[Samba] ACL issues still unresolved

2002-12-05 Thread Andrew Furey
Hi all,

The two problems I'm having with ACLs on a W2k domain are still no 
closer to a solution. To wit, they were:

(a) Users accessing the ACL properties dialog on W2k can modify and 
remove existing ACLs on a given file, but they cannot add new ones (that 
can only be done with setfacl on the cmdline; the changes are then 
recognised);

(b) In said ACL properties dialog, the usernames displayed are the UNIX 
ones, not the ones converted with the username map option.

Does anyone have any more suggestions on these? I would have thought 
that the first problem particularly was quite critical. Should I take it 
to the samba-technical list?

Any thoughts much appreciated.

--
ANDREW FUREY [EMAIL PROTECTED] - Sysadmin/developer for Terminus.
Providing online networks of Australian lawyers (http://www.ilaw.com.au)
and Linux experts (http://www.linuxconsultants.com.au) for instant help!
Disclaimer: http://www.terminus.net.au/disclaimer.html. GCS L+++ P++ t++

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Debian Samba Versions

2002-12-05 Thread Wolfram Quester
Hi Irving,

One of the official Debian samba maintainers, Steve Langsek, has some
packages on his debian homepage:

http://people.debian.org/~vorlon/samba/

Wolfi

On Wed, Dec 04, 2002 at 12:52:01PM -0500, Irving Carrion wrote:
 Hopefully a simple question.
 
 Does anyone know of .deb or .dsc files for Samba Version 2.2.4, 2.2.5,
 2.2.6, or 2.2.7?  The only packages available from Debian are:
 
 1. Stable - Samba 2.2.3
 2. Testing - Samba 2.2.3
 3. Unstable - Samba 30alpha20-4
 
 I've looked on the debian website and in google with no luck.
 
 Any help much appreciated?
 
 IRV
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Setting Trust Beetween NT and Samba

2002-12-05 Thread Santhyago Bueno Gallão
Hi Everybody,

How i can tell to Samba Domain to trust in a NT Domain?
How i can tell to NT Domain to trust in a Samba Doamin?

Tks,

Santhyago

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Strange logentries in samba

2002-12-05 Thread Tarjei Huse
Hi, I'm getting thse strange errors in my nmbd log:
[2002/12/05 13:19:28, 2] nmbd/nmbd_subnetdb.c:make_subnet(192)
  making subnet name:192.168.1.4 Broadcast address:192.168.1.255 Subnet
mask:255.255.255.0
[2002/12/05 13:19:28, 2] nmbd/nmbd_subnetdb.c:make_subnet(192)
  making subnet name:UNICAST_SUBNET Broadcast address:0.0.0.0 Subnet
mask:0.0.0.0
[2002/12/05 13:19:28, 2] nmbd/nmbd_subnetdb.c:make_subnet(192)
  making subnet name:REMOTE_BROADCAST_SUBNET Broadcast address:0.0.0.0
Subnet mask:0.0.0.0
[2002/12/05 13:19:32, 0]
nmbd/nmbd_responserecordsdb.c:find_response_record(235)
  find_response_record: response packet id 16525 received with no
matching record.
[2002/12/05 13:19:32, 0]
nmbd/nmbd_responserecordsdb.c:find_response_record(235)
  find_response_record: response packet id 16526 received with no
matching record.


The machine is running dual head with samba-tng and samba 2.2.7
(standard RH 8.0 version). The logs are from samba. Now, I've tried to
search the web for any info on this, but I find nothing. Does anyone
know what this is?

Cheers,
Tarjei
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Locking user accounts

2002-12-05 Thread Martijn van Brummelen
Hello all,

At this moment I am running a samba-ldap-pdc.
This works really good. But what worries me is the following thing:
user accounts never get locked. This is a problem cause anyone can guess or 
use bruteforce to enter password. Is there a solution/workaround for this? 
I want the following situation : when a user tries to logon for 4 times I 
want the account to lock out the account. Winnt disables the account for 
several minutes and then the account is locked out.

Does anyone have a idea?

Thanx in advance

Martijn
The Netherlands 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Won't %L work anymore?

2002-12-05 Thread Buchan Milne
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

 Message: 6
 Date: Wed, 04 Dec 2002 16:43:01 -0500
 From: Gary Algier [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: [Samba] Won't %L work anymore?

 A followup to my own post:

 I went ahead and implemented a configuration with %L.  It works great.
 One problem: Micro@!#$t broke Win2k with SP3.

 My test PC was running Win2k SP2.  When it connected to the server it
 seems to have supplied the netbios name of my server.  I went into
 my boss's office to show him how great this works and his Win2k SP3
 did not show the same shares.  They showed the shares that would
 show if the real host name is used.

 Here's my basic config:

 System OS: Solaris 2.6
 Samba: 2.2.7
 Hostname: tea
 IP addresses assigned: 172.25.0.13 (tea) 172.25.0.33 (cup) 172.25.0.34
(mug)
 Partial configs:
  /etc/samba/smb.conf:
  [global]
  interfaces = 127.0.0.1 172.25.0.13 172.25.0.33 172.25.0.34
#You probably want to try adding right here:
netbios name = beverages
netbios aliases = tea cup mug
  include = /etc/samba/smb.conf.host-%L
  /etc/samba/smb.conf.host-tea:  [global]
  workgroup = MTLAUREL
   
I don't think this will work if you have different workgroups listed
here, I suspect you would have to run seperate smbd's with different
config files if you want to do this.
  netbios name = TEA
Unnecessary, use netbios aliases instead.
  ...
  [some-shares]
  ...
  /etc/samba/smb.conf.host-cup:
  [global]
  workgroup = MTLAUREL
  netbios name = Cup
  [other-shares]
  ...
 /etc/samba/smb.conf.host-mug:
  [global]
  workgroup = MTLAUREL
  netbios name = Cup
  [more-shares]
  ...

 So, am I crazy to think of using %L?  Should I use another (hidden) %
code?
 Should I hack in %s (for sockname) or %l (for alternate %L) as the result
 of getsockname()?  Will this even work?  Is this any different in samba 3?


- --
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE971hprJK6UGDSBKcRAoWwAJ9Cs3Nrj0Nt1CRpJ+KXg2F0H8AEQQCeKJKz
O4KUgm7icTFgpol4tVHUqCQ=
=Wu93
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Backup

2002-12-05 Thread cantisan

I have a PDC samba, I want to save some files in case of
crash, I just need to save passwd and /etc/samba
directory ?


__
Venha para a VilaBOL!
O melhor lugar para você construir seu site. Fácil e grátis!
http://vila.bol.com.br


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] tdb_reopen: open failed error

2002-12-05 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 4 Dec 2002 [EMAIL PROTECTED] wrote:

 
 Anyone know why I am getting this error in my logs:
 
 Dec  4 20:34:06 aslan smbd[17255]: [2002/12/04 20:34:06, 0]
 tdb/tdbutil.c:tdb_log(531)
 Dec  4 20:34:06 aslan smbd[17255]:   tdb(/var/cache/samba/connections.tdb):
 tdb_reopen: open failed (No such file or directory)
 Dec  4 20:34:06 aslan smbd[17256]: [2002/12/04 20:34:06, 0]
 tdb/tdbutil.c:tdb_log(531)
 Dec  4 20:34:06 aslan smbd[17256]:   tdb(/var/cache/samba/connections.tdb):
 tdb_reopen: open failed (No such file or directory)
 
 
 I am running samba-2.2.7-1 on RH 7.2 installed from the srpm. I only use
 winbind, not samba for shares at all...

This tdb is created automatically when someon connects to a share.
Since you are not providing any shares, it never gets created. 
It is bothersome, but not harmful.





cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2 SAMS Teach Yourself Samba in 24 Hours 2ed
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE971x2IR7qMdg1EfYRAvixAJ0dVqLiEFzGT2AoFCXljRJ1ftqhcACfX7+r
vdGnB1hcCtbGSnQbi/fx7eg=
=8r1y
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] winbind + groups hogs CPU

2002-12-05 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 4 Dec 2002, Daniel Wittenberg wrote:

 I've been using winbind successfully for awhile now for user info
 (nothing in /etc/passwd), but today I tried to use it to pull group
 info, so I updated /etc/nsswitch.conf (RH 7.3) and then tried to add:
 valid users = @DOMAIN+group_name
 
 and now whenever I click on any folder (share) to open the cpu util goes
 up, and the connection hangs for awhile, and then eventually it
 times-out on the client side, and the server logs initgroup errors. 
 Anyone seen this?  It is connecting to a rather large AD forest, and I'm
 told there are groups with 30+ users in them.  When I do a winbind -g
 |wc -l I get about 63,210 entries before I geta 0c000233 error (I think
 that was it).  I tried group enumeration on/off and that doesn't change
 anything.

From include/nterr.h

#define NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND NT_STATUS \
(0xC000 | 0x0233)


This is probably from one of the trusted domains.  

Just curious, if you have 63k groups, how many users ?  Samba 3.0 will 
deal with the better (using two processes...one to respond to queries and 
one to update the cache).




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2 SAMS Teach Yourself Samba in 24 Hours 2ed
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE9710PIR7qMdg1EfYRAhrhAKCuvPxe/EOxAxpYjmQPbWrNR/U6WQCgu+Qx
pvytDzdYKNHS+Ox3ooduXUw=
=9GNH
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Backup

2002-12-05 Thread Irving Carrion
Depending on version and operating system.  But in Debian it's:

/etc/samba
/var/lib/samba
/var/run/samba
/var/cache/samba

Although I'm not to sure about /var/cache/samba.  This list does not
include the binaries though, but I don't think you need to back up
those.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
On Behalf Of cantisan
Sent: Thursday, December 05, 2002 8:52 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Backup


I have a PDC samba, I want to save some files in case of 
crash, I just need to save passwd and /etc/samba 
directory ?

 

__
Venha para a VilaBOL!
O melhor lugar para você construir seu site. Fácil e grátis!
http://vila.bol.com.br


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Locking user accounts

2002-12-05 Thread Jim Morris
On Thursday, December 5, 2002, at 06:59  AM, Martijn van Brummelen 
wrote:

At this moment I am running a samba-ldap-pdc.
This works really good. But what worries me is the following thing:
user accounts never get locked. This is a problem cause anyone can 
guess or
use bruteforce to enter password. Is there a solution/workaround for 
this?
I want the following situation : when a user tries to logon for 4 
times I
want the account to lock out the account. Winnt disables the account 
for
several minutes and then the account is locked out.

This subject has come up several times in the past couple of weeks. I 
just went down this road myself actually.

Samba has no built in facility for accomplishing what you need. 
However, if you are familiar with PAM, there is a PAM module 
(pam_tally) that is specifically for locking out an account after a 
specified number of failed logon attempts.  (A successful logon resets 
the count to zero any time before the limit is reached).

If you have configured Samba with 'obey pam restrictions = yes' in the 
smb.conf file, Samba will fail the logon once pam_tally's retry limit 
is reached. However, the kicker is that if you are using encrypted 
passwords with Samba, the password lookup is not done via PAM - just 
the account verification. So a bad logon attempt via Samba does not 
increment the failed logon counter.

The solution to this is in a 2 line patch to the Samba 2.2.7 source 
code, which I posted to the samba-technical mailing list this past 
Monday.  This patch causes Samba to increment the failed logon count 
via pam_tally.so, when you are using PAM, and encrypted passwords for 
Samba.

Here is the patch again, against the Samba 2.2.7 source tree:

diff -r samba-2.2.7.orig/source/smbd/password.c 
samba-2.2.7/source/smbd/password.c
617a618,624
#if defined(WITH_PAM)
		// Jim Morris, 12/03/2002. UGLY HACK TO FORCE PAM_TALLY COUNTER TO
		// BE UPDATED WHEN LOGON FAILS USING SMBPASSWD FILE.
		if (lp_obey_pam_restrictions()  (ret == FALSE))
			smb_pam_passcheck( user, password );
#endif



Basically, the trick is to call the PAM password check with a bad 
password after the encrypted Samba password verification fails.

I have most PAM services setup to use the system-auth service, which is 
where I have configured pam_tally.  Here's my /etc/pam.d/system-auth 
file:

#%PAM-1.0
authrequired  /lib/security/pam_env.so
authsufficient/lib/security/pam_unix.so likeauth nullok
authrequired  /lib/security/pam_deny.so
authrequired  /lib/security/pam_tally.so no_magic_root 
deny=3 reset
account required  /lib/security/pam_unix.so
account required  /lib/security/pam_tally.so no_magic_root 
deny=3 reset
passwordrequired  /lib/security/pam_cracklib.so retry=3 type=
passwordsufficient/lib/security/pam_unix.so nullok use_authtok 
md5 shadow
passwordrequired  /lib/security/pam_deny.so
session required  /lib/security/pam_limits.so
session required  /lib/security/pam_unix.so

Yours may be different if the Unix accounts are authenticated against 
an LDAP server!

