Re: [Samba] PDC/BDC Questions

2004-01-30 Thread Andrew Bartlett
On Fri, 2004-01-30 at 15:11, Cybr0t McWhulf wrote:
 Sorry, that was a bit vague, my apologies.
 
 My real question is, in the event where netbios is not being
 passed between network segments  (In this particular case, a 
 WAN), where the PDC is at one site, and the BDC is at another, 
 are there any provisions for failover?  Or am I just going to 
 have to run them both as PDC's for their network segment?

You don't want inter-site netbios traffic anyway, so run each as a 'pdc'
and add local redundancy if you really think you need it.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] PDC/BDC Questions (fwd)

2004-01-30 Thread Cybr0t McWhulf
Cool, thanks alot, I really appreciate your time.

I'm extremely pleased with 3.0.x's stability, I don't think local segment failover is 
really going to be a huge issue.

Keep up the great work :)

 -- Cy




 Date: Fri, 30 Jan 2004 18:14:36 +1100
 From: Andrew Bartlett [EMAIL PROTECTED]
 To: Cybr0t McWhulf [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
 Subject: Re: [Samba] PDC/BDC Questions

 On Fri, 2004-01-30 at 15:11, Cybr0t McWhulf wrote:
  Sorry, that was a bit vague, my apologies.
 
  My real question is, in the event where netbios is not being
  passed between network segments  (In this particular case, a
  WAN), where the PDC is at one site, and the BDC is at another,
  are there any provisions for failover?  Or am I just going to
  have to run them both as PDC's for their network segment?

 You don't want inter-site netbios traffic anyway, so run each as a 'pdc'
 and add local redundancy if you really think you need it.

 Andrew Bartlett

 --
 Andrew Bartlett [EMAIL PROTECTED]
 Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
 Student Network Administrator, Hawker College   [EMAIL PROTECTED]
 http://samba.org http://build.samba.org http://hawkerc.net


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba, Lotus Notes Domino, PDF

2004-01-30 Thread Stefan . Iven




Hello list,

now I do not have a problem with Samba3. I have only a
question where I need some suggestions:

We have Lotus Notes Domino Server 6.5. This Server is
reachable via Internet and an Internetbrowser.
The application this Domino Server is running is an
projectmanagment system. A lot of different Companys are
working over that managment system for one project.

They are autenticatet by the Domino Server.
Users are able to append documents (Word, Excel, ACAD etc)
to the workflow.
But now not everyone has as example ACAD, so they are not able
to view ACAD documents.
So one way is, my be not the best, to use PDF format.
If we creat an PDF service server, to convert every document to
PDF we need to have every application installed on this server to
convert the documents.
Much better is, to use the applicaton on the client. A client without
as example ACAD will never go and append a ACAD document.
For that way, i need a PDF printer.

To arrange a PDF printer with SAMBA works. But like I told, this
printer is then reachable from internet, so I need to authenticate
the users.

So I think that Domino uses LDAP as userdatabase, and for printing
to the PDF printer the LDAP is also used.

Comming to the end: I'm not sure if this will work. I do not know if
I can get openldap to work with Domino, otherwise, I do not
know if the LDAP server from Domino will work for Samba.
And, I do not konw if this is realy a good, or maybe the worst
way to implement PDF Servervice.

So if someone has an idea, that will be very helpfully for me.

Thanks for your time.

MfG Stefan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba PDC Multiple workgroups/doamins

2004-01-30 Thread lascu ionel
 
It is possible to configure multiple workgroups/domains on a single Samba 
machine? 

 

__
Do you want a free e-mail for life ? Get it at http://www.email.ro/

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] RE: Back to 3.0.1, Winbind and Solaris 9 (Mike Dorofe ev )

2004-01-30 Thread Ganguly, Sapan

Hi Mike,

Thanks for replying!  I have tried that but I still have the same problem.
I think that PAM is doing its job, I've set up logging so that everything in
pam.conf logs to /var/log/pamlog.  In pamlog I see user 'ganguly' granted
access.  

There is something else that is stopping this working, I just can't see what
it is.  Any ideas?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: 30 January 2004 03:36
To: [EMAIL PROTECTED]
Subject: [Samba] RE: Back to 3.0.1, Winbind and Solaris 9 (Mike Dorofeev )


Hi Sapan!

See the Vol 13 Digest  MSG 34 of 28 Jan 04:

 here it is:
---
IT WORKS!!!
I can telnet, ftp, rsh... to my Samba 3.0.1 box (Solaris 9 sparc) here is
(at the end) my pam.conf (in case somebody is interested in) The trick is
commenting other accound... winbind... string in pam.conf!

My English is corrupted wnen i'm full 
#other  account sufficient  /usr/lib/security/pam_winbind.so.1

Thanks Andrew Barlett!
and since now  i just LOVE SAMBA :)

(BTW, samba 3.0.1 and 3.0.2rc tested on solaris 9 and worked OK!)

---

The pam.conf mentioned here is attached to the digest vol13 issue 49

Sincerely yours, Mike

  Yes, I used your pam.conf and I have the patch installed.  I can't 
  think what else the problem could be.
  
  I can't see what happens after I type in my password.  Pamlog looks 
  like this -
  
  Jan 29 11:28:27 sun001 login: [ID 634615 auth.debug]
  pam_authtok_get:pam_sm_authenticate: flags = 0
  Jan 29 11:28:31 sun001 login: [ID 378613 auth.debug] pam_dhkeys:
  user ganguly not found Jan 29 11:28:31 sun001 login: [ID 896952 
  auth.debug]
  pam_unix_auth: entering
  pam_sm_authenticate()
  Jan 29 11:28:31 sun001 login: [ID 219349 auth.debug] pam_unix_auth:
  user ganguly not found Jan 29 11:28:31 sun001 pam_winbind[1138]: [ID 
  572310 auth.info] Verify user `ganguly'
  Jan 29 11:28:31 sun001 pam_winbind[1138]: [ID 614614 auth.notice] user
  'ganguly' granted acces
  Jan 29 11:28:31 sun001 login[1138]: [ID 509786 auth.debug] roles
  pam_sm_authenticate, service = teln
  et user = ganguly ruser = not set rhost = pc8723_w2k.uk.trt.thales
  
  It tells me that the user is granted access but then nothing
  happens, I don't get a shell even though I have an entry in smb.conf 
  'template shell = /bin/bash'
  
  Strange huh?
  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Username/Password not passed to Samba

2004-01-30 Thread Markus Feldmann
Hallo
maybe you must do this.
look on picture.
Default is that WinXP sends not your username and your pasword but he sends
his Computer Authentification.

Your Properties must look like this in the picture. And you should more
watch in your smbd.log file.

mfg Markus F.

- Original Message - 
From: Peter Ulrich Kruppa [EMAIL PROTECTED]
To: Daniel Auman [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Wednesday, January 28, 2004 12:58 PM
Subject: Re: [Samba] Username/Password not passed to Samba


 On Wed, 28 Jan 2004, Daniel Auman wrote:

  Hi all,
 
  Using Samba 3.0.0beta3 on FreeBSD 4.9 and a WinXP SP1 client.  I was
able to
  join the domain with the WinXP machine, but I cannot log-on.  The
Windows
  error message is about the domain server not found,
  ^^^
 This sounds like a very fundamental problem: Are you sure you set
 your WINS server correctly on your XP box and can you ping it?
 (You shouldn't have been able to join the domain at all without
 that, but sometimes strange things happen).

 Uli.
  no machine account, etc.
  I set the log level to 3 and received the following output when I tried
to
  log-on:
 
  [2004/01/27 20:00:00, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  [2004/01/27 20:00:00, 3] smbd/uid.c:push_conn_ctx(287)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  [2004/01/27 20:00:00, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  [2004/01/27 20:00:00, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  [2004/01/27 20:00:00, 3] auth/auth.c:check_ntlm_password(216)
check_ntlm_password:  Checking password for unmapped user
  [EMAIL PROTECTED] with the new password interface
  [2004/01/27 20:00:00, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password:  mapped user is: [EMAIL PROTECTED]
  [2004/01/27 20:00:00, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
  [2004/01/27 20:00:00, 3] smbd/uid.c:push_conn_ctx(287)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
  [2004/01/27 20:00:00, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
  [2004/01/27 20:00:00, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
  [2004/01/27 20:00:00, 3] smbd/uid.c:fetch_sid_from_gid_cache(651)
fetch sid from gid cache 65534 -
  S-1-5-21-2504064135-877026010-4157169575-132069
  [2004/01/27 20:00:00, 3] smbd/uid.c:fetch_sid_from_gid_cache(651)
fetch sid from gid cache 65534 -
  S-1-5-21-2504064135-877026010-4157169575-132069
  [2004/01/27 20:00:00, 3] auth/auth.c:check_ntlm_password(265)
check_ntlm_password: guest authentication for user [] succeeded
  [2004/01/27 20:00:00, 3] smbd/password.c:register_vuid(201)
User name: nobody Real name: Unprivileged user
  [2004/01/27 20:00:00, 3] smbd/password.c:register_vuid(219)
UNIX uid 65534 is UNIX user nobody, and will be vuid 566
  [2004/01/27 20:00:00, 3] smbd/process.c:process_smb(878)
Transaction 30179 of length 90
  [2004/01/27 20:00:00, 3] smbd/process.c:switch_message(673)
switch message SMBtconX (pid 41343)
  [2004/01/27 20:00:00, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
  [2004/01/27 20:00:00, 3] lib/access.c:check_access(314)
check_access: no hostnames in host allow/deny list.
  [2004/01/27 20:00:00, 2] lib/access.c:check_access(325)
Allowed connection from  (192.168.1.10)
  [2004/01/27 20:00:00, 3] smbd/service.c:make_connection_snum(536)
Connect path is '/tmp' for service [IPC$]
  [2004/01/27 20:00:00, 3] lib/util_seaccess.c:se_access_check(267)
  [2004/01/27 20:00:00, 3] lib/util_seaccess.c:se_access_check(268)
se_access_check: user sid is
S-1-5-21-2504064135-877026010-4157169575-501
se_access_check: also S-1-5-21-2504064135-877026010-4157169575-514
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-32-546
se_access_check: also S-1-5-21-2504064135-877026010-4157169575-132069
  [2004/01/27 20:00:00, 3] smbd/vfs.c:vfs_init_default(201)
Initialising default vfs hooks
  [2004/01/27 20:00:00, 3] lib/util_seaccess.c:se_access_check(267)
  [2004/01/27 20:00:00, 3] lib/util_seaccess.c:se_access_check(268)
se_access_check: user sid is
S-1-5-21-2504064135-877026010-4157169575-501
se_access_check: also S-1-5-21-2504064135-877026010-4157169575-514
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-32-546
se_access_check: also S-1-5-21-2504064135-877026010-4157169575-132069
  [2004/01/27 20:00:00, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
  [2004/01/27 20:00:00, 3] smbd/service.c:make_connection_snum(692)
gdccdarryl (192.168.1.10) connect to service IPC$ initially as user
nobody
  (uid=65534, gid=65534) (pid 41343)
  

[Samba] smbprngenpdf printer driver?

2004-01-30 Thread Anders Norrbring

Hiya!
Can anybody recommend what the best Windows XP printer driver is to generate
pdf documents with the generator smbprngenpdf which is included in SuSE's
smb-client package?

Could it be the CUPS printer driver, or the Adobe?  Or something completely
different?

Anders Norrbring



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.1 and OpenLDAP 2.2.4 with TLS

2004-01-30 Thread Martin Ritchie
Hi all,

I've been searching the lists and web for an answer but i'm stumped hope 
some one here has an answer for me. As I'm new to this sysadmin role.
I have set up OpenLDAP to authenticate our linux users and exim MTAs. 
This all works fine with OpenLDAP only providing a ldaps:/// connection 
on 636.

