[Samba] Vista joinDomain gdwError = 0x32

2008-03-03 Thread Mario Gzuk
Hi,
I am trying to join MS Vista to a samba (3.0.23) Domain. If I join the
domain manually all works fine, but when I try the unattended method I
got the following errors:

2008-03-04 02:58:32, Error[unattendedjoin.exe]
Unattended Join: NetJoinDomain failed error code is [50]
2008-03-04 02:58:32, Error[unattendedjoin.exe]
Unattended Join: Unable to join; gdwError = 0x32

I am searching the samba logs and the Internet, but there is no
description of this error (also not on microsoft.com). Maybe someone of
the samba experts know this error code? 
Let me know if you need more information.

Thank you for any hint.

greetings mario

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba server joining domain and browsing group shares

2008-03-03 Thread Alex de Vaal
On Fri, Feb 29, 2008 at 5:06 PM, Victor Mendez [EMAIL PROTECTED]
wrote:

Output of getent command:

 cuzco:~ # getent group NETSYS\Documentaries
 documentaries:x:10008:netsys\fmendez,netsys\vmendez,amendez

 cuzco:~ # getent group NETSYS\Series
 series:x:10007:netsys\fmendez,netsys\vmendez,amendez

 cuzco:~ # getent group NETSYS\Movies
 movies:x:10005:netsys\vmendez,amendez,fmendez

 So it looks as we have solved the winbind separator problem .


Hi Victor,

This is the correct output of then getent group command. This is how I see
it on my Samba servers too, so it seems that your winbind problem is solved
indeed!

But we still get no directory browse. I include the output of
 the /var/log/samba/* files group when I try to login from a workstation
 see smb-logs.tar.gz

 In this file there is two errors that brough my attention:
 1st error =
  02/29/2008 10:22:01 AM libads/kerberos_verify.c
  ads_keytab_verify_ticket172
 ads_keytab_verify_ticket: krb5_rd_req failed for all 12 matched keytab
 principals

 2nd error =
 02/29/2008 10:22:01 AM  lib/util_sid.c  string_to_sid   223
 string_to_sid: Sid
 @NETSYSTEMSINFOCOM\Documentaries does not start with 'S-'.

 what I try to do is I try to browse/connect to the Documentaries share



Error messages of winbind can be found in the /var/log/samba/winbindd.log.
Look in this file or on the log file of the IP number that tries to connect
(via browse) to the share but you'll probably see Failed to verify incoming
ticket.
This can be a number of things. Where did you get the Samba packages?
Which Kerberos version are you using on your server?

Did you configure /etc/krb5.conf too?

My /etc/krb5.conf looks like this:

[libdefaults]
 default_realm = TEST.COM

[realms]
 NH-HOTELES.COM = {
  kdc = adm01.test.com:88
  kdc = adm03.test.com:88
  kdc = adm04.test.com:88
 }


I have Red Hat Linux servers and to connect to a Windows Server 2003 I need
at least MIT Kerberos version 1.3.1 on my Linux server with the Samba Red
Hat packages downloaded from samba.org
Your Linux server must be in timesync with the DC too; use ntpdate -b IP
address of DC to synchronize time.
Use the net ads info command to see if you're in timesync (look at Server
time offset, must be around 0, but not more than 300!)

Sometimes you need to reboot your workstation too that need to connect to
the share on the samba server.

If you don't use MIT kerberos, but HEIMDAL kerberos, you have to look in the
Samba documentation how to configure this (it is well described).


I hope this helps!

Regards,
Alex.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba server joining domain and browsing group shares

2008-03-03 Thread Alex de Vaal
On Mon, Mar 3, 2008 at 2:06 PM, Alex de Vaal wrote:

Did you configure /etc/krb5.conf too?

 My /etc/krb5.conf looks like this:

 [libdefaults]
  default_realm = TEST.COM

 [realms]
  NH-HOTELES.COM = {
   kdc = adm01.test.com:88
   kdc = adm03.test.com:88
   kdc = adm04.test.com:88
  }


This is the correct /etc/krb5.conf file (sorry):

[libdefaults]
 default_realm = TEST.COM

[realms]
 TEST.COM = {
  kdc = adm01.test.com:88
  kdc = adm03.test.com:88
  kdc = adm04.test.com:88
 }

kdc equals a Domain Controller in your AD (Kerberos server).

Regards,
Alex.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: workgroup remains invisible!

2008-03-03 Thread joop gerritse
On Monday 03 March 2008 13:01:47 [EMAIL PROTECTED] wrote:
 On 3/2/2008, joop gerritse ([EMAIL PROTECTED]) wrote:
  security = share

 This is incorrect for a domain/PDC, should be:

 security = user


I changed it, however, no effect seen yet...

 When asking questions, it is usually necessary to mention what
 OS/Distribution you are using, what version of Samba, how it was
 installed, etc...

I am running Slackware 12.0, Samba 3.0.28.

And testparm gives no error messages...

-- 
J.J. Gerritse
Mühlenstraße 11
D-47546 Kalkar-Wissel
Duitsland
+49-2824-971487
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] fun with compiling samba

2008-03-03 Thread Brad C
Hi Guys,

Please look at this when making after configuring on SLES9

make: *** No rule to make target `modules/vfs_afsacl.po', needed by
`bin/afsacl.so'. Stop.

samba-3.0.28/source
./configure --with-smbmount --with-cifsmount --with-acl-support
--with-winbind --with-vfs-afsacl --with-quotas --with-ldap

this is the only other reference I have to it.. :|

http://threebit.net/mail-archive/samba/msg04581.html
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: workgroup remains invisible!

2008-03-03 Thread Charles Marcus

On 3/3/2008, joop gerritse ([EMAIL PROTECTED]) wrote:

This is incorrect for a domain/PDC, should be:

security = user



I changed it, however, no effect seen yet...


Did you restart Samba?

But, like I said before - there were other problems with your config, 
but they were basic enough to warrant a blanket 'go back to the drawing 
board and read the current docs from scratch' comment...


--

Best regards,

Charles
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] SID Question/Issue

2008-03-03 Thread mrosamba
Since about 1998 we have been running a samba PDC to serve student PC's in
our high school and middle school.  We also have had a backup server,
normally not running samba, which rsyncs from the samba PDC several times
per day.  If we have a failure and needed to get the backup running, it is
a simple script basically changing the IP address and activating samba on
the backup server.

Now we want to turn the backup server into a domain member server which I
assume means that it needs its own SID. So the question is how do I create
a new SID?  Is there a utility or should I uninstall/reinstall samba? Or
is there another way?

We still are simple and use smbpasswd.

Mark Orenstein
East Granby, CT School System

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Vista SP1-rc1 appears to break against Samba-3.0.27a

2008-03-03 Thread Petr Sedlacek

Hi Jeremy,

I started having similar problems after installing Vista SP1 RTM. I 
patched samba to dump that *auth_data blob, here it is:


[2008/03/03 17:20:33, 10] libsmb/clikrb5.c:unwrap_pac(292)
  authorization data is not a Windows PAC (type: 141)
[2008/03/03 17:20:33, 10] libsmb/clikrb5.c:unwrap_pac(294)
  DATA_BLOB *auth_data dump follows:
[2008/03/03 17:20:33, 10] lib/util.c:dump_data(2264)
  [000] B0 0F 3F 80 43 00 00 00  16 96 21 80 70 13 40 80  °.?.C... [EMAIL 
PROTECTED]
  [010] D0 1D 83 BF 16 96 21 80  84 CE 36 80 00 00 00 00  Đ..ż..!. .Î6.
  [020] 58 34 83 BF 08 1E 83 BF  A3 4E 2C 80 80 8E 3F 80  X4.ż...ż ŁN,...?.
  [030] E4 1D 83 BF 28 D4 3D 80  01 00 00 00 98 02 39 80  ä..ż(Ô=. ..9.
  [040] 00 00 00  ...
[2008/03/03 17:20:33, 3] libads/kerberos_verify.c:ads_verify_ticket(469)
  ads_verify_ticket: did not retrieve auth data. continuing without PAC

If you need any more information/tests, please let me know, I will be 
more than happy to assist! I'd be really grateful if this compatibility 
issue could be solved soon.