Here's /etc/pam.d/samba:

%PAM-1.0
auth   required pam_nologin.so
auth   required pam_stack.so service=system-auth
accountrequired pam_stack.so service=system-auth
sessionrequired pam_stack.so service=system-auth
password   required pam_stack.so service=system-auth
password   required pam_smbpass.so use_authtok use_first_pass

I hope this information helps!
 --
Jim Morris ([EMAIL PROTECTED])

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Backup

2002-12-05 Thread Robert Adkins
In the documentation that comes along with SWAT, there is a section   
entitled something along the lines of, Making a Samba BDC for a Samba   
PDC.

I am in the process of learning LDAP before I build the other server to   
act as a BDC, but I will be building that quite soon. That section of the   
SWAT Documentation should answer some if not all of your questions.

Good luck!

Regards,
Robert Adkins II
IT Manager/Buyer
Impel Industries, Inc.
Ph. 586-254-5800
Fx. 586-254-5804


 -Original Message-
From: Irving Carrion [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 05, 2002 9:14 AM
To: [EMAIL PROTECTED]; cantisan; Robert Adkins
Subject: RE: [Samba] Backup

   

Depending on version and operating system.  But in Debian it's:

/etc/samba
/var/lib/samba
/var/run/samba
/var/cache/samba

Although I'm not to sure about /var/cache/samba.  This list does not
include the binaries though, but I don't think you need to back up
those.

 -Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
On Behalf Of cantisan
Sent: Thursday, December 05, 2002 8:52 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Backup


I have a PDC samba, I want to save some files in case of
crash, I just need to save passwd and /etc/samba
directory ?

   


__
Venha para a VilaBOL!
O melhor lugar para você construir seu site. Fácil e grátis!
http://vila.bol.com.br


 --
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

 --
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Cups..works on LM8.1, LM8.2 but not LM9

2002-12-05 Thread Ken Walker
I've been trying every combination possible to get CUPS on LM9 to print to a
shared printer on a windows machine.

On setting up the printer in printerdrake, On LM8.1 it worked first time. On
LM8.2 with the same settings it worked first time. On LM9 it just sits there
and laughs at me, with the same settings as LM8.1 and LM8.2.

And how do i remove a default printer it thinks it has but isn't there ?

The printer on the remote windoz machine i'm trying to print to is a HP1100.
The default printer it thinks it has is also a HP1100, but has it down as
its own ip address, and not the ip address of the machine that actually has
the printer.

Last night i tried setting up an Epson 1160, also connected to a windows
machine.

LM8.1 set it up, and out pops a test page.

LM8.2 set it up, and out pops a test page.

On LM9nothing, again just sits there, says the printer is
printing, says its ready. but prints bugger all.


LM9.. Aaarh nothing.

Anybody had this problem

many thanks


ps is it possible to set up a LM box so that students print from a
windows machine  to the samba box, and then the samba box sends it to
another windows machine to actually be printed. I need only selected
students to use the printer ( otherwise the little buggers sneak in and
empty all the cartridges, then sneak out again )

Many thanks

Mr Smiley

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] smbclient -L nameofserver

2002-12-05 Thread Sales



Hi everyone

I have set up Samba and am running through 
diagnosis testing and when I enter the above command on my Linux box it 
automatically asks me for a password.

If I return ie null password session setup 
fails
If I enter 'the password that I am logged on as' i 
get setup session not started NT_STATUS_LOGON_FAILURE

relevant lines in my smb.conf which i think may be 
affecting this are

security = user
encrypt passwords = Yes
public = yes
guest ok = yes
hosts allow = 192.168.

does anyone know where I'm going wrong

thanks

Howard



[Samba] New Italian samba support mailing list

2002-12-05 Thread Simo Sorce
Hello,
I'm proud to announce the creation of a new samba support mailing list
for italian users.
This follows the creation of an italian samba web site at
http://samba.xsec.it

I invite all italian samba users that follow this list to also subscribe
to the italian mailing list at
http://lists.xsec.it/mailman/listinfo/samba-it

Regards,
Simo Sorce

In italian:

Salve,
sono lieto di annunciare la creazione una nuova mailing list dedicata al
supporto samba per gli utenti italiani.
Essa segue la creazione del sito web italiano su samba
http://samba.xsec.it

Invito tutti gli utenti italiani di samba che seguono questa
lista a iscriversi anche alla lista italiana al link
http://lists.xsec.it/mailman/listinfo/samba-it

Saluti,
Simo Sorce

-- 
Simo Sorce - [EMAIL PROTECTED]
Samba Team - http://www.samba.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] smbclient -L nameofserver

2002-12-05 Thread Frank Matthieß
On Thu, Dec 05, 2002 at 02:44:58PM -, Sales wrote:
 Hi everyone
 
 I have set up Samba and am running through diagnosis testing and when I enter the 
above command on my Linux box it automatically asks me for a password.
 
 If I return ie null password session setup fails
 If I enter 'the password that I am logged on as' i get setup session not started 
NT_STATUS_LOGON_FAILURE
 
 relevant lines in my smb.conf which i think may be affecting this are
 
 security = user
 encrypt passwords = Yes
 public = yes
 guest ok = yes
 hosts allow = 192.168.
 
 does anyone know where I'm going wrong

If your unix username ist howard smbclient use this username to
authenbticate against windows/samba. If you want to use another username for
windows/samba you should use: smbclient -L nameofserver -U username 
and my favorite ...-W WorkgroupOrDomainName

Dont forget, this user must exist in smbpasswd on samba server and! as
unixuser with same name.

-- 
Frank Matthieß[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Win2000 and Samba

2002-12-05 Thread Dragan Krnic
... I would recommend checking to make sure that the Automatic 
Update (Pisses me off to all hell) Service is not running on
your Windows 2000 Workstations. If it is, then they might have 
recently downloaded a nice little fix from MS that tosses your 
Samba server for a loop. In any case, you might be able to uninstall 
whatever fix was recently added to the machine.

Wait, wait, Robert! Are you talking about a specific M$ fix, or
was it just a general suspicion?

The power to obstruct Samba by way of automatic fixes is in M$
hands. They experienced the same hostile treatment from AOL when
they were warring over Instant Messenger.

If you know of any disturbing fixes, please name them as an alert.

Dragan



_
Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year.
http://login.mail.lycos.com/brandPage.shtml?pageId=plusref=lmtplus
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Locking user accounts

2002-12-05 Thread Jim Morris
On Thu, 2002-12-05 at 08:52, Martijn van Brummelen wrote:

 If I apply the patch that you say I will have too use pam. But the whole idea 
 of smb-ldap is not too use pam right?  I think your solution works with pam 
 but not with ldap I think. Cause all information is stored in ldap and pam 
 does not get involved. I will wait for more replies for a while, if that does 
 not work. I will try your solution.

This is indeed the case. This solution only works when you are using
PAM. If you are authenticating against an LDAP server, you will need to
somehow cause the account information stored on the LDAP server to
become disabled after a number of failed logon attempts.

Unfortunately, I do not know of any method to do that with an LDAP
server.  From Samba's perspective (for user authentication), the LDAP
server is just another way of storing the same information that we would
store in the smbpasswd file.  Think of it is a database that we use for
looking up the username and password. The database (or directory in this
case) is just a storage mechanism. It has no facilities for locking out
an account. We are looking up data in the directory - we are not logging
into the directory with the given username and password.  Without major
changes to Samba, I believe there is no way to achieve what you want
with just LDAP as the Samba authentication mechanism.

I would like to point out that there is a pam_ldap module available that
allows a Linux system to do user authentication against an LDAP
directory, rather than against a Unix password database.  By doing that,
you could have failed logons still use the pam_tally module to increment
a failed logon attempt counter, while using LDAP for the backend
password storage.  In this case, both the Unix and Samba passwords would
be stored in the LDAP directory I suppose.

Can someone that is using LDAP for Samba authentication comment on this,
especially if you are also using PAM?

Thanks!

-- 
/---
| Jim Morris  |  Email: [EMAIL PROTECTED]
| |AIM: JFM2001
\---

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Samba 2.2.7 - client computer can NOT log IN.

2002-12-05 Thread Irving Carrion
Hello All!

Any of our workstations who try and log into the domain receive the
following Windows error: The system cannot log you on to this domain
because the system's computer account in its primary domain is missing
or the password on that account is incorrect.  Ok, good enough...

If I check the smbpasswd file I can see the machine account and it is
also in passwd.  So I decide to manually remove it using

smbpasswd -x -m computer1
userdel computer1$

I verify that it is NOT in smbpasswd,passwd,shadow etcThen continue
with

useradd -d /dev/null -g 100 -s /bin/false -M computer1$
smbpasswd -a -m computer1$

I verify that it IS in smbpasswd,passwd,shadow etc

Ok, this should work, right?  Not.  Try again.  Same error message.  

Oh and by the way, these machine accounts were working perfectly before.

I've googled and babbled and have read manuals, with no luck.

Also, if it's not the computer account, is it a wrong machine password?
The password should be null so I don't understand the logic?  Also, is
there some type of machine cache?  Is samba 2.2.7 storing the machine
info in some .tdb file as well?

Debian3.0/Samba 2.2.7

Would be highly appreciative if someone could extend some knowledge my
way?

Thanks!
IRV

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] ACL issues still unresolved

2002-12-05 Thread Dragan Krnic
(b) In said ACL properties dialog, the usernames displayed 
are the UNIX ones, not the ones converted with the username 
map option.

Why not use original Windows names and take users map out of the loop?

While a blank in user's name is strictly a no-no and all lower case is
preferable, most *nices can deal with names longer than 8 chars, 
although ls -l-listings may appear messy.

As for your (a) question, should we chase back your previous mails
to find out exactly what samba version on which platform you are
using, or can you discretely include that info in a mail?


_
Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year.
http://login.mail.lycos.com/brandPage.shtml?pageId=plusref=lmtplus
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Administrator account samba-3.0alpha21 and LDAP

2002-12-05 Thread Etienne Goyer
Hi!

I am setting up a test bed for Samba PDC + LDAP.  I used the 3.0alpha21 
rpm for RH8 from samba.org. The setup is working.  Win9x client can 
login no problem.  

I was wondering how I should setup an Administrator account for the
domain.  Right now, my plan is to have samba authenticate only to the
ldap backend (passdb backend = ldapsam only).  Does  the administrator
only need write access to the ldap tree or it also need to be root on
the machine (uidnumber or gidnumber 0) ? What should I put in the rid 
and primaryGroupID field ?  At the very least, I'd like to be able to
add machine accounts to the domain with this account.

Thanks for your input !



-- 
Etienne GoyerLinux Québec Technologies Inc.
http://www.LinuxQuebec.com   [EMAIL PROTECTED]
PGP Pub Key: http://www.LinuxQuebec.com/pubkeys/eg.key 
Fingerprint: F569 0394 098A FC70 B572  5D20 3129 3D86 8FD5 C853 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba 2.2.7 - client computer can NOT log IN.

2002-12-05 Thread Frank Matthieß
On Thu, Dec 05, 2002 at 10:16:48AM -0500, Irving Carrion wrote:
 Hello All!
 
 Any of our workstations who try and log into the domain receive the
 following Windows error: The system cannot log you on to this domain
 because the system's computer account in its primary domain is missing
 or the password on that account is incorrect.  Ok, good enough...
 
 If I check the smbpasswd file I can see the machine account and it is
 also in passwd.  So I decide to manually remove it using
 
 smbpasswd -x -m computer1
 userdel computer1$
 
 I verify that it is NOT in smbpasswd,passwd,shadow etcThen continue
 with
 
 useradd -d /dev/null -g 100 -s /bin/false -M computer1$
 smbpasswd -a -m computer1$
   ^
   ?
Should smbpasswd -a -m computer1 

Your smbpasswd file must have a wrong  computer1$$ entry. 

Try the smbpasswd command without the trailing $.

-- 
Frank Matthieß[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Samba 2.2.7 - client computer can NOT log IN.

2002-12-05 Thread Irving Carrion
No that was a typo in the message.  Sorry the command I meant was:

smbpasswd -a -m computer1



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
On Behalf Of Frank Matthieß
Sent: Thursday, December 05, 2002 10:46 AM
To: [EMAIL PROTECTED]
Subject: Re: [Samba] Samba 2.2.7 - client computer can NOT log IN.

