Re: [Samba] samba 3.0.4 : cannot join domain with w2k clients.

2004-06-29 Thread Tomás Polák
Some Unix systems by default dont allow $ character as valid part of user
name
and these special cases must be typically handled by forcing via special
switch
in passwd program or somewhere in /etc/... configurations files.
But this is system depended.
TP
- Original Message - 
From: HM [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Monday, June 28, 2004 5:34 PM
Subject: Re: [Samba] samba 3.0.4 : cannot join domain with w2k clients.


 I'm back ;-)

 Thanks a lot to all of you who take some time to help me. I finally
 solved the problem : the add machine script option in smb.conf seems to
 produce invalid machine accounts (?!).

 workaround : disable this option in the smb.conf file and manually
 create both system account AND smbpasswd entry.

 Hope this will help.



 HM a écrit :

  Hello all.
 
  I'm trying since a few jours to get my w2k clients join my domain,
  managed by my samba 3.0.4 PDC, without success. I can browse the
  server, share files with it with my station, but i can't join the
  domain. When i try to, i get the following message (sorry for the poor
  translation) :
 
 The following error occurred while trying to join domain 'SLS' :
 Failed to open a session : username unknown or invalid password.
 
  I the logs, i get the following :
 
  [2004/06/25 17:57:42, 0] lib/util_sock.c:get_peer_addr(978)
   getpeername failed. Error was Transport endpoint is not connected
  [2004/06/25 17:57:42, 3] smbd/oplock.c:init_oplocks(1226)
   open_oplock_ipc: opening loopback UDP socket.
  [2004/06/25 17:57:42, 3]
  smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
   Linux kernel oplocks enabled
  [2004/06/25 17:57:42, 3] smbd/oplock.c:init_oplocks(1257)
   open_oplock ipc: pid = 3791, global_oplock_port = 1065
  [2004/06/25 17:57:42, 3] smbd/process.c:process_smb(890)
   Transaction 0 of length 72
  [2004/06/25 17:57:42, 2] smbd/reply.c:reply_special(208)
   netbios connect: name1=SERVEUR name2=SLS-PHY-14
  [2004/06/25 17:57:42, 2] smbd/reply.c:reply_special(215)
   netbios connect: local=serveur remote=sls-phy-14, name type = 0
  [2004/06/25 17:57:42, 0] lib/util_sock.c:get_peer_addr(978)
   getpeername failed. Error was Transport endpoint is not connected
  [2004/06/25 17:57:42, 0] lib/util_sock.c:write_socket_data(413)
   write_socket_data: write failure. Error = Connection reset by peer
  [2004/06/25 17:57:42, 0] lib/util_sock.c:write_socket(438)
   write_socket: Error writing 4 bytes to socket 5: ERRNO = Connection
  reset by peer
  [2004/06/25 17:57:42, 0] lib/util_sock.c:send_smb(630)
   Error writing 4 bytes to client. -1. (Connection reset by peer)
  [2004/06/25 17:57:42, 3] smbd/sec_ctx.c:set_sec_ctx(288)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  [2004/06/25 17:57:42, 2] smbd/server.c:exit_server(568)
   Closing connections
  [2004/06/25 17:57:42, 3] smbd/connection.c:yield_connection(69)
   Yielding connection to
  [2004/06/25 17:57:42, 3] smbd/server.c:exit_server(611)
   Server exit (process_smb: send_smb failed.)
 
  Of course, the user root is correctly mapped in the username map, and
  the password is correctly set.
 
  Any idea ?
 
  Thanks !


 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

 -- 
 Tato sprava bola prehladana na vyskyt virusov a nebezpecneho obsahu
antivirovym systemom na serveri spolocnosti Jaga Group s.r.o. a zda sa byt
cista. Info: [EMAIL PROTECTED]





-- 
Tato sprava bola prehladana na vyskyt virusov a nebezpecneho obsahu antivirovym 
systemom na serveri spolocnosti Jaga Group s.r.o. a zda sa byt cista. Info: [EMAIL 
PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba 3.0.4 : impossible to log in the domain after a few minutes ????

2004-06-29 Thread Tomás Polák
Hello again,
I am little bit confused with your situation. We are using Samba
as PDC, but joining some W2K station to the domain implies for
us creating appropriate user profile on station which is represented
by domain\user string instead of before machinename\user string.
This is new profile on the machine and need to be old user profile
was copied into this new one to keep Desktop and Outlook Express
emails and other things of user-specific settings available to user.
I am confused because you wrotte, that you can login into domain
from W2K client using any of the accounts on the server. For me this
implies, that you have created domain profiles for each user on each
machine.
And I cannot imagine, that you have do that.
For profiles on machine see This computer - Properties - User profiles.
Also for us seems to be better to change default profile type from roaming
to local to prevent profile copying between server and client. But
our users have each its own station, so this is useful.
Next make debug trace of one of stations and go to deep log level.
You must discover in more detail, what is the real reason of logout
from domain.
Let me know about your current discoveries.
TP
- Original Message - 
From: HM [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Monday, June 28, 2004 5:46 PM
Subject: [Samba] samba 3.0.4 : impossible to log in the domain after a few
minutes 


 I'm back (twice ^^).

 After solving my problem about joining the domain, i now meet another
 strange (very strange !) issue : after joining the domain, my w2k client
 reboots, and i log in using any of the accounts on the server. But after
 10/15 minutes, it refuses logins !!
 If i reboot the client, I can login successfully again for a few
 minutes... And so on... Strange, strange, strange... I manage nearly 50
 clients with samba since 4 years, and never had such a strange issue.
 Any idea ?

 Thanks in advance !

 Amiably

 Hubert
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

 -- 
 Tato sprava bola prehladana na vyskyt virusov a nebezpecneho obsahu
antivirovym systemom na serveri spolocnosti Jaga Group s.r.o. a zda sa byt
cista. Info: [EMAIL PROTECTED]





-- 
Tato sprava bola prehladana na vyskyt virusov a nebezpecneho obsahu antivirovym 
systemom na serveri spolocnosti Jaga Group s.r.o. a zda sa byt cista. Info: [EMAIL 
PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: string overflow in safe_strcpy

2004-06-29 Thread Carl
 I updated our server to 3.0.5pre1 this morning from the fc1 rpms 
linked by samba.org.
But the errors persist, But like corey they do dissappear when mangling 
method = hash is rem'd out but this then makes long file names 
unreadable to programs that use 8.3 filenames, like some of the old 
compilers we use here.

The errors occur at the sametime as Corey's when ever you browse a share 
you get an error for all the files in that directory.

Is there any more info you might need to track this down?
Thanks,
Carl Matthews
sample of my log file :
Jun 29 08:41:16 mandrake1 nss_wins[27719]:   ERROR: string overflow by 1 
(57 - 56) in safe_strcpy [Software  Driver downloads HP Officejet g55 
All-]
Jun 29 08:41:16 mandrake1 nss_wins[27719]: [2004/06/29 08:41:16, 0] 
lib/util_str.c:safe_strcpy_fn(600)
Jun 29 08:41:16 mandrake1 nss_wins[27719]:   ERROR: string overflow by 1 
(9 - 8) in safe_strcpy [HP OF~YU.URL]
Jun 29 08:41:16 mandrake1 nss_wins[27719]: [2004/06/29 08:41:16, 0] 
lib/util_str.c:safe_strcpy_fn(600)
Jun 29 08:41:16 mandrake1 nss_wins[27719]:   ERROR: string overflow by 1 
(97 - 96) in safe_strcpy [HP Officejet g55 All-in-One HP OfficeJet G 
Series]
Jun 29 08:41:16 mandrake1 nss_wins[27719]: [2004/06/29 08:41:16, 0] 
lib/util_str.c:safe_strcpy_fn(600)
Jun 29 08:41:16 mandrake1 nss_wins[27719]:   ERROR: string overflow by 1 
(9 - 8) in safe_strcpy [28-06~LT.ZIP]
Jun 29 08:41:16 mandrake1 nss_wins[27719]: [2004/06/29 08:41:16, 0] 
lib/util_str.c:safe_strcpy_fn(600)
Jun 29 08:41:16 mandrake1 nss_wins[27719]:   ERROR: string overflow by 1 
(20 - 19) in safe_strcpy [28-06-2004 09-56-06.zip]

I updateJeremy Allison wrote:
On Fri, Jun 25, 2004 at 12:57:53AM +0100, Carl wrote:
Yeah i get this problem too, with samba 3.04 on FC1 exactly the same, 
string errors when browsing any share which fills up my 
/var/log/messages file

Any one know a fix?

Can you try 3.0.5pre1. This looks like a bug we've fixed w.r.t.
NetBIOS names.
Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Accounts are getting dsiabled

2004-06-29 Thread Tilo Lutz
Hi

I have a problem with samba 3.0.5pre1.
Many of my users are disabled by samba
and I can't find the reason why.

Here is an example of an user disbled by samba:
Unix username:christ
NT username:  christ
Account Flags:[DU ]
User SID: S-1-5-21-3371203057-3264423045-2392767973-4030
Primary Group SID:S-1-5-21-3371203057-3264423045-2392767973-1213
Full Name:Lehrer Karlo Christ
Home Directory:   \{}\{}wilma2\{}christ\{}profile
HomeDir Drive:Z:
Logon Script: 0.0.0.0.bat
Profile Path: \\WILMA2\profile
Domain:   WMS-NET
Account desc:
Workstations:
Munged dial:
Logon time:   0
Logoff time:  Fre, 13 Dez 1901 21:45:51 GMT
Kickoff time: Fre, 13 Dez 1901 21:45:51 GMT
Password last set:Mit, 16 Jun 2004 14:31:37 GMT
Password can change:  Mit, 01 Jan 2003 00:00:01 GMT
Password must change: Fre, 15 Jan 2027 00:00:09 GMT
Last bad password   : 0
Bad password count  : 0

In log-files I can only find a massage the account is disabled when the
user tries to login. (LogLevel 2).
I also found two messages with a wrong password before.

Can anybody help my why samba is disabling many of my users?

Regards, Tilo




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: string overflow in safe_strcpy

2004-06-29 Thread Carl Matthews
Also i've just noticed the errors never occur for directorys but only 
for files longer than the 8.3. Which again suggests an error in the hash 
mangling method.

Carl wrote:
 I updated our server to 3.0.5pre1 this morning from the fc1 rpms linked 
by samba.org.
But the errors persist, But like corey they do dissappear when mangling 
method = hash is rem'd out but this then makes long file names 
unreadable to programs that use 8.3 filenames, like some of the old 
compilers we use here.

The errors occur at the sametime as Corey's when ever you browse a share 
you get an error for all the files in that directory.

Is there any more info you might need to track this down?
Thanks,
Carl Matthews
sample of my log file :
Jun 29 08:41:16 mandrake1 nss_wins[27719]:   ERROR: string overflow by 1 
(57 - 56) in safe_strcpy [Software  Driver downloads HP Officejet g55 
All-]
Jun 29 08:41:16 mandrake1 nss_wins[27719]: [2004/06/29 08:41:16, 0] 
lib/util_str.c:safe_strcpy_fn(600)
Jun 29 08:41:16 mandrake1 nss_wins[27719]:   ERROR: string overflow by 1 
(9 - 8) in safe_strcpy [HP OF~YU.URL]
Jun 29 08:41:16 mandrake1 nss_wins[27719]: [2004/06/29 08:41:16, 0] 
lib/util_str.c:safe_strcpy_fn(600)
Jun 29 08:41:16 mandrake1 nss_wins[27719]:   ERROR: string overflow by 1 
(97 - 96) in safe_strcpy [HP Officejet g55 All-in-One HP OfficeJet G 
Series]
Jun 29 08:41:16 mandrake1 nss_wins[27719]: [2004/06/29 08:41:16, 0] 
lib/util_str.c:safe_strcpy_fn(600)
Jun 29 08:41:16 mandrake1 nss_wins[27719]:   ERROR: string overflow by 1 
(9 - 8) in safe_strcpy [28-06~LT.ZIP]
Jun 29 08:41:16 mandrake1 nss_wins[27719]: [2004/06/29 08:41:16, 0] 
lib/util_str.c:safe_strcpy_fn(600)
Jun 29 08:41:16 mandrake1 nss_wins[27719]:   ERROR: string overflow by 1 
(20 - 19) in safe_strcpy [28-06-2004 09-56-06.zip]

I updateJeremy Allison wrote:
On Fri, Jun 25, 2004 at 12:57:53AM +0100, Carl wrote:
Yeah i get this problem too, with samba 3.04 on FC1 exactly the same, 
string errors when browsing any share which fills up my 
/var/log/messages file

Any one know a fix?

Can you try 3.0.5pre1. This looks like a bug we've fixed w.r.t.
NetBIOS names.
Jeremy.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] KERNEL CIFS Memory Leak

2004-06-29 Thread Dan Am
Am Montag, 28. Juni 2004 22:28 schrieb Jacob A. Alifrangis:
 mount //guide/music /mnt/tmp -t cifs -o username=
Don't know much about cifs but I would try -o smbfs 
HTH
Dan
-- 
buddha 2.6.4-54.5-default 9:05am  an  19:31,  1 Benutzer,
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] mkntpasswd

2004-06-29 Thread Mario Ohnewald
Hi!

I am currently follwoing this howto:
http://www.samba.org/samba/docs/man/guide/happy.html#ch6-nss02

and i am stuck with:
(..)You must compile the mkntpasswd tool and then install it into the
/var/lib/samba/sbin directory, as shown here(...)


Where can i get the mkntpasswd sources from? Or is there a rpm package for
it?

Thanks, Mario

-- 
Sie haben neue Mails! - Die GMX Toolbar informiert Sie beim Surfen!
Jetzt aktivieren unter http://www.gmx.net/info

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] net rpc join || smbpasswd

2004-06-29 Thread Renaud . Leroy
Hi !

I'm trying to join my samba3 print server to an existing NT4 domain.
I'm on mdk 9.1 prosuite and samba3 rpms.

I did urpmi samba3-server  samba3-winbind without problem.


I'm using this doc:
http://us1.samba.org/samba/docs/man/howto/FastStart.html#id2509604

when i do:

net rpc join -S THE_PDC -U AN_ ADMIN

i got:

bash:net:command not found 


---


Do i have to use smbpasswd -j DOMAIN -r PDC -UAdmin_count%the_passwd
???



thanks by advance

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] last chance...joining XP to samba+ldap domain

2004-06-29 Thread Andrew Bartlett
On Tue, 2004-06-29 at 04:57, abebe lsslp wrote:
 I have tried all I can and spent days trying XP to
 join my domain. I have finally come to a dead end: I
 don't see any logs in nmbd.log, smbd.log,
 xpclient.log or messages. Everything seems to work
 perfectly.

So, it's all working perfectly, and you are complaining?

Samba avoids logging messages (at the default log levels) for success.

Andrew Bartlett


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] mkntpasswd

2004-06-29 Thread Emmanuel Lacour
On Tue, Jun 29, 2004 at 10:51:45AM +0200, Mario Ohnewald wrote:
 Hi!
 
 I am currently follwoing this howto:
 http://www.samba.org/samba/docs/man/guide/happy.html#ch6-nss02
 
 and i am stuck with:
 (..)You must compile the mkntpasswd tool and then install it into the
 /var/lib/samba/sbin directory, as shown here(...)
 
 
 Where can i get the mkntpasswd sources from? Or is there a rpm package for
 it?
 

You'll get it from the source directory of smbldap-tools from Idealx.

http://cvs.idealx.org/cgi-bin/cvsweb/samba/smbldap-tools/mkntpwd.tar.gz

-- 
Emmanuel Lacour  Easter-eggs
44-46 rue de l'Ouest  -  75014 Paris   -   France -  Métro Gaité
Phone: +33 (0) 1 43 35 00 37- Fax: +33 (0) 1 41 35 00 76
mailto:[EMAIL PROTECTED]   -http://www.easter-eggs.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] howto apply a patch to samba 3.0.4

2004-06-29 Thread Olaf Eichhorn, Vermessungsbüro Pfeifer
Hi samba users,
how can I apply a patch (post3.0.4) to samba 3.0.4? I got the sources
samba-3.0.4-2.src.rpm and samba-3.0.4.patch and samba-3.0.4.patch.asc
The patch solves an big problem I have. (no backup over network 
possible) I'm using fedora core 1 (i386)

thanks for Your help
Olaf
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Inconsistant winbind and getent results

2004-06-29 Thread Marcel de Riedmatten
Le lun 28/06/2004 à 19:52, Norman Zhang a écrit :
 Marcel de Riedmaten wrote:
  Le mer 23/06/2004 à 00:53, Norman Zhang a écrit :
 # getent passwd nzhang
 
 The last command displays nothing. Why?
  
