Re: [Samba] ACLs and winbind

2007-08-09 Thread Henrik Zagerholm
8 aug 2007 kl. 16:18 skrev Thierry Lacoste: I'm trying to allow XP clients to add ACLs in the homes share. It appears that I'm unable to do it unless I use winbind although I'm in a pure Samba/OpenLDAP environment. I have a PDC and BDC with Samba/OpenLDAP and a member Samba server with homes

Re: [Samba] Problem with LDAP failover config

2007-08-09 Thread Andrew Bartlett
On Thu, 2007-08-09 at 03:01 +0100, Ben Tisdall wrote: John Drescher wrote: If the email client does something weird there is one space between the entries. These are two different machines with the first being the PDC and it is in the dns but the second is not so I used the numerical ip

RE: [Samba] dfs problems in 3.0.25a after client reboot and remapping

2007-08-09 Thread Paul J R
Hi guys, I haven't seen any replies to this, but im seeing the exact same thing with Fedora 7 samba (with all the currently available patches). using winbind into a an ADS realm. My samba is 3.0.25b. Clients are XP, 2003 r2 SE and EE 32bit, 2003 r2 SE 64 bit. All work ok for a while, then

Re: [Samba] Problem with LDAP failover config

2007-08-09 Thread Ben Tisdall
Andrew Bartlett wrote: I suspect it's a build error, due to The Fedora Core 4 buidl not correctly detecting the ldap_initialize() function. If that were not to be detected in the libs, then we would fallback to an internal function that doesn't handle multiple servers. Thanks for your

Re: [Samba] ACLs and winbind

2007-08-09 Thread Thierry Lacoste
On Thursday 09 August 2007 08:38, Henrik Zagerholm wrote: 8 aug 2007 kl. 16:18 skrev Thierry Lacoste: I'm trying to allow XP clients to add ACLs in the homes share. It appears that I'm unable to do it unless I use winbind although I'm in a pure Samba/OpenLDAP environment. I have a PDC

[Samba] Profiles with an LDAP backend being overridden

2007-08-09 Thread Julian Pilfold-Bagwell
Hi All, I've got LDAP running as the backend to Samba 3.0.24 and am trying to set the profile directories to mandatory for one group of users and roaming for another. To this end I'm using the sambaProfilePath in LDAP but it's getting overridden by something that's setting it to %u. As a

Re: [Samba] setfacl(1) - Can FreeBSD's ACLs contain groups from NT/AD domains ? [SOLUTION]

2007-08-09 Thread Wilkinson, Alex
When putting winbindd(8) into debug mode I finally saw the following: id S-1-5-21-1957994488-1326574676-725345543-35301 is neither ours, a Unix SID, nor builtin error converting unix gid to sid The hard part was identifying what part of the puzzle I needed to debug in the first place!

Re: [Samba] SERIOUS PROBLEM - Root Account Locked

2007-08-09 Thread Jason Baker
Jonathan, You are a genius! That fixed it. Using root = Administrator never seemed to make much sense to me when I was setting up my Samba domain, and now I know why. I simply didn't set it up correctly. I set the root password and made root user ID 0, but when I mapped root = Administrator, I

Re: [Samba] ACLs and winbind

2007-08-09 Thread Angela Gavazzi
On Thursday 09 August 2007 13:28:49 Thierry Lacoste wrote: Thanks Henrik. Can someone explain why or point me to some doc? What I read everywhere is that winbind is used to identify users of a windows domain at the NSS level (mapping them localy with winbindd_idmap.tdb or globaly with ldap)

[Samba] Too many 445 and 139 packets

2007-08-09 Thread Diogo Hideki
I´m having problems with my intranet, all computers that log into my Samba´s PDC, are sending many netbios and microsoft-ds packets. this problem started since last week, i already blocked port 139 with my iptables, but if i block 139 and 445, the computers cant access smb shares. can anyone

[Samba] Re: ppolicy overlay (WAS: Enforcing Password Policies...)

2007-08-09 Thread Matt Anderson
If you add the ppolicy overlay you have a clean way to prevent password changes for some acounts (through Windows, or any interface). For instance one can use a pwdPolicy with pwdAllowUserChange: FALSE Hi Thierry, I think I have the disallow change password issue figured out. I'm mostly

[Samba] Re: home dir file permissions samba, winbind with ldap backend, AD Server 2003 R2 domain

2007-08-09 Thread Stang, Sharol
Oops! I meant ls -l not ls -s it looks like I typed ls -n instead of ls -l From: Stang, Sharol Sent: Wednesday, August 08, 2007 3:52 PM To: 'samba@lists.samba.org' Subject: home dir file permissions samba, winbind with ldap backend, AD Server 2003 R2 domain

