I. $(CPPFLAGS)
 -I$(SAMBA_SOURCE) -I/home/roman/ace/ACE_wrappers/TAO/tao -fPIC


 prefix  = /usr/local/samba
 libdir  = ${prefix}/lib

 VFS_LIBDIR  = $(libdir)/vfs

 # Auto target
 default: $(patsubst %.cpp,%.$(SHLIBEXT),$(wildcard *.cpp))

 # Pattern rules

 %.$(SHLIBEXT): %.$(OBJEXT)
 @echo Linking $@
 @$(CC) $(LDSHFLAGS) $(LDFLAGS) -o $@ $

 %.$(OBJEXT): %.cpp
 @echo Compiling $
 @$(CC) $(FLAGS) -c $


 install: default
 $(INSTALLCMD) -d $(VFS_LIBDIR)
 $(INSTALLCMD) -m 755 *.$(SHLIBEXT) $(VFS_LIBDIR)

 # Misc targets
 clean:
 rm -rf .libs
 rm -f core *~ *% *.bak *.o *.$(SHLIBEXT)

 distclean: clean
 rm config.* Makefile

Laurent Pinchart
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Winbindd has still bottlenecks when used with interdomain trusts.

2007-02-28 Thread Harald Strack

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Good evening Volker,

great to get an answer from YOU!


 Yes. The async stuff in Winbind is to enable parallel
 operations to different trusted domains. Each domain is
 serialized still.

I understand. Hm, that's bad for me..
 So the login as such (the SamLogon call verifying the user's
 pw) is not your problem, it's the sid2gid calls that follow?

 Hmm. Why does a trusting call the central DC for these? For
 the SamLogon calls yes, but the sid2gid stuff? Or do you
 mean sid2name? There's something I don't get here.

That's the patch for samba 3.0.14a:

- --- ./source/sam/idmap_ldap.c   2005-03-11 14:47:05.0 +0100
+++ ../samba-3.0.14a-p2/source/sam/idmap_ldap.c 2005-11-28
23:41:15.0 +0100
@@ -497,7 +497,8 @@
if ( id_type  ID_USERID )
type = get_attr_key2string( idpool_attr_list,
LDAP_ATTR_UIDNUMBER );
else
- -   type = get_attr_key2string( idpool_attr_list,
LDAP_ATTR_GIDNUMBER );
+   return ret;
+   //type = get_attr_key2string( idpool_attr_list,
LDAP_ATTR_GIDNUMBER );

pstrcpy( suffix, lp_ldap_idmap_suffix() );
pstr_sprintf(filter, ((objectClass=%s)(%s=%d)),


As you see, it was a workaround for samba before you implemented the new
winbinds, just to speed up everything to unblock winbind as fast as
possible.

With samba 3.0.24 the problem may be that we have only one worker child
for a domain as I have just figured out in winbindd_sid.c:idmap_child(void).

To illustrate the actual problem, I just added a debug statement to


winbindd_dual.c:schedule_async_request():


static void schedule_async_request(struct winbindd_child *child)

{

struct winbindd_async_request *request = child-requests;


if (request == NULL) {

return;

}


if (child-event.flags != 0) {

DEBUG(0, (BUSY!!\n)); -- DEBUG STATEMENT

return;/* Busy */

}


if ((child-pid == 0)  (!fork_domain_child(child))) {

/* Cancel all outstanding requests */


while (request != NULL) {

/* request might be free'd in the continuation */

struct winbindd_async_request *next = request-next;

request-continuation(request-private_data, False);

request = next;

}

return;

}


setup_async_write(child-event, request-request,

  sizeof(*request-request),

  async_main_request_sent, request);


talloc_destroy(child-mem_ctx);

return;

}


Then, when I simulate some logins via:

#!/bin/sh

max=10

i=1

while (true); do

echo XP logon # $i
#The netlogon
echo quit | smbclient -U CENTRAL\strack%pw //dptdpdc/netlogon 
#The profiles
echo quit | smbclient -U CENTRAL\strack%pw //dptdpdc/profiles 
#another netlogon
echo quit | smbclient -U CENTRAL\strack%pw //dptdpdc/netlogon 
#a common share
echo quit | smbclient -U CENTRAL\strack%pw //dptdpdc/ati 

if [ $i -gt $max ]; then

echo Performed $i XP logins

sleep 1

exit

fi

i=`expr $i + 1`

done


I get the following output in dptdpdc's logfile:

[2007/02/28 23:36:04, 0]
nsswitch/winbindd_dual.c:schedule_async_request(220)

  BUSY!!

[2007/02/28 23:36:04, 0]
nsswitch/winbindd_dual.c:schedule_async_request(220)

  BUSY!!

[2007/02/28 23:36:05, 0]
nsswitch/winbindd_dual.c:schedule_async_request(220)

  BUSY!!

[2007/02/28 23:36:05, 0]
nsswitch/winbindd_dual.c:schedule_async_request(220)

  BUSY!!

[2007/02/28 23:36:05, 0]
nsswitch/winbindd_dual.c:schedule_async_request(220)

  BUSY!!

[2007/02/28 23:36:06, 0]
nsswitch/winbindd_dual.c:schedule_async_request(220)

  BUSY!!

[2007/02/28 23:36:06, 0]
nsswitch/winbindd_dual.c:schedule_async_request(220)

  BUSY!!

[2007/02/28 23:36:06, 0]
nsswitch/winbindd_dual.c:schedule_async_request(220)

  BUSY!!


And some smbclient calls are showing timeouts:

tree connect failed: Call timed out: server did not respond after 2
milliseconds

tree connect failed: Call timed out: server did not respond after 2
milliseconds


The worker is simple too busy... Is there a possibility to fork multiple
workers
for a domain trust? E.g. sth. like this in

winbindd_sid.c:


#define __max_idmap_childs 50

static struct winbindd_child static_idmap_child;

//static struct winbindd_child static_idmap_child[__max_idmap_childs];

static int winbindd_idmap_child_index=0;


void init_idmap_child(void)

{

int i=0;

for (i=0; i__max_idmap_childs; i++) {

DEBUG(0, (Setting up domainchild %d\n,i));

setup_domain_child(NULL, static_idmap_child[i], idmap);

}

   // setup_domain_child(NULL, static_idmap_child, idmap);

}


struct winbindd_child *idmap_child(void)

{

DEBUG(0, (RETURNING WORKER CHILD  %d\n,winbindd_idmap_child_index));

return static_idmap_child[winbindd_idmap_child_index++ %
__max_idmap_childs];

//return static_idmap_child;

}

I only had a 15 minutes look at the code and I know the idea here is

[Samba] winbind design query: why does ntlm_auth work when the same auth via smbd fails?

2007-02-28 Thread Jason Haar

I have an issue with being unable to successfully allow any user from
trusted domains to connect to an ADS Samba-3.0.24 server (joined via
kinit  net ads join)

Our AD (Win2K3 based) domain is OURDOM, and Samba is a member of it.
Access from OURDOM accounts is 100% fine. However (2-way trusted)
username TDOM\user1 cannot connect to an open share on it, and yet
ntlm_auth --username=user1 --domain=TDOM successfully authenticates!

I have seen this several times before under different Samba releases,
and have seen others report it on this list too. Typically the logging
shows the smbd connection coming in as [TDOM]\user1 - but suddenly the
domain gets dropped, and user1 is authenticated - incorrectly -
apparently against the OURDOM domain (which will obviously fail)

Can someone explain why ntlm_auth could possibly work (it implies
winbind is totally happy?), whereas smbd should return Access Denied?

And yes, allow trusted domains = Yes is set.

Thanks!

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] migrate users to ldap

2007-02-28 Thread Markus Krause


thanks for your answer!

Zitat von Felipe Augusto van de Wiel [EMAIL PROTECTED]:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 02/27/2007 08:16 PM, Markus Krause wrote:

Thank you for your answer.
I actually did not point out exactly enough what i want to do,
sorry for that ...

I read these postings and also some sections in the samba howto
and several descriptions on the net, but i understand all these
in that way, that the samba server is reconfigured to use ldap
and stays there. at the moment we are some time away from
finally migrating all samba accounts, which are currently stored
in smbpasswd, to ldap and it is no option to take down and
reconfigure samba even for a short time.


Hmmm, sorry, but I can see how you want to accomplish that.
You are changing the backend, you need to tell samba about this.
well, that exactly is the point, i do _not_ want to or better simply  
_cannot_ change the backend at the moment, i just want/need a snapshot  
of the current samba accounts in smbpasswd and _copy_ them in ldap.  
the samba server should not even know about that! the problem is that  
we can not switch off our samba server for even some minutes (at least  
without a notice several days in advance!), we have several terabytes  
of data, about 1500 accounts, and as the most of them are scientists  
and quite a lot are even working nights and weekends so there is  
actually no time the (samba) fileserver is not in (heavy) use...
and to make some serious testing on reliablity (and a lot other  
things) i need just a copy of all accounts in ldap.



so what i in fact need is a way to get a snapshot of the current
accounts and copy them into ldap, the samba server should/can/must
not be touched (i mean start/stop/reconfigure etc.) in any way
during this process. can this be done ?


I'm not sure I _really_ understood what you want, but
using some of the famous migration script, you can create your
new LDAP database in a few minutes, them you need to tell
Samba to start using the new backend (LDAP) instead of the old
backend (smbpasswd file).
volker gave some hints on how to do this (using pdbedit and a separate  
config file) and i'll try that as soon i have compiled a version of  
pdbedit with ldapsam support included ... as soon i got this done i'll  
report in case someone else may search the archives ;-)


regards
   markus


+-+
| Markus Krause, Mogli-Soft   |
| Support for Mac OS X, Webmail/Horde, LDAP, RADIUS   |
| by order of the |
|Computing Center of the Max-Planck-Institute of Biochemistry |
+++
| E-Mail: [EMAIL PROTECTED]  |  Tel.: 089 - 89 40 85 99   |
| [EMAIL PROTECTED]  |  Fax.: 089 - 89 40 85 98   |
|  Skype: markus.krause  | iChat: [EMAIL PROTECTED]   |
+++



--
 This message was sent using https://webmail2.biochem.mpg.de
If you encounter any problems please report to [EMAIL PROTECTED]


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3.0.24 ported to OS/2 - a couple of problems

2007-02-28 Thread Paul Smedley

Hi all,

I've recently managed to compile Samba v3.0.24 for OS/2 and have 
debugged most of the issues.

The positive is that relatively few source changes were required to 
get the daemon working, however, having said that, there are two 
problems that I'm still having trouble with.

1) smbpasswd is generating a broken password - so password protected 
clients can't connect.

eg. smbpasswd -a psmedley - with 'password' entered as the password 
puts the following into private/smbpasswd
psmedley:1001:E52CAC67419A9A22B0498ECA57B8E5AF:99BBC66292358CB847E4B0F
8F741A01D:[U  ]:LCT-45E64927:

User psmedley can't connect with password of 'password'

sambapasswords.py from 
http://www.cdf.toronto.edu/~agenkin/py/index.pyc/software indicates 
that the password hash should be:
[E:\python25]python.exe sambapasswords.py
NT MD4 hash: password - 8846F7EAEE8FB117AD06BDD830B7586C
LanMan hash: password - E52CAC67419A9A224A3B108F3FA6CB6D

2) Files with a german character on a share do not show the german 
character, but the character gets replaced with an _

Samba log shows things like:
[2007/02/28 07:50:34, 3] lib/charcnv.c:convert_string_internal(243)
  convert_string_internal: Conversion error: Incomplete multibyte
sequence(uterungen.pdf)

Any ideas on the above two problems?
-- 
Cheers,

Paul.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Wide open (security = share) w/ printers including driver download success story

2007-02-28 Thread malk

Hi-

I wanted to share my experience w/ the list in getting a completely wide open
file and printer (w/ automagic driver download) with security = share setup
working.

My requirement was to setup a server for a small office of XP boxes w/ file and
printer sharing and had always done samba as domain controller w/ full logons
etc.  No need for any security in this setup and I wanted to have the nice
driver download stuff.  Here is how I did it.

