RE: [Samba] Domain problem...

2006-09-27 Thread Elvis Aaron Presley
Nobody knows any information or test for me? :(

Elvis

-Mensaje original-
De: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] En nombre de
Elvis Aaron Presley
Enviado el: martes, 26 de septiembre de 2006 14:04
Para: Lista Samba
Asunto: [Samba] Domain problem...


Hello all, This is the first time I write to the list. Sorry about my
english...

My Debian Sarge server was working perfectly with samba and winbind as a
normal client in a Domain enviroment. I was able to share folders on my
linux machine giving rights to the domain users. Everything was working
until one day in that it crashed for some reason I don't know. I didn't
touch anything of my config files (smb.conf,nsswitch.conf) so I suppose
it's ok. The problem is that now, I can't do wbinfo -u successfully.
It returns Error looking domain users, so I can't share directories
with domain users.

Enviroment info:

PDC: W2000 server (ip 192.168.1.102,netbios-name server32) with DNS
server
Debian: domain client (ip 192.168.1.249,netbios-name oracle) with DNS
server

Other clients in the network uses DNS1 192.168.1.102 and DNS2
192.168.1.249 ... I don't know if this info is relevant.

net rpc join -S server32 -U Administrador%pass returns Joined domain
RXN32. wbinfo -m returns RXN32 - is the netbios name of the domain
wbinfo -t returns checking the trust secret via RPC calls succeeded
wbinfo -u returns Error looking up domain users wbinfo -g returns
Error looking up domain groups

Samba version 3.0.22 on debian machine. And in the domain exist the user
oracle with password realpwd.

I've tried wbinfo --authenticate=oracle%fakepwd and return: 

plaintext password authentication failed
error code was NT_STATUS_NO_SUCH_USER (0xc064)
error messsage was: No such user
Could not authenticate user oracle%fakepwd with plaintext password
challenge/response password authentication failed error code was
NT_STATUS_WRONG_PASSWORD (0xc06a) error messsage was: Wrong Password
Could not authenticate user oracle with challenge/response

But if I try wbinfo --authenticate=oracle%realpwd it returns:

plaintext password authentication failed
error code was NT_STATUS_NO_SUCH_USER (0xc064)
error messsage was: No such user
Could not authenticate user oracle%realpwd with plaintext password
challenge/response password authentication succeeded

What? How is it possible? The user exist in the domain. I've tried
delete it and create it again and same result. I've tried with other
user... But same result.

How can this stop to work if I didn't change anything? Is possible that
it happenned after apt-get dist-upgrade?

This is the global part of my smb.conf but i supposse it's ok because it
was working and nothing changed:

[global]
workgroup = RXN32
security = DOMAIN
password server = server32
encrypt passwords = true
idmap uid = 1-2
idmap gid = 1-2
template shell = /bin/bash
winbind separator = +
netbios name = oracle

I googled a lot, but with no luck... :(

Thank for read this big text, and sorry if this message is at
incorrect list. If there is a more specific list for this kind of
issues, please tell me.

Thanks in advance and Regards.

Elvis


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Domain problem...

2006-09-27 Thread Henrik Zagerholm

Hello,

winbind enum users = yes
winbind enum groups = yes

also check that getent passwd shows domain users.

Cheers,
Henrik

27 sep 2006 kl. 09:23 skrev Elvis Aaron Presley:


Nobody knows any information or test for me? :(

Elvis

-Mensaje original-
De: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] En nombre de
Elvis Aaron Presley
Enviado el: martes, 26 de septiembre de 2006 14:04
Para: Lista Samba
Asunto: [Samba] Domain problem...


Hello all, This is the first time I write to the list. Sorry about my
english...

My Debian Sarge server was working perfectly with samba and winbind  
as a
normal client in a Domain enviroment. I was able to share folders  
on my
linux machine giving rights to the domain users. Everything was  
working
until one day in that it crashed for some reason I don't know. I  
didn't
touch anything of my config files (smb.conf,nsswitch.conf) so I  
suppose

it's ok. The problem is that now, I can't do wbinfo -u successfully.
It returns Error looking domain users, so I can't share directories
with domain users.

Enviroment info:

PDC: W2000 server (ip 192.168.1.102,netbios-name server32) with DNS
server
Debian: domain client (ip 192.168.1.249,netbios-name oracle) with DNS
server

Other clients in the network uses DNS1 192.168.1.102 and DNS2
192.168.1.249 ... I don't know if this info is relevant.

net rpc join -S server32 -U Administrador%pass returns Joined  
domain
RXN32. wbinfo -m returns RXN32 - is the netbios name of the  
domain
wbinfo -t returns checking the trust secret via RPC calls  
succeeded
wbinfo -u returns Error looking up domain users wbinfo -g  
returns

Error looking up domain groups

Samba version 3.0.22 on debian machine. And in the domain exist the  
user

oracle with password realpwd.

I've tried wbinfo --authenticate=oracle%fakepwd and return:

plaintext password authentication failed
error code was NT_STATUS_NO_SUCH_USER (0xc064)
error messsage was: No such user
Could not authenticate user oracle%fakepwd with plaintext password
challenge/response password authentication failed error code was
NT_STATUS_WRONG_PASSWORD (0xc06a) error messsage was: Wrong  
Password

Could not authenticate user oracle with challenge/response

But if I try wbinfo --authenticate=oracle%realpwd it returns:

plaintext password authentication failed
error code was NT_STATUS_NO_SUCH_USER (0xc064)
error messsage was: No such user
Could not authenticate user oracle%realpwd with plaintext password
challenge/response password authentication succeeded

What? How is it possible? The user exist in the domain. I've tried
delete it and create it again and same result. I've tried with other
user... But same result.

How can this stop to work if I didn't change anything? Is possible  
that

it happenned after apt-get dist-upgrade?

This is the global part of my smb.conf but i supposse it's ok  
because it

was working and nothing changed:

[global]
workgroup = RXN32
security = DOMAIN
password server = server32
encrypt passwords = true
idmap uid = 1-2
idmap gid = 1-2
template shell = /bin/bash
winbind separator = +
netbios name = oracle

I googled a lot, but with no luck... :(

Thank for read this big text, and sorry if this message is at
incorrect list. If there is a more specific list for this kind of
issues, please tell me.

Thanks in advance and Regards.

Elvis


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] ypbind

2006-09-27 Thread kuldeep

can any boby help me in ypbind.
I have made NIS server test.com
Now i want ypbind search test.com and add to nis client.
I am trying at client is
# ypbind -c -broadcast
No entry found.
Config file /etc/yp.conf is not ok.
I have added test.com in /etc/hosts.

further what i do help


Kuldeep


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: winbindd cause system hang

2006-09-27 Thread Superbiji

I found some user causes hang...
just doing ls -alh on her directory, raises winbind to 100%
and hang again

Please help

On 9/27/06, Superbiji [EMAIL PROTECTED] wrote:

Please help,
what other information should I include?

when hang strace w,
stuck on line: reading /var/.../windbind/pipe

On 9/26/06, Superbiji [EMAIL PROTECTED] wrote:
 Hi All,

 my os (Centos 4.3) connects to Windows directory using winbind
 everything works fine:

 ls -alh shows remote username and group
 getent passwd shows remote usernames

 until I run :
 getfacl -R /home/samba
 to backup whole acl

 after 1 minutes the system hang (typing w, ls, top with no response)
 but I can kill winbind and start it again, evrything back to normal


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Domain problem...

2006-09-27 Thread Elvis Aaron Presley
Hello, I've tried what you said and restarted samba and winbind... But
no success... :( After that, I re-joined to the domain, but the same
result... I see when I tried to rejoin to the domain in the PDC w2000
event log a 5722 event. This is the error message:

The session setup from the computer ORACLE failed to 
authenticate. The name of the account referenced in the 
security database is ORACLE$. The following error 
occurred: 
Access is denied.

But the user exist at the domain. ¿?

I see the log at /var/log/samba/log.winbindd with this:

[2006/09/27 11:39:50, 0] libads/kerberos.c:ads_kinit_password(164)
  kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot resolve
network address for KDC in requested realm
[2006/09/27 11:39:50, 1]
nsswitch/winbindd_ads.c:ads_cached_connection(109)
  ads_connect for domain RXN32 failed: Cannot resolve network address
for KDC in requested realm

The log at /var/log/samba/log.wb-RXN32 has:

[2006/09/27 12:07:04, 0] libsmb/credentials.c:creds_client_check(256)
  creds_client_check: credentials check failed.
[2006/09/27 12:07:04, 0]
rpc_client/cli_netlogon.c:rpccli_netlogon_sam_network_logon(898)
  rpccli_netlogon_sam_network_logon: credentials chain check failed
[2006/09/27 12:07:04, 0] libads/kerberos.c:ads_kinit_password(164)
  kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot resolve
network address for KDC in requested realm
[2006/09/27 12:07:04, 1]
nsswitch/winbindd_ads.c:ads_cached_connection(109)
  ads_connect for domain RXN32 failed: Cannot resolve network address
for KDC in requested realm


But I'm not using kerberos. In addition, this errors are present too in
other older dates, and the server was working fine at that dates.

What can I do? I need to share folder on my debian to domain users... :S

Elvis

-Mensaje original-
De: Henrik Zagerholm [mailto:[EMAIL PROTECTED] 
Enviado el: miércoles, 27 de septiembre de 2006 9:30
Para: Elvis Aaron Presley
CC: 'Lista Samba'
Asunto: Re: [Samba] Domain problem...


Hello,

winbind enum users = yes
winbind enum groups = yes

also check that getent passwd shows domain users.

Cheers,
Henrik

27 sep 2006 kl. 09:23 skrev Elvis Aaron Presley:

 Nobody knows any information or test for me? :(

 Elvis

 -Mensaje original-
 De: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] En nombre de 
 Elvis Aaron Presley Enviado el: martes, 26 de septiembre de 2006 14:04
 Para: Lista Samba
 Asunto: [Samba] Domain problem...


 Hello all, This is the first time I write to the list. Sorry about my 
 english...

 My Debian Sarge server was working perfectly with samba and winbind
 as a
 normal client in a Domain enviroment. I was able to share folders  
 on my
 linux machine giving rights to the domain users. Everything was  
 working
 until one day in that it crashed for some reason I don't know. I  
 didn't
 touch anything of my config files (smb.conf,nsswitch.conf) so I  
 suppose
 it's ok. The problem is that now, I can't do wbinfo -u successfully.
 It returns Error looking domain users, so I can't share directories
 with domain users.

 Enviroment info:

 PDC: W2000 server (ip 192.168.1.102,netbios-name server32) with DNS 
 server
 Debian: domain client (ip 192.168.1.249,netbios-name oracle) with DNS 
 server

 Other clients in the network uses DNS1 192.168.1.102 and DNS2 
 192.168.1.249 ... I don't know if this info is relevant.

 net rpc join -S server32 -U Administrador%pass returns Joined
 domain
 RXN32. wbinfo -m returns RXN32 - is the netbios name of the  
 domain
 wbinfo -t returns checking the trust secret via RPC calls  
 succeeded
 wbinfo -u returns Error looking up domain users wbinfo -g  
 returns
 Error looking up domain groups

 Samba version 3.0.22 on debian machine. And in the domain exist the
 user
 oracle with password realpwd.

 I've tried wbinfo --authenticate=oracle%fakepwd and return:

 plaintext password authentication failed
 error code was NT_STATUS_NO_SUCH_USER (0xc064)
 error messsage was: No such user
 Could not authenticate user oracle%fakepwd with plaintext password 
 challenge/response password authentication failed error code was 
 NT_STATUS_WRONG_PASSWORD (0xc06a) error messsage was: Wrong
 Password
 Could not authenticate user oracle with challenge/response

 But if I try wbinfo --authenticate=oracle%realpwd it returns:

 plaintext password authentication failed
 error code was NT_STATUS_NO_SUCH_USER (0xc064)
 error messsage was: No such user
 Could not authenticate user oracle%realpwd with plaintext password 
 challenge/response password authentication succeeded

 What? How is it possible? The user exist in the domain. I've tried

 delete it and create it again and same result. I've tried with other 
 user... But same result.

 How can this stop to work if I didn't change anything? Is possible
 that
 it happenned after apt-get dist-upgrade?

 This is the global part of my smb.conf but i supposse it's ok
 because it
 was working and nothing changed:

 [global]

[Samba] Big bug with vfs recycle causing bugs and frequent Delayed write failure

2006-09-27 Thread Eric PEYREMORTE

Hi,

I'm running samba 3.0.22 with 2000 and xp clients.
Before upgrading to 3.0.22, i had vfs recycle module running like a charm.
But since i upgraded, i have several errors delayed write failure on 
every systems 2000
and XP(every 10 seconds), and netscape 7 can't start anymore! In fact, 
it seems to have a problem

with its lock file.So i tried veto oplocks = *.lock but still doesn't run.
Removing all recycle options in the smb.conf fix the problem.

Here is my smb.conf recycle params :
   #vfs object = recycle
   #recycle:repository = ../../../recycle/%U
   #recycle:versions=yes
   #recycle:touch_mtime = true
   #recycle:maxsize= 4000
   #recycle:exclude= cookies.* ~$* quotas bookmarks* 
prefs.js.moztmp XUL.mfl lmos.dat OWNER.LOK


cheers,
Eric PEYREMORTE


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Critical Bug in Samba 2.0.23c-1 Debian ?

2006-09-27 Thread Manuel Erber

After an update to the new Samba-Version, samba can not interpered the
variable %D and %m that I have set in ldap as profilpath. Samba create
an directroy %D\%m. Can somebody help me please.

With friendly greetings
Manuel Erber

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Domain problem... (other way)

2006-09-27 Thread Elvis Aaron Presley
Ok, I see there is no solution for this strange situation... Now, I want
to reinstall samba and winbind.

I'll delete the user and the computer at the domain.
I'll uninstall samba and winbind using apt-get on my debian
How can I deatach the machine from the domain on linux? Is there
something more to do to start again?

Elvis

-Mensaje original-
De: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] En nombre de
Elvis Aaron Presley
Enviado el: miércoles, 27 de septiembre de 2006 12:59
Para: 'Lista Samba'
Asunto: RE: [Samba] Domain problem...


Hello, I've tried what you said and restarted samba and winbind... But
no success... :( After that, I re-joined to the domain, but the same
result... I see when I tried to rejoin to the domain in the PDC w2000
event log a 5722 event. This is the error message:

The session setup from the computer ORACLE failed to 
authenticate. The name of the account referenced in the 
security database is ORACLE$. The following error 
occurred: 
Access is denied.

But the user exist at the domain. ¿?

I see the log at /var/log/samba/log.winbindd with this:

[2006/09/27 11:39:50, 0] libads/kerberos.c:ads_kinit_password(164)
  kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot resolve
network address for KDC in requested realm [2006/09/27 11:39:50, 1]
nsswitch/winbindd_ads.c:ads_cached_connection(109)
  ads_connect for domain RXN32 failed: Cannot resolve network address
for KDC in requested realm

The log at /var/log/samba/log.wb-RXN32 has:

[2006/09/27 12:07:04, 0] libsmb/credentials.c:creds_client_check(256)
  creds_client_check: credentials check failed.
[2006/09/27 12:07:04, 0]
rpc_client/cli_netlogon.c:rpccli_netlogon_sam_network_logon(898)
  rpccli_netlogon_sam_network_logon: credentials chain check failed
[2006/09/27 12:07:04, 0] libads/kerberos.c:ads_kinit_password(164)
  kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot resolve
network address for KDC in requested realm [2006/09/27 12:07:04, 1]
nsswitch/winbindd_ads.c:ads_cached_connection(109)
  ads_connect for domain RXN32 failed: Cannot resolve network address
for KDC in requested realm


But I'm not using kerberos. In addition, this errors are present too in
other older dates, and the server was working fine at that dates.

What can I do? I need to share folder on my debian to domain users... :S

Elvis

-Mensaje original-
De: Henrik Zagerholm [mailto:[EMAIL PROTECTED] 
Enviado el: miércoles, 27 de septiembre de 2006 9:30
Para: Elvis Aaron Presley
CC: 'Lista Samba'
Asunto: Re: [Samba] Domain problem...


Hello,

winbind enum users = yes
winbind enum groups = yes

also check that getent passwd shows domain users.

Cheers,
Henrik

27 sep 2006 kl. 09:23 skrev Elvis Aaron Presley:

 Nobody knows any information or test for me? :(

 Elvis

 -Mensaje original-
 De: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] En nombre de
 Elvis Aaron Presley Enviado el: martes, 26 de septiembre de 2006 14:04
 Para: Lista Samba
 Asunto: [Samba] Domain problem...


 Hello all, This is the first time I write to the list. Sorry about my
 english...

 My Debian Sarge server was working perfectly with samba and winbind as

 a normal client in a Domain enviroment. I was able to share folders
 on my
 linux machine giving rights to the domain users. Everything was  
 working
 until one day in that it crashed for some reason I don't know. I  
 didn't
 touch anything of my config files (smb.conf,nsswitch.conf) so I  
 suppose
 it's ok. The problem is that now, I can't do wbinfo -u successfully.
 It returns Error looking domain users, so I can't share directories
 with domain users.

 Enviroment info:

 PDC: W2000 server (ip 192.168.1.102,netbios-name server32) with DNS
 server
 Debian: domain client (ip 192.168.1.249,netbios-name oracle) with DNS 
 server

 Other clients in the network uses DNS1 192.168.1.102 and DNS2
 192.168.1.249 ... I don't know if this info is relevant.

 net rpc join -S server32 -U Administrador%pass returns Joined 
 domain RXN32. wbinfo -m returns RXN32 - is the netbios name of 
 the
 domain
 wbinfo -t returns checking the trust secret via RPC calls  
 succeeded
 wbinfo -u returns Error looking up domain users wbinfo -g  
 returns
 Error looking up domain groups

 Samba version 3.0.22 on debian machine. And in the domain exist the 
 user oracle with password realpwd.

 I've tried wbinfo --authenticate=oracle%fakepwd and return:

 plaintext password authentication failed
 error code was NT_STATUS_NO_SUCH_USER (0xc064)
 error messsage was: No such user
 Could not authenticate user oracle%fakepwd with plaintext password
 challenge/response password authentication failed error code was 
 NT_STATUS_WRONG_PASSWORD (0xc06a) error messsage was: Wrong
 Password
 Could not authenticate user oracle with challenge/response

 But if I try wbinfo --authenticate=oracle%realpwd it returns:

 plaintext password authentication failed
 error code was NT_STATUS_NO_SUCH_USER (0xc064)
 error messsage was: No 

Re: [Samba] Critical Bug in Samba 2.0.23c-1 Debian ?

2006-09-27 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Manuel Erber wrote:
 After an update to the new Samba-Version, samba can not interpered the
 variable %D and %m that I have set in ldap as profilpath. Samba create
 an directroy %D\%m. Can somebody help me please.

passdb expand explicit = yes




cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFGnLuIR7qMdg1EfYRApYJAKCEVh41APcQKw/UvDCualcG5JXl7ACg8+S0
vWVPYBRM8kUUdiMUwMmXxuk=
=DSOY
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cant correctly join windows 2K3 domain with Gentoo

2006-09-27 Thread Aaron Kincer

Have you performed a net ads join command yet?

