Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-02-28 Thread Guenther Deschner
Hi Triss, can you test this branch? https://git.samba.org/?p=gd/samba/.git;a=shortlog;h=refs/heads/master-krb5pac It contains fixes for various pac buffer types. Let us know if it resolves your issues. Thanks, Guenther -- Günther DeschnerGPG-ID: 8EE11688 Red Hat

Re: [SCM] Samba Shared Repository - branch master updated

2011-09-29 Thread Guenther Deschner
Hi David, On 09/29/2011 02:48 PM, David Disseldorp wrote: The branch, master has been updated via 08573c2 s4: add SMB2_FSCTL opcodes via dbcd59f s3-smb2_server: fix ioctl InputOffset checking via 1848295 s3-smb2_server: SMB2_OP_IOCTL doesn't require at least 1 dyn

Re: [SCM] Samba Shared Repository - branch master updated

2011-02-28 Thread Guenther Deschner
On 02/28/2011 08:18 PM, Günther Deschner wrote: The branch, master has been updated via 26321c6 s3-torture: fix the build of rpc_open_tcp. from eece80e s3-smbd: Pass tevent context to messaging functions. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

Re: [Samba] winbind and pptpd authentication failure

2010-09-09 Thread Guenther Deschner
On Thu, Sep 09, 2010 at 11:12:52PM +1000, Andrew Bartlett wrote: On Thu, 2010-09-09 at 14:33 +0200, John Anderson wrote: On 09/09/10 13:57, Andrew Bartlett wrote: On Tue, 2010-09-07 at 17:35 +0200, John Anderson wrote: I have a linux firewall using winbind to authenticate users coming in

Re: [SCM] Samba Shared Repository - branch master updated

2010-08-06 Thread Guenther Deschner
On Thu, Aug 05, 2010 at 09:12:22AM -0500, Andreas Schneider wrote: The branch, master has been updated via 91a8d9b... s3-torture: Improve the winreg deletekey torture comments. via 2a15f70... s3-torture: Correctly cleanup the winreg volatile key test. via 0a8e382...

Re: [SCM] Samba Shared Repository - branch v3-4-test updated

2010-07-05 Thread Guenther Deschner
On Mon, Jul 05, 2010 at 12:36:48AM -0500, Karolin Seeger wrote: The branch, v3-4-test has been updated via 10e34cf... s3-librpc: Fixed GUID_from_data_blob() with length of 32. from 094e864... s3-printing: Fix Bug #7541, %D in printer admin causing smbd crash.

Re: [SCM] Samba Shared Repository - branch master updated

2010-07-05 Thread Guenther Deschner
Hi Matthieu, On Tue, Jun 22, 2010 at 06:49:47PM +0400, Matthieu Patou wrote: Hi Gunter, On 22/06/2010 18:08, GXXnther Deschner wrote: via 13ede2b... s4-smbtorture: also test keynames with '/' in it in SetPrinterDataEx keyname tests. Does this mean that we will (we are ?) able to

Re: [SCM] Samba Shared Repository - branch master updated

2010-05-27 Thread Guenther Deschner
On Thu, May 27, 2010 at 05:57:35PM -0500, Günther Deschner wrote: The branch, master has been updated via 606be25... s3:auth Free sampass as soon as we have server_info via d9cffc0... s3:auth use info3 in auth_serversupplied_info via 6713f3d... s3:auth add function to

Re: [SCM] Samba Shared Repository - branch master updated

2010-05-19 Thread Guenther Deschner
On Tue, May 18, 2010 at 06:42:07PM -0500, Jeremy Allison wrote: The branch, master has been updated via 6a90307... Fix our NTLMSSP implementation against the Microsoft torture tester. from 829c876... Change data_blob() to be based on top of data_blob_talloc(), instead of the

Re: [Samba] Problems printing with samba 3.5.2

2010-05-11 Thread Guenther Deschner
On Mon, May 10, 2010 at 08:22:46PM +0200, Luca Olivetti wrote: Ok, I finally deployed samba 3.5.2 (upgrading from 3.0.11) on the real server after testing for a while in virtualbox. There's a strange problem with printing: sometimes an application gives an error printing (of course the error

Re: [Samba] cupsaddsmb error: cli_pipe_validate_current_pdu: RPC fault code?DCERPC_FAULT_OP_RNG_ERROR received

2010-03-22 Thread Guenther Deschner
Hi Richard, On Mon, Mar 22, 2010 at 11:20:48AM +0100, Richard Lamboj wrote: Well i mean: it works with Samba 3.2.14 but _not_ with Samba 3.5.x. can you please file a bug at https://bugzilla.samba.org about this ? Thanks, Guenther -- Günther DeschnerGPG-ID: 8EE11688 Red

Re: [SCM] Samba Shared Repository - branch master updated

2010-03-10 Thread Guenther Deschner
On Wed, Mar 10, 2010 at 12:54:35PM -0600, Matthias Dieter Wallnöfer wrote: The branch, master has been updated via 5d10676... s4:winreg RPC - fix up the QueryValue call to work against the enhanced torture test via 490c0ce... s4:registry/ldb.c - if name isn't set we should

