Re: [Samba] Group mapping bugs + PATCH

2004-01-28 Thread Andrew Bartlett
investigations will be useful :) Can you make sure this gets into bugzilla.samba.org, if nobody picks this up right away? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator

Re: HEAD fails to build with dmalloc enabled

2003-04-01 Thread Andrew Bartlett
brackets often fixes the issue. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org

Re: When the keep-alive packet sent out,rfc1002 says differentthings!!

2003-03-31 Thread Andrew Bartlett
,or do I mistake rfc1002? Urgently hope for your kindly help,thank you See www.ubiqx.org/cifs for a description of this horrid protocol... Also, make sure you understand - the standard is what Microsoft does, not what what any RFC says. Andrew Bartlett -- Andrew Bartlett

Re: Samba 2.2.8 - Snap Server Support

2003-03-31 Thread Andrew Bartlett
for a great product. -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc

Re: status of unixsam and guest passdb backends?

2003-03-31 Thread Andrew Bartlett
On Mon, 2003-03-31 at 18:52, Alexander Bokovoy wrote: On Mon, Mar 31, 2003 at 10:23:16AM +1000, Andrew Bartlett wrote: Guestsam is in there to provide the only useful thing unixsam did - ensuring that the guest account really was the guest, and had the guest RID. It also helped

Re: Defaults for 'profile path' etc to in 3.0?

2003-03-31 Thread Andrew Bartlett
local profiles. I would say it's ok to change it I think we should have a ./configure option for it, certainly. We have managed to keep option compatibility with 2.2 (even having a --with-ldapsam that sets the old defaults), so I would oppose changing the defaults. Andrew Bartlett -- Andrew

RE: [SECURITY] Samba 2.2.8 available for download

2003-03-30 Thread Andrew Bartlett
internal state, and go from there. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org

Re: status of unixsam and guest passdb backends?

2003-03-30 Thread Andrew Bartlett
accounts, as you correctly note. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org

Re: status of unixsam and guest passdb backends?

2003-03-30 Thread Andrew Bartlett
On Mon, 2003-03-31 at 09:48, Andrew Bartlett wrote: On Mon, 2003-03-31 at 08:48, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrew, I notice that the default for the passdb backend parameter has been changed in SAMBA_3_0/HEAD, but the man page has

Re: status of unixsam and guest passdb backends?

2003-03-30 Thread Andrew Bartlett
On Mon, 2003-03-31 at 10:10, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 31 Mar 2003, Andrew Bartlett wrote: Unixsam was a useful hack and a bad idea. Most of what it was trying to do it couldn't really do, and will be replaced by idmap. I had

New modules system and vfs_done

2003-03-30 Thread Andrew Bartlett
in the wrong place - it's dealing with the VFS, not the connection. And how should a internal module 'end' it's operations anyway? We don't seem to have that coded up at all... Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems

Re: tcon torture test

2003-03-29 Thread Andrew Bartlett
that there are problems over NFS. There sure are for another FS I can name where read/write permission checking is deferred until reading/writing time. It turns out that Win2003 RC2 does check these... Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED

Re: Plugin API questions

2003-03-29 Thread Andrew Bartlett
) { return smb_register_auth(paula, auth_init, AUTH_INTERFACE_VERSION); } I think that's right, for a built in plugin. For a module I think the name of that function changes to init_module(). See 'preload modules' to load it before the main server fork(). Andrew Bartlett -- Andrew Bartlett

Re: Patch for Bad Password Attempt Lockout, samba3.0a22.

2003-03-28 Thread Andrew Bartlett
the writes this will cause on the backend. An LDAP write can be quite expensive, and for the LDAP case this means that the master ldap server will be hit for every logon attempt. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication

Re: Patch for Bad Password Attempt Lockout, samba3.0a22.

2003-03-27 Thread Andrew Bartlett
account cannot be locked out. Once these issues are sorted, I'm inclined to apply this patch! Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College

Re: OPLOCK and locking problems: (Resource deadlock avoided)

2003-03-27 Thread Andrew Bartlett
On Fri, 2003-03-28 at 07:34, [EMAIL PROTECTED] wrote: On Sun, Mar 23, 2003 at 02:23:45PM +1100, Andrew Bartlett wrote: Earlier this week, I had a serious meltdown of Samba HEAD at my site. (A 100 concurrent user, domain logon and homedir setup). All the users share a single mandatory

Re: Patch for Bad Password Attempt Lockout, samba3.0a22.

