RE: [Samba] Slow and bad performance on large dirs.

2002-11-23 Thread Noel Kelly
I believe this is more a filesystem issue than a Samba one.  Using ext2/ext3
browsing directories with many files will be slow as it constructs lists for
the entries to display.  Filesystems like XFS and ReiserFS use binary trees
which skip this step, so you might want to find a distribution or kernel to
support filesystems like these.

I wonder if your copy would go faster if you did not use Windows Exlporer to
do the copying, bearing in mind it tries to continually refresh the
directory contents.  Maybe try using xcopy and see if that is an
improvement.

Purely my own experience but I have found copying files using the Windows
Java version of Midnight Commander is very, very fast.

HTH

Noel

-Original Message-
From: Harrison Xing [mailto:[EMAIL PROTECTED]]
Sent: 23 November 2002 07:05
To: [EMAIL PROTECTED]
Subject: [Samba] Slow and bad performance on large dirs.


Hi,

We had a severe problem with samba with very large directories, e.g. 100,000

files. The file copy speed is becoming slower and slower, and it is a few
times slower compared with the data when the files to be copied are already
on 
the server.  Anyone has good ideas about how to solve this? 
By simply checking the code, I found at smbd/filename.c, if the files are
not found on the server, it will do a scan_directory which might be very
slow if the directory is large. Are there anyway to avoid this searching? 
Thanks.

-- 
Best Regards,
Harrison


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] 2.2.7 compile error using --with-acl-support on debian

2002-11-23 Thread Francesco Mosca
hi, i'm trying to package samba2.2.7 on a debian woody, using
--with-acl-support. the configure part seems ok, but when the compile
starts i get a lot of errors.. what's wrong? attached the sensitive part
of the dpkg-buildpackage output.
thanks

-- 
Francesco Mosca [EMAIL PROTECTED]

/usr/bin/make -C source all nsswitch/libnss_wins.so
make[1]: Entering directory `/usr/src/samba-2.2.7/source'
Using FLAGS =  -O  -O2 -D_REENTRANT -I./popt -Iinclude -I./include -I./ubiqx 
-I./smbwrapper -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE  
-DLOGFILEBASE=/var/log/samba -DCONFIGFILE=/etc/samba/smb.conf 
-DLMHOSTSFILE=/etc/samba/lmhosts   -DSWATDIR=/usr/share/samba/swat 
-DSBINDIR=/usr/sbin -DLOCKDIR=/var/run/samba 
-DCODEPAGEDIR=/usr/share/samba/codepages -DDRIVERFILE=/etc/samba/printers.def 
-DBINDIR=/usr/bin -DPIDDIR=/var/run/samba -DLIBDIR=/usr/lib -DVARDIR=/var 
-DHAVE_INCLUDES_H -DPASSWD_PROGRAM=/usr/bin/passwd 
-DSMB_PASSWD_FILE=/etc/samba/smbpasswd -DTDB_PASSWD_FILE=/etc/samba/smbpasswd.tdb
Using FLAGS32 =  -O  -O2 -D_REENTRANT -I./popt -Iinclude -I./include -I./ubiqx 
-I./smbwrapper -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE  
-DLOGFILEBASE=/var/log/samba -DCONFIGFILE=/etc/samba/smb.conf 
-DLMHOSTSFILE=/etc/samba/lmhosts   -DSWATDIR=/usr/share/samba/swat 
-DSBINDIR=/usr/sbin -DLOCKDIR=/var/run/samba 
-DCODEPAGEDIR=/usr/share/samba/codepages -DDRIVERFILE=/etc/samba/printers.def 
-DBINDIR=/usr/bin -DPIDDIR=/var/run/samba -DLIBDIR=/usr/lib -DVARDIR=/var 
-DHAVE_INCLUDES_H -DPASSWD_PROGRAM=/usr/bin/passwd 
-DSMB_PASSWD_FILE=/etc/samba/smbpasswd -DTDB_PASSWD_FILE=/etc/samba/smbpasswd.tdb
Using LIBS = -lacl  -lcups -lnsl -lcrypt -ldl -lpam
Compiling smbd/server.c
In file included from include/smb.h:462,
 from include/includes.h:677,
 from smbd/server.c:22:
include/vfs.h:111: parse error before `acl_t'
include/vfs.h:112: parse error before `acl_entry_t'
include/vfs.h:113: parse error before `acl_entry_t'
include/vfs.h:114: parse error before `acl_entry_t'
include/vfs.h:115: warning: no semicolon at end of struct or union
include/vfs.h:116: parse error before `*'
include/vfs.h:116: `acl_t' declared as function returning a function
include/vfs.h:116: warning: data definition has no type or storage class
include/vfs.h:117: parse error before `acl_permset_t'
include/vfs.h:118: parse error before `acl_permset_t'
include/vfs.h:119: parse error before `acl_t'
include/vfs.h:120: parse error before `*'
include/vfs.h:120: `acl_t' declared as function returning a function
include/vfs.h:120: warning: data definition has no type or storage class
include/vfs.h:121: parse error before `acl_t'
include/vfs.h:122: parse error before `acl_entry_t'
include/vfs.h:123: parse error before `acl_entry_t'
include/vfs.h:124: parse error before `acl_entry_t'
include/vfs.h:125: parse error before `acl_t'
include/vfs.h:126: parse error before `acl_type_t'
include/vfs.h:127: parse error before `acl_t'
include/vfs.h:129: parse error before `acl_permset_t'
include/vfs.h:131: parse error before `acl_t'
include/vfs.h:132: parse error before `acl_tag_t'
In file included from include/includes.h:677,
 from smbd/server.c:22:
include/smb.h:480: field `vfs_ops' has incomplete type
In file included from include/includes.h:737,
 from smbd/server.c:22:
include/proto.h:211: parse error before `the_acl'
include/proto.h:212: parse error before `entry_d'
include/proto.h:213: parse error before `entry_d'
include/proto.h:214: parse error before `entry_d'
include/proto.h:215: parse error before `sys_acl_get_file'
include/proto.h:215: parse error before `acl_type_t'
include/proto.h:215: warning: data definition has no type or storage class
include/proto.h:216: parse error before `sys_acl_get_fd'
include/proto.h:216: warning: data definition has no type or storage class
include/proto.h:217: parse error before `permset'
include/proto.h:217: `sys_acl_clear_perms' redeclared as different kind of symbol
include/vfs.h:117: previous declaration of `sys_acl_clear_perms'
include/proto.h:218: parse error before `permset'
include/proto.h:218: `sys_acl_add_perm' redeclared as different kind of symbol
include/vfs.h:118: previous declaration of `sys_acl_add_perm'
include/proto.h:219: parse error before `permset'
include/proto.h:219: `sys_acl_get_perm' redeclared as different kind of symbol
include/vfs.h:129: previous declaration of `sys_acl_get_perm'
include/proto.h:220: parse error before `the_acl'
include/proto.h:220: `sys_acl_to_text' redeclared as different kind of symbol
include/vfs.h:119: previous declaration of `sys_acl_to_text'
include/proto.h:221: parse error before `sys_acl_init'
include/proto.h:221: warning: data definition has no type or storage class
include/proto.h:222: parse error before `*'
include/proto.h:222: `sys_acl_create_entry' redeclared as different kind of symbol
include/vfs.h:121: previous declaration of `sys_acl_create_entry'
include/proto.h:223: parse error 

Re: [Samba] %U in include

2002-11-23 Thread Ludek Finstrle
I had problem with %U in include tag in configuration file smb.conf.
  I try explain the problem. When I connecting from Windows (domain)
  the samba server doesn't properly include file.
  E.g.: smb.conf
include = smb.conf.%U
  It include only smb.conf. at first time.
  