  Last time i got that i had 2 users with the same numeric uid  (this is
  counting local users) or, i am not quite sure, 2 users or group with the
  same SID. To much playing !  So i would double check stuff like that. 
 
 I don't have a local user nzhang on my Linux box. I added winbind enum 
 users/groups, but testparm seems to ignore them. Below is my conf file, 
 could you see if I'm doing something stupid?

Hi 

I said numeric uid,  not uid. This is the number int the third column of
a passwd entry. You have idmap in your config therefore your are running
samba 3. What is your domaine controler ?  By the way your config look
good.

An other way to look at the problem is to put

log level = 3 or 5

and to look at the winbind log after you have done the getent. 
There surely will be some interesting message. 


Cheers 

-- 
Marcel de Riedmatten



signature.asc
Description: Ceci est une partie de message	=?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e=2E?=
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] mkntpasswd

2004-06-29 Thread Mario Ohnewald
Ah, 

 On Tue, Jun 29, 2004 at 10:51:45AM +0200, Mario Ohnewald wrote:
  Hi!
  
  
  Where can i get the mkntpasswd sources from? Or is there a rpm package
 for
  it?
  
 
 You'll get it from the source directory of smbldap-tools from Idealx.
 
 http://cvs.idealx.org/cgi-bin/cvsweb/samba/smbldap-tools/mkntpwd.tar.gz

Its called mkntpwd! :)
Thanks!

-- 
Sie haben neue Mails! - Die GMX Toolbar informiert Sie beim Surfen!
Jetzt aktivieren unter http://www.gmx.net/info

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbldap-populate.pl

2004-06-29 Thread Mario Ohnewald
Hi again :)

I am trying to populate my ldap database with the ./smbldap-populate.pl
script now.
The errors i get are:


adding new entry: uid=Administrator,ou=People,dc=abmas,dc=biz
failed to add entry: objectclass: value #2 invalid per syntax at   
./smbldap-populate.pl line 323, GEN1 line 6.

adding new entry: uid=nobody,ou=People,dc=abmas,dc=biz
failed to add entry: objectclass: value #2 invalid per syntax at
./smbldap-populate.pl line 323, GEN1 line 7.


I guess it can not add it because there is something wrong with the
samba.schema.
Has anyone else had that problem yet?
I have already changed the spelling problem (objectClass:) sambaSAMAccount
to sambaSamAccount. So that maches now.
I would just like to know now why i get this sytax error with the populate
script.

Thanks, Mario

-- 
Sie haben neue Mails! - Die GMX Toolbar informiert Sie beim Surfen!
Jetzt aktivieren unter http://www.gmx.net/info

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] keep long printer name

2004-06-29 Thread walters
hi everybody,
I get a problem on keeping long printer name in samba.
We have several printer on NT4. I want to migrate all of them to samba.
In NT4, the printer name shows as HP LaserJet 5000 PCL6 on windows2000 and 
windows XP client. How can I get that shown on Samba exactly like that?
I am using LPRng and samba 3.04.
I can use HP5000PCL in samba share and it shows on printer share.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap-populate.pl

2004-06-29 Thread Mario Ohnewald
Solution: cp schema/nis.schema.default schema/nis.schema

I kept messing around in the samba schema, but it was the posix one which
caused the problems :)

 Hi again :)
 
 I am trying to populate my ldap database with the ./smbldap-populate.pl
 script now.
 The errors i get are:
 
 
 adding new entry: uid=Administrator,ou=People,dc=abmas,dc=biz
 failed to add entry: objectclass: value #2 invalid per syntax at   
 ./smbldap-populate.pl line 323, GEN1 line 6.
 
 adding new entry: uid=nobody,ou=People,dc=abmas,dc=biz
 failed to add entry: objectclass: value #2 invalid per syntax at
 ./smbldap-populate.pl line 323, GEN1 line 7.
 
 
 I guess it can not add it because there is something wrong with the
 samba.schema.
 Has anyone else had that problem yet?
 I have already changed the spelling problem (objectClass:) sambaSAMAccount
 to sambaSamAccount. So that maches now.
 I would just like to know now why i get this sytax error with the populate
 script.
 
 Thanks, Mario
 
 -- 
 Sie haben neue Mails! - Die GMX Toolbar informiert Sie beim Surfen!
 Jetzt aktivieren unter http://www.gmx.net/info
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

-- 
+++ Jetzt WLAN-Router für alle DSL-Einsteiger und Wechsler +++
GMX DSL-Powertarife zudem 3 Monate gratis* http://www.gmx.net/dsl

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] net rpc

2004-06-29 Thread Renaud . Leroy
It was net3 rpc  !!!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] change in authentication behaviour after 3.0.2

2004-06-29 Thread christoph . beyer
Hi Jerry et al,

I upgraded from 3.0.2 to the 5pre1 release and recognized that my old
smb.conf file din't work out anymore:

[ snip ]
username map = /usr/spool/lp/etc/smbusers.map
map to guest = Bad User
guest ok = yes
admin users = lp
printer admin = lp
guest account = nobody
[ snip ]

[my_server] /spool $ cat /usr/spool/lp/etc/smbusers.map
!lp = lp
nobody = *

With this I try to map everyone on nobody, except the admin user 'lp'. It
worked fine up till the 3.0.2 release since then the behaviour has changed
and I can not login as admin anymore (lp get's mapped to nobody)...

thank you for any help  or hints
~christoph


-- 
/*   Christoph Beyer |   Office: Building 2b / 23 *\
 *   DESY|Phone: 040-8998-2317*
 *   - IT -  |  Fax: 040-8998-4060*
\*   22603 Hamburg   | http://www.desy.de */

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba 3.0.3-5 PDC - share works, domain login not

2004-06-29 Thread Mario Ohnewald
Hello List!
I just set up a samba3+ldap pdc _almost_ successfully.

If i log into the win2k box and i access \\123.123.123.123\user1
it asks me for my user1 passwd and i can access its home dir.

But i can not log into the domain with the user1. It complains about a wrong
passwd or user at the login prompt.

Could it be that my machine is missing in my user databases?
I did check my machine and it _should_ be added by the smb.conf script:
  add machine script = /usr/local/sbin/smbldap-useradd.pl -w '%u'

But it doesnt add it automatically, so i ran the script manually.

Anyway, the debug level is set to 1, and here are some log lines:

grep 14:37 /var/log/samba/* | grep -v nmbd
/var/log/samba/box:[2004/06/29 14:37:31, 0]
rpc_server/srv_netlog_nt.c:get_md4pw(201)
/var/log/samba/box:[2004/06/29 14:37:31, 0]
rpc_server/srv_netlog_nt.c:get_md4pw(201)


Why does it say md4pw here? I set my passwds to md5. Does that matter?
But accessing a share is no problem at all.

Thanks for any hints, Mario

-- 
+++ Jetzt WLAN-Router für alle DSL-Einsteiger und Wechsler +++
GMX DSL-Powertarife zudem 3 Monate gratis* http://www.gmx.net/dsl

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] ACLs revisited

2004-06-29 Thread Mark Lidstone
Hi all,

My appologies if this has been addressed before, but I've been searching
the list archives and can only find people reporting having the problem,
not a solution.  I have found a solution for my own situation and I
thought I'd share it in case it can help anyone else.

BACKGROUND
==
I'm running Samba 3 on Fedora Core 2.  I've kept the machine up to date
with yum, at first installing Samba 3.0.3 that yum picks up, then
recompiling myself using the source RPM for 3.0.4 on samba.org.  The
machine is setup as a PDC.

All my Samba shares are in the folder /samba which is an ext3 partition
mounted with rw,acl flags.  FC2 comes as standard with a 2.6 kernel
that supports ACLs on ext3 partitions.

THE PROBLEM
===
Using setfacl and getfacl from the shell I was able to set and retrieve
ACLs on files and folders.  These changes were visible over the Samba
shares.

However, if I tried and make changes from a remote client I got no error
messages, but the changes were not actually written to disk.  The end
result is that although I seemed to be able to add ACL entries, when I
tried to check them afterwards they had disappeared.

At first I thought it might have been something to do with the client I
was using, a Windows 2000 SP4 machine, but an XP Pro SP1 machine showed
the same behaviour and if I tried to set the ACLs from a shell on the
server itself using smbcacls -U administrator -a
ACL:DOMAIN\\username:ALLOWED/0/FULL //localhost/share a.txt I got no
errors, but the change was not made.  Checking afterwards with smbcacls
-U administrator //localhost/share a.txt showed the permissions had not
changed.

THE SOLUTION

This was embarrasingly simple in the end.  After checking some logs I
found the following line:

[2004/06/29 13:05:52, 0] passdb/pdb_smbpasswd.c:build_sam_account(1183)
  build_sam_account: smbpasswd database is corrupt!  username test-xp$
with uid 512 is not in unix passwd database!

Luckily there were only a few test users and machines on the system at
the time, so I was able to mv /etc/samba/smbpasswd
/etc/samba/smbpasswd.corrupt and add the users again.

Straight away it started to work.  It would appear that during a test
backup/restore something ended up out of sync between the smbpasswd and
passwd files.

If this has not solved your problem, I would recommend making sure that
in smb.conf you have a line reading log file = /var/log/samba/%m.log,
then try and use smbcacls from the linux machine itself to change your
ACLs, then look through /var/log/samba/machine-name.log for the
information.  That way you'll have the minimum of irrelevant information
in the logfile when you're hunting through it for clues.

I hope this helps someone,

Mark Lidstone
IT and Network Support Administrator

BMT SeaTech Ltd
Grove House, Meridians Cross, 7 Ocean Way
Ocean Village, Southampton.  SO14 3TJ. UK
Tel: +44 (0)23 8063 5122 
Fax: +44 (0)23 8063 5144

E-Mail:  mailto:[EMAIL PROTECTED]
Website: www.bmtseatech.co.uk

==
Confidentiality Notice and Disclaimer: 
The contents of this e-mail and any attachments are intended only for
the
use of the e-mail addressee(s) shown. If you are not that person, or one
of those persons, you are not allowed to take any action based upon it
or
to copy it, forward, distribute or disclose the contents of it and you
should please delete it from your system. BMT SeaTech Limited does not
accept liability for any errors or omissions in the context of this
e-mail
or its attachments which arise as a result of Internet transmission, nor
accept liability for statements which are those of the author and not
clearly made on behalf of BMT SeaTech Limited.

==
  
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Accounts are getting dsiabled

2004-06-29 Thread Collen Blijenberg MLHJ
Hmm, not shure, did you look at the eventlog from your win box ??
i had something alike, (before 304) and the win log showed that
the password change was corrupt (was a bug before 304)..

there might be some debug info there..
for the rest, i dunno..
-
Collen Blijenberg   (Montessori Lyceum Herman Jordan)

Tuesday, June 29, 2004, 10:10:56 AM, you wrote:

TL Hi

TL I have a problem with samba 3.0.5pre1.
TL Many of my users are disabled by samba
TL and I can't find the reason why.

TL Here is an example of an user disbled by samba:
TL Unix username:christ
TL NT username:  christ
TL Account Flags:[DU ]
TL User SID:
TL S-1-5-21-3371203057-3264423045-2392767973-4030
TL Primary Group SID:   
TL S-1-5-21-3371203057-3264423045-2392767973-1213
TL Full Name:Lehrer Karlo Christ
TL Home Directory:   \{}\{}wilma2\{}christ\{}profile
TL HomeDir Drive:Z:
TL Logon Script: 0.0.0.0.bat
TL Profile Path: \\WILMA2\profile
TL Domain:   WMS-NET
TL Account desc:
TL Workstations:
TL Munged dial:
TL Logon time:   0
TL Logoff time:  Fre, 13 Dez 1901 21:45:51 GMT
TL Kickoff time: Fre, 13 Dez 1901 21:45:51 GMT
TL Password last set:Mit, 16 Jun 2004 14:31:37 GMT
TL Password can change:  Mit, 01 Jan 2003 00:00:01 GMT
TL Password must change: Fre, 15 Jan 2027 00:00:09 GMT
TL Last bad password   : 0
TL Bad password count  : 0

TL In log-files I can only find a massage the account is disabled when the
TL user tries to login. (LogLevel 2).
TL I also found two messages with a wrong password before.

TL Can anybody help my why samba is disabling many of my users?

TL Regards, Tilo





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re[4]: [Samba] a better smbstatus for monitoring samba ?

2004-06-29 Thread Collen Blijenberg MLHJ
does someone have some screen dumps or more tech info
on the Novel file server tools, where he's talking about..

l8r
-
Collen Blijenberg   (Montessori Lyceum Herman Jordan)

Wednesday, June 16, 2004, 3:02:13 PM, you wrote:

BR Hi,

BR  well I think it should be able to run in a console, just like Midnight
BR Commander (so it's also usefull without X),
BR it should have a menu for info about the system, like cpu
BR usage, network card usage,memory, how many users are currently attached to
BR the system, up time.
BR A menu from which you can see that what user is attached to what share, and
BR if you press enter on the user name you can see what files are currently in
BR use.
BR It's almost like smbstatus, only that it's a bit more organized, and is
BR easier to view what is happening on the system in case someone causes
BR trouble it is easier to find what user had that file open. Also it would be
BR nice if in this same menu besides the username and what share that user is
BR using there would be information about user logon time.

BR  Sincerely
BR  Robert B
BR - Original Message - 
BR From: Collen Blijenberg MLHJ [EMAIL PROTECTED]
BR To: Jeremy Allison [EMAIL PROTECTED]
BR Cc: samba mailing list [EMAIL PROTECTED]
BR Sent: Wednesday, June 16, 2004 08:50
BR Subject: Re[2]: [Samba] a better smbstatus for monitoring samba ?


 depends on it...
 what needs to be in the tool ???
 what options, and all...

 (got a big holyday comming up, so got some time to crack!)

 l8r
 -
 Collen Blijenberg   (Montessori Lyceum Herman Jordan)

 Wednesday, June 16, 2004, 3:26:43 AM, you wrote:

 JA On Tue, Jun 15, 2004 at 09:56:04PM +0200, Becskei Robert wrote:
  Hello,
 
   does anyone know if there is a tool in existence that can
  monitor samba shares like smbstatus
  but is much more advanced (and runs in console) , I mean a tool that
BR has menues, some search
  options, and things sorted out nice. A Samba realtime monitor
  would be the best thing with lots
  of details and lots of options.
 
 
   I tried Swat, but that aint really a solution to watch who is
  connected to where, neither is smbstatus
  since when to many people are connected you can't see in
  realtime who is using what. And that I think
  is one major problem.
 
   I would like to have such a tool because I'm throwing the
  Novell File Server out and using a Whitebox 3.0EL
  instead. I wonder,...is there such a tool like Novell Monitor
  ... for linux ? I mean if there aint one for samba
  maybe another tool that is more advanced would be able to view
  who is connected to what ? what is their IP
  adress, what time did they logged on, what is the current system
BR status, etc...

 JA No tool I know of currently. If anyone wants to write one (maybe a gui
BR tool
 JA written in python ?) I'd be happy to integrate it into the source
BR code.

 JA There are lots of admin options that could be added to Samba via TDB
BR messaging
 JA to perform admin operations - we just need programmer enthusiasm to
BR write such
 JA a tool. Anyone game ?

 JA Jeremy.