Guillermo Gutierrez wrote:

Help me please, I am getting desparate.
I have tried to the follow the following how-to for joining a Gentoo
Linux samba server to a windows 2003 domain and cant seem to get the the
getent passwd command to any domain users.

Here is the document that I was following:
http://gentoo-wiki.com/HOWTO_Adding_a_Samba_Server_into_an_existing_AD_D
omain

Here is my smb.conf as well:

# Global Configurations
[global]
# Netbios Identification
netbios name = Solidus
workgroup = marketscan
realm = MARKETSCAN.COM
server string = %h, Gentoo Samba Server %v

# Logging Options
log file = /var/log/samba/log.%m
max log size = 50
log level = 5

# smb password backend
# commented out to see if changing it to ldapsam works any
better
 ; passdb backend = tdbsam
 passdb backend = ldapsam:ldap://10.11.3.177

# Winbind, Domain Options
password server = *
encrypt passwords = yes
security = ads
client signing = yes
template homedir = /home/MARKETSCAN/%U
template shell = /bin/bash
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
idmap uid = 1-2
idmap gid = 1-2

# Network Settings
socket options = TCP_NODELAY
interfaces = eth0 lo
bind interfaces only = yes
socket address = 10.11.3.210

# Master Browser options
local master = no
os level = 2

# WINS and DNS Options
wins server = 10.11.3.177
dns proxy = yes

# Share level configuration settings
#
# Public share
[public]
comment = Public Volume on %h
path = /home/samba/public
valid users = +users
writeable = yes
public = yes
force create mode = 0766
force directory mode = 0766
guest ok = no

# Home directory for valid users.
[homes]
comment = Home Folder for %u
valid users = %S
browseable = no
writeable = yes
force create mode = 0700
force directory mode = 0700

Please do point out any and all flaws in my config or the document that
I mentioned above.

Thanks,

Guillermo Gutierrez
Network Administrator
Market Scan Information Systems, Inc
(818) 575-2000 x2017
[EMAIL PROTECTED]

  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Intermittent ACCESS DENIED

2006-09-27 Thread Steven Cardinal

In a follow-up to a previous post a couple weeks back, we've implemented a
Samba 3.0.20 (Suse packages on 10.0 - recompiled to include idmap_rid)
server to replace the Windows 2000 file server in our Win2003 Active
Directory. For the most part things have been going well, but occassionally
people will get access denied errors to things that they were accessing just
fine minutes before. With file shares, they can access the share via UNC
and, if they unmap and remap the share, it works. The recommendation was to
increase the log level to 10. I was finally able to capture a log while
someone was having a problem. In this instance they were getting access
denied to the printers.

To date, I've only seen these errors on Windows 2000 workstations and not
our XP workstations, but since this is so intermittent and we have only a
few XP boxes, I'm not sure that is signficant, but I figured I'd throw it
out there anyway. Here's my config (with the names changed to protect the
innocent)

[global]
   unix charset = LOCALE
   workgroup = MYDOMAIN
   realm = MYDOMAIN.INT
   server string = Production File Server 03
   security = ADS
   allow trusted domains = No
   enable privileges = Yes
   username map = /etc/samba/smbusers
   log level = 10
   log file = /var/log/samba/%m
   max log size = 50
   deadtime = 15
   socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192
SO_SNDBUF=8192
   printcap name = cups
   wins server = 10.0.0.10
   ldap ssl = no
   idmap backend = idmap_rid:MYDOMAIN=1-5
   idmap uid = 1-5
   idmap gid = 1-5
   template shell = /bin/bash
   winbind separator = +
   cups options = raw

[Software]
   comment = Adheris Software
   path = /srv/public/software
   valid users = @MYDOMAIN+grpIT, @MYDOMAIN+grpDevelopers
   admin users = @MYDOMAIN+Domain Admins
   read only = No
   create mask = 0664
   directory mask = 0775
   dos filemode = Yes

[Home$]
   path = /srv/private/home
   valid users = @MYDOMAIN+Domain Users
   admin users = @MYDOMAIN+Domain Admins
   read only = No
   create mask = 0660
   directory mask = 0770
   dos filemode = Yes

[Users]
   comment = Adheris User Data
   path = /srv/public/users
   valid users = @MYDOMAIN+Domain Users
   admin users = @MYDOMAIN+Domain Admins
   read only = No
   create mask = 02664
   directory mask = 02775
   dos filemode = Yes

[Printers]
   comment = All Printers
   path = /var/tmp
   create mask = 0600
   printable = Yes
   browseable = No

[print$]
   comment = Printer Drivers
   path = /var/lib/samba/drivers
   write list = root, @MYDOMAIN+Domain Admins

And here is the debug information. The thing that stands out to me is the
request for spoolss that fails. We do not have the iptables firewall
enabled, but we seem to be getting a pipe issue perhaps? I'm weak on the
programming/debugging side but take directions well if anyone has some
suggestions. Thanks

[2006/09/26 16:19:51, 10]
lib/util_sock.c:read_smb_length_return_keepalive(615)
 got smb length of 49
[2006/09/26 16:19:51, 6] smbd/process.c:process_smb(1113)
 got message type 0x0 of len 0x31
[2006/09/26 16:19:51, 3] smbd/process.c:process_smb(1114)
 Transaction 1145 of length 53
[2006/09/26 16:19:51, 5] lib/util.c:show_msg(454)
[2006/09/26 16:19:51, 5] lib/util.c:show_msg(464)
 size=49
 smb_com=0x2b
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=24
 smb_flg2=49219
 smb_tid=65535
 smb_pid=65279
 smb_uid=0
 smb_mid=65534
 smt_wct=1
 smb_vwv[ 0]=1 (0x1)
 smb_bcc=12
[2006/09/26 16:19:51, 10] lib/util.c:dump_data(2053)
 [000] 4A 6C 4A 6D 49 68 43 6C  42 73 72 00  JlJmIhCl Bsr.
[2006/09/26 16:19:51, 3] smbd/process.c:switch_message(900)
 switch message SMBecho (pid 23178) conn 0x0
[2006/09/26 16:19:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/09/26 16:19:51, 5] auth/auth_util.c:debug_nt_user_token(452)
 NT user token: (NULL)
[2006/09/26 16:19:51, 5] auth/auth_util.c:debug_unix_user_token(473)
 UNIX token of user 0
 Primary group is 0 and contains 0 supplementary groups
[2006/09/26 16:19:51, 5] smbd/uid.c:change_to_root_user(319)
 change_to_root_user: now uid=(0,0) gid=(0,0)
[2006/09/26 16:19:51, 5] lib/util.c:show_msg(454)
[2006/09/26 16:19:51, 5] lib/util.c:show_msg(464)
 size=49
 smb_com=0x2b
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=136
 smb_flg2=51201
 smb_tid=65535
 smb_pid=65279
 smb_uid=0
 smb_mid=65534
 smt_wct=1
 smb_vwv[ 0]=1 (0x1)
 smb_bcc=12
[2006/09/26 16:19:51, 10] lib/util.c:dump_data(2053)
 [000] 4A 6C 4A 6D 49 68 43 6C  42 73 72 00  JlJmIhCl Bsr.
[2006/09/26 16:19:51, 3] smbd/reply.c:reply_echo(3499)
 echo 1 times
[2006/09/26 16:19:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/09/26 16:19:51, 5] auth/auth_util.c:debug_nt_user_token(452)
 NT user token: (NULL)
[2006/09/26 16:19:51, 5] auth/auth_util.c:debug_unix_user_token(473)
 UNIX token of user 0
 Primary group is 0 and contains 0 supplementary groups
[2006/09/26 16:19:51, 5] 

Re: [Samba] Critical Bug in Samba 2.0.23c-1 Debian ?

2006-09-27 Thread Manuel Erber

Gerald (Jerry) Carter schrieb:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Manuel Erber wrote:
  

After an update to the new Samba-Version, samba can not interpered the
variable %D and %m that I have set in ldap as profilpath. Samba create
an directroy %D\%m. Can somebody help me please.



passdb expand explicit = yes




cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFGnLuIR7qMdg1EfYRApYJAKCEVh41APcQKw/UvDCualcG5JXl7ACg8+S0
vWVPYBRM8kUUdiMUwMmXxuk=
=DSOY
-END PGP SIGNATURE-
  

Thanks that fix the problem. Why has the defaults changed?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Cant correctly join windows 2K3 domain with Gentoo

2006-09-27 Thread Guillermo Gutierrez
Well...eventually I continued on to the net ads join command but I
still couldn't get any domain users or groups to show.
After that I started up winbind and a few minutes later I saw users and
groups.

Even though I can see domain info usingthe getent passwd command I
still cannot log in as a domain user.

-Original Message-
From: Aaron Kincer [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 27, 2006 6:21 AM
To: Guillermo Gutierrez
Cc: samba@lists.samba.org
Subject: Re: [Samba] Cant correctly join windows 2K3 domain with Gentoo

Have you performed a net ads join command yet?

Guillermo Gutierrez wrote:
 Help me please, I am getting desparate.
 I have tried to the follow the following how-to for joining a Gentoo 
 Linux samba server to a windows 2003 domain and cant seem to get the 
 the getent passwd command to any domain users.

 Here is the document that I was following:
 http://gentoo-wiki.com/HOWTO_Adding_a_Samba_Server_into_an_existing_AD
 _D
 omain

 Here is my smb.conf as well:

 # Global Configurations
 [global]
 # Netbios Identification
 netbios name = Solidus
 workgroup = marketscan
 realm = MARKETSCAN.COM
 server string = %h, Gentoo Samba Server %v

 # Logging Options
 log file = /var/log/samba/log.%m
 max log size = 50
 log level = 5

 # smb password backend
 # commented out to see if changing it to ldapsam works any 
 better
; passdb backend = tdbsam
passdb backend = ldapsam:ldap://10.11.3.177

 # Winbind, Domain Options
 password server = *
 encrypt passwords = yes
 security = ads
 client signing = yes
 template homedir = /home/MARKETSCAN/%U
 template shell = /bin/bash
 winbind enum users = yes
 winbind enum groups = yes
 winbind use default domain = yes
 idmap uid = 1-2
 idmap gid = 1-2

 # Network Settings
 socket options = TCP_NODELAY
 interfaces = eth0 lo
 bind interfaces only = yes
 socket address = 10.11.3.210

 # Master Browser options
 local master = no
 os level = 2

 # WINS and DNS Options
 wins server = 10.11.3.177
 dns proxy = yes

 # Share level configuration settings
 #
 # Public share
 [public]
 comment = Public Volume on %h
 path = /home/samba/public
 valid users = +users
 writeable = yes
 public = yes
 force create mode = 0766
 force directory mode = 0766
 guest ok = no

 # Home directory for valid users.
 [homes]
 comment = Home Folder for %u
 valid users = %S
 browseable = no
 writeable = yes
 force create mode = 0700
 force directory mode = 0700

 Please do point out any and all flaws in my config or the document 
 that I mentioned above.

 Thanks,

 Guillermo Gutierrez
 Network Administrator
 Market Scan Information Systems, Inc
 (818) 575-2000 x2017
 [EMAIL PROTECTED]

   

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Domain problem... (other way)

2006-09-27 Thread Henrik Zagerholm

I would remove any computer accounts in AD.
You think should have used net ad leave before uninstall.

Do you use net rpc join or net ads join?

27 sep 2006 kl. 14:44 skrev Elvis Aaron Presley:

Ok, I see there is no solution for this strange situation... Now, I  
want

to reinstall samba and winbind.

I'll delete the user and the computer at the domain.
I'll uninstall samba and winbind using apt-get on my debian
How can I deatach the machine from the domain on linux? Is there
something more to do to start again?

Elvis

-Mensaje original-
De: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] En nombre de
Elvis Aaron Presley
Enviado el: miércoles, 27 de septiembre de 2006 12:59
Para: 'Lista Samba'
Asunto: RE: [Samba] Domain problem...


Hello, I've tried what you said and restarted samba and winbind... But
no success... :( After that, I re-joined to the domain, but the same
result... I see when I tried to rejoin to the domain in the PDC w2000
event log a 5722 event. This is the error message:

The session setup from the computer ORACLE failed to
authenticate. The name of the account referenced in the
security database is ORACLE$. The following error
occurred:
Access is denied.

But the user exist at the domain. ¿?

I see the log at /var/log/samba/log.winbindd with this:

[2006/09/27 11:39:50, 0] libads/kerberos.c:ads_kinit_password(164)
  kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot resolve
network address for KDC in requested realm [2006/09/27 11:39:50, 1]
nsswitch/winbindd_ads.c:ads_cached_connection(109)
  ads_connect for domain RXN32 failed: Cannot resolve network address
for KDC in requested realm

The log at /var/log/samba/log.wb-RXN32 has:

[2006/09/27 12:07:04, 0] libsmb/credentials.c:creds_client_check(256)
  creds_client_check: credentials check failed.
[2006/09/27 12:07:04, 0]
rpc_client/cli_netlogon.c:rpccli_netlogon_sam_network_logon(898)
  rpccli_netlogon_sam_network_logon: credentials chain check failed
[2006/09/27 12:07:04, 0] libads/kerberos.c:ads_kinit_password(164)
  kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot resolve
network address for KDC in requested realm [2006/09/27 12:07:04, 1]
nsswitch/winbindd_ads.c:ads_cached_connection(109)
  ads_connect for domain RXN32 failed: Cannot resolve network address
for KDC in requested realm


But I'm not using kerberos. In addition, this errors are present  
too in

other older dates, and the server was working fine at that dates.

What can I do? I need to share folder on my debian to domain  
users... :S


Elvis

-Mensaje original-
De: Henrik Zagerholm [mailto:[EMAIL PROTECTED]
Enviado el: miércoles, 27 de septiembre de 2006 9:30
Para: Elvis Aaron Presley
CC: 'Lista Samba'
Asunto: Re: [Samba] Domain problem...


Hello,

winbind enum users = yes
winbind enum groups = yes

also check that getent passwd shows domain users.

Cheers,
Henrik

27 sep 2006 kl. 09:23 skrev Elvis Aaron Presley:


Nobody knows any information or test for me? :(

Elvis

-Mensaje original-
De: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] En nombre de
Elvis Aaron Presley Enviado el: martes, 26 de septiembre de 2006  
14:04

Para: Lista Samba
Asunto: [Samba] Domain problem...


Hello all, This is the first time I write to the list. Sorry about my
english...

My Debian Sarge server was working perfectly with samba and  
winbind as



a normal client in a Domain enviroment. I was able to share folders
on my
linux machine giving rights to the domain users. Everything was
working
until one day in that it crashed for some reason I don't know. I
didn't
touch anything of my config files (smb.conf,nsswitch.conf) so I
suppose
it's ok. The problem is that now, I can't do wbinfo -u  
successfully.

It returns Error looking domain users, so I can't share directories
with domain users.

Enviroment info:

PDC: W2000 server (ip 192.168.1.102,netbios-name server32) with DNS
server
Debian: domain client (ip 192.168.1.249,netbios-name oracle) with DNS
server

Other clients in the network uses DNS1 192.168.1.102 and DNS2
192.168.1.249 ... I don't know if this info is relevant.

net rpc join -S server32 -U Administrador%pass returns Joined
domain RXN32. wbinfo -m returns RXN32 - is the netbios name of
the
domain
wbinfo -t returns checking the trust secret via RPC calls
succeeded
wbinfo -u returns Error looking up domain users wbinfo -g
returns
Error looking up domain groups

Samba version 3.0.22 on debian machine. And in the domain exist the
user oracle with password realpwd.

I've tried wbinfo --authenticate=oracle%fakepwd and return:

plaintext password authentication failed
error code was NT_STATUS_NO_SUCH_USER (0xc064)
error messsage was: No such user
Could not authenticate user oracle%fakepwd with plaintext password
challenge/response password authentication failed error code was
NT_STATUS_WRONG_PASSWORD (0xc06a) error messsage was: Wrong
Password
Could not authenticate user oracle with challenge/response

But if I try wbinfo 

RE: [Samba] Domain problem... (other way)

2006-09-27 Thread Elvis Aaron Presley
I used net rpc join -S server32 -U Administrador to add the linux
machine to the domain. The net ad leave is for the kerberos method if
I'm not in a mistake.

Do you mean remove all computer accounts at the domain server?
!!??!?!?!!??!?

Elvis

-Mensaje original-
De: Henrik Zagerholm [mailto:[EMAIL PROTECTED] 
Enviado el: miércoles, 27 de septiembre de 2006 15:40
Para: Elvis Aaron Presley
CC: 'Lista Samba'
Asunto: Re: [Samba] Domain problem... (other way)


I would remove any computer accounts in AD.
You think should have used net ad leave before uninstall.

Do you use net rpc join or net ads join?

27 sep 2006 kl. 14:44 skrev Elvis Aaron Presley:

 Ok, I see there is no solution for this strange situation... Now, I
 want
 to reinstall samba and winbind.

 I'll delete the user and the computer at the domain.
 I'll uninstall samba and winbind using apt-get on my debian How can I 
 deatach the machine from the domain on linux? Is there something more 
 to do to start again?

 Elvis

 -Mensaje original-
 De: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] En nombre de 
 Elvis Aaron Presley Enviado el: miércoles, 27 de septiembre de 2006 
 12:59
 Para: 'Lista Samba'
 Asunto: RE: [Samba] Domain problem...


 Hello, I've tried what you said and restarted samba and winbind... But

 no success... :( After that, I re-joined to the domain, but the same 
 result... I see when I tried to rejoin to the domain in the PDC w2000 
 event log a 5722 event. This is the error message:

 The session setup from the computer ORACLE failed to authenticate. The

 name of the account referenced in the security database is ORACLE$. 
 The following error
 occurred:
 Access is denied.

 But the user exist at the domain. ¿?

 I see the log at /var/log/samba/log.winbindd with this:

 [2006/09/27 11:39:50, 0] libads/kerberos.c:ads_kinit_password(164)
   kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot resolve 
 network address for KDC in requested realm [2006/09/27 11:39:50, 1]
 nsswitch/winbindd_ads.c:ads_cached_connection(109)
   ads_connect for domain RXN32 failed: Cannot resolve network address 
 for KDC in requested realm

 The log at /var/log/samba/log.wb-RXN32 has:

 [2006/09/27 12:07:04, 0] libsmb/credentials.c:creds_client_check(256)
   creds_client_check: credentials check failed.
 [2006/09/27 12:07:04, 0]
 rpc_client/cli_netlogon.c:rpccli_netlogon_sam_network_logon(898)
   rpccli_netlogon_sam_network_logon: credentials chain check failed 
 [2006/09/27 12:07:04, 0] libads/kerberos.c:ads_kinit_password(164)
   kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot resolve 
 network address for KDC in requested realm [2006/09/27 12:07:04, 1]
 nsswitch/winbindd_ads.c:ads_cached_connection(109)
   ads_connect for domain RXN32 failed: Cannot resolve network address 
 for KDC in requested realm


 But I'm not using kerberos. In addition, this errors are present
 too in
 other older dates, and the server was working fine at that dates.

 What can I do? I need to share folder on my debian to domain
 users... :S

 Elvis

 -Mensaje original-
 De: Henrik Zagerholm [mailto:[EMAIL PROTECTED]
 Enviado el: miércoles, 27 de septiembre de 2006 9:30
 Para: Elvis Aaron Presley
 CC: 'Lista Samba'
 Asunto: Re: [Samba] Domain problem...