  I find no information about it so I try write patch for it. Please
  could you say me, if it's wrong? I have no problem with it for
  few days.
  I write it again 3.0 CVS branch. I see the problem in 2.2 too.
  
  Please send reply with cc: [EMAIL PROTECTED] as I'm not list member.
 
 This was fixed in 2.2.7 (and also in the HEAD/SAMBA_3_0 branches)
 a few days ago.  Is it still not working for you?

Now I see what you point me:

| RCS file: /cvsroot/samba/source/smbd/service.c,v
| retrieving revision 1.85.2.4
| retrieving revision 1.85.2.5
| diff -u -r1.85.2.4 -r1.85.2.5
| --- samba/source/smbd/service.c 2002/11/12 23:20:49 1.85.2.4
| +++ samba/source/smbd/service.c 2002/11/18 06:12:47 1.85.2.5
| @@ -611,6 +611,9 @@
| *status = NT_STATUS_LOGON_FAILURE;
| return NULL;
| }
| +
| +   /* the %U substitution may have changed */
| +   reload_services(True);
| 
| /* Remember that a different vuid can connect later without these checks

But if I follow CVS instruction to download
(from http://samba.kn.vutbr.cz/samba/cvs.html - czech mirror), I can't get
service.c with this patch.

CVS command:
cvs -z5 -d :pserver:[EMAIL PROTECTED]:/cvsroot co -r SAMBA_3_0 samba

What I do wrong?

I'll try it with this patch on Monday as I'm not at work now.

Thanks a lot

Luf
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] w2k-client and ntconfig.pol...

2002-11-23 Thread Axel Schlueter
Hi,

after setting up samba 2.2.3a as a PDC and connecting
a few NT4- and W2k-Clients to the PDC (which worked fine without
any problems), I tried to install a policy to redirect some
folders in the user profiles. I used poledit to create
a policy with modified 'Shell Folders' and 'User Shell
Folders' keys and copied it to the netlogon share. This is where
the problems started: The NT4-Clients worked as expected,
modified folders, no further problems, but the W2k-clients
stopped allowing users to login. Every time a user tries
to login to a W2k machine, the login process seems to starts
after passwor validation, stopping very soon with a userenv 1000 error
message ('DETAIL - Fuer diesen Befehl ist nicht genuegend
Speicher verfuegbar', roughly translated: Not enough
memory for this command). After clicking OK, the login
prompt appears again.

Locking into the samba logfiles reveals something which
looks kinda strange to me:

luna.log:
 ...
 libsmb/credentials.c:cred_create(93) sess_key : 
 libsmb/credentials.c:cred_create(94) stor_cred: 
 ...
 rpc_server/srv_netlog.c:api_net_sam_logon(206):
   api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON.
 rpc_server/srv_pipe.c:api_rpcTNP(1200)
   api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed.
 ...

The network worked flawless without the group policy, and I didn't
change anything else. The problem is reproducible (I installed a
test network with samba, one NT4- and one W2k-Machine, same results).
Anybody out there using W2k-Clients with redirected
user profile folders ? Anybody out there knowing a solution
for this problem ?

Thanks,
Axel

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] %U in include

2002-11-23 Thread Ludek Finstrle
 I had problem with %U in include tag in configuration file smb.conf.
   I try explain the problem. When I connecting from Windows (domain)
   the samba server doesn't properly include file.
   E.g.: smb.conf
 include = smb.conf.%U
   It include only smb.conf. at first time.
   
   Please send reply with cc: [EMAIL PROTECTED] as I'm not list member.
  
  This was fixed in 2.2.7 (and also in the HEAD/SAMBA_3_0 branches)
  a few days ago.  Is it still not working for you?
 
 Now I see what you point me:
 
 | RCS file: /cvsroot/samba/source/smbd/service.c,v
 | retrieving revision 1.85.2.4
 | retrieving revision 1.85.2.5
 | diff -u -r1.85.2.4 -r1.85.2.5
 | --- samba/source/smbd/service.c 2002/11/12 23:20:49 1.85.2.4
 | +++ samba/source/smbd/service.c 2002/11/18 06:12:47 1.85.2.5
 | @@ -611,6 +611,9 @@
 | *status = NT_STATUS_LOGON_FAILURE;
 | return NULL;
 | }
 | +
 | +   /* the %U substitution may have changed */
 | +   reload_services(True);
 | 
 | /* Remember that a different vuid can connect later without these checks
 
 I'll try it with this patch on Monday as I'm not at work now.

Someone else was there so I can test it.
It doesn't work properly at first attempt. If I try it second time it work.

I add into patch (before /* the %U substitution may have changed */):

| DEBUG(0,(make_connection_snum: Try to reload services with user 
|%s\n,current_user_info.smb_name));

Of course I add into make_connection_snum:
| extern userdom_struct current_user_info;

And the log output is:

[2002/11/23 14:25:18, 0] smbd/service.c:make_connection_snum(616)
  make_connection_snum: Try to reload services with user
[2002/11/23 14:25:19, 0] smbd/service.c:make_connection(836)
  theia (147.251.48.123) couldn't find service luf
[2002/11/23 14:25:24, 0] smbd/service.c:make_connection_snum(616)
  make_connection_snum: Try to reload services with user luf
[2002/11/23 14:25:24, 0] smbd/service.c:make_connection_snum(616)
  make_connection_snum: Try to reload services with user luf

I define service luf in included smb.conf.luf I can't do it with special
homes share.

Luf
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Date Problems.

2002-11-23 Thread Gagneet Singh
Hi!
I have installed the latest 2.2.6 SMB client and Server on a Red Hat 7.2
distribution.

Now the problem is that the clients connection from Windows PC whenever
they save any files to the shares on the Linux File Server (Samba) PC, the
date appears to be 4 1/2 hours ahead. E.g. If the actual time now is 20:00
hrs on 23rd of November the date and time comes as 00:30 hrs on 24th
November.

Please help on this issue. Is this a feature? and if so how can it be
avoided?

Thank you

Gagneet

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Swat: can't authorize

2002-11-23 Thread Michael Fritzsch - Fridge[BAtta]
Hello,
i have a SuSE8.0 machine running samba and swat.
I want to configure my smb.conf from another host with swat. But the 
authorization fails.
User root is already added with smbpasswd -a root.

Anyone an idea what to do?

Thanks
 Michael Fritzsch
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] swat: can't authorize

2002-11-23 Thread Michael Fritzsch - Fridge[BAtta]
Hello,
i have a SuSE8.0 machine running samba and swat.
I want to configure my smb.conf from another host with swat. But the 
authorization fails.
User root is already added with smbpasswd -a root.

Anyone an idea what to do?

Thanks
 Michael Fritzsch

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] smbd weirdness

2002-11-23 Thread Robert Adkins
Michael,

Have you run the smbclient -L servername while logged in as a user   
that has access to the server? Do this from a terminal connection that is   
on the Samba server in question. This should give you some information as   
to why it isn't quite doing what it should be doing.

Another thing that might have occurred is that during your upgrade one   
or more libraries and other packages, that the hand-built Samba install   
was dependent upon could have been changed or replaced with something   
that your Samba install is unable to utilize.

