Re: [Samba] Machine account pasword change failed (NT 4)

2003-11-11 Thread Andrew Bartlett
On Tue, 2003-11-11 at 17:59, David Wilson wrote:
 Hi guys and girls,
 
 I run a Samba-3.0 PDC for N.T. workstations on a Slackware Linux box.
 I often see the following error in the N.T. workstation's event log:
 Changing machine account password for account x$ failed with the
 following error:
 The handle is invalid.
 
 Any ideas what this could be ?
 I'm not using PAM in any way.

You really are going to need to get the server's log, to make any sense
of it.  Getting an ethereal trace can help too - the nltest.exe utility
(NT resourse kit, I think) will help a lot here.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: AW: [Samba] Re: AW: Samba Success Story

2003-11-11 Thread Gémes Géza
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
SEFEROVIC Edvin írta:
| To be honest, that is actually what am I doing at the moment... a
| centralized administration and user database ( LDAP of course ) for
auth of
| Samba, mail, ftp etc. Has anyone made something like this on SuSE?
|
| SEFEROVIC Edvin
|
I've did it on Mandrake 9.1, following closely:
http://www.mandrakesecure.net/en/docs/ldap-auth2.php
http://www.mandrakesecure.net/en/docs/samba-pdc.php
http://www.mandrakesecure.net/en/docs/samba-ldap-advanced.php
Except I've used Samba-3, and the new schema.
I think things written there (except maybe openldap-migration, when I've
tried this, with Suse 8.1 I haven't found it, you may need to download
it from http://www.padl.com/) are valid for Suse to.
Good Luck!

Geza Gemes
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/sJAW/PxuIn+i1pIRAp27AKCXoxSgF9PIuD0SykZBbSbu4WLvBgCcCk8o
oPwuG+H1hlWl0hlr8mKM8vI=
=Mm4M
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with winbind and pam

2003-11-11 Thread Tilo Lutz
Am Mo, 2003-11-10 um 11.02 schrieb Tilo Lutz:
 I've set up winbind with Suse 9.0 and Samba 3.0.1
 Everything i working fine exepct pam configuration
 How can I use pam_winbind and pam_unix2 ?
 
  auth sufficient pam_winbind.so
  auth required   pam_unix2.souse_first_pass null_ok
 unix-users can login with correct password. NT-users can
 login with any password, even wrong passwords!

I've found the problem. The NT-user I used for testing
had an linux-account. I removed only the entry from passwd
and not from shadow. In shadow was no password set.

Tilo


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: AW: Samba Success Story

2003-11-11 Thread rruegner
If done it via pam modules with suse,
but recommended way should be ldap,
you can try Kolab server ich has ldap inbuild and a lot of exchange like
stuff, it work like charme on suse,merge this Projects and you have a pdc
with an exchange like Mailserver
Best Regards Robert
- Original Message - 
From: SEFEROVIC Edvin [EMAIL PROTECTED]
To: Samba Mailing List [EMAIL PROTECTED]
Sent: Tuesday, November 11, 2003 7:18 AM
Subject: AW: [Samba] Re: AW: Samba Success Story


To be honest, that is actually what am I doing at the moment... a
centralized administration and user database ( LDAP of course ) for auth of
Samba, mail, ftp etc. Has anyone made something like this on SuSE?

SEFEROVIC Edvin

-Ursprüngliche Nachricht-
Von: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Im Auftrag
von Carl Weiss
Gesendet: Dienstag, 11. November 2003 03:13
An: [EMAIL PROTECTED]
Betreff: [Samba] Re: AW: Samba Success Story

Take a look into Bynari www.bynari.net or suse openexchange as replacements
for Exchange.
I've been running bynari for a few years now and haven't had any issues,
although I haven't used the outlook connector.

If you set up Samba with openldap you could configure outlook clients to use
your openldap server as the contact database, and use openldap to
authenticate mail users.  This would let them have one password for domain
and mail.  Another project to consider.

-=Carl=-

Jerry Haltom [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
No, I bought the Samba 3.0 Official Reference and Howto book and
followed the instructions. :)

On Mon, 2003-11-10 at 18:44, SEFEROVIC Edvin wrote:
 Congratulations... nice move... a high quality solution doesn't have to
mean
 expensive solution as well... I wish you luck in your next step ( 
removing
 Windows from the desktop )... another question - have you documented this
 project of yours?

 Greets
 SEFEROVIC Edvin

 -Ursprüngliche Nachricht-
 Von: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Im Auftrag
 von Jerry Haltom
 Gesendet: Dienstag, 11. November 2003 01:33
 An: Greg Folkert
 Cc: SambaUser List
 Betreff: Re: [Samba] Samba Success Story

 Well, getting off of Active Directory was our main goal. I'm sure most
 here can figure out why. Thanks to MS's innovation, one can't just
 keep Exchange working with it.

 So... we searched for alternatives that were exactly the same, and found
 nothing that offered any clear benefits. They'res just nothing the can
 offer the Outlook Integration thing, which is apparently intentional.
 :)

 We wanted to get with a standard IMAP server, and we did. Cyrus-IMAP. it
 performs well, is WAY more usable, storing messages as normal files.
 Easy to tar up and backup normal files vs. a massive JET database. It
 doesn't offer Calendar/Contacts such as Exchange does though... so we
 kept looking.

 A new project just appeared, OpenGroupware (www.opengroupware.org). It
 started as a commerical project, but has recently been released under
 the GPL. The code base itself is very mature, however the conversion to
 rename everything from SKYRIX to OGo has caused some headaches. It is
 however not Exchange. It offers a lot of features Exchange doesn't, and
 doesn't offer some Exchange does, and offers others differently. It's a
 different product. It's a lot like ACT actually, which some of our users
 love.

 That is taking some adjusting by our users, but they'll get over it.

 Also, unless you pay for the commercial Outlook plugin, it doesn't just
 work in Outlook. It does however have a nice WebUI Mmmm WebUI...
 *coughhackcough*.

 We're using the WebUI. It works okay.

 Outlook makes using an IMAP server a bitch though, it does the crossout
 deleted messages thing. Can't store the password properly. Doens't ask
 you when it changes, just silently fails. Outlook is at fault, but
 that's that. We can live with it.

 Now that our server end is clean we can begin on our ultimate goal of
 removing Windows from the desktop though.

 On Mon, 2003-11-10 at 18:10, Greg Folkert wrote:
  On Mon, 2003-11-10 at 19:03, Jerry Haltom wrote:
   I'd like to thank the Samba team for making our switch off of Active
   Directory amazingly smooth. We're a small company, only 30 desktops,
but
   things went great for us. Actually, nobody even notices the Windows DC
   is even gone!
  
   The Exchange migration that went along with this wasn't as hassle free
   though. =(
  
   It's really refreshing to be able to SSH into our file server and see
   what's going on!
  
   Kudo's to the Samba team for saving us time/money and our sanity!
 
  Could you share what you did? Along with what e-mail/groupware package
  did you switch to...
 
  I'd be interested to know. I am sure other would be as well.
 -- 
 Jerry Haltom [EMAIL PROTECTED]
 Feedback Plus, Inc.

 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
Jerry Haltom [EMAIL PROTECTED]
Feedback Plus, 

Re: [Samba] Samba Translation Dok to German, first file, deutsche bersetzung Der Samba Doku erste Datei

2003-11-11 Thread rruegner
Hi, we decide t make translation in html first,
afterwards convert it to other types later.
Dont forget its Gnu so anyone can convert it to what ever he wants
Bets Regards
- Original Message - 
From: Kurt Pfeifle [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 11, 2003 12:04 AM
Subject: [Samba] Samba Translation Dok to German, first file, deutsche
bersetzung Der Samba Doku erste Datei


  [Samba] Samba Translation Dok to German, first file, deutsche
bersetzung Der Samba Doku erste Datei
 
  * To: samba at sambadotorg
  * Subject: [Samba] Samba Translation Dok to German, first file,
deutsche bersetzung Der Samba Doku erste Datei
  * From: rruegner robowarp at gmxdotde
  * Date: Mon, 10 Nov 2003 22:10:20 +0100
  * Cc:
 
  Hi @ll ,
  the first file is now translated to German
  find it here
  http://www.robowarp.de/smb/trans/net.8.html
  thx for his work to Mr Stefan G. Weichinger
  mailto robowarp at gmxdotde if you want to be a part of the Translation
Team
  you can view other files translation progress and the readme beyond
  http://www.robowarp.de/smb/trans/
 
  Best Regards
  Robert Rgner
 

 Hi, all --

 this is a really great initiative. Please keep us informed about your
 progress!

 One little question: are you aware that the *sources* of all English
 Samba documentation are now DocBook/XML? Have you considered to write
 the docu (or maybe convert it at a later stage) into that format?

 I know that DocBook/XML is rather difficult for people who are not used
 to it and it makes them slow down a lot. (I myself haven't written my
 part of the HOWTO Collection in XML. but in HTML and one kind soul did
 convert it for me). However, it makes it more easy to create PDFs and
 other formats from that input.

 Thanks again and Cheers!
 Kurt

  Hallo,
  die erste Datei der Samba Doku wurde ins Deutsche bersetzt
  http://www.robowarp.de/smb/trans/net.8.html
  Vielen Dank dafr an Stefan G. Weichinger
  falls ihr Euch beteiligen wollt mailt an robowarp at gmxdotde
  Ihr knnt den Fortschritt der bersetzung anderer Dateien unter
  http://www.robowarp.de/smb/trans/ einsehen
 
  MfG Robert Rgner
 

 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba Translation Dok to German, first file, deutsche Übersetzung Der Samba Doku erste Datei

2003-11-11 Thread Wolfgang Wagner
 From: Stefan G. Weichinger [mailto:[EMAIL PROTECTED] 
 Subject: Re: [Samba] Samba Translation Dok to German, first 
 file, deutsche Übersetzung Der Samba Doku erste Datei
 
 
 Guten Tag Kurt Pfeifle,
 
 am Dienstag, 11. November 2003 um 00:04 schrieben Sie:

 KP I know that DocBook/XML is rather difficult for people who are not used
 KP to it and it makes them slow down a lot. (I myself haven't written my
 KP part of the HOWTO Collection in XML. but in HTML and one kind soul did
 KP convert it for me). However, it makes it more easy to create PDFs and
 KP other formats from that input.
 
 We talked to John H Terpstra and he told us that he would take the
 part of converting to XML (I hope it still is like that ;-) )
 
 So we can happily use our little crappy html-editors and concentrate
 at translating english-german instead of converting html-xml.

Hello,

why not using OpenOffice.org V 1.1 and exporting in DocBook-format?
So all users can contribute translated text and at the end someone 
can export in DocBook-format.

Mit freundlichen Grüßen


Wolfgang Wagner
--
Systemadministration
Riwa GmbH, Zwingerstraße 1, 87435 Kempten, +49-831-52 29 63-537
eMail:[EMAIL PROTECTED]


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] lock problem on 32 bit mounted nfs with 64 bit lock offsets

2003-11-11 Thread Carsten Springenberg
Hello list,

I've got a problem concerning locking of files with a share on a nfs 
mounted NAS.

samba server is 2.2.8a installed from SuSE-RPMs

the NAS is mounted with following line in fstab:

IP-Number:/vgroup00/data02/data /mnt/nas01nfs 
rsize=8192,wsize=8192,soft  0 0

I tried to save a file from word which lead to a aprox. 1 minute hang of 
my Win2k/SP3. The log of the machine showed following lines:

[2003/11/11 10:20:36, 0] locking/posix.c:posix_fcntl_lock(657)
  posix_fcntl_lock: WARNING: lock request at offset 2147483539, length 
1 returned
[2003/11/11 10:20:36, 0] locking/posix.c:posix_fcntl_lock(658)
  an No locks available error. This can happen when using 64 bit lock 
offsets
[2003/11/11 10:20:36, 0] locking/posix.c:posix_fcntl_lock(659)
  on 32 bit NFS mounted file systems.
[2003/11/11 10:20:36, 0] locking/posix.c:posix_fcntl_lock(657)
  posix_fcntl_lock: WARNING: lock request at offset 2147483539, length 
1 returned
[2003/11/11 10:20:36, 0] locking/posix.c:posix_fcntl_lock(658)
  an No locks available error. This can happen when using 64 bit lock 
offsets
[2003/11/11 10:20:36, 0] locking/posix.c:posix_fcntl_lock(659)
  on 32 bit NFS mounted file systems.
[2003/11/11 10:20:36, 0] locking/posix.c:posix_fcntl_lock(657)
  posix_fcntl_lock: WARNING: lock request at offset 2147483539, length 
1 returned
[2003/11/11 10:20:36, 0] locking/posix.c:posix_fcntl_lock(658)
  an No locks available error. This can happen when using 64 bit lock 
offsets
[2003/11/11 10:20:36, 0] locking/posix.c:posix_fcntl_lock(659)
  on 32 bit NFS mounted file systems.
[2003/11/11 10:21:06, 0] smbd/oplock.c:oplock_break(797)
  oplock_break: receive_smb timed out after 30 seconds.
  oplock_break failed for file Projekte/Ranking 
Internetauftritt/Rankingproblem.doc (dev = a, inode = 1107435404, file_i
d = 12439).
[2003/11/11 10:21:06, 0] smbd/oplock.c:oplock_break(869)
  oplock_break: client failure in oplock break in file Projekte/Ranking 
Internetauftritt/Rankingproblem.doc

What can I do? How can I mount a nfs on 64 bit? Or can I change samba to 
use 32 bit lock offsets on this particular share? Any ideas?

Thanks in advance,

Carsten

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] winbind cannot run correctly

2003-11-11 Thread maorui
I modified /etc/nsswitch.conf, added winbind after passwd  group.
Also modified /etc/samba/smb.conf same as samba HOWTO collection's example.

The command net rpc join -S DOMAIN -U Administrator runned successfully,
and I could see my Linuxbox listed in ADS usercomputer management console.

But when I started winbindd, some error messages appeared in
/var/log/message:

Nov 11 16:39:50 maorui 11 Oct 16:39:50 winbindd[2801]: [2003/11/11 16:39:50,
0] libads/kerberos.c:ads_kinit_password(133)
Nov 11 16:39:50 maorui 11 Oct 16:39:50 winbindd[2801]:
kerberos_kinit_password HOST/[EMAIL PROTECTED] failed: Client not found in
Kerberos database

And I cannot use wbinfo -u  wbinfo -g, always returned: Error looking
up domain users/groups.

What's wrong?



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Translation Dok to German, first file, deutsche Übersetzung Der Samba Doku erste Datei

2003-11-11 Thread Andrew Bartlett
On Tue, 2003-11-11 at 20:32, rruegner wrote:
 Hi, we decide t make translation in html first,
 afterwards convert it to other types later.
 Dont forget its Gnu so anyone can convert it to what ever he wants

Sounds like a auful lot of work, and the end result won't match the
original in formatting, and other important aspects.   There is a lot of
extra information in  the XML that can't be represented in HTML.

Given that you are already working in HTML, is the raw XML really that
much harder to deal with?  That way you can ensure that you really are
just translating the text, and not altering the format, references etc.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Translation samba 3 how to in german, Übersetzung des Samab 3 How to ins deutsch

2003-11-11 Thread Andrew Bartlett
On Mon, 2003-11-10 at 07:59, Jochen Schmidt wrote:
 Hi,
 
 i'm also willing to translate a part the HOWTO.
 
 John: who is the master of the current Samba-HOWTO-Collection 
 and where is the HOWTO held? I havn't found it in the samba-cvs-Tree..

The public CVS tree is 'samba-docs' on pserver.samba.org.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba Translation Dok to German, first file, deutsche Übersetzung Der Samba Doku erste Datei

2003-11-11 Thread rruegner
Hi, as working different people on the translation,and dont earn money about
it
i dont wanna press someone to use any software, the files are gnu so if you
want to convert it
just do it, i will up converted files if this is wanted.
Html seems to me the most simple way to do the job ( which is translation,
not discussing formats )
maybe we will convert the files in hundert of formats after the job is done
Best Regards
- Original Message - 
From: Wolfgang Wagner [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 11, 2003 10:46 AM
Subject: RE: [Samba] Samba Translation Dok to German, first file, deutsche
Übersetzung Der Samba Doku erste Datei


 From: Stefan G. Weichinger [mailto:[EMAIL PROTECTED]
 Subject: Re: [Samba] Samba Translation Dok to German, first
 file, deutsche Übersetzung Der Samba Doku erste Datei


 Guten Tag Kurt Pfeifle,

 am Dienstag, 11. November 2003 um 00:04 schrieben Sie:

 KP I know that DocBook/XML is rather difficult for people who are not
used
 KP to it and it makes them slow down a lot. (I myself haven't written my
 KP part of the HOWTO Collection in XML. but in HTML and one kind soul did
 KP convert it for me). However, it makes it more easy to create PDFs and
 KP other formats from that input.

 We talked to John H Terpstra and he told us that he would take the
 part of converting to XML (I hope it still is like that ;-) )

 So we can happily use our little crappy html-editors and concentrate
 at translating english-german instead of converting html-xml.