2003-03-27 Thread Andrew Bartlett
about the way applications call PAM). Andrew, -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: generating core dumps in winbindd and smbd

2003-03-27 Thread Andrew Bartlett
would say do what was intended. I often need core files :-( It would also be nice to have a core-server-pid filename for the core dump but I'm not sure how portable that is. Isn't that what the mkdir() stuff is about? Andrew Bartlett -- Andrew Bartlett [EMAIL

RE: Compile error in server.c

2003-03-26 Thread Andrew Bartlett
? It will be really cool to have that feature. Fixed in HEAD/3.0 CVS. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org

Re: [Samba] print$ share problem URGENT - BUG

2003-03-26 Thread Andrew Bartlett
be ptrace'ed... I'm glad jelmer added that backtrace() code... Andrew Bartlett

Re: Machine account password interoperablity for Samba 3.0secrets.tdb and keytabs

2003-03-25 Thread Andrew Bartlett
is changing the password for a particular kerberos principal, then it should store the hashes in the keytab. The idea of *finally* getting kerberos useful on real sites is just too appealing :-) Naturally, the original plaintext password should stay basically where it is. Andrew Bartlett

Re: Machine account password interoperablity for Samba 3.0secrets.tdb and keytabs

2003-03-25 Thread Andrew Bartlett
the password for a principal, I see no harm in setting the password into the keytab, when selected by the admin. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker

[PATCH] Better fix for devicetype?

2003-03-25 Thread Andrew Bartlett
' buffer became an 'in' buffer, and we didn't push the correct devicetype back to the wire. Volker then tried to fix the specific case he hit. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED

Re: [PATCH] Better fix for devicetype?

2003-03-25 Thread Andrew Bartlett
On Wed, 2003-03-26 at 03:28, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 25 Mar 2003, Andrew Bartlett wrote: Would this be a better fix for the devicetype problem? I may be blind here, but the only difference in your patch that I see is some

Re: [PATCH] Better fix for devicetype?

2003-03-25 Thread Andrew Bartlett
On Wed, 2003-03-26 at 09:28, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26 Mar 2003, Andrew Bartlett wrote: I may be blind here, but the only difference in your patch that I see is some rewritten debug messages. What am I overlooking

Re: [PATCH] Better fix for devicetype?

2003-03-25 Thread Andrew Bartlett
On Tue, Mar 25, 2003 at 05:02:58PM -0600, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26 Mar 2003, Andrew Bartlett wrote: And removing the second set of push_string()s. It looked like you had some kind of merge error - your patch added new push_string

RedHat's glibc-2.3.2 and Samba - assert_uid() failures?

2003-03-24 Thread Andrew Bartlett
problems? Even if it's a glibc bug, we probably need to detect/work around it. It appears that setresuid() is an 'odd' call - is there a better one to call? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL

Re: w: bad number in 2.2.8

2003-03-24 Thread Andrew Bartlett
reason) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net

Re: [Samba] 3.0alpha22 does not execute add user script ?

2003-03-22 Thread Andrew Bartlett
, it was decided a *long* time ago that also executing it (ie, the same script and parameter) for 'no homedir' was just plain silly. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator

Re: Machine account password interoperablity for Samba 3.0secrets.tdb and keytabs

2003-03-21 Thread Andrew Bartlett
setmachinepw commands. Since the machine account password is stored in clear text already, these new commands would be very easy add. Patches welcome, the last 2 we should have, no matter the long term solution. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED

Re: Machine account password interoperablity for Samba 3.0secrets.tdb and keytabs

2003-03-21 Thread Andrew Bartlett
in ADS) outweighs the 'risk' here. Now, all somebody needs to do is write up the patch or dig one up that's already done... Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network

Re: pdb_ldap.c, second attempt

2003-03-21 Thread Andrew Bartlett
would also be good. Again, this looks like a very good patch! Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org

Re: [Samba] 3.0alpha22 does not execute add user script ?