If you are running Redhat and upgraded to 7.3 or even 8.0 do a quick   
check by uninstalling or simply moving your current Samba install and   
replace it with the latest RPM version of it. During the RPM install you   
should either receive several errors about missing libraries and such or   
have a clean install occur. If the latter happens put your settings into   
the smb.conf created by the RPM and see what happens.

I have a feeling that one or more packages were inadvertently skipped or   
added to the install at this one site, that hadn't been done to the other   
servers that were upgraded.

I hope that helps, let me know if my suggestion takes care of the issue.

Regards,
Robert Adkins II
IT Manager/Buyer
Impel Industries, Inc.
Ph. 586-254-5800
Fx. 586-254-5804


 -Original Message-
From: Michael Robinton [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 22, 2002 3:21 PM
To: Robert Adkins
Cc: [EMAIL PROTECTED]
Subject: RE: [Samba] smbd weirdness

   

 Michael,

  I am unsure what you mean by locked out could you clarify? Do you
  mean
 that they connect and are able to browse, read and write to files in
 the   share, but when the users come back to the share later they
 are unable to   do those tasks, or are you saying that they are
 never able to see the   server and that when they attempt to connect
 to the server/share, they   are given the message that they are
 unable to connect.

  I would confirm that all the file permissions are properly set for
  the
 shares. Other then that, I am unsure what could be causing your
 issues.


the windows client is unable to connect, the message is that the
server is not found. Upon examining the job table, there are several
smbd instances running and no clients connected. This is a vanilla
installation at a site that has been working for a couple of years.
The other site belongs to them as well. I recently upgraded the OS to
a newer version of linux distribution and kernel though the samba
distributions were built by hand. Only one site exhibits this
behavior. The problem is intermittant in that when it does happen I
find the running copies of smbd whereas normally there would be none
unless a client connected. I dont' understand why smbd terminates
properly under some circumstances and not others.???

 Regards,
 Robert Adkins II
 IT Manager/Buyer
 Impel Industries, Inc.
 Ph. 586-254-5800
 Fx. 586-254-5804


  -Original Message-
 From: Michael Robinton [mailto:[EMAIL PROTECTED]]
 Sent: Friday, November 22, 2002 1:14 PM
 To: [EMAIL PROTECTED]; Robert Adkins
 Subject: [Samba] smbd weirdness



 I have two identical installations of samba v2.25 on linux boxes. On
 one system everything works fine but on the other, copies of smbd
 start but never terminate. The result is that the winduhs boxes that
 are trying to access the samba share get locked out and never find
 the samba server.   The configurations of the two systems are
 identical and I am unable to determine why one works and the other
 does not.

 smbd and nmbd are started from inetd.

 Any ideas.

 Michael

  --


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Domaine pas disponible

2002-11-23 Thread Jean-Jacques Antille
Hello!
Ma machine client Win2k a pu rejoindre le domaine.
La machine est inscrite comme utilisateur du domaine avec le $ en fin de nom.
Les utilisateurs sont présents dans Unix et dans Samba.
J'ai créé un partage sur le serveur.
Pourtant, j'ai toujours le message suivant à la connexion de la session:
Le système n'a pas pu ouvrir de session, car le MDKGROUP  n'est pas
disponible.
Je suis sous MANDRAKE 9.0
Merci de vos idées.
Cordiales salutations.
Jean-Jacques Antille


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] 2.2.7 and printer status

2002-11-23 Thread Thomas Bork
Hallo Samba-Team,

thank you for 2.2.7.

The only problem I found is an old one:
status of printers served from samba on Windows 2000

I'll try to explain this so clear as possible:

If I have a Windows user Administrator, which is in Windows
administrative group Administratoren and this user is on Samba-side
*mapped* to root -- printer status is *ok*.

If I have a Windows user test which is in Windows normal user group
Benutzer and this user is on Samba-side *not mapped* to root --
printer status is *ok*.

If I have a Windows user test which is in Windows administrative
group Administratoren and this user is on Samba-side *not mapped* to
root -- printer status is *not ok*:

Zugriff verweigert; keine Verbindung möglich (access not permittet; no
connection available)
printing is available

Relevant Information for printing in smb.conf:

Global:

   admin users = root
   printing = lprng
   printcap name = /etc/printcap
   printer admin = root
   load printers = no
   print command = chmod 666 %s;\
   name=`echo '%J' | sed s/^.*- //` ;\
   /usr/bin/lpr -P%p -J$name %s;\
   rm %s
   lpq command = /usr/bin/lpq -P%p -L
   lpq cache time = 4
   lprm command = /usr/bin/lprm -P%p %j
   lppause command = /usr/sbin/lpc hold %p %j
   lpresume command = /usr/sbin/lpc release %p %j
   queuepause command = /usr/sbin/lpc stop %p
   queueresume command = /usr/sbin/lpc start %p



Printer Share:

[pr1]
   comment = local printer pr1 on %h
   browseable = yes
   printable = yes
   public = yes
   create mode = 0700
   path = /tmp


Relevant Information for printing in printcap:

pr1:
:done_jobs=0
:rw
:sh
:lp=/dev/lp0
:sd=/var/spool/lpd/pr1
:fx=flp


Relevant Information for printing in lpd.conf:

check_for_nonprintable@
force_localhost
client_config_file=/etc/lpd.conf
filter_ld_path=/lib:/usr/lib:/usr/X11R6/lib:/usr/local/lib
filter_path=/bin:/usr/bin:/usr/local/bin:/usr/sbin:/usr/local/sbin:/usr
/lib/filters:/usr/X11R6/bin
mail_operator_on_error=root
pr=/usr/bin/pr
printcap_path=/etc/printcap
printer_perms_path=/etc/lpd.perms
server_config_file=/etc/lpd.conf
server_user=lp
user=lp
group=lp
send_data_first@


Relevant Information for printing in lpd.perms:

ACCEPT SERVICE=C SERVER REMOTEUSER=root
ACCEPT SERVICE=C LPC=lpd,status,printcap
REJECT SERVICE=C
ACCEPT SERVICE=M SAMEHOST SAMEUSER
ACCEPT SERVICE=M SERVER REMOTEUSER=root
REJECT SERVICE=M
DEFAULT ACCEPT


Thanks for your interest

tom

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Upgrading to Samba 2.2.7

2002-11-23 Thread naugaranch
I'm running Red Hat version 7.2 as server.  It has been fully upgraded from
Red Hat UP2DATE.

Samba 2.2.3a is currently running on the server with a working smb.conf
file.  I've noted a lot of comments/suggestions to upgrade to Samba 2.2.7.
I find 2 files on the samba.org site for Red Hat 7.x: samba2.2.7-1.i386.rpm
and samba2.2.7.src.rpm


When trying to install with the Package Manager I get:

samba2.2.7-1.i386.rpm  needs libcups.so.2  Apparently Samba 2.2.7 requires
CUPS installed?  Now in the process of downloading.

samba2.2.7.src.rpm   error  dialog box listing the rpm name.  Something
else I need to be dong?  Perhaps I got a corrupt file?

Since RPMs are available relly hate to have to build form the binaries..



