Re: [Samba] CVE-2008-1105

2008-06-06 Thread Volker Lendecke
On Fri, Jun 06, 2008 at 11:27:25AM +1200, Derek wrote: Just wanted to confirm whether this CVE affects the 3.0.4 version of Samba.. The samba.org website claims This security advisory is applicable to all Samba 3.0.x releases to date Yet the actual CVE [1] has Versions: Samba 3.0.0 -

Re: [Samba] do i need posix users/groups in ldap

2008-06-06 Thread Collen Blijenberg
So correct me if i'm wrong, in order to use the ldap backend, you need to insert the posix users in ldap as well ?? there is no way to get it work, with the normal basic setup (passwd shadow group ect. files) that's odd ?! Collen. Adam Williams wrote: you'll need to put your posix users

Re: [Samba] push install software with samba

2008-06-06 Thread Bardo Wolf
another friendly competitor for deploying windows software is opsi, a GPL-desktop-management system http://www.opsi.org/ opsi stable version 3.2 http://download.uib.de/opsi3.2/doku/ info at http://download.uib.de/opsi3.2/doku/ opsi version 3.3 release candidate 1 will be announced soon. info

[Samba] how to reduce footprint of smbd?

2008-06-06 Thread Patrick
Hello This is my first mail for this list, so please be considerately. I'm trying to build a tiny version of samba for an embedded device. currently im using the version 2.2 with a footprint of smbd 2.4M. Thats to much. Is there a way/patch to build smbd without everything beside file exchage?

Re: [Samba] CVE-2008-1105

2008-06-06 Thread Michael Heydon
Volker Lendecke wrote: Yet the actual CVE [1] has Versions: Samba 3.0.0 - 3.0.29 (inclusive) The CVE suggests that the version 3.0.4 would not be affected, my confused! I'm not a native english speaker, but I wonder from what term in the CVE you read that 3.0.4 is not affected I

Re: [Samba] Can't join AD anymore after migration to 3.0.30

2008-06-06 Thread Jens Nissen
Thanks Guenther, that is exactly the patch I needed to join my AD-Member back into my Windows 2000-SP4 domain! Jens Guenther Deschner wrote: Jens Nissen wrote: I doff my hat, indeed, my SBS200 is running SP1. (Microsoft never provided updates for SBS2000 beyond SP1, there were individual

Re: [Samba] do i need posix users/groups in ldap

2008-06-06 Thread Michael Heydon
Collen Blijenberg wrote: in order to use the ldap backend, you need to insert the posix users in ldap as well ?? there is no way to get it work, with the normal basic setup (passwd shadow group ect. files) that's odd ?! It isn't completely impossible, if you really wanted to have two

Re: [Samba] multiple smb commands (some non AndX) in one packet

2008-06-06 Thread Volker Lendecke
On Thu, Jun 05, 2008 at 01:09:15PM -0500, Shirish Pargaonkar wrote: I can't attach a 301MB samba server log file. Is there a way I can upload the file at some location? As far as cifs, it tries to send some commands but does not get a reply for a long time and times out, so everything is

Re: [Samba] multiple smb commands (some non AndX) in one packet

2008-06-06 Thread Dan Kegel
On Fri, Jun 6, 2008 at 1:54 AM, Volker Lendecke [EMAIL PROTECTED] wrote: Well, maybe 10MB before the reconnect, bzip2 -9 and you can send it directly to me :-) rzip often compresses log files better than bzip2... -- To unsubscribe from this list go to the following URL and read the

[Samba] XP SP3 and posix locking

2008-06-06 Thread Dirk Kastens
Hi, the home directories of our users are NFS-mounted from a NetApp filer to our samba server. Everthing was fine until the users installed the service pack 3 for Windows XP on the client machines. Suddenly it was impossible to write MS Office files on the samba share. Word or Excel

Re: [Samba] unsafe_string_function_usage_here when linking smbd

2008-06-06 Thread Bengt Nilsson
I get the prorotype error (uint32 / uint32_t) in include/util_tdb.h regardless of if I use cc or gcc, see [Samba] Failed building 3.0.30 for tru64 4.0F If I modfy include/util_tdb.h changing uint32_t to uint32, and correct the typo (TDB_BASE_OBJ) - (TDBBASE_OBJ) in the Makefile.in, . and