 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] domain logins fail - nmbd doa

2004-06-29 Thread Res
an update...
On Sun, 27 Jun 2004, Res wrote:
Jeremy,
On Sat, 26 Jun 2004, Jeremy Allison wrote:
Can you try this patch ? It just got applied to the SVN code.
Thanks, just applied, will let you know how it goes over the next few days...
Ok, been 48 hours and so far so good, no mysterious exits...
Will update you again by the weekend if all still good, if not, sooner :)
--
Regards,
Res
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.3/4 - WINS server expires names after 2 hours

2004-06-29 Thread jgerard
What I ended up doing, which worked for me, was make a change to 
nmbd_winsserver.c (samba 3.0.4)

I added:

if(lp_dns_proxy()  (namerec-data.death_time != 
PERMANENT_TTL)  (namerec-data.death_time  p-timestamp)  
((question-name_type == 0x20) || question-name_type == 0)) {
DEBUG(3,(wins_process_name_query: name query for 
name %s is expired - doing dns lookup.\n,
nmb_namestr(question) ));

queue_dns_query(p, question, namerec);
return;
}

right above:

if( (namerec-data.death_time != PERMANENT_TTL)  
(namerec-data.death_time  p-timestamp) ) {
DEBUG(3,(wins_process_name_query: name query for 
name %s - name expired. Returning fail.\n,
nmb_namestr(question) ));
send_wins_name_query_response(NAM_ERR, p, 
namerec);
return;
}


I realize this is not likely the correct way to do it but it did work for 
me and got a lot of people off my back every morning when I came into work 
and they couldn't resolve names :)  By adding the above, the hosts in 
question would still expire after 2 hours but the next lookup after death 
would cause them to cache for another 2 hours instead of returning a fail 
message.

I will test your patch on samba-3.0.5pre1 (if I can remember how to diff 
:D) and report back.


Jeff Gerard - Systems Administrator
Wawanesa Mutual Insurance Company
Office: 204-985-0517
Fax:204-947-5192
Email:  [EMAIL PROTECTED]




Jeremy Allison [EMAIL PROTECTED] 
28/06/2004 07:40 PM
Please respond to
Jeremy Allison [EMAIL PROTECTED]


To
Guillaume Millet [EMAIL PROTECTED]
cc
[EMAIL PROTECTED], [EMAIL PROTECTED]
Subject
Re: [Samba] Samba 3.0.3/4 - WINS server expires names after 2 hours






On Thu, Jun 24, 2004 at 04:25:52PM +0200, Guillaume Millet wrote:
 Hello,
 
 I had the same problem.
 I've found a workaround by patching the code in 
nmbd/nmbd_namelistdb.c:
 
 /***
  Expires old names in all subnet namelists.
 **/
 
 void expire_names(time_t t)
 {
struct subnet_record *subrec;
 
for( subrec = FIRST_SUBNET; subrec; subrec = 
NEXT_SUBNET_INCLUDING_UNICAST(subrec) ) {
expire_names_on_subnet( subrec, t );
}
 
expire_names_on_subnet( wins_server_subnet, t ); /* ADD THIS LINE 

FOR REMOVING EXPIRED NAME FROM WINS TABLE */
 }
 
 I dont know if it's the correct things to do, but it works fine for me 
 with my configuration (PDC+LDAP+WINS with Samba 3.0.4 on MDK 9.2)
 If a real Samba develloper can have a quick look to this to make a real 
 correction for next release.

Ok, I've looked at this in the current Samba 3.0.5preXX code (SVN) and
here is the fix I think should work. It forced DNS and DNSFAIL names to
be removed from the WINS db immediately their timeout persiod expires and
not to go into the tombstoned state (where they would hang around for
another day).

Let me know if this fixes the problem for you.

Thanks,

 Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba Cups Fedora Core 1 HP LaserJet 1015

2004-06-29 Thread Becskei Robert
Hello People!,

   I have this strange problem :

I've got Fedora Core 1 (latest kernel, latest packages,latest samba,cups) and a HP 
LaserJet 1015 (using the HP LaserJet 1015 drivers that came with the updates for 
Fedora Core 1), I can print from windows and linux without any problems both text and 
graphich. But for some unknown reason to me (and this is a really big problem) I just 
can't print from a windows client running a dos program to the printer (I was able to 
print to it for some time , but one day it stopped, I did everything to cure it, even 
tried the printer on winxp and it worked ok) , it prints out the data (plain text) 
with garbage in it . It looks like it is using only 1 font and font size , and fills 
the empty spaces with numbers and garbage text.

Pretty-please someone help me solve this , I must use this dos program, and I need to 
be able to print to the samba print server somehow. (by the way...what I don't 
understand is...that other printers on samba servers which are older are working ok.)


Someone who had something like this, and was able to solve this, please help me.

 Thank you foreward


 Sincerely
 Robert B
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] failed domain logon

2004-06-29 Thread Sergey V.
we have: 

samba 3.0.4 + w2k

from some ws  i can logon into domain, from others - not
in logs i found  'authentication for user [USER] succeeded'
but after all - logoff

thought - causes are spnego, signing or schannel 
turned them off on samba and workstation


all the same :(


Sergey

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbpasswd !!?!

2004-06-29 Thread Robert Adkins
Samba utilizes the UNIX File permissions for telling Windows machines 
who can do what with a file. Due to this, you have a decent User and 
Group set of controls you can place on the files/directories that you 
choose to share with Samba.

Without having users in the passwd file, Samba wouldn't be able to 
utilize those access rights.

Yeah, it can be a paine, but it does a good job.
If having multiple user account information to track is a pain, may I 
suggest converting to NIS or LDAP for user authentication?

-Rob
Alexander Varga wrote:
please help me. 
Why I cannot create a user with smbpasswd without having this username in /etc/passwd???
###
bash-2.05# smbpasswd -a testaccount
New SMB password:
Retype new SMB password:

Failed to initialise SAM_ACCOUNT for user testaccount.
Failed to modify password entry for user testaccount
bash-2.05#
##
my global in smb.conf
[global]
  workgroup = J9_C
  server string = %h server (Samba %v)
  dns proxy = no
  log file = /usr/local/samba/var/log.%m
  passdb backend = tdbsam smbpasswd
  invalid users = root
  passwd program = /bin/passwd %u
  socket options = TCP_NODELAY
I compilled my samba using 
./configure --prefix=/usr/local/samba  --with-pam --with-pam_smbpass --with-acl-support
and made a solaris package.


 


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] mandatory profiles, group policies, Samba3 PDC winxp Clients

2004-06-29 Thread fvela
Hello all,

I've been trying to figure out what the best way of doing the group policy 
thing is. We are running samba 3 on slackware 9 with winxp clients. We are a 
school. i'm unclear on how much AD is actually supported... OU GPO all that. 
so i decided to go the administrative template way (used to be .pol files)

I'm thinking of having the students run off of a mandatory profile. However, 
is it possible to make one gid (students) go to mandatory profile, while 
making another group (staff/faculty) use roaming profiles???

I've gotten the roaming profiles to load and unload fine... they're slow but i 
have not started to optimize them with the folder redirection. 

However, one item still completely eludes me. I also need to configure 
different groups in my group policy (administrators, teachers and students), 
but the details on how to create and implement a multiple-group group policy 
are not clear in my mind.

This is the process according to me:(please clarify)

1.Either with the MMC or GPEdit.msc (which one???) i create a policy snap-in.
2.In there somewhere :-? i create the different groups and give them 
priviledges(this part i really don't understand how to do)
3.then i save the file and merge it into the registry. 
4.then unload it from the registry into a ntuser.dat file.
5.i put the ntuser.dat in the netlogon as well as the default(and mandatory) 
profile folder.

any comments or suggestions would be very much appreciated. 

Thank you for reading this far and giving me your time and consideration.

Best regards,

federico vela

-
Mount de Sales Academy - Macon, Georgia
 [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba+winbind on nt Domain

2004-06-29 Thread Marcos Aurélio
hello,
I have installed in my machine with linux fedora Core 1 samba 3.XXX and when
I try to make the command
# net rpc join - S my PDC -U Administrator
it comes the following message:
[2004/06/29 11:13:17, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(249)
  cli_nt_setup_creds: request challenge failed
Password:
[2004/06/29 11:14:08, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(249)
  cli_nt_setup_creds: request challenge failed
[2004/06/29 11:14:08, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(326)
  Error domain join verification: NT_STATUS_INVALID_COMPUTER_NAME


My PDC is NT 4.0, has configuration specifies for this?

Thanks,

Marcos

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] tdb lock failures

2004-06-29 Thread David Nash
We've just gone live with a file  print server, and are having major
problems with Samba.  When used out of hours, with all PCs switched on
and connected to the domain, everything works fine.  However, during the
day, we have problems where users can't print to any samba-hosted
printer, Access database applications (where the database is held on the
server) won't work, or work briefly before experiencing data corruption.
Our system log file is filling at an alarming rate with messages about
tdb lock failures.

 

Part of log file when trying to print:

 

[2004/06/29 11:15:27, 2] lib/access.c:(329)
  Allowed connection from  (192.0.0.123)
[2004/06/29 11:15:27, 0] tdb/tdbutil.c:(531)
  tdb(/usr/lib/samba/var/locks/printing.tdb): tdb_lock failed on list
107 ltype=1 (No record locks available)
[2004/06/29 11:15:27, 0] tdb/tdbutil.c:(531)
  tdb(/usr/lib/samba/var/locks/printing.tdb): tdb_lock failed on list 91
ltype=1 (No record locks available)
[2004/06/29 11:15:27, 0] tdb/tdbutil.c:(531)
  tdb(/usr/lib/samba/var/locks/printing.tdb): tdb_lock failed on list 80
ltype=2 (No record locks available)
[2004/06/29 11:15:27, 0] printing/printing.c:(388)
  print_queue_update: Failed to lock printing database

 

Other errors on file access

 

[2004/06/29 11:00:45, 0] tdb/tdbutil.c:(531)
  tdb(/usr/lib/samba/var/locks/brlock.tdb): tdb_unlock: count is 0
[2004/06/29 11:00:45, 2] smbd/close.c:(229)
  janette closed file templat2/INVESTOR.BMP (numopen=7) 
[2004/06/29 11:00:45, 0] tdb/tdbutil.c:(531)
  tdb(/usr/lib/samba/var/locks/locking.tdb): tdb_lock failed on list 39
ltype=2 (No record locks available)
[2004/06/29 11:00:45, 0] tdb/tdbutil.c:(531)
  tdb(/usr/lib/samba/var/locks/locking.tdb): tdb_lock failed on list 39
ltype=1 (No record locks available)
[2004/06/29 11:00:45, 0] tdb/tdbutil.c:(531)
  tdb(/usr/lib/samba/var/locks/locking.tdb): tdb_unlock: count is 0
[2004/06/29 11:00:45, 0] tdb/tdbutil.c:(531)
  tdb(/usr/lib/samba/var/locks/brlock.tdb): tdb_lock failed on list 39
ltype=2 (No record locks available)
[2004/06/29 11:00:45, 0] tdb/tdbutil.c:(531)
  tdb(/usr/lib/samba/var/locks/brlock.tdb): tdb_lock failed on list 39
ltype=1 (No record locks available)
[2004/06/29 11:00:45, 0] tdb/tdbutil.c:(531)
  tdb(/usr/lib/samba/var/locks/brlock.tdb): tdb_unlock: count is 0
[2004/06/29 11:00:45, 2] smbd/close.c:(229)
  janette closed file Wills04/~$25.1will.jrh.doc (numopen=9) 
[2004/06/29 11:00:48, 0] tdb/tdbutil.c:(531)
  tdb(/usr/lib/samba/var/locks/locking.tdb): tdb_lock failed on list 65
ltype=2 (No record locks available)
 

 

With the printing problem, I can log onto the domain as 'root' and
successfully printing to the waterroom1 printer.  Out of hours, I am
able to login to my PC as 'mike', and print to the same printer which
fails during the day for any user other than root.

 

 

We're on UnixWare 7.1.3.Pack 3, and Samba 2.2.8a

 

The other related (I think) problem we have is with a 40MB access
database on the 'estate' share - it works for a wee while, then we get
database errors and have to restore from a good copy.  We've turned off
Oplocks on the XP PCs, and tried various settings on the Samba share.
When Oplocks are off on Samba we can't even open the application.  We
turned off oplocks on all shares last night (but didn't set strict
locking) but this morning users couldn't open shared templates that are
held on the 'templates' share, and we had problems with users being
unable to open spreadsheets on the 'cashroom' share.  We've turned
oplocks on for all samba shares, but still have printing and database
problems during the day.

 

In the 100MB+ sys file, I've seen errors saying  'no record locks
available - this can happen when using 64bit lock offsets'.

 

I read something on the web about similar problems when the lock files
are held on NFS partitions, and am wondering whether the /root partition
is incompatible (I think it's vxfs).  I'm also wondering about the 'lock
spin count' and 'lock spin time' parameters...

 

I've had to set up some local printers, and a couple of departments
haven't been able to work for the last couple of days!

 

David 

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba + LDAP + OS X = no compilation

2004-06-29 Thread Chris St. Pierre
I'm trying to compile Samba 3.0.4 on Mac OS X Server with the following
options:

# ./configure --with-ldap --with-ldapsam --with-quotas

(If that's somehow wrong, I'm certainly open to changing it.)  The Samba
package that comes with OS X apparently does not have LDAP SAM support.

Anyhow, it configures just dandy, but when I compile it fails with:

include/proto.h:589: syntax error, found `LDAP_CONST'
include/proto.h:591: illegal function definition, found `)'
/usr/include/dlfcn.h:35: warning: #warning You are using dlopen(), a legacy
API. Please use the Mach-O dylib loading APIs if at all possible
cpp-precomp: warning: errors during smart preprocessing, retrying in basic
mode
In file included from include/includes.h:891,
 from dynconfig.c:21:
include/proto.h:589: parse error before LDAP_CONST
make: *** [dynconfig.o] Error 1

(The warning about dlopen() appears a lot and can be safely ignored.)  It
seems to not understand the LDAP_CONST keyword.  I went into the source and
changed that to just good old vanilla const, and it gets further, but
eventually errors out with:

smbd/quotas.c:933: header file 'devnm.h' not found
cpp-precomp: warning: errors during smart preprocessing, retrying in basic
mode
make: *** [smbd/quotas.o] Error 1

No idea about that one; I've got no file called devnm.h in my source
directory.  Should it be elsewhere?

Has anyone here compiled Samba with LDAP on OS X?  Or had this problem on
another platform?  Or does anyone just have some insight into the problem?

Thanks!

Chris St. Pierre
Unix Systems Administrator
Nebraska Wesleyan University

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] failed domain logon

2004-06-29 Thread sergey
appears  to be solved
think it was corrupted db
i just rejoined troubled ws 

Thanks!
Sergey
Sergey V. wrote:
we have: 

samba 3.0.4 + w2k
from some ws  i can logon into domain, from others - not
in logs i found  'authentication for user [USER] succeeded'
but after all - logoff
thought - causes are spnego, signing or schannel 
turned them off on samba and workstation

all the same :(
Sergey
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: string overflow in safe_strcpy

2004-06-29 Thread Jeremy Allison
On Tue, Jun 29, 2004 at 09:13:05AM +0100, Carl Matthews wrote:
 Also i've just noticed the errors never occur for directorys but only 
 for files longer than the 8.3. Which again suggests an error in the hash 
 mangling method.

Ok, I'll take a look at this - thanks !

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbpasswd !!?!

2004-06-29 Thread Dwight Tovey

Robert Adkins said:

 Samba utilizes the UNIX File permissions for telling Windows machines
 who can do what with a file. Due to this, you have a decent User and
 Group set of controls you can place on the files/directories that you
 choose to share with Samba.

  Without having users in the passwd file, Samba wouldn't be able to
 utilize those access rights.

 Yeah, it can be a paine, but it does a good job.

 If having multiple user account information to track is a pain, may I
 suggest converting to NIS or LDAP for user authentication?


I am also trying to set up a Samba server without having to define local
Unix users.  Using LDAP is fine for what we want to do.  From what you are
saying then, will I need to also install nss_ldap in order to get the
proper access control?  If we weren't concerned about access control,
could we just use the 'force user/group' parameters and not install
nss_ldap?

/dwight

-- 
Dwight N. Tovey
email: [EMAIL PROTECTED]
web: http://www.dtovey.net/~dwight
---
Eagles may soar, but weasles don't get sucked into jet engines.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.3/4 - WINS server expires names after 2 hours

2004-06-29 Thread Jeremy Allison
On Tue, Jun 29, 2004 at 12:28:53PM -0500, [EMAIL PROTECTED] wrote:
 Ok..tried this and no go...
 