Re: [Samba] Fetching DOMAIN database Failed

2009-12-01 Thread Guenther Deschner
On Wed, Nov 25, 2009 at 11:36:35AM +0100, Nobody ist perfect wrote: I am trying to migrate our Windows NT 4 Domain to Samba 3.4.3 and got the error message below when I run the command: net join -S myPDC -I 172.30.1.1 -U administrator%mypasswd worked ok net rpc vampire -S myPDC -U

Re: [Samba] domain printer issues

2009-12-01 Thread Guenther Deschner
On Tue, Dec 01, 2009 at 12:36:51PM +, Daniel Sheridan wrote: On Mon, 2009-11-30 at 09:14 +1100, Brian May wrote: Daniel Sheridan wrote: FWIW, I have the same problem here with Samba 3.4.2 and Windows XP clients. In fact, one printer driver works via point'n'print, but the others

Re: [SCM] Samba Shared Repository - branch v3-5-test updated - tevent-0-9-8-913-g7a98fde

2009-10-01 Thread Guenther Deschner
On Thu, Oct 01, 2009 at 12:36:10PM -0500, Jeremy Allison wrote: The branch, v3-5-test has been updated via 7a98fdebe454ec55e93868ca319615bf442b2ff8 (commit) via f1b5d5dcab5d8249ae8dc6d26cf9e9e163b95a8d (commit) via 11f56f48433951046a79683eda08ab8a4246d487 (commit)

Re: [Samba] 75 second (5 x 15) between login request and response

2009-09-23 Thread Guenther Deschner
On Tue, Sep 22, 2009 at 08:33:46PM +0200, Laurens Blankers wrote: Hello all, It takes about 75 seconds before Samba answers a login request from a WinXP SP3 client. After the delay the client connects successfully and can browse the share. The delay seems to be made up off 5 separate delays

Re: [Samba] samba slave with winbind fails to communicate with the PDC

2009-09-23 Thread Guenther Deschner
On Mon, Sep 21, 2009 at 04:35:04PM -0300, Joel Franco Guzmán wrote: Hi all, After the net rpc join successfuly established to the Samba PDC (net rpc testjoin ok), the following commands fail: # wbinfo -u Error looking up domain users # wbinfo -g Error looking up domain groups #wbinfo

Re: [Samba] Mystery Samba (3.4.1) and Win7

2009-09-16 Thread Guenther Deschner
Hi Martin, On Wed, Sep 16, 2009 at 01:37:33PM +0200, Martin Hochreiter wrote: Hi! I read many threads and tried many solutions but I can't get Win7 (RTM, 64 bit) and Samba 3.4.1 to work together. I am still failing with the trusteeship problem during the first logon after domain join. Is

Re: [Samba] Domain Member Server connecting to Samba PDC

2009-09-11 Thread Guenther Deschner
On Fri, Sep 11, 2009 at 06:40:02AM -0600, Anthony Powell wrote: There had been some bugs in 3.3.2 preventing that unfortunately. We are currently preparing an update to 3.4.1 for F11. Could you please give https://admin.fedoraproject.org/updates/F11/FEDORA-2009-9443 a try (and leave

Re: [Samba] Domain Member Server connecting to Samba PDC

2009-09-10 Thread Guenther Deschner
On Thu, Sep 10, 2009 at 04:13:55PM -0600, Anthony Powell wrote: Hello: I'm trying to set up a small domain on my home network.  The goal is to have a domain member server connect to my samba PDC using winbind for authentication against a tdbsam database.  I've tried reading the official

Re: [Samba] unable to join w2k3 SP1 to samba 3 domain.

2009-09-08 Thread Guenther Deschner
Emil, could you please open a bug about this on bugzilla.samba.org and include your C:\windows\debug\netsetup.log file ? I would like to reproduce that and see what is going wrong. Thanks, Guenther -- Günther DeschnerGPG-ID: 8EE11688 Red Hat

Re: [Samba] net user add . is there any way to specify destination ou ?

2009-07-13 Thread Guenther Deschner
On Wed, Jul 08, 2009 at 03:14:35PM -0400, Michael Joyner ᏩᏯ wrote: net user add . is there any way to specify destination OU when security=ads ? You can define the container where to create users (and groups) with --container=ou=mycontainer. The base dn of your domain will be appended

Re: [Samba] net ads join - strong(er) authentication required

2009-07-01 Thread Guenther Deschner
On Wed, Jul 01, 2009 at 12:03:28PM +0200, christoph.be...@desy.de wrote: Hi, my windows folks migrated to AD 2008 R2, resulting in the following error message when trying to join the domain: [HOST] /etc $ /opt/csw/bin/net ads join -U USER Enter USER's password: [2009/07/01 11:51:28, 0]

Re: [Samba] Problems starting Server 2008 x64 after added to samba domain

2009-06-02 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert Ludvik wrote: Robert Ludvik pravi: Guenther Deschner pravi: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert Ludvik wrote: Hi I have a problem with Windows Server Ent (and Std) 2008 x64 running on IBM Blade Center. I can add