Best regards
Petr


Jeremy Allison wrote:

On Tue, Dec 11, 2007 at 06:28:53PM -0800, Jeremy Allison wrote:

On Wed, Dec 12, 2007 at 01:49:43PM +1300, Jason Haar wrote:

..whereas Vista-SP1rc1 shows

[2007/12/12 00:20:42, 10]
libsmb/clikrb5.c:get_krb5_smb_session_key(735)  Got KRB5 session
key of length 16
[2007/12/12 00:20:42, 10] libsmb/clikrb5.c:unwrap_pac(292) authorization
data is not a Windows PAC (type: 141)


Ah yes. That's the key. Samba isn't getting the pac info
correctly so no group info. We need to see a the data
blob auth_data being passed to this function in libsmb/clikrb5.c :

bool unwrap_pac(TALLOC_CTX *mem_ctx, DATA_BLOB *auth_data, DATA_BLOB
*unwrapped_pac_data)


We're looking for a type of :

#define KRB5_AUTHDATA_WIN2K_PAC 128

and getting 141 instead. I really need to see that blob :-).

Jeremy.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba and /etc/passwd

2008-03-03 Thread Shain Miley

Hello all,
I was wondering if anyone knew a way to configure samba so that it does 
not use /etc/passwd for a list of users,group id's,etc.  I am currently 
setting up a server to authenticate against AD.  I have that configured 
fine.  The overall goal here is to provide a samba backup to our 
existing fileserverserver.  Here is the problem:  we need a way to sync 
the info in /etc/passwd between servers, these two serves will have a 
different list of users,groups,etc.  So instead of writing a script that 
will compare the two and add the ones as needed (as well as do a bunch 
of other cleanup work) I thought maybe I could have samba point to 
/home/user_name/passwd instead...samba has what it needs..and the 
accounts on the server itself (/etc/passwd) can be left untouched.


Thanks in advance,

Shain
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba and /etc/passwd

2008-03-03 Thread Michael Heydon

Shain Miley wrote:

Hello all,
I was wondering if anyone knew a way to configure samba so that it 
does not use /etc/passwd for a list of users,group id's,etc.  I am 
currently setting up a server to authenticate against AD.  I have that 
configured fine.  The overall goal here is to provide a samba backup 
to our existing fileserverserver.  Here is the problem:  we need a way 
to sync the info in /etc/passwd between servers, these two serves will 
have a different list of users,groups,etc.  So instead of writing a 
script that will compare the two and add the ones as needed (as well 
as do a bunch of other cleanup work) I thought maybe I could have 
samba point to /home/user_name/passwd instead...samba has what it 
needs..and the accounts on the server itself (/etc/passwd) can be left 
untouched.


Thanks in advance,

Shain


Samba doesn't look at /etc/password directly, however it does require 
that any user who connects must have a valid uid on the server. I can 
suggest a couple of ways you could hack something together to make it 
easy to sync parts of /etc/password between machines but I would suggest 
checking out ldap first.


*Michael Heydon - IT Administrator *
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba and /etc/passwd

2008-03-03 Thread John Mazza
This sounds like a situation just crying out for Winbind authentication.
I'd say set the boxes up for that rather than messing around with
the /etc/passwd files.

With Winbind, you don't need local accounts.



On Tue, 2008-03-04 at 08:17 +0900, Michael Heydon wrote:
 Shain Miley wrote:
  Hello all,
  I was wondering if anyone knew a way to configure samba so that it 
  does not use /etc/passwd for a list of users,group id's,etc.  I am 
  currently setting up a server to authenticate against AD.  I have that 
  configured fine.  The overall goal here is to provide a samba backup 
  to our existing fileserverserver.  Here is the problem:  we need a way 
  to sync the info in /etc/passwd between servers, these two serves will 
  have a different list of users,groups,etc.  So instead of writing a 
  script that will compare the two and add the ones as needed (as well 
  as do a bunch of other cleanup work) I thought maybe I could have 
  samba point to /home/user_name/passwd instead...samba has what it 
  needs..and the accounts on the server itself (/etc/passwd) can be left 
  untouched.
 
  Thanks in advance,
 
  Shain
 
 Samba doesn't look at /etc/password directly, however it does require 
 that any user who connects must have a valid uid on the server. I can 
 suggest a couple of ways you could hack something together to make it 
 easy to sync parts of /etc/password between machines but I would suggest 
 checking out ldap first.
 
 *Michael Heydon - IT Administrator *
 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [SAMBA] how to make smbpasswd use or import system passwords?

2008-03-03 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

If you're on a small system, pam_smbpass in migrate mode works well
(provided your users log into some PAM-enabled service). Once your
smbpasswd file is stocked up, you can use it in sync mode to keep
passwords in sync. This is really the best way short of LDAP.

Maginot Junior wrote:
 Well  this isnt possible, because all my share are sector specific
 with group restriction ... So ... what I came across is to use mysql
 (ldap is to big to my network with less them 100 users) to sync all
 passwords, Im going to make a db with mysql and inside create a simple
 login, passwd, full name, homedir table and populate it with the
 same postfix password that users uses to access email and make through
 pam it work with my ltsp server, email and hopefully with samba too,
 and so make all password be sync... unfortunately I will have to make
 this new implementation, I think this is a samba fault, I really don't
 matter about windows passwords, because all my network isnt going to
 have windows boxes, so why samba one of the most complete projects
 I've ever seen for linux does not have a work through for this
 situation? Like mentioned here, is an ever week question, so Its being
 a big need for everyone ... I'm self come to this list in a extreme
 try to find an ultimate solution, because after googling around I was
 getting convinced that wasn't a possible thing to do.. now after your
 directly answers I'm sure of that.
 
 I know smb is a protocol that are already in the go for a long time...
 but maybe some linux new things to smb protocol could really help.
 Well, this is more an idea then a complain, maybe Im being to
 promiscuous and not looking to a different view with some other good
 (god) solution ;) ... of course if anyone have any idea that could
 slap my face and give me a new horizon I would be pleased to see.
 
 Well ... thanks anyway for the good advices and fast answer.
 
 [ ]'s
 PS: I don't think NFS will be of the same control then Samba, so I
 discarded this option...
 
 On Wed, Feb 27, 2008 at 12:52 AM, Adam Williams
 [EMAIL PROTECTED] wrote:
 you could use a tdbsam password backend, roaming profiles, tell all your
  users they will have a default password of whatever, and set their
  password to be expired, so on their first log in, they will be required
  to change their password.  if you read the samba docs, Windows uses a
  different password encryption then what /etc/passwd uses, they aren't
  compatible.

  or you can map to gues = bad user, and use guest only = yes and guest ok
  = yes on your shares, and set your shares not browsable, but i wouldn't
  recommend that.


 Maginot Junior wrote:
   Hi!
  
  
   Im almost loosing my hairs here...
  
   I have already had troubles configuring samba to work just like I
   wanted but in the end everything was fine. Now I have searched a lot
   and many different views for this problems, so I think its better come
   here trying to find the entire solution...
  
   I have about 30 users on my box, all have passwords already set.
   So I come to the idea of making a share for each sector, like sales,
   financial, ti, and so on.
   So far no problem, the shares are created, owned by root and with the
   group respectively with the share name (group sales, share sales).
   Have already added in /etc/group the users for each group and gone
   configuring smb.conf.
  
   I start using security = user and setting inside the shares valid users 
 = @ti
  
   Now comes the problem... when I try to access this share, I can only
   access with the user added to smbpasswd, for what I saw until now I
   must have the user in smbpasswd, this is a must to rule... I dont have
   any user passwd in my hand, so I cant just do a smbpasswd -a user and
   set what password whatever I want, so I tried cat /etc/passwd |
   /usr/sbin/mksmbpasswd  /etc/samba/smbpasswd and I got a lot of
   -XXX on the password fields of smbpasswd file...
  
   So Im lost on this, I must add all user to smbpasswd using the same
   password from the system... to make all to stay sync, but this is
   being a pain so any help will be very apreciated.
  
   Thanks,
  
  


 
 
 


- --
  _  _ _  _ ___  _  _  _
 |Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Systems Programmer II
 |$| |__| |  | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922)
 \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHzI6jmb+gadEcsb4RAo+IAKDaLjFIaBZGKxz5PXr1Qjv0gdSYTQCeOwFX
jgb5DLDmKp/skzp7trSEucQ=
=WMP2
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smbldap_open: cannot access LDAP when not root..

2008-03-03 Thread G. Clifford Williams
I seem to recall discussion about fixing code in samba-ldap extensions 
that required execution as uid=root. I'm running on Debian (Etch) with 
samba 3.0.24 and have been encountering the following messages in my 
attemps to get pdbedit policies propegated across all DCs through ldap:


[2008/03/01 00:56:13, 0] lib/smbldap.c:smbldap_open(1009)
  smbldap_open: cannot access LDAP when not root..


from smb.conf we have:

ldap admin dn = uid=root,xy=blah,yz=blah,yz=blah


Has anyone encountered this with 3.0.24 and is it fixed with 3.0.28?