Tom Winfield


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] unable to connect to a share, error message: string overflow

2002-11-23 Thread Peter
Hello list,

after upgrading from samba 2.2.5 to 2.2.6 or 2.2.7 I get a whole bunch
(in fact thousands of them) of the following error messages in my
smb.log

  ERROR: string overflow by 10 in string_sub(%u, 7)
[2002/11/23 18:46:51, 0] lib/util_str.c:string_sub(1188)
  ERROR: string overflow by 10 in string_sub(%u, 7)
  ERROR: string overflow by 10 in string_sub(%u, 7)
[2002/11/23 18:46:51, 0] lib/util_str.c:string_sub(1188)
[2002/11/23 18:46:51, 0] lib/util_str.c:string_sub(1188)
.
.
.

when trying to connect to a share. Of course the connect fails.
What is happening here? It certainly looks like a string (the username
perhaps?) is too long but it worked perfectly before. What can I do
about that?

Thanks
Peter


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba newbie question...

2002-11-23 Thread daveman
On Fri, Nov 22, 2002 at 04:40:20PM -0500, [EMAIL PROTECTED] wrote:
 Can Samba be used as a complete replacement for a Windows 2000 Active Directory 
server? I have some vague notion that this can be accomplished by using a combination 
of OpenLDAP, Samba, MIT Kerberos, and the OpenAFS file system. To say the least, the 
descriptions I have found have been vague as to whether or not I will be able to 
completely replace the functionality of an Active Directory server with a similar 
setup.
 
 If this is possible, could someone point me to reasonably good documentation on the 
subject?
 
 Thanks so much.
 --David

From the number of replies I received on this,(none) it seems fair to assume that 
this is not entirely possible. Anyone able to tell me what the current limitations 
are? I would really like to set up a system using samba as much as possible for 
domain and file serving operations. I suppose I can supplement samba with a win2k 
server if I have to... ;-)

Thanks,
David

-- 
 |\_/|
 (\ /)
  ) (//^\
 ( M )
(_)_(_)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba newbie question...

2002-11-23 Thread Bradley W. Langhorst
On Sat, 2002-11-23 at 14:27, [EMAIL PROTECTED] wrote:
 On Fri, Nov 22, 2002 at 04:40:20PM -0500, [EMAIL PROTECTED] wrote:
  Can Samba be used as a complete replacement for a Windows 2000 Active Directory 
server? I have some vague notion that this can be accomplished by using a combination 
of OpenLDAP, Samba, MIT Kerberos, and the OpenAFS file system. To say the least, the 
descriptions I have found have been vague as to whether or not I will be able to 
completely replace the functionality of an Active Directory server with a similar 
setup.
  
  If this is possible, could someone point me to reasonably good documentation on 
the subject?
  
  Thanks so much.
  --David
 
 From the number of replies I received on this,(none) it seems fair to assume that 
this is not entirely possible. Anyone able to tell me what the current limitations 
are? I would really like to set up a system using samba as much as possible for 
domain and file serving operations. I suppose I can supplement samba with a win2k 
server if I have to... ;-)
samba can't serve active directory

you might not really need it.

samba does work great as a PDC for large numbers of XP and NT/2k
workstations

brad

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] PDC Problems...

2002-11-23 Thread Brett Cook
I've checked all the settings in the smb.conf against the man pages,
all seem correct.

What else could I be missing? Why can't it see the server?

The following is my config file. /etc/samba/smb.conf

[global]
workgroup = THEMOLE
netbios name = TATTY
netbios aliases = PDC
server string = Samba Server %v
encrypt passwords = Yes
log file = /var/log/samba/log.%m
max log size = 50
printcap name = lpstat
domain logons = Yes
os level = 64
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
preload = pdf-generator
printing = cups
security = user
local master = yes

[homes]
comment = Home Directories
read only = No
browseable = No


[print$]
path = /var/lib/samba/printers
write list = @adm root

[pdf-generator]
comment = PDF Generator (only valid users)
path = /var/tmp
printable = Yes
print command = /usr/share/samba/scripts/print-pdf %s ~%u
%L%u %m %I 

[netlogon]
path = /home/netlogon
write list = root

--
::TheMole::.
did i mistake your words? did i betray your well worn trust?
http://themole.yi.org ~ http://www.buhsnarf.net



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Re: PDC Problem...

2002-11-23 Thread Brett Cook
have a look at my logfile at :

http://buhsnarf.net/log.html

Thanks, again.

--
::TheMole::.
did i mistake your words? did i betray your well worn trust?
http://themole.yi.org ~ http://www.buhsnarf.net



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Cannot enable encrypted password

2002-11-23 Thread Bradley W. Langhorst
On Fri, 2002-11-22 at 15:39, mricks wrote:
 when I enable encrypted passwords this error will completly fill up my 
 /var/log/messages this only occurs with Samba release 2.2.6 and 2.2.7
 ( 2.2.5) runs OK!
 
 lib/util_str.c:string_sub(1217)
 [1520]:   ERROR: string overflow by 1 in string_sub(%u, 7)
try changing that %u to %U

i think i saw that in a previous post - dunno why it might help...

brad
-- 
Bradley W. Langhorst [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Password woes...

2002-11-23 Thread Steve Morley
Hi All,

Moving up from 2.0.7 to 2.2.6 is taking it's toll, but I'm getting there...

Right now I'm stuck on the smbpasswd stuff.  With 2.0.7 I don't maintain
one (AFAIK).  All users have UNIX accounts on the old machine, and I'm porting
over the passwd file to this new one.  I have no idea what their passwords
are, and up till now, they simply change their UNIX passwd and SAMBA happily
uses it.

Why can't I, or how do I do this with 2.2.6?

TIA
Steve
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] PDC Problems...

2002-11-23 Thread Bradley W. Langhorst
On Sat, 2002-11-23 at 20:09, Brett Cook wrote:
I don't see an obvious problem with your conf file...
the nmbd log you posted looks okay too.

please post the log.smbd of a machine trying to join the domain.

what kind of failure do you see?
does it fail to log on, what is the client, etc?

brad
-- 
Bradley W. Langhorst [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Password woes...

2002-11-23 Thread Bradley W. Langhorst
On Sat, 2002-11-23 at 22:54, Steve Morley wrote:
 Hi All,
 
 Moving up from 2.0.7 to 2.2.6 is taking it's toll, but I'm getting there...
 
 Right now I'm stuck on the smbpasswd stuff.  With 2.0.7 I don't maintain
 one (AFAIK).  All users have UNIX accounts on the old machine, and I'm porting
 over the passwd file to this new one.  I have no idea what their passwords
 are, and up till now, they simply change their UNIX passwd and SAMBA happily
 uses it.
it's fairly easy to keep the passwords in sync...
just set up samba to change the unix passwords with the unix password
chat stuff in smb.conf

use pam_smbpass to make pam update the samba password when the unix
password is updated.

you can script add the users with smbpasswd -a but they'll all have to
set their own passwords.

If you REALLY don't want users to have to do anything you could probably
crack the whole unix passwd database (if you're using cryped passwords)
in a week or two.
 
 Why can't I, or how do I do this with 2.2.6?
 
you must have been using unencrypted passwords...