Re: [Samba] Problems starting Server 2008 x64 after added to samba domain

2009-05-30 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert Ludvik wrote: Hi I have a problem with Windows Server Ent (and Std) 2008 x64 running on IBM Blade Center. I can add it to the Samba domain but when I restart it, it comes to Applying computer settings... and if I connect with rdesktop I

Re: [Samba] 3.3.4 2008 Domain Join Error

2009-05-15 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex Green wrote: Hi, Just trying to get a SLES10 machine running 3.3.4 to join a 2008 domain and getting this any ideas?? Running: net -d 3 -U admu...@dom.realm.co.com ads join createcomputer=REG/CN/OU/Services/ Error:

Re: [Samba] Samba with AD/winbind - recurring message

2009-04-29 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Adam Cohen wrote: I upgraded to 3.3.4 today (thanks to SerNet.DE for providing RHEL RPMs) but still see the message. Does LDAP signing need to be enabled? Just set client ldap sasl wrapping to seal in smb.conf. Guenther - -- Günther Deschner

Re: [Samba] Re: [Release Planning 3.4] 3.4.0pre1 will be delayed

2009-04-16 Thread Guenther Deschner
Remy Zandwijk wrote: Jeremy Allison wrote: On Wed, Apr 15, 2009 at 12:41:20PM +0200, Karolin Seeger wrote: Hey folks, the release of Samba 3.4.0pre1 will be delayed until April 30, 2009 due to the samr access check bugs and bug #6263 (Domain login problems in Windows XP without SP3).

Re: [SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha7-835-g09265bc

2009-04-03 Thread Guenther Deschner
Günther Deschner wrote: The branch, master has been updated via 09265bcff5a2fac42f5abf34b8b439aa0a6998a1 (commit) from 621d40332aad9d99b14c45155308a394c31b98b5 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

Re: [Samba] vampire support for windows 2000+ domains?

2009-03-24 Thread Guenther Deschner
Charles Marcus wrote: Is this ever going to happen? Or am I waiting in vain? Can you please file a bug report on this and assign to me? I have a git branch for vampire a w2k+ domain into passdb (almost finished). Having a bugid would be good reminder to finally finish it for the next samba

Re: [SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha7-63-gc5e062e

2009-02-26 Thread Guenther Deschner
Michael Adam wrote: The branch, master has been updated via c5e062ed74ec7e13e03ed24e9e4d2ced5351f141 (commit) from 3a1f24f286d4dba836b750122f571f831a794e4a (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

2008-12-12 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex Green wrote: Anyone? any ideas? Can you open a bug on this and upload a network trace as well ? Thanks, Guenther - -- Günther DeschnerGPG-ID: 8EE11688 Red Hat gdesch...@redhat.com Samba Team

Re: [Samba] Re: join fails samba 3.2 ADS 2003R2 SP2

2008-11-03 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Roland Hebertinger wrote: Marc-Andre Vallee Marc-Andre.Vallee at complys.com writes: Hi, SLES10 SP2 x86_64 + Samba from repo (samba-3.2.4-8.1) When I try to join (net ads join -U Administrator), I get : Failed to join domain: failed to set

Re: [Samba] samba accounts management API

2008-10-07 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Русаков Денис wrote: Hello, all I'd like to create, remove, change samba accounts, groups etc. from my own C program. How can I do this, without using samba tools, but some samba API (headers and shared objects). Does samba provide

Re: [Samba] Samba 3.0.28a integration with 2003 AD and password lockout policy?

2008-08-13 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Braebaum, Neil wrote: | I'm encountering some oddness using Samba 3.0.28a, MIT kerberos (1.6.3) | for user authentication on Linux, to 2003 Active Directory. | | The password policy dictated by AD should lock accounts after 6 | incorrect login

Re: [Samba] Vista SP1-rc1 appears to break against Samba-3.0.27a

2008-07-07 Thread Guenther Deschner
Hi, krisani p wrote: Hello, Is the Vista compatibilty issue resolved? Is there any change in PAC structure sent by Vista? Would appreciate any information on this. Yes, this has been resolved in the latest 3.0 and 3.2 releases. Guenther -- Günther DeschnerGPG-ID:

Re: [Samba] Error building Samba 3.2.0 with gcc 2.96

2008-07-03 Thread Guenther Deschner
Thorkil Olesen wrote: I have tried to build Samba 3.2 with an old compiler gcc 2.96. It gave only one single error: groupdb/mapping_tdb.c: In function `add_mapping_entry': groupdb/mapping_tdb.c:130: incompatible types in return The offending line says: return NULL; in a function of type

Re: [Samba] simple command to check domain membership

2008-07-02 Thread Guenther Deschner
Mikael Kermorgant wrote: Hello, I'm planning to automate domain joining with samba+winbind for a classroom. Using cfengine, I'll have to trigger domain joining by checking current status via a shell command. An example : has_hostname = ( '/bin/test -f /etc/hostname' ) What would be a