TIA

--G. Clifford Williams
gcw (AT) cashnetusa (dot) com

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba and /etc/passwd

2008-03-03 Thread Michael Heydon

John Mazza wrote:

This sounds like a situation just crying out for Winbind authentication.
I'd say set the boxes up for that rather than messing around with
the /etc/passwd files.

With Winbind, you don't need local accounts.

  
I've never messed with AD so correct me if I'm wrong, but doesn't 
authenticating against AD *require* winbind? I assumed that the AD 
domain users were all handled by winbind and he wanted to sync 
/etc/passwd for other users who aren't part of the domain.

Shain Miley wrote:

I am 
currently setting up a server to authenticate against AD.  I have that 
configured fine.   

we need a way 
to sync the info in /etc/passwd between servers, these two serves will 
have a different list of users,groups,etc
If it was just domain users, then the list of users, groups, etc would 
be the same for all servers.


On a slightly related note, what happens to winbind when the server it 
is authing against goes down? It doesn't replicate the data does it? 
Which would suggest you would be relying on caches, only users who have 
logged on recently enough to be in the cache will be able to log in. Or 
have I missed something?


*Michael Heydon - IT Administrator *
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED]


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Strange behaviour of Samba3 with wireless clients

2008-03-03 Thread Carlo Sogono
I have built my own wireless AP with Ubuntu 7.10 and an Atheros-based 
wireless card. My problem is that I can't access any of the Samba shares 
with my wireless clients...they can all search for the server, get 
prompted for a login then it just hangs and eventually times out.


The same clients, when using their LAN ports to connect to the same 
server, are able to do everything--browse and access Samba shares. I 
have experimented with the smb.conf file to include the wireless AP's 
device (ath0), subnet and even allowing it to bind on all interfaces. 
During those times, samba *does* bind on the device/device's IP when 
doing 'netstat -tln'.


I have also checked my firewall settings. The rules I have for my local 
LAN on eth1 is identical to ath0 so I don't see a problem there. In fact 
I can do everything on my wireless clients except Samba.


Here are some details of my setup:
Ubuntu 7.10 server
eth0 - ADSL modem; running pppoe
eth1 - local LAN
ath0 - wireless LAN
madwifi drivers for Atheros chips
hostapd to handle WPA2+PSK authentication
iptables for IP filtering
samba3

Am I missing something here? Thanks in advance.

Carlo

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Strange behaviour of Samba3 with wireless clients

2008-03-03 Thread Rubin Bennett

On Tue, 2008-03-04 at 14:08 +1100, Carlo Sogono wrote:
 I have built my own wireless AP with Ubuntu 7.10 and an Atheros-based 
 wireless card. My problem is that I can't access any of the Samba shares 
 with my wireless clients...they can all search for the server, get 
 prompted for a login then it just hangs and eventually times out.
 
 The same clients, when using their LAN ports to connect to the same 
 server, are able to do everything--browse and access Samba shares. I 
 have experimented with the smb.conf file to include the wireless AP's 
 device (ath0), subnet and even allowing it to bind on all interfaces. 
 During those times, samba *does* bind on the device/device's IP when 
 doing 'netstat -tln'.
 
 I have also checked my firewall settings. The rules I have for my local 
 LAN on eth1 is identical to ath0 so I don't see a problem there. In fact 
 I can do everything on my wireless clients except Samba.
 
 Here are some details of my setup:
 Ubuntu 7.10 server
 eth0 - ADSL modem; running pppoe
 eth1 - local LAN
 ath0 - wireless LAN
 madwifi drivers for Atheros chips
 hostapd to handle WPA2+PSK authentication
 iptables for IP filtering
 samba3
 
 Am I missing something here? Thanks in advance.
 
What happens if you do an smbclient -L //{IP of WIFI card} from the
server?  Do you get a list of shares?

I'm assuming that you've proofed out the WIFI side of things (i.e. the
wireless clients can ping the server etc. etc.)?

Also make sure there's no NAT on the WIFI interface screwing things up -
iptables -t nat -L

Rubin

 Carlo
 
-- 
Rubin Bennett
RB Technologies
http://thatitguy.com
[EMAIL PROTECTED]
(802)223-4448

They that can give up essential liberty to obtain a little
temporary security deserve neither liberty nor safety
  --Benjamin Franklin, Historical Review of Pennsylvania, 1759


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Strange behaviour of Samba3 with wireless clients

2008-03-03 Thread Jason Haar

Carlo Sogono wrote:
I have built my own wireless AP with Ubuntu 7.10 and an Atheros-based 
wireless card. My problem is that I can't access any of the Samba 
shares with my wireless clients...they can all search for the server, 
get prompted for a login then it just hangs and eventually times out.


Just a guess, but check your client MTU settings. Historically we've 
seen problems with CIFS over VPN (really a Kerberos fat packet problem 
rather than CIFS itself) and wireless, and MTU issues were to blame. 
PMTU discovery/etc is meant to take care of such things, but - again - 
we've found issues with DSL links - which I see you mentioning too.


Change your client's MTU to 1300 and see if the problem disappears. Then 
reduce it on the Samba server involved instead - as that's an easier 
solution than touching every client.



--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem: print with personal account in an active directory

2008-03-03 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Lots of times this involves having %u or %U in the print command,
whatever yours happens to be.

[EMAIL PROTECTED] wrote:
 Thanks to your reply.
 I want all the users to be able to print, with their authentification in the
 advance directory (to use their quota)
 I have configured samba for printing, but all users print on my user account.
 Thanks for your help.
 Best regards
 Olivier
 
 Adam Williams a écrit :
 you want all the users to be able to print, or only your user account to be
 able to print?
 [EMAIL PROTECTED] wrote:
 Hi,
 I have a problem with my configuration of print services in a Linux client 
 on
 a
 printing server (windows server 2003).
 I don't be able to print with a user account, but with my own account (saved
 on
 smb config file) users don't have problem.
 Please help me.
 Olivier
 Ps: sorry for my bad english :-(



 
 


- --
  _  _ _  _ ___  _  _  _
 |Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Systems Programmer II
 |$| |__| |  | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922)
 \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHzMiFmb+gadEcsb4RApYPAKDbGyT9oV9wA20J1FJ8HgauV5al6ACgzcIu
xORfpQ/HSz7CY2zM9FIpvB4=
=OFEX
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Strange behaviour of Samba3 with wireless clients

2008-03-03 Thread Carlo Sogono

Rubin Bennett wrote:

On Tue, 2008-03-04 at 14:08 +1100, Carlo Sogono wrote:
  
I have built my own wireless AP with Ubuntu 7.10 and an Atheros-based 
wireless card. My problem is that I can't access any of the Samba shares 
with my wireless clients...they can all search for the server, get 
prompted for a login then it just hangs and eventually times out.


The same clients, when using their LAN ports to connect to the same 
server, are able to do everything--browse and access Samba shares. I 
have experimented with the smb.conf file to include the wireless AP's 
device (ath0), subnet and even allowing it to bind on all interfaces. 
During those times, samba *does* bind on the device/device's IP when 
doing 'netstat -tln'.


I have also checked my firewall settings. The rules I have for my local 
LAN on eth1 is identical to ath0 so I don't see a problem there. In fact 
I can do everything on my wireless clients except Samba.


Here are some details of my setup:
Ubuntu 7.10 server
eth0 - ADSL modem; running pppoe
eth1 - local LAN
ath0 - wireless LAN
madwifi drivers for Atheros chips
hostapd to handle WPA2+PSK authentication
iptables for IP filtering
samba3

Am I missing something here? Thanks in advance.



What happens if you do an smbclient -L //{IP of WIFI card} from the
server?  Do you get a list of shares?

I'm assuming that you've proofed out the WIFI side of things (i.e. the
wireless clients can ping the server etc. etc.)?

Also make sure there's no NAT on the WIFI interface screwing things up -
iptables -t nat -L

Rubin

  
As I am at work at the moment I cannot try it but I'm pretty sure it 
would fail since my client's shares are disabled. :P When I said 
everything else works that includes having to access the following 
services of the server: http, ftp and ssh. My server is also a file 
server so I have no problems accessing my files via FTP/SFTP.