2003-03-21 Thread Andrew Bartlett
history of unix (of which samba is the bastard child, breaking most of the rules ;-) we try to have small packages each doing their own job well. pam_mkhomdir is part of Linux-PAM, and works for all sorts of services, not just Samba. Andrew Bartlett -- Andrew Bartlett

Re: patch for logon time on samba3.0 alpha22

2003-03-20 Thread Andrew Bartlett
- it's the kind of detail I've been meaning to catch up on for a while. Andrew Bartlett Yes, the first time I also put the patch on the auth/auth_sam.c, but I have seen that you update the logon time using utmp when the session is estabilished. The patch works for Domain logons. Only

Re: [PATCH] IDMAP LDAP Backend 2of2

2003-03-20 Thread Andrew Bartlett
or uid)'. That's an inclusive or, btw. Also, it should not be sambaGroup, but sambaIDMAP. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL

Re: patch for account policy, min password age, on samba30a22

2003-03-20 Thread Andrew Bartlett
) to have per-second resolution, because setting '20 mins' is quite useful for 'min passwd age'. (makes it hard to change/change back, without locking people to their password for days). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication

Re: The new modules system

2003-03-20 Thread Andrew Bartlett
to catch on :-) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net

Re: patch for account policy, min password age, on samba30a22

2003-03-20 Thread Andrew Bartlett
displaying the value, we should allow them to be set to arbitrary values, and display them in terms of days/hours/min. -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker

Re: [PATCH] IDMAP Backend part 1 of 2 (LDAP library)

2003-03-19 Thread Andrew Bartlett
the 'arg'. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net

Re: net rpc vampire doesn't copy interdomain trust accounts

2003-03-19 Thread Andrew Bartlett
This currently fails for ACB_DOMTRUST. I'm not sure what the correct fix is, but adding it to the first clause and treating it as if it were a machine account seems to work okay. We should probably try to have as few distinctions as possible - so this sounds good. Andrew Bartlett -- Andrew Bartlett

Re: [PATCH] IDMAP Backend part 1 of 2 (LDAP library)

2003-03-19 Thread Andrew Bartlett
code to libads, as well as LDAP URI support). If that's all just too hard, then I'll probably accept the current patch on the 'minimal change' basis, but I would still like to do this right. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager

Re: patch for logon time on samba3.0 alpha22

2003-03-19 Thread Andrew Bartlett
On Thu, 2003-03-20 at 08:56, [EMAIL PROTECTED] wrote: On Thu, Mar 20, 2003 at 08:36:10AM +1100, Andrew Bartlett wrote: On Thu, 2003-03-20 at 01:38, Jianliang Lu wrote: Hi, I've patched the samba3.0 alpha22 for logon_time, now the user's logon time is updated when he logs

Re: [PATCH] groups in ldap

2003-03-18 Thread Andrew Bartlett
' that contains nothing, and hang the 'real' class off that if we don't have anything else to hang it off. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College

Re: typos in SAMBA_3_0 CVS

2003-03-17 Thread Andrew Bartlett
duties with regard to the smbwrapper support. I've merged the changes in. Yep - I'm about 2 weeks behind on janitorial duties :-( Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student

Re: ldapsam_nua and SAMBA_3_0 CVS

2003-03-17 Thread Andrew Bartlett
- we need to get the group list for domain logins, and that comes from getgrouplist(). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL

Re: overmalloc_safe_strcpy?

2003-03-17 Thread Andrew Bartlett
. The only user is nmbd now - because I changed the stat cache to use pointers into the overmalloc()ed buffer. It's a pity that we can't tell what's behind a pointer, but it's a start. :-) Andrew Bartlett

Re: ldap delete user?

2003-03-17 Thread Andrew Bartlett
Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc

Re: Passwd sync on ldapsam

2003-03-16 Thread Andrew Bartlett
to the parts doing the LDAP modifications easily. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http

Re: [PATCH] Joining domains specifying auth realm

2003-03-16 Thread Andrew Bartlett
that's clobbering it instead? I applied the previous patch - can you get me the changes against current HEAD? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator

Re: Samba 3.0 alpha22 confiugre problem

2003-03-15 Thread Andrew Bartlett
these generated files in CVS. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: Error messages generated by passdb/pdb_smbpasswd.c are (almost)useless

2003-03-14 Thread Andrew Bartlett
contain just anything like control chars, I agree that telling the entry line number could be a good idea. More particularly it might contain the passwords... (our logs are often world-readable) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager

Re: Samba and PAM patches for PDC configuration

2003-03-14 Thread Andrew Bartlett
a perl script to export to smbpasswd? I say this only to save some poor sole finding your patch in the mailing list archive uncommented. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student

Re: New approach for winbind to match Windows to UNIX users and back

2003-03-13 Thread Andrew Bartlett
that the tdb mapping is the best way forward, but that some extensions to cope with all SIDs as GIDs. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker

Re: New approach for winbind to match Windows to UNIX users and back

2003-03-13 Thread Andrew Bartlett
On Thu, 2003-03-13 at 20:46, Simo Sorce wrote: On Thu, 2003-03-13 at 01:32, Andrew Bartlett wrote: On Thu, 2003-03-13 at 10:38, Michael Fair wrote: I haven't done much work in this are yet so please feel free to correct me as you see fit, but as I understand it, part of the problem we

RE: Joining domains specifying auth realm

2003-03-12 Thread Andrew Bartlett
your patch - thanks! Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: bug or typo in smbd/service.c: make_connection_snum(line 530)?