Fedora Core 6 install w/ Samba 3.0.24-1.fc6 packages (samba, samba-common, and
samba-client).  cups-1.2.4-9 for printing support.

Setup cups for raw printing first

/etc/cups/mime.types already had application/octet-stream enabled
(uncommented) in this setup.

/etc/cups/mime.convs -- had to uncomment the application/octet-stream in
this file.  restarted cups.

I had 3 printers, two on the network w/ static IP addrs, and one USB.  I like
to just add the queues w/ lpadmin since it's cut and dry and quick (I'm a
command line kind of guy).  Printers are a Brother DCP8045D, Brother MFC8840D,
and HP color laserjet 3500 (the USB guy).  Added raw queues this way:

lpadmin -p brother-1 -v lpd://brother-1/raw -E -m raw
lpadmin -p brother-2 -v lpd://brother-2/raw -E -m raw
lpadmin -p hp-lj3500 -v usb:/dev/usb/lp0 -E -m raw

In my setup, brother-1 and brother-2 have entries in DNS pointing to printer
IP addrs.  Hence the names in lpd:// instead of IP addrs.

Directory permissions for the one data share and printer driver area:

mkdir -p /shares/data
chown nobody.nobody /shares/data
chmod 775 /shares/data

mkdir -p /etc/samba/drivers/W32X86
mkdir -p /etc/samba/drivers/WIN40
chown -R nobody.nobody /etc/samba/drivers
chmod 775 /etc/samba/drivers

smb.conf file is attached last for completeness.

I ran into trouble trying to upload drivers w/ the add printer wizard because
unix user nobody was not a printer admin.  I tried the printer admin =
parameter, but it's deprecated and didn't allow the Driver button to be
un-greyed in the add printer wizard.  The key to getting this working was the
following:

Setup a password for the samba root user.  I'm using the passdb backend in this
case as it's modern compared to smbpasswd file, easier than ldap, and automagic
for a simple setup like this:

pdbedit -L

(make sure no root user in there -- if there is, use smbpasswd root to set
root's password if you don't know it (perhaps your distro setup some default)).
you'll need a working root samba user account for the next steps.

If you don't have a samba root user (which was my case on FC6), add one and set
root's password:

pdbedit -a -u root
password: samba root user password

Now tell the samba setup that the Everyone windows group (imagine this samba
server being a windows box w/ it's personal (local in windoze terms) Everyone
group you want to modify) has the SePrintOperatorPrivilege set -- you can first
list the rights and see initially Everyone has nothing:

net rpc rights list accounts
Password:  (use root samba user password)

Now grant Everyone SePrintOperatorPrivilege:

net rpc rights grant Everyone SePrintOperatorPrivilege
Password: (use root samba user password)

Use the above command to list the rights again and verify that Everyone has
printer operator privileges.  Now You'll be able to download drivers on a
windows box that is not a domain member or anything else special.  Browse the
server:

start - run, and type \\srgolf-srv

Go into the printers and faxes folder
Right-click and properties on one of the printers and answer NO when asked
to install a driver for the printer since your windows box knows the samba
server doesn't yet have a driver.

Then go into the tab where it shows and empty driver list and you can click
the Driver button to bring up the add printer wizard.

When you select the proper inf file for your printer, it will download the
driver into the samba server's print$ share instead of the local computer
(you'll be able to see this as it's copying files to know you've got it right
-- if it copies files to c:\windows\system or system32 or whatever, you have
something wrong).  Then you can do the automagic right-click and connect on
each windows computer to automatically download the samba server provided
printer drivers.

I trained the folks at the golf course to access the server using

start - run, and type \\srgolf-srv

Then they just map a network drive for the data share, and connect to the 3
printers and queue to them, delete jobs, pause printing, etc. etc.

The only negative thing about this setup is that each job is always nobody 
and all the files are owned by nobody, but this is the whole point of a
security = share setup.

I hope this helps save someone time who might be trying to accomplish the same
setup w/ a recent samba 3.0.XX setup.  The golf course people are very happy
with their very inexpensive server (about $400.00 w/ 250 gigs of RAID-1
software raid, VPN w/ PPTPd, https and http w/ apache, squirellmail / dovecot /
 postfix for e-mail,

Re: [Samba] getent returns HEX number instead of username

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Stephen Carville wrote:
 Not for all users but for some.
 
 I'm using samba 3.0.20 running on Fedora Core 3.  Security = ADS,
 winbind works and getent passwd returns local unix accounts plus the
 domain accounts as expected.
 
 It also returns a lot of entries like:
 
 6811ff15281f4d19bdc:x:18004:1:Anel Susana
 Esquivel:/export/private/6811ff15281f4d19bdc:/sbin/nologin
 
 I suspect these are accounts in a trusted domain.  AFAIK, they are not
 causing any problems but I'm wondering if this is normal (and harmless)
 or an indication I messed up something.  Could the owner of the hex
 numbered account access any shares on my server?  Ideally no one outside
 the domain designated in the smb.conf file should be able to access any
 shares on this server.

Never seen that.  Sorry.  What is the name supposed to be?




cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF5mVBIR7qMdg1EfYRAmw5AJwPlYC8a5p+ky/kn02atna00VMBswCggJdC
nmOXY3JX3MZFgSzfYBfXDu0=
=l+9s
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] What is happening here?

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi those who are interrested,

As i wrote a bugreport on this, thought it might be better to create an
attachment, and put the zipped(2.2MB) smbd.log there.
I hope that is ok?

Bug # 246770

M9. schreef:
 
 
 Volker Lendecke schreef:
 On Wed, Feb 28, 2007 at 07:47:44PM +0100, M9. wrote:
 This gives a lot of info, that can point someone who knows what it means
  in the right direction.
 The server side is MUCH more interesting.
 
 Set debug level = 10 in the [global] section of your
 smb.conf and send the smbd log file which might reside in
 /var/log/samba/log.smbd depending on your system.
 
 Volker
 
 Send the logfile were? To this list?
 

- --


Have a nice day,

M9.   Now, is the only time that exists.



  OS:  Linux 2.6.18.2-34-default x86_64
  Huidige gebruiker:  [EMAIL PROTECTED]
  Systeem:  openSUSE 10.2 (X86-64)
  KDE:  3.5.5 release 45.2
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFF5oboX5/X5X6LpDgRAkYWAJ41kVcN3B/o9TSsCwJi8dhnW0Ja3ACffYIo
Fhd0GIVVwz53hfNRG/JO/tA=
=eJNN
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

svn commit: samba r21581 - in branches: SAMBA_3_0/source/include SAMBA_3_0/source/libsmb SAMBA_3_0_25/source/include SAMBA_3_0_25/source/libsmb

2007-02-28 Thread vlendec

Author: vlendec
Date: 2007-02-28 09:04:05 + (Wed, 28 Feb 2007)
New Revision: 21581

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21581

Log:
Add an error code I just got
Modified:
   branches/SAMBA_3_0/source/include/nterr.h
   branches/SAMBA_3_0/source/libsmb/nterr.c
   branches/SAMBA_3_0_25/source/include/nterr.h
   branches/SAMBA_3_0_25/source/libsmb/nterr.c


Changeset:
Modified: branches/SAMBA_3_0/source/include/nterr.h
===
--- branches/SAMBA_3_0/source/include/nterr.h   2007-02-28 02:06:17 UTC (rev 
21580)
+++ branches/SAMBA_3_0/source/include/nterr.h   2007-02-28 09:04:05 UTC (rev 
21581)
@@ -559,6 +559,7 @@
 #define NT_STATUS_TOO_MANY_LINKS NT_STATUS(0xC000 | 0x0265)
 #define NT_STATUS_QUOTA_LIST_INCONSISTENT NT_STATUS(0xC000 | 0x0266)
 #define NT_STATUS_FILE_IS_OFFLINE NT_STATUS(0xC000 | 0x0267)
+#define NT_STATUS_DS_NO_MORE_RIDS NT_STATUS(0xC000 | 0x02a8)
 #define NT_STATUS_NOT_A_REPARSE_POINT NT_STATUS(0xC000 | 0x0275)
 #define NT_STATUS_NO_SUCH_JOB NT_STATUS(0xC000 | 0xEDE) /* scheduler */
 #define NT_STATUS_RPC_PROTSEQ_NOT_SUPPORTED NT_STATUS(0xC000 | 0x20004)

Modified: branches/SAMBA_3_0/source/libsmb/nterr.c
===
--- branches/SAMBA_3_0/source/libsmb/nterr.c2007-02-28 02:06:17 UTC (rev 
21580)
+++ branches/SAMBA_3_0/source/libsmb/nterr.c2007-02-28 09:04:05 UTC (rev 
21581)
@@ -533,6 +533,7 @@
{ NT_STATUS_TOO_MANY_LINKS, NT_STATUS_TOO_MANY_LINKS },
{ NT_STATUS_QUOTA_LIST_INCONSISTENT, 
NT_STATUS_QUOTA_LIST_INCONSISTENT },
{ NT_STATUS_FILE_IS_OFFLINE, NT_STATUS_FILE_IS_OFFLINE },
+   { NT_STATUS_DS_NO_MORE_RIDS, NT_STATUS_DS_NO_MORE_RIDS },
{ NT_STATUS_NOT_A_REPARSE_POINT, NT_STATUS_NOT_A_REPARSE_POINT },
 { NT_STATUS_NO_MORE_ENTRIES, NT_STATUS_NO_MORE_ENTRIES },
{ STATUS_MORE_ENTRIES, STATUS_MORE_ENTRIES },

Modified: branches/SAMBA_3_0_25/source/include/nterr.h
===
--- branches/SAMBA_3_0_25/source/include/nterr.h2007-02-28 02:06:17 UTC 
(rev 21580)
+++ branches/SAMBA_3_0_25/source/include/nterr.h2007-02-28 09:04:05 UTC 
(rev 21581)
@@ -559,6 +559,7 @@
 #define NT_STATUS_TOO_MANY_LINKS NT_STATUS(0xC000 | 0x0265)
 #define NT_STATUS_QUOTA_LIST_INCONSISTENT NT_STATUS(0xC000 | 0x0266)
 #define NT_STATUS_FILE_IS_OFFLINE NT_STATUS(0xC000 | 0x0267)
+#define NT_STATUS_DS_NO_MORE_RIDS NT_STATUS(0xC000 | 0x02a8)
 #define NT_STATUS_NOT_A_REPARSE_POINT NT_STATUS(0xC000 | 0x0275)
 #define NT_STATUS_NO_SUCH_JOB NT_STATUS(0xC000 | 0xEDE) /* scheduler */
 #define NT_STATUS_RPC_PROTSEQ_NOT_SUPPORTED NT_STATUS(0xC000 | 0x20004)

Modified: branches/SAMBA_3_0_25/source/libsmb/nterr.c
===
--- branches/SAMBA_3_0_25/source/libsmb/nterr.c 2007-02-28 02:06:17 UTC (rev 
21580)
+++ branches/SAMBA_3_0_25/source/libsmb/nterr.c 2007-02-28 09:04:05 UTC (rev 
21581)
@@ -533,6 +533,7 @@
{ NT_STATUS_TOO_MANY_LINKS, NT_STATUS_TOO_MANY_LINKS },
{ NT_STATUS_QUOTA_LIST_INCONSISTENT, 
NT_STATUS_QUOTA_LIST_INCONSISTENT },
{ NT_STATUS_FILE_IS_OFFLINE, NT_STATUS_FILE_IS_OFFLINE },
+   { NT_STATUS_DS_NO_MORE_RIDS, NT_STATUS_DS_NO_MORE_RIDS },
{ NT_STATUS_NOT_A_REPARSE_POINT, NT_STATUS_NOT_A_REPARSE_POINT },
 { NT_STATUS_NO_MORE_ENTRIES, NT_STATUS_NO_MORE_ENTRIES },
{ STATUS_MORE_ENTRIES, STATUS_MORE_ENTRIES },

Re: Rev 11611: Use utility function for naming pull/push/print functions. in file:///home/jelmer/bzr.samba/SAMBA_4_0/

2007-02-28 Thread Stefan (metze) Metzmacher

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jelmer Vernooij schrieb:
 At file:///home/jelmer/bzr.samba/SAMBA_4_0/
 
 
 revno: 11611
 revision-id: [EMAIL PROTECTED]
 parent: svn-v2:[EMAIL PROTECTED]
 committer: Jelmer Vernooij [EMAIL PROTECTED]
 branch nick: SAMBA_4_0
 timestamp: Wed 2007-02-28 02:47:56 +0100
 message:
   Use utility function for naming pull/push/print functions.
 modified:
   source/pidl/README svn-v2:[EMAIL PROTECTED]
   source/pidl/lib/Parse/Pidl/Samba4/NDR/Parser.pm svn-v2:[EMAIL PROTECTED]
   source/pidl/tests/ndr_tagtype.pl svn-v2:[EMAIL PROTECTED]
   source/pidl/tests/samba-ndr.pl svn-v2:[EMAIL PROTECTED]
 === modified file 'source/pidl/README'
 --- a/source/pidl/README  2006-07-05 20:49:50 +
 +++ b/source/pidl/README  2007-02-28 01:47:56 +
 @@ -4,7 +4,7 @@
  compiler for Samba 4. 
  