RE: [Samba] XP SP3 and posix locking

2008-06-06 Thread L.P.H. van Belle
Hi, Im running XP SP3 here on samba 2.0.24 and 2.0.28 and no problems here. Louis -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Dirk Kastens Verzonden: vrijdag 6 juni 2008 13:43 Aan: samba@lists.samba.org Onderwerp: [Samba] XP SP3 and posix

Re: [Samba] unsafe_string_function_usage_here when linking smbd

2008-06-06 Thread Volker Lendecke
On Fri, Jun 06, 2008 at 02:16:20PM +0200, Bengt Nilsson wrote: I get the prorotype error (uint32 / uint32_t) in include/util_tdb.h regardless of if I use cc or gcc, see [Samba] Failed building 3.0.30 for tru64 4.0F If I modfy include/util_tdb.h changing uint32_t to uint32, and correct

Re: [Samba] XP SP3 and posix locking

2008-06-06 Thread Volker Lendecke
On Fri, Jun 06, 2008 at 01:42:50PM +0200, Dirk Kastens wrote: the home directories of our users are NFS-mounted from a NetApp filer to our samba server. Everthing was fine until the users installed the service pack 3 for Windows XP on the client machines. Suddenly it was impossible to write

Re: [Samba] unsafe_string_function_usage_here when linking smbd

2008-06-06 Thread Bengt Nilsson
My system is OSF1 V4.0 1229 alpha, login message Digital UNIX V4.0F (Rev. 1229) I also have a OSF1 V5.1 2650 alpha, login message Compaq Tru64 UNIX V5.1B (Rev. 2650). I will try to see if it works better on the 5.1 system.. 6 jun 2008 kl. 14.34 skrev Volker Lendecke: On Fri, Jun 06, 2008

Re: [Samba] XP SP3 and posix locking

2008-06-06 Thread Dirk Kastens
Hi, L.P.H. van Belle wrote: Hi, Im running XP SP3 here on samba 2.0.24 and 2.0.28 and no problems here. It works with local filesystems. I does not work with NFS-mounted filesystem. Regards, Dirk -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] XP SP3 and posix locking

2008-06-06 Thread Dirk Kastens
Hi, Volker Lendecke wrote: Well, re-export of NFS-imported directories is not recommended and one of the exceptions to you should never... :-) You should not NFS-export NFS-mounted filesystems. I don't know why you shouldn't create a samba share on an NFS-filesystem. Our samba servers are

RE: [Samba] XP SP3 and posix locking

2008-06-06 Thread L.P.H. van Belle
wel how about im having 3 nfs mounts on my samba on 2 different servers 1 debian( export ) 1 sco unix 5.0.7 ( export ) 1 samba server ( nfs mounted ) 8 drive mappings on client pc's linked folders to nfs mounted folders in the users home drive. need i say more. Louis

Re: [Samba] XP SP3 and posix locking

2008-06-06 Thread Volker Lendecke
On Fri, Jun 06, 2008 at 03:14:08PM +0200, Dirk Kastens wrote: You should not NFS-export NFS-mounted filesystems. I don't know why you shouldn't create a samba share on an NFS-filesystem. Exactly for the problems you've seen. No. CIFS on the NetApp only works with Active Directory. We use

[Samba] Samba and ldap referrals

2008-06-06 Thread Alex Crow
All, If I set up a BDC with a replicated ldap server, can I point the ldap backend and idmap backend options *both* to the localhost and enable a referral on the slave so that writes (ie Idmap updates) will be referred to the master server? I'm running debian unstable with openldap 2.4 (and

Re: [Samba] XP SP3 and posix locking

2008-06-06 Thread Helmut Hullen
Hallo, Dirk, Du (dkastens) meintest am 06.06.08: You should not NFS-export NFS-mounted filesystems. I don't know why you shouldn't create a samba share on an NFS-filesystem. It may work. A school in the neighbourhood runs some shares in these ways - a third server shares some directories

Re: [Samba] XP SP3 and posix locking

2008-06-06 Thread Daniel Wilson
No. CIFS on the NetApp only works with Active Directory. We use LDAP for user authentication so we have to keep our samba servers. Despite what NetApp sales reps try to tell you, NetApp filers work perfectly fine in a Samba domain. Just create a Samba PDC backed by your LDAP (domain

