[Samba] samba 3.6.0 compile error --enable-external-libtdb=yes (works for samba-3.5.11)

2011-09-12 Thread Werner Maes
Hello

I'm trying to compile samba-3.6.0 on a RHEL6 server (relevant options below):

--with-libtalloc=no \
--enable-external-libtalloc=yes \
--with-libtdb=no
--enable-external-libtdb=yes

This does not work, I get an error Unable to find libtdb.  However:

libtdb-devel-1.2.1-3.el6.i686
libtdb-1.2.1-3.el6.i686

have been installed.

This works fine when I try to build samba-3.5.11 on the same machine.

What's has changed?
I could find that in Fedora Rawhide they have disabled this option in the spec 
file but without specifying a reason:
http://permalink.gmane.org/gmane.network.samba.internals/55452


Kind regards

Werner
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba-3.5.4: compilation fails on RHAS5U5

2010-09-09 Thread Werner Maes
hello
I managed to compile:

I had to add some lines to the spec file:

--with-cifsumount \

/usr/share/locale/de/LC_MESSAGES/net.mo
%{_includedir}/wbc_async.h
%{_mandir}/man5/pam_winbind.conf.5*

werner

 -Original Message-
 From: Nico Kadel-Garcia [mailto:nka...@gmail.com]
 Sent: vrijdag 3 september 2010 23:23
 To: Werner Maes
 Subject: Re: [Samba] samba-3.5.4: compilation fails on RHAS5U5
 
 On Fri, Sep 3, 2010 at 9:07 AM, Werner Maes
 werner.m...@icts.kuleuven.be wrote:
  thank you but apparently these rpms are not based on the spec file
 given by samba for rhel (but on same spec file from suse).
  e.g.: there is a rpm called samba-cifsmount which is not part of the
 spec file.
 
  my question remains: why does the spec file provided does not
 compile?
 
  kind regards
 
  werner
 
 It's confusing, I admit. The author of that RPM is compiling in his
 personal build environment, not using mock, which apparently works
 for him. I've sent him some updates for his .spec file to improve RHEL
 compatibility, which he's incorporated, but it could use some
 refinement.
 
 The tarball .spec file is seriously out of date, which is why it
 doesn't work. No one's pushed a more recent one into the source tree,
 not even people like me.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba-3.5.4: compilation fails on RHAS5U5

2010-09-03 Thread Werner Maes
Hello

The link you provided is completely outdated ! There are no new samba packages 
available there !

kind regards

werner

 -Original Message-
 From: Nico Kadel-Garcia [mailto:nka...@gmail.com]
 Sent: donderdag 2 september 2010 23:50
 To: Werner Maes
 Cc: sa...@samba.org
 Subject: Re: [Samba] samba-3.5.4: compilation fails on RHAS5U5
 
 Grab and review the RPM's from
 http://download.samba.org/samba/ftp/Binary_Packages/RedHat/.
 
 On Wed, Sep 1, 2010 at 8:37 AM, Werner Maes
 werner.m...@icts.kuleuven.be wrote:
  hello
 
  I tried to compile samba on Redhat AS5U5 but it fails with this
 message: Install: cannot stat `source3/bin/umount.cifs': No such file
 or directory.
 
  Any solution?
 
  kind regards
 
  werner maes
 
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba-3.5.4: compilation fails on RHAS5U5

2010-09-03 Thread Werner Maes
thank you but apparently these rpms are not based on the spec file given by 
samba for rhel (but on same spec file from suse).
e.g.: there is a rpm called samba-cifsmount which is not part of the spec file.

my question remains: why does the spec file provided does not compile?

kind regards

werner

 -Original Message-
 From: Nico Kadel-Garcia [mailto:nka...@gmail.com]
 Sent: vrijdag 3 september 2010 14:46
 To: Werner Maes
 Cc: sa...@samba.org
 Subject: Re: [Samba] samba-3.5.4: compilation fails on RHAS5U5
 
 On Fri, Sep 3, 2010 at 3:36 AM, Werner Maes
 werner.m...@icts.kuleuven.be wrote:
  Hello
 
  The link you provided is completely outdated ! There are no new samba
 packages available there !
 
  kind regards
 
  werner
 
 Oh, sorry, there is a README.RHEL there at points to the new location.
 
 http://ftp.sernet.de/pub/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba-3.5.4: compilation fails on RHAS5U5

2010-09-01 Thread Werner Maes
hello

I tried to compile samba on Redhat AS5U5 but it fails with this message: 
Install: cannot stat `source3/bin/umount.cifs': No such file or directory.

Any solution?

kind regards

werner maes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] problem compiling samba-3.5.2 on RHEL 5.5

2010-04-15 Thread Werner Maes
this is my output when I try to compile samba-3.5.2 using the spec file 
provided in the samba packages:

Linking bin/smbclient
/usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libreadline.so: undefined 
reference to `PC'
/usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libreadline.so: undefined 
reference to `tgetflag'
/usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libreadline.so: undefined 
reference to `tgetent'
/usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libreadline.so: undefined 
reference to `UP'
/usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libreadline.so: undefined 
reference to `tputs'
/usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libreadline.so: undefined 
reference to `tgoto'
/usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libreadline.so: undefined 
reference to `tgetnum'
/usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libreadline.so: undefined 
reference to `BC'
/usr/lib/gcc/i386-redhat-linux/4.1.2/../../../libreadline.so: undefined 
reference to `tgetstr'
collect2: ld returned 1 exit status
make: *** [bin/smbclient] Error 1
error: Bad exit status from /var/tmp/rpm-tmp.14813 (%build)


any ideas?

werner
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Cannot compile RHEL rpms using samba 3.4.2 series source

2009-10-03 Thread Werner Maes
Thanks for your effort, I' have a look on monday.
Should we reopen this bug which has now status RESOLVED as a duplicate of bug 
6742 but as we know now this is not the case !

kind regards

werner

Van: D.L. Meyer [dlme...@uiuc.edu]
Verzonden: zaterdag 3 oktober 2009 0:51
Aan: Michael Wood; Werner Maes
CC: samba@lists.samba.org; k...@sernet.de
Onderwerp: Re: [Samba] Cannot compile RHEL rpms using samba 3.4.2 series source

I've applied the patch for #6742 to the 3.4.2 package, and it makes no 
difference to the RHEL issue.   (#6742 was reported for debian systems...)

I have been able to determine that the problem appears to be with the 
carry-forward of the precompiled headers.   The 'make pch' step proceeds 
without error, but as the process starts the main 'make all' part, it acts like 
the precompiled headers are not used.   To verify this, I modified the 'make 
all' call from:

make CFLAGS=$RPM_OPT_FLAGS -D_GNU_SOURCE -j2 \
all modules pam_smbpass

to:

make CFLAGS=$RPM_OPT_FLAGS -D_GNU_SOURCE -I. 
-I/usr/src/redhat/BUILD/samba-3.4.2/source3 \
-I/usr/src/redhat/BUILD/samba-3.4.2/source3/iniparser/src -Iinclude 
-I./include \
-I./../lib/replace -I./../lib/talloc -I./../lib/tevent 
-I./../lib/tdb/include -I./libaddns -I./librpc -I./.. \
-I/usr/src/redhat/BUILD/samba-3.4.2/lib/tdb/include -I./libaddns 
-I./librpc -I./../lib/popt \
-I/usr/src/redhat/BUILD/samba-3.4.2/source3/lib -I.. -I../source4  -j2 
\
all modules pam_smbpass

(Basically, including the entire list of include directories specified on the 
command line in the 'make pch' section.)

This allows the build to proceed -- apparently properly -- until a later 
problem stops the process at 'ldb_modules.c':  it complains about 'MODULESDIR' 
being undefined in function 'ldb_try_load_dso'.

A little research and another addition results in something that at least 
completes the build:

make CFLAGS=$RPM_OPT_FLAGS -D_GNU_SOURCE -I. 
-I/usr/src/redhat/BUILD/samba-3.4.2/source3 \
-I/usr/src/redhat/BUILD/samba-3.4.2/source3/iniparser/src -Iinclude 
-I./include \
-I./../lib/replace -I./../lib/talloc -I./../lib/tevent 
-I./../lib/tdb/include -I./libaddns -I./librpc -I./.. \
-I/usr/src/redhat/BUILD/samba-3.4.2/lib/tdb/include -I./libaddns 
-I./librpc -I./../lib/popt \
-I/usr/src/redhat/BUILD/samba-3.4.2/source3/lib -I.. -I../source4 
-DMODULESDIR=\'/usr/lib/samba\'  -j2 \
all modules pam_smbpass


I haven't tested the resulting packages yet, though.  Hopefully, someone more 
versed in the use of precompiled headers can take a look here and see what 
might be wrong...

-D



--On Friday, October 02, 2009 2:44 PM +0200 Michael Wood esiot...@gmail.com 
wrote:

 2009/10/2 Werner Maes werner.m...@icts.kuleuven.be:
 [...]
  ps: or maybe the resolution only refers that it is a duplicate of bug 6742?

 Exactly.

 Did you try the patch attached to bug 6742?

 --
 Michael Wood esiot...@gmail.com
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Cannot compile RHEL rpms using samba 3.4.2 series source

2009-10-02 Thread Werner Maes
hello

Although https://bugzilla.samba.org/show_bug.cgi?id=6721 has status RESOLVED, I 
still get an error when trying to compile samba-3.4.2 on RHEL5.