However I cannot for the life of me get samba to speak tls to it. I've 
seen numerous suggestions of simply putting

ldap ssl = start_tls or
ldap ssl = on
in the smb.conf file but neither do the trick my dev platform that 
doesn't use tls works fine. However I get the following responses from 
the above two options.

with start_tls I get a not supported option
[EMAIL PROTECTED] source]# smbpasswd ritchiem
New SMB password:
Retype new SMB password:
Failed to issue the StartTLS instruction: Not Supported
Connection to LDAP Server failed for the 1 try!
smbldap_search_suffix: Problem during the LDAP search: (unknown) (Not 
Supported)
Failed to issue the StartTLS instruction: Not Supported
Connection to LDAP Server failed for the 1 try!
smbldap_search_suffix: Problem during the LDAP search: (unknown) (Not 
Supported)
Failed to find entry for user ritchiem.
Failed to modify password entry for user ritchiem

and with ldap ssl = on , the conection just dies

[EMAIL PROTECTED] source]#  smbpasswd ritchiem
New SMB password:
Retype new SMB password:
failed to bind to server with dn= cn=Manager,dc=kelvininstitute,dc=com 
Error: Can't contact LDAP server
(unknown)
Connection to LDAP Server failed for the 1 try!
Broken pipe

Now I'm guessing that the reason I get Not Supported from the 
start_tls is that my backeddb is a ldapam with a ldaps url and so all 
comms should be secure. However when running strace over the above 
command the reason that I get a broken pipe with ssl = on is that it is 
trying to send the dn= cn=Manager,dc=kelvininstitute,dc=com and password 
as plain text.

One final thing about the smb.conf file. Is the ldap port information 
actually used as when running testparm it doesn't show up in the output 
and the port to connect on seems to be determined by the backend passdb 
uri; either ldap for 386 or ldaps for 636. Is this so or am I missing a 
trick?

Any suggestions on how to make this go?

tia

--
Martin Ritchie
the Kelvin Institute
50, George Street
Glasgow
Scotland, UK
G1 1QE
www.kelvininstitute.com
+44 (0) 141 548 5719
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Blocked delivery of your email to jody.haynes@isunnetworks.com.persistent.co.in

2004-01-30 Thread sandeepd
 BLOCKED DELIVERY OF YOUR EMAIL TO [EMAIL PROTECTED] 

Your email has been stopped for reasons stated at the bottom of this mail.

If your message is HTML/RichText and wrongly reported as SPAM below 
send the email again in plain-text format. 

If your message is reported to have virus, please check your system 
for virii and clean it up. 

If you still think that your message is free of all the above, please 
report it to [EMAIL PROTECTED] or [EMAIL PROTECTED] 


Email was blocked due to the presence of a virus
Comment: Virus detected in the mail

/unpacked/file.zip - Win32/Mydoom.A worm
/unpacked/file.exe - Win32/Mydoom.A worm


End.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Permissions and authorities

2004-01-30 Thread Glenn Robinson
Hello,

We've just migrated from Netware to Samba and have only 1 problem that's
affecting our users.

When a user creates a new document in a directory the owner and group or
both set to root. The directories are owned by a specific user and there is
also a group associated with the directory.

I was expecting that any new documents created would have the same user and
owner as the directory within which they are being created.

What am I doing wrong here?

Thanks


Glenn
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] (Idiot outside) - smbprngenpdf printer driver?

2004-01-30 Thread Anders Norrbring
Well, I wasn't really awake I guess.. It's just a script that calls
GhostScript for pdf generation..  

But the question still stands, what IS the best quality printer driver to
use for GhostScript - pdf printing?  We need both colours and high
resolution..


Hiya!
Can anybody recommend what the best Windows XP printer driver is to generate
pdf documents with the generator smbprngenpdf which is included in SuSE's
smb-client package?

Could it be the CUPS printer driver, or the Adobe?  Or something completely
different?

Anders Norrbring



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Permissions and authorities

2004-01-30 Thread Glenn Robinson
Le ven 30/01/2004  11:37, Glenn Robinson a crit :

 I was expecting that any new documents created would have the same user
and
 owner as the directory within which they are being created.

Nope, they are created with the identity of the user on the box,
fe. uid = dmorel
gid = users

you can map users to different identities, but you'd probably rather not
to if you're starting. What your story suggests is you mapped your users
to the root account which is quite bad. Describe your setup a little
more.

 What am I doing wrong here?

Probably not reading the manual thoroughly enough :-)

D.Morel
-- 
***
[EMAIL PROTECTED]
OpenPGP public key: http://www.amakuru.net/dmorel.asc
28192ef126bc871757cb7d97f4a44536



Glenn
- Original Message - 
From: David Morel [EMAIL PROTECTED]
To: Glenn Robinson [EMAIL PROTECTED]
Sent: Friday, January 30, 2004 10:49 AM
Subject: Re: [Samba] Permissions and authorities

I'm aware that I can do things like mapping Windows user 'Administrator' to
Linux user 'root' in the smbusers file but I haven't touched this file.

I have a folder called apps which is owned by user root with a group of
root. I have the following share attributes in my smb.conf:

[apps]
comment = Applications
writeable = yes
path = /apps
write list = root, cuffm
create mode =  0666
directory mode = 0777
guest ok = no

I've had to set rw for users in create mode so that everyone can get access
to new files created in this share.

Glenn
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] (Idiot outside) - smbprngenpdf printer driver?

2004-01-30 Thread Chris Aitken
 
 But the question still stands, what IS the best quality printer driver to
 use for GhostScript - pdf printing?  We need both colours and high
 resolution..
 
 
 Hiya!
 Can anybody recommend what the best Windows XP printer driver is 
 to generate
 pdf documents with the generator smbprngenpdf which is included 
 in SuSE's
 smb-client package?
 
 Could it be the CUPS printer driver, or the Adobe?  Or something 
 completely
 different?

I use the HP Laserjet Color 5/5M PS

So you could use the PPD for that, along with Adobe or the CUPS dlls

Chris 

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba and Network Neighborhood

2004-01-30 Thread Lionel Laratte
Hi All,

I turned my Debian box into a file server on my home network.  What
happened is now no boxen except the localhost shows up in Network
Neighborhood on the Windows boxen.  All shares work fine and if I search
for the Linux server, I find it.  Has anyone ever run into this and
resolved it?  Three days of Googling have left me with the same problem
and a headache.  Thanks.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] SMBCACLS PROBLEMS !!! HELP NEEDED

2004-01-30 Thread ricardo silva
I am having a problem with smbcacls

[EMAIL PROTECTED]:/home/ricardo# smbcacls -S g:testgroup:r
//localhost/homes testfile -U ricardo
Password:
Failed to parse security descriptor
[EMAIL PROTECTED]:/home/ricardo#

Any ?









__
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
http://webhosting.yahoo.com/ps/sb/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Permissions and authorities

2004-01-30 Thread Glenn Robinson
Le ven 30/01/2004  11:37, Glenn Robinson a crit :

 I was expecting that any new documents created would have the same user
and
 owner as the directory within which they are being created.

Nope, they are created with the identity of the user on the box,
fe. uid = dmorel
gid = users

you can map users to different identities, but you'd probably rather not
to if you're starting. What your story suggests is you mapped your users
to the root account which is quite bad. Describe your setup a little
more.

 What am I doing wrong here?

Probably not reading the manual thoroughly enough :-)

D.Morel
-- 
***
[EMAIL PROTECTED]
OpenPGP public key: http://www.amakuru.net/dmorel.asc
28192ef126bc871757cb7d97f4a44536



Glenn
- Original Message - 
From: David Morel [EMAIL PROTECTED]
To: Glenn Robinson [EMAIL PROTECTED]
Sent: Friday, January 30, 2004 10:49 AM
Subject: Re: [Samba] Permissions and authorities

I'm aware that I can do things like mapping Windows user 'Administrator' to
Linux user 'root' in the smbusers file but I haven't touched this file.

I have a folder called apps which is owned by user root with a group of
root. I have the following share attributes in my smb.conf:

[apps]
comment = Applications
writeable = yes
path = /apps
write list = root, cuffm
create mode =  0666
directory mode = 0777
guest ok = no

I've had to set rw for users in create mode so that everyone can get access
to new files created in this share.

Glenn
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


This section looks ok. Can you post your full smb.conf ?
-- 
***
[EMAIL PROTECTED]
OpenPGP public key: http://www.amakuru.net/dmorel.asc
28192ef126bc871757cb7d97f4a44536

Here is the smb.conf file:


# Samba config file created using SWAT

# from localhost (127.0.0.1)

# Date: 2004/01/28 16:14:57

# Global parameters

[global]

workgroup = xx

netbios name = SAMBA

server string = Samba PDC

interfaces = 123.456.789.012

encrypt passwords = Yes

log level = 1

syslog = 0

time server = Yes

unix extensions = Yes

socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY

printcap name = lpstat

add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false %u

logon script = logon.bat

logon path = 

logon drive = g:

logon home = \\samba\%U

domain logons = Yes

os level = 255

preferred master = Yes

domain master = Yes

wins support = Yes

host msdfs = Yes

guest ok = Yes

printing = cups

veto files = /*.eml/*.nws/riched20.dll/*.{*}/

[netlogon]

path = /usr/local/samba/lib/netlogon

write list = root

[homes]

comment = %U

path = /home/borg/users/%U

read only = No

create mask = 0600

directory mask = 0775

map archive = No

browseable = No

[Data]

path = /home

read only = No

create mask = 0666

directory mask = 0775

guest ok = No

map archive = No

[apps]

comment = Applications

writeable = yes

path = /apps

write list = root,  cuffm

create mode = 0666

directory mode = 0777

guest ok = No

#valid users = @Public

[Printers]

comment = All Printers

path = /tmp

printable = Yes

browseable = No

[print$]

comment = Printer Drivers

path = /apps

write list = @ntadmin root

force group = ntadmin

create mask = 0664

[dfs]

path = /export/dfsroot

msdfs root = Yes






Glenn

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] printing

2004-01-30 Thread David Wolfson
I'm having trouble printing multiple copies from winXP machines on a print/file 
server.  It's a RedHat9 box, using a raw printer driver and CUPS, that will do 
multiple copies locally and from a win98 machine. Samba is my next logical point, but 
I'm ot having much luck.

Any suggestions please/

Dave

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WINS, must be master browser?

2004-01-30 Thread Craig White
On Thu, 2004-01-29 at 23:47, Tim Smith wrote:
 of course i have set the samba server to   wins support = yes
 
 I'm not that much of a dunce :)
 

only 1 wins server be lan subnet - you must shut wins off on the NT 4
server. Also, if the clients are expected to use the wins server, they
must be configured to do so - either manually or via dhcp

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] User access level.

2004-01-30 Thread Anders Norrbring

Well, now everything seems to be in place for the big leap to Linux for file
server and logon server.

But there is one big catch that I can't find any info about.  The default
user level mappings in a Windows XP SP1 / Samba 2.2.5 PDC setting.

Admin level is perfectly clear, but there is a group level Domain Users,
what is the corresponding Windows XP user level?  Will the user be a User
or Privileged User ?  If it's the lower level, how can I enable the Priv.
User level to be the active?  The Samba PDC is running with roaming
profiles, uses LDAP and is version 2.2.5 (alt. 2.2.8a).

Upgrading to Samba3 isn't an option, due to its tight integration with the
rest of my SuSE system. (SuSE Linux Standard Server 8).

Anders Norrbring


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Login time logging?

2004-01-30 Thread Remco Barendse
Hi all!

I need a setup that will log exactly when a user has logged in or out of 
samba.

Preferably I would like to have a separate list per user, but this can 
also be achieved with grep.

I found some solutions that rely on login script processing which is nice 
if your clients are running Win95/Win98 but for anything else it won't 
work.

Anybody know of a solution?

Thanks!!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] User access level.

2004-01-30 Thread Craig White
On Fri, 2004-01-30 at 05:32, Anders Norrbring wrote:
 Well, now everything seems to be in place for the big leap to Linux for file
 server and logon server.
 
 But there is one big catch that I can't find any info about.  The default
 user level mappings in a Windows XP SP1 / Samba 2.2.5 PDC setting.
 
 Admin level is perfectly clear, but there is a group level Domain Users,
 what is the corresponding Windows XP user level?  Will the user be a User
 or Privileged User ?  If it's the lower level, how can I enable the Priv.
 User level to be the active?  The Samba PDC is running with roaming
 profiles, uses LDAP and is version 2.2.5 (alt. 2.2.8a).
 
 Upgrading to Samba3 isn't an option, due to its tight integration with the
 rest of my SuSE system. (SuSE Linux Standard Server 8).