I strongly suggest using encrypted passwords but i think it is still
possible to use unencrypted passwords (and no smbpasswd) with 2.2.7
I'm not sure about that, and I don't know how to do it.

brad
-- 
Bradley W. Langhorst [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] How to compile samba-2.2.x on HP/UX 11.00

2002-11-23 Thread Ren Nieuwenhuizen
Hi,

Here's my problem:

Samba-2.2.x (even 2.2.7) compiled right out of the box on HP/UX  11.00 
gives some errors in the log file:

Nov 23 16:17:32 pandora smbd[6744]: [2002/11/23 16:17:32, 0] 
locking/posix.c:posix_fcntl_lock(661)
Nov 23 16:17:32 pandora smbd[6744]:   posix_fcntl_lock: WARNING: lock 
request at offset 0, length 9223372036854779000 returned
Nov 23 16:17:32 pandora smbd[6744]: [2002/11/23 16:17:32, 0] 
locking/posix.c:posix_fcntl_lock(662)
Nov 23 16:17:32 pandora smbd[6744]:   an Invalid argument error. This 
can happen when using 64 bit lock offsets

I've checked but the filesystem is local and a locking test program 
compiled with the same definitions (_LARGEFILE64_SOURCE) gave the same 
results. Whenever _LAGEFILE64_SOURCE is defined the upperlimit for 
offset is 2Gb otherwise EINVAL is returned.

So I thought adding _FILE_OFFSET_BITS=64 would do the trick. Upperlimit 
for locking got raised beyond 2Gb and my locking test program showed me 
this. But now the tdb code starts acting up.

Nov 23 14:43:24 pandora nmbd[13772]: [2002/11/23 14:43:24, 0] 
tdb/tdbutil.c:tdb_log(531)
Nov 23 14:43:24 pandora nmbd[13772]:   
tdb(/usr/local/samba-2.2.7/var/locks/unexpected.tdb): tdb_oob len 
1718185085 beyond eof at 696

The len is always 1718185085 only eof changes in between error logs.

Is there anyone with some knowledge of HP/UX and who can point me at the 
errors I make???

Thanks in advance,

BTW. I can get samba error free by removing _LARGEFILE64_SOURCE and 
adding _LARGEFILE_SOURCE (64 left out). But am I missing out on some 
specialities?

--
René Nieuwenhuizen
Afdeling Informatietechnologie
Centraal Planbureau

Bezoekadres: Van Stolkweg 14, 2585 JR Den Haag
Postadres: Postbus 80510, 2508 GM Den Haag

T (070) 3383 342
F (070) 3383 350
I http://www.cpb.nl/nl/general/org/afdelingen/it/




--

Aan dit bericht kunnen geen rechten worden ontleend.
Het bericht is alleen bestemd voor de geadresseerde.
Indien dit bericht niet voor u is bestemd, verzoeken wij u dit onmiddellijk aan
ons te melden en de inhoud van het bericht te vernietigen.

This message shall not constitute any obligations.
This message is intended solely for the addressee.
If you have received this message in error, please inform us immediately and
delete its contents.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba, LDAP, PDC and udding users

2002-11-23 Thread Diego Rivera
Hi all!

I've had a lot of success setting up Samba PDC's using the LDAP-SAM
backend, and got password sync working between Unix (LDAP) passwords and
Samba passwords.

I can also have other Linux boxes use Winbind to auth vrs. the PDC and
thus achieve the same password sync functionality (i.e., Samba changes
both PAM and Samba passwords, as well as checking them).  Naturally,
this also works for Windows machines (i.e., user changes his windows
password and his Unix password is likewise synched).

This all works fine, but I have a couple of questions regarding stuff
I've seen around here, but have not seen in stable versions yet:

1) I remember seeing something like add machine script similar to the
add user script - or a mention to it - to allow separate mechanics for
Machine account adding and User account adding.  How hard does anybody
think it would be to add this config file parameter and the
corresponding implementation?  Would it be worth it seeing as this is
likely to be included in 3.0?

2) Is it currently possible to have Samba check for machine accounts
under a different LDAP branch than user accounts?  This would ease admin
and maintenance of the machine account set, for obvious reasons.  Is
this planned for 3.0?  How hard does anybody think it would be to add
two config parameters: ldap user suffix and ldap machine suffix to
allow Samba to do this?  Again - is this worth it seeing as this could
be postponed to 3.0?

3) Are there any plans for calculating the user/machine SID based on the
Unix uid?  i.e., so that when Winbind gets the user list from a PDC, it
can use PDC-provided Userid's (eliminating the first-come first-served
UID assignment currently being used)?

I'd like to contribute to these - but I need a couple of pointers:

1) Where do I find the implementation of the call to add user script
and the corresponding reading of the config value?

2) Where do I find the implementation of the LDAP code which uses ldap
suffix, and the code which finds user/machine accounts in LDAP?

3) Any additional advice/tips?

Best

Diego

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: Shared roaming profiles for all users (XP)?

2002-11-23 Thread John H Terpstra
On 23 Nov 2002, Andrew Bartlett wrote:

 On Sat, 2002-11-23 at 14:46, xfesty wrote:
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
 
  Hiya.
 
  Is there anyway to make non changable roaming profiles for all users
  with XP workstations, and Samba 3.0HEAD from CVS acting as a PDC?
 
  I'm setting up a bunch of workstations for an internet cafe, and all
  users need to basically have the same settings (i.e. desktop icons,
  Internet Explorer settings, start menu items, etc.) as others, yet not
  be able to change them.
 
  I tried setting the profile dir to the same for all users, and making
  it read only, but I'm experiencing two problems -
 
  (1) XP will refuse to load the profile if its read-only, and
  (2) XP won't load the profile if it wasn't created by the same user.
 
  I'm also finding cookies in IE sometimes aren't being properly set,
  people can't view hotmail attachments, MSN messenger refuses to work,
  and a bunch of other oddities.
 
  Anyway past this?  I remember back when I was using Windows 2K Server
  as a PDC, it was possible to have this.

 If the ntuser.dat is renamed ntuser.man, and you make the profile owned
 by root, read-only to the suer, and you set root to have rid 500 in
 LDAP, does it work?

 (ie add root to ldap, then change the RID).

The SID is stred inside the NTUser.DAT file. Access control (the ACE) is
stored inside the file. That is what Rishard Sharpe was working on
decoding recently. When his work is done we will be able to set our own
ACE's inside the NTUser.DAT file and thus create from any profile a global
per group or a global group mandatory profile.

Just setting file ownership and permissions does not get one past the
hurdle of the ACE inside the file.

- John T.


 I think this is the standard way this is done on NT.

 Andrew Bartlett



-- 
John H Terpstra
Email: [EMAIL PROTECTED]




Re: Shared roaming profiles for all users (XP)?

2002-11-23 Thread Andrew Bartlett
On Sat, 2002-11-23 at 19:01, John H Terpstra wrote:
 On 23 Nov 2002, Andrew Bartlett wrote:
 
  On Sat, 2002-11-23 at 14:46, xfesty wrote:
   -BEGIN PGP SIGNED MESSAGE-
   Hash: SHA1
  
   Hiya.
  
   Is there anyway to make non changable roaming profiles for all users
   with XP workstations, and Samba 3.0HEAD from CVS acting as a PDC?
  
   I'm setting up a bunch of workstations for an internet cafe, and all
   users need to basically have the same settings (i.e. desktop icons,
   Internet Explorer settings, start menu items, etc.) as others, yet not
   be able to change them.
  
   I tried setting the profile dir to the same for all users, and making
   it read only, but I'm experiencing two problems -
  
   (1) XP will refuse to load the profile if its read-only, and
   (2) XP won't load the profile if it wasn't created by the same user.
  