  The main sources for pidl are available by Subversion on
 -svn+ssh://svnanon.samba.org/samba/branches/SAMBA_4_0/source/pidl
 +svn://svn.samba.org/samba/branches/SAMBA_4_0/source/pidl

this should be:
svn://svnanon.samba.org/samba/branches/SAMBA_4_0/source/pidl

:-)

metze
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFF5U1Jm70gjA5TCD8RAkzsAJ0f2GpSfNYbzKBc8Kcy1MrZZtshwQCgkz39
OPhGG5P1T5mr+Hz5TApi1OY=
=qJhA
-END PGP SIGNATURE-

svn commit: samba r21582 - in branches/SAMBA_4_0: . source/build/m4

2007-02-28 Thread jelmer

Author: jelmer
Date: 2007-02-28 10:52:06 + (Wed, 28 Feb 2007)
New Revision: 21582

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21582

Log:
Allow modification of LDFLAGS
Modified:
   branches/SAMBA_4_0/
   branches/SAMBA_4_0/source/build/m4/check_ld.m4


Changeset:

Property changes on: branches/SAMBA_4_0
___
Name: bzr:merge
   - [EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]

   + [EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]


Modified: branches/SAMBA_4_0/source/build/m4/check_ld.m4
===
--- branches/SAMBA_4_0/source/build/m4/check_ld.m4  2007-02-28 09:04:05 UTC 
(rev 21581)
+++ branches/SAMBA_4_0/source/build/m4/check_ld.m4  2007-02-28 10:52:06 UTC 
(rev 21582)
@@ -30,7 +30,6 @@

svn commit: samba r21583 - in branches/SAMBA_4_0/source/setup: .

Author: metze
Date: 2007-02-28 12:02:59 + (Wed, 28 Feb 2007)
New Revision: 21583

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21583

Log:
add missing CN=

metze
Modified:
   branches/SAMBA_4_0/source/setup/provision_rootdse_add.ldif


Changeset:
Modified: branches/SAMBA_4_0/source/setup/provision_rootdse_add.ldif
===
--- branches/SAMBA_4_0/source/setup/provision_rootdse_add.ldif  2007-02-28 
10:52:06 UTC (rev 21582)
+++ branches/SAMBA_4_0/source/setup/provision_rootdse_add.ldif  2007-02-28 
12:02:59 UTC (rev 21583)
@@ -9,7 +9,7 @@
 supportedLDAPVersion: 3
 dnsHostName: ${DNSNAME}
 ldapServiceName: ${DNSDOMAIN}:[EMAIL PROTECTED]
-serverName: CN=${NETBIOSNAME},CN=Servers,${DEFAULTSITE},CN=Sites,${CONFIGDN}
+serverName: CN=${NETBIOSNAME},CN=Servers,CN=${DEFAULTSITE},CN=Sites,${CONFIGDN}
 domainFunctionality: 0
 forestFunctionality: 0
 domainControllerFunctionality: 2

svn commit: samba r21584 - in branches/SAMBA_4_0: . source/librpc/idl source/pidl source/pidl/lib/Parse/Pidl source/pidl/lib/Parse/Pidl/Samba4 source/pidl/tests

2007-02-28 Thread jelmer

Author: jelmer
Date: 2007-02-28 13:25:53 + (Wed, 28 Feb 2007)
New Revision: 21584

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21584

Log:
Support for tagged types has landed!

It's now possible to use struct foo without a typedef in IDL files.

echo_info4 is the first type that's been converted.

Modified:
   branches/SAMBA_4_0/
   branches/SAMBA_4_0/source/librpc/idl/echo.idl
   branches/SAMBA_4_0/source/pidl/README
   branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/NDR.pm
   branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba4/EJS.pm
   branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba4/Header.pm
   branches/SAMBA_4_0/source/pidl/tests/header.pl
   branches/SAMBA_4_0/source/pidl/tests/ndr.pl
   branches/SAMBA_4_0/source/pidl/tests/typelist.pl


Changeset:
Sorry, the patch is too large (520 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21584

svn commit: samba r21585 - in branches/SAMBA_3_0_RELEASE: examples/LDAP examples/VFS examples/libsmbclient examples/misc examples/pdb packaging/Debian/debian-sarge packaging/Debian/debian-woody packag

Author: jerry
Date: 2007-02-28 14:35:26 + (Wed, 28 Feb 2007)
New Revision: 21585

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21585

Log:
Start syncing the monster that will become 3.0.25pre1
Still todo:

* release notes
* few minor outstanding patches
* additional idmap man pages


Added:
   branches/SAMBA_3_0_RELEASE/examples/misc/cldap.pl
   branches/SAMBA_3_0_RELEASE/source/groupdb/mapping.h
   branches/SAMBA_3_0_RELEASE/source/groupdb/mapping_tdb.c
   branches/SAMBA_3_0_RELEASE/source/include/ads_protos.h
   branches/SAMBA_3_0_RELEASE/source/include/core.h
   branches/SAMBA_3_0_RELEASE/source/include/core/
   branches/SAMBA_3_0_RELEASE/source/include/core/nterr.h
   branches/SAMBA_3_0_RELEASE/source/include/dcerpc.h
   branches/SAMBA_3_0_RELEASE/source/include/locking.h
   branches/SAMBA_3_0_RELEASE/source/include/ndr.h
   branches/SAMBA_3_0_RELEASE/source/include/nss_info.h
   branches/SAMBA_3_0_RELEASE/source/include/util_tdb.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/
   branches/SAMBA_3_0_RELEASE/source/lib/replace/.checker_innocent
   branches/SAMBA_3_0_RELEASE/source/lib/replace/Makefile.in
   branches/SAMBA_3_0_RELEASE/source/lib/replace/README
   branches/SAMBA_3_0_RELEASE/source/lib/replace/aclocal.m4
   branches/SAMBA_3_0_RELEASE/source/lib/replace/autoconf-2.60.m4
   branches/SAMBA_3_0_RELEASE/source/lib/replace/autogen.sh
   branches/SAMBA_3_0_RELEASE/source/lib/replace/config.guess
   branches/SAMBA_3_0_RELEASE/source/lib/replace/config.sub
   branches/SAMBA_3_0_RELEASE/source/lib/replace/configure.ac
   branches/SAMBA_3_0_RELEASE/source/lib/replace/dlfcn.c
   branches/SAMBA_3_0_RELEASE/source/lib/replace/dlfcn.m4
   branches/SAMBA_3_0_RELEASE/source/lib/replace/getpass.c
   branches/SAMBA_3_0_RELEASE/source/lib/replace/getpass.m4
   branches/SAMBA_3_0_RELEASE/source/lib/replace/install-sh
   branches/SAMBA_3_0_RELEASE/source/lib/replace/libreplace.m4
   branches/SAMBA_3_0_RELEASE/source/lib/replace/libreplace_cc.m4
   branches/SAMBA_3_0_RELEASE/source/lib/replace/libreplace_macros.m4
   branches/SAMBA_3_0_RELEASE/source/lib/replace/repdir.m4
   branches/SAMBA_3_0_RELEASE/source/lib/replace/repdir_getdents.c
   branches/SAMBA_3_0_RELEASE/source/lib/replace/repdir_getdirentries.c
   branches/SAMBA_3_0_RELEASE/source/lib/replace/replace.c
   branches/SAMBA_3_0_RELEASE/source/lib/replace/replace.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/samba.m4
   branches/SAMBA_3_0_RELEASE/source/lib/replace/snprintf.c
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/README
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/aio.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/capability.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/config.m4
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/dir.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/filesys.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/glob.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/iconv.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/kerberos.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/locale.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/network.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/passwd.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/printing.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/readline.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/select.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/shmem.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/syslog.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/terminal.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/time.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/system/wait.h
   branches/SAMBA_3_0_RELEASE/source/lib/replace/test/
   branches/SAMBA_3_0_RELEASE/source/lib/replace/test/os2_delete.c
   branches/SAMBA_3_0_RELEASE/source/lib/replace/test/shared_mmap.c
   branches/SAMBA_3_0_RELEASE/source/lib/replace/test/testsuite.c
   branches/SAMBA_3_0_RELEASE/source/lib/replace/timegm.c
   branches/SAMBA_3_0_RELEASE/source/lib/replace/timegm.m4
   branches/SAMBA_3_0_RELEASE/source/lib/replace/win32.m4
   branches/SAMBA_3_0_RELEASE/source/lib/replace/win32_replace.h
   branches/SAMBA_3_0_RELEASE/source/lib/socket_wrapper/
   branches/SAMBA_3_0_RELEASE/source/lib/socket_wrapper/config.m4
   branches/SAMBA_3_0_RELEASE/source/lib/socket_wrapper/socket_wrapper.c
   branches/SAMBA_3_0_RELEASE/source/lib/socket_wrapper/socket_wrapper.h
   branches/SAMBA_3_0_RELEASE/source/lib/talloc/
   branches/SAMBA_3_0_RELEASE/source/lib/talloc/Makefile.in
   branches/SAMBA_3_0_RELEASE/source/lib/talloc/aclocal.m4
   branches/SAMBA_3_0_RELEASE/source/lib/talloc/autogen.sh
   branches/SAMBA_3_0_RELEASE/source/lib/talloc/config.guess
   branches/SAMBA_3_0_RELEASE/source/lib/talloc/config.mk

svn commit: samba r21586 - in branches/SAMBA_4_0: . source/pidl

2007-02-28 Thread jelmer

Author: jelmer
Date: 2007-02-28 14:56:46 + (Wed, 28 Feb 2007)
New Revision: 21586

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21586

Log:
update manifest
Modified:
   branches/SAMBA_4_0/
   branches/SAMBA_4_0/source/pidl/MANIFEST


Changeset:

Property changes on: branches/SAMBA_4_0
___
Name: bzr:merge
   - [EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]

   + [EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]


Modified: branches/SAMBA_4_0/source/pidl/MANIFEST
===
--- branches/SAMBA_4_0/source/pidl/MANIFEST 2007-02-28 14:35:26 UTC (rev 
21585)
+++ branches/SAMBA_4_0/source/pidl/MANIFEST 2007-02-28 14:56:46 UTC (rev

svn commit: samba r21587 - in branches/SAMBA_3_0_RELEASE: examples source

Author: jerry
Date: 2007-02-28 14:57:51 + (Wed, 28 Feb 2007)
New Revision: 21587

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21587

Log:
more sync with 3.0.25 tree (remove old directories and copy pcap2nbench)
Added:
   branches/SAMBA_3_0_RELEASE/examples/pcap2nbench/
Removed:
   branches/SAMBA_3_0_RELEASE/source/sam/
   branches/SAMBA_3_0_RELEASE/source/smbwrapper/


Changeset:
Copied: branches/SAMBA_3_0_RELEASE/examples/pcap2nbench (from rev 21585, 
branches/SAMBA_3_0_25/examples/pcap2nbench)

Rev 11616: Support for tagged types has landed! in file:///home/jelmer/bzr.samba/SAMBA_4_0/

2007-02-28 Thread Jelmer Vernooij

At file:///home/jelmer/bzr.samba/SAMBA_4_0/


revno: 11616
revision-id: [EMAIL PROTECTED]
parent: svn-v2:[EMAIL PROTECTED]
committer: Jelmer Vernooij [EMAIL PROTECTED]
branch nick: SAMBA_4_0
timestamp: Wed 2007-02-28 14:21:31 +0100
message:
  Support for tagged types has landed!
  
