[Samba] MS Access and RAID

2002-10-28 Thread Harry Mills
Hi,

We have been having a few problems with a M$ Access DB held on a Samba server

Samba version: samba-2.2.4-2N1

We have rebuilt a new server, and transferred the database over to the new
box, along with word/excel docs etc. Everything is working fine, except the
access database, which is running very very slowly (can be over a minute to
open a record).
Details are a little sketchy, but it would seem that when the new server is
being used, one workstation has reasonable access speeds, but subsequent
workstations are slow - although this could be a 'user diagnosis syndrome' ;)

The access binary is held locally on the workstations.
If you transfer the database back to the old samba server, it runs fine.
The two servers are running the same version of samba, same Kernel (2.4.18).
The workstations are Windows98, doing domain logons to the Samba server.

The only difference I can see between the old and new servers, is the new
server has two raided (mirror) IDE drives, the old server is a single drive
box. There are no errors on the NICS, oplocks are off for *.mdb and *.ldb and
tcpdump shosw data flowing consistently between the server and the
workstation. The Load Ave on the box is near enough 0.0.

For the moment, I have put them back on the old server.

Any help would be gratefully received - bit stumped on this one!
-- 
Harry MillsDDI:01749 812100
Educational Development ManagerFax:01749 812749
Navaho TechnologiesMain Office: 0870 7034015
http://www.navaho.co.uk/ 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] AD Question

2002-10-28 Thread Harald Kümmerle
On Sunday 27 October 2002 16:37, Jay Ts wrote:
 Samba as a PDC.  Samba has no limitation (AFAIK) to the number of
 clients.  There are no licensing fees - this isn't Microsoft, you know? ;)
I know, but I thought Microsoft would mess the thing up with the 5 CALs on the 
AD server. :)

 You might have some trouble with multiple domains, though, since
 Samba doesn't support Windows NT trust relationships. There may
 be some workarounds to that, and maybe someone else can comment on it.
According to the roadmap, NT 4.0 trust relationships are already supported.

But perhaps I should shut up and test it on my own... ;)
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] 2.2.6 error

2002-10-28 Thread Florian Rauh
Am Montag, 28. Oktober 2002 10:27 schrieb Elliot:
 guys .. when i run ./configure for my samba 2.2.6 .. i get this error
 checking for test routines... configure: error: cant find test code.
 Aborting config

Your downloaded source archive may be incomplete...

You should post the relevant parts of your config.log to the list.

greetings

Florian Rauh

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Failed to find real path for mount point

2002-10-28 Thread Michael Wisse
Hello!

I try to mount an smb share with:
smbmount //filer/$USER ~/filer -o username=$USER

and I get following error message:
Failed to find real path for mount point

What does it mean? The mount point is accessible and the owner of the mount 
point is USER.

Whith an earlier version of samba I can mount the share with this command.

Regards and thank for advice.
Please cc an  answer directly to my adress, I am not a member of the list.

Michael Wisse  
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] cipsaddsmb UNSUCCESSFUL

2002-10-28 Thread Kalkoul Morad
Hi,

I have a linux box on RH7.3 with samba 2.2.5-1 and cups-1.1.14-15.

I create a cups printer on to this machine with success, It called lptest?
and apparently, when I send a page test it works fine.

But now I want to share It via Samba then  I putted the different setting in
smb.conf . I extracted the different files from the ADOBE POSTSCRIPT DRIVER
and I put them in /usr/share/cups/drivers . After , I ran cupsaddsmb :

# cupsaddsmb -v lptest
Password for root required to access localhost via SAMBA:
Running command: smbclient //localhost/print\$ -N -U'root%secret' -c 'mkdir
W32X86;put /var/spool/cups/tmp/3dbd0c8f9e398 W32X86/lptest.PPD;put
/usr/share/cups/drivers/ADOBEPS5.DLL W32X86/ADOBEPS5.DLL;put
/usr/share/cups/drivers/ADOBEPSU.DLL W32X86/ADOBEPSU.DLL;put
/usr/share/cups/drivers/ADOBEPSU.HLP W32X86/ADOBEPSU.HLP'
added interface ip=172.25.4.64 bcast=172.25.255.255 nmask=255.255.0.0
Domain=[ARTE] OS=[Unix] Server=[Samba 2.2.5]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /var/spool/cups/tmp/3dbd0c8f9e398 as \W32X86/lptest.PPD (1797.7
kb/s) (average 1797.7 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS5.DLL as \W32X86/ADOBEPS5.DLL
(18619.7 kb/s) (average 11410.3 kb/s)
putting file /usr/share/cups/drivers/ADOBEPSU.DLL as \W32X86/ADOBEPSU.DLL
(17863.5 kb/s) (average 12749.7 kb/s)
putting file /usr/share/cups/drivers/ADOBEPSU.HLP as \W32X86/ADOBEPSU.HLP
(9575.2 kb/s) (average 12634.3 kb/s)

Running command: smbclient //localhost/print\$ -N -U'root%secret' -c 'mkdir
WIN40;put /var/spool/cups/tmp/3dbd0c8f9e398 WIN40/lptest.PPD;put
/usr/share/cups/drivers/ADFONTS.MFM WIN40/ADFONTS.MFM;put
/usr/share/cups/drivers/ADOBEPS4.DRV WIN40/ADOBEPS4.DRV;put
/usr/share/cups/drivers/ADOBEPS4.HLP WIN40/ADOBEPS4.HLP;put
/usr/share/cups/drivers/DEFPRTR2.PPD WIN40/DEFPRTR2.PPD;put
/usr/share/cups/drivers/ICONLIB.DLL WIN40/ICONLIB.DLL;put
/usr/share/cups/drivers/PSMON.DLL WIN40/PSMON.DLL;'
added interface ip=172.25.4.64 bcast=172.25.255.255 nmask=255.255.0.0
Domain=[ARTE] OS=[Unix] Server=[Samba 2.2.5]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
putting file /var/spool/cups/tmp/3dbd0c8f9e398 as \WIN40/lptest.PPD (1198.5
kb/s) (average 1198.5 kb/s)
putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM
(18736.0 kb/s) (average 10428.8 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV
(17604.6 kb/s) (average 14433.9 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP
(12698.5 kb/s) (average 14231.8 kb/s)
putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD
(13153.0 kb/s) (average 14224.5 kb/s)
putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL
(19226.2 kb/s) (average 14420.7 kb/s)
putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL (13999.3
kb/s) (average 14415.2 kb/s)

Running command: rpcclient localhost -N -U'root%secret' -c 'adddriver
Windows NT x86
lptest:ADOBEPS5.DLL:lptest.PPD:ADOBEPSU.DLL:ADOBEPSU.HLP:NULL:RAW:NULL'
cmd = adddriver Windows NT x86
lptest:ADOBEPS5.DLL:lptest.PPD:ADOBEPSU.DLL:ADOBEPSU.HLP:NULL:RAW:NULL
result was NT_STATUS_UNSUCCESSFUL

Running command: rpcclient localhost -N -U'root%secret' -c 'addprinter
lptest lptest lptest '
cmd = addprinter lptest lptest lptest 
result was NT_STATUS_UNSUCCESSFUL

Running command: rpcclient localhost -N -U'root%secret' -c 'adddriver
Windows 4.0
lptest:ADOBEPS4.DRV:lptest.PPD:NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:ADFONTS.MFM,
DEFPRTR2.PPD,ICONLIB.DLL'
cmd = adddriver Windows 4.0
lptest:ADOBEPS4.DRV:lptest.PPD:NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:ADFONTS.MFM,
DEFPRTR2.PPD,ICONLIB.DLL
result was NT_STATUS_UNSUCCESSFUL

#

Why adddriver doesn' work ? Someone can help me? Thanks in advance.

PS: I don't use Sources of CUPS drivers / PPDs like ESP PrintPro or I had To
use it absolutely to work it  fine




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] 2.2.6 error

2002-10-28 Thread Florian Rauh
Am Montag, 28. Oktober 2002 10:48 schrieb Elliot:
 I cannot seem to find config.log .. Ran updatedb but nothing.

 I downloaded the tar.gz file twice ...but both times I get this error
 

Post the config.log file in your build directory (where you ran configure). 
What are your configure parameters?

greetings

Florian Rauh

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Another GUI

2002-10-28 Thread atom




 atom wrote:
 
  Well i agree that hiding the special $ is a good idea.
 
  I don't understand how can I parse the smbclient Output wihout the
Disk
  word
 


 smbclient -L atomix | sed s/'  Disk '//
 Also I noticed you don't care about possible spaces in the share names
 and theys are being passed
 to the web form without webalization (replacing with %20).
 One more potential problem with smbclient - it will cut share names that
 are longer than 14 characters. So you may want to find another way of
 getting list of shares. I'm sure there is a Perl module for it.

Well they are actually, everywhere in the functions.php file you will
find urlencode functions when passing parameters like dirs or files also
shares
as variables.




 
  Why is it confusing since the software only operates on files. Also
maybe

 Beecause it does not carry useful information since all the shares we
 are interested
 in marked as Disk.
I'll look for some perl modules for smbclient output parsing.
Maybe that will help.



  you have an old version
  of Thor (see fresmeat.net for the latest version).


 No, I grabbed it from your site. It si v0.5p1.


 
  And the auth utility well it work, look at http://212.160.15.90 and
click
  the Thor Demo, then click the yellow key
  and you will be prompted for a Login and Password. It's just a simple
link
  so it should work to that level at least.
 

 I don't know. In my case it does not happen. I don't get any login
 prompts.

I have to look into that since it's a simple a href to a file,



  Thank you again for interestng in this.
 
  Atom
atom wrote:
   
What word Disk. Could you be more specific.
  
   As far as I understand you parse smbclient output and put Sharename
and
   Type columns
   as label for a link to the share - ShareName Disk. I don't think the
   word Disk carries much useful info. It is rather confuses.
  
And the printers youre right, i'll work on it (i forgot about that,
there are no shared printers in my network).
  
   There is also such shares as IPC$ and ADMIN$ that should be hidden.
  
Could you tell me to what kind of server you were trying to log in
(when the auth failed). I'm working on that now too, i have some
  
   Samba 2.2.6.
   I don't see any passwords prompts at all when try to click on the auth
   button.
   At the same time I watch that it spits word Password: in the Apache
   error log.
  
problems with encrypted passwords so that might be a problem.
Thank you for your help.
  
  
   Any time.
   Actually the interface you are making is something that many people
   need.
   As you probably know there was smb2www script that is very outdated
and
   has some
   major issues (such as running away processes consuming 100% CPU).
   So it would be good to have something that work with new versions of
   Samba.
   Keep up your work !
  
  
  
Atom
  
 
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Winbind with samba PDC

2002-10-28 Thread Buchan Milne
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

 Message: 4
 Date: Fri, 25 Oct 2002 15:51:50 -0300
 From: cyroreal [EMAIL PROTECTED]
 To: samba [EMAIL PROTECTED]
 To: samba-nt-domain [EMAIL PROTECTED]
 Subject: [Samba] Winbind with samba PDC

 Is it possible to use winbind to authenticate my Mandrake
 9.0 (samba 2.2.6) machine on my windows domain (controled
 by a Mandrake 8.2 (samba 2.2.6) server??? I tryed and the
 users are working fine, but the groups that i use to my
 windows shares are not, where do i set on the samba
 server wich groups are my domain groups, is it possible??

This isn't possible, AFAIK there are issues both with samba's groups
handling (you should notice you can't use domain groups on ACLs on
client machines) and winbind's group support (even against Windows DCs)
in 2.2.x.

It could be possible with samba3, but samba3 is not recommended for
production yet. I have RPMs of samba-3alpha20 that will parallel install
with samba-2.2.x (well, currently built for 9.0, but I can build on 8.2
if necessary).

The problem though (with any samba-winbind solution) is that you won't
have consistent uid's between machines, so you won't be able to use
things like NFS.

The better solution is probably to setup LDAP. This will allow you to
use group permissions on samba servers, and NFS between machines.

You can find a tutorial for setting up LDAP on Mandrake at
http://www.mandrakesecure.net

You can then also setup samba to store it's passwords in LDAP, and there
are LDAP-enabled RPMs of samba-2.2.6 at
http://ranger.dnsalias.com/mandrake/samba (soon to be on ftp.samba.org).

Shout if you want some pointers on setting up samba for LDAP on
Mandrake, most work is done for you, you can take a look at the
/etc/samba/smbldap_conf.pm (I think) and the import script in
/usr/share/samba/scripts. Also be sure to look at the new configuration
options in the default smb.conf (will be installed as smb.conf.rpmnew).

Regards,
Buchan

P.S. The samba-ntdom list doesn't exist any more.

- --
|Registered Linux User #182071-|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE9vRrVrJK6UGDSBKcRAhpxAJ93HCNg9VxZiJW0dYMtpF3MVrOuQQCfQzBc
z9NYHgBHbZxCA7bDHeTkyo4=
=m1MX
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Failed to find real path for mount point

2002-10-28 Thread Michael Wisse
Yes, I tried it with the same result.

Michael
 
  I try to mount an smb share with:
  smbmount //filer/$USER ~/filer -o username=$USER
 
  and I get following error message:
  Failed to find real path for mount point
 
  What does it mean? The mount point is accessible and the owner of the
  mount point is USER.
 
  Whith an earlier version of samba I can mount the share with this
  command.
 
  Regards and thank for advice.
  Please cc an  answer directly to my adress, I am not a member of the
  list.
 
  Michael Wisse

 Have you tried it with an explicit path name for the mount location instead
 of the tilde?

 Just a guess.
 mark

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Failed to find real path for mount point

2002-10-28 Thread Christopher Barry
On Mon, 2002-10-28 at 06:24, Michael Wisse wrote:
 Yes, I tried it with the same result.
 
 Michael
  
   I try to mount an smb share with:
 smbmount //filer/$USER ~/filer -o username=$USER
  
   and I get following error message:
 Failed to find real path for mount point
  
   What does it mean? The mount point is accessible and the owner of the
   mount point is USER.
  
   Whith an earlier version of samba I can mount the share with this
   command.
  
   Regards and thank for advice.
   Please cc an  answer directly to my adress, I am not a member of the
   list.
  
   Michael Wisse
 
  Have you tried it with an explicit path name for the mount location instead
  of the tilde?
 
  Just a guess.
  mark
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

did you try
smbmount //filer/homes -o username=$USER

I know that typing \\server\homes in the run box produces my home dir,
but have not tried mounting it.

Good luck.

C

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] AD Question

2002-10-28 Thread Jay Ts
Harald Kümmerle wrote:
 Jay Ts wrote:
  Samba as a PDC.  Samba has no limitation (AFAIK) to the number of
  clients.  There are no licensing fees - this isn't Microsoft, you know? ;)

 I know, but I thought Microsoft would mess the thing up with the 5 CALs
 on the AD server. :)

Oops, I thought you were considering dropping Win 2000 and just using Samba.
I'm not sure how it works if you are accessing the Win 2000 server for
data, while authenticating through Samba.  Anyone?

 According to the roadmap, NT 4.0 trust relationships are already supported.
 
 But perhaps I should shut up and test it on my own... ;)

I think the support is somewhat new in the Samba 3.0 alpha releases.
Good luck with it!

Jay Ts
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Windows cannot see Samba Server

2002-10-28 Thread Jay Ts
Matt Gilliam wrote:
 
 I have a small problem...
 All of my windows machines, XP Pro and 98 cannot see my samba server 
 running on RH 7.3
 i can do a smbclient -Llocalhost   and see all my computers on the network, 
 also windows is telling me
 that it is unable to browse the network, but if i unplug the samba server 
 from the router the windows machines can
 see each other fine..

Just a quick suggestion: check your NetBIOS name on the Samba server.
I misconfigured once, and had a duplicate NetBIOS name, and it acted
just as you describe.

Jay Ts
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] oplocks and share modes

2002-10-28 Thread Mac
From: [EMAIL PROTECTED]
To: =?iso-8859-1?Q?Frank_K=FCster_geb=2E_F=FCrst?= [EMAIL PROTECTED]
Subject: Re: [Samba] oplocks and share modes
Date: Sun, 27 Oct 2002 17:49:50 +

On Fri, Oct 25, 2002 at 07:51:13PM +0200, Frank Küster geb. Fürst wrote:
 
 Yes, thanks. Just one more question: For which versions does this apply?
 All IRIX 6.5.x versions I assume? And as for Linux, any 2.4.x kernel, or
 does it depend on the configuration?

I think it's IRIX 6.5.2f - Herb can you confirm ? For Linux, it's the
2.4.x kernels - but many of the earlier kernels had bugs. Ensure you're
at 2.4.18 or above I think.


The copy of the 'Samba for IRIX' sales sheet that I have from SGI (dated
12/98) agrees with you.  IRIX 6.5.2f or later for kernel oplock
support.


   Mac
  Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
   Work: +44 1707 641000 x285  Everything else: +44 7956 237670 (anytime)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Samba Performance

2002-10-28 Thread rod

Any ideas where i can get a things to check list for performace tuning of Samba

Currently copying 300mb of data since 09:00am this morning and still going ...now 12:20!

100mb full duplex nic on a IBM x232 series dual proc Piii-1.2ghz, 512mb ram, raid 5 - 18.2gb drives

samba
--
mandrake 8.2 with 2.2.5pre1
according to smbstatus - locks are exclusive+batch

Locked files:
Pid  DenyMode  Access   R/WOplock  Name
--
2276  DENY_ALL  0x30196   WRONLY   EXCLUSIVE+BATCH /var/apps/opera/data/s_aentry.cdx  Mon Oct 28 12:28:27 2000


any tips would be appreciated

kind regards
rod


[Samba] RE: smb.conf - user access

2002-10-28 Thread Michael Sharp
if
!helpful == samba list
then
get the fuck off the list

good luck with your lil windows boxes and Linux servers.





I need to allow a REMOTE server user access to his /home/user files.

I realize allowing REMOTE clients is incredibly insecure, but I am
firewalling samba so that only his STATIC ip has access to the server. The
remote user is using win 98 and I am using FreeBSD 4.7.

I'm confused as to what I need to add to the [globals] section so that the
user only has to enter his UNIX passwd ( /etc/passwd ) to get his
/home/user shares.





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Samba Performance

2002-10-28 Thread Noel Kelly



Try an 
ifconfig and see if you are getting errors on the NIC first.

Noel

  -Original Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]]Sent: 28 October 2002 
  12:38To: [EMAIL PROTECTED]Subject: [Samba] Samba 
  PerformanceAny ideas 
  where i can get a "things to check" list for performace tuning of Samba 
  Currently copying 300mb of data since 
  09:00am this morning and still going ...now 12:20! 100mb full duplex nic on a IBM x232 series dual 
  proc Piii-1.2ghz, 512mb ram, raid 5 - 18.2gb drives samba -- mandrake 8.2 with 
  2.2.5pre1 according to smbstatus 
  - locks are exclusive+batch Locked 
  files: Pid  DenyMode 
   Access   R/WOplock  
  Name -- 
  2276  DENY_ALL  0x30196  
   WRONLY   EXCLUSIVE+BATCH 
  /var/apps/opera/data/s_aentry.cdx  Mon Oct 28 12:28:27 2000 
  any tips would be appreciated 
  kind regards rod 
  ---Incoming mail is certified Virus Free.Checked by 
  AVG anti-virus system (http://www.grisoft.com).Version: 6.0.404 / Virus 
  Database: 228 - Release Date: 
15/10/2002


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
 


Re: [Samba] Samba Performance

2002-10-28 Thread mlh
[EMAIL PROTECTED] wrote:



Any ideas where i can get a things to check list for performace 
tuning of Samba

Currently copying 300mb of data since 09:00am this morning and still 
going ...now 12:20!

100mb full duplex nic  on a IBM x232 series dual proc Piii-1.2ghz, 
512mb ram, raid 5 - 18.2gb drives

Have you read the Speed.txt and Speed2.txt files that come with Samba?

Also, double check that the nic is in fact running full duplex.
It's best just to force both sides to full duplex since auto-negotiation
is so unreliable.

Matt




--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] auth to two diff PDCs? (success, sort of)

2002-10-28 Thread Collins, Kevin
Hi All:

Excuse me for butting in here, but I'm planning a migration from WinNT 4
to Samba in the near future and this thread has caused me to worry a
little.

Take the case that I'm planning:  3 Domains each to its own LAN
(connected via 128k Frame Relay lines to form a WAN) Each domain
currently has a NT 4 PDC and each domain trusts each other.  How do I
accomplish these trusts only using Samba PDCs?

Meaning:  If I rip out the NT Domains, replace the PDCs with Samba PDCs
and rebuild new domains (new Domain Names, new NetBIOS names for the
PDCs, etc.)  How do I get the three domains to once again trust each
other?  Is there a Samba command to do this?

Thanks,

Kevin L. Collins, MCSE
Systems Manager
Nesbitt Engineering, Inc.


 -Original Message-
 From: Mathew McKernan [mailto:mathewmckernan;optushome.com.au]
 Sent: Monday, October 28, 2002 2:39 AM
 To: Matthew Hannigan; Andrew Bartlett
 Cc: Matthew Hannigan; [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Subject: Re: [Samba] auth to two diff PDCs? (success, sort of)
 
 
 Hi Matthew,
 
 Andrew is talking about domain trusts here. When the client asks for a
 connection to a share or the samba server itself, the samba 
 daemon will
 check if the user is valid to the PDC. Domain trusts enable 2 
 domains to
 know each others users.
 
 However in some cases this is dangerous, in my situation at 
 work, we have 2
 LANs (physically seperate) and have seperate NT Domains for 
 that reason.
 However we wanted to allow staff to logon to either domain 
 but have access
 to their home drive. To solve this we ran 2 copies of samba 
 (installed to
 different locations) and each copy is a member of the domain 
 they are to
 serve. Then using the interfaces config option in smb.conf 
 we force each
 copy of samba to bind to the LAN it serves.
 