 First request:
 
 [2004/06/29 10:06:07, 3] 
 nmbd/nmbd_winsserver.c:wins_process_name_query_request(1485)
   wins_process_name_query: name query for name COMSRV600 from IP 
 10.111.1.111
 [2004/06/29 10:06:07, 3] 
 nmbd/nmbd_winsserver.c:wins_process_name_query_request(1549)
   wins_process_name_query: name query for name COMSRV600 not found - 
 doing dns lookup.
 [2004/06/29 10:06:07, 3] nmbd/asyncdns.c:queue_dns_query(308)
   added DNS query for COMSRV600
 [2004/06/29 10:06:07, 3] nmbd/asyncdns.c:add_dns_result(43)
   add_dns_result: DNS gave answer for COMSRV6 of 10.230.1.1
 [2004/06/29 10:06:07, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(236)
   add_name_to_subnet: Added netbios name COMSRV600 with first IP 
 10.230.1.1 ttl=7200 nb_flags= 4 to subnet WINS_SERVER_SUBNET
 
 2 hours passes
 
 Request after expirey:
 
 [2004/06/29 12:07:26, 3] 
 nmbd/nmbd_winsserver.c:wins_process_name_query_request(1485)
   wins_process_name_query: name query for name COMSRV600 from IP 
 10.111.1.111
 [2004/06/29 12:07:26, 3] 
 nmbd/nmbd_winsserver.c:wins_process_name_query_request(1531)
   wins_process_name_query: name query for name COMSRV600 - name expired. 
 Returning fail.

Thanks - dumb mistake of mine, sorry. Used break instead of
continue so I was only expiring the first record. DOH !

I'm attaching two files, the first is the complete patch with
break changed to continue and should be applied to 3.0.4 or
above.

The second is just the break changed to continue fix and applies
to the source you're running.

Sorry for the mistake.

Jeremy.
Index: nmbd/nmbd_winsserver.c
===
--- nmbd/nmbd_winsserver.c  (revision 1287)
+++ nmbd/nmbd_winsserver.c  (working copy)
@@ -1727,11 +1727,16 @@
  (namerec-data.death_time  t) ) {
 
if( namerec-data.source == SELF_NAME ) {
-   DEBUG( 3, ( expire_names_on_subnet: Subnet %s not 
expiring SELF name %s\n, 
+   DEBUG( 3, ( initiate_wins_processing: Subnet %s not 
expiring SELF name %s\n, 
   wins_server_subnet-subnet_name, 
nmb_namestr(namerec-name) ) );
namerec-data.death_time += 300;
namerec-subnet-namelist_changed = True;
continue;
+   } else if (namerec-data.source == DNS_NAME || 
namerec-data.source == DNSFAIL_NAME) {
+   DEBUG(3,(initiate_wins_processing: deleting timed out 
DNS name %s\n,
+   nmb_namestr(namerec-name)));
+   remove_name_from_namelist( wins_server_subnet, namerec 
);
+   continue;
}
 
/* handle records, samba is the wins owner */
Index: nmbd/nmbd_winsserver.c
===
--- nmbd/nmbd_winsserver.c  (revision 1298)
+++ nmbd/nmbd_winsserver.c  (working copy)
@@ -1736,7 +1736,7 @@
DEBUG(3,(initiate_wins_processing: deleting timed out 
DNS name %s\n,
nmb_namestr(namerec-name)));
remove_name_from_namelist( wins_server_subnet, namerec 
);
-   break;
+   continue;
}
 
/* handle records, samba is the wins owner */
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Frustrated...Samba on linux w/xfs SLOW problem

2004-06-29 Thread Dragan Krnic
| it starts out at a decent speed for a second, then slows and slows
| and eventually stops.  I then get the message The specified
| network name is no longer available.
|
| Are you getting a lot of collisions when this happens?  This sounds
| suspiciously like a network problem, maybe mismatched duplex settings.
|
| Try FTPing or SCPing a file to the server from your Windows machine.  If
| that transfer is affected as well, it's a network problem, not a Samba
| problem.
|
| I had tried scping and that does work fine.
|
| I tried the following test.  
| I created a new ext2 file system on the computer, 
| made it a samba share, and turned off all other 
| samba shares except the ext2 one.  I then wrote 
| a 35M file from my windows machine to the linux 
| server.  It worked like it used to.
|
| This seems to prove to me that 
| a) there is no network problem, 
| b) samba is working correctly, 
| c) there is DEFINATELY an issue with XFS and samba.  
| From what I've read in some other places, 
| it appears there is also an issue with ReiserFS and samba.  
|
| What is it with samba that it only appears to like ext2/3 fs's?
| Is *ANYONE* using XFS with samba and having it work 
| at a normal rate of speed when writing to it?
|
| Before anyone asks, I also did try mounting a drive 
| from my windows machine via smbclient and copy
| a file on the linux box from the windows machine.  
| That works fine, even to the xfs drives.
|
| It seems to me that there's got to be some option 
| in the samba configuration that I just don't
| have correct.  If someone is currently successfully 
| using linux xfs w/samba, please, share your config!

Your mileage may vary. There is nothing about samba to 
prefer one fs over another. There are too many variables
involved, hardware, software, configuration. I had myself
some problems with ext3 and reiserfs in connection
with sata drivers in kernel 2.4.20. With the same 
hardware and drivers xfs made a much better impression
in writing speed so I set up an array of 6 disks in
raid5 configuration and formatted it as xfs with an
external journal. And this is a copy transaction from
a client which is connected to the server with xfs
via a cheap Gigabit LAN Switch:

   U:\dir
   26.06.2004  20:02DIR  .
   18.06.2004  15:08DIR  ..
   25.12.2003  23:44 73.515.932 pmn90g.tarlist
  1 File(s)  73.515.932 Bytes
  1 Dir(s), 347.053.490.176 Bytes free
   U:\timethis copy pmn90g.tarlist C:\Temp\pmn90g
   TimeThis :  Elapsed Time :  00:00:01.601
   U:\timethis copy C:\Temp\pmn90g
   TimeThis :  Elapsed Time :  00:00:01.892
 
Which means 46 MB/s from the server to the local
file and 39 MB/s from the local file back to server.
Not too bad for an xfs. Nothing special in smb.conf.

I'm not convinced that there is a problem between
Samba and xfs. As I mentioned in a letter yesterday
some problems go away after a reboot. If you have
added a disk to format as ext2 then you have also
rebooted your system. If there were any problems
with WINS resolution due to stale cached entries
they might be gone after reboot. I don't say that
there can absolutely be no problems between samba
and xfs, only that it is not very likely. It is
difficult to see what's wrong with your setup.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Password Aging with Winbind?

2004-06-29 Thread Ben Kim

Dear list,

I'd like to know if anyone has a solution that allows a unix account with
expired password to change the password. My problem is similar to
what's described here, but it seems no one answered.

http://lists.samba.org/archive/samba/2004-January/077899.html

If I missed any answer or if someone came up with a solution, could it be
posted here? I have samba 2.2.9 on Solaris 8.

Also, according to my truss, it seems pam_unix.so.1 is the problem (new
password is asked but right after pam_unix.so.1 is called, the error
message is printed 3 times), but could anyone provide an insight if not an
answer?

++quote++

  Interaction with Password Aging
 When password aging is turned on, only a limited set of pos-
 sible  name  services are permitted for the passwd: database
 in the /etc/nsswitch.conf file:

  passwd:
files
  passwd:
files nis
  passwd:
files nisplus
  passwd:
files ldap
  passwd:
compat
  passwd_compat:
nisplus
  passwd_compat:
ldap

++unquote++



Thanks.

Ben Kim

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbpasswd !!?!

2004-06-29 Thread Robert Adkins
Dwight Tovey wrote:
Robert Adkins said:
 

Samba utilizes the UNIX File permissions for telling Windows machines
who can do what with a file. Due to this, you have a decent User and
Group set of controls you can place on the files/directories that you
choose to share with Samba.
Without having users in the passwd file, Samba wouldn't be able to
utilize those access rights.
Yeah, it can be a paine, but it does a good job.
If having multiple user account information to track is a pain, may I
suggest converting to NIS or LDAP for user authentication?
   

I am also trying to set up a Samba server without having to define local
Unix users.  Using LDAP is fine for what we want to do.  From what you are
saying then, will I need to also install nss_ldap in order to get the
proper access control? 

   I am unsure, I have a small installation running and haven't been 
sufficiently motivated to move onto LDAP or NIS at this time. Currently, 
I stick with seperate passwd/group and smbpasswd files.

If we weren't concerned about access control,
could we just use the 'force user/group' parameters and not install
nss_ldap?
 

   I am unsure, that's something I haven't needed to research or 
implement yet.

   I am sorry that I was only as helpful as I was previously.
   -Rob
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Logon script problem

2004-06-29 Thread Jason Lieurance
Hello,

I'm running samba 3.02 on freebsd 4.7. Client systems are WinXP Pro Srv Pk 1.

Anyway, the logon script has issues, I added a pause statement to view it.

It says:

There are open files and/or incomplete directory searches pending on the
connection to Z:

The command completed successfully.

Z:\NET USE H: /HOME
The current directory is invalid.

END.


Where did Z: come from??? I never modified any path statements in the environment
varibles on the XP systems. I figured it was because the novell client was
installed at one time on a few systems and it had to do with that but it does the
same thing on a system with fresh install of WinXP PRO.

The weird thing is that with the novell client on one of the systems, if you check
workstation only and login with your domain UN  PW, it logs with the login script
just fine.

Any help would be greatly appreciated.

-- 
Jason



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Need some honest feedback for my project

2004-06-29 Thread Jason Williams
Hey everyone. I need some feedback and suggestions on where to take a 
project I am working on.
Reason I am asking here is that the ultimate decision will be mine when we 
decide, and I need to make sure I make the right decision.

We are trying to decide on a solution for our company. We are currently a 
company of 40 employees running as a workgroup. We are going to grow to 
over 100 employees over the next 2 years. We would like to make the 
transition to a Domain setup, with the option of using a Domain controller 
of some sort. I know that samba can easily be setup to be a PDC with 
different options to hold user accounts.  However, our solution will 
require a few more needs that we would like to be filled.

First, I should say that I have worked with samba for some time now and 
really like it. It is my first choice anytime I need to roll out a file and 
print server or a PDC. It is very reliable and stable, which is why it has 
always been a preferred solution when I can implement it.

For our current situation, we are currently considering using a Samba PDC 
with LDAP on the backend for or corporate network. We are also looking to 
open up multiple branch offices in the next 5 years (total of 20). With 
that in mind, it is very important that we keep data syncd between the 
servers at the corporate office as well as servers needed at the Branch 
office's.

Other items that we would like to implement:
-roaming profiles
-high security level (for example, log on hours)
-remote management ability (of servers, etc.)
-ability to setup 'policies' of some sort to push out to office(s) (group 
this can do this, but not this for example)
-option to roll out software to computers remotely, patch updates (push 
software out fo a branch office from the corporate office)
-desktop management (not really samba thing...)
-user management (obviously), management of users at branch offices, access 
to resources, group usage, etc.

As you can see, we are trying to setup a solid infrastructure for our 
company and then continue to work with it as we open up branch offices in 
the future. I know some of the things listed above are not samba specific, 
but they are options we would like to implement.

We are looking at two solutions right now:
-samba as a PDC with LDAP
-Novell, using Netware with eDirectory
No Windows solution at all as we run a mix of Windows desktops and servers 
and UNIX/Linux servers with a few workstations. Im not much of a Windows 
fan and do not want to work with nor pay for Active Directory.

I realize that there is quite a difference in choosing between Samba and 
Novell, the biggest one being cost. I realize that. That is why I am trying 
to gather all the information that I can before I make this decision.

With what I have listed above, anyone feel like giving me their feedback on 
this? What they think? What they suggest? You can email the list, or me 
personally as I don't mind.

I appreciate everyone's time and feedback on this. It is a big decision 
that I will need to make here soon.

Thanks,
Jason
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbpasswd !!?!

2004-06-29 Thread Alexander Varga
Thanx
...and yes. It is realy a big trouble with lot of users.  I tryed ldap, but hence my 
LDAP server is an Novel eDirectory, I  am not realy familiar with it and couldn't find 
any advice on google to configurte it right(the problem I have is to use the right 
filters while searchyng the LDAP accounts and rights). 
I read about winbind. ... would it be a solution for me, or better try it once again 
with LDAP?
I need also do manage access to directoryes with restrictions. maybe pam could do 
that. 
... some suggestions?

 Robert Adkins [EMAIL PROTECTED] 06/29/04 04:20PM 

Samba utilizes the UNIX File permissions for telling Windows machines 
who can do what with a file. Due to this, you have a decent User and 
Group set of controls you can place on the files/directories that you 
choose to share with Samba.

 Without having users in the passwd file, Samba wouldn't be able to 
utilize those access rights.

Yeah, it can be a paine, but it does a good job.

If having multiple user account information to track is a pain, may I 
suggest converting to NIS or LDAP for user authentication?

-Rob

Alexander Varga wrote:

please help me. 
Why I cannot create a user with smbpasswd without having this username in 
/etc/passwd???
###
bash-2.05# smbpasswd -a testaccount
New SMB password:
Retype new SMB password:

Failed to initialise SAM_ACCOUNT for user testaccount.
Failed to modify password entry for user testaccount
bash-2.05#
##
my global in smb.conf
[global]
   workgroup = J9_C
   server string = %h server (Samba %v)
   dns proxy = no
   log file = /usr/local/samba/var/log.%m
   passdb backend = tdbsam smbpasswd
   invalid users = root
   passwd program = /bin/passwd %u
   socket options = TCP_NODELAY

I compilled my samba using 
./configure --prefix=/usr/local/samba  --with-pam --with-pam_smbpass 
--with-acl-support
and made a solaris package.



  




--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] XP Can't Join Domain

2004-06-29 Thread Daniel R. Meigs
I am running Samba 3.0.2 as a PDC on a Fedora Core 1 machine using openldap
as the password backend. I think I've got all the openldap stuff working. I
can log in, ssh, etc. using ldap accounts.

When I try to join an XP machine to the domain, I get an error on the XP
machine that reads: The following error occurred attempting to join the
domain TIMBERLINE: The user name could not be found.

When I check the logs, it is clear that the authentication succeeded and the
script to add a machine account completed successfully. So I can't figure
out what is causing the error. 

Any help would be much appreciated!