 Hello,

 winbind enum users = yes
 winbind enum groups = yes

 also check that getent passwd shows domain users.

 Cheers,
 Henrik

 27 sep 2006 kl. 09:23 skrev Elvis Aaron Presley:

 Nobody knows any information or test for me? :(

 Elvis

 -Mensaje original-
 De: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] En nombre de 
 Elvis Aaron Presley Enviado el: martes, 26 de septiembre de 2006
 14:04
 Para: Lista Samba
 Asunto: [Samba] Domain problem...


 Hello all, This is the first time I write to the list. Sorry about my

 english...

 My Debian Sarge server was working perfectly with samba and
 winbind as

 a normal client in a Domain enviroment. I was able to share folders 
 on my linux machine giving rights to the domain users. Everything was
 working
 until one day in that it crashed for some reason I don't know. I
 didn't
 touch anything of my config files (smb.conf,nsswitch.conf) so I
 suppose
 it's ok. The problem is that now, I can't do wbinfo -u  
 successfully.
 It returns Error looking domain users, so I can't share directories
 with domain users.

 Enviroment info:

 PDC: W2000 server (ip 192.168.1.102,netbios-name server32) with DNS 
 server
 Debian: domain client (ip 192.168.1.249,netbios-name oracle) with DNS

 server

 Other clients in the network uses DNS1 192.168.1.102 and DNS2 
 192.168.1.249 ... I don't know if this info is relevant.

 net rpc join -S server32 -U Administrador%pass returns Joined 
 domain RXN32. wbinfo -m returns RXN32 - is the netbios name of 
 the domain
 wbinfo -t returns checking the trust secret via RPC calls
 succeeded
 wbinfo -u returns Error looking up domain users wbinfo -g
 returns
 Error looking up domain groups

 Samba version 

Re: [Samba] Cant correctly join windows 2K3 domain with Gentoo

2006-09-27 Thread Aaron Kincer
What are you trying to log in to? Do you mean connect to a share or 
log in to the samba server itself on a shell?


Guillermo Gutierrez wrote:

Well...eventually I continued on to the net ads join command but I
still couldn't get any domain users or groups to show.
After that I started up winbind and a few minutes later I saw users and
groups.

Even though I can see domain info usingthe getent passwd command I
still cannot log in as a domain user.

-Original Message-
From: Aaron Kincer [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 27, 2006 6:21 AM

To: Guillermo Gutierrez
Cc: samba@lists.samba.org
Subject: Re: [Samba] Cant correctly join windows 2K3 domain with Gentoo

Have you performed a net ads join command yet?

Guillermo Gutierrez wrote:
  

Help me please, I am getting desparate.
I have tried to the follow the following how-to for joining a Gentoo 
Linux samba server to a windows 2003 domain and cant seem to get the 
the getent passwd command to any domain users.


Here is the document that I was following:
http://gentoo-wiki.com/HOWTO_Adding_a_Samba_Server_into_an_existing_AD
_D
omain

Here is my smb.conf as well:

# Global Configurations
[global]
# Netbios Identification
netbios name = Solidus
workgroup = marketscan
realm = MARKETSCAN.COM
server string = %h, Gentoo Samba Server %v

# Logging Options
log file = /var/log/samba/log.%m
max log size = 50
log level = 5

# smb password backend
# commented out to see if changing it to ldapsam works any 
better

 ; passdb backend = tdbsam
 passdb backend = ldapsam:ldap://10.11.3.177

# Winbind, Domain Options
password server = *
encrypt passwords = yes
security = ads
client signing = yes
template homedir = /home/MARKETSCAN/%U
template shell = /bin/bash
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
idmap uid = 1-2
idmap gid = 1-2

# Network Settings
socket options = TCP_NODELAY
interfaces = eth0 lo
bind interfaces only = yes
socket address = 10.11.3.210

# Master Browser options
local master = no
os level = 2

# WINS and DNS Options
wins server = 10.11.3.177
dns proxy = yes

# Share level configuration settings
#
# Public share
[public]
comment = Public Volume on %h
path = /home/samba/public
valid users = +users
writeable = yes
public = yes
force create mode = 0766
force directory mode = 0766
guest ok = no

# Home directory for valid users.
[homes]
comment = Home Folder for %u
valid users = %S
browseable = no
writeable = yes
force create mode = 0700
force directory mode = 0700

Please do point out any and all flaws in my config or the document 
that I mentioned above.


Thanks,

Guillermo Gutierrez
Network Administrator
Market Scan Information Systems, Inc
(818) 575-2000 x2017
[EMAIL PROTECTED]

  




  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Truncated username error?

2006-09-27 Thread Adam Huffman

I'm seeing an odd problem when a user here tries to edit images on a
3.0.10 Samba server running on a Centos 4.4 machine.

There is a couldn't find service error, but the username given is only
seven characters instead of the eight required.  

The error occurs specifically when trying to Save As in Photoshop, which
itself complains that the disk is full, even though it isn't.

Save As works with (for instance) Powerpoint, so there doesn't seem to
be anything wrong with the share itself.

I'd be grateful for any suggestions.

Adam


pgpIcOUp2FhRT.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problems with printing

2006-09-27 Thread Bartosz Wegrzyn - maillists
Hello,

I set samba using this config:

[global]

workgroup = MYGROUP
server string = Samba Server
printcap name = /etc/printcap
load printers = yes
printing = cups
cups options = raw

#guest account = nobody


printer admin = blwegrzyn root

log file = /var/log/samba/%m.log
max log size = 50

security = user
dns proxy = no

[homes]
   comment = Home Directories
   browseable = no
   writable = yes


[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   guest ok = yes
   writable = no
   printable = yes


[print$]
path = /data/printer
guest ok = yes
browseable = yes
read only = yes
write list = blwegrzyn root wegrzyn
create mask = 0644
directory mask = 0755

[data]
path = /data
valid users = blwegrzyn wegrzyn
read only = No


I added users blwegrzyn root and wegrzyn using smbpasswd -a
tool. I can connect to server and browse printers.

When I try to add drivers through windows gui by connecting to samba
server \\server and printers and faxes I got errror saying
that the location does not have correct drivers for the printer.
I used exacly same config with fedora2 and it worked great.
Now I am using fedora 4.
I can access data share without any problems.

When I access shares I see also this error:
[2006/09/24 12:14:29, 0] rpc_server/srv_pipe.c:api_pipe_bind_req(993)
  api_pipe_bind_req: unknown auth type 9 requested.

in samba log file

I am able to add printers , but I cannot add drivers using print$ share. I
have to use regular windows wizard and add printers manually.

Now, problem,
When I try to print to this printers it takes very long.
About 5-7 minutes.

When I do capture on samba server I see traffic on 445 for that time.

Any ideas what am I doing wrong.

Samba version:
samba-3.0.14a-2
samba-common-3.0.14a-2
samba-swat-3.0.14a-2
system-config-samba-1.2.31-1
samba-client-3.0.14a-2



I tried also to upgrade to latest version, but no luck
same problems


Thx





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cant correctly join windows 2K3 domain with Gentoo

2006-09-27 Thread Aaron Kincer

In case this helps someone else, I'm sending this back to the list:

Gotcha. I'm not immediately aware of why you would want to do this 
unless you are providing shell-based services and want a single sign-on 
for that in addition to Active Directory accounts. I've never tried 
that, so maybe someone here will want to give you more info. I just 
tried logging into my samba server using a domain account and it wasn't 
very cooperative. I tried using the short name (just the username) and 
got an access denied. When I used the domainname+username, an 
interesting thing happened. A directory under /home/domainname/ was 
created for the user, but no login occurred.


I did find this webpage that seems to claim to offer what you need:

http://weblog.bignerdranch.com/?p=6

Hope that helps.

Guillermo Gutierrez wrote:

Well...eventually I continued on to the net ads join command but I
still couldn't get any domain users or groups to show.
After that I started up winbind and a few minutes later I saw users and
groups.

Even though I can see domain info usingthe getent passwd command I
still cannot log in as a domain user.

-Original Message-
From: Aaron Kincer [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 27, 2006 6:21 AM

To: Guillermo Gutierrez
Cc: samba@lists.samba.org
Subject: Re: [Samba] Cant correctly join windows 2K3 domain with Gentoo

Have you performed a net ads join command yet?

Guillermo Gutierrez wrote:
  

Help me please, I am getting desparate.
I have tried to the follow the following how-to for joining a Gentoo 
Linux samba server to a windows 2003 domain and cant seem to get the 
the getent passwd command to any domain users.


Here is the document that I was following:
http://gentoo-wiki.com/HOWTO_Adding_a_Samba_Server_into_an_existing_AD
_D
omain

Here is my smb.conf as well:

# Global Configurations
[global]
# Netbios Identification
netbios name = Solidus
workgroup = marketscan
realm = MARKETSCAN.COM
server string = %h, Gentoo Samba Server %v

# Logging Options
log file = /var/log/samba/log.%m
max log size = 50
log level = 5

# smb password backend
# commented out to see if changing it to ldapsam works any 
better

 ; passdb backend = tdbsam
 passdb backend = ldapsam:ldap://10.11.3.177

# Winbind, Domain Options
password server = *
encrypt passwords = yes
security = ads
client signing = yes
template homedir = /home/MARKETSCAN/%U
template shell = /bin/bash
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
idmap uid = 1-2
idmap gid = 1-2

# Network Settings
socket options = TCP_NODELAY
interfaces = eth0 lo
bind interfaces only = yes
socket address = 10.11.3.210

# Master Browser options
local master = no
os level = 2

# WINS and DNS Options
wins server = 10.11.3.177
dns proxy = yes

# Share level configuration settings
#
# Public share
[public]
comment = Public Volume on %h
path = /home/samba/public
valid users = +users
writeable = yes
public = yes
force create mode = 0766
force directory mode = 0766
guest ok = no

# Home directory for valid users.
[homes]
comment = Home Folder for %u
valid users = %S
browseable = no
writeable = yes
force create mode = 0700
force directory mode = 0700

Please do point out any and all flaws in my config or the document 
that I mentioned above.


Thanks,

Guillermo Gutierrez
Network Administrator
Market Scan Information Systems, Inc
(818) 575-2000 x2017
[EMAIL PROTECTED]

  




  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba for VMS 5.5

2006-09-27 Thread Robertson, Bruce H
Hello,

Is anyone aware of a stable version of Samba for VAX/VMS 5.5-2?  I will
use 2.0.3 if that's the only version available, but I've read that there
are several known problems with this particular version.

Thanks

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] PLEASE HELP! Can't add machines to domain!

2006-09-27 Thread Chuck Theobald

Hi,

I see this sort of behavior about half the time I add a machine to the 
domain.  The workstation comes back with a message expressing 
NT_STATUS_NO_SUCH_USER.  A second attempt generally succeeds. 

It looks like your add machine script in smb.conf is correct.  I would 
try running the smbldap-useradd command from the command-line, then 
checking the output and your LDAP database.  I have discovered stderr 
messages that do not make it back to the workstation level.


I think that the idealx scripts are wholly responsible for what goes 
into the LDAP database, the workstation does not have direct contact 
with your LDAP database.


Good luck,
Chuck


I have spent days now trying to debug why I can not add machines to the 
domain.  I am using samba 3.0.23c with an openldap backend.  I can 
authenticate fine using smbclient with the administrator account but 
when I go to add a machine it fails.  I have checked the debug logs and 
know what is happening, I am just not sure why or how to fix it.  I am 
using the idealx scripts to add machines.  It adds the machine to ldap 
but does not add any of the necessary samba attributes.  I thought the 
machine was supposed to do this now and not the scripts.  Is this 
correct?  If so I am seeing one thing in the log for the machine that I 
think may have something to do with it.  It says secrets_fetch failed! 
just before the check for the machine and failing.  What does this mean 
and is this a problem?  As you can see the administrator authenticates 
fine.  When it fails the check for the machine account with 
NT_STATUS_NO_SUCH_USER it is searching the ldap for 
((uid=xplaptop$)(objectClass=sambaSamAccount))  but the entry created 
does not contain any samba* entries like it should.  I am curious to 
know if the secrets check failing is the machine trying to add that 
stuff to ldap?  I have read the how to a few times and don't see 
anything I missed, but obviously I have something amiss here.  Any help 
would be GREATLY appreciated as I have spent many many hours trying to 
find out why this is happening.

[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_username(534)
pdb_set_username: setting username Administrator, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_domain(557)
pdb_set_domain: setting domain DOMAIN_UK, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_nt_username(580)
pdb_set_nt_username: setting nt username Administrator, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_fullname(603)
pdb_set_full_name: setting full name System User, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_homedir(696)
pdb_set_homedir: setting home dir \UK_PDC\Administrator, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(672)
pdb_set_dir_drive: setting dir drive c:, was NULL
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_logon_script(626)
pdb_set_logon_script: setting logon script logon.bat, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_profile_path(649)
pdb_set_profile_path: setting profile path c:\Documents and 
Settings\Administrator, was

[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_workstations(739)
pdb_set_workstations: setting workstations , was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_user_sid(463)
pdb_set_user_sid: setting user sid 
S-1-5-21-334771251-3296030561-843139161-500

[2006/09/26 10:35:53, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73)
pdb_set_user_sid_from_rid:
  setting user sid S-1-5-21-334771251-3296030561-843139161-500 from 
rid 500

[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_group_sid(521)
pdb_set_group_sid: setting group sid 
S-1-5-21-334771251-3296030561-843139161-512
[2006/09/26 10:35:53, 10] 
passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)

pdb_set_group_sid_from_rid:
  setting group sid S-1-5-21-334771251-3296030561-843139161-512 
from rid 512
[2006/09/26 10:35:53, 5] 
passdb/secrets.c:secrets_fetch_trusted_domain_password(340)

secrets_fetch failed!
[2006/09/26 10:35:53, 4] passdb/pdb_ldap.c:ldapsam_getsampwnam(1396)
ldapsam_getsampwnam: Unable to locate user [XPLAPTOP$] count=0
[2006/09/26 10:35:53, 4] passdb/pdb_ldap.c:ldapsam_getgroup(2213)
ldapsam_getgroup: Did not find group
[2006/09/26 10:36:00, 3] 
passdb/pdb_interface.c:pdb_default_create_user(368)
_samr_create_user: Running the command `/usr/local/sbin/smbldap-useradd 
-t 5 -w 'xplaptop$'' gave 0
[2006/09/26 10:36:00, 3] 
passdb/pdb_interface.c:pdb_default_create_user(381)
pdb_default_create_user: failed to create a new user structure: 
NT_STATUS_NO_SUCH_USER

[2006/09/26 10:36:00, 5] lib/gencache.c:gencache_shutdown(90)
Closing cache file

--
Chuck Theobald
System Administrator
The Robert and Beverly Lewis Center for Neuroimaging
University of Oregon
P: 541-346-0343
F: 541-346-0345

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] GFS and samba

2006-09-27 Thread sandra-llistes

Hello,

We have two Fedora 5 Servers clustered with GFS. We installed samba 
and exported the same shares in both of them.
All went fine at first, with people accessing to theirs own files and 
so, but for some programs (minitab, matlab, ...) people need to access 
the same file at once. Then samba begins to fail and clients hang. In 
order to fix samba is necessary to restart the service. We've tried to 
put the shares in a filesystem without GFS and all goes well, people 
can access the same file without problems simultaneously.


Is a weird behaviour because the shares are exported from the two 
servers, but we really only access files simoultaneuosly using the s 
first server, the other server exports the shares too but isn't used 
by that clients.


I don't know how to debug this problem to see what is happening. It 
seems something related to GFS and Samba.
I have seen mails of people with samba+GFS problems, but we aren't 
using the same configuration, and the GFS rpm are updated:

GFS-6.1.5-0.FC5.1
GFS-kernel-2.6.15.1-5.FC5.32
Any help will be greatly apreciated.
Thanks,

Sandra
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Truncated username error?

2006-09-27 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Adam Huffman wrote:

 I'm seeing an odd problem when a user here tries to 
 edit images on a 3.0.10 Samba server running on a Centos
 4.4 machine.
 
 There is a couldn't find service error, but the 
 username given is only seven characters instead of
 the eight required.

IS this from a Windows 2000 client ?  When I've looked
in the past this was a bug in the Win2k client which simply
retried with the correct name after the failure.




cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFGptWIR7qMdg1EfYRAjVqAKDMBaFyLVEVZ8D8Jiqm4Yg7gr1Y3wCff60v
23Pjr/OWbSOVVUMHITlmeec=
=Z9DS
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Truncated username error?

2006-09-27 Thread Rex Dieter
Gerald (Jerry) Carter wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Adam Huffman wrote:
 
 I'm seeing an odd problem when a user here tries to
 edit images on a 3.0.10 Samba server running on a Centos
 4.4 machine.
 
 There is a couldn't find service error, but the
 username given is only seven characters instead of
 the eight required.
 
 IS this from a Windows 2000 client ?  When I've looked
 in the past this was a bug in the Win2k client which simply
 retried with the correct name after the failure.

We see this too, from time-to-time with our (up-to-date) WindowsXP clients. 
The erroneous username is ususally truncated by 1 character.

-- Rex

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Cannot connect to other domains...

2006-09-27 Thread Trimble, Ronald D
Everyone,  

I am trying to connect my server to another AD domain, but
it will not make the connection.  I have successfully joined it to one
domain in AD and I want it to authenticate users from another domain in
the same tree.  When I run the command wbinfo -sequence, I get
disconnected messages for all the domains except my home domain.  I have
my krb5.conf file configured exactly as I do on another server that
works perfectly.  Can anyone point me to my problem?

Here is a small piece of the log.wb-EU file...

 

[2006/09/27 08:47:37, 5]
nsswitch/winbindd_cm.c:set_dc_type_and_flags(870)

  set_dc_type_and_flags: Could not open a connection to EU:
(NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND)

[2006/09/27 08:47:37, 10]
nsswitch/winbindd_cache.c:cache_store_response(1493)

  Storing response for pid 7561, len 1300

[2006/09/27 08:47:37, 10] nsswitch/winbindd_dual.c:dual_client_read(53)

  client_read: read 1828 bytes. Need 0 more for a full request.

[2006/09/27 08:47:37, 4] nsswitch/winbindd_dual.c:fork_domain_child(479)

  child daemon request 32

[2006/09/27 08:47:37, 10]
nsswitch/winbindd_dual.c:child_process_request(352)

  process_request: request fn SHOW_SEQUENCE

[2006/09/27 08:47:37, 3]
nsswitch/winbindd_misc.c:winbindd_dual_show_sequence(331)

  [ 7556]: show sequence

[2006/09/27 08:47:37, 5] nsswitch/winbindd_cache.c:get_cache(137)

  get_cache: Setting MS-RPC methods for domain EU

[2006/09/27 08:47:37, 10]
nsswitch/winbindd_cache.c:fetch_cache_seqnum(276)

  fetch_cache_seqnum: invalid data size key [SEQNUM/EU]

[2006/09/27 08:47:37, 10] nsswitch/winbindd_rpc.c:sequence_number(749)

  rpc: fetch sequence_number for EU

[2006/09/27 08:47:37, 8] nsswitch/winbindd_cm.c:connection_ok(806)

  Connection to  for domain EU has NULL cli!