 In your case it sounds as if you are running one LAN but with 
 2 domains that
 don't trust each other. Either establish a trust between the 
 two LANs, or
 use the method above. You will need to set the name 
 differently for each
 copy of Samba, using netbios name in smb.conf, or you will 
 get conflicts.
 
 Thanks
 
 Mathew
 
 
 - Original Message -
 From: Matthew Hannigan [EMAIL PROTECTED]
 To: Andrew Bartlett [EMAIL PROTECTED]
 Cc: Matthew Hannigan [EMAIL PROTECTED]; [EMAIL PROTECTED];
 [EMAIL PROTECTED]
 Sent: Monday, October 28, 2002 5:25 PM
 Subject: Re: [Samba] auth to two diff PDCs? (success, sort of)
 
 
  On Mon, Oct 28, 2002 at 04:56:03PM +1100, Andrew Bartlett wrote:
   Andrew Bartlett wrote:
   
Matthew Hannigan wrote:

 With a single server, settings security = server  and
 password server =  pdc1 pdc2', I can successfully
 authenticate against two entirely different PDCs
 depending on which order I put the two machines in
 the 'password server' list.

 Is there someway of forcing clients from either
 domain to authenticate against the 'right' pdc,
 regardless of the order in the 'password server'
 config?

 What is the algo for choosing auth server out of a
 list, anyway?

 If so it'd be a nice cheap way of getting what
 we would otherwise have to wait for trust relationship
 support for.
   
The reason we don't support this already is that while 
 the auth works,
 a
*lot* of other things break.
  
   But if one PDC trusts the other, then secrutiy=domain 
 will do this stuff
 
  Except that the users would have to be on the server, right? Since
  (according to the docs (smb.conf)) the network logon comes from the
  server, not the workstation.
 
  What precisely does 'on the server' mean anyway?  In the smbpasswd
  file?  We don't use that; we just have the unix user (/etc/passwd)
 
  Matt
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 



smime.p7s
Description: application/pkcs7-signature


[Samba] Is 2.2.6 Final?

2002-10-28 Thread William Jojo


Just tought I'd follow up and see if 2.2.6 is truly the last release of
samba_2_2 CVS branch.

We've got six systems running it with no visible issues.

I'm currently testing CVS from Sunday's pull of 3.0...is this the
direction I should be heading?


Bill

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Slow transfer file between Windows and Samba PDC (2.2 .3a)

2002-10-28 Thread Guillaume Estival
On Fri, Oct 18, 2002 at 04:18:07PM +0100, Noel Kelly wrote:
 
 I think you definitely have a problem with your NIC on the Samba machine.  I
 would swap it out and/or change the cable and see if that cures things.  By
 the sound of that explanation above it could also be something like a PCI
 driver problem or a negotiation mismatch?
 
You're right, Noel. We changed the PCI ethernet card and all run smooth.
No overrun, correct transfer rate: Sound good :)

Many thanks for your help
-- 
Guillaume Estival
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] intermitent domain logon failures

2002-10-28 Thread John H Terpstra
Robert,

Suggest you update to the latest stable release 2.2.6, you may find this
problem will go away.

- John T.

On 28 Oct 2002, Robert Stanford wrote:

 I have an issue where at odd times, maybe after 3 days, maybe after a
 week, people suddenly cant do domain logons. Unfortunately the machine
 is 50km away so i'm sure theres more details I can glean once I can
 interogate the users a bit more.

 Things I have noticed:
 Anyone currently logged in can still work fine.
 A restart of samba fixes the issue (till it hapens next).
 ps ax shows smbd and nmbd still running.
 I forgot to run netstat so unfortunately can't comment if they were
 listening.

 However I did manage to grab a snapshots of the logs up to the point
 samba was restarted. Heres a couple of snippets

  tail nmbd.log
 [2002/10/28 08:23:17, 1]
 nmbd/nmbd_processlogon.c:process_logon_packet(69)
   process_logon_packet: Logon from 10.0.0.113: code = 0x12
 [2002/10/28 08:32:28, 1]
 nmbd/nmbd_processlogon.c:process_logon_packet(69)
   process_logon_packet: Logon from 10.0.0.110: code = 0x12
 [2002/10/28 08:32:28, 1]
 nmbd/nmbd_processlogon.c:process_logon_packet(69)
   process_logon_packet: Logon from 10.0.0.110: code = 0x12
 [2002/10/28 08:34:02, 1]
 nmbd/nmbd_processlogon.c:process_logon_packet(69)
   process_logon_packet: Logon from 10.0.0.109: code = 0x0
 [2002/10/28 08:34:34, 0] nmbd/nmbd.c:sig_term(63)
   Got SIGTERM: going down...

  tail smbd.log
 [2002/10/21 21:30:57, 3] smbd/connection.c:yield_connection(48)
   Yielding connection to
 [2002/10/21 21:30:57, 3] smbd/server.c:exit_server(492)
   Server exit (caught signal)
 [2002/10/27 06:25:34, 0] smbd/server.c:sig_hup(384)
   Got SIGHUP
 [2002/10/27 06:25:34, 1] smbd/server.c:open_sockets(220)
   Reloading services after SIGHUP
 [2002/10/27 06:25:35, 1] lib/debug.c:debug_message(250)
   INFO: Debug class all level = 1   (pid 18438 from pid 18438)

 We are running Debian woody
 with samba 2.2.3a-6
 and Linux 2.4.19 i686

 ---smb.conf---

 [global]
 workgroup = diggers
 server string = %h server (Samba %v)
 load printers = yes
 netbios name = admin
 domain logons = yes
 security = user
 os level = 34
 local master = yes
 preferred master = yes
 domain master = yes
 time server = yes
 wins support = yes
 name resolve order = wins bcast lmhosts
 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 encrypt passwords = yes
 unix password sync = yes
 passwd program = /usr/bin/passwd %u
 passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
 *Retype\snew\sUNIX\spassword:* %n\n .
 #use spnego = no
 domain admin group = lynj
 log level = 1
 log file = /var/log/samba/%m.log
 load printers = yes
 printcap name = /etc/printcap.cups
 printing = cups
 logon script = logon.bat

 [homes]
 comment = Home Directories
 read only = No
 create mask = 0770
 directory mask = 0770
 browseable = No
 writeable = yes

 [netlogon]
 comment = Domain logon services
 path = /home/netlogon
 public = no
 writeable = no
 browseable = no

 other shares...

 ---end smb.conf---
 ---
 ¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤
Robert Stanford
 º¤º°`°º¤ø,¸¸,ø¤º°`°º¤º

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
John H Terpstra
Email: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] ENC: utilizing smbpasswd with two user #######URGENT#######

2002-10-28 Thread SALOME Alexandre
Title: ENC: utilizing smbpasswd with two user ###URGENT###






Hi,


I have a user in Windows (user_windows = eng.calculo).
I would like that this user_windows acess the unix (solairs2.6) as a valid user unix (user_unix=cs02929)
(this problem is because the admintool only create user with 8 caractheres.
How I can resolve this problem ?



Atenciosamente
Alexandre Salomé
Comau System _ Sistemas Engenharia
tel: 0055 031 9944 8646
fax:0055 031 3529 6533





[Samba] samba and oplocks and office applications

2002-10-28 Thread Nir Livni
I'm using samba version 2.2.1a on a linux RH7.2 kernel 2.4.7-10.

I'm having a lot of oplock problems, specially when using office
applications like word.

I would like to know:
1. what is the recommended configuration in version 2.2.1a (oplocks = yes/no
, level2 oplocks = yes/no , kernel oplocks = yes/no)
2. what is considered to be a stable version for oplocks usage

Thanks,
Nir
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] cipsaddsmb UNSUCCESSFUL

2002-10-28 Thread Daniel T. Gynn
Do you have the 'addprinter command' parameter set in smb.conf?  If so,
remove it

On Mon, 2002-10-28 at 05:18, Kalkoul Morad wrote:
 Hi,
 
 I have a linux box on RH7.3 with samba 2.2.5-1 and cups-1.1.14-15.
 
 I create a cups printer on to this machine with success, It called lptest?
 and apparently, when I send a page test it works fine.
 
 But now I want to share It via Samba then  I putted the different setting in
 smb.conf . I extracted the different files from the ADOBE POSTSCRIPT DRIVER
 and I put them in /usr/share/cups/drivers . After , I ran cupsaddsmb :
 
 # cupsaddsmb -v lptest
 Password for root required to access localhost via SAMBA:
 Running command: smbclient //localhost/print\$ -N -U'root%secret' -c 'mkdir
 W32X86;put /var/spool/cups/tmp/3dbd0c8f9e398 W32X86/lptest.PPD;put
 /usr/share/cups/drivers/ADOBEPS5.DLL W32X86/ADOBEPS5.DLL;put
 /usr/share/cups/drivers/ADOBEPSU.DLL W32X86/ADOBEPSU.DLL;put
 /usr/share/cups/drivers/ADOBEPSU.HLP W32X86/ADOBEPSU.HLP'
 added interface ip=172.25.4.64 bcast=172.25.255.255 nmask=255.255.0.0
 Domain=[ARTE] OS=[Unix] Server=[Samba 2.2.5]
 NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
 putting file /var/spool/cups/tmp/3dbd0c8f9e398 as \W32X86/lptest.PPD (1797.7
 kb/s) (average 1797.7 kb/s)
 putting file /usr/share/cups/drivers/ADOBEPS5.DLL as \W32X86/ADOBEPS5.DLL
 (18619.7 kb/s) (average 11410.3 kb/s)
 putting file /usr/share/cups/drivers/ADOBEPSU.DLL as \W32X86/ADOBEPSU.DLL
 (17863.5 kb/s) (average 12749.7 kb/s)
 putting file /usr/share/cups/drivers/ADOBEPSU.HLP as \W32X86/ADOBEPSU.HLP
 (9575.2 kb/s) (average 12634.3 kb/s)
 
 Running command: smbclient //localhost/print\$ -N -U'root%secret' -c 'mkdir
 WIN40;put /var/spool/cups/tmp/3dbd0c8f9e398 WIN40/lptest.PPD;put
 /usr/share/cups/drivers/ADFONTS.MFM WIN40/ADFONTS.MFM;put
 /usr/share/cups/drivers/ADOBEPS4.DRV WIN40/ADOBEPS4.DRV;put
 /usr/share/cups/drivers/ADOBEPS4.HLP WIN40/ADOBEPS4.HLP;put
 /usr/share/cups/drivers/DEFPRTR2.PPD WIN40/DEFPRTR2.PPD;put
 /usr/share/cups/drivers/ICONLIB.DLL WIN40/ICONLIB.DLL;put
 /usr/share/cups/drivers/PSMON.DLL WIN40/PSMON.DLL;'
 added interface ip=172.25.4.64 bcast=172.25.255.255 nmask=255.255.0.0
 Domain=[ARTE] OS=[Unix] Server=[Samba 2.2.5]
 NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
 putting file /var/spool/cups/tmp/3dbd0c8f9e398 as \WIN40/lptest.PPD (1198.5
 kb/s) (average 1198.5 kb/s)
 putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM
 (18736.0 kb/s) (average 10428.8 kb/s)
 putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV
 (17604.6 kb/s) (average 14433.9 kb/s)
 putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP
 (12698.5 kb/s) (average 14231.8 kb/s)
 putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD
 (13153.0 kb/s) (average 14224.5 kb/s)
 putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL
 (19226.2 kb/s) (average 14420.7 kb/s)
 putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL (13999.3
 kb/s) (average 14415.2 kb/s)
 
 Running command: rpcclient localhost -N -U'root%secret' -c 'adddriver
 Windows NT x86
 lptest:ADOBEPS5.DLL:lptest.PPD:ADOBEPSU.DLL:ADOBEPSU.HLP:NULL:RAW:NULL'
 cmd = adddriver Windows NT x86
 lptest:ADOBEPS5.DLL:lptest.PPD:ADOBEPSU.DLL:ADOBEPSU.HLP:NULL:RAW:NULL
 result was NT_STATUS_UNSUCCESSFUL
 
 Running command: rpcclient localhost -N -U'root%secret' -c 'addprinter
 lptest lptest lptest '
 cmd = addprinter lptest lptest lptest 
 result was NT_STATUS_UNSUCCESSFUL
 
 Running command: rpcclient localhost -N -U'root%secret' -c 'adddriver
 Windows 4.0
 lptest:ADOBEPS4.DRV:lptest.PPD:NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:ADFONTS.MFM,
 DEFPRTR2.PPD,ICONLIB.DLL'
 cmd = adddriver Windows 4.0
 lptest:ADOBEPS4.DRV:lptest.PPD:NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:ADFONTS.MFM,
 DEFPRTR2.PPD,ICONLIB.DLL
 result was NT_STATUS_UNSUCCESSFUL
 
 #
 
 Why adddriver doesn' work ? Someone can help me? Thanks in advance.
 
 PS: I don't use Sources of CUPS drivers / PPDs like ESP PrintPro or I had To
 use it absolutely to work it  fine
 
 
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
---
Daniel T. Gynn
RHCE #806200978201621
Essential Systems, Inc.
412-931-5403 ext. 1
fax: 412-931-5425
[EMAIL PROTECTED]
GnuPG Key http://www.essensys.com/~dan/gpgring.asc
Fingerprint: 1341 3132 FDAC C415 8F5F 03D7 FD4E 166B FA90 58E1



signature.asc
Description: This is a digitally signed message part


Re: [Samba] root prexec/postexec login scripts

2002-10-28 Thread Deryk Robosson
On Mon, 28 Oct 2002 10:44 pm, Mike Rambo wrote:
[SNIP]
 scripts run fine on the workstations at login. I'm using a netlogon
 script I found at http://www.0x0a.com/netlogon.php that I've modified to
 handle multiple groups based upon group membership in /etc/group as I
 need. If I run the script from a command line supplying just a username
 it works ok.

 ./netlogon.pl mrambo   #This results in a good script.

Okay, it appears that you have XML-Twig installed and the script is 
functioning from the command line as it should be.

I have this script working in production environments on samba 2.2.2 (machine 
needs to be upgraded..client is stalling ;)) and 2.2.6 configurations without 
any trouble.

 [netlogon]
comment = Network Logon Service
path = /home/netlogon
guest ok = yes
read only = yes
browseable = no
printable = no
write list = @adm
share modes = no
root prexec = /home/netlogon/netlogon.pl %U
root postexec = rm -f /home/netlogon/%U.bat

Looks good to me..quite similar to what I normally use.  Perhaps someone else 
can shed some light on the issue..though I think the log level should 
probably be a bit higher.

-- 
Regards,
Deryk Robosson

Robosson Business Services
22 Flemington Street
Albany, WA  6330
ABN: 56 728 377 499
Phone: +61 4 0842 9835 Email: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] samba and winbind issues

2002-10-28 Thread Wieprecht, Karen M.
Are you talking about access rights (like write list = @group) ?

I found a few interesting things with groups and security=domain with
winbind:

1.  the @group syntax applies to the UNIX group names.  To give access to an
NT group,  you need to use something like this:

write list = @WALNETNT_Domain Users 
  
   @DomainnameWinbindseparatorNTgroupname  

2.  If I specified an NT user,  it seemed that I had to prefix it with the
domain name and my winbind separator to get it to work correctly

write list = WALNETNT_jmacs

3. If you want to grant access to more than one user/group, separate the
entries with commas:
write list = WALNETNT_jmacs, @WALNETNT_Domain Users 

4. If you are using a username map file to make the user's UID assignment
match when he access files from either side,  it seems to cause his
membership to other NT groups to go un-noticed.  

Example:  I had a read-only share that was writable by
@WALNETNT_Domain Users ,  but user karen  (NT) was being assigned the UNIX
karen account UID and GID by the username mapping mechanism,  and was no
longer recognized as a member of the NT Domain Users group ...   I was going
to play with adding other UNIX groups to the write list to see if I could
fix this problem.

Hope this answers your question.  

-Original Message-
From: Jennifer Fountain [mailto:JFountain;rbinc.com] 
Sent: Friday, October 25, 2002 5:22 PM
To: 'Wieprecht, Karen M.'
Subject: RE: [Samba] samba and winbind issues


Thanks for the email.  I finally got samba to work but now I am having
issues with groups.  When I do a groups jfountain, i get domain admins but
no other groups.  when i do a groups user1, i get nothing - and the user is
in a couple groups.

Any thoughts or ideas? what am i missing?

-Original Message-
From: Wieprecht, Karen M. [mailto:Karen.Wieprecht;jhuapl.edu]
Sent: Thursday, October 24, 2002 9:04 AM
To: 'Jennifer Fountain'; '[EMAIL PROTECTED]'
Subject: RE: [Samba] samba and winbind issues


1. Run ~samba/bin/wbinfo -u and make sure you are actually talking to your
domain controller

2. Do you have winbind entries in your nsswitch.conf file?  Have you made
your system re-read this info (the command is nsadmin restart on irix,
don't know about other platforms).  

3. The windows box isn't caching any old login data is it?   (I've had
problems testing samba configuration changes because windows 2000 caches
some of the login stuff ... I'm not great on windows admin, don't know how
to force the cache to clear without a reboot,  so I've had to reboot the
windows client to test...

4. One of the samba guys said that the winbind use default domain parameter
might not do what I originally hoped (help me  match NT username with UNIX
username without having to use a username map).  Recent tests seem to show
that my UID's only match if I turn that parameter off and use a username
map.  Of course,  testing has been very frustrating because I keep fighting
with windows caching ...  Have you tried using a username map?  

Karen Wieprecht

-Original Message-
From: Jennifer Fountain [mailto:JFountain;rbinc.com] 
Sent: Wednesday, October 23, 2002 9:39 AM
To: [EMAIL PROTECTED]
Subject: [Samba] samba and winbind issues


I know winbind (i think) is working fine. i can log into a unix box with my
NT userid but when i try to access shares on my samba server, i get these
errors:

 [2002/10/23 08:47:01, 0] lib/util_sec.c:(111)
  Failed to set gid privileges to (-1,-2) now set to (0,0) uid=(0,0)
[2002/10/23 08:47:01, 0] lib/util.c:(1092)
  PANIC: failed to set gid

[2002/10/23 09:17:08, 0] lib/util_sec.c:(111)
  Failed to set gid privileges to (-1,-2) now set to (0,0) uid=(0,0)
[2002/10/23 09:17:08, 0] lib/util.c:(1092)
  PANIC: failed to set gid

log.smbd: END

Here is a copy of my smb.conf

 

# Samba config file created using SWAT
# from ws09573.rb.net (10.27.52.177)
# Date: 2002/10/23 08:16:35

# Global parameters
[global]
workgroup = domain1
netbios name = ARES
server string = ARES_SAMBA
interfaces = lan4 127.0.0.1
bind interfaces only = Yes
security = DOMAIN
encrypt passwords = Yes
password server = dc1
wins server = 10.1.14.25
winbind uid = 4-4
winbind gid = 5-5
template shell = /usr/bin/ksh
winbind use default domain = Yes

[jf]
path = /tmp/jfountain
username = jfountain
valid users = jfountain
admin users = domain admins
read only = No


what am i doing wrong?

any info would be greatly appreciated!
thanks!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] samba and oplocks and office applications

2002-10-28 Thread Noel Kelly
General consensus is to disable oplocks for a hassle free existence
especially with Office apps:

Oplocks = no 
Kernel Oplocks = no 
Level2 Oplocks = no 

HTH
Noel

Also, something Jeremy posted to the list a few days ago:

Ok, as promised, a brief explaination of oplocks, share modes
and locking.

When a client opens a file it can request an oplock or file
lease. This is (to simplify a bit) a guarentee that no one else
has the file open simultaneously. It allows the client to not
send any updates on the file to the server, thus reducing a
network file access to local access (once the file is in
client cache). An oplock break is when the server sends
a request to the client to flush all its changes back to
the server, so the file is in a consistent state for other
opens to succeed. If a client fails to respond to this
asynchronous request then the file can be corrupted. Hence
the turn off oplocks answer if people are having multi-user
file access problems.

Unless the kernel is oplock aware (SGI IRIX and Linux are
the only two UNIXes that are at the moment) then if a local
UNIX process accesses the file simultaneously then Samba
has no way of telling this is occuring, so the guarentee
to the client is broken. This can corrupt the file. Short
answer - it you have UNIX clients accessing the same file
as smbd locally or via NFS and you're not running Linux or
IRIX then turn off oplocks for that file or share.

Share modes. These are modes of opening a file, that
guarentee an invarient - such as DENY_WRITE - which means
that if any other opens are requested with write access after
this current open has succeeded then they should be denied
with a sharing violation error message. Samba handles these
internally inside smbd. UNIX clients accessing the same file
ignore these invarients. Just proving that if you need simultaneous
file access from a Windows and UNIX client you *must* have an
application that is written to lock records correctly on both
sides. Few applications are written like this, and even fewer
are cross platform (UNIX and Windows) so in practice this isn't
much of a problem.

Locking. This really means byte range locking - such as
lock 10 bytes at file offset 24 for write access. This is the
area in which well written UNIX and Windows apps will cooperate.
Windows locks (at least from NT or above) are 64-bit unsigned
offsets. UNIX locks are either 31 bit or 63 bit and are signed
(the top bit is used for the sign). Samba handles these by
first ensuring that all the Windows locks don't conflict (ie.
if other Windows clients have competing locks then just reject
immediately) - this allows us to support 64-bit Windows locks
on 32-bit filesystems. Secondly any locks that are valid are
then mapped onto UNIX fcntl byte range locks. These are the
locks that will be seen by UNIX processes. If there is a conflict
here the lock is rejected.

Note that if a client has an oplock then it knows that no
other client can have the file open so usually doesn't bother
to send to lock request to the server - this means once again
if you need to share files between UNIX and Windows processes
either use IRIX or Linux, or turn off oplocks for these
files/shares.

Hope this is clear :-).