Carlo




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Strange behaviour of Samba3 with wireless clients

2008-03-03 Thread Rubin Bennett

On Tue, 2008-03-04 at 15:08 +1100, Carlo Sogono wrote:
 Rubin Bennett wrote:
  On Tue, 2008-03-04 at 14:08 +1100, Carlo Sogono wrote:

  I have built my own wireless AP with Ubuntu 7.10 and an Atheros-based 
  wireless card. My problem is that I can't access any of the Samba shares 
  with my wireless clients...they can all search for the server, get 
  prompted for a login then it just hangs and eventually times out.
 
  The same clients, when using their LAN ports to connect to the same 
  server, are able to do everything--browse and access Samba shares. I 
  have experimented with the smb.conf file to include the wireless AP's 
  device (ath0), subnet and even allowing it to bind on all interfaces. 
  During those times, samba *does* bind on the device/device's IP when 
  doing 'netstat -tln'.
 
  I have also checked my firewall settings. The rules I have for my local 
  LAN on eth1 is identical to ath0 so I don't see a problem there. In fact 
  I can do everything on my wireless clients except Samba.
 
  Here are some details of my setup:
  Ubuntu 7.10 server
  eth0 - ADSL modem; running pppoe
  eth1 - local LAN
  ath0 - wireless LAN
  madwifi drivers for Atheros chips
  hostapd to handle WPA2+PSK authentication
  iptables for IP filtering
  samba3
 
  Am I missing something here? Thanks in advance.
 
  
  What happens if you do an smbclient -L //{IP of WIFI card} from the
  server?  Do you get a list of shares?
 
  I'm assuming that you've proofed out the WIFI side of things (i.e. the
  wireless clients can ping the server etc. etc.)?
 
  Also make sure there's no NAT on the WIFI interface screwing things up -
  iptables -t nat -L
 
  Rubin
 

 As I am at work at the moment I cannot try it but I'm pretty sure it 
 would fail since my client's shares are disabled. :P When I said 
 everything else works that includes having to access the following 
 services of the server: http, ftp and ssh. My server is also a file 
 server so I have no problems accessing my files via FTP/SFTP.
  Carlo
 
I meant test the WIFI interface of the server _from_ the server.  If you
can't connect to the server's interface from that box, then you likely
won't be able to connect to it from another client system.

I have to admit that the more likely sounding culprit here is the
framing... 

Rubin

  
 
-- 
Rubin Bennett
RB Technologies
http://thatitguy.com
[EMAIL PROTECTED]
(802)223-4448

They that can give up essential liberty to obtain a little
temporary security deserve neither liberty nor safety
  --Benjamin Franklin, Historical Review of Pennsylvania, 1759


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-test-2702-gd0ab519

2008-03-03 Thread Karolin Seeger
The branch, v3-2-test has been updated
   via  d0ab519652c3036725b0cea1b4930fc759b4d9fe (commit)
  from  93580bce833453ba512ee436d6dfdbdcd2c53777 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit d0ab519652c3036725b0cea1b4930fc759b4d9fe
Author: Karolin Seeger [EMAIL PROTECTED]
Date:   Fri Feb 29 17:51:00 2008 +0100

Update WHATSNEW.
Parameter 'hidden' has been renamed to 'administrative share'.

Karolin

---

Summary of changes:
 WHATSNEW.txt |4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index e0528f0..4ae46df 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -185,7 +185,7 @@ smb.conf changes
 config backend New file
 ctdb socketNew 
 debug classNew No
-hidden New No
+administrative share   New No
 lanman authChanged Default No
 ldap debug level   New 0
 ldap debug threshold   New 10
@@ -345,7 +345,7 @@ o   Andreas Schneider [EMAIL PROTECTED]
   initialization.
 * Fix Windows 2008 (Longhorn) join.
 * Fix crashbug in winbindd.
-* Add share parameter hidden.
+* Add share parameter administrative share.
 
 
 o   Karolin Seeger [EMAIL PROTECTED]


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-test-2703-gf18ba6c

2008-03-03 Thread Günther Deschner
The branch, v3-2-test has been updated
   via  f18ba6c877fa934d19ecc6a65be74b8bad7ee7e4 (commit)
  from  d0ab519652c3036725b0cea1b4930fc759b4d9fe (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit f18ba6c877fa934d19ecc6a65be74b8bad7ee7e4
Author: Günther Deschner [EMAIL PROTECTED]
Date:   Mon Mar 3 09:43:10 2008 +0100

Fix gp_find_file() which broke during the pstring removal.

Guenther

---

Summary of changes:
 source/libgpo/gpo_util.c |7 +--
 1 files changed, 5 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/libgpo/gpo_util.c b/source/libgpo/gpo_util.c
index f2d7c69..f41bbc1 100644
--- a/source/libgpo/gpo_util.c
+++ b/source/libgpo/gpo_util.c
@@ -738,8 +738,11 @@ NTSTATUS gp_find_file(TALLOC_CTX *mem_ctx,
return NT_STATUS_OK;
}
 
-   tmp = talloc_asprintf_strupper_m(mem_ctx, %s/%s/%s, filename, path,
-suffix);
+   path = talloc_strdup_upper(mem_ctx, path);
+   NT_STATUS_HAVE_NO_MEMORY(path);
+
+   tmp = talloc_asprintf(mem_ctx, %s/%s/%s, filename,
+ path, suffix);
NT_STATUS_HAVE_NO_MEMORY(tmp);
 
if (sys_stat(tmp, sbuf) == 0) {


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-2-stable updated - initial-v3-2-test-2687-g4170259

2008-03-03 Thread Karolin Seeger
The branch, v3-2-stable has been updated
   via  4170259e5f83c281966a80916e4ece6937e08988 (commit)
   via  575b829b390f7f07138305adc2988918eda95ce1 (commit)
   via  8beead9c936038365f28467e527b2c066e3a5440 (commit)
   via  7821066d4ff4a8503a596ab342a2a84ed9a9f8b9 (commit)
   via  1bfc4404e7f7314111f979bd09321e39be76bf15 (commit)
   via  851b53895807835fc9e6a4a1b3a2b4739ca7c63f (commit)
  from  f2712698241dc7a0c75378fb8fd747b923d3248f (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable


- Log -
commit 4170259e5f83c281966a80916e4ece6937e08988
Author: Volker Lendecke [EMAIL PROTECTED]
Date:   Fri Feb 29 22:38:10 2008 +0100

Restore 3.0 behaviour with empty /etc/hosts

Jeremy, in 3.0 we allowed get_mydnsdomname and get_mydnsfullname to fail
without filling in anything useful. Worked fine. Without this patch and a 
empty
/etc/hosts and no DNS configured, session setup would return
NT_STATUS_BAD_NETWORK_NAME. This is confusing at best, BAD_NETWORK_NAME 
afaik
is only ever returned from tcon normally.

This restores the 3.0 behaviour.

Comments?

Volker

commit 575b829b390f7f07138305adc2988918eda95ce1
Author: Volker Lendecke [EMAIL PROTECTED]
Date:   Sat Mar 1 09:26:43 2008 +0100

Revert Add basic infrastructure for general async requests

This reverts commit ae254cb61f4b9331755848c47ebc34e90dd80390.
(cherry picked from commit 030bef7f22f7a73466204b7860f397dbca9f2ab0)

commit 8beead9c936038365f28467e527b2c066e3a5440
Author: Volker Lendecke [EMAIL PROTECTED]
Date:   Sat Mar 1 09:26:27 2008 +0100

Revert Add infrastructure to support async SMB requests

This reverts commit f5356825698a02df2d400b51dd95d1f857c83e81.
(cherry picked from commit 5f53a62be8a21b8d92ac44b18d202882500356e8)

commit 7821066d4ff4a8503a596ab342a2a84ed9a9f8b9
Author: Volker Lendecke [EMAIL PROTECTED]
Date:   Sat Mar 1 09:26:18 2008 +0100

Revert Add async cli_pull support

This reverts commit 844a163458c7585e4306a21ffdae5d08e03d6e4d.
(cherry picked from commit 5ab1cfda500de07ff3c712442ab2fc74eecc8886)

commit 1bfc4404e7f7314111f979bd09321e39be76bf15
Author: Volker Lendecke [EMAIL PROTECTED]
Date:   Sat Mar 1 09:26:06 2008 +0100

Revert Convert cli_read to use cli_pull

This reverts commit 719527f55e88f0c5fdceda5c807475aba299c79f.
(cherry picked from commit ac301fada257e2d3b50148109a3d44fa1421b0b4)

commit 851b53895807835fc9e6a4a1b3a2b4739ca7c63f
Author: Günther Deschner [EMAIL PROTECTED]
Date:   Sat Mar 1 16:13:25 2008 +0100

Make sure we are still able to join Windows 2008.