[2006/09/27 08:47:39, 10]
nsswitch/winbindd_cache.c:store_cache_seqnum(329)

  store_cache_seqnum: success [EU][4294967295 @ 1159372059]

[2006/09/27 08:47:39, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(387)

  refresh_sequence_number: EU seq number is now -1

[2006/09/27 08:47:39, 10]
nsswitch/winbindd_cache.c:cache_store_response(1493)

  Storing response for pid 7561, len 1300

[2006/09/27 08:49:52, 10] nsswitch/winbindd_dual.c:dual_client_read(53)

  client_read: read 1828 bytes. Need 0 more for a full request.

[2006/09/27 08:49:52, 4] nsswitch/winbindd_dual.c:fork_domain_child(479)

  child daemon request 32

[2006/09/27 08:49:52, 10]
nsswitch/winbindd_dual.c:child_process_request(352)

  process_request: request fn SHOW_SEQUENCE

[2006/09/27 08:49:52, 3]
nsswitch/winbindd_misc.c:winbindd_dual_show_sequence(331)

  [ 7556]: show sequence

[2006/09/27 08:49:52, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(359)

  refresh_sequence_number: EU time ok

[2006/09/27 08:49:52, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(387)

  refresh_sequence_number: EU seq number is now -1

[2006/09/27 08:49:52, 10]
nsswitch/winbindd_cache.c:cache_store_response(1493)

  Storing response for pid 7561, len 1300

 

Thanks,

Ron

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] hello and question on Mac OS X Server use of Samba

2006-09-27 Thread James Peach

On 25/09/06, Jaime Magiera [EMAIL PROTECTED] wrote:

Hi,

I'm new to the list (and samba). It's a great technology and I look
forward to learning more about it.

I have an OS X Server that utilizes the built-in Samba to allow for
Windows client connectivity. The OSXS gets the majority of its users
from an LDAP server elsewhere on the campus.

On OSXS, it's expected that the Windows users will be local or that
the server will be a KDC or that the server will be bound to an AD.
Regrettably, my server is not bound not an AD, nor is it a Kerberos
KDC for the University and the users are not local but from the
campus-wide LDAP server.

The only option I can think of for Windows clients to use Samba is to
re-kerberize the Samba service itself to the University KDC. I can
get the keytabs. However, I've been told by folks on other lists that
there on some tweaks on OSXS that make Samba configuration a little
different.


You can definitely configure Samba to talk to the campus-wide LDAP
server to resolve user names. Check the official howto and the by
example books on samba.org.


Does anyone here have experience (re)kerberizing Samba on an OSX
Server? Or any suggestions how I could solve this conundrum I'm in?
Or, if I'm misunderstanding something about how Samba works?


AFAIK, windows clients will only do Kerberos authentication to AD
member servers.

--
James Peach | [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Truncated username error?

2006-09-27 Thread Adam Huffman
On Wed, 27 Sep 2006, Rex Dieter wrote:

 Gerald (Jerry) Carter wrote:
 
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
  
  Adam Huffman wrote:
  
  I'm seeing an odd problem when a user here tries to
  edit images on a 3.0.10 Samba server running on a Centos
  4.4 machine.
  
  There is a couldn't find service error, but the
  username given is only seven characters instead of
  the eight required.
  
  IS this from a Windows 2000 client ?  When I've looked
  in the past this was a bug in the Win2k client which simply
  retried with the correct name after the failure.
 
 We see this too, from time-to-time with our (up-to-date) WindowsXP clients. 
 The erroneous username is ususally truncated by 1 character.
 

No, it's an XP SP2 client.

It may actually be unconnected with this save as problem, but it is
logged at the same time.

Adam


pgpMXRtn7xG2j.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] refuse machine password change policy

2006-09-27 Thread Bruno Nicolas Camussi

We have a PDC and BDC with Samba 3.0.23a and an LDAP backend. The
refuse machine password change policy was set on both (and both
restarted).

Computers on that domain seem to ignore the setting, as confirmed both
by a packet capture and by looking at it in the backend.

Is the policy fully supported in Samba? Any ideas?

Thanks!
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Truncated username error?

2006-09-27 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Adam Huffman wrote:

 No, it's an XP SP2 client.
 
 It may actually be unconnected with this save as problem, 
 but it is logged at the same time.

My gut says it probably is unrelated




cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFGrx7IR7qMdg1EfYRAopwAKCM0sU5SsXhNz42q323P6FWPVvQywCdFWZD
gdx4a9UjMhDDqaICEGCG6Lc=
=ABus
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] prevent users from logging in as nobody

2006-09-27 Thread Michael Gasch

guest ok = no in [global] if nobody is your guest account

greez


Jeff Davis wrote:
OK, probably a rookie question, but I've got some users that have been 
logging in to the domain as nobody...  What do I need to change to 
disable this?


Thanks,

-Jeff



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Timestamp issues

2006-09-27 Thread [EMAIL PROTECTED]
Hi folks,

I got a fileserver with debian sarge which is being held up to date as good
 as I can.

I got a machine with two harddrives. One holds kubuntu dapper and one holds
winxp. And then there's more machines but they don't matter at the moment.

On the filserver there's a share _images_ that has a force user/group
 _images_ constraint. Therefore when I save an image to that share owner of
 that file becomes images.images. And that's fine.

When I copy images from my camera to that share from within winxp and the
 help of IrfanView everything is fine. Files get saved with the correct
 user.group and the original timestamp of the file on the camera.

If I attempt to save the same images from within kubuntu where I have my own
user and group settings the k-desktop enironment complains about not being
able to change permissions and the image gets saved with the correct user and
group (images.images) but with the current timestamp of the copying process
and not the original timestamp from the picture shot.

Now, what do I have to do so that I don't have to switch to winxp to save my
images to the _images share_. I just don't understand the problem.


thank you
manfred
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] prevent users from logging in as nobody

2006-09-27 Thread Jeff Davis
Found the problem - the nobody account in LDAP had the sambaAccountFlags 
set to [NU]  Removed the N (no password required) and voila - no more 
nobody logins


-Jeff

Rune Tønnesen wrote:

Jeff Davis skrev:
OK, probably a rookie question, but I've got some users that have 
been logging in to the domain as nobody...  What do I need to 
change to disable this?


Thanks,

-Jeff

Hi Jeff

Please check whether the user nobody is mapped to guest or false 
password.


Regards Rune
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] AD replication with samba4

2006-09-27 Thread Norbert Wegener

googling around I found some interesting information about samba4.
It is said, samba4 shall have an ldap server of its own, not openldap.
Is this correct? If so, could this server fully participate in AD 
replication?

Does a timeframe exist, within which samba4 shall arrive?
Thanks
Norbert Wegener
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problem restricting the access of a particular workstation to a single user

2006-09-27 Thread Júlio Dutra Couto

I have a problem restricting the access of a particular workstation to a
single user. Is there a way of doing this? I couldn't find it anywhere,
although it is trivial to do it the other way around... much appreciated!
Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] PAM vs smbpasswd oddity

2006-09-27 Thread Russell Handorf

Hi Folks,

so now I've managed to trick the authentication server to caching the 
one time passwords for me. I'm down to the last two problems:


1. Something odd that I've noticed is that when I use PAM authentication 
Windows clients are outright refused. When I enable encrypted 
passwords, therefor disabling PAM, I'm then able to log in but with the 
use of static passwords. The error that the Windows clients get is the 
following:


\\IP-ADDRESS is not accessible. You might not have permission to use 
this network resource. Contact the administrator of this server to find 
out if you have access permissions.

The account is not authorized to log in from this station.

So the question here is that why doesnt this work when I use PAM 
authentication, but it does work when I use smbpasswd?!?


2. I've since tried mounting the share on a linux box to see what was 
happening. I notice the following behavior with this command:

mount -t smbfs -o username=rhandorf //localhost/rhandorf /mnt/home/

Once I log in, I'm able to browse the directory without *any* problems. 
So if I can solve #1, I'll be a happy camper! Does anyone have any ideas?


Thanks again,

r
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] AD replication with samba4

2006-09-27 Thread Andrew Bartlett
On Wed, 2006-09-27 at 22:25 +0200, Norbert Wegener wrote:
 googling around I found some interesting information about samba4.
 It is said, samba4 shall have an ldap server of its own, not openldap.
 Is this correct? If so, could this server fully participate in AD 
 replication?

We understand parts of the AD replication protocols, and how to be in a
position to fully participate in the future.  Microsoft has recently
announced a 'read only server' for branch offices, and this is
attractive as a place to start in this process.

 Does a timeframe exist, within which samba4 shall arrive?

The development code is already available, but we have not set any firm
dates for alpha or beta releases.  I hope to release a technology
preview sometime in the next couple of weeks.

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org
Samba Developer, Red Hat Inc.  http://redhat.com



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] GFS and samba

2006-09-27 Thread Andrew Bartlett
On Wed, 2006-09-27 at 17:20 +0200, sandra-llistes wrote:
 Hello,
 
 We have two Fedora 5 Servers clustered with GFS. We installed samba 
 and exported the same shares in both of them.
 All went fine at first, with people accessing to theirs own files and 
 so, but for some programs (minitab, matlab, ...) people need to access 
 the same file at once. Then samba begins to fail and clients hang. In 
 order to fix samba is necessary to restart the service. We've tried to 
 put the shares in a filesystem without GFS and all goes well, people 
 can access the same file without problems simultaneously.

This certainly looks weird.  If the files are only ever accessed from
one node, then it *should* work, but I don't know if this is something
that has been tested with GFS specifically.  

Serious damage starts to happen when we have Samba accessing the same
files on both nodes, because all the state information isn't shared
between nodes.  (Proposals for a scalable solution for Samba to do this
are due on samba-technical in the next week).

If you are only using one node for Samba, it should be the same as a
local non-cluster filesystem, so perhaps raise this with the GFS
developers.

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org
Samba Developer, Red Hat Inc.  http://redhat.com



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem restricting the access of a particular workstation to a single user

2006-09-27 Thread Aaron Kincer
Is this strictly a Samba network or is it Windows Domain/Active 
Directory environment?


Júlio Dutra Couto wrote:

I have a problem restricting the access of a particular workstation to a
single user. Is there a way of doing this? I couldn't find it anywhere,
although it is trivial to do it the other way around... much appreciated!
Thanks


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] my samba clients keep randomly dropping out of domain trust

2006-09-27 Thread Paul Raines


I have one Linux RHEL4 box setup as a PDC and several other Linux RHEL4 
samba servers and Windows XP boxes joined to the domain.  Ever since 
upgrading the Linux box to Samba 3 (they are currently running 
samba-3.0.10) I have problems with the Linux samba clients suddenly 
dropping out of the domain.  Operations suddenly start failing with


[2006/09/27 16:03:25, 3] libsmb/cliconnect.c:cli_session_setup(868)
  SPNEGO login failed: Trust relationship failure
[2006/09/27 16:03:25, 1] libsmb/cliconnect.c:cli_full_connection(1476)
  failed session setup with NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE

If I simply try running 'net join' it fails.  I have to go to the PDC and 
remove the machine account completely from smbpasswd and /etc/passwd. Then 
I re-add it and can then go to the client and run 'net join' and it 
joins again just fine and everything if happy for another several weeks 
till it seems to randomly drop out again.


When it happens it is always after a reboot and there is evidence it
might be only after a kernel change.  But I never had this problem
before I upgraded the boxes to RHEL4 and started using Samba 3

--
---
Paul Rainesemail: raines at nmr.mgh.harvard.edu
MGH/MIT/HMS Athinoula A. Martinos Center for Biomedical Imaging
149 (2301) 13th Street Charlestown, MA 02129USA


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] PAM vs smbpasswd oddity

2006-09-27 Thread Russell Handorf
I've tried setting the security level to being from user to share. 
It now logs me in as guest from all workstations for some reason. Here 
is the smb.conf file once again for all to review:


[global]
   workgroup = snip
   server string = samba file
   netbios name = Fileserver
   log file = /var/log/samba/%m.log
   max log size = 50
   socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 
SO_SNDBUF=8192

   preferred master = True
   local master = Yes
   domain master = True
   dns proxy = yes
   remote announce = 192.168.0.255
   os level = 40
   ;domain logons = yes
   ;logon script = logon.bat
   ;logon home = \\%G\%U\.profile
   name resolve order = wins lmhosts bcast
   wins proxy = yes
   ;preserve case = yes
   ;short preserve case = yes
   wins support= yes
   #was user / share
   security = user
   #must be set to 'no' to use PAM
   encrypt passwords = No
   update encrypted = No
   allow trusted domains = Yes
   #min password length = 6
   null passwords = No
[homes]
   comments = Home Dir
   browsable = no
   writable = yes
   hide dot files = yes
[netlogon]
   comment = Network Logon Service
   path = /home/netlogon
   guest ok = yes
   writable = no
   share modes = no
   write list = domain_admin
[Profiles]
   path = /%G/%U/.profile
   browseable = no
   guest ok = yes
[public]
   path = /samba/public
   valid users = users
   force group = users
   writeable = Yes
   guest ok = No


Russell Handorf wrote:

Hi Folks,

so now I've managed to trick the authentication server to caching the 
one time passwords for me. I'm down to the last two problems:


1. Something odd that I've noticed is that when I use PAM 
authentication Windows clients are outright refused. When I enable 
encrypted passwords, therefor disabling PAM, I'm then able to log in 
but with the use of static passwords. The error that the Windows 
clients get is the following:


\\IP-ADDRESS is not accessible. You might not have permission to 
use this network resource. Contact the administrator of this server to 
find out if you have access permissions.

The account is not authorized to log in from this station.

So the question here is that why doesnt this work when I use PAM 
authentication, but it does work when I use smbpasswd?!?


2. I've since tried mounting the share on a linux box to see what was 
happening. I notice the following behavior with this command:

mount -t smbfs -o username=rhandorf //localhost/rhandorf /mnt/home/

Once I log in, I'm able to browse the directory without *any* 
problems. So if I can solve #1, I'll be a happy camper! Does anyone 
have any ideas?


Thanks again,

r

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba ACL questions

2006-09-27 Thread Graham, David
Greetings, 

 

I seem to have Samba+AD+ACL's working on a RH ES4 server; however, I'm
looking for clarification in regard to how the ACL's differ between
windows and samba... or if they differ?

 

With windows ACL's, I can give out user permission traverse directory,
but not read its contents. Then I can give said user more permission to
a sub folders contents.  Meaning: I don't want a user to see what is in
\\files1\IS file:///\\files1\IS  but I want to give them permissions
to the contents of \\files1\IS\meetingminutes
file:///\\files1\mamba\meetingminutes  I cant seem to get this to work
with samba.

 

I suppose one could always create another share, but it's really not the
ideal solution when this has to be done in many scenarios.

 

I am running RH ES4, and from my searching for the answer to this, I
recall reading that the Linux POSIX specifications aren't as robust as
NTFS's, would this be correct to assume this is why samba doesn't seem
to be able to use the traverse security permission?

 

 

Any insight is appreciated.

-dg

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem restricting the access of a particular workstation to a single user

2006-09-27 Thread webster
Perhaps 'include = n%M.conf' (or i%I.conf)

then in file n(%M).conf:
  valid users = thisuser


Júlio Dutra Couto wrote:
 I have a problem restricting the access of a particular workstation to a
 single user. Is there a way of doing this? I couldn't find it anywhere,
 although it is trivial to do it the other way around... much 
appreciated!
 Thanks

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba breaks during user authentication after it was updated

2006-09-27 Thread Harry Doyle
Hello,
I am running samba on a machine running fedora 5. I did not know the system
was configured to automatically update the system via cron, and when it put
the new samba on last night, seems to have broken things. It is coredumping
now whenever a user tries to authenticate. 

Our system is set up with user level security which i manage via smbpasswd
so there are no windows domains involved. The machine has been sitting
nicely on a subnet with a w2k active directory domain controller which is
used for something entirely different altogether. The problem started
happening right after the yum update last night. 

Here is the update messege from /var/log/messages: 

Sep 27 04:19:50 server yum: Updated: samba-common.i386 3.0.23c-1.fc5
Sep 27 04:19:53 server yum: Updated: guile.i386 5:1.6.7-7.fc5
Sep 27 04:19:55 server yum: Updated: samba-client.i386 3.0.23c-1.fc5
Sep 27 04:20:01 server yum: Updated: samba.i386 3.0.23c-1.fc5


And here is what happens when a user maps their share and gets prompted for
a username/password on their xp client: 


Sep 27 09:42:30 server smbd[16675]:
=== 
Sep 27 09:42:30 server smbd[16675]: [2006/09/27 09:42:30, 0]
lib/fault.c:fault_report(42) 
Sep 27 09:42:30 server smbd[16675]:   INTERNAL ERROR: Signal 11 in pid 16675
(3.0.23c-1.fc5) 
Sep 27 09:42:30 server smbd[16675]:   Please read the Trouble-Shooting
section of the Samba3-HOWTO 
Sep 27 09:42:30 server smbd[16675]: [2006/09/27 09:42:30, 0]
lib/fault.c:fault_report(44) 
Sep 27 09:42:30 server smbd[16675]:
Sep 27 09:42:30 server smbd[16675]:   From:
http://www.samba.org/samba/docs/Samba3-HOWTO.pdf 
Sep 27 09:42:30 server smbd[16675]: [2006/09/27 09:42:30, 0]
lib/fault.c:fault_report(45) 
Sep 27 09:42:30 server smbd[16675]:
=== 
Sep 27 09:42:30 server smbd[16675]: [2006/09/27 09:42:30, 0]
lib/util.c:smb_panic(1614) 
Sep 27 09:42:30 server smbd[16675]:   PANIC (pid 16675): internal error 
Sep 27 09:42:30 server smbd[16675]: [2006/09/27 09:42:30, 0]
lib/util.c:log_stack_trace(1721) 
Sep 27 09:42:30 server smbd[16675]:   BACKTRACE: 20 stack frames: 
Sep 27 09:42:30 server smbd[16675]:#0 smbd(log_stack_trace+0x2d)
[0x7c18ad] 
Sep 27 09:42:30 server smbd[16675]:#1 smbd(smb_panic+0x5d) [0x7c19dd] 
Sep 27 09:42:30 server smbd[16675]:#2 smbd [0x7ad51a] 
Sep 27 09:42:30 server smbd[16675]:#3 [0x239420] 
Sep 27 09:42:30 server smbd[16675]:#4 /lib/libc.so.6(__strdup+0x1f)
[0x9f3893] 
Sep 27 09:42:30 server smbd[16675]:#5 /lib/libnsl.so.1(nis_list+0x5d2)
[0xca4b5f] 
Sep 27 09:42:30 server smbd[16675]:#6
/lib/libnss_nisplus.so.2(_nss_nisplus_setnetgrent+0x8f) [0x45a62e] 
Sep 27 09:42:30 server smbd[16675]:#7 /lib/libc.so.6(innetgr+0xb2)
[0xa6ed05] 
Sep 27 09:42:30 server smbd[16675]:#8 smbd(user_in_netgroup+0x65)
[0x5f81e5] 
Sep 27 09:42:30 server smbd[16675]:#9
smbd(token_contains_name_in_list+0x23d) [0x5fabdd] 
Sep 27 09:42:30 server smbd[16675]:#10
smbd(is_share_read_only_for_token+0x98) [0x5faed8] 
Sep 27 09:42:30 server smbd[16675]:#11 smbd(change_to_user+0x442)
[0x6395b2] 
Sep 27 09:42:30 server smbd[16675]:#12 smbd [0x658b38] 
Sep 27 09:42:30 server smbd[16675]:#13 smbd(make_connection+0x194)
[0x659fa4] 
Sep 27 09:42:30 server smbd[16675]:#14 smbd(reply_tcon_and_X+0x21d)
[0x61d8ed] 
Sep 27 09:42:30 server smbd[16675]:#15 smbd [0x6550e0] 
Sep 27 09:42:30 server smbd[16675]:#16 smbd(smbd_process+0x7ab)
[0x65621b] 
Sep 27 09:42:30 server smbd[16675]:#17 smbd(main+0xbd0) [0x86ff90] 
Sep 27 09:42:30 server smbd[16675]:#18
/lib/libc.so.6(__libc_start_main+0xdc) [0x99f4e4] 
Sep 27 09:42:30 server smbd[16675]:#19 smbd [0x5e0701] 
Sep 27 09:42:30 server smbd[16675]: [2006/09/27 09:42:30, 0]
lib/fault.c:dump_core(173) 
Sep 27 09:42:30 server smbd[16675]:   dumping core in
/var/log/samba/cores/smbd 
 

Smbclient gives me the following: 

# Smbclient //localhost/Myshare -U username
Password: 
tree connect failed: Call returned zero bytes (EOF)
 
My workaround has been to set things to share level security with no user
authentication until i can either fix this problem or install a different
version of samba and get my existing smb.conf working. Not sure if/how I can
roll it back so if that's an option then great. 