  It's now possible to use struct foo without a typedef in IDL files.
  
  echo_info4 is the first type that's been converted.
modified:
  source/librpc/idl/echo.idl svn-v2:[EMAIL PROTECTED]
  source/pidl/README svn-v2:[EMAIL PROTECTED]
  source/pidl/lib/Parse/Pidl/NDR.pm svn-v2:[EMAIL PROTECTED]
  source/pidl/lib/Parse/Pidl/Samba4/EJS.pm svn-v2:[EMAIL PROTECTED]
  source/pidl/lib/Parse/Pidl/Samba4/Header.pm svn-v2:[EMAIL PROTECTED]
  source/pidl/tests/header.plsvn-v2:[EMAIL PROTECTED]
  source/pidl/tests/ndr.pl   svn-v2:[EMAIL PROTECTED]
  source/pidl/tests/typelist.pl  svn-v2:[EMAIL PROTECTED]
=== modified file 'source/librpc/idl/echo.idl'
--- a/source/librpc/idl/echo.idl2007-02-21 11:51:51 +
+++ b/source/librpc/idl/echo.idl2007-02-28 13:21:31 +
@@ -50,9 +50,9 @@
uint32 v;
} echo_info3;
 
-   typedef struct {
+   struct echo_info4 {
hyper v;
-   } echo_info4;
+   };
 
typedef struct {
uint8 v1;
@@ -66,14 +66,14 @@
 
typedef struct {
uint8 v1;
-   echo_info4 info4;
+   struct echo_info4 info4;
} echo_info7;
 
typedef [switch_type(uint16)] union {
[case(1)]  echo_info1 info1;
[case(2)]  echo_info2 info2;
[case(3)]  echo_info3 info3;
-   [case(4)]  echo_info4 info4;
+   [case(4)]  struct echo_info4 info4;
[case(5)]  echo_info5 info5;
[case(6)]  echo_info6 info6;
[case(7)]  echo_info7 info7;

=== modified file 'source/pidl/README'
--- a/source/pidl/README2007-02-28 01:51:37 +
+++ b/source/pidl/README2007-02-28 13:21:31 +
@@ -4,7 +4,7 @@
 compiler for Samba 4. 
 
 The main sources for pidl are available by Subversion on
-svn://svn.samba.org/samba/branches/SAMBA_4_0/source/pidl
+svn://svnanon.samba.org/samba/branches/SAMBA_4_0/source/pidl
 
 Pidl works by building a parse tree from a .pidl file (a simple 
 dump of it's internal parse tree) or a .idl file 

=== modified file 'source/pidl/lib/Parse/Pidl/NDR.pm'
--- a/source/pidl/lib/Parse/Pidl/NDR.pm 2007-02-28 00:28:14 +
+++ b/source/pidl/lib/Parse/Pidl/NDR.pm 2007-02-28 13:21:31 +
@@ -35,7 +35,7 @@
 $VERSION = '0.01';
 @ISA = qw(Exporter);
 @EXPORT = qw(GetPrevLevel GetNextLevel ContainsDeferred ContainsString);
[EMAIL PROTECTED] = qw(GetElementLevelTable ParseElement ValidElement 
align_type mapToScalar);
[EMAIL PROTECTED] = qw(GetElementLevelTable ParseElement ValidElement 
align_type mapToScalar ParseType);
 
 use strict;
 use Parse::Pidl qw(warning fatal);
@@ -499,6 +499,7 @@
my ($d, $pointer_default) = @_;
 
if ($d-{TYPE} eq STRUCT or $d-{TYPE} eq UNION) {
+   return $d if (not defined($d-{ELEMENTS}));
CheckPointerTypes($d, $pointer_default);
}
 

=== modified file 'source/pidl/lib/Parse/Pidl/Samba4/EJS.pm'
--- a/source/pidl/lib/Parse/Pidl/Samba4/EJS.pm  2007-02-28 02:01:58 +
+++ b/source/pidl/lib/Parse/Pidl/Samba4/EJS.pm  2007-02-28 13:21:31 +
@@ -426,14 +426,7 @@
$var = get_pointer_to($var);
}
 
-   my $t;
-   if (ref($e-{TYPE}) eq HASH) {
-   $t = $e-{TYPE}-{TYPE}_$e-{TYPE}-{NAME};
-   } else {
-   $t = $e-{TYPE};
-   }
-
-   pidl NDR_CHECK(ejs_push_$t(ejs, v, $name, $var));;
+   pidl NDR_CHECK(.TypeFunctionName(ejs_push, 
$e-{TYPE}).(ejs, v, $name, $var));;
}
 }
 
@@ -619,21 +612,22 @@
my ($d, $name) = @_;
return if (has_property($d, noejs));
 
-   if ($d-{TYPE} eq TYPEDEF) {
-   EjsTypePushFunction($d-{DATA}, $name);
-   return;
-   }
-
-   if ($d-{TYPE} eq STRUCT) {
-   fn_declare($d, NTSTATUS ejs_push_$name(struct ejs_rpc *ejs, 
struct MprVar *v, const char *name, const struct $name *r));
-   } elsif ($d-{TYPE} eq UNION) {
-   fn_declare($d, NTSTATUS ejs_push_$name(struct ejs_rpc *ejs, 
struct MprVar *v, const char *name, const union $name *r));
-   } elsif ($d-{TYPE} eq ENUM) {
-   fn_declare($d, NTSTATUS ejs_push_$name(struct ejs_rpc *ejs, 
struct MprVar *v, const char *name, const enum $name *r));
-   } elsif ($d-{TYPE} eq BITMAP) {
-   my($type_decl) = 
Parse::Pidl::Typelist::mapTypeName($d-{BASE_TYPE});
-   fn_declare($d, NTSTATUS ejs_push_$name(struct ejs_rpc *ejs, 
struct MprVar *v, const char *name, const

Rev 11617: update manifest in file:///home/jelmer/bzr.samba/SAMBA_4_0/

2007-02-28 Thread Jelmer Vernooij

At file:///home/jelmer/bzr.samba/SAMBA_4_0/


revno: 11617
revision-id: [EMAIL PROTECTED]
parent: svn-v2:[EMAIL PROTECTED]
committer: Jelmer Vernooij [EMAIL PROTECTED]
branch nick: SAMBA_4_0
timestamp: Wed 2007-02-28 15:53:34 +0100
message:
  update manifest
modified:
  source/pidl/MANIFEST   svn-v2:[EMAIL PROTECTED]
=== modified file 'source/pidl/MANIFEST'
--- a/source/pidl/MANIFEST  2007-01-11 02:10:01 +
+++ b/source/pidl/MANIFEST  2007-02-28 14:53:34 +
@@ -15,19 +15,12 @@
 tests/ndr_compat.pl
 tests/ndr_fullptr.pl
 tests/ndr_tagtype.pl
-lib/Parse/Pidl/Samba3/Client.pm
+tests/header.pl
 lib/Parse/Pidl/Samba3/ClientNDR.pm
-lib/Parse/Pidl/Samba3/Header.pm
-lib/Parse/Pidl/Samba3/Parser.pm
-lib/Parse/Pidl/Samba3/Server.pm
-lib/Parse/Pidl/Samba3/Template.pm
-lib/Parse/Pidl/Samba3/Types.pm
+lib/Parse/Pidl/Samba3/ServerNDR.pm
 lib/Parse/Pidl/Samba4/NDR/Server.pm
 lib/Parse/Pidl/Samba4/NDR/Parser.pm
 lib/Parse/Pidl/Samba4/NDR/Client.pm
-lib/Parse/Pidl/Samba4/COM/Header.pm
-lib/Parse/Pidl/Samba4/COM/Stub.pm
-lib/Parse/Pidl/Samba4/COM/Proxy.pm
 lib/Parse/Pidl/Samba4/Header.pm
 lib/Parse/Pidl/Samba4/SWIG.pm
 lib/Parse/Pidl/Samba4/TDR.pm
@@ -40,7 +33,6 @@
 lib/Parse/Pidl/Dump.pm
 lib/Parse/Pidl/Compat.pm
 lib/Parse/Pidl/Util.pm
-lib/Parse/Pidl/ODL.pm
 lib/Parse/Pidl/NDR.pm
 lib/Parse/Pidl.pm
 Makefile.PL

Rev 11614: Allow modification of LDFLAGS in file:///home/jelmer/bzr.samba/SAMBA_4_0/

2007-02-28 Thread Jelmer Vernooij

At file:///home/jelmer/bzr.samba/SAMBA_4_0/


revno: 11614
revision-id: [EMAIL PROTECTED]
parent: svn-v2:[EMAIL PROTECTED]
committer: Jelmer Vernooij [EMAIL PROTECTED]
branch nick: SAMBA_4_0
timestamp: Wed 2007-02-28 11:49:28 +0100
message:
  Allow modification of LDFLAGS
modified:
  source/build/m4/check_ld.m4svn-v2:[EMAIL PROTECTED]
=== modified file 'source/build/m4/check_ld.m4'
--- a/source/build/m4/check_ld.m4   2007-01-15 18:44:06 +
+++ b/source/build/m4/check_ld.m4   2007-02-28 10:49:28 +
@@ -30,7 +30,6 @@
 STLD_FLAGS=-rcs
 BLDSHARED=false
 LD=${CC}
-LDFLAGS=
 SHLD=${CC}
 SHLD_FLAGS=-shared
 SHLIBEXT=so
@@ -45,7 +44,7 @@
BLDSHARED=true
SHLD_FLAGS=-shared -Wl,-Bsymbolic
SHLD_UNDEF_FLAGS=-Wl,--allow-shlib-undefined
-   LDFLAGS=-Wl,--export-dynamic
+   LDFLAGS=$LDFLAGS -Wl,--export-dynamic
PICFLAG=-fPIC
SONAMEFLAG=-Wl,-soname=
;;
@@ -57,7 +56,7 @@
PICFLAG=-fPIC
SONAMEFLAG=-Wl,-soname=
if test ${ac_cv_prog_gnu_ld} = yes; then
-   LDFLAGS=-Wl,-E
+   LDFLAGS=$LDFLAGS -Wl,-E
fi
else
PICFLAG=-KPIC
@@ -74,13 +73,13 @@
;;
*netbsd* | *freebsd* | *dragonfly* )  
BLDSHARED=true
-   LDFLAGS=-Wl,--export-dynamic
+   LDFLAGS=$LDFLAGS -Wl,--export-dynamic
SONAMEFLAG=-Wl,-soname,
PICFLAG=-fPIC -DPIC
;;
*openbsd*)
BLDSHARED=true
-   LDFLAGS=-Wl,-Bdynamic
+   LDFLAGS=$LDFLAGS -Wl,-Bdynamic
SONAMEFLAG=-Wl,-soname,
PICFLAG=-fPIC
;;
@@ -98,7 +97,7 @@
*aix*)
BLDSHARED=true
SHLD_FLAGS=-Wl,-G,-bexpall,-bbigtoc
-   LDFLAGS=-Wl,-brtl,-bexpall,-bbigtoc
+   LDFLAGS=$LDFLAGS -Wl,-brtl,-bexpall,-bbigtoc
# as AIX code is always position independent...
PICFLAG=-O2
;;
@@ -115,10 +114,10 @@
fi
if test $host_cpu = ia64; then
SHLIBEXT=so
-   LDFLAGS=-Wl,-E,+b/usr/local/lib/hpux32:/usr/lib/hpux32
+   LDFLAGS=$LDFLAGS 
-Wl,-E,+b/usr/local/lib/hpux32:/usr/lib/hpux32
else
SHLIBEXT=sl
-   LDFLAGS=-Wl,-E,+b/usr/local/lib:/usr/lib
+   LDFLAGS=$LDFLAGS -Wl,-E,+b/usr/local/lib:/usr/lib
fi
;;
*osf*)

svn commit: samba r21588 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: metze
Date: 2007-02-28 15:57:52 + (Wed, 28 Feb 2007)
New Revision: 21588

