Re: Proposed patch for DNS and name resolution related problems in appliance branch

2002-07-01 Thread Tim Potter
OK I've been working at this a bit more and have come up with some performance modifications: - Only cache the #1b and #1c names for a very short period of time (say 10 seconds) as these names can change quickly especially if they are stored on a WINS server. - If a cli_connect() fai

Re: Proposed patch for DNS and name resolution related problems inappliance branch

2002-07-01 Thread Tim Potter
On Mon, Jul 01, 2002 at 11:37:17AM +0300, Toomas Soome wrote: > Please keep in mind that there is ns cache on some platforms already > (solaris nscd etc), so this feature should be possible to be switched > off. Good point. I'll add that to the feature list. Tim.

Re: [Security Problem] --with-tdbsam

2002-07-01 Thread Tim Potter
On Mon, Jul 01, 2002 at 03:27:02PM -0700, Jeremy Allison wrote: > > Please examine this security problem and take measures to be necessary. > > Ok - in conversation with tridge we don't think this is an exploitable > hole. If you believe otherwise can you please mail [EMAIL PROTECTED] > with ful

Re: [Security Problem] --with-tdbsam

2002-07-01 Thread Jeremy Allison
On Mon, Jul 01, 2002 at 09:39:46PM +0900, Yasuma Takeda wrote: > > In Samba-JP, "buffer overflow" problem was reported. > > If samba is configured with "--with-tdbsam", init_sam_from_buffer function > contains a buffer overflow vulnerability. > > In a certain case, user can use this vulnerabili

Re: [Security Problem] --with-tdbsam

2002-07-01 Thread Jeremy Allison
On Mon, Jul 01, 2002 at 02:08:03PM -0700, Jeremy Allison wrote: > > Can you send more details please to [EMAIL PROTECTED], and CC: > [EMAIL PROTECTED] > > I don't immediately see the problem this patch is fixing and need to > understand it before I can apply it. Never mind - I see the problem n

Re: [Security Problem] --with-tdbsam

2002-07-01 Thread Jeremy Allison
On Mon, Jul 01, 2002 at 09:39:46PM +0900, Yasuma Takeda wrote: > > In Samba-JP, "buffer overflow" problem was reported. > > If samba is configured with "--with-tdbsam", init_sam_from_buffer function > contains a buffer overflow vulnerability. > > In a certain case, user can use this vulnerabili

Re: PATCH: context based libsmbclient (85K attachment)

2002-07-01 Thread Richard Sharpe
On Sun, 23 Jun 2002, Tom Jansen wrote: > [snip changes suggested] > > Fixed. Attached is the patch. (complete one again) I have applied this patch with a few minor corrections to Samba-2.2.x. I had to write a couple of extra compatibility functions, and had to apply much of the patch by hand.

RE: sessionid.tdb missing after build and client read failutre

2002-07-01 Thread Richard Sharpe
On Mon, 1 Jul 2002, David Shapiro wrote: > Thanks. Any idea on why wbinfo -t fails? Is it related to sessionid.tdb > missing? How do I get this file? I did remove myself from INS domain and > rejoined again. Typically that fails because you have not joined the domain properly, or you cannot

RE: sessionid.tdb missing after build and client read failutre

2002-07-01 Thread David Shapiro
Thanks. Any idea on why wbinfo -t fails? Is it related to sessionid.tdb missing? How do I get this file? I did remove myself from INS domain and rejoined again. David -Original Message- From: Richard Sharpe [mailto:[EMAIL PROTECTED]] Sent: Monday, July 01, 2002 12:08 PM To: David Sha

Re: sessionid.tdb missing after build and client read failutre

2002-07-01 Thread Richard Sharpe
On Mon, 1 Jul 2002, David Shapiro wrote: > Hello, > > The latest samba head as of 6/30/02 seems to not provide sessionid.tdb and > gives me the following errors: > > I see this information in the log: > > 6/28 16:35:59, 3] nsswitch/winbindd_misc.c:winbindd_check_machine_acct(91) > secret is

RE: Default ACL dosn't work

2002-07-01 Thread Noel Kelly
yes i can see what you are getting at. we got around the group assignment by using the 'force group' parameter but this is more of a work around than a true ACL interpretation. -Original Message- From: Nieminen, Jooel [mailto:[EMAIL PROTECTED]] Sent: 01 July 2002 09:46 To: Noel Kelly; [E

RE: Samba and Netatalk

2002-07-01 Thread Esh, Andrew
Title: RE: Samba and Netatalk Last time I looked at that code (two weeks ago?) in the 2.2 branch, it wasn't being called anywhere. -Original Message- From: Max Bidlingmaier [mailto:[EMAIL PROTECTED]] Sent: Monday, July 01, 2002 5:30 AM To: [EMAIL PROTECTED] Subject: Samba and Netatal

NT permissions

2002-07-01 Thread guy roussin
[Sorry, i post this message on samba list last week but without success] Hello, I try to use NT permissions on 2 Sun Solaris with ACL and samba 2.2.5. I configure samba --with-acl. I can modify permissions on the PDC (security = USER). But on the other one (XYZ) (security = SERVER and password s

RE: Proposed patch for DNS and name resolution related problemsinappliance branch

2002-07-01 Thread Mike Gerdts
On Mon, 2002-07-01 at 09:38, Mike Gerdts wrote: > But... that begs the question, why not just use gethostbyname()? This > way it will get resolved out of /etc/hosts, NIS, LDAP, DNS, etc., and > nscd will take care of it. nscd exists on Solaris, Linux, and should be > available anywhere else that

RE: Proposed patch for DNS and name resolution related problemsinappliance branch

2002-07-01 Thread Mike Gerdts
On Mon, 2002-07-01 at 04:37, Toomas Soome wrote: > > Please keep in mind that there is ns cache on some platforms already > (solaris nscd etc), so this feature should be possible to be switched > off. > > toomas nscd only comes into play when get*by*() routines (e.g. gethostbyname()) are used.

[Security Problem] --with-tdbsam

2002-07-01 Thread Yasuma Takeda
In Samba-JP, "buffer overflow" problem was reported. If samba is configured with "--with-tdbsam", init_sam_from_buffer function contains a buffer overflow vulnerability. In a certain case, user can use this vulnerability by changing his password. Please examine this security problem and take m

RE: (no subject)

2002-07-01 Thread Ulf Bertilsson
> On Mon, 2002-07-01 at 11:42, Ulf Bertilsson wrote: > > An dummy "desktop.ini" and some generic cached fileid to show > > fancy icons would be nice, but brake stuff. > > I would not make that. I know, it don't make sence but the idea would provide great preformance. Like, my os don't multiuser

sessionid.tdb missing after build and client read failutre

2002-07-01 Thread David Shapiro
Hello, The latest samba head as of 6/30/02 seems to not provide sessionid.tdb and gives me the following errors: I see this information in the log: 6/28 16:35:59, 3] nsswitch/winbindd_misc.c:winbindd_check_machine_acct(91) secret is good [2002/06/28 16:35:59, 5] nsswitch/winbindd_misc.c:winb

Re: Smbpasswd

2002-07-01 Thread Simo Sorce
Have you transfered also the (/etc[/samba/]/)smbpasswd file? Is it a domain? In this case have you copied over MACHINE.SID / secrets.tdb files? On Mon, 2002-07-01 at 14:04, kelvin wrote: > Hi, > > I am in the process of tranfering my samba users(around 150) from a > Redhat6.1 server to a new Red

Smbpasswd

2002-07-01 Thread kelvin
Hi, I am in the process of tranfering my samba users(around 150) from a Redhat6.1 server to a new Redhat7.3 server. I have successfully tranfered the smbusers file to the new 7.3 server.I have also tranfered over the passwd file,group file and shadow file over successfully.Now, my users are not a

Samba and Netatalk

2002-07-01 Thread Max Bidlingmaier
Hi! I've got a Problem with the interaction between Samba and Netatalk. I compiled Samba with the --with_netatalk option for configure. I thought it should create the correct files in .AppleDouble but it doesn't. Can anybody help me with this? greets max bidlingmaier

RE: (no subject)

2002-07-01 Thread Simo Sorce
On Mon, 2002-07-01 at 11:42, Ulf Bertilsson wrote: > An dummy "desktop.ini" and some generic cached fileid to show > fancy icons would be nice, but brake stuff. I would not make that. > > Then my os allow many strange filenames, how should that be dealt with ? We check if the filename is OK (d

RE: (no subject)

2002-07-01 Thread Ulf Bertilsson
> I may think of a special option, to do that, but I do no > think we should do that by default. I have learned that samba should report the files no mater sanity. I had simular ideas to speed up things by i.e emulating explorer web view thing. Turning of "web view" speeds up things dramatic on

Re: smbd

2002-07-01 Thread David Lee
On Fri, 28 Jun 2002, Lupscha, Franc (AU - Sydney) wrote: > I am running Samba 2.2.2 on SUN SPARC Solaris 8 (feb 2002) with all the > latest patches. > Samba appears to be running fine except that I get the following appearing > in the "log.smbd" file . > > " yield_connection: tdb_delete for nam

VS: Default ACL dosn't work

2002-07-01 Thread Nieminen, Jooel
I'm using bestbits ACL-patch too. got exchausted with the xfs. about samba picking the acl, yes it did pick it up. there is no other problem than making the default work. even if I manually locally make some domain group to be the default instead of domain users samba sets it to be "domain users

RE: Proposed patch for DNS and name resolution related problems inappliance branch

2002-07-01 Thread Toomas Soome
Please keep in mind that there is ns cache on some platforms already (solaris nscd etc), so this feature should be possible to be switched off. toomas > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Simo Sorce > Sent: Monday, July 01, 2002 11:0

Re: Proposed patch for DNS and name resolution related problems inappliance branch

2002-07-01 Thread Simo Sorce
On Mon, 2002-07-01 at 03:55, Tim Potter wrote: > I know Jeremy initially wasn't keen on the resolve/retry stuff going in > to HEAD but maybe in the context of optimising name resolution he will > change his mind. (-: > I heartedly agree. We need some kind of DNS caching both of positive and ne

RE: Default ACL dosn't work

2002-07-01 Thread Noel Kelly
I had the default ACLs working fine with Samba - but I was using the ACL patches from bestbits not XFS. I tried XFS also but had a lot of problems creating a default ACL at all! Eventual solution was to upgrade the ACL utilities to the latest version but after I also had some disk corruption with