This could have been avoided had i better inspected this system before
managing it!!

Thanks for any help/advice,
Harry

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: samba breaks during user authentication after it was updated

2006-09-27 Thread John Benjamins
Harry Doyle harry at locals.ca writes:

 
 Hello,
 I am running samba on a machine running fedora 5. I did not know the system
 was configured to automatically update the system via cron, and when it put
 the new samba on last night, seems to have broken things. It is coredumping
 now whenever a user tries to authenticate. 
 
 Our system is set up with user level security which i manage via smbpasswd
 so there are no windows domains involved. The machine has been sitting
 nicely on a subnet with a w2k active directory domain controller which is
 used for something entirely different altogether. The problem started
 happening right after the yum update last night. 
 
[snipped]
 Sep 27 09:42:30 server smbd[16675]:#5 /lib/libnsl.so.1(nis_list+0x5d2)
 [0xca4b5f] 
 Sep 27 09:42:30 server smbd[16675]:#6
 /lib/libnss_nisplus.so.2(_nss_nisplus_setnetgrent+0x8f) [0x45a62e] 
 Sep 27 09:42:30 server smbd[16675]:#7 /lib/libc.so.6(innetgr+0xb2)
 [0xa6ed05] 
 Sep 27 09:42:30 server smbd[16675]:#8 smbd(user_in_netgroup+0x65)
 [0x5f81e5] 

Looks like an error in libnss in the netgroup code...

 Smbclient gives me the following: 
 
 # Smbclient //localhost/Myshare -U username
 Password: 
 tree connect failed: Call returned zero bytes (EOF)

Exactly the error we were seeing

 My workaround has been to set things to share level security with no user
 authentication until i can either fix this problem or install a different
 version of samba and get my existing smb.conf working. Not sure if/how I can
 roll it back so if that's an option then great. 

Ouch, but it works!

 This could have been avoided had i better inspected this system before
 managing it!!
 
 Thanks for any help/advice,
 Harry
 


Not sure what your configuration is, but in the /etc/nsswitch.conf file we had:

hosts:  files dns
netgroup:   nisplus

Since we are not using NIS, nisplus, nor netgroups, I commented out the line:

#netgroup:   nisplus

Once I did that I restarted Samba, and now things work again!

Hope this helps,  John


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba ACL questions

2006-09-27 Thread Aaron Kincer

David,

I think you'll find this document helpful. I do not know for certain if the
permissions are the same on Linux, but it _should_ be.

http://docs.hp.com/en/B8725-90101/ch03s04.html

On 9/27/06, Graham, David [EMAIL PROTECTED] wrote:


Greetings,



I seem to have Samba+AD+ACL's working on a RH ES4 server; however, I'm
looking for clarification in regard to how the ACL's differ between
windows and samba... or if they differ?



With windows ACL's, I can give out user permission traverse directory,
but not read its contents. Then I can give said user more permission to
a sub folders contents.  Meaning: I don't want a user to see what is in
\\files1\IS file:///\\files1\IS  but I want to give them permissions
to the contents of \\files1\IS\meetingminutes
file:///\\files1\mamba\meetingminutes  I cant seem to get this to work
with samba.



I suppose one could always create another share, but it's really not the
ideal solution when this has to be done in many scenarios.



I am running RH ES4, and from my searching for the answer to this, I
recall reading that the Linux POSIX specifications aren't as robust as
NTFS's, would this be correct to assume this is why samba doesn't seem
to be able to use the traverse security permission?





Any insight is appreciated.

-dg

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] how to add unicode support to samba-2.0.6

2006-09-27 Thread jack dang

it's a pity.
Japanese Version of Samba 2.2.x you mentioned does not support UNICODE
neither,
because in the source code,  all the reply functions are based on
single-byte string processing function such as strlen() , it cannot handle
the incoming multibyte strings.

Should I really have to take pains to substitute all the single-byte string
processing functions with mutibyte string processing function, and to do a
ASCII-UNICODE string conversion everytime the server recieves an incoming
packet that contains an ASCII encoded string?

Folks, any ideas of any simple ways?

On 9/27/06, [EMAIL PROTECTED] 
[EMAIL PROTECTED] wrote:


On Wed, Sep 27, 2006 at 01:11:51PM +0800, jack dang wrote:

 Actually, i'm porting samba-2.0.6 to my embedded system to whom the
flash
 and memory are both very precious. What I want is to minimize the binary
 size (less than 2M), and my embedded system needs only the rudimentary
 features, such as read, write and basic authtication.
 I know samba-3.0.0 is the lowest version that supports UNICODE, but its
too
 large for my embedded system.
 any ideas?

Japanese Version of Samba 2.2.x Support UTF-8.

Please get and test it.

ftp://ftp.samba.gr.jp/pub/samba-jp/

--
--- Oota Toshiya ---  oota at mail.linux.bs1.fc.nec.co.jp
NEC Computers Software Operations Unit  Shiba,Minato,Tokyo
OSS Promotion CenterJapan,Earth,Solar system
(samba-jp Staff/postmaster,mutt-j admin,analog-jp postmaster)


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Force group gid

2006-09-27 Thread Lewis Shobbrook
Thanks for the reply Jerry,

On Wednesday 27 September 2006 1:12 am, Gerald (Jerry) Carter wrote:
 Lewis Shobbrook wrote:
  Hi All,
 
  I note from previous posts that the uid  gid are
  not supported in smb.conf. My issue is that I have
  mysql auth backend for ftp sites, that I'd like to
  share directories for internal access.  There is
  currently no way I can see  to force the user
  or group using uid  gid for this type of backend.
  Can anyone offer any suggestions as a work around to this?

 Sorry but I don't see why this would be necessary if you
 have a working NSS.

The issue for me is that the SQL auth backend does not create user accounts 
in /etc/passwd only creating numerical uid  gid assigning these to the 
relevant directories it creates.  So nss can not pick them up.
The other issue that I raised was the conflicts between unix account names and 
domain accounts.  
Were there is a local unix account with the same name as a domain account the 
force user attribute will force the domain user account of the same name.
There are workarounds, but I think the ability to force a uid  gid would be a 
useful feature.

Cheers,

Lew
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] how to add unicode support to samba-2.0.6

2006-09-27 Thread simo
On Thu, 2006-09-28 at 09:53 +0800, jack dang wrote:
 it's a pity.
 Japanese Version of Samba 2.2.x you mentioned does not support UNICODE
 neither,
 because in the source code,  all the reply functions are based on
 single-byte string processing function such as strlen() , it cannot handle
 the incoming multibyte strings.
 
 Should I really have to take pains to substitute all the single-byte string
 processing functions with mutibyte string processing function, and to do a
 ASCII-UNICODE string conversion everytime the server recieves an incoming
 packet that contains an ASCII encoded string?

This is what samba does today.

 Folks, any ideas of any simple ways?

no, it is probably better for you to try to remove functionality you do
not need in samba3 (samnba4 ?) to reduce the size of the binary than to
try and port an ancient version like 2.0.6 to unicode.

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: [EMAIL PROTECTED]
http://samba.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] how to add unicode support to samba-2.0.6

2006-09-27 Thread jack dang

On 9/28/06, simo [EMAIL PROTECTED] wrote:


On Thu, 2006-09-28 at 09:53 +0800, jack dang wrote:
 it's a pity.
 Japanese Version of Samba 2.2.x you mentioned does not support UNICODE
 neither,
 because in the source code,  all the reply functions are based on
 single-byte string processing function such as strlen() , it cannot
handle
 the incoming multibyte strings.

 Should I really have to take pains to substitute all the single-byte
string
 processing functions with mutibyte string processing function, and to do
a
 ASCII-UNICODE string conversion everytime the server recieves an
incoming
 packet that contains an ASCII encoded string?

This is what samba does today.

 Folks, any ideas of any simple ways?

no, it is probably better for you to try to remove functionality you do
not need in samba3 (samnba4 ?) to reduce the size of the binary than to
try and port an ancient version like 2.0.6 to unicode.

Simo.

--
Simo Sorce
Samba Team GPL Compliance Officer
email: [EMAIL PROTECTED]
http://samba.org




I've thought of that before, but the overall binary size (smbd + nmbd, not
to mention some basic authentication functionality I may need afterwards)is
over 50M, nearly 60M.
Do you think it is poosible to reduce it to a less-than-2M size?
I suppose it may require much more modifications anyhow because samba3 is
far more complicated than samba2, and I have to figure out the functionality
of every single component and the annoyingly complicated inter-connection
and interdependency among them to make an effective modification.
well, that's my point of view, and if you have any further advice, would you
take patience to tell me?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] WINS over subnets

2006-09-27 Thread Hoggins!

Hello,

I'm trying to make browsing work over several routed subnets, but
obviously, something goes wrong. Here's the situation :



!---!
! hgsserver ! (SAMBA HOST)
!---!
 |
 |
 |
 |192.168.2.0/24   !--!  192.168.3.0/24
 |-! wifigate !- - - -
 | !--!  (several wireless WinXP boxes)
 |
 |
!--!
! WinXP box!
! hoggins!
!--!


I hope this is clear enough. Now here's my samba config on server 
hgsserver :


-
[global]
log file = /var/log/samba/%m.log
display charset = ASCII
ldap ssl = no
passwd chat debug = Yes
socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192
browse list = Yes
root directory = /
guest ok = Yes
domain master = Yes
username map = /etc/samba/smbusers
interfaces = eth0
map to guest = Bad User
time server = Yes
passwd program = /usr/bin/passwd %u
wins support = true
cups options = raw
netbios aliases = hgsserver
server string = PARTAGES
unix password sync = Yes
local master = Yes
workgroup = BOUFFARD
os level = 32
server signing = auto
printcap name = /etc/printcap
max log size = 50
pam password change = Yes

 [...] (several shares declarations)

-

My browse.dat does not contain all I need, it just contains my machine 
(hoggins) and the server. I would like to have all the other hosts 
that are on subnet 192.168.3.0/24. These hosts have received the 
server's IP address as the WINS server in their DHCP transaction, and I 
can see they communicate with it when doing an ethereal analysis.

But the browse list remains desperately empty from these hosts.

Any ideas on how to solve this really annoying problem ?

Thanks in advance,

Hoggins!
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: samba breaks during user authentication after it wasupdated

2006-09-27 Thread Harry Doyle
Thanks John,
The fix you suggested solved my problem. I read some other stuff about
people having winbind incompatibility issues causing the same error. Seems
to be stuff to do with domain logins and multiple servers which doesn't
apply to me. A bug in the update management system maybe? In either event,
I'm back up and running so thanks!
Cheers,
Harry


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


svn commit: samba r18943 - in branches/SAMBA_4_0/source/lib: .

2006-09-27 Thread tridge
Author: tridge
Date: 2006-09-27 06:02:07 + (Wed, 27 Sep 2006)
New Revision: 18943

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18943

Log:

Samba4 wants its databases private to root. I know some of them could
potentially be public, but we'd need to think about them
carefully.

Modified:
   branches/SAMBA_4_0/source/lib/db_wrap.c


Changeset:
Modified: branches/SAMBA_4_0/source/lib/db_wrap.c
===
--- branches/SAMBA_4_0/source/lib/db_wrap.c 2006-09-27 05:57:41 UTC (rev 
18942)
+++ branches/SAMBA_4_0/source/lib/db_wrap.c 2006-09-27 06:02:07 UTC (rev 
18943)
@@ -124,6 +124,11 @@
if (lp_parm_bool(-1, ldb, nosync, False)) {
flags |= LDB_FLG_NOSYNC;
}
+
+   /* we usually want Samba databases to be private. If we later
+  find we need one public, we will need to add a parameter to
+  ldb_wrap_connect() */
+   ldb_set_create_perms(ldb, 0600);

ret = ldb_connect(ldb, real_url, flags, options);
if (ret != LDB_SUCCESS) {



svn commit: samba r18944 - in branches/SAMBA_4_0/source/web_server: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 06:39:56 + (Wed, 27 Sep 2006)
New Revision: 18944

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18944

Log:
talloc_reference() can fail...
(remove compiler warning)

metze
Modified:
   branches/SAMBA_4_0/source/web_server/web_server.c


Changeset:
Modified: branches/SAMBA_4_0/source/web_server/web_server.c
===
--- branches/SAMBA_4_0/source/web_server/web_server.c   2006-09-27 06:02:07 UTC 
(rev 18943)
+++ branches/SAMBA_4_0/source/web_server/web_server.c   2006-09-27 06:39:56 UTC 
(rev 18944)
@@ -122,7 +122,7 @@
 while inside http_process_input(), but we must not
 destroy the stack variables being used by that
 rendering process when we handle the timeout. */
-   talloc_reference(web-task, web);
+   if (!talloc_reference(web-task, web)) goto failed;
http_process_input(web);
talloc_unlink(web-task, web);
}



svn commit: samba r18945 - in branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 06:42:19 + (Wed, 27 Sep 2006)
New Revision: 18945

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18945

Log:
fix compiler warnings and end-of-non-void function bugs

metze
Modified:
   branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/entryUUID.c
   branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/partition.c


Changeset:
Modified: branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/entryUUID.c
===
--- branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/entryUUID.c
2006-09-27 06:39:56 UTC (rev 18944)
+++ branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/entryUUID.c
2006-09-27 06:42:19 UTC (rev 18945)
@@ -112,7 +112,7 @@
struct entryUUID_private *entryUUID_private;
struct ldb_result *list;
 
-   if (ldb_dn_explode(ctx, val-data)) {
+   if (ldb_dn_explode(ctx, (const char *)val-data)) {
return *val;
}
map_private = talloc_get_type(module-private_data, struct map_private);
@@ -121,7 +121,7 @@
list = entryUUID_private-objectclass_res;
 
for (i=0; list  (i  list-count); i++) {
-   if (ldb_attr_cmp(val-data, 
ldb_msg_find_attr_as_string(list-msgs[i], lDAPDisplayName, NULL)) == 0) {
+   if (ldb_attr_cmp((const char *)val-data, 
ldb_msg_find_attr_as_string(list-msgs[i], lDAPDisplayName, NULL)) == 0) {
char *dn = ldb_dn_linearize(ctx, list-msgs[i]-dn);
return data_blob_string_const(dn);
}
@@ -142,7 +142,7 @@
list = entryUUID_private-objectclass_res;
 
for (i=0; list  (i  list-count); i++) {
-   if (ldb_attr_cmp(val-data, 
ldb_msg_find_attr_as_string(list-msgs[i], lDAPDisplayName, NULL)) == 0) {
+   if (ldb_attr_cmp((const char *)val-data, 
ldb_msg_find_attr_as_string(list-msgs[i], lDAPDisplayName, NULL)) == 0) {
const char *oid = 
ldb_msg_find_attr_as_string(list-msgs[i], governsID, NULL);
return data_blob_string_const(oid);
}
@@ -163,7 +163,7 @@
list = entryUUID_private-objectclass_res;
 
for (i=0; list  (i  list-count); i++) {
-   if (ldb_attr_cmp(val-data, 
ldb_msg_find_attr_as_string(list-msgs[i], governsID, NULL)) == 0) {
+   if (ldb_attr_cmp((const char *)val-data, 
ldb_msg_find_attr_as_string(list-msgs[i], governsID, NULL)) == 0) {
const char *oc = 
ldb_msg_find_attr_as_string(list-msgs[i], lDAPDisplayName, NULL);
return data_blob_string_const(oc);
}
@@ -174,13 +174,13 @@
 
 static struct ldb_val normalise_to_signed32(struct ldb_module *module, 
TALLOC_CTX *ctx, const struct ldb_val *val)
 {
-   long long int signed_ll = strtoll(val-data, NULL, 10);
+   long long int signed_ll = strtoll((const char *)val-data, NULL, 10);
if (signed_ll = 0x8000LL) {
union {
int32_t signed_int;
uint32_t unsigned_int;
} u = {
-   .unsigned_int = strtoul(val-data, NULL, 10)
+   .unsigned_int = strtoul((const char *)val-data, NULL, 
10)
};
 
struct ldb_val out = 
data_blob_string_const(talloc_asprintf(ctx, %d, u.signed_int));
@@ -192,7 +192,7 @@
 static struct ldb_val usn_to_entryCSN(struct ldb_module *module, TALLOC_CTX 
*ctx, const struct ldb_val *val)
 {
struct ldb_val out;
-   unsigned long long usn = strtoull(val-data, NULL, 10);
+   unsigned long long usn = strtoull((const char *)val-data, NULL, 10);
time_t t = (usn  24);
out = data_blob_string_const(talloc_asprintf(ctx, %s#%06x#00#00, 
ldb_timestring(ctx, t), (unsigned int)(usn  0xFF)));
return out;
@@ -200,7 +200,7 @@
 
 static unsigned long long entryCSN_to_usn_int(TALLOC_CTX *ctx, const struct 
ldb_val *val) 
 {
-   char *entryCSN = talloc_strdup(ctx, val-data);
+   char *entryCSN = talloc_strdup(ctx, (const char *)val-data);
char *mod_per_sec;
time_t t;
unsigned long long usn;
@@ -242,7 +242,7 @@
 static struct ldb_val usn_to_timestamp(struct ldb_module *module, TALLOC_CTX 
*ctx, const struct ldb_val *val)
 {
struct ldb_val out;
-   unsigned long long usn = strtoull(val-data, NULL, 10);
+   unsigned long long usn = strtoull((const char *)val-data, NULL, 10);
time_t t = (usn  24);
out = data_blob_string_const(ldb_timestring(ctx, t));
return out;
@@ -254,7 +254,7 @@
time_t t;
unsigned long long usn;
 
-   t = ldb_string_to_time(val-data);
+   t = ldb_string_to_time((const char *)val-data);

usn = ((unsigned long long)t 24);
 
@@ -495,6 +495,8 @@
}
entryUUID_private-base_dns[i] = NULL;
}
+
+   return 

svn commit: samba r18946 - in branches/SAMBA_4_0/source/lib/talloc: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 06:48:24 + (Wed, 27 Sep 2006)
New Revision: 18946