Re: [Samba] Can't join AD anymore after migration to 3.0.30

2008-06-05 Thread Guenther Deschner
Jens Nissen wrote: I doff my hat, indeed, my SBS200 is running SP1. (Microsoft never provided updates for SBS2000 beyond SP1, there were individual updates for Windows, Exchange, SQL, IIE ... but they were partially incompatible with SBS2000, so there might be more machines out there!!) I

Re: [Samba] unable to join a NT4 Domain since 3.0.28a

2008-06-05 Thread Guenther Deschner
Shane T. Drinkwater wrote: Hello, My name is Shane Drinkwater. If I use Samba 3.0.29/3.0.30 I cannot join to my NT4 Domain. When running the net command to join I get the following error. [EMAIL PROTECTED] bin]# ./net rpc join -Scsqdomainbackup -UAdministrator Password: [2008/06/05 16:40:35,

Re: [Samba] Can't join AD anymore after migration to 3.0.30

2008-06-04 Thread Guenther Deschner
Jens Nissen wrote: After migrating from 3.0.26a to 3.0.30 I cannot join my AD member server to the domain anymore: I get a DCERPC_FAULT_INVALID_TAG. As I didn't change my Windows 2000 SBS Server, this looks like a new feature in Samba 3.0.30. You're probably not running the latest SP on the

Re: [Samba] Can't join AD anymore after migration to 3.0.30

2008-06-04 Thread Guenther Deschner
Guenther Deschner wrote: Jens Nissen wrote: After migrating from 3.0.26a to 3.0.30 I cannot join my AD member server to the domain anymore: I get a DCERPC_FAULT_INVALID_TAG. As I didn't change my Windows 2000 SBS Server, this looks like a new feature in Samba 3.0.30. You're probably

Re: [Samba] Must Change Password at Next Login does not work

2008-05-06 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike Brady wrote: When setting the User Must Change Password at Next Login flag via usrmgr the user is not prompted to change their password. The various Password fields in password backend (tdb) as viewed using pdbedit are all set to zero, so it

Re: [Samba] Error join Samba: error setting trust account password

2008-04-12 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fernando Xavier wrote: Hello! I'm trying join client in samba server. But, get this error: [2008/04/12 12:18:53, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(304) error setting trust account password: NT code 0x1c010002 Unable to join

Re: [Samba] 3.0.28a+ 2008 server join with security=domain

2008-04-04 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Feroz, feroz ahmed wrote: Hi, Can some one help me out in joining samba 3.0.28a to 2008 server domain with security= domain. When i try to execute ./net rpc join -U administrator%password I'm getting the following error. Error in

Re: [Samba] Urgent... winbind and keytab file creation

2008-04-02 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Oliver Weinmann wrote: Hi, I'm running winbind (3.0.28a) on SLES9 with heimdal Kerberos. Everything works fine so far. Now i need to have the host keytab generated by winbind to be in the default /etc/krb5/krb5.keytab in order to use nfs with

Re: [SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-234-g737e470

2008-03-12 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Adam wrote: The branch, v3-2-test has been updated via 737e470e02d1233fda51e903f27955e45427e95a (commit) via 8b2cc36ffcb3bccb760ec7cb0a22558eab56070d (commit) via a39807044879ad9df7614e010db6ea16b51000a0 (commit)

Re: [Samba] UserPrincipalName with samba/winbind 3.2

2008-02-29 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: Hi, I'm currently trying the 3.2 version of winbindd (pam + nss + winbindd). I would like to loging with the userPrincipalName on à Win 2k3 but I can't. Winbindd retrun NT_STATUS_INVALID_PARAMETER_MIX (PAM: 4)

Re: [SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-1325-gaed01fd

2008-01-14 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Michael, Michael Adam wrote: commit e2b34e9c028d712c7c8b22aade2c11d347ae176d Author: Michael Adam [EMAIL PROTECTED] Date: Sun Jan 13 22:49:42 2008 +0100 Remove auto-generation of missing share from libnet_conf_set_parameter().

Re: [SCM] Samba Shared Repository - branch v3-2-test updated

2007-10-12 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Can we also have more uniqueness in the subject line? It looks funny to have all commits as part of one huge thread. Guenther - -- Günther DeschnerGPG-ID: 8EE11688 Red Hat [EMAIL PROTECTED] Samba Team

Re: [SCM] Samba Shared Repository - branch v3-2-test updated

2007-10-12 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gerald (Jerry) Carter wrote: Guenther Deschner wrote: Can we also have more uniqueness in the subject line? It looks funny to have all commits as part of one huge thread. We did but didn't you ask to have the initial-v3-2-test-#-$HASH part

[SCM] Samba Shared Repository branch, v3-2-test, updated. initial-v3-2-unstable-17-gfbe5ede

2007-10-11 Thread Guenther Deschner
: 6ae4066bbb59536852036394ffdb89121198a39f 1bf4c7fb2012a81e0b4e3d601a4df42d1113f5ef Author: Guenther Deschner [EMAIL PROTECTED] Date: Thu Oct 11 15:18:50 2007 +0200 Merge commit 'origin/v3-2-test' into my_branch commit 6ae4066bbb59536852036394ffdb89121198a39f Author: Guenther Deschner [EMAIL PROTECTED] Date: Thu Oct