Hello,

why not using OpenOffice.org V 1.1 and exporting in DocBook-format?
So all users can contribute translated text and at the end someone
can export in DocBook-format.

Mit freundlichen Grüßen


Wolfgang Wagner
--
Systemadministration
Riwa GmbH, Zwingerstraße 1, 87435 Kempten, +49-831-52 29 63-537
eMail:[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Q: troubleshooting nmbd registration

2003-11-11 Thread J. Nyhuis
Greetings, I am hopeing someone can shed some light on a problem
I an having.

For some reason, nothing seems to be registering in nmbd.  nmbd
can be used to resolve addresses, so it is working, and all shares can be
accessed in the normal fashion, but everything that tries to register
fails.  Any ideas?
Thanks in advance,
John N.


Nov 11 02:25:12 shodan samba: smbd startup succeeded
Nov 11 02:25:12 shodan nmbd[11088]: [2003/11/11 02:25:12, 0]
nmbd/asyncdns.c:start_async_dns(150)
Nov 11 02:25:12 shodan nmbd[11088]:   started asyncdns process 11089
Nov 11 02:25:12 shodan samba: nmbd startup succeeded
Nov 11 02:25:12 shodan nmbd[11088]: [2003/11/11 02:25:12, 0]
nmbd/nmbd_nameregister.c:register_name_response(130)
Nov 11 02:25:12 shodan nmbd[11088]:   register_name_response: server at IP
192.168.13.200 rejected our name registration of SHODAN00 IP
192.168.13.1 with error code 6.
Nov 11 02:25:12 shodan nmbd[11088]: [2003/11/11 02:25:12, 0]
nmbd/nmbd_mynames.c:my_name_register_failed(36)
Nov 11 02:25:12 shodan nmbd[11088]:   my_name_register_failed: Failed to
register my name SHODAN00 on subnet 192.168.13.1.
Nov 11 02:25:12 shodan nmbd[11088]: [2003/11/11 02:25:12, 0]
nmbd/nmbd_namelistdb.c:standard_fail_register(283)
Nov 11 02:25:12 shodan nmbd[11088]:   standard_fail_register: Failed to
register/refresh name SHODAN00 on subnet 192.168.13.1
Nov 11 02:25:12 shodan nmbd[11088]: [2003/11/11 02:25:12, 0]
nmbd/nmbd_nameregister.c:register_name_response(130)
Nov 11 02:25:12 shodan nmbd[11088]:   register_name_response: WINS server
at IP 127.0.0.1 rejected our name registration of SHODAN00 IP
192.168.13.1 with error code 5.
Nov 11 02:25:12 shodan nmbd[11088]: [2003/11/11 02:25:12, 0]
nmbd/nmbd_workgroupdb.c:fail_register(210)
Nov 11 02:25:12 shodan nmbd[11088]:   fail_register: Failed to register
name SHODAN00 on subnet UNICAST_SUBNET.
Nov 11 02:25:12 shodan nmbd[11088]: [2003/11/11 02:25:12, 0]
nmbd/nmbd_namelistdb.c:standard_fail_register(283)
Nov 11 02:25:12 shodan nmbd[11088]:   standard_fail_register: Failed to
register/refresh name SHODAN00 on subnet UNICAST_SUBNET
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbind cannot run correctly

2003-11-11 Thread Andrew Bartlett
On Tue, 2003-11-11 at 20:51, maorui wrote:
 I modified /etc/nsswitch.conf, added winbind after passwd  group.
 Also modified /etc/samba/smb.conf same as samba HOWTO collection's example.
 
 The command net rpc join -S DOMAIN -U Administrator runned successfully,
 and I could see my Linuxbox listed in ADS usercomputer management console.

To use AD properly, you need to join with 'net ads join'.  Now, there
really should not be a difference, but when we use the HOST/... form
there is.  

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba Translation Dok to German, first file, deutsche bersetzung Der Samba Doku erste Datei

2003-11-11 Thread Stefan G. Weichinger
Hi, Andrew Bartlett,

11. November 2003 um 10:58 you wrote:

AB On Tue, 2003-11-11 at 20:32, rruegner wrote:
 Hi, we decide t make translation in html first,
 afterwards convert it to other types later.
 Dont forget its Gnu so anyone can convert it to what ever he wants

AB Sounds like a auful lot of work, and the end result won't match the
AB original in formatting, and other important aspects.   There is a lot of
AB extra information in  the XML that can't be represented in HTML.

AB Given that you are already working in HTML, is the raw XML really that
AB much harder to deal with?  That way you can ensure that you really are
AB just translating the text, and not altering the format, references etc.

I have no problem in doing all this work in XML. Right now I am
editing the files in my web-editor, changing nothing of the meta-infos
that are in. The files on the project page are converted to plain
html right now, but we could also use OpenOffice, as suggested, to
work in another format.

I agree with you that it makes no sense to alter formats without good
reasons.

regards,
Stefan G. Weichinger
mailto:[EMAIL PROTECTED]



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] High Availability with Samba and Heartbeat

2003-11-11 Thread Andrew Bartlett
On Tue, 2003-11-11 at 10:20, Douglas Phillipson wrote:
 Since I get so much from this list I thought I would share a project 
 I've been working on and how it works with samba (3.0.1).  It is Samba 
 related so I hope it's not off topic.
 
 I've set up a HA solution with redundant Samba Domain Controllers 
 throuth the Heartbeat package at:
 
 http://www.ultramonkey.org/download/heartbeat/1.1.3/redhat_9/
 
 I have two Redhat 9 Linux machines (A and B) configured as a HA 
 cluster providing httpd, DNS, and Samba Domain and File services on a 
 virtual IP of 192.168.0.45. Initially one of the machines, (A), is 
 running those services (smb, named and httpd) and listening on the 
 virtual IP, while the other, (B), watches a heartbeat from machine (A) 
 through both a redundant ethernet and serial link. When both heartbeat 
 lines are pulled or the power drops on machine (A), within 10 seconds 
 machine (B) starts the httpd, dns and smbd/nmbd services and listens on 
 the virtual IP.
 
 I have a third machine (C) running Win2000 as a client for those 
 services.  I can even login on the windows box, thus using Samba's 
 Domain Authentication services from machine (A), and while logged on the 
 domain, kill machine (A) and machine (B) takes over and when I log off 
 the windows box my remote profile is saved on  machine (B), no muss no 
 fuss, all transparent to the client machine.  The win2000 client can 
 surf to the web services on the virtual IP and never know that a machine 
 has died.  When machine (A) comes back up it takes back over the 
 services automatically.

Actually, it noticed.  The TCP/IP connection was lost, and so was all
the locks it had on the files on that server.  At the very least,
disable all oplocks on the Samba servers.

How are you keeping the files on the two servers in sync?  How do you
manage password change replication?  (the only method that supports this
properly is pdb_ldap, due to some nasty 'change on BDC' machine password
semantics).  

Clustering CIFS is about more than saving and restoring a roaming
profile and the PDC/BDC stuff really is better dealt with by MS's native
scheme.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba Translation Dok to German, first file, deutsche Übersetzung Der Samba Doku erste Datei

2003-11-11 Thread Andrew Bartlett
On Tue, 2003-11-11 at 21:25, Stefan G. Weichinger wrote:
 Hi, Andrew Bartlett,
 
 11. November 2003 um 10:58 you wrote:
 
 AB On Tue, 2003-11-11 at 20:32, rruegner wrote:
  Hi, we decide t make translation in html first,
  afterwards convert it to other types later.
  Dont forget its Gnu so anyone can convert it to what ever he wants
 
 AB Sounds like a auful lot of work, and the end result won't match the
 AB original in formatting, and other important aspects.   There is a lot of
 AB extra information in  the XML that can't be represented in HTML.
 
 AB Given that you are already working in HTML, is the raw XML really that
 AB much harder to deal with?  That way you can ensure that you really are
 AB just translating the text, and not altering the format, references etc.
 
 I have no problem in doing all this work in XML. Right now I am
 editing the files in my web-editor, changing nothing of the meta-infos
 that are in. The files on the project page are converted to plain
 html right now, but we could also use OpenOffice, as suggested, to
 work in another format.
 
 I agree with you that it makes no sense to alter formats without good
 reasons.

Then the most productive method (IMNSHO) would be to check out the
samba-docs repository, and open an emacs window in side-by-side mode,
Then just move down the page, replacing text in one window and reading
the context in the other.  

That is, it really should be easy not to modify the surrounding tags at
all, therefore ensuring that referencing (particularly chapter numbering
etc) remain perfectly intact.  There will probably be small formatting
changes but these can probably be left to the editors.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE : [Samba] Samba Translation Dok to German, first file, deutsche Übersetzung Der Samba Doku erste Datei + traduction en francais

2003-11-11 Thread Jean-Marc Pouchoulon
I hope we are going to do the same thing in French soon with
university students ( DESS traduction Montpellier I will meet then
tomorrow  )that should be interested by the project. ( I will meet them
tomorrow )
The  chosen format depends on the student that are going to do
the work and theirs teachers.

Cheers,


J'espère que nous allons faire la même chose en français bientôt
avec les étudiants ( DESS traduction de Montpellier que je rencontre
demain) qui devraient être intéressés par le projet.
  Le format choisi dépendra des étudiants et de leurs professeurs.

Cordialement


Jean-Marc Pouchoulon.


-Message d'origine-
De :
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
.org] De la part de Stefan G. Weichinger
Envoyé : mardi 11 novembre 2003 11:25
À : [EMAIL PROTECTED]
Cc : Bäcker; Hendrik; Schmidt, Jochen
Objet : Re: [Samba] Samba Translation Dok to German, first file,
deutsche Übersetzung Der Samba Doku erste Datei

Hi, Andrew Bartlett,

11. November 2003 um 10:58 you wrote:

AB On Tue, 2003-11-11 at 20:32, rruegner wrote:
 Hi, we decide t make translation in html first,
 afterwards convert it to other types later.
 Dont forget its Gnu so anyone can convert it to what ever he wants

AB Sounds like a auful lot of work, and the end result won't match the
AB original in formatting, and other important aspects.   There is a
lot of
AB extra information in  the XML that can't be represented in HTML.

AB Given that you are already working in HTML, is the raw XML really
that
AB much harder to deal with?  That way you can ensure that you really
are
AB just translating the text, and not altering the format, references
etc.

I have no problem in doing all this work in XML. Right now I am
editing the files in my web-editor, changing nothing of the meta-infos
that are in. The files on the project page are converted to plain
html right now, but we could also use OpenOffice, as suggested, to
work in another format.

I agree with you that it makes no sense to alter formats without good
reasons.

regards,
Stefan G. Weichinger
mailto:[EMAIL PROTECTED]



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] LDAP IDMAP not working

2003-11-11 Thread ww m-pubsyssamba
No This is just the section of the SMB.conf which I thought was relavent to the 
LDAP/idmap issue I'm having. My samba server is a member of and AD domain for which 
everything else seems to work ok, ie can logon using kerberos authentication, set 
permissions against domain users/groups etc. My complete smb.conf global sections is 
below,

thanks Andy.



# workgroup = NT-Domain-Name or Workgroup-Name, eg: REDHAT4
   workgroup = TESTLAN

# server string is the equivalent of the NT Description field
   server string = sun29

# Security mode. Defines in which mode Samba will operate. Possible 
# values are share, user, server, domain and ads. Most people will want 
# user level security. See the HOWTO Collection for details.
   security = ads

   encrypt passwords = yes

# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the loopback interface. For more examples of the syntax see
# the smb.conf man page
;   hosts allow = 192.168. 192.168.2. 127.

# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
   load printers = yes

# you may wish to override the location of the printcap file
;   printcap name = /etc/printcap

# on SystemV system setting printcap name to lpstat should allow
# you to automatically obtain a printer list from the SystemV spool
# system
;   printcap name = lpstat

# It should not be necessary to specify the print system type unless
# it is non-standard. Currently supported print systems include:
# bsd, cups, sysv, plp, lprng, aix, hpux, qnx
;   printing = cups

# Uncomment this if you want a guest account, you must add this to /etc/passwd
# otherwise the user nobody is used
  guest account = pcguest

# this tells Samba to use a separate log file for each machine
# that connects
   log file = /usr/local/samba/var/log.%m

# Put a capping on the size of the log files (in Kb).
   max log size = 50

# Use password server option only with security = server
# The argument list may include:
#   password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
# or to auto-locate the domain controller/s
#   password server = *
;   password server = NT-Server-Name

# Use the realm option only with security = ads
# Specifies the Active Directory realm the host is part of
   realm = TESTLAN.BBC.CO.UK

# Backend to store user information in. New installations should 
# use either tdbsam or ldapsam. smbpasswd is available for backwards 
# compatibility. tdbsam requires no further configuration.
   passdb backend = tdbsam

# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting.
# Note: Consider carefully the location in the configuration file of
#   this line.  The included file is read at that point.
;   include = /usr/local/samba/lib/smb.conf.%m

# Most people will find that this option gives better performance.
# See the chapter 'Samba performance issues' in the Samba HOWTO Collection
# and the manual pages for details.
# You may want to add the following on a Linux system:
# SO_RCVBUF=8192 SO_SNDBUF=8192
   socket options = TCP_NODELAY 

# Configure Samba to use multiple interfaces
# If you have multiple network interfaces then you must list them
# here. See the man page for details.
;   interfaces = 192.168.12.2/24 192.168.13.2/24 

# Browser Control Options:
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
;   local master = no

# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
;   os level = 33

# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
;   domain master = yes 

# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
;   preferred master = yes

# Enable this if you want Samba to be a domain logon server for 
# Windows95 workstations. 
;   domain logons = yes

# if you enable domain logons then you may want a per-machine or
# per user logon script
# run a specific logon batch file per workstation (machine)
;   logon script = %m.bat
# run a specific logon batch file per username
;   logon script = %U.bat

# Where to store roving profiles (only for Win95 and WinNT)
#%L substitutes for this servers netbios name, %U is username
#You must uncomment the [Profiles] share below
;   logon path = \\%L\Profiles\%U

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
;   

[Samba] group and user access problem [any versions]

2003-11-11 Thread sannerud
Hello folks

I have tried 2.2.3, 3.0.0 and 2.2.8. Everyone with the same resoult.

The users are defined in different groups. Admin, common, ab, program and
aps.

When I first setup everything, it all worked fine. Everybody had access to
common and program disks, some had admin disk, others had ab disk and only
one had aps disk.

Then suddenly one day everyone had access to everything. Why?

Here is what I have tried so far:

- Delete all users from Linux and samba, and remake them
- upgrade to version 2.2.8
- upgrade to version 3.0.0
- removing any hint of samba and reinnstall it completly
- do chown and chmod on the shares
- new kernel (2.4.18) - (2.4.20)

The really wierd thing is that if I try to logon to the server, on the
console, with a user other than root then the access thing work. The user
don't get access to shares that the user should not get access to. And if
I then try to logon from a client then the same user get access to all
shares.

I have probably looked to much on this thing to actually see what the
problem really is.

Does anybody have a clue on what this could be?

Regards
Erlend (who is banging his head into the wall right now)


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] my samba3+ldap+SSO plan

2003-11-11 Thread tbsky
hi:
   our company want to use samba3+openldap with singal sign on.
   we have several branches.people would travel arround head
   quarter and branches with their notebooks. so we don't have
   roaming users, but we do have roaming computers.
   we want to use a single domain for every site, and we want
   every site keep working even when wan link is broken.

   my plan below:

   1. place one samba server and one ldap server at HQ and each site.
   2. make every site to be a full working PDC, so every samba is
  wins server and authenticate user via local ldap server.
   3. at night, sync ldap entries from each brach to HQ,
 then sync HQ ldap entries to every branch. (is this possible??)

   although samba3 has PDC/BDC architechture, but it seems need a central
wins server. and we don't need a browse list cross sites.
   in fact, we just want singal sign on for every site when people travel
arround with their notebooks.
   my concern is about machine account.i know client machine and server
keep a shared seceret. but i don't know if this seceret will
   changing over time? or the seceret will keep staic?

   and although openldap has replication feature, but multi-master
   replication seems experimental and hard to maintain.
   we don't need real time replication. are there existing tools for
   syncing entries between two ldap servers?

   if there are better solution or if my plan is totally wrong,
please tell me. thanks for any advice !!!

Best Regards,
tbsky

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] CIFS patch for 2.4.22

2003-11-11 Thread Peppe Bergqvist
Is there a patch for CIFS for 2.4.22 somewhere out there?
Cause the patch on samba.org doesn't work with 2.4.22 (at least not for me) 
but it works fine with 2.4.21.

Peppe Bergqvist

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


AW: [Samba] my samba3+ldap+SSO plan

2003-11-11 Thread SEFEROVIC Edvin
Well, your plan is interesting, but as you already recognized - multimaster
LDAP servers are really hard to maintain and synchronize. Just think of
consistency of your data? Of course, that would work only if you really know
what attributes ( data ) you want to synchronize. But on the otherhand, you
could access your HQ LDAP server only when you need data of other branches,
and synchronize branches to one master server.

