Re: vampire a win2k-dc

2002-11-20 Thread Guenther Deschner
hi volker,

On Wed, Nov 13, 2002 at 09:53:06AM +0100, Volker Lendecke wrote:
 On Tue, Nov 12, 2002 at 03:41:47PM +0100, Guenther Deschner wrote:
  is it true, that a win2k dc will insist on setting up a secure channel
  before ever transmitting password-hashes (with net rpc vampire)? 
 
 Obviously yes. I had to notice that lately. That's where the latest patches
 from tridge are aimed at. You could try pwdump for the passwords though.

ok. i see. but isn't there some sort of support for secure channel in tng ?

thanks,
guenther
-- 
Guenther Deschner  [EMAIL PROTECTED]
SuSE Linux AGGnuPG: 8EE11688
Berliner Str. 27  phone:  +49 (0) 30 / 430944778
D-13507 Berlin   fax:  +49 (0) 30 / 43732804



msg04508/pgp0.pgp
Description: PGP signature


Re: vampire a win2k-dc

2002-11-20 Thread Andrew Bartlett
On Wed, 2002-11-20 at 20:44, Guenther Deschner wrote:
 hi volker,
 
 On Wed, Nov 13, 2002 at 09:53:06AM +0100, Volker Lendecke wrote:
  On Tue, Nov 12, 2002 at 03:41:47PM +0100, Guenther Deschner wrote:
   is it true, that a win2k dc will insist on setting up a secure channel
   before ever transmitting password-hashes (with net rpc vampire)? 
  
  Obviously yes. I had to notice that lately. That's where the latest patches
  from tridge are aimed at. You could try pwdump for the passwords though.
 
 ok. i see. but isn't there some sort of support for secure channel in tng ?

Not sufficient for this purpose.  Win2k still doesn't disclose the
passwords, and it appears NT and Win2k use a different algorithm between
them.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


Win XP + Samba PDC ( problem )

2002-11-20 Thread samba
Hello

i instaled samba 2.2.5 as PDC
i have network with 40 computers ( Win XP )

everythings works ok but sometimas i have problems ...
from time to time one of the windows says that can't log into domain ...
it is seldom problem ( only 3 computers has problem with it )
others works fine

if i reinstall XP or change to windows works in workgroup and then again
change to work in domain ( log as root in the beginning ) everything
is ok 

have someone this problem ?
why sometimes Winxp can't log into domain ?

best regards

daniel




Binaries for solaris disappearing from ftp site

2002-11-20 Thread Jeff Mandel
Since the recent announcement for the 2.2.7 release, I looked again for
solaris binaries. For a while there were packages up to 2.2.4. After
2.2.5 came out the others vanished and 2.2.2 and 2.0.7 were left. Are
you still planning to keep packages for solaris on the samba site?





multiple wins server

2002-11-20 Thread lin li
Does samba support using multiple wins server?
In my situation (I use 2.2.5), nmbd timeout all the time connecting to the 
first wins server(which is down) and never try the second one.

Thanks,
Lin





_
STOP MORE SPAM with the new MSN 8 and get 2 months FREE* 
http://join.msn.com/?page=features/junkmail



RE timegm on SOLARIS

2002-11-20 Thread Clive Elsum

 Hi,
 
 I have not had any feedback on the replacement module for timegm within 
/lib/replace.c. This fix allows a correct Solaris build, without it Clock Skew
 errors occur unless the machine is dropped back to GMT. Is there any chance of 
this being implemented?
 
 Thanks in advance
 
 Clive
 
Original message attached

Delivered-To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: FIX to RE: Cannot get net ads  join to work under Solaris 8 
MIME-Version: 1.0
X-BeenThere: [EMAIL PROTECTED]
X-Mailman-Version: 2.0.13
List-Help: mailto:[EMAIL PROTECTED]?subject=help
List-Post: mailto:[EMAIL PROTECTED]
List-Subscribe: http://lists.samba.org/mailman/listinfo/samba-technical, 
mailto:[EMAIL PROTECTED]?subject=subscribe
List-Id: Discussions on Samba internals.  For general questions please subscribe 
to the list [EMAIL PROTECTED] samba-technical.lists.samba.org
List-Unsubscribe: http://lists.samba.org/mailman/listinfo/samba-technical, 
mailto:[EMAIL PROTECTED]?subject=unsubscribe
 List-Archive: http://lists.samba.org/pipermail/samba-technical/
X-Original-Date: Sun, 17 Nov 2002 19:33:23 +1100
Date: Sun, 17 Nov 2002 19:33:23 +1100

Andrew,

Another suggestion which appears to work without a kludge is a very minor
mod to the code originally contributed by Roger Beeman [EMAIL PROTECTED],
with the help of Mark Baushke [EMAIL PROTECTED] and the rest of the Gurus at
CISCO. Further improved by Roger with assistance from Edward J. Sabol based
on input by Jamie Zawinski. 
Setting this as a timegm replacement within lib/replace.c overcomes the need
to reset TIMEZONE.


 time_t timegm(struct tm *t)
{
  time_t tl, tb;
  struct tm *tg;

  tl = mktime (t);
  if (tl == -1)
{
  t-tm_hour--;
  tl = mktime (t);
  if (tl == -1)
return -1; /* can't deal with output from strptime */
  tl += 3600;
}
  tg = gmtime (tl);
  tg-tm_isdst = 0;
  tb = mktime (tg);
  if (tb == -1)
{
  tg-tm_hour--;
  tb = mktime (tg);
  if (tb == -1)
return -1; /* can't deal with output from gmtime */
  tb += 3600;
}
  return (tl - (tb - tl));

