Re: [Samba] ACL permissions with XP problem

2003-03-01 Thread Markus Amersdorfer
On Thu, 27 Feb 2003 09:47:53 -0600
Brad Sagowitz [EMAIL PROTECTED] wrote:

 RedHat 7.3 with XFS (using the XFS install disk)
 After installation I'd downloaded 2.2.7 src rpm from redhat and
 rebuilt it with the --with-acl-support option in the samba.spec file

Did you have acl-dev installed when compiling Samba? Of not, the
configure-process will kick ACL-support but continue compiling although
you specified --with-acl-support.

Make sure your smbd has ACL-support built in:

  ldd /usr/sbin/smbd

The output should contain something like 

  libacl.so.1 = /lib/libacl.so.1

So long,
Max

-- 
The first time any man's freedom is trodden on, we're all damaged.
   Cpt. Picard, The Drumhead, StarTrek TNG

http://homex.subnet.at/~max/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] compilation problems with 2.2.7a on OpenBSD 3.2 using--with-ldap sam

2003-03-01 Thread mark
For whatever reason, the Makefiles that are generated don't tell gcc to 
look in /usr/local/include for header files.  You don't need 
--libdir=/usr/local/lib and --includedir=/usr/local/include.  I believe 
that those just tell where you want the libraries and header files 
installed when everything is said and done, not where to look while 
compiling.

You just need to (assuming you're using bash):

export CPPFLAGS='-I/usr/local/include -L/usr/local/lib'

before you run configure.  If you are using a cshell (by the c shore?  
bad joke, nevermind):

setenv CPPFLAGS '-I/usr/local/include -L/usr/local/lib'

I think.

mark

ps I think you can also use:

CPPFLAGS='-I/usr/local/include -L/usr/local/lib' ./configure 
--with-ldapsam

mark
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba and LinuxMDK 9 file perms oddities?

2003-03-01 Thread AlF
Hi all

I noticed a pretty strange behaviour regarding file permissions that 
sometimes change without any reason. I need to share the following two 
directories:

   /home/public (owner=root, group=root, perms=0777)
   /home/users (owner=root, group=users, perms=0770)
the /home directory is owned by root, the group is root and permissions 
are set in this way: 0755.
The above dirs are shared using these instructions in smb.conf:

[grp]
   comment = Folder for group [%g]
   path = /home/%g
   guest ok = no
   public = no
   browseable = yes
   writable = yes
   create mask = 0660
   directory mask = 0770
[public]
   comment = Public folder
   path = /home/public
   guest ok = no
   public = no
   browseable = yes
   writable = yes
   create mask = 0666
   directory mask = 0777
When a member of group users connects to the [public] or [grp] share 
and interacts with them by creating dirs and/or files, something strange 
happens because file permissions change to:

   /home/public (owner=root, group=root, perms=0755)
   /home/users (owner=root, group=users, perms=0750)
In a short words, the write flag disappears. As a result, the next time 
that a user logs in or interacts with shares, he won't be able to write 
files, create dirs, rename them and so on.
I tried to shut down and restart samba to discover if that change is 
caused by the deamon itself and not by the use of the shares but I 
observed that restarting doesn't change file perms. Does anybody know 
the solution?

Thanks :-)

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba 2.2.8pre2 changelog

2003-03-01 Thread Derkjan de Haan

Hi,

I read the changelog, and couldn't help noticing this:

Changes since 2.2.8pre1
---
8)  Always use safe_strcpy not pstrcpy for malloc()'d strings
25) Merge from HEAD. Use pstrcpy not safe_strcpy.

Did this change get reverted intentionally ?


regards,

Derkjan de Haan

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba and LinuxMDK 9 file perms oddities?

2003-03-01 Thread Kurt Weiss
AlF schrieb:

When a member of group users connects to the [public] or [grp] share 
and interacts with them by creating dirs and/or files, something strange 
happens because file permissions change to:

   /home/public (owner=root, group=root, perms=0755)
   /home/users (owner=root, group=users, perms=0750)
are u using winbind/ACL support?
can u post the [general] section too?
thx k

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] server side printers

2003-03-01 Thread Tor Bechmann Sørensen
Hi.

Im an admin on a small network with about 100 clients running windows 95,
98, 98SE, windows 2000 and XP. Our server is running samba 2.2.5
and sharing one HP Laserjet 5M/MP. Our current setup works fine, but I am
wondering

How do I put windows clients drivers on my samba server to eliminate the
need for users to choose printer drivers (and to have the windows cd
around) when they add the samba shared printers?

I am looking for help in creating the samba share whereupon the nessesary
files could reside. And for generating the nessecary files, and putting
them there.

Also, I am wondering about the legality of the process: That
is, since my users are residents at my dorm, they have their own private
software, and the dorm which is running the server, doesnt have any
windows licenses. I could borrow the relevant installation cds to generate
the nessesary files, i guess, but would it be legal?

I have been googling and reading documentation, but I could only find
documentation relevant to versions previous to 2.2.0 and nothing that
could help me.

Finally, I dont know if I have to subscribe to this list to recieve
replies, so please reply to my address rather than to the list.

Regards
Tor Bechmann Sorensen
-- 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Linux to Linux with Samba?

2003-03-01 Thread pshook
Is it possible to allow two Linux computers to browse each other in a
manner similar to the way a winbox and browse a Linux box with Samba? Ya
know, like the network neighborhood thing, not the smbclient get put
thing?

Thanks

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Linux to windoze

2003-03-01 Thread pshook
Is it possible to allow your Liunx box see your winbox, just like the
winbox can see or browse the Linux box with Samba?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Linux to Linux with Samba?

2003-03-01 Thread Stephen Carville
On Saturday 01 March 2003 09:27 am, pshook wrote:
 Is it possible to allow two Linux computers to browse each other in 
a
 manner similar to the way a winbox and browse a Linux box with 
Samba? Ya
 know, like the network neighborhood thing, not the smbclient get put
 thing?

Check out LinNeighborhood:

http://www.bnro.de/~schmidjo/
 
-- 
Stephen Carville [EMAIL PROTECTED]
UNIX and Network Administrator
DPSI
6033 W. Century Blvd, Ste 1075
Los Angeles, CA 90045
310-342-3602

Well, yes, we've deployed Linux and we're seeing reduced costs and 
increased functionality. But our competitors? Linux might be bad for 
them. Real bad. Our competitors should stick with what they have 
right now.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Linux to windoze

2003-03-01 Thread Jennifer Fountain
Yes, You will need services for unix (~$80) to make it happen.  Or another program 
such as maestro nfs.  We use services for unix and it works fine for us.

-Original Message- 
From: pshook [mailto:[EMAIL PROTECTED] 
Sent: Sat 3/1/2003 12:28 PM 
To: Samba 
Cc: 
Subject: [Samba] Linux to windoze



Is it possible to allow your Liunx box see your winbox, just like the
winbox can see or browse the Linux box with Samba?

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba server side printer driver, how?

2003-03-01 Thread Tor Bechmann Sørensen
I think my previous message didnt reach the list. Therefor a resend.

Hi.