Re: [Samba] full_audit on Samba 3.0.20 vs 3.0.25

2007-08-09 Thread Ryan Steele
Volker Lendecke wrote: On Fri, Aug 03, 2007 at 04:20:20PM -0400, Ryan Steele wrote: Just a quick question for you: Does Samba 3.0.20 support the full_audit module? I've got the module operating on two boxes, one with Samba The full audit module was added around 3.0.4. 3.0.25

Re: Fwd: Re: [Samba] Domain with public shares

2007-08-09 Thread Dale Schroeder
From your message, I'm not totally certain at which point you're getting the access denied message, but make sure that /home/spool is world-writable. If the access denied message occurs while running the add printer wizard (the [print$] share), make sure that the user has the privilege to run

[Samba] smbldap_open: cannot access LDAP when not root..

2007-08-09 Thread Matt Anderson
Dear Help, I currently have a Samba PDC along with multiple BDCs using an eDirectory LDAP backend. While trying to figure out how to get the bad password account lockout feature to work, I managed to somehow mess up the samba PDC. If a user attempts to authenticate against the PDC with the

[Samba] smbspool and cups on Centos5

2007-08-09 Thread James Bardin
Hi, I'm cannot get smbspool to print to a kerberized windows printer through cups. Kerberos is working, and both smbclient and smbspool can connect to the server. Even though sending a formatted page manually with smbspool works, cups returns Unable to connect to CIFS host, will retry in

[Samba] Samba 3.0.25b: smbd 99% CPU utilisation with opened MS Word doc

2007-08-09 Thread Ben Tisdall
Hi I'm trying to upgrade from Samba 3.0.23c on FC4 to 3.0.25b from Samba sources. Everything appears to function correctly until an MS word document is opened from a share - the file opens but the smbd process in question rockets to 99%+ CPU, stays there needs kill -9'ing to stop it. This

svn commit: samba r24282 - in branches/SAMBA_4_0/source/auth: credentials gensec

2007-08-09 Thread abartlet
Author: abartlet Date: 2007-08-09 06:26:19 + (Thu, 09 Aug 2007) New Revision: 24282 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24282 Log: Try to fix the occasional Samba4 crash in BASE-BENCH-READWRITE, as seen in particular on opi. This looked like a Heimdal

svn commit: samba r24283 - in branches/SAMBA_4_0/source/lib: . dbwrap

2007-08-09 Thread tridge
Author: tridge Date: 2007-08-09 06:34:20 + (Thu, 09 Aug 2007) New Revision: 24283 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24283 Log: added a dbwrap API for temporary databases, based on the one from the s3 clustering code. This commit just establishes the

svn commit: samba r24284 - in branches/SAMBA_4_0/source/ntvfs/common: .

2007-08-09 Thread tridge
Author: tridge Date: 2007-08-09 06:36:16 + (Thu, 09 Aug 2007) New Revision: 24284 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24284 Log: change brlock_tdb.c to use the dbwrap API. This actually makes the backend abstraction for brlock pointless, but I have

svn commit: samba r24285 - in branches/SAMBA_4_0/source/nsswitch: .

2007-08-09 Thread abartlet
Author: abartlet Date: 2007-08-09 08:08:09 + (Thu, 09 Aug 2007) New Revision: 24285 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24285 Log: A number of machines on the build farm fail because while they use SOCKET_WRAPPER, they don't compile with

svn commit: samba r24286 - in branches/SAMBA_4_0/source/nsswitch: .

2007-08-09 Thread abartlet
Author: abartlet Date: 2007-08-09 08:43:15 + (Thu, 09 Aug 2007) New Revision: 24286 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24286 Log: (missed from previous commit) A number of machines on the build farm fail because while they use SOCKET_WRAPPER, they

svn commit: samba-docs r1135 - in trunk/smbdotconf/tuning: .

2007-08-09 Thread vlendec
Author: vlendec Date: 2007-08-09 14:47:33 + (Thu, 09 Aug 2007) New Revision: 1135 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=1135 Log: Remove the docs for open files database hash size Where should I document the tdb_hashsize:tdbname parameter?

svn commit: samba r24287 - in branches/4.0-regwrite/source/setup: .

2007-08-09 Thread jelmer
Author: jelmer Date: 2007-08-09 18:29:24 + (Thu, 09 Aug 2007) New Revision: 24287 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24287 Log: Add registry provision file in standard registry diff format. Added: branches/4.0-regwrite/source/setup/provision.reg

svn commit: samba r24288 - in branches/4.0-regwrite/source: lib/registry torture/rpc

2007-08-09 Thread jelmer
Author: jelmer Date: 2007-08-09 18:30:42 + (Thu, 09 Aug 2007) New Revision: 24288 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24288 Log: Don't bail out if registry files can't be found. Some simple refactoring in RPC winreg test. Modified:

svn commit: samba r24289 - in branches/SAMBA_3_0_25/source/services: .