Guenther
(cherry picked from commit aa9c0f587718f4d647e87b9662acbedba042b9cb)

---

Summary of changes:
 source/Makefile.in   |4 +-
 source/client/client.c   |   42 +++--
 source/include/async_req.h   |   89 ---
 source/include/async_smb.h   |   62 -
 source/include/client.h  |   30 ---
 source/include/includes.h|2 -
 source/lib/async_req.c   |   68 --
 source/libnet/libnet_join.c  |3 +-
 source/libsmb/async_smb.c|  483 ---
 source/libsmb/clireadwrite.c |  519 ++
 source/libsmb/ntlmssp.c  |9 +-
 11 files changed, 157 insertions(+), 1154 deletions(-)
 delete mode 100644 source/include/async_req.h
 delete mode 100644 source/include/async_smb.h
 delete mode 100644 source/lib/async_req.c
 delete mode 100644 source/libsmb/async_smb.c


Changeset truncated at 500 lines:

diff --git a/source/Makefile.in b/source/Makefile.in
index 35a4480..c91f544 100644
--- a/source/Makefile.in
+++ b/source/Makefile.in
@@ -323,7 +323,7 @@ LIB_WITHOUT_PROTO_OBJ = $(LIBSAMBAUTIL_OBJ) \
lib/messages.o librpc/gen_ndr/ndr_messaging.o lib/messages_local.o \
lib/messages_ctdbd.o lib/packet.o lib/ctdbd_conn.o lib/talloc_stack.o \
lib/interfaces.o lib/rbtree.o lib/memcache.o \
-   lib/util_transfer_file.o lib/async_req.o
+   lib/util_transfer_file.o
 
 LIB_WITH_PROTO_OBJ = $(VERSION_OBJ) lib/charcnv.o lib/debug.o lib/fault.o \
  lib/interface.o lib/md4.o \
@@ -408,7 +408,7 @@ LIBSMB_OBJ = libsmb/clientgen.o libsmb/cliconnect.o 
libsmb/clifile.o \
 libsmb/clistr.o libsmb/cliquota.o libsmb/clifsinfo.o 
libsmb/clidfs.o \
  libsmb/smberr.o libsmb/credentials.o libsmb/pwd_cache.o \
 libsmb/clioplock.o $(ERRORMAP_OBJ) libsmb/clirap2.o \
-libsmb/smb_seal.o $(DOSERR_OBJ) libsmb/async_smb.o \
+libsmb/smb_seal.o $(DOSERR_OBJ) \
 $(RPC_PARSE_OBJ1) $(LIBSAMBA_OBJ) $(LIBNMB_OBJ)
 
 RPC_CLIENT_OBJ1 = rpc_client/cli_netlogon.o rpc_client/cli_srvsvc.o
diff --git a/source/client/client.c b/source/client/client.c
index 1410fc2..f7ed33a 100644
--- a/source/client/client.c

svn commit: samba-docs r1249 - in trunk/manpages-3: .

2008-03-03 Thread kseeger
Author: kseeger
Date: 2008-03-03 13:09:41 + (Mon, 03 Mar 2008)
New Revision: 1249

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=1249

Log:
Remove manpages for smbmount and smbumount.
Karolin
Removed:
   trunk/manpages-3/smbmount.8.xml
   trunk/manpages-3/smbumount.8.xml


Changeset:
Deleted: trunk/manpages-3/smbmount.8.xml
===
--- trunk/manpages-3/smbmount.8.xml 2008-02-29 14:27:15 UTC (rev 1248)
+++ trunk/manpages-3/smbmount.8.xml 2008-03-03 13:09:41 UTC (rev 1249)
@@ -1,344 +0,0 @@
-?xml version=1.0 encoding=iso-8859-1?
-!DOCTYPE refentry PUBLIC -//Samba-Team//DTD DocBook V4.2-Based Variant 
V1.0//EN http://www.samba.org/samba/DTD/samba-doc;
-refentry id=smbmount.8
-
-refmeta
-   refentrytitlesmbmount/refentrytitle
-   manvolnum8/manvolnum
-/refmeta
-
-
-refnamediv
-   refnamesmbmount/refname
-   refpurposemount an smbfs filesystem/refpurpose
-/refnamediv
-
-refsynopsisdiv
-   cmdsynopsis
-   commandsmbmount/command
-   arg choice=reqservice/arg
-   arg choice=reqmount-point/arg
-   arg choice=opt-o options/arg
-   /cmdsynopsis
-/refsynopsisdiv
-
-refsect1
-   titleDESCRIPTION/title
-
-   paracommandsmbmount/command mounts a Linux SMB filesystem. It 
-   is usually invoked as commandmount.smbfs/command by
-   the citerefentryrefentrytitlemount/refentrytitle
-   manvolnum8/manvolnum/citerefentry command when using the 
-   -t smbfs option. This command only works in Linux, and the kernel must
-   support the smbfs filesystem./para
-
-   paraWARNING: commandsmbmount/command is deprecated and not
-   maintained any longer. commandmount.cifs/command (mount -t cifs)
-   should be used instead of commandsmbmount/command./para
-
-   paraOptions to commandsmbmount/command are specified as a 
comma-separated
-   list of key=value pairs. It is possible to send options other
-   than those listed here, assuming that smbfs supports them. If
-   you get mount failures, check your kernel log for errors on
-   unknown options./para
-
-   paracommandsmbmount/command is a daemon. After mounting it keeps 
running until
-   the mounted smbfs is umounted. It will log things that happen
-   when in daemon mode using the machine name smbmount, so
-   typically this output will end up in filenamelog.smbmount/filename. 
The command
-   smbmount/command process may also be called mount.smbfs./para
-
-   notepara commandsmbmount/command 
-   calls citerefentryrefentrytitlesmbmnt/refentrytitle
-   manvolnum8/manvolnum/citerefentry to do the actual mount. You 
-   must make sure that commandsmbmnt/command is in the path so 
-   that it can be found. /para/note
-   
-/refsect1
-
-refsect1
-   titleOPTIONS/title
-
-   variablelist
-   varlistentry
-   termusername=lt;arggt;/term
-   listitempara
-   specifies the username to connect as. If this is not given, 
then the environment variable envar USER/envar
-   is used. This option can also take the form user%password or 
user/workgroup or user/workgroup%password
-   to allow the password and workgroup to be specified as part of 
the username.
-   /para/listitem
-   /varlistentry
-
-   varlistentry
-   termpassword=lt;arggt;/term
-   listitempara
-   specifies the SMB password. If this option is not given then 
the environment 
-   variable literalPASSWD/literal is used. If it can find no 
password 
-   commandsmbmount/command will prompt for a password, unless 
the guest option is given.
-   /para
-
-   para
-   Note that passwords which contain the argument delimiter 
character (i.e. a comma ',') will failed to be parsed
-   correctly on the command line.  However, the same password 
defined in the PASSWD environment variable or a
-   credentials file (see below) will be read correctly.
-   /para
-   /listitem
-   /varlistentry
-
-   varlistentry
-   termcredentials=lt;filenamegt;/term
-   listitemparaspecifies a file that contains a username 
and/or password. 
-The format of the file is:
-programlisting
-username=value
-password=value
-/programlisting/para
-
-   paraThis is preferred over having passwords in plaintext in a
-   shared file, such as filename/etc/fstab/filename. Be sure 
to protect any
-   credentials file properly.
-   /para/listitem
-   /varlistentry
-
-   varlistentry
-   termkrb/term
-   listitemparaUse kerberos (Active Directory). 
/para/listitem
-   /varlistentry
-
-   

[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-test-2704-g2c42fc2

2008-03-03 Thread Volker Lendecke
The branch, v3-2-test has been updated
   via  2c42fc21d8bede226e411623aecd69038477373b (commit)
  from  f18ba6c877fa934d19ecc6a65be74b8bad7ee7e4 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit 2c42fc21d8bede226e411623aecd69038477373b
Author: Volker Lendecke [EMAIL PROTECTED]
Date:   Mon Mar 3 18:12:26 2008 +0100

Zero out the out policy handler in lsa_Close

... after a REALLY long session staring at sniffs we can now join XP to
v3-2-test again...