2003-03-11 Thread Andrew Bartlett
the values attached to the vuid. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: Samba 3.0 Alpha22 + AD Domain, RedHat Kerberos Problems

2003-03-11 Thread Andrew Bartlett
their snapshots, or a recent heimdal. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: Restricting delete on a share?

2003-03-10 Thread Andrew Bartlett
On Mon, 2003-03-10 at 18:50, Stefan (metze) Metzmacher wrote: At 18:37 10.03.2003 +1100, Andrew Bartlett wrote: On Mon, 2003-03-10 at 18:02, Stefan (metze) Metzmacher wrote: At 00:04 10.03.2003 -0600, Jeremy M. Dolan wrote: Hi all. Management here wants to restrict users from

Re: valgrind_strlen?

2003-03-10 Thread Andrew Bartlett
) I don't get warnings. Andrew Bartlett

Re: breakage in cliconnect or thereabouts

2003-03-09 Thread Andrew Bartlett
On Mon, 2003-03-10 at 09:55, Christopher R. Hertel wrote: On Mon, Mar 10, 2003 at 08:20:34AM +1100, Andrew Bartlett wrote: On Mon, 2003-03-10 at 08:05, Ronan Waide wrote: Hi folks, * libsmb/smb_signing.c, libsmb/smbencrypt.c, Makefile.in, include/client.h, libsmb

Re: Restricting delete on a share?

2003-03-09 Thread Andrew Bartlett
denied when the unlink function is called. Just remember that doing this doesn't actually gain you anything - the users can still write garbage into the file, or make them zero length. So the option you are looking for is 'read only = yes' ;-) Andrew Bartlett -- Andrew Bartlett

Clean up winbindd locking

2003-03-08 Thread Andrew Bartlett
, as I fail to see what it gains us. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org

Re: Clean up winbindd locking

2003-03-08 Thread Andrew Bartlett
On Sat, 2003-03-08 at 21:20, Tim Potter wrote: On Sat, Mar 08, 2003 at 09:10:23PM +1100, Andrew Bartlett wrote: Is there any reason I should not apply this patch to Samba HEAD? I think the patch was eaten by Mailman. Please re-send as text/plain. Without even seeing the patch (-: it's

Re: [Samba] cups printing and user names from trusted domains

2003-03-08 Thread Andrew Bartlett
On Sat, 2003-03-08 at 06:51, Andrew Bartlett wrote: On Sat, 2003-03-08 at 04:12, Wolfgang Ratzka wrote: -BEGIN PGP SIGNED MESSAGE- Im currently running some tests for a samba/CUPS based print server. The print server is a member of an NT domain and uses winbind to import NT

Re: NT sends empty username to 3.0a21

2003-03-08 Thread Andrew Bartlett
' in your smb.conf). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: Joining domains specifying auth realm

2003-03-06 Thread Andrew Bartlett
be much appreciated! (To make it easy, just do it for kerberos logins) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http

Re: quota group

2003-03-05 Thread Andrew Bartlett
, it might work out best that metze picks this up into his patch. (He is working on being able to modify the quota from an Windows client!). Either way, this certainly is a very nice idea! Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication

Re: [PATCH] draft: better string overflow checking (was: memorycorruption in SAMBA_3_0)

2003-03-05 Thread Andrew Bartlett
any bugs, but I'd love to hear comments. This will (compared to other checks) slow things down, as we keep filling out those pstrings, but I think it's a great idea - and will catch bugs! Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication

Re: 3.0a21 and HEAD: only primary group of a domain user is set onsmbd

2003-03-05 Thread Andrew Bartlett
developments that I'm sometimes slow to merge (often because I don't get all the bugs out the first time I commit :-) Chere On Tuesday 04 March 2003 11:52 pm, Andrew Bartlett wrote: On Wed, 2003-03-05 at 14:38, Ken Cross wrote: The behavior you're seeing is because LDAP is being used