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21588

Log:
add a RPC-HANDLES-LSARPC-SHARED test, which demonstrates
policy handles can be shared between connections

metze
Modified:
   branches/SAMBA_4_0/source/torture/rpc/handles.c
   branches/SAMBA_4_0/source/torture/rpc/rpc.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/rpc/handles.c
===
--- branches/SAMBA_4_0/source/torture/rpc/handles.c 2007-02-28 14:57:51 UTC 
(rev 21587)
+++ branches/SAMBA_4_0/source/torture/rpc/handles.c 2007-02-28 15:57:52 UTC 
(rev 21588)
@@ -44,6 +44,8 @@
uint16_t system_name = '\\';
TALLOC_CTX *mem_ctx = talloc_new(torture);
 
+   torture_comment(torture, RPC-HANDLE-LSARPC\n);
+
status = torture_rpc_connection(mem_ctx, p1, dcerpc_table_lsarpc);
torture_assert_ntstatus_ok(torture, status, opening lsa pipe1);
 
@@ -97,7 +99,244 @@
return true;
 }
 
+static bool test_handles_lsa_shared(struct torture_context *torture)
+{
+   NTSTATUS status;
+   struct dcerpc_pipe *p1, *p2, *p3, *p4, *p5;
+   struct policy_handle handle;
+   struct policy_handle handle2;
+   struct lsa_ObjectAttribute attr;
+   struct lsa_QosInfo qos;
+   struct lsa_OpenPolicy r;
+   struct lsa_Close c;
+   struct lsa_QuerySecurity qsec;
+   uint16_t system_name = '\\';
+   TALLOC_CTX *mem_ctx = talloc_new(torture);
+   enum dcerpc_transport_t transport;
+   uint32_t assoc_group_id;
 
+   torture_comment(torture, RPC-HANDLE-LSARPC-SHARED\n);
+
+   if (lp_parm_bool(-1, torture, samba4, False)) {
+   torture_comment(torture, LSA shared-policy-handle test against 
Samba4 - skipping\n);
+   return true;
+   }
+
+   torture_comment(torture, connect lsa pipe1\n);
+   status = torture_rpc_connection(mem_ctx, p1, dcerpc_table_lsarpc);
+   torture_assert_ntstatus_ok(torture, status, opening lsa pipe1);
+
+   transport   = p1-conn-transport.transport,
+   assoc_group_id  = p1-assoc_group_id;
+
+   torture_comment(torture, use assoc_group_id[0x%08X] for new 
connections\n, assoc_group_id);
+
+   torture_comment(torture, connect lsa pipe2\n);
+   status = torture_rpc_connection_transport(mem_ctx, p2, 
dcerpc_table_lsarpc,
+ transport,
+ assoc_group_id);
+   torture_assert_ntstatus_ok(torture, status, opening lsa pipe2);
+
+   qos.len = 0;
+   qos.impersonation_level = 2;
+   qos.context_mode = 1;
+   qos.effective_only = 0;
+
+   attr.len = 0;
+   attr.root_dir = NULL;
+   attr.object_name = NULL;
+   attr.attributes = 0;
+   attr.sec_desc = NULL;
+   attr.sec_qos = qos;
+
+   r.in.system_name = system_name;
+   r.in.attr = attr;
+   r.in.access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
+   r.out.handle = handle;
+
+   torture_comment(torture, open lsa policy handle\n);
+   status = dcerpc_lsa_OpenPolicy(p1, mem_ctx, r);
+   if (!NT_STATUS_IS_OK(status)) {
+   torture_comment(torture, lsa_OpenPolicy not supported - 
skipping\n);
+   talloc_free(mem_ctx);
+   return true;
+   }
+
+   /*
+* connect p3 after the policy handle is opened
+*/
+   torture_comment(torture, connect lsa pipe3 after the policy handle is 
opened\n);
+   status = torture_rpc_connection_transport(mem_ctx, p3, 
dcerpc_table_lsarpc,
+ transport,
+ assoc_group_id);
+   torture_assert_ntstatus_ok(torture, status, opening lsa pipe3);
+
+   qsec.in.handle  = handle;
+   qsec.in.sec_info= 0;
+   c.in.handle = handle;
+   c.out.handle = handle2;
+
+   /*
+* use policy handle on all 3 connections
+*/
+   torture_comment(torture, use the policy handle on p1,p2,p3\n);
+   status = dcerpc_lsa_QuerySecurity(p1, mem_ctx, qsec);
+   torture_assert_ntstatus_equal(torture, status, NT_STATUS_OK, 
+ use policy handle on p1);
+
+   status = dcerpc_lsa_QuerySecurity(p2, mem_ctx, qsec);
+   torture_assert_ntstatus_equal(torture, status, NT_STATUS_OK, 
+ use policy handle on p2);
+
+   status = dcerpc_lsa_QuerySecurity(p3, mem_ctx, qsec);
+   torture_assert_ntstatus_equal(torture, status, NT_STATUS_OK, 
+ use policy handle on p3);
+
+   /*
+* close policy handle on connection 2 and the others get a fault
+*/
+   torture_comment(torture, close the policy handle on p2 others get a 
fault\n);
+   status = dcerpc_lsa_Close(p2, mem_ctx, c);

svn commit: samba-docs r1033 - in trunk/manpages-3: .

Author: jpeach
Date: 2007-02-28 17:01:45 + (Wed, 28 Feb 2007)
New Revision: 1033

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=1033

Log:
Restore missing refentry tag.

Modified:
   trunk/manpages-3/smb-vfs-default_quota.8.xml


Changeset:
Modified: trunk/manpages-3/smb-vfs-default_quota.8.xml
===
--- trunk/manpages-3/smb-vfs-default_quota.8.xml2007-02-28 01:45:50 UTC 
(rev 1032)
+++ trunk/manpages-3/smb-vfs-default_quota.8.xml2007-02-28 17:01:45 UTC 
(rev 1033)
@@ -1,5 +1,6 @@
 ?xml version=1.0 encoding=iso-8859-1?
 !DOCTYPE refentry PUBLIC -//Samba-Team//DTD DocBook V4.2-Based Variant 
V1.0//EN http://www.samba.org/samba/DTD/samba-doc;
+refentry id=smb-vfs-default_quota.8
 
 refmeta
refentrytitlesmb-vfs-default_quota/refentrytitle

svn commit: samba r21589 - in branches/SAMBA_4_0/source/rpc_server: .

Author: metze
Date: 2007-02-28 17:02:28 + (Wed, 28 Feb 2007)
New Revision: 21589

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21589

Log:
give an error when the assoc_group_id isn't 0

TODO: we need to correctly implement assoc groups!

metze
Modified:
   branches/SAMBA_4_0/source/rpc_server/dcerpc_server.c


Changeset:
Modified: branches/SAMBA_4_0/source/rpc_server/dcerpc_server.c
===
--- branches/SAMBA_4_0/source/rpc_server/dcerpc_server.c2007-02-28 
15:57:52 UTC (rev 21588)
+++ branches/SAMBA_4_0/source/rpc_server/dcerpc_server.c2007-02-28 
17:02:28 UTC (rev 21589)
@@ -492,6 +492,10 @@
uint32_t context_id;
const struct dcesrv_interface *iface;
 
+   if (call-pkt.u.bind.assoc_group_id != 0) {
+   return dcesrv_bind_nak(call, 0);
+   }
+
if (call-pkt.u.bind.num_contexts  1 ||
call-pkt.u.bind.ctx_list[0].num_transfer_syntaxes  1) {
return dcesrv_bind_nak(call, 0);

svn commit: samba-docs r1034 - in trunk/manpages-3: .

Author: jpeach
Date: 2007-02-28 17:03:01 + (Wed, 28 Feb 2007)
New Revision: 1034

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=1034

Log:
Document the recycle VFS module.

Added:
   trunk/manpages-3/smb-vfs-recycle.8.xml


Changeset:
Added: trunk/manpages-3/smb-vfs-recycle.8.xml
===
--- trunk/manpages-3/smb-vfs-recycle.8.xml  2007-02-28 17:01:45 UTC (rev 
1033)
+++ trunk/manpages-3/smb-vfs-recycle.8.xml  2007-02-28 17:03:01 UTC (rev 
1034)
@@ -0,0 +1,202 @@
+?xml version=1.0 encoding=iso-8859-1?
+!DOCTYPE refentry PUBLIC -//Samba-Team//DTD DocBook V4.2-Based Variant 
V1.0//EN http://www.samba.org/samba/DTD/samba-doc;
+refentry id=smb-vfs-recycle.8
+
+refmeta
+   refentrytitlesmb-vfs-recycle/refentrytitle
+   manvolnum8/manvolnum
+/refmeta
+
+
+refnamediv
+   refnamerecycle/refname
+   refpurposeSamba VFS recycle bin/refpurpose
+/refnamediv
+
+refsynopsisdiv
+   cmdsynopsis
+   commandvfs objects = recycle/command
+   /cmdsynopsis
+/refsynopsisdiv
+
+refsect1
+   titleDESCRIPTION/title
+
+   paraThis module is part of the 
citerefentryrefentrytitlesamba/refentrytitle
+   manvolnum7/manvolnum/citerefentry suite./para
+
+   paraThe commandrecycle/command intercepts file deletion
+   requests and moves the affected files to a temporary repository
+   rather than deleting them immediately. This gives the same effect
+   as the Recycle Bin on Windows computers. /para
+
+   paraThe Recycle Bin will not appear in Windows Explorer
+   views of the network file system (share) nor on any mapped
+   drive. Instead, a directory called .recycle will be automatically
+   created when the first file is deleted and recycle:repository is
+   not configured. If recycle:repository is configured, the name
+   of the created directory depends on recycle:repository. Users
+   can recover files from the recycle bin. If the recycle:keeptree
+   option has been specified, deleted files will be found in a path
+   identical with that from which the file was deleted.  /para
+
+
+   paraThis module is stackable./para
+
+/refsect1
+
+
+refsect1
+   titleOPTIONS/title
+
+   variablelist
+
+   varlistentry
+   termrecycle:repository = PATH/term
+   listitem
+   paraPath of the directory where deleted files should be moved.
+   /para
+   paraIf this option is not set, the default path .recycle
+   is used. /para
+   /listitem
+   /varlistentry
+
+   varlistentry
+   termrecycle:directory_mode = MODE/term
+   listitem
+   paraSet MODE to the octal mode the recycle repository
+   should be created with.  The recycle repository will be
+   created when first file is deleted. If recycle:subdir_mode
+   is not set, MODE also applies to subdirectories.
+   /para
+   paraIf this option is not set, the default mode
+   0700 is used. /para
+   /listitem
+   /varlistentry
+
+   varlistentry
+   termrecycle:subdir_mode = MODE/term
+   listitem
+   paraSet MODE to the octal mode with which
+   sub directories of the recycle repository should be created.
+   /para
+   paraIf this option is not set, subdirectories
+   will be created with the mode from recycle:directory_mode.
+   /para
+   /listitem
+   /varlistentry
+
+   varlistentry
+   termrecycle:keeptree = BOOL/term
+   listitem
+   paraSpecifies whether the directory structure should
+   be preserved or whether the files in a directory that is being
+   deleted should be kept separately in the repository.
+   /para
+   /listitem
+   /varlistentry
+
+   varlistentry
+   termrecycle:versions = BOOL/term
+   listitem
+   paraIf this option is True, two files with the same
+   name that are deleted will both be kept in the repository.
+   Newer deleted versions of a file will be called
+   quot;Copy #x of filenamequot;.
+   /para
+   /listitem
+   /varlistentry
+
+   varlistentry
+   termrecycle:touch = BOOL/term
+   listitem
+   paraSpecifies whether a file's access date should be
+   updated when the file is moved to the repository.
+   /para
+   /listitem
+   /varlistentry
+
+   varlistentry
+   termrecycle:touch_mtime = BOOL/term
+   listitem
+

svn commit: samba r21590 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: metze
Date: 2007-02-28 17:06:01 + (Wed, 28 Feb 2007)
New Revision: 21590

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21590

Log:
add RPC-HANDLES-MIXED-SHARED test, which shows that
assoc_groups are shared between idl-interfaces and connections.