   I'm also finding cookies in IE sometimes aren't being properly set,
   people can't view hotmail attachments, MSN messenger refuses to work,
   and a bunch of other oddities.
  
   Anyway past this?  I remember back when I was using Windows 2K Server
   as a PDC, it was possible to have this.
 
  If the ntuser.dat is renamed ntuser.man, and you make the profile owned
  by root, read-only to the suer, and you set root to have rid 500 in
  LDAP, does it work?
 
  (ie add root to ldap, then change the RID).
 
 The SID is stred inside the NTUser.DAT file. Access control (the ACE) is
 stored inside the file. That is what Rishard Sharpe was working on
 decoding recently. When his work is done we will be able to set our own
 ACE's inside the NTUser.DAT file and thus create from any profile a global
 per group or a global group mandatory profile.
 
 Just setting file ownership and permissions does not get one past the
 hurdle of the ACE inside the file.

But if we take a 'normal' profile, change the ownership to admin, but
don't change the SIDs, can we use it as a mandatory profile for a single
user?

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


Status of smbtorture 'open' test in HEAD/3.0

2002-11-23 Thread Andrew Bartlett
I was wondering what the status of the Samba code to support the 'open'
smbtorture test is?

I remember when you added it, you were going to look at how to support
the Win2k behavior in Samba, and I saw some checkins, but we still fail
the test on the build farm.

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part


Re: [CHECKER] Potentially very large allocation in malloc (PR#25986)

2002-11-23 Thread Andrew Bartlett
 Full_Name: Russell Greene
 Samba_Version: 2.2.6
 Server_OS: N/A
 Client_OS: N/A
 Submission from: (NULL) (128.12.177.14)
 
 
 This is a potential bug found by a checker.  Please verify.
 
 The variable response is read from the socket (thus has the potential to be
 tainted) and then is used to compute extra_data_len which is sent to malloc. 
 Since the value of extra_data_len is not range checked there is a potential
for
 very large allocations.
 
 
 [BUG] The reponse length can be set to something very large causing malloc to
 allocate huge memory
 /u1/rdg12/net/samba-2.2.6/source/nsswitch/wb_common.c:298:read_reply:
 ERROR:USER:292:298:passing needub data (*response).length to malloc
[SECURITY]
 [call overflow]

If winbindd wants to send us dud data, it could do far worse than asking us to
do a large malloc().  (Like grant all logins for root with no pw, set all users
to uid = 0...).

Andrew Bartlett

   response-extra_data = NULL;
 
   /* Read variable length response */
   
 Start ---
   if (response-length  sizeof(struct winbindd_response)) {
   int extra_data_len = response-length - 
   sizeof(struct winbindd_response);
   
   /* Mallocate memory for extra data */
   
 Error ---
   if (!(response-extra_data = malloc(extra_data_len))) {
   return -1;
   }
 
 



Re: [CHECKER] Direct Deref of tainted pointer sbuf (PR#25987)

2002-11-23 Thread Andrew Bartlett
 Full_Name: Russell Greene
 Samba_Version: 2.2.6
 Server_OS: N/A
 Client_OS: N/A
 Submission from: (NULL) (128.12.177.14)
 
 
 Hello.  This potential bug was found using a checker on the Samba source. 
 Please verify.
 
 I am assuming that sys_fstat is a wrapper for fstat and therefore takes input
 from the user.  As a result, there is a chance that sbuf will be NULL.  The
 function sys_fstat dereferences sbuf without first checking that it is not
 null.

How can sbuf be NULL?

And what if it is - if you pass a NULL buffer to fstat(), fstat() segfaults, so
I don't see a problem with dereferencing the buffer *after* a successful call to
fstat().

If you can find how we could get a NULL buffer from a caller, this would be a
different issue.

 [BUG] assuming user can call sys_fstat
 /u1/rdg12/net/samba-2.2.6/source/lib/system.c:204:sys_fstat:
 ERROR:USER:196:204:direct deref of tainted pointer sbuf
 /***
  An fstat() wrapper that will deal with 64 bit filesizes.
 /
 
 int sys_fstat(int fd,SMB_STRUCT_STAT *sbuf)
 Start ---
 {
   int ret;
 #if defined(HAVE_EXPLICIT_LARGEFILE_SUPPORT)  defined(HAVE_OFF64_T) 
 defined(HAVE_FSTAT64)
   ret = fstat64(fd, sbuf);
 #else
   ret = fstat(fd, sbuf);
 #endif
   /* we always want directories to appear zero size */
 Error ---
   if (ret == 0  S_ISDIR(sbuf-st_mode)) sbuf-st_size = 0;
   return ret;
 }
 
 



Re: [PATCH] add 'modules path' and handle 'configure --with-configdir' right

2002-11-23 Thread Stefan (metze) Metzmacher
At 11:23 23.11.2002 +1100, Tim Potter wrote:

On Fri, Nov 22, 2002 at 01:21:21PM +0100, Jelmer Vernooij wrote:

  here's a patch that added the 'modules path' parameter.
 
  lp_modules_path() is prefixed to all lp_modules() witch are not start 
with
  '/' (not absolute pathes)
 
  the default for lp_modules_path() is selectable by ./configure
  --with-modulesdir=/modules
  or $(LIBDIR)/samba  (when  --with-fhs) or $(LIBDIR)
 
  make installmodules install the modules to lp_modules_path()
 
  make modules now makes proto_exist
 Thanks a lot! These were on my todo list.I'll take a look at it later 
today
 (when I get back home, I'm currently at school)

There's already a directory for architecture specific library files -
libexec.  We haven't needed to use this so much before so it probably
isn't supported in configure.in.  How about $(LIBEXECDIR)/modules as
a location for the vfs modules?

--libexecdir=DIRprogram executables in DIR [EPREFIX/libexec]

--libdir=DIRobject code libraries in DIR [EPREFIX/lib]

I think modules are object code libaries

I would preferr to use LIBDIR/samba  , LIBDIR/samba/modules , 
LIBEXECDIR/samba or LIBEXEC/samba/modules (but I would like one of the 
first two)

I also don't like the valid.dat , upcase.dat, lowcase.dat installed to 
LIBDIR they should go to LIBDIR/samba/ or CONFIGDIR/ (we should always use 
the subdir samba, exept BINDIR and SBINDIR)

because of that I want to change lib_path() to libsamba_path() and 
dyn_LIDDIR to dyn_LIBSAMBADIR.



Tim.



metze
-
Stefan metze Metzmacher [EMAIL PROTECTED]




Re: Shared roaming profiles for all users (XP)?

2002-11-23 Thread John H Terpstra
On 23 Nov 2002, Andrew Bartlett wrote:

 On Sat, 2002-11-23 at 19:01, John H Terpstra wrote:
  On 23 Nov 2002, Andrew Bartlett wrote:
 
   On Sat, 2002-11-23 at 14:46, xfesty wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
   
Hiya.
   
Is there anyway to make non changable roaming profiles for all users
with XP workstations, and Samba 3.0HEAD from CVS acting as a PDC?
   
I'm setting up a bunch of workstations for an internet cafe, and all
users need to basically have the same settings (i.e. desktop icons,
Internet Explorer settings, start menu items, etc.) as others, yet not
be able to change them.
   
I tried setting the profile dir to the same for all users, and making
it read only, but I'm experiencing two problems -
   
(1) XP will refuse to load the profile if its read-only, and
(2) XP won't load the profile if it wasn't created by the same user.
   