The following command failed:
gcc -O2 -g -march=i386 -mcpu=i686 -D_GNU_SOURCE -fPIC -c 
../lib/replace/getpass.c -o ../lib/replace/getpass.o
make: *** [../lib/replace/snprintf.o] Error 1
make: *** Waiting for unfinished jobs
make: *** [../lib/talloc/talloc.o] Error 1
make: *** [../lib/replace/replace.o] Error 1

kind regards

werner

ps: or maybe the resolution only refers that it is a duplicate of bug 6742?


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Cannot compile RHEL rpms using samba 3.4.2 series source

2009-10-02 Thread Werner Maes
I applied the patch from Matt Kraai 
(https://bugzilla.samba.org/attachment.cgi?id=4728action=view)
but it still does not compile !!

The patch does not seem to work on RHEL5. Has anybody else tested this patch?

werner

 -Original Message-
 From: Michael Wood [mailto:esiot...@gmail.com]
 Sent: vrijdag 2 oktober 2009 14:44
 To: Werner Maes
 Cc: samba@lists.samba.org; k...@sernet.de
 Subject: Re: [Samba] Cannot compile RHEL rpms using samba 3.4.2 series
 source
 
 2009/10/2 Werner Maes werner.m...@icts.kuleuven.be:
 [...]
  ps: or maybe the resolution only refers that it is a duplicate of bug
 6742?
 
 Exactly.
 
 Did you try the patch attached to bug 6742?
 
 --
 Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] compiling samba-3.4.x on RHEL4

2009-09-14 Thread Werner Maes
does this this mean we have to wait for 3.4.2?
or is it necessary to open a bug report?

w.

 -Original Message-
 From: Eero Volotinen [mailto:eero.voloti...@iki.fi]
 Sent: donderdag 10 september 2009 18:03
 To: Werner Maes
 Cc: 'Ralf Hornik Mailings'; samba@lists.samba.org
 Subject: Re: [Samba] compiling samba-3.4.x on RHEL4
 
 Werner Maes kirjoitti:
  no I haven't yet.
 
  perhaps I will try that tomorrow.
 
  but I'm wondering if I'm the only one with this error?
 
 No, looks like this problem comes also with my environment running
 Centos 5.3 32bit. (rhel 5 clone)
 
 I think that is bug in make rpms system.
 
 --
 Eero
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] compiling samba-3.4.x on RHEL4

2009-09-14 Thread Werner Maes
thank you !

werner

 -Original Message-
 From: ee...@welho.com [mailto:ee...@welho.com]
 Sent: maandag 14 september 2009 14:32
 To: Werner Maes
 Cc: 'Eero Volotinen'; 'Ralf Hornik Mailings'
 Subject: RE: [Samba] compiling samba-3.4.x on RHEL4
 
 I just opened bug about this:
 
 https://bugzilla.samba.org/show_bug.cgi?id=6721
 
 Please add, if any comments or ideas.
 
 thanks
 --
 Eero,
 RHCE
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] compiling samba-3.4.x on RHEL4

2009-09-10 Thread Werner Maes
well

in the Makefile I see:

CPPFLAGS=-DHAVE_CONFIG_H  -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 
-D_GNU_SOURCE -Iinclude -I./include -I. -I. -I./../lib/replace 
-I./../lib/talloc -I./../lib/tevent -I./../lib/tdb/include -I./libaddns 
-I./librpc -I./.. -I./../lib/popt -DLDAP_DEPRECATED

so it seems that it should find replace.h

can't figure out what's wrong her :(

werner

 -Original Message-
 From: Michael Wood [mailto:esiot...@gmail.com]
 Sent: donderdag 10 september 2009 13:55
 To: Werner Maes
 Subject: Re: [Samba] compiling samba-3.4.x on RHEL4
 
 2009/9/10 Werner Maes werner.m...@icts.kuleuven.be:
  hello
 
  when I try to compile samba-3.4.x on RHEL4 with the samba.spec in the
 packaging folder I always get this error:
 
  Compiling ../lib/talloc/talloc.c
  ../lib/talloc/talloc.c:50:21: replace.h: No such file or directory
 
 Looks like a -I../lib/replace (or equivalent) is missing somewhere.
 
  ../lib/talloc/talloc.c: In function `_talloc_realloc':
  ../lib/talloc/talloc.c:987: error: `bool' undeclared (first use in
 this function)
  ../lib/talloc/talloc.c:987: error: (Each undeclared identifier is
 reported only once
  ../lib/talloc/talloc.c:987: error: for each function it appears in.)
  ../lib/talloc/talloc.c:987: error: syntax error before malloced
  ../lib/talloc/talloc.c:1035: error: `malloced' undeclared (first use
 in this function)
  ../lib/talloc/talloc.c:1035: error: `true' undeclared (first use in
 this function)
  ../lib/talloc/talloc.c:1486:1: warning: va_copy redefined
 
 This looks like HAVE_VA_COPY was not correctly defined.
 
 I think you should first figure out the replace.h issue before looking
 at the HAVE_VA_COPY issue, though.
 
  In file included from ../lib/talloc/talloc.h:30,
                  from ../lib/talloc/talloc.c:51:
  /usr/lib/gcc/i386-redhat-linux/3.4.6/include/stdarg.h:54:1: warning:
 this is the location of the previous definition
  The following command failed:
  ccache gcc -O2 -g -march=i386 -mcpu=i686 -D_GNU_SOURCE -fPIC -c
 ../lib/talloc/talloc.c -o ../lib/talloc/talloc.o
  make: *** [../lib/talloc/talloc.o] Error 1
  error: Bad exit status from /var/tmp/rpm-tmp.72692 (%build)
 
 --
 Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] compiling samba-3.4.x on RHEL4

2009-09-10 Thread Werner Maes
replace.h is in /usr/src/redhat/BUILD/samba-3.4.1/lib/replace/

The Makefile can be found in /usr/src/redhat/BUILD/samba-3.4.1/source3/

so -I./../lib/replace should point to the folder where replace.h can be found? 
Or am I missing sometmhing?

CPPFLAGS=-DHAVE_CONFIG_H  -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 
-D_GNU_SOURCE -Iinclude -I./include -I. -I. -I./../lib/replace 
-I./../lib/talloc -I./../lib/tevent -I./../lib/tdb/include -I./libaddns 
-I./librpc -I./.. -I./../lib/popt -DLDAP_DEPRECATED

werner

ps: in samba 3.2.x  3.3.x the folder lib/replace was situated in the source/ 
folder, but in samba 3.4.x it is no longer there but one directory up !

 -Original Message-
 From: Ralf Hornik [mailto:r...@ralf-hornik.de]
 Sent: donderdag 10 september 2009 16:20
 To: Werner Maes
 Cc: 'Michael Wood'; samba@lists.samba.org
 Subject: Re: [Samba] compiling samba-3.4.x on RHEL4
 
 Werner Maes werner.m...@icts.kuleuven.be wrote:
 
  so it seems that it should find replace.h
  can't figure out what's wrong her :(
 
 So where is your replace.h located?
 
 Ralf
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] compiling samba-3.4.x on RHEL4

2009-09-10 Thread Werner Maes
no I haven't yet.

perhaps I will try that tomorrow. 

but I'm wondering if I'm the only one with this error?

w.

 -Original Message-
 From: Ralf Hornik Mailings [mailto:r...@best.homeunix.org]
 Sent: donderdag 10 september 2009 16:56
 To: Werner Maes
 Cc: samba@lists.samba.org
 Subject: Re: [Samba] compiling samba-3.4.x on RHEL4
 
 Werner Maes werner.m...@icts.kuleuven.be wrote:
 
  replace.h is in /usr/src/redhat/BUILD/samba-3.4.1/lib/replace/
 
  The Makefile can be found in /usr/src/redhat/BUILD/samba-
 3.4.1/source3/
 
  so -I./../lib/replace should point to the folder where replace.h can
  be found? Or am I missing sometmhing?
 
  CPPFLAGS=-DHAVE_CONFIG_H  -D_LARGEFILE64_SOURCE
  -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE -Iinclude -I./include -I. -I.
  -I./../lib/replace -I./../lib/talloc -I./../lib/tevent
  -I./../lib/tdb/include -I./libaddns -I./librpc -I./..
  -I./../lib/popt -DLDAP_DEPRECATED
 
 Have you already tried to compile by hand? (just for reproducing)
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba domain trust with Windows 2008 R0

2007-09-26 Thread werner maes

Hello

I'm trying to establish a trust between samba 3.0.26a  windows 2008 
R0 server (windows 2008 functional mode).

Apparently it does not work. Only windows 2003 functional mode?


net rpc trustdom establish gives

[2007/09/26 13:48:06, 3] libsmb/cliconnect.c:cli_session_setup(961)
  SPNEGO login failed: No logon interdomain trust account
[2007/09/26 13:48:06, 1] libsmb/cliconnect.c:cli_full_connection(1606)
  failed session setup with NT_STATUS_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT
Could not connect to server WINDOWS2008
[2007/09/26 13:48:06, 3] libsmb/cliconnect.c:cli_start_connection(1509)
  Connecting to host=WINDOWS2008
[2007/09/26 13:48:06, 3] lib/util_sock.c:open_socket_out(874)
  Connecting to 10.33.6.145 at port 445
[2007/09/26 13:48:06, 4] libsmb/clirap2.c:cli_get_pdc_name(1279)
  cli_get_pdc_name: machine WINDOWS2008 failed the NetServerEnum 
call. Error was : RAP code 2184.

[2007/09/26 13:48:06, 0] utils/net_rpc.c:rpc_trustdom_establish(5673)
  NetServerEnum2 error: Couldn't find primary domain 
controller  for domain PCLAB8




Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: idmap backend questions

2007-09-21 Thread werner maes
for you information: because I use security=user, I don't have 
kerberos enabled on my samba server


Hello

I have some questions regarding the idmap backend.