Im an admin on a small network with about 100 clients running windows 95,
98, 98SE, windows 2000 and XP. Our server is running samba 2.2.5
and sharing one HP Laserjet 5M/MP. Our current setup works fine, but I am
wondering

How do I put windows clients drivers on my samba server to eliminate the
need for users to choose printer drivers (and to have the windows cd
around) when they add the samba shared printers?

I am looking for help in creating the samba share whereupon the nessesary
files could reside. And for generating the nessecary files, and putting
them there.

Also, I am wondering about the legality of the process: That
is, since my users are residents at my dorm, they have their own private
software, and the dorm which is running the server, doesnt have any
windows licenses. I could borrow the relevant installation cds to generate
the nessesary files, i guess, but would it be legal?

I have been googling and reading documentation, but I could only find
documentation relevant to versions previous to 2.2.0 and nothing that
could help me.

Regards
Tor Bechmann Sorensen
-- 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] server side printers

2003-03-01 Thread Bradley W. Langhorst
On Sat, 2003-03-01 at 11:56, Tor Bechmann Sørensen wrote:

 Also, I am wondering about the legality of the process: That
 is, since my users are residents at my dorm, they have their own private
 software, and the dorm which is running the server, doesnt have any
 windows licenses. I could borrow the relevant installation cds to generate
 the nessesary files, i guess, but would it be legal?
the printer drivers are usually made by the manufacturer of the printer
and are licensed by printer if at all.
 
 I have been googling and reading documentation, but I could only find
 documentation relevant to versions previous to 2.2.0 and nothing that
 could help me.
the samba howto collection covers the print$ stuff accurately for 
all the 2.2 version and the 3.0 branch too

Bradley W. Langhorst [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Linux to windoze

2003-03-01 Thread Bradley W. Langhorst
On Sat, 2003-03-01 at 12:28, pshook wrote:
 Is it possible to allow your Liunx box see your winbox, just like the
 winbox can see or browse the Linux box with Samba?
yes 
smbclient will do what you want i think

brad
-- 
Bradley W. Langhorst [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Linux to windoze

2003-03-01 Thread mark
On 2003.03.01 17:28 pshook wrote:
Is it possible to allow your Liunx box see your winbox, just like
the
winbox can see or browse the Linux box with Samba?
with gnome2 on my slackware 8.1 box I can use smb:// in the file 
manager to view the network.  I know that kde also has the ability to 
view the windows networks.

mark
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Linux to windoze

2003-03-01 Thread Jennifer Fountain
Is this without the use of a services on the windows end?

-Original Message-
From: mark [mailto:[EMAIL PROTECTED]
Sent: Saturday, March 01, 2003 1:30 PM
To: pshook
Cc: Samba
Subject: Re: [Samba] Linux to windoze


On 2003.03.01 17:28 pshook wrote:
 Is it possible to allow your Liunx box see your winbox, just like
 the
 winbox can see or browse the Linux box with Samba?

with gnome2 on my slackware 8.1 box I can use smb:// in the file 
manager to view the network.  I know that kde also has the ability to 
view the windows networks.

mark
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba]

2003-03-01 Thread Patrick Nelson
RH73 samba2.2.7-1.7.3

Just getting a smb server going.  Have some users who's login names are
different from windows and Linux.  Using a map file to map Linux users
accounts to windows user accounts.  When I watch the log.smb I see that the
mapping is taking place however, the authentication doesn't.  Would the fact
that the Linux authentication is done by an LDAP server matter?  The
passwords are the same.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Linux to windoze

2003-03-01 Thread Jennifer Fountain
Reason I ask - is because I couldn't get this to work.  

-Original Message-
From: mark [mailto:[EMAIL PROTECTED]
Sent: Saturday, March 01, 2003 1:30 PM
To: pshook
Cc: Samba
Subject: Re: [Samba] Linux to windoze


On 2003.03.01 17:28 pshook wrote:
 Is it possible to allow your Liunx box see your winbox, just like
 the
 winbox can see or browse the Linux box with Samba?

with gnome2 on my slackware 8.1 box I can use smb:// in the file 
manager to view the network.  I know that kde also has the ability to 
view the windows networks.

mark
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] preserving unix-win file permissions for backup via samba?

2003-03-01 Thread bwiese
I am having difficulty in try to preserve permissions on Unix files that
are copied from the samba server onto a Windows98 system, and then copied
again via samba back to an 'upload' directory on the samba server.

Specifically, I am sharing /etc (samba read only) for backup purposes,
and while logged in as root on the windows system, I can drag and drop
these files to the Windows desktop to back them up.  How can I copy them
back to the server via samba and still preserve their original unix
permissions?

1. Do the files retain their permissions while they sit on a Win98/Fat32
file system?  Will a NTFS partition help?

I see that my unix umask is 0022 and so all of the files I copy (create)
in the samba 'upload' directory inherit -rwxr--r-- perms.  When I set my
unix umask to  then the files inherit -- perms (bad!).  What
can I do?

I tried playing with create mask, security mask, directory mask, etc...

thanks, peace
Brian


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] server side printers

2003-03-01 Thread Tor Bechmann Sørensen
 the samba howto collection covers the print$ stuff accurately for
 all the 2.2 version and the 3.0 branch too


Thank you for your answer Bradley. But Im afraid, that I already looked in
the howto collection, and I didnt find information I could use, and gave
up on that. I was hoping someone here on the list could lay it out a bit
more clearly for me.

Regards
Tor Bechmann Sorensen

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba with ldap

2003-03-01 Thread Patrick Nelson
RH73 samba2.2.7-1.7.3

Just getting a smb server going.  Have some users who's login names are
different from windows and Linux.  Using a map file to map Linux users
accounts to windows user accounts.  When I watch the log.smb I see that the
mapping is taking place however, the authentication doesn't.  Would the fact
that the Linux authentication is done by an LDAP server matter?  The
passwords are the same.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] preserving unix-win file permissions for backup viasamba?

2003-03-01 Thread Martin A. Brown

How about a different solution:

( cd / ; tar cvzf /path/to/samba/share/etc-$( date +%Y-%m-%d ).tar.gz etc/ )

Then backup the tarball on your windows box.  Now you have all of the file
permissions stored inside the tarball.

The problem is that file permissions on Windows and UNIX don't map neatly
into each other.