2007-08-09 Thread herb
Author: herb Date: 2007-08-09 19:01:19 + (Thu, 09 Aug 2007) New Revision: 24289 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24289 Log: fix debug statments to match function name Modified: branches/SAMBA_3_0_25/source/services/services_db.c Changeset:

svn commit: samba r24290 - in branches: SAMBA_3_2/source/services SAMBA_3_2_0/source/services

2007-08-09 Thread herb
Author: herb Date: 2007-08-09 19:03:23 + (Thu, 09 Aug 2007) New Revision: 24290 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24290 Log: fix debug statments to match function name Modified: branches/SAMBA_3_2/source/services/services_db.c

svn commit: samba r24291 - in branches: SAMBA_3_2/source/rpc_parse SAMBA_3_2_0/source/rpc_parse

2007-08-09 Thread vlendec
Author: vlendec Date: 2007-08-09 20:54:58 + (Thu, 09 Aug 2007) New Revision: 24291 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24291 Log: Fix Coverity ID 364 We've checked num_rids != 0 above. Modified: branches/SAMBA_3_2/source/rpc_parse/parse_samr.c

svn commit: samba r24292 - in branches/4.0-regwrite: . source/lib/registry

2007-08-09 Thread jelmer
Author: jelmer Date: 2007-08-09 21:18:42 + (Thu, 09 Aug 2007) New Revision: 24292 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24292 Log: Fix filenames. Modified: branches/4.0-regwrite/ branches/4.0-regwrite/source/lib/registry/config.mk Changeset:

svn commit: samba r24293 - in branches/4.0-regwrite: . source/auth/credentials source/auth/gensec source/cluster/ctdb source/cluster/ctdb/client source/cluster/ctdb/common source/cluster/ctdb/include

2007-08-09 Thread jelmer
Author: jelmer Date: 2007-08-09 21:30:37 + (Thu, 09 Aug 2007) New Revision: 24293 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24293 Log: Merge upstream. Added: branches/4.0-regwrite/source/dsdb/samdb/ldb_modules/objectclass.c

svn commit: samba r24295 - in branches/4.0-regwrite: . source/lib/registry

2007-08-09 Thread jelmer
Author: jelmer Date: 2007-08-10 00:28:38 + (Fri, 10 Aug 2007) New Revision: 24295 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24295 Log: Remove useless directory. Removed: branches/4.0-regwrite/source/lib/registry/tests.moved/ Modified:

svn commit: samba r24294 - in branches/4.0-regwrite: . source/lib/registry source/lib/registry/tools

2007-08-09 Thread jelmer
Author: jelmer Date: 2007-08-10 00:19:10 + (Fri, 10 Aug 2007) New Revision: 24294 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24294 Log: Fix argument parsing for command-line utilities. Added: branches/4.0-regwrite/BRANCH.TODO

Build status as of Fri Aug 10 00:00:02 2007

2007-08-09 Thread build
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2007-08-09 00:02:05.0 + +++ /home/build/master/cache/broken_results.txt 2007-08-10 00:00:21.0 + @@ -1,24 +1,24 @@ -Build status as of Thu Aug 9 00:00:02 2007 +Build status as of Fri Aug

svn commit: samba r24296 - in branches/4.0-regwrite: . source/lib/registry source/lib/registry/tests

2007-08-09 Thread jelmer
Author: jelmer Date: 2007-08-10 02:34:34 + (Fri, 10 Aug 2007) New Revision: 24296 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24296 Log: Implement query_info_key num_subkeys and num_values properly, more work on supporting creating diffs. Added:

svn commit: samba r24297 - in branches/4.0-regwrite: . source/lib/registry

2007-08-09 Thread jelmer
Author: jelmer Date: 2007-08-10 03:15:11 + (Fri, 10 Aug 2007) New Revision: 24297 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24297 Log: Fix generation of diffs. Modified: branches/4.0-regwrite/ branches/4.0-regwrite/source/lib/registry/patchfile.c

svn commit: samba r24298 - in branches/4.0-regwrite: . source/lib/registry source/lib/registry/tests

2007-08-09 Thread jelmer
Author: jelmer Date: 2007-08-10 03:52:02 + (Fri, 10 Aug 2007) New Revision: 24298 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=24298 Log: Fix diff generation, start on patch generation. Modified: branches/4.0-regwrite/