But you can't close a samr policy handle on a lsa pipe.

add RPC-HANDLES-RANDOM-ASSOC test, which shows that
you can't bind with an invalid assoc_group_id

metze
Modified:
   branches/SAMBA_4_0/source/torture/rpc/handles.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/rpc/handles.c
===
--- branches/SAMBA_4_0/source/torture/rpc/handles.c 2007-02-28 17:02:28 UTC 
(rev 21589)
+++ branches/SAMBA_4_0/source/torture/rpc/handles.c 2007-02-28 17:06:01 UTC 
(rev 21590)
@@ -385,7 +385,141 @@
return true;
 }
 
+static bool test_handles_mixed_shared(struct torture_context *torture)
+{
+   NTSTATUS status;
+   struct dcerpc_pipe *p1, *p2, *p3, *p4, *p5, *p6;
+   struct policy_handle handle;
+   struct policy_handle handle2;
+   struct samr_Connect r;
+   struct lsa_Close lc;
+   struct samr_Close sc;
+   TALLOC_CTX *mem_ctx = talloc_new(torture);
+   enum dcerpc_transport_t transport;
+   uint32_t assoc_group_id;
 
+   torture_comment(torture, RPC-HANDLE-MIXED-SHARED\n);
+
+   if (lp_parm_bool(-1, torture, samba4, False)) {
+   torture_comment(torture, Mixed shared-policy-handle test 
against Samba4 - skipping\n);
+   return true;
+   }
+
+   torture_comment(torture, connect samr pipe1\n);
+   status = torture_rpc_connection(mem_ctx, p1, dcerpc_table_samr);
+   torture_assert_ntstatus_ok(torture, status, opening samr pipe1);
+
+   transport   = p1-conn-transport.transport,
+   assoc_group_id  = p1-assoc_group_id;
+
+   torture_comment(torture, use assoc_group_id[0x%08X] for new 
connections\n, assoc_group_id);
+
+   torture_comment(torture, connect lsa pipe2\n);
+   status = torture_rpc_connection_transport(mem_ctx, p2, 
dcerpc_table_lsarpc,
+ transport,
+ assoc_group_id);
+   torture_assert_ntstatus_ok(torture, status, opening lsa pipe2);
+
+   r.in.system_name = 0;
+   r.in.access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
+   r.out.connect_handle = handle;
+
+   torture_comment(torture, samr_Connect to open a policy handle on samr 
p1\n);
+   status = dcerpc_samr_Connect(p1, mem_ctx, r);
+   torture_assert_ntstatus_ok(torture, status, opening policy handle on 
p1);
+
+   lc.in.handle= handle;
+   lc.out.handle   = handle2;
+   sc.in.handle= handle;
+   sc.out.handle   = handle2;
+
+   torture_comment(torture, use policy handle on lsa p2 - should fail\n);
+   status = dcerpc_lsa_Close(p2, mem_ctx, lc);
+   torture_assert_ntstatus_equal(torture, status, 
NT_STATUS_NET_WRITE_FAULT, 
+ closing handle on lsa p2);
+   torture_assert_int_equal(torture, p2-last_fault_code, 
DCERPC_FAULT_CONTEXT_MISMATCH, 
+ closing handle on lsa p2);
+
+   torture_comment(torture, closing policy handle on samr p1\n);
+   status = dcerpc_samr_Close(p1, mem_ctx, sc);
+   torture_assert_ntstatus_ok(torture, status, closing policy handle on 
p1);
+
+   talloc_free(p1);
+   talloc_free(p2);
+   msleep(10);
+
+   torture_comment(torture, connect samr pipe3 - should fail\n);
+   status = torture_rpc_connection_transport(mem_ctx, p3, 
dcerpc_table_samr,
+ transport,
+ assoc_group_id);
+   torture_assert_ntstatus_equal(torture, status, NT_STATUS_UNSUCCESSFUL,
+ opening samr pipe3);
+
+   torture_comment(torture, connect lsa pipe4 - should fail\n);
+   status = torture_rpc_connection_transport(mem_ctx, p4, 
dcerpc_table_lsarpc,
+ transport,
+ assoc_group_id);
+   torture_assert_ntstatus_equal(torture, status, NT_STATUS_UNSUCCESSFUL,
+ opening lsa pipe4);
+
+   torture_comment(torture, connect samr pipe5 with 
assoc_group_id[0x%08X]- should fail\n, ++assoc_group_id);
+   status = torture_rpc_connection_transport(mem_ctx, p5, 
dcerpc_table_samr,
+ transport,
+ assoc_group_id);
+   torture_assert_ntstatus_equal(torture, status, NT_STATUS_UNSUCCESSFUL,
+ opening samr pipe5);
+
+   torture_comment(torture, connect lsa pipe6 with 
assoc_group_id[0x%08X]- should

svn commit: samba-docs r1035 - in trunk/manpages-3: .

Author: jpeach
Date: 2007-02-28 17:11:03 + (Wed, 28 Feb 2007)
New Revision: 1035

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=1035

Log:
Document fam_notify module.

Added:
   trunk/manpages-3/smb-vfs-fam_notify.8.xml


Changeset:
Added: trunk/manpages-3/smb-vfs-fam_notify.8.xml
===
--- trunk/manpages-3/smb-vfs-fam_notify.8.xml   2007-02-28 17:03:01 UTC (rev 
1034)
+++ trunk/manpages-3/smb-vfs-fam_notify.8.xml   2007-02-28 17:11:03 UTC (rev 
1035)
@@ -0,0 +1,66 @@
+?xml version=1.0 encoding=iso-8859-1?
+!DOCTYPE refentry PUBLIC -//Samba-Team//DTD DocBook V4.2-Based Variant 
V1.0//EN http://www.samba.org/samba/DTD/samba-doc;
+refentry id=smb-vfs-fam_notify.8
+
+refmeta
+   refentrytitlesmb-vfs-fam_notify/refentrytitle
+   manvolnum8/manvolnum
+/refmeta
+
+
+refnamediv
+   refnamefam_notify/refname
+   refpurposeFAM support for file change notifications/refpurpose
+/refnamediv
+
+refsynopsisdiv
+   cmdsynopsis
+   commandvfs objects = fam_notify/command
+   /cmdsynopsis
+/refsynopsisdiv
+
+refsect1
+   titleDESCRIPTION/title
+
+   paraThis module is part of the 
citerefentryrefentrytitlesamba/refentrytitle
+   manvolnum7/manvolnum/citerefentry suite./para
+
+   paraThe commandfam_notify/command module makes use of
+   the system FAM (File Alteration Monitor) daemon to implement
+   file change notifications for Windows clients. FAM is generally
+   present only on IRIX and some BSD systems./para
+
+   paraThis module is not stackable./para
+
+/refsect1
+
+refsect1
+   titleEXAMPLES/title
+
+   paraSupport FAM notifications globally:/para
+
+programlisting
+smbconfsection name=[global]/
+   smbconfoption name=vfs objectsfam_notify/smbconfoption
+/programlisting
+
+/refsect1
+
+refsect1
+   titleVERSION/title
+
+   paraThis man page is correct for version 3.0.25 of the Samba suite.
+   /para
+/refsect1
+
+refsect1
+   titleAUTHOR/title
+
+   paraThe original Samba software and related utilities
+   were created by Andrew Tridgell. Samba is now developed
+   by the Samba Team as an Open Source project similar
+   to the way the Linux kernel is developed./para
+
+/refsect1
+
+/refentry

svn commit: samba r21591 - in branches/SAMBA_4_0/source/libcli/util: .

Author: metze
Date: 2007-02-28 17:19:35 + (Wed, 28 Feb 2007)
New Revision: 21591

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21591

Log:
add new error code

metze
Modified:
   branches/SAMBA_4_0/source/libcli/util/doserr.c
   branches/SAMBA_4_0/source/libcli/util/doserr.h


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/util/doserr.c
===
--- branches/SAMBA_4_0/source/libcli/util/doserr.c  2007-02-28 17:06:01 UTC 
(rev 21590)
+++ branches/SAMBA_4_0/source/libcli/util/doserr.c  2007-02-28 17:19:35 UTC 
(rev 21591)
@@ -73,6 +73,7 @@
{ WERR_DFS_NO_SUCH_SERVER, WERR_DFS_NO_SUCH_SERVER },
{ WERR_DFS_INTERNAL_ERROR, WERR_DFS_INTERNAL_ERROR },
{ WERR_DFS_CANT_CREATE_JUNCT, WERR_DFS_CANT_CREATE_JUNCT },
+   { WERR_LOGON_FAILURE, WERR_LOGON_FAILURE },
{ WERR_INVALID_SECURITY_DESCRIPTOR, WERR_INVALID_SECURITY_DESCRIPTOR 
},
{ WERR_UNKNOWN_REVISION, WERR_UNKNOWN_REVISION },
{ WERR_REVISION_MISMATCH, WERR_REVISION_MISMATCH },

Modified: branches/SAMBA_4_0/source/libcli/util/doserr.h
===
--- branches/SAMBA_4_0/source/libcli/util/doserr.h  2007-02-28 17:06:01 UTC 
(rev 21590)
+++ branches/SAMBA_4_0/source/libcli/util/doserr.h  2007-02-28 17:19:35 UTC 
(rev 21591)
@@ -200,6 +200,7 @@
 #define WERR_NO_SUCH_PRIVILEGE W_ERROR(1313)
 #define WERR_PRIVILEGE_NOT_HELD W_ERROR(1314)
 #define WERR_NO_SUCH_USER W_ERROR(1317)
+#define WERR_LOGON_FAILURE W_ERROR(1326)
 #define WERR_INVALID_SECURITY_DESCRIPTOR W_ERROR(1338)
 #define WERR_NO_SUCH_DOMAIN W_ERROR(1355)
 #define WERR_NO_SYSTEM_RESOURCES W_ERROR(1450)

svn commit: samba r21592 - in branches/SAMBA_4_0/source/libcli/nbt: .

Author: metze
Date: 2007-02-28 17:23:35 + (Wed, 28 Feb 2007)
New Revision: 21592

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21592

Log:
compress_name() returns NULL for names longer than 15 chars

giving NO_MEMORY back is ugly, so give a useful error

metze
Modified:
   branches/SAMBA_4_0/source/libcli/nbt/nbtname.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/nbt/nbtname.c
===
--- branches/SAMBA_4_0/source/libcli/nbt/nbtname.c  2007-02-28 17:19:35 UTC 
(rev 21591)
+++ branches/SAMBA_4_0/source/libcli/nbt/nbtname.c  2007-02-28 17:23:35 UTC 
(rev 21592)
@@ -332,6 +332,12 @@
return NT_STATUS_OK;
}
 
+   if (strlen(r-name)  15) {
+   return ndr_push_error(ndr, NDR_ERR_STRING,
+ nbt_name longer as 15 chars: %s,
+ r-name);
+   }
+
cname = compress_name(ndr, (const uint8_t *)r-name, r-type);
NT_STATUS_HAVE_NO_MEMORY(cname);

svn commit: samba r21593 - in branches/SAMBA_4_0/source/libcli/resolve: .