User access level is a function of the local machine - not the PDC. You
can however take these things in a lump by using groups...let's say that
all of your users are members of a group called 'all-users'. Then you
could add the 'DOMAIN\all-users' into the Power Users group on each
local machine. 

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] User access level.

2004-01-30 Thread Anders Norrbring
 Subject: Re: [Samba] User access level.
 
 On Fri, 2004-01-30 at 05:32, Anders Norrbring wrote:
  Well, now everything seems to be in place for the big leap to Linux for
 file
  server and logon server.
 
  But there is one big catch that I can't find any info about.  The
 default
  user level mappings in a Windows XP SP1 / Samba 2.2.5 PDC setting.
 
  Admin level is perfectly clear, but there is a group level Domain
 Users,
  what is the corresponding Windows XP user level?  Will the user be a
 User
  or Privileged User ?  If it's the lower level, how can I enable the
 Priv.
  User level to be the active?  The Samba PDC is running with roaming
  profiles, uses LDAP and is version 2.2.5 (alt. 2.2.8a).
 
  Upgrading to Samba3 isn't an option, due to its tight integration with
 the
  rest of my SuSE system. (SuSE Linux Standard Server 8).
 
 User access level is a function of the local machine - not the PDC. You
 can however take these things in a lump by using groups...let's say that
 all of your users are members of a group called 'all-users'. Then you
 could add the 'DOMAIN\all-users' into the Power Users group on each
 local machine.
 
 Craig


I was afraid of that... Alright, I'll set every user up individually after
their first logon, I was kind of hoping it would be controllable via user
group mappings in the Samba PDC.

Thanks anyway!
Anders Norrbring


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] using VSS on a samba server - no smb locks ?

2004-01-30 Thread Nir Livni
Hi all,

We are considering moving our VSS database from a Win2K server to a samba server.
All clients are Win2K clients.

I used the VSS tool testlock.exe to make sure the native lock mode can be used.
The test was successful, and I saw that an SMBlock transaction was performed, and a 
reply_lockingX was replied.

When I opened a VSS database on the samba server and started to use it - I saw no 
SMBlock operations.

Doesn't make sence to me, because some kind of locking must be done.

Any ideas ?

Thanks,
Nir
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] {Samba}Cannot list domain users and groups

2004-01-30 Thread Arif M. Rahaman
Hi,
I have a samba 2.2.8a configured on Freebsd 5.2. I have configured winbind
to where if you do a wbinfo -u command, i will get a list of all my
domain users. But when i do a getpwent, I only get a listing of all my
local accounts on my BSD box. What could be the problem.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Cannot install print driver on Windows XP while connected to domain

2004-01-30 Thread dhobner
Using the administrator samba account I am trying to install a printer
driver on a Windows XP machine while connected to a Samba domain.  It
appears that I do not have the appropriate permissions.  The install is
successful if I log in locally (not on the domain) to the machine. What do
I need to do to get this to work?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Login time logging?

2004-01-30 Thread David Morel
Le ven 30/01/2004 à 13:49, Remco Barendse a écrit :
 Hi all!
 
 I need a setup that will log exactly when a user has logged in or out of 
 samba.
 
 Preferably I would like to have a separate list per user, but this can 
 also be achieved with grep.
 
 I found some solutions that rely on login script processing which is nice 
 if your clients are running Win95/Win98 but for anything else it won't 
 work.
 
 Anybody know of a solution?
 
 Thanks!

have you had a look at the preexec and postexec directives ?!
-- 
***
[EMAIL PROTECTED]
OpenPGP public key: http://www.amakuru.net/dmorel.asc
28192ef126bc871757cb7d97f4a44536




signature.asc
Description: Ceci est une partie de message	=?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e=2E?=
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Cannot install print driver on Windows XP while connectedto domain

2004-01-30 Thread Chris Aitken
 Using the administrator samba account I am trying to install a printer
 driver on a Windows XP machine while connected to a Samba domain.  It
 appears that I do not have the appropriate permissions.  The install is
 successful if I log in locally (not on the domain) to the machine. What do
 I need to do to get this to work?

Is the domanin user set up as a printer admin in [global]?


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Add Printer Wizard - 3.0.2rc1 - still problem

2004-01-30 Thread Lee Thao
Tait Shrum wrote:
| We have a Samba 3.01 pre3 server that acts as a print server among other
| things.  When our users go to the add printer wizard in Windows, it
| doesn't show our samba server!  The only way to add a printer is by
| manually entering the path.  That's really inconvenient if you don't
| know the path.  :)  Is there some way we can resolve this?

I think this is what you are seeing

~   https://bugzilla.samba.org/show_bug.cgi?id=101

It's in the queue to be fixed.  But probably not for 3.0.1




cheers, jerry


Resolved yet?  Im on 3.0.2rc1 and still can't see printer in APW.

Lee.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] questions regarding SAMBA and Windows Terminal Server

2004-01-30 Thread Richard Harding
I currently have a debian web server, Win2k Exchange server as a PDC, 
and a Win2k Terminal Server.

I want to get rid of exchange and I am looking at putting openldap on 
the Debian box with email. If I did this I would want to get the Win2k 
TS to authenticate to the Debian openldap box. If I set up SAMBA could I 
get it to do so? I want only one place to manage user accounts and since 
I have to have them on the Debian machine to get the email accounts I am 
hoping SAMBA can help me with TS authentication. I can't seem to find 
much information on this however.

I would also wonder if anyone has gotten it to work with Win2k3 TS. 
Eventually I will be upgrading the server.

If not is there any way anyone knows of to drop exchange, use a second 
machine as Windows PDC to authenticate the TS to, but replicate that 
information to SAMBA as a secondary DC? That way I could still manage my 
user accounts on the openldap on the Debian machine and just get the 
accounts replicated up to the PDC running Windows?

Thanks for any info and advice you can offer in this situation.

Rick Harding
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.2 and Windows 2003 ADS.

2004-01-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Christian Arguello wrote:
| Hi.
|
| Giuseppe
|
| Ok, when i login in Windows 2000 as Administrador of the machine (not as
| a member of the Windows 2k domain) everything works fine, if i use the
| command net use * \\server\share, this command works ok, and also if I
| use smbclient //windows2000/share command to see my shared folders in
| windows 2000 it works fine. But if I login in the PC as a user of the
| Windows 2k domain, I can not use that command, but I still can see the
| Windows2000 and its shared folders from my Linux using the command
| smbclient //windows2000/share -k, and I also notice that in this case if
| I use the IP address of the Windows 2000 PC instead of its Netbios name,
| it works fine, I mean that if i use this command net use *
| \\IP_Address\share instead of  \\Netbios_name\share it works.
I've been trying to track this down, but have not been able
to pinpoint it yet.  My best guess is a kerberos configuration
issue.
The IP address connection is using NTLMSSP and the name
connection is using kerberos.  We're failing to decrypt the
krb5 ticket which is probably due to an encryption type.
Could you send me your krb5.conf?

cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAGnQ0IR7qMdg1EfYRAiYIAKCMAXsRs86WAV+37LIVv1v9V2zEGQCfY6D4
/FZErPSHM+pwx6rkgHAWM+A=
=8/hB
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.2 and Windows 2003 ADS.

2004-01-30 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Christian Arguello wrote:

| [EMAIL PROTECTED] root]# klist tickets
| klist: No credentials cache found
| (ticket cache FILE:tickets)
smbd doesn't use a keytab yet.  Its all done in memory.

| [libdefaults]
|  ticket_lifetime = 24000
|  default_realm = DOMAIN2003.COM
|  dns_lookup_realm = false
|  dns_lookup_kdc = false
|  default_tkt_enctypes = DES-CBC-MD5
|  default_tgs_enctypes = DES-CBC-MD5
Looks ok.  Do you have other kerberized services on
the box that require the default realm?
| And my smb.conf like this:
|
| [global]
| workgroup = domain2003
| security = ADS
| realm = domain2003.com
There was a time when the realm had to be defined in
the correct case (usually upper).  I can't remember if
we work around that now or not.


cheers, jerry
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAGnU9IR7qMdg1EfYRAmCUAKDP/xWj6e7FQbvlMkV30S4MckCQ6QCgjn2j
ZsIxJboIim8hhx5Kv0C4j24=
=qrhF
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] A possible error in the way nmbd fails to respond to certain request packets

2004-01-30 Thread Aaron Power
I have just speant several hours trying to nut out an error with a new 
installation of SAMBA 3, and the results may indicate something has changed 
with the way the Name Server (nmbd) responds to certain request. It could also 
be network stack related, but I am about at my limit of skills to diagnose it 
any further.

I have just installed Fedora Core 1 to a test server in order to play around 
with SAMBA 3. The exact version is SAMBA 3.0.0-15.

My network consists of three machines. All the machines are in a workgroup 
called DRWHO.
192.168.1.50  : TESTSERVER - The new Fedora machine
192.168.1.100 : K9 - A Windows 98 client
192.168.1.1   : TARDIS - An older SAMBA Server (Linux Kernel 2.4.9 / SAMBA 
2.0.10)

I used the SWAT wizard to configure the new server and set up a single share 
point called pub, which just allowed guest access to /tmp.

I then thought I would check out the new nbmlookup -S name tool to see what 
it would say about the different machines on the network. The results were as 
expected, so I won't repeat them here. I then went to the Win98 machine to 
compare these results with a nbtstat -a name command, and this is where the 
fun started.

Basically the Win98 machine kept responding saying that TESTSERVER was an 
unknown host. It correctly reported the results for itself and the older SAMBA 
server, TARDIS.

My first thought was that Fedora had set up some firewalling rules, even though 
I had turned it off during the configuration. But iptables -L showed that 
everything was set to ACCEPT.

So I fired up Ethereal on the new Fedora box, and watched what went across the 
network when I queried TESTSERVER from both its local console and from the 
Win98 box. From the local console the results were:-
Src=192.168.1.50 Dst=192.168.1.255 (broadcast) Name Query NB TESTSERVER00
followed by a response, then
Src=192.168.1.50 Dst=192.168.1.50 Name Query NBSTAT TESTSERVER00
followed by a response.

Everything as I expected to see it. However, from the Win98 box I just got 
three request packets, spaced about a second apart, but no response.

A quick check from the console of TESTSERVER showed that nmbd had bound itself 
to the network correctly:-
[EMAIL PROTECTED] root]# netstat -na
udp0  0 192.168.1.50:1370.0.0.0:*
udp0  0 0.0.0.0:137 0.0.0.0:*
udp0  0 192.168.1.50:1380.0.0.0:*
udp0  0 0.0.0.0:138 0.0.0.0:*

So, if Ethereal was showing the query packets turning up on the network 
interface, and nmbd was listening on that interface, why wasn't it responding?

So after much more fruitless time, running the nmbd daemon in interactive mode, 
with various levels of debug, searching google, and other online resources, I 
eventually (finally!) noticed in the Ethereal dumps that the exact request line 
from the Win98 box was:-
Src=192.168.1.100 Dst=192.255.255.255 (broadcast) Name Query NB TESTSERVER00

It seems that there was (and always has been) an error in my DHCP configuration 
file that meant that the Win98 machine was getting a 255.0.0.0 netmask, even 
though the rest of the network was working off a 255.255.255.0 netmask.

While this was an error, I can't see why it shouldn't have worked. The 
destination address (IP=192.255.255.255 / Ethernet=ff:ff:ff:ff:ff:ff) should 
still be acceptable to a service listening on 0.0.0.0, and there was certainly 
enough routing information to return a response back to the Win98 box on 
192.168.1.100.

Also, the Win98 box has been successfully working with the older SAMBA server 
for several years, so it seems that *something* has changed. It could be that 
the new Fedora IP stack was dropping the request before it got to SAMBA, or it 
might be that SAMBA was ignoring the request - I couldn't tell which. Also, 
there might be a very good reason why such changes were made, in which case 
this message can just server as a warning to others.