Jeremy.



-Original Message-
From: Nir Livni [mailto:nirl;cyber-ark.com]
Sent: 28 October 2002 14:13
To: '[EMAIL PROTECTED]'
Subject: [Samba] samba and oplocks and office applications


I'm using samba version 2.2.1a on a linux RH7.2 kernel 2.4.7-10.

I'm having a lot of oplock problems, specially when using office
applications like word.

I would like to know:
1. what is the recommended configuration in version 2.2.1a (oplocks = yes/no
, level2 oplocks = yes/no , kernel oplocks = yes/no)
2. what is considered to be a stable version for oplocks usage

Thanks,
Nir
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] root prexec/postexec login scripts

2002-10-28 Thread Mike Rambo
I have a perl script that I'd like to use to create windows 9x login
scripts at login time but I cannot get the process to work right. I have
RedHat 7.3 (actually the k12ltsp v2.1.0 which is a modified RH7.3) set
up as a domain controller which is working well. Manually created login
scripts run fine on the workstations at login. I'm using a netlogon
script I found at http://www.0x0a.com/netlogon.php that I've modified to
handle multiple groups based upon group membership in /etc/group as I
need. If I run the script from a command line supplying just a username
it works ok.

./netlogon.pl mrambo   #This results in a good script.

When I put in a root preexec like...

[netlogon]
   comment = Network Logon Service
   path = /home/netlogon
   guest ok = yes
   read only = yes
   browseable = no
   printable = no
   write list = @adm
   share modes = no
   root prexec = /home/netlogon/netlogon.pl %U
   root postexec = rm -f /home/netlogon/%U.bat

it fails to run. My box was running samba 2.2.3a as distributed w/RH7.3.
When I inserting the root preexec statement in smb.conf the domain
logons would no longer function. I received a no domain controller error
message. I could still manually map drives after clicking ok at the
error message though. I could not see anything in the logs related to
preexec or domain logon problems at log level 2. I couldn't get log
level 3 to work for some reason on the RH supplied samba so I upgraded
to the 2.2.6 samba binaries on samba.org. I still get the same no domain
controller error on the workstation but now with the added 'feature'
that it also seems to hang an nmbd process on the server.

Help!!! I worked on this almost all day Saturday including searching the
samba archives on marc.theaimsgroup.com and I'm out of ideas.

Thanks.


-- 
Mike Rambo
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Run smbclient in Unix shell script

2002-10-28 Thread Liu, C.C
Title: Run smbclient in Unix shell script





Hi,


I can run smbclient on Sun Solaris Korn shell command line to access a NT server from an Unix
worksation without problem but always got session setup failed: NT_STATUS_LOGON_FAILURE
when run it from a Korn shell script.
Any help or suggestion will be appreciated.


 C.C. Liu





Re: [Samba] PDC Problems

2002-10-28 Thread Nick
When do you get this problem and what are your client settings. Are you 
moving an existing account to another machine or the same machine with a 
new os?

Nick

Michele Santucci wrote:

This's my conf file I still have problems but the error message is
different this time, it sounds like (translating it from italian):
   It's impossible to join this machine to the domain. There's a conflict
between the supllied credential and pre existent ones

P.S. When v3.0 will be released?

   bye by(t)e[S]...TuX!
 



# Samba config file created using SWAT
# from 0.0.0.0 (0.0.0.0)
# Date: 2002/10/25 17:42:26

# Global parameters
[global]
	coding system = 
	client code page = 850
	code page directory = /var/lib/samba/codepages
	workgroup = CCGM
	netbios name = SERVER-CCGM
	netbios aliases = 
	netbios scope = 
	server string = CCGM Samba Server
	interfaces = eth0
	bind interfaces only = No
	security = USER
	encrypt passwords = Yes
	update encrypted = No
	allow trusted domains = Yes
	hosts equiv = 
	min passwd length = 5
	map to guest = Never
	null passwords = No
	obey pam restrictions = No
	password server = 
	smb passwd file = /etc/samba/smbpasswd
	root directory = 
	pam password change = No
	passwd program = /usr/bin/passwd
	passwd chat = *new*password* %n\n *new*password* %n\n *changed*
	passwd chat debug = No
	username map = 
	password level = 0
	username level = 0
	unix password sync = Yes
	restrict anonymous = No
	lanman auth = Yes
	use rhosts = No
	admin log = No
	log level = 0
	syslog = 1
	syslog only = No
	log file = /var/log/samba/log.%m
	max log size = 50
	timestamp logs = Yes
	debug hires timestamp = No
	debug pid = No
	debug uid = No
	protocol = NT1
	large readwrite = No
	max protocol = NT1
	min protocol = CORE
	read bmpx = No
	read raw = Yes
	write raw = Yes
	nt smb support = Yes
	nt pipe support = Yes
	nt status support = Yes
	announce version = 4.5
	announce as = NT
	max mux = 50
	max xmit = 65535
	name resolve order = lmhosts host wins bcast
	max packet = 65535
	max ttl = 259200
	max wins ttl = 518400
	min wins ttl = 21600
	time server = No
	unix extensions = No
	change notify timeout = 60
	deadtime = 0
	getwd cache = Yes
	keepalive = 300
	lpq cache time = 10
	max smbd processes = 0
	max disk size = 0
	max open files = 1
	read size = 16384
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
	stat cache size = 50
	use mmap = Yes
	total print jobs = 0
	load printers = Yes
	printcap name = lpstat
	disable spoolss = No
	enumports command = 
	addprinter command = 
	deleteprinter command = 
	show add printer wizard = Yes
	os2 driver map = 
	strip dot = No
	mangling method = hash
	character set = 
	mangled stack = 50
	stat cache = Yes
	domain admin group = ccgm-admin
	domain guest group = 
	machine password timeout = 604800
	add user script = 
	delete user script = 
	logon script = 
	logon path = \\%N\%U\profile
	logon drive = 
	logon home = \\%N\%U
	domain logons = Yes
	os level = 65
	lm announce = Auto
	lm interval = 60
	preferred master = True
	local master = Yes
	domain master = True
	browse list = Yes
	enhanced browsing = Yes
	dns proxy = Yes
	wins proxy = Yes
	wins server = 
	wins support = Yes
	wins hook = 
	kernel oplocks = Yes
	lock spin count = 3
	lock spin time = 10
	oplock break wait time = 0
	add share command = 
	change share command = 
	delete share command = 
	config file = 
	preload = 
	lock dir = /var/cache/samba
	pid directory = /var/run/samba
	utmp directory = 
	wtmp directory = 
	utmp = No
	default service = 
	message command = 
	dfree command = 
	valid chars = 
	remote announce = 
	remote browse sync = 
	socket address = 0.0.0.0
	homedir map = auto.home
	time offset = 0
	NIS homedir = No
	source environment = 
	panic action = 
	hide local users = No
	host msdfs = No
	winbind uid = 
	winbind gid = 
	template homedir = /home/%D/%U
	template shell = /bin/false
	winbind separator = \
	winbind cache time = 15
	winbind enum users = Yes
	winbind enum groups = Yes
	winbind use default domain = Yes
	comment = 
	path = 
	alternate permissions = No
	username = guest
	guest account = guest
	invalid users = 
	valid users = ccgm-admin, ccgm, satya
	admin users = ccgm-admin
	read list = 
	write list = 
	printer admin = 
	force user = 
	force group = 
	read only = Yes
	create mask = 0744
	force create mode = 00
	security mask = 0777
	force security mode = 00
	directory mask = 0755
	force directory mode = 00
	directory security mask = 0777
	force directory security mode = 00
	force unknown acl user = 00
	inherit permissions = No
	inherit acls = No
	guest only = No
	guest ok = No
	only user = No
	hosts allow = 
	hosts deny = 
	status = Yes
	nt acl support = Yes
	block size = 1024
	max connections = 0
	min print space = 0
	strict allocate = No
	strict sync = No
	sync always = No
	write cache size = 0
	max print jobs = 1000
	printable = No
	postscript = No
	printing = cups
	print command = lpr -r -P%p %s
	lpq command = 

[Samba] Help: configure error with cvs download samba 3.x

2002-10-28 Thread David Shapiro
Hello,

I used cvs to download and build samba, but it failed to build with error
message:

checking configure summary... configure: error: summary failure. Aborting
config


I used the following download and build process:

(solaris 7 11/99 gcc 3.2 automake 1.7, libtool 1.4.3, gnu make 3.80,
binutils 2.13)

!/usr/bin/ksh
#cd /usr/local/samba
cd /usr/local
echo \npassword: anoncvs\n
cvs -d :pserver:[EMAIL PROTECTED]:/cvsroot login
if [ ! -d /usr/local/samba/source ]; then
echo Creating new samba install
#mkdir -p /usr/local/samba/source
cvs -z5 -d :pserver:[EMAIL PROTECTED]:/cvsroot co samba
if [ $! ]; then
echo error
fi
else
echo Updating old samba install
/usr/bin/rm /usr/local/samba/bin/*
/usr/bin/rm /usr/local/samba/sbin/*
cvs -d :pserver:[EMAIL PROTECTED]:/cvsroot update -d -P
fi

# Configure and build samba
cd /usr/local/samba/source
#/usr/local/bin/gmake realclean
#/usr/bin/rm config.cache ltmain.sh configure
#aclocal
#libtoolize --force
#/usr/local/bin/autoheader
#/usr/local/bin/autoconf

cd /usr/local/samba/source
env CFLAGS=-Wall -m32 -g ./configure \
--with-winbind \
--without-sendfile-support \
--with-pam \
--with-pam_smbpass \
--with-included-popt \
--with-smbwrapper

#
/usr/local/bin/gmake proto  /usr/local/bin/gmake  /usr/local/bin/gmake
install
/usr/local/bin/gmake nsswitch/libnss_winbind.so
/usr/local/bin/gmake nsswitch/libnss_wins.so

ln -s /usr/local/samba/source/nsswitch/libnss_winbind.so
/usr/lib/libnss_winbind.so.1
ln -s /usr/local/samba/source/nsswitch/libnss_winbind.so
/usr/lib/libnss_winbind.so.2
ln -s /usr/local/samba/source/nsswitch/libnss_winbind.so
/usr/lib/nss_winbind.so.1
ln -s /usr/local/samba/source/nsswitch/libnss_winbind.so
/usr/lib/nss_winbind.so.2

echo If not already done, you need to modify pam.conf for samba pam
support.
echo See /usr/local/samba/docs/textdocs/Sol* for information.
~
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Is 2.2.6 Final?

2002-10-28 Thread John H Terpstra
On Mon, 28 Oct 2002, William Jojo wrote:



 Just tought I'd follow up and see if 2.2.6 is truly the last release of
 samba_2_2 CVS branch.

Yes, 2.2.6 is the latest stable release. We hope that this will be our
last update. All samba-team resources are now focussing on getting 3.0.0
readt for release. Right now 3.0.0 is still changing significantly and we
would not recommend it's use in a production environment.

 We've got six systems running it with no visible issues.

If it is not broken then why fix it?


 I'm currently testing CVS from Sunday's pull of 3.0...is this the
 direction I should be heading?

Yes. But do your home work. Test, test, test, and give us feedback.

- John T.

-- 
John H Terpstra
Email: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] PDC Problems

2002-10-28 Thread Nick
When do you get this problem and what are your client settings. Are you
moving an existing account to another machine or the same machine with a
new os?

Nick

Michele Santucci wrote:

This's my conf file I still have problems but the error message is
different this time, it sounds like (translating it from italian):
It's impossible to join this machine to the domain. There's a 
conflict
between the supllied credential and pre existent ones

P.S. When v3.0 will be released?

bye by(t)e[S]...TuX!




# Samba config file created using SWAT
# from 0.0.0.0 (0.0.0.0)
# Date: 2002/10/25 17:42:26

# Global parameters
[global]
	coding system =
	client code page = 850
	code page directory = /var/lib/samba/codepages
	workgroup = CCGM
	netbios name = SERVER-CCGM
	netbios aliases =
	netbios scope =
	server string = CCGM Samba Server
	interfaces = eth0
	bind interfaces only = No
	security = USER
	encrypt passwords = Yes
	update encrypted = No
	allow trusted domains = Yes
	hosts equiv =
	min passwd length = 5
	map to guest = Never
	null passwords = No
	obey pam restrictions = No
	password server =
	smb passwd file = /etc/samba/smbpasswd
	root directory =
	pam password change = No
	passwd program = /usr/bin/passwd
	passwd chat = *new*password* %n\n *new*password* %n\n *changed*
	passwd chat debug = No
	username map =
	password level = 0
	username level = 0
	unix password sync = Yes
	restrict anonymous = No
	lanman auth = Yes
	use rhosts = No
	admin log = No
	log level = 0
	syslog = 1
	syslog only = No
	log file = /var/log/samba/log.%m
	max log size = 50
	timestamp logs = Yes
	debug hires timestamp = No
	debug pid = No
	debug uid = No
	protocol = NT1
	large readwrite = No
	max protocol = NT1
	min protocol = CORE
	read bmpx = No
	read raw = Yes
	write raw = Yes
	nt smb support = Yes
	nt pipe support = Yes
	nt status support = Yes
	announce version = 4.5
	announce as = NT
	max mux = 50
	max xmit = 65535
	name resolve order = lmhosts host wins bcast
	max packet = 65535
	max ttl = 259200
	max wins ttl = 518400
	min wins ttl = 21600
	time server = No
	unix extensions = No
	change notify timeout = 60
	deadtime = 0
	getwd cache = Yes
	keepalive = 300
	lpq cache time = 10
	max smbd processes = 0
	max disk size = 0
	max open files = 1
	read size = 16384
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
	stat cache size = 50
	use mmap = Yes
	total print jobs = 0
	load printers = Yes
	printcap name = lpstat
	disable spoolss = No
	enumports command =
	addprinter command =
	deleteprinter command =
	show add printer wizard = Yes
	os2 driver map =
	strip dot = No
	mangling method = hash
	character set =
	mangled stack = 50
	stat cache = Yes
	domain admin group = ccgm-admin
	domain guest group =
	machine password timeout = 604800
	add user script =
	delete user script =
	logon script =
	logon path = \\%N\%U\profile
	logon drive =
	logon home = \\%N\%U
	domain logons = Yes
	os level = 65
	lm announce = Auto
	lm interval = 60
	preferred master = True
	local master = Yes
	domain master = True
	browse list = Yes
	enhanced browsing = Yes
	dns proxy = Yes
	wins proxy = Yes
	wins server =
	wins support = Yes
	wins hook =
	kernel oplocks = Yes
	lock spin count = 3
	lock spin time = 10
	oplock break wait time = 0
	add share command =
	change share command =
	delete share command =
	config file =
	preload =
	lock dir = /var/cache/samba
	pid directory = /var/run/samba
	utmp directory =
	wtmp directory =
	utmp = No
	default service =
	message command =
	dfree command =
	valid chars =
	remote announce =
	remote browse sync =
	socket address = 0.0.0.0
	homedir map = auto.home
	time offset = 0
	NIS homedir = No
	source environment =
	panic action =
	hide local users = No
	host msdfs = No
	winbind uid =
	winbind gid =
	template homedir = /home/%D/%U
	template shell = /bin/false
	winbind separator = \
	winbind cache time = 15
	winbind enum users = Yes
	winbind enum groups = Yes
	winbind use default domain = Yes
	comment =
	path =
	alternate permissions = No
	username = guest
	guest account = guest
	invalid users =
	valid users = ccgm-admin, ccgm, satya
	admin users = ccgm-admin
	read list =
	write list =
	printer admin =
	force user =
	force group =
	read only = Yes
	create mask = 0744
	force create mode = 00
	security mask = 0777
	force security mode = 00
	directory mask = 0755
	force directory mode = 00
	directory security mask = 0777
	force directory security mode = 00
	force unknown acl user = 00
	inherit permissions = No
	inherit acls = No
	guest only = No
	guest ok = No
	only user = No
	hosts allow =
	hosts deny =
	status = Yes
	nt acl support = Yes
	block size = 1024
	max connections = 0
	min print space = 0
	strict allocate = No
	strict sync = No
	sync always = No
	write cache size = 0
	max print jobs = 1000
	printable = No
	postscript = No
	printing = cups
	print command = lpr -r -P%p %s
	lpq command = lpq -P%p
	lprm command = lprm -P%p %j
	lppause 

[Samba] New Error with smbgroupedit

2002-10-28 Thread Ray Raszka
I updated from the newest cvs (HEAD) today, and now am unable to make
changes to the group mapping database using smbgroupedit. It has worked
successfully in the past. Using OpenLdap as passdb backend.

The command
smbgroupedit -v
works as advertised and lists all the built in groups,

however the command
smbgroupedit -c Domain Admins -u DOMADMIN

generates the error message
Count not update the group database -- (actual text, probably
should be Could.)

If I specify and invalid group for either parameter the system recognizes
the bad group so it appears is getting to the LDAP backend, and the group
database.
I also tried deleting group_mapping.tdb and letting it recreate - still
issues the error.

What is causing this problem?

Ray Raszka
Partners Healthcare
70 Jackson Drive
Cranford, New Jersey
(908) 931-9111 Ext. 2716

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Windows 2000 server and Samba PDC

2002-10-28 Thread drgn65
Hi,

I have a network that runs samba 2.2.5 on a Linux box that acts as the
primary server on the network.  It is the PDC, WINS, etc.. The Windows
2000 server is nothing more then a box that runs Terminal Services for
Remote Access.  Anyway, I know that in Samba any member of the domain
admin group is an admin on a windows 2000 box, or at least thats how it
appears to me when I access the Windows 2000 server box.  My question is
this, is there any comparable (group/feature) like this for Power users,
standard users, etc?  I can't seem to figure out for the life of me how
to add a Network user, a member in my LDAP tree and in my samba domain
as a power user to a windows 2000 server.  The only thing I can seem to do
is to add a user as a power user on the LOCAL machine only. In windows
2000 Pro this is really easy to do but I can't figure out if it is a
windows issue or a samba one.

Thanks for your help in advance,
Peter Shull


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] samba and oplocks and office applications

2002-10-28 Thread John H Terpstra
On Mon, 28 Oct 2002, Nir Livni wrote:

 I'm using samba version 2.2.1a on a linux RH7.2 kernel 2.4.7-10.

Suggest you update to samba-2.2.6. There have been several patches to
locking code in samba since 2.2.1a. The other reply you received is also
good information.

- John T.


 I'm having a lot of oplock problems, specially when using office
 applications like word.

 I would like to know:
 1. what is the recommended configuration in version 2.2.1a (oplocks = yes/no
 , level2 oplocks = yes/no , kernel oplocks = yes/no)
 2. what is considered to be a stable version for oplocks usage

 Thanks,
 Nir


-- 
John H Terpstra
Email: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Is 2.2.6 Final?

2002-10-28 Thread Markus Schabel
John H Terpstra wrote:


On Mon, 28 Oct 2002, William Jojo wrote:


Just tought I'd follow up and see if 2.2.6 is truly the last release of
samba_2_2 CVS branch.
   

Yes, 2.2.6 is the latest stable release.


So there will never be a stable samba again? ;)


We hope that this will be our
last update. All samba-team resources are now focussing on getting 3.0.0
readt for release. Right now 3.0.0 is still changing significantly and we
would not recommend it's use in a production environment.


We've got six systems running it with no visible issues.
   

If it is not broken then why fix it?


the last version I had problems with was 2.2.3a (on a SuSE system) and 
2.2.4 (there were problems with LDAP, all solved since 2.2.5)

I'm currently testing CVS from Sunday's pull of 3.0...is this the
direction I should be heading?
   

Yes. But do your home work. Test, test, test, and give us feedback.


I'm currently working on a PDC for about 300 LDAP-based users, I guess 
with LDAP there is no problem when migrating to 3.0? Probably I'll run 
the actual CVS parallel

regards

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] root prexec/postexec login scripts

2002-10-28 Thread Mike Rambo
Hi Deryk, thanks for the personal response.

I forgot to mention in the original post that part of my reason for
upgrading to 2.2.6 was to get away from the redhat rpms in the hope that
I could get the log level boosted up some. That part was successful. I
set the log level to 3 (I saw that in man smb.conf but it didn't
indicate whether it could go any higher) but didn't see anything in
either the system or samba logs that seemed to relate to the problem.
Not knowing what to expect, I was just looking for something either
domain related, something which referred to netlogon or preexec, or
something which referred to a script failure in general. I didn't see
any of those.

I'm glad you hear that you still use this on 2.2.6 though because it
would indicate that at least root preexec still works in the new version
the same as in the old. This isn't related to my use of win9x (as
opposed to NT/2000) clients is it?


Deryk Robosson wrote:
 
 On Mon, 28 Oct 2002 10:44 pm, Mike Rambo wrote:
 [SNIP]
  scripts run fine on the workstations at login. I'm using a netlogon
  script I found at http://www.0x0a.com/netlogon.php that I've modified to
  handle multiple groups based upon group membership in /etc/group as I
  need. If I run the script from a command line supplying just a username
  it works ok.
 
  ./netlogon.pl mrambo   #This results in a good script.
 
 Okay, it appears that you have XML-Twig installed and the script is
 functioning from the command line as it should be.
 
 I have this script working in production environments on samba 2.2.2 (machine
 needs to be upgraded..client is stalling ;)) and 2.2.6 configurations without
 any trouble.
 
  [netlogon]
 comment = Network Logon Service
 path = /home/netlogon
 guest ok = yes
 read only = yes
 browseable = no
 printable = no
 write list = @adm
 share modes = no
 root prexec = /home/netlogon/netlogon.pl %U
 root postexec = rm -f /home/netlogon/%U.bat
 
 Looks good to me..quite similar to what I normally use.  Perhaps someone else
 can shed some light on the issue..though I think the log level should
 probably be a bit higher.
 