Author: metze
Date: 2007-02-28 17:25:29 + (Wed, 28 Feb 2007)
New Revision: 21593

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21593

Log:
give a more useful error, when we can't resolve a long name
via broadcast of wins

metze
Modified:
   branches/SAMBA_4_0/source/libcli/resolve/nbtlist.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/resolve/nbtlist.c
===
--- branches/SAMBA_4_0/source/libcli/resolve/nbtlist.c  2007-02-28 17:23:35 UTC 
(rev 21592)
+++ branches/SAMBA_4_0/source/libcli/resolve/nbtlist.c  2007-02-28 17:25:29 UTC 
(rev 21593)
@@ -126,6 +126,15 @@
if (composite_nomem(state-name.scope, c)) return c;
}
 
+   /*
+* we can't push long names on the wire,
+* so bail out here to give a useful error message
+*/
+   if (strlen(state-name.name)  15) {
+   composite_error(c, NT_STATUS_OBJECT_NAME_NOT_FOUND);
+   return c;
+   }
+
state-nbtsock = nbt_name_socket_init(state, event_ctx);
if (composite_nomem(state-nbtsock, c)) return c;

svn commit: samba r21594 - in branches/SAMBA_4_0/source/libcli/resolve: .

Author: metze
Date: 2007-02-28 17:26:25 + (Wed, 28 Feb 2007)
New Revision: 21594

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21594

Log:
give the same error in all resolve backends

metze
Modified:
   branches/SAMBA_4_0/source/libcli/resolve/host.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/resolve/host.c
===
--- branches/SAMBA_4_0/source/libcli/resolve/host.c 2007-02-28 17:25:29 UTC 
(rev 21593)
+++ branches/SAMBA_4_0/source/libcli/resolve/host.c 2007-02-28 17:26:25 UTC 
(rev 21594)
@@ -101,7 +101,7 @@
   the right thing to do */
ret = read(state-child_fd, address, sizeof(address)-1);
if (ret = 0) {
-   composite_error(c, NT_STATUS_BAD_NETWORK_NAME);
+   composite_error(c, NT_STATUS_OBJECT_NAME_NOT_FOUND);
return;
}
 
@@ -109,7 +109,7 @@
address[ret] = 0;
if (strcmp(address, 0.0.0.0) == 0 ||
inet_addr(address) == INADDR_NONE) {
-   composite_error(c, NT_STATUS_BAD_NETWORK_NAME);
+   composite_error(c, NT_STATUS_OBJECT_NAME_NOT_FOUND);
return;
}

svn commit: samba r21595 - in branches/SAMBA_4_0/source/librpc/idl: .

Author: metze
Date: 2007-02-28 17:27:35 + (Wed, 28 Feb 2007)
New Revision: 21595

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21595

Log:
add a constant and some comments

metze
Modified:
   branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl2007-02-28 17:26:25 UTC 
(rev 21594)
+++ branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl2007-02-28 17:27:35 UTC 
(rev 21595)
@@ -1023,6 +1023,18 @@
} drsuapi_DsReplicaObjectListItem;
 
/*
+* The DsAddEntry() call which creates a nTDSDSA object,
+* also adds a servicePrincipalName in the following form
+* to the computer account of the new domain controller
+* referenced by the serverReferenece attribute.
+*
+* 
E3514235-4B06-11D1-AB04-00C04FC2DCD2/new-ntdsdsa-object-guid-as-string/domain-dns-name
+*
+* also note that the serverReference isn't added to the new object!
+*/
+   const char *DRSUAPI_NTDSDSA_KRB5_SERVICE_GUID = 
E3514235-4B06-11D1-AB04-00C04FC2DCD2;
+
+   /*
 * please note the the current idl
 * for DsAddEntry does only parse 
 * what I saw between 2 w2k3 boxes

svn commit: samba r21596 - in branches/SAMBA_3_0_RELEASE: .

Author: jerry
Date: 2007-02-28 17:57:33 + (Wed, 28 Feb 2007)
New Revision: 21596

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21596

Log:
safety checking of release notes and give others a chance to start reviewing
Modified:
   branches/SAMBA_3_0_RELEASE/WHATSNEW.txt


Changeset:
Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt
===
--- branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2007-02-28 17:27:35 UTC (rev 
21595)
+++ branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2007-02-28 17:57:33 UTC (rev 
21596)
@@ -1,3 +1,178 @@
+   ==
+   Release Notes for Samba 3.0.25pre1
+  Feb 28, 2007
+   ==
+
+This is a preview release of the Samba 3.0.25 code base and
+is provided for testing only.  This release is *not* intended
+for production servers.  There has been a substantial amount
+of development since the 3.0.23/3.0.24 series of stable releases.
+We would like to ask the Samba community for help in testing
+these changes as we work towards the next significant production
+upgrade Samba 3.0 release.
+
+Major Featuers included in the 3.0.25 code base include:
+
+  o Significant improvements in the winbind offline logon 
+support
+  o Support for secure DDNS updates as part of the 'net 
+ads join' process
+  o 
+
+Major bug fixes in 3.0.25pre1 include:
+
+  o Compatibilities issues with Windows Vista
+
+
+
+##
+Changes
+###
+
+Changes since 3.0.24
+
+
+commits
+---
+
+
+o   Michael Adam [EMAIL PROTECTED]
+* Patch to lib/sysquotas_linux.c replacing some gets 
+  by sets.  This makes the difference between the get 
+  and set calls for SMB_USER_FS_QUOTA_TYPE and 
+  SMB_GROUP_FS_QUOTA_TYPE. 
+
+
+o   Jeremy Allison [EMAIL PROTECTED]
+* winbind offline logon fixes.
+* Support for AD sites when locating domain controllers.
+* Fix libsmbclient bug with Konqueror and NetApp filers
+  that need a leading / in OpenAndX calls. 
+* BUG 4187: Possible crash in signing on/off code.
+* Fix memory leaks in pam_winbind.c.
+* Fix a bugin the sequence number store/fetch routines in 
+  winbindd_cache.tdb.
+* Fix the problem with Linux clients requesting O_WRONLY
+  on write-only files.
+* Fix a class of memory allocation bugs in the handling 
+  of user tokens.
+* Fix crash bug in winbindd caused by a bug ni the 
+  messaging dispatch code.
+* Fix memory bloat in trans calls caused by talloc()'ing 
+  memory off the wrong context.
+* Fix wildcard renames with SMBmv.
+
+
+o   Danilo Almeida [EMAIL PROTECTED]
+* Add additional debug support for pam_winbind.
+* Add support for listing multiple groups in pam_winbind's
+  require-membership-of option which act as a logical OR.
+
+
+o   Andrew Benham [EMAIL PROTECTED]
+* BUG 4290: Properly compute time to password expiration 
+  in message from pam_winbind.
+
+
+
+o   Kai Blin [EMAIL PROTECTED]
+* Match Windows NTLMSSP flags.
+
+
+o   Gerald (Jerry) Carter [EMAIL PROTECTED]
+* Implement plugable winbind nss info interface.
+* Removal of unmaintained smbwrapper utility.
+* Fix server affinity bugs in the 'net ads join' 
+  code to include support for AD sites.
+* Implement DDNS update client code.
+
+
+o   Alex Deiter [EMAIL PROTECTED]
+
+
+o   Mathias Dietz [EMAIL PROTECTED]
+* Initial implementation of the GPFS VFS module.
+* Work on NFSv4 ACL VFS plugin.
+
+
+o   Guenther Deschner [EMAIL PROTECTED]
+* winbind offline logon fixes.
+* Support for AD sites when locating domain controllers.
+* Various fixes for 'net ads' user management functions.
+* Add an CLDAP client written in perl.
+* Cleanups to the Krb5 ticket refresh code in winbindd.
+
+
+o   Krishna Ganugapati [EMAIL PROTECTED]
+* Implement DDNS update client code.
+   
+
+o   David Hu [EMAIL PROTECTED]
+* BUG 4267: Fix memory leaks in ldpasam.
+
+
+o   Bjoern Jacke [EMAIL PROTECTED]
+* BUG 4244: Limit stat cache to a default of 1MB.
+
+
+o   Volker Lendecke [EMAIL PROTECTED]
+* Allow changing of the hashsize when runing tdbbackup.
+* Implement secure DDNS update code
+* Klocwork fixes.
+* BUG 4273: Fix crash in 'net rpc vampire'
+* Refactor older SMB file serving code.
+* Implement support for inotify when serving CIFS change 
+  notification requests.
+
+
+o   Herb Lewis [EMAIL PROTECTED]
+* Cleanups to sharesec utility.
+* Compilter warning cleanups.
+
+
+o   Jim McDonough [EMAIL PROTECTED]
+* Bug fixes for GPFS VFS module.
+
+
+o   Gomati Mohanan [EMAIL PROTECTED]
+* Work on NFSv4 ACL VFS plugin.
+
+
+o   James Peach [EMAIL PROTECTED]
+* Replace exit_server with exit_server_cleanly

svn commit: samba-docs r1036 - in trunk/manpages-3: .

Author: jpeach
Date: 2007-02-28 18:38:34 + (Wed, 28 Feb 2007)
New Revision: 1036

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=1036

Log:
Document shadow_copy module.

NOTE - the formatting is a bit wonky because itemized list emits a
trailing .RE the messes up the indentation of the ssubsequent paragraph.
Also, itemizedlist emits character entities (dot points?) that man
doesn't appear to understand (ie. it renders them as  #8226;).

suggestions welcome on how to fix the above :)

Added:
   trunk/manpages-3/smb-vfs-shadow_copy.8.xml


Changeset:
Added: trunk/manpages-3/smb-vfs-shadow_copy.8.xml
===
--- trunk/manpages-3/smb-vfs-shadow_copy.8.xml  2007-02-28 17:11:03 UTC (rev 
1035)
+++ trunk/manpages-3/smb-vfs-shadow_copy.8.xml  2007-02-28 18:38:34 UTC (rev 
1036)
@@ -0,0 +1,117 @@
+?xml version=1.0 encoding=iso-8859-1?
+!DOCTYPE refentry PUBLIC -//Samba-Team//DTD DocBook V4.2-Based Variant 
V1.0//EN http://www.samba.org/samba/DTD/samba-doc;
+refentry id=smb-vfs-shadow_copy.8
+
+refmeta
+   refentrytitlesmb-vfs-shadow_copy/refentrytitle
+   manvolnum8/manvolnum
+/refmeta
+
+
+refnamediv
+   refnameshadow_copy/refname
+   refpurposeMake a Samba share read only for a specified time 
period/refpurpose
+/refnamediv
+
+refsynopsisdiv
+   cmdsynopsis
+   commandvfs objects = shadow_copy/command
+   /cmdsynopsis
+/refsynopsisdiv
+
+refsect1
+   titleDESCRIPTION/title
+
+   paraThis module is part of the 
citerefentryrefentrytitlesamba/refentrytitle
+   manvolnum7/manvolnum/citerefentry suite./para
+
+   paraThe commandshadow_copy/command VFS module functionality
+   that is similar to Microsoft Shadow Copy services. When setup properly,
+   this module allows Microsoft Shadow Copy clients to browse
+   shadow copies on Samba shares.
+   /para
+
+   paraThis module is stackable./para
+
+/refsect1
+
+refsect1
+   titleCONFIGURATION/title
+
+   paracommandshadow_copy/command relies on a filesystem
+   snapshot implementation. Many common filesystems have native
+   support for this.
+   /para
+
+   paraFilesystem snapshots must be mounted on
+   specially named directories in order to be recognized by
+   commandshadow_copy/command. The snapshot mount points must
+   be immediate children of a the directory being shared./para
+
+   paraThe snapshot naming convention is @GMT-.MM.DD-hh.mm.ss,
+   where:
+   itemizedlist
+   listitemparacommand/command is the 4 digit 
year/para/listitem
+   listitemparacommandMM/command is the 2 digit 
month/para/listitem
+   listitemparacommandDD/command is the 2 digit 
day/para/listitem
+   listitemparacommandhh/command is the 2 digit 
hour/para/listitem
+   listitemparacommandmm/command is the 2 digit 
minute/para/listitem
+   listitemparacommandss/command is the 2 digit 
second./para/listitem
+   /itemizedlist
+   /para
+
+   paraThe commandshadow_copy/command snapshot naming 
convention can be produced with the following 
+   citerefentryrefentrytitledate/refentrytitle
+   manvolnum1/manvolnum/citerefentry command:
+   programlisting
+   TZ=GMT date [EMAIL PROTECTED]
+   /programlisting/para
+
+/refsect1
+
+refsect1
+   titleEXAMPLES/title
+
+   paraAdd shadow copy support to user home directories:/para
+programlisting
+smbconfsection name=[homes]/
+   smbconfoption name=vfs objectsshadow_copy/smbconfoption
+/programlisting
+
+/refsect1
+
+refsect1
+   titleCAVEATS/title
+
+   paraThis is not a backup, archival, or version control solution.
+   /para
+
+   paraWith Samba or Windows servers,
+   commandshadow_copy/command is designed to be an end-user
+   tool only. It does not replace or enhance your backup and
+   archival solutions and should in no way be considered as
+   such. Additionally, if you need version control, implement a
+   version control system./para
+
+/refsect1
+
+
+
+refsect1
+   titleVERSION/title
+
+   paraThis man page is correct for version 3.0.25 of the Samba suite.
+   /para
+/refsect1
+
+refsect1
+   titleAUTHOR/title
+
+   paraThe original Samba software and related utilities
+   were created by Andrew Tridgell. Samba is now developed
+   by the Samba Team as an Open Source project similar
+   to the way the Linux kernel is developed./para
+
+/refsect1
+
+/refentry

svn commit: samba r21597 - in branches/SAMBA_3_0_RELEASE: .