Re: [Samba] unsafe_string_function_usage_here when linking smbd

2008-06-06 Thread Bengt Nilsson
I tried ./configure + make on my 5.1 system and it worked fine. So the problem is for the older Digital UNIX V4.0F system. Do you have access to such a system? 6 jun 2008 kl. 14.34 skrev Volker Lendecke: On Fri, Jun 06, 2008 at 02:16:20PM +0200, Bengt Nilsson wrote: I get the prorotype error

Re: [Samba] Domain trusts in samba3 with openLDAP

2008-06-06 Thread Alex Crow
Apologies, my ldap user/computer ou's in smb.conf were wrong. :-( However the DOMAIN CONTROLLER NOT FOUND error with wbinfo -t in 3.0.30 still holds, and I could not get 3.0.28a to populate the Idmap ou in LDAP, whereas despite the 3.0.30 problem, that release could indeed do so. Cheers Alex

Re: [Samba] unsafe_string_function_usage_here when linking smbd

2008-06-06 Thread Volker Lendecke
On Fri, Jun 06, 2008 at 03:52:54PM +0200, Bengt Nilsson wrote: I tried ./configure + make on my 5.1 system and it worked fine. So the problem is for the older Digital UNIX V4.0F system. Do you have access to such a system? No, sorry :-) Volker pgpkQL3bit7wV.pgp Description: PGP signature --

[Samba] log.winbindd

2008-06-06 Thread Adrian Cowham
Which files does the max log size property manage? I'm pretty confident it manages log.smb but what about log.nmbd and log.winbindd. The reason I ask is despite having set max log size, log.winbindd has grown to be a few gigs. I don't know if this is a defect in Samba or an indication I need to

[Samba] Re: Can not connect to share for a particular user.

2008-06-06 Thread Jean-Yves Avenard
Hi again 2008/6/5 Jean-Yves Avenard [EMAIL PROTECTED]: In the smb log file, I would see make_connection: connection to public denied due to security descriptor. A thread bump... No one has ever faced this issue? any solutions by any chance? Thanks JY -- To unsubscribe from this list go to

Re: [Samba] Re: Can not connect to share for a particular user.

2008-06-06 Thread Volker Lendecke
On Sat, Jun 07, 2008 at 12:48:44AM +1000, Jean-Yves Avenard wrote: 2008/6/5 Jean-Yves Avenard [EMAIL PROTECTED]: In the smb log file, I would see make_connection: connection to public denied due to security descriptor. A thread bump... No one has ever faced this issue? any solutions by

Re: [Samba] how to reduce footprint of smbd?

2008-06-06 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Patrick wrote: Hello This is my first mail for this list, so please be considerately. I'm trying to build a tiny version of samba for an embedded device. currently im using the version 2.2 with a footprint of smbd 2.4M. Thats to much. Is

Re: [Samba] unsafe_string_function_usage_here when linking smbd

2008-06-06 Thread Kai Lanz
On Jun 6, 2008, at 10:10 AM, Herb Lewis wrote: try doing an nm on the suspected .o file and see if the reference to the function is there. That will prove which file(s) is comes from than maybe you can determine which function it comes from. Thanks, but I've already done that; I used nm to

[Samba] CVE-2008-1105 - clarification request

2008-06-06 Thread Gustavo Homem
Hi, The announcement states: Secunia Research reported a vulnerability that allows for the execution of arbitrary code in smbd Does this means arbitrary code executed as root ou as the user that is authenticaded after smdb drops privilegies? Does this affect samba 2.x as well? What versions?

[Samba] limit user connections to PDC

2008-06-06 Thread Christopher Perry
i work in a lab environment, and we'd like to prevent users from logging into 5 machines at once. I've looked through the smb.conf man page pretty thoroughly, but nothing appears to address this problem. Anyone have any ideas, how you can limit the amount of logins a user can have to teh

Re: [Samba] CVE-2008-1105 - clarification request

2008-06-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gustavo Homem wrote: Hi, The announcement states: Secunia Research reported a vulnerability that allows for the execution of arbitrary code in smbd Does this means arbitrary code executed as root ou as the user that is authenticaded after

Re: [Samba] CVE-2008-1105 - clarification request

2008-06-06 Thread Gustavo Homem
On Friday 06 June 2008 19:49, Gerald (Jerry) Carter wrote: Gustavo Homem wrote: Hi, The announcement states: Secunia Research reported a vulnerability that allows for the execution of arbitrary code in smbd Does this means arbitrary code executed as root ou as the user that is

Re: [Samba] unsafe_string_function_usage_here when linking smbd

2008-06-06 Thread Herb Lewis
run script to capture all the following output run gdb trans2.o then run the command x/400i (may need to change the number of lines) search for the offending function call and see where it says it is in the file Kai Lanz wrote: On Jun 6, 2008, at 10:10 AM, Herb Lewis wrote: try doing an nm

[Samba] lazy samba server?