 --
 Regards,
 Deryk Robosson
 
 Robosson Business Services
 22 Flemington Street
 Albany, WA  6330
 ABN: 56 728 377 499
 Phone: +61 4 0842 9835 Email: [EMAIL PROTECTED]

-- 
Mike Rambo
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] samba and winbind issues

2002-10-28 Thread Jennifer Fountain
Yes and No

When i get a getent groups or groups, I only get domain admins.  I am a
member of about 10 groups and they aren't being listed.

Does this matter:

winbind uid = 4-4
winbind gid = 5-5

for some reason i am not getting a list of the correct groups but when i
type wbinfo -g i get them all.

I have AD in mixed mode if that helps.
Thanks!

-Original Message-
From: Wieprecht, Karen M. [mailto:Karen.Wieprecht;jhuapl.edu]
Sent: Monday, October 28, 2002 11:13 AM
To: 'Jennifer Fountain'; '[EMAIL PROTECTED]'
Subject: RE: [Samba] samba and winbind issues


Are you talking about access rights (like write list = @group) ?

I found a few interesting things with groups and security=domain with
winbind:

1.  the @group syntax applies to the UNIX group names.  To give access to an
NT group,  you need to use something like this:

write list = @WALNETNT_Domain Users 
  
   @DomainnameWinbindseparatorNTgroupname  

2.  If I specified an NT user,  it seemed that I had to prefix it with the
domain name and my winbind separator to get it to work correctly

write list = WALNETNT_jmacs

3. If you want to grant access to more than one user/group, separate the
entries with commas:
write list = WALNETNT_jmacs, @WALNETNT_Domain Users 

4. If you are using a username map file to make the user's UID assignment
match when he access files from either side,  it seems to cause his
membership to other NT groups to go un-noticed.  

Example:  I had a read-only share that was writable by
@WALNETNT_Domain Users ,  but user karen  (NT) was being assigned the UNIX
karen account UID and GID by the username mapping mechanism,  and was no
longer recognized as a member of the NT Domain Users group ...   I was going
to play with adding other UNIX groups to the write list to see if I could
fix this problem.

Hope this answers your question.  

-Original Message-
From: Jennifer Fountain [mailto:JFountain;rbinc.com] 
Sent: Friday, October 25, 2002 5:22 PM
To: 'Wieprecht, Karen M.'
Subject: RE: [Samba] samba and winbind issues


Thanks for the email.  I finally got samba to work but now I am having
issues with groups.  When I do a groups jfountain, i get domain admins but
no other groups.  when i do a groups user1, i get nothing - and the user is
in a couple groups.

Any thoughts or ideas? what am i missing?

-Original Message-
From: Wieprecht, Karen M. [mailto:Karen.Wieprecht;jhuapl.edu]
Sent: Thursday, October 24, 2002 9:04 AM
To: 'Jennifer Fountain'; '[EMAIL PROTECTED]'
Subject: RE: [Samba] samba and winbind issues


1. Run ~samba/bin/wbinfo -u and make sure you are actually talking to your
domain controller

2. Do you have winbind entries in your nsswitch.conf file?  Have you made
your system re-read this info (the command is nsadmin restart on irix,
don't know about other platforms).  

3. The windows box isn't caching any old login data is it?   (I've had
problems testing samba configuration changes because windows 2000 caches
some of the login stuff ... I'm not great on windows admin, don't know how
to force the cache to clear without a reboot,  so I've had to reboot the
windows client to test...

4. One of the samba guys said that the winbind use default domain parameter
might not do what I originally hoped (help me  match NT username with UNIX
username without having to use a username map).  Recent tests seem to show
that my UID's only match if I turn that parameter off and use a username
map.  Of course,  testing has been very frustrating because I keep fighting
with windows caching ...  Have you tried using a username map?  

Karen Wieprecht

-Original Message-
From: Jennifer Fountain [mailto:JFountain;rbinc.com] 
Sent: Wednesday, October 23, 2002 9:39 AM
To: [EMAIL PROTECTED]
Subject: [Samba] samba and winbind issues


I know winbind (i think) is working fine. i can log into a unix box with my
NT userid but when i try to access shares on my samba server, i get these
errors:

 [2002/10/23 08:47:01, 0] lib/util_sec.c:(111)
  Failed to set gid privileges to (-1,-2) now set to (0,0) uid=(0,0)
[2002/10/23 08:47:01, 0] lib/util.c:(1092)
  PANIC: failed to set gid

[2002/10/23 09:17:08, 0] lib/util_sec.c:(111)
  Failed to set gid privileges to (-1,-2) now set to (0,0) uid=(0,0)
[2002/10/23 09:17:08, 0] lib/util.c:(1092)
  PANIC: failed to set gid

log.smbd: END

Here is a copy of my smb.conf

 

# Samba config file created using SWAT
# from ws09573.rb.net (10.27.52.177)
# Date: 2002/10/23 08:16:35

# Global parameters
[global]
workgroup = domain1
netbios name = ARES
server string = ARES_SAMBA
interfaces = lan4 127.0.0.1
bind interfaces only = Yes
security = DOMAIN
encrypt passwords = Yes
password server = dc1
wins server = 10.1.14.25
winbind uid = 4-4
winbind gid = 5-5
template shell = /usr/bin/ksh

Re: [Samba] Is 2.2.6 Final?

2002-10-28 Thread Chris Tooley
On Mon, 2002-10-28 at 09:17, Markus Schabel wrote:
 John H Terpstra wrote:
 
 On Mon, 28 Oct 2002, William Jojo wrote:
 
 Just tought I'd follow up and see if 2.2.6 is truly the last release of
 samba_2_2 CVS branch.
 
 
 Yes, 2.2.6 is the latest stable release.
 
 So there will never be a stable samba again? ;)
 
Note the te in that word?  Hopefully 3.X will be stable.

 We hope that this will be our
 last update. All samba-team resources are now focussing on getting 3.0.0
 readt for release. Right now 3.0.0 is still changing significantly and we
 would not recommend it's use in a production environment.
 
Hooray!

 We've got six systems running it with no visible issues.
 
 
 If it is not broken then why fix it?
 
 the last version I had problems with was 2.2.3a (on a SuSE system) and 
 2.2.4 (there were problems with LDAP, all solved since 2.2.5)
 
 I'm currently testing CVS from Sunday's pull of 3.0...is this the
 direction I should be heading?
 
 
 Yes. But do your home work. Test, test, test, and give us feedback.
 
 I'm currently working on a PDC for about 300 LDAP-based users, I guess 
 with LDAP there is no problem when migrating to 3.0? Probably I'll run 
 the actual CVS parallel
 
 regards
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] samba and winbind issues

2002-10-28 Thread Wieprecht, Karen M.
Sorry,  I don't know any more,  hopefully one of the samba gurus might have
an explanation for the behavior. 

Karen Wieprecht

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] printing

2002-10-28 Thread Nils Neumann
I have following configuration :
[global]
  workgroup = testing
  server string = Samba-Server
  security = SHARE
  encrypt passwords = Yes
  map to guest = Bad User
  socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
  character set = ISO8859-15
  kernel oplocks = No
[printers]
  comment = All Printers
  path = /var/spool/samba
  hosts allow = 192.168.0.20
  browseable = no
  public = yes
  writeable = no
  printable = yes

1.) My Client has the IP 192.168.0.4, but there is no problem for the client 
to print on my samba server. If I add the line hosts deny = 192.168.0.4, my 
client can still printing. Is this normal a normal behaviour of the samba ? 
Or is my configuration file wrong ?

2.) If I change the line public = yes to public = no, I can print with the 
client without a password ? Is this normal, too ?

(System : Debian stable/testing, Samba 2.2.3a-6, kernel 2.4.19)

I hope somebody can help!
Nils


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] NT4 chaning machine passwords

2002-10-28 Thread Guy Story, KC5GOI
I am having an issue with NT4 workstations changing their passwords on a 
regular basis.  I am getting the following error:

Description: Changing machine account password for account WS10$ failed
with the following error:
The handle is invalid.

This does not happen on all the NT4 workstations and is occuring on a W2KPro 
as well.  Has anyone found a solution for this?

Thanks,

Guy

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Samba, Cups, printer driver download problems

2002-10-28 Thread Robert M. Martel

I have Samba 2.2.6 complied against Cups 1.1.16 on a Sparc system running 
Solaris 9.  Cups has replaced the stock system V lp spooler on this system 
(original packages removed.)

Cups working from UNIX command line is A-OK.

I have been working on setting up Samba to play nice with cups.  I have 
followed the instructions from both the Cups and Samba websites to set up 
downloading of the generic Adobe postscript drivers to MS Windows PCs and use 
CUPS as a RIP.

So far I have been unable to get the Windows 98 drivers to download to the 
client PC - when adding the printer the client ends up asking the user what type 
of printer is being added.  Driver downloads for W2K work OK.

The relevant lines from a Samba log file seem to be:

-
[2002/10/28 14:17:46, 9] printing/nt_printing.c:get_a_printer_2(2702)
  Unpacked printer [ur10] name [\\techops\ur10] running driver [ur10]
[2002/10/28 14:17:46, 10] printing/nt_printing.c:get_a_printer(3302)
  get_a_printer: [ur10] level 2 returning WERR_OK
[2002/10/28 14:17:46, 10] 
printing/nt_printing.c:get_a_printer_driver_9x_compatible(1825)
  driver key: [DRIVERS/WIN40/0/ur10]
[2002/10/28 14:17:46, 8] printing/nt_printing.c:get_a_printer_driver_3(1758)
  get_a_printer_driver_3: [DRIVERS/WIN40/0/ur10]
  info3-name[ur10]
  info3-datafile[\print$\WIN40\0\ur10.PPD]
  info3-helpfile[\print$\WIN40\0\ADOBEPS4.HLP]
  info3-monitorname [PSMON.DLL]
  info3-defaultdatatype [RAW]
  info3-environment [Windows 4.0]
  info3-driverpath  [\print$\WIN40\0\ADOBEPS4.DRV]
  info3-configfile  []
[2002/10/28 14:17:46, 10] smbd/lanman.c:get_printerdrivernumber(799)
  9x compatable driver line for [ur10]: 
[ADOBEPS4.DRV:ur10.PPD:ADOBEPS4.HLP:PSMON.DLL:RAW:]
[2002/10/28 14:17:46, 3] smbd/lanman.c:get_printerdrivernumber(836)
  Can't determine number of printer driver files
[2002/10/28 14:17:46, 3] smbd/lanman.c:api_DosPrintQGetInfo(918)
  api_DosPrintQGetInfo: Driver files count: 0
[2002/10/28 14:17:46, 10] printing/nt_printing.c:get_a_printer(3277)
  get_a_printer: [ur10] level 2
[2002/10/28 14:17:46, 6] rpc_parse/parse_prs.c:prs_debug(60)
  00 sec_io_desc_buf nt_printing_getsec

---

Cupsaddsmb ran without errors and the WIN40 subdirectory is populated with 
files.


Can anyone offer any advice?

Thanks,
Bob Martel
**
 Speaking only for myself - CSU pays better people than me to speak for them.
 
 Bob Martel - System Administrator  | I met someone who looks 
 Maxine Goodman Levin College of Urban Affairs  |a lot like you
 Cleveland State University | She does the things you do
 (216) 687-2214 |But she is an IBM 
  
 [EMAIL PROTECTED]  |  -Jeff Lynne 
**


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] security bug or misconfiguration ?

2002-10-28 Thread Hans B. Randgaard
Dear list,

We are experiencing users unexpectedly accessing each others files.
It happens when they try to access files that are called the same and which
is located in an equal file structure under their login drive. Two other
conditions
need to be fulfilled: one of the users needs to have the file locked and
both users
needs to be logged into the same Citrix server(windows-2000).

For instance if userA uses Outlook to open a PST file located here:
L:\user.pst and
userB tries to open L:\user.pst, it fails for userB even though the file
L:\user.pst are
different files since L: is the login drive for the user.

The login drive is defined in smb.conf as:

[user$]
comment = Users home directory (L:)
path = /pcstorage/%G/users/%U
read only = No
inherit permissions = Yes
create mask = 0600
directory mask = 0700

user$ is referred to in the user profile on the NT PDC(\\pcserver\user$).
%G resolves to the primary UNIX group that the user belongs to and
%U resolves to the UNIX user ID.
The file structure on the UNIX server is layed out as this:

/storage1/department1/users/user1
/storage1/department1/users/user2
/storage1/department1/users/user3
.
.
/storage1/department2/users/user1
/storage1/department2/users/user2
/storage1/department2/users/user3

etc.

This setup has been working fine for some time now, but suddenly we
found out that some files in the users personal area were overwritten by
other users.
The Outlook example above will not overwrite, but is an easy test to prove
the
described functionality.

The question is:

Is this a bug or is our Samba setup misconfigured ?

We run Samba-2.2.5 with ACL support and winbind on Solaris-8.

Below is our smb.conf file:

[global]
workgroup = DOMAIN1
netbios name = storage1
netbios aliases = pcstorage
interfaces = ge0 79.0.0.0/255.0.0.0 193.167.89.0/255.255.255.0
security = DOMAIN
encrypt passwords = Yes
password server = dc01, dc02, mailsrv
wins server = 79.17.7.1
#
# User that have all rights on all shares regardless of the permissions:
#
admin users = DOMAIN1+hbr,DOMAIN1+rbh
log file = /usr/local/samba/var/log.%m
max log size = 100
local master = No
deadtime = 180
username map = /usr/local/samba/lib/users.map

# separate domain and username with '+', like DOMAIN+username
winbind separator = +
winbind cache time = 3600
# use uids from 1 to 2 for domain users
winbind uid = 1-2
# use gids from 1 to 2 for domain groups
winbind gid = 1-2
# allow enumeration of winbind users and groups
winbind enum users = yes
winbind enum groups = yes
client code page = 850
character set = ISO8859-1
valid chars = ø:Ø

[user$]
comment = Users home directory (L:)
path = /pcstorage/%G/users/%U
read only = No
inherit permissions = Yes
create mask = 0600
directory mask = 0700
.
.
.
Rest of the drives...

I hope some of you have been in the same situation or can tell me what
is wrong.

Thanks very much in advance.

Kind regards, Hans.



**
This e-mail and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to which they 
are addressed. If you have received this e-mail in error please notify 
the system manager at [EMAIL PROTECTED]

This e-mail and its contents do not constitute and shall not be 
considered as a financial commitment of Maersk Olie og Gas AS 
and its affiliates. 
Maersk Olie og Gas AS expressly disclaims any responsibility
as to the accuracy and use of this e-mail and its contents.
**

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] solaris 7 and cvs samba 3.x build - No locking available. RunningSamba would be unsafe solaris

2002-10-28 Thread David Shapiro
Hello,

Getting during configure the infamous error: No locking available. Running
Samba would be unsafe solaris

I went into tests folder and tried summary.c. It fails with the above error.
I tried to make the fcntl_lock manually like it tries and got the following:

rootraven:/usr/local/samba/source/tests #gcc -m32 -o fcntl_lock
fcntl_lock.c
fcntl_lock.c: In function `main':
fcntl_lock.c:43: storage size of `lock' isn't known
fcntl_lock.c:55: `O_RDONLY' undeclared (first use in this function)
fcntl_lock.c:55: (Each undeclared identifier is reported only once
fcntl_lock.c:55: for each function it appears in.)
fcntl_lock.c:63: `F_WRLCK' undeclared (first use in this function)
fcntl_lock.c:72: `F_GETLK' undeclared (first use in this function)
fcntl_lock.c:75: `F_UNLCK' undeclared (first use in this function)
fcntl_lock.c:84: `O_RDWR' undeclared (first use in this function)
fcntl_lock.c:84: `O_CREAT' undeclared (first use in this function)
fcntl_lock.c:84: `O_EXCL' undeclared (first use in this function)
fcntl_lock.c:99: `F_SETLK' undeclared (first use in this function)

Any thoughts on how to fix this?  I tried --with-spinlocks, but configure
fails anyway trying to do the fcntl locking.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Daylight savings

2002-10-28 Thread Mike Black



I'm running 2.2.6
When daylight savings time changed this weekend I 
had to reset all samba sessions as the sessions didn't pick up the time 
change.
Copying file from a Windows client to the server 
made the filetime off by one hour.
Killing all the same sessions (also restarted smbd 
-- not sure if that was needed) fixed the problem.

Michael D. Black [EMAIL PROTECTED]http://www.csi-inc.com/http://www.csi-inc.com/~mike321-676-2923, 
x203Melbourne FL


Re: [Samba] auth to two diff PDCs? (success, sort of)

2002-10-28 Thread Andrew Bartlett
Collins, Kevin wrote:
 
 Hi All:
 
 Excuse me for butting in here, but I'm planning a migration from WinNT 4
 to Samba in the near future and this thread has caused me to worry a
 little.
 
 Take the case that I'm planning:  3 Domains each to its own LAN
 (connected via 128k Frame Relay lines to form a WAN) Each domain
 currently has a NT 4 PDC and each domain trusts each other.  How do I
 accomplish these trusts only using Samba PDCs?
 
 Meaning:  If I rip out the NT Domains, replace the PDCs with Samba PDCs
 and rebuild new domains (new Domain Names, new NetBIOS names for the
 PDCs, etc.)  How do I get the three domains to once again trust each
 other?  Is there a Samba command to do this?

Domain trusts (in terms of us being a PDC trusting other DCs) are
currenetly a work in progress.  We hope to have it finished for Samba
3.0.

However, why do you need domain trusts?  (There are lots of good answers
to this question, but make sure you do have one of the answers).

Samba 2.2 has always supported being a member server in a domain with
domain trusts, for the record.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] samba and winbind issues

2002-10-28 Thread Jennifer Fountain
Thanks for your help though! :)

-Original Message-
From: Wieprecht, Karen M. [mailto:Karen.Wieprecht;jhuapl.edu]
Sent: Monday, October 28, 2002 1:19 PM
To: 'Jennifer Fountain'; '[EMAIL PROTECTED]'
Subject: RE: [Samba] samba and winbind issues


Sorry,  I don't know any more,  hopefully one of the samba gurus might have
an explanation for the behavior. 

Karen Wieprecht
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] SMBFS files receiving incorrect timestamps

2002-10-28 Thread Kris Kelley
Hello all.

Our system consists of two linux machines, each running Red Hat 7.1
(kernel 2.4.9-34), using SMB to mount multiple shares hosted by a
Windows 2000 Advance Server.  smbclient from Samba 2.2.5 is used to do
the actual mounting.

Over the weekend, a number of files on these SMBFS shares were created
with incorrect timestamps (modification times).  In some cases, the
timestamps were off by as much as four days!  Today, every file created
by the linux machines, even those created by touch called without any
extra arguments, received timestamps that were one hour ahead.

When I discovered this was happening, I unmounted all SMBFS shares, and
remounted them.  This fixed the problem; all files created now have the
correct timestamp.

The Windows host and the linux clients all have their system clocks set
correctly, and their system clocks were updated automatically during the
switch from daylight savings time.  I suspect the 1-hour discrepancy I
saw today has something to do with the daylight savings switch, but if
that is the case, what caused some files created on Saturday (26
October) to receive timestamps for this coming Wednesday (30 October)?

Most importantly, how do I keep this from happening again?  Please let
me know if more information is needed.  Thank you.

---Kris Kelley

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] PDC Problems

2002-10-28 Thread Nick
On the client machine; Control Panel  Administration Tools  Local
Security Policy  Local Policy  Security Options  Send unencrypted
password to third-party SMB servers = enabled

Michele Santucci wrote:

Are the user and machine$ added to your /etc/passwd and smbpasswd files?



all the user already added, I'm trying to add machine$ automatically (via
adduser)



Also do you have send unencrypted passwd to third party smb servers
enabled in you local security policy settings?



How?

Something like that?

 encrypt passwords = Yes



bye by(t)e[S]...TuX!




--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] ENC: utilizing smbpasswd with two user #######URGENT#######

2002-10-28 Thread John H Terpstra
On Mon, 28 Oct 2002, SALOME Alexandre wrote:


  Hi,
 
  I have a  user in Windows (user_windows = eng.calculo).
  I would like that this user_windows acess the unix (solairs2.6) as a valid
  user unix (user_unix=cs02929)
  (this problem is because the admintool only create user with  8
  caractheres.
  How I can resolve this problem ?

In your smb.conf [globals] add:
username map = /etc/smbusers


In your /etc/smbusers put:
cs02929 = eng.calculo

- John T.

 
 
  Atenciosamente
  Alexandre Salomé
  Comau System  _ Sistemas Engenharia
  tel: 0055 031 9944 8646
  fax:0055 031 3529 6533
 


-- 
John H Terpstra
Email: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Another GUI

2002-10-28 Thread atom
Well i checked the www.cpan.org for any samba perl modules and found one:
http://search.cpan.org/author/ALIAN/Filesys-SmbClientParser-2.3/SmbClientPar
ser.pm

than looked at the source and found this line:


 if ( $line =~ /^\s+([\S ]*\S)\s+(Disk)\s+([\S ]*)/ )

This module also uses the Disk word. Also the author of this module
writes:
SmbClientParser is adapted from SMB.pm make by Remco van Mook
[EMAIL PROTECTED] on smb2www project.

So i think that this is a good idea after all. Perhaps you could be more
specific on what is worng with that kind of parsing.

I added a hide special shares (those with $) in the conf file as you
proposed.

The next release will contain that fix.
Atomix

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Is 2.2.6 Final?

2002-10-28 Thread Andrew Bartlett
Markus Schabel wrote:
 
 John H Terpstra wrote:
 
 On Mon, 28 Oct 2002, William Jojo wrote:
 
 Just tought I'd follow up and see if 2.2.6 is truly the last release of
 samba_2_2 CVS branch.
 
 
 Yes, 2.2.6 is the latest stable release.
 
 So there will never be a stable samba again? ;)

:-)

 We hope that this will be our
 last update. All samba-team resources are now focussing on getting 3.0.0
 readt for release. Right now 3.0.0 is still changing significantly and we
 would not recommend it's use in a production environment.
 