Re: smbtorture does not seem to want to fallback to *SMBSERVER

2003-03-05 Thread Andrew Bartlett
the port to connect on. I have added code to support this. We really should move smbtorture to cli_full_connection() for all but the really weird tests... Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL

RE: 3.0a21 and HEAD: only primary group of a domain user is set onsmbd

2003-03-04 Thread Andrew Bartlett
fixed a slightly different issue, this issue was fixed in HEAD recently. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http

Re: [PATCH] Mutual authentication, keytabs, and SMB session keys

2003-02-24 Thread Andrew Bartlett
it for now :-) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http

Re: [PATCH] Mutual authentication, keytabs, and SMB session keys

2003-02-23 Thread Andrew Bartlett
: /cvsroot/samba/source/smbd/sesssetup.c,v retrieving revision 1.87 diff -u -r1.87 sesssetup.c --- smbd/sesssetup.c 10 Feb 2003 09:16:05 - 1.87 +++ smbd/sesssetup.c 23 Feb 2003 01:51:14 - -4,6 +4,7 Copyright (C) Andrew Tridgell 1998-2001 Copyright (C) Andrew Bartlett

Re: samba HEAD - /source/auth/auth_rhosts.c

2003-02-22 Thread Andrew Bartlett
-internal_username.str, account))) { return nt_status; } before the rhostsfile and home declarations. This broke the build on at least Solaris. It broke the build most places - sorry about that. Andrew Bartlett

Re: IDMAP backend

2003-02-21 Thread Andrew Bartlett
Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc

RE: Make Admins be admin users

2003-02-20 Thread Andrew Bartlett
is being worked on, but a more limited hack has been employed by other NAS vendors to give 'change ownership' permissions. The rest is up to what ACLs you set on your file system. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems

Re: [patch] Allow chown of directories from W2k domain clients

2003-02-19 Thread Andrew Bartlett
. */ return True; } -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net

Re: Make Admins be admin users

2003-02-19 Thread Andrew Bartlett
: 'admin users = @MYDOM\Domain Admins' In you smb.conf instead. We are going to get rid of 'sid_peek_rid' soon, as it allows this kind of thing too easily - you simply don't know which domain... (The sid_peek_check_rid() version makes sure you have to specify it up front). Andrew Bartlett

Re: interesting fact about StrCaseCmp

2003-02-17 Thread Andrew Bartlett
of dangerous. Would it be OK to change it to use dynamic allocation? I think so. Possibly only for long strings? But then that is probably micro-optimization. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team

RE: bug fix?: 2.2.7a, nmbd/nmbd_packets.c, listen_for_packets()

2003-02-17 Thread Andrew Bartlett
like this). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net

Re: Detecting true64

2003-02-17 Thread Andrew Bartlett
, but some 'force group' variants, 'security=share' setups and the SAMR 'add/delete user from group' we still need to call it. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network

Re: Doxygen janitor?

2003-02-17 Thread Andrew Bartlett
On Tue, 2003-02-18 at 10:50, Martin Pool wrote: Is there any kind of consensus (he says, hopefully) that Doxygen is a good idea? If I'm looking at code is it OK to cleanup comments into standard form? Go for it! Andrew Bartlett -- Andrew Bartlett [EMAIL

Re: [PATCH] ADS changes for joining accounts w/o full Administratorrights

2003-02-16 Thread Andrew Bartlett
On Wed, 2003-02-12 at 22:16, Antti Andreimann wrote: Ühel kenal päeval (kolmapäev, 12. veebruar 2003 00:16) kirjutas Andrew Bartlett: I think we need to do a few things here: - We should record the principal name we joined with, and only ever send that to our clients. That's a good

Re: bug fix?: 2.2.7a, nmbd/nmbd_packets.c, listen_for_packets()

2003-02-16 Thread Andrew Bartlett
Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc

Re: 3.0Alpha21 and W2K AD 'dorking' Samba machine acct?

