[Samba] samba3 smbpasswd search filter

2004-03-05 Thread Lukas Meyer
Hi list

I set up a samba 3 PDC with ldap authentification. Now i have some 
troubles concerning the machine account creation on the fly while 
joining the domain. I'm using the smbldap-tools 8.4 for user creation. 
According to the smbldap-tools howto and the samba3-ldap howto: 
http://www.unav.es/cti/ldap-smb/smb-ldap-3-howto.html, the ordinary way 
of creating a machine account is: /path/to/smbldap-tools/smbldap-useradd 
-w machinename$

That works without any problem but I can't join the domain. Now I could 
find the problem why it won't work. If I call smbpasswd to change the 
machines password in debug mode. I can see that this script has this 
search filter for ldap entries:

((uid=machinename$)(objectclass=sambaSamAccount))

However the entry that was done by the smbldap-useradd -w hasn't any 
objectclass sambaSamAccount. And as i thought after adding a 
sambaSamAccount objectclass to this machine account, I could join the 
domain. So where's the fault? I think the machine account don't need any 
objectclass sambaSamAccount so I have to change the search filter for 
smbpasswd or samba? And how to do this?

I really welcome any suggestions

best regards
Lukas
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba printing and page counting

2004-03-05 Thread Collen Blijenberg MLHJ
Try the CUPS printer drivers for windows.. (version 5 ??)
they support page counting, coz it convert your printing page
to a pdf format.. and then you can see the number of pages
at one of the last lines..

easy to make a script who's filtering out the page numbers
and prosses it to the account..
l8r
-
Collen Blijenberg (MLHJ)

Thursday, March 4, 2004, 10:31:46 PM, you wrote:

ML Hi, I'm running Samba printing services to share a printer on
ML my Linux box with a network of windows machines. Everything works
ML great. The only problem I am having is that I cannot count the
ML number of pages printed by each user. 

ML My printers section looks like this:
ML [printers]
MLcomment = All Printers
MLbrowseable = no
MLguest ok = no
MLpath = /var/spool/samba
MLprintable = yes
MLpublic = no
MLcreate mask = 0700
MLprint command = lpr -P %p -o raw %s -r -J %m.%J
MLlpq command = lpstat -o %p
MLlprm command = cancel %p-%j

ML If I had a script or escape sequence that would specify the
ML number of pages of the print document I would have no problem
ML writing a script to keep track of everything else. The easiest
ML solution I see to my problem is if samba has a nice escape
ML sequence, like %P or something, or if there was a little script I
ML could pass the spool document to and it'd tell me. Since I'm
ML printing raw, and the windows drivers are pcl, I doubt there's any
ML script that would work.

ML Any help is greatly appreciated.

ML Matt



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] 2.2.7 and getting old SID

2004-03-05 Thread Carsten Dumke
Hello,

Eric Freed wrote:
 I am trying to migrate from a Samba 2.2.7 PDC to Samba 3, and 
 I need the old domain SID. 2.2.7 doe not have the net tools, 
 so net getlocalsid will not work, the 2.2.7 version of 
 smbpasswd does not have the -X option (which 
 www.richardsharpe.com talked about) and
 tdbdump dumps the SID 
 in HEX, but I don't think I can use that (and I have been 
 unsuccessful in converting to ASCII)...
 
 Is there any way to get the SID in a usable format?  

I've done this for a samba 2.2.6 server. I used the code
from samba 2.2.8 and compiled it with samba 2.2.6.

Best regards,

Carsten

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] XP pro profile error _samr_alias ...

2004-03-05 Thread Andrew Bartlett
On Fri, 2004-03-05 at 20:06, Robert SKUBIJ wrote:
 I have problem while login into samba 2.2.8a PDC (debian woody) on 
 windows XP Pro.
 User log display error:
 
 rpc_server/srv_samr_nt.c: samr_query_aliasmem(2626)
 _samr_query_aliasmem: Not yet implemented.
 
 What is bad. I don't know.
 Please, help me.

There is no issue, this is just not implemented.  The only harm is to
your logfile's size.  

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Problem with Winbindd not showing all Groups

2004-03-05 Thread Plant Thomas
Hi,

I've downloaded and  installed the samba 3.0.2 binary packages for Debian
3.0.

The problem is, that if I do 'wbinfo -g' I only see a small number of
groups,
about 10, where there should be almost 30 groups.
The 'wbinfo -u' works fine, I see all my users.
Could it be that there is a problem with german 'Umlauts (äöü)'? I have some
groups
with these characters in it, but not all missing have them in it.

Thanks for every suggestion,
Thomas
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] (no subject)

2004-03-05 Thread kevins
Hi!!!
i am a boy from latvia and I have samba 2.2.2 server. I have one problem. 
Samba works just with existing users, but don't accept new ones. It also 
don't accept sambas root passwd when I join the client to a domain. But in 
server I change passwords for old users, it don't accept new ones, but is 
still working with old passwords.
What can be the problem?
Kevins

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Best backend for member domain

2004-03-05 Thread Beast

OK its not a good question, but I'm just asking for suggestions.

In purely samba controlled domain (with samba3+ldapsam), what is the best backend for 
member domain (servers) and linux (samba) clients? tdbsam +winbind or use same 
ldapbackend, for performance and maintainanble reasons.


--beast

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with Winbindd not showing all Groups

2004-03-05 Thread Stefan=20G=FCnther
Hi, 
 
 The problem is, that if I do 'wbinfo -g' I only see a small number of 
 groups, 
 about 10, where there should be almost 30 groups. 
 The 'wbinfo -u' works fine, I see all my users. 
 Could it be that there is a problem with german 'Umlauts (äöü)'? I have some 
 groups 
 with these characters in it, but not all missing have them in it. 
 
as far as I know, not only language specfic characters (like äüö) are a problem, but 
spaces in group or user 
names,too. 
 
Stefan 
 
--   
  
*  
in-put GbR - Das Linux-Systemhaus  
Stefan-Michael Günther  
Moltkestraße 49 D-76133 Karlsruhe  
Tel./Fax : +49 (0)721 / 83044 - 98/93  
http://www.in-put.de/  
*  

Nachrichten, Musik und Spiele schnell und einfach per Quickstart im 
WEB.DE Screensaver - Gratis downloaden: http://screensaver.web.de/?mc=021110

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] getpwnam() fails! (with working nss_ldap setup)

2004-03-05 Thread Simon Dassow
Hi list,
I've seen this error now many times (at my own setup and in the
archives):

  sam_account_ok: Checking SMB password for user Simon Dassow
[2004/03/05 12:54:19, 1] auth/auth_util.c:make_server_info_sam(821)
  User Simon Dassow in passdb, but getpwnam() fails!

But:
# id 'Simon Dassow'
uid=1000(Simon Dassow) gid=513(Domain Users) groups=513(Domain Users),
512(Domain Admins)

nss_ldap _is_ working... to verify this from another place (i'm using
FreeBSD so there is no getent):
# perl -e 'print join( - ,getpwnam(Simon Dassow)).\n'
Simon Dassow - x - 1000 - 513 - 0 -  - Simon Dassow - /home/dasi -
/usr/local/bin/zsh - 0

If i logon with an `normal' unix account that has been added via
`smbpasswd -a user' everything is working. Maybe someone has a hint for
me.

And before i forgot, that's my setup:
FreeBSD 5.2.1 with nss_ldap (and yes, i have ldap in /etc/nsswitch.conf)
OpenLDAP 2.0.27
Samba 3.0.1
smbldap-tools 0.8.4

Any help is appreciated.

Regards,
Simon


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Errors related to Samba in httpd log!

2004-03-05 Thread bill . allison

Hello list

First and foremost to any developers listening - thank you for Samba - it   
is just brilliant.

Apologies - this is a long post...

I am not getting complaints about logon problems from users but I have   
noticed in /var/log/httpd/error_log, entries like the following for a few   
users when their logon scripts map drives to shares. Looking back I can   
see that it has been happening,  since we installed samba some months   
ago. I suspect that the mappings are being accomplished ok, and that the   
below is some sort of side effect, because at least the netlogon share   
must be getting mapped successfully otherwise the other mappings would   
not be attempted, since they are applied by a login script located within   
the netlogon share. Also, for a given user logging on, not all their   
mappings produce an entry in the httpd log. For example between the two I   
have separated out below, several other mappings will have been done.   
Attached is smb.conf and kix login script. You will see that although   
there is a share intranet (= /disk1/data/intranet), the login script does   
not use it. Some more info is below - please ask for anything else that   
might help. This seems weird to me and I haven't a clue where to start   
looking. Has anyone come across this before or know where I should look   
to resolve it?

TIA
Bill A.

[Thu Mar  4 18:36:17 2004] [error] [client 192.0.1.29] File does not   
exist: /disk1/data/intranet/data
[Thu Mar  4 19:43:22 2004] [error] [client 192.0.1.37] File does not   
exist: /disk1/data/intranet/jmckb
[Fri Mar  5 08:23:17 2004] [error] [client 192.0.1.35] File does not   
exist: /disk1/data/intranet/netlogon
[Fri Mar  5 08:23:24 2004] [error] [client 192.0.1.35] File does not   
exist: /disk1/data/intranet/antivirus
[Fri Mar  5 08:29:09 2004] [error] [client 192.0.1.35] File does not   
exist: /disk1/data/intranet/aileen

[Fri Mar  5 08:33:27 2004] [error] [client 192.0.1.34] File does not   
exist: /disk1/data/intranet/netlogon
[Fri Mar  5 08:33:35 2004] [error] [client 192.0.1.34] File does not   
exist: /disk1/data/intranet/antivirus

[Fri Mar  5 09:10:20 2004] [error] [client 192.0.1.35] File does not   
exist: /disk1/data/intranet/aileen
[Fri Mar  5 09:50:16 2004] [error] [client 192.0.1.35] File does not   
exist: /disk1/data/intranet/aileen
[Fri Mar  5 09:57:57 2004] [error] [client 192.0.30.27] File does not   
exist: /disk1/data/intranet/netlogon
[Fri Mar  5 09:57:59 2004] [error] [client 192.0.30.27] File does not   
exist: /disk1/data/intranet/NETLOGON
[Fri Mar  5 10:19:14 2004] [error] [client 192.0.1.35] File does not   
exist: /disk1/data/intranet/aileen
[Fri Mar  5 10:21:04 2004] [error] [client 192.0.1.35] File does not   
exist: /disk1/data/intranet/personnel
[Fri Mar  5 10:22:41 2004] [error] [client 192.0.1.34] File does not   
exist: /disk1/data/intranet/accounts
[Fri Mar  5 10:26:45 2004] [error] [client 192.0.20.184] File does not   
exist: /disk1/data/intranet/netlogon
[Fri Mar  5 10:26:52 2004] [error] [client 192.0.20.184] File does not   
exist: /disk1/data/intranet/antivirus
[Fri Mar  5 10:28:05 2004] [error] [client 192.0.30.27] File does not   
exist: /disk1/data/intranet/data
[Fri Mar  5 10:43:55 2004] [error] [client 192.0.1.35] File does not   
exist: /disk1/data/intranet/data
[Fri Mar  5 11:09:45 2004] [error] [client 192.0.1.35] File does not   
exist: /disk1/data/intranet/aileen

My environment:

linux SuSE SLES 8.0 kernel 2.4.19
samba 2.2.8 compiled from source
apache 1.3.26 installed with distro
clients Win XP Pro SP1a up-to-date with MS critical patches

Further info:

Apache document root is /disk1/data/intranet
Mappings are applied by a kix login script with one exception (antivirus   
share) which is applied by  /usr/local/samba/var/login.bat after it runs   
kix
There are no corresponding entries in log.?mbd nor in   
log.clienthostname

smb.conf:
=
[global]
workgroup = BSWHQ
netbios name = FILESERVER-E1
server string = HQ File Server and PDC
add user script = cd /usr/local/sbin;smbldap-useradd.pl -w %u
passwd program = /usr/local/sbin/smbldap-passwd.pl %u
guest account = guest
log file = /usr/local/samba/var/log.%m
max log size = 50
security = user
socket options = TCP_NODELAY
interfaces = 192.0.1.102/24 127.0.0.1/8
domain admin group = @DomainAdmins
enhanced browsing = no
local master = yes
os level = 64
domain master = yes
preferred master = yes
wins support = yes
wins proxy = yes
dns proxy = no
name resolve order = wins bcast hosts
remote announce = 192.0.110.101 192.0.30.101 192.0.20.101   
192.0.40.101
remote browse sync = 192.0.110.101 192.0.30.101 192.0.20.101   
192.0.40.101
encrypt passwords = yes
unix password sync = yes
passwd chat =  *New*password* %n\n *new*password* %n\n *changed*
   

[Samba] printer configuration

2004-03-05 Thread Daniel Stonier
Seem to have come to a dead end trying to configure a cups printer on a 
samba server. Been reading and googling till my eyes are about ready to 
google themselves. Anyway, it would be fantastic if one of you might have 
seen something I've missed.

Setup: linux server running samba3. Also on the lan are a  win95, winXP 
and linux box.

smb.conf:
[global]
workgroup = HOME
server string = valhalla# my hostname
hosts allow = 192.168.1. 127.
interfaces = eth1   # I have a cable modem on eth0

printing = cups
printcap name = cups
load printers = yes

guest account = snorri  # my user
guest ok = yes
map to guest = bad user
		insert log commands here

security = user
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd  
[backup]
comment = backup directory
path = /mnt/backup
writeable = yes
guest ok = yes
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
printable = yes
guest ok = yes
writeable = no
*

Results:
		Backup directory share works fine - no problem here.
		testparm smb.conf verified ok
		smbclient -L valhalla lists directory and printer lp0 accurately
		smbclient //valhalla/lp0 is accessed no problem, but
			print textfile hangs until it gets a Call timed out response.
		tail /var/log/samba/valhalla.log shows up the message
			print cache expired for queue lp0  but nothing else ominous.
		all the nmblookup commands seem to work fine as well, it detects 
everything
  		in the environs without too much hassle.
		the windows machine can see the printer if I set browseable to yes, but 
hangs if
	I try to do anything with it.
		lastly, firewall was off while I was testing. I also brought the eth0 
interface down
  			just in case it was causing problems.

So I'm confounded and have no idea where to go from here!

Thanks,
Daniel.
--
Daniel Stonier
email:[EMAIL PROTECTED]
http://members.optusnet.com.au/stonierd/
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] What version started building libsmbclient.so?

2004-03-05 Thread Steven McClellan
Hello,

I am trying to write a program that uses some smbclient features but am
having trouble linking to libsmbclient.  I only have libsmbclient.a
installed on my machine (Redhat 9 Linux).  I believe that the smbclient
version on my updated system is 2.2.7a-security-rollup-fix.  All of the
other libraries that I normally link to are xxx.so and so either I need to
figure out how to link to an xxx.a library, or I need to find a version of
the smbclient that builds the libsmbclient.so.

Any help would be greatly appreciated.

Thanks,

-Steve McClellan

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Printing and share problems

2004-03-05 Thread mjynht
Hi everyone.

I have installed samba 3.0.2 on slackware 9.0.

I have a pentium iv 1.7 GHz with 256 MB of RAM and a harddrive of 40 GB.

I'm supporting 32 machines so far.

This is the thing.

Most of the times computers loose connection or access to printers that were
working fine. The same thing happens with share folders among computers.

Does anyone have an answer to this issue that's killing me..

Best regards,

Daniel
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] upgrade samba-2.2.8 to samba-3.0.2a (umlauts)

2004-03-05 Thread Götz Reinicke
Hi,

we run a samba 2.2.8 server and like to migrate to a faster, new server 
running samba 3.0.2a.

I thought to copy all files from the old to the new one mounting the new 
shares by nfs. For a test I copied some files using scp.

A problem concernes the german umlauts:

on the old server they aren't displayed if I ls the files while 
browsing the share works fine. If I copy the files to the new share, the 
files are visible in a terminal by e.g. ls, but not visible on the share 
mounted by my client :-(

I'm using the default settings for character coding or the charset options.

Any ideas how to solve my problem? Is ther a (easy) workaround?

Thanks!

Götz Reinicke
--
Götz Reinicke
IT Koordinator - IT OfficeNet
Tel. +49 (0) 7141 - 969 420
Fax  +49 (0) 7141 - 969 55 420
[EMAIL PROTECTED]
Filmakademie Baden-Württemberg
Mathildenstr. 20
71638 Ludwigsburg
www.filmakademie.de
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Printing and share problems

2004-03-05 Thread Michael Aldrich
Anything out of the ordinary in your log files when the problem occurs?
Can you post a snip of your smb.conf?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf
Of mjynht
Sent: Friday, March 05, 2004 9:50 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Printing and share problems


Hi everyone.

I have installed samba 3.0.2 on slackware 9.0.

I have a pentium iv 1.7 GHz with 256 MB of RAM and a harddrive of 40 GB.

I'm supporting 32 machines so far.

This is the thing.

Most of the times computers loose connection or access to printers that were
working fine. The same thing happens with share folders among computers.

Does anyone have an answer to this issue that's killing me..

Best regards,

Daniel
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Errors related to Samba in httpd log!

2004-03-05 Thread Gmes Gza
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi

This although strange it seems to be the manifestation of the lot
discussed webclient, which appeared in XP, and caused a lot of trouble
to many people. If you would disable it on all of your clients, maybe
that strange error messages should disappear.
Cheers

Geza
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFASJbo/PxuIn+i1pIRAhqgAKCy4omZ5O3LFeaoH2t2uYhMMz55kQCdG5+A
778FBxe0wi1qojY5F8TJIZA=
=9Zir
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] preexec and simultaneous logins

2004-03-05 Thread Andreas
While searching for a way to limit simultaneous logins to a
samba PDC/BDC, I found suggestions about using a preexec script.

This makes sense, I could plug such a script in the netlogon share
and parse smbstatus or something to find out if the user has already
logon.

But...

What do I do then to deny the logon? Kill the smbd process that is
servicing this request? Won't the workstation just try again? Or
send a winpopup message?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] NT4 Migration Question

2004-03-05 Thread L. Mark Stone
A client has an existing NT4 domain with several NT4 servers. Two of the
NT4 Servers function as a PDC and a BDC.

We are installing Samba-3 on SuSE 9.0 Pro as a PDC with an LDAP backend,
and decommissioning the NT4 PDC at the same time. So far, so good. We
can also rebuild the old PDC hardware as a Samba-3 on SuSE 9.0 Pro BDC.

Unfortunately however, the NT4 BDC cannot be removed from the network
for another six months, as it hosts a vertical application key to the
business and used every day by some 100 users at the client.  In
addition, the configuration of this BDC is quite complex; reinstalling
the OS and the vertical application would be a challenge and, given the
various customizations to the vertical application, not likely to
succeed.

Two questions then:

1. What are the implications of leaving this existing NT4 BDC in place
with a new Linux-Samba-3 PDC (and possibly a new Linux-Samba BDC)?

2. Has anyone used UPromote, which claims to do be able to demote an NT4
BDC to a member server without reinstalling the OS? (See
http://utools.com/UPromote.asp for more info.)

Thanks!
Mark

-- 
__
L. Mark Stone
President
Reliable Networks of Maine, LLC
477 Congress Street, 5th Floor
Portland, ME 04107

Tel: (207) 772-5678
Cell: (917) 597-2057
Email: [EMAIL PROTECTED]
Web: http://www.RNoME.com


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT4 Migration Question

2004-03-05 Thread Craig White
On Fri, 2004-03-05 at 08:53, L. Mark Stone wrote:
 A client has an existing NT4 domain with several NT4 servers. Two of the
 NT4 Servers function as a PDC and a BDC.
 
 We are installing Samba-3 on SuSE 9.0 Pro as a PDC with an LDAP backend,
 and decommissioning the NT4 PDC at the same time. So far, so good. We
 can also rebuild the old PDC hardware as a Samba-3 on SuSE 9.0 Pro BDC.
 
 Unfortunately however, the NT4 BDC cannot be removed from the network
 for another six months, as it hosts a vertical application key to the
 business and used every day by some 100 users at the client.  In
 addition, the configuration of this BDC is quite complex; reinstalling
 the OS and the vertical application would be a challenge and, given the
 various customizations to the vertical application, not likely to
 succeed.
 
 Two questions then:
 
 1. What are the implications of leaving this existing NT4 BDC in place
 with a new Linux-Samba-3 PDC (and possibly a new Linux-Samba BDC)?
 
 2. Has anyone used UPromote, which claims to do be able to demote an NT4
 BDC to a member server without reinstalling the OS? (See
 http://utools.com/UPromote.asp for more info.)

Didn't know about #2 - interesting...

I am functioning with previous WinNT4 PDC unchanged after net rpc
vampire operation with the exception that netlogon service has been
disabled. Has been working - I cannot use the UserManager etc. tools
from this machine though.

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba Gigabit very very slow?

2004-03-05 Thread David Brodbeck


 -Original Message-
 From: Hans Wilmer [mailto:[EMAIL PROTECTED]

 Jonas Almquist wrote:
 
  Hi!
  
  I´m having trubbles with the speed on my samba server,
  Realtek 8169 Gigabit NIC
 
 Avoid Realtek NICs wherever you can.

If FTP is fast and Samba is slow, I doubt the problem is the NIC.  If the
NIC were at fault FTP would be slow, too.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Solaris 9 --with-krb5 problems

2004-03-05 Thread ww m-pubsyssamba
Hi,

I am running configure with the option --with-krb5=/opt/local which is
where I have heimdal installed.  The problem is that after running make,
it still tries to use the include files from SUN that are in /usr/ and this
screws up the compile.

## Mmm strange, I've not had any problems on Solaris 9 with MIT Kerberos...
## What files is it accidentally using, and in what way does this screw up your 
compile?

Since I only need samba to be a PDC for my windows workstations,
Should I just build it without kerberos support?  I will store all samba
user information in ldap and so authentication will be done against the
ldap LMpasswd and NTpasswd entries and not through kerberos.  This is my
understanding so please correct me if I am wrong.

## I think there are some ways of implementing MIT KDC server with Samba as a PDC but 
this is not a normal configuration.
## If all you want is a Samba PDC using NTLM authentication then I do not beleive you 
need any Kerberos support
## hope this helps, Andy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Errors related to Samba in h

2004-03-05 Thread bill . allison


Will try on Monday morning and let you know. Many thanks for replying.

Cheers
Bill A.

 -Original Message-
From: [EMAIL PROTECTED]
Sent: 05 March 2004 15:05
To: Bill Allison
Cc: [EMAIL PROTECTED]; Mike Leitch
Subject: Re: [Samba] Errors related to Samba in h


   

 --  
 --
 -BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi

This although strange it seems to be the manifestation of the lot
discussed webclient, which appeared in XP, and caused a lot of trouble
to many people. If you would disable it on all of your clients, maybe
that strange error messages should disappear.

Cheers

Geza
 -BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFASJbo/PxuIn+i1pIRAhqgAKCy4omZ5O3LFeaoH2t2uYhMMz55kQCdG5+A
778FBxe0wi1qojY5F8TJIZA=
=9Zir
 -END PGP SIGNATURE-



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] DNS proxy is broken in 3.0.2a?

2004-03-05 Thread Dmitry Melekhov

- Original Message -
From: Gerald (Jerry) Carter [EMAIL PROTECTED]
To: Dmitry Melekhov [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Friday, March 05, 2004 6:00 PM
Subject: Re: [Samba] DNS proxy is broken in 3.0.2a?


 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Dmitry Melekhov wrote:

 | Today I upgraded 2.2.8a to 3.0.2a  and now samba doesn't
 | work as dns proxy.

 Known issue currently:

 ~   https://bugzilla.samba.org/show_bug.cgi?id=607


Thank you!

As I see this bug is known for a long time :-(

But, if  wins replication is still not supported, is there any way to change
wins info without nmbd restart?
We run samba in large enough network (  we are oil company ;-)   ), and we
use dns proxy as wins repication replacement...


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Solaris 9 --with-krb5 problems

2004-03-05 Thread Diego Julian Remolina
The problem is with the header files.  It tries to use the ones from
Solaris 9 kerberos implementatoin which are located in /usr/include as
opposed to the ones from heimdal in /opt/local/include).  This happens
using both cc and gcc.
configure works  fine but make fails.

I also changed /var/ld/ld.config, but the problem is not the libraries, is
the include files. This is what crle shows:
oak:/tmp/samba-3.0.2a/source % crle

Configuration file [3]: /var/ld/ld.config
  Default Library Path (ELF):   /opt/local/lib:/usr/lib
  Trusted Directories (ELF):/usr/lib/secure  (system default)

Command line:
  crle -c /var/ld/ld.config -l /opt/local/lib:/usr/lib


The last few lines of configure are:
snip
checking how to build vfs_cap... shared
Using libraries:
LIBS = -lsendfile -lsec -lgen -lresolv -lsocket -lnsl  -liconv
KRB5_LIBS = -lcom_err  -L/opt/local/encap/heimdal-0.6/lib -lgssapi
-lkrb5 -lasn1 -L/opt/local/lib -lcrypto -lroken
LDAP_LIBS = -lldap -llber
AUTH_LIBS =
checking configure summary... yes
configure: creating ./config.status
config.status: creating include/stamp-h
config.status: creating Makefile
config.status: creating script/findsmb
config.status: creating smbadduser
config.status: creating script/gen-8bit-gap.sh
config.status: creating include/config.h

Then when I type make:
oak:/tmp/samba-3.0.2a/source % make
Using FLAGS =  -O -I/opt/local/encap/heimdal-0.6/include
-I/opt/local/include  -Iinclude -I/tmp/samba-3.0.2a/source/include
-I/tmp/samba-3.0.2a/source/ubiqx -I/tmp/samba-3.0.2a/source/smbwrapper
-I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-I/opt/local/encap/heimdal-0.6/include -I/opt/local/include
-I/tmp/samba-3.0.2a/source
  LIBS = -lsendfile -lsec -lgen -lresolv -lsocket -lnsl -liconv
  LDSHFLAGS = -G
  LDFLAGS =
Generating smbd/build_options.c
Building include/proto.h
creating /tmp/samba-3.0.2a/source/include/proto.h
Building include/wrepld_proto.h
creating /tmp/samba-3.0.2a/source/include/wrepld_proto.h
Building include/build_env.h
creating /tmp/samba-3.0.2a/source/nsswitch/winbindd_proto.h
creating /tmp/samba-3.0.2a/source/web/swat_proto.h
creating /tmp/samba-3.0.2a/source/client/client_proto.h
creating /tmp/samba-3.0.2a/source/utils/net_proto.h
Compiling dynconfig.c
In file included from include/includes.h:421,
 from dynconfig.c:21:
/opt/local/encap/heimdal-0.6/include/gssapi.h:50: warning: redefinition of
`OM_uint32'
/usr/include/gssapi/gssapi.h:87: warning: `OM_uint32' previously declared
here
/opt/local/encap/heimdal-0.6/include/gssapi.h:52: warning: redefinition of
`gss_uint32'
/usr/include/gssapi/gssapi.h:64: warning: `gss_uint32' previously declared
here
/opt/local/encap/heimdal-0.6/include/gssapi.h:64: error: conflicting types
for `gss_name_t'
/usr/include/gssapi/gssapi.h:57: error: previous declaration of
`gss_name_t'
/opt/local/encap/heimdal-0.6/include/gssapi.h:76: error: conflicting types
for `gss_ctx_id_t'
.
.
.  keeps going.. it is a long list
.
.
/usr/include/gssapi/gssapi.h:695: error: previous declaration of
`gss_seal'
/opt/local/encap/heimdal-0.6/include/gssapi.h:765: error: conflicting
types for `gss_unseal'
/usr/include/gssapi/gssapi.h:704: error: previous declaration of
`gss_unseal'
make: *** [dynconfig.o] Error 1

Any ideas?

--
Diego Julian Remolina
System Administrator
School of Mathematics
Georgia Institute of Technology
(404) 894-7385
(404) 894-1309
--

On Fri, 5 Mar 2004, ww m-pubsyssamba wrote:

 Hi,

 I am running configure with the option --with-krb5=/opt/local which is
 where I have heimdal installed.  The problem is that after running make,
 it still tries to use the include files from SUN that are in /usr/ and this
 screws up the compile.

 ## Mmm strange, I've not had any problems on Solaris 9 with MIT Kerberos...
 ## What files is it accidentally using, and in what way does this screw up your 
 compile?

 Since I only need samba to be a PDC for my windows workstations,
 Should I just build it without kerberos support?  I will store all samba
 user information in ldap and so authentication will be done against the
 ldap LMpasswd and NTpasswd entries and not through kerberos.  This is my
 understanding so please correct me if I am wrong.

 ## I think there are some ways of implementing MIT KDC server with Samba as a PDC 
 but this is not a normal configuration.
 ## If all you want is a Samba PDC using NTLM authentication then I do not beleive 
 you need any Kerberos support
 ## hope this helps, Andy.
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] SAMBA 3 as PDC - W2K/WXP Pro logon trouble

2004-03-05 Thread Scott Gross
The machine accounts will show with the users they will be suffixed with a
$.  In the LDAP backend I have an SID for the domain name and an SID for the
server itself which is not contained in LDAP.  Then each computer and each
user had two SID's (sambaSID and sambaPrimaryGroupSID) and the groups only
have one SID (sambaSID).  My discrepancy was in the domain name SID which
was different than the servers SID. The groups and users matched the servers
SID but the computers matched both the servers SID (sambaPrimaryGroupSID)
and the wrong domain name SID from the LDAP entry (sambaSID). When I made
all match the servers SID everything started working.  I haven't worked with
the smbpasswd as a PDC so I'm not sure where all the SID's are stored.

 -Original Message-
 From: Stumpfl Markus [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, March 03, 2004 11:30 PM
 To: 'Scott Gross'
 Cc: MailingList_Samba
 Subject: AW: [Samba] SAMBA 3 as PDC - W2K/WXP Pro logon trouble
 
 Oh, so you are using ldap..., well I'm still working with smbpasswd as
 backend :-(
 
 Anyway, I tried 'net getlocalsid' for the domain-sid - ok
 Next 'net usersidlist' which should show me the user-sids - didn't
 work: [2004/03/04 06:40:05, 0, pid=31232, effective(0, 0), real(0, 0)]
 utils/net_rpc.c:net_usersidlist(2158)
   Could not get the user/sid list
 
 So used 'net user' instead, which then gave me the user list!?
 
 What am I missing here? And is there a way to see the machine sids too?
 Or are they included in the users?
 
 Thanks in advance,
 
 Markus
 
 
 
  -Ursprüngliche Nachricht-
  Von: Scott Gross [mailto:[EMAIL PROTECTED]
  Gesendet: Mittwoch, 03. März 2004 18:29
  An: Stumpfl Markus
  Betreff: RE: [Samba] SAMBA 3 as PDC - W2K/WXP Pro logon trouble
  Wichtigkeit: Hoch
 
  I use a little windows gui program called LDAP browser to look at my
 LDAP
  entries and I was just looking through the entries at the SID's since
  someone suggested it might be an SID problem and noticed the
 discrepancy
  on
  the domain name entry.  I changed it to match all the others just to
 see
  if
  it would have any effect and wallah it worked.
 
   -Original Message-
   From: Stumpfl Markus [mailto:[EMAIL PROTECTED]
   Sent: Tuesday, March 02, 2004 10:52 PM
   To: 'Scott Gross'
   Subject: AW: [Samba] SAMBA 3 as PDC - W2K/WXP Pro logon trouble
  
   Thx, but how did you find out? With what commands? Sry for the
 stupid
   questions, but I'm kinda knew to samba.
  
   Thanks in advance,
  
   Stumpfl Markus
  
  
  
-Ursprüngliche Nachricht-
Von: Scott Gross [mailto:[EMAIL PROTECTED]
Gesendet: Dienstag, 02. März 2004 18:14
An: Stumpfl Markus; Scott Gross
Betreff: RE: [Samba] SAMBA 3 as PDC - W2K/WXP Pro logon trouble
   
I got mine working it was SID mismatch. The Domain name SID was
   different
from the server and the users.
   
   
 -Original Message-
 From: Stumpfl Markus [mailto:[EMAIL PROTECTED]
 Sent: Monday, March 01, 2004 11:22 PM
 To: 'Scott Gross'
 Subject: AW: [Samba] SAMBA 3 as PDC - W2K/WXP Pro logon trouble

 Do you get the problem (when trying domain logon): invalid
 password
   or
 domain?
 I've got the same prob...

 I'll tell you, when it's working and vice versa, hopefully ;-)

 Stumpfl Markus



  -Ursprüngliche Nachricht-
  Von: [EMAIL PROTECTED]
 
 [mailto:[EMAIL PROTECTED]
   Im
  Auftrag von Scott Gross
  Gesendet: Freitag, 27. Februar 2004 18:25
  An: [EMAIL PROTECTED]
  Betreff: [Samba] SAMBA 3 as PDC - W2K/WXP Pro logon trouble
 
  I have a Samba 3 PDC running with an LDAP backend on Red Hat
 8.
   All
  authentication appears to be working correctly but I can't
 login
   to
 the
  domain from a W2K or WXP Pro workstation after I have
 successfully
 joined
  them to the domain.  If I login locally to the workstation I
 can
 browse
  the
  Samba shares just fine.  I have checked the schannel and sign
 or
   seal
  settings on both the workstations and the server and made sure
   they
 were
  set
  to disable but still no luck.  Can anyone give me any ideas on
 how
   to
  solve
  this problem.
 
 
 
  TIA
 
  Scott
 
 
 
  Smb.conf
 
  # Samba config file created using SWAT
 
  # from 0.0.0.0 (0.0.0.0)
 
  # Date: 2003/11/25 10:42:04
 
 
 
  # Global parameters
 
  [global]
 
  workgroup = FIFEDEV
 
  netbios name = Dev
 
  null passwords = Yes
 
  passdb backend = ldapsam
 
  passwd program = /usr/local/bin/smbldap-passwd.pl -o
 %u
 
  passwd chat = *new*password* %n\n *new*password:* %n\
  *successfully*
 
  passwd chat debug = Yes
 
  log file = /var/log/samba/%m.log
 
  

RE: [Samba] Solaris 9 --with-krb5 problems

2004-03-05 Thread ww m-pubsyssamba
## Ok as far as I'm aware the following is true, you must use MIT or Heimdal Kerberos 
with
## Solaris because Solaris Kerberos is not available with header files (Sun have no 
plans
## to include headers with their bundled distribution). Sun/MIT/Heimdal 
implementations of
## Kerberos are all gssapi compliant authentication mechanisms. 
## You appear to have installed what looks like a second version of gssapi (I assume 
also Heimdal)
## which Samba make is not liking. I'm sorry I haven't tried installing Heimdal 
Kerberos myself,
## can you check whether it is possible to install/compile it without installing a 
duplicate
## implementation of gssapi? Or maybe someone else on the list can help?
## thanks Andy. 


The problem is with the header files.  It tries to use the ones from
Solaris 9 kerberos implementatoin which are located in /usr/include as
opposed to the ones from heimdal in /opt/local/include).  This happens
using both cc and gcc.
configure works  fine but make fails.

I also changed /var/ld/ld.config, but the problem is not the libraries, is
the include files. This is what crle shows:
oak:/tmp/samba-3.0.2a/source % crle

Configuration file [3]: /var/ld/ld.config
  Default Library Path (ELF):   /opt/local/lib:/usr/lib
  Trusted Directories (ELF):/usr/lib/secure  (system default)

Command line:
  crle -c /var/ld/ld.config -l /opt/local/lib:/usr/lib


The last few lines of configure are:
snip
checking how to build vfs_cap... shared
Using libraries:
LIBS = -lsendfile -lsec -lgen -lresolv -lsocket -lnsl  -liconv
KRB5_LIBS = -lcom_err  -L/opt/local/encap/heimdal-0.6/lib -lgssapi
-lkrb5 -lasn1 -L/opt/local/lib -lcrypto -lroken
LDAP_LIBS = -lldap -llber
AUTH_LIBS =
checking configure summary... yes
configure: creating ./config.status
config.status: creating include/stamp-h
config.status: creating Makefile
config.status: creating script/findsmb
config.status: creating smbadduser
config.status: creating script/gen-8bit-gap.sh
config.status: creating include/config.h

Then when I type make:
oak:/tmp/samba-3.0.2a/source % make
Using FLAGS =  -O -I/opt/local/encap/heimdal-0.6/include
-I/opt/local/include  -Iinclude -I/tmp/samba-3.0.2a/source/include
-I/tmp/samba-3.0.2a/source/ubiqx -I/tmp/samba-3.0.2a/source/smbwrapper
-I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-I/opt/local/encap/heimdal-0.6/include -I/opt/local/include
-I/tmp/samba-3.0.2a/source
  LIBS = -lsendfile -lsec -lgen -lresolv -lsocket -lnsl -liconv
  LDSHFLAGS = -G
  LDFLAGS =
Generating smbd/build_options.c
Building include/proto.h
creating /tmp/samba-3.0.2a/source/include/proto.h
Building include/wrepld_proto.h
creating /tmp/samba-3.0.2a/source/include/wrepld_proto.h
Building include/build_env.h
creating /tmp/samba-3.0.2a/source/nsswitch/winbindd_proto.h
creating /tmp/samba-3.0.2a/source/web/swat_proto.h
creating /tmp/samba-3.0.2a/source/client/client_proto.h
creating /tmp/samba-3.0.2a/source/utils/net_proto.h
Compiling dynconfig.c
In file included from include/includes.h:421,
 from dynconfig.c:21:
/opt/local/encap/heimdal-0.6/include/gssapi.h:50: warning: redefinition of
`OM_uint32'
/usr/include/gssapi/gssapi.h:87: warning: `OM_uint32' previously declared
here
/opt/local/encap/heimdal-0.6/include/gssapi.h:52: warning: redefinition of
`gss_uint32'
/usr/include/gssapi/gssapi.h:64: warning: `gss_uint32' previously declared
here
/opt/local/encap/heimdal-0.6/include/gssapi.h:64: error: conflicting types
for `gss_name_t'
/usr/include/gssapi/gssapi.h:57: error: previous declaration of
`gss_name_t'
/opt/local/encap/heimdal-0.6/include/gssapi.h:76: error: conflicting types
for `gss_ctx_id_t'
.
.
.  keeps going.. it is a long list
.
.
/usr/include/gssapi/gssapi.h:695: error: previous declaration of
`gss_seal'
/opt/local/encap/heimdal-0.6/include/gssapi.h:765: error: conflicting
types for `gss_unseal'
/usr/include/gssapi/gssapi.h:704: error: previous declaration of
`gss_unseal'
make: *** [dynconfig.o] Error 1

Any ideas?

--
Diego Julian Remolina
System Administrator
School of Mathematics
Georgia Institute of Technology
(404) 894-7385
(404) 894-1309
--

On Fri, 5 Mar 2004, ww m-pubsyssamba wrote:

 Hi,

 I am running configure with the option --with-krb5=/opt/local which is
 where I have heimdal installed.  The problem is that after running make,
 it still tries to use the include files from SUN that are in /usr/ and this
 screws up the compile.

 ## Mmm strange, I've not had any problems on Solaris 9 with MIT Kerberos...
 ## What files is it accidentally using, and in what way does this screw up your 
 compile?

 Since I only need samba to be a PDC for my windows workstations,
 Should I just build it without kerberos support?  I will store all samba
 user information in ldap and so authentication will be done against the
 ldap LMpasswd and NTpasswd entries and not through kerberos.  This is my
 understanding 

[Samba] SMB gurus: please help - I am desperate.

2004-03-05 Thread Linux Lover
I apologize up front for re-posting this, but I need
to find a solution to this problem. I have been having
hard time to believe that there isn't one person among
the SMB gurus that doesn't know how a W2K client
connects to an SMB server. So, if you happen to know
even the slightest hint to this baffling problem, I
would be forever grateful.

OK. Here goes (original subject line was: Why does a
W2K (pro) client do more than it is asked to do?)

Desperate to find out why connecting to a samba
share(on an AIX server) from W2K is so slow, I tried
connecting to the same share from a Linux box, using
smbclient:

smbclient aixserver\\sharedir$ -U lynn

The results were amazing. The connection was so MUCH
FASTER then connecting from a W2K (pro) workstation:

\\aixserver\sharedir$ (in the Start|Run edit box)


When I examined the samba log files on the server, I
could see why.

The log file for the Linux client contained a single
entry:

[2004/02/23 11:55:35, 1]
smbd/service.c:make_connection(636) linuxbox
(192.168.0.4) connect to service sharedir$ as user
lynn (uid=21776, gid=1) (pid 125438)

So clean, so elegant, so beautiful! :)

OTOH, the log file for the W2K client contained an
entry similar to the above, but was immediately
followed by about 30 messages of the form:

[2004/02/23 11:59:03, 0] smbd/password.c:user_ok(683) 
rejected user nobody:3004-302 Your account has
expired; please see the system administrator.
  
Now... my question: Why? What does the W2K client do
that triggers this barrage of rejected authentications
of a user 'nobody' (that is clearly not allowed to
enter)?

More importantly, is there a way to configure EITHER
the W2K client or the Samba server (or both) to not
waste time on these unallowed accesses?

Since smbclient produces such a clean entry, I would
assume the fix must be on the client side (W2K) only.
But I would take any advice. :)

Please note that I am not allowed (in my corporate
environment) to enable the guest account on this
machine. Therefore, the solution must not involve
enabling the guest account (if there is such a
solution).

My smb.conf global section has security=user (actually
no 'security' entry, it simply takes the default,
which is 'user').

The settings of the share are:

[sharedir$]
  comment = %h shared dir
  path = /home/shared
  valid users = +sambagrp techsup
  browseable = No

That's it. Any other settings are implied by taking
the defaults. User account 'lynn' is a member of the
group 'sambagrp' and as you can see from the original
posting, it successfully authenticates from both a W2K
client and a Linux client. 'techsup' is a special user
account (may or may not be a member of 'sambagrp').

I hope this can give further clues to solving the
mystery.


Thanks in advance,
Lynn (Samba 2.2.8a on AIX 5.1)

__
Do you Yahoo!?
Yahoo! Search - Find what you’re looking for faster
http://search.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SMB gurus: please help - I am desperate.

2004-03-05 Thread Victor Medina
Read Implemeting CIFS, freely avaiblable in the web. =)
On Fri, 2004-03-05 at 14:00, Linux Lover wrote:

 I apologize up front for re-posting this, but I need
 to find a solution to this problem. I have been having
 hard time to believe that there isn't one person among
 the SMB gurus that doesn't know how a W2K client
 connects to an SMB server. So, if you happen to know
 even the slightest hint to this baffling problem, I
 would be forever grateful.
 
 OK. Here goes (original subject line was: Why does a
 W2K (pro) client do more than it is asked to do?)
 
 Desperate to find out why connecting to a samba
 share(on an AIX server) from W2K is so slow, I tried
 connecting to the same share from a Linux box, using
 smbclient:
 
 smbclient aixserver\\sharedir$ -U lynn
 
 The results were amazing. The connection was so MUCH
 FASTER then connecting from a W2K (pro) workstation:
 
 \\aixserver\sharedir$ (in the Start|Run edit box)
 
 
 When I examined the samba log files on the server, I
 could see why.
 
 The log file for the Linux client contained a single
 entry:
 
 [2004/02/23 11:55:35, 1]
 smbd/service.c:make_connection(636) linuxbox
 (192.168.0.4) connect to service sharedir$ as user
 lynn (uid=21776, gid=1) (pid 125438)
 
 So clean, so elegant, so beautiful! :)
 
 OTOH, the log file for the W2K client contained an
 entry similar to the above, but was immediately
 followed by about 30 messages of the form:
 
 [2004/02/23 11:59:03, 0] smbd/password.c:user_ok(683) 
 rejected user nobody:3004-302 Your account has
 expired; please see the system administrator.
   
 Now... my question: Why? What does the W2K client do
 that triggers this barrage of rejected authentications
 of a user 'nobody' (that is clearly not allowed to
 enter)?
 
 More importantly, is there a way to configure EITHER
 the W2K client or the Samba server (or both) to not
 waste time on these unallowed accesses?
 
 Since smbclient produces such a clean entry, I would
 assume the fix must be on the client side (W2K) only.
 But I would take any advice. :)
 
 Please note that I am not allowed (in my corporate
 environment) to enable the guest account on this
 machine. Therefore, the solution must not involve
 enabling the guest account (if there is such a
 solution).
 
 My smb.conf global section has security=user (actually
 no 'security' entry, it simply takes the default,
 which is 'user').
 
 The settings of the share are:
 
 [sharedir$]
   comment = %h shared dir
   path = /home/shared
   valid users = +sambagrp techsup
   browseable = No
 
 That's it. Any other settings are implied by taking
 the defaults. User account 'lynn' is a member of the
 group 'sambagrp' and as you can see from the original
 posting, it successfully authenticates from both a W2K
 client and a Linux client. 'techsup' is a special user
 account (may or may not be a member of 'sambagrp').
 
 I hope this can give further clues to solving the
 mystery.
 
 
 Thanks in advance,
 Lynn (Samba 2.2.8a on AIX 5.1)
 
 __
 Do you Yahoo!?
 Yahoo! Search - Find what youre looking for faster
 http://search.yahoo.com

-- 

 |...|
 |  _    _|Victor Medina M   |
 |\ \ \| |  _ \ / \   |Linux - Java - MySQL  |
 | \ \ \  _| | |_) / _ \  |Dpto. Sistemas - Ferreteria EPA   |
 | / / / |___|  __/ ___ \ |[EMAIL PROTECTED]  |
 |/_/_/|_|_| /_/   \_\|ext. 325 - Tél: +58-241-8507325   |
 ||geek by nature - linux by choice  |
 |...|




















--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT4 Migration Question

2004-03-05 Thread John H Terpstra
On Fri, 5 Mar 2004, L. Mark Stone wrote:

 A client has an existing NT4 domain with several NT4 servers. Two of the
 NT4 Servers function as a PDC and a BDC.

 We are installing Samba-3 on SuSE 9.0 Pro as a PDC with an LDAP backend,
 and decommissioning the NT4 PDC at the same time. So far, so good. We
 can also rebuild the old PDC hardware as a Samba-3 on SuSE 9.0 Pro BDC.

 Unfortunately however, the NT4 BDC cannot be removed from the network
 for another six months, as it hosts a vertical application key to the
 business and used every day by some 100 users at the client.  In
 addition, the configuration of this BDC is quite complex; reinstalling
 the OS and the vertical application would be a challenge and, given the
 various customizations to the vertical application, not likely to
 succeed.

 Two questions then:

 1. What are the implications of leaving this existing NT4 BDC in place
 with a new Linux-Samba-3 PDC (and possibly a new Linux-Samba BDC)?

The NT BDC will soon fall out of date with your Samba PDC (assuming you
migrated the NT4 PDC to Samba-3).

Samba-3 does not support the NT4 domain SAM replication protocols. You
will soon have a broken network - unless you can deomte the NT4 BDC to a
Stand-Alone server (which will stop it from performing domain control
functions such as network logon handling and SAM replication).

 2. Has anyone used UPromote, which claims to do be able to demote an NT4
 BDC to a member server without reinstalling the OS? (See
 http://utools.com/UPromote.asp for more info.)

That's a neat tool. It looks like it will permit you to demote the BDC to
a Stand-Alone server, but be careful! You may find that the vertical
application requires support for certain protocols that may not be
supported by a Samba domain controller.

You could test this by using Norton Ghost to clone the BDC, then demote
the BDC using the UPromote tool, then test the application in a Samba
domain. At least this will provide a conclusive answer.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SMB gurus: please help - I am desperate.

2004-03-05 Thread Jeremy Allison
On Fri, Mar 05, 2004 at 10:00:33AM -0800, Linux Lover wrote:
 I apologize up front for re-posting this, but I need
 to find a solution to this problem. I have been having
 hard time to believe that there isn't one person among
 the SMB gurus that doesn't know how a W2K client
 connects to an SMB server. So, if you happen to know
 even the slightest hint to this baffling problem, I
 would be forever grateful.

The problem is that the people who know why the Win2k
redirector does all these things work at Microsoft.
And they're not answering any questions. We know how
the protocol works, and why the clients *shouldn't*
do these stupid things, but only Microsoft knows why
it does. They aren't telling and it seems that no one
(including the US DoJ and the EU) can make them tell
people why

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


FW: [Samba] What version started building libsmbclient.so?

2004-03-05 Thread Steven McClellan
Ok, I have been doing a lot of reading and saw many references to samba
2.2.8a and libsmbclient.so and I thought that I would just go ahead and
download, compile and install it.  After going through configure, the make
and make install, I still don't have a libsmbclient.so file to link my
program to.  I have never come across this before, there has always been a
.so file created from any of the other shared libraries that I have
installed.  What could be the problem?

-Steve McClellan


Hello,

I am trying to write a program that uses some smbclient features but am
having trouble linking to libsmbclient.  I only have libsmbclient.a
installed on my machine (Redhat 9 Linux).  I believe that the smbclient
version on my updated system is 2.2.7a-security-rollup-fix.  All of the
other libraries that I normally link to are xxx.so and so either I need to
figure out how to link to an xxx.a library, or I need to find a version of
the smbclient that builds the libsmbclient.so.

Any help would be greatly appreciated.

Thanks,

-Steve McClellan

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SMB gurus: please help - I am desperate.

2004-03-05 Thread Steven Kurylo


[2004/02/23 11:59:03, 0] smbd/password.c:user_ok(683) 
rejected user nobody:3004-302 Your account has
expired; please see the system administrator.  

Have you tried setting up a proper guest account, instead of nobody?  
Either change the guest account setting in smb.conf or the nobody user 
on your AIX machine.

--
Steven Kurylo
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Fwd: [Samba] second printer connection]

2004-03-05 Thread Gregory W. Eckrich


 Original Message 
Subject:[Samba] second printer connection
Date:   Thu, 04 Mar 2004 14:17:44 -0600
From:   Gregory W. Eckrich [EMAIL PROTECTED]
To: samba [EMAIL PROTECTED]


PROBLEM:  unable to print to the 2nd of two printers on a samba host.
ENVIRONMENT:
-4 systems in a home network; connected to an HP Pro Curve hub (10 meg)
-3 systems run Red Hat linux 9.0 (system names:  snoopy, white, blue)
-4th system runs Windows 2000 Professional (system name:  red)
-SAMBA server Snoopy has two directly attached printers, an HP 4L on 
LPT1 and an HP OfficeJet T45 on LPT2
 Snoopy:  384 MEG RAM; celeron 400 Mhz
 SAMBA:  ver 2.2.7a
-On red: (Win2K) if a print job is sent to the HP_4L, it prints cleanly; 
if a print job is sent to the T45, it does not print
 Red:  COMPAQ Deskpro 64 MEG RAM; Pentium 200 Mhz
-On red: if one clicks start, run and types  \\snoopy, all of the 
shares on snoopy are seen, including the two printers
  [Win2K troubleshooting says that this demonstrates a basic 
connection]
-On red:  either printer, upon being opened, reports in the title 
window:   [printer] on snoopy, Access denied unable to connect

CONDITIONS on Snoopy:
-Both printers print correctly; various softwares see both printers
-/etc/smb.conf
Thanks,
Greg.  Eckrich
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Why does a W2K (pro) client do more than it is asked to do?

2004-03-05 Thread Linux Lover
--- Van Sickler, Jim [EMAIL PROTECTED]
wrote:
 Lynn,
 Does your smb.conf have an entry similar to:
 username map = /etc/samba/smbusers

Jim, thanks. This is my *entire* smb.conf file
(created by SWAT):

#
# Samba config file created using SWAT
# from winclient.mydomain.com (192.168.0.5)
# Date: 2004/02/05 14:02:56

# Global parameters
[global]
workgroup = MYGROUP
netbios name = AIXSERVER
server string = Samba %V on %h
admin log = Yes
log level = 1
log file = /usr/local/samba/logs/%U.%m.log
preferred master = No
domain master = No
hosts allow = 192.168.

[sharedir$]
  comment = %h shared dir
  path = /home/shared
  valid users = +sambagrp techsup
  browseable = No
#

So, I guess I don't have such an entry. Do I need one?
I thought it's not necessary since the W2K client
prompts the user anyway to enter username and
password. One of the good things about W2K (vs. w9x)
is that you can be logged into the W2K client as
'mary', but authenticate to the samba server as
'fred'. 

 Do you have user accounts on both the AIX
 box and the W2k box?  They'd be mapped
 in smbusers, AIX_acct=W2k_acct

Again, no need - I am counting on the W2K client to
prompt for password if that particular username not
found in /etc/password (at the moment I *don't* use
encrypted passwords - I will cross that bridge when I
solve this problem first).


BTW, I increased the log level to 3 and noticed the
first occurrence of 'nobody' in the log after I type
my username and password:

-
[2004/03/05 13:22:07, 3]
  smbd/sec_ctx.c:set_sec_ctx(349)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/03/05 13:22:07, 3]
  smbd/reply.c:reply_sesssetup_and_X(880)
  Domain=[]  NativeOS=[Windows 2000 2195]
  NativeLanMan=[Windows 2000 5.0]
[2004/03/05 13:22:07, 3]
  smbd/reply.c:reply_sesssetup_and_X(890)
  sesssetupX:name=[]
[2004/03/05 13:22:07, 3]
  smbd/sec_ctx.c:push_sec_ctx(312)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2004/03/05 13:22:07, 3]
  smbd/uid.c:push_conn_ctx(310)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2004/03/05 13:22:07, 3]
  smbd/sec_ctx.c:set_sec_ctx(349)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/03/05 13:22:08, 3]
  smbd/sec_ctx.c:get_current_groups(183)
  get_current_groups: user is in 1 groups: -2
[2004/03/05 13:22:08, 3]
  smbd/sec_ctx.c:pop_sec_ctx(493)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/03/05 13:22:08, 3]
  smbd/sec_ctx.c:get_current_groups(183)
  get_current_groups: user is in 1 groups: -2
[2004/03/05 13:22:08, 3]
  smbd/password.c:register_vuid(361)
  uid -2 registered to name nobody
-

Which brings the question: what is register_vuid()?
and uid -2 is being sent by W2K? (my uid is 21776)


Thanks,
Lynn

__
Do you Yahoo!?
Yahoo! Search - Find what you’re looking for faster
http://search.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem w. SAMBA as dfs root

2004-03-05 Thread M. Vancl
Hi,

I have configured samba 3.0.2 as Dfs root but it seems smbd dont translate
symlink to remote share name.
All targeted shares are from testing workstation directly accessible.

My config is:
---
[global]
debuglevel = 10
netbios name = SAMBAII
workgroup = XAMBA
security = user
domain logons = yes
preferred master = yes
domain master = yes
local master = yes
os level = 33
encrypt passwords = yes
passdb backend = ldapsam:ldap://ldap.setuza.cz;
## ldap sam
...
## dfs
host msdfs = yes
...
## misc
follow symlinks = yes
...
## shares
writeable = no
create mask = 660
directory mask = 770
...
[dfs]
path = /var/samba/dfsroot
msdfs root = yes
follow symlinks = no
[test]
...
---

My dfs root is:
[EMAIL PROTECTED]:/# ls -ld /var/samba /var/samba/dfsroot
drwxrwx---7  Domain U 4096 Mar  4 19:07 /var/samba/
drwxr-xr-x2 root Domain U 4096 Mar  5 17:17 /var/samba/dfsroot/
[EMAIL PROTECTED]:/# ls -l /var/samba/dfsroot
total 0
lrwxrwxrwx1 root root   21 Mar  5 17:17 inoupd -
msdfs:rumba\\inoupdate
lrwxrwxrwx1 root root   16 Mar  5 17:01 lavir -
msdfs:prog23t\\lv
lrwxrwxrwx1 root root   19 Mar  4 19:20 pokus -
msdfs:prog01t\\share

In logfile I found target name only in this line:
...
[2004/03/05 19:23:23, 5] msdfs/msdfs.c:is_msdfs_link(201)
  is_msdfs_link: ./inoupd - msdfs:rumba\inoupdate
[2004/03/05 19:23:23, 5] smbd/trans2.c:get_lanman2_dir_entry(573)
  get_lanman2_dir_entry: Masquerading msdfs link ./inoupd as a directory
...
and then interesting part:
...
[2004/03/05 19:23:33, 5] smbd/statcache.c:stat_cache_add(178)
  stat_cache_add: Added entry INOUPD - inoupd
[2004/03/05 19:23:33, 5] smbd/filename.c:unix_convert(388)
  conversion finished inoupd - inoupd
[2004/03/05 19:23:33, 3] smbd/dosmode.c:unix_mode(110)
  unix_mode(inoupd) returning 0660
[2004/03/05 19:23:33, 5] smbd/files.c:file_new(122)
  allocated file structure 9316, fnum = 13412 (1 used)
[2004/03/05 19:23:33, 10] smbd/open.c:open_file_shared1(838)
  open_file_shared: fname = inoupd, share_mode = 8040, ofun = 1, mode = 660,
oplock request = 3
[2004/03/05 19:23:33, 8] lib/util.c:is_in_path(1474)
  is_in_path: inoupd
[2004/03/05 19:23:33, 8] lib/util.c:is_in_path(1478)
  is_in_path: no name list.
[2004/03/05 19:23:33, 3] lib/util.c:unix_clean_name(580)
  unix_clean_name [inoupd]
[2004/03/05 19:23:33, 3] smbd/filename.c:check_name(423)
  check_name: denied: file path name inoupd is a symlink
[2004/03/05 19:23:33, 5] smbd/filename.c:check_name(430)
  check_name on inoupd failed
[2004/03/05 19:23:33, 5] smbd/files.c:file_free(385)
  freed files structure 13412 (0 used)
[2004/03/05 19:23:33, 10] smbd/trans2.c:set_bad_path_error(1802)
  set_bad_path_error: err = 0 bad_path = 0
[2004/03/05 19:23:33, 3] smbd/error.c:error_packet(118)
  error packet at smbd/trans2.c(1811) cmd=162 (SMBntcreateX)
NT_STATUS_ACCESS_DENIED
...

Thanks for any suggestions

M. Vancl



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Why does a W2K (pro) client do more than it is asked to do?

2004-03-05 Thread John H Terpstra
On Fri, 5 Mar 2004, Linux Lover wrote:

 --- Van Sickler, Jim [EMAIL PROTECTED]
 wrote:
  Lynn,
  Does your smb.conf have an entry similar to:
  username map = /etc/samba/smbusers

 Jim, thanks. This is my *entire* smb.conf file
 (created by SWAT):

 #
 # Samba config file created using SWAT
 # from winclient.mydomain.com (192.168.0.5)
 # Date: 2004/02/05 14:02:56

 # Global parameters
 [global]
   workgroup = MYGROUP
   netbios name = AIXSERVER
   server string = Samba %V on %h
   admin log = Yes
   log level = 1
   log file = /usr/local/samba/logs/%U.%m.log
   preferred master = No
   domain master = No
   hosts allow = 192.168.

 [sharedir$]
   comment = %h shared dir
   path = /home/shared
   valid users = +sambagrp techsup
   browseable = No
 #

 So, I guess I don't have such an entry. Do I need one?
 I thought it's not necessary since the W2K client
 prompts the user anyway to enter username and
 password. One of the good things about W2K (vs. w9x)
 is that you can be logged into the W2K client as
 'mary', but authenticate to the samba server as
 'fred'.

  Do you have user accounts on both the AIX
  box and the W2k box?  They'd be mapped
  in smbusers, AIX_acct=W2k_acct

 Again, no need - I am counting on the W2K client to
 prompt for password if that particular username not
 found in /etc/password (at the moment I *don't* use
 encrypted passwords - I will cross that bridge when I
 solve this problem first).

Ok. Consider yourself right at that bridge now - unless of course you have
applied the registry hack to enable plain-text passwords on ALL win2k
clients.

PS: If you have enabled plain-text passworrds, rest assured it will still
break because since Microsoft disabled this by default they have not
maintained support for it.

PPS: I strongly suggest that you add encrypted passwords for your users by
running for each user:
smbpasswd -a 'username'

Just out of curiosity, have you read the Samba-HOWTO-Collection.pdf, or
the printed form of it The Official Samba-3 HOWTO and Reference Guide
(available from Amazon.Com)?

You can obtain the Samba-HOWTO-Collection.pdf from:

http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf

The chapters on Server Types and Security Modes, Domain Member
Servers, Stand-Alone Servers, and Network Browsing might prove
helpful to you.

Cheers,
John T.



 BTW, I increased the log level to 3 and noticed the
 first occurrence of 'nobody' in the log after I type
 my username and password:

 -
 [2004/03/05 13:22:07, 3]
   smbd/sec_ctx.c:set_sec_ctx(349)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
 [2004/03/05 13:22:07, 3]
   smbd/reply.c:reply_sesssetup_and_X(880)
   Domain=[]  NativeOS=[Windows 2000 2195]
   NativeLanMan=[Windows 2000 5.0]
 [2004/03/05 13:22:07, 3]
   smbd/reply.c:reply_sesssetup_and_X(890)
   sesssetupX:name=[]
 [2004/03/05 13:22:07, 3]
   smbd/sec_ctx.c:push_sec_ctx(312)
   push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
 [2004/03/05 13:22:07, 3]
   smbd/uid.c:push_conn_ctx(310)
   push_conn_ctx(0) : conn_ctx_stack_ndx = 0
 [2004/03/05 13:22:07, 3]
   smbd/sec_ctx.c:set_sec_ctx(349)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
 [2004/03/05 13:22:08, 3]
   smbd/sec_ctx.c:get_current_groups(183)
   get_current_groups: user is in 1 groups: -2
 [2004/03/05 13:22:08, 3]
   smbd/sec_ctx.c:pop_sec_ctx(493)
   pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
 [2004/03/05 13:22:08, 3]
   smbd/sec_ctx.c:get_current_groups(183)
   get_current_groups: user is in 1 groups: -2
 [2004/03/05 13:22:08, 3]
   smbd/password.c:register_vuid(361)
   uid -2 registered to name nobody
 -

 Which brings the question: what is register_vuid()?
 and uid -2 is being sent by W2K? (my uid is 21776)


 Thanks,
 Lynn

 __
 Do you Yahoo!?
 Yahoo! Search - Find what you’re looking for faster
 http://search.yahoo.com


-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba + Win2k

2004-03-05 Thread Craig White
On Fri, 2004-03-05 at 12:34, John H Terpstra wrote:
 On Fri, 5 Mar 2004, Guylerme Velasco wrote:
 
 
 
  How can i get a trust relationship betwen Samba Domain and Win2k ?
 
  Ive tried many ways like, change win2k register, changig some security
  directives, etc.
 
  The win2k is added at Samba Domain like this
 
useradd -g MYGROUP -d /dev/null -s /bin/false WIN2k$
smbpasswd -a -m WIN2K$
 
  Is there other way??
 
 Reading the chapter on Interdomain Trust Relationships in the
 Samba-HOWTO-Collection.pdf is a good place to start.
 
   http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf
--
I think John misunderstood the question.

Generally, when you have things set up right, you could probably join
machines to a domain simply by using the Windows Networking Wizard from
'System' control panel. 

The implementation of smb.conf / etc. will differ on different OS's and
the type of 'backend' storage you specify for holding this info and of
course, the version of samba that you are using - none of which you
included.

Generally, the way I have had success is to add root to the smb
database...
smbpasswd -a root

Then when it asks you the name of someone who is authorized to add the
account to the domain, it would be root with whatever password you
assigned to root.

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Solaris 9 --with-krb5 problems

2004-03-05 Thread Diego Julian Remolina
Hi Andy,

 ## Ok as far as I'm aware the following is true, you must use MIT or Heimdal 
 Kerberos with
 ## Solaris because Solaris Kerberos is not available with header files (Sun have no 
 plans
 ## to include headers with their bundled distribution). Sun/MIT/Heimdal 
 implementations of
 ## Kerberos are all gssapi compliant authentication mechanisms.

I think the above is not correct, as you can see from the following
commands; the header files for gssapi are part of the package SUNWhea:

oak:/etc/openldap/ldif # pkgchk -lp /usr/include/gssapi/gssapi.h
Pathname: /usr/include/gssapi/gssapi.h
Type: regular file
Expected mode: 0644
Expected owner: root
Expected group: bin
Expected file size (bytes): 22478
Expected sum(1) of contents: 31395
Expected last modification: Apr 06 14:12:32 2002
Referenced by the following packages:
SUNWhea
Current status: installed

oak:/etc/openldap/ldif # pkginfo -l SUNWhea
   PKGINST:  SUNWhea
  NAME:  SunOS Header Files
  CATEGORY:  system
  ARCH:  sparc
   VERSION:  11.9.0,REV=2002.04.06.15.27
   BASEDIR:  /
VENDOR:  Sun Microsystems, Inc.
  DESC:  SunOS C/C++ header files for general development of software
PSTAMP:  leo20030527173442
  INSTDATE:  Dec 30 2003 16:31
   HOTLINE:  Please contact your local service provider
STATUS:  completely installed
 FILES: 1323 installed pathnames
  32 shared pathnames
  85 directories
   16086 blocks used (approx)

 ## You appear to have installed what looks like a second version of gssapi (I assume 
 also Heimdal)
 ## which Samba make is not liking. I'm sorry I haven't tried installing Heimdal 
 Kerberos myself,
 ## can you check whether it is possible to install/compile it without installing a 
 duplicate
 ## implementation of gssapi? Or maybe someone else on the list can help?
 ## thanks Andy.



I am using heimdal because it is thread safe while mit kerberos is not.
This is very important for my openldap server.  Would you please check if
your system has the package SUNWhea installed? If it is then you should
have some header files like /usr/include/gssapi/gssapi.h

The conflicting header files are not part of any of Sun's kerberos
packages SUNWkrbr, SUNWkrbu or SUNWkrbux which I have installed since
those provide authentication.  I did not want to have to remove all the
Sun kerberos packages since I am using the pam_krb5.so from those packages
in my pam stack to authenticate users.  Even if I remove the kerberos
packages the header files will remain there so I do not think removing
those kerberos packages will help.

Have a good weekend,

Diego


 The problem is with the header files.  It tries to use the ones from
 Solaris 9 kerberos implementatoin which are located in /usr/include as
 opposed to the ones from heimdal in /opt/local/include).  This happens
 using both cc and gcc.
 configure works  fine but make fails.

 I also changed /var/ld/ld.config, but the problem is not the libraries, is
 the include files. This is what crle shows:
 oak:/tmp/samba-3.0.2a/source % crle

 Configuration file [3]: /var/ld/ld.config
   Default Library Path (ELF):   /opt/local/lib:/usr/lib
   Trusted Directories (ELF):/usr/lib/secure  (system default)

 Command line:
   crle -c /var/ld/ld.config -l /opt/local/lib:/usr/lib


 The last few lines of configure are:
 snip
 checking how to build vfs_cap... shared
 Using libraries:
 LIBS = -lsendfile -lsec -lgen -lresolv -lsocket -lnsl  -liconv
 KRB5_LIBS = -lcom_err  -L/opt/local/encap/heimdal-0.6/lib -lgssapi
 -lkrb5 -lasn1 -L/opt/local/lib -lcrypto -lroken
 LDAP_LIBS = -lldap -llber
 AUTH_LIBS =
 checking configure summary... yes
 configure: creating ./config.status
 config.status: creating include/stamp-h
 config.status: creating Makefile
 config.status: creating script/findsmb
 config.status: creating smbadduser
 config.status: creating script/gen-8bit-gap.sh
 config.status: creating include/config.h

 Then when I type make:
 oak:/tmp/samba-3.0.2a/source % make
 Using FLAGS =  -O -I/opt/local/encap/heimdal-0.6/include
 -I/opt/local/include  -Iinclude -I/tmp/samba-3.0.2a/source/include
 -I/tmp/samba-3.0.2a/source/ubiqx -I/tmp/samba-3.0.2a/source/smbwrapper
 -I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
 -I/opt/local/encap/heimdal-0.6/include -I/opt/local/include
 -I/tmp/samba-3.0.2a/source
   LIBS = -lsendfile -lsec -lgen -lresolv -lsocket -lnsl -liconv
   LDSHFLAGS = -G
   LDFLAGS =
 Generating smbd/build_options.c
 Building include/proto.h
 creating /tmp/samba-3.0.2a/source/include/proto.h
 Building include/wrepld_proto.h
 creating /tmp/samba-3.0.2a/source/include/wrepld_proto.h
 Building include/build_env.h
 creating /tmp/samba-3.0.2a/source/nsswitch/winbindd_proto.h
 creating /tmp/samba-3.0.2a/source/web/swat_proto.h
 creating /tmp/samba-3.0.2a/source/client/client_proto.h
 creating /tmp/samba-3.0.2a/source/utils/net_proto.h
 Compiling dynconfig.c
 In file 

Re: [Samba] NT4 Migration Question

2004-03-05 Thread L. Mark Stone
Hi John!

On Fri, 2004-03-05 at 13:14, John H Terpstra wrote:
 On Fri, 5 Mar 2004, L. Mark Stone wrote:
 
  A client has an existing NT4 domain with several NT4 servers. Two of the
  NT4 Servers function as a PDC and a BDC.
 
  We are installing Samba-3 on SuSE 9.0 Pro as a PDC with an LDAP backend,
  and decommissioning the NT4 PDC at the same time. So far, so good. We
  can also rebuild the old PDC hardware as a Samba-3 on SuSE 9.0 Pro BDC.
 
  Unfortunately however, the NT4 BDC cannot be removed from the network
  for another six months, as it hosts a vertical application key to the
  business and used every day by some 100 users at the client.  In
  addition, the configuration of this BDC is quite complex; reinstalling
  the OS and the vertical application would be a challenge and, given the
  various customizations to the vertical application, not likely to
  succeed.
 
  Two questions then:
 
  1. What are the implications of leaving this existing NT4 BDC in place
  with a new Linux-Samba-3 PDC (and possibly a new Linux-Samba BDC)?
 
 The NT BDC will soon fall out of date with your Samba PDC (assuming you
 migrated the NT4 PDC to Samba-3).
 
 Samba-3 does not support the NT4 domain SAM replication protocols. You
 will soon have a broken network - unless you can deomte the NT4 BDC to a
 Stand-Alone server (which will stop it from performing domain control
 functions such as network logon handling and SAM replication).

Yup, we know that SAM replication isn't there between NT4 and Samba.

The other option we've uncovered is to dcpromo the NT4 server to a PDC,
migrate the accounts to the Samba server (which will also think its the
PDC), and then shut off LMAnnounce on the NT4 server via a registry
entry. (we would decommission the other NT4 DC.)  We may also try
disabling the NT4's Server service as well.

The critical application relies on Exchange 5.5, which also runs on this
NT4 server.  We have been told that Exchange may fail if it wakes up
after a reboot and finds it is no longer living on a DC. So, turning off
LMAnnounce (we believe) will result in the NT4 box thinking it is still
a PDC, but no clients on the network will ever talk to it, so it will
just be a lonely PDC. And if Exchange needs PDC services, those will
still be available locally. The domain user accounts used by Exchange
are not person-specific, so they will never change and we need not worry
about maintaining perfect correlation between Samba and this NT4 box. We
just need to make sure the NT4 box can't ever perform DC services on the
domain.

 
  2. Has anyone used UPromote, which claims to do be able to demote an NT4
  BDC to a member server without reinstalling the OS? (See
  http://utools.com/UPromote.asp for more info.)
 
 That's a neat tool. It looks like it will permit you to demote the BDC to
 a Stand-Alone server, but be careful! You may find that the vertical
 application requires support for certain protocols that may not be
 supported by a Samba domain controller.

The app's domain needs are limited to moving files around between this
box and three others via mapped drives. The box should still be able to
browse the network, so I think we are probably OK. The trick bits for
the app are the ways it moves and processes files through Exchange.

 
 You could test this by using Norton Ghost to clone the BDC, then demote
 the BDC using the UPromote tool, then test the application in a Samba
 domain. At least this will provide a conclusive answer.

I too like to have rollback options!  If we did the dcpromo trick above,
and it didn't work, we could always put the other NT4 DC (now the BDC)
back online, run dcpromo again to make the problem NT4 box a BDC, and
try your Ghost/UPromote trick (also reversible).

What do you think of the isolated PDC strategy above?

Thanks!
Mark

-- 
__
L. Mark Stone
President
Reliable Networks of Maine, LLC
477 Congress Street, 5th Floor
Portland, ME 04107

Tel: (207) 772-5678
Cell: (917) 597-2057
Email: [EMAIL PROTECTED]
Web: http://www.RNoME.com


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: FW: [Samba] What version started building libsmbclient.so?

2004-03-05 Thread Steven McClellan
John,

Thanks, I had just resorted to reading the configure file and found that the
default was not to create it.  So you confirm what I found.  I'm still not
able to link against it though.  I get an undefined reference to smbc_init
error, but at least I have the library.

-Steve

-Original Message-
From: John H Terpstra [mailto:[EMAIL PROTECTED] 
Sent: Friday, March 05, 2004 2:02 PM
To: Steven McClellan
Cc: [EMAIL PROTECTED]
Subject: Re: FW: [Samba] What version started building libsmbclient.so?


On Fri, 5 Mar 2004, Steven McClellan wrote:

 Ok, I have been doing a lot of reading and saw many references to 
 samba 2.2.8a and libsmbclient.so and I thought that I would just go 
 ahead and download, compile and install it.  After going through 
 configure, the make and make install, I still don't have a 
 libsmbclient.so file to link my program to.  I have never come across 
 this before, there has always been a .so file created from any of the 
 other shared libraries that I have installed.  What could be the 
 problem?

Did you specify:
configure --with-libsmbclient

Did you run:
make libsmbclient

- John T.


 -Steve McClellan


 Hello,

 I am trying to write a program that uses some smbclient features but 
 am having trouble linking to libsmbclient.  I only have libsmbclient.a 
 installed on my machine (Redhat 9 Linux).  I believe that the 
 smbclient version on my updated system is 2.2.7a-security-rollup-fix.  
 All of the other libraries that I normally link to are xxx.so and so 
 either I need to figure out how to link to an xxx.a library, or I need 
 to find a version of the smbclient that builds the libsmbclient.so.

 Any help would be greatly appreciated.

 Thanks,

 -Steve McClellan



-- 
John H Terpstra
Email: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Why does a W2K (pro) client do more than it is asked to do?

2004-03-05 Thread Van Sickler, Jim
Lynn,

Since I don't see Encrypt Passwords = No
in your smb.conf, I'm pretty sure that
you're using encrypted passwords.

Run testparm, and look for the
Encrypt Passwords =  entry,
just to be sure.

Having the users mapped in the smbusers
will take care of the prompt.  If you want
to map drives using a different user name,
this might make it easier.

If mary is logged in, but wants to map
a drive as lynn, as long as smbusers
has entries for both mary  lynn,
it should work.

W9x PCs will do that, I think, if you
include /user with the net use
command.

You can try adding the users to
the smbusers file, without
creating an AIX account for them.
The see if they can access the share
without being prompted for the password.
If that works, see if they can
map a drive using a different user name.

Jim

 -Original Message-
 From: Linux Lover [mailto:[EMAIL PROTECTED]
 Sent: Friday, March 05, 2004 12:43 PM
 To: Van Sickler, Jim; [EMAIL PROTECTED]
 Subject: RE: [Samba] Why does a W2K (pro) client do more than it is
 asked to do?
 
 
 --- Van Sickler, Jim [EMAIL PROTECTED]
 wrote:
  Lynn,
  Does your smb.conf have an entry similar to:
  username map = /etc/samba/smbusers
 
 Jim, thanks. This is my *entire* smb.conf file
 (created by SWAT):
 
 #
 # Samba config file created using SWAT
 # from winclient.mydomain.com (192.168.0.5)
 # Date: 2004/02/05 14:02:56
 
 # Global parameters
 [global]
   workgroup = MYGROUP
   netbios name = AIXSERVER
   server string = Samba %V on %h
   admin log = Yes
   log level = 1
   log file = /usr/local/samba/logs/%U.%m.log
   preferred master = No
   domain master = No
   hosts allow = 192.168.
 
 [sharedir$]
   comment = %h shared dir
   path = /home/shared
   valid users = +sambagrp techsup
   browseable = No
 #
 
 So, I guess I don't have such an entry. Do I need one?
 I thought it's not necessary since the W2K client
 prompts the user anyway to enter username and
 password. One of the good things about W2K (vs. w9x)
 is that you can be logged into the W2K client as
 'mary', but authenticate to the samba server as
 'fred'. 
 
  Do you have user accounts on both the AIX
  box and the W2k box?  They'd be mapped
  in smbusers, AIX_acct=W2k_acct
 
 Again, no need - I am counting on the W2K client to
 prompt for password if that particular username not
 found in /etc/password (at the moment I *don't* use
 encrypted passwords - I will cross that bridge when I
 solve this problem first).
 
 
 BTW, I increased the log level to 3 and noticed the
 first occurrence of 'nobody' in the log after I type
 my username and password:
 
 -
 [2004/03/05 13:22:07, 3]
   smbd/sec_ctx.c:set_sec_ctx(349)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
 [2004/03/05 13:22:07, 3]
   smbd/reply.c:reply_sesssetup_and_X(880)
   Domain=[]  NativeOS=[Windows 2000 2195]
   NativeLanMan=[Windows 2000 5.0]
 [2004/03/05 13:22:07, 3]
   smbd/reply.c:reply_sesssetup_and_X(890)
   sesssetupX:name=[]
 [2004/03/05 13:22:07, 3]
   smbd/sec_ctx.c:push_sec_ctx(312)
   push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
 [2004/03/05 13:22:07, 3]
   smbd/uid.c:push_conn_ctx(310)
   push_conn_ctx(0) : conn_ctx_stack_ndx = 0
 [2004/03/05 13:22:07, 3]
   smbd/sec_ctx.c:set_sec_ctx(349)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
 [2004/03/05 13:22:08, 3]
   smbd/sec_ctx.c:get_current_groups(183)
   get_current_groups: user is in 1 groups: -2
 [2004/03/05 13:22:08, 3]
   smbd/sec_ctx.c:pop_sec_ctx(493)
   pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
 [2004/03/05 13:22:08, 3]
   smbd/sec_ctx.c:get_current_groups(183)
   get_current_groups: user is in 1 groups: -2
 [2004/03/05 13:22:08, 3]
   smbd/password.c:register_vuid(361)
   uid -2 registered to name nobody
 -
 
 Which brings the question: what is register_vuid()?
 and uid -2 is being sent by W2K? (my uid is 21776)
 
 
 Thanks,
 Lynn
 
 __
 Do you Yahoo!?
 Yahoo! Search - Find what you're looking for faster
 http://search.yahoo.com
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT4 Migration Question

2004-03-05 Thread L. Mark Stone
On Fri, 2004-03-05 at 11:34, Craig White wrote:

 I am functioning with previous WinNT4 PDC unchanged after net rpc
 vampire operation with the exception that netlogon service has been
 disabled. Has been working - I cannot use the UserManager etc. tools
 from this machine though.

Because Exchange 5.5 also lives on this box, we are concerned that we
will break Exchange if we disable the netlogon service.

But it's good to know that someone else is suffering through this
successfully!

Thanks!
Mark

-- 
__
L. Mark Stone
President
Reliable Networks of Maine, LLC
477 Congress Street, 5th Floor
Portland, ME 04107

Tel: (207) 772-5678
Cell: (917) 597-2057
Email: [EMAIL PROTECTED]
Web: http://www.RNoME.com


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Cannot find KDC for requested realm while getting initial credentials

2004-03-05 Thread John Kakritz
Have succesfully installed and configured samba on BSD up to the point 
of joining the active directory domain.

The command net ads join -Uadministrator returned a message saying 
that i had sucessfully joined the domain and a quick review of my ADDC 
shows that my samba server has sucessfully joined and created an object 
in AD.  The command wbinfo -u returns a list of AD domain accounts.  
At this point things break down and it seems to be a kerberos problem.

I'm the original/eternal BSD noob, any thoughts as to what i'm doing wrong?

Error messages:
su-2.05b# ./smbclient -L localhost -Uadministrator
session setup failed: NT_STATUS_LOGON_FAILURE
___
su-2.05b# kinit [EMAIL PROTECTED]
kinit(v5): Cannot find KDC for requested realm while getting initial 
credentials

___
su-2.05b# klist
klist: No credentials cache found (ticket cache FILE:/tmp/krb5cc_0)
Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached
My conf files:
krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
ticket_lifetime = 24000
default_realm = ADTEST.GC.MARICOPA.EDU
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
ADTEST.GC.MARICOPA.EDU = {
 kdc = server.adtest.gc.maricopa.edu:88
 admin_server = server.adtest.gc.maricopa.edu:749
 default_domain = adtest.gc.maricopa.edu
}
[domain_realm]
.adtest.gc.maricopa.edu = ADTEST.GC.MARICOPA.EDU
adtest.gc.maricopa.edu = ADTEST.GC.MARICOPA.EDU
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
  debug = false
  ticket_lifetime = 36000
  renew_lifetime = 36000
  forwardable = true
  krb4_convert = false
}
smb.conf
[global]
  workgroup = ADTEST
  netbios name = BURP
  realm = ADTEST.GC.MARICOPA.EDU
  security = ads
  encrypt passwords = yes
  password server = server.adtest.gc.maricopa.edu
  wins server = server.adtest.gc.maricopa.edu
  name resolve order = lmhosts host wins bcast
  log file = /var/log/samba/%m.log
  server string = FreeBSD Samba Server
  log level = 2
#  socket options = TCP_NODELAY SO_SNDBUF=2000 SO_RCVBUF=2000
#New test options
#winbind separator = .
winbind cache time = 10
winbind enum users = yes
winbind enum groups = yes
#winbind use default domain = yes
template shell = /bin/bash
template homedir = /home/%D/%U
idmap uid = 1-2
idmap gid = 1-2
# Share Definitions 
==

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem printing From Windows to Linux

2004-03-05 Thread Gabriel

Hi,

This is my first message to the list.

I have Linux server with two printers:
- SuSE Linux 9.0 + CUPS + Samba
- HP Laserjet 1100  (LPT)
- Canon i470d   (USB)

All windows stations print fine with 
Laserjet, but fails with the other one.
The printer job is scheduled correctly 
on linux server. Printer leds blink due to 
data reception but no data is printed
Symptoms are similar to printing with an
inappropiate driver.

Is there any concept I must review?

Thank's in advance.

--
Gabriel D.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT4 Migration Question

2004-03-05 Thread Craig White
On Fri, 2004-03-05 at 14:08, L. Mark Stone wrote:
 On Fri, 2004-03-05 at 11:34, Craig White wrote:
 
  I am functioning with previous WinNT4 PDC unchanged after net rpc
  vampire operation with the exception that netlogon service has been
  disabled. Has been working - I cannot use the UserManager etc. tools
  from this machine though.
 
 Because Exchange 5.5 also lives on this box, we are concerned that we
 will break Exchange if we disable the netlogon service.
 
 But it's good to know that someone else is suffering through this
 successfully!
---
I'll bet you $1 that this works

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT4 Migration Question

2004-03-05 Thread John H Terpstra
On Fri, 5 Mar 2004, L. Mark Stone wrote:

 Hi John!

 On Fri, 2004-03-05 at 13:14, John H Terpstra wrote:
  On Fri, 5 Mar 2004, L. Mark Stone wrote:
 
   A client has an existing NT4 domain with several NT4 servers. Two of the
   NT4 Servers function as a PDC and a BDC.
  
   We are installing Samba-3 on SuSE 9.0 Pro as a PDC with an LDAP backend,
   and decommissioning the NT4 PDC at the same time. So far, so good. We
   can also rebuild the old PDC hardware as a Samba-3 on SuSE 9.0 Pro BDC.
  
   Unfortunately however, the NT4 BDC cannot be removed from the network
   for another six months, as it hosts a vertical application key to the
   business and used every day by some 100 users at the client.  In
   addition, the configuration of this BDC is quite complex; reinstalling
   the OS and the vertical application would be a challenge and, given the
   various customizations to the vertical application, not likely to
   succeed.
  
   Two questions then:
  
   1. What are the implications of leaving this existing NT4 BDC in place
   with a new Linux-Samba-3 PDC (and possibly a new Linux-Samba BDC)?
 
  The NT BDC will soon fall out of date with your Samba PDC (assuming you
  migrated the NT4 PDC to Samba-3).
 
  Samba-3 does not support the NT4 domain SAM replication protocols. You
  will soon have a broken network - unless you can deomte the NT4 BDC to a
  Stand-Alone server (which will stop it from performing domain control
  functions such as network logon handling and SAM replication).

 Yup, we know that SAM replication isn't there between NT4 and Samba.

 The other option we've uncovered is to dcpromo the NT4 server to a PDC,
 migrate the accounts to the Samba server (which will also think its the
 PDC), and then shut off LMAnnounce on the NT4 server via a registry
 entry. (we would decommission the other NT4 DC.)  We may also try
 disabling the NT4's Server service as well.

 The critical application relies on Exchange 5.5, which also runs on this
 NT4 server.  We have been told that Exchange may fail if it wakes up
 after a reboot and finds it is no longer living on a DC. So, turning off
 LMAnnounce (we believe) will result in the NT4 box thinking it is still
 a PDC, but no clients on the network will ever talk to it, so it will
 just be a lonely PDC. And if Exchange needs PDC services, those will
 still be available locally. The domain user accounts used by Exchange
 are not person-specific, so they will never change and we need not worry
 about maintaining perfect correlation between Samba and this NT4 box. We
 just need to make sure the NT4 box can't ever perform DC services on the
 domain.

Exchange 5.5 can be made to work with a Samba PDC. You will need to search
the Samba mailing list archives to find clear instructions someone once
posted on how to affect this.

Do not mess with the NT4 registry or the Server service - this will
potentially cripple your BDC server. Fortunately, a DBC will not change
the SAM database, rather an NT4 BDC creates on the BDC a SAM delta file.
The BDC depends on the PDC SAM replication service to synchronize that
delta file to the PDC where it can be applied to the PDC SAM. The PDC SAM
replication service then pushes that change back to the BDCs. This means
that if Samba-3 is your PDC and you use an NT4 BDC you can lose machine
security account password changes. This can result in breakdown in network
security.

The Samba-Team official line on NT4 PDC / Samba-3 BDC, or Samba-3 PDC and
NT4 BDC, is that this can not work.

You could isolate your BDC from the rest of the network, then promote it
to a PDC. That will make Exchange happy and should keep your application
happy, but it also disconnects the NT4 system from communication with the
rest of the network.

If the NT4 server must have network connectivity (interoperability) it
should be demoted from being a BDC to a Stand-Alone server, then rejoin it
to the Samba-3 domain. When you have done this, you will need to make
registry changes so that Exchange can find the Samba-3 DCs.

The main concern is not the domain control protocols - but rather how what
services the application you have referred to needs.

   2. Has anyone used UPromote, which claims to do be able to demote an NT4
   BDC to a member server without reinstalling the OS? (See
   http://utools.com/UPromote.asp for more info.)
 
  That's a neat tool. It looks like it will permit you to demote the BDC to
  a Stand-Alone server, but be careful! You may find that the vertical
  application requires support for certain protocols that may not be
  supported by a Samba domain controller.

 The app's domain needs are limited to moving files around between this
 box and three others via mapped drives. The box should still be able to
 browse the network, so I think we are probably OK. The trick bits for
 the app are the ways it moves and processes files through Exchange.

Are you sure that the application does not use any RPC calls to the
domain?


 
  You 

Re: [Samba] NT4 Migration Question

2004-03-05 Thread John H Terpstra
On Fri, 5 Mar 2004, Craig White wrote:

 On Fri, 2004-03-05 at 14:08, L. Mark Stone wrote:
  On Fri, 2004-03-05 at 11:34, Craig White wrote:
 
   I am functioning with previous WinNT4 PDC unchanged after net rpc
   vampire operation with the exception that netlogon service has been
   disabled. Has been working - I cannot use the UserManager etc. tools
   from this machine though.
 
  Because Exchange 5.5 also lives on this box, we are concerned that we
  will break Exchange if we disable the netlogon service.
 
  But it's good to know that someone else is suffering through this
  successfully!
 ---
 I'll bet you $1 that this works

If that works then it should be possible to run the NT4 (ex: BDC demoted
using the Upromote tool) as a domain member server of a Samba-3 domain.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] alloc_sub_basic: NULL source string!

2004-03-05 Thread Jeff Umbach
Starting three days ago I have found over 4,000 of these error messages in
my messages log.

Mar  5 15:49:48 fs3 smbd[13785]:   alloc_sub_basic: NULL source string!
This should not happen

Nothing has been changed on the samba config in over a week and that change
was about the spin lock time setting.  The server is RedHat ES 3 running
Samba 3.0.2.  The client machines are a mix of Win98 and WinXP Pro on a
domain with Samba as the PDC.

The only effect I have seen on client machines is that one WinXP Pro box
once took several minutes to log in and load it's roaming profile from the
server.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] alloc_sub_basic: NULL source string!

2004-03-05 Thread Jeremy Allison
On Fri, Mar 05, 2004 at 03:52:09PM -0600, Jeff Umbach wrote:
 Starting three days ago I have found over 4,000 of these error messages in
 my messages log.
 
 Mar  5 15:49:48 fs3 smbd[13785]:   alloc_sub_basic: NULL source string!
 This should not happen
 
 Nothing has been changed on the samba config in over a week and that change
 was about the spin lock time setting.  The server is RedHat ES 3 running
 Samba 3.0.2.  The client machines are a mix of Win98 and WinXP Pro on a
 domain with Samba as the PDC.

Any chance you could add a smb_panic call in this case so we
can track down the cause ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: alloc_sub_basic: NULL source string!

2004-03-05 Thread Jeff Umbach
Could you tell me or point me to an article that says how to implement that?
I didn't find anything on a search that specifically said how to do it.

Jeremy Allison [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 On Fri, Mar 05, 2004 at 03:52:09PM -0600, Jeff Umbach wrote:
  Starting three days ago I have found over 4,000 of these error messages
in
  my messages log.
 
  Mar  5 15:49:48 fs3 smbd[13785]:   alloc_sub_basic: NULL source string!
  This should not happen
 
  Nothing has been changed on the samba config in over a week and that
change
  was about the spin lock time setting.  The server is RedHat ES 3 running
  Samba 3.0.2.  The client machines are a mix of Win98 and WinXP Pro on a
  domain with Samba as the PDC.

 Any chance you could add a smb_panic call in this case so we
 can track down the cause ?

 Jeremy.
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Printing and share problems

2004-03-05 Thread mjynht
I'm posting my smb.conf file...

Hi everyone.
I have installed samba 3.0.2 on slackware 9.0.
I have a pentium iv 1.7 GHz with 256 MB of RAM and a harddrive of 40 GB.
I'm supporting 32 machines so far.
This is the thing.
Most of the times computers loose connection or access to printers that were
working fine. The same thing happens with share folders among computers.

Does anyone have an answer to this issue that's killing me..

Best regards,
Daniel

[global]
 netbios name = enterprise
 workgroup = CASINO
 server string = CasinoCorp PDC
 passdb backend = smbpasswd
 encrypt passwords = Yes
 log file = /var/log/samba.log
 max log size = 100
 ;logon script = %U.bat
logon script =
 logon path =
 logon drive =
 logon home =

 domain logons = Yes
 os level = 65
 preferred master = yes
 local master = Yes
 domain master = Yes
 security = user
 remote announce = 192.168.100.255/SIMPLE \
 192.168.1.255/SIMPLE
 lm announce = yes

 wins support = Yes
 admin users = @domadmins

 ;host msdfs = Yes
 ; name resolve order = wins

;[netlogon]
; path = /usr/local/samba/lib/netlogon
; writeable = No
; browseable = No
 ;root preexec = /usr/local/samba/bin/ntlogon.py --user=%U --group=%G -dir
/usr/local/samba/lib/netlogon/
 ;root postexec = rm /usr/local/samba/lib/netlogon/%U.bat

- Original Message - 
From: Michael Aldrich [EMAIL PROTECTED]
To: mjynht [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Friday, March 05, 2004 10:30 AM
Subject: RE: [Samba] Printing and share problems


 Anything out of the ordinary in your log files when the problem occurs?
 Can you post a snip of your smb.conf?

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf
 Of mjynht
 Sent: Friday, March 05, 2004 9:50 AM
 To: [EMAIL PROTECTED]
 Subject: [Samba] Printing and share problems


 Hi everyone.

 I have installed samba 3.0.2 on slackware 9.0.

 I have a pentium iv 1.7 GHz with 256 MB of RAM and a harddrive of 40 GB.

 I'm supporting 32 machines so far.

 This is the thing.

 Most of the times computers loose connection or access to printers that
were
 working fine. The same thing happens with share folders among computers.

 Does anyone have an answer to this issue that's killing me..

 Best regards,

 Daniel
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: alloc_sub_basic: NULL source string!

2004-03-05 Thread Jeremy Allison
On Fri, Mar 05, 2004 at 04:33:28PM -0600, Jeff Umbach wrote:
 Could you tell me or point me to an article that says how to implement that?
 I didn't find anything on a search that specifically said how to do it.

Ah, I meant doing a source code change I can send you a brief
patch for that if you are able to recompile. This will cause smbd
to panic (core dump) on this problem. You can then attach to it
with gdb and get more information.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Re: alloc_sub_basic: NULL source string!

2004-03-05 Thread Jeff Umbach
Unfortunately that is not possible on this server, it is a live server that
a restaraunt's point of sale system is running on, so I can't just go
recompiling the samba.

Jeremy Allison [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 On Fri, Mar 05, 2004 at 04:33:28PM -0600, Jeff Umbach wrote:
  Could you tell me or point me to an article that says how to implement
that?
  I didn't find anything on a search that specifically said how to do it.

 Ah, I meant doing a source code change I can send you a brief
 patch for that if you are able to recompile. This will cause smbd
 to panic (core dump) on this problem. You can then attach to it
 with gdb and get more information.

 Jeremy.
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Printing and share problems

2004-03-05 Thread mjynht
I have included the samba log file now...
Please somebody help

[2004/03/05 18:30:28, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
  failed to decode PDU
[2004/03/05 18:30:28, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
  process_request_pdu: failed to do schannel processing.
[2004/03/05 18:36:41, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
  failed to decode PDU
[2004/03/05 18:36:41, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
  process_request_pdu: failed to do schannel processing.
[2004/03/05 18:36:41, 0] passdb/pdb_smbpasswd.c:build_sam_account(1183)
  build_sam_account: smbpasswd database is corrupt!  username casino6$ with
uid 1026 is not in unix passwd database!
[2004/03/05 18:36:41, 0] passdb/pdb_smbpasswd.c:build_sam_account(1183)
  build_sam_account: smbpasswd database is corrupt!  username casino6$ with
uid 1026 is not in unix passwd database!
[2004/03/05 18:36:41, 0]
rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(473)
[2004/03/05 18:36:41, 0] passdb/pdb_smbpasswd.c:build_sam_account(1183)
  build_sam_account: smbpasswd database is corrupt!  username casino6$ with
uid 1026 is not in unix passwd database!
  unmarshall_rpc_header: FIRST flag not set in first PDU !
[2004/03/05 18:36:41, 0] rpc_server/srv_pipe.c:api_pipe_request(1481)
  api_pipe_request: No rpc function table associated with context [0] on
pipe [NETLOGON]
[2004/03/05 18:36:41, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
  failed to decode PDU
[2004/03/05 18:36:41, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
  process_request_pdu: failed to do schannel processing.
[2004/03/05 18:38:20, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(550)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/03/05 18:38:20, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(574)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/03/05 18:38:45, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
  failed to decode PDU
[2004/03/05 18:38:45, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
  process_request_pdu: failed to do schannel processing.
[2004/03/05 18:47:58, 1] libsmb/clispnego.c:parse_negTokenTarg(251)
  Failed to parse negTokenTarg at offset 80


- Original Message - 
From: Michael Aldrich [EMAIL PROTECTED]
To: mjynht [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Friday, March 05, 2004 10:30 AM
Subject: RE: [Samba] Printing and share problems


 Anything out of the ordinary in your log files when the problem occurs?
 Can you post a snip of your smb.conf?

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf
 Of mjynht
 Sent: Friday, March 05, 2004 9:50 AM
 To: [EMAIL PROTECTED]
 Subject: [Samba] Printing and share problems


 Hi everyone.

 I have installed samba 3.0.2 on slackware 9.0.

 I have a pentium iv 1.7 GHz with 256 MB of RAM and a harddrive of 40 GB.

 I'm supporting 32 machines so far.

 This is the thing.

 Most of the times computers loose connection or access to printers that
were
 working fine. The same thing happens with share folders among computers.

 Does anyone have an answer to this issue that's killing me..

 Best regards,

 Daniel
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Re: alloc_sub_basic: NULL source string!

2004-03-05 Thread Jeremy Allison
On Fri, Mar 05, 2004 at 04:49:01PM -0600, Jeff Umbach wrote:
 Unfortunately that is not possible on this server, it is a live server that
 a restaraunt's point of sale system is running on, so I can't just go
 recompiling the samba.

Is it reproducible on a non-live server we can do experiments on ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba + Win2k

2004-03-05 Thread flinchlock
Quoting Craig White

 On Fri, 2004-03-05 at 12:34, John H Terpstra wrote:
  On Fri, 5 Mar 2004, Guylerme Velasco wrote:
  
  
  
   How can i get a trust relationship betwen Samba Domain and
 Win2k ?
  
   I´ve tried many ways like, change win2k register, changig
 some security
   directives, etc.
  
   The win2k is added at Samba Domain like this
  
 useradd -g MYGROUP -d /dev/null -s /bin/false WIN2k$
 smbpasswd -a -m WIN2K$

FWIW.^  NO DOLLAR SIGN when adding a machine
to the smbpasswd file!

Mike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Printing and share problems

2004-03-05 Thread John H Terpstra
On Fri, 5 Mar 2004, mjynht wrote:

 I have included the samba log file now...
 Please somebody help

 [2004/03/05 18:30:28, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
   failed to decode PDU
 [2004/03/05 18:30:28, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
   process_request_pdu: failed to do schannel processing.
 [2004/03/05 18:36:41, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
   failed to decode PDU
 [2004/03/05 18:36:41, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
   process_request_pdu: failed to do schannel processing.
 [2004/03/05 18:36:41, 0] passdb/pdb_smbpasswd.c:build_sam_account(1183)
   build_sam_account: smbpasswd database is corrupt!  username casino6$ with
 uid 1026 is not in unix passwd database!
^^
This tells you that your machines have account entries in the smbpasswd
file  but not in your /etc/passwd file.

Now that can mean only one thing - You did not create the machine
accounts on this machine, or someone deleted the POSIX (UNIX system
account) entries from /etc/passwd.

Simple solution: Add the missing accounts to /etc/passwd. That is the
first thing that must be fixed.

- John T.

 [2004/03/05 18:36:41, 0] passdb/pdb_smbpasswd.c:build_sam_account(1183)
   build_sam_account: smbpasswd database is corrupt!  username casino6$ with
 uid 1026 is not in unix passwd database!
 [2004/03/05 18:36:41, 0]
 rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(473)
 [2004/03/05 18:36:41, 0] passdb/pdb_smbpasswd.c:build_sam_account(1183)
   build_sam_account: smbpasswd database is corrupt!  username casino6$ with
 uid 1026 is not in unix passwd database!
   unmarshall_rpc_header: FIRST flag not set in first PDU !
 [2004/03/05 18:36:41, 0] rpc_server/srv_pipe.c:api_pipe_request(1481)
   api_pipe_request: No rpc function table associated with context [0] on
 pipe [NETLOGON]
 [2004/03/05 18:36:41, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
   failed to decode PDU
 [2004/03/05 18:36:41, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
   process_request_pdu: failed to do schannel processing.
 [2004/03/05 18:38:20, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(550)
   ntlmssp_server_auth: failed to parse NTLMSSP:
 [2004/03/05 18:38:20, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(574)
   ntlmssp_server_auth: failed to parse NTLMSSP:
 [2004/03/05 18:38:45, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
   failed to decode PDU
 [2004/03/05 18:38:45, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
   process_request_pdu: failed to do schannel processing.
 [2004/03/05 18:47:58, 1] libsmb/clispnego.c:parse_negTokenTarg(251)
   Failed to parse negTokenTarg at offset 80


 - Original Message -
 From: Michael Aldrich [EMAIL PROTECTED]
 To: mjynht [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Sent: Friday, March 05, 2004 10:30 AM
 Subject: RE: [Samba] Printing and share problems


  Anything out of the ordinary in your log files when the problem occurs?
  Can you post a snip of your smb.conf?
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf
  Of mjynht
  Sent: Friday, March 05, 2004 9:50 AM
  To: [EMAIL PROTECTED]
  Subject: [Samba] Printing and share problems
 
 
  Hi everyone.
 
  I have installed samba 3.0.2 on slackware 9.0.
 
  I have a pentium iv 1.7 GHz with 256 MB of RAM and a harddrive of 40 GB.
 
  I'm supporting 32 machines so far.
 
  This is the thing.
 
  Most of the times computers loose connection or access to printers that
 were
  working fine. The same thing happens with share folders among computers.
 
  Does anyone have an answer to this issue that's killing me..
 
  Best regards,
 
  Daniel
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba
 
 
 
 
 


-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Re: alloc_sub_basic: NULL source string!

2004-03-05 Thread Craig White
On Fri, 2004-03-05 at 15:47, Jeremy Allison wrote:
 On Fri, Mar 05, 2004 at 04:49:01PM -0600, Jeff Umbach wrote:
  Unfortunately that is not possible on this server, it is a live server that
  a restaraunt's point of sale system is running on, so I can't just go
  recompiling the samba.
 
 Is it reproducible on a non-live server we can do experiments on ?
 
 Jeremy.

oops - meant to send to list...


as an fyi - I am running AS 3 / samba upgraded to via up2date this
week...

# rpm -qa|grep samba
samba-3.0.2-6.3E
redhat-config-samba-1.0.16-1
samba-common-3.0.2-6.3E
samba-client-3.0.2-6.3E

I'm not experiencing that problem.

In fact, the upgrade from 3.0.0-14.3E (I think it was) to current has
quieted down the logs considerably.

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] upgrade samba-2.2.8 to samba-3.0.2a (umlauts)

2004-03-05 Thread Andrew Bartlett
On Sat, 2004-03-06 at 01:39, Götz Reinicke wrote:
 Hi,
 
 we run a samba 2.2.8 server and like to migrate to a faster, new server 
 running samba 3.0.2a.
 
 I thought to copy all files from the old to the new one mounting the new 
 shares by nfs. For a test I copied some files using scp.
 
 A problem concernes the german umlauts:
 
 on the old server they aren't displayed if I ls the files while 
 browsing the share works fine. If I copy the files to the new share, the 
 files are visible in a terminal by e.g. ls, but not visible on the share 
 mounted by my client :-(
 
 I'm using the default settings for character coding or the charset options.
 
 Any ideas how to solve my problem? Is ther a (easy) workaround?

You should configure your system locale for UTF8, and then run a program
such as convmv to convert all your filenames from your current codepage
into UTF8.

or set your 'unix charset', but it really is best simply to use UTF8.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: getpwnam() fails! (with working nss_ldap setup)

2004-03-05 Thread Andrew Bartlett
On Sat, 2004-03-06 at 06:07, M. Vancl wrote:
 I have the same experience.
 IMHO problem is in access rights to password attributes on ldap (slapd).

I doubt that.  

 Recomended access to userPassword for anonymous is only auth (it's right
 policy). Recommended configuration of  nss_ldap is to use anonymous bind for
 non-root processes (and it is also right policy). Then when getpwnam() is
 called by unprivileged process and nss_ldap try to read attribute
 userPassword among others from posixAccount, this must be unsuccessfull
 attempt (and it is right but wrong to me).
 What to do ? I think, it is mistake in nss_ldap behaviour. It must omit
 userPassword attribute from readed attributes when called by nonprivileged
 process.
 My solution is simple, but wrong - weaken of access restrictions to password
 attribute or bind to ldap as manager for all users.

This is indeed the wrong solution, and unless your nss_ldap is much
buggier than the one used at every other site, I don't think this is the
issue.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] DNS proxy is broken in 3.0.2a?

2004-03-05 Thread Andrew Bartlett
On Sat, 2004-03-06 at 04:04, Dmitry Melekhov wrote:
 - Original Message -
 From: Gerald (Jerry) Carter [EMAIL PROTECTED]
 To: Dmitry Melekhov [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Sent: Friday, March 05, 2004 6:00 PM
 Subject: Re: [Samba] DNS proxy is broken in 3.0.2a?
 
 
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
 
  Dmitry Melekhov wrote:
 
  | Today I upgraded 2.2.8a to 3.0.2a  and now samba doesn't
  | work as dns proxy.
 
  Known issue currently:
 
  ~   https://bugzilla.samba.org/show_bug.cgi?id=607
 
 
 Thank you!
 
 As I see this bug is known for a long time :-(
 
 But, if  wins replication is still not supported, is there any way to change
 wins info without nmbd restart?
 We run samba in large enough network (  we are oil company ;-)   ), and we
 use dns proxy as wins repication replacement...

It seems to work for me.  (Just tested it on current CVS).

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3.0.2a + Win2K clients: unreliable share access

2004-03-05 Thread Murthy Kambhampaty
After upgrading from 3.0.1 to 3.0.2a, accessing a shared folder has become unreliable: 
after being able to access my shares for some time I get an error message No domain 
contoller was available (actually, I'm paraphrasing that one, I unfortunately did not 
record it verbatim).  Host linux log contains the following error message for each 
access:

Mar  5 20:07:08 sharesmb01 smbd[4691]: [2004/03/05 20:07:08, 0] auth/auth_winbind.c: 
check_winbind_security(122)
Mar  5 20:07:08 sharesmb01 smbd[4691]:   check_winbind_security: ERROR!  
my_private_data == NULL!

Googling the error message just led me to the source file for auth_winbind.c  

Any ideas for where I might try to find more info troubleshooting this?

From smb.conf (machine, domain and user names altered):

# Global parameters
[global]
workgroup = domain01
server string = sharesmb01 (Samba server)
security = DOMAIN
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
*passwd:*all*authentication*tokens*updated*successfully*
client lanman auth = No
client plaintext auth = No
log file = /var/log/samba/%m.log
max log size = 0
min protocol = NT1
socket options = TCP_NODELAY IPTOS_THROUGHPUT SO_SNDBUF=32768 SO_RCVBUF=32768
dns proxy = No
wins server = 172.16.10.16
ldap ssl = no
idmap uid = 1-2
idmap gid = 1-2
template homedir = /mnt/k/users/%U
template shell = /bin/bash
winbind use default domain = Yes
printing = cups

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

[SASFiles]
comment = SMB-shared SAS files
path = /home/SASFiles
invalid users = +nobody
force user = SomeUser
force group = +Domain Users
read only = No
create mask = 0777
directory mask = 0777
hosts allow = 127., 172.16.10.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] What setting determines filename character mapping?

2004-03-05 Thread tom
Hi,

I'm running samba 3.0.0-15 and have noticed that when users save some
files the filenames get transposed. This is usually when they use
special characters like the '£' (transposed to '#'). Looking at my
smb.conf I found the following settings:

# testparm -v | grep -e char -e code
 
dos charset = CP850
unix charset = UTF-8
display charset = LOCALE
unicode = Yes
mangling char = ~

After consulting the documentation, I'm still not sure what the problem
is. Samba 3 talks UTF on the wire and all the clients are Win XP (bar
one W95 machine from which no user writes to the samba server). From
what I read in the manual I gather that Win XP also talks UTF on the
wire. What setting does the actual character mapping for writing the
filenames on the samba server?

Any help would be appreciated.

Regards,

Tom

__--__-- There is no TRUTH. There is no REALITY. There is no
CONSISTENCY. There are no ABSOLUTE STATEMENTS. I'm very probably wrong.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] ld and libsmbclient

2004-03-05 Thread Steven McClellan
Hello,
 
I am having some difficulty making ld resolve the functions in the
libsmbclient.so when linking.  I am using samba 3.0.2a and the shared
library is being built ok.  There must be something wrong with the shared
library installation.  Could somebody please walk me through all of the
steps necessary for getting the library installed correctly.  The make
install only copied the libsmbclient.so.
 
I have tried several different versions of samba, all with the same result
so I must be missing something.
 
Thanks,
 
-Steve
 
 
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem with stale smdb processes when users log out

2004-03-05 Thread Peter Loron
I'm running Samba 3.0.0-15 (default install) on a Fedora FC1 machine. 
I've attached the smb.conf file below. The Samba server is acting as a 
WINS server on our testlab network, but is not a PDC, nor is it joined 
into a domain. Users authenticate by using a username/password that is 
local to the Samba server.

The problem I'm seeing is that when a user has been connected to the 
Samba server and then logs out of their Windows machine, the connections 
sometimes persist. As an example:

1. User logs in to a WinXP or Win2K3 machine using a domain account (the 
domain PDC is another Windows machine, not the Samba machine).

2. Once in Windows, a connection to the Samba machine is opened via the 
Run menu (\\server\share). The connections ('IPC$' and 'sharename' can 
be seen via smbstatus and 'net use').

3. User logs out of the Windows machine without explicitly disconnecting 
from the Samba server.

4. Connections on the Samba server can sill be seen with smbstatus.

4. User logs in to the same Windows machine, this time with a local 
machine account (such as localMachine\Administrator).

5. User tries to connect to the Samba server using the Run menu, and 
gets an error saying that the password is invalid. Checking with 'net 
use' shows that a connection to the Samba server already exists.

6. Deleting the connection ('net use \\server\share /delete') sometimes 
restores functionality, but not consistently.

Any ideas? Thanks.

-Pete

-

[global]
max log size = 50
guest ok = yes
username map = /etc/samba/smbusers
server string = QA Lab Server
load printers = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
workgroup = PULSAR
local master = no
wins support = yes
printer name = HPLJ4P
log file = /var/log/samba/%m.log
printcap name = /etc/printcap
dns proxy = no
password server = None
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
printable = yes
guest ok = yes
[data]
comment = Antares Data
path = /mnt/data
writeable = yes
hide dot files = yes
force group = users
;   force create  = 0775
force directory mode = 6775
inherit permissions = yes
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] 3.0.3pre1 byte range lock leak?

2004-03-05 Thread Jerry Haltom
I'm having a problem involving Outlook and .pst files and a lock that is
getting stuck I believe.

Once Outlook crashes in the fashion it does, it is unable to reopen the
file, claiming it is already in use. Explorer also does not let me
access the file. Rebooting the workstation does not fix it.

smbstatus does not show the lock, however hwen I show byte range locks,
there is one, from a PID that doesn't exist. I assume this is the
problem lock.

The smbd that owned the lock died when the client rebooted/reconnected.

I am unable to fix this problem. I think that samba at least needs a
smblocks utility to force locks to be released, and manipulate the lock
db (is there such a thing) in order to fix solutions like these. When it
happens a user on the network is unable to access their email until
samba is restarted, which cannot be done during normal working hours...
it's becoming a big problem. (does it already have such a utility?)


I am using 3.0.3pre1, Debian Woody. Linux 2.4.22.

Thanks.

Jerry Haltom


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] DNS proxy is broken in 3.0.2a?

2004-03-05 Thread Dmitry Melekhov

- Original Message - 
From: Andrew Bartlett [EMAIL PROTECTED]
To: Dmitry Melekhov [EMAIL PROTECTED]
Cc: Gerald (Jerry) Carter [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Saturday, March 06, 2004 4:25 AM
Subject: Re: [Samba] DNS proxy is broken in 3.0.2a?

It seems to work for me.  (Just tested it on current CVS).

Hello!

Now I'm shure that this is not samba problem.
I found that I can't find some host with nslookup too on wins server.
I changed domains order in search in resolv.conf and now all works.
nmblookup -R -U 192.168.22.220 center
querying center on 192.168.22.220
192.168.22.224 center00

Something is wrong in bind 9.1.3...

Sorry for wasting your time.
:-(



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] 3.0.3pre1 byte range lock leak?

2004-03-05 Thread Dmitry Melekhov

quote
I'm having a problem involving Outlook and .pst files and a lock that is
getting stuck I believe.

Once Outlook crashes in the fashion it does, it is unable to reopen the
file, claiming it is already in use. Explorer also does not let me
access the file. Rebooting the workstation does not fix it.

smbstatus does not show the lock, however hwen I show byte range locks,
there is one, from a PID that doesn't exist. I assume this is the
problem lock.
/quote

Hello!

We had completely the  same problem with samba 3.0.0, so we downgraded it
back to 2.2.8.
I wrote about this problem, but nobody else said that they have such
problem...
Yesterday I installed 3.0.2a in fileserver.
Looks like I'll have to downgrade it again, if problem is still exists :-(

Unfortunately, I can't reproduce this problem on test server..
btw, we run SLES8.

quote
 I think that samba at least needs a
smblocks utility to force locks to be released
/quote

I think this is good idea.

And, I need the same tool for WINS database too ;-)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] citrix stores addition information into SAM on pdc

2004-03-05 Thread Dmitry Melekhov
quote

hi,
we want to replace our nt4 pdc/bdc with samba and we use windows nt4
terminal servers with citrix in our environment.
as far as i know, we will get a problem here. (extensiver reading of the
mailing list led me to this conclusion)

regarding: http://ma.ph-freiburg.de/tng/tng-users/2001-05/msg00224.html
/quote


http://lists.samba.org/archive/samba-technical/2004-February/034577.html

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] citrix stores addition information into SAM on pdc

2004-03-05 Thread roland
hi,
we want to replace our nt4 pdc/bdc with samba and we use windows nt4 terminal servers 
with citrix in our environment.
as far as i know, we will get a problem here. (extensiver reading of the mailing list 
led me to this conclusion)

regarding: http://ma.ph-freiburg.de/tng/tng-users/2001-05/msg00224.html

Terminal Server has its own User Manager (which has an extra button -
Config on the User Properties dialog box) which read/writes additional
information in the SAM that is not used by standard NT4 servers. This extra
information relates to the users configuration in the terminal server
environment. Such things as -

Allow Logon to Terminal Server
Timeout settings for connection, disconnection  idle.
Action to take on broken or timd-out connections
Whether shadowing is enabled
Whether to connect client printers and drives
etc.

I don't think that Samba (in any of its incarnations) support this extended
SAM functionality, so you'll need to use Windows NT Servers as your NT
domain controllers.

if this has not already been adressed (has it?) we sure get problems with those citrix 
settings. we use the session shadowing
feature and after migrating to samba, i`m somewhat sure things will mess up, because 
the information wether shadowing is enabled or
not cannot be stored on samba pdc.

citrix is very popular and citrix serverfarms usually NEED a domaincontroller by 
design - so i wonder that this hasn`t already
been adressed.

can someone give me information on this and confirm that this still IS an issue ?

if someone is willing to resolve this issue please feel free to contact me. i can 
probably supply necessary information (network
tcpdumpsregistry access logsdoing testingwhatever)

please contact me via mail, because i`m not subscribed to this list.

regards
roland

ps:
while writing this mail i did some further search in the ML archive, so i`m happy to 
see, that i`m not alone :)
http://marc.theaimsgroup.com/?l=samba-technicalm=107787679914877w=2





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


CVS update: samba

2004-03-05 Thread jerry

Date:   Fri Mar  5 15:37:08 2004
Author: jerry

Update of /data/cvs/samba
In directory dp.samba.org:/tmp/cvs-serv27495

Modified Files:
  Tag: SAMBA_3_0
WHATSNEW.txt 
Log Message:
bring WHATSNEW back up to date

Revisions:
WHATSNEW.txt1.52.2.73 = 1.52.2.74

http://www.samba.org/cgi-bin/cvsweb/samba/WHATSNEW.txt.diff?r1=1.52.2.73r2=1.52.2.74


CVS update: samba/source/utils

2004-03-05 Thread Jelmer Vernooij

Date:   Fri Mar  5 17:17:31 2004
Author: jelmer

Update of /home/cvs/samba/source/utils
In directory dp.samba.org:/tmp/cvs-serv13984/utils

Modified Files:
  Tag: SAMBA_3_0
smbget.c 
Log Message:
Add -O (for writing downloaded files to standard out) based on patch by 
Bas van Sisseren [EMAIL PROTECTED]


Revisions:
smbget.c1.1.2.2 = 1.1.2.3

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/smbget.c.diff?r1=1.1.2.2r2=1.1.2.3


CVS update: samba/source/utils

2004-03-05 Thread Jelmer Vernooij

Date:   Fri Mar  5 17:21:45 2004
Author: jelmer

Update of /home/cvs/samba/source/utils
In directory dp.samba.org:/tmp/cvs-serv14857

Modified Files:
smbget.c 
Log Message:
Add -O (write downloaded files to stdout), based on patch from 
Bas van Sisseren [EMAIL PROTECTED]


Revisions:
smbget.c1.3 = 1.4

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/smbget.c.diff?r1=1.3r2=1.4


CVS update: samba/source/printing

2004-03-05 Thread jerry

Date:   Fri Mar  5 17:39:38 2004
Author: jerry

Update of /data/cvs/samba/source/printing
In directory dp.samba.org:/tmp/cvs-serv17589/printing

Modified Files:
  Tag: SAMBA_3_0
printing.c 
Log Message:
fix compiler warning

Revisions:
printing.c  1.139.2.45 = 1.139.2.46

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/printing.c.diff?r1=1.139.2.45r2=1.139.2.46


CVS update: samba/source/printing

2004-03-05 Thread jerry

Date:   Fri Mar  5 17:39:59 2004
Author: jerry

Update of /data/cvs/samba/source/printing
In directory dp.samba.org:/tmp/cvs-serv17629/printing

Modified Files:
printing.c 
Log Message:
fix compiler warning

Revisions:
printing.c  1.203 = 1.204

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/printing.c.diff?r1=1.203r2=1.204


CVS update: samba-docs/docbook/manpages

2004-03-05 Thread jerry

Date:   Fri Mar  5 18:10:04 2004
Author: jerry

Update of /data/cvs/samba-docs/docbook/manpages
In directory dp.samba.org:/tmp/cvs-serv23897/docbook/manpages

Modified Files:
winbindd.8.xml 
Log Message:
BUG 565: winbindd's host lookup functionality is only exported via the IRIX nss lib

Revisions:
winbindd.8.xml  1.4 = 1.5

http://www.samba.org/cgi-bin/cvsweb/samba-docs/docbook/manpages/winbindd.8.xml.diff?r1=1.4r2=1.5


CVS update: samba/source/web

2004-03-05 Thread jerry

Date:   Fri Mar  5 18:37:01 2004
Author: jerry

Update of /data/cvs/samba/source/web
In directory dp.samba.org:/tmp/cvs-serv29818/web

Modified Files:
  Tag: SAMBA_3_0
statuspage.c 
Log Message:
BUG 488: fix the 'show client in col 1' button and corrctely enumerate active 
connections

Revisions:
statuspage.c1.29.2.8 = 1.29.2.9

http://www.samba.org/cgi-bin/cvsweb/samba/source/web/statuspage.c.diff?r1=1.29.2.8r2=1.29.2.9


CVS update: samba/source/web

2004-03-05 Thread jerry

Date:   Fri Mar  5 18:37:32 2004
Author: jerry

Update of /data/cvs/samba/source/web
In directory dp.samba.org:/tmp/cvs-serv29915/web

Modified Files:
statuspage.c 
Log Message:
BUG 488: fix the 'show client in col 1' button and corrctely enumerate active 
connections

Revisions:
statuspage.c1.37 = 1.38

http://www.samba.org/cgi-bin/cvsweb/samba/source/web/statuspage.c.diff?r1=1.37r2=1.38


CVS update: samba/source/smbd

2004-03-05 Thread jra

Date:   Fri Mar  5 22:32:43 2004
Author: jra

Update of /data/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv8946/smbd

Modified Files:
filename.c service.c trans2.c vfs.c 
Log Message:
Several mb tidyups - getting ready to address the XXX_sub function.
Jeremy.


Revisions:
filename.c  1.63 = 1.64

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/filename.c.diff?r1=1.63r2=1.64
service.c   1.130 = 1.131

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/service.c.diff?r1=1.130r2=1.131
trans2.c1.263 = 1.264

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/trans2.c.diff?r1=1.263r2=1.264
vfs.c   1.85 = 1.86

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/vfs.c.diff?r1=1.85r2=1.86


CVS update: samba/source/smbd

2004-03-05 Thread jra

Date:   Fri Mar  5 22:32:45 2004
Author: jra

Update of /data/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv8954/smbd

Modified Files:
  Tag: SAMBA_3_0
filename.c service.c trans2.c vfs.c 
Log Message:
Several mb tidyups - getting ready to address the XXX_sub function.
Jeremy.


Revisions:
filename.c  1.48.2.14 = 1.48.2.15

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/filename.c.diff?r1=1.48.2.14r2=1.48.2.15
service.c   1.85.2.32 = 1.85.2.33

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/service.c.diff?r1=1.85.2.32r2=1.85.2.33
trans2.c1.217.2.64 = 1.217.2.65

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/trans2.c.diff?r1=1.217.2.64r2=1.217.2.65
vfs.c   1.57.2.24 = 1.57.2.25

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/vfs.c.diff?r1=1.57.2.24r2=1.57.2.25