Does this only work when you've have joined your samba server to the 
AD domain (security = ADS)?
I would like to map SID to uids/gids on a samba server that has a 
trust with an AD server.


In my setup I have established a trust between samba and AD; they are 
both PDC's.


smb.conf
idmap domains = PCLABTEST
idmap config PCLABTEST:backend = ad
idmap config PCLABTEST:default = yes
idmap config PCLABTEST:range = 100 - 30
idmap alloc backend = tdb
idmap alloc config:range = 100 - 3

== /var/log/samba/winbindd.log
[2007/09/21 09:56:31, 1] 
nsswitch/idmap_ad.c:ad_idmap_cached_connection_internal(115)

  ad_idmap_init: failed to connect to AD
[2007/09/21 09:56:31, 1] nsswitch/idmap_ad.c:idmap_ad_sids_to_unixids(514)
  ADS uninitialized
[2007/09/21 09:56:31, 2] nsswitch/idmap.c:idmap_backends_sids_to_unixids(1148)
  ERROR: NTSTATUS = 0xc001

ps: I have configured samba with these options included 
(--with-shared-modules=idmap_ad --with-ads) and have installed 
Identity management for Unix on the AD server. I have given a user 
a uid  gid in AD.
If I do an strace of the winbind proces, I can see both the uidNumer 
and gidNumber, both samba does not pick it up.

uidNumber1\204\0\0\0\7\4\00510\204\0\0\0\30\4\tgidNumber1\204\0\0\0\7\4\00510\204\0\0\0%\4\2


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] idmap backend questions

2007-09-21 Thread werner maes

Hello

I have some questions regarding the idmap backend.

Does this only work when you've have joined your samba server to the 
AD domain (security = ADS)?
I would like to map SID to uids/gids on a samba server that has a 
trust with an AD server.


In my setup I have established a trust between samba and AD; they are 
both PDC's.


smb.conf
idmap domains = PCLABTEST
idmap config PCLABTEST:backend = ad
idmap config PCLABTEST:default = yes
idmap config PCLABTEST:range = 100 - 30
idmap alloc backend = tdb
idmap alloc config:range = 100 - 3

== /var/log/samba/winbindd.log
[2007/09/21 09:56:31, 1] 
nsswitch/idmap_ad.c:ad_idmap_cached_connection_internal(115)

  ad_idmap_init: failed to connect to AD
[2007/09/21 09:56:31, 1] nsswitch/idmap_ad.c:idmap_ad_sids_to_unixids(514)
  ADS uninitialized
[2007/09/21 09:56:31, 2] nsswitch/idmap.c:idmap_backends_sids_to_unixids(1148)
  ERROR: NTSTATUS = 0xc001

ps: I have configured samba with these options included 
(--with-shared-modules=idmap_ad --with-ads) and have installed 
Identity management for Unix on the AD server. I have given a user 
a uid  gid in AD.
If I do an strace of the winbind proces, I can see both the uidNumer 
and gidNumber, both samba does not pick it up.

uidNumber1\204\0\0\0\7\4\00510\204\0\0\0\30\4\tgidNumber1\204\0\0\0\7\4\00510\204\0\0\0%\4\2


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba - ad domain trust windows 2003 native mode

2007-09-19 Thread werner maes

Hello

Is it possible to establish an interdomain trust between samba 
3.0.25c and Windows 2003 Active Directory in Windows 2003 native mode?
According to the howto Chapter 18, last phrase it is not: It works 
with Samba-3 and NT4 domains, and also with Samba-3 and Windows 200x 
ADS in mixed mode .


But Volcker Lendecke replied on a mail in the samba mailing list:


List:   http://marc.info/?l=sambar=1w=2samba
Subject:http://marc.info/?t=11818566309r=1w=2Re: [Samba] 
Local accounts and AD

Date:   http://marc.info/?l=sambar=1w=2b=2007062007-06-15 15:49:52


 I can't establish a trust because AD is running in native mode.  To
  establish a trust domain AD must be running in mixed mode.  At least
  this is how I understand the problem.

That's a wrong assumption. You can certainly use a trust in
native mode. The only thing you can not do anymore is
install an NT4 BDC into the domain that was converted to
native.

So my question: what's the story on this? As for now I cannot make 
the trust work (samba as the trusting domain).




Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Using Samba: Third Edition

2007-09-18 Thread werner maes

Hello

When will this book arrive online?

http://us1.samba.org/samba/docs/using_samba/toc.htmlUsing Samba, 
2ed, O'Reilly  Associates (Feb. 2003). (Jan 2007: The 3rd edition 
has been released and will be available online soon).


kind regards

werner




Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] net rpc trustdom list: enumerates all accounts

2007-05-07 Thread werner maes

Hello

When I perform the net rpc trustdom list command I get the 
couldn't enumerate accounts error.

I use LDAP as passdb backend with approximately 3 accounts.
If I run the command, I can see from my LDAP logs that it tries to 
list every account on the LDAP server. Therefore the net rpc 
trustdom list command times out.


Is this normal behaviour?

Werner

[EMAIL PROTECTED] net rpc trustdom list
Password:
Trusted domains list:

none

Trusting domains list:

[2007/05/07 09:45:53, 0] rpc_client/cli_pipe.c:rpc_api_pipe(438)
  cli_pipe: return critical error. Error was Call timed out: server 
did not respond after 1 milliseconds

[2007/05/07 09:45:53, 0] utils/net_rpc.c:rpc_trustdom_list(5445)
  Couldn't enumerate accounts. Error was: NT_STATUS_UNSUCCESSFUL


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Unable to follow dfs referral - still a problem for smbclient also freebsd smbfs

2007-03-26 Thread werner maes

At 19:35 8/03/2007, Jeremy Allison wrote:

On Thu, Mar 08, 2007 at 09:43:39AM +0100, werner maes wrote:
 At 20:46 7/03/2007, Jeremy Allison wrote:
 On Mon, Mar 05, 2007 at 01:56:56PM +0100, werner maes wrote:
 
hello
 
  I'm also interested to know whether this patch has made it to smbclient.
 
 I've just merged this from SAMBA_3_0 to SAMBA_3_0_25 and in simple
 testing it works following the DFS referral.
 
 I can't fix the *BSD smbfs of course, but smbclient should now
 work in these cases.
 
 Jeremy.

 tnank you
 I'll try it out as soon as 3.0.25 is available.
 has this patch made it into 3.0.25rc1?

No, I'm actually re-working the smbclient dfs code
right now (making sure it works with posix pathnames
etc.). I should be checking something in this week,
so it'll be in 3.0.25pre2, not pre1.

Jeremy.


hello

at first sight the dfs referrals now seem to work!
I'll do some more testing.

thanks very much

werner maes


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Unable to follow dfs referral - still a problem for smbclient also freebsd smbfs

2007-03-08 Thread werner maes

At 20:46 7/03/2007, Jeremy Allison wrote:

On Mon, Mar 05, 2007 at 01:56:56PM +0100, werner maes wrote:

   hello

 I'm also interested to know whether this patch has made it to smbclient.

I've just merged this from SAMBA_3_0 to SAMBA_3_0_25 and in simple
testing it works following the DFS referral.

I can't fix the *BSD smbfs of course, but smbclient should now
work in these cases.

Jeremy.


tnank you
I'll try it out as soon as 3.0.25 is available.
has this patch made it into 3.0.25rc1?

werner


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Unable to follow dfs referral - still a problem for smbclient also freebsd smbfs

2007-03-05 Thread werner maes


hello

I'm also interested to know whether this patch has made it to smbclient.


Hi,

Does anyone know if there has been any more progress on the problem of
browsing 'complex dfs roots'
see http://lists.samba.org/archive/smb-clients/2006-February/000622.html

Basically it occurs whenever you have a Microsoft Distributed File System
Tree where the links are to subfolders of the destination share.
Microsoft clients have no trouble browsing such trees.

The Samba HOWTO only gives an example of the basic case where the link
happens to be directly to the 'share folder' of the destination
i.e

root# cd /export/dfsroot
root# ln -s msdfs:storageA\\shareA linka

in smb.conf...
[global]
netbios name = GANDALF
host msdfs = yes

[dfs]
path = /export/dfsroot
msdfs root = yes
---

But if you try instead:

root# ln -s msdfs:storageA\\shareA\mydata linka

Then if you mount \\GANDALF\dfs  using smbfs - you can't get into the linka
folder.

Using smbclient - when you try to cd to that folder you'd get a delay and
then:
Connection to storageA\shareA failed
Unable to follow dfs referral [//storageA\shareA/mydata]
cd \linka\: NT_STATUS_PATH_NOT_COVERED

As indicated above - in a windows explorer you can browse to and beyond this
DFS referral point.

I see there was an attempt at patching this a while back - but it may not
have been a complete solution and never seems to have made it into samba.
http://lists.samba.org/archive/samba-technical/2006-April/046454.html

It seems to me that FreeBSD is pretty crippled as a client for samba
networks because of this.. you just can't mount or browse such a network
properly. (These sorts of trees can't be that uncommon.. what are people
using for this... sharity??)
Maybe Linux can do it with it's mount.cifs capability.. Has anyone tried it?

Cheers,
Julian



Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbclient dfs-aware? part 2: getting pas dfs junction point?

2007-02-28 Thread werner maes

update:

I found some people with the same problem as me:

http://www.cs.washington.edu/lab/sw/uwcsesamba.html

Smbclient is not Dfs-aware. This means you can specify \\ntdfs\cs as 
a share, but when you attempt to drill down past the so-called Dfs 
junction points you will not get anywhere. In the following example 
this is illustrated. You cannot get to //ntdfs/cs/cse/www using 
smbclient.



