[Samba] Problem with w2k user logging into domain run by Samba
Hi, I am trying to set up Samba 3.0.7 on Linux as a PDC for small home network. I have got as far as being able to join a w2k machine to the domain, but when I try to log in as a domain user, I cannot log on. A dialog box displays: The system cannot log you on because the system's computer account in its primary domain is missing or the password on that account is incorrect. If I look in the Event Viewer, there's an error message to the effect that the login was unable to authenticate against the domain controller. I have scoured the Samba documentation and googled for information - and plenty of people seem to have problems along these lines - , but I simply don't get how to troubleshoot this. What log files should I read and what should I look for? I'd like to get a handle on how to isolate the problem, or better yet just solve it! 1. I have run: adduser -m machine$ 2. I have run: smbpasswd -a -m machine 3. I have joined the machine to the domain - that seemed to work OK. 4. I log in as a user that I have set up both on the Linux system and in smbpasswd. What should I look for? Thanks for any help, Martin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] cannot locate roaming profile
Hello, does all user has writepermissions to there own profile? Does samba creates /export/smb/ntprofile/username ? I had similar problems, so I wrote simple root-preexec-scripts to create the directorys. [profiles] comment = NT Roaming Profiles path = /samba/profiles root preexec = /etc/samba/scripts/mk_sambadir /samba/profiles/%U %U %g profile acls = yes browseable = yes force user = %U writeable = yes create mask = 0600 directory mask = 0700 read only = no # cat /etc/samba/scripts/mk_sambadir #!/bin/bash if [ ! -d $1 ] then mkdir $1 fi chmod 700 $1 -R chown $2 $1 -R chgrp $3 $1 -R matze Vinh Tran schrieb: I've just edited smb.conf to make it a PDC on my SuSE 9.1 machine. I can add other machines to the domain but when I try to log on, I get the message Windows cannot locate your roaming profile...blah blah My config file is below. # smb.conf is the main Samba configuration file. You find a full commented # version at /usr/share/doc/packages/samba/examples/smb.conf.SuSE # Date: 2004-04-06 [global] workgroup = TranFamily os level = 64 passdb backend = smbpasswd interfaces = 127.0.0.1 eth0 bind interfaces only = true printing = cups printcap name = cups printer admin = @ntadmin, root, administrator map to guest = Bad User security = user encrypt passwords = yes server string = Samba netbios name = dragonite add machine script = domain master = yes domain logons = yes local master = yes preferred master = yes logon path = \\%N\profiles\%u logon drive = H: logon home = \\homeserver\%u logon script = logon.cmd ldap suffix = dc=example,dc=com [netlogon] path = /usr/local/samba/lib/netlogon read only = yes write list = ntadmin [profiles] path = /export/smb/ntprofile read only = no create mask = 0600 directory mask = 0700 The local log in and the domain log in usernames are different. I created the directory /export/smb/ntprofile as root but change mod to 777. Beside that, I haven't done much else. Can someone please help? Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Any ideas - samba3+openldap2.2.15-5: problems loggin users onto domain
Marcelo M. Lopes wrote: Hi, I've got this cenario in my Suse 9.2 box: samba-3.0.7-5 openldap2-2.2.15-5 smbldap-tools-0.8.4-1 So when I try to logon with a defaul user (winnt) I receive C001 error code (unsuficient auth). Here the logs for this request: -- snip -- Marcelo, At a first glance, there is no error in you log from slapd. All queries return err=0 and nentries=1 right? Maybe looking for errors in your samba logs might help. hth Paul -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Prints ok, but says Access denied, unable to connect. win2k and samba 2.2.1a
Hi, I had the same problem and solved it by adding use client driver = yes to the [printers] section. I'm not quite sure whether this option is available in Samba 2.2.1a Am Freitag, 11. Februar 2005 16:22 schrieb Ainsworth, Joshua B.: I have a small Samba 2.2.1a plus Win2k workgroup. Samba is running on Redhat 7.2. There is a networked laserjet 5000 using a static IP which I can print to successfuly from the linux box, and from the win2k workstations via the queue on the linux box. The weird thing is that, on the win2k worksations, if I double click on the printer icon the status of the printer is reported as Access denied, unable to connect. Yet it works??? Stefan -- * in-put GbR - Das Linux-Systemhaus Stefan-Michael Guenther Moltkestraße 49 D-76133 Karlsruhe Tel./Fax : +49 (0)721 / 83044 - 98/93 http://www.in-put.de * -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] same profile for several users
Hi there, I would like to have the same (mandatory) profile for a group of users. I tried by setting the same profile path using pdbedit and allowing everyone of them read/write access to the appropriate Linux files, including executable access to the appropriate directories of the profile. However, it does not work. At least Windows always saves my NTUSER.DAT and some other files with exclusive read/write access for the current user, so others get a permission denied. What would be an appropriate way of having the same (mandatory) profile for a group of users? Thanks! Florian -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] same profile for several users
Florian Effenberger írta: Hi there, I would like to have the same (mandatory) profile for a group of users. I tried by setting the same profile path using pdbedit and allowing everyone of them read/write access to the appropriate Linux files, including executable access to the appropriate directories of the profile. However, it does not work. At least Windows always saves my NTUSER.DAT and some other files with exclusive read/write access for the current user, so others get a permission denied. What would be an appropriate way of having the same (mandatory) profile for a group of users? Thanks! Florian For a mandatory profile you should rename the NTUSER.DAT to NTUSER.MAN, then you can disable any write access for that group. This way it worked for me. Cheers Geza -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.10 - Error With Latest Win2K Patches
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Justin Piszcz wrote: | I have found the problem; it was a single patch | from microsoft, remove it and fixed! :) which patch ? We'll need to fix Samba to work with it. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCDhRqIR7qMdg1EfYRAuLNAKCIKlVkgd68mlk/sq0iSJjTERVpRwCeIjzl 14bH6rODdhvzvnTCjhja2Mo= =Ti52 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] same profile for several users
Hi, For a mandatory profile you should rename the NTUSER.DAT to NTUSER.MAN, then you can disable any write access for that group. This way it worked for me. thanks, but the problem is that I still need one NTUSER.MAN file and a profile directory per user. I would like to serve a bunch of users out of one directory. :-) Florian -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Slow printing on Windows XP SP2 -- no solution?
I browsed through some posts about this issue which I've been struggling with for a long time now. Why is there no solution? I think this issue has been discussed so many times (with no final solution) that I don't need to rewrite the symptoms and logs. Printer HP LaserJet 1100 with latest HP drivers. Smb 3.0.7 (also tried 3.0.12pre with no difference in printing time). This is what I hate about non-commercial software.. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Slow printing on Windows XP SP2 -- no solution?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Eddy wrote: | I think this issue has been discussed so many times | (with no final solution) that I don't need to | rewrite the symptoms and logs. Printer HP LaserJet | 1100 with latest HP drivers. Smb 3.0.7 (also | tried 3.0.12pre with no difference in printing time). See if this helps. https://bugzilla.samba.org/bug/2336 cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCDi4CIR7qMdg1EfYRAucBAKC6jFSxEHhX8RfIJ9c5f5UXEMBKqACeOCGp bLwyry2aha4O6307fs+s2vY= =V6Wp -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Re: [Samba] Samba 3.0.10 - Error With Latest Win2K Patches
The patch fixes a 'drag and drop' vulnerability. The patch ID is: KB890047 http://www.microsoft.com/technet/security/bulletin/MS05-008.mspx?pf=true On Sat, 12 Feb 2005, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Justin Piszcz wrote: | I have found the problem; it was a single patch | from microsoft, remove it and fixed! :) which patch ? We'll need to fix Samba to work with it. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCDhRqIR7qMdg1EfYRAuLNAKCIKlVkgd68mlk/sq0iSJjTERVpRwCeIjzl 14bH6rODdhvzvnTCjhja2Mo= =Ti52 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba/LDAP documentation
List, documenters; I'd like to exchange notes about the official Samba 3 LDAP doco. I'd like to do this off list, since doing it on list would simply confuse and confound users wit perfectly working systems. Background: Me, Samba relative newbie, though I can get *everything* Samba-orientated to work simply by using umpteen years Unix experience. Many years as Openldap admin. With Windows it's worse, since I'm beginning again after many years' absence - but it all works if I try hard enough and follow the docs (but more importantly my own intuition. Windows stinks, since changes in subversions nullify the experience gained in previous versions. However, we all knew that. Openldap experience is a couple or three years long, BUT I'm not prepared to discuss *anything* prior to OL 2.2.17 (the present stable version as notified by OpenLDAP.org is 2.2.23). For example, Red Hat's 2.0.27 or 2.1.22 are unstable and will break on extended loading or extended uptime. Worst is, that with OL 2.0.27 there's no method of repairing sparse/corrupted databases other than wit a rebuild from a dumped ldif; with Red Hat's 2.1.22 databases are guaranteed to become corrupted (Sleepycat BDB 4.1), though there is a way of repairing the DB (whilst the server is *down*). OL 2.2.17's and higher use patched Sleepycat's BDB 4.2.52, are mostly guaranteed against corruption (if correctly configured using DB_CONFIG) and even in the case of a corrupted DB (which I've *never* experienced, whatever) can be repaired. Samba's NT groups as documented in the HOWTO (Terpstra and Coupeau) are worthless. (Sorry JT). OL 2.2 don't like Unix GIDs or UIDs with spaces in their names (f.ex. Domain Admins). Worse, Linux don't like them. Worst of all, it looks like shit on an 'ls -l'. I have my own alternative method which works perfectly. That's what I'd like to discuss, off list. No, I haven't asked IDEALX, no I haven't consulted anyone else than Billy my Cat, my IT consultant. He's in perfect agreement with me - but then, he usually is, if he gets food and petting regularly. Best, --Tonni -- mail: [EMAIL PROTECTED] http://www.billy.demon.nl -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Slow printing on Windows XP SP2 -- no solution?
Eddy wrote: I browsed through some posts about this issue which I've been struggling with for a long time now. Why is there no solution? I think this issue has been discussed so many times (with no final solution) that I don't need to rewrite the symptoms and logs. Printer HP LaserJet 1100 with latest HP drivers. Smb 3.0.7 (also tried 3.0.12pre with no difference in printing time). This is what I hate about non-commercial software.. Eddy, I've had this problem with XP SP1 on Windows Samba print servers. (Most memorably when the XP migration discovered this bug at the Fire Halls) The hotfix from http://support.microsoft.com/default.aspx?scid=kb;en-us;329234 should be included in your SP2 deployment. It patches the Windows print spooler. You can confirm I'm sending you down the right path looking at the Windows Print Spooler network traffic - if you see a continuous series of RPCs from the client to the print spooler this is likely the problem. A possible fix is to lay SP2 down after the print drivers to ensure that the unpatched spooler is not being re-activated. Regarding your last point - I think you are confusing commercial software with commercial support. There are organizations which provide paid SLA-based Samba support. If you need that in your environment you might want to look at: http://samba.org/samba/support/ . In environments I've worked in it is uncommon not to have commercial software without support. Personally I'll take open software with no support over commercial with no support, there is usually a community for the former. Although, for critical software I preferred commercial support. Dave -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Netbios over VPN
Hi all, First of all let me describe my vpn config. I have 3 networks and 1 host connected through OpenVPN: LAN1: LAN IP: 192.168.0.0 VPN IP TO LAN2: 10.0.0.1 VPN IP TO LAN3: 10.0.1.1 VPN IP TO HOST1: 10.0.2.1 LAN2: LAN IP: 192.168.1.0 VPN IP TO LAN 1: 10.0.0.2 LAN3: LAN IP: 192.168.30.0 VPN IP TO LAN 1: 10.0.1.2 HOST1: VPN IP TO LAN 1: 10.0.2.2 As you can see, all vpn connections are going through a LAN1 server, so any traffic between the vpn is routed through this server. The problem is that I can access any host on the vpn from everywhere (including samba shares) with the IP address but not with the netbios name. Reverse nmblookup works (nmblookup -A 192.168.0.1) meaning that netbios ports are not filtered. As I understand I must have the right settings for *remote announce* and *remote browser sync* but don't know which are these settings since I tweaked them without any luck. Or maybe there are other options that must be configured. Thanks all for your replies, Arthur -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Launching workstation local applications creates SMB traffic and STATUS_NO_SUCH_FILE errors
Launching workstation local applications creates SMB traffic and STATUS_NO_SUCH_FILE errors I am using Samba 2.2.12 as a domain controller without any use of roaming profiles. Everything is working fine, but I have noticed some strange behavior. I've been working on a problem for quite some time. No matter what local application I launch on a workstation, I will see the following server message block (SMB) packets going from the workstation to the server. I don't want to include the server in local applications being launched. I checked the path environmental variable and there are no references to network drives at all. Trans2 Request, QUERY_PATH_INFO Query File Basic Info, Path: \.appname Trans2 Response, QUERY_PATH_INFO Trans2 Request FIND_FIRST2, Pattern: \.appname Trans2 Response, FIND_FIRST2, Error: STATUS_NO_SUCH_FILE Another example will be if I go to run cmd to bring up a DOS window, I will see the following SMB packets from the workstation to the server which clearly creates creates performance problems. Trans2 Request, FIND_FIRST2, Pattern: \CMD* Trans2 Response, FIND_FIRST2, Error: STATUS_NO_SUCH_FILE Trans2 Request QUERY_PATH_INFO, Query File Basic Info, Path: \cmd Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OBJECT_NAME_NOT_FOUND Trans2 Request, FIND_FIRST2, Pattern: \CMD* Trans2 Response, FIND_FIRST2, Error: STATUS_NO_SUCH_FILE Trans2 Request, FIND_FIRST2, Pattern: \CMD* Trans2 Response, FIND_FIRST2, Error: STATUS_NO_SUCH_FILE Trans2 Request, QUERY_PATH_INFO, Query File Basic Info, Path: \cmd.exe Trans2 Response, QUERY_PATH_INFO, Error: STATUS_OOBJECT_NAME_NOT_FOUND It will then bring up the CMD window, and the prompt will be at the Z: drive (users home directory). I want it to come up with C:\ by default. I would like to get this behavior to stop and have tried searching to no avail. Please let me know what I need to do in order to stop the local workstation from this inefficient behavior. Thanks, -Troy -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Incorrect disk size reported at 20.0 MB
On Fri, Feb 11, 2005 at 07:47:34AM -0800, Richard Felkins wrote: I'm recently seeing an issue with how Samba is reporting the disk space available from a NFS share. Checking the properties from a PC system displays all mapped network drives as having 20.0 MB size with zero free disk space available. We updated to Samba version 3.0.11 this morning with no change in results. I have checked the bug reports and haven't found anything that resembles this problem. Any ideas where I might look? A network capture showing the disk space request would help, as would a debug level 10 from smbd. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba/LDAP documentation
Tonni, Folks, The Samba-HOWTO-Collection and Samba-Guide documentation has worked for many people, but I am quick to admit that it can be significantly improved. There is little benefit in my continuously pounding this list with requests for patches and updates - even though we have demonstrated time after time that we act on every suggestion, patch or contribution. We do not know as much as the sum of experience that others can contribute. Some of us really appreciate little (or big) gems of knowledge and/or experience that may help us in our efforts or work. We do not accept the notion that the current documentation is worthless. We will all be most pleased to receive an update or ammendment that may help any other user. The update or ammendment may be in pure text form, or any other form you care to submit, we will convert it to docbook format for inclusion in the documentation. In the past we have included updates regardless of our personal preferences, the only criteria we must insist on is that the information is not plain-wrong, and that it is legal for us to publish it. Documentation projects need to take account of technical correctness and must also recognize the significant degree to which personal preferences dictation people opinions. Just because someone does not like something does not make it wrong. I do not have time for lengthy discussion, my time is limited enough as it is. Please document and submit your patches, updates or contribution using bugzilla at: https://bugzilla.samba.org If the demands of posting to bugzilla are too much to ask, I am happy to receive bug reports and updates, etc. via direct email. Please document your corrections and let's get on with life. Cheers, John T. On Saturday 12 February 2005 11:18, Tony Earnshaw wrote: List, documenters; I'd like to exchange notes about the official Samba 3 LDAP doco. I'd like to do this off list, since doing it on list would simply confuse and confound users wit perfectly working systems. Background: Me, Samba relative newbie, though I can get *everything* Samba-orientated to work simply by using umpteen years Unix experience. Many years as Openldap admin. With Windows it's worse, since I'm beginning again after many years' absence - but it all works if I try hard enough and follow the docs (but more importantly my own intuition. Windows stinks, since changes in subversions nullify the experience gained in previous versions. However, we all knew that. Openldap experience is a couple or three years long, BUT I'm not prepared to discuss *anything* prior to OL 2.2.17 (the present stable version as notified by OpenLDAP.org is 2.2.23). For example, Red Hat's 2.0.27 or 2.1.22 are unstable and will break on extended loading or extended uptime. Worst is, that with OL 2.0.27 there's no method of repairing sparse/corrupted databases other than wit a rebuild from a dumped ldif; with Red Hat's 2.1.22 databases are guaranteed to become corrupted (Sleepycat BDB 4.1), though there is a way of repairing the DB (whilst the server is *down*). OL 2.2.17's and higher use patched Sleepycat's BDB 4.2.52, are mostly guaranteed against corruption (if correctly configured using DB_CONFIG) and even in the case of a corrupted DB (which I've *never* experienced, whatever) can be repaired. Samba's NT groups as documented in the HOWTO (Terpstra and Coupeau) are worthless. (Sorry JT). OL 2.2 don't like Unix GIDs or UIDs with spaces in their names (f.ex. Domain Admins). Worse, Linux don't like them. Worst of all, it looks like shit on an 'ls -l'. I have my own alternative method which works perfectly. That's what I'd like to discuss, off list. No, I haven't asked IDEALX, no I haven't consulted anyone else than Billy my Cat, my IT consultant. He's in perfect agreement with me - but then, he usually is, if he gets food and petting regularly. Best, --Tonni -- mail: [EMAIL PROTECTED] http://www.billy.demon.nl -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [SPAM] Re: Re: [Samba] Samba 3.0.10 - Error With Latest Win2K Patches
Hallo Justin Piszcz, I have found the problem; it was a single patch from microsoft, remove it and fixed! :) Please can you tell us the Patchnumber? Greetings Thomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] performance?
Hallo Shane Hebert, My environment: Linux: SuSE 9.2 Pro AMD64 Windows: Windows XP Pro (32-bit) on an Athlon64 Networking: everything connected with GoC. [...] This reports the data transfer rate at around 65kb/s [...] around 15MB/s (near hard drive write speed on the Windows box). [...] the transfer rates are still below 100kb/s Any ideas? Sound's that you have a Network Problem. - Have you a managed Switch who can you show some Infos about damaged/wrong Packet's ? - show (on linux Server) ifconfig any errors on RX/TX packets or a lot of collisions ? - what show mii-tool for your ethercard? (special duplex setting, link state and so on). - You have a Gigabit Network?. Are the Cables of type CAT5e and with all 8 Pins connected? Greetings Thomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba/LDAP documentation
On Sat, 2005-02-12 at 19:18 +0100, Tony Earnshaw wrote: List, documenters; I'd like to exchange notes about the official Samba 3 LDAP doco. I'd like to do this off list, since doing it on list would simply confuse and confound users wit perfectly working systems. Background: Me, Samba relative newbie, though I can get *everything* Samba-orientated to work simply by using umpteen years Unix experience. Many years as Openldap admin. With Windows it's worse, since I'm beginning again after many years' absence - but it all works if I try hard enough and follow the docs (but more importantly my own intuition. Windows stinks, since changes in subversions nullify the experience gained in previous versions. However, we all knew that. Openldap experience is a couple or three years long, BUT I'm not prepared to discuss *anything* prior to OL 2.2.17 (the present stable version as notified by OpenLDAP.org is 2.2.23). For example, Red Hat's 2.0.27 or 2.1.22 are unstable and will break on extended loading or extended uptime. Worst is, that with OL 2.0.27 there's no method of repairing sparse/corrupted databases other than wit a rebuild from a dumped ldif; with Red Hat's 2.1.22 databases are guaranteed to become corrupted (Sleepycat BDB 4.1), though there is a way of repairing the DB (whilst the server is *down*). OL 2.2.17's and higher use patched Sleepycat's BDB 4.2.52, are mostly guaranteed against corruption (if correctly configured using DB_CONFIG) and even in the case of a corrupted DB (which I've *never* experienced, whatever) can be repaired. Samba's NT groups as documented in the HOWTO (Terpstra and Coupeau) are worthless. (Sorry JT). OL 2.2 don't like Unix GIDs or UIDs with spaces in their names (f.ex. Domain Admins). Worse, Linux don't like them. Worst of all, it looks like shit on an 'ls -l'. I have my own alternative method which works perfectly. That's what I'd like to discuss, off list. No, I haven't asked IDEALX, no I haven't consulted anyone else than Billy my Cat, my IT consultant. He's in perfect agreement with me - but then, he usually is, if he gets food and petting regularly. yeah but how good is he at coding? I am pretty much in agreement with your assessments, both in this message and on previous messages but it's probably an exaggeration to call the HOWTO with respect to groups as worthless. What I find that I have issue with - an apparently so do you, is that the official HOWTO tends to view LDAP in a vacuum with respect to samba and that is too expedient to be practical for those who have implemented LDAP already and not entirely cooperative with Unix/Linux tools when you use the names such as Domain Admins etc. The documentation in the HOWTO does tell you how to assign windows type Domain Users to Unix dom_users via group map commands and it took me some time to figure out that the intent is to create an object in the DSA like this... # dom_users, Groups, azapple.com dn: cn=dom_users,ou=Groups,dc=azapple,dc=com objectClass: posixGroup objectClass: top objectClass: sambaGroupMapping cn: dom_users userPassword:: gidNumber: 500 memberUid: craig memberUid: jennifer memberUid: holly sambaGroupType: 2 sambaSID: S-1-5-21-99-99-99-513 description: Netbios Domain Users displayName: Domain Users where the group map command puts the windows name for the group into the 'displayName' attribute and obviously the RID is important in this case. In fact, Windows needs the sambaSID to be right, the displayName to be consistent with the expectations of an experienced Windows administrator and this setup permits sanity when dealing with the posix type attributes as well. I found the IDEALX scripts interesting in that they create the necessary groups for Windows to be happy but obstructive if you try to use those groups added to the DSA because of the erratic behavior of various utilities dealing with group names such as Domain Users. Thus, I haven't used them since my early fumbling. Whether you choose to populate your base with the IDEALX script or do 'net rpc vampire' you will bring these groups into your DSA and you will have to deal with them or not deal with them as you see fit. Interestingly enough, I used Gerry Carter's LDAP book which deals with LDAP first and then how to integrate samba (of course, this was 2.2 when book was published) which is clearly the approach that you and I have taken. There was a brief exchange last week where John Terpstra took me to task for expressing my opinion that root should not be used in the DSA at all which goes against his advice and against the current Samba documentation but Gerry Carter piped in with his agreement to my point of view so evidently, there is a fundamental disagreement between them that hasn't been resolved with clarity for us lowly and less sophisticated users. I guess I have come to the conclusion that the current documentation (I'm mostly referring to the HOWTO since
[Samba] Patch for clitar.c (bug 2390) Solves problem.
http://lists.samba.org/archive/samba/2005-February/100161.html https://bugzilla.samba.org/show_bug.cgi?id=2309 I have added reply to the bug. It was on a quad Opteron, 10GB of Memory and gaggles of disk. RHES v3.0 for X86 - 32bit [not AMD_X86 - 64bit] is the OS being used. With kernel-smp-2.4.21-20.EL being the installed kernel. -- greg, [EMAIL PROTECTED] The technology that is Stronger, better, faster: Linux signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba/LDAP documentation
On Saturday 12 February 2005 14:39, Craig White wrote: I am pretty much in agreement with your assessments, both in this message and on previous messages but it's probably an exaggeration to call the HOWTO with respect to groups as worthless. What I find that I have issue with - an apparently so do you, is that the official HOWTO tends to view LDAP in a vacuum with respect to samba and that is too expedient to be practical for those who have implemented LDAP already and not entirely cooperative with Unix/Linux tools when you use the names such as Domain Admins etc. The documentation in the HOWTO does tell you how to assign windows type Domain Users to Unix dom_users via group map commands and it took me some time to figure out that the intent is to create an object in the DSA like this... The Samba-HOWTO-Collection has the objective to document the methods by which core features of Samba can be used. It does not aim to document example deployments. By its very nature the Samba-HOWTO-Collection is an eclectic collection of snippets that document techniques and approaches. Very little of the HOWTO document provides a complete compendium of deployment guidance - if any! The purpose of the HOWTO sections on Samba use with LDAP is deliberately intent on providing minimal guidance. It is not a tutorial on LDAP and never will be. The Samba-3 by Example book was written with the intent that it should fully document example network solutions. There is room for a chapter that could cover integration of Samba with a pre-existing LDAP server. I would welcome such a chapter being submitted for inclusion. # dom_users, Groups, azapple.com dn: cn=dom_users,ou=Groups,dc=azapple,dc=com objectClass: posixGroup objectClass: top objectClass: sambaGroupMapping cn: dom_users userPassword:: gidNumber: 500 memberUid: craig memberUid: jennifer memberUid: holly sambaGroupType: 2 sambaSID: S-1-5-21-99-99-99-513 description: Netbios Domain Users displayName: Domain Users where the group map command puts the windows name for the group into the 'displayName' attribute and obviously the RID is important in this case. In fact, Windows needs the sambaSID to be right, the displayName to be consistent with the expectations of an experienced Windows administrator and this setup permits sanity when dealing with the posix type attributes as well. Right on! I found the IDEALX scripts interesting in that they create the necessary groups for Windows to be happy but obstructive if you try to use those groups added to the DSA because of the erratic behavior of various utilities dealing with group names such as Domain Users. Thus, I haven't used them since my early fumbling. Whether you choose to populate your base with the IDEALX script or do 'net rpc vampire' you will bring these groups into your DSA and you will have to deal with them or not deal with them as you see fit. Again, right on! Interestingly enough, I used Gerry Carter's LDAP book which deals with LDAP first and then how to integrate samba (of course, this was 2.2 when book was published) which is clearly the approach that you and I have taken. Neither of the Samba documents in any way is meant to provide any form of introductory coverage of LDAP. Jerry's book is a good book - I recommend it. I believe that Samba documentation is not the right place for LDAP basic training. If the common consensus differs from this I am happy to receive basic introductory LDAP info for inclusion in the document. There was a brief exchange last week where John Terpstra took me to task for expressing my opinion that root should not be used in the DSA at all which goes against his advice and against the current Samba The is not quite my recollection Craig. I was addressing the need for unambiguous resolution of UIDs and GIDs to SIDs, and login IDs. If you are using LDAP and a version of Samba prior to 3.0.11 then the root account needs to be in LDAP also. Personally speaking, this freaks me out because I dislike having system accounts in LDAP. I believe Jerry and I are actually in agreement here. Jerry chimed in to point out that with the priviliges code that is new to Samba-3.0.11 you no longer need the root account. The core of this functionality is documented in the current on-line version of the Samba-HOWTO-Collection in chapter 12. documentation but Gerry Carter piped in with his agreement to my point of view so evidently, there is a fundamental disagreement between them that hasn't been resolved with clarity for us lowly and less sophisticated users. Please go back and re-read my comments and Jerry's - we are in total agreement on not putting system accounts in LDAP. Why are we being mis-interpreted again? Sheesh! I guess I have come to the conclusion that the current documentation (I'm mostly referring to the HOWTO since I haven't studied the 'by Example' stuff) is geared towards
[Samba] Migrating domain from Samba 3 to Windows 2003
At the risk of being called a turncoat and traitor in Sambaland, I ask, how do I migrate from a Samba 3 domain to a Windows 2003 Active Directory domain? A customer has determined that they wish to use the groupware features of Microsoft Exchange. They already have the licenses they need, so there's no point in convincing them that Samba will be cheaper or that some Linux-based solution will work. This of course requires Active Directory (although I would not be surprised if a subscriber to this list proves me wrong), and by extension, migrating their existing Samba 3 domain. Of course, it would be easy to just create a new domain. Since this customer has only 6 machine accounts and 7-10 user accounts, it's not a big deal to recreate them. However, one must remember that creating new users in a new domain means that user profiles will be lost since the profile (read: NTUSER.DAT) is tied to the SID of the user. New domain = new SIDs. It's possible but tedious and risky with unpredictable results (due to permissions, again tied to the SID) to migrate user profiles. A domain migration would be much smoother, if possible, especially for an administrator dealing with hundreds or thousands of user and machine accounts. Here is how I imagine doing it. The customer has two new servers (hardware), one of which will be a replacement for the existing Samba box (which handles file storage and sharing), the other of which will be the Windows 2003 AD server. I will make a copy of the existing Samba 3 domain to one new box, and install Windows 2003 in the other new box. These boxes will be at this point disconnected from the production network, leaving it intact and unchanged for now. This lets us make mistakes on the new systems without affecting their production network. Configure the Samba server so it looks like an NT 4 server (how?). Join the Windows 2003 server as a member server to the Samba 3 domain. Run the Active Directory installation wizard to migrate the domain, elevating the Windows 2003 server to an Active Directory server. Take the Samba 3 server offline, rebuild it, joining it to the new W2K3/AD domain as a simple file server. Any reason this won't work? Your experiences? Your wisdom? One final question: Can Exchange 2003 be made to authenticate against a Samba domain? I would expect not, since a Samba domain is mostly an NT4 equivalent and Exchange 2003 requires a domain at least at AD2000 functional level. Maybe AD2003 functional level. ~Jonathan Johnson Sutinen Consulting, Inc. [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: [PATCH] bug in 3.0.11 winbindd when 'disable netbios = yes'
Sorry for the break in the threading. Originally this is from : http://lists.samba.org/archive/samba/2005-February/100230.html Quoting from Jerry: Heads up If anyone has had problems with winbindd not being able to locate any domain controllers after upgrading to 3.0.11 *and* you have 'disable netbios = yes' in smb.conf, please test this preliminary patch (winbind_find_dc.patch). It's pretty rough currently but needs some more widespread testing. You can download it from : http://www.samba.org/~jerry/patches/post-3.0.11/ If anyone would care to test it out on other winbindd installations, that would be great. But this is just a patch in progress. Please don't install it on production servers (unless you are already in a lot of pain from the original bug). Note that if smbd -b | grep WITH_ADS doesn't return anything, don't install this patch as I haven't put in the proper ifdef's to compile on systems without kerberos and ldap packages. If you do have trouble with winbindd after installing the patch, please just email me directly with a short description and the details of your smb.conf. Thanks. I was forced to goto version 3.0.11 of samba. The added abilities were needed at this location, also with the printing fixes as well. So, Samba has fixed Bug #1580 (and yes it did fix it, THANKS Jerry!) And your prelim-patch for clitar.c also passed the mustard quite well... And NOW you fix the resulting problem I was having as I brought up the Samba Server. wbinfo gave me only local account and groups, 1 sequence number that was stale and basically was non-functional. I am just glad I happen to browse by the problem that this patch fixes... And, as of right now... it is in production, mainly because of the consequence of the features of 3.0.11. I wish to thank, all of you on the Samba Team, those of you listed on the contacts page: * Jeremy Allison* Andrew Tridgell * John Terpstra * Chris Hertel * John Blair* Gerald (Jerry) Carter * Michael Warfield * Brian Roberson * Jean Francois Micouleau * Simo Sorce * Andrew Bartlett * Jelmer Vernooij * Richard Sharpe* Stefan Metzmacher * Martin Pool * Herb Lewis * Dan Shearer * David Fenwick * Volker Lendecke * Tim Potter * David Bannon * Steve French * Jim McDonough * Alexander Bokovoy * Rafal Szczesniak * Marc Kaplan * Paul Green* Deryck Hodge * Vance Lankhaar* Guenther Deschner To each of you, you have made my life simpler by replacing a POS product that should never have been this popular. I am going to share my good fortune (not that it'll be much... but hey some os better than none) soon enough... with quite a few FOSS Projects that I convert companies and people to. The place I work, is nearing a point where I'll be able to run everything on Linux, using Native apps or using bridge apps like Wine/wine Derivatives. Once again: THANKS^3! -- [EMAIL PROTECTED] REMEMBER ED CURRY! http://www.iwethey.org/ed_curry Novell's Directory Services is a competitive product to Microsoft's Active Directory in much the same way that the Saturn V is a competitive product to those dinky little model rockets that kids light off down at the playfield. -- Thane Walkup signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Migrating domain from Samba 3 to Windows 2003
On Sat, 2005-02-12 at 14:40 -0800, Jonathan Johnson wrote: At the risk of being called a turncoat and traitor in Sambaland, I ask, how do I migrate from a Samba 3 domain to a Windows 2003 Active Directory domain? A customer has determined that they wish to use the groupware features of Microsoft Exchange. They already have the licenses they need, so there's no point in convincing them that Samba will be cheaper or that some Linux-based solution will work. This of course requires Active Directory (although I would not be surprised if a subscriber to this list proves me wrong), and by extension, migrating their existing Samba 3 domain. Of course, it would be easy to just create a new domain. Since this customer has only 6 machine accounts and 7-10 user accounts, it's not a big deal to recreate them. However, one must remember that creating new users in a new domain means that user profiles will be lost since the profile (read: NTUSER.DAT) is tied to the SID of the user. New domain = new SIDs. It's possible but tedious and risky with unpredictable results (due to permissions, again tied to the SID) to migrate user profiles. A domain migration would be much smoother, if possible, especially for an administrator dealing with hundreds or thousands of user and machine accounts. Here is how I imagine doing it. The customer has two new servers (hardware), one of which will be a replacement for the existing Samba box (which handles file storage and sharing), the other of which will be the Windows 2003 AD server. I will make a copy of the existing Samba 3 domain to one new box, and install Windows 2003 in the other new box. These boxes will be at this point disconnected from the production network, leaving it intact and unchanged for now. This lets us make mistakes on the new systems without affecting their production network. Configure the Samba server so it looks like an NT 4 server (how?). Join the Windows 2003 server as a member server to the Samba 3 domain. Run the Active Directory installation wizard to migrate the domain, elevating the Windows 2003 server to an Active Directory server. Take the Samba 3 server offline, rebuild it, joining it to the new W2K3/AD domain as a simple file server. Any reason this won't work? Your experiences? Your wisdom? One final question: Can Exchange 2003 be made to authenticate against a Samba domain? I would expect not, since a Samba domain is mostly an NT4 equivalent and Exchange 2003 requires a domain at least at AD2000 functional level. Maybe AD2003 functional level. Why not just do the easy thing... add 2003 to the samba domain... and just have local AD and then it'll just work. -- greg, [EMAIL PROTECTED] The technology that is Stronger, better, faster: Linux signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.10 - Error With Latest Win2K Patches
Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Justin Piszcz wrote: | I have found the problem; it was a single patch | from microsoft, remove it and fixed! :) which patch ? We'll need to fix Samba to work with it. Samba 3.0.11, AIX 5.2 linux RH9 2.4.20-28.9smp win2000 clients all current hotfixes and winXP all current hotfixes are not having any problem dragging files to and from samba 3.0.11. Samba servers are 2003 AD native mode member machines. I have sendfile disabled on both OS otherwise mostly defaults. Regards, Doug -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Slow printing on Windows XP SP2 -- no solution?
Eddy wrote: This is what I hate about non-commercial software.. Aaahhh, hang on there buddy, I've heard from admins of 100% M$ networks that they get slow prints from time to time as well. Know all the facts before you point fingers. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re:Re: [Samba] Samba 3.0.10 - Error With Latest Win2K Patches
I can confirm by uninstalling and re-installing that patch the problem exists and is fixed by removing that patch on two separate windows 2000 professional (SP4) machines and additionally; another win2k box (sp1?) with no patches never had any problem during any of this (used as a control). On Sat, 12 Feb 2005, Doug VanLeuven wrote: Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Justin Piszcz wrote: | I have found the problem; it was a single patch | from microsoft, remove it and fixed! :) which patch ? We'll need to fix Samba to work with it. Samba 3.0.11, AIX 5.2 linux RH9 2.4.20-28.9smp win2000 clients all current hotfixes and winXP all current hotfixes are not having any problem dragging files to and from samba 3.0.11. Samba servers are 2003 AD native mode member machines. I have sendfile disabled on both OS otherwise mostly defaults. Regards, Doug -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can't change password with Windows XP (Change passwordfeature)
That did the trick! I wonder why it stopped working? Thanks, James Ganeshram Iyer lt;[EMAIL PROTECTED]gt; wrote: On Fri, 11 Feb 2005 00:29:51 -, James Marcinek [EMAIL PROTECTED] wrote: Hello Everyone, I've been trying to figure out why I can't change passwords with my windows clients. I thought that at when I first built my smb.conf I could. I'm running RHEL3 (I also have another system at a different location running FC3 with the same problem ). I've been looking through my smb.conf (see excerpts): # You may wish to use password encryption. Please read # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation. # Do not enable this option unless you have read those documents encrypt passwords = yes ; smb passwd file = /etc/samba/smbpasswd passdb backend = tdbsam # The following are needed to allow password changing from Windows to # update the Linux system password also. # NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above. # NOTE2: You do NOT need these to allow workstations to change only #the encrypted SMB passwords. They allow the Unix password #to be kept in sync with the SMB password. unix password sync = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* We get an error now that states not authorized (or something like that) to change password. These are Windows XP Pro systems. The version of Samba is: samba-3.0.9-1 This is driving me crazy. Can anyone help me out? Thanks, James Hey James, I just recently played with this setup. I finally got it to work after debugging the output of the passwd command. Try this: passwd chat = *New*password* %n\n *ReType*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* Keep in mind that this all has to be on one line. I have not included any line break stuff in there. Of course I must mention that I tried these on RedHat Enterprise Linux AS 3 with Samba 3.0.9-1.3E.2 and it work fine. If this does not work then you could try setting log level to 100 and passwd chat debug to yes and searching the log files for possible errors. Ganesh -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Re:Re: [Samba] Samba 3.0.10 - Error With Latest Win2K Patches
On Sat, 2005-02-12 at 20:41 -0500, Justin Piszcz wrote: I can confirm by uninstalling and re-installing that patch Each patch has a Q number. Can you tell us what it is, so we can pursue our testing? Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] www.cdma.com.tw ¯f¬r°»´ú´£¿ô
http://www.cdma.com.tw/ From : samba@lists.samba.org To: [EMAIL PROTECTED] Subject : Re: Your website Date : Sun, 13 Feb 2005 14:17:18 +0800 Message-ID: AttachmentVirus name Action taken -- your_website.pif Email-Worm.Win32.NetSky.jMessage Deleted -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Re:Re: [Samba] Samba 3.0.10 - Error With Latest Win2K Patches
On Sun, 2005-02-13 at 16:36 +1100, Andrew Bartlett wrote: On Sat, 2005-02-12 at 20:41 -0500, Justin Piszcz wrote: I can confirm by uninstalling and re-installing that patch Each patch has a Q number. Can you tell us what it is, so we can pursue our testing? I thought that he did - earlier in the thread... The patch fixes a 'drag and drop' vulnerability. The patch ID is: KB890047 http://www.microsoft.com/technet/security/bulletin/MS05-008.mspx?pf=true Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
svn commit: samba r5357 - in branches/SAMBA_4_0/source/lib/ldb: common include
Author: tridge
Date: 2005-02-12 11:30:33 + (Sat, 12 Feb 2005)
New Revision: 5357
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5357
Log:
added ldb_msg_add_fmt(), for creating formatted ldb record values
Modified:
branches/SAMBA_4_0/source/lib/ldb/common/ldb_msg.c
branches/SAMBA_4_0/source/lib/ldb/include/ldb.h
Changeset:
Modified: branches/SAMBA_4_0/source/lib/ldb/common/ldb_msg.c
===
--- branches/SAMBA_4_0/source/lib/ldb/common/ldb_msg.c 2005-02-12 03:10:50 UTC
(rev 5356)
+++ branches/SAMBA_4_0/source/lib/ldb/common/ldb_msg.c 2005-02-12 11:30:33 UTC
(rev 5357)
@@ -213,6 +213,28 @@
}
/*
+ add a printf formatted element to a message
+*/
+int ldb_msg_add_fmt(struct ldb_context *ldb, struct ldb_message *msg,
+ const char *attr_name, const char *fmt, ...)
+{
+ struct ldb_val val;
+ va_list ap;
+ char *str;
+
+ va_start(ap, fmt);
+ str = talloc_vasprintf(msg, fmt, ap);
+ va_end(ap);
+
+ if (str == NULL) return -1;
+
+ val.data = str;
+ val.length = strlen(str);
+
+ return ldb_msg_add_value(ldb, msg, attr_name, val);
+}
+
+/*
compare two ldb_message_element structures
assumes case senistive comparison
*/
Modified: branches/SAMBA_4_0/source/lib/ldb/include/ldb.h
===
--- branches/SAMBA_4_0/source/lib/ldb/include/ldb.h 2005-02-12 03:10:50 UTC
(rev 5356)
+++ branches/SAMBA_4_0/source/lib/ldb/include/ldb.h 2005-02-12 11:30:33 UTC
(rev 5357)
@@ -259,6 +259,8 @@
const struct ldb_val *val);
int ldb_msg_add_string(struct ldb_context *ldb, struct ldb_message *msg,
const char *attr_name, const char *str);
+int ldb_msg_add_fmt(struct ldb_context *ldb, struct ldb_message *msg,
+ const char *attr_name, const char *fmt, ...)
PRINTF_ATTRIBUTE(4,5);
/* compare two message elements - return 0 on match */
int ldb_msg_element_compare(struct ldb_message_element *el1,
svn commit: samba r5358 - in branches/SAMBA_4_0/source: include lib libcli/nbt librpc/idl nbt_server
Author: tridge Date: 2005-02-12 11:33:42 + (Sat, 12 Feb 2005) New Revision: 5358 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5358 Log: - added initial WINS server code. It passes most of the NBT-WINS test, but doesn't yet do secure server WACK responses - added a ldap_string_to_time() function, for converting a LDAP formatted time to a time_t Added: branches/SAMBA_4_0/source/nbt_server/winsdb.c branches/SAMBA_4_0/source/nbt_server/winsdb.h Modified: branches/SAMBA_4_0/source/include/structs.h branches/SAMBA_4_0/source/lib/time.c branches/SAMBA_4_0/source/libcli/nbt/nbtname.c branches/SAMBA_4_0/source/librpc/idl/nbt.idl branches/SAMBA_4_0/source/nbt_server/config.mk branches/SAMBA_4_0/source/nbt_server/defense.c branches/SAMBA_4_0/source/nbt_server/nbt_server.h branches/SAMBA_4_0/source/nbt_server/packet.c branches/SAMBA_4_0/source/nbt_server/winsserver.c Changeset: Sorry, the patch is too large (638 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5358
svn commit: samba r5359 - in branches/SAMBA_3_0/source: param printing
Author: jerry
Date: 2005-02-12 14:41:00 + (Sat, 12 Feb 2005)
New Revision: 5359
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5359
Log:
BUG 2333: use the lpq command to pass in the correct printer name for
cups_queue_get(). See comments in code for details
Modified:
branches/SAMBA_3_0/source/param/loadparm.c
branches/SAMBA_3_0/source/printing/print_cups.c
Changeset:
Modified: branches/SAMBA_3_0/source/param/loadparm.c
===
--- branches/SAMBA_3_0/source/param/loadparm.c 2005-02-12 11:33:42 UTC (rev
5358)
+++ branches/SAMBA_3_0/source/param/loadparm.c 2005-02-12 14:41:00 UTC (rev
5359)
@@ -1226,7 +1226,9 @@
case PRINT_CUPS:
#ifdef HAVE_CUPS
- string_set(pService-szLpqcommand, );
+ /* set the lpq command to contain the destination
printer
+ name only. This is used by cups_queue_get() */
+ string_set(pService-szLpqcommand, %p);
string_set(pService-szLprmcommand, );
string_set(pService-szPrintcommand, );
string_set(pService-szLppausecommand, );
Modified: branches/SAMBA_3_0/source/printing/print_cups.c
===
--- branches/SAMBA_3_0/source/printing/print_cups.c 2005-02-12 11:33:42 UTC
(rev 5358)
+++ branches/SAMBA_3_0/source/printing/print_cups.c 2005-02-12 14:41:00 UTC
(rev 5359)
@@ -670,12 +670,13 @@
* 'cups_queue_get()' - Get all the jobs in the print queue.
*/
-static int cups_queue_get(const char *printer_name,
+static int cups_queue_get(const char *sharename,
enum printing_types printing_type,
char *lpq_command,
print_queue_struct **q,
print_status_struct *status)
{
+ fstring printername;
http_t *http = NULL; /* HTTP connection to server */
ipp_t *request = NULL,/* IPP Request */
*response = NULL; /* IPP Response */
@@ -711,8 +712,16 @@
*q = NULL;
- DEBUG(5,(cups_queue_get(%s, %p, %p)\n, printer_name, q, status));
+ /* HACK ALERT!!! The porblem with support the 'printer name'
+ option is that we key the tdb off the sharename. So we will
+ overload the lpq_command string to pass in the printername
+ (which is basically what we do for non-cups printers ... using
+ the lpq_command to get the queue listing). */
+ fstrcpy( printername, lpq_command );
+
+ DEBUG(5,(cups_queue_get(%s, %p, %p)\n, printername, q, status));
+
/*
* Make sure we don't ask for passwords...
*/
@@ -733,7 +742,7 @@
* Generate the printer URI...
*/
- slprintf(uri, sizeof(uri) - 1, ipp://localhost/printers/%s;,
printer_name);
+ slprintf(uri, sizeof(uri) - 1, ipp://localhost/printers/%s;,
printername);
/*
* Build an IPP_GET_JOBS request, which requires the following
@@ -936,14 +945,14 @@
*/
if ((response = cupsDoRequest(http, request, /)) == NULL) {
- DEBUG(0,(Unable to get printer status for %s - %s\n,
printer_name,
+ DEBUG(0,(Unable to get printer status for %s - %s\n,
printername,
ippErrorString(cupsLastError(;
*q = queue;
goto out;
}
if (response-request.status.status_code = IPP_OK_CONFLICT) {
- DEBUG(0,(Unable to get printer status for %s - %s\n,
printer_name,
+ DEBUG(0,(Unable to get printer status for %s - %s\n,
printername,
ippErrorString(response-request.status.status_code)));
*q = queue;
goto out;
svn commit: samba r5360 - in branches/SAMBA_4_0/source: build/pidl librpc/ndr
Author: jelmer
Date: 2005-02-12 19:28:23 + (Sat, 12 Feb 2005)
New Revision: 5360
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5360
Log:
Remove a couple of unused functions.
Modified:
branches/SAMBA_4_0/source/build/pidl/ndr.pm
branches/SAMBA_4_0/source/build/pidl/util.pm
branches/SAMBA_4_0/source/librpc/ndr/libndr.h
branches/SAMBA_4_0/source/librpc/ndr/ndr.c
Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/ndr.pm
===
--- branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-12 14:41:00 UTC (rev
5359)
+++ branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-12 19:28:23 UTC (rev
5360)
@@ -551,7 +551,7 @@
if (util::is_fixed_array($e)) {
ParseElementPrintBuffer($e, $var_prefix);
- } elsif (util::has_direct_buffers($e)) {
+ } elsif ($e-{POINTERS} || util::array_size($e)) {
pidl \tndr_print_ptr(ndr, \$e-{NAME}\,
$var_prefix$e-{NAME});\n;
pidl \tndr-depth++;\n;
ParseElementPrintBuffer($e, $var_prefix);
Modified: branches/SAMBA_4_0/source/build/pidl/util.pm
===
--- branches/SAMBA_4_0/source/build/pidl/util.pm2005-02-12 14:41:00 UTC
(rev 5359)
+++ branches/SAMBA_4_0/source/build/pidl/util.pm2005-02-12 19:28:23 UTC
(rev 5360)
@@ -306,16 +306,6 @@
return undef;
}
-# determine if an element has a direct buffers component
-sub has_direct_buffers($)
-{
- my $e = shift;
- if ($e-{POINTERS} || array_size($e)) {
- return 1;
- }
- return 0;
-}
-
# return 1 if the string is a C constant
sub is_constant($)
{
Modified: branches/SAMBA_4_0/source/librpc/ndr/libndr.h
===
--- branches/SAMBA_4_0/source/librpc/ndr/libndr.h 2005-02-12 14:41:00 UTC
(rev 5359)
+++ branches/SAMBA_4_0/source/librpc/ndr/libndr.h 2005-02-12 19:28:23 UTC
(rev 5360)
@@ -234,9 +234,6 @@
#define NDR_PUSH_ALLOC(ndr, s) NDR_PUSH_ALLOC_SIZE(ndr, s, sizeof(*(s)))
/* these are used when generic fn pointers are needed for ndr push/pull fns */
-typedef NTSTATUS (*ndr_push_fn_t)(struct ndr_push *, void *);
-typedef NTSTATUS (*ndr_pull_fn_t)(struct ndr_pull *, void *);
-
typedef NTSTATUS (*ndr_push_flags_fn_t)(struct ndr_push *, int ndr_flags, void
*);
typedef NTSTATUS (*ndr_push_const_fn_t)(struct ndr_push *, int ndr_flags,
const void *);
typedef NTSTATUS (*ndr_pull_flags_fn_t)(struct ndr_pull *, int ndr_flags, void
*);
Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr.c
===
--- branches/SAMBA_4_0/source/librpc/ndr/ndr.c 2005-02-12 14:41:00 UTC (rev
5359)
+++ branches/SAMBA_4_0/source/librpc/ndr/ndr.c 2005-02-12 19:28:23 UTC (rev
5360)
@@ -469,22 +469,6 @@
handle subcontext buffers, which in midl land are user-marshalled, but
we use magic in pidl to make them easier to cope with
*/
-NTSTATUS ndr_pull_subcontext_fn(struct ndr_pull *ndr, size_t sub_size,
- void *base, ndr_pull_fn_t fn)
-{
- struct ndr_pull *ndr2;
- NDR_ALLOC(ndr, ndr2);
- NDR_CHECK(ndr_pull_subcontext_header(ndr, sub_size, ndr2));
- NDR_CHECK(fn(ndr2, base));
- if (sub_size) {
- NDR_CHECK(ndr_pull_advance(ndr, ndr2-data_size));
- } else {
- NDR_CHECK(ndr_pull_advance(ndr, ndr2-offset));
- }
- return NT_STATUS_OK;
-}
-
-
NTSTATUS ndr_pull_subcontext_flags_fn(struct ndr_pull *ndr, size_t sub_size,
void *base, ndr_pull_flags_fn_t fn)
{
@@ -547,24 +531,6 @@
handle subcontext buffers, which in midl land are user-marshalled, but
we use magic in pidl to make them easier to cope with
*/
-NTSTATUS ndr_push_subcontext_fn(struct ndr_push *ndr, size_t sub_size,
- void *base, ndr_push_fn_t fn)
-{
- struct ndr_push *ndr2;
-
- ndr2 = ndr_push_init_ctx(ndr);
- if (!ndr2) return NT_STATUS_NO_MEMORY;
-
- ndr2-flags = ndr-flags;
- NDR_CHECK(fn(ndr2, base));
- NDR_CHECK(ndr_push_subcontext_header(ndr, sub_size, ndr2));
- NDR_CHECK(ndr_push_bytes(ndr, ndr2-data, ndr2-offset));
- return NT_STATUS_OK;
-}
-
-/*
- handle subcontext buffers for function that take a flags arg
-*/
NTSTATUS ndr_push_subcontext_flags_fn(struct ndr_push *ndr, size_t sub_size,
void *base, ndr_push_flags_fn_t fn)
{
svn commit: samba r5362 - in branches/SAMBA_4_0/source: build/pidl librpc/idl
Author: jelmer Date: 2005-02-12 23:03:26 + (Sat, 12 Feb 2005) New Revision: 5362 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5362 Log: Add pointer_default() support to pidl. pointer_default() is assumed to be ptr if not specified (just like midl). The validator will warn when ptr is used at the moment, because pidl only supports unique, ref and relative at the moment. Modified: branches/SAMBA_4_0/source/build/pidl/ndr.pm branches/SAMBA_4_0/source/build/pidl/validator.pm branches/SAMBA_4_0/source/librpc/idl/audiosrv.idl branches/SAMBA_4_0/source/librpc/idl/browser.idl branches/SAMBA_4_0/source/librpc/idl/dbgidl.idl branches/SAMBA_4_0/source/librpc/idl/dcerpc.idl branches/SAMBA_4_0/source/librpc/idl/dcom.idl branches/SAMBA_4_0/source/librpc/idl/drsblobs.idl branches/SAMBA_4_0/source/librpc/idl/dsbackup.idl branches/SAMBA_4_0/source/librpc/idl/echo.idl branches/SAMBA_4_0/source/librpc/idl/efs.idl branches/SAMBA_4_0/source/librpc/idl/exchange.idl branches/SAMBA_4_0/source/librpc/idl/keysvc.idl branches/SAMBA_4_0/source/librpc/idl/mgmt.idl branches/SAMBA_4_0/source/librpc/idl/misc.idl branches/SAMBA_4_0/source/librpc/idl/msgsvc.idl branches/SAMBA_4_0/source/librpc/idl/policyagent.idl branches/SAMBA_4_0/source/librpc/idl/rot.idl branches/SAMBA_4_0/source/librpc/idl/scerpc.idl branches/SAMBA_4_0/source/librpc/idl/security.idl branches/SAMBA_4_0/source/librpc/idl/trkwks.idl branches/SAMBA_4_0/source/librpc/idl/w32time.idl branches/SAMBA_4_0/source/librpc/idl/xattr.idl Changeset: Sorry, the patch is too large (640 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5362
Build status as of Sun Feb 13 00:00:02 2005
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2005-02-12 00:00:38.0 + +++ /home/build/master/cache/broken_results.txt 2005-02-13 00:00:07.0 + @@ -1,22 +1,23 @@ -Build status as of Sat Feb 12 00:00:02 2005 +Build status as of Sun Feb 13 00:00:02 2005 Build counts: Tree Total Broken Panic -ccache 36 4 0 -distcc 37 4 0 +ccache 37 5 0 +distcc 37 2 0 ppp 22 4 0 -rsync37 3 0 +rsync37 2 0 samba1 1 1 samba-docs 0 0 0 -samba4 38 8 0 -samba_3_036 33 1 +samba4 39 8 0 +samba_3_036 34 1 Currently broken builds: Host Tree Compiler Status +aix1 samba_3_0gcc 127/?/?/? mungerasamba_3_0gccok/ok/ok/ 6/PANIC fusberta samba4 gccok/ 2/?/? fusberta samba_3_0gccok/ok/ok/ 4 -yurok samba_3_0gcc 127/?/?/? +yurok samba_3_0gccok/ok/ok/ 4 samba-s390 samba_3_0gccok/ok/ok/ 4 quango ccache gcc 137/?/?/? quango distcc gcc 137/?/?/? @@ -24,25 +25,22 @@ quango samba_3_0gccok/ok/ok/ 4 superego samba_3_0gccok/ok/ok/ 4 cl012 samba_3_0gccok/ok/ok/ 4 +berks samba_3_0gccok/ok/ok/ 4 gc8samba4 gccok/ 1/?/? gc8samba_3_0gccok/ok/ok/ 4 -aretnapdistcc gcc 127/?/?/? aretnapsamba_3_0gccok/ok/ok/ 4 aretnapccache iccok/ok/ok/ 1 aretnapsamba4 iccok/ 1/?/? aretnapsamba_3_0iccok/ok/ok/ 4 gc4samba_3_0gccok/ok/ok/ 4 -sbfrsyncgccok/ 1/?/? -sbfsamba_3_0gccok/ 1/?/? smartserv1 samba_3_0gccok/ok/ok/ 4 smartserv1 samba_3_0gcc-4.0ok/ok/ok/ 4 wetlizard samba_3_0gccok/ok/ok/ 4 -tardis distcc gccok/ 2/?/? -tardis samba_3_0gccok/ok/ok/ 5 +tardis samba_3_0gccok/ok/ok/ 4 us4samba_3_0cc ok/ 1/?/? us4samba_3_0gccok/ 1/?/? flock samba4 gccok/ 1/?/? -flock samba_3_0gcc 127/?/?/? +flock samba_3_0gccok/ok/ok/ 4 homer samba_3_0gccok/ok/ok/ 4 opisol10 ccache gccok/ok/ok/ 1 opisol10 ppp gccok/ 1/?/? @@ -52,7 +50,7 @@ gc20 samba_3_0gccok/ok/ok/ 4 sun1 samba4 cc ok/ 2/?/? sun1 samba_3_0cc ok/ 2/?/? -sun1 samba_3_0gccok/ok/ok/ 5 +sun1 samba_3_0gccok/ok/ok/ 4 Isis ccache cc 77/?/?/? Isis distcc cc 77/?/?/? Isis rsynccc 77/?/?/? @@ -61,6 +59,7 @@ Isis ppp gccok/ 2/?/? Isis samba_3_0gccok/ok/ok/ 4 fire1 samba_3_0gccok/ok/ok/ 4 +m30ccache gccok/ok/ok/ 2 m30rsyncgccok/ok/ok/ 2 m30samba4 gccok/ 2/?/? m30samba_3_0gccok/ok/ok/ 1
svn commit: samba r5363 - in branches/SAMBA_4_0/source: build/pidl librpc/ndr
Author: jelmer
Date: 2005-02-13 00:07:17 + (Sun, 13 Feb 2005)
New Revision: 5363
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5363
Log:
- ndr_%_ptr - ndr_%_unique_ptr
- ndr_%_relative% - ndr_%_relative_ptr%
- Change pointer_default() default to unique
(DCE uses ptr as default, MIDL doesn't follow the standard and uses
unique)
Modified:
branches/SAMBA_4_0/source/build/pidl/ndr.pm
branches/SAMBA_4_0/source/librpc/ndr/ndr.c
branches/SAMBA_4_0/source/librpc/ndr/ndr_basic.c
Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/ndr.pm
===
--- branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-12 23:03:26 UTC (rev
5362)
+++ branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-13 00:07:17 UTC (rev
5363)
@@ -535,11 +535,11 @@
}
if (util::has_property($e, relative)) {
- pidl \tNDR_CHECK(ndr_push_relative1(ndr,
$var_prefix$e-{NAME}));\n;
+ pidl \tNDR_CHECK(ndr_push_relative_ptr1(ndr,
$var_prefix$e-{NAME}));\n;
} elsif (util::is_inline_array($e)) {
ParseArrayPush($e, r-, NDR_SCALARS);
} elsif (need_wire_pointer($e)) {
- pidl \tNDR_CHECK(ndr_push_ptr(ndr, $var_prefix$e-{NAME}));\n;
+ pidl \tNDR_CHECK(ndr_push_unique_ptr(ndr,
$var_prefix$e-{NAME}));\n;
} elsif (need_alloc($e)) {
# no scalar component
} elsif (my $switch = util::has_property($e, switch_is)) {
@@ -701,11 +701,11 @@
if (util::is_inline_array($e)) {
ParseArrayPull($e, r-, NDR_SCALARS);
} elsif (need_wire_pointer($e)) {
- pidl \tNDR_CHECK(ndr_pull_ptr(ndr, _ptr_$e-{NAME}));\n;
+ pidl \tNDR_CHECK(ndr_pull_unique_ptr(ndr,
_ptr_$e-{NAME}));\n;
pidl \tif (_ptr_$e-{NAME}) {\n;
pidl \t\tNDR_ALLOC(ndr, $var_prefix$e-{NAME});\n;
if (util::has_property($e, relative)) {
- pidl \t\tNDR_CHECK(ndr_pull_relative1(ndr,
$var_prefix$e-{NAME}, _ptr_$e-{NAME}));\n;
+ pidl \t\tNDR_CHECK(ndr_pull_relative_ptr1(ndr,
$var_prefix$e-{NAME}, _ptr_$e-{NAME}));\n;
}
pidl \t} else {\n;
pidl \t\t$var_prefix$e-{NAME} = NULL;\n;
@@ -747,7 +747,7 @@
if (need_wire_pointer($e)) {
pidl \tif ($var_prefix$e-{NAME}) {\n;
if (util::has_property($e, relative)) {
- pidl \t\tNDR_CHECK(ndr_push_relative2(ndr,
$var_prefix$e-{NAME}));\n;
+ pidl \t\tNDR_CHECK(ndr_push_relative_ptr2(ndr,
$var_prefix$e-{NAME}));\n;
}
}
@@ -825,7 +825,7 @@
if (util::has_property($e, relative)) {
pidl \t\tstruct ndr_pull_save _relative_save;\n;
pidl \t\tndr_pull_save(ndr, _relative_save);\n;
- pidl \t\tNDR_CHECK(ndr_pull_relative2(ndr,
$var_prefix$e-{NAME}));\n;
+ pidl \t\tNDR_CHECK(ndr_pull_relative_ptr2(ndr,
$var_prefix$e-{NAME}));\n;
}
}
@@ -1585,7 +1585,7 @@
if (util::array_size($e)) {
if (need_wire_pointer($e)) {
- pidl \tNDR_CHECK(ndr_push_ptr(ndr,
r-$inout.$e-{NAME}));\n;
+ pidl \tNDR_CHECK(ndr_push_unique_ptr(ndr,
r-$inout.$e-{NAME}));\n;
pidl \tif (r-$inout.$e-{NAME}) {\n;
ParseArrayPush($e, r-$inout.,
NDR_SCALARS|NDR_BUFFERS);
pidl \t}\n;
@@ -1644,7 +1644,7 @@
if (util::array_size($e)) {
if (need_wire_pointer($e)) {
- pidl \tNDR_CHECK(ndr_pull_ptr(ndr,
_ptr_$e-{NAME}));\n;
+ pidl \tNDR_CHECK(ndr_pull_unique_ptr(ndr,
_ptr_$e-{NAME}));\n;
pidl \tr-$inout.$e-{NAME} = NULL;\n;
pidl \tif (_ptr_$e-{NAME}) {\n;
} elsif ($inout eq out util::has_property($e, ref)) {
@@ -1936,7 +1936,9 @@
my $x = shift;
if (not util::has_property($x, pointer_default)) {
- $x-{PROPERTIES}-{pointer_default} = ptr;
+ # MIDL defaults to ptr in DCE compatible mode (/osf)
+ # and unique in Microsoft Extensions mode (default)
+ $x-{PROPERTIES}-{pointer_default} = unique;
}
foreach my $d (@{$x-{DATA}}) {
@@ -1947,7 +1949,9 @@
}
}
if ($d-{TYPE} eq FUNCTION) {
- CheckPointerTypes($d,
$x-{PROPERTIES}-{pointer_default});
+ CheckPointerTypes($d,
+ $x-{PROPERTIES}-{pointer_default} # MIDL
defaults to ref
+ );
}
}
}
Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr.c
svn commit: samba r5364 - in branches/SAMBA_4_0/source: libnet librpc/idl rpc_server/samr torture/rpc
Author: tpot Date: 2005-02-13 00:26:43 + (Sun, 13 Feb 2005) New Revision: 5364 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5364 Log: Rename string fields called 'domain' and 'name' to be 'domain_name'. Modified: branches/SAMBA_4_0/source/libnet/libnet_join.c branches/SAMBA_4_0/source/libnet/libnet_passwd.c branches/SAMBA_4_0/source/librpc/idl/samr.idl branches/SAMBA_4_0/source/rpc_server/samr/dcesrv_samr.c branches/SAMBA_4_0/source/torture/rpc/samr.c branches/SAMBA_4_0/source/torture/rpc/samsync.c branches/SAMBA_4_0/source/torture/rpc/schannel.c branches/SAMBA_4_0/source/torture/rpc/testjoin.c branches/SAMBA_4_0/source/torture/rpc/xplogin.c Changeset: Sorry, the patch is too large (252 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5364
svn commit: samba-docs r359 - in branches/SAMBA_4/manpages: .
Author: jelmer Date: 2005-02-13 00:46:21 + (Sun, 13 Feb 2005) New Revision: 359 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=359 Log: Update list of supported MIDL attributes. Modified: branches/SAMBA_4/manpages/pidl.1.xml Changeset: Modified: branches/SAMBA_4/manpages/pidl.1.xml === --- branches/SAMBA_4/manpages/pidl.1.xml2005-02-10 20:27:44 UTC (rev 358) +++ branches/SAMBA_4/manpages/pidl.1.xml2005-02-13 00:46:21 UTC (rev 359) @@ -200,7 +200,7 @@ /programlisting para - Let's look at the mutliple ways you can encode an array. + Let's look at the multiple ways you can encode an array. /para refsect2 @@ -358,7 +358,7 @@ titleSupported MIDL-compatible properties (attributes is the MIDL term)/title para -in, out, ref, length_is, switch_is, size_is, uuid, case, default, string, unique, endpoint, helpstring, object, call_as, local. +in, out, ref, length_is, switch_is, size_is, uuid, case, default, string, unique, ptr, pointer_default, v1_enum, object, helpstring, range, local, call_as. /para /refsect2 @@ -449,7 +449,7 @@ refsect2 titleUnsupported MIDL properties/title -paraaggregatable, appobject, async_uuid, bindable, control, cpp_quote, defaultbind, defaultcollelem, defaultvalue, defaultvtable, dispinterface, displaybind, dual, entry, first_is, helpcontext, helpfile, helpstringcontext, helpstringdll, hidden, idl_module, idl_quote, id, iid_is, immediatebind, importlib, import, include, includelib, last_is, lcid, licensed, max_is, module, ms_union, no_injected_text, nonbrowsable, noncreatable, nonextensible, odl, oleautomation, optional, pointer_default, pragma, progid, propget, propputref, propput, ptr, range, readonly, requestedit, restricted, retval, source, switch_type, transmit_as, uidefault, usesgetlasterror, v1_enum, vararg, vi_progid, wire_marshal. /para +paraaggregatable, appobject, async_uuid, bindable, coclass, control, cpp_quote, defaultbind, defaultcollelem, defaultvalue, defaultvtable, dispinterface, displaybind, dual, entry, first_is, helpcontext, helpfile, helpstringcontext, helpstringdll, hidden, idl_module, idl_quote, id, iid_is, immediatebind, importlib, import, include, includelib, last_is, lcid, licensed, max_is, module, ms_union, no_injected_text, nonbrowsable, noncreatable, nonextensible, odl, oleautomation, optional, pragma, progid, propget, propputref, propput, readonly, requestedit, restricted, retval, source, switch_type, transmit_as, uidefault, usesgetlasterror, vararg, vi_progid, wire_marshal. /para /refsect2
svn commit: samba r5365 - in branches/SAMBA_4_0/source/libnet: .
Author: mimir
Date: 2005-02-13 00:48:21 + (Sun, 13 Feb 2005)
New Revision: 5365
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5365
Log:
Initial code for adding user accounts via libnet call.
rafal
Added:
branches/SAMBA_4_0/source/libnet/libnet_user.c
branches/SAMBA_4_0/source/libnet/libnet_user.h
Modified:
branches/SAMBA_4_0/source/libnet/libnet.h
Changeset:
Modified: branches/SAMBA_4_0/source/libnet/libnet.h
===
--- branches/SAMBA_4_0/source/libnet/libnet.h 2005-02-13 00:26:43 UTC (rev
5364)
+++ branches/SAMBA_4_0/source/libnet/libnet.h 2005-02-13 00:48:21 UTC (rev
5365)
@@ -36,3 +36,4 @@
#include libnet/libnet_time.h
#include libnet/libnet_rpc.h
#include libnet/libnet_join.h
+#include libnet/libnet_user.h
Added: branches/SAMBA_4_0/source/libnet/libnet_user.c
===
--- branches/SAMBA_4_0/source/libnet/libnet_user.c 2005-02-13 00:26:43 UTC
(rev 5364)
+++ branches/SAMBA_4_0/source/libnet/libnet_user.c 2005-02-13 00:48:21 UTC
(rev 5365)
@@ -0,0 +1,87 @@
+/*
+ Unix SMB/CIFS implementation.
+
+ Copyright (C) Rafal Szczesniak [EMAIL PROTECTED] 2005
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 2 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program; if not, write to the Free Software
+ Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+*/
+
+
+#include includes.h
+#include libnet/libnet.h
+#include librpc/gen_ndr/ndr_samr.h
+
+
+static NTSTATUS libnet_CreateUser_generic(struct libnet_context *ctx,
TALLOC_CTX *mem_ctx, union libnet_CreateUser *r)
+{
+ NTSTATUS status;
+ union libnet_CreateUser r2;
+
+ r2.samr.level = LIBNET_CREATE_USER_SAMR;
+ r2.samr.in.user_name = r-generic.in.user_name;
+ r2.samr.in.domain_name= r-generic.in.domain_name;
+
+ status = libnet_CreateUser(ctx, mem_ctx, r2);
+
+ r-generic.out.error_string = r2.samr.out.error_string;
+
+ return status;
+}
+
+
+static NTSTATUS libnet_CreateUser_samr(struct libnet_context *ctx, TALLOC_CTX
*mem_ctx, union libnet_CreateUser *r)
+{
+ NTSTATUS status;
+ union libnet_rpc_connect cn;
+ union libnet_find_pdc fp;
+
+ /* find domain pdc */
+ fp.generic.level = LIBNET_FIND_PDC_GENERIC;
+ fp.generic.in.domain_name= r-samr.in.domain_name;
+
+ status = libnet_find_pdc(ctx, mem_ctx, fp);
+ if (!NT_STATUS_IS_OK(status)) return status;
+
+ /* connect rpc service of remote server */
+ cn.standard.level = LIBNET_RPC_CONNECT_STANDARD;
+ cn.standard.in.server_name = fp.generic.out.pdc_name;
+ cn.standard.in.dcerpc_iface_name = DCERPC_SAMR_NAME;
+ cn.standard.in.dcerpc_iface_uuid = DCERPC_SAMR_UUID;
+ cn.standard.in.dcerpc_iface_version= DCERPC_SAMR_VERSION;
+
+ status = libnet_rpc_connect(ctx, mem_ctx, cn);
+ if (!NT_STATUS_IS_OK(status)) {
+ r-samr.out.error_string = talloc_asprintf(mem_ctx,
+ Connection to SAMR
pipe domain '%s' PDC failed: %s\n,
+
r-samr.in.domain_name, nt_errstr(status));
+ return status;
+ }
+
+ /* create user via samr call (to be continued) */
+ return status;
+}
+
+
+NTSTATUS libnet_CreateUser(struct libnet_context *ctx, TALLOC_CTX *mem_ctx,
union libnet_CreateUser *r)
+{
+ switch (r-generic.level) {
+ case LIBNET_CREATE_USER_GENERIC:
+ return libnet_CreateUser_generic(ctx, mem_ctx, r);
+ case LIBNET_CREATE_USER_SAMR:
+ return libnet_CreateUser_samr(ctx, mem_ctx, r);
+ }
+
+ return NT_STATUS_INVALID_LEVEL;
+}
Added: branches/SAMBA_4_0/source/libnet/libnet_user.h
===
--- branches/SAMBA_4_0/source/libnet/libnet_user.h 2005-02-13 00:26:43 UTC
(rev 5364)
+++ branches/SAMBA_4_0/source/libnet/libnet_user.h 2005-02-13 00:48:21 UTC
(rev 5365)
@@ -0,0 +1,47 @@
+/*
+ Unix SMB/CIFS implementation.
+
+ Copyright (C) Rafal Szczesniak [EMAIL PROTECTED] 2005
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public
svn commit: samba r5366 - in branches/SAMBA_4_0/source/libnet: .
Author: mimir Date: 2005-02-13 00:50:38 + (Sun, 13 Feb 2005) New Revision: 5366 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5366 Log: added initial code for adding user accounts to libnet makefile. It doesn't do anything useful yet, but at least doesn't break the build. rafal Modified: branches/SAMBA_4_0/source/libnet/config.mk Changeset: Modified: branches/SAMBA_4_0/source/libnet/config.mk === --- branches/SAMBA_4_0/source/libnet/config.mk 2005-02-13 00:48:21 UTC (rev 5365) +++ branches/SAMBA_4_0/source/libnet/config.mk 2005-02-13 00:50:38 UTC (rev 5366) @@ -7,7 +7,8 @@ libnet/libnet_passwd.o \ libnet/libnet_time.o \ libnet/libnet_rpc.o \ - libnet/libnet_join.o + libnet/libnet_join.o \ + libnet/libnet_user.o REQUIRED_SUBSYSTEMS = RPC_NDR_SAMR RPC_NDR_SRVSVC # End SUBSYSTEM LIBNET #
svn commit: samba r5367 - in branches/SAMBA_4_0: .
Author: mimir Date: 2005-02-13 00:52:45 + (Sun, 13 Feb 2005) New Revision: 5367 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5367 Log: Minor typo fixes. rafal Modified: branches/SAMBA_4_0/prog_guide.txt Changeset: Modified: branches/SAMBA_4_0/prog_guide.txt === --- branches/SAMBA_4_0/prog_guide.txt 2005-02-13 00:50:38 UTC (rev 5366) +++ branches/SAMBA_4_0/prog_guide.txt 2005-02-13 00:52:45 UTC (rev 5367) @@ -232,7 +232,7 @@ are extremely important differences in the approach that are worth pointing out. -In the Samba3 msrpc code we used explicit parse strucrures for all +In the Samba3 msrpc code we used explicit parse structures for all msrpc functions. The problem is that we didn't just put all of the real variables in these structures, we also put in all the artifacts as well. A good example is the security descriptor strucrure that @@ -263,7 +263,7 @@ *NOT* be in the interface structure. In Samba3 there were unwritten rules about which variables in a -strucrure a high level caller has to fill in and which ones are filled +structure a high level caller has to fill in and which ones are filled in by the marshalling code. In Samba4 those rules are gone, because the redundent artifact variables are gone. The high level caller just sets up the real variables and the marshalling code worries about
svn commit: samba r5368 - in branches/SAMBA_4_0/source/scripting/swig: .
Author: tpot Date: 2005-02-13 00:58:28 + (Sun, 13 Feb 2005) New Revision: 5368 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5368 Log: Fix ups for domain_name field name change. Implement GetDomPwInfo(), CreateUser2(), RemoveMemberFromForeignDomain(), DeleteUser(). Modified: branches/SAMBA_4_0/source/scripting/swig/samr.py Changeset: Modified: branches/SAMBA_4_0/source/scripting/swig/samr.py === --- branches/SAMBA_4_0/source/scripting/swig/samr.py2005-02-13 00:52:45 UTC (rev 5367) +++ branches/SAMBA_4_0/source/scripting/swig/samr.py2005-02-13 00:58:28 UTC (rev 5368) @@ -93,6 +93,7 @@ Wrap up a RPC call and throw an exception is an error was returned. result = fn(pipe, args); + if result 0xc000: raise dcerpc.NTSTATUS(result, dcerpc.nt_errstr(result)); @@ -146,7 +147,7 @@ r = dcerpc.samr_EnumDomains() r.data_in.connect_handle = self.handle -r.data_in.resume_handle = 1 +r.data_in.resume_handle = 0 r.data_in.buf_size = -1 domains = [] @@ -169,8 +170,8 @@ r = dcerpc.samr_LookupDomain() r.data_in.connect_handle = self.handle -r.data_in.domain = dcerpc.samr_String() -r.data_in.domain.string = domain_name +r.data_in.domain_name = dcerpc.samr_String() +r.data_in.domain_name.string = domain_name call_fn(dcerpc.dcerpc_samr_LookupDomain, self.pipe, r) @@ -194,7 +195,17 @@ call_fn(dcerpc.dcerpc_samr_Shutdown, self.pipe, r) +def GetDomPwInfo(self, system_name): +r = dcerpc.samr_GetDomPwInfo() +r.data_in.domain_name = dcerpc.samr_String() +r.data_in.domain_name.string = system_name + +call_fn(dcerpc.dcerpc_samr_GetDomPwInfo, self.pipe, r) + +return r.data_out.info + + class DomainHandle(SamrHandle): def QueryDomainInfo(self, level = 2): @@ -286,7 +297,23 @@ return (r.data_out.user_handle, dcerpc.uint32_array_getitem(r.data_out.rid, 0)) - + +def CreateUser2(self, account_name, acct_flags = 0x0010, +access_mask = 0x0200): + +r = dcerpc.samr_CreateUser2() +r.data_in.domain_handle = self.handle +r.data_in.account_name = dcerpc.samr_String() +r.data_in.account_name.string = account_name +r.data_in.acct_flags = acct_flags +r.data_in.access_mask = access_mask + +call_fn(dcerpc.dcerpc_samr_CreateUser2, self.pipe, r) + +return (r.data_out.user_handle, +dcerpc.uint32_array_getitem(r.data_out.access_granted, 0), +dcerpc.uint32_array_getitem(r.data_out.rid, 0)) + def OpenUser(self, rid, access_mask = 0x0200): r = dcerpc.samr_OpenUser() @@ -329,9 +356,23 @@ return sid_to_string(r.data_out.sid) +def RemoveMemberFromForeignDomain(self, sid): +r = dcerpc.samr_RemoveMemberFromForeignDomain() +r.data_in.domain_handle = self.handle +r.data_in.sid = sid + +call_fn(dcerpc.dcerpc_samr_RemoveMemberFromForeignDomain, self.pipe, r) + + class UserHandle(SamrHandle): -pass + +def DeleteUser(self): + +r = dcerpc.samr_DeleteUser() +r.data_in.user_handle = self.handle + +call_fn(dcerpc.dcerpc_samr_DeleteUser, self.pipe, r) class GroupHandle(SamrHandle): @@ -353,6 +394,7 @@ return ConnectHandle(pipe, r.data_out.connect_handle) + def Connect2(pipe, system_name = '', access_mask = 0x0200): Connect to the SAMR pipe. @@ -364,6 +406,7 @@ return ConnectHandle(pipe, r.data_out.connect_handle) + def Connect3(pipe, system_name = '', access_mask = 0x0200): r = dcerpc.samr_Connect3() @@ -375,6 +418,7 @@ return ConnectHandle(pipe, r.data_out.connect_handle) + def Connect4(pipe, system_name = '', access_mask = 0x0200): r = dcerpc.samr_Connect4() @@ -386,6 +430,7 @@ return ConnectHandle(pipe, r.data_out.connect_handle) + def Connect5(pipe, system_name = '', access_mask = 0x0200): r = dcerpc.samr_Connect5() @@ -418,7 +463,6 @@ # AddAliasMember # DeleteAliasMember # GetMembersinAlias -# DeleteUser # QueryUserInfo # SetUserInfo # ChangePasswordUser @@ -433,13 +477,11 @@ # QueryUserInfo2 # QueryDisplayInfo2 # GetDisplayEnumerationIndex2 -# CreateUser2 # QueryDisplayInfo3 # AddMultipleMembersToAlias # RemoveMultipleMembersFromAlias # OemChangePasswordUser2 # ChangePasswordUser2 -# GetDomPwInfo # SetUserInfo2 # SetBootKeyInformation # GetBootKeyInformation
svn commit: samba r5369 - in branches/SAMBA_4_0/source/scripting/swig/torture: .
Author: tpot Date: 2005-02-13 00:59:26 + (Sun, 13 Feb 2005) New Revision: 5369 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5369 Log: Rename torture modules so they don't conflict with files in scripting/swig. Start porting samr torture test to new API. Added: branches/SAMBA_4_0/source/scripting/swig/torture/torture_samr.py Removed: branches/SAMBA_4_0/source/scripting/swig/torture/samr.py Modified: branches/SAMBA_4_0/source/scripting/swig/torture/pytorture Changeset: Sorry, the patch is too large (1654 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5369