That is only a though, not a solution :)

Bye
SEFEROVIC Edvin 

-Ursprüngliche Nachricht-
Von: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Im Auftrag
von [EMAIL PROTECTED]
Gesendet: Dienstag, 11. November 2003 12:10
An: [EMAIL PROTECTED]
Betreff: [Samba] my samba3+ldap+SSO plan

hi:
   our company want to use samba3+openldap with singal sign on.
   we have several branches.people would travel arround head
   quarter and branches with their notebooks. so we don't have
   roaming users, but we do have roaming computers.
   we want to use a single domain for every site, and we want
   every site keep working even when wan link is broken.

   my plan below:

   1. place one samba server and one ldap server at HQ and each site.
   2. make every site to be a full working PDC, so every samba is
  wins server and authenticate user via local ldap server.
   3. at night, sync ldap entries from each brach to HQ,
 then sync HQ ldap entries to every branch. (is this possible??)

   although samba3 has PDC/BDC architechture, but it seems need a central
wins server. and we don't need a browse list cross sites.
   in fact, we just want singal sign on for every site when people travel
arround with their notebooks.
   my concern is about machine account.i know client machine and server
keep a shared seceret. but i don't know if this seceret will
   changing over time? or the seceret will keep staic?

   and although openldap has replication feature, but multi-master
   replication seems experimental and hard to maintain.
   we don't need real time replication. are there existing tools for
   syncing entries between two ldap servers?

   if there are better solution or if my plan is totally wrong,
please tell me. thanks for any advice !!!

Best Regards,
tbsky

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.0 - LDAP Authetication trouble

2003-11-11 Thread Bart Bekker


For quite some time I am trying to get samba 3.0.0 woring with an LDAP
backend.
The latest problem I have is that user authenticaltion doe not work. The
passwords are right, added them with the ldaptools from the samba
source, I can browse the ldap server, samba aslo can successfully search
(see logfile level 10 below), but just no successfull password
verification. 
I aslo attached my smb.conf, there is (I know..) probably some incorrect
stuff in there, but asfik not related to authentication.
I hope somebody can point a finger in the right direction..

 Bart.


log.smbd

[2003/11/11 14:17:42, 5] auth/auth_util.c:make_user_info_map(216)
  make_user_info_map: Mapping user [TRECO]\[BART] from workstation [x]
[2003/11/11 14:17:42, 5] auth/auth_util.c:make_user_info(132)
  attempting to make a user_info for BART (BART)
[2003/11/11 14:17:42, 5] auth/auth_util.c:make_user_info(142)
  making strings for BART's user_info struct
[2003/11/11 14:17:42, 5] auth/auth_util.c:make_user_info(184)
  making blobs for BART's user_info struct
[2003/11/11 14:17:42, 10] auth/auth_util.c:make_user_info(193)
  made an encrypted user_info for BART (BART)
[2003/11/11 14:17:42, 3] auth/auth.c:check_ntlm_password(216)
  check_ntlm_password:  Checking password for unmapped user
[EMAIL PROTECTED] with the new password interface
[2003/11/11 14:17:42, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  mapped user is: [EMAIL PROTECTED]
[2003/11/11 14:17:42, 10] auth/auth.c:check_ntlm_password(228)
  check_ntlm_password: auth_context challenge created by random
[2003/11/11 14:17:42, 10] auth/auth.c:check_ntlm_password(230)
  challenge is:
[2003/11/11 14:17:42, 5] lib/util.c:dump_data(1825)
  [000] 3A 67 CA 97 F1 72 94 2A   :gÊ.ñr.*
[2003/11/11 14:17:42, 10] auth/auth.c:check_ntlm_password(256)
  check_ntlm_password: guest had nothing to say
[2003/11/11 14:17:42, 8] lib/util.c:is_myname(1677)
  is_myname(LINUX) returns 1
[2003/11/11 14:17:42, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2003/11/11 14:17:42, 3] smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2003/11/11 14:17:42, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/11/11 14:17:42, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2003/11/11 14:17:42, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2003/11/11 14:17:42, 2] lib/smbldap.c:smbldap_search_suffix(1066)
  smbldap_search_suffix: searching
for:[(((uid=BART)(objectclass=sambaSamAccount))(objectclass=sambaSamAccount))]
[2003/11/11 14:17:42, 2] passdb/pdb_ldap.c:init_sam_from_ldap(460)
  init_sam_from_ldap: Entry found for user: bart
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_username(585)
  pdb_set_username: setting username bart, was
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 11 - now SET
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_domain(612)
  pdb_set_domain: setting domain LINUX, was
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_nt_username(639)
  pdb_set_nt_username: setting nt username bart, was
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 14 - now SET
[2003/11/11 14:17:42, 10]
passdb/pdb_get_set.c:pdb_set_user_sid_from_string(525)
  pdb_set_user_sid_from_string: setting user sid
S-1-5-21-66398397-639006455-1170665433-3000
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_user_sid(512)
  pdb_set_user_sid: setting user sid
S-1-5-21-66398397-639006455-1170665433-3000
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 17 - now SET
[2003/11/11 14:17:42, 10]
passdb/pdb_get_set.c:pdb_set_group_sid_from_string(560)
  pdb_set_group_sid_from_string: setting group sid
S-1-5-21-66398397-639006455-1170665433-2027
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_group_sid(548)
  pdb_set_group_sid: setting group sid
S-1-5-21-66398397-639006455-1170665433-2027
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 18 - now SET
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 20 - now SET
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 5 - now SET
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 6 - now SET
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 7 - now SET
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 8 - now SET
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 9 - now SET
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_fullname(666)
  pdb_set_full_name: setting full name System User, was
[2003/11/11 14:17:42, 10] passdb/pdb_get_set.c:pdb_set_init_flags(485)
  element 12 - now SET
[2003/11/11 14:17:42, 10] 

Re: [Samba] Samba 3.0.0 - LDAP Authetication trouble

2003-11-11 Thread Andrew Bartlett
On Tue, 2003-11-11 at 23:42, Bart Bekker wrote:
 For quite some time I am trying to get samba 3.0.0 woring with an LDAP
 backend.
 The latest problem I have is that user authenticaltion doe not work. The
 passwords are right, added them with the ldaptools from the samba
 source,

Add them with smbpasswd.  The passwords in LDAP is simply not the
password that the user is sending.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] my samba3+ldap+SSO plan

2003-11-11 Thread Andrew Bartlett
On Tue, 2003-11-11 at 22:10, [EMAIL PROTECTED] wrote:
 hi:
our company want to use samba3+openldap with singal sign on.
we have several branches.people would travel arround head
quarter and branches with their notebooks. so we don't have
roaming users, but we do have roaming computers.
we want to use a single domain for every site, and we want
every site keep working even when wan link is broken.

my plan below:
 
1. place one samba server and one ldap server at HQ and each site.
2. make every site to be a full working PDC, so every samba is
   wins server and authenticate user via local ldap server.
3. at night, sync ldap entries from each brach to HQ,
  then sync HQ ldap entries to every branch. (is this possible??)
 
although samba3 has PDC/BDC architechture, but it seems need a central
 wins server. and we don't need a browse list cross sites.

No, this is not a requirement, as each site's 'PDC' can operate with
reference to the central LDAP infrastructure, without netbios.

in fact, we just want singal sign on for every site when people travel
 arround with their notebooks.
my concern is about machine account.i know client machine and server
 keep a shared seceret. but i don't know if this seceret will
changing over time? or the seceret will keep staic?

It changes over time, and the client will not contact the PDC to make
that change.  It will ask the local DC it is connected to.

and although openldap has replication feature, but multi-master
replication seems experimental and hard to maintain.
we don't need real time replication. are there existing tools for
syncing entries between two ldap servers?

You really should have one master LDAP server, and slaves for all the
remote sites.  These slaves will only need to contact the master on
machine account change, adding machines etc.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Cannot enable browsing, chdir to /tmp denied...

2003-11-11 Thread Marcus Widerberg / EMF Textile
Hello,

 

Samba refuses to be browseable. I started out wanting to configure it as a
PDC, just as I have done previously with samba 2.2.8 (and openldap).

 

smbclient -L localhost -U% gives Error returning browse list:
NT_STATUS_NETWORK_ACCESS_DENIED.

 

Using debian 3.0r1, samba 3.0.0, openldap with nsswitch, etc. 

 

I am a newbie at looking at the logs, I see the access denied to the /tmp
dir recurring.

 

Any clues GREATLY appreciated. I never had any such problem with samba 2.2.x
- am completely stuck! If I cant fix it I will have to go with a windows
PDC... 

 

/mawi

 

Log:

[2003/11/11 20:07:55, 3] smbd/service.c:make_connection_snum(698)

  fw (127.0.0.1) connect to service IPC$ initially as user nobody
(uid=65534, gid=65534) (pid 15287)

[2003/11/11 20:07:55, 3] smbd/sec_ctx.c:set_sec_ctx(288)

  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0

[2003/11/11 20:07:55, 3] smbd/reply.c:reply_tcon_and_X(314)

  tconX service=IPC$

[2003/11/11 20:07:55, 3] smbd/process.c:process_smb(890)

  Transaction 4 of length 130

[2003/11/11 20:07:55, 3] smbd/process.c:switch_message(685)

  switch message SMBtrans (pid 15287)

[2003/11/11 20:07:55, 3] smbd/sec_ctx.c:set_sec_ctx(288)

  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0

[2003/11/11 20:07:55, 0] smbd/service.c:set_current_service(56)

  chdir (/tmp) failed

[2003/11/11 20:07:55, 3] smbd/error.c:error_packet(94)

  error string = Permission denied

[2003/11/11 20:07:55, 3] smbd/error.c:error_packet(113)

  error packet at smbd/process.c(758) cmd=37 (SMBtrans)
NT_STATUS_NETWORK_ACCESS_DENIED

 

smb.conf:

[global]

security = SHARE

passdb backend = smbpasswd, guest

log level = 3

local master = No

 

[share]

path = /var/share

read only = No

guest ok = Yes

 

 

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.0 - LDAP Authetication trouble

2003-11-11 Thread Bart Bekker
Thanks, problem solved.
But I am still confused. Why are those password tools delivered with 
Samba, if they are not useful.. I saw in the LDAP that smbpasswd uses a 
SMD5 encryption for the password; the smbldap-passwd tools adds them 
using SSHA. No wonder it did not work.

Thanks again.

Bart.

Andrew Bartlett wrote:

On Tue, 2003-11-11 at 23:42, Bart Bekker wrote:
 

For quite some time I am trying to get samba 3.0.0 woring with an LDAP
backend.
The latest problem I have is that user authenticaltion doe not work. The
passwords are right, added them with the ldaptools from the samba
source,
   

Add them with smbpasswd.  The passwords in LDAP is simply not the
password that the user is sending.
Andrew Bartlett

 



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba + LDAP - PDC (i.e. workgroup)

2003-11-11 Thread peter pan
 
  There's lots of howtos and mailling list posts
 about
  creating a PDC with samba and LDAP.  What I want
 to do
  is to continue with workgroup operation (at least
  until all our clients are NT).
 
 A domain is really only of relevance to machines
 that have joined the
 domain. For machines that aren't domain members, it
 looks like a
 workgroup with passwords sync'ed between servers
 that are domain members.
 

So even though I'm achieving the password sync with an
LDAP directory, and all clients are workgroup mode - a
domain would still be suitable and could be properly
utilised as a domain in the future...

   All I essentially want
  to do is to move the smbpasswd file on our 30 or
 so
  servers to LDAP (after sorting out nss and PAM). 
 Can
  I do this?
 
 Yes. But best by turning some of your servers into
 domain controllers,
 but this largely has no effect on clients (unless
 you join them to the
 domain).
 

Does utilising up a PDC and BDC's cause network
traffic?  e.g. when a user logs on to their local
server (which I assume would be a member server) does
the member server need to check with the PDC for
authentication?  (Or would all remote offices need a
BDC)?

 
  Also we have a replicated LDAP directory provided
 by
  our openldap servers - one master updating 29
 slaves.
  The slaves (running samba) our not allowed to
 update
  the master server.  Is this is a problem for
  samba/LDAP operation?
 
 Not necessarily.
 

I asked this because I thought samba in some modes
needed to update the LDAP directory upon user login
(last login attributes etc).  

  Obviously account and password
  changes need to be done on the master server but
 this
  is desirable for us.  I think the PDC + LDAP
 solution
  means that the LDAP directory is written to by
 samba
  upon each user login
 
 I don't think this is true, why would this be
 necessary?
 

See above.  I plan to use a custom cgi script to
perform samba user additions and password changes. 
Presumably if this was implemented samba wouldn't ever
need to write to the directory - and would only need
an LDAP acl to view the appropriate password
attributes.

  - this wouldn't be desirable for
  us as 30 servers on slow WAN links would be
 updated
  every user login.  The local smbpasswd file
 doesn't
  seem to be updated at the moment when someone logs
 in
  - so I'm assuming a workgroup + LDAP solution
 wouldn't
  be a problem for us in this regard.
 
 Neither would an LDAP+domain.
 

IF there's no extra traffic generated as a result of
PDC's/BDC's/member servers over standalone workgroup
servers (for lack of a better term) using LDAP then we
would be able to do this.

  Also - is there any way to use a custom schema or
  perform schema mapping?
 
 
 Could you be more specific?
 

We already have an LDAP directory which uses custom
schema (i.e. no posixaccount etc).  I'd like the
option to make samba uses different attributes and
objects (I'm assuming this would be a source code
change - and I think I've found the two files).

  I'm using samba 2.2.8a on the 29 slave servers - I
  prefer not to update to samba 3 if it's not
 required.
 
 It may be better to migrate to samba3. With
 samba-2.2.8a you need to
 install a different binary for LDAP support, whereas
 samba3 can be
 configured at run-time. Plus, when you do evetually
 join machines to the
 domain, you will have domain groups available.
 
 Migrating from samba-2.2.x+ldap to samba3+ldap is
 probably more
 challenging than migrating from samba-2.2.x to
 samba3+ldap, and
 migrating from samba-2.2.x to samba-2.2.x+ldap is
 probably about the
 same, so overall you win by going straight to samba3
 (if you do your
 homework).
 
 You can see what it would take to go from
 samba-2.2.x to
 samba-2.2.x+ldap at http://mandrakesecure.net

Fair enough.  I've built the samba 3 binary with
--ldapsam (Which I think means use the old schema). 
Some initial testing seems OK in this area (with the
workgroup model).

One quick question - I've deja'd (I still call it
that) for a solution to  specifiy more than one LDAP
server for fault tolerance.  There were some patches
for older samba's - not sure if this has now been
resolved?

Cheers for the help Buchan

Pete.

__
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard
http://antispam.yahoo.com/whatsnewfree
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Translation Dok to German, first file, deutsche Übersetzung Der Samba Doku erste Datei + traduction en francais

2003-11-11 Thread rruegner
Good Work
Best Regards
- Original Message - 
From: Jean-Marc Pouchoulon [EMAIL PROTECTED]
To: 'Stefan G. Weichinger' [EMAIL PROTECTED]; [EMAIL PROTECTED]
Cc: 'Hendrik' [EMAIL PROTECTED]; [EMAIL PROTECTED]; 'Jacky Martin'
[EMAIL PROTECTED]; 'Schmidt, Jochen' [EMAIL PROTECTED]
Sent: Tuesday, November 11, 2003 11:46 AM
Subject: RE : [Samba] Samba Translation Dok to German, first file, deutsche
Übersetzung Der Samba Doku erste Datei + traduction en francais


I hope we are going to do the same thing in French soon with
university students ( DESS traduction Montpellier I will meet then
tomorrow  )that should be interested by the project. ( I will meet them
tomorrow )
The  chosen format depends on the student that are going to do
the work and theirs teachers.

Cheers,


J'espère que nous allons faire la même chose en français bientôt
avec les étudiants ( DESS traduction de Montpellier que je rencontre
demain) qui devraient être intéressés par le projet.
  Le format choisi dépendra des étudiants et de leurs professeurs.

Cordialement


Jean-Marc Pouchoulon.


-Message d'origine-
De :
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
.org] De la part de Stefan G. Weichinger
Envoyé : mardi 11 novembre 2003 11:25
À : [EMAIL PROTECTED]
Cc : Bäcker; Hendrik; Schmidt, Jochen
Objet : Re: [Samba] Samba Translation Dok to German, first file,
deutsche Übersetzung Der Samba Doku erste Datei

Hi, Andrew Bartlett,

11. November 2003 um 10:58 you wrote:

AB On Tue, 2003-11-11 at 20:32, rruegner wrote:
 Hi, we decide t make translation in html first,
 afterwards convert it to other types later.
 Dont forget its Gnu so anyone can convert it to what ever he wants

AB Sounds like a auful lot of work, and the end result won't match the
AB original in formatting, and other important aspects.   There is a
lot of
AB extra information in  the XML that can't be represented in HTML.

