Re: [PATCH] Password Locked Account Control

2002-07-12 Thread Andrew Bartlett
Patrick McCarty wrote: > > Attached is a patch against HEAD that provides the 'P' option for > acctFlags. Can you please verify that this is the correct bit to set? Rember, MS defines them - so we should check. Ethereal should be able to show you. > I havent been able to test this yet, so use

[PATCH] Password Locked Account Control

2002-07-12 Thread Patrick McCarty
Attached is a patch against HEAD that provides the 'P' option for acctFlags. I havent been able to test this yet, so use with care. Ideally, this would eventually set the "user cannot change password" bit to the client, but as Andrew mentioned, this hasnt been fully implemented, and I'm not c

Re: Two diffs to add paramater self-checking

2002-07-12 Thread Andrew Bartlett
David Collier-Brown wrote: > > These are for param/loadparm.c and utils/testparm.c, respectively, > to put in the self-checking that's been languishing... My comments apply to HEAD, btw - which branch was the patch intended for? > After these go in, I'll start tracking smb.conf changes > again,

Re: Status Codes (and OS/2 error codes)

2002-07-12 Thread Steven French
>The SNIA doc says similar things about DOS LM1.2X002 vs. LM1.2X002 and DOS >LANMAN2.1 vs. LANMAN2.1, particularly that with the DOS dialects the OS/2 >codes had to be mapped to DOS codes. So if the OS/2 codes are a >superset... It would be interesting to see the mappings. Chris, The OS/2 Erro

Quick Capabilities field question.

2002-07-12 Thread Christopher R. Hertel
I think I've got this figured, but someone let me know if'n I've got it sidewards. The server sends its Capabilities data in the NegProt respoinse, and then the client replies with its Capabilities in the SESSION_SETUP_ANDX. The two values are ANDed... and the result is the agreed upon behavi

Re: Status Codes (and OS/2 error codes)

2002-07-12 Thread Christopher R. Hertel
On Thu, Jul 11, 2002 at 03:01:34PM -0500, Steven French wrote: > OS/2 had 16 bit errors - basically the ERRdos range (SMB error class) is > mostly error codes introduced in OS/2 development and could be just as > easily named "ERRos2" The old X/Open doc says (in its description of availabel diale

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Tim Potter
On Sat, Jul 13, 2002 at 06:23:38AM +0930, Richard Sharpe wrote: > > Nope. There's a challenge sent by either the server and then the client > > produces a LM and NT response which is a hash of the challenge and the > > user's password. This is sent to the server (in this case winbindd) for >

Re: 32 security group limitation ?

2002-07-12 Thread Jim McDonough
>Possibly that Linux allows a user to be in a max of 32 groups? Yes, this is the limit. Look in your kernel source at include/asm/param.h for NGROUPS. Jim McDonough IBM Linux Technology Center Samba Team 6 Minuteman Drive Scarborough, ME 04074 USA [EMAIL PROTECTED]

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Richard Sharpe
On Fri, 12 Jul 2002, Tim Potter wrote: > On Sat, Jul 13, 2002 at 04:47:17AM +0930, Richard Sharpe wrote: > > It's actually NTLMSSP base-64 encoded in http headers. > > > There has been much discussion about this on this list and on > > #samba-technical and it may already be possible or close t

Re: 32 security group limitation ?

2002-07-12 Thread Jim McDonough
>> Is there, was there ever such a limith ? >> I was called by an larger ISP here. >> >> "Samba server Unix only handles 32 security groups" he claimed. >> >> Anyone sheer some lights ? > >Possibly that Linux allows a user to be in a max of 32 groups? > >Do you have more info? I've got a customer

Re: winbindd architecture

2002-07-12 Thread Christopher R. Hertel
On Sat, Jul 13, 2002 at 04:21:47AM +0930, Richard Sharpe wrote: : > > > We have to node status to get the *name* of the PDC, becouse the > > > NETLOGON RPC requires that. Windows machines to a NETLOGON Mailslot > > > message, but we don't do that at present. > > > > So you join the domain withou

Kerberos with Samba 3.0 alpha9

2002-07-12 Thread Vijay Kota
Hi all, First off, apologies if this is the wrong forum or the message is a repeat.   I have Samba set up to join a realm. Most of the time, my Win2k client gets authenticated as follows:     1. Client sends NTLMSSP_NEGOTIATE     2. Samba sends back NTLMSSP_CHALLENGE  

