[Samba] 2K/ME/XP Connectivity more info
Further to this I was able finally test with Win98se with the same results though watching the clock this time shows that there was no timeout errors not at least within a 10minute period!!! Since the site has decided against using XP I decide to roll-back to 2.2.0a which is the default for Slackware 8.0 Now all PC's can access the server again was problems As a side note this isn't the first time I've installed from sources the last was a update from 2.2.0a to 2.2.3a to resolv the printer driver install bug that existed with Win2k(I think) To date I've had no major problems since kernel 1.2.8!!! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Fwd: Re: [Samba] Setting up share permission
Hi Fahmi, Fahmi Mohamed [EMAIL PROTECTED] schrieb am 05.06.02: I would like to create a share that has read access for groupA, read/write access for groupB. No access to anyone else. how about valid users = @groupA, @groupB writeable = no write list = @groupB der tom [fli4l-team] http://www.fli4l.de http://www.eisfair.org __ All inclusive! 100 MB Speicher, SMS 50% günstiger, 32 MB Attachment-Größe, Preisvorteile und mehr unter http://club.web.de/?mc=021104 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and Win98
I am trying to get samba to work with win98se. I have my smb.conf configured correctly (or so I've been told by two people who have it working for them) I am having the apparently common problem of linux not accepting my password due to win98 using encrypted passwords and Linux not using them. I have encypted passwords = yes in my smb.conf. I have altered my registry to use plain text passwords and it still doesn't work. Any suggestions?? I am running Redhat 7.3 My Samba version is: 2.2.3a-6 Please help. Thanks, Parrish -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Request on Samba directories
Hi I have made a 2 shared directories on my Samba Server, then I have made the one read only and the other one access to a spesific user, but now I want to hide the one directory so that only that user can see it. How do I do that . Thanks Schalk -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbind: NT_STATUS_INVALID_PARAMETER
Hi, I'm running a linux RedHat 7.2 box with samba 2.2.4. I want to use winbind for authentification. The samba server is a member server in a W2K domain. I followed the steps in the winbind help which comes with the samba distribution (http://localhost:901/swat/help/winbind.html). Joining the domain was successfull: $ smbpasswd -j DOMAIN -r PDC -U toto | INFO: Debug class all level = 100 (pid 3643 from pid 3643) | Password: | Joined domain DOMAIN. and wbinfo -t returnes secret is good: $ wbinfo -t | Secret is good wbinfo -u and wbinfo -g shows the domain users and groups. getent passwd and getent group show both local and win2k unix users and groups. When I try to log into the linux samba box with a valid win2k account I get the following error in log file /var/log/messages: | Jun 5 11:36:34 lima pam_winbind[15139]: request failed, PAM error was 4, NT error was | NT_STATUS_INVALID_PARAMETER | Jun 5 11:36:34 lima pam_winbind[15139]: internal module error (retval = 4, user = | `toto' | Jun 5 11:36:34 lima login(pam_unix)[15139]: check pass; user unknown | Jun 5 11:36:34 lima login(pam_unix)[15139]: authentication failure; logname=LOGIN | uid=0 euid=0 tty=tty1 ruser= rhost= | Jun 5 11:36:40 lima login(pam_unix)[15139]: check pass; user unknown | Jun 5 11:36:42 lima login[15139]: FAILED LOGIN 1 FROM (null) FOR toto, | Authentication failure $ wbinfo -a stoto%passworrd | plaintext password authentication failed | error code was NT_STATUS_INVALID_PARAMETER (0xc00d) | Could not authenticate user toto%password with plaintext password | challenge/response password authentication succeeded | error code was NT_STATUS_OK (0x0) $ tail -f log.winbind | [2002/06/05 12:12:56, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth(118) | Plain-text authenticaion for user toto returned NT_STATUS_INVALID_PARAMETER | (PAM: 4) My smb.conf file contains the following lines: - [global] workgroup = DOMAIN netbios name = LIMA server string = Linux with Samba (%v) on %L wins server = x.x.x.x security = domain password server = PDC message command = csh -c 'xedit %s; rm %s' # password encrypt passwords = Yes unix password sync = Yes passwd program = /usr/bin/passwd %u passwd chat = *new*password* %n\n *new*password* %n\n *success* passwd chat debug = Yes # users invalid users = root bin daemon adm sync shutdown \ halt mail news uucp operator gother # # winbind # # separate domain and username with '+', like DOMAIN+username winbind separator = + # use uids from 1 to 2 for domain users winbind uid = 1-2 # use gids from 1 to 2 for domain groups winbind gid = 1-2 # allow enumeration of winbind users and groups winbind enum users = yes winbind enum groups = yes # give winbind users a real shell (only needed if they have telnet access) template homedir = /home/win2k/%D/%U template shell = /bin/bash # # log config # log level = 2 log file = /var/log/samba.log - As you can see, the 'encrypt passwords' option is set to yes. Here is the /etc/pam.d/login file content: - #%PAM-1.0 auth required /lib/security/pam_securetty.so auth sufficient /lib/security/pam_winbind.so auth sufficient /lib/security/pam_unix.so use_first_pass auth required /lib/security/pam_stack.so service=system-auth auth required /lib/security/pam_nologin.so accountsufficient /lib/security/pam_winbind.so accountrequired /lib/security/pam_stack.so service=system-auth password required /lib/security/pam_stack.so service=system-auth sessionrequired /lib/security/pam_stack.so service=system-auth sessionoptional /lib/security/pam_console.so - I've compiled samba with the following options: --with-smbwrapper --with-automount --with-smbmount --with-pam --with-pam_smbpass --with-ssl --with-quotas --with-acl-support --with-ldapsam --with-syslog Any idea about how to solve this issue ? Any help would be greatly appreciated. Thanks. Sabrina IT engineer France - Powered by Alinto (http://www.alinto.net) for lavache.com (http://www.lavacheautomatique.com) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How are people managing startup/shutdown of winbindd?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Message: 22 | Date: Mon, 3 Jun 2002 16:37:58 -0500 (CDT) | From: Gerald Carter [EMAIL PROTECTED] | To: Manuel Gomez [EMAIL PROTECTED] | Cc: '[EMAIL PROTECTED]' [EMAIL PROTECTED] | Subject: Re: [Samba] How are people managing startup/shutdown of winbindd? | | On Mon, 3 Jun 2002, Manuel Gomez wrote: | I realize many people will never use winbindd, and thus it will likely not | get included in /etc/init.d/samba (on my Debian system; your file may vary) | by default, so another solution seems in order. | | It's not as important to be able to start and stop winbindd now that it's | getting more robust, but I'd still like something. | | How are y'all out there in Samba land handling this? | | | See packaging/RedHat/smb.init in the latest SAMBA_2_2 cvs tree. This assumes that people must use samba if they want to use winbind? There are applications of winbind (for example, I am putting in a linux/winbind mail server to replace Mercury mail running on the win2k dc, but have no need for sharing files) where smbd is not needed. For an alternative implementation, see packaging/Mandrake/winbind.init (in 2.2.2, 2.2.3a or 2.2.4, seems it's disappeared from cvs). This starts up and shuts down nmbd with winbindd if smbd is not running. (Jerry, it seems this file is in the Attic in current samba_2_2 cvs, any good reason? I haven't gotten around to testing packaging of samba cvs for Mandrake yet ...): http://cvs.samba.org/cgi-bin/cvsweb/samba/packaging/Mandrake/Attic/winbind.init?rev=1.1.4.1content-type=text/x-cvsweb-markuponly_with_tag=release-2-2-4 - -- |Registered Linux User #182071-| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x202 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE8/epBrJK6UGDSBKcRAg3XAJ46td17J39zxtBS05R6AFnV3ddDogCgiToh ZVrAgzWM1HsXgAjVXBNC9XU= =OlL8 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Printing to Sambaprinter
Hello I have set up a Faxserver on my network, i use Samba and Hylafax. When a user prints his/her document to the samba printer the printer runs a script called SambaFax that extracts the faxnumber from the fax and then sends it to HylaFax. But i can't get the samba to get the real owner of the document instead it gets owner lp. Anyone knows how to handle this to get the real owner. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbpasswd not found...
Hello. We are running samba-2.2.2 on a SunOS 5.7 sparc server, as a PDC. A few minutes ago, users could not log in workstations/servers with errors like 'Domain not available' during 5-10 minutes...I checked the log files, and found something really strange : log.chaillol: startsmbfilepwent_internal: unable to open file /opt/samba-2.2.2/private/smbpasswd. Error was No such file or directory log.chaillol:[2002/06/05 13:51:01, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1368) log.chaillol:[2002/06/05 13:51:01, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(171) log.chaillol: startsmbfilepwent_internal: unable to open file /opt/samba-2.2.2/private/smbpasswd. Error was No such file or directory log.chaillol:[2002/06/05 13:51:01, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1368) So Samba was unable to find this smbpasswd file...But it is still there. It did not change since 3 days. Now, everything is running fine, but I wonder what happenned. Any idea ? Thanks in advance. Nicolas. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Trust Domains ...
On Tue, 4 Jun 2002, WEBSTER, Greg wrote: This may be an impossible question, and I don't mean to be a mean taskmaster, but what kind of timeframe are we looking at for a 3.x release? Our office is a mongrelmix of Linux, W2k, and NT and while we are definitely not going to go to an XP environment, we would like to increase linux usage on the backend. Some of the connectivity to W2k that you talk about here would go a long way to that. No exact ETA. Right now we are looking in the Fall of this year. cheers, jerry - Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org --http://www.plainjoe.org Sam's Teach Yourself Samba in 24 Hours 2ed. ISBN 0-672-32269-2 --I never saved anything for the swim back. Ethan Hawk in Gattaca-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Report to Recipient(s)
Incident Information:- Originator:[EMAIL PROTECTED] Recipients:[EMAIL PROTECTED] Subject: samba digest, Vol 1 #1266 - 21 msgs WARNING: The file mime001.txt you received was infected with the Exploit-MIME.gen virus. The file attachment could not successfully be cleaned and has therefore been removed. The Sender has been notified that the attachment(s) could not be delivered. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Report to Recipient(s)
Incident Information:- Originator:[EMAIL PROTECTED] Recipients:[EMAIL PROTECTED] Subject: samba digest, Vol 1 #1266 - 21 msgs WARNING: The file mime001.txt you received was infected with the Exploit-MIME.gen virus. The file attachment could not successfully be cleaned and has therefore been removed. The Sender has been notified that the attachment(s) could not be delivered. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] ALERT - GroupShield ticket number OB1_1023280909_ISIS_1 was generated
Action Taken: The message was quarantined and replaced with a text informing the recipient of the action taken. To: [EMAIL PROTECTED] [EMAIL PROTECTED] From: [EMAIL PROTECTED] [EMAIL PROTECTED] Sent: 1545315456,29494414 Subject: samba digest, Vol 1 #1266 - 21 msgs Attachment Details:- Attachment Name: N/A File: Infected.msg Infected? Yes Repaired? No Blocked? No Deleted? No Virus Name: Exploit-MIME.gen application/ms-tnef
[Samba] Samba compiled version to rpm package
Hi ! I'm runing a linux redhat 7.2 box with samba 2.2.4. I've downloaded the samba source in order to install it with the needed compilation options (--with-smbwrapper --with-automount --with-smbmount --with-pam ...). Samba is now up and running but I would like to build an rpm with this compiled version. Any idea of how to transform this samba compiled version to a rpm package ? Thanks. Sabrina - Powered by Alinto (http://www.alinto.net) for lavache.com (http://www.lavacheautomatique.com) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba 2.4 and win2k clients doesn't work
Hello, i'm new to the the list so excuse me if I ask for an old problem, but i found no solution in the archive. I try to set up a rh 7.3 server with samba 2.4 as PDC for win2000 sp2 clients. I configured the samba to create the machine accounts on the fly. When I try to join the domain the entries in smbpass and passwd are created fine. After a minute I get the message that I joined the domain. After reboot I can not join the domain because there should not be a valid machine account I attached my smb.conf file, so maybe someone can help me if there is something wrong. Thanks in advance Arne # Samba config file created using SWAT # from localhost.localdomain (127.0.0.1) # Date: 2001/06/05 13:50:58 # Global parameters #91;global#93; coding system = client code page = 850 code page directory = /etc/codepages workgroup = GPI netbios name = GEOLOGIE2 netbios aliases = gpiserver netbios scope = server string = Samba 2.2.4 interfaces = bind interfaces only = No security = USER encrypt passwords = Yes update encrypted = No allow trusted domains = Yes hosts equiv = min passwd length = 5 map to guest = Never null passwords = No obey pam restrictions = No password server = smb passwd file = /etc/samba/smbpasswd root directory = pam password change = No passwd program = /bin/passwd passwd chat = *new*password* %n\n *new*password* %n\n *changed* passwd chat debug = No username map = password level = 0 username level = 0 unix password sync = Yes restrict anonymous = No lanman auth = Yes use rhosts = No admin log = No log level = 0 syslog = 1 syslog only = No log file = max log size = 5000 timestamp logs = Yes debug hires timestamp = No debug pid = No debug uid = No protocol = NT1 large readwrite = No max protocol = NT1 min protocol = CORE read bmpx = No read raw = Yes write raw = Yes nt smb support = Yes nt pipe support = Yes nt status support = Yes announce version = 4.5 announce as = NT max mux = 50 max xmit = 65535 name resolve order = wins bcast host lmhosts max packet = 65535 max ttl = 259200 max wins ttl = 518400 min wins ttl = 21600 time server = No unix extensions = No change notify timeout = 60 deadtime = 0 getwd cache = Yes keepalive = 300 lpq cache time = 10 max smbd processes = 0 max disk size = 0 max open files = 1 read size = 16384 socket options = TCP_NODELAY stat cache size = 50 use mmap = Yes total print jobs = 0 load printers = Yes printcap name = /etc/printcap disable spoolss = No enumports command = addprinter command = deleteprinter command = show add printer wizard = Yes os2 driver map = strip dot = No character set = mangled stack = 50 stat cache = Yes domain admin group = root domain guest group = machine password timeout = 604800 add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u delete user script = logon script = logon path = \\%N\%U\profile logon drive = logon home = \\%N\%U domain logons = Yes os level = 65 lm announce = Auto lm interval = 60 preferred master = True local master = Yes domain master = True browse list = Yes enhanced browsing = No dns proxy = No wins proxy = No wins server = wins support = Yes wins hook = kernel oplocks = Yes lock spin count = 3 lock spin time = 10 oplock break wait time = 0 add share command = change share command = delete share command = config file = preload = lock dir = /var/cache/samba pid directory = /var/run/samba utmp directory = wtmp directory = utmp = No default service = message command = dfree command = valid chars = remote announce = remote browse sync = socket address = 0.0.0.0 homedir map = time offset = 0 NIS homedir = No source environment = panic action = hide local users = No winbind uid = winbind gid = template homedir = /home/%D/%U template shell = /bin/false winbind separator = \ winbind cache time = 15 winbind enum
RE: [Samba] PDC and BDC with LDAP and Samba 2.2.4
On Tue, 4 Jun 2002, Klaus Zahradnik wrote: Nope, I just checked in a Book. It can't act as a Backup Domain Controler. :o( We are talking about two different things here. Samba cannot act as a BDC for a Windows PDC, but my tests showed that we can act as a BDC for another Samba box. cheers, jerry - Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org --http://www.plainjoe.org Sam's Teach Yourself Samba in 24 Hours 2ed. ISBN 0-672-32269-2 --I never saved anything for the swim back. Ethan Hawk in Gattaca-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Setting up share permission
Hi, I am a new Samba user. I would like to create a share that has read access for groupA, read/write access for groupB. No access to anyone else. I played around a bit by adding groupA to the Read only groups and groupB to the Read write groups. It works fine for people in groupA and groupB, but anyone else(users that are not in groupA and groupB) has automatic read write access? What did I miss? Also, is there a very good documentation on the web that explains the security/permission options? Thanks, fm. __ Do You Yahoo!? Yahoo! - Official partner of 2002 FIFA World Cup http://fifaworldcup.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Share using %U - File already opened
H-disk share is /home/%U/disk User1 H: - /home/user1/disk (h-disk) User2 H: -- /home/user2/disk (h-disk) When User1 opens a file H:Øfoo.doc and then User2 opens a file on this share with the _same_ name (H:Øfoo.doc) we get from Word (office programs?): Foo.doc already opened by another user. When user1 closes his/her foo.doc on the home-share user2 is able to open the file. This is on Windows 2000 Terminal Services SP2 with Citrix Metaframe 1.8 (dont diss this because it is Terminal Services please!) using office 2000. Don't use %U on Win2k Terminal Services. Use ÆhomesÅ and make sure you reference it with the *users* name, not 'homes'. Andrew Bartlett Excellent. This works. The processes in Win2k now have unique share names for each user thus preventing Win2k from thinking its the same file. Thank you Andrew. :-) Regards Per Kjetil Grotnes --- IT-Seksjonen, Plan- og bygningsetaten, Oslo Kommune Tlf: 22 66 26 61, Fax: 22 66 26 65 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Virus waarschuwing / warning
Dear Mr/Mrs, You have send our company an e-mail with the subject: samba digest, Vol 1 #1266 - 21 msgs wich contains a virus according to our virusscanner. It is also possible that a virus misuses your e-mail address, in that case sorry for the accusation. In that case please see this mail as a warning, the virus knows your mail adres and it is very likely that you recieve a virus soon. You have send it to: [EMAIL PROTECTED] You have send the following attachments and virusses to us: Attachment: Geen bijlage, zit meteen in de mail Please install a good virusscanner on your computer and keep it up-to-date. This is an automaticly computer generated e-mail. Reply to this mail is useless. Geachte heer/mevrouw, U heeft aan ons bedrijf een e-mail gestuurd met als onderwerp: samba digest, Vol 1 #1266 - 21 msgs waarin volgens onze virusscanner een virus verborgen zit. Het is ook mogelijk dat een virus uw e-mail adres misbruikt, in dat geval sorry voor de onterechte beschuldiging. Laat deze mail dan een waarschuwing voor u zijn omdat het virus dus uw e-mail adres kent en de kans groot is dat u ook een virus toegestuurd krijgt. De geadresseerde was: [EMAIL PROTECTED] De volgende bijlage(s) en virus(sen) heeft u gestuurd: Bijlage: Geen bijlage, zit meteen in de mail Installeer a.u.b. een goede virusscanner op uw PC en houd deze up-to-date. Dit is een automatische door de computer gegenereerde e-mail. Een antwoord hierop heeft geen zin. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] funny error message
Title: funny error message unable to connect to SMB server on machine 127.0.0.1. Error was : SUCCESS - 0. I don't have smb running, I'm just testing some codepage compiles... this message is generated by smbpasswd i.e. samba not running; run smbpasswd; enter through prompts; I wonder if all my Errors are going to be this SUCCESSful today :)
[Samba] need help
Dear team, I have configured our linux samba server as member of NT domain For your info our Linux OS is using redhat 6.2 All thing is OK but sometime I got the problem if we check from network neighbourhood, I didn't find our samba server but if I check with find computer , I can find this samba server If I check from /var/log/messages I got message: smb_trans2_request: result=-32, setting invalid smb_retry: new pid=19518, generation=22 this message appear every day once until three times My question : where is the problem coming from , if we cannot browse this samba server from network neighbourhood? Is there any problem or correlation with the log that I mention above? thanks Best Regards Ricky
Re: [Samba] Samba compiled version to rpm package
I guess you could install the source rpm and modify the spec file (--with-smbwrapper --with-automount --with-smbmount --with-pam ...)located at /usr/src/redhat/SPECS/samba.spec and run rpm -ba /usr/src/redhat/SPECS/xxx.spec this should build an rpm in /usr/src/redhat/RPMS/i386 LAUTIER Sabrina wrote: Hi ! I'm runing a linux redhat 7.2 box with samba 2.2.4. I've downloaded the samba source in order to install it with the needed compilation options (--with-smbwrapper --with-automount --with-smbmount --with-pam ...). Samba is now up and running but I would like to build an rpm with this compiled version. Any idea of how to transform this samba compiled version to a rpm package ? Thanks. Sabrina - Powered by Alinto (http://www.alinto.net) for lavache.com (http://www.lavacheautomatique.com) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Joining a W2k domain - Could not look up dc's for domain
Hello. I'm trying to join a W2K domain. The DC runs in mixed mode. 1. In Active Directory I added the machine DELL1-W2K with option NT 4.0 / 3.51 machine can use that account. For NT 4 machines the domain is WIN2KTESTSERVER. For W2K machines or higher the domain is INTERN.DE. 2. On LINUX I joined the domain INTERN.DE with # smbpasswd -D 10 -j intern.de -r win2ktestserver.intern.de -U administrator Joined domain WIN2KSERVER When starting smbd, nmbd, winbindd with log level 10 I get a error message in -- log.winbindd -- [2002/06/05 15:56:18, 3] nsswitch/winbindd_cm.c:cm_get_dc_name(147) Could not look up dc's for domain WIN2KTESTSERVER -- log.winbindd -- [global] workgroup = win2ktestserver netbios name = DELL1-w2k security = DOMAIN encrypt passwords = Yes password server = * log file = /var/log/samba/ad.%m.log # default ist 5000 max log size = 5 log level = 10 # debug pid = YES # debug uid = YES # winbindd winbind uid = 1-2 winbind gid = 1-2 winbind separator = + winbind cache time = 60 # 2002.06.05 othinnes, keine Anzeige des Domaen-Namens PULSAAR' bei 'ls', 'smbstatus', 'getfacl' usw. winbind use default domain = YES template homedir = /fileserver/home/%D/%U template shell = /bin/bash # winbindd Did I misconfigure something? Thank you in advance? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Trust Domains ...
Thanks all for responding, it seems my digest samba mail had a virus, so I did not get to read all the reply (I am sure there were many ;-) ) Andrew Bartlett wrote: Sylvestre Taburet wrote: Le Mardi 4 Juin 2002 15:23, C.Lee Taylor a écrit : Greetings ... Please could someone confirm that Samba 2.2.x and Samba 3.0 ( Head ) does not support Trusts between domains. 2.2.X doesn't, 3.0 will, though I don't know if CVS version does it yet. It should be possible with TNG, but I never tried: http://mordor.clayton.edu/samba-tng/tng-pdc-trust.html Will look at this if all else does not work ... I understand it goes like this: Kewl ... Samba 2.2 supports being trusted by NT. Its a bit odd, and mainly works due to the fact that domain logons and interdomain logons are almost exactly the same. Not 'supported', and only works for NT domains with just a PDC. Okay, I hope nobody minds me asking a few question ... I have DOMA, which is an NT4 domain with Exchange 5.5, DOMB is my little Linux server with Samba 2.2.x ( hoping to use 2.2.5 ). If I understand this, DOMA needs to trust DOMB so that the users in DOMB can access their mail in the DOMA Exchange server? Am I right? And would this work? Samba HEAD has support for both being trusted by NT and trusting NT. We don't support doing anything with Win2k ATM. Trusting NT is still a work in progress, but we have shown the basic concepts. I don't really wish to play with Samba Head, but I love to learn ... Samba TNG claims support for being trusted, but I've not tested it myself. You will need current CVS - TNG was able to pick up some of HEAD's work in this area to get around some nasty bugs. Samba-TNG trusting NT domains is a bit dodgy, becouse you need to setup the 'username map' manually. I don't really wish to play with TNG, but I love to learn ... Thanks guys. Mailed Lee -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] System V printing problem
A brief observation - from behaviour code inspection - Samba 2.2.4 with Solaris 2.6: This defaults correctly to System V printing and uses lpstat -v to get a list of printers. However it does this just once and then the only way I can see to reread the list is to restart the daemon. This is a bit of a pain to do. -- Peter Polkinghorne, IT Manager Kingsford Stacey Blackwell [EMAIL PROTECTED] 14 Old Square, Lincoln's Inn (44) 020 7447 1200 London WC2A 3UB A list of names of the partners is open to inspection at the above address. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Joining a W2k domain - Could not look up dc's for domain
You may want to add the lines: wins support = No wins server = xxx.xxx.xxx.xxx Brett -Original Message- From: Oliver Thinnes [mailto:[EMAIL PROTECTED]] Sent: Wednesday, June 05, 2002 9:15 AM To: '[EMAIL PROTECTED]' Subject: [Samba] Joining a W2k domain - Could not look up dc's for domain Hello. I'm trying to join a W2K domain. The DC runs in mixed mode. 1. In Active Directory I added the machine DELL1-W2K with option NT 4.0 / 3.51 machine can use that account. For NT 4 machines the domain is WIN2KTESTSERVER. For W2K machines or higher the domain is INTERN.DE. 2. On LINUX I joined the domain INTERN.DE with # smbpasswd -D 10 -j intern.de -r win2ktestserver.intern.de -U administrator Joined domain WIN2KSERVER When starting smbd, nmbd, winbindd with log level 10 I get a error message in -- log.winbindd -- [2002/06/05 15:56:18, 3] nsswitch/winbindd_cm.c:cm_get_dc_name(147) Could not look up dc's for domain WIN2KTESTSERVER -- log.winbindd -- [global] workgroup = win2ktestserver netbios name = DELL1-w2k security = DOMAIN encrypt passwords = Yes password server = * log file = /var/log/samba/ad.%m.log # default ist 5000 max log size = 5 log level = 10 # debug pid = YES # debug uid = YES # winbindd winbind uid = 1-2 winbind gid = 1-2 winbind separator = + winbind cache time = 60 # 2002.06.05 othinnes, keine Anzeige des Domaen-Namens PULSAAR' bei 'ls', 'smbstatus', 'getfacl' usw. winbind use default domain = YES template homedir = /fileserver/home/%D/%U template shell = /bin/bash # winbindd Did I misconfigure something? Thank you in advance? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba compiled version to rpm package
On Wed, 5 Jun 2002, LAUTIER Sabrina wrote: Hi ! I'm runing a linux redhat 7.2 box with samba 2.2.4. I've downloaded the samba source in order to install it with the needed compilation options (--with-smbwrapper --with-automount --with-smbmount --with-pam ...). Samba is now up and running but I would like to build an rpm with this compiled version. Any idea of how to transform this samba compiled version to a rpm package ? See packages/RedHat/makerpms.sh jerry - Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org --http://www.plainjoe.org Sam's Teach Yourself Samba in 24 Hours 2ed. ISBN 0-672-32269-2 --I never saved anything for the swim back. Ethan Hawk in Gattaca-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbmount
I'm using smbmount to mount an NTFS file system to a mountpoint on a linux server. the problem is, that i will get the following messages in /var/log/messages: Jun 5 10:30:00 tux1 kernel: smb_retry: signal failed, error=-3 Jun 5 10:30:00 tux1 last message repeated 2 times the mountpoint is disapearing and the mount directory to. if i try a umount and mount again the problem is fixed. is there any bugfix avialable? Uwe Wenglewski -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Request on Samba directories
Hi Use a name share ending with a '$' sign. This is a hide share in windows (like ipc$ or print$) Best regard. Thierry - Original Message - From: Schalk Lubbe [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, June 05, 2002 11:57 AM Subject: [Samba] Request on Samba directories Hi I have made a 2 shared directories on my Samba Server, then I have made the one read only and the other one access to a spesific user, but now I want to hide the one directory so that only that user can see it. How do I do that . Thanks Schalk -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] domain or not domain
I can't thing of how to look for this problem in the archive! I have a Redhat7.2 server running the 2.2.4 rbl version of SAMBA. This system is joined into our CLUSTERS domain and has just a read-only share on it. The PDC is a 2.2.3a SAMBA on an IRIX system. If I take a WinXP system which is just a member of the CLUSTERS workgroup and not joined into the domain, login to that with a suitable username and password, I can then browse to the server and see the contents of the read-only share. If I take a WinXP system, which is joined into the CLUSTERS domain, I can login with the same username as above. I can browse to the server and see the folder for the read-only share but, if I try to open the share, I get a username/password prompt! Giving the same username and password for the login user just gives the prompt again. However, if I give a different username and corresponding password, I can open the share! The log-file on the server says: .. smb/reply.c:reply_sesssetup_and_X(1036) No such user username-snipped [CLUSTERS] - using guest account In the log on the PCD I can't see any indication that it rejected the username, though it is difficult to see the wood for the trees there! Phil. --- Phil Chambers ([EMAIL PROTECTED]) University of Exeter -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Open a W2000 Session in a domain
Hello I am working on a Red Hat 7.1 with a samba 2.2.4 server. All is good i can configure my W2000 computer for the domain, but when he restart enable to join the domain always the same message "le compte systeme de l'ordinateur dans son domain principal est manquant" Yes I'm french So in english it's somthing like this "your computer is unkown by the primary domain" but i have done an account for the pc with is name and with a $ like i have show on the doc. Please I need some help
[Samba]
úÄÒÁ×ÓÔ×ÕÊÔÅ! ñ ÈÏÞÕ ÐÏÄÅÌÉÔØÓÑ Ó ÷ÁÍÉ ÉÎÆÏÒÍÁÃÉÅÊ, ËÁË ÍÏÖÎÏ ÌÅÇÁÌØÎÏ, ÂÙÓÔÒÏ É ÓÒÁ×ÎÉÔÅÌØÎÏ ÐÒÏÓÔÏ ÚÁÒÁÂÏÔÁÔØ ÎÅÓËÏÌØËÏ ÔÙÓÑÞ ÄÏÌÌÁÒÏ×. ñ × Ó×ÏÅ ×ÒÅÍÑ ÔÁË É ÐÏÓÔÕÐÉÌ... É ÈÏÔÑ ÓÁÍ ÒÁÂÏÔÁÀ, ÎÏ ÌÉÛÎÉÊ ÄÏÈÏÄ ÍÎÅ ÓÏ×ÓÅÍ ÎÅ ÍÅÛÁÅÔ. îÅ ×ÅÒÉÔÅ? :-), ÎÏ ÜÔÏ òåáìøîïóôø. åÓÔÅÓÔ×ÅÎÎÏ, ÞÔÏ ÷ÁÍ ÐÏÎÁÄÏÂÉÔÓÑ ÎÅËÏÔÏÒÏÅ ÔÅÒÐÅÎÉÅ, ÎÁÓÔÏÊÞÉ×ÏÓÔØ × ÄÏÓÔÉÖÅÎÉÉ ÜÔÏÊ ÃÅÌÉ É, ËÏÎÅÞÎÏ ÖÅ, ÖÅÌÁÎÉÅ. åÝÅ ÏÂÑÚÁÔÅÌØÎÏ ÎÕÖÅÎ ÄÏÓÔÕÐ Ë éÎÔÅÒÎÅÔÕ É ÜÌÅËÔÒÏÎÎÏÊ ÐÏÞÔÅ. åÓÌÉ ÷ÁÓ ÜÔÏ ÚÁÉÎÔÅÒÅÓÏ×ÁÌÏ, ÏÔÐÒÁ×ØÔÅ, ÐÏÖÁÌÕÊÓÔÁ, ÍÎÅ ÐÉÓØÍÏ ÎÁ ÷óå ÕËÁÚÁÎÎÙÅ ÎÉÖÅ ÁÄÒÅÓÁ É Ñ ÷ÁÍ ×ÙÛÌÀ ÆÁÊÌ Ó ÉÎÓÔÒÕËÃÉÑÍ. åóìé ÷áó üôï îå éîôåòåóõåô - ðòïóøâá îå ïô÷åþáôø îá üôï ðéóøíï! ÷îéíáîéå!!! ðÏÖÁÌÕÊÓÔÁ, ÎÅ ÎÁÐÒÁ×ÌÑÊÔÅ ÷ÁÛÉ ÚÁÑ×ËÉ Ó ÐÏÍÏÝØÀ ËÎÏÐËÉ ÏÔ×ÅÔÉÔØ ÏÔÐÒÁ×ÉÔÅÌÀ, ÏÔ×ÅÔÉÔØ ÎÁ ×ÙÂÒÁÎÎÏÅ ÐÉÓØÍÏ, ÉÌÉ reply ÎÁ ÑÝÉË, Ó ËÏÔÏÒÏÇÏ ÷Ù ÐÏÌÕÞÉÌÉ ÄÁÎÎÏÅ ÐÉÓØÍÏ (× ÔÁËÏÍ ÓÌÕÞÁÅ ÏÎÏ ÎÅ ÂÕÄÅÔ ÐÒÏÞÉÔÁÎÏ!), ÐÏÜÔÏÍÕ ÁÄÒÅÓÕÊÔÅ ÉÈ ôïìøëï ÓÀÄÁ - [EMAIL PROTECTED], [EMAIL PROTECTED] óÐÁÓÉÂÏ, ÞÔÏ ÐÒÏÞÉÔÁÌÉ. é ×ÓÅ ÖÅ ÐÏÄÕÍÁÊÔÅ... ÷ÓÅÇÏ ÄÏÂÒÏÇÏ, ÕÄÁÞÉ! ó Õ×ÁÖÅÎÉÅÍ, óÅÒÇÅÊ. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Open a W2000 Session in a domain
Joyce, It sounds like there is a disconnection between the listing in the unix passwd file for the w2000 computer and the listing in the smbpasswd file for the w2000 computer. Try deleting the listing for the computer in the smbpasswd file and re-adding it with the command # smbpasswd -am machinename$ Good luck, Sam At 03:28 PM 6/5/2002 +0200, Joyce LAMBERT wrote: Hello I am working on a Red Hat 7.1 with a samba 2.2.4 server. All is good i can configure my W2000 computer for the domain, but when he restart enable to join the domain always the same message le compte systeme de l'ordinateur dans son domain principal est manquant Yes I'm french So in english it's somthing like this your computer is unkown by the primary domain but i have done an account for the pc with is name and with a $ like i have show on the doc. Please I need some help -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samaba Help Of Course ... If I May
I have a workgroup at work where we have allot of documents we don not wish for anybody to see. The on e machine we have is running Redhat 7.3 [Linux seleya.seleyaoem.com 2.4.18-3 #1 Thu Apr 18 07:37:53 EDT 2002 i686 unknown] with the version of samba that ships with it. 2.2.3a if I am not mistaken. I have this machine also acting as a file server for other machines on the LAN and I need these machines to have full access to the share. So far I have setup the samba server using aliases. The main smb.conf file calls a different smb.conf file for each alias i.e smb.conf.seleya that I have setup. The Share I need to be private/secure I have under the hostname seleya with a share with share level security and with only 3 valid users [the users with the permission to view the files] to the share. The second alias is called service and it too is share level security but has guest ok as well with a create mode of 0777 which does what I need for full read write access to files. What seems to be happing however is that the two shares I have setup are showing up in both aliases. The Seleya alias has a share named SELEYA and the Service alias has a share named DUMP. When you browse to Seleya or Service both shares show up in both aliases. I am trying to find out how to prevent this from happening. My desired results are to have one share under each alias i.e Seleya show only the SELEYA share and the Service to show only the DUMP share. If you can help me I would greatly appreciate it. I will include my 3 smb.conf files to see if they help clear up the matter. Thank you in advance I appreciate your time smb.conf - Main File [global] workgroup = WORKGROUP server string = Seleya Samba hosts allow = 192.168.0. 127. load printers = no printcap name = /etc/printcap printing = bsd guest account = nobody log file = /var/log/samba.%m max log size = 50 security = share encrypt passwords = yes socket options = TCP_NODELAY os level = 65 local master = yes domain master = yes preferred master = yes dns proxy = no netbios aliases = Seleya Service include = /etc/samba/smb.conf.Seleya include = /etc/samba/smb.conf.Service null passwords = yes #Share Definitions #[Seleya]; comment = Seleya Storage; path = /Seleya/Docs; read only = no; public = yes; guest ok = yes; writeable = yes ; create mode = 0664; valid users = chrish, jeffp, bitchbox, ; veto files = /Seleya/lost+found/ #[Dump]; commnet = Customers Temp Dump; path = /Seleya/Dump; guest ok = yes; writeable = yes; read only = no smb.conf.Seleya - First Alias File [global] workgroup = WORKGROUP server string = Linux Samba Server hosts allow = 192.168.0. 127. load printers = no printcap name = /etc/printcap printing = bsd guest account = nobody log file = /var/log/samba.%m max log size = 50 security = share encrypt passwords = yes socket options = TCP_NODELAY os level = 65 local master = yes domain master = yes preferred master = yes dns proxy = no null passwords = yes #Share Definitions [Seleya] comment = Seleya Storage path = /Seleya/Docs read only = no public = yes guest ok = yes writeable = yes create mode = 0777 valid users = chrish, jeffp, bitchbox #[Dump]# commnet = Customers Temp Dump# path = /storage/CTD# guest ok = yes# writeable = yes# read only = no smb.conf.Service - Second Alias File [global] workgroup = WORKGROUP server string = Storage Server hosts allow = 192.168.0. 127. load printers = no printcap name = /etc/printcap printing = bsd guest account = nobody log file = /var/log/samba.%m max log size = 50 security = share encrypt passwords = yes socket options = TCP_NODELAY os level = 65 local master = yes domain master = yes preferred master = yes dns proxy = no null passwords = yes #SHARE DEFINITIONS #[Seleya]# comment = Seleya Storage# path = /Seleya/Docs# read only = no# public = yes# guest ok = yes# writeable = yes # create mode = 0664# valid users = chrish, jeffp, bitchbox [Dump] comment = Dump path = /Seleya/Dump guest ok = yes writeable = yes read only = no create mode = 0777
[Samba] samba AIX / NT network issue
I'm running samba on an AIX 4.3.3 server which has NT4.0 SP6a clients connecting. Since I've had so much trouble with it I compiled 2.2.4 with GCC on the server and it didn't do any good. Grasping for straws I had our netadmin come over and help me interpet what kinds of errors we were receiving. The symptom of the problem first off is that when the clients are browsing the shares they initially take 30-60 seconds to come up (if even at all). Everything works fine once connected (but is still way too slow). I was hoping that some common issues could be detected from at least some of these errors so that I can try to get this sorted out. Any information on any part of this would be helpful, really. Here are some of the notes from our pow-wow...this is traffic between my client and the server while trying to open up a share off of the samba server. no such file desktop.ini srvsvc starts account was null and the domain was null dest AIX - source ing-nt-dc Negotiated connected disconnected .02 seconds later pulled desktop.ini ACK took too long to respond possibly insufficient buffer space on one side or the other 2 alerts WINS lookup performed tried to connect null again tried to to connect ing-nt-dc/IPC$ tried to pull netlogon - SUCCESS RPC 5.0 BIND Lots of peramaters transferred netlogon called - requests challange three way handshake request and response connects and disconnects. Some NetBIOS traffic is detected but cannon be encoded at the same time/soon after we get a window frozen error Then oddly enough a NetBIOS session request and confirmation negotiation begins connection is made to share as proper user WINS traffic TCP stuff NETBIOS 76 bytes of user data confirms session Negotiates anon three way handshake is asked for again and then closes down - # Global parameters [global] client code page = 437 code page directory = /usr/local/lib/codepages workgroup = OURDOMAINNAME netbios name = THESERVERNAME server string = Samba %v interfaces = 208.1.175.144/255.255.255.128 security = DOMAIN encrypt passwords = Yes update encrypted = Yes password server = OURPDC OURBDC ANOTHERBDC smb passwd file = /var/samba/private/smbpasswd passwd program = /bin/yppasswd username map = /usr/local/lib/users.map unix password sync = Yes log file = /var/samba/log/log.%m max log size = 50 name resolve order = wins host bcast deadtime = 15 max disk size = 7199 socket options = TCP_NODELAY TCP_NODELAY SO_SNDBUF=32768 SO_RCVBUF=32768 load printers = No logon path = logon home = local master = No domain master = False wins server = XXX.XXX.XXX.XXX (a valid WINS server) lock dir = /var/samba/locks pid directory = /var/samba/pid socket address = homedir map = admin users = Administrator, ntadmin create mask = 0755 force create mode = 0755 [homes] comment = Home Directories read only = No browseable = No [DATA] comment = CPIPT DATA DIRECTORY path = /home/data read only = No inherit permissions = Yes [DOCS] comment = CPIPT DOCS path = /usr/catia/doc I did see that there was a reccomendation to run smbd somewhere other than inetd. I'd like to script it something like Linux but the rc files are set up differently. If there is anybody that has set this up on AIX I would be interested to see how. Thanks for your help in advance. -Tony _ Send and receive Hotmail on your mobile device: http://mobile.msn.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Domain groups
I have Samba acting as a PDC with Win 98, Win ME, and Win 2000 clients. I have shares on one of my Win 2000 clients that I would like to be able to manage permissions with using domain groups. For instance, I have logical groups for sales, recruiting, and staff. I have these groups defined on my Samba server and they work for Samba shares. Is there a way I can make these groups show up on my Win 2000 client when it queries the domain for users and groups when I'm setting permissions? Linus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Error in smbd and nmbd log files
Title: Message I am seeing the following error message in my log.smbdand the log files for the individual users accessing shares. Has anyone seen this message before? Can someone explain what this message means and how to fix it? Thank you. [2002/06/04 09:43:05, 0] lib/util_sock.c:(497) write_socket_data: write failure. Error = Broken pipe I am seeing the following message in my log.nmbd file. [2002/06/05 08:35:00, 0] nmbd/nmbd_browsesync.c:(358) find_domain_master_name_query_fail: Unable to find the Domain Master Browser name WORKGROUP1b for the workgroup WORKGROUP. Unable to sync browse lists in this workgroup. Any assistance, as always, is greatly appreciated. Thanks. Pati Moss Unix Systems Administrator First Consulting Group, Inc. http://www.fcg.com Phone: (610) 989-7105 Fax: (610) 989-3207 [EMAIL PROTECTED]
[Samba] oplock break failures
After upgrading from 2.0.10a to 2.2.4, I'm seeing many new messages being logged. What does this mean? Jun 5 09:42:50 files2 smbd[27585]: [2002/06/05 09:42:50, 0] smbd/oplock.c:oplock_break(788) Jun 5 09:42:50 files2 smbd[27585]: oplock_break: no break received from client within 30 seconds. Jun 5 09:42:50 files2 smbd[27585]: oplock_break failed for file Pledgemaker/Pledgemaker-DRF/Appeal Loaders/02-R02L01-Lifeline Invite #1.txt (dev = 904, inode = 10554, file_id = 113). Jun 5 09:42:50 files2 smbd[27585]: [2002/06/05 09:42:50, 0] smbd/oplock.c:oplock_break(833) Jun 5 09:42:50 files2 smbd[27585]: oplock_break: client failure in oplock break in file Pledgemaker/Pledgemaker-DRF/Appeal Loaders/02-R02L01-Lifeline Invite #1.txt Jun 5 09:42:50 files2 smbd[27585]: [2002/06/05 09:42:50, 0] smbd/reply.c:reply_lockingX(4480) Jun 5 09:42:50 files2 smbd[27585]: reply_lockingX: Error : oplock break from client for fnum = 10128 and no oplock granted on this file (Pledgemaker/Pledgemaker-DRF/Appeal Loaders/02-R02L01-Lifeline Invite #1.txt). -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] PDC and BDC with LDAP and Samba 2.2.4
On Tue, 4 Jun 2002, Yannick Tousignant wrote: In this link : http://www.samba.org/samba/ftp/docs/htmldocs/Samba-BDC-HOWTO.html It seems possible to act like BDC as long as the PDC is a samba machine. I did everyting there, and both servers have the same secrets.tdb file. My testing using an smbpasswd (several months ago worked ok. I never ran the setup in production though. I'll run some tests later this week and see what's going on. For the record, you setup should work as far as I can tell. cheers, jerry - Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org --http://www.plainjoe.org Sam's Teach Yourself Samba in 24 Hours 2ed. ISBN 0-672-32269-2 --I never saved anything for the swim back. Ethan Hawk in Gattaca-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] oplock break failures
AFAIK 2.0 did not support oplocks, oplocks are a new feature in 2.2. You can turn off oplocks in smb.conf if you want. Oplocks are meant to increase the performance. drenning, bruce wrote: After upgrading from 2.0.10a to 2.2.4, I'm seeing many new messages being logged. What does this mean? Jun 5 09:42:50 files2 smbd[27585]: [2002/06/05 09:42:50, 0] smbd/oplock.c:oplock_break(788) Jun 5 09:42:50 files2 smbd[27585]: oplock_break: no break received from client within 30 seconds. Jun 5 09:42:50 files2 smbd[27585]: oplock_break failed for file Pledgemaker/Pledgemaker-DRF/Appeal Loaders/02-R02L01-Lifeline Invite #1.txt (dev = 904, inode = 10554, file_id = 113). Jun 5 09:42:50 files2 smbd[27585]: [2002/06/05 09:42:50, 0] smbd/oplock.c:oplock_break(833) Jun 5 09:42:50 files2 smbd[27585]: oplock_break: client failure in oplock break in file Pledgemaker/Pledgemaker-DRF/Appeal Loaders/02-R02L01-Lifeline Invite #1.txt Jun 5 09:42:50 files2 smbd[27585]: [2002/06/05 09:42:50, 0] smbd/reply.c:reply_lockingX(4480) Jun 5 09:42:50 files2 smbd[27585]: reply_lockingX: Error : oplock break from client for fnum = 10128 and no oplock granted on this file (Pledgemaker/Pledgemaker-DRF/Appeal Loaders/02-R02L01-Lifeline Invite #1.txt). -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Act! database on a Samba server
Does anyone have experience with getting an Act! database working without corruption on a Samba server? I had five users in an Act! database where I was getting pretty regular corruption, even after adding oplocks = no to the share. We have since moved the database onto a Win 2000 machine, but we would rather have it back on the Samba server if we can solve the corruption problem. Any help would be appreciated. Linus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] PDC and BDC with LDAP and Samba 2.2.4
On Tue, 4 Jun 2002, Yannick Tousignant wrote: Hi, I tried to move the current PDC to another machine that have the same LDAP database. It didn't work... There is something about the machine account! How does samba handle this? i could not logon to the moved PDC, so i rejoined the domain (added my machine in TEMP workgroup, reboot, rejoin de domain, reboot), and then it worked! Is there any way i can bypass this? Can the uid's for passwd entries sync'd on bother servers? cheers, jerry - Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org --http://www.plainjoe.org Sam's Teach Yourself Samba in 24 Hours 2ed. ISBN 0-672-32269-2 --I never saved anything for the swim back. Ethan Hawk in Gattaca-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] PDC and BDC with LDAP and Samba 2.2.4
Hi, Thanks for replying me Gerald. Hi, I tried to move the current PDC to another machine that have the same LDAP database. It didn't work... There is something about the machine account! How does samba handle this? i could not logon to the moved PDC, so i rejoined the domain (added my machine in TEMP workgroup, reboot, rejoin de domain, reboot), and then it worked! Is there any way i can bypass this? Can the uid's for passwd entries sync'd on bother servers? That's not the problem, because they are sync'd on both servers using slurpd. How does samba handle the validity of a machine password? If i can solve this, then i can have a BDC... I'm thinking maybe put add a MACHINE.SID file to both servers, with the same SID. Maybe that can solve my problem. I'll keep you informed. Yannick cheers, jerry - Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org --http://www.plainjoe.org Sam's Teach Yourself Samba in 24 Hours 2ed. ISBN 0-672-32269-2 --I never saved anything for the swim back. Ethan Hawk in Gattaca-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Act! database on a Samba server
On Wed, 2002-06-05 at 13:13, Yannick Tousignant wrote: We are running act! databases on a samba share since the beginning of the year and we had no problem since then. As long as the database files are owned by the user who open them. Your message suggests by virture of your ownership constraint that your Act! databases are single-user. I have multiple users in a single database all at the same time. Do you have experience with multiple users in one database? Linus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbmount
On Wed, 5 Jun 2002 [EMAIL PROTECTED] wrote: Jun 5 10:30:00 tux1 kernel: smb_retry: signal failed, error=-3 Jun 5 10:30:00 tux1 last message repeated 2 times the mountpoint is disapearing and the mount directory to. if i try a umount and mount again the problem is fixed. is there any bugfix avialable? Kernel version? Samba version? Your problem is that smbmount has terminated. The smbmount in older samba versions had a few known bugs which are fixed. If you are running 2.2.2 or later I don't think it is a known bug. /Urban -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Fwd: [Samba] Re: [K12OSN]Re: [Lrlug-discuss]emergency....file/directory recovery]
Is the only way to get this right now from CVS? On Tue, 2002-06-04 at 14:25, Chris Tooley wrote: The Recycle Bin option in the smb.conf allows you to create a Salvage area like Netware has. This is a really wonderful feature that I've been using for several releases and happy to see in the latest release of Samba. It works pretty well, and can grow extremely fast. It's better than Netware's Salvage though as it does revisioning. And since it's a standard directory instead of a special place it's actually easier for me to browse the files to recover the right ones. Chris Tooley On Tue, 2002-06-04 at 09:49, Barry Smoke wrote: I sent to samba list, with the wrong e-mail account, so it never made it... Any help with this is appreciated. Barry Smoke District Network Administrator Bryant Public Schools -Forwarded Message- From: Steve Langasek [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: [Samba] Re: [K12OSN] Re: [Lrlug-discuss]emergencyfile/directory recovery Date: 03 Jun 2002 17:03:27 -0500 On Mon, Jun 03, 2002 at 04:55:44PM -0500, Barry Smoke wrote: We have had another instance of this. since I am forwarding to other lists, this involves a lost file, due to accidental deletion. in this case, we had a backup, but from the backup time, till deletion time, a lot of data had been lost. So, we have not enough disk space to do hourly backups, novell allowed recovery of a lost file like this, so: is there a filesystem that we need to switch to, that is still linux compatible that has file recovery like this?.journaled...? Is there an application level program, that keeps stuff that has been deleted?besides backup, and backup often!? This is mostly a samba issue, for windows users maybe there should be a samba plug-in, or a purge type structure built in to samba-core. This appears to be a real problem for us. I think this will plague other districts/organizations/businesses in the decision to move to linux, where using samba is possible, but at what cost to file integrity...(maybe integrity is not the right word...) As I'm sure the people on the Samba list (whom you've cc:ed) will be happy to tell you, there is a vfs trashcan implementation available for Samba 2.2 and above. I believe it's part of the main Samba source in the Samba 3.0 CVS and will soon be built by default there; I'm not exactly sure what you have to do to get this for Samba 2.2.x, and will defer to Samba list denizens. Steve Langasek postmodern programmer On Mon, 2002-04-01 at 17:27, Bryan Voss wrote: On Mon, 2002-04-01 at 17:01, Barry Smoke wrote: We were doing a re-install of our imagecast software on our samba server, and the install deleted the images folder with 3 years worth of images in it. Can we get these back? The only info I have is for ext2 filesystems. Not sure how applicable it is for other filesystems, so YMMV. 1) Take the system offline ***IMMEDIATELY***. Preferably by just shutting it off without even doing a shutdown. The longer it runs, the more likely your lost data has been overwritten. Even doing a proper shutdown can overwrite some of the data. 2) Remove the drive/drives and hook them up to another system. 3) Mount the filesystem(s) read-only. 4) Download and compile The Coroner's Toolkit, which contains a couple of utilities you will need: unrm and lazarus. You can get TCT at: http://www.fish.com/tct/ . You may also want to get TCTUTILs from http://www.cerias.purdue.edu/homes/carrier/forensics/ to get a nicer interface for TCT. 5) Read http://www.fish.com/tct/help-recovering-file for a walkthrough. I did this a few years ago and it works, but it will probably take you many many hours to do a recovery and then it will probably be only partial. Some files will probably already be partially overwritten, so you can expect some corrupted images and other problems. As Nathan said, backups are the only good recovery path, but it's obviously a little late for that now. Also note the things you find that that can be partially recovered. An eye opener from a security standpoint. You'll probably find files dating back to the time that filesystem was put into use. -- \\// Bryan Voss [EMAIL PROTECTED] PGP Key: http://www.vosswerx.com/bvoss/pgpkey.txt ___ Lrlug-discuss mailing list [EMAIL PROTECTED] http://lrlug.org/cgi-bin/mailman/listinfo/lrlug-discuss ___ K12OSN mailing
Re: [Samba] Dangers of oplock break wait time
On Tue, Jun 04, 2002 at 10:06:45PM +0200, Peter Schuller wrote: What version of Samba. What clients ? What are the symptoms ? Various versions, including the latest stable release as of this moment. Win2k on the clients. Symptoms are long delays when opening Word/Excel documents; along with (sometimes) error messages about file permissions after the delay is over. I presume that is 2.2.4 ? Or are you testing the SAMBA_2_2 CVS ? If not, I'd recommend doing that as we're preparing for a 2.2.5 release soon and extra feedback would be good. As far as I can tell I'm experiencing a known issue (I've seen people talk about this in various mailinglist archives). I'm just wondering what dangerous side effects changing the oplock break wait time parameter might have - it's supposedly a possible fix. But the man page makes it sound pretty dangerous to fiddle with that particular option, so I am hesitant to try it. No, not really a known issue with the Samba code as such. Many people experience this problem when they're having networking problems. Samba reports these problems in the log files, WinNT and above just silently ignore them (the network goes a bit slower when it happens) so people report it more to us. I've often been tempted to just supress the error messages so people don't report it :-) :-). That's the Microsoft solution here :-). Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] AIX / NT Networking
I'm running AIX 4.3.3MR9 on an H50 with NT4.0SP6a clients. Samba is 2.2.4 compiled on the system with GCC. I've been having an issue for a few weeks and it really looked like some type of name resolution issue. When NT clients browse samba shares from my AIX server they take 30-60 seconds to come up. Sometimes they won't come up at all. All of my DNS, WINS, and hosts files check out and the network was up so I asked for some help snooping packts with our netadmin. He was nice enough to visit and I tried to take the best notes I could so here goes... I'm on the PDC trying to pull up a share from the SMBSERVER inside of the network neighborhood. This runs for about a minute before kicking me out. no such file desktop.ini srvsvc account was null and the domain was null dest SMBSERVER - source PDC Negotiated connected this disconnected .02 seconds later pulled desktop.ini ACK took too long to respond insufficient buffer space on one side or the other? (There are 2 of theses alerts) WINS lookup Tried to connect null again tried to to connect PDC/IPC$ tried to pull netlogon - SUCCESS RPC 5.0 BIND Lots of peramaters are passed netrlogon call - request challange three way handshake request response call response connects and disconnects. NetBIOS traffic is detected, but cannon be encoded. At the same time a window frozen error comes up. NetBIOS session request - confirmed negotiation begins Protocal Dialog index account administrator PDC SMBSERVER/SHARENAME WINS traffic TCP traffic NETBIOS 76 bytes of user data confirms session Negotiates anon three way handshake and then closes down I looked up all of the information I could on the windows frozen error as that was definately happening. Didn't find too much on it besides a reccomendation that smbd nmbd *NOT* be controlled by inetd.conf. I removed them from the file and left swat and am still having trouble. As far as the ACK error...the only information I could find was a protocol sheet on the main site. Any help would be greatly appreciated, Regards, -Tony Basically the samba server is a file server only. No PDC BDC or WINS coming from it. SECURITY=DOMAIN. WINS is running on my PDC and a BDC. Resolution in samba is WINS host (/etc/hosts has the whole network on the server). Passwords are encrypted, as they should be for NT...and are passed off to the PDC or BDC's. I'm not too sure as to what's going on with the networking end of this and I could use some help. Is there anything that is obviously wrong with that traffic? Conf file included below: [global] client code page = 437 code page directory = /usr/local/lib/codepages workgroup = OURDOMAIN netbios name = SMBSERVER server string = Samba %v interfaces = 208.1.175.144/255.255.255.128 security = DOMAIN encrypt passwords = Yes update encrypted = Yes password server = PDC BDC BDC2 smb passwd file = /var/samba/private/smbpasswd passwd program = /bin/yppasswd username map = /usr/local/lib/users.map unix password sync = Yes log file = /var/samba/log/log.%m max log size = 50 name resolve order = wins host bcast deadtime = 15 max disk size = 7199 socket options = TCP_NODELAY TCP_NODELAY SO_SNDBUF=32768 SO_RCVBUF=32768 load printers = No logon path = logon home = local master = No domain master = False wins server = 208.1.175.146 lock dir = /var/samba/locks pid directory = /var/samba/pid socket address = homedir map = admin users = Administrator, ntadmin create mask = 0755 force create mode = 0755 [homes] comment = Home Directories read only = No browseable = No [DATA] comment = OUR DATA DIRECTORY path = /home/data read only = No inherit permissions = Yes [DOCS] comment = SOME DOCS path = /usr/catia/doc _ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Connect to a NT-server from freebsd throught a ppp link
hi, i want to connect to a nt-server sharing whole drive c:, with groupname 'group', password 'pass' and username 'user'. What should i add to a. connect to the remote nt machine trhough a ppp link (tun0) b. mount the shared C: drive to /usr/mnt ? bye. __ Do You Yahoo!? Yahoo! - Official partner of 2002 FIFA World Cup http://fifaworldcup.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Act! database on a Samba server
We are running act! databases on a samba share since the beginning of the year and we had no problem since then. As long as the database files are owned by the user who open them. Yannick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of C. Linus Hicks Sent: Wednesday, June 05, 2002 1:07 PM To: [EMAIL PROTECTED] Subject: [Samba] Act! database on a Samba server Does anyone have experience with getting an Act! database working without corruption on a Samba server? I had five users in an Act! database where I was getting pretty regular corruption, even after adding oplocks = no to the share. We have since moved the database onto a Win 2000 machine, but we would rather have it back on the Samba server if we can solve the corruption problem. Any help would be appreciated. Linus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Problem
When I try to connect to a QNX machine running SAMBA it fails. The smb.log file shows the following: No interface found for address 10.104.1.21 Added interface ip=10.104.1.21 bcast=10.255.255.255 nmask=255.0.0.0 0: loaded services 0: becoming a daemon bind succeeded on port 139 waiting for a connection samba_shm_open : using shmem file /SMBD_MEM_FILE to be of size 102400 ERROR samba_shm_open : samba_lock_fd open failed with code 2 samba_shm_open : using shmem file /SMBD_MEM_FILE to be of size 102400 ERROR samba_shm_open : samba_lock_fd open failed with code 2 samba_shm_open : using shmem file /SMBD_MEM_FILE to be of size 102400 ERROR samba_shm_open : samba_lock_fd open failed with code 2 samba_shm_open : using shmem file /SMBD_MEM_FILE to be of size 102400 ERROR samba_shm_open : samba_lock_fd open failed with code 2 Can you tell me what this means? Steve Dyer Orbital TMS 7160 Riverwood Drive Columbia, Maryland 21046 [EMAIL PROTECTED] Tel: (443) 259-7348 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba compiled version to rpm package
In the location where you unpacked samba change to samba-2.2.4/packaging/RedHat directory and there is a makerpms.sh script. Just execute bash makerpms.sh and the work is done for you. If you run Mandrake there is a similar directory and script for it as well. There are also spec files for SuSE which I think will let you build rpms but I've never tried this :) Neil Quoting LAUTIER Sabrina [EMAIL PROTECTED]: Hi ! I'm runing a linux redhat 7.2 box with samba 2.2.4. I've downloaded the samba source in order to install it with the needed compilation options (--with-smbwrapper --with-automount --with-smbmount --with-pam ...). Samba is now up and running but I would like to build an rpm with this compiled version. Any idea of how to transform this samba compiled version to a rpm package ? Thanks. Sabrina - Powered by Alinto (http://www.alinto.net) for lavache.com (http://www.lavacheautomatique.com) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Neil Muller Neologix Pty Ltd http://www.neologix.net PO Box 3183, Weston Creek, ACT, 2611, Australia email: [EMAIL PROTECTED] voice: +61 2 62875900fax: +61 2 62875911 mob: +61 408 977 976 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Mounting shares using fstab at bootup
Hi all, I have changed my workstation fstab file to include 3 shares on the server that I want to mount during boot up. But, I had to include my username and password inside the fstab file. Does anybody have any other ways of doing this considering that the fstab file is readable by anybody? I'm not quite sure if setting the fstab to root readable only is a good idea. Does anybody have any ideas on that as well? Thanks Tom Ansley -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba compiled version to rpm package
Hi, LAUTIER Sabrina wrote: Hi ! I'm runing a linux redhat 7.2 box with samba 2.2.4. I've downloaded the samba source in order to install it with the needed compilation options (--with-smbwrapper --with-automount --with-smbmount --with-pam ...). Samba is now up and running but I would like to build an rpm with this compiled version. Any idea of how to transform this samba compiled version to a rpm package ? Thanks. Sabrina try checkinstall, it builds rpm-files as you like it :o) Don't know where i found it, just search with google and you'll find it. It's a nice tool and i can recommend it. greets Harry -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba questions - updated
I have downloaded and compiled Samba 2.2.4. The Samba server is used to access DFS space, so it was configured with DCE authentication. It seems to work on for the most part. However we have seen the following behavior: When opening a directory with a large number of files, it spawns additional smbd processes for the mapped share, which utilize a good percentage of the CPU. My windows workstation hangs for a while, and I get multiple Windows Msgs that read: An error occurred while reconnecting Z to share - Microsoft Windows Network: the local device name is already in use - This connection has not been restored. The smbd processes remain at the top of the execution queue (I use monitor to view system execution queue). I used Windows Explorer to map the share and to display directory contents. This crashed when I closed the Window Msg. Are there any configuration parameters I could use to prevent this? Any help would be greatly appreciated. I forgot to mention I am using AIX 4.3.3 at Maintenance Level 9, with DCE 2.2 at ptfset 9 for may samba server Jaime A Cifuentes IBM GS - SSD AIX/UNIX Sys Supp -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Nested DFS shares
Hey I am having a little problem with MSDFS links. If I create afolder and put the links at the root of that folder there is noproblem. But is I nest the folder a few levels deep and then sharethat folder out with the msdfs root = yes option the links will bringback blank pages. SO a structure like \DFS\Link works but if I do\DFS\Lenexa\Link the links stop working. Any ideas. Thanks
[Samba] Welcome to the Linux Magazine newsletter
*PLEASE SAVE THIS WELCOME MESSAGE! * Welcome to linux-mag-news! This list is for the monthly Linux Magazine newsletter. SUBSCRIBING: Send a blank message to: [EMAIL PROTECTED] UNSUBSCRIBING: Send a message to your personal unsubscribe address included in each message or send a message to: [EMAIL PROTECTED] WEB INTERFACE: http://sand.lyris.net/cgi-bin/lyris.pl?site=sandenter=linux-mag-news You can change your subscription email address, unsubscribe, or change your settings at any time. LIST OWNER: If you have any questions or problems with your subscription please contact the list owner at: [EMAIL PROTECTED] ** ** * LINUX MAGAZINE SUBSCRIPTIONS: * ** * To subscribe to Linux Magazine itself, use this link: * ** * https://www.linux-mag.com/centrobe_us.html * ** ** Thanks for joining the newsletter! - The editors of Linux Magazine -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Welcome to the Linux Magazine newsletter
*PLEASE SAVE THIS WELCOME MESSAGE! * Welcome to linux-mag-news! This list is for the monthly Linux Magazine newsletter. SUBSCRIBING: Send a blank message to: [EMAIL PROTECTED] UNSUBSCRIBING: Send a message to your personal unsubscribe address included in each message or send a message to: [EMAIL PROTECTED] WEB INTERFACE: http://sand.lyris.net/cgi-bin/lyris.pl?site=sandenter=linux-mag-news You can change your subscription email address, unsubscribe, or change your settings at any time. LIST OWNER: If you have any questions or problems with your subscription please contact the list owner at: [EMAIL PROTECTED] ** ** * LINUX MAGAZINE SUBSCRIPTIONS: * ** * To subscribe to Linux Magazine itself, use this link: * ** * https://www.linux-mag.com/centrobe_us.html * ** ** Thanks for joining the newsletter! - The editors of Linux Magazine -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbmount and 2GB limit.
Hi, I am mounting a windows 2000 share on a linux box (2.4.18) using smbmount (2.2.2). I can create files 2Gb on both the systems, but I can't copy a file 2Gb from the linux box over the smbmount. The file size limit is exceeded and the cp command core-dumps. Has anyone solved this problem? I had installed the samba binary rpms; is there a patch-n-compile solution available ? Thanks, Niranjan P. Ghate _ Send and receive Hotmail on your mobile device: http://mobile.msn.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Welcome to the Linux Magazine newsletter
*PLEASE SAVE THIS WELCOME MESSAGE! * Welcome to linux-mag-news! This list is for the monthly Linux Magazine newsletter. SUBSCRIBING: Send a blank message to: [EMAIL PROTECTED] UNSUBSCRIBING: Send a message to your personal unsubscribe address included in each message or send a message to: [EMAIL PROTECTED] WEB INTERFACE: http://sand.lyris.net/cgi-bin/lyris.pl?site=sandenter=linux-mag-news You can change your subscription email address, unsubscribe, or change your settings at any time. LIST OWNER: If you have any questions or problems with your subscription please contact the list owner at: [EMAIL PROTECTED] ** ** * LINUX MAGAZINE SUBSCRIPTIONS: * ** * To subscribe to Linux Magazine itself, use this link: * ** * https://www.linux-mag.com/centrobe_us.html * ** ** Thanks for joining the newsletter! - The editors of Linux Magazine -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Welcome to the Linux Magazine newsletter
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: SOLVED! [Samba] PDC and BDC with LDAP and Samba 2.2.4
It's me again, with the solution to my problems. To get a working BDC, you have to kill samba, delete your secrets.tdb, create a MACHINE.SID and then restart samba. You will have to do this on the PDC and the BDC to have the same SID the the secrets.tdb file. Then machine account are valid even if you move your PDC, or you add a 2nd BDC, as long as you create the MACHINE.SID file before the first startup of samba. Don't forget, the MACHINE.SID file have to be the same on all domain controlers or machine account will be invalid. And ho, backup your MACHINE.SID file, samba deletes it when it convert the file to secrets.tdb! Thanks to you all!!! Yannick Tousignant === Gestion Informatique OKA ltée. Téléphone : (514) 282-9334 (#238) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Yannick Tousignant Sent: Wednesday, June 05, 2002 12:10 PM To: Gerald Carter Cc: [EMAIL PROTECTED] Subject: RE: [Samba] PDC and BDC with LDAP and Samba 2.2.4 Ok, i'm stuck at this point. Either if i want to move the current PDC to another server or if i want to make a BDC, i have to rejoin all the stations to the domain. The machine account are stored in the LDAP database that I replicate to the BDC. The problem is that samba store some kind of part of the machine account somewhere (maybe in secrets.tdb) that i can't replicate on both servers. So if the users log into another PDC, the machine accounts are not valid for the server, so it deny all logon! If anyone can help me find a way to have valid machine account on 2 different DC... Thanks! Yannick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Gerald Carter Sent: Wednesday, June 05, 2002 9:04 AM To: Yannick Tousignant Cc: [EMAIL PROTECTED] Subject: RE: [Samba] PDC and BDC with LDAP and Samba 2.2.4 On Tue, 4 Jun 2002, Yannick Tousignant wrote: Hi, I tried to move the current PDC to another machine that have the same LDAP database. It didn't work... There is something about the machine account! How does samba handle this? i could not logon to the moved PDC, so i rejoined the domain (added my machine in TEMP workgroup, reboot, rejoin de domain, reboot), and then it worked! Is there any way i can bypass this? Can the uid's for passwd entries sync'd on bother servers? cheers, jerry - Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org --http://www.plainjoe.org Sam's Teach Yourself Samba in 24 Hours 2ed. ISBN 0-672-32269-2 --I never saved anything for the swim back. Ethan Hawk in Gattaca-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Get the SID in secrets.tdb
Is there any way i could get the SID in my secrets.tdb file? That could save me of rejoining all stations to the domain! Thanks! Yannick Tousignant === Gestion Informatique OKA ltée. Téléphone : (514) 282-9334 (#238) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: SOLVED! [Samba] PDC and BDC with LDAP and Samba 2.2.4
On Wed, 5 Jun 2002, Yannick Tousignant wrote: It's me again, with the solution to my problems. To get a working BDC, you have to kill samba, delete your secrets.tdb, create a MACHINE.SID and then restart samba. You will have to do this on the PDC and the BDC to have the same SID the the secrets.tdb file. Then machine account are valid even if you move your PDC, or you add a 2nd BDC, as long as you create the MACHINE.SID file before the first startup of samba. Don't forget, the MACHINE.SID file have to be the same on all domain controlers or machine account will be invalid. And ho, backup your MACHINE.SID file, samba deletes it when it convert the file to secrets.tdb! So this did not work by simply copying secrets.tdb from the PDC to the BDC? cheers, jerry - Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org --http://www.plainjoe.org Sam's Teach Yourself Samba in 24 Hours 2ed. ISBN 0-672-32269-2 --I never saved anything for the swim back. Ethan Hawk in Gattaca-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Welcome to the Linux Magazine newsletter
*PLEASE SAVE THIS WELCOME MESSAGE! * Welcome to linux-mag-news! This list is for the monthly Linux Magazine newsletter. SUBSCRIBING: Send a blank message to: [EMAIL PROTECTED] UNSUBSCRIBING: Send a message to your personal unsubscribe address included in each message or send a message to: [EMAIL PROTECTED] WEB INTERFACE: http://sand.lyris.net/cgi-bin/lyris.pl?site=sandenter=linux-mag-news You can change your subscription email address, unsubscribe, or change your settings at any time. LIST OWNER: If you have any questions or problems with your subscription please contact the list owner at: [EMAIL PROTECTED] ** ** * LINUX MAGAZINE SUBSCRIPTIONS: * ** * To subscribe to Linux Magazine itself, use this link: * ** * https://www.linux-mag.com/centrobe_us.html * ** ** Thanks for joining the newsletter! - The editors of Linux Magazine -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Please Confirm Your Membership to the Linux Magazinenewsletter
Way to go Billy Throws Rotten Tommatoes On Wed, 5 Jun 2002, Billy O'Connor wrote: -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Welcome to the Linux Magazine newsletter
*PLEASE SAVE THIS WELCOME MESSAGE! * Welcome to linux-mag-news! This list is for the monthly Linux Magazine newsletter. SUBSCRIBING: Send a blank message to: [EMAIL PROTECTED] UNSUBSCRIBING: Send a message to your personal unsubscribe address included in each message or send a message to: [EMAIL PROTECTED] WEB INTERFACE: http://sand.lyris.net/cgi-bin/lyris.pl?site=sandenter=linux-mag-news You can change your subscription email address, unsubscribe, or change your settings at any time. LIST OWNER: If you have any questions or problems with your subscription please contact the list owner at: [EMAIL PROTECTED] ** ** * LINUX MAGAZINE SUBSCRIPTIONS: * ** * To subscribe to Linux Magazine itself, use this link: * ** * https://www.linux-mag.com/centrobe_us.html * ** ** Thanks for joining the newsletter! - The editors of Linux Magazine -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Welcome to the Linux Magazine newsletter
*PLEASE SAVE THIS WELCOME MESSAGE! * Welcome to linux-mag-news! This list is for the monthly Linux Magazine newsletter. SUBSCRIBING: Send a blank message to: [EMAIL PROTECTED] UNSUBSCRIBING: Send a message to your personal unsubscribe address included in each message or send a message to: [EMAIL PROTECTED] WEB INTERFACE: http://sand.lyris.net/cgi-bin/lyris.pl?site=sandenter=linux-mag-news You can change your subscription email address, unsubscribe, or change your settings at any time. LIST OWNER: If you have any questions or problems with your subscription please contact the list owner at: [EMAIL PROTECTED] ** ** * LINUX MAGAZINE SUBSCRIPTIONS: * ** * To subscribe to Linux Magazine itself, use this link: * ** * https://www.linux-mag.com/centrobe_us.html * ** ** Thanks for joining the newsletter! - The editors of Linux Magazine -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] swat seems broken in HEAD
it just says /usr/sbin/swat.new Aborted when i run it from the command line. nothing i can see in the logs... The swat binary from a 2 week old head now (with the rest of the installation from today's head) seems to work okay. what's going on with swat - did i screw up the build? Are others also having problems? (nothing in the marc) brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] swat seems broken in HEAD
Bradley, is the new testparm program from the same build getting a segment violation? -- Billy O'Connor -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] swat seems broken in HEAD
On Wed, 2002-06-05 at 18:53, Billy O'Connor wrote: Bradley, is the new testparm program from the same build getting a segment violation? it segfaults - maybe i'm missing a dependency or something? brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] swat seems broken in HEAD
On Wed, Jun 05, 2002 at 10:44:04PM -0400, Bradley W. Langhorst wrote: On Wed, 2002-06-05 at 18:53, Billy O'Connor wrote: Bradley, is the new testparm program from the same build getting a segment violation? it segfaults - maybe i'm missing a dependency or something? No, its just a bug - and I think it is being looked at. (just slowly - people are pretty busy) Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] swat seems broken in HEAD
I have the same condition, would you mind trying out this patch and
tell me if it works for you, both on testparm and swat? Please don't
check it into cvs yet though, I want to check some more string
conditions before I submit it.
--- samba/source/param/loadparm.c Thu May 30 20:47:19 2002
+++ samba_test/source/param/loadparm.c Wed Jun 5 15:58:50 2002
-3422,8 +3422,13
break;
case P_STRING:
case P_USTRING:
- parm_table[i].def.svalue =
- strdup(*(char **)parm_table[i].ptr);
+if( parm_table[i].ptr ) {
+ parm_table[i].def.svalue =
+ strdup(*(char **)parm_table[i].ptr);
+}
+else {
+parm_table[i].def.svalue = NULL;
+}
break;
case P_GSTRING:
case P_UGSTRING:
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] swat seems broken in HEAD
The swat/testparm bug is in lp_save_defaults(), a little used (swat/testparm only) function. An attempted strdup() of a NULL string is segfaulting. I gave Brad a patch to try, I'll test it some more, there're 2 other string conditions I want to test, then I'll send the patch in. -- Billy O'Connor -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] using @group_name in smb.conf
Hi all, I need to give a group of users access to a file share that I am sharing via samba. In smb.conf I am using something similar to; [accts] comment = Accounts Dept Share path = /usr/local/share/accounts valid users = accounts public = no writable = yes printable = no create mask = 0765 The valid users line says who can access this share: accounts. I know the accounts = the accounts group. How/where do I add the actual valid usernames to this group? Within smb.conf, or as a file (Where does the file sit and what is it called (accounts ?) I can't find the answer in the docs, I did try :-( Help! TIA Darryl -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] using @group_name in smb.conf
On Thu, 6 Jun 2002, Darryl Harvey wrote: Hi all, I need to give a group of users access to a file share that I am sharing via samba. In smb.conf I am using something similar to; [accts] comment = Accounts Dept Share path = /usr/local/share/accounts valid users = accounts public = no writable = yes printable = no create mask = 0765 The valid users line says who can access this share: accounts. I know the accounts = the accounts group. How/where do I add the actual valid usernames to this group? Within smb.conf, or as a file (Where does the file sit and what is it called (accounts ?) I can't find the answer in the docs, I did try :-( Assuming accounts is a local group just vigr and append the users you need comma seperated. ie: account:x:1004:daryl,root Yours Tony Jan 22-26 2003 Linux.Conf.AU http://conf.linux.org.au/ The Australian Linux Technical Conference! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: --with-acl-support (2.2.4
Are you using an ACL enabled kernel ? If not you need to either patch your existing kernel (acl.bestbits.at) or you can use the XFS filesystem from SGI (oss.sgi.com). If you want to reinstall the whole system then SGI actually produce an adapted RH installer to run in conjunction with the usual media which gives you XFS out of the box (the ACL utlities are a bit dated though and you will need to update them after installation I found as they do not function properly with defaults.) Noel -Original Message- From: Nieminen, Jooel [mailto:[EMAIL PROTECTED]] Sent: 05 June 2002 06:55 To: '[EMAIL PROTECTED]' Subject: --with-acl-support (2.2.4 mm... am I understanding something really wrong or is there something that I've missed. samba-2.2.4 configure --with-acl-support outputs these lines along others: checking whether to support ACLs... checking for acl_get_file in -lacl... no checking for ACL support... no normal? --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.368 / Virus Database: 204 - Release Date: 29/05/2002
VL: --with-acl-support (2.2.4)
I don't know about you guys, but samba did configure with acl-support when I added the "unneeded" devel packages of acl. -Alkuperäinen viesti-Lähettäjä: Nieminen, Jooel Lähetetty: 5. kesäkuuta 2002 0855Vastaanottaja: '[EMAIL PROTECTED]'Aihe: --with-acl-support (2.2.4 mm... am I understanding something really wrong or is there something that I've missed. samba-2.2.4 configure --with-acl-support outputs these lines along others: checking whether to support ACLs...checking for acl_get_file in -lacl... nochecking for ACL support... no normal?
RE: --with-acl-support (2.2.4
OK so you can set and view ACLs using setfacl/getfacl ('setfacl -m d:o::rwx
/tmp' 'getfacl /tmp' ? ie the kernel patches worked successfully ?)
If so then ACLs are indeed enabled. I would then start the compilation
afresh - Samba should pick up on the ACLs automatically.
Are you using winbindd for authentication ?
A caveat to remember once you are up and running with ACLs is that only the
owner and root can alter ACLs through the Windows Explorer editor. For
administration purposes I create a protected, hidden share with 'force user
= root'.
-Original Message-
From: Nieminen, Jooel [mailto:[EMAIL PROTECTED]]
Sent: 05 June 2002 08:08
To: Noel Kelly
Subject: VS: --with-acl-support (2.2.4
yeah.
pathced my kernel and installed the other stuff...
there is some stupid thing which is undocumented with samba.
when running make after configure it says that it is
compiling with acl
support!
but, anyhow putting my server together and trying to use more
access than
usual unix produces access denied message.
the same thing it did with trustees acl.
well, getting pretty frustrated with samba in total.
had to build my own package instead of using rpm and thus
getting everything
in unstandardized mess.
if this is where linux still is with compability with windows
networks...
poor, really poor and too sticky.
is there any clear documentation on this anywhere?
I didn't get any page on web which would have instructed on
enabling acl's
with samba...
you probably are wrong guy to cry to but have to dump my
thoughts somewhere.
cheers,
Jooel
-Alkuperäinen viesti-
Lähettäjä: Noel Kelly [mailto:[EMAIL PROTECTED]]
Lähetetty: 5. kesäkuuta 2002 0955
Vastaanottaja: 'Nieminen, Jooel'; '[EMAIL PROTECTED]'
Aihe: RE: --with-acl-support (2.2.4
Are you using an ACL enabled kernel ?
If not you need to either patch your existing kernel
(acl.bestbits.at) or
you can use the XFS filesystem from SGI (oss.sgi.com). If you want to
reinstall the whole system then SGI actually produce an
adapted RH installer
to run in conjunction with the usual media which gives you
XFS out of the
box (the ACL utlities are a bit dated though and you will
need to update
them after installation I found as they do not function properly with
defaults.)
Noel
-Original Message-
From: Nieminen, Jooel [mailto:[EMAIL PROTECTED]]
Sent: 05 June 2002 06:55
To: '[EMAIL PROTECTED]'
Subject: --with-acl-support (2.2.4
mm...
am I understanding something really wrong or is there
something that I've
missed.
samba-2.2.4 configure --with-acl-support outputs these lines
along others:
checking whether to support ACLs... checking for acl_get_file
in -lacl... no
checking for ACL support... no
normal?
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.368 / Virus Database: 204 - Release Date: 29/05/2002
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.368 / Virus Database: 204 - Release Date: 29/05/2002
netatalk.c
hi there!
this is simple netatalk vfs module against stackable VFS
interface.
regards,
--
Alexey Kotovich
/* Software developer, SaM-Solutions Ltd. */
-- fortune says --
Why use Windows, since there is a door?
/*
* AppleTalk VFS module for Samba.
*
* Copyright (C) Alexey Kotovich, 2002
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*/
#include config.h
#include stdio.h
#include sys/stat.h
#ifdef HAVE_UTIME_H
#include utime.h
#endif
#ifdef HAVE_DIRENT_H
#include dirent.h
#endif
#ifdef HAVE_FCNTL_H
#include fcntl.h
#endif
#include errno.h
#include string.h
#include includes.h
#include vfs.h
#define APPLEDOUBLE .AppleDouble
#define APPLEPARENT .Parent
#define ADOUBLEMODE 0777
#define HEADERMODE 0775
#define AID_DATA 1
#define AID_RESOURCE 2
#define AID_REALNAME 3
#define AID_COMMENT 4
#define AID_ICON_MONO 5
#define AID_ICON_COLOR 6
#define AID_INFO_FILE 7 /* for v1? */
//#define AID_INFO_FILE 8 /* for v2 */
#define AID_INFO_FINDER 9
#define AID_INFO_MAC 10
#define AID_INFO_PRODOS 11
#define AID_INFO_MSDOS 12
#define AID_AFP_NAME 13
#define AID_AFP_INFO 14
#define AID_AFP_DID 15 /* directory ID */
#define FILE_TYPE TEXT
#define FILE_CREATOR UNIX
#define MAX_ENTRIES 16
#define ADOUBLE_MAGIC {0x00, 0x05, 0x16, 0x07}
#define ADOUBLE_VERSION1 {0x00, 0x01, 0x00, 0x00}
#define ADOUBLE_VERSION2 {0x00, 0x02, 0x00, 0x00}
#define ADOUBLE_LOCK {0x00, 0x00, 0x01, 0xa0}
#define ADOUBLE_MAX_FNAME 255
#define ADOUBLE_MAX_COMMENT 200
#define ADOUBLE_COMMENT created by Samba
typedef uint8 a_uint8;
typedef uint8 a_uint16[2];
typedef uint8 a_uint32[4];
typedef uint8 a_int8;
typedef uint8 a_int16[2];
typedef uint8 a_int32[4];
typedef struct adouble_entry
{
a_uint32 eid;
a_uint32 offset;
a_uint32 length;
size_t item_size;
void *item;
} a_entry;
#define ADOUBLE_ENTRY_SIZE 12
typedef struct adouble_header
{
a_uint32 magic;
a_uint32 version;
a_uint8 empty[16];
a_uint16 num_entries;
a_entry entries[MAX_ENTRIES];
} a_header;
#define ADOUBLE_HEADER_SIZE 26
#define ADOUBLE_HEADER_FULL_SIZE (26 + (MAX_ENTRIES * 12))
typedef struct adouble_file_info
{
a_int32 date_create;
a_int32 date_modify;
a_int32 date_backup;
a_int32 date_access;
} a_filei;
#define ADOUBLE_FILEI_SIZE 16
typedef struct adouble_file_attr
{
a_uint8 empty[3];
a_uint8 attrs;
} a_filea;
#define ADOUBLE_FILEA_SIZE 4
typedef struct adouble_finder_info
{
a_uint8 file_type[4];
a_uint8 file_creator[4];
a_uint16 flags1;
a_int16 file_y_pos; /* location in the folder */
a_int16 file_x_pos;
a_int16 file_folder; /* window */
/* extended finder info */
a_int16 icon_id;
a_int16 empty[3];
a_int8 flags2;
a_int8 flags3;
a_int16 comment_id;
a_int32 home_id; /* home directory ID */
} a_finderi;
#define ADOUBLE_FINDERI_SIZE 32
#define MAX_UINT16 65536U
#define MAX_UINT32 4294967296U
#define MAX_INT16 32767
#define MIN_INT16 -32768
#define MAX_INT32 2147483647
#define MIN_INT32 -2147483647
#define UINT16_BE
#define UINT32_BE
#define UINT32_LE
#ifdef UINT16_BE
static __inline__ void uint16_be_encode(uint8 *field, uint16 value)
{
field[0] = (value 8) 0xff;
field[1] = value 0xff;
}
#endif
#ifdef UINT32_BE
static __inline__ void uint32_be_encode(uint8 *field, uint32 value)
{
field[0] = (value 24) 0xff;
field[1] = (value 16) 0xff;
field[2] = (value 8) 0xff;
field[3] = value 0xff;
}
#endif
#ifdef INT16_BE
static __inline__ void int16_be_encode(uint8 *field, int16 value)
{
uint16 u_value = value = 0 ? value : value + MAX_UINT16;
field[0] = (u_value 8) 0xff;
field[1] = value 0xff;
}
#endif
#ifdef INT32_BE
static __inline__ void int32_be_encode(uint8 *field, int32 value)
{
uint32 u_value = value = 0 ? value : value + MAX_UINT32;
field[0] = (u_value 24) 0xff;
field[1] = (u_value 16) 0xff;
field[2] = (u_value 8) 0xff;
field[3] = u_value 0xff;
}
#endif
#ifdef UIN16_LE
static __inline__ uint16 uint16_le_encode(uint8 *field)
{
return (uint16) field[1] 8 | (uint16) field[0];
}
#endif
#ifdef UINT32_LE
static __inline__ uint32 uint32_le_encode(uint8 *field)
{
uint16 big = 0;
uint16 little = 0;
uint32 u_value = 0;
big= (uint16) (field[1] 8) | (uint16) (field[0]);
little = (uint16) (field[2] 8) | (uint16) (field[3]);
u_value |= little;
if (big != 0)
u_value |= (uint32) (big 8);
return u_value;
}
#endif
#ifdef INT16_LE
Re: SPAM on samba-technical
please consider some spam protection, Going over the log files it seems that about 80 messages a day are being blocked by spews. The RBL is blocking maybe 5-6 per day. I added spamcop to the list tody and it seems to be blocking a lot more mail. 211.117.176.60 is DNSbl listed. by korea.services.net Blocked due to spam, see http://korea.services.net/blocked.phtml 211.223.191.177 is DNSbl listed. by korea.services.net Blocked due to spam, see http://korea.services.net/blocked.phtml i think it's time to add korea.services.net - sad for korean posters, but ...
[Fwd: smbd 2.2.4 Solaris 8 on intel (PR#24507)]
Better forward this bug to the technical list. Anyone using samba on 2 processors machine? -Forwarded Message- From: [EMAIL PROTECTED] To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: smbd 2.2.4 Solaris 8 on intel (PR#24507) Date: 05 Jun 2002 09:29:30 -0700 I am not even sure how to describe this issue. We have a University labratory environment with 150 or so Windows computers that connect to our samba server. We have smbd 2.2.2 running on a Solaris 8 Sparc computer without an issue :-) We wish to move the smb services to a quad intel machine running Solaris 8. We first started with 2.2.4 compiled with the same options as on the sparc machine. Sparc options ./configure --prefix=/public/sparc/samba-2.2.2 --sysconfdir=/etc/localhost/samba-2.2.2 --with-configdir=/etc/localhost/samba-2.2.2 --with-privatedir=/etc/localhost/samba-2.2.2/private --with-lockdir=/var/run --with-pam --with-acl-support --with-quotas --with-automount But we got hundreds of Signal 11 (segmentation faults). Even the nmbd died from this. We then switched back to 2.2.2, but had the same results. After some extensive trouble shooting, it appeared to be the --with-quotas option that was causing the problem, so we recompiled 2.2.4 with the following options env CFLAGS='-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -march=i686 -O2 -funroll-loops -fexpensive-optimizations' \ CPPFLAGS='-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -march=i686 -O2 -funroll-loops -fexpensive-optimizations' \ ./configure --prefix=/package/samba-2.2.4 \ --sysconfdir=/etc/localhost/samba-2.2.4 \ --with-configdir=/etc/localhost/samba-2.2.4 \ --with-privatedir=/etc/localhost/samba-2.2.4/private \ --with-logfilebase=/var/log/samba-2.2.4 \ --with-lockdir=/var/log/samba-2.2.4/locks \ --with-piddir=/var/log/samba-2.2.4 \ --with-acl-support \ --with-automount \ --with-pam \ --sharedstatedir=/var/samba-2.2.4 With only two Win2k machines using this server, we were unable to reproduce the segmentation faults. We fineshed the configuration, and then we switched smb services to this machine. 1. stop nmbd on current server 2. start smbd on new server 3. start nmbd on new server As clients connect to the netbios name, they gradually learn of the new server. The connections to the old server taper off, and the connections to the new server start to build. Almost immediately, the logs include the segmentation fault error message (signal 11). Incidentally, compiling without any CFLAGS, CPPFLAGS does not make any difference to this problem, nor does using Suns supplied gcc with the Sun as/ld or if we use gcc3.0.4 with gnu as/ld. I have a level 3 logs at http://remora.csc.uvic.ca/smbbug/c-oswego.log http://remora.csc.uvic.ca/smbbug/c-cooper.log http://remora.csc.uvic.ca/smbbug/smb.conf Any assistance/test we can do to help out is of course available. thanks, -- Evan Rempel [EMAIL PROTECTED] 250.721.8296 Senior Programmer Analyst University of Victoria -- Simo Sorce -- Una scelta di liberta': Software Libero. A choice of freedom: Free Software. http://www.softwarelibero.it
Re: Access control to SAM / _samr_query_sec_obj
This is the first version of the patch to implement access control to SAM.
It implements checks of the desired access in all open functions (those that create
handles)
against the appropriate default SDs of the previous patch and associates the granted
access bits
with the handle. These granted access bits are then used in the other functions to
check if the
current handle (user) is allowed to run the function.
However, I'm not sure if the nt_user_token works correctly, especially if root by
default
belongs to the administrators alias. So to stop the patch braking write access to the
sam,
I've commented out all return nt_status_access_denied. I haven't had the possibility
to test
the nt_user_token, as the attempts to join my win2k workstation to the samba PDC
always fails :(
In effect the patch therefore currently doesn't do much except logging but can be used
for
testing. If it works, the changes are then minimal.
But the patch should at least be enough to see if it is conceptionally acceptable, so
any
comments or improvements are welcome.
Kai
--- ./samba-orig/source/rpc_server/srv_samr_nt.c Fri May 31 19:51:43 2002
+++ ./samba/source/rpc_server/srv_samr_nt.c Wed Jun 5 10:12:39 2002
-52,9 +52,47
/* for use by the \PIPE\samr policy */
DOM_SID sid;
uint32 status; /* some sort of flag. best to record it. comes from opnum 0x39 */
+ uint32 acc_granted;
DISP_INFO disp_info;
};
+struct generic_mapping sam_generic_mapping = {
+ 0x20010,
+ 0x2000e,
+ 0x20021,
+ 0xf003f
+};
+
+struct generic_mapping dom_generic_mapping = {
+ 0x20084,
+ 0x2047a,
+ 0x20301,
+ 0xf07ff
+};
+
+struct generic_mapping usr_generic_mapping = {
+ 0x2031a,
+ 0x20044,
+ 0x20041,
+ 0xf07ff
+};
+
+struct generic_mapping grp_generic_mapping = {
+ 0x20010,
+ 0x2000e,
+ 0x20001,
+ 0xf001f
+};
+
+struct generic_mapping ali_generic_mapping = {
+ 0x20004,
+ 0x20013,
+ 0x20008,
+ 0xf001f
+};
+
+static NTSTATUS samr_make_dom_obj_sd(TALLOC_CTX *ctx, SEC_DESC **psd, size_t
+*sd_size);
+
/***
Create a samr_info struct.
/
-352,17 +390,45
NTSTATUS _samr_open_domain(pipes_struct *p, SAMR_Q_OPEN_DOMAIN *q_u,
SAMR_R_OPEN_DOMAIN *r_u)
{
- struct samr_info *info;
+ structsamr_info *info;
+ SEC_DESC *psd = NULL;
+ uint32acc_granted;
+ uint32acc_required;
+ uint32des_access = q_u-flags;
+ size_tsd_size;
+ NTSTATUS status;
r_u-status = NT_STATUS_OK;
/* find the connection policy handle. */
- if (!find_policy_by_hnd(p, q_u-pol, NULL))
+ if (!find_policy_by_hnd(p, q_u-pol, (void**)info))
return NT_STATUS_INVALID_HANDLE;
+ /*check if function is granted*/
+ acc_granted = info-acc_granted;
+ acc_required = 0x0020; //SAMR: open domain
+ if ((acc_granted acc_required) != acc_required)
+ {
+ DEBUG(2,(_samr_open_domain: ACCESS should be DENIED (granted: %#010x; required:
+%#010x)\n,
+ acc_granted, acc_required));
+ //return NT_STATUS_ACCESS_DENIED;
+ }
+
+ /*check if access can be granted as requested by client. */
+ samr_make_dom_obj_sd(p-mem_ctx, psd, sd_size);
+ se_map_generic(des_access,dom_generic_mapping);
+ if(!se_access_check(psd,p-pipe_user.nt_user_token, des_access, acc_granted,
+status))
+ {
+ DEBUG(2,(_samr_open_domain: ACCESS should be DENIED (requested: %#010x)\n,
+ des_access));
+ //return r_u-status = status;
+ }
+
+
/* associate the domain SID with the (unique) handle. */
if ((info = get_samr_info_by_sid(q_u-dom_sid.sid))==NULL)
return NT_STATUS_NO_MEMORY;
+ info-acc_granted = acc_granted;
/* get a (unique) handle. open a policy on it. */
if (!create_policy_hnd(p, r_u-domain_pol, free_samr_info, (void *)info))
-525,10 +591,49
}
/***
+ samr_make_grp_obj_sd
+ /
+
+static NTSTATUS samr_make_grp_obj_sd(TALLOC_CTX *ctx, SEC_DESC **psd, size_t
+*sd_size)
+{
+ extern DOM_SID global_sid_World;
+ DOM_SID adm_sid;
+ DOM_SID act_sid;
+
+ SEC_ACE ace[3];
+ SEC_ACCESS mask;
+
+ SEC_ACL *psa = NULL;
+
+ sid_copy(adm_sid, global_sid_Builtin);
+ sid_append_rid(adm_sid, BUILTIN_ALIAS_RID_ADMINS);
+
+ sid_copy(act_sid, global_sid_Builtin);
+ sid_append_rid(act_sid, BUILTIN_ALIAS_RID_ACCOUNT_OPS);
+
+ //basic access for every one
+ init_sec_access(mask, 0x20011);
+ init_sec_ace(ace[0], global_sid_World, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0);
+
+ //full access for builtin aliases Administrators and Account Operators
+ init_sec_access(mask, 0xf001f);
+ init_sec_ace(ace[1], adm_sid, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0);
+ init_sec_ace(ace[2], act_sid, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0);
+
+ if((psa = make_sec_acl(ctx, NT4_ACL_REVISION,
Re: Access control to SAM / _samr_query_sec_obj
On Wed, Jun 05, 2002 at 07:51:53PM +0200, Kai Krueger wrote:
This is the first version of the patch to implement access control to SAM.
It implements checks of the desired access in all open functions (those that create
handles)
against the appropriate default SDs of the previous patch and associates the granted
access bits
with the handle. These granted access bits are then used in the other functions to
check if the
current handle (user) is allowed to run the function.
However, I'm not sure if the nt_user_token works correctly, especially if root by
default
belongs to the administrators alias. So to stop the patch braking write access to
the sam,
I've commented out all return nt_status_access_denied. I haven't had the possibility
to test
the nt_user_token, as the attempts to join my win2k workstation to the samba PDC
always fails :(
In effect the patch therefore currently doesn't do much except logging but can be
used for
testing. If it works, the changes are then minimal.
But the patch should at least be enough to see if it is conceptionally acceptable,
so any
comments or improvements are welcome.
Kai
--- ./samba-orig/source/rpc_server/srv_samr_nt.c Fri May 31 19:51:43 2002
+++ ./samba/source/rpc_server/srv_samr_nt.c Wed Jun 5 10:12:39 2002
-52,9 +52,47
/* for use by the \PIPE\samr policy */
DOM_SID sid;
uint32 status; /* some sort of flag. best to record it. comes from opnum 0x39 */
+ uint32 acc_granted;
DISP_INFO disp_info;
};
+struct generic_mapping sam_generic_mapping = {
+ 0x20010,
+ 0x2000e,
+ 0x20021,
+ 0xf003f
+};
Nice patch. I do have one request though. I've (for years)
been removing magic numerical constants from Samba (like
the 0xf003f in the patch above). We know what these numbers
are in SEC_ACL terms - can you please change the numbers to
a list of #defined constants :
ie. The 0x20010 above should map to :
READ_CONTROL_ACCESS plus a new constant that specifies READ
access to a SAMR, probably something like SAMR_READ_ACCESS
(as it's a specific right).
Thanks,
Jeremy.
RE: [PATCH] Clean up samba-3.0 for POSIX-96
Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]] writes:
On Fri, 31 May 2002 [EMAIL PROTECTED] wrote:
source/lib/interfaces.c conditionally include sys/time.h and
sys/sockio.h (autoconf macros
already exist)
This change broke SAMBA_2_2. The reason is that lib/interfaces.c
is used in the autoconf test so sys/sockio.h would never be
included. Any thoughts? I've removed it from 2.2. for now
and will look into it some more.
Try this patch. I copied the #include of sys/sockio.h inside of the 3
ifdef'd regions that need it. This kind of even makes sense, because now on
systems that don't implement any of the 3 ways of determining the
interfaces, they don't need sys/sockio.h. (And we don't implement any of
the 3 ways, and don't have this header). This should be a safe patch for
everyone.
Now that I see what is going on, and where I went wrong, I can't help but
notice that there is another HAVE_xxx macro referenced before #include
config.h (HAVE_SYS_TIME_H). I took a brief look at configure, and it does
not appear to ever set HAVE_SYS_TIME_H. But I also see some logic about
site-config files, so perhaps that's a way. At any rate, since I don't need
to change this, and since it is presumably not harming anyone, I have left
it alone. There are also some other HAVE_xxx macros after the #include of
config.h but again, I left these alone.
I re-ran configure and make after this change, and both work ok. This patch
is against the 2.2.4 sources prior to my previous change (I assume that's
where you backed the file up to).
If my changes were applied to the 3.0 tree, then this change needs to be
made there too.
### START OF PATCH ###
--- oldsambasourcelibinterfaces.cWed Jun 5 12:57:57 2002
+++ newsambasourcelibinterfaces.cWed Jun 5 12:58:11 2002
@@ -44,10 +44,6 @@
#endif
#include net/if.h
-#ifndef SIOCGIFCONF
-#include sys/sockio.h
-#endif
-
#ifdef AUTOCONF_TEST
struct iface_struct {
char name[16];
@@ -81,6 +77,10 @@ struct iface_struct {
#if HAVE_IFACE_IFCONF
+#ifndef SIOCGIFCONF
+#include sys/sockio.h
+#endif
+
/* this works for Linux 2.2, Solaris 2.5, SunOS4, HPUX 10.20, OSF1
V4.0, Ultrix 4.4, SCO Unix 3.2, IRIX 6.4 and FreeBSD 3.2.
@@ -153,6 +153,10 @@ static int _get_interfaces(struct iface_
#elif HAVE_IFACE_IFREQ
+#ifndef SIOCGIFCONF
+#include sys/sockio.h
+#endif
+
#ifndef I_STR
#include sys/stropts.h
#endif
@@ -247,6 +251,10 @@ static int _get_interfaces(struct iface_
}
#elif HAVE_IFACE_AIX
+
+#ifndef SIOCGIFCONF
+#include sys/sockio.h
+#endif
/***
*
this one is for AIX (tested on 4.2)
### END OF PATCH ###
Thanks
PG
--
Paul Green, Senior Technical Consultant, Stratus Technologies.
Voice: +1 978-461-7557; FAX: +1 978-461-3610; Video on request.
Re: Access control to SAM / _samr_query_sec_obj
- Original Message - From: Jeremy Allison [EMAIL PROTECTED] Sent: Wednesday, June 05, 2002 8:07 PM Subject: Re: Access control to SAM / _samr_query_sec_obj Nice patch. I do have one request though. I've (for years) been removing magic numerical constants from Samba (like the 0xf003f in the patch above). We know what these numbers are in SEC_ACL terms - can you please change the numbers to a list of #defined constants : ie. The 0x20010 above should map to : READ_CONTROL_ACCESS plus a new constant that specifies READ access to a SAMR, probably something like SAMR_READ_ACCESS (as it's a specific right). Thanks, Jeremy. Ok, I've removed all the numerical constants and have added them as #defines in rpc_samr.h. The names are partly based upon information I got from ACL tools. As the SDs contained numerical constants as well, that part is included as well, so it is a patch against a fresh samba HEAD cvs from 31.5.02 Kai --- ./samba-orig/source/include/rpc_samr.h Wed Jan 30 07:08:15 2002 +++ ./samba/source/include/rpc_samr.h Thu Jun 6 00:37:50 2002 @@ -145,6 +145,170 @@ #define SAMR_CONNECT 0x39 #define SAMR_SET_USERINFO 0x3A +//Access bits to the SAM-object +#define SAMR_ACCESS_UNKNOWN_10x0001 +#define SAMR_ACCESS_SHUTDOWN_SERVER 0x0002 +#define SAMR_ACCESS_UNKNOWN_40x0004 +#define SAMR_ACCESS_UNKNOWN_80x0008 +#define SAMR_ACCESS_ENUM_DOMAINS 0x0010 +#define SAMR_ACCESS_OPEN_DOMAIN 0x0020 + +#define SAMR_ALL_ACCESS ( STANDARD_RIGHTS_REQUIRED_ACCESS | \ + SAMR_ACCESS_OPEN_DOMAIN | \ + SAMR_ACCESS_ENUM_DOMAINS| \ + SAMR_ACCESS_UNKNOWN_8 | \ + SAMR_ACCESS_UNKNOWN_4 | \ + SAMR_ACCESS_SHUTDOWN_SERVER | \ + SAMR_ACCESS_UNKNOWN_1 ) + +#define SAMR_READ( STANDARD_RIGHTS_READ_ACCESS | \ + SAMR_ACCESS_ENUM_DOMAINS ) + +#define SAMR_WRITE ( STANDARD_RIGHTS_WRITE_ACCESS| \ + SAMR_ACCESS_UNKNOWN_8 | \ + SAMR_ACCESS_UNKNOWN_4 | \ + SAMR_ACCESS_SHUTDOWN_SERVER ) + +#define SAMR_EXECUTE ( STANDARD_RIGHTS_EXECUTE_ACCESS | \ + SAMR_ACCESS_OPEN_DOMAIN | \ + SAMR_ACCESS_UNKNOWN_1 ) + +//Access bits to Domain-objects +#define DOMAIN_ACCESS_LOOKUP_INFO_1 0x1 +#define DOMAIN_ACCESS_SET_INFO_1 0x2 +#define DOMAIN_ACCESS_LOOKUP_INFO_2 0x4 +#define DOMAIN_ACCESS_SET_INFO_2 0x8 +#define DOMAIN_ACCESS_CREATE_USER0x00010 +#define DOMAIN_ACCESS_CREATE_GROUP 0x00020 +#define DOMAIN_ACCESS_CREATE_ALIAS 0x00040 +#define DOMAIN_ACCESS_UNKNOWN_80 0x00080 +#define DOMAIN_ACCESS_ENUM_ACCOUNTS 0x00100 +#define DOMAIN_ACCESS_OPEN_ACCOUNT 0x00200 +#define DOMAIN_ACCESS_SET_INFO_3 0x00400 + +#define DOMAIN_ALL_ACCESS ( STANDARD_RIGHTS_REQUIRED_ACCESS | \ + DOMAIN_ACCESS_SET_INFO_3| \ +DOMAIN_ACCESS_OPEN_ACCOUNT | \ +DOMAIN_ACCESS_ENUM_ACCOUNTS | \ +DOMAIN_ACCESS_UNKNOWN_80| \ +DOMAIN_ACCESS_CREATE_ALIAS | \ +DOMAIN_ACCESS_CREATE_GROUP | \ +DOMAIN_ACCESS_CREATE_USER | \ +DOMAIN_ACCESS_SET_INFO_2| \ +DOMAIN_ACCESS_LOOKUP_INFO_2 | \ +DOMAIN_ACCESS_SET_INFO_1| \ +DOMAIN_ACCESS_LOOKUP_INFO_1 ) + +#define DOMAIN_READ( STANDARD_RIGHTS_READ_ACCESS | \ + DOMAIN_ACCESS_UNKNOWN_80| \ +DOMAIN_ACCESS_LOOKUP_INFO_2 ) + +#define DOMAIN_WRITE ( STANDARD_RIGHTS_WRITE_ACCESS| \ + DOMAIN_ACCESS_SET_INFO_3| \ +DOMAIN_ACCESS_CREATE_ALIAS | \ +DOMAIN_ACCESS_CREATE_GROUP | \ +DOMAIN_ACCESS_CREATE_USER | \ +DOMAIN_ACCESS_SET_INFO_2| \ +DOMAIN_ACCESS_SET_INFO_1 ) + +#define DOMAIN_EXECUTE ( STANDARD_RIGHTS_EXECUTE_ACCESS | \ + DOMAIN_ACCESS_OPEN_ACCOUNT | \ +DOMAIN_ACCESS_ENUM_ACCOUNTS | \ +DOMAIN_ACCESS_LOOKUP_INFO_1 ) + +//Access bits to User-objects +#define USER_ACCESS_GET_NAME_ETC 0x1 +#define USER_ACCESS_GET_LOCALE 0x2 +#define USER_ACCESS_SET_LOC_COM 0x4 +#define USER_ACCESS_GET_LOGONINFO0x8 +#define USER_ACCESS_UNKNOWN_10 0x00010 +#define USER_ACCESS_SET_ATTRIBUTES 0x00020 +#define USER_ACCESS_CHANGE_PASSWORD 0x00040 +#define USER_ACCESS_SET_PASSWORD 0x00080 +#define USER_ACCESS_GET_GROUPS 0x00100 +#define USER_ACCESS_UNKNOWN_200 0x00200 +#define USER_ACCESS_UNKNOWN_400 0x00400 +
Fw: Printing via RPC Calls in 2.2.5-pre -- drum roll -- it works :)
[whoops -- reposted in plain text] I hope working printing RPCs won't be too shocking for people! (Although I have seen one wierd behaviour on XP ...) I've briefly tested the 2.2.5-pre code on a Mandrake 8.2 server (100 MHz, 64 Mb ram), sharing an Epson Photo 790 inkjet printer. This server was configured with 2.2.3a code, then ran 2.2.4, then 2.2.3a, and now 2.2.5-pre (cvs update from Sunday June 2. Since the upgrade to 2.2.5-pre I have tried: File sharing with encrypted passwords and user level security, which worked as expected. I've uploaded a 9X driver to the server from a Windows XP client. I've tested the printer with Windows XP client -- printer properties can now be viewed without crashing XP spools service. On XP pages print. *** odd thing *** Even though I've taken Epson Status Monitor 3 out of my Start Up folder, I have had a couple of communication error dialogues from it after or before (depending on the document complexity) my print outs. The box says Check all connections and make sure all devices are on. If the power was turned off during printing, cancel the print job. If the error does not clear, see your manual. It has a greyed out section for ink levels (which don't seem to be monitorable over the network). It has a button labeled Stop that changes to OK after the print has completed. (I have EPSON Printer Status Agent2 running as a service.) *** end odd thing *** Printer default page size changed from the XP client, and remembered after a reboot. Printer properties and printing from Windows 98 SE tested with no problems. Speed of communication with the printer is a *lot* better since I turned the logging level down from 10 to 1. All this has made me brave enough to put my shiny new rpms on to a test server sharing an HP laser to NT4 clients. I'll report back tomorrow. I hope this is useful information, Steven
Re: known BUG multi-byte character set in usernames
On Sun, Jun 02, 2002 at 07:44:02PM +0200, Juergen Hasch wrote:
Hi Jerry,
Am Sonntag, 2. Juni 2002 03:15 schrieb Gerald Carter:
On Fri, 31 May 2002, Juergen Hasch wrote:
Now I never would have brought this up because I don't care to much for
2.2 and I was just curious when I made the patches. But since someone
asked :-) The names/groups are transferred by rpc and converted from
unicode like this: unistr2_to_ascii(t, info1.str[j].uni_acct_name,
sizeof(pstring)); Adding the line
dos_to_unix(t);
makes the umlaute appear.
Now the charset conversion may be totally wrong there, I believed it to
be *easiest* patch.
please send me thispatch for 2.2 if you ave it. Thanks.
I believe the most simple patch would be:
--- lib/util_unistr.c.orig Tue Apr 2 18:27:59 2002
+++ lib/util_unistr.c Sun Jun 2 14:01:57 2002
-311,7 +311,7
/***
Convert a (little-endian) UNISTR2 structure to an ASCII string
- Warning: this version does DOS codepage.
+ Warning: this version does UNIX codepage.
/
void unistr2_to_ascii(char *dest, const UNISTR2 *str, size_t maxlen)
-335,7 +335,7
for (p = dest; (p-dest maxlen-3) (src - str-buffer
str-uni_str_len) *src; src++) {
uint16 ucs2_val = SVAL(src,0);
- uint16 cp_val = ucs2_to_doscp[ucs2_val];
+ uint16 cp_val = ucs2_to_unixcp[ucs2_val];
if (cp_val 256)
*p++ = (char)cp_val;
However, unistr2_to_ascii is used in the printing stuff, too and I don't want
to mess with this mess :-)
A less radical patch is attached therefore, adding a new function
unistr2_to_unix which returns the unix charset instead of the dos codepage.
Also unistr2_tdup is changed to call unistr2_to_unix. It is only used in
nsswitch/winbind_rpc.c.
I've just committed a modified version of this patch to SAMBA_2_2,
if you could test it out I'd appreciate it.
Thanks a *lot* for this patch !
Jeremy.
Re: known BUG multi-byte character set in usernames
Am Mittwoch, 5. Juni 2002 23:48 schrieb Jeremy Allison:
On Sun, Jun 02, 2002 at 07:44:02PM +0200, Juergen Hasch wrote:
Hi Jerry,
Am Sonntag, 2. Juni 2002 03:15 schrieb Gerald Carter:
On Fri, 31 May 2002, Juergen Hasch wrote:
Now I never would have brought this up because I don't care to much
for 2.2 and I was just curious when I made the patches. But since
someone asked :-) The names/groups are transferred by rpc and
converted from unicode like this: unistr2_to_ascii(t,
info1.str[j].uni_acct_name, sizeof(pstring)); Adding the line
dos_to_unix(t);
makes the umlaute appear.
Now the charset conversion may be totally wrong there, I believed it
to be *easiest* patch.
please send me thispatch for 2.2 if you ave it. Thanks.
I believe the most simple patch would be:
--- lib/util_unistr.c.orig Tue Apr 2 18:27:59 2002
+++ lib/util_unistr.c Sun Jun 2 14:01:57 2002
-311,7 +311,7
/***
Convert a (little-endian) UNISTR2 structure to an ASCII string
- Warning: this version does DOS codepage.
+ Warning: this version does UNIX codepage.
/
void unistr2_to_ascii(char *dest, const UNISTR2 *str, size_t maxlen)
-335,7 +335,7
for (p = dest; (p-dest maxlen-3) (src - str-buffer
str-uni_str_len) *src; src++) {
uint16 ucs2_val = SVAL(src,0);
- uint16 cp_val = ucs2_to_doscp[ucs2_val];
+ uint16 cp_val = ucs2_to_unixcp[ucs2_val];
if (cp_val 256)
*p++ = (char)cp_val;
However, unistr2_to_ascii is used in the printing stuff, too and I don't
want to mess with this mess :-)
A less radical patch is attached therefore, adding a new function
unistr2_to_unix which returns the unix charset instead of the dos
codepage. Also unistr2_tdup is changed to call unistr2_to_unix. It is
only used in nsswitch/winbind_rpc.c.
I've just committed a modified version of this patch to SAMBA_2_2,
if you could test it out I'd appreciate it.
Thanks a *lot* for this patch !
Jeremy.
the patch works fine for except for one thing. In the acl security selection
list (showing a list of all available users and groups) the german umlaut
characters are wrong. This is because the unix charset is sent to the windows
client, as no conversion back takes place.
The acl dialogue itself is ok.
I haven't found out yet, where the conversion back to dos code page should
take place. Do you have an idea ?
...Juergen
Re: known BUG multi-byte character set in usernames
On Thu, Jun 06, 2002 at 12:12:45AM +0200, Juergen Hasch wrote: the patch works fine for except for one thing. In the acl security selection list (showing a list of all available users and groups) the german umlaut characters are wrong. This is because the unix charset is sent to the windows client, as no conversion back takes place. The acl dialogue itself is ok. I haven't found out yet, where the conversion back to dos code page should take place. Do you have an idea ? Can you CVS update SAMBA_2_2 - I've just applied a patch I think should fix this. Cheers, Jeremy.
Problem copying files from Win2k Novell client to Samba (repost)
The original message was posted by Dan Barrett: http://lists.samba.org/pipermail/samba-technical/2002-May/036397.html I'm getting reports of similar problems. Nobody responded before - can anyone help? Wade. -- /==\ | Wade Turland | Locked Bag 1797 | | Unix Administrator| Penrith South DC NSW 1797 | | University of Western Sydney | Phone: +61 2 4736 0806 | | Room V137 (Kingswood) | Fax: +61 2 4736 0010 | \==/ When I heated my home with oil, I used an average of 800 gallons a year. I have found that I can keep comfortably warm for an entire winter with slightly over half that quantity of beer. -- Dave Barry, Postpetroleum Guzzler
Re: CVS update: samba/source/rpc_server
On Thu, 6 Jun 2002, Tim Potter wrote: On Wed, Jun 05, 2002 at 06:26:33PM -0700, Jeremy Allison wrote: Modified Files: srv_spoolss_nt.c Log Message: Moved some notify related constants into srv_spoolss_nt.c since they're only used there. Added a PRINTER_NOTIFY_VERSION constant. Please add these to 2.2.x - HEAD printing may well get blown away in the mega-merge once 2.2.5 ships... I'm writing some test routines for the print notification stuff and it's rather a lot of mucking around. Can I do this after 2.2.5 ships and before HEAD printing gets blown away? Please don't mess with 2.2 printing before 2.2.5 ships, unless you have a lot of time to do regression testing. Jeremy, I don't want to add anything else into 2.2 period. We should sync up HEAD now. Even the new Win2k rpcs I'm working on will go into APP_HEAD and HEAD (not 2.2). jerry
Re: CVS update: samba/source/rpc_server
On Wed, Jun 05, 2002 at 11:34:43PM -0500, Gerald Carter wrote: I'm writing some test routines for the print notification stuff and it's rather a lot of mucking around. Can I do this after 2.2.5 ships and before HEAD printing gets blown away? Please don't mess with 2.2 printing before 2.2.5 ships, unless you have a lot of time to do regression testing. I'm not keen to change anything in 2.2 either. I'm planning to merge after 2.2. Tim.