Good luck,

-Martin

 : I am having difficulty in try to preserve permissions on Unix files that
 : are copied from the samba server onto a Windows98 system, and then copied
 : again via samba back to an 'upload' directory on the samba server.
 :
 : Specifically, I am sharing /etc (samba read only) for backup purposes,
 : and while logged in as root on the windows system, I can drag and drop
 : these files to the Windows desktop to back them up.  How can I copy them
 : back to the server via samba and still preserve their original unix
 : permissions?
 :
 : 1. Do the files retain their permissions while they sit on a Win98/Fat32
 : file system?  Will a NTFS partition help?
 :
 : I see that my unix umask is 0022 and so all of the files I copy (create)
 : in the samba 'upload' directory inherit -rwxr--r-- perms.  When I set my
 : unix umask to  then the files inherit -- perms (bad!).  What
 : can I do?
 :
 : I tried playing with create mask, security mask, directory mask, etc...
 :
 : thanks, peace
 : Brian
 :
 :
 :

-- 
Martin A. Brown --- SecurePipe, Inc. --- [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] server side printers

2003-03-01 Thread Bradley W. Langhorst
On Sat, 2003-03-01 at 16:05, Tor Bechmann Sørensen wrote:
  the samba howto collection covers the print$ stuff accurately for
  all the 2.2 version and the 3.0 branch too
 
 
 Thank you for your answer Bradley. But Im afraid, that I already looked in
 the howto collection, and I didnt find information I could use, and gave
 up on that. I was hoping someone here on the list could lay it out a bit
 more clearly for me.
i don't think it can get any clearer
I took this from
http://us3.samba.org/samba/docs/Samba-HOWTO-Collection.html#AEN798
6.2.1. Creating [print$]
In order to support the uploading of printer driver files, you
must first configure a file share named [print$]. The name of
this share is hard coded in Samba's internals so the name is
very important (print$ is the service used by Windows NT print
servers to provide support for printer driver download).

You should modify the server's smb.conf file to add the global
parameters and to create the following file share (of course,
some of the parameter values, such as 'path' are arbitrary and
should be replaced with appropriate values for your site):
...

I don't think anybody on the list is going to hold your hand any more
than i already have.

I read that document and set up the driver downloading with no serious
trouble.  

If you have a specific problem like i tried to upload the driver but it
failed with this error message and and this in the logs re-post here
with those details.

brad

-- 
Bradley W. Langhorst [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] server side printers

2003-03-01 Thread Tor Bechmann Sørensen

Thanks again for your reply. I did read the part you mention. I did
understand how to make the print$ share. The docs are clear on this part.

I can now specify my question a bit more: what to do from there on to put
the nessecary files in that share?

I am not using windows myself, but my users are. The instructions given in the doc you 
mention seems to be applicable
only if you have a NT server from which you want to upload drivers, or?
The printer in question is a HP Laserjet 5M, and lpr is used for handling
printjobs from samba. Do I need to collect files from windows installation
cds and manually copy them to the share? What should I call the folder in
which I put drivers for WindowsXP? I assume that I can replace @ntadmin
with my own account name, or? And how will the printer installation wizard
look to my users afterwards?

Regards
Tor Bechmann Sorensen

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] server side printers

2003-03-01 Thread Bradley W. Langhorst
On Sat, 2003-03-01 at 17:00, Tor Bechmann Sørensen wrote:
 Thanks again for your reply. I did read the part you mention. I did
 understand how to make the print$ share. The docs are clear on this part.
 
 I can now specify my question a bit more: what to do from there on to put
 the nessecary files in that share?
the docs are equally clear on this part.

6.2.2. Setting Drivers for Existing Printers
The initial listing of printers in the Samba host's Printers
folder will have no real printer driver assigned to them. By
default, in Samba 2.2.0 this driver name was set to NO PRINTER
DRIVER AVAILABLE FOR THIS PRINTER. Later versions changed this
to a NULL string to allow the use tof the local Add Printer
Wizard on NT/2000 clients. Attempting to view the printer
properties for a printer which has this default driver assigned
will result in the error message:

Device settings cannot be displayed. The driver for the
specified printer is not installed, only spooler properties will
be displayed. Do you want to install the driver now?

Click No in the error dialog and you will be presented with the
printer properties window. The way assign a driver to a printer
is to either

  * Use the New Driver... button to install a new printer
driver, or

  * Select a driver from the popup list of installed
drivers. Initially this list will be empty.

If you wish to install printer drivers for client operating
systems other than Windows NT x86, you will need to use the
Sharing tab of the printer properties dialog.

Assuming you have connected with a root account, you will also
be able modify other printer properties such as ACLs and device
settings using this dialog box.

A few closing comments for this section, it is possible on a
Windows NT print server to have printers listed in the Printers
folder which are not shared. Samba does not make this
distinction. By definition, the only printers of which Samba is
aware are those which are specified as shares in smb.conf.

Another interesting side note is that Windows NT clients do not
use the SMB printer share, but rather can print directly to any
printer on another Windows NT host using MS-RPC. This of course
assumes that the printing client has the necessary privileges on
the remote host serving the printer. The default permissions
assigned by Windows NT to a printer gives the Print
permissions to the Everyone well-known group.




 
 I am not using windows myself, but my users are. The instructions given in the doc 
 you mention seems to be applicable
 only if you have a NT server from which you want to upload drivers, or?
as specified in section 6.2.2 you must use a windows computer (not
necessarily a windows NT server) to upload the drivers.


 The printer in question is a HP Laserjet 5M, and lpr is used for handling
 printjobs from samba. Do I need to collect files from windows installation
 cds and manually copy them to the share?
You need to download the driver for the laserjet5m from hp and use the
add printer wizard from a client computer (as specified in the docs)
Do not try to install these drivers by hand - you would need to populate
various tdb files etc. to make it work.
the mechanism for spooling from your samba server to the printer is
irrelevant to driver downloading.

 What should I call the folder in
 which I put drivers for WindowsXP? 
 make the directory structure as specified in secitno 6.2.1
that will work for windowsXP, 2k NT 98 etc.
 I assume that I can replace @ntadmin
 with my own account name, or?
yes
  And how will the printer installation wizard
 look to my users afterwards?
they won't see a printer intallation wizard - they right click the
printer they want and choose connect - the driver is then downloaded
from the server and installed locally without further user interaction.

brad
-- 
Bradley W. Langhorst [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


re: [Samba] librsync [Solved]

2003-03-01 Thread Greg Freemyer
I found the cvs repository at 
http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/librsync/librsync/

The sourceforge project was just setup a couple of days ago.  That must have been why 
google could not find it yesterday.

I believe the samba cvs site for librsync is now deprecated.

The 0.9.5.1 version I was looking for looks to me to be a Jun. 27 cvs snapshot from 
wherever cvs was at that time.

Greg
   All,

   Does anyone know anything about librsync, and where it is currently
   maintained on the web?

   It apparently is/was a samba project, but I'm not sure how it relates.

   The authors are listed as:
   Martin Pool [EMAIL PROTECTED]
   Andrew Tridgell [EMAIL PROTECTED]

   but I suspect someone else did the 0.9.5.1 update, because only 0.9.5 is
   available on the rproxy site
   (http://rproxy.sourceforge.net/download.html).

   It is used by rdiff-backup (http://rdiff-backup.stanford.edu/) and they
   have a tarball for 0.9.5.1 on their site, but if you download it and try
   to compile it you get problems with missing files.

   I did a diff between 0.9.5 and 0.9.5.1 and there were about 3000 lines
   modified, so somebody has done a lot of work on it relatively recently.

   0.9.5 does compile, but the above site says that it has memory leaks and
   the rdiff package will not work reliably.

   TIA
   Greg
   -- 
   Greg Freemyer
   -- 
   To unsubscribe from this list go to the following URL and read the
   instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] server side printers

2003-03-01 Thread Tor Bechmann Sørensen
Thank you for your help, so far.

 the docs are equally clear on this part.

Well, maybe if youre an expert, or someone already having experience in
doing this with a NT printer server, but not from my point of view. Also I
dont think the docs are very clear as to that doing this from a windows
client is the ONLY way. But thanks for clearing that up.