Thanks very much for your time, and thanks for the great software.
Aaron Power.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Hi

2004-01-30 Thread cesare . dalledonne
bR?NlN:d[;!0krW
$/
NO^p
CY_,6V{wk6O!%*_!)^I2?r*JQK`90VHpI;PCJW$)]`m?T
?x A72;
b[j5o?.C/nw??wgYka|?[~eH!-}ku~:?#_i5v~CNkDFFbWuDbKEx(8D!I]Dd7ey?
pys/% 1!5Ex.}2 $Qz
oK $hyRl?UOc3sIFu
#8F?Z$Qns|e%T75lO.1!k,?*v|[?545#q?%1a5fCi3ZXJm-WDx9CRB[a
ZO
HJ)(3
*3I'k}RvbwLe
gijpAA2(q8}XuuPT~b3M?#i
qM7]}^n?cx8DPz1zp%fw?/f*pC]qNF
%CmwJ{{upgkn
Ih?GZ{EPcQP7OW6fz;mCYWQbV1G8C/$$*Gus_iU(~?3qMU*dS'v[jsymen|s3V)|QMxw^G*OGWkBNFCm!ywHz8VGC6.qBC
Vy
L2}$D[#L
q{9lRu)Fn?TK$uE

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba for SCO Open Server

2004-01-30 Thread Abdullah Sekman
 I'm lookking for Samba for SCO Open Server  Best regards,Abdullah Sekman

___
Join Excite! - http://www.excite.com
The most personalized portal on the Web!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Debian package of 3.0.2rc1 available?

2004-01-30 Thread Christopher Odenbach
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Hi,

has anyone made a debian package of the current release candidate? I 
would like to test.

Christopher

- -- 
==
Dipl.-Ing. Christopher Odenbach
HNI Rechnerbetrieb
[EMAIL PROTECTED]
Tel.: +49 5251 60 6215
==
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAGgpphxiCJKeLY0IRAsERAJ9CymvFYLH8An+HnY4VznCIwpgetQCfVEHY
xQPn6ssNmiFLsTwo8uxTqvw=
=Fct3
-END PGP SIGNATURE-

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] [CodeProject] Use command smbmount

2004-01-30 Thread ngThien22
Hello

I have read help of command smbmount(or smbmnt) but i can not use this command.
Would you show me how to use it and give some examples about this command.
Please send me as soon as possible
my email: [EMAIL PROTECTED]
Thanks

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] [CodeProject] Use command smbmount

2004-01-30 Thread Ow Mun Heng


 -Original Message-
 From: ngThien22 [mailto:[EMAIL PROTECTED]
 Sent: Friday, January 30, 2004 3:48 PM
 To: CodeProject
 Subject: [Samba] [CodeProject] Use command smbmount
 
 
 Hello
 
 I have read help of command smbmount(or smbmnt) but i can not 
 use this command.
 Would you show me how to use it and give some examples about 
 this command.
 Please send me as soon as possible

mount -t smbfs -o username=tridge,password=foobar //fjall/test /data/test

Pretty explanatory.. Just type smbmount and press enter you'll get tat
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Virus Alert

2004-01-30 Thread interscan
01/30/2004 11:02:30 : Un virus detecte (WORM_MYDOOM.A) dans le fichier readme.scr que 
vous avez envoye a [EMAIL PROTECTED] Action: deleted.  Le mail examine contient votre 
adresse dans l'en-tete From:.  Votre ordinateur est peut etre infecte ou quelqu'un 
ayant votre adresse de mail dans le carnet d'adresses a ete infecte.  (Pour plus de 
securite, verifier votre ordinateur en utilisant un produit antivirus a jour).
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba for SCO Open Server

2004-01-30 Thread Rashkae
I can't speak for everyone, but you will likely have to contact SCO
for any support or packages.  SCO has openly made itself the 'enemy'
of any and all Open Source developers and supporters.  Your best
chance for community help is to migrate your server platform to
something else.

Sorry.

On Fri, Jan 30, 2004 at 10:35:44AM -0500, Abdullah Sekman wrote:
  I'm lookking for Samba for SCO Open Server  Best regards,Abdullah Sekman
 
 ___
 Join Excite! - http://www.excite.com
 The most personalized portal on the Web!
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] benchmark adn threshold

2004-01-30 Thread Lapin(c)

Hi all,

i'd like to know if there is a tool like an injector that permits to increase
progressively the load onto a Samba server. My aim is to define a threshold as
the number of concurrent users connected and accessing shares simultanously on a
samba3 PDC. I don't care about network transfer rate.

thanks for your answer


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] cups printing

2004-01-30 Thread Jens Kn.
hi i have some trouble with samba and cups.

i have a printerserver (debian), cups prints in raw mode.

if i print something in winxp i get a paper with the letters bdb
followed by the pages i wanted to print. after that i get an empty page too.

is there anybody who can help me?

greetings jens

extract of smb.conf:

smb.conf##

# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
   load printers = yes

# You may wish to override the location of the printcap file
   printcap name = /etc/printcap

# 'printing = cups' works nicely
   printing = cups

   guest account = nobody
#   invalid users = root

[printers]
   comment = All Printers
   browseable = yes
   path = /var/spool/cups
   printable = yes
   public = yes
   writable = yes
   create mask = 0777
   directory mask = 0777
   guest ok = yes
   use client driver = yes

#




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Skynet Mail Protection scan results

2004-01-30 Thread Skynet Mail Protection


---
This e-mail is generated by Skynet Mail Protection to warn you that the e-mail
sent by [EMAIL PROTECTED] to [EMAIL PROTECTED] is infected with virus: Win32/[EMAIL 
PROTECTED]
Deze e-mail is gegenereerd door Skynet Mail Protection om u te waarschuwen dat
de e-mail gestuurd door [EMAIL PROTECTED] naar [EMAIL PROTECTED] geinfecteerd is met 
Win32/[EMAIL PROTECTED]
Ce mail est généré par Skynet Mail Protection afin de vous prévenir que l'e-mail 
envoyé par [EMAIL PROTECTED] à [EMAIL PROTECTED] est infecté par le virus : 
Win32/[EMAIL PROTECTED]

Please contact your system administrator for further information.
Gelieve uw systeembeheerder te contacteren voor meer informatie.
Veuillez contacter votre administrateur système pour de plus amples informations.

If you are the sender:
Indien u de zender bent:
Si vous êtes l'expéditeur:
---
The scanned e-mail has your address in the From header field. Either your
computer is infected or someone's computer having your e-mail address in
the address book has been infected.
De gescande e-mail heeft uw adres in het From veld.  Dat betekent dat ofwel
jouw computer geinfecteerd is, ofwel dat iemand is geinfecteerd, die jouw e-mail
adres in zijn/haar adresboek heeft.
Le mail scanné contient votre adresse e-mail dans son en-tête De.
Soit votre ordinateur est infecté soit votre adresse e-mail est reprise dans
le carnet d'adresse d'un ordinateur infecté.

If you are the receiver:
Indien u de bestemmeling bent:
Si vous êtes le destinataire:
-
Please contact the sender: most likely he/she doesn't know he/she has a computer virus.
Gelieve de zender te contacteren: hoogst waarschijnlijk weet hij/zij niet dat hij/zij
geinfecteerd is met een computer virus.
Veuillez contacter l'expéditeur: le plus souvent, il/elle ne sait pas que son
ordinateur est infecté.

Actions taken for the infected files:
Ondernomen actie voor de geinfecteerde bestanden:
Actions prises pour les fichiers infectés:
-


The infected file was saved to quarantine with name: 1075458906-RAVi0UAZ5mt027611.
The file (part0002:tmapz.pif) attached to mail (with subject:Server Report) sent by 
[EMAIL PROTECTED] to [EMAIL PROTECTED]
is infected with virus: Win32/[EMAIL PROTECTED]
Cannot clean this file.
The mail was silently discarded because it contained dangerous code.


this is a copy of the e-mail header:

Received: from kay.skynet.be (kay.skynet.be [195.238.3.235])
by inas005.isp.belgacom.be (8.12.9/8.12.9/Skynet-IN-AS-2.03) with ESMTP id 
i0UAVAm8020499
for [EMAIL PROTECTED]; Fri, 30 Jan 2004 11:31:41 +0100
(envelope-from [EMAIL PROTECTED])
Received: from samba.org (f07v-7-84.d1.club-internet.fr [212.194.138.84])
by kay.skynet.be (8.12.9/8.12.9/Skynet-IN-2.32) with ESMTP id i0UARbri008942
for [EMAIL PROTECTED]; Fri, 30 Jan 2004 11:27:37 +0100
(envelope-from [EMAIL PROTECTED])


RAV AntiVirus for Linux i386 version: 8.4.2 (snapshot-20030212)

Scan engine 8.11 for i386.
Last update: Fri, 30 Jan 2004 01:31:44 +01
Scanning for 89397 malwares (viruses, trojans and worms).
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Skynet Mail Protection scan results

2004-01-30 Thread Skynet Mail Protection


---
This e-mail is generated by Skynet Mail Protection to warn you that the e-mail
sent by [EMAIL PROTECTED] to [EMAIL PROTECTED] is infected with virus: Win32/[EMAIL 
PROTECTED]
Deze e-mail is gegenereerd door Skynet Mail Protection om u te waarschuwen dat
de e-mail gestuurd door [EMAIL PROTECTED] naar [EMAIL PROTECTED] geinfecteerd is met 
Win32/[EMAIL PROTECTED]
Ce mail est généré par Skynet Mail Protection afin de vous prévenir que l'e-mail 
envoyé par [EMAIL PROTECTED] à [EMAIL PROTECTED] est infecté par le virus : 
Win32/[EMAIL PROTECTED]

Please contact your system administrator for further information.
Gelieve uw systeembeheerder te contacteren voor meer informatie.
Veuillez contacter votre administrateur système pour de plus amples informations.

If you are the sender:
Indien u de zender bent:
Si vous êtes l'expéditeur:
---
The scanned e-mail has your address in the From header field. Either your
computer is infected or someone's computer having your e-mail address in
the address book has been infected.
De gescande e-mail heeft uw adres in het From veld.  Dat betekent dat ofwel
jouw computer geinfecteerd is, ofwel dat iemand is geinfecteerd, die jouw e-mail
adres in zijn/haar adresboek heeft.
Le mail scanné contient votre adresse e-mail dans son en-tête De.
Soit votre ordinateur est infecté soit votre adresse e-mail est reprise dans
le carnet d'adresse d'un ordinateur infecté.

If you are the receiver:
Indien u de bestemmeling bent:
Si vous êtes le destinataire:
-
Please contact the sender: most likely he/she doesn't know he/she has a computer virus.
Gelieve de zender te contacteren: hoogst waarschijnlijk weet hij/zij niet dat hij/zij
geinfecteerd is met een computer virus.
Veuillez contacter l'expéditeur: le plus souvent, il/elle ne sait pas que son
ordinateur est infecté.

Actions taken for the infected files:
Ondernomen actie voor de geinfecteerde bestanden:
Actions prises pour les fichiers infectés:
-


The infected file was saved to quarantine with name: 1075465564-RAVi0UCQ4LI003068.
The file (part0002:readme.exe) attached to mail (with subject:Hello) sent by [EMAIL 
PROTECTED] to [EMAIL PROTECTED]
is infected with virus: Win32/[EMAIL PROTECTED]
Cannot clean this file.
The mail was silently discarded because it contained dangerous code.


this is a copy of the e-mail header:

Received: from cee.skynet.be (cee.skynet.be [195.238.2.101])
by inas007.isp.belgacom.be (8.12.9/8.12.9/Skynet-IN-AS-2.03) with ESMTP id 
i0UCPpBA028452
for [EMAIL PROTECTED]; Fri, 30 Jan 2004 13:25:57 +0100
(envelope-from [EMAIL PROTECTED])
Received: from samba.org (f07v-7-84.d1.club-internet.fr [212.194.138.84])
by cee.skynet.be (8.12.9/8.12.9/Skynet-IN-2.32) with ESMTP id i0UCIxLR025303
for [EMAIL PROTECTED]; Fri, 30 Jan 2004 13:19:00 +0100
(envelope-from [EMAIL PROTECTED])


RAV AntiVirus for Linux i386 version: 8.4.2 (snapshot-20030212)

Scan engine 8.11 for i386.
Last update: Fri, 30 Jan 2004 01:31:44 +01
Scanning for 89397 malwares (viruses, trojans and worms).
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] How to configure the /etc/pam.d/login to allow ADS accounts to log on linux box

2004-01-30 Thread Pedro Henrique Ponchio
Hello, 

How can I configure my /etc/pam.d/login file to allow the users from the AD to log on 
a linux client?