Dan Meigs


My smb.conf file is as follows:


#=== Global Settings =
[global]
   log level = 3
   workgroup = TIMBERLINE
   netbios name = RAINIER
   security = user
   encrypt passwords = yes
   username map = /etc/samba/smbusers
   add user script = /usr/local/sbin/smbldap-useradd.pl -a -m '%u'
   delete user script = /usr/local/sbin/smbldap-userdel.pl '%u'
   add group script = /usr/local/sbin/smbldap-groupadd.pl -p '%g'
   delete group script = /usr/local/sbin/smbldap-groupdel.pl '%g'
   add user to group script = /usr/local/sbin/smbldap-groupmod.pl -m '%g'
'%u'
   delete user from group script = /usr/local/sbin/smbldap-groupmod.pl -x
'%g' '%u'
   set primary group script = /usr/local/sbin/smbldap-usermod.pl -g '%g'
'%u'
   add machine script = /usr/local/sbin/smbldap-useradd.pl -w '%m'
   ldap admin dn = cn=Manager,dc=tlinenm,dc=com
   ldap ssl = start tls
   passdb backend = ldapsam:ldap://rainier.tlinenm.com
   ldap delete dn = no
   ldap user suffix = ou=People
   ldap group suffix = ou=Groups
   ldap machine suffix = ou=Computers
   ldap suffix = dc=tlinenm,dc=com
   ldap filter = ((uid=%u)(objectclass=sambaSamAccount))
   server string = Samba Server on Rainier
   hosts allow = 192.168.0. 127.
   printcap name = cups
   printing = cups
   log file = /var/log/samba/%m.log
   max log size = 500
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   os level = 35
   domain master = yes 
   preferred master = yes
   domain logons = yes
   wins support = yes
   dns proxy = yes 

# Share Definitions ==
[homes]
   comment = Home Directories
   browseable = no
   writable = yes

 [netlogon]
   comment = Network Logon Service
   path = /home/netlogon
   guest ok = yes
   writable = no
   share modes = no


[Profiles]
path = /home/profiles
browseable = no
guest ok = yes


[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   guest ok = no
   writable = no
   printable = yes

[tmp]
   comment = Temporary file space
   path = /tmp
   read only = no
   public = yes

-
The smb log file is as follows (log level 2):

[2004/06/29 12:35:07, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462)
  init_sam_from_ldap: Entry found for user: root
[2004/06/29 12:35:07, 2] passdb/pdb_ldap.c:init_group_from_ldap(1697)
  init_group_from_ldap: Entry found for group: 512
[2004/06/29 12:35:07, 2] auth/auth.c:check_ntlm_password(305)
  check_ntlm_password:  authentication for user [Administrator] - [root] -
[root] succeeded
[2004/06/29 12:35:07, 2] lib/access.c:check_access(324)
  Allowed connection from  (192.168.0.98)
[2004/06/29 12:35:08, 2] smbd/server.c:exit_server(558)
  Closing connections
[2004/06/29 12:35:09, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462)
  init_sam_from_ldap: Entry found for user: root
[2004/06/29 12:35:09, 2] passdb/pdb_ldap.c:init_group_from_ldap(1697)
  init_group_from_ldap: Entry found for group: 512
[2004/06/29 12:35:09, 2] auth/auth.c:check_ntlm_password(305)
  check_ntlm_password:  authentication for user [Administrator] - [root] -
[root] succeeded
[2004/06/29 12:35:09, 2] lib/access.c:check_access(324)
  Allowed connection from  (192.168.0.98)
[2004/06/29 12:35:09, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2461)
  Returning domain sid for domain TIMBERLINE -
S-1-5-21-1936347354-1918943746-3536452940
[2004/06/29 12:35:10, 2] smbd/server.c:exit_server(558)
  Closing connections

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbpasswd !!?!

2004-06-29 Thread Robert Adkins
Alexander Varga wrote:
Thanx
...and yes. It is realy a big trouble with lot of users.  I tryed ldap, but hence my LDAP server is an Novel eDirectory, I  am not realy familiar with it and couldn't find any advice on google to configurte it right(the problem I have is to use the right filters while searchyng the LDAP accounts and rights). 
I read about winbind. ... would it be a solution for me, or better try it once again with LDAP?
I need also do manage access to directoryes with restrictions. maybe pam could do that. 
... some suggestions?

 

 Unless I am mistaken, PAM is the combination passwd/group file 
with a seperate smbpasswd file. From what you are saying, that's not 
what you want.

 LDAP is what I would focus on and only because you seem to already 
have a working LDAP installation running.. If you are still in your 
early stages with this server (If it is a Linux Server)  you could give 
it a reinstall, I know that during the (Expert) installation process of 
several different distributions you are asked what kind of 
authentication model you wish to use, I know that LDAP is one of the 
choices and it might be easier to configure that during the install then 
after the initial install of the OS. Believe me when I say this, I am 
totally lost when it comes to LDAP Authentication.and the above is just 
a guess.

   I am very far from an expert here, I am also not very familar with 
Winbind.

   I am mearly okay with a few areas of setting up Samba, nothing more.
   Good luck!
   -Rob
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba PDC and Citrix

2004-06-29 Thread Jeff Pool
Currently I have Samba running happily as a PDC. I also have Citrix 
running on NT Terminal server that users dial into. After joining the 
Terminal server to the domain, dial up users get an error saying they 
don't have permission to dial in and are disconnected. Has anyone had 
any similar experiences?

Jeff
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Inconsistant winbind and getent results

2004-06-29 Thread Norman Zhang
Marcel de Riedmatten wrote:
Le lun 28/06/2004 à 19:52, Norman Zhang a écrit :
# getent passwd nzhang
The last command displays nothing. Why?
Last time i got that i had 2 users with the same numeric uid  (this is
counting local users) or, i am not quite sure, 2 users or group with the
same SID. To much playing !  So i would double check stuff like that. 
I don't have a local user nzhang on my Linux box. I added winbind enum 
users/groups, but testparm seems to ignore them. Below is my conf file, 
could you see if I'm doing something stupid?
I said numeric uid,  not uid. This is the number int the third column of
a passwd entry. You have idmap in your config therefore your are running
samba 3. What is your domaine controler ?  By the way your config look
good.
An other way to look at the problem is to put
log level = 3 or 5
and to look at the winbind log after you have done the getent. 
There surely will be some interesting message. 
Thanks. I don't have the duplicate numeric uid for nzhang. I checked 
wbinfo -u | user_x for users before and after nzhang. It seems nzhang is 
skipped. Below is a more verbose log. Do you see what the problem is?

Regards,
Norman
[2004/06/29 12:30:26, 3] 
nsswitch/winbindd_misc.c:winbindd_interface_version(261)
  [ 1759]: request interface version
[2004/06/29 12:30:26, 3] 
nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
  [ 1759]: request location of privileged pipe
[2004/06/29 12:30:26, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(124)
  [ 1759]: getpwnam nzhang
[2004/06/29 12:30:26, 1] nsswitch/winbindd_user.c:winbindd_fill_pwent(50)
  error getting user id for sid 
S-1-5-21-1870222080-545617551-923749875-1043

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] winbind problem, please help

2004-06-29 Thread Wesley Hobbie
My winbind is not mapping the UIDs and GIDs to the SIDs correctly.  I try to
connect to my Samba 3.0.2a server from a Windows XP SP1 workstation, I fill
in my username and password, and it says access is denied.  According to the
logs it connects and disconnects right away claiming the user does not
exist, although it does.  I run 'wbinfo -u' and get Error looking up domain
users.  Can anyone tell me what is wrong, why it is not working, and how I
can fix it?

Wes Hobbie
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: string overflow in safe_strcpy

2004-06-29 Thread Jeremy Allison
On Tue, Jun 29, 2004 at 09:13:05AM +0100, Carl Matthews wrote:
 Also i've just noticed the errors never occur for directorys but only 
 for files longer than the 8.3. Which again suggests an error in the hash 
 mangling method.

Here's the fix. Incorrect use of safe_strcpy (memcpy should be used instead).

Jeremy.
Index: smbd/mangle_hash.c
===
--- smbd/mangle_hash.c  (revision 1298)
+++ smbd/mangle_hash.c  (working copy)
@@ -546,8 +546,10 @@
/* Fill the new cache entry, and add it to the cache. */
s1 = (char *)(new_entry + 1);
s2 = (char *)(s1[mangled_len + 1]);
-   safe_strcpy( s1, mangled_name, mangled_len );
-   safe_strcpy( s2, raw_name, raw_len );
+   memcpy( s1, mangled_name, mangled_len );
+   s1[mangled_len] = '\0';
+   memcpy( s2, raw_name, raw_len );
+   s2[raw_len] = '\0';
ubi_cachePut( mangled_cache, i, new_entry, s1 );
 }
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: [fwd: [Fwd: Re: network response] ]

2004-06-29 Thread Chris Garrigues
 From:  Jeremy Allison [EMAIL PROTECTED]
 Date:  Mon, 28 Jun 2004 13:43:54 -0700

 Can you try with : defer sharing violations = Yes but
 
 kernel oplocks = no
 oplocks = yes
 level2 oplocks = yes
 
 Also. I'm starting to think it may be an interaction between
 Linux kernel oplocks and deferred opens.

I just had a lockup with these values.  This one hung and then gave me the 
error that the file couldn't be saved and was instead saved to a temporary 
file.  I'm still running 3.0.5pre2-SVN-build-1287.  smbstatus is showing 
two locks on the temporary file:

Locked files:
PidDenyMode   Access  R/WOplock   Name
--
24074  DENY_NONE  0x30089 RDONLY NONE 
/net/jupiter.trinsics.com/export/home/cwg/bbu projection.xls   Tue Jun 29 14:56:36 2004
24074  DENY_NONE  0x60080 RDONLY NONE 
/net/jupiter.trinsics.com/export/home/cwg/DAD28750   Tue Jun 29 14:56:36 2004
24074  DENY_ALL   0x7019f RDWR   NONE 
/net/jupiter.trinsics.com/export/home/cwg/DAD28750   Tue Jun 29 14:56:36 2004

Logging was not at level 10, so this is what I got (the hang was between 
14:56:36 and 14:57:54), so I think there's nothing useful in here.

[2004/06/29 14:56:36, 1] smbd/service.c:make_connection_snum(648)
  callisto (10.1.1.186) connect to service cwg initially as user cwg (uid=200, 
gid=203) (pid 24074)
[2004/06/29 14:57:54, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1782)
  ldapsam_search_one_group: Problem during the LDAP search: LDAP error:  (No such 
object)
[2004/06/29 14:57:54, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1782)
  ldapsam_search_one_group: Problem during the LDAP search: LDAP error:  (No such 
object)
[2004/06/29 14:57:54, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1782)
  ldapsam_search_one_group: Problem during the LDAP search: LDAP error:  (No such 
object)
[2004/06/29 14:57:54, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1782)
  ldapsam_search_one_group: Problem during the LDAP search: LDAP error:  (No such 
object)
[2004/06/29 14:57:54, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1782)
  ldapsam_search_one_group: Problem during the LDAP search: LDAP error:  (No such 
object)
[2004/06/29 14:57:54, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1782)
  ldapsam_search_one_group: Problem during the LDAP search: LDAP error:  (No such 
object)
[2004/06/29 14:57:54, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1782)
  ldapsam_search_one_group: Problem during the LDAP search: LDAP error:  (No such 
object)
[2004/06/29 14:57:54, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1782)
  ldapsam_search_one_group: Problem during the LDAP search: LDAP error:  (No such 
object)
[2004/06/29 14:57:54, 1] smbd/service.c:make_connection_snum(648)
  callisto (10.1.1.186) connect to service cwg initially as user cwg (uid=200, 
gid=203) (pid 23708)
[2004/06/29 15:00:46, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1782)
  ldapsam_search_one_group: Problem during the LDAP search: LDAP error:  (No such 
object)

Do you want another debug level 10 report?

Chris

-- 
Chris Garrigues http://www.DeepEddy.Com/~cwg/
Trinsic Solutions   http://www.trinsics.com
1611-B West 6th Street
Austin, TX  78703-5074  512-322-0180

If you don't apply what you've learned, you haven't 
   learned anything.




pgpdCs8LMJY4M.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] CUPS printers not visible, strange behaviour

2004-06-29 Thread Eric Dorland
Hello all,

I've done this before before so I'm a bit confused, but I've upgraded from 2.2
to 3.0.4 on a debian woody box (samba 3.0.4 from backports.org). I also have
cups 1.1.20 backport as well. I've set up printing using cups (should be simple
right?) but no printers appear when I browse the computer from a W2k machine.
rpcclient -c enumprinters gives me No printers returned.. If I turn the log
level to 3 however I see in the smbd.log:

adding printer service hpcolor
adding printer service checks
adding printer service hpps

Which are the names of the three printers. If I browse to the printer with
\\apollo\hpcolor it prompts me to install the printer, but then craps out saying
the printer is not connected to the network. 

Below are the relevant portions of my smb.conf. I'm at my wit's end...

[global]

# Do something sensible when Samba crashes: mail the admin a backtrace
   panic action = /usr/share/samba/panic-action %d
# wins server = 192.168.204.1
 wins support = yes
 name resolve order = wins lmhosts hosts bcast
 domain master = no
 allow hosts = 192.168.204. 127.
 dns proxy = yes
 protocol = NT1
 socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192
 load printers = yes
 printing = cups
 printcap name = /var/run/cups/printcap
 printer admin = rootnt
 preferred master = no
 password server = BETA ATLAS
 interfaces = 192.168.204.0/255.255.255.0
 domain logons = no
 security = domain
 server string = File+Print
 workgroup = PRIMONICS
 local master = no
 debug timestamp = no
 log file = /var/log/samba/%m.log
# netbios name = dc0fp1
# netbios aliases = apollo dc0fp1
 netbios name = apollo
 os level = 31
 public = yes
 default = homes
 encrypt passwords = true
 passdb backend = tdbsam guest
 message command = csh -c xedit %s;rm %s 
 log level = 3
 dead time = 15
 getwd cache = yes
 oplocks = no
 level2 oplocks = no
 browseable = no
 map to guest = Bad User # for printing

[printers]
 comment = All Printers
 path = /data/samba/printspool
 browseable = yes
 guest ok = yes
 printable = yes

[print$]
 comment = Printer Drivers
 path = /data/samba/drivers
 browseable = yes
 guest ok = yes
 read only = yes
 write list = root, rootnt


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.3/4 - WINS server expires names after 2 hours

2004-06-29 Thread jgerard
good so far...I applied the first patch to the 3.0.4 source and did my 2 
hour test...the name expired and then had a successful lookup.

Thanks for your help!


Jeff Gerard - Systems Administrator
Wawanesa Mutual Insurance Company
Office: 204-985-0517
Fax:204-947-5192
Email:  [EMAIL PROTECTED]




Jeremy Allison [EMAIL PROTECTED] 
29/06/2004 12:22 PM
Please respond to
Jeremy Allison [EMAIL PROTECTED]


To
[EMAIL PROTECTED]
cc
Jeremy Allison [EMAIL PROTECTED], Guillaume Millet 
[EMAIL PROTECTED], [EMAIL PROTECTED]
Subject
Re: [Samba] Samba 3.0.3/4 - WINS server expires names after 2 hours






On Tue, Jun 29, 2004 at 12:28:53PM -0500, [EMAIL PROTECTED] wrote:
 Ok..tried this and no go...
 
 First request:
 
 [2004/06/29 10:06:07, 3] 
 nmbd/nmbd_winsserver.c:wins_process_name_query_request(1485)
   wins_process_name_query: name query for name COMSRV600 from IP 
 10.111.1.111
 [2004/06/29 10:06:07, 3] 
 nmbd/nmbd_winsserver.c:wins_process_name_query_request(1549)
   wins_process_name_query: name query for name COMSRV600 not found - 
 doing dns lookup.
 [2004/06/29 10:06:07, 3] nmbd/asyncdns.c:queue_dns_query(308)
   added DNS query for COMSRV600
 [2004/06/29 10:06:07, 3] nmbd/asyncdns.c:add_dns_result(43)
   add_dns_result: DNS gave answer for COMSRV6 of 10.230.1.1
 [2004/06/29 10:06:07, 3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(236)
   add_name_to_subnet: Added netbios name COMSRV600 with first IP 
 10.230.1.1 ttl=7200 nb_flags= 4 to subnet WINS_SERVER_SUBNET
 
 2 hours passes
 
 Request after expirey:
 
 [2004/06/29 12:07:26, 3] 
 nmbd/nmbd_winsserver.c:wins_process_name_query_request(1485)
   wins_process_name_query: name query for name COMSRV600 from IP 
 10.111.1.111
 [2004/06/29 12:07:26, 3] 
 nmbd/nmbd_winsserver.c:wins_process_name_query_request(1531)
   wins_process_name_query: name query for name COMSRV600 - name 
expired. 
 Returning fail.

Thanks - dumb mistake of mine, sorry. Used break instead of
continue so I was only expiring the first record. DOH !

I'm attaching two files, the first is the complete patch with
break changed to continue and should be applied to 3.0.4 or
above.

The second is just the break changed to continue fix and applies
to the source you're running.

Sorry for the mistake.

Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] access database share with multiple users.

2004-06-29 Thread Chris Bailey
Did you ever figure out how to setup Access to be accessed by multiple users?

Thanks,

Chris Bailey
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: [fwd: [Fwd: Re: network response] ]

2004-06-29 Thread Jeremy Allison
On Tue, Jun 29, 2004 at 03:43:48PM -0500, Chris Garrigues wrote:
  From:  Jeremy Allison [EMAIL PROTECTED]
  Date:  Mon, 28 Jun 2004 13:43:54 -0700
 
  Can you try with : defer sharing violations = Yes but
  
  kernel oplocks = no
  oplocks = yes
  level2 oplocks = yes
  
  Also. I'm starting to think it may be an interaction between
  Linux kernel oplocks and deferred opens.
 