AB Given that you are already working in HTML, is the raw XML really
that
AB much harder to deal with?  That way you can ensure that you really
are
AB just translating the text, and not altering the format, references
etc.

I have no problem in doing all this work in XML. Right now I am
editing the files in my web-editor, changing nothing of the meta-infos
that are in. The files on the project page are converted to plain
html right now, but we could also use OpenOffice, as suggested, to
work in another format.

I agree with you that it makes no sense to alter formats without good
reasons.

regards,
Stefan G. Weichinger
mailto:[EMAIL PROTECTED]



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] ntlm_auth and squid authentication problems

2003-11-11 Thread Lombardo Federico
Hi all,

I've a little problem using ntlm_auth with squid.

Scenario: Redhat 9, Samba 3 compiled, squid-2.5 compiled.

smb.conf:

[global]
encrypt passwords = Yes
winbind separator = \
winbind cache time = 10
template homedir = /home/%D/%U
template shell = /bin/bash
idmap uid = 1-2
idmap gid = 1-2
winbind uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
workgroup = GRANDI_STAZIONI
server string = venere
netbios name = venere
security = ads
log file = /var/log/samba/log.%m
max log size = 50
password server = MASTER BDC
realm = GSTAZIONI.IT
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
wins server = 192.168.5.1 192.168.0.1
wins proxy = yes
dns proxy = yes




Samba is correctly configured into the domain.

Now I take a simple user... called user with password password ... what
a fantasy, I'm smart ah!? :-)
So, go on. I try to authenticate it with wbinfo:

[EMAIL PROTECTED] root]# wbinfo -a user%password
plaintext password authentication succeeded
challenge/response password authentication succeeded

So go on, and try to authenticate it with ntlm_auth:

[EMAIL PROTECTED] root]#
/usr/squid/libexec/ntlm_auth --username=user --nt-response
password:
NT_STATUS_OK: Success (0x0)


then, configure my squid to work with ntlm_auth, so squid.conf will be:

auth_param ntlm program
/usr/squid/libexec/ntlm_auth --debug-level=10 --helper-protocol=squid-2.5-nt
lmssp --nt-response
auth_param ntlm children 40
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes

auth_param basic program
/usr/squid/libexec/ntlm_auth --debug-level=10 --helper-protocol=squid-2.5-ba
sic --nt-response
auth_param basic children 40
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours

Ok ? that's ok.

then I open my IE6, latest patchlevel, tried on win2k, win2003 and XP, and
when I ask a site I receive this in squid's cache.log:

[2003/11/11 14:52:02, 10] utils/ntlm_auth.c:manage_squid_request(1061)
  Got 'KK
TlRMTVNTUAADGAAYAGIYABgAeg8ADwBIBAAEAFcHAAcAWwCS
BgIAIgUCzg4PR1JBTkRJX1NUQVpJT05JVVNFUkNFUkJFUk8Sh8IeDiFr+fN1aPqFbYp8
HMPZCVVtWHOK6pqb0wMyFKr+LB7KIDwbIIJzdVWIUS8=' from squid (length: 199).
[2003/11/11 14:52:02, 10]
utils/ntlm_auth.c:manage_squid_ntlmssp_request(312)
  got NTLMSSP packet:
[2003/11/11 14:52:02, 10] lib/util.c:dump_data(1825)
  [000] 4E 54 4C 4D 53 53 50 00  03 00 00 00 18 00 18 00  NTLMSSP. 
  [010] 62 00 00 00 18 00 18 00  7A 00 00 00 0F 00 0F 00  b... z...
  [020] 48 00 00 00 04 00 04 00  57 00 00 00 07 00 07 00  H... W...
  [030] 5B 00 00 00 00 00 00 00  92 00 00 00 06 02 00 22  [... ...
  [040] 05 02 CE 0E 00 00 00 0F  47 52 41 4E 44 49 5F 53   GRANDI_S
  [050] 54 41 5A 49 4F 4E 49 55  53 45 52 43 45 52 42 45  TAZIONIU SERCERBE
  [060] 52 4F 12 87 C2 1E 0E 21  6B F9 F3 75 68 FA 85 6D  RO.! k..uh..m
  [070] 8A 7C 1C C3 D9 09 55 6D  58 73 8A EA 9A 9B D3 03  .|Um Xs..
  [080] 32 14 AA FE 2C 1E CA 20  3C 1B 20 82 73 75 55 88  2...,..  . .suU.
  [090] 51 2F 00  Q/.
[2003/11/11 14:52:02, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(286)
  Got user=[USER] domain=[GRANDI_STAZIONI] workstation=[CERBERO] len1=24
len2=24
[2003/11/11 14:52:02, 10]
utils/ntlm_auth.c:manage_squid_ntlmssp_request(325)
  NTLMSSP NT_STATUS_ACCESS_DENIED
[2003/11/11 14:52:03, 10] utils/ntlm_auth.c:manage_squid_request(1061)
  Got 'YR' from squid (length: 2).
[2003/11/11 14:52:03, 10]
utils/ntlm_auth.c:manage_squid_ntlmssp_request(312)
  got NTLMSSP packet:
[2003/11/11 14:52:03, 10]
utils/ntlm_auth.c:manage_squid_ntlmssp_request(322)
  NTLMSSP challenge
[2003/11/11 14:52:03, 10] utils/ntlm_auth.c:manage_squid_request(1061)
  Got 'KK
TlRMTVNTUAADGAAYAGIYABgAeg8ADwBIBAAEAFcHAAcAWwCS
BgIAIgUCzg4PR1JBTkRJX1NUQVpJT05JVVNFUkNFUkJFUk8eZ4Km4Gp0NNEiDnO2ko2P
YaSAVmt1WAEOjvUdTWSakqTyJWkliZaHhljnTdE165I=' from squid (length: 199).
[2003/11/11 14:52:03, 10]
utils/ntlm_auth.c:manage_squid_ntlmssp_request(312)
  got NTLMSSP packet:
[2003/11/11 14:52:03, 10] lib/util.c:dump_data(1825)
  [000] 4E 54 4C 4D 53 53 50 00  03 00 00 00 18 00 18 00  NTLMSSP. 
  [010] 62 00 00 00 18 00 18 00  7A 00 00 00 0F 00 0F 00  b... z...
  [020] 48 00 00 00 04 00 04 00  57 00 00 00 07 00 07 00  H... W...
  [030] 5B 00 00 00 00 00 00 00  92 00 00 00 06 02 00 22  [... ...
  [040] 05 02 CE 0E 00 00 00 0F  47 52 41 4E 44 49 5F 53   GRANDI_S
  [050] 54 41 5A 49 4F 4E 49 55  53 45 52 43 45 52 42 45  TAZIONIU SERCERBE
  [060] 52 4F 1E 67 82 A6 E0 6A  74 34 D1 22 0E 73 B6 92  RO.g...j t4..s..
  [070] 8D 8F 61 A4 80 56 6B 75  58 01 0E 8E F5 1D 4D 64  ..a..Vku X.Md
  [080] 9A 92 A4 F2 25 69 25 89  96 87 86 58 E7 4D D1 35  %i%. ...X.M.5
  [090] EB 92 00  ...
[2003/11/11 14:52:03, 3] 

Re: [Samba] Test Samba 3.0.1pre2 smb panic xp client

2003-11-11 Thread Giulio Orsero
On Mon, 10 Nov 2003 19:26:11 +, Jeremy Allison [EMAIL PROTECTED] wrote:

On Mon, Nov 10, 2003 at 02:55:08PM +0100, jean-marc pouchoulon wrote:
 Hi ,
 I've just tried Samba 3.0.1pre2 on redhat 9 with xpclient.
 I can connect ( very slow ) but I have :
 [2003/11/10 14:37:51, 0] lib/util.c:smb_panic(1400)
   PANIC: init_unistr2_from_datablob: malloc fail

Can you reproduce this ? Can you log a bug with a stack
backtrace (with the smbd compiled with -g) so we  can
see why the crash is occurring ?

I get same errors on Red Hat 7.3, I cannot easily use -g.
[ I don't use yp at all ]
This didn't happen with pre1.
I don't know what the client is.

[2003/11/09 14:27:58, 0] lib/util.c:smb_panic(1422)
  PANIC: init_unistr2_from_datablob: malloc fail
 
[2003/11/09 14:27:58, 0] lib/util.c:smb_panic(1429)
  BACKTRACE: 20 stack frames:
   #0 smbd(smb_panic+0x14e) [0x818348e]
   #1 smbd(init_sam_user_info21A+0x544) [0x813e1d4]
   #2 smbd [0x81148a2]
   #3 smbd(_samr_query_userinfo+0x292) [0x8114b62]
   #4 smbd [0x810d97c]
   #5 smbd(api_rpcTNP+0x213) [0x8124073]
   #6 smbd(api_pipe_request+0xcf) [0x8123dcf]
   #7 smbd [0x811e238]
   #8 smbd [0x811e41f]
   #9 smbd [0x811e899]
   #10 smbd(write_to_pipe+0xe4) [0x811e814]
   #11 smbd [0x8083bf1]
   #12 smbd(reply_trans+0x975) [0x8084855]
   #13 smbd [0x80b8519]
   #14 smbd [0x80b85be]
   #15 smbd(process_smb+0x1a7) [0x80b88c7]
   #16 smbd(smbd_process+0x151) [0x80b9291]
   #17 smbd(main+0x6c3) [0x81d2f03]
   #18 /lib/libc.so.6(__libc_start_main+0x90) [0x401aa1c4]
   #19 smbd(yp_get_default_domain+0x69) [0x80721d1]



[2003/11/10 09:49:11, 0] lib/util.c:smb_panic(1422)
  PANIC: init_unistr2_from_datablob: malloc fail
 
[2003/11/10 09:49:11, 0] lib/util.c:smb_panic(1429)
  BACKTRACE: 20 stack frames:
   #0 smbd(smb_panic+0x14e) [0x818348e]
   #1 smbd(init_sam_user_info21A+0x544) [0x813e1d4]
   #2 smbd [0x81148a2]
   #3 smbd(_samr_query_userinfo+0x292) [0x8114b62]
   #4 smbd [0x810d97c]
   #5 smbd(api_rpcTNP+0x213) [0x8124073]
   #6 smbd(api_pipe_request+0xcf) [0x8123dcf]
   #7 smbd [0x811e238]
   #8 smbd [0x811e41f]
   #9 smbd [0x811e899]
   #10 smbd(write_to_pipe+0xe4) [0x811e814]
   #11 smbd [0x8083bf1]
   #12 smbd(reply_trans+0x975) [0x8084855]
   #13 smbd [0x80b8519]
   #14 smbd [0x80b85be]
  #15 smbd(process_smb+0x1a7) [0x80b88c7]
   #16 smbd(smbd_process+0x151) [0x80b9291]
   #17 smbd(main+0x6c3) [0x81d2f03]
   #18 /lib/libc.so.6(__libc_start_main+0x90) [0x401aa1c4]
   #19 smbd(yp_get_default_domain+0x69) [0x80721d1]

-- 
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Translation Dok to German, first file, deutsche bersetzung Der Samba Doku erste Datei

2003-11-11 Thread Stefan G. Weichinger
Hi, Andrew,

11. November 2003 11:39 you wrote:

AB Then the most productive method (IMNSHO) would be to check out the
AB samba-docs repository, and open an emacs window in side-by-side mode,
AB Then just move down the page, replacing text in one window and reading
AB the context in the other.  

AB That is, it really should be easy not to modify the surrounding tags at
AB all, therefore ensuring that referencing (particularly chapter numbering
AB etc) remain perfectly intact.  There will probably be small formatting
AB changes but these can probably be left to the editors.

I have no XML-experience but I think if we don´t want to change tags
and referencing, we don´t have to know that much about it.

So my questions:

- If I edit the pages in OpenOffice (as is discussed right now because
of its availability and interface, not everyone likes emacs, but that
definitely is another topic), can I use the DocBook XML filters to
generate usable XML?

- Would you recommend to just add a samba-german-docs-tree to the
Samba-CVS and let the participating people access that subtree with
rw-rights? I think this would simplify the whole process, right now we
are discussing how and where to host that project.

I don´t know if this is possible, but I think, it would keep things
together and people like you or John H Terpstra could have an eye on
it to keep us from making the mistakes you want us to avoid.

I am sure we will find a good solution to those starting problems.

thank you all
Stefan G. Weichinger
mailto:[EMAIL PROTECTED]



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] RE: winbindd panic daemon dies

2003-11-11 Thread ww m-pubsyssamba
Hi, 

I haven't been able to work out how to capture the backtrace, I've installed 
winbind with debug compiled and also gdbm. I get the output shown below, what do I 
need to do next?

thanks Andy.

sun35#./winbindd -iY
winbindd version 3.0.0 started.
Copyright The Samba Team 2000-2003
Added domain WORLDWIDE WORLDWIDE.BBC.CO.UK 
krb5_cc_get_principal failed (No credentials cache found)
scanning trusted domain list
Added domain CORE core.co.uk S-1-5-21-1645522239-1647877149-1801674531
Added domain LONDONWW  S-1-5-21-450833596-1891573605-709122288
Added domain WWMAILRES  S-1-5-21-770521979-862410884-1228766249
Added domain UKWBS  S-1-5-21-710036845-1494902100-9522986
Added domain DSD-PILOT dsd-pilot.core.co.uk S-0-0
Added domain HQ hq.core.bbc.co.uk S-0-0
Added domain INTERNATIONAL international.core.co.uk S-0-0
===
INTERNAL ERROR: Signal 10 in pid 2348 (3.0.0)
Please read the appendix Bugs of the Samba HOWTO collection
===
smb_panic(): calling panic action [/bin/sleep 9]

-Original Message-
From: Andrew Bartlett [mailto:[EMAIL PROTECTED]
Sent: 10 November 2003 21:32
To: ww m-pubsyssamba
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] RE: winbindd panic daemon dies


On Tue, 2003-11-11 at 04:58, ww m-pubsyssamba wrote:
 also getting the error below, can anyone tell me what winbindd 
 is using for resolving the network address of the kerberos 
 server? It is resolveable by DNS and the server is up,
 
 [2003/11/10 17:52:36, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276)
   krb5_get_credentials failed for [EMAIL PROTECTED] (Cannot resolve network address 
 for KDC in requested realm)

It is DNS, per the standard kerberos way of doing things.  That often
doesn't quite work right, and so you can define up the [realms] section
of your krb5.conf to give the krb5 libs a better idea.

(Even if that fixes it, we still really want to see the backtrace).

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net

BBCi at http://www.bbc.co.uk/

This e-mail (and any attachments) is confidential and may contain personal views which 
are not the views of the BBC unless specifically
stated.
If you have received it in error, please delete it from your system. Do not use, copy 
or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the BBC monitors 
e-mails sent or received.
Further communication will signify your consent to this.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] 3.0.0 problem: smbd and nmbd only works with lo

2003-11-11 Thread templem
RedHat 9.0, kernel 2.4.20-8bigmem
I can't get Samba 3.0.0 to talk to anything except lo.