[SCM] Samba Shared Repository branch, v3-2-test, updated. initial-v3-2-unstable-9-g52ca48f

2007-10-10 Thread Guenther Deschner
52ca48f1881fc7b6ac9d1252468bb20eee174407 Merge: 83fe2b4261f0357a62ea93b806a14225173f4945 e00ea359d66347a7c6f5d75de1670f788bfdc310 Author: Guenther Deschner [EMAIL PROTECTED] Date: Thu Oct 11 02:43:29 2007 +0200 Merge commit 'origin/v3-2-test' into my_branch commit 83fe2b4261f0357a62ea93b806a14225173f4945

[SCM] Draft Samba Repository branch, v3-2-unstable, updated. 640bda369cdb53b2b3b9e693325f5a0606d226f4

2007-10-05 Thread Guenther Deschner
640bda369cdb53b2b3b9e693325f5a0606d226f4 Author: Guenther Deschner [EMAIL PROTECTED] Date: Fri Oct 5 23:55:47 2007 +0200 Minor temp. build fix. Guenther --- Summary of changes: source/nsswitch/libwbclient/wbclient.c |5

Re: svn commit: samba r25532 - in branches/SAMBA_4_0/source/torture/rpc: .

2007-10-05 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: Author: obnox Date: 2007-10-05 21:22:07 + (Fri, 05 Oct 2007) New Revision: 25532 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25532 Log: Fix some more indentations. Sorry

Re: [Samba] Problem authenticating users with pam_winbind from trusted domain

2007-06-28 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Masopust, Christian wrote: Hi all, i've got a problem in authenticating users from a trusted domain with pam_winbind. What samba version are you using? Also, please increase log level to 10, uncomment max log size, repeat the auth attempt and

Re: [Samba] rfc2307 - 3.0.24

2007-06-28 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, David W. Chapman Jr. wrote: In log.winbindd-idmap I get a lot of these [2007/06/26 20:09:13, 1] sam/idmap_ad.c:ad_idmap_get_id_from_sid(309) ad_idmap_get_id_from_sid: ads_pull_uint32: could not read attribute 'gidNumber' [2007/06/26

Re: [Samba] winbind authentication performance: lookup_groupmem in large sites

2007-06-26 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 SERGEYS Filip wrote: 3) Per group list all members of that group - BOTTLENECK [2007/06/25 17:18:02, 10] nsswitch/winbindd_cache.c:lookup_groupmem(1665) lookup_groupmem: [Cached] - doing backend query for info for domain [2007/06/25

Re: svn commit: samba r23072 - in branches/SAMBA_3_0/source/nsswitch: .

2007-05-22 Thread Guenther Deschner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey Michael, [EMAIL PROTECTED] wrote: +/* If you are looking for dn_lookup: Yes, it used to be here! + * It has gone now since it was a major speed bottleneck in + * lookup_groupmem (its only use). It has been replaced by + * an rpc lookup sids

Re: [Samba] panic in pwnam_r after a reconnect

2007-03-26 Thread Guenther Deschner
Andrew, patch was missing, can you resend, please ? Guenther Andrew Bartlett wrote: On Sun, 2007-03-25 at 23:18 +0200, Volker Lendecke wrote: On Sun, Mar 25, 2007 at 10:57:14PM +0200, Dragan Krnic wrote: Is there some explanation for the panic in pwnam_r when a session reconnects after a

Re: [Samba] Idmap_rid differs on FreeBSD and SLES!

2007-03-20 Thread Guenther Deschner
Hi Anders, Anders Troback wrote: Hi, there was something wrong with the offline cache on the SLES box! After a stop of all samba services, a rm -r /var/lib/samba/* , net join and start all services everything works! With the idmap rewrite in 3.0.25 things like that shouldn't happen. If you

Re: [Samba] Limit AD for Winbind

2007-03-20 Thread Guenther Deschner
Hi, Daniel Frey wrote: smb.conf: [global] server string = Test workgroup = MYDOMAIN netbios name = SERVERNAME realm = MYDOMAIN.LOCAL idmap uid = 1-20 idmap gid = 1-20 winbind separator = / winbind use default

Re: sys_getpeerid() [was Re: svn commit: samba r21887 -...]

2007-03-20 Thread Guenther Deschner
Hi Jerry, Gerald (Jerry) Carter wrote: There are three places we use sys_getpeerid() that I can tell. (a) Jeremy's Domain Users hack for reporting group membership, (b) access to the ntlm_auth cache for applications like Firefox, and now (c) The capability to issue a logoff call. If we

Re: [Samba] Samba kerberos more time sensitive that Windows?