Author: jerry
Date: 2007-02-28 19:01:56 + (Wed, 28 Feb 2007)
New Revision: 21597

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21597

Log:
anotehr safety checkin of the releas notes for review
Modified:
   branches/SAMBA_3_0_RELEASE/WHATSNEW.txt


Changeset:
Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt
===
--- branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2007-02-28 17:57:33 UTC (rev 
21596)
+++ branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2007-02-28 19:01:56 UTC (rev 
21597)
@@ -17,7 +17,10 @@
 support
   o Support for secure DDNS updates as part of the 'net 
 ads join' process
-  o 
+  o Rewriteen IdMap interface which allows for TTL based 
+caching and per domain backends.
+  o Support for storing password policies in the passdb 
+backend.
 
 Major bug fixes in 3.0.25pre1 include:
 
@@ -32,6 +35,13 @@
 Changes since 3.0.24
 
 
+smb.conf changes
+
+
+Parameter Name  Description  Default
+--  ---  ---
+
+
 commits
 ---
 
@@ -41,6 +51,9 @@
   by sets.  This makes the difference between the get 
   and set calls for SMB_USER_FS_QUOTA_TYPE and 
   SMB_GROUP_FS_QUOTA_TYPE. 
+* Prevent collision from config.h created by standalone
+  compnent builds.
+* Store account policy settings in the passdb backend.
 
 
 o   Jeremy Allison [EMAIL PROTECTED]
@@ -61,6 +74,21 @@
 * Fix memory bloat in trans calls caused by talloc()'ing 
   memory off the wrong context.
 * Fix wildcard renames with SMBmv.
+* Fixes for pathname handling code.
+* Add in the wdel smbclient command to perform wildcard deletes.
+* Fix a bug that causes smbd to 'hang' intermittently while
+  updatign the trusted domain cache.
+* CLeanup error path processing in reduce_name().
+* Fixes for smbtorture tests (BASE-DELETE, ...)
+* Delete on close fixes (I completely understand it this time).
+* Remove unneeded checks on incoming uid/gid for mknod 
+  (fifo) unix extensions code.
+* More fixes for Unix Extensions support.
+* NTLMv2 fixes for Vista clients.
+* Add an optimized lookup for Domain Users and only report 
+  the current user (which is generally what the calling 
+  application wants to know anyways).
+   
 
 
 o   Danilo Almeida [EMAIL PROTECTED]
@@ -85,14 +113,19 @@
 * Fix server affinity bugs in the 'net ads join' 
   code to include support for AD sites.
 * Implement DDNS update client code.
+* Upper case the host/sAMAccountName in the keytab file.
+* Fix lookupname call in winbindd when joined to a child 
+  domain and trying to resolve a SID in a sibling domain.
+* Fix password changes against a Windows 2000 DC using pam_winbind.
+* Fix crash in pdbedit -L -w
+* Add winbind normalize names option.
 
 
-o   Alex Deiter [EMAIL PROTECTED]
 
-
 o   Mathias Dietz [EMAIL PROTECTED]
 * Initial implementation of the GPFS VFS module.
 * Work on NFSv4 ACL VFS plugin.
+* Add support for share modes to the GPFS VFS plugin.
 
 
 o   Guenther Deschner [EMAIL PROTECTED]
@@ -101,12 +134,26 @@
 * Various fixes for 'net ads' user management functions.
 * Add an CLDAP client written in perl.
 * Cleanups to the Krb5 ticket refresh code in winbindd.
+* Fixes for various error messages from pam_winbind when password
+  policies are being enforced.
+* Implement grace logons for offline authentications in pam_winbind.
+* Fixes for idmap_ad.
+* Mem leak fixes.
 
 
+o   SATOH Fumiyasu [EMAIL PROTECTED]
+* BUG 3319: Ensure that 'hide unreadable' does not filter
+  MS-DFS links.
+
+
 o   Krishna Ganugapati [EMAIL PROTECTED]
 * Implement DDNS update client code.

 
+o   YAMASAKI Hiroyuki [EMAIL PROTECTED]
+* BUG 4346: Fix type reported for hidden shares via MS-RPC.
+
+
 o   David Hu [EMAIL PROTECTED]
 * BUG 4267: Fix memory leaks in ldpasam.
 
@@ -118,11 +165,16 @@
 o   Volker Lendecke [EMAIL PROTECTED]
 * Allow changing of the hashsize when runing tdbbackup.
 * Implement secure DDNS update code
-* Klocwork fixes.
+* Klocwork, Covrity, and IBM Checker fixes.
 * BUG 4273: Fix crash in 'net rpc vampire'
 * Refactor older SMB file serving code.
+* Refactor open directory file serving code.
 * Implement support for inotify when serving CIFS change 
   notification requests.
+* Fixes to allow Samba 3.0 to pass various smbtorture tests
+  (RAW-OPEN, RAW-UNLINK, RAW-CLOSE, ...)
+* Refactor delete on close file server code.
+* MS-DFS fixes for Vista clients.
 
 
 o   Herb Lewis [EMAIL PROTECTED]
@@ -134,6 +186,14 @@
 * Bug fixes for GPFS VFS module.
 
 
+
+o   Stefan Metzmacher [EMAIL PROTECTED]
+[merges from SAMBA_4_0]
+* Portability fixes for dlopen()
+* Sync libreplace
+   
+
+

svn commit: samba-docs r1037 - in trunk/manpages-3: .

Author: jpeach
Date: 2007-02-28 19:02:50 + (Wed, 28 Feb 2007)
New Revision: 1037

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=1037

Log:
Document netatalk VFS module.

Added:
   trunk/manpages-3/smb-vfs-netatalk.8.xml


Changeset:
Added: trunk/manpages-3/smb-vfs-netatalk.8.xml
===
--- trunk/manpages-3/smb-vfs-netatalk.8.xml 2007-02-28 18:38:34 UTC (rev 
1036)
+++ trunk/manpages-3/smb-vfs-netatalk.8.xml 2007-02-28 19:02:50 UTC (rev 
1037)
@@ -0,0 +1,73 @@
+?xml version=1.0 encoding=iso-8859-1?
+!DOCTYPE refentry PUBLIC -//Samba-Team//DTD DocBook V4.2-Based Variant 
V1.0//EN http://www.samba.org/samba/DTD/samba-doc;
+refentry id=smb-vfs-netatalk.8
+
+refmeta
+   refentrytitlesmb-vfs-netatalk/refentrytitle
+   manvolnum8/manvolnum
+/refmeta
+
+
+refnamediv
+   refnamenetatalk/refname
+   refpurposehide .AppleDouble files from CIFS clients/refpurpose
+/refnamediv
+
+refsynopsisdiv
+   cmdsynopsis
+   commandvfs objects = netatalk/command
+   /cmdsynopsis
+/refsynopsisdiv
+
+refsect1
+   titleDESCRIPTION/title
+
+   paraThis module is part of the 
citerefentryrefentrytitlesamba/refentrytitle
+   manvolnum7/manvolnum/citerefentry suite./para
+
+   paraThe commandnetatalk/command VFS module dynamically
+   hides .AppleDouble files, preventing spurious errors on some
+   CIFS clients. .AppleDouble files may be created by historic
+   implementations of AFP (Apple Filing Protocol) on servers. /para
+
+   paraThis module is stackable./para
+
+/refsect1
+
+refsect1
+   titleEXAMPLES/title
+
+   paraHide .AppleDouble files on the [data] share:/para
+programlisting
+smbconfsection name=[data]/
+   smbconfoption name=vfs objectsnetatalk/smbconfoption
+/programlisting
+
+/refsect1
+
+refsect1
+   titleCAVEATS/title
+   paraThis module is largely historic and unlikely to be of use
+   in modern networks since current Apple systems are able to mount CIFS
+   shares natively.
+   /para
+
+/refsect1
+
+refsect1
+   titleVERSION/title
+   paraThis man page is correct for version 3.0.25 of the Samba suite.
+   /para
+/refsect1
+
+refsect1
+   titleAUTHOR/title
+
+   paraThe original Samba software and related utilities
+   were created by Andrew Tridgell. Samba is now developed
+   by the Samba Team as an Open Source project similar
+   to the way the Linux kernel is developed./para
+
+/refsect1
+
+/refentry

svn commit: samba r21598 - in branches/SAMBA_3_0_RELEASE: .

Author: jerry
Date: 2007-02-28 19:18:12 + (Wed, 28 Feb 2007)
New Revision: 21598

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=21598

Log:
checkin before I sync to the 3.0.25 so people can fix typos directly
Modified:
   branches/SAMBA_3_0_RELEASE/WHATSNEW.txt


Changeset:
Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt
===
--- branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2007-02-28 19:01:56 UTC (rev 
21597)
+++ branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2007-02-28 19:18:12 UTC (rev 
21598)
@@ -53,7 +53,6 @@
   SMB_GROUP_FS_QUOTA_TYPE. 
 * Prevent collision from config.h created by standalone
   compnent builds.
-* Store account policy settings in the passdb backend.
 
 
 o   Jeremy Allison [EMAIL PROTECTED]
@@ -83,11 +82,14 @@
 * Delete on close fixes (I completely understand it this time).
 * Remove unneeded checks on incoming uid/gid for mknod 
   (fifo) unix extensions code.
-* More fixes for Unix Extensions support.
+* More fixes for Unix Extensions include support for POSIX locking.
 * NTLMv2 fixes for Vista clients.
 * Add an optimized lookup for Domain Users and only report 
   the current user (which is generally what the calling 
   application wants to know anyways).
+* Fixes for supporting the Vista backup utility based on work 
+  by Joe Meadows [EMAIL PROTECTED].
+* Fix 4377: Fix rename of foo - Foo.

 
 
@@ -138,9 +140,15 @@
   policies are being enforced.
 * Implement grace logons for offline authentications in pam_winbind.
 * Fixes for idmap_ad.
-* Mem leak fixes.
+* Memory leak fixes.
+* BUG 4009: Fixes leaking file descriptors (CLOSE_WAIT) in 
+  winbindd with short lived service tickets
 
 
+o   [EMAIL PROTECTED]
+* Fix file descriptor leak from an error path in winbindd.
+
+
 o   SATOH Fumiyasu [EMAIL PROTECTED]
 * BUG 3319: Ensure that 'hide unreadable' does not filter
   MS-DFS links.
@@ -234,6 +242,11 @@
 o   Andrew Tridgell [EMAIL PROTECTED]
 
 
+o   Jelmer Vernooij [EMAIL PROTECTED]
+* Implement support for IDL autogenerated code to
+  handle the MS-RPC parsing functions.
+
+
 o   Don Watson [EMAIL PROTECTED]
 * Fixes for 'net rpc vampire' and the guest account

svn commit: samba r21599 - in branches/SAMBA_3_0_25: .