I'm also finding cookies in IE sometimes aren't being properly set,
people can't view hotmail attachments, MSN messenger refuses to work,
and a bunch of other oddities.
   
Anyway past this?  I remember back when I was using Windows 2K Server
as a PDC, it was possible to have this.
  
   If the ntuser.dat is renamed ntuser.man, and you make the profile owned
   by root, read-only to the suer, and you set root to have rid 500 in
   LDAP, does it work?
  
   (ie add root to ldap, then change the RID).
 
  The SID is stred inside the NTUser.DAT file. Access control (the ACE) is
  stored inside the file. That is what Rishard Sharpe was working on
  decoding recently. When his work is done we will be able to set our own
  ACE's inside the NTUser.DAT file and thus create from any profile a global
  per group or a global group mandatory profile.
 
  Just setting file ownership and permissions does not get one past the
  hurdle of the ACE inside the file.

 But if we take a 'normal' profile, change the ownership to admin, but
 don't change the SIDs, can we use it as a mandatory profile for a single
 user?

Last attempt to get this across: No!

Win NT/2K/XP checks access right on the ACE inside the file as it loads
the profile and goes belly up if it does not have access permission for
the current user.

- John T.

-- 
John H Terpstra
Email: [EMAIL PROTECTED]




Re: Shared roaming profiles for all users (XP)?

2002-11-23 Thread Richard Sharpe
On Sat, 23 Nov 2002, John H Terpstra wrote:

 On 23 Nov 2002, Andrew Bartlett wrote:
 
  On Sat, 2002-11-23 at 19:01, John H Terpstra wrote:
   On 23 Nov 2002, Andrew Bartlett wrote:
  
On Sat, 2002-11-23 at 14:46, xfesty wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Hiya.

 Is there anyway to make non changable roaming profiles for all users
 with XP workstations, and Samba 3.0HEAD from CVS acting as a PDC?

 I'm setting up a bunch of workstations for an internet cafe, and all
 users need to basically have the same settings (i.e. desktop icons,
 Internet Explorer settings, start menu items, etc.) as others, yet not
 be able to change them.

 I tried setting the profile dir to the same for all users, and making
 it read only, but I'm experiencing two problems -

 (1) XP will refuse to load the profile if its read-only, and
 (2) XP won't load the profile if it wasn't created by the same user.

 I'm also finding cookies in IE sometimes aren't being properly set,
 people can't view hotmail attachments, MSN messenger refuses to work,
 and a bunch of other oddities.

 Anyway past this?  I remember back when I was using Windows 2K Server
 as a PDC, it was possible to have this.
   
If the ntuser.dat is renamed ntuser.man, and you make the profile owned
by root, read-only to the suer, and you set root to have rid 500 in
LDAP, does it work?
   
(ie add root to ldap, then change the RID).
  
   The SID is stred inside the NTUser.DAT file. Access control (the ACE) is
   stored inside the file. That is what Rishard Sharpe was working on
   decoding recently. When his work is done we will be able to set our own
   ACE's inside the NTUser.DAT file and thus create from any profile a global
   per group or a global group mandatory profile.
  
   Just setting file ownership and permissions does not get one past the
   hurdle of the ACE inside the file.
 
  But if we take a 'normal' profile, change the ownership to admin, but
  don't change the SIDs, can we use it as a mandatory profile for a single
  user?
 
 Last attempt to get this across: No!
 
 Win NT/2K/XP checks access right on the ACE inside the file as it loads
 the profile and goes belly up if it does not have access permission for
 the current user.

That is correct. If you use the profiles command on NTUSER.DAT, it will 
show you all the ACEs on the profiles.

Regards
-
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com




Re: Samba 2.2.4 Binary Package

2002-11-23 Thread Franco Tassone
Title: RE: Samba 2.2.4 Binary Package



Hi Jean,

in order to perform a "clean" attempt, I erased 
completely the directory of my samba installation, removed the samba_startup.com 
file, removed the tcpip$configuration.dat and did the following:
- reconfigured the tcpip
- re-linked your distribution
- re-installed the distribution

No luck, identical result.
Here in attachment the output of the commands you 
suggested me to issue.
Pls. let me know.
Noone else succeded in installing samba on a 
microvax 3100 ?


  - Original Message - 
  From: 
  COLLOT Jean-Yves 
  To: 'Franco Tassone' 
  Sent: Tuesday, November 19, 2002 9:46 
  AM
  Subject: RE: Samba 2.2.4 Binary 
  Package
  
  Hi. 
  All this is very surprising to me, 
  especially the VMS crash/reboot, because if the SMBD service is not enabled 
  (as it seems, according to your error message at startup), accessing your VMS 
  machine from a PC does not do anything at all, from the Samba point of 
  vue...
  
Anyway, the point is that the SMBD 
service does not start, and that this failure can not be caused by anything 
in your smb.conf file, because this file is not accessed or used in any way 
at that time.
I have the feeling that your SMBD 
service is not correctly defined, may be because it was defined by a 
previous SAMBA installation. I suggest to remove it, and redefine it 
correctly, as follows :
$ TCPIP SET NOSERV SMBD 
$ 
@SAMBA_ROOT:[BIN]SMBD_SETUP_TCPIP 
If it fails again, could you send 
me the results of the following commands : $ TCPIP SHOW DEV $ TCPIP SHOW SERVICE/FULL 
Regards, 
J.Y. Collot 
---Message d'origine- De: Franco Tassone [SMTP:[EMAIL PROTECTED]] Date: lundi 
18 novembre 2002 23:09 À: Josef Rattner Cc: Samba 
VMS; [EMAIL PROTECTED]; Wolter.Günter Objet: Re: Samba 
2.2.4 Binary Package 
Hi all 
I've checked the system logicals, and I can 
assure that SAMBA_ROOT is defined ok, 
tried also Wolter advice in using VMS filenaming in smb.conf. 
No changes, same error during startup, I can't 
browse the network although I "see" the 
workgroup defined. If for chance I try to 
access the VMS samba server for my pc, VMS itself dumps and the system restarts ! BTW, I've not been able to run any samba on this machine 
(2.0.3 and 2.0.6 ko), though I have samba 
running on a separate volume in which I've installed netbsd. Any more hints 
? 
  Hi,   I've downloaded the installation kit for Samba/VMS 2.2.4 
and installed it on   a mVax3100, running ovms7.2 with compaq tcpip 
from the same distribution. 
  Obviously I used the precompiled 
modules for the vax atchitecture, so I had   no problems in 
building and installing the the kit.  
 I've added the SAMBA_STARTUP.COM in my startup command file, 
unfortunatelly   I receive the following error at startup: 
%TCPIP-E-STARTERROR, error starting SMBD service   -RMS-F-DEV, error in device name or inappropriate device 
type for operation   %TCPIP-E-STARTERROR, error starting SMBD 
service   -RMS-F-DEV, error in 
device name or inappropriate device type for operation   
  The following is my smb.conf 
[global]  
 workgroup = WORKGROUP   dead time = 10   map archive = no 
  printing = 
bsd   printcap 
name = /sys$manager/tcpip$printcap.dat   load printers = yes   status = yes   security = user 
  default service = 
default   
create mode = 0777   
  interfaces = 
SE0   guest 
account = SAMBA_GUEST  
 log file = /samba_log/log.%m   socket options = 
TCP_NODELAY share modes = no 
[homes]   
comment = Home Directories  
 browseable = no   read only = no   create mode = 0750 
I receive the error at startup either I specify "interfaces 
= SE0" or not,   btw SE0 is the ethernet interface as seen by 
tcpip.   Could you help me please 
?   Cheers 
- Original Message -   
From: [EMAIL PROTECTED]   To: "Samba VMS" [EMAIL PROTECTED] 
  Sent: Tuesday, November 12, 2002 9:44 
AM   Subject: RE: Samba 2.2.4 
Binary Package  An installation kit for Samba/VMS 2.2.4 is 
available athttp://www.pi-net.dyndns.org/anonymous/jyc/ 
 


checks.log
Description: Binary data


CVS update: samba/source/auth

2002-11-23 Thread jerry

Date:   Sat Nov 23 14:27:56 2002
Author: jerry

Update of /data/cvs/samba/source/auth
In directory dp.samba.org:/tmp/cvs-serv6236/auth