% smbclient //ntdfs/cs
Password:
Domain=[CSERESEARCH] OS=[Windows Server 2003 3790] Server=[Windows 
Server 2003 5.2]

smb: \ ls
  .   D0  Thu Oct 16 16:17:54 2003
  ..  D0  Thu Oct 16 16:17:54 2003
  cse D0  Thu Oct 28 10:25:56 2004
  nt  D0  Wed Feb 25 15:28:09 2004

34522 blocks of size 1048576. 29260 blocks available
smb: \ cd cse
smb: \cse\ ls
  .   D0  Thu Oct 28 10:25:56 2004
  ..  D0  Thu Oct 28 10:25:56 2004

  www D0  Thu Oct 28 10:25:56 2004
  www2D0  Thu Oct 16 16:16:58 2003

34522 blocks of size 1048576. 29260 blocks available
smb: \cse\ cd www
smb: \cse\www\ ls
NT_STATUS_PATH_NOT_COVERED listing \cse\www\\*

34522 blocks of size 1048576. 29260 blocks available
smb: \cse\www\ q

hello

a quick question: is the smbclient program a dfs-aware client? can it 
access dfs points on a microsoft dfs server?


kind regards

werner


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbclient dfs-aware?

2007-02-01 Thread werner maes


hello

a quick question: is the smbclient program a dfs-aware client? can it 
access dfs points on a microsoft dfs server?


kind regards

werner


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbclient dfs-aware?

2007-02-01 Thread werner maes

in fact

dfs links work with version 3.0.23d.

but in fact I was testing with a DFS stand alone namespace (that's 
what MS calls it). This is not a DFS link. And this does not work. 
However I can access the namespace with my XP client.


so I have \\server\dfsnamespace\dfslink.

I can access the dfslink with smbclient but not the namespace. If I 
use the Windows Explorer in XP I can access both.


werner

At 15:53 1/02/2007, Gerald (Jerry) Carter wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

werner maes wrote:

 hello

 a quick question: is the smbclient program a dfs-aware
 client? can it access dfs points on a microsoft
 dfs server?

Yes.  I don't remember which version it was added in through.
Check the release notes.  And theres one or two outstanding
bugs at the moment.






cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFwf72IR7qMdg1EfYRAtb4AKDx2j933RNfyAKC+t0xt2OLCROYYQCg1nbL
d1DywzAvvyBAP/TfsVZ1FIs=
=sSNL
-END PGP SIGNATURE-




Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] sharing word files

2007-01-08 Thread werner maes


hello

I'm having the following problem:

On a share I have a user with read-only access to word files. Another 
user has read-write access to these files.


When the user with read-only access opens a word file and then the 
user with read-write access to these files opens the file, the 
read-write user has only read-only access.


If the read-write user opens the word file first, then he has 
read-write access.


My question:

Why doesn't a user with read-write access always has these permissions?

werner


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] glibc detected - invalid next size

2006-08-29 Thread werner maes


hello

does anybody know what this error means

glibc detected *** (free): invalid next size (normal) : 0x08486b78 ***

it occurs when I copy a whole list of files to a client

werner


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] windows XP media center 2005

2006-08-28 Thread werner maes


hello

apparently it is possible to patch XP Media Center Edition 2005 to 
join a domain, but I can't seem to find out how.

does anybody know which registry patch you need?

kind regards

werner

quoteWhen Microsoft released Windows XP Media Center Edition 2005, 
the ability to join domains was left out. The domain feature was 
eliminated because of pricing reasons as well as technical reasons. 
MCE 2005 relies on fast user switching to allow it's extender devices 
to connect to the central MCE workstation. If the MCE workstation is 
on a domain, fast user switching will not work, and any extender 
devices will not work.


If you do not use any extender devices, such as the set top boxes 
that allow you to watch Media Center content on your TV in your 
family room from your PC in your office, and you have a need to join 
a domain, it is now possible to make MCE 2005 join a domain. /quote





Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: windows XP media center 2005

2006-08-28 Thread werner maes

update:

I found a patch

01 - Insert Windows XP CD.
02 - Start  Run  X:\i386\winnt32.exe /cmdcons
03 - (replace X: with the appropiate drive letter)
04 - Acknowledge prompt by clicking 'Yes'.
05 - Skip updating process by clicking 'Cancel' or by pressing 'Esc'
06 - After installation, acknowledge success msg. by clicking 'Ok'
07 - Start  Shutdown  Restart
08 - At boot menu, select 'Microsoft Windows Recovery Console'
09 - Select proper installation to log onto (default: 1) and press 'Enter'
10 - (If prompted, enter Administrator password and press 'Enter')
11 - Type (without quotes) and press enter: 'cd system32\config'
12 - Type (without quotes) and press enter: 'copy SYSTEM C:\'
13 - Type (without quotes) and press enter: exit
14 - At boot menu, select 'Windows XP Media Center Edition'
15 - Start  Run  Type: 'regedit' and press enter
16 - Click on 'HKEY_LOCAL_MACHINE'.
17 - File  Load Hive...
18 - Browse and select C:\SYSTEM
19 - Specify key name 'BANANA' and click OK
20 - Expand: HKEY_LOCAL_MACHINE  BANANA  WPA  MedCtrUpg
21 - On the right-hand side, double-click IsLegacyMCE value
22 - Change selected value to 1 and click Ok. (THAT IS NOT AN L!)
23 - Click on BANANA subkey (under HKEY_LOCAL_MACHINE).
24 - File  Unload Hive. Confirm.
25 - Start  Shutdown  Restart
26 - At boot menu, select 'Microsoft Windows Recovery Console'
27 - Select proper installation to log onto (default: 1) and press 'Enter'
28 - (If prompted, enter Administrator password and press 'Enter')
29 - Type (without quotes) and press enter: 'cd \'
30 - Type (without quotes) and press enter: 'copy SYSTEM 
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM'

31 - (Yes, you want to overwrite - Go ahead and do it)
32 - Type (without quotes) and press enter: 'del SYSTEM'
33 - Type (without quotes) and press enter: 'exit'
34 - At boot menu, select 'Windows XP Media Center Edition'
35 - Join domain.


hello

apparently it is possible to patch XP Media Center Edition 2005 to 
join a domain, but I can't seem to find out how.

does anybody know which registry patch you need?

kind regards

werner

quoteWhen Microsoft released Windows XP Media Center Edition 2005, 
the ability to join domains was left out. The domain feature was 
eliminated because of pricing reasons as well as technical reasons. 
MCE 2005 relies on fast user switching to allow it's extender devices 
to connect to the central MCE workstation. If the MCE workstation is 
on a domain, fast user switching will not work, and any extender 
devices will not work.


If you do not use any extender devices, such as the set top boxes 
that allow you to watch Media Center content on your TV in your 
family room from your PC in your office, and you have a need to join 
a domain, it is now possible to make MCE 2005 join a domain. /quote




Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Unicode::MapUTF8

2006-08-23 Thread werner maes


hello

when I try to install samba 3.0.23b I get this error

error: Failed dependencies:
perl(Unicode::MapUTF8) is needed by samba-3.0.23b-1

is this perl module required since 3.0.23b?
and why?
can you use 3.0.23b without it?

werner


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] dfs shadow copy services

2006-08-10 Thread werner maes


hello

configuration:

windows XP client
linux/samba dfs link to a share on a Netapp box.

from the XP client you can't see the tab Previous Versions if you 
rightclick on a file. You can see this tab if you go directly to the 
Netapp share or if you use a dfs link on a Windows 2003 Server.


Netapp is a Shadow Copy Services Provider but apparently the linux 
dfs cannot handle this.


any ideas?

werner


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] POLL: Does anyone actually use multiple passdb backends on the same server?

2006-08-08 Thread werner maes


hello

the passdb backend no longer accepts multiple backends in a chaining 
configuration since samba 3.0.23a .


question:

will the following confi still work?

passdb backend = ldapsam://ldapserver1 ldapsam://ldapserver2 ?

the idea is to use 2 ldap servers

werner


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] POLL: Does anyone actually use multiple passdb backends on the same server?

2006-08-08 Thread werner maes

At 14:33 8/08/2006, Gerald (Jerry) Carter wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

werner maes wrote:

 hello

 the passdb backend no longer accepts multiple backends in a chaining
 configuration since samba 3.0.23a .

 question:

 will the following confi still work?

 passdb backend = ldapsam://ldapserver1 ldapsam://ldapserver2 ?

 the idea is to use 2 ldap servers

The syntax is

  passdb backend = ldapsam:ldap//ldapserver1 ldap://ldapserver2;

There's a regression in 3.0.23a that breaks the .
It has been fixed in 3.0.23b (which will be available
in the next few hours).


thank you for the information.

anyway I still find it regrettable that multiple backends are no 
longer possible since we have our users stored in LDAP and the 
machine-accounts on the local PDC.


a colleague of mine has some serious issues with 3.0.23a, that's why 
I'm no upgrading yet.


just for information this is what he sees in his logs:

 dumping core in /usr/local/samba/var/cores/smbd
 [2006/08/08 14:16:37, 0] passdb/pdb_get_set.c:pdb_get_group_sid(164)
   pdb_get_group_sid: Failed to find Unix account for s0163566
 [2006/08/08 14:16:37, 0] smbd/sec_ctx.c:push_sec_ctx(194)
   Security context stack overflow!
 [2006/08/08 14:16:37, 0] lib/util.c:smb_panic(1592)
   PANIC (pid 27484): Security context stack overflow!