 We've got six systems running it with no visible issues.
 
 
 If it is not broken then why fix it?
 
 the last version I had problems with was 2.2.3a (on a SuSE system) and
 2.2.4 (there were problems with LDAP, all solved since 2.2.5)
 
 I'm currently testing CVS from Sunday's pull of 3.0...is this the
 direction I should be heading?
 
 
 Yes. But do your home work. Test, test, test, and give us feedback.
 
 I'm currently working on a PDC for about 300 LDAP-based users, I guess
 with LDAP there is no problem when migrating to 3.0? Probably I'll run
 the actual CVS parallel

Depending on how you also use LDAP, there are some good reasons to move
to 3.0.  In HEAD, pdb_ldap now has connection caching, and does not
modify unchanged attributes (these benefits provided by metze, who has
the significant advantage of using samba on a large and complex ldap
infrastructure). 

We hope to move this stuff into the next 3.0 alpha.

Samba 3.0 also adds 'ldap passwd sync', to help keep the LDAP and SMB
passwords in sync.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Website Safety Test Results

2002-10-28 Thread Delisa Foreman
Hello,

My name is Delisa, I have used the website testing technologies here at the Safe 
Shopping Network (http://www.safeshoppingnetwork.com) to test your site 
(samba.anu.edu.au) for security, usability and performance. You will be pleased to 
know that it did quite well. The reason I did the test is because we are currently 
searching for sites with high scores to add to our very popular (over two million 
shoppers per month) directory of tested safest shopping websites. I am not sure if I 
have the right email address but maybe you could lead me to the right person. If you 
would please forward this to the appropriate marketing manager, I would be grateful. 

Safe Shopping Network uses sophisticated testing technologies to test web sites for 
quality, security and usability. We also have the ability to deliver thousands of 
targeted, and more importantly, confident consumers proven to be eight times more 
likely to buy. Listing your site in the Safe Shopping Network is very effective due to 
the fact that the two million + users who visit each month are shoppers who prefer not 
to guess at whether they can trust a website. As we reveal your scores to them, they 
gain confidence in your company increasing the chance that they will make a purchase. 
The average click-to-purchase rate is 5.4% for our advertisers, far above the average 
.07% you get from other sources.

We provide many high-value pricing packages 
(http://www.safeshoppingnetwork.com/pricing.cfm) starting at just  $350/yr and that 
includes a 15,000 click guarantee. The different pricing packages include sub-category 
listings, category listings, full vulnerability/security reports (with solutions), 
24/7 website monitoring, and click guarantee for each listing. Our packages are simply 
the most unique and effective ways to promote your website available. Since it looks 
like your site fits well into multiple categories, I would be happy to list 
samba.anu.edu.au in the section of your choice free when you purchase two or more 
listings.

To discuss my proposal further, please feel free to give me a call on my direct line: 
(818) 344-1622 or call our toll free number (866) 29-TRUST (9-5 Pacific Standard Time) 
or sign up online at http://www.safeshoppingnetwork.com/pricing.cfm.

Thank You,

Delisa Foreman - Senior Account Manager
Safe Shopping Network
Guide to the safest web sites!
Web: Http://www.SafeShoppingNetwork.com
Toll Free: (866) 29-TRUST
Direct Line: (818) 344-1622
Email: [EMAIL PROTECTED]

Here are some useful links:
Homepage: http://www.safeshoppingnetwork.com
Corporate Info: http://www.safeshoppingnetwork.com/aboutus.cfm
Slide Show: http://www.safeshoppingnetwork.com/merchantzone.cfm
Pricing: http://www.safeshoppingnetwork.com/pricing.cfm

The content of this e-mail is strictly confidential, and is intended for the above 
listed recipient company only. If you received this email in error, I apologize for 
the inconvenience. Please reply back with the word Remove in the subject line and I 
will not email you again.






--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] SMBFS files receiving incorrect timestamps

2002-10-28 Thread Urban Widmark
On Mon, 28 Oct 2002, Kris Kelley wrote:

 When I discovered this was happening, I unmounted all SMBFS shares, and
 remounted them.  This fixed the problem; all files created now have the
 correct timestamp.

smbfs sets the mtimes itself. Not really sure why it was done like that,
but some comments claim that NT4 doesn't set mtime properly otherwise. It
would be better to just let the server handle time.

The 1-hour diff is probably the daylight savings change. smbfs is told by
smbmount what the server timezone is, as minutes from GMT. Of course this
changes with the daylight savings ...


 switch from daylight savings time.  I suspect the 1-hour discrepancy I
 saw today has something to do with the daylight savings switch, but if
 that is the case, what caused some files created on Saturday (26
 October) to receive timestamps for this coming Wednesday (30 October)?

No idea. Never heard anything like it before and would guess that the
client time actually was wrong (at that particular time).

/Urban

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba 2.2.6 leaks file descriptions!

2002-10-28 Thread jra
On Sun, Oct 27, 2002 at 06:47:33PM +0100, Joakim Tjernlund wrote:
   Been running with this change since friday and it looks good. I can not
   find any leaking FDs anymore. The usage of the server has been very low
   so I won't know for sure until Monday afternoon.
   
   Does this mean it's a RH kernel bug?
  
  It could either (a) be a bug in the linux kernel, necessarily specific to 
  RedHat, or (b) a bug in the way we use the kernel change notify mechanism 
  on linux.  Will take some more investigation to find out which.
  
 
 Found one more, this file(MTP_UP_PA12.doc) has been open for 6 hours:

Ok, I've found and fixed the problems with 2.2.6 leaking file descriptors
when kernel change notify is turned on. Unfortunately (or fortunately as
we can fix this :-) it's a Samba bug, not a Linux kernel bug.

I've committed this to all CVS branches.

Jeremy.


Here is the patch :

Index: smbd/notify_kernel.c
===
RCS file: /data/cvs/samba/source/smbd/notify_kernel.c,v
retrieving revision 1.6.4.15
diff -u -r1.6.4.15 notify_kernel.c
--- smbd/notify_kernel.c11 Jun 2002 03:25:50 -  1.6.4.15
+++ smbd/notify_kernel.c28 Oct 2002 22:01:19 -
 -127,7 +127,6 
BlockSignals(True, RT_SIGNAL_NOTIFY);
for (i = 0; i  signals_received; i++) {
if (fd == (int)fd_pending_array[i]) {
-   close(fd);
fd_pending_array[i] = (SIG_ATOMIC_T)-1;
if (signals_received - i - 1) {
memmove((void *)fd_pending_array[i], (void 
*)fd_pending_array[i+1],
 -138,6 +137,7 
break;
}
}
+   close(fd);
BlockSignals(False, RT_SIGNAL_NOTIFY);
}
SAFE_FREE(data);

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Re: How Samba let us down

2002-10-28 Thread Chris de Vidal
--- Keith G. Murphy [EMAIL PROTECTED] wrote:
   I think he's referring to the phenomenon that
 I've seen on way too
   many technical mailing lists:  be a complete
 asshole and you'll get
   the complete and undivided attention of multiple
 developers and power
   users, all of of whom assert, while helping, that
 that's not a good
   way to get help.  :-)
  
   Best way to do it is to impugn the quality of the
 product, and
   threaten to switch to another.
  
   (By the way, the OP's subject line was a work of
 art along these
   lines. The 'us', rather than 'me', raising the
 prospect of a huge
   group of people disappointed in Samba, was
 particularly nice.  I take
   my hat off.)
  
   I'm pretty sure a lot of posters have noticed
 this and use it to
   their advantage.  You do have to be kind of
 unprincipled first...
   :-)
  
  
 Ack!  I didn't mean to imply as much as it looks
 like I did about the OP
 and his motives.  I was more focused on a social
 phenomenon that I'd 
 noticed.  The subject line *was* a work of art, but
 that's not quite 
 saying the poster is a (con) artist.
 
 For the record, I do not believe he is an asshole,
 or unprincipled.  I 
 am an agnostic on the subject.

Thanks!

* I used the word us because it was everybody in my
IT department, the printing departement, the DP
department... some 100+ people who heavily depend on
Samba.  It let _us_ down.  Didn't think about the
implications of us vs. me.
* It is always important to know the context.  The
very first paragraph of the subject went something
like: I'm sharing my sad experience so that the Samba
community can learn and grow.  Never would I impugn
the quality of Samba; After all, it could have been
something we were doing wrong.  We use Samba elsewhere
and really like sticking it to Bill.  Of course we
don't overlook the stability, speed, cost, security,
open source, flexibility, etc...
* We actually were in the process of switching; No
threats! (-:  At that point, I was only sharing to
help enlighten the community; Turning back was not an
option.
* I don't believe I'm an asshole, either (-:  I always
attempt to have this attitude: I could be completely
wrong.

The story had a happy ending.  The NT server's new
hard drive died, so we kept hobbling along on Samba. 
When we disabled all OpLocks, all was well.  We are
coming up on a week of constant stability, no
corruption, and no interruptions in browsing the
server's hard drive.  Samba is looking gd.

/dev/idal

__
Do you Yahoo!?
Y! Web Hosting - Let the expert host your web site
http://webhosting.yahoo.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Access Problem connecting from windows 2000 client to Samba UNIXserver Share

2002-10-28 Thread Rend, Jon (Jon) %



On friday we changed our 
smb.conf file to test the security model that uses DOMAIN authenticacion. It 
worked fine testing two seperate usernames from Multiple Workstations connecting 
to a WORLD access share on the SAMBA server.

I have to say nothing has 
changed at all since friday, apart from the weekend :) and we now get this MS 
error message when trying to connect the same share again from 
WINDOWS:

"The account is not authorized to log in 
from this station"

Just to confirm that on both 
WorkStations no network shares existed when we tried again 
today?

I did find this and tried it also, it 
didn't make any difference:

++

Errors Codes and Misc. Information : 
Windows Specific Issues : Account is Not Authorized to Log In to This 
StationPrintable VersionAccount is Not Authorized to Log In to 
This Station Problem:

When trying to login to a Windows 2000 
machine, client gets the following error message: Account is Not Authorized to 
Log In to this Station

Solution:
Double click on My Computer Double 
click on Control Panel Double click on Administrative Tools Select Local 
Security Policy Select Local Policy Select Security Options FindSend 
Unencrypted Password to Connect to 3rd Party SMB Servers Right click on Send 
Unencrypted Password to Connect to 3rd Party SMB Servers Select Security 
Select Enabled Click OK Close all open windows

++

This is an example of our 
smb.conf file:

++

Our Version = Samba 
2.2.0

# 
BROWSING 
 workgroup = 
VTC 
 server string = 
mn01m0008.agere.com 
 announce as = 
NT 
 local master = 
no 
 preferred master = 
no 
 domain master = 
no 
 os level = 
33 
 wins server = 
135.149.49.50 
 remote announce = 
135.149.49.50 
 
# 
AUTHENTICATION 
 password server = 
* 
# 
security=server 
 security = 
domain 
# encrypt passwords = yes

++

Any help would be truly GREAT, even the NT boyz are 
stumped??

Jon J 
agere 
systems 
Office 651-675-3064( 1230 Northland 
DriveF 
Cell Phone 
651-253-3703 Mendota, MN 55120 
mailto: [EMAIL PROTECTED] 
* 




Re: [Samba] solaris 7 and cvs samba 3.x build - No locking available. Running Samba would be unsafe solaris

2002-10-28 Thread Matthew Hannigan
On Mon, Oct 28, 2002 at 02:55:05PM -0500, David Shapiro wrote:
 Hello,
 
 Getting during configure the infamous error: No locking available. Running
 Samba would be unsafe solaris

Dunno why you would get this, solaris works fine of course.
Maybe something screwy with your gcc installation?

 [problems compiling fcntl_lock]

Find the lines

  #ifdef HAVE_FCNTL_H
  #include fcntl.h
  #endif

and remove the #ifdef and #endif lines.

Matt
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] FW: Access Problem connecting from windows 2000 client to Samba UNIX server Share

2002-10-28 Thread Rend, Jon (Jon) %




-Original Message-From: Rend, Jon (Jon) % 
Sent: Monday, October 28, 2002 4:23 PMTo: 
'[EMAIL PROTECTED]'Subject: Access Problem connecting from 
windows 2000 client to Samba UNIX server Share
On friday we changed our 
smb.conf file to test the security model that uses DOMAIN authenticacion. It 
worked fine testing two seperate usernames from Multiple Workstations connecting 
to a WORLD access share on the SAMBA server.

I have to say nothing has 
changed at all since friday, apart from the weekend :) and we now get this MS 
error message when trying to connect the same share again from 
WINDOWS:

"The account is not authorized to log in 
from this station"

Just to confirm that on both 
WorkStations no network shares existed when we tried again 
today?

I did find this and tried it also, it 
didn't make any difference:

++

Errors Codes and Misc. Information : 
Windows Specific Issues : Account is Not Authorized to Log In to This 
StationPrintable VersionAccount is Not Authorized to Log In to 
This Station Problem:

When trying to login to a Windows 2000 
machine, client gets the following error message: Account is Not Authorized to 
Log In to this Station

Solution:
Double click on My Computer Double 
click on Control Panel Double click on Administrative Tools Select Local 
Security Policy Select Local Policy Select Security Options FindSend 
Unencrypted Password to Connect to 3rd Party SMB Servers Right click on Send 
Unencrypted Password to Connect to 3rd Party SMB Servers Select Security 
Select Enabled Click OK Close all open windows

++

This is an example of our 
smb.conf file:

++

Our Version = Samba 
2.2.0

# 
BROWSING 
 workgroup = 
VTC 
 server string = 
mn01m0008.agere.com 
 announce as = 
NT 
 local master = 
no 
 preferred master = 
no 
 domain master = 
no 
 os level = 
33 
 wins server = 
135.149.49.50 
 remote announce = 
135.149.49.50 
 
# 
AUTHENTICATION 
 password server = 
* 
# 
security=server 
 security = 
domain 
# encrypt passwords = yes

++

Any help would be truly GREAT, even the NT boyz are 
stumped??

Jon J 
agere 
systems 
Office 651-675-3064( 1230 Northland 
DriveF 
Cell Phone 
651-253-3703 Mendota, MN 55120 
mailto: [EMAIL PROTECTED] 
* 




Re: [Samba] Older Mac to SAMBA copy

2002-10-28 Thread Matthew Hannigan
On Mon, Oct 28, 2002 at 02:13:17PM -0600, Matt Nelson wrote:
 Since I posted this over the weekend, I thought I'd throw it out one more 
 time to see if anyone else might see it and has any ideas on this.

I didn't know samba could serve macs.  Does the mac speak SMB?
(Long time since I used macs)

If you're only serving macs, you could use CAP or netatalk instead.

Matt
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Winbind!

2002-10-28 Thread Jennifer Crusade




Hello,
I amrunning Red 
Hat 7.3 Samba 2.26 and winbind. I have been able to join the domain and 
test all of the followingwith these commands. All works great. 
winbind -u 
winbind -g
getent passwd
getent group 
But when I set up a share to test with one domain 
user account it just presents me with a password dialog box and does not accept 
anything. It should not prompt me but if it does it should authenticate. I have 
tried it with the username map = /etc/samba/smbusers and that did not work 
either.

I have the winbind 
separator as + but if I run testparm I get the following:
[root@gtdns root]# 
testparmLoad smb config files from /etc/samba/smb.confProcessing section 
"[TESTIT]"Loaded services file OK.'winbind separator = +' might cause 
problems with group membership.Press enter to see a dump of your service 
definitions
If I change the 
separator to \andrun testparm I get the following:
[root@gtdns root]# 
testparmLoad smb config files from /etc/samba/smb.confProcessing section 
"[TESTIT]"Loaded services file OK.ERROR: the 'winbind separator' 
parameter must be a single character.Press enter to see a dump of your 
service definitions
Here is my information:
#=== Global Settings 
=
[global]
workgroup = GTESS1.COM
netbios name = GTDNS
server string = Linux 7.3 Samba Server
log file = /var/log/samba/log.%m
security = domain
password server = *
wins server = 192.168.2.1
;username map = /etc/samba/smbusers
encrypt passwords = yes
winbind separator = +
winbind uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes
template shell = /bin/bash
winbind use default domain = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 
SO_SNDBUF=8192
remote announce = 192.168.1.255 192.168.2.44 
192.168.4.255

[TESTIT]
comment = TESTIT
path = /usr/stuff
valid users = GTESS1.COM+jcrusade
read only = No
create mask = 0777
directory mask = 0777
Thanks, 
Jennifer Crusade GTESS Corp. CCNA, 
MCSE W2k\NT 4.0, MCP +I 



[Samba] smbd is the source of usually high CPU usage

2002-10-28 Thread Sean Angley
We have installed Samba 2.2.5 under SuSE Linux (kernel 2.4.7) on a z/800
(IBM mainframe) and are witnessing usually high processor usage. The high
usage is associated with one of the clients.  The client runs a script on
an OS/2 machine that continuously works its way through a long list of
small files one by one.  The list of files is so long that the script may
run for 5 or 6 hours.  The script copies a small file from the server to
workstation, updates the file on the workstation, writes the revised file
back to the server from the workstation.

When this script runs, we see processor utilization soar to values above
75%. Is there a penalty incurred when Samba is used in batch for intensive
file transfer?

Does anyone has a good reference to tuning Samba performance?


regards..
  Sean Angley, P.Eng.
  [EMAIL PROTECTED]
Host Server Support
ISM Canada
IBM Global Services
One Research Drive
Regina, CANADA
   S4S 7H1

PHONE:  (306) 790-5199
FAX:(306) 790-5070


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] root prexec/postexec login scripts

2002-10-28 Thread Deryk Robosson
On Tue, 29 Oct 2002 01:48 am, you wrote:
 Hi Deryk, thanks for the personal response.

 I forgot to mention in the original post that part of my reason for
 upgrading to 2.2.6 was to get away from the redhat rpms in the hope that
 I could get the log level boosted up some. That part was successful. I
 set the log level to 3 (I saw that in man smb.conf but it didn't
 indicate whether it could go any higher) but didn't see anything in

Try 5.  I don't recall right off the top of my head how high it goes but I do 
remember 5 spitting out a wealth of info.

[SNIP]
 I'm glad you hear that you still use this on 2.2.6 though because it
 would indicate that at least root preexec still works in the new version
 the same as in the old. This isn't related to my use of win9x (as
 opposed to NT/2000) clients is it?

I've used it in mixed environments of 9x and nt and nt/2k and 2k/xp.

-- 
Regards,
Deryk Robosson

Robosson Business Services
22 Flemington Street
Albany, WA  6330
ABN: 56 728 377 499
Phone: +61 4 0842 9835 Email: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] smbd is the source of usually high CPU usage

2002-10-28 Thread Sean Angley


We have installed Samba 2.2.5 under SuSE Linux (kernel 2.4.7) on a z/800
(IBM mainframe) and are witnessing usually high processor usage. The high
usage is associated with one of the clients.  The client runs a script on
an OS/2 machine that continuously works its way through a long list of
small files one by one.  The list of files is so long that the script may
run for 5 or 6 hours.  The script copies a small file from the server to
workstation, updates the file on the workstation, writes the revised file
back to the server from the workstation.

When this script runs, we see processor utilization soar to values above
75%. Is there a penalty incurred when Samba is used in batch for intensive
file transfer?

Does anyone has a good reference to tuning Samba performance?


regards..
  Sean Angley, P.Eng.
  [EMAIL PROTECTED]
Host Server Support
ISM Canada
IBM Global Services
One Research Drive
Regina, CANADA
   S4S 7H1

PHONE:  (306) 790-5199
FAX:(306) 790-5070




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] NT Administrator account changes permissions when logging onto samba server

2002-10-28 Thread Michael J. Luevane
Hello, all

I have a problem with my administrator accounts on WinNT with Samba.

When I log in locally as the Administrator, it works as expected - I *am*
the administrator for the machine.

When I log into the domain as Administrator, it works as expected - I log in
as root.

The prolem comes when I try to do anything on the local machine as
Administrator (logged into the Samba server). The problem is that any NT
permissions that I've put onto the Administrator account are not there when
I'm logged in on the domain. When I go back to logging in locally,
permissions are all fine.

What I'm trying to do is to run Veritas' BackupExec on an NT server and be
able to backup files on the linux box (main server). When I try to run the
front end I get a permissions error - that the account must be an
administrator or a backup operator.

I go into the Administrator account (local) and set the backup account to
Administrator *and* backup operator. Log back in. Locally, it's fine.

Log into the domain - those permissions are not set, so I cannot run the
backup program.

This issue seems to be the same for each account, so I'm guessing that I
missed something in the config. I looked, but couldn't figure it out.

Any help from anyone? :)

main server: Mandrake 9.0 running Samba 2.2.6pre2
backup server: WinNT 4.0 Server with SP 6

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba 2.2.6 leaks file descriptions!

2002-10-28 Thread Joakim Tjernlund


  
  Found one more, this file(MTP_UP_PA12.doc) has been open for 6 hours:
 
 Ok, I've found and fixed the problems with 2.2.6 leaking file descriptors
 when kernel change notify is turned on. Unfortunately (or fortunately as
 we can fix this :-) it's a Samba bug, not a Linux kernel bug.

Great! I will update from CVS ASAP. I hope I will have the chance to install it too.

Question: The Found one more, this file(MTP_UP_PA12.doc) has been open for 6 hours I 
posted earlier. That was with the change notify turned off. Should Samba do
this? Seems strange to me Samba needs more than one fd for one file.

  Jocke
 
 I've committed this to all CVS branches.
 
 Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Is 2.2.6 Final?

2002-10-28 Thread John H Terpstra
On Mon, 28 Oct 2002, Markus Schabel wrote:

 John H Terpstra wrote:

 On Mon, 28 Oct 2002, William Jojo wrote:
 
 Just tought I'd follow up and see if 2.2.6 is truly the last release of
 samba_2_2 CVS branch.
 