2003-02-14 Thread Andrew Bartlett
On Thu, 2003-02-13 at 01:30, Nik Conwell wrote: On Thu, 30 Jan 2003, Andrew Bartlett wrote: On Thu, 2003-01-30 at 23:32, Nik Conwell wrote: Anybody seeing a scenario like this? net ads join adds our machine entry to AD just fine. The machine entry object in the AD

Re: cross compiling samba-2.2.7a

2003-02-14 Thread Andrew Bartlett
with getting a int32 defined then defines *u*int32 Thought you might like to know It was already fine in HEAD, but I've fixed it in 2.2. Thanks! Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED

Re: password quality script aka --with-cracklib replacement

2003-02-13 Thread Andrew Bartlett
. Thank you for your valuable comments. I look forwards to read yours. Pierre B. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL

Re: [PATCH] ADS changes for joining accounts w/o full Administratorrights

2003-02-12 Thread Andrew Bartlett
On Wed, 2003-02-12 at 22:16, Antti Andreimann wrote: Ühel kenal päeval (kolmapäev, 12. veebruar 2003 00:16) kirjutas Andrew Bartlett: I think we need to do a few things here: - We should record the principal name we joined with, and only ever send that to our clients. That's a good

Re: [PATCH] ADS changes for joining accounts w/o full Administratorrights

2003-02-11 Thread Andrew Bartlett
On Tue, 2003-02-11 at 20:06, Andrew Bartlett wrote: On Tue, 2003-02-11 at 09:06, Antti Andreimann wrote: Hi! I have done some changes to enable users w/o full administrative access on computer accounts to join a computer into AD domain. The patch and detailed changelog is available

Re: [PATCH] ADS changes for joining accounts w/o full Administratorrights

2003-02-11 Thread Andrew Bartlett
On Wed, 2003-02-12 at 05:55, Antti Andreimann wrote: Ühel kenal päeval (teisipäev, 11. veebruar 2003 13:39) kirjutas Andrew Bartlett: I'm not quite convinced about this. I'm quite willing (but see below) to apply the rest of this patch, but I'll need a good explanation of what

Re: Samba 3.0: vfs_netatalk.c

2003-02-11 Thread Andrew Bartlett
at a time. As such, my understanding it that we can re-implement as readdir(). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http

Re: password quality script aka --with-cracklib replacement

2003-02-11 Thread Andrew Bartlett
; that loses information. If it's null, just send an empty string. Let me know what you think and/or other ideas. Hope that helps. Thank-you both for your comments and code - I really think this will be a powerful interface for Samba. Andrew Bartlett -- Andrew Bartlett

Ignoring printer errors

2003-02-10 Thread Andrew Bartlett
spooled correctly. It should not be that hard to do a proper mapping from CUPS error codes to the W_ERR or NT_STATUS equivalent. Any reason why this hasn't been done, before I find myself knee-deep in printing?... (or does anybody want to help me with the mapping?) Andrew Bartlett

Re: Ignoring printer errors

2003-02-10 Thread Andrew Bartlett
On Tue, 2003-02-11 at 00:15, Michael Sweet wrote: Andrew Bartlett wrote: I'm wondering, why (in HEAD and 3.0) rpc_server/srv_spoolss_nt.c:_spoolss_enddocprinter_internal() doesn't handle any errors? It sort of makes sense if we don't check the output of running the unix 'lpr

Re: Samba 3.0: vfs_netatalk.c

2003-02-10 Thread Andrew Bartlett
to different word orders, word sizes etc, or just some nice warning that other compilers don't have, they *find bugs*. Andrew Bartlett

Re: make: *** [nsswitch/pam_winbind.po] Error 1

2003-02-06 Thread Andrew Bartlett
Problem. Don't configure --with-pam if you don't have PAM (both libs and devel headers). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL

Re: machine names same as usernames - problems...

2003-02-06 Thread Andrew Bartlett
. There may be other good reasons, but an NT SAM (and therefore smbpasswd etc) should have no problem with this. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator

Re: machine names same as usernames - problems... -- here's areal world NetBIOS clusterfsck ...

2003-02-06 Thread Andrew Bartlett
On Fri, 2003-02-07 at 07:54, Bryan J. Smith wrote: Quoting Andrew Bartlett [EMAIL PROTECTED]: Why can't it work? I've seen this discussed a number of times, but never really been told why it doesn't work. That $ is there for exactly that reason you know - to make them different. Er

Re: machine names same as usernames - problems...

2003-02-06 Thread Andrew Bartlett
On Thu, Feb 06, 2003 at 02:47:47PM -0800, Richard Sharpe wrote: On Thu, 6 Feb 2003, Bradley W. Langhorst wrote: On Thu, 2003-02-06 at 15:39, Andrew Bartlett wrote: adil (users) and adil$ (machine) cannot work. Why can't it work? I've seen this discussed a number of times

Re: Gencache fails to open gencache.tdb

2003-02-05 Thread Andrew Bartlett
Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc

  1   2   3   4   5   >