 [2006/08/08 14:16:37, 0] lib/util.c:log_stack_trace(1699)
  BACKTRACE: 64 stack frames:
   #0 /usr/local/samba/sbin/smbd(log_stack_trace+0x22) [0x82128c6]
   #1 /usr/local/samba/sbin/smbd(smb_panic+0x6f) [0x8212766]
   #2 /usr/local/samba/sbin/smbd(push_sec_ctx+0x6b) [0x80d49ce]


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] POLL: Does anyone actually use multiple passdb backends on the same server?

2006-08-08 Thread werner maes

At 16:39 8/08/2006, Gerald (Jerry) Carter wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

werner,

 anyway I still find it regrettable that multiple
 backends are no longer possible since we have our
 users stored in LDAP and the machine-accounts
 on the local PDC.

No offense, but it's too late to bring that up now.  3.0.23
was in development for 6 months.  The original thread on
this was back in February:
http://marc.theaimsgroup.com/?t=11395259651r=1w=2

This is a systemic problem with this list.  No one seems
to pay any attention until the release is done and over.


off course you're right. but I don't think that one man could change 
this evolution.

to be honest, I've read it but forgot to reply


 a colleague of mine has some serious issues with
 3.0.23a, that's why I'm no upgrading yet.

 just for information this is what he sees in his logs:

  dumping core in /usr/local/samba/var/cores/smbd
  [2006/08/08 14:16:37, 0] passdb/pdb_get_set.c:pdb_get_group_sid(164)
pdb_get_group_sid: Failed to find Unix account for s0163566
  [2006/08/08 14:16:37, 0] smbd/sec_ctx.c:push_sec_ctx(194)
Security context stack overflow!
  [2006/08/08 14:16:37, 0] lib/util.c:smb_panic(1592)
PANIC (pid 27484): Security context stack overflow!

  [2006/08/08 14:16:37, 0] lib/util.c:log_stack_trace(1699)
   BACKTRACE: 64 stack frames:
#0 /usr/local/samba/sbin/smbd(log_stack_trace+0x22) [0x82128c6]
#1 /usr/local/samba/sbin/smbd(smb_panic+0x6f) [0x8212766]
#2 /usr/local/samba/sbin/smbd(push_sec_ctx+0x6b) [0x80d49ce]

Is there a bug report on this ?  It won't get fixed if we
don't know about it.  And since 3.0.23b has just been released,
it may not be fixed in that either.


No, it has not been fixed in 3.0.23b. there is no bug report as far as I know.
he downgraded his server (since it was a production server) to an 
earlier version of samba.


werner


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problem joining Netapp server to samba domain

2006-07-06 Thread werner maes


hello

I would like to join a Netapp fileserver to a Samba domain that uses 
an external Openldap server for authentication.


Here's what I do and where it goes wrong (I've hidden the real ip 
addresses). I've also created a machine account for the Netapp server 
on the PDC.:


What is the name of the Windows NT 4 domain? [WORKGROUP]: PCKLAS
CIFS - Starting SMB protocol...
Wed Jul  5 17:08:47 CEST [filertop: nbt.nbss.socketError:error]: NBT: 
Cannot connect to server x.y.v.w over NBSS socket for port 139. Error 
0xd: Permission denied.

*** CIFS Setup could not establish a connection with the Primary Domain
*** Controller (PDC). Usually this happens when the 'FILERTOP' account
*** does not exist in the domain or must have it's password reset.

Once you have created and/or reset the 'FILERTOP' machine account, 
press ENTER. [continue]:Wed Jul  5 17:08:47 CEST [filertop: 
nbt.nbss.socketError:error]: NBT: Cannot connect to server  x.y.v.w 
over NBSS socket for port 139. Error 0xd: Permission denied.
Wed Jul  5 17:08:51 CEST [filertop: 
nbt.nbns.registrationComplete:info]: NBT: All CIFS name registrations 
have completed for the local server.


This is what I see using tcpdump:

tcpdump: listening on eth0
17:30:10.580318 10.2.18.210.netbios-dgm  
pdc.kuleuven.ac.be.netbios-dgm: [udp sum ok]
 NBT UDP PACKET(138) Res=0x100A ID=0x7401 IP=10 (0xa).2 (0x2).18 
(0x12).210 (0xd2) Port=138 (0x8a) Length=216 (0xd8) Res2=0x0

SourceName=FILERTOPNameType=0x00 (Workstation)
DestName=PCKLAS  NameType=0x1C (Unknown)

SMB PACKET: SMBtrans (REQUEST)
SMB Command   =  0x25
Error class   =  0x0
Error code=  0 (0x0)
Flags1=  0x0
Flags2=  0x0
Tree ID   =  0 (0x0)
Proc ID   =  0 (0x0)
UID   =  0 (0x0)
MID   =  0 (0x0)
Word Count=  17 (0x11)
TotParamCnt=0 (0x0)
TotDataCnt=42 (0x2a)
MaxParmCnt=0 (0x0)
MaxDataCnt=0 (0x0)
MaxSCnt=39942 (0x9c06)
TransFlags=0xAFF
Res1=0x0
Res2=0x0
Res3=0x0
ParamCnt=0 (0x0)
ParamOff=92 (0x5c)
DataCnt=42 (0x2a)
DataOff=92 (0x5c)
SUCnt=3 (0x3)
Data: (6 bytes)
[000] 01 00 00 00 02 00 \001\000\000\000\002\000
Name=\MAILSLOT\NET\NETLOGON
Data Data: (42 bytes)
[000] 00 00 46 49 4C 45 52 54  4F 50 00 24 00 5C 4D 
41  \000\000FILERT OP\000$\000\MA

[010] 49 4C 53 4C 4F 54 5C 54  45 4D 50 5C 4E 45 54 4C  ILSLOT\T EMP\NETL
[020] 4F 47 4F 4E 00 01 01 00  FF FF OGON\000\001\001\000 \377\377


 (ttl 63, id 60416, len 244)
17:30:10.580499 pdc.kuleuven.ac.be.netbios-dgm  
10.2.18.210.netbios-dgm: [udp sum ok]
 NBT UDP PACKET(138) Res=0x100A ID=0x6BEE IP=x (0x86).y (0x3a).v 
(0xd9).w (0xf5) Port=138 (0x8a) Length=177 (0xb1) Res2=0x0

SourceName=PDC  NameType=0x00 (Workstation)
DestName=FILERTOPNameType=0x00 (Workstation)

SMB PACKET: SMBtrans (REQUEST)
SMB Command   =  0x25
Error class   =  0x0
Error code=  0 (0x0)
Flags1=  0x0
Flags2=  0x0
Tree ID   =  0 (0x0)
Proc ID   =  0 (0x0)
UID   =  0 (0x0)
MID   =  0 (0x0)
Word Count=  17 (0x11)
TotParamCnt=0 (0x0)
TotDataCnt=16 (0x10)
MaxParmCnt=0 (0x0)
MaxDataCnt=0 (0x0)
MaxSCnt=0 (0x0)
TransFlags=0x0
Res1=0x0
Res2=0x0
Res3=0x0
ParamCnt=0 (0x0)
ParamOff=0 (0x0)
DataCnt=16 (0x10)
DataOff=93 (0x5d)
SUCnt=3 (0x3)
Data: (6 bytes)
[000] 01 00 01 00 02 00 \001\000\001\000\002\000
Name=\MAILSLOT\TEMP\NETLOGON
Data Data: (16 bytes)
[000] 06 00 5C 5C 4C 49 4E 53  41 4D 2D 31 35 00 FF 
FF  \006\000\\PDC\000\377\377



 (DF) (ttl 64, id 20051, len 219)



Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Rejecting auth request

2006-05-04 Thread werner maes


hello

I often see these error messages in my logfiles

log.cc33a02:  _net_sam_logon: creds_server_step failed. Rejecting 
auth request from client CC33A02 machine account CC33A02$


I use samba 3.0.22

What's wrong?

Any ideas?

werner maes


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] secure channel ntlmssp in 3.0.21b

2006-02-01 Thread werner maes


hello

Apparently something seems to be changed since 3.0.20b.
I have two servers: one domain PDC and one domain member server

On both servers I had set
server schannel = No
client schannel = No

I installed 3.0.21b and I could no longer make connections to shares 
defined on the domain member server


When I tried to add another server to the domain I got this error

[EMAIL PROTECTED] samba]# net rpc join -S domPDC -U root
Password:
[2006/02/01 12:27:06, 0] rpc_client/cli_pipe.c:cli_rpc_pipe_open_schannel(2641)
  cli_rpc_pipe_open_schannel: failed to get schannel session key 
from server yy for domain xx

[2006/02/01 12:27:06, 0] utils/net_rpc_join.c:net_rpc_join_ok(61)
  Error connecting to NETLOGON pipe. Error was 
NT_STATUS_INVALID_NETWORK_RESPONSE

Unable to join domain xxx.
[EMAIL PROTECTED] samba]#

After uncommenting the options server schannel  client schannel on 
both servers, it worked fine


[EMAIL PROTECTED] samba]# net rpc join -S domPDC -U root
Password:
Joined domain xx.
 == the secret keys appeart in /etc/samba/schannel_store.tdb

So something is still not ok in libsmb/ntlmssp.c ??

kind regards

werner


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] bug in 3.0.21a?