On Thu, Dec 05, 2002 at 10:16:48AM -0500, Irving Carrion wrote:
 Hello All!
 
 Any of our workstations who try and log into the domain receive the
 following Windows error: The system cannot log you on to this domain
 because the system's computer account in its primary domain is missing
 or the password on that account is incorrect.  Ok, good enough...
 
 If I check the smbpasswd file I can see the machine account and it is
 also in passwd.  So I decide to manually remove it using
 
 smbpasswd -x -m computer1
 userdel computer1$
 
 I verify that it is NOT in smbpasswd,passwd,shadow etcThen
continue
 with
 
 useradd -d /dev/null -g 100 -s /bin/false -M computer1$
 smbpasswd -a -m computer1$
   ^
   ?
Should smbpasswd -a -m computer1


Your smbpasswd file must have a wrong  computer1$$ entry. 

Try the smbpasswd command without the trailing $.

-- 
Frank Matthieß
[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Won't %L work anymore?

2002-12-05 Thread Gary Algier
Thanks!  That did the trick.

BTW: The workgroup, and a bunch of other things, were identical between the
different virtual servers.  Only the shares differed. I did, however, move
all the rest of the [global] parameters into the master smb.conf.


Buchan Milne wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



Message: 6
Date: Wed, 04 Dec 2002 16:43:01 -0500
From: Gary Algier [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: [Samba] Won't %L work anymore?

A followup to my own post:

I went ahead and implemented a configuration with %L.  It works great.
One problem: Micro@!#$t broke Win2k with SP3.

My test PC was running Win2k SP2.  When it connected to the server it
seems to have supplied the netbios name of my server.  I went into
my boss's office to show him how great this works and his Win2k SP3
did not show the same shares.  They showed the shares that would
show if the real host name is used.

Here's my basic config:

System OS: Solaris 2.6
Samba: 2.2.7
Hostname: tea
IP addresses assigned: 172.25.0.13 (tea) 172.25.0.33 (cup) 172.25.0.34


(mug)


Partial configs:
/etc/samba/smb.conf:
[global]
interfaces = 127.0.0.1 172.25.0.13 172.25.0.33 172.25.0.34


#You probably want to try adding right here:
netbios name = beverages
netbios aliases = tea cup mug


include = /etc/samba/smb.conf.host-%L
/etc/samba/smb.conf.host-tea:  [global]
workgroup = MTLAUREL


   
I don't think this will work if you have different workgroups listed
here, I suspect you would have to run seperate smbd's with different
config files if you want to do this.


netbios name = TEA


Unnecessary, use netbios aliases instead.


...
[some-shares]
...
/etc/samba/smb.conf.host-cup:
[global]
workgroup = MTLAUREL
netbios name = Cup
[other-shares]
...
/etc/samba/smb.conf.host-mug:
[global]
workgroup = MTLAUREL
netbios name = Cup
[more-shares]
...

So, am I crazy to think of using %L?  Should I use another (hidden) %


code?


Should I hack in %s (for sockname) or %l (for alternate %L) as the result
of getsockname()?  Will this even work?  Is this any different in samba 3?




- --
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE971hprJK6UGDSBKcRAoWwAJ9Cs3Nrj0Nt1CRpJ+KXg2F0H8AEQQCeKJKz
O4KUgm7icTFgpol4tVHUqCQ=
=Wu93
-END PGP SIGNATURE-



--
Gary Algier, WB2FWZ  gaa at ulticom.com +1 856 787 2758
Ulticom Inc., 1020 Briggs Rd, Mt. Laurel, NJ 08054  Fax:+1 856 866 2033

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Authenticate Linux Session with NT Domain Acct.

2002-12-05 Thread Benjamin Krein
Despite configuring winbind and my /etc/pam.d/files, I am still unable
to actually log into a Linux session (ie, at the gdm login screen or
text login prompt) using my NT domain account.  Here is my
/etc/pam.d/login file:

auth   required /lib/security/pam_securetty.so
auth   sufficient   /lib/security/pam_winbind.so
auth   sufficient   /lib/security/pam_unix.so use_first_pass
auth   required /lib/security/pam_stack.so service=system-auth
auth   required /lib/security/pam_nologin.so
accountsufficient   /lib/security/pam_winbind.so
accountrequired /lib/security/pam_stack.so service=system-auth
password   required /lib/security/pam_stack.so service=system-auth
sessionrequired /lib/security/pam_stack.so service=system-auth
sessionoptional /lib/security/pam_console.so

NOTE: I can access NT shares using my NT Domain credentials, but that's
about it.  I can also get group/user info. from the NT domain which
tells me winbind is communicating with my PDC.  Thanks for any help.
-- 

Benjamin T. Krein
Network Administrator
PMC Technologies, Inc.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] swat not working this time

2002-12-05 Thread Mike Stewart
Hi again,  I've just reinstalled RH 7.2 and Samba 2.2.7 for the unpteenth
time this time swat is not working !!!  I have checked the etc/services
file and swat 901/tcp is in there and I have a text file named swat in
etc/xinetd.d directory containing the following...

service swat
{
port = 901
socket_type = stream
wait = no
user = root
server = /usr/local/samba/bin/swat
log_on_failure +=USERID
disable = no
}

I can't access is from either the browser on my PC or from KDE's Konqueror

Have I missed some vital step ?  It all worked last week when I
first/second/third installed everything but I've been busy installing M$
Windoze 2000 for a few days and my brain is addled.

TVM

Mike


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Auto printer drivers download for RAW printers

2002-12-05 Thread Brian Johnson
Chapter 7.3 at http://ca.samba.org/samba/docs/Samba-HOWTO-Collection.html#CUPS
breezes over using Samba and CUPS as a mere spooling print server -- 'raw'
printing with vendor drivers download but doens't get into how to set up Samba to
provide the Win drivers required by the Win client machines

Subsequent chapters explain how to set up Samba for non-raw print drivers

Can someone help me set up my system to provide client machines with the native
Win9x drivers from my Linux server (Samba and CUPS)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Samba and ACL problems.

2002-12-05 Thread Jacob Malmberg
Ive joined my smbcomputer to my AD-domain using samba 2.2.7 and smbpasswd -j 
domain -r pdc -Uadmuser. However, when I try to set file/dir permissions 
from one of the windows (xp,2k) clients I get this error in the smbd.log:
smbd/posix_acls.c:create_canon_ace_lists(823)
 create_canon_ace_lists: unable to map SID 
S-1-5-21-1624733417-2918206790-2146600570-2560 to uid or gid.. I have 
mounted my ext2 fs with mnt -t ext2 -o acl -o user_xattr device mntpnt. Im 
using kernel 2.4.20 which ive patched for ext2/ext3 ACL support. Is there 
anyway to set domain permissions with the command setfacl just to try if it 
works? It works fine when using users on the smbcomputer but not at all when 
Im using users from the AD-domain. Im using debian 3 woody.

regards,
Jacob

_
MSN 8 with e-mail virus protection service: 2 months FREE* 
http://join.msn.com/?page=features/virus

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] file corruption problem, HELP

2002-12-05 Thread Kevin
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I am running Samba 2.2.2 with winbind authenticating to an NT
4.0 PDC.  All of my clients are Windows XP Pro.

This box has been running fine for several months.  In fact my
uptime was 185 days as of last night.  However, for various
reasons i upgraded the kernel from 2.4.18 to 2.4.19 and had to
reboot last night.

Everything appeared to come up fine, all daemons started up
and connections could be made.

However, this morning some people (note: not everyone) are
complaining about MS Word corrupting some of their files upon
saving (all these files are being served by Samba).  Since we
have not had any problems for months i am attributing this to
something in my kernel upgrade or reboot.

If anyone here has any input i would greatly appreciate it.

Thanks,
Kevin R. Marshall

- -- 
keyserver: http://pgp.mit.edu/
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE97uK24pH/bZtToq0RAjrUAJ9T+sxnxwS10p0SW3kf/zUpuA0QYQCgny4G
/yqCMW8mAWHt1wbpQhqn+3c=
=BXZh
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] samba troubles

2002-12-05 Thread Tyler Durdin
I am running samba on Rh 7.3 serving windows XP machines on a small network 
(fewer than 10 cpts). I am experiencing very long delays logging onto the 
network (2-5 minutes) my clients are assigned IP's via DHCP and I am using a 
DNS server not located in my building (not allowed to run my own) can anyone 
help me figure why my logins take so long? I also have trouble when I logout 
(not shutdown, just logout) and log back in my network drives are not 
restored, is this because I am using DHCP? Thanks in advance for the help, 
it's greatly appreciated.

_
Protect your PC - get McAfee.com VirusScan Online 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] (no subject)

2002-12-05 Thread bkrein

confirm 268000

[Samba] Setting Trust Beetween NT and Samba

2002-12-05 Thread Santhyago Bueno Gallão
Hi Everybody,

How i can tell to Samba Domain to trust in a NT Domain?

Tks,

Santhyago



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] swat not working this time

2002-12-05 Thread daniel . jarboe
Is it listening?  Does netstat -l |grep swat turn up anything?

If not, xinetd needs to listen for port 901, easiest was is a chkconfig
swat on or you could restart xinetd.

~ Daniel



-Original Message-
From: Mike Stewart
Sent: Thursday, December 05, 2002 11:32 AM
To: [EMAIL PROTECTED]
Subject: [Samba] swat not working this time


Hi again,  I've just reinstalled RH 7.2 and Samba 2.2.7 for the
unpteenth
time this time swat is not working !!!  I have checked the
etc/services
file and swat 901/tcp is in there and I have a text file named swat in
etc/xinetd.d directory containing the following...

service swat
{
port = 901
socket_type = stream
wait = no
user = root
server = /usr/local/samba/bin/swat
log_on_failure +=USERID
disable = no
}

I can't access is from either the browser on my PC or from KDE's
Konqueror

Have I missed some vital step ?  It all worked last week when I
first/second/third installed everything but I've been busy installing M$
Windoze 2000 for a few days and my brain is addled.

TVM

Mike





---

This message is the property of Time Inc. or its affiliates. It may be
legally privileged and/or confidential and is intended only for the use
of the addressee(s). No addressee should forward, print, copy, or
otherwise reproduce this message in any manner that would allow it to be
viewed by any individual not originally listed as a recipient. If the
reader of this message is not the intended recipient, you are hereby
notified that any unauthorized disclosure, dissemination, distribution,
copying or the taking of any action in reliance on the information
herein is strictly prohibited. If you have received this communication
in error, please immediately notify the sender and delete this message.
Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] winbind log

2002-12-05 Thread Kevin
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Why is it that there is never any info in the log.winbind
file?

I have started it using ./winbind -d 3 and still no data.

Thanks,
/KRM

- -- 
keyserver: http://pgp.mit.edu/
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE97vP64pH/bZtToq0RAqkxAKCYO09iVVn134t/DPUfvqRFQ72hIQCeNGO+
cG6KlhrhO+RlqNpFRCTlAVM=
=N8CD
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] change password

2002-12-05 Thread Simon Chappell
hello all

Does anyone have any idea how to setup password expiration and/or change 
password at next logon in the samba server?

I do find that to be really helpfull when you have users who are alergic to 
changing password from mummy etc..


Many thanks in advance



Simon


-
This mail sent through IMP on Redhat 8.0 and Qmail with Ldap.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Where is this rid coming from?

2002-12-05 Thread Don Hayward
Repeat background from previous posts:

I'm using a Debian woody based system (partially upgraded to 'testing'
in order to use tls with ldap), with samba_2.2.7 source built by
debian/rules with LDAP turned on, using gcc 3.0.4,
libldap2-tls_2.0.23-14, and libldap2_2.0.23-14.

I'm setting up PDC service -- when I try to join a windows machine
(this is XP) to the domain, I get 'specified user does not
exist' on the windows system and the join fails.