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18946

Log:
fix compiler warning

metze
Modified:
   branches/SAMBA_4_0/source/lib/talloc/talloc.c


Changeset:
Modified: branches/SAMBA_4_0/source/lib/talloc/talloc.c
===
--- branches/SAMBA_4_0/source/lib/talloc/talloc.c   2006-09-27 06:42:19 UTC 
(rev 18945)
+++ branches/SAMBA_4_0/source/lib/talloc/talloc.c   2006-09-27 06:48:24 UTC 
(rev 18946)
@@ -743,7 +743,7 @@
 */
 void *_talloc_move(const void *new_ctx, const void *_pptr)
 {
-   const void **pptr = (const void **)_pptr;
+   const void **pptr = discard_const_p(const void *,_pptr);
void *ret = _talloc_steal(new_ctx, *pptr);
(*pptr) = NULL;
return ret;



svn commit: samba r18947 - in branches/SAMBA_4_0/source/lib: replace/system socket_wrapper

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 10:13:45 + (Wed, 27 Sep 2006)
New Revision: 18947

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18947

Log:
overload listen() and ioctl() in socket_wrapper

metze
Modified:
   branches/SAMBA_4_0/source/lib/replace/system/network.h
   branches/SAMBA_4_0/source/lib/socket_wrapper/socket_wrapper.c
   branches/SAMBA_4_0/source/lib/socket_wrapper/socket_wrapper.h


Changeset:
Modified: branches/SAMBA_4_0/source/lib/replace/system/network.h
===
--- branches/SAMBA_4_0/source/lib/replace/system/network.h  2006-09-27 
06:48:24 UTC (rev 18946)
+++ branches/SAMBA_4_0/source/lib/replace/system/network.h  2006-09-27 
10:13:45 UTC (rev 18947)
@@ -66,6 +66,10 @@
 #include net/if.h
 #endif
 
+#ifdef HAVE_SYS_IOCTL_H
+#include sys/ioctl.h
+#endif
+
 #ifdef SOCKET_WRAPPER
 #ifndef SOCKET_WRAPPER_NOT_REPLACE
 #define SOCKET_WRAPPER_REPLACE

Modified: branches/SAMBA_4_0/source/lib/socket_wrapper/socket_wrapper.c
===
--- branches/SAMBA_4_0/source/lib/socket_wrapper/socket_wrapper.c   
2006-09-27 06:48:24 UTC (rev 18946)
+++ branches/SAMBA_4_0/source/lib/socket_wrapper/socket_wrapper.c   
2006-09-27 10:13:45 UTC (rev 18947)
@@ -67,12 +67,14 @@
 #define real_accept accept
 #define real_connect connect
 #define real_bind bind
+#define real_listen listen
 #define real_getpeername getpeername
 #define real_getsockname getsockname
 #define real_getsockopt getsockopt
 #define real_setsockopt setsockopt
 #define real_recvfrom recvfrom
 #define real_sendto sendto
+#define real_ioctl ioctl
 #define real_recv recv
 #define real_send send
 #define real_socket socket
@@ -712,6 +714,20 @@
return ret;
 }
 
+_PUBLIC_ int swrap_listen(int s, int backlog)
+{
+   int ret;
+   struct socket_info *si = find_socket_info(s);
+
+   if (!si) {
+   return real_listen(s, backlog);
+   }
+
+   ret = real_listen(s, backlog);
+
+   return ret;
+}
+
 _PUBLIC_ int swrap_getpeername(int s, struct sockaddr *name, socklen_t 
*addrlen)
 {
struct socket_info *si = find_socket_info(s);
@@ -864,6 +880,20 @@
return ret;
 }
 
+_PUBLIC_ int swrap_ioctl(int s, int r, void *p)
+{
+   int ret;
+   struct socket_info *si = find_socket_info(s);   
+
+   if (!si) {
+   return real_ioctl(s, r, p);
+   }
+
+   ret = real_ioctl(s, r, p);
+
+   return ret;
+}
+
 _PUBLIC_ ssize_t swrap_recv(int s, void *buf, size_t len, int flags)
 {
int ret;

Modified: branches/SAMBA_4_0/source/lib/socket_wrapper/socket_wrapper.h
===
--- branches/SAMBA_4_0/source/lib/socket_wrapper/socket_wrapper.h   
2006-09-27 06:48:24 UTC (rev 18946)
+++ branches/SAMBA_4_0/source/lib/socket_wrapper/socket_wrapper.h   
2006-09-27 10:13:45 UTC (rev 18947)
@@ -23,12 +23,14 @@
 int swrap_accept(int s, struct sockaddr *addr, socklen_t *addrlen);
 int swrap_connect(int s, const struct sockaddr *serv_addr, socklen_t addrlen);
 int swrap_bind(int s, const struct sockaddr *myaddr, socklen_t addrlen);
+int swrap_listen(int s, int backlog);
 int swrap_getpeername(int s, struct sockaddr *name, socklen_t *addrlen);
 int swrap_getsockname(int s, struct sockaddr *name, socklen_t *addrlen);
 int swrap_getsockopt(int s, int level, int optname, void *optval, socklen_t 
*optlen);
 int swrap_setsockopt(int s, int  level,  int  optname,  const  void  *optval, 
socklen_t optlen);
 ssize_t swrap_recvfrom(int s, void *buf, size_t len, int flags, struct 
sockaddr *from, socklen_t *fromlen);
 ssize_t swrap_sendto(int s, const void *buf, size_t len, int flags, const 
struct sockaddr *to, socklen_t tolen);
+int swrap_ioctl(int s, int req, void *ptr);
 ssize_t swrap_recv(int s, void *buf, size_t len, int flags);
 ssize_t swrap_send(int s, const void *buf, size_t len, int flags);
 int swrap_close(int);
@@ -50,6 +52,11 @@
 #endif
 #define bind(s,myaddr,addrlen) swrap_bind(s,myaddr,addrlen)
 
+#ifdef listen
+#undef listen
+#endif
+#define listen(s,blog) swrap_listen(s,blog)
+
 #ifdef getpeername
 #undef getpeername
 #endif
@@ -80,6 +87,11 @@
 #endif
 #define sendto(s,buf,len,flags,to,tolen)  
swrap_sendto(s,buf,len,flags,to,tolen)
 
+#ifdef ioctl
+#undef ioctl
+#endif
+#define ioctl(s,req,ptr)   swrap_ioctl(s,req,ptr)
+
 #ifdef recv
 #undef recv
 #endif



svn commit: samba r18948 - in branches/SAMBA_4_0/source/lib/tdr: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 11:15:03 + (Wed, 27 Sep 2006)
New Revision: 18948

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18948

Log:
fix the build on solaris, the ioctl() prototype
in unistd.h was included after libreplace defined ioctl swrap_ioctl

metze
Modified:
   branches/SAMBA_4_0/source/lib/tdr/tdr.c


Changeset:
Modified: branches/SAMBA_4_0/source/lib/tdr/tdr.c
===
--- branches/SAMBA_4_0/source/lib/tdr/tdr.c 2006-09-27 10:13:45 UTC (rev 
18947)
+++ branches/SAMBA_4_0/source/lib/tdr/tdr.c 2006-09-27 11:15:03 UTC (rev 
18948)
@@ -22,8 +22,8 @@
 */
 
 #include includes.h
+#include system/filesys.h
 #include system/network.h
-#include system/filesys.h
 #include tdr/tdr.h
 
 #define TDR_BASE_MARSHALL_SIZE 1024



svn commit: samba r18949 - in branches/SAMBA_3_0/source/utils: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 11:37:02 + (Wed, 27 Sep 2006)
New Revision: 18949

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18949

Log:
use sys_usleep()

metze
Modified:
   branches/SAMBA_3_0/source/utils/net_rpc_service.c
   branches/SAMBA_3_0/source/utils/status_profile.c


Changeset:
Modified: branches/SAMBA_3_0/source/utils/net_rpc_service.c
===
--- branches/SAMBA_3_0/source/utils/net_rpc_service.c   2006-09-27 11:15:03 UTC 
(rev 18948)
+++ branches/SAMBA_3_0/source/utils/net_rpc_service.c   2006-09-27 11:37:02 UTC 
(rev 18949)
@@ -80,7 +80,7 @@

d_printf(.);
i++;
-   usleep( 100 );
+   sys_usleep( 100 );
}
d_printf(\n);


Modified: branches/SAMBA_3_0/source/utils/status_profile.c
===
--- branches/SAMBA_3_0/source/utils/status_profile.c2006-09-27 11:15:03 UTC 
(rev 18948)
+++ branches/SAMBA_3_0/source/utils/status_profile.c2006-09-27 11:37:02 UTC 
(rev 18949)
@@ -409,11 +409,6 @@
 
 #ifdef WITH_PROFILE
 
-static void sample_delay(int delay_msec)
-{
-   poll(NULL, 0, delay_msec);
-}
-
 /* Convert microseconds to milliseconds. */
 #define usec_to_msec(s) ((s) / 1000)
 /* Convert microseconds to seconds. */
@@ -526,7 +521,7 @@
(unsigned long )usec_to_msec(remain_usec));
}
 
-   sample_delay(usec_to_msec(remain_usec));
+   sys_usleep(remain_usec);
}
 
}



svn commit: samba r18950 - in branches/SAMBA_3_0/source: . include

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 11:39:43 + (Wed, 27 Sep 2006)
New Revision: 18950

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18950

Log:
I can't see where stropts.h and poll.h are needed
(I just removed the only reference to poll() in my last commit)

they were added in this commit, without make usage of them.

http://cvs.samba.org/cgi-bin/cvsweb/samba/source/configure.in.diff?r1=1.21r2=1.22f=h
http://cvs.samba.org/cgi-bin/cvsweb/samba/source/include/includes.h.diff?r1=1.105r2=1.106f=h

metze
Modified:
   branches/SAMBA_3_0/source/configure.in
   branches/SAMBA_3_0/source/include/includes.h


Changeset:
Modified: branches/SAMBA_3_0/source/configure.in
===
--- branches/SAMBA_3_0/source/configure.in  2006-09-27 11:37:02 UTC (rev 
18949)
+++ branches/SAMBA_3_0/source/configure.in  2006-09-27 11:39:43 UTC (rev 
18950)
@@ -950,7 +950,6 @@
 esac
 AC_CHECK_HEADERS(shadow.h)
 AC_CHECK_HEADERS(nss.h nss_common.h nsswitch.h ns_api.h sys/security.h 
security/pam_appl.h)
-AC_CHECK_HEADERS(stropts.h poll.h)
 AC_CHECK_HEADERS(syscall.h sys/syscall.h)
 
 AC_CHECK_HEADERS(sys/acl.h sys/attributes.h attr/xattr.h sys/xattr.h 
sys/extattr.h sys/uio.h)

Modified: branches/SAMBA_3_0/source/include/includes.h
===
--- branches/SAMBA_3_0/source/include/includes.h2006-09-27 11:37:02 UTC 
(rev 18949)
+++ branches/SAMBA_3_0/source/include/includes.h2006-09-27 11:39:43 UTC 
(rev 18950)
@@ -118,14 +118,6 @@
 #include system/time.h
 #include system/wait.h
 
-#ifdef HAVE_STROPTS_H
-#include stropts.h
-#endif
-
-#ifdef HAVE_POLL_H
-#include poll.h
-#endif
-
 #if defined(HAVE_RPC_RPC_H)
 /*
  * Check for AUTH_ERROR define conflict with rpc/rpc.h in prot.h.



svn commit: samba r18951 - in branches/SAMBA_3_0/source/script/tests: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 12:42:24 + (Wed, 27 Sep 2006)
New Revision: 18951

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18951

Log:
socket_wrapper has only 16 interfaces anymore...

metze
Modified:
   branches/SAMBA_3_0/source/script/tests/selftest.sh


Changeset:
Modified: branches/SAMBA_3_0/source/script/tests/selftest.sh
===
--- branches/SAMBA_3_0/source/script/tests/selftest.sh  2006-09-27 11:39:43 UTC 
(rev 18950)
+++ branches/SAMBA_3_0/source/script/tests/selftest.sh  2006-09-27 12:42:24 UTC 
(rev 18951)
@@ -100,18 +100,20 @@
name resolve order = bcast
 EOF
 
+TORTURE_INTERFACES='127.0.0.6/8,127.0.0.7/8,127.0.0.8/8,127.0.0.9/8,127.0.0.10/8,127.0.0.11/8'
+
 cat $CONFFILEEOF
 [global]
-   netbios name = TORTURE26
-   interfaces = 127.0.0.26/8
+   netbios name = TORTURE_6
+   interfaces = $TORTURE_INTERFACES
panic action = $SCRIPTDIR/gdb_backtrace %d
include = $COMMONCONFFILE
 EOF
 
 cat $SAMBA4CONFFILEEOF
 [global]
-   netbios name = TORTURE26
-   interfaces = 127.0.0.26/8
+   netbios name = TORTURE_6
+   interfaces = $TORTURE_INTERFACES
panic action = $SCRIPTDIR/gdb_backtrace %PID% %PROG%
include = $COMMONCONFFILE
 EOF
@@ -172,11 +174,10 @@
 samba3_check_or_start
 
 # ensure any one smbtorture call doesn't run too long
-# and smbtorture will use 127.0.0.26 as source address by default
-SOCKET_WRAPPER_DEFAULT_IFACE=26
+# and smbtorture will use 127.0.0.6 as source address by default
+SOCKET_WRAPPER_DEFAULT_IFACE=6
 export SOCKET_WRAPPER_DEFAULT_IFACE
-TORTURE4_INTERFACES='127.0.0.26/8,127.0.0.27/8,127.0.0.28/8,127.0.0.29/8,127.0.0.30/8,127.0.0.31/8'
-TORTURE4_OPTIONS=--option=interfaces=$TORTURE4_INTERFACES 
$SAMBA4CONFIGURATION
+TORTURE4_OPTIONS=$SAMBA4CONFIGURATION
 TORTURE4_OPTIONS=$TORTURE4_OPTIONS --maximum-runtime=$TORTURE_MAXTIME
 TORTURE4_OPTIONS=$TORTURE4_OPTIONS --target=samba3
 export TORTURE4_OPTIONS



svn commit: samba r18952 - in branches/SAMBA_3_0/source/lib/talloc: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 12:43:08 + (Wed, 27 Sep 2006)
New Revision: 18952

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18952

Log:
fix compiler warning (merge from samba4)

metze
Modified:
   branches/SAMBA_3_0/source/lib/talloc/talloc.c


Changeset:
Modified: branches/SAMBA_3_0/source/lib/talloc/talloc.c
===
--- branches/SAMBA_3_0/source/lib/talloc/talloc.c   2006-09-27 12:42:24 UTC 
(rev 18951)
+++ branches/SAMBA_3_0/source/lib/talloc/talloc.c   2006-09-27 12:43:08 UTC 
(rev 18952)
@@ -743,7 +743,7 @@
 */
 void *_talloc_move(const void *new_ctx, const void *_pptr)
 {
-   const void **pptr = (const void **)_pptr;
+   const void **pptr = discard_const_p(const void *,_pptr);
void *ret = _talloc_steal(new_ctx, *pptr);
(*pptr) = NULL;
return ret;



svn commit: samba r18953 - in branches/SAMBA_3_0/source/lib: replace/system socket_wrapper

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 12:43:51 + (Wed, 27 Sep 2006)
New Revision: 18953

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18953

Log:
sync socket_wrapper with samba4

metze
Modified:
   branches/SAMBA_3_0/source/lib/replace/system/network.h
   branches/SAMBA_3_0/source/lib/socket_wrapper/socket_wrapper.c
   branches/SAMBA_3_0/source/lib/socket_wrapper/socket_wrapper.h


Changeset:
Modified: branches/SAMBA_3_0/source/lib/replace/system/network.h
===
--- branches/SAMBA_3_0/source/lib/replace/system/network.h  2006-09-27 
12:43:08 UTC (rev 18952)
+++ branches/SAMBA_3_0/source/lib/replace/system/network.h  2006-09-27 
12:43:51 UTC (rev 18953)
@@ -66,6 +66,10 @@
 #include net/if.h
 #endif
 
+#ifdef HAVE_SYS_IOCTL_H
+#include sys/ioctl.h
+#endif
+
 #ifdef SOCKET_WRAPPER
 #ifndef SOCKET_WRAPPER_NOT_REPLACE
 #define SOCKET_WRAPPER_REPLACE

Modified: branches/SAMBA_3_0/source/lib/socket_wrapper/socket_wrapper.c
===
--- branches/SAMBA_3_0/source/lib/socket_wrapper/socket_wrapper.c   
2006-09-27 12:43:08 UTC (rev 18952)
+++ branches/SAMBA_3_0/source/lib/socket_wrapper/socket_wrapper.c   
2006-09-27 12:43:51 UTC (rev 18953)
@@ -67,12 +67,14 @@
 #define real_accept accept
 #define real_connect connect
 #define real_bind bind
+#define real_listen listen
 #define real_getpeername getpeername
 #define real_getsockname getsockname
 #define real_getsockopt getsockopt
 #define real_setsockopt setsockopt
 #define real_recvfrom recvfrom
 #define real_sendto sendto
+#define real_ioctl ioctl
 #define real_recv recv
 #define real_send send
 #define real_socket socket
@@ -712,6 +714,20 @@
return ret;
 }
 
+_PUBLIC_ int swrap_listen(int s, int backlog)
+{
+   int ret;
+   struct socket_info *si = find_socket_info(s);
+
+   if (!si) {
+   return real_listen(s, backlog);
+   }
+
+   ret = real_listen(s, backlog);
+
+   return ret;
+}
+
 _PUBLIC_ int swrap_getpeername(int s, struct sockaddr *name, socklen_t 
*addrlen)
 {
struct socket_info *si = find_socket_info(s);
@@ -864,6 +880,20 @@
return ret;
 }
 
+_PUBLIC_ int swrap_ioctl(int s, int r, void *p)
+{
+   int ret;
+   struct socket_info *si = find_socket_info(s);   
+
+   if (!si) {
+   return real_ioctl(s, r, p);
+   }
+
+   ret = real_ioctl(s, r, p);
+
+   return ret;
+}
+
 _PUBLIC_ ssize_t swrap_recv(int s, void *buf, size_t len, int flags)
 {
int ret;

Modified: branches/SAMBA_3_0/source/lib/socket_wrapper/socket_wrapper.h
===
--- branches/SAMBA_3_0/source/lib/socket_wrapper/socket_wrapper.h   
2006-09-27 12:43:08 UTC (rev 18952)
+++ branches/SAMBA_3_0/source/lib/socket_wrapper/socket_wrapper.h   
2006-09-27 12:43:51 UTC (rev 18953)
@@ -23,12 +23,14 @@
 int swrap_accept(int s, struct sockaddr *addr, socklen_t *addrlen);
 int swrap_connect(int s, const struct sockaddr *serv_addr, socklen_t addrlen);
 int swrap_bind(int s, const struct sockaddr *myaddr, socklen_t addrlen);
+int swrap_listen(int s, int backlog);
 int swrap_getpeername(int s, struct sockaddr *name, socklen_t *addrlen);
 int swrap_getsockname(int s, struct sockaddr *name, socklen_t *addrlen);
 int swrap_getsockopt(int s, int level, int optname, void *optval, socklen_t 
*optlen);
 int swrap_setsockopt(int s, int  level,  int  optname,  const  void  *optval, 
socklen_t optlen);
 ssize_t swrap_recvfrom(int s, void *buf, size_t len, int flags, struct 
sockaddr *from, socklen_t *fromlen);
 ssize_t swrap_sendto(int s, const void *buf, size_t len, int flags, const 
struct sockaddr *to, socklen_t tolen);
+int swrap_ioctl(int s, int req, void *ptr);
 ssize_t swrap_recv(int s, void *buf, size_t len, int flags);
 ssize_t swrap_send(int s, const void *buf, size_t len, int flags);
 int swrap_close(int);
@@ -50,6 +52,11 @@
 #endif
 #define bind(s,myaddr,addrlen) swrap_bind(s,myaddr,addrlen)
 
+#ifdef listen
+#undef listen
+#endif
+#define listen(s,blog) swrap_listen(s,blog)
+
 #ifdef getpeername
 #undef getpeername
 #endif
@@ -80,6 +87,11 @@
 #endif
 #define sendto(s,buf,len,flags,to,tolen)  
swrap_sendto(s,buf,len,flags,to,tolen)
 
+#ifdef ioctl
+#undef ioctl
+#endif
+#define ioctl(s,req,ptr)   swrap_ioctl(s,req,ptr)
+
 #ifdef recv
 #undef recv
 #endif



svn commit: samba r18954 - in branches/SAMBA_3_0/source/rpc_server: .