./configure --prefix=/usr/share --exec-prefix=/usr --silent
--with-logfilebase=/var/log/samba --with-privatedir=/etc/samba/private
--with-configdir=/etc/samba --with-lockdir=/var/lock/subsys/samba
--enable-cups --with-acl-support --with-winbind --with-pam_smbpass
--with-ldapsam --with-localstatedir=/var/lock/subsys/samba

#ps ax|egrep mbd:
 1807 ?S  0:00 smbd -D
 1811 ?S  0:00 nmbd -D


# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source   destination

Chain FORWARD (policy ACCEPT)
target prot opt source   destination

Chain OUTPUT (policy ACCEPT)
target prot opt source   destination

//---
# tcpdump -i eth0 port 139
tcpdump: listening on eth0
// there are many smb systems on our network nmblookup only sees lo.
# findsmb

IP ADDR NETBIOS NAME   WORKGROUP/OS/VERSION
-
10.2.1.3RHO   *[ABCR  ]

// no output with tcpdump -i eth0 port 139, but here is what I get with:
tcpdump -i lo
tcpdump: listening on lo

08:27:36.418044 10.2.1.3.netbios-ns  10.2.1.3.32773: NBT UDP PACKET(137):
QUERY; POSITIVE; RESPONSE; UNICAST (DF)
08:27:36.745162 10.2.1.3.32774  10.2.1.3.netbios-ns: NBT UDP PACKET(137):
QUERY; REQUEST; UNICAST (DF)
08:27:36.746787 10.2.1.3.netbios-ns  10.2.1.3.32774: NBT UDP PACKET(137):
QUERY; POSITIVE; RESPONSE; UNICAST (DF)
08:27:36.895434 10.2.1.3.32860  10.2.1.3.microsoft-ds: S
1138608783:1138608783(0) win 32767 mss 16396,sackOK,timestamp 892625
0,nop,wscale 0 (DF)
08:27:36.895480 10.2.1.3.microsoft-ds  10.2.1.3.32860: S
1137764682:1137764682(0) ack 1138608784 win 12288 mss 16396,sackOK,timestamp
892625 892625,nop,wscale 0 (DF) [tos 0x10]
08:27:36.895509 10.2.1.3.32860  10.2.1.3.microsoft-ds: . ack 1 win 32767
nop,nop,timestamp 892625 892625 (DF)
08:27:36.911574 10.2.1.3.32860  10.2.1.3.microsoft-ds: P 1:184(183) ack 1 win
32767 nop,nop,timestamp 892627 892625 (DF) [tos 0x10]
08:27:36.911619 10.2.1.3.microsoft-ds  10.2.1.3.32860: . ack 184 win 12105
nop,nop,timestamp 892627 892627 (DF) [tos 0x10]
08:27:36.911909 10.2.1.3.microsoft-ds  10.2.1.3.32860: P 1:6(5) ack 184 win
12105 nop,nop,timestamp 892627 892627 (DF) [tos 0x10]
08:27:36.911925 10.2.1.3.32860  10.2.1.3.microsoft-ds: . ack 6 win 32762
nop,nop,timestamp 892627 892627 (DF) [tos 0x10]
08:27:36.912367 10.2.1.3.32860  10.2.1.3.microsoft-ds: P 184:249(65) ack 6
win 32762 nop,nop,timestamp 892627 892627 (DF) [tos 0x10]
08:27:36.922802 10.2.1.3.microsoft-ds  10.2.1.3.32860: R 6:6(0) ack 249 win
12105 nop,nop,timestamp 892628 892627 (DF) [tos 0x10]

/etc/samba/smb.conf:

[global]
   workgroup = ABCR
   server string = Rho Samba Server
   netbios name = rho
   hosts allow = 127.0.0.0 10.2.0
   interfaces = eth0 lo
   printcap name = /etc/printcap
   load printers = yes
   printing = cups
   log file = /var/log/samba/samba_error_log
   log level = 4
   max log size = 200
   security = user
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd
   unix password sync = Yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
   pam password change = yes
   obey pam restrictions = yes
   socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   os level = 99
   domain logons = yes
   logon path =
   dns proxy = no

/var/log/samba/samba_error_log:

[2003/11/11 08:27:36, 3] smbd/oplock.c:init_oplocks(1226)
  open_oplock_ipc: opening loopback UDP socket.
[2003/11/11 08:27:36, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
  Linux kernel oplocks enabled
[2003/11/11 08:27:36, 3] smbd/oplock.c:init_oplocks(1257)
  open_oplock ipc: pid = 14637, global_oplock_port = 32774
[2003/11/11 08:27:36, 4] lib/time.c:get_serverzone(122)
  Serverzone is 21600
[2003/11/11 08:27:36, 3] lib/access.c:check_access(313)
  check_access: no hostnames in host allow/deny list.
[2003/11/11 08:27:36, 0] lib/access.c:check_access(328)
  Denied connection from  (10.2.1.3)
[2003/11/11 08:27:36, 1] smbd/process.c:process_smb(883)
  Connection denied from 10.2.1.3
[2003/11/11 08:27:36, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/11/11 08:27:36, 2] smbd/server.c:exit_server(558)
  Closing connections
[2003/11/11 08:27:36, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to
[2003/11/11 08:27:36, 3] smbd/connection.c:yield_connection(76)
  yield_connection: tdb_delete for name  failed with error Record does not exist.
[2003/11/11 08:27:36, 3] smbd/server.c:exit_server(601)
  Server exit (connection denied)


# smbstatus
doing parameter max log size = 200
doing parameter security = user
doing parameter encrypt passwords = yes
doing parameter smb passwd file = 

[Samba] problem with workgroup and inetd

2003-11-11 Thread Linda Strefford
Hi,


Can anyone help with the following problems?
 I have samba-3.0.0 running on a Solaris 9 server.

1. I would like to change the workgroup name. I've modified the line in
smb.conf. Then send a HUP signal to inetd.conf. This seems to have no
effect on the workgroup name. Am I missing something?

2. Every 10 minutes or so I get the following message on the console

inetd[247]:  [ID 667328 daemon.error] netbios-ns/udp server failing
(looping), service terminated.

Any help would be much appreciated.

Thanks.


Linda


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Current Version

2003-11-11 Thread Grimes, Michael E {PBSG}
Can someone please tell me how to determine the current Samba version?

Thanks,
Mike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Win2K Password Hash

2003-11-11 Thread Robert Rati
I have installed nss_ldap and changed my nsswitch.conf file to be like 
the example given with the nss_ldap package, so I thought that would 
satisfy the samba requirement.  Is there other system configuration that 
needs to be done (other than changing nsswitch.conf) to satisfy this 
samba requirement?  All the information I've found regarding setting up 
LDAP in this regard has been sketchy at best.  I would think I'd have to 
configure a base dn atleast, but I haven't found out how to do this.

Rob

Andrew Bartlett wrote:
On Tue, 2003-11-11 at 06:50, Robert Rati wrote:

I have a Samba 3.0 PDC using LDAP as it's password database backend, but 
I can't get a user to log on to a Win2k machine on the domain.  In the 
log file for the PC (on the Samba machine), I see that the user is found 
in the LDAP backend but that getpwnam failed.  The username does not 
exist on the Linux machine in any form.  


Samba *requires* that the username exist on the server, via nsswtich, as
a normal user.  You cannot have users in Samba which are not in
/etc/passwd or it's nsswitch'ed equivalent (nss_ldap etc).
Andrew Bartlett

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cannot enable browsing, chdir to /tmp denied...

2003-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marcus Widerberg / EMF Textile wrote:

| I am a newbie at looking at the logs, I see the
| access denied to the /tmp dir recurring.
So what are the permissions on /tmp?  They should be 1777

| Any clues GREATLY appreciated. I never had any such
| problem with samba 2.2.x - am completely stuck! If I cant
| fix it I will have to go with a windows PDC...
btwcomments like this come off a threats to get people
to offer help.  I'm sure you didn't mean it like this, but
it's one of my pet peeves.


- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/sQMjIR7qMdg1EfYRAgG7AJsHP1xvt+lMkg8s74ccznNRJ8NoZQCfbNiy
R7tmt5L3zUxprUfwEJlCLlI=
=qu7f
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Test Samba 3.0.1pre2 smb panic xp client

2003-11-11 Thread Andrew Bartlett
On Tue, 2003-11-11 at 23:07, Giulio Orsero wrote:
 On Mon, 10 Nov 2003 19:26:11 +, Jeremy Allison [EMAIL PROTECTED] wrote:
 
 On Mon, Nov 10, 2003 at 02:55:08PM +0100, jean-marc pouchoulon wrote:
  Hi ,
  I've just tried Samba 3.0.1pre2 on redhat 9 with xpclient.
  I can connect ( very slow ) but I have :
  [2003/11/10 14:37:51, 0] lib/util.c:smb_panic(1400)
PANIC: init_unistr2_from_datablob: malloc fail
 
 Can you reproduce this ? Can you log a bug with a stack
 backtrace (with the smbd compiled with -g) so we  can
 see why the crash is occurring ?
 
 I get same errors on Red Hat 7.3, I cannot easily use -g.
 [ I don't use yp at all ]
 This didn't happen with pre1.
 I don't know what the client is.
 
 [2003/11/09 14:27:58, 0] lib/util.c:smb_panic(1422)
   PANIC: init_unistr2_from_datablob: malloc fail
  
 [2003/11/09 14:27:58, 0] lib/util.c:smb_panic(1429)
   BACKTRACE: 20 stack frames:
#0 smbd(smb_panic+0x14e) [0x818348e]
#1 smbd(init_sam_user_info21A+0x544) [0x813e1d4]
#2 smbd [0x81148a2]
#3 smbd(_samr_query_userinfo+0x292) [0x8114b62]
#4 smbd [0x810d97c]
#5 smbd(api_rpcTNP+0x213) [0x8124073]
#6 smbd(api_pipe_request+0xcf) [0x8123dcf]
#7 smbd [0x811e238]
#8 smbd [0x811e41f]
#9 smbd [0x811e899]
#10 smbd(write_to_pipe+0xe4) [0x811e814]
#11 smbd [0x8083bf1]
#12 smbd(reply_trans+0x975) [0x8084855]
#13 smbd [0x80b8519]
#14 smbd [0x80b85be]
#15 smbd(process_smb+0x1a7) [0x80b88c7]
#16 smbd(smbd_process+0x151) [0x80b9291]
#17 smbd(main+0x6c3) [0x81d2f03]
#18 /lib/libc.so.6(__libc_start_main+0x90) [0x401aa1c4]
#19 smbd(yp_get_default_domain+0x69) [0x80721d1]

This looks like a simple bug introduced by the 'munged dialback string'
changes.  Another in my untested patch series follows...

Andrew Bartlett

--
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] logging print jobs

2003-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:

| Is there a method to place the actual filename
| of the printjob into this type of log?
See %J'



cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/sQh2IR7qMdg1EfYRAgyWAKCGnee3zPlnu/jHcqKJBrHCvSbTLACg0Bhx
SGLUMdCP5aoD6R82hTpve4w=
=Dm8/
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] No Roaming profiles local only

2003-11-11 Thread David . Grudek
On a windows server there is a local profile by default unless you tell it 
to have a roaming profile.  I want to have the same thing happen.  All the 
machines say that they used the local copy   then a couple seconds later 
it says it could not copy to the server and any changes will not be saved. 
 I know that I could let it be a roaming and switch it to a local later 
but in a larger enterprise that is too much work. 

I tried this in my smb.conf on debian testing with samba 3.0

logon home = 
logon path = 

I used to use this on redhat  8 with samba 2.28a before and it worked.

and logon home = c:\documents and settings\%u
 logon path = c:\documents and settings\%u

I saw this on a web site and so I tried it but it did not work. 

I bought the book called The official Samba 3 howto and reference guide. 
What a great book but it says in there if you want to disable roaming 
profiles, there are three ways to do it.  Do it in the smb.conf file but 
does not show how just says to do it.  Then it says to do it in the 
windows registry but this is not practical to do to 100 workstations.  Or 
to leave as roaming and then switch to local which is also not practical 
to do to 100 workstations.   There should be a way to just make it do 
local on the fly as it creates the profile as windows does it.  I would 
like to know how your smb.conf file should look in order to accomplish 
this.  Any help would be appreciated. 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Translation Dok to German, first file, deutsche ?bersetzung Der Samba Doku erste Datei

2003-11-11 Thread John H Terpstra
On Tue, 11 Nov 2003, Jelmer Vernooij wrote:

 Hi John,

 I just saw this message on the mailinglist...

 On Tue, Nov 11, 2003 at 12:12:40AM +0100, Stefan G. Weichinger wrote about 'Re: 
 [Samba] Samba Translation Dok to German, first file, deutsche ?bersetzung Der Samba 
 Doku erste Datei':
  Guten Tag Kurt Pfeifle,
  KP I know that DocBook/XML is rather difficult for people who are not used
  KP to it and it makes them slow down a lot. (I myself haven't written my
  KP part of the HOWTO Collection in XML. but in HTML and one kind soul did
  KP convert it for me). However, it makes it more easy to create PDFs and
  KP other formats from that input.

  We talked to John H Terpstra and he told us that he would take the
  part of converting to XML (I hope it still is like that ;-) )

  So we can happily use our little crappy html-editors and concentrate
  at translating english-german instead of converting html-xml.
 Are we really sure we can/want to convert all those pages back to XML?
 Getting a volunteer to do it is probably harder then for Kurt's
 docs...

Hmmm. You have a good point.

I'll follow up with Robert Reugger when I get back home. I'm in Boston.
Did another book signing yesterday. We sold 8 copies. :(

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Client can't use share

2003-11-11 Thread Dominik Brosch
Dear Group,

I installed samba3.0 and got it running.
But from yesterday evening onwards, no client is able to logon to samba
shares.

If I perform wbinfo -u, I see all user, if I make net ads testjoin, I am
getting a successful response.

I took a look to the log file, at log:smb I am getting following message,
each time I try to logon to shares:

/tmp does not exist or is not a directory when connecting to [IPC$]

At log.windbindd I am finding following message:

user 'root ' does not exists

No idea what I did wrong, because system was working.

Any help will be appreciated.

Thanks in advance.

Regards

Dominik



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Translation Dok to German, first file, deutsche?bersetzung Der Samba Doku erste Datei

2003-11-11 Thread Mike McMullen

   So we can happily use our little crappy html-editors and concentrate
   at translating english-german instead of converting html-xml.
  Are we really sure we can/want to convert all those pages back to XML?
  Getting a volunteer to do it is probably harder then for Kurt's
  docs...

 Hmmm. You have a good point.

 I'll follow up with Robert Reugger when I get back home. I'm in Boston.
 Did another book signing yesterday. We sold 8 copies. :(

 - John T.

I wouldn't be dis-heartened. It's a great book. Chockfull of useful goodies.
It's your marketing. All tech no sizzle. How about Samba How-To Swimsuit
Edition?

Or better yet a video, Samba Team Gone Wild?

:-)

Mike

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] RPC server unavailable

2003-11-11 Thread Lorenzo Conigliaro
Hi

I have a problem with Samba 2.2.7-3.7.3 on Redhat Linux 7.3.

Samba run on this server like a PDC controller. This is the samba.conf

# Global parameters
[global]
workgroup = ONSOFT
netbios name = LINUX01
server string = Linux Mail Server
encrypt passwords = Yes
update encrypted = Yes
name resolve order = wins host lmhosts bcast
domain admin group = root lconigliaro @administrators
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s 
/bin/false -M %u
logon path =
logon home =
domain logons = Yes
os level = 64
preferred master = True
domain master = True
wins support = Yes
winbind uid = 1-2
winbind gid = 1-2
winbind separator = -
winbind cache time = 10

[netlogon]
path = /usr/local/samba/lib/netlogon
write list = ntadmin

[profiles]
path = /usr/local/samba/ntprofile
read only = No
create mask = 0600
directory mask = 0700

[homes]
path = /home/%S
read only = No
directory mask = 0744
browseable = No

[DominoData]
path = /local/notesdata
read only = No
directory mask = 0777

Also I have a file server with Windows 2000 Server sp4 joined to Samba 
PDC.

In this file server there are some shared directory with restricted users 
access. Some Windows XP sp1 client access to shared directory. 

Every a lot explorer ask username and password newly. If I restart 
netlogon service on windows 2000 file server all go ok. On file server's 
event viewer  I found this error:

No Windows NT or Windows 2000 Domain Controller is available for domain 
ONSOFT. The following error occurred:
The RPC server is unavailable. 

And

The browser was unable to retrieve a list of servers from the browser 
master \\LINUX01 on the network 
\Device\NetBT_Tcpip_{D2214AB8-A613-44B4-86E2-0E02766D69A0}. The data is 
the error code. 

Anyone have some idea?

Lorenzo
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Current Version

2003-11-11 Thread Stephen Harris

Grimes, Michael E {PBSG} [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 Can someone please tell me how to determine the current Samba version?

 Thanks,
 Mike
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


I installed Samba from an rpm on Redhat so
rpm -qa | grep samba will work.

Also find / -name samba-* will return a few extra
results but it is easy to tell which one is the version number.

I think that might tell you if you had two different versions installed.

Regards,
Stephen



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Translation samba 3 how to in german, Übersetzung des Samab 3 How to ins deutsch

2003-11-11 Thread John H Terpstra
On Sun, 9 Nov 2003, Jochen Schmidt wrote:

 Hi,

 i'm also willing to translate a part the HOWTO.

 John: who is the master of the current Samba-HOWTO-Collection and where is
 the HOWTO held? I havn't found it in the samba-cvs-Tree..

The documented that make up the HOWTO COllection are in the directory
'projdocs', all end in '.xml'

- John T.


 Greetings

 Yoshi

 On Fri, 7 Nov 2003, rruegner wrote:

  Hallo Leute,
  ich möchte gerne die Samba Doku ins deutsch übersetzen.
  Ich arbeite schon lange mit Samba und denke es wäre kein übermässiger Aufwand.
  Da ich Samba aber meist als Pdc benutze bin ich mit einigen Features technisch 
  nicht so vertraut.
  ( samba und ldap an einem win server etc )
  Ich würde mich freuen wenn einige Deutsche mitmachen würden damit wir uns 
  technisch und gramatikalisch gegenseitig verbessern könnten.
  Mfg RRuegner
 
  Hi Samabtistas, i am looking for some people which would help to
  translate the samba 3 doks to german.
  As i am working with samba for years i think this should not be a  big problem.
  But most of the time i used samba as pdc , so i am afraid that i will do tec 
  failures in some
  chapters i never used , so people who want to take part to make help in 
  translations and debug each other
  will be needed
  Best Regards
 
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba
 



-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Book Signings?

2003-11-11 Thread Tom Dickson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Why doesn't anyone tell us about these book signings?

Will you be in San Diego anytime? We've two copies and would love to get
a signed one.
- -Tom Dickson
InoStor, Inc.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2-nr2 (Windows 2000)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/sRCR2dxAfYNwANIRAtOXAKChQ0hcBBJBlJxP32NOrTFKAL0n4ACgoAYx
fHdOMScAqmT7jjJiy0gGDww=
=JM2N
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Backing up Samba

2003-11-11 Thread John H Terpstra
On Sun, 9 Nov 2003, Jamrock wrote:

 The Samba 3.0 documentation does not have information on backing up data on
 a Samba domain.