 I just had a lockup with these values.  This one hung and then gave me the 
 error that the file couldn't be saved and was instead saved to a temporary 
 file.  I'm still running 3.0.5pre2-SVN-build-1287.  smbstatus is showing 
 two locks on the temporary file:
 
 Locked files:
 PidDenyMode   Access  R/WOplock   Name
 --
 24074  DENY_NONE  0x30089 RDONLY NONE 
 /net/jupiter.trinsics.com/export/home/cwg/bbu projection.xls   Tue Jun 29 14:56:36 
 2004
 24074  DENY_NONE  0x60080 RDONLY NONE 
 /net/jupiter.trinsics.com/export/home/cwg/DAD28750   Tue Jun 29 14:56:36 2004
 24074  DENY_ALL   0x7019f RDWR   NONE 
 /net/jupiter.trinsics.com/export/home/cwg/DAD28750   Tue Jun 29 14:56:36 2004
 
 Logging was not at level 10, so this is what I got (the hang was between 
 14:56:36 and 14:57:54), so I think there's nothing useful in here.

Nope, nothing there...

Arh ! This is driving me nuts ! I can't reproduce it :-).
A debug level 10 would be very helpful, as it's the same pid that
is listed in all the (conflicting) deny modes.

Which should be impossible, I just thought I'd mention that :-).

I'm going to look at that code again.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] The '!' in the path names causes unpredictable results with directory listings

2004-06-29 Thread Marko Djukic
I filed this as a bug, but wanted to post this to the ng to check if
anyone has ever seen this. I'm using samba 3.0.4.

This is a somewhat weird situation, so please bear with me through the
description.

The following path:
C:\! 01 Carte Geografiche\carte\

When read with smbclient the windows share will only show 160 files in the
folder. When read on the windows machine it actually has 364.

When files from this path are copied over from the windows machine to the samba
shared directory (whether by windows copy or with cp from the smbmount to the
samba directory), only 339 files end up copied. When the windows machine then
looks at the files in the samba share only 105 files are shown.

If however I do a diff several times between the smbmount of the windows share
and the 339 files copied, I keep getting slightly different results. More and
more files keep getting reported as missing in the smbmount of the windows
share, whereas looking at the share on windows they are still there.

When I got rid of !  at the start of the path, so that it was called 01 Carte
Geografiche windows finally saw all 339 files in the samba share. Likewise,
getting rid of the !  on the windows machine I could finally copy all 364
files without problems.

I'm not sure if it is just the ! that is causing the problems. The carte
directory contains a lot of it_IT and de_DE locale filenames. And some filenames
are somewhat ridiculous (100-120 characters, lots of ,_-~! symbols and accents).

Anyone have any ideas?

Thanks
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Anyone here. . .

2004-06-29 Thread Alex Laughlin-Dendy
who can help me with an install of perl-ldap 0.31?
I'm having two problems in the testing phase of the installation, one is 
the gpg signature appears to be  broken, it dies with this error:

PERL_DL_NONLAZY=1 /usr/bin/perl5.8.3 -MExtUtils::Command::MM -e 
test_harness(0, 'blib/lib', 'blib/arch') t/*.t
t/0-signature.gpg: Signature made Thu Jan  1 05:44:36 2004 EST using 
DSA key ID 06D8C374
gpg: Can't check signature: public key not found
== BAD/TAMPERED signature detected! ==
# Failed test (t/0-signature.t at line 18)
# Looks like you failed 1 tests of 1.
t/0-signature.dubious
  Test returned status 1 (wstat 256, 0x100)
DIED. FAILED test 1
  Failed 1/1 tests, 0.00% okay

Also, all of the tests that require an ldap server are skipped, even 
though slapd is running. What would be causing this, and how should I 
fix it? Here's the output from those tests:

t/50populate..skipped
  all skipped: No server
t/51searchskipped
  all skipped: No server
t/52modifyskipped
  all skipped: No server
t/53schemaskipped
  all skipped: No server
t/54dse...skipped
  all skipped: No server
t/55ssl...skipped
  all skipped: No server
t/56ipc...skipped
  all skipped: No server
t/57url...skipped
  all skipped: No server
t/70sortctrl..skipped
  all skipped: External tests disabled
And the rest of the output from the tests:
Failed Test Stat Wstat Total Fail  Failed  List of Failed
--- 

t/0-signature.t1   256 11 100.00%  1
9 tests skipped.
Failed 1/15 test scripts, 93.33% okay. 1/424 subtests failed, 99.76% okay.
make: *** [test_dynamic] Error 255
/usr/bin/make test -- NOT OK
I've been working on this for quite a while and I'm fairly frustrated 
with it, what am I doing wrong?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Anyone here. . .

2004-06-29 Thread Alex Laughlin-Dendy
I almost forgot: This is related to samba because I'm trying to setup a 
samba pdc running an openldap backend and I can't add any users until I 
get perl-ldap installed properly as the Idealx scripts rely on this module.

Alex Laughlin-Dendy wrote:
who can help me with an install of perl-ldap 0.31?
I'm having two problems in the testing phase of the installation, one 
is the gpg signature appears to be  broken, it dies with this error:

PERL_DL_NONLAZY=1 /usr/bin/perl5.8.3 -MExtUtils::Command::MM -e 
test_harness(0, 'blib/lib', 'blib/arch') t/*.t
t/0-signature.gpg: Signature made Thu Jan  1 05:44:36 2004 EST 
using DSA key ID 06D8C374
gpg: Can't check signature: public key not found
== BAD/TAMPERED signature detected! ==
# Failed test (t/0-signature.t at line 18)
# Looks like you failed 1 tests of 1.
t/0-signature.dubious
  Test returned status 1 (wstat 256, 0x100)
DIED. FAILED test 1
  Failed 1/1 tests, 0.00% okay

Also, all of the tests that require an ldap server are skipped, even 
though slapd is running. What would be causing this, and how should I 
fix it? Here's the output from those tests:

t/50populate..skipped
  all skipped: No server
t/51searchskipped
  all skipped: No server
t/52modifyskipped
  all skipped: No server
t/53schemaskipped
  all skipped: No server
t/54dse...skipped
  all skipped: No server
t/55ssl...skipped
  all skipped: No server
t/56ipc...skipped
  all skipped: No server
t/57url...skipped
  all skipped: No server
t/70sortctrl..skipped
  all skipped: External tests disabled
And the rest of the output from the tests:
Failed Test Stat Wstat Total Fail  Failed  List of Failed
--- 

t/0-signature.t1   256 11 100.00%  1
9 tests skipped.
Failed 1/15 test scripts, 93.33% okay. 1/424 subtests failed, 99.76% 
okay.
make: *** [test_dynamic] Error 255
/usr/bin/make test -- NOT OK

I've been working on this for quite a while and I'm fairly frustrated 
with it, what am I doing wrong?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Logon scripts and Windows NT

2004-06-29 Thread Michael Crider
We have Samba 2.2.5 recompiled with LDAP support running on RedHat 8 as
PDC.  A mixed network of Windows 98 and NT 4 clients log in using it.
We have a logon script set to run for all users.  It runs fine on 98
clients, but never appears to run on NT.  I can access the netlogon
share through Network Neighborhood on any NT box and run the script
manually and it works.
Below is an abbreviated copy of my smb.conf (I have removed comments and 
unrelated shares) and our logon script.  Any recommendations on how to 
get this running automatically on NT clients would be greatly appreciated.

smb.conf:
[global]
guest ok = yes  
log level = 0
max mux = 50
kernel oplocks = true
   workgroup = HOE-MAIN
   netbios name = RHSERVER1
   server string = RH_SERVER_1  
   deny hosts = 192.168.10.11 192.168.10.12
   allow hosts = 192.168.10.  127.0.0.
printcap name = /etc/printcap
load printers = yes
   printing = lprng
log file = /var/log/samba/%m.log
   max log size = 2
  encrypt passwords = yes
  unix password sync = Yes
  passwd program = /usr/local/sbin/smbldap-passwd.pl -o %u
  passwd chat = *new*password* %n\n *new*password* %n\n *successfully*
socket options =  TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   remote announce = 192.168.10.255
   os level = 65
   domain master = True
   preferred master = False
   domain logons = yes
logon script = default.bat
   wins support = yes
   dns proxy = no
preserve case = yes
short preserve case = YES
  default case = lower  
  case sensitive = no
mangle case = yes
  ldap suffix = dc=HOECOOP,dc=ORG
  ldap admin dn = cn=manager,dc=HOECOOP,dc=ORG
  ldap port = 389
  ldap server = 127.0.0.1
  ldap ssl = No
  add user script = /usr/local/sbin/smbldap-useradd.pl -w %u
  domain admin group =  @Domain Admins 
  time server = Yes
[netlogon]
   comment = Network Logon Service
   path = /opt/samba/netlogon
logon script:
@ECHO off
net use u: /delete
net use w: /delete
net use y: /delete
if not %os%!==! goto nt
:95
net use h: /delete
net use h: \\tuxprint1\pchome
net use y: \\rhserver1\dept
net use w: \\rhserver1\engineer
net use u: \\tuxprint1\programs
goto cont
:NT
net use h: /delete
net use h: \\tuxprint1\pchome
net use y: \\rhserver1\dept /persistent:no
net use w: \\rhserver1\engineer /persistent:no
net use u: \\tuxprint1\programs /persistent:no
goto cont
:cont
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: [fwd: [Fwd: Re: network response] ]

2004-06-29 Thread Jeremy Allison
On Tue, Jun 29, 2004 at 03:43:48PM -0500, Chris Garrigues wrote:
  From:  Jeremy Allison [EMAIL PROTECTED]
  Date:  Mon, 28 Jun 2004 13:43:54 -0700
 
  Can you try with : defer sharing violations = Yes but
  
  kernel oplocks = no
  oplocks = yes
  level2 oplocks = yes
  
  Also. I'm starting to think it may be an interaction between
  Linux kernel oplocks and deferred opens.
 
 I just had a lockup with these values.  This one hung and then gave me the 
 error that the file couldn't be saved and was instead saved to a temporary 
 file.  I'm still running 3.0.5pre2-SVN-build-1287.  smbstatus is showing 
 two locks on the temporary file:
 
 Locked files:
 PidDenyMode   Access  R/WOplock   Name
 --
 24074  DENY_NONE  0x30089 RDONLY NONE 
 /net/jupiter.trinsics.com/export/home/cwg/bbu projection.xls   Tue Jun 29 14:56:36 
 2004
 24074  DENY_NONE  0x60080 RDONLY NONE 
 /net/jupiter.trinsics.com/export/home/cwg/DAD28750   Tue Jun 29 14:56:36 2004
 24074  DENY_ALL   0x7019f RDWR   NONE 
 /net/jupiter.trinsics.com/export/home/cwg/DAD28750   Tue Jun 29 14:56:36 2004

The strange thing is the Oplock value of none here

Are you sure you have kernel oplocks set to no ? Use testparm to
be sure and ensure you've restarted smbd or it won't take effect.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: [fwd: [Fwd: Re: network response] ]

2004-06-29 Thread Chris Garrigues
 From:  Jeremy Allison [EMAIL PROTECTED]
 Date:  Tue, 29 Jun 2004 14:47:34 -0700

 The strange thing is the Oplock value of none here
 
 Are you sure you have kernel oplocks set to no ? Use testparm to
 be sure and ensure you've restarted smbd or it won't take effect.

hmmm. what does this mean:

Load smb config files from /etc/samba3/smb.conf
Processing section [homes]
Processing section [netlogon]
Processing section [profiles]
Processing section [groups]
Processing section [InterChk]
Processing section [local-soft]
Processing section [pointmeridian]
Processing section [print$]
Processing section [software]
Processing section [lp1]
Loaded services file OK.
WARNING: You have some share names that are longer than 12 characters.
These may not be accessible to some older clients.
(Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
Invalid combination of parameters for service netlogon.Level II 
oplocks can only be set if oplocks are also set.
Invalid combination of parameters for service profiles.Level II 
oplocks can only be set if oplocks are also set.
Invalid combination of parameters for service groups.  Level II 
oplocks can only be set if oplocks are also set.
Invalid combination of parameters for service InterChk.Level II 
oplocks can only be set if oplocks are also set.
Invalid combination of parameters for service local-soft.  Level II 
oplocks can only be set if oplocks are also set.
Invalid combination of parameters for service pointmeridian.   Level II 
oplocks can only be set if oplocks are also set.
Invalid combination of parameters for service print$.  Level II 
oplocks can only be set if oplocks are also set.
Invalid combination of parameters for service lp1. Level II 
oplocks can only be set if oplocks are also set.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions

# Global parameters
[global]
workgroup = TRINSICS
interfaces = eth0, 127.0.0.1
bind interfaces only = Yes
map to guest = Bad User
smb passwd file = /etc/samba/smbpasswd
passdb backend = ldapsam:ldap://127.0.0.1
log level = 10
log file = /var/log/samba3/%m.log
max log size = 2500
min protocol = NT1
deadtime = 1440
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 IPTOS_LOWDELAY 
SO_KEEPALIVE
load printers = No
add user script = /usr/sbin/useradd -d /dev/null -g users -s /bin/false -M %u
logon script = login.bat
logon path = \\%L\profiles\%U
logon drive = U:
logon home = \\%L\%U
domain logons = Yes
os level = 127
preferred master = Yes
domain master = Yes
wins support = Yes
kernel oplocks = No
ldap suffix = dc=trinsics,dc=com
ldap machine suffix = ou=people,dc=trinsics,dc=com
ldap user suffix = ou=people,dc=trinsics,dc=com
ldap group suffix = ou=group,dc=trinsics,dc=com
ldap admin dn = cn=wheel,o=trinsics,c=us
ldap passwd sync = Yes
min print space = 32768
delete veto files = Yes
oplocks = No

[homes]
comment = Home Directories
read only = No
veto files = /.?*/.AppleDouble/.bin/.AppleDesktop/Network Trash 
Folder/.Parent/Icon?/Desktop/DesktopFolderDB/Maildir/
browseable = No
oplocks = Yes

[netlogon]
path = /home/samba/netlogon
guest ok = Yes

[profiles]
path = /home/samba/ntprofile
read only = No
create mask = 0600
force create mode = 0600
directory mask = 0700
force directory mode = 0700
profile acls = Yes
csc policy = disable

[groups]
comment = Group Shares
path = /export/groups
write list = @users
force group = +users
read only = No
create mask = 0664
force create mode = 0660
directory mask = 0775
force directory mode = 0770
map acl inherit = Yes
veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash 
Folder/.Parent/Icon?/Desktop/DesktopFolderDB/

[InterChk]
comment = Sophos InterCheck Share
path = /export/intercheck
read only = No
map acl inherit = Yes

[local-soft]
comment = Local Software (not backed up)
path = /export/local-soft
write list = @users
force group = +users
read only = No
create mask = 0664
force create mode = 0660
directory mask = 0775
force directory mode = 0770
map acl inherit = Yes
veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash 
Folder/.Parent/Icon?/Desktop/DesktopFolderDB/

[pointmeridian]
comment = Point Meridian
path = /export/pointmeridian
read only = No
map acl 

Re: [Samba] Re: [fwd: [Fwd: Re: network response] ]

2004-06-29 Thread Jeremy Allison
On Tue, Jun 29, 2004 at 05:16:24PM -0500, Chris Garrigues wrote:
  From:  Jeremy Allison [EMAIL PROTECTED]
  Date:  Tue, 29 Jun 2004 14:47:34 -0700
 
  The strange thing is the Oplock value of none here
  
  Are you sure you have kernel oplocks set to no ? Use testparm to
  be sure and ensure you've restarted smbd or it won't take effect.
 
 hmmm. what does this mean:
 
 Load smb config files from /etc/samba3/smb.conf
 Processing section [homes]
 Processing section [netlogon]
 Processing section [profiles]
 Processing section [groups]
 Processing section [InterChk]
 Processing section [local-soft]
 Processing section [pointmeridian]
 Processing section [print$]
 Processing section [software]
 Processing section [lp1]
 Loaded services file OK.
 WARNING: You have some share names that are longer than 12 characters.
 These may not be accessible to some older clients.
 (Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
 Invalid combination of parameters for service netlogon.Level II 
 oplocks can only be set if oplocks are also set.
 Invalid combination of parameters for service profiles.Level II 
 oplocks can only be set if oplocks are also set.
 Invalid combination of parameters for service groups.  Level II 
 oplocks can only be set if oplocks are also set.
 Invalid combination of parameters for service InterChk.Level II 
 oplocks can only be set if oplocks are also set.
 Invalid combination of parameters for service local-soft.  Level II 
 oplocks can only be set if oplocks are also set.
 Invalid combination of parameters for service pointmeridian.   Level II 
 oplocks can only be set if oplocks are also set.
 Invalid combination of parameters for service print$.  Level II 
 oplocks can only be set if oplocks are also set.
 Invalid combination of parameters for service lp1. Level II 
 oplocks can only be set if oplocks are also set.
 Server role: ROLE_DOMAIN_PDC
 Press enter to see a dump of your service definitions

It just means whenever you turn oplocks off and don't turn off level 2 
oplocks you've got an invalid combo. Doesn't hurt.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] 2.2.9, reported name under xp

2004-06-29 Thread Thomas Bork
Hi,

if mapping a 2.2.9 share under xp pro und choosing properties the reported name isn't 
correct.  The name of the same share mapped on w2k is correct.
Both systems have installed all available ms updates and patches. Both systems are 
german versions.
Is this a samba are windows bug?