Today I can log but I receive this message:

-
sisreg:~# su domainuser
su: Authentication service cannot retrieve authentication info.
(Ignored)
sisreg:/root$
sisreg:/root$ whoami
domainuser
sisreg:/root$
-

Is it possible to the login entry on the PAM to create the home directory 
automatically, and set everything else (like profiles)?

Thks a lot!!!

- Pedro
---
Pedro Henrique C. Ponchio
Sao Paulo - Brazil - Fundacao Atech
(5511) 3040-7300 ramal 150
---
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] using VSS on a samba server - no smb locks ?

2004-01-30 Thread Jeremy Allison
On Fri, Jan 30, 2004 at 03:08:21PM +0200, Nir Livni wrote:
 Hi all,
 
 We are considering moving our VSS database from a Win2K server to a samba server.
 All clients are Win2K clients.
 
 I used the VSS tool testlock.exe to make sure the native lock mode can be used.
 The test was successful, and I saw that an SMBlock transaction was performed, and a 
 reply_lockingX was replied.
 
 When I opened a VSS database on the samba server and started to use it - I saw no 
 SMBlock operations.
 
 Doesn't make sence to me, because some kind of locking must be done.

Did you only test with one user ? Is so, an oplock will cause
no locking attempts to be seen on the wire (the client redirector
optimises them out when it has  an oplock).

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[samba] Help request setting w2000 to use Lexmark z25 printer on linux RH7.3 ru

2004-01-30 Thread DbHnsl

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Abwesenheitsnotiz: Hi

2004-01-30 Thread Wilhelm Karin
Sehr geehrter Mailpartner,

danke für Ihre Nachricht. Ich bin leider nicht im Haus. Ihre Nachricht wird
an Herrn Johann Bauer weitergeleitet. Während meiner Abwesenheit betreuen
Sie Frau Manuela Lentner oder Herr Johann Bauer. Frau Lentner ist direkt
erreichbar unter Tel.: 08552-41-293, Fax: 08552-41-255 oder per E-Mail:
[EMAIL PROTECTED] Herrn Bauer können Sie tel. unter der Durchwahl
-258, per Fax: -255 oder per E-Mail: [EMAIL PROTECTED] erreichen.
Persönlich können Sie mich wieder ab 02. Februar 2004 erreichen. 

Freundliche Grüße

i.A.

Karin Wilhelm
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba for SCO Open Server

2004-01-30 Thread Harmer, Michael E.
SCO includes Samba on some of it's add on disks. If you recently
purchased Open Server or have up to date media, just look on the Disks
you have.

-
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety.

Benjamin Franklin
-
Michael Harmer
Miller-Valentine Group
4000 Miller-Valentine Ct.
Dayton, OH 45439
937-534-7804
-
 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] 
 On Behalf Of Rashkae
 Sent: Friday, January 30, 2004 11:11 AM
 To: Abdullah Sekman
 Cc: [EMAIL PROTECTED]
 Subject: Re: [Samba] Samba for SCO Open Server
 
 I can't speak for everyone, but you will likely have to contact SCO
 for any support or packages.  SCO has openly made itself the 'enemy'
 of any and all Open Source developers and supporters.  Your best
 chance for community help is to migrate your server platform to
 something else.
 
 Sorry.
 
 On Fri, Jan 30, 2004 at 10:35:44AM -0500, Abdullah Sekman wrote:
   I'm lookking for Samba for SCO Open Server  Best 
 regards,Abdullah Sekman
  
  ___
  Join Excite! - http://www.excite.com
  The most personalized portal on the Web!
  -- 
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Able to Mount home, but getting failure errors in logs

2004-01-30 Thread Harmon, Leigh
Hi,

I have a few users that are creating errors like below.  These users have mapped
a directory via Samba and also have it connected.  They can access their home
directory or other directory via Samba fine, but it is strange that every hour
on the hour there is a failure put into the log (even though they are working).
My server is joined to the Domain and it is using security=DOMAIN.  Has anyone
else ever seen anything like this?

[2004/01/19 09:58:19, 1] smbd/service.c:make_connection_snum(705)
  sc276563 (158.147.58.188) connect to service jbogus initially as user jbogus
(uid=X, gid=X) (pid 2189)
[2004/01/19 10:06:07, 0] smbd/nttrans.c:call_nt_transact_ioctl(1990)
  call_nt_transact_ioctl(0x90028): Currently not implemented.
[2004/01/19 18:00:41, 0] smbd/service.c:set_current_service(56)
  chdir (/home/jbogus) failed
[2004/01/19 19:00:41, 0] smbd/service.c:set_current_service(56)
  chdir (/home/jbogus) failed
[2004/01/19 20:00:39, 0] smbd/service.c:set_current_service(56)
  chdir (/home/jbogus) failed
[2004/01/19 21:00:39, 0] smbd/service.c:set_current_service(56)
  chdir (/home/jbogus) failed
[2004/01/19 22:00:39, 0] smbd/service.c:set_current_service(56)
  chdir (/home/jbogus) failed
[2004/01/19 23:00:39, 0] smbd/service.c:set_current_service(56)
  chdir (/home/jbogus) failed
[2004/01/20 00:00:39, 0] smbd/service.c:set_current_service(56)
  chdir (/home/jbogus) failed
[2004/01/20 01:00:39, 0] smbd/service.c:set_current_service(56)
  chdir (/home/jbogus) failed
[2004/01/20 02:00:40, 0] smbd/service.c:set_current_service(56)
  chdir (/home/jbogus) failed
[2004/01/20 03:00:40, 0] smbd/service.c:set_current_service(56)
  chdir (/home/jbogus) failed
[2004/01/20 04:00:40, 0] smbd/service.c:set_current_service(56)
  chdir (/home/jbogus) failed
[2004/01/20 05:00:40, 0] smbd/service.c:set_current_service(56)
  chdir (/home/jbogus) failed
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] roaming profiles - Unable to unmarshall

2004-01-30 Thread Robert L. Perkins
I'm currently having this problem has a solution been posted?  Does anyone know how to 
resolve this problem?

Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] System error 1240

2004-01-30 Thread Hindy Malek
When using Dos command:
net use Z: \\servername\public
I get prompted for a user name and password.  I have admin priveleges and have tried 
using user root, user admin, user guest, my own account etc.  And I get 
System error 1240 has occurred.
The account is not authorized to log in from this station.
What could be causing this?
This is happening via a remote connection from my laptop using our VPN.  When I use my 
computer local in the office, I have no problem mapping the drive connecting using 
root login.
Any help is greatly appreciated!
Hindy
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] failover/redundancy with dfs, ldap, and samba

2004-01-30 Thread Terry
Hello,

I have some general failover/redundancy questions:
1) Is it possible to have samba use multiple ldap
servers without an external load balancing solution
like a Cisco CSS?
2) I want to have samba be my dfs root.  How can I
have redundant/failover dfs root servers again without
some sort of load balancing device like a CSS if that
would even work in this situationI think it would,
it would work in a failover but certainly not in a
load balancing scenario...hrm...the more I think about
it leads me to think that it could be possible of the
load balancing switch handles sessions correctly but I
imagine that could get quite messy.

Thoughts please! 


=
Terry

__
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
http://webhosting.yahoo.com/ps/sb/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Unable to unmarshall SAMR_Q_SET_USERINFO

2004-01-30 Thread Robert L. Perkins
When my Windows 2000 Pro client trys to login to the Samba PDC it get that
error message.  I created the machine account and user id.

Does anyone know how to fix this problem?


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] using VSS on a samba server - no smb locks ?

2004-01-30 Thread Nir Livni

 On Fri, Jan 30, 2004 at 03:08:21PM +0200, Nir Livni wrote:
  Hi all,
 
  We are considering moving our VSS database from a Win2K server to a
samba server.
  All clients are Win2K clients.
 
  I used the VSS tool testlock.exe to make sure the native lock mode can
be used.
  The test was successful, and I saw that an SMBlock transaction was
performed, and a reply_lockingX was replied.
 
  When I opened a VSS database on the samba server and started to use it -
I saw no SMBlock operations.
 
  Doesn't make sence to me, because some kind of locking must be done.

 Did you only test with one user ? Is so, an oplock will cause
 no locking attempts to be seen on the wire (the client redirector
 optimises them out when it has  an oplock).

Well, actually all oplocks where turned off in my smb.conf.
I tried to checkin and checkout some files with few users, but no SMBlocks.
Using samba-2.2.8a (I forgot to mention)

Nir

 Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] using VSS on a samba server - no smb locks ?

2004-01-30 Thread Jeremy Allison
On Fri, Jan 30, 2004 at 10:13:55PM +0200, Nir Livni wrote:
 
 Well, actually all oplocks where turned off in my smb.conf.
 I tried to checkin and checkout some files with few users, but no SMBlocks.
 Using samba-2.2.8a (I forgot to mention)

No lockingX calls ? There are several possible locking calls. Or
maybe the app does some higher level synchronisation.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] questions regarding SAMBA and Windows Terminal Server

2004-01-30 Thread Andrew Bartlett
On Sat, 2004-01-31 at 01:50, Richard Harding wrote:
 I currently have a debian web server, Win2k Exchange server as a PDC, 
 and a Win2k Terminal Server.
 
 I want to get rid of exchange and I am looking at putting openldap on 
 the Debian box with email. If I did this I would want to get the Win2k 
 TS to authenticate to the Debian openldap box. If I set up SAMBA could I 
 get it to do so? I want only one place to manage user accounts and since 
 I have to have them on the Debian machine to get the email accounts I am 
 hoping SAMBA can help me with TS authentication. I can't seem to find 
 much information on this however.

Terminal server operates much like any other domain member, with a few
extra things that it stores.  This information is handled correctly in
Samba 3.0.1, but I would suggest running 3.0.2rc1. 

 I would also wonder if anyone has gotten it to work with Win2k3 TS. 
 Eventually I will be upgrading the server.

http://swflug.org/modules.php?name=Downloadsd_op=viewdownloadcid=4

I would also suggest you read HP's paper above.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Login time logging?

2004-01-30 Thread Andrew Bartlett
On Fri, 2004-01-30 at 23:49, Remco Barendse wrote:
 Hi all!
 
 I need a setup that will log exactly when a user has logged in or out of 
 samba.
 
 Preferably I would like to have a separate list per user, but this can 
 also be achieved with grep.
 
 I found some solutions that rely on login script processing which is nice 
 if your clients are running Win95/Win98 but for anything else it won't 
 work.
 
 Anybody know of a solution?

Many people enable utmp support on the server for this.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] cannot join Windows 2003 domain

2004-01-30 Thread Andrew Bartlett
On Fri, 2004-01-30 at 01:53, Nerijus Baliunas wrote:
 Hello,
 
 When I try smbpasswd -j DOMAIN_NAME -r alfa -U Administrator
 I get
 Error connecting to alfa - NT_STATUS_ACCESS_DENIED
 Unable to join domain TID.
 
 The same command works with Windows 2000 domain.
 Windows domain is configured for pre 2k/2k3 access,
 samba-2.2.8a.
 
 I tried to search google unsuccessfully. Can I debug it?

You need to use Samba 3.0, as win2k3 enforces SMB signing, which 2.2
does not support.

When using Samba 3.0, you need to use 'net join'.  Set 'security=ads' in
your smb.conf, if you have the right LDAP and kerberos libraries.

Finally, read the HOWTO, it contains this and many other useful hints.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] After identification

2004-01-30 Thread Andrew Bartlett
On Fri, 2004-01-30 at 01:56, Jean Frontin wrote:
 Hello,
 
 I am testing 3.0.1 on solaris 8. When I open a session on a samba server 
 from a XP box,  after user/password entered I obtain an error message :
 
 server service not started
 
 I apologize because I translate into English a French expression in French XP.
 
 Here is the logs I read on the server :

We need you to attach a debugger to that, and get a backtrace.  The
'panic action' should help here.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Groups

2004-01-30 Thread Andrew Bartlett
On Fri, 2004-01-30 at 02:48, Anders Norrbring wrote:
 I've noticed in the HOW-TO collection (for v3, unforunately..) that there is
 a command net groupadd to create group mappings for the Samba server to
 use when controlling users in the domain.  Since my Samba is 2.2.8a, the net
 command doesn't exist on my system.
 