Modified Files:
auth_domain.c 
Log Message:
[merge from APP_HEAD]

90% fix for CR 1076.  The password server parameter will no take things
like

password server = DC1 *

which means to contact DC1 first and the go to auto lookup if it
fails.


jerry



Revisions:
auth_domain.c   1.65 = 1.66

http://www.samba.org/cgi-bin/cvsweb/samba/source/auth/auth_domain.c?r1=1.65r2=1.66



CVS update: samba/source/libads

2002-11-23 Thread jerry

Date:   Sat Nov 23 14:27:56 2002
Author: jerry

Update of /data/cvs/samba/source/libads
In directory dp.samba.org:/tmp/cvs-serv6236/libads

Modified Files:
ldap.c 
Log Message:
[merge from APP_HEAD]

90% fix for CR 1076.  The password server parameter will no take things
like

password server = DC1 *

which means to contact DC1 first and the go to auto lookup if it
fails.


jerry



Revisions:
ldap.c  1.87 = 1.88
http://www.samba.org/cgi-bin/cvsweb/samba/source/libads/ldap.c?r1=1.87r2=1.88



CVS update: samba/source/nsswitch

2002-11-23 Thread jerry

Date:   Sat Nov 23 14:27:56 2002
Author: jerry

Update of /data/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv6236/nsswitch

Modified Files:
winbindd_cm.c 
Log Message:
[merge from APP_HEAD]

90% fix for CR 1076.  The password server parameter will no take things
like

password server = DC1 *

which means to contact DC1 first and the go to auto lookup if it
fails.


jerry



Revisions:
winbindd_cm.c   1.57 = 1.58

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_cm.c?r1=1.57r2=1.58



CVS update: samba/source/utils

2002-11-23 Thread jerry

Date:   Sat Nov 23 14:27:56 2002
Author: jerry

Update of /data/cvs/samba/source/utils
In directory dp.samba.org:/tmp/cvs-serv6236/utils

Modified Files:
net_lookup.c 
Log Message:
[merge from APP_HEAD]

90% fix for CR 1076.  The password server parameter will no take things
like

password server = DC1 *

which means to contact DC1 first and the go to auto lookup if it
fails.


jerry



Revisions:
net_lookup.c1.7 = 1.8

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/net_lookup.c?r1=1.7r2=1.8



CVS update: samba/source/auth

2002-11-23 Thread jerry

Date:   Sat Nov 23 14:52:34 2002
Author: jerry

Update of /data/cvs/samba/source/auth
In directory dp.samba.org:/tmp/cvs-serv7969/auth

Modified Files:
  Tag: SAMBA_3_0
auth_domain.c 
Log Message:
[merge from APP_HEAD]

90% fix for CR 1076.  The password server parameter will no take things
like

password server = DC1 *

which means to contact DC1 first and the go to auto lookup if it
fails.


jerry



Revisions:
auth_domain.c   1.33.2.9 = 1.33.2.10

http://www.samba.org/cgi-bin/cvsweb/samba/source/auth/auth_domain.c?r1=1.33.2.9r2=1.33.2.10



CVS update: samba/source/libads

2002-11-23 Thread jerry

Date:   Sat Nov 23 14:52:34 2002
Author: jerry

Update of /data/cvs/samba/source/libads
In directory dp.samba.org:/tmp/cvs-serv7969/libads

Modified Files:
  Tag: SAMBA_3_0
ldap.c 
Log Message:
[merge from APP_HEAD]

90% fix for CR 1076.  The password server parameter will no take things
like

password server = DC1 *

which means to contact DC1 first and the go to auto lookup if it
fails.


jerry



Revisions:
ldap.c  1.55.2.8 = 1.55.2.9

http://www.samba.org/cgi-bin/cvsweb/samba/source/libads/ldap.c?r1=1.55.2.8r2=1.55.2.9



CVS update: samba/source/libsmb

2002-11-23 Thread jerry

Date:   Sat Nov 23 14:52:34 2002
Author: jerry

Update of /data/cvs/samba/source/libsmb
In directory dp.samba.org:/tmp/cvs-serv7969/libsmb

Modified Files:
  Tag: SAMBA_3_0
namequery.c 
Log Message:
[merge from APP_HEAD]

90% fix for CR 1076.  The password server parameter will no take things
like

password server = DC1 *

which means to contact DC1 first and the go to auto lookup if it
fails.


jerry



Revisions:
namequery.c 1.93.2.4 = 1.93.2.5

http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/namequery.c?r1=1.93.2.4r2=1.93.2.5



CVS update: samba/source/nsswitch

2002-11-23 Thread jerry

Date:   Sat Nov 23 14:52:34 2002
Author: jerry

Update of /data/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv7969/nsswitch

Modified Files:
  Tag: SAMBA_3_0
winbindd_cm.c 
Log Message:
[merge from APP_HEAD]

90% fix for CR 1076.  The password server parameter will no take things
like

password server = DC1 *

which means to contact DC1 first and the go to auto lookup if it
fails.


jerry



Revisions:
winbindd_cm.c   1.31.2.13 = 1.31.2.14

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_cm.c?r1=1.31.2.13r2=1.31.2.14



CVS update: samba/source/utils

2002-11-23 Thread jerry

Date:   Sat Nov 23 14:52:34 2002
Author: jerry

Update of /data/cvs/samba/source/utils
In directory dp.samba.org:/tmp/cvs-serv7969/utils

Modified Files:
  Tag: SAMBA_3_0
net_lookup.c 
Log Message:
[merge from APP_HEAD]

90% fix for CR 1076.  The password server parameter will no take things
like

password server = DC1 *

which means to contact DC1 first and the go to auto lookup if it
fails.


jerry



Revisions:
net_lookup.c1.3.2.3 = 1.3.2.4

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/net_lookup.c?r1=1.3.2.3r2=1.3.2.4



Re: CVS update: samba/source/torture

2002-11-23 Thread Tim Potter
On Fri, Nov 22, 2002 at 09:58:31PM -0500, [EMAIL PROTECTED] wrote:

 Update of /data/cvs/samba/source/torture
 In directory dp.samba.org:/tmp/cvs-serv31632/torture
 
 Modified Files:
   Tag: SAMBA_3_0
   cmd_vfs.c 
 Log Message:
 Please compile with :
 -g -Wall -Wshadow -Wstrict-prototypes -Wpointer-arith -Wcast-qual
 if you're using gcc. It really does help !

i.e run configure.developer instead of normal configure when building
Samba.


Tim.