 Another interesting side note is that Windows NT clients do not
 use the SMB printer share, but rather can print directly to any
 printer on another Windows NT host using MS-RPC. This of course
 assumes that the printing client has the necessary privileges on
 the remote host serving the printer.

Does this apply for windowsXP as well? And does it mean that windows will
send the print job directly to the printer per default (I dont want that,
since I have a printer filter which counts pages and subtracts from the
users printer account)?

 You need to download the driver for the laserjet5m from hp and use the
 add printer wizard from a client computer (as specified in the docs)

Ok. Should this be done from a computer with each type of windows or will
doing this from a single computer for instance with windowsXP do? And
should I be able to see some files showing up in the folders in print$
after this process?

Thanks again
Tor Bechmann Sorensen



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Re: Hiding a share

2003-03-01 Thread Marco De Vitis
On Sat, 1 Mar 2003 01:57:23 + (GMT), John H Terpstra wrote:

 On Fri, 28 Feb 2003, Jim Wharton wrote:
 
  Keep in mind however, this only hides the share in Network Neighborhood/My
  Network Places/explorer. It is still possible to do a net view command from
  the command line and see everything.
 
 Correct. That is why samba has a 'browseable = [ Yes | No]' option.
 Go figure.

Which, in turn, leaves the share still visible in Network Neighborhood 
etc, as I initially reported.
Go figure. :)

-- 
Ciao,
  Marco.

...Hergest Ridge, Mike Oldfield 1974

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] RE: Hiding a share

2003-03-01 Thread Marco De Vitis
On Fri, 28 Feb 2003 09:26:47 -0600, Henrickson, Den wrote:

 [sharename$]
[]
 The $ creates a hidden Windows share.  To access you would have to do

Right, thanks. I did actually forget that trick.

But, uhm... can it be used also with the [netlogon] share? Will it be 
still correctly identified by Samba as the netlogon service, where to 
look for netlogon.bat, if I name it [netlogon$]?

Thanks.

-- 
Ciao,
  Marco.

...Stupid Dream, Porcupine Tree 1999

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Adding printer stops with Operation could not be completed

2003-03-01 Thread Tor Bechmann Sørensen
When trying to add the drivers downloaded  extracted from HP 
(lj456ps.inf from lj632en.exe) I get the following message:

Unable to install HP LaserJet 5P/5MP Postscript, Windows NT 4.0 or 200, 
Intel driver. Operation could not be completed.

I also tried installing win95/98 drivers. In this case some files are 
copied but then I get the equivalent of the above message for 95/98.

I am adding them from a windows XP machine. I am loggin onto the samba 
shares with my account which is in the staff group on the server.

When I try to change some settings in the properties, like hold 
mismatched documents I get an access denied error message.



Ive set up my smb.conf like this (relevant lines only):

[global]
  printer admin = @staff

[print$]
path = /var/prndrv
guest ok = no
browseable = yes
read only = yes
write list = @staff

/var/prndrv looks like this  

drwxrwxr-x2 root staff4096 Mar  2 03:07 W32ALPHA
drwxrwxr-x2 root staff4096 Mar  2 03:08 W32MIPS
drwxrwxr-x2 root staff4096 Mar  2 03:08 W32PPC
drwxrwxr-x2 root staff4096 Mar  2 05:18 W32X86
drwxrwxr-x2 root staff4096 Mar  1 20:43 WIN40

and /var/prndrv itself has same ownership/permissions.

I am using samba 2.2.5. 

The host specific log noodless.log (noodless is the win client i use to 
add the drivers from), shows no error messages. It does give a lot of 
messages, too much to quote here, but none of them are informative to me. 

Help would be appreciated

Regards 
Tor Bechmann Sorensen

-- 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Linux to windoze

2003-03-01 Thread naugaranch
I could do that with Red Hat 7.2 Using smb://netbios name/folder.  However,
it was apparently removed from Red Hat 8.0.  So, it depends on version of
Linux.

Tom

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf
Of Jim
Sent: Saturday, March 01, 2003 5:03 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Re: Linux to windoze


I believe Mandrake uses something called Lisa for this although I am
not sure if it is win/lin.

pshook wrote:
 Is it possible to allow your Liunx box see your winbox, just like the
 winbox can see or browse the Linux box with Samba?



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Re: Hiding a share

2003-03-01 Thread Kurt Weiss
hi marco!



Which, in turn, leaves the share still visible in Network Neighborhood 
etc, as I initially reported.
Go figure. :)

i don't understand your question. - we're using browsable = no over 
years. but i did not find, where u'll see the share. i can't see the 
share with 'net view' and not in network neighbourhood. - only if it's 
added in network neighbourhood with adding networkresource then it's 
visible (in a view situations, w2k/xp does this automaticly).
*but* this feature of w2k/xp has nothing to do with visibility in 
network. it's only a directory in profiles, where the system lays *.lnk 
files to accessed shares. - so u mean it's visible.

if it's not so as descripted, then please send me smb.conf and 
versionnr. / version of used windows (incl. sp).

thx
gk
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Adding printer stops with Operation could not becompleted

2003-03-01 Thread Kurt Weiss

Unable to install HP LaserJet 5P/5MP Postscript, Windows NT 4.0 or 200, 
Intel driver. Operation could not be completed.
maybe it's this:
http://support.microsoft.com/default.aspx?scid=kb;en-us;158042


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [Fwd: samba 30alpha21 + NT4/2K WS-s]

2003-03-01 Thread John Newhouse
 Third problem is locally stored profiles. How I could make such set up that when 
 user logs out from WS , then WS
 would copy changed profile back to server and delete it from WS ?
 It's question of security and hard disk space..
 you can do that with a setting in gpedit.msc
 don't remember which one but i think i'll be obvious.

but is it possible to establish central sec policy/configuration for all nt4/w2k/xp/98 
workstations?
i've heard something about working with nt4, so that every time users logs on , nt4 ws 
retreives policy from
[netlogon]...
but can anoyone explain in more details ?



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [Fwd: samba 30alpha21 + NT4/2K WS-s]

2003-03-01 Thread John Newhouse
 On Fri, 2003-02-28 at 13:09, [EMAIL PROTECTED] wrote:
 [netlogon] share is like that:

 [netlogon]
comment = Network Logon Service
path = /home/samba/netlogon
guest ok = no
writable = no
browseable = yes
public = yes
 this is what i'm using ...
 [netlogon]
 path = /etc/samba/netlogon
 write list = root
 guest ok = Yes
 nt acl support = No

 do you have scriptPath set in ldap?
 i don't use logon scripts so i'm not sure you need it - just an idea.

yes, when I put scriptPath: START.BAT in ldap then it works and START.BAT gets 
executed.
but why it doesnt find it when in smb.conf logon script = START.BAT ?


 get_domain_user_groups: primary gid of user [john] is not a Domain group ! 
 get_domain_user_groups: You should fix
 it, NT doesn't like that
 i get that sometimes - i just ignore it...

btw it still comlpains same thing  although I added users primary group to Domain 
Users and Users group?
whats the catch?