2008-06-06 Thread George He
Hi, I recently installed samba (3.0.28) on a linux box as a PDC. The networks has about 20 windows xp professional and a few Linux (all Fedora 8). Basically the server works OK but I have run into a few problems: Initially windows roaming profile was not configured. At that time, sometimes when

Re: [Samba] XP SP3 and posix locking

2008-06-06 Thread Adam Williams
i've had a similar problem for weeks/months now with microsoft word 2003 saying files are read-only, even when the file permissions are 777. i was google searching which said the problem is due to windows desktop search. i uninstalled that but that didn't completely fix it. i'll try posix

Re: [Samba] CVE-2008-1105 - clarification request

2008-06-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gustavo Homem wrote: On Friday 06 June 2008 19:49, Gerald (Jerry) Carter wrote: Gustavo Homem wrote: Hi, The announcement states: Secunia Research reported a vulnerability that allows for the execution of arbitrary code in smbd Does this

Re: [Samba] CVE-2008-1105 - clarification request

2008-06-06 Thread Gustavo Homem
On Friday 06 June 2008 20:41, Gerald (Jerry) Carter wrote: Gustavo Homem wrote: On Friday 06 June 2008 19:49, Gerald (Jerry) Carter wrote: Gustavo Homem wrote: Hi, The announcement states: Secunia Research reported a vulnerability that allows for the execution of arbitrary code in

Fwd: [Samba] lazy samba server?

2008-06-06 Thread John Drescher
On Fri, Jun 6, 2008 at 3:26 PM, George He [EMAIL PROTECTED] wrote: Hi, I recently installed samba (3.0.28) on a linux box as a PDC. The networks has about 20 windows xp professional and a few Linux (all Fedora 8). Basically the server works OK but I have run into a few problems: Initially

Re: [Samba] lazy samba server?

2008-06-06 Thread John Drescher
Hi John, when you say wins, do you mean the lmhosts file? No. If you set the PDC to be a wins server then add this ip as the wins server in every windows client the windows machines will find the domain controller. But that should work. Have you added the proper format of a domain controller?

Re: [Samba] Re: Can not connect to share for a particular user.

2008-06-06 Thread Jean-Yves Avenard
Hi Thanks for your help 2008/6/7 Volker Lendecke [EMAIL PROTECTED]: Did you set access controls with the Windows server manager? no, I don't even know what that is If not, and the settings in your smb.conf are everything you need to control access to your shares, then you might want to

Re: [Samba] lazy samba server?

2008-06-06 Thread George He
On Fri, Jun 6, 2008 at 4:15 PM, John Drescher [EMAIL PROTECTED] wrote: Hi John, when you say wins, do you mean the lmhosts file? No. If you set the PDC to be a wins server then add this ip as the wins server in every windows client the windows machines will find the domain controller.

Re: [Samba] lazy samba server?

2008-06-06 Thread John Drescher
On Fri, Jun 6, 2008 at 5:08 PM, George He [EMAIL PROTECTED] wrote: On Fri, Jun 6, 2008 at 4:15 PM, John Drescher [EMAIL PROTECTED] wrote: Hi John, when you say wins, do you mean the lmhosts file? No. If you set the PDC to be a wins server then add this ip as the wins server in every

[Samba] add|delete user / group / machine ... scripts, is the API somewhere documented?

2008-06-06 Thread Michael Schmitt
Hi folks, are there any more detailed docs about those scripts? I have some annoying issues there and I can't find anything about that in the docs. If using usrmgr.exe is it possible to tweak the add user script that the full name of a user is stored too, like if I add the user manually with

[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-0rc1-44-g5462e1a

2008-06-06 Thread Karolin Seeger
The branch, v3-2-stable has been updated via 5462e1a6bf99fc199053aebe412867f420eb1841 (commit) from b93d927dd440f0009740cf00644f603edf5a8a7c (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log