The chapter on backup is in the book, The Official Samba-3 HOWTO and
Reference Guide available from Amazon.Com. This chapter will be released
to the CVS code tree on March 1, 2004.

 Please let me know how you are backing up data in your production
 environment.

Any information provided on this subject will be used to update the CVS
tree information.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] FreeBSD and Samba Windbind questions

2003-11-11 Thread flatfendercj2a
Hello,

I am getting ready to migrate from a Novell Server and wanted to use Samba as a PDC. I 
am planning on using FreeBSD, Samba 3 and LDAP.  The problem I encounter is that one 
of our business applications is only supported on Novell or Windows.  What I was 
hoping to do was configure a Samba PDC and have a W2K server that houses that 
application join the Samba Domain.  Then when I access the application on the W2K 
server it will authenticate to the Samba PDC.  I have already configured a FreeBSD 4.8 
and Samba 2.2.8a with LDAP before, but never integrated any W2K servers before.  As 
you can see I am a litte confused on how Winbind plays a role.  I have read the HowTos 
and the man pages, but still have the following questions.

1.Will I need to configure Winbind?  I understand that windbind provides the group 
mapping betweeen Windows and Unix.  Or is Windbind only necessary when your PDC is a 
true blue Microsoft PDC?

2.Will I need users accounts on the W2K server, I expect no, because it should 
authenticate through the PDC.

3.How do I specify group permissions on the W2K server shares?  Will Winbind take care 
of this? Will standard unix groups work.?  Should I host a DFS share through Samba to 
control directory access?

4.If I need Winbind should I store the group information in LDAP?

5.What is the differnce between with winbind and with winbind-auth-challenge?

Thanks to all the Samba Developers for a fine product.

John Robertson


__
McAfee VirusScan Online from the Netscape Network.
Comprehensive protection for your entire computer. Get your free trial today!
http://channels.netscape.com/ns/computing/mcafee/index.jsp?promo=393397

Get AOL Instant Messenger 5.1 free of charge.  Download Now!
http://aim.aol.com/aimnew/Aim/register.adp?promo=380455
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: Re: [Samba] Samba Translation Dok to German, first file, deutsche bersetzung Der Samba Doku erste Datei

2003-11-11 Thread John H Terpstra
On Tue, 11 Nov 2003, Stefan G. Weichinger wrote:

 Guten Tag Kurt Pfeifle,

 am Dienstag, 11. November 2003 um 00:04 schrieben Sie:

 KP Hi, all --

 KP this is a really great initiative. Please keep us informed about your
 KP progress!

 We will do as this project grows ...

 KP One little question: are you aware that the *sources* of all English
 KP Samba documentation are now DocBook/XML? Have you considered to write
 KP the docu (or maybe convert it at a later stage) into that format?

 KP I know that DocBook/XML is rather difficult for people who are not used
 KP to it and it makes them slow down a lot. (I myself haven't written my
 KP part of the HOWTO Collection in XML. but in HTML and one kind soul did
 KP convert it for me). However, it makes it more easy to create PDFs and
 KP other formats from that input.

 We talked to John H Terpstra and he told us that he would take the
 part of converting to XML (I hope it still is like that ;-) )

I would of course prefer if you could provide your files in XML.
I do not know when I will get time to convert html or text to XML, I'll do
it some time, but you would save me about 1 day of work per chapter if you
can provide files in XML.

- John T.


 So we can happily use our little crappy html-editors and concentrate
 at translating english-german instead of converting html-xml.

 Thanks for your point!

 KP Thanks again and Cheers!
 KP Kurt

 You´re welcome.

 Stefan G. Weichinger

 mailto:[EMAIL PROTECTED]





-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba 3.0.0 - LDAP Authetication trouble

2003-11-11 Thread Carl Weiss
If this solved you problem is sounds like your not really authenticating to
LDAP and just using the smbpassdb file, although it can read from LDAP it
may not be using it for Authentication.

Verify that you are using LDAP for authentication, you can run Authconfig in
redhat, otherwise you'll have to check you PAM. To test simply you can try
to login with your user Bart at the console( verify that the account isn't
in /etc/password).

Is the Bart account is the first user you created SID x3000 this is the
default first user, if all your accounts have this same sid they will not
authenticate. Points to an issue with the script smbldap-useradd.pl not
incrementing the sid, may also point to the above PAM problem.


-=carl=-

Bart Bekker [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]
 Thanks, problem solved.
 But I am still confused. Why are those password tools delivered with
 Samba, if they are not useful.. I saw in the LDAP that smbpasswd uses a
 SMD5 encryption for the password; the smbldap-passwd tools adds them
 using SSHA. No wonder it did not work.

 Thanks again.

  Bart.

 Andrew Bartlett wrote:

 On Tue, 2003-11-11 at 23:42, Bart Bekker wrote:
 
 
 For quite some time I am trying to get samba 3.0.0 woring with an LDAP
 backend.
 The latest problem I have is that user authenticaltion doe not work. The
 passwords are right, added them with the ldaptools from the samba
 source,
 
 
 
 Add them with smbpasswd.  The passwords in LDAP is simply not the
 password that the user is sending.
 
 Andrew Bartlett
 
 
 


 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] No Roaming profiles local only

2003-11-11 Thread John H Terpstra
On Tue, 11 Nov 2003 [EMAIL PROTECTED] wrote:

 On a windows server there is a local profile by default unless you tell it
 to have a roaming profile.  I want to have the same thing happen.  All the
 machines say that they used the local copy   then a couple seconds later
 it says it could not copy to the server and any changes will not be saved.
  I know that I could let it be a roaming and switch it to a local later
 but in a larger enterprise that is too much work.

 I tried this in my smb.conf on debian testing with samba 3.0

 logon home = 
 logon path = 

 I used to use this on redhat  8 with samba 2.28a before and it worked.

 and logon home = c:\documents and settings\%u
  logon path = c:\documents and settings\%u

 I saw this on a web site and so I tried it but it did not work.

 I bought the book called The official Samba 3 howto and reference guide.
 What a great book but it says in there if you want to disable roaming
 profiles, there are three ways to do it.  Do it in the smb.conf file but
 does not show how just says to do it.  Then it says to do it in the
 windows registry but this is not practical to do to 100 workstations.  Or
 to leave as roaming and then switch to local which is also not practical
 to do to 100 workstations.   There should be a way to just make it do
 local on the fly as it creates the profile as windows does it.  I would
 like to know how your smb.conf file should look in order to accomplish
 this.  Any help would be appreciated.



logon home =
logon path =

These two entries will cancel the default settings and enforce local
profiles. If you are using Samba-3.0.x and you have a tdbsam backend, and
it has a profile path set, then this setting will be used. In this case
you have to use either pdbedit to remove the setting, or use the SRVTOOLS
User Manager for Domains to change the setting to a blank.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Book Signings?

2003-11-11 Thread John H Terpstra
On Tue, 11 Nov 2003, Tom Dickson wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Why doesn't anyone tell us about these book signings?

 Will you be in San Diego anytime? We've two copies and would love to get
 a signed one.

I was at LISA'2003 for a book signing (in San Diego) just recently.
Sorry, I'll inform on this list in future.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: No Roaming profiles local only

2003-11-11 Thread Carl Weiss
I've had success with
logon home =
logon path =
but if your using LDAP it will override these settings so you need to set
those fields blank in you LDAP user as well.

-=Carl=-

[EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 On a windows server there is a local profile by default unless you tell it
 to have a roaming profile.  I want to have the same thing happen.  All the
 machines say that they used the local copy   then a couple seconds later
 it says it could not copy to the server and any changes will not be saved.
  I know that I could let it be a roaming and switch it to a local later
 but in a larger enterprise that is too much work.

 I tried this in my smb.conf on debian testing with samba 3.0

 logon home = 
 logon path = 

 I used to use this on redhat  8 with samba 2.28a before and it worked.

 and logon home = c:\documents and settings\%u
  logon path = c:\documents and settings\%u

 I saw this on a web site and so I tried it but it did not work.

 I bought the book called The official Samba 3 howto and reference guide.
 What a great book but it says in there if you want to disable roaming
 profiles, there are three ways to do it.  Do it in the smb.conf file but
 does not show how just says to do it.  Then it says to do it in the
 windows registry but this is not practical to do to 100 workstations.  Or
 to leave as roaming and then switch to local which is also not practical
 to do to 100 workstations.   There should be a way to just make it do
 local on the fly as it creates the profile as windows does it.  I would
 like to know how your smb.conf file should look in order to accomplish
 this.  Any help would be appreciated.
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Translation Dok to German, first file, deutsche?bersetzung Der Samba Doku erste Datei

2003-11-11 Thread John H Terpstra

 I wouldn't be dis-heartened. It's a great book. Chockfull of useful goodies.
 It's your marketing. All tech no sizzle. How about Samba How-To Swimsuit
 Edition?

 Or better yet a video, Samba Team Gone Wild?

Oops! Did not intend to copy my reply to the list. I'm not dis-heartened.
The book is a sell-out on Amazon.Com, next printing will leave the printer
on Friday. This book is doing well.

I'd like to sign up for the video though! It's be cool to be the John
Wayne of Samba! :)

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: sambaGroupType

2003-11-11 Thread paul k
DiezelMax wrote:
What is the sambaGroupType in the LDAP?
As the name suggests - integer for grouptype. 2 is domaingroup, 5 is 
builtin, should be at least one more (local).

greetings
 Paul
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] nt status support

2003-11-11 Thread William Jojo


On 2.2.8a, why does nt status support = yes make the volume label on
mapped drives equal to 3 consecutive boxes. Turning nt status support
= no makes the volume label exactly as it should be.

These are XP machines with SP-1 that are having the problem. Win2k SP-4
machines did not have the problem regardless of setting.

Will this happen in 3.0.[01]? (I'm testing it later today) What might
break as a result of having this off? Would this option have an impact on
Excel spreadsheets being shared in an office environment?


Bill
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] RE: Samba-3.0.0 on OpenBSD-3.4

2003-11-11 Thread Van Sickler, Jim
It Lives!

I dl'd the current contents of:
pserver.samba.org/pub/unpacked/samba_3_0/source
ftp.openbsd.org/pub/OpenBSD/snapshots/i386

Upgraded my obsd34 box;

Samba compiled, loaded, joined the Domain, and testparm'd okay.

I don't know if the problem was the samba source or OpenBSD's code.
Don't really care, as long as it's up.

Here's my configure mods...I put it in a text file, named samba1.
Copy it to the source directory, then set it as executable
(chmod 0744 ./samba1).  Run it by ./samba1 at the prompt.  You
have to be logged in/su'd as root to run it.

./configure \
--with-smbwrapper --without-sambabook \
--bindir=/usr/local/bin --sbindir=/usr/local/sbin \
--libexecdir=/usr/libexec --with-utmp \
--prefix=/usr/local --exec-prefix=/usr/local --with-sysconfdir=/etc \
--localstatedir=/var --infodir=/usr/local/info --mandir=/usr/local/man
--with-profile \
--with-privatedir=/etc/samba --with-lockdir=/var/spool/lock \
--with-swatdir=/usr/local/swat --with-configdir=/etc/samba

I had to chmod 0755 /var/spool/lock to clear an error message in the
testparm results.

gcc version 2.95.3
g++ version 2.95.3

I also have installed the following additional updates/packages on the
obsd34 box:
(contents of /var/db/pkg)

LPRng-3.8.21
bzip2-1.0.2
gdbm-1.8.3
gettext-0.10.40p1
joe-2.9.8pre1p1
libiconv-1.8
squid-2.5.STABLE3p4
transproxy-1.4
wget-1.8.2

Good luck!

Jim


-Original Message-
From: Jim Breton [mailto:[EMAIL PROTECTED]
Sent: Monday, November 10, 2003 4:32 PM
To: Van Sickler, Jim
Subject: Re: Samba-3.0.0 on OpenBSD-3.4


On Mon, Nov 10, 2003 at 06:27:29PM -0500, Van Sickler, Jim wrote:
   Not yet-I had to put it on the back burner because it was eating too
much
 time.
 
 In the meantime, I've downloaded the current snapshots of both OpenBSD 3.4
 install files and the samba source from pserver.samba.org.  Maybe later
this
 week I'll run an upgrade on the OS and try to compile the newer source
code.
 I'll let you know what happens (if you don't try it first...)

Hey there, thanks for the response.  Just a quick update, I did find this
in their Bugzilla:

https://bugzilla.samba.org/show_bug.cgi?id=741

-- 

Jim B.
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 2.2.3a and Windows Sychronization

2003-11-11 Thread Netwrkpblm
Just for an update, I grabbed the 3.0 samba rpms from samba.org, and 
installed them on my box.  My problems went away with no changes to my smb.conf file.

I am already seeing some nice speed improvements.

Now, if the redhat folks would update their patch directory and get rid of 
the current 2.x series, they could cure more than a few headaches.  

Nice Job !!

-Lynch
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba Doks German Translation second File released, Samba Doku deutsche Übersetzung 2. File

2003-11-11 Thread rruegner
Hi @ll ,
the next file is now translated to German
find it here
http://www.robowarp.de/smb/trans/nmbd.8.html
thx for his work to Mr Stefan G. Weichinger 
mailto [EMAIL PROTECTED] if you want to be a part of the Translation Team
you can view other files translation progress and the readme beyond
http://www.robowarp.de/smb/trans/
We now discuss to use a cvs and xml for the files, we ll let you know if 
there is progress in this discussion.
During discussion ,files are released as html on the site above.

Best Regards
Robert Rügner

Hallo,
die nächste Datei der Samba Doku wurde ins Deutsche übersetzt
http://www.robowarp.de/smb/trans/nmbd.8.html
Vielen Dank dafür an Stefan G. Weichinger 
falls ihr Euch beteiligen wollt mailt an [EMAIL PROTECTED]
Ihr könnt den Fortschritt der Übersetzung anderer Dateien unter
http://www.robowarp.de/smb/trans/ einsehen
Wir sind dabei zu diskutieren ob wir die Dateien in ein cvs einchecken und xml als 
Format benutzen.
Bis wir uns geeinigt haben werden die Dateien als html auf der genannten Site 
veröffentlicht

MfG Robert Rügner
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Likelihood of WINS Replication?

2003-11-11 Thread Paul Creager
My main interest in Samba is its use as a replacement for Microsoft WINS
servers.  From what I've read, it looks to me like WINS replication is a low
priority for the Samba team - is this observation correct?  What are the
chances that Samba will be able to:

A)  Replicate the WINS database from/to a Microsoft WINS server?
or
B)  Replicate the WINS database from/to another Samba server?

Ideally, we would like to replace aging Microsoft WINS servers with new
servers running RHEL 3 and Samba, provided there is some form of
replication.  Thanks in advance for any input.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba 1.9.18 swat

2003-11-11 Thread Wolfgang . Schneider
Hello
 
Our customer  wants  to use SWAT with Samba.
On  z/OS  1.2   we  have  in  Unix System Services  Samba  Version  1.9.18 from 1999. 
In this release there  is no SWAT-function.
What  should  we do  to implement  SWAT  in this environment  ?
 
Best  regards
Wolfgang Schneider  
 
 
Wolfgang   Schneider

T-Systems  International GmbH ?xml:namespace prefix = o ns = 
urn:schemas-microsoft-com:office:office /

Linux , S/390 SAP (MSY-SP-L)

Service Line CDS/GCF

Global Computing Factory

Hausanschrift: Kreetslag  10, D-22129  Hamburg, 
Postanschrift:  Kreetslag 10, D-21129 Hamburg 
Telefon: +49 (40) 743-75245  
Telefax.: +49( 40) 743-74773  
Mobiltelefon: 
E-Mail::  [EMAIL PROTECTED]  
Internet:  http://www.t-systems.de http://www.t-systems.de/  

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] 2.2.7a doesn't appear in network neighborhood

2003-11-11 Thread Kai Zimmer
Hi,

i recently updatet Samba 2.2.1 to 2.2.7a-SuSE using my old config files. 
But now the server doesn't appear in the network neighborhood (Win2k) 
anymore. If I explicitely search for the server (using the windows 
function) i can find it - but I have to do this on every machine...