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Samba-2.2.8pre2 compiler warnings

2003-03-01 Thread Nicholas Brealey
Hello

I just compiled Samba-2.2.8pre2 on 4 different systems:

1) Solaris 7 + cc: WorkShop Compilers 5.0 98/12/15 C 5.0
2) Solaris 9 + cc: WorkShop Compilers 5.0 98/12/15 C 5.0
3) Solaris 9 + cc: Forte Developer 7 C 5.4 2002/03/09
4) IRIX 6.5 + MIPSpro Compilers: Version 7.30
It compiled OK on all systems. I only ran it on 2) since the
other systems are 'production' systems. It seems to run OK.
There were a number of compiler warnings though.

Two of the warnings looks like they could be serious:

CLITAR
==
client/clitar.c, line 688: warning: argument #4 is incompatible with prototype:
prototype: pointer to uint : include/proto.h, line 303
argument : pointer to ullong
A 64 bit integer being used where a 32 bit integer is expected?
smbtar make not work on bigendian machines?
smbtar may not work for files over 2GB on little endian machines?
IRIX TDBUTIL

cc-1164 cc: WARNING File = tdb/tdbutil.c, Line = 46
  Argument of type SIG_ATOMIC_T * is incompatible with parameter of type
  sig_atomic_t *.
tdb_set_lock_alarm(gotalarm);

A fuller list of warnings is:

On 1) I got the following

rpc_parse/parse_spoolss.c, line 1209: warning: assignment type mismatch:
pointer to uchar = pointer to char
rpc_parse/parse_spoolss.c, line : warning: assignment type mismatch:
pointer to uchar = pointer to char
passdb/secrets.c, line 291: warning: argument #2 is incompatible with prototype:
prototype: pointer to char : include/proto.h, line 5018
argument : pointer to const char
lib/util.c, line 62: warning: initializer does not fit or is out of range: -1

tdb/tdbutil.c, line 46: warning: argument #1 is incompatible with prototype:
prototype: pointer to int : include/../tdb/tdb.h, line 130
argument : pointer to volatile int
smbd/quotas.c, line 404: warning: argument #2 is incompatible with prototype:
prototype: pointer to int : /usr/include/rpc/xdr.h, line 340
argument : pointer to uint
smbd/quotas.c, line 408: warning: argument #2 is incompatible with prototype:
prototype: pointer to int : /usr/include/rpc/xdr.h, line 340
argument : pointer to uint
smbd/quotas.c, line 412: warning: argument #2 is incompatible with prototype:
prototype: pointer to int : /usr/include/rpc/xdr.h, line 340
argument : pointer to uint
client/clitar.c, line 688: warning: argument #4 is incompatible with prototype:
prototype: pointer to uint : include/proto.h, line 303
argument : pointer to ullong
Compiling tdb/tdbutil.c with -KPIC
tdb/tdbutil.c, line 46: warning: argument #1 is incompatible with prototype:
prototype: pointer to int : include/../tdb/tdb.h, line 130
argument : pointer to volatile int
Compiling nsswitch/winbind_nss.c with -KPIC
nsswitch/winbind_nss.c, line 600: warning: argument #2 is incompatible with 
prototype:
prototype: pointer to int : nsswitch/winbind_nss.c, line 529
argument : pointer to uint
(plus about 20 similar messages in nsswitch/winbind_nss.c).



On 2) I get the same warnings as 1).

On 3) I get the same as 1) and 2) with the following additions/changes:

Compiling passdb/pass_check.c
passdb/pass_check.c, line 669: warning: implicit function declaration: crypt
Compiling client/clitar.c
client/clitar.c, line 688: warning: argument #4 is incompatible with prototype:
prototype: pointer to unsigned int : include/proto.h, line 303
argument : pointer to unsigned long long
Compiling smbwrapper/smbw.c with -KPIC
smbwrapper/smbw.c, line 1413: warning: implicit function declaration: _fork
Compiling smbwrapper/smbw_dir.c with -KPIC
smbwrapper/smbw_dir.c, line 570: warning: implicit function declaration: _getcwd
Compiling smbwrapper/wrapped.c with -KPIC
smbwrapper/wrapped.c, line 39: warning: implicit function declaration: smbw_path
smbwrapper/wrapped.c, line 40: warning: implicit function declaration: smbw_open
(plus lots of similar messages).
On 4) I there are lots of warnings but these are the most interesting ones:

Compiling smbd/password.c
cc-1164 cc: WARNING File = smbd/password.c, Line = 664
  Argument of type const char * is incompatible with parameter of type char \
*
  .
setnetgrent(group);
^
Compiling smbd/reply.c
cc-1552 cc: WARNING File = smbd/reply.c, Line = 2575
  The variable data is set but never used.
char *data;
  ^
 cc-1552 cc: WARNING File = rpc_server/srv_spoolss_nt.c, Line = 335
  The variable i is set but never used.
int i;

Compiling rpc_parse/parse_spoolss.c
cc-1515 cc: WARNING File = rpc_parse/parse_spoolss.c, Line = 1209
  A value of type char * cannot be assigned to an entity of type
  unsigned char *.
r_u-data = prs_alloc_mem(ps, r_u-size);
  ^
cc-1515 cc: WARNING File = rpc_parse/parse_spoolss.c, Line = 
  A value of type char * cannot be assigned to an 

Re: client: browse doesn't work with only win98 in workgroup

2003-03-01 Thread Derrell . Lipman
[EMAIL PROTECTED] writes:

 Christopher R. Hertel [EMAIL PROTECTED] writes:

 I am interested in looking into this, but I won't have time until the 
 weekend.

 ...

 In the mean time, I have modified smbw_dir.c to include a new function
 smbw_browse_workgroup_alternate() with the following patch.  The code is
 basically stolen from nmblookup.c.

More testing (and the Duh! factor upon reviewing the code) reveals that the
code I added does not find all hosts in a workgroup; it finds some of the
hosts.  Actually, it finds _one_ host each time it's run, not necessarily the
same host each time.  I'll have to work on this some more if the
cli_session_request() method can't be made to work properly with win98 and
win95 machines as master browsers.

Derrell


Re: client: browse doesn't work with only win98 in workgroup

2003-03-01 Thread Christopher R. Hertel
[EMAIL PROTECTED] wrote:
 
 [EMAIL PROTECTED] writes:
 
  Christopher R. Hertel [EMAIL PROTECTED] writes:
 
  I am interested in looking into this, but I won't have time until the
  weekend.
 
  ...
 
  In the mean time, I have modified smbw_dir.c to include a new function
  smbw_browse_workgroup_alternate() with the following patch.  The code
  is basically stolen from nmblookup.c.
 
 More testing (and the Duh! factor upon reviewing the code) reveals
 that the code I added does not find all hosts in a workgroup; it finds
 some of the hosts.  Actually, it finds _one_ host each time it's run,
 not necessarily the same host each time.  I'll have to work on this some
 more if the cli_session_request() method can't be made to work properly
 with win98 and win95 machines as master browsers.

Derrell,

Can you give me a better idea of what you are trying to do?

Above, you say you are trying to find all hosts that are members of a given
workgroup.  The question is: why?  What is it that you are actually trying
to accomplish?