2007-03-15 Thread Guenther Deschner
Jeremy Allison wrote: On Thu, Mar 15, 2007 at 09:09:48AM -0500, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jason Haar wrote: Hi there We just had a problem where a user couldn't connect to a Samba server that is a full ADS member. The same user could

Re: svn commit: samba r20861 - in branches: SAMBA_3_0/source/libsmb SAMBA_3_0_24/source/libsmb

2007-01-17 Thread Guenther Deschner
On Wednesday 17 January 2007 20:54, Jeremy Allison wrote: On Wed, Jan 17, 2007 at 07:14:34PM +, [EMAIL PROTECTED] wrote: Author: gd Date: 2007-01-17 19:14:34 + (Wed, 17 Jan 2007) New Revision: 20861 WebSVN:

Re: svn commit: samba r20694 - in branches: SAMBA_3_0/source/lib SAMBA_3_0_24/source/lib

2007-01-12 Thread Guenther Deschner
On Friday 12 January 2007 03:48, [EMAIL PROTECTED] wrote: Author: jra Date: 2007-01-12 02:48:37 + (Fri, 12 Jan 2007) New Revision: 20694 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20694 Log: To get this right we need to do signed 64-bit comparisons

Re: svn commit: samba r19451 - in branches/SAMBA_3_0/source/rpcclient: .

2006-10-24 Thread Guenther Deschner
Thanks Volker, I owed Jerry that change still - and owe him still much more... Thanks again, Guenther On Sun, Oct 22, 2006 at 10:30:46AM +, [EMAIL PROTECTED] wrote: Author: vlendec Date: 2006-10-22 10:30:46 + (Sun, 22 Oct 2006) New Revision: 19451 WebSVN:

Re: svn commit: samba r18446 - in branches/SAMBA_3_0/source: libads utils

2006-09-13 Thread Guenther Deschner
On Wed, Sep 13, 2006 at 09:03:43AM +, [EMAIL PROTECTED] wrote: Author: jra Date: 2006-09-13 09:03:42 + (Wed, 13 Sep 2006) New Revision: 18446 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=18446 Log: Add the ldap 'leave domain' code - call this as a

Re: [Samba] Winbind dies

2006-07-13 Thread Guenther Deschner
Hi, On Thu, Jul 13, 2006 at 11:28:29AM -0400, Dimitri Yioulos wrote: Serious apologies if this has been discussed before, but my search didn't turn up much: I have samba (kept up-to-date with latest) running on several CentOS 3 and 4 boxes as part of a Win2k3 domain. On one particular

Re: [Samba] documentation of pam_winbind.conf in samba-3.0.23

2006-07-13 Thread Guenther Deschner
Hi, On Thu, Jul 13, 2006 at 03:39:33PM +0200, Dietrich Streifert wrote: Hello List, is there any documentation of pam_winbind.conf for pam_winbind.so in samba-3.0.23. Currently not, I should write a manpage for that though. Especially what value is necessary for krb5_ccache_type to

Re: [Samba] Can one set limits on new core dump?

2006-05-31 Thread Guenther Deschner
Hi, On Wed, May 31, 2006 at 09:42:13AM -0700, Doug VanLeuven wrote: Gautier, B (Bob) wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] ] On Behalf Of Doug VanLeuven Sent: 31 May 2006 09:56 /usr/local/samba3/sbin/winbindd [0xdda5cf] May 31

Re: [Samba] Problem joining into ads

2006-05-31 Thread Guenther Deschner
Hi, On Wed, May 31, 2006 at 05:58:03PM +0200, Franz Pfoertsch wrote: Hi, it try to join ads with samba 3.0.22 (SLES9 SP3) and got: holu0001:~ # kinit admin [EMAIL PROTECTED] Password: kinit: NOTICE: ticket renewable lifetime is 1 week holu0001:~ # net ads join [2006/05/31 17:42:21, 0]

Re: [Samba] winbind and AD password updates

2006-05-15 Thread Guenther Deschner
Hi, On Mon, May 15, 2006 at 10:46:47AM +0200, Pierre Ossman wrote: Hi! I've been trying to get password changes to work from a SuSE machine to an AD server. Authentication works fine in AD mode, so at least that bit is correct. When trying to change the password, I get PAM error 4

Re: [Samba] winbind and AD password updates

2006-05-15 Thread Guenther Deschner
On Mon, May 15, 2006 at 03:36:27PM +0200, Pierre Ossman wrote: Guenther Deschner wrote: If you'd try a recent samba release for one of the SUSE products, the user attemptimg to change a password would get delivered with the same amount of information (explaining why the password change has

Re: [Samba] winbind and AD password updates

2006-05-15 Thread Guenther Deschner
On Mon, May 15, 2006 at 03:49:06PM +0200, Pierre Ossman wrote: Pierre Ossman wrote: Guenther Deschner wrote: If you'd try a recent samba release for one of the SUSE products, the user attemptimg to change a password would get delivered with the same amount of information (explaining why

Re: [Samba] 3.0.23pre1 does not compile on HP-UX 11i

2006-05-11 Thread Guenther Deschner
On Thu, May 11, 2006 at 11:54:37AM -0700, Jeremy Allison wrote: On Thu, May 11, 2006 at 02:12:22PM -0400, Ryan Novosielski wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Continuing on: Linking bin/winbindd /usr/ccs/bin/ld: Unsatisfied symbols: seteuid (first referenced

Re: [Samba] winbind ldap usage...