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Alexander Bokovoy
On Fri, Jul 12, 2002 at 07:44:24PM +0200, Johann Hanne wrote: > Short version: > -- > Can anybody tell me if there are hooks in Samba that make it possible > to use it in conjunction with an apache module for HTTP-based > NTLM-authentication? Yes, there are such hooks. You can look a

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Steve Langasek
On Sat, Jul 13, 2002 at 04:47:17AM +0930, Richard Sharpe wrote: > > Short version: > > -- > > Can anybody tell me if there are hooks in Samba that make it possible > > to use it in conjunction with an apache module for HTTP-based > > NTLM-authentication? > > Long version: > > --

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Tim Potter
On Sat, Jul 13, 2002 at 04:47:17AM +0930, Richard Sharpe wrote: > > The whole thing is based on the authentication used by any SMB client that > > connects to a SMB server: > > - The client connects to the server > > - The server generates and sends some random bytes (challenge) > > - The client

Two diffs to add paramater self-checking

2002-07-12 Thread David Collier-Brown
These are for param/loadparm.c and utils/testparm.c, respectively, to put in the self-checking that's been languishing... After these go in, I'll start tracking smb.conf changes again, so I can support them, any you can delete samba-patches 298 (Self-check patches for 2.2.0 alpha 3, 11 Apr 2001

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Richard Sharpe
On Fri, 12 Jul 2002, Johann Hanne wrote: > > Hi folks, > > Short version: > -- > Can anybody tell me if there are hooks in Samba that make it possible > to use it in conjunction with an apache module for HTTP-based > NTLM-authentication? > > Long version: > - > Intern

Re: 32 security group limitation ?

2002-07-12 Thread Richard Sharpe
On Fri, 12 Jul 2002, Ulf Bertilsson wrote: > Is there, was there ever such a limith ? > I was called by an larger ISP here. > > "Samba server Unix only handles 32 security groups" he claimed. > > Anyone sheer some lights ? Possibly that Linux allows a user to be in a max of 32 groups? Do you

Re: winbindd architecture

2002-07-12 Thread Richard Sharpe
On Thu, 11 Jul 2002, Christopher R. Hertel wrote: > On Fri, Jul 12, 2002 at 10:44:54AM +1000, Andrew Bartlett wrote: > > "Christopher R. Hertel" wrote: > > > > > Anyway, if the unexpected.tdb is the reason that winbindd needs nmbd, then > > > I think it could be made optional. I imagine that wi

Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Johann Hanne
Hi folks, Short version: -- Can anybody tell me if there are hooks in Samba that make it possible to use it in conjunction with an apache module for HTTP-based NTLM-authentication? Long version: - Internet Explorer can authenticate against a Web-Server using the so-ca

Determining client IP address in failed connections

2002-07-12 Thread Xavi Serrano
Hello all, Anyone knows if there is an easy way to determine the IP address of a client who is trying to connect unsuccessfully? The client is providing an invalid login name. The error logs are like these: [2002/07/12 09:28:18, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'foo' i

32 security group limitation ?

2002-07-12 Thread Ulf Bertilsson
Is there, was there ever such a limith ? I was called by an larger ISP here. "Samba server Unix only handles 32 security groups" he claimed. Anyone sheer some lights ? -- You are not your system specs.

Re: smbmount with big file sizes

2002-07-12 Thread Giulio Orsero
On Thu, 11 Jul 2002 22:14:17 +0530, root <[EMAIL PROTECTED]> wrote: >Finally it has been working out the box. Now i am able to rsync the data more than >4GB files as well. >But during boot time i gets some error message of this kind. ># >/lib/ext3.o: unresolved symbol iget4_R7414451b >/lib/e

Some fixes applied to cifs-load-gen for NetApp plus etc

2002-07-12 Thread Richard Sharpe
Hi, I have applied some fixed to get rid of warnings, plus it now plays nice against NetApp, and you can now specify a path to add to all paths that are sent to the server. NetApp is the most picky filer I have seen. It demands share names of the form \\server\share in a TconX, where Windows

Re: winbindd architecture

2002-07-12 Thread Christopher R. Hertel
On Fri, Jul 12, 2002 at 10:44:54AM +1000, Andrew Bartlett wrote: > "Christopher R. Hertel" wrote: > > > Anyway, if the unexpected.tdb is the reason that winbindd needs nmbd, then > > I think it could be made optional. I imagine that winbindd would be > > sending regular name queries in order to