 Is there another utility to use to create NT groups (f.x. Power Users) that
 Samba can use in its PDC role?

No, Samba 2.2 does not support this - one of the many reasons to upgrade
to 3.0

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Login time logging?

2004-01-30 Thread Adam Williams
  Preferably I would like to have a separate list per user, but this can 
  also be achieved with grep.
  I found some solutions that rely on login script processing which is nice 
  if your clients are running Win95/Win98 but for anything else it won't 
  work.
  Anybody know of a solution?
 Many people enable utmp support on the server for this.

We grab WINS 03 registrations and propogate these into LDAP to maintain
a moderately current state of whos-logged-in-where.  I suppose you could
use them for other things too.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Need help with advanced PDF printing

2004-01-30 Thread Jason Balicki
Hello,

I've got Samba doing PDF printing (via cups) and everything
works just fine.

However, I have a dumb application that calls microsoft word
to print documents, and each document is handled as a seperate
print job.  Consequently, I end up with multiple PDFs that
should all be a single document.

I know how to combine them by hand (pdf2ps document.pdf;
pdf2ps document2.pdf ; cat document.ps document2.ps  \
bigdoc.ps ; ps2pdf bigdoc.ps) but my users do not
have command line access (nor do I want them to).

Has anyone built a pdf combiner that can do this
automaticaly?

I'm thinking I can do something with PHP to have the
user upload to a server, then have the unix tools
do the combining automaticaly and then offer the
combined pdf for download, but if someone has already
done this I wouldn't have to waste any time...

Thanks in advance...

--J(K)  

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Virus Alert

2004-01-30 Thread isvw
The mail message (file: file.zip) you sent to [EMAIL PROTECTED] contains a virus. (on 
hyd.satyam.com)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A samba locking question

2004-01-30 Thread Andrew Bartlett
On Thu, 2004-01-29 at 23:55, Patrik Gustavsson wrote:
 Hi,
 
 Maybe this is a stupid question, but any way
 
 Will samba use fcntl locking if level 1 and 2 oplocks is
 disabled and samba is not compiled with spin-locks enabled ?
 
 I am using Samba on solaris

Samba uses fcntl() locking in two places.  Firstly, it is used to mirror
SMB locks, asked for by the client.  Secondly they are used to mediate
access to tdbs.

Spinlocks are an alternative (if much less reliable) method for tdb
mediation.  

oplocks do not override fcntl locks - but clients that have successfully
gained an oplock might not ask for an SMB lock, and therefore Samba
might not attempt to gain the matching fcntl() lock.

The nasty performance issues in Solaris are due to bad fcntl() lock
contention performance in Samba's TDB access.  

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] After identification

2004-01-30 Thread Andrew Bartlett
On Fri, 2004-01-30 at 01:56, Jean Frontin wrote:
 Hello,
 
 I am testing 3.0.1 on solaris 8. When I open a session on a samba server 
 from a XP box,  after user/password entered I obtain an error message :

Are you using 'security=server' or are you running with 'encrypt
passwords = no'?

If so, then this issue has been fixed in 3.0 CVS, try the 3.0.2rc2
release due shortly.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and Terminal Server Whitepaper

2004-01-30 Thread Andrew Bartlett
On Sun, 2004-01-25 at 07:40, Eric Roseme wrote:
 Attached is a 500KB read-only .doc file with a Samba and Terminal Server 
 whitepaper.  I have tried to hit every known issue and all available 
 workarounds.  If anyone has comments or suggestions, let me know.  JT 
 has it, so it should end up in the next How-To.  Sorry about the file 
 format, but the .pdf was 2.5MB, which I thought was too big to post.

I found there were a number of things in this paper that should be
updated for 3.0, or are less than accurate.

The first is the issue of 'session users'.  How have you found that
variable impacting on operations?  As far as I know, it's use is only to
support 'security=share', and apart from some noise in the logs, it
should have no impact on terminal server operations.

(Then again, I've been in 3.0 land for a long time, and in 2.2 it can
get scary...)

Also all the 'list' parameters in Samba 3.0 are now handled as real
lists, so do not suffer from the 1024 character limit.

In environments where WINS may be controlled, I would also suggest the
use of static wins entries, or 'dns proxy' and multiple CNAME records
for the terminal server.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba] Samba3 Printer drivers installation

2004-01-30 Thread Andrei Mikhailovsky
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Kurt Pfeifle wrote:
| Andrei Mikhailovsky wrote:
|
| Thanks a lot for the help.
|
|
| Please always reply to list. Often I don't get private mails while I
| am on travel. But sometimes I can scan the list (via its web interface)
| while on the road.
|
| When I was initially installing the drivers, I was following a how-to
| that didn't specify that you need exact order for the driver files.
|
|
| It does. It does so in very much detail. I spent my complete annual
| holiday last summer to find everything out and write it down as a
| documentation. So don't tell me it doesn't specify the exact order,
| because I know it went into my draft at more than 1 place.
|
Sorry for not making it clear earlier on, I have followed a 3rd party
how-to that i've found by google-ing. After i have followed your how-to
(for which I am very thankful) I've managed to install printer drivers.
I've followed the following procedure:
1. to get windows drivers files i've used:
rpcclient -U'user%pass' -c \
'getdriver Samsung 4500 3' TURBO_XP
2. Then i've downloaded drivers from windows machine:
smbclient //TURBO_XP/print\$ -U'user%pass' \
~   -c 'cd W32X86/2; mget *'
3. Upload files to samba print$:
smbclient //SAMBA-CUPS/print\$ -U'user%pass' -c \
~  'cd W32X86; mput *'
4. Added printer driver:

rpcclient -Uuser%pass -c 'adddriver Windows NT x86 \
~  Samsung: file1:file2,etc..'
where the file order is as following:
Driver File Name:Data File Name:Config File Name:Help File Name:Language
Monitor Name:Default Data Type:
The driver files where added successfully:
Printer Driver Samsung successfully installed
5. Checking samba server for driver succeded:
rpcclient -U'user%pass' -c 'enumdrivers' SAMBA-server
[Windows NT x86]
Printer Driver Info 1:
~Driver Name: [Samsung]
6.Setting driver to printer:
rpcclient -U'user%pass' -c 'setdriver Samsung Samsung' SAMBA-server
As far as i can see from the how-to the server side setup is finished.

Now, from the client side, i should double click on the printer and
windows should fetch the driver and install it. When I do this, windows
2000/XP responds that unable to find driver, do you want to make a local
search for driver. However, if i check the properties for the printer, i
can see that the driver is there and that it is available for the right
architecture.
But if I use the windows Add printer wizard to install the same driver
to samba print$ share, the printer driver gets installed perfectly; i.e.
rpcclient -U'user%pass' -c 'enumdrivers' SAMBA-server
[Windows NT x86]
Printer Driver Info 1:
~Driver Name: [Samsung]
as well as the drivers are placed in exactly the same location as they
where using samba setup procedure that i've mentioned above. I don't
actually know what might be the difference between the driver
installation between windows Add printer wizard and samba rpcclient.
Do you have any idea what I am doing wrong? As I prefer not to use
windows at all possible costs, i would really like to sort out the
printer installation by using command line on linux rather then
fluff-clicking on windows.
Thanks for all the help!

- --
Andrei Mikhailovsky
Arhont Ltd
Web: http://www.arhont.com
Tel: +44 (0)870 4431337
Fax: +44 (0)1454 201200
PGP: Key ID - 0xFF67A4F4
PGP: Server - keyserver.pgp.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org
iD8DBQFAGwJN5bSBOf9npPQRAvh8AJ4joCafdHQkRN6bHqKGeVr+HHNd6gCbB9J7
k90ycWdpLfh59fF+KgrZtGM=
=+Ii3
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] benchmark adn threshold

2004-01-30 Thread Andrew Bartlett
On Sat, 2004-01-31 at 03:29, Lapin(c) wrote:
 Hi all,
 
 i'd like to know if there is a tool like an injector that permits to increase
 progressively the load onto a Samba server. My aim is to define a threshold as
 the number of concurrent users connected and accessing shares simultanously on a
 samba3 PDC. I don't care about network transfer rate.

Some of the smbtoture suite might be able to assist you there - but if
you just want logins, why not just script up smbclient?

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba] Samba3 Printer drivers installation

2004-01-30 Thread Kurt Pfeifle
Andrei Mikhailovsky wrote:

[]

| When I was initially installing the drivers, I was following a how-to
| that didn't specify that you need exact order for the driver files.
|
|
| It does. It does so in very much detail. I spent my complete annual
| holiday last summer to find everything out and write it down as a
| documentation. So don't tell me it doesn't specify the exact order,
| because I know it went into my draft at more than 1 place.
|
Sorry for not making it clear earlier on, I have followed a 3rd party
how-to that i've found by google-ing.
So why am *I* receiving the support call for that 3rd party doco??

[...]

As far as i can see from the how-to the server side setup is finished.

Now, from the client side, i should double click on the printer
This is not a piece I ever advocated, exactly because it doesn't
work reliably. Re-read the docu and find the following steps (quoted
from memory).
* browse to Samba in network neighbourhood.

* open Printers and Faxes folder

* right-click printer and select Connect... or Install...

 and
windows should fetch the driver and install it. When I do this, windows
2000/XP responds that unable to find driver, do you want to make a local
search for driver. However, if i check the properties for the printer, i
can see that the driver is there and that it is available for the right
architecture.
Find the different places which (redundantly) hint to the need to...

* make sure to do the first installation on any Win client as a
  printer admin user, and
* tickle the driver into a valid device mode by executing it once
  on a Win machine, before you start offering it to normal users for
  download/installation
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Blocked delivery of your email to jody.haynes@isunnetworks.com.persistent.co.in

2004-01-30 Thread Thomas Spuhler
See other post to this list!
Tom


On Fri, 2004-01-30 at 03:10, [EMAIL PROTECTED] wrote:
  BLOCKED DELIVERY OF YOUR EMAIL TO [EMAIL PROTECTED] 
 
 Your email has been stopped for reasons stated at the bottom of this mail.
 
 If your message is HTML/RichText and wrongly reported as SPAM below 
 send the email again in plain-text format. 
 
 If your message is reported to have virus, please check your system 
 for virii and clean it up. 
 
 If you still think that your message is free of all the above, please 
 report it to [EMAIL PROTECTED] or [EMAIL PROTECTED] 
 
 
 Email was blocked due to the presence of a virus
   Comment: Virus detected in the mail
 
 /unpacked/file.zip - Win32/Mydoom.A worm
 /unpacked/file.exe - Win32/Mydoom.A worm
 
 
 End.



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Command Antivirus For Exchange - Virus Alert

2004-01-30 Thread System Attendant
The message Server Report you sent to [EMAIL PROTECTED] had the file
attachment text.zip which was infected with the text.scr  Infection:
W32/[EMAIL PROTECTED] (exact) virus.  The file attachment was deleted from the
message.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba and Network Neighborhood

2004-01-30 Thread Thomas Spuhler
Can you please explain a little.
What are you looking for in the network neighborhood? Windows boxes or
samba shares?
If you want to see samba shares you need to make them browseable.


Tom





On Fri, 2004-01-30 at 04:12, Lionel Laratte wrote:
 Hi All,
 
 I turned my Debian box into a file server on my home network.  What
 happened is now no boxen except the localhost shows up in Network
 Neighborhood on the Windows boxen.  All shares work fine and if I search
 for the Linux server, I find it.  Has anyone ever run into this and
 resolved it?  Three days of Googling have left me with the same problem
 and a headache.  Thanks.



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Mail delivery failure

2004-01-30 Thread jschenck
** Message from InterScan E-Mail VirusWall NT **

Sent  RCPT TO: [EMAIL PROTECTED]
Received  550 5.1.1 [EMAIL PROTECTED]... User unknown

Could not deliver mail to this user.
[EMAIL PROTECTED]
* End of message ***
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] call_nt_transact_query_security_desc

2004-01-30 Thread Bob Perkins
I don't get this error with Windows 98 clients only my Windows 2000
workstation.  This work station can access all the hard drives offered by
the samba server but has problems accessing the printers.  When I try to
open a printers property dialog box it fails.