Any hints?

thanks,
Kai
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba 1.9.18 swat

2003-11-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
| Hello
|
| Our customer  wants  to use SWAT with Samba.
| On  z/OS  1.2   we  have  in  Unix System Services
| Samba  Version  1.9.18 from 1999. In this release there
| is no SWAT-function. What  should  we do  to implement
| SWAT  in this environment  ?
Your only options are to backport SWAT or upgrade.  Sorry.

cheers, jerry
- --
~ --
~ Hewlett-Packard- http://www.hp.com
~ SAMBA Team -- http://www.samba.org
~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
~ If we're adding to the noise, turn off this song --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE/sQUdIR7qMdg1EfYRAlg3AJ4grhXGpkZBJ3Fqm+5oVXxtckwP1ACgkFmr
c0jyS0TjPrzEsKjR4Rnh7Sc=
=rRF6
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba 1.9.18 swat

2003-11-11 Thread rruegner
Hi, sorry i advice you to upgrade to samba version 3, for several security
reasons
i dont think it makes sense to think about configure, compile swat in such a
old version,
you better invest time in setup new version
Best Regards
- Original Message - 
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 11, 2003 4:39 PM
Subject: [Samba] samba 1.9.18 swat


 Hello

 Our customer  wants  to use SWAT with Samba.
 On  z/OS  1.2   we  have  in  Unix System Services  Samba  Version  1.9.18
from 1999. In this release there  is no SWAT-function.
 What  should  we do  to implement  SWAT  in this environment  ?

 Best  regards
 Wolfgang Schneider


 Wolfgang   Schneider

 T-Systems  International GmbH ?xml:namespace prefix = o ns =
urn:schemas-microsoft-com:office:office /

 Linux , S/390 SAP (MSY-SP-L)

 Service Line CDS/GCF

 Global Computing Factory

 Hausanschrift: Kreetslag  10, D-22129  Hamburg,
 Postanschrift:  Kreetslag 10, D-21129 Hamburg
 Telefon: +49 (40) 743-75245
 Telefax.: +49( 40) 743-74773
 Mobiltelefon:
 E-Mail::  [EMAIL PROTECTED]
 Internet:  http://www.t-systems.de http://www.t-systems.de/








 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problems with installation of samba

2003-11-11 Thread Trauzzi, Jim
Hello,

We are running IBM's aix 4.3.3 ptf set 10.
We have a problem with some of our smit options missing under the devices
menu.
The only change made recently has been the installation of samba version
2.2.8a.

Has there been any reports about the above issue during the installation of
the samba software?
Your help is much appreciated.

Thanks

Jim Trauzzi
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] XFS + Samba 2.2.3a, unable to change permissions on shares

2003-11-11 Thread Sean Kennedy
Symptoms:

Unable to change permissions from win2k clients on folders/shares.  When
change is attempted, they are silently ignored.
Data:
Win2k Domain controller ( AD enabled )
Winbind ( to sync user/password lists )
Redhat 8.0 with custom kernel ( xfs patched )
Samba 2.2.3a
Logs have ~10-20 of these messages as a direct result of my attempt to
change permissions:
[2003/11/11 09:54:44, 0] smbd/posix_acls.c:create_canon_ace_lists(823)
  create_canon_ace_lists: unable to map SID
S-2-6-31-3345428093-651377827-839522115-1192 to uid or gid.
( SIDs have been changed to protect the innocent )
uname -a output:

Linux stark 2.4.20-20.9.XFS1.3.1 #1 Sat Oct 11 15:23:43 CDT 2003 i686
athlon i386 GNU/Linux
That's all the data I can think of that would relate to this problem.  I
can also tell you I had the same problem on Debian ( woody ) and samba 3
with xfs.
Help is greatly apprecaited.

--
Sean Kennedy
PGP public key: http://tpno.org/keys/0xFC1C377F.asc



file:///C|/DOCUME%7E1/SKENNEDY/LOCALS%7E1/TEMP/nsmail-1.tmp
Description: PGP signature


pgp0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Guest Account - don't enter a password

2003-11-11 Thread Gabby James
Hello,

I am using samba 2.07-36 on a RedHat 7.1 linux system.  I want to share a 
directory on my Linux system to various Windows operating systems (Windows 
95, 98, 2000 etc).

In the shares definition section I have:
[MyShareDir]
  comment=My Shared Directoy on my Linux system
  path= /home/john
  public = yes
  writable = yes
  printable = no
  create mode = 0664
  directory mask = 0775
  browseable = yes
  guest ok = yes
  guest account = ftp
  guest only = yes
At a DOS prompt on a Windows 2000 machine, I type:
net use v:  \\10.2.2.2\MyShareDir
I get a message: The password or username is invalid for 10.2.2.2 then it 
prompts me for a username.

From reading about samba, I thought the guest account would login in user 
ftp and not prompt for a password since I have guest ok set to yes.  Am I 
wrong in that idea or is something just wrong with my setup?

Thanks

_
Is your computer infected with a virus?  Find out with a FREE computer virus 
scan from McAfee.  Take the FreeScan now! 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba 3.0 as DC and fileserver?

2003-11-11 Thread Alexander Lazarevich
I'm about to test samba 3.0 (on RH Linux 9.0) as a replacement for our 
windows NT 4.0 Domain Controller. We already run samba 2.2 on another 
machine (RH linux 7.3) and that system does all of our fileserving (+1TB).

My question is this: is there anything bad about combining samba as a 
domain controller and samba as a fileserver? Or should we have a samba DC 
on one system, and the samba fileserver on a different system? I'm leaning 
towards seperating the two systems, but I'd like a more concrete reason to 
do so than a feeling. 

Any tips or ideas? Does samba 3.0 as a domain controller need a lot of 
/etc/init.d/smb -stop and -starts? If so, then I don't want to put that on 
our fileserver.

Thanks in advance,

Alex

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] OT: English and French translations of Munich Migration Case Study seems to be available

2003-11-11 Thread Kurt Pfeifle
Hi, all,

I stumbled across this page (German language) announcing the
availability of the Munich Migration Case Study (my translation
of the title):
   http://www.muenchen.de/aktuell/ms_linux.htm

What some of our international readers might be interested in is
the last sentence of this paragraph:
   Da das Interesse an diesem Projekt sehr hoch ist, hat
   sich die LHM entschlossen, allen Interessierten auch
   die Kurzfassung der Studie (PDF-Datei 1,6 MB), die als
   Grundlage fr diese Entscheidung von der Fa. Unilog
   erstellt wurde, zum Download zur Verfgung zu stellen
   (http://www.muenchen.de/aktuell/clientstudie_kurz.pdf).
   Wenn Sie Interesse an einer englischen oder franzsischen
   Version haben, wenden Sie sich bitte direkt an die Fa.
   Unilog (georg dot unbehaun at unilog dot de).
(Free) Translation:

   Since interest for this project is very large, the City
   of Munich has decided to offer the shortened version of
   the Study (PDF file of 1,6 MB) for public download. This
   version has been crafted by Unilog (http://www.unilog.de/)
   and served as the base for the political decision of the
   Munich City Council to migrate. -- If you are interested
   in an English or French version of the Study please
   contact Unilog directly (georg dot unbehaun at unilog dot de).
Please note that I have santized the poor man's e-Mail
address for obvious reasons.
Cheers, and have fun!
Kurt
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Translation Dok to German, first file, deutsche Übersetzung Der Samba Doku erste Datei

2003-11-11 Thread Andrew Bartlett
On Wed, 2003-11-12 at 00:59, Stefan G. Weichinger wrote:
 Hi, Andrew,
 
 11. November 2003 11:39 you wrote:
 
 AB Then the most productive method (IMNSHO) would be to check out the
 AB samba-docs repository, and open an emacs window in side-by-side mode,
 AB Then just move down the page, replacing text in one window and reading
 AB the context in the other.  
 
 AB That is, it really should be easy not to modify the surrounding tags at
 AB all, therefore ensuring that referencing (particularly chapter numbering
 AB etc) remain perfectly intact.  There will probably be small formatting
 AB changes but these can probably be left to the editors.
 
 I have no XML-experience but I think if we don´t want to change tags
 and referencing, we don´t have to know that much about it.
 
 So my questions:
 
 - If I edit the pages in OpenOffice (as is discussed right now because
 of its availability and interface, not everyone likes emacs, but that
 definitely is another topic), can I use the DocBook XML filters to
 generate usable XML?

I suspect you will still loose things.  I've not tried it (so I can't
say for sure), but that's my concern.  But any text editor will do very
nicely.  (And as the interest is in the translation, how it looks
on-screen or in output shouldn't matter till the end, when you generate
it up).

 - Would you recommend to just add a samba-german-docs-tree to the
 Samba-CVS and let the participating people access that subtree with
 rw-rights? I think this would simplify the whole process, right now we
 are discussing how and where to host that project.

A CVS tree is a good idea, but hosting on samba.org is rather
difficult.  If you can get a sourceforge (or similar) account, then you
will probably find it easier.

 I don´t know if this is possible, but I think, it would keep things
 together and people like you or John H Terpstra could have an eye on
 it to keep us from making the mistakes you want us to avoid.

I don't speak a word of german (so I'm not quite sure why I'm in this
discussion at all :-) but I think we can get a reasonable process going.

 I am sure we will find a good solution to those starting problems.

I think this is starting to move in the right direction.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Win2K Password Hash

2003-11-11 Thread Andrew Bartlett
On Wed, 2003-11-12 at 02:12, Robert Rati wrote:
 I have installed nss_ldap and changed my nsswitch.conf file to be like 
 the example given with the nss_ldap package, so I thought that would 
 satisfy the samba requirement.  Is there other system configuration that 
 needs to be done (other than changing nsswitch.conf) to satisfy this 
 samba requirement?  All the information I've found regarding setting up 
 LDAP in this regard has been sketchy at best.  I would think I'd have to 
 configure a base dn atleast, but I haven't found out how to do this.

Now you just need the posixAccount attributes for all the users.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] ALERT - GroupShield ticket number OA27_1068588229_PC133_3 was ge nerated

2003-11-11 Thread GroupShield for Exchange (PC133)
Action Taken:
The attachment was quarantined from the message and replaced with a text
file informing the recipient of the action taken.

To:
[EMAIL PROTECTED] [EMAIL PROTECTED]

From:
[EMAIL PROTECTED] [EMAIL PROTECTED]

Sent:
1725064192,29599898

Subject:
[Samba] XFS + Samba 2.2.3a, unable to change permissions on shares

Attachment Details:-

Attachment Name: file:///C|/DOCUME%7E1/SKENNEDY/LOCALS%7E1/TEMP/nsmail-1.tmp
File: file:///C|/DOCUME%7E1/SKENNEDY/LOCALS%7E1/TEMP/nsmail-1.tmp
Infected? No
Repaired? No
Blocked? Yes
Deleted? No
Virus Name: 




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] ntlm_auth and squid authentication problems

2003-11-11 Thread Andrew Bartlett
On Wed, 2003-11-12 at 00:58, Lombardo Federico wrote:
 Hi all,
 
 I've a little problem using ntlm_auth with squid.
 
 Scenario: Redhat 9, Samba 3 compiled, squid-2.5 compiled.

 utils/ntlm_auth.c:manage_squid_ntlmssp_request(325)
   NTLMSSP NT_STATUS_ACCESS_DENIED

I'm working to make this easier to debug, and better documented.

You need to change the group ownership of the directory
'winbind_privileged_pipe_dir' in your LOCKDIR. (possibly
/var/lock/samba)

If you make that group owned by squid, it can then get to the 'special
things' that NTLMSSP authentication needs.  

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Guest Account - don't enter a password

2003-11-11 Thread Kurt Pfeifle
[Samba] Guest Account - don't enter a password

* To: samba at listsdotsambadotorg
* Subject: [Samba] Guest Account - don't enter a password
* From: Gabby James lizard092 at hotmaildotcom
* Date: Tue, 11 Nov 2003 14:39:03 -0700
Hello,

I am using samba 2.07-36 on a RedHat 7.1 linux system. I want to share a directory on my Linux system to various Windows operating systems (Windows 95, 98, 2000 etc).

In the shares definition section I have:
[MyShareDir]
  comment=My Shared Directoy on my Linux system
  path= /home/john
  public = yes
  writable = yes
  printable = no
  create mode = 0664
  directory mask = 0775
  browseable = yes
  guest ok = yes
  guest account = ftp
  guest only = yes
At a DOS prompt on a Windows 2000 machine, I type:
net use v:  \\10.2.2.2\MyShareDir
I get a message: The password or username is invalid for 10.2.2.2 then it prompts me for a username.
Your Win2000 client doesn't know anything about the settings of
your Samba server's smb.conf. (Unless you're logged into your
Win2000 as user ftp:) Your client will by default attempt to
the login to Samba with the current Win user name (john, james,
whatever). And of course, Samba rejects this user and prompts you
for another login
There are 2 possible solutions:

* You could add to your smb.conf's [global] section

 map to guest = bad user

  which will cause Samba silently to map to user ftp if Win2000
  supplies a bad user name like john or james. (NOTE that this
  will happen with all users and shares). Please read the explanations
  for the map to guest parameter in man smb.conf.
* simply change your DOS window command to read

 net use v:  \\10.2.2.2\MyShareDir /USER:ftp

  You can get more MS help hints by typing net help and net help use

Cheers,
Kurt

From reading about samba, I thought the guest account would login in user 
ftp and not prompt for a password since I have guest ok set to yes. Am I
wrong in that idea or is something just wrong with my setup?

Thanks


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Translation Dok to German, first file, deutsche bersetzung Der Samba Doku erste Datei

2003-11-11 Thread Stefan G. Weichinger
11. November 2003 22:58 you wrote:

AB I suspect you will still loose things.  I've not tried it (so I can't
AB say for sure), but that's my concern.  But any text editor will do very
AB nicely.  (And as the interest is in the translation, how it looks
AB on-screen or in output shouldn't matter till the end, when you generate
AB it up).

In the meantime it seems clear that using OpenOffice.org won´t make
anyone happy in this case. Personally I have no problems with editing
xml-stuff using vi. You are right at pointing out that output-issues
should not be overestimated when talking about translation-issues.

 - Would you recommend to just add a samba-german-docs-tree to the
 Samba-CVS and let the participating people access that subtree with
 rw-rights? I think this would simplify the whole process, right now we
 are discussing how and where to host that project.

AB A CVS tree is a good idea, but hosting on samba.org is rather
AB difficult.  If you can get a sourceforge (or similar) account, then you
AB will probably find it easier.

Why is it difficult to host that samba-german-docs-tree on samba.org?

Can you recommend or do you (or the Samba Team in general) prefer some
project-portal?

I take your words as given but have to say that it has to be kept in
mind that the volunteers in this translation-project don´t have the
experience in open-source-development and project-management the Samba
Team already has (and proves to have every day, as I think).

So I want to point to the fact that the difficulties resulting from
hosting the (still fictious) samba-german-docs-tree on samba.org may
be smaller than the difficulties generated by letting the few
volunteers start over this new project on another CVS.

If the Samba Team wants to keep non-english-docs separated from the
core-software-source-trees this seems logical to me from a
programmer´s view.

Please share your thoughts with us. The Samba project is far from the
start right now and deserves that people think about further steps
instead of just acting.

AB I don't speak a word of german (so I'm not quite sure why I'm in this
AB discussion at all :-) but I think we can get a reasonable process going.

 I am sure we will find a good solution to those starting problems.

AB I think this is starting to move in the right direction.

It does.

Stefan G. Weichinger
mailto:[EMAIL PROTECTED]



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] FreeBSD and Samba Windbind questions

2003-11-11 Thread Andrew Bartlett
On Wed, 2003-11-12 at 03:50, [EMAIL PROTECTED] wrote:

 5.What is the differnce between with winbind and 
with winbind-auth-challenge?

This is only an option in Samba 2.2, not 3.0, and controlled exposure of
an interface to winbind that could be argued as a security hole - if you
squinted right.  That is, it was something we didn't want to enable on
all systems - just on systems that needed it for squid interoperability.

In Samba 3.0, we fixed it by implementing an ACL mechanism, so we didn't
need to make it a compile-time on-or-off.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba 3.0 as DC and fileserver?

2003-11-11 Thread Stefan G. Weichinger
Alexander Lazarevich wrote 11. November 2003 22:49:

AL My question is this: is there anything bad about combining samba as a
AL domain controller and samba as a fileserver?

There is nothing bad about this AFAIK. Using Samba is good ;-)

AL Or should we have a samba DC
AL on one system, and the samba fileserver on a different system? I'm leaning
AL towards seperating the two systems, but I'd like a more concrete reason to
AL do so than a feeling.

Basically (and this is no Samba-related stuff) separating services
between hosts does help in performance- and tracking-issues.

You won´t have to look at your fileserver when searching for a
DC-related issue, for example.

On the other hand you get two
hosts/nics/controllers/kernels/patches/.../problems/... to maintain if you decide
to use two machines.

AL Any tips or ideas? Does samba 3.0 as a domain controller need a lot of
AL /etc/init.d/smb -stop and -starts? If so, then I don't want to put that on
AL our fileserver.

I don´t know that exactly, because I still don´t operate a Samba-PDC in
production-environments, but I don´t think that the smbd-daemon has to
be restarted all the time in normal DC-mode.

This would hurt basic UNIX/Linux-principles, as far as I understand them.

daemons are intended to run all the time.

Just restart them when you change something really important.

And smbd reads smb.conf every minute so why should it be
stopped/started all the time?