The admin username/password authenticates.  The machine username
lookup succeeds and the correct rid is returned.  Then the following
lines appear in log.smbd (with -d 10):

[2002/12/05 12:42:19, 3, pid=27738] rpc_server/srv_pipe.c:api_rpcTNP(1180)
  api_rpcTNP: pipe 29607 rpc command: SAMR_OPEN_USER
[2002/12/05 12:42:19, 5, pid=27738] rpc_parse/parse_prs.c:prs_debug(60)
  00 samr_io_q_open_user
[2002/12/05 12:42:19, 6, pid=27738] rpc_parse/parse_prs.c:prs_debug(60)
  00 smb_io_pol_hnd domain_pol
[2002/12/05 12:42:19, 5, pid=27738] rpc_parse/parse_prs.c:prs_uint32(588)
   data1: 
[2002/12/05 12:42:19, 5, pid=27738] rpc_parse/parse_prs.c:prs_uint32(588)
  0004 data2: 0007
[2002/12/05 12:42:19, 5, pid=27738] rpc_parse/parse_prs.c:prs_uint16(559)
  0008 data3: 
[2002/12/05 12:42:19, 5, pid=27738] rpc_parse/parse_prs.c:prs_uint16(559)
  000a data4: 
[2002/12/05 12:42:19, 5, pid=27738] rpc_parse/parse_prs.c:prs_uint8s(675)
  000c data5: fb 8f ef 3d 5a 6c 00 00
[2002/12/05 12:42:19, 5, pid=27738] rpc_parse/parse_prs.c:prs_uint32(588)
  0014 access_mask: 0090
[2002/12/05 12:42:19, 5, pid=27738] rpc_parse/parse_prs.c:prs_uint32(588)
  0018 user_rid : 1e22 
[2002/12/05 12:42:19, 4, pid=27738] 
rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(168)
  Found policy hnd[0] [000] 00 00 00 00 07 00 00 00  00 00 00 00 FB 8F EF 3D   
...=
.
.
[2002/12/05 12:42:19, 0, pid=22667] passdb/pdb_ldap.c:pdb_getsampwrid(907)
  We don't find this rid [7714] count=0

Which user belongs to this rid?  Is this coming from an smbd database
or from the windows machine?  Similar lookups returning 1e22 occur
three or so times.

Thanks for any help.

Don Hayward [EMAIL PROTECTED]
Mote Marine Laboratory  Office: 941.388.4441  Cell: 941.302.4982
1600 Ken Thompson Parkway   Fax: 941.388.4312
Sarasota, FL 34236  See: http://www.mote.org
Independent, non-profit, marine and estuarine research and education facility.
For PGP public key do: http://www.mote.org/~don/donpgp.asc
use DISCLAIMER; # We run Debian Linux
Taxes feed the starving and clothe the naked.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] file corruption problem, HELP

2002-12-05 Thread Jacob Smith
Kevin,
 I have this problem also.  Running 2.2.1a and Win XP machines.  I
cannot save my Word files that reside on the Samba server (they become
corrupted) and if I have Outlook open (.pst files reside on the Samba
server) I get a Delayed Write Fail error from Windows.  I read that
upgrading to 2.2.6 or above takes care of this problem.  Have not upgraded
yet so I am still no sure

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf Of Kevin
Sent: Thursday, December 05, 2002 12:23 AM
To: [EMAIL PROTECTED]
Subject: [Samba] file corruption problem, HELP


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I am running Samba 2.2.2 with winbind authenticating to an NT
4.0 PDC.  All of my clients are Windows XP Pro.

This box has been running fine for several months.  In fact my
uptime was 185 days as of last night.  However, for various
reasons i upgraded the kernel from 2.4.18 to 2.4.19 and had to
reboot last night.

Everything appeared to come up fine, all daemons started up
and connections could be made.

However, this morning some people (note: not everyone) are
complaining about MS Word corrupting some of their files upon
saving (all these files are being served by Samba).  Since we
have not had any problems for months i am attributing this to
something in my kernel upgrade or reboot.

If anyone here has any input i would greatly appreciate it.

Thanks,
Kevin R. Marshall

- --
keyserver: http://pgp.mit.edu/
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE97uK24pH/bZtToq0RAjrUAJ9T+sxnxwS10p0SW3kf/zUpuA0QYQCgny4G
/yqCMW8mAWHt1wbpQhqn+3c=
=BXZh
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Samba 2.2.7 - Domain SID

2002-12-05 Thread Irving Carrion
Hello!

Is it possible to edit the secrets.tdb file and change the domain SID?

Thanks!
IRV

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Printing - lprm command not getting executed

2002-12-05 Thread David Neilson
I am attempting to get printing services for Windows 2000 clients working 
with Samba on a Red Hat 7.2 box.  The problem is I can not cancel print jobs

(either from a PC or the local smb client).   File sharing, and printing 
other than this problem, work fine.  

Here is a listing of configuration and system info:  1) the samba packages 
installed, 2) output of uname -a, 3) the relevant parts of the smb.conf 
file, 4) printing capabilities which work, and 5) more detailed information 
about the problem.


1) SAMBA PACKAGES
samba-2.2.1a-4
samba-common-2.2.1a-4
samba-client-2.2.1a-4


2) RED HAT LINUX
Linux pegasus 2.4.7-10 #1 Thu Sep 6 17:27:27 EDT 2001 i686 unknown


3) EXCERPTS FROM SMB.CONF
[global]
# workgroup = NT-Domain-Name or Workgroup-Name
   workgroup = WIN   # A W2K DOMAIN

# server string is the equivalent of the NT Description field
   domain logons = yes

# if you want to automatically load your printer list rather
# than setting them up individually then you'll need this
   printcap name = /etc/printcap
   load printers = yes

# It should not be necessary to spell out the print system type unless
# yours is non-standard. Currently supported print systems include:
# bsd, sysv, plp, lprng, aix, hpux, qnx
   printing = bsd ### I HAVE ALSO TRIED lprng, AND LEAVING THIS COMMENTED
OUT.

# Security mode. Most people will want user level security. See
# security_level.txt for details.
   security = domain

# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this option unless you have read those documents
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd

printer admin = tiberius,dneilson,root
print command = /usr/bin/lpr -r -P%p %s
lpq command = /usr/bin/lpq -P%p %j
lprm command = /usr/bin/lprm -P%p %j
queuepause command = /usr/sbin/lpc stop %p
queueresume command = /usr/sbin/lpc start %p

# Share Definitions
==
[lp11]
   comment=David's Printer
   path=/var/spool/samba/public
   valid users=dneilson mellwein
   printer=lp11
   printable=yes
   printer admin=tiberius,dneilson,root
   print command=/usr/bin/lpr -r -P%p %s
   lprm command=/usr/bin/lprm -P%p %j
   public=yes


4) PRINTING CAPABILITIES THAT WORK
I can print from the local smbclient as well as any Windows 2000 client I 
choose.  I am able to pause and unpause the print queue.  I have not had 
any problem printing any kind of document in the correct format.


5) MORE DETAILS OF THE PROBLEM.
When I try to delete a job, Samba gives the indication it deleted the job.
On a Windows 2000 client, after I delete the job and hit Refresh, the job 
is gone.  On the local smbclient, after I cancel the job and type queue,
 the job is gone.  But in both cases, if I type lpstat -t from the server
command line, the job is still out there.

This problem can't be specific to Samba 2.2.1a, because I have tried it on
 a machine with 2.2.7, and have gotten the same results.  

In troubleshooting, I changed the lprm command line to read: lprm 
command=/tmp/lprm %p %j.  The /tmp/lprm script consists of the following:
 START SCRIPT /tmp/lprm
/usr/bin/id  /tmp/lprm.out
/usr/bin/lprm -P$1 $2  /tmp/lprm.out 21
 END SCRIPT /tmp/lprm
When I cancel jobs, this script should at least create an output file, 
but it doesn't - which indicates it doesn't get run.  As a result, I think
 Samba is not paying any attention to the lprm command line in the 
smb.conf.  Be aware that testparm will show the lprm command as having 
the correct parameters (/usr/bin/lprm -P%p %j).  

I have checked the samba log files, and they are not written to when I 
try to cancel jobs.

I have tried running a trace of the smbd command when I try to cancel jobs,
 and here is the output.  It is only one line long:
### START strace OUTPUT
select(1024, [9 10], NULL, NULL, NULL unfinished ...
### END strace OUTPUT

From the Unix command line, if I run the lprm command as myself (dneilson)
 lprm -Plp11 JOB_ID, I can delete the job without any problem.  


Thanks for any help you can provide.  

David Neilson

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba 2.2.7 - Domain SID

2002-12-05 Thread Klaus Umbach
On Thu, Dec 05, 2002 at 02:48:30PM -0500, Irving Carrion wrote:
 Hello!
 
 Is it possible to edit the secrets.tdb file and change the domain SID?

just delete or rename the secrets.tdb and copy a MACHINE.SID in the same
directory.

Greetings
Klaus

 
 Thanks!
 IRV
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Klaus Umbach| RapidSolution Software AG
Administration  | [EMAIL PROTECTED]
http://www.rapidsolution.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Samba 2.2.7 - Domain SID

2002-12-05 Thread Irving Carrion
Well that's part of the problem.  I don't know what the SID is.  How can
I extract the domain SID from secret.tdb

-Original Message-
From: Klaus Umbach [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, December 05, 2002 3:49 PM
To: Irving Carrion
Cc: samba list
Subject: Re: [Samba] Samba 2.2.7 - Domain SID

On Thu, Dec 05, 2002 at 02:48:30PM -0500, Irving Carrion wrote:
 Hello!
 
 Is it possible to edit the secrets.tdb file and change the domain SID?

just delete or rename the secrets.tdb and copy a MACHINE.SID in the same
directory.

Greetings
Klaus

 
 Thanks!
 IRV
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Klaus Umbach| RapidSolution Software AG
Administration  | [EMAIL PROTECTED]
http://www.rapidsolution.de

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba 2.2.7 login script processing

2002-12-05 Thread Dietrich Restemeyer
On Tuesday 03 December 2002 19:42, Randy Cox wrote:
 Hi All,

 I posted this earlier, but not sure if it showed up, so:

 samba 2.2.7 built with:
 ./configure
 make
 make install

 (That is, no special build options)

 in our smb.conf the line:

 logon script = %u.bat:
   ^

 lowercase --

 When trying to login (from Windows 9x,NT, 2K or Linux with winbindd),
 several (hundred) of these messages appear in the server logs:

 [the date shows up here] lib/util_str.c: string_sub (1217)
 ERROR: string overflow by 2 in string_sub(%u, 7)
  ^

 and this number --
 is the user name length + 2

 The workstation trying to login eventually times out with an incorrect
 password message.  On the server, smbd and nmbd stop responding to
 /etc/init.d/samba stop or other commands and need to be stopped with kill
 -9

 if we change the line in smb.conf to
 logon script = %U.bat:
   ^

 uppercase --

 Then everything works fine.  Is there a patch I missed somewhere?
 TIA


 Senior Technical Associate
 [EMAIL PROTECTED]

just the same here at my network.
if i use logon script = li-%u.bat 
and rename the batchfiles it works too.


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] 2.2.7 RH 8.0 Binary RPM's

2002-12-05 Thread Peter LaComb
After installing these rpm's, no swat executable can be found... I've built
it from the sources and gotten it working, but is this something that needs
to be corrected in the rpm? Has anyone else noticed this, or did I do
something silly that I haven't realized yet?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Permissions problem

2002-12-05 Thread P Ranjit Kumar




Did u 
set "encrypt passwords" smb.conf option to yes? Did you set the password using 
'smbpasswd -a username command?

Can 
you attach a levlel 10log file.

- 
Ranjit

  -Original Message-

  -Original Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]]On Behalf Of Thabu 
  PienaarSent: Thursday, December 05, 2002 2:07 PMTo: 
  [EMAIL PROTECTED]Subject: [Samba] Permissions 
  problem
  Help Please
  
  When I try to connect from Win XP Pro to my Samba 
  Server, I get this error...
  
  "Samba is not accessible. You might not have 
  permissiont o use this network resource." (attached error gif). 
  
  I have a smbpasswd file created from 
  /etc/passwd, configured exactly like my XP username and password.
  
  Thanks
  
  
  Thabu 
  Pienaar*ComputerNetWitrivier / White 
  RiverSuid-Afrika / South Africa+27 (0) 83 349-6588
  


[Samba] I want to get rid of user nobody

2002-12-05 Thread Mark E. Nuell








Where is this coming from, and what does it mean.



Samba version 2.2.4

Service uid
gid pid machine

--

IPC$
nobody nobody 26705 learncom-55
(192.168.62.173) Thu Dec 5 15:35:07 2002

IPC$
nobody nobody 26709 te2228-05 (192.168.34.55)
Thu Dec 5 15:35:11 2002

IPC$
nobody nobody 26704 ib1112-247
(192.168.62.100) Thu Dec 5 15:35:07 2002

IPC$
nobody nobody 26708 ib1112-357
(192.168.38.107) Thu Dec 5 15:35:11 2002

IPC$
nobody nobody 26702 learncom-11
(192.168.35.61) Thu Dec 5 15:35:06 2002

machines tomomi_ozaki student
26702 learncom-11 (192.168.35.61) Thu Dec 5 15:35:16 2002

IPC$
nobody nobody 26703 te2228-11
(192.168.34.61) Thu Dec 5 15:35:06 2002



This is causing me great problems

Here is my config file.

[global]

 workgroup =
ACADEMIC

 netbios name =
ACADEMIC-SERVER

 encrypt passwords
= Yes

 log file = /var/log/samba/log.%m

 max log size = 50

 socket options =
TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

 guest ok = No

 interfaces
=172.20.1.127/16

 os level = 64

 preferred master
= True

 domain master =
True

 domain logons =
Yes

# add user script
= /usr/sbin/useradd -d /dev/nuell -g 100 -s /bin/false -M %u

 logon path =
\\ACADEMIC-SERVER\machines\%m\profile

# local master = Yes 

 dns proxy = No

# wins proxy = Yes

 wins server =
172.20.1.19

# remote announce =
192.168.32.0

 delete veto files
= Yes

 veto files = /.AppleDouble/.AppleDesktop/Network
Trash



[netlogon]

 path = /usr/local/samba/lib/netlogon

 writeable = no

 guest ok = no

 write list = ntadmin





[machines]

 comment =
Profiles

 path =
/home/machines

 valid users =
@student @instructor @administrator @superuser @systemadmin

 writeable = yes

 create mask =
0775

 directory mask =
0775

 guest ok = No

 browseable = No

 locking = No



Thanks in advance.








Re: [Samba] 2.2.7 RH 8.0 Binary RPM's

2002-12-05 Thread Justin Georgeson
I couldn't get swat working with the binary 2.2.6 or 2.2.7 RPMs for RH 
8. Never tried the source ones. As soon as I went back to RH's split out 
RPMs for (2.2.7) it worked first try. Not sure what the difference was.

Peter LaComb wrote:
After installing these rpm's, no swat executable can be found... I've built
it from the sources and gotten it working, but is this something that needs
to be corrected in the rpm? Has anyone else noticed this, or did I do
something silly that I haven't realized yet?



--
Justin Georgeson
UnBound Technologies, Inc.
http://www.unboundtech.com
Main   713.329.9330
Fax713.460.4051
Mobile 512.789.1962

5295 Hollister Road
Houston, TX 77040
Real Applications using Real Wireless Intelligence(tm)

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] I want to get rid of user nobody

2002-12-05 Thread John H Terpstra
On Thu, 5 Dec 2002, Mark E. Nuell wrote:

 Where is this coming from, and what does it mean.

The nobody account is essential for all browsing functionality. Just can
get rid of it if you want to break samba completely.

The ICP$ share is used to allow a user to click on a machine in Windows
Explorer and then to see the shares on that machine.

What problems is this causing you? Please explain, we are not clairvoyant.
If you can help us to understand your problem then maybe someone can help
you find a solution.

Cheers,
John T.





 Samba version 2.2.4

 Service  uid  gid  pid machine

 --

 IPC$ nobody   nobody   26705   learncom-55 (192.168.62.173) Thu
 Dec  5 15:35:07 2002

 IPC$ nobody   nobody   26709   te2228-05 (192.168.34.55) Thu Dec
 5 15:35:11 2002

 IPC$ nobody   nobody   26704   ib1112-247 (192.168.62.100) Thu
 Dec  5 15:35:07 2002

 IPC$ nobody   nobody   26708   ib1112-357 (192.168.38.107) Thu
 Dec  5 15:35:11 2002

 IPC$ nobody   nobody   26702   learncom-11 (192.168.35.61) Thu
 Dec  5 15:35:06 2002

 machines tomomi_ozaki student  26702   learncom-11 (192.168.35.61)
 Thu Dec  5 15:35:16 2002

 IPC$ nobody   nobody   26703   te2228-11 (192.168.34.61) Thu Dec
 5 15:35:06 2002



 This is causing me great problems.

 Here is my config file..

 [global]

 workgroup = ACADEMIC

 netbios name = ACADEMIC-SERVER

 encrypt passwords = Yes

 log file = /var/log/samba/log.%m

 max log size = 50

 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

 guest ok = No

 interfaces =172.20.1.127/16

 os level = 64

 preferred master = True

 domain master = True

 domain logons = Yes

 #add user script = /usr/sbin/useradd -d /dev/nuell -g 100 -s
 /bin/false -M %u

 logon path = \\ACADEMIC-SERVER\machines\%m\profile

 #   local master = Yes

 dns proxy = No

 #   wins proxy = Yes

 wins server = 172.20.1.19

 #   remote announce = 192.168.32.0

 delete veto files = Yes

 veto files = /.AppleDouble/.AppleDesktop/Network Trash



 [netlogon]

 path = /usr/local/samba/lib/netlogon

 writeable = no

 guest ok = no

 write list = ntadmin





 [machines]

 comment = Profiles

 path = /home/machines

 valid users = @student @instructor @administrator @superuser
 @systemadmin

 writeable = yes

 create mask = 0775

 directory mask = 0775

 guest ok = No

 browseable = No

 locking = No



 Thanks in advance..



-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] 2.2.7 RH 8.0 Binary RPM's

2002-12-05 Thread John H Terpstra
On Thu, 5 Dec 2002, Peter LaComb wrote:

 After installing these rpm's, no swat executable can be found... I've built
 it from the sources and gotten it working, but is this something that needs
 to be corrected in the rpm? Has anyone else noticed this, or did I do
 something silly that I haven't realized yet?

If you used Red Hat's samba packages then you need to make sure that you
installed the package called 'samba-swat'. Red Hat choose to not install
SWAT by default.

If you used the samba-team package then it should be automatically
installed. Please let us know which you used.


- John T.
-- John H Terpstra Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] write_socket_data(54) errors

2002-12-05 Thread Harper, John T.

I looked all over the archives to find an answer to this issue with Samba
not loading on my RH7.0 machine.

It turns out that I had deleted the server's name from my /etc/hosts file.

I discovered that by tail -f  /var/log/samba/log.smb

when I saw the unknown host xxx, I checked /etc/hosts and volia! It
wasn't there.  I added the name back in, and restarted Samba.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Samba Performance question

2002-12-05 Thread Belgardt, Wolfgang








Dear all,



I have a difficult
Problem with samba 2.2.5, I hope everyone can help me.

My customer has
samba 2.2.5 running on a HP Alpha Server ES40 Cluster with Tru64 V5.1. The
share on this Server has 3.1
million files in 16000
directories.

Some one this
directories have 45000 files on it.

The problem is: if
we try a search a file from this big directory via an NT Client the response time is to large
for the the customer.

He has run an
similar application on a NT File server. NT responded after 1 sec and samba need 6 sec.

Can someone explain
me what I can do to increase the performance, please?





Kind
Regards / Mit freundlichen Grüssen 





Wolfgang Belgardt

Customer
Support Consultant



Hewlett-Packard
GmbH

Customer
Support

Bonsiepen
5

D-45136
Essen

Phone:
++49 (0) 201 2663 258

Fax:  ++49 (0) 201 2663 200

mobil:  +49 (0171 3357 256)

E-mail: [EMAIL PROTECTED]

http://www.hp.com/de

__

Hewlett-Packard GmbH

Geschäftsführer: Jörg Menno
Harms (Vorsitzender), Jürgen Banhardt, Wolfram Fischer,

Rainer Kaczmarczyk, Bärbel Schmidt, Fritz Schuller, Regine
Stachelhaus

Vorsitzender des
Aufsichtsrats: Heribert Schmitz 

Sitz der Gesellschaft:
Böblingen, Amtsgericht Böblingen HRB 4081










[Samba] Samba Tip´s

2002-12-05 Thread Roberto Lourenço
Hello all,

I´m trying to implement samba on some lab´s.

The networking enviroment is working ok, (my Domain is ok, the file
config.pol is ok, the script´s are running, etc...).

My question is...
I have some classrooms and the students have all their personal login and
home directory, but the student must to be created on booth sistems
(linux -passwd and Samba system), is it right?? and i want to distribute the
home directory of the students by their classess, doing that way the teacher
can get access to his students jobs clean and easy. so how i do that?

Sorry by my english

thank´s
...


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.422 / Virus Database: 237 - Release Date: 20/11/2002

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Problem with 95/98 and Outlook....

2002-12-05 Thread Hikaru Katayamma
I've got a problem where when we have to restart the samba server, if
everyone hasn't logged off, anyone running Outlook will have their files
corrupted.  Using a standard NT file server, this doesn't occur.

Anyone have a clue as to a fix for this?

Thanks

BTW: Using Samba 2.2.7





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] smbpasswd has password length problem with the 2.2.7 security patch

2002-12-05 Thread Chere Zhou
I am using samba 2.2.5, and the following patch Jerry outlined in his 2.2.7 
release notes.  I tested it against a W2k server (in mixed mode) which had a 
simple one char admin password, worked fine.   Recently I found that if the 
password is longer than 1 char, using smbpasswd -j dom -r svr -U admin, and 
then input password,  I get NT_STATUS_LOGON_FAILURE.  If I remove the patch, 
or keep the password as just 1 char, smbpasswd works fine.

I know the patch was originally for 2.2.6.  But since Jerry outlined a simple 
one for older versions and 2.2.6, I only applied the simple patch as below.  
Can somebody tell me what other changes I need to make for 2.2.5?  Anybody 
has a similar problem?


The following is a snippet of Jerry's 2.2.7 release email:

Patch for Samba versions 2.2.2 to 2.2.6
- ---

The following patch applies cleanly to the above Samba versions
and will fix the vulnerability for sites that do not wish to upgrade
to 2.2.7 at this time.

cut here-
 libsmb/smbencrypt.c.origTue Nov 19 17:21:57 2002
+++ libsmb/smbencrypt.c Tue Nov 19 17:22:12 2002
@@ -63,7 +63,7 @@
if(len  128)
len = 128;
/* Password must be converted to NT unicode - null terminated. */
-   dos_struni2((char *)wpwd, (const char *)passwd, 256);
+   dos_struni2((char *)wpwd, (const char *)passwd, len);
/* Calculate length in bytes */
len = strlen_w((const smb_ucs2_t *)wpwd) * sizeof(int16);
- ---cut here-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] mapping drive in XP hangs

2002-12-05 Thread Marc Wrubleski
Hello list,

I have been using samba (was last at 2.2.2) sucessfully for nearly two
years on my solaris systems as the file server to my pcs. Recently
(since last friday) my XP boxes cannot map a drive, and auto-mapped home
dirs cause a huge timeout of over 15 minutes!

Nothing has changed in my config file, nothing changed on the system.
Just to try something, today I upgraded to 2.2.7, but still the same
behavior.

I am completely out of ideas as to what to check. I have looked at the
log files, but found nothing of interest, presumably because It just
hangs, not fails.

Note that our Domain services are provided by separate NT Boxes, and so
the registry mods make no difference. 

Please, any ideas would be greatly appreciated.

-- 
Marc Wrubleski [EMAIL PROTECTED]
University of Calgary, Math  Stats Department

smb.conf:

[global]
   workgroup = MATH_DOMAIN
   guest account =
   log file = /usr/local/samba2.2.7/logs/log.%m
   hosts allow = xxx.xxx.61.0/255.255.255.0
   hosts deny = 0.0.0.0/0.0.0.0
   hide dot files = yes


[homes]
   comment = Home Directories
   browseable = no
   read only = no
   create mode = 0640
   directory mode = 0750

[public_html]
   comment = web published directory
   path = %H/public_html
   browseable = yes
   read only = no
   create mode = 0644
   directory mode = 0751


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] CLOSE YOUR NUMBER #1 SECURITY HOLE

2002-12-05 Thread Avatier . com
www.passwordbouncer.com/stophackers
After all the security measures taken to make your network impenetrable, there is one 
liability could undermine your entire operation.
Allowing weak network logon password policies on your network is like giving a 
stranger the keys to the front door of your home. Strict logon password policy is your 
first line of defense.
Password Bouncer delivers stronger password enforcement than Win2K/NT, by preventing 
users from selecting vulnerable passwords that can be easily guessed or cracked by 
hackers. Passwords are screened and validated against a 300,000-word English wordlist 
and a 4,000-word proper noun wordlist in addition to highly configurable password 
rules.
START DEFEATING HACKERS TODAY, DOWNLOAD YOUR FREE TRIAL NOW: 
www.passwordbouncer.com/stophackers
Remove yourself from our email list by:
Sending a blank email to the following address: [EMAIL PROTECTED]   


Re: [Samba] Samba/LDAP Authentication and SSL Conflicts

2002-12-05 Thread Bill Alexander
My solution: 

That part about the Samba authentication was the most confusing bit, as
others suggested: I completely agree with the replies I received that
the SSL shouldn't have had anything to do with it.  And, it turns out,
it didn't.

The machine in question had cached my account's authenticator.  When it
failed to contact the LDAP server (due to the SSL problem), it relied on
its own cache.  I incorrectly assumed I was authenticating - a deeper
study of my logs revealed that SSL was completely unrelated.  I didn't
even think of this until one of my users tried to authenticate and it
didn't work.

My problem with the machine not authenticating had to do with the secret
salt in /etc/samba/secrets.tdb - the new LDAP machine's account password
hash was different.  Very frustrating, but I wiped out the old one,
rejoined the machine to the domain, and voilla - it's fixed.

Thanks again for the responses.

- Bill


On Thu, 2002-12-05 at 13:55, Bill Alexander wrote:
 I'm having a problem with Samba/LDAP authentication for Windows boxen
 from my Samba PDC.  I've diagnosed as much as I can and fiddled with
the
 relevant settings I know of, but I'm not making any progress.  
 

REMAINDER DELETED

Bill Alexander [EMAIL PROTECTED]
Mission Research Corporation
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba Tip´s

2002-12-05 Thread Bradley W. Langhorst
On Thu, 2002-12-05 at 19:03, Roberto Lourenço wrote:
 Hello all,
 
 I´m trying to implement samba on some lab´s.
 
 The networking enviroment is working ok, (my Domain is ok, the file
 config.pol is ok, the script´s are running, etc...).
 
 My question is...
 I have some classrooms and the students have all their personal login and
 home directory, but the student must to be created on booth sistems
 (linux -passwd and Samba system), is it right?? 
yes that's right.
 and i want to distribute the
 home directory of the students by their classess, doing that way the teacher
 can get access to his students jobs clean and easy. so how i do that?
i don't understand that last part...
do you mean that you want all students in a class to have the same home
directory?
You could just write a small script to link all the student's files into
one directory for the teacher's convenience.

brad
-- 
Bradley W. Langhorst [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Profile problem (samba+ldap)

2002-12-05 Thread tin tinny
Hi,
I use samba-ldap-2.2.5-1rf.i386.rpm in redhat 8.0 as PDC.When I logon with win2000pro (SP2) I get a message in windows
"Windows cannot locate the server copy of your roaming profile and is attemptingto log you on with your local profile. Changes to the profile will notbe copied to the server when you logoff. Possible causes of this errorinclude network problems or insufficient security rights. If thisproblem persists, contact your network administrator. DETAIL - Accessis denied. " It seems as if the windows machine is trying to write theprofile but its getting permission denied like its doesn't have theauthority to write.
Please suggest me about solving this problem.
Thank you.With Yahoo! Mail you can get a bigger mailbox -- choose a size that fits your needs

[Samba] Re: Permissions problem

2002-12-05 Thread Thabu Pienaar





  Help Please
  
  When I try to connect from Win XP Pro to my Samba 
  Server, I get this error...
  
  "Samba is not accessible. You might not have 
  permissiont o use this network resource." (attached error gif). 
  
  I have a smbpasswd file created from 
  /etc/passwd, configured exactly like my XP username and password.
  
  Thanks
  
  
  Thabu 
  Pienaar*ComputerNetWitrivier / White 
  RiverSuid-Afrika / South Africa+27 (0) 83 349-6588
  


[Samba] smbclient stops getting files

2002-12-05 Thread Wolfgang Pesek
Dear Lists,
some weird problem:

i use smbclient withhin a script that fetches the complete harddisks from
some of our MS-Servers.

When using 2.2.1a and also 2.2.7 only the first share is downloaded, then
the script stops with smbclient on the prompt awaiting further instructions.
Fortunately the whole scripts works fine when using 2.2.3a (havent tested
any other version till now..)

Anybody else encountered this problem ?

kind regards

Wolfgang Pesek

net informationstechnologie
mmc kommunikationstechnologie
http://www.net-it.at
http://www.mmc.at
fon +43 2236 3903
fax +43 2236 3903-13



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] ACL issues still unresolved

2002-12-05 Thread Andrew Furey
(b) In said ACL properties dialog, the usernames displayed 
are the UNIX ones, not the ones converted with the username 
map option.

Why not use original Windows names and take users map out of the loop?

While a blank in user's name is strictly a no-no and all lower case is
preferable, most *nices can deal with names longer than 8 chars, 
although ls -l-listings may appear messy.

As for your (a) question, should we chase back your previous mails
to find out exactly what samba version on which platform you are
using, or can you discretely include that info in a mail?

Sorry, I should have specified - Samba 2.2.7 manually compiled with 
ACLs, on Debian unstable.


However, I have just this morning worked out both of those problems. For 
all the future Googlers out there who are banging their heads against 
the wall as much as I have been:

IF IN DOUBT, USE WINBIND.

Setting up winbind with the nsswitch.conf stuff works perfectly (as far 
as those two problems go).

Only problem I have now is working out how to preserve the ACLs on files 
 I copy from the W2k to the Samba machine. xcopy /o seems to be it, but 
it comes up with access denied and the file is empty, as well as 
having the default permissions (copying person is owner, etc). More 
Googling needed...

Thanks for your help, everyone.

--
ANDREW FUREY [EMAIL PROTECTED] - Sysadmin/developer for Terminus.
Providing online networks of Australian lawyers (http://www.ilaw.com.au)
and Linux experts (http://www.linuxconsultants.com.au) for instant help!
Disclaimer: http://www.terminus.net.au/disclaimer.html. GCS L+++ P++ t++

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Security = domain groups

2002-12-05 Thread tarkhun
Hi,
My Samba is include to my domain (security = domain)
Today i use Valid user to auth my user but i want use a 2002 group. I don't
find information about this
Can you help me ? thanks


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Patch for 3_0 configure.in ??

2002-12-05 Thread Volker.Lendecke
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi!

I've never done anything in configure.in. What about the following?

Index: configure.in
===
RCS file: /kunden/vl/cvs/samba/source/configure.in,v
retrieving revision 1.300.2.25
diff -u -r1.300.2.25 configure.in
- --- configure.in2002/12/04 19:47:01 1.300.2.25
+++ configure.in2002/12/05 10:43:37
@@ -3054,8 +3054,8 @@
 AC_MSG_RESULT(yes)
AC_DEFINE(WITH_WINBIND,1,[Whether to build winbind])
 
- -   EXTRA_BIN_PROGS=$EXTRA_BIN_PROGS bin/wbinfo$(EXEEXT)
- -   EXTRA_SBIN_PROGS=$EXTRA_SBIN_PROGS bin/winbindd$(EXEEXT)
+   EXTRA_BIN_PROGS=$EXTRA_BIN_PROGS bin/wbinfo$EXEEXT
+   EXTRA_SBIN_PROGS=$EXTRA_SBIN_PROGS bin/winbindd$EXEEXT
 if test x$BLDSHARED= xtrue; then
SHLIB_PROGS=$SHLIB_PROGS nsswitch/libnss_winbind.so
if test x$with_pam= xÿes; then

Volker

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Key-ID D32186CF, Fingerprint available: phone +49 551 370

iD8DBQE97y4QOmSXH9Mhhs8RAomsAKCQ3xR+vezghJkmK21n9YRAZNUHHgCaApda
4LzIdUvzupIdYJaG/ga6k8Q=
=zaJP
-END PGP SIGNATURE-



Re: 3.0 requires an admin account to join samba to a domain?

2002-12-05 Thread Rafal Szczesniak
On Wed, Dec 04, 2002 at 06:38:49PM -0600, Gerald (Jerry) Carter wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 On Thu, 5 Dec 2002, Rafal Szczesniak wrote:
 
   I found it.  Who came up with the function names?  They're horrible!
  
  Originally it was an attempt to follow underlying mechanism name.
  As 'net' gets general and therefore complicated tool, we getting farther
  from this intend. Perhaps synonyms could help, but only for a while. After
  that it would be a straight way to horrible mess.
  
  Maybe it's time to start 'net search key=...' ? ;-)
 
 I meant things like just_change_the_password()

Oh, it's being changed now, by me. I recently renamed the file and put
another trust-related function there. I'm also going to rename the
just_change_the_password() and (possibly) give it more general shape
to use it with domain trusts, as well.
In summary: I'm working there, right now :) ... and agree -- the names
have been horrible, so far.


-- 
cheers,
++
|Rafal 'Mimir' Szczesniak [EMAIL PROTECTED]   |
|*BSD, GNU/Linux and Samba  /
|__/



Re: Patch for 3_0 configure.in ??

2002-12-05 Thread Alexander Bokovoy
On Thu, Dec 05, 2002 at 11:44:36AM +0100, [EMAIL PROTECTED] wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Hi!
 
 I've never done anything in configure.in. What about the following?
This is correct. I'm also seeing these EXEEXT: no such file or directory
responses. $(EXEEXT) in /bin/sh != $(EXEEXT) in Make.

 
 Index: configure.in
 ===
 RCS file: /kunden/vl/cvs/samba/source/configure.in,v
 retrieving revision 1.300.2.25
 diff -u -r1.300.2.25 configure.in
 - --- configure.in2002/12/04 19:47:01 1.300.2.25
 +++ configure.in2002/12/05 10:43:37
 @@ -3054,8 +3054,8 @@
  AC_MSG_RESULT(yes)
 AC_DEFINE(WITH_WINBIND,1,[Whether to build winbind])
  
 - -   EXTRA_BIN_PROGS=$EXTRA_BIN_PROGS bin/wbinfo$(EXEEXT)
 - -   EXTRA_SBIN_PROGS=$EXTRA_SBIN_PROGS bin/winbindd$(EXEEXT)
 +   EXTRA_BIN_PROGS=$EXTRA_BIN_PROGS bin/wbinfo$EXEEXT
 +   EXTRA_SBIN_PROGS=$EXTRA_SBIN_PROGS bin/winbindd$EXEEXT
  if test x$BLDSHARED= xtrue; then
 SHLIB_PROGS=$SHLIB_PROGS nsswitch/libnss_winbind.so
 if test x$with_pam= xÑes; then
 

-- 
/ Alexander Bokovoy
---
Do not overtax your powers.



RE: Patch for 3_0 configure.in ??

2002-12-05 Thread Green, Paul
Rats. Missed this in testing. (My fault).  I think someone has fixed this
already by escaping the $-sign. The issue is controlling when the $(EXEEXT)
gets expanded.

PG

 -Original Message-
 From: Alexander Bokovoy [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, December 05, 2002 6:23 AM
 To: [EMAIL PROTECTED]
 Subject: Re: Patch for 3_0 configure.in ??
 
 
 On Thu, Dec 05, 2002 at 11:44:36AM +0100, 
 [EMAIL PROTECTED] wrote:
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
  
  Hi!
  
  I've never done anything in configure.in. What about the following?
 This is correct. I'm also seeing these EXEEXT: no such file 
 or directory
 responses. $(EXEEXT) in /bin/sh != $(EXEEXT) in Make.
 
  
  Index: configure.in
  ===
  RCS file: /kunden/vl/cvs/samba/source/configure.in,v
  retrieving revision 1.300.2.25
  diff -u -r1.300.2.25 configure.in
  - --- configure.in2002/12/04 19:47:01 1.300.2.25
  +++ configure.in2002/12/05 10:43:37
  @@ -3054,8 +3054,8 @@
   AC_MSG_RESULT(yes)
  AC_DEFINE(WITH_WINBIND,1,[Whether to build winbind])
   
  - -   EXTRA_BIN_PROGS=$EXTRA_BIN_PROGS bin/wbinfo$(EXEEXT)
  - -   EXTRA_SBIN_PROGS=$EXTRA_SBIN_PROGS bin/winbindd$(EXEEXT)
  +   EXTRA_BIN_PROGS=$EXTRA_BIN_PROGS bin/wbinfo$EXEEXT
  +   EXTRA_SBIN_PROGS=$EXTRA_SBIN_PROGS bin/winbindd$EXEEXT
   if test x$BLDSHARED= xtrue; then
  SHLIB_PROGS=$SHLIB_PROGS 
 nsswitch/libnss_winbind.so
  if test x$with_pam= xÑes; then
  
 
 -- 
 / Alexander Bokovoy
 ---
 Do not overtax your powers.
 



Re: Clean up of spool files

2002-12-05 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 4 Dec 2002, Zdenek Niederle wrote:

 I'm using Samba 2.2.5 and CUPS to handle printing on our network.  
 Unfortunately, the smbprn.xx spool files are not being cleaned up
 and instead are quickly filling the spool directory.  Is their a setting
 or option to ensure the files are cleaned up once sent to the printer?  
 I am aware that using a cron job would work but this can't be the best
 solution.

Known bug fixed in 2.2.6.  Please check the archives (and better to use 
[EMAIL PROTECTED] for general admin questions).




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2 SAMS Teach Yourself Samba in 24 Hours 2ed
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE9712sIR7qMdg1EfYRAu4AAJ4/1Cj8xQDF4bXXyliFM9BgMSsMTQCg6pfv
hSfR+0YHUlMLEUFknjkSLQw=
=IR2v
-END PGP SIGNATURE-




Re: 3.0 requires an admin account to join samba to a domain?

2002-12-05 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 5 Dec 2002, Rafal Szczesniak wrote:

 Oh, it's being changed now, by me. I recently renamed the file and put
 another trust-related function there. I'm also going to rename the
 just_change_the_password() and (possibly) give it more general shape to
 use it with domain trusts, as well. In summary: I'm working there, right
 now :) ... and agree -- the names have been horrible, so far.

It would be nice to settle on function names and change them as little as 
possible since people get used to grepping for certain strings to locate 
functionality.

And why did I get 4 copies of this mail?  I understand why I got 2, 
but 4?



cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2 SAMS Teach Yourself Samba in 24 Hours 2ed
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE972GRIR7qMdg1EfYRAr4pAJ9w6+j4D+hQUcLEgByrFZXULJUjmACghmZO
Kxtb8jsKxcs54dThqC4+FvU=
=37Pj
-END PGP SIGNATURE-




Clean up of spool files

2002-12-05 Thread Kurt Pfeifle
Zdenek Niederle wrote on Samba-digest:


Message: 1
From: Zdenek Niederle [EMAIL PROTECTED]
Organization: Collicutt Hanover
To: [EMAIL PROTECTED]
Subject: Clean up of spool files
Date: Wed, 4 Dec 2002 15:13:15 -0700

I'm using Samba 2.2.5 and CUPS to handle printing on our network.  
Unfortunately, the smbprn.xx spool files are not being cleaned up and 
instead are quickly filling the spool directory.  Is their a setting or 
option to ensure the files are cleaned up once sent to the printer?  I am 
aware that using a cron job would work but this can't be the best solution.

Thanks.


Hi, Zdenek,

you need to be aware, that the Samba print files pass thru 2
different spool directories. Once the incoming directory
managed by Samba, (set f.e. in the path = /var/spool/samba
directive in the [printers] section of smb.conf). Second is
the spool directory of your UNIX print subsystem. For CUPS it is
normally /var/spool/cups/, as set by the cupsd.conf directive
RequestRoot /var/spool/cups.

I am not sure, which one of your directories keeps the files.
From what you say, it is most likely the Samba part.

For the CUPS part, you may want to consult:

  http://localhost:631/sam.html#PreserveJobFiles and
  http://localhost:631/sam.html#PreserveJobHistory and
  http://localhost:631/sam.html#MaxJobs

There are the settings described for your CUPS daemon, which
could lead to completed job files not being deleted.

PreserveJobHistory Yes -- keeps some details of jobs in
cupsd's mind (well it keeps the c12345, c12346 etc. files
in the CUPS spool directory, which do a similar job as the
old-fashioned BSD-LPD control files). This is set to Yes
as a default.

PreserveJobFiles Yes -- keeps the job files themselves in
cupsd's mind (well it keeps the d12345, d12346 etc. files
in the CUPS spool directory...). This is set to No as the
CUPS default.

MaxJobs 500 -- this directive controls the maximum number
of jobs that are kept in memory. Once the number of jobs
reaches the limit, the oldest completed job is automatically
purged from the system to make room for the new one. If all
of the known jobs are still pending or active then the new
job will be rejected. Setting the maximum to 0 disables this
functionality. The default setting is 0.

(There are also additional settings for MaxJobsPerUser and
MaxJobsPerPrinter...)

For everything to work as announced, you need to have three
things:

  * a Samba-smbd which is compiled against libcups (Check
on Linux by running ldd `which smbd`)

  * a Samba-smb.conf setting of printing = cups

  * another Samba-smb.conf setting of printcap = cups

Note, that in this case all other manually set printing-related
commands (like print command, lpq command, lprm command,
lppause command or lpresume command) are ignored and they
should normally have no influence what-so-ever on your printing.

If you want to do things manually, replace the printing = cups
by printing = bsd. Then your manually set commands may work
(haven't tested this), and a print command = lp -d %P %s; rm %s
may do what you need.

You forgot to mention the CUPS version you're using. If you did
set things up as described in the man pages, then the Samba
spool files should be deleted. Otherwise it may be a bug. On
the CUPS side, you can control the behaviour as described
above.

If you have more problems, post the output of these commands:

  grep -v ^# /etc/cups/cupsd.conf | grep -v ^$
  grep -v ^# /etc/samba/smb.conf | grep -v ^$ | grep -v ^;

(adapt paths as needed). These commands sanitize the files
and cut out the empty lines and lines with comments, providing
the naked settings in a compact way.

Cheers,
Kurt




Re: 3.0 requires an admin account to join samba to a domain?

2002-12-05 Thread Rafal Szczesniak
On Thu, Dec 05, 2002 at 08:24:17AM -0600, Gerald (Jerry) Carter wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 On Thu, 5 Dec 2002, Rafal Szczesniak wrote:
 
  Oh, it's being changed now, by me. I recently renamed the file and put
  another trust-related function there. I'm also going to rename the
  just_change_the_password() and (possibly) give it more general shape to
  use it with domain trusts, as well. In summary: I'm working there, right
  now :) ... and agree -- the names have been horrible, so far.
 
 It would be nice to settle on function names and change them as little as 
 possible since people get used to grepping for certain strings to locate 
 functionality.

Maybe. I don't know yet how far it is possible. Perhaps putting former xyz()
function in comments could be of some help for grepping the code ?
I don't assume, I'll change the function names, for sure. It's just that
they're quite specific.

 And why did I get 4 copies of this mail?  I understand why I got 2, 
 but 4?

Huh ? That's a surprise. AFAIR it was addressed to you, Jim and
the mailing list.


-- 
cheers,
++
|Rafal 'Mimir' Szczesniak [EMAIL PROTECTED]   |
|*BSD, GNU/Linux and Samba  /
|__/



smbclient core dump

2002-12-05 Thread Patrick Welche
I can't reproduce that core dump I was having with today's code :-)

Cheers,

Patrick



[homes] share

2002-12-05 Thread Patrick Welche
The following used to work with several months old code..

# Share Definitions ==
[prlw1]
   comment = Windoze transfer
   path = /usr/windoze
   valid users = prlw1
   browseable = no
   writable = yes 
   guest ok = no

[homes]
   comment = Home Directories
   browseable = no
   writable = yes


Now when I smbclient //localhost/prlw1 I end up in my home directory
/home/prlw1 rather than in /usr/windoze, so it seems the [prlw1] share
isn't being matched, and as prlw1 is a valid userid it is then matched
to [homes]. Any thoughts on how I could debug this?

Cheers,

Patrick



Re: [homes] share

2002-12-05 Thread Richard Sharpe
On Thu, 5 Dec 2002, Patrick Welche wrote:

 The following used to work with several months old code..
 
 # Share Definitions ==
 [prlw1]
comment = Windoze transfer
path = /usr/windoze
valid users = prlw1
browseable = no
writable = yes 
guest ok = no
 
 [homes]
comment = Home Directories
browseable = no
writable = yes
 
 
 Now when I smbclient //localhost/prlw1 I end up in my home directory
 /home/prlw1 rather than in /usr/windoze, so it seems the [prlw1] share
 isn't being matched, and as prlw1 is a valid userid it is then matched
 to [homes]. Any thoughts on how I could debug this?

Which version of the code? Sounds like someone changed the order of the 
test. Previously, it used to check for a share of that name, and if not 
found, checked for [homes] and then [printers].

Regards
-
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com




Re: [homes] share

2002-12-05 Thread Patrick Welche
On Thu, Dec 05, 2002 at 12:39:02PM -0800, Richard Sharpe wrote:
 On Thu, 5 Dec 2002, Patrick Welche wrote:
...
  Now when I smbclient //localhost/prlw1 I end up in my home directory
  /home/prlw1 rather than in /usr/windoze, so it seems the [prlw1] share
  isn't being matched, and as prlw1 is a valid userid it is then matched
  to [homes]. Any thoughts on how I could debug this?
 
 Which version of the code? Sounds like someone changed the order of the 
 test. Previously, it used to check for a share of that name, and if not 
 found, checked for [homes] and then [printers].

CVS code from this evening (Dec  5 17:53 GMT)

Cheers,

Patrick



Re: Patch for 3_0 configure.in ??

2002-12-05 Thread Tim Potter
On Thu, Dec 05, 2002 at 11:44:36AM +0100, [EMAIL PROTECTED] wrote:

 I've never done anything in configure.in. What about the following?

I think I fixed this in head already.  I'll have to do some janitorial
merging when I get in to work.  I'm surprised I haven't been busted
already by Jeremy.  (-:

Now where was that mop and bucket???


Tim.



Win2K sp3 and Samba 3.0: status?

2002-12-05 Thread Steve Langasek
Hello,

When I try to join a Win2K SP3 server to a Samba 3.0alpha21-controlled NT
domain, I get the error 'The parameter is incorrect'.  I understand that
SP3 is known to suffer problems not present with SP2, and the usual
suggestion seems to be to set 'use spnego = no' in smb.conf.  However,
this setting does not appear to have any effect, and attempting to join
the domain gives the same error message.

Does anyone have any insights into the status of SP3 compatibility in
Samba?  Would network traces or log files be of use to anyone?

-- 
Steve Langasek
postmodern programmer



msg04804/pgp0.pgp
Description: PGP signature


Re: Win2K sp3 and Samba 3.0: status?

2002-12-05 Thread Richard Sharpe
On Thu, 5 Dec 2002, Steve Langasek wrote:

 Hello,
 
 When I try to join a Win2K SP3 server to a Samba 3.0alpha21-controlled NT
 domain, I get the error 'The parameter is incorrect'.  I understand that
 SP3 is known to suffer problems not present with SP2, and the usual
 suggestion seems to be to set 'use spnego = no' in smb.conf.  However,
 this setting does not appear to have any effect, and attempting to join
 the domain gives the same error message.
 
 Does anyone have any insights into the status of SP3 compatibility in
 Samba?  Would network traces or log files be of use to anyone?
 
These will be useful. Network traces, that is. However,  you will want to 
turn off the two signseal registry entries, and reboot the client before 
joining.
 
Regards
-
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com




Re: Win2K sp3 and Samba 3.0: status?

2002-12-05 Thread Steve Langasek
On Thu, Dec 05, 2002 at 02:26:08PM -0800, Richard Sharpe wrote:

 When I try to join a Win2K SP3 server to a Samba 3.0alpha21-controlled NT
 domain, I get the error 'The parameter is incorrect'.  I understand that
 SP3 is known to suffer problems not present with SP2, and the usual
 suggestion seems to be to set 'use spnego = no' in smb.conf.  However,
 this setting does not appear to have any effect, and attempting to join
 the domain gives the same error message.

 Does anyone have any insights into the status of SP3 compatibility in
 Samba?  Would network traces or log files be of use to anyone?

 These will be useful. Network traces, that is. However,  you will want to 
 turn off the two signseal registry entries, and reboot the client before 
 joining.

Good news:  I've gotten the server to join, and even have some idea of
the source of the trouble.  The server was joined to an AD realm
initially, and we were trying to transition directly to the Samba domain.
If I parted from the AD realm first and rebooted, I was then able to join
the domain.

When parting the AD realm, Win2K did give a warning that it failed to
delete the machine account, but this was non-fatal.  I'm wondering if
this was the real cause of the failure before, in which case the network
trace I sent you probably wouldn't be particularly useful.  Is there any
concerted effort to document such issues, where I might forward this
hint?

-- 
Steve Langasek
postmodern programmer



msg04806/pgp0.pgp
Description: PGP signature


Re: Win2K sp3 and Samba 3.0: status?

2002-12-05 Thread Jim McDonough

Good news:  I've gotten the server to join, and even have some idea of
the source of the trouble.  The server was joined to an AD realm
initially, and we were trying to transition directly to the Samba domain.
If I parted from the AD realm first and rebooted, I was then able to join
the domain.

When parting the AD realm, Win2K did give a warning that it failed to
delete the machine account, but this was non-fatal.  I'm wondering if
this was the real cause of the failure before, in which case the network
trace I sent you probably wouldn't be particularly useful.  Is there any
concerted effort to document such issues, where I might forward this
hint?
Very interesting.  This was the same setup Andrew Bartlett was saying
didn't work for him at the CIFS conference.  Seems like you have to leave
the domain first...which wasn't the case with NT.

I wonder if there's something we're missing in this join that would enable
us to do it without leaving first...


Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA

[EMAIL PROTECTED]
[EMAIL PROTECTED]

Phone: (207) 885-5565
IBM tie-line: 776-9984





RE: Samba for OpenVMS 6.2-1H3

2002-12-05 Thread Michael D. Ober
The performance problems with Samba VMS 1.19.x were so severe that they
crashed the DEC IP stack on our Alpha VMS 7.2-1 system when I attempted to
use Windows 2000 clients and servers against them.

Mike Ober.


-Original Message-
From: John E. Malmberg [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, December 04, 2002 6:17 PM
To: [EMAIL PROTECTED]
Subject: Re: Samba for OpenVMS 6.2-1H3


the http://www.samba.org site.

Be aware that there is a protocol incompatability between Windows 2000 
and later and SAMBA versions prior to 2.0.7.  It sometimes causes severe 
performance delays.

-John
[EMAIL PROTECTED]
Personal Opinion Only




Re: CVS update: samba/source/nmbd

2002-12-05 Thread Volker.Lendecke
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

 Could this possibly fix our problems with joining a domain from W2kSP3
 without
 an explicit realm set?
 It should...

Sorry, doesn't really.

Volker

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Key-ID D32186CF, Fingerprint available: phone +49 551 370

iD8DBQE972SgOmSXH9Mhhs8RAsxXAJ9pT/wwezdgZlo3XI8kcI69BFecSgCfcaAf
nFwMwp+l7KDSZjeNxy3Jk8A=
=GAJ6
-END PGP SIGNATURE-



CVS update: samba/source/registry

2002-12-05 Thread jmcd

Date:   Thu Dec  5 19:11:40 2002
Author: jmcd

Update of /home/cvs/samba/source/registry
In directory dp.samba.org:/tmp/cvs-serv12890/registry

Modified Files:
reg_objects.c 
Log Message:
Add some const

Revisions:
reg_objects.c   1.2 = 1.3

http://www.samba.org/cgi-bin/cvsweb/samba/source/registry/reg_objects.c?r1=1.2r2=1.3



CVS update: samba/source/registry

2002-12-05 Thread jmcd

Date:   Thu Dec  5 19:12:19 2002
Author: jmcd

Update of /home/cvs/samba/source/registry
In directory dp.samba.org:/tmp/cvs-serv13141/registry

Modified Files:
  Tag: SAMBA_3_0
reg_objects.c 
Log Message:
Add some const

Revisions:
reg_objects.c   1.1.4.2 = 1.1.4.3

http://www.samba.org/cgi-bin/cvsweb/samba/source/registry/reg_objects.c?r1=1.1.4.2r2=1.1.4.3



CVS update: samba/source/libads

2002-12-05 Thread jmcd

Date:   Thu Dec  5 19:13:20 2002
Author: jmcd

Update of /home/cvs/samba/source/libads
In directory dp.samba.org:/tmp/cvs-serv13409/libads

Modified Files:
ldap_printer.c 
Log Message:
More printer data to publish

Revisions:
ldap_printer.c  1.13 = 1.14

http://www.samba.org/cgi-bin/cvsweb/samba/source/libads/ldap_printer.c?r1=1.13r2=1.14



CVS update: samba/source/printing

2002-12-05 Thread jmcd

Date:   Thu Dec  5 19:13:20 2002
Author: jmcd

Update of /home/cvs/samba/source/printing
In directory dp.samba.org:/tmp/cvs-serv13409/printing

Modified Files:
nt_printing.c 
Log Message:
More printer data to publish

Revisions:
nt_printing.c   1.237 = 1.238

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/nt_printing.c?r1=1.237r2=1.238



CVS update: samba/source/include

2002-12-05 Thread jmcd

Date:   Thu Dec  5 19:13:40 2002
Author: jmcd

Update of /home/cvs/samba/source/include
In directory dp.samba.org:/tmp/cvs-serv13505/include

Modified Files:
  Tag: SAMBA_3_0
nt_printing.h 
Log Message:
More printer data to publish

Revisions:
nt_printing.h   1.22.2.4 = 1.22.2.5

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/nt_printing.h?r1=1.22.2.4r2=1.22.2.5



CVS update: samba/source/libads

2002-12-05 Thread jmcd

Date:   Thu Dec  5 19:13:40 2002
Author: jmcd

Update of /home/cvs/samba/source/libads
In directory dp.samba.org:/tmp/cvs-serv13505/libads

Modified Files:
  Tag: SAMBA_3_0
ldap_printer.c 
Log Message:
More printer data to publish

Revisions:
ldap_printer.c  1.7.2.6 = 1.7.2.7

http://www.samba.org/cgi-bin/cvsweb/samba/source/libads/ldap_printer.c?r1=1.7.2.6r2=1.7.2.7



CVS update: samba/source/printing

2002-12-05 Thread jmcd

Date:   Thu Dec  5 19:13:40 2002
Author: jmcd

Update of /home/cvs/samba/source/printing
In directory dp.samba.org:/tmp/cvs-serv13505/printing

Modified Files:
  Tag: SAMBA_3_0
nt_printing.c 
Log Message:
More printer data to publish

Revisions:
nt_printing.c   1.204.2.12 = 1.204.2.13

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/nt_printing.c?r1=1.204.2.12r2=1.204.2.13



CVS update: samba/source/printing

2002-12-05 Thread jra

Date:   Thu Dec  5 22:32:15 2002
Author: jra

Update of /data/cvs/samba/source/printing
In directory dp.samba.org:/tmp/cvs-serv26707/printing

Modified Files:
  Tag: SAMBA_3_0
printfsp.c printing.c 
Log Message:
Fix debugs for rap mapping. Delete job on map fail.
Jeremy.


Revisions:
printfsp.c  1.17.2.3 = 1.17.2.4

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/printfsp.c?r1=1.17.2.3r2=1.17.2.4
printing.c  1.139.2.17 = 1.139.2.18

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/printing.c?r1=1.139.2.17r2=1.139.2.18



CVS update: samba/docs/textdocs

2002-12-05 Thread jht

Date:   Thu Dec  5 22:38:55 2002
Author: jht

Update of /home/cvs/samba/docs/textdocs
In directory dp.samba.org:/tmp/cvs-serv28290

Modified Files:
  Tag: SAMBA_3_0
CUPS-PrintingInfo.txt 
Log Message:
Added another email - this stuff needs to go into a new chapter
in the Entire-HOWTO-Collection.


Revisions:
CUPS-PrintingInfo.txt   1.2.4.3 = 1.2.4.4

http://www.samba.org/cgi-bin/cvsweb/samba/docs/textdocs/CUPS-PrintingInfo.txt?r1=1.2.4.3r2=1.2.4.4



CVS update: samba/source/printing

2002-12-05 Thread jra

Date:   Thu Dec  5 22:39:21 2002
Author: jra

Update of /data/cvs/samba/source/printing
In directory dp.samba.org:/tmp/cvs-serv26713/printing

Modified Files:
  Tag: APPLIANCE_HEAD
printfsp.c printing.c 
Log Message:
Fix debugs for rap mapping. Delete job on map fail. Final fixes for CR#1265.
Jeremy.


Revisions:
printfsp.c  1.5.2.10 = 1.5.2.11

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/printfsp.c?r1=1.5.2.10r2=1.5.2.11
printing.c  1.66.2.98 = 1.66.2.99

http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/printing.c?r1=1.66.2.98r2=1.66.2.99



CVS update: samba/source

2002-12-05 Thread tpot

Date:   Thu Dec  5 22:56:25 2002
Author: tpot

Update of /data/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv32622

Modified Files:
  Tag: SAMBA_3_0
Makefile.in 
Log Message:
Merge from appliance, Revision 1.223.2.41:

Add -a flag to setup.py when making python_clean.  This will delete the
python compiled binaries and .so files rather than only the temporary
compile directory.

This fixes a PSA build bug.

Merge from HEAD,  Revision 1.587:

Link less with smbmnt and smbumount.  Also change from a pstrcpy() to a
strncpy() to make it clear that we must operate on a PATH_MAX sized buffer.

Andrew Bartlett

Plus some bits from the AC_SUBST target cleanup that got missed last time
I ran dirdiff.


Revisions:
Makefile.in 1.468.2.25 = 1.468.2.26

http://www.samba.org/cgi-bin/cvsweb/samba/source/Makefile.in?r1=1.468.2.25r2=1.468.2.26



CVS update: samba/source

2002-12-05 Thread tpot

Date:   Thu Dec  5 23:02:18 2002
Author: tpot

Update of /data/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv3631

Modified Files:
  Tag: SAMBA_3_0
configure.in 
Log Message:
Merge from HEAD,  Revision 1.379:

Defaulting python breaks the clean target it python isn't installed.

Merge from HEAD,  Revision 1.378:

Fixes for EXEEXT - must use \$ signs when you want an actual $ sign to
be used.


Revisions:
configure.in1.300.2.25 = 1.300.2.26

http://www.samba.org/cgi-bin/cvsweb/samba/source/configure.in?r1=1.300.2.25r2=1.300.2.26



CVS update: samba/source/python

2002-12-05 Thread tpot

Date:   Thu Dec  5 23:05:28 2002
Author: tpot

Update of /data/cvs/samba/source/python
In directory dp.samba.org:/tmp/cvs-serv4095

Modified Files:
  Tag: SAMBA_3_0
setup.py py_tdbpack.c 
Log Message:
Merge from HEAD:

FUNCTION_MACRO change broke the Python modules.

Also fix up string pasting (I thought this should only be a warning?)


Revisions:
setup.py1.5.2.2 = 1.5.2.3

http://www.samba.org/cgi-bin/cvsweb/samba/source/python/setup.py?r1=1.5.2.2r2=1.5.2.3
py_tdbpack.c1.1.2.6 = 1.1.2.7

http://www.samba.org/cgi-bin/cvsweb/samba/source/python/py_tdbpack.c?r1=1.1.2.6r2=1.1.2.7



CVS update: samba/source/smbd

2002-12-05 Thread tpot

Date:   Thu Dec  5 23:30:48 2002
Author: tpot

Update of /data/cvs/samba/source/smbd
In directory dp.samba.org:/tmp/cvs-serv9207/smbd

Modified Files:
  Tag: SAMBA_3_0
build_options.c 
Log Message:
Merge from HEAD:

Remove FILE_MACRO as __FILE__ is ANSI C.


Revisions:
build_options.c 1.9.2.2 = 1.9.2.3

http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/build_options.c?r1=1.9.2.2r2=1.9.2.3



CVS update: samba/source/include

2002-12-05 Thread tpot

Date:   Thu Dec  5 23:30:49 2002
Author: tpot

Update of /data/cvs/samba/source/include
In directory dp.samba.org:/tmp/cvs-serv9207/include

Modified Files:
  Tag: SAMBA_3_0
debug.h config.h.in 
Log Message:
Merge from HEAD:

Remove FILE_MACRO as __FILE__ is ANSI C.


Revisions:
debug.h 1.13.2.3 = 1.13.2.4

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/debug.h?r1=1.13.2.3r2=1.13.2.4
config.h.in 1.166.2.13 = 1.166.2.14

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/config.h.in?r1=1.166.2.13r2=1.166.2.14



CVS update: samba/source

2002-12-05 Thread tpot

Date:   Thu Dec  5 23:30:49 2002
Author: tpot

Update of /data/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv9207

Modified Files:
  Tag: SAMBA_3_0
configure.in acconfig.h 
Log Message:
Merge from HEAD:

Remove FILE_MACRO as __FILE__ is ANSI C.


Revisions:
configure.in1.300.2.26 = 1.300.2.27

http://www.samba.org/cgi-bin/cvsweb/samba/source/configure.in?r1=1.300.2.26r2=1.300.2.27
acconfig.h  1.83.2.8 = 1.83.2.9

http://www.samba.org/cgi-bin/cvsweb/samba/source/acconfig.h?r1=1.83.2.8r2=1.83.2.9