 
 Yes, 2.2.6 is the latest stable release.
 ^^
latest != last   ;)

 
 So there will never be a stable samba again? ;)

 We hope that this will be our
 last update. All samba-team resources are now focussing on getting 3.0.0
 readt for release. Right now 3.0.0 is still changing significantly and we
 would not recommend it's use in a production environment.
 
 We've got six systems running it with no visible issues.
 
 
 If it is not broken then why fix it?
 
 the last version I had problems with was 2.2.3a (on a SuSE system) and
 2.2.4 (there were problems with LDAP, all solved since 2.2.5)

 I'm currently testing CVS from Sunday's pull of 3.0...is this the
 direction I should be heading?
 
 
 Yes. But do your home work. Test, test, test, and give us feedback.
 
 I'm currently working on a PDC for about 300 LDAP-based users, I guess
 with LDAP there is no problem when migrating to 3.0? Probably I'll run
 the actual CVS parallel

 regards



-- 
John H Terpstra
Email: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Re: workgroups not recognized in virtual server conf files

2002-10-28 Thread Herb Lewis
You might want to upgrade to a newer version of samba. This works for
me with samba 2.2.4 and 2.2.6

D. Joe Anderson wrote:

Hi,

The documentation I've read indicates that I should be able to get Samba to
honor the value of the 'workgroup' variable as set from within an included
virtual server configuration file.

Given the configuration files below, if I comment out the 

  workgroup = testwg 

line from the main configuration file (smb.conf), then a query of
the Samba server (with smbclient -L test4 -U%) shows the server as being
in the WORKGROUP workgroup, rather than the TESTWG workgroup that I specify
in conf.test4.  The server still responds, however, to the TEST4 netbios
name as specified in the included conf.test4 file.

The only thing I can see that might be amiss is the line

   Can't find include file /etc/samba/conf. 

When I run smbclient.

I would appreciate any pointers as to how I might get the workgroup setting
within the included file to be recognized.

--Joe


(If anyone is wondering why I bother with the 'netbios alias' line for just
one netbios name, I tried this with three netbios aliases, expecting it to
Just Work.  This is a simplified example.  If we can get this to work, I'll
work my way back up ;-)

$uname -a
Linux xxx.xxx.iastate.edu 2.2.19-7.0.1 #1 Tue Apr 10 00:55:03 EDT 2001
i686 unknown

# rpm -q samba
samba-2.2.2-20011013


# cat smb.conf

# Global parameters
 
[global]
 workgroup = testwg
 netbios aliases = test4
 include = /etc/samba/conf.%L



# cat conf.test4
[global]
workgroup = TESTWG
netbios name = TEST4
os level = 128
domain master = yes
local master = yes
preferred master = yes
security = user
status = yes
encrypt passwords = Yes
update encrypted = Yes
password level = 8
smb passwd file = /etc/samba/smbpasswd
log file = /var/log/samba/%L
log level = 4
max log size = 50
dns proxy = No
wins server = xxx.xxx.xxx.xxx
wins proxy = yes
guest account = ftp

From the test4 log:


 135 [2001/12/06 17:42:50, 3] param/params.c:pm_process(579)
 136   params.c:pm_process() - Processing configuration file
/etc/samba/smb
 136 .conf
 137 [2001/12/06 17:42:50, 3] param/loadparm.c:do_section(2884)
 138   Processing section [global]
 139   doing parameter netbios aliases = webtest4
 140   doing parameter include = /etc/samba/conf.%L
 141 [2001/12/06 17:42:50, 3] param/params.c:pm_process(579)
 142   params.c:pm_process() - Processing configuration file
/etc/samba/con
 142 f.webtest4
 143 [2001/12/06 17:42:50, 3] param/loadparm.c:do_section(2884)
 144   Processing section [global]
 145   doing parameter workgroup = WEBTESTWG
 146   doing parameter netbios name = WEBTEST4
 147 [2001/12/06 17:42:50, 4] param/loadparm.c:handle_netbios_name(2251)
 148   handle_netbios_name: set global_myname to: WEBTEST4
 149   doing parameter os level = 128
 150   doing parameter domain master = yes

# smbclient -L test4 -U% | less
Can't find include file /etc/samba/conf.
added interface ip=129.186.xxx.6 bcast=129.186.xxx.255 nmask=255.255.255.0
added interface ip=129.186.yyy.138 bcast=129.186.yyy.255 nmask=255.255.255.0
Got a positive name query response from 129.186.xxx.6 ( 129.186.xxx.6 )
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 2.2.2]

Sharename  Type  Comment
-    ---
IPC$   IPC   IPC Service (Samba 2.2.2)
ADMIN$ Disk  IPC Service (Samba 2.2.2)

Server   Comment
----
TEST4Samba 2.2.2
ANOTHERHOST  Samba 2.2.2

WorkgroupMaster
----
WORKGROUP





--
==
Herb Lewis   Silicon Graphics
Networking Engineer  1600 Amphitheatre Pkwy MS-510
Strategic Software Organization  Mountain View, CA  94043-1351
[EMAIL PROTECTED] Tel: 650-933-2177
http://www.sgi.com   Fax: 650-932-2177
PGP Key: 0x8408D65D
==

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Winbind!

2002-10-28 Thread Jay Ts
On Mon, Oct 28, 2002 at 05:33:22PM -0600, Jennifer Crusade wrote:
 Hello,
 
 I am running Red Hat 7.3 Samba 2.26 and winbind.  I have been able to join
 the domain and test all of the following with these commands.  All works
 great.  
 
 But when I set up a share to test with one domain user account it just
 presents me with a password dialog box and does not accept anything. It
 should not prompt me but if it does it should authenticate.

I suggest configuring PAM to allow shell logins for domain users.
If you can get them to login at a Linux login: prompt, then it
should work also through Samba.  It's just one thing you can do
to check.

 I have the winbind separator as + but if I run testparm I get the following:
 
 [root@gtdns root]# testparm
 Load smb config files from /etc/samba/smb.conf
 Processing section [TESTIT]
 Loaded services file OK.
 'winbind separator = +' might cause problems with group membership.
 Press enter to see a dump of your service definitions

Looks like a warning rather than an error.  IIRC, the examples in
the Samba docs use a +, so it seems like it should be ok.

 If I change the separator to \ and run testparm I get the following:
 
 [root@gtdns root]# testparm
 Load smb config files from /etc/samba/smb.conf
 Processing section [TESTIT]
 Loaded services file OK.
 ERROR: the 'winbind separator' parameter must be a single character.
 Press enter to see a dump of your service definitions

Maybe you need to specify the backslash as \\ instead of a single \. ?
I don't remember just offhand exactly how I did it, but I had things
configured here to use \ as the winbind separator.

If you don't get it working pretty quickly ... coincidentally, I am
currently working on the section on winbind for Using Samba, 2nd edition.
I might be able to send you a copy of that, and see if the directions work
for you. Hopefully, you can also provide some pre-publication user
feedback. Email me privately if you'd like to do this.

Jay Ts
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] smbd is the source of usually high CPU usage

2002-10-28 Thread Jay Ts
Sean Angley wrote:
 
 Does anyone has a good reference to tuning Samba performance?

It used to be that you could tune some Samba configuration file
(smb.conf) parameters to get better performance, but AFAIK, all
those are now the defaults.  The important thing is to not mess
with them.

If there are any exceptions to this, I'd sure like to know about
them!  You can look through the manual page for smb.conf(5) and
see if anything applies to your network and might conceivably
gain some performance.  Try searching the manual page for
performance: this will get you off to a good start.

Also, you can check the first edition of Using Samba for the
appendix on Samba Performance Tuning (I think it was Appendix A).
http://samba.he.net, or look in the docs/ directory in the
Samba source distribution.

Aside from that, it seems that nowadays the issue is more about
getting your network hardware working right, the network configuration
on the Unix host system, and the performance level of the system you
are running Samba on.

Jay Ts
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba 2.2.6 leaks file descriptions!

2002-10-28 Thread jra
On Tue, Oct 29, 2002 at 01:10:26AM +0100, Joakim Tjernlund wrote:
 
 
   
   Found one more, this file(MTP_UP_PA12.doc) has been open for 6 hours:
  
  Ok, I've found and fixed the problems with 2.2.6 leaking file descriptors
  when kernel change notify is turned on. Unfortunately (or fortunately as
  we can fix this :-) it's a Samba bug, not a Linux kernel bug.
 
 Great! I will update from CVS ASAP. I hope I will have the chance to install it too.
 
 Question: The Found one more, this file(MTP_UP_PA12.doc) has been open for 6 hours 
I 
 posted earlier. That was with the change notify turned off. Should Samba do
 this? Seems strange to me Samba needs more than one fd for one file.

This depends on the client - smbd only opens what the client requests.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Re: root prexec/postexec login scripts

2002-10-28 Thread Ulrich Kohlhase
Mike,

In case you still need a configurable login script ...

Add to [netlogon] share:
root preexec = perl /usr/local/samba/lib/genlogon.pl %u %g %m
root postexec = perl /usr/local/samba/lib/genlogoff.pl %u

Good luck,
Uli

---

#!/usr/bin/perl
#
# genlogon.pl
# smb.conf:
# root preexec = genlogon.pl %u %g %m
#
use Time::localtime;

($username, $groupname, $pcname) = ARGV;
$server = SERVER_NETBIOSNAME;

my $tm = localtime();
$datestring = sprintf %02d.%02d.%04d,$tm-mday, $tm-mon + 1,
$tm-year + 1900;

$logdateiname = sprintf /usr/local/samba/var/netlogon.log;
open (logfile, $logdateiname);
printf logfile  %s - %02d:%02d:%02d : User \%s\ \t group \%s\
logs in %s \n, $datestring, $tm-hour, $tm-min
, $tm-sec, $username, $groupname, $pcname;
close logfile; 

# Start login script:
open LOGON, /usr/local/samba/netlogon/$username.bat;
print LOGON \ECHO OFF\r\n;

# Home shares
print LOGON NET USE Z: $server\\$username /persistent:no\r\n;

# Shares for individual groups
if ($groupname eq GROUP || $groupname eq group)
{
   print LOGON NET USE X: $server\\SHARE1 /persistent:no\r\n;
   print LOGON NET USE Y: $server\\SHARE2 /persistent:no\r\n;
}

# Close output file
close LOGON;



#!/usr/bin/perl
#
# genlogoff.pl

system(rm /usr/local/samba/netlogon/$ARGV[0].bat);

-


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Machine can login, Machine(s) cant.

2002-10-28 Thread Brandon Hagedorn








Here is my scenario; I have a FreeBSD 4.7 Release running
Samba 2.2.6. I am using samba as a PDC. I have installed everything need
including the Win XP Sign or seal registry patch. I added a one XP machine account for one
machine, and it works fine. Logging
in and mounting network drives with a netlogon script. As soon as I add another machine in the
same subnet, different machine name, etc. I am not able to log into either of
the two machines now. Here is the windows error that pops up. Windows
cannot connect to the domain, either because the domain controller is down, or
otherwise unavailable, or because your computer account was not found, Please
try again later. If this message
continues to appear, contact your system administrator for assistance. I have looked at the logs nothing unusual
as far as I can see. I have
included my smb.conf file if this would help anyone. Any suggestions??





[global]

 workgroup = DOMAINLOGON

 netbios name = GRUMPY

 server string = PDC 

 encrypt passwords = Yes

 passwd program = /usr/bin/passwd %u

 passwd chat = *New*UNIX*password*
%n\n *ReType*new*UNIX*password* %n\n

 unix password sync = Yes

 log level = 2

 log file = /var/log/samba/log.%m

 max log size = 1000

 add
user script = /usr/sbin/adduser -home /dev/null
-group machines -shell /bin/false

 logon script = %U.bat

 logon path = \\%L\profiles\%U

 logon drive = h:

 domain logons = Yes

 os level = 64

 preferred master = True

 domain master = True

 wins server = 129.186.142.179



[netlogon]

 browseable = no

 path = /raid/samba/netlogon

 write list = @admin, flint, root



[homes]

 comment = Home Directories

 read only = No

 browseable = No



[profiles]

 path = /raid/samba/profiles

 browseable = no

 writable = yes

 read only = No

 create mask = 0600

 directory mask = 0700

 browseable = No



[raid]

 path = /raid

 browseable = No

 read only = No

 vfs object = /usr/local/lib/samba/recycle.so

 vfs options = recycle=.recycle



[private]

 path = /raid/samba/storage/private

 security= user

 browseable = No

 read only = no

 directory mask = 0700

 valid users = test, flint, root, zack

 vfs object = /usr/local/lib/samba/recycle.so

 vfs options = recycle=.recycle



[public]

 path = /raid/samba/storage/public

 browseable = No

 read only = no

 create mask = 0600

 directory mask = 0700

 valid users = test, flint, root, zack

 vfs object = /usr/local/lib/samba/recycle.so

 vfs options = recycle=.recycle








[Samba] what GCC and GAS version needed for samba 2.2.5

2002-10-28 Thread Martin Dube



Can anyone tell me what version of GCC and GAS are needed to 
compile samba v2.2.5 on a linux machine?

Thanks



[Samba] Winbind help

2002-10-28 Thread Agus Santosa
Hello,

When I put 'wbinfo -u'

always give me an error, can any one help me ??

== Error looking up domain users

Thank you so much !

Agus
=
Ikuti polling TELKOM Memo 166 di www.plasa.com dan menangkan hadiah masing-masing Rp 250.000 tunai.
=
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Problem Uploading Printer Drivers from XP

2002-10-28 Thread Chad Edwards
I am having problems uploading printer drivers from my WinXP workstation. I
can use my Win2K workstation just fine, but when I try to use the exact same
user ID and access the exact same printer, the New Driver... button on the
XP printer dialog is disabled. The only thing I can think of is permissions
on the client side (since it is the same user ID being used). I tried
granting my user ID full access to the printer, but it still wouldn't allow
me to access the New Driver... button. I have attached my smb.conf below.
Any help would be appreciated.

Samba 2.2.5 as PDC on RedHat 6.2

Thanks.
Chad Edwards

# Samba config file created using SWAT
# from UNKNOWN (192.168.0.102)
# Date: 2002/10/28 19:19:21

# Global parameters
[global]
 workgroup = REDWOOD
 netbios name = MACDONALD
 server string = Samba %v
 encrypt passwords = Yes
 passwd program = /usr/bin/passwd %u
 passwd chat = *ew*password* %n\n *ew*password* %n\n
 password level = 8
 unix password sync = Yes
 log file = /var/log/samba/log.%m
 max log size = 50
 time server = Yes
 deadtime = 15
 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 show add printer wizard = No
 domain admin group = samba_admin
 logon script = logon.bat
 logon path =
 logon drive = H:
 logon home = \\%L\%U
 domain logons = Yes
 os level = 64
 preferred master = True
 domain master = True
 wins support = Yes
 admin users = samba_admin
 hosts allow = 127.0.0.1, 192.168.0.
 print command = lpr -r -P%p %s; csh -c 'echo \%J has started printing on
%S\ | /usr/bin/smbclient -U %L -M %m -I %I' 

[homes]
 comment = Home Directories
 path = /samba/homes/%u
 read only = No
 browseable = No

[Superior]
 comment = Lexmark 5700
 path = /var/spool/samba
 printer admin = samba_admin
 printable = Yes
 printer name = lp_lexmark

[Shared]
 comment = Shared Files for Everyone
 path = /samba/shared
 read only = No
 inherit permissions = Yes

[print$]
 comment = Print Drivers
 path = /samba/printers
 write list = samba_admin
 guest ok = Yes


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Problem running ./configure

2002-10-28 Thread Elliot
guys .. when i run ./configure for my samba 2.2.6 .. i get this error

$ checking for test routines... configure: error: cant find test code.
Aborting config

I am not sure how to resolve it. I have posted my error log file at
http://www.mutualinterest.com.sg/config.log   hope someone can help me
out here..

And this is my output. Sorry if it is kinda long.


[rootgatecrasher source]# ./configure
loading cache ./config.cache
checking for gcc... gcc
checking whether the C compiler (gcc -O  ) works... yes checking whether
the C compiler (gcc -O  ) is a cross-compiler... no checking whether we
are using GNU C... yes checking whether gcc accepts -g... yes checking
for a BSD compatible install... /usr/bin/install -c checking for gawk...
gawk checking if the linker (ld) is GNU ld... yes checking for passwd...
/usr/bin/passwd checking whether gcc and cc understand -c and -o
together... yes checking that the C compiler understands volatile... yes
checking host system type... i686-pc-linux-gnu checking target system
type... i686-pc-linux-gnu checking build system type...
i686-pc-linux-gnu checking config.cache system type... same checking for
LFS support... yes checking for inline... inline checking how to run the
C preprocessor... gcc -E checking for ANSI C header files... yes
checking for dirent.h that defines DIR... yes checking for opendir in
-ldir... no checking whether time.h and sys/time.h may both be
included... yes checking for sys/wait.h that is POSIX.1 compatible...
yes checking for arpa/inet.h... yes checking for sys/fcntl.h... yes
checking for sys/select.h... yes checking for fcntl.h... yes checking
for sys/time.h... yes checking for sys/unistd.h... yes checking for
unistd.h... yes checking for utime.h... yes checking for grp.h... yes
checking for sys/id.h... no checking for limits.h... yes checking for
memory.h... yes checking for net/if.h... yes checking for compat.h... no
checking for rpc/rpc.h... yes checking for rpcsvc/nis.h... yes checking
for rpcsvc/yp_prot.h... yes checking for rpcsvc/ypclnt.h... yes checking
for stdlib.h... yes checking for string.h... yes checking for
strings.h... yes checking for syslog.h... yes checking for sys/file.h...
yes checking for sys/param.h... yes checking for ctype.h... yes checking
for sys/wait.h... (cached) yes checking for sys/resource.h... yes
checking for sys/ioctl.h... yes checking for sys/ipc.h... yes checking
for sys/mode.h... no checking for sys/mman.h... yes checking for
sys/filio.h... no checking for sys/priv.h... no checking for
sys/shm.h... yes checking for sys/socket.h... yes checking for
syslog.h... (cached) yes checking for sys/syslog.h... yes checking for
sys/mount.h... yes checking for sys/vfs.h... yes checking for
sys/fs/s5param.h... no checking for sys/filsys.h... no checking for
termios.h... yes checking for termio.h... yes checking for
sys/termio.h... no checking for sys/statfs.h... yes checking for
sys/dustat.h... no checking for sys/statvfs.h... yes checking for
stdarg.h... yes checking for sys/sockio.h... no checking for
security/pam_modules.h... no checking for security/_pam_macros.h... no
checking for dlfcn.h... yes checking for synch.h... no checking for
pthread.h... yes checking for nsswitch.h... no checking for shadow.h...
yes checking for netinet/ip.h... yes checking for netinet/tcp.h... yes
checking for netinet/in_systm.h... yes checking for netinet/in_ip.h...
no checking for nss.h... yes checking for nss_common.h... no checking
for ns_api.h... no checking for sys/security.h... no checking for
security/pam_appl.h... no checking for security/pam_modules.h...
(cached) no checking for stropts.h... yes checking for poll.h... yes
checking for sys/capability.h... no checking for syscall.h... yes
checking for sys/syscall.h... yes checking for sys/acl.h... no checking
for sys/cdefs.h... yes checking for glob.h... yes checking for utmp.h...
yes checking for utmpx.h... yes checking for lastlog.h... yes checking
for sys/fs/vx_quota.h... no checking for linux/xqm.h... yes checking
size of int... 4 checking size of long... 4 checking size of short... 2
checking for working const... yes checking for inline... (cached) inline
checking whether byte ordering is bigendian... no checking whether char
is unsigned... no checking return type of signal handlers... void
checking for uid_t in sys/types.h... yes checking for mode_t... yes
checking for off_t... yes checking for size_t... yes checking for
pid_t... yes checking for st_rdev in struct stat... yes checking for
d_off in dirent... yes checking for ino_t... yes checking for loff_t...
yes checking for offset_t... no checking for ssize_t... yes checking for
wchar_t... yes checking for cups-config... /usr/bin/cups-config checking
for dlopen... no checking for dlopen in -ldl... no checking for
immediate structures... yes checking for unix domain sockets... yes
checking for socklen_t type... yes checking for sig_atomic_t type... yes
checking for errno declaration... yes checking for setresuid

[Samba] samba compiling error

2002-10-28 Thread Lora

Hello,

I have error on compiling time
I tried on HP-UX 11.00 system with gcc version 3.1 to compile samba source
Samba latest version source was dowloaded from www.us1.samba.org/samba/ftp
I attached log file with this error 

 
thank you.