I used to get a SAMR_Q_SET_USERINFO related error, but when I turned up the
Samba log level to 3 the SAMR_Q_SET_USERINFO error was replaced by the error

call_nt_transact_query_security_desc
[timestamp] smbd/error.c:error_packet(94)
error string = Operation not supported

I'm running the version of samba that came with SuSE 9.0, samba 2.2.8a-SuSE.
The server is also acting as the PDC.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Error when Synchronising

2004-01-30 Thread Robert L. Perkins
Sir,

I've just install SuSE 9.0 and am running their Samba 2.8.8a-SuSE version of samba and 
am encountering the same problem with my windows 2000 pro machine when I attempt to 
access printers offered by the samba server.  Windows 98 has no problem with the 
printers but Windows 2000 gets this error.

Did you ever resolve your issue?  If so would you share your solution with me?

Thank you,

Robert L. Perkins
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Win9x - Samba - NT Domain question

2004-01-30 Thread Brian Walter
Greetings,

I have a configuration question regarding using samba, a win98 machine in a Nt
domain.

Situation:

2 linux boxes both running samba 3.0.1
winxp and win98
winnt as domain server.

From my win98 machine, I can see the shares on linux box a. (Running
Fedora/samba 3.0.1)
From my win98 machine, I CAN NOT see the share on linux box b (Redhat 9/samba 
3.0.1)
However, from the xp machine, I *can* see the shares on linux box b.

I went so far as to copy the smb.conf file from box a to box b, with no effect
(turns out, I have the same shares on both machines, so no conflicts).

Following the diagnosis routines in the documentation, when I try to do the net
view 'box b', I get 
Error 5: You do not currently have access to this file. The file may be
marked read-only, or it may be part of a shared resource such as a folder, a
named pipe, a queue, or a semaphore. You can use the ATTRIB command to change
the read-only attribute, or try again later when the file may be available.

If I try to user explorer, and click on the server name, it asks for the
password for ipc$ service.

I *know* it's something obvious, but i'm at my wits ends.

Any guidance would be greatly appreciated.

TIA
Brian

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind using the wrong username for IPC$ connections.

2004-01-30 Thread Manjunath H N
Hi All,


When I run winbindd -i -d5 I am getting the following error 

IPC$ connections done by user DOMAIN\domainmanju
connecting to PDC from SAMBASERVER with username [DOMAIN]\[domainmanju]

 finally it throws up an the following error.

Could not open a connection to DOMAIN for \PIPE\lsarpc (NT_STATUS_LOGON_FAILURE)

I have joined the Samba server to the Win2k AD domain, users are able to access the 
server, but I am trying to implement Single Sign on, which I have not yet succeeded.

I think it is giving a logon failure because it is using a wrong user name i.e. it 
should use the user manju only but it is trying to use domainmanju . How do I 
change this so that Samba uses only manju as the username and not domainmanju or is 
this right  I am doing something else wrong.


TIA
Manjunath H N


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Virus Alert

2004-01-30 Thread Thomas Spuhler
Don't get it? Viruses send fake sender address. Turn this message off!

Tom


On Fri, 2004-01-30 at 03:05, [EMAIL PROTECTED] wrote:
 01/30/2004 11:02:30 : Un virus detecte (WORM_MYDOOM.A) dans le fichier readme.scr 
 que vous avez envoye a [EMAIL PROTECTED] Action: deleted.  Le mail examine contient 
 votre adresse dans l'en-tete From:.  Votre ordinateur est peut etre infecte ou 
 quelqu'un ayant votre adresse de mail dans le carnet d'adresses a ete infecte.  
 (Pour plus de securite, verifier votre ordinateur en utilisant un produit antivirus 
 a jour).



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] WINS, must be master browser?

2004-01-30 Thread Thomas Spuhler
As far as I understand, as long as you have an NT on the subnet, it will
be the master browser and wins server. You also need to tell your W
boxes who the wins server is. you can do it in the DHCP server or on
every W box if not using DHCP
Tom


On Thu, 2004-01-29 at 23:47, Tim Smith wrote:
 of course i have set the samba server to   wins support = yes
 
 I'm not that much of a dunce :)
 
 
 alton bailey wrote:
 
  you have to tell samba to be a wins server in smb.conf
 
  - Original Message -
  *From:* Tim Smith mailto:[EMAIL PROTECTED]
  *To:* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
  *Sent:* Thursday, January 29, 2004 8:45 PM
  *Subject:* [Samba] WINS, must be master browser?
 
  i have an NT4 server and a linux samba server. the NT4 server is
  currently the WINS server. it works perfectly. i want to ditch it and
  use my samba server as the WINS server, however WINS simply does not
  work. could this be becuase the WINS server also needs to be the
  local
  master browser?
 
  here is the global section of my smb.conf
  [global]
  workgroup = laboratory
  os level = 2
  kernel oplocks = No
  security = user
  encrypt passwords = Yes
  guest account = Nobody
  map to guest = Bad User
 
  in this config samba will not win browser elections. I know the NT4
  machine will win all browser elections, it's the only difference i
  can
  think of.
  -- 
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.sambaorg/mailman/listinfo/samba
  http://lists.samba.org/mailman/listinfo/samba
 



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Skynet Mail Protection scan results

2004-01-30 Thread Thomas Spuhler
How long does it take until these sysadmin learn how to configure their
virus scanners and turn off these messages.
They just send out completely useless e-mail
Tom

On Fri, 2004-01-30 at 03:35, Skynet Mail Protection wrote:
 ---
 This e-mail is generated by Skynet Mail Protection to warn you that the e-mail
 sent by [EMAIL PROTECTED] to [EMAIL PROTECTED] is infected with virus: Win32/[EMAIL 
 PROTECTED]
 Deze e-mail is gegenereerd door Skynet Mail Protection om u te waarschuwen dat
 de e-mail gestuurd door [EMAIL PROTECTED] naar [EMAIL PROTECTED] geinfecteerd is met 
 Win32/[EMAIL PROTECTED]
 Ce mail est gnr par Skynet Mail Protection afin de vous prvenir que l'e-mail envoy 
 par [EMAIL PROTECTED]  [EMAIL PROTECTED] est infect par le virus : Win32/[EMAIL 
 PROTECTED]
 
 Please contact your system administrator for further information.
 Gelieve uw systeembeheerder te contacteren voor meer informatie.
 Veuillez contacter votre administrateur systme pour de plus amples informations.
 
 If you are the sender:
 Indien u de zender bent:
 Si vous tes l'expditeur:
 ---
 The scanned e-mail has your address in the From header field. Either your
 computer is infected or someone's computer having your e-mail address in
 the address book has been infected.
 De gescande e-mail heeft uw adres in het From veld.  Dat betekent dat ofwel
 jouw computer geinfecteerd is, ofwel dat iemand is geinfecteerd, die jouw e-mail
 adres in zijn/haar adresboek heeft.
 Le mail scann contient votre adresse e-mail dans son en-tte De.
 Soit votre ordinateur est infect soit votre adresse e-mail est reprise dans
 le carnet d'adresse d'un ordinateur infect.
 
 If you are the receiver:
 Indien u de bestemmeling bent:
 Si vous tes le destinataire:
 -
 Please contact the sender: most likely he/she doesn't know he/she has a computer 
 virus.
 Gelieve de zender te contacteren: hoogst waarschijnlijk weet hij/zij niet dat hij/zij
 geinfecteerd is met een computer virus.
 Veuillez contacter l'expditeur: le plus souvent, il/elle ne sait pas que son
 ordinateur est infect.
 
 Actions taken for the infected files:
 Ondernomen actie voor de geinfecteerde bestanden:
 Actions prises pour les fichiers infects:
 -
 
 
 The infected file was saved to quarantine with name: 1075458906-RAVi0UAZ5mt027611.
 The file (part0002:tmapz.pif) attached to mail (with subject:Server Report) sent by 
 [EMAIL PROTECTED] to [EMAIL PROTECTED]
 is infected with virus: Win32/[EMAIL PROTECTED]
 Cannot clean this file.
 The mail was silently discarded because it contained dangerous code.
 
 
 this is a copy of the e-mail header:
 
 Received: from kay.skynet.be (kay.skynet.be [195.238.3.235])
 by inas005.isp.belgacom.be (8.12.9/8.12.9/Skynet-IN-AS-2.03) with ESMTP id 
 i0UAVAm8020499
 for [EMAIL PROTECTED]; Fri, 30 Jan 2004 11:31:41 +0100
 (envelope-from [EMAIL PROTECTED])
 Received: from samba.org (f07v-7-84.d1.club-internet.fr [212.194.138.84])
 by kay.skynet.be (8.12.9/8.12.9/Skynet-IN-2.32) with ESMTP id i0UARbri008942
 for [EMAIL PROTECTED]; Fri, 30 Jan 2004 11:27:37 +0100
 (envelope-from [EMAIL PROTECTED])
 
 
 RAV AntiVirus for Linux i386 version: 8.4.2 (snapshot-20030212)
 
 Scan engine 8.11 for i386.
 Last update: Fri, 30 Jan 2004 01:31:44 +01
 Scanning for 89397 malwares (viruses, trojans and worms).



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] [PATCH] Group mapping primary group SID update

2004-01-30 Thread Ganael Laplanche
Hi all !

This is a patch for Group mapping bug #1 reported here :
http://lists.samba.org/archive/samba-technical/2004-January/034057.html

It activates users' primary group SID update when adding/modifying/deleting a
group mapping. It patches utils/net_groupmap.c (net_groupmap_add,
net_groupmap_modify, net_groupmap_delete) and can be applied to samba-3.0.2rc1.

net_groupmap_add :
Scan users having the *new* Unix gid mapped as primary group and update their
primaryGroupSid info in passdb.

net_groupmap_modify :
Scan users having the *old* Unix gid mapped as primary group and update their
primaryGroupSid info in passdb by computing it.
Scan users having the *new* Unix gid mapped as primary group and update their
primaryGroupSid info in passdb.

net_groupmap_delete :
Scan users having the *old* Unix gid mapped as primary group and update their
primaryGroupSid info in passdb by computing it.

!!!NOTE!!! : THIS PATCH DOESNT WORK WITH TDB BACKEND, but it works perfectly
with ldap backend. Since I'm not a Samba guru, I couldn't make this patch work
with TDB backend. I think it is very simple to fix : the problem is pdb_ldap and
pdb_tdb doesn't update sam account the same way : pdb_tdb.c invalidates the
iterator during a sam update (while pdb_ldap doesn't), so the main loop crashes
after the first pdb_update_sam_account while trying to use pdb_getsampwent. The
patch may be easy to fix and can be a good start for an final bugfix.