I think it depends on the size (number of clients/workstations) of
your network.

regards,
Stefan G. Weichinger
mailto:[EMAIL PROTECTED]



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] RE: winbindd panic daemon dies

2003-11-11 Thread Andrew Bartlett
On Wed, 2003-11-12 at 01:00, ww m-pubsyssamba wrote:
 Hi, 
 
   I haven't been able to work out how to capture the backtrace,
  I've installed winbind with debug compiled and also gdbm.

I hope you mean gdb - the GNU Debugger, not the database :-)

  I get the output shown below, what do I need to do next?

If you look in the manpage for smb.conf, you can setup a 'panic
action'.  This can do anything from popping up gdb in an xterm to
mailing you a backtrace.  

The example in the smb.conf is 

panic action = /bin/sleep 9

This makes winbind just hang in there, so you can attach the debugger

Then you can attach gdb in the normal way:

gdb /path/to/samba/winbind 2348

where 2348 is the pid of the near-dead winbindd.

Run 'bt full' and give us the result.

Andrew Bartlett
-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Likelihood of WINS Replication?

2003-11-11 Thread Andrew Bartlett
On Wed, 2003-11-12 at 06:39, Paul Creager wrote:
 My main interest in Samba is its use as a replacement for Microsoft WINS
 servers.  From what I've read, it looks to me like WINS replication is a low
 priority for the Samba team - is this observation correct?  What are the
 chances that Samba will be able to:
 
 A)  Replicate the WINS database from/to a Microsoft WINS server?
 or
 B)  Replicate the WINS database from/to another Samba server?
 
 Ideally, we would like to replace aging Microsoft WINS servers with new
 servers running RHEL 3 and Samba, provided there is some form of
 replication.  Thanks in advance for any input.

It's a matter of development time, and you are correct it is a low
priority.  We had a start on it in Samba 3.0, but it was never fully
decoded.  

Beside patches from some outside interested party, I have seen no
indications this is likely to change in the near future. 

Sorry,

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: AW: [Samba] my samba3+ldap+SSO plan

2003-11-11 Thread tbsky
 Well, your plan is interesting, but as you already recognized -
 multimaster
 LDAP servers are really hard to maintain and synchronize. Just think of
 consistency of your data? Of course, that would work only if you really
 know
 what attributes ( data ) you want to synchronize. But on the otherhand,
 you
 could access your HQ LDAP server only when you need data of other
 branches,
 and synchronize branches to one master server.

 That is only a though, not a solution :)

   yes, that's what i want to do. at first i think i can
config the HQ ldap server as slave, and ldap server at each
branch site as master. then i think if there exist ldap syncing
tool, then i can just make things simpler, cause i don't need
real time replication..

Best Regards,
tbsky




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] my samba3+ldap+SSO plan

2003-11-11 Thread Andrew Bartlett
On Wed, 2003-11-12 at 12:20, [EMAIL PROTECTED] wrote:
 although samba3 has PDC/BDC architechture, but it seems need a
  central
  wins server. and we don't need a browse list cross sites.
 
  No, this is not a requirement, as each site's 'PDC' can operate with
  reference to the central LDAP infrastructure, without netbios.
 
i see. thanks for the hint!! so just configure each samba
as PDC, right?

Yep. There is a small hitch in the way the replication works, I'll have
a patch in CVS fairly soon, so watch out for it and update before you
deploy.  The issue is about 'ldap rebind sleep' (we need to wait for our
local slave to catch up with the master, after we change the master).

 my concern is about machine account.i know client machine and server
  keep a shared seceret. but i don't know if this seceret will
 changing over time? or the seceret will keep staic?
 
  It changes over time, and the client will not contact the PDC to make
  that change.  It will ask the local DC it is connected to.
 
 and although openldap has replication feature, but multi-master
 replication seems experimental and hard to maintain.
 we don't need real time replication. are there existing tools for
 syncing entries between two ldap servers?
 
  You really should have one master LDAP server, and slaves for all the
  remote sites.  These slaves will only need to contact the master on
  machine account change, adding machines etc.
 
 but since the machine account password chagne over time, it
 allways need to talk to master LDAP, right? what happen if the
 wan link break?

How often does this happen?

In any case, it just fails, and the machine tries again later. 
Similarly if your users change their passwords or you do some admin
changes they will just need to just try later.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3 home dirs not going.

2003-11-11 Thread Andrew Bartlett
On Wed, 2003-11-12 at 12:45, [EMAIL PROTECTED] wrote:
 Hi all.
 
 Sorry for a long email, but I am really lost here and need to fix this ASAP.

You need to include logs and smb.conf, before the mailing list can
really help.  High level debug logs particularly - I assume you have
read them, and there isn't anything that stands out?

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] FreeBSD and Samba Windbind questions

2003-11-11 Thread Matt Pusateri
Thank You, It appears the Port maintained hasn't updated the Makefile

What about --with-utemp?

 Andrew Bartlett [EMAIL PROTECTED] 11/11/03 07:06PM 
On Wed, 2003-11-12 at 03:50, [EMAIL PROTECTED] wrote:

 5.What is the differnce between *with winbind and 
*with winbind-auth-challenge?

This is only an option in Samba 2.2, not 3.0, and controlled exposure of
an interface to winbind that could be argued as a security hole - if you
squinted right.  That is, it was something we didn't want to enable on
all systems - just on systems that needed it for squid interoperability.

In Samba 3.0, we fixed it by implementing an ACL mechanism, so we didn't
need to make it a compile-time on-or-off.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED] 
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED] 
Student Network Administrator, Hawker College   [EMAIL PROTECTED] 
http://samba.org http://build.samba.org http://hawkerc.net

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] FreeBSD and Samba Windbind questions

2003-11-11 Thread Andrew Bartlett
On Wed, 2003-11-12 at 13:50, Matt Pusateri wrote:
 Thank You, It appears the Port maintained hasn't updated the Makefile
 
 What about --with-utemp?

--with-utmp added support for modifying the 'utmp' and 'wtmp' files read
by utilities like 'w'.  It has also been enabled by default in 3.0

The 'utmp = yes' option in the smb.conf enables it, and it is described
in the manpage.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

CVS update: samba4/source/include

2003-11-11 Thread tridge

Date:   Tue Nov 11 07:56:59 2003
Author: tridge

Update of /home/cvs/samba4/source/include
In directory dp.samba.org:/tmp/cvs-serv31548

Modified Files:
smb_interfaces.h 
Log Message:
added 9 more info levels to lsa_QueryInfoPolicy




Revisions:
smb_interfaces.h1.11 = 1.12

http://www.samba.org/cgi-bin/cvsweb/samba4/source/include/smb_interfaces.h.diff?r1=1.11r2=1.12


CVS update: samba4/source/librpc/idl

2003-11-11 Thread tridge

Date:   Tue Nov 11 07:57:03 2003
Author: tridge

Update of /home/cvs/samba4/source/librpc/idl
In directory dp.samba.org:/tmp/cvs-serv31567

Modified Files:
lsa.idl 
Log Message:
added 9 more info levels to lsa_QueryInfoPolicy




Revisions:
lsa.idl 1.16 = 1.17

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/idl/lsa.idl.diff?r1=1.16r2=1.17


CVS update: samba4/source/librpc/ndr

2003-11-11 Thread tridge

Date:   Tue Nov 11 07:57:08 2003
Author: tridge

Update of /home/cvs/samba4/source/librpc/ndr
In directory dp.samba.org:/tmp/cvs-serv31583

Modified Files:
libndr.h ndr_basic.c ndr_lsa.c ndr_lsa.h ndr_sec.c 
Log Message:
added 9 more info levels to lsa_QueryInfoPolicy




Revisions:
libndr.h1.4 = 1.5

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/libndr.h.diff?r1=1.4r2=1.5
ndr_basic.c 1.11 = 1.12

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_basic.c.diff?r1=1.11r2=1.12
ndr_lsa.c   1.18 = 1.19

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_lsa.c.diff?r1=1.18r2=1.19
ndr_lsa.h   1.16 = 1.17

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_lsa.h.diff?r1=1.16r2=1.17
ndr_sec.c   1.3 = 1.4

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_sec.c.diff?r1=1.3r2=1.4


CVS update: samba/source/rpc_parse

2003-11-11 Thread jerry

Date:   Tue Nov 11 19:22:00 2003
Author: jerry

Update of /data/cvs/samba/source/rpc_parse
In directory dp.samba.org:/tmp/cvs-serv31508/rpc_parse

Modified Files:
  Tag: SAMBA_3_0
parse_misc.c 
Log Message:
fix crash bug due to empyrt munged dial string; patch from metze

Revisions:
parse_misc.c1.94.2.12 = 1.94.2.13

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_parse/parse_misc.c.diff?r1=1.94.2.12r2=1.94.2.13


CVS update: samba/source/rpc_parse

2003-11-11 Thread jerry

Date:   Tue Nov 11 19:22:44 2003
Author: jerry

Update of /data/cvs/samba/source/rpc_parse
In directory dp.samba.org:/tmp/cvs-serv31626/rpc_parse

Modified Files:
parse_misc.c 
Log Message:
fix crash bug due to empyrt munged dial string; patch from metze

Revisions:
parse_misc.c1.116 = 1.117

http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_parse/parse_misc.c.diff?r1=1.116r2=1.117


CVS update: sambaweb/GUI

2003-11-11 Thread mimir

Date:   Tue Nov 11 23:19:37 2003
Author: mimir

Update of /home/cvs/sambaweb/GUI
In directory dp.samba.org:/tmp/cvs-serv29520

Modified Files:
index.html 
Log Message:
New item on GUI interfaces list. Curses-based 'Simple Samba Commander'
written in Perl by Rafal Michniewicz [EMAIL PROTECTED]


mimir



Revisions:
index.html  1.27 = 1.28

http://www.samba.org/cgi-bin/cvsweb/sambaweb/GUI/index.html.diff?r1=1.27r2=1.28


CVS update: samba/source

2003-11-11 Thread tridge

Date:   Wed Nov 12 01:01:48 2003
Author: tridge

Update of /home/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv10307

Modified Files:
  Tag: SAMBA_3_0
Makefile.in 
Log Message:
added support for make pch to build a precompiled header. Note that
this is not called by default and I don't think it should be - I think
the programmer should specifically ask for pch generation when they
want it.



Revisions:
Makefile.in 1.468.2.194 = 1.468.2.195

http://www.samba.org/cgi-bin/cvsweb/samba/source/Makefile.in.diff?r1=1.468.2.194r2=1.468.2.195


CVS update: samba/source/include

2003-11-11 Thread tridge

Date:   Wed Nov 12 01:50:57 2003
Author: tridge

Update of /home/cvs/samba/source/include
In directory dp.samba.org:/tmp/cvs-serv16663

Modified Files:
  Tag: SAMBA_3_0
printing.h 
Log Message:
a small include file rearrangement that doesn't affect normal
compilation, but that allows Samba3 to take advantage of pre-compiled
headers in gcc if available.


Revisions:
printing.h  1.9.2.4 = 1.9.2.5

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/printing.h.diff?r1=1.9.2.4r2=1.9.2.5


CVS update: samba/source/nsswitch

2003-11-11 Thread tridge

Date:   Wed Nov 12 01:51:04 2003
Author: tridge

Update of /home/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv16677

Modified Files:
  Tag: SAMBA_3_0
winbindd.c winbindd.h winbindd_acct.c winbindd_ads.c 
winbindd_cache.c winbindd_cm.c winbindd_dual.c 
winbindd_group.c winbindd_misc.c winbindd_pam.c winbindd_rpc.c 
winbindd_sid.c winbindd_user.c winbindd_util.c winbindd_wins.c 
Log Message:
a small include file rearrangement that doesn't affect normal
compilation, but that allows Samba3 to take advantage of pre-compiled
headers in gcc if available.


Revisions:
winbindd.c  1.55.2.44 = 1.55.2.45

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd.c.diff?r1=1.55.2.44r2=1.55.2.45
winbindd.h  1.33.2.14 = 1.33.2.15

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd.h.diff?r1=1.33.2.14r2=1.33.2.15
winbindd_acct.c 1.1.2.7 = 1.1.2.8

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_acct.c.diff?r1=1.1.2.7r2=1.1.2.8
winbindd_ads.c  1.43.2.26 = 1.43.2.27

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_ads.c.diff?r1=1.43.2.26r2=1.43.2.27
winbindd_cache.c1.35.2.19 = 1.35.2.20

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_cache.c.diff?r1=1.35.2.19r2=1.35.2.20
winbindd_cm.c   1.31.2.42 = 1.31.2.43

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_cm.c.diff?r1=1.31.2.42r2=1.31.2.43
winbindd_dual.c 1.3.2.8 = 1.3.2.9

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_dual.c.diff?r1=1.3.2.8r2=1.3.2.9
winbindd_group.c1.51.2.25 = 1.51.2.26

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_group.c.diff?r1=1.51.2.25r2=1.51.2.26
winbindd_misc.c 1.22.2.15 = 1.22.2.16

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_misc.c.diff?r1=1.22.2.15r2=1.22.2.16
winbindd_pam.c  1.44.2.28 = 1.44.2.29

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_pam.c.diff?r1=1.44.2.28r2=1.44.2.29
winbindd_rpc.c  1.25.2.18 = 1.25.2.19

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_rpc.c.diff?r1=1.25.2.18r2=1.25.2.19
winbindd_sid.c  1.12.2.11 = 1.12.2.12

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_sid.c.diff?r1=1.12.2.11r2=1.12.2.12
winbindd_user.c 1.43.2.20 = 1.43.2.21

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_user.c.diff?r1=1.43.2.20r2=1.43.2.21
winbindd_util.c 1.73.2.36 = 1.73.2.37

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_util.c.diff?r1=1.73.2.36r2=1.73.2.37
winbindd_wins.c 1.4.2.6 = 1.4.2.7

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_wins.c.diff?r1=1.4.2.6r2=1.4.2.7


CVS update: samba/source/printing

2003-11-11 Thread tridge

Date:   Wed Nov 12 01:51:10 2003
Author: tridge

Update of /home/cvs/samba/source/printing
In directory dp.samba.org:/tmp/cvs-serv16693

Modified Files:
  Tag: SAMBA_3_0
notify.c print_cups.c print_generic.c printing.c printing_db.c 
Log Message:
a small include file rearrangement that doesn't affect normal
compilation, but that allows Samba3 to take advantage of pre-compiled
headers in gcc if available.


Revisions:
notify.c1.3.2.18 = 1.3.2.19

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/notify.c.diff?r1=1.3.2.18r2=1.3.2.19
print_cups.c1.17.2.7 = 1.17.2.8

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/print_cups.c.diff?r1=1.17.2.7r2=1.17.2.8
print_generic.c 1.12.2.3 = 1.12.2.4

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/print_generic.c.diff?r1=1.12.2.3r2=1.12.2.4
printing.c  1.139.2.37 = 1.139.2.38

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/printing.c.diff?r1=1.139.2.37r2=1.139.2.38
printing_db.c   1.2.2.3 = 1.2.2.4

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/printing_db.c.diff?r1=1.2.2.3r2=1.2.2.4


CVS update: samba4/source/librpc/idl

2003-11-11 Thread tridge

Date:   Wed Nov 12 05:34:15 2003
Author: tridge

Update of /home/cvs/samba4/source/librpc/idl
In directory dp.samba.org:/tmp/cvs-serv11062

Modified Files:
lsa.idl 
Log Message:
lsa_PrivilegeSet seems to be a very strange beast indeed. It has a
constant sized array of size 1 at the end?


Revisions:
lsa.idl 1.17 = 1.18

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/idl/lsa.idl.diff?r1=1.17r2=1.18


CVS update: samba4/source/librpc/ndr

2003-11-11 Thread tridge

Date:   Wed Nov 12 05:34:21 2003
Author: tridge

Update of /home/cvs/samba4/source/librpc/ndr
In directory dp.samba.org:/tmp/cvs-serv11079

Modified Files:
libndr.h ndr.c ndr_basic.c ndr_lsa.c ndr_lsa.h 
Log Message:
lsa_PrivilegeSet seems to be a very strange beast indeed. It has a
constant sized array of size 1 at the end?


Revisions:
libndr.h1.5 = 1.6

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/libndr.h.diff?r1=1.5r2=1.6
ndr.c   1.6 = 1.7

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr.c.diff?r1=1.6r2=1.7
ndr_basic.c 1.12 = 1.13

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_basic.c.diff?r1=1.12r2=1.13
ndr_lsa.c   1.19 = 1.20

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_lsa.c.diff?r1=1.19r2=1.20
ndr_lsa.h   1.17 = 1.18

http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/ndr/ndr_lsa.h.diff?r1=1.17r2=1.18


CVS update: sambaweb/support

2003-11-11 Thread Martin Pool

Date:   Wed Nov 12 06:23:01 2003
Author: mbp

Update of /data/cvs/sambaweb/support
In directory dp.samba.org:/tmp/cvs-serv16445

Modified Files:
singapore.html 
Log Message:
Add Artocol Systems


Revisions:
singapore.html  1.1 = 1.2

http://www.samba.org/cgi-bin/cvsweb/sambaweb/support/singapore.html.diff?r1=1.1r2=1.2