2006-09-27 Thread jerry
Author: jerry
Date: 2006-09-27 13:24:57 + (Wed, 27 Sep 2006)
New Revision: 18954

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18954

Log:
Fix segv in QueryValue and Enumvalue.  regedit.exe now
is happy again when creating keys and values


Modified:
   branches/SAMBA_3_0/source/rpc_server/srv_winreg_nt.c


Changeset:
Modified: branches/SAMBA_3_0/source/rpc_server/srv_winreg_nt.c
===
--- branches/SAMBA_3_0/source/rpc_server/srv_winreg_nt.c2006-09-27 
12:43:51 UTC (rev 18953)
+++ branches/SAMBA_3_0/source/rpc_server/srv_winreg_nt.c2006-09-27 
13:24:57 UTC (rev 18954)
@@ -471,7 +471,7 @@
*value_length =  regval_size( val );
*type = val-type;
 
-   if ( *data_size == 0 ) {
+   if ( *data_size == 0 || !data ) {
status = WERR_OK;
} else if ( *value_length  *data_size ) {
status = WERR_MORE_DATA;
@@ -619,7 +619,7 @@
*value_length =  regval_size( val );
*type = val-type;
 
-   if ( *data_size == 0 ) {
+   if ( *data_size == 0 || !data ) {
status = WERR_OK;
} else if ( *value_length  *data_size ) {
status = WERR_MORE_DATA;



svn commit: samba r18955 - in branches/SAMBA_3_0/source/nsswitch: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 13:52:14 + (Wed, 27 Sep 2006)
New Revision: 18955

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18955

Log:
fix the build on solaris where unistd.h needs to be includes before
socket_wrapper defined ioctl swrap_ioctl

metze
Modified:
   branches/SAMBA_3_0/source/nsswitch/winbind_nss_config.h


Changeset:
Modified: branches/SAMBA_3_0/source/nsswitch/winbind_nss_config.h
===
--- branches/SAMBA_3_0/source/nsswitch/winbind_nss_config.h 2006-09-27 
13:24:57 UTC (rev 18954)
+++ branches/SAMBA_3_0/source/nsswitch/winbind_nss_config.h 2006-09-27 
13:52:14 UTC (rev 18955)
@@ -37,8 +37,8 @@
 #endif
 
 #include system/passwd.h
+#include system/filesys.h
 #include system/network.h
-#include system/filesys.h
 
 #include nsswitch/winbind_nss.h
 



svn commit: samba r18956 - in branches/SAMBA_3_0/source: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 14:10:35 + (Wed, 27 Sep 2006)
New Revision: 18956

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18956

Log:
fix -pie and -fPIE together with configure -C

metze
Modified:
   branches/SAMBA_3_0/source/configure.in


Changeset:
Modified: branches/SAMBA_3_0/source/configure.in
===
--- branches/SAMBA_3_0/source/configure.in  2006-09-27 13:52:14 UTC (rev 
18955)
+++ branches/SAMBA_3_0/source/configure.in  2006-09-27 14:10:35 UTC (rev 
18956)
@@ -340,22 +340,23 @@
 
 if test x$enable_pie != xno
 then
-   AC_CACHE_CHECK(for -fPIE, libc_cv_fpie, [dnl
+   AC_CACHE_CHECK(for -pie and -fPIE, samba_cv_fpie, [dnl
cat  conftest.c EOF
 int foo;
 main () { return 0;}
 EOF
if AC_TRY_COMMAND([${CC-cc} $CFLAGS $CPPFLAGS $LDFLAGS -pie 
-fPIE -o conftest conftest.c 1AS_MESSAGE_LOG_FD])
then
-   libc_cv_fpie=yes
-   PIE_CFLAGS=-fPIE
-   PIE_LDFLAGS=-pie
+   samba_cv_fpie=yes
+   else
+   samba_cv_fpie=no
fi
rm -f conftest*])
 fi
-if test x$PIE_CFLAGS = x
+if test x${samba_cv_fpie} = xyes
 then
-   libc_cv_fpie=no
+   PIE_CFLAGS=-fPIE
+   PIE_LDFLAGS=-pie
 fi
 
 m4_include(lib/socket_wrapper/config.m4)



svn commit: samba r18957 - in branches/SAMBA_4_0/source/lib/replace/system: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 14:16:32 + (Wed, 27 Sep 2006)
New Revision: 18957

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18957

Log:
we need to include unistd.h in system/network.h because
it contains the ioctl() prototype on some systems
and we need to make sure it gets included before socket_wrapper
defines ioctl swrap_ioctl

metze
Modified:
   branches/SAMBA_4_0/source/lib/replace/system/network.h


Changeset:
Modified: branches/SAMBA_4_0/source/lib/replace/system/network.h
===
--- branches/SAMBA_4_0/source/lib/replace/system/network.h  2006-09-27 
14:10:35 UTC (rev 18956)
+++ branches/SAMBA_4_0/source/lib/replace/system/network.h  2006-09-27 
14:16:32 UTC (rev 18957)
@@ -66,6 +66,10 @@
 #include net/if.h
 #endif
 
+#ifdef HAVE_UNISTD_H
+#include unistd.h
+#endif
+
 #ifdef HAVE_SYS_IOCTL_H
 #include sys/ioctl.h
 #endif



svn commit: samba r18958 - in branches/SAMBA_3_0/source/lib/replace/system: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 14:18:08 + (Wed, 27 Sep 2006)
New Revision: 18958

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18958

Log:
merge from samba4:

we need to include unistd.h in system/network.h because
it contains the ioctl() prototype on some systems
and we need to make sure it gets included before socket_wrapper
defines ioctl swrap_ioctl

metze

Modified:
   branches/SAMBA_3_0/source/lib/replace/system/network.h


Changeset:
Modified: branches/SAMBA_3_0/source/lib/replace/system/network.h
===
--- branches/SAMBA_3_0/source/lib/replace/system/network.h  2006-09-27 
14:16:32 UTC (rev 18957)
+++ branches/SAMBA_3_0/source/lib/replace/system/network.h  2006-09-27 
14:18:08 UTC (rev 18958)
@@ -66,6 +66,10 @@
 #include net/if.h
 #endif
 
+#ifdef HAVE_UNISTD_H
+#include unistd.h
+#endif
+
 #ifdef HAVE_SYS_IOCTL_H
 #include sys/ioctl.h
 #endif



svn commit: samba r18959 - in branches/SAMBA_3_0/source/libmsrpc: .

2006-09-27 Thread jerry
Author: jerry
Date: 2006-09-27 14:32:18 + (Wed, 27 Sep 2006)
New Revision: 18959

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18959

Log:
reformat using indent
Modified:
   branches/SAMBA_3_0/source/libmsrpc/cac_lsarpc.c
   branches/SAMBA_3_0/source/libmsrpc/cac_samr.c
   branches/SAMBA_3_0/source/libmsrpc/cac_svcctl.c
   branches/SAMBA_3_0/source/libmsrpc/cac_winreg.c
   branches/SAMBA_3_0/source/libmsrpc/libmsrpc.c
   branches/SAMBA_3_0/source/libmsrpc/libmsrpc_internal.c


Changeset:
Sorry, the patch is too large (11012 lines) to include; please use WebSVN to 
see it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18959


svn commit: samba r18960 - in branches/SAMBA_4_0/source/lib/replace: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 14:47:00 + (Wed, 27 Sep 2006)
New Revision: 18960

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18960

Log:
fix caching of some configure tests AC_CACHE_CHECK()
*needs* '_cv_' in the shell var to do caching...

metze
Modified:
   branches/SAMBA_4_0/source/lib/replace/dlfcn.m4
   branches/SAMBA_4_0/source/lib/replace/repdir.m4


Changeset:
Modified: branches/SAMBA_4_0/source/lib/replace/dlfcn.m4
===
--- branches/SAMBA_4_0/source/lib/replace/dlfcn.m4  2006-09-27 14:32:18 UTC 
(rev 18959)
+++ branches/SAMBA_4_0/source/lib/replace/dlfcn.m4  2006-09-27 14:47:00 UTC 
(rev 18960)
@@ -6,10 +6,10 @@
 
 AC_CHECK_HEADERS(dlfcn.h)
 
-libreplace_dlfcn=no
-AC_CHECK_FUNCS([dlopen dlsym dlerror dlclose],[],[libreplace_dlfcn=yes])
+libreplace_cv_dlfcn=no
+AC_CHECK_FUNCS([dlopen dlsym dlerror dlclose],[],[libreplace_cv_dlfcn=yes])
 
-if test x${libreplace_dlfcn} = xyes;then
+if test x${libreplace_cv_dlfcn} = xyes;then
LIBREPLACEOBJ=${LIBREPLACEOBJ} dlfcn.o
 fi
 

Modified: branches/SAMBA_4_0/source/lib/replace/repdir.m4
===
--- branches/SAMBA_4_0/source/lib/replace/repdir.m4 2006-09-27 14:32:18 UTC 
(rev 18959)
+++ branches/SAMBA_4_0/source/lib/replace/repdir.m4 2006-09-27 14:47:00 UTC 
(rev 18960)
@@ -1,38 +1,38 @@
-AC_CACHE_CHECK([for broken readdir],libreplace_READDIR_NEEDED,[
+AC_CACHE_CHECK([for broken readdir],libreplace_cv_READDIR_NEEDED,[
AC_TRY_RUN([
 #define test_readdir_os2_delete main
 #include $libreplacedir/test/os2_delete.c],
-   [libreplace_READDIR_NEEDED=no],
-   [libreplace_READDIR_NEEDED=yes],
-   [libreplace_READDIR_NEEDED=assuming not])
+   [libreplace_cv_READDIR_NEEDED=no],
+   [libreplace_cv_READDIR_NEEDED=yes],
+   [libreplace_cv_READDIR_NEEDED=assuming not])
 ])
 
 #
 # try to replace with getdents() if needed
 #
-if test x$libreplace_READDIR_NEEDED = xyes; then
+if test x$libreplace_cv_READDIR_NEEDED = xyes; then
 AC_CHECK_FUNCS(getdents)
-AC_CACHE_CHECK([for replacing readdir using 
getdents()],libreplace_READDIR_GETDENTS,[
+AC_CACHE_CHECK([for replacing readdir using 
getdents()],libreplace_cv_READDIR_GETDENTS,[
AC_TRY_RUN([
 #define _LIBREPLACE_REPLACE_H
 #include $libreplacedir/repdir_getdents.c
 #define test_readdir_os2_delete main
 #include $libreplacedir/test/os2_delete.c],
-   [libreplace_READDIR_GETDENTS=yes],
-   [libreplace_READDIR_GETDENTS=no])
+   [libreplace_cv_READDIR_GETDENTS=yes],
+   [libreplace_cv_READDIR_GETDENTS=no])
 ])
 fi
-if test x$libreplace_READDIR_GETDENTS = xyes; then
+if test x$libreplace_cv_READDIR_GETDENTS = xyes; then
AC_DEFINE(REPLACE_READDIR,1,[replace readdir])
AC_DEFINE(REPLACE_READDIR_GETDENTS,1,[replace readdir using getdents()])
LIBREPLACEOBJ=${LIBREPLACEOBJ} repdir_getdents.o
-   libreplace_READDIR_NEEDED=no
+   libreplace_cv_READDIR_NEEDED=no
 fi
 
 #
 # try to replace with getdirentries() if needed
 #
-if test x$libreplace_READDIR_NEEDED = xyes; then
+if test x$libreplace_cv_READDIR_NEEDED = xyes; then
 AC_CHECK_FUNCS(getdirentries)
 AC_VERIFY_C_PROTOTYPE([long telldir(const DIR *dir)],
[
@@ -51,25 +51,25 @@
],[],[
#include dirent.h
])
-AC_CACHE_CHECK([for replacing readdir using 
getdirentries()],libreplace_READDIR_GETDIRENTRIES,[
+AC_CACHE_CHECK([for replacing readdir using 
getdirentries()],libreplace_cv_READDIR_GETDIRENTRIES,[
AC_TRY_RUN([
 #define _LIBREPLACE_REPLACE_H
 #include $libreplacedir/repdir_getdirentries.c
 #define test_readdir_os2_delete main
 #include $libreplacedir/test/os2_delete.c],
-   [libreplace_READDIR_GETDIRENTRIES=yes],
-   [libreplace_READDIR_GETDIRENTRIES=no])
+   [libreplace_cv_READDIR_GETDIRENTRIES=yes],
+   [libreplace_cv_READDIR_GETDIRENTRIES=no])
 ])
 fi
-if test x$libreplace_READDIR_GETDIRENTRIES = xyes; then
+if test x$libreplace_cv_READDIR_GETDIRENTRIES = xyes; then
AC_DEFINE(REPLACE_READDIR,1,[replace readdir])
AC_DEFINE(REPLACE_READDIR_GETDIRENTRIES,1,[replace readdir using 
getdirentries()])
LIBREPLACEOBJ=${LIBREPLACEOBJ} repdir_getdirentries.o
-   libreplace_READDIR_NEEDED=no
+   libreplace_cv_READDIR_NEEDED=no
 fi
 
 AC_MSG_CHECKING([a usable readdir()])
-if test x$libreplace_READDIR_NEEDED = xyes; then
+if test x$libreplace_cv_READDIR_NEEDED = xyes; then
AC_MSG_RESULT(no)
AC_MSG_WARN([the provided readdir() is broken])
 else



svn commit: samba r18961 - in branches/SAMBA_3_0/source/lib/replace: .

2006-09-27 Thread metze
Author: metze
Date: 2006-09-27 14:47:36 + (Wed, 27 Sep 2006)
New Revision: 18961

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18961

Log:
merge from samba4:

fix caching of some configure tests AC_CACHE_CHECK()
*needs* '_cv_' in the shell var to do caching...

metze
Modified:
   branches/SAMBA_3_0/source/lib/replace/dlfcn.m4
   branches/SAMBA_3_0/source/lib/replace/repdir.m4


Changeset:
Modified: branches/SAMBA_3_0/source/lib/replace/dlfcn.m4
===
--- branches/SAMBA_3_0/source/lib/replace/dlfcn.m4  2006-09-27 14:47:00 UTC 
(rev 18960)
+++ branches/SAMBA_3_0/source/lib/replace/dlfcn.m4  2006-09-27 14:47:36 UTC 
(rev 18961)
@@ -6,10 +6,10 @@
 
 AC_CHECK_HEADERS(dlfcn.h)
 
-libreplace_dlfcn=no
-AC_CHECK_FUNCS([dlopen dlsym dlerror dlclose],[],[libreplace_dlfcn=yes])
+libreplace_cv_dlfcn=no
+AC_CHECK_FUNCS([dlopen dlsym dlerror dlclose],[],[libreplace_cv_dlfcn=yes])
 
-if test x${libreplace_dlfcn} = xyes;then
+if test x${libreplace_cv_dlfcn} = xyes;then
LIBREPLACEOBJ=${LIBREPLACEOBJ} dlfcn.o
 fi
 

Modified: branches/SAMBA_3_0/source/lib/replace/repdir.m4
===
--- branches/SAMBA_3_0/source/lib/replace/repdir.m4 2006-09-27 14:47:00 UTC 
(rev 18960)
+++ branches/SAMBA_3_0/source/lib/replace/repdir.m4 2006-09-27 14:47:36 UTC 
(rev 18961)
@@ -1,38 +1,38 @@
-AC_CACHE_CHECK([for broken readdir],libreplace_READDIR_NEEDED,[
+AC_CACHE_CHECK([for broken readdir],libreplace_cv_READDIR_NEEDED,[
AC_TRY_RUN([
 #define test_readdir_os2_delete main
 #include $libreplacedir/test/os2_delete.c],
-   [libreplace_READDIR_NEEDED=no],
-   [libreplace_READDIR_NEEDED=yes],
-   [libreplace_READDIR_NEEDED=assuming not])
+   [libreplace_cv_READDIR_NEEDED=no],
+   [libreplace_cv_READDIR_NEEDED=yes],
+   [libreplace_cv_READDIR_NEEDED=assuming not])
 ])
 
 #
 # try to replace with getdents() if needed
 #
-if test x$libreplace_READDIR_NEEDED = xyes; then
+if test x$libreplace_cv_READDIR_NEEDED = xyes; then
 AC_CHECK_FUNCS(getdents)
-AC_CACHE_CHECK([for replacing readdir using 
getdents()],libreplace_READDIR_GETDENTS,[
+AC_CACHE_CHECK([for replacing readdir using 
getdents()],libreplace_cv_READDIR_GETDENTS,[
AC_TRY_RUN([
 #define _LIBREPLACE_REPLACE_H
 #include $libreplacedir/repdir_getdents.c
 #define test_readdir_os2_delete main
 #include $libreplacedir/test/os2_delete.c],
-   [libreplace_READDIR_GETDENTS=yes],
-   [libreplace_READDIR_GETDENTS=no])
+   [libreplace_cv_READDIR_GETDENTS=yes],
+   [libreplace_cv_READDIR_GETDENTS=no])
 ])
 fi
-if test x$libreplace_READDIR_GETDENTS = xyes; then
+if test x$libreplace_cv_READDIR_GETDENTS = xyes; then
AC_DEFINE(REPLACE_READDIR,1,[replace readdir])
AC_DEFINE(REPLACE_READDIR_GETDENTS,1,[replace readdir using getdents()])
LIBREPLACEOBJ=${LIBREPLACEOBJ} repdir_getdents.o
-   libreplace_READDIR_NEEDED=no
+   libreplace_cv_READDIR_NEEDED=no
 fi
 
 #
 # try to replace with getdirentries() if needed
 #
-if test x$libreplace_READDIR_NEEDED = xyes; then
+if test x$libreplace_cv_READDIR_NEEDED = xyes; then
 AC_CHECK_FUNCS(getdirentries)
 AC_VERIFY_C_PROTOTYPE([long telldir(const DIR *dir)],
[
@@ -51,25 +51,25 @@
],[],[
#include dirent.h
])
-AC_CACHE_CHECK([for replacing readdir using 
getdirentries()],libreplace_READDIR_GETDIRENTRIES,[
+AC_CACHE_CHECK([for replacing readdir using 
getdirentries()],libreplace_cv_READDIR_GETDIRENTRIES,[
AC_TRY_RUN([
 #define _LIBREPLACE_REPLACE_H
 #include $libreplacedir/repdir_getdirentries.c
 #define test_readdir_os2_delete main
 #include $libreplacedir/test/os2_delete.c],
-   [libreplace_READDIR_GETDIRENTRIES=yes],
-   [libreplace_READDIR_GETDIRENTRIES=no])
+   [libreplace_cv_READDIR_GETDIRENTRIES=yes],
+   [libreplace_cv_READDIR_GETDIRENTRIES=no])
 ])
 fi
-if test x$libreplace_READDIR_GETDIRENTRIES = xyes; then
+if test x$libreplace_cv_READDIR_GETDIRENTRIES = xyes; then
AC_DEFINE(REPLACE_READDIR,1,[replace readdir])
AC_DEFINE(REPLACE_READDIR_GETDIRENTRIES,1,[replace readdir using 
getdirentries()])
LIBREPLACEOBJ=${LIBREPLACEOBJ} repdir_getdirentries.o
-   libreplace_READDIR_NEEDED=no
+   libreplace_cv_READDIR_NEEDED=no
 fi
 
 AC_MSG_CHECKING([a usable readdir()])
-if test x$libreplace_READDIR_NEEDED = xyes; then
+if test x$libreplace_cv_READDIR_NEEDED = xyes; then
AC_MSG_RESULT(no)
AC_MSG_WARN([the provided readdir() is broken])
 else



svn commit: samba r18962 - in branches/SAMBA_3_0/source: librpc/gen_ndr librpc/idl rpc_server

2006-09-27 Thread jerry
Author: jerry
Date: 2006-09-27 16:05:25 + (Wed, 27 Sep 2006)
New Revision: 18962

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18962

Log:
* Add IDL for SaveKey() and RestoreKey() and regenerated
* Tested RegSaveKey() using win32 app.  Apparently 
  this code has been brokne for a really long time.


Modified:
   branches/SAMBA_3_0/source/librpc/gen_ndr/cli_winreg.c
   branches/SAMBA_3_0/source/librpc/gen_ndr/cli_winreg.h
   branches/SAMBA_3_0/source/librpc/gen_ndr/ndr_winreg.c
   branches/SAMBA_3_0/source/librpc/gen_ndr/ndr_winreg.h
   branches/SAMBA_3_0/source/librpc/gen_ndr/srv_winreg.c
   branches/SAMBA_3_0/source/librpc/gen_ndr/srv_winreg.h
   branches/SAMBA_3_0/source/librpc/gen_ndr/winreg.h
   branches/SAMBA_3_0/source/librpc/idl/winreg.idl
   branches/SAMBA_3_0/source/rpc_server/srv_winreg_nt.c


Changeset:
Sorry, the patch is too large (540 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18962


svn commit: samba-web r1045 - in trunk: .

2006-09-27 Thread sfrench
Author: sfrench
Date: 2006-09-27 18:18:46 + (Wed, 27 Sep 2006)
New Revision: 1045

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=1045

Log:
update CIFS POSIX protocol web page

Modified:
   trunk/CIFS_POSIX_extensions.html


Changeset:
Modified: trunk/CIFS_POSIX_extensions.html
===
--- trunk/CIFS_POSIX_extensions.html2006-09-26 18:19:39 UTC (rev 1044)
+++ trunk/CIFS_POSIX_extensions.html2006-09-27 18:18:46 UTC (rev 1045)
@@ -29,12 +29,12 @@
   TD vAlign=top width=20% bgColor=#ee!-- Menu (Left Column) 
--!-- Menu --
   CENTERIMG alt=http://us1.samba.org/samba/images/cifs-rail.jpg; 
src=samba/images/cifs-rail.jpg/CENTER
A href=http://en.wikipedia.org/wiki/CIFS;What is the CIFS 
Protocol?A
-  A 
-  href=mailto:[EMAIL PROTECTED]@us.ibm.comQuestions to 
developers/Anbsp;
+  PA 
+  href=mailto:[EMAIL PROTECTED]@us.ibm.comQuestions to 
developers/Anbsp;/P
   UL
 LIA href=ftp://ftp.microsoft.com/developr/drg/cifs/; Older 
Specifications/A
LIA href=http://ubiqx.org/cifs/References.html;Miscellaneous 
references to SMB/CIFS and loosely related protocols/A
-   LIPresentations
+   LIA 
href=http://samba.org/samba/ftp/cifs-cvs/snia-developer-2006-cifs-extensions.pdf;Presentations/A
 LIA 
href=http://www.snia.org/tech_activities/CIFS/CIFS-TR-1p00_FINAL.pdf;SNIA 
 CIFS Specification/Anbsp;
LIA 
href=http://www.ietf.org/internet-drafts/draft-crhertel-smb-url-11.txt;SMB 
URL Specification/Anbsp;
@@ -50,22 +50,22 @@
   extensions are already implemented in multiple clients and servers.
   BR
   nbsp;
-  /TD
P30 Second History of the SMB/CIFS Protocol
UL
LI1984 Initial SMB Specification Published by IBM based on the work 
of Dr. Bary Feigenbaum and team
LI1985-1992 SMB Protocol extended by IBM, 3Com, Intel and Microsoft, 
and becomes the default filesystem protocol for DOS, OS/2 and Windows operating 
systems among others.
LI1992 X/Open publishes an updated version of the SMB standard: 
Protocols for X/Open PC Interworking: SMB Version 2 (CAE 209)
LI1994-1995 IBM Extends SMB to include support for DCE/Kerberos
-   LI1996 With the slow speed of HTTP for certain workloads, two key 
network filesystem protocols begin to become more internet friendly. Sun 
announces WebNFS and Microsoft extends and renames SMB (announcing CIFS - The 
Common Internet File System Protocol.  More formal documentation is developed 
describing the complex SMB/CIFS protocol in detail.
-   LI1996-2006 Annual CIFS Deveper Conferences are held to improve on 
interoperability.
+   LI1996 With the slow speed of HTTP for certain workloads, two key 
network filesystem protocols begin to become more internet friendly. Sun 
announces WebNFS and Microsoft extends and renames SMB (announcing CIFS - The 
Common Internet File System Protocol).  More formal CIFS documentation is 
written describing the complex SMB/CIFS protocol in detail.
+   LI1996-2006 Annual CIFS Deveper Conferences are held to improve 
interoperability.
LI1999-2001 SCO and HP add/document optional Unix Extensions to CIFS 
Protocol, Thursby adds/documents optional Macintosh extensions.
LI2002 After multiyear effort involving many companies including 
Microsoft, IBM and NetApp, The Storage Network Industry Association releases 
the SNIA CIFS Technical Reference (which also includes Unix and Mac protocol 
extensions for CIFS)
LI2003 NFSv4 (RFC 3530) released borrowing many ideas from CIFS
LI2004 Work begins on an improved set of extensions to the CIFS 
Protocol for better support of POSIX clients.
LI2006 Samba client and server and Linux client implement CIFS POSIX 
Extensions
/UL
-   
+   /TD
+   /PL   
 /TR
 TR
   TD vAlign=top/TD



svn commit: samba r18963 - in branches/SAMBA_3_0/source: include lib libmsrpc

2006-09-27 Thread jerry
Author: jerry
Date: 2006-09-27 19:03:54 + (Wed, 27 Sep 2006)
New Revision: 18963

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18963

Log:
* Move parts of registry headers that were still in 
  use to reg_objects.h
* Remove unused rpc headers


Removed:
   branches/SAMBA_3_0/source/include/rpc_reg.h
   branches/SAMBA_3_0/source/include/rpc_shutdown.h
   branches/SAMBA_3_0/source/include/rpc_wkssvc.h
Modified:
   branches/SAMBA_3_0/source/include/includes.h
   branches/SAMBA_3_0/source/include/reg_objects.h
   branches/SAMBA_3_0/source/lib/util_reg.c
   branches/SAMBA_3_0/source/libmsrpc/libmsrpc_internal.c


Changeset:
Sorry, the patch is too large (787 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18963


svn commit: samba r18964 - in branches/SAMBA_3_0/source/utils: .

2006-09-27 Thread jerry
Author: jerry
Date: 2006-09-27 21:37:43 + (Wed, 27 Sep 2006)
New Revision: 18964

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18964

Log:
fix 'net rpc registry save' to use the new wnireg client code
Modified:
   branches/SAMBA_3_0/source/utils/net_rpc_registry.c


Changeset:
Modified: branches/SAMBA_3_0/source/utils/net_rpc_registry.c
===
--- branches/SAMBA_3_0/source/utils/net_rpc_registry.c  2006-09-27 19:03:54 UTC 
(rev 18963)
+++ branches/SAMBA_3_0/source/utils/net_rpc_registry.c  2006-09-27 21:37:43 UTC 
(rev 18964)
@@ -1,8 +1,9 @@
 /* 
Samba Unix/Linux SMB client library 
Distributed SMB/CIFS Server Management Utility 
-   Copyright (C) Gerald (Jerry) Carter  2005
 
+   Copyright (C) Gerald (Jerry) Carter  2005-2006
+
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
@@ -210,6 +211,7 @@
POLICY_HND pol_hive, pol_key; 
NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
struct winreg_String subkeyname;
+   struct winreg_String filename;

if (argc != 2 ) {
d_printf(Usage:net rpc backup path file \n);
@@ -237,19 +239,12 @@
return werror_to_ntstatus(result);
}

-#if 0  /* IDL not implemented */
-   /* original call was: rpccli_reg_save_key(pipe_hnd, mem_ctx, pol_key, 
argv[1] ); */
-
-   status = rpccli_winreg_SaveKey( cli, mem_ctx );
+   filename.name = argv[1];
+   status = rpccli_winreg_SaveKey( pipe_hnd, mem_ctx, pol_key, filename, 
NULL  );
if ( !W_ERROR_IS_OK(result) ) {
d_fprintf(stderr, Unable to save [%s] to %s:%s\n, argv[0], 
cli-desthost, argv[1]);
}
-#else
-   d_printf(Call not implemented.\n);
-   status = NT_STATUS_NOT_IMPLEMENTED;
-#endif

-   
/* cleanup */

rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, pol_key );



svn commit: samba-web r1046 - in trunk: .

2006-09-27 Thread sfrench
Author: sfrench
Date: 2006-09-27 22:57:36 + (Wed, 27 Sep 2006)
New Revision: 1046

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=1046

Log:
Update title of CIFS POSIX web page

Modified:
   trunk/CIFS_POSIX_extensions.html


Changeset:
Modified: trunk/CIFS_POSIX_extensions.html
===
--- trunk/CIFS_POSIX_extensions.html2006-09-27 18:18:46 UTC (rev 1045)
+++ trunk/CIFS_POSIX_extensions.html2006-09-27 22:57:36 UTC (rev 1046)
@@ -1,7 +1,7 @@
 !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN
 !-- saved from url=(0049)http://www.samba.org/samba/Linux_CIFS_client.html --
 HTMLHEAD
-TITLELinux CIFS Client/TITLE
+TITLECIFS POSIX Protocol/TITLE
 META http-equiv=Content-Type content=text/html; charset=iso-8859-1
 META content=IBM WebSphere Studio Homepage Builder V6.0.2 for Windows 
name=GENERATOR
 META http-equiv=Content-Style-Type content=text/css



svn commit: samba r18965 - in branches/SAMBA_4_0/source/libcli/auth: .

2006-09-27 Thread tridge
Author: tridge
Date: 2006-09-27 23:24:36 + (Wed, 27 Sep 2006)
New Revision: 18965

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18965

Log:

fixed the bug with RPC-NETLOGON and solaris sparc machines. This bug
took a _LONG_ time to find.

The problem was that when encoding/decoding password buffers we use
the pull/push string functions, which by default align unicode
strings. But on solaris sparc the buffer is not aligned always (its a
stack variable, an array of uint8_t). That perfectly OK in C, so we
just tell the pull/push functions not to auto-align.

Modified:
   branches/SAMBA_4_0/source/libcli/auth/smbencrypt.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/auth/smbencrypt.c
===
--- branches/SAMBA_4_0/source/libcli/auth/smbencrypt.c  2006-09-27 21:37:43 UTC 
(rev 18964)
+++ branches/SAMBA_4_0/source/libcli/auth/smbencrypt.c  2006-09-27 23:24:36 UTC 
(rev 18965)
@@ -460,6 +460,9 @@
uint8_t new_pw[512];
size_t new_pw_len;
 
+   /* the incoming buffer can be any alignment. */
+   string_flags |= STR_NOALIGN;
+
new_pw_len = push_string(new_pw,
 password, 
 sizeof(new_pw), string_flags);
@@ -489,6 +492,9 @@
 {
int byte_len=0;
 
+   /* the incoming buffer can be any alignment. */
+   string_flags |= STR_NOALIGN;
+
/*
  Warning !!! : This function is called from some rpc call.
  The password IN the buffer may be a UNICODE string.



Build status as of Thu Sep 28 00:00:02 2006

2006-09-27 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2006-09-27 
00:00:23.0 +
+++ /home/build/master/cache/broken_results.txt 2006-09-28 00:00:04.0 
+
@@ -1,21 +1,21 @@
-Build status as of Wed Sep 27 00:00:02 2006
+Build status as of Thu Sep 28 00:00:02 2006
 
 Build counts:
 Tree Total  Broken Panic 
 SOC  0  0  0 
 build_farm   0  0  0 
-ccache   44 7  0 
-distcc   44 7  0 
-ldb  40 5  0 
-libreplace   40 1  0 
-lorikeet-heimdal 18 14 0 
-ppp  17 1  0 
-rsync44 12 0 
+ccache   45 6  0 
+distcc   45 7  0 
+ldb  41 5  0 
+libreplace   42 1  0 
+lorikeet-heimdal 19 15 0 
+ppp  18 0  0 
+rsync45 12 0 
 samba0  0  0 
 samba-docs   0  0  0 
-samba4   42 14 4 
-samba_3_041 21 1 
-smb-build29 4  0 
-talloc   43 3  0 
-tdb  41 2  0 
+samba4   43 14 5 
+samba_3_042 20 1 
+smb-build31 3  0 
+talloc   45 3  0 
+tdb  43 2  0 
 


svn commit: samba r18967 - in branches/SAMBA_3_0_23/source/libsmb: .

2006-09-27 Thread jra
Author: jra
Date: 2006-09-28 00:06:10 + (Thu, 28 Sep 2006)
New Revision: 18967

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18967

Log:
Fix in case we do another 3.0.23 release.

From tridge :

this bug affects Samba3 too. I'm actually surprised nobody has
reported that Samba3 on Solaris Sparc with the native compiler can't
join Windows domains. If it worked we were just lucky. I suspect it
just didn't work.


Modified:
   branches/SAMBA_3_0_23/source/libsmb/smbencrypt.c


Changeset:
Modified: branches/SAMBA_3_0_23/source/libsmb/smbencrypt.c
===
--- branches/SAMBA_3_0_23/source/libsmb/smbencrypt.c2006-09-27 23:31:53 UTC 
(rev 18966)
+++ branches/SAMBA_3_0_23/source/libsmb/smbencrypt.c2006-09-28 00:06:10 UTC 
(rev 18967)
@@ -464,6 +464,9 @@
uchar new_pw[512];
size_t new_pw_len;
 
+   /* the incoming buffer can be any alignment. */
+   string_flags |= STR_NOALIGN;
+
new_pw_len = push_string(NULL, new_pw,
 password, 
 sizeof(new_pw), string_flags);
@@ -494,6 +497,9 @@
 {
int byte_len=0;
 
+   /* the incoming buffer can be any alignment. */
+   string_flags |= STR_NOALIGN;
+
/*
  Warning !!! : This function is called from some rpc call.
  The password IN the buffer may be a UNICODE string.



svn commit: samba r18969 - in branches/SAMBA_3_0/source: include libsmb sam

2006-09-27 Thread gd
Author: gd
Date: 2006-09-28 03:21:49 + (Thu, 28 Sep 2006)
New Revision: 18969

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18969

Log:
Fix typo.

Guenther

Modified:
   branches/SAMBA_3_0/source/include/client.h
   branches/SAMBA_3_0/source/libsmb/cliconnect.c
   branches/SAMBA_3_0/source/sam/idmap_rid.c


Changeset:
Modified: branches/SAMBA_3_0/source/include/client.h
===
--- branches/SAMBA_3_0/source/include/client.h  2006-09-28 01:17:16 UTC (rev 
18968)
+++ branches/SAMBA_3_0/source/include/client.h  2006-09-28 03:21:49 UTC (rev 
18969)
@@ -175,6 +175,6 @@
 
 #define CLI_FULL_CONNECTION_DONT_SPNEGO 0x0001
 #define CLI_FULL_CONNECTION_USE_KERBEROS 0x0002
-#define CLI_FULL_CONNECTION_ANNONYMOUS_FALLBACK 0x0004
+#define CLI_FULL_CONNECTION_ANONYMOUS_FALLBACK 0x0004
 
 #endif /* _CLIENT_H */

Modified: branches/SAMBA_3_0/source/libsmb/cliconnect.c
===
--- branches/SAMBA_3_0/source/libsmb/cliconnect.c   2006-09-28 01:17:16 UTC 
(rev 18968)
+++ branches/SAMBA_3_0/source/libsmb/cliconnect.c   2006-09-28 03:21:49 UTC 
(rev 18969)
@@ -1530,7 +1530,7 @@
  pw_len, domain);
if (!NT_STATUS_IS_OK(nt_status)) {
 
-   if (!(flags  CLI_FULL_CONNECTION_ANNONYMOUS_FALLBACK)) {
+   if (!(flags  CLI_FULL_CONNECTION_ANONYMOUS_FALLBACK)) {
DEBUG(1,(failed session setup with %s\n,
 nt_errstr(nt_status)));
cli_shutdown(cli);
@@ -1688,7 +1688,7 @@

nt_status = cli_full_connection(cli, myname, server, server_ip, 0, 
IPC$, IPC, 
user_info-username, lp_workgroup(), 
user_info-password, 
-   
CLI_FULL_CONNECTION_ANNONYMOUS_FALLBACK, Undefined, NULL);
+   CLI_FULL_CONNECTION_ANONYMOUS_FALLBACK, 
Undefined, NULL);
 
if (NT_STATUS_IS_OK(nt_status)) {
return cli;

Modified: branches/SAMBA_3_0/source/sam/idmap_rid.c
===
--- branches/SAMBA_3_0/source/sam/idmap_rid.c   2006-09-28 01:17:16 UTC (rev 
18968)
+++ branches/SAMBA_3_0/source/sam/idmap_rid.c   2006-09-28 03:21:49 UTC (rev 
18969)
@@ -226,7 +226,7 @@
username,
lp_workgroup(),
password,
-   CLI_FULL_CONNECTION_ANNONYMOUS_FALLBACK, True, NULL);
+   CLI_FULL_CONNECTION_ANONYMOUS_FALLBACK, True, NULL);
 
if (!NT_STATUS_IS_OK(status)) {
DEBUG(1, (rid_idmap_get_domains: could not setup connection to 
dc\n));