2006-05-11 Thread Guenther Deschner
On Thu, May 11, 2006 at 05:35:38PM -0500, Matt Sellers wrote: hi all For anybody using Winbind with an ldap backend, just wondering how much CPU usage you see on systems.I have a dual PIII-1Ghz with 1GB of ram with ldap entities for ~1400 users and when winbind needs to source ldap

Re: [Samba] Excessive traffic causing slow logons

2006-05-04 Thread Guenther Deschner
Hi, On Thu, May 04, 2006 at 10:21:18AM -0400, Trimble, Ronald D wrote: I am seeing some extremely slow logons to my SUSE servers. All are configured exactly the same. When I attempt to log on, I can enter my domain (AD) account without any problems. I then enter my password and sit and

Re: [Samba] smb.conf(5) manpage suggestion re. idmap backend

2006-04-28 Thread Guenther Deschner
Hi, On Fri, Apr 28, 2006 at 08:29:48AM -0500, Jonathan C. Detert wrote: suggestion for minor improvement of the smb.conf manpage in the context of the 'idmap backend' parameter. At least as of v3.0.22 the manpage says: Finally, using the idmap_ad module, the UID and GID can

Re: [Samba] Question regarding sizes of of Samba for SuSE Linux

2006-04-27 Thread Guenther Deschner
Hi, On Thu, Apr 27, 2006 at 08:50:57AM -0700, Francis Wilson wrote: My high school computer lab has a Samba file server, currently running SuSE Linux 9.3; over the summer, I plan to wipe out the hard drives and install SuSE Linux 10.0; with this in mind, I have just downloaded the latest

Re: [Samba] winbind nss info = sfu is not so much working

2006-04-27 Thread Guenther Deschner
On Thu, Apr 27, 2006 at 11:21:45AM -0500, Jonathan C. Detert wrote: with samba 3.0.22, I'm trying to integrate a linux box with Microsoft AD by using winbind for authentication as well as for the source of nss info. When winbind is configured to use its own local id maps, everything works

Re: [Samba] 3.0.21c winbind crash

2006-04-12 Thread Guenther Deschner
On Wed, Apr 12, 2006 at 07:02:22PM +0200, Thomas Limoncelli wrote: Thomas Limoncelli wrote: After running successfully for some time, it now refuses to start after a reboot. The domain-specific winbindd instances are even crashing. :-( Do the logs below ring a bell with anyone? myself :-)

Re: [Samba] Error compiling samba 3.0.21c, AIX 52 ML7 gcc 3.3.2

2006-03-31 Thread Guenther Deschner
On Tue, Mar 28, 2006 at 11:37:08AM +0100, [EMAIL PROTECTED] wrote: Hi Guenther, Thanks for the code. Even I managed to understand that ;-0 It has got the make past the point it failed last time, should this be flagged as a bug? Not required, I commit that patch. Thanks, Guenther --

Re: [Samba] Error compiling samba 3.0.21c, AIX 52 ML7 gcc 3.3.2

2006-03-28 Thread Guenther Deschner
Hi, On Tue, Mar 28, 2006 at 10:30:45AM +0100, [EMAIL PROTECTED] wrote: Can anyone help with the following error I get whilst comiling samba, can you please retry with the following patch? Guenther -- Günther DeschnerGPG-ID: 8EE11688 Novell / SUSE LINUX

Re: [Samba] Samba account flags

2006-03-15 Thread Guenther Deschner
On Wed, Mar 15, 2006 at 06:53:05PM +0700, Beast wrote: What is the equivalent flag for User Cannot Change password as produce by NT usrmgr.exe? It doesnt mentioned in this documentation: http://us4.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html#accountflags This is not

Re: svn commit: samba r14404 - in trunk/source/nsswitch: .

2006-03-15 Thread Guenther Deschner
On Wed, Mar 15, 2006 at 12:35:38AM +, [EMAIL PROTECTED] wrote: Author: jra Date: 2006-03-15 00:35:37 + (Wed, 15 Mar 2006) New Revision: 14404 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14404 Log: Fix the build when nscd_flush_cache is detected

Re: [Samba] net ads leave failed.

2006-03-09 Thread Guenther Deschner
Hi Vincent, On Thu, Mar 09, 2006 at 03:04:02PM +0100, [EMAIL PROTECTED] wrote: Hello all, I have the latest version of Samba (samba-3.0.21c) installed on a SLES9 linux server, with all the related Suse packages. I had link the server correctly to the domain, but discovered a pb with a

Re: [Samba] Samba, Winbind and AD. Nearly there but not quite

2006-03-09 Thread Guenther Deschner
Hi Vincent, On Thu, Mar 09, 2006 at 05:02:50PM +1300, Vincent Commarieu wrote: Hi, Just compiled latest version of samba and trying to get Samba to work with AD. I am at the point where I wbinfo -t, wbinfo -u, wbinfo -g and wbinfo -ausername%password work, but I cannot get getent passwd