Please take a look at

http://www.eisfair.org/download/tombork/test/label.JPG

smb.conf:

[global]
   workgroup = TOMMAIK
   serverstring =
   interfaces = 127.0.0.1/8 192.168.0.6/255.255.255.0
   bind interfaces only = yes
   security = user
   encrypt passwords = yes
   update encrypted = yes
   min password length = 1
   password server =
   pam password change = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter*new*UNIX*password:* %n\n *Retype*new*UNIX*password:* %n\
n *passwd:*password*updated*successfully*
   username map = /etc/user.map
   username level = 2
   unix password sync = yes
   debug level = 0
   max log size = 1000
   nameresolveorder = lmhosts host bcast wins
   time server = yes
   deadtime = 60
   socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_RCVBUF=16384 SO_S
NDBUF=16384
   load printers = no
   mangling method = hash2
   character set = iso8859-1
   client code page = 850
   domain admin group = root
   logon script = %U.bat
   logon drive = x:
   domain logons = yes
   add user script = /var/install/bin/samba-add-workstation %u
   os level = 255
   preferred master = yes
   local master = yes
   domain master = yes
   wins support = no
   wins server =
   wins proxy = no
   kernel oplocks = no
   message command = /bin/mail -s 'message from %f on %m' root  %s; rm %s
   dfree command = /usr/local/bin/samba-dfree
   admin users = root
   printer admin = root
   hosts allow = 127.0.0. 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0
   hosts deny = 0.0.0.0/0
   printing = lprng
   print command = chmod 666 %s; name=`echo '%J' | sed s/^.*- //`; /usr/bin/
lpr -P%p -J$name %s; rm %s
   lpq command = /usr/bin/lpq -P%p -L
   lprm command = /usr/bin/lprm -P%p %j
   lppause command = /usr/sbin/lpc hold %p %j
   lpresume command = /usr/sbin/lpc release %p %j
   queuepause command = /usr/sbin/lpc stop %p
   queueresume command = /usr/sbin/lpc start %p
   dos filetimes = yes
   dos filetime resolution = yes
   hide files = /desktop.ini/
   use sendfile = yes

[netlogon]
   comment = netlogon-service on test2
   path = /netlogon
   writeable = no
   write list = root
   public = no
   locking = no
   browseable = no
   level2 oplocks = no
   blocking locks = no
   oplocks = no
   hide files = /desktop.ini/Thumbs.db/

[homes]
   comment = home directory on %h
   browseable = no
   writeable = yes
   path = %H
   csc policy = disable
   valid users = %S
   read list =
   write list =
   create mask = 0600
   directory mask = 0700
   level2 oplocks = no
   blocking locks = no
   oplocks = no
   hide files = /desktop.ini/Thumbs.db/

[all]
   comment = complete filesystem on %h
   browseable = no
   writeable = yes
   path = /
   valid users = root
   read list =
   write list =
   dont descend = proc
   create mask = 0700
   directory mask = 0700
   level2 oplocks = no
   blocking locks = no
   oplocks = no
   hide files = /desktop.ini/Thumbs.db/

[public]
   comment = public directory on %h
   browseable = yes
   writeable = yes
   path = /public
   public = yes
   read list =
   write list =
   create mask = 0777
   directory mask = 0777
   level2 oplocks = no
   blocking locks = no
   oplocks = no
   hide files = /desktop.ini/Thumbs.db/

# cuttet printers


der tom
___
WEB.DE Video-Mail - Sagen Sie mehr mit bewegten Bildern
Informationen unter: http://freemail.web.de/?mc=021199

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba Problems with Authentication against a 2K3 ADS Server

2004-06-29 Thread Jacob A. Alifrangis
Ok, here's the problem now..

 

I have Two unix boxes and Four Windows Servers here.

 

The two unix boxes marvin and muse are running rhes 3 and suse 9.1
stock.

 

Marvin uses the smbpasswd file to authenticate; I just have to sync the
passwords manually.

I am trying to setup muse using winbind and samba 3.0.2a

 

The problem is that the XP machines on the network don't want to talk to
muse, I get an Access Denied message of sorts preceeded by a logon
request dialog.

 

The samba/log.smbd gives this explanation:

 

[2004/06/28 23:40:56, 0] auth/auth_util.c:make_server_info_info3(1120)

  make_server_info_info3: pdb_init_sam failed!

 

Very useful; nothing on google is useful either..

 

Here's my smb.conf:

# Global parameters
[global]
workgroup = BRAINDONORS
realm = BRAINDONORS.NET
server string = Music / CDImage Server
security = ADS
auth methods = winbind
local master = No
wins server = zaphod.braindonors.net
ldap suffix = dc=braindonors,dc=net
ldap ssl = no
idmap uid = 1-2
idmap gid = 1-2
winbind enable local accounts = No
 
[music-mp3]
comment = MP3 Format Music Files
path = /music/mp3
read only = No
 
[music-mp3-singles]
comment = Singles and One tracks
path = /music/singles/mp3
veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash
Folder/._*

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: [fwd: [Fwd: Re: network response] ]

2004-06-29 Thread Jeremy Allison
On Tue, Jun 29, 2004 at 03:43:48PM -0500, Chris Garrigues wrote:
  From:  Jeremy Allison [EMAIL PROTECTED]
  Date:  Mon, 28 Jun 2004 13:43:54 -0700
 
  Can you try with : defer sharing violations = Yes but
  
  kernel oplocks = no
  oplocks = yes
  level2 oplocks = yes
  
  Also. I'm starting to think it may be an interaction between
  Linux kernel oplocks and deferred opens.
 
 I just had a lockup with these values.  This one hung and then gave me the 
 error that the file couldn't be saved and was instead saved to a temporary 
 file.  I'm still running 3.0.5pre2-SVN-build-1287.  smbstatus is showing 
 two locks on the temporary file:

Ok, while I'm looking at the code, here's something that
Andreas Haumer sent me about a related problem.

But we did another test and we now know it has something to do
with the version of MS Office: the error only occurs with (old)
Excel from Office97, it does not occur with Excel from Office2003!
I can't explain what is going on here, but maybe that's a hint for
others having the same problem

I was wondering what Excel version you're using ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] want to ban XP Home Edition

2004-06-29 Thread Michal Kurowski
Just for sake of curiosity:

Is that possible ? 
I'd like to support XP Pro *only* and to ban any other Windows OS 
(no 2000 server or 2003 server machines in here).

Samba works in domain mode with Ldap backend.

Cheers,

-- 
Michal Kurowski
perl -e '$_=q#: 13_2: 12/o{: 8_4) (_4: 6/2^-2; 3;-2^\2: 5/7\_/\7: 12m m::#;
y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print'

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] want to ban XP Home Edition

2004-06-29 Thread Malcolm Baldridge

 Just for sake of curiosity:
 
 Is that possible ? 
 I'd like to support XP Pro *only* and to ban any other Windows OS 

There are some very advanced networking stacks which allow you to specify
filtering based on TCP fingerprints.  OpenBSD does, for example.

I don't know if XP Home and XP Pro have different enough fingerprints to
allow a reliable discrimination between them.

This is a puzzling request, though.  I am assuming that these unwanted hosts
can change their ip#, thus evading firewall/smb.conf based access lists.

It's easier to distinguish between XP versus 2000 versus 95, 98, Me, and
NT4, etc.  Those have rather different fingerprints.

If you don't use OpenBSD, I suppose you could make use of nmap to perform a
quick on-the-fly OS fingerprint and then pull up a firewall against that
ip#, thus blocking the unwanted user(s).

It seems to me that it'd be simpler to just allow access only from certain
domains, etc.

Malcolm
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: want to ban XP Home Edition

2004-06-29 Thread Michal Kurowski
Malcolm Baldridge [EMAIL PROTECTED] wrote:
 
 There are some very advanced networking stacks which allow you to specify
 filtering based on TCP fingerprints.  OpenBSD does, for example.
 
 I don't know if XP Home and XP Pro have different enough fingerprints to
 allow a reliable discrimination between them.

That's an interesting way to go and I think it *would* work but my
original question was if it is possible for *samba* to distinguish OS
releases and allow/disallow computers then. Or rather I'm sure it is
possible to distuingish them but I just don't know if such config was
ever implemented.

Some SMB conversation option tweaking advise would be highly
appreciated.

Cheers,

-- 
Michal Kurowski
perl -e '$_=q#: 13_2: 12/o{: 8_4) (_4: 6/2^-2; 3;-2^\2: 5/7\_/\7: 12m m::#;
y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print'

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: want to ban XP Home Edition

2004-06-29 Thread Malcolm Baldridge

 That's an interesting way to go and I think it *would* work but my
 original question was if it is possible for *samba* to distinguish OS
 releases and allow/disallow computers then. Or rather I'm sure it is
 possible to distuingish them but I just don't know if such config was
 ever implemented.

Sounds like an excellent excuse to fire up the smb-aware tcpdump tool and
look at the initial exchanges between client and server.  I would doubt
there's an smb.conf option to let you control this, however with the source
at your disposal, you can make a patch easily enough.

Is your main goal to avoid weak operating systems like XP Home, or are you
targetting specific users with this requirement?

It's a bit unusual.

=MB=

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: want to ban XP Home Edition

2004-06-29 Thread Michal Kurowski
Malcolm Baldridge [EMAIL PROTECTED] wrote:
 
 Sounds like an excellent excuse to fire up the smb-aware tcpdump tool and
 look at the initial exchanges between client and server.  I would doubt
 there's an smb.conf option to let you control this, however with the source
 at your disposal, you can make a patch easily enough.

OK, I will fire up my tcpdump/tethereal ...

 Is your main goal to avoid weak operating systems like XP Home, or are you
 targetting specific users with this requirement?
 
 It's a bit unusual.

I guess it is.
I do not want to ban any users. I'd like to force people moving to 
our new XP Pro computers. 

Perhaps I could set it up in a way disallowing share access after a
logon - only joining the domain at system log in would be allowed.
Therefore no machines incapable of Samba domain logon would be
banned.

-- 
Michal Kurowski
perl -e '$_=q#: 13_2: 12/o{: 8_4) (_4: 6/2^-2; 3;-2^\2: 5/7\_/\7: 12m m::#;
y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print'

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Microsoft Access Samba 2.0.3 - Can't open database

2004-06-29 Thread Hemil Deshmukh
Hello Friends,

 

Does anybody have the solution to the problem reported by Richard below?

 

Is anyone else having problems using Microsoft Access97 to access
database files via Samba 2.0.3?
 
When I attempt to open the Access database from my unix account via
Samba, I get the Microsoft message:
 
Microsoft Access was unable to open the Visual Basic porject for
this database.
 
Another user is saving the project now.  Do you want to retry?
 
retrycancel
 
 
There definately is no other user accessing this database.  If I copy
the database to my local drive, it opens and work just fine.
 
The rest of the Samba 2.0.3 system seem to be running fine, except I do
get a lot of the following messages in the log file:
 
[1999/04/14 13:34:09, 0] smbd/nttrans.c:call_nt_transact_ioctl(1838)
  call_nt_transact_ioctl: Currently not implemented.
[1999/04/14 13:34:18, 0] smbd/password.c:setup_groups(164)
  Unable to initgroups. Error was Invalid argument
[1999/04/14 13:34:18, 0] smbd/password.c:setup_groups(169)
  This is probably a problem with the account samba
 
Any suggestion would be greatly appreciated.
 
Thanx,  Richard Hogue

 

 

Regards,

Hemil.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: want to ban XP Home Edition

2004-06-29 Thread tms3
Well remeber all...XP Prop and XP home are teh same OS.  And w2k3 and XP 
sp2 are the same OS .  Changes are made through the registry.  Thus XP 
pro features that home doesn't have are disabled in the registry.  
Don't know how that would affect the actual stack.  Something to think 
about.

Oh yeah, and M$ is using the FreeBSD protocol stack anyway...only all 
users have root level access to it.

Michal Kurowski wrote:
Malcolm Baldridge [EMAIL PROTECTED] wrote:
 

There are some very advanced networking stacks which allow you to specify
filtering based on TCP fingerprints.  OpenBSD does, for example.
I don't know if XP Home and XP Pro have different enough fingerprints to
allow a reliable discrimination between them.
   

That's an interesting way to go and I think it *would* work but my
original question was if it is possible for *samba* to distinguish OS
releases and allow/disallow computers then. Or rather I'm sure it is
possible to distuingish them but I just don't know if such config was
ever implemented.
Some SMB conversation option tweaking advise would be highly
appreciated.
Cheers,
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: want to ban XP Home Edition

2004-06-29 Thread Andrew Bartlett
On Wed, 2004-06-30 at 13:11, tms3 wrote:
 Well remeber all...XP Prop and XP home are teh same OS.  And w2k3 and XP 
 sp2 are the same OS .  Changes are made through the registry.  Thus XP 
 pro features that home doesn't have are disabled in the registry.  
 Don't know how that would affect the actual stack.  Something to think 
 about.

That's not quite true, as the utilities and the link shipped also
differ.  But the kernel is the same, I understand, for sanity's sake.

 Oh yeah, and M$ is using the FreeBSD protocol stack anyway...only all 
 users have root level access to it.

This rumour seems to have kicked around the Internet a bit, but do you
have anything more than the old BSD copyright notice on ftp.exe to base
it on?

Certainly netcraft and nmap have no difficulty telling them apart.

Andrew Bartlett


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: want to ban XP Home Edition

2004-06-29 Thread tms3

Andrew Bartlett wrote:
On Wed, 2004-06-30 at 13:11, tms3 wrote:
 

Well remeber all...XP Prop and XP home are teh same OS.  And w2k3 and XP 
sp2 are the same OS .  Changes are made through the registry.  Thus XP 
pro features that home doesn't have are disabled in the registry.  
Don't know how that would affect the actual stack.  Something to think 
about.
   

That's not quite true, as the utilities and the link shipped also
differ.  But the kernel is the same, I understand, for sanity's sake.
Well no I've converted ...erm seen them convertedthey're the same
 

Oh yeah, and M$ is using the FreeBSD protocol stack anyway...only all 
users have root level access to it.
   

This rumour seems to have kicked around the Internet a bit, but do you
have anything more than the old BSD copyright notice on ftp.exe to base
it on?
Yeah...grc.com has articles on it.
Certainly netcraft and nmap have no difficulty telling them apart.
Probably, and as for your use it may work..or not.  Point is that the 
diffs are probably in the windoze registry.

Andrew Bartlett
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Unable to connect machine to Active Directory Domain

2004-06-29 Thread Chris Vaughan
Greetings,

I have been trying, without success, to connect a linux host to the
Active directory domain of the organisation where I work.

When I use the command, net ads join -U domain.user password:
domain.user.password, it does not give back a response. 

When I run /usr/local/samba/bin/wbinfo -t, it responds with:
  
checking the trust secret via RPC calls failed
error code was NT_STATUS_INTERNAL_ERROR (0xc0e5)
Could not check secret


***
This message is intended for the addressee named and 
may  contain confidential information. If you are not the 
intended recipient, please delete it and notify the sender. 
Views expressed in this message are those of the 
individual sender, and are not necessarily the views of 
the Department of  Lands.

This email message has been swept by MIMEsweeper 
for the presence of computer viruses.
***

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Opening Task Manager close files on samba share

2004-06-29 Thread louay sakka



I have the same problem.
Did any one fix this for you?

Louay

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


svn commit: samba r1291 - in branches/SAMBA_4_0/source: lib ntvfs ntvfs/cifs ntvfs/ipc param smb_server smbd

2004-06-29 Thread metze
Author: metze
Date: 2004-06-29 07:40:14 + (Tue, 29 Jun 2004)
New Revision: 1291

Modified:
   branches/SAMBA_4_0/source/lib/util.c
   branches/SAMBA_4_0/source/ntvfs/cifs/vfs_cifs.c
   branches/SAMBA_4_0/source/ntvfs/ipc/vfs_ipc.c
   branches/SAMBA_4_0/source/ntvfs/ntvfs_generic.c
   branches/SAMBA_4_0/source/param/loadparm.c
   branches/SAMBA_4_0/source/smb_server/conn.c
   branches/SAMBA_4_0/source/smb_server/connection.c
   branches/SAMBA_4_0/source/smb_server/negprot.c
   branches/SAMBA_4_0/source/smb_server/password.c
   branches/SAMBA_4_0/source/smb_server/reply.c
   branches/SAMBA_4_0/source/smb_server/request.c
   branches/SAMBA_4_0/source/smb_server/search.c
   branches/SAMBA_4_0/source/smb_server/service.c
   branches/SAMBA_4_0/source/smb_server/session.c
   branches/SAMBA_4_0/source/smb_server/sesssetup.c
   branches/SAMBA_4_0/source/smb_server/signing.c
   branches/SAMBA_4_0/source/smb_server/smb_server.c
   branches/SAMBA_4_0/source/smb_server/smb_server.h
   branches/SAMBA_4_0/source/smb_server/srvtime.c
   branches/SAMBA_4_0/source/smb_server/trans2.c
   branches/SAMBA_4_0/source/smbd/process_model.c
   branches/SAMBA_4_0/source/smbd/process_model.h
   branches/SAMBA_4_0/source/smbd/process_single.c
   branches/SAMBA_4_0/source/smbd/process_standard.c
   branches/SAMBA_4_0/source/smbd/process_thread.c
   branches/SAMBA_4_0/source/smbd/rewrite.c
Log:
rename struct smbsrv_context to smbsrv_connection
because this is the connection state per transport layer (tcp)
connection

I also moved the substructs directly into smbsrv_connection,
because they don't need a struct name and we should allway pass the complete
smbsrv_connection struct into functions

metze


WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=1291nolog=1


svn commit: samba r1292 - in branches/SAMBA_4_0/source: auth include lib smbd

2004-06-29 Thread abartlet
Author: abartlet
Date: 2004-06-29 09:20:18 + (Tue, 29 Jun 2004)
New Revision: 1292

Modified:
   branches/SAMBA_4_0/source/auth/auth.c
   branches/SAMBA_4_0/source/include/module.h
   branches/SAMBA_4_0/source/lib/module.c
   branches/SAMBA_4_0/source/smbd/process_model.c
Log:
Add const to the subsystem/module registration code.

Add some 'multi init' code, until we get a better set of infrustructure.

Andrew Bartlett


WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=1292nolog=1


svn commit: samba r1293 - branches/SAMBA_4_0/source/smb_server

2004-06-29 Thread abartlet
Author: abartlet
Date: 2004-06-29 09:23:37 + (Tue, 29 Jun 2004)
New Revision: 1293

Modified:
   branches/SAMBA_4_0/source/smb_server/sesssetup.c
Log:
Indent

Andrew Bartlett


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1293nolog=1


svn commit: samba r1294 - in branches/SAMBA_4_0/source: auth libcli libcli/auth librpc/ndr librpc/rpc ntvfs/ipc rpc_server rpc_server/netlogon rpc_server/samr smb_server torture/rpc utils

2004-06-29 Thread abartlet
Author: abartlet
Date: 2004-06-29 09:40:10 + (Tue, 29 Jun 2004)
New Revision: 1294

Removed:
   branches/SAMBA_4_0/source/auth/auth_ntlmssp.c
   branches/SAMBA_4_0/source/rpc_server/dcesrv_crypto.c
   branches/SAMBA_4_0/source/rpc_server/dcesrv_crypto_ntlmssp.c
   branches/SAMBA_4_0/source/rpc_server/dcesrv_crypto_schannel.c
Modified:
   branches/SAMBA_4_0/source/auth/auth.h
   branches/SAMBA_4_0/source/auth/auth_util.c
   branches/SAMBA_4_0/source/auth/config.m4
   branches/SAMBA_4_0/source/auth/config.mk
   branches/SAMBA_4_0/source/libcli/auth/gensec.c
   branches/SAMBA_4_0/source/libcli/auth/gensec.h
   branches/SAMBA_4_0/source/libcli/auth/gensec_ntlmssp.c
   branches/SAMBA_4_0/source/libcli/auth/ntlmssp_sign.c
   branches/SAMBA_4_0/source/libcli/auth/spnego.c
   branches/SAMBA_4_0/source/libcli/auth/spnego.h
   branches/SAMBA_4_0/source/libcli/config.m4
   branches/SAMBA_4_0/source/librpc/ndr/ndr.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc.h
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_auth.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_ntlm.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_schannel.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_util.c
   branches/SAMBA_4_0/source/ntvfs/ipc/vfs_ipc.c
   branches/SAMBA_4_0/source/rpc_server/config.m4
   branches/SAMBA_4_0/source/rpc_server/config.mk
   branches/SAMBA_4_0/source/rpc_server/dcerpc_server.c
   branches/SAMBA_4_0/source/rpc_server/dcerpc_server.h
   branches/SAMBA_4_0/source/rpc_server/dcesrv_auth.c
   branches/SAMBA_4_0/source/rpc_server/netlogon/dcerpc_netlogon.c
   branches/SAMBA_4_0/source/rpc_server/samr/samr_password.c
   branches/SAMBA_4_0/source/smb_server/password.c
   branches/SAMBA_4_0/source/torture/rpc/schannel.c
   branches/SAMBA_4_0/source/utils/ntlm_auth.c
Log:
A nice, large, commit...

This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.

This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal).  This causes
changes in all the existing gensec users.

Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.

Gensec has also taken over the role of auth/auth_ntlmssp.c

An important part of gensec, is the output of the 'session_info'
struct.  This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.

The schannel code is reworked, to be in the same file for client and
server.  

ntlm_auth is reworked to use gensec.

The major problem with this code is the way it relies on subsystem
auto-initialisation.  The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.

There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
  valgrind working (this I'll fix soon).  
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.

Andrew Bartlett



WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=1294nolog=1


svn commit: samba-docs r160 - trunk/Samba-HOWTO-Collection

2004-06-29 Thread jelmer
Author: jelmer
Date: 2004-06-29 12:32:44 + (Tue, 29 Jun 2004)
New Revision: 160

Modified:
   trunk/Samba-HOWTO-Collection/Passdb.xml
Log:
Fix typo

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=samba-docspath=/rev=160nolog=1


svn commit: samba r1295 - branches/SAMBA_3_0/source/printing

2004-06-29 Thread vlendec
Author: vlendec
Date: 2004-06-29 15:42:00 + (Tue, 29 Jun 2004)
New Revision: 1295

Modified:
   branches/SAMBA_3_0/source/printing/printing.c
Log:
To be able to send a message to the background queue updated, we need to be
root. Otherwise the USR1 signal will not be delivered.

Volker


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1295nolog=1


svn commit: samba r1296 - trunk/source/printing

2004-06-29 Thread vlendec
Author: vlendec
Date: 2004-06-29 15:43:50 + (Tue, 29 Jun 2004)
New Revision: 1296

Modified:
   trunk/source/printing/printing.c
Log:
To be able to send a message to the background queue updated, we need to be
root. Otherwise the USR1 signal will not be delivered.

Volker


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1296nolog=1


svn commit: samba r1297 - in branches/SAMBA_3_0/source: nsswitch sam

2004-06-29 Thread vlendec
Author: vlendec
Date: 2004-06-29 15:46:43 + (Tue, 29 Jun 2004)
New Revision: 1297

Modified:
   branches/SAMBA_3_0/source/nsswitch/winbindd.c
   branches/SAMBA_3_0/source/sam/idmap.c
Log:
Yes, it does survive valgrind for my tests :-)

Check in the 'winbind proxy only' mode -- no new parameter required :-)

If you don't set idmap uid or idmap gid, winbind will not do idmap stuff, it
will only proxy the netlogon request and thus speed up the authentication of
domain users.

Volker



WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_3_0/sourcerev=1297nolog=1


svn commit: samba r1298 - in trunk/source: nsswitch sam

2004-06-29 Thread vlendec
Author: vlendec
Date: 2004-06-29 15:48:35 + (Tue, 29 Jun 2004)
New Revision: 1298

Modified:
   trunk/source/nsswitch/winbindd.c
   trunk/source/nsswitch/winbindd_cache.c
   trunk/source/sam/idmap.c
Log:
Check in the 'winbind proxy only' mode

Send getusersids through a dual daemon.

Volker



WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/trunk/sourcerev=1298nolog=1


svn commit: samba r1300 - trunk/source/nmbd

2004-06-29 Thread jra
Author: jra
Date: 2004-06-29 17:33:56 + (Tue, 29 Jun 2004)
New Revision: 1300

Modified:
   trunk/source/nmbd/nmbd_winsserver.c
Log:
Used break instead of continue so I was only expiring the first record. DOH !
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1300nolog=1


CVS update: cifsvfs/fs/cifs

2004-06-29 Thread sfrench

Date:   Tue Jun 29 19:13:02 2004
Author: sfrench

Update of /home/cvs/cifsvfs/fs/cifs
In directory dp.samba.org:/tmp/cvs-serv14891/fs/cifs

Modified Files:
AUTHORS CHANGES README cifs_debug.c cifsfs.h cifsglob.h 
cifspdu.h cifsproto.h cifssmb.c connect.c dir.c file.c inode.c 
link.c transport.c 
Log Message:
Merge with 2.6 updates - bring to version 1.20 of cifs vfs


Revisions:
AUTHORS 1.8 = 1.9
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/AUTHORS?r1=1.8r2=1.9
CHANGES 1.51 = 1.52
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/CHANGES?r1=1.51r2=1.52
README  1.22 = 1.23
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/README?r1=1.22r2=1.23
cifs_debug.c1.21 = 1.22

http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/cifs_debug.c?r1=1.21r2=1.22
cifsfs.h1.9 = 1.10
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/cifsfs.h?r1=1.9r2=1.10
cifsglob.h  1.33 = 1.34
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/cifsglob.h?r1=1.33r2=1.34
cifspdu.h   1.19 = 1.20
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/cifspdu.h?r1=1.19r2=1.20
cifsproto.h 1.32 = 1.33
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/cifsproto.h?r1=1.32r2=1.33
cifssmb.c   1.60 = 1.61
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/cifssmb.c?r1=1.60r2=1.61
connect.c   1.55 = 1.56
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/connect.c?r1=1.55r2=1.56
dir.c   1.22 = 1.23
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/dir.c?r1=1.22r2=1.23
file.c  1.60 = 1.61
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/file.c?r1=1.60r2=1.61
inode.c 1.40 = 1.41
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/inode.c?r1=1.40r2=1.41
link.c  1.17 = 1.18
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/link.c?r1=1.17r2=1.18
transport.c 1.35 = 1.36
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/fs/cifs/transport.c?r1=1.35r2=1.36


CVS update: cifsvfs

2004-06-29 Thread sfrench

Date:   Tue Jun 29 19:13:02 2004
Author: sfrench

Update of /home/cvs/cifsvfs
In directory dp.samba.org:/tmp/cvs-serv14891

Modified Files:
26to24_backporting_considerations cifs_24.patch 
Log Message:
Merge with 2.6 updates - bring to version 1.20 of cifs vfs


Revisions:
26to24_backporting_considerations   1.2 = 1.3

http://www.samba.org/cgi-bin/cvsweb/cifsvfs/26to24_backporting_considerations?r1=1.2r2=1.3
cifs_24.patch   1.2 = 1.3
http://www.samba.org/cgi-bin/cvsweb/cifsvfs/cifs_24.patch?r1=1.2r2=1.3



svn commit: samba r1301 - branches/SAMBA_3_0/source/smbd

2004-06-29 Thread jra
Author: jra
Date: 2004-06-29 20:41:29 + (Tue, 29 Jun 2004)
New Revision: 1301

Modified:
   branches/SAMBA_3_0/source/smbd/mangle_hash.c
Log:
Fix bogus error message when using mangling method = hash rather
than hash2. We are already calculating lengths so just use memcpy
not safe_strcpy().
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1301nolog=1


svn commit: samba r1302 - trunk/source/smbd

2004-06-29 Thread jra
Author: jra
Date: 2004-06-29 20:41:36 + (Tue, 29 Jun 2004)
New Revision: 1302

Modified:
   trunk/source/smbd/mangle_hash.c
Log:
Fix bogus error message when using mangling method = hash rather
than hash2. We are already calculating lengths so just use memcpy
not safe_strcpy().
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1302nolog=1


svn commit: samba r1303 - trunk/source/smbd

2004-06-29 Thread jra
Author: jra
Date: 2004-06-30 01:34:55 + (Wed, 30 Jun 2004)
New Revision: 1303

Modified:
   trunk/source/smbd/open.c
Log:
Turns out non-io opens that cause oplock breaks are a *different* set
of desired access flags from those that cause sharing violations.
Oplock breaks are caused by : 
~(SYNCHRONIZE_ACCESS|FILE_READ_ATTRIBUTES|FILE_WRITE_ATTRIBUTES)
Sharing violations are caused by : 
~(SYNCHRONIZE_ACCESS|READ_CONTROL_ACCESS|FILE_READ_ATTRIBUTES|FILE_WRITE_ATTRIBUTES)
We now pass the torture rename test again.
I still need to work out if subsequent opens will cause sharing violations with an 
existing open
mode of 
SYNCHRONIZE_ACCESS|READ_CONTROL_ACCESS|FILE_READ_ATTRIBUTES|FILE_WRITE_ATTRIBUTES;
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1303nolog=1


svn commit: samba r1304 - branches/SAMBA_3_0/source/smbd

2004-06-29 Thread jra
Author: jra
Date: 2004-06-30 01:35:01 + (Wed, 30 Jun 2004)
New Revision: 1304

Modified:
   branches/SAMBA_3_0/source/smbd/open.c
Log:
Turns out non-io opens that cause oplock breaks are a *different* set
of desired access flags from those that cause sharing violations.
Oplock breaks are caused by : 
~(SYNCHRONIZE_ACCESS|FILE_READ_ATTRIBUTES|FILE_WRITE_ATTRIBUTES)
Sharing violations are caused by : 
~(SYNCHRONIZE_ACCESS|READ_CONTROL_ACCESS|FILE_READ_ATTRIBUTES|FILE_WRITE_ATTRIBUTES)
We now pass the torture rename test again.
I still need to work out if subsequent opens will cause sharing violations with an 
existing open
mode of 
SYNCHRONIZE_ACCESS|READ_CONTROL_ACCESS|FILE_READ_ATTRIBUTES|FILE_WRITE_ATTRIBUTES;
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1304nolog=1


svn commit: samba r1305 - branches/SAMBA_4_0/source/utils

2004-06-29 Thread abartlet
Author: abartlet
Date: 2004-06-30 02:05:26 + (Wed, 30 Jun 2004)
New Revision: 1305

Modified:
   branches/SAMBA_4_0/source/utils/ntlm_auth.c
Log:
Grrr, fix my build breakage...

Declare variables at the start of a block.

Andrew Bartlett


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=1305nolog=1