Apparently not doing this makes XP keep an internal handle to LSA open which
confuses the hell out of it.

Karolin, this needs to be in v3-2-stable :-)

Volker

---

Summary of changes:
 source/rpc_server/srv_lsa_nt.c |1 +
 1 files changed, 1 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/rpc_server/srv_lsa_nt.c b/source/rpc_server/srv_lsa_nt.c
index 1333d65..ce3fd1a 100644
--- a/source/rpc_server/srv_lsa_nt.c
+++ b/source/rpc_server/srv_lsa_nt.c
@@ -1216,6 +1216,7 @@ NTSTATUS _lsa_Close(pipes_struct *p, struct lsa_Close *r)
}
 
close_policy_hnd(p, r-in.handle);
+   ZERO_STRUCTP(r-out.handle);
return NT_STATUS_OK;
 }
 


-- 
Samba Shared Repository


svn commit: lorikeet r786 - in trunk/heimdal: . admin appl/dceutils appl/ftp/ftpd appl/rcp appl/su appl/telnet appl/telnet/libtelnet appl/telnet/telnet appl/telnet/telnetd appl/xnlock cf doc doc/stand

2008-03-03 Thread abartlet
Author: abartlet
Date: 2008-03-03 22:53:23 + (Mon, 03 Mar 2008)
New Revision: 786

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=786

Log:
Update to Heimdal -r 22664, in preperation for a merge to Samba4

Andrew Bartlett

Added:
   trunk/heimdal/appl/su/supaths.h
   trunk/heimdal/doc/doxytmpl.dxy
   trunk/heimdal/doc/footer.html
   trunk/heimdal/doc/hcrypto.din
   trunk/heimdal/doc/header.html
   trunk/heimdal/doc/hx509.din
   trunk/heimdal/doc/krb5.din
   trunk/heimdal/doc/ntlm.din
   
trunk/heimdal/doc/standardisation/draft-ietf-krb-wg-gss-cb-hash-agility-03.txt
   trunk/heimdal/doc/standardisation/draft-ietf-krb-wg-kerberos-referrals-09.txt
   
trunk/heimdal/doc/standardisation/draft-kamada-krb-client-friendly-cross-02.txt
   
trunk/heimdal/doc/standardisation/draft-sakane-krb-cross-problem-statement-03.txt
   trunk/heimdal/doc/vars.tin
   trunk/heimdal/doc/wind.din
   trunk/heimdal/lib/hcrypto/camellia-ntt.c
   trunk/heimdal/lib/hcrypto/camellia-ntt.h
   trunk/heimdal/lib/hcrypto/camellia.c
   trunk/heimdal/lib/hcrypto/camellia.h
   trunk/heimdal/lib/hcrypto/doxygen.c
   trunk/heimdal/lib/hcrypto/rsa-gmp.c
   trunk/heimdal/lib/hcrypto/test_dh.c
   trunk/heimdal/lib/hx509/data/PKITS.pdf
   trunk/heimdal/lib/hx509/data/PKITS_data.zip
   trunk/heimdal/lib/hx509/data/https.crt
   trunk/heimdal/lib/hx509/data/https.key
   trunk/heimdal/lib/hx509/data/nist-data2
   trunk/heimdal/lib/hx509/data/nist-result2
   trunk/heimdal/lib/hx509/doxygen.c
   trunk/heimdal/lib/hx509/softp11.c
   trunk/heimdal/lib/hx509/test_java_pkcs11.in
   trunk/heimdal/lib/hx509/test_nist2.in
   trunk/heimdal/lib/hx509/test_pkcs11.in
   trunk/heimdal/lib/hx509/test_soft_pkcs11.c
   trunk/heimdal/lib/kadm5/version-script.map
   trunk/heimdal/lib/krb5/doxygen.c
   trunk/heimdal/lib/krb5/test_forward.c
   trunk/heimdal/lib/krb5/test_renew.c
   trunk/heimdal/lib/roken/strpftime-test.h
   trunk/heimdal/lib/wind/
   trunk/heimdal/lib/wind/ChangeLog
   trunk/heimdal/lib/wind/CompositionExclusions-3.2.0.txt
   trunk/heimdal/lib/wind/DerivedNormalizationProps.txt
   trunk/heimdal/lib/wind/Makefile.am
   trunk/heimdal/lib/wind/NormalizationCorrections.txt
   trunk/heimdal/lib/wind/NormalizationTest.txt
   trunk/heimdal/lib/wind/UnicodeData.py
   trunk/heimdal/lib/wind/UnicodeData.txt
   trunk/heimdal/lib/wind/bidi.c
   trunk/heimdal/lib/wind/combining.c
   trunk/heimdal/lib/wind/doxygen.c
   trunk/heimdal/lib/wind/errorlist.c
   trunk/heimdal/lib/wind/gen-bidi.py
   trunk/heimdal/lib/wind/gen-combining.py
   trunk/heimdal/lib/wind/gen-errorlist.py
   trunk/heimdal/lib/wind/gen-map.py
   trunk/heimdal/lib/wind/gen-normalize.py
   trunk/heimdal/lib/wind/gen-punycode-examples.py
   trunk/heimdal/lib/wind/generate.py
   trunk/heimdal/lib/wind/idn-lookup.c
   trunk/heimdal/lib/wind/map.c
   trunk/heimdal/lib/wind/normalize.c
   trunk/heimdal/lib/wind/punycode.c
   trunk/heimdal/lib/wind/rfc3454.py
   trunk/heimdal/lib/wind/rfc3454.txt
   trunk/heimdal/lib/wind/rfc3490.txt
   trunk/heimdal/lib/wind/rfc3491.txt
   trunk/heimdal/lib/wind/rfc3492.txt
   trunk/heimdal/lib/wind/rfc4013.txt
   trunk/heimdal/lib/wind/rfc4518.py
   trunk/heimdal/lib/wind/rfc4518.txt
   trunk/heimdal/lib/wind/stringprep.c
   trunk/heimdal/lib/wind/stringprep.py
   trunk/heimdal/lib/wind/test-bidi.c
   trunk/heimdal/lib/wind/test-map.c
   trunk/heimdal/lib/wind/test-normalize.c
   trunk/heimdal/lib/wind/test-prohibited.c
   trunk/heimdal/lib/wind/test-punycode.c
   trunk/heimdal/lib/wind/test-rw.c
   trunk/heimdal/lib/wind/test-utf8.c
   trunk/heimdal/lib/wind/utf8.c
   trunk/heimdal/lib/wind/util.py
   trunk/heimdal/lib/wind/version-script.map
   trunk/heimdal/lib/wind/wind.h
   trunk/heimdal/lib/wind/wind_err.et
   trunk/heimdal/lib/wind/windlocl.h
   trunk/heimdal/packages/debian/
   trunk/heimdal/packages/debian/Makefile.am
   trunk/heimdal/packages/debian/README
   trunk/heimdal/packages/debian/README.Debian
   trunk/heimdal/packages/debian/changelog
   trunk/heimdal/packages/debian/compat
   trunk/heimdal/packages/debian/control
   trunk/heimdal/packages/debian/copyright
   trunk/heimdal/packages/debian/extras/
   trunk/heimdal/packages/debian/extras/default
   trunk/heimdal/packages/debian/extras/kadmind.acl
   trunk/heimdal/packages/debian/extras/kdc.conf
   trunk/heimdal/packages/debian/heimdal-clients-x.install
   trunk/heimdal/packages/debian/heimdal-clients.install
   trunk/heimdal/packages/debian/heimdal-clients.postinst
   trunk/heimdal/packages/debian/heimdal-clients.prerm
   trunk/heimdal/packages/debian/heimdal-dev.install
   trunk/heimdal/packages/debian/heimdal-docs.install
   trunk/heimdal/packages/debian/heimdal-kcm.init
   trunk/heimdal/packages/debian/heimdal-kcm.install
   trunk/heimdal/packages/debian/heimdal-kdc.dirs
   trunk/heimdal/packages/debian/heimdal-kdc.examples
   trunk/heimdal/packages/debian/heimdal-kdc.init
   trunk/heimdal/packages/debian/heimdal-kdc.install
   

[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-test-2707-g8927b50

2008-03-03 Thread Derrell Lipman
The branch, v3-2-test has been updated
   via  8927b50d6051fcefd87f19dc90c5826378d03e4e (commit)
   via  76ba37ac46b4a77fe228ca90635fa19140541ccd (commit)
   via  a67f96fbe9683b46c2149f7cb439d13f7f0e6ecd (commit)
  from  2c42fc21d8bede226e411623aecd69038477373b (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit 8927b50d6051fcefd87f19dc90c5826378d03e4e
Merge: 76ba37ac46b4a77fe228ca90635fa19140541ccd 
2c42fc21d8bede226e411623aecd69038477373b
Author: Derrell Lipman [EMAIL PROTECTED]
Date:   Mon Mar 3 18:27:41 2008 -0500

Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into 
v3-2-test

commit 76ba37ac46b4a77fe228ca90635fa19140541ccd
Author: Derrell Lipman [EMAIL PROTECTED]
Date:   Mon Mar 3 18:25:49 2008 -0500

Missed a few 'deprecated' markers

commit a67f96fbe9683b46c2149f7cb439d13f7f0e6ecd
Author: Derrell Lipman [EMAIL PROTECTED]
Date:   Mon Mar 3 18:13:33 2008 -0500

Continued revamping of libsmbclient.