2006-01-27 Thread werner maes

hello

when  I try to connect to a share from my windows xp client, it does 
not work. In linux via smbclient, there's no problem.

see below for the error log

version = 3.0.21a
security = server (the problem only seems to occur on servers that 
rely on another samba server for authentication).


any ideas?

werner

[2006/01/27 09:30:32, 2] auth/auth.c:check_ntlm_password(307)
  check_ntlm_password:  authentication for user [werner] - [werner] 
- [werner] succeeded

[2006/01/27 09:30:32, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(332)
  NTLMSSP Sign/Seal - Initialising with flags:
[2006/01/27 09:30:32, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
  Got NTLMSSP neg_flags=0x600082b5
[2006/01/27 09:30:32, 0] lib/fault.c:fault_report(36)
  ===
[2006/01/27 09:30:32, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 3023 (3.0.21a)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2006/01/27 09:30:32, 0] lib/fault.c:fault_report(39)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2006/01/27 09:30:32, 0] lib/fault.c:fault_report(40)
  ===
[2006/01/27 09:30:32, 0] lib/util.c:smb_panic2(1554)
  PANIC: internal error
[2006/01/27 09:30:32, 0] lib/util.c:smb_panic2(1562)
  BACKTRACE: 15 stack frames:
   #0 smbd(smb_panic2+0x8c) [0xea6d7c]
   #1 smbd(smb_panic+0x1a) [0xea6faa]
   #2 smbd [0xe91167]
   #3 /lib/tls/libc.so.6 [0x2488c8]
   #4 smbd(ntlmssp_sign_init+0xe5) [0xda7ca5]
   #5 smbd [0xda5080]
   #6 smbd(ntlmssp_update+0x296) [0xda40f6]
   #7 smbd(auth_ntlmssp_update+0x48) [0xeebc78]
   #8 smbd(reply_sesssetup_and_X+0x777) [0xd3d5d7]
   #9 smbd [0xd6b6b7]
   #10 smbd(process_smb+0x19e) [0xd6baee]
   #11 smbd(smbd_process+0x159) [0xd6cae9]
   #12 smbd(main+0x945) [0xf2b845]
   #13 /lib/tls/libc.so.6(__libc_start_main+0xd3) [0x235e23]
   #14 smbd [0xd00cf1]


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: The single WINS problem: question (Michael Gasch)

2005-12-19 Thread werner maes



Message: 14
Date: Fri, 16 Dec 2005 12:34:38 +0100
From: Michael Gasch [EMAIL PROTECTED]
Subject: Re: [Samba] The single WINS problem: question
To: werner maes [EMAIL PROTECTED]
Cc: samba@lists.samba.org
Message-ID: [EMAIL PROTECTED]
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

do you have multiple subnets for each BDC?

greez


no, the BDC is on the same subnet


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: The single WINS problem: question

2005-12-14 Thread werner maes



On Monday 12 December 2005 02:02, werner maes wrote:
   hello

 I've been reading the thread
 (http://marc.theaimsgroup.com/?t=11328637691r=1w=2) and I have
 the same limitation with WINS in a PDC/BDC.

 That's why I have the following (experimental) setup:

 PDC == wins support = yes, passdb backend: master ldap
 BDC == wins support = yes, passdb backend: slave ldap

 I configured some of my XP clients to use both WINS servers and it
 seems to work.

Well, you CAN do this, but then it is necessary to use the remote browse
sync and remote announce parameters on both systems to gain cross-subnet
browsing and name resolution capability. You will likely find that Windows
hosts will register with only one WINS server - that is one of the key
reasons for the advice that is in the man page and in the HOWTO book.


 but in the manual of smb.conf I read:

 wins support (G)
Note that you should NEVER set this to yes  on
more than one machine in your network.


 What could happen if you use more than one WINS server on your network?

You COULD (likely will) have broken NetBIOS name resolution, with the result
that windows clients can panic and blue-screen.

- John T.



thanks for your advice john.
I will setup a few XP clients with two WINS servers configured and 
see what happens.
but I need this kind of backup because else I can't see the point of 
setting up a BDC if the WINS server remains the single point of failure.


I'm looking forward to Samba4 where WINS replication support is 
nearly finished as I've read on the website 
(http://us4.samba.org/samba/ftp/slides/tridge_sambaxp05.pdf)


kind regards

werner



Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] The single WINS problem: question

2005-12-14 Thread werner maes



On Monday 12 December 2005 02:02, werner maes wrote:
   hello

 I've been reading the thread
 (http://marc.theaimsgroup.com/?t=11328637691r=1w=2) and I have
 the same limitation with WINS in a PDC/BDC.

 That's why I have the following (experimental) setup:

 PDC == wins support = yes, passdb backend: master ldap
 BDC == wins support = yes, passdb backend: slave ldap

 I configured some of my XP clients to use both WINS servers and it
 seems to work.

Well, you CAN do this, but then it is necessary to use the remote browse
sync and remote announce parameters on both systems to gain cross-subnet
browsing and name resolution capability. You will likely find that Windows
hosts will register with only one WINS server - that is one of the key
reasons for the advice that is in the man page and in the HOWTO book.


 but in the manual of smb.conf I read:

 wins support (G)
Note that you should NEVER set this to yes  on
more than one machine in your network.


 What could happen if you use more than one WINS server on your network?

You COULD (likely will) have broken NetBIOS name resolution, with the result
that windows clients can panic and blue-screen.

- John T.

sorry for the repost, hope it appears in the right thread now...

thanks for your advice john.
I will setup a few XP clients with two WINS servers configured and 
see what happens.
but I need this kind of backup because else I can't see the point of 
setting up a BDC if the WINS server remains the single point of failure.


I'm looking forward to Samba4 where WINS replication support is 
nearly finished as I've read on the website 
(http://us4.samba.org/samba/ftp/slides/tridge_sambaxp05.pdf)


kind regards

werner



Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] The single WINS problem: question

2005-12-13 Thread werner maes


hello

I've been reading the thread 
(http://marc.theaimsgroup.com/?t=11328637691r=1w=2) and I have 
the same limitation with WINS in a PDC/BDC.


That's why I have the following (experimental) setup:

PDC == wins support = yes, passdb backend: master ldap
BDC == wins support = yes, passdb backend: slave ldap

I configured some of my XP clients to use both WINS servers and it 
seems to work.


but in the manual of smb.conf I read:

wins support (G)
  Note that you should NEVER set this to yes  on
  more than one machine in your network.


What could happen if you use more than one WINS server on your network?

thanks

werner maes


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] The single WINS problem: question

2005-12-12 Thread werner maes


hello

I've been reading the thread 
(http://marc.theaimsgroup.com/?t=11328637691r=1w=2) and I have 
the same limitation with WINS in a PDC/BDC.


That's why I have the following (experimental) setup:

PDC == wins support = yes, passdb backend: master ldap
BDC == wins support = yes, passdb backend: slave ldap

I configured some of my XP clients to use both WINS servers and it 
seems to work.


but in the manual of smb.conf I read:

wins support (G)
  Note that you should NEVER set this to yes  on
  more than one machine in your network.


What could happen if you use more than one WINS server on your network?

thanks

werner maes


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] interdomain trust between windows 2003 server and samba

2005-08-16 Thread werner maes


hello

Is it possible to establish a trust between an windows 2003 server 
and samba 3.0.14a PDC?

Samba as the trusted domain, windows 2003 as the trusting domain.

werner

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] BUG: Vfs audit module samba 3.0.4 == share unaccessible

2004-05-11 Thread werner maes
	Hello

Maybe there's a bug in samba-3.0.4.
The following configuration does NO longer work. It did work fine in 
samba-3.0.2a. I did not test samba-3.0.3
The share is no longer accessible !!!

[BKHI-CC3]
path = /home/BKHI-CC3
valid users = @BKHI-CC3-R, @BKHI-CC3-W
write list = @BKHI-CC3-W
force group = +BKHI-CC3-W
create mask = 0664
directory mask = 02775
vfs objects = audit
logfile:

May 11 09:31:39 smbd[14267]:   smbd_vfs_init: vfs_init_custom failed for audit
May 11 09:31:39 smbd[14267]:   vfs_init failed for service BKHI-CC3
if I uncomment vfs objects = audit, then I can access the share without 
any problems.

Can someone take a look at this? It's probably in vfs.c

Thanks

Werner

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] BUG: Vfs audit module samba 3.0.4 == share unacces sible

2004-05-11 Thread werner maes
In my case it DOES NOT !
I tried both options
I still get : tree connect failed: NT_STATUS_BAD_NETWORK_NAME
and in my logs
May 11 16:25:28 smbd[15796]: [2004/05/11 16:25:28, 0] 
smbd/vfs.c:smbd_vfs_init(319)
May 11 16:25:28 smbd[15796]:   smbd_vfs_init: vfs_init_custom failed for audit
May 11 16:25:28 smbd[15796]: [2004/05/11 16:25:28, 0] 
smbd/service.c:make_connection_snum(502)
May 11 16:25:28 smbd[15796]:   vfs_init failed for service PCSHOP-CC3

Werner

At 15:50 11/05/2004, Rauno Tuul wrote:
add to each share

writeable = yes
or
read-only = no
This Helps!