Re: svn commit: samba r13895 - branches/SAMBA_3_0/source/nsswitch trunk/source/nsswitch

2006-03-09 Thread Guenther Deschner
Hi Volker, On Mon, Mar 06, 2006 at 08:18:19PM +, [EMAIL PROTECTED] wrote: Author: vlendec Date: 2006-03-06 20:18:18 + (Mon, 06 Mar 2006) New Revision: 13895 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13895 Log: As agreed upon with gd on the

Re: [Samba] ADS and sharing home directory

2006-02-20 Thread Guenther Deschner
Hi Dracula :) On Mon, Feb 20, 2006 at 05:02:28PM +0530, Dracula wrote: [homes] comment=home direcoty of %S path=/home/%D/%U browseable=no valid users=%S You have to put valid users = %D+%S in there. Newer Samba Versions will support %D%w%S as well, where %w substitutes the

Re: [Samba] net ads dn - reading netbootGUID attribute

2006-02-09 Thread Guenther Deschner
Hi Roman, On Thu, Feb 09, 2006 at 11:01:25AM +0100, Roman Sommer wrote: hello everyone, I can read *any* attribute I want out of the Active Directory using 'net ads dn'.. except for one - which of course is the (only) one I need. netbootGUID. It is stored in an octet string as is

Re: [Samba] Re: Enabling 'idmap backend = ad' for user auth

2006-02-03 Thread Guenther Deschner
Hi Jerry, On Fri, Feb 03, 2006 at 09:15:12AM -0600, Gerald (Jerry) Carter wrote: winbind nss info = template, sfu Not absolutely sure, but docs I've seen say to set this to winbind nss info = sfu Not sure what the template bit is used

Re: [Samba] Re: Enabling 'idmap backend = ad' for user auth

2006-02-03 Thread Guenther Deschner
Hi, On Fri, Feb 03, 2006 at 09:31:50AM -0600, Gerald (Jerry) Carter wrote: Guenther Deschner wrote: Gunether, Why is 'winbind nss info' a list ? We only ever check for sfu. Were you thinking of chaining options Volker asked me to have a list already at that time to allow his

Re: [Samba] 3.0.21b +pam_winbindd

2006-01-31 Thread Guenther Deschner
Hi, On Tue, Jan 31, 2006 at 05:43:02PM -, Batty, Richard wrote: Ive installed and configured samba using cd samba-3.0.21b/source ./autogen.sh ./configure --with-krb5=/usr/local \ --with-automount \ --with-pam \ --with-utmp \

Re: svn commit: samba r13164 - in trunk/source/nsswitch: .

2006-01-26 Thread Guenther Deschner
On Thu, Jan 26, 2006 at 01:41:53PM +, [EMAIL PROTECTED] wrote: Author: gd Date: 2006-01-26 13:41:52 + (Thu, 26 Jan 2006) New Revision: 13164 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=13164 Log: Fix wbinfo --trusted-domains (-m) and add wbinfo

Re: [Samba] ldapsam:trusted work?

2006-01-03 Thread Guenther Deschner
Hi, On Tue, Jan 03, 2006 at 09:52:31AM -0500, William Jojo wrote: Samba 3.0.21(and 'a'), AIX 5.2. Was looking as what appears to be a fantastic optimization, but can't find info in source code or swat and turning the option on makes smbd do exit(-1) (on AIX anyway). Do you have a guest

Re: [Samba] Performance Problem / failed to verify PAC server signature

2005-11-22 Thread Guenther Deschner
Hi, On Mon, Nov 21, 2005 at 04:42:39PM +0100, Christoph Kaegi wrote: Hello List We run a Solaris9 Server running Samba 3.0.20, Local Users (no winbind) but authenticating against ADS. There are up to 800 concurrent users, mostly Windows XP SP3. When clients access MyDocuments, which is

Re: [Samba] -DIdmap_rid_support_trusted_domains

2005-10-26 Thread Guenther Deschner
Hi Michael, On Wed, Oct 26, 2005 at 04:21:15PM +0200, Michael Gasch wrote: hi, i have a question about winbind, idmap_rid and trusted domains. at sambaxp jerry said it's possible to have idmap_rid working with trusted domains. this is what we would like to have here. Please, please,

Re: svn commit: samba r10945 - in branches/SAMBA_4_0/source/auth/kerberos: .

2005-10-12 Thread Guenther Deschner
On Wed, Oct 12, 2005 at 10:24:43PM +, [EMAIL PROTECTED] wrote: Author: abartlet Date: 2005-10-12 22:24:43 + (Wed, 12 Oct 2005) New Revision: 10945 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10945 Log: Free the salt after we are done with it. May

Re: [Samba] rid_idmap problem

2005-09-19 Thread Guenther Deschner
Hi, On Mon, Sep 19, 2005 at 09:04:28AM +, [EMAIL PROTECTED] wrote: Hi all, in my winbind logfile I get the following errors: rid_idmap_get_id_from_sid: no suitable range available for sid: S-1-5-32-551 [2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid(478)

  1   2   >