- James suggested using gcc's deprecated attribute to mark the context
  structure fields to generate warnings.  This creates a scenario with the
  best of all worlds.  I'm able to move to an organization that more easily
  allows future enhancements, while avoiding any mandatory changes by
  applications.  Thanks, James!

- Updated WHATSNEW.txt so that it accurately reflects the current state of
  affairs.

Derrell

---

Summary of changes:
 WHATSNEW.txt   |   17 +-
 examples/libsmbclient/Makefile |4 +-
 examples/libsmbclient/testbrowse.c |2 +-
 examples/libsmbclient/testsmbc.c   |2 +-
 source/Makefile.in |1 +
 source/include/libsmb_internal.h   |  100 +
 source/include/libsmbclient.h  |  249 -
 source/libsmb/libsmb_cache.c   |   16 +-
 source/libsmb/libsmb_context.c | 1078 
 source/libsmb/libsmb_dir.c |   30 +-
 source/libsmb/libsmb_file.c|8 +-
 source/libsmb/libsmb_path.c|6 +-
 source/libsmb/libsmb_printjob.c|6 +-
 source/libsmb/libsmb_server.c  |   75 ++--
 source/libsmb/libsmb_setget.c  |  905 ++
 source/libsmb/libsmb_stat.c|4 +-
 source/libsmb/libsmb_xattr.c   |6 +-
 17 files changed, 1225 insertions(+), 1284 deletions(-)
 create mode 100644 source/libsmb/libsmb_setget.c


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 4ae46df..30740de 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -111,16 +111,11 @@ Modified API for libsmbclient
 Maintaining ABI compatibility for libsmbclient has become increasingly
 difficult to accomplish, while also keeping the code organization such that it
 is easily readable.  Towards the goal of maintaining ABI compatibility and
-also keeping the code easy to maintain and enhance, the API has changed
-somewhat.  In particular, the fields in the SMBCCTX context structure are no
-longer intended to be read/write by the user.  The names of the fields have
-changed to encourage any recompilations to use the new interface, but for
-continued ABI compatibility, the fields are in the same locations in the
-context structure as they were previously so any previously-compiled
-applications should continue to work with this new version.
-
-An application that previously accessed the members of the SMBCCTX context
-structure will encounter errors if recompiled.  This is intentional to
+also keeping the code easy to maintain and enhance, the API has been enhanced.
+In particular, the fields in the SMBCCTX context structure are no longer
+intended to be read/write by the user, and are marked as deprecated.  An
+application that previously accessed the members of the SMBCCTX context
+structure will now encounter warnings if recompiled.  This is intentional, to
 encourage implementation of the small changes required for the new interface.
 The number of changes is expected to be quite small for the vast majority of
 applications, and no changes need be made for many applications.  The changes
@@ -141,7 +136,7 @@ under these comment blocks:
   Callable functions for directories
   Callable functions applicable to both files and directories
 
-Example changes that may be required:
+Example changes that may be required to eliminate deprecated warnings:
 
   /* Set the debug level */
   context-debug = 99;
diff --git a/examples/libsmbclient/Makefile b/examples/libsmbclient/Makefile
index e2d8b68..a50e80a 100644
--- a/examples/libsmbclient/Makefile
+++ b/examples/libsmbclient/Makefile
@@ -1,14 +1,14 @@
 #
 CC = gcc
 
-SAMBA_INCL = ../../source/include
+SAMBA_INCL  = -I/usr/local/samba/include
 EXTLIB_INCL = -I/usr/include/gtk-1.2 \
  -I/usr/include/glib-1.2 \
  

Build status as of Tue Mar 4 00:00:01 2008

2008-03-03 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2008-03-03 
00:00:27.0 +
+++ /home/build/master/cache/broken_results.txt 2008-03-04 00:00:58.0 
+
@@ -1,4 +1,4 @@
-Build status as of Mon Mar  3 00:00:02 2008
+Build status as of Tue Mar  4 00:00:01 2008
 
 Build counts:
 Tree Total  Broken Panic 
@@ -6,16 +6,16 @@
 ccache   30 8  0 
 ctdb 0  0  0 
 distcc   1  0  0 
-ldb  29 30 0 
+ldb  30 30 0 
 libreplace   29 9  0 
-lorikeet-heimdal 23 12 0 
+lorikeet-heimdal 23 20 0 
 pidl 17 4  0 
 ppp  10 0  0 
 rsync30 12 0 
 samba-docs   0  0  0 
 samba-gtk4  4  0 
-samba_3_2_test 30 15 0 
-samba_4_0_test 28 26 1 
+samba_3_2_test 29 13 0 
+samba_4_0_test 27 25 0 
 smb-build28 3  0 
 talloc   30 8  0 
 tdb  30 15 0 


[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha2-1201-g7f0341d

2008-03-03 Thread Andrew Bartlett
The branch, v4-0-test has been updated
   via  7f0341dd589150ab01563957460cdcf42515cadc (commit)
   via  cdff1b0802437d713652b89f4522d3cce97c30ec (commit)
   via  1adc74c65a3219fc110964ccdf9a9d60a84831da (commit)
  from  272eb765b81e3eab216a07249334f9b7d20e530b (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test


- Log -
commit 7f0341dd589150ab01563957460cdcf42515cadc
Author: Andrew Bartlett [EMAIL PROTECTED]
Date:   Tue Mar 4 13:45:31 2008 +1100

Try to return sane ldb error strings

We don't just want to return just strerror(ret) when things go wrong.

Andrew Bartlett

commit cdff1b0802437d713652b89f4522d3cce97c30ec
Author: Andrew Bartlett [EMAIL PROTECTED]
Date:   Tue Mar 4 13:40:50 2008 +1100

The DN in objectCategory should, if possible, be returned pretty...

This avoids going via the canonicalise_fn(), which will upper case the DN

Andrew Bartlett

commit 1adc74c65a3219fc110964ccdf9a9d60a84831da
Author: Andrew Bartlett [EMAIL PROTECTED]
Date:   Tue Mar 4 11:27:57 2008 +1100

Don't hardcode objectCategory into the schema, even in the schema.

We now load the schema early enough that we can generate this too!

Andrew Bartlett

---

Summary of changes:
 source/dsdb/samdb/ldb_modules/normalise.c   |4 +-
 source/dsdb/samdb/ldb_modules/simple_ldap_map.c |8 +
 source/lib/ldb/ldb.i|   11 +-
 source/setup/schema.ldif|  545 ---
 testprogs/ejs/minschema.js  |3 -
 5 files changed, 20 insertions(+), 551 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/dsdb/samdb/ldb_modules/normalise.c 
b/source/dsdb/samdb/ldb_modules/normalise.c
index 695393d..a0eff43 100644
--- a/source/dsdb/samdb/ldb_modules/normalise.c
+++ b/source/dsdb/samdb/ldb_modules/normalise.c
@@ -106,8 +106,8 @@ static int normalise_search_callback(struct ldb_context 
*ldb, void *context, str
continue;
}
/* Look to see if this attributeSyntax is a DN */
-   if ((strcmp(attribute-attributeSyntax_oid, 2.5.5.1) != 0) 
-   (strcmp(attribute-attributeSyntax_oid, 2.5.5.7) != 0)) {
+   if (!((strcmp(attribute-attributeSyntax_oid, 2.5.5.1) == 0) 
||
+ (strcmp(attribute-attributeSyntax_oid, 2.5.5.7) == 
0))) {
continue;
}
for (j = 0; j  ares-message-elements[i].num_values; j++) {
diff --git a/source/dsdb/samdb/ldb_modules/simple_ldap_map.c 
b/source/dsdb/samdb/ldb_modules/simple_ldap_map.c
index 3f4c19d..91896d7 100644
--- a/source/dsdb/samdb/ldb_modules/simple_ldap_map.c
+++ b/source/dsdb/samdb/ldb_modules/simple_ldap_map.c
@@ -153,9 +153,17 @@ static struct ldb_val sid_always_binary(struct ldb_module 
*module, TALLOC_CTX *c
 /* Ensure we always convert objectCategory into a DN */
 static struct ldb_val objectCategory_always_dn(struct ldb_module *module, 
TALLOC_CTX *ctx, const struct ldb_val *val)
 {
+   struct ldb_dn *dn;
struct ldb_val out = data_blob(NULL, 0);
const struct ldb_schema_attribute *a = 
ldb_schema_attribute_by_name(module-ldb, objectCategory);
 
+   dn = ldb_dn_new(ctx, module-ldb, val-data);
+   if (dn  ldb_dn_is_valid(dn)) {
+   talloc_free(dn);
+   return val_copy(module, ctx, val);
+   }
+   talloc_free(dn);
+
if (a-syntax-canonicalise_fn(module-ldb, ctx, val, out) != 
LDB_SUCCESS) {
return data_blob(NULL, 0);
}
diff --git a/source/lib/ldb/ldb.i b/source/lib/ldb/ldb.i
index da4c52f..0d9679d 100644
--- a/source/lib/ldb/ldb.i
+++ b/source/lib/ldb/ldb.i
@@ -42,6 +42,7 @@ typedef struct ldb_dn ldb_dn;
 typedef struct ldb_ldif ldb_ldif;
 typedef struct ldb_message_element ldb_msg_element;
 typedef int ldb_error;
+typedef int ldb_int_error;
 
 %}
 
@@ -521,6 +522,14 @@ PyObject *PyExc_LdbError;
 
 %typemap(out,noblock=1) ldb_error {
 if ($1 != LDB_SUCCESS) {
+PyErr_SetObject(PyExc_LdbError, Py_BuildValue((char *)(i,s), $1, 
ldb_errstring(arg1)));
+SWIG_fail;
+}
+$result = Py_None;
+};
+
+%typemap(out,noblock=1) ldb_int_error {
+if ($1 != LDB_SUCCESS) {
 PyErr_SetObject(PyExc_LdbError, Py_BuildValue((char *)(i,s), $1, 
ldb_strerror($1)));
 SWIG_fail;
 }
@@ -761,4 +770,4 @@ time_t ldb_string_to_time(const char *s);
 }
 
 %rename(register_module) ldb_register_module;
-ldb_error ldb_register_module(const struct ldb_module_ops *);
+ldb_int_error ldb_register_module(const struct ldb_module_ops *);
diff --git a/source/setup/schema.ldif b/source/setup/schema.ldif
index be68ed2..e96cf5f 100644
--- a/source/setup/schema.ldif
+++ b/source/setup/schema.ldif
@@ -14,7 +14,6 @@ schemaIDGUID: 

[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-test-2708-gfd18b01

2008-03-03 Thread Derrell Lipman
The branch, v3-2-test has been updated
   via  fd18b01016d1dc4b08983975353e62084fdc323c (commit)
  from  8927b50d6051fcefd87f19dc90c5826378d03e4e (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit fd18b01016d1dc4b08983975353e62084fdc323c
Author: Derrell Lipman [EMAIL PROTECTED]
Date:   Mon Mar 3 22:56:32 2008 -0500

use constant name less likely to cause conflict

---

Summary of changes:
 source/include/libsmbclient.h |  100 
 1 files changed, 50 insertions(+), 50 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/include/libsmbclient.h b/source/include/libsmbclient.h
index e1a4b74..2e38944 100644
--- a/source/include/libsmbclient.h
+++ b/source/include/libsmbclient.h
@@ -25,11 +25,11 @@
 #ifndef SMBCLIENT_H_INCLUDED
 #define SMBCLIENT_H_INCLUDED
 
-#undef _DEPRECATED_
+#undef DEPRECATED_SMBC_INTERFACE
 #if ! defined(__LIBSMBCLIENT_INTERNAL__)  defined(__GNUC__)
-# define _DEPRECATED_  __attribute__ ((deprecated))
+# define DEPRECATED_SMBC_INTERFACE  __attribute__ ((deprecated))
 #else
-# define _DEPRECATED_
+# define DEPRECATED_SMBC_INTERFACE
 #endif
 
 #ifdef __cplusplus
@@ -2600,7 +2600,7 @@ struct _SMBCCTX
  * DEPRECATED:
  * Use smbc_getDebug() and smbc_setDebug()
  */
-int debug _DEPRECATED_;
+int debug DEPRECATED_SMBC_INTERFACE;

 /**
  * netbios name used for making connections
@@ -2608,7 +2608,7 @@ struct _SMBCCTX
  * DEPRECATED:
  * Use smbc_getNetbiosName() and smbc_setNetbiosName()
  */
-char * netbios_name _DEPRECATED_;
+char * netbios_name DEPRECATED_SMBC_INTERFACE;
 
 /**
  * workgroup name used for making connections
@@ -2616,7 +2616,7 @@ struct _SMBCCTX
  * DEPRECATED:
  * Use smbc_getWorkgroup() and smbc_setWorkgroup()
  */
-char * workgroup _DEPRECATED_;
+char * workgroup DEPRECATED_SMBC_INTERFACE;
 
 /**
  * username used for making connections
@@ -2624,7 +2624,7 @@ struct _SMBCCTX
  * DEPRECATED:
  * Use smbc_getUser() and smbc_setUser()
  */
-char * user _DEPRECATED_;
+char * user DEPRECATED_SMBC_INTERFACE;
 
 /**
  * timeout used for waiting on connections / response data (in
@@ -2633,7 +2633,7 @@ struct _SMBCCTX
  * DEPRECATED:
  * Use smbc_getTimeout() and smbc_setTimeout()
  */
-int timeout _DEPRECATED_;
+int timeout DEPRECATED_SMBC_INTERFACE;
 
/**
  * callable functions for files:
@@ -2644,40 +2644,40 @@ struct _SMBCCTX
  * Use smbc_getFunction*() and smbc_setFunction*(), e.g.
  * smbc_getFunctionOpen(), smbc_setFunctionUnlink(), etc.
 */ 
-smbc_open_fnopen _DEPRECATED_;
-smbc_creat_fn   creat _DEPRECATED_;
-smbc_read_fnread _DEPRECATED_;
-smbc_write_fn   write _DEPRECATED_;
-smbc_unlink_fn  unlink _DEPRECATED_;
-smbc_rename_fn  rename _DEPRECATED_;
-smbc_lseek_fn   lseek _DEPRECATED_;
-smbc_stat_fnstat _DEPRECATED_;
-smbc_fstat_fn   fstat _DEPRECATED_;
+smbc_open_fnopen DEPRECATED_SMBC_INTERFACE;
+smbc_creat_fn   creat DEPRECATED_SMBC_INTERFACE;
+smbc_read_fnread DEPRECATED_SMBC_INTERFACE;
+smbc_write_fn   write DEPRECATED_SMBC_INTERFACE;
+smbc_unlink_fn  unlink DEPRECATED_SMBC_INTERFACE;
+smbc_rename_fn  rename DEPRECATED_SMBC_INTERFACE;
+smbc_lseek_fn   lseek DEPRECATED_SMBC_INTERFACE;
+smbc_stat_fnstat DEPRECATED_SMBC_INTERFACE;
+smbc_fstat_fn   fstat DEPRECATED_SMBC_INTERFACE;
 #if 0 /* internal */
 smbc_ftruncate_fn   ftruncate_fn;
 #endif
-smbc_close_fn   close_fn _DEPRECATED_;
-smbc_opendir_fn opendir _DEPRECATED_;
-smbc_closedir_fnclosedir _DEPRECATED_;
-smbc_readdir_fn readdir _DEPRECATED_;
-smbc_getdents_fngetdents _DEPRECATED_;
-smbc_mkdir_fn   mkdir _DEPRECATED_;
-smbc_rmdir_fn   rmdir _DEPRECATED_;
-smbc_telldir_fn telldir _DEPRECATED_;
-smbc_lseekdir_fnlseekdir _DEPRECATED_;
-smbc_fstatdir_fnfstatdir _DEPRECATED_;
-smbc_chmod_fn   chmod _DEPRECATED_;
-smbc_utimes_fn