 
 
-
Clive Elsum BAppSc, RHCE
Systems Engineer - Information Technology Group
CSIRO Atmospheric Research
PMB 1, Aspendale, Victoria, Australia  3195
Phone : (+61 3) 9239 4509
Fax:(+61 3) 9239 
E-mail [EMAIL PROTECTED]
-






Re: RE timegm on SOLARIS

2002-11-20 Thread Jelmer Vernooij
On Thu, Nov 21, 2002 at 07:46:43AM +1100, Clive Elsum wrote about 'RE timegm on 
SOLARIS':

  Hi,

  I have not had any feedback on the replacement module for timegm within 
 /lib/replace.c. This fix allows a correct Solaris build, without it Clock Skew
  errors occur unless the machine is dropped back to GMT. Is there any chance of 
 this being implemented?
There currently is such a replacement for timegm in the HEAD and SAMBA_3_0 branches,
committed by Andrew Tridgell on 30 October.

Jelmer

-- 
Jelmer Vernooij [EMAIL PROTECTED] - http://nl.linux.org/~jelmer/
 22:28:11 up  8:03,  5 users,  load average: 0.27, 0.48, 0.56



msg04514/pgp0.pgp
Description: PGP signature


Re: RE timegm on SOLARIS

2002-11-20 Thread Andrew Bartlett
On Thu, 2002-11-21 at 08:30, Jelmer Vernooij wrote:
 On Thu, Nov 21, 2002 at 07:46:43AM +1100, Clive Elsum wrote about 'RE timegm on 
SOLARIS':
 
   Hi,
 
   I have not had any feedback on the replacement module for timegm within 
  /lib/replace.c. This fix allows a correct Solaris build, without it Clock Skew
   errors occur unless the machine is dropped back to GMT. Is there any chance of 
  this being implemented?
 There currently is such a replacement for timegm in the HEAD and SAMBA_3_0 branches,
 committed by Andrew Tridgell on 30 October.

Which doesn't work - playing with timezone variables is always a little
system-dependent.  The new patch attempts to avoid this.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


Re: RE timegm on SOLARIS

2002-11-20 Thread jra
On Thu, Nov 21, 2002 at 07:46:43AM +1100, Clive Elsum wrote:
 
  Hi,
  
  I have not had any feedback on the replacement module for timegm within 
 /lib/replace.c. This fix allows a correct Solaris build, without it Clock Skew
  errors occur unless the machine is dropped back to GMT. Is there any chance of 
 this being implemented?

What we need is a ./configure autoconf test to determine if the system
timegm is broken and needs replacing. Ca you code this test up ?

Jeremy.



Re: Binaries for solaris disappearing from ftp site

2002-11-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 20 Nov 2002, Jeff Mandel wrote:

 Since the recent announcement for the 2.2.7 release, I looked again for
 solaris binaries. For a while there were packages up to 2.2.4. After
 2.2.5 came out the others vanished and 2.2.2 and 2.0.7 were left. Are
 you still planning to keep packages for solaris on the samba site?

I'll build some tomorrow.  The Solaris packages are pseudo-maintained
by Shirish @ Veritas.



cheers, jerry
 -
 Hewlett-Packard   - http://www.hp.com
 SAMBA Team-- http://www.samba.org
 GnuPG Key  http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2SAMS Teach Yourself Samba in 24 Hours 2ed
 I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE93BB6IR7qMdg1EfYRAilJAKDKhakoDP1CoErXeX+017gVcTNP8ACgz4hP
h9JMk88cijUjds9O3yUMjhU=
=pnNA
-END PGP SIGNATURE-




Re: RE timegm on SOLARIS

2002-11-20 Thread Andrew Bartlett
On Thu, 2002-11-21 at 09:10, [EMAIL PROTECTED] wrote:
 On Thu, Nov 21, 2002 at 07:46:43AM +1100, Clive Elsum wrote:
  
   Hi,
   
   I have not had any feedback on the replacement module for timegm within 
  /lib/replace.c. This fix allows a correct Solaris build, without it Clock Skew
   errors occur unless the machine is dropped back to GMT. Is there any chance of 
  this being implemented?
 
 What we need is a ./configure autoconf test to determine if the system
 timegm is broken and needs replacing. Ca you code this test up ?

We already have this part.  The problem isn't that end of things, it's
just that the current replacement (taken directly from the relevant
linux manpage) doesn't actually appear to work.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


Re: multiple wins server

2002-11-20 Thread Christopher R. Hertel
Preliminary support was introduced for the 2.2 series but was not
completed.  That was my fault really.  The system worked, but there was an
incompatibility with some existing code within nmbd and I did not resolve
the problem so the failover code was never enabled.

Tridge came up with a better design, which should be made available in
3.0.

Chris -)-

On Wed, Nov 20, 2002 at 09:08:41PM +, lin li wrote:
 Does samba support using multiple wins server?
 In my situation (I use 2.2.5), nmbd timeout all the time connecting to the 
 first wins server(which is down) and never try the second one.
 
 Thanks,
 Lin
 
 
 
 
 
 _
 STOP MORE SPAM with the new MSN 8 and get 2 months FREE* 
 http://join.msn.com/?page=features/junkmail
 

-- 
Samba Team -- http://www.samba.org/ -)-   Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/   -)-   ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/ -)-   [EMAIL PROTECTED]
OnLineBook -- http://ubiqx.org/cifs/-)-   [EMAIL PROTECTED]