Keep in mind that there is a *very* big difference between the set of hosts
that are members of a workgroup and the set of servers offering services
within that workgroup.  Two distinct systems are used to gather those two
lists.

Chris -)-  

-- 
Samba Team -- http://www.samba.org/ -)-   Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/   -)-   ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/ -)-   [EMAIL PROTECTED]
OnLineBook -- http://ubiqx.org/cifs/-)-   [EMAIL PROTECTED]


Re: client: browse doesn't work with only win98 in workgroup

2003-03-01 Thread Derrell . Lipman
Christopher R. Hertel [EMAIL PROTECTED] writes:

 Derrell,

 Can you give me a better idea of what you are trying to do?

 Above, you say you are trying to find all hosts that are members of a given
 workgroup.  The question is: why?  What is it that you are actually trying
 to accomplish?

I'm working on providing a tree-style view of the network in a fashion similar
to what Windows Explorer does.  The top level of an SMB/CIFS network is
something like Microsoft Windows Network.  The next level down is the list
of workgroups/domains within the network; then the hosts within each
workgroup; then the shares within each share, etc.  I don't know what version
of Windows will be the master browser, and I don't want to force it by using
Samba as the master browser.  Therefore I have to be able to enumerate the
hosts within a workgroup regardless of what versions of Windows happen to be
on the network.

 Keep in mind that there is a *very* big difference between the set of hosts
 that are members of a workgroup and the set of servers offering services
 within that workgroup.  Two distinct systems are used to gather those two
 lists.

The latter works fine.  If I already know the host name, I can see the shares
on that host.

The problem is enumerating the hosts within a workgroup.  In the case of
smbwrapper and smbsh, one is supposed to be able to do:

  ls /smb

to see the list of workgroups/domains, and

  ls /smb/WORKGROUP

to see the list of hosts within the workgroup WORKGROUP, and

  ls /smb/WORKGROUP/HOST

to see a list of shares on the computer called HOST.

All of these work with the method implemented in smbwrapper, except for
enumerating the list of hosts within a workgroup where the master browser for
the workgroup is a Windows 98 or Windows 95 machine.  If there is a Windows
2000 server acting as the master browser for the workgroup, then obtaining the
list of hosts within the workgroup works fine.  However, the
cli_session_request() call fails (gets a result of 0x83 from the peer) when
the master browser is a win98 machine, so the list of hosts within the
workgroup is therefore unavailable.

Does this help clarify the problem?  If not, please query me again and I'll
try to explain differently.

Thanks for your help!

Derrell


auto-detecting krb versions for build

2003-03-01 Thread Jim McDonough




As some of you may have noticed, the UL builds on the farm don't work.  The
culprit is the pre- 0.5 heimdal that is installed, as it doesn't have
AP_OPTS_USE_SUBKEY, which is needed to do password changes.  Unless someone
knows how to accomplish password changes to a win KDC without it, we need
to be able to detect the package and release of kerberos installed.
Heimdal before 0.5 doesn't have it.  I'm not sure how far you have to go
back in MIT to not find it.

krb5-config takes a --version option and prints something like:
heimdal 0.4d
$Id: krb5-config.in,v 1.8 2001/01/29 06:56:51 assar Exp $

or in the case of MIT:
Kerberos 5 release 0.0.0

Yes, 0.0.0, but I'm using a dev version.   In any case, I'd like to take
that output, and if it has heimdal, make a decision based on the
number...since I'm not a wiz (more like a whiz) at these sorts of string
cutting/comparing in shells...anyone want to tell me how to do it?


Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA

[EMAIL PROTECTED]
[EMAIL PROTECTED]

Phone: (207) 885-5565
IBM tie-line: 776-9984



Windows client disconnect identification

2003-03-01 Thread Yuval Hager
Hi,

The scenario I am testing is this:

- Open an MS word file from windows client A
- Disconnect the network cable from that windows client (emulate client
failure)
- Try to open the file from windows client B - file is locked.
- Wait a few minutes (see below - the exact time is the issue here)
- Try to open the file from windows client B - file is opened RW.

I am wondering what sets the time that it will take for samba to find
out that the first client is gone.

At first, I tried to use the deadtime variable - but it is only valid
when there are no open files (by the way, why?).

Then I tried to set various timeouts in the TCP socket definition
(socket options, various sysctl values), nothing worked.

The lock release time is incosistent, and goes between 10 to over 20
minutes. I am wondering how can I shorten this timeout..

Here a transcript from the log, this time shows a 23 minutes timeout:

[2003/02/28 18:22:42, 0] locking/posix.c:posix_fcntl_lock(662)
  on 32 bit NFS mounted file systems.
[2003/02/28 18:46:05, 0] lib/util_sock.c:read_socket_data(431)
  read_socket_data: recv failure for 4. Error = No route to host

Pay attention that the error came from read() and not from select(). How
can read timeout be controlled? Why does receive_message_or_smb() calls
receive_smb() without any timeout?

I am using samba-3.0-alpha20 on a Linux 2.4.18 machine, and windows 2k
clients.

Thanks,

--yuval



Re: auto-detecting krb versions for build

2003-03-01 Thread Love
Jim McDonough [EMAIL PROTECTED] writes:

 As some of you may have noticed, the UL builds on the farm don't work.  The
 culprit is the pre- 0.5 heimdal that is installed, as it doesn't have
 AP_OPTS_USE_SUBKEY, which is needed to do password changes.  Unless someone
 knows how to accomplish password changes to a win KDC without it, we need
 to be able to detect the package and release of kerberos installed.
 Heimdal before 0.5 doesn't have it.  I'm not sure how far you have to go
 back in MIT to not find it.

Heimdal before 0.5 didn't have AP_OPTS_USE_SUBKEY, however I think it
allways generated and used a subkey anyway, so defining it to 0 should make
it work.

 krb5-config takes a --version option and prints something like:
 heimdal 0.4d
 $Id: krb5-config.in,v 1.8 2001/01/29 06:56:51 assar Exp $

 or in the case of MIT:
 Kerberos 5 release 0.0.0

 Yes, 0.0.0, but I'm using a dev version.   In any case, I'd like to take
 that output, and if it has heimdal, make a decision based on the
 number...since I'm not a wiz (more like a whiz) at these sorts of string
 cutting/comparing in shells...anyone want to tell me how to do it?

`expr expr1 : expr2` or case statement is usully what I use.

Love


Re: client: browse doesn't work with only win98 in workgroup

2003-03-01 Thread Richard Sharpe
On Sat, 1 Mar 2003 [EMAIL PROTECTED] wrote:

 Christopher R. Hertel [EMAIL PROTECTED] writes:
 
 I'm working on providing a tree-style view of the network in a fashion similar
 to what Windows Explorer does.  The top level of an SMB/CIFS network is
 something like Microsoft Windows Network.  The next level down is the list
 of workgroups/domains within the network; then the hosts within each
 workgroup; then the shares within each share, etc.  I don't know what version
 of Windows will be the master browser, and I don't want to force it by using
 Samba as the master browser.  Therefore I have to be able to enumerate the
 hosts within a workgroup regardless of what versions of Windows happen to be
 on the network.

Hmmm, are you using libsmbclient?

Regards
-
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com



Re: client: browse doesn't work with only win98 in workgroup

2003-03-01 Thread Christopher R. Hertel
Okay, I understand the problem now.

The problem is that W/9x boxes do not recognize the generic *SMBSERVER
name in the NBT Session Setup Request.  Also, W/9x boxes will send back an
error if the called name is not correct in the NBT Session Setup Request.
You should get a NEGATIVE SESSION RESPONSE (0x83) message with an error code
of:
  0x82:  Called Name Not Present

Since W/9x systems do not support the generic *SMBSERVER name, this error
message is correct.  Basically, it's the NBT equivalent of That port isn't
listening for a connection.

The solution is to find the Server Service name on the remote machine.
This is typically done by sending a Node Status query and looking for a name
with a suffix byte value of 0x20.

More inline below...

[EMAIL PROTECTED] wrote:
 
 Christopher R. Hertel [EMAIL PROTECTED] writes:
 
  Derrell,
 
  Can you give me a better idea of what you are trying to do?
 
  Above, you say you are trying to find all hosts that are members of a
  given workgroup.  The question is: why?  What is it that you are
  actually trying to accomplish?
 
 I'm working on providing a tree-style view of the network in a fashion
 similar to what Windows Explorer does.  The top level of an SMB/CIFS
 network is something like Microsoft Windows Network.  The next level
 down is the list of workgroups/domains within the network;

Okay.  At this level what you need to do is talk to *a\ny* Local Master
Browser on the local LAN.  If you know a specific workgroup name you can use
that, otherwise you can find a list of workgroups by querying for the
\x01\x02__MSBROWSE__\x0201 name.  (That last 01 is the suffix byte,
value 0x01).

If the network is relatively stable, the LMBs will have exchanged data with
one another, and any LMB will have the list of all other workgroups that are
known.

Anyway, once you have one (or more) LMB IP addresses, you can try to query
for the Browse List.  In this case, you want only the workgroup/domain
entries, so what you should see on the wire is a NetServerEnum2 Domain Enum
request.

 then the hosts within each workgroup;

Nope.  You can only get the list of servers in the workgroup that are
advertising services.  The list of all hosts which are workgroup members is
not kept by the browse service.

...but that's not what you really want, anyway.  What you really want is the
list of known servers.  That's a NetServerEnum2 with all the server type
bits turned on.  The LMB (or any available backup browser) should have this
list.

 then the shares within each share, etc.

Shares offered by the server.  Okay.  Note that some servers require
authentication before they allow enumeration of shares.

 I don't know what version of Windows will be the master browser, and I
 don't want to force it by using Samba as the master browser.

Right.

 Therefore I have to be able to enumerate the hosts within a workgroup
 regardless of what versions of Windows happen to be on the network.

That's not a problem, as long as you have a valid CALLED name in the NBT
Session Request.  Samba ignores the CALLED name, W/NT and W2K accept the
generic *SMBSERVER name (so Samba can 'guess'), and I don't know about
W/XP.  W/9x, as you've seen, requires the correct name in this field.

  Keep in mind that there is a *very* big difference between the set of
  hosts that are members of a workgroup and the set of servers offering
  services within that workgroup.  Two distinct systems are used to
  gather those two lists.
 
 The latter works fine.  If I already know the host name, I can see the
 shares on that host.

No.  That's not what I said.
The latter in my note above is the set of servers offering services
within a workgroup which is exactly what you're having trouble finding.

 The problem is enumerating the hosts within a workgroup.

I know that this is pedantic, but it's important to understand that there is
a difference between the set of hosts in a workgroup and the servers
offering SMB services in the workgroup.  A host may be a client and it may
not be offering SMB services, in which case it will not show up when you try
listing the servers in the workgroup.

 In the case of smbwrapper and smbsh, one is supposed to be able to do:
 
   ls /smb
 
 to see the list of workgroups/domains, and
 
   ls /smb/WORKGROUP
 
 to see the list of hosts within the workgroup WORKGROUP, and

...all of the servers in the workgroup...

   ls /smb/WORKGROUP/HOST
 
 to see a list of shares on the computer called HOST.

Right.  We leverage that hierarchy with the SMB URL.  See:
  http://www.ietf.org/internet-drafts/draft-crhertel-smb-url-04.txt

 All of these work with the method implemented in smbwrapper, except for
 enumerating the list of hosts within a workgroup where the master browser
 for the workgroup is a Windows 98 or Windows 95 machine.

Ah!  Okay.  As Richard asked... What tool are you using (libsmbclient?) to
do this?  It may be that you need to do the extra reverse-resolution step
yourself.

 If there is a 

Re: client: browse doesn't work with only win98 in workgroup

2003-03-01 Thread Richard Sharpe
On Sat, 1 Mar 2003, Christopher R. Hertel wrote:

 Okay, I understand the problem now.
 
 The problem is that W/9x boxes do not recognize the generic *SMBSERVER
 name in the NBT Session Setup Request.  Also, W/9x boxes will send back an
 error if the called name is not correct in the NBT Session Setup Request.
 You should get a NEGATIVE SESSION RESPONSE (0x83) message with an error code
 of:
   0x82:  Called Name Not Present
 
 Since W/9x systems do not support the generic *SMBSERVER name, this error
 message is correct.  Basically, it's the NBT equivalent of That port isn't
 listening for a connection.
 
 The solution is to find the Server Service name on the remote machine.
 This is typically done by sending a Node Status query and looking for a name
 with a suffix byte value of 0x20.

There is code in libsmbclient to deal with this problem ...

Regards
-
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com



Re: samba + w2k + kerberos + trusted realm

2003-03-01 Thread Steve Langasek
On Sun, Mar 02, 2003 at 01:44:22AM +0100, Love wrote:

  - Using a keytab file would solve the problem below. Using /etc/krb5.keytab
  is bad idea, how about a own keytab for samba ? Doing hoops of strace stuff
  seems, well, strange.

  Why is using /etc/krb5.keytab a bad idea?  The only reason I've ever seen
  for using separate keytabs is if you want different services to run in
  separate security contexts.  Samba has to run as root, so
  /etc/krb5.keytab seems appropriate to me (as much as any keytab is
  appropriate -- there seem to still be some issues with using the keytab
  at all).

 What is it that limit samba to root ? When I use samba with afs beeing root
 will certenly not help samba access files, what else do samba need.

While you wouldn't need to be root to gain access to a user's AFS-based
files, uid-based access control is at the core of Samba's current
implementation.  Using an alternative keytab is only a benefit if this
changes.

 This is not what I free is the important part of my mail. And the only
 reason why I did the comment was that the comment in the samba code that
 did hoops to store the key in the auth context instead of just using a
 keytab.

Well, it's the part I felt I could comment on, since I don't know the
Samba Kerberos code all that well. :)  It is my understanding that the
key is being stored in the secrets file instead of in a keytab because
Samba also needs to have the plaintext password for salting, so until
this is addressed, storing the keys in a keytab would only serve to
confuse admins familiar with traditional Unix keytab handling.  Or has
this been addressed when I wasn't looking?

-- 
Steve Langasek
postmodern programmer


pgp0.pgp
Description: PGP signature


Re: samba + w2k + kerberos + trusted realm

2003-03-01 Thread Luke Howard

What is it that limit samba to root ? When I use samba with afs beeing root
will certenly not help samba access files, what else do samba need.

SAMBA does need to bind to privileged ports.

-- Luke

--
Luke Howard | PADL Software Pty Ltd | www.padl.com


Re: samba + w2k + kerberos + trusted realm

2003-03-01 Thread Love
Luke Howard [EMAIL PROTECTED] writes:

What is it that limit samba to root ? When I use samba with afs beeing root
will certenly not help samba access files, what else do samba need.

 SAMBA does need to bind to privileged ports.

Ok, sure. Now concentrate on the other issues :)

Its not that simple as my patch it since samba breaks itself after a couple
of hours and the key seem to change. Dunno what key, if its the in memory
key or the key in the (ad/kdc) database.

Love


Re: Samba doesn't free network resource with XP clients

2003-03-01 Thread Christopher R. Hertel
Charles Bueche wrote:
 
 Hi,
 
 OK, I understand why this fix wasn't implemented as such, but still, my
 problem remain. Here is a copy of my post to [EMAIL PROTECTED] Subject is
 Samba doesn't free network resource with XP clients, and the previous
 post, on 21.2.03, title 2.2.7a breaks on ATM stack on AIX 4.3.
 
 I would appreciate having your opinion on the best way to solve this
 problem.

My opinion is that the best way to slove this problem is to figure out what
is causing it and then fix whatever is broken.

One random thought is to look at the socket options parameter in smb.conf
and enable SO_KEEPALIVE  ...or perhaps use the keepalive parameter.  I
don't know if these will fix anything because I can't tell from where I sit
what the problem really is.  I can't offer you any solutions if I don't know
what is actually wrong.  I can only offer guesses.

Good luck.

Chris -)-

-- 
Samba Team -- http://www.samba.org/ -)-   Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/   -)-   ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/ -)-   [EMAIL PROTECTED]
OnLineBook -- http://ubiqx.org/cifs/-)-   [EMAIL PROTECTED]


Re: [Samba] [Fwd: samba 30alpha21 + NT4/2K WS-s]

2003-03-01 Thread John Newhouse
 On Fri, 2003-02-28 at 13:09, [EMAIL PROTECTED] wrote:
 [netlogon] share is like that:

 [netlogon]
comment = Network Logon Service
path = /home/samba/netlogon
guest ok = no
writable = no
browseable = yes
public = yes
 this is what i'm using ...
 [netlogon]
 path = /etc/samba/netlogon
 write list = root
 guest ok = Yes
 nt acl support = No

 do you have scriptPath set in ldap?
 i don't use logon scripts so i'm not sure you need it - just an idea.

yes, when I put scriptPath: START.BAT in ldap then it works and START.BAT gets 
executed.
but why it doesnt find it when in smb.conf logon script = START.BAT ?


 get_domain_user_groups: primary gid of user [john] is not a Domain group ! 
 get_domain_user_groups: You should fix
 it, NT doesn't like that
 i get that sometimes - i just ignore it...

btw it still comlpains same thing  although I added users primary group to Domain 
Users and Users group?
whats the catch?






Re: setting up SAMBA 1.9.17p4

2003-03-01 Thread John E. Malmberg
Maruyama, Kazutoshi [EMAIL PROTECTED] wrote:
Hello,

I have a question. 
I am try to setting up SAMBA 1.9.17p4. 
(I am using OpenVMS 6.2, so I guess I cannot use the other samba version.)
My windows cliant is Windows 2000.
As I pointed out in my previous message, for that to work, you really 
need SAMBA 2.0.7 to work, even for the UNIX versions of SAMBA.

Otherwise you will have no communications or intermittant communication 
problems.  This is a protocol negotiation error that was fixed in SAMBA 
2.0.7.

I have no luck  to accessing VAX directory from Windows 2000. 

Please give me some suggetion. 
Encypted passwords must be disabled in the client, otherwise look at my 
previous message that was posted to the list just before yours came out.

Some people have been able to get Windows 2000 and early SAMBA to work. 
 The bug in the protocol incompatablility seems to hit some people and 
not others.

I assume that there is somehow I can see the directory from Windows 2000.
 
When I see the error log from LOG.SMB;1,  I got the message below.
Anybody knows how to fix the problem. 

** vms_file: no filespec available
** vms_stat: st = -1, mode = 001402
 size = 1476395086 
Can you do the steps in diagnostic.txt to make sure that you can connect 
locally?  If you do not have a copy of diagnostic.txt, a copy can be 
obtained from http://www.samba.org.

===orginal===
Processing section [homes]
doing parameter comment = Home Directories
doing parameter browseable = yes
doing parameter guest ok = yes
doing parameter path = /sys$sysdevice2
doing parameter create mode = 0750
pm_process() returned Yes
adding IPC service
== vms_file: file_spec: 
 - 
** vms_file: no filespec available
** vms_stat: st = -1, mode = 001402
 size = 1476395086
This looks like the user account used for access did not have access to 
one or more of the directories required to complete the login or access 
the file.

On my post that immediately preceded yours, I reference a FAQ that I 
wrote that should give you many other tips.

-John
[EMAIL PROTECTED]
Personal Opinion Only
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:

http://www.tuxedo.org/~esr/faqs/smart-questions.html


re: SAMBA 2.2.4 or 2.2.7a and broken pipe

2003-03-01 Thread John E. Malmberg
From: [EMAIL PROTECTED]
  (Carl Gunnar Linden, MSL Stockholm Sweden.) wrote:
  I am running OpenVMS V7.3 and
  Compaq TCP/IP Services for OpenVMS Alpha Version V5.3 - ECO 1

  I try to run SAMBA 2.2.4 or 2.2.7a. It works with TCPIP V5.3-18 but
 I think it stopped working since I applied the TCPIP_ECO V5.3-181
 patch.
snip
 Has anybody else seen something like this and what is a broken pipe?

A broken pipe indicates a general connection problem.  By it self it is 
not useful to tell you what the problem is.

I would try the nmblookup (OpenVMS), NET VIEW (DOS Command prompt) tests 
to see if you can get information that way.

There is a file diagnostic.txt that should be in the SAMBA distribution 
that describes how isolate some of these problems.  You can get a copy 
of it at http://www.samba.org.

The other thing to do is to increase the error level for the SMBD 
process.  Previous versions of SAMBA allowed this to be done by defining 
a SYSTEM wide logical.

SAMBA 2.0.6 allows the smbd process to be run interactively so that 
these tests can be more easily run.  I do not know if the SAMBA 2.2.x 
branch has this ability.

-John
[EMAIL PROTECTED]
Personal Opinion Only
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:

http://www.tuxedo.org/~esr/faqs/smart-questions.html


CVS update: samba/source/smbd

2003-03-01 Thread tridge

Date:   Sat Mar  1 10:47:38 2003
Author: tridge

Update of /home/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv28920

Modified Files:
server.c 
Log Message:
i forgot to commit the privilege db init call


Revisions:
server.c1.409 = 1.410

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/server.c?r1=1.409r2=1.410