- Start of updatesid.patch -
--- utils/net_groupmap.c.orig   2003-09-24 19:16:13.0 +0200
+++ utils/net_groupmap.c2004-01-29 13:38:06.0 +0100
@@ -80,6 +80,65 @@
return True;
 }

+/**
+ Update primary group SID in passdb with string_sid
+ for users whose Unix primary group is gid. Useful 
+ after a net_groupmap add/modify/delete.
+**/
+static BOOL update_users_primgroup_sid(const gid_t gid,  fstring string_sid)
+{
+   SAM_ACCOUNT *sam_pwent=NULL; 
+   struct passwd *pass=NULL;
+   fstring usrname = ;
+
+   /* Initialize static context */
+   if(!initialize_password_db(True)) {
+   DEBUG(0,(update_users_primgroup_sid: Cannot initialize password
database.\n));
+   return False;
+   }
+   /* Open password database for update */
+   if(!pdb_setsampwent(True)) {
+   DEBUG(0,(update_users_primgroup_sid: Cannot open password
database.\n));
+   return False;
+   }
+
+   while (NT_STATUS_IS_OK(pdb_init_sam(sam_pwent)) 
pdb_getsampwent(sam_pwent)) {
+   fstrcpy(usrname,pdb_get_username(sam_pwent));
+   if(!(pass = Get_Pwnam(usrname))) {
+   DEBUG(0,(update_users_primgroup_sid: Cannot find Unix
account for %s.\n, usrname));
+   return False;
+   }
+
+   if ((pass-pw_gid) != (gid_t)-1) {
+   /* Check if user's primary group SID must be updated (if
mapped gid is the user's primary group gid) */
+   if (pass-pw_gid == gid) {
+   if (string_sid) { /* String specified, use it */
+   pdb_set_group_sid_from_string(sam_pwent,
string_sid, PDB_CHANGED);
+   }
+   else { /* no string specified, must compute the
RID */
+   pdb_set_group_sid_from_rid(sam_pwent,
pdb_gid_to_group_rid(pass-pw_gid), PDB_CHANGED);
+   }
+
+   /* Commit changes */
+   if (pdb_update_sam_account(sam_pwent)) {
+   /* Works well with pdb LDAP, BUT
!!Error!! while using pdb TDB : pdb_tdb.c invalidates
+   the iterator in tdb_update_sam (called
by pdb_update_sam_account). The result is
+   an iterator error in the next
pdb_getsampwent of the loop. MUST BE CORRECTED*/
+   d_printf(Successully updated primary
group SID for user %s\n, usrname);
+   }
+   else {
+   d_printf(Could not update primary group
SID for user %s\n, usrname);
+   }
+   }
+   }
+   pdb_free_sam(sam_pwent);
+   }
+   pdb_free_sam(sam_pwent);
+   pdb_endsampwent();
+
+   return True;
+}
+
 /*
  Dump a GROUP_MAP entry to stdout (long or short listing)
 **/
@@ -287,6 +346,9 @@
}

d_printf(Successully added group %s to the mapping db\n, ntgroup);
+
+   update_users_primgroup_sid(gid, string_sid);
+

hello

2004-01-30 Thread samba-technical
Mail transaction failed. Partial message is available.

attachment: body.zip


CVS update: samba/source/passdb

2004-01-30 Thread jerry

Date:   Fri Jan 30 14:59:40 2004
Author: jerry

Update of /data/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv13489/passdb

Modified Files:
  Tag: SAMBA_3_0
pdb_interface.c 
Log Message:
disable any account that doesn't have a password and doesn't had the ACB_PWNOTREQ bit 
set

Revisions:
pdb_interface.c 1.10.2.26 = 1.10.2.27

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_interface.c.diff?r1=1.10.2.26r2=1.10.2.27


CVS update: samba/source/passdb

2004-01-30 Thread jerry

Date:   Fri Jan 30 15:00:57 2004
Author: jerry

Update of /data/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv14157/passdb

Modified Files:
pdb_interface.c 
Log Message:
disable any account that doesn't have a password and doesn't had the ACB_PWNOTREQ bit 
set

Revisions:
pdb_interface.c 1.53 = 1.54

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_interface.c.diff?r1=1.53r2=1.54


CVS update: samba/source/passdb

2004-01-30 Thread jerry

Date:   Fri Jan 30 15:01:43 2004
Author: jerry

Update of /data/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv14489/passdb

Modified Files:
  Tag: SAMBA_3_0_RELEASE
pdb_interface.c 
Log Message:
disable any account that doesn't have a password and doesn't had the ACB_PWNOTREQ bit 
set

Revisions:
pdb_interface.c 1.47.2.5 = 1.47.2.6

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_interface.c.diff?r1=1.47.2.5r2=1.47.2.6


CVS update: samba/packaging/Fedora

2004-01-30 Thread jerry

Date:   Fri Jan 30 16:00:42 2004
Author: jerry

Update of /data/cvs/samba/packaging/Fedora
In directory dp.samba.org:/tmp/cvs-serv25804

Modified Files:
  Tag: SAMBA_3_0
samba.spec.tmpl 
Added Files:
  Tag: SAMBA_3_0
smb.conf 
Log Message:
fixes for fedora packaging

Revisions:
smb.confNONE = 1.1.2.1
http://www.samba.org/cgi-bin/cvsweb/samba/packaging/Fedora/smb.conf?rev=1.1.2.1
samba.spec.tmpl 1.1.2.7 = 1.1.2.8

http://www.samba.org/cgi-bin/cvsweb/samba/packaging/Fedora/samba.spec.tmpl.diff?r1=1.1.2.7r2=1.1.2.8


CVS update: samba/source/lib

2004-01-30 Thread jra

Date:   Fri Jan 30 18:38:45 2004
Author: jra

Update of /data/cvs/samba/source/lib
In directory dp.samba.org:/tmp/cvs-serv24429/lib

Modified Files:
util.c 
Log Message:
Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.


Revisions:
util.c  1.410 = 1.411

http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/util.c.diff?r1=1.410r2=1.411


CVS update: samba/source/nmbd

2004-01-30 Thread jra

Date:   Fri Jan 30 18:38:45 2004
Author: jra

Update of /data/cvs/samba/source/nmbd
In directory dp.samba.org:/tmp/cvs-serv24429/nmbd

Modified Files:
nmbd_processlogon.c 
Log Message:
Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.


Revisions:
nmbd_processlogon.c 1.67 = 1.68

http://www.samba.org/cgi-bin/cvsweb/samba/source/nmbd/nmbd_processlogon.c.diff?r1=1.67r2=1.68


CVS update: samba/source/param

2004-01-30 Thread jra

Date:   Fri Jan 30 18:38:45 2004
Author: jra

Update of /data/cvs/samba/source/param
In directory dp.samba.org:/tmp/cvs-serv24429/param

Modified Files:
loadparm.c 
Log Message:
Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.


Revisions:
loadparm.c  1.531 = 1.532

http://www.samba.org/cgi-bin/cvsweb/samba/source/param/loadparm.c.diff?r1=1.531r2=1.532


CVS update: samba/source/printing

2004-01-30 Thread jra

Date:   Fri Jan 30 18:38:46 2004
Author: jra

Update of /data/cvs/samba/source/printing
In directory dp.samba.org:/tmp/cvs-serv24429/printing

Modified Files:
nt_printing.c 
Log Message:
Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.


Revisions:
nt_printing.c   1.261 = 1.262

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/nt_printing.c.diff?r1=1.261r2=1.262


CVS update: samba/source/libsmb

2004-01-30 Thread jra

Date:   Fri Jan 30 18:38:45 2004
Author: jra

Update of /data/cvs/samba/source/libsmb
In directory dp.samba.org:/tmp/cvs-serv24429/libsmb

Modified Files:
ntlmssp.c 
Log Message:
Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.


Revisions:
ntlmssp.c   1.26 = 1.27

http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/ntlmssp.c.diff?r1=1.26r2=1.27


CVS update: samba/source/rpc_server

2004-01-30 Thread jra

Date:   Fri Jan 30 18:38:46 2004
Author: jra

Update of /data/cvs/samba/source/rpc_server
In directory dp.samba.org:/tmp/cvs-serv24429/rpc_server

Modified Files:
srv_lsa_ds_nt.c srv_lsa_nt.c srv_spoolss_nt.c 
Log Message:
Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.


Revisions:
srv_lsa_ds_nt.c 1.3 = 1.4

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_lsa_ds_nt.c.diff?r1=1.3r2=1.4
srv_lsa_nt.c1.79 = 1.80

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_lsa_nt.c.diff?r1=1.79r2=1.80
srv_spoolss_nt.c1.411 = 1.412

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c.diff?r1=1.411r2=1.412


CVS update: samba/source/lib

2004-01-30 Thread jra

Date:   Fri Jan 30 18:38:47 2004
Author: jra

Update of /data/cvs/samba/source/lib
In directory dp.samba.org:/tmp/cvs-serv24404/lib

Modified Files:
  Tag: SAMBA_3_0
util.c 
Log Message:
Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.


Revisions:
util.c  1.358.2.42 = 1.358.2.43

http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/util.c.diff?r1=1.358.2.42r2=1.358.2.43


CVS update: samba/source/nmbd

2004-01-30 Thread jra

Date:   Fri Jan 30 18:38:47 2004
Author: jra

Update of /data/cvs/samba/source/nmbd
In directory dp.samba.org:/tmp/cvs-serv24404/nmbd

Modified Files:
  Tag: SAMBA_3_0
nmbd_processlogon.c 
Log Message:
Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.


Revisions:
nmbd_processlogon.c 1.51.2.13 = 1.51.2.14

http://www.samba.org/cgi-bin/cvsweb/samba/source/nmbd/nmbd_processlogon.c.diff?r1=1.51.2.13r2=1.51.2.14


CVS update: samba/source/libsmb

2004-01-30 Thread jra

Date:   Fri Jan 30 18:38:47 2004
Author: jra

Update of /data/cvs/samba/source/libsmb
In directory dp.samba.org:/tmp/cvs-serv24404/libsmb

Modified Files:
  Tag: SAMBA_3_0
ntlmssp.c 
Log Message:
Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.


Revisions:
ntlmssp.c   1.4.2.36 = 1.4.2.37

http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/ntlmssp.c.diff?r1=1.4.2.36r2=1.4.2.37


CVS update: samba/source/param

2004-01-30 Thread jra

Date:   Fri Jan 30 18:38:48 2004
Author: jra

Update of /data/cvs/samba/source/param
In directory dp.samba.org:/tmp/cvs-serv24404/param

Modified Files:
  Tag: SAMBA_3_0
loadparm.c 
Log Message:
Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.


Revisions:
loadparm.c  1.397.2.121 = 1.397.2.122

http://www.samba.org/cgi-bin/cvsweb/samba/source/param/loadparm.c.diff?r1=1.397.2.121r2=1.397.2.122


CVS update: samba/source/printing

2004-01-30 Thread jra

Date:   Fri Jan 30 18:38:48 2004
Author: jra

Update of /data/cvs/samba/source/printing
In directory dp.samba.org:/tmp/cvs-serv24404/printing

Modified Files:
  Tag: SAMBA_3_0
nt_printing.c 
Log Message:
Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.


Revisions:
nt_printing.c   1.204.2.48 = 1.204.2.49

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/nt_printing.c.diff?r1=1.204.2.48r2=1.204.2.49


CVS update: samba/source/rpc_server

2004-01-30 Thread jra

Date:   Fri Jan 30 18:38:48 2004
Author: jra

Update of /data/cvs/samba/source/rpc_server
In directory dp.samba.org:/tmp/cvs-serv24404/rpc_server

Modified Files:
  Tag: SAMBA_3_0
srv_lsa_ds_nt.c srv_lsa_nt.c srv_spoolss_nt.c 
Log Message:
Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.


Revisions:
srv_lsa_ds_nt.c 1.1.2.3 = 1.1.2.4

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_lsa_ds_nt.c.diff?r1=1.1.2.3r2=1.1.2.4
srv_lsa_nt.c1.52.2.18 = 1.52.2.19

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_lsa_nt.c.diff?r1=1.52.2.18r2=1.52.2.19
srv_spoolss_nt.c1.277.2.77 = 1.277.2.78

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c.diff?r1=1.277.2.77r2=1.277.2.78


CVS update: samba/packaging/Fedora

2004-01-30 Thread jerry

Date:   Fri Jan 30 20:26:03 2004
Author: jerry

Update of /data/cvs/samba/packaging/Fedora
In directory dp.samba.org:/tmp/cvs-serv12477

Modified Files:
  Tag: SAMBA_3_0
makerpms.sh.tmpl 
Added Files:
  Tag: SAMBA_3_0
smbusers 
Log Message:
fix a few more bugs in Fedora scripts (files not getting installed)

Revisions:
smbusersNONE = 1.1.2.1
http://www.samba.org/cgi-bin/cvsweb/samba/packaging/Fedora/smbusers?rev=1.1.2.1
makerpms.sh.tmpl1.1.2.2 = 1.1.2.3

http://www.samba.org/cgi-bin/cvsweb/samba/packaging/Fedora/makerpms.sh.tmpl.diff?r1=1.1.2.2r2=1.1.2.3


CVS update: samba/source/passdb

2004-01-30 Thread abartlet

Date:   Fri Jan 30 23:37:38 2004
Author: abartlet

Update of /home/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv13876/source/passdb

Modified Files:
  Tag: SAMBA_3_0
pdb_ldap.c 
Log Message:
If we are setting the NT or LM password to NULL, remove the attribute
rather than writing X

Andrew Bartlett


Revisions:
pdb_ldap.c  1.28.2.100 = 1.28.2.101

http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_ldap.c.diff?r1=1.28.2.100r2=1.28.2.101


  1   2   >