begin 600 samba_make.log.doc
M(R!M86ME#0HO=7-R+VQO8V%L+W-A;6)A+V)I;B(@+410241$25(](B]UW(O
M;]C86POV%M8F$O=F%R+VQO8VMS(B M1$Q)0D1)4CTB+W5SB]L;V-A;]S
M86UB82]L:6(B(U$2$%615])3D-,541%4U]((U$4$%34U=$7U!23T=204T]
M(B]UW(O8FEN+W!AW-W9(@+41334)?4$%34U=$7T9)3$4](B]UW(O;]C
M86POV%M8F$O')I=F%T92]S;6)P87-S=V0B(U$5$17U!!4U-71%]24Q%
M/2(O=7-R+VQO8V%L+W-A;6)A+W!R:79A=4OVUB%SW=D+G1D8B(-CTB
M+W5SB]L;V-A;]S86UB82]B:6XB(U$4$E$1$E2/2(O=7-R+VQO8V%L+W-A
M;6)A+W9AB]L;V-KR(@+41,24)$25(](B]UW(O;]C86POV%M8F$O;EB
M(B M1$A!5D5?24Y#3%5$15-?2 M1%!!4U-71%]04D]'4D%-/2(O=7-R+V)I
M;B]P87-S=V0B(U$4TU7U!!4U-71%]24Q%/2(O=7-R+VQO8V%L+W-A;6)A
M+W!R:79A=4OVUB%SW=D(B M1%1$0E]005-35T1?1DE,13TB+W5SB]L
M;V-A;]S86UB82]PFEV871E+W-M8G!AW-W9YT9(B#0I5VEN9R!,24)3
M(#T@+6QG96X@+6QS96,@(UL;G-L#0I#;VUP:6QI;F@VUB9]S97)V97(N
M8PT*VUB9]S97)V97(N8SH@26X@9G5N8W1I;VX@8]P96Y?V]C:V5TRZ
M#0IS;6)D+W-EG9EBYC.C(V.#H@=V%R;FEN9SH@%SVEN9R!AF@,R!O
M9B!@86-C97!T)R!FF]M(EN8V]M%T:6)L92!P;VEN=5R('1Y4-D-O
M;7!I;EN9R!S;6)D+V9I;5S+F,-D-O;7!I;EN9R!S;6)D+V-H9W!AW-W
M9YC#0I#;VUP:6QI;F@VUB9]C;VYN96-T:6]N+F,-D-O;7!I;EN9R!S
M;6)D+W5T;7 N8PT*0V]MEL:6YG('-M8F0OV5SVEO;BYC#0I#;VUP:6QI
M;F@VUB9]D9G)E92YC#0I#;VUP:6QI;F@VUB9]D:7(N8PT*0V]MEL
M:6YG('-M8F0O%SW=OF0N8PT*0V]MEL:6YG('-M8F0O8V]N;BYC#0I#
M;VUP:6QI;F@VUB9]F:6QE:6\N8PT*0V]MEL:6YG('-M8F0O:7!C+F,-
MD-O;7!I;EN9R!S;6)D+VQA;FUA;BYC#0I#;VUP:6QI;F@VUB9]M86YG
M;4N8PT*0V]MEL:6YG('-M8F0O;6%N9VQE7VAAV@R+F,-D-O;7!I;EN
M9R!S;6)D+VUA;F=L95]H87-H+F,-D-O;7!I;EN9R!S;6)D+VUA;F=L95]M
M87 N8PT*0V]MEL:6YG('-M8F0O;F5G')O=YC#0I#;VUP:6QI;F@VUB
M9]M97-S86=E+F,-D-O;7!I;EN9R!S;6)D+VYT=')A;G,N8PT*0V]MEL
M:6YG('-M8F0OEP97,N8PT*0V]MEL:6YG('-M8F0OF5P;'DN8PT*0V]M
MEL:6YG('-M8F0O=')A;G,R+F,-D-O;7!I;EN9R!S;6)D+W5I9YC#0I#
M;VUP:6QI;F@VUB9]D;W-M;V1E+F,-D-O;7!I;EN9R!S;6)D+V9I;5N
M86UE+F,-D-O;7!I;EN9R!S;6)D+V]P96XN8PT*0V]MEL:6YG('-M8F0O
M8VQOV4N8PT*0V]MEL:6YG('-M8F0O8FQO8VMI;FN8PT*0V]MEL:6YG
M('-M8F0OV5C7V-TYC#0I#;VUP:6QI;F@VUB9]V9G,N8PT*0V]MEL
M:6YG('-M8F0O=F9S+7=R87 N8PT*0V]MEL:6YG('-M8F0OW1A=-A8VAE
M+F,-D-O;7!I;EN9R!S;6)D+W!OVEX7V%C;',N8PT*0V]MEL:6YG(QI
M8B]S7-A8VQS+F,-D-O;7!I;EN9R!S;6)D+W!R;V-EW,N8PT*0V]MEL
M:6YG('-M8F0OV5R=FEC92YC#0I#;VUP:6QI;F@VUB9]EG)OBYC#0I#
M;VUP:6QI;F@')I;G1I;FO')I;G1FW N8PT*0V]MEL:6YG(QI8B]U
M=EL7W-E86-C97-S+F,-D-O;7!I;EN9R!L:6)S;6(O8VQI7W!I5?=71I
M;YC#0I#;VUP:6QI;F@;7-D9G,O;7-D9G,N8PT*0V]MEL:6YG('!AF%M
M+VQO861P87)M+F,-D-O;7!I;EN9R!P87)A;2]P87)A;7,N8PT*0V]MEL
M:6YG(QI8G-M8B]C;EE;G1G96XN8PT*0V]MEL:6YG(QI8G-M8B]C;EC
M;VYN96-T+F,-D-O;7!I;EN9R!L:6)S;6(O8VQI9FEL92YC#0I#;VUP:6QI
M;F@;EBVUB+V-L:7)AYC#0I#;VUP:6QI;F@;EBVUB+V-L:65RF]R
M+F,-D-O;7!I;EN9R!L:6)S;6(O8VQI;65SV%G92YC#0I#;VUP:6QI;F@
M;EBVUB+V-L:7)E861WFET92YC#0I#;VUP:6QI;F@;EBVUB+V-L:6QI
MW0N8PT*0V]MEL:6YG(QI8G-M8B]C;EPFEN=YC#0I#;VUP:6QI;F@
M;EBVUB+V-L:71R86YS+F,-D-O;7!I;EN9R!L:6)S;6(O8VQIV5C95S
M8RYC#0I#;VUP:6QI;F@;EBVUB+V-L:61GF%M+F,-FQI8G-M8B]C;ED
M9W)A;2YC.B!);B!F=6YC=EO;B!@8VQI7V=E=%]B86-K=7!?;ES=Z#0IL
M:6)S;6(O8VQI9=R86TN8SHR,3 Z('=AFYI;FZ('!AW-I;F@87)G(#,@
M;V8@8=E='-O8VMN86UE)R!FF]M(EN8V]M%T:6)L92!P;VEN=5R('1Y
M4-D-O;7!I;EN9R!L:6)S;6(O;F%M97%U97)Y+F,-D-O;7!I;EN9R!L
M:6)S;6(O;FUB;EB+F,-D-O;7!I;EN9R!L:6)S;6(O8VQIW1R+F,-D-O
M;7!I;EN9R!L:6)S;6(O;G1EG(N8PT*0V]MEL:6YG(QI8G-M8B]S;6)D
M97,N8PT*0V]MEL:6YG(QI8G-M8B]S;6)E;F-R7!T+F,-D-O;7!I;EN
M9R!L:6)S;6(OVUB97)R+F,-D-O;7!I;EN9R!L:6)S;6(O8W)E95N=EA
M;',N8PT*0V]MEL:6YG(QI8G-M8B]P=V1?8V%C:4N8PT*0V]MEL:6YG
M(QI8G-M8B]C;EOQO8VLN8PT*0V]MEL:6YG(QI8G-M8B]EG)OFUA
MYC#0I#;VUP:6QI;F@;EBVUB+V1OV5RBYC#0I#;VUP:6QI;F@;EB
MVUB+W!AW-C:%N9V4N8PT*0V]MEL:6YG(QI8G-M8B]U;F5X5C=5D
M+F,-D-O;7!I;EN9R!R-?%RV4O%RV5?')S+F,-D-O;7!I;EN
M9R!R-?%RV4O%RV5?V5C+F,-D-O;7!I;EN9R!R-?%RV4O
M%RV5?;6ES8RYC#0I#;VUP:6QI;F@;EBVUB+VYA;65C86-H92YC#0I#
M;VUP:6QI;F@=6)I7@O=6)I7T)I;E1R964N8PT*0V]MEL:6YG('5B:7%X
M+W5B:5]#86-H92YC#0I#;VUP:6QI;F@=6)I7@O=6)I7U-P;%Y5')E92YC
M#0I#;VUP:6QI;F@=6)I7@O=6)I7V1,:6YK3ES=YC#0I#;VUP:6QI;F@
M=6)I7@O=6)I7W-,:6YK3ES=YC#0I#;VUP:6QI;F@=6)I7@O95B=6=P
M87)S92YC#0I#;VUP:6QI;F@G!C7W-EG9EB]SG9?;'-A+F,-D-O;7!I
M;EN9R!R-?V5R=F5R+W-R=E]LV%?;G0N8PT*0V]MEL:6YG(')P8U]S
M97)V97(OW)V7VQS85]H;F0N8PT*0V]MEL:6YG(')P8U]S97)V97(OW)V
M7VYE=QO9RYC#0I#;VUP:6QI;F@G!C7W-EG9EB]SG9?;F5T;]G7VYT
M+F,-D-O;7!I;EN9R!R-?V5R=F5R+W-R=E]P:7!E7VAN9YC#0I#;VUP
M:6QI;F@G!C7W-EG9EB]SG9?F5G+F,-D-O;7!I;EN9R!R-?V5R
M=F5R+W-R=E]R96=?;G0N8PT*0V]MEL:6YG(')P8U]S97)V97(OW)V7W-A
M;7(N8PT*0V]MEL:6YG(')P8U]S97)V97(OW)V7W-A;7)?;G0N8PT*0V]M
MEL:6YG(')P8U]S97)V97(OW)V7W-R=G-V8RYC#0I#;VUP:6QI;F@G!C
M7W-EG9EB]SG9?W)VW9C7VYT+F,-D-O;7!I;EN9R!R-?V5R=F5R
M+W-R=E]U=EL+F,-D-O;7!I;EN9R!R-?V5R=F5R+W-R=E]W:W-S=F,N
M8PT*0V]MEL:6YG(')P8U]S97)V97(OW)V7W=KW-V8U]N=YC#0I#;VUP
M:6QI;F@G!C7W-EG9EB]SG9?EP92YC#0I#;VUP:6QI;F@G!C7W-E
MG9EB]SG9?99S+F,-D-O;7!I;EN9R!R-?V5R=F5R+W-R=E]D9G-?
M;G0N8PT*0V]MEL:6YG(')P8U]S97)V97(OW)V7W-P;V]LW,N8PT*0V]M
MEL:6YG(')P8U]S97)V97(OW)V7W-P;V]LW-?;G0N8PT*0V]MEL:6YG

Re: [Samba] what GCC and GAS version needed for samba 2.2.5

2002-10-28 Thread Florian Rauh
Am Dienstag, 29. Oktober 2002 03:56 schrieb Martin Dube:
 Can anyone tell me what version of GCC and GAS are needed to compile samba
 v2.2.5 on a linux machine?

You should use the C-Compiler which is installed on your distribution if it is 
not older then 2.95.2 or 3.2.

greetings

Florian Rauh

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] NT Administrator account changes permissions when logging onto samba server

2002-10-28 Thread Frank Matthieß
On Mon, Oct 28, 2002 at 03:46:53PM -0800, Michael J. Luevane wrote:
 Hello, all
 
 I have a problem with my administrator accounts on WinNT with Samba.
 
 When I log in locally as the Administrator, it works as expected - I *am*
 the administrator for the machine.
 
 When I log into the domain as Administrator, it works as expected - I log in
 as root.

Is the windows domain user root in your local Administrator group?

-- 
Frank Matthieß[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] samba compiling error

2002-10-28 Thread Florian Rauh
Am Dienstag, 29. Oktober 2002 06:58 schrieb Lora:
 Hello,

 I have error on compiling time
 I tried on HP-UX 11.00 system with gcc version 3.1 to compile samba source
 Samba latest version source was dowloaded from www.us1.samba.org/samba/ftp
 I attached log file with this error


 thank you.

 begin 600 samba_make.log.doc
 M(R!M86ME#0HO=7-R+VQO8V%L+W-A;6)A+V)I;B(@+410241$25(](B]UW(O
 M;]C86POV%M8F$O=F%R+VQO8VMS(B M1$Q)0D1)4CTB+W5SB]L;V-A;]S
 M86UB82]L:6(B(U$2$%615])3D-,541%4U]((U$4$%34U=$7U!23T=204T]
 M(B]UW(O8FEN+W!AW-W9(@+41334)?4$%34U=$7T9)3$4](B]UW(O;]C
 M86POV%M8F$O')I=F%T92]S;6)P87-S=V0B(U$5$17U!!4U-71%]24Q%
 M/2(O=7-R+VQO8V%L+W-A;6)A+W!R:79A=4OVUB%SW=D+G1D8B(-CTB
 M+W5SB]L;V-A;]S86UB82]B:6XB(U$4$E$1$E2/2(O=7-R+VQO8V%L+W-A
 M;6)A+W9AB]L;V-KR(@+41,24)$25(](B]UW(O;]C86POV%M8F$O;EB
 M(B M1$A!5D5?24Y#3%5$15-?2 M1%!!4U-71%]04D]'4D%-/2(O=7-R+V)I
 M;B]P87-S=V0B(U$4TU7U!!4U-71%]24Q%/2(O=7-R+VQO8V%L+W-A;6)A
 M+W!R:79A=4OVUB%SW=D(B M1%1$0E]005-35T1?1DE,13TB+W5SB]L
 M;V-A;]S86UB82]PFEV871E+W-M8G!AW-W9YT9(B#0I5VEN9R!,24)3
 M(#T@+6QG96X@+6QS96,@(UL;G-L#0I#;VUP:6QI;F@VUB9]S97)V97(N
 M8PT*VUB9]S97)V97(N8SH@26X@9G5N8W1I;VX@8]P96Y?V]C:V5TRZ
 M#0IS;6)D+W-EG9EBYC.C(V.#H@=V%R;FEN9SH@%SVEN9R!AF@,R!O
 M9B!@86-C97!T)R!FF]M(EN8V]M%T:6)L92!P;VEN=5R('1Y4-D-O
 M;7!I;EN9R!S;6)D+V9I;5S+F,-D-O;7!I;EN9R!S;6)D+V-H9W!AW-W
 M9YC#0I#;VUP:6QI;F@VUB9]C;VYN96-T:6]N+F,-D-O;7!I;EN9R!S
 M;6)D+W5T;7 N8PT*0V]MEL:6YG('-M8F0OV5SVEO;BYC#0I#;VUP:6QI
 M;F@VUB9]D9G)E92YC#0I#;VUP:6QI;F@VUB9]D:7(N8PT*0V]MEL
 M:6YG('-M8F0O%SW=OF0N8PT*0V]MEL:6YG('-M8F0O8V]N;BYC#0I#
 M;VUP:6QI;F@VUB9]F:6QE:6\N8PT*0V]MEL:6YG('-M8F0O:7!C+F,-
 MD-O;7!I;EN9R!S;6)D+VQA;FUA;BYC#0I#;VUP:6QI;F@VUB9]M86YG
 M;4N8PT*0V]MEL:6YG('-M8F0O;6%N9VQE7VAAV@R+F,-D-O;7!I;EN
 M9R!S;6)D+VUA;F=L95]H87-H+F,-D-O;7!I;EN9R!S;6)D+VUA;F=L95]M
 M87 N8PT*0V]MEL:6YG('-M8F0O;F5G')O=YC#0I#;VUP:6QI;F@VUB
 M9]M97-S86=E+F,-D-O;7!I;EN9R!S;6)D+VYT=')A;G,N8PT*0V]MEL
 M:6YG('-M8F0OEP97,N8PT*0V]MEL:6YG('-M8F0OF5P;'DN8PT*0V]M
 MEL:6YG('-M8F0O=')A;G,R+F,-D-O;7!I;EN9R!S;6)D+W5I9YC#0I#
 M;VUP:6QI;F@VUB9]D;W-M;V1E+F,-D-O;7!I;EN9R!S;6)D+V9I;5N
 M86UE+F,-D-O;7!I;EN9R!S;6)D+V]P96XN8PT*0V]MEL:6YG('-M8F0O
 M8VQOV4N8PT*0V]MEL:6YG('-M8F0O8FQO8VMI;FN8PT*0V]MEL:6YG
 M('-M8F0OV5C7V-TYC#0I#;VUP:6QI;F@VUB9]V9G,N8PT*0V]MEL
 M:6YG('-M8F0O=F9S+7=R87 N8PT*0V]MEL:6YG('-M8F0OW1A=-A8VAE
 M+F,-D-O;7!I;EN9R!S;6)D+W!OVEX7V%C;',N8PT*0V]MEL:6YG(QI
 M8B]S7-A8VQS+F,-D-O;7!I;EN9R!S;6)D+W!R;V-EW,N8PT*0V]MEL
 M:6YG('-M8F0OV5R=FEC92YC#0I#;VUP:6QI;F@VUB9]EG)OBYC#0I#
 M;VUP:6QI;F@')I;G1I;FO')I;G1FW N8PT*0V]MEL:6YG(QI8B]U
 M=EL7W-E86-C97-S+F,-D-O;7!I;EN9R!L:6)S;6(O8VQI7W!I5?=71I
 M;YC#0I#;VUP:6QI;F@;7-D9G,O;7-D9G,N8PT*0V]MEL:6YG('!AF%M
 M+VQO861P87)M+F,-D-O;7!I;EN9R!P87)A;2]P87)A;7,N8PT*0V]MEL
 M:6YG(QI8G-M8B]C;EE;G1G96XN8PT*0V]MEL:6YG(QI8G-M8B]C;EC
 M;VYN96-T+F,-D-O;7!I;EN9R!L:6)S;6(O8VQI9FEL92YC#0I#;VUP:6QI
 M;F@;EBVUB+V-L:7)AYC#0I#;VUP:6QI;F@;EBVUB+V-L:65RF]R
 M+F,-D-O;7!I;EN9R!L:6)S;6(O8VQI;65SV%G92YC#0I#;VUP:6QI;F@
 M;EBVUB+V-L:7)E861WFET92YC#0I#;VUP:6QI;F@;EBVUB+V-L:6QI
 MW0N8PT*0V]MEL:6YG(QI8G-M8B]C;EPFEN=YC#0I#;VUP:6QI;F@
 M;EBVUB+V-L:71R86YS+F,-D-O;7!I;EN9R!L:6)S;6(O8VQIV5C95S
 M8RYC#0I#;VUP:6QI;F@;EBVUB+V-L:61GF%M+F,-FQI8G-M8B]C;ED
 M9W)A;2YC.B!);B!F=6YC=EO;B!@8VQI7V=E=%]B86-K=7!?;ES=Z#0IL
 M:6)S;6(O8VQI9=R86TN8SHR,3 Z('=AFYI;FZ('!AW-I;F@87)G(#,@
 M;V8@8=E='-O8VMN86UE)R!FF]M(EN8V]M%T:6)L92!P;VEN=5R('1Y
 M4-D-O;7!I;EN9R!L:6)S;6(O;F%M97%U97)Y+F,-D-O;7!I;EN9R!L
 M:6)S;6(O;FUB;EB+F,-D-O;7!I;EN9R!L:6)S;6(O8VQIW1R+F,-D-O
 M;7!I;EN9R!L:6)S;6(O;G1EG(N8PT*0V]MEL:6YG(QI8G-M8B]S;6)D
 M97,N8PT*0V]MEL:6YG(QI8G-M8B]S;6)E;F-R7!T+F,-D-O;7!I;EN
 M9R!L:6)S;6(OVUB97)R+F,-D-O;7!I;EN9R!L:6)S;6(O8W)E95N=EA
 M;',N8PT*0V]MEL:6YG(QI8G-M8B]P=V1?8V%C:4N8PT*0V]MEL:6YG
 M(QI8G-M8B]C;EOQO8VLN8PT*0V]MEL:6YG(QI8G-M8B]EG)OFUA
 MYC#0I#;VUP:6QI;F@;EBVUB+V1OV5RBYC#0I#;VUP:6QI;F@;EB
 MVUB+W!AW-C:%N9V4N8PT*0V]MEL:6YG(QI8G-M8B]U;F5X5C=5D
 M+F,-D-O;7!I;EN9R!R-?%RV4O%RV5?')S+F,-D-O;7!I;EN
 M9R!R-?%RV4O%RV5?V5C+F,-D-O;7!I;EN9R!R-?%RV4O
 M%RV5?;6ES8RYC#0I#;VUP:6QI;F@;EBVUB+VYA;65C86-H92YC#0I#
 M;VUP:6QI;F@=6)I7@O=6)I7T)I;E1R964N8PT*0V]MEL:6YG('5B:7%X
 M+W5B:5]#86-H92YC#0I#;VUP:6QI;F@=6)I7@O=6)I7U-P;%Y5')E92YC
 M#0I#;VUP:6QI;F@=6)I7@O=6)I7V1,:6YK3ES=YC#0I#;VUP:6QI;F@
 M=6)I7@O=6)I7W-,:6YK3ES=YC#0I#;VUP:6QI;F@=6)I7@O95B=6=P
 M87)S92YC#0I#;VUP:6QI;F@G!C7W-EG9EB]SG9?;'-A+F,-D-O;7!I
 M;EN9R!R-?V5R=F5R+W-R=E]LV%?;G0N8PT*0V]MEL:6YG(')P8U]S
 M97)V97(OW)V7VQS85]H;F0N8PT*0V]MEL:6YG(')P8U]S97)V97(OW)V
 M7VYE=QO9RYC#0I#;VUP:6QI;F@G!C7W-EG9EB]SG9?;F5T;]G7VYT
 M+F,-D-O;7!I;EN9R!R-?V5R=F5R+W-R=E]P:7!E7VAN9YC#0I#;VUP
 M:6QI;F@G!C7W-EG9EB]SG9?F5G+F,-D-O;7!I;EN9R!R-?V5R
 M=F5R+W-R=E]R96=?;G0N8PT*0V]MEL:6YG(')P8U]S97)V97(OW)V7W-A
 M;7(N8PT*0V]MEL:6YG(')P8U]S97)V97(OW)V7W-A;7)?;G0N8PT*0V]M
 MEL:6YG(')P8U]S97)V97(OW)V7W-R=G-V8RYC#0I#;VUP:6QI;F@G!C
 M7W-EG9EB]SG9?W)VW9C7VYT+F,-D-O;7!I;EN9R!R-?V5R=F5R
 M+W-R=E]U=EL+F,-D-O;7!I;EN9R!R-?V5R=F5R+W-R=E]W:W-S=F,N
 M8PT*0V]MEL:6YG(')P8U]S97)V97(OW)V7W=KW-V8U]N=YC#0I#;VUP
 M:6QI;F@G!C7W-EG9EB]SG9?EP92YC#0I#;VUP:6QI;F@G!C7W-E
 

Re: [Samba] Is 2.2.6 Final?

2002-10-28 Thread Markus Schabel
Andrew Bartlett wrote:


Markus Schabel wrote:
 

John H Terpstra wrote:

   

On Mon, 28 Oct 2002, William Jojo wrote:

 

Just tought I'd follow up and see if 2.2.6 is truly the last release of
samba_2_2 CVS branch.


   

Yes, 2.2.6 is the latest stable release.

 

So there will never be a stable samba again? ;)
   


:-)


great, at least one realized that this was a joke ;)


We hope that this will be our
last update. All samba-team resources are now focussing on getting 3.0.0
readt for release. Right now 3.0.0 is still changing significantly and we
would not recommend it's use in a production environment.

 

We've got six systems running it with no visible issues.


   

If it is not broken then why fix it?

 

the last version I had problems with was 2.2.3a (on a SuSE system) and
2.2.4 (there were problems with LDAP, all solved since 2.2.5)

   

I'm currently testing CVS from Sunday's pull of 3.0...is this the
direction I should be heading?


   

Yes. But do your home work. Test, test, test, and give us feedback.

 

I'm currently working on a PDC for about 300 LDAP-based users, I guess
with LDAP there is no problem when migrating to 3.0? Probably I'll run
the actual CVS parallel
   


Depending on how you also use LDAP, there are some good reasons to move
to 3.0.  In HEAD, pdb_ldap now has connection caching, and does not
modify unchanged attributes (these benefits provided by metze, who has
the significant advantage of using samba on a large and complex ldap
infrastructure). 

I'm not sure if this is helpful when replicating the complete Directory 
to the Samba-Server, but at least it sounds good.

We hope to move this stuff into the next 3.0 alpha.

Samba 3.0 also adds 'ldap passwd sync', to help keep the LDAP and SMB
passwords in sync.


I guess that's really helpful for us.

Do the computer accounts still need to be full posix users? It would 
simplify things a bit if not.

regards
Markus


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: strange locks

2002-10-28 Thread jra
On Tue, Oct 29, 2002 at 06:17:20PM +1100, Matthew Hannigan wrote:

 so I could see some locks from the unix level.
 It worked sorta, I see the locks for big files
 (but not the locks I was expecting), but for little
 files it shows nothing: 
 
 # ./lock_list /opt/testsambashare/mattest.doc
 # ./lock_list /opt/testsambashare/contents.doc
 0 22086 W 21474835391
 0 22086 W 21474835591
 0 22086 W 21474835991
 (the output is l_sysid, l_pid, l_start, l_len of struct flock)
 
 (lock_list.c source given below)
 
 The only difference I can see is that the contents.doc is
 much bigger:
 
 # ls -l /opt/testsambashare
 total 5210
 -rwxrw-r--   1 matt other1460736 Oct 29 15:24 contents.doc
 -rw-r--r--   1 matt other1176738 Oct 29 15:23 contents.txt
 -rwxrw-r--   1 matt other   2168 Oct 29 16:19 mattest.doc
 -rwxrw-r--   1 matt other 54 Oct 29 16:52 ~$attest.doc
 -rwxrw-r--   1 matt other 54 Oct 29 16:47 ~$ntents.doc
 
 
 Why is there 3 1 byte locks at some position
 way beyond the end of the file?

The locks you see here are used by MS Office as semaphores.
No one really knows why (well the MS Office programmers do,
but they're not telling :-).

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] RE: Running smb without nmb? (Linux Suse 8.1 feature)

2002-10-28 Thread Boyce, Nick
[sorry - bit of a belated reply - I have a bit of a backlog to read]

On 23rd.Oct.2002, Linda Walsh asked :

 I recently upgraded my Linux distro to SuSE 8.1 which
 came w/samba 2.2.5.
 
 A feature of the upgrade was that it 'split' the startup
 script for samba from 1 script for _smb_  _nmb_ to 2 scripts.
 
 So how/why would splitting these scripts be a good thing? 

I can think of one good reason why a sysadmin might want to *re*start nmb
without restarting smb - loss of WINS registration.

For us, that happens periodically to the registration of our Samba boxen
with our corporate Windows WINS servers, and  I _think_ the underlying cause
is that the WINS servers get rebooted.  The first we notice is that calls
start coming in from people who can no longer map network drives to the
Sambas, or can no longer contact development webservers on the same boxes by
NetBIOS name alone.  A simple restart of nmb solves the problem, and
restarting smb at the same time would be both unnecessary and undesirable.

Nick Boyce
EDS Southwest Solution Centre, Bristol, UK
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Re: OpLock+flat DB corruption (Was: How Samba let us down)

2002-10-28 Thread Chris de Vidal
--- [EMAIL PROTECTED] wrote:
 On Thu, Oct 24, 2002 at 04:43:53AM -0700, Chris de
 Vidal wrote:
 
  OpLocks were indeed causing corruption; we only
 turned
  them off, made no other changes, and have no more
  corruption, as I reported yesterday.  Wouldn't
 that be
  a priority 1, drop everything bug?  Other
 experience
  was confirmed by doing a Google, by 2 Samba
 authors,
  and by the results of our one simple change.
  
  If you'd like, I can submit an official bug
 report.
 
 Is it completely reproducible ? Problems cuased by
 clients
 not responding to oplock breaks are notoriously
 dependent
 on network hardware and client issues (network
 drivers etc).

Sorry for the late reply; I was out all weekend.

We can't reproduce the problem because we don't have
another Oce' and Opus setup ($$) to test it on, but in
essence:
No corruption on Netware, no oplocks.
Corruption on Samba with oplocks.
No corruption on Samba, no oplocks.

Yes, turning off all oplocks was the only change made.

2 Samba authors and a Google search confirmed this
kind of corruption.

 We drive the client differently than a Windows TCP
 stack,
 and remember Microsoft don't test with anything than
 their own stack.
 
 Problems like this come under the oplock break
 problems, not generic corruption.

Still, it's corruption, and the user ought to be made
aware.  I would like (at least) to submit a
documentation patch.  It might have saved us grief.

/dev/idal

__
Do you Yahoo!?
Y! Web Hosting - Let the expert host your web site
http://webhosting.yahoo.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] strange locks

2002-10-28 Thread Matthew Hannigan


Hi,
I added these lines to smb.conf:

kernel op locks = false
op locks = false
strict locking = true

so I could see some locks from the unix level.
It worked sorta, I see the locks for big files
(but not the locks I was expecting), but for little
files it shows nothing: 

# ./lock_list /opt/testsambashare/mattest.doc
# ./lock_list /opt/testsambashare/contents.doc
0 22086 W 21474835391
0 22086 W 21474835591
0 22086 W 21474835991
(the output is l_sysid, l_pid, l_start, l_len of struct flock)

(lock_list.c source given below)

The only difference I can see is that the contents.doc is
much bigger:

# ls -l /opt/testsambashare
total 5210
-rwxrw-r--   1 matt other1460736 Oct 29 15:24 contents.doc
-rw-r--r--   1 matt other1176738 Oct 29 15:23 contents.txt
-rwxrw-r--   1 matt other   2168 Oct 29 16:19 mattest.doc
-rwxrw-r--   1 matt other 54 Oct 29 16:52 ~$attest.doc
-rwxrw-r--   1 matt other 54 Oct 29 16:47 ~$ntents.doc


Why is there 3 1 byte locks at some position
way beyond the end of the file?

This is Samba 2.2.6 on Solaris 2.6.

Regards,
Matt




Here's the source.  NOTE: you will have to change it for
Linux as Linux doesn't have l_sysid in struct flock.




#include stdlib.h
#include stdio.h
#include sys/types.h
#include unistd.h
#include fcntl.h

int
main (int argc, char **argv)
{
char c;
int fd;
int debug = 1;

struct flock lck;

lck.l_whence = 0;
lck.l_start = 0L;
lck.l_len = 0L;

if (-1 == (fd = open(argv[1], O_RDONLY)))
{
perror(argv[1]);
exit(1);
}
do {
lck.l_type = F_WRLCK;
if(-1 == fcntl(fd, F_GETLK, lck))
{
perror(fcntl getlk);
exit(1);
};
if (lck.l_type != F_UNLCK) {
printf(%d %d %c %8ld %8ld\n, lck.l_sysid, lck.l_pid,
(lck.l_type == F_WRLCK) ? 'W' : 'R', lck.l_start, 
lck.l_len);
/* If this lock goes to the end of the address space, no
* need to look further, so break out. */
if (lck.l_len == 0) {
break;
}
else {
/* else, look for new lock after the one just found. */
lck.l_start += lck.l_len;
lck.l_len = 0;
/* printf(looking at start %d len %d\n, lck.l_start, 
lck.l_len); */
}
}
} while (lck.l_type != F_UNLCK);
}


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: Winbind doesnt enumerate more than one group from an AD domain

2002-10-28 Thread Gareth Davies
Yeh it's not local group as in local machine domain groups, it's local as in
AD groups..

There are 3 types. Local, Global and Universal..

The most basic type of group suitable for networking is the global group,
used to control access to resources that exist anywhere on the network. The
primary limitation to global groups is that they can only contain members
from a single domain. You'd use a global group for users within a single
domain that need access to a common group of files or directories.

Domain local groups are essentially the opposite of global groups. Where a
global group is limited to having members from a single domain, a domain
local group can have members from every domain in your network. However,
unlike global groups, domain local groups can only be applied to resources
within a single domain, hence the name domain local group.

Universal groups, as the name implies, can contain members from any domain
on the network and can control access to resources existing in any of the
network's domains.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/ad/windows2000/maintain/adusers.asp

 Shaolin - IT Systems
 WB Ltd.
.: http://www.security-forums.com :.


- Original Message -
From: Simo Sorce [EMAIL PROTECTED]
To: Jean Francois Micouleau [EMAIL PROTECTED]
Cc: Gerald (Jerry) Carter [EMAIL PROTECTED]; Gareth Davies
[EMAIL PROTECTED]; James Braid [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Friday, October 25, 2002 7:26 PM
Subject: Re: Winbind doesnt enumerate more than one group from an AD domain






Re: multiple PDCs on one machine?

2002-10-28 Thread Roland Bauerschmidt
Don Hayward wrote:
 No, it doesn't -- it returns null.  I also tried a line of
 perl that uses getpwnam and it failed in the same way.

So how does /etc/nsswitch.conf look like (in the chroot)?

-- 
Roland Bauerschmidt



Re: multiple PDCs on one machine?

2002-10-28 Thread Don Hayward
On Mon, 28 Oct 2002, Roland Bauerschmidt wrote:

 So how does /etc/nsswitch.conf look like (in the chroot)?

 --
The etc/nsswitch.conf in the chroot is:

passwd: compat
group:  compat
shadow: compat

hosts:  files dns
networks:   files

protocols:  db files
services:   db files
ethers: db files
rpc:db files

netgroup:   nis

I also tried it with:

passwd: files nis

and:

passwd: files

with the same result.

Thanks.

Don Hayward [EMAIL PROTECTED]
Mote Marine Laboratory  Office: 941.388.4441  Cell: 941.302.4982
1600 Ken Thompson Parkway   Fax: 941.388.4312
Sarasota, FL 34236  See: http://www.mote.org
Independent, non-profit, marine and estuarine research and education facility.
For PGP public key do: http://www.mote.org/~don/donpgp.asc
use DISCLAIMER; # We run Linux,Apache/mod_perl/mod_ssl/eperl,Mysql,DBI/DBD
Taxes feed the starving and clothe the naked.




Re: multiple PDCs on one machine?

2002-10-28 Thread Don Hayward
On Mon, 28 Oct 2002, Roland Bauerschmidt wrote:


 So how does /etc/nsswitch.conf look like (in the chroot)?


I was missing the libnss_*s to make it work.  Thanks again.

Don Hayward [EMAIL PROTECTED]
Mote Marine Laboratory  Office: 941.388.4441  Cell: 941.302.4982
1600 Ken Thompson Parkway   Fax: 941.388.4312
Sarasota, FL 34236  See: http://www.mote.org
Independent, non-profit, marine and estuarine research and education facility.
For PGP public key do: http://www.mote.org/~don/donpgp.asc
use DISCLAIMER; # We run Debian Linux
Taxes feed the starving and clothe the naked.




RE: Winbind doesnt enumerate more than one group from an AD domain

2002-10-28 Thread James Braid
 I had the same problem aswell..
 
 I found it was due to the fact the groups weren't 'Global' groups only
 'Local' groups...
 
 Apparently they need to be Global or Universal to be shown by Winbind.

I have tried using Global and Universal groups on the AD server and
neither type seems to work. Local groups don't show up in wbinfo at all,
and Global/Universal groups don't get enumerated by wbinfo -r $user,
EXCEPT for the Domain Users group.

Any ideas?

Cheers, James



Re: Fixed: OpLocks caused the corruptions/slowness (Was: How Samba let us down)

2002-10-28 Thread Chris de Vidal
--- Neil Hoggarth [EMAIL PROTECTED]
wrote:
 On Thu, 24 Oct 2002, Chris de Vidal wrote:
 
  I'd be happy to let the group know.  I'm not
 positive
  we'll reenable anything but kernel oplocks,
 though.
  We have work to do.
 
 The kernel oplocks parameter affects how Unix
 processes accessing the
 file interact with SMB oplocks. Enabling kernel
 oplocks on a share which
 doesn't have SMB oplocks turned on shouldn't make
 any difference, I'd
 have thought.
 
 If I understand your description correctly you don't
 have Unix processes
 interacting with the stored files; your Linux box is
 acting purely as an
 SMB file server for Windows clients? All the file
 accesses come in from
 the net, via Samba?

Yes.

  In this case you probably want
 to leave kernel
 oplocks off ('cos they buy you nothing,
 functionally, and there have
 been suggestions that Linux kernel bugs causing
 problems with them). The
 interesting test is whether either of:
 
   oplocks = yes
   level2 oplocks = no
 
 or
 
   oplocks = yes
   level2 oplocks = yes
 
 work.
 
 If your corruption returns *and you can show that
 your network and
 clients are working properly* (ie. no oplock break
 messages are getting
 lost or being ignored by client machines - which
 probably requires
 Ethernet packet captures) then it's probably Red
 Alert time.

I'll keep these guidelines in mind.

 Also: don't think that if you establish the
 existence of a priority 1
 bug then it is all over - if you're experiencing a
 bug that the team
 can't reproduce themselves then it doesn't mean that
 there isn't a bug,
 but it does mean that they're going to need a lot of
 help characterizing
 and finding it.

The team probably would have to install Elixir's Opus
and process large flat db files (Fox Pro, I think)
with multiple processes on multiple servers... in
other words, it probably isn't going to happen.  The
corruption will remain possible with other users.

On the other hand, several people have confirmed it to
be a problem with multiple clients accessing Microsoft
Access, which is a relatively cheap test.

Anyway, for us it is working fine, so I really have
little motivation for fixing the problem other than to
give back to the contributions given.  We are probably
going to run the checks as you mentioned above,
probably going to submit a bug report if we find
something, and probably going to submit a
documentation patch, but can't do much more (can't
spend much more time on it.. life goes on here).

/dev/idal

__
Do you Yahoo!?
Y! Web Hosting - Let the expert host your web site
http://webhosting.yahoo.com/



Re: Fixed: OpLocks caused the corruptions/slowness (Was: How Samba let us down)

2002-10-28 Thread jra
On Mon, Oct 28, 2002 at 02:36:00PM -0800, Chris de Vidal wrote:

 The team probably would have to install Elixir's Opus
 and process large flat db files (Fox Pro, I think)
 with multiple processes on multiple servers... in
 other words, it probably isn't going to happen.  The
 corruption will remain possible with other users.

The oplock code in Samba has been *heavily* tested. 
The one thing we cannot fix is clients ignoring oplock
break requests. If you can show a problem occurring
when clients are *not* ignoring oplock break requests then
it's a Samba logic bug and we'll jump on it asap.

Clients commonly ignore oplock breaks because of network
problems (borderline hubs etc.). Many people are suffering
from network hardware that performs adequately in light
use situations and fails under heavy load. I myself have
ended up junking hubs with this problem.

 On the other hand, several people have confirmed it to
 be a problem with multiple clients accessing Microsoft
 Access, which is a relatively cheap test.

Yes, that's why we test it :-). Many people who have
problems with multi-user access db's are running into
access bugs. 

Jeremy.



Re: Fixed: OpLocks caused the corruptions/slowness (Was: How Samba let us down)

2002-10-28 Thread Chris de Vidal
--- [EMAIL PROTECTED] wrote:
 The oplock code in Samba has been *heavily* tested. 
 The one thing we cannot fix is clients ignoring
 oplock
 break requests. If you can show a problem occurring
 when clients are *not* ignoring oplock break
 requests then
 it's a Samba logic bug and we'll jump on it asap.

(Fog lifting) OK, you have a great point here, which
you made before, but I didn't see.  Neil gave some
guidelines for seeing if it is the client doing so,
and I'll submit a bug report if I find it to be so (if
we even get a change to test it!).  I have a good
feeling that we won't find it to be a Samba problem.

Still, wouldn't you welcome documentation advising
people of potential corruption?  I think we both agree
that there is no guarantee that everyone's network is
100% on and the danger of corruption appears to be
greater when there are large files read and written to
a record at a time (namely, flat databases).

/dev/idal

__
Do you Yahoo!?
Y! Web Hosting - Let the expert host your web site
http://webhosting.yahoo.com/



RPC message service?

2002-10-28 Thread Christopher R. Hertel
A curious article:

  http://www.wired.com/news/technology/0,1282,55795,00.html

It says that the Messenger Service Spammers are using port 135, which
means that they're not using regular WinPOPUP stuff (the 03 names on
port 139).  I do, in fact, see connect attempts to port 135 in my home
firewall logs.  (I think they should be called slimewalls.)

I'm guessing that they're doing something RPC-related that has, basically,
the same effect.  I'm just curious to know what it is...

Chris -)-

-- 
Samba Team -- http://www.samba.org/ -)-   Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/   -)-   ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/ -)-   [EMAIL PROTECTED]
OnLineBook -- http://ubiqx.org/cifs/-)-   [EMAIL PROTECTED]



Re: Win2K as domain member to a Samba-head PDC decides it can't loadyour profiles?

2002-10-28 Thread Nick Schuetz
Yes I have, this morning as a matter a fact. I don't know what caused it 
(maybe daylight savings). I fixed it by stopping then starting Samba 
(not restarting) the first time it happend. The second time it happened 
starting and stopping (not restarting) didn't work so I  unplugged 
(cutting off the power supply to) the client machine for 5 + seconds 
clearing memory and booted up into my profile just fine.

btw this happend on
RH 2.4.18-10smp kernel
samba 2.2.3a
Windows XP Serv Pack 1/2000 Serv Pack 3 clients.

Nick

Richard Sharpe wrote:

Hi,

Has anyone experienced this? I will investigate that tonight.

Regards
-
Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], 
[EMAIL PROTECTED], http://www.richardsharpe.com
 






Re: Win2K as domain member to a Samba-head PDC decides it can't loadyour profiles?

2002-10-28 Thread Richard Sharpe
On Tue, 29 Oct 2002, Nick Schuetz wrote:

 Yes I have, this morning as a matter a fact. I don't know what caused it 
 (maybe daylight savings). I fixed it by stopping then starting Samba 
 (not restarting) the first time it happend. The second time it happened 
 starting and stopping (not restarting) didn't work so I  unplugged 
 (cutting off the power supply to) the client machine for 5 + seconds 
 clearing memory and booted up into my profile just fine.

Hmmm, this is interesting. If it happens again, it would be interesting if 
you can grab a trace of the packets exchanged when you try to log on.

I solved my problem by deleting my profiles up on the server, and then 
logging off, which wrote a new (old) set of profiles, and the next time I 
logged back on, everything seemed OK.

I suspect that my problem was due to the SID of my Samba server changing 
and not matching the SID stored in NTUSER.DAT, which controls access.

Wish I had a tool that could read registry files under UNIX.

Regards
-
Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], 
[EMAIL PROTECTED], http://www.richardsharpe.com




Re: Win2K as domain member to a Samba-head PDC decides it can't loadyour profiles?

2002-10-28 Thread Nick
I had no choice but to cold reset the computer once it started to hang. 
I would type in my user name and password, the loading your profile 
window would pop up and just hang forever (at least it seemed like 
forever). If the SID was confilicting I would not have even got to the 
point of loading the profile; would I have? Does Samba handle such 
exceptions?

Nick

Richard Sharpe wrote:

On Tue, 29 Oct 2002, Nick Schuetz wrote:

 

Yes I have, this morning as a matter a fact. I don't know what caused it 
(maybe daylight savings). I fixed it by stopping then starting Samba 
(not restarting) the first time it happend. The second time it happened 
starting and stopping (not restarting) didn't work so I  unplugged 
(cutting off the power supply to) the client machine for 5 + seconds 
clearing memory and booted up into my profile just fine.
   


Hmmm, this is interesting. If it happens again, it would be interesting if 
you can grab a trace of the packets exchanged when you try to log on.

I solved my problem by deleting my profiles up on the server, and then 
logging off, which wrote a new (old) set of profiles, and the next time I 
logged back on, everything seemed OK.

I suspect that my problem was due to the SID of my Samba server changing 
and not matching the SID stored in NTUSER.DAT, which controls access.

Wish I had a tool that could read registry files under UNIX.

Regards
-
Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], 
[EMAIL PROTECTED], http://www.richardsharpe.com
 





  1   2   >