 Rauno

-Original Message-
From: werner maes [mailto:[EMAIL PROTECTED]
Sent: 11. mai 2004. a. 16:19
To: [EMAIL PROTECTED]
Subject: [Samba] BUG: Vfs audit module  samba 3.0.4 == share unaccessible


Hello

Maybe there's a bug in samba-3.0.4.
The following configuration does NO longer work. It did work fine in
samba-3.0.2a. I did not test samba-3.0.3
The share is no longer accessible !!!
[BKHI-CC3]
 path = /home/BKHI-CC3
 valid users = @BKHI-CC3-R, @BKHI-CC3-W
 write list = @BKHI-CC3-W
 force group = +BKHI-CC3-W
 create mask = 0664
 directory mask = 02775
 vfs objects = audit
logfile:

May 11 09:31:39 smbd[14267]:   smbd_vfs_init: vfs_init_custom failed for
audit
May 11 09:31:39 smbd[14267]:   vfs_init failed for service BKHI-CC3
if I uncomment vfs objects = audit, then I can access the share without
any problems.
Can someone take a look at this? It's probably in vfs.c

Thanks

Werner

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Windows 2003 domain logon

2004-04-01 Thread werner maes
	Hello

Is it possible to do a domain logon in Samba with a Windows 2003 Server?
I don't think so but perhaps someone has a solution.
Kind regards

Werner Maes

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba3 errors and question

2004-03-15 Thread werner maes
Hello

I find some errors in my logs and have some questions about them:

1. Why are logfiles created based on machinename and on ipaddress? Only 
based on machinename has been configured in smb.conf

These messages occur in the logfiles bases on ipaddress (e.g.: log.10.10.10.1)

[2004/03/15 14:05:06, 2] smbd/sesssetup.c:setup_new_vc_session(591)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.

2. Why do these messages occur in /var/log/messages? And there's no problem 
with our network, no dodgy switches or so.

Mar 15 13:28:34 smbd[11526]: [2004/03/15 13:28:34, 0] 
lib/util_sock.c:get_peer_addr(952)
Mar 15 13:28:34 smbd[11526]:   getpeername failed. Error was Transport 
endpoint is not connected

Somebody said that this is related to iptables running. If you stop 
iptables these messages no longer occur.

Any ideas?

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] adding computer in domain with user other than root

2003-10-31 Thread werner maes
Hello

I tried to add a computer to a Samba domain using another account 
(testuser) than root.
I use LDAP for authentication and added the account (testuser) with uid=0 
in ldap. If I use this account to add an computer to the domain I get the 
error: Access is denied.

And in the samba log:

[2003/10/31 14:49:57, 0] libsmb/smbencrypt.c:decode_pw_buffer(260)
  decode_pw_buffer: incorrect password length (-1763543070).
I know from previous posts that it's necessary to have an uid=0. But are 
there any other requirements. I also added this testuser to the domain 
admin group directive in samba. I use samba 2.2.8a.

Thanks

Werner

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] adding computer in domain with user other than root

2003-10-31 Thread werner maes
I'm glad it works for you :-)
can you give some configuration details of smb.conf?
I have: domain admin group = root ldaptest.

Werner

At 11:27 31/10/2003, Jean-Rene Cormier wrote:
I just reformatted a computer and I joined it with my regular username
which doesn't have uid=0 and is not mapped to root either. I thought
that maybe it was because the machine account was already in LDAP so I
booted up another Windows in VMWare and removed it from the domain and
changed the computer name to one that wasn't already in LDAP and I was
able to join it with the same username. I'm using the domain admin
group and it seems to be working fine. Running on Samba 2.2.8a btw.
Jean-Rene Cormier

On Fri, 2003-10-31 at 10:37, Thiago Lima wrote:
 The user MUST be root, if you want to use another user map it to root in
 smbusers.


 regards.
 thiago.


  I tried to add a computer to a Samba domain using another account
  (testuser) than root.
  I use LDAP for authentication and added the account
  (testuser) with uid=0
  in ldap. If I use this account to add an computer to the
  domain I get the
  error: Access is denied.
 


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.0 LDAP: multiple domains logon

2003-10-01 Thread werner maes
	Hello,

If you use samba 3.0.0 with LDAP authentication, samba uses an ldap 
attribute sambaSID in which the domain SID is stored. When somebody does 
a domain logon (2000/XP) this attribute is checked. But suppose I would 
like to login to another domain? Can I define multiples sambaSID's or is 
this attribute unique? If it's unique, how can I login to multiple domains?

Werner

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.0 LDAP: multiple domains logon

2003-10-01 Thread werner maes
At 10:44 1/10/2003, Gerald (Jerry) Carter wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
werner maes wrote:
|
| Hello,
|
| If you use samba 3.0.0 with LDAP authentication, samba uses an ldap
| attribute sambaSID in which the domain SID is stored. When somebody
| does a domain logon (2000/XP) this attribute is checked. But suppose I
| would like to login to another domain? Can I define multiples sambaSID's
| or is this attribute unique? If it's unique, how can I login to multiple
| domains?
You can't.  This was one of the drawbacks of moving to SID's
as opposed to RID's.  However, you can setup truated Samba
domains thus grouping users but still being able to logon to
clients in other domains.
What do you mean by truated Samba domains?
Could you explain some more?
Thanks,

Werner 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Swat problem with samba-3.0.0 RC1

2003-08-25 Thread werner maes
	Hello,

I tried to configure a share with samba-3.0.0RC1 but after specifying the 
share name and after I clicked create, nothing happens. Only the header 
share parameters is shown.

I've searched the list archives and a certain Chee Wai Yeung reported 
exactly the same problem with samba3.0.0beta1 on 09/06/2003
Will this bug be fixed before the final release?

Werner

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Ghost Create account: procedure number out ofrange inSamba

2003-06-24 Thread werner maes
Sorry to bother you again but in my situation with LDAP authentication it 
doesn't seem to work.

I'll explain the configuration in detail.

I have a Samba 2.2.8a domain controller which is compiled and configured 
with LDAP support.
The user and machine accounts are defined in LDAP. I manually added an 
Windows XP workstation
to the domain (no problems here) using a root account also defined in LDAP.
Now I would like to clone this machine to other machines using Norton Ghost 
7.5. Therefore I have set up
a Ghost Multicast Server. Now when I use to Ghost Console on the multicast 
server and try to add our domain
to the list of supported domains in Ghost I get the error Procedure number 
out of range.
On the Ghost Multicast Server there is the ghost configuration server 
service and on the client machine
there is the ghost client agent service. Both of these services only 
start with a local system account.
These services do not run under a domain account. If I try to run them 
under a domain account I get this
error message: The service did not respond to the start or control request 
in a timely fashion.

Like I said, manually adding a machine to the domain gives no problems with 
the specified root account
in LDAP (see below, I did not include all attributes off course).
dn: uid=root, ou=xxx, o=xxx, c=xxx
objectClass: sambaAccount
uid: root
rid: 1000
uidNumber: 0
gidNumber: 0

Kind regards,

Werner Maes

At 15:20 23/06/2003, Dan Gapinski wrote:
Yes - sorry. I made a regular account for Ghost (which you could make with
adduser or useradd or handcoding the passwd file) and added it to a group
(in the groups file) that I called admin. In smb.conf, I added a line that
went like this:
domain admin group = @admin
So that worked like a charm.
Hope that helps,
Dan
- Original Message -
From: werner maes [EMAIL PROTECTED]
To: Dan Gapinski [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Monday, June 23, 2003 2:21 PM
Subject: Re: [Samba] Ghost Create account: procedure number out of range
inSamba
 Hello Dan,

 Thanks for yor reply !
 But what exactly do you mean with making a regular administrator
 account for Ghost?
 Is it an entry in /etc/passwd or smbpasswd for administrator?
 Could you give more specific details?

 Kind regards,

 Werner Maes



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Ghost Create account: procedure number out ofrange inSamba

2003-06-24 Thread werner maes
domain admin group = root (in smb.conf)
I have defined the user 'root' in LDAP. On the client I added the domain 
users to the administrators group. I try to run the services under this 
root account on the domain but the services will only run under a local 
system account and not under a domain account. That seems to be the 
problem. With this user 'root' it is possible to manually join the client 
to the domain and to logon to the domain.

I've tried about everything but still no solution
Still hoping though :-)
Werner Maes

At 09:39 24/06/2003, Dan Gapinski wrote:
I see - what type of domain account are you using? Your method is right tho,
setting the services to run under a domain account. I just want you to be
absolutely sure that the account is administrator. If this is a test
environment, you could start by running the service as root, and see if it
works then (though I would not do that in production).
Dan

- Original Message -
From: werner maes [EMAIL PROTECTED]
To: Dan Gapinski [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Tuesday, June 24, 2003 4:35 AM
Subject: Re: [Samba] Ghost Create account: procedure number out ofrange
inSamba
 Sorry to bother you again but in my situation with LDAP authentication it
 doesn't seem to work.

 I'll explain the configuration in detail.

 I have a Samba 2.2.8a domain controller which is compiled and configured
 with LDAP support.
 The user and machine accounts are defined in LDAP. I manually added an
 Windows XP workstation
 to the domain (no problems here) using a root account also defined in
LDAP.
 Now I would like to clone this machine to other machines using Norton
Ghost
 7.5. Therefore I have set up
 a Ghost Multicast Server. Now when I use to Ghost Console on the multicast
 server and try to add our domain
 to the list of supported domains in Ghost I get the error Procedure
number
 out of range.
 On the Ghost Multicast Server there is the ghost configuration server
 service and on the client machine
 there is the ghost client agent service. Both of these services only
 start with a local system account.
 These services do not run under a domain account. If I try to run them
 under a domain account I get this
 error message: The service did not respond to the start or control
request
 in a timely fashion.

 Like I said, manually adding a machine to the domain gives no problems
with
 the specified root account
 in LDAP (see below, I did not include all attributes off course).
 dn: uid=root, ou=xxx, o=xxx, c=xxx
 objectClass: sambaAccount
 uid: root
 rid: 1000
 uidNumber: 0
 gidNumber: 0

 Kind regards,

 Werner Maes


 At 15:20 23/06/2003, Dan Gapinski wrote:
 Yes - sorry. I made a regular account for Ghost (which you could make
with
 adduser or useradd or handcoding the passwd file) and added it to a group
 (in the groups file) that I called admin. In smb.conf, I added a line
that
 went like this:
 domain admin group = @admin
 
 So that worked like a charm.
 Hope that helps,
 Dan
 - Original Message -
 From: werner maes [EMAIL PROTECTED]
 To: Dan Gapinski [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Sent: Monday, June 23, 2003 2:21 PM
 Subject: Re: [Samba] Ghost Create account: procedure number out of range
 inSamba
 
 
   Hello Dan,
  
   Thanks for yor reply !
   But what exactly do you mean with making a regular administrator
   account for Ghost?
   Is it an entry in /etc/passwd or smbpasswd for administrator?
   Could you give more specific details?
  
   Kind regards,
  
   Werner Maes
  


 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Ghost Create account: procedure number out of range in Samba

2003-06-23 Thread werner maes
	Hello,

I would like to clone a Windows XP workstation that's part of a Samba 
domain using Norton Ghost.
In Ghost you need to create an account in the domain to be able to add your 
domain to the list of supported domains by the Norton Ghost console.

When I try to add such an account, I get this error message:

Unable to add DOMAIN to the list of supported domains,
The procedure number is out of range. Error code: 2147944145.
I use samba 2.2.8a and LDAP for authentication.
There's no problem with this authentication as everything else (logging in, 
adding machines to the domain,...) works fine.

Does anybody have an idea?

Thanks,

Werner Maes

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Ghost Create account: procedure number out of range inSamba

2003-06-23 Thread werner maes
Hello Dan,

Thanks for yor reply !
But what exactly do you mean with making a regular administrator 
account for Ghost?
Is it an entry in /etc/passwd or smbpasswd for administrator?
Could you give more specific details?

Kind regards,

Werner Maes

Dan Gapinski wrote:

I had that problem. I ended up making a regular administrator account for
Ghost and then telling the Ghost service to run under that account. Ghost
tries to set up it's own limited account on an NT domain with only the right
to add and remove machines to and from the domain, which (to my limited
knowledge, please correct me if I am wrong) Samba 2.x does not allow.
Once I did that, it worked fine.
My best,
Dan (former employee of Binary Research) Gapinski
- Original Message -
From: werner maes [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, June 23, 2003 10:07 AM
Subject: [Samba] Ghost Create account: procedure number out of range in
Samba
 

Hello,

I would like to clone a Windows XP workstation that's part of a Samba
domain using Norton Ghost.
In Ghost you need to create an account in the domain to be able to add
   

your
 

domain to the list of supported domains by the Norton Ghost console.

When I try to add such an account, I get this error message:

Unable to add DOMAIN to the list of supported domains,
The procedure number is out of range. Error code: 2147944145.
I use samba 2.2.8a and LDAP for authentication.
There's no problem with this authentication as everything else (logging
   

in,
 

adding machines to the domain,...) works fine.

Does anybody have an idea?

Thanks,

Werner Maes

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
   



 



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 2.2.5 + OpenLDAP 2.x - Caveats?

2002-09-30 Thread werner maes

 Samba can hit your LDAP server *hard*. I would suggest keeping LDAP on
 localhost if at all possible - and use LDAP replication from there. So
 make the on-site machines BDCs, and have one PDC centrally. This type
 of solution has been implemented.
 Watch out your version of nss_ldap - some are buggy and cause a lot of
'connection reset by peer' stuff.
 Andrew Bartlett

Hello,

Could you tell me wich versions of nss_ldap are buggy are which are not?
I sometime face these connection by peer messages and have no idea what 
causes them.

I use nss_ldap-189.

Werner Maes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Oplock break state

2002-09-23 Thread werner maes

Hello,

We encounter some problems with Samba 2.2.5  M$ Office:

When a client starts up Word or any other Office component, the software 
won't load.

In our samba logs these messages occur:

[2002/09/23 17:26:41, 2] smbd/process.c:switch_message(695)
   switch_message: queueing message due to being in oplock break state.

Does anybody know what this message means?

Kind regards,

Werner

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba-LDAP:Ldap call each time you open a text file?

2002-06-19 Thread werner maes

At 11:14 19/06/2002, Andrew Bartlett wrote:
werner maes wrote:
 
  Hello,
 
  When I open a text file on a Samba fileserver using LDAP for
  authentication, Samba always makes these LDAP calls (see below). The user
  has been authenticated so why does Samba still makes these LDAP 
 connections?

Samba's ldap handling is 'inefficient' to say the least.  It also hits
the underlying getpw*() interface a fair bit - particulary becouse
clients often request additional info about a file - like owner - and
sysadmins have various smb.conf options set.

Thanks for the information.
Do you know whether this ldap handling will be improved?
I tried to eliminate the smb.conf options that could effect this behaviour 
but with no result. The ldap calls were still made.

Werner


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Samba-LDAP:Ldap call each time you open a text file?

2002-06-18 Thread werner maes

Hello,

When I open a text file on a Samba fileserver using LDAP for 
authentication, Samba always makes these LDAP calls (see below). The user 
has been authenticated so why does Samba still makes these LDAP connections?

Any ideas?

/var/log/ldap.log when opening a text file.

ldap-hh slapd[22940]: conn=3922 op=19 SRCH base=o=kuleuven,c=be scope=2 
filter=(uid=m2000944)
ldap-hh slapd[22940]: conn=3922 op=19 SEARCH RESULT tag=101 err=0 text=
ldap-hh slapd[22942]: conn=3922 op=20 SRCH base=o=kuleuven,c=be scope=2 
filter=((objectClass=posixGroup)(|(memberUid=m2000944)(uniqueMember=uid=m2000944,ou=stud,o=kuleuven,c=be)))
 

ldap-hh slapd[22942]: conn=3922 op=20 SEARCH RESULT tag=101 err=0 text=

ldap-hh slapd[22944]: conn=3922 op=21 SRCH base=o=kuleuven,c=be scope=2 
filter=(uid=m2000944)
ldap-hh slapd[22944]: conn=3922 op=21 SEARCH RESULT tag=101 err=0 text=
ldap-hh slapd[22954]: conn=3922 op=22 SRCH base=o=kuleuven,c=be scope=2 
filter=((objectClass=posixGroup)(|(memberUid=m2000944)(uniqueMember=uid=m2000944,ou=stud,o=kuleuven,c=be)))
 

ldap-hh slapd[22954]: conn=3922 op=22 SEARCH RESULT tag=101 err=0 text=


Werner


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Error in netlogon service samba 2.2.4?

2002-05-14 Thread werner maes

At 09:18 14/05/2002, you wrote:
On Wed, 8 May 2002, werner maes wrote:

  Hello,
 
  If I try to mount the netlogon service using smbclient, I get this error
  message:
 
  [root@testserver /root]# smbclient //localhost/netlogon -U u0023628
  INFO: Debug class all level = 2   (pid 7257 from pid 7257)
  added interface ip=10.33.6.132 bcast=10.33.6.255 nmask=255.255.255.0
  Got a positive name query response from 127.0.0.1 ( 127.0.0.1 )
  Password:
  Domain=[PCLAB] OS=[Unix] Server=[Samba 2.2.4]
  smb: \ ls
 .   D0  Wed Nov  7 15:36:29 2001
 ..  D0  Mon May  6 15:07:59 2002
 SAMPROF D0  Fri Feb  8 16:36:44 2002
 scripts D0  Wed May  8 15:56:27 2002
 test.batA   63  Mon Jul  9 15:36:01 2001
 nts.bat A   37  Wed Nov  7 15:36:29 2001
  Error in dskattr: SUCCESS - 0
  smb: \ Segmentation fault (core dumped)
 
  As a result, the domain logon process fails (the logon scripts are not
  executed).
  On a Win98 PC I get the message: This device does not exist on the 
 network,
  reading drive Z.
 
  In the logs, I get:
 
  [2002/05/08 16:07:35, 0] lib/util_sec.c:assert_gid(111)
 Failed to set gid privileges to (-1,5954) now set to (0,0) uid=(0,0)
  [2002/05/08 16:07:35, 0] lib/util.c:smb_panic(1092)
 PANIC: failed to set gid
 
  This only happens with the netlogon share ! If I mount any other share, it
  works fine.
  Also this problem only occurs with certain user accounts.
 
  No problems with: uid=500(werner) gid=500(werner) groups=500(werner)
  Problem with: uid=16778(u0023628) gid=5954(LUDIT) 
 groups=5954(LUDIT)

What OS is this?  Does you system fully support 32-bits uids/gids?

Well, I've done some extra tests and I think that I've found the cause. I 
compiled the 2.2.4 source code on a RH 7.1 machine with XFS 1.1.
Then I installed these created rpm's on a RH 7.1 machine with XFS 1.0.1 and 
it gave the problems which I described.
Now I compiled the source code on the RH7.1 machine with XFS 1.0.1 and 
installed it and the problem did no longer occur.

Of course, now I still have to find out whether samba-2.2.4 works on an 
machine with XFS 1.1.

Werner


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] TCP UDP port 445: microsoft-ds

2002-04-24 Thread werner maes

Hello,

Does Samba support connecting to a server using port 445 if you have 
Netbios over TCP/IP disabled on your client system?
In Windows 2000/XP you have the possibility to disable Netbios over TCP/IP 
and use port 445 to make an SMB connection.

I've done some tests and apparently samba (version 2.2.3a) does not support 
connections on port 445.

Am I correct?
If so, will this be possible in future releases of samba?

Werner Maes


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba