[Samba] Error compiling Samba for MySQL Support
Hi I am trying to recompile samba for MySQL support and get the following error Compiling lib/sysquotas_4A.c lib/sysquotas_4A.c: In function sys_get_vfs_quota: lib/sysquotas_4A.c:102: error: struct dqblk has no member named dqb_curblocks lib/sysquotas_4A.c:119: error: struct dqblk has no member named dqb_curblocks lib/sysquotas_4A.c:165: error: struct dqblk has no member named dqb_curblocks make: *** [lib/sysquotas_4A.o] Error 1 Any suggestions on how to get past it would be greatly appreciated. Cheers Andrew -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: MS SQL server and samba
On Sunday 09 October 2005 03:47, jamrock wrote: Note that most people use Enterprise Manager to backup from SQL to the local drive. They then use backup software to backup from disk to tape or disk to disk. Thanks for the link - gives me an idea of where to start hacking on it. We are actually using another product, Cortex Backupassist, which works like a charm and has no problem backup up to a samba share. But the guys who set up the SQL server before us had Enterprise Manager do the backups to local disc. These backups are now getting to big, and fill up the disc with every round. And for the life of me I cannot get Enterprise Manager to delete that backup schedule. So I thought, well, double backups isn't such a bad idea, I just need to get them diverted somewhere else... Thanks Hans -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.20a and Winbind crashing (bug?)
Hi all. having major issues on all my servers at the moment. All running RHES 3, all with samba 3.0.20a and all have the winbind crashing problem :/ the main 2 are the filestore and email servers, also get the most usage. in fact from my systems point of view, its definatly a most usage = most frequent winbind crashing issue. Any help from others or the dev team gratefully received. NB i have also set a cron to restart smb at 22:00 every night. Many thanks Ross LOG FOLLOWS 0:[2005/10/09 11:40:01, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(255) 74- group enstaff in domain ACADEMIC does not exist 124:[2005/10/09 11:40:02, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(255) 198- group gestaff in domain ACADEMIC does not exist 248:[2005/10/09 11:40:02, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(255) 322- group meweb in domain ACADEMIC does not exist 370:[2005/10/09 11:40:05, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(255) 444- group peweb in domain ACADEMIC does not exist 492:[2005/10/09 11:40:06, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(255) 566- group ssstaff in domain ACADEMIC does not exist 616:[2005/10/09 11:40:07, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(255) 690- group psyweb in domain ACADEMIC does not exist 739:[2005/10/09 11:40:08, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(255) 813- group paweb in domain ACADEMIC does not exist 861:[2005/10/09 11:40:08, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(255) 935- group citizweb in domain ACADEMIC does not exist 986:[2005/10/09 11:40:08, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(255) 1060- group lrcweb in domain ACADEMIC does not exist 1109-[2005/10/09 11:40:11, 0] lib/fault.c:fault_report(36) 1163- === 1229-[2005/10/09 11:40:11, 0] lib/fault.c:fault_report(37) 1283- INTERNAL ERROR: Signal 6 in pid 28787 (3.0.20a) 1333- Please read the Trouble-Shooting section of the Samba3-HOWTO 1396-[2005/10/09 11:40:11, 0] lib/fault.c:fault_report(39) 1450- 1453- From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf 1510-[2005/10/09 11:40:11, 0] lib/fault.c:fault_report(40) 1564- === 1630-[2005/10/09 11:40:11, 0] lib/util.c:smb_panic2(1548) 1683- PANIC: internal error 1707-[2005/10/09 11:40:11, 0] lib/util.c:smb_panic2(1556) 1760- BACKTRACE: 28 stack frames: 1790: #0 /usr/local/samba/sbin/winbindd(smb_panic2+0x1c5) [0xbf5bfa] 1856: #1 /usr/local/samba/sbin/winbindd(smb_panic+0x1d) [0xbf5a30] 1920: #2 /usr/local/samba/sbin/winbindd [0xbe2c4c] 1968: #3 /usr/local/samba/sbin/winbindd [0xbe2ca4] 2016- #4 /lib/tls/libc.so.6 [0x6edeb8] 2052- #5 /lib/tls/libc.so.6(abort+0x1d5) [0x6ef4e5] 2101: #6 /usr/local/samba/sbin/winbindd [0xc17279] 2149: #7 /usr/local/samba/sbin/winbindd [0xc1761f] 2197: #8 /usr/local/samba/sbin/winbindd(cli_krb5_get_ticket+0x1f2) [0xc17972] 2272: #9 /usr/local/samba/sbin/winbindd(spnego_gen_negTokenTarg+0x40) [0xc18579] 2350: #10 /usr/local/samba/sbin/winbindd [0xc9f2e7] 2399: #11 /usr/local/samba/sbin/winbindd [0xc9f5db] 2448: #12 /usr/local/samba/sbin/winbindd(ads_sasl_bind+0x125) [0xc9fbfb] 2518: #13 /usr/local/samba/sbin/winbindd(ads_connect+0x23d) [0xc99dc1] 2586: #14 /usr/local/samba/sbin/winbindd [0xba9ff5] 2635: #15 /usr/local/samba/sbin/winbindd [0xbac0ab] 2684: #16 /usr/local/samba/sbin/winbindd [0xb9cdfd] 2733: #17 /usr/local/samba/sbin/winbindd [0xb9d03c] 2782: #18 /usr/local/samba/sbin/winbindd [0xb9e481] 2831: #19 /usr/local/samba/sbin/winbindd(winbindd_lookup_sid_by_name+0x28) [0xb9ac1e] 2914: #20 /usr/local/samba/sbin/winbindd(winbindd_getgrnam+0x20e) [0xb973f5] 2988: #21 /usr/local/samba/sbin/winbindd [0xb93630] 3037: #22 /usr/local/samba/sbin/winbindd [0xb93d6e] 3086: #23 /usr/local/samba/sbin/winbindd [0xb938df] 3135: #24 /usr/local/samba/sbin/winbindd [0xb942ee] 3184: #25 /usr/local/samba/sbin/winbindd(main+0x52c) [0xb94b15] 3245- #26 /lib/tls/libc.so.6(__libc_start_main+0xda) [0x6db78a] 3306: #27 /usr/local/samba/sbin/winbindd [0xb92ec2] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.20a and Winbind crashing (bug?)
[EMAIL PROTECTED] wrote: All running RHES 3, all with samba 3.0.20a and all have the winbind crashing problem :/ the main 2 are the filestore and email servers, also get the most usage. in fact from my systems point of view, its definatly a most usage = most frequent winbind crashing issue. I have one rhel3 (centos3 actually) server on which winbind has been running since samba-3.0.20a was released. Hasn't crashed once, though I wouldn't categorize it's usage as heavy. -- Rex -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.20a and Winbind crashing (bug?)
This sounds like the same problem i had with winbind in both 3.0.14 abd 3.0.20. Mine freezes, and the daemon appears to be still running using ps and top, but it doesnt respond to queries. It seems like i can trigger this event by running getent passwd. It shows the accounts, but then the daemon dies. I run it on debian sarge, and i have another server with different hardware that also runs debian sarge. The other server does not have the problem (havent tested with getent passwd) but it does not see as many auth. attempts as the freezing server does. I use winbindd for pam_winbind. And some times it goes days without crashing other times it freezes several times an hour. I get this following entries in my auth.log: write to socket failed! internal module error (retval = 3 I circumvented it by running wbinfo -p every minute and restarting winbbind if wbinfo failed. JonB -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Can't see Samba Server from Win2k
I've read other posts on this, but can't figure out what I'm doing wrong.
I have Suse 8.0, Samba 2.2.3a, and Win2k.
Win2k Setup:
workgroup = HOME_NET
Host Name = Copernicus
IP : 192.168.0.7
Subnet : 255.255.255.0
Def Gateway: 192.168.0.1
smb.conf (comments removed):
===
[global]
workgroup = HOME_NET
netbios name = gallileo
encrypt passwords = yes
security = share
wins support = yes
guest only = yes
username map = /etc/samba/smbusers
interfaces = 192.168.0.7/255.255.255.0
character set = ISO8859-15
client code page = 850
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
[homes]
comment = Home Directories
read only = No
browseable = No
[share1]
path = /home/jimmy
read only = Yes
browseable = yes
guest ok = Yes
public = yes
==
I set up lmhosts as follows:
127.0.0.1 localhost
192.168.0.4 copernicus
192.168.0.7 gallileo
=
I added my user name to Samba and can see it in the passwords file. I used
the same user name and password when logging into the Win2k box.
Checking with smbclient gives me this:
=
Gallileo:/usr/bin # smbclient -L gallileo
added interface ip=192.168.0.7 bcast=192.168.0.255 nmask=255.255.255.0
Password:
Domain=[HOME_NET] OS=[Unix] Server=[Samba 2.2.3a]
Sharename Type Comment
- ---
share1 Disk
IPC$ IPC IPC Service (Samba 2.2.3a)
ADMIN$ Disk IPC Service (Samba 2.2.3a)
jimmy Disk Home Directories
Server Comment
----
GALLILEO Samba 2.2.3a
WorkgroupMaster
----
HOME_NET
Gallileo:/usr/bin #
=
testparm shows the conf file is OK.
When I log into the Win2k box as jimmy (again, same passwords as in Linux
ans Samba), I can't see the samba server within the workgroup within My
Network Places.
I've tried restarting samba and rebooting the win2k box, but to no avail.
I'm unsure of the interfaces setting. I have it set to the ip address of
the Linux box. I haev tried it with it commented out, but that didn't help.
I have the firewall turned off.
I can ping from both directions.
At the moment, I'm not concered about security. I'm just trying to learn
for now and really just want to get the connection working.
Thanks,
James
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] LDAP reconnect
Hi all, I have this log messages in my linux fedora core 3. smbd[2923]: nss_ldap: reconnecting to LDAP server... Jul 11 14:45:23 fedoraserver smbd[2923]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:46:42 fedoraserver smbd[2947]: nss_ldap: reconnecting to LDAP server... Jul 11 14:46:42 fedoraserver smbd[2947]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:46:43 fedoraserver smbd[2969]: nss_ldap: reconnecting to LDAP server... Jul 11 14:46:43 fedoraserver smbd[2969]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:48:07 fedoraserver smbd[2970]: nss_ldap: reconnecting to LDAP server... Jul 11 14:48:07 fedoraserver smbd[2970]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:48:31 fedoraserver smbd[2983]: nss_ldap: reconnecting to LDAP server... Jul 11 14:48:31 fedoraserver smbd[2983]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:48:42 fedoraserver smbd[2947]: nss_ldap: reconnecting to LDAP server... Jul 11 14:48:42 fedoraserver smbd[2947]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:49:08 fedoraserver smbd[2948]: nss_ldap: reconnecting to LDAP server... Jul 11 14:49:08 fedoraserver smbd[2948]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:50:02 fedoraserver smbd[2947]: nss_ldap: reconnecting to LDAP server... Jul 11 14:50:02 fedoraserver smbd[2947]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:50:50 fedoraserver smbd[2970]: nss_ldap: reconnecting to LDAP server... Jul 11 14:50:50 fedoraserver smbd[2970]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:51:44 fedoraserver smbd[2969]: nss_ldap: reconnecting to LDAP server... Jul 11 14:51:44 fedoraserver smbd[2969]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:52:30 fedoraserver smbd[2995]: nss_ldap: reconnecting to LDAP server... Jul 11 14:52:30 fedoraserver smbd[2995]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:52:37 fedoraserver smbd[2948]: nss_ldap: reconnecting to LDAP server... Jul 11 14:52:37 fedoraserver smbd[2948]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:54:10 fedoraserver smbd[2993]: nss_ldap: reconnecting to LDAP server... Jul 11 14:54:10 fedoraserver smbd[2993]: nss_ldap: reconnected to LDAP server after 1 attempt(s) Jul 11 14:54:15 fedoraserver smbd[2988]: nss_ldap: reconnecting to LDAP server... What is the problem? Regards Michael -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] libsmbclient - detect own workgroup
Hi, I would like to know if there's a way to detect the workgroup of my own server with libsmbclient. With earlier versions than 3.0.20 it was possible to use smbctx-workgroup after the context was initialized. Since 3.0.15pre2 or so its always WORKGROUP. Am I missing something? Regards, Gerd Fleischer __ Verschicken Sie romantische, coole und witzige Bilder per SMS! Jetzt bei WEB.DE FreeMail: http://f.web.de/?mc=021193 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: wiki.samba.org ? [was Re: [Samba] Re: SAMBA/PDC + LDAP HELP please?= For your profiles.]
Ok, ill see if i can setup a wiki which i will maintain, i'v got the servers etc, but i'm not so in to buildin a web site, i'll notify the samba list when ready. I use only debian for my servers and setup, i have lots of experience with login scrips etc. atm on windows and novell platforms, i have running debian with samba, ldap, cups, acl,etc3, pnp print setup (raw printing), fax is in progress, kix login script, use of usrmgr, and ldapadmin. Im trying to integrate postfix and exchange 4linux into it, and also i'mlokking at the hula project. When ready i'll put a howto for this on my wiki. Greetz louis -Original Message- From: Gerald (Jerry) Carter[EMAIL PROTECTED] Sent: 07-10-05 18:15:01 To: Craig White[EMAIL PROTECTED] Cc: samba@lists.samba.orgsamba@lists.samba.org Subject: wiki.samba.org ? [was Re: [Samba] Re: SAMBA/PDC + LDAP HELP please?= For your profiles.] -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Craig White wrote: I wonder if having some sort of wiki on samba web site wouldn't be useful for things like logon scripts and registry settings to be shared/discussed so they had their own longevity and current appropriateness as email archives don't often reflect the changing nature of things and sometimes the samba documentation has different objectives. We've talked about it before but there is a fear that a wiki would turn into a propogation mechanism for Samba urban legends. Someone (or a team of people) would need act as editors. Truthfully, if it were done right, it would be probably be a good thing. But if it weren't it would be a really bad thing. It's definitley too much for the developers to take on. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc There's an anonymous coward in all of us. --anonymous -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDRp8FIR7qMdg1EfYRApmYAJ9CrvBqWk/ZMHgAmfLGAoBm6jlrIACfcMxD VUqUozi8hudDVzpivApFjyM= =EQBj -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba.. not worth a f*** for printing
I have had it.. I have come to the butt-ugly conclusion that samba is nothing more than a clusterf**k for cross platform printing. I have been trying for 2 years to talk between my windows and linux printers to no avail. I am convinced now that despite my numerous requests from this group, even, that there isn't a sole who knows how to get samba printing to work. I am going to have to be happy with drive sharing and call it good. Until a (hopefully) better environemnt arrives on the networking scene. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Cant get to my dirs
Autumn Clark Escrow Officer Western Title Company, Inc. Phone: 775-332-7100 CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is for the sole use of the intended recipient (s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender via reply email and destroy all copies of the original message. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Patch: FC4 spec file
--- Gerald (Jerry) Carter [EMAIL PROTECTED] wrote: Sorry. I'm not going to include the patch to work around bugs in e2fsprogrs. Ah, I didn't realize the underlying issue ... it seems to be fixed in e2fsprogs-1.38 from Fedora ... | 2.) The Fedora project's samba RPMS install | mount.cifs; it would help to have samba.org's RPMS | do the same. This one I can do. Thanks for the patch. Thanks __ Yahoo! Music Unlimited Access over 1 million songs. Try it free. http://music.yahoo.com/unlimited/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Re: MS SQL server and samba
Hans du Plooy [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] On Sunday 09 October 2005 03:47, jamrock wrote: Note that most people use Enterprise Manager to backup from SQL to the local drive. They then use backup software to backup from disk to tape or disk to disk. Thanks for the link - gives me an idea of where to start hacking on it. We are actually using another product, Cortex Backupassist, which works like a charm and has no problem backup up to a samba share. But the guys who set up the SQL server before us had Enterprise Manager do the backups to local disc. These backups are now getting to big, and fill up the disc with every round. And for the life of me I cannot get Enterprise Manager to delete that backup schedule. So I thought, well, double backups isn't such a bad idea, I just need to get them diverted somewhere else... Thanks Hans -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba Have you configured Enterprise Manager to remove backups older than a specified number of days? How have you tried to remove the Database Maintenance Schedule? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba.. not worth a f*** for printing
On Sun, Oct 09, 2005 at 03:40:36PM +, Joe Cipale wrote: I have had it.. I have come to the butt-ugly conclusion that samba is nothing more than a clusterf**k for cross platform printing. I have been trying for 2 years to talk between my windows and linux printers to no avail. I am convinced now that despite my numerous requests from this group, even, that there isn't a sole who knows how to get samba printing to work. I am going to have to be happy with drive sharing and call it good. Until a (hopefully) better environemnt arrives on the networking scene. Sorry you're having trouble, but the Samba printing code is so good that HP based an entire product line on it (the HP PSA). If you're having trouble, expressing frustration like this isn't going to help. Remember, the lists are not a paid support forum, and (speaking for myself) I'm far more likely as a Samba Team to take an interest in something that looks like a bug rather than someone who has misconfigured something. Maybe you should try purchasing support ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] About the group setting in smb.conf.
Hi, This is my first time to configure Samba server as a member server in AD domain, So, I have a question about how to configure a group name with one or more spaces in smb.conf? As we know, this kind of group names are very common in Windows environment. For example, set “valid users” parameter: Usually , a name starting with @ is represented group, valid users = username, @GroupName,… But if the group name includes spaces, e.g. “it dept”, “sales dept”, How can I set them correctly? (I set them as @”it dept”, but the winbind log file tells me “group it dept in domain does not exist”, But I can list this group using wbinfo �Cg) Wish someone give me a advice! Thanks in advance! Best Regards! Liu hongquan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba.. not worth a f*** for printing
Wow, the 1000+ users we have printing thru Samba 3.0 and up would be surprised to hear that! We even have click and print working... the load that took off of our sysadmins (not having to set up lpr/IP printing and manually keep track of drivers) was definitely worth the week of tweaking Samba to get printing to work. It's a GREAT printing solution... RTFM. C On 10/9/05, Jeremy Allison [EMAIL PROTECTED] wrote: On Sun, Oct 09, 2005 at 03:40:36PM +, Joe Cipale wrote: I have had it.. I have come to the butt-ugly conclusion that samba is nothing more than a clusterf**k for cross platform printing. I have been trying for 2 years to talk between my windows and linux printers to no avail. I am convinced now that despite my numerous requests from this group, even, that there isn't a sole who knows how to get samba printing to work. I am going to have to be happy with drive sharing and call it good. Until a (hopefully) better environemnt arrives on the networking scene. Sorry you're having trouble, but the Samba printing code is so good that HP based an entire product line on it (the HP PSA). If you're having trouble, expressing frustration like this isn't going to help. Remember, the lists are not a paid support forum, and (speaking for myself) I'm far more likely as a Samba Team to take an interest in something that looks like a bug rather than someone who has misconfigured something. Maybe you should try purchasing support ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba.. not worth a f*** for printing
That's funny... we have almost three dozen printers running fine across five different subnets on our campus with what the team would probably consider the ancient Samba 2.2.7. But - obviously - YMMV. - john in albuquerque On Sun, 09 Oct 2005 15:40:36 + Joe Cipale [EMAIL PROTECTED] wrote: I have had it.. I have come to the butt-ugly conclusion that samba is nothing more than a clusterf**k for cross platform printing. I have been trying for 2 years to talk between my windows and linux printers to no avail. I am convinced now that despite my numerous requests from this group, even, that there isn't a sole who knows how to get samba printing to work. I am going to have to be happy with drive sharing and call it good. Until a (hopefully) better environemnt arrives on the networking scene. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba John Thomas Benedetto, Analyst/Programmer mailto: [EMAIL PROTECTED] / (505)277-7202/277-8945 http://elibrary.unm.edu/lithelp UNM University Libraries IT Dept. MSC05 3020 1 University of New Mexico Albuquerque, NM 87131-0001 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] User unable to change their password using smbpasswd
May anyone help me solve the problem? I use samba 2.2.2 on Solaris 8 ngnvob02 [** NONE **]/export/home/sitlb $ cd /usr/local/samba/bin ngnvob02 [** NONE **]/usr/local/samba/bin $ ./smbpasswd Old SMB password: New SMB password: Retype new SMB password: machine 127.0.0.1 rejected the tconX on the IPC$ share. Error was : ERRSRV - ERRbadpw. Failed to change password for sitlb But I can change the passwd as root. Thank you very much! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: MS SQL server and samba
On Sunday 09 October 2005 09:47, jamrock wrote: Note that most people use Enterprise Manager to backup from SQL to the local drive. They then use backup software to backup from disk to tape or disk to disk. I have two customers doing something similar. They each have a small MS-ADO program (one written in Delphi, one VB) which dumps the database(s) out completely as SQL text, which then gets backed up. I know that there are OS-portable SyBase-oriented utilities around which can do the same from *n[iu]x, because I've done this by hand a while ago (IIRC, from a Digital Unix box). These would allow one to manage one's entire backup from the Samba box. Cheers; Leon -- http://cyberknights.com.au/ Modern tools; traditional dedication http://plug.linux.org.au/ Member, Perth Linux User Group http://slpwa.asn.au/Member, Linux Professionals WA http://osia.net.au/ Member, Open Source Industry Australia http://linux.org.au/Member, Linux Australia -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] About the group setting in smb.conf.
Liu wrote: Hi, This is my first time to configure Samba server as a member server in AD domain, So, I have a question about how to configure a group name with one or more spaces in smb.conf? As we know, this kind of group names are very common in Windows environment. For example, set “valid users” parameter: Usually , a name starting with @ is represented group, valid users = username, @GroupName,… But if the group name includes spaces, e.g. “it dept”, “sales dept”, How can I set them correctly? (I set them as @”it dept”, but the winbind log file tells me “group it dept in domain does not exist”, But I can list this group using wbinfo �Cg) Wish someone give me a advice! Thanks in advance! Best Regards! Liu hongquan Basically, you need to map your NT groups to Linux groups. The Linux groups should not have spaces in the names. Do a search on samba groupmap for the details. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba.. not worth a f*** for printing
On Sun, 2005-10-09 at 17:11 -0700, Jeremy Allison wrote: On Sun, Oct 09, 2005 at 03:40:36PM +, Joe Cipale wrote: I have had it.. I have come to the butt-ugly conclusion that samba is nothing more than a clusterf**k for cross platform printing. I have been trying for 2 years to talk between my windows and linux printers to no avail. I am convinced now that despite my numerous requests from this group, even, that there isn't a sole who knows how to get samba printing to work. I am going to have to be happy with drive sharing and call it good. Until a (hopefully) better environemnt arrives on the networking scene. Sorry you're having trouble, but the Samba printing code is so good that HP based an entire product line on it (the HP PSA). If you're having trouble, expressing frustration like this isn't going to help. Remember, the lists are not a paid support forum, and (speaking for myself) I'm far more likely as a Samba Team to take an interest in something that looks like a bug rather than someone who has misconfigured something. Maybe you should try purchasing support ? just 2 days ago, he was wondering if his problem was with Windows 98 printing support. For the record, I have no problems using samba as print spooler for Windows users. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba.. not worth a f*** for printing
On Monday 10 October 2005 10:26, John T Benedetto wrote: That's funny... we have almost three dozen printers running fine across five different subnets on our campus with what the team would probably consider the ancient Samba 2.2.7. The print-to-PDF facility added by CUPS is also popular with my customers. One was happy enough with it to put off buying 28 copies of Adobe Distiller. Choice of AUD$580+GST per head (== $16,240), or AUD$7379 for a 100-user licence. Perhaps I should talk them into donating 10% of that value to Samba? Cheers; Leon -- http://cyberknights.com.au/ Modern tools; traditional dedication http://plug.linux.org.au/ Member, Perth Linux User Group http://slpwa.asn.au/Member, Linux Professionals WA http://osia.net.au/ Member, Open Source Industry Australia http://linux.org.au/Member, Linux Australia -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba.. not worth a f*** for printing
Gotta love these people that appreciate all the effort the developers put in when clearly they are click and grunt experts who can't be bothered reading a manual. We got samba going and migrated a test bunch towards it printing on about 60 printers. HP drivers work a treat when it came to setting our A4 size paper but some printer drivers like Panasonic and Epson have crappy setup.exe routines to install drivers and the setting of the paper size was in some bizzare non standard place. Not to mention Toshiba network copier drivers that were plain ugly. After a 12 month trial we decided we couldn't be bothered with it and went windows 2003 server for our printing solution. At the time of trial we were sick and tired of Windows NT printing 'support'. If you only have decent HP printers then it would have worked fine. Still think the samba developers are amazing to have reverse engineered the network traffic and built it from that. Good on ya lads! Matt -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Cipale Sent: Monday, 10 October 2005 1:11 AM Cc: samba@lists.samba.org Subject: [Samba] Samba.. not worth a f*** for printing I have had it.. I have come to the butt-ugly conclusion that samba is nothing more than a clusterf**k for cross platform printing. I have been trying for 2 years to talk between my windows and linux printers to no avail. I am convinced now that despite my numerous requests from this group, even, that there isn't a sole who knows how to get samba printing to work. I am going to have to be happy with drive sharing and call it good. Until a (hopefully) better environemnt arrives on the networking scene. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba.. not worth a f*** for printing
I have had it.. I have come to the butt-ugly conclusion that samba is nothing more than a clusterf**k for cross platform printing. I have been trying for 2 years to talk between my windows and linux printers to no avail. I am convinced now that despite my numerous requests from this group, even, that there isn't a sole who knows how to get samba printing to work. it's open source, nobody is paid for it and people do things just for fun. if You don't like such kind of things You can try some paid software (e.g. Microsoft) or paid samba support. nobody makes You choose samba. nobody will ever regret if You abandon samba and go to Microsoft or Apple or whatever You like. taking that into account, You could be more polite here. As for printing, Samba does it. I am going to have to be happy with drive sharing and call it good. Until a (hopefully) better environemnt arrives on the networking scene. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] User unable to change their password using smbpasswd
May anyone help me solve the problem? I use samba 2.2.2 on Solaris 8 ngnvob02 [** NONE **]/export/home/sitlb $ cd /usr/local/samba/bin ngnvob02 [** NONE **]/usr/local/samba/bin $ ./smbpasswd Old SMB password: New SMB password: Retype new SMB password: machine 127.0.0.1 rejected the tconX on the IPC$ share. Error was : ERRSRV - ERRbadpw. Failed to change password for sitlb But I can change the passwd as root. Thank you very much! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba support for local profiles
On 10/6/05, Cybionet [EMAIL PROTECTED] wrote: Milo a écrit : Hi, I tried searching the list and could not find a straight answer. Does samba support local profiles? How does one enable/setup local profiles? What version of samba has best support for local profiles? We are having trouble with a novell-samba migration and would like to use local profiles if possible. It would take alot of work off our hands to migrate the profiles correctly. Any suggestions are appreciated, Milan Andric Greeting Milan Andric, Yes Samba support local profile. For using local profile with Samba 3, be sure to not have set /SambaProfilePath /and /sambaHomePath/ in /global/ section/. /To not have trouble with Windows professional client 2000/XP (I don't have try local profile with 9x clients), open /MMC /and add the snap-in /Group Policy/. Browse in /Local Computer Policy/ / /Computer Configuration/ / Administrative Template / /System // /Login and change //Only allow local user profiles/ value. For Windows 2000, you need SP3 and more install. And run /secedit /refreshpolicy machine_policy (W2K) or //gpupdate (XP)./ Robert Thanks Robert, we went with this solution! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] winbind: username without domain name
Hi everyone, I am trying to configure winbind from samba to achieve a single sign-on between a windows 2003 ADS domain and Solaris 10. So far it is working great, I have been able to join the Solaris 10 server to the ADS domain and can login to solaris using windows usernames and passwords. My problem is that for a user to login, they must also specify the name of the windows domain, e.g. DOMAIN_NAME\user_name as their username. Can I configure winbind so that users only need to specify their actual username (without the preceding DOMAIN_NAME) and the domain name is added for them? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
答复: [Samba] About the group setting in smb.conf.
Hi Gary, My environment is FreeBSD 5.4 , Samba 3.0.12 and the users are authenticated by AD server(that is the password server points to this server) It seems no groupmap command on freebsd, How I can solve this issue? Thanks! Liu -邮件原件- 发件人: Gary Dale [mailto:[EMAIL PROTECTED] 发送时间: 2005年10月10日 11:07 收件人: Liu; Liu, Hong Quan 刘红泉 抄送: samba@lists.samba.org 主题: Re: [Samba] About the group setting in smb.conf. Liu wrote: Hi, This is my first time to configure Samba server as a member server in AD domain, So, I have a question about how to configure a group name with one or more spaces in smb.conf? As we know, this kind of group names are very common in Windows environment. For example, set “valid users” parameter: Usually , a name starting with @ is represented group, valid users = username, @GroupName,… But if the group name includes spaces, e.g. “it dept”, “sales dept”, How can I set them correctly? (I set them as @”it dept”, but the winbind log file tells me “group it dept in domain does not exist”, But I can list this group using wbinfo �Cg) Wish someone give me a advice! Thanks in advance! Best Regards! Liu hongquan Basically, you need to map your NT groups to Linux groups. The Linux groups should not have spaces in the names. Do a search on samba groupmap for the details. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: winbind: username without domain name
Aleksandar Stankovic wrote: Can I configure winbind so that users only need to specify their actual username (without the preceding DOMAIN_NAME) and the domain name is added for them? man smb.conf Look for parameter named winbind use default domain -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
svn commit: samba r10843 - in branches/SAMBA_4_0/source/winbind: .
Author: vlendec
Date: 2005-10-09 08:32:06 + (Sun, 09 Oct 2005)
New Revision: 10843
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10843
Log:
Reformatting
Modified:
branches/SAMBA_4_0/source/winbind/wb_server.c
Changeset:
Modified: branches/SAMBA_4_0/source/winbind/wb_server.c
===
--- branches/SAMBA_4_0/source/winbind/wb_server.c 2005-10-08 20:19:35 UTC
(rev 10842)
+++ branches/SAMBA_4_0/source/winbind/wb_server.c 2005-10-09 08:32:06 UTC
(rev 10843)
@@ -42,13 +42,14 @@
*/
static void wbsrv_accept(struct stream_connection *conn)
{
- struct wbsrv_listen_socket *listen_socket =
talloc_get_type(conn-private,
- struct
wbsrv_listen_socket);
+ struct wbsrv_listen_socket *listen_socket =
+ talloc_get_type(conn-private, struct wbsrv_listen_socket);
struct wbsrv_connection *wbconn;
wbconn = talloc_zero(conn, struct wbsrv_connection);
if (!wbconn) {
- stream_terminate_connection(conn, wbsrv_accept: out of
memory);
+ stream_terminate_connection(conn,
+ wbsrv_accept: out of memory);
return;
}
wbconn-conn= conn;
@@ -61,7 +62,8 @@
*/
static void wbsrv_recv(struct stream_connection *conn, uint16_t flags)
{
- struct wbsrv_connection *wbconn = talloc_get_type(conn-private, struct
wbsrv_connection);
+ struct wbsrv_connection *wbconn =
+ talloc_get_type(conn-private, struct wbsrv_connection);
const struct wbsrv_protocol_ops *ops = wbconn-listen_socket-ops;
struct wbsrv_call *call;
NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
@@ -73,7 +75,8 @@
return;
}
- /* if the used protocol doesn't support pending requests disallow them
*/
+ /* if the used protocol doesn't support pending requests disallow
+* them */
if (wbconn-pending_calls !ops-allow_pending_calls) {
EVENT_FD_NOT_READABLE(conn-event.fde);
return;
@@ -91,7 +94,7 @@
uint32_t packet_length;
status = socket_recv(conn-socket,
-wbconn-partial.data +
wbconn-partial_read,
+wbconn-partial.data+wbconn-partial_read,
4 - wbconn-partial_read,
nread, 0);
if (NT_STATUS_IS_ERR(status)) goto failed;
@@ -102,8 +105,9 @@
packet_length = ops-packet_length(wbconn-partial);
- wbconn-partial.data = talloc_realloc(wbconn,
wbconn-partial.data,
- uint8_t, packet_length);
+ wbconn-partial.data =
+ talloc_realloc(wbconn, wbconn-partial.data, uint8_t,
+ packet_length);
if (!wbconn-partial.data) goto nomem;
wbconn-partial.length = packet_length;
@@ -127,9 +131,9 @@
call-event_ctx = conn-event.ctx;
/*
-* we have parsed the request, so we can reset the wbconn-partial_read,
-* maybe we could also free wbconn-partial, but for now we keep it,
-* and overwrite it the next time
+* we have parsed the request, so we can reset the
+* wbconn-partial_read, maybe we could also free wbconn-partial, but
+* for now we keep it, and overwrite it the next time
*/
wbconn-partial_read = 0;
@@ -260,7 +264,8 @@
stream_setup_socket() call. */
model_ops = process_model_byname(single);
if (!model_ops) {
- task_server_terminate(task, Can't find 'single' process
model_ops);
+ task_server_terminate(task,
+ Can't find 'single' process model_ops);
return;
}
@@ -283,20 +288,24 @@
listen_socket-ops = wbsrv_samba3_protocol_ops;
status = stream_setup_socket(task-event_ctx, model_ops,
wbsrv_ops, unix,
-listen_socket-socket_path, port,
listen_socket);
+listen_socket-socket_path, port,
+listen_socket);
if (!NT_STATUS_IS_OK(status)) goto listen_failed;
/* setup the privileged samba3 socket */
listen_socket = talloc(service, struct wbsrv_listen_socket);
if (!listen_socket) goto nomem;
- listen_socket-socket_path = smbd_tmp_path(listen_socket,
WINBINDD_SAMBA3_PRIVILEGED_SOCKET);
+ listen_socket-socket_path =
+ smbd_tmp_path(listen_socket,
+ WINBINDD_SAMBA3_PRIVILEGED_SOCKET);
if
svn commit: samba r10844 - in branches/SAMBA_4_0/source: nsswitch winbind
Author: abartlet
Date: 2005-10-09 12:13:05 + (Sun, 09 Oct 2005)
New Revision: 10844
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10844
Log:
Add challenge-response authentication to Samba4's winbindd for VL.
Plaintext should be simple, but I'm going to do some infrustructure
work first.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/nsswitch/winbindd_nss.h
branches/SAMBA_4_0/source/winbind/wb_samba3_cmd.c
branches/SAMBA_4_0/source/winbind/wb_samba3_protocol.c
Changeset:
Modified: branches/SAMBA_4_0/source/nsswitch/winbindd_nss.h
===
--- branches/SAMBA_4_0/source/nsswitch/winbindd_nss.h 2005-10-09 08:32:06 UTC
(rev 10843)
+++ branches/SAMBA_4_0/source/nsswitch/winbindd_nss.h 2005-10-09 12:13:05 UTC
(rev 10844)
@@ -186,7 +186,6 @@
pid_t pid; /* pid of calling process */
uint32_t flags;/* flags relavant to a given request */
winbind_string domain_name; /* name of domain for which the request
applies */
- int msgid;
union {
winbind_string winsreq; /* WINS request */
@@ -247,6 +246,8 @@
winbind_string cache_key;
} dual_sidaliases;
} data;
+ char *extra_data;
+ size_t extra_len;
char null_term;
};
Modified: branches/SAMBA_4_0/source/winbind/wb_samba3_cmd.c
===
--- branches/SAMBA_4_0/source/winbind/wb_samba3_cmd.c 2005-10-09 08:32:06 UTC
(rev 10843)
+++ branches/SAMBA_4_0/source/winbind/wb_samba3_cmd.c 2005-10-09 12:13:05 UTC
(rev 10844)
@@ -33,6 +33,7 @@
#include libcli/smb_composite/smb_composite.h
#include include/version.h
#include lib/events/events.h
+#include librpc/gen_ndr/ndr_netlogon.h
NTSTATUS wbsrv_samba3_interface_version(struct wbsrv_samba3_call *s3call)
{
@@ -175,3 +176,122 @@
return;
}
}
+
+NTSTATUS wbsrv_samba3_pam_auth(struct wbsrv_samba3_call *s3call)
+{
+ struct wbsrv_service *service =
+ s3call-call-wbconn-listen_socket-service;
+
+ s3call-response.result = WINBINDD_ERROR;
+ return NT_STATUS_OK;
+}
+
+NTSTATUS wbsrv_samba3_pam_auth_crap(struct wbsrv_samba3_call *s3call)
+{
+ struct wbsrv_service *service =
+ s3call-call-wbconn-listen_socket-service;
+ struct creds_CredentialState *creds_state;
+ struct netr_Authenticator auth, auth2;
+ struct netr_NetworkInfo ninfo;
+ struct netr_LogonSamLogon r;
+ NTSTATUS status;
+ TALLOC_CTX *mem_ctx = talloc_new(s3call);
+ if (!mem_ctx) {
+ return NT_STATUS_NO_MEMORY;
+ }
+
+ ZERO_STRUCT(auth2);
+ creds_state =
cli_credentials_get_netlogon_creds(service-schannel_creds);
+
+ creds_client_authenticator(creds_state, auth);
+
+ ninfo.identity_info.account_name.string =
s3call-request.data.auth_crap.user;
+ ninfo.identity_info.domain_name.string =
s3call-request.data.auth_crap.domain;
+ ninfo.identity_info.parameter_control = 0;
+ ninfo.identity_info.logon_id_low = 0;
+ ninfo.identity_info.logon_id_high = 0;
+ ninfo.identity_info.workstation.string =
s3call-request.data.auth_crap.workstation;
+ memcpy(ninfo.challenge, s3call-request.data.auth_crap.chal,
+ sizeof(ninfo.challenge));
+ ninfo.nt.length = s3call-request.data.auth_crap.nt_resp_len;
+ ninfo.nt.data = s3call-request.data.auth_crap.nt_resp;
+ ninfo.lm.length = s3call-request.data.auth_crap.lm_resp_len;
+ ninfo.lm.data = s3call-request.data.auth_crap.lm_resp;
+
+ r.in.server_name = talloc_asprintf(mem_ctx, %s,
dcerpc_server_name(service-netlogon_pipe));
+ r.in.workstation =
cli_credentials_get_workstation(service-schannel_creds);
+ r.in.credential = auth;
+ r.in.return_authenticator = auth2;
+ r.in.logon_level = 2;
+ r.in.validation_level = 3;
+ r.in.logon.network = ninfo;
+
+ r.out.return_authenticator = NULL;
+ status = dcerpc_netr_LogonSamLogon(service-netlogon_pipe, mem_ctx, r);
+ if (!r.out.return_authenticator ||
+ !creds_client_check(creds_state,
r.out.return_authenticator-cred)) {
+ DEBUG(0, (Credentials check failed!\n));
+ status = NT_STATUS_ACCESS_DENIED;
+ }
+ if (NT_STATUS_IS_OK(status)) {
+ struct netr_SamBaseInfo *base;
+ switch (r.in.validation_level) {
+ case 2:
+ base = r.out.validation.sam2-base;
+ break;
+ case 3:
+ base = r.out.validation.sam3-base;
+ break;
+ case 6:
+ base = r.out.validation.sam6-base;
+ break;
+ }
+
+
svn commit: samba r10846 - in branches/SAMBA_4_0/source: include winbind
Author: vlendec Date: 2005-10-09 12:50:35 + (Sun, 09 Oct 2005) New Revision: 10846 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10846 Log: Create a wbsrv_domain, change wb_finddcs to the style of the rest of the async helpers. Volker Modified: branches/SAMBA_4_0/source/include/structs.h branches/SAMBA_4_0/source/winbind/wb_async_helpers.c branches/SAMBA_4_0/source/winbind/wb_async_helpers.h branches/SAMBA_4_0/source/winbind/wb_samba3_cmd.c branches/SAMBA_4_0/source/winbind/wb_server.c branches/SAMBA_4_0/source/winbind/wb_server.h Changeset: Sorry, the patch is too large (855 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10846
svn commit: samba r10847 - in branches/SAMBA_4_0/source: libcli/auth torture/rpc
Author: abartlet
Date: 2005-10-09 13:03:52 + (Sun, 09 Oct 2005)
New Revision: 10847
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10847
Log:
Fix up new 'decrypt samlogon reply' routine to be more robust, and use
it in the RPC-SAMLOGON test.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/libcli/auth/credentials.c
branches/SAMBA_4_0/source/torture/rpc/samlogon.c
Changeset:
Modified: branches/SAMBA_4_0/source/libcli/auth/credentials.c
===
--- branches/SAMBA_4_0/source/libcli/auth/credentials.c 2005-10-09 12:50:35 UTC
(rev 10846)
+++ branches/SAMBA_4_0/source/libcli/auth/credentials.c 2005-10-09 13:03:52 UTC
(rev 10847)
@@ -322,18 +322,32 @@
{
static const char zeros[16];
- struct netr_SamBaseInfo *base;
+ struct netr_SamBaseInfo *base = NULL;
switch (validation_level) {
case 2:
- base = validation-sam2-base;
+ if (validation-sam2) {
+ base = validation-sam2-base;
+ }
break;
case 3:
- base = validation-sam3-base;
+ if (validation-sam3) {
+ base = validation-sam3-base;
+ }
break;
case 6:
- base = validation-sam6-base;
+ if (validation-sam6) {
+ base = validation-sam6-base;
+ }
break;
+ default:
+ /* If we can't find it, we can't very well decrypt it */
+ return;
}
+
+ if (!base) {
+ return;
+ }
+
/* find and decyrpt the session keys, return in parameters above */
if (validation_level == 6) {
/* they aren't encrypted! */
Modified: branches/SAMBA_4_0/source/torture/rpc/samlogon.c
===
--- branches/SAMBA_4_0/source/torture/rpc/samlogon.c2005-10-09 12:50:35 UTC
(rev 10846)
+++ branches/SAMBA_4_0/source/torture/rpc/samlogon.c2005-10-09 13:03:52 UTC
(rev 10847)
@@ -151,9 +151,13 @@
if (error_string) {
*error_string = strdup(nt_errstr(status));
}
+ return status;
}
validation_level = r-in.validation_level;
+
+ creds_decrypt_samlogon(samlogon_state-creds, validation_level,
r-out.validation);
+
switch (validation_level) {
case 2:
base = r-out.validation.sam2-base;
@@ -172,9 +176,13 @@
if (error_string) {
*error_string = strdup(nt_errstr(status));
}
+ return status;
}
validation_level = r_ex-in.validation_level;
+
+ creds_decrypt_samlogon(samlogon_state-creds, validation_level,
r_ex-out.validation);
+
switch (validation_level) {
case 2:
base = r_ex-out.validation.sam2-base;
@@ -201,9 +209,13 @@
if (error_string) {
*error_string = strdup(nt_errstr(status));
}
+ return status;
}
-
+
validation_level = r_flags-in.validation_level;
+
+ creds_decrypt_samlogon(samlogon_state-creds, validation_level,
r_flags-out.validation);
+
switch (validation_level) {
case 2:
base = r_flags-out.validation.sam2-base;
@@ -218,68 +230,18 @@
break;
}
-
- if (!NT_STATUS_IS_OK(status)) {
- /* we cannot check the session key, if the logon failed... */
- return status;
- }
-
if (!base) {
printf(No user info returned from 'successful' SamLogon*()
call!\n);
return NT_STATUS_INVALID_PARAMETER;
}
- /* find and decyrpt the session keys, return in parameters above */
- if (validation_level == 6) {
- /* they aren't encrypted! */
- if (user_session_key) {
- memcpy(user_session_key, base-key.key, 16);
- }
- if (lm_key) {
- memcpy(lm_key, base-LMSessKey.key, 8);
- }
- } else if (samlogon_state-creds-negotiate_flags
NETLOGON_NEG_ARCFOUR) {
- static const char zeros[16];
-
- if (memcmp(base-key.key, zeros,
- sizeof(base-key.key)) != 0) {
- creds_arcfour_crypt(samlogon_state-creds,
- base-key.key,
- sizeof(base-key.key));
svn commit: samba r10848 - in branches/SAMBA_4_0/source/libcli/nbt: .
Author: jelmer
Date: 2005-10-09 13:40:55 + (Sun, 09 Oct 2005)
New Revision: 10848
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10848
Log:
Fix warning
Modified:
branches/SAMBA_4_0/source/libcli/nbt/nbtname.c
Changeset:
Modified: branches/SAMBA_4_0/source/libcli/nbt/nbtname.c
===
--- branches/SAMBA_4_0/source/libcli/nbt/nbtname.c 2005-10-09 13:03:52 UTC
(rev 10847)
+++ branches/SAMBA_4_0/source/libcli/nbt/nbtname.c 2005-10-09 13:40:55 UTC
(rev 10848)
@@ -474,7 +474,7 @@
/*
pull a nbt name, WINS Replication uses another on wire format for nbt name
*/
-NTSTATUS ndr_pull_wrepl_nbt_name(struct ndr_pull *ndr, int ndr_flags, const
struct nbt_name **_r)
+NTSTATUS ndr_pull_wrepl_nbt_name(struct ndr_pull *ndr, int ndr_flags, struct
nbt_name **_r)
{
struct nbt_name *r;
uint8_t *namebuf;
svn commit: samba r10849 - in branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba/NDR: .
Author: jelmer
Date: 2005-10-09 13:53:48 + (Sun, 09 Oct 2005)
New Revision: 10849
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10849
Log:
Fix handling of [charset] for strings with fixed or inline size
Modified:
branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba/NDR/Parser.pm
Changeset:
Modified: branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba/NDR/Parser.pm
===
--- branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba/NDR/Parser.pm
2005-10-09 13:40:55 UTC (rev 10848)
+++ branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba/NDR/Parser.pm
2005-10-09 13:53:48 UTC (rev 10849)
@@ -575,8 +575,7 @@
my $ndr_flags = CalcNdrFlags($l, $primitives, $deferred);
- if ($l-{TYPE} eq ARRAY and ($l-{IS_CONFORMANT} or $l-{IS_VARYING}
- or is_charset_array($e, $l))) {
+ if ($l-{TYPE} eq ARRAY and ($l-{IS_CONFORMANT} or
$l-{IS_VARYING})) {
$var_name = get_pointer_to($var_name);
}
@@ -721,8 +720,7 @@
} elsif ($l-{TYPE} eq ARRAY) {
my $length;
- if ($l-{IS_CONFORMANT} or $l-{IS_VARYING} or
- is_charset_array($e,$l)) {
+ if ($l-{IS_CONFORMANT} or $l-{IS_VARYING}) {
$var_name = get_pointer_to($var_name);
}
@@ -927,8 +925,7 @@
my $ndr_flags = CalcNdrFlags($l, $primitives, $deferred);
- if ($l-{TYPE} eq ARRAY and ($l-{IS_VARYING} or $l-{IS_CONFORMANT}
- or is_charset_array($e,$l))) {
+ if ($l-{TYPE} eq ARRAY and ($l-{IS_VARYING} or
$l-{IS_CONFORMANT})) {
$var_name = get_pointer_to($var_name);
}
svn commit: samba r10850 - in branches/tmp: .
Author: idra Date: 2005-10-09 15:21:35 + (Sun, 09 Oct 2005) New Revision: 10850 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10850 Log: remove old branch ldbPlugins Removed: branches/tmp/ldbPlugins/ Changeset:
Re: svn commit: samba r10844 - in branches/SAMBA_4_0/source: nsswitch winbind
On Sun, Oct 09, 2005 at 12:13:06PM +, [EMAIL PROTECTED] wrote:
Author: abartlet
Date: 2005-10-09 12:13:05 + (Sun, 09 Oct 2005)
New Revision: 10844
Modified: branches/SAMBA_4_0/source/nsswitch/winbindd_nss.h
===
--- branches/SAMBA_4_0/source/nsswitch/winbindd_nss.h 2005-10-09 08:32:06 UTC
(rev 10843)
+++ branches/SAMBA_4_0/source/nsswitch/winbindd_nss.h 2005-10-09 12:13:05 UTC
(rev 10844)
@@ -186,7 +186,6 @@
pid_t pid; /* pid of calling process */
uint32_t flags;/* flags relavant to a given request */
winbind_string domain_name; /* name of domain for which the request
applies */
- int msgid;
union {
winbind_string winsreq; /* WINS request */
@@ -247,6 +246,8 @@
winbind_string cache_key;
} dual_sidaliases;
} data;
+ char *extra_data;
+ size_t extra_len;
char null_term;
};
why have you changed the protocol? the protocol is this struct passed
into the socket...
Or is that a merge from SAMBA_3_0?
--
metze
svn commit: samba r10851 - in branches/tmp: . samba4_ldap_controls samba4_ldap_controls/source/lib/ldb/include
Author: idra
Date: 2005-10-09 15:46:41 + (Sun, 09 Oct 2005)
New Revision: 10851
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10851
Log:
add a new branch to work experiment ldap controls
Added:
branches/tmp/samba4_ldap_controls/
branches/tmp/samba4_ldap_controls/source/
Removed:
branches/tmp/samba4_ldap_controls/source/
Modified:
branches/tmp/samba4_ldap_controls/source/lib/ldb/include/ldb.h
Changeset:
Copied: branches/tmp/samba4_ldap_controls (from rev 10843, branches/SAMBA_4_0)
Copied: branches/tmp/samba4_ldap_controls/source (from rev 10850,
branches/SAMBA_4_0/source)
Modified: branches/tmp/samba4_ldap_controls/source/lib/ldb/include/ldb.h
===
--- branches/SAMBA_4_0/source/lib/ldb/include/ldb.h 2005-10-09 15:21:35 UTC
(rev 10850)
+++ branches/tmp/samba4_ldap_controls/source/lib/ldb/include/ldb.h
2005-10-09 15:46:41 UTC (rev 10851)
@@ -250,6 +250,65 @@
#define LDB_SYNTAX_OCTET_STRING 1.3.6.1.4.1.1466.115.121.1.40
#define LDB_SYNTAX_OBJECTCLASS LDB_SYNTAX_OBJECTCLASS
+struct ldb_controls;
+struct ldb_credentials;
+
+enum ldb_request_type {
+ LDB_REQ_SEARCH,
+ LDB_REQ_ADD,
+ LDB_REQ_MODIFY,
+ LDB_REQ_RENAME,
+ LDB_REQ_DELETE
+};
+
+struct ldb_search {
+ struct ldb_context *ldb;
+ const struct ldb_dn *base;
+ enum ldb_scope scope;
+ struct ldb_parse_tree *tree;
+ const char * const *attrs;
+ struct ldb_message ***res;
+};
+
+struct ldb_add {
+ struct ldb_context *ldb;
+ const struct ldb_message *message;
+};
+
+struct ldb_modify {
+ struct ldb_context *ldb;
+ const struct ldb_message *message;
+};
+
+struct ldb_rename {
+ struct ldb_context *ldb;
+ const struct ldb_dn *olddn;
+ const struct ldb_dn *newdn;
+};
+
+struct ldb_delete {
+ struct ldb_context *ldb;
+ const struct ldb_dn *dn;
+};
+
+struct ldb_request {
+
+ int operation;
+
+ union {
+ struct ldb_search search;
+ struct ldb_add add;
+ struct ldb_modify modify;
+ struct ldb_rename rename;
+ struct ldb_delete delete;
+ } op;
+
+ struct ldb_controls *controls;
+ struct ldb_credentials *creds;
+};
+
+int ldb_request(struct ldb_context *ldb, struct ldb_request *request);
+
/*
initialise a ldb context
*/
svn commit: samba r10852 - in branches/SAMBA_4_0/source: include libcli/composite winbind
Author: vlendec Date: 2005-10-09 20:32:24 + (Sun, 09 Oct 2005) New Revision: 10852 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10852 Log: Continuation-based programming can become a bit spaghetti... Initialize a domain structure properly. Excerpt from wb_init_domain.c: /* * Initialize a domain: * * - With schannel credentials, try to open the SMB connection with the machine * creds. Fall back to anonymous. * * - If we have schannel creds, do the auth2 and open the schannel'ed netlogon * pipe. * * - Open LSA. If we have machine creds, try to open with ntlmssp. Fall back * to schannel and then to anon bind. * * - With queryinfopolicy, verify that we're talking to the right domain * * A bit complex, but with all the combinations I think it's the best we can * get. NT4, W2k3SP1 and W2k all have different combinations, but in the end we * have a signedsealed lsa connection on all of them. * * Is this overkill? In particular the authenticated SMB connection seems a * bit overkill, given that we do schannel for netlogon and ntlmssp for * lsa later on w2k3, the others don't do this anyway. */ Thanks to Jeremy for his detective work, and to the Samba4 team for providing such a great infrastructure. Next step is to connect to SAM. Do it via LDAP if we can, fall back to samr with all we have. Volker Added: branches/SAMBA_4_0/source/winbind/wb_init_domain.c Modified: branches/SAMBA_4_0/source/include/structs.h branches/SAMBA_4_0/source/libcli/composite/composite.c branches/SAMBA_4_0/source/winbind/config.mk branches/SAMBA_4_0/source/winbind/wb_async_helpers.c branches/SAMBA_4_0/source/winbind/wb_samba3_cmd.c branches/SAMBA_4_0/source/winbind/wb_server.h Changeset: Sorry, the patch is too large (1057 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10852
svn commit: samba r10853 - in branches/SAMBA_4_0/source/winbind: .
Author: vlendec Date: 2005-10-09 20:57:49 + (Sun, 09 Oct 2005) New Revision: 10853 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10853 Log: Convert wbinfo -n to properly init the domain. Volker Modified: branches/SAMBA_4_0/source/winbind/wb_async_helpers.c branches/SAMBA_4_0/source/winbind/wb_init_domain.c branches/SAMBA_4_0/source/winbind/wb_server.c Changeset: Sorry, the patch is too large (525 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10853
svn commit: samba r10854 - in branches/SAMBA_4_0/source/rpc_server/spoolss: .
Author: jelmer
Date: 2005-10-09 21:30:41 + (Sun, 09 Oct 2005)
New Revision: 10854
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10854
Log:
talloc_get_type() can return NULL..
Modified:
branches/SAMBA_4_0/source/rpc_server/spoolss/dcesrv_spoolss.c
Changeset:
Modified: branches/SAMBA_4_0/source/rpc_server/spoolss/dcesrv_spoolss.c
===
--- branches/SAMBA_4_0/source/rpc_server/spoolss/dcesrv_spoolss.c
2005-10-09 20:57:49 UTC (rev 10853)
+++ branches/SAMBA_4_0/source/rpc_server/spoolss/dcesrv_spoolss.c
2005-10-09 21:30:41 UTC (rev 10854)
@@ -538,6 +538,8 @@
DCESRV_PULL_HANDLE_WERR(h, r-in.handle, DCESRV_HANDLE_ANY);
handle = talloc_get_type(h-data, struct ntptr_GenericHandle);
+ if (!handle)
+ return WERR_BADFID;
switch (handle-type) {
case NTPTR_HANDLE_SERVER:
@@ -609,6 +611,8 @@
DCESRV_PULL_HANDLE_WERR(h, r-in.handle, DCESRV_HANDLE_ANY);
handle = talloc_get_type(h-data, struct ntptr_GenericHandle);
+ if (!handle)
+ return WERR_BADFID;
switch (handle-type) {
case NTPTR_HANDLE_SERVER:
@@ -639,6 +643,8 @@
DCESRV_PULL_HANDLE_WERR(h, r-in.handle, DCESRV_HANDLE_ANY);
handle = talloc_get_type(h-data, struct ntptr_GenericHandle);
+ if (!handle)
+ return WERR_BADFID;
switch (handle-type) {
case NTPTR_HANDLE_SERVER:
@@ -669,6 +675,8 @@
DCESRV_PULL_HANDLE_WERR(h, r-in.handle, DCESRV_HANDLE_ANY);
handle = talloc_get_type(h-data, struct ntptr_GenericHandle);
+ if (!handle)
+ return WERR_BADFID;
switch (handle-type) {
case NTPTR_HANDLE_SERVER:
@@ -702,6 +710,8 @@
DCESRV_PULL_HANDLE_WERR(h, r-in.handle, DCESRV_HANDLE_ANY);
handle = talloc_get_type(h-data, struct ntptr_GenericHandle);
+ if (!handle)
+ return WERR_BADFID;
switch (handle-type) {
case NTPTR_HANDLE_SERVER:
@@ -732,6 +742,8 @@
DCESRV_PULL_HANDLE_WERR(h, r-in.handle, DCESRV_HANDLE_ANY);
handle = talloc_get_type(h-data, struct ntptr_GenericHandle);
+ if (!handle)
+ return WERR_BADFID;
switch (handle-type) {
case NTPTR_HANDLE_SERVER:
svn commit: samba r10855 - in branches/SAMBA_4_0/source/setup: .
Author: abartlet
Date: 2005-10-09 22:19:20 + (Sun, 09 Oct 2005)
New Revision: 10855
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10855
Log:
Put the domain SID in secrets.ldb by default, and add http as a
default SPN alias.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/setup/provision.ldif
branches/SAMBA_4_0/source/setup/secrets.ldif
Changeset:
Modified: branches/SAMBA_4_0/source/setup/provision.ldif
===
--- branches/SAMBA_4_0/source/setup/provision.ldif 2005-10-09 21:30:41 UTC
(rev 10854)
+++ branches/SAMBA_4_0/source/setup/provision.ldif 2005-10-09 22:19:20 UTC
(rev 10855)
@@ -334,7 +334,7 @@
uSNChanged: ${USN}
showInAdvancedViewOnly: TRUE
objectCategory: CN=NTDS-Service,CN=Schema,CN=Configuration,${BASEDN}
-sPNMappings: host=ldap,dns,cifs
+sPNMappings: host=ldap,dns,cifs,http
###
Modified: branches/SAMBA_4_0/source/setup/secrets.ldif
===
--- branches/SAMBA_4_0/source/setup/secrets.ldif2005-10-09 21:30:41 UTC
(rev 10854)
+++ branches/SAMBA_4_0/source/setup/secrets.ldif2005-10-09 22:19:20 UTC
(rev 10855)
@@ -34,3 +34,4 @@
whenCreated: ${LDAPTIME}
whenChanged: ${LDAPTIME}
msDS-KeyVersionNumber: 1
+objectSid: ${DOMAINSID}
svn commit: samba r10856 - in branches/SAMBA_4_0/source/lib/ldb: . tests
Author: tridge Date: 2005-10-09 23:29:26 + (Sun, 09 Oct 2005) New Revision: 10856 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10856 Log: we need aclocal.m4 in ldb for standalone configure Added: branches/SAMBA_4_0/source/lib/ldb/aclocal.m4 Modified: branches/SAMBA_4_0/source/lib/ldb/tests/slapd.conf Changeset: Added: branches/SAMBA_4_0/source/lib/ldb/aclocal.m4 === --- branches/SAMBA_4_0/source/lib/ldb/aclocal.m42005-10-09 22:19:20 UTC (rev 10855) +++ branches/SAMBA_4_0/source/lib/ldb/aclocal.m42005-10-09 23:29:26 UTC (rev 10856) @@ -0,0 +1,12 @@ +dnl see if a declaration exists for a function or variable +dnl defines HAVE_function_DECL if it exists +dnl AC_HAVE_DECL(var, includes) +AC_DEFUN(AC_HAVE_DECL, +[ + AC_CACHE_CHECK([for $1 declaration],ac_cv_have_$1_decl,[ +AC_TRY_COMPILE([$2],[int i = (int)$1], +ac_cv_have_$1_decl=yes,ac_cv_have_$1_decl=no)]) + if test x$ac_cv_have_$1_decl = xyes; then +AC_DEFINE([HAVE_]translit([$1], [a-z], [A-Z])[_DECL],1,[Whether $1() is available]) + fi +]) Modified: branches/SAMBA_4_0/source/lib/ldb/tests/slapd.conf === --- branches/SAMBA_4_0/source/lib/ldb/tests/slapd.conf 2005-10-09 22:19:20 UTC (rev 10855) +++ branches/SAMBA_4_0/source/lib/ldb/tests/slapd.conf 2005-10-09 23:29:26 UTC (rev 10856) @@ -14,8 +14,8 @@ allow update_anon bind_anon_dn -#modulepath/usr/lib/ldap -#moduleloadback_bdb +modulepath /usr/lib/ldap +moduleload back_bdb defaultsearchbase o=University of Michigan,c=TEST
Build status as of Mon Oct 10 00:00:02 2005
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2005-10-09 00:00:14.0 + +++ /home/build/master/cache/broken_results.txt 2005-10-10 00:00:29.0 + @@ -1,17 +1,17 @@ -Build status as of Sun Oct 9 00:00:02 2005 +Build status as of Mon Oct 10 00:00:02 2005 Build counts: Tree Total Broken Panic ccache 9 2 0 -distcc 10 2 0 +distcc 11 2 0 lorikeet-heimdal 14 9 0 ppp 18 0 0 rsync38 3 0 samba2 0 0 samba-docs 0 0 0 -samba4 38 14 4 +samba4 38 16 4 samba_3_038 10 0 -smb-build28 5 0 -talloc 36 14 0 +smb-build29 5 0 +talloc 13 5 0 tdb 8 3 0
svn commit: samba r10857 - in branches/tmp/samba4_ldap_controls/source/lib/ldb: . common include ldb_ldap ldb_sqlite3 ldb_tdb modules
Author: idra Date: 2005-10-10 00:36:11 + (Mon, 10 Oct 2005) New Revision: 10857 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10857 Log: change ldb to use the new ldb_request interface internally this patch passes ldb's make test Added: branches/tmp/samba4_ldap_controls/source/lib/ldb/aclocal.m4 Modified: branches/tmp/samba4_ldap_controls/source/lib/ldb/common/ldb.c branches/tmp/samba4_ldap_controls/source/lib/ldb/common/ldb_modules.c branches/tmp/samba4_ldap_controls/source/lib/ldb/include/ldb.h branches/tmp/samba4_ldap_controls/source/lib/ldb/include/ldb_private.h branches/tmp/samba4_ldap_controls/source/lib/ldb/ldb_ldap/ldb_ldap.c branches/tmp/samba4_ldap_controls/source/lib/ldb/ldb_sqlite3/ldb_sqlite3.c branches/tmp/samba4_ldap_controls/source/lib/ldb/ldb_tdb/ldb_tdb.c branches/tmp/samba4_ldap_controls/source/lib/ldb/modules/ldb_map.c branches/tmp/samba4_ldap_controls/source/lib/ldb/modules/rdn_name.c branches/tmp/samba4_ldap_controls/source/lib/ldb/modules/schema.c branches/tmp/samba4_ldap_controls/source/lib/ldb/modules/skel.c branches/tmp/samba4_ldap_controls/source/lib/ldb/modules/timestamps.c Changeset: Sorry, the patch is too large (1271 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10857
svn commit: samba r10858 - in branches/tmp/samba4_ldap_controls/source: dsdb/samdb/ldb_modules ldap_server lib/ldb/ldb_ildap lib/ldb/modules
Author: idra Date: 2005-10-10 01:35:26 + (Mon, 10 Oct 2005) New Revision: 10858 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10858 Log: this should make samba4 happy with the new ldb api the tree compiles but unfortunately my make test fails on messaging_int() so this is untested (ldb's make test works so I'm confident this is ok anyway) Simo Modified: branches/tmp/samba4_ldap_controls/source/dsdb/samdb/ldb_modules/objectguid.c branches/tmp/samba4_ldap_controls/source/dsdb/samdb/ldb_modules/samldb.c branches/tmp/samba4_ldap_controls/source/ldap_server/ldap_simple_ldb.c branches/tmp/samba4_ldap_controls/source/lib/ldb/ldb_ildap/ldb_ildap.c branches/tmp/samba4_ldap_controls/source/lib/ldb/modules/ldb_map.c Changeset: